Skip to main content
B
birdtori
Participant
July 22, 2024
Question

AdobeCollabSync.exe crashes frequently

  • July 22, 2024
  • 1 reply
  • 2262 views

 

Since last year AdobeCollabSync.exe frequently crashes with: Security check failure or stack buffer overrun - code c0000409
 
Since I'm a developer and has windbg installed as postmortem debugger, it pops up every time this happens which is very annoying.  Not exactly sure how often it happens, but I feel it's 5+ times per week.

Details from windbg:
Microsoft (R) Windows Debugger Version 10.0.22000.1 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Executable search path is:
ModLoad: 00007ff7`26640000 00007ff7`2715f000   C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
ModLoad: 00007ff8`c31f0000 00007ff8`c3407000   C:\WINDOWS\SYSTEM32\ntdll.dll
ModLoad: 00007ff8`c1c80000 00007ff8`c1d44000   C:\WINDOWS\System32\KERNEL32.DLL
ModLoad: 00007ff8`c07a0000 00007ff8`c0b4d000   C:\WINDOWS\System32\KERNELBASE.dll
ModLoad: 00007ff8`c2810000 00007ff8`c286e000   C:\WINDOWS\System32\SHLWAPI.dll
ModLoad: 00007ff8`c1d50000 00007ff8`c1df7000   C:\WINDOWS\System32\msvcrt.dll
ModLoad: 00007ff8`c0fc0000 00007ff8`c116e000   C:\WINDOWS\System32\USER32.dll
ModLoad: 00007ff8`c0d90000 00007ff8`c0db6000   C:\WINDOWS\System32\win32u.dll
ModLoad: 00007ff8`c1ad0000 00007ff8`c1af9000   C:\WINDOWS\System32\GDI32.dll
ModLoad: 00007ff8`c0b50000 00007ff8`c0c69000   C:\WINDOWS\System32\gdi32full.dll
ModLoad: 00007ff8`c0cf0000 00007ff8`c0d8a000   C:\WINDOWS\System32\msvcp_win.dll
ModLoad: 00007ff8`c05c0000 00007ff8`c06d1000   C:\WINDOWS\System32\ucrtbase.dll
ModLoad: 00007ff8`c1580000 00007ff8`c1632000   C:\WINDOWS\System32\ADVAPI32.dll
ModLoad: 00007ff8`c2dd0000 00007ff8`c2e79000   C:\WINDOWS\System32\sechost.dll
ModLoad: 00007ff8`c0520000 00007ff8`c0548000   C:\WINDOWS\System32\bcrypt.dll
ModLoad: 00007ff8`c1b00000 00007ff8`c1c14000   C:\WINDOWS\System32\RPCRT4.dll
ModLoad: 00007ff8`c1fb0000 00007ff8`c280f000   C:\WINDOWS\System32\SHELL32.dll
ModLoad: 00007ff8`c1e00000 00007ff8`c1fa5000   C:\WINDOWS\System32\ole32.dll
ModLoad: 00007ff8`c2920000 00007ff8`c2ca8000   C:\WINDOWS\System32\combase.dll
ModLoad: 00007ff8`c2fe0000 00007ff8`c2fe8000   C:\WINDOWS\System32\PSAPI.DLL
ModLoad: 00007ff8`c1340000 00007ff8`c13b1000   C:\WINDOWS\System32\WS2_32.dll
ModLoad: 00007ff8`c0dc0000 00007ff8`c0f27000   C:\WINDOWS\System32\CRYPT32.dll
ModLoad: 00007ff8`81be0000 00007ff8`81bea000   C:\WINDOWS\SYSTEM32\SensApi.dll
ModLoad: 00007ff8`b06f0000 00007ff8`b08e0000   C:\WINDOWS\SYSTEM32\urlmon.dll
ModLoad: 00007ff8`c3070000 00007ff8`c3147000   C:\WINDOWS\System32\OLEAUT32.dll
ModLoad: 00007ff8`aa500000 00007ff8`aa9f4000   C:\WINDOWS\SYSTEM32\WININET.dll
ModLoad: 00007ff8`a99c0000 00007ff8`a99de000   C:\WINDOWS\SYSTEM32\MPR.dll
ModLoad: 00007ff8`b0430000 00007ff8`b06ee000   C:\WINDOWS\SYSTEM32\iertutil.dll
ModLoad: 00007ff8`befd0000 00007ff8`befdc000   C:\WINDOWS\SYSTEM32\netutils.dll
ModLoad: 00007ff8`b2750000 00007ff8`b2778000   C:\WINDOWS\SYSTEM32\srvcli.dll
ModLoad: 00007ff8`bb900000 00007ff8`bba36000   C:\WINDOWS\SYSTEM32\WINHTTP.dll
ModLoad: 00007ff8`a6850000 00007ff8`a6869000   C:\WINDOWS\SYSTEM32\NETAPI32.dll
ModLoad: 00007ff8`c1c20000 00007ff8`c1c51000   C:\WINDOWS\System32\IMM32.DLL
ModLoad: 00007ff8`bf8a0000 00007ff8`bf8e3000   C:\WINDOWS\SYSTEM32\SspiCli.dll
ModLoad: 00007ff8`be480000 00007ff8`bed7c000   C:\WINDOWS\SYSTEM32\windows.storage.dll
ModLoad: 00007ff8`be340000 00007ff8`be47f000   C:\WINDOWS\SYSTEM32\wintypes.dll
ModLoad: 00007ff8`c13c0000 00007ff8`c14b4000   C:\WINDOWS\System32\SHCORE.dll
ModLoad: 00007ff8`c0450000 00007ff8`c0471000   C:\WINDOWS\SYSTEM32\profapi.dll
ModLoad: 00007ff8`a6140000 00007ff8`a6157000   C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll
ModLoad: 00007ff8`bf5e0000 00007ff8`bf5f8000   C:\WINDOWS\SYSTEM32\kernel.appcore.dll
ModLoad: 00007ff8`bfab0000 00007ff8`bfb19000   C:\WINDOWS\system32\mswsock.dll
ModLoad: 00007ff8`bf090000 00007ff8`bf0bd000   C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
ModLoad: 00007ff8`bd920000 00007ff8`bd92d000   C:\WINDOWS\SYSTEM32\WINNSI.DLL
ModLoad: 00007ff8`c1330000 00007ff8`c1339000   C:\WINDOWS\System32\NSI.dll
ModLoad: 00007ff8`50fa0000 00007ff8`51169000   C:\Program Files\Adobe\Acrobat DC\Acrobat\CRClient.dll
ModLoad: 00007ff8`c0550000 00007ff8`c05bb000   C:\WINDOWS\System32\WINTRUST.dll
ModLoad: 00007ff8`bdf50000 00007ff8`be182000   C:\WINDOWS\SYSTEM32\dbghelp.dll
ModLoad: 00007ff8`a9bb0000 00007ff8`a9c3e000   C:\WINDOWS\SYSTEM32\MSVCP140.dll
ModLoad: 00007ff8`a9c40000 00007ff8`a9c5b000   C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
ModLoad: 00007ff8`aa160000 00007ff8`aa16c000   C:\WINDOWS\SYSTEM32\VCRUNTIME140_1.dll
ModLoad: 00007ff8`c01b0000 00007ff8`c01c2000   C:\WINDOWS\SYSTEM32\MSASN1.dll
ModLoad: 00007ff8`9c820000 00007ff8`9cab3000   C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955\comctl32.dll
ModLoad: 00007ff8`a3ac0000 00007ff8`a3ae5000   C:\Program Files\Adobe\Acrobat DC\Acrobat\BIB.dll
ModLoad: 00000000`73440000 00000000`7346b000   C:\Program Files\Adobe\Acrobat DC\Acrobat\AXE8SharedExpat.dll
ModLoad: 00007ff8`521d0000 00007ff8`5227a000   C:\Program Files\Adobe\Acrobat DC\Acrobat\sqlite.dll
ModLoad: 00007ff8`bd670000 00007ff8`bd71f000   C:\WINDOWS\system32\uxtheme.dll
ModLoad: 00007ff8`c0270000 00007ff8`c027a000   C:\WINDOWS\SYSTEM32\DPAPI.dll
ModLoad: 00007ff8`bfd30000 00007ff8`bfd3c000   C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
ModLoad: 00007ff8`c0c70000 00007ff8`c0ceb000   C:\WINDOWS\System32\bcryptPrimitives.dll
ModLoad: 00007ff8`bfd10000 00007ff8`bfd2b000   C:\WINDOWS\SYSTEM32\CRYPTSP.dll
ModLoad: 00007ff8`bf5a0000 00007ff8`bf5d5000   C:\WINDOWS\system32\rsaenh.dll
ModLoad: 00007ff8`bf110000 00007ff8`bf208000   C:\WINDOWS\SYSTEM32\DNSAPI.dll
ModLoad: 00007ff8`b7ce0000 00007ff8`b7cea000   C:\Windows\System32\rasadhlp.dll
ModLoad: 00007ff8`bace0000 00007ff8`bad63000   C:\WINDOWS\System32\fwpuclnt.dll
ModLoad: 00007ff8`bf4a0000 00007ff8`bf547000   C:\WINDOWS\system32\schannel.DLL
ModLoad: 00007ff8`bfeb0000 00007ff8`bfede000   C:\WINDOWS\SYSTEM32\ncrypt.dll
ModLoad: 00007ff8`bfe70000 00007ff8`bfea7000   C:\WINDOWS\SYSTEM32\NTASN1.dll
ModLoad: 00007ff8`b2d40000 00007ff8`b2d67000   C:\WINDOWS\system32\ncryptsslp.dll
ModLoad: 00007ff8`b2500000 00007ff8`b2532000   C:\Windows\System32\cryptnet.dll
ModLoad: 00007ff8`c0200000 00007ff8`c024e000   C:\WINDOWS\SYSTEM32\CFGMGR32.dll
ModLoad: 00007ff8`c14c0000 00007ff8`c1570000   C:\WINDOWS\System32\clbcatq.dll
ModLoad: 00007ff8`bce00000 00007ff8`bcf00000   C:\WINDOWS\system32\propsys.dll
ModLoad: 00007ff8`bac40000 00007ff8`bacd7000   C:\WINDOWS\SYSTEM32\apphelp.dll
Break-in sent, waiting 30 seconds...
WARNING: Break-in timed out, suspending.
         This is usually caused by another thread holding the loader lock
(2c10.2f6c): Wake debugger - code 80000007 (first chance)
ntdll!NtWaitForMultipleObjects+0x14:
00007ff8`c3290af4 c3              ret
0:000> g
(2c10.9b8): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!)
Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT
AdobeCollabSync!gudeSetMultipartUploadThreshold+0x295f51:
00007ff7`26ad8141 cd29            int     29h
0:016> !teb
TEB at 000000a7d2464000
    ExceptionList:        0000000000000000
    StackBase:            000000a7d3b00000
    StackLimit:           000000a7d3afc000
    SubSystemTib:         0000000000000000
    FiberData:            0000000000001e00
    ArbitraryUserPointer: 0000000000000000
    Self:                 000000a7d2464000
    EnvironmentPointer:   0000000000000000
    ClientId:             0000000000002c10 . 00000000000009b8
    RpcHandle:            0000000000000000
    Tls Storage:          0000027ffe3ae2b0
    PEB Address:          000000a7d243b000
    LastErrorValue:       0
    LastStatusValue:      c00000a3
    Count Owned Locks:    0
    HardErrorMode:        0

0:016> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2311

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 10644

    Key  : Analysis.Init.CPU.mSec
    Value: 686

    Key  : Analysis.Init.Elapsed.mSec
    Value: 318303

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 110

    Key  : FailFast.Name
    Value: FATAL_APP_EXIT

    Key  : FailFast.Type
    Value: 7

    Key  : Timeline.OS.Boot.DeltaSec
    Value: 10674

    Key  : Timeline.Process.Start.DeltaSec
    Value: 353

    Key  : WER.OS.Branch
    Value: ni_release

    Key  : WER.OS.Timestamp
    Value: 2022-05-06T12:50:00Z

    Key  : WER.OS.Version
    Value: 10.0.22621.1

    Key  : WER.Process.Version
    Value: 24.2.20895.0


NTGLOBALFLAG:  400

PROCESS_BAM_CURRENT_THROTTLED: 0

PROCESS_BAM_PREVIOUS_THROTTLED: 0

APPLICATION_VERIFIER_FLAGS:  0

EXCEPTION_RECORD:  (.exr -1)
ExceptionAddress: 00007ff726ad8141 (AdobeCollabSync!gudeSetMultipartUploadThreshold+0x0000000000295f51)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000007
Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT

FAULTING_THREAD:  000009b8

PROCESS_NAME:  AdobeCollabSync.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000007

STACK_TEXT:
000000a7`d3afd310 00007ff7`26ac1863     : 000000a7`d3afece0 000000a7`d3afdc80 00000000`00000000 00000000`00000000 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x295f51
000000a7`d3afd340 00007ff7`26ab5e56     : 000000a7`d3afece0 000000a7`d3afd470 000000a7`d3afdc80 000000a7`d3afd670 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x27f673
000000a7`d3afd370 00007ff7`26ab6af4     : 00000000`00002603 00007ff8`c323471a 0000027f`fc1e3300 000000a7`d3afd889 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x273c66
000000a7`d3afd540 00007ff7`26ab6b59     : 00007ff7`26640000 000000a7`d3afece0 000000a7`d3afde60 00007ff7`26ab49c9 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x274904
000000a7`d3afd5e0 00007ff7`26ab3a71     : 00007ff7`26640000 000000a7`d3afece0 000000a7`d3afde60 000000a7`d3afdc80 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x274969
000000a7`d3afd630 00007ff8`c329504f     : 000000a7`d3affd30 00000000`00000000 000000a7`d3afdc30 000000a7`d3afece0 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x271881
000000a7`d3afd6a0 00007ff8`c320e866     : 000000a7`d3afece0 00007ff7`26640000 00007ff7`268b5302 00007ff7`270fae88 : ntdll!RtlpExecuteHandlerForException+0xf
000000a7`d3afd6d0 00007ff8`c3244945     : 00000000`00000000 000000a7`d3afeb90 00000000`00000000 00007ff8`c32448a5 : ntdll!RtlDispatchException+0x286
000000a7`d3afde20 00007ff8`c07ffabc     : 0000027f`fe51a6e0 00007ff7`27066b08 000000a7`d3afee20 00007ff7`26ab1d33 : ntdll!RtlRaiseException+0x195
000000a7`d3afecc0 00007ff7`26ab2dbf     : 00007ff7`26e8acc0 00000000`0000001c 00007ff7`270aea20 00007ff7`26962cce : KERNELBASE!RaiseException+0x6c
000000a7`d3afeda0 00007ff7`26955855     : 000000a7`d3aff208 00007ff7`2670a489 000000a7`d3aff208 000000a7`d3aff1d8 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x270bcf
000000a7`d3afee00 00007ff7`26a8fdcc     : 000000a7`d3aff208 000000a7`d3afef90 000000a7`d3aff208 000000a7`d3aff208 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x113665
000000a7`d3afee90 00007ff7`26a8e279     : 00000000`000000c8 000000a7`d3aff3e0 0000027f`fe509100 00000000`00000000 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x24dbdc
000000a7`d3aff0f0 00007ff7`26a8d496     : 000000a7`d3aff3b0 000000a7`00000000 00000000`00000002 0000027f`fc271460 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x24c089
000000a7`d3aff2d0 00007ff7`26a8c3ee     : 0000027f`fc271460 00007ff7`270aea20 00007ff7`270aea20 0000027f`fc27ff50 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x24b2a6
000000a7`d3aff7b0 00007ff7`26a8a77b     : 0000027f`fc1f2bc0 0000027f`fc1f2bc0 000000a7`d3aff978 00000000`00000001 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x24a1fe
000000a7`d3aff810 00007ff7`26a88d5f     : 0000027f`fc27ff50 0000027f`fc27ff50 00000000`00000000 000000a7`d3aff978 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x24858b
000000a7`d3aff900 00007ff7`26a82620     : 0000027f`fc27ff50 00007ff7`270ae770 00000000`00000000 00007ff7`26e4a6b0 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x246b6f
000000a7`d3aff950 00007ff7`26a82aa9     : 00000000`00000000 00007ff7`270ae7e0 00000000`00000000 00000000`00000001 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x240430
000000a7`d3aff9b0 00007ff7`268bbac6     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`484c6f67 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x2408b9
000000a7`d3aff9f0 00007ff7`268b5302     : 0000027f`fe24ade0 00000000`00000000 00000000`00000000 00000000`00000005 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x798d6
000000a7`d3affd30 00007ff7`26ac8550     : 0000027f`fe24b330 00000000`00000000 00000000`00000000 00000000`00000000 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x73112
000000a7`d3affd60 00007ff8`c1c9257d     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : AdobeCollabSync!gudeSetMultipartUploadThreshold+0x286360
000000a7`d3affd90 00007ff8`c324af28     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x1d
000000a7`d3affdc0 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x28


SYMBOL_NAME:  AdobeCollabSync!gudeSetMultipartUploadThreshold+295f51

MODULE_NAME: AdobeCollabSync

IMAGE_NAME:  AdobeCollabSync.exe

STACK_COMMAND:  ~16s ; .cxr ; kb

FAILURE_BUCKET_ID:  FAIL_FAST_FATAL_APP_EXIT_c0000409_AdobeCollabSync.exe!gudeSetMultipartUploadThreshold

OS_VERSION:  10.0.22621.1

BUILDLAB_STR:  ni_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

IMAGE_VERSION:  24.2.20895.0

FAILURE_ID_HASH:  {b3c350cc-5408-20f2-b017-76e2f707af31}

Followup:     MachineOwner
---------


 

1 reply

S_S
Community Manager
S_SCommunity Manager
Community Manager
January 8, 2025

Hi @birdtori,

 

Hope you are doing well. Sorry for the trouble, and the delayed response.

 

If you are still looking for a solution, you may try the steps below:

1. Go to Acrobat-> Menu-> Help-> Repair Installation;

2. Go to Start Menu-> Control Panel-> Uninstall a Program-> Repair all the entities with C++;

3. Run sfc/scannow and DISM to repair any broker DLLs.

 

Hope this helps.


-Souvik

B
birdtoriAuthor
Participant
January 9, 2025

Thanks for the reply.  I discovered that the Visual C++ runtime on the machine was old and updated it yesterday, hopefully that'll take care of the issue...

D
Danilo_Tavares7263
Participant
February 8, 2025

Did you manage to resolve the problem?

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices