Detection and isolation of data items causing computer process crashes

• US 20070294584A1
• Filed: 04/28/2006
• Published: 12/20/2007
• Est. Priority Date: 04/28/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Jain, Chandresh, Stamerjohn, Jeffrey
• Application Number:
  US11/413,223
• Publication Number:
  US 20070294584A1
• Time in Patent Office: Days
• US Class Current: 714/37
• CPC Class Codes: G06F 11/004 Error avoidance G06F11/07 and subgroups take precedence
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0715 in a system implementing multitasking multitasking per se G06F9/46
• CPC Class Codes: G06F 11/076 by exceeding a count or rate limit, e.g. word- or bit count limit
• CPC Class Codes: G06F 11/1441 Resetting or repowering
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail

Abstract

Described herein is technology for, among other things, detecting a data item that causes a process running within a computer system processing multiple data items to crash when the data item is processed. The technology involves associating a unique identifier with each data item prior to the data item being processed. If the processing of a particular data item causes a crash, the particular data item'"'"'s unique identifier is stored in a persistent storage and the process is restarted in response to the crash. Once the process has restarted, the unique identifier is read from the persistent storage and the data item associated with the unique identifier is flagged as the data item that caused the process to crash.

Claims

1. A method of detecting a data item that causes a process running on a computer system to crash when processed, wherein the process running on the computer system processes multiple data items, the method comprising:

associating unique identifiers with data items prior to the data items being processed;

provided the processing of a particular data item causes a crash, storing the unique identifier corresponding to the particular data item in a persistent storage;

restarting the process in response to the crash;

reading the unique identifier from the persistent storage; and

flagging the particular data item associated with the unique identifier as causing the process to crash.

2. The method as recited in claim 1 further comprising:

storing a crash count for each data item, wherein the crash count is initially set to zero; and

incrementing the crash count for the particular data item.

3. The method as recited in claim 2 wherein the crash count is stored in the persistent storage and the method further comprises:

expiring an entry from the persistent storage after the entry has been stored in the persistent storage for a period of time.

4. The method as recited in claim 2 further comprising:

provided the crash count is equal to or greater than a threshold value, isolating the particular data item that caused the process to crash; and

provided the crash count is less than the threshold value, submitting the particular data item that caused the process to crash to be processed again.

5. The method as recited in claim 4 wherein the threshold value is user-definable.

6. The method as recited in claim 1 wherein the method is implemented in an electronic mail server.

7. The method as recited in claim 1 wherein the method is implemented in a database.

8. A system for detecting a data item that causes a process running on a computer system to crash when processed, wherein the process running on the computer system processes multiple data items, the system comprising:

a processor having an entry point that associates and temporarily stores a unique identifier with data items prior to the data item being processed;

at least one persistent storage for storing data;

an exception module which is invoked whenever the processing of a particular data item causes a crash, wherein the exception module causes the unique identifier associated with the particular data item to be stored in the at least one persistent storage;

a data item manager that, upon the process restarting, reads the unique identifier corresponding to the particular data item from the at least one persistent storage and flags the particular data item associated with the unique identifier as causing the process to crash.

9. The system as recited in claim 8 wherein the at least one persistent storage is also for storing a crash count for each data item, wherein the crash count is initially set to zero.

10. The system as recited in claim 9 wherein the data item manager, upon the process restarting, increments the crash count for the particular data item that caused the process to crash.

11. The system as recited in claim 10 wherein the data item manager isolates the particular data item that caused the process to crash if the crash count is equal to or greater than a threshold value and submits the particular data item that caused the process to crash to be processed again if the crash count is less than the threshold value.

12. The system as recited in claim 11 wherein the threshold value is user-definable.

13. The system as recited in claim 8 further comprising:

a user-interface for analyzing and manipulating the particular data item that caused the process to crash.

14. The system as recited in claim 8 wherein the at least one persistent storage is a file.

15. The system as recited in claim 8 wherein the at least one persistent storage is a registry key.

16. A computer-usable medium having computer-readable program code stored thereon for causing a computer system to execute a method for detecting a data item that causes a process running on a computer system to crash when processed, wherein the process running on the computer system processes multiple data items, the method comprising the steps of:

(a) loading a current data item from a queue of a plurality of data items;

(b) determining a unique identifier for the current data item;

(c) determining if the unique identifier exists in a persistent storage on the computer system;

(d) if the unique identifier does exist in the persistent storage;

i. flagging the current data item as a poison data item; and

(e) if the unique identifier does not exist in the persistent storage;

i. processing the current data item; and

ii. if a crash occurs while processing the current data item;

(1) storing the unique identifier in the persistent storage; and

(2) restarting the process.

17. The computer-usable medium as recited in claim 16 wherein step (d) further comprises the step of:

ii. isolating the current data item.

18. The computer-usable medium as recited in claim 16 wherein step (d) further comprises the step of:

iii. providing a user-interface for analyzing and manipulating the current data item.

19. The computer-usable medium as recited in claim 16 wherein the persistent storage is a file.

20. The computer-usable medium as recited in claim 16 wherein the persistent storage is a registry key.