PH64128: IBMJCECCA JNI FUNCTION NOT CHECKING FOR NULL BEFORE CALLING GETARRAYELEMENTS

APAR status

• Closed as program error.

Error description

• Error Message: GPF is received and a core dump taken.
  .
  Stack Trace:
  {libj9vm29.so}{getArrayElementsImpl(JNIEnv_*,_jarray*,unsigned
  char*,unsigned char)} {libj9vm29.so}{getArrayElements}
  {libHIKM.so}{Java_com_ibm_crypto_hdwrCCA_provider_HIKM_CSNBENCJ}
  {com/ibm/crypto/hdwrCCA/provider/HIKM.CSNBENCJ} JIT
  {com/ibm/crypto/hdwrCCA/provider/JCEHdwrUtils.a} INT
  {com/ibm/crypto/hdwrCCA/provider/DESedeCipher.a} JIT
  {com/ibm/crypto/hdwrCCA/provider/DESedeCipher.engineDoFinal} JIT
  {javax/crypto/Cipher.doFinal} JIT ...
  .
  

Local fix

Problem summary

• JNI routine was not checking for NULL before calling
  getArrayElements.
  

Problem conclusion

• Added check for NULL.
  The user may now see this exception and stack trace:
  ... Caused by: java.lang.RuntimeException: Hardware error from
  call CSNBENC java.lang.IllegalArgumentException: System Error:
  Fatal error in native interface.
   at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.JCEHdwrUtils.
  
  encrypt(JCEHdwrUtils.java:1210) at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.fin
  
  alNoPadding(DESCipher.java:2491) at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.eng
  
  ineDoFinal(DESCipher.java:2325) at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DESCipher.eng
  
  ineDoFinal(DESCipher.java:2063) at
  ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.DCNP.engineDo
  
  Final(DCNP.java:341) at
  java.base/javax.crypto.Cipher.doFinal(Cipher.java:2205) If
  this exception is seen, contact service.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
   17 17.0.13.0
   11 11.0.25.0
  IBM SDK, Java Technology Edition
   8 SR8 FP35 (8.0.8.35)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels