A fix is available
APAR status
Closed as program error.
Error description
Client complained 0C4 abend occurred as following. The affected channel is defined with Sec Exit CSQ4BCX3. MSTR joblog: 01.56.56 STC11489 IEA794I SVC DUMP HAS CAPTURED: 237 237 DUMPID=047 REQUESTED BY JOB (CSQ1CHIN) 237 DUMP TITLE=CSQ1,ABN= 0C4-00000004,C=MQ900.930.CHIN,M=CSQXDISP,L 237 OC=.........???????? CHIN joblog: 01.56.56 STC11495 +CSQX111E +CSQ1 CSQXDISP User channel exit error, TCB=00ABDE88 238 238 reason=0C4000-00000004 01.56.57 STC11495 +CSQX599E +CSQ1 CSQXRESP Channel CSQ1.CHL.RCV ended abnormally 01.56.57 STC11495 +CSQX053E +CSQ1 CSQXFFST Error information recorded in CSQSNAP data set The S0C4 abend is occurring while copying the user-supplied password into automatic storage in assembler sample CSQ4BAX3. The provided password is only 8 characters long, but CSQ4BAX3 always copies 100 bytes for the call to BPX1PWD. The correct length is then provided to BPX1PWD to validate the password. In this case, the password was held in storage right at the end of a page, and the following page wasn't allocated. This resulted in CSQ4BAX3 abending 0C4 when reading past the end of the provided password.
Local fix
n/a
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM MQ for z/OS Version 9 * * Release 3 Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: CSQ4BAX3 is called by the sample * * CSQ4BCX3 security exit to validate a * * client UserId and password. CSQ4BAX3 * * incorrectly copies the user password * * into its automatic storage which can * * result in an S0C4 abend. This will be * * accompanied by message CSQX111E being * * issued in the channel initiator (CHIN) * * joblog. * * * * This problem does not apply to clients * * which flow the UserId and password in * * an MQCSP. * **************************************************************** If the client password is less than 100 characters long and the storage following the password is inaccessible, then CSQ4BAX3 will abend S0C4 when copying the password. The problem occurs due to inadequate checking of the provided password length.
Problem conclusion
The code in CSQ4BAX3 has been corrected to copy the password correctly.
Temporary fix
Comments
APAR Information
APAR number
PH58680
Reported component name
IBM MQ Z/OS V9
Reported component ID
5655MQ900
Reported release
300
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-12-09
Closed date
2024-01-11
Last modified date
2024-02-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI95201
Modules/Macros
CSQ4BAX3
Fix information
Fixed component name
IBM MQ Z/OS V9
Fixed component ID
5655MQ900
Applicable component levels
R300 PSY UI95201
UP24/01/18 P F401
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"300","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"}}]
Document Information
Modified date:
01 February 2024