IZ96853: ARRAYINDEXOUTOFBOUNDSEXCEPTION DURING CLIENTHELLO

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: he exceptions will look as follows:
  java.util.ConcurrentModificationException
   at
  java.util.TreeMap$PrivateEntryIterator.nextEntry(TreeMap.java:10
  46)
   at java.util.TreeMap$KeyIterator.next(TreeMap.java:1073)
   at com.ibm.jsse2.s.a(s.java:63)
      <OSB>....<CSB>
  or
  java.lang.ArrayIndexOutOfBoundsException: Array index out of
  range:
   at com.ibm.jsse2.s.a(s.java:64)
      <OSB>....<CSB>
  .
  

Local fix

• -Dcom.ibm.jsse2.renegotiation.SCSV=false
  

Problem summary

• Concurrent access to client-side SSLEngine or SSLSocket objects
  during ClientHello packet sending can cause exception
  java.lang.ArrayIndexOutOfBoundsException or
  java.util.ConcurrentModificationException in SSL code.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR10
  5.0.0 SR12 FP5
  .
  Fixed in IBMJSSEProvider2.jar dated 20110301
  .
  To obtain the fix:
  Install build 20110317 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ96852

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP