PI45560: AGENTS THROW BSOD (BUGCHECK 0XF4) DUE TO SHELL STEPS KILLING PHANTOM PARENT PROCESS PID (CSRSS.EXE)

IBM AnthillPro Fix Pack 2 (5.0.1.2) for 5.0.1
IBM AnthillPro Fix Pack 1 (5.0.1.1) for 5.0.1

APAR status

• Closed as program error.

Error description

• Steps to reproduce:
  
  1. A Windows process with PID 100 creates csrss.exe
  2. The process with PID 100 dies, however csrss.exe retains
  the 100 PID as its parent process
  3. AHP start runs a step on the agent.  The step creates a
  process. Windows assigns the process PID 100 since it can reuse
  PIDs
  4. The process AHP created finishes its work and terminates
  5. AHP detects that the process terminated
  6. During a cleanup or reset, AHP kills the csrss.exe process
  created in step 1 because
  csrss.exe was created by a process with ID 100, even though it
  was a different process
  8. This causes a crash since crss.exe is a
  system process which cannot be terminated
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * During a cleanup or reset, AHP kills the csrss.exe process   *
  * created in step 1 because                                    *
  * csrss.exe was created by a process with ID 100, even though  *
  * it                                                           *
  * was a different process                                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in IBM AnthillPro 5.0.1.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ANTHILLPRO

• Fixed component ID

  5725M7400

Applicable component levels

• R370 PSN

     UP

• R370 PSY

     UP

• R380 PSN

     UP

• R380 PSY

     UP

• R500 PSN

     UP

• R500 PSY

     UP

• R501 PSN

     UP

• R501 PSY

     UP