IBM Support

IV15686: IBMCMSPROVIDER THROWS JAVA.LANG.STACKOVERFLOWERROR

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • IBMCMSPROVIDER throws java.lang.StackOverflowError if CMS
    provider is before IBMJCE when application
    calls MessageDigest.getInstance("MD5");
    
    JDK Affected:   Java 6 SR10
    
    Jar Affected:   ibmcmsprovider.jar
    

Local fix

  • Put ibmcmsprovider at the end of the provider list (then the
    problem doesn't occur).
    

Problem summary

  • IBMCMSPROVIDER throws java.lang.StackOverflowError if CMS
    provider is
    before IBMJCE when application calls
    MessageDigest.getInstance("MD5");
    
    In Java 6 SR10, the following exception is displayed when
    executing the command below:
    
    ./ikeycmd -keydb -create -db <KEYDB_PATH>/key.kdb -pw xxxxxx
    -type cms -expire 60 -stash
    
    Exception:
    
            at
    java.security.MessageDigest.getInstance(MessageDigest.java:75)
            at
    com.ibm.security.cmskeystore.WrappedMD5.<init>(WrappedMD5.java:1
    5)
            at java.lang.J9VMInternals.newInstanceImpl(Native
    Method)
            at java.lang.Class.newInstance(Class.java:1345)
            at
    java.security.Provider$Service.newInstance(Provider.java:880)
            at
    org.apache.harmony.security.fortress.Engine.getInstance(Engine.j
    ava:1
    45)
            at
    java.security.MessageDigest.getInstance(MessageDigest.java:75)
            at
    com.ibm.security.cmskeystore.FileHeaderHashGeneratorFactory$File
    Heade
    rHashGeneratorV3Impl.generateHash(FileHeaderHashGeneratorFactory
    .java:80)
            at
    com.ibm.security.cmskeystore.CMSKeyStoreSpi.engineLoad(CMSKeySto
    reSpi
    .java:1229)
            at java.security.KeyStore.load(KeyStore.java:414)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreProxyCreatorFactory$FileKey
    Store
    Proxy.performLoad(KeyStoreProxyCreatorFactory.java:302)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreProxyCreatorFactory$CMSKeyS
    toreP
    roxy.performLoad(KeyStoreProxyCreatorFactory.java:422)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreProxyCreatorFactory$FileKey
    Store
    Proxy.load(KeyStoreProxyCreatorFactory.java:251)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreProxyCreatorFactory$Abstrac
    tKeyS
    toreProxy.getKeyStore(KeyStoreProxyCreatorFactory.java:193)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory.getCMSKeyStoreI
    tem(K
    eyStoreItemFactory.java:309)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory.newCMSKeyStoreI
    tem(K
    eyStoreItemFactory.java:281)
            at
    com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory.createKeyStore(
    KeySt
    oreItemFactory.java:112)
            at
    com.ibm.gsk.ikeyman.command.CommandFactory$CreateDbCommand.run(C
    omman
    dFactory.java:350)
            at
    com.ibm.gsk.ikeyman.command.Command.invoke(Command.java:201)
            at com.ibm.gsk.ikeyman.ikeycmd.main(ikeycmd.java:62)
    

Problem conclusion

  • JDK Affected:   Java 6 SR10
    
    Jar Affected:   ibmcmsprovider.jar
    
    Fixed in 6.0sr11, 6.26sr3 and 7.0sr3
    
    Hursley Defect 192007
    

Temporary fix

  • Put ibmcmsprovider at the end of the provider list (then the
    problem doesn't occur).
    

Comments

APAR Information

  • APAR number

    IV15686

  • Reported component name

    TIV SEC COMPONE

  • Reported component ID

    TIVOSEC00

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-02-15

  • Closed date

    2012-05-29

  • Last modified date

    2012-05-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TIV SEC COMPONE

  • Fixed component ID

    TIVOSEC00

Applicable component levels

  • R100 PSY

       UP

[{"Business Unit":{"code":"BU008","label":"Security"},"Product":{"code":"SSWKFH","label":"Tivoli Components - Java Security"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"100","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
29 May 2012