IZ68810: CRASH WHILE PROCESSING APPC DATA WITH INCORRECT LENGTH

Communications Server for AIX, Version 6.3 -- Latest PTFs

APAR status

• Closed as program error.

Error description

• Crash in sna V5router64 after receiving APPC data with an
  incorrect length in the GDSID.
  

Local fix

• contact Level/2 support for efix availability.
  

Problem summary

• USERS AFFECTED: All.
  
  PROBLEM DESCRIPTION:
  A crash occurred in npb_protocol_error after receiving APPC data
  with an incorrect length in the GDSID variable.
  *
  CRASH INFORMATION:
  
  CPU 0 CSA F000000030017780 at time of crash, error code for
  LEDs:
  70000000
  pvthread+01ED00 STACK:
  [047EE9B0]sna_v5router64:npb_protocol_error+000164
  (F10001003635D018,
  1001000010010000,
     F10001003DA16688)
  [047F2A54]sna_v5router64:npb_check_rcv_ll+0003E8
  (F10001003635D018,
  F10001003E8E2820,
     F10001003DA16688)
  [047F15D4]sna_v5router64:npb_process_data_proc+000194
  (F10001003635D018,
  F10001003E8E2820,
     F10001003DA16688)
  [047F1E2C]sna_v5router64:npb_perform_receive_processing+000090
  (F10001003635D018, F10001003DA16688)
  [047FA280]sna_v5router64:npb_receive_and_wait_proc+0003EC
  (F100020001E92D70, F10001003635D018,
     F10001003DA16688)
  [047EE0B8]sna_v5router64:npb_ps_conv+0001BC (F100020001E92D70,
  F10001003635D018,
     F10001003DA16688)
  [047F7CAC]sna_v5router64:npm_receive_info_proc+000180
  (F100020001E92D70,
  F10001003635D018,
     F10001003DA16688)
  [047F87C0]sna_v5router64:npm_mc_receive_proc+0000CC
  (F100020001E92D70,
  F10001003635D018,
     F10001003DA16688)
  [047FE568]sna_v5router64:npm_ps_mc+000154 (F100020001E92D70,
  F10001003635D018,
     F10001003DA16688)
  [047DEED8]sna_v5router64:nps_dispatch_conv_verb+0000DC
  (F10001003635D038, F10001003635D018,
     F10001003DA16688)
  [047DF040]sna_v5router64:nps_continue_conv_queue+000088
  (F10001003635D018, F10001003635D038,
     0100000000000001, F10001003DA16688)
  [047DF35C]sna_v5router64:nps_continue_conv_verb+000088
  (F10001003635D018, F10001003DA16688)
  [047E00B8]sna_v5router64:nps_conv_verb+000468 (F100020001E92D70,
  0000000100000001,
     F100020001E92D00, F10001003DA16688)
  [047E04F4]sna_v5router64:nps_verb_router+0002D0
  (F100020001E92D00,
  F10001003DA16688)
  [04800CD4]sna_v5router64:nps_router+000070 (F100020001E92D00,
  0008000000000008,
     F10001003DA16688)
  [04775E70]sna_v5router64:nba_dispatch_input+000290
  (F10001003F426478,
  F10001003DA16688)
  [0477655C]sna_v5router64:nba_dispatch_process+0000C8
  (F10001003F426478,
  F10001003DA16688)
  [04776D68]sna_v5router64:nba_scheduler+000210 ()
  [04768628]sna_v5router64:vpr_stream_uw_drive_scheduler+000028 ()
  [04769268]sna_v5router64:vpr_stream_uw_put+00009C
  (F1000200017D9120,
  F100020001EAD600)
  *
  PROBLEM SUMMARY:
  Remote APPC application sent bad data with 0000 for the GDS
  length, the minimum is 4. The remote system also deactivated the
  session (UNBIND type normal). When the local application issued
  a RECEIVE_AND_WAIT the crash occurred when CS/AIX tried to
  handle the two errors together.
  

Problem conclusion

• Code has been corrected to properly handle the incorrect GDS
  variable length.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  JR36026 IZ81509 LI75634 LI75638 LI75639 JR37431 LI76306 LI76307
  LI76309

Fix information

• Fixed component name

  CS AIX V6.X

• Fixed component ID

  5765E5100

Applicable component levels

• R630 PSY

     UP

• R631 PSY U833873

     UP10/05/19 I 1000

• R640 PSY

     UP