From: kalkotivinay on
Hi,

I have an application which fails MapViewOfFile() with error code 8
every 6-8 days.

I am using this pointer to get data from my driver.

!address -summary
-------------------- Usage SUMMARY --------------------------
TotSize ( KB) Pct(Tots) Pct(Busy) Usage
4ec55000 ( 1290580) : 62.60% 79.33% : RegionUsageIsVAD
1a8ae000 ( 434872) : 21.09% 00.00% : RegionUsageFree
6373000 ( 101836) : 04.94% 06.26% : RegionUsageImage
196000 ( 1624) : 00.08% 00.10% : RegionUsageStack
24000 ( 144) : 00.01% 00.01% : RegionUsageTeb
e343000 ( 232716) : 11.29% 14.30% : RegionUsageHeap
0 ( 0) : 00.00% 00.00% : RegionUsagePageHeap
1000 ( 4) : 00.00% 00.00% : RegionUsagePeb
1000 ( 4) : 00.00% 00.00% :
RegionUsageProcessParametrs
2000 ( 8) : 00.00% 00.00% :
RegionUsageEnvironmentBlock
Tot: 7dd77000 (2061788 KB) Busy: 634c9000 (1626916 KB)

-------------------- Type SUMMARY --------------------------
TotSize ( KB) Pct(Tots) Usage
1a8ae000 ( 434872) : 21.09% : <free>
6373000 ( 101836) : 04.94% : MEM_IMAGE
4a74d000 ( 1219892) : 59.17% : MEM_MAPPED
12a09000 ( 305188) : 14.80% : MEM_PRIVATE

-------------------- State SUMMARY --------------------------
TotSize ( KB) Pct(Tots) Usage
1b6ec000 ( 449456) : 21.80% : MEM_COMMIT
1a8ae000 ( 434872) : 21.09% : MEM_FREE
47ddd000 ( 1177460) : 57.11% : MEM_RESERVE

Largest free region: Base 7805b000 - Size 03fa5000 (65172 KB)

~1gb of memory is in MEM_RESERVED and MEM_MAPPED. I don't know what
these mean.

I also read another mail thread - "1.45G of memory with status of
MEM_RESERVE". But, I couldn't get much from it.

I have also a kernel dump. When I saw my process handles, it has
opened around 1200 handles.

Normally it should be around 500.

QUESTIONS:
-------------------
#1. Some of the handles are of type files and they are showing the
file names. These are the files that I have opened in my app.
But, some handles which are of file type are not showing the file
names. There are more that 500 of such file type handles which do not
have a filename. What are these ?

000c: Object: 85036530 GrantedAccess: 0012019f (Inherit) Entry:
e136e018
Object: 85036530 Type: (8a423040) File
ObjectHeader: 85036518 (old version)
HandleCount: 1 PointerCount: 1
Directory Object: 00000000 Name:MyAppLog.txt
<==============this has a file name

0038: Object: 871c9830 GrantedAccess: 001200a0 Entry: e136e070
Object: 871c9830 Type: (8a423040) File
ObjectHeader: 871c9818 (old version)
HandleCount: 1 PointerCount: 1 <==================== no
filename

003c: Object: 838524c8 GrantedAccess: 00120116 Entry: e136e078
Object: 838524c8 Type: (8a423040) File
ObjectHeader: 838524b0 (old version)
HandleCount: 1 PointerCount: 1 <==================== no
filename

#2 Some of the handles are of type events. I am really not sure what
these handles are?

#3 Could there be a relation between handle leaks and high MEM_RESERVE
usage ?

Thanks,
Vinay