Faulting module name: ntdll.dll

[Egil Sandfeld]

Hi there, I'm the creator of The Digital Race Engineer.

I have a user that has fatal crashes with VA coming after a while of using it, and he has sent me Event Viewer logs.

I cannot rule out that the issue is on my side of the code with DRE, but currently, the crash logs from Event Viewer don't directly point to my VA plugin (The Digital Race Engineer.dll). And before I continue down the rabbit hole of crash logs, I wanted to ask if these are something you've seen before?

So I wanted to ask if you guys have experienced any of the issues below? I cannot reproduce them myself:

Code: [Select]

Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: ntdll.dll, version: 10.0.19041.662, time stamp: 0x5f641e44
Exception code: 0xc0000374
Fault offset: 0x000e6ac3
Faulting process id: 0x120
Faulting application start time: 0x01d6f62fa2ba79b0
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 3e8497c0-8d02-4f41-b4a4-9a66b07f5c34
Faulting package full name:
Faulting package-relative application ID:
Later he sent me this:

Code: [Select]

Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: StackHash_a438
P5: 10.0.19041.662
P6: 5f641e44
P7: c0000374
P8: PCH_D0_FROM_ntdll+0x00071BDC
P9:
P10:

Attached files:

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_VoiceAttack.exe_804cc4f9cb8373f65adbd25e432d1588e8c685f_91f0750c_9ba67d49-ceb0-4746-9d40-68d5de6b7fa3

Analysis symbol:
Rechecking for solution: 0
Report Id: 3e8497c0-8d02-4f41-b4a4-9a66b07f5c34
Report Status: 4
Hashed bucket:
Cab Guid: 0

and this:
Fault bucket 1744032326564834454, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: StackHash_a438
P5: 10.0.19041.662
P6: 5f641e44
P7: c0000374
P8: PCH_D0_FROM_ntdll+0x00071BDC
P9:
P10:

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5C65.tmp.WERInternalMetadata.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_804cc4f9cb8373f65adbd25e432d1588e8c685f_91f0750c_9ba67d49-ceb0-4746-9d40-68d5de6b7fa3

Analysis symbol:
Rechecking for solution: 0
Report Id: 3e8497c0-8d02-4f41-b4a4-9a66b07f5c34
Report Status: 268435456
Hashed bucket: 5ef35a08ee3f10fb48340c2925b1ec96
Cab Guid: 0

and the details say:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T11:57:31.0421668Z" />
  <EventRecordID>6548</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>1744032326564834454</Data>
  <Data>1</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>StackHash_a438</Data>
  <Data>10.0.19041.662</Data>
  <Data>5f641e44</Data>
  <Data>c0000374</Data>
  <Data>PCH_D0_FROM_ntdll+0x00071BDC</Data>
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5C65.tmp.WERInternalMetadata.xml</Data>
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_804cc4f9cb8373f65adbd25e432d1588e8c685f_91f0750c_9ba67d49-ceb0-4746-9d40-68d5de6b7fa3</Data>
  <Data />
  <Data>0</Data>
  <Data>3e8497c0-8d02-4f41-b4a4-9a66b07f5c34</Data>
  <Data>268435456</Data>
  <Data>5ef35a08ee3f10fb48340c2925b1ec96</Data>
  <Data>0</Data>
  </EventData>
  </Event>

also this:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T11:57:30.0025520Z" />
  <EventRecordID>6546</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>ntdll.dll</Data>
  <Data>10.0.19041.662</Data>
  <Data>5f641e44</Data>
  <Data>c0000374</Data>
  <Data>000e6ac3</Data>
  <Data>120</Data>
  <Data>01d6f62fa2ba79b0</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\SYSTEM32\ntdll.dll</Data>
  <Data>3e8497c0-8d02-4f41-b4a4-9a66b07f5c34</Data>
  <Data />
  <Data />
  </EventData>
  </Event>
And

Code: [Select]

And it happened again. From Event Viewer:
Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: ntdll.dll, version: 10.0.19041.662, time stamp: 0x5f641e44
Exception code: 0xc0000374
Fault offset: 0x000e6ac3
Faulting process id: 0x3cd8
Faulting application start time: 0x01d6f63fc6d591a8
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: eff79e81-1c7e-488d-8d74-fbe0116e60aa
Faulting package full name:
Faulting package-relative application ID:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T14:14:38.7314236Z" />
  <EventRecordID>6572</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>ntdll.dll</Data>
  <Data>10.0.19041.662</Data>
  <Data>5f641e44</Data>
  <Data>c0000374</Data>
  <Data>000e6ac3</Data>
  <Data>3cd8</Data>
  <Data>01d6f63fc6d591a8</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\SYSTEM32\ntdll.dll</Data>
  <Data>eff79e81-1c7e-488d-8d74-fbe0116e60aa</Data>
  <Data />
  <Data />
  </EventData>
  </Event>


and more errors i see:
Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: MSASN1.dll, version: 10.0.19041.546, time stamp: 0x762196ad
Exception code: 0xc0000005
Fault offset: 0x00002f90
Faulting process id: 0x5e4
Faulting application start time: 0x01d6f6367d9c3e81
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\SYSTEM32\MSASN1.dll
Report Id: 7af29722-b08c-4fce-8831-c09550f80638
Faulting package full name:
Faulting package-relative application ID:

 - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T13:04:57.1893361Z" />
  <EventRecordID>6569</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>MSASN1.dll</Data>
  <Data>10.0.19041.546</Data>
  <Data>762196ad</Data>
  <Data>c0000005</Data>
  <Data>00002f90</Data>
  <Data>5e4</Data>
  <Data>01d6f6367d9c3e81</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\SYSTEM32\MSASN1.dll</Data>
  <Data>7af29722-b08c-4fce-8831-c09550f80638</Data>
  <Data />
  <Data />
  </EventData>
  </Event>

and another error:

Application: VoiceAttack.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 6EA62F90

 - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name=".NET Runtime" />
  <EventID Qualifiers="0">1026</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T13:04:56.9651445Z" />
  <EventRecordID>6568</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>Application: VoiceAttack.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: exception code c0000005, exception address 6EA62F90</Data>
  </EventData>
  </Event>
Finally he mentions that just prior to these, errors about XboxGamingOverlay appears:

Code: [Select]

WARNING:
Application ("C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.420.11102.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe" -Embedding) (PID: 11072) has failed to complete a COM/RPC call because of an invalid message from server.  User Action Try the operation again. If the problem persists, contact your system administrator.

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-RPC-Events" Guid="{f4aed7c7-a898-4627-b053-44a7caa12fcd}" />
  <EventID>9</EventID>
  <Version>0</Version>
  <Level>3</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T13:02:04.8586733Z" />
  <EventRecordID>6567</EventRecordID>
  <Correlation />
  <Execution ProcessID="11072" ThreadID="13536" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security UserID="S-1-5-21-4063067067-1137458558-587943046-1001" />
  </System>
- <EventData>
  <Data Name="ApplicationName">"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.420.11102.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe" -Embedding</Data>
  <Data Name="ProcessId">11072</Data>
  </EventData>
  </Event>

[Pfeil]

I'll assume your user has a number of joystick devices; how many are mapped to joystick slots, and how many of those are disconnected? Of those, are any disconnected for long periods of time?

That heap corruption (0xc0000374) in ntdll, from what information is available, seems to potentially occur when a joystick device is mapped to a slot, but disconnected.

Unfortunately it occurs at a deep enough level where VoiceAttack's error handling cannot catch the exception, which indicates it could be an issue with the Windows joystick system, or a library in-between it and VoiceAttack.

[MikeJeffries]

It's my issue actually.
I do have alot of stuff connected but i turn power off to joystick and throttle when i'm sim racing.

I use a motion rig (PT-Actuators) which uses the AMC Controller (1 usb)
I have a Fanatec DD2 (which also started to show signs of a slight microstutter/disconnect in the last few races), HPP Pedals, 2 button boxes on USB's, Pimax 8K X headset, keyboard/mouse, etc.

I do have alot of stuff connected to the PC but turn off the ones not in use when i'm either using it for flight or racing.

I did map all 4 joysticks in VA to use the push to talk feature and the joystick/throttle that i mapped in VA are off when I'm racing (2 disconnected). I also change the button mapping when i switch from flight to racing - within VA.

Should I unmap the joystick and throttle from VA (the ones that are powered off when im not using them)?

[Pfeil]

Note that I'm using "joystick device" as a generic term for any DirectInput or XInput device; they don't literally need to have a joystick form-factor.

To verify that the issue is caused by such a device (or lack thereof, as the case may be), either uncheck all the "Enable Joystick" options in the "Joystick Options" window, or hold Ctrl-Shift while VoiceAttack is starting and choose "Disable joysticks" on the load options dialog, which does that for you.

If you're unsure which devices may be relevant, hold down the Windows key on your keyboard and press R; release the keys, type in "joy.cpl", and press the Enter key on your keyboard or click "OK"

[MikeJeffries]

Ok I'll check it out next time im on the computer. But if I disable the joysticks, then I wont be able to use VA unless i leave the mic open (without ptt enabled). Unless I disable all the devices there other than the wheel?

[Pfeil]

You can keep the wheel connected for now, but if the crash still occurs, you're going to have to disable that as well, to rule it out.

[MikeJeffries]

Understood. I'll try it next time. thanks

[MikeJeffries]

Understood. I'll try it next time. thanks

Just a heads up, i turned on my pc to delete the other joysticks i had in there (except for the Fanatec DD2 wheel) and i went to event viewer to see if anything popped up and even though the app didnt crash it created this in event viewer... 2 info warnings and 1 error, see below:

Error:

Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: msvcrt.dll, version: 7.0.19041.546, time stamp: 0x7f567a50
Exception code: 0xc0000005
Fault offset: 0x00056dda
Faulting process id: 0x4180
Faulting application start time: 0x01d6f69a0b4fca46
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: b32bc740-f230-4cea-bd02-547116ae6a30
Faulting package full name:
Faulting package-relative application ID:

DETAILS OF ERROR:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T23:56:02.8808803Z" />
  <EventRecordID>6588</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data>4180</Data>
  <Data>01d6f69a0b4fca46</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\System32\msvcrt.dll</Data>
  <Data>b32bc740-f230-4cea-bd02-547116ae6a30</Data>
  <Data />
  <Data />
  </EventData>
  </Event>

==================
Info:

Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: msvcrt.dll
P5: 7.0.19041.546
P6: 7f567a50
P7: c0000005
P8: 00056dda
P9:
P10:

Attached files:

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_8a073740-5836-454f-ba35-ecfe46c2dec9

Analysis symbol:
Rechecking for solution: 0
Report Id: b32bc740-f230-4cea-bd02-547116ae6a30
Report Status: 131076
Hashed bucket:
Cab Guid: 0

Details:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T23:56:03.3148807Z" />
  <EventRecordID>6589</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data />
  <Data>0</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data />
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_8a073740-5836-454f-ba35-ecfe46c2dec9</Data>
  <Data />
  <Data>0</Data>
  <Data>b32bc740-f230-4cea-bd02-547116ae6a30</Data>
  <Data>131076</Data>
  <Data />
  <Data>0</Data>
  </EventData>
  </Event>

2nd Info:

Fault bucket 2116386680741274027, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: msvcrt.dll
P5: 7.0.19041.546
P6: 7f567a50
P7: c0000005
P8: 00056dda
P9:
P10:

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER34B8.tmp.WERInternalMetadata.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_8a073740-5836-454f-ba35-ecfe46c2dec9

Analysis symbol:
Rechecking for solution: 0
Report Id: b32bc740-f230-4cea-bd02-547116ae6a30
Report Status: 268566528
Hashed bucket: abfad6e2926f7a673d5eea7918f3a1ab
Cab Guid: 0

2nd info event's details:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-29T23:56:04.0539187Z" />
  <EventRecordID>6590</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>2116386680741274027</Data>
  <Data>1</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER34B8.tmp.WERInternalMetadata.xml</Data>
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_8a073740-5836-454f-ba35-ecfe46c2dec9</Data>
  <Data />
  <Data>0</Data>
  <Data>b32bc740-f230-4cea-bd02-547116ae6a30</Data>
  <Data>268566528</Data>
  <Data>abfad6e2926f7a673d5eea7918f3a1ab</Data>
  <Data>0</Data>
  </EventData>
  </Event>

[MikeJeffries]

More info....
I just restarted my PC, opened VA, Clicked X on the top right and shut down VA.
Windows Event Viewer shows this error and info below. Keep in mind i only have 1 joystick (fanatec DD2 enabled now). This is just an error in the event viewer - the window didnt close itself, but it did pop up after i manually shut down the VA window.

ERROR:
Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: msvcrt.dll, version: 7.0.19041.546, time stamp: 0x7f567a50
Exception code: 0xc0000005
Fault offset: 0x00056dda
Faulting process id: 0x4258
Faulting application start time: 0x01d6f69c99451fc5
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: e9645de9-bbb1-4008-8f98-7572861067c7
Faulting package full name:
Faulting package-relative application ID:

ERROR DETAILS:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T00:13:59.5429461Z" />
  <EventRecordID>6665</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data>4258</Data>
  <Data>01d6f69c99451fc5</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\System32\msvcrt.dll</Data>
  <Data>e9645de9-bbb1-4008-8f98-7572861067c7</Data>
  <Data />
  <Data />
  </EventData>
  </Event>

Information event after the error:
Fault bucket 2116386680741274027, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: msvcrt.dll
P5: 7.0.19041.546
P6: 7f567a50
P7: c0000005
P8: 00056dda
P9:
P10:

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6009.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6133.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6134.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6132.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6152.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_5ccc281e-87d7-451c-862d-1e4d8c0d8ffd

Analysis symbol:
Rechecking for solution: 0
Report Id: e9645de9-bbb1-4008-8f98-7572861067c7
Report Status: 268566528
Hashed bucket: abfad6e2926f7a673d5eea7918f3a1ab
Cab Guid: 0

Info Details:
 <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T00:14:00.2259375Z" />
  <EventRecordID>6666</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>2116386680741274027</Data>
  <Data>1</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6009.tmp.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6133.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6134.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6132.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6152.tmp.txt</Data>
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_5ccc281e-87d7-451c-862d-1e4d8c0d8ffd</Data>
  <Data />
  <Data>0</Data>
  <Data>e9645de9-bbb1-4008-8f98-7572861067c7</Data>
  <Data>268566528</Data>
  <Data>abfad6e2926f7a673d5eea7918f3a1ab</Data>
  <Data>0</Data>
  </EventData>
  </Event>

[Pfeil]

Access violation...odd.

Can you reproduce the error? I.E. does it happen every time VoiceAttack runs?

Is there a VoiceAttackFault.txt file in VoiceAttack's installation directory?


Have you run a system file scan lately? Worth doing, just in case.

[MikeJeffries]

The VA Fault file has info back from Dec 26th. Nothing new

I will run System file scan soon

Keep in mind I wiped this entire drive and reinstalled everything just about 3 months ago

[MikeJeffries]

sfc/scannow found some corrupt files and "fixed them"

scans done

I just reproduced the same error when i manually closed the VA window.

Keep in mind this is NOT the issue i was having but now that im looking for errors, i found this one popping up. Mainly my issue was when VA randomly shuts itself down mid-race in iracing and i have to reopen it.

[MikeJeffries]

Not sure if anything is new in this error, but here's the error and 3 pieces of info in event viewer:

ERROR:
Faulting application name: VoiceAttack.exe, version: 1.8.7.0, time stamp: 0x5f887834
Faulting module name: msvcrt.dll, version: 7.0.19041.546, time stamp: 0x7f567a50
Exception code: 0xc0000005
Fault offset: 0x00056dda
Faulting process id: 0x4c80
Faulting application start time: 0x01d6f6f2962f5ecf
Faulting application path: C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: 045d2a35-5527-4e76-b541-086b05876831
Faulting package full name:
Faulting package-relative application ID:

Details:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>100</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T10:28:37.5185659Z" />
  <EventRecordID>6680</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data>4c80</Data>
  <Data>01d6f6f2962f5ecf</Data>
  <Data>C:\Program Files (x86)\VoiceAttack\VoiceAttack.exe</Data>
  <Data>C:\WINDOWS\System32\msvcrt.dll</Data>
  <Data>045d2a35-5527-4e76-b541-086b05876831</Data>
  <Data />
  <Data />
  </EventData>
  </Event>
--------------------------------------

Info (literally 1 second after the error these 3 popped up)
Successfully scheduled Software Protection service for re-start at 2121-01-06T10:28:37Z. Reason: RulesEngine.

Details:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
  <EventID Qualifiers="16384">16384</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T10:28:37.5959420Z" />
  <EventRecordID>6681</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>2121-01-06T10:28:37Z</Data>
  <Data>RulesEngine</Data>
  </EventData>
  </Event>

Info:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: msvcrt.dll
P5: 7.0.19041.546
P6: 7f567a50
P7: c0000005
P8: 00056dda
P9:
P10:

Attached files:

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_df7833ac-eb5b-4631-aa79-d4feaaa9031b

Analysis symbol:
Rechecking for solution: 0
Report Id: 045d2a35-5527-4e76-b541-086b05876831
Report Status: 131076
Hashed bucket:
Cab Guid: 0

Details:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T10:28:37.8890775Z" />
  <EventRecordID>6682</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data />
  <Data>0</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data />
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_df7833ac-eb5b-4631-aa79-d4feaaa9031b</Data>
  <Data />
  <Data>0</Data>
  <Data>045d2a35-5527-4e76-b541-086b05876831</Data>
  <Data>131076</Data>
  <Data />
  <Data>0</Data>
  </EventData>
  </Event>

Info:
Fault bucket 2116386680741274027, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VoiceAttack.exe
P2: 1.8.7.0
P3: 5f887834
P4: msvcrt.dll
P5: 7.0.19041.546
P6: 7f567a50
P7: c0000005
P8: 00056dda
P9:
P10:

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER17E2.tmp.WERInternalMetadata.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_df7833ac-eb5b-4631-aa79-d4feaaa9031b

Analysis symbol:
Rechecking for solution: 0
Report Id: 045d2a35-5527-4e76-b541-086b05876831
Report Status: 268566528
Hashed bucket: abfad6e2926f7a673d5eea7918f3a1ab
Cab Guid: 0

Details:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" />
  <EventID Qualifiers="0">1001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2021-01-30T10:28:38.2655412Z" />
  <EventRecordID>6683</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>DESKTOP-ODK0K47</Computer>
  <Security />
  </System>
- <EventData>
  <Data>2116386680741274027</Data>
  <Data>1</Data>
  <Data>APPCRASH</Data>
  <Data>Not available</Data>
  <Data>0</Data>
  <Data>VoiceAttack.exe</Data>
  <Data>1.8.7.0</Data>
  <Data>5f887834</Data>
  <Data>msvcrt.dll</Data>
  <Data>7.0.19041.546</Data>
  <Data>7f567a50</Data>
  <Data>c0000005</Data>
  <Data>00056dda</Data>
  <Data />
  <Data />
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER17E2.tmp.WERInternalMetadata.xml</Data>
  <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_VoiceAttack.exe_39987d9a0d2c1bdd0ecadcb5fd91b331376adb8_91f0750c_df7833ac-eb5b-4631-aa79-d4feaaa9031b</Data>
  <Data />
  <Data>0</Data>
  <Data>045d2a35-5527-4e76-b541-086b05876831</Data>
  <Data>268566528</Data>
  <Data>abfad6e2926f7a673d5eea7918f3a1ab</Data>
  <Data>0</Data>
  </EventData>
  </Event>

[MikeJeffries]

And just for kicks i reproduced the same error when closing out VA window a 2nd time this morning and the same error pointing to mscvrt.dll popped up with 2 pieces of info after.

The VA crashes were random before, and just closed the VA window mid-race - in this case the error pops up when im manually closing the window.

 I'm not sure if they have to do with each other but most likely something is there that's causing these errors.

[MikeJeffries]

So i just ran 1 hour and it didnt shut down. Ill continue watching out for the random shutdowns mid-race. previously it would work fine for a week, and then it pops up randomly so it'll take some time to see if the issue pops back up for sure, although those errors tell me that something is still wrong

[Pfeil]

Do the msvcrt exceptions still get thrown if you disable plugin support?

[MikeJeffries]

I disabled plugin support, closed VA, and checked event viewer - no issue.
Reenabled Plugin Support, closed VA, and the mscvrt.dll error pops up in event viewer.

So its something there - nice catch

Here's something else - it is DEFINITELY Digital Race Engineer...

I have HCS Voicepacks also installed for Star Wars Squadrons that i use sometimes. When i turn on the HCS Plugin, shut down VA, no error pops up in event viewer.

Reopened VA, changed the Plugin to DRE, shut down VA, and the mscvrt.dll error comes up in event viewer.

So it's something with this plugin it seems

[Egil Sandfeld]

Alright, thanks for the digging both of you.

I'll continue my bug hunting in my plugin. Sorry for the trouble
(Mike and I will continue the discussion elsewhere)

[MikeJeffries]

Do the msvcrt exceptions still get thrown if you disable plugin support?

Hello again
Me and Egil did some extensive testing and ruled out DRE.
I took multiple steps that Egil gave me to rule it out, including deleting the DRE profile, deleting the folders in VA/Apps, and restarting, and this latest error with mscvrt.dll still comes out

We made an empty profile with just 1 command which responds to "hello dre". It will respond back "Hello michael, do you see any errors?"

What i noticed is that when closing out VA while VA was still responding to my command (mid sentence), VA will hang in Task manager as it's closing down, and after it hangs for a few seconds and fully closes out, the mscvrt.dll error comes out in event viewer. This happened every time i closed VA while it was responding back to my command.

Now when i let the response finish all the way and then click X to close the VA window, SOMETIMES i can close VA without an error being thrown out.

Do you know what this could be? It seems related to Text-To-Speech somehow because when I tried some commands with HCS Voicepacks for Star Wars Squadrons, no errors are thrown at all and i'm not sure if they use Text to Speech in theirs.

I use my Pimax headset's microphone, but the speakers are the VIVE Deluxe audio strap connected to the Pimax 8k x headset - is it possible it has something to do with the mic on the VR headset?

[Pfeil]

Which text-to-speech voice are you using?

It may be that something is getting disposed while closing the application, which something in another thread then tries to access.
In itself, as long as it doesn't occur where data is being saved, the issue may not actually impact the behavior of the application

I can't replicate it on my machine, despite it being so common with your system, so it's not something that occurs with all installations.

[MikeJeffries]

Egil asked me the same thing. I use the Default one. The only other options i saw were Microsoft David and Microsoft Riven or something like that. The default one is David also i believe.

[Pfeil]

Is the exception still thrown if you disable speech recognition (and trigger the command another way, E.G. using a keyboard key)?

Hold Ctrl and Shift while VoiceAttack is starting, and choose "Disable speech recognition (this session only)" (or check the "Disable Speech Recognition" option on the "Recognition" tab of the VoiceAttack options window and restart VoiceAttack, though don't forget to re-enable it later in that case)

[MikeJeffries]

Is the exception still thrown if you disable speech recognition (and trigger the command another way, E.G. using a keyboard key)?

Hold Ctrl and Shift while VoiceAttack is starting, and choose "Disable speech recognition (this session only)" (or check the "Disable Speech Recognition" option on the "Recognition" tab of the VoiceAttack options window and restart VoiceAttack, though don't forget to re-enable it later in that case)

EDIT:
I just tried it and changed the empty profile to work with the 1 command to activate under the keypress K with speech recognition disabled in the session.

I pressed K 3 times back to back and while it was reading back the command shut down VA and the error was thrown on the 3rd time i tried it. So it doesn't have to do with speec recognition alone it seems.

Keep in mind also that once again, this error is not the original problem I was having. VA would randomly shut down on me during some longer sessions of usage. I haven't had this happen in a few days now but i also haven't had longer play session in iRacing yet. As soon as I went down the hole of bug hunting, i found this bug which is different than the bug that we originally saw, which mentioned ntdll.dll.
I dont know if the 2 bugs between mscvrt.dll and ntdll.dll are related, but I hope so because if I alleviate this issue, it might alleviate the main problem i was having.

[Pfeil]

The ntdll issue most likely originated from the joystick system, but it's plausible that the cause of this msvcrt exception is something else entirely.

As that exception seems to be thrown primarily (or even exclusively) when VoiceAttack is shutting down, it's less likely that it would occur during normal operation and cause a crash.

So, while it's obviously not a good thing that exceptions are being thrown, if it doesn't stop VoiceAttack from working correctly while in use, the most feasible option at this stage, given that more data isn't available (especially since it occurs outside of what the built-in exception handling can catch), and that the issue does not appear to be replicable on other machines, would probably be to disregard it, as long as the situation remains the same.

[MikeJeffries]

Ok understood. I’ll continue using it. If the main issue comes back and we can figure out whats going on, i’ll report back