SQL Server 2017的Linked Server配置触发的bug“Exception Code = c0000005 EXCEPTION_ACCESS_VIOLATION”

SQL Server 2017的Linked Server配置触发的bug“Exception Code    = c0000005 EXCEPTION_ACCESS_VIOLATION”

 

现象描述：

 

 

数据库版本：SQL Server 2017 (RTM-CU14) (KB4484710) - 14.0.3076.1 (X64) 出现大量的Dump File文件，如下所示：

 

 

其中一个SQLDump748.txt如下所示：

 

 

Current time is 05:00:20 05/17/19.
=====================================================================
       BugCheck Dump
=====================================================================

This file is generated by Microsoft SQL Server
version 14.0.3076.1
upon detection of fatal unexpected error. Please return this file,
the query or program that produced the bugcheck, the database and
the error log, and any other pertinent information with a Service Request.


Computer type is Intel(R) Xeon(R) Gold 6148 CPU @ 2.40GHz.
Bios Version is INTEL  - 6040000
PhoenixBIOS 4.0 Release 6.0
8 X64 level 8664, 2 Mhz processor (s).
Windows NT 6.2 Build 9200 CSD .

Memory
MemoryLoad = 92%
Total Physical = 131071 MB
Available Physical = 10157 MB
Total Page File = 262143 MB
Available Page File = 135435 MB
Total Virtual = 134217727 MB
Available Virtual = 133928023 MB
***Stack Dump being sent to C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\LOG\SQLDump7265.txt
SqlDumpExceptionHandler: Process 59 generated fatal exception c0000005 EXCEPTION_ACCESS_VIOLATION. SQL Server is
terminating this process.
* *******************************************************************************
*
* BEGIN STACK DUMP:
*   05/17/19 05:00:20 spid 59
*
*
*   Exception Address = 000001DF83DBC4AC Module(oranls11+000000000004C4AC)
*   Exception Code    = c0000005 EXCEPTION_ACCESS_VIOLATION
*   Access Violation occurred writing address 00000000E7DF2E60
* Input Buffer 140 bytes -
*             EXEC [DBO].[usp_sdAutoUploadPriceAndDeliveryDateToESCM_New]
*
*
*  MODULE                          BASE      END       SIZE
* sqlservr                       00007FF6C47C0000  00007FF6C483EFFF  0007f000
* ntdll                          00007FFE18480000  00007FFE1864FFFF  001d0000
* KERNEL32                       00007FFE16BC0000  00007FFE16C6BFFF  000ac000
* KERNELBASE                     00007FFE15340000  00007FFE1555CFFF  0021d000
* SYSFER                         000000006E400000  000000006E494FFF  00095000
* ADVAPI32                       00007FFE16D10000  00007FFE16DB1FFF  000a2000
* msvcrt                         00007FFE165D0000  00007FFE1666DFFF  0009e000
* sechost                        00007FFE182D0000  00007FFE18328FFF  00059000
* RPCRT4                         00007FFE16910000  00007FFE16A30FFF  00121000
* ole32                          00007FFE15CE0000  00007FFE15E17FFF  00138000
* combase                        00007FFE15A10000  00007FFE15CD4FFF  002c5000
* ucrtbase                       00007FFE149E0000  00007FFE14AD3FFF  000f4000
* bcryptPrimitives               00007FFE14BF0000  00007FFE14C59FFF  0006a000
* GDI32                          00007FFE16420000  00007FFE16453FFF  00034000
* gdi32full                      00007FFE15610000  00007FFE15790FFF  00181000
* USER32                         00007FFE15E80000  00007FFE15FE4FFF  00165000
* NETAPI32                       00007FFE0C660000  00007FFE0C677FFF  00018000
* pdh                            00007FFE11390000  00007FFE113DCFFF  0004d000
* win32u                         00007FFE14970000  00007FFE1498DFFF  0001e000
* sqlmin                         00007FFE02EC0000  00007FFE060B8FFF  031f9000
* sqlTsEs                        00007FFE060C0000  00007FFE069EEFFF  0092f000
* sqllang                        00007FFE00740000  00007FFE02EBAFFF  0277b000
* SQLOS                          00007FFE06EF0000  00007FFE06EF6FFF  00007000
* sqldk                          00007FFE069F0000  00007FFE06EEBFFF  004fc000
* OLEAUT32                       00007FFE16500000  00007FFE165BEFFF  000bf000
* msvcp_win                      00007FFE157A0000  00007FFE1583BFFF  0009c000
* opends60                       00007FFE00730000  00007FFE00738FFF  00009000
* qds                            00007FFE00600000  00007FFE0072BFFF  0012c000
* svl                            00007FFE004E0000  00007FFE0050DFFF  0002e000
* CRYPT32                        00007FFE15840000  00007FFE15A08FFF  001c9000
* MSASN1                         00007FFE14910000  00007FFE1491FFFF  00010000
* WS2_32                         00007FFE18350000  00007FFE183B9FFF  0006a000
* MSVCP120                       00007FFE0BDF0000  00007FFE0BE95FFF  000a6000
* MSVCR120                       00007FFE0D6B0000  00007FFE0D79EFFF  000ef000
* WINMM                          00007FFE12CF0000  00007FFE12D12FFF  00023000
* Secur32                        00007FFE11250000  00007FFE1125BFFF  0000c000
* WINHTTP                        00007FFE11280000  00007FFE1134BFFF  000cc000
* ODBC32                         00007FFE00430000  00007FFE004DEFFF  000af000
* secforwarder                   00007FFE00510000  00007FFE00519FFF  0000a000
* WINMMBASE                      00007FFE12C90000  00007FFE12CBAFFF  0002b000
* cfgmgr32                       00007FFE14990000  00007FFE149D1FFF  00042000
* bcrypt                         00007FFE14820000  00007FFE1484AFFF  0002b000
* ncrypt                         00007FFE14430000  00007FFE14455FFF  00026000
* NTASN1                         00007FFE143F0000  00007FFE1442AFFF  0003b000
* SSPICLI                        00007FFE14550000  00007FFE1457BFFF  0002c000
* NETUTILS                       00007FFE13F70000  00007FFE13F7CFFF  0000d000
* DPAPI                          00007FFE13B20000  00007FFE13B29FFF  0000a000
* SAMCLI                         00007FFE11F50000  00007FFE11F68FFF  00019000
* WINTRUST                       00007FFE14B90000  00007FFE14BE4FFF  00055000
* USERENV                        00007FFE14030000  00007FFE1404EFFF  0001f000
* AUTHZ                          00007FFE13BC0000  00007FFE13C09FFF  0004a000
* profapi                        00007FFE148E0000  00007FFE148F3FFF  00014000
* XmlLite                        00007FFE0C8F0000  00007FFE0C925FFF  00036000
* dhcpcsvc                       00007FFE11260000  00007FFE11279FFF  0001a000
* WININET                        00007FFE07D40000  00007FFE08121FFF  003e2000
* NSI                            00007FFE165C0000  00007FFE165C7FFF  00008000
* LOGONCLI                       00007FFE12780000  00007FFE127BDFFF  0003e000
* psapi                          00007FFE18340000  00007FFE18347FFF  00008000
* kernel.appcore                 00007FFE14900000  00007FFE1490EFFF  0000f000
* instapi140                     00007FFDFD330000  00007FFDFD342FFF  00013000
* CRYPTSP                        00007FFE14350000  00007FFE14366FFF  00017000
* rsaenh                         00007FFE13DC0000  00007FFE13DF2FFF  00033000
* CRYPTBASE                      00007FFE14370000  00007FFE1437AFFF  0000b000
* imagehlp                       00007FFE16A40000  00007FFE16A5BFFF  0001c000
* gpapi                          00007FFE138D0000  00007FFE138F2FFF  00023000
* wkscli                         00007FFE10DE0000  00007FFE10DF5FFF  00016000
* cscapi                         00007FFDFD350000  00007FFDFD361FFF  00012000
* sqlevn70                       000001DFEAF90000  000001DFEB29EFFF  0030f000
* CLUSAPI                        00007FFE09EE0000  00007FFE09F98FFF  000b9000
* DNSAPI                         00007FFE13F80000  00007FFE14020FFF  000a1000
* IPHLPAPI                       00007FFE13F30000  00007FFE13F67FFF  00038000
* RESUTILS                       00007FFE0A1B0000  00007FFE0A210FFF  00061000
* VERSION                        00007FFE0C490000  00007FFE0C499FFF  0000a000
* hkruntime                      00007FFDFD490000  00007FFDFD760FFF  002d1000
* hkcompile                      00007FFDFC470000  00007FFDFC5D1FFF  00162000
* SHLWAPI                        00007FFE183C0000  00007FFE18411FFF  00052000
* hkengine                       00007FFDFBC30000  00007FFDFC33AFFF  0070b000
* dbghelp                        000000006D570000  000000006D705FFF  00196000
* ncryptprov                     00007FFE0D9D0000  00007FFE0DA23FFF  00054000
* msv1_0                         00007FFE14140000  00007FFE141A6FFF  00067000
* NtlmShared                     00007FFE14130000  00007FFE1413BFFF  0000c000
* cryptdll                       00007FFE14210000  00007FFE14224FFF  00015000
* kerberos                       00007FFE14260000  00007FFE1434FFFF  000f0000
* schannel                       00007FFE13D00000  00007FFE13D77FFF  00078000
* SECURITY                       000002073E580000  000002073E582FFF  00003000
* MSCOREE                        00007FFE07B20000  00007FFE07B85FFF  00066000
* mscoreei                       00007FFE07A80000  00007FFE07B1BFFF  0009c000
* SqlServerSpatial140            00007FFDFB8F0000  00007FFDFB9A1FFF  000b2000
* clbcatq                        00007FFE16C70000  00007FFE16D0EFFF  0009f000
* msxml3                         00007FFDFB640000  00007FFDFB86BFFF  0022c000
* sqlncli11                      00007FFDFB2E0000  00007FFDFB632FFF  00353000
* COMDLG32                       00007FFE16810000  00007FFE16909FFF  000fa000
* shcore                         00007FFE14AE0000  00007FFE14B88FFF  000a9000
* SHELL32                        00007FFE16DC0000  00007FFE182C4FFF  01505000
* windows.storage                00007FFE14C60000  00007FFE15338FFF  006d9000
* powrprof                       00007FFE14920000  00007FFE1496BFFF  0004c000
* MSVCR100                       000000006D490000  000000006D561FFF  000d2000
* COMCTL32                       00007FFE07C90000  00007FFE07D3BFFF  000ac000
* imm32                          00007FFE16460000  00007FFE1648DFFF  0002e000
* SQLNCLIR11                     000002073E710000  000002073E747FFF  00038000
* netbios                        00007FFDFC340000  00007FFDFC34BFFF  0000c000
* sqlnclirda11                   000000006D130000  000000006D488FFF  00359000
* ualapi                         00007FFDFB2C0000  00007FFDFB2D9FFF  0001a000
* ESENT                          00007FFE094E0000  00007FFE097D1FFF  002f2000
* ntmarta                        00007FFE13610000  00007FFE13641FFF  00032000
* SQLNCLIRDAR11                  000002073E810000  000002073E847FFF  00038000
* clr                            00007FFE06F00000  00007FFE078ECFFF  009ed000
* MSVCR120_CLR0400               00007FFE00270000  00007FFE00366FFF  000f7000
* mscorlib.ni                    00007FFDFEAB0000  00007FFE00040FFF  01591000
* SqlAccess                      00007FFDFB240000  00007FFDFB2B4FFF  00075000
* clrjit                         00007FFDFD770000  00007FFDFD89AFFF  0012b000
* BatchParser                    00007FFDFAC50000  00007FFDFAC7BFFF  0002c000
* SRVCLI                         00007FFE09E70000  00007FFE09E95FFF  00026000
* ftimport                       0000000060000000  0000000060024FFF  00025000
* MSFTE                          0000000049980000  0000000049D2DFFF  003ae000
* mskeyprotect                   00007FFDFB870000  00007FFDFB884FFF  00015000
* mswsock                        00007FFE141B0000  00007FFE1420BFFF  0005c000
* ntdsapi                        00007FFE0A350000  00007FFE0A378FFF  00029000
* DSPARSE                        00007FFE0EE40000  00007FFE0EE4CFFF  0000d000
* rasadhlp                       00007FFE104B0000  00007FFE104B9FFF  0000a000
* fwpuclnt                       00007FFE11780000  00007FFE117E9FFF  0006a000
* ncryptsslp                     00007FFDFB8C0000  00007FFDFB8E0FFF  00021000
* xpsqlbot                       00007FFE0B930000  00007FFE0B937FFF  00008000
* xpstar                         00007FFE0B0A0000  00007FFE0B10DFFF  0006e000
* SQLSCM                         00007FFDFB090000  00007FFDFB0A2FFF  00013000
* xpstar                         0000020923680000  000002092368CFFF  0000d000
* cryptnet                       00007FFDF7D10000  00007FFDF7D3EFFF  0002f000
* xplog70                        00007FFDFD3A0000  00007FFDFD3B3FFF  00014000
* xplog70                        000001DF80010000  000001DF80013FFF  00004000
* Sort00060101                   00007FFDF1030000  00007FFDF1042FFF  00013000
* mlang                          00007FFDF0D20000  00007FFDF0D5EFFF  0003f000
* System.Data                    00007FFDF8E30000  00007FFDF9195FFF  00366000
* wldp                           00007FFE13B00000  00007FFE13B17FFF  00018000
* odsole70                       00007FFE08440000  00007FFE08457FFF  00018000
* scrrun                         00007FFDFC3D0000  00007FFDFC401FFF  00032000
* sxs                            00007FFE14720000  00007FFE147B7FFF  00098000
* oledb32                        00007FFDEC730000  00007FFDEC81CFFF  000ed000
* MSDART                         00007FFE07A50000  00007FFE07A75FFF  00026000
* Comctl32                       00007FFDFB9B0000  00007FFDFBC29FFF  0027a000
* msadce                         00007FFDEF670000  00007FFDEF70BFFF  0009c000
* msadcer                        000001DF82CD0000  000001DF82CD2FFF  00003000
* sqloledb                       00007FFDE9300000  00007FFDE93D6FFF  000d7000
* MSDATL3                        00007FFDFAC90000  00007FFDFACB1FFF  00022000
* OraOLEDB11                     0000000010000000  000000001008EFFF  0008f000
* OraOLEDBgmr11                  0000000044100000  0000000044126FFF  00027000
* OraOLEDBrst11                  0000000044400000  0000000044434FFF  00035000
* OraOLEDButl11                  0000000044700000  0000000044708FFF  00009000
* OCI                            0000000180000000  00000001800AAFFF  000ab000
* MSVCR80                        000000006DE00000  000000006DEC8FFF  000c9000
* OraClient11                    000001DF838D0000  000001DF83D6DFFF  0049e000
* oracore11                      000001DF82DE0000  000001DF82F3FFFF  00160000
* oranls11                       000001DF83D70000  000001DF83E6EFFF  000ff000
* oraunls11                      000001DF82DA0000  000001DF82DBFFFF  00020000
* oracommon11                    000001DF83E70000  000001DF84126FFF  002b7000
* orageneric11                   000001DF84130000  000001DF85030FFF  00f01000
* oran11                         000001DF85040000  000001DF85493FFF  00454000
* orancrypt11                    000001DF854A0000  000001DF854C3FFF  00024000
* oraldapclnt11                  000001DF854D0000  000001DF856C1FFF  001f2000
* oranl11                        000001DF856E0000  000001DF8574EFFF  0006f000
* oranro11                       000001DF85760000  000001DF857BAFFF  0005b000
* orapls11                       000001DF857D0000  000001DF85CF0FFF  00521000
* orasql11                       000001DF85D10000  000001DF85D6DFFF  0005e000
* orauts                         000001DF85D80000  000001DF85D86FFF  00007000
* orasnls11                      000001DF85DA0000  000001DF85DDCFFF  0003d000
* oraxml11                       000001DF85DF0000  000001DF862CEFFF  004df000
* oracell11                      000001DF862E0000  000001DF8632AFFF  0004b000
* orannzsbb11                    000001DF86340000  000001DF864C3FFF  00184000
* orahasgen11                    000001DF864E0000  000001DF867B5FFF  002d6000
* oraocr11                       000001DF867D0000  000001DF86897FFF  000c8000
* orazt11                        000001DF868B0000  000001DF86A9FFFF  001f0000
* oranldap11                     000001DF86AB0000  000001DF86AFAFFF  0004b000
* oranhost11                     000001DF86B10000  000001DF86B19FFF  0000a000
* orancds11                      000001DF86B30000  000001DF86B36FFF  00007000
* orantns11                      000001DF86B50000  000001DF86B60FFF  00011000
* oraztkg11                      000001DF86B80000  000001DF86C32FFF  000b3000
* WSOCK32                        00007FFE09100000  00007FFE09108FFF  00009000
* orantcp11                      000001DF86C50000  000001DF86C84FFF  00035000
* oraslax11                      000001DF86CA0000  000001DF86CAEFFF  0000f000
* oravsn11                       000001DF86CC0000  000001DF86CC6FFF  00007000
* oraplp11                       000001DF86CE0000  000001DF870D4FFF  003f5000
* MSVCP80                        000000006DF80000  000000006E088FFF  00109000
* oraocrutl11                    000001DF870F0000  000001DF87100FFF  00011000
* oraocrb11                      000001DF87120000  000001DF87213FFF  000f4000
* OraPlc11                       000001DF87230000  000001DF8724FFFF  00020000
* OraOLEDB11us                   0000000044300000  0000000044305FFF  00006000
* OraOLEDBpus11                  0000000044200000  0000000044207FFF  00008000
* msdaps                         00007FFE0B1F0000  00007FFE0B250FFF  00061000
* comsvcs                        00007FFE0B280000  00007FFE0B41BFFF  0019c000
* napinsp                        00007FFE0DA30000  00007FFE0DA45FFF  00016000
* winrnr                         00007FFE0DCA0000  00007FFE0DCADFFF  0000e000
* NLAapi                         00007FFE11620000  00007FFE11637FFF  00018000
* apphelp                        00007FFE12C10000  00007FFE12C89FFF  0007a000
* DSROLE                         00007FFE122C0000  00007FFE122C9FFF  0000a000
* rasapi32                       00007FFDEF7C0000  00007FFDEF877FFF  000b8000
* rasman                         00007FFDFB1A0000  00007FFDFB1BFFFF  00020000
* rtutils                        00007FFE0E2B0000  00007FFE0E2C3FFF  00014000
* dhcpcsvc6                      00007FFE10F10000  00007FFE10F25FFF  00016000
* System.ni                      00007FFDFDA50000  00007FFDFE690FFF  00c41000
* System.Transactions            00007FFE0D7B0000  00007FFE0D7FEFFF  0004f000
* System.Security.ni             00007FFDFE8B0000  00007FFDFE9A0FFF  000f1000
* System.Xml.ni                  00007FFDF9AE0000  00007FFDFA36BFFF  0088c000
* System.Core.ni                 00007FFDFC8A0000  00007FFDFD2EFFFF  00a50000
* System.Configuration.ni        00007FFDF8D00000  00007FFDF8E2AFFF  0012b000
* COMRES                         000001DF88040000  000001DF8817DFFF  0013e000
* XOLEHLP                        00007FFDF1540000  00007FFDF1556FFF  00017000
* MSDTCPRX                       00007FFDFAB60000  00007FFDFAC41FFF  000e2000
* MTXCLU                         00007FFDFAAF0000  00007FFDFAB58FFF  00069000
* ktmw32                         00007FFE0B090000  00007FFE0B09AFFF  0000b000
* ondemandconnroutehelper        00007FFE10360000  00007FFE10374FFF  00015000
* clrcompression                 00007FFE0DC50000  00007FFE0DC73FFF  00024000
* SAMLIB                         00007FFE0D100000  00007FFE0D122FFF  00023000
* xprepl                         00007FFE0B1D0000  00007FFE0B1E9FFF  0001a000
* dbghelp                        000000006CE90000  000000006D025FFF  00196000
*
*     P1Home: 0000000000000000:
*     P2Home: 0000000000000000:
*     P3Home: 000000000000000C:
*     P4Home: 0000000000000000:
*     P5Home: 0000000000000000:
*     P6Home: 0000000000000000:
* ContextFlags: 000000000010005F:
*      MxCsr: 0000000000001F80:
*      SegCs: 0000000000000033:
*      SegDs: 000000000000002B:
*      SegEs: 000000000000002B:
*      SegFs: 0000000000000053:
*      SegGs: 000000000000002B:
*      SegSs: 000000000000002B:
*     EFlags: 0000000000010246:
*        Rax: 000000000000000C:
*        Rcx: 0000000000000031:
*        Rdx: 0000000000000031:
*        Rbx: 000000000000000C:
*        Rsp: 00000064EC3F80F0:  0000000000000000  000001DFB38C02A0  0000000000000020  000001DFEA290D50  00000226
00000028  000001DF8474C4F0
*        Rbp: 00000000E7DF2E60:
*        Rsi: 000001DF8726D7E0:  0B20010003000000  000026D900003085  0000000200000000  0000000000015A00  00000000
00000000  0000000000000000
*        Rdi: 000001DF88630008:  000001DF88630018  000001DF83E5F120  000001DF87265840  0000000000000000  00000000
00000000  000000000000001C
*         R8: 00000000E7DF2E60:
*         R9: 00000225BF9B38C8:  2073776F72203631  000000006C696166  0000000000000000  0000000000000000  00000000
00000000  0000000000000000
*        R10: 00000000000000B2:
*        R11: 0000000000000001:
*        R12: 00000000E7DF2E60:
*        R13: 00000225BF9B38C8:  2073776F72203631  000000006C696166  0000000000000000  0000000000000000  00000000
00000000  0000000000000000
*        R14: 000000000000000C:
*        R15: 000000000000000C:
*        Rip: 000001DF83DBC4AC:  01C58349004D8966  35740000FFFDF981  75FFC08302C58348  2B4D1E77FE3B45DA  E82B4928
6F894CE9  C48348E889FDD148
* *******************************************************************************
* -------------------------------------------------------------------------------
* Short Stack Dump
000001DF83DBC4AC Module(oranls11+000000000004C4AC)
0000000180064570 Module(OCI+0000000000064570)
000000004440CC35 Module(OraOLEDBrst11+000000000000CC35)
000000004442647B Module(OraOLEDBrst11+000000000002647B)
000000001002F10A Module(OraOLEDB11+000000000002F10A)
00000000100325CA Module(OraOLEDB11+00000000000325CA)
0000000010035C78 Module(OraOLEDB11+0000000000035C78)
00007FFDEC7A9262 Module(oledb32+0000000000079262)
00007FFDEC7AA945 Module(oledb32+000000000007A945)
00007FFE016B51DD Module(sqllang+0000000000F751DD)
00007FFE0169D838 Module(sqllang+0000000000F5D838)
00007FFE016114BE Module(sqllang+0000000000ED14BE)
00007FFE01395A94 Module(sqllang+0000000000C55A94)
00007FFE013984C8 Module(sqllang+0000000000C584C8)
00007FFE01381DDC Module(sqllang+0000000000C41DDC)
00007FFE0137CE68 Module(sqllang+0000000000C3CE68)
00007FFE00754E70 Module(sqllang+0000000000014E70)
00007FFE00755823 Module(sqllang+0000000000015823)
00007FFE00755F24 Module(sqllang+0000000000015F24)
00007FFE013802F3 Module(sqllang+0000000000C402F3)
00007FFE0137FC90 Module(sqllang+0000000000C3FC90)
00007FFE0137CA68 Module(sqllang+0000000000C3CA68)
00007FFE00754E70 Module(sqllang+0000000000014E70)
00007FFE00755823 Module(sqllang+0000000000015823)
00007FFE00755F24 Module(sqllang+0000000000015F24)
00007FFE013802F3 Module(sqllang+0000000000C402F3)
00007FFE0137FC90 Module(sqllang+0000000000C3FC90)
00007FFE0137CA68 Module(sqllang+0000000000C3CA68)
00007FFE00754E70 Module(sqllang+0000000000014E70)
00007FFE00755823 Module(sqllang+0000000000015823)
00007FFE00755F24 Module(sqllang+0000000000015F24)
00007FFE0075CB7D Module(sqllang+000000000001CB7D)
00007FFE00753B12 Module(sqllang+0000000000013B12)
00007FFE00753903 Module(sqllang+0000000000013903)
00007FFE069F4DAD Module(sqldk+0000000000004DAD)
00007FFE069F52E8 Module(sqldk+00000000000052E8)
00007FFE069F4F5D Module(sqldk+0000000000004F5D)
00007FFE06A15818 Module(sqldk+0000000000025818)
00007FFE06A15910 Module(sqldk+0000000000025910)
00007FFE06A15087 Module(sqldk+0000000000025087)
00007FFE06A155D9 Module(sqldk+00000000000255D9)
00007FFE16BC84D4 Module(KERNEL32+00000000000084D4)
00007FFE184EE851 Module(ntdll+000000000006E851)

CSession @0x000001EE926287B0
----------------------------
m_sessionId = 59                     m_cRef = 18                          m_rgcRefType[0] = 1
m_rgcRefType[1] = 1                  m_rgcRefType[2] = 15                 m_rgcRefType[3] = 1
m_rgcRefType[4] = 0                  m_rgcRefType[5] = 0                  m_pmo = 0x000001EE92628040
m_pstackBhfPool = 0x000001EC206375F0 m_dwLoginFlags = 0x100083e0          m_fBackground = 0
m_eConnResetOption = 0               m_fUserProc = 1                      m_fConnReset = 0
m_fIsConnReset = 0                   m_fInLogin = 0                       m_fAuditLoginSent = 1
m_fAuditLoginFailedSent = 0          m_fReplRelease = 0                   m_fKill = 0
m_ulLoginStamp = 72716430            m_eclClient = 7                      m_protType = 6


CUEnvTransient @0x000001EE92628C90
----------------------------------
m_ululRowcount = 0                   m_cidLastOpen = 0                    m_lFetchStat = 0
m_lRetStat = 0                       m_lLastError = 0                     m_lPrevError = 0
m_cNestLevel = 0                     m_lHoldRand1 = 0                     m_lHoldRand2 = 0
m_cbContextInfo = 0                  m_rgbContextInfo = 000001EE92628E8C

CDbAndSetOpts @0x000001EE92628CB0
---------------------------------
m_fHasDbRef = 0                      m_fDateFirstSet = 0                  m_fDateFormatSet = 0
m_lUserOpt1 = 0x14016000             m_lUserOpt2 = 0x0                    m_lUserOpt1SetMask = 0xffffe7f7
m_idtInsert.objid = 0                m_idtInsert.state = 0                m_idtInsert.dbid = 0
m_llRowcnt = 0                       m_lStatList = 0                      m_lTextSize = 1024
m_lOffsets = 0x0                     m_ulLockTimeout = 4294967295         m_ulQueryGov = 0
m_eDtFmt = 1                         m_eDayDateFirst = 7                  m_eDdLckPri = 0
m_eIsoLvl = 2                        m_eFipsFlag = 0x0                    m_sLangId = 0


m_pV7LoginRec
---------------------
0000000000000000:   a4010000 04000074 00100000 00000007 50300000  ¤......t........P0..

0000000000000014:   00000000 e0830010 20feffff 09040000 5e000800  ....àƒ.. þÿÿ    ...^...

0000000000000028:   00000000 00000000 6e004900 00010700 0e010400  ........n.I.........

000000000000003C:   12010400 1a010000 1a010600 005056b4 c19c2601  .............PV´Áœ&.

0000000000000050:   78002601 00000000 00000000 0000               x.&...........




CPhysicalConnection @0x000001EE92628400
---------------------------------------
m_pPhyConn->m_pmo = 0x000001EE92628040
m_pPhyConn->m_pNetConn = 0x000001EE92629070
m_pPhyConn->m_pConnList = 0x000001EE92628780
m_pPhyConn->m_pSess = 0x000001EE92628808                                  m_pPhyConn->m_fTracked = -1
m_pPhyConn->m_cbPacketsize = 4096    m_pPhyConn->m_fMars = 0              m_pPhyConn->m_fKill = 0


CBatch @0x000001EE92629CB0
--------------------------
m_pSess = 0x000001EE926287B0         m_pConn = 0x000001EE926296B0         m_cRef = 3
m_rgcRefType[0] = 1                  m_rgcRefType[1] = 1                  m_rgcRefType[2] = 1
m_rgcRefType[3] = 0                  m_rgcRefType[4] = 0                  m_pTask = 0x000001EBB55C84E8


EXCEPT (null) @0x00000064EC3F4EF8
---------------------------------
exc_number = 0                       exc_severity = 0                     exc_func = sqldk.dll+0x000000000005D430



Task @0x000001EBB55C84E8
------------------------
CPU Ticks used (ms) = 20055          Task State = 2
WAITINFO_INTERNAL: WaitResource = 0x0000000000000000                      WAITINFO_INTERNAL: WaitType = 0x0
WAITINFO_INTERNAL: WaitSpinlock = 0x0000000000000000
WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000                      WAITINFO_EXTERNAL: WaitType = 0x400070
WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000
WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000
WAITINFO_EXTERNAL: WaitType = 0x200001D7
WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000
WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000                      WAITINFO_EXTERNAL: WaitType = 0x4000DA
WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000                      SchedulerId = 0x3
ThreadId = 0x3620                    m_state = 0                          m_eAbortSev = 0



EC @0x000001EC20637720
----------------------
spid = 0                             ecid = 0                             ec_stat = 0x0
ec_stat2 = 0x0                       ec_atomic = 0x0                      ecType = 0
__pSETLS = 0x000001EE92629720        __pSEParams = 0x000001EE92629E60

SEInternalTLS @0x000001EE92629720
---------------------------------
m_activeHeapDatasetList = 0x000001EE92629B30
m_activeIndexDatasetList = 0x000001EE92629B40                             m_flags = 0
m_TLSstatus = 3                      m_CriticalOpDbId = 65535             m_CloudHostDbId = 65535
m_RestoringDbId = 65535              m_RestoreTargetDbId = 0              m_noLockScanCount = 0
m_readonlyDatabaseScan = false       m_inCatchupRedo = false
m_pBulkOpLockNotification = 0x0000000000000000                            m_pDbccContext = 0x0000000000000000
m_pCompressionContext = 0x0000000000000000
m_pRetentionCleanupContext = 0x0000000000000000                           m_pAllocFileLimit = 0x0000000000000000
m_dekInstanceIndex = 0x-1            m_pImbiContext = 0x0000000000000000
m_pNcciThreadContext = 0x0000000000000000

SEParams @0x000001EE92629E60
----------------------------
    m_lockTimeout = -1                      m_isoLevel = 4096                       m_logDontReplicate = 0
    m_neverReplicate = 0                    m_XactWorkspace = 0x000001EEFA4EE040
    m_execStats = 0x000001E4734EBB60

 

所有的Dump文件都指向一个存储过程，而最终发现是SQL Agent上的一个作业调用这个存储过程。而咨询微软Supprt的同事，人家反馈是因为这个存储过程使用了oracle linked server ，而且因为在OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项的缘故，具体邮件如下：

 

 

Hello xxxxx,

 

Many thanks for the feedback. If this is the case, there is a known issue when running queries through an Oracle linked server, which you can find in the following article:

 

https://support.microsoft.com/en-us/help/2295405/sql-server-service-crashes-when-you-run-an-oracle-linked-server-query

 

This happens because it is not recommended to have external modules loaded into the SQL Server memory, as they can cause these types of unexpected behaviors. To try and troubleshoot this issue I propose the following action plan:

 

• In the SSMS, open “Server Objects” -> “Linked Servers” -> “Providers”
• Select the OracleDB provider, right click and go to “Properties”
• In the “Properties” window uncheck the “Allow InProcess” option
• Reboot the server

 

This process will remove from the SQL Server memory those DLLs and this should prevent the issue from happening again. Let me know if this plan would be possible to execute from your side and, if so, tell me how it went once it is done.

 

I will be waiting on your feedback, if you have any questions in the meantime feel free to reach out to me.

 

Best Regards,

 

 

虽然微软的技术支持反馈出现Dump文件是因为OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项的缘故，但是他提供的官方文档是SQL 2005、2008的相关文档，而不是SQL Server 2017d的相关文档，而且在SSMS里面调用Oracle Linked Server不报错。这个让我有点质疑其答复。后面按照其要求处理后，确实发现SQL Dump文件消失了。下面是对整个过程的一个复盘：

 

1： 当初在OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项，是因为开发使用OPENQUERY查询时，报错如下错误

 

 

 

 

其实出现这个错误，是因为启动SQL Server实例的账号是NT Service\MSSQLSERVER， 如果是LocalSystem等这类账号就不会报这个错误。主要是因为MSDAINITIALIZE Properties的安全设置。

 

 

1. Click Start, type Dcomcnfg in the Search programs and files box, and then press Enter.

2. Expand Component Services, expand Computers, expand My Computer, and then click DCOM Config.

3. Right-click MSDAINITIALIZE, and then click Properties.

4. On the Security tab, under Launch and Activation Permissions, click Customize, and then click Edit.

5. Add the Administrators group or the user account that you want.

 

 

如下所示，在安全选项里面使用“Customize"里面，加上启动SQL Server服务（NT Service\MSSQLSERVER）或SQL Server Agent服务的账号（NT Service\SQLSERVERAGENT）的权限，如下所示：

 

 

 

 

 

 

 

 

详细步骤参考下面过程

 

 

Verify below settings in DCOMCNFG:   Start --> Run –> Dcomcnfg

1.       Component services -->My Computer ---> Properties verify that below options are set:

In the 'Default Properties' tab:

- 'Enable Distributed COM on this computer' is checked.

- Default Authentication =  Connect.

- Default Impersonation Level = Identify or Impersonate.

2.       Component services --> My computer --> DCOM Config --> MSDAINITIALIZE

-Right click on MSDAINITIALIZE --> Properties -->Security

-Add the SQL Server service account (if connected to SQL server using SQL login)  or windows user account under "Launch and Activation Permissions", "Access permissions" and "Configuration Permissions".

-Give full rights to these accounts.

-Restart the server

 

回到之前问题，取消了OraOLEDB.Oracle驱动上的“Allow InProcess”选项后，SQL Dump文件缺失消失了。也就是说这个确实是因为“SQL Server service crashes when you run an Oracle linked server query” 这个缘故导致的。不过在测试过程中，我简单的查询是不会触发这个bug。尚不清楚内部的具体原因，另外，还有就是有些版本勾选了这个选项，也没有触发这个Bug。目前只在SQL Server 2017 (RTM-CU14) (KB4484710) - 14.0.3076.1 (X64) 这个版本中发现了这个问题。

 

 

 

参考资料：

 

 

https://support.microsoft.com/en-us/help/2295405/sql-server-service-crashes-when-you-run-an-oracle-linked-server-query

https://support.microsoft.com/en-gb/help/2647989/error-message-when-you-try-to-create-an-instance-of-an-ole-db-provider