PK06127: ABEND0C1 IN DFHWBBLI (BASE) OFFSET X'970' BRANCH TO LOW CORE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The customer is getting an abend0c1 in DFHWBBLI (base) offset
  x'970'
  as we are branching to low core. Reg14 point to 05EF where WBBLI
  is making a gate call to DFHSOIS. He is getting reg5 value from
  reg6+10, and reg6 points to stack, but offset x'10 is zeros.
  In R3.1 trace WB 4557 (DECODE response) is suppressed
  if web trace level-1 is off. Before the code change,
  this trace was always issued. At this time R13 was
  addressing working storage area of DFHWBBLI. Now that
  the trace is skipped DFHWBBLI is not explicitly setting
  R13 before calling DFHSOIS.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: ABENDS0C1 caused by branch to lowcore   *
  *                      from DFHWBBLI offset X'970'.            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A web request is issued against a CICS TCPIPSERVICE which uses
  the sample security analyzer DFH$WBSA. This ends up with a call
  to server program DFHWBSN. DFHWBBLI detects this and attempts to
  call DFHSOIS to suppress the tracing of socket data. This
  attempt to call DFHSOIS ends up branching to low-core because
  register 13 does not address the kernel stack. If web level-1
  trace is active then register 13 will address the kernel stack
  due to a previous call to trace domain for trace entry WB 4557
  and the abend does not occur.
  
  ADDITIONAL KEYWORDS :- S0C1 0C1
  

Problem conclusion

• DFHWBBLI has been changed to ensure that register 13 addresses
  the kernel stack before calling DFHSOIS to suppress the tracing
  of socket data.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK05431

Modules/Macros

•    DESWBBLI DFHWBBLI
  

Fix information

• Fixed component name

  CICSTS 3.1 Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R400 PSY UK05431

     UP05/07/19 P F507

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.