rare crash: Win8.1 x64 + TC 8.52a x64

[mhanor]

Host Windows 8.1 x64, Total Commander 8.52a x64
I think Total Commander was in the background when it crashed. I have the full crash memory dump, if you need it.

drive.google.com/file/d/0B1LFjoQAxESOUm9oNTZJQ2h0ak0/view?usp=sharing

[ghisler(Author)]

Here is the debug analysis. It seems that something tries to call a function in comctl32.dll, but the dll has already been unloaded. Total Commander links directly to comctl32.dll, so it shouldn't be unloaded until TC is closed...

0:004> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************


FAULTING_IP:
comctl32+d1b0
00007ffd`e1c1d1b0 ?? ???

EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00007ffde1c1d1b0 (<Unloaded_comctl32.dll>+0x000000000000d1b0)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000008
Parameter[1]: 00007ffde1c1d1b0
Attempt to execute non-executable address 00007ffde1c1d1b0

PROCESS_NAME: TOTALCMD64.EXE

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

EXCEPTION_PARAMETER1: 0000000000000008

EXCEPTION_PARAMETER2: 00007ffde1c1d1b0

WRITE_ADDRESS: 00007ffde1c1d1b0

FOLLOWUP_IP:
TOTALCMD64+10af3d
00000000`0050af3d ?? ???

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG: 400

IP_MODULE_UNLOADED:
comctl32+d1b0
00007ffd`e1c1d1b0 ?? ???

FAULTING_THREAD: 000000000000077c

BUGCHECK_STR: APPLICATION_FAULT_BAD_INSTRUCTION_PTR_SOFTWARE_NX_FAULT_INVALID_FILL_PATTERN_ffffffff

PRIMARY_PROBLEM_CLASS: BAD_INSTRUCTION_PTR_INVALID_FILL_PATTERN_ffffffff

DEFAULT_BUCKET_ID: BAD_INSTRUCTION_PTR_INVALID_FILL_PATTERN_ffffffff

LAST_CONTROL_TRANSFER: from 000000000050af3d to 00007ffde1c1d1b0

STACK_TEXT:
00000000`0d5ee8a8 00000000`0050af3d : 00000000`0d5ee970 00000000`0040c825 00000000`00000000 00000000`00000000 : <Unloaded_comctl32.dll>+0xd1b0
00000000`0d5ee8b0 00000000`0d5ee970 : 00000000`0040c825 00000000`00000000 00000000`00000000 00000000`00000000 : TOTALCMD64+0x10af3d
00000000`0d5ee8b8 00000000`0040c825 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xd5ee970
00000000`0d5ee8c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : TOTALCMD64+0xc825


STACK_COMMAND: ~4s; .ecxr ; kb

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: TOTALCMD64+10af3d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TOTALCMD64

IMAGE_NAME: TOTALCMD64.EXE

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAILURE_BUCKET_ID: BAD_INSTRUCTION_PTR_INVALID_FILL_PATTERN_ffffffff_c0000005_TOTALCMD64.EXE!Unknown

BUCKET_ID: X64_APPLICATION_FAULT_BAD_INSTRUCTION_PTR_SOFTWARE_NX_FAULT_INVALID_FILL_PATTERN_ffffffff_TOTALCMD64+10af3d

Followup: MachineOwner
---------

[mhanor]

Diskinternals Disk Reader for TC was the only 3rd party plugin that was installed. I have removed it. I wasn't actively using it when it crashed and TC wasn't running as Administrator (required by the Diskinternals Reader plugin). You can close this thread if you think it's not TC's fault.

[ghisler(Author)]

I cannot say what is unloading the comctl32.dll - it may be a plugin, or an Explorer extension, or a bug in TC. Please report again in this thread if it crashes again.