Last Modified: Jul 23, 2021
See more info
Known Affected Versions:
16.0.0, 220.127.116.11, 16.0.1, 18.104.22.168, 22.214.171.124
Opened: May 26, 2020
The chunk-size profile setting of the stream filter limits memory by capping the match string allocated from an ingress buffer to <chunksize> bytes. This implicitly limits the maximum size of the match, potentially resulting in missed matches beyond chunk-size within the same ingress buffer. For more information, see: https://support.f5.com/csp/article/K39394712
Potential matches beyond the configured chunk-size will be sent unmodified by the stream filter, potentially resulting in missed matches.
A stream filter is configured with the chunk-size parameter set and ingress data arrives which contains matches beyond the configured chunk-size in the buffer.
The stream filter can now successfully find and replace matches beyond chunk-size within a single ingress buffer.