Bug ID 439862: In rare situations SPDY combined with other filters can cause a TMM crash

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF9

Opened: Dec 05, 2013
Severity: 2-Critical
Related AskF5 Article:
K15198

Symptoms

A TMM crash occurs when stream->ingress_frames is NULL in spdy_stream_process_ingress_body()

Impact

Traffic disrupted while tmm restarts.

Conditions

Recursion back into SPDY inside spdy_stream_process_acquired() can cause the state of the ingress frames list to not be what is expected.

Workaround

Try using less filters on the listener using SPDY. The lower the number of filters, the less likely this crash will occur.

Fix Information

When recursion occurs in SPDY frame ingress, it now correctly handles the case where the ingress was completed by the higher call into SPDY.

Behavior Change