OS: XP SP3 (EN)
Access http://news.qq.com, single click left button of the mouse,then we had DEAD LOCK.
Attached WinDbg and found a lock:
0:000> !locks
CritSec ntdll!LdrpLoaderLock+0 at 7c97b178
LockCount 3
RecursionCount 1
OwningThread 554
EntryCount 14
ContentionCount 14
*** Locked
Stopped scanning because of control-C
Scanned 347 critical sections
0:000> ~*
. 0 Id: f5c.d3c Suspend: 1 Teb: 7ffdf000 Unfrozen
Start: iexplore!wWinMainCRTStartup (00402e45)
Priority: 0 Priority class: 32 Affinity: 1
1 Id: f5c.b68 Suspend: 1 Teb: 7ffdd000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
2 Id: f5c.768 Suspend: 1 Teb: 7ffda000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
3 Id: f5c.944 Suspend: 1 Teb: 7ffd9000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
4 Id: f5c.fd4 Suspend: 1 Teb: 7ffd8000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
5 Id: f5c.544 Suspend: 1 Teb: 7ffd7000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
6 Id: f5c.2b8 Suspend: 1 Teb: 7ffd6000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
7 Id: f5c.d54 Suspend: 1 Teb: 7ffdc000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 15 Priority class: 32 Affinity: 1
8 Id: f5c.928 Suspend: 1 Teb: 7ffdb000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 2 Priority class: 32 Affinity: 1
9 Id: f5c.9d0 Suspend: 1 Teb: 7ffd3000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
10 Id: f5c.f0c Suspend: 1 Teb: 7ffd4000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
11 Id: f5c.d28 Suspend: 1 Teb: 7ff9f000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 1 Priority class: 32 Affinity: 1
12 Id: f5c.c6c Suspend: 1 Teb: 7ff9e000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
13 Id: f5c.76c Suspend: 1 Teb: 7ff9d000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
14 Id: f5c.e70 Suspend: 1 Teb: 7ff9c000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
15 Id: f5c.14c Suspend: 1 Teb: 7ff9b000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
16 Id: f5c.18c Suspend: 1 Teb: 7ff9a000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
17 Id: f5c.b28 Suspend: 1 Teb: 7ff99000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
18 Id: f5c.560 Suspend: 1 Teb: 7ff97000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
19 Id: f5c.6bc Suspend: 1 Teb: 7ff8e000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
20 Id: f5c.fcc Suspend: 1 Teb: 7ff8a000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
21 Id: f5c.d14 Suspend: 1 Teb: 7ff89000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
22 Id: f5c.200 Suspend: 1 Teb: 7ff88000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
23 Id: f5c.27c Suspend: 1 Teb: 7ffde000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
24 Id: f5c.554 Suspend: 1 Teb: 7ff98000 Unfrozen
Start: kernel32!BaseThreadStartThunk (7c8106e9)
Priority: 0 Priority class: 32 Affinity: 1
25 Id: f5c.d9c Suspend: 1 Teb: 7ff96000 Unfrozen
Start: ntdll!DbgUiRemoteBreakin (7c94ffe3)
Priority: 0 Priority class: 32 Affinity: 1
26 Id: f5c.a8 Suspend: 1 Teb: 7ff95000 Unfrozen
Start: ntdll!DbgUiRemoteBreakin (7c94ffe3)
Priority: 0 Priority class: 32 Affinity: 1
0:000> ~24 kb
ChildEBP RetAddr Args to Child
06b0f2a4 7e4193e9 7e4193a8 06b0f368 00a60264 ntdll!KiFastSystemCallRet
06b0f2d0 7e419402 06b0f368 00a60264 00000400 USER32!NtUserPeekMessage+0xc
06b0f2fc 7755b2bc 06b0f368 00a60264 00000400 USER32!PeekMessageW+0xbc
06b0f344 7752f0f0 06b0f368 00a60264 00000400 ole32!CCliModalLoop::MyPeekMessage+0x30
06b0f384 7752f10d 06b0f514 0021e658 00000000 ole32!CCliModalLoop::PeekRPCAndDDEMessage+0x30
06b0f398 7752ecfd 06b0f3b8 000003e8 06b0f3c8 ole32!CCliModalLoop::BlockFn+0x5e
06b0f3c0 77525fc1 ffffffff 06b0f4b8 06b0f3f0 ole32!ModalLoop+0x5b
06b0f3d0 77601efe 0018ecd8 06b0f4b8 00000000 ole32!SwitchSTA+0x21
06b0f3f0 7760108a 06b0f4b8 0019d8dc 06b0f514 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0xd1
06b0f4d0 7752edaa 0019d8dc 06b0f5e4 06b0f5d4 ole32!CRpcChannelBuffer::SendReceive2+0xc8
06b0f4ec 7752ed53 06b0f5e4 06b0f5d4 0019d8dc ole32!CCliModalLoop::SendReceive+0x1e
06b0f558 7752cdb2 0019d8dc 06b0f5e4 06b0f5d4 ole32!CAptRpcChnl::SendReceive+0x6f
06b0f5ac 77ef4db5 0019d8dc 06b0f5e4 06b0f5d4 ole32!CCtxComChnl::SendReceive+0x113
06b0f5c8 77ef4ead 001cd72c 06b0f610 0600015b RPCRT4!NdrProxySendReceive+0x43
06b0f9a4 77ef4e42 774e6228 774e92da 06b0f9dc RPCRT4!NdrClientCall2+0x1fa
06b0f9c4 77e8a83b 00000010 00000005 06b0f9ec RPCRT4!ObjectStublessClient+0x8b
06b0f9d4 7752ddb1 001cd72c 00000002 09b23898 RPCRT4!ObjectStubless+0xf
06b0f9ec 7752dd52 001cd72c 0018ecd8 00000002 ole32!RemoteReleaseRifRefHelper+0x84
06b0fa14 7752c9f0 001cd72c 0018ecd8 00000002 ole32!RemoteReleaseRifRef+0x74
06b0fa6c 7752c7e9 0601679c 06016798 00000000 ole32!CStdMarshal::DisconnectCliIPIDs+0x200
I met the issue for many times, I still cannot figure out what 'CCliModalLoop' is.