Patch-ID# 119075-11

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security th_trace th_refcnt tr_buf_max ip spdsock
Synopsis: SunOS 5.10: ip Patch
Date: Sep/26/2005


Install Requirements: Reboot immediately after patch is installed                      
                      Install in Single User Mode                      
                      
Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 119076

Topic: SunOS 5.10: ip Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 5013200 6211936 6212756 6216134 6217624 6218194 6222174 6230528 6231203 6231205 6233388 6233919 6236000 6236182 6237666 6237779 6237793 6237823 6248555 6250374

Changes incorporated in this version: 6236182 6237779

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 118822-14 (or greater)

Obsoleted by: 

Files included with this patch: 

/kernel/drv/sparcv9/ip
/kernel/drv/sparcv9/spdsock
/kernel/fs/sparcv9/sockfs
/kernel/strmod/sparcv9/ip
/usr/include/netinet/sctp.h

Problem Description:

6237779 race between ip_modclose() and igmp_timeout_handler() ends in panic
6236182 assertion failed: igmp_timeout_id == 0, file: ../../common/inet/ip/igmp.c, line: 151
 
(from 119075-10)
 
5013200 ipclassifier bind list insertion order is flawed in some cases
6233919 Panic in "ip" module during webstress test on x86 system
 
(from 119075-09)
 
6230528 IP pushed as a module inappropriately NAKs common Streams ioctls
6248555 Panic in sosctp_setsockopt() with 0 optlen
6250374 Panic in getsockopt IP_OPTIONS for sctp
 
(from 119075-08)
 
6216134 Need to abstract lwp lrusage updates into functions
 
(from 119075-07)
 
6212756 UDP checksum 0x0000 not substituted with 0xffff for UDP over IPv6 packets
 
(from 119075-06)
 
6222174 tcp_close processing is not correct
 
(from 119075-05)
 
6231203 sotpi_bindlisten() should use T_BIND_REQ instead of O_T_BIND_REQ for AF_INET/AF_INET6
6231205 SCTP states mismatch in sctp_opt_info(3SOCKET) and netinet/sctp.h
6233388 sctp_add_input_ancillary() always converts v4 mapped address
6236000 SCTP: sctp ancillary data packing has alignment issues
6237793 Return value of sstat_rwnd is not correct
6237823 Kernel panic in sctp_output()
6237666 thread suspended in socket read despite socket being closed
 
(from 119075-04)
 
6211936 in.iked refuses to not encrypt ESP
6217624 loopback half-closed connection goes spinning in a loop
 
(from 119075-03)
 
Patch respun to include complete functionality
 
(from 119075-02)
 
6211936 in.iked refuses to not encrypt ESP
 
(from 119075-01)
 
6218194 assertion failed: th_trace->th_refcnt >= 0 && th_trace->th_refcnt < TR_BUF_MAX -1

Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:  Reboot system immeidately after patch installation is complete.
 
NOTE 2:  If you're planning to set up Zones on this system, please make 
         sure to install the following patch which fixes bugid 6216195
         (zone installation confused by UPDATE=yes in pkginfo(4) file.)
 
         119015-01 (or greater)  Packaging Commands Patch
 
NOTE 3:  To get the complete fix for bugid 6216134 (need to abstract lwp
         lrusage updates into functions), please also install the following 
         patches:
 
         118375-03 (or greater)  nfs patch
         118822-14 (or greater)  kernel patch
         118874-02 (or greater)  pcfs patch
         119596-01 (or greater)  hsfs patch
         119979-01 (or greater)  specfs patch
 
NOTE 4:  To get the complete fix for bugid 6230528 (ip pushed as a module 
         inappropriately NAKs common Streams ioctls), please also install 
         the following patch:
 
         120013-01 (or greater)  ip header patch

README -- Last modified date:  Monday, September 26, 2005

