Error : crash CSmHttpPlugin::ResolveAgentName with IPv6 in Web Agent

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER
• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

 

When running a Web Agent on Apache, when the Browser and Web Agent
machines are using IPV6 Addresses, then the Apache crashes with the
following stack :

  Thread 129 (Thread 0x7f8921fef700 (LWP 27387)): 

    #0 0x00007f893ec268c7 in kill () from /lib64/libc.so.6 
    #1 0x0000000000470b32 in sig_coredump () 
    #2 
    #3 0x00007f893ec265e5 in raise () from /lib64/libc.so.6 
    #4 0x00007f893ec27dc5 in abort () from /lib64/libc.so.6 
    #5 0x00007f893c414a7d in __gnu_cxx::__verbose_terminate_handler() () from /usr/lib64/libstdc++.so.6 
    #6 0x00007f893c412bd6 in ?? () from /usr/lib64/libstdc++.so.6 
    #7 0x00007f893c412c03 in std::terminate() () from /usr/lib64/libstdc++.so.6 
    #8 0x00007f893c412d22 in __cxa_throw () from /usr/lib64/libstdc++.so.6 
    #9 0x00007f893c3b7db7 in std::__throw_out_of_range(char const*) () from /usr/lib64/libstdc++.so.6 
    #10 0x00007f893c3f472c in std::basic_string, 
    std::allocator >::at(unsigned long) () from /usr/lib64/libstdc++.so.6 
    #11 0x00007f88d8dbb35d in CSmHttpPlugin::ResolveAgentName(CSmHttpPluginConfig&, 
    std::basic_string, std::allocator >&, std::basic_string  std::char_traits, std::allocator >&, CSmWebFilterCtxt*) () 
      from /opt/CA/webagent/bin/libHttpPlugin.so  

 

Environment

 

Web Agent 12.52SP1CR06 64bit on Apache on RedHat;

 

Cause

 

There was a bug in the code where the Web Agent mistakenly treat some
hostname as an IPv6 address since the check is wrong and it checked
for all hexadecimal chars to determine if it's IPv6.

 

Resolution

 

Upgrade the Web Agent to 12.52SP1CR07 to fix this issue (1).

 

Additional Information

 

(1)

    Defects Fixed in 12.52 SP1 CR07

      | Salesforce Case Number | Internal Defect ID | Issue Description            |
      |------------------------+--------------------+------------------------------|
      |               00692205 | DE280513           | Web agent crashes when the   |
      |                        |                    | machines use IPV6 addresses. |

    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/release-notes/cumulative-releases/defects-fixed-in-12-52-sp1-cr07.html