PM80715: DFHIS0002 A SEVERE ERROR CODE(X'0686') HAS OCCURRED IN MODULE DFHISXM

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The dump shows that USERAUTH = IDENTIFY is specified on IPCONN
  definition.  A request is received from CTG to CICS.
  CICS provided an ISSB(/AG6) and attached the mirror task.
  
  The mirror started, INITIALIZE_RECEIVER call is issued but exits
  with an exception SECURITY_VIOLATION.
  SET_DEFERRED_MESSAGE call is issued to defer the error and
  handle it later.
  
  After BIND_RECEIVER finished, REPORT_MESSAGE call is issued
  to handle the security violation.  DFHACP is executed which
  will call DFHISIS SEND_ERROR to write message DFHIS1027.
  
  Since the data receiving is not finished, ISSB_STATE =
  IS_RECEIVE here which caused the IS7 not to be sent to the
  client.  The client task in CTG should hang there waiting for
  a response.
  
  The following work flow is similar to PM75241. After error
  handling, CICS then frees the ISSB(/AG6) and terminate the
  mirror task. The fields in ISSB get cleared.
  
  Since the request in task # is received with a large data size,
  the data receiving is not completed. CISR still is receiving
  the residue of the request and it doesn't know the mirror task
  has hit an error and terminated already.  During the data
  receiving, some fields in the freed ISSB(/AG6) are updated.
  ISSB_IS_BLE is updated to 2.
  
  When another request is received, this updated ISSB(/AG6) is
  used for that.  Here we can see the ISSB_IS_BLE = 2.
  It should be zero as the ISSB is just obtained through
  ALLOCATE_RECEIVE call.
  
  The mirror started, INITIALIZE_RECEIVER call is issued, since
  the incorrect ISSB_IS_BLE value. There is a mismatch between
  ISSB_IS_BLE and ISSB_WB_BLE. This is where the exception *EXC
  INVALID_STATE is issued followed by the DFHIS0002 message.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Exception INVALID_STATE with message    *
  *                      DFHIS0002 is issued when handling       *
  *                      a DPL request from CICS TG client.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  IPIC connection with USERAUTH(IDENTIFY) is setup between CICS
  TG and CICS. A DPL request with data size larger than 60K is
  received in CICS from CICS TG client. The CISR task is notified
  and an ISSB is obtained for this request. CISR then attaches
  a mirror task to handle this request. During the process of
  the mirror task, a security violation is detected. CICS then
  frees the ISSB and terminates the mirror task. However the
  rest of the data for this request is received and handled in
  CISR task which causes some fields in the freed ISSB are
  incorrectly updated.
  
  When a new request is received, CICS gets an ISSB for this
  request. If the updated ISSB (contains incorrect residual
  value) is used here, this request can not be handled by CICS
  successfully which causes an exception and DFHIS0002 message
  being issued.
  
  Additional Keywords: IS0002  DFHIS0002  msgDFHIS0002
  

Problem conclusion

• DFHISIS has been changed to receive all the data before the
  ISSB gets freed if a security violation happened.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM81587 UK93963 UK93964

Modules/Macros

•    DFHISIS
  

Fix information

• Fixed component name

  CICS TS Z/OS V4

• Fixed component ID

  5655S9700

Applicable component levels

• R600 PSY UK93963

     UP13/05/10 P F305

• R700 PSY UK93964

     UP13/05/10 P F305

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.