Patch-ID# 109279-08
Keywords: security ip ndd IP multipathing HIPPI Mpath mipagent offlining
Synopsis: SunOS 5.8: /kernel/drv/ip patch
Date: 15/Nov/00

Solaris Release: 8

SunOS release: 5.8

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.8: /kernel/drv/ip patch

	***********************************************************
	NOTE: This patch may contain one or more OEM-specific platform ports.
	      See the appropriate OEM_NOTES file within the patch for
	      information specific to these platforms.
 
	      DO NOT INSTALL this patch on an OEM system if a corresponding
	      OEM_NOTES file is not present (or is present, but instructs not
	      to install the patch), unless the OEM vendor directs otherwise.
	***********************************************************
	NOTE:   Refer to Special Install Instructions section for 
                IMPORTANT specific information on this patch.

BugId's fixed with this patch: 4291034 4299644 4299951 4302749 4303422 4305039 4306362 4308728 4310956 4311938 4317221 4320818 4323647 4323830 4324430 4333995 4335568 4336478 4337275 4338724 4339375 4347223 4387783 

Changes incorporated in this version: 4387783

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 109048-06 110180-01 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/kernel/drv/ip
/kernel/drv/ipsecah
/kernel/drv/sparcv9/ip
/kernel/drv/sparcv9/ipsecah
/kernel/strmod/sparcv9/tun
/kernel/strmod/tun
/usr/include/inet/ip.h
/usr/include/inet/ip_if.h
/usr/include/inet/ip_ire.h
/usr/include/inet/ip_multi.h
/usr/include/inet/mi.h
/usr/include/net/if.h
/usr/include/netinet/in.h
/usr/include/sys/sockio.h
/usr/lib/adb/ill
/usr/lib/adb/ipc
/usr/lib/adb/ipif
/usr/lib/adb/ire
/usr/lib/adb/iulp
/usr/lib/adb/sparcv9/ill
/usr/lib/adb/sparcv9/ipc
/usr/lib/adb/sparcv9/ipif
/usr/lib/adb/sparcv9/ire
/usr/lib/adb/sparcv9/iulp
/usr/lib/mdb/kvm/ip.so
/usr/lib/mdb/kvm/sparcv9/ip.so

Problem Description:

4387783 Update 2 breaks IPsec

(from 109279-07)

	This patch revision was generated to accumulate and obsolete
	the feature changes introduced in point patch 110180-01.

4317221 mipagent needs to read IP TTL to fully  support  reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken
4347223 Network Multipathing should provide offlining capability.

(from 109279-06)

4338724 panic due to NULL ipif

(from 109279-05)

	This patch revision was generated to accumulate and obsolete
	the feature changes introduced in point patch 109048-06.

4305039 ipc_walk() does not cleanup causes bad trap in module "genunix"
4311938 Network Multipathing should be integrated into 2.8.
4299644 debug kernel panics; race between ip_close and ip_wsrv threads
4291034 arp: bad trap in ip while deleting logical interface during arp
4308728 ifconfig results in spurious message on the console
4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.
4333995 IPv4 source address should be obtained from the destination route.
4339375 PANIC when HIPPI interface mistakenly config into existing ethernet Mpath group

(from 109279-04)

4306362 Only one multicast client gets data on the same node.
4303422 bind to V4 multicast address using V6 socket fails.

(from 109279-03)

4337275 icmp error processing path needs to sanity check inner ip header

(from 109279-02)

4323830 ip_open/ip_close race condition causes bad trap in ipif_lookup_on_name
4336478 SIOCTMYADDR/SIOCTONLINK need not gain exclusive access to IP perimeter.

(from 109279-01)

4299951 ndd can set nca_vpmax/nca_ppmax to incorrect large values

(from 109048-06)

4339375 PANIC when HIPPI interface mistakenly config into existing ethernet Mpath group

(from 109048-05)

	This point patch revision was generated to include some escalated
	bugfixes.

4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.

(from 109048-04)

4324430 Turning on multihoming can panic the machine under some cases.
4323647 A repaired IP Multipathed interface can get into unconfigurable state sometimes.
4333995 IPv4 source address should be obtained from the destination route.

(from 109048-03)

	This patch revision was generated to include an S8 8/00 showstopper
	fix for 4299951 (ndd can set nca_vpmax/nca_ppmax to incorrect large 
	values.

(from 109048-02)

4305039 ipc_walk() does not cleanup causes bad trap in module "genunix"

(from 109048-01)

4311938 Network Multipathing should be integrated into Solaris 8
4299644 debug kernel panics; race between ip_close and ip_wsrv threads
4291034 arp: bad trap in ip while deleting logical interface during arp
4308728 ifconfig results in spurious message on the console

(from 110180-01)

4317221 mipagent needs to read IP TTL to fully  support  reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken
4347223 Network Multipathing should provide offlining capability.

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

Reboot the system after patch installation.

        NOTE 1:	To get the complete fix for bug 4299951 (ndd can set
                nca_vpmax/nca_ppmax to incorrect large values), one needs
                to install the NCA Support for Apache Web Server patch, 
		109066-03 (or newer).

	NOTE 2: To get the complete fix for bugs:

		4306362 Only one multicast client gets data on the same node
		4303422 bind to V4 multicast address using V6 socket fails

		one needs to install the following patches:

		109740-01 (or newer)	udp patch
		109742-01 (or newer)    icmp patch

	NOTE 3: To get the complete IP Multipathing support, one needs
                to install the following patches:

                109898-01 (or newer)    /kernel/drv/arp patch
                109742-02 (or newer)    /kernel/drv/icmp patch
                109279-05 (or newer)    /kernel/drv/ip patch
                109900-01 (or newer)    /etc/init.d/network and 
                                        /etc/rcS.d/S30network.sh patch
                109472-03 (or newer)    /kernel/drv/tcp patch
                109740-02 (or newer)    /kernel/drv/udp patch
                109902-01 (or newer)    /usr/lib/inet/in.ndpd patch
                109904-01 (or newer)    /etc/default/mpathd and 
                                        /sbin/in.mpathd patch
                109906-01 (or newer)    /sbin/ifconfig and /usr/sbin/ifconfig 
                                        patch

	NOTE 4:	To get full implementation for 4317221, please also install 
		the udp patch, 110196-01, or its newer revision.

        NOTE 5: To get Network Multipathing offlining capability, one needs
                to install the following patches:

                109279-07 (or newer)    /kernel/drv/ip patch
                109740-03 (or newer)    /kernel/drv/udp patch
                109902-02 (or newer)    /usr/lib/inet/in.ndpd patch
                109904-02 (or newer)    /sbin/in.mpathd patch
                109906-03 (or newer)    /sbin/ifconfig patch
                110378-01 (or newer)    /usr/lib/inet/mipagent patch

----------------------------- 

	
