Patch-ID# 105182-22
Keywords: security kernel MP sigtimewait FFB2 VOP_REALVP sockfs klmmod sigintr
Synopsis: SunOS 5.6_x86: Kernel update patch
Date: Aug/07/00

Solaris Release: 2.6_x86

SunOS Release: 5.6_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 105181

Topic: SunOS 5.6_x86: Kernel update patch

	NOTE:	Refer to Special Install Instructions section for 
                IMPORTANT specific information on this patch.

BugId's fixed with this patch: 1237009 4043763 4044653 4056222 4061229 4062572 4063932 4064495 4065248 4065762 4066897 4067568 4067641 4070968 4073636 4073684 4076062 4077343 4086905 4087112 4089451 4090862 4090929 4093346 4095411 4097082 4098732 4099437 4099656 4101647 4106093 4108806 4110503 4110763 4114176 4115010 4115793 4116873 4117624 4117898 4119193 4119498 4119745 4120985 4122292 4122408 4122490 4122617 4125102 4125580 4128397 4131439 4132927 4136829 4139268 4139770 4140683 4143196 4144929 4147079 4148073 4162055 4162091 4162693 4163731 4170500 4176038 4176940 4177905 4178298 4179269 4179342 4184291 4184430 4191306 4191544 4195612 4195726 4198942 4200217 4201921 4202680 4205009 4205026 4206401 4208677 4211474 4214611 4215477 4216727 4220295 4222164 4224166 4226963 4229582 4229608 4232237 4242754 4243937 4245169 4246455 4248024 4249960 4253437 4261612 4278584 4285517 4285536 4289187 4290575 4293406 4303474 4312641 

Changes incorporated in this version: 4044653 4073636 4143196 4162693 4163731 4176038 4191306 4216727 4253437 4285517 4312641

Relevant Architectures: i386

Patches accumulated and obsoleted by this patch: 105215-01 105777-01 106309-01 109416-01 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/kernel/sys/shmsys
/kernel/fs/procfs
/kernel/fs/sockfs
/kernel/genunix
/kernel/exec/elfexec
/kernel/misc/consconfig
/kernel/misc/klmmod
/kernel/misc/krtld
/kernel/sys/doorfs
/kernel/sys/kaio
/platform/i86pc/kernel/unix
/usr/include/sys/kobj.h
/usr/include/sys/proc.h
/usr/include/sys/proc/prdata.h
/usr/include/sys/rce.h
/usr/include/sys/vnode.h
/usr/kernel/drv/ksyms
/usr/lib/adb/thread
/usr/lib/adb/shmid 
/usr/include/sys/socketvar.h
/usr/include/vm/seg_map.h
/usr/include/sys/aio_impl.h

Problem Description:

4044653 get_free_smp() sits in cv_wait()
4073636 panic in schedctl_save dereferencing NULL argument
4143196 Need support for configurability of allowing setuid progs to dump core
4162693 monster core files deadlock the VM system
4163731 core files created by root should not be readable over the net
4216727 allow_setid_core core files contain wrong credentials
4176038 TCP layer can be in LISTEN while socket layer is not.
4191306 TL_IOC_SOCKET failed: 4 on multi cpu system.
4253437 Ansync I/O problem.
4285517 Aio does not return a signal to the calling application
4312641 blocked cpu_dispqalloc() causes hang as cpu_pause threads running

(from 105182-21)

4116873 I/O wait statistic misleading
4139268 MP systems can show 100% waiting for I/O with CPU unconfigure
4285536 'allocated' column as reported by swap -s continues to decrease linearly
4289187 Server panics with corruption under heavy paging load
4303474 illegal instruction caused by stale T_LOFAULT

(from 105182-20)

4201921 lwp_create of ts thread causes NULL in suser
4224166 TPI messages get flushed if 3rd party module processes M_PROTO in service proced
4162091 fork in MT process can hang process in sockfs due to cv_wait/cv_wait_sig dependency
4249960 Terminating active I/O will cause system to hung.
4290575 2nd connect() to determine status of non-blocking connect sends extra Syn
4215477 stream/pagefault holding q_lock,tcp blocked on q_lock hmeintr blocked on
4245169 E6000 hangs - on weekly basis
4278584 memory leak in sigaddq()

(from 105182-19)

4110503 as_setprot heuristic gave my process a wedgie
4136829 overflow in p_lckcnt/p_cowcnt leads to panic
4140683 Cleanup of p_lckcnt and p_cowcnt stuff
4177905 sun4d cannot boot with Solaris 2.6, FDDI/S 4.0, FC-AL SBus X 5 and VxVM2.5
4243937 kpreempt() doesn't finish
4248024 Starfire panic's in lwp_sigredirect
4293406 System hang/panic in pollwakeup_safe

(from 105182-18)

4229608 SS20 running 5.7 hangs, deadlock between page_lock and entersq
4261612 profil not disabled on exec*() as indicated in man page

(from 105182-17)

4061229 NFS server crashes in flk_delete_active_lock
4125102 ufs_itrunc()/top_end_async() deadlock
4202680 thread_create() can return at different interrupt level
4205026 panic in sfmmu_pageunload - large page, 4 Meg page sizes
4208677 5.5.1 panics when getpgid() is called with PID of a process just being
4211474 Open call hangs on nfs mount point with stale file handle
4220295 System panics and then reboots even with OBP settings=false
4222164 KAIO wait broken under 2.6 returns ERR #22 EINVAL
4229582 lwpchan cache corruption
4232237 bug in the POSIX Message Queue
4242754 rsh hang caused by KJP 105181-13
4246455 ddi_umem_alloc() panic in s27

(from 105182-16)

4205009 system rebooted sfmmu_tsb_miss trap 31
4200217 program hangs with resource temporarily unavailable using lio_listio library
4195726 page_list_sub: large page on cachelist panic
4087112 panic in putq due to null q_last value

(from 105182-15)

4206401 panic when linking active stream below mux
4120985 panic in free_page on multiprocessor machines with fix bug 4026411
4226963 A Memory Leak of pthread program is due to schedctl doesn't free user address
4184291 kernel crash dumping problems when kvm usage > 2GB
4115010 dump times out on large memory systems
4214611 hot kernel lock limiting scalability on Solaris 2.6+ or greater
4128397 kernel crash dump after system panics causes another panic in bio.c::getblk()
4099437 segvn_pagelock must not softlock COW pages;

(from 105182-14)

4195612 system won't boot with 4gb RAM
4178298 race condition in pr_getprot()

(from 105182-13)

4198942 solaris ntp_adjtime broken: clock.c; useless for PPS sync of the system clock
4191544 System panic "blocked on mutex" in streams
4184430 panic: recursive mutex_enter on kmem_cache_lock
4176940 Panic() when parsing driver.conf greater than 8KB
4110763 panic in ts_update_list when accessing t_schedctl

(from 105182-12)

4066897 Calling listen() more than once on socket causes EPROTO error
4179269 giant core images cause filesystem corruption

(from 105182-11)

4179342 solaris needs to provide a resource management solution for big servers
4056222 sema_p_sig is broken

(from 105182-10)

4170500 solaris ntp_adjtime broken, useless for PPS sync of the system clock
4147079 stubs mechanism for modules is faulty
4139770 fcntl() returns EINVAL error in BCP mode when NFS file is read
4131439 deadlock_panic from pi_willto
4117624 if lockd is restarted, clients receiving signals have problems with locks
4108806 rename of automounted directory results in panic

(from 105182-09)

4162055 invalid socket return error code: ECONNRESET should be ECONNREFUSED
4148073 successful fork() sometimes does not return zero in mt/multi lwp child proc.
4122617 device driver providing devmap not unloadable because of leaked hold count
4122292 multithreaded httpd process deadlock during cfork()
4119745 realitexpire() algorithm is too slow when system time is changed
4065248 UFS caching can adversely effect application performance

(from 105182-08)

4144929 kernel patch rev05 causes dbx on setuid programs to get EBUSY
4098732 recursive mutex enter in kstrgetmsg()
4043763 in MT applications, close() blocks if the fd is in use by another thread

(from 105182-07)

4132927 open system call does not audit if create bit set
4125580 system panics in cstat64 with type prvnodeops vnode
4122490 unknown: sd: panic at hat_unlock(0xf5485a00,0x804a000,0x1000) + 5c
4122408 backup performance with Netbackup 3.0 is far below expectations
4119498 HSI/P - performance problem up to 200 m/s interframe delay

(from 105182-06)

4093346 using /usr/proc/bin commands can cause a core dump in an independent process
4119193 ASSERT() panic due to race condition in /proc-supported watchpoints

(from 105182-05)

4114176 system panics due to one lwp closing another lwp's /proc file descriptor
4117898 panic in procfs due to unprotected reference count
4115793 /proc security too restrictive; a process should be able to open itself
4106093 system hangs during high I/O loads (bread/bflush deadlock)
4101647 loop-back mounts of /proc (for chroot(1M)) are insecure and broken
4099656 httpd process hangs and can't be killed
4097082 _lwp_sigredirect() if called from a non-mt process panics kernel.
4095411 softintrs handled in software is not MP safe
1237009 users umask modifies ACL's of new files under default ACL's
4073684 "mkdir -p dir" and "mkdir dir" work differently in the presence of default ACLs

(from 105182-04)

4090862 speculative TLB loading causes data corruption and may panic the system
4089451 doors/scheduler activation broken in the execed process
4086905 interrupt flurry can cause a double fault
4067641 changing acl's on a UFS fs mounted readonly causes machine to panic

(from 105182-03)

4070968 a synch object that spans pages can cause deadlock

(from 105182-02)

4062572 syncing page gives up during shutdown
4070968 a synch object that spans pages can cause deadlock
4076062 sigtimedwait() returns immediately
4077343 sun4u systems incorrectly report "sync - giving up" while halting

(from 105182-01)

4064495 Workaround needed for some x86 MP machines

(from 105777-01)

4090929 system panics due to infinite recursion in prrealvp

(from 105215-01)

4065762 recursive mutex_enter panic in sockfs
4067568 assertion failure in sock_poll(): *reventsp != 0    *phpp != NULL

(from 106309-01)

4063932 orphan lock problem caused by sigalrm/sigintr & large packet loss

(from 109416-01)

4224166 TPI messages get flushed if 3rd party module processes M_PROTO in service procedure
4162091 fork in MT process can hang process in sockfs due to cv_wait/cv_wait_sig dependency

Patch Installation Instructions: 
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions: 
----------------------------- 
Reboot the system after patch installation.

	NOTE 1:  To get the complete fix for bug 4090929 (system panics due to
       	         infinite recursion in prrealvp) we recommend installation of
                 rev 01 (or newer revisions) of the following patches:

                	105779-01  /kernel/fs/specfs
                	105781-01  /kernel/fs/fifofs

	NOTE 2:  To get the complete fix for 1237009 (users umask modifies
                 ACL's of new files under default ACL's) and 4073684 (mkdir
                 -p dir" and "mkdir dir" work differently in the presence
                 of default ACLs), we recommend installation of rev 01
                 (or newer revisions) of the /usr/bin/mkdir patch:

			106142-01  /usr/bin/mkdir

	         As a result of this fix for 1237009, the umask/ACL interaction  
		 has changed.  

                 Please refer to the following paragraph for a revision to the
		 manpage for the command 'setfacl' which defines the new umask/ACL
                 interaction.

                 ************************************************************

                 A directory may contain default ACL entries.  If a  file
                 is created in a directory that contains default ACL entries,
                 the newly created file will have permissions generated
                 according to the intersection of the default ACL entries,
                 and the permissions requested at creation time.

                 The umask(1) will not be applied if the directory contains
                 default ACL entries. If a default ACL is specified for a
                 specific user (or users), the file will have a regular ACL
                 created;  otherwise, only the mode bits will be initialized
                 according to the intersection described above.  The default
                 ACL should be thought of as the maximum discretionary access
                 permissions that may be granted.

                *************************************************************

	NOTE 3: For users running Java or other multithreaded applications.
                We highly recommend installing the linker patch,   
                105491-04 (or newer).

        NOTE 4:  To get the complete fix for bug 4125102 (ufs_itrunc()/
                 top_end_async() deadlock) we recommend installation of
                 106626-06 (or newer revisions) plus the following SDS
                 patches:

                                SDS4.1 sparc 104173-17
                                SDS4.2 sparc 106628-05

        NOTE 5: To get the complete fix for bug 4232237 (bug in the POSIX 
                Message Queue) we recommend installation of 106798-03
                (or newer revisions).

        NOTE 6: To get the complete fix for bug 4224166 (TPI messages get
                flushed if 3rd party module processe M_PROTO in service
	        proced) we recommend installation of 105622-22  (or newer 
		revisions).

	NOTE 7: For the socket command under crash to display the correct 
                socket flags, we recommend installation of 108795-02 (or 
                newer revisions).

        NOTE 8: To get the complete fix for bug 4201921 (lwp_create of ts
                thread causes NULL in suser) we recommend installation of
                108797-01 (or newer).

        NOTE 9: The fix for bug 4116873 causes wait i/o numbers to be reported
                on a per cpu basis;  this will generally have the effect of
                reducing its magnitude on MP systems.

        NOTE 10: To get the complete fix for bug 4224166 (TPI messages get
                 flushed if 3rd party module processes M_PROTO in service
                 proced), bug 4162091 (fork in MT process can hang proces in
                 sockfs due to cv_wait/cv_wait_sig dependen) or bug 4290575
                 (2nd connect() to determine status of non-blocking connect
                 sends extra Syn) we recommend installation of 109418-01 
		 (or newer).

        NOTE 11: To get the complete fix for bug 4253437 (Ansync I/O problem) 
                 we recommend installation of 105211-33 (or newer). 

