Patch Name: PHKL_30596

Patch Description: s700_800 11.11 Race in msemaphores

Creation Date: 04/03/26

Post Date: 04/05/18

Hardware Platforms - OS Releases:
	s700: 11.11
	s800: 11.11

Products: N/A

Filesets:
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP

Automatic Reboot?: Yes

Status: General Release

Critical:
	Yes
	PHKL_30596: PANIC

Category Tags:
	defect_repair general_release critical panic

Path Name: /hp-ux_patches/s700_800/11.X/PHKL_30596

Symptoms:
	PHKL_30596:
	( SR:8606341705 CR:JAGaf02612 )
	The system panics with a stack trace similar to the
	following while running an application that makes intensive
	use of memory mapped semaphores.
	+-------------  TRAP  ----------------------------
	| Trap type 15 in KERNEL mode at
	| 0x425ee0 (msem_hashlist_remove+0x28)
	| p struct save_state 0x9c93000.0x400003ffffff0f00
	+-------------  TRAP  ----------------------------
	SR5=0x09c93000
	                SP         RP Return Name
	0x400003ffffff0f00 0x00425ee0 msem_hashlist_remove+0x28
	0x400003ffffff0f00 0x00426bd8 msleep+0x688
	0x400003ffffff0da0 0x001517a8 syscall+0x480
	0x400003ffffff0c70 0x00035944 syscallinit+0x54c

Defect Description:
	PHKL_30596:
	( SR:8606341705 CR:JAGaf02612 )
	When a memory mapped semaphore is truncated using
	ftruncate(2) while it has multiple waiters blocked to lock
	it using msem_lock(2), the first waiter to unblock releases
	the kernel resources associated with this memory mapped
	semaphore.  This causes the next waiter to panic the system
	attempting to free the same resources.

	Resolution:
	The last waiter to unblock from msem_lock(2) releases the
	kernel resources associated with a truncated memory mapped
	semaphore.

Enhancement:
	No

SR:
	8606341705

Patch Files:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	/usr/conf/lib/libpm.a(pm_msem.o)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	/usr/conf/lib/libpm.a(pm_msem.o)

what(1) Output:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	/usr/conf/lib/libpm.a(pm_msem.o):
		pm_msem.c $Date: 2004/03/25 22:07:01 $Revision: r11.
			11/1 PATCH_11.11 (PHKL_30596)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	/usr/conf/lib/libpm.a(pm_msem.o):
		pm_msem.c $Date: 2004/03/25 22:07:01 $Revision: r11.
			11/1 PATCH_11.11 (PHKL_30596)

cksum(1) Output:
	
	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_32,v=HP:
	595737183 9796 /usr/conf/lib/libpm.a(pm_msem.o)

	OS-Core.CORE2-KRN,fr=B.11.11,fa=HP-UX_B.11.11_64,v=HP:
	1050368339 25696 /usr/conf/lib/libpm.a(pm_msem.o)

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches:
	PHKL_30535:
	s700: 11.00
	s800: 11.00

Patch Package Size: 40 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHKL_30596

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHKL_30596.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHKL_30596.  If you do not wish to retain a
	copy of the original software, include the patch_save_files
	option in the swinstall command above:

		-x patch_save_files=false

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHKL_30596.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHKL_30596.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHKL_30596.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None