IV40469: NEW SECURITYRANDOM THROWS EXCEPTION IN MULTI-THREAD ENV

APAR status

• Closed as program error.

Error description

• Error Message: new SecurityRandom() method throws
  ArrayIndexOutOfBoundsException in multi-thread env
  .
  Stack Trace: Caused by:
  java.lang.ArrayIndexOutOfBoundsException: Array index out of
  range: 8
      at java.util.LinkedList.toArray(LinkedList.java:966)
      at
  org.apache.harmony.security.fortress.Services.getProviders(Servi
  ces.java
  :771)
      at
  org.apache.harmony.security.fortress.Services.getCreatedProvider
  s(Servic
  es.java:757)
      at java.security.Security.renumProviders(Security.java:438)
      at java.security.Security.access$300(Security.java:54)
      at
  java.security.Security$SecurityDoor.renumProviders(Security.java
  :447)
      at
  org.apache.harmony.security.fortress.Services$NormalServices.loa
  dAllProv
  iders(Services.java:240)
      at
  org.apache.harmony.security.fortress.Services$NormalServices.acc
  ess$500(
  Services.java:160)
      at
  org.apache.harmony.security.fortress.Services$NormalServices$2.r
  un(Servi
  ces.java:219)
      at
  org.apache.harmony.security.fortress.Services$NormalServices$2.r
  un(Servi
  ces.java:217)
      at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:228)
      at
  org.apache.harmony.security.fortress.Services$NormalServices.get
  Provider
  List(Services.java:217)
      at
  org.apache.harmony.security.fortress.Services$NormalServices.acc
  ess$1500
  (Services.java:160)
      at
  org.apache.harmony.security.fortress.Services.getProvidersList(S
  ervices.
  java:782)
      at
  java.security.SecureRandom.findService(SecureRandom.java:140)
      at java.security.SecureRandom.<init>(SecureRandom.java:106)
      at javax.crypto.b.<clinit>(Unknown Source)
      at java.lang.J9VMInternals.initializeImpl(Native Method)
      at
  java.lang.J9VMInternals.initialize(J9VMInternals.java:200)
      ... 14 more
  .
  N/A
  

Local fix

• N/A
  

Problem summary

• The problem is because provider list is modified by different
  threads in the same time.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR14
  6.0.1 SR6
  .
  Wrap a new list when adding new provider to prevent the
  multi-thread problem
  

Temporary fix

• N/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R600 PSY

     UP