79686 2005-01-27 02:10 0000 app-editors/[x]emacs: movemail arbitrary code execution (CAN-2005-0100) 2006-03-23 19:33:47 0000 1 Unclassified Gentoo Security Vulnerabilities unspecified All All RESOLVED FIXED B2 [glsa] P2 normal --- 1 jaervosz@gentoo.org security@gentoo.org emacs@gentoo.org ppc-macos@gentoo.org soulse@gmail.com xemacs@gentoo.org jaervosz@gentoo.org 2005-01-27 02:10:56 0000 Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs, the well-known editor. Via connecting to a malicious POP server an attacker can execute arbitrary code under the privileges of group mail (or worse, depending on the permissions of the movemail binary). jaervosz@gentoo.org 2005-01-27 02:12:46 0000 Created an attachment (id=49636) emacs21-movemail-popfmt.diff jaervosz@gentoo.org 2005-01-27 02:13:17 0000 Created an attachment (id=49637) xemacs21-movemail-popfmt.diff koon@gentoo.org 2005-01-27 06:26:19 0000 What are the permissions of our movemail(s) ? usata: this is confidential, please prepare patched emacs ebuilds that you can attach to this bug for arch testing. Nothing in CVS yet. koon@gentoo.org 2005-01-31 01:35:41 0000 usata: Coordinated release date set to Febraury 6, please prepare patched ebuilds and attach them to the bug. usata@gentoo.org 2005-01-31 23:40:04 0000 Our movemails permissions are -rwxr-xr-x 1 root root 18824 Aug 2 2004 movemail (emacs) -rwxr-xr-x 1 root root 60304 Sep 2 08:58 movemail (xemacs) I'll prepare patched ebuilds. koon@gentoo.org 2005-02-04 06:03:46 0000 usata: if you have ebuilds, you can attach them to the bug so that we can call some arch people to test them. usata@gentoo.org 2005-02-04 07:13:25 0000 Created an attachment (id=50337) emacs-21.3-r6.ebuild Patched version of Emacs ebuild. usata@gentoo.org 2005-02-04 07:15:14 0000 rac: could you make a patched ebuild for XEmacs? (I'm not a member of XEmacs herd) koon@gentoo.org 2005-02-07 05:01:24 0000 Now public. Emacs/xemacs teams, please commit ebuilds to CVS. koon@gentoo.org 2005-02-07 05:03:01 0000 *** Bug 81098 has been marked as a duplicate of this bug. *** usata@gentoo.org 2005-02-08 02:53:18 0000 I've just committed emacs-21.4.ebuild (upstream released 21.4) to CVS. The only difference between 21.3 and 21.4 is the movemail patch. Arch maintainers: please test and keyword it stable. koon@gentoo.org 2005-02-08 04:26:13 0000 ppc-macos: please test and keyword emacs-21.4 ~ppc-macos if you can. Other arches, please test and mark emacs-21.4 stable. xemacs herd, please commit an updated xemacs ebuild. usata@gentoo.org 2005-02-08 05:24:57 0000 Emacs 21.4 won't compile on ppc-macos (21.4 is only 21.3 + movemail patch). I'll create updated another cvs snapshot ebuild for ppc-macos. gustavoz@gentoo.org 2005-02-08 06:17:41 0000 sparc stable. tester@gentoo.org 2005-02-08 09:03:51 0000 emacs stable on x86.. corsair@gentoo.org 2005-02-08 11:53:42 0000 emacs is stable on ppc64. hparker@gentoo.org 2005-02-08 17:48:47 0000 Compiles and runs for me emerge --info Portage 2.0.51-r15 (default-linux/amd64/2005.0, gcc-3.4.3, glibc-2.3.4.20041102-r0, 2.6.10-gentoo-r6 x86_64) ================================================================= System uname: 2.6.10-gentoo-r6 x86_64 AMD Athlon(tm) 64 Processor 3200+ Gentoo Base System version 1.6.9 Python: dev-lang/python-2.3.4 [2.3.4 (#1, Jan 30 2005, 21:39:15)] dev-lang/python: 2.3.4 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.5, 1.6.3, 1.7.9-r1, 1.4_p6, 1.9.4, 1.8.5-r3 sys-devel/binutils: 2.15.90.0.1.1-r3, 2.15.92.0.2-r2 sys-devel/libtool: 1.5.10-r4 virtual/os-headers: 2.6.8.1-r4 ACCEPT_KEYWORDS="amd64 ~amd64" AUTOCLEAN="yes" CFLAGS="-march=k8 -fomit-frame-pointer -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=k8 -fomit-frame-pointer -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs autoconfig ccache distlocks fixpackages sandbox" GENTOO_MIRRORS="ftp://gentoo.netnitco.net/pub/mirrors/gentoo/source/ ftp://mirrors.tds.net/gentoo ftp://gentoo.ccccom.com" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="amd64 X acpi alsa bash-completion berkdb bitmap-fonts bonobo bzip2 bzlib cdr crypt css cups dga directfb divx4linux dvd dvdread encode esd ethereal exif f77 fam fbcon flac foomaticdb fortran gdbm geoip gif gimpprint gmp gnome gnomedb gphoto2 gps gstreamer gtk gtk2 gtkhtml howl icq ieee1394 imagemagick imap imlib jabber jp2 jpeg lzw lzw-tiff memlimit mozilla moznocompose moznoirc moznomail mpeg mpi msession msn ncurses nls no-old-linux nodrm nptl nptlonly offensive oggvorbis opengl oscar oss pam pcmcia pcntl pcre pdflib perl pic png pnp posix ppds pthreads python quicktime readline samba sasl sdl session slp speex spell ssl sysvipc szip tcltk tcpd tidy tiff truetype truetype-fonts type1-fonts usb userlocales vim-with-x wxwindows xml2 xmms xpm xrandr xv xvid xvmc yahoo zlib" Unset: ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS cryos@gentoo.org 2005-02-09 03:03:47 0000 emacs-21.4 stable on amd64. hansmi@gentoo.org 2005-02-09 03:31:23 0000 Stable on ppc. kloeri@gentoo.org 2005-02-09 15:47:17 0000 emacs-21.4 stable on alpha. koon@gentoo.org 2005-02-11 07:22:47 0000 Sent en email to rac, would be a pity to mask xemacs because it's late :) mkennedy@gentoo.org 2005-02-15 06:44:22 0000 I created xemacs-21.4.15-r3 which includes the fix and committed it to CVS. Since its stable on all archs I didn't apply it to all previous ebuilds. Should we package.mask as follows? <=app-editors/xemacs-21.4.15-r2 koon@gentoo.org 2005-02-15 07:51:53 0000 No need to package.mask, but you can remove old versions if you want. Committed stable on all arches by maintainer, so ready for a GLSA. koon@gentoo.org 2005-02-15 13:48:40 0000 GLSA 200502-20 49636 2005-01-27 02:12 0000 emacs21-movemail-popfmt.diff emacs21-movemail-popfmt.diff text/plain LS0tIGVtYWNzMjEtMjEuMysxL2xpYi1zcmMvbW92ZW1haWwuYy5vcmlnCTIwMDUtMDEtMTYgMDk6 MDg6NTIuMDAwMDAwMDAwICswMTAwCisrKyBlbWFjczIxLTIxLjMrMS9saWItc3JjL21vdmVtYWls LmMJMjAwNS0wMS0xNiAwOToxMTo0MC4wMDAwMDAwMDAgKzAxMDAKQEAgLTc4Nyw3ICs3ODcsNyBA QAogICAgICAgbWJ4X2RlbGltaXRfYmVnaW4gKG1iZik7CiAgICAgICBpZiAocG9wX3JldHIgKHNl cnZlciwgaSwgbWJmKSAhPSBPSykKIAl7Ci0JICBlcnJvciAoRXJybXNnLCAwLCAwKTsKKwkgIGVy cm9yICgiJXMiLCBFcnJtc2csIDApOwogCSAgY2xvc2UgKG1iZmkpOwogCSAgcmV0dXJuICgxKTsK IAl9Cg== 49637 2005-01-27 02:13 0000 xemacs21-movemail-popfmt.diff xemacs21-movemail-popfmt.diff text/plain LS0tIHhlbWFjczIxLTIxLjQuMTYvbGliLXNyYy9tb3ZlbWFpbC5jLm9yaWcJMjAwNS0wMS0xNiAw OTowNTowNS4wMDAwMDAwMDAgKzAxMDAKKysrIHhlbWFjczIxLTIxLjQuMTYvbGliLXNyYy9tb3Zl bWFpbC5jCTIwMDUtMDEtMTYgMDk6MDc6MDQuMDAwMDAwMDAwICswMTAwCkBAIC03NDEsMTQgKzc0 MSwxNCBAQAogICBzZXJ2ZXIgPSBwb3Bfb3BlbiAoMCwgdXNlciwgcGFzc3dvcmQsIFBPUF9OT19H RVRQQVNTKTsKICAgaWYgKCEgc2VydmVyKQogICAgIHsKLSAgICAgIGVycm9yIChwb3BfZXJyb3Is IE5VTEwsIE5VTEwpOworICAgICAgZXJyb3IgKCIlcyIsIHBvcF9lcnJvciwgTlVMTCk7CiAgICAg ICByZXR1cm4gKDEpOwogICAgIH0KIAogICBWRVJCT1NFKCgic3RhdCdpbmcgbWVzc2FnZXNcbiIp KTsKICAgaWYgKHBvcF9zdGF0IChzZXJ2ZXIsICZubXNncywgJm5ieXRlcykpCiAgICAgewotICAg ICAgZXJyb3IgKHBvcF9lcnJvciwgTlVMTCwgTlVMTCk7CisgICAgICBlcnJvciAoIiVzIiwgcG9w X2Vycm9yLCBOVUxMKTsKICAgICAgIHJldHVybiAoMSk7CiAgICAgfQogCkBAIC03OTYsNyArNzk2 LDcgQEAKICAgICAgICAgICBtYnhfZGVsaW1pdF9iZWdpbiAobWJmKTsKIAkgIGlmIChwb3BfcmV0 ciAoc2VydmVyLCBpLCBtYnhfd3JpdGUsIG1iZikgIT0gUE9QX1JFVFJJRVZFRCkKIAkgICAgewot CSAgICAgIGVycm9yIChFcnJtc2csIE5VTEwsIE5VTEwpOworCSAgICAgIGVycm9yICgiJXMiLCBF cnJtc2csIE5VTEwpOwogCSAgICAgIGNsb3NlIChtYmZpKTsKIAkgICAgICByZXR1cm4gKDEpOwog CSAgICB9CkBAIC04NDQsNyArODQ0LDcgQEAKIAkgICAgICBWRVJCT1NFKCgiZGVsZXRpbmcgbWVz c2FnZSAlZCAgICAgXG4iLCBpKSk7CiAJICAgICAgaWYgKHBvcF9kZWxldGUgKHNlcnZlciwgaSkp CiAJCXsKLQkJICBlcnJvciAocG9wX2Vycm9yLCBOVUxMLCBOVUxMKTsKKwkJICBlcnJvciAoIiVz IiwgcG9wX2Vycm9yLCBOVUxMKTsKIAkJICBwb3BfY2xvc2UgKHNlcnZlcik7CiAJCSAgcmV0dXJu ICgxKTsKIAkJfQpAQCAtODU1LDcgKzg1NSw3IEBACiAgIFZFUkJPU0UoKCJjbG9zaW5nIHNlcnZl ciAgICAgICAgICAgICBcbiIpKTsKICAgaWYgKHBvcF9xdWl0IChzZXJ2ZXIpKQogICAgIHsKLSAg ICAgIGVycm9yIChwb3BfZXJyb3IsIE5VTEwsIE5VTEwpOworICAgICAgZXJyb3IgKCIlcyIsIHBv cF9lcnJvciwgTlVMTCk7CiAgICAgICByZXR1cm4gKDEpOwogICAgIH0KICAgICAK 50337 2005-02-04 07:13 0000 emacs-21.3-r6.ebuild emacs-21.3-r6.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA1IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6IC92YXIvY3Zzcm9vdC9nZW50b28teDg2L2FwcC1lZGl0b3JzL2VtYWNzL2VtYWNzLTIxLjMt cjUuZWJ1aWxkLHYgMS40IDIwMDUvMDEvMDEgMTM6MjQ6MjMgZXJhZGljYXRvciBFeHAgJAoKaW5o ZXJpdCBmbGFnLW8tbWF0aWMgZXV0aWxzIGFsdGVybmF0aXZlcyB0b29sY2hhaW4tZnVuY3MKCkRF U0NSSVBUSU9OPSJBbiBpbmNyZWRpYmx5IHBvd2VyZnVsLCBleHRlbnNpYmxlIHRleHQgZWRpdG9y IgpIT01FUEFHRT0iaHR0cDovL3d3dy5nbnUub3JnL3NvZnR3YXJlL2VtYWNzIgpTUkNfVVJJPSJt aXJyb3I6Ly9nbnUvZW1hY3MvJHtQfS50YXIuZ3oKCWxlaW0/ICggbWlycm9yOi8vZ251L2VtYWNz L2xlaW0tJHtQVn0udGFyLmd6ICkiCgpMSUNFTlNFPSJHUEwtMiIKU0xPVD0iMjEiCktFWVdPUkRT PSJ+eDg2IH5wcGMgfnNwYXJjIH5hbHBoYSB+YXJtIGhwcGEgfmFtZDY0IC1pYTY0IH5zMzkwIH5w cGM2NCIKSVVTRT0iWCBYYXczZCBnbm9tZSBsZWltIGxlc3N0aWYgbW90aWYgbmxzIG5vc2VuZG1h aWwiCgpSREVQRU5EPSJzeXMtbGlicy9uY3Vyc2VzCglzeXMtbGlicy9nZGJtCglYPyAoIHZpcnR1 YWwveDExCgkJPj1tZWRpYS1saWJzL2xpYnVuZ2lmLTQuMS4wLjFiCgkJPj1tZWRpYS1saWJzL2pw ZWctNmItcjIKCQk+PW1lZGlhLWxpYnMvdGlmZi0zLjUuNS1yMwoJCT49bWVkaWEtbGlicy9saWJw bmctMS4yLjEKCQkhYXJtPyAoCgkJWGF3M2Q/ICggeDExLWxpYnMvWGF3M2QgKQoJCW1vdGlmPyAo CgkJCWxlc3N0aWY/ICggeDExLWxpYnMvbGVzc3RpZiApCgkJCSFsZXNzdGlmPyAoID49eDExLWxp YnMvb3Blbm1vdGlmLTIuMS4zMCApICkKCQlnbm9tZT8gKCBnbm9tZS1iYXNlL2dub21lLWRlc2t0 b3AgKQoJCSkKCSkKCW5scz8gKCBzeXMtZGV2ZWwvZ2V0dGV4dCApCgkhbm9zZW5kbWFpbD8gKCB2 aXJ0dWFsL210YSApIgpERVBFTkQ9IiR7UkRFUEVORH0KCT49c3lzLWRldmVsL2F1dG9jb25mLTIu NTgiCgpQUk9WSURFPSJ2aXJ0dWFsL2VtYWNzIHZpcnR1YWwvZWRpdG9yIgpTQU5EQk9YX0RJU0FC TEVEPSIxIgoKREZJTEU9ZW1hY3MtJHtTTE9UfS5kZXNrdG9wCgpzcmNfdW5wYWNrKCkgewoJdW5w YWNrICR7QX0KCgljZCAke1N9CgllcGF0Y2ggJHtGSUxFU0RJUn0vJHtQfS14b3JnLnBhdGNoCgll cGF0Y2ggJHtGSUxFU0RJUn0vJHtQfS1hbWQ2NC5wYXRjaAoJZXBhdGNoICR7RklMRVNESVJ9LyR7 UH0taHBwYS5wYXRjaAoJdXNlIHBwYzY0ICYmIGVwYXRjaCAke0ZJTEVTRElSfS8ke1B9LXBwYzY0 LnBhdGNoCgoJZXBhdGNoICR7RklMRVNESVJ9L2VtYWNzMjEtbW92ZW1haWwtcG9wZm10LmRpZmYK CWVwYXRjaCAke0ZJTEVTRElSfS9lbWFjcy1zdWJkaXJzLWVsLWdlbnRvby5kaWZmCgoJIyBUaGlz IHdpbGwgbmVlZCB0byBiZSB1cGRhdGVkIGZvciBYLUNvbXBpbGF0aW9uCglzZWQgLWkgLWUgInM6 L3Vzci9saWIvXChbXiBdKlwpLm86L3Vzci8kKGdldF9saWJkaXIpL1wxLm86ZyIgXAoJICAgICAg ICR7U30vc3JjL3MvZ251LWxpbnV4LmgKfQoKc3JjX2NvbXBpbGUoKSB7CgoJIyAtZnN0YWNrLXBy b3RlY3RvciBnZXRzIGludGVybmFsIGNvbXBpbGVyIGVycm9yIGF0IHh0ZXJtLmMgKGJ1ZyAzMzI2 NSkKCWZpbHRlci1mbGFncyAtZnN0YWNrLXByb3RlY3RvcgoKCSMgZ2NjIDMuNCB3aXRoIC1PMyBv ciBzdHJvbmdlciBmbGFnIHNwb2lscyBlbWFjcwoJaWYgWyAiJChnY2MtbWFqb3ItdmVyc2lvbiki IC1nZSAzIC1hICIkKGdjYy1taW5vci12ZXJzaW9uKSIgLWdlIDQgXSA7IHRoZW4KCQlyZXBsYWNl LWZsYWdzIC1PWzMtOV0gLU8yCglmaQoKCWV4cG9ydCBXQU5UX0FVVE9DT05GPTIuMQoJYXV0b2Nv bmYKCglsb2NhbCBteWNvbmYKCXVzZSBubHMgfHwgbXljb25mPSIke215Y29uZn0gLS1kaXNhYmxl LW5scyIKCWlmIHVzZSBYIDsgdGhlbgoJCWlmIHVzZSBtb3RpZiAmJiB1c2UgbGVzc3RpZjsgdGhl bgoJCQlhcHBlbmQtbGRmbGFncyAtTC91c3IvWDExUjYvbGliL2xlc3N0aWYgLVIvdXNyL1gxMVI2 L2xpYi9sZXNzdGlmCgkJCWV4cG9ydCBDUFBGTEFHUz0iJHtDUFBGTEFHU30gLUkvdXNyL1gxMVI2 L2luY2x1ZGUvbGVzc3RpZiIKCQlmaQoJCW15Y29uZj0iJHtteWNvbmZ9CgkJCS0td2l0aC14CgkJ CS0td2l0aC14cG0KCQkJLS13aXRoLWpwZWcKCQkJLS13aXRoLXRpZmYKCQkJLS13aXRoLWdpZgoJ CQktLXdpdGgtcG5nIgoJCWlmIHVzZSBYYXczZCA7IHRoZW4KCQkJbXljb25mPSIke215Y29uZn0g LS13aXRoLXgtdG9vbGtpdD1hdGhlbmEiCgkJZWxpZiB1c2UgbW90aWYgOyB0aGVuCgkJCW15Y29u Zj0iJHtteWNvbmZ9IC0td2l0aC14LXRvb2xraXQ9bW90aWYiCgkJZWxzZQoJCQkjIGRvIG5vdCBi dWlsZCBlbWFjcyB3aXRoIGFueSB0b29sa2l0LCBidWcgMzUzMDAKCQkJbXljb25mPSIke215Y29u Zn0gLS13aXRoLXgtdG9vbGtpdD1ubyIKCQlmaQoJZWxzZQoJCW15Y29uZj0iJHtteWNvbmZ9IC0t d2l0aG91dC14IgoJZmkKCWVjb25mICR7bXljb25mfSB8fCBkaWUKCWVtYWtlIHx8IGRpZQp9Cgpz cmNfaW5zdGFsbCgpIHsKCWVpbnN0YWxsIHx8IGRpZQoJZm9yIGkgaW4gJHtEfS91c3IvYmluLyog OyBkbwoJCW12ICR7aX0gJHtpfS5lbWFjcy0ke1NMT1R9IHx8IGRpZSAibXYgJHtpfSBmYWlsZWQi Cglkb25lCgltdiAke0R9L3Vzci9iaW4vZW1hY3N7LSR7UFZ9LH0uZW1hY3MtJHtTTE9UfSB8fCBk aWUgIm12IGVtYWNzIGZhaWxlZCIKCgllaW5mbyAiRml4aW5nIGluZm8gZG9jdW1lbnRhdGlvbi4u LiIKCW1rZGlyICR7VH0vZW1hY3MtJHtTTE9UfQoJbXYgJHtEfS91c3Ivc2hhcmUvaW5mby9kaXIg JHtUfQoJZm9yIGkgaW4gJHtEfS91c3Ivc2hhcmUvaW5mby8qCglkbwoJCW12ICR7aX0gJHtUfS9l bWFjcy0ke1NMT1R9LyR7aSMjKi99LmluZm8KCQlnemlwIC05ICR7VH0vZW1hY3MtJHtTTE9UfS8k e2kjIyovfS5pbmZvCglkb25lCgltdiAke1R9L2VtYWNzLSR7U0xPVH0gJHtEfS91c3Ivc2hhcmUv aW5mbwoJbXYgJHtUfS9kaXIgJHtEfS91c3Ivc2hhcmUvaW5mby9lbWFjcy0ke1NMT1R9CgoJbmV3 ZW52ZCAke0ZJTEVTRElSfS82MGVtYWNzLSR7U0xPVH0uZW52ZCA2MGVtYWNzLSR7U0xPVH0KCgll aW5mbyAiRml4aW5nIG1hbnBhZ2VzLi4uIgoJZm9yIG0gaW4gJHtEfS91c3Ivc2hhcmUvbWFuL21h bjEvKiA7IGRvCgkJbXYgJHttfSAke20vLjEvLmVtYWNzLSR7U0xPVH0uMX0gfHwgZGllICJtdiAk e219IGZhaWxlZCIKCWRvbmUKCgllaW5mbyAiRml4aW5nIHBlcm1pc3Npb25zLi4uIgoJZmluZCAk e0R9IC1wZXJtIDY2NCB8eGFyZ3MgY2htb2QgNjQ0CglmaW5kICR7RH0gLXR5cGUgZCB8eGFyZ3Mg Y2htb2QgNzU1CgoJa2VlcGRpciAvdXNyL3NoYXJlL2VtYWNzLyR7UFZ9L2xlaW0KCglkb2RvYyBC VUdTIENoYW5nZUxvZyBSRUFETUUKCglpZiB1c2UgZ25vbWUgOyB0aGVuCgkJaW5zaW50byAvdXNy L3NoYXJlL2dub21lL2FwcHMvQXBwbGljYXRpb24KCQlkb2lucyAke0ZJTEVTRElSfS8ke0RGSUxF fQoJZmkKfQoKdXBkYXRlLWFsdGVybmF0aXZlcygpIHsKCWZvciBpIGluIGVtYWNzIGVtYWNzY2xp ZW50IGV0YWdzIGN0YWdzIGIybSBlYnJvd3NlIFwKCQlyY3MtY2hlY2tpbiBncmVwLWNoYW5nZWxv ZyA7IGRvCgkJYWx0ZXJuYXRpdmVzX2F1dG9fbWFrZXN5bSAiL3Vzci9iaW4vJGkiICIvdXNyL2Jp bi8ke2l9LmVtYWNzLSoiCglkb25lCn0KCnBrZ19wb3N0aW5zdCgpIHsKCXVwZGF0ZS1hbHRlcm5h dGl2ZXMKCWlmIHVzZSBub3NlbmRtYWlsIDsgdGhlbgoJZXdhcm4KCWV3YXJuICJZb3UgZGlzYWJs ZWQgc2VuZG1haWwgc3VwcG9ydCBmb3IgRW1hY3MuIElmIHlvdSB3aWxsIGluc3RhbGwgYW55IE1U QSIKCWV3YXJuICJ5b3UgbmVlZCB0byByZWNvbXBpbGUgRW1hY3MgYWZ0ZXIgdGhhdC4gU2VlIGJ1 ZyAjMTExMDQuIgoJZXdhcm4KCWZpCn0KCnBrZ19wb3N0cm0oKSB7Cgl1cGRhdGUtYWx0ZXJuYXRp dmVzCn0K