OA68466: ABEND0C4 PIC10 AND PIC11 IN CSFNCGCM

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• We encounter ABEND0C4 PIC10 followed by a PIC11 during CSFNCGCM
  UJ96544 processing due to corrupted SMCB field.
  COMPON=CSF,COMPID=568505101,ISSUER=CSFMIREC,MODULE=CSFNCGCM+000
  027C8,ABEND=S00C4,REASON=00000010
  COMPON=CSF,COMPID=568505101,ISSUER=CSFMIREC,MODULE=CSFNCGCM+000
  01140,ABEND=S00C4,REASON=00000011
  
  Analysis
  Parts of the first and second cells of the smallest cell pool
  storage get corrupted. When we try to reference address
  that should've been the SMCB pointer from the second cell, we
  encounter the ABEND0C4 RSN10 and/or RSN11.
  
  Verification
  1. Confirm ABEND0C4 PIC10 occurs in CSFNCGCM+27C8 and/or PIC11
  occurs in CSFNCGCM+1140 at UJ96544
  2. Confirm that we try to use the SMCASMCB pointer of the
  smallest cell pool.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of CSFPSKD with the GCM rule and       *
  *                 cipher_text_length less than or equal to 240 *
  ****************************************************************
  * PROBLEM DESCRIPTION: When invoking PKCS #11 Secret           *
  *                      Key Decrypt (CSFPSKD and CSFPSKD6) with *
  *                      rule GCM and cipher_text_length less    *
  *                      than or equal to 240 bytes, callers may *
  *                      encounter ABEND0C4 PIC10 or PIC11 in    *
  *                      module CSFNCGCM due to improperly       *
  *                      initialized storage.                    *
  ****************************************************************
  Problem summary
  ----------------------------------------------------------------
  Improperly initialized storage may cause ABEND0C4 PIC10 or PIC11
  in module CSFNCGCM.
  

Problem conclusion

• ----------------------------------------------------------------
  The storage used in module CSFNCGCM is now properly initialized
  when PKCS #11 Secret Key Decrypt (CSFPSKD and CSFPSKD6) with
  rule GCM and cipher_text_length less than or equal to 240 bytes.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ98153 UJ98162 UJ98163

Modules/Macros

• CSFNCIQF
  

Fix information

• Fixed component name

  ICSF/MVS

• Fixed component ID

  568505101

Applicable component levels

• R7D2 PSY UJ98163

     UP25/10/02 P F510 ¢

• R7E0 PSY UJ98162

     UP25/10/02 P F510 ¢

• R7F0 PSY UJ98153

     UP25/10/02 P F510 ¢

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.