IV73549: "INTEGRITY CHECK FAILED" WHILE UNWRAPPING TOKEN IN JGSS

APAR status

• Closed as program error.

Error description

• Error Message, as reported by customer:
  "integrity check failed" error will happen while unwrapping
  token in JGSS if the token buffer contains extra data apart
  from the actual token data.
  
  Stack Trace, if applicable:
  N/A
  
  Other Error Information, as reported by customer:
  N/A
  

Local fix

• N/A
  

Problem summary

• "integrity check failed" will happen while unwrapping token in
  JGSS if the token buffer contains extra data apart from the
  actual token data. JGSS will treat the whole token buffer as the
   token to be unwrapped which is incorrect if the token buffer
  length is larger than the actual token data length or offset is
  not zero.
  

Problem conclusion

• The fix now takes the offset and input length into consideration
   when retrieving the actual token from the token buffer.
  The associated RTC PR is 93945
  The associated Austin CMVC defect is 116712
  The associated Hursley CMVC defect is 202797
  The associated APAR is IV73549
  JVMs affected : Java 5.0, Java 6.0, Java 6.1, Java 7.0, Java 7.1
  and Java 8.0
  The fix was delivered for Java 5.0 SR16 FP13, Java 6.0 SR16 FP7,
  Java 6.1 SR8 FP7, Java 7.0 SR9 FP10, Java 7.1 SR3 FP10, Java 8.0
  SR1 FP10
  The affected jar is "ibmjgssprovider.jar".
  The build level of this jar for the affected releases is
  "20150611"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA GSS-AP

• Fixed component ID

  TIVSECJGS

Applicable component levels

• R100 PSY

     UP