IT06428: HSM FOR WINDOWS RECALL FUNCTION MAY CAUSE WINDOWS CRASH IF USER IS MEMBER OF MANY WINDOWS GROUPS

IBM Tivoli Storage Manager Client 6.4.3 Downloads and READMEs

APAR status

• Closed as program error.

Error description

• Tivoli Storage Manager HSM for Windows Client may cause a
  Windows crash or the hsmservice to hang in the following
  situation: A user who is member of more than about 200 Windows
  groups, recalls a migrated file. The root cause is the message
  buffer utilized for the communication between the HSM driver,
  ithsmdrv.sys, and the recall service, hsmservice.exe. It is too
  small, if very many group security identifiers (SID's) are
  passed from the driver to the service.
  One of 2 effects may occur:
  
  (1) If the buffer has been completely filled up with data, the
  recall service size validation may fail. The buffer cannot be
  read and cancellation of the recall order fails, as the message
  id is unknown. The recalling application is hung until
  hsmservice is restarted.
  (2) Memory bounds of the driver buffer may get overwritten.
  This may cause another arbitrary Windows system driver to crash
  the Windows system with a blue screen (BSOD).
  
  This APAR is an incomplete fix of APAR IC97770.
  
  Affected Products: 7.1.1.0, 6.4.2.0, 6.3.2.0
  
  Customer/L2 diagnostics (if applicable): Diagnostics of the
  problem is difficult, as the HSM filter driver, ithsmdrv.sys, is
  not listed on the stack of Windows core dumps (case 2).
  
  In case (1), the hsmservice log, hsmservice.log, shows e.g.
  
  HSMSERVICE (089C:0BA0) ICRecallDriver::mf_waitForRequest
  15-01-07 15:30:42.273
   T: Received request:
      Microsoft message-id=3, reply buffer size=8208 bytes
  HSMSERVICE (089C:0BA0) ICRecallDriver::mf_parseRecallRequ
  15-01-07 15:30:42.273
   E: Buffer has 8208 bytes but expected at least 8702 bytes
  HSMSERVICE (089C:0BA0) ICRecallTask::mf_implExecuteRecall
  15-01-07 15:30:42.273
   E: Failure waiting for driver file recall request:
      0x03000018 (E: Driver failure)
  HSMSERVICE (089C:0BA0) ICRecallDriver::mf_implReplyRecall
  15-01-07 15:30:42.273
   E: Required buffer size 137 exceeds reply buffer size 0
      Handle='recall context no=0x00000000
  (creation-time=1601-01-01 00:00:00)'
      Cancelling request ...
  HSMSERVICE (089C:0BA0) ICRecallDriver::mf_cancelRecallReq
  15-01-07 15:30:42.273
   E: Failure sending deny/cancel reply:
      0x03000007 (E: Buffer too small)
  

Local fix

• Increase buffer sizes by editing the registry keys below. The
  service buffer size needs to be larger than the driver buffer
  size. Reboot the computer.
  .
  (a) Driver buffer size : HKLM\SYSTEM\CurrentControlSet\Services\
  ithsmdrv\Parameters\MessageBufferSize     65536
  .
  (b) Service buffer size : HKLM\Software\IBM\ADSM\CurrentVersion\
  HsmClient\hsmservice\DriverBufferSize     131072
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Tivoli Storage Manager HSM for Windows       *
  *                 client versions                              *
  *                 6.3.2.0, 6.4.1.0 - 6.4.2.0                   *
  *                 7.1.0.0 - 7.1.1.0                            *
  ****************************************************************
  * PROBLEM DESCRIPTION: See ERROR DESCRIPTION                   *
  ****************************************************************
  * RECOMMENDATION: Apply fixing level when available. This      *
  *                 problem is currently projected to be fixed   *
  *                 in level 7.1.2.
  *                 Note that this is subject to change at the   *
  *                 discretion of IBM.                           *
  ****************************************************************
  

Problem conclusion

• The problem has been fixed.
  

Temporary fix

• see local fix.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM HSM FOR WIN

• Fixed component ID

  5698ICNCL

Applicable component levels

• R630 PSY

     UP

• R640 PSY

     UP

• R711 PSY

     UP