IJ10310: ADD NULL CHECKING ON THE ENCRYPTION TYPES LIST TO CREDENTIALS.GETDEFAULTNATIVECREDS() METHOD.

APAR status

• Closed as program error.

Error description

• Error Message: JVM crashed due to null
  object(InaccessibleReadAddress=00000000) from method
  Java_com_ibm_security_krb5_Credentials_acquireDefaultNativeCreds
  ().
  .
  Stack Trace: Native Stack:
  
  00 12f4f2a0 68451ac4 j9vm29!getArrayLength(struct JNIEnv_ * env
  =
  0x1b47f700, class _jarray * array = 0x00000000)+0x48
  <OSB>c:\temp\bld_371101\bld_win_x86\vm\jnimisc.cpp @ 367<CSB>
  
  01 00000000 00000000
  NativeCreds!Java_com_ibm_security_krb5_Credentials_acquireDefaul
  tNativeCreds+0xf4
  
  Note, the argument 2(_jarray * array = 0x00000000), it is passed
  as NULL to getArrayLength() method.
  .
  N/A
  

Local fix

• N/A
  

Problem summary

• If a weak envryption type is configured
  (-Dcom.ibm.security.krb5.enctypes=des-cbc-md5), and weak
  encryption types are disabled in the krb5.conf file
  (allow_weak_crypto=false), Config.defaultEtype() incorrectly
  returns a
  null eTypes list, which then gets passed into
  Credentials.acquireDefaultNativeCreds() causing the JVM crash.
  

Problem conclusion

• Updated Config.defaultEtype() to call EType.getBuiltInDefaults()
  instead of returning null eTypes list.
  The associated RTC PR is 139409
  The associated Austin CMVC defect is 117933
  The associated Austin APAR is IJ09766
  JVMs affected: Java 8
  The fix was delivered for: Java 8 SR5 FP25
  The affected jars: ibmjgssprovider.jar
  The build level of this jar for the affected releases is
  "20181008"
  .
  This APAR will be fixed in the following Java Releases:
     8    SR5 FP25  (8.0.5.25)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

• N/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels