PH39660: IHS ABEND0C4 IN SIGACTION()

PH43122: Vulnerability in IBM HTTP Server used by IBM WebSphere Application Server (CVE-2022-23852 CVSS 9.8 and more)
PH44271: Vulnerability in IBM HTTP Server used by IBM WebSphere Application Server due to Expat (CVE-2022-25315 CVSS 7.8 and more)

APAR status

• Closed as program error.

Error description

• traceback from a dump of the abend shows:
  
  sigaction           +0000015A    Exception
  
  childmgr_pre_mpm    +000000F4
  
  
  ap_run_pre_mpm      +0000004A
  
  event_run           +00000060
  
  ap_run_mpm          +00000048
  
  main                +00001072
  
  
  may see this in the error log:
  CEE3204S The system detected a protection exception (System
  Completion Code=0C4).
  From entry point childmgr_pre_mpm at compile unit offset
  +000000F4 at entry offset +000000F4
  
  CEE5203S The signal SIGSEGV was received.
  
  AH00052: child pid 263250 exit signal Segmentation fault (11)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server                *
  ****************************************************************
  * PROBLEM DESCRIPTION: IHS may crash at startup in the         *
  *                      sigaction() system call                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  IHS may crash at startup in the sigaction() system call.
  This is a result of all elements of the "struct sigaction"
  object
  not being initialized / zeroed out. Crashes were observed only
  on
  z/OS.
  

Problem conclusion

• Updated code to zero out all elements of "struct sigaction"
  before setting fields we care about
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix packs 8.5.5.21 and 9.0.5.10. For more information, se
  'Recommended Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS IHS ZOS

• Fixed component ID

  5655I3510

Applicable component levels

• R850 PSY

     UP