.net-4.0 - w3wp.exe 崩溃 - ThreadAbortException

Question

我们遇到了一个无法重现的问题，它在运行 ASP.NET 4 的 Web 服务器(Windows Server 2008 Datacenter 64 位，托管在 Amazon EC2 上)上随机发生。

它以错误日志中的 ASP.NET 警告开始(带有很长 URL 的奇怪 GET 请求):

Exception information:
Exception type: HttpException
Exception message: The length of the URL for this request exceeds the configured maxUrlLength value.
at System.Web.HttpRequest.ValidateInputIfRequiredByConfig()
at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context)

然后出现错误:

Application ID: /LM/W3SVC/2/ROOT
Process ID: 4604
Exception: System.Threading.ThreadAbortException
Message: Thread was being aborted.
StackTrace: at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr managedHttpContext, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)

然后另一个错误:

Application ID: DefaultDomain
Process ID: 4604
Exception: System.Threading.ThreadAbortException
Message: Thread was being aborted.
StackTrace:

然后应用程序错误:

Faulting application w3wp.exe, version 7.0.6002.18005, time stamp 0x49e03238, faulting module kernel32.dll, version 6.0.6002.18005, time stamp 0x49e041d1, exception code 0xe0434352, fault offset 0x00000000000176fd, process id 0x%9, application start time 0x%10.

Windbg

我设法获得了 adplus 崩溃的转储，但我真的不知道该寻找什么。我之前用 Windbg 解决过一些 stackoverflows，但我不知道该使用哪种方法来解决这个错误。

!pe 出现错误的线程:

Exception object: 00000001c323d948
Exception type: System.Threading.ThreadAbortException
Message: Thread was being aborted.
InnerException:
StackTrace (generated):

StackTraceString:
HResult: 80131530

!clrstack

Child SP IP Call Site
0000000015f7f078 0000000076c176fd [GCFrame: 0000000015f7f078]
0000000015f7f258 0000000076c176fd [GCFrame: 0000000015f7f258]

k

Child-SP RetAddr Call Site
0000000015f7edf0 000007fef2826e39 kernel32!RaiseException+0x39
0000000015f7eec0 000007fef2bbbfb4 clr!RaiseTheExceptionInternalOnly+0x363
0000000015f7eff0 000007fef2bbc906 clr!RaiseTheException+0xa4
0000000015f7f020 000007fef2c3b99b clr!BStrFromString+0x66
0000000015f7f050 000007fef2c3b9a9 clr!RealCOMPlusThrow+0x3b
0000000015f7f0c0 000007fef2c93156 clr!RealCOMPlusThrow+0x9
0000000015f7f0f0 000007fef2b229f3 clr!Thread::RaiseCrossContextException+0x2a7
0000000015f7f310 000007fef2830886 clr! ?? ::FNODOBFM::string'+0xafb03<br/>
0000000015f7f4c0 000007fef27fcce3 clr!UM2MDoADCallBack+0x9e<br/>
0000000015f7f530 000007fef845ba59 clr!UMThunkStubAMD64+0x273<br/>
0000000015f7f5c0 000007fef8458f02 webengine4!W3_MGD_HANDLER::ProcessNotification+0x79<br/>
0000000015f7f5f0 000007fef27d4595 webengine4!ProcessNotificationCallback+0x43<br/>
0000000015f7f620 000007fef27d3ac8 clr!UnManagedPerAppDomainTPCount::DispatchWorkItem+0x181<br/>
0000000015f7f6d0 000007fef294658f clr!ThreadpoolMgr::NewWorkerThreadStart+0x2e5<br/>
0000000015f7f770 000007fef29447c6 clr!ThreadpoolMgr::WorkerThreadStart+0x3b<br/>
0000000015f7f810 0000000076c1be3d clr!Thread::intermediateThreadProc+0x7d<br/>
0000000015f7fbd0 0000000076d56a51 kernel32!BaseThreadInitThunk+0xd<br/>
0000000015f7fc00 00000000`00000000 ntdll!RtlUserThreadStart+0x1d

有人知道这可能是什么吗？或者可以为我指明使用 Windbg 进行分析的正确方向吗？

编辑:传入的 url 通常如下所示:foo.bar.com/wEPDwULLTE1MTk5MzIzMTFkGAMFFmN0bDAwJGRiMSRkZGxEYXRhYmFzZXMPFCsAAmRkZAU7Y3RsMDAkU2VhcmNoQ2xvdWQxJF9SaWdodENvbHVtbiRfU2VhcmNoQ2xvdWQkbHN2U2Vhcm NoVGVybXMPFCsADmRkZGRkZGQ8KwaAUAAIUZGRkZgL/D2QFK2N0bDAwJHN1cnZleTEkX1JpZ2h0Q29sdW1uJF9JUiR1c2VyQ29tbWVudHMPFCsAA2VnZGQeuUcvQDsShDip1k7YjJw70Ry 9/Q1B9Sd1egrovYgkw==/

但我在事件日志中发现这种情况也发生在这个网址上，如下所示:foo.bar.com/&(.NET 4 中的“危险请求”)

Answer 1

您至少应该加载符号，然后看到调用堆栈中显示的正确字符串。

如果您无法处理此类分析，我认为通过 http://support.microsoft.com 打开支持案例对你有好处。