Harris CSD Software Development
                         Software Patch Report

 Patch Name:       cnd6.2-001
 Project:          HCX
 Product:          cnd
 Date Issued:      Wed Oct  4 10:57:19 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  7.1

 Related Patches:  None.

 Related Modification Numbers:  None.

 Related SARs:  None.

 Problem Description:
  During heavy network usage, a Condor Ethernet controller port can
  experience performance problems due to contention for port resources.

 Resolution Description:
  Correct port resource queue access problem in the Condor device driver
  by implementing a round-robin approach to port queue access management.

 Modified Source:
  usr/src/uts/machine/hcxif/if_cnd.c
  usr/src/uts/machine/hcxif/if_cnd.h

 Object Modules:
  lib_cnd	if_cnd.o

 Conditions for Installation:
  A Series 4000 or Series 5000 system with a Condor Ethernet controller
  installed on the system and configured into the operating system.

 Possible Side Effects:
  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       cnd6.2-002
 Project:          HCX
 Product:          cnd
 Date Issued:      Thu Dec 14 09:19:11 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:

	1) Could not reconfigure MAC address without system hang
	2) No ethersnoop probe point

 Resolution Description:

	1) Decrement cc_init_wait correctly
	2) Add in if_snoop() probe point

 Modified Source:

	usr/src/uts/machine/hcxif/if_cnd.c

 Object Modules:

	lib_cnd	if_cnd.o

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                     Harris CSD Software Development
                         Software Patch Report

 Patch Name:       cnd6.2-003
 Project:          HCX
 Product:          cnd
 Date Issued:      Thu Jan 11 15:22:23 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-130

 Related Modification Numbers:  none

 Related SARs:  none

 Problem Description:
 (1) The mkassure(1MS) assurance tape utility does not know how to add
     the Condor Ethernet device driver product to the assurance tape
     it creates.
 (2) Default Condor configuration limits DMA burst mode affecting
     performance.

 Resolution Description:
 (1) Add a Trusted Computing Base (TCB) TCB.cnd file under the
     /mls/assure/TCB directory which lists those files to be added to
     the assurance tape by mkassure(1MS).
 (2) Performance of the kernel library lib_cnd has been improved by
     modifying the Condor Ethernet interface's DMA burst mode configuration.

 Modified Source:
 usr/src/cmd/assure/TCB/TCB.cnd
 usr/src/uts/machine/hcxif/if_cnd.c
 usr/src/uts/machine/hcxif/if_cnd.h

 Object Modules:
 mls/assure/TCB/TCB.cnd
 usr/src/uts/machine/hcxif/if_cnd.h
 lib_cnd

 Conditions for Installation:
   Patch may be installed on either an NH4000 or NH5000 6.2-based
   system which has both the Interphase Condor Ethernet product and
   and all applicable Condor patches installed.  The cx6.2-130 patch
   must be installed with this patch.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       cnd6.2-004
 Project:          HCX
 Product:          cnd
 Date Issued:      Mon Mar 25 18:18:49 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: cx6.2-135

 Related Modification Numbers: N/A

 Related SARs: N/A

 Problem Description:
 
 (See Resolution Description below)

 Resolution Description:

 Kernel support for up to 128 Condor interfaces was added. 
 Configurations with up to four Condor controllers,
 with up to four interfaces per controller, for a maximum of
 16 interfaces, are possible. 
 The number of slots available for these controllers depends
 on the machine's hardware configuration.
 
 A problem was corrected regarding Controller hangs when doing a
 reset during booting.
 
 Modified Source:

	usr/src/uts/machine/hcxif/if_cnd.c

 Object Modules:

	usr/src/uts/machine/M88K/lib_cnd	if_cnd.o
	usr/src/uts/machine/M88K-RT/lib_cnd	if_cnd.o
	usr/src/uts/machine/NH5000/lib_cnd	if_cnd.o
	usr/src/uts/machine/NH5000-RT/lib_cnd	if_cnd.o

 Conditions for Installation:

	Patch cx6.2-135 must be installed for this patch to work properly.

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-001
 Project:          HCX
 Product:          eg
 Date Issued:      Fri Aug 26 14:28:51 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-091, ise6.2-001, pg6.2-001

 Related Modification Numbers:  None

 Related SARs:  None

 Problem Description:
	Unbundling of the ethernet product requires this patch to the eg
	product to provide the appropriate version of the system header file.

 Resolution Description:
	This patch provides the appropriate version of the eg system header
	file.

 Modified Source:  None

 Object Modules:
	usr/src/uts/machine/hcxif/if_eg.h

 Conditions for Installation:
	Install on CX/UX 6.2 only.

 Possible Side Effects:
	None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-002
 Project:          HCX
 Product:          eg
 Date Issued:      Fri Nov  4 10:33:41 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: None

 Problem Description: 
   1. A system panic with a "unknown work queue" message from
      the Eagle driver.
   2. A system hang when there is a large volume of VME traffic.

 Resolution Description:
   1. Changed the Eagle driver to get the correct information from the
      Eagle board.
   2. Added detection of error condition to the Eagle driver.

 Modified Source:
   usr/src/uts/machine/hcxif/if_eg.c
   usr/src/uts/machine/hcxif/if_eg.h

 Object Modules:
   lib_eg: if_eg.o
   usr/src/uts/machine/hcxif/if_eg.h

 Conditions for Installation:
   Patch cx6.2-091 must be installed prior to installing this patch.

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-003
 Project:          HCX
 Product:          eg
 Date Issued:      Tue Dec 27 12:55:14 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None.

 Related Patches:  cx6.2-107, ise6.2-003, pg6.2-002

 Problem Description:
 Need a way to monitor network traffic at the packet level, in order to
 diagnose and correct networking problems.

 Resolution Description:
 Add support for the REIOGETSNOOP ioctl to the raw ethernet interface.

 Modified Source:
 usr/src/uts/machine/hcxif/if_eg.c

 Object Modules:
 lib_eg	if_eg.o

 Conditions for Installation:
 None.

 Possible Side Effects:
 None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-004
 Project:          HCX
 Product:          eg
 Date Issued:      Fri Feb  3 14:59:17 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  tcp_ip6.2-020

 Related Modification Numbers:
 None

 Related SARs:
 None

 Problem Description:
     If a packet longer than 1500 bytes is sent to the ip layer, and the
     ip layer breaks it into smaller packets, it is possible that a zero
     size transmit buffer will be generated.  If the Eagle driver attempts
     to send this zero-size buffer, the controller will hang.
    

 Resolution Description:
     Look for transmission of zero-size messages and ignore them in the driver.
 

 Modified Source:
   usr/src/uts/machine/hcxif/if_eg.c

 Object Modules:
   lib_eg	if_eg.o

 Conditions for Installation:
   None

 Possible Side Effects:
   None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-005
 Project:          HCX
 Product:          eg
 Date Issued:      Wed Mar 22 15:45:25 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD 

 Related Patches:
 None.

 Related Modification Numbers:
 None.

 Related SARs:
 None.

 Problem Description:
 DMA burst mode of a later version of the Condor controller 
 was not detected by the driver.

 Kernel virtual pages were not being mapped to extended memory
 on the Eagle controller due to an early exit in the egslave routine.
 This failure to use extended memory caused an ENOMEM error
 when performing direct I/O.

 Resolution Description:
 Detection of the controller variation was added and the slave routine
 was modified to use the extended memory of the Condor controller. 

 Modified Source:
 usr/src/uts/machine/hcxif/if_eg.c
 usr/src/uts/machine/hcxif/if_eg.h


 Object Modules:
 usr/src/uts/machine/hcxif/if_eg.h
 lib_eg	if_eg.o 

 Conditions for Installation:
 None.

 Possible Side Effects:
 None.

 Other Requirements:
 This patch is MANDATORY for CyberGuard systems that utilize the Condor
 Ethernet controller.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-006
 Project:          HCX
 Product:          eg
 Date Issued:      Thu Jun 22 11:35:09 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches:
 cx6.2-123. 

 Related Modification Numbers:
 None.

 Related SARs:
 None.

 Problem Description:
 The Multiple completion per interrupt capability of Eagle/Condor controller
 was not being utilized.  Differences between 6.2 source and 7.1 source
 did not allow a correction discovered in one release to be easily 
 incorporated into another release. 

 Resolution Description:
 Added support for multiple completions per interrupt and consolidated
 differences between the 6.2 and 7.1 versions of the driver. 
 The driver is currently set up such that only
 one #define needs to be changed in order to make the driver under the 
 7.1 or 6.2 hcxif directory. 
 The same header file is used for both versions of the driver.

 Modified Source:
 usr/src/uts/machine/hcxif/if_eg.c
 usr/src/uts/machine/hcxif/if_eg.h

 Object Modules:
 usr/src/uts/machine/hcxif/if_eg.h
 lib_eg if_eg.o

 Conditions for Installation:
 Patch cx6.2-123 must be installed prior to installing patch eg6.2-006 
 in order to have an up-to-date /usr/src/uts/cf/comspace.c file. 

 Possible Side Effects:
 None.

 Other Requirements:
 This patch is not mandatory for CyberGuard systems but is recommended.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-007
 Project:          HCX
 Product:          eg
 Date Issued:      Thu Jan 11 17:24:08 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  none

 Related Modification Numbers:  none

 Related SARs:  none

 Problem Description:
   The mkassure(1MS) assurance tape utility does not know how to add
   the Eagle Ethernet device driver product to the assurance tape
   it creates.

 Resolution Description:
   Add a Trusted Computing Base (TCB) TCB.eg file under the
   /mls/assure/TCB directory which lists those files to be added to
   the assurance tape by mkassure(1MS).

 Modified Source:
 usr/src/cmd/assure/TCB/TCB.eg

 Object Modules:
 mls/assure/TCB/TCB.eg

 Conditions for Installation:
   Patch may be installed on either an NH4000 or NH5000 6.2-based
   system which has the Interphase Eagle Ethernet product installed.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       eg6.2-008
 Project:          HCX
 Product:          eg
 Date Issued:      Mon Mar 25 18:33:46 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: N/A

 Problem Description:

 (See Resolution Description below)

 Resolution Description:

 This change fixed a problem where the Eagle controller "stopped"
 working and all transmit packets were dropped.
 
 Modified Source:

	usr/src/uts/machine/hcxif/if_eg.c

 Object Modules:

	usr/src/uts/machine/M88K/lib_eg		if_eg.o
	usr/src/uts/machine/M88K-RT/lib_eg	if_eg.o
	usr/src/uts/machine/NH5000/lib_eg	if_eg.o
	usr/src/uts/machine/NH5000-RT/lib_eg	if_eg.o

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-001
 Project:          HCX
 Product:          ethernet
 Date Issued:      Wed Nov  4 15:40:47 1992


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: cx6.2-003 tcp_ip6.2-001

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	Users require a higher performance interface to send and receive
	raw IP packets.

 Resolution Description:
	Develop user level library routines and direct I/O for Ethernet
	transmission to improve performance when transmitting and
	receiving raw IP packets. The library /usr/lib/libip.a is
	provided to have a streamlined interface when sending and
	receiving raw IP packets.

 Modified Source:
	usr/src/uts/machine/hcxif/if_eg.c
	usr/src/uts/machine/hcxif/if_eg.h
	usr/src/uts/machine/hcxif/if_ie.c

 Object Modules:
	lib_hcxif	if_eg.o
	lib_hcxif	if_ie.o
	usr/src/uts/machine/hcxif/if_eg.h

 Conditions for Installation: none

 Possible Side Effects: Use of the ip_lib(3n) library IP_RAW_IO mode for
	reading may not operate properly when connected to networks having
	other network traffic.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-002
 Project:          HCX
 Product:          ethernet
 Date Issued:      Tue Feb  2 12:49:25 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  7.0

 Related Patches:
 None

 Related Modification Numbers:
 None

 Related SARs:
 None

 Problem Description:
  The networking driver for the model CD0937 (Interphase Eagle) networking
  controller does not utilize the optimum transfer modes on the VME bus.

 Resolution Description:
  Enhance the Eagle Networking driver to utilize full 32-bit async block
  mode DMA when possible.

 Modified Source:
 usr/src/uts/machine/hcxif/if_eg.c

 Object Modules:
 lib_hcxif if_eg.o

 Conditions for Installation:
 None

 Possible Side Effects:
 None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-003
 Project:          HCX
 Product:          ethernet
 Date Issued:      Tue Mar  9 15:44:34 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	NH5800 systems require an up-to-date patch for ethernet products.

 Resolution Description:
	Create patch with all ethernet patches for NH5800.

 Modified Source:

 Object Modules:
	lib_hcxif	if_eg.o
	lib_hcxif	if_ie.o
	usr/src/uts/machine/hcxif/if_eg.h

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-005
 Project:          HCX
 Product:          ethernet
 Date Issued:      Mon Dec  6 09:17:08 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1P

 Related Patches: cx6.2-068

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:
  	This Patch supersedes patch ethernet6.2-004 which was never released.

  1)    The Ethernet driver problem occurs because the driver tries to maintain
        the data buffer address as an even address. When an odd address
        is found, the driver tries to write the first byte of data
        to the end of the previous buffer. However, the driver
  	writes the data byte to another area of memory. If the memory
        is outside of the address range, the kernel panics in the
        ie_transmit routine. If the memory is within the
        data buffers, the byte may overwrite a chain address. This
        will cause the kernel to panic some time later when this
        chain address (now corrupted) is accessed.

  2)	The ise was generating large number of underruns on systems with
	global memory.

 Resolution Description:
  1)    This patch resolves the problem by writing the data byte to
        the proper place, thus not corrupting any data area, and
        not accessing memory outside the addressable range.

  2)	The outbound data is now being double-buffered in local memory.

 Modified Source:
	usr/src/uts/machine/hcxif/if_ie.c
	usr/src/uts/machine/hcxif/if_ie.h

 Object Modules:
	lib_hcxif       if_ie.o
	usr/src/uts/machine/hcxif/if_ie.h

 Conditions for Installation: Installation of patch cx6.2-068.

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-006
 Project:          HCX
 Product:          ethernet
 Date Issued:      Tue Apr 26 10:43:23 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-086

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:
	VME64 needs to be utilized by the Interphase 5211 FDDI board.

 Resolution Description:
	Update configuration files to support VME64 as the default when
	an Interphase 5211 FDDI board is used on a system which supports 
	VME64.

 Modified Source:
	usr/src/uts/machine/hcxif/if_pg.c
	usr/src/uts/machine/hcxif/if_pg.h

 Object Modules:
	usr/src/uts/machine/hcxif/if_pg.h
	lib_hcxif   if_pg.o

 Conditions for Installation: 
	This patch requires the installation of patch cx6.2-086.

 Possible Side Effects: None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ethernet6.2-007
 Project:          HCX
 Product:          ethernet
 Date Issued:      Wed May 11 16:00:18 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:
   When there is heavy frontplane activity, devices connected to
   the Integraged Ethernet interface cannot open connections.

 Resolution Description:
   This patch permits the number of output messages queued at
   the Integrated Ethernet, Interphase Eagle Ethernet, and
   Interphase FDDI interfaces to be selected by the user, rather
   than be limited to the default value of 50. This prevents the
   dropping of messages which resulted in the inability to connect
   to the Integrated Ethernet interface.

 Modified Source:
   usr/src/uts/machine/hcxif/if_ie.c
   usr/src/uts/machine/hcxif/if_eg.c
   usr/src/uts/machine/hcxif/if_pg.c
   usr/src/uts/machine/cf/space.c

 Object Modules:
   lib_hcxif: if_ie.o
   lib_hcxif: if_eg.o
   lib_hcxif: if_pg.o
   usr/src/uts/machine/cf/space.c

 Conditions for Installation: 
   The three defines in the /usr/src/uts/machine/cf/space.c file:
      ieMaxQLen
      egMaxQLen
      pgMaxQLen
   must be set to the value desired by the user before the kernel
   is recompiled following installation of this patch.

 Possible Side Effects: 
   If the values chosen are too high, the queues may hold all the
   mbufs in the system. This patch attempts to keep this from happening
   by setting the number of mbufs to five (5) times the sizes chosen.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       int_network6.2-001
 Project:          HCX
 Product:          int_network
 Date Issued:      Tue Feb  2 12:27:29 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  7.0

 Related Patches:
 cx6.2-015, tcp_ip6.2-005

 Related Modification Numbers:
 None

 Related SARs:
 None

 Problem Description:
 1) Intelligent Networking driver would hang on systems having only
    local memory.
 2) Various typographical errors existed in the release notes for
    Intelligent Networking.
 3) Data loss could occur on transmission when multiple processes are
    utilizing the same interface.
 4) Busy systems could result in exhaustion of buffer pools for the
    driver, preventing reception of further data.
 5) The last bytes of a file being sent via ftp could be lost.

 Resolution Description:
 1) Correct the VME Modifier Code used on DMA transfers.
 2) Correct errors in release notes and manual page. 
 3) Add semaphores to protect the transmission and retransmission routines.
 4) Enhance the buffer management logic to properly notify the controller
    when the system is low on memory.
 5) Delay issuance of the close function when there are untransmitted messages
    and improve buffer management.

 Modified Source:
 usr/src/uts/machine/intnet/iph.c

 Object Modules:
 usr/catman/a_man/man7/iph.7.z
 usr/catman/a_man/man7/intelligent.7.z
 usr/catman/a_man/man7/networking.7.z
 usr/man/a_man/man7/iph.7
 usr/src/PRODUCTS/int_network_6.2_lpr
 usr/src/PRODUCTS/int_network_6.2_rel
 usr/src/PRODUCTS/int_network_6.2_si
 usr/src/uts/machine/intnet/iph.h
 usr/src/uts/machine/intnet/net_stat.h
 usr/include/intnet/iph.h
 usr/include/intnet/net_stat.h
 lib_intnet iph.o

 Conditions for Installation:
 None

 Possible Side Effects:
 None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-001
 Project:          HCX
 Product:          ise
 Date Issued:      Fri Aug 26 14:06:55 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-091, eg6.2-001, pg6.2-001

 Related Modification Numbers:  None

 Related SARs:  None

 Problem Description:
	Unbundling of the ethernet product requires this patch to the ise
	product to provide the appropriate version of the system header files.

 Resolution Description:
	This patch provides the appropriate version of the ise system header
	files.

 Modified Source:
	None

 Object Modules:
	usr/src/uts/machine/hcxif/if_ie.h
	usr/src/uts/machine/sys/mbuf.h

 Conditions for Installation:
	Install on CX/UX 6.2 only.

 Possible Side Effects:
	None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-002
 Project:          HCX
 Product:          ise
 Date Issued:      Fri Nov  4 14:57:32 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-101

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:
   During high volumes of output, the Integrated Ethernet driver
   panics.

 Resolution Description:
   Increase the number of command block structures to match the
   number of transmit messages that may be queued within the
   Integrated Ethernet driver.

 Modified Source:
   usr/src/uts/machine/hcxif/if_ie.c
   usr/src/uts/machine/hcxif/if_ie.h

 Object Modules:
   lib_ise: if_ie.o
   usr/src/uts/machine/hcxif/if_ie.h

 Conditions for Installation:
   Patch cx6.2-091 must be installed prior to installing this patch.

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-003
 Project:          HCX
 Product:          ise
 Date Issued:      Tue Dec 27 12:51:02 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None

 Related Patches:  cx6.2-107, eg6.2-003, pg6.2-002

 Problem Description:
 Need a way to monitor network traffic at the packet level, in order to
 diagnose and correct networking problems.

 Resolution Description:
 Add support for the REIOGETSNOOP ioctl to the raw ethernet interface.

 Modified Source:
 usr/src/uts/machine/hcxif/if_ex.c
 usr/src/uts/machine/hcxif/if_ie.c

 Object Modules:
 usr/man/a_man/man7/ethernet.7
 usr/catman/a_man/man7/ethernet.7.z
 lib_ise	if_ex.o
 lib_ise	if_ie.o

 Conditions for Installation:
 None

 Possible Side Effects:
 None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-004
 Project:          HCX
 Product:          ise
 Date Issued:      Thu Jun  8 11:52:47 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:
 None.

 Related Patches:
 cx6.2-121

 Related Modification Numbers:
 None.

 Related SARs:
 None.

 Problem Description:
 There is no support for multiple ports on the Condor ethernet
 controller.

 Resolution Description:
 This patch adds support for the Condor ethernet driver to enconfig.

 Modified Source:
 usr/src/cmd/enconfig.c
 usr/man/a_man/man1/enconfig.1m

 Object Modules:
 usr/sbin/enconfig
 usr/catman/a_man/man1/enconfig.1m.z

 Conditions for Installation:
 None.

 Possible Side Effects:
 None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-005
 Project:          HCX
 Product:          ise
 Date Issued:      Tue Sep  5 15:48:01 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: N/A

 Problem Description:

  When all ise ethernet command buffers are exhausted, the machine will 
  panic.  This was caused by not checking if the buffer had any room left.

 Resolution Description:

  Check the command buffers, and pause if they are all full.

 Modified Source:

  usr/src/uts/machine/hcxif/if_ie.c

 Object Modules:

  lib_ise       if_ie.o

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-006
 Project:          HCX
 Product:          ise
 Date Issued:      Thu Jan 11 17:29:45 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  none

 Related Modification Numbers:  none

 Related SARs:  none

 Problem Description:
   The mkassure(1MS) assurance tape utility does not know how to add
   the HCSC Integral Ethernet product to the assurance tape it creates.

 Resolution Description:
   Add a Trusted Computing Base (TCB) TCB.ise file under the
   /mls/assure/TCB directory which lists those files to be added to
   the assurance tape by mkassure(1MS).

 Modified Source:
 usr/src/cmd/assure/TCB/TCB.ise

 Object Modules:
 mls/assure/TCB/TCB.ise

 Conditions for Installation:
   Patch may be installed on either an NH4000 or NH5000 6.2-based
   system which has the HCSC Integral Ethernet SCSI product installed.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-007
 Project:          HCX
 Product:          ise
 Date Issued:      Mon Mar 25 13:53:23 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: NONE

 Related Modification Numbers: NONE

 Related SARs: NONE

 Problem Description:
	In file "uts/machine/hcxif/if_ie.c", one assignment statement was 
	written as a conditional statement -- comparison operator (==) was used 
	instead of assignment operator (=).

 Resolution Description:
	Changed the equality operator to an assignment operator

 Modified Source:
 usr/src/uts/machine/hcxif/if_ie.c

 Object Modules:
 lib_ise	if_ie.o

 Conditions for Installation: NONE

 Possible Side Effects: NONE
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       ise6.2-008
 Project:          HCX
 Product:          ise
 Date Issued:      Fri Jun 14 14:46:31 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:

  1) When doing an enconfig on a Peregrine 4211 or 5211 FDDI controller, 
     bogus information was returned.

 Resolution Description:

  1) It turned out that enconfig was doing an extra read on the kernel 
     data structure and the file position pointer was being moved past the 
     end of the structure.  Removed the extra read.

 Modified Source:

	usr/src/cmd/enconfig.c

 Object Modules:

	usr/sbin/enconfig

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Concurrent Computer Corporation
                         Software Patch Report

 Patch Name:	ise6.2-009
 Project:	HCX
 Product:	ise
 Date Issued:	Fri Nov 08 15:22:01 1996


 Release on Which Patch May Be Installed: 6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: None

 Problem Description: 

	Miscellaneous errors in man pages.

 Resolution Description: 

	Fix and redistribute the man pages.

 Modified Source: None

 Object Modules: 

	usr/catman/a_man/man1/enconfig.1m.z
	usr/catman/a_man/man7/ethernet.7.z
	usr/man/a_man/man1/enconfig.1m
	usr/man/a_man/man7/ethernet.7

 Conditions for Installation: None

 Possible Side Effects: None

                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-001
 Project:          HCX
 Product:          nfs
 Date Issued:      Fri Feb 11 11:17:05 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:   TBA

 Related Patches:   None

 Related Modification Numbers:   None

 Related SARs:   HM10964

 Problem Description:
 1. When file sharing is used (mostly by PCs using the NightHawk as an NFS
    server) rpc.lockd uses a hash function to index a table of sharing
    records.  This function can sometimes yield negative values, causing
    rpc.lockd to coredump.

 2. During the boot process, rpc.lockd implements a grace period during which
    lockdaemon peers can re-acquire locks they held prior to the reboot.
    During this period, kernel messages are acknowledged and kept in a cache,
    but no action is taken on their behalf.  At the end of the grace period,
    rpc.lockd discards all kernel messages from its message cache.  rpc.lockd
    then gets confused and uses a stale pointer to send a reply back to the
    last kernel message it received.  This produces a message from rpc.lockd
    on the system console (or the debug trace file):
	rpc.lockd: unknown klm_reply proc(0)

    A truncated reply is then sent to the kernel.  The kernel then complains
    on the system console with the following message:
	lock-manager: RPC error: RPC: Can't decode result

 Resolution Description:
 1. Modify the hash function so the hash value is always non-negative.

 2. Modify the code in rpc.lockd that discards messages from the cache so the
    last kernel message pointer is cleared when that message is discarded.

 Modified Source:
	usr/src/cmd/rpc.lockd/prot_share.c
	usr/src/cmd/rpc.lockd/prot_msg.c

 Object Modules:
	usr/etc/rpc.lockd

 Conditions for Installation:   None

 Possible Side Effects:   None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-002
 Project:          HCX
 Product:          nfs
 Date Issued:      Tue Sep 27 16:49:21 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches:  cx6.2-099, lan_sx6.2-006, tcp_ip6.2-016, cx_sx6.2-008

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:
	Need to rebuild nfs modules because of socket size change.

 Resolution Description:
	Rebuild nfs modules.

 Modified Source:
	None

 Object Modules:
	lib_krpc  klm_lockmgr.o
	lib_nfs   nfs_vfsops.o
        lib_nfs   nfs_server.o
        lib_nfs   nfs_subr.o
	lib_rpc   subr_kudp.o
        lib_rpc   clnt_kudp.o
        lib_rpc   authdes_subr.o
        lib_rpc   kudp_fastsend.o
        lib_rpc   svc.o
        lib_rpc   svc_kudp.o

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-003
 Project:          HCX
 Product:          nfs
 Date Issued:      Wed Jun 14 11:35:46 1995


 Release on Which Patch May Be Installed:   
	6.2

 Release Which Corrects Problem: 
	7.1

 Related Patches:
	None.

 Related Modification Numbers:
	None.

 Related SARs:
	HM11516

 Problem Description:
	When writing to a file that is in a remotely mounted NFS
	filesystem, sometimes incorrect data will be written into
	the file.

 Resolution Description:
	Added some vnode/rnode locking protection in several places
	in the kernel that deal with modifying the NFS write buffer
	count.

 Modified Source:
	usr/src/uts/machine/nfs/nfs_vnodeops.c

 Object Modules:
	lib_nfs		nfs_vnodeops.o

 Conditions for Installation:
	Any NFS client CX/UX 6.2P system.

 Possible Side Effects:
	None.

                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-004
 Project:          HCX
 Product:          nfs
 Date Issued:      Tue Dec 5 11:46:15 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: nfs6.2-003

 Related Modification Numbers: None

 Related SARs: HM11681

 Problem Description:
	1. After installing patch nfs6.2-003, sync operations on
           remote nfs filesystems will sometimes cause remote files to 
	   be padded out to a filesystem block size boundary.

	2. The system may deadlock/hang when a sync of the nfs filesystems
	   and an nfs write getblk() both try to obtain locks on 
	   the same buffer lock and rnode table hash lock.

 Resolution Description:
	1. Modified the nfs_strategy() routine.
 
           The code that reduces the write buffer byte count down to
           the size of the file would only be done if the vnode lock
           was owned by the caller.
 
	   In the case of sync operations, the vnode lock may not be
	   locked by the caller.  In this case, the round down to the
	   end-of-file operation was being skipped.  Unfortunately,
	   sync write operation byte counts tend to be set to blocksize,
	   which may sometimes write out beyond the end of file.
	   Therefore, for sync operations that do not own the vnode
	   lock, execute more cautious code that reduces the buffer
	   byte count down to the current end-of-file.

	2. Changed the rflush() routine, which is used on sync() operations, 
	   so that it releases the rnode table hash lock while flushing out 
	   data of an rnode/vnode.

 Modified Source:
	usr/src/uts/machine/nfs/nfs_vnodeops.c
	usr/src/uts/machine/nfs/nfs_subr.c

 Object Modules:
	lib_nfs		nfs_vnodeops.o
	lib_nfs		nfs_subr.o

 Conditions for Installation:
	All CX/UX 6.2P systems using NFS.

 Possible Side Effects:
	None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-005
 Project:          HCX
 Product:          nfs
 Date Issued:      Tue Nov 21 15:06:43 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:

	When file sharing is used, rpc.lockd uses a hash function to index a
	table of shared records.  This function can sometimes yield negative
	values, causing rpc.lockd to coredump.  This is the same problem that
	patch nfs6.2-001 fixes (see problem 1 in the Problem Description for
	this patch); however a different part of the code caused the negative
	value in the hash function.  This was seen from accessing a file from
	a PowerUnix filesystem via NFS.


 Resolution Description: 

	Modified hash function so hash value is always non-negative.

 Modified Source:

	usr/src/cmd/rpc.lockd/udp.c

 Object Modules:

	usr/etc/rpc.lockd

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-006
 Project:          HCX
 Product:          nfs
 Date Issued:      Tue Feb 27 14:55:47 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:	TBD

 Related Patches:	None.

 Related Modification Numbers:	None.

 Related SARs:	HM11708

 Problem Description:

	When using touch on a PowerUX system to update the access and modify
times of a file residing on a NFS-mounted CX/UX system disk, the file's modify
time gets set to Dec 31 1969.  This occurs only if no time is specified on the
touch command.


 Resolution Description:

	Changed rfs_setattr() to fill in the current time if it sees a request
with the tv_usec field set to 1000000.  PowerUX systems create requests this
way but CX/UX systems do not, apparently because of a discrepancy in NFS
protocol versions with the CX/UX system having the older version of the two.


 Modified Source:
usr/src/uts/machine/nfs/nfs_server.c

 Object Modules:
lib_nfs		nfs_server.o

 Conditions for Installation:	None.

 Possible Side Effects:		None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-007
 Project:          HCX
 Product:          nfs
 Date Issued:      Fri Jun 28 14:01:15 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: NONE

 Related Modification Numbers: NONE

 Related SARs: HM11843

 Problem Description:
	NFS automount was not properly deallocating memory and grew in size
	during operation. 

 Resolution Description:
	Problem was due to a missing `free(fs)' at the end of procedure
	free_filsys. Source code "usr/src/cmd/automount/auto_node.c" was
	modified to fix the problem.

 Modified Source:
 usr/src/cmd/automount/auto_node.c

 Object Modules:
 usr/etc/automount

 Conditions for Installation: NONE

 Possible Side Effects: NONE
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-008
 Project:          HCX
 Product:          nfs
 Date Issued:      Fri Aug 16 10:56:56 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-141

 Related Modification Numbers: NONE

 Related SARs: HM11453

 Problem Description:
        For some rpc problems, massive error messages can be dumped to the
        system console before the problems got fixed, this will overwhelm
        other useful messages.

 Resolution Description:
        A tunable variable "lock_rpc_error_quiet" is added to "space.c".
        Now the rpc error messages to console can be turned on/off by changing
        the value of "lock_rpc_error_quiet". The default value is to turn on
        the message.

 Modified Source:
 usr/src/uts/machine/krpc/klm_lockmgr.c

 Object Modules:
 lib_krpc	klm_lockmgr.o

 Conditions for Installation: 
        Need to install patch cx6.2-141 first.

 Possible Side Effects: NONE
                                        return to index
================================================================================

        Concurrent Computer Corporation Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-009
 Project:          HCX
 Product:          nfs
 Date Issued:      Wed Nov 20 09:20:02 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: HM11919

 Problem Description: 
	When SATAN was run against a CX/UX system, it would cause
	all sorts of problems, including a possible panic.  It was 
	determined that this was occurring when a short packet was 
	sent to a port being serviced via RPC.  

 Resolution Description:
       The problem was in the code which processes incoming
        RPC service requests (which includes NFS requests).

        All incoming requests are delivered to this routine in the
        form of mbufs.

        It is possible for a request to span multiple mbufs (ie: an mbuf
        chain where part of the request is in the first mbuf, continues
        into the second mbuf, and so on).

        As illustrated below, this routine was checking if the current
        mbuf had at least 4*sizeof(u_long) (or 16) bytes, and, if it
        didn't, it would call m_pullup().

        The purpose of m_pullup() is to traverse an mbuf chain and
        "pull up" at least n (in this case 16) bytes from the front
        of the chain into a new mbuf (it will then recreate the rest
        of the mbuf chain as hanging off of that one, and free the old
        first mbuf).

        Here is the problem that the original coder missed:
                When m_pullup() doesn't find at least n bytes,
                it will call m_freem(m) (and return an error code).

        Here is the code:
        ----------------------------------------------------------
         if ((m->m_len < 4*sizeof(u_long)) &&
             (m_pullup(m,4*sizeof(u_long)) == 0)) {
                  rsstat.rsbadlen++;
                  goto bad;
         }
         ...
         bad:
                m_freem(m);
                ...

        ----------------------------------------------------------

        We are properly checking the error code, but then we
        were jumping down to "bad".  "bad" would then call
        m_freem() on m (whose value never changed to this
        calling routine).

        The end result was that when we couldn't pull up at least
        16 bytes in the incoming request, we would wind up calling
        m_freem() on the same chain twice.  The first time would put
        the chain on the free list.  The second time was attempting to 
	put the chain that's already on the free list on to the free 
	list.

        The end result was that somehow multiple references
        to the same mbuf could be acquired, and 'funky' stats
        (such as "-574958294/220 mbufs in use") would be
        reported.

        The fix was as simple as adding one line (see below).

         if ((m->m_len < 4*sizeof(u_long)) &&
             (m_pullup(m,4*sizeof(u_long)) == 0)) {
                  rsstat.rsbadlen++;
Insert            m=0; /*Don't free -- m_pullup() does that*/
                  goto bad;
         }
         ...
         bad:
         m_freem(m);
         ...

        By setting 'm' to NULL when m_pullup() fails, the second m_freem()
        (in bad) will not try to (nor will it be able to) free it again.

 Modified Source: 
 usr/src/uts/machine/rpc/svc_kudp.c

 Object Modules:
 lib_rpc svc_kudp.o

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Concurrent Computer Corporation
                         Software Patch Report

 Patch Name:	nfs6.2-010
 Project:	HCX
 Product:	nfs
 Date Issued:	Fri Nov 08 15:31:55 1996


 Release on Which Patch May Be Installed: 6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: None

 Problem Description: 

	Miscellaneous errors in man pages.

 Resolution Description: 

	Fix and redistribute the man pages.

 Modified Source: None

 Object Modules: 

	usr/catman/a_man/man1/spray.1m.z
	usr/catman/a_man/man1/yppoll.1m.z
	usr/catman/a_man/man1/ypserv.1m.z
	usr/catman/a_man/man1/ypwhich.1m.z
	usr/catman/a_man/man1/ypxfr.1m.z
	usr/catman/p_man/man3/intro.3r.z
	usr/catman/p_man/man3/mount.3r.z
	usr/catman/p_man/man3/rpc.3n.z
	usr/catman/p_man/man3/xdr.3n.z
	usr/catman/p_man/man4/nfs.4p.z
	usr/catman/p_man/man4/statmon.4.z
	usr/catman/u_man/man1/chkey.1.z
	usr/catman/u_man/man1/rpcgen.1.z
	usr/man/a_man/man1/spray.1m
	usr/man/a_man/man1/yppoll.1m
	usr/man/a_man/man1/ypserv.1m
	usr/man/a_man/man1/ypwhich.1m
	usr/man/a_man/man1/ypxfr.1m
	usr/man/p_man/man3/intro.3r
	usr/man/p_man/man3/mount.3r
	usr/man/p_man/man3/rpc.3n
	usr/man/p_man/man3/xdr.3n
	usr/man/p_man/man4/nfs.4p
	usr/man/p_man/man4/statmon.4
	usr/man/u_man/man1/chkey.1
	usr/man/u_man/man1/rpcgen.1

 Conditions for Installation: None

 Possible Side Effects: None

                                        return to index
================================================================================

             Concurrent Computer Corp. Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-011
 Project:          HCX
 Product:          nfs
 Date Issued:      Wed Sep 10 14:01:14 1997


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: HM11899

 Problem Description:

  1. HM11899
     ------- 
     File creation on an automounted partition did not inherit correct
     group id. 

 Resolution Description:

  1. HM11899
     -------
     Modified the automount command so that it set up the proper mount flags
     to be propagated to the lower layers of nfs.

 Modified Source:
		usr/src/cmd/automount/auto_mount.c

 Object Modules:
		usr/etc/automount

 Conditions for Installation:

 Possible Side Effects: None
                                        return to index
================================================================================

	    Concurrent Computer Corporation Software Development
                         Software Patch Report

 Patch Name:       nfs6.2-012
 Project:          HCX
 Product:          nfs
 Date Issued:      Tue Sep 22 15:48:36 1998


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: NONE

 Related Modification Numbers: NONE

 Related SARs: HM12222, HM12348

 Problem Description:
    (1) When using the automounter with a large map the automounter dies
        and causes user shells in auto-mounted directories to freeze. The
        problem has been traced to a pointer not getting reset in a loop
        and eventually overwriting the stack for the process.
    (2) Init process may hang doing an nfs sync.  As a result, the operations
        that init does such as spawning new terminal processes or removal of
        orphaned zombie processes is not done.

 Resolution Description:
    (1) Added code to reset pointer in the loop.
    (2) The hang was caused by a previous nfs operation. If the file was
        truncated during the operation, it could leave pages locked forever.
        Fix is to always release page locks even if a file is truncated.

 Modified Source:
	usr/src/cmd/automount/auto_look.c
	usr/src/uts/machine/nfs/nfs_vnodeops.c

 Object Modules:
	usr/etc/automount
	lib_nfs         nfs_vnodeops.o

 Conditions for Installation: NONE

 Possible Side Effects: NONE
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       pg6.2-001
 Project:          HCX
 Product:          pg
 Date Issued:      Fri Aug 26 14:44:23 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-091, ise6.2-001, eg6.2-001

 Related Modification Numbers:  None

 Related SARs:  None

 Problem Description:
	Unbundling of the ethernet product requires this patch to the pg
	product to provide the appropriate version of the system header file.

 Resolution Description:
	This patch provides the appropriate version of the pg system header
        file.

 Modified Source:  None

 Object Modules:
	usr/src/uts/machine/hcxif/if_pg.h

 Conditions for Installation:
	Install on CX/UX 6.2 only.

 Possible Side Effects:
	None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       pg6.2-002
 Project:          HCX
 Product:          pg
 Date Issued:      Tue Dec 27 12:57:38 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None.

 Related Patches:  cx6.2-107, ise6.2-003, eg6.2-003

 Problem Description:
 Need a way to monitor network traffic at the packet level, in order to
 diagnose and correct networking problems.

 Resolution Description:
 Add support for the REIOGETSNOOP ioctl to the raw ethernet interface.

 Modified Source:
 usr/src/uts/machine/if_pg.c

 Object Modules:
 lib_pg	if_pg.o

 Conditions for Installation:
 None.

 Possible Side Effects:
 None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       pg6.2-003
 Project:          HCX
 Product:          pg
 Date Issued:      Thu Jan 11 17:56:55 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  none

 Related Modification Numbers:  none

 Related SARs:  none

 Problem Description:
   The mkassure(1MS) assurance tape utility does not know how to add
   the FDDI device driver product libraries to the assurance tape it
   creates.

 Resolution Description:
   Add a Trusted Computing Base (TCB) TCB.pg file under the
   /mls/assure/TCB directory which lists those files to be
   added to the assurance tape by mkassure(1MS).

 Modified Source:
 usr/src/cmd/assure/TCB/TCB.pg

 Object Modules:
 mls/assure/TCB/TCB.pg

 Conditions for Installation:
   Patch may be installed on either a NH4000 or NH5000 system running
   6.2-based CX/UX which has the Interphase Peregrine FDDI device driver
   product installed.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       pg6.2-004
 Project:          HCX
 Product:          pg
 Date Issued:      Thu Oct  3 11:12:38 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:
 	TBD

 Related Patches:
 	None

 Related Modification Numbers:
 	None

 Related SARs:
 	None

 Problem Description:
 	The Interphase 5211 controller would fail to reset at system boot time.
 	The driver would check hardware status before it was valid. 

 Resolution Description:
 	Modified the 5211 driver pg_reset() routine to allow more time for the
 	hardware to reset itself.

 Modified Source:
	usr/src/uts/machine/hcxif/if_pg.c

 Object Modules:
	lib_pg  if_pg.o

 Conditions for Installation:
	None.

 Possible Side Effects:
	None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       snmp_agent6.2-001
 Project:          HCX
 Product:          snmp_agent
 Date Issued:      Thu Dec 21 13:45:03 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-129 and tcp_ip6.2-027

 Related Modification Numbers:  None.

 Related SARs:  None.

 Problem Description:
    Modifications to the tcpcb structure in the tcp_ip6.2-027 patch have
    resulted in a change in that structure's size.  This size change
    affects the operation of the SNMP agent which relies on specific
    knowledge of that structure's size.

 Resolution Description:
    Resolution to the size change in the tcpcb structure simply requires
    that the SNMP agent daemon be rebuilt to incorporate the resized
    structure.  Additionally naming support for the Condor 4221 Multiport
    Ethernet controller and the HCSC Private Virtual Network devices
    have been added in support of the ifDescr MIB variable.

 Modified Source:
 usr/src/snmp/agent/snmpd/snmpd.c

 Object Modules:
 usr/etc/snmp/snmpd

 Conditions for Installation:
    Patch can be installed on either NH4000 or NH5000 architectures.
    System must have the CX/UX, TCP/IP, SNMP agent, and HCSC-supported
    Ethernet driver products installed with latest patch sets upto and
    including patches cx6.2-129 and tcp_ip6.2-027.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       snmp_agent6.2-001
 Project:          HCX
 Product:          snmp_agent
 Date Issued:      Thu Dec 21 13:45:03 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-129 and tcp_ip6.2-027

 Related Modification Numbers:  None.

 Related SARs:  None.

 Problem Description:
    Modifications to the tcpcb structure in the tcp_ip6.2-027 patch have
    resulted in a change in that structure's size.  This size change
    affects the operation of the SNMP agent which relies on specific
    knowledge of that structure's size.

 Resolution Description:
    Resolution to the size change in the tcpcb structure simply requires
    that the SNMP agent daemon be rebuilt to incorporate the resized
    structure.  Additionally naming support for the Condor 4221 Multiport
    Ethernet controller and the HCSC Private Virtual Network devices
    have been added in support of the ifDescr MIB variable.

 Modified Source:
 usr/src/snmp/agent/snmpd/snmpd.c

 Object Modules:
 usr/etc/snmp/snmpd

 Conditions for Installation:
    Patch can be installed on either NH4000 or NH5000 architectures.
    System must have the CX/UX, TCP/IP, SNMP agent, and HCSC-supported
    Ethernet driver products installed with latest patch sets upto and
    including patches cx6.2-129 and tcp_ip6.2-027.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Concurrent Computer Corporation
                         Software Patch Report

 Patch Name:       snmp_agent6.2-002
 Project:          HCX
 Product:          snmp_agent
 Date Issued:      Thu Sep 26 15:11:11 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: N/A

 Patch Description:

	Update trapsend, the SNMP user library (libsnmpuser.a), and the
	config files to better integrate with the firewall 2.2.2 system.

 Modified Source:

	usr/src/snmp/agent/Makefile
	usr/src/snmp/agent/lib/snmp-mib.h
	usr/src/snmp/agent/mibcomp/Makefile
	usr/src/snmp/agent/mibcomp/cybg.my
	usr/src/snmp/agent/mibcomp/general.h
	usr/src/snmp/agent/mibcomp/version.sh
	usr/src/snmp/agent/mibcomp/yacc.y
	usr/src/snmp/agent/snmpd/snmpd.c
	usr/src/snmp/agent/snmpd/snmpd.communities
	usr/src/snmp/agent/snmpd/snmpd.config
	usr/src/snmp/agent/snmpd/snmpd.h
	usr/src/snmp/agent/trap/trapsend.c

 Object Modules:
 
	usr/bin/trapsend
	usr/catman/a_man/man1/snmpd.1m.z
	usr/catman/p_man/man3/make_dot_from_obj_id.3x.z
	usr/catman/p_man/man3/make_obj_id_from_hex.3x.z
	usr/catman/p_man/man3/make_pdu.3x.z
	usr/catman/p_man/man3/parse_authentication.3x.z
	usr/etc/snmp/cybg.my
	usr/etc/snmp/snmpd
	usr/etc/snmp/snmpd.communities
	usr/etc/snmp/snmpd.config
	usr/etc/snmp/snmpd.trap_communities
	usr/include/snmp/snmp.h
	usr/lib/libsnmpuser.a
	usr/man/a_man/man1/snmpd.1m
	usr/man/p_man/man3/make_dot_from_obj_id.3x
	usr/man/p_man/man3/make_obj_id_from_hex.3x
	usr/man/p_man/man3/make_pdu.3x
	usr/man/p_man/man3/parse_authentication.3x

 Conditions for Installation: None

 Possible Side Effects: None

                                        return to index
================================================================================

                    Concurrent Computer Corporation
                         Software Patch Report

 Patch Name:       snmp_agent6.2-002
 Project:          HCX
 Product:          snmp_agent
 Date Issued:      Thu Sep 26 15:11:11 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: N/A

 Patch Description:

	Update trapsend, the SNMP user library (libsnmpuser.a), and the
	config files to better integrate with the firewall 2.2.2 system.

 Modified Source:

	usr/src/snmp/agent/Makefile
	usr/src/snmp/agent/lib/snmp-mib.h
	usr/src/snmp/agent/mibcomp/Makefile
	usr/src/snmp/agent/mibcomp/cybg.my
	usr/src/snmp/agent/mibcomp/general.h
	usr/src/snmp/agent/mibcomp/version.sh
	usr/src/snmp/agent/mibcomp/yacc.y
	usr/src/snmp/agent/snmpd/snmpd.c
	usr/src/snmp/agent/snmpd/snmpd.communities
	usr/src/snmp/agent/snmpd/snmpd.config
	usr/src/snmp/agent/snmpd/snmpd.h
	usr/src/snmp/agent/trap/trapsend.c

 Object Modules:
 
	usr/bin/trapsend
	usr/catman/a_man/man1/snmpd.1m.z
	usr/catman/p_man/man3/make_dot_from_obj_id.3x.z
	usr/catman/p_man/man3/make_obj_id_from_hex.3x.z
	usr/catman/p_man/man3/make_pdu.3x.z
	usr/catman/p_man/man3/parse_authentication.3x.z
	usr/etc/snmp/cybg.my
	usr/etc/snmp/snmpd
	usr/etc/snmp/snmpd.communities
	usr/etc/snmp/snmpd.config
	usr/etc/snmp/snmpd.trap_communities
	usr/include/snmp/snmp.h
	usr/lib/libsnmpuser.a
	usr/man/a_man/man1/snmpd.1m
	usr/man/p_man/man3/make_dot_from_obj_id.3x
	usr/man/p_man/man3/make_obj_id_from_hex.3x
	usr/man/p_man/man3/make_pdu.3x
	usr/man/p_man/man3/parse_authentication.3x

 Conditions for Installation: None

 Possible Side Effects: None

                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-001
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Nov  4 15:27:08 1992


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: cx6.2-003 ethernet6.2-001

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	Users require a higher performance interface to send and receive
	raw IP packets.

 Resolution Description:
	Develop user level library routines and direct I/O for Ethernet
	transmission to improve performance when transmitting and
	receiving raw IP packets. The library /usr/lib/libip.a is
	provided to have a streamlined interface when sending and
	receiving raw IP packets.

 Modified Source:
	usr/src/lib/libip/cksum.s
	usr/src/lib/libip/ip_lib.c
	usr/src/lib/libip/libip.mk
	usr/src/lib/libip/ping.c

 Object Modules:
	usr/lib/libip.a
	usr/catman/p_man/man3/ip_close.3n.z
	usr/catman/p_man/man3/ip_get_buffer.3n.z
	usr/catman/p_man/man3/ip_init_buffers.3n.z
	usr/catman/p_man/man3/ip_lib.3n.z
	usr/catman/p_man/man3/ip_open.3n.z
	usr/catman/p_man/man3/ip_receive.3n.z
	usr/catman/p_man/man3/ip_send.3n.z
	usr/man/p_man/man3/ip_lib.3n

 Conditions for Installation: none

 Possible Side Effects: Use of the ip_lib(3n) library IP_RAW_IO mode for
	reading may not operate properly when connected to networks having
	other network traffic.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-002
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Mon Dec 21 10:33:26 1992


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: cx6.2-007

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
        Add support for Serial Line Interface Protocol (SLIP) to be used as 
	a network interface.

 Resolution Description:
        Add support for Serial Line Interface Protocol (SLIP) to be used as 
	a network interface.  The tty device to be used by the SLIP network 
	interface must be on a HPS serial communications controller.

	The TCP/IP daemon /usr/etc/tcpipd and the softclock interrupt daemon
	/usr/etc/softclockd must be started prior to initiating connections 
	over the SLIP network interface.

	In order to configure SLIP interfaces on a system the following
	parameter must be added to the configuration file

	options NSL=2

	Where '2' is the number of SLIP interfaces to be configured.

 Modified Source:
	usr/src/cmd/netstat/main.c
	usr/src/cmd/netstat/mbuf.c
	usr/src/cmd/slattach.c
	usr/src/uts/machine/netinet/tcp_subr.c

 Object Modules:
	usr/ucb/netstat
	usr/etc/slattach
	usr/catman/a_man/man1/slattach.1m.z
	usr/man/a_man/man1/slattach.1m
	lib_netinet	tcp_subr.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-003
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue Jan  5 11:11:00 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.0

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	1. Can not send or receive files with ftpd on CX/SX systems.

	2. When performing a remote exec command using rexecd, the remote
	   user's access vectors are not initialized.

 Resolution Description:
	1. Modify ftpd to perform the data connection while still running as
	   root.

	2. Initialize the remote user's access vector when performing a
	   remote exec command using the rexec/rexecd protocol.

 Modified Source:
	usr/src/cmd/ftp/ftpd.c
	usr/src/cmd/rexecd.c
	usr/src/uts/machine/netinet/if_ether.c
	usr/src/uts/machine/netinet/ip_input.c

 Object Modules:
	usr/etc/ftpd
	usr/etc/rexecd
	lib_netinet	if_ether.o
	lib_netinet	ip_input.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-004
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Thu Jan 28 10:25:11 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.0

 Related Patches: cx6.2-013

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	1. Enhance IP library routines to support broadcasting and multiple
	   protocol support.

	2. Retrieving incoming source routes via IP options may crash the
	   system with a misaligned data exception.

 Resolution Description:
	1. Enhance IP library routines to support broadcasting and multiple
	   protocol support.

	2. Modify the ip_srcroute() routine to copy source route by bytes
	   instead of by word (source routes may not be on a word boundry).

 Modified Source:
	usr/src/lib/libip/ip_lib.c
	usr/src/lib/libip/ping.c
	usr/src/uts/machine/netinet/ip_input.c

 Object Modules:
	usr/lib/libip.a
	usr/catman/p_man/man3/ip_close.3n.z
	usr/catman/p_man/man3/ip_get_buffer.3n.z
	usr/catman/p_man/man3/ip_getopt.3n.z
	usr/catman/p_man/man3/ip_init_buffers.3n.z
	usr/catman/p_man/man3/ip_open.3n.z
	usr/catman/p_man/man3/ip_receive.3n.z
	usr/catman/p_man/man3/ip_send.3n.z
	usr/catman/p_man/man3/ip_sendto.3n.z
	usr/catman/p_man/man3/ip_setopt.3n.z
	usr/catman/p_man/man3/libip.3n.z
	usr/man/p_man/man3/libip.3n
	lib_netinet	ip_input.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-005
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue Feb  2 13:03:13 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  7.0

 Related Patches:
 int_network6.2-001,cx6.2-015

 Related Modification Numbers:
 None

 Related SARs:
 None

 Problem Description:
 1) The telnet daemon (telnetd) would not always connect properly over
    an Intelligent Network connection.
 2) The rwho daemon (rwhod) did not communicate over an Intelligent
    Networking controller.
 3) The route daemon (routed) could not update the routing tables
    on an Intelligent Networking controller.
 4) The netstat command could not output the routing tables stored
    on an Intelligent Networking controller.

 Resolution Description:
 1) Reorder certain system calls in the telnet daemon.
 2) Add support for the Intelligent Networking controller in rwhod.
 3) Add support for the Intelligent Networking controller in the
    route daemon (routed).
 4) Correct routing table display in netstat.

 Modified Source:
 usr/src/cmd/netstat/inet.c
 usr/src/cmd/netstat/intnet.c
 usr/src/cmd/routed/main.c
 usr/src/cmd/routed/routed.mk
 usr/src/cmd/routed/startup.c
 usr/src/cmd/routed/tables.c
 usr/src/cmd/rwhod.c
 usr/src/cmd/telnetd.c

 Object Modules:
 usr/etc/routed
 usr/etc/rwhod
 usr/etc/telnetd
 usr/ucb/netstat

 Conditions for Installation:
 None

 Possible Side Effects:
 None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-006
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue Mar  9 15:49:10 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	NH5800 systems require an up-to-date patch for tcp_ip products.

 Resolution Description:
	Create patch with all tcp_ip patches for NH5800.

 Modified Source:

 Object Modules:
	usr/lib/libip.a
	usr/catman/a_man/man1/slattach.1m.z
	usr/catman/p_man/man3/ip_close.3n.z
	usr/catman/p_man/man3/ip_get_buffer.3n.z
	usr/catman/p_man/man3/ip_getopt.3n.z
	usr/catman/p_man/man3/ip_init_buffers.3n.z
	usr/catman/p_man/man3/ip_open.3n.z
	usr/catman/p_man/man3/ip_receive.3n.z
	usr/catman/p_man/man3/ip_send.3n.z
	usr/catman/p_man/man3/ip_sendto.3n.z
	usr/catman/p_man/man3/ip_setopt.3n.z
	usr/catman/p_man/man3/libip.3n.z
	usr/man/a_man/man1/slattach.1m
	usr/man/p_man/man3/libip.3n
	usr/etc/arp
	usr/etc/ftpd
	usr/etc/rexecd
	usr/etc/routed
	usr/etc/rwhod
	usr/etc/slattach
	usr/etc/telnetd
	usr/sbin/ifconfig
	usr/ucb/netstat
	lib_netinet	if_ether.o
	lib_netinet	ip_input.o
	lib_netinet	tcp_subr.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-007
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue May 18 07:46:59 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: HM10804

 Problem Description:
	Infrequently, when using FTP to transfer a file, a single byte in
	the last record of the file may not be transferred.

 Resolution Description:
	The TCP protocol code under certain unique circumstances does not
	properly calculate the send next value when retransmitting a FIN
	indication.

 Modified Source:
	usr/src/uts/machine/netinet/tcp_output.c

 Object Modules:
	lib_netinet     tcp_output.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-008
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Jun 18 17:26:22 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None

 Related Patches:  cx6.2-038, cx_sx6.2-002, cx_326.2-001, cx_646.2-001,
		   cx_NOLIM6.2-001, lan_sx6.2-002

 Related Modification Numbers:  None

 Related SARs:  None

 Problem Description:
     1.	Patch cx6.2-038 modifies the initvector function and allows for
	very long label names.  Commands that use these functions must
	be relinked.
     2. The assurance system requires that Series 5000 kernel libraries
	be listed in the TCB files.
     3. The rlogin and telnet daemons do not cause all processes still
	holding on to a pty to terminate.  This violates CX/SX security
	policies.
     4. The telnet daemon fails to pass a TZ environment variable to
	the login session, causing it to revert to GMT.

 Resolution Description:
     1. Relink the necessary commands.
     2. Modify the TCB.net file to reflect the current filesystem
	organization.
     3. The telnet and rlogin daemons now kill all processes attached
	to the tty and pty before exiting.
     4. The telnet daemon now passes a copy of its TZ environment variable
	to the login session.

 Modified Source:
	usr/src/cmd/assure/TCB/TCB.net
	usr/src/cmd/rlogind.c
	usr/src/cmd/telnetd.c

 Object Modules:
	mls/assure/TCB/TCB.net
	usr/etc/ftpd
	usr/etc/rexecd
	usr/etc/rlogind
	usr/etc/rshd
	usr/etc/telnetd

 Conditions for Installation:
	The related patches that apply to the installation must
	be installed with this patch.

 Possible Side Effects:  None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-009
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue Jul 20 15:31:36 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
	On a busy system, inetd may reject connect requests.

 Resolution Description:
	Add an option to inetd for the maximum number of connection
	requests allowed for each service in a one minute time period.

 Modified Source:
	usr/src/cmd/inetd.c

 Object Modules:
	etc/inetd
	usr/catman/a_man/man1/inetd.1m.z
	usr/man/a_man/man1/inetd.1m

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-010
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Oct 22 14:26:01 1993


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: none

 Related Modification Numbers: none

 Related SARs: HM10977

 Problem Description: The Series 4000 and 5000 try to match their 
   TCP/IP buffer sizes with the remote machine's sizes as given in
   the remote machine's connection establishment handshake.  If the 
   remote sends a size of zero, the Series 4000 and 5000 will set their 
   size to zero also. This keeps the remote machine from sending any 
   data to the Series 4000 and 5000.

 Resolution Description: This patch checks for a size of zero
   and will not let the buffer size be set to zero, but will
   default to 32K.

 Modified Source: usr/src/uts/machine/netinet/tcp_input.c

 Object Modules: 
   lib_netinet   tcp_input.o

 Conditions for Installation: none

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-011
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Jan 26 13:27:47 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  cx6.2-074

 Related Modification Numbers:  None

 Related SARs:  HM10901

 Problem Description:
	The ARP table needs to be increased on the system.

 Resolution Description:
	Enhanced the kernel to allow the ARP table to be configurable.

 Modified Source:
	usr/src/uts/machine/netinet/if_ether.c

 Object Modules:
	lib_netinet             if_ether.o

 Conditions for Installation:
	Patch cx6.2-074 must also be installed.

 Possible Side Effects:
	None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-012
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Thu Apr 14 15:00:05 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: ksh6.2-001, cx6.2-082, cx_sx6.2-005

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:

        This is one of several patches carried over from the CX/SX 6.1
	B1 product.  

        1.  ftp and inetd do no auditing.
	2.  inetd from patch tcp_ip6.1-011 attempted to open the audit
	    device on CX/UX systems.

 Resolution Description:

        1.  ftp, ftpd and inetd have been enhanced to perform auditing.
	2.  inetd no longer attempts to open the audit device on non-SX
	    systems.


 Modified Source:
	usr/src/cmd/ftp/ftp.mk
	usr/src/cmd/ftp/ftpcmd.y
	usr/src/cmd/ftp/ftpd.c
	usr/src/cmd/ftp/audit.c
	usr/src/cmd/inetd/audit.c
	usr/src/cmd/inetd/inetd.c
	usr/src/cmd/inetd/inetd.mk

 Object Modules:
	usr/etc/ftpd
	usr/etc/inetd

 Conditions for Installation:

        The system on which this patch is installed must be a Series 4000
	or 5000 system with CX/SX 6.2.

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-013
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed May 25 10:06:37 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-085

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
   Occasionally there is a panic due to a locking problem in the
   network routing code.


 Resolution Description:
   This patch fixes a locking problem in the network routing code that
   can cause system panics.

 Modified Source: none

 Object Modules:
   lib_netinet: in_pcb.o
   lib_netinet: ip_input.o
   lib_netinet: ip_output.o

 Conditions for Installation: 
   Must be installed with cx6.2-085.

 Possible Side Effects: none
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-014
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Aug 10 14:42:57 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: cx6.2-092, cx_sx6.2-006,
        lan_sx6.2-004, cx_86.2-001, cx_166.2-001, cx_326.2-002,
        cx_646.2-002, cx_1286.2-001, cx_2566.2-001, cx_NOLIM6.2-003.

 Related Modification Numbers:
	None

 Related SARs:
	None

 Problem Description:
        Need support for CIPSO tag types 128 (information labels),
        129 (privilege vector), and 130 (user id).

 Resolution Description:
        Install CIPSO tag types 128, 129, and 130.
        Rebuild ftpd because of socket mls_netattr size change.

 Modified Source:
	None

 Object Modules:
	usr/etc/ftpd

 Conditions for Installation:
	None

 Possible Side Effects:
	None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-015
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Jun 17 13:25:20 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-093

 Related Modification Numbers: None.

 Related SARs: HM11292

 Problem Description:
   Occasionally a socket will not be removed following a data transfer.

 Resolution Description:
   This patch sets a timer on the FIN_WAIT_2 condition to ensure that all
   sockets will be removed.

 Modified Source:
   usr/src/uts/machine/netinet/tcp_input.c
   usr/src/uts/machine/netinet/tcp_timer.c

 Object Modules:
   lib_netinet: tcp_input.o
   lib_netinet: tcp_timer.o

 Conditions for Installation: None.

 Possible Side Effects: None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-016
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Thu Sep 22 13:50:09 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: 7.1

 Related Patches: cx6.2-099, cx_sx6.2-008, lan_sx6.2-006, nfs6.2-002

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:

        1. Network mbufs are not being correctly freed and cause a small
	   memory leak.

        2. Inetd does not do auditing correctly.

        3. Several mls library changes were made in patch cx6.1-061.
           Consequently, the commands which use the mls library need
           to be re-compiled with the new library. This patch contains
           the new executables for the commands in the tcp_ip product
           that use the mls library.

	4. ICMP redirect packets are being improperly handled.


 Resolution Description:

        1. The mbufs are now freed in the correct place in the kernel. 

        2. A minor fix has been made to inetd for the auditing problem.

        3. No source level changes have been made to any of these commands.
           They are simply re-compilations.

	4. Ensure the kernel route redirect routine, rtredirect(), is passed
           properly initialized parameters from the ICMP input routine,
           icmp_input().


 Modified Source:
	usr/src/cmd/inetd/inetd.c
	usr/src/uts/machine/netinet/ip_input.c
	usr/src/uts/machine/netinet/ip_icmp.c

 Object Modules:
	usr/etc/inetd
	usr/etc/rlogind
	usr/etc/telnetd
	lib_netinet   ip_icmp.o
	lib_netinet   tcp_subr.o
        lib_netinet   tcp_debug.o
        lib_netinet   ip_input.o
        lib_netinet   raw_ip.o
        lib_netinet   udp_usrreq.o
        lib_netinet   tcp_output.o
        lib_netinet   tcp_timer.o
        lib_netinet   ip_output.o
        lib_netinet   tcp_input.o
        lib_netinet   in.o
        lib_netinet   in_pcb.o
        lib_netinet   tcp_usrreq.o


 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-017
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Dec  9 11:05:36 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: 
	cx6.2-104
        cx_sx6.2-010
        rje6.2-001
        cx_1286.2-002
        cx_166.2-002
        cx_2566.2-002
        cx_326.2-003
        cx_646.2-003
        cx_86.2-002
        cx_NOLIM6.2-004

 Related Modification Numbers: None

 Related SARs: None

 Problem Description:

	Modifications to allow up to 4096 members in each group

 Resolution Description:

	Change the size of the buffer in getgrent()

 Modified Source: None.

 Object Modules:
	usr/etc/ftpd
	usr/etc/named

 Conditions for Installation: None.

 Possible Side Effects: None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-018
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Sat Nov 19 12:17:03 1994


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None

 Related Patches:  cx6.2-105, cx_sx6.2-011, lan_sx6.2-008, cx_rt_develop6.2-005

 Problem Description:
 1) Cyberguard product requires packet filtering code in the kernel.
 2) Inetd did not properly initialize access vectors.
 3) TCP and UDP should have a longer TTL (time to live) value.

 Resolution Description:
 1) Provide packet filtering in the kernel.
 2) Correct use of access vectors in inetd.
 3) Increase TCP_TTL and UDP_TTL.

 Modified Source:
usr/src/cmd/inetd.c
usr/src/uts/machine/netinet/if_ether.h
usr/src/uts/machine/netinet/ip_input.c
usr/src/uts/machine/netinet/ip_output.c
usr/src/uts/machine/netinet/ip_var.h
usr/src/uts/machine/netinet/tcp_timer.h
usr/src/uts/machine/netinet/udp_var.h
usr/src/uts/machine/netinet/tcp_output.c
usr/src/uts/machine/netinet/tcp_subr.c
usr/src/uts/machine/netinet/udp_usrreq.c
usr/src/uts/machine/netinet/ip_icmp.c
usr/src/uts/machine/netinet/in_pcb.c

 Object Modules:
usr/etc/inetd
lib_netinet	ip_input.o
lib_netinet	ip_output.o
lib_netinet	tcp_output.o
lib_netinet	tcp_subr.o
lib_netinet	udp_usrreq.o
lib_netinet	ip_icmp.o
lib_netinet	in_pcb.o

 Conditions for Installation:
None.

 Possible Side Effects:
None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-019
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Tue Jan 31 10:28:35 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None

 Related Patches:  cx6.2-112 cx_rt_develop6.2-006

 Problem Description:  Locks were held during calls to the CX/SX audit code.
 This could hang CX/SX systems.

 Resolution Description:  Unlock all locks prior to calling audit routines.

 Modified Source:
usr/src/uts/machine/netinet/if_ether.c

 Object Modules:
lib_netinet if_ether.o

 Conditions for Installation:
This patch applies to CX/SX and Cyberguard machines.  It is unnecessary
(but harmless) to install it on CX/UX or CX/RT systems.

 Possible Side Effects:
None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-020
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Feb  3 15:54:47 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  eg6.2-004

 Related Modification Numbers:
  None

 Related SARs:
  None

 Problem Description:
     If a packet longer than 1500 bytes is sent to the ip layer, and the
     ip layer breaks it into smaller packets, it is possible that a zero
     size transmit buffer will be generated.  If certain Ethernet drivers 
     attempt to send this zero-size buffer, the controller may hang.


 Resolution Description:
     After breaking up a message, check for trailing zero-length m-bufs
     and delete them.


 Modified Source:
   usr/src/uts/machine/netinet/ip_output.c

 Object Modules:
   lib_netinet	ip_output.o

 Conditions for Installation:
   None

 Possible Side Effects:
   None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-021
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Mon Feb 20 15:33:01 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: n/a

 Related Patches: lan_sx6.2-009, cx_sx6.2-012, cx6.2-115

 Problem Description: support for cyberguard

 Resolution Description: 
		ifconfig has been updated to support the new cyberguard
		product, and man pages have been updated.  Entry points 
		have been added to networking code to support the cyberguard
		product.  TCP/IP sequence numbering has been modified so 
		it is more random, and therefore much more difficult to 
		take over existing connections. 
		(This was done for a recent CERT advisory).

 Modified Source:
usr/src/cmd/ifconfig/ifconfig.c
usr/src/uts/machine/netinet/in_proto.c
usr/src/uts/machine/netinet/ip_input.c
usr/src/uts/machine/netinet/ip_output.c
usr/src/uts/machine/netinet/tcp_input.c
usr/src/uts/machine/netinet/tcp_timer.c

 Object Modules:
usr/sbin/ifconfig
usr/catman/a_man/man1/ifconfig.1m.z
usr/man/a_man/man1/ifconfig.1m
lib_netinet in_proto.o
lib_netinet ip_input.o
lib_netinet ip_output.o
lib_netinet tcp_input.o
lib_netinet tcp_timer.o

 Conditions for Installation: n/a

 Possible Side Effects: n/a
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-022
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Apr  5 11:36:36 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  None

 Related Patches:  None

 Related SARs:  HM11479

 Problem Description:  Patch tcp_ip6.2-019 introduced a problem in the ARP
 code on CX/RT systems.

 Resolution Description:  Add missing svlock() to RT code.

 Modified Source:
 usr/src/uts/machine/netinet/if_ether.c

 Object Modules:
 lib_netinet  if_ether.o

 Conditions for Installation:
 This patch only applies to CX/RT systems.  Patch tcp_ip6.2-019 should be
 installed first, followed by this patch.

 Possible Side Effects:
 None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-023
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Sep  1 13:38:59 1995


 Release on Which Patch May Be Installed:   6.2


 Release Which Corrects Problem:	TBD


 Related Patches:
    None.


 Related Modification Numbers:
    None.


 Related SARs:
    HM11475, HM11480


 Problem Description:

	Patch tcp_ip6.2-015 introduced a bug that causes some remote shell
commands to hang up.  The command(s) will execute on the remote machine,
produce the desired output/results, but the connection between the two machines
will not close.  Control C will not always terminate the command but Control D
usually will.  Examples of commands that will hang up are (sleep 1) and (ls -l)
on a large directory.  Certain shell scripts will also hang up.


 Resolution Description:

	In patch tcp_ip6.2-015, code was added to the source file tcp_input.c
in the FIN_WAIT_1/FIN_WAIT_2 state acknowledgement processing to fix a problem
with NISSIN token ring boards.  In the case of the FIN_WAIT_1 state, the 
existing code was changed to only execute if such a board is in the system when,
in fact, the code should execute whether or not such a board is installed.  To
correct the problem, the check for NISSIN boards was removed from FIN_WAIT_1
acknowledgement processing to allow the socket/connection to properly shut down.


 Modified Source:
usr/src/uts/machine/netinet/tcp_input.c

 Object Modules:
lib_netinet	tcp_input.o

 Conditions for Installation:
Install this patch if patch tcp_ip6.2-015 has been installed.

 Possible Side Effects:
None.
                                        return to index
================================================================================

                     Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-024
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Oct  4 18:03:16 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: n/a

 Related Patches: cx6.2-125, cx_sx6.2-014, lan_sx6.2-010, cnd6.2-001

 Related Modification Numbers: n/a

 Related SARs: n/a

 Problem Description: 

	Changes, Additions and  Enhancements required for the support of 
	CyberGuard 2.0 product.

 Resolution Description: 
	
	Resolution includes updating of scripts, header files and kernel 
	changes.

 Modified Source:
	usr/src/cmd/etc/inetd.conf
	usr/src/cmd/etc/services
	usr/src/cmd/ifconfig/ifconfig.c
	usr/src/cmd/netstat/inet.c
	usr/src/cmd/netstat/main.c
	usr/src/cmd/netstat/mbuf.c
	usr/src/cmd/netstat/netstat.mk
	usr/src/cmd/netstat/pvn.c
	usr/src/uts/machine/netinet/in.h
	usr/src/uts/machine/netinet/in_pcb.c
	usr/src/uts/machine/netinet/ip_input.c
	usr/src/uts/machine/netinet/ip_output.c
	usr/src/uts/machine/netinet/tcp_usrreq.c
	usr/src/uts/machine/netinet/udp_usrreq.c

 Object Modules:
	etc/inetd.conf.tcp_ip6.2-024
	etc/services
	usr/sbin/ifconfig
	usr/src/uts/machine/M88K-RT/lib_netinet
	usr/src/uts/machine/M88K/lib_netinet
	usr/src/uts/machine/NH5000-RT/lib_netinet
	usr/src/uts/machine/NH5000/lib_netinet
	usr/ucb/netstat

 Conditions for Installation:
	A Series 4000 or Series 5000 NightHawk running CX/UX 6.2 release.
Patch cx6.2-125

 Possible Side Effects:
	/etc/inetd.conf has been changed to support proxies which are part of
	firewall product.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-025
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Oct 25 13:26:52 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: None

 Related Modification Numbers: None

 Related SARs: None

 Problem Description: The command nslookup and the daemon named are old.
	They are based on the 4.8 version of bind which has bugs.

 Resolution Description: The new code is the 4.9.3-beta version of bind
	which corrects many of the bugs in the older version and has
	additional enhancements.  In addition the latest DNS rfcs are added.

 Modified Source:

	usr/man/a_man/man1/named-xfer.1m
	usr/man/a_man/man1/named.1m
	usr/man/u_man/man1/nslookup.1c
	usr/src/cmd/named/conf/options.h
	usr/src/cmd/named/conf/portability.h
	usr/src/cmd/named/include/arpa/inet.h
	usr/src/cmd/named/include/arpa/nameser.h
	usr/src/cmd/named/include/netdb.h
	usr/src/cmd/named/include/resolv.h
	usr/src/cmd/named/include/sys/bitypes.h
	usr/src/cmd/named/include/sys/cdefs.h
	usr/src/cmd/named/include/sys/ioctl.h
	usr/src/cmd/named/resolve/gethnamaddr.c
	usr/src/cmd/named/resolve/getnetbyaddr.c
	usr/src/cmd/named/resolve/getnetbyname.c
	usr/src/cmd/named/resolve/getnetent.c
	usr/src/cmd/named/resolve/getnetnamadr.c
	usr/src/cmd/named/resolve/herror.c
	usr/src/cmd/named/resolve/inet_addr.c
	usr/src/cmd/named/resolve/libresolv.mk
	usr/src/cmd/named/resolve/nsap_addr.c
	usr/src/cmd/named/resolve/res_comp.c
	usr/src/cmd/named/resolve/res_debug.c
	usr/src/cmd/named/resolve/res_init.c
	usr/src/cmd/named/resolve/res_mkquery.c
	usr/src/cmd/named/resolve/res_query.c
	usr/src/cmd/named/resolve/res_send.c
	usr/src/cmd/named/resolve/sethostent.c
	usr/src/cmd/named/db_defs.h
	usr/src/cmd/named/db_func.h
	usr/src/cmd/named/db_glob.h
	usr/src/cmd/named/db_glue.c
	usr/src/cmd/named/db_secure.c
	usr/src/cmd/named/dmalloc.c
	usr/src/cmd/named/dmalloc.h
	usr/src/cmd/named/named-xfer.c
	usr/src/cmd/named/named.h
	usr/src/cmd/named/named.reload.sh
	usr/src/cmd/named/named.restart.sh
	usr/src/cmd/named/ns_defs.h
	usr/src/cmd/named/ns_func.h
	usr/src/cmd/named/ns_glob.h
	usr/src/cmd/named/ns_ncache.c
	usr/src/cmd/named/ns_validate.c
	usr/src/cmd/named/pathnames.h
	usr/src/cmd/named/storage.c
	usr/src/cmd/named/tree.c
	usr/src/cmd/named/tree.h
	usr/src/cmd/names/Version.c
	usr/src/cmd/named/db.h
	usr/src/cmd/named/db_dump.c
	usr/src/cmd/named/db_load.c
	usr/src/cmd/named/db_lookup.c
	usr/src/cmd/named/db_reload.c
	usr/src/cmd/named/db_save.c
	usr/src/cmd/named/db_update.c
	usr/src/cmd/named/named.mk
	usr/src/cmd/named/ns.h
	usr/src/cmd/named/ns_forw.c
	usr/src/cmd/named/ns_init.c
	usr/src/cmd/named/ns_main.c
	usr/src/cmd/named/ns_maint.c
	usr/src/cmd/named/ns_req.c
	usr/src/cmd/named/ns_resp.c
	usr/src/cmd/named/ns_sort.c
	usr/src/cmd/named/ns_stats.c
	usr/src/cmd/nslookup/commands.l
	usr/src/cmd/nslookup/debug.c
	usr/src/cmd/nslookup/getinfo.c
	usr/src/cmd/nslookup/list.c
	usr/src/cmd/nslookup/main.c
	usr/src/cmd/nslookup/nslookup.help
	usr/src/cmd/nslookup/nslookup.mk
	usr/src/cmd/nslookup/pathnames.h
	usr/src/cmd/nslookup/res.h
	usr/src/cmd/nslookup/send.c
	usr/src/cmd/nslookup/skip.c
	usr/src/cmd/nslookup/subr.c

 Object Modules:

	usr/etc/named
	usr/etc/named-xfer
	usr/sbin/nslookup
	usr/catman/a_man/man1/named-xfer.1m.z
	usr/catman/a_man/man1/named.1m.z
	usr/catman/u_man/man1/nslookup.1c.z
	usr/man/a_man/man1/named-xfer.1m
	usr/man/a_man/man1/named.1m
	usr/man/u_man/man1/nslookup.1c
	usr/doc/rfc1032.lpr
	usr/doc/rfc1033.lpr
	usr/doc/rfc1034.lpr
	usr/doc/rfc1035.lpr
	usr/doc/rfc1535.lpr
	usr/doc/rfc1536.lpr
	usr/doc/rfc1537.lpr

 Conditions for Installation: None

 Possible Side Effects: None
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-026
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Thu Oct 26 17:48:23 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:
	none

 Related Patches:
	cx6.2-126

 Related Modification Numbers:
	none

 Related SARs:
	none

 Problem Description:
	1)  /etc/protocols: No Private Network definition
	2)  /etc/services:  file broken / missing entries
	3)  ftpd:           crashes
	4)  gated:          breaks routing tables for point-to-point
	                    connections
	5)  ifconfig:       gives spurious p-to-p message an bad input
	                    parameter
	6)  ifconfig:       Private Network stuff displayed incorrectly
	7)  inetd:          Very slow when doing DNS lookups for audit recs
	8)  inetd:          Unable to initiate proxies at incoming packet
	                    level.
	9)  netstat:        -a option losing information in display
	10) netstat:        Missing Private Network display entries
	11) ping:           Reports host up when actually host is down
	12) routed:         Drops routes
	13) routed:         'default' in /etc/gateways is ignored
	14) TCP:            Using CIPSO interface split TCP packets into two.
	15) TCP:            Broken flow control over 56kb lines
	16) UDP:            Socket MLS labels on priviliged socket broken

 Resolution Description:
	1)  Update with pnet 99
	2)  Update /etc/services
	3)  fix broken audit() calls
	4)  make gated a little smarter
	5)  tidy up message
	6)  fix typos and format output
	7)  Only record IP address in audit trails
	8)  Initiate proxies at correct level.
	9)  Make better use of the space
	10) Update
	11) Make ping smarter and output icmp error packets received
	12) keep O/S and routed in step with usage of flags & structures
	13) routed now knows how to handle 'default'
	14) Account for CIPSO header in calculating max packet size
	15) Fixed flow control
	16) Maintain labels on packet transmission

 Modified Source:
	usr/src/cmd/etc/inetd.conf
	usr/src/cmd/etc/protocols
	usr/src/cmd/etc/services
	usr/src/cmd/ftp/ftpd.c
	usr/src/cmd/gated/if.c
	usr/src/cmd/gated/if_rt.c
	usr/src/cmd/gated/parse.c
	usr/src/cmd/gated/task.c
	usr/src/cmd/gated/trace.c
	usr/src/cmd/ifconfig/ifconfig.c
	usr/src/cmd/inetd/audit.c
	usr/src/cmd/inetd/inetd.c
	usr/src/cmd/inetd/inetd.mk
	usr/src/cmd/netstat/inet.c
	usr/src/cmd/netstat/pvn.c
	usr/src/cmd/ping.c
	usr/src/cmd/routed/input.c
	usr/src/cmd/routed/main.c
	usr/src/cmd/routed/startup.c
	usr/src/cmd/routed/table.h
	usr/src/cmd/routed/tables.c
	usr/src/cmd/routed/timer.c
	usr/src/cmd/routed/trace.c
	usr/src/description_files/tcp_ip.src
	usr/src/uts/machine/netinet/ip_icmp.h
	usr/src/uts/machine/netinet/tcp_input.c
	usr/src/uts/machine/netinet/tcp_subr.c
	usr/src/uts/machine/netinet/tcp_timer.c
	usr/src/uts/machine/netinet/udp_usrreq.c

 Object Modules:
	etc/inetd.conf
	etc/protocols
	etc/services
	usr/etc/ftpd
	usr/etc/gated
	usr/etc/inetd
	usr/etc/ping
	usr/etc/routed
	usr/include/netinet/ip_icmp.h
	usr/sbin/ifconfig
	usr/src/uts/machine/netinet/ip_icmp.h
	usr/ucb/netstat
	lib_netinet	tcp_input.o
	lib_netinet	tcp_subr.o
	lib_netinet	tcp_timer.o
	lib_netinet	udp_usrreq.o

 Conditions for Installation:
	A Series 4000 or Series 5000 NightHawk running CX/UX 6.2 release.

 Possible Side Effects:
	NONE
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-027
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Fri Dec 15 17:52:54 1995


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: TBD

 Related Patches: cx6.2-129 

 Related Modification Numbers: none

 Related SARs: none

 Problem Description:
    (1) Firewall product dynamic kernel rules would not timeout properly
        thus wasting system network resources.
    (2) Firewall product's Private Virtual Network was not able to function
        correctly in tightly coupled mode.
    (3) TCP connections in the FIN_WAIT_2 state would not timeout in a
	reasonable time frame.
    (4) Size changes to the tcpcb structure effected the network utility
        netstat(1) which has knowledge of that structure's size since it
        accesses the structure by reading from /dev/kmem directly.
    (5) inetd(1M) would consume large amounts of CPU time on non-secure
        systems.
    (6) Size changes to the tcpcb structure effected archived object files
        in the network kernel library lib_netinet.

 Resolution Description: 
    (1) Modified ip_output.o to timeout all dynamic rules.
    (2) Add modifications to the process control block logic in the in_pcb.o
        file to permit correct firewall Private Virtual Network tightly
        coupled mode operation.
    (3) Modifications to the tcp_timer.o and tcp_input.o files now ensure
        that TCP-based processes in the FIN_WAIT_2 state correctly timeout.
    (4) Rebuilt netstat to include the new tcpcb structure and thus allow it
        to learn about that structure's new size change.
    (5) Corrections to the structure of secure/non-secure logic checks in the
        inetd(1M) main driver will eliminate the CPU usage problems experienced
        on non-secure systems.  Enhancements to the inetd logic also detect
        and prevent denial of service attacks via the inetd chargen/echo
        components.
    (6) Rebuilt the kernel lib_netinet object files tcp_debug.o, tcp_output.o,
        tcp_subr.o, and tcp_usrreq.o to incorporate the modified tcpcb
        structure.

 Modified Source: 
 usr/src/cmd/inetd/audit.c
 usr/src/cmd/inetd/inetd.c
 usr/src/uts/machine/netinet/tcp_input.c
 usr/src/uts/machine/netinet/tcp_timer.c
 usr/src/uts/machine/netinet/ip_output.c
 usr/src/uts/machine/netinet/in_pcb.c

 Object Modules:
 usr/ucb/netstat
 usr/etc/inetd
 lib_netinet	tcp_input.o
 lib_netinet	tcp_timer.o
 lib_netinet	ip_output.o
 lib_netinet	in_pcb.o
 lib_netinet	tcp_debug.o
 lib_netinet	tcp_output.o
 lib_netinet	tcp_subr.o
 lib_netinet	tcp_usrreq.o

 Conditions for Installation:
    This patch must be installed on either an NH4000 or NH5000 system
    which has the CX/UX 6.2, TCP/IP 6.2, and network device driver products
    installed and all applicable CX/UX 6.2, TCP/IP 6.2, and network device
    driver product patches already installed.  NOTE:  The cx6.2-129 patch
    must be installed prior to the installation of this patch.

 Possible Side Effects: none.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-028
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Thu Jan 11 17:59:45 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem:  TBD

 Related Patches:  none

 Related Modification Numbers:  none

 Related SARs:  none

 Problem Description:
 (1) The Trusted Computing Base (TCB) networking file, TCB.net, utilized
     by the mkassure(1MS) assurance tape utility incorrectly referenced
     the obsolete kernel library lib_hcxif.
 (2) The named(1M) manual page incorrectly referenced CyberGuard-related
     documentation.
 (3) Networking ports were being incorrectly reused when booting a system
     or during a port rollover.
 (4) FTP daemon ftpd contains libmls.a library function which can cause
     a potential memory leak.
 (5) TCP fast retransmit algorithm can inadvertently modify the TCP
     retransmit timer asynchronously.

 Resolution Description:
 (1) Remove lib_hcxif from the TCB.net file.
 (2) Remove all references to the CyberGuard-related documentation.
 (3) Update the kernel lport() function to correctly rollover the next
     available port.
 (4) Rebuild the ftpd daemon to incorporate the fixed libmls.a function
     makecf() to prevent the potential memory leak.
 (5) Add spin lock protection around the fast retransmit algorithm code
     where the TCP retransmit timer is modified.

 Modified Source:
 usr/src/cmd/assure/TCB/TCB.net
 usr/man/a_man/man1/named.1m
 usr/src/uts/machine/netinet/in_pcb.c

 Object Modules:
 usr/etc/ftpd
 mls/assure/TCB/TCB.net
 usr/man/a_man/man1/named.1m
 usr/catman/a_man/man1/named.1m.z
 lib_netinet	in_pcb.o
 lib_netinet	tcp_input.o

 Conditions for Installation:
   Patch must be installed on a NH4000 or NH5000 system running CX/UX 6.2
   with all applicable TCP/IP product patches installed.

 Possible Side Effects:  None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-029
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Wed Feb 14 13:14:50 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: firewall2.1-001, cx6.2-132

 Related Modification Numbers: None.

 Related SARs: None.

 Problem Description:

 (1) Incorrect multithreading logic in the slow timer function caused 
     connections in the FIN_WAIT_2 state to take a much greater amount of 
     time to time out, causing a large number of connections to remain in a 
     semiclosed state in the system.
 (2) The TCP stack's kernel input routine did not have any slow timeout 
     support for sweeping IP filter rule buckets for timed out entries.
 (3) The ftpd(1M) daemon would send the FTP server's PASV reply message 
     "Listening on data connection (X.X.X.X.X.X)" where X.X.X.X.X.X reveals 
     the FTP server's IP address and listening port to the FTP client.
 (4) etc/inetd.conf and etc/services needed to be updated to support the 
     new Gopher and X11 proxies of firewall 2.1.1.

 Resolution Description:

 (1) Fix the TCP slow timeout (500ms) timer logic to permit TCP 
     connections in the TCP FIN_WAIT_2 state to time out after 11 minutes as 
     per standard Berkeley-derived TCP network stack behavior.
 (2) Add new logic to the TCP stack's kernel input routine to permit slow 
     timeout support for sweeping IP filter rule buckets for timed out 
     entries.  This improves IP packet filtering performance and use of 
     system resources.
 (3) The ftpd(1M) daemon has been modified in support of the security 
     enhancement for FTP PASV mode.  This enhancement includes the 
     removal of the FTP server's PASV reply message.
 (4) Add updates to existing etc/inetd.conf and etc/services.

 Modified Source:

	usr/src/cmd/etc/inetd.conf
	usr/src/cmd/etc/services
	usr/src/cmd/ftp/ftpd.c
	usr/src/uts/machine/netinet/ip_input.c
	usr/src/uts/machine/netinet/tcp_timer.c

 Object Modules:

	etc/inetd.conf
	etc/services
	usr/etc/ftpd
	usr/src/uts/machine/M88K/lib_netinet		ip_input.o
	usr/src/uts/machine/M88K/lib_netinet		tcp_timer.o
	usr/src/uts/machine/M88K-RT/lib_netinet		ip_input.o
	usr/src/uts/machine/M88K-RT/lib_netinet		tcp_timer.o
	usr/src/uts/machine/NH5000/lib_netinet		ip_input.o
	usr/src/uts/machine/NH5000/lib_netinet		tcp_timer.o
	usr/src/uts/machine/NH5000-RT/lib_netinet	ip_input.o
	usr/src/uts/machine/NH5000-RT/lib_netinet	tcp_timer.o

 Conditions for Installation: None.

 Possible Side Effects: None.
                                        return to index
================================================================================

                    Harris CSD Software Development
                         Software Patch Report

 Patch Name:       tcp_ip6.2-030
 Project:          HCX
 Product:          tcp_ip
 Date Issued:      Mon Mar 25 18:50:30 1996


 Release on Which Patch May Be Installed:   6.2

 Release Which Corrects Problem: N/A

 Related Patches: None

 Related Modification Numbers: N/A

 Related SARs: N/A

 Problem Description:
 
 (See Resolution Description below)

 Resolution Description:

 Changed TCPT_KEEP(alive) 500ms slow timer logic in tcp_timers()
 to timeout connections in the active and passive close states
 rather than those less than the CLOSE_WAIT state.  This will
 permit the removal of HTTP-based connections in the LAST_ACK
 state which previously would never be timed out.
  
 Added support for a proxy communicating with a server running on
 the firewall.
  
 Added support for PASV data connection mode for  ftp(1) .
  
 The tcp_input fix prevents TCP from getting into a mode where
 the send window is presumed to be zero.
 When this was the case, one byte probe packets were sent
 every retransmission. 
  
 The use of the high-water mark to determine
 the window size was removed.
 This fix corrected a problem with the WebTrack
 software where large (100KB+) files would never completely transfer.
  

 Modified Source:

	usr/src/cmd/etc/inetd.conf
	usr/src/cmd/etc/services
	usr/src/cmd/ftp/ftp.c
	usr/src/cmd/ftp/ftp.mk
	usr/src/cmd/ftp/ftp_var.h
	usr/src/cmd/ftp/main.c
	usr/src/cmd/named/README
	usr/src/cmd/named/Version.c
	usr/src/cmd/named/conf/options.h
	usr/src/cmd/named/conf/portability.h
	usr/src/cmd/named/db_defs.h
	usr/src/cmd/named/db_dump.c
	usr/src/cmd/named/db_func.h
	usr/src/cmd/named/db_glob.h
	usr/src/cmd/named/db_glue.c
	usr/src/cmd/named/db_load.c
	usr/src/cmd/named/db_lookup.c
	usr/src/cmd/named/db_reload.c
	usr/src/cmd/named/db_save.c
	usr/src/cmd/named/db_secure.c
	usr/src/cmd/named/db_update.c
	usr/src/cmd/named/dmalloc.c
	usr/src/cmd/named/dmalloc.h
	usr/src/cmd/named/include/arpa/inet.h
	usr/src/cmd/named/include/arpa/nameser.h
	usr/src/cmd/named/include/netdb.h
	usr/src/cmd/named/include/resolv.h
	usr/src/cmd/named/include/sys/bitypes.h
	usr/src/cmd/named/include/sys/cdefs.h
	usr/src/cmd/named/named-xfer.c
	usr/src/cmd/named/named.h
	usr/src/cmd/named/named.mk
	usr/src/cmd/named/named.reload.sh
	usr/src/cmd/named/named.restart.sh
	usr/src/cmd/named/ndc.sh
	usr/src/cmd/named/ns_defs.h
	usr/src/cmd/named/ns_forw.c
	usr/src/cmd/named/ns_func.h
	usr/src/cmd/named/ns_glob.h
	usr/src/cmd/named/ns_init.c
	usr/src/cmd/named/ns_main.c
	usr/src/cmd/named/ns_maint.c
	usr/src/cmd/named/ns_ncache.c
	usr/src/cmd/named/ns_req.c
	usr/src/cmd/named/ns_resp.c
	usr/src/cmd/named/ns_sort.c
	usr/src/cmd/named/ns_stats.c
	usr/src/cmd/named/ns_validate.c
	usr/src/cmd/named/pathnames.h
	usr/src/cmd/named/resolve/gethnamaddr.c
	usr/src/cmd/named/resolve/getnetbyaddr.c
	usr/src/cmd/named/resolve/getnetbyname.c
	usr/src/cmd/named/resolve/getnetent.c
	usr/src/cmd/named/resolve/getnetnamadr.c
	usr/src/cmd/named/resolve/herror.c
	usr/src/cmd/named/resolve/hostnamelen.c
	usr/src/cmd/named/resolve/inet_addr.c
	usr/src/cmd/named/resolve/libresolv.mk
	usr/src/cmd/named/resolve/nsap_addr.c
	usr/src/cmd/named/resolve/res_comp.c
	usr/src/cmd/named/resolve/res_data.c
	usr/src/cmd/named/resolve/res_debug.c
	usr/src/cmd/named/resolve/res_init.c
	usr/src/cmd/named/resolve/res_mkquery.c
	usr/src/cmd/named/resolve/res_query.c
	usr/src/cmd/named/resolve/res_send.c
	usr/src/cmd/named/resolve/sethostent.c
	usr/src/cmd/named/storage.c
	usr/src/cmd/named/syslog_alt.c
	usr/src/cmd/named/tree.c
	usr/src/cmd/named/tree.h
	usr/src/cmd/netstat/if_cyber.c
	usr/src/cmd/nslookup/commands.l
	usr/src/cmd/nslookup/debug.c
	usr/src/cmd/nslookup/getinfo.c
	usr/src/cmd/nslookup/list.c
	usr/src/cmd/nslookup/main.c
	usr/src/cmd/nslookup/nslookup.help
	usr/src/cmd/nslookup/nslookup.mk
	usr/src/cmd/nslookup/pathnames.h
	usr/src/cmd/nslookup/res.h
	usr/src/cmd/nslookup/send.c
	usr/src/cmd/nslookup/skip.c
	usr/src/cmd/nslookup/subr.c
	usr/src/uts/machine/netinet/in.c
	usr/src/uts/machine/netinet/ip_input.c
	usr/src/uts/machine/netinet/ip_output.c
	usr/src/uts/machine/netinet/tcp_input.c
	usr/sr