Bug ID 758311: Policy Compilation may cause MCPD to crash

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4

Opened: Feb 10, 2019
Severity: 3-Major

Symptoms

If a policy has rules involving IPv6 addresses, and the addresses differ only on 32-bit boundaries, then the compilation of that policy may cause MPCD to crash.

Impact

MCPD cores, and then restarts. The policy is not usable.

Conditions

-- A policy is attached to a virtual server. -- That policy contains conditions that involve IPv6 addresses. -- The addresses in different rules differ only on 32-bit boundaries.

Workaround

You can try either of the following: -- It may be possible to create multiple rules from a given rule by altering the netmask. -- Another possibility is to add a placeholder rule with no action that matches IP addresses differently.

Fix Information

None

Behavior Change