A fix is available
APAR status
Closed as program error.
Error description
The following message occurred and a system dump was taken. DFHSO0001 PA05CICS An abend (code 0C4/AKEX) has occurred at offset X'1564' in module DFHSOSE. This was the last abend in the abend percolation sequence. . From the first abend in the sequence, a CICS task (taskid 31140 to illustrate) took an abend0c4 pic38 in module GSKS64 + x'1736A'. Exception Address x'00FD56D0_00000800'. . Module DFHSOSK, SECURE_SOC_INIT, made the call to GSK and passed the SSL handle address to it in register 1. . Register 1 is loaded from the low core address x'10' with x'00FD56D0 00000000', which is passed to GSKS64 gsk_attribute_set_numeric_value, leading to this abend. . Example of the KE Task Stack entries: . KE_NUM @Stack Len Type Address Link Reg Offs Error Name .. 0247 300EB040 1BA0 Dom 26B00000 26B02612 2612 DFHSOCK Int +23CA 26B00252 0252 SEND_SOCK 0247 300ECBE0 0C00 Sub 2745AD00 2745C8F6 1BF6 DFHSOSE Int +1B94 2745AF80 0280 SECURE_SOC_WRITE 0247 27B40040 0C00 Sub 2745AD00 2745E1A8 34A8 *YES* DFHSOSE Int +0E08 2745AF80 0280 SECURE_SOC_INIT 0247 27B40C40 1560 Dom 260B5760 260BA86F 510F DFHMEME Int +4270 260B5B3A 03DA SEND Int +1A86 260B9AD0 4370 CONTINUE_SEND Int +5030 260B7314 1BB4 TAKE_A_DUMP_FOR_CALLER . The internal trace shows the TI task timing out a pooled socket and a new outbound request selecting that socket to be used. The bad ssl_handle is due to the ssl_data area of the socket being freed. Example of the lead-up to the problem from the internal trace: TI S809Q SO 1201 SOPL EXIT CLOSE_SOCKET_IN_POOL/OK TI QR SO 0B02 SOTI EXIT NOTIFY/OK TI QR SO 0B01 SOTI ENTRY NOTIFY 019D05A4 , 40404040 TI QR SO 0B09 SOTI EVENT RECEIVE_TIMEOUT_ENTRY TI QR SO 0D25 SOSO ENTRY CANCEL_INBOUND TI SO SO 0E00 SOUS EVENT ASYNCIO_ENTRY 00000030 TI SO SO 0E01 SOUS EVENT ASYNCIO_EXIT TI SO SO 0D26 SOSO EXIT CANCEL_INBOUND TI QR SO 0B0A SOTI EVENT RECEIVE_TIMEOUT_EXIT TI QR SO 0B02 SOTI EXIT NOTIFY/OK 31140 S809X SO 0803 SOSE *EXC* RECOVERY_ENTERED SECURE_SOC_INIT,DISASTER,TIMED_OUT,0,, .. Alternatively this problem can result in severe error in DFHDSSR due to two tasks using the same socket attempting to use the same suspend token (DEL_SUSP_SUSP_TOK_IN_USE). DFHDS0002 A severe error (code X'0075') has occurred in module DFHDSSR.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users. * **************************************************************** * PROBLEM DESCRIPTION: An abend AKEX at offset X'09A8' in * * module DFHLEPT, followed by abend code * * 0C4/AKEX at offset X'1564' in module * * DFHSOSE, and message DFHSO0002 a severe * * error (code X'080C') has occurred in * * module DFHSOSE. * **************************************************************** Some CICS transactions which send outbound web service requests are using a URIMAP with a non-zero SOCKETCLOSE value so that any socket using the URIMAP is returned to a socket pool when the transaction has finished using it. These sockets are using SSL. One of the sockets in the pool reaches its SOCKETCLOSE time and needs to be closed. The TI task wakes up and calls DFHSOTI to close the socket. However, the TI task is delayed when DFHSOTI tries to switch to the required socket TCB mode. At this time a new task makes an outbound request using the same URIMAP. The request needs to take a socket from the pool and it selects the same socket which the TI task is about to time out and close. While the new task is using the socket the TI task completes the socket close. The new task continues to use the socket which has been closed and freemained with unpredictable results.
Problem conclusion
DFHSOPL has been updated to ensure that an expired socket is not selected for reuse. DFHSOTI has been changed to verify the expired socket is still in the pool before removing it.
Temporary fix
Comments
APAR Information
APAR number
PH35487
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
200
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-03-18
Closed date
2021-09-21
Last modified date
2021-10-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI77237 UI77238
Modules/Macros
DFHSOAD DFHSOCK DFHSODM DFHSODUF DFHSOIS DFHSOL DFHSOLI DFHSOLS DFHSOLX DFHSOLX6 DFHSOM01 DFHSOM02 DFHSOM03 DFHSOPL DFHSORD DFHSOS00 DFHSOS01 DFHSOS02 DFHSOS03 DFHSOS04 DFHSOS05 DFHSOS06 DFHSOS07 DFHSOS08 DFHSOS09 DFHSOS10 DFHSOS11 DFHSOS12 DFHSOS13 DFHSOS14 DFHSOS15 DFHSOS16 DFHSOS17 DFHSOS18 DFHSOS19 DFHSOS20 DFHSOS21 DFHSOS22 DFHSOS23 DFHSOSE DFHSOST DFHSOTB DFHSOTI DFHSOTRI DFHSOUE DFHSOXM
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Line of Business":{"code":"LOB35","label":"Mainframe SW"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5"}]
Document Information
Modified date:
02 October 2021