MIME-Version: 1.0
In-Reply-To: <20100812114508.GA14202@calimero.vinschen.de>
References: <AANLkTi=xgJzA5-pMz2mkg-b0CVf4PwFeYCy3RfA4NHgf AT mail DOT gmail DOT com>	<20100812114508 DOT GA14202 AT calimero DOT vinschen DOT de>
Date: Fri, 13 Aug 2010 15:58:08 +1200
Message-ID: <AANLkTi=eZHET3-Rhmnezw2pJ=gHxyGaQOr8vmOE7L08m@mail.gmail.com>
Subject: Re: Windows Server 2008 64-bit setup.exe/bash problem - Amazon Cloud
From: Dave Cottlehuber <dave AT muse DOT net DOT nz>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

> For testing, I went out of my way and installed a local x64 Windows
> Server 2008 Datacenter machine. =A0Apart from updating to SP2 plus all the
> latest Microsoft patches and configuring to match my environment, I have
> not changed anything else, nor did I install any third-party software.
>
> Then I installed a Cygwin Base install using the latest setup.exe.
>
> It went 100% well. =A0No fails in postinstall scripts. =A0An interactive
> bash started just fine.
>
> Then I removed every trace of Cygwin from the machine and installed
> Terminal Services, which is known to interfere badly with Cygwin
> applications which don't have the TS-awareness flag set in the PE/COFF
> header. =A0I also installed any
>
> Then I installed a Cygwin Base install using the latest setup.exe.
>
> It went 100% well. =A0No fails in postinstall scripts. =A0An interactive
> bash started just fine.
>
>> http://dch.posterous.com/cygwin-dumps-core-on-windows-2008-r1sp2-on-ec
>
> So, this muse-ing of yours is not correct.
>
> To me this implies that the Amazon Cloud VMs have some BLODA installed
> by default. =A0I'm not going to check this voluntarily. =A0I suggest that
> somebody who wants to run Cygwin on such a machine investigates this
> further, or just asks Amazon to fix this and hope for the best.
>
>
> Corinna

Thanks Corinna. I've not got w2008 server datacenter version to
install so that's pretty useful correlation - there must be something
funny in the EC2 AMI builds.

Others have encountered this too & blamed a Xen bug - not sure if this
is a good interpretation but I can confirm that msys also fails with a
similar issue.

http://article.gmane.org/gmane.comp.emulators.xen.devel/73667
http://developer.amazonwebservices.com/connect/message.jspa?messageID=3D163=
059&tstart=3D0

All that aside, I have done some further testing to see what security
features that are disabled in Windows 7/Vista & are enabled in WS2008
DC edition:

- disabling the annoying UAC
- disabling DEP via bcdedit.exe /set {current} nx AlwaysOff
- disabling SEHOP (MS kb956607)
- disabling ASLR  (ref
http://www.google.com/search?q=3Daslr+moveimages+%2Bsite:microsoft.com)

After toggling these settings on a standard virtualised windows 7
enterprise, I can't replicate the crash either on those OS so am
assuming there's "something else".

Any other suggestions from the list of things that would be worth trying?

The muse-ing will be tweaked to be clear that this bug is only on the
publically available EC2 install & I'll see how I get on with asking
amazon for a fix.

For reference here is the event log entry generated by bash.exe -
0xc0000005 presumably being a memory access violation, another one
from sh.exe, and a similar one from cmd.exe which is clearly not
cygwin related.

Log Name:      Application
Source:        Application Error
Date:          8/13/2010 2:05:30 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ip-0AC1368F
Description:
Faulting application bash.exe, version 0.0.0.0, time stamp 0x4a18506d,
faulting module unknown, version 0.0.0.0, time stamp 0x00000000,
exception code 0xc0000005, fault offset 0x75ba9b89, process id 0xa3c,
application start time 0x01cb3a839fa7f602.

and a similar one in sh.exe provides this stack dump:

Exception: STATUS_ACCESS_VIOLATION at eip=3D77574381
eax=3D00000000 ebx=3D00000040 ecx=3D00000000 edx=3D00000000 esi=3D00F800F0 =
edi=3D0027C7C4
ebp=3D0027C778 esp=3D0027C760 program=3DC:\cygwin\bin\sh.exe, pid 2432, thr=
ead main
cs=3D0023 ds=3D002B es=3D002B fs=3D0053 gs=3D002B ss=3D002B
Stack trace:
Frame     Function  Args
0027C778  77574381  (00000013, 00F800F0, 00000040, 0027C7C4)
00FB8770  610341EE  (00000000, 00000000, 00000000, 00000000)
      3 [main] sh 2432 exception::handle: Error while dumping state
(probably corrupted stack)

Event Xml:
<Event xmlns=3D"http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=3D"Application Error" />
    <EventID Qualifiers=3D"0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=3D"2010-08-13T01:05:30.000Z" />
    <EventRecordID>876</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ip-0AC1368F</Computer>
    <Security />
  </System>
  <EventData>
    <Data>bash.exe</Data>
    <Data>0.0.0.0</Data>
    <Data>4a18506d</Data>
    <Data>unknown</Data>
    <Data>0.0.0.0</Data>
    <Data>00000000</Data>
    <Data>c0000005</Data>
    <Data>75ba9b89</Data>
    <Data>a3c</Data>
    <Data>01cb3a839fa7f602</Data>
  </EventData>
</Event>

I have also managed to get a similar symptom crash on windows own cmd.exe -

Log Name:      Application
Source:        Application Error
Date:          8/13/2010 3:00:41 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ip-0AC1368F
Description:
Faulting application cmd.exe, version 6.0.6001.18000, time stamp
0x47919317, faulting module ntdll.dll, version 6.0.6002.18005, time
stamp 0x49e0421d, exception code 0xc0000005, fault offset
0x00000000000468a7, process id 0x348, application start time
0x01cb3a8926d14736.
Event Xml:
<Event xmlns=3D"http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=3D"Application Error" />
    <EventID Qualifiers=3D"0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=3D"2010-08-13T02:00:41.000Z" />
    <EventRecordID>878</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ip-0AC1368F</Computer>
    <Security />
  </System>
  <EventData>
    <Data>cmd.exe</Data>
    <Data>6.0.6001.18000</Data>
    <Data>47919317</Data>
    <Data>ntdll.dll</Data>
    <Data>6.0.6002.18005</Data>
    <Data>49e0421d</Data>
    <Data>c0000005</Data>
    <Data>00000000000468a7</Data>
    <Data>348</Data>
    <Data>01cb3a8926d14736</Data>
  </EventData>
</Event>


Cheers, Dave

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple