PI90834: ABEND0C4 IN APR_PSTRCAT USING SAF-CHANGE-PW HANDLER

8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• When using SetHandler saf-change-pw and AuthSAFExpiredForm, an
  abend0c4 may happen in apr_pstrcat when accessing a page and
  the password is expired.
  
  error log shows:
  (apr_pstrcat+0x???)[0x2b9b9f58][dsa: 0x5162efe5c0]
  (saf_check_pw+0x534)[0x2ba5ea58][dsa: 0x5162efe700]
  (saf_authenticate_user+0x194)[0x2ba5d8a8][dsa: 0x5162efe840]
  (authenticate_basic_user+0x194)[0x2b9f7690][dsa: 0x5162efe9c0]
  (ihs_run_check_user_id+0x1b4)[0x2b9030c8][dsa: 0x5162efeac0]
  (ap_process_request_internal+0x480)[0x2b92e268][dsa:
  0x5162efec80]
  (ap_process_request+0x60)[0x2b937d80][dsa: 0x5162efed80]
  (ap_process_http_async_connection+0x98)[0x2b931ed0][dsa:
  0x5162efee80]
  (ap_run_process_connection+0x48)[0x2b909228][dsa: 0x5162efef80]
  (process_socket+0x20c)[0x2b9444b0][dsa: 0x5162eff080]
  (worker_thread+0x1e0)[0x2b9431c8][dsa: 0x5162eff180]
  
  CEE3204S The system detected a protection exception (System
  Completion Code=0C4).
  CEE5203S The signal SIGSEGV was received.
           From entry point apr_pstrcat at compile unit offset
  +000000002B9B9FEE at entry offset +0000000000000096 at address
  000000002B9B9FEE.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM HTTP Server (powered by        *
  *                  Apache)                                     *
  *                  mod_authnz_saf (z/OS only)                  *
  ****************************************************************
  * PROBLEM DESCRIPTION: Accessing a SAF protected page with an  *
  *                      expired password when using             *
  *                      AuthSAFExpiredForm may result in an     *
  *                      ABEND0C4 in apr_pstrcat.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Accessing a SAF protected page with an expired password when
  using
  AuthSAFExpiredForm may result in an ABEND0C4 in apr_pstrcat. The
  error is due to improperly calling apr_pstrcat.
  

Problem conclusion

• IBM HTTP Server's mod_authnz_saf module was updated to properly
  call apr_pstrcat.
  
  This fix is targeted for IBM HTTP Server fix packs:
   - 8.0.0.15
   - 8.5.5.13
   - 9.0.0.6
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS IHS ZOS

• Fixed component ID

  5655I3510

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP

• R90P PSY

     UP