PM78511: WITH SSL CERTIFICATES IN USE ABEND0C4 IN CSQXPOOL OCCURS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ABEND0C4 00000004 occurs in CSQXPOOL+003FA and message CSQX112E
  Dispatcher process error is generated to joblog. Level 3 review
  found a problem whereby a certificate with a length of 255 or
  256 bytes can result in the clearing of the two bytes that
  follow the end of the certificate. For the SSL certificate
  cellpool this means the top two bytes of the next cell pointer
  in the subsequent cell will be overlaid, thus corrupting the
  pointer to the free cells.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
  *                 Release 1 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Abend S0C4 may occur in CSQXPOOL as a   *
  *                      result of cell pool storage corruption  *
  *                      when using SSL certficates with         *
  *                      distinguished name attributes that are  *
  *                      precisely 255 or 256 bytes in length.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When copying the distinguished name attributes from an SSL
  certificate into storage, a check is performed to ensure the
  contents do not exceed the size of the cell pool storage
  allocated, but if a certificate's attributes are 255 or 256
  bytes in length then additional null bytes may by added by
  code that fails to check the current length of the output.
  
  This causes corruption in the storage following the cell pool
  entry and may corrupt the cell pool free chain.
  

Problem conclusion

• Processing has been amended to ensure it is no longer possible
  to use storage beyond the end of the allocated cell pool entry.
  100Y
  CMQXRSSG
  

Temporary fix

• *********
  * HIPER *
  *********
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV33174 UK90226

Modules/Macros

• CMQXRSSG
  

Fix information

• Fixed component name

  WMQ Z/OS V7

• Fixed component ID

  5655R3600

Applicable component levels

• R100 PSY UK90226

     UP13/01/16 P F301 Ž

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.