133520 2006-05-16 12:09 0000 {media-video/ffmpeg|media-libs/xine-lib} multiple issues (CVE-200{5-4048|6-2802}) 2007-05-31 10:55:45 0000 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://xinehq.de/index.php/news A2 [glsa] jaervosz P2 major --- 1 jaervosz@gentoo.org security@gentoo.org carlo@gentoo.org dertobi123@gentoo.org killerfox@gentoo.org media-video@gentoo.org ranger@gentoo.org tcort@gentoo.org tsunam@gentoo.org jaervosz@gentoo.org 2006-05-16 12:09:50 0000 Moritz Muehlenhoff from Debian found several patches in upstream CVS to fix buffer overflows. Filing as auditing as I'm not sure wether they are actually exploitable. jaervosz@gentoo.org 2006-05-16 12:10:20 0000 Created an attachment (id=86870) ffmpeg1.diff jaervosz@gentoo.org 2006-05-16 12:11:08 0000 Created an attachment (id=86871) ffmpeg2.diff jaervosz@gentoo.org 2006-05-16 12:11:21 0000 Created an attachment (id=86872) ffmpeg3.diff jaervosz@gentoo.org 2006-05-16 12:11:36 0000 Created an attachment (id=86873) ffmpeg4.diff taviso@gentoo.org 2006-05-16 12:50:54 0000 one or two look harmless, but the others look exploitable, reassigning to vulnerabilities. jaervosz@gentoo.org 2006-05-16 13:35:16 0000 Luca please patch as necessary. Since this is only semi-public, please only mention the bug number in the Changelog. lu_zero@gentoo.org 2006-05-16 14:26:12 0000 I'm looking at them right now lu_zero@gentoo.org 2006-05-16 15:18:40 0000 A new snapshot will be provided soon jaervosz@gentoo.org 2006-05-16 20:52:28 0000 Thx Luca, Setting to upstream while waiting for the new snapshot. lu_zero@gentoo.org 2006-05-17 03:05:07 0000 quick snapshot available, requires full testing, the maketest _should_ fail on ffserver but MUST work on codecs. solar@gentoo.org 2006-05-18 16:53:45 0000 Several other packages repackage ffmpeg code also. Might need to get our mmedia guys to take a closer look at the pkgs they maintain. jaervosz@gentoo.org 2006-05-18 23:04:24 0000 CC'ing Diego for advise as well. flameeyes@gentoo.org 2006-05-19 02:42:33 0000 vlc uses external ffmpeg, but xdtv uses it internal (they won't provide me a way to use it external :|); xine might use both, and if I'm just tired, I can disabled the external ffmpeg and be done with it at this point. Especially since the few issues of conflicts between ffmpeg and xine are now fixed in -r6 (with GCC 3.4 and later). solar@gentoo.org 2006-05-20 21:50:42 0000 Orig posting by Moritz Muehlenhoff. Hi, a quick heads-up; in the ffmpeg CVS logs I found changes mentioning several potential buffer overflows. I haven't had the time to investigate exploitability in detail yet, though. This might even affect you if you don't ship ffmpeg in one of your products, as parts of ffmpeg (libavcodec and libavformat) are embedded in other multimedia applications (at least xine-lib and mplayer do). Cheers, Moritz koon@gentoo.org 2006-05-30 11:11:34 0000 Luca : can we call for stabilization of this last snapshot ? lu_zero@gentoo.org 2006-05-30 12:17:48 0000 I'd like every arch to test it, probably I'll resnapshot it to push more fixes in (some security related), still there won't be as many changes as those between the current stable and this candidate. koon@gentoo.org 2006-05-30 13:27:23 0000 Pulling in security arch contacts for pretesting of the 0.4.9_p20060517 snapshot corsair@gentoo.org 2006-05-30 13:36:05 0000 0.4.9_p20060517 looks good on ppc64. the ebuild is masked by -*. should we add ~arch to the ebuild or just bump it to stable when this will get public? lu_zero@gentoo.org 2006-05-30 16:02:54 0000 I added a new snapshot in portage, please test and make it stable if nothing is wrong. corsair@gentoo.org 2006-05-31 02:55:19 0000 * Cannot find $EPATCH_SOURCE! Value for $EPATCH_SOURCE is: * * /usr/portage/media-video/ffmpeg/files/ffmpeg-0.4.9_p20060530-amr-64bit.patch * ( ffmpeg-0.4.9_p20060530-amr-64bit.patch ) ffmpeg-0.4.9_p20060302-amr-64bit.patch applies cleanly. lu_zero@gentoo.org 2006-05-31 03:08:58 0000 ops, added back. gustavoz@gentoo.org 2006-05-31 07:20:06 0000 Gave it a ~sparc, seems to work fine. killerfox@gentoo.org 2006-06-01 06:34:41 0000 Seems to work on hppa tcort@gentoo.org 2006-06-01 13:59:42 0000 looks good on amd64. halcy0n@gentoo.org 2006-06-01 20:07:29 0000 Dies on ~x86. Stable seems alright, but this one will have to be fixed as well before I keyword it. I'll try to figure it out, but I'm not terribly good with x86 asm :) i686-pc-linux-gnu-gcc -Wall -Wno-switch -O2 -march=pentium4m -pipe -ggdb -fomit-frame-pointer -fomit-frame-pointer -DHAVE_AV_CONFIG_H -I.. -I/var/tmp/portage/ffmpeg-0.4.9_p20060530/work/ffmpeg-0.4.9-p20060530-shared/libavutil -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -fPIC -DPIC -c -o i386/snowdsp_mmx.o i386/snowdsp_mmx.c i386/snowdsp_mmx.c: In function halcy0n@gentoo.org 2006-06-01 20:07:29 0000 Dies on ~x86. Stable seems alright, but this one will have to be fixed as well before I keyword it. I'll try to figure it out, but I'm not terribly good with x86 asm :) i686-pc-linux-gnu-gcc -Wall -Wno-switch -O2 -march=pentium4m -pipe -ggdb -fomit-frame-pointer -fomit-frame-pointer -DHAVE_AV_CONFIG_H -I.. -I/var/tmp/portage/ffmpeg-0.4.9_p20060530/work/ffmpeg-0.4.9-p20060530-shared/libavutil -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -fPIC -DPIC -c -o i386/snowdsp_mmx.o i386/snowdsp_mmx.c i386/snowdsp_mmx.c: In function ‘ff_snow_vertical_compose97i_sse2’: i386/snowdsp_mmx.c:461: error: PIC register ‘%ebx’ clobbered in ‘asm’ i386/snowdsp_mmx.c: In function ‘ff_snow_vertical_compose97i_mmx’: i386/snowdsp_mmx.c:568: error: PIC register ‘%ebx’ clobbered in ‘asm’ i386/snowdsp_mmx.c: In function ‘inner_add_yblock_bw_8_obmc_16_mmx’: i386/snowdsp_mmx.c:869: error: PIC register ‘%ebx’ clobbered in ‘asm’ make[1]: *** [i386/snowdsp_mmx.o] Error 1 make[1]: Leaving directory `/var/tmp/portage/ffmpeg-0.4.9_p20060530/work/ffmpeg-0.4.9-p20060530-shared/libavcodec' make: *** [lib] Error 2 !!! ERROR: media-video/ffmpeg-0.4.9_p20060530 failed. lu_zero@gentoo.org 2006-06-02 03:27:43 0000 try with -O3, if is working I'll add another check about it... dertobi123@gentoo.org 2006-06-02 14:01:43 0000 Already ~ppc'ed and also "worksforme" halcy0n@gentoo.org 2006-06-02 17:42:24 0000 (In reply to comment #26) > try with -O3, if is working I'll add another check about it... > -O3 does not help. I get the same error. Also seems kind of hackish to depend on an optimization flag to make the inline asm to work. corsair@gentoo.org 2006-06-06 00:15:04 0000 I do have a serious problem with version 0.4.9_p20060530 on PPC64. I'm getting an internal error: /usr/lib/gcc/powerpc64-unknown-linux-gnu/3.4.6/../../../../powerpc64-unknown-linux-gnu/bin/ld: BFD 2.16.1 internal error, aborting at /var/tmp/portage/binutils-2.16.1-r2/work/binutils-2.16.1/bfd/elflink.c line 6536 in elf_link_output_extsym /usr/lib/gcc/powerpc64-unknown-linux-gnu/3.4.6/../../../../powerpc64-unknown-linux-gnu/bin/ld: Please report this bug. This is already fixed in binutils versions 2.16.9x. I just don't know how to handle this. Any advice? jaervosz@gentoo.org 2006-06-30 09:02:49 0000 Luca can you help on comment #29? lu_zero@gentoo.org 2006-06-30 10:02:52 0000 I cannot tell since I don't have access to ppc64 nor I have a crossenv ready, I'd update binutils if the issue is there. koon@gentoo.org 2006-08-12 05:34:06 0000 This still misses successful checks from alpha, x86 and ppc64. lu_zero@gentoo.org 2006-08-12 06:14:09 0000 I marked it ~ppc64 since I eventually managed to test it (and seems working fine) jaervosz@gentoo.org 2006-08-24 11:14:54 0000 Any news from alpha, x86 and ppc64? jaervosz@gentoo.org 2006-09-03 06:54:43 0000 Any news from alpha, x86 and ppc64? corsair@gentoo.org 2006-09-03 08:06:18 0000 sorry, I missed the last 'ping' ... I don't know what exactly changed, but using binutils-2.16.1-r3 just works. So PPC64 is ready to go! jaervosz@gentoo.org 2006-09-05 05:59:33 0000 tsunam, kloeri any news on this one? tsunam@gentoo.org 2006-09-05 11:03:47 0000 530 emerges fine on x86; and is okie to go with me. kloeri@gentoo.org 2006-09-05 12:13:39 0000 530 is fine on Alpha. Sorry about the delay. jaervosz@gentoo.org 2006-09-05 12:28:03 0000 This one is ready for GLSA. Luca is there anything public about this upstream? lu_zero@gentoo.org 2006-09-05 14:04:43 0000 I think most of the applications using it updated their internal copy and made a note about it long ago. jaervosz@gentoo.org 2006-09-05 21:13:53 0000 Luca, do you have an URL or another pointer for an upstream statement? lu_zero@gentoo.org 2006-09-06 04:18:52 0000 http://www.mplayerhq.hu/design7/ http://xinehq.de/index.php/news To name two. flameeyes@gentoo.org 2006-09-06 04:31:57 0000 By the way, xine in Gentoo uses external FFmpeg. jaervosz@gentoo.org 2006-09-06 04:38:11 0000 Thx Luca, that was too obvious :-) Opening bug. Do we have all three issues fixed with these patches? (CVE-2005-4048, CVE-2006-2802 and "fix for a possible buffer overflow via bad indexes in specially-crafted AVI files") And does this release fix any issues that was not covered by previous GLSAs? lu_zero@gentoo.org 2006-09-06 04:48:50 0000 we aren't using patches but rely on fresh snapshot with quite a number of fixes jaervosz@gentoo.org 2006-09-06 05:15:49 0000 Thx Luca, bug was already too long and I must have forgot my head today. falco@gentoo.org 2006-09-07 05:11:33 0000 please correct me if i'm wrong : - xine-lib was not affected by CVE-2005-4048 since it had been patched (1.1.1-r3) in GLSA-200601-06. Upstream corrected it in 1.1.2. - xine-lib was affected by CVE-2006-2802 (http issue) and it is now corrected. (upstream 1.1.2) - xine-lib was affected by "a fix for a possible buffer overflow via bad indexes in specially-crafted AVI files." , corrected in upstream 1.1.2 - ffmpeg was affected by possible buffer overflows (according to the 4 patches attached to this bug). Is there any official announcement ? Is it related to the xine issues ? This requires two different GLSAs, doesn't it ? falco@gentoo.org 2006-09-07 05:22:24 0000 Actually ffmpeg-0.4.9_p20060530 has not been stabilized anywhere. So i guess this bug should not be in [glsa] status. Reverting to [stable]. Again, correct me if i'm wrong. All the main arches have already tested it so there should be no problem. Arches testers, can you make 20060530 as stable if it is still OK please ? corsair@gentoo.org 2006-09-07 06:23:59 0000 media-libs/xvid-1.1.0-r1 (dependency) and media-video/ffmpeg-0.4.9_p20060530 stable on ppc64. gustavoz@gentoo.org 2006-09-07 06:56:09 0000 So we go arch by arch then, sparc stable. tcort@gentoo.org 2006-09-07 07:52:56 0000 amd64 stable. tsunam@gentoo.org 2006-09-07 10:16:53 0000 x86 stable. dertobi123@gentoo.org 2006-09-07 23:22:43 0000 ppc stable tcort@gentoo.org 2006-09-08 13:07:49 0000 alpha stable. killerfox@gentoo.org 2006-09-08 13:26:03 0000 stable on hppa armin76@gentoo.org 2006-09-12 07:40:18 0000 Close bug? :) falco@gentoo.org 2006-09-12 08:12:46 0000 We'll close the bug as soon as the GLSA is sent :) jaervosz@gentoo.org 2006-09-12 08:39:28 0000 Handling possible bundled ffmpeg code in media-tv/xdtv on bug #147335 jaervosz@gentoo.org 2006-09-13 20:58:47 0000 GLSA 200609-08 and GLSA 200609-09 flameeyes@gentoo.org 2006-10-06 06:42:17 0000 *** Bug 150265 has been marked as a duplicate of this bug. *** lfarkas@math.bme.hu 2006-11-13 14:13:07 0000 Please modfy the RDEPEND x264? (=media-libs/x264-svn-20060612) to RDEPEND x264? (>=media-libs/x264-svn-20060612) 86870 2006-05-16 12:10 0000 ffmpeg1.diff ffmpeg1.diff text/plain VXBkYXRlIG9mIC9jdnNyb290L2ZmbXBlZy9mZm1wZWcvbGliYXZjb2RlYwpJbiBkaXJlY3Rvcnkg bWFpbDovdmFyMi90bXAvY3ZzLXNlcnY2MjMzCgpNb2RpZmllZCBGaWxlczoKCTR4bS5jIGFsYWMu YyBjb29rLmMgc2hvcnRlbi5jIHNtYWNrZXIuYyBzbm93LmMgdHRhLmMgCkxvZyBNZXNzYWdlOgpz YW5pdHkgY2hlY2tzLCBzb21lIG1pZ2h0IGhhdmUgYmVlbiBleHBsb2l0YWJsZSAuLi4KCgpJbmRl eDogNHhtLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2c3Jvb3QvZmZtcGVnL2ZmbXBlZy9saWJh dmNvZGVjLzR4bS5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjIwCnJldHJpZXZpbmcgcmV2aXNp b24gMS4yMQpkaWZmIC11IC1kIC1yMS4yMCAtcjEuMjEKLS0tIDR4bS5jCTUgRmViIDIwMDYgMTM6 MzU6MTYgLTAwMDAJMS4yMAorKysgNHhtLmMJMTMgTWF5IDIwMDYgMTA6NDU6MjUgLTAwMDAJMS4y MQpAQCAtNjA2LDcgKzYwNiw3IEBACiAgICAgaW50IGksIGZyYW1lXzRjYywgZnJhbWVfc2l6ZTsK IAogICAgIGZyYW1lXzRjYz0gZ2V0MzIoYnVmKTsKLSAgICBpZihidWZfc2l6ZSAhPSBnZXQzMihi dWYrNCkrOCl7CisgICAgaWYoYnVmX3NpemUgIT0gZ2V0MzIoYnVmKzQpKzggfHwgYnVmX3NpemUg PCAyMCl7CiAgICAgICAgIGF2X2xvZyhmLT5hdmN0eCwgQVZfTE9HX0VSUk9SLCAic2l6ZSBtaXNt YXRjaCAlZCAlZFxuIiwgYnVmX3NpemUsIGdldDMyKGJ1Zis0KSk7CiAgICAgfQogCkBAIC02MzQs NiArNjM0LDEwIEBACiAgICAgICAgIGNmcm09ICZmLT5jZnJtW2ldOwogCiAgICAgICAgIGNmcm0t PmRhdGE9IGF2X2Zhc3RfcmVhbGxvYyhjZnJtLT5kYXRhLCAmY2ZybS0+YWxsb2NhdGVkX3NpemUs IGNmcm0tPnNpemUgKyBkYXRhX3NpemUgKyBGRl9JTlBVVF9CVUZGRVJfUEFERElOR19TSVpFKTsK KyAgICAgICAgaWYoIWNmcm0tPmRhdGEpeyAvL2V4cGxpY2l0IGNoZWNrIG5lZWRlZCBhcyBtZW1j cHkgYmVsb3cgbWlnaHQgbm90IGNhdGNoIGEgTlVMTAorICAgICAgICAgICAgYXZfbG9nKGYtPmF2 Y3R4LCBBVl9MT0dfRVJST1IsICJyZWFsbG9jIGZhbHVyZSIpOworICAgICAgICAgICAgcmV0dXJu IC0xOworICAgICAgICB9CiAKICAgICAgICAgbWVtY3B5KGNmcm0tPmRhdGEgKyBjZnJtLT5zaXpl LCBidWYrMjAsIGRhdGFfc2l6ZSk7CiAgICAgICAgIGNmcm0tPnNpemUgKz0gZGF0YV9zaXplOwoK SW5kZXg6IGFsYWMuYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3Zzcm9vdC9mZm1wZWcvZmZtcGVn L2xpYmF2Y29kZWMvYWxhYy5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjExCnJldHJpZXZpbmcg cmV2aXNpb24gMS4xMgpkaWZmIC11IC1kIC1yMS4xMSAtcjEuMTIKLS0tIGFsYWMuYwkxMCBNYXkg MjAwNiAxMTo1OTowOSAtMDAwMAkxLjExCisrKyBhbGFjLmMJMTMgTWF5IDIwMDYgMTA6NDU6MjUg LTAwMDAJMS4xMgpAQCAtMTAwLDcgKzEwMCw3IEBACiAgICAgYWxhYy0+b3V0cHV0c2FtcGxlc19i dWZmZXJfYiA9IGF2X21hbGxvYyhhbGFjLT5zZXRpbmZvX21heF9zYW1wbGVzX3Blcl9mcmFtZSAq IDQpOwogfQogCi1zdGF0aWMgdm9pZCBhbGFjX3NldF9pbmZvKEFMQUNDb250ZXh0ICphbGFjKQor c3RhdGljIGludCBhbGFjX3NldF9pbmZvKEFMQUNDb250ZXh0ICphbGFjKQogewogICAgIHVuc2ln bmVkIGNoYXIgKnB0ciA9IGFsYWMtPmF2Y3R4LT5leHRyYWRhdGE7CiAKQEAgLTEwOCw2ICsxMDgs MTAgQEAKICAgICBwdHIgKz0gNDsgLyogYWxhYyAqLwogICAgIHB0ciArPSA0OyAvKiAwID8gKi8K IAorICAgIGlmKEJFXzMyKHB0cikgPj0gVUlOVF9NQVgvNCl7CisgICAgICAgIGF2X2xvZyhhbGFj LT5hdmN0eCwgQVZfTE9HX0VSUk9SLCAic2V0aW5mb19tYXhfc2FtcGxlc19wZXJfZnJhbWUgdG9v IGxhcmdlXG4iKTsKKyAgICAgICAgcmV0dXJuIC0xOworICAgIH0KICAgICBhbGFjLT5zZXRpbmZv X21heF9zYW1wbGVzX3Blcl9mcmFtZSA9IEJFXzMyKHB0cik7IC8qIGJ1ZmZlciBzaXplIC8gMiA/ ICovCiAgICAgcHRyICs9IDQ7CiAgICAgYWxhYy0+c2V0aW5mb183YSA9ICpwdHIrKzsKQEAgLTEy Niw2ICsxMzAsOCBAQAogICAgIHB0ciArPSA0OwogCiAgICAgYWxsb2NhdGVfYnVmZmVycyhhbGFj KTsKKworICAgIHJldHVybiAwOwogfQogCiAvKiBoaWRlb3VzbHkgaW5lZmZpY2llbnQuIGNvdWxk IHVzZSBhIGJpdG1hc2sgc2VhcmNoLAoKSW5kZXg6IGNvb2suYwo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxl OiAvY3Zzcm9vdC9mZm1wZWcvZmZtcGVnL2xpYmF2Y29kZWMvY29vay5jLHYKcmV0cmlldmluZyBy ZXZpc2lvbiAxLjkKcmV0cmlldmluZyByZXZpc2lvbiAxLjEwCmRpZmYgLXUgLWQgLXIxLjkgLXIx LjEwCi0tLSBjb29rLmMJMTAgRmViIDIwMDYgMTE6NTk6MzggLTAwMDAJMS45CisrKyBjb29rLmMJ MTMgTWF5IDIwMDYgMTA6NDU6MjUgLTAwMDAJMS4xMApAQCAtMTI1Myw2ICsxMjUzLDEwIEBACiAg ICAgaWYgKGluaXRfY29va192bGNfdGFibGVzKHEpICE9IDApCiAgICAgICAgIHJldHVybiAtMTsK IAorCisgICAgaWYoYXZjdHgtPmJsb2NrX2FsaWduID49IFVJTlRfTUFYLzIpCisgICAgICAgIHJl dHVybiAtMTsKKwogICAgIC8qIFBhZCB0aGUgZGF0YWJ1ZmZlciB3aXRoIEZGX0lOUFVUX0JVRkZF Ul9QQURESU5HX1NJWkUsCiAgICAgICAgdGhpcyBpcyBmb3IgdGhlIGJpdHN0cmVhbXJlYWRlci4g Ki8KICAgICBpZiAoKHEtPmRlY29kZWRfYnl0ZXNfYnVmZmVyID0gYXZfbWFsbG9jeigoYXZjdHgt PmJsb2NrX2FsaWduKyg0LWF2Y3R4LT5ibG9ja19hbGlnbiU0KSArIEZGX0lOUFVUX0JVRkZFUl9Q QURESU5HX1NJWkUpKnNpemVvZih1aW50OF90KSkpICA9PSBOVUxMKQoKSW5kZXg6IHNob3J0ZW4u Ywo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3Zzcm9vdC9mZm1wZWcvZmZtcGVnL2xpYmF2Y29kZWMv c2hvcnRlbi5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjMKcmV0cmlldmluZyByZXZpc2lvbiAx LjQKZGlmZiAtdSAtZCAtcjEuMyAtcjEuNAotLS0gc2hvcnRlbi5jCTI1IEphbiAyMDA2IDIyOjEw OjEyIC0wMDAwCTEuMworKysgc2hvcnRlbi5jCTEzIE1heSAyMDA2IDEwOjQ1OjI1IC0wMDAwCTEu NApAQCAtMTA2LDE4ICsxMDYsMjcgQEAKICAgICByZXR1cm4gMDsKIH0KIAotc3RhdGljIHZvaWQg YWxsb2NhdGVfYnVmZmVycyhTaG9ydGVuQ29udGV4dCAqcykKK3N0YXRpYyBpbnQgYWxsb2NhdGVf YnVmZmVycyhTaG9ydGVuQ29udGV4dCAqcykKIHsKICAgICBpbnQgaSwgY2hhbjsKICAgICBmb3Ig KGNoYW49MDsgY2hhbjxzLT5jaGFubmVsczsgY2hhbisrKSB7CisgICAgICAgIGlmKEZGTUFYKDEs IHMtPm5tZWFuKSA+PSBVSU5UX01BWC9zaXplb2YoaW50MzJfdCkpeworICAgICAgICAgICAgYXZf bG9nKHMtPmF2Y3R4LCBBVl9MT0dfRVJST1IsICJubWVhbiB0b28gbGFyZ2VcbiIpOworICAgICAg ICAgICAgcmV0dXJuIC0xOworICAgICAgICB9CisgICAgICAgIGlmKHMtPmJsb2Nrc2l6ZSArIHMt Pm53cmFwID49IFVJTlRfTUFYL3NpemVvZihpbnQzMl90KSB8fCBzLT5ibG9ja3NpemUgKyBzLT5u d3JhcCA8PSAodW5zaWduZWQpcy0+bndyYXApeworICAgICAgICAgICAgYXZfbG9nKHMtPmF2Y3R4 LCBBVl9MT0dfRVJST1IsICJzLT5ibG9ja3NpemUgKyBzLT5ud3JhcCB0b28gbGFyZ2VcbiIpOwor ICAgICAgICAgICAgcmV0dXJuIC0xOworICAgICAgICB9CisKICAgICAgICAgcy0+b2Zmc2V0W2No YW5dID0gYXZfcmVhbGxvYyhzLT5vZmZzZXRbY2hhbl0sIHNpemVvZihpbnQzMl90KSpGRk1BWCgx LCBzLT5ubWVhbikpOwogCiAgICAgICAgIHMtPmRlY29kZWRbY2hhbl0gPSBhdl9yZWFsbG9jKHMt PmRlY29kZWRbY2hhbl0sIHNpemVvZihpbnQzMl90KSoocy0+YmxvY2tzaXplICsgcy0+bndyYXAp KTsKICAgICAgICAgZm9yIChpPTA7IGk8cy0+bndyYXA7IGkrKykKICAgICAgICAgICAgIHMtPmRl Y29kZWRbY2hhbl1baV0gPSAwOwogICAgICAgICBzLT5kZWNvZGVkW2NoYW5dICs9IHMtPm53cmFw OwotCiAgICAgfQorICAgIHJldHVybiAwOwogfQogCiAKCkluZGV4OiBzbWFja2VyLmMKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQpSQ1MgZmlsZTogL2N2c3Jvb3QvZmZtcGVnL2ZmbXBlZy9saWJhdmNvZGVjL3NtYWNrZXIu Yyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4yCnJldHJpZXZpbmcgcmV2aXNpb24gMS4zCmRpZmYg LXUgLWQgLXIxLjIgLXIxLjMKLS0tIHNtYWNrZXIuYwkyNSBNYXIgMjAwNiAxNTozNzowOCAtMDAw MAkxLjIKKysrIHNtYWNrZXIuYwkxMyBNYXkgMjAwNiAxMDo0NToyNSAtMDAwMAkxLjMKQEAgLTE3 Nyw2ICsxNzcsMTEgQEAKICAgICBpbnQgZXNjYXBlc1szXTsKICAgICBEQkN0eCBjdHg7CiAKKyAg ICBpZihzaXplID49IFVJTlRfTUFYPj40KXsgLy8gKCgoc2l6ZSArIDMpID4+IDIpICsgMykgPDwg MiBtdXN0IG5vdCBvdmVyZmxvdworICAgICAgICBhdl9sb2coc21rLT5hdmN0eCwgQVZfTE9HX0VS Uk9SLCAic2l6ZSB0b28gbGFyZ2VcbiIpOworICAgICAgICByZXR1cm4gLTE7CisgICAgfQorCiAg ICAgdG1wMS5sZW5ndGggPSAyNTY7CiAgICAgdG1wMS5tYXhsZW5ndGggPSAwOwogICAgIHRtcDEu Y3VycmVudCA9IDA7CgpJbmRleDogc25vdy5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnNyb290 L2ZmbXBlZy9mZm1wZWcvbGliYXZjb2RlYy9zbm93LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEu OTQKcmV0cmlldmluZyByZXZpc2lvbiAxLjk1CmRpZmYgLXUgLWQgLXIxLjk0IC1yMS45NQotLS0g c25vdy5jCTIwIE1hciAyMDA2IDA1OjUyOjIzIC0wMDAwCTEuOTQKKysrIHNub3cuYwkxMyBNYXkg MjAwNiAxMDo0NToyNSAtMDAwMAkxLjk1CkBAIC0zNzEyLDcgKzM3MTIsNyBAQAogICAgIHMtPm12 X3NjYWxlPSBnZXRfc3ltYm9sKCZzLT5jLCBzLT5oZWFkZXJfc3RhdGUsIDApOwogICAgIHMtPnFi aWFzPSBnZXRfc3ltYm9sKCZzLT5jLCBzLT5oZWFkZXJfc3RhdGUsIDEpOwogICAgIHMtPmJsb2Nr X21heF9kZXB0aD0gZ2V0X3N5bWJvbCgmcy0+Yywgcy0+aGVhZGVyX3N0YXRlLCAwKTsKLSAgICBp ZihzLT5ibG9ja19tYXhfZGVwdGggPiAxKXsKKyAgICBpZihzLT5ibG9ja19tYXhfZGVwdGggPiAx IHx8IHMtPmJsb2NrX21heF9kZXB0aCA8IDApewogICAgICAgICBhdl9sb2cocy0+YXZjdHgsIEFW X0xPR19FUlJPUiwgImJsb2NrX21heF9kZXB0aD0gJWQgaXMgdG9vIGxhcmdlIiwgcy0+YmxvY2tf bWF4X2RlcHRoKTsKICAgICAgICAgcy0+YmxvY2tfbWF4X2RlcHRoPSAwOwogICAgICAgICByZXR1 cm4gLTE7CgpJbmRleDogdHRhLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2c3Jvb3QvZmZtcGVn L2ZmbXBlZy9saWJhdmNvZGVjL3R0YS5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjIKcmV0cmll dmluZyByZXZpc2lvbiAxLjMKZGlmZiAtdSAtZCAtcjEuMiAtcjEuMwotLS0gdHRhLmMJMjcgRmVi IDIwMDYgMTI6MTc6MjAgLTAwMDAJMS4yCisrKyB0dGEuYwkxMyBNYXkgMjAwNiAxMDo0NToyNiAt MDAwMAkxLjMKQEAgLTIzOCw2ICsyMzgsMTAgQEAKICAgICAgICAgYXZjdHgtPmJpdHNfcGVyX3Nh bXBsZSA9IGdldF9sZTE2KCZzLT5nYik7CiAgICAgICAgIHMtPmJwcyA9IChhdmN0eC0+Yml0c19w ZXJfc2FtcGxlICsgNykgLyA4OwogICAgICAgICBhdmN0eC0+c2FtcGxlX3JhdGUgPSBnZXRfbGUz Migmcy0+Z2IpOworICAgICAgICBpZihhdmN0eC0+c2FtcGxlX3JhdGUgPiAxMDAwMDAwKXsgLy9w cmV2ZW50IEZSQU1FX1RJTUUgKiBhdmN0eC0+c2FtcGxlX3JhdGUgZnJvbSBvdmVyZmxvd2luZyBh bmQgc2FuaXR5IGNoZWNrCisgICAgICAgICAgICBhdl9sb2coYXZjdHgsIEFWX0xPR19FUlJPUiwg InNhbXBsZV9yYXRlIHRvbyBsYXJnZVxuIik7CisgICAgICAgICAgICByZXR1cm4gLTE7CisgICAg ICAgIH0KICAgICAgICAgcy0+ZGF0YV9sZW5ndGggPSBnZXRfbGUzMigmcy0+Z2IpOwogICAgICAg ICBza2lwX2JpdHMoJnMtPmdiLCAzMik7IC8vIENSQzMyIG9mIGhlYWRlcgogCkBAIC0yNzYsNiAr MjgwLDExIEBACiAgICAgICAgICAgICBza2lwX2JpdHMoJnMtPmdiLCAzMik7CiAgICAgICAgIHNr aXBfYml0cygmcy0+Z2IsIDMyKTsgLy8gQ1JDMzIgb2Ygc2Vla3RhYmxlCiAKKyAgICAgICAgaWYo cy0+ZnJhbWVfbGVuZ3RoID49IFVJTlRfTUFYIC8gKHMtPmNoYW5uZWxzICogc2l6ZW9mKGludDMy X3QpKSl7CisgICAgICAgICAgICBhdl9sb2coYXZjdHgsIEFWX0xPR19FUlJPUiwgImZyYW1lX2xl bmd0aCB0b28gbGFyZ2VcbiIpOworICAgICAgICAgICAgcmV0dXJuIC0xOworICAgICAgICB9CisK ICAgICAgICAgcy0+ZGVjb2RlX2J1ZmZlciA9IGF2X21hbGxvY3ooc2l6ZW9mKGludDMyX3QpKnMt PmZyYW1lX2xlbmd0aCpzLT5jaGFubmVscyk7CiAgICAgfSBlbHNlIHsKICAgICAgICAgYXZfbG9n KGF2Y3R4LCBBVl9MT0dfRVJST1IsICJXcm9uZyBleHRyYWRhdGEgcHJlc2VudFxuIik7Cgo= 86871 2006-05-16 12:11 0000 ffmpeg2.diff ffmpeg2.diff text/plain VXBkYXRlIG9mIC9jdnNyb290L2ZmbXBlZy9mZm1wZWcvbGliYXZjb2RlYwpJbiBkaXJlY3Rvcnkg bWFpbDovdmFyMi90bXAvY3ZzLXNlcnYxODA5MQoKTW9kaWZpZWQgRmlsZXM6CglkdHNkZWMuYyAK TG9nIE1lc3NhZ2U6CmR0c2RlYy5jIGNvcGllcyBvbmUgaW5wdXQgcGFja2V0IGF0IGEgdGltZSB0 byBhIChzdGF0aWMpIGJ1ZmZlciBvZiBzaXplCjQwOTYgYnl0ZXMgd2hpbGUgdGhlIHBhY2tldCBj YW4gYmUgdXAgdG8gMTg3MjYgYnl0ZXMuClRoZSBjb2RlIGFsc28ga2VlcHMgZGVjb2RpbmcgdW50 aWwgYWxsIGlucHV0IGRhdGEgaGFzIGJlZW4gdXNlZCB1cCwKbm90IHJlc3BlY3RpbmcgQVZDT0RF Q19NQVhfQVVESU9fRlJBTUVfU0laRS4KClRoZSBwYXRjaCBpbmNyZWFzZXMgdGhlIGJ1ZmZlciBz aXplIGFuZCByZXR1cm4gYWZ0ZXIgZGVjb2Rpbmcgb25lIGZyYW1lLgpBbHNvIGZpeGVzIGR0c19k ZWNvZGVfaW5pdCB0byByZXR1cm4gLTEsIG5vdCAxLCBvbiBmYWlsdXJlLgoKUGF0Y2ggYnkgVW90 aSBVcnBhbGEgIHx8fCB1b3RpIDogdXJwYWxhIHwhfCBwcDEgOiBpbmV0IDogZmkgfHx8CgoKSW5k ZXg6IGR0c2RlYy5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnNyb290L2ZmbXBlZy9mZm1wZWcv bGliYXZjb2RlYy9kdHNkZWMuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS43CnJldHJpZXZpbmcg cmV2aXNpb24gMS44CmRpZmYgLXUgLWQgLXIxLjcgLXIxLjgKLS0tIGR0c2RlYy5jCTIyIERlYyAy MDA1IDAxOjEwOjA2IC0wMDAwCTEuNworKysgZHRzZGVjLmMJMjAgQXByIDIwMDYgMTk6MjM6NTcg LTAwMDAJMS44CkBAIC0zMyw4ICszMyw3IEBACiAjaW5jbHVkZSA8bWFsbG9jLmg+CiAjZW5kaWYK IAotI2RlZmluZSBJTkJVRl9TSVpFIDQwOTYKLSNkZWZpbmUgQlVGRkVSX1NJWkUgNDA5NgorI2Rl ZmluZSBCVUZGRVJfU0laRSAxODcyNgogI2RlZmluZSBIRUFERVJfU0laRSAxNAogCiAjaWZkZWYg TElCRFRTX0ZJWEVECkBAIC0yMzEsOSArMjMwLDExIEBACiAgICAgICBtZW1jcHkgKGJ1ZnB0ciwg c3RhcnQsIGxlbik7CiAgICAgICBidWZwdHIgKz0gbGVuOwogICAgICAgc3RhcnQgKz0gbGVuOwot ICAgICAgaWYgKGJ1ZnB0ciA9PSBidWZwb3MpCi0gICAgICAgIHsKLSAgICAgICAgICBpZiAoYnVm cG9zID09IGJ1ZiArIEhFQURFUl9TSVpFKQorICAgICAgaWYgKGJ1ZnB0ciAhPSBidWZwb3MpCisg ICAgICAgICAgcmV0dXJuIHN0YXJ0IC0gYnVmZjsKKyAgICAgIGlmIChidWZwb3MgIT0gYnVmICsg SEVBREVSX1NJWkUpCisgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAgIHsKICAgICAgICAg ICAgICAgaW50IGxlbmd0aDsKIApAQCAtMjQ4LDcgKzI0OSw4IEBACiAgICAgICAgICAgICAgICAg fQogICAgICAgICAgICAgICBidWZwb3MgPSBidWYgKyBsZW5ndGg7CiAgICAgICAgICAgICB9Ci0g ICAgICAgICAgZWxzZQorICAgIH0KKwogICAgICAgICAgICAgewogICAgICAgICAgICAgICBsZXZl bF90IGxldmVsOwogICAgICAgICAgICAgICBzYW1wbGVfdCBiaWFzOwpAQCAtMjgwLDE2ICsyODIs MTQgQEAKICAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgICAgIGJ1ZnB0ciA9IGJ1ZjsKICAg ICAgICAgICAgICAgYnVmcG9zID0gYnVmICsgSEVBREVSX1NJWkU7Ci0gICAgICAgICAgICAgIGNv bnRpbnVlOworICAgICAgICAgICAgICByZXR1cm4gc3RhcnQtYnVmZjsKICAgICAgICAgICAgIGVy cm9yOgogICAgICAgICAgICAgICBhdl9sb2cgKE5VTEwsIEFWX0xPR19FUlJPUiwgImVycm9yXG4i KTsKICAgICAgICAgICAgICAgYnVmcHRyID0gYnVmOwogICAgICAgICAgICAgICBidWZwb3MgPSBi dWYgKyBIRUFERVJfU0laRTsKICAgICAgICAgICAgIH0KLSAgICAgICAgfQotICAgIH0KIAotICBy ZXR1cm4gYnVmZl9zaXplOworICByZXR1cm4gc3RhcnQtYnVmZjsKIH0KIAogc3RhdGljIGludApA QCAtMjk3LDcgKzI5Nyw3IEBACiB7CiAgIGF2Y3R4LT5wcml2X2RhdGEgPSBkdHNfaW5pdCAoMCk7 CiAgIGlmIChhdmN0eC0+cHJpdl9kYXRhID09IE5VTEwpCi0gICAgcmV0dXJuIDE7CisgICAgcmV0 dXJuIC0xOwogCiAgIHJldHVybiAwOwogfQoK 86872 2006-05-16 12:11 0000 ffmpeg3.diff ffmpeg3.diff text/plain VXBkYXRlIG9mIC9jdnNyb290L2ZmbXBlZy9mZm1wZWcvbGliYXZjb2RlYwpJbiBkaXJlY3Rvcnkg bWFpbDovdmFyMi90bXAvY3ZzLXNlcnY1MDE3CgpNb2RpZmllZCBGaWxlczoKCXZvcmJpcy5jIApM b2cgTWVzc2FnZToKVm9yYmlzIHNwZWNzIHJlcXVpcmVzIGJsb2Nrc2l6ZV8xID49IGJsb2Nrc2l6 ZV8wLCBlcnJvciBpZiBpdCdzIGZhbHNlLgpQcmVkaWN0IGJ1ZmZlciBzaXplIGZyb20gYmxvY2tz aXplXzEgYW5kIG51bWJlciBvZiBjaGFubmVscyBhbmQgbWFrZSAKc3VyZSB0aGlzIGRvZXMgbm90 IGV4Y2VlZCBBVkNPREVDX01BWF9BVURJT19GUkFNRV9TSVpFCgpQYXRjaCBieSBVb3RpIFVycGFs YSA+Pj4gdW90aSB8LnwgdXJwYWxhIHxAfCBwcDEgfC58IGluZXQgfC58IGZpIDw8PAoKCkluZGV4 OiB2b3JiaXMuYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3Zzcm9vdC9mZm1wZWcvZmZtcGVnL2xp YmF2Y29kZWMvdm9yYmlzLmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMTkKcmV0cmlldmluZyBy ZXZpc2lvbiAxLjIwCmRpZmYgLXUgLWQgLXIxLjE5IC1yMS4yMAotLS0gdm9yYmlzLmMJMjUgRmVi IDIwMDYgMjI6NDE6MDYgLTAwMDAJMS4xOQorKysgdm9yYmlzLmMJMjMgQXByIDIwMDYgMjE6MTE6 MzEgLTAwMDAJMS4yMApAQCAtODcyLDEwICs4NzIsMTcgQEAKICAgICBibDE9Z2V0X2JpdHMoZ2Is IDQpOwogICAgIHZjLT5ibG9ja3NpemVfMD0oMTw8YmwwKTsKICAgICB2Yy0+YmxvY2tzaXplXzE9 KDE8PGJsMSk7Ci0gICAgaWYgKGJsMD4xMyB8fCBibDA8NiB8fCBibDE+MTMgfHwgYmwxPDYpIHsK KyAgICBpZiAoYmwwPjEzIHx8IGJsMDw2IHx8IGJsMT4xMyB8fCBibDE8NiB8fCBibDE8YmwwKSB7 CiAgICAgICAgIGF2X2xvZyh2Yy0+YXZjY29udGV4dCwgQVZfTE9HX0VSUk9SLCAiIFZvcmJpcyBp ZCBoZWFkZXIgcGFja2V0IGNvcnJ1cHQgKGlsbGVnYWwgYmxvY2tzaXplKS4gXG4iKTsKICAgICAg ICAgcmV0dXJuIDM7CiAgICAgfQorICAgIC8vIG91dHB1dCBmb3JtYXQgaW50MTYKKyAgICBpZiAo dmMtPmJsb2Nrc2l6ZV8xLzIgKiB2Yy0+YXVkaW9fY2hhbm5lbHMgKiAyID4KKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFWQ09ERUNfTUFYX0FVRElPX0ZSQU1F X1NJWkUpIHsKKyAgICAgICAgYXZfbG9nKHZjLT5hdmNjb250ZXh0LCBBVl9MT0dfRVJST1IsICJW b3JiaXMgY2hhbm5lbCBjb3VudCBtYWtlcyAiCisgICAgICAgICAgICAgICAib3V0cHV0IHBhY2tl dHMgdG9vIGxhcmdlLlxuIik7CisgICAgICAgIHJldHVybiA0OworICAgIH0KICAgICB2Yy0+c3dp bj12d2luW2JsMC02XTsKICAgICB2Yy0+bHdpbj12d2luW2JsMS02XTsKCg== 86873 2006-05-16 12:11 0000 ffmpeg4.diff ffmpeg4.diff text/plain VXBkYXRlIG9mIC9jdnNyb290L2ZmbXBlZy9mZm1wZWcvbGliYXZmb3JtYXQKSW4gZGlyZWN0b3J5 IG1haWw6L3ZhcjIvdG1wL2N2cy1zZXJ2MjExMzgKCk1vZGlmaWVkIEZpbGVzOgoJcm0uYyBzaWVy cmF2bWQuYyBzbWFja2VyLmMgdHRhLmMgCkxvZyBNZXNzYWdlOgpzYW5pdHkgY2hlY2tzIHNvbWUg bWlnaHQgaGF2ZSBiZWVuIGV4cGxvaXRhYmxlCgoKSW5kZXg6IHJtLmMKPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1Mg ZmlsZTogL2N2c3Jvb3QvZmZtcGVnL2ZmbXBlZy9saWJhdmZvcm1hdC9ybS5jLHYKcmV0cmlldmlu ZyByZXZpc2lvbiAxLjU3CnJldHJpZXZpbmcgcmV2aXNpb24gMS41OApkaWZmIC11IC1kIC1yMS41 NyAtcjEuNTgKLS0tIHJtLmMJMSBNYXIgMjAwNiAxMToyOTo1NSAtMDAwMAkxLjU3CisrKyBybS5j CTEzIE1heSAyMDA2IDExOjM3OjU2IC0wMDAwCTEuNTgKQEAgLTU1NSw2ICs1NTUsMTIgQEAKICAg ICAgICAgICAgIHN0LT5jb2RlYy0+ZXh0cmFkYXRhX3NpemU9IDA7CiAgICAgICAgICAgICBybS0+ YXVkaW9fZnJhbWVzaXplID0gc3QtPmNvZGVjLT5ibG9ja19hbGlnbjsKICAgICAgICAgICAgIHN0 LT5jb2RlYy0+YmxvY2tfYWxpZ24gPSBjb2RlZF9mcmFtZXNpemU7CisKKyAgICAgICAgICAgIGlm KHJtLT5hdWRpb19mcmFtZXNpemUgPj0gVUlOVF9NQVggLyBzdWJfcGFja2V0X2gpeworICAgICAg ICAgICAgICAgIGF2X2xvZyhzLCBBVl9MT0dfRVJST1IsICJybS0+YXVkaW9fZnJhbWVzaXplICog c3ViX3BhY2tldF9oIHRvbyBsYXJnZVxuIik7CisgICAgICAgICAgICAgICAgcmV0dXJuIC0xOwor ICAgICAgICAgICAgfQorCiAgICAgICAgICAgICBybS0+YXVkaW9idWYgPSBhdl9tYWxsb2Mocm0t PmF1ZGlvX2ZyYW1lc2l6ZSAqIHN1Yl9wYWNrZXRfaCk7CiAgICAgICAgIH0gZWxzZSBpZiAoIXN0 cmNtcChidWYsICJjb29rIikpIHsKICAgICAgICAgICAgIGludCBjb2RlY2RhdGFfbGVuZ3RoLCBp OwpAQCAtNTYyLDYgKzU2OCwxMSBAQAogICAgICAgICAgICAgaWYgKCgodmVyc2lvbiA+PiAxNikg JiAweGZmKSA9PSA1KQogICAgICAgICAgICAgICAgIGdldF9ieXRlKHBiKTsKICAgICAgICAgICAg IGNvZGVjZGF0YV9sZW5ndGggPSBnZXRfYmUzMihwYik7CisgICAgICAgICAgICBpZihjb2RlY2Rh dGFfbGVuZ3RoICsgRkZfSU5QVVRfQlVGRkVSX1BBRERJTkdfU0laRSA8PSAodW5zaWduZWQpY29k ZWNkYXRhX2xlbmd0aCl7CisgICAgICAgICAgICAgICAgYXZfbG9nKHMsIEFWX0xPR19FUlJPUiwg ImNvZGVjZGF0YV9sZW5ndGggdG9vIGxhcmdlXG4iKTsKKyAgICAgICAgICAgICAgICByZXR1cm4g LTE7CisgICAgICAgICAgICB9CisKICAgICAgICAgICAgIHN0LT5jb2RlYy0+Y29kZWNfaWQgPSBD T0RFQ19JRF9DT09LOwogICAgICAgICAgICAgc3QtPmNvZGVjLT5leHRyYWRhdGFfc2l6ZT0gY29k ZWNkYXRhX2xlbmd0aDsKICAgICAgICAgICAgIHN0LT5jb2RlYy0+ZXh0cmFkYXRhPSBhdl9tYWxs b2N6KHN0LT5jb2RlYy0+ZXh0cmFkYXRhX3NpemUgKyBGRl9JTlBVVF9CVUZGRVJfUEFERElOR19T SVpFKTsKQEAgLTU2OSw2ICs1ODAsMTIgQEAKICAgICAgICAgICAgICAgICAoKHVpbnQ4X3QqKXN0 LT5jb2RlYy0+ZXh0cmFkYXRhKVtpXSA9IGdldF9ieXRlKHBiKTsKICAgICAgICAgICAgIHJtLT5h dWRpb19mcmFtZXNpemUgPSBzdC0+Y29kZWMtPmJsb2NrX2FsaWduOwogICAgICAgICAgICAgc3Qt PmNvZGVjLT5ibG9ja19hbGlnbiA9IHJtLT5zdWJfcGFja2V0X3NpemU7CisKKyAgICAgICAgICAg IGlmKHJtLT5hdWRpb19mcmFtZXNpemUgPj0gVUlOVF9NQVggLyBzdWJfcGFja2V0X2gpeworICAg ICAgICAgICAgICAgIGF2X2xvZyhzLCBBVl9MT0dfRVJST1IsICJybS0+YXVkaW9fZnJhbWVzaXpl ICogc3ViX3BhY2tldF9oIHRvbyBsYXJnZVxuIik7CisgICAgICAgICAgICAgICAgcmV0dXJuIC0x OworICAgICAgICAgICAgfQorCiAgICAgICAgICAgICBybS0+YXVkaW9idWYgPSBhdl9tYWxsb2Mo cm0tPmF1ZGlvX2ZyYW1lc2l6ZSAqIHN1Yl9wYWNrZXRfaCk7CiAgICAgICAgIH0gZWxzZSB7CiAg ICAgICAgICAgICBzdC0+Y29kZWMtPmNvZGVjX2lkID0gQ09ERUNfSURfTk9ORTsKQEAgLTcxNSw2 ICs3MzIsMTIgQEAKICAgICAgICAgICAgICAgICBnZXRfYmUxNihwYik7CiAKICAgICAgICAgICAg ICAgICBzdC0+Y29kZWMtPmV4dHJhZGF0YV9zaXplPSBjb2RlY19kYXRhX3NpemUgLSAodXJsX2Z0 ZWxsKHBiKSAtIGNvZGVjX3Bvcyk7CisKKyAgICAgICAgICAgICAgICBpZihzdC0+Y29kZWMtPmV4 dHJhZGF0YV9zaXplICsgRkZfSU5QVVRfQlVGRkVSX1BBRERJTkdfU0laRSA8PSAodW5zaWduZWQp c3QtPmNvZGVjLT5leHRyYWRhdGFfc2l6ZSl7CisgICAgICAgICAgICAgICAgICAgIC8vY2hlY2sg aXMgcmVkdW5kYW50IGFzIGdldF9idWZmZXIoKSB3aWxsIGNhdGNoIHRoaXMKKyAgICAgICAgICAg ICAgICAgICAgYXZfbG9nKHMsIEFWX0xPR19FUlJPUiwgInN0LT5jb2RlYy0+ZXh0cmFkYXRhX3Np emUgdG9vIGxhcmdlXG4iKTsKKyAgICAgICAgICAgICAgICAgICAgcmV0dXJuIC0xOworICAgICAg ICAgICAgICAgIH0KICAgICAgICAgICAgICAgICBzdC0+Y29kZWMtPmV4dHJhZGF0YT0gYXZfbWFs bG9jeihzdC0+Y29kZWMtPmV4dHJhZGF0YV9zaXplICsgRkZfSU5QVVRfQlVGRkVSX1BBRERJTkdf U0laRSk7CiAgICAgICAgICAgICAgICAgZ2V0X2J1ZmZlcihwYiwgc3QtPmNvZGVjLT5leHRyYWRh dGEsIHN0LT5jb2RlYy0+ZXh0cmFkYXRhX3NpemUpOwogCgpJbmRleDogc2llcnJhdm1kLmMKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQpSQ1MgZmlsZTogL2N2c3Jvb3QvZmZtcGVnL2ZmbXBlZy9saWJhdmZvcm1hdC9zaWVy cmF2bWQuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4xNQpyZXRyaWV2aW5nIHJldmlzaW9uIDEu MTYKZGlmZiAtdSAtZCAtcjEuMTUgLXIxLjE2Ci0tLSBzaWVycmF2bWQuYwkxMSBNYXIgMjAwNiAw NDoyNzo1OCAtMDAwMAkxLjE1CisrKyBzaWVycmF2bWQuYwkxMyBNYXkgMjAwNiAxMTozNzo1NiAt MDAwMAkxLjE2CkBAIC0xOTYsNiArMTk2LDEwIEBACiAgICAgdm1kLT5mcmFtZV90YWJsZSA9IE5V TEw7CiAgICAgcmF3X2ZyYW1lX3RhYmxlX3NpemUgPSB2bWQtPmZyYW1lX2NvdW50ICogNjsKICAg ICByYXdfZnJhbWVfdGFibGUgPSBhdl9tYWxsb2MocmF3X2ZyYW1lX3RhYmxlX3NpemUpOworICAg IGlmKHZtZC0+ZnJhbWVfY291bnQgKiB2bWQtPmZyYW1lc19wZXJfYmxvY2sgID49IFVJTlRfTUFY IC8gc2l6ZW9mKHZtZF9mcmFtZV90KSl7CisgICAgICAgIGF2X2xvZyhzLCBBVl9MT0dfRVJST1Is ICJ2bWQtPmZyYW1lX2NvdW50ICogdm1kLT5mcmFtZXNfcGVyX2Jsb2NrIHRvbyBsYXJnZVxuIik7 CisgICAgICAgIHJldHVybiAtMTsKKyAgICB9CiAgICAgdm1kLT5mcmFtZV90YWJsZSA9IGF2X21h bGxvYyh2bWQtPmZyYW1lX2NvdW50ICogdm1kLT5mcmFtZXNfcGVyX2Jsb2NrICogc2l6ZW9mKHZt ZF9mcmFtZV90KSk7CiAgICAgaWYgKCFyYXdfZnJhbWVfdGFibGUgfHwgIXZtZC0+ZnJhbWVfdGFi bGUpIHsKICAgICAgICAgYXZfZnJlZShyYXdfZnJhbWVfdGFibGUpOwoKSW5kZXg6IHNtYWNrZXIu Ywo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3Zzcm9vdC9mZm1wZWcvZmZtcGVnL2xpYmF2Zm9ybWF0 L3NtYWNrZXIuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4xCnJldHJpZXZpbmcgcmV2aXNpb24g MS4yCmRpZmYgLXUgLWQgLXIxLjEgLXIxLjIKLS0tIHNtYWNrZXIuYwkyMSBNYXIgMjAwNiAxNzoy Nzo0NyAtMDAwMAkxLjEKKysrIHNtYWNrZXIuYwkxMyBNYXkgMjAwNiAxMTozNzo1NiAtMDAwMAkx LjIKQEAgLTExNCw2ICsxMTQsMTMgQEAKICAgICBmb3IoaSA9IDA7IGkgPCA3OyBpKyspCiAgICAg ICAgIHNtay0+YXVkaW9baV0gPSBnZXRfbGUzMihwYik7CiAgICAgc21rLT50cmVlc2l6ZSA9IGdl dF9sZTMyKHBiKTsKKworICAgIGlmKHNtay0+dHJlZXNpemUgPj0gVUlOVF9NQVgvNCl7IC8vIHNt ay0+dHJlZXNpemUgKyAxNiBtdXN0IG5vdCBvdmVyZmxvdyAodGhpcyBjaGVjayBpcyBwcm9iYWJs eSByZWR1bmRhbnQpCisgICAgICAgIGF2X2xvZyhzLCBBVl9MT0dfRVJST1IsICJ0cmVlc2l6ZSB0 b28gbGFyZ2VcbiIpOworICAgICAgICByZXR1cm4gLTE7CisgICAgfQorCisvL0ZJWE1FIHJlbW92 ZSBleHRyYWRhdGEgInJlYnVpbGRpbmciCiAgICAgc21rLT5tbWFwX3NpemUgPSBnZXRfbGUzMihw Yik7CiAgICAgc21rLT5tY2xyX3NpemUgPSBnZXRfbGUzMihwYik7CiAgICAgc21rLT5mdWxsX3Np emUgPSBnZXRfbGUzMihwYik7CgpJbmRleDogdHRhLmMKPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2 c3Jvb3QvZmZtcGVnL2ZmbXBlZy9saWJhdmZvcm1hdC90dGEuYyx2CnJldHJpZXZpbmcgcmV2aXNp b24gMS4yCnJldHJpZXZpbmcgcmV2aXNpb24gMS4zCmRpZmYgLXUgLWQgLXIxLjIgLXIxLjMKLS0t IHR0YS5jCTEzIEZlYiAyMDA2IDEyOjA1OjA2IC0wMDAwCTEuMgorKysgdHRhLmMJMTMgTWF5IDIw MDYgMTE6Mzc6NTYgLTAwMDAJMS4zCkBAIC01MCwxMyArNTAsMjcgQEAKICAgICBjaGFubmVscyA9 IGdldF9sZTE2KCZzLT5wYik7CiAgICAgYnBzID0gZ2V0X2xlMTYoJnMtPnBiKTsKICAgICBzYW1w bGVyYXRlID0gZ2V0X2xlMzIoJnMtPnBiKTsKKyAgICBpZihzYW1wbGVyYXRlIDw9IDAgfHwgc2Ft cGxlcmF0ZSA+IDEwMDAwMDApeworICAgICAgICBhdl9sb2cocywgQVZfTE9HX0VSUk9SLCAibm9u c2Vuc2Ugc2FtcGxlcmF0ZVxuIik7CisgICAgICAgIHJldHVybiAtMTsKKyAgICB9CisKICAgICBk YXRhbGVuID0gZ2V0X2xlMzIoJnMtPnBiKTsKKyAgICBpZihkYXRhbGVuIDwgMCl7CisgICAgICAg IGF2X2xvZyhzLCBBVl9MT0dfRVJST1IsICJub25zZW5zZSBkYXRhbGVuXG4iKTsKKyAgICAgICAg cmV0dXJuIC0xOworICAgIH0KKwogICAgIHVybF9mc2tpcCgmcy0+cGIsIDQpOyAvLyBoZWFkZXIg Y3JjCiAKICAgICBmcmFtZWxlbiA9IDEuMDQ0ODk3OTU5MTgzNjczNDY5MzkgKiBzYW1wbGVyYXRl OwogICAgIGMtPnRvdGFsZnJhbWVzID0gZGF0YWxlbiAvIGZyYW1lbGVuICsgKChkYXRhbGVuICUg ZnJhbWVsZW4pID8gMSA6IDApOwogICAgIGMtPmN1cnJlbnRmcmFtZSA9IDA7CiAKKyAgICBpZihj LT50b3RhbGZyYW1lcyA+PSBVSU5UX01BWC9zaXplb2YodWludDMyX3QpKXsKKyAgICAgICAgYXZf bG9nKHMsIEFWX0xPR19FUlJPUiwgInRvdGFsZnJhbWVzIHRvbyBsYXJnZVxuIik7CisgICAgICAg IHJldHVybiAtMTsKKyAgICB9CiAgICAgYy0+c2Vla3RhYmxlID0gYXZfbWFsbG9jeihzaXplb2Yo dWludDMyX3QpKmMtPnRvdGFsZnJhbWVzKTsKICAgICBpZiAoIWMtPnNlZWt0YWJsZSkKICAgICAg ICAgcmV0dXJuIEFWRVJST1JfTk9NRU07CkBAIC03Niw2ICs5MCwxMSBAQAogICAgIHN0LT5jb2Rl Yy0+Yml0c19wZXJfc2FtcGxlID0gYnBzOwogCiAgICAgc3QtPmNvZGVjLT5leHRyYWRhdGFfc2l6 ZSA9IHVybF9mdGVsbCgmcy0+cGIpIC0gc3RhcnQ7CisgICAgaWYoc3QtPmNvZGVjLT5leHRyYWRh dGFfc2l6ZStGRl9JTlBVVF9CVUZGRVJfUEFERElOR19TSVpFIDw9ICh1bnNpZ25lZClzdC0+Y29k ZWMtPmV4dHJhZGF0YV9zaXplKXsKKyAgICAgICAgLy90aGlzIGNoZWNrIGlzIHJlZHVuZGFudCBh cyBnZXRfYnVmZmVyIHNob3VsZCBmYWlsCisgICAgICAgIGF2X2xvZyhzLCBBVl9MT0dfRVJST1Is ICJleHRyYWRhdGFfc2l6ZSB0b28gbGFyZ2VcbiIpOworICAgICAgICByZXR1cm4gLTE7CisgICAg fQogICAgIHN0LT5jb2RlYy0+ZXh0cmFkYXRhID0gYXZfbWFsbG9jeihzdC0+Y29kZWMtPmV4dHJh ZGF0YV9zaXplK0ZGX0lOUFVUX0JVRkZFUl9QQURESU5HX1NJWkUpOwogICAgIHVybF9mc2Vlaygm cy0+cGIsIHN0YXJ0LCBTRUVLX1NFVCk7IC8vIG9yIFNFRUtfQ1VSIGFuZCAtc2l6ZSA/IDopCiAg ICAgZ2V0X2J1ZmZlcigmcy0+cGIsIHN0LT5jb2RlYy0+ZXh0cmFkYXRhLCBzdC0+Y29kZWMtPmV4 dHJhZGF0YV9zaXplKTsKCg==