OBSOLETE Patch-ID# 109280-18


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security ndd ip ip_wsrv hippi mpath streams netstat
Synopsis: Obsoleted by: 108529-13 SunOS 5.8_x86: /kernel/drv/ip patch
Date: Oct/17/2001


Install Requirements: None

Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product:

Unbundled Release:

Xref: This patch available for SPARC as patch 109279

Topic: SunOS 5.8_x86: /kernel/drv/ip patch
	NOTE:   Refer to Special Install Instructions section for 
                IMPORTANT specific information on this patch.


Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
422411114984406
423915414988901
427884215001896
429103415006453
429964415009666
429995115009802
430274915010960
430342215011253
430499115011908
430503915011935
430636215012491
430872815013368
431095615014374
431193815014857
431318915015477
431722115016804
432081815018220
432364715019461
432383015019527
432405115019621
432443015019771
433399515023884
433556815024541
433647815024929
433727515025232
433872415025915
433937515026188
434045515026646
434722315029510
435277015031673
436081815034688
437012315037946
437415715039415
437592015040053
437688615040325
438778315044162
439024815044981
443413115059378
444867315061391
448368515072978
448858815074615
448878015074686


Changes incorporated in this version: 4483685 4488588 4488780

Patches accumulated and obsoleted by this patch: 109049-06 110181-01 110553-01 111542-02

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by: 108529-13

Files included with this patch:

/kernel/drv/ip
/kernel/drv/ip6
/kernel/drv/ipsecah
/kernel/strmod/tun
/usr/include/inet/ip.h
/usr/include/inet/ip_if.h
/usr/include/inet/ip_ire.h
/usr/include/inet/ip_multi.h
/usr/include/inet/mi.h
/usr/include/net/if.h
/usr/include/net/route.h
/usr/include/netinet/in.h
/usr/include/sys/sockio.h
/usr/lib/adb/ill
/usr/lib/adb/ipc
/usr/lib/adb/ipif
/usr/lib/adb/ire
/usr/lib/adb/iulp
/usr/lib/mdb/kvm/ip.so

Problem Description:

4483685 IPC_INBOUND_POLICY_PRESENT() tricks ipsec_check_policy() into panicking.
4488780 ping does not work sometimes, when IPMP groups are enabled
4488588 assertion failed: IN6_IS_ADDR_V4MAPPED(&ipif->ipif_v6lcl_addr)
 
(from 109280-17)
 
4448673 streams freeze when netstat -ni 1 and nocanput goes up
 
(from 109280-16)
 
	This patch revision was generated to accumulate and obsolete the 
        feature changes introduced in feature point patch 111542-02.
 
(from 109280-15)
 
4224111 Multihomed E3500 servers does not working correctly under Solaris 2.6
 
(from 109280-14)
 
4340455 Use of PIM multicast routing protocol hooks causes kernel PANIC
 
(from 109280-13)
 
4352770 default route removal causes panic
 
(from 109280-12)
 
4390248 IP service is exclusive, causing severe performance problems
 
(from 109280-11)
 
4239154 ping -s is giving destination unreachable.
4374157 Cannot bind to interface with all ones subnetmask
 
(from 109280-10)
 
4304991 IP: M_FLUSH messages generated doing UNBIND can remove DETACH reqs
 
(from 109280-09)
 
      This patch revision was generated to accumulate and obsolete the 
      feature changes introduced in feature point patch 110553-01
 
(from 109280-08)
 
4387783 Update 2 breaks IPsec
 
(from 109280-07)
 
      This patch revision was generated to accumulate and obsolete the
      feature changes introduced in point patches 110181-01.
 
4317221 mipagent needs to read IP TTL to fully support reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken
4338724 panic due to NULL ipif
4347223 Network Multipathing should provide offlining capability.
 
(from 109280-06)
 
4338724 panic due to NULL ipif
 
(from 109280-05)
 
	This patch revision was generated to accumulate and obsolete
	the feature changes introduced in point patch 109049-06.
 
4305039 ipc_walk() does not cleanup causes bad trap in module "genunix"
4311938 Network Multipathing should be integrated into 2.8.
4299644 debug kernel panics; race between ip_close and ip_wsrv threads
4291034 arp: bad trap in ip while deleting logical interface during arp
4308728 ifconfig results in spurious message on the console
4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.
4333995 IPv4 source address should be obtained from the destination route.
4339375 PANIC when HIPPI interface mistakenly config into existing ethernet Mpath group
 
(from 109280-04)
 
4306362 Only one multicast client gets data on the same node.
4303422 bind to V4 multicast address using V6 socket fails.
 
(from 109280-03)
 
4337275 icmp error processing path needs to sanity check inner ip header
 
(from 109280-02)
 
4323830 ip_open/ip_close race condition causes bad trap in ipif_lookup_on_name
4336478 SIOCTMYADDR/SIOCTONLINK need not gain exclusive access to IP perimeter.
 
(from 109280-01)
 
4299951 ndd can set nca_vpmax/nca_ppmax to incorrect large values
 
(from 109049-06)
 
4339375 PANIC when HIPPI interface mistakenly config into existing ethernet Mpath group
 
(from 109049-05)
 
	This point patch revision was generated to include some escalated
	bugfixes.
 
4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.
 
(from 109049-04)
 
4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.
4333995 IPv4 source address should be obtained from the destination route.
 
(from 109049-03)
 
	This patch revision was generated to include an S8 8/00 showstopper
	fix for 4299951 (ndd can set nca_vpmax/nca_ppmax to incorrect large 
	values.
 
(from 109049-02)
 
4305039 Solaris 8: ipc_walk() does not cleanup causes bad trap in module "genunix"
 
(from 109049-01)
 
4311938 Network Multipathing should be integrated into Solaris 8
4299644 debug kernel panics; race between ip_close and ip_wsrv threads
4291034 arp: bad trap in ip while deleting logical interface during arp
4308728 ifconfig results in spurious message on the console
 
(from 110181-01)
 
4317221 mipagent needs to read IP TTL to fully support reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken
4347223 Network Multipathing should provide offlining capability.
 
(from 110553-01)
 
4278842 Add reverse tunneling to Foreign Agent and Home Agent
4313189 Mipagent needs to use routing socket to add/delete routes for rev-tun support
4324051 Mipagent needs to have a socket option to route reg reply directly to MN
4360818 Provide kernel support for Reverse tunneling and private addressing
4370123 AAA extensions to RADIUS interface between mipagent and radius
4376886 mipagent doesn't work with PPP interfaces
4375920 Foreign agent does not create two tunnels to HA when different COAs used
 
(from 111542-02)
 
Uprev to 111541-02 due to the update of ip in escalating S8 gate
 
(from 111542-01)
 
4434131 IP Network Interfaces should be auto-configured after DR post-attach


Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
----------------------------- 
 
Reboot the system after patch installation.
 
        NOTE 1: To get the complete fix for bug 4299951 (ndd can set
                nca_vpmax/nca_ppmax to incorrect large values), one needs
                to install the NCA Support for Apache Web Server patch, 
                109067-03 (or newer).
 
	NOTE 2:	To get the complete fix for bugs:
 
		4306362 Only one multicast client gets data on the same node
		4303422 bind to V4 multicast address using V6 socket fails
 
		one needs to install the following patches:
 
		109741-01 (or newer)	udp patch
		109743-01 (or newer)    icmp patch
 
	NOTE 3: To get the complete IP Multipathing support, one needs
                to install the following patches:
 
                109899-01 (or newer)    /kernel/drv/arp patch
                109743-02 (or newer)    /kernel/drv/icmp patch
		109280-05 (or newer)    /kernel/drv/ip patch
                109901-01 (or newer)    /etc/init.d/network and 
                                        /etc/rcS.d/S30network.sh patch
                109473-03 (or newer)    /kernel/drv/tcp patch
                109741-02 (or newer)    /kernel/drv/udp patch
                109903-01 (or newer)    /usr/lib/inet/in.ndpd patch
                109905-01 (or newer)    /etc/default/mpathd and 
                                        /sbin/in.mpathd patch
                109907-01 (or newer)    /sbin/ifconfig and /usr/sbin/ifconfig 
                                        patch
 
	NOTE 4:	To get full implementation for 4317221, please also install 
		the udp patch, 110197-01, or its newer revision.
 
        NOTE 5: To get Network Multipathing offlining capability, one needs
                to install the following patches:
 
                109280-07 (or newer)    /kernel/drv/ip patch
                109741-03 (or newer)    /kernel/drv/udp patch
                109903-02 (or newer)    /usr/lib/inet/in.ndpd patch
                109905-02 (or newer)    /sbin/in.mpathd patch
                109907-03 (or newer)    /sbin/ifconfig patch
                110396-01 (or newer)    /usr/lib/inet/mipagent patch
 
        NOTE 6: To get the complete support for the following:
 
                Add reverse tunneling to Foreign Agent and Home Agent
                Mipagent needs to use routing socket to add/delete 
                        routes for rev-tun support
                Mipagent needs to have a socket option to route reg 
                        reply directly to MN
                Provide kernel support for Reverse tunneling and 
                        private addressing
 
                one needs to install the following patches:
 
                110396-04 (or newer)    mipagent patch
                109280-09 (or newer)    ip/ipsecah patch
                109741-04 (or newer)    udp patch
                109743-03 (or newer)    icmp patch
                109473-05 (or newer)    tcp patch
 
	NOTE 7:	To get the complete feature for RCM suspend/resume, 
                one needs to install the following patches:
 
                108529-11 (or newer)    Kernel Update patch
                109905-05 (or newer)    /sbin/in.mpathd patch
                109280-16 (or newer)    /kernel/drv/ip patch
                111803-01 (or newer)    /usr/lib/rcm/modules/\
                                        SUNW_cluster_rcm.so patch
                110855-03 (or newer)    /usr/lib/rcm/modules/\
                                        SUNW_ip_rcm.so patch


README -- Last modified date: Friday, November 9, 2012