Optimizing the CVE-2015-1635 iRule
A couple days ago an iRule was published that mitigates Microsoft’s HTTP.sys vulnerability described in CVE-2015-1635 and MS15-034. It’s a short rule, but it features the dreaded regex. Every time I ...
Published Apr 17, 2015
Version 1.0JRahm
Admin
Joined January 20, 2005
JRahm
Admin
Joined January 20, 2005
Apr 17, 2015
"string match" is an under-used gem of a command. I did some minor testing and that single string match is faster than doing a while loop from 0 to the length of the string (without anything in the loop body). I thought I could be cute and just iterate through the characters in the string but that's almost 3x slower just for the iteration than the string match. I think you'd be hard pressed to get a faster solution in straight TCL without writing a proc in native code.