PM98452: SUBPOOL 2 KEY 8 STORAGE CREEP HANC GSKSOC SSL

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You are using HTTP connection pooling with outbound SSL
  connections and are experiencing a storage creep (outside DSA
  storage) issue.
  .
  In the VSMDATA, there is a build up of x5000 byte pieces of
  storage in subpool 2 with key 8 that contain HANC and GSKSOC
  eyecatchers.
  .
  Further diagnosis found that
  when an outbound SSL socket is created via a URIMAP and that
  URIMAP has a SOCKETCLOSE value set, so that the outbound
  connection pooling is used, then when the socket gets timed out
  the gsk_secure_socket_close call is not being issued.
  
  .
  Additional Symptom(s) Search Keyword(s): KIXREVACC SSL HANC
  GSKSOC Storage CREEP
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: A storage leak in subpool 2, key 8      *
  *                      storage is experienced when HTTP        *
  *                      connection pooling is being used        *
  *                      with outbound SSL connections.          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When an outbound SSL socket is created via a URIMAP and that
  URIMAP has a SOCKETCLOSE value set, outbound connection pooling
  is used.  However when the SOCKETCLOSE value times out only a
  close() call is issued for the socket.
  No gsk_secure_socket_close() call is issued and so the GSKSOC
  control block is not freed which results in a storage leak.
  

Problem conclusion

• DFHSOPL has been changed to issue a gsk_secure_socket_close when
  closing a pooled connection socket that is using SSL.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI10145 UI16719

Modules/Macros

• DFHSOAD  DFHSOCK  DFHSODM  DFHSODUF DFHSOIS  DFHSOL   DFHSOLI
  DFHSOLS  DFHSOLX  DFHSOM01 DFHSOM02 DFHSOM03 DFHSOPL  DFHSORD
  DFHSOSE  DFHSOST  DFHSOS00 DFHSOS01 DFHSOS02 DFHSOS03 DFHSOS04
  DFHSOS05 DFHSOS06 DFHSOS07 DFHSOS08 DFHSOS09 DFHSOS10 DFHSOS11
  DFHSOS12 DFHSOS13 DFHSOS14 DFHSOS15 DFHSOS16 DFHSOS17 DFHSOS18
  DFHSOS19 DFHSOS20 DFHSOS21 DFHSOS22 DFHSOS23 DFHSOTB  DFHSOTI
  DFHSOTRI DFHSOUE  DFHSOXM
  

Fix information

• Fixed component name

  CICS TS Z/OS V4

• Fixed component ID

  5655S9700

Applicable component levels

• R700 PSY UI16719

     UP14/04/23 P F404

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.