161750 2007-01-12 13:39 0000 net-anlyzer/snort [2.6.1 <= 2.6.1.2] Integer underflow in DecodeGRE() 2007-03-07 13:32:15 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://labs.calyptix.com/advisories/CX-2007-01.txt C4 [noglsa] P2 trivial --- 1 aetius@gentoo.org security@gentoo.org jigme.datse@gmail.com netmon@gentoo.org aetius@gentoo.org 2007-01-12 13:39:36 0000 Snort contains an integer underflow in the new GRE processing code, allowing possible log corruption or information disclosure. Reproducible: Didn't try Steps to Reproduce: aetius@gentoo.org 2007-01-12 13:41:32 0000 Setting status and cc'ing herd. The advisory says there's a patch in snort CVS. falco@gentoo.org 2007-01-13 23:25:25 0000 Fixed in r 1.131 of decode.c, see attached upstream patch. The vulnerable GRE support has been introduced in 2.6.1 There is no vulnerable stable version in the portage tree (latest stable ebuild = 2.4.5) But this will be important to consider since there is bug 161632 which concerns a DoS that has been fixed in 2.6.1 falco@gentoo.org 2007-01-13 23:26:40 0000 Created an attachment (id=106865) Upstream patch falco@gentoo.org 2007-01-13 23:53:58 0000 BTW the gentoo ebuild doesn't take the advantage of --enable-gre which is too bad :( i'm going to attach a backport of the upstream patch against 2.6.1.1, and an ebuild patch for a "gre" USE-flag. The vulnerability is only present with --enable-gre, so Gentoo is not actually vulnerable. ("objdump -x decode.o | grep DecodeGRE" gives nothing). falco@gentoo.org 2007-01-13 23:56:55 0000 Created an attachment (id=106867) Backport for 2.6.1.1 falco@gentoo.org 2007-01-14 00:04:53 0000 Created an attachment (id=106869) Proposed ebuild with --enable-gre support vorlon@gentoo.org 2007-03-07 13:32:15 0000 This does not appear to be an issue anymore in the current stable 2.6.1.3-r1. Reopen if you disagree. c4 -> noglsa 106865 2007-01-13 23:26 0000 Upstream patch snort-diff-upstream-r1.130-r1.131.diff text/plain SW5kZXg6IGRlY29kZS5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9jdnNyb290L3Nub3J0L3NyYy9k ZWNvZGUuYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4xMzAKcmV0cmlldmluZyByZXZpc2lvbiAx LjEzMQpkaWZmIC11IC0zIC1wIC1yMS4xMzAgLXIxLjEzMQotLS0gZGVjb2RlLmMJMTMgT2N0IDIw MDYgMTc6NDA6NDIgLTAwMDAJMS4xMzAKKysrIGRlY29kZS5jCTEwIEphbiAyMDA3IDIyOjQxOjU0 IC0wMDAwCTEuMTMxCkBAIC0xLDQgKzEsNCBAQAotLyogJElkOiBkZWNvZGUuYyx2IDEuMTMwIDIw MDYvMTAvMTMgMTc6NDA6NDIgc3N0dXJnZXMgRXhwICQgKi8KKy8qICRJZDogZGVjb2RlLmMsdiAx LjEzMSAyMDA3LzAxLzEwIDIyOjQxOjU0IHNzdHVyZ2VzIEV4cCAkICovCiAKIC8qCiAqKiBDb3B5 cmlnaHQgKEMpIDE5OTgtMjAwMiBNYXJ0aW4gUm9lc2NoIDxyb2VzY2hAc291cmNlZmlyZS5jb20+ CkBAIC0yMzM5LDE0ICsyMzM5LDE5IEBAIHZvaWQgRGVjb2RlSVAodV9pbnQ4X3QgKiBwa3QsIGNv bnN0IHVfaW4KICAgICBlbHNlCiAgICAgewogI2lmZGVmIEdSRQotICAgIC8qIGlmIGRlbGl2ZXJ5 IGhlYWRlciBmb3IgR1JFIGVuY2Fwc3VsYXRlZCBwYWNrZXQgaXMgSVAgYW5kIGl0IAotICAgICAq IGhhZCBvcHRpb25zLCBwLT5pcF9vcHRpb25zX2RhdGEgd2lsbCBiZSBwb2ludGluZyB0byB0aGlz IG91dGVyCi0gICAgICogSVAncyBvcHRpb25zCi0gICAgICogc2V0IHRvIE5VTEwgc28gdGhlc2Ug b3B0aW9ucyBhcmVuJ3QgYXNzb2NpYXRlZCB3aXRoIHRoaXMgaW5uZXIgSVAKLSAgICAgKiBzaW5j ZSBwLT5pcGggd2lsbCBiZSBwb2ludGluZyB0byB0aGlzIGlubmVyIElQCi0gICAgICovCi0gICAg aWYgKHAtPmdyZWggIT0gTlVMTCkKLSAgICAgICAgcC0+aXBfb3B0aW9uc19kYXRhID0gTlVMTDsK KyAgICAgICAgLyogSWYgZGVsaXZlcnkgaGVhZGVyIGZvciBHUkUgZW5jYXBzdWxhdGVkIHBhY2tl dCBpcyBJUCBhbmQgaXQgCisgICAgICAgICAqIGhhZCBvcHRpb25zLCB0aGUgcGFja2V0J3MgaXAg b3B0aW9ucyB3aWxsIGJlIHJlZmVyaW5nIHRvIHRoaXMKKyAgICAgICAgICogb3V0ZXIgSVAncyBv cHRpb25zCisgICAgICAgICAqIFplcm8gdGhlc2Ugb3B0aW9ucyBzbyB0aGV5IGFyZW4ndCBhc3Nv Y2lhdGVkIHdpdGggdGhpcyBpbm5lciBJUAorICAgICAgICAgKiBzaW5jZSBwLT5pcGggd2lsbCBi ZSBwb2ludGluZyB0byB0aGlzIGlubmVyIElQCisgICAgICAgICAqLworICAgICAgICBpZiAocC0+ Z3JlaCAhPSBOVUxMKQorICAgICAgICB7CisgICAgICAgICAgICBwLT5pcF9vcHRpb25zX2RhdGEg PSBOVUxMOworICAgICAgICAgICAgcC0+aXBfb3B0aW9uc19sZW4gPSAwOworICAgICAgICAgICAg bWVtc2V0KCYocC0+aXBfb3B0aW9uc1swXSksIDAsIHNpemVvZihwLT5pcF9vcHRpb25zKSk7Cisg ICAgICAgICAgICBwLT5pcF9sYXN0b3B0X2JhZCA9IDA7CisgICAgICAgIH0KICNlbmRpZgogCiAg ICAgICAgIHAtPmlwX29wdGlvbl9jb3VudCA9IDA7CkBAIC0zNDYyLDcgKzM0NjcsNyBAQCB2b2lk IERlY29kZUdSRSh1X2ludDhfdCAqcGt0LCBjb25zdCB1X2luCiAgICAgdV9pbnQzMl90IGhsZW47 ICAgIC8qIEdSRSBoZWFkZXIgbGVuZ3RoICovCiAgICAgdV9pbnQzMl90IHBheWxvYWRfbGVuOwog ICAgCi0gICAgaWYgKGxlbiA8IHNpemVvZihHUkVIZHIpKQorICAgIGlmIChsZW4gPCBHUkVfSEVB REVSX0xFTikKICAgICB7CiAgICAgICAgIGlmKHB2LnZlcmJvc2VfZmxhZykKICAgICAgICAgICAg IEVycm9yTWVzc2FnZSgiR1JFIGhlYWRlciBsZW5ndGggPiByZXN0IG9mIHBhY2tldCBsZW5ndGgi KTsKQEAgLTM1NTMsOCArMzU1OCwxMCBAQCB2b2lkIERlY29kZUdSRSh1X2ludDhfdCAqcGt0LCBj b25zdCB1X2luCiAKICAgICAgICAgICAgIHNyZV9hZGRyZmFtaWx5ID0gbnRvaHMoKigodV9pbnQx Nl90ICopc3JlX3B0cikpOwogICAgICAgICAgICAgc3JlX3B0ciArPSBzaXplb2Yoc3JlX2FkZHJm YW1pbHkpOworCiAgICAgICAgICAgICBzcmVfb2Zmc2V0ID0gKigodV9pbnQ4X3QgKilzcmVfcHRy KTsKICAgICAgICAgICAgIHNyZV9wdHIgKz0gc2l6ZW9mKHNyZV9vZmZzZXQpOworCiAgICAgICAg ICAgICBzcmVfbGVuZ3RoID0gKigodV9pbnQ4X3QgKilzcmVfcHRyKTsKICAgICAgICAgICAgIHNy ZV9wdHIgKz0gc2l6ZW9mKHNyZV9sZW5ndGgpOwogCkBAIC0zNTY2LDkgKzM1NzMsNyBAQCB2b2lk IERlY29kZUdSRSh1X2ludDhfdCAqcGt0LCBjb25zdCB1X2luCiAgICAgICAgIH0KICAgICB9CiAK LSAgICBwYXlsb2FkX2xlbiA9IGxlbiAtIGhsZW47Ci0KLSAgICBpZiAocGF5bG9hZF9sZW4gPCAw KQorICAgIGlmIChobGVuID4gbGVuKQogICAgIHsKICAgICAgICAgaWYocHYudmVyYm9zZV9mbGFn KQogICAgICAgICAgICAgRXJyb3JNZXNzYWdlKCJHUkUgaGVhZGVyIGxlbmd0aCA+IHJlc3Qgb2Yg cGFja2V0IGxlbmd0aCIpOwpAQCAtMzU4OSw3ICszNTk0LDkgQEAgdm9pZCBEZWNvZGVHUkUodV9p bnQ4X3QgKnBrdCwgY29uc3QgdV9pbgogICAgICAgICByZXR1cm47CiAgICAgfQogCi0gICAgLyog c2VuZCB0byBuZXh0IHByb3RvY29sIGRlY29kZXIgKi8KKyAgICBwYXlsb2FkX2xlbiA9IGxlbiAt IGhsZW47CisKKyAgICAvKiBTZW5kIHRvIG5leHQgcHJvdG9jb2wgZGVjb2RlciAqLwogICAgIC8q IEFzIGRlc2NyaWJlZCBpbiBSRkMgMjc4NCB0aGUgcG9zc2libGUgcHJvdG9jb2xzIGFyZSBsaXN0 ZWQgaW4KICAgICAgKiBSRkMgMTcwMCB1bmRlciAiRVRIRVIgVFlQRVMiCiAgICAgICogU2VlIGFs c28gIkN1cnJlbnQgTGlzdCBvZiBQcm90b2NvbCBUeXBlcyIgaW4gUkZDIDE3MDEK 106867 2007-01-13 23:56 0000 Backport for 2.6.1.1 snort-2.6.1.1-gre.patch text/plain ZGlmZiAtdU5yIC1yIDIuNi4xLjEtb3JpZy9zcmMvZGVjb2RlLmMgMi42LjEuMS9zcmMvZGVjb2Rl LmMKLS0tIDIuNi4xLjEtb3JpZy9zcmMvZGVjb2RlLmMJMjAwNi0xMC0xMyAxOTo0MDo0MS4wMDAw MDAwMDAgKzAyMDAKKysrIDIuNi4xLjEvc3JjL2RlY29kZS5jCTIwMDctMDEtMTQgMDA6MzU6MDMu MDAwMDAwMDAwICswMTAwCkBAIC0yMzQ2LDcgKzIzNDYsMTMgQEAKICAgICAgKiBzaW5jZSBwLT5p cGggd2lsbCBiZSBwb2ludGluZyB0byB0aGlzIGlubmVyIElQCiAgICAgICovCiAgICAgaWYgKHAt PmdyZWggIT0gTlVMTCkKKyAgICB7CiAgICAgICAgIHAtPmlwX29wdGlvbnNfZGF0YSA9IE5VTEw7 CisgICAgICAgIHAtPmlwX29wdGlvbnNfbGVuID0gMDsKKyAgICAgICAgbWVtc2V0KCYocC0+aXBf b3B0aW9uc1swXSksIDAsIHNpemVvZihwLT5pcF9vcHRpb25zKSk7CisgICAgICAgIHAtPmlwX2xh c3RvcHRfYmFkID0gMDsKKyAgICB9CisKICNlbmRpZgogCiAgICAgICAgIHAtPmlwX29wdGlvbl9j b3VudCA9IDA7CkBAIC0yNjQyLDcgKzI2NDgsNyBAQAogICAgIHVfaW50MTZfdCB1aGxlbjsKICAg ICBzdHJ1Y3QgcHNldWRvaGVhZGVyIHBoOwogCi0gICAgaWYobGVuIDwgc2l6ZW9mKFVEUEhkcikp CisgICAgaWYobGVuIDwgR1JFX0hFQURFUl9MRU4pCiAgICAgewogICAgICAgICBpZihwdi52ZXJi b3NlX2ZsYWcpCiAgICAgICAgIHsKQEAgLTM1NjYsOSArMzU3Miw3IEBACiAgICAgICAgIH0KICAg ICB9CiAKLSAgICBwYXlsb2FkX2xlbiA9IGxlbiAtIGhsZW47Ci0KLSAgICBpZiAocGF5bG9hZF9s ZW4gPCAwKQorICAgIGlmIChobGVuID4gbGVuKQogICAgIHsKICAgICAgICAgaWYocHYudmVyYm9z ZV9mbGFnKQogICAgICAgICAgICAgRXJyb3JNZXNzYWdlKCJHUkUgaGVhZGVyIGxlbmd0aCA+IHJl c3Qgb2YgcGFja2V0IGxlbmd0aCIpOwpAQCAtMzU4OSw2ICszNTkzLDggQEAKICAgICAgICAgcmV0 dXJuOwogICAgIH0KIAorICAgIHBheWxvYWRfbGVuID0gbGVuIC0gaGxlbjsKKwogICAgIC8qIHNl bmQgdG8gbmV4dCBwcm90b2NvbCBkZWNvZGVyICovCiAgICAgLyogQXMgZGVzY3JpYmVkIGluIFJG QyAyNzg0IHRoZSBwb3NzaWJsZSBwcm90b2NvbHMgYXJlIGxpc3RlZCBpbgogICAgICAqIFJGQyAx NzAwIHVuZGVyICJFVEhFUiBUWVBFUyIK 106869 2007-01-14 00:04 0000 Proposed ebuild with --enable-gre support snort-2.6.1.1.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA2IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6IC92YXIvY3Zzcm9vdC9nZW50b28teDg2L25ldC1hbmFseXplci9zbm9ydC9zbm9ydC0yLjYu MS4xLmVidWlsZCx2IDEuMSAyMDA2LzExLzI1IDE2OjM5OjQyIGNlZGsgRXhwICQKCldBTlRfQVVU T0NPTkY9ImxhdGVzdCIKV0FOVF9BVVRPTUFLRT0ibGF0ZXN0Igppbmhlcml0IGV1dGlscyBhdXRv dG9vbHMKCkRFU0NSSVBUSU9OPSJMaWJwY2FwLWJhc2VkIHBhY2tldCBzbmlmZmVyL2xvZ2dlci9s aWdodHdlaWdodCBJRFMiCkhPTUVQQUdFPSJodHRwOi8vd3d3LnNub3J0Lm9yZy8iClNSQ19VUkk9 Imh0dHA6Ly93d3cuc25vcnQub3JnL2RsL2N1cnJlbnQvJHtQfS50YXIuZ3oKCWh0dHA6Ly93d3cu c25vcnQub3JnL3B1Yi1iaW4vZG93bmxvYWRzLmNnaS9Eb3dubG9hZC9jb21tX3J1bGVzL0NvbW11 bml0eS1SdWxlcy0yLjQudGFyLmd6CglodHRwOi8vd3d3LnNub3J0Lm9yZy9wdWItYmluL2Rvd25s b2Fkcy5jZ2kvRG93bmxvYWQvdnJ0X3ByL3Nub3J0cnVsZXMtcHItMi40LnRhci5negoJc25vcnRz YW0/ICggbWlycm9yOi8vZ2VudG9vL3Nub3J0c2FtLTIwMDUwMTEwLnRhci5neiApIgoKTElDRU5T RT0iR1BMLTIiClNMT1Q9IjAiCktFWVdPUkRTPSJ+YWxwaGEgfmFtZDY0IH5wcGMgfnBwYzY0IC1z cGFyYyB+eDg2IgpJVVNFPSJwb3N0Z3JlcyBteXNxbCBmbGV4cmVzcCBzZWxpbnV4IHNub3J0c2Ft IG9kYmMgcHJlbHVkZSBpbmxpbmUgZHluYW1pY3BsdWdpbgp0aW1lc3RhdHMgcGVyZnByb2ZpbGlu ZyBsaW51eC1zbXAtc3RhdHMgZmxleHJlc3AyIHJlYWN0IHNndWlsIGdyZSIKCkRFUEVORD0idmly dHVhbC9saWJjCgk+PWRldi1saWJzL2xpYnBjcmUtNC4yLXIxCgl2aXJ0dWFsL2xpYnBjYXAKCWZs ZXhyZXNwPyAoIH5uZXQtbGlicy9saWJuZXQtMS4wLjJhICkKCWZsZXhyZXNwMj8gKCBkZXYtbGli cy9saWJkbmV0ICkKCXJlYWN0PyAoIH5uZXQtbGlicy9saWJuZXQtMS4wLjJhICkKCXBvc3RncmVz PyAoIHx8ICggZGV2LWRiL3Bvc3RncmVzcWwgZGV2LWRiL2xpYnBxICkgKQoJbXlzcWw/ICggdmly dHVhbC9teXNxbCApCglwcmVsdWRlPyAoID49ZGV2LWxpYnMvbGlicHJlbHVkZS0wLjkuMCApCglv ZGJjPyAoIGRldi1kYi91bml4T0RCQyApCgk+PXN5cy1kZXZlbC9saWJ0b29sLTEuNAoJaW5saW5l PyAoCgkJfm5ldC1saWJzL2xpYm5ldC0xLjAuMmEKCQluZXQtZmlyZXdhbGwvaXB0YWJsZXMKCQkp IgoKUkRFUEVORD0iJHtERVBFTkR9CglkZXYtbGFuZy9wZXJsCglzZWxpbnV4PyAoIHNlYy1wb2xp Y3kvc2VsaW51eC1zbm9ydCApCglzbm9ydHNhbT8gKCBuZXQtYW5hbHl6ZXIvc25vcnRzYW0gKSIK CnBrZ19zZXR1cCgpIHsKCWVuZXdncm91cCBzbm9ydAoJZW5ld3VzZXIgc25vcnQgLTEgLTEgL2Rl di9udWxsIHNub3J0CgoJaWYgdXNlIGZsZXhyZXNwICYmIHVzZSBmbGV4cmVzcDIgOyB0aGVuCgkJ ZXdhcm4KCQlld2FybiAiWW91IGhhdmUgYm90aCB0aGUgJ2ZsZXhyZXNwJyBhbmQgJ2ZsZXhyZXNw MicgVVNFIgoJCWV3YXJuICJmbGFncyBzZXQuIFlvdSBjYW4gdXNlICdmbGV4cmVzcCcgb3IgJ2Zs ZXhyZXNwMiciCgkJZXdhcm4gImJ1dCBub3QgYm90aC4iCgkJZXdhcm4KCQlld2FybiAiRGVmYXVs dGluZyB0byBmbGV4cmVzcDIuLi4iCglmaQp9CgpzcmNfdW5wYWNrKCkgewoJdW5wYWNrICR7QX0K CWNkICIke1N9IgoKCWVwYXRjaCAiJHtGSUxFU0RJUn0vJHtQfS1saWJuZXQucGF0Y2giCgllcGF0 Y2ggIiR7RklMRVNESVJ9LyR7UH0tZ3JlLnBhdGNoIgoKCXNlZCAtaSAiczp2YXIgUlVMRV9QQVRI IC4uL3J1bGVzOnZhciBSVUxFX1BBVEggL2V0Yy9zbm9ydC9ydWxlczoiIFwKCQlldGMvc25vcnQu Y29uZgoKCWlmIHVzZSBwcmVsdWRlIDsgdGhlbgoJCXNlZCAtaSAtZSAiczpBQ19QUk9HX1JBTkxJ QjpBQ19QUk9HX0xJQlRPT0w6IiBjb25maWd1cmUuaW4KCWZpCgoJaWYgdXNlIHNub3J0c2FtIDsg dGhlbgoJCWNkIC4uCgkJZWluZm8gIkFwcGx5aW5nIHNub3J0c2FtIHBhdGNoIgoJCXNlZCAtaSAi cy9QTFVHSU5fRldTQU0vUExVR0lOX0ZXU0FNLC8iIHNub3J0cGF0Y2g5IHx8IGRpZSAic2VkIGZh aWxlZCIKCQkuL3BhdGNoc25vcnQuc2ggIiR7U30iIHx8IGRpZSAic25vcnRzYW0gcGF0Y2ggZmFp bGVkIgoJCWNkICIke1N9IgoJZmkKCgllaW5mbyAiUmVnZW5lcmF0aW5nIGF1dG9jb25mL2F1dG9t YWtlIGZpbGVzIgoJQVRfTTRESVI9bTQgZWF1dG9yZWNvbmYKfQoKc3JjX2NvbXBpbGUoKSB7Cgls b2NhbCBteWNvbmYKCglpZiB1c2UgZmxleHJlc3AyOyB0aGVuCgkJbXljb25mPSIke215Y29uZn0g LS1lbmFibGUtZmxleHJlc3AyIgoJZWxpZiB1c2UgZmxleHJlc3A7IHRoZW4KCQlteWNvbmY9IiR7 bXljb25mfSAtLWVuYWJsZS1mbGV4cmVzcCIKCWZpCgoJaWYgdXNlIHJlYWN0ICYmICEgdXNlIGZs ZXhyZXNwOyB0aGVuCgkJbXljb25mPSIke215Y29uZn0gLS1lbmFibGUtcmVhY3QiCglmaQoKCW15 Y29uZj0iJHtteWNvbmZ9IC0td2l0aC1saWJpcHEtaW5jbHVkZXM9L3Vzci9pbmNsdWRlL2xpYmlw cSIKCgllY29uZiBcCgkJLS13aXRob3V0LW9yYWNsZSBcCgkJJCh1c2Vfd2l0aCBwb3N0Z3JlcyBw b3N0Z3Jlc3FsKSBcCgkJJCh1c2Vfd2l0aCBteXNxbCkgXAoJCSQodXNlX3dpdGggb2RiYykgXAoJ CSQodXNlX2VuYWJsZSBwcmVsdWRlKSBcCgkJJCh1c2VfZW5hYmxlIGlubGluZSkgXAoJCSQodXNl X2VuYWJsZSBkeW5hbWljcGx1Z2luKSBcCgkJJCh1c2VfZW5hYmxlIHRpbWVzdGF0cykgXAoJCSQo dXNlX2VuYWJsZSBwZXJmcHJvZmlsaW5nKSBcCgkJJCh1c2VfZW5hYmxlIGxpbnV4LXNtcC1zdGF0 cykgXAoJCSQodXNlX2VuYWJsZSBncmUpIFwKCQkke215Y29uZn0gfHwgZGllICJlY29uZiBmYWls ZWQiCgoJIyBsaW1pdCB0byBzaW5nbGUgYXMgcmVwb3J0ZWQgYnkgamZvcm1hbiBvbiBpcmMKCWVt YWtlIC1qMSB8fCBkaWUgImVtYWtlIGZhaWxlZCIKfQoKc3JjX2luc3RhbGwoKSB7CgllbWFrZSBE RVNURElSPSIke0R9IiBpbnN0YWxsIHx8IGRpZSAibWFrZSBpbnN0YWxsIGZhaWxlZCIKCglrZWVw ZGlyIC92YXIvbG9nL3Nub3J0LwoKCWRvZG9jIGRvYy8qCglkb2RvYyAuL1JFTEVBU0UuTk9URVMK CWRvY2ludG8gc2NoZW1hcyA7IGRvZG9jIHNjaGVtYXMvKgoKCWluc2ludG8gL2V0Yy9zbm9ydAoJ ZG9pbnMgZXRjL3JlZmVyZW5jZS5jb25maWcgZXRjL2NsYXNzaWZpY2F0aW9uLmNvbmZpZyBcCgkJ ZXRjLyoubWFwIGV0Yy90aHJlc2hvbGQuY29uZgoJbmV3aW5zIGV0Yy9zbm9ydC5jb25mIHNub3J0 LmNvbmYKCgluZXdpbml0ZCAiJHtGSUxFU0RJUn0vc25vcnQucmM4IiBzbm9ydAoJbmV3Y29uZmQg IiR7RklMRVNESVJ9L3Nub3J0LmNvbmZkIiBzbm9ydAoKCWZvd25lcnMgc25vcnQ6c25vcnQgL3Zh ci9sb2cvc25vcnQKCWZwZXJtcyAwNzcwIC92YXIvbG9nL3Nub3J0CgoJIyBpbnN0YWxsIHJ1bGVz CglpbnNpbnRvIC9ldGMvc25vcnQvcnVsZXMKCWRvaW5zIC1yICIke1dPUktESVJ9Ii9ydWxlcy8q Cn0KCnBrZ19wb3N0aW5zdCgpIHsKCWV3YXJuCglld2FybiAiVXNlcnMgdXBncmFkaW5nIGZyb20g c25vcnQgMi40Lnggc2hvdWxkIHRha2UgY2FyZSB3aGVuIHVwZGF0aW5nIgoJZXdhcm4gInRoZWly IHNub3J0LmNvbmYuIEEgbnVtYmVyIG9mIHNpZ25pZmljYW50IGNoYW5nZXMgaGF2ZSBiZWVuIgoJ ZXdhcm4gImhhdmUgYmVlbiBhZGRlZCB0byBzbm9ydCAyLjYgaW5jbHVkaW5nIHRoZSBhZGRpdGlv biBvZiIKCWV3YXJuICJkeW5hbWljYWxseSBsb2FkYWJsZSBwcmVwcm9jZXNzb3JzLCBkZXRlY3Rp b24gZW5naW5lIGFuZCBydWxlcy4iCglld2FybiAiU25vcnQgMi42IGFsc28gaW5jbHVkZXMgdGhl IGFkZGl0aW9uIG9mIHBlcmZvcm1hbmNlIHByb2ZpbGluZyIKCWV3YXJuICJmb3IgcnVsZXMgJiBw cmVwcm9jZXNzb3JzIGFuZCB1c2VzIGEgbmV3IGRlZmF1bHQgcGF0dGVybiBtYXRjaGVyIgoJZXdh cm4gIndoaWNoIHByb3ZpZGVzIGZhc3RlciBtYXRjaGluZyBhdCB0aGUgZXhwZW5zZSBvZiBiZWlu ZyB2ZXJ5IgoJZXdhcm4gIm1lbW9yeSBpbnRlbnNpdmUuIgoJZXdhcm4KCWV3YXJuICJJZiB5b3Ug ZmluZCB0aGF0IHNub3J0IGlzIHVzaW5nIHRvbyBtdWNoIG1lbW9yeSwgeW91ciBzeXN0ZW0iCgll d2FybiAiZnJlZXplcywgb3Igc25vcnQgY3Jhc2hlcyBhZnRlciBhIGZldyBtaW51dGVzIHRyeSBh ZGRpbmcgdGhlIgoJZXdhcm4gImZvbGxvd2luZyB0byB5b3VyIHNub3J0LmNvbmYuLi4iCglld2Fy bgoJZXdhcm4gIidjb25maWcgZGV0ZWN0aW9uOiBzZWFyY2gtbWV0aG9kIGFjLXNwYXJzZWJhbmRz JyIKCWV3YXJuCglld2FybiAiVGhpcyB3aWxsIHByb3ZpZGUgaGlnaCBwYXR0ZXJuIG1hdGNoaW5n IHBlcmZvcm1hbmNlIGF0IGEgbXVjaCIKCWV3YXJuICJsb3dlciBjb3N0IHRvIG1lbW9yeS4gRm9y IG1vcmUgaW5mb3JtYXRpb24gb24gdGhlIG5ldyBmZWF0dXJlcyIKCWV3YXJuICJpbiBzbm9ydCAy LjYsIHBsZWFzZSB0YWtlIGEgbG9vayBhdCB0aGUgcmVsZWFzZSBub3RlcyBsb2NhdGVkIGluLi4u IgoJZXdhcm4KCWV3YXJuICIgIC91c3Ivc2hhcmUvZG9jLyR7UEZ9L1JFTEVBU0UuTk9URVMuZ3oi Cglld2FybgoJZWluZm8gIlRvIHVzZSBhIGRhdGFiYXNlIGFzIGEgYmFja2VuZCBmb3Igc25vcnQg eW91IHdpbGwgaGF2ZSB0byIKCWVpbmZvICJpbXBvcnQgdGhlIGNvcnJlY3QgdGFibGVzIHRvIHRo ZSBkYXRhYmFzZS4iCgllaW5mbyAiWW91IHdpbGwgaGF2ZSB0byBzZXR1cCBhIGRhdGFiYXNlIGNh bGxlZCBzbm9ydCBiZWZvcmUgZG9pbmcgdGhlIgoJZWluZm8gImZvbGxvd2luZy4uLiIKCWVpbmZv CgllaW5mbyAiICBNeVNRTDogemNhdCAvdXNyL3NoYXJlL2RvYy8ke1BGfS9zY2hlbWFzL2NyZWF0 ZV9teXNxbC5neiB8IG15c3FsIC1wIHNub3J0IgoJZWluZm8KCWVpbmZvICIgIFBvc3RncmVTUUw6 IGltcG9ydCAvdXNyL3NoYXJlL2RvYy8ke1BGfS9zY2hlbWFzL2NyZWF0ZV9wb3N0Z3Jlc3FsLmd6 IgoJZWluZm8KCWVpbmZvICIgIE9EQkM6IGxvb2sgYXQgL3Vzci9zaGFyZS9kb2MvJHtQRn0vc2No ZW1hcy8iCgllaW5mbwoJZWluZm8gIlVzZXJzIHVzaW5nIHRoZSB1bmlmaWVkIG91dHB1dCBwbHVn aW4gYW5kIGJhcm55YXJkIGRvIG5vdCBuZWVkIHRvIgoJZWluZm8gImNvbXBpbGUgZGF0YWJhc2Ug c3VwcG9ydCBpbnRvIHNub3J0LCBidXQgc3RpbGwgbmVlZCB0byBzZXQgdXAgdGhlaXIiCgllaW5m byAiZGF0YWJhc2UgYXMgc2hvd24gYWJvdmUuIgoJZWluZm8KCWV3YXJuICJPbmx5IGEgYmFzaWMg c2V0IG9mIHJ1bGVzIHdhcyBpbnN0YWxsZWQuIgoJZXdhcm4gIlBsZWFzZSBhZGQgeW91ciBvdGhl ciBzZXRzIG9mIHJ1bGVzIHRvIC9ldGMvc25vcnQvcnVsZXMuIgoJZXdhcm4gIkZvciBtb3JlIGlu Zm9ybWF0aW9uIG9uIHJ1bGVzLCB2aXNpdCAke0hPTUVQQUdFfS4iCglpZiB1c2Ugc2d1aWwgOyB0 aGVuCgkJZWxvZyAiU0dVSUwgbmVlZHMgdG8gY2F0Y2ggdXAgd2l0aCBzbm9ydCAyLjYueC4gSWYg eW91IHBsYW4gb24gdXNpbmcgU0dVSUwiCgkJZWxvZyAieW91IHNob3VsZCB1bm1lcmdlICR7UH0g YW5kIGVtZXJnZSBzbm9ydC0yLjQueCIKCWZpCn0K