Bug ID 439862: In rare situations SPDY combined with other filters can cause a TMM crash

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF9

Opened: Dec 05, 2013

Severity: 2-Critical

Related Article: K15198


A TMM crash occurs when stream->ingress_frames is NULL in spdy_stream_process_ingress_body()


Traffic disrupted while tmm restarts.


Recursion back into SPDY inside spdy_stream_process_acquired() can cause the state of the ingress frames list to not be what is expected.


Try using less filters on the listener using SPDY. The lower the number of filters, the less likely this crash will occur.

Fix Information

When recursion occurs in SPDY frame ingress, it now correctly handles the case where the ingress was completed by the higher call into SPDY.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips