Can anyone tell me what causes this abend? My server abended several
times this afternoon and most of the abends have this Free detected
corrupt preceeding redzone...

Any help would be greatly appreciated. Thanks.

************************************************** *******
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.04

Address space GWIA removed Friday, June 2, 2006 2:53:17.161 pm
Abend 0 on P01: Server-5.70.04: Free detected corrupt preceeding redzone
for node 0xC09437E0

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = C191DC70 EBX = C191DC34 ECX = FFFFFFC2 EDX = 00000000
ESI = 00000000 EDI = 00000001 EBP = 9203FCB4 ESP = 9203FC90
EIP = 851FCCA6 FLAGS = 00000292
851FCCA6 83C40C ADD ESP, 0000000C
EIP in UNKNOWN memory area

The violation occurred while processing the following instruction:
851FCCA6 83C40C ADD ESP, 0000000C
851FCCA9 5B POP EBX
851FCCAA C3 RET
SYSCALLS.NLM|MARSHAL_AccountCharge:
851FCCAB 53 PUSH EBX
851FCCAC 56 PUSH ESI
851FCCAD 0FB7742424 MOVZX ESI, word ptr [ESP+24]
851FCCB2 89F3 MOV EBX, ESI
851FCCB4 8B442428 MOV EAX, [ESP+28]
851FCCB8 83FB00 CMP EBX, 00000000
851FCCBB 7505 JNZ 851FCCC2



Running process: Processor 1: IDLE Thread Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 9203FC90
User Space Stack limit: 0
Scheduling priority: 67371008
Wait state: 3031111 Intermedidate Goto READY
Stack: 851FCCA6 (SYSCALLS.NLM|MARSHAL_Abend+31)
--00000191 ?
--00000000 ?
--C191DC34 ?
--C09437D8 ?
00364C13 (SERVER.NLM|NewSystemCall+D3)
--C191DC34 ?
--80000001 ?
--853B6378 ?
--C191DCDC ?
--C08753C0 ?
00364D15 (SERVER.NLM|NewSystemCall+1D5)
--00000073 ?
--C191DC2C ?
--0000007B ?
--00000000 ?
--C0D2AE40 ?
--C191EFF4 ?
--8571D240 ?
00018000 (LOADER.NLM|UnHookRealModeHWInterrupt+1310)
0022A257 (SERVER.NLM|BumpCurrentAddressSpaceWTD+21F)
--9203FD4C ?
--C0D2AE40 ?
--C191EFF4 ?
--90DC2420 ?
--C1906000 ?
--C191EFF4 ?
--00000000 ?
--00000000 ?
--C1907000 ?
--90DC2420 ?
--C0D2AE40 ?
--90DC2420 ?
--9203FD4C ?
--C0D2AE40 ?
0022A43A (SERVER.NLM|CallUser+9A)
--9203FD4C ?
--C0D2AE40 ?
--9203FD40 ?
--90DC2420 ?
--00000000 ?
0021E6ED (SERVER.NLM|TcoNewUserThreadEntryPoint+51)
--9203FD4C ?
--C0D2AE40 ?
--00000002 ?
--90DC2420 ?
--00000000 ?
--8D34A560 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
0010A2E6 (LOADER.NLM|kSpinUnlockRestore+26)
--00000246 ?
002309CB (SERVER.NLM|TLBShootDown+AB)
-00502734 (SERVER.NLM|TLBShootdownSpinlock+0)
--00000246 ?
--34343434 ?
--00000000 ?
--00000000 ?
--00000000 ?
--C038B540 ?
--00000000 ?
--FE0033E0 (LOADER.NLM|AllocSlabStructEnd+33E0)
--FE0033C0 (LOADER.NLM|AllocSlabStructEnd+33C0)
--00000046 ?
0010A2E6 (LOADER.NLM|kSpinUnlockRestore+26)
--00010001 ?
--00000000 ?
--FE0033C0 (LOADER.NLM|AllocSlabStructEnd+33C0)
--00000000 ?
--00000000 ?
--00000000 ?
00218FE1 (SERVER.NLM|SchedSwitch+2A9)
--8E0004A0 ?
--8E0004A0 ?
--8E0004A0 ?
--FE0033C0 (LOADER.NLM|AllocSlabStructEnd+33C0)
0021D867 (SERVER.NLM|TcoResumeThreadsInAddressSpace+2FB)
--00000046 ?
--8571D240 ?
--8E0004A0 ?
--9203FE74 ?
--00000000 ?
--8E0004A0 ?
--00000246 ?
0021D1B8 (SERVER.NLM|CDestroyProcess+44)
--8E0004A0 ?
--9203FE74 ?
--8E0004A0 ?
--00000000 ?
851FD773 (SYSCALLS.NLM|MARSHAL_CDestroyProcess+71)
--8E0004A0 ?
--00000000 ?
--8DBEA000 ?
--000000FF ?
--C19029A4 ?
--C190299C ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SYSCALLS.NLM. It may be the source of the problem or
there may have been a memory corruption.

Loaded Modules:
GWIA.NLM GroupWise Internet Agent (release version)
Version 6.05.03 December 1, 2004
Code Address: F4646000h Length: 001CB245h
Data Address: F45EC000h Length: 00058AEEh
SCCDA.NLM HTML Export Data Access Module
Version 7.70 April 9, 2004
Code Address: F49A2000h Length: 00006760h
Data Address: F49A0000h Length: 00000140h
SCCFA.NLM HTML Export Filter Access Module
Version 7.70 June 14, 2004
Code Address: F49AC000h Length: 00002C70h
Data Address: F49AA000h Length: 00000310h
SCCCH.NLM HTML Export Chunker Module
Version 7.70 April 9, 2004
Code Address: F49B2000h Length: 0000A2E0h
Data Address: F49B0000h Length: 00000660h
SCCFI.NLM HTML Export File Identification Module
Version 7.70 April 9, 2004
Code Address: F49C3000h Length: 0000E890h
Data Address: F49BE000h Length: 000031B0h
SCCUT.NLM HTML Export Utility Module
Version 7.70 August 5, 2004
Code Address: F49E5000h Length: 000252B0h
Data Address: F49D3000h Length: 00010270h
NWSNUT.NLM NetWare NLM Utility User Interface
Version 7.00 August 10, 2005
Code Address: F50BA000h Length: 00013418h
Data Address: F50B8000h Length: 000006F8h
CALNLM32.NLM NetWare NWCalls Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4815000h Length: 0001B769h
Data Address: F4813000h Length: 00000510h
NETNLM32.NLM NetWare NWNet Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4838000h Length: 00035BE7h
Data Address: F4832000h Length: 00004D75h
NCPNLM32.NLM NetWare NWNCP Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F486F000h Length: 0001E263h
Data Address: 00000000h Length: 00000000h
GWENN4.NLM GroupWise Engine (release version)
Version 6.05.03 November 18, 2004
Code Address: F4ADF000h Length: 0046EF80h
Data Address: F4A0C000h Length: 000D1CA3h
GWXIS10.NLM XML Integration Service
Version 1.00.01 November 8, 2004
Code Address: F4FB0000h Length: 000EEE55h
Data Address: F4F4F000h Length: 0005FC48h
CLIB.NLM (Legacy) Standard C Runtime Library for NLMs
Version 5.90.11 July 14, 2005
Code Address: F50D3000h Length: 0001898Eh
Data Address: F50CF000h Length: 00002FB0h
NIT.NLM NetWare Interface Tools Library for NLMs
Version 5.90.11 July 14, 2005
Code Address: F50F0000h Length: 0001C694h
Data Address: F50EE000h Length: 00000690h
CLXNLM32.NLM NetWare NWCLX Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F50A2000h Length: 00001213h
Data Address: F50A0000h Length: 000001B0h
LOCNLM32.NLM NetWare NWLocale Runtime Library
Version 6.00.02 May 10, 2005
Code Address: F50AC000h Length: 000044BBh
Data Address: F50AA000h Length: 00000B30h
UNICODE.NLM NetWare Unicode Runtime Library (UniLib-based) [optimized]
Version 7.00 October 26, 2004
Code Address: F50B4000h Length: 000016F5h
Data Address: F50B2000h Length: 00000504h
CLNNLM32.NLM NetWare NWClient Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F50A7000h Length: 00001C72h
Data Address: F50A5000h Length: 00000130h
NLMLIB.NLM Novell NLM Runtime Library
Version 5.90.11 July 14, 2005
Code Address: F5113000h Length: 0002639Dh
Data Address: F510E000h Length: 000038C0h
REQUESTR.NLM Novell NCP Requestor for NLMs
Version 5.90.11 July 14, 2005
Code Address: F513E000h Length: 00020C53h
Data Address: F513B000h Length: 000010B0h
THREADS.NLM Novell Threads Package for NLMs
Version 5.90.11 July 14, 2005
Code Address: F5173000h Length: 00018D78h
Data Address: F5160000h Length: 000116C0h
LIBC.NLM Standard C Runtime Library for NLMs [optimized, 6]
Version 9.00.01 August 4, 2005
Code Address: F5287000h Length: 000CCF16h
Data Address: F5245000h Length: 00040FC0h
USERLIB.NLM NetWare Operating System Function Library
Version 5.60 May 9, 2005
Code Address: F5358000h Length: 0000491Eh
Data Address: F5355000h Length: 000011F0h