PM40771: DFHXS0002 CODE X'0710' IN DFHXSRC FOLLOWED BY DFHWB0002 CODE X'0509' IN DFHWBSR

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You have a web application which tries to access an HFS
  directory. CICS checks to see if that directory exists and finds
  that it does not. USS returns ENOTDIR response (x'87'). The
  following exception trace entries are written:
  .
  XS FE04 XSSH  *EXC* FUNCTION(CHECK_HFS_FILE) RESPONSE(EXCEPTION)
                 REASON(UNKNOWN_USS_RESPONSE) USS_VALUE(FFFFFFFF)
                 USS_RESPONSE(87) USS_REASON(594003C)
  .
  XS 0710 XSRC  *EXC* XSSH-FAILURE FUNCTION(CHECK_HFS_FILE)
               RESPONSE(DISASTER) REASON() SAF_RESPONSE(FFFFFFFF)
               SAF_REASON(0) ESM_RESPONSE(87) ESM_REASON(594003C)
  .
  The following messages show up in the CICS job log"
  .
  DFHXS0002  A severe error (code X'0710') has occurred in module
             DFHXSRC.
  DFHWB0002  A severe error (code X'0509') has occurred in module
             DFHWBSR.
  .
  This is the same situation addressed by APAR PK99454, but with
  security active in the region. With security active, DFHXSRC
  gets called to check the access before DFHDHFS has even verified
  that the supplied path and filename are valid. This leads to XS
  domain getting the ENOTDIR response and not being able to handle
  it.
  .
  Additional Information/Keywords
  KIXREVEPH
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: An HTTP request for a directory that    *
  *                      does not exist results in a severe      *
  *                      error x'0710' in DFHXSRC.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When an HTTP request is made which maps to an HFS directory
  which does not exist, and security is enabled, DFHDHFS calls
  DFHXSRC to perform a security check prior to checking the
  directory.
  DFHXSRC calls DFHXSSH to perform the security check using the
  BPX1ACC service. This fails with a return code of ENOTDIR. As
  DFHXSSH does not specifically handle ENOTDIR, it returns
  xssh_unknown_uss_response, which causes a severe error x'0710'
  in DFHXSRC.
  Keywords: XS0002, msgDFHXS0002
  

Problem conclusion

• DFHXSSH was changed to handle the return code ENOTDIR from
  BPX1ACC and return an exception response with reason
  xssh_invalid_filename. This causes DFHXSRC to return exception
  with reason xsrc_invalid_resource_name and no severe error
  occurs. This will in turn cause an HTTP 404 Not Found response
  to be returned to the client and message DFHWB0759 to be issued.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM41599 UK69309

Modules/Macros

•    DESXSSH  DFHXSSH
  

Fix information

• Fixed component name

  CICSTS V3 Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R500 PSY UK69309

     UP11/07/07 P F107

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.