Hi,

We have a single Netware v6.5 SP6 server running NDPS, GroupWise 6.5.5 that
has abended over the past 2 nights at 12. The abend lists as:

Address space ADDRESS_SPACE1 removed Monday, 18 February 2008 12:00:00.116
am
Abend 0 on P00: Server-5.70.06: Free detected corrupt trailing redzone for
node 0xC0957680, node size 376

GWIA then is inoperatable until the server is restarted. Any thoughts on
rectifying this fault? See below for log of both abends.

Cheers,
Dale.

************************************************** *******
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Address space ADDRESS_SPACE1 removed Monday, 18 February 2008 12:00:00.116
am
Abend 0 on P00: Server-5.70.06: Free detected corrupt trailing redzone for
node 0xC0957680, node size 376

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = C187990D EBX = C18798C4 ECX = FFFFFFB5 EDX = 00000000
ESI = 00000000 EDI = 00000178 EBP = B04C0A94 ESP = B04C0A70
EIP = AF34CCA6 FLAGS = 00000282
AF34CCA6 83C40C ADD ESP, 0000000C
EIP in UNKNOWN memory area

The violation occurred while processing the following instruction:
AF34CCA6 83C40C ADD ESP, 0000000C
AF34CCA9 5B POP EBX
AF34CCAA C3 RET
SYSCALLS.NLM|MARSHAL_AccountCharge:
AF34CCAB 53 PUSH EBX
AF34CCAC 56 PUSH ESI
AF34CCAD 0FB7742424 MOVZX ESI, word ptr [ESP+24]
AF34CCB2 89F3 MOV EBX, ESI
AF34CCB4 8B442428 MOV EAX, [ESP+28]
AF34CCB8 83FB00 CMP EBX, 00000000
AF34CCBB 7505 JNZ AF34CCC2



Running process: Server 00:60 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: B04C0A70
User Space Stack limit: 0
Scheduling priority: 67371008
Wait state: 50500F0 Waiting for work
Stack: AF34CCA6 (SYSCALLS.NLM|MARSHAL_Abend+31)
--00000191 (LOADER.NLM|KernelAddressSpace+191)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C18798C4 ?
--C0957678 ?
0036C243 (SERVER.NLM|NewSystemCall+D3)
--C18798C4 ?
--80000001 ?
--AF39F458 ?
--C187996C ?
--C0873140 ?
0036C33A (SERVER.NLM|NewSystemCall+1CA)
--00000073 (LOADER.NLM|KernelAddressSpace+73)
--C18798BC ?
--0000007B (LOADER.NLM|KernelAddressSpace+7B)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C09370C0 ?
--C187AFF4 ?
--AF927280 ?
00018000 (LOADER.NLM|getchar+40C)
0022FC5F (SERVER.NLM|BumpCurrentAddressSpaceWTD+30F)
--B04C0B2C ?
--C09370C0 ?
--C187AFF4 ?
--6A5160A0 ?
--C1862000 ?
--C187AFF4 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C1863000 ?
--6A5160A0 ?
--C09370C0 ?
--6A5160A0 ?
--B04C0B2C ?
--C09370C0 ?
0022FE42 (SERVER.NLM|CallUser+9A)
--B04C0B2C ?
--C09370C0 ?
--B04C0B20 ?
--6A5160A0 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
00223EDD (SERVER.NLM|TcoNewUserThreadEntryPoint+51)
--B04C0B2C ?
--C09370C0 ?
--00000002 (LOADER.NLM|KernelAddressSpace+2)
--6A5160A0 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--6D75636F ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--6C657069 ?
--43656E69 ?
--6F706D6F ?
--746E656E ?
--8000718E ?
--4341441F ?
--65736F6C ?
--34343434 ?
--656E696C ?
--706D6F43 ?
--6E656E6F ?
--49744174 ?
--7865646E ?
--80007202 ?
--43414411 ?
--65736F6C ?
--65657254 ?
--6F636552 ?
--2B546472 ?
--44128000 ?
--65724341 ?
--4D657461 ?
--6C75646F ?
--74614465 ?
002C5261 (SERVER.NLM|SetFrameType+421)
--41441280 ?
--61746144 ?
--466C6156 ?
--556D6F72 ?
--6E6F696E ?
--8000590F ?
--44414408 ?
--696E4965 ?
--00050674 ?
--41441380 ?
--74736544 ?
--4D796F72 ?
--6C75646F ?
--74614465 ?
002F9761 (SERVER.NLM|SaveEnvironmentToDisk+20B5)
--41441080 ?
--6D617244 ?
--6E696D61 ?
--666E4965 ?
--41A0316F ?
--44118000 ?
--6E694641 ?
--67615464 ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SYSCALLS.NLM. It may be the source of the problem or there
may have been a memory corruption.

Loaded Modules:
GWIA.NLM GroupWise Internet Agent (release version)
Version 6.05.05 23 September 2005
Code Address: F46DA000h Length: 001CC445h
Data Address: F4680000h Length: 00058CCDh
SCCDA.NLM HTML Export Data Access Module
Version 8.00 11 April 2005
Code Address: F48AA000h Length: 00007400h
Data Address: F48A8000h Length: 000003B0h
SCCFA.NLM HTML Export Filter Access Module
Version 8.00 11 April 2005
Code Address: F48B5000h Length: 00002EA0h
Data Address: F48B3000h Length: 000003F0h
SCCCH.NLM HTML Export Chunker Module
Version 8.00 11 April 2005
Code Address: F48BB000h Length: 0000B160h
Data Address: F48B9000h Length: 00000680h
SCCFI.NLM HTML Export File Identification Module
Version 8.00 11 April 2005
Code Address: F48CC000h Length: 00010F10h
Data Address: F48C8000h Length: 00002580h
SCCUT.NLM HTML Export Utility Module
Version 8.00 11 April 2005
Code Address: F48F0000h Length: 000311C0h
Data Address: F48DE000h Length: 000107A0h
WVCORE.NLM wvcore module
Version 8.00 11 April 2005
Code Address: F4966000h Length: 0000CE90h
Data Address: F4923000h Length: 00041390h
NWSNUT.NLM NetWare NLM Utility User Interface
Version 7.00.01 7 June 2006
Code Address: F4978000h Length: 00013422h
Data Address: F4976000h Length: 000006F8h
CALNLM32.NLM NetWare NWCalls Runtime Library
Version 6.00.06 25 September 2006
Code Address: F4990000h Length: 0001CC39h
Data Address: F498E000h Length: 00000510h
NETNLM32.NLM NetWare NWNet Runtime Library
Version 6.00.06 25 September 2006
Code Address: F49B4000h Length: 00035C07h
Data Address: F49AE000h Length: 00004D75h
NCPNLM32.NLM NetWare NWNCP Runtime Library
Version 6.00.06 25 September 2006
Code Address: F49EB000h Length: 0001F0F3h
Data Address: 00000000h Length: 00000000h
GWENN4.NLM GroupWise Engine (release version)
Version 6.05.05 23 September 2005
Code Address: F4ADF000h Length: 004715B0h
Data Address: F4A0C000h Length: 000D1CDAh
GWXIS10.NLM XML Integration Service
Version 1.00.01 8 November 2004
Code Address: F4FB3000h Length: 000EEE55h
Data Address: F4F52000h Length: 0005FC48h
CLIB.NLM (Legacy) Standard C Runtime Library for NLMs
Version 5.90.14 5 September 2006
Code Address: F50A7000h Length: 0001898Eh
Data Address: F50A3000h Length: 00002FB0h
NIT.NLM NetWare Interface Tools Library for NLMs
Version 5.90.14 5 September 2006
Code Address: F50C4000h Length: 0001C694h
Data Address: F50C2000h Length: 00000690h
CLXNLM32.NLM NetWare NWCLX Runtime Library
Version 6.00.06 25 September 2006
Code Address: F50E4000h Length: 00001213h
Data Address: F50E2000h Length: 000001B0h
LOCNLM32.NLM NetWare NWLocale Runtime Library
Version 6.00.04 29 November 2005
Code Address: F50E9000h Length: 000044BBh
Data Address: F50E7000h Length: 00000B30h
UNICODE.NLM NetWare Unicode Runtime Library (UniLib-based) [optimized]
Version 7.00 26 October 2004
Code Address: F50F1000h Length: 000016F5h
Data Address: F50EF000h Length: 00000504h
CLNNLM32.NLM NetWare NWClient Runtime Library
Version 6.00.06 25 September 2006
Code Address: F50F6000h Length: 00001C72h
Data Address: F50F4000h Length: 00000130h
NLMLIB.NLM Novell NLM Runtime Library
Version 5.90.14 5 September 2006
Code Address: F50FE000h Length: 000263CDh
Data Address: F50F9000h Length: 000038C0h
REQUESTR.NLM Novell NCP Requestor for NLMs
Version 5.90.14 5 September 2006
Code Address: F5129000h Length: 00020D13h
Data Address: F5126000h Length: 000010B0h
THREADS.NLM Novell Threads Package for NLMs
Version 5.90.14 5 September 2006
Code Address: F515E000h Length: 00018CD8h
Data Address: F514B000h Length: 000116A0h
LIBC.NLM Standard C Runtime Library for NLMs [optimized, 7]
Version 9.00.05 28 February 2007
Code Address: F527D000h Length: 000D0906h
Data Address: F523A000h Length: 00041638h
USERLIB.NLM NetWare Operating System Function Library
Version 5.60 1 December 2005
Code Address: F5352000h Length: 0000492Eh
Data Address: F534F000h Length: 000011F0h
************************************************** *******
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Address space ADDRESS_SPACE1 removed Wednesday, 20 February 2008
12:00:00.480 am
Abend 0 on P00: Server-5.70.06: Free detected corrupt trailing redzone for
node 0xC0957680, node size 376

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = C187990D EBX = C18798C4 ECX = FFFFFFB5 EDX = 00000000
ESI = 00000000 EDI = 00000178 EBP = B076F574 ESP = B076F550
EIP = AFBDACA6 FLAGS = 00000282
AFBDACA6 83C40C ADD ESP, 0000000C
EIP in UNKNOWN memory area

The violation occurred while processing the following instruction:
AFBDACA6 83C40C ADD ESP, 0000000C
AFBDACA9 5B POP EBX
AFBDACAA C3 RET
SYSCALLS.NLM|MARSHAL_AccountCharge:
AFBDACAB 53 PUSH EBX
AFBDACAC 56 PUSH ESI
AFBDACAD 0FB7742424 MOVZX ESI, word ptr [ESP+24]
AFBDACB2 89F3 MOV EBX, ESI
AFBDACB4 8B442428 MOV EAX, [ESP+28]
AFBDACB8 83FB00 CMP EBX, 00000000
AFBDACBB 7505 JNZ AFBDACC2



Running process: Server 00:14 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: B076F550
User Space Stack limit: 0
Scheduling priority: 67371008
Wait state: 50500F0 Waiting for work
Stack: AFBDACA6 (SYSCALLS.NLM|MARSHAL_Abend+31)
--00000191 (LOADER.NLM|KernelAddressSpace+191)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C18798C4 ?
--C0957678 ?
003684E3 (SERVER.NLM|NewSystemCall+D3)
--C18798C4 ?
--80000001 ?
--AFC2D558 ?
--C187996C ?
--C0873140 ?
003685DA (SERVER.NLM|NewSystemCall+1CA)
--00000073 (LOADER.NLM|KernelAddressSpace+73)
--C18798BC ?
--0000007B (LOADER.NLM|KernelAddressSpace+7B)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C09370C0 ?
--C187AFF4 ?
--93A70260 ?
00018000 (LOADER.NLM|getchar+40C)
0022BEFF (SERVER.NLM|BumpCurrentAddressSpaceWTD+30F)
--B076F60C ?
--C09370C0 ?
--C187AFF4 ?
--6C290440 ?
--C1862000 ?
--C187AFF4 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C1863000 ?
--6C290440 ?
--C09370C0 ?
--6C290440 ?
--B076F60C ?
--C09370C0 ?
0022C0E2 (SERVER.NLM|CallUser+9A)
--B076F60C ?
--C09370C0 ?
--B076F600 ?
--6C290440 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
0022017D (SERVER.NLM|TcoNewUserThreadEntryPoint+51)
--B076F60C ?
--C09370C0 ?
--00000002 (LOADER.NLM|KernelAddressSpace+2)
--6C290440 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--7182B520 (IPCLINFO.NLM|IPDHCPIsRasBoard+B780)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--41460D40 ?
--5470614D ?
--4343536F ?
--05525245 ?
--23000000 ?
--6D40000D ?
--9D40000D ?
--34343434 ?
--64400067 ?
--0F40006D ?
--704F4146 ?
--6F436E65 ?
--6E6F706D ?
--02746E65 ?
--6D000000 ?
--B3400032 ?
--10400032 ?
--6C434146 ?
--4365736F ?
--6F706D6F ?
--746E656E ?
--00000002 (LOADER.NLM|KernelAddressSpace+2)
--40003420 ?
--40006D7A ?
--47414612 ?
--6F437465 ?
--6E6F706D ?
--53746E65 ?
--01636570 ?
--94000000 ?
--14400066 ?
--65534146 ?
--6D6F4374 ?
--656E6F70 ?
--754F746E ?
--74757074 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--400067E0 ?
--47414613 ?
--624F7465 ?
--7463656A ?
--61636F4C ?
--6E6F6974 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--40005E36 ?
--44414614 ?
--6D6F436F ?
--656E6F70 ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SYSCALLS.NLM. It may be the source of the problem or there
may have been a memory corruption.

Loaded Modules:
GWIA.NLM GroupWise Internet Agent (release version)
Version 6.05.05 23 September 2005
Code Address: F46DA000h Length: 001CC445h
Data Address: F4680000h Length: 00058CCDh
SCCDA.NLM HTML Export Data Access Module
Version 8.00 11 April 2005
Code Address: F48AA000h Length: 00007400h
Data Address: F48A8000h Length: 000003B0h
SCCFA.NLM HTML Export Filter Access Module
Version 8.00 11 April 2005
Code Address: F48B5000h Length: 00002EA0h
Data Address: F48B3000h Length: 000003F0h
SCCCH.NLM HTML Export Chunker Module
Version 8.00 11 April 2005
Code Address: F48BB000h Length: 0000B160h
Data Address: F48B9000h Length: 00000680h
SCCFI.NLM HTML Export File Identification Module
Version 8.00 11 April 2005
Code Address: F48CC000h Length: 00010F10h
Data Address: F48C8000h Length: 00002580h
SCCUT.NLM HTML Export Utility Module
Version 8.00 11 April 2005
Code Address: F48F0000h Length: 000311C0h
Data Address: F48DE000h Length: 000107A0h
WVCORE.NLM wvcore module
Version 8.00 11 April 2005
Code Address: F4966000h Length: 0000CE90h
Data Address: F4923000h Length: 00041390h
NWSNUT.NLM NetWare NLM Utility User Interface
Version 7.00.01 7 June 2006
Code Address: F4978000h Length: 00013422h
Data Address: F4976000h Length: 000006F8h
CALNLM32.NLM NetWare NWCalls Runtime Library
Version 6.00.06 25 September 2006
Code Address: F4990000h Length: 0001CC39h
Data Address: F498E000h Length: 00000510h
NETNLM32.NLM NetWare NWNet Runtime Library
Version 6.00.06 25 September 2006
Code Address: F49B4000h Length: 00035C07h
Data Address: F49AE000h Length: 00004D75h
NCPNLM32.NLM NetWare NWNCP Runtime Library
Version 6.00.06 25 September 2006
Code Address: F49EB000h Length: 0001F0F3h
Data Address: 00000000h Length: 00000000h
GWENN4.NLM GroupWise Engine (release version)
Version 6.05.05 23 September 2005
Code Address: F4ADF000h Length: 004715B0h
Data Address: F4A0C000h Length: 000D1CDAh
GWXIS10.NLM XML Integration Service
Version 1.00.01 8 November 2004
Code Address: F4FB3000h Length: 000EEE55h
Data Address: F4F52000h Length: 0005FC48h
CLIB.NLM (Legacy) Standard C Runtime Library for NLMs
Version 5.90.14 5 September 2006
Code Address: F50A7000h Length: 0001898Eh
Data Address: F50A3000h Length: 00002FB0h
NIT.NLM NetWare Interface Tools Library for NLMs
Version 5.90.14 5 September 2006
Code Address: F50C4000h Length: 0001C694h
Data Address: F50C2000h Length: 00000690h
CLXNLM32.NLM NetWare NWCLX Runtime Library
Version 6.00.06 25 September 2006
Code Address: F50E4000h Length: 00001213h
Data Address: F50E2000h Length: 000001B0h
LOCNLM32.NLM NetWare NWLocale Runtime Library
Version 6.00.04 29 November 2005
Code Address: F50E9000h Length: 000044BBh
Data Address: F50E7000h Length: 00000B30h
UNICODE.NLM NetWare Unicode Runtime Library (UniLib-based) [optimized]
Version 7.00 26 October 2004
Code Address: F50F1000h Length: 000016F5h
Data Address: F50EF000h Length: 00000504h
CLNNLM32.NLM NetWare NWClient Runtime Library
Version 6.00.06 25 September 2006
Code Address: F50F6000h Length: 00001C72h
Data Address: F50F4000h Length: 00000130h
NLMLIB.NLM Novell NLM Runtime Library
Version 5.90.14 5 September 2006
Code Address: F50FE000h Length: 000263CDh
Data Address: F50F9000h Length: 000038C0h
REQUESTR.NLM Novell NCP Requestor for NLMs
Version 5.90.14 5 September 2006
Code Address: F5129000h Length: 00020D13h
Data Address: F5126000h Length: 000010B0h
THREADS.NLM Novell Threads Package for NLMs
Version 5.90.14 5 September 2006
Code Address: F515E000h Length: 00018CD8h
Data Address: F514B000h Length: 000116A0h
LIBC.NLM Standard C Runtime Library for NLMs [optimized, 7]
Version 9.00.05 28 February 2007
Code Address: F527D000h Length: 000D0906h
Data Address: F523A000h Length: 00041638h
USERLIB.NLM NetWare Operating System Function Library
Version 5.60 1 December 2005
Code Address: F5352000h Length: 0000492Eh
Data Address: F534F000h Length: 000011F0h


Kind Regards,
Dale Bentley
Network Help