Adobe freezes on some users
- May 5, 2023
- 1 reply
- 2503 views
Hi,
Opening up some PDF's on some users the Acrobat freezes.
Upon opening the PDF Acrobat shows the signature validation box and freezes.
It takes 8% CPU on a 6 core 6 HT cpu. Defining affinity to a single core it’s clear that is locking the CPU to 100%.
Analysed the dump at WinDbg without making any conclusion.
Seems to have occured an exception but I don’t know the origin of it.
ExceptionCode: 80000003 (Break instruction exception)
On Process Monitor it records the events and as Acrobat.exe starts the cpu usage it doesn’t happen anymore events. Repeated the recording several times and it’s not a Process Monitor issue.
On Process Explorer on the Threads tab shows several lines.
Below is the stack info for the thread that is taking up the CPU.
ntoskrnl.exe!KeSynchronizeExecution+0x6c56
ntoskrnl.exe!KeWaitForMutexObject+0x1460
ntoskrnl.exe!KeWaitForMutexObject+0x98f
ntoskrnl.exe!KeWaitForMutexObject+0x233
ntoskrnl.exe!EtwProviderEnabled+0x211d
ntoskrnl.exe!KeWaitForMutexObject+0x3a29
ntoskrnl.exe!KeSynchronizeExecution+0x3afa
BIB.dll!BIBLockSmithUnlockImpl+0x3c89
Acrobat.dll!AIDE::AIDEFormatType::operator=+0x6e4e
Acrobat.dll!DllCanUnloadNow+0x8f038
Acrobat.dll!DllCanUnloadNow+0x909a9
Acrobat.dll!CTJPEGReader::CTJPEGReader+0x2c701f
Acrobat.dll!CTJPEGReader::CTJPEGReader+0x14c776
Acrobat.dll!CTJPEGReader::CTJPEGReader+0x15040d
PDDom.api!ObsoleteProc+0xb433
PDDom.api!ObsoleteProc+0xb387
PDDom.api!ObsoleteProc+0x19091
PDDom.api!FixedQuadOverlap+0x104f9
PDDom.api!FixedQuadOverlap+0x10688
PDDom.api!FixedQuadOverlap+0x103cd
PDDom.api!FixedQuadOverlap+0x106c2
PDDom.api!FixedQuadOverlap+0xf8ff
PDDom.api!FixedQuadOverlap+0xf81f
Acrobat.dll!DllCanUnloadNow+0x263354
Acrobat.dll!DllCanUnloadNow+0x2628d4
Acrobat.dll!DllCanUnloadNow+0x261dcb
Acrobat.dll!DllCanUnloadNow+0x2611b0
Acrobat.dll!AIDE::AIDEFormatType::operator=+0x704
USER32.dll!CallWindowProcW+0x3f8
USER32.dll!DispatchMessageW+0x259
Acrobat.dll!DllCanUnloadNow+0x1fedc0
Acrobat.dll!DllCanUnloadNow+0x1fdeec
Acrobat.dll!DllCanUnloadNow+0x1fddbd
Acrobat.dll!AcroWinMainSandbox+0x270d
Acrobat.dll!AcroWinMainSandbox+0x179
Acrobat.exe!sidestep::PreamblePatcher::PatchShortJump+0x17c1fe
Acrobat.exe!AcroRd32IsBrokerProcess+0x27572
KERNEL32.DLL!BaseThreadInitThunk+0x14
ntdll.dll!RtlUserThreadStart+0x21
Inside the dump.docx you find embedded the mini Dump made by the Process Explorer.
Versions:
Adobe Acrobat Reader 2023.001.20143 64 bits
Win 10 Pro 64bits 22H2 19045.2604
Best Regards.
