Patch-ID# 117470-07

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security tcp tcp.h system hang loop tcp ip packet icmp error
Synopsis: SunOS 5.9_x86: tcp Patch
Date: Apr/11/2006


Install Requirements: Reboot immediately after patch is installed                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 118305

Topic: SunOS 5.9_x86: tcp Patch

Relevant Architectures: i386

BugId's fixed with this patch: 4511681 4708720 4846184 5084452 5089150 5094229 6259389 6276464 6354773

Changes incorporated in this version: 4708720 5084452 6354773

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 117172-17 (or greater)

Obsoleted by: 

Files included with this patch: 

/kernel/drv/tcp
/kernel/strmod/tcp
/usr/include/inet/tcp.h
/usr/lib/adb/tcp

Problem Description:

4708720 TCP/UDP make unwarranted ICMP M_CTL assumptions
5084452 ICMP can snipe away incipient TCP connections
6354773 some changes made by 5084452 do not work with x86
 
(from 117470-06)
 
4511681 TCP vulnerable to Denial Of Service via "ACK storm"
 
(from 117470-05)
 
6276464 Reads on a tcp endpoint with synchronous streams can return extents of the input buffer unmodified
 
(from 117470-04)
 
6259389 race condition between cl_tcp_walk_list() and connection establishment
 
(from 117470-03)
 
5094229 driver hangs when accessing tt_open
 
(from 117470-02)
 
4846184 slow receiving process causes timer based ACKing
 
(from 117470-01)
 
5089150 Binding to a port which has already been bound may incorrectly succeed

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Reboot the system after patch installation.
 
NOTE:   To get the complete fix for bug 4708720 (TCP/UDP make unwarranted
        ICMP M_CTL assumptions), install the following patch:
 
        114859-03 (or greater) udp patch

README -- Last modified date:  Tuesday, April 11, 2006

