Bug ID 442130: ICAP server macro expansion can fail or crash under certain conditions

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM, PEM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.1, 11.5.0

Opened: Jan 03, 2014

Severity: 2-Critical

Symptoms

When an ICAP profile specifies headers with both ${SERVER_IP} and ${SERVER_PORT} macros, under certain conditions expansion of ${SERVER_PORT} can fail and in some cases crash the TMM.

Impact

Potential incorrect expansion of the ${SERVER_PORT} macro, and in the worse case a TMM crash. Traffic disrupted while tmm restarts.

Conditions

Traffic passes through an internal virtual server with an ICAP profile that uses both ${SERVER_IP} and ${SERVER_PORT} macros in its ICAP headers, where replacemement of the ${SERVER_IP} macros changes the length of the header.

Workaround

Adjust headers to avoid the conditions described if possible.

Fix Information

ICAP profiles can now freely use ${SERVER_IP} and ${SERVER_PORT} macros.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips