87913 2005-04-04 07:44 0000 Kernel: "is_hugepage_only_range()" Denial of Service (CAN-2005-0916) 2009-05-03 15:10:34 0000 1 1 1 Unclassified Gentoo Security Kernel unspecified All All RESOLVED FIXED http://secunia.com/advisories/14718/ [linux < 2.6.12] P2 normal --- 1 formula7@gentoo.org security@gentoo.org kang@gentoo.org kerframil@gmail.com kern-sec@gentoo.org kernel@gentoo.org formula7@gentoo.org 2005-04-04 07:44:55 0000 Description: Daniel McNeil has reported a vulnerability in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the AIO (Asynchronous I/O) support within the "is_hugepage_only_range()" function. This can be exploited via a specially crafted program calling the "io_queue_init()" function and then exiting without calling the "io_queue_release()" function. Successful exploitation crashes the system on PPC64 and IA64 architectures, but requires that CONFIG_HUGETLB_PAGE is enabled. The vulnerability has been reported in versions 2.6.8 and 2.6.11. Other versions may also be affected. Solution: Grant only trusted users access to affected systems. kerframil@gmail.com 2005-04-11 12:10:40 0000 Daniel McNiel also came up with a patch which I shall attach here (lifted verbatim from Debian's patchset). Reference: http://linux.bkbits.net:8080/linux-2.6/cset@4248c8c0es30_4YVdwa6vteKi7h_nw kerframil@gmail.com 2005-04-11 12:12:06 0000 Created an attachment (id=56012) patch to rectify CAN-2005-0916 This instance was taken from debian-2.6.11-2. Also available from: http://linux.bkbits.net:8080/linux-2.6/cset@4248c8c0es30_4YVdwa6vteKi7h_nw kumba@gentoo.org 2005-04-23 22:29:43 0000 mips-sources fixed. solar@gentoo.org 2005-05-02 07:47:02 0000 Kumba does this effect the mips arch? The advisory only mentions ia64 and ppc64 plasmaroo@gentoo.org 2005-05-05 13:36:16 0000 Kernel maintainers: This affects 2.6.11 so gentoo-sources et al. still need patching. dsd@gentoo.org 2005-05-10 15:51:04 0000 Fixed in gentoo-sources-2.6.11-r8 corsair@gentoo.org 2005-05-11 09:35:46 0000 stable on ppc64 agriffis@gentoo.org 2005-05-11 19:36:26 0000 stable on ia64 kumba@gentoo.org 2005-05-17 21:06:54 0000 solar: Because the patch touches files in mm/ and include/linux/, I felt it prudent to add it into our patchset anyways. While the chances of it affecting us are incredibly slim, if none at all, it shouldn't hurt things to include it on the offchance. plasmaroo@gentoo.org 2005-11-26 03:06:53 0000 All fixed, closing bug. 56012 2005-04-11 12:12 0000 patch to rectify CAN-2005-0916 arch-ppc64-hugepage-aio-panic.patch text/plain IyBvcmlnaW46IGRhbmllbCAoQml0S2VlcGVyKQojIGNzZXQ6IDEuMjE4MS4zOS40ICgyLjYpIGtl eT00MjQ4YzhjMGVzMzBfNFlWZHdhNnZ0ZUtpN2hfbncKIyBVUkw6IGh0dHA6Ly9saW51eC5ia2Jp dHMubmV0OjgwODAvbGludXgtMi42L2NzZXRANDI0OGM4YzBlczMwXzRZVmR3YTZ2dGVLaTdoX253 CiMgaW5jbHVzaW9uOiB1cHN0cmVhbQojIGRlc2NyaXRpb246IFtQQVRDSF0gcHBjNjQ6IGZpeCBB SU8gcGFuaWMgb24gUFBDNjQgY2F1c2VkIGJ5IGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoKQojIHJl dmlzaW9uIGRhdGU6IEZyaSwgMDEgQXByIDIwMDUgMTc6NTk6NTggKzA5MDAKIwojIFMgcnNldDog Q2hhbmdlU2V0fDEuMjE4MS4zOS4zLi4xLjIxODEuMzkuNAojIEkgcnNldDogaW5jbHVkZS9hc20t cHBjNjQvcGFnZS5ofDEuNDIuLjEuNDMKIyBJIHJzZXQ6IGluY2x1ZGUvYXNtLWlhNjQvcGFnZS5o fDEuMzMuLjEuMzQKIyBJIHJzZXQ6IGluY2x1ZGUvbGludXgvaHVnZXRsYi5ofDEuMzMuLjEuMzQK IyBJIHJzZXQ6IGFyY2gvcHBjNjQvbW0vaHVnZXRsYnBhZ2UuY3wxLjQxLi4xLjQyCiMgSSByc2V0 OiBtbS9tbWFwLmN8MS4xNjguLjEuMTY5CiMKIyBLZXk6CiMgUzogU2tpcHBlZCAgQ2hhbmdlU2V0 IGZpbGUgb25seQojIE86IE9yaWdpbmFsIEZvbGxvd2VkIGJ5IFVwZGF0ZWQKIyBVOiBVcGRhdGVk ICBJbmNsdWRlZCB3aXRoIHVwZGF0ZWQgcmFuZ2Ugb2YgdmVyc2lvbnMKIyBJOiBJbmNsdWRlZCBJ bmNsdWRlZCB2ZXJiYXRpbQojIEU6IEV4Y2x1ZGVkIEV4Y2x1ZGVkIG9uIHJlcXVlc3QgZnJvbSB1 c2VyCiMgRDogRGVsZXRlZCAgTWFudWFsbHkgZGVsZXRlZCBieSBzdWJzZXF1ZW50IHVzZXIgZWRp dAojIFI6IFJldmlzZWQgIE1hbnVhbGx5IHJldmlzZWQgYnkgc3Vic2VxdWVudCB1c2VyIGVkaXQK IwojCiMgVGhpcyBpcyBhIEJpdEtlZXBlciBnZW5lcmF0ZWQgZGlmZiAtTnJ1IHN0eWxlIHBhdGNo LgojCiMgQ2hhbmdlU2V0CiMgICAyMDA1LzAzLzI4IDE5OjE3OjIwLTA4OjAwIGRhbmllbEBvc2Rs Lm9yZyAKIyAgIFtQQVRDSF0gcHBjNjQ6IGZpeCBBSU8gcGFuaWMgb24gUFBDNjQgY2F1c2VkIGJ5 IGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoKQojICAgCiMgICBXaGVuIHRlc3RpbmcgQUlPIG9uIFBQ QzY0IChhIHBvd2VyNSBtYWNoaW5lKSBydW5uaW5nIDIuNi4xMSB3aXRoCiMgICBDT05GSUdfSFVH RVRMQl9QQUdFPXksIEkgcmFuIGludG8gYSBrZXJuZWwgcGFuaWMgd2hlbiBhIHByb2Nlc3MgZXhp dHMgdGhhdCBoYXMKIyAgIGRvbmUgQUlPIChpb19xdWV1ZV9pbml0KCkpIGJ1dCBoYXMgbm90IGRv bmUgdGhlIGlvX3F1ZXVlX3JlbGVhc2UoKS4gIFRoZQojICAgZXhpdF9haW8oKSBjb2RlIGlzIGNs ZWFuaW5nIHVwIGFuZCBwYW5pY2tpbmcgd2hlbiB0cnlpbmcgdG8gZnJlZSB0aGUgYWlvIHJpbmcK IyAgIGJ1ZmZlci4KIyAgIAojICAgSSB0cmFja2VkIHRoaXMgZG93biB0byBpc19odWdlcGFnZV9v bmx5X3JhbmdlKCkgKGluY2x1ZGUvYXNtLXBwYzY0L3BhZ2UuaCkKIyAgIHdoaWNoIGlzIGRvaW5n IGEgdG91Y2hlc19odWdlcGFnZV9sb3dfcmFuZ2UoKSB3aGljaCBpcyBjaGVja2luZwojICAgY3Vy cmVudC0+bW0tPmNvbnRleHQuaHRsYl9zZWdzLiAgVGhlIHByb2JsZW0gaXMgdGhhdCBleGl0X21t KCkgY2xlYXJlZCB0c2stPm1tCiMgICBiZWZvcmUgZG9pbmcgdGhlIG1tcHV0KCkgd2hpY2ggbGVh ZHMgdG8gdGhlIGV4aXRfYWlvKCkgYW5kIHRoZW4gdGhlIHBhbmljLiAKIyAgIExvb2tzIGxpa2Ug aXNfaHVnZXBhZ2Vfb25seV9yYW5nZSgpIGlzIG9ubHkgdXNlZCBpbiBpYTY0IGFuZCBwcGM2NC4g IEZpeCBpcyB0bwojICAgY2hhbmdlIGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoKSB0byB0YWtlIGFu ICdtbScgYXMgYSBwYXJhbWV0ZXIgYXMgd2VsbCBhcwojICAgJ2FkZHInIGFuZCAnbGVuJyBhbmQg dGhlbiB0aGUgcHBjNjQgY29kZSBjb3VsZCBjaGFuZ2UgdG8gdXNlICdtbScuICBJdCBsb29rcwoj ICAgbGlrZSBpdCBoYXMgYmVlbiBicm9rZW4gZm9yIHF1aXRlIGEgd2hpbGUuCiMgICAKIyAgIFNp Z25lZC1vZmYtYnk6IERhbmllbCBNY05laWwgPGRhbmllbEBvc2RsLm9yZz4KIyAgIEFja2VkLWJ5 OiBEYXZpZCBHaWJzb24gPGR3Z0BhdTEuaWJtLmNvbT4KIyAgIEFja2VkLWJ5OiAiTHVjaywgVG9u eSIgPHRvbnkubHVja0BpbnRlbC5jb20+CiMgICBTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgTW9ydG9u IDxha3BtQG9zZGwub3JnPgojICAgU2lnbmVkLW9mZi1ieTogTGludXMgVG9ydmFsZHMgPHRvcnZh bGRzQG9zZGwub3JnPgojIAojIG1tL21tYXAuYwojICAgMjAwNS8wMy8yOCAxNDo0MzoxNS0wODow MCBkYW5pZWxAb3NkbC5vcmcgKzIgLTIKIyAgIHBwYzY0OiBmaXggQUlPIHBhbmljIG9uIFBQQzY0 IGNhdXNlZCBieSBpc19odWdlcGFnZV9vbmx5X3JhbmdlKCkKIyAKIyBpbmNsdWRlL2xpbnV4L2h1 Z2V0bGIuaAojICAgMjAwNS8wMy8yOCAxNDoyMToxNi0wODowMCBkYW5pZWxAb3NkbC5vcmcgKzIg LTIKIyAgIHBwYzY0OiBmaXggQUlPIHBhbmljIG9uIFBQQzY0IGNhdXNlZCBieSBpc19odWdlcGFn ZV9vbmx5X3JhbmdlKCkKIyAKIyBpbmNsdWRlL2FzbS1wcGM2NC9wYWdlLmgKIyAgIDIwMDUvMDMv MjggMTQ6MjE6MTYtMDg6MDAgZGFuaWVsQG9zZGwub3JnICs0IC00CiMgICBwcGM2NDogZml4IEFJ TyBwYW5pYyBvbiBQUEM2NCBjYXVzZWQgYnkgaXNfaHVnZXBhZ2Vfb25seV9yYW5nZSgpCiMgCiMg aW5jbHVkZS9hc20taWE2NC9wYWdlLmgKIyAgIDIwMDUvMDMvMjggMTQ6MjE6MTYtMDg6MDAgZGFu aWVsQG9zZGwub3JnICsxIC0xCiMgICBwcGM2NDogZml4IEFJTyBwYW5pYyBvbiBQUEM2NCBjYXVz ZWQgYnkgaXNfaHVnZXBhZ2Vfb25seV9yYW5nZSgpCiMgCiMgYXJjaC9wcGM2NC9tbS9odWdldGxi cGFnZS5jCiMgICAyMDA1LzAzLzI4IDE0OjQzOjE0LTA4OjAwIGRhbmllbEBvc2RsLm9yZyArNCAt NAojICAgcHBjNjQ6IGZpeCBBSU8gcGFuaWMgb24gUFBDNjQgY2F1c2VkIGJ5IGlzX2h1Z2VwYWdl X29ubHlfcmFuZ2UoKQojIAojCj09PT09IGluY2x1ZGUvYXNtLXBwYzY0L3BhZ2UuaCAxLjQyIHZz IDEuNDMgPT09PT0KLS0tIDEuNDIvaW5jbHVkZS9hc20tcHBjNjQvcGFnZS5oCTIwMDUtMDMtMTcg MTc6MzE6MDkgKzA5OjAwCisrKyAxLjQzL2luY2x1ZGUvYXNtLXBwYzY0L3BhZ2UuaAkyMDA1LTAz LTI5IDA3OjIxOjE2ICswOTowMApAQCAtNDgsOCArNDgsOCBAQAogI2RlZmluZSBBUkNIX0hBU19I VUdFUEFHRV9PTkxZX1JBTkdFCiAjZGVmaW5lIEFSQ0hfSEFTX1BSRVBBUkVfSFVHRVBBR0VfUkFO R0UKIAotI2RlZmluZSB0b3VjaGVzX2h1Z2VwYWdlX2xvd19yYW5nZShhZGRyLCBsZW4pIFwKLQko TE9XX0VTSURfTUFTSygoYWRkciksIChsZW4pKSAmIGN1cnJlbnQtPm1tLT5jb250ZXh0Lmh0bGJf c2VncykKKyNkZWZpbmUgdG91Y2hlc19odWdlcGFnZV9sb3dfcmFuZ2UobW0sIGFkZHIsIGxlbikg XAorCShMT1dfRVNJRF9NQVNLKChhZGRyKSwgKGxlbikpICYgbW0tPmNvbnRleHQuaHRsYl9zZWdz KQogI2RlZmluZSB0b3VjaGVzX2h1Z2VwYWdlX2hpZ2hfcmFuZ2UoYWRkciwgbGVuKSBcCiAJKCgo YWRkcikgPiAoVEFTS19IUEFHRV9CQVNFLShsZW4pKSkgJiYgKChhZGRyKSA8IFRBU0tfSFBBR0Vf RU5EKSkKIApAQCAtNjEsOSArNjEsOSBAQAogI2RlZmluZSB3aXRoaW5faHVnZXBhZ2VfaGlnaF9y YW5nZShhZGRyLCBsZW4pICgoKGFkZHIpID49IFRBU0tfSFBBR0VfQkFTRSkgXAogCSAgJiYgKChh ZGRyKSsobGVuKSA8PSBUQVNLX0hQQUdFX0VORCkgJiYgKChhZGRyKSsobGVuKSA+PSAoYWRkcikp KQogCi0jZGVmaW5lIGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoYWRkciwgbGVuKSBcCisjZGVmaW5l IGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UobW0sIGFkZHIsIGxlbikgXAogCSh0b3VjaGVzX2h1Z2Vw YWdlX2hpZ2hfcmFuZ2UoKGFkZHIpLCAobGVuKSkgfHwgXAotCSAgdG91Y2hlc19odWdlcGFnZV9s b3dfcmFuZ2UoKGFkZHIpLCAobGVuKSkpCisJICB0b3VjaGVzX2h1Z2VwYWdlX2xvd19yYW5nZSgo bW0pLCAoYWRkciksIChsZW4pKSkKICNkZWZpbmUgSEFWRV9BUkNIX0hVR0VUTEJfVU5NQVBQRURf QVJFQQogCiAjZGVmaW5lIGluX2h1Z2VwYWdlX2FyZWEoY29udGV4dCwgYWRkcikgXAo9PT09PSBp bmNsdWRlL2FzbS1pYTY0L3BhZ2UuaCAxLjMzIHZzIDEuMzQgPT09PT0KLS0tIDEuMzMvaW5jbHVk ZS9hc20taWE2NC9wYWdlLmgJMjAwNS0wMi0wOSAxODo1MzozNyArMDk6MDAKKysrIDEuMzQvaW5j bHVkZS9hc20taWE2NC9wYWdlLmgJMjAwNS0wMy0yOSAwNzoyMToxNiArMDk6MDAKQEAgLTEzNyw3 ICsxMzcsNyBAQCB0eXBlZGVmIHVuaW9uIGlhNjRfdmEgewogIyBkZWZpbmUgaHRsYnBhZ2VfdG9f cGFnZSh4KQkoKCh1bnNpZ25lZCBsb25nKSBSRUdJT05fTlVNQkVSKHgpIDw8IDYxKQkJCVwKIAkJ CQkgfCAoUkVHSU9OX09GRlNFVCh4KSA+PiAoSFBBR0VfU0hJRlQtUEFHRV9TSElGVCkpKQogIyBk ZWZpbmUgSFVHRVRMQl9QQUdFX09SREVSCShIUEFHRV9TSElGVCAtIFBBR0VfU0hJRlQpCi0jIGRl ZmluZSBpc19odWdlcGFnZV9vbmx5X3JhbmdlKGFkZHIsIGxlbikJCVwKKyMgZGVmaW5lIGlzX2h1 Z2VwYWdlX29ubHlfcmFuZ2UobW0sIGFkZHIsIGxlbikJCVwKIAkgKFJFR0lPTl9OVU1CRVIoYWRk cikgPT0gUkVHSU9OX0hQQUdFICYmCVwKIAkgIFJFR0lPTl9OVU1CRVIoKGFkZHIpKyhsZW4pKSA9 PSBSRUdJT05fSFBBR0UpCiBleHRlcm4gdW5zaWduZWQgaW50IGhwYWdlX3NoaWZ0Owo9PT09PSBp bmNsdWRlL2xpbnV4L2h1Z2V0bGIuaCAxLjMzIHZzIDEuMzQgPT09PT0KLS0tIDEuMzMvaW5jbHVk ZS9saW51eC9odWdldGxiLmgJMjAwNC0wOC0wOCAxNTo0Mzo0MCArMDk6MDAKKysrIDEuMzQvaW5j bHVkZS9saW51eC9odWdldGxiLmgJMjAwNS0wMy0yOSAwNzoyMToxNiArMDk6MDAKQEAgLTM2LDcg KzM2LDcgQEAgZXh0ZXJuIGNvbnN0IHVuc2lnbmVkIGxvbmcgaHVnZXRsYl96ZXJvLAogZXh0ZXJu IGludCBzeXNjdGxfaHVnZXRsYl9zaG1fZ3JvdXA7CiAKICNpZm5kZWYgQVJDSF9IQVNfSFVHRVBB R0VfT05MWV9SQU5HRQotI2RlZmluZSBpc19odWdlcGFnZV9vbmx5X3JhbmdlKGFkZHIsIGxlbikJ MAorI2RlZmluZSBpc19odWdlcGFnZV9vbmx5X3JhbmdlKG1tLCBhZGRyLCBsZW4pCTAKICNkZWZp bmUgaHVnZXRsYl9mcmVlX3BndGFibGVzKHRsYiwgcHJldiwgc3RhcnQsIGVuZCkgZG8geyB9IHdo aWxlICgwKQogI2VuZGlmCiAKQEAgLTcxLDcgKzcxLDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25l ZCBsb25nIGh1Z2V0bGJfdG90YQogI2RlZmluZSBpc19hbGlnbmVkX2h1Z2VwYWdlX3JhbmdlKGFk ZHIsIGxlbikJMAogI2RlZmluZSBwcmVwYXJlX2h1Z2VwYWdlX3JhbmdlKGFkZHIsIGxlbikJKC1F SU5WQUwpCiAjZGVmaW5lIHBtZF9odWdlKHgpCTAKLSNkZWZpbmUgaXNfaHVnZXBhZ2Vfb25seV9y YW5nZShhZGRyLCBsZW4pCTAKKyNkZWZpbmUgaXNfaHVnZXBhZ2Vfb25seV9yYW5nZShtbSwgYWRk ciwgbGVuKQkwCiAjZGVmaW5lIGh1Z2V0bGJfZnJlZV9wZ3RhYmxlcyh0bGIsIHByZXYsIHN0YXJ0 LCBlbmQpIGRvIHsgfSB3aGlsZSAoMCkKICNkZWZpbmUgYWxsb2NfaHVnZV9wYWdlKCkJCQkoeyBO VUxMOyB9KQogI2RlZmluZSBmcmVlX2h1Z2VfcGFnZShwKQkJCSh7ICh2b2lkKShwKTsgQlVHKCk7 IH0pCj09PT09IGFyY2gvcHBjNjQvbW0vaHVnZXRsYnBhZ2UuYyAxLjQxIHZzIDEuNDIgPT09PT0K LS0tIDEuNDEvYXJjaC9wcGM2NC9tbS9odWdldGxicGFnZS5jCTIwMDUtMDMtMTUgMTU6Mjc6MzMg KzA5OjAwCisrKyAxLjQyL2FyY2gvcHBjNjQvbW0vaHVnZXRsYnBhZ2UuYwkyMDA1LTAzLTI5IDA3 OjQzOjE0ICswOTowMApAQCAtNTEzLDcgKzUxMyw3IEBAIHVuc2lnbmVkIGxvbmcgYXJjaF9nZXRf dW5tYXBwZWRfYXJlYShzdHIKIAkJdm1hID0gZmluZF92bWEobW0sIGFkZHIpOwogCQlpZiAoKChU QVNLX1NJWkUgLSBsZW4pID49IGFkZHIpCiAJCSAgICAmJiAoIXZtYSB8fCAoYWRkcitsZW4pIDw9 IHZtYS0+dm1fc3RhcnQpCi0JCSAgICAmJiAhaXNfaHVnZXBhZ2Vfb25seV9yYW5nZShhZGRyLGxl bikpCisJCSAgICAmJiAhaXNfaHVnZXBhZ2Vfb25seV9yYW5nZShtbSwgYWRkcixsZW4pKQogCQkJ cmV0dXJuIGFkZHI7CiAJfQogCXN0YXJ0X2FkZHIgPSBhZGRyID0gbW0tPmZyZWVfYXJlYV9jYWNo ZTsKQEAgLTUyMyw3ICs1MjMsNyBAQCBmdWxsX3NlYXJjaDoKIAl3aGlsZSAoVEFTS19TSVpFIC0g bGVuID49IGFkZHIpIHsKIAkJQlVHX09OKHZtYSAmJiAoYWRkciA+PSB2bWEtPnZtX2VuZCkpOwog Ci0JCWlmICh0b3VjaGVzX2h1Z2VwYWdlX2xvd19yYW5nZShhZGRyLCBsZW4pKSB7CisJCWlmICh0 b3VjaGVzX2h1Z2VwYWdlX2xvd19yYW5nZShtbSwgYWRkciwgbGVuKSkgewogCQkJYWRkciA9IEFM SUdOKGFkZHIrMSwgMTw8U0lEX1NISUZUKTsKIAkJCXZtYSA9IGZpbmRfdm1hKG1tLCBhZGRyKTsK IAkJCWNvbnRpbnVlOwpAQCAtNTg0LDcgKzU4NCw3IEBAIGFyY2hfZ2V0X3VubWFwcGVkX2FyZWFf dG9wZG93bihzdHJ1Y3QgZmkKIAkJdm1hID0gZmluZF92bWEobW0sIGFkZHIpOwogCQlpZiAoVEFT S19TSVpFIC0gbGVuID49IGFkZHIgJiYKIAkJCQkoIXZtYSB8fCBhZGRyICsgbGVuIDw9IHZtYS0+ dm1fc3RhcnQpCi0JCQkJJiYgIWlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoYWRkcixsZW4pKQorCQkJ CSYmICFpc19odWdlcGFnZV9vbmx5X3JhbmdlKG1tLCBhZGRyLGxlbikpCiAJCQlyZXR1cm4gYWRk cjsKIAl9CiAKQEAgLTU5Nyw3ICs1OTcsNyBAQCB0cnlfYWdhaW46CiAJYWRkciA9IChtbS0+ZnJl ZV9hcmVhX2NhY2hlIC0gbGVuKSAmIFBBR0VfTUFTSzsKIAlkbyB7CiBodWdlcGFnZV9yZWNoZWNr OgotCQlpZiAodG91Y2hlc19odWdlcGFnZV9sb3dfcmFuZ2UoYWRkciwgbGVuKSkgeworCQlpZiAo dG91Y2hlc19odWdlcGFnZV9sb3dfcmFuZ2UobW0sIGFkZHIsIGxlbikpIHsKIAkJCWFkZHIgPSAo YWRkciAmICgofjApIDw8IFNJRF9TSElGVCkpIC0gbGVuOwogCQkJZ290byBodWdlcGFnZV9yZWNo ZWNrOwogCQl9IGVsc2UgaWYgKHRvdWNoZXNfaHVnZXBhZ2VfaGlnaF9yYW5nZShhZGRyLCBsZW4p KSB7Cj09PT09IG1tL21tYXAuYyAxLjE2OCB2cyAxLjE2OSA9PT09PQotLS0gMS4xNjgvbW0vbW1h cC5jCTIwMDUtMDMtMTAgMTc6Mzg6MjIgKzA5OjAwCisrKyAxLjE2OS9tbS9tbWFwLmMJMjAwNS0w My0yOSAwNzo0MzoxNSArMDk6MDAKQEAgLTEzMTYsNyArMTMxNiw3IEBAIGdldF91bm1hcHBlZF9h cmVhKHN0cnVjdCBmaWxlICpmaWxlLCB1bnMKIAkJCSAqIHJlc2VydmVkIGh1Z2VwYWdlIHJhbmdl LiAgRm9yIHNvbWUgYXJjaHMgbGlrZSBJQS02NCwKIAkJCSAqIHRoZXJlIGlzIGEgc2VwYXJhdGUg cmVnaW9uIGZvciBodWdlcGFnZXMuCiAJCQkgKi8KLQkJCXJldCA9IGlzX2h1Z2VwYWdlX29ubHlf cmFuZ2UoYWRkciwgbGVuKTsKKwkJCXJldCA9IGlzX2h1Z2VwYWdlX29ubHlfcmFuZ2UoY3VycmVu dC0+bW0sIGFkZHIsIGxlbik7CiAJCX0KIAkJaWYgKHJldCkKIAkJCXJldHVybiAtRUlOVkFMOwpA QCAtMTY4Nyw3ICsxNjg3LDcgQEAgc3RhdGljIHZvaWQgdW5tYXBfcmVnaW9uKHN0cnVjdCBtbV9z dHJ1YwogCXVubWFwX3ZtYXMoJnRsYiwgbW0sIHZtYSwgc3RhcnQsIGVuZCwgJm5yX2FjY291bnRl ZCwgTlVMTCk7CiAJdm1fdW5hY2N0X21lbW9yeShucl9hY2NvdW50ZWQpOwogCi0JaWYgKGlzX2h1 Z2VwYWdlX29ubHlfcmFuZ2Uoc3RhcnQsIGVuZCAtIHN0YXJ0KSkKKwlpZiAoaXNfaHVnZXBhZ2Vf b25seV9yYW5nZShtbSwgc3RhcnQsIGVuZCAtIHN0YXJ0KSkKIAkJaHVnZXRsYl9mcmVlX3BndGFi bGVzKHRsYiwgcHJldiwgc3RhcnQsIGVuZCk7CiAJZWxzZQogCQlmcmVlX3BndGFibGVzKHRsYiwg cHJldiwgc3RhcnQsIGVuZCk7Cg==