{"action":"closed","issue":{"url":"https://api.github.com/repos/aspnet/IISIntegration/issues/662","repository_url":"https://api.github.com/repos/aspnet/IISIntegration","labels_url":"https://api.github.com/repos/aspnet/IISIntegration/issues/662/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/IISIntegration/issues/662/comments","events_url":"https://api.github.com/repos/aspnet/IISIntegration/issues/662/events","html_url":"https://github.com/aspnet/IISIntegration/issues/662","id":304901342,"number":662,"title":"ANCM: Inprocess: AV when recycling IIS apppool after sending websocket connection without installing IIS websocket module","user":{"login":"jhkimnew","id":20650163,"avatar_url":"https://avatars2.githubusercontent.com/u/20650163?v=4","gravatar_id":"","url":"https://api.github.com/users/jhkimnew","html_url":"https://github.com/jhkimnew","followers_url":"https://api.github.com/users/jhkimnew/followers","following_url":"https://api.github.com/users/jhkimnew/following{/other_user}","gists_url":"https://api.github.com/users/jhkimnew/gists{/gist_id}","starred_url":"https://api.github.com/users/jhkimnew/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhkimnew/subscriptions","organizations_url":"https://api.github.com/users/jhkimnew/orgs","repos_url":"https://api.github.com/users/jhkimnew/repos","events_url":"https://api.github.com/users/jhkimnew/events{/privacy}","received_events_url":"https://api.github.com/users/jhkimnew/received_events","type":"User","site_admin":false},"labels":[{"id":872729005,"url":"https://api.github.com/repos/aspnet/IISIntegration/labels/investigate","name":"investigate","color":"e580c2","default":false}],"state":"closed","locked":false,"assignee":{"login":"pakrym","id":1697911,"avatar_url":"https://avatars0.githubusercontent.com/u/1697911?v=4","gravatar_id":"","url":"https://api.github.com/users/pakrym","html_url":"https://github.com/pakrym","followers_url":"https://api.github.com/users/pakrym/followers","following_url":"https://api.github.com/users/pakrym/following{/other_user}","gists_url":"https://api.github.com/users/pakrym/gists{/gist_id}","starred_url":"https://api.github.com/users/pakrym/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pakrym/subscriptions","organizations_url":"https://api.github.com/users/pakrym/orgs","repos_url":"https://api.github.com/users/pakrym/repos","events_url":"https://api.github.com/users/pakrym/events{/privacy}","received_events_url":"https://api.github.com/users/pakrym/received_events","type":"User","site_admin":false},"assignees":[{"login":"pakrym","id":1697911,"avatar_url":"https://avatars0.githubusercontent.com/u/1697911?v=4","gravatar_id":"","url":"https://api.github.com/users/pakrym","html_url":"https://github.com/pakrym","followers_url":"https://api.github.com/users/pakrym/followers","following_url":"https://api.github.com/users/pakrym/following{/other_user}","gists_url":"https://api.github.com/users/pakrym/gists{/gist_id}","starred_url":"https://api.github.com/users/pakrym/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pakrym/subscriptions","organizations_url":"https://api.github.com/users/pakrym/orgs","repos_url":"https://api.github.com/users/pakrym/repos","events_url":"https://api.github.com/users/pakrym/events{/privacy}","received_events_url":"https://api.github.com/users/pakrym/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/aspnet/IISIntegration/milestones/15","html_url":"https://github.com/aspnet/IISIntegration/milestone/15","labels_url":"https://api.github.com/repos/aspnet/IISIntegration/milestones/15/labels","id":3055904,"number":15,"title":"2.1.0-preview2","description":null,"creator":{"login":"muratg","id":1808428,"avatar_url":"https://avatars3.githubusercontent.com/u/1808428?v=4","gravatar_id":"","url":"https://api.github.com/users/muratg","html_url":"https://github.com/muratg","followers_url":"https://api.github.com/users/muratg/followers","following_url":"https://api.github.com/users/muratg/following{/other_user}","gists_url":"https://api.github.com/users/muratg/gists{/gist_id}","starred_url":"https://api.github.com/users/muratg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muratg/subscriptions","organizations_url":"https://api.github.com/users/muratg/orgs","repos_url":"https://api.github.com/users/muratg/repos","events_url":"https://api.github.com/users/muratg/events{/privacy}","received_events_url":"https://api.github.com/users/muratg/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":29,"state":"open","created_at":"2018-01-23T00:14:58Z","updated_at":"2018-03-26T19:10:17Z","due_on":null,"closed_at":null},"comments":6,"created_at":"2018-03-13T19:19:45Z","updated_at":"2018-03-26T19:10:17Z","closed_at":"2018-03-26T19:10:17Z","author_association":"CONTRIBUTOR","body":"@jkotalik Would you take a look at this issue?\r\n\r\n1. Uninstall IIS WebSocket module or remove WebSocketModule from applicationhost.config\r\n2. Send a websockect connection to an websocket aspnetcore app which is running in inprocess mode, which is supposed to fail because there is IIS Websocket module\r\n3. Recycle IIS worker process\r\n\r\nEXPECTED:\r\n\r\nNo AV\r\n\r\nACTUAL:\r\n\r\nBelow AV happens to w3wp.exe process.\r\n\r\n0:050> kn\r\n # Child-SP          RetAddr           Call Site\r\n00 00000074`6f0bc9f0 00007ff8`c9617778 coreclr!RaiseTheExceptionInternalOnly+0x259 [e:\\a\\_work\\1606\\s\\src\\vm\\excep.cpp @ 3029] \r\n01 00000074`6f0bcb00 00007ff8`c8da6ad4 coreclr!IL_Rethrow+0xb8 [e:\\a\\_work\\1606\\s\\src\\vm\\jithelpers.cpp @ 4892] \r\n02 00000074`6f0bcc50 00007ff8`c948250e System_Private_CoreLib+0x616ad4\r\n03 00000074`6f0bcca0 00007ff8`c9482d18 coreclr!ExceptionTracker::CallHandler+0xe6 [e:\\a\\_work\\1606\\s\\src\\vm\\exceptionhandling.cpp @ 3423] \r\n04 00000074`6f0bcd10 00007ff8`c94814cc coreclr!ExceptionTracker::CallCatchHandler+0x90 [e:\\a\\_work\\1606\\s\\src\\vm\\exceptionhandling.cpp @ 646] \r\n05 00000074`6f0bcdb0 00007ff9`04ef432d coreclr!ProcessCLRException+0x3ec [e:\\a\\_work\\1606\\s\\src\\vm\\exceptionhandling.cpp @ 1177] \r\n06 00000074`6f0bcee0 00007ff9`04e6cdc3 ntdll!RtlpExecuteHandlerForUnwind+0xd [minkernel\\ntos\\rtl\\amd64\\xcptmisc.asm @ 252] \r\n07 00000074`6f0bcf10 00007ff8`c94d4c34 ntdll!RtlUnwindEx+0x5d3 [minkernel\\ntos\\rtl\\amd64\\exdsptch.c @ 1069] \r\n08 00000074`6f0bd600 00007ff8`c9481498 coreclr!ClrUnwindEx+0x40 [e:\\a\\_work\\1606\\s\\src\\vm\\exceptionhandling.cpp @ 5326] \r\n09 00000074`6f0bdb20 00007ff9`04ef42ad coreclr!ProcessCLRException+0x3b8 [e:\\a\\_work\\1606\\s\\src\\vm\\exceptionhandling.cpp @ 1132] \r\n0a 00000074`6f0bdc50 00007ff9`04e6c1bd ntdll!RtlpExecuteHandlerForException+0xd [minkernel\\ntos\\rtl\\amd64\\xcptmisc.asm @ 131] \r\n0b 00000074`6f0bdc80 00007ff9`04ef31de ntdll!RtlDispatchException+0x3cd [minkernel\\ntos\\rtl\\amd64\\exdsptch.c @ 569] \r\n0c 00000074`6f0be380 00007ff9`01fd57f8 ntdll!KiUserExceptionDispatch+0x2e [minkernel\\ntos\\rtl\\amd64\\trampoln.asm @ 745] \r\n0d 00000074`6f0bea80 00007ff8`c947f92d KERNELBASE!RaiseException+0x68 [minkernel\\kernelbase\\xcpt.c @ 922] \r\n0e 00000074`6f0beb60 00007ff8`c947f2f9 coreclr!RaiseTheExceptionInternalOnly+0x259 [e:\\a\\_work\\1606\\s\\src\\vm\\excep.cpp @ 3029] \r\n0f 00000074`6f0bec70 00007ff8`c8e9bbbf coreclr!IL_Throw+0x139 [e:\\a\\_work\\1606\\s\\src\\vm\\jithelpers.cpp @ 4861] \r\n10 00000074`6f0bee20 00007ff8`c8da6a31 System_Private_CoreLib+0x70bbbf\r\n11 00000074`6f0bee50 00007ff8`c8e7f486 System_Private_CoreLib+0x616a31\r\n12 00000074`6f0beec0 00007ff8`c94df6f3 System_Private_CoreLib+0x6ef486\r\n13 00000074`6f0bef60 00007ff8`c93fc116 coreclr!CallDescrWorkerInternal+0x83 [E:\\A\\_work\\1606\\s\\src\\vm\\amd64\\CallDescrWorkerAMD64.asm @ 101] \r\n14 (Inline Function) --------`-------- coreclr!CallDescrWorkerWithHandler+0x5a [e:\\a\\_work\\1606\\s\\src\\vm\\callhelpers.cpp @ 78] \r\n15 00000074`6f0befa0 00007ff8`c93fc8fa coreclr!MethodDescCallSite::CallTargetWorker+0x196 [e:\\a\\_work\\1606\\s\\src\\vm\\callhelpers.cpp @ 628] \r\n16 (Inline Function) --------`-------- coreclr!MethodDescCallSite::Call_RetBool+0x15 [e:\\a\\_work\\1606\\s\\src\\vm\\callhelpers.h @ 433] \r\n17 00000074`6f0bf0f0 00007ff8`c93fbdbf coreclr!QueueUserWorkItemManagedCallback+0xea [e:\\a\\_work\\1606\\s\\src\\vm\\comthreadpool.cpp @ 469] \r\n18 (Inline Function) --------`-------- coreclr!ManagedThreadBase_DispatchInner+0x52 [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 8844] \r\n19 00000074`6f0bf200 00007ff8`c93fbc3f coreclr!ManagedThreadBase_DispatchMiddle+0xeb [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 8895] \r\n1a 00000074`6f0bf3c0 00007ff8`c93fba73 coreclr!ManagedThreadBase_DispatchOuter+0xaf [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 9134] \r\n1b (Inline Function) --------`-------- coreclr!ManagedThreadBase_FullTransitionWithAD+0x56 [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 9193] \r\n1c (Inline Function) --------`-------- coreclr!ManagedThreadBase::ThreadPool+0x56 [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 9235] \r\n1d 00000074`6f0bf460 00007ff8`c93fb562 coreclr!ManagedPerAppDomainTPCount::DispatchWorkItem+0xe3 [e:\\a\\_work\\1606\\s\\src\\vm\\threadpoolrequest.cpp @ 757] \r\n1e (Inline Function) --------`-------- coreclr!ThreadpoolMgr::ExecuteWorkRequest+0xff [e:\\a\\_work\\1606\\s\\src\\vm\\win32threadpool.cpp @ 1560] \r\n1f 00000074`6f0bf5c0 00007ff8`c943606b coreclr!ThreadpoolMgr::WorkerThreadStart+0x272 [e:\\a\\_work\\1606\\s\\src\\vm\\win32threadpool.cpp @ 2024] \r\n20 00000074`6f0bf770 00007ff9`02c74344 coreclr!Thread::intermediateThreadProc+0x8b [e:\\a\\_work\\1606\\s\\src\\vm\\threads.cpp @ 2247] \r\n21 00000074`6f0bfe30 00007ff9`04ebdce1 KERNEL32!BaseThreadInitThunk+0x14 [base\\win32\\client\\thread.c @ 64] \r\n22 00000074`6f0bfe60 00000000`00000000 ntdll!RtlUserThreadStart+0x21 [minkernel\\ntdll\\rtlstrt.c @ 997] \r\n"}}
{"actor":{"display_login":"jhkimnew"}}