OBSOLETE Patch-ID# 138888-08

	*********************************************************************
	NOTE: This patch may contain one or more OEM-specific platform ports.
	      See the appropriate OEM_NOTES file within the patch for
	      information specific to these platforms.
	      DO NOT INSTALL this patch on an OEM system if a corresponding
	      OEM_NOTES file is not present (or is present, but instructs not
	      to install the patch), unless the OEM vendor directs otherwise.
	*********************************************************************

6742822 ip_stack_t tracked by ire_t.ire_ipst may vaporize while off in ARP
6764046 ARP DAD timer may be clobbered post-6742822, leaving IP address unusable
6797796 IPv6-header-only will reach supposedly unreachable code
 
(from 138888-07)
 
6461872 core_seg() causes performance problems when hires_tick=1
6624858 mpt takes upwards of 15 seconds to configure
6670527 simultaneous connect() issued from multiple shared stack zones fails with EADDRINUSE
6694720 selection timeout in mpt(7D) no longer causes sd to retry command
6701979 resume_from_intr() forgets to save fprs register
6726858 mpt should not probe its own SCSI ID during BUS_CONFIG_ALL
6731698 mpt driver sometimes reports error messages for target IDs 256-271 on a parallel SCSI bus
6735420 raidctl crashes with a SIGSEGV when using libumem with diagnostics turned on
6763730 port in use detection incorrect for different local ip addresses
6790057 copyright year needs updating to 2009
6792878 Connected and Disconnected command timeouts are still seen with firmware introduced via CR 6573359
 
(from 138888-06)
 
6557950 BAD TRAP: panic in tcp_send_data
6705103 b_rptr of the newly allocated mblk is not incremented by sd_wroff
6714184 x86 CPU power management could be a little more aggressive
6715149 T-State support for Intel-based processors
6716347 ASUS P5PE Motherboard with Intel Pentium IV 3GHz does not report multiple supported frequencies
6720262 hot lock in FMA hurts TX throughput of FMA capable NIC drivers
6728373 genunix: [ID 133195 kern.warning] WARNING: hrm_balloc failures occured, increase hrm_blist_incr
6738200 CPU power management sometimes makes gratuitous xc_call().
6740922 loads of cpudrv: WARNING: notices
6749421 SpeedStep requires _PDC bit 1 to be enabled again
6753403 sendfilev() can send zero length packets down
 
(from 138888-05)
 
6566976 state limit check works when limit is reached only
6566982 state limit is not check when inserting states via IOCTL
6599215 T2000 boots slowly while printing "hat_kpm_mapin: kpm_enable not set"
6677460 ipfilter automatic flushing of state table entries needs to work the same as it does for NAT
6745212 panic in ip_find_unused_squeue due to a NULL pointer dereference
6793630 138888-04 cannot obsolete 126419 ( umountall patch ) as it's required by u4 Ku 120011-14
 
(from 138888-04)
 
6564672 capped memory in zone not visible as capped
6587128 SAS addresses needed in device nodes
6672963 encode devid failed for path target
6703850 VMODSORT functionality in pvn_vplist_dirty fails if given offset exceeds highest clean page offset
6720292 piu_ilu_ihbpep does not panic the domain
6733447 mpt driver panics while running pass through commands
6752427 deadlock between p_lock and a_lock
6755472 page_retire_thread causing high sys time due to seg_p_disable
6759393 swapctl32 fails in zone
6779399 bootadm update-menus fails with SVM mirrored root
6782269 cluster node panics running scate svm
 
(from 138888-03)
 
6297692 assert failure forwarding IPV6 traffic to unreachable destination
6401076 TX: mac-exempt UDP fails if local addr is shared IPv4 and a router added a CIPSO option
6452869 ipv6 MAC awareness is missing some basics, i.e. raw ipv6 mac awareness is non-existant
6478442 ip_wput_ire passed ALL_ZONES has bad assertions with an ipsec outbound policy
6518995 improved [s]sd-config-list and adding new tunable retries-timeout
6522934 when tcp fuse is on, taking a logical network interface down doesn't freeze connections
6578843 IPv6 tunnels subtract the encapsulation limit options from the effective mtu twice after CR#6535669
6595936 xsetitimer() ITIMER_REAL miscomputes signal time-to-expire with large negative jump in gethrestime()
6604195 bad trap panic in tcp_multisend() in Packet Filtering Hooks API
6627834 tsol_check_label fails to account for space released by label removal
6629370 tunnels apparently get mac_exempt in Tx when they should not -- missing CIPSO labels
6640590 TX: CIPSO and AH don't play well together
6640711 deadlock between ndp_lookup_then_add_v4 and ire_atomic_start
6658635 bad trap panic in ipif_get_name when passed a freed ipif_t *
6667486 zoneid != (-1) assertion on TX system while forwarding IPv6 packet
6672916 packets may be forwarded out non global zone interfaces
6673488 IPsec and IP need to disallow self-encapsulated packets without IPsec protection
6679750 panic: assertion failed: tcp->tcp_fuse_rcv_unread_cnt == 0
6709590 race between tcp_fuse_output and ifconfig down panics with NULL conn_ire_cache
6720056 S10_x86 (running on VMware) Sol has 5 secs i/o delay in case of scsi reserv. due to SD_BSY_TIMEOUT
6720748 surya resolver path can fail to update the IRE when IPMP is configured
6729368 panic from three-way cycle involving zonehash_lock, pidlock and p_lock
6733563 delete the obsolete interface ddi_getlongprop() in the sd driver
6758620 enable MPxIO for SATA drives with valid GUID
6764464 CR 6758620 falsely enabled MPXIO for SATA disks without valid WWN
 
(from 138888-02)
 
4089052 RFE: pcfs needs to support non-ASCII character filename
5070230 ip_process_ioctl does not become exclusive under some conditions
6301897 NIS+ client code can hang/crash if nis_cachemgr unavailable
6374618 PSARC/2005/446 Unicode encoding conversion functions at the kernel
6454671 assertion failed: pool->pool_ref == 0, file: ../../common/os/pool.c, line: 447 panic on snv_45
6490400 vhci_mpapi_update_tpg_acc_state_for_lu cann access freed memory
6585263 case-insensitive filename creation for PCFS breaks with non-ASCII characters
6585274 pcfs "foldcase" mount option does not work with non-ASCII characters
6585297 pcfs may falsely reject creation of valid non-ASCII filenames and will allow some invalid ones
6588176 support needed for LSI 1078 IR mode
6593985 "SYNCHRONIZE CACHE command failed (5)" errors are causing VCS Cluster to fail
6653407 Multicast 01:80:c2:00:00:02 is enabled after aggregation is deleted
6656421 aggr: aggr_send_port_disable can be called without aggr grp write lock
6657378 IPF address pools does not match addresses reliably for IPv6
6692526 ipmp ipv6 physical interface stayed down when the interfaces are failed back
6700193 MPxIO: add support to Dell MD3000/MD3000i arrays
6707308 lsilogic's version of mpt driver, 20% more efficient than Solaris version for blksz<=128k on x86
6708106 IPMP standby interface responds to the multicast ping requests
6712497 gratuitous arp not sent sometimes during IPMP failover under heavy network load
6712499 mpt should identify and report Dell SAS6/iR family of controllers
6712565 mpt driver should not limit LUN smaller than 32 for SAS
6715700 removing all properties of path before mdi_pi_free() causes mpapi panic in mdi_pi_get_client()
6718305 DELL MD3000/MD3000i need LSI-oem'd properties for sd driver
6718309 mpt driver cannot detect LUN greater than 128 on LSI's specific storage
6719447 sd mutex is hot and SSD performance suffers
6722139 mpt driver: incorrect ddi_dma_attr use for sense buf DMA and potential NULL addr use for sense buf
6724509 ip: sctp holds mutex while calling untimeout(): hang deadlock
6725139 OOW problem still present after patch 127888-09 has been applied
6726717 IPF persistent tunables still don't work with stack instances
6731974 incorrect calculation in fr_pullup
6738736 getcwd fails to utilize cached path when chroot/zone root directory is mountpoint
6743002 ipf_property_update() is too picky
6743637 ipfstat prints certain certain counters two times
6747651 in.ndpd creates multiple dummy prefix entries for same prefix
6749261 bugfix 6265036 (in Kernel patches 122300-30/137111-04) changed nanosleep and broke SMS
6749974 IPF does not know whether packet comes from local client (loopback) or from NIC interface
6751689 mpt should identify and report Dell SAS5* family of controllers
6763092 remove fsck_pcfs dependency on kernel functions
6768920 recursive mutex_enter panic occurs in sd
 
(from 138888-01)
 
5086678 can't remove interface from IPMP group in some cases
5106149 fs_fab_acl sets incorrect OTHER_OBJ/CLASS_OBJ values
6261101 VAC alias handling code should be compiled out for sun4v
6309233 GLDv3 drivers incorrectly process VLAN packets in raw mode
6343194 sendfile can cause deadlock in filesystems
6388567 VAC flushing is broken on US III-IV+ for large pages
6425678 DL_PROMISC_SAP should make all VLAN traffic visible on physical GLDv3 links
6434130 i_dls_ether_header() doesn't generate VLAN header when priority is non-zero
6434606 getfacl/setfacl of files/dirs over NFSv4 with ZFS underneath fail
6436003 QoS should be supported on non-VLAN streams as well
6442753 GLDv2/GLDv3 has several VLAN packet processing issues
6447334 sfmmu_kpm_vatopfn incorrectly returns -1
6457375 unable to halt zone when interface plumbed with 0.0.0.0 (IPMP)
6462857 panic in sendvec64()
6464397 mac_header_{cook,uncook}() failure can cause message to be freed twice
6478933 IRE_LOOPBACK interface routes should be blackholes
6502013 kernel heap corruptions have been seen during I/O stress test on domain0
6506052 deadlock between cageout thread and thread with KM_NOSLEEP
6507173 sockets should allocate minor numbers from higher order arena
6526499 interfaces in IPv6-only IPMP group can't get back to normal after link down/up cycle
6527579 port_dissociate() does not indicate whether fd was associated
6529822 syncq gets stuck and network performance degradation occurs intermittently
6530447 fix for 6502013/6527579 causes recursive mutex_enter
6532455 zones with ip-type exclusive IP instances can't autoboot
6556029 assertion failed: zone->zone_max_swap >= swap, file: ../../common/os/rctl.c, line: 3037
6606222 parsing tunnel parameters should be more robust
6638327 IRE with RTF_BLACKHOLE set can still return ICMP_UNREACHABLE in forwarding path
6649625 MPxIO not trying on all available paths on device and path failures to storage
6656657 ASSERT failure in ip_fast_forward() caused by uninitialized return action
6662807 Solaris Host Does not process multicast echo request packet with Hop by Hop options header
6672470 looping within uiomove()/xcopyout()/copyout_move()
6676148 zone boot hung, many processes hung in kern_preprom wait
6686086 system call numbers in /etc/name_to_sysnmum should be range checked
6692373 ptree and ps -ef hang during stress test
6700064 certain T5440 CMP/Memory configs won't boot
6704820 panic in ipsec_check_ipsecin_action during tcp_close
6707987 kpm has some VAC handling issues
6711501 all segop callers should call anon_resv_zone instead of anon_resv
6722014 T5440 plcnt plc_mt_pgmax != 0 assertion failure running with "small chunk allocations"
6743565 bugix 6704820 has inverted boolean --> makes IPsec go boom!
6743891 KU rejuvenation post S10 Update Release 6
 
(from 138106-02)
 
6724924 memory leak plugging subverted ASN.1 printing functionality in ikeadm/ipseckey
 
(from 138106-01)
 
6658263 ipseckey and ikeadm don't print ASN.1 ID values
 
(from 128340-01)
 
        This revision accumulates generic Sustaining patch 126264-01
        into Solaris S10U5 update.
 
(from 126264-01)
 
6608507 in.iked initiator sets UDP encap mode in transport mode even with no NAT
6620028 in.iked does not offer IPSEC_CLASSES_KEY_LENGTH attr for AES in P2 proposals with weak crypto
 
(from 137278-01)
 
        This revision accumulates generic Sustaining patch 137106-01
        into Solaris S10U5 update.
 
(from 137106-01)
 
6629735 file descriptor leak causes ipsecconf to core dump with many rules
6629812 ipsecconf can core dump when it can't open its internal policy file
 
(from 138850-01)
 
        This revision accumulates generic Sustaining patch 138114-01
        into Solaris S10U6 update.
 
(from 138114-01)
 
6564477 set_up_connection() doesn't handle return values of t_connect() properly
 
(from 128296-01)
 
        This revision accumulates generic Sustaining patch 128406-01
        into Solaris S10U5 update.
 
(from 128406-01)
 
6217236 pcfs module has incorrect FAT signature check
6351785 pcfs should support cluster sizes over 32Kb for Fat32 despite violating spec
6364444 pcfs can still crash in pc_getcluster with one-off overflow
6442904 panic in pcfs module's findTheDrive()
6467209 lstat64 system call loops forever in pc_fileclsize
 
(from 128322-01)
 
6396937 dhcpagent: cannot write /etc/dhcp/e1000g0.dhc
6514851 in.ndpd "giving up" message needs work
6524645 clear_lif_dhcp is too cautious
6525108 inconsistent handling of lists due to fix for CR 6209214
6528047 dhcp inform messages are sent with zero source
6541139 dhcpagent can leave timers running on drop
6541633 dhcpagent's route clean-up mechanism can misfire, removing default route
6544439 "ifconfig <if> dhcp inform" misbehaves on x86
6556196 netstat -D packet accounting is broken
6564306 dhcpagent logs interface up/down messages incorrectly
6607154 dhcp_ip_default() does not always enable IP_RECVIF and IP_RECVDSTADDR
 
(from 139458-01)
 
6678891 deadlock: cycle in blocking chain panic on aggr_m_promisc
6725302 MAC address of interfaces changed by dladm create-aggr after patch 138042-02 or 138042-03
 
(from 139551-01)
 
6528022 IPfilter does not handle any bcopy failures correctly (if at all)
6528443 ipnat -l shows more sessions than ipf_nattable_max
6644693 ipf panics because fnew.fin_qfm is not initialized in fr_send_ip()
6713984 if NAT entry is created, but packet gets blocked, entry should be removed
6714976 IPfilter: keep state doesn't interact properly with multicast
6715082 IPfilter: can't delete state entry using SIOCDELST ioctl
6716698 IPfilter: SIOCSTLCK ioctls call fr_lock() function without any error checking
6718524 IPfilter: incorrectly tracks and handles orphan state table and NAT table entries
6719268 enabling ipfilter causes 80% or more drop in packet throughput for multi-stream workloads
6721215 IPfilter: panic in ipf:fr_derefrule after restoring state table
6723135 IPfilter: possible for tcp fragments to be mishandled when NAT is involved
6723213 IPfilter: NAT suffers performance hit by holding exclusive locks longer than required
6732960 with a bit of massaging, a couple more NAT locks can be unlocked
6742115 IPfilter: NAT entries added with SIOCSTPUT are ignored if no rules exist
6744741 IPfilter: fr_movequeue() should be made more efficient to improve performance
6748749 IPF: deletes NAT entry too early - packets sent by return-rst rule sent untranslated
 
(from 139566-01)
 
6725309 sd should print device name in error messages
 
(from 139571-01)
 
6523832 raidctl cannot support mpxio-capable disks when mpxio enabled on HBA controller
 
(from 140334-01)
 
6673278 stmsboot -L/l is broken on snv_83 and later
6673281 stmsboot needs more clues
6691090 stmsboot -d failed to update /etc/vfstab with non-MPxIO device paths
6707555 stmsboot is lost in a ZFS root world
6744519 fix for 6546164 is subtly incorrect
6761587 disabling active-active boot disks with MPxIO fails in special case
 
(from 139562-02)
 
6640564 vds should not serialize disk image IO
6684721 file backed virtual i/o should be synchronous
6699271 dynamic virtual disk size management
6705190 uscsicmd on vdisk can overflow sense buffer
6716365 disk images on volumes should be exported using the ldi interface
6742587 vds can ACK a request twice
6752654 netinstall fails with file-based backend
 
(from 139562-01)
 
6661097 I/Os stuck in VDC/VDS layer causing hang
6683084 VIO Drivers need to use direct mapped shared memory dring descriptors for improved performance
6706462 race condition in ldc_mem_bind_handle when allocating map table
6723311 vds accesses imported dring outside of LDC dring acquire/release calls
6724714 ldc_mem_unbind_handle passes invalid page size code to page_get_shift()

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' scripts provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
NOTE 1:  Before installing this patch, please be sure to install the latest
         patch utilities patches for your OS. This list of patches is defined
         at http://sunsolve.sun.com
 
         Please use the pull down list which appears after the text:
         "Latest Patch Update: To ensure the correct functioning of the
         patching utilities on your system, stay up to date on the
         following patches"
 
NOTE 2:  Installation of this patch should be performed in single user mode.
 
NOTE 3:  A reconfiguration boot, boot -r, must be completed after patch
         installation or patch removal.
 
NOTE 4:  When patching a miniroot, the following patches are required in
         addition to this Kernel Patch.
 
         119254-59 (or greater)  Install and Patch Utilities Patch
         138866-01 (or greater)  sharetab patch
         119252-26 (or greater)  System Administration Applications Patch
         124628-08 (or greater)  CD-ROM Install Boot Image Patch
         124630-19 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
         In the example below we assume a s10u5 (5/08) miniroot is being
         patched.  This miniroot is in the /export/u5 directory and the
         patches are located in /var/tmp:
 
         1. Set the PKG_NONABI_SYMLINKS variable to true:
 
            # PKG_NONABI_SYMLINKS="true"
            # export PKG_NONABI_SYMLINKS
 
         2. Apply all required patches (listed above, including this Kernel
            patch), using syntax similar to the following example for patch
            119254-59:
 
            # patchadd -C /export/u5/Solaris/Tools/Boot /var/tmp/119254-59
 
         3. Modify the repository within the miniroot:
 
            # SVCCFG_REPOSITORY=/export/u5/Solaris_10/Tools/Boot/etc/svc/repository.db
            # export SVCCFG_REPOSITORY
            # svccfg -s system/manifest-import setprop start/exec = :true
            # svccfg -s system/filesystem/usr setprop start/exec = :true
            # svccfg -s system/identity:node setprop start/exec = :true
            # svccfg -s system/device/local setprop start/exec = :true
            # svccfg -s network/loopback:default setprop start/exec = :true
            # svccfg -s network/physical:default setprop start/exec = :true
            # svccfg -s milestone/multi-user setprop start/exec = :true
 
         4. Build the updated miniroot:
 
            # /export/u5/Solaris_10/Tools/Boot/boot/solaris/bin/root_archive  \
              packmedia /export/u5 /export/u5/Solaris_10/Tools/Boot
 
            At this stage /export/u5 is a patched 10/08 miniroot with this
            Kernel Patch.
 
            To copy this miniroot to an install server use the following
            command:
 
            # /export/u5/Solaris_10/Tools/setup_install_server