Patch-ID# 103631-15 Keywords: security ip tcp retransmit web RTO ifconfig arp udp icmp ping Synopsis: SunOS 5.5.1_x86: ip ifconfig arp udp icmp patch Date: Oct/29/99 Solaris Release: 2.5.1_x86 SunOS Release: 5.5.1_x86 Unbundled Product: Unbundled Release: Xref: This patch available for SPARC as patch 103630 Xref: This patch available for PPC as patch 103632 Topic: SunOS 5.5.1_x86: ip ifconfig arp udp icmp patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. BugId's fixed with this patch: 1166108 1226653 1226919 1233827 1240331 1248446 1259279 1262096 4012051 4019260 4033047 4034832 4034845 4040423 4057459 4105140 4242224 Changes incorporated in this version: 4242224 Relevant Architectures: i386 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: iss_x86-01 (or newer) Patches required with this patch: Obsoleted by: Files included with this patch: /kernel/drv/arp /kernel/drv/ip /kernel/strmod/arp /sbin/ifconfig /usr/sbin/ifconfig /kernel/drv/udp /kernel/drv/icmp Problem Description: 4242224 memory leak in IP (from 103631-14) 4033047 killing and restarting PPP can panic system in ip_bind (from 103631-13) 4057459 ifconfig also add routes on virtual interfaces This patch revision was generated to fix a panic caused by the original 4057459 bugfix. (from 103631-12) 1166108 host with published ARP table entries does not reply to ARP queries (from 103631-11) 4057459 ifconfig also add routes on virtual interfaces (from 103631-10) 4105140 ARP packet with source protocol addr of 0 flushes all on-link IRE_CACHE entries (from 103631-09) 1226919 ping -sv -i 127.0.0.1 224.0.0.1 causes a panic (from 103631-08) 4012051 Bug fix 1240331 is incorrect - MUST be backed out 4034845 ifconfig if slow with a large number (>1000) of IP addresses 4034832 netstat is slow with many (>1000) IP addresses (from 103631-07) 4040423 ss4000 with hme interface unable to boot with nsswitch setting using dns (from 103631-06) 4019260 icmp panic on mi_free() in icmp_close() in 2.5.1 (from 103631-05) 1226653 IP can send packets larger than MTU size to the driver (from 103631-04) 1262096 IP believes it has correctly reassembled a packet, but one fragment not received (from 103631-03) 1248446 arp cache is not getting updated appropriately (from 103631-02) 1259279 x86 byte ordering/endian problem in ip & arp for DL_UNITDATA_REQ (from 103631-01) 1240331 ifconfig of a non-existent virtual interface creates one even as a regular user 1233827 tcp retransmits too much for short connections as seen at web sites Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- Refer to the file called SPECIAL_NOTE_IFCONFIG shipped with this patch for the ifconfig manpage. If the reason to install this patch is to fix bugid 1233827 (tcp retransmits too much for short connections as seen at web sites), the 2.5.1 tcp patch (103581-01 or newer) is also required. To get the complete fix for bugid 4040423 (ss4000 with hme interface unable to boot with nsswitch setting using dns), one needs to install patch 103613-26 (or newer). NOTE: We recommend installing the following patches to get the complete support for large IP addresses: 103581-13 (or newer) kernel/drv/tcp patch 103595-10 (or newer) usr/lib/sendmail fixes 104332-03 (or newer) usr/sbin/rpcbind patch 104957-01 (or newer) usr/sbin/in.rarpd patch 104959-01 (or newer) usr/sbin/in.rdisc patch 104961-01 (or newer) usr/sbin/snoop patch