IJ50276: IBMJCEPLUS, IBMJCEPLUSFIPS: ALLOCATE ADDITIONAL BUFFER TO FIX CORE DUMPS ON AIX DURING SYMMETRIC CIPHER CRYPTO OPERATIONS.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: The following stack traces are some examples of
  what IBM Support has seen, when the problem occurs, but the list
  is not a complete list, as this is a memory corruption issue
  that can occur anywhere.
  
  Stack Trace 1:: *0x36877000 j9mm.107 Assert * ** ASSERTION
  FAILED ** at mgcalloc.cpp:358: ((false && (allocatedBytes ==
  indexableOAM.getAllocateDescription()->getContiguousBytes())))}}
  
  
  Stack Trace 2: 0x10046f50400   j9mm.107   *  ** ASSERTION FAILED
  ** at IndexableObjectAllocationModel.cpp:174: ((false && (env->
  getExtensions()->objectModel.isIndexable((omrobjectptr_t)spine)
  )))
  
  Stack Trace 3: 0x10037b46e00    j9mm.107    *   ** ASSERTION
  FAILED ** at mgcalloc.cpp:114: ((false && (allocatedBytes ==
  mixedOAM.getAllocateDescription()->getContiguousBytes())))
  . 1. The problem is seen only on AIX platforms.
  2. Not allocating enough buffer causes possible memory
  corruption and once memory is corrupted, the subsequent behavior
  of IBMJCEPlus, IBMJCEPlusFIPS modules is not deterministic. The
  list of stack traces listed are based on known failures at this
  point but a core dump in a customers environment may reveal a
  different stack trace.
  

Local fix

• Edit JRE_HOME/lib/security/java.security and place IBMJCE ahead
  of IBMJCEPlus, IBMJCEPlusFIPS in the provider list.
  

Problem summary

• IBMJCEPlus, IBMJCEPlusFIPS : Allocate additional buffer to fix
  core dumps on AIX during Symmetric Cipher Crypto operations.
  
  Not allocating enough buffer when PADDING is none, causes random
  
  core dumps on AIX, during Symmetric Cipher Crypto operations.
  

Problem conclusion

• The JVM has been updated to allocate more internal buffer during
  
  Symmetric Cipher Crypto operations.
  
  Austin APAR: IJ50078
  
  Binary affected - ibmjceplus.jar(s) for FIPS140-2 and FIPS140-3
  GIT Issues - 663, 666
  RTC Problem Report - 150739
  Build - FIPS140-2 Build-Date: 20240222
  Build - FIPS140-3 Build-Date: 20240222
  
  JVM to be delivered in - JDK 8 SR8 FP25
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
    8    SR8 FP25  (8.0.8.25)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
     https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
     https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
     https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels