IT26367: MQ process crashes when setting or displaying AMS policy data. FDC with probe ID XC130031 generated

APAR status

• Closed as program error.

Error description

• When trying to display AMS policies with dspmqspl command or
  via MQ Explorer, the command and MQ Explorer hangs and it
  generates FDCs and dumps as below.
  
  AMS process is still works i.e. , encrypts and decrypts the
  messages based on the specified rules. This happens when there
  are   duplicate DN entries under "Recipient DNs:".
  
  +-------------------------------------------------------------+
  | Date/Time         :- Sun September 02 2018 14:16:50 EasternS
  tandardTime
  | UTC Time Offset   :- 60 (Eastern Daylight Time)
  | Probe Id          :- XC130031
  | Application Name  :- MQM
  | Component         :- xehExceptionHandler
  | Process Name      :- amqzlaa0.exe
  | Major Errorcode   :- xecF_E_UNEXPECTED_SYSTEM_RC
  | Minor Errorcode   :- OK
  | Probe Type        :- MSGAMQ6119
  | Probe Description :- AMQ6109S: An internal IBM MQ error haso
  ccurred.
  | Comment1          :- Access Violation at address0
  000000000000004 when
  |   reading+
  +-------------------------------------------------------------+
   As a result of a Severe Abend Error, a MiniDump has beenw
  ritten to:AM Q8076.6228.0.dmp
  An Unhandled Exception detected in process 8076, on thread0
  x1854.
  Type: EXCEPTION_ACCESS_VIOLATION (C0000005).
  Address: 0033:00007FF960F798C7.
  The thread could not read from memory address0
  x0000000000000004.
  MQM Function Stack
  zlaMainThread
  zlaProcessMessage
  zlaProcessSPIRequest
  zlaSPIKernel
  zsqSPIKernel
  kpiGeneric
  kqiPolicyCall
  smqopPolicyToPCF
  

Local fix

• Update the policy details by removing one of the duplicate DN
  entries from Signer DN or Recipient DN .
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users who attempt to set or display MQ AMS security policies
  containing duplicate distinguished names (DNs).
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  A coding error meant that duplicate DNs were not correctly
  handled, and caused a memory exception when setting or
  displaying security policies.
  
  This issue applied only to administrative operations on the
  policies - the operation of other security policies, or of
  security policies with duplicate DNs that had been defined at
  earlier releases and migrated, was not affected when protecting
  or unprotecting message data.
  

Problem conclusion

• The MQ AMS logic of the queue manager has been updated to
  correctly handle duplicate DN entries in security policies.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.1 CD    9.1.2
  v9.1 LTS   9.1.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE M/P

• Fixed component ID

  5724H7261

Applicable component levels

• R905 PSY

     UP