Any ideas to the cause of this abend?

I've never seen this type of abend. Possible ideas are to install the
undated TCPIP stack, libcsp6b and winsock6m.


NW 6.5.6 server with nwlib6j, libcsp6a and winsock6l.
GWAVA 3.72
GroupWise 7.0.2 HP1a (POA, MTA and GWIA)

Partial ABEND.LOG

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Address space GRPWISE.NCF removed Tuesday, October 2, 2007 5:55:42.761 am
Abend 0 on P00: Server-5.70.06: Free detected corrupt trailing redzone for
node 0xCEFB5A40, node size 248

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = CFAD4FB9 EBX = CFAD4F70 ECX = FFFFFFB5 EDX = 00000000
ESI = CFAD6F7C EDI = 000000F8 EBP = 9C1C8D14 ESP = 9C1C8CF0
EIP = 956A2CA6 FLAGS = 00000282
956A2CA6 83C40C ADD ESP, 0000000C
EIP in UNKNOWN memory area

The violation occurred while processing the following instruction:
956A2CA6 83C40C ADD ESP, 0000000C
956A2CA9 5B POP EBX
956A2CAA C3 RET
SYSCALLS.NLM|MARSHAL_AccountCharge:
956A2CAB 53 PUSH EBX
956A2CAC 56 PUSH ESI
956A2CAD 0FB7742424 MOVZX ESI, word ptr [ESP+24]
956A2CB2 89F3 MOV EBX, ESI
956A2CB4 8B442428 MOV EAX, [ESP+28]
956A2CB8 83FB00 CMP EBX, 00000000
956A2CBB 7505 JNZ 956A2CC2



Running process: Server 00:59 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 9C1C8CF0
User Space Stack limit: 0
Scheduling priority: 67371008
Wait state: 50500F0 Waiting for work
Stack: 956A2CA6 (SYSCALLS.NLM|MARSHAL_Abend+31)
--00000191 (LOADER.NLM|KernelAddressSpace+191)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--CFAD4F70 ?
--CEFB5A38 ?
00370C83 (SERVER.NLM|NewSystemCall+D3)
--CFAD4F70 ?
--80000001 ?
--956F2498 ?
--CFAD5018 ?
--E284FA00 ?
00370D7A (SERVER.NLM|NewSystemCall+1CA)
--00000073 (LOADER.NLM|KernelAddressSpace+73)
--CFAD4F68 ?
--0000007B (LOADER.NLM|KernelAddressSpace+7B)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--E871C260 ?
--CFAD6FF4 ?
--9A7E3060 ?
--00018000 ?
0023469F (SERVER.NLM|BumpCurrentAddressSpaceWTD+30F)
--9C1C8DAC ?
--E871C260 ?
--CFAD6FF4 ?
--9FCB4300 ?
--CFABE000 ?
--CFAD6FF4 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--CFABF000 ?
--9FCB4300 ?
--E871C260 ?
--9FCB4300 ?
--9C1C8DAC ?
--E871C260 ?
00234882 (SERVER.NLM|CallUser+9A)
--9C1C8DAC ?
--E871C260 ?
--9C1C8DA0 ?
--9FCB4300 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
0022891D (SERVER.NLM|TcoNewUserThreadEntryPoint+51)
--9C1C8DAC ?
--E871C260 ?
--00000002 (LOADER.NLM|KernelAddressSpace+2)
--9FCB4300 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--A3DF0540 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--0000F420 (LOADER.NLM|KernelAddressSpace+F420)
--730C4B42 ?
--72000400 ?
--19747310 ?
--0000F820 (LOADER.NLM|KernelAddressSpace+F820)
--730C4B42 ?
--73000400 ?
--34343434 ?
--0000FC20 (LOADER.NLM|KernelAddressSpace+FC20)
--730C4B42 ?
--74000400 ?
--19747310 ?
--0000F020 (LOADER.NLM|KernelAddressSpace+F020)
--730C4B42 ?
--75000400 ?
--34343434 ?
--0000F420 (LOADER.NLM|KernelAddressSpace+F420)
--730C4B42 ?
--76000400 ?
--19747310 ?
--0000F820 (LOADER.NLM|KernelAddressSpace+F820)
--730C4B42 ?
--77000400 ?
--19747310 ?
--0000FC20 (LOADER.NLM|KernelAddressSpace+FC20)
--730C4B42 ?
--78000400 ?
--19747310 ?
--0000F020 (LOADER.NLM|KernelAddressSpace+F020)
--730C4B42 ?
--79000400 ?
--34343434 ?
--0000F420 (LOADER.NLM|KernelAddressSpace+F420)
--730C4B42 ?
--7A000400 ?
--19747310 ?
--0000F820 (LOADER.NLM|KernelAddressSpace+F820)
--730C4B42 ?
--7B000400 ?
--19747310 ?
--0000FC20 (LOADER.NLM|KernelAddressSpace+FC20)
--730C4B42 ?
--7C000400 ?
--19747310 ?
--0000F020 (LOADER.NLM|KernelAddressSpace+F020)
--730C4B42 ?
--7D000400 ?
--34343434 ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SYSCALLS.NLM. It may be the source of the problem or
there may have been a memory corruption.