IJ04553: ENABLING KERBEROS MAY CAUSE A 64-BIT PROCESS DUMP CORE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• This segmentation fault problem needs some special
  conditions to show up:
  
  - the affected process must NOT be multi-threaded
  
  - it must be 64-bit
  
  - the process must have loaded "libxti.a"
  
  - multi-threading must be initialized later by loading
    multi-threaded library "/usr/lib/security/KRB5_64"
  
  - an additional thread must have been started by that
    multi-threaded library (KRB5_64)
  
  - later on "t_errno" must have been set by a failing call
    in "libxti.a"
  
  -> this corrupts the pointer to the TSD (thread safe
     data) of the main thread
  
  - a security function like "getpwnam" must try to access
    the TSD
  
  -> a core dump occurs
  

Local fix

• - run the affected process with
    LDR_PRELOAD64="libpthreads.a(shr_xpg5_64.o)"
    in its environment
  

Problem summary

• A core dump may occur in a single-threaded process that uses
  Kerberos or loads KRB5_64.
  

Problem conclusion

• libxti.a is now appropriately initialized whenever in use.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IJ02903

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  AIX V7.2

• Fixed component ID

  5765CD200

Applicable component levels

• R720 PSY U881507

     UP19/01/23 I 1000

PTF to Fileset Mapping

• U881507 bos.rte.streams 7.2.2.16