IJ50276: IBMJCEPLUS, IBMJCEPLUSFIPS: ALLOCATE ADDITIONAL BUFFER TO FIX CORE DUMPS ON AIX DURING SYMMETRIC CIPHER CRYPTO OPERATIONS.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: *0x36877000 j9mm.107 Assert * ** ASSERTION FAILED
  ** at mgcalloc.cpp:358: ((false && (allocatedBytes ==
  indexableOAM.getAllocateDescription()->getContiguousBytes())))}}
  .
  The problem is seen only on AIX platforms.
  

Local fix

• Edit JRE_HOME/lib/security/java.security and place IBMJCE ahead
  of IBMJCEPlus, IBMJCEPlusFIPS in the provider list.
  

Problem summary

• IBMJCEPlus, IBMJCEPlusFIPS : Allocate additional buffer to fix
  core dumps on AIX during Symmetric Cipher Crypto operations.
  
  Not allocating enough buffer when PADDING is none, causes random
  
  core dumps on AIX, during Symmetric Cipher Crypto operations.
  

Problem conclusion

• The JVM has been updated to allocate more internal buffer during
  
  Symmetric Cipher Crypto operations.
  
  Austin APAR: IJ50078
  
  Binary affected - ibmjceplus.jar(s) for FIPS140-2 and FIPS140-3
  GIT Issues - 663, 666
  RTC Problem Report - 150739
  Build - FIPS140-2 Build-Date: 20240222
  Build - FIPS140-3 Build-Date: 20240222
  
  JVM to be delivered in - JDK 8 SR8 FP25
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
    8    SR8 FP25  (8.0.8.25)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
     https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
     https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
     https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels