Win 2012 R2 datacenter and IIS 8.5 Loging crash

hi all

i have 1 windows 2012 r2 iis 8.5 role configured.  server have strange crashes of w3logsvc, point of crashes have added x-forwarded-for header , after it, every day @ 04:00 on baku time (+4 hour) service crashed. have analyzed dump file , there information crash.

exception_code_str:  c00000fd  this point "a new guard page stack cannot created."

the last lines in stack text this:

ntdll!rtlplowfragheapallocfromcontext+0x4b

ntdll!rtlallocateheap+0xe2

ntdll!rtldospathnametorelativentpathname+0x1c5

ntdll!rtldospathnametorelativentpathname_u+0x4f

kernelbase!createdirectoryw+0x31
w3logsvc!log_writer::flush+0x3d
w3logsvc!log_writer::getlogfilehandle+0x2c7

and of course crashed module "w3logsvc"

need after deleting newly added header no crashes detected, right after crash don't able start service, after deleting header or restart iis, service work again. @ first think problem in file rotation, log files rotating time @ 12:00 local time. turn off rotation today , on tomorrow morning have new information. if faced kind of problem or have opinion free wright it.

p.s

the code event viewer

faulting application name: svchost.exe_w3logsvc, version: 6.3.9600.16384, time stamp: 0x5215dfe3
faulting module name: ntdll.dll, version: 6.3.9600.16502, time stamp: 0x52c359e8
exception code: 0xc00000fd
fault offset: 0x0000000000042395
faulting process id: 0xb248
faulting application start time: 0x01d2a81f6f604cc0
faulting application path: c:\windows\system32\svchost.exe
faulting module path: c:\windows\system32\ntdll.dll
report id: 532bb163-14dc-11e7-80be-f69f7a609187
faulting package full name: 
faulting package-relative application id: 

different forums designed address different areas of expertise.  forum general forum on windows server system administration (as noted in sticky note @ top of forum).  reach iis experts, should post query appropriate iis forum can found @ iis.net/forums.

---

tim

Windows Server  >  Windows Server General Forum