PH53363: COMMAND KEYROTATE FAILS WITH ERROR "JAVA.LANG.STACKOVERFLOWERROR" WHEN WE RE-ENCRYPT DATA MANY TIMES.

APAR status

• Closed as program error.

Error description

• Running the command ./keyrotate results in the
  StackOverflowError on re-encrypting data many times.
  This results in infinite recursion where each layer of
  encryption is adding a layer of recursion as we decrypt.
  
  Errors in the logs:
  Rotating keys (dry run -- no rows updated)...
  java.util.concurrent.ExecutionException:
  java.lang.StackOverflowError
      at
  com.urbancode.ds.tools.utils.work.WorkController.rethrowExceptio
  ns(WorkController.java:162)
      at
  com.urbancode.ds.tools.utils.work.WorkController.awaitCompletion
  (WorkController.java:129)
      at
  com.urbancode.ds.tools.keyrotate.KeyRotateTool.rotateKeys(KeyRot
  ateTool.java:155)
      at
  com.urbancode.ds.tools.keyrotate.KeyRotateTool.run(KeyRotateTool
  .java:107)
      at
  com.urbancode.ds.tools.keyrotate.KeyRotateTool.main(KeyRotateToo
  l.java:37)
      at
  java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(
  Native Method)
      at
  java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(U
  nknown Source)
      at
  java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invo
  ke(Unknown Source)
      at java.base/java.lang.reflect.Method.invoke(Unknown Source)
      at
  com.urbancode.launcher.Launcher.invokeMainMethod(Launcher.java:2
  26)
      at com.urbancode.launcher.Launcher.launch(Launcher.java:162)
      at com.urbancode.launcher.Launcher.main(Launcher.java:96)
  Caused by: java.lang.StackOverflowError
      at
  java.base/java.util.regex.Pattern$BmpCharProperty.match(Unknown
  Source)
      at
  java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Unkno
  wn Source)
      at java.base/java.util.regex.Pattern$Slice.match(Unknown
  Source)
      at java.base/java.util.regex.Pattern$Branch.match(Unknown
  Source)
      at java.base/java.util.regex.Pattern$Start.match(Unknown
  Source)
      at java.base/java.util.regex.Matcher.search(Unknown Source)
      at java.base/java.util.regex.Matcher.find(Unknown Source)
      at
  com.urbancode.ds.tools.keyrotate.PatternReplacer.replace(Pattern
  Replacer.java:49)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.rotate(Se
  cureValueKeyRotater.java:122)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.transform
  CryptV1(SecureValueKeyRotater.java:199)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.transform
  (SecureValueKeyRotater.java:138)
      at
  com.urbancode.ds.tools.keyrotate.PatternReplacer.replace(Pattern
  Replacer.java:52)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.rotate(Se
  cureValueKeyRotater.java:122)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.transform
  CryptV1(SecureValueKeyRotater.java:199)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.transform
  (SecureValueKeyRotater.java:138)
      at
  com.urbancode.ds.tools.keyrotate.PatternReplacer.replace(Pattern
  Replacer.java:52)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.rotate(Se
  cureValueKeyRotater.java:122)
      at
  com.urbancode.ds.tools.keyrotate.SecureValueKeyRotater.transform
  CryptV1(SecureValueKeyRotater.java:199
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * UCD Server Web UI users                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Command keyrotate fails with error                           *
  * "java.lang.StackOverflowError" when we re-encrypt data many  *
  * times.                                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.3.1.0
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels