IV75168: DEADLOCK IN JSSE SSLSOCKETIMPL WHEN PERFORMING A SELF-INITIATED CLOSE

APAR status

• Closed as program error.

Error description

• Error Message: Some threads become parked indefinitely while
  performing a self-initiated close after receiving the
  SSLException "close_notify message cannot be sent". Each hang
  involves 2 threads, a ReentrantLock and synchronization on a
  SSLSocketImpl instance. One thread is always parked awaiting a
  ReentrantLock and the other thread is always blocked in a
  SSLSocketImpl.isClosed() call awaiting the SSLSocketImpl
  instance lock held by the parked thread.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The deadlock issue is caused by an unnecessary synchronized call
  in SSLSocketImpl
  

Problem conclusion

• The fix is to change the connectionState to volatile so that
  there is no need to call a synchronized method to get the
  connection state to resolve the deadlock.
  The associated RTC PR is 94824
  The associated Austin CMVC defect is 116768
  The associated Hursley CMVC defect is 202840
  The associated APAR is IV74341
  JVMs affected : Java 5.0, Java 6.0, Java 6.1, Java 7.0 and Java
  7.1
  The fix was delivered for Java 5.0 SR16 FP14, Java 6.0 SR16
  FP15, Java 6.1 SR8 FP15, Java 7.0 SR9 FP20 and Java 7.1 SR3 FP20
  The affected jar is "ibmjsseprovider2.jar".
  The build level of this jar for the affected releases is
  "20150709"
  .
  This APAR will be fixed in the following Java Releases:
     6    SR16 FP15 (6.0.16.15)
     5.0  SR16 FP14 (5.0.16.14)
     6 R1 SR8 FP15  (6.1.8.15)
     7 R1 SR3 FP20  (7.1.3.20)
     7    SR9 FP20  (7.0.9.20)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV75171 IV75170

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP