Bug ID 462943: TMM could crash when sending CSS files through a virtual with LTM URI Translation profile

Last Modified: Oct 06, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP APM, LTM(all modules)

Known Affected Versions:
11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5

Fixed In:
11.6.0, 11.5.1 HF6, 11.4.1 HF9

Opened: May 19, 2014
Severity: 3-Major
Related AskF5 Article:
K16768

Symptoms

TMM could crash when sending CSS files through a virtual with LTM URI Translation profile. This happens if CSS parser does not have enough input data to finish processing of current chunk and remains in a certain unfinished state. CSS will try to parse remaining data again starting from that incorrect state and will crash after that.

Impact

Traffic disrupted while tmm restarts.

Conditions

Specific data at the end of current chunk of backend response.

Workaround

This issue has no workaround at this time.

Fix Information

Resolved issue where rewrite CSS filter/parser may use stale iovs in declaration_state resulting in SIGSEGV.

Behavior Change