Bug ID 758311: Policy Compilation may cause MCPD to crash

Last Modified: Mar 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3

Opened: Feb 10, 2019
Severity: 3-Major

Symptoms

If a policy has rules involving IPv6 addresses, and the addresses differ only on 32-bit boundaries, then the compilation of that policy may cause MPCD to crash.

Impact

MCPD will core, and then restart. The policy will not be usable.

Conditions

A Policy is attached to a virtual. That policy contains conditions that involve IPv6 addresses. The addresses in different rules differ on on 32-bit boundaries.

Workaround

It may be possible to create multiple rules from a given rule by altering the netmask. Another possibility is to add a dummy rule with no action that will match IP addresses differently.

Fix Information

None

Behavior Change