Lightroom: LR 3.6.0.10 generates STATUS_HEAP_CORRUPTION

  • 1
  • Problem
  • Updated 7 years ago
  • (Edited)
I created a new catalog, Lightroom restarted, I did not add anything and I exited Lightroom using the X in the top right corner of the window. My WinDBG popped up with the heap error message. I have the log and a program dump - please let me know if they would be helpful. Pasted below is the stack trace from the WinDBG log.

Thanks,
Jurek

0:000> kb
RetAddr : Args to Child : Call Site
00000000`77534736 : 00000000`00000002 00000000`00000023 00000000`005260f0 00000000`00000003 : ntdll!RtlReportCriticalFailure+0x62
00000000`77535942 : 00000000`6d2f0174 000007fe`e3ffaeb5 00000000`08e3cdd8 00000000`71b920fb : ntdll!RtlpReportHeapFailure+0x26
00000000`775375f4 : 00000000`006b0000 00000000`00000000 00000000`00000000 000007fe`e3ffaeb5 : ntdll!RtlpHeapHandleError+0x12
00000000`774ddcb7 : 00000000`0bf1a6c8 00000000`006b0000 00000000`0bf1a6c8 000007fe`e3fddbcb : ntdll!RtlpLogHeapFailure+0xa4
00000000`7722301a : 00000000`00000000 00000000`0bf1a6c8 00000000`00000000 00000000`00000001 : ntdll! ?? ::FNODOBFM::`string'+0x10c7c
00000000`71bd8d94 : ffffffff`fffffffe 00000000`058617d8 00000000`00000001 00000000`00000001 : kernel32!HeapFree+0xa
000007fe`e37b2366 : 00000000`0bf1a6c8 00000000`0bf1a6c8 00000001`4001caf0 00000000`00000000 : MSVCR100!free+0x1c
000007fe`e37bc30b : 00000000`00577238 00000000`00577238 00000000`00000020 00000000`0536cde0 : ui!AgViewManifestationWin::operator=+0x166
000007fe`e3fe9ad7 : 00000000`00577238 00000000`00000000 000007fe`e400ff48 00000000`00000000 : ui!AgViewManifestationWin::InSecondaryWindow+0x72b
000007fe`e3fe9db2 : 00000000`09c267e0 000007fe`00000000 00000000`00577238 00000000`0b43fe20 : substrate!lua_getinfo+0x17d7
000007fe`e3fec0ca : 00000000`01ae3eef 00000000`00526050 00000000`0140806f 000007fe`e3f90000 : substrate!lua_getinfo+0x1ab2
000007fe`e3fec7a6 : 00000000`00526050 00000000`00577238 000007fe`e3f90000 00000000`0140806f : substrate!lua_yield+0x20ea
000007fe`e3fecb58 : 00000000`00577238 00000000`00526050 00000000`0012fd20 00000000`0b5b2900 : substrate!lua_yield+0x27c6
000007fe`e3fde4d3 : 00000000`00526050 00000000`00000020 00000000`00000000 00000000`00000000 : substrate!lua_yield+0x2b78
000007fe`e3fe1b3b : 00000000`00000002 00000000`00000000 00000000`09c267d0 00000000`00577238 : substrate!lua_gc+0x73
000007fe`e3fe9ad7 : 00000000`00577238 00000001`40000000 00000000`00000010 00000000`0052c570 : substrate!luaL_newstate+0xfeb
000007fe`e3fe9db2 : 00000001`4001caf0 00000000`ffffffff 00000000`00577238 000007fe`e3fddbcb : substrate!lua_getinfo+0x17d7
000007fe`e3fde176 : 00000000`00000000 00000000`00000000 00000000`0052c5a0 00000001`00000004 : substrate!lua_getinfo+0x1ab2
00000001`40007095 : 00000000`00577238 00000000`00000000 00000000`00577238 00000001`40000000 : substrate!lua_call+0x26
00000000`6d457548 : 00000000`0000000a 00000001`40000000 00000000`00000000 00000000`003043b4 : lightroom!GetAppInstance+0x1625
00000001`40005362 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : mfc100u!AfxWinMain+0xac
00000000`7721652d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : lightroom!AgDataProvider::GetProviderType+0x1112
00000000`7749c521 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
0:000> .dump /ma C:\Data\Temp\Lightroom.dmp
Creating C:\Data\Temp\Lightroom.dmp - mini user dump
Dump successfully written
Photo of Jurek Makowiecki

Jurek Makowiecki

  • 2 Posts
  • 0 Reply Likes

Posted 7 years ago

  • 1
Photo of Chris Cox

Chris Cox

  • 20280 Posts
  • 818 Reply Likes
Oooh, a helpful windows crash dump -- THANK YOU!

The Lightroom engineers should follow up with you soon.
Photo of Dan Tull

Dan Tull, Employee

  • 172 Posts
  • 38 Reply Likes
I'd be interested in getting a copy of the dmp file you created to see if I can pick some useful clues out of it.

I can send you a note privately to sort out how to transfer the file.

Thanks! -- DT
Photo of Jurek Makowiecki

Jurek Makowiecki

  • 2 Posts
  • 0 Reply Likes
I sent you an email with details. The dump file is on a web site available for download.
Photo of Dan Tull

Dan Tull, Employee

  • 172 Posts
  • 38 Reply Likes
Excellent. I received the dump file. This looks like the signature of a bug that's been eluding me for a while. I see it every so often, usually when rapidly launching/quitting the app. It's related to a mistake someplace in the way the lifecycle of UI components and their Lua counterparts are bound. I think somehow we wind up destroying the same object twice, but I haven't quite wrapped my head around how it manages to happen.

Thanks for passing along the dump, I'll see if it sheds any new light on the this sneaky bug.