Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly with failing modules: ntdll.dll and secars.dll

book

Article ID: 158283

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

The Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly. The following modules are listed as:

  • ntdll.exe
  • secars.dll

Event ID: 1000

Event Description from Application log: Faulting application httpd.exe, version 2.2.23.7, faulting module ntdll.dll, version 5.2.3790.4937, fault address 0x00011952.

Cause

ROOT CAUSE: Double-delete of the IO worker corrupted memory over time and eventually causes a crash.

SYMPTOMS: Apache crashes under heavy load.

Resolution

Issue have been fixed in 12.1 RU4 MP1.


Applies To

Windows 2003 SP2 64-bit