Patch-ID# 103630-15 Keywords: security ip tcp retransmit web RTO ifconfig arp udp icmp ping Synopsis: SunOS 5.5.1: ip ifconfig arp udp icmp patch Date: Oct/29/99 Solaris Release: 2.5.1 SunOS Release: 5.5.1 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 103631 Xref: This patch available for PPC as patch 103632 Topic: SunOS 5.5.1: ip ifconfig arp udp icmp patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. BugId's fixed with this patch: 1166108 1226653 1226919 1233827 1240331 1248446 1259279 1262096 4012051 4019260 4033047 4034832 4034845 4040423 4057459 4105140 4242224 Changes incorporated in this version: 4242224 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: NOTE: iss_sparc-01 (or newer) Patches required with this patch: Obsoleted by: Files included with this patch: /kernel/drv/arp /kernel/drv/ip /kernel/strmod/arp /sbin/ifconfig /usr/sbin/ifconfig /kernel/drv/udp /kernel/drv/icmp Problem Description: 4242224 memory leak in IP (from 103630-14) 4033047 killing and restarting PPP can panic system in ip_bind (from 103630-13) 4057459 ifconfig also add routes on virtual interfaces This patch revision was generated to fix a panic caused by the original 4057459 bugfix. (from 103630-12) 1166108 host with published ARP table entries does not reply to ARP queries (from 103630-11) 4057459 ifconfig also add routes on virtual interfaces (from 103630-10) 4105140 ARP packet with source protocol addr of 0 flushes all on-link IRE_CACHE entries (from 103630-09) 1226919 ping -sv -i 127.0.0.1 224.0.0.1 causes a panic (from 103630-08) 4012051 Bug fix 1240331 is incorrect - MUST be backed out 4034845 ifconfig if slow with a large number (>1000) of IP addresses 4034832 netstat is slow with many (>1000) IP addresses (from 103630-07) 4040423 ss4000 with hme interface unable to boot with nsswitch setting using dns (from 103630-06) 4019260 icmp panic on mi_free() in icmp_close() in 2.5.1 (from 103630-05) 1226653 IP can send packets larger than MTU size to the driver (from 103630-04) 1262096 IP believes it has correctly reassembled a packet, but one fragment not received (from 103630-03) 1248446 arp cache is not getting updated appropriately (from 103630-02) 1259279 x86 byte ordering/endian problem in ip & arp for DL_UNITDATA_REQ (from 103630-01) 1240331 ifconfig of a non-existant virtual interface creates one even as a regular user 1233827 tcp retransmits too much for short connections as seen at web sites Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- Refer to the file called SPECIAL_NOTE_IFCONFIG shipped with this patch for the ifconfig manpage. If the reason to install this patch is to fix bugid 1233827 (tcp retransmits too much for short connections as seen at web sites), the 2.5.1 tcp patch (103582-01 or newer) is also required. To get the complete fix for bugid 4040423 (ss4000 with hme interface unable to boot with nsswitch setting using dns), one needs to install patch 103612-26 (or newer). NOTE: We recommend installing the following patches to get the complete support for large IP addresses: 103582-13 (or newer) kernel/drv/tcp patch 103594-10 (or newer) usr/lib/sendmail fixes 104331-03 (or newer) usr/sbin/rpcbind patch 104956-01 (or newer) usr/sbin/in.rarpd patch 104958-01 (or newer) usr/sbin/in.rdisc patch 104960-01 (or newer) usr/sbin/snoop patch