IC90316: WEB APPLICATION FIREWALL SERVICE WITH SQL INJECTION FILTERING ENABLED MIGHT CAUSE AN APPLIANCE RESTART

APAR status

• Closed as program error.

Error description

• Web Application Firewall (WAF) transactions fail to
  release little bits of memory if an SQL Injection Filter is
  used, eventually resulting in an Out Of Memory restart
  due to memory fragmentation.
  

Local fix

Problem summary

• Affected are customers using DataPower Web Application Firewall
  (WAF) service with SQL injection filter enabled.
  
  After processing a large number of transactions, the appliance
  restarts or manifests error behavior typical for low memory,
  though it does not show signs of going out of memory.
  
  A small amount of memory is not released with each transaction.
  

Problem conclusion

• The fix is available in 4.0.1.17, 4.0.2.13 and 5.0.0.8.
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R401 PSN

     UP

• R402 PSN

     UP

• R500 PSN

     UP