Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I´m trying to solve IE 8 performance problems on my system at the moment.

I analyzed my system with Sysinternals Process Monitor and found lots of "BUFFER OVERFLOW"s entrys in the Log (See below). Any ideas to solve the problem?

Thank you in advance! Log entrys for example:

iexplore.exe RegQueryValue HKLM\System\CurrentControlSet\services\NetBT\Linkage\Export BUFFER OVERFLOW Length: 144
communicator.exe RegQueryValue HKLM\System\CurrentControlSet\services\Tcpip\Linkage\Bind BUFFER OVERFLOW Length: 144
OUTLOOK.EXE RegQueryValue HKLM\System\CurrentControlSet\services\Tcpip\Linkage\Bind BUFFER OVERFLOW Length: 144
share|improve this question
add comment

3 Answers

up vote 3 down vote accepted

This is not an error. What is happening is the program is requesting data the length of which it does not know. It provides an initial buffer. If it is too small, a Buffer Overflow is returned together with the size needed and the program can reissue the request with the correct size. Do not confuse with the use of the term buffer overflow to designate the erroneous overwriting of data which can lead to a security vulnerability.

share|improve this answer
add comment

Potentially it's a security risk - you may want to remove IE 8 and use IE 9.

Something to try:

Run Internet Explorer in "No Add-Ons" mode and check if it works fine.

An error may occur if an add-on is damaged or if an add-on conflicts with Internet Explorer. To verify the same, run IE in no add-ons mode.

A. Go to Start Menu > Programs > Accessories > System Tools.

B. Click Internet Explorer (No Add-Ons). Internet Explorer opens without add-ons, toolbars, or plug-ins.

C. Test Internet Explorer to verify that it works correctly.

If no errors occur, the problem is caused by one of the add-ons that typically load together with Internet Explorer. In this case

Use the Manage Add-ons tool to determine which add-on is causing the issue.

a. Open Internet Explorer.

b. Click Tools, and then click Manage Add-ons.

c. On the Show drop-down menu, select All add-ons to display all add-ons that are installed on the computer.

d. For each item in this list, select the add-on, and then click Disable in the Information window.

e. When you have disabled all the items in this list, click OK.

f. Exit and then restart Internet Explorer.

g. If issues do not reoccur, repeat steps ‘a’ through ‘c’.

h. Click Enable for a single add-on.

i. Repeat steps ‘f’ through ‘h’ until you determine which add-on causes errors to occur.

Source

share|improve this answer
1  
This is not an error. What is happening is the program is requesting data the length of which it does not know. It provides an initial buffer. If it is too small, a Buffer Overflow is returned together with the size needed and the program can reissue the request with the correct size. Do not confuse with the use of the term buffer overflow to designate the erroneous overwriting of data which can lead to a security vulnerability. –  David Marshall Oct 23 '12 at 12:51
    
@DavidMarshall - So, I'm confused as to why your very helpful comment is not also an answer? It makes sense what you've written (assuming you're implying the point the OP has made is a red herring) –  Dave Rook Oct 23 '12 at 12:53
    
I've proposed it as an answer. –  David Marshall Oct 23 '12 at 13:01
add comment

I notice this myself occasionally in different programs, and a lot of network scanners and tools bring this about as well for me.

The first logical step is to narrow the "error," or issue, if you like -- by watching Process Monitor and look at when it happens and try to replicate it. If you're having trouble, try adjusting your filters.

I am trying this now and I found BluetoothView.exe to result in buffer overflow (BO) after creating a file, and then querying that same file -- which is what caused the BO. One example is an instance where in under a thousandths of a millisecond, BluetoothView creates a BO with the operation: QuerySecurityFile (BluetoothApis.dll).

Under the Process tab in Event Properties (in procmon), there is a list of modules including common shell files and things such as SkyDriveShell.dll, KernelBase.dll, ieframe.dll, Windows.Media.Streaming.dll and codecs, and other Nirsoft software such as Network Explorer. Although these things might have been found to being effected by Bluetooth, it's strange the actual program never turned up anything.

Under the Stack tab, the modules are: ntdll.dll, kernel32.dll, wow64.dll, wow64cpu.dll, guard32.dll, fltmgr.sys, ntoskrnl.exe, apphelp.dll, BluetoothView.exe, and <unknown>.

I was checking this because I had left my house for a while and left my computer running for a few days, when I came back I noticed a few things out of place and just wanted to check. After opening Task Manager my computer crashed, and would no longer complete loading Windows 8. Instead of a load/splash screen for W8, four or five lines of code flashed on the screen, as the flashing indicator on the top left (the one that lets you know that commands may be entered) drop about 4 or 5 lines down the screen, which is not normal function.

I had to do some unconventional things to be able to get back into Windows, but I won't go into that.

In your case, and in mine, I think the next step is to poke around at this program, and also to look into the programs its playing around with.

share|improve this answer
    
this might help too: blogs.technet.com/b/markrussinovich/archive/2005/05/17/… –  asilentfire Aug 25 '13 at 5:50
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.