PH64128: IBMJCECCA JNI FUNCTION NOT CHECKING FOR NULL BEFORE CALLING GETARRAYELEMENTS

APAR status

• Closed as program error.

Error description

• Error Message: GPF is received and a core dump taken.
  .
  Stack Trace:
  {libj9vm29.so}{getArrayElementsImpl(JNIEnv_*,_jarray*,unsigned
  char*,unsigned char)} {libj9vm29.so}{getArrayElements}
  {libHIKM.so}{Java_com_ibm_crypto_hdwrCCA_provider_HIKM_CSNBENCJ}
  {com/ibm/crypto/hdwrCCA/provider/HIKM.CSNBENCJ} JIT
  {com/ibm/crypto/hdwrCCA/provider/JCEHdwrUtils.a} INT
  {com/ibm/crypto/hdwrCCA/provider/DESedeCipher.a} JIT
  {com/ibm/crypto/hdwrCCA/provider/DESedeCipher.engineDoFinal} JIT
  {javax/crypto/Cipher.doFinal} JIT ...
  .
  

Local fix

Problem summary

• JNI routine was not checking for NULL before calling
  getArrayElements.
  

Problem conclusion

• Added check for NULL.
  The user may now see this exception and stack trace:
  ... Caused by: java.lang.RuntimeException: Hardware error from
  call CSNBENC java.lang.IllegalArgumentException: System Error:
  Fatal error in native interface.
   at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.JCEHdwrUtils.
  
  encrypt(JCEHdwrUtils.java:1210)  at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.fin
  
  alNoPadding(DESCipher.java:2491)  at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.eng
  
  ineDoFinal(DESCipher.java:2325)  at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.eng
  
  ineDoFinal(DESCipher.java:2063)  at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DCNP.engineDo
  
  Final(DCNP.java:341)  at
  java.base/javax.crypto.Cipher.doFinal(Cipher.java:2205) If
  this exception is seen, contact service.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
    17              17.0.13.0
    11              11.0.25.0
  IBM SDK, Java Technology Edition
    8    SR8 FP35   (8.0.8.35)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
   - Java SDK Products on z/OS
     https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels