[stunnel-users] stunnel 5.18 may keep high CPU usage

Michal Trojnara Michal.Trojnara at mirt.net
Tue Jun 16 01:31:23 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 15.06.2015 22:38, Dod wrote:
> Here is the Thread's stack :
> 
> MSVCR90.dll!_endThread+0x7d ntoskrnl.exe!memset+0x61a 
> ntoskrnl.exe!KeWaitForMultipleObjects+0xd52 
> ntoskrnl.exe!KeWaitForSingleObject+0x19f 
> ntoskrnl.exe!PoStartNextPowerIrp+0xba4 
> ntoskrnl.exe!PoStartNextPowerIrp+0x1821 
> ntoskrnl.exe!PoStartNextPowerIrp+0x1a97 
> ntoskrnl.exe!KeReleaseInStackQueuedSpinLock+0x5a afd.sys+0x61c1c 
> afd.sys+0x51d3b ntoskrnl.exe!NtMapViewOfSection+0x15b7 
> ntoskrnl.exe!NtDeviceIoControlFile+0x56 
> ntoskrnl.exe!KeSynchronizeExecution+0x3a23 
> wow64cpu.dll!TurboDispatchJumpAddressEnd+0x6c0 
> wow64cpu.dll!TurboDispatchJumpAddressEnd+0x1fb 
> wow64.dll!Wow64SystemServiceEx+0x1ce 
> wow64.dll!Wow64LdrpInitialize+0x42a 
> ntdll.dll!RtlIsDosDeviceName_U+0x1f5c4 
> ntdll.dll!LdrInitializeThunk+0xe 
> ntdll.dll!NtDeviceIoControlFile+0x15 WS2_32.dll!select+0x9f 
> stunnel.exe!OPENSSL_Applink+0xd3ec 
> stunnel.exe!OPENSSL_Applink+0x961

I'm not a Windows kernel expert, but it looks to me like a Windows
kernel synchronization problem (possibly a deadlock) in the power
management code.  Please correct me if I'm reading it wrong.

Googling for PoStartNextPowerIrp returns numerous other (seemingly
random) cases of spinning threads.  I'm still looking for a solution.

BTW: Why don't you have symbols for afd.sys?
Could it be a malware infection?

Best regards,
	Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBAgAGBQJVf2BLAAoJEC78f/DUFuAUudQQAIuj6D8WqP3uqLcK6v2pWMNN
wOumt92B3GoqQUUdDippmLtJCcHqTrKYdTv3oMfZpr+6aL7LSFQEkmF/N3J99Oo/
tc0aV2Ifn9b3FQfUss0Yiq6GUg4ZWiCr/vvrKO8zBfLInh8MzdhUq20oXC/QJWJy
mKJ/QRLSgoTHvTenqDXO4Q6ufQ7mxHH0XyedhadCxfOPNl3bRCpiWwwFhTz77h3U
VD5e3SYrRP6/fi91fASwrRCAxnxiXq+9PES9+/ciStQTjeoRolIQ9df2pXjHDTTp
7HyOdy1wBic1s9404ZgT12pMdKgE/xltFerup8BRKUeBQsYzwu+ul5rbsLqe+zxG
rK4aNg05V6Qz+gky9RNbSm8OLmv0UCIkXCcFghRXRC0e5BJsgx4nPS78/6vqZ1vf
hG6SD+jd+bWgjl61cM8Jy9+jal9ZZzEg9/1OHOpbrzCNTIHhvpNzaTwYZkps2f/g
N032wJmmi2FBVtL+/Ibx1vjnTcMNaeygFwj82fJt3wqNisRH75CLVNF5legI44qD
S5bYSTLEEc0s7HArkgnXTAMT+yK9caoz+l8zxOghWTzwdt0Ihik6Es1s6/zGI4ge
2EBPsjbXkGhsEGmEbym8L9tg4GZw76Cq+m3mH9rrjnaXX9lGwn2gNVEl++/4PdYI
zi7rrGl9H2wL9T88lSsq
=Xnwv
-----END PGP SIGNATURE-----


More information about the stunnel-users mailing list