OBSOLETE Patch-ID# 109042-04 Keywords: security TPI M_PROTO connect T_DISCON_IND T_CONN_REQ ECONNREFUSED Synopsis: Obsoleted by: 108529-09 SunOS 5.8_x86: sockfs patch Date: May/22/2001 Solaris Release: 8_x86 SunOS Release: 5.8_x86 Unbundled Product: Unbundled Release: Xref: This patch available for SPARC as patch 109041 Topic: SunOS 5.8_x86: sockfs patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. Relevant Architectures: i386 BugId's fixed with this patch: 4224166 4290575 4294881 4322741 4337605 Changes incorporated in this version: 4294881 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: 108529-09 Files included with this patch: /kernel/fs/sockfs /usr/include/sys/socketvar.h Problem Description: 4294881 fork in MT process can hang in sockfs due to cv_wait/cv_wait_sig dependency (from 109042-03) 4337605 inetd Denial of Service Attack - accept() hangs after successful select() (from 109042-02) 4322741 Recent change to sonode structure needlessly breaks lsof (from 109042-01) 4224166 TPI messages get flushed if 3rd party module processes M_PROTO in service procedure 4290575 2nd connect() to determine status of non-blocking connect sends extra Syn Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-8 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE: To get the complete fix for 4224166 (TPI messages get flushed if 3rd party module processes), one needs to install the following patches: 109044-01 (or newer) sonode adb macro patch 108876-02 (or newer) /kernel/sys/c2audit patch 109046-01 (or newer) /usr/sbin/i86/crash patch README -- Last modified date: Friday, July 13, 2001