Bug ID 497342: TMM crash while executing FLOW_INIT event (with multiple commands that abort the connection) in an iRule attached to an AFM firewall rule.

Last Modified: Jul 13, 2024

Affected Product(s):
BIG-IP None(all modules)

Known Affected Versions:
11.4.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3

Fixed In:
12.0.0, 11.6.0 HF4, 11.5.2 HF1

Opened: Dec 18, 2014

Severity: 2-Critical

Symptoms

Critical system failure due to TMM process restarting.

Impact

Traffic disrupted while tmm restarts.

Conditions

Following conditions will trigger the TMM crash: i) AFM rule match triggers an iRule execution. ii) iRule has one (or more) FLOW_INIT event with 2 (or more) commands that result in aborting the connection (e.g. 'drop' followed by 'reject')

Workaround

None

Fix Information

The aforementioned TMM crash has been fixed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips