Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly with failing modules: ntdll.dll and secars.dll

Article Id: 158283

Status: Published

Updated On: 08-04-2014 22:57

Legacy Id: TECH209402

Products:

Endpoint Protection

Issue/Introduction:

The Symantec Endpoint Protection Manager 12.1 RU3 httpd.exe process crashes repeatedly. The following modules are listed as:

ntdll.exe
secars.dll

Event ID: 1000

Event Description from Application log: Faulting application httpd.exe, version 2.2.23.7, faulting module ntdll.dll, version 5.2.3790.4937, fault address 0x00011952.

Cause:

ROOT CAUSE: Double-delete of the IO worker corrupted memory over time and eventually causes a crash.

SYMPTOMS: Apache crashes under heavy load.

Resolution:

Issue have been fixed in 12.1 RU4 MP1.

Applies To

Windows 2003 SP2 64-bit