Hi All,

 

In apache httpd.conf we have added entries for virtual host. Apache –S gives proper output of the virtual hosts configured. In most cases apache too runs fine. In some cases we could see Apache stops from responding to the user request and apache error.log has ACCESS_VIOLATION with the following message

 

[error] Apache.exe caused a EXCEPTION_ACCESS_VIOLATION in module ntdll.dll at 001B:7C82F583, RtlGetLastWin32Error()+192 byte(s)

[Wed Jun 27 14:17:32 2007] [error] mod_ssl: SSL handshake failed (server 10.76.91.58:443, client 10.76.91.58) (OpenSSL library error follows)

[Wed Jun 27 14:17:32 2007] [error] OpenSSL: error:140A1041:SSL routines:SSL_BYTES_TO_CIPHER_LIST:malloc failure

 

Some other place where I can see the ACCESS_VIOLATION are ap_vbprintf(), BIO_f_buffer().  Moreover there is a particular thread hogging the CPU. On analyzing, the thread basically does this job

 

ChildEBP RetAddr  Args to Child             
1e1ff330 6d59ab65 20b00000 00000000 20bc9748 ntdll!RtlFreeHeap+0x4a3 (FPO: [Non-Fpo])
1e1ff344 6d5a4b3a 20bc9748 00000000 20bc29b0 dbghelp!pMemFree+0x1c (FPO: [Non-Fpo])
1e1ff35c 6d5a4410 20b7f688 20bc29b0 00000000 dbghelp!FreeModuleEntry+0xbc (FPO: [Non-Fpo])
1e1ff5d4 6d59e5a6 00005660 1e1ff6a4 00000000 dbghelp!LoadModule+0x132 (FPO: [Non-Fpo])
1e1ff628 6d59e5fd 00005660 00001f70 1e1ff6a4 dbghelp!SymLoadModuleEx+0x30 (FPO: [Non-Fpo])
1e1ff654 6d59e624 00005660 00001f70 1e1ff6a4 dbghelp!SymLoadModule64+0x23 (FPO: [Non-Fpo])
1e1ff678 030020af 00005660 00001f70 1e1ff6a4 dbghelp!SymLoadModule+0x1e (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
1e1ff7b4 0300137f 00000000 1e1ffa94 00000004 cmf_crash_handler!GetRegisterStringVB+0x313
1e1ff7f0 77e995f7 1e1ffa94 c0000005 0eb00de8 cmf_crash_handler!GetLimitModulesArray+0xd7
1e1ffa48 77bc3e74 1e1ffa94 00000000 00000000 kernel32!UnhandledExceptionFilter+0xac (FPO: [Non-Fpo])
1e1ffa68 77bcb547 c0000005 1e1ffa94 77bc6cd5 msvcrt!_XcptFilter+0x178 (FPO: [Non-Fpo])
1e1ffa74 77bc6cd5 1e1ffa9c 00000000 1e1ffa9c msvcrt!_endthreadex+0xba (FPO: [SEH])
1e1ffa9c 7c82eeb2 1e1ffb80 1e1fffa8 1e1ffb9c msvcrt!_except_handler3+0x61 (FPO: [Uses EBP] [3,0,7])
1e1ffac0 7c82ee84 1e1ffb80 1e1fffa8 1e1ffb9c ntdll!ExecuteHandler2+0x26
1e1ffb68 7c82ecc6 1e1fc000 1e1ffb9c 1e1ffb80 ntdll!ExecuteHandler+0x24
1e1ffb68 6ff64b2f 1e1fc000 1e1ffb9c 1e1ffb80 ntdll!KiUserExceptionDispatcher+0xe (FPO: [2,0,0]) (CONTEXT @ 1e1ffb9c)
1e1ffe78 6ff64cd6 00ad34d0 77bd8b80 0ebbd268 ApacheCore!ap_vbprintf+0x43f
1e1ffe90 6ff77ef1 0ebbd268 00000000 00ad34d0 ApacheCore!ap_vbprintf+0x5e6
1e1ffeb8 6ff77aac 00000000 0ebbd268 007c8a98 ApacheCore!ap_update_vhost_given_ip+0xfb1
1e1ffed8 6ff64f1c 00000193 000003e8 0eb608b0 ApacheCore!ap_update_vhost_given_ip+0xb6c

 

Any pointers on what would cause this issue.

 

 

Thanking you.

 

With Regards

Veerabahu