71595 2004-11-17 13:53 0000 dev-util/cscope: Race condition on temporary file 2005-02-19 15:17:14 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All All RESOLVED FIXED http://www.securityfocus.com/archive/1/381443 B3 [glsa] lewk P2 minor --- 1 lewk@gentoo.org security@gentoo.org emacs@gentoo.org gregkh@gentoo.org mkennedy@gentoo.org pageexec@freemail.hu ruth@gentoo.org vim@gentoo.org lewk@gentoo.org 2004-11-17 13:53:47 0000 |############################ REXOTEC(dot)COM ############################### | |=-----=[ ADV RX171104 - Cscope :: Race condition on temporary file ]-----=| | | |=---[ - INFORMATION `----------------------------------------------------------------------| VulnDiscovery: 2003/05/21 Release Date : 2004/11/17 Author : Gangstuck / Psirac <research@rexotec.com> Application : Cscope Affected : All version (last one is cscope-15.5) Platforms : Linux, SCO, SunOS/Solaris, ... Risk : Critical Severity : Allow local user to compromise filesystem. Vendor : http://cscope.sourceforge.net/ Reference : http://www.rexotec.com/advisory/RX171104.html Status : vendor has just been notified. |=---[ - SUMMARY OVERVIEW `----------------------------------------------------------------------| Cscope is a developper's tool under the BSD license used to browse source code. His Unix pedigree is impeccable and has originally been developped at Bell Labs back in PDP-11's days. Cscope was a part of the official AT&T Unix distribution for many years and has been used to manage projects involving 20 million lines of code ! |=---[ - VULNERABILITY OVERVIEW `----------------------------------------------------------------------| First, the temporary directory (P_tmpdir="/tmp") is badly handled in every myfopen() internal call. As all we know, creation of predictable temporary file allows any local attacker to remove arbitrary files on the vulnerable file system via the infamous symlink vulnerability. /src/main.c : ----------; [...] char temp1 [PATHLEN + 1]; /* temporary file name */ char temp2 [PATHLEN + 1]; /* temporary file name */ [...] tmpdir = mygetenv("TMPDIR", TMPDIR); [...] /* create the temporary file names */ pid = getpid(); (void) sprintf(temp1, "%s/cscope%d.1", tmpdir, pid); (void) sprintf(temp2, "%s/cscope%d.2", tmpdir, pid); [...] Before us are the computing of two predictable files names (resulting in a schema like "/tmp/cscopeNEXTPID.numba"). So, we just have to probe the pid numba and make the same template which to be used for temporary file creation. Then, cscope handle the files with wrong set of flags and compromise root filesystem due to symlink vulnerability. |=---[ - EXPLOITS - Proof of concept `----------------------------------------------------------------------| *** CUT -- See URL *** lewk@gentoo.org 2004-11-17 14:11:56 0000 Sent an email upstream regarding this issue. lewk@gentoo.org 2004-11-17 19:34:13 0000 Created an attachment (id=44199) cscope-tempfile.patch /* * Cscope patch by REXOTEC - version 15-5 and minors * <research@rexotec.com> */ lewk@gentoo.org 2004-11-17 19:35:45 0000 Oops, I didn't even see the patch in the advisory... vim/emacs herd.. please verify/apply patch. mkennedy@gentoo.org 2004-11-18 00:59:32 0000 I have applied the patch which will work on any arch using glibc. Users should upgrade from dev-util/cscope-15.5 to 15.5-r1. jaervosz@gentoo.org 2004-11-18 01:43:15 0000 Thanks Matthew. This one is ready for GLSA lewk@gentoo.org 2004-11-18 05:09:20 0000 Just recieved message from upstream saying that the patch is insufficient. Moving bug to inhouse status; we should probably remove the patch and develop something internally because the upstream seems pretty stumped. We've had plent of tempfile vulnerabilities latley, I'm sure we can figure this one out... unless someone has a better plan of action? <upstream email> Well, I can't verify it was 'Rexolab' who reported this, but yes, I did receive a report about this at the SF.net bug tracker for cscope: https://sourceforge.net/tracker/index.php?func=detail&aid=1062807&group_id=4664&atid=104664 Whoever posted that thing never bothered to suggest a solution, though, and the solution suggested by Rexolab in his post to Bugtraq is insufficient, which makes me suspect he didn't follow our discussion on that bug report, either. I've been pondering this issue, but haven't arrived at a good solution yet. Lack of time and lack of expertise in such matters both apply... -- Hans-Bernhard Broeker (broeker@physik.rwth-aachen.de) </upstream email> ruth@gentoo.org 2004-11-18 05:28:44 0000 hi, i will take care of this... best regards florian [ruth] ruth@gentoo.org 2004-11-23 07:40:12 0000 Created an attachment (id=44571) the first patch please note, that the patch is some sort of a first try on this issue... the authors says, the program is running on all kind of arches; i just dont have all the machines to test for availability on mkdtemp() so please check and tell me, if something like that would be ok... best regards florian krispykringle@gentoo.org 2004-11-23 08:23:30 0000 Patch looks ok to me. Seemes to work fine. mkennedy@gentoo.org 2004-11-23 11:41:25 0000 +char tmpdir[2048]; /* temporary directory */ ... + tmpdir[sizeof(tmpdir)] = '\0'; I think the last line should be: tmpdir[sizeof(tmpdir) - 1] = '\0'; jaervosz@gentoo.org 2004-11-25 01:49:53 0000 Created an attachment (id=44698) CAN-2004-0996.patch Debian patch. lewk@gentoo.org 2004-11-28 10:39:52 0000 ciaranm, please apply the CAN-2004-0996.patch to cscope. ciaran.mccreesh@googlemail.com 2004-11-28 11:31:39 0000 cscope-15.5-r2 patched, KEYWORDS="~x86 ~ppc sparc mips ~alpha ~arm ~hppa ~amd64 ~ia64 ~s390 ~ppc64" lewk@gentoo.org 2004-11-28 11:52:27 0000 arches, please mark cscop-15.5-r2 stable. plasmaroo@gentoo.org 2004-11-28 13:16:24 0000 Stable on IA64. corsair@gentoo.org 2004-11-28 13:26:17 0000 stable on ppc64 sekretarz@gentoo.org 2004-11-28 13:52:39 0000 Stable on amd64 lu_zero@gentoo.org 2004-11-28 23:00:20 0000 stable on ppc kloeri@gentoo.org 2004-11-29 18:24:13 0000 Stable on alpha. gmsoft@gentoo.org 2004-11-30 04:30:03 0000 Stable on hppa. mkennedy@gentoo.org 2004-11-30 12:11:34 0000 Anyone testing this? This release (15.5-r2) doesn't seem to work. cscope-15.5-r1: mkennedy@camus:~/work/gyach$ cscope -vRl Building cross-reference... >> 1main cscope: 6 lines src/main.c main 2210 int main( int argc, char **argv ) { src/md5.c main 50 main() src/md5.c main 87 main() {arch}/++pristine-trees/unlocked/vendor/vendor--gyach/vendor--gyach--0.9.8/mkennedy@gentoo.org--2005-misc/vendor--gyach--0.9.8--patch-2/src/main.c main 2210 int main( int argc, char **argv ) { {arch}/++pristine-trees/unlocked/vendor/vendor--gyach/vendor--gyach--0.9.8/mkennedy@gentoo.org--2005-misc/vendor--gyach--0.9.8--patch-2/src/md5.c main 50 main(){arch}/++pristine-trees/unlocked/vendor/vendor--gyach/vendor--gyach--0.9.8/mkennedy@gentoo.org--2005-misc/vendor--gyach--0.9.8--patch-2/src/md5.c main 87 main()>> q mkennedy@camus:~/work/gyach$ And here is cscope-15.5-r2 (the security fix). The result is reproducable on 2 pretty different x86 machines: mkennedy@camus:~/work/gyach$ cscope -vRl Building cross-reference... >> 1main Cannot open file /tmp/cscopidcEVg cscope: 0 lines Segmentation fault mkennedy@camus:~/work/gyach$ Here's a backtrace I haven't had time time investigate further. mkennedy@camus:~/work/gyach$ gdb -q /usr/bin/cscope Using host libthread_db library "/lib/libthread_db.so.1". (gdb) set args "-vRl" (gdb) r Starting program: /usr/bin/cscope "-vRl" Building cross-reference... >> 1main Cannot open file /tmp/cscop85vG6n cscope: 0 lines Program received signal SIGSEGV, Segmentation fault. 0xb7ed38af in getc () from /lib/libc.so.6 (gdb) bt full #0 0xb7ed38af in getc () from /lib/libc.so.6 No symbol table info available. #1 0x0805c374 in main (argc=0, argv=0xbffff348) at main.c:608 buf = "1main\000\000\uffff", '\0' <repeats 12 times>, "\uffff\210\uffff\uffff\uffff\uffff\uffff\uffff\036,\000\000\000\000\000\001\000\000\000\000\000\220\uffff\uffff", '\0' <repeats 28 times>, "\001", '\0' <repeats 39 times>, "\006\000\000\000\uffff\210\uffff\uffff\uffff\uffff\017\000Q", '\0' <repeats 27 times>, ".\uffff\uffff\uffff\000\000\000\000L\016\000\uffff4\200\004\b\b\000\000\000\uffff\uffff\uffff\uffff\236\236\uffff\uffff4\200\004\b\000\001\000\000\uffff\uffff\uffff\uffff\000\000\000-\003\000\000\000n\uffff\uffff\uffff\000\uffff\uffff\uffff\b\000\000\0004\200\004\b@\235\004\bLinux", '\0' <repeats 26 times> names = (FILE *) 0xb7f9c9b8 oldnum = 0 path = '\0' <repeats 15 times>, "#\016p\uffff\uffff1\216\004\b\uffff\231\uffff\uffffL\016\000\uffff\000\000\000\000\000\000\000\000\024\uffff\uffff\uffff\uffff0\uffff\uffff\uffff\235\uffff\uffff\t\221\004\b\000\000\000\000\000\000\000\000 ", '\0' <repeats 11 times>, "\200\236\uffff\uffff<M\uffff\uffff\uffff\uffff\uffff\uffff\020\232\uffff\uffff\004\000\000\000\uffff\234\uffff\uffff\020\235\uffff\uffffL\016\000\uffff\uffff\221\uffff\uffffZ\220\004\b\uffff\uffff\uffff\uffff5&\uffff\uffffZ\220\004\b\216\uffffw\001\234\211\004\b|\uffff\uffff\uffffX\221\uffff\uffff\002\000\000\000\020\235\uffff\uffff\001\000\000\000\000\000\000\000\001\000\000\000X\221\uffff\uffff\000\000\000\000\000\000\000\000|\uffff\uffff\uffff", '\0' <repeats 20 times>, "\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff\uffff"... oldrefs = (FILE *) 0x0 s = 0xbffff015 "" c = 0 i = 0 pid = 0 stat_buf = {st_dev = 8450, __pad1 = 0, st_ino = 15, st_mode = 17407, st_nlink = 10, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 888, st_blksize = 131072, st_blocks = 1, st_atim = { tv_sec = 1101837263, tv_nsec = 210196346}, st_mtim = {tv_sec = 1101838934, tv_nsec = 49140416}, st_ctim = {tv_sec = 1101838934, tv_nsec = 49140416}, __unused4 = 0, __unused5 = 0} (gdb) gregkh@gentoo.org 2004-12-01 09:58:45 0000 Ick, I think this patch just caused a bug. If you do: $ cscope -q -b -i cscope.files -k I get the following error: Removed file /home/greg/tmp/cscopaTa89u because write failed: File exists and the building of the cscope database for the files I specified does not happen. gregkh@gentoo.org 2004-12-01 10:02:48 0000 Yes, if I go back to cscope-15.5-r1 the above "build a cscope database" command works just fine. ciaran.mccreesh@googlemail.com 2004-12-01 10:44:08 0000 Meh! Yeah, looks like this breaks some of the interfaces to cscope. koon@gentoo.org 2004-12-01 10:51:22 0000 Going back to ebuild status the time we find a cleaner patch. lewk@gentoo.org 2004-12-02 09:40:00 0000 We could go back to Florian's first patch (+ modifications from comment #10). What do you guys think? koon@gentoo.org 2004-12-03 08:28:08 0000 Created an attachment (id=45208) Corrected Florian's patch Here is Florian's patch, corrected with comment #10 koon@gentoo.org 2004-12-03 08:29:48 0000 I don't feel very comfortable applying modified Florian's patch without him being here to double-check it's clean... but I guess we don't have much choice ? lewk@gentoo.org 2004-12-03 09:05:42 0000 I don't think we should blindly apply this patch without making sure it is sufficient. Before we come to any conclusions, I think it would be best for florian to get involved in the bug (https://sourceforge.net/tracker/index.php?func=detail&aid=1062807&group_id=4664&atid=104664) to bring him up to speed a little bit and to see what the dev has to say. (Also, this is CAN-2004-0996) vorlon@gentoo.org 2004-12-05 11:56:58 0000 Debian has published a fixed version (15.5-1.1). Changelog: * NMU to fix temp file security hole. Closes: #282815 (CAN-2004-0996) * Incorporates a patch by Martin Pitt <martin.pitt@canonical.com>: * SECURITY UPDATE: insecure temp file creation vulnerability * src/main.c: - modified the temporary file creation procedure * References: - CAN-2004-0996 - http://lists.netsys.com/pipermail/full-disclosure/2004-November/029341.html * Thanks to Gerardo Di Giacomo <gerardo@linux.it> for his assistance with the patch Haven't seen it on the mirrors yet though, but should be available soon. lewk@gentoo.org 2004-12-05 13:39:43 0000 Sent an email upstream with both patches. Waiting for a response with his opinion. vorlon@gentoo.org 2004-12-05 13:58:17 0000 Created an attachment (id=45342) Debian patch from their cscope_15.5-1.1 vorlon@gentoo.org 2004-12-05 14:03:03 0000 Debian patch is identical to the Ubuntu patch, which seems to have been changed in the mean time (compared to attachment 44698). lewk@gentoo.org 2004-12-06 20:26:03 0000 Response from upstream: - - - The patch under link [2] (Debian/Ubuntu) is effectively a placebo, caused by serious lack of analysis. It grasps much too short, because the author didn't understand the way cscope (re)uses temp files. I've explained this several times, both in our bug tracker and in my reply mail to Rexolab's post. I fail to see how people managed to miss that. Patch [1] (Ours, woo!) (i.e. a private temp file directory) is essentially the same thing we'll eventually do (work done by Neil Horman at redhat). Of the suggestions I've seen, I'm quite sure that's the only one that can work without re-implementing the entire way cscope handles temp files. - - - Ciaran, please apply patch from comment #27... lewk@gentoo.org 2004-12-07 13:15:00 0000 Created an attachment (id=45463) cscope-tempfile.diff Fixed typo in Koon's updated patch. - if (ret == NULL)s + if (ret == NULL) lewk@gentoo.org 2004-12-09 13:01:56 0000 mkennedy, please apply latest patch. lewk@gentoo.org 2004-12-10 09:48:14 0000 mkennedy is MIA at the moment, so can anyone in the Vim or Emacs herd please apply this patch? This issue needs to get resolved soon. rphillips@gentoo.org 2004-12-10 17:06:51 0000 -r3 has been commited and has been unmasked for x86... I'm going to leave the bug open, so I can go back and delete the old packages and the cscope-15.5-can-2004-0996.patch which is no longer needed. Other architectures please unmask -r3, and security please issue a GLSA. dragonheart@gentoo.org 2004-12-10 19:44:01 0000 ppc keyworded corsair@gentoo.org 2004-12-10 23:53:50 0000 stable on ppc64 weeve@gentoo.org 2004-12-11 07:11:22 0000 Stable on sparc. vapier@gentoo.org 2004-12-11 15:31:35 0000 arm/hppa/ia64/s390 stable pageexec@freemail.hu 2004-12-12 04:32:20 0000 the rexotec patch 1. breaks cscope/vim (see bug #72160), 2. is not needed at all with the other fix that uses mkdtemp (unprivileged users can't create symlinks in the mode 0700 directory, which is the original source of the problem with /tmp). on a sidenote, snprintf() 0 terminates the buffer itself. kloeri@gentoo.org 2004-12-13 00:17:38 0000 Stable on alpha. koon@gentoo.org 2004-12-13 01:37:16 0000 Calling amd64 to test and mark 15.5-r3 stable, apparently they were forgotten... sejo@gentoo.org 2004-12-16 06:02:40 0000 done by dragonheart on ppc blubb@gentoo.org 2004-12-16 10:52:02 0000 amd64 done lewk@gentoo.org 2004-12-16 12:36:46 0000 GLSA 200412-11 mips, please mark stable to benefit from GLSA. olle@xmms.org 2004-12-18 02:54:17 0000 This is a bad patch for GCC2 users. You introduce char template[] = "cscope.XXXXXX"; and char *ret; in the wrong place. These should at the top och the main () funtion to compile using older gcc's than 3.x on x86 hardave@gentoo.org 2005-02-19 15:17:14 0000 Stable on mips 44199 2004-11-17 19:34 0000 cscope-tempfile.patch cscope-tempfile.patch text/plain ZGlmZiAtTmF1cnAgc3JjL2J1aWxkLmMgc3JjL2J1aWxkLmMKLS0tIHNyYy9idWlsZC5jCTIwMDMt MDMtMDUgMTE6NDM6NTkuMDAwMDAwMDAwICswMTAwCisrKyBzcmMvYnVpbGQuYwkyMDA0LTExLTE3 IDE1OjAxOjAxLjAwMDAwMDAwMCArMDEwMApAQCAtMzMzLDcgKzMzMyw3IEBAIGJ1aWxkKHZvaWQp CiAJCSh2b2lkKSBmcHJpbnRmKHN0ZGVyciwgImNzY29wZTogY2Fubm90IG9wZW4gZmlsZSAlc1xu IiwgcmVmZmlsZSk7CiAJCW15ZXhpdCgxKTsKIAl9Ci0JaWYgKGludmVydGVkaW5kZXggPT0gWUVT ICYmIChwb3N0aW5ncyA9IG15Zm9wZW4odGVtcDEsICJ3YiIpKSA9PSBOVUxMKSB7CisJaWYgKGlu dmVydGVkaW5kZXggPT0gWUVTICYmIChwb3N0aW5ncyA9IG15Zm9wZW4odGVtcDEsICJ3K3hiIikp ID09IE5VTEwpIHsKIAkJY2Fubm90d3JpdGUodGVtcDEpOwogCQljYW5ub3RpbmRleCgpOwogCX0K ZGlmZiAtTmF1cnAgc3JjX29sZC9kaXNwbGF5LmMgc3JjL2Rpc3BsYXkuYwotLS0gc3JjL2Rpc3Bs YXkuYwkyMDAzLTA5LTA0IDE3OjU0OjAyLjAwMDAwMDAwMCArMDIwMAorKysgc3JjL2Rpc3BsYXku YwkyMDA0LTExLTE3IDE1OjAxOjAxLjAwMDAwMDAwMCArMDEwMApAQCAtNzU0LDEzICs3NTQsMTMg QEAgQk9PTAogd3JpdGVyZWZzZm91bmQodm9pZCkKIHsKIAlpZiAocmVmc2ZvdW5kID09IE5VTEwp IHsKLQkJaWYgKChyZWZzZm91bmQgPSBteWZvcGVuKHRlbXAxLCAid2IiKSkgPT0gTlVMTCkgewor CQlpZiAoKHJlZnNmb3VuZCA9IG15Zm9wZW4odGVtcDEsICJ3K3hiIikpID09IE5VTEwpIHsKIAkJ CWNhbm5vdG9wZW4odGVtcDEpOwogCQkJcmV0dXJuKE5PKTsKIAkJfQogCX0gZWxzZSB7CiAJCSh2 b2lkKSBmY2xvc2UocmVmc2ZvdW5kKTsKLQkJaWYgKCAocmVmc2ZvdW5kID0gbXlmb3Blbih0ZW1w MSwgIndiIikpID09IE5VTEwpIHsKKwkJaWYgKCAocmVmc2ZvdW5kID0gbXlmb3Blbih0ZW1wMSwg IncreGIiKSkgPT0gTlVMTCkgewogCQkJcG9zdG1zZygiQ2Fubm90IHJlb3BlbiB0ZW1wb3Jhcnkg ZmlsZSIpOwogCQkJcmV0dXJuKE5PKTsKIAkJfQo= 44571 2004-11-23 07:40 0000 the first patch scope.patch text/plain ZGlmZiAtTmF1ciAuL2NzY29wZS0xNS41L3NyYy9nbG9iYWwuaCAuL2NzY29wZS0xNS41X25ldy9z cmMvZ2xvYmFsLmgKLS0tIC4vY3Njb3BlLTE1LjUvc3JjL2dsb2JhbC5oCTIwMDMtMDktMDQgMTc6 NTQ6MDMuMDAwMDAwMDAwICswMjAwCisrKyAuL2NzY29wZS0xNS41X25ldy9zcmMvZ2xvYmFsLmgJ MjAwNC0xMS0xOSAxMzoxOToxOC4wMDAwMDAwMDAgKzAxMDAKQEAgLTI0MSw3ICsyNDEsNyBAQAog ZXh0ZXJuCWxvbmcJdG90YWx0ZXJtczsJLyogdG90YWwgaW52ZXJ0ZWQgaW5kZXggdGVybXMgKi8K IGV4dGVybglCT09MCXRydW5fc3ltczsJLyogdHJ1bmNhdGUgc3ltYm9scyB0byA4IGNoYXJhY3Rl cnMgKi8KIGV4dGVybgljaGFyCXRlbXBzdHJpbmdbODE5Ml07IC8qIGdsb2JhbCBkdW1teSBzdHJp bmcgYnVmZmVyICovCi1leHRlcm4JY2hhcgkqdG1wZGlyOwkvKiB0ZW1wb3JhcnkgZGlyZWN0b3J5 ICovCitleHRlcm4JY2hhcgl0bXBkaXJbMjA0OF07CS8qIHRlbXBvcmFyeSBkaXJlY3RvcnkgKi8K IAogLyogY29tbWFuZC5jIGdsb2JhbCBkYXRhICovCiBleHRlcm4JQk9PTAljYXNlbGVzczsJLyog aWdub3JlIGxldHRlciBjYXNlIHdoZW4gc2VhcmNoaW5nICovCmRpZmYgLU5hdXIgLi9jc2NvcGUt MTUuNS9zcmMvbWFpbi5jIC4vY3Njb3BlLTE1LjVfbmV3L3NyYy9tYWluLmMKLS0tIC4vY3Njb3Bl LTE1LjUvc3JjL21haW4uYwkyMDAzLTA4LTE0IDE2OjM2OjE4LjAwMDAwMDAwMCArMDIwMAorKysg Li9jc2NvcGUtMTUuNV9uZXcvc3JjL21haW4uYwkyMDA0LTExLTE5IDEzOjMxOjI2LjAwMDAwMDAw MCArMDEwMApAQCAtMTA1LDcgKzEwNSw3IEBACiBCT09MCXRydW5fc3ltczsJCS8qIHRydW5jYXRl IHN5bWJvbHMgdG8gOCBjaGFyYWN0ZXJzICovCiBjaGFyCXRlbXBzdHJpbmdbODE5Ml07CS8qIHVz ZSB0aGlzIGFzIGEgYnVmZmVyLCBpbnN0ZWFkIG9mICd5eXRleHQnLCAKIAkJCQkgKiB3aGljaCBo YWQgYmV0dGVyIGJlIGxlZnQgYWxvbmUgKi8KLWNoYXIJKnRtcGRpcjsJCS8qIHRlbXBvcmFyeSBk aXJlY3RvcnkgKi8KK2NoYXIJdG1wZGlyWzIwNDhdOwkJLyogdGVtcG9yYXJ5IGRpcmVjdG9yeSAq LwogCiBzdGF0aWMJQk9PTAlvbmVzZWFyY2g7CQkvKiBvbmUgc2VhcmNoIG9ubHkgaW4gbGluZSBt b2RlICovCiBzdGF0aWMJY2hhcgkqcmVmbGluZXM7CQkvKiBzeW1ib2wgcmVmZXJlbmNlIGxpbmVz IGZpbGUgKi8KQEAgLTMxMiw4ICszMTIsMTggQEAKIAlzaGVsbCA9IG15Z2V0ZW52KCJTSEVMTCIs IFNIRUxMKTsKIAlsaW5lZmxhZyA9IG15Z2V0ZW52KCJDU0NPUEVfTElORUZMQUciLCBMSU5FRkxB Ryk7CiAJbGluZWZsYWdhZnRlcmZpbGUgPSBnZXRlbnYoIkNTQ09QRV9MSU5FRkxBR19BRlRFUl9G SUxFIik/MTowOwotCXRtcGRpciA9IG15Z2V0ZW52KCJUTVBESVIiLCBUTVBESVIpOwogCisJY2hh ciB0ZW1wbGF0ZVtdID0gImNzY29wZS5YWFhYWFgiOworCXNucHJpbnRmKHRtcGRpciwgc2l6ZW9m KHRtcGRpciksICIlcy8lcyIsIG15Z2V0ZW52KCJUTVBESVIiLCBUTVBESVIpLCB0ZW1wbGF0ZSk7 CisJdG1wZGlyW3NpemVvZih0bXBkaXIpXSA9ICdcMCc7CisJY2hhciAqcmV0OworCXJldCA9IG1r ZHRlbXAodG1wZGlyKTsKKwlpZiAocmV0ID09IE5VTEwpCisJeworCQlmcHJpbnRmIChzdGRlcnIs ICJjc2NvcGU6IFRlbXBvcmFyeSBkaXJlY3RvcnkgJXMgY2Fubm90IGJlIGNyZWF0ZWQuXG4iLCB0 bXBkaXIpOworCQlteWV4aXQoMSk7CisJfQorCQogCS8qIFhYWCByZW1vdmUgaWYvd2hlbiBjbGVh cmVycigpIGluIGRpci5jIGRvZXMgdGhlIHJpZ2h0IHRoaW5nLiAqLwogCWlmIChuYW1lZmlsZSAm JiBzdHJjbXAobmFtZWZpbGUsICItIikgPT0gMCAmJiAhYnVpbGRvbmx5KQogCXsKQEAgLTMzMSw4 ICszNDEsMTAgQEAKIAogCS8qIGNyZWF0ZSB0aGUgdGVtcG9yYXJ5IGZpbGUgbmFtZXMgKi8KIAlw aWQgPSBnZXRwaWQoKTsKLQkodm9pZCkgc3ByaW50Zih0ZW1wMSwgIiVzL2NzY29wZSVkLjEiLCB0 bXBkaXIsIHBpZCk7Ci0JKHZvaWQpIHNwcmludGYodGVtcDIsICIlcy9jc2NvcGUlZC4yIiwgdG1w ZGlyLCBwaWQpOworCSh2b2lkKSBzbnByaW50Zih0ZW1wMSwgc2l6ZW9mKHRlbXAxKSwgIiVzL2Nz Y29wZSVkLjEiLCB0bXBkaXIsIHBpZCk7CisJdGVtcDFbc2l6ZW9mKHRlbXAxKS0xXSA9ICdcMCc7 CisJKHZvaWQpIHNucHJpbnRmKHRlbXAyLCBzaXplb2YodGVtcDEpLCAiJXMvY3Njb3BlJWQuMiIs IHRtcGRpciwgcGlkKTsKKwl0ZW1wMltzaXplb2YodGVtcDIpLTFdID0gJ1wwJzsKIAogCS8qIGlm IHJ1bm5pbmcgaW4gdGhlIGZvcmVncm91bmQgKi8KIAlpZiAoc2lnbmFsKFNJR0lOVCwgU0lHX0lH TikgIT0gU0lHX0lHTikgewpAQCAtODI1LDYgKzgzNyw3IEBACiB2b2lkCiBteWV4aXQoaW50IHNp ZykKIHsKKwlpbnQgcmV0dmFsOwogCS8qIEhCQiAyMDAxMDMxMzsgY2xvc2UgZmlsZSBiZWZvcmUg dW5saW5raW5nIGl0LiBVbml4IG1heSBub3QgY2FyZQogCSAqIGFib3V0IHRoYXQsIGJ1dCBET1Mg YWJzb2x1dGVseSBuZWVkcyBpdCAqLwogCWlmIChyZWZzZm91bmQgIT0gTlVMTCkKQEAgLTgzNCw2 ICs4NDcsMTAgQEAKIAlpZiAodGVtcDFbMF0gIT0gJ1wwJykgewogCQkodm9pZCkgdW5saW5rKHRl bXAxKTsKIAkJKHZvaWQpIHVubGluayh0ZW1wMik7CisJCWlmIChyZXR2YWwgPSBybWRpcih0bXBk aXIpICE9IDApCisJCXsKKwkJCWZwcmludGYoc3RkZXJyLCAiZXJyb3IgZGVsZXRpbmcgJXNcbiIs IHRtcGRpcik7CisJCX0KIAl9CiAJLyogcmVzdG9yZSB0aGUgdGVybWluYWwgdG8gaXRzIG9yaWdp bmFsIG1vZGUgKi8KIAlpZiAoaW5jdXJzZXMgPT0gWUVTKSB7Cg== 44698 2004-11-25 01:49 0000 CAN-2004-0996.patch CAN-2004-0996.patch text/plain ZGlmZiAtdSBjc2NvcGUtMTUuMy9kZWJpYW4vY2hhbmdlbG9nIGNzY29wZS0xNS4zL2RlYmlhbi9j aGFuZ2Vsb2cKLS0tIGNzY29wZS0xNS4zL2RlYmlhbi9jaGFuZ2Vsb2cKKysrIGNzY29wZS0xNS4z L2RlYmlhbi9jaGFuZ2Vsb2cKQEAgLTEsMyArMSwxMSBAQAorY3Njb3BlICgxNS4zLTF3b29keTIp IHN0YWJsZS1zZWN1cml0eTsgdXJnZW5jeT1oaWdoCisKKyAgKiBOb24tbWFpbnRhaW5lciB1cGxv YWQgYnkgdGhlIFNlY3VyaXR5IFRlYW0KKyAgKiBBcHBsaWVkIGFkanVzdGVkIHBhdGNoIGJ5IEdl cmFyZG8gRGkgR2lhY29tbyB0byBmaXggaW5zZWN1cmUgdGVtcG9yYXJ5CisgICAgZmlsZSBjcmVh dGlvbiBbc3JjL21haW4uYywgQ0FOLTIwMDQtMDk5Nl0KKworIC0tIE1hcnRpbiBTY2h1bHplIDxq b2V5QGluZm9kcm9tLm9yZz4gIFdlZCwgMjQgTm92IDIwMDQgMjA6NDI6MTQgKzAxMDAKKwogY3Nj b3BlICgxNS4zLTEpIHVuc3RhYmxlOyB1cmdlbmN5PWxvdwogCiAgICogTmV3IHVwc3RyZWFtIHJl bGVhc2UuICAoVGhhbmtzIHRvIEdPVE8gTWFzYW5vcmkgZm9yIHRoZSBub3RpZmljYXRpb24pLgpv bmx5IGluIHBhdGNoMjoKdW5jaGFuZ2VkOgotLS0gY3Njb3BlLTE1LjMub3JpZy9zcmMvbWFpbi5j CisrKyBjc2NvcGUtMTUuMy9zcmMvbWFpbi5jCkBAIC0zMzYsOSArMzM2LDMyIEBACiAJfQogCiAJ LyogY3JlYXRlIHRoZSB0ZW1wb3JhcnkgZmlsZSBuYW1lcyAqLwotCXBpZCA9IGdldHBpZCgpOwot CSh2b2lkKSBzcHJpbnRmKHRlbXAxLCAiJXMvY3Njb3BlJWQuMSIsIHRtcGRpciwgcGlkKTsKLQko dm9pZCkgc3ByaW50Zih0ZW1wMiwgIiVzL2NzY29wZSVkLjIiLCB0bXBkaXIsIHBpZCk7CisJZG8g eworCQljaGFyICp0ZW1wZmlsZSA9IHRlbXBuYW0odG1wZGlyLCAiY3Njb3BlMSIpOworCQlpZiAo IXRlbXBmaWxlKSB7CisJCQlmcHJpbnRmIChzdGRlcnIsICJDYW4ndCBjcmVhdGUgdGVtcGZpbGVc biIpOworCQkJZXhpdCgxKTsKKwkJfQorCQlpZiAoc3RybGVuKHRlbXBmaWxlKSA+PSBzaXplb2Yo dGVtcDEpKSB7CisJCQlmcHJpbnRmIChzdGRlcnIsICJUTVBESVIgcGF0aCBpcyB0b28gbG9uZ1xu Iik7CisJCQlleGl0KDEpOworCQl9CisJCXN0cm5jcHkgKHRlbXAxLCB0ZW1wZmlsZSwgc2l6ZW9m ICh0ZW1wMSkpOworCQlmcmVlICh0ZW1wZmlsZSk7CisJfSB3aGlsZSAob3BlbiAodGVtcDEsIE9f Q1JFQVR8T19FWENMfE9fV1JPTkxZLCBTX0lSRUFEfFNfSVdSSVRFKSA8IDApOworCWRvIHsKKwkJ Y2hhciAqdGVtcGZpbGUgPSB0ZW1wbmFtKHRtcGRpciwgImNzY29wZTIiKTsKKwkJaWYgKCF0ZW1w ZmlsZSkgeworCQkJZnByaW50ZiAoc3RkZXJyLCAiQ2FuJ3QgY3JlYXRlIHRlbXBmaWxlXG4iKTsK KwkJCWV4aXQoMSk7CisJCX0KKwkJaWYgKHN0cmxlbih0ZW1wZmlsZSkgPj0gc2l6ZW9mKHRlbXAy KSkgeworCQkJZnByaW50ZiAoc3RkZXJyLCAiVE1QRElSIHBhdGggaXMgdG9vIGxvbmdcbiIpOwor CQkJZXhpdCgxKTsKKwkJfQorCQlzdHJuY3B5ICh0ZW1wMiwgdGVtcGZpbGUsIHNpemVvZiAodGVt cDIpKTsKKwkJZnJlZSAodGVtcGZpbGUpOworCX0gd2hpbGUgKG9wZW4gKHRlbXAyLCBPX0NSRUFU fE9fRVhDTHxPX1dST05MWSwgU19JUkVBRHxTX0lXUklURSkgPCAwKTsKIAogCS8qIGlmIHJ1bm5p bmcgaW4gdGhlIGZvcmVncm91bmQgKi8KIAlpZiAoc2lnbmFsKFNJR0lOVCwgU0lHX0lHTikgIT0g U0lHX0lHTikgewo= 45208 2004-12-03 08:28 0000 Corrected Florian's patch cscope.patch text/plain ZGlmZiAtTmF1ciAuL2NzY29wZS0xNS41L3NyYy9nbG9iYWwuaCAuL2NzY29wZS0xNS41X25ldy9z cmMvZ2xvYmFsLmgKLS0tIC4vY3Njb3BlLTE1LjUvc3JjL2dsb2JhbC5oCTIwMDMtMDktMDQgMTc6 NTQ6MDMuMDAwMDAwMDAwICswMjAwCisrKyAuL2NzY29wZS0xNS41X25ldy9zcmMvZ2xvYmFsLmgJ MjAwNC0xMS0xOSAxMzoxOToxOC4wMDAwMDAwMDAgKzAxMDAKQEAgLTI0MSw3ICsyNDEsNyBAQAog ZXh0ZXJuCWxvbmcJdG90YWx0ZXJtczsJLyogdG90YWwgaW52ZXJ0ZWQgaW5kZXggdGVybXMgKi8K IGV4dGVybglCT09MCXRydW5fc3ltczsJLyogdHJ1bmNhdGUgc3ltYm9scyB0byA4IGNoYXJhY3Rl cnMgKi8KIGV4dGVybgljaGFyCXRlbXBzdHJpbmdbODE5Ml07IC8qIGdsb2JhbCBkdW1teSBzdHJp bmcgYnVmZmVyICovCi1leHRlcm4JY2hhcgkqdG1wZGlyOwkvKiB0ZW1wb3JhcnkgZGlyZWN0b3J5 ICovCitleHRlcm4JY2hhcgl0bXBkaXJbMjA0OF07CS8qIHRlbXBvcmFyeSBkaXJlY3RvcnkgKi8K IAogLyogY29tbWFuZC5jIGdsb2JhbCBkYXRhICovCiBleHRlcm4JQk9PTAljYXNlbGVzczsJLyog aWdub3JlIGxldHRlciBjYXNlIHdoZW4gc2VhcmNoaW5nICovCmRpZmYgLU5hdXIgLi9jc2NvcGUt MTUuNS9zcmMvbWFpbi5jIC4vY3Njb3BlLTE1LjVfbmV3L3NyYy9tYWluLmMKLS0tIC4vY3Njb3Bl LTE1LjUvc3JjL21haW4uYwkyMDAzLTA4LTE0IDE2OjM2OjE4LjAwMDAwMDAwMCArMDIwMAorKysg Li9jc2NvcGUtMTUuNV9uZXcvc3JjL21haW4uYwkyMDA0LTExLTE5IDEzOjMxOjI2LjAwMDAwMDAw MCArMDEwMApAQCAtMTA1LDcgKzEwNSw3IEBACiBCT09MCXRydW5fc3ltczsJCS8qIHRydW5jYXRl IHN5bWJvbHMgdG8gOCBjaGFyYWN0ZXJzICovCiBjaGFyCXRlbXBzdHJpbmdbODE5Ml07CS8qIHVz ZSB0aGlzIGFzIGEgYnVmZmVyLCBpbnN0ZWFkIG9mICd5eXRleHQnLCAKIAkJCQkgKiB3aGljaCBo YWQgYmV0dGVyIGJlIGxlZnQgYWxvbmUgKi8KLWNoYXIJKnRtcGRpcjsJCS8qIHRlbXBvcmFyeSBk aXJlY3RvcnkgKi8KK2NoYXIJdG1wZGlyWzIwNDhdOwkJLyogdGVtcG9yYXJ5IGRpcmVjdG9yeSAq LwogCiBzdGF0aWMJQk9PTAlvbmVzZWFyY2g7CQkvKiBvbmUgc2VhcmNoIG9ubHkgaW4gbGluZSBt b2RlICovCiBzdGF0aWMJY2hhcgkqcmVmbGluZXM7CQkvKiBzeW1ib2wgcmVmZXJlbmNlIGxpbmVz IGZpbGUgKi8KQEAgLTMxMiw4ICszMTIsMTggQEAKIAlzaGVsbCA9IG15Z2V0ZW52KCJTSEVMTCIs IFNIRUxMKTsKIAlsaW5lZmxhZyA9IG15Z2V0ZW52KCJDU0NPUEVfTElORUZMQUciLCBMSU5FRkxB Ryk7CiAJbGluZWZsYWdhZnRlcmZpbGUgPSBnZXRlbnYoIkNTQ09QRV9MSU5FRkxBR19BRlRFUl9G SUxFIik/MTowOwotCXRtcGRpciA9IG15Z2V0ZW52KCJUTVBESVIiLCBUTVBESVIpOwogCisJY2hh ciB0ZW1wbGF0ZVtdID0gImNzY29wZS5YWFhYWFgiOworCXNucHJpbnRmKHRtcGRpciwgc2l6ZW9m KHRtcGRpciksICIlcy8lcyIsIG15Z2V0ZW52KCJUTVBESVIiLCBUTVBESVIpLCB0ZW1wbGF0ZSk7 CisJdG1wZGlyW3NpemVvZih0bXBkaXIpLTFdID0gJ1wwJzsKKwljaGFyICpyZXQ7CisJcmV0ID0g bWtkdGVtcCh0bXBkaXIpOworCWlmIChyZXQgPT0gTlVMTClzCisJeworCQlmcHJpbnRmIChzdGRl cnIsICJjc2NvcGU6IFRlbXBvcmFyeSBkaXJlY3RvcnkgJXMgY2Fubm90IGJlIGNyZWF0ZWQuXG4i LCB0bXBkaXIpOworCQlteWV4aXQoMSk7CisJfQorCQogCS8qIFhYWCByZW1vdmUgaWYvd2hlbiBj bGVhcmVycigpIGluIGRpci5jIGRvZXMgdGhlIHJpZ2h0IHRoaW5nLiAqLwogCWlmIChuYW1lZmls ZSAmJiBzdHJjbXAobmFtZWZpbGUsICItIikgPT0gMCAmJiAhYnVpbGRvbmx5KQogCXsKQEAgLTMz MSw4ICszNDEsMTAgQEAKIAogCS8qIGNyZWF0ZSB0aGUgdGVtcG9yYXJ5IGZpbGUgbmFtZXMgKi8K IAlwaWQgPSBnZXRwaWQoKTsKLQkodm9pZCkgc3ByaW50Zih0ZW1wMSwgIiVzL2NzY29wZSVkLjEi LCB0bXBkaXIsIHBpZCk7Ci0JKHZvaWQpIHNwcmludGYodGVtcDIsICIlcy9jc2NvcGUlZC4yIiwg dG1wZGlyLCBwaWQpOworCSh2b2lkKSBzbnByaW50Zih0ZW1wMSwgc2l6ZW9mKHRlbXAxKSwgIiVz L2NzY29wZSVkLjEiLCB0bXBkaXIsIHBpZCk7CisJdGVtcDFbc2l6ZW9mKHRlbXAxKS0xXSA9ICdc MCc7CisJKHZvaWQpIHNucHJpbnRmKHRlbXAyLCBzaXplb2YodGVtcDEpLCAiJXMvY3Njb3BlJWQu MiIsIHRtcGRpciwgcGlkKTsKKwl0ZW1wMltzaXplb2YodGVtcDIpLTFdID0gJ1wwJzsKIAogCS8q IGlmIHJ1bm5pbmcgaW4gdGhlIGZvcmVncm91bmQgKi8KIAlpZiAoc2lnbmFsKFNJR0lOVCwgU0lH X0lHTikgIT0gU0lHX0lHTikgewpAQCAtODI1LDYgKzgzNyw3IEBACiB2b2lkCiBteWV4aXQoaW50 IHNpZykKIHsKKwlpbnQgcmV0dmFsOwogCS8qIEhCQiAyMDAxMDMxMzsgY2xvc2UgZmlsZSBiZWZv cmUgdW5saW5raW5nIGl0LiBVbml4IG1heSBub3QgY2FyZQogCSAqIGFib3V0IHRoYXQsIGJ1dCBE T1MgYWJzb2x1dGVseSBuZWVkcyBpdCAqLwogCWlmIChyZWZzZm91bmQgIT0gTlVMTCkKQEAgLTgz NCw2ICs4NDcsMTAgQEAKIAlpZiAodGVtcDFbMF0gIT0gJ1wwJykgewogCQkodm9pZCkgdW5saW5r KHRlbXAxKTsKIAkJKHZvaWQpIHVubGluayh0ZW1wMik7CisJCWlmIChyZXR2YWwgPSBybWRpcih0 bXBkaXIpICE9IDApCisJCXsKKwkJCWZwcmludGYoc3RkZXJyLCAiZXJyb3IgZGVsZXRpbmcgJXNc biIsIHRtcGRpcik7CisJCX0KIAl9CiAJLyogcmVzdG9yZSB0aGUgdGVybWluYWwgdG8gaXRzIG9y aWdpbmFsIG1vZGUgKi8KIAlpZiAoaW5jdXJzZXMgPT0gWUVTKSB7Cg== 45342 2004-12-05 13:58 0000 Debian patch from their cscope_15.5-1.1 debian-CAN-2004-0996.patch text/plain LS0tIGNzY29wZS0xNS41Lm9yaWcvc3JjL21haW4uYworKysgY3Njb3BlLTE1LjUvc3JjL21haW4u YwpAQCAtMzMwLDkgKzMzMCwzMSBAQAogCX0KIAogCS8qIGNyZWF0ZSB0aGUgdGVtcG9yYXJ5IGZp bGUgbmFtZXMgKi8KLQlwaWQgPSBnZXRwaWQoKTsKLQkodm9pZCkgc3ByaW50Zih0ZW1wMSwgIiVz L2NzY29wZSVkLjEiLCB0bXBkaXIsIHBpZCk7Ci0JKHZvaWQpIHNwcmludGYodGVtcDIsICIlcy9j c2NvcGUlZC4yIiwgdG1wZGlyLCBwaWQpOworICAgICAgICBkbyB7CisgICAgICAgICAgICAgICAg Y2hhciAqdGVtcGZpbGUgPSB0ZW1wbmFtKHRtcGRpciwgImNzY29wZTEiKTsKKyAgICAgICAgICAg ICAgICBpZiAoIXRlbXBmaWxlKSB7CisgICAgICAgICAgICAgICAgICAgICAgICBmcHV0cyAoIkNh bid0IGNyZWF0ZSB0ZW1wZmlsZVxuIiwgc3RkZXJyKTsKKyAgICAgICAgICAgICAgICAgICAgICAg IGV4aXQgKDEpOworICAgICAgICAgICAgICAgIH0KKyAgICAgICAgICAgICAgICBpZiAoc3RybGVu KHRlbXBmaWxlKSA+PSBzaXplb2YodGVtcDEpKSB7CisgICAgICAgICAgICAgICAgICAgICAgICBm cHV0cyAoIlRNUERJUiBwYXRoIGlzIHRvbyBsb25nXG4iLCBzdGRlcnIpOworICAgICAgICAgICAg ICAgICAgICAgICAgZXhpdCgxKTsKKyAgICAgICAgICAgICAgICB9CisgICAgICAgICAgICAgICAg c3RybmNweSAodGVtcDEsIHRlbXBmaWxlLCBzaXplb2YgKHRlbXAxKSk7CisgICAgICAgIH0gd2hp bGUgKG9wZW4gKHRlbXAxLCBPX0NSRUFUfE9fRVhDTHxPX1dST05MWSwgMDYwMCkgPCAwKTsKKyAg ICAgICAgZG8geworICAgICAgICAgICAgICAgIGNoYXIgKnRlbXBmaWxlID0gdGVtcG5hbSh0bXBk aXIsICJjc2NvcGUyIik7CisgICAgICAgICAgICAgICAgaWYgKCF0ZW1wZmlsZSkgeworICAgICAg ICAgICAgICAgICAgICAgICAgZnB1dHMgKCJDYW4ndCBjcmVhdGUgdGVtcGZpbGVcbiIsIHN0ZGVy cik7CisgICAgICAgICAgICAgICAgICAgICAgICBleGl0ICgxKTsKKyAgICAgICAgICAgICAgICB9 CisgICAgICAgICAgICAgICAgaWYgKHN0cmxlbih0ZW1wZmlsZSkgPj0gc2l6ZW9mKHRlbXAyKSkg eworICAgICAgICAgICAgICAgICAgICAgICAgZnB1dHMgKCJUTVBESVIgcGF0aCBpcyB0b28gbG9u Z1xuIiwgc3RkZXJyKTsKKyAgICAgICAgICAgICAgICAgICAgICAgIGV4aXQoMSk7CisgICAgICAg ICAgICAgICAgfQorICAgICAgICAgICAgICAgIHN0cm5jcHkgKHRlbXAyLCB0ZW1wZmlsZSwgc2l6 ZW9mICh0ZW1wMikpOworICAgICAgICB9IHdoaWxlIChvcGVuICh0ZW1wMiwgT19DUkVBVHxPX0VY Q0x8T19XUk9OTFksIDA2MDApIDwgMCk7CisKIAogCS8qIGlmIHJ1bm5pbmcgaW4gdGhlIGZvcmVn cm91bmQgKi8KIAlpZiAoc2lnbmFsKFNJR0lOVCwgU0lHX0lHTikgIT0gU0lHX0lHTikgew== 45463 2004-12-07 13:15 0000 cscope-tempfile.diff cscope-tempfile.diff text/plain ZGlmZiAtTmF1ciAuL2NzY29wZS0xNS41L3NyYy9nbG9iYWwuaCAuL2NzY29wZS0xNS41X25ldy9z cmMvZ2xvYmFsLmgNCi0tLSAuL2NzY29wZS0xNS41L3NyYy9nbG9iYWwuaAkyMDAzLTA5LTA0IDE3 OjU0OjAzLjAwMDAwMDAwMCArMDIwMA0KKysrIC4vY3Njb3BlLTE1LjVfbmV3L3NyYy9nbG9iYWwu aAkyMDA0LTExLTE5IDEzOjE5OjE4LjAwMDAwMDAwMCArMDEwMA0KQEAgLTI0MSw3ICsyNDEsNyBA QA0KIGV4dGVybglsb25nCXRvdGFsdGVybXM7CS8qIHRvdGFsIGludmVydGVkIGluZGV4IHRlcm1z ICovDQogZXh0ZXJuCUJPT0wJdHJ1bl9zeW1zOwkvKiB0cnVuY2F0ZSBzeW1ib2xzIHRvIDggY2hh cmFjdGVycyAqLw0KIGV4dGVybgljaGFyCXRlbXBzdHJpbmdbODE5Ml07IC8qIGdsb2JhbCBkdW1t eSBzdHJpbmcgYnVmZmVyICovDQotZXh0ZXJuCWNoYXIJKnRtcGRpcjsJLyogdGVtcG9yYXJ5IGRp cmVjdG9yeSAqLw0KK2V4dGVybgljaGFyCXRtcGRpclsyMDQ4XTsJLyogdGVtcG9yYXJ5IGRpcmVj dG9yeSAqLw0KIA0KIC8qIGNvbW1hbmQuYyBnbG9iYWwgZGF0YSAqLw0KIGV4dGVybglCT09MCWNh c2VsZXNzOwkvKiBpZ25vcmUgbGV0dGVyIGNhc2Ugd2hlbiBzZWFyY2hpbmcgKi8NCmRpZmYgLU5h dXIgLi9jc2NvcGUtMTUuNS9zcmMvbWFpbi5jIC4vY3Njb3BlLTE1LjVfbmV3L3NyYy9tYWluLmMN Ci0tLSAuL2NzY29wZS0xNS41L3NyYy9tYWluLmMJMjAwMy0wOC0xNCAxNjozNjoxOC4wMDAwMDAw MDAgKzAyMDANCisrKyAuL2NzY29wZS0xNS41X25ldy9zcmMvbWFpbi5jCTIwMDQtMTEtMTkgMTM6 MzE6MjYuMDAwMDAwMDAwICswMTAwDQpAQCAtMTA1LDcgKzEwNSw3IEBADQogQk9PTAl0cnVuX3N5 bXM7CQkvKiB0cnVuY2F0ZSBzeW1ib2xzIHRvIDggY2hhcmFjdGVycyAqLw0KIGNoYXIJdGVtcHN0 cmluZ1s4MTkyXTsJLyogdXNlIHRoaXMgYXMgYSBidWZmZXIsIGluc3RlYWQgb2YgJ3l5dGV4dCcs IA0KIAkJCQkgKiB3aGljaCBoYWQgYmV0dGVyIGJlIGxlZnQgYWxvbmUgKi8NCi1jaGFyCSp0bXBk aXI7CQkvKiB0ZW1wb3JhcnkgZGlyZWN0b3J5ICovDQorY2hhcgl0bXBkaXJbMjA0OF07CQkvKiB0 ZW1wb3JhcnkgZGlyZWN0b3J5ICovDQogDQogc3RhdGljCUJPT0wJb25lc2VhcmNoOwkJLyogb25l IHNlYXJjaCBvbmx5IGluIGxpbmUgbW9kZSAqLw0KIHN0YXRpYwljaGFyCSpyZWZsaW5lczsJCS8q IHN5bWJvbCByZWZlcmVuY2UgbGluZXMgZmlsZSAqLw0KQEAgLTMxMiw4ICszMTIsMTggQEANCiAJ c2hlbGwgPSBteWdldGVudigiU0hFTEwiLCBTSEVMTCk7DQogCWxpbmVmbGFnID0gbXlnZXRlbnYo IkNTQ09QRV9MSU5FRkxBRyIsIExJTkVGTEFHKTsNCiAJbGluZWZsYWdhZnRlcmZpbGUgPSBnZXRl bnYoIkNTQ09QRV9MSU5FRkxBR19BRlRFUl9GSUxFIik/MTowOw0KLQl0bXBkaXIgPSBteWdldGVu digiVE1QRElSIiwgVE1QRElSKTsNCiANCisJY2hhciB0ZW1wbGF0ZVtdID0gImNzY29wZS5YWFhY WFgiOw0KKwlzbnByaW50Zih0bXBkaXIsIHNpemVvZih0bXBkaXIpLCAiJXMvJXMiLCBteWdldGVu digiVE1QRElSIiwgVE1QRElSKSwgdGVtcGxhdGUpOw0KKwl0bXBkaXJbc2l6ZW9mKHRtcGRpcikt MV0gPSAnXDAnOw0KKwljaGFyICpyZXQ7DQorCXJldCA9IG1rZHRlbXAodG1wZGlyKTsNCisJaWYg KHJldCA9PSBOVUxMKQ0KKwl7DQorCQlmcHJpbnRmIChzdGRlcnIsICJjc2NvcGU6IFRlbXBvcmFy eSBkaXJlY3RvcnkgJXMgY2Fubm90IGJlIGNyZWF0ZWQuXG4iLCB0bXBkaXIpOw0KKwkJbXlleGl0 KDEpOw0KKwl9DQorCQ0KIAkvKiBYWFggcmVtb3ZlIGlmL3doZW4gY2xlYXJlcnIoKSBpbiBkaXIu YyBkb2VzIHRoZSByaWdodCB0aGluZy4gKi8NCiAJaWYgKG5hbWVmaWxlICYmIHN0cmNtcChuYW1l ZmlsZSwgIi0iKSA9PSAwICYmICFidWlsZG9ubHkpDQogCXsNCkBAIC0zMzEsOCArMzQxLDEwIEBA DQogDQogCS8qIGNyZWF0ZSB0aGUgdGVtcG9yYXJ5IGZpbGUgbmFtZXMgKi8NCiAJcGlkID0gZ2V0 cGlkKCk7DQotCSh2b2lkKSBzcHJpbnRmKHRlbXAxLCAiJXMvY3Njb3BlJWQuMSIsIHRtcGRpciwg cGlkKTsNCi0JKHZvaWQpIHNwcmludGYodGVtcDIsICIlcy9jc2NvcGUlZC4yIiwgdG1wZGlyLCBw aWQpOw0KKwkodm9pZCkgc25wcmludGYodGVtcDEsIHNpemVvZih0ZW1wMSksICIlcy9jc2NvcGUl ZC4xIiwgdG1wZGlyLCBwaWQpOw0KKwl0ZW1wMVtzaXplb2YodGVtcDEpLTFdID0gJ1wwJzsNCisJ KHZvaWQpIHNucHJpbnRmKHRlbXAyLCBzaXplb2YodGVtcDEpLCAiJXMvY3Njb3BlJWQuMiIsIHRt cGRpciwgcGlkKTsNCisJdGVtcDJbc2l6ZW9mKHRlbXAyKS0xXSA9ICdcMCc7DQogDQogCS8qIGlm IHJ1bm5pbmcgaW4gdGhlIGZvcmVncm91bmQgKi8NCiAJaWYgKHNpZ25hbChTSUdJTlQsIFNJR19J R04pICE9IFNJR19JR04pIHsNCkBAIC04MjUsNiArODM3LDcgQEANCiB2b2lkDQogbXlleGl0KGlu dCBzaWcpDQogew0KKwlpbnQgcmV0dmFsOw0KIAkvKiBIQkIgMjAwMTAzMTM7IGNsb3NlIGZpbGUg YmVmb3JlIHVubGlua2luZyBpdC4gVW5peCBtYXkgbm90IGNhcmUNCiAJICogYWJvdXQgdGhhdCwg YnV0IERPUyBhYnNvbHV0ZWx5IG5lZWRzIGl0ICovDQogCWlmIChyZWZzZm91bmQgIT0gTlVMTCkN CkBAIC04MzQsNiArODQ3LDEwIEBADQogCWlmICh0ZW1wMVswXSAhPSAnXDAnKSB7DQogCQkodm9p ZCkgdW5saW5rKHRlbXAxKTsNCiAJCSh2b2lkKSB1bmxpbmsodGVtcDIpOw0KKwkJaWYgKHJldHZh bCA9IHJtZGlyKHRtcGRpcikgIT0gMCkNCisJCXsNCisJCQlmcHJpbnRmKHN0ZGVyciwgImVycm9y IGRlbGV0aW5nICVzXG4iLCB0bXBkaXIpOw0KKwkJfQ0KIAl9DQogCS8qIHJlc3RvcmUgdGhlIHRl cm1pbmFsIHRvIGl0cyBvcmlnaW5hbCBtb2RlICovDQogCWlmIChpbmN1cnNlcyA9PSBZRVMpIHsN Cg0K