Patch-ID# 112902-07
Keywords: security ip IPQoS packet tunneling CGTP panic ipqos nexthdr regression ip_addr
Synopsis: SunOS 5.9: kernel/drv/ip Patch
Date: 02/Nov/02

Solaris Release: 9

SunOS release: 5.9

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.9: kernel/drv/ip Patch

	***********************************************************
	NOTE: This patch may contain one or more OEM-specific platform ports.
	      See the appropriate OEM_NOTES file within the patch for
	      information specific to these platforms.
 
	      DO NOT INSTALL this patch on an OEM system if a corresponding
	      OEM_NOTES file is not present (or is present, but instructs not
	      to install the patch), unless the OEM vendor directs otherwise.
	***********************************************************

BugId's fixed with this patch: 4396697 4417647 4425786 4479794 4488694 4502640 4592876 4639079 4644731 4645471 4647361 4648388 4649557 4656795 4658216 4662169 4673676 4682913 4691577 4712511 4724336 

Changes incorporated in this version: 4691577

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 112653-04 

Patches which conflict with this patch: 

Patches required with this patch: 112233-01 (or newer)

Obsoleted by: 

Files included with this patch:

/etc/init.d/inetsvc
/etc/rc0.d/K42inetsvc
/etc/rc1.d/K42inetsvc
/etc/rc2.d/S72inetsvc
/etc/rcS.d/K42inetsvc
/kernel/drv/ip
/kernel/drv/sparcv9/ip
/kernel/strmod/ip
/kernel/strmod/sparcv9/ip
/usr/include/inet/ip.h
/usr/include/inet/ip_if.h
/usr/include/inet/ip_ire.h
/usr/include/netinet/ip6.h

Problem Description:

4691577 ASSERT(ire->ire_type == IRE_CACHE) fails in ire_cache_cleanup() when forwarding

(from 112902-06)

4662169 changing ip_addr on one logical I/F can cause pkt loss via other I/F on the phys

(from 112902-05)

4656795 Directed broadcast forwarding does not work.

(from 112902-04)

4724336 ipsec vs cgtp duplication testcase failures

(from 112902-03)

4712511 Cannot setup ipqos on S9U1 b7.

(from 112902-02)

4502640 IP should avoid triggering spanning-tree hold-down periods when possible
4639079 panic after removing logical interface
4658216 Existence of ipsec policy creates bypass of ipqos policy
4673676 panic with assertion failure nexthdr != IPPROTO_FRAGMENT, in ip6.c, line3611
4682913 IPQoS causes a netbench regression in S9U1

(from 112902-01)

        This patch revision was generated to accumulate and obsolete
        the changes introduced in Solaris Update: s9u1 
        feature point patches:  112653-04

(from 112653-04)

4649557 assertion failed: CLASSD(group), file: ../../common/inet/ip_ire.c

(from 112653-03)

        This patch revision was generated to synchronize the
        package version string between s9 and s9u1

(from 112653-02)

4479794 Can't configure tunnels over IPv6
4396697 IPv6 tunnel support needed
4425786 ifconfig prints tunnel addresses incorrectly
4417647 snoop handles unknown IPv6 destination options incorrectly
4592876 in.ndpd daemonizes too soon
4648388 snoop's parsing of tunnel encap limit dst opts goes off into the weeds
4645471 CGTP feature required in Solaris 9 Update
4647361 Solaris needs IPQoS feature
4644731 IPQoS project degrades netbench performance when feature is disabled

(from 112653-01)

4488694 No mechanism to indicate if an interface supports CoS marking or not

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 

----------------------------- 

NOTE1:  To get the complete CoS RFE 4488694 (No mechanism to indicate if an 
        interface supports CoS marking or not) , please install patch 
        112911-01 (or newer).

NOTE2:  To get the complete CGTP feature, please install the following
        patches:

        112902-01       (or newer)      ip
        112904-01       (or newer)      tcp
        112917-01       (or newer)      ifrt
        112918-01       (or newer)      route
        112919-01       (or newer)      netstat

NOTE3:  To get the complete Packet Tunneling over IPv6 feature, please
        install the following patches:

        112902-01       (or newer)      ip
        112903-01       (or newer)      tun
        112912-01       (or newer)      libinetcfg.so.1
        112911-01       (or newer)      ifconfig
        112915-01       (or newer)      snoop
        112928-01       (or newer)      in.ndpd

NOTE4:  To get the complete IPQoS feature, please install the following
        patches:

        112902-01       (or newer)      ip
        112920-01       (or newer)      libipp
        112905-01       (or newer)      ippctl
        112906-01       (or newer)      ipgpc
        112927-01       (or newer)      IPQos Header
        112233-01       (or newer)      KU Patch
