Patch Name: PHSS_12961

Patch Description: s700_800 10.24 (VVOS) xlock cumulative patch

Creation Date: 97/10/21

Post Date:  97/11/04

Hardware Platforms - OS Releases:
	s700: 10.24
	s800: 10.24

Products: N/A

Filesets:
	VirtualVaultOS.VVOS-AUX-IA CDE.CDE-RUN X11.X11-RUN-CTRB

Automatic Reboot?: No

Status: General Release

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHSS_12961

Symptoms:
	PHSS_12961:
	Xlock may allow undesired behavior due to insufficient
	bounds checking.

	PHSS_9905:
	The CDE lock facility in 10.20 is incompatible with
	VVOS and has been disabled in the 10.24 release of VVOS.
	VVOS 10.24 does not contain a way to lock the graphics
	display as HP-UX 10.20 does allow.

Defect Description:
	PHSS_12961:
	Xlock has a buffer overflow condition in command line
	processing.

	PHSS_9905:
	The CDE lock facility in 10.20 is incompatible with
	VVOS and has been disabled in the 10.24 release of VVOS.
	This patch provides an alternate locking solution,
	making use of an alternate locking capability.  This
	patch integrates the functionality into CDE such that
	the customer views only minimal functional differences
	between CDE locking and the alternate locking provided
	for in the patch.

SR:
	4701347138 4701372227

Patch Files:
	/etc/auth/system/files.fcdb/05.patches/PHSS09905.fcdb
	/usr/bin/X11/xlock
	/usr/lib/X11/app-defaults/XLock
	/usr/contrib/man/man1/xlock.1
	/usr/dt/appconfig/types/C/dt.dt
	/usr/dt/appconfig/types/C/dtwm.fp
	/usr/dt/appconfig/types/C/dtscreen.dt

what(1) Output:
	/etc/auth/system/files.fcdb/05.patches/PHSS09905.fcdb:
		$Revision: Hewlett-Packard ISSL 1.3 etc/auth/system/
			files.fcdb/05.patches/PHSS09905.fcdb, files_
			etc, vvos_davis, davis60 $ $Date: 97/02/19 1
			1:37:53 $
		etc/auth/system/files.fcdb/05.patches/PHSS09905.fcdb
			, files_etc, vvos_davis, davis60 $Date: 97/1
			0/22 16:04:08 $ $Revision: 1.3 PATCH_10.24 (
			PHSS_9905) $
	/usr/bin/X11/xlock:
		$Source: cmd/xlock/xlock/xlock.c, xlock, vvos_davis,
			 davis61 $Date: 97/10/22 16:12:30 $ $Revisio
			n: 1.2.1.3 PATCH_10.24 (PHSS_12961) $
		xlock.c 4.04 97/07/28 xlockmore
		passwd.c 3.11 96/09/20 xlockmore
		resource.c 4.04 97/07/28 xlockmore
		utils.c 4.04 97/07/28 xlockmore
		logout.c 4.02 97/04/01 xlockmore
		mode.c 4.02 97/04/01 xlockmore
		ras.c 4.00 97/01/01 xlockmore
		xbm.c 4.00 97/01/01 xlockmore
		color.c 4.00 97/01/01 xlockmore
		sound.c 4.00 97/01/01 xlockmore
		escher.c 4.04 97/07/28 xlockmore
		gears.c 4.04 97/07/28 xlockmore
		morph3d.c 4.04 97/07/28 xlockmore
		rubik.c 4.04 97/07/28 xlockmore
		superquadrics.c 4.04 97/07/28 xlockmore
		buildlwo.c 4.02 97/04/20 xlockmore
		pipes.c 4.04 97/07/28 xlockmore
		pipeobjs.c 4.04 97/07/28 xlockmore
		sproingies.c 4.04 97/07/28 xlockmore
		sproingiewrap.c 4.04 97/07/28 xlockmore
		s1_b.c 4.04 97/07/28 xlockmore
		s1_1.c 4.04 97/07/28 xlockmore
		s1_2.c 4.04 97/07/28 xlockmore
		s1_3.c 4.04 97/07/28 xlockmore
		s1_4.c 4.04 97/07/28 xlockmore
		s1_5.c 4.04 97/07/28 xlockmore
		s1_6.c 4.04 97/07/28 xlockmore
		ant.c 4.04 97/07/28 xlockmore
		ball.c 4.04 97/07/28 xlockmore
		bat.c 4.04 97/07/28 xlockmore
		blot.c 4.04 97/07/28 xlockmore
		bouboule.c 4.04 97/07/28 xlockmore
		bounce.c 4.04 97/07/28 xlockmore
		braid.c 4.04 97/07/28 xlockmore
		bug.c 4.04 97/07/28 xlockmore
		cartoon.c 4.04 97/07/28 xlockmore
		clock.c 4.04 97/07/28 xlockmore
		crystal.c 4.05 97/09/19 xlockmore
		daisy.c 4.04 97/07/28 xlockmore
		dclock.c 4.04 97/07/28 xlockmore
		demon.c 4.04 97/07/28 xlockmore
		drift.c 4.04 97/07/28 xlockmore
		eyes.c 4.04 97/07/28 xlockmore
		fadeplot.c  4.04 97/07/28 xlockmore
		flag.c 4.04 97/07/28 xlockmore
		flame.c 4.04 97/07/28 xlockmore
		forest.c 4.04 97/07/28 xlockmore
		galaxy.c 4.04 97/07/28 xlockmore
		geometry.c 4.04 97/07/28 xlockmore
		grav.c 4.04 97/07/28 xlockmore
		helix.c 4.04 97/07/28 xlockmore
		hop.c 4.04 97/07/28 xlockmore
		hyper.c 4.04 97/07/28 xlockmore
		ico.c 4.04 97/07/28 xlockmore
		ifs.c 4.04 97/07/28 xlockmore
		image.c 4.04 97/07/28 xlockmore
		julia.c 4.04 97/07/28 xlockmore
		kaleid.c 4.04 97/07/28 xlockmore
		laser.c 4.04 97/07/28 xlockmore
		life.c 4.04 97/07/28 xlockmore
		life1d.c 4.04 97/07/28 xlockmore
		life3d.c 4.04 97/07/28 xlockmore
		lightning.c 4.04 97/07/28 xlockmore
		lisa.c 4.04 97/07/28 xlockmore
		lissie.c 4.04 97/07/28 xlockmore
		loop.c 4.04 97/07/28 xlockmore
		marquee.c 4.04 97/07/28 xlockmore
		maze.c 4.04 97/07/28 xlockmore
		mountain.c 4.04 97/07/28 xlockmore
		munch.c 4.04 97/07/28 xlockmore
		nose.c 4.04 97/07/28 xlockmore
		pacman.c 4.04 97/07/28 xlockmore
		penrose.c 4.04 97/07/28 xlockmore
		petal.c 4.04 97/07/28 xlockmore
		puzzle.c        4.04 97/07/28 xlockmore
		pyro.c 4.04 97/07/28 xlockmore
		qix.c 4.04 97/07/28 xlockmore
		roll.c 4.04 97/07/28 xlockmore
		rotor.c 4.04 97/07/28 xlockmore
		shape.c 4.04 97/07/28 xlockmore
		sierpinski.c 4.05 97/09/19 xlockmore
		slip.c 4.04 97/07/28 xlockmore
		sphere.c 4.04 97/07/28 xlockmore
		spiral.c 4.04 97/07/28 xlockmore
		spline.c 4.04 97/07/28 xlockmore
		star.c 4.04 97/07/28 xlockmore
		strange.c    4.04 97/07/28 xlockmore
		swarm.c 4.04 97/07/28 xlockmore
		swirl.c 4.04 97/07/28 xlockmore
		triangle.c 4.04 97/07/28 xlockmore
		tube.c 4.04 97/07/28 xlockmore
		turtle.c 4.04 97/07/28 xlockmore
		vines.c 4.04 97/07/28 xlockmore
		voters.c 4.04 97/07/28 xlockmore
		wator.c 4.04 97/07/28 xlockmore
		wire.c 4.04 97/07/28 xlockmore
		world.c 4.04 97/07/28 xlockmore
		worm.c 4.04 97/07/28 xlockmore
		blank.c 4.04 97/07/28 xlockmore
		bomb.c 4.04 97/07/28 xlockmore
		random.c 4.04 97/07/28 xlockmore
		$Revision: Hewlett-Packard ISSL Level vvos_davis40 $
			 $Header: Hewlett-Packard ISSL Release vvos_
			davis $ $Date: Wed Oct 22 16:18:22 EDT 1997
			$
	/usr/lib/X11/app-defaults/XLock:
		$Revision: Hewlett-Packard ISSL 1.2.1.3 cmd/xlock/xl
			ock/XLock.ad, xlock, vvos_davis, davis61 $ $
			Date: 97/10/21 14:30:59 $
		$Source: cmd/xlock/xlock/XLock.ad, xlock, vvos_davis
			, davis61 $Date: 97/10/22 16:12:30 $ $Revisi
			on: 1.2.1.3 PATCH_10.24 (PHSS_12961) $
	/usr/contrib/man/man1/xlock.1:
		$Revision: Hewlett-Packard ISSL 1.2.1.2 cmd/xlock/xl
			ock/xlock.man, xlock, vvos_davis, davis61 $
			$Date: 97/10/22 09:53:41 $
		$Source: cmd/xlock/xlock/xlock.man, xlock, vvos_davi
			s, davis61 $Date: 97/10/22 16:12:30 $ $Revis
			ion: 1.2.1.2 PATCH_10.24 (PHCO_12961) $
		xlock.man 4.00 97/01/01
	/usr/dt/appconfig/types/C/dt.dt:
		$Revision: Hewlett-Packard ISSL 1.9 vvos/cde/appconf
			ig/types/C/dt.dt, hpuxfiles, vvos_davis, dav
			is60 $ $Date: 97/02/04 11:47:14 $
		vvos/cde/appconfig/types/C/dt.dt, hpuxfiles, vvos_da
			vis, davis60 $Date: 97/10/22 16:03:53 $ $Rev
			ision: 1.9 PATCH_10.24 (PHSS_9905) $
	/usr/dt/appconfig/types/C/dtwm.fp:
		$Revision: Hewlett-Packard ISSL 1.8 vvos/cde/appconf
			ig/types/C/dtwm.fp, hpuxfiles, vvos_davis, d
			avis60 $ $Date: 97/02/04 11:47:16 $
		vvos/cde/appconfig/types/C/dtwm.fp, hpuxfiles, vvos_
			davis, davis60 $Date: 97/10/22 16:03:53 $ $R
			evision: 1.8 PATCH_10.24 (PHSS_9905) $
	/usr/dt/appconfig/types/C/dtscreen.dt:
		$Revision: Hewlett-Packard ISSL 1.3 cmd/xlock/etc/dt
			screen.dt, xlock, vvos_davis, davis61 $ $Dat
			e: 97/10/22 15:35:10 $
		$Source: cmd/xlock/etc/dtscreen.dt, xlock, vvos_davi
			s, davis61 $Date: 97/10/22 16:12:30 $ $Revis
			ion: 1.3 PATCH_10.24 (PHCO_12961) $

cksum(1) Output:
	1110343947 1847 /etc/auth/system/files.fcdb/05.patches/
		PHSS09905.fcdb
	3765372786 1069056 /usr/bin/X11/xlock
	3360405575 13708 /usr/lib/X11/app-defaults/XLock
	108241441 32195 /usr/contrib/man/man1/xlock.1
	2295371491 18375 /usr/dt/appconfig/types/C/dt.dt
	3634637917 6914 /usr/dt/appconfig/types/C/dtwm.fp
	2337559595 15478 /usr/dt/appconfig/types/C/dtscreen.dt

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHSS_9905

Equivalent Patches: None

Patch Package Size: 1210 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_12961

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHSS_12961.depot

	5b. For a homogeneous NFS Diskless cluster run swcluster on the
	    server to install the patch on the server and the clients:

		swcluster -i -b

	    This will invoke swcluster in the interactive mode and
	    force all clients to be shut down.

	    WARNING: All cluster clients must be shut down prior to the
		     patch installation.  Installing the patch while the
		     clients are booted is unsupported and can lead to
		     serious problems.

	    The swcluster command will invoke an swinstall session in which
	    you must specify:

		alternate root path  -  default is /export/shared_root/OS_700
		source depot path    -  /tmp/PHSS_12961.depot

	    To complete the installation, select the patch by choosing
	    "Actions -> Match What Target Has" and then "Actions -> Install"
	    from the Menubar.

	5c. For a heterogeneous NFS Diskless cluster:

		- run swinstall on the server as in step 5a to install
		  the patch on the cluster server.

		- run swcluster on the server as in step 5b to install
		  the patch on the cluster clients.

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHSS_12961.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	Warning: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHSS_12961.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_12961.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	Note:  Before attempting to install this patch, it is
	       necessary to first turn off the CDE environment.
	       The typical way of doing this is to use the 'init'
	       command to set the system's run state to a level
	       which will not run CDE.  The following example will
	       set the system's run state to '2', which is a level
	       at which CDE does not typically run:

	                  init 2

	       Ater installing the patch, new .dtprofile files for
	       each user must be regenerated in order for xlock to
	       recognize the new screen savers.  This requires
	       moving each user's $HOME/.dtprofile to
	       $HOME/old.dtprofile.  Upon next login, a new version
	       of the user's .dtprofile will be created by the
	       system.