IBM Support

PI19917: IKED ABEND0C4 IN GSK_DEF_FREE

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • IKE reports an abend0c4 in routine gsk_def_free
    
    Additional Symptom(s) Search Keyword(s): IKED abend0c4
    
    verification steps:
    
    ip verbx ledata 'ceedump nthreads(*)' from the IKED dump shows
    the following traceback:
    
    Traceback:
    
      DSA      Entry       E  Offset  Statement   Load Mod
       Program Unit
      1      EZBTDUMP    +00000276   EZAIKED              EZBTDUMP
      2     CommonUserHandler     +000004E2               EZAIKED
      3    +0000005A              CEEPLPKA
      4    +000025C6              CEEPLPKA
      5        gsk_def_free-14DFCCA2              GSKCMS31
      6        gsk_free_name  +000000C0              GSKC31
      7        gsk_free_name  +0000007C              GSKCMS31
      8        cert_cache::find_matching_cert(const _kid&,const
                char*,const         +0000043A              EZAIKED
      9        CertMgr::find_matching_cert(const _kid&,const
               char*,const ch      +0000019E              EZAIKED
    10       Cert390::Cert390(const _kid&,const char*,const
              char*,const _       +00000418              EZAIKED
    11       CertFactory390::GetCertByID(const _kid&,const
               char*,const ch     +00000102              EZAIKED
    12       inet_OAKLEY_pksig::getMyKeyPairByAlg(const char*)
                                         +00000478          EZAIKED
    13       inet_OAKLEY_rsa_sig::getMyKeyPair()
                               +000000AE              EZAIKED
    14   inet_OAKLEY_base::I_generate_hash(isakmp_buf**,unsigned
          int)                +00000556              EZAIKED
    15  inet_OAKLEY_base::process_msg_with_resume
         (isakmp_buf*,isakmp   +000026F0              EZAIKED
    16 inet_OAKLEY_base::process_msg(isakmp_buf*,isakmp_buf**,int&)
                                +000000BA              EZAIKED
    17     isakmp_sa::process_phase1_msg(isakmp_buf*,unsigned int)
    18       isakmp_sa::process_msg(IKEBuffer*,deleteBag&)
                              +0000169A              EZAIKED
    19
    isakmp_anchor::msg_handler(IKEBuffer*,sa_addr&,sa_addr&,stac
                             +00000B10              EZAIKED
    20       isakmp_anchor::deliver_network_events()
                              +00000D44              EZAIKED
    21       isakmp_anchor::deliver_events(anchor_event&)
                              +00000D00              EZAIKED
    22       main_mainline()
                             +00000C38              EZAIKED
    23       main        +00000112              EZAIKED
    24                   +14C67CD0              CEEEV003
    25                   +000001B8              CEEPLPKA
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All users of the IBM Communications Server                   *
    * for z/OS Version 1 Release(s)  210 IP:                       *
    * IPSecurity                                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Abend 0c4 in IKED in gsk_del_free                            *
    * function.                                                    *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * None                                                         *
    ****************************************************************
    The abend occurred when IKED attempted to free a certificate
    that was not initially obtained.
    +-------------------------------------------------------------+
    + Please check our Communications Server for OS/390 homepages +
    + for common networking tips and fixes.  The URL for these    +
    + homepages can be found in Informational APAR II11334.       +
    +-------------------------------------------------------------+
    

Problem conclusion

  • IKED is changed to ensure that the certificate was decoded
    before calling SSL to free it.
    
    * Cross Reference between External and Internal Names
    EZAIKCCA (CERTCACH)  EZAIKCCA (CERTCACH)
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI19917

  • Reported component name

    TCP/IP V3 MVS

  • Reported component ID

    5655HAL00

  • Reported release

    210

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-06-12

  • Closed date

    2014-08-05

  • Last modified date

    2014-11-04

  • APAR is sysrouted FROM one or more of the following:

    PI16554

  • APAR is sysrouted TO one or more of the following:

    UI20270

Modules/Macros

  • EZAIKCCA
    

Fix information

  • Fixed component name

    TCP/IP V3 MVS

  • Fixed component ID

    5655HAL00

Applicable component levels

  • R210 PSY UI20270

       UP14/10/24 P F410

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"210","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSCY4DZ","label":"DO NOT USE"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"210","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 November 2014