Bug ID 426574: SIP message could self reference itself in ingressQ leading to crash

Last Modified: Feb 11, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP None(all modules)

Known Affected Versions:
11.0.0, 11.2.0, 11.3.0

Opened: Jul 30, 2013
Severity: 3-Major


TMM Crash experienced by the customer.


tmm crash


sip_machine() --> calls sip_post_ingress, which could return ERR_INPROGRESS in two scenarios. One) A TCL rule is in progress. Two) When MBLB is connecting -- in other words message not placed in its egress Q In case two, SIP filter needs to requeue it, as the message was removed before being propagated to mblb proxy. So the code checks for ERR_INPROGRESS to requeue. This accidentally requeues in case 1 too, leading to re-inserting same message, resulting in self-referencing message in sip->ingressQ, which in turn leads to this crash.



Fix Information


Behavior Change