IZ70030: Potential heap corruption in Solaris SSM releases due to continu ed use of std::deque

IBM Tivoli 4.0.0-TIV-SSM-FP0010
IBM Tivoli 4.0.0-TIV-SSM-FP0011
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 12 README 4.0.0-TIV-SSM-FP0012
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 13 README 4.0.0-TIV-SSM-FP0013
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 14 README 4.0.0-TIV-SSM-FP0014
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.14-TIV-SSM-IF0001
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 2 README 4.0.0.14-TIV-SSM-IF0002
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 3 README 4.0.0.14-TIV-SSM-IF0003
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 4 README 4.0.0.14-TIV-SSM-IF0004
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 5 README 4.0.0.14-TIV-SSM-IF0005
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 6 README 4.0.0.14-TIV-SSM-IF0006
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 7 README 4.0.0.14-TIV-SSM-IF0007
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 8 README 4.0.0.14-TIV-SSM-IF0008
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.15-TIV-SSM-IF0001

APAR status

• Closed as program error.

Error description

• Recent unconfirmed heap corruption problems in the SSM on
  Solaris have led IBM to find that the fix for APAR IZ35471 is
  incomplete and still at risk of failure. This risk of heap
  corruption continues to exist so long as the std::deque template
  is used in SSM Solaris builds.
  
  std::deque can be observed to be present using the command: nm
  anything.so | grep deque
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of SSM 4.0 on Solaris
  ****************************************************************
  PROBLEM DESCRIPTION:
  Potential heap corruption due to continued use of std::deque.
  ****************************************************************
  RECOMMENDATION:
  Upgrade to Fix Pack 9 for SSM 4.0.
  ****************************************************************
  

Problem conclusion

• Removed all uses of std::deque in all code that is used in
  Solaris builds. This should avoid potential heap corruption
  problems that the Sun Studio 11 compiler has with std::deque.
  Modified: libmaster, libsnmp, librmonc and librmonc.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 4.0.0-TIV-SSM-FP0009
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NETCOOL SYS SVC

• Fixed component ID

  5724P4300

Applicable component levels

• R400 PSN

     UP