Bug ID 439862: In rare situations SPDY combined with other filters can cause a TMM crash

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF9

Opened: Dec 05, 2013

Severity: 2-Critical

Related Article: K15198

Symptoms

A TMM crash occurs when stream->ingress_frames is NULL in spdy_stream_process_ingress_body()

Impact

Traffic disrupted while tmm restarts.

Conditions

Recursion back into SPDY inside spdy_stream_process_acquired() can cause the state of the ingress frames list to not be what is expected.

Workaround

Try using less filters on the listener using SPDY. The lower the number of filters, the less likely this crash will occur.

Fix Information

When recursion occurs in SPDY frame ingress, it now correctly handles the case where the ingress was completed by the higher call into SPDY.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips