Bug ID 661881: Memory and performance issues when using certain ASN.1 decoding formats in iRules

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3.2, 11.6.4

Opened: Apr 27, 2017

Severity: 3-Major

Related Article: K00030614

Symptoms

Memory and performance issues when using calls to ASN1::decode with "a" or "B" characters in the format string. This occurs because these calls do not correctly free memory allocated by those functions.

Impact

Memory leak, degraded performance, potential eventual out-of-memory crash.

Conditions

iRules that contain calls to ASN1::decode with "a" or "B" characters in the format string.

Workaround

None. Note: Because of the memory leak associated with this issue, using calls to ASN1::decode with "a" or "B" characters in the format string should be avoided.

Fix Information

Prevented memory leak when using calls to ASN1::decode with "a" or "B" characters in the format string.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips