135974 2006-06-07 12:30 0000 {x11-base/xorg-x11|x11-terms/xterm} Unchecked set*uid() calls 2006-11-11 20:22:55 0000 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://lists.freedesktop.org/archives/xorg/2006-June/016146.html A1 [glsa] DerCorny P2 major --- 143647 1 jaervosz@gentoo.org security@gentoo.org dberkholz@gentoo.org dickey@his.com dickey@radix.net exg@gentoo.org mips@gentoo.org seemant@gentoo.org tcort@gentoo.org welp@gentoo.org jaervosz@gentoo.org 2006-06-07 12:30:32 0000 Dirk Mueller and I have been checking for setuid/seteuid without return checks. One offender who is exploitable we think is X. Both X.Org and XFree86. For the readers who just joined a brief summary: In kernel 2.6 it is possible that setuid(user_uid); can fail even if done from root a process. Reason is that there is the maximum processes "ulimit" which is honoured by setuid(), seteuid(), set*uid(). If you do not check the return value and continue as-is you have not dropped the privilege, but run as root. An example of this has been released in "vixie-cron". Since ulimits on maximum processes are set by the kernel by default, any Linux 2.6 system is default affected. Fix: Check the return value of setuid() and handle it and/or check with getuid() right after the setuid() if it worked. My evaluation might be off and it might not be exploitable in these places. If this is exploitable I would propose an embargo of 2 weeks. (Tue June 20th 12:00 UTC would be a nice date) Critical MUST FIX problems: ./programs/Xserver/hw/xfree86/common/xf86Init.c: setuid(getuid()); Security relevant and critical. After this "sh -c "vtinit"" is called, which might be exploitable. (SUSE has the X Server setuid root, so this would affect us.) ./programs/Xserver/hw/xfree86/parser/write.c: setuid(getuid()); Security relevant and critical. Can corrupt any file on the system, like /etc/shadow. (I think via: Xorg -configure --... /etc/shadow) ./programs/Xserver/hw/xfree86/os-support/shared/libc_wrapper.c: setuid(getuid()); Security relevant and critical. In xf86execl(), which I do not know who calls it. ./programs/Xserver/os/utils.c: setuid(getuid()); ./programs/Xserver/os/utils.c: setuid(getuid()); ./programs/Xserver/os/utils.c: setuid(getuid()); Security relevant and critical. These are in Popen(), Fopen(), System(). Leak file content, start called programs as root. All of them above are in the XServer. Normal problems, but should be fixed probably: ./lib/X11/lcFile.c: if (seteuid(0) != 0) { ./lib/X11/lcFile.c: seteuid(oldeuid); Obscure. ./lib/xtrans/Xtranslcl.c: setuid( getuid() ); /** sets the euid to the actual/real uid **/ Obscure, not used in modern systems. ./config/util/chownxterm.c: setuid(getuid()); ./config/util/chownxterm.c: setuid(getuid()); No setuid/setgid xterm used, we have utempter and devpts. ./programs/xdm/session.c: setuid (verify.uid); This needs to be fixed, but is not security critical. It is called before the KRB5 tickets are dropped and the user auth is removed. ./programs/xdm/xdmshell.c: setuid (geteuid()); Should be fixed. In common use scenarios it is not setuid-root, so not critical. ./programs/xinit/xinit.c: setuid(getuid()); Security relevant. Must be fixed. This is critical when xinit is setuid-root, but I do not know if anyone has it so. ./programs/xload/xload.c: setuid(getuid()); Security relevant. No one ships xload setuid root anymore, but it should be fixed. ./programs/xterm/main.c: seteuid(getuid()); ./programs/xterm/main.c: setuid(getuid()); ./programs/xterm/main.c: seteuid(getuid()); ./programs/xterm/main.c: setuid(getuid()); ./programs/xterm/main.c: seteuid(0); ./programs/xterm/main.c: seteuid(getuid()); ./programs/xterm/main.c: setuid(screen->uid); ./programs/xterm/main.c: if (setuid(screen->uid)) { ./programs/xterm/misc.c: setuid(uid); ./programs/xterm/misc.c: setuid(screen->uid); ./programs/xterm/os2main.c: setuid(screen->uid); ./programs/xterm/os2main.c: setuid(screen->uid); ./programs/xterm/print.c: setuid(screen->uid); No one ships xterm setuid root anymore, but it should be fixed for those who do. ./programs/xf86dga/dga.c: setuid(getuid()); The old DGA binary, not shipped setuid root at SUSE. It does not do much exploitable afterwards, but it usually destroys your X session anyway, so it is better to not run it. Ciao, Marcus dercorny@gentoo.org 2006-06-13 02:34:00 0000 heya spyderous, this is from v-s, please have a look and recommend what you would like to do here. dberkholz@gentoo.org 2006-06-13 08:59:16 0000 From the looks of it, it's certainly real bugs. I'll leave the question of how exploitable they are to upstream. For reference, the upstream bug is https://bugs.freedesktop.org/show_bug.cgi?id=7116 although none of you will have access to it. =) There have been no comments on it since June 5, but it does contain patches. jaervosz@gentoo.org 2006-06-14 03:46:23 0000 Setting it to upstream until we have the patches. dberkholz@gentoo.org 2006-06-14 09:13:10 0000 Created an attachment (id=89172) Most of modular dberkholz@gentoo.org 2006-06-14 09:14:09 0000 Created an attachment (id=89173) libX11 Note, the modular patches lack the patches against xterm. But they are in the monolith patch. dberkholz@gentoo.org 2006-06-14 09:14:56 0000 Created an attachment (id=89174) Monolith 6.9 With luck, will apply to 6.8 as well. Can pull xterm diff out of here. dberkholz@gentoo.org 2006-06-14 09:18:43 0000 btw, exg should probably be on here as xterm maintainer. jaervosz@gentoo.org 2006-06-14 09:23:55 0000 Adding Emanuele. jaervosz@gentoo.org 2006-06-15 09:17:28 0000 @Thomas: could you post a mail to vendor-sec saying when you will announce the new version (and give access to it so that vendors have a bit of time to prepare a package?) Alternatively you can let me know and I'll forward the information. dberkholz@gentoo.org 2006-06-20 06:39:47 0000 Recommend no GLSA. From the advisory: "This can be used by a malicious local user to overwrite files and possibly elevate privileges in some corner cases." taviso@gentoo.org 2006-06-20 13:03:37 0000 hmm, I'm not sure what you're trying to point out spyderous, I've seen a demonstration of an unprivileged user trashing /etc/shadow via X -configure, which certainly merits a GLSA, imho. dberkholz@gentoo.org 2006-06-20 13:14:32 0000 Eh, whatever makes you happy. Link to advisory: http://lists.freedesktop.org/archives/xorg/2006-June/016146.html Ebuilds in portage for all issues now, with the exception of xterm because I don't maintain it. xorg-x11-6.8.2-r8 will require stabling on all arches, the rest were ~arch before. Complete list of "safe" versions: >=libX11-1.0.1-r1 >=xdm-1.0.4-r1 >=xf86dga-1.0.1-r1 >=xinit-1.0.2-r6 >=xload-1.0.1-r1 && ( >=xorg-server-1.0.2-r6 <xorg-server-1.1 ) >=xorg-server-1.1.0-r1 >=xtrans-1.0.0-r1 && ( >=xorg-x11-6.8.2-r8 <xorg-x11-6.9 ) >=xorg-x11-6.9.0-r2 exg@gentoo.org 2006-06-20 14:34:22 0000 xterm-215, which is fixed wrt the issue, is in the tree now. jaervosz@gentoo.org 2006-06-21 08:25:47 0000 Opening since this is public now. Arches please test and mark stable. dberkholz@gentoo.org 2006-06-21 08:33:26 0000 To clarify, xorg-x11-6.8.2-r8 and xterm-215 need stabling. gustavoz@gentoo.org 2006-06-21 15:23:35 0000 sparc stable. tsunam@gentoo.org 2006-06-21 22:35:43 0000 xterm is stable..however xorg has at least one depend that needs to go first. x11-base/xorg-x11/xorg-x11-6.8.2-r8.ebuild: x86(hardened/x86) ['x11-misc/linuxwacom'] please advise. tsunam@gentoo.org 2006-06-21 22:36:07 0000 didn't mean to remove x86 ^.^;; dberkholz@gentoo.org 2006-06-21 23:05:03 0000 The hardened/x86 2.4 kernel profile is currently broken wrt X because of this issue. I recommend you temporarily remove it from your profiles.desc, as it was just added earlier this month. Work is in progress to fix this. wolf31o2@gentoo.org 2006-06-22 09:23:27 0000 I think I'd rather just fix the problem. Removing -input_devices_wacom from use.mask on the hardened profile solves the issue. xorg-x11-6.8.2-r8 stable on x86 dberkholz@gentoo.org 2006-06-22 10:30:14 0000 That just masks the breakage, it will still be pulled in on INPUT_DEVICES="" because we don't have a way to do dep strings depending on kernel in profile. corsair@gentoo.org 2006-06-24 01:58:45 0000 stable on ppc64 dertobi123@gentoo.org 2006-06-25 02:42:24 0000 ppc stable dickey@his.com 2006-06-25 08:35:39 0000 Emanuele Giaquinta pointed this out to me (there's some problem with email from this bugzilla to radix.net, so I subscribed from his.com). gmsoft@gentoo.org 2006-06-27 00:53:10 0000 Stable on hppa. welp@gentoo.org 2006-06-29 04:32:57 0000 Stable on amd64 blubb@gentoo.org 2006-06-29 04:41:05 0000 xterm is stable on amd64, but i can't stablize xorg-x11 for some reason, repoman gives me a huge load of RDEPEND.bad errors for modular X on all arches. can someone else from amd64 give it a try please? blubb@gentoo.org 2006-06-29 04:41:13 0000 *** Bug 138458 has been marked as a duplicate of this bug. *** dberkholz@gentoo.org 2006-06-29 06:34:09 0000 (In reply to comment #27) > xterm is stable on amd64, but i can't stablize xorg-x11 for some reason, > repoman gives me a huge load of RDEPEND.bad errors for modular X on all arches. > can someone else from amd64 give it a try please? Run cvs up in the other directories you're getting errors from (probably x11-drivers), and profiles and eclass. dberkholz@gentoo.org 2006-06-29 06:35:07 0000 FYI libX11 1.0.2 missed one of the security fixes, so please don't GLSA this until I release and add 1.0.3. tcort@gentoo.org 2006-06-29 08:42:21 0000 (In reply to comment #27) > xterm is stable on amd64, but i can't stablize xorg-x11 for some reason, > repoman gives me a huge load of RDEPEND.bad errors for modular X on all arches. > can someone else from amd64 give it a try please? I didn't get any RDEPEND.bad errors. xorg-x11-6.8.2-r8 stable on amd64. tcort@gentoo.org 2006-06-30 06:06:02 0000 alpha stable. jaervosz@gentoo.org 2006-06-30 08:48:20 0000 Back to ebuild status awaiting libX11 1.0.3 kumba@gentoo.org 2006-07-08 21:07:57 0000 xterm-215 is stable on mips, and I believe we're de-keywording 6.*, since 7.1 is stable for us. Leaving on CC until resolved. koon@gentoo.org 2006-08-12 03:29:21 0000 AFAICT libX11-1.0.3 is in, time to mark stable, I guess. ticho@gentoo.org 2006-08-12 05:41:55 0000 What exactly it is you want arches to test and stabilize? I haven't been following this issue. corsair@gentoo.org 2006-08-12 08:09:38 0000 libX11-1.0.3 and xproto-7.0.7 (dependency) stable on ppc64 fauli@gentoo.org 2006-08-12 12:49:02 0000 x86 needs x11-proto/xproto-7.0.7 and x11-libs/libX11-1.0.3 1) both emerge fine 2) pass collision test 3) libX11 passes test suite 4) X starts with Gnome, KDE and XSession 5) and please change subjects to the desired packages or give a useful cc comment Portage 2.1-r1 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r4, 2.6.17-gentoo-r4 i686) ================================================================= System uname: 2.6.17-gentoo-r4 i686 AMD Athlon(tm) XP 2500+ Gentoo Base System version 1.6.15 app-admin/eselect-compiler: [Not Present] dev-lang/python: 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/X11/xkb" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo" CXXFLAGS="-O2" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache collision-protect distlocks metadata-transfer parallel-fetch sandbox sfperms strict test" GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo/" LANG="de_DE@euro" LC_ALL="de_DE@euro" LINGUAS="de" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.informatik.rwth-aachen.de/gentoo-portage" USE="x86 3dnow 3dnowext X Xaw3d a52 alsa arts artworkextra asf audiofile avi bash-completion beagle berkdb bidi bitmap-fonts bootsplash branding bzip2 cairo cdda cddb cdparanoia cdr cli cracklib crypt css cups curl custom-cflags dbus dga directfb divx4linux dlloader dri dts dvd dvdr dvdread dvi eds emacs emboss encode esd evo exif expat fam fat fbcon ffmpeg firefox foomaticdb fortran ftp gb gcj gdbm gif gnome gpm gstreamer gtk gtk2 gtkhtml hal icq idn imagemagick imap imlib ipv6 isdnlog java javascript jikes jpeg jpeg2k ldap leim libg++ libwww lm_sensors mad maildir matroska mbox mikmod mime mmx mmxext mng mono motif mp3 mpeg mpeg2 mule nautilus ncurses nforce2 nls nocardbus nptl nptlonly nsplugin nvidia objc ogg opengl pam pcre pdf pdflib perl plotutils pmu png ppds pppd preview-latex print python qt3 qt4 quicktime readline reflection reiserfs samba sdk session slang spell spl sse ssl svg svga t1lib tcltk tcpd theora thunderbird tiff truetype truetype-fonts type1-fonts udev usb vcd videos vorbis win32codecs wmf wxwindows xine xml xorg xosd xv xvid zlib elibc_glibc input_devices_mouse input_devices_keyboard kernel_linux linguas_de userland_GNU video_cards_radeon video_cards_vesa video_cards_fbdev" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS killerfox@gentoo.org 2006-08-12 13:15:20 0000 remove us from cc. killerfox@gentoo.org 2006-08-12 13:16:17 0000 damn. that was the wrong bug. Readded. dberkholz@gentoo.org 2006-08-12 15:56:45 0000 libX11 1.0.1-r1 is fine, so is libX11 1.0.3 -- 1.0.3 has lots of changes though, so please test carefully if you're stabilizing. blubb@gentoo.org 2006-08-14 09:53:32 0000 1.0.1-r1 is already stable on amd64, as it's secure we're out dertobi123@gentoo.org 2006-08-14 10:13:39 0000 (In reply to comment #42) > 1.0.1-r1 is already stable on amd64, as it's secure we're out Same for ppc. tcort@gentoo.org 2006-08-14 10:24:26 0000 (In reply to comment #42) > 1.0.1-r1 is already stable on amd64, as it's secure we're out Same for alpha tsunam@gentoo.org 2006-08-14 20:50:38 0000 x86 stable and gone ^.^;; killerfox@gentoo.org 2006-08-15 04:27:39 0000 stable on hppa also. gustavoz@gentoo.org 2006-08-17 17:18:30 0000 sparc is clean since we don't have modular stable yet. dberkholz@gentoo.org 2006-08-17 17:41:16 0000 It would be helpful if you could say in the GLSA that it's actually been available and stable for most architectures since 30 June, and the release has just been held up. falco@gentoo.org 2006-08-18 03:04:33 0000 Thanks teams (In reply to comment #48) > It would be helpful if you could say in the GLSA that it's actually been > available and stable for most architectures since 30 June, and the release has > just been held up. mmm, we'll try to add that. Thanks. jaervosz@gentoo.org 2006-08-19 11:15:03 0000 Accepting bug. falco@gentoo.org 2006-08-28 10:04:07 0000 GLSA 200608-25 89172 2006-06-14 09:13 0000 Most of modular setuid-modular-1.diff text/plain SW5kZXg6IGFwcC94ZG0vc2Vzc2lvbi5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy9h cHAveGRtL3Nlc3Npb24uYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS43CmRpZmYgLXUgLXIxLjcg c2Vzc2lvbi5jCi0tLSBhcHAveGRtL3Nlc3Npb24uYwkzIEp1biAyMDA2IDAwOjA1OjI0IC0wMDAw CTEuNworKysgYXBwL3hkbS9zZXNzaW9uLmMJNSBKdW4gMjAwNiAxMTowNTozMCAtMDAwMApAQCAt NDkyLDggKzQ5MiwxNCBAQAogICAgIGVsc2UKIAlSZXNldFNlcnZlciAoZCk7CiAgICAgaWYgKHJl bW92ZUF1dGgpIHsKLQlzZXRnaWQgKHZlcmlmeS5naWQpOwotCXNldHVpZCAodmVyaWZ5LnVpZCk7 CisJaWYgKHNldGdpZCAodmVyaWZ5LmdpZCkgPT0gLTEpIHsKKwkgICAgTG9nRXJyb3IoICJTZXNz aW9uRXhpdDogc2V0Z2lkOiAlc1xuIiwgc3RyZXJyb3IoZXJybm8pKTsKKwkgICAgZXhpdChzdGF0 dXMpOworCX0KKwlpZiAoc2V0dWlkICh2ZXJpZnkudWlkKSA9PSAtMSkgeworCSAgICBMb2dFcnJv ciggIlNlc3Npb25FeGl0OiBzZXR1aWQ6ICVzXG4iLCBzdHJlcnJvcihlcnJubykpOworCSAgICBl eGl0KHN0YXR1cyk7CisJfQogCVJlbW92ZVVzZXJBdXRob3JpemF0aW9uIChkLCAmdmVyaWZ5KTsK ICNpZiBkZWZpbmVkKEs1QVVUSCkgJiYgIWRlZmluZWQoVVNFX1BBTSkgICAvKiBQQU0gbW9kdWxl cyBzaG91bGQgaGFuZGxlIHRoaXMgKi8KIAkvKiBkbyBsaWtlICJrZGVzdHJveSIgcHJvZ3JhbSAq LwpJbmRleDogYXBwL3hkbS94ZG1zaGVsbC5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9y Zy9hcHAveGRtL3hkbXNoZWxsLmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMwpkaWZmIC11IC1y MS4zIHhkbXNoZWxsLmMKLS0tIGFwcC94ZG0veGRtc2hlbGwuYwkxNCBKdWwgMjAwNSAyMjo1ODoy NSAtMDAwMAkxLjMKKysrIGFwcC94ZG0veGRtc2hlbGwuYwk1IEp1biAyMDA2IDExOjA1OjMwIC0w MDAwCkBAIC0xODMsNyArMTgzLDExIEBACiAjZW5kaWYKIAogICAgIC8qIG1ha2UgeGRtIHJ1biBp biBhIG5vbi1zZXR1aWQgZW52aXJvbm1lbnQgKi8KLSAgICBzZXR1aWQgKGdldGV1aWQoKSk7Cisg ICAgaWYgKHNldHVpZCAoZ2V0ZXVpZCgpKSA9PSAtMSkgeworCWZwcmludGYoc3RkZXJyLCAiJXM6 IGNhbm5vdCBzZXR1aWQgKGVycm9yICVkLCAlcylcclxuIiwKKwkJUHJvZ3JhbU5hbWUsIGVycm5v LCBzdHJlcnJvcihlcnJubykpOworCWV4aXQoMSk7CisgICAgfQogCiAgICAgLyoKICAgICAgKiBl eGVjIC91c3IvYmluL1gxMS94ZG0gLW5vZGFlbW9uIC11ZHBQb3J0IDAKSW5kZXg6IGFwcC94Zjg2 ZGdhL2RnYS5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy9hcHAveGY4NmRnYS9kZ2Eu Yyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4yCmRpZmYgLXUgLXIxLjIgZGdhLmMKLS0tIGFwcC94 Zjg2ZGdhL2RnYS5jCTIzIEFwciAyMDA0IDE5OjU0OjQ3IC0wMDAwCTEuMgorKysgYXBwL3hmODZk Z2EvZGdhLmMJNSBKdW4gMjAwNiAxMTowNTozMCAtMDAwMApAQCAtMTYsNiArMTYsNyBAQAogI2lu Y2x1ZGUgPFgxMS9YbWQuaD4KICNpbmNsdWRlIDxYMTEvZXh0ZW5zaW9ucy94Zjg2ZGdhLmg+CiAj aW5jbHVkZSA8Y3R5cGUuaD4KKyNpbmNsdWRlIDxlcnJuby5oPgogI2luY2x1ZGUgPHN0ZGlvLmg+ CiAjaW5jbHVkZSA8c3RkbGliLmg+CiAjaW5jbHVkZSA8c2lnbmFsLmg+CkBAIC0xNDEsNyArMTQy LDEwIEBACiAKICNpZm5kZWYgX19VTklYT1MyX18KICAgIC8qIEdpdmUgdXAgcm9vdCBwcml2cyAq LwotICAgc2V0dWlkKGdldHVpZCgpKTsKKyAgIGlmIChzZXR1aWQoZ2V0dWlkKCkpID09IC0xKSB7 CisgICAgICBmcHJpbnRmKHN0ZGVyciwgIlVuYWJsZSB0byBjaGFuZ2UgdWlkOiAlc1xuIiwgc3Ry ZXJyb3IoZXJybm8pKTsKKyAgICAgIGV4aXQoMik7CisgICB9CiAjZW5kaWYKIAogICAgWEY4NkRH QVNldFZpZXdQb3J0KGRpcywgRGVmYXVsdFNjcmVlbihkaXMpLCAwLCAwKTsKSW5kZXg6IGFwcC94 aW5pdC94aW5pdC5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy9hcHAveGluaXQveGlu aXQuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS40CmRpZmYgLXUgLXIxLjQgeGluaXQuYwotLS0g YXBwL3hpbml0L3hpbml0LmMJNCBPY3QgMjAwNSAwMToyNzozNCAtMDAwMAkxLjQKKysrIGFwcC94 aW5pdC94aW5pdC5jCTUgSnVuIDIwMDYgMTE6MDU6MzEgLTAwMDAKQEAgLTEsNSArMSw1IEBACiAv KiAkWG9yZzogeGluaXQuYyx2IDEuNSAyMDAxLzAyLzA5IDAyOjA1OjQ5IHhvcmdjdnMgRXhwICQg Ki8KLS8qICRYZG90T3JnOiBhcHAveGluaXQveGluaXQuYyx2IDEuNCAyMDA1LTEwLTA0IDAxOjI3 OjM0IGFqYXggRXhwICQgKi8KKy8qICRYZG90T3JnOiAkICovCiAKIC8qCiAKQEAgLTY5Miw3ICs2 OTIsMTAgQEAKIHN0YXJ0Q2xpZW50KGNoYXIgKmNsaWVudFtdKQogewogCWlmICgoY2xpZW50cGlk ID0gdmZvcmsoKSkgPT0gMCkgewotCQlzZXR1aWQoZ2V0dWlkKCkpOworCQlpZiAoc2V0dWlkKGdl dHVpZCgpKSA9PSAtMSkgeworCQkJRXJyb3IoImNhbm5vdCBjaGFuZ2UgdWlkOiAlc1xuIiwgc3Ry ZXJyb3IoZXJybm8pKTsKKwkJCV9leGl0KEVSUl9FWElUKTsKKwkJfQogCQlzZXRwZ3JwKDAsIGdl dHBpZCgpKTsKIAkJZW52aXJvbiA9IG5ld2Vudmlyb247CiAjaWZkZWYgX19VTklYT1MyX18KSW5k ZXg6IGFwcC94bG9hZC94bG9hZC5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy9hcHAv eGxvYWQveGxvYWQuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4yCmRpZmYgLXUgLXIxLjIgeGxv YWQuYwotLS0gYXBwL3hsb2FkL3hsb2FkLmMJMjMgQXByIDIwMDQgMTk6NTQ6NTcgLTAwMDAJMS4y CisrKyBhcHAveGxvYWQveGxvYWQuYwk1IEp1biAyMDA2IDExOjA1OjMyIC0wMDAwCkBAIC0zNCw3 ICszNCw3IEBACiAgKiB4bG9hZCAtIGRpc3BsYXkgc3lzdGVtIGxvYWQgYXZlcmFnZSBpbiBhIHdp bmRvdwogICovCiAKLQorI2luY2x1ZGUgPGVycm5vLmg+CiAjaW5jbHVkZSA8c3RkaW8uaD4gCiAj aW5jbHVkZSA8c3RkbGliLmg+CiAjaW5jbHVkZSA8dW5pc3RkLmg+CkBAIC0xNjIsOCArMTYyLDE3 IEBACiAgICAgLyogRm9yIHNlY3VyaXR5IHJlYXNvbnMsIHdlIHJlc2V0IG91ciB1aWQvZ2lkIGFm dGVyIGRvaW5nIHRoZSBuZWNlc3NhcnkKICAgICAgICBzeXN0ZW0gaW5pdGlhbGl6YXRpb24gYW5k IGJlZm9yZSBjYWxsaW5nIGFueSBYIHJvdXRpbmVzLiAqLwogICAgIEluaXRMb2FkUG9pbnQoKTsK LSAgICBzZXRnaWQoZ2V0Z2lkKCkpOwkJLyogcmVzZXQgZ2lkIGZpcnN0IHdoaWxlIHN0aWxsICht YXliZSkgcm9vdCAqLwotICAgIHNldHVpZChnZXR1aWQoKSk7CisgICAgLyogcmVzZXQgZ2lkIGZp cnN0IHdoaWxlIHN0aWxsIChtYXliZSkgcm9vdCAqLworICAgIGlmIChzZXRnaWQoZ2V0Z2lkKCkp ID09IC0xKSB7CisJICAgIGZwcmludGYoc3RkZXJyLCAiJXM6IHNldGdpZCBmYWlsZWQ6ICVzXG4i LCAKKwkJUHJvZ3JhbU5hbWUsIHN0cmVycm9yKGVycm5vKSk7CisJICAgIGV4aXQoMSk7CisgICAg fQorICAgIGlmIChzZXR1aWQoZ2V0dWlkKCkpID09IC0xKSB7CisJICAgIGZwcmludGYoc3RkZXJy LCAiJXM6IHNldHVpZCBmYWlsZWQ6ICVzXG4iLCAKKwkJUHJvZ3JhbU5hbWUsIHN0cmVycm9yKGVy cm5vKSk7CisJICAgIGV4aXQoMSk7CisgICAgfQogCiAgICAgWHRTZXRMYW5ndWFnZVByb2MoTlVM TCwgKFh0TGFuZ3VhZ2VQcm9jKSBOVUxMLCBOVUxMKTsKIApJbmRleDogbGliL3h0cmFucy9YdHJh bnNsY2wuYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcvbGliL3h0cmFucy9YdHJhbnNs Y2wuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS40CmRpZmYgLXUgLXIxLjQgWHRyYW5zbGNsLmMK LS0tIGxpYi94dHJhbnMvWHRyYW5zbGNsLmMJOCBOb3YgMjAwNSAwNjozMzoyNiAtMDAwMAkxLjQK KysrIGxpYi94dHJhbnMvWHRyYW5zbGNsLmMJNSBKdW4gMjAwNiAxMTowNjowMyAtMDAwMApAQCAt MzYwLDcgKzM2MCwxMCBAQAogCXVpZF90ICAgICAgIHNhdmVkX2V1aWQ7CiAKIAlzYXZlZF9ldWlk ID0gZ2V0ZXVpZCgpOwotCXNldHVpZCggZ2V0dWlkKCkgKTsgLyoqIHNldHMgdGhlIGV1aWQgdG8g dGhlIGFjdHVhbC9yZWFsIHVpZCAqKi8KKwkvKiogc2V0cyB0aGUgZXVpZCB0byB0aGUgYWN0dWFs L3JlYWwgdWlkICoqLworCWlmIChzZXR1aWQoIGdldHVpZCgpICkgPT0gLTEpIHsKKwkJZXhpdCgx KTsKKwl9CiAJaWYoIGNob3duKCBzbGF2ZSwgc2F2ZWRfZXVpZCwgLTEgKSA8IDAgKSB7CiAJCWV4 aXQoIDEgKTsKIAkJfQpAQCAtMzY5LDcgKzM3MiwxMyBAQAogICAgIH0KIAogICAgIHdhaXRwaWQo c2F2ZWRfcGlkLCAmZXhpdHZhbCwgMCk7Ci0KKyAgICBpZiAoV0lGRVhJVEVEKGV4aXR2YWwpICYm IFdFWElUU1RBVFVTKGV4aXR2YWwpICE9IDApIHsKKwljbG9zZShmZCk7CisJY2xvc2Uoc2VydmVy KTsKKwlQUk1TRygxLCAiUFRTT3BlbkNsaWVudDogY2Fubm90IHNldCB0aGUgb3duZXIgb2YgJXNc biIsCisJICAgICAgc2xhdmUsIDAsIDApOworCXJldHVybigtMSk7CisgICAgfQogICAgIGlmIChj aG1vZChzbGF2ZSwgMDY2NikgPCAwKSB7CiAJY2xvc2UoZmQpOwogCWNsb3NlKHNlcnZlcik7Cklu ZGV4OiB4c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9jb21tb24veGY4NkluaXQuYwo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 ClJDUyBmaWxlOiAvY3ZzL3hvcmcveHNlcnZlci94b3JnL2h3L3hmcmVlODYvY29tbW9uL3hmODZJ bml0LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMzcKZGlmZiAtdSAtcjEuMzcgeGY4NkluaXQu YwotLS0geHNlcnZlci94b3JnL2h3L3hmcmVlODYvY29tbW9uL3hmODZJbml0LmMJMSBKdW4gMjAw NiAxOTozNzo1MyAtMDAwMAkxLjM3CisrKyB4c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9jb21tb24v eGY4NkluaXQuYwk1IEp1biAyMDA2IDExOjA2OjEzIC0wMDAwCkBAIC0xODk2LDcgKzE4OTcsMTEg QEAKICAgICAgICAgICBGYXRhbEVycm9yKCJ4Zjg2UnVuVnRJbml0OiBmb3JrIGZhaWxlZCAoJXMp XG4iLCBzdHJlcnJvcihlcnJubykpOwogICAgICAgICAgIGJyZWFrOwogICAgICAgY2FzZSAwOiAg LyogY2hpbGQgKi8KLSAgICAgICAgICBzZXR1aWQoZ2V0dWlkKCkpOworCSAgaWYgKHNldHVpZChn ZXR1aWQoKSkgPT0gLTEpIHsKKwkgICAgICB4Zjg2TXNnKFhfRVJST1IsICJ4Zjg2UnVuVnRJbml0 OiBzZXR1aWQgZmFpbGVkICglcylcbiIsCisJCQkgc3RyZXJyb3IoZXJybm8pKTsKKwkgICAgICBl eGl0KDI1NSk7CisJICB9CiAgICAgICAgICAgLyogc2V0IHN0ZGluLCBzdGRvdXQgdG8gdGhlIGNv bnNvbGVGZCAqLwogICAgICAgICAgIGZvciAoaSA9IDA7IGkgPCAyOyBpKyspIHsKICAgICAgICAg ICAgIGlmICh4Zjg2SW5mby5jb25zb2xlRmQgIT0gaSkgewpJbmRleDogeHNlcnZlci94b3JnL2h3 L3hmcmVlODYvb3Mtc3VwcG9ydC9zaGFyZWQvbGliY193cmFwcGVyLmMKPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1Mg ZmlsZTogL2N2cy94b3JnL3hzZXJ2ZXIveG9yZy9ody94ZnJlZTg2L29zLXN1cHBvcnQvc2hhcmVk L2xpYmNfd3JhcHBlci5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjExCmRpZmYgLXUgLXIxLjEx IGxpYmNfd3JhcHBlci5jCi0tLSB4c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9vcy1zdXBwb3J0L3No YXJlZC9saWJjX3dyYXBwZXIuYwkyNSBNYXIgMjAwNiAxOTo1MjowNCAtMDAwMAkxLjExCisrKyB4 c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9vcy1zdXBwb3J0L3NoYXJlZC9saWJjX3dyYXBwZXIuYwk1 IEp1biAyMDA2IDExOjA2OjE0IC0wMDAwCkBAIC0xMjcwLDcgKzEyNzAsMTAgQEAKICNpZm5kZWYg U0VMRl9DT05UQUlORURfV1JBUFBFUgogCXhmODZEaXNhYmxlSU8oKTsKICNlbmRpZgotICAgICAg ICBzZXR1aWQoZ2V0dWlkKCkpOworICAgICAgICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkg eworCQlFcnJvckYoInhmODZFeGVjbDogc2V0dWlkKCkgZmFpbGVkOiAlc1xuIiwgc3RyZXJyb3Io ZXJybm8pKTsKKwkJZXhpdCgyNTUpOworCX0KICNpZiAhZGVmaW5lZChTRUxGX0NPTlRBSU5FRF9X UkFQUEVSKQogICAgICAgICAvKiBzZXQgc3RkaW4sIHN0ZG91dCB0byB0aGUgY29uc29sZUZELCBh bmQgbGVhdmUgc3RkZXJyIGFsb25lICovCiAgICAgICAgIGZvciAoaSA9IDA7IGkgPCAyOyBpKysp CkluZGV4OiB4c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9wYXJzZXIvd3JpdGUuYwo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 ClJDUyBmaWxlOiAvY3ZzL3hvcmcveHNlcnZlci94b3JnL2h3L3hmcmVlODYvcGFyc2VyL3dyaXRl LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMwpkaWZmIC11IC1yMS4zIHdyaXRlLmMKLS0tIHhz ZXJ2ZXIveG9yZy9ody94ZnJlZTg2L3BhcnNlci93cml0ZS5jCTMgSnVsIDIwMDUgMDc6MDE6Mzcg LTAwMDAJMS4zCisrKyB4c2VydmVyL3hvcmcvaHcveGZyZWU4Ni9wYXJzZXIvd3JpdGUuYwk1IEp1 biAyMDA2IDExOjA2OjE1IC0wMDAwCkBAIC0xNzAsNyArMTcwLDEwIEBACiAJCQkJCXN0cmVycm9y KGVycm5vKSk7CiAJCQlyZXR1cm4gMDsKIAkJY2FzZSAwOiAvKiBjaGlsZCAqLwotCQkJc2V0dWlk KGdldHVpZCgpKTsKKwkJCWlmIChzZXR1aWQoZ2V0dWlkKCkgPT0gLTEpIAorCQkJICAgIEZhdGFs RXJyb3IoInhmODZ3cml0ZUNvbmZpZ0ZpbGUoKTogIgorCQkJCSJzZXR1aWQgZmFpbGVkKCVzKVxu IiwgCisJCQkJc3RyZXJyb3IoZXJybm8pKTsKIAkJCXJldCA9IGRvV3JpdGVDb25maWdGaWxlKGZp bGVuYW1lLCBjcHRyKTsKIAkJCWV4aXQocmV0KTsKIAkJCWJyZWFrOwpJbmRleDogeHNlcnZlci94 b3JnL29zL3V0aWxzLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94b3JnL3hzZXJ2ZXIveG9y Zy9vcy91dGlscy5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjI2CmRpZmYgLXUgLXIxLjI2IHV0 aWxzLmMKLS0tIHhzZXJ2ZXIveG9yZy9vcy91dGlscy5jCTEgSnVuIDIwMDYgMjI6MDY6NDEgLTAw MDAJMS4yNgorKysgeHNlcnZlci94b3JnL29zL3V0aWxzLmMJNSBKdW4gMjAwNiAxMTowNjoxNyAt MDAwMApAQCAtMTcxOCw4ICsxNzE4LDEwIEBACiAgICAgY2FzZSAtMToJLyogZXJyb3IgKi8KIAlw ID0gLTE7CiAgICAgY2FzZSAwOgkvKiBjaGlsZCAqLwotCXNldGdpZChnZXRnaWQoKSk7Ci0Jc2V0 dWlkKGdldHVpZCgpKTsKKwlpZiAoc2V0Z2lkKGdldGdpZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQo MTI3KTsKKwlpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3KTsKIAll eGVjbCgiL2Jpbi9zaCIsICJzaCIsICItYyIsIGNvbW1hbmQsIChjaGFyICopTlVMTCk7CiAJX2V4 aXQoMTI3KTsKICAgICBkZWZhdWx0OgkvKiBwYXJlbnQgKi8KQEAgLTE3NzAsOCArMTc3MiwxMCBA QAogCXhmcmVlKGN1cik7CiAJcmV0dXJuIE5VTEw7CiAgICAgY2FzZSAwOgkvKiBjaGlsZCAqLwot CXNldGdpZChnZXRnaWQoKSk7Ci0Jc2V0dWlkKGdldHVpZCgpKTsKKwlpZiAoc2V0Z2lkKGdldGdp ZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3KTsKKwlpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAt MSkKKwkgICAgX2V4aXQoMTI3KTsKIAlpZiAoKnR5cGUgPT0gJ3InKSB7CiAJICAgIGlmIChwZGVz WzFdICE9IDEpIHsKIAkJLyogc3Rkb3V0ICovCkBAIC0xODQ1LDggKzE4NDksMTAgQEAKIAl4ZnJl ZShjdXIpOwogCXJldHVybiBOVUxMOwogICAgIGNhc2UgMDoJLyogY2hpbGQgKi8KLQlzZXRnaWQo Z2V0Z2lkKCkpOwotCXNldHVpZChnZXR1aWQoKSk7CisJaWYgKHNldGdpZChnZXRnaWQoKSkgPT0g LTEpCisJICAgIF9leGl0KDEyNyk7CisJaWYgKHNldHVpZChnZXR1aWQoKSkgPT0gLTEpCisJICAg IF9leGl0KDEyNyk7CiAJaWYgKCp0eXBlID09ICdyJykgewogCSAgICBpZiAocGRlc1sxXSAhPSAx KSB7CiAJCS8qIHN0ZG91dCAqLwo= 89173 2006-06-14 09:14 0000 libX11 setuid-modular-2.diff text/plain ZGlmZiAtLWdpdCBhL3NyYy94bGliaTE4bi9sY0ZpbGUuYyBiL3NyYy94bGliaTE4bi9sY0ZpbGUu YwppbmRleCAxYzQwODY4Li40MjA5MDBlIDEwMDY0NAotLS0gYS9zcmMveGxpYmkxOG4vbGNGaWxl LmMKKysrIGIvc3JjL3hsaWJpMThuL2xjRmlsZS5jCkBAIC0yNjksNyArMjY5LDExIEBAICNlbHNl CiAJICAgIGlmIChzZXRldWlkKDApICE9IDApIHsKIAkJcHJpdiA9IDA7CiAJICAgIH0gZWxzZSB7 Ci0JCXNldGV1aWQob2xkZXVpZCk7CisJCWlmIChzZXRldWlkKG9sZGV1aWQpID09IC0xKSB7CisJ CSAgICAvKiBYWFggb3VjaCwgY291ZG4ndCBnZXQgYmFjayB0byBvcmlnaW5hbCB1aWQgCisJCSAg ICAgd2hhdCBjYW4gd2UgZG8gPz8/ICovCisJCSAgICBfZXhpdCgxMjcpOworCQl9CiAJCXByaXYg PSAxOwogCSAgICB9CiAjZW5kaWYK 89174 2006-06-14 09:14 0000 Monolith 6.9 setuid-Xorg-6.9.diff text/plain SW5kZXg6IHhjL2NvbmZpZy91dGlsL2Nob3dueHRlcm0uYwo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAv Y3ZzL3hvcmcveGMvY29uZmlnL3V0aWwvY2hvd254dGVybS5jLHYKcmV0cmlldmluZyByZXZpc2lv biAxLjEuMS4xCmRpZmYgLXUgLXIxLjEuMS4xIGNob3dueHRlcm0uYwotLS0geGMvY29uZmlnL3V0 aWwvY2hvd254dGVybS5jCTE0IE5vdiAyMDAzIDE2OjQ4OjIwIC0wMDAwCTEuMS4xLjEKKysrIHhj L2NvbmZpZy91dGlsL2Nob3dueHRlcm0uYwk1IEp1biAyMDA2IDEwOjM1OjEwIC0wMDAwCkBAIC00 MSw4ICs0MSwxMCBAQAogCiB2b2lkIGhlbHAoKQogewotICAgIHNldGdpZChnZXRnaWQoKSk7Ci0g ICAgc2V0dWlkKGdldHVpZCgpKTsKKyAgICBpZiAoc2V0Z2lkKGdldGdpZCgpKSA9PSAtMSkgCisJ ZXhpdCgxKTsKKyAgICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkKKwlleGl0KDEpOwogICAg IHByaW50ZigiY2hvd24teHRlcm0gbWFrZXMgJXMgc3VpZCByb290XG4iLCBYVEVSTV9QQVRIKTsK ICAgICBwcmludGYoIlRoaXMgaXMgbmVjZXNzYXJ5IG9uIFVsdHJpeCBmb3IgL2Rldi90dHkgb3Bl cmF0aW9uLlxuIik7CiAgICAgZXhpdCgwKTsKQEAgLTUxLDggKzUzLDEwIEBACiB2b2lkIHByaW50 X2Vycm9yKGVycl9zdHJpbmcpCiAgICAgY2hhciAqZXJyX3N0cmluZzsKIHsKLSAgICBzZXRnaWQo Z2V0Z2lkKCkpOwotICAgIHNldHVpZChnZXR1aWQoKSk7CisgICAgaWYgKHNldGdpZChnZXRnaWQo KSkgPT0gLTEpCisJZXhpdCgxKTsKKyAgICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkKKwll eGl0KDEpOwogICAgIGZwcmludGYoc3RkZXJyLCAiJXM6IFwiJXNcIiIsIHByb2dfbmFtZSwgZXJy X3N0cmluZyk7CiAgICAgcGVycm9yKCIgZmFpbGVkIik7CiAgICAgZXhpdCgxKTsKSW5kZXg6IHhj L2xpYi9YMTEvbGNGaWxlLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94b3JnL3hjL2xpYi9Y MTEvbGNGaWxlLmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuNgpkaWZmIC11IC1yMS42IGxjRmls ZS5jCi0tLSB4Yy9saWIvWDExL2xjRmlsZS5jCTEzIE1heSAyMDA1IDIyOjUzOjQ0IC0wMDAwCTEu NgorKysgeGMvbGliL1gxMS9sY0ZpbGUuYwk1IEp1biAyMDA2IDEwOjM1OjE0IC0wMDAwCkBAIC0y NjksNyArMjY5LDExIEBACiAJICAgIGlmIChzZXRldWlkKDApICE9IDApIHsKIAkJcHJpdiA9IDA7 CiAJICAgIH0gZWxzZSB7Ci0JCXNldGV1aWQob2xkZXVpZCk7CisJCWlmIChzZXRldWlkKG9sZGV1 aWQpID09IC0xKSB7CisJCSAgICAvKiBYWFggb3VjaCwgY291ZG4ndCBnZXQgYmFjayB0byBvcmln aW5hbCB1aWQgCisJCSAgICAgd2hhdCBjYW4gd2UgZG8gPz8/ICovCisJCSAgICBfZXhpdCgxMjcp OworCQl9CiAJCXByaXYgPSAxOwogCSAgICB9CiAjZW5kaWYKSW5kZXg6IHhjL2xpYi94dHJhbnMv WHRyYW5zbGNsLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94b3JnL3hjL2xpYi94dHJhbnMv WHRyYW5zbGNsLmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuNApkaWZmIC11IC1yMS40IFh0cmFu c2xjbC5jCi0tLSB4Yy9saWIveHRyYW5zL1h0cmFuc2xjbC5jCTggTm92IDIwMDUgMDY6MzM6MjYg LTAwMDAJMS40CisrKyB4Yy9saWIveHRyYW5zL1h0cmFuc2xjbC5jCTUgSnVuIDIwMDYgMTA6MzU6 MTUgLTAwMDAKQEAgLTM2MCw3ICszNjAsMTAgQEAKIAl1aWRfdCAgICAgICBzYXZlZF9ldWlkOwog CiAJc2F2ZWRfZXVpZCA9IGdldGV1aWQoKTsKLQlzZXR1aWQoIGdldHVpZCgpICk7IC8qKiBzZXRz IHRoZSBldWlkIHRvIHRoZSBhY3R1YWwvcmVhbCB1aWQgKiovCisJLyoqIHNldHMgdGhlIGV1aWQg dG8gdGhlIGFjdHVhbC9yZWFsIHVpZCAqKi8KKwlpZiAoc2V0dWlkKCBnZXR1aWQoKSApID09IC0x KSB7CisJCWV4aXQoMSk7CisJfQogCWlmKCBjaG93biggc2xhdmUsIHNhdmVkX2V1aWQsIC0xICkg PCAwICkgewogCQlleGl0KCAxICk7CiAJCX0KQEAgLTM2OSw3ICszNzIsMTMgQEAKICAgICB9CiAK ICAgICB3YWl0cGlkKHNhdmVkX3BpZCwgJmV4aXR2YWwsIDApOwotCisgICAgaWYgKFdJRkVYSVRF RChleGl0dmFsKSAmJiBXRVhJVFNUQVRVUyhleGl0dmFsKSAhPSAwKSB7CisJY2xvc2UoZmQpOwor CWNsb3NlKHNlcnZlcik7CisJUFJNU0coMSwgIlBUU09wZW5DbGllbnQ6IGNhbm5vdCBzZXQgdGhl IG93bmVyIG9mICVzXG4iLAorCSAgICAgIHNsYXZlLCAwLCAwKTsKKwlyZXR1cm4oLTEpOworICAg IH0KICAgICBpZiAoY2htb2Qoc2xhdmUsIDA2NjYpIDwgMCkgewogCWNsb3NlKGZkKTsKIAljbG9z ZShzZXJ2ZXIpOwpJbmRleDogeGMvcHJvZ3JhbXMvWHNlcnZlci9ody94ZnJlZTg2L2NvbW1vbi94 Zjg2SW5pdC5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy94Yy9wcm9ncmFtcy9Yc2Vy dmVyL2h3L3hmcmVlODYvY29tbW9uL3hmODZJbml0LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEu MjkKZGlmZiAtdSAtcjEuMjkgeGY4NkluaXQuYwotLS0geGMvcHJvZ3JhbXMvWHNlcnZlci9ody94 ZnJlZTg2L2NvbW1vbi94Zjg2SW5pdC5jCTE0IERlYyAyMDA1IDIwOjEyOjAwIC0wMDAwCTEuMjkK KysrIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcveGZyZWU4Ni9jb21tb24veGY4NkluaXQuYwk1IEp1 biAyMDA2IDEwOjM1OjE5IC0wMDAwCkBAIC0xLDUgKzEsNSBAQAogLyogJFhGcmVlODY6IHhjL3By b2dyYW1zL1hzZXJ2ZXIvaHcveGZyZWU4Ni9jb21tb24veGY4NkluaXQuYyx2IDMuMjEyIDIwMDQv MDEvMjcgMDE6MzE6NDUgZGF3ZXMgRXhwICQgKi8KLS8qICRYZG90T3JnOiB4Yy9wcm9ncmFtcy9Y c2VydmVyL2h3L3hmcmVlODYvY29tbW9uL3hmODZJbml0LmMsdiAxLjI5IDIwMDUtMTItMTQgMjA6 MTI6MDAgYWpheCBFeHAgJCAqLworLyogJFhkb3RPcmc6IHhjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcv eGZyZWU4Ni9jb21tb24veGY4NkluaXQuYyx2IDEuMjkgMjAwNS8xMi8xNCAyMDoxMjowMCBhamF4 IEV4cCAkICovCiAKIC8qCiAgKiBMb29zZWx5IGJhc2VkIG9uIGNvZGUgYmVhcmluZyB0aGUgZm9s bG93aW5nIGNvcHlyaWdodDoKQEAgLTE5MDUsNyArMTkwNSwxMSBAQAogICAgICAgICAgIEZhdGFs RXJyb3IoInhmODZSdW5WdEluaXQ6IGZvcmsgZmFpbGVkICglcylcbiIsIHN0cmVycm9yKGVycm5v KSk7CiAgICAgICAgICAgYnJlYWs7CiAgICAgICBjYXNlIDA6ICAvKiBjaGlsZCAqLwotICAgICAg ICAgIHNldHVpZChnZXR1aWQoKSk7CisJICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkgewor CSAgICAgIHhmODZNc2coWF9FUlJPUiwgInhmODZSdW5WdEluaXQ6IHNldHVpZCBmYWlsZWQgKCVz KVxuIiwKKwkJCSBzdHJlcnJvcihlcnJubykpOworCSAgICAgIGV4aXQoMjU1KTsKKwkgIH0KICAg ICAgICAgICAvKiBzZXQgc3RkaW4sIHN0ZG91dCB0byB0aGUgY29uc29sZUZkICovCiAgICAgICAg ICAgZm9yIChpID0gMDsgaSA8IDI7IGkrKykgewogICAgICAgICAgICAgaWYgKHhmODZJbmZvLmNv bnNvbGVGZCAhPSBpKSB7CkluZGV4OiB4Yy9wcm9ncmFtcy9Yc2VydmVyL2h3L3hmcmVlODYvb3Mt c3VwcG9ydC9zaGFyZWQvbGliY193cmFwcGVyLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94 b3JnL3hjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcveGZyZWU4Ni9vcy1zdXBwb3J0L3NoYXJlZC9saWJj X3dyYXBwZXIuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS45CmRpZmYgLXUgLXIxLjkgbGliY193 cmFwcGVyLmMKLS0tIHhjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcveGZyZWU4Ni9vcy1zdXBwb3J0L3No YXJlZC9saWJjX3dyYXBwZXIuYwkzIEp1bCAyMDA1IDA4OjUzOjQ4IC0wMDAwCTEuOQorKysgeGMv cHJvZ3JhbXMvWHNlcnZlci9ody94ZnJlZTg2L29zLXN1cHBvcnQvc2hhcmVkL2xpYmNfd3JhcHBl ci5jCTUgSnVuIDIwMDYgMTA6MzU6MTkgLTAwMDAKQEAgLTEyNzAsNyArMTI3MCwxMCBAQAogI2lm bmRlZiBTRUxGX0NPTlRBSU5FRF9XUkFQUEVSCiAJeGY4NkRpc2FibGVJTygpOwogI2VuZGlmCi0g ICAgICAgIHNldHVpZChnZXR1aWQoKSk7CisgICAgICAgIGlmIChzZXR1aWQoZ2V0dWlkKCkpID09 IC0xKSB7CisJCUVycm9yRigieGY4NkV4ZWNsOiBzZXR1aWQoKSBmYWlsZWQ6ICVzXG4iLCBzdHJl cnJvcihlcnJubykpOworCQlleGl0KDI1NSk7CisJfQogI2lmICFkZWZpbmVkKFNFTEZfQ09OVEFJ TkVEX1dSQVBQRVIpCiAgICAgICAgIC8qIHNldCBzdGRpbiwgc3Rkb3V0IHRvIHRoZSBjb25zb2xl RkQsIGFuZCBsZWF2ZSBzdGRlcnIgYWxvbmUgKi8KICAgICAgICAgZm9yIChpID0gMDsgaSA8IDI7 IGkrKykKSW5kZXg6IHhjL3Byb2dyYW1zL1hzZXJ2ZXIvaHcveGZyZWU4Ni9wYXJzZXIvd3JpdGUu Ywo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcveGMvcHJvZ3JhbXMvWHNlcnZlci9ody94 ZnJlZTg2L3BhcnNlci93cml0ZS5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjMKZGlmZiAtdSAt cjEuMyB3cml0ZS5jCi0tLSB4Yy9wcm9ncmFtcy9Yc2VydmVyL2h3L3hmcmVlODYvcGFyc2VyL3dy aXRlLmMJMyBKdWwgMjAwNSAwNzowMTozNyAtMDAwMAkxLjMKKysrIHhjL3Byb2dyYW1zL1hzZXJ2 ZXIvaHcveGZyZWU4Ni9wYXJzZXIvd3JpdGUuYwk1IEp1biAyMDA2IDEwOjM1OjE5IC0wMDAwCkBA IC0xNzAsNyArMTcwLDEwIEBACiAJCQkJCXN0cmVycm9yKGVycm5vKSk7CiAJCQlyZXR1cm4gMDsK IAkJY2FzZSAwOiAvKiBjaGlsZCAqLwotCQkJc2V0dWlkKGdldHVpZCgpKTsKKwkJCWlmIChzZXR1 aWQoZ2V0dWlkKCkgPT0gLTEpIAorCQkJICAgIEZhdGFsRXJyb3IoInhmODZ3cml0ZUNvbmZpZ0Zp bGUoKTogIgorCQkJCSJzZXR1aWQgZmFpbGVkKCVzKVxuIiwgCisJCQkJc3RyZXJyb3IoZXJybm8p KTsKIAkJCXJldCA9IGRvV3JpdGVDb25maWdGaWxlKGZpbGVuYW1lLCBjcHRyKTsKIAkJCWV4aXQo cmV0KTsKIAkJCWJyZWFrOwpJbmRleDogeGMvcHJvZ3JhbXMvWHNlcnZlci9vcy91dGlscy5jCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy94Yy9wcm9ncmFtcy9Yc2VydmVyL29zL3V0aWxz LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMjEKZGlmZiAtdSAtcjEuMjEgdXRpbHMuYwotLS0g eGMvcHJvZ3JhbXMvWHNlcnZlci9vcy91dGlscy5jCTggTm92IDIwMDUgMDY6MzM6MzAgLTAwMDAJ MS4yMQorKysgeGMvcHJvZ3JhbXMvWHNlcnZlci9vcy91dGlscy5jCTUgSnVuIDIwMDYgMTA6MzU6 MjAgLTAwMDAKQEAgLTEsNCArMSw0IEBACi0vKiAkWGRvdE9yZzogeGMvcHJvZ3JhbXMvWHNlcnZl ci9vcy91dGlscy5jLHYgMS4yMSAyMDA1LTExLTA4IDA2OjMzOjMwIGpraiBFeHAgJCAqLworLyog JFhkb3RPcmc6IHhjL3Byb2dyYW1zL1hzZXJ2ZXIvb3MvdXRpbHMuYyx2IDEuMjEgMjAwNS8xMS8w OCAwNjozMzozMCBqa2ogRXhwICQgKi8KIC8qICRYb3JnOiB1dGlscy5jLHYgMS41IDIwMDEvMDIv MDkgMDI6MDU6MjQgeG9yZ2N2cyBFeHAgJCAqLwogLyoKIApAQCAtMTcxOCw4ICsxNzE4LDEwIEBA CiAgICAgY2FzZSAtMToJLyogZXJyb3IgKi8KIAlwID0gLTE7CiAgICAgY2FzZSAwOgkvKiBjaGls ZCAqLwotCXNldGdpZChnZXRnaWQoKSk7Ci0Jc2V0dWlkKGdldHVpZCgpKTsKKwlpZiAoc2V0Z2lk KGdldGdpZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3KTsKKwlpZiAoc2V0dWlkKGdldHVpZCgp KSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3KTsKIAlleGVjbCgiL2Jpbi9zaCIsICJzaCIsICItYyIs IGNvbW1hbmQsIChjaGFyICopTlVMTCk7CiAJX2V4aXQoMTI3KTsKICAgICBkZWZhdWx0OgkvKiBw YXJlbnQgKi8KQEAgLTE3NzAsOCArMTc3MiwxMCBAQAogCXhmcmVlKGN1cik7CiAJcmV0dXJuIE5V TEw7CiAgICAgY2FzZSAwOgkvKiBjaGlsZCAqLwotCXNldGdpZChnZXRnaWQoKSk7Ci0Jc2V0dWlk KGdldHVpZCgpKTsKKwlpZiAoc2V0Z2lkKGdldGdpZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3 KTsKKwlpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkKKwkgICAgX2V4aXQoMTI3KTsKIAlpZiAo KnR5cGUgPT0gJ3InKSB7CiAJICAgIGlmIChwZGVzWzFdICE9IDEpIHsKIAkJLyogc3Rkb3V0ICov CkBAIC0xODQ1LDggKzE4NDksMTAgQEAKIAl4ZnJlZShjdXIpOwogCXJldHVybiBOVUxMOwogICAg IGNhc2UgMDoJLyogY2hpbGQgKi8KLQlzZXRnaWQoZ2V0Z2lkKCkpOwotCXNldHVpZChnZXR1aWQo KSk7CisJaWYgKHNldGdpZChnZXRnaWQoKSkgPT0gLTEpCisJICAgIF9leGl0KDEyNyk7CisJaWYg KHNldHVpZChnZXR1aWQoKSkgPT0gLTEpCisJICAgIF9leGl0KDEyNyk7CiAJaWYgKCp0eXBlID09 ICdyJykgewogCSAgICBpZiAocGRlc1sxXSAhPSAxKSB7CiAJCS8qIHN0ZG91dCAqLwpJbmRleDog eGMvcHJvZ3JhbXMveGRtL3Nlc3Npb24uYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcv eGMvcHJvZ3JhbXMveGRtL3Nlc3Npb24uYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4zCmRpZmYg LXUgLXIxLjMgc2Vzc2lvbi5jCi0tLSB4Yy9wcm9ncmFtcy94ZG0vc2Vzc2lvbi5jCTggTm92IDIw MDUgMDY6MzM6MzEgLTAwMDAJMS4zCisrKyB4Yy9wcm9ncmFtcy94ZG0vc2Vzc2lvbi5jCTUgSnVu IDIwMDYgMTA6MzU6MjEgLTAwMDAKQEAgLTEsNCArMSw0IEBACi0vKiAkWGRvdE9yZzogeGMvcHJv Z3JhbXMveGRtL3Nlc3Npb24uYyx2IDEuMyAyMDA1LTExLTA4IDA2OjMzOjMxIGpraiBFeHAgJCAq LworLyogJFhkb3RPcmc6IHhjL3Byb2dyYW1zL3hkbS9zZXNzaW9uLmMsdiAxLjMgMjAwNS8xMS8w OCAwNjozMzozMSBqa2ogRXhwICQgKi8KIC8qICRYb3JnOiBzZXNzaW9uLmMsdiAxLjggMjAwMS8w Mi8wOSAwMjowNTo0MCB4b3JnY3ZzIEV4cCAkICovCiAvKgogCkBAIC00ODgsOCArNDg4LDE0IEBA CiAgICAgZWxzZQogCVJlc2V0U2VydmVyIChkKTsKICAgICBpZiAocmVtb3ZlQXV0aCkgewotCXNl dGdpZCAodmVyaWZ5LmdpZCk7Ci0Jc2V0dWlkICh2ZXJpZnkudWlkKTsKKwlpZiAoc2V0Z2lkICh2 ZXJpZnkuZ2lkKSA9PSAtMSkgeworCSAgICBMb2dFcnJvciggIlNlc3Npb25FeGl0OiBzZXRnaWQ6 ICVzXG4iLCBzdHJlcnJvcihlcnJubykpOworCSAgICBleGl0KHN0YXR1cyk7CisJfQorCWlmIChz ZXR1aWQgKHZlcmlmeS51aWQpID09IC0xKSB7CisJICAgIExvZ0Vycm9yKCAiU2Vzc2lvbkV4aXQ6 IHNldHVpZDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7CisJICAgIGV4aXQoc3RhdHVzKTsKKwl9 CiAJUmVtb3ZlVXNlckF1dGhvcml6YXRpb24gKGQsICZ2ZXJpZnkpOwogI2lmZGVmIEs1QVVUSAog CS8qIGRvIGxpa2UgImtkZXN0cm95IiBwcm9ncmFtICovCkluZGV4OiB4Yy9wcm9ncmFtcy94ZG0v eGRtc2hlbGwuYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcveGMvcHJvZ3JhbXMveGRt L3hkbXNoZWxsLmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMwpkaWZmIC11IC1yMS4zIHhkbXNo ZWxsLmMKLS0tIHhjL3Byb2dyYW1zL3hkbS94ZG1zaGVsbC5jCTE0IEp1bCAyMDA1IDIyOjU4OjI1 IC0wMDAwCTEuMworKysgeGMvcHJvZ3JhbXMveGRtL3hkbXNoZWxsLmMJNSBKdW4gMjAwNiAxMDoz NToyMSAtMDAwMApAQCAtMTgzLDcgKzE4MywxMSBAQAogI2VuZGlmCiAKICAgICAvKiBtYWtlIHhk bSBydW4gaW4gYSBub24tc2V0dWlkIGVudmlyb25tZW50ICovCi0gICAgc2V0dWlkIChnZXRldWlk KCkpOworICAgIGlmIChzZXR1aWQgKGdldGV1aWQoKSkgPT0gLTEpIHsKKwlmcHJpbnRmKHN0ZGVy ciwgIiVzOiBjYW5ub3Qgc2V0dWlkIChlcnJvciAlZCwgJXMpXHJcbiIsCisJCVByb2dyYW1OYW1l LCBlcnJubywgc3RyZXJyb3IoZXJybm8pKTsKKwlleGl0KDEpOworICAgIH0KIAogICAgIC8qCiAg ICAgICogZXhlYyAvdXNyL2Jpbi9YMTEveGRtIC1ub2RhZW1vbiAtdWRwUG9ydCAwCkluZGV4OiB4 Yy9wcm9ncmFtcy94Zjg2ZGdhL2RnYS5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnMveG9yZy94 Yy9wcm9ncmFtcy94Zjg2ZGdhL2RnYS5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjIKZGlmZiAt dSAtcjEuMiBkZ2EuYwotLS0geGMvcHJvZ3JhbXMveGY4NmRnYS9kZ2EuYwkyMyBBcHIgMjAwNCAx OTo1NDo0NyAtMDAwMAkxLjIKKysrIHhjL3Byb2dyYW1zL3hmODZkZ2EvZGdhLmMJNSBKdW4gMjAw NiAxMDozNToyMSAtMDAwMApAQCAtMTYsNiArMTYsNyBAQAogI2luY2x1ZGUgPFgxMS9YbWQuaD4K ICNpbmNsdWRlIDxYMTEvZXh0ZW5zaW9ucy94Zjg2ZGdhLmg+CiAjaW5jbHVkZSA8Y3R5cGUuaD4K KyNpbmNsdWRlIDxlcnJuby5oPgogI2luY2x1ZGUgPHN0ZGlvLmg+CiAjaW5jbHVkZSA8c3RkbGli Lmg+CiAjaW5jbHVkZSA8c2lnbmFsLmg+CkBAIC0xNDEsNyArMTQyLDEwIEBACiAKICNpZm5kZWYg X19VTklYT1MyX18KICAgIC8qIEdpdmUgdXAgcm9vdCBwcml2cyAqLwotICAgc2V0dWlkKGdldHVp ZCgpKTsKKyAgIGlmIChzZXR1aWQoZ2V0dWlkKCkpID09IC0xKSB7CisgICAgICBmcHJpbnRmKHN0 ZGVyciwgIlVuYWJsZSB0byBjaGFuZ2UgdWlkOiAlc1xuIiwgc3RyZXJyb3IoZXJybm8pKTsKKyAg ICAgIGV4aXQoMik7CisgICB9CiAjZW5kaWYKIAogICAgWEY4NkRHQVNldFZpZXdQb3J0KGRpcywg RGVmYXVsdFNjcmVlbihkaXMpLCAwLCAwKTsKSW5kZXg6IHhjL3Byb2dyYW1zL3hpbml0L3hpbml0 LmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94b3JnL3hjL3Byb2dyYW1zL3hpbml0L3hpbml0 LmMsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuNApkaWZmIC11IC1yMS40IHhpbml0LmMKLS0tIHhj L3Byb2dyYW1zL3hpbml0L3hpbml0LmMJNCBPY3QgMjAwNSAwMToyNzozNCAtMDAwMAkxLjQKKysr IHhjL3Byb2dyYW1zL3hpbml0L3hpbml0LmMJNSBKdW4gMjAwNiAxMDozNToyMSAtMDAwMApAQCAt MSw1ICsxLDUgQEAKIC8qICRYb3JnOiB4aW5pdC5jLHYgMS41IDIwMDEvMDIvMDkgMDI6MDU6NDkg eG9yZ2N2cyBFeHAgJCAqLwotLyogJFhkb3RPcmc6IHhjL3Byb2dyYW1zL3hpbml0L3hpbml0LmMs diAxLjQgMjAwNS0xMC0wNCAwMToyNzozNCBhamF4IEV4cCAkICovCisvKiAkWGRvdE9yZzogeGMv cHJvZ3JhbXMveGluaXQveGluaXQuYyx2IDEuNCAyMDA1LzEwLzA0IDAxOjI3OjM0IGFqYXggRXhw ICQgKi8KIAogLyoKIApAQCAtNjkyLDcgKzY5MiwxMCBAQAogc3RhcnRDbGllbnQoY2hhciAqY2xp ZW50W10pCiB7CiAJaWYgKChjbGllbnRwaWQgPSB2Zm9yaygpKSA9PSAwKSB7Ci0JCXNldHVpZChn ZXR1aWQoKSk7CisJCWlmIChzZXR1aWQoZ2V0dWlkKCkpID09IC0xKSB7CisJCQlFcnJvcigiY2Fu bm90IGNoYW5nZSB1aWQ6ICVzXG4iLCBzdHJlcnJvcihlcnJubykpOworCQkJX2V4aXQoRVJSX0VY SVQpOworCQl9CiAJCXNldHBncnAoMCwgZ2V0cGlkKCkpOwogCQllbnZpcm9uID0gbmV3ZW52aXJv bjsKICNpZmRlZiBfX1VOSVhPUzJfXwpJbmRleDogeGMvcHJvZ3JhbXMveGxvYWQveGxvYWQuYwo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcveGMvcHJvZ3JhbXMveGxvYWQveGxvYWQuYyx2 CnJldHJpZXZpbmcgcmV2aXNpb24gMS4yCmRpZmYgLXUgLXIxLjIgeGxvYWQuYwotLS0geGMvcHJv Z3JhbXMveGxvYWQveGxvYWQuYwkyMyBBcHIgMjAwNCAxOTo1NDo1NyAtMDAwMAkxLjIKKysrIHhj L3Byb2dyYW1zL3hsb2FkL3hsb2FkLmMJNSBKdW4gMjAwNiAxMDozNToyMSAtMDAwMApAQCAtMzQs NyArMzQsNyBAQAogICogeGxvYWQgLSBkaXNwbGF5IHN5c3RlbSBsb2FkIGF2ZXJhZ2UgaW4gYSB3 aW5kb3cKICAqLwogCi0KKyNpbmNsdWRlIDxlcnJuby5oPgogI2luY2x1ZGUgPHN0ZGlvLmg+IAog I2luY2x1ZGUgPHN0ZGxpYi5oPgogI2luY2x1ZGUgPHVuaXN0ZC5oPgpAQCAtMTYyLDggKzE2Miwx NyBAQAogICAgIC8qIEZvciBzZWN1cml0eSByZWFzb25zLCB3ZSByZXNldCBvdXIgdWlkL2dpZCBh ZnRlciBkb2luZyB0aGUgbmVjZXNzYXJ5CiAgICAgICAgc3lzdGVtIGluaXRpYWxpemF0aW9uIGFu ZCBiZWZvcmUgY2FsbGluZyBhbnkgWCByb3V0aW5lcy4gKi8KICAgICBJbml0TG9hZFBvaW50KCk7 Ci0gICAgc2V0Z2lkKGdldGdpZCgpKTsJCS8qIHJlc2V0IGdpZCBmaXJzdCB3aGlsZSBzdGlsbCAo bWF5YmUpIHJvb3QgKi8KLSAgICBzZXR1aWQoZ2V0dWlkKCkpOworICAgIC8qIHJlc2V0IGdpZCBm aXJzdCB3aGlsZSBzdGlsbCAobWF5YmUpIHJvb3QgKi8KKyAgICBpZiAoc2V0Z2lkKGdldGdpZCgp KSA9PSAtMSkgeworCSAgICBmcHJpbnRmKHN0ZGVyciwgIiVzOiBzZXRnaWQgZmFpbGVkOiAlc1xu IiwgCisJCVByb2dyYW1OYW1lLCBzdHJlcnJvcihlcnJubykpOworCSAgICBleGl0KDEpOworICAg IH0KKyAgICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkgeworCSAgICBmcHJpbnRmKHN0ZGVy ciwgIiVzOiBzZXR1aWQgZmFpbGVkOiAlc1xuIiwgCisJCVByb2dyYW1OYW1lLCBzdHJlcnJvcihl cnJubykpOworCSAgICBleGl0KDEpOworICAgIH0KIAogICAgIFh0U2V0TGFuZ3VhZ2VQcm9jKE5V TEwsIChYdExhbmd1YWdlUHJvYykgTlVMTCwgTlVMTCk7CiAKSW5kZXg6IHhjL3Byb2dyYW1zL3h0 ZXJtL21haW4uYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvY3ZzL3hvcmcveGMvcHJvZ3JhbXMveHRl cm0vbWFpbi5jLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjgKZGlmZiAtdSAtcjEuOCBtYWluLmMK LS0tIHhjL3Byb2dyYW1zL3h0ZXJtL21haW4uYwkxNCBEZWMgMjAwNSAyMzoyODoyNyAtMDAwMAkx LjgKKysrIHhjL3Byb2dyYW1zL3h0ZXJtL21haW4uYwk1IEp1biAyMDA2IDEwOjM1OjIyIC0wMDAw CkBAIC0xNTkyLDggKzE1OTIsMTAgQEAKICAgICBXaW5kb3cgd2luVG9FbWJlZEludG8gPSBOb25l OwogCiAjaWZkZWYgRElTQUJMRV9TRVRVSUQKLSAgICBzZXRldWlkKGdldHVpZCgpKTsKLSAgICBz ZXR1aWQoZ2V0dWlkKCkpOworICAgIGlmIChzZXRldWlkKGdldHVpZCgpKSA9PSAtMSkKKwkgICAg ZXhpdCgyKTsKKyAgICBpZiAoc2V0dWlkKGdldHVpZCgpKSA9PSAtMSkKKwkgICAgZXhpdCgyKTsK ICNlbmRpZgogCiAgICAgUHJvZ3JhbU5hbWUgPSBhcmd2WzBdOwpAQCAtMTYxOSw4ICsxNjIxLDE2 IEBACiAKICNpZiBkZWZpbmVkKFVTRV9VVE1QX1NFVEdJRCkKICAgICBnZXRfcHR5KE5VTEwsIE5V TEwpOwotICAgIHNldGV1aWQoZ2V0dWlkKCkpOwotICAgIHNldHVpZChnZXR1aWQoKSk7CisgICAg aWYgKHNldGV1aWQoZ2V0dWlkKCkpID09IC0xKSB7CisgICAgICAgICAgIGZwcmludGYoc3RkZXJy LAorICAgICAgICAgICAgICAgIiVzOiB1bmFibGUgdG8gY2hhbmdlIGJhY2sgZXVpZFxuIiwgUHJv Z3JhbU5hbWUpOworICAgICAgICAgICBleGl0KDEpOworICAgIH0KKyAgICBpZiAoc2V0dWlkKGdl dHVpZCgpKSA9PSAtMSkgeworICAgICAgICAgICBmcHJpbnRmKHN0ZGVyciwKKyAgICAgICAgICAg ICAgICIlczogdW5hYmxlIHRvIGNoYW5nZSBiYWNrIHVpZFxuIiwgUHJvZ3JhbU5hbWUpOworICAg ICAgICAgICBleGl0KDEpOworICAgIH0KICNkZWZpbmUgZ2V0X3B0eShwdHksIGZyb20pIHJlYWxs eV9nZXRfcHR5KHB0eSwgZnJvbSkKICNlbmRpZgogCkluZGV4OiB4Yy9wcm9ncmFtcy94dGVybS9t aXNjLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2N2cy94b3JnL3hjL3Byb2dyYW1zL3h0ZXJtL21p c2MuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS42CmRpZmYgLXUgLXIxLjYgbWlzYy5jCi0tLSB4 Yy9wcm9ncmFtcy94dGVybS9taXNjLmMJMTQgRGVjIDIwMDUgMjM6Mjg6MjcgLTAwMDAJMS42Cisr KyB4Yy9wcm9ncmFtcy94dGVybS9taXNjLmMJNSBKdW4gMjAwNiAxMDozNToyMiAtMDAwMApAQCAt MTA5NCw4ICsxMDk0LDEwIEBACiAgICAgcGlkID0gZm9yaygpOwogICAgIHN3aXRjaCAocGlkKSB7 CiAgICAgY2FzZSAwOgkJCS8qIGNoaWxkICovCi0Jc2V0Z2lkKGdpZCk7Ci0Jc2V0dWlkKHVpZCk7 CisJaWYgKHNldGdpZChnaWQpID09IC0xKQorCSAgICBfZXhpdChFUlJPUl9TRVRVSUQpOworCWlm IChzZXR1aWQodWlkKSA9PSAtMSkgCisJICAgIF9leGl0KEVSUk9SX1NFVFVJRCk7CiAJZmQgPSBv cGVuKHBhdGhuYW1lLAogCQkgIE9fV1JPTkxZIHwgT19DUkVBVCB8IChhcHBlbmQgPyBPX0FQUEVO RCA6IE9fRVhDTCksCiAJCSAgbW9kZSk7CkBAIC0xMjYyLDggKzEyNjQsMTAgQEAKIAkgICAgc2ln bmFsKFNJR0NITEQsIFNJR19ERkwpOwogCiAJICAgIC8qICh0aGlzIGlzIHJlZHVuZGFudCkgKi8K LQkgICAgc2V0Z2lkKHNjcmVlbi0+Z2lkKTsKLQkgICAgc2V0dWlkKHNjcmVlbi0+dWlkKTsKKwkg ICAgaWYgKHNldGdpZChzY3JlZW4tPmdpZCkgPT0gLTEpCisJCWV4aXQoRVJST1JfU0VUVUlEKTsK KwkgICAgaWYgKHNldHVpZChzY3JlZW4tPnVpZCkgPT0gLTEpCisJCWV4aXQoRVJST1JfU0VUVUlE KTsKIAogCSAgICBleGVjbChzaGVsbCwgc2hlbGwsICItYyIsICZzY3JlZW4tPmxvZ2ZpbGVbMV0s ICh2b2lkICopIDApOwogCkluZGV4OiB4Yy9wcm9ncmFtcy94dGVybS9wcmludC5jCj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0KUkNTIGZpbGU6IC9jdnMveG9yZy94Yy9wcm9ncmFtcy94dGVybS9wcmludC5jLHYKcmV0cmll dmluZyByZXZpc2lvbiAxLjUKZGlmZiAtdSAtcjEuNSBwcmludC5jCi0tLSB4Yy9wcm9ncmFtcy94 dGVybS9wcmludC5jCTUgQXVnIDIwMDUgMTY6MTM6MDQgLTAwMDAJMS41CisrKyB4Yy9wcm9ncmFt cy94dGVybS9wcmludC5jCTUgSnVuIDIwMDYgMTA6MzU6MjIgLTAwMDAKQEAgLTM4Nyw5ICszODcs MTEgQEAKIAkJZHVwMihmaWxlbm8oc3RkZXJyKSwgMik7CiAJCWNsb3NlKGZpbGVubyhzdGRlcnIp KTsKIAkgICAgfQotCi0JICAgIHNldGdpZChzY3JlZW4tPmdpZCk7CS8qIGRvbid0IHdhbnQgcHJp dmlsZWdlcyEgKi8KLQkgICAgc2V0dWlkKHNjcmVlbi0+dWlkKTsKKwkgICAgLyogZG9uJ3Qgd2Fu dCBwcml2aWxlZ2VzISAqLworCSAgICBpZiAoc2V0Z2lkKHNjcmVlbi0+Z2lkKSA9PSAtMSkKKwkJ ICAgIGV4aXQoMik7CisJICAgIGlmIChzZXR1aWQoc2NyZWVuLT51aWQpID09IC0xKQorCQkgICAg ZXhpdCgyKTsKIAogCSAgICBQcmludGVyID0gcG9wZW4oc2NyZWVuLT5wcmludGVyX2NvbW1hbmQs ICJ3Iik7CiAJICAgIGlucHV0ID0gZmRvcGVuKG15X3BpcGVbMF0sICJyIik7Cg==