SQL Server 2017的Linked Server配置触发的bug**“Exception Code = c0000005 EXCEPTION_ACCESS_VIOLATION”**
现象描述：
数据库版本：SQL Server 2017 (RTM-CU14) (KB4484710) - 14.0.3076.1 (X64) 出现大量的Dump File文件，如下所示：
其中一个SQLDump748.txt如下所示：
1Current time is 05:00:20 05/17/19. 2 3===================================================================== 4 5 BugCheck Dump 6 7===================================================================== 8 9This file is generated by Microsoft SQL Server 10 11version 14.0.3076.1 12 13upon detection of fatal unexpected error. Please return this file, 14 15the query or program that produced the bugcheck, the database and 16 17the error log, and any other pertinent information with a Service Request. 18 19Computer type is Intel(R) Xeon(R) Gold 6148 CPU @ 2.40GHz. 20 21Bios Version is INTEL - 6040000 22 23PhoenixBIOS 4.0 Release 6.0 24 258 X64 level 8664, 2 Mhz processor (s). 26 27Windows NT 6.2 Build 9200 CSD . 28 29Memory 30 31MemoryLoad = 92% 32 33Total Physical = 131071 MB 34 35Available Physical = 10157 MB 36 37Total Page File = 262143 MB 38 39Available Page File = 135435 MB 40 41Total Virtual = 134217727 MB 42 43Available Virtual = 133928023 MB 44 45***Stack Dump being sent to C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\LOG\SQLDump7265.txt 46 47SqlDumpExceptionHandler: Process 59 generated fatal exception c0000005 EXCEPTION_ACCESS_VIOLATION. SQL Server is 48 49terminating this process. 50 51* ******************************************************************************* 52 53* 54 55* BEGIN STACK DUMP: 56 57* 05/17/19 05:00:20 spid 59 58 59* 60 61* 62 63* Exception Address = 000001DF83DBC4AC Module(oranls11+000000000004C4AC) 64 65* Exception Code = c0000005 EXCEPTION_ACCESS_VIOLATION 66 67* Access Violation occurred writing address 00000000E7DF2E60 68 69* Input Buffer 140 bytes - 70 71* EXEC [DBO].[usp_sdAutoUploadPriceAndDeliveryDateToESCM_New] 72 73* 74 75* 76 77* MODULE BASE END SIZE 78 79* sqlservr 00007FF6C47C0000 00007FF6C483EFFF 0007f000 80 81* ntdll 00007FFE18480000 00007FFE1864FFFF 001d0000 82 83* KERNEL32 00007FFE16BC0000 00007FFE16C6BFFF 000ac000 84 85* KERNELBASE 00007FFE15340000 00007FFE1555CFFF 0021d000 86 87* SYSFER 000000006E400000 000000006E494FFF 00095000 88 89* ADVAPI32 00007FFE16D10000 00007FFE16DB1FFF 000a2000 90 91* msvcrt 00007FFE165D0000 00007FFE1666DFFF 0009e000 92 93* sechost 00007FFE182D0000 00007FFE18328FFF 00059000 94 95* RPCRT4 00007FFE16910000 00007FFE16A30FFF 00121000 96 97* ole32 00007FFE15CE0000 00007FFE15E17FFF 00138000 98 99* combase 00007FFE15A10000 00007FFE15CD4FFF 002c5000 100 101* ucrtbase 00007FFE149E0000 00007FFE14AD3FFF 000f4000 102 103* bcryptPrimitives 00007FFE14BF0000 00007FFE14C59FFF 0006a000 104 105* GDI32 00007FFE16420000 00007FFE16453FFF 00034000 106 107* gdi32full 00007FFE15610000 00007FFE15790FFF 00181000 108 109* USER32 00007FFE15E80000 00007FFE15FE4FFF 00165000 110 111* NETAPI32 00007FFE0C660000 00007FFE0C677FFF 00018000 112 113* pdh 00007FFE11390000 00007FFE113DCFFF 0004d000 114 115* win32u 00007FFE14970000 00007FFE1498DFFF 0001e000 116 117* sqlmin 00007FFE02EC0000 00007FFE060B8FFF 031f9000 118 119* sqlTsEs 00007FFE060C0000 00007FFE069EEFFF 0092f000 120 121* sqllang 00007FFE00740000 00007FFE02EBAFFF 0277b000 122 123* SQLOS 00007FFE06EF0000 00007FFE06EF6FFF 00007000 124 125* sqldk 00007FFE069F0000 00007FFE06EEBFFF 004fc000 126 127* OLEAUT32 00007FFE16500000 00007FFE165BEFFF 000bf000 128 129* msvcp_win 00007FFE157A0000 00007FFE1583BFFF 0009c000 130 131* opends60 00007FFE00730000 00007FFE00738FFF 00009000 132 133* qds 00007FFE00600000 00007FFE0072BFFF 0012c000 134 135* svl 00007FFE004E0000 00007FFE0050DFFF 0002e000 136 137* CRYPT32 00007FFE15840000 00007FFE15A08FFF 001c9000 138 139* MSASN1 00007FFE14910000 00007FFE1491FFFF 00010000 140 141* WS2_32 00007FFE18350000 00007FFE183B9FFF 0006a000 142 143* MSVCP120 00007FFE0BDF0000 00007FFE0BE95FFF 000a6000 144 145* MSVCR120 00007FFE0D6B0000 00007FFE0D79EFFF 000ef000 146 147* WINMM 00007FFE12CF0000 00007FFE12D12FFF 00023000 148 149* Secur32 00007FFE11250000 00007FFE1125BFFF 0000c000 150 151* WINHTTP 00007FFE11280000 00007FFE1134BFFF 000cc000 152 153* ODBC32 00007FFE00430000 00007FFE004DEFFF 000af000 154 155* secforwarder 00007FFE00510000 00007FFE00519FFF 0000a000 156 157* WINMMBASE 00007FFE12C90000 00007FFE12CBAFFF 0002b000 158 159* cfgmgr32 00007FFE14990000 00007FFE149D1FFF 00042000 160 161* bcrypt 00007FFE14820000 00007FFE1484AFFF 0002b000 162 163* ncrypt 00007FFE14430000 00007FFE14455FFF 00026000 164 165* NTASN1 00007FFE143F0000 00007FFE1442AFFF 0003b000 166 167* SSPICLI 00007FFE14550000 00007FFE1457BFFF 0002c000 168 169* NETUTILS 00007FFE13F70000 00007FFE13F7CFFF 0000d000 170 171* DPAPI 00007FFE13B20000 00007FFE13B29FFF 0000a000 172 173* SAMCLI 00007FFE11F50000 00007FFE11F68FFF 00019000 174 175* WINTRUST 00007FFE14B90000 00007FFE14BE4FFF 00055000 176 177* USERENV 00007FFE14030000 00007FFE1404EFFF 0001f000 178 179* AUTHZ 00007FFE13BC0000 00007FFE13C09FFF 0004a000 180 181* profapi 00007FFE148E0000 00007FFE148F3FFF 00014000 182 183* XmlLite 00007FFE0C8F0000 00007FFE0C925FFF 00036000 184 185* dhcpcsvc 00007FFE11260000 00007FFE11279FFF 0001a000 186 187* WININET 00007FFE07D40000 00007FFE08121FFF 003e2000 188 189* NSI 00007FFE165C0000 00007FFE165C7FFF 00008000 190 191* LOGONCLI 00007FFE12780000 00007FFE127BDFFF 0003e000 192 193* psapi 00007FFE18340000 00007FFE18347FFF 00008000 194 195* kernel.appcore 00007FFE14900000 00007FFE1490EFFF 0000f000 196 197* instapi140 00007FFDFD330000 00007FFDFD342FFF 00013000 198 199* CRYPTSP 00007FFE14350000 00007FFE14366FFF 00017000 200 201* rsaenh 00007FFE13DC0000 00007FFE13DF2FFF 00033000 202 203* CRYPTBASE 00007FFE14370000 00007FFE1437AFFF 0000b000 204 205* imagehlp 00007FFE16A40000 00007FFE16A5BFFF 0001c000 206 207* gpapi 00007FFE138D0000 00007FFE138F2FFF 00023000 208 209* wkscli 00007FFE10DE0000 00007FFE10DF5FFF 00016000 210 211* cscapi 00007FFDFD350000 00007FFDFD361FFF 00012000 212 213* sqlevn70 000001DFEAF90000 000001DFEB29EFFF 0030f000 214 215* CLUSAPI 00007FFE09EE0000 00007FFE09F98FFF 000b9000 216 217* DNSAPI 00007FFE13F80000 00007FFE14020FFF 000a1000 218 219* IPHLPAPI 00007FFE13F30000 00007FFE13F67FFF 00038000 220 221* RESUTILS 00007FFE0A1B0000 00007FFE0A210FFF 00061000 222 223* VERSION 00007FFE0C490000 00007FFE0C499FFF 0000a000 224 225* hkruntime 00007FFDFD490000 00007FFDFD760FFF 002d1000 226 227* hkcompile 00007FFDFC470000 00007FFDFC5D1FFF 00162000 228 229* SHLWAPI 00007FFE183C0000 00007FFE18411FFF 00052000 230 231* hkengine 00007FFDFBC30000 00007FFDFC33AFFF 0070b000 232 233* dbghelp 000000006D570000 000000006D705FFF 00196000 234 235* ncryptprov 00007FFE0D9D0000 00007FFE0DA23FFF 00054000 236 237* msv1_0 00007FFE14140000 00007FFE141A6FFF 00067000 238 239* NtlmShared 00007FFE14130000 00007FFE1413BFFF 0000c000 240 241* cryptdll 00007FFE14210000 00007FFE14224FFF 00015000 242 243* kerberos 00007FFE14260000 00007FFE1434FFFF 000f0000 244 245* schannel 00007FFE13D00000 00007FFE13D77FFF 00078000 246 247* SECURITY 000002073E580000 000002073E582FFF 00003000 248 249* MSCOREE 00007FFE07B20000 00007FFE07B85FFF 00066000 250 251* mscoreei 00007FFE07A80000 00007FFE07B1BFFF 0009c000 252 253* SqlServerSpatial140 00007FFDFB8F0000 00007FFDFB9A1FFF 000b2000 254 255* clbcatq 00007FFE16C70000 00007FFE16D0EFFF 0009f000 256 257* msxml3 00007FFDFB640000 00007FFDFB86BFFF 0022c000 258 259* sqlncli11 00007FFDFB2E0000 00007FFDFB632FFF 00353000 260 261* COMDLG32 00007FFE16810000 00007FFE16909FFF 000fa000 262 263* shcore 00007FFE14AE0000 00007FFE14B88FFF 000a9000 264 265* SHELL32 00007FFE16DC0000 00007FFE182C4FFF 01505000 266 267* windows.storage 00007FFE14C60000 00007FFE15338FFF 006d9000 268 269* powrprof 00007FFE14920000 00007FFE1496BFFF 0004c000 270 271* MSVCR100 000000006D490000 000000006D561FFF 000d2000 272 273* COMCTL32 00007FFE07C90000 00007FFE07D3BFFF 000ac000 274 275* imm32 00007FFE16460000 00007FFE1648DFFF 0002e000 276 277* SQLNCLIR11 000002073E710000 000002073E747FFF 00038000 278 279* netbios 00007FFDFC340000 00007FFDFC34BFFF 0000c000 280 281* sqlnclirda11 000000006D130000 000000006D488FFF 00359000 282 283* ualapi 00007FFDFB2C0000 00007FFDFB2D9FFF 0001a000 284 285* ESENT 00007FFE094E0000 00007FFE097D1FFF 002f2000 286 287* ntmarta 00007FFE13610000 00007FFE13641FFF 00032000 288 289* SQLNCLIRDAR11 000002073E810000 000002073E847FFF 00038000 290 291* clr 00007FFE06F00000 00007FFE078ECFFF 009ed000 292 293* MSVCR120_CLR0400 00007FFE00270000 00007FFE00366FFF 000f7000 294 295* mscorlib.ni 00007FFDFEAB0000 00007FFE00040FFF 01591000 296 297* SqlAccess 00007FFDFB240000 00007FFDFB2B4FFF 00075000 298 299* clrjit 00007FFDFD770000 00007FFDFD89AFFF 0012b000 300 301* BatchParser 00007FFDFAC50000 00007FFDFAC7BFFF 0002c000 302 303* SRVCLI 00007FFE09E70000 00007FFE09E95FFF 00026000 304 305* ftimport 0000000060000000 0000000060024FFF 00025000 306 307* MSFTE 0000000049980000 0000000049D2DFFF 003ae000 308 309* mskeyprotect 00007FFDFB870000 00007FFDFB884FFF 00015000 310 311* mswsock 00007FFE141B0000 00007FFE1420BFFF 0005c000 312 313* ntdsapi 00007FFE0A350000 00007FFE0A378FFF 00029000 314 315* DSPARSE 00007FFE0EE40000 00007FFE0EE4CFFF 0000d000 316 317* rasadhlp 00007FFE104B0000 00007FFE104B9FFF 0000a000 318 319* fwpuclnt 00007FFE11780000 00007FFE117E9FFF 0006a000 320 321* ncryptsslp 00007FFDFB8C0000 00007FFDFB8E0FFF 00021000 322 323* xpsqlbot 00007FFE0B930000 00007FFE0B937FFF 00008000 324 325* xpstar 00007FFE0B0A0000 00007FFE0B10DFFF 0006e000 326 327* SQLSCM 00007FFDFB090000 00007FFDFB0A2FFF 00013000 328 329* xpstar 0000020923680000 000002092368CFFF 0000d000 330 331* cryptnet 00007FFDF7D10000 00007FFDF7D3EFFF 0002f000 332 333* xplog70 00007FFDFD3A0000 00007FFDFD3B3FFF 00014000 334 335* xplog70 000001DF80010000 000001DF80013FFF 00004000 336 337* Sort00060101 00007FFDF1030000 00007FFDF1042FFF 00013000 338 339* mlang 00007FFDF0D20000 00007FFDF0D5EFFF 0003f000 340 341* System.Data 00007FFDF8E30000 00007FFDF9195FFF 00366000 342 343* wldp 00007FFE13B00000 00007FFE13B17FFF 00018000 344 345* odsole70 00007FFE08440000 00007FFE08457FFF 00018000 346 347* scrrun 00007FFDFC3D0000 00007FFDFC401FFF 00032000 348 349* sxs 00007FFE14720000 00007FFE147B7FFF 00098000 350 351* oledb32 00007FFDEC730000 00007FFDEC81CFFF 000ed000 352 353* MSDART 00007FFE07A50000 00007FFE07A75FFF 00026000 354 355* Comctl32 00007FFDFB9B0000 00007FFDFBC29FFF 0027a000 356 357* msadce 00007FFDEF670000 00007FFDEF70BFFF 0009c000 358 359* msadcer 000001DF82CD0000 000001DF82CD2FFF 00003000 360 361* sqloledb 00007FFDE9300000 00007FFDE93D6FFF 000d7000 362 363* MSDATL3 00007FFDFAC90000 00007FFDFACB1FFF 00022000 364 365* OraOLEDB11 0000000010000000 000000001008EFFF 0008f000 366 367* OraOLEDBgmr11 0000000044100000 0000000044126FFF 00027000 368 369* OraOLEDBrst11 0000000044400000 0000000044434FFF 00035000 370 371* OraOLEDButl11 0000000044700000 0000000044708FFF 00009000 372 373* OCI 0000000180000000 00000001800AAFFF 000ab000 374 375* MSVCR80 000000006DE00000 000000006DEC8FFF 000c9000 376 377* OraClient11 000001DF838D0000 000001DF83D6DFFF 0049e000 378 379* oracore11 000001DF82DE0000 000001DF82F3FFFF 00160000 380 381* oranls11 000001DF83D70000 000001DF83E6EFFF 000ff000 382 383* oraunls11 000001DF82DA0000 000001DF82DBFFFF 00020000 384 385* oracommon11 000001DF83E70000 000001DF84126FFF 002b7000 386 387* orageneric11 000001DF84130000 000001DF85030FFF 00f01000 388 389* oran11 000001DF85040000 000001DF85493FFF 00454000 390 391* orancrypt11 000001DF854A0000 000001DF854C3FFF 00024000 392 393* oraldapclnt11 000001DF854D0000 000001DF856C1FFF 001f2000 394 395* oranl11 000001DF856E0000 000001DF8574EFFF 0006f000 396 397* oranro11 000001DF85760000 000001DF857BAFFF 0005b000 398 399* orapls11 000001DF857D0000 000001DF85CF0FFF 00521000 400 401* orasql11 000001DF85D10000 000001DF85D6DFFF 0005e000 402 403* orauts 000001DF85D80000 000001DF85D86FFF 00007000 404 405* orasnls11 000001DF85DA0000 000001DF85DDCFFF 0003d000 406 407* oraxml11 000001DF85DF0000 000001DF862CEFFF 004df000 408 409* oracell11 000001DF862E0000 000001DF8632AFFF 0004b000 410 411* orannzsbb11 000001DF86340000 000001DF864C3FFF 00184000 412 413* orahasgen11 000001DF864E0000 000001DF867B5FFF 002d6000 414 415* oraocr11 000001DF867D0000 000001DF86897FFF 000c8000 416 417* orazt11 000001DF868B0000 000001DF86A9FFFF 001f0000 418 419* oranldap11 000001DF86AB0000 000001DF86AFAFFF 0004b000 420 421* oranhost11 000001DF86B10000 000001DF86B19FFF 0000a000 422 423* orancds11 000001DF86B30000 000001DF86B36FFF 00007000 424 425* orantns11 000001DF86B50000 000001DF86B60FFF 00011000 426 427* oraztkg11 000001DF86B80000 000001DF86C32FFF 000b3000 428 429* WSOCK32 00007FFE09100000 00007FFE09108FFF 00009000 430 431* orantcp11 000001DF86C50000 000001DF86C84FFF 00035000 432 433* oraslax11 000001DF86CA0000 000001DF86CAEFFF 0000f000 434 435* oravsn11 000001DF86CC0000 000001DF86CC6FFF 00007000 436 437* oraplp11 000001DF86CE0000 000001DF870D4FFF 003f5000 438 439* MSVCP80 000000006DF80000 000000006E088FFF 00109000 440 441* oraocrutl11 000001DF870F0000 000001DF87100FFF 00011000 442 443* oraocrb11 000001DF87120000 000001DF87213FFF 000f4000 444 445* OraPlc11 000001DF87230000 000001DF8724FFFF 00020000 446 447* OraOLEDB11us 0000000044300000 0000000044305FFF 00006000 448 449* OraOLEDBpus11 0000000044200000 0000000044207FFF 00008000 450 451* msdaps 00007FFE0B1F0000 00007FFE0B250FFF 00061000 452 453* comsvcs 00007FFE0B280000 00007FFE0B41BFFF 0019c000 454 455* napinsp 00007FFE0DA30000 00007FFE0DA45FFF 00016000 456 457* winrnr 00007FFE0DCA0000 00007FFE0DCADFFF 0000e000 458 459* NLAapi 00007FFE11620000 00007FFE11637FFF 00018000 460 461* apphelp 00007FFE12C10000 00007FFE12C89FFF 0007a000 462 463* DSROLE 00007FFE122C0000 00007FFE122C9FFF 0000a000 464 465* rasapi32 00007FFDEF7C0000 00007FFDEF877FFF 000b8000 466 467* rasman 00007FFDFB1A0000 00007FFDFB1BFFFF 00020000 468 469* rtutils 00007FFE0E2B0000 00007FFE0E2C3FFF 00014000 470 471* dhcpcsvc6 00007FFE10F10000 00007FFE10F25FFF 00016000 472 473* System.ni 00007FFDFDA50000 00007FFDFE690FFF 00c41000 474 475* System.Transactions 00007FFE0D7B0000 00007FFE0D7FEFFF 0004f000 476 477* System.Security.ni 00007FFDFE8B0000 00007FFDFE9A0FFF 000f1000 478 479* System.Xml.ni 00007FFDF9AE0000 00007FFDFA36BFFF 0088c000 480 481* System.Core.ni 00007FFDFC8A0000 00007FFDFD2EFFFF 00a50000 482 483* System.Configuration.ni 00007FFDF8D00000 00007FFDF8E2AFFF 0012b000 484 485* COMRES 000001DF88040000 000001DF8817DFFF 0013e000 486 487* XOLEHLP 00007FFDF1540000 00007FFDF1556FFF 00017000 488 489* MSDTCPRX 00007FFDFAB60000 00007FFDFAC41FFF 000e2000 490 491* MTXCLU 00007FFDFAAF0000 00007FFDFAB58FFF 00069000 492 493* ktmw32 00007FFE0B090000 00007FFE0B09AFFF 0000b000 494 495* ondemandconnroutehelper 00007FFE10360000 00007FFE10374FFF 00015000 496 497* clrcompression 00007FFE0DC50000 00007FFE0DC73FFF 00024000 498 499* SAMLIB 00007FFE0D100000 00007FFE0D122FFF 00023000 500 501* xprepl 00007FFE0B1D0000 00007FFE0B1E9FFF 0001a000 502 503* dbghelp 000000006CE90000 000000006D025FFF 00196000 504 505* 506 507* P1Home: 0000000000000000: 508 509* P2Home: 0000000000000000: 510 511* P3Home: 000000000000000C: 512 513* P4Home: 0000000000000000: 514 515* P5Home: 0000000000000000: 516 517* P6Home: 0000000000000000: 518 519* ContextFlags: 000000000010005F: 520 521* MxCsr: 0000000000001F80: 522 523* SegCs: 0000000000000033: 524 525* SegDs: 000000000000002B: 526 527* SegEs: 000000000000002B: 528 529* SegFs: 0000000000000053: 530 531* SegGs: 000000000000002B: 532 533* SegSs: 000000000000002B: 534 535* EFlags: 0000000000010246: 536 537* Rax: 000000000000000C: 538 539* Rcx: 0000000000000031: 540 541* Rdx: 0000000000000031: 542 543* Rbx: 000000000000000C: 544 545* Rsp: 00000064EC3F80F0: 0000000000000000 000001DFB38C02A0 0000000000000020 000001DFEA290D50 00000226 546 54700000028 000001DF8474C4F0 548 549* Rbp: 00000000E7DF2E60: 550 551* Rsi: 000001DF8726D7E0: 0B20010003000000 000026D900003085 0000000200000000 0000000000015A00 00000000 552 55300000000 0000000000000000 554 555* Rdi: 000001DF88630008: 000001DF88630018 000001DF83E5F120 000001DF87265840 0000000000000000 00000000 556 55700000000 000000000000001C 558 559* R8: 00000000E7DF2E60: 560 561* R9: 00000225BF9B38C8: 2073776F72203631 000000006C696166 0000000000000000 0000000000000000 00000000 562 56300000000 0000000000000000 564 565* R10: 00000000000000B2: 566 567* R11: 0000000000000001: 568 569* R12: 00000000E7DF2E60: 570 571* R13: 00000225BF9B38C8: 2073776F72203631 000000006C696166 0000000000000000 0000000000000000 00000000 572 57300000000 0000000000000000 574 575* R14: 000000000000000C: 576 577* R15: 000000000000000C: 578 579* Rip: 000001DF83DBC4AC: 01C58349004D8966 35740000FFFDF981 75FFC08302C58348 2B4D1E77FE3B45DA E82B4928 580 5816F894CE9 C48348E889FDD148 582 583* ******************************************************************************* 584 585* ------------------------------------------------------------------------------- 586 587* Short Stack Dump 588 589000001DF83DBC4AC Module(oranls11+000000000004C4AC) 590 5910000000180064570 Module(OCI+0000000000064570) 592 593000000004440CC35 Module(OraOLEDBrst11+000000000000CC35) 594 595000000004442647B Module(OraOLEDBrst11+000000000002647B) 596 597000000001002F10A Module(OraOLEDB11+000000000002F10A) 598 59900000000100325CA Module(OraOLEDB11+00000000000325CA) 600 6010000000010035C78 Module(OraOLEDB11+0000000000035C78) 602 60300007FFDEC7A9262 Module(oledb32+0000000000079262) 604 60500007FFDEC7AA945 Module(oledb32+000000000007A945) 606 60700007FFE016B51DD Module(sqllang+0000000000F751DD) 608 60900007FFE0169D838 Module(sqllang+0000000000F5D838) 610 61100007FFE016114BE Module(sqllang+0000000000ED14BE) 612 61300007FFE01395A94 Module(sqllang+0000000000C55A94) 614 61500007FFE013984C8 Module(sqllang+0000000000C584C8) 616 61700007FFE01381DDC Module(sqllang+0000000000C41DDC) 618 61900007FFE0137CE68 Module(sqllang+0000000000C3CE68) 620 62100007FFE00754E70 Module(sqllang+0000000000014E70) 622 62300007FFE00755823 Module(sqllang+0000000000015823) 624 62500007FFE00755F24 Module(sqllang+0000000000015F24) 626 62700007FFE013802F3 Module(sqllang+0000000000C402F3) 628 62900007FFE0137FC90 Module(sqllang+0000000000C3FC90) 630 63100007FFE0137CA68 Module(sqllang+0000000000C3CA68) 632 63300007FFE00754E70 Module(sqllang+0000000000014E70) 634 63500007FFE00755823 Module(sqllang+0000000000015823) 636 63700007FFE00755F24 Module(sqllang+0000000000015F24) 638 63900007FFE013802F3 Module(sqllang+0000000000C402F3) 640 64100007FFE0137FC90 Module(sqllang+0000000000C3FC90) 642 64300007FFE0137CA68 Module(sqllang+0000000000C3CA68) 644 64500007FFE00754E70 Module(sqllang+0000000000014E70) 646 64700007FFE00755823 Module(sqllang+0000000000015823) 648 64900007FFE00755F24 Module(sqllang+0000000000015F24) 650 65100007FFE0075CB7D Module(sqllang+000000000001CB7D) 652 65300007FFE00753B12 Module(sqllang+0000000000013B12) 654 65500007FFE00753903 Module(sqllang+0000000000013903) 656 65700007FFE069F4DAD Module(sqldk+0000000000004DAD) 658 65900007FFE069F52E8 Module(sqldk+00000000000052E8) 660 66100007FFE069F4F5D Module(sqldk+0000000000004F5D) 662 66300007FFE06A15818 Module(sqldk+0000000000025818) 664 66500007FFE06A15910 Module(sqldk+0000000000025910) 666 66700007FFE06A15087 Module(sqldk+0000000000025087) 668 66900007FFE06A155D9 Module(sqldk+00000000000255D9) 670 67100007FFE16BC84D4 Module(KERNEL32+00000000000084D4) 672 67300007FFE184EE851 Module(ntdll+000000000006E851) 674 675CSession @0x000001EE926287B0 676 677---------------------------- 678 679m_sessionId = 59 m_cRef = 18 m_rgcRefType[0] = 1 680 681m_rgcRefType[1] = 1 m_rgcRefType[2] = 15 m_rgcRefType[3] = 1 682 683m_rgcRefType[4] = 0 m_rgcRefType[5] = 0 m_pmo = 0x000001EE92628040 684 685m_pstackBhfPool = 0x000001EC206375F0 m_dwLoginFlags = 0x100083e0 m_fBackground = 0 686 687m_eConnResetOption = 0 m_fUserProc = 1 m_fConnReset = 0 688 689m_fIsConnReset = 0 m_fInLogin = 0 m_fAuditLoginSent = 1 690 691m_fAuditLoginFailedSent = 0 m_fReplRelease = 0 m_fKill = 0 692 693m_ulLoginStamp = 72716430 m_eclClient = 7 m_protType = 6 694 695CUEnvTransient @0x000001EE92628C90 696 697---------------------------------- 698 699m_ululRowcount = 0 m_cidLastOpen = 0 m_lFetchStat = 0 700 701m_lRetStat = 0 m_lLastError = 0 m_lPrevError = 0 702 703m_cNestLevel = 0 m_lHoldRand1 = 0 m_lHoldRand2 = 0 704 705m_cbContextInfo = 0 m_rgbContextInfo = 000001EE92628E8C 706 707CDbAndSetOpts @0x000001EE92628CB0 708 709--------------------------------- 710 711m_fHasDbRef = 0 m_fDateFirstSet = 0 m_fDateFormatSet = 0 712 713m_lUserOpt1 = 0x14016000 m_lUserOpt2 = 0x0 m_lUserOpt1SetMask = 0xffffe7f7 714 715m_idtInsert.objid = 0 m_idtInsert.state = 0 m_idtInsert.dbid = 0 716 717m_llRowcnt = 0 m_lStatList = 0 m_lTextSize = 1024 718 719m_lOffsets = 0x0 m_ulLockTimeout = 4294967295 m_ulQueryGov = 0 720 721m_eDtFmt = 1 m_eDayDateFirst = 7 m_eDdLckPri = 0 722 723m_eIsoLvl = 2 m_eFipsFlag = 0x0 m_sLangId = 0 724 725m_pV7LoginRec 726 727--------------------- 728 7290000000000000000: a4010000 04000074 00100000 00000007 50300000 ¤......t........P0.. 730 7310000000000000014: 00000000 e0830010 20feffff 09040000 5e000800 ....à.. þÿÿ ...^... 732 7330000000000000028: 00000000 00000000 6e004900 00010700 0e010400 ........n.I......... 734 735000000000000003C: 12010400 1a010000 1a010600 005056b4 c19c2601 .............PV´Á&. 736 7370000000000000050: 78002601 00000000 00000000 0000 x.&........... 738 739CPhysicalConnection @0x000001EE92628400 740 741--------------------------------------- 742 743m_pPhyConn->m_pmo = 0x000001EE92628040 744 745m_pPhyConn->m_pNetConn = 0x000001EE92629070 746 747m_pPhyConn->m_pConnList = 0x000001EE92628780 748 749m_pPhyConn->m_pSess = 0x000001EE92628808 m_pPhyConn->m_fTracked = -1 750 751m_pPhyConn->m_cbPacketsize = 4096 m_pPhyConn->m_fMars = 0 m_pPhyConn->m_fKill = 0 752 753CBatch @0x000001EE92629CB0 754 755-------------------------- 756 757m_pSess = 0x000001EE926287B0 m_pConn = 0x000001EE926296B0 m_cRef = 3 758 759m_rgcRefType[0] = 1 m_rgcRefType[1] = 1 m_rgcRefType[2] = 1 760 761m_rgcRefType[3] = 0 m_rgcRefType[4] = 0 m_pTask = 0x000001EBB55C84E8 762 763EXCEPT (null) @0x00000064EC3F4EF8 764 765--------------------------------- 766 767exc_number = 0 exc_severity = 0 exc_func = sqldk.dll+0x000000000005D430 768 769Task @0x000001EBB55C84E8 770 771------------------------ 772 773CPU Ticks used (ms) = 20055 Task State = 2 774 775WAITINFO_INTERNAL: WaitResource = 0x0000000000000000 WAITINFO_INTERNAL: WaitType = 0x0 776 777WAITINFO_INTERNAL: WaitSpinlock = 0x0000000000000000 778 779WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000 WAITINFO_EXTERNAL: WaitType = 0x400070 780 781WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000 782 783WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000 784 785WAITINFO_EXTERNAL: WaitType = 0x200001D7 786 787WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000 788 789WAITINFO_EXTERNAL: WaitResource = 0x0000000000000000 WAITINFO_EXTERNAL: WaitType = 0x4000DA 790 791WAITINFO_EXTERNAL: WaitSpinlock = 0x0000000000000000 SchedulerId = 0x3 792 793ThreadId = 0x3620 m_state = 0 m_eAbortSev = 0 794 795EC @0x000001EC20637720 796 797---------------------- 798 799spid = 0 ecid = 0 ec_stat = 0x0 800 801ec_stat2 = 0x0 ec_atomic = 0x0 ecType = 0 802 803__pSETLS = 0x000001EE92629720 __pSEParams = 0x000001EE92629E60 804 805SEInternalTLS @0x000001EE92629720 806 807--------------------------------- 808 809m_activeHeapDatasetList = 0x000001EE92629B30 810 811m_activeIndexDatasetList = 0x000001EE92629B40 m_flags = 0 812 813m_TLSstatus = 3 m_CriticalOpDbId = 65535 m_CloudHostDbId = 65535 814 815m_RestoringDbId = 65535 m_RestoreTargetDbId = 0 m_noLockScanCount = 0 816 817m_readonlyDatabaseScan = false m_inCatchupRedo = false 818 819m_pBulkOpLockNotification = 0x0000000000000000 m_pDbccContext = 0x0000000000000000 820 821m_pCompressionContext = 0x0000000000000000 822 823m_pRetentionCleanupContext = 0x0000000000000000 m_pAllocFileLimit = 0x0000000000000000 824 825m_dekInstanceIndex = 0x-1 m_pImbiContext = 0x0000000000000000 826 827m_pNcciThreadContext = 0x0000000000000000 828 829SEParams @0x000001EE92629E60 830 831---------------------------- 832 833 m_lockTimeout = -1 m_isoLevel = 4096 m_logDontReplicate = 0 834 835 m_neverReplicate = 0 m_XactWorkspace = 0x000001EEFA4EE040 836 837 m_execStats = 0x000001E4734EBB60
所有的Dump文件都指向一个存储过程，而最终发现是SQL Agent上的一个作业调用这个存储过程。而咨询微软Supprt的同事，人家反馈是因为这个存储过程使用了oracle linked server ，而且因为在OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项的缘故，具体邮件如下：
Hello xxxxx,
Many thanks for the feedback. If this is the case, there is a known issue when running queries through an Oracle linked server, which you can find in the following article:
This happens because it is not recommended to have external modules loaded into the SQL Server memory, as they can cause these types of unexpected behaviors. To try and troubleshoot this issue I propose the following action plan:
- In the SSMS, open “Server Objects” -> “Linked Servers” -> “Providers”
- Select the OracleDB provider, right click and go to “Properties”
- In the “Properties” window uncheck the “Allow InProcess” option
- Reboot the server
This process will remove from the SQL Server memory those DLLs and this should prevent the issue from happening again. Let me know if this plan would be possible to execute from your side and, if so, tell me how it went once it is done.
I will be waiting on your feedback, if you have any questions in the meantime feel free to reach out to me.
Best Regards,
虽然微软的技术支持反馈出现Dump文件是因为OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项的缘故，但是他提供的官方文档是SQL 2005、2008的相关文档，而不是SQL Server 2017d的相关文档，而且在SSMS里面调用Oracle Linked Server不报错。这个让我有点质疑其答复。后面按照其要求处理后，确实发现SQL Dump文件消失了。下面是对整个过程的一个复盘：
1： 当初在OraOLEDB.Oracle驱动上勾选了“Allow InProcess”选项，是因为开发使用OPENQUERY查询时，报错如下错误
其实出现这个错误，是因为启动SQL Server实例的账号是NT Service\MSSQLSERVER， 如果是LocalSystem等这类账号就不会报这个错误。主要是因为MSDAINITIALIZE Properties的安全设置。
-
Click Start, type Dcomcnfg in the Search programs and files box, and then press Enter.
-
Expand Component Services, expand Computers, expand My Computer, and then click DCOM Config.
-
Right-click MSDAINITIALIZE, and then click Properties.
-
On the Security tab, under Launch and Activation Permissions, click Customize, and then click Edit.
-
Add the Administrators group or the user account that you want.
如下所示，在安全选项里面使用“Customize"里面，加上启动SQL Server服务（NT Service\MSSQLSERVER）或SQL Server Agent服务的账号（NT Service\SQLSERVERAGENT）的权限，如下所示：
详细步骤参考下面过程
Verify below settings in DCOMCNFG: Start --> Run –> Dcomcnfg
1. Component services -->My Computer ---> Properties verify that below options are set:
In the 'Default Properties' tab:
- 'Enable Distributed COM on this computer' is checked.
- Default Authentication = Connect.
- Default Impersonation Level = Identify or Impersonate.
2. Component services --> My computer --> DCOM Config --> MSDAINITIALIZE
-Right click on MSDAINITIALIZE --> Properties -->Security
-Add the SQL Server service account (if connected to SQL server using SQL login) or windows user account under "Launch and Activation Permissions", "Access permissions" and "Configuration Permissions".
-Give full rights to these accounts.
-Restart the server
回到之前问题，取消了OraOLEDB.Oracle驱动上的“Allow InProcess”选项后，SQL Dump文件缺失消失了。也就是说这个确实是因为“SQL Server service crashes when you run an Oracle linked server query” 这个缘故导致的。不过在测试过程中，我简单的查询是不会触发这个bug。尚不清楚内部的具体原因，另外，还有就是有些版本勾选了这个选项，也没有触发这个Bug。目前只在SQL Server 2017 (RTM-CU14) (KB4484710) - 14.0.3076.1 (X64) 这个版本中发现了这个问题。
参考资料：