IT02530: CLIENT LOAD CAN FAIL DUE TO MEMORY OVERWRITE BECAUSE OF INCORRECT INPUT PARSING

DB2 Version 10.1 Fix Pack 6 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• A client side load will send the data and some conrol
  information across to the server using the DRDA communication
  protocol.
  In very rare circumstances, it is possible that a split DRDA
  message is wrongly interpreted by the DB2 server.
  This then leads to the load code wrongly interpreting a length
  which can trigger a large memory overwrite.
  
  As the overwrite can be large in size, the EDU detecting the
  problem is likely not the one causing the problem, so a stack
  will not directly point to this problem.
  The key factor leading to this problem is that a ( large )
  client side load was happening at the time of the problem.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * all                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade the DB2 Server to V10.1 Fix Pack 5 or higher.        *
  ****************************************************************
  

Problem conclusion

• This problem was first fixed in v10.1 Fix Pack 5
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IC97480

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels

• RA10 PSN

     UP