RP/TUX Tuxedo FML32 Buffer Getting Corrupted If Length Argument Is Passed As Non Zero In Tuxedo API Use (Doc ID 2117641.1)

Last updated on JULY 11, 2017

Applies to:

Oracle Tuxedo - Version 11.1.1.3.0 and later
Information in this document applies to any platform.

Symptoms

Tuxedo tpacall() use where the length parameter is abnormal 140329466462208(if it is non zero). This corrupts the Tuxedo FML32 buffer. No error is reported in the Tuxedo ULOG. some time the server crash.

005131.server!simpserv.29237.2769553184.0: gtrid x0 x56c5bf1b x7b: TRACE:at:    { tpacall("TOUPPER", 0x0x262cc08, 140329466462208, 0x2e)

Some time the server crash with a stack trace similar to the following:

Core was generated by `simpserv -g 220 -i 1601 -u server -U /apps/tuxedo/log/ULOG -m 0 -A -'.
Program terminated with signal 11, Segmentation fault.
#0  0x000000313a20f5db in raise () from /lib64/libpthread.so.0
Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.149.el6_6.9.x86_64 libaio-0.3.107-10.el6.x86_64 numactl-2.0.9-2.el6.x86_64
(gdb) where
#0  0x000000313a20f5db in raise () from /lib64/libpthread.so.0
#1  0x00007feac4f0f362 in skgesigOSCrash () from /oracle/product/v11.2.0.3_Client/lib/libclntsh.so.11.1
#2  0x00007feac51b1bdd in kpeDbgSignalHandler () from /oracle/product/v11.2.0.3_Client/lib/libclntsh.so.11.1
#3  0x00007feac4f0f572 in skgesig_sigactionHandler () from /oracle/product/v11.2.0.3_Client/lib/libclntsh.so.11.1
#4  <signal handler called>
#5  0x00007feac2bf3beb in _tmhasembedded32 () from /sys_apps_01/tuxedo11/lib/libtux.so
#6  0x00007feac2bf74c4 in _fpostrecv32 () from /sys_apps_01/tuxedo11/lib/libtux.so
#7  0x00007feac2b53fec in _tmfmsg_findutcm () from /sys_apps_01/tuxedo11/lib/libtux.so
#8  0x00007feac2aedc3c in _tmmsgrcv () from /sys_apps_01/tuxedo11/lib/libtux.so
#9  0x00007feac2b34178 in _tmrcvrq () from /sys_apps_01/tuxedo11/lib/libtux.so
#10 0x00007feac2b3919f in _tmrunserver () from /sys_apps_01/tuxedo11/lib/libtux.so
#11 0x00007feac2b0f54c in _tmstartserver () from /sys_apps_

 

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms