Internet Explorer or .NET Application Hosting Web Browser May Crash with Exception 0xE06D7363

This month looks little unusual as I ran into another bug in Internet Explorer component. Jscript9.dll is a core dll for implementing JavaScript engine (aka Chakra engine). The process may crash with C++ Exception code E06D7363. Here are some of the details that may help you. If you have a dump file, then you may use WinDbg (ships with Debugging Tools for Windows) to analyze it.

Analysis

  • Call stack

    0:000> kcL
    #
    00 KERNELBASE!RaiseException
    01 msvcrt!_CxxThrowException
    02 jscript9!Js::JavascriptOperators::ThrowStackOverflow
    03 jscript9!Js::Throw::StackOverflow
    04 jscript9!Js::CustomExternalObject::QueryObjectInterface
    05 jscript9!JavascriptDispatch::QueryInterface
    06 mshtml!CEventMgr::_DispatchBubblePhase
    07 mshtml!CEventMgr::Dispatch
    08 mshtml!CEventMgr::DispatchMouseEvent
    09 mshtml!CElement::FireStdEvent_MouseHelper
    0a mshtml!CElement::FireStdEventOnMessage
    0b mshtml!CDoc::PumpMessage
    0c mshtml!CDoc::DetectMouseExit
    0d mshtml!FormsOnTimer
    0e mshtml!GlobalWndProc
    0f user32!InternalCallWinProc
    10 user32!UserCallWinProcCheckWow
    11 user32!DispatchMessageWorker
    12 user32!DispatchMessageW
    13 user32!DialogBox2
    14 user32!InternalDialogBox
    15 user32!SoftModalMessageBox
    16 user32!MessageBoxWorker
    17 user32!MessageBoxTimeoutW
    18 user32!MessageBoxTimeoutA
    19 user32!MessageBoxExA
    1a user32!MessageBoxA
    ...  
    58 ntdll!__RtlUserThreadStart
    59 ntdll!_RtlUserThreadStart

     

  • JavaScript dll details

    0:000> lmvm jscript9
    Browse full module list
    start end module name
    62240000 623fd000 jscript9
        Loaded symbol image file: jscript9.dll
        Image path: C:\Windows\System32\jscript9.dll
        Image name: jscript9.dll
        Browse all global symbols functions data
        Timestamp: Wed Jul 22 15:51:11 2015 (55B0023F)
        CheckSum: 001C9220
        ImageSize: 001BD000
        File version: 9.0.8112.16684
        Product version: 9.0.8112.16684
        File flags: 8 (Mask 3F) Private
        File OS: 40004 NT Win32
        File type: 2.0 Dll
        File date: 00000000.00000000
        Translations: 0409.04b0
        CompanyName: Microsoft Corporation
        ProductName: Windows® Internet Explorer
        InternalName: jscript9.dll
        OriginalFilename: jscript9.dll
        ProductVersion: 9.00.8112.16684
        FileVersion: 9.00.8112.16684 (win7_ie9_GDR(builder).150722-1301)
        FileDescription: Microsoft ® JScript
        LegalCopyright: © Microsoft Corporation. All rights reserved.

     

  • Register values during crash

    0:000> .frame 2; r
    eax=00282f9c ebx=0cce0018 ecx=00000003 edx=00000000 esi=00283040 edi=12d82ff0
    eip=74dfc42d esp=00282f9c ebp=00282fec iopl=0 nv up ei pl nz na pe nc
    cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00200206
    KERNELBASE!RaiseException+0x58:
    74dfc42d c9 leave
     
    03 00283070 6231395e jscript9!Js::Throw::StackOverflow+0x2d
    eax=00282f9c ebx=1b0e9660 ecx=00000003 edx=00000000 esi=009122f8 edi=00000000
    eip=6237a0c3 esp=0028306c ebp=00283070 iopl=0 nv up ei pl nz na pe nc
    cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00200206
    jscript9!Js::Throw::StackOverflow+0x2d:
    6237a0c3 8a4d0b mov cl,byte ptr [ebp+0Bh] ss:002b:0028307b=12

     

  • Additionally, the user may see following message:

    Caption: Microsoft Visual C++ Runtime Library
    Text: This application has requested the Runtime to terminate it in an unusual way.
    Please contact the application's support team for more information.

 

Resolution

  1. The KB article has additional details about the bug

    Internet Explorer 9 may crash because of jscript9.dll stack overflow when you browse certain webpages

  2. You may want to install the latest IE security update released few days back. A lot of times, the testing time may not be affected by the patch, you may be better off installing latest patch. Since patches are cumulative, it will give you additional fixes on top of existing fix.

    https://technet.microsoft.com/library/security/MS15-106

  3. If you see issues even after installing latest patch, then it is possible that more than one condition is contributing to the issue.

  4. Make sure you also install KB3076895 and test it. We had seen issues in GWIM environment because of it.

    .NET Application Hosting Web Browser Control Freezes / Hangs During Start Up