Patch-ID# 103630-09
Keywords: security ip tcp retransmit web RTO ifconfig arp udp icmp ping
Synopsis: SunOS 5.5.1: ip ifconfig arp udp icmp patch
Date: Jul/02/97

Solaris Release: 2.5.1

SunOS Release: 5.5.1

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 103631
Xref: This patch available for PPC as patch 103632

Topic: SunOS 5.5.1: ip ifconfig arp udp icmp patch

	NOTE1:	TO GET THE COMPLETE FIX FOR BUGID 4040423 (SS4000 WITH HME
		INTERFACE UNABLE TO BOOT WITH NSSWITCH SETTING USING DNS),
		ONE NEEDS TO INSTALL PATCH 103612-26 (OR HIGHER).

	NOTE2:	We recommend installing the following patches to
                get the complete support for large IP addresses:

                103582-13 (or higher revs)      kernel/drv/tcp patch
                103594-10 (or higher revs)      usr/lib/sendmail fixes
                104331-03 (or higher revs)      usr/sbin/rpcbind patch
                104956-01 (or higher revs)      usr/sbin/in.rarpd patch
                104958-01 (or higher revs)      usr/sbin/in.rdisc patch
                104960-01 (or higher revs)      usr/sbin/snoop patch

BugId's fixed with this patch: 1226653 1226919 1233827 1240331 1248446 1259279 1262096 4012051 4019260 4034832 4034845 4040423

Changes incorporated in this version: 1226919

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: iss_sparc-01 (or higher revs)

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/kernel/drv/arp
/kernel/drv/ip
/sbin/ifconfig
/usr/sbin/ifconfig
/kernel/drv/udp
/kernel/drv/icmp

Problem Description:

1226919 ping -sv -i 127.0.0.1 224.0.0.1 causes a panic

(from 103630-08)

4012051 Bug fix 1240331 is incorrect - MUST be backed out
4034845 ifconfig if slow with a large number (>1000) of IP addresses
4034832 netstat is slow with many (>1000) IP addresses

(from 103630-07)

4040423 ss4000 with hme interface unable to boot with nsswitch setting using dns

(from 103630-06)

4019260 icmp panic on mi_free() in icmp_close() in 2.5.1

(from 103630-05)

1226653 IP can send packets larger than MTU size to the driver

(from 103630-04)

1262096 IP believes it has correctly reassembled a packet, but one fragment not received

(from 103630-03)

1248446 arp cache is not getting updated appropriately

(from 103630-02)

1259279 x86 byte ordering/endian problem in ip & arp for DL_UNITDATA_REQ

(from 103630-01)

1240331 ifconfig of a non-existent virtual interface creates one even as a regular user
1233827 tcp retransmits too much for short connections as seen at web sites

Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------

Refer to the file called SPECIAL_NOTE_IFCONFIG shipped with this patch
for the ifconfig manpage.

If the reason to install this patch is to fix bugid 1233827 (tcp retransmits 
too much for short connections as seen at web sites), the 2.5.1 tcp patch 
(103582-01 or higher) is also required.

To get the complete fix for bugid 4040423 (ss4000 with hme interface
unable to boot with nsswitch setting using dns), one needs to install
patch 103612-26 (or higher).

NOTE:  		We recommend installing the following patches to 
                get the complete support for large IP addresses:
 
                103582-13 (or higher revs)      kernel/drv/tcp patch
                103594-10 (or higher revs)      usr/lib/sendmail fixes 
                104331-03 (or higher revs)      usr/sbin/rpcbind patch 
                104956-01 (or higher revs)      usr/sbin/in.rarpd patch
                104958-01 (or higher revs)      usr/sbin/in.rdisc patch 
                104960-01 (or higher revs)      usr/sbin/snoop patch
