PH40025: DATA STREAM SYNTAX ERROR DETECTED. REASON: 0X1. ERRORCODE=-4499,SQLSTATE=58009 FROM JDBC DRIVER

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• JDBC driver detected a Data Stream Syntax Error - Reason: 0x1.
  ERRORCODE=-4499, SQLSTATE=58009 - due to an invalid reply from
  Db2 for z/OS Server.
  .
  The problem occurs when:
  - Using securityMechanism PASSWORD_AND_DATA_SECURITY.
  - At least two reply message/objects are bigger than 32k e.g.:
  - A query with hundreds of columns in select list (with
      enableExtendedDescribe=YES) and thousands of rows returned.
  - A query with thousands of parameter markers and thousands of
      rows returned.
  .
  Additional keywords and symptoms:
  *********************************
  DB2DDF SQLCODE4499 SYNTAXRM
  

Local fix

• Use network security (such as SSL) instead of DRDA encryption
  or
  Use enableExtendedDescribe=2
  or
  Use deferPrepares=false
  or
  Reduce the number of columns in SELECT list (or the number of
  parameter markers used in the statement)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Distributed Data Facility (DDF) users                    *
  * of authentication mechanisms that include                    *
  * encrypted security-sensitive data.                           *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * A Data Stream Syntax Error (Reason:                          *
  * 0x1. ERRORCODE=-4499, SQLSTATE=58009)                        *
  * was detected by IBM Data Server                              *
  * Driver for JDBC and SQLJ (JCC Driver)                        *
  * when receiving reply from Db2 for                            *
  * z/OS server.                                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply corrective PTF when available                          *
  ****************************************************************
  A remote client application accesses a Db2 for z/OS server
  using authentication mechanism that includes encrypted
  security-sensitive data (DRDA encryption including data).
  The server reply for a query contained invalid length
  resulting in the syntax error being issued by the IBM Data
  Server Driver for JDBC and SQLJ (JCC Driver).
  The problem occured when the reply buffer was already extended
  once and the server set the object length incorrectly on the
  subsequent extension.
  

Problem conclusion

• Db2 has been changed to correctly set the reply length of
  encrypted data.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI77363

Modules/Macros

• DSNLCDG2
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RC10 PSY UI77363

     UP21/10/06 P F110

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.