Topic: Error - child process exited with status 3221225477

[davidreade]

Hi,

I am running Apache 2.2.8 with ModSecurity 2.5.4 and I am getting this error when a request matches one of my Modsecurity rules that proxies the request to another server. (All requests are XML based and proxy different transactions to different backed Tomcat servers based on a particular field within the request)

I have 250 thread processes defined in Apache, the result of this error being thrown is that only one thread on that child process is being processed and the rest are being dropped.

I was working with ModSecurity 2.5.2 and turning off the caching did not resolve this issue so I upgraded to 2.5.4 but still no success.

Any help would be greatly appreciated.

[brown]

I'm also having the same issue with Apache 2.2.8 and ModSecurity 2.5.4.

[Steffen]

Best is to report your issue at: https://lists.sourceforge.net/lists/listinfo/mod-security-users

Steffen

[davidreade]

Just an update on this issue - it appears to be thrown whenever an xpath match is successful within the ModSecurity rules and not just on proxying

The error in the event log is:

Faulting application httpd.exe, version 2.2.8.0, faulting module ntdll.dll, version 5.2.3790.3959, fault address 0x0004afb2.

Is xml matching in modSecurity working for others on Apache 2.2.8 and ModSecurity 2.5.4?

I have Apache and ModSecurity installed from here and the correct 2008 c++ Runtime running on Windows 2003 Server SP2.