105859 2005-09-13 14:22 0000 xorg-x11-6.8.2-r3 breaks wine 2005-09-19 22:18:23 0000 1 1 1 Unclassified Gentoo Linux Unspecified unspecified All Linux RESOLVED FIXED P2 critical --- 1 lama@lamamail.de x11@gentoo.org aaron123456789@gmail.com chutz@gg3.net koon@gentoo.org pete4abw@comcast.net rapsure@sfcn.org triffid_hunter@funkmunch.net world.root@gmail.com lama@lamamail.de 2005-09-13 14:22:17 0000 Wine can't run applications anymore after emerging xorg-x11-6.8.2-r3. Re-emerging wine does not help. Here is the error message: X Error of failed request: BadAlloc (insufficient resources for operation) Major opcode of failed request: 53 (X_CreatePixmap) Serial number of failed request: 12783 Current serial number in output stream: 12785 emerge info: Portage 2.0.52-r1 (default-linux/x86/2004.2/gcc34, gcc-3.4.4, glibc-2.3.5-r1, 2. 6.13-gentoo-r1 i686) ================================================================= System uname: 2.6.13-gentoo-r1 i686 AMD Athlon(tm) 64 Processor 3200+ Gentoo Base System version 1.12.0_pre8 dev-lang/python: 2.3.5, 2.4.1-r1 sys-apps/sandbox: 1.2.13 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.15.92.0.2-r1, 2.16.1 sys-devel/libtool: 1.5.20 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=k8 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share /config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/ mozilla/defaults/pref /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d" CXXFLAGS="-O2 -march=k8 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://gentoo.mirror.solnet.ch http://mirror.switch.ch/ftp/mirro r/gentoo/ http://ftp.snt.utwente.nl/pub/os/linux/gentoo http://gentoo.math.bme.h u http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://ftp-stud.fht-essli ngen.de/pub/Mirrors/gentoo/" LANG="en_US.utf8" LC_ALL="en_US.utf8" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 3dnow 3dnowex X Xaw3d a52 aac aalib acl acpi adns aim alsa amuled apm a rts audiofile avi bcmath berkdb bidi bindist bitmap-fonts bonobo bootsplash bzip 2 bzlib cairo cdda cddb cdparanoia cdr cjk codecs cpdflib crypt ctype cups curl curlwrappers dbus dbx dga dio divx4linux dmx dpms dvd dvdr dvdread eds effects e mboss encode erandom escreen esd estraier etwin exif extras fam fbcon ffmpeg fft w firefox flac flash font-server foomaticdb fortran freetts freetype ftp gd gdbm gif gimpprint gl glibc-compat20 glibc-omitfp glitz gnome gnutls gpm gstreamer g tk gtk2 gtkhtml guile iconv icq idn ieee1394 imagemagick imap imlib inkjar ipv6 jabber java javascript joystick jpeg jpeg2k junit kde kdeenablefinal kqemu ladcc a lcms libcaca libedit libg++ libsamplerate libwww live mad maildir matroska mbr ola memlimit mhash mikmod mime ming mmx mmx2 mng motif mozdevelop mozilla moznoc ompose moznoirc mozp3p mozsvg mp3 mpeg mplayer ncurses network nls nocd nptl nvi dia offensive ogg oggvorbis openal openexr opengl oscar oss pam pdflib perl phys fs pie plotutils plugin png portaudio posix ppds python qemu-fast qt quicktime r eadline real remote rtc samba sdk sdl session shared sharedmem silverxp slang sl p smtp sockets softmmu soundtouch speex spell sqlite sse sse2 ssl startup-notifi cation stats stream svg szip tcltk tcpd tetex theora threads thumbnail tidy tiff transcode truetype truetype-fonts type1-fonts unicode usb userlocales videos vi sualization vorbis win32codecs wmf wxgtk1 wxwindows xfs xine xml xml2 xmms xosd xpm xrandr xv xvid zlib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LDFLAGS, LINGUAS joshuabaergen@gentoo.org 2005-09-13 15:22:42 0000 This is almost definitely related to the security patch applied in -r3. It'd be nice to know if this problem exists in 6.8.99.15. Works fine for me in modular. francesco.doffizi@email.it 2005-09-13 15:32:16 0000 I'm using now wine with xorg-6.2.8-r3 (before with and after without the xorg patch that causes transparency problem with openoffice and wine). So it could be something related to particular USE or CFLAGS. If you need more info (emerge info or CFLAGS), I'm here (tomorrow! :D). lama@lamamail.de 2005-09-13 16:57:32 0000 Okay, I just compiled wine from cvs and it works flawless, so maybe there's a patch somewhere that will make 20050830 work again. madman2003@gmail.com 2005-09-14 11:24:51 0000 This affects 6.8.99.15-r1 too. pete4abw@comcast.net 2005-09-14 11:45:43 0000 wine = 20050830 xorg-x11 = 6.8.2-r3 Familiar program now croaks with this error. Worked fine up to -r2. HTH peter@mars /mnt/data/data/PC Coach $ wine pccoach X Error of failed request: BadAlloc (insufficient resources f Major opcode of failed request: 53 (X_CreatePixmap) Serial number of failed request: 12783 Current serial number in output stream: 12785 ----- # emerge info Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.3.6, glibc-2.3.5-r1, 2.6.1 2-gentoo-r10 i686) ================================================================= System uname: 2.6.12-gentoo-r10 i686 AMD Athlon(tm) XP 2800+ Gentoo Base System version 1.6.13 dev-lang/python: 2.3.5-r2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=i686 -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/ config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d" CXXFLAGS="-O2 -march=i686 -fomit-frame-pointer" DISTDIR="/mnt/src/distfiles" FEATURES="autoconfig distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://mirror.datapipe.net/gentoo ftp://gentoo.mirrors.tds.net/g entoo http://mirror.clarkson.edu/pub/distributions/gentoo/ ftp://206.75.217.180/ " MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X alsa apm arts artswrappersuid avi berkdb bitmap-fonts cdr crypt cups curl eds emboss encode esd fam flac foomaticdb fortran gd gdbm gif gnome gpm gst reamer gtk gtk2 imagemagick imlib ipv6 java jpeg kde ldap libg++ libwww mad mikm od motif mozilla mp3 mpeg mysql ncurses nls ogg oggvorbis opengl oss pam pdflib perl png python qt quicktime readline samba sdl slang spell ssl svga tcltk tcpd tiff truetype truetype-fonts type1-fonts vorbis win32codecs xine xml2 xmms xv zl ib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS pete4abw@comcast.net 2005-09-14 11:47:10 0000 Oh yes, I did try and re-emerge wine even though it appeared no libraries were out of sync. revdev-rebuild -p suggested nothing. Even after wine was rebuilt, same thing. joshuabaergen@gentoo.org 2005-09-14 14:53:24 0000 Francesco: ya, emerge info might be useful mattepiu@gentoo.org 2005-09-15 00:02:30 0000 Same issue, here are mine emerge info: Portage 2.0.52-r1 (default-linux/x86/2005.0, gcc-3.3.4, glibc-2.3.5-r1, 2.6.13-gentoo-r1 i686) ================================================================= System uname: 2.6.13-gentoo-r1 i686 AMD Athlon(tm) XP 2600+ Gentoo Base System version 1.12.0_pre8 dev-lang/python: 2.3.5-r1, 2.4.1-r1 sys-apps/sandbox: 1.2.13 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.20 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d" CXXFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs autoconfig ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://mirror.switch.ch/ftp/mirror/gentoo/ ftp://ftp.solnet.ch/mirror/Gentoo/ http://ftp.heanet.ie/pub/gentoo/ http://gentoo.chem.wisc.edu/gentoo/" LANG="it_IT@euro" LINGUAS="it" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 3dnow 3dnowex 3dnowext X aalib acl acpi acpi4linux alsa apm arts avi berkdb bitmap-fonts cdr crypt cups curl divx4linux dvb dvd dvdr dvdread eds emboss encode esd fam flac foomaticdb fortran gdbm gif gimp gnome gphoto2 gpm gstreamer gtk gtk2 guile hal imagemagick imlib java joystick jpeg kde libg++ libwww lirc mad mikmod mmx mmx2 mmxext motif mp3 mpeg ncurses nls nptl nptlonly offensive ogg oggvorbis opengl oss pam pdflib perl png python qt quicktime readline scanner sdl spell sse ssl svga tcpd tiff truetype truetype-fonts type1-fonts usb v4l v4l2 vorbis win32codecs wxgtk1 xine xml xml2 xmms xv xvid xvmc zlib zvbi linguas_it userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LC_ALL, LDFLAGS pete4abw@comcast.net 2005-09-15 05:13:04 0000 Additional info: MSIE under wine continued to launch fine. I suppose the error is in one of the DLLs native to wine. Since IE pulls in a bunch of pure M$ DLL files, I assume that's the source of the error. For example, running $ progman or $ winecfg also crashes. Looking at the last patch, it says: + if (stuff->width > 32767 || stuff->height > 32767) + { + /* It is allowed to try and allocate a pixmap which is larger than + * 32767 in either dimension. However, all of the framebuffer code + * is buggy and does not reliably draw to such big pixmaps, basically + * because the Region data structure operates with signed shorts for + * the rectangles in it. + * + * Furthermore, several places in the X server compute the size in + * bytes of the pixmap and try to store it in an integer. This + * integer can overflow and cause the allocated size to be much + * smaller. + * + * So, such big pixmaps are rejected here with a BadAlloc + */ + return BadAlloc; So, it most likely is some bug in wine requesting a bad value which was allowed to go before. I recompiled wine with USE=debug, and ran a trace on the affected program. Here is the result with the simple winecfg program: trace:loaddll:load_builtin_dll Loaded module L"c:\\windows\\system\\winex11.drv" : builtin trace:loaddll:load_builtin_dll Loaded module L"c:\\windows\\system\\imm32.dll" : builtin X Error of failed request: BadAlloc (insufficient resources for operation) Major opcode of failed request: 53 (X_CreatePixmap) Serial number of failed request: 12783 Current serial number in output stream: 12785 I tried using a native version of imm32.dll but it still crashed. So, this leads me to think there is a problem with winex11.drv. I'll go hunt around on the wine bug list and see what's doing there. If nothing, maybe I will post these results. pete4abw@comcast.net 2005-09-15 05:48:48 0000 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2495, which is the patch that's causing the problems has a curious notation on it's main page: "This is a candidate for inclusion in the CVE list, which standardizes names for security problems. It must be reviewed and accepted by the CVE Editorial Board before it can be added into CVE. Therefore, this candidate may be modified or even rejected in the future." and "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." So, I wonder. Is it even official? Obviously removing the patch would revert us back to r2 (which is what I am doing). There is no source listing anywhere and I question whether gentoo jumped the gun to apply this. It broke wine. lama@lamamail.de 2005-09-15 06:17:51 0000 https://bugs.freedesktop.org/show_bug.cgi?id=594 pete4abw@comcast.net 2005-09-15 06:33:32 0000 (In reply to comment #11) > https://bugs.freedesktop.org/show_bug.cgi?id=594 THIS PATCH IS NOT THE SAME! There are differences. For example: -+ if (paddedWidth > 32767 || height > 32767 || depth > 4) -+ return NullPixmap; -+ ++ if (paddedWidth > 32767 || height > 32767) ++ return NullPixmap; and paddedWidth = PixmapBytePad(width, depth); + -+ if (paddedWidth / 4 > 32767 || height > 32767) -+ return NullPixmap; ++ if (paddedWidth > 32767 || height > 32767) ++ return NullPixmap; Seems like there was some discussion on dividing by 4. These are absent in the CAN patch with Gentoo. pete4abw@comcast.net 2005-09-15 06:52:47 0000 xorg-x11-6.8.2-r2 was removed. However, applying this patch restores it (just changing the patch file). This disables whatever the CAN patch was supposed to do, so user beware. However, this restores wine functionality. I installed in /usr/local/portage and masked r3 in package.mask. HTH --- /usr/portage/x11-base/xorg-x11/xorg-x11-6.8.2-r3.ebuild 2005-09-12 10:15:49.000000000 -0400 +++ xorg-x11-6.8.2-r2.ebuild 2005-09-15 09:02:54.000000000 -0400 @@ -1,6 +1,6 @@ # Copyright 1999-2005 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/x11-base/xorg-x11/xorg-x11-6.8.2-r3.ebuild,v 1.1 2005/09/12 14:15:49 seemant Exp $ +# $Header: $ # Set TDFX_RISKY to "yes" to get 16-bit, 1024x768 or higher on low-memory # voodoo3 cards. @@ -38,7 +38,7 @@ # IUSE_INPUT_DEVICES="synaptics wacom" FILES_VER="0.8" -PATCH_VER="0.1.10.1" +PATCH_VER="0.1.9" XCUR_VER="0.3.1" XFSFT_ENC_VER="0.1" world.root@gmail.com 2005-09-15 07:10:39 0000 Same problem here. Still, before emerging 6.8.2-r3 I made a binary package of 6.8.2-r2. Unfortunately it seems the binary package is useless because "emerge -k" needs the 6.8.2-r2 ebuild, which disappeared from Portage tree. Please don't remove ebuild versions too fast.. Why not keep 6.8.2-r2 for 1-2 months, in case of any bugs ? It would be good.. lama@lamamail.de 2005-09-15 07:18:00 0000 (In reply to comment #13) > However, this restores wine functionality. Wine from CVS works together with the patch, maybe adding whatever they changed to 20050830 is enough. pete4abw@comcast.net 2005-09-15 11:58:49 0000 (In reply to comment #15) > (In reply to comment #13) > > However, this restores wine functionality. > > Wine from CVS works together with the patch, maybe adding whatever they changed > to 20050830 is enough. Maybe, but I am concerned that the patch gentoo has does not match the patch referenced. Also, to fork off the wine tree for cvs is not something I care to experiment with at the moment :) joshuabaergen@gentoo.org 2005-09-15 13:39:39 0000 (In reply to comment #12) > (In reply to comment #11) > > https://bugs.freedesktop.org/show_bug.cgi?id=594 > > THIS PATCH IS NOT THE SAME! There are differences. For example: Agreed. Comment #25 of the fdo bug explains why the /4 and depth check should exist. Most likely it is the missing /4 causing the problem. Unfortunately I'm at school right now and cannot commit the changes required, and I think spyderous' box is still busted. I will hopefully have a chance to make the required changes in 6-7 hours, but no promises. Since that patch is supposedly against 4.3 I'll have to hand-verify against fdo's changes before committing, so this may not happen tonight. Thanks for your patience. Until then, if someone could test the proper patch (you'll have to hand-edit ours) and make sure it works it would be appreciated. dberkholz@gentoo.org 2005-09-15 14:58:53 0000 (In reply to comment #14) > Unfortunately it seems the binary package is useless because "emerge -k" needs > the 6.8.2-r2 ebuild, which disappeared from Portage tree. Use -K to force binary. > Please don't remove ebuild versions too fast.. Why not keep 6.8.2-r2 for 1-2 > months, in case of any bugs ? It would be good.. Because fixing exploitable security vulnerabilities is most important. pete4abw@comcast.net 2005-09-15 15:13:26 0000 (In reply to comment #18) > > Please don't remove ebuild versions too fast.. Why not keep 6.8.2-r2 for 1-2 > > months, in case of any bugs ? It would be good.. > > Because fixing exploitable security vulnerabilities is most important. Well, in this case, the patch was incorrect and broke certain functionality. This is not even listed in CVE yet. I agree. The removal of -r2 was hasty and there appeared not to have been sufficient time to test. If not 1-2 months, maybe a few weeks. This was not an error that would take down a system, IMHO. vapier@gentoo.org 2005-09-15 15:32:03 0000 (In reply to comment #19) > (In reply to comment #18) > > > Please don't remove ebuild versions too fast.. Why not keep 6.8.2-r2 for 1-2 > > > months, in case of any bugs ? It would be good.. > > > > Because fixing exploitable security vulnerabilities is most important. > > Well, in this case, the patch was incorrect and broke certain functionality. that sucks, but i'd prefer to have lost a little functionality rather than someone getting unauthorized resource access. rather than complaining, why dont you test the patch that was accepted upstream and see if it even makes a difference. who knows, it might not matter at all. > This is not even listed in CVE yet. you obviously havent dealt with CVE before ... all new entries are treated like this and can take a while before it's listed ... one of the significant points of CVE is that it does not list duplicated vulnerabilities in which case, new filed reports will be removed when they are found to be duplicated. > I agree. The removal of -r2 was hasty and > there appeared not to have been sufficient time to test. If not 1-2 months, > maybe a few weeks. This was not an error that would take down a system, IMHO. no, but having a broken wine wont prevent your system from being usuable either lama@lamamail.de 2005-09-15 16:25:10 0000 > Until then, if someone could test the proper patch > (you'll have to hand-edit ours) and make sure it > works it would be appreciated. I just tested it (see attachment), wine seems to behave normal with the patch accepted by the x.org people. Note: Maybe I did something wrong with the patch below, never did this before :) lama@lamamail.de 2005-09-15 16:27:33 0000 Created an attachment (id=68543) Fixed (hopefully) patch for CAN-2005-2495 This is based on https://bugs.freedesktop.org/show_bug.cgi?id=594 vapier@gentoo.org 2005-09-15 17:23:40 0000 thanks, rerouting to X people to fix xorg ;) joshuabaergen@gentoo.org 2005-09-16 09:14:01 0000 Alexander: thank you, this will speed things along nicely :) I'll work on committing the changes tonight when I get home. joshuabaergen@gentoo.org 2005-09-16 23:22:57 0000 New patch in -r4. Thanks for your patience. madman2003@gmail.com 2005-09-17 02:55:48 0000 Will that patch also be applied to 6.8.99.15? joshuabaergen@gentoo.org 2005-09-17 08:06:31 0000 Yes. 6.8.99.15 contains some extra affected code that doesn't exist in 6.8.2 so I need to spend a few minutes this morning putting a different patch together. vapier@gentoo.org 2005-09-17 13:18:29 0000 *** Bug 106241 has been marked as a duplicate of this bug. *** madman2003@gmail.com 2005-09-17 13:29:43 0000 Thank you for your work. nbensa@gmail.com 2005-09-17 23:24:26 0000 Fixed where? After xorg 6.8.2-r4 I'm still getting BadAlloc... Do I need to re-emerge wine? nbensa@gmail.com 2005-09-18 00:04:23 0000 Sorry. I've emerged -r4 but I was running -r3 (didn't kill X) The bug is actually fixed. triffid_hunter@funkmunch.net 2005-09-18 01:25:07 0000 emerging -r4 fixed everything for me... my sound works in wine now which it didn't before, but I highly suspect that's not related ;) pete4abw@comcast.net 2005-09-18 05:08:53 0000 wfm too :) good work everyone. dberkholz@gentoo.org 2005-09-19 22:18:23 0000 *** Bug 106641 has been marked as a duplicate of this bug. *** 68543 2005-09-15 16:27 0000 Fixed (hopefully) patch for CAN-2005-2495 9995_all_CAN-2005-2495.patch text/plain ZGlmZiAtdXJOIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZlci9hZmIvYWZicGl4bWFwLmMgeGMvcHJv Z3JhbXMvWHNlcnZlci9hZmIvYWZicGl4bWFwLmMKLS0tIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZl ci9hZmIvYWZicGl4bWFwLmMJMyBKdWwgMjAwNSAwNzowMToxNCAtMDAwMAkxLjUKKysrIHhjL3By b2dyYW1zL1hzZXJ2ZXIvYWZiL2FmYnBpeG1hcC5jCTI2IEF1ZyAyMDA1IDE5OjU4OjI5IC0wMDAw CkBAIC03NywxMCArNzcsMTQgQEAgYWZiQ3JlYXRlUGl4bWFwKHBTY3JlZW4sIHdpZHRoLCBoZWln aHQsIAogCWludAkJCQlkZXB0aDsKIHsKIAlQaXhtYXBQdHIgcFBpeG1hcDsKLQlpbnQgZGF0YXNp emU7Ci0JaW50IHBhZGRlZFdpZHRoOworCXNpemVfdCBkYXRhc2l6ZTsKKwlzaXplX3QgcGFkZGVk V2lkdGg7CiAKIAlwYWRkZWRXaWR0aCA9IEJpdG1hcEJ5dGVQYWQod2lkdGgpOworCisJaWYgKHBh ZGRlZFdpZHRoID4gMzI3NjcgfHwgaGVpZ2h0ID4gMzI3NjcgfHwgZGVwdGggPiA0KQorCSAgICBy ZXR1cm4gTnVsbFBpeG1hcDsKKwkKIAlkYXRhc2l6ZSA9IGhlaWdodCAqIHBhZGRlZFdpZHRoICog ZGVwdGg7CiAJcFBpeG1hcCA9IEFsbG9jYXRlUGl4bWFwKHBTY3JlZW4sIGRhdGFzaXplKTsKIAlp ZiAoIXBQaXhtYXApCmRpZmYgLXVyTiB4Yy5vcmlnL3Byb2dyYW1zL1hzZXJ2ZXIvY2ZiL2NmYnBp eG1hcC5jIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvY2ZiL2NmYnBpeG1hcC5jCi0tLSB4Yy5vcmlnL3By b2dyYW1zL1hzZXJ2ZXIvY2ZiL2NmYnBpeG1hcC5jCTMgSnVsIDIwMDUgMDc6MDE6MTUgLTAwMDAJ MS41CisrKyB4Yy9wcm9ncmFtcy9Yc2VydmVyL2NmYi9jZmJwaXhtYXAuYwkyNiBBdWcgMjAwNSAx OTo1ODoyOSAtMDAwMApAQCAtNzIsMTAgKzcyLDEzIEBAIGNmYkNyZWF0ZVBpeG1hcCAocFNjcmVl biwgd2lkdGgsIGhlaWdodCwKICAgICBpbnQJCWRlcHRoOwogewogICAgIFBpeG1hcFB0ciBwUGl4 bWFwOwotICAgIGludCBkYXRhc2l6ZTsKLSAgICBpbnQgcGFkZGVkV2lkdGg7CisgICAgc2l6ZV90 IGRhdGFzaXplOworICAgIHNpemVfdCBwYWRkZWRXaWR0aDsKIAogICAgIHBhZGRlZFdpZHRoID0g UGl4bWFwQnl0ZVBhZCh3aWR0aCwgZGVwdGgpOworCisgICAgaWYgKHBhZGRlZFdpZHRoIC8gNCA+ IDMyNzY3IHx8IGhlaWdodCA+IDMyNzY3KQorCXJldHVybiBOdWxsUGl4bWFwOwogICAgIGRhdGFz aXplID0gaGVpZ2h0ICogcGFkZGVkV2lkdGg7CiAgICAgcFBpeG1hcCA9IEFsbG9jYXRlUGl4bWFw KHBTY3JlZW4sIGRhdGFzaXplKTsKICAgICBpZiAoIXBQaXhtYXApCmRpZmYgLXVyTiB4Yy5vcmln L3Byb2dyYW1zL1hzZXJ2ZXIvZGl4L2Rpc3BhdGNoLmMgeGMvcHJvZ3JhbXMvWHNlcnZlci9kaXgv ZGlzcGF0Y2guYwotLS0geGMub3JpZy9wcm9ncmFtcy9Yc2VydmVyL2RpeC9kaXNwYXRjaC5jCTE2 IEp1bCAyMDA1IDIwOjUyOjI1IC0wMDAwCTEuMTIKKysrIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvZGl4 L2Rpc3BhdGNoLmMJMjYgQXVnIDIwMDUgMTk6NTg6MzAgLTAwMDAKQEAgLTE0ODMsNiArMTQ4Mywy MyBAQCBQcm9jQ3JlYXRlUGl4bWFwKHJlZ2lzdGVyIENsaWVudFB0ciBjbGllCiAJY2xpZW50LT5l cnJvclZhbHVlID0gMDsKICAgICAgICAgcmV0dXJuIEJhZFZhbHVlOwogICAgIH0KKyAgICBpZiAo c3R1ZmYtPndpZHRoID4gMzI3NjcgfHwgc3R1ZmYtPmhlaWdodCA+IDMyNzY3KQorICAgIHsKKwkv KiBJdCBpcyBhbGxvd2VkIHRvIHRyeSBhbmQgYWxsb2NhdGUgYSBwaXhtYXAgd2hpY2ggaXMgbGFy Z2VyIHRoYW4KKwkgKiAzMjc2NyBpbiBlaXRoZXIgZGltZW5zaW9uLiBIb3dldmVyLCBhbGwgb2Yg dGhlIGZyYW1lYnVmZmVyIGNvZGUKKwkgKiBpcyBidWdneSBhbmQgZG9lcyBub3QgcmVsaWFibHkg ZHJhdyB0byBzdWNoIGJpZyBwaXhtYXBzLCBiYXNpY2FsbHkKKwkgKiBiZWNhdXNlIHRoZSBSZWdp b24gZGF0YSBzdHJ1Y3R1cmUgb3BlcmF0ZXMgd2l0aCBzaWduZWQgc2hvcnRzCisJICogZm9yIHRo ZSByZWN0YW5nbGVzIGluIGl0LgorCSAqCisJICogRnVydGhlcm1vcmUsIHNldmVyYWwgcGxhY2Vz IGluIHRoZSBYIHNlcnZlciBjb21wdXRlcyB0aGUKKwkgKiBzaXplIGluIGJ5dGVzIG9mIHRoZSBw aXhtYXAgYW5kIHRyaWVzIHRvIHN0b3JlIGl0IGluIGFuCisJICogaW50ZWdlci4gVGhpcyBpbnRl Z2VyIGNhbiBvdmVyZmxvdyBhbmQgY2F1c2UgdGhlIGFsbG9jYXRlZCBzaXplCisJICogdG8gYmUg bXVjaCBzbWFsbGVyLgorCSAqCisJICogU28sIHN1Y2ggYmlnIHBpeG1hcHMgYXJlIHJlamVjdGVk IGhlcmUgd2l0aCBhIEJhZEFsbG9jCisJICovCisJcmV0dXJuIEJhZEFsbG9jOworICAgIH0KICAg ICBpZiAoc3R1ZmYtPmRlcHRoICE9IDEpCiAgICAgewogICAgICAgICBwRGVwdGggPSBwRHJhdy0+ cFNjcmVlbi0+YWxsb3dlZERlcHRoczsKZGlmZiAtdXJOIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZl ci9kaXgvcGl4bWFwLmMKLS0tIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZlci9kaXgvcGl4bWFwLmMJ MyBKdWwgMjAwNSAwODo1MzozOCAtMDAwMAkxLjcKKysrIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvZGl4 L3BpeG1hcC5jCTI2IEF1ZyAyMDA1IDE5OjU4OjMwIC0wMDAwCkBAIC0xMTgsNiArMTE4LDkgQEAg QWxsb2NhdGVQaXhtYXAoU2NyZWVuUHRyIHBTY3JlZW4sIGludCBwaQogICAgIHVuc2lnbmVkIHNp emU7CiAgICAgaW50IGk7CiAKKyAgICBpZiAocFNjcmVlbi0+dG90YWxQaXhtYXBTaXplID4gKChz aXplX3QpLTEpIC0gcGl4RGF0YVNpemUpCisJcmV0dXJuIE51bGxQaXhtYXA7CisgICAgCiAgICAg cFBpeG1hcCA9IChQaXhtYXBQdHIpeGFsbG9jKHBTY3JlZW4tPnRvdGFsUGl4bWFwU2l6ZSArIHBp eERhdGFTaXplKTsKICAgICBpZiAoIXBQaXhtYXApCiAJcmV0dXJuIE51bGxQaXhtYXA7CmRpZmYg LXVyTiB4Yy5vcmlnL3Byb2dyYW1zL1hzZXJ2ZXIvZmIvZmJwaXhtYXAuYyB4Yy9wcm9ncmFtcy9Y c2VydmVyL2ZiL2ZicGl4bWFwLmMKLS0tIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZlci9mYi9mYnBp eG1hcC5jCTMgSnVsIDIwMDUgMDc6MDE6MjMgLTAwMDAJMS41CisrKyB4Yy9wcm9ncmFtcy9Yc2Vy dmVyL2ZiL2ZicGl4bWFwLmMJMjYgQXVnIDIwMDUgMTk6NTg6MzAgLTAwMDAKQEAgLTM2LDEyICsz NiwxNCBAQCBQaXhtYXBQdHIKIGZiQ3JlYXRlUGl4bWFwQnBwIChTY3JlZW5QdHIgcFNjcmVlbiwg aW50IHdpZHRoLCBpbnQgaGVpZ2h0LCBpbnQgZGVwdGgsIGludCBicHApCiB7CiAgICAgUGl4bWFw UHRyCXBQaXhtYXA7Ci0gICAgaW50CQlkYXRhc2l6ZTsKLSAgICBpbnQJCXBhZGRlZFdpZHRoOwor ICAgIHNpemVfdAlkYXRhc2l6ZTsKKyAgICBzaXplX3QJcGFkZGVkV2lkdGg7CiAgICAgaW50CQlh ZGp1c3Q7CiAgICAgaW50CQliYXNlOwogCiAgICAgcGFkZGVkV2lkdGggPSAoKHdpZHRoICogYnBw ICsgRkJfTUFTSykgPj4gRkJfU0hJRlQpICogc2l6ZW9mIChGYkJpdHMpOworICAgIGlmIChwYWRk ZWRXaWR0aCAvIDQgPiAzMjc2NyB8fCBoZWlnaHQgPiAzMjc2NykKKwlyZXR1cm4gTnVsbFBpeG1h cDsKICAgICBkYXRhc2l6ZSA9IGhlaWdodCAqIHBhZGRlZFdpZHRoOwogI2lmZGVmIFBJWFBSSVYK ICAgICBiYXNlID0gcFNjcmVlbi0+dG90YWxQaXhtYXBTaXplOwpkaWZmIC11ck4geGMub3JpZy9w cm9ncmFtcy9Yc2VydmVyL2h3L3hmcmVlODYveGFhL3hhYUluaXQuYyB4Yy9wcm9ncmFtcy9Yc2Vy dmVyL2h3L3hmcmVlODYveGFhL3hhYUluaXQuYwotLS0geGMub3JpZy9wcm9ncmFtcy9Yc2VydmVy L2h3L3hmcmVlODYveGFhL3hhYUluaXQuYwkzIEp1bCAyMDA1IDA4OjUzOjQ5IC0wMDAwCTEuNwor KysgeGMvcHJvZ3JhbXMvWHNlcnZlci9ody94ZnJlZTg2L3hhYS94YWFJbml0LmMJMjYgQXVnIDIw MDUgMTk6NTg6MzEgLTAwMDAKQEAgLTUwMiw2ICs1MDIsOSBAQCBYQUFDcmVhdGVQaXhtYXAoU2Ny ZWVuUHRyIHBTY3JlZW4sIGludCB3CiAgICAgWEFBUGl4bWFwUHRyIHBQcml2OwogICAgIFBpeG1h cFB0ciBwUGl4ID0gTlVMTDsKICAgICBpbnQgc2l6ZSA9IHcgKiBoOworCisgICAgaWYgKHcgPiAz Mjc2NyB8fCBoID4gMzI3NjcpCisJcmV0dXJuIE51bGxQaXhtYXA7CiAgICAgCiAgICAgaWYgKCFp bmZvUmVjLT5vZmZzY3JlZW5EZXB0aHNJbml0aWFsaXplZCkKIAlYQUFJbml0aWFsaXplT2Zmc2Ny ZWVuRGVwdGhzIChwU2NyZWVuKTsKIApkaWZmIC11ck4geGMub3JpZy9wcm9ncmFtcy9Yc2VydmVy L2h3L3hmcmVlODYveGY0YnBwL3BwY1BpeG1hcC5jIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcveGZy ZWU4Ni94ZjRicHAvcHBjUGl4bWFwLmMKLS0tIHhjLm9yaWcvcHJvZ3JhbXMvWHNlcnZlci9ody94 ZnJlZTg2L3hmNGJwcC9wcGNQaXhtYXAuYwkzIEp1bCAyMDA1IDA3OjAxOjQxIC0wMDAwCTEuMwor KysgeGMvcHJvZ3JhbXMvWHNlcnZlci9ody94ZnJlZTg2L3hmNGJwcC9wcGNQaXhtYXAuYwkyNiBB dWcgMjAwNSAxOTo1ODozMSAtMDAwMApAQCAtODksNyArODksNyBAQCB4ZjRicHBDcmVhdGVQaXht YXAoIHBTY3JlZW4sIHdpZHRoLCBoZWlnCiAgICAgaW50CQlkZXB0aCA7CiB7CiAgICAgcmVnaXN0 ZXIgUGl4bWFwUHRyIHBQaXhtYXAgID0gKFBpeG1hcFB0cilOVUxMOwotICAgIGludCBzaXplIDsK KyAgICBzaXplX3Qgc2l6ZSA7CiAgICAgCiAgICAgVFJBQ0UoKCJ4ZjRicHBDcmVhdGVQaXhtYXAo cFNjcmVlbj0weCV4LCB3aWR0aD0lZCwgaGVpZ2h0PSVkLCBkZXB0aD0lZClcbiIsIHBTY3JlZW4s IHdpZHRoLCBoZWlnaHQsIGRlcHRoKSkgOwogCkBAIC05Nyw2ICs5NywxMCBAQCB4ZjRicHBDcmVh dGVQaXhtYXAoIHBTY3JlZW4sIHdpZHRoLCBoZWlnCiAJcmV0dXJuIChQaXhtYXBQdHIpIE5VTEwg OwogCiAgICAgc2l6ZSA9IFBpeG1hcEJ5dGVQYWQod2lkdGgsIGRlcHRoKTsKKworICAgIGlmIChz aXplIC8gNCA+IDMyNzY3IHx8IGhlaWdodCA+IDMyNzY3KQorCXJldHVybiAoUGl4bWFwUHRyKSBO VUxMIDsKKyAgICAKICAgICBwUGl4bWFwID0gQWxsb2NhdGVQaXhtYXAgKHBTY3JlZW4sIChoZWln aHQgKiBzaXplKSk7CiAgICAgCiAgICAgaWYgKCAhcFBpeG1hcCApCmRpZmYgLXVyTiB4Yy5vcmln L3Byb2dyYW1zL1hzZXJ2ZXIvaWxibS9pbGJtcGl4bWFwLmMgeGMvcHJvZ3JhbXMvWHNlcnZlci9p bGJtL2lsYm1waXhtYXAuYwotLS0geGMub3JpZy9wcm9ncmFtcy9Yc2VydmVyL2lsYm0vaWxibXBp eG1hcC5jCTMgSnVsIDIwMDUgMDc6MDE6NDQgLTAwMDAJMS40CisrKyB4Yy9wcm9ncmFtcy9Yc2Vy dmVyL2lsYm0vaWxibXBpeG1hcC5jCTI2IEF1ZyAyMDA1IDE5OjU4OjMxIC0wMDAwCkBAIC03OSwx MCArNzksMTIgQEAgaWxibUNyZWF0ZVBpeG1hcChwU2NyZWVuLCB3aWR0aCwgaGVpZ2h0LAogCWlu dAkJCQlkZXB0aDsKIHsKIAlQaXhtYXBQdHIgcFBpeG1hcDsKLQlpbnQgZGF0YXNpemU7Ci0JaW50 IHBhZGRlZFdpZHRoOworCXNpemVfdCBkYXRhc2l6ZTsKKwlzaXplX3QgcGFkZGVkV2lkdGg7CiAK IAlwYWRkZWRXaWR0aCA9IEJpdG1hcEJ5dGVQYWQod2lkdGgpOworCWlmIChwYWRkZWRXaWR0aCA+ IDMyNzY3IHx8IGhlaWdodCA+IDMyNzY3IHx8IGRlcHRoID4gNCkKKwkJcmV0dXJuIE51bGxQaXht YXA7CiAJZGF0YXNpemUgPSBoZWlnaHQgKiBwYWRkZWRXaWR0aCAqIGRlcHRoOwogCXBQaXhtYXAg PSBBbGxvY2F0ZVBpeG1hcChwU2NyZWVuLCBkYXRhc2l6ZSk7CiAJaWYgKCFwUGl4bWFwKQpkaWZm IC11ck4geGMub3JpZy9wcm9ncmFtcy9Yc2VydmVyL2lwbGFuMnA0L2lwbHBpeG1hcC5jIHhjL3By b2dyYW1zL1hzZXJ2ZXIvaXBsYW4ycDQvaXBscGl4bWFwLmMKLS0tIHhjLm9yaWcvcHJvZ3JhbXMv WHNlcnZlci9pcGxhbjJwNC9pcGxwaXhtYXAuYwkzIEp1bCAyMDA1IDA3OjAxOjQ2IC0wMDAwCTEu NAorKysgeGMvcHJvZ3JhbXMvWHNlcnZlci9pcGxhbjJwNC9pcGxwaXhtYXAuYwkyNiBBdWcgMjAw NSAxOTo1ODozMSAtMDAwMApAQCAtNzgsMTIgKzc4LDE0IEBAIGlwbENyZWF0ZVBpeG1hcCAocFNj cmVlbiwgd2lkdGgsIGhlaWdodCwKICAgICBpbnQJCWRlcHRoOwogewogICAgIFBpeG1hcFB0ciBw UGl4bWFwOwotICAgIGludCBkYXRhc2l6ZTsKLSAgICBpbnQgcGFkZGVkV2lkdGg7CisgICAgc2l6 ZV90IGRhdGFzaXplOworICAgIHNpemVfdCBwYWRkZWRXaWR0aDsKICAgICBpbnQgaXBhZD1JTlRF Ul9QTEFORVMqMiAtIDE7CiAKICAgICBwYWRkZWRXaWR0aCA9IFBpeG1hcEJ5dGVQYWQod2lkdGgs IGRlcHRoKTsKICAgICBwYWRkZWRXaWR0aCA9IChwYWRkZWRXaWR0aCArIGlwYWQpICYgfmlwYWQ7 CisgICAgaWYgKHBhZGRlZFdpZHRoIC8gNCA+IDMyNzY3IHx8IGhlaWdodCA+IDMyNzY3KQorCXJl dHVybiBOdWxsUGl4bWFwOwogICAgIGRhdGFzaXplID0gaGVpZ2h0ICogcGFkZGVkV2lkdGg7CiAg ICAgcFBpeG1hcCA9IEFsbG9jYXRlUGl4bWFwKHBTY3JlZW4sIGRhdGFzaXplKTsKICAgICBpZiAo IXBQaXhtYXApCmRpZmYgLXVyTiB4Yy5vcmlnL3Byb2dyYW1zL1hzZXJ2ZXIvbWZiL21mYnBpeG1h cC5jIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvbWZiL21mYnBpeG1hcC5jCi0tLSB4Yy5vcmlnL3Byb2dy YW1zL1hzZXJ2ZXIvbWZiL21mYnBpeG1hcC5jCTMgSnVsIDIwMDUgMDc6MDE6NTAgLTAwMDAJMS40 CisrKyB4Yy9wcm9ncmFtcy9Yc2VydmVyL21mYi9tZmJwaXhtYXAuYwkyNiBBdWcgMjAwNSAxOTo1 ODozMSAtMDAwMApAQCAtNzUsMTIgKzc1LDE0IEBAIG1mYkNyZWF0ZVBpeG1hcCAocFNjcmVlbiwg d2lkdGgsIGhlaWdodCwKICAgICBpbnQJCWRlcHRoOwogewogICAgIFBpeG1hcFB0ciBwUGl4bWFw OwotICAgIGludCBkYXRhc2l6ZTsKLSAgICBpbnQgcGFkZGVkV2lkdGg7CisgICAgc2l6ZV90IGRh dGFzaXplOworICAgIHNpemVfdCBwYWRkZWRXaWR0aDsKIAogICAgIGlmIChkZXB0aCAhPSAxKQog CXJldHVybiBOdWxsUGl4bWFwOwogICAgIHBhZGRlZFdpZHRoID0gQml0bWFwQnl0ZVBhZCh3aWR0 aCk7CisgICAgaWYgKHBhZGRlZFdpZHRoIC8gNCA+IDMyNzY3IHx8IGhlaWdodCA+IDMyNzY3KQor CXJldHVybiBOdWxsUGl4bWFwOwogICAgIGRhdGFzaXplID0gaGVpZ2h0ICogcGFkZGVkV2lkdGg7 CiAgICAgcFBpeG1hcCA9IEFsbG9jYXRlUGl4bWFwKHBTY3JlZW4sIGRhdGFzaXplKTsKICAgICBp ZiAoIXBQaXhtYXApCg==