Patch-ID# 112926-05 Keywords: security smartcard card.getinfo card.exchange sun ray client ocf Synopsis: SunOS 5.9: smartcard Patch Date: Nov/17/2003 Install Requirements: None Solaris Release: 9 SunOS Release: 5.9 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 115011 Topic: SunOS 5.9: smartcard Patch Relevant Architectures: sparc BugId's fixed with this patch: 4366894 4524620 4629775 4635010 4635082 4635106 4636389 4639842 4642726 4646472 4646476 4646497 4647454 4647542 4649161 4655166 4676018 4682730 4683241 4704250 4760613 4876141 Changes incorporated in this version: 4704250 4876141 Patches accumulated and obsoleted by this patch: 112732-02 Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /etc/smartcard/ocf.classpath /etc/smartcard/opencard.properties /usr/include/smartcard/ifdhandler.h /usr/include/smartcard/scf.h /usr/lib/abi/abi_libsmartcard.so.1 /usr/lib/abi/sparcv9/abi_libsmartcard.so.1 /usr/lib/libsmartcard.so.1 /usr/lib/llib-lsmartcard /usr/lib/llib-lsmartcard.ln /usr/lib/smartcard/libIFDNative.so.1 /usr/lib/smartcard/sparcv9/libIFDNative.so.1 /usr/lib/sparcv9/libsmartcard.so.1 /usr/lib/sparcv9/llib-lsmartcard.ln /usr/share/lib/smartcard/IFDCardTerminal.jar /usr/share/lib/smartcard/commands.jar /usr/share/lib/smartcard/ocf.jar /usr/share/lib/smartcard/smartcard.jar Problem Description: 4704250 CT factory stalling prevents subsequent CT factories from being instantiated 4876141 Thread leak in ocfserv (from 112926-04) 4760613 Smart Card Terminal Interface project (PSARC 2002/220) (from 112926-03) 4366894 OCFDebug fails to send output to System.out 4524620 SCF: Need to remove dangerous "restart" support in ocfserv 4629775 libsmartcard contains "unsafe" libc calls (strcat and friends) 4635010 OCFDebug.debugln should not throw Exception 4635082 OCFDispatcher should pass data to INT_*CardService in a better way 4635106 Parameters should be decoded and passed more cleanly and robustly. 4636389 The life time of SmartCard object should be the same as OCFCardHandle. 4639842 UID checking for OCFCardHandle should be simplified. 4642726 OCFUtils.getCardService should be replaced with OCFCardHandle.getCardService 4646472 Exception handling in ocfserv needs to be improved. 4646476 Client request should be URL-encoded 4646497 OCFCardHandle.lock does not handle multiple requests from a client properly. 4647454 Smartcard client uses new client handle to re-send RPC request 4647542 ocfserv should clean up threads upon client deregistration (from 112926-02) 4649161 terminal properties broken on Sun Ray 4676018 The smartcard client library passes a wrong hostname to the RPC library. 4682730 Card.getInfo(INFO_ATR) returns a wrong type 4683241 Card.exchangeAPDU does not return the reply length (from 112926-01) This patch revision was generated to accumulate and obsolete the changes introduced in Solaris Update: s9u1 feature point patches: 112732-02 (from 112732-02) This patch revision was generated to synchronize the package version string between s9 and s9u1 (from 112732-01) 4655166 tracking bug for SCF project integration in S9U1 Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-9 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE 1: packages SUNWscf SUNWscfd must be removed prior to installing. Adding this patch without first removing these packages may cause system instability. NOTE 2: This patch includes new versions of /etc/smartcard/ocf.classpath. If no local changes have been made to these files, they can be replaced with the new version. Otherwise, the patch version of the file: /etc/smartcard/ocf.classpath.new must be manually merged with the existing files. README -- Last modified date: Monday, November 17, 2003