Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly with failing modules: ntdll.dll and secars.dll

Products

• Endpoint Protection

Issue/Introduction

The Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly. The following modules are listed as:

• ntdll.exe
• secars.dll

Event ID: 1000

Event Description from Application log: Faulting application httpd.exe, version 2.2.23.7, faulting module ntdll.dll, version 5.2.3790.4937, fault address 0x00011952.

Cause

ROOT CAUSE: Double-delete of the IO worker corrupted memory over time and eventually causes a crash.

SYMPTOMS: Apache crashes under heavy load.

Resolution

Issue have been fixed in 12.1 RU4 MP1.

Applies To

Windows 2003 SP2 64-bit