From xen-announce-bounces@lists.xenproject.org Tue Dec 05 11:44:15 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Dec 2017 11:44:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMBd6-0005lg-Ed; Tue, 05 Dec 2017 11:43:16 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMBah-0005VD-Of for xen-announce@lists.xenproject.org; Tue, 05 Dec 2017 11:40:47 +0000 X-Inumbo-ID: 16833829-d9b1-11e7-b4a6-bc764e045a96 Received: from mail-qt0-x22f.google.com (unknown [2607:f8b0:400d:c0d::22f]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 16833829-d9b1-11e7-b4a6-bc764e045a96; Tue, 05 Dec 2017 12:40:27 +0100 (CET) Received: by mail-qt0-x22f.google.com with SMTP id m59so11097271qte.11 for ; Tue, 05 Dec 2017 03:40:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:from:date:message-id:subject:to:cc; bh=aH/dl5gcQl1pyHhX6+nRLSfV19U34fCAPLCmsVRoInU=; b=Or7zomJS4zwtg81obpyeMSIISCmwxRgEdejGPvMkJbfXRAu8yMSaXJ7FCeHGV5pl8H UhPAynGZF8A5idcgBWad/LvAiTrBf7bUM+qnASC9at5IQFXNYvyUUSeCCPc4zQcdoGt/ vlU5SZnprMHk0uXjaHVP89sg5SSonqJltvdDI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=aH/dl5gcQl1pyHhX6+nRLSfV19U34fCAPLCmsVRoInU=; b=pGdudjuoALt3w2y0htOeTflQ/EfqmcI/Kj+BBfhzlKAIMxJHRteZcCJeJuzckHdla8 wNsHHD1V2IrVG7g1rNHzyU+qTSR/MSCVqgdje57Oqd8wRHnscLed+4p/Ewk8bCsb7GAe TY/W35qY6kYThfiQe25/DwZAdJ5nkte1ZUsGM0qFCLYJcJX2SxtrUCUZ9sAKk94M3tiV vm99O+FcbxsO9zSPo04CCv6wu6fZcSPQI718FfPqEikbdoP8ByV8n/CvMzcqbOkj16+o 6XT2f3xuKb3nWZwkZ9od06CUsbNBOoi0zMzn0o1qLPbSfSnWKbzexoFnp1FaqCCuDAvm Ca8A== X-Gm-Message-State: AKGB3mLH4IK7x1VVDC4cXeNKggQAK8z/6KyMt/z/uld+iMPUY70h3gbU 3qrz/cpqAy3241Ph1SZ40pyQj9+w/3CGLdbSVGT9Rg== X-Google-Smtp-Source: AGs4zMZ4DipB1E3wCMwDJBwNRW1I7KHTi+6S5YE+/WlAOXnhKvjQEdr+cNg71PZ8uaF+2dclW8V0CWqpe+tXS5tftrE= X-Received: by 10.237.37.177 with SMTP id x46mr2002511qtc.76.1512474046277; Tue, 05 Dec 2017 03:40:46 -0800 (PST) MIME-Version: 1.0 Received: by 10.200.53.60 with HTTP; Tue, 5 Dec 2017 03:40:45 -0800 (PST) From: Julien Grall Date: Tue, 5 Dec 2017 11:40:45 +0000 Message-ID: To: xen-devel , xen-announce@lists.xenproject.org, xen-users@lists.xenproject.org X-Mailman-Approved-At: Tue, 05 Dec 2017 11:43:15 +0000 Cc: Lars Kurth Subject: [Xen-announce] Xen 4.10 RC8 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTAgUkM4IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgogIGdpdDovL3hlbmJpdHMueGVuLm9yZy94ZW4uZ2l0IDQuMTAuMC1yYzgK CkZvciB5b3VyIGNvbnZlbmllbmNlLCB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6 Ly9kb3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMC4wLXJjOC94ZW4tNC4x MC4wLXJjOC50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fk cy54ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEwLjAtcmM4L3hlbi00LjEwLjAtcmM4LnRh ci5nei5zaWcKCkluIHRoaXMgUkMsIGRlYnVnIGhhcyBiZWVuIGRpc2FibGVkIHRvIGdldCByZWFk eSBmb3IgdGhlIHJlbGVhc2UuCgpQbGVhc2Ugc2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBv cnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54ZW5wcm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyBy ZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZhbnQgbWFpbnRhaW5lcnMgYW5kIG1lIChqdWxpZW4uZ3Jh bGxAbGluYXJvLm9yZykuCgpUaGFua3MsCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwpYZW4tYW5ub3VuY2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBs aXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczovL2xpc3RzLnhlbnByb2plY3Qub3JnL21haWxtYW4v bGlzdGluZm8veGVuLWFubm91bmNl From xen-announce-bounces@lists.xenproject.org Tue Dec 05 11:44:15 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Dec 2017 11:44:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMBd6-0005lT-7G; Tue, 05 Dec 2017 11:43:16 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLODY-0000Sa-Qz for xen-announce@lists.xenproject.org; Sun, 03 Dec 2017 06:57:36 +0000 X-Inumbo-ID: 32dfffb8-d7f7-11e7-b4a6-bc764e045a96 Received: from mail-qt0-x234.google.com (unknown [2607:f8b0:400d:c0d::234]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 32dfffb8-d7f7-11e7-b4a6-bc764e045a96; Sun, 03 Dec 2017 07:57:17 +0100 (CET) Received: by mail-qt0-x234.google.com with SMTP id 33so17791506qtv.1 for ; Sat, 02 Dec 2017 22:57:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=VwCTW9VQfLEme2ms8R2b47FL6ScdQXAOy103xf/zbzc=; b=XVcXk9/neat8Ko6XBw2QlIRmOiP9OCjp6ZABP6B724DNMjsCpQBgoYxiTHy68z7TKD EohKmHJ6nUPHli77rTEyM7J2QW+PcDZlnTUncGmWhomPnP1VUf5HisWtDFdIpJk/l0Ln nsD+6JEgct6fQybvGABQeiteeMAlWey+Umx1c= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=VwCTW9VQfLEme2ms8R2b47FL6ScdQXAOy103xf/zbzc=; b=mUw/FNw55FsF/oR/o9iFQVbIkR54SMlKhCtcuN/1TgUBYeAf65y9TAG2S5KlwcA+k7 m7RItJSsh5R8u2BV9BlLzbm73eBpLnlsUZIfhxpbinrNkG07Je/dt/doV6KoSSx11c10 4Fu7N01ftsIW4w7kBrdyiVuMQNqAuV6BNkeGCGjdgwwCOklrcs754SX91JE3Gj0lSvUH Qkcuz1NCxtXHWG/la0WpbTdjkEzgEf55fYxaorv5iYa/3/LomPhFM0Sjsm0B1KJTFduv OVND0+i2HjHwgkTeRpj5D48ecVAjUxE60mxZSnx//+2x2sYY43bl+VReujLGCGTh8IRs 734w== X-Gm-Message-State: AKGB3mIGQWOwqb+tbLYlythn2zKHMBjEScaPXk0/RHcmL0xa12eps3vZ KKrzb4GLrFDV1WKzOahXz7M3KKnfe5cFGE0lfuUm0MrxFVc= X-Google-Smtp-Source: AGs4zMaw1XA/l5wfhM9CORO45WXnZJWIslxp8lvI+duyAjhKJPyiChywn6TT3Pz5vjO57LIflMO8uPRqaWWJqexAjHE= X-Received: by 10.200.15.2 with SMTP id e2mr15139861qtk.69.1512284252505; Sat, 02 Dec 2017 22:57:32 -0800 (PST) MIME-Version: 1.0 Received: by 10.200.53.60 with HTTP; Sat, 2 Dec 2017 22:57:32 -0800 (PST) From: Julien Grall Date: Sun, 3 Dec 2017 06:57:32 +0000 Message-ID: To: xen-announce@lists.xenproject.org, xen-devel , xen-users@lists.xen.org, Lars Kurth X-Mailman-Approved-At: Tue, 05 Dec 2017 11:43:15 +0000 Subject: [Xen-announce] Xen 4.10 RC7 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTAgUkM3IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgogIGdpdDovL3hlbmJpdHMueGVuLm9yZy94ZW4uZ2l0IDQuMTAuMC1yYzcK CkZvciB5b3VyIGNvbnZlbmllbmNlLCB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6 Ly9kb3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMC4wLXJjNy94ZW4tNC4x MC4wLXJjNy50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fk cy54ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEwLjAtcmM3L3hlbi00LjEwLjAtcmM3LnRh ci5nei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8KeGVu LWRldmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLiBXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBs ZWFzZSBDQwpyZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUgKGp1bGllbi5ncmFsbEBsaW5hcm8u b3JnKS4KClRoYW5rcywKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhlbnBy b2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby94 ZW4tYW5ub3VuY2U= From xen-announce-bounces@lists.xenproject.org Wed Dec 06 11:01:01 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 06 Dec 2017 11:01:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMXQl-0000WJ-Mj; Wed, 06 Dec 2017 10:59:59 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMXQk-0000Vz-JJ for xen-announce@lists.xen.org; Wed, 06 Dec 2017 10:59:58 +0000 X-Inumbo-ID: 9e95f72e-da74-11e7-b0d7-9f685aff125f Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas1.inumbo.com (Halon) with ESMTPS id 9e95f72e-da74-11e7-b0d7-9f685aff125f; Wed, 06 Dec 2017 11:00:07 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eMXQU-0004XS-OL; Wed, 06 Dec 2017 10:59:42 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eMXQU-0001T7-NM; Wed, 06 Dec 2017 10:59:42 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Wed, 06 Dec 2017 10:59:42 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 238 (CVE-2017-15591) - DMOP map/unmap missing argument checks X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2017-15591 / XSA-238 version 3 DMOP map/unmap missing argument checks UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= DMOPs (which were a subgroup of HVMOPs in older releases) allow guests to control and drive other guests. The I/O request server page mapping interface uses range sets to represent I/O resources the emulation of which is provided by a given I/O request server. The internals of the range set implementation require that ranges have a starting value no lower than the ending one. Checks for this fact were missing. IMPACT ====== Malicious or buggy stub domain kernels or tool stacks otherwise living outside of Domain0 can mount a denial of service attack which, if successful, can affect the whole system. Only domains controlling HVM guests can exploit this vulnerability. (This includes domains providing hardware emulation services to HVM guests.) VULNERABLE SYSTEMS ================== Xen versions 4.5 and later are vulnerable. Xen versions 4.4 and earlier are not vulnerable. Only x86 systems are affected. ARM systems are not affected. This vulnerability is only applicable to Xen systems using stub domains or other forms of disaggregation of control domains for HVM guests. MITIGATION ========== Running only PV guests will avoid this issue. (The security of a Xen system using stub domains is still better than with a qemu-dm running as an unrestricted dom0 process. Therefore users with these configurations should not switch to an unrestricted dom0 qemu-dm.) CREDITS ======= This issue was discovered by Vitaly Kuznetsov of RedHat. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa238.patch xen-unstable, Xen 4.9.x, Xen 4.8.x, Xen 4.7.x xsa238-4.6.patch Xen 4.6.x xsa238-4.5.patch Xen 4.5.x $ sha256sum xsa238* 93cc1da4a0ab27f857f2ad39c38f112ef101a01bc5d386807d27371f83526831 xsa238.meta 85d3f9713bef1bc86c682857dbd7388a1d1f20089363ddfc4cb9ecbd88eaffec xsa238.patch 034e91c234f6831dbaa1aaf29f4f90de2e822f99301424f7f3527f9da883ff68 xsa238-4.5.patch 29255a81729b24866e594426167de5fbef70de21ef62a95ba95de191d2a7fd54 xsa238-4.6.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJaJ82OAAoJEIP+FMlX6CvZcU0IAMkUqTbbTWIWAruO03YSxFvn bqmfyzgyUVHUMLzhjrukaqVxZYcxV5FbY/IMWEZY/oET9wHv8iBsMay+cVlsv45i GMHZaxGBM9P1xU6AS4GP/oRMb9LA4fU7rjCKcK54zaDV+mdW/2rA+Ac0IVbmn3tF gcnkfbHk3cF8x91rD4+2ZC7ihE6CIX70PQxdXNbgR8RpoxGdE1q9IPF8ik3gLyO/ OtoDfqrbau+YllhTBI3XxmU+MJgpRf+VRnOgFpYjzp10dfVBM459Lmdzfa6gXhxz ysm+Js8Y4jpVEIGY3qXAV8/V2ZSL8nNmFiNFPOJZcNu4wkAFZKUlyWBbFlJcvvk= =keh/ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa238.meta" Content-Disposition: attachment; filename="xsa238.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyMzgsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC45IiwKICAgICI0LjgiLAogICAgIjQuNyIsCiAg ICAiNC42IiwKICAgICI0LjUiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAieGVu IgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC41IjogewogICAgICAiWGVu VmVyc2lvbiI6ICI0LjUiLAogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAi eGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI4MzcyNGQ5ZjNhZTIx YTNiOTYzNjI3NDJlMmYwNTJiMTlkOWY1NTlhIiwKICAgICAgICAgICJQcmVy ZXFzIjogWwogICAgICAgICAgICAyMzcKICAgICAgICAgIF0sCiAgICAgICAg ICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTIzOC00LjUucGF0Y2gi CiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQu NiI6IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC42IiwKICAgICAgIlJlY2lw ZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYi OiAiMTY1OGE4NzY5MGFjODM5ZTg1ZGIxMmJiZjQwOWJlNjJiYjkzODY0MCIs CiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjM3CiAgICAg ICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4 c2EyMzgtNC42LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAg fQogICAgfSwKICAgICI0LjciOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIjQu NyIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAg ICAgICAiU3RhYmxlUmVmIjogImM3NzgzZDljMjZmYzE5MTg2MmQ5ODgzZGEy MjM4NzM0MGIxZmFiMTgiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAg ICAgICAgIDIzNwogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjog WwogICAgICAgICAgICAieHNhMjM4LnBhdGNoIgogICAgICAgICAgXQogICAg ICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjgiOiB7CiAgICAgICJYZW5W ZXJzaW9uIjogIjQuOCIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4 ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjM2ODk4ZWIxMjU3MmYw YTFmODVjYjU0ZDRhOWU5MGFmY2I2ZjcwNDUiLAogICAgICAgICAgIlByZXJl cXMiOiBbCiAgICAgICAgICAgIDIzNwogICAgICAgICAgXSwKICAgICAgICAg ICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjM4LnBhdGNoIgogICAg ICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjkiOiB7 CiAgICAgICJYZW5WZXJzaW9uIjogIjQuOSIsCiAgICAgICJSZWNpcGVzIjog ewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjJj YzNkMzJmNDBjNzFjYjI0MjQ3N2EzZjg5MzgwNzRkNGZjMzY4MjkiLAogICAg ICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDIzNwogICAgICAgICAg XSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjM4 LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwK ICAgICJtYXN0ZXIiOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIm1hc3RlciIs CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAg ICAiU3RhYmxlUmVmIjogImUzYWNhNjA4NDNkNjAzZmMzM2ViMGQxZWFiODBh ZDdjMjg2N2RlZDEiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAg ICAgIDIzNwogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjM4LnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa238.patch" Content-Disposition: attachment; filename="xsa238.patch" Content-Transfer-Encoding: base64 RnJvbSBjZGMyODg3MDc2YjE5YjM5ZmFiOWZhZWM0OTUwODI1ODZmMzExM2Rm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBYZW5Qcm9qZWN0IFNl Y3VyaXR5IFRlYW0gPHNlY3VyaXR5QHhlbnByb2plY3Qub3JnPgpEYXRlOiBU dWUsIDUgU2VwIDIwMTcgMTM6NDE6MzcgKzAyMDAKU3ViamVjdDogeDg2L2lv cmVxIHNlcnZlcjogY29ycmVjdGx5IGhhbmRsZSBib2d1cwogWEVOX0RNT1Bf eyx1bn1tYXBfaW9fcmFuZ2VfdG9faW9yZXFfc2VydmVyIGFyZ3VtZW50cwoK TWlzYmVoYXZpbmcgZGV2aWNlIG1vZGVsIGNhbiBwYXNzIGluY29ycmVjdCBY RU5fRE1PUF9tYXAvCnVubWFwX2lvX3JhbmdlX3RvX2lvcmVxX3NlcnZlciBh cmd1bWVudHMsIG5hbWVseSBlbmQgPCBzdGFydCB3aGVuCnNwZWNpZnlpbmcg YWRkcmVzcyByYW5nZS4gV2hlbiB0aGlzIGhhcHBlbnMgd2UgaGl0IEFTU0VS VChzIDw9IGUpIGluCnJhbmdlc2V0X2NvbnRhaW5zX3JhbmdlKCkvcmFuZ2Vz ZXRfb3ZlcmxhcHNfcmFuZ2UoKSB3aXRoIGRlYnVnIGJ1aWxkcy4KUHJvZHVj dGlvbiBidWlsZHMgd2lsbCBub3QgdHJhcCByaWdodCBhd2F5IGJ1dCBtYXkg bWlzYmVoYXZlIGxhdGVyCndoaWxlIGhhbmRsaW5nIHN1Y2ggYm9ndXMgcmFu Z2VzLgoKVGhpcyBpcyBYU0EtMjM4LgoKU2lnbmVkLW9mZi1ieTogVml0YWx5 IEt1em5ldHNvdiA8dmt1em5ldHNAcmVkaGF0LmNvbT4KUmV2aWV3ZWQtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KLS0tCiB4ZW4vYXJj aC94ODYvaHZtL2lvcmVxLmMgfCA2ICsrKysrKwogMSBmaWxlIGNoYW5nZWQs IDYgaW5zZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9o dm0vaW9yZXEuYyBiL3hlbi9hcmNoL3g4Ni9odm0vaW9yZXEuYwppbmRleCBi MmE4YjBlOTg2Li44YzhiZjFmMGVjIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94 ODYvaHZtL2lvcmVxLmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS9pb3JlcS5j CkBAIC04MjAsNiArODIwLDkgQEAgaW50IGh2bV9tYXBfaW9fcmFuZ2VfdG9f aW9yZXFfc2VydmVyKHN0cnVjdCBkb21haW4gKmQsIGlvc2VydmlkX3QgaWQs CiAgICAgc3RydWN0IGh2bV9pb3JlcV9zZXJ2ZXIgKnM7CiAgICAgaW50IHJj OwogCisgICAgaWYgKCBzdGFydCA+IGVuZCApCisgICAgICAgIHJldHVybiAt RUlOVkFMOworCiAgICAgc3Bpbl9sb2NrX3JlY3Vyc2l2ZSgmZC0+YXJjaC5o dm1fZG9tYWluLmlvcmVxX3NlcnZlci5sb2NrKTsKIAogICAgIHJjID0gLUVO T0VOVDsKQEAgLTg3Miw2ICs4NzUsOSBAQCBpbnQgaHZtX3VubWFwX2lvX3Jh bmdlX2Zyb21faW9yZXFfc2VydmVyKHN0cnVjdCBkb21haW4gKmQsIGlvc2Vy dmlkX3QgaWQsCiAgICAgc3RydWN0IGh2bV9pb3JlcV9zZXJ2ZXIgKnM7CiAg ICAgaW50IHJjOwogCisgICAgaWYgKCBzdGFydCA+IGVuZCApCisgICAgICAg IHJldHVybiAtRUlOVkFMOworCiAgICAgc3Bpbl9sb2NrX3JlY3Vyc2l2ZSgm ZC0+YXJjaC5odm1fZG9tYWluLmlvcmVxX3NlcnZlci5sb2NrKTsKIAogICAg IHJjID0gLUVOT0VOVDsK --=separator Content-Type: application/octet-stream; name="xsa238-4.5.patch" Content-Disposition: attachment; filename="xsa238-4.5.patch" Content-Transfer-Encoding: base64 RnJvbTogWGVuUHJvamVjdCBTZWN1cml0eSBUZWFtIDxzZWN1cml0eUB4ZW5w cm9qZWN0Lm9yZz4KU3ViamVjdDogeDg2L2lvcmVxIHNlcnZlcjogY29ycmVj dGx5IGhhbmRsZSBib2d1cwogWEVOX0RNT1Bfeyx1bn1tYXBfaW9fcmFuZ2Vf dG9faW9yZXFfc2VydmVyIGFyZ3VtZW50cwoKTWlzYmVoYXZpbmcgZGV2aWNl IG1vZGVsIGNhbiBwYXNzIGluY29ycmVjdCBYRU5fRE1PUF9tYXAvCnVubWFw X2lvX3JhbmdlX3RvX2lvcmVxX3NlcnZlciBhcmd1bWVudHMsIG5hbWVseSBl bmQgPCBzdGFydCB3aGVuCnNwZWNpZnlpbmcgYWRkcmVzcyByYW5nZS4gV2hl biB0aGlzIGhhcHBlbnMgd2UgaGl0IEFTU0VSVChzIDw9IGUpIGluCnJhbmdl c2V0X2NvbnRhaW5zX3JhbmdlKCkvcmFuZ2VzZXRfb3ZlcmxhcHNfcmFuZ2Uo KSB3aXRoIGRlYnVnIGJ1aWxkcy4KUHJvZHVjdGlvbiBidWlsZHMgd2lsbCBu b3QgdHJhcCByaWdodCBhd2F5IGJ1dCBtYXkgbWlzYmVoYXZlIGxhdGVyCndo aWxlIGhhbmRsaW5nIHN1Y2ggYm9ndXMgcmFuZ2VzLgoKVGhpcyBpcyBYU0Et MjM4LgoKU2lnbmVkLW9mZi1ieTogVml0YWx5IEt1em5ldHNvdiA8dmt1em5l dHNAcmVkaGF0LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KLS0tCiB4ZW4vYXJjaC94ODYvaHZtL2h2bS5jIHwg NiArKysrKysKIDEgZmlsZSBjaGFuZ2VkLCA2IGluc2VydGlvbnMoKykKCmRp ZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvaHZtL2lvcmVxLmMgYi94ZW4vYXJj aC94ODYvaHZtL2lvcmVxLmMKaW5kZXggYjJhOGIwZTk4Ni4uOGM4YmYxZjBl YyAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2h2bS9odm0uYworKysgYi94 ZW4vYXJjaC94ODYvaHZtL2h2bS5jCkBAIC0xMTUxLDYgKzExNTEsOSBAQCBp bnQgaHZtX21hcF9pb19yYW5nZV90b19pb3JlcV9zZXJ2ZXIoc3RydWN0IGRv bWFpbiAqZCwgaW9zZXJ2aWRfdCBpZCwKICAgICBzdHJ1Y3QgaHZtX2lvcmVx X3NlcnZlciAqczsKICAgICBpbnQgcmM7CiAKKyAgICBpZiAoIHN0YXJ0ID4g ZW5kICkKKyAgICAgICAgcmV0dXJuIC1FSU5WQUw7CisKICAgICBzcGluX2xv Y2tfcmVjdXJzaXZlKCZkLT5hcmNoLmh2bV9kb21haW4uaW9yZXFfc2VydmVy LmxvY2spOwogCiAgICAgcmMgPSAtRU5PRU5UOwpAQCAtMTIwMiw2ICsxMjA1 LDkgQEAgaW50IGh2bV91bm1hcF9pb19yYW5nZV9mcm9tX2lvcmVxX3NlcnZl cihzdHJ1Y3QgZG9tYWluICpkLCBpb3NlcnZpZF90IGlkLAogICAgIHN0cnVj dCBodm1faW9yZXFfc2VydmVyICpzOwogICAgIGludCByYzsKIAorICAgIGlm ICggc3RhcnQgPiBlbmQgKQorICAgICAgICByZXR1cm4gLUVJTlZBTDsKKwog ICAgIHNwaW5fbG9ja19yZWN1cnNpdmUoJmQtPmFyY2guaHZtX2RvbWFpbi5p b3JlcV9zZXJ2ZXIubG9jayk7CiAKICAgICByYyA9IC1FTk9FTlQ7Cg== --=separator Content-Type: application/octet-stream; name="xsa238-4.6.patch" Content-Disposition: attachment; filename="xsa238-4.6.patch" Content-Transfer-Encoding: base64 RnJvbTogWGVuUHJvamVjdCBTZWN1cml0eSBUZWFtIDxzZWN1cml0eUB4ZW5w cm9qZWN0Lm9yZz4KU3ViamVjdDogeDg2L2lvcmVxIHNlcnZlcjogY29ycmVj dGx5IGhhbmRsZSBib2d1cwogWEVOX0RNT1Bfeyx1bn1tYXBfaW9fcmFuZ2Vf dG9faW9yZXFfc2VydmVyIGFyZ3VtZW50cwoKTWlzYmVoYXZpbmcgZGV2aWNl IG1vZGVsIGNhbiBwYXNzIGluY29ycmVjdCBYRU5fRE1PUF9tYXAvCnVubWFw X2lvX3JhbmdlX3RvX2lvcmVxX3NlcnZlciBhcmd1bWVudHMsIG5hbWVseSBl bmQgPCBzdGFydCB3aGVuCnNwZWNpZnlpbmcgYWRkcmVzcyByYW5nZS4gV2hl biB0aGlzIGhhcHBlbnMgd2UgaGl0IEFTU0VSVChzIDw9IGUpIGluCnJhbmdl c2V0X2NvbnRhaW5zX3JhbmdlKCkvcmFuZ2VzZXRfb3ZlcmxhcHNfcmFuZ2Uo KSB3aXRoIGRlYnVnIGJ1aWxkcy4KUHJvZHVjdGlvbiBidWlsZHMgd2lsbCBu b3QgdHJhcCByaWdodCBhd2F5IGJ1dCBtYXkgbWlzYmVoYXZlIGxhdGVyCndo aWxlIGhhbmRsaW5nIHN1Y2ggYm9ndXMgcmFuZ2VzLgoKVGhpcyBpcyBYU0Et MjM4LgoKU2lnbmVkLW9mZi1ieTogVml0YWx5IEt1em5ldHNvdiA8dmt1em5l dHNAcmVkaGF0LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KLS0tCiB4ZW4vYXJjaC94ODYvaHZtL2h2bS5jIHwg NiArKysrKysKIDEgZmlsZSBjaGFuZ2VkLCA2IGluc2VydGlvbnMoKykKCmRp ZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvaHZtL2lvcmVxLmMgYi94ZW4vYXJj aC94ODYvaHZtL2lvcmVxLmMKaW5kZXggYjJhOGIwZTk4Ni4uOGM4YmYxZjBl YyAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2h2bS9odm0uYworKysgYi94 ZW4vYXJjaC94ODYvaHZtL2h2bS5jCkBAIC0xMjcxLDYgKzEyNzEsOSBAQCBp bnQgaHZtX21hcF9pb19yYW5nZV90b19pb3JlcV9zZXJ2ZXIoc3RydWN0IGRv bWFpbiAqZCwgaW9zZXJ2aWRfdCBpZCwKICAgICBzdHJ1Y3QgaHZtX2lvcmVx X3NlcnZlciAqczsKICAgICBpbnQgcmM7CiAKKyAgICBpZiAoIHN0YXJ0ID4g ZW5kICkKKyAgICAgICAgcmV0dXJuIC1FSU5WQUw7CisKICAgICBzcGluX2xv Y2tfcmVjdXJzaXZlKCZkLT5hcmNoLmh2bV9kb21haW4uaW9yZXFfc2VydmVy LmxvY2spOwogCiAgICAgcmMgPSAtRU5PRU5UOwpAQCAtMTMyMiw2ICsxMzI1 LDkgQEAgaW50IGh2bV91bm1hcF9pb19yYW5nZV9mcm9tX2lvcmVxX3NlcnZl cihzdHJ1Y3QgZG9tYWluICpkLCBpb3NlcnZpZF90IGlkLAogICAgIHN0cnVj dCBodm1faW9yZXFfc2VydmVyICpzOwogICAgIGludCByYzsKIAorICAgIGlm ICggc3RhcnQgPiBlbmQgKQorICAgICAgICByZXR1cm4gLUVJTlZBTDsKKwog ICAgIHNwaW5fbG9ja19yZWN1cnNpdmUoJmQtPmFyY2guaHZtX2RvbWFpbi5p b3JlcV9zZXJ2ZXIubG9jayk7CiAKICAgICByYyA9IC1FTk9FTlQ7Cg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Mon Dec 11 18:17:22 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 11 Dec 2017 18:17:22 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOScq-0007OA-RD; Mon, 11 Dec 2017 18:16:24 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOSco-0007Ng-SN for xen-announce@lists.xen.org; Mon, 11 Dec 2017 18:16:23 +0000 X-Inumbo-ID: 50cdb615-de9f-11e7-b4a6-bc764e045a96 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 50cdb615-de9f-11e7-b4a6-bc764e045a96; Mon, 11 Dec 2017 19:15:50 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOScY-00069i-7F; Mon, 11 Dec 2017 18:16:06 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eOScY-0006qM-5K; Mon, 11 Dec 2017 18:16:06 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Mon, 11 Dec 2017 18:16:06 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 240 (CVE-2017-15595) - Unlimited recursion in linear pagetable de-typing X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2017-15595 / XSA-240 version 6 Unlimited recursion in linear pagetable de-typing UPDATES IN VERSION 6 ==================== Yet another new patch, addressing another issue similar to the one addressed in v5. ISSUE DESCRIPTION ================= x86 PV guests are permitted to set up certain forms of what is often called "linear page tables", where pagetables contain references to other pagetables at the same level or higher. Certain restrictions apply in order to fit into Xen's page type handling system. An important restriction was missed, however: Stacking multiple layers of page tables of the same level on top of one another is not very useful, and the tearing down of such an arrangement involves recursion. With sufficiently many layers such recursion will result in a stack overflow, commonly resulting in Xen to crash. IMPACT ====== A malicious or buggy PV guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Privilege escalation and information leaks cannot be excluded. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are vulnerable. Earlier versions have not been checked. Only x86 systems are affected. ARM systems are not affected. Only x86 PV guests can leverage the vulnerability. x86 HVM guests cannot leverage the vulnerability. MITIGATION ========== Running only HVM guests will avoid this vulnerability. For PV guests, the vulnerability can be avoided if the guest kernel is controlled by the host rather than guest administrator, provided that further steps are taken to prevent the guest administrator from loading code into the kernel (e.g. by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. CREDITS ======= This issue was discovered by Jann Horn of Google Project Zero. RESOLUTION ========== Applying the appropriate attached patch series resolves this issue. The first patch fixes this known issue. The second, optional, patch in each series disables the `linear pagetable` option by default. It can be re-enabled by adding "pv-linear-pt=true' on the Xen command-line. Note that neither Linux nor MiniOS use linear pagetables; NetBSD and Novell Netware, however, do use this feature when running in PV mode. xsa240-unstable/*.patch xen-unstable xsa240-4.9/*.patch Xen 4.9.x xsa240-4.8/*.patch Xen 4.8.x xsa240-4.7/*.patch Xen 4.7.x xsa240-4.6/*.patch Xen 4.6.x xsa240-4.5/*.patch Xen 4.5.x $ sha256sum xsa240* xsa240*/* e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 xsa240.meta e227126ea204d6049c8bfb694e3d2bcac10382733ca4ece1f0f7dc36c625ac1d xsa240-unstable/0001-x86-limit-linear-page-table-use-to-a-single-level.patch c6bb1f47754bf4f57bb9205509c525336ff55da8bcae8ae95415bdf1bba70209 xsa240-unstable/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch 549f56c7a3eacd1fc308a46ac5db32f2191d67e7e25aff501fb2ba26cc979feb xsa240-unstable/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch d157826cbbae2f8815ccfb3aa23b936c5f7e7f5fb802cb85ae9e873723ac3d79 xsa240-unstable/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch 2e8168449f8594c5faa50feb311eaa7e74b38c726853b1cfbaf2fbd4cbbdb476 xsa240-4.5/0001-x86-limit-linear-page-table-use-to-a-single-level.patch ea95ed56a5f85753a41ca1abbb4abd5ea791d7596c8a9d20ceaa53862ee5ce15 xsa240-4.5/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch 76ba9206fbab686cc8c3b8b21945532b7029cc4725ee1cc38666035152ba87ad xsa240-4.5/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch c0851264065f22ea60d54df7a23cda68b24762c032d881bd3d77c5f5f7f65dad xsa240-4.5/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch f7556cc4a13cd4334d79e73861f15dd619dfd6041a3ad89865b358035d2fcff8 xsa240-4.6/0001-x86-limit-linear-page-table-use-to-a-single-level.patch 24ad9f92938c112a6fcf46177d44597c49dc213a3644ce4fd59d4df507b072d3 xsa240-4.6/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch 2fe49415a8925dda416fd2594f935ec03c8070bea4a049c1ad242c646fef01e1 xsa240-4.6/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch 0c78bddbf12cefe9e04001ca31c5b913b3914eb80b63b27d1918a10a24022e74 xsa240-4.6/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch 5a9b8e0a4e55482826e6cf820ea01fbf6674fecf19b101f4578396e3fa98a8fd xsa240-4.7/0001-x86-limit-linear-page-table-use-to-a-single-level.patch acf9744b853c1c6ac071bcf5776d8d9463781bbdf658c2fecc59ee338c094750 xsa240-4.7/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch 637ef53ca2d6633104abff47be208d87836042af79082666cb818f0ad53b6452 xsa240-4.7/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch 7acccf8867d779914e77a83efcb0dbd172e572de8f700b9ac18db1194c37f82f xsa240-4.7/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch c0c624f51fb1bd9e31a2c120343164d545ab6e709ed4bb9e5dd89b5c4c4e49f8 xsa240-4.8/0001-x86-limit-linear-page-table-use-to-a-single-level.patch 7e3c2c4a4d0ee0a29abaa7aceffbb774b1f92aa81dfa4c5d1c5c5156b6bb0a3a xsa240-4.8/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch f174ee608a7f7f0601ae46edafbf443c90a87632609c1b4145fb0e2e5c4b1b51 xsa240-4.8/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch eb74c580bdf0f972833ef058e7db50fe5f524d38d886776c66942712597a52c4 xsa240-4.8/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch 7769866805e47b7a2109ba1778f263ddfa126bcb0b116612f76dfaca9bf70995 xsa240-4.9/0001-x86-limit-linear-page-table-use-to-a-single-level.patch 1053cb348dc8536cb12b4aca556ddc4c015810f8f0fd21a80dff37433ec082ea xsa240-4.9/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch 4b312010962a294660b2e78a9a5bfd9d537000ceda11e587f88fc49da560c0ff xsa240-4.9/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch 9b79fb9b176e34b6f1c1208713537130c7ffe7e73e7b9a80e95b53209587628a xsa240-4.9/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJaLstaAAoJEIP+FMlX6CvZxdMIAIzMc0f+pU0bvefVCMuE7LBN Xx3bSZ1Yd1V1c9/RmQMsxgv6BQ0hgoiAs9tP0PQ89UJ7CfJfWb221DMXuThhKSmo 1zxH4D0gyUzM01JxaCGjFAUAd30Aa9tZE9M5rgTVSyt3QiLL7IcjY6fks3+HBjMq 2phYB5p7vP9HRZbDbEnAEZRtUzMUUo8QlnjGYvc14wkr/e6quGNsWMKje82y42ha 5mNQ+4XfFI+PPBjAGV12aEHmwmx9PDPnrY59y2rkFoxGIZDjIRLjKS97ULlqq4WU UbpNgAgrIr2ntfLKQvXKp0oGv+IvxBAMLGzxLWZ0VwKjp6tSUjohnVjq0Twb/74= =luoB -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa240.meta" Content-Disposition: attachment; filename="xsa240.meta" Content-Transfer-Encoding: base64 --=separator Content-Type: application/octet-stream; name="xsa240-unstable/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-unstable/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSAyODQxMzVkMTBkYzQyNTQzOTk3YTRlMzY4MWVmNDg1N2I1NzE4NTU1 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFdlZCwgMjcgU2VwIDIwMTcgMTE6 NDY6NTIgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KdjU6IENvcnJlY3QgcGxhY2VtZW50IG9mIGNvZGUgYWRkaXRpb24g dG8gX3B1dF9maW5hbF9wYWdlX3R5cGUoKS4KdjQ6IEludHJvZHVjZSBhbmQg dXNlIFBHVF90eXBlX2VxdWFsKCkuCnYzOiBBZGQgQlVJTERfQlVHX09OKClz Lgp2MjogRml4IGFzc2VydGlvbnMgaW4gZGVjX2xpbmVhcl8qKCkgdHJpZ2dl cmluZyBkdXJpbmcgZ3Vlc3Qgc2h1dGRvd24KICAgIHdoZW4gc2FtZS1sZXZl bCBwYWdlIHRhYmxlIHJlZmVyZW5jZXMgc3RpbGwgZXhpc3QuIERpc2FsbG93 IGNyb3NzLQogICAgZG9tYWluIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZSByZWZl cmVuY2VzLgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAg IDEgKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MiArKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0tCiB4ZW4v aW5jbHVkZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRl L2FzbS14ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogNCBmaWxlcyBjaGFu Z2VkLCAxNzcgaW5zZXJ0aW9ucygrKSwgMjMgZGVsZXRpb25zKC0pCgpkaWZm IC0tZ2l0IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2 L2RvbWFpbi5jCmluZGV4IDQ2NmExYTJmYWMuLjg5ODgyODFlMWYgMTAwNjQ0 Ci0tLSBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94 ODYvZG9tYWluLmMKQEAgLTEwOTEsNiArMTA5MSw3IEBAIGludCBhcmNoX3Nl dF9pbmZvX2d1ZXN0KAogICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKICAgICAgICAgICAgICAgICAgICAgLyogRmFsbHRocm91Z2ggKi8K ICAgICAgICAgICAgICAgICBjYXNlIC1FUkVTVEFSVDoKKyAgICAgICAgICAg ICAgICAgICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CiAgICAg ICAgICAgICAgICAgICAgIHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0KICAg ICAgICAgICAgICAgICAgICAgICAgIHBhZ2V0YWJsZV9nZXRfcGFnZSh2LT5h cmNoLmd1ZXN0X3RhYmxlKTsKICAgICAgICAgICAgICAgICAgICAgdi0+YXJj aC5ndWVzdF90YWJsZSA9IHBhZ2V0YWJsZV9udWxsKCk7CmRpZmYgLS1naXQg YS94ZW4vYXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4 IGFmZDVhMTAxYTQuLjhiMDAyNjU4OWQgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNo L3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC01ODcsNiAr NTg3LDYxIEBAIHN0YXRpYyB2b2lkIHB1dF9kYXRhX3BhZ2UoCiAgICAgICAg IHB1dF9wYWdlKHBhZ2UpOwogfQogCitzdGF0aWMgYm9vbCBpbmNfbGluZWFy X2VudHJpZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9m KHBnLT5saW5lYXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9taWMoJnBnLT5s aW5lYXJfcHRfY291bnQpLCBvYzsKKworICAgIGRvIHsKKyAgICAgICAgLyoK KyAgICAgICAgICogVGhlIGNoZWNrIGJlbG93IGNoZWNrcyBmb3IgdGhlICJs aW5lYXIgdXNlIiBjb3VudCBiZWluZyBub24temVybworICAgICAgICAgKiBh cyB3ZWxsIGFzIG92ZXJmbG93LiAgU2lnbmVkIGludGVnZXIgb3ZlcmZsb3cg aXMgdW5kZWZpbmVkIGJlaGF2aW9yCisgICAgICAgICAqIGFjY29yZGluZyB0 byB0aGUgQyBzcGVjLiAgSG93ZXZlciwgYXMgbG9uZyBhcyBsaW5lYXJfcHRf Y291bnQgaXMKKyAgICAgICAgICogc21hbGxlciBpbiBzaXplIHRoYW4gJ2lu dCcsIHRoZSBhcml0aG1ldGljIG9wZXJhdGlvbiBvZiB0aGUKKyAgICAgICAg ICogaW5jcmVtZW50IGJlbG93IHdvbid0IG92ZXJmbG93OyByYXRoZXIgdGhl IHJlc3VsdCB3aWxsIGJlIHRydW5jYXRlZAorICAgICAgICAgKiB3aGVuIHN0 b3JlZC4gIEVuc3VyZSB0aGF0IHRoaXMgaXMgYWx3YXlzIHRydWUuCisgICAg ICAgICAqLworICAgICAgICBCVUlMRF9CVUdfT04oc2l6ZW9mKG5jKSA+PSBz aXplb2YoaW50KSk7CisgICAgICAgIG9jID0gbmMrKzsKKyAgICAgICAgaWYg KCBuYyA8PSAwICkKKyAgICAgICAgICAgIHJldHVybiBmYWxzZTsKKyAgICAg ICAgbmMgPSBjbXB4Y2hnKCZwZy0+bGluZWFyX3B0X2NvdW50LCBvYywgbmMp OworICAgIH0gd2hpbGUgKCBvYyAhPSBuYyApOworCisgICAgcmV0dXJuIHRy dWU7Cit9CisKK3N0YXRpYyB2b2lkIGRlY19saW5lYXJfZW50cmllcyhzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKK3sKKyAgICB0eXBlb2YocGctPmxpbmVhcl9w dF9jb3VudCkgb2M7CisKKyAgICBvYyA9IGFyY2hfZmV0Y2hfYW5kX2FkZCgm cGctPmxpbmVhcl9wdF9jb3VudCwgLTEpOworICAgIEFTU0VSVChvYyA+IDAp OworfQorCitzdGF0aWMgYm9vbCBpbmNfbGluZWFyX3VzZXMoc3RydWN0IHBh Z2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291 bnQpIG5jID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJfcHRfY291bnQpLCBv YzsKKworICAgIGRvIHsKKyAgICAgICAgLyogU2VlIHRoZSByZXNwZWN0aXZl IGNvbW1lbnQgaW4gaW5jX2xpbmVhcl9lbnRyaWVzKCkuICovCisgICAgICAg IEJVSUxEX0JVR19PTihzaXplb2YobmMpID49IHNpemVvZihpbnQpKTsKKyAg ICAgICAgb2MgPSBuYy0tOworICAgICAgICBpZiAoIG5jID49IDAgKQorICAg ICAgICAgICAgcmV0dXJuIGZhbHNlOworICAgICAgICBuYyA9IGNtcHhjaGco JnBnLT5saW5lYXJfcHRfY291bnQsIG9jLCBuYyk7CisgICAgfSB3aGlsZSAo IG9jICE9IG5jICk7CisKKyAgICByZXR1cm4gdHJ1ZTsKK30KKworc3RhdGlj IHZvaWQgZGVjX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQor eworICAgIHR5cGVvZihwZy0+bGluZWFyX3B0X2NvdW50KSBvYzsKKworICAg IG9jID0gYXJjaF9mZXRjaF9hbmRfYWRkKCZwZy0+bGluZWFyX3B0X2NvdW50 LCAxKTsKKyAgICBBU1NFUlQob2MgPCAwKTsKK30KKwogLyoKICAqIFdlIGFs bG93IHJvb3QgdGFibGVzIHRvIG1hcCBlYWNoIG90aGVyIChhLmsuYS4gbGlu ZWFyIHBhZ2UgdGFibGVzKS4gSXQKICAqIG5lZWRzIHNvbWUgc3BlY2lhbCBj YXJlIHdpdGggcmVmZXJlbmNlIGNvdW50cyBhbmQgYWNjZXNzIHBlcm1pc3Np b25zOgpAQCAtNjE3LDE1ICs2NzIsMzUgQEAgZ2V0XyMjbGV2ZWwjI19saW5l YXJfcGFnZXRhYmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgaWYgKCAocGZuID0gbGV2ZWwjI2VfZ2V0X3BmbihwZGUpKSAh PSBwZGVfcGZuICkgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIHsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgc3RydWN0IHBh Z2VfaW5mbyAqcHRwZyA9IG1mbl90b19wYWdlKF9tZm4ocGRlX3BmbikpOyAg ICAgICAgICAgICAgICBcCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAorICAgICAgICAvKiBNYWtlIHN1cmUgdGhlIHBhZ2UgdGFibGUgYmVs b25ncyB0byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICAgIFwKKyAgICAg ICAgaWYgKCB1bmxpa2VseShwYWdlX2dldF9vd25lcihwdHBnKSAhPSBkKSAp ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1 cm4gMDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgLyogTWFrZSBzdXJlIHRoZSBtYXBwZWQgZnJhbWUg YmVsb25ncyB0byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICBcCiAgICAg ICAgIGlmICggdW5saWtlbHkoIWdldF9wYWdlX2Zyb21fbWZuKF9tZm4ocGZu KSwgZCkpICkgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgcmV0 dXJuIDA7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgICAgIC8qICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAg ICAgICAgKiBFbnN1cmUgdGhhdCB0aGUgbWFwcGVkIGZyYW1lIGlzIGFuIGFs cmVhZHktdmFsaWRhdGVkIHBhZ2UgdGFibGUuIFwKKyAgICAgICAgICogRW5z dXJlIHRoYXQgdGhlIG1hcHBlZCBmcmFtZSBpcyBhbiBhbHJlYWR5LXZhbGlk YXRlZCBwYWdlIHRhYmxlICBcCisgICAgICAgICAqIGFuZCBpcyBub3QgaXRz ZWxmIGhhdmluZyBsaW5lYXIgZW50cmllcywgYXMgd2VsbCBhcyB0aGF0IHRo ZSAgICAgXAorICAgICAgICAgKiBjb250YWluaW5nIHBhZ2UgdGFibGUgaXMg bm90IGlzZWxmIGluIHVzZSBhcyBhIGxpbmVhciBwYWdlIHRhYmxlIFwKKyAg ICAgICAgICogZWxzZXdoZXJlLiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAqIElm IHNvLCBhdG9taWNhbGx5IGluY3JlbWVudCB0aGUgY291bnQgKGNoZWNraW5n IGZvciBvdmVyZmxvdykuICAgXAogICAgICAgICAgKi8gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKICAgICAgICAgcGFnZSA9IG1mbl90b19wYWdlKF9tZm4ocGZu KSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisg ICAgICAgIGlmICggIWluY19saW5lYXJfZW50cmllcyhwdHBnKSApICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICB7ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHB1dF9wYWdlKHBh Z2UpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCisgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAor ICAgICAgICB9ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgaWYg KCAhaW5jX2xpbmVhcl91c2VzKHBhZ2UpICkgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgIHsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAorICAgICAgICAgICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0 cGcpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK KyAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAg ICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICB9ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKICAgICAgICAgeSA9IHBhZ2UtPnUuaW51c2UudHlwZV9p bmZvOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CiAgICAgICAgIGRvIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAg ICAgeCA9IHk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKQEAgLTYzMyw2ICs3MDgsOCBAQCBn ZXRfIyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAg ICAgICB1bmxpa2VseSgoeCAmIChQR1RfdHlwZV9tYXNrfFBHVF92YWxpZGF0 ZWQpKSAhPSAgICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgKFBHVF8jI2xldmVsIyNfcGFnZV90YWJsZXxQR1RfdmFsaWRhdGVkKSkg KSAgICAgICBcCiAgICAgICAgICAgICB7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAor ICAgICAgICAgICAgICAgIGRlY19saW5lYXJfdXNlcyhwYWdlKTsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAg ICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRwZyk7ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAgICAgcHV0X3Bh Z2UocGFnZSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAogICAgICAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK ICAgICAgICAgICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCkBAIC0xMDM0LDYg KzExMTEsOSBAQCBnZXRfcGFnZV9mcm9tX2w0ZSgKICAgICByZXR1cm4gcmM7 CiB9CiAKK3N0YXRpYyBpbnQgX3B1dF9wYWdlX3R5cGUoc3RydWN0IHBhZ2Vf aW5mbyAqcGFnZSwgYm9vbCBwcmVlbXB0aWJsZSwKKyAgICAgICAgICAgICAg ICAgICAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcHRwZyk7CisKIHZvaWQg cHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwxZSwgc3RydWN0IGRv bWFpbiAqbDFlX293bmVyKQogewogICAgIHVuc2lnbmVkIGxvbmcgICAgIHBm biA9IGwxZV9nZXRfcGZuKGwxZSk7CkBAIC0xMTEwLDggKzExOTAsMTUgQEAg c3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wyZShsMl9wZ2VudHJ5X3QgbDJl LCB1bnNpZ25lZCBsb25nIHBmbikKIAogICAgICAgICBmb3IgKCBpID0gMDsg aSA8ICgxdSA8PCBQQUdFVEFCTEVfT1JERVIpOyBpKyssIHBhZ2UrKyApCiAg ICAgICAgICAgICBwdXRfcGFnZV9hbmRfdHlwZShwYWdlKTsKLSAgICB9IGVs c2UKLSAgICAgICAgcHV0X3BhZ2VfYW5kX3R5cGUobDJlX2dldF9wYWdlKGwy ZSkpOworICAgIH0KKyAgICBlbHNlCisgICAgeworICAgICAgICBzdHJ1Y3Qg cGFnZV9pbmZvICpwZyA9IGwyZV9nZXRfcGFnZShsMmUpOworICAgICAgICBp bnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgZmFsc2UsIG1mbl90b19wYWdl KF9tZm4ocGZuKSkpOworCisgICAgICAgIEFTU0VSVCghcmMpOworICAgICAg ICBwdXRfcGFnZShwZyk7CisgICAgfQogCiAgICAgcmV0dXJuIDA7CiB9CkBA IC0xMTIwLDYgKzEyMDcsNyBAQCBzdGF0aWMgaW50IHB1dF9wYWdlX2Zyb21f bDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcgcGZuLAogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQgcGFydGlhbCwgYm9vbCBk ZWZlcikKIHsKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZzsKKyAgICBpbnQg cmM7CiAKICAgICBpZiAoICEobDNlX2dldF9mbGFncyhsM2UpICYgX1BBR0Vf UFJFU0VOVCkgfHwgKGwzZV9nZXRfcGZuKGwzZSkgPT0gcGZuKSApCiAgICAg ICAgIHJldHVybiAxOwpAQCAtMTE0MiwyMSArMTIzMCwyOCBAQCBzdGF0aWMg aW50IHB1dF9wYWdlX2Zyb21fbDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2ln bmVkIGxvbmcgcGZuLAogICAgIGlmICggdW5saWtlbHkocGFydGlhbCA+IDAp ICkKICAgICB7CiAgICAgICAgIEFTU0VSVCghZGVmZXIpOwotICAgICAgICBy ZXR1cm4gcHV0X3BhZ2VfdHlwZV9wcmVlbXB0aWJsZShwZyk7CisgICAgICAg IHJldHVybiBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgbWZuX3RvX3BhZ2Uo X21mbihwZm4pKSk7CiAgICAgfQogCiAgICAgaWYgKCBkZWZlciApCiAgICAg eworICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gbWZu X3RvX3BhZ2UoX21mbihwZm4pKTsKICAgICAgICAgY3VycmVudC0+YXJjaC5v bGRfZ3Vlc3RfdGFibGUgPSBwZzsKICAgICAgICAgcmV0dXJuIDA7CiAgICAg fQogCi0gICAgcmV0dXJuIHB1dF9wYWdlX2FuZF90eXBlX3ByZWVtcHRpYmxl KHBnKTsKKyAgICByYyA9IF9wdXRfcGFnZV90eXBlKHBnLCB0cnVlLCBtZm5f dG9fcGFnZShfbWZuKHBmbikpKTsKKyAgICBpZiAoIGxpa2VseSghcmMpICkK KyAgICAgICAgcHV0X3BhZ2UocGcpOworCisgICAgcmV0dXJuIHJjOwogfQog CiBzdGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDRlKGw0X3BnZW50cnlfdCBs NGUsIHVuc2lnbmVkIGxvbmcgcGZuLAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBpbnQgcGFydGlhbCwgYm9vbCBkZWZlcikKIHsKKyAgICBpbnQg cmMgPSAxOworCiAgICAgaWYgKCAobDRlX2dldF9mbGFncyhsNGUpICYgX1BB R0VfUFJFU0VOVCkgJiYKICAgICAgICAgIChsNGVfZ2V0X3BmbihsNGUpICE9 IHBmbikgKQogICAgIHsKQEAgLTExNjUsMTggKzEyNjAsMjIgQEAgc3RhdGlj IGludCBwdXRfcGFnZV9mcm9tX2w0ZShsNF9wZ2VudHJ5X3QgbDRlLCB1bnNp Z25lZCBsb25nIHBmbiwKICAgICAgICAgaWYgKCB1bmxpa2VseShwYXJ0aWFs ID4gMCkgKQogICAgICAgICB7CiAgICAgICAgICAgICBBU1NFUlQoIWRlZmVy KTsKLSAgICAgICAgICAgIHJldHVybiBwdXRfcGFnZV90eXBlX3ByZWVtcHRp YmxlKHBnKTsKKyAgICAgICAgICAgIHJldHVybiBfcHV0X3BhZ2VfdHlwZShw ZywgdHJ1ZSwgbWZuX3RvX3BhZ2UoX21mbihwZm4pKSk7CiAgICAgICAgIH0K IAogICAgICAgICBpZiAoIGRlZmVyICkKICAgICAgICAgeworICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90b19wYWdl KF9tZm4ocGZuKSk7CiAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9n dWVzdF90YWJsZSA9IHBnOwogICAgICAgICAgICAgcmV0dXJuIDA7CiAgICAg ICAgIH0KIAotICAgICAgICByZXR1cm4gcHV0X3BhZ2VfYW5kX3R5cGVfcHJl ZW1wdGlibGUocGcpOworICAgICAgICByYyA9IF9wdXRfcGFnZV90eXBlKHBn LCB0cnVlLCBtZm5fdG9fcGFnZShfbWZuKHBmbikpKTsKKyAgICAgICAgaWYg KCBsaWtlbHkoIXJjKSApCisgICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAg ICAgfQotICAgIHJldHVybiAxOworCisgICAgcmV0dXJuIHJjOwogfQogCiBz dGF0aWMgaW50IGFsbG9jX2wxX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCkBAIC0xMzY5LDYgKzE0NjgsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2wz X3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiAgICAgICAgIHsKICAg ICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKICAgICAg ICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIGN1 cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAg ICAgICB9CiAgICAgICAgIHdoaWxlICggaS0tID4gMCApCkBAIC0xNDM4LDYg KzE1MzgsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2w0X3RhYmxlKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCiAgICAgICAgICAgICAgICAgewogICAgICAgICAg ICAgICAgICAgICBpZiAoIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxl ICkKICAgICAgICAgICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRl ZF9wdGVzKys7CisgICAgICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICBj dXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CiAgICAgICAg ICAgICAgICAgfQogICAgICAgICAgICAgfQpAQCAtMjExNywxNCArMjIxOCwy MCBAQCBpbnQgZnJlZV9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFn CiB9CiAKIAotc3RhdGljIGludCBfX3B1dF9maW5hbF9wYWdlX3R5cGUoCi0g ICAgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBl LCBpbnQgcHJlZW1wdGlibGUpCitzdGF0aWMgaW50IF9wdXRfZmluYWxfcGFn ZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcg dHlwZSwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbCBw cmVlbXB0aWJsZSwgc3RydWN0IHBhZ2VfaW5mbyAqcHRwZykKIHsKICAgICBp bnQgcmMgPSBmcmVlX3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJs ZSk7CiAKICAgICAvKiBObyBuZWVkIGZvciBhdG9taWMgdXBkYXRlIG9mIHR5 cGVfaW5mbyBoZXJlOiBub29uZSBlbHNlIHVwZGF0ZXMgaXQuICovCiAgICAg aWYgKCByYyA9PSAwICkKICAgICB7CisgICAgICAgIGlmICggcHRwZyAmJiBQ R1RfdHlwZV9lcXVhbCh0eXBlLCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykg KQorICAgICAgICB7CisgICAgICAgICAgICBkZWNfbGluZWFyX3VzZXMocGFn ZSk7CisgICAgICAgICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRwZyk7Cisg ICAgICAgIH0KKyAgICAgICAgQVNTRVJUKCFwYWdlLT5saW5lYXJfcHRfY291 bnQgfHwgcGFnZV9nZXRfb3duZXIocGFnZSktPmlzX2R5aW5nKTsKICAgICAg ICAgcGFnZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKHBhZ2UpOwogICAgICAg ICBzbXBfd21iKCk7CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZv LS07CkBAIC0yMTQ5LDggKzIyNTYsOCBAQCBzdGF0aWMgaW50IF9fcHV0X2Zp bmFsX3BhZ2VfdHlwZSgKIH0KIAogCi1zdGF0aWMgaW50IF9fcHV0X3BhZ2Vf dHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLAotICAgICAgICAgICAgICAg ICAgICAgICAgICAgaW50IHByZWVtcHRpYmxlKQorc3RhdGljIGludCBfcHV0 X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCBib29sIHByZWVt cHRpYmxlLAorICAgICAgICAgICAgICAgICAgICAgICAgICBzdHJ1Y3QgcGFn ZV9pbmZvICpwdHBnKQogewogICAgIHVuc2lnbmVkIGxvbmcgbngsIHgsIHkg PSBwYWdlLT51LmludXNlLnR5cGVfaW5mbzsKICAgICBpbnQgcmMgPSAwOwpA QCAtMjE3NywxMiArMjI4NCwyOCBAQCBzdGF0aWMgaW50IF9fcHV0X3BhZ2Vf dHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHgsIG54KSkgIT0geCkgKQog ICAgICAgICAgICAgICAgICAgICBjb250aW51ZTsKICAgICAgICAgICAgICAg ICAvKiBXZSBjbGVhcmVkIHRoZSAndmFsaWQgYml0JyBzbyB3ZSBkbyB0aGUg Y2xlYW4gdXAuICovCi0gICAgICAgICAgICAgICAgcmMgPSBfX3B1dF9maW5h bF9wYWdlX3R5cGUocGFnZSwgeCwgcHJlZW1wdGlibGUpOworICAgICAgICAg ICAgICAgIHJjID0gX3B1dF9maW5hbF9wYWdlX3R5cGUocGFnZSwgeCwgcHJl ZW1wdGlibGUsIHB0cGcpOworICAgICAgICAgICAgICAgIHB0cGcgPSBOVUxM OwogICAgICAgICAgICAgICAgIGlmICggeCAmIFBHVF9wYXJ0aWFsICkKICAg ICAgICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CiAgICAgICAgICAg ICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAKKyAgICAgICAgICAgIGlm ICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5 cGVfaW5mbykgKQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIC8q CisgICAgICAgICAgICAgICAgICogcGFnZV9zZXRfdGxiZmx1c2hfdGltZXN0 YW1wKCkgYWNjZXNzZXMgdGhlIHNhbWUgdW5pb24KKyAgICAgICAgICAgICAg ICAgKiBsaW5lYXJfcHRfY291bnQgbGl2ZXMgaW4uIFVudmFsaWRhdGVkIHBh Z2UgdGFibGUgcGFnZXMsCisgICAgICAgICAgICAgICAgICogaG93ZXZlciwg c2hvdWxkIG9jY3VyIGR1cmluZyBkb21haW4gZGVzdHJ1Y3Rpb24gb25seQor ICAgICAgICAgICAgICAgICAqIGFueXdheS4gIFVwZGF0aW5nIG9mIGxpbmVh cl9wdF9jb3VudCBsdWNraWx5IGlzIG5vdAorICAgICAgICAgICAgICAgICAq IG5lY2Vzc2FyeSBhbnltb3JlIGZvciBhIGR5aW5nIGRvbWFpbi4KKyAgICAg ICAgICAgICAgICAgKi8KKyAgICAgICAgICAgICAgICBBU1NFUlQocGFnZV9n ZXRfb3duZXIocGFnZSktPmlzX2R5aW5nKTsKKyAgICAgICAgICAgICAgICBB U1NFUlQocGFnZS0+bGluZWFyX3B0X2NvdW50IDwgMCk7CisgICAgICAgICAg ICAgICAgQVNTRVJUKHB0cGctPmxpbmVhcl9wdF9jb3VudCA+IDApOworICAg ICAgICAgICAgICAgIHB0cGcgPSBOVUxMOworICAgICAgICAgICAgfQorCiAg ICAgICAgICAgICBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAocGFnZSk7 CiAgICAgICAgIH0KIApAQCAtMjE5Myw2ICsyMzE2LDEzIEBAIHN0YXRpYyBp bnQgX19wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsCiAg ICAgICAgICAgICByZXR1cm4gLUVJTlRSOwogICAgIH0KIAorICAgIGlmICgg cHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVf aW5mbykgKQorICAgIHsKKyAgICAgICAgQVNTRVJUKCFyYyk7CisgICAgICAg IGRlY19saW5lYXJfdXNlcyhwYWdlKTsKKyAgICAgICAgZGVjX2xpbmVhcl9l bnRyaWVzKHB0cGcpOworICAgIH0KKwogICAgIHJldHVybiByYzsKIH0KIApA QCAtMjMzOCw2ICsyNDY4LDcgQEAgc3RhdGljIGludCBfX2dldF9wYWdlX3R5 cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBl LAogICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSAwOwog ICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSAwOwogICAgICAgICB9 CisgICAgICAgIHBhZ2UtPmxpbmVhcl9wdF9jb3VudCA9IDA7CiAgICAgICAg IHJjID0gYWxsb2NfcGFnZV90eXBlKHBhZ2UsIHR5cGUsIHByZWVtcHRpYmxl KTsKICAgICB9CiAKQEAgLTIzNTIsNyArMjQ4Myw3IEBAIHN0YXRpYyBpbnQg X19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2ln bmVkIGxvbmcgdHlwZSwKIAogdm9pZCBwdXRfcGFnZV90eXBlKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgaW50IHJjID0gX19wdXRfcGFnZV90 eXBlKHBhZ2UsIDApOworICAgIGludCByYyA9IF9wdXRfcGFnZV90eXBlKHBh Z2UsIGZhbHNlLCBOVUxMKTsKICAgICBBU1NFUlQocmMgPT0gMCk7CiAgICAg KHZvaWQpcmM7CiB9CkBAIC0yMzY4LDcgKzI0OTksNyBAQCBpbnQgZ2V0X3Bh Z2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25n IHR5cGUpCiAKIGludCBwdXRfcGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgcmV0dXJuIF9fcHV0X3BhZ2Vf dHlwZShwYWdlLCAxKTsKKyAgICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGFn ZSwgdHJ1ZSwgTlVMTCk7CiB9CiAKIGludCBnZXRfcGFnZV90eXBlX3ByZWVt cHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcg dHlwZSkKQEAgLTIzODQsMTEgKzI1MTUsMTQgQEAgaW50IHB1dF9vbGRfZ3Vl c3RfdGFibGUoc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCAhdi0+YXJjaC5v bGRfZ3Vlc3RfdGFibGUgKQogICAgICAgICByZXR1cm4gMDsKIAotICAgIHN3 aXRjaCAoIHJjID0gcHV0X3BhZ2VfYW5kX3R5cGVfcHJlZW1wdGlibGUodi0+ YXJjaC5vbGRfZ3Vlc3RfdGFibGUpICkKKyAgICBzd2l0Y2ggKCByYyA9IF9w dXRfcGFnZV90eXBlKHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlLCB0cnVlLAor ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdi0+YXJjaC5vbGRf Z3Vlc3RfcHRwZykgKQogICAgIHsKICAgICBjYXNlIC1FSU5UUjoKICAgICBj YXNlIC1FUkVTVEFSVDoKICAgICAgICAgcmV0dXJuIC1FUkVTVEFSVDsKKyAg ICBjYXNlIDA6CisgICAgICAgIHB1dF9wYWdlKHYtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlKTsKICAgICB9CiAKICAgICB2LT5hcmNoLm9sZF9ndWVzdF90YWJs ZSA9IE5VTEw7CkBAIC0yNTQ2LDYgKzI2ODAsNyBAQCBpbnQgbmV3X2d1ZXN0 X2NyMyhtZm5fdCBtZm4pCiAgICAgICAgICAgICAgICAgcmMgPSAtRVJFU1RB UlQ7CiAgICAgICAgICAgICAgICAgLyogZmFsbHRocm91Z2ggKi8KICAgICAg ICAgICAgIGNhc2UgLUVSRVNUQVJUOgorICAgICAgICAgICAgICAgIGN1cnIt PmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAg IGN1cnItPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsKICAgICAgICAg ICAgICAgICBicmVhazsKICAgICAgICAgICAgIGRlZmF1bHQ6CkBAIC0yODEy LDcgKzI5NDcsMTAgQEAgbG9uZyBkb19tbXVleHRfb3AoCiAgICAgICAgICAg ICAgICAgICAgIGlmICggdHlwZSA9PSBQR1RfbDFfcGFnZV90YWJsZSApCiAg ICAgICAgICAgICAgICAgICAgICAgICBwdXRfcGFnZV9hbmRfdHlwZShwYWdl KTsKICAgICAgICAgICAgICAgICAgICAgZWxzZQorICAgICAgICAgICAgICAg ICAgICB7CisgICAgICAgICAgICAgICAgICAgICAgICBjdXJyLT5hcmNoLm9s ZF9ndWVzdF9wdHBnID0gTlVMTDsKICAgICAgICAgICAgICAgICAgICAgICAg IGN1cnItPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsKKyAgICAgICAg ICAgICAgICAgICAgfQogICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAg IH0KICAgICAgICAgICAgIGJyZWFrOwpAQCAtMjg0NCw2ICsyOTgyLDcgQEAg bG9uZyBkb19tbXVleHRfb3AoCiAgICAgICAgICAgICB7CiAgICAgICAgICAg ICBjYXNlIC1FSU5UUjoKICAgICAgICAgICAgIGNhc2UgLUVSRVNUQVJUOgor ICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBO VUxMOwogICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3Rh YmxlID0gcGFnZTsKICAgICAgICAgICAgICAgICByYyA9IDA7CiAgICAgICAg ICAgICAgICAgYnJlYWs7CkBAIC0yOTE2LDYgKzMwNTUsNyBAQCBsb25nIGRv X21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgcmMgPSAtRVJFU1RB UlQ7CiAgICAgICAgICAgICAgICAgICAgIC8qIGZhbGx0aHJvdWdoICovCiAg ICAgICAgICAgICAgICAgY2FzZSAtRVJFU1RBUlQ6CisgICAgICAgICAgICAg ICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAg ICAgICAgICAgICAgICAgICBjdXJyLT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9 IHBhZ2U7CiAgICAgICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAg ICAgICAgIGRlZmF1bHQ6CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20t eDg2L2RvbWFpbi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaApp bmRleCA1N2RhMGZjMGI2Li41ZDQzZmY3ZjcxIDEwMDY0NAotLS0gYS94ZW4v aW5jbHVkZS9hc20teDg2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2Fz bS14ODYvZG9tYWluLmgKQEAgLTUzMSw2ICs1MzEsOCBAQCBzdHJ1Y3QgYXJj aF92Y3B1CiAgICAgcGFnZXRhYmxlX3QgZ3Vlc3RfdGFibGVfdXNlcjsgICAg ICAgLyogKE1GTikgeDg2LzY0IHVzZXItc3BhY2UgcGFnZXRhYmxlICovCiAg ICAgcGFnZXRhYmxlX3QgZ3Vlc3RfdGFibGU7ICAgICAgICAgICAgLyogKE1G TikgZ3Vlc3Qgbm90aW9uIG9mIGNyMyAqLwogICAgIHN0cnVjdCBwYWdlX2lu Zm8gKm9sZF9ndWVzdF90YWJsZTsgIC8qIHBhcnRpYWxseSBkZXN0cnVjdGVk IHBhZ2V0YWJsZSAqLworICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVz dF9wdHBnOyAgIC8qIGNvbnRhaW5pbmcgcGFnZSB0YWJsZSBvZiB0aGUgKi8K KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvKiBm b3JtZXIsIGlmIGFueSAqLwogICAgIC8qIGd1ZXN0X3RhYmxlIGhvbGRzIGEg cmVmIHRvIHRoZSBwYWdlLCBhbmQgYWxzbyBhIHR5cGUtY291bnQgdW5sZXNz CiAgICAgICogc2hhZG93IHJlZmNvdW50cyBhcmUgaW4gdXNlICovCiAgICAg cGFnZXRhYmxlX3Qgc2hhZG93X3RhYmxlWzRdOyAgICAgICAgLyogKE1GTikg c2hhZG93KHMpIG9mIGd1ZXN0ICovCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVk ZS9hc20teDg2L21tLmggYi94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgKaW5k ZXggZjJlMGY0OThjNC4uMjZmMDE1MzE2NCAxMDA2NDQKLS0tIGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9tbS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv bW0uaApAQCAtMTQxLDExICsxNDEsMTEgQEAgc3RydWN0IHBhZ2VfaW5mbwog ICAgICAgICB1MzIgdGxiZmx1c2hfdGltZXN0YW1wOwogCiAgICAgICAgIC8q Ci0gICAgICAgICAqIFdoZW4gUEdUX3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRo aXMgZmllbGQgaXMgdmFsaWQgYW5kIGluZGljYXRlcwotICAgICAgICAgKiB0 aGF0IFBURXMgaW4gdGhlIHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMp IGhhdmUgYmVlbiB2YWxpZGF0ZWQuCi0gICAgICAgICAqIEFuIGV4dHJhIHBh Z2UgcmVmZXJlbmNlIG11c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVk KSB3aGVuZXZlcgotICAgICAgICAgKiBQR1RfcGFydGlhbCBnZXRzIHNldCwg YW5kIGl0IG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBmbGFnIGdldHMKLSAg ICAgICAgICogY2xlYXJlZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVh dmluZyBhIHBhZ2UgaW4gcGFydGlhbGx5CisgICAgICAgICAqIFdoZW4gUEdU X3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRoZSBmaXJzdCB0d28gZmllbGRzIGFy ZSB2YWxpZCBhbmQKKyAgICAgICAgICogaW5kaWNhdGUgdGhhdCBQVEVzIGlu IHRoZSByYW5nZSBbMCwgQG5yX3ZhbGlkYXRlZF9wdGVzKSBoYXZlIGJlZW4K KyAgICAgICAgICogdmFsaWRhdGVkLiBBbiBleHRyYSBwYWdlIHJlZmVyZW5j ZSBtdXN0IGJlIGFjcXVpcmVkIChvciBub3QgZHJvcHBlZCkKKyAgICAgICAg ICogd2hlbmV2ZXIgUEdUX3BhcnRpYWwgZ2V0cyBzZXQsIGFuZCBpdCBtdXN0 IGJlIGRyb3BwZWQgd2hlbiB0aGUgZmxhZworICAgICAgICAgKiBnZXRzIGNs ZWFyZWQuIFRoaXMgaXMgc28gdGhhdCBhIGdldCgpIGxlYXZpbmcgYSBwYWdl IGluIHBhcnRpYWxseQogICAgICAgICAgKiB2YWxpZGF0ZWQgc3RhdGUgKHdo ZXJlIHRoZSBjYWxsZXIgd291bGQgZHJvcCB0aGUgcmVmZXJlbmNlIGFjcXVp cmVkCiAgICAgICAgICAqIGR1ZSB0byB0aGUgZ2V0dGluZyBvZiB0aGUgdHlw ZSBbYXBwYXJlbnRseV0gZmFpbGluZyBbLUVSRVNUQVJUXSkKICAgICAgICAg ICogd291bGQgbm90IGFjY2lkZW50YWxseSByZXN1bHQgaW4gYSBwYWdlIGxl ZnQgd2l0aCB6ZXJvIGdlbmVyYWwKQEAgLTE2OSwxMCArMTY5LDE4IEBAIHN0 cnVjdCBwYWdlX2luZm8KICAgICAgICAgICogcHV0X3BhZ2VfZnJvbV9sTmUo KSAoZHVlIHRvIHRoZSBhcHBhcmVudCBmYWlsdXJlKSwgYW5kIGhlbmNlIGl0 CiAgICAgICAgICAqIG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBwdXQgb3Bl cmF0aW9uIGlzIHJlc3VtZWQgKGFuZCBjb21wbGV0ZXMpLAogICAgICAgICAg KiBidXQgaXQgbXVzdCBub3QgYmUgYWNxdWlyZWQgaWYgcGlja2luZyB1cCB0 aGUgcGFnZSBmb3IgdmFsaWRhdGlvbi4KKyAgICAgICAgICoKKyAgICAgICAg ICogVGhlIDNyZCBmaWVsZCwgQGxpbmVhcl9wdF9jb3VudCwgaW5kaWNhdGVz CisgICAgICAgICAqIC0gYnkgYSBwb3NpdGl2ZSB2YWx1ZSwgaG93IG1hbnkg c2FtZS1sZXZlbCBwYWdlIHRhYmxlIGVudHJpZXMgYSBwYWdlCisgICAgICAg ICAqICAgdGFibGUgaGFzLAorICAgICAgICAgKiAtIGJ5IGEgbmVnYXRpdmUg dmFsdWUsIGluIGhvdyBtYW55IHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgYSBw YWdlIGlzCisgICAgICAgICAqICAgaW4gdXNlLgogICAgICAgICAgKi8KICAg ICAgICAgc3RydWN0IHsKLSAgICAgICAgICAgIHUxNiBucl92YWxpZGF0ZWRf cHRlczsKLSAgICAgICAgICAgIHM4IHBhcnRpYWxfcHRlOworICAgICAgICAg ICAgdTE2IG5yX3ZhbGlkYXRlZF9wdGVzOlBBR0VUQUJMRV9PUkRFUiArIDE7 CisgICAgICAgICAgICB1MTYgOjE2IC0gUEFHRVRBQkxFX09SREVSIC0gMSAt IDI7CisgICAgICAgICAgICBzMTYgcGFydGlhbF9wdGU6MjsKKyAgICAgICAg ICAgIHMxNiBsaW5lYXJfcHRfY291bnQ7CiAgICAgICAgIH07CiAKICAgICAg ICAgLyoKQEAgLTIyMyw2ICsyMzEsOSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAj ZGVmaW5lIFBHVF9jb3VudF93aWR0aCAgIFBHX3NoaWZ0KDgpCiAjZGVmaW5l IFBHVF9jb3VudF9tYXNrICAgICgoMVVMPDxQR1RfY291bnRfd2lkdGgpLTEp CiAKKy8qIEFyZSB0aGUgJ3R5cGUgbWFzaycgYml0cyBpZGVudGljYWw/ICov CisjZGVmaW5lIFBHVF90eXBlX2VxdWFsKHgsIHkpICghKCgoeCkgXiAoeSkp ICYgUEdUX3R5cGVfbWFzaykpCisKICAvKiBDbGVhcmVkIHdoZW4gdGhlIG93 bmluZyBndWVzdCAnZnJlZXMnIHRoaXMgcGFnZS4gKi8KICNkZWZpbmUgX1BH Q19hbGxvY2F0ZWQgICAgUEdfc2hpZnQoMSkKICNkZWZpbmUgUEdDX2FsbG9j YXRlZCAgICAgUEdfbWFzaygxLCAxKQotLSAKMi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-unstable/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-unstable/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSA5MGM2NDhiNGZkM2FhNGY4NWNhNTFkZGE2OTNiMTZmMjg2MDU4NjBi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAxMCArKysrKysrKysrCiAyIGZpbGVzIGNoYW5nZWQsIDI1IGlu c2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kb2NzL21pc2MveGVuLWNvbW1h bmQtbGluZS5tYXJrZG93biBiL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5l Lm1hcmtkb3duCmluZGV4IDk3OTdjOGRiMmQuLjJiZGU0MjRlOGUgMTAwNjQ0 Ci0tLSBhL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCisr KyBiL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCkBAIC0x NDIyLDYgKzE0MjIsMjEgQEAgVGhlIGZvbGxvd2luZyByZXNvdXJjZXMgYXJl IGF2YWlsYWJsZToKICAgICBDRFAsIG9uZSBDT1Mgd2lsbCBjb3Jlc3BvbmQg dHdvIENCTXMgb3RoZXIgdGhhbiBvbmUgd2l0aCBDQVQsIGR1ZSB0byB0aGUK ICAgICBzdW0gb2YgQ0JNcyBpcyBmaXhlZCwgdGhhdCBtZWFucyBhY3R1YWwg YGNvc19tYXhgIGluIHVzZSB3aWxsIGF1dG9tYXRpY2FsbHkKICAgICByZWR1 Y2UgdG8gaGFsZiB3aGVuIENEUCBpcyBlbmFibGVkLgorCQorIyMjIHB2LWxp bmVhci1wdAorPiBgPSA8Ym9vbGVhbj5gCisKKz4gRGVmYXVsdDogYGZhbHNl YAorCitBbGxvdyBQViBndWVzdHMgdG8gaGF2ZSBwYWdldGFibGUgZW50cmll cyBwb2ludGluZyB0byBvdGhlciBwYWdldGFibGVzCitvZiB0aGUgc2FtZSBs ZXZlbCAoaS5lLiwgYWxsb3dpbmcgTDIgUFRFcyB0byBwb2ludCB0byBvdGhl ciBMMiBwYWdlcykuCitUaGlzIHRlY2huaXF1ZSBpcyBvZnRlbiBjYWxsZWQg ImxpbmVhciBwYWdldGFibGVzIiwgYW5kIGlzIHNvbWV0aW1lcwordXNlZCB0 byBhbGxvdyBvcGVyYXRpbmcgc3lzdGVtcyBhIHNpbXBsZSB3YXkgdG8gY29u c2lzdGVudGx5IG1hcCB0aGUKK2N1cnJlbnQgcHJvY2VzcydzIHBhZ2V0YWJs ZXMgaW50byBpdHMgb3duIHZpcnR1YWwgYWRkcmVzcyBzcGFjZS4KKworTm9u ZSBvZiB0aGUgbW9zdCBjb21tb24gUFYgb3BlcmF0aW5nIHN5c3RlbXMgKExp bnV4LCBOZXRCU0QsIE1pbmlPUykKK3VzZSB0aGlzIHRlY2huaXF1ZSwgYnV0 IHRoZXJlIG1heSBiZSBjdXN0b20gb3BlcmF0aW5nIHN5c3RlbXMgd2hpY2gK K2RvLgogCiAjIyMgcmN1LWlkbGUtdGltZXItcGVyaW9kLW1zCiA+IGA9IDxp bnRlZ2VyPmAKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS5jIGIveGVu L2FyY2gveDg2L21tLmMKaW5kZXggOGIwMDI2NTg5ZC4uM2Y0NzA0N2FmMyAx MDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gv eDg2L21tLmMKQEAgLTY1NCw2ICs2NTQsOSBAQCBzdGF0aWMgdm9pZCBkZWNf bGluZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCiAgKiAgICAgZnJh bWUgaWYgaXQgaXMgbWFwcGVkIGJ5IGEgZGlmZmVyZW50IHJvb3QgdGFibGUu IFRoaXMgaXMgc3VmZmljaWVudCBhbmQKICAqICAgICBhbHNvIG5lY2Vzc2Fy eSB0byBhbGxvdyB2YWxpZGF0aW9uIG9mIGEgcm9vdCB0YWJsZSBtYXBwaW5n IGl0c2VsZi4KICAqLworc3RhdGljIGJvb2wgX19yZWFkX21vc3RseSBwdl9s aW5lYXJfcHRfZW5hYmxlID0gZmFsc2U7Citib29sZWFuX3BhcmFtKCJwdi1s aW5lYXItcHQiLCBwdl9saW5lYXJfcHRfZW5hYmxlKTsKKwogI2RlZmluZSBk ZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUobGV2ZWwpICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKIHN0YXRpYyBpbnQgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCiBnZXRfIyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUo ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XApAQCAtNjYzLDYgKzY2NiwxMyBAQCBnZXRfIyNsZXZlbCMjX2xpbmVhcl9w YWdldGFibGUoICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAogICAgIHN0cnVjdCBwYWdlX2luZm8gKnBhZ2U7ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK ICAgICB1bnNpZ25lZCBsb25nIHBmbjsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAorICAgIGlmICggIXB2X2xpbmVhcl9w dF9lbmFibGUgKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKKyAgICB7ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CisgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLCAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICAg ICAgICAgICAiQXR0ZW1wdCB0byBjcmVhdGUgbGluZWFyIHAudC4gKGZlYXR1 cmUgZGlzYWJsZWQpXG4iKTsgICAgIFwKKyAgICAgICAgcmV0dXJuIDA7ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCisgICAgfSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBpZiAo IChsZXZlbCMjZV9nZXRfZmxhZ3MocGRlKSAmIF9QQUdFX1JXKSApICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgeyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXAogICAgICAgICBnZHByaW50ayhYRU5MT0dfV0FSTklO RywgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKLS0gCjIuMTQuMQoK --=separator Content-Type: application/octet-stream; name="xsa240-unstable/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-unstable/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+Ci0tLQp2MjogUmUtZG8gZnJvbSBz Y3JhdGNoLgpUQkQ6IFRoZSBjb25kaXRpb25hbCB1c2VkIHdhcyBjaG9zZW4g dG8gYmUgYXMgbGl0dGxlIG9mIGEgY2hhbmdlIGluCiAgICAgYmVoYXZpb3Ig YXMgcG9zc2libGUuIFNpbmNlIHdoYXQgdGhlIGNoYW5nZWQgY29tbWVudCBz YXlzIGFwcGxpZXMKICAgICB0byBhbGwgcGFnZSB0YWJsZXMsIHRoZSBjb25k aXRpb24gY291bGQgYmUgZnVydGhlciByZWxheGVkIHN1Y2gKICAgICB0aGF0 IG9ubHkgbm9uLXBhZ2UtdGFibGUgcGFnZXMgd291bGQgYWN0dWFsbHkgaGF2 ZSB0aGVpciB0aW1lIHN0YW1wCiAgICAgc2V0IGhlcmUuCgotLS0gYS94ZW4v YXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjQ3 NywyNiArMjQ3NywxOSBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0 cnVjdCBwYWdlX2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg ICAgICB9CiAKLSNpZmRlZiBDT05GSUdfUFZfTElORUFSX1BUCi0gICAgICAg ICAgICBpZiAoIHB0cGcgJiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5p bnVzZS50eXBlX2luZm8pICkKKyAgICAgICAgICAgIGlmICggIXB0cGcgfHwg IVBHVF90eXBlX2VxdWFsKHgsIHB0cGctPnUuaW51c2UudHlwZV9pbmZvKSAp CiAgICAgICAgICAgICB7CiAgICAgICAgICAgICAgICAgLyoKICAgICAgICAg ICAgICAgICAgKiBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNjZXNzZXMg dGhlIHNhbWUgdW5pb24KLSAgICAgICAgICAgICAgICAgKiBsaW5lYXJfcHRf Y291bnQgbGl2ZXMgaW4uIFVudmFsaWRhdGVkIHBhZ2UgdGFibGUgcGFnZXMs Ci0gICAgICAgICAgICAgICAgICogaG93ZXZlciwgc2hvdWxkIG9jY3VyIGR1 cmluZyBkb21haW4gZGVzdHJ1Y3Rpb24gb25seQotICAgICAgICAgICAgICAg ICAqIGFueXdheS4gIFVwZGF0aW5nIG9mIGxpbmVhcl9wdF9jb3VudCBsdWNr aWx5IGlzIG5vdAotICAgICAgICAgICAgICAgICAqIG5lY2Vzc2FyeSBhbnlt b3JlIGZvciBhIGR5aW5nIGRvbWFpbi4KKyAgICAgICAgICAgICAgICAgKiBs aW5lYXJfcHRfY291bnQgbGl2ZXMgaW4uIFBhZ2VzIChpbmNsdWRpbmcgcGFn ZSB0YWJsZSBvbmVzKSwKKyAgICAgICAgICAgICAgICAgKiBob3dldmVyLCBk b24ndCBuZWVkIHRoZWlyIGZsdXNoIHRpbWUgc3RhbXAgc2V0IGV4Y2VwdCB3 aGVuCisgICAgICAgICAgICAgICAgICogdGhlIGxhc3QgcmVmZXJlbmNlIGlz IGJlaW5nIGRyb3BwZWQuIEZvciBwYWdlIHRhYmxlIHBhZ2VzCisgICAgICAg ICAgICAgICAgICogdGhpcyBoYXBwZW5zIGluIF9wdXRfZmluYWxfcGFnZV90 eXBlKCkuCiAgICAgICAgICAgICAgICAgICovCi0gICAgICAgICAgICAgICAg QVNTRVJUKHBhZ2VfZ2V0X293bmVyKHBhZ2UpLT5pc19keWluZyk7Ci0gICAg ICAgICAgICAgICAgQVNTRVJUKHBhZ2UtPmxpbmVhcl9wdF9jb3VudCA8IDAp OwotICAgICAgICAgICAgICAgIEFTU0VSVChwdHBnLT5saW5lYXJfcHRfY291 bnQgPiAwKTsKLSAgICAgICAgICAgICAgICBwdHBnID0gTlVMTDsKKyAgICAg ICAgICAgICAgICBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKHBhZ2UpOwogICAg ICAgICAgICAgfQotI2Vsc2UgLyogQ09ORklHX1BWX0xJTkVBUl9QVCAqLwot ICAgICAgICAgICAgQlVHX09OKHB0cGcgJiYgUEdUX3R5cGVfZXF1YWwoeCwg cHRwZy0+dS5pbnVzZS50eXBlX2luZm8pKTsKLSNlbmRpZgotCi0gICAgICAg ICAgICBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKHBhZ2UpOworICAgICAgICAg ICAgZWxzZQorICAgICAgICAgICAgICAgIEJVR19PTighSVNfRU5BQkxFRChD T05GSUdfUFZfTElORUFSX1BUKSk7CiAgICAgICAgIH0KICAgICAgICAgZWxz ZSBpZiAoIHVubGlrZWx5KChueCAmIChQR1RfbG9ja2VkIHwgUEdUX2NvdW50 X21hc2spKSA9PQogICAgICAgICAgICAgICAgICAgICAgICAgICAgKFBHVF9s b2NrZWQgfCAxKSkgKQo= --=separator Content-Type: application/octet-stream; name="xsa240-unstable/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-unstable/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI0MzYsNyArMjQzNiw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIHNldF90bGJmbHVzaF90aW1lc3RhbXAocGFnZSk7CiAgICAg ICAgIHNtcF93bWIoKTsKICAgICAgICAgcGFnZS0+dS5pbnVzZS50eXBlX2lu Zm8gfD0gUEdUX3ZhbGlkYXRlZDsKICAgICB9Cg== --=separator Content-Type: application/octet-stream; name="xsa240-4.5/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-4.5/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSA3OGE3NjNiOTRmZWVkNWY3MjZlOGRmZTk1M2ZkODRlZjZiYzFiZWNi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMjggU2VwIDIwMTcgMTU6 MTc6MjkgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAgIDEgKwog eGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MSArKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tCiB4ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14 ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogeGVuL2luY2x1ZGUvYXNtLXg4 Ni9zeXN0ZW0uaCB8ICA0NiArKysrKysrKysrKysKIDUgZmlsZXMgY2hhbmdl ZCwgMjIxIGluc2VydGlvbnMoKyksIDI0IGRlbGV0aW9ucygtKQoKZGlmZiAt LWdpdCBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9k b21haW4uYwppbmRleCAyNTk2YmZmYjIxLi5hZTFhYmY3NDY1IDEwMDY0NAot LS0gYS94ZW4vYXJjaC94ODYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2 L2RvbWFpbi5jCkBAIC0xMDMxLDYgKzEwMzEsNyBAQCBpbnQgYXJjaF9zZXRf aW5mb19ndWVzdCgKICAgICAgICAgICAgICAgICBjYXNlIC1FSU5UUjoKICAg ICAgICAgICAgICAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CiAgICAgICAgICAg ICAgICAgY2FzZSAtRVJFU1RBUlQ6CisgICAgICAgICAgICAgICAgICAgIHYt PmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAg ICAgICB2LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9CiAgICAgICAgICAgICAg ICAgICAgICAgICBwYWdldGFibGVfZ2V0X3BhZ2Uodi0+YXJjaC5ndWVzdF90 YWJsZSk7CiAgICAgICAgICAgICAgICAgICAgIHYtPmFyY2guZ3Vlc3RfdGFi bGUgPSBwYWdldGFibGVfbnVsbCgpOwpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwppbmRleCAyNTAzOGZhOTk2 Li43YjRiZjFmN2ViIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0uYwor KysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNjY3LDYgKzY2Nyw2MSBAQCBz dGF0aWMgdm9pZCBwdXRfZGF0YV9wYWdlKAogICAgICAgICBwdXRfcGFnZShw YWdlKTsKIH0KIAorc3RhdGljIGJvb2xfdCBpbmNfbGluZWFyX2VudHJpZXMo c3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5l YXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJfcHRf Y291bnQpLCBvYzsKKworICAgIGRvIHsKKyAgICAgICAgLyoKKyAgICAgICAg ICogVGhlIGNoZWNrIGJlbG93IGNoZWNrcyBmb3IgdGhlICJsaW5lYXIgdXNl IiBjb3VudCBiZWluZyBub24temVybworICAgICAgICAgKiBhcyB3ZWxsIGFz IG92ZXJmbG93LiAgU2lnbmVkIGludGVnZXIgb3ZlcmZsb3cgaXMgdW5kZWZp bmVkIGJlaGF2aW9yCisgICAgICAgICAqIGFjY29yZGluZyB0byB0aGUgQyBz cGVjLiAgSG93ZXZlciwgYXMgbG9uZyBhcyBsaW5lYXJfcHRfY291bnQgaXMK KyAgICAgICAgICogc21hbGxlciBpbiBzaXplIHRoYW4gJ2ludCcsIHRoZSBh cml0aG1ldGljIG9wZXJhdGlvbiBvZiB0aGUKKyAgICAgICAgICogaW5jcmVt ZW50IGJlbG93IHdvbid0IG92ZXJmbG93OyByYXRoZXIgdGhlIHJlc3VsdCB3 aWxsIGJlIHRydW5jYXRlZAorICAgICAgICAgKiB3aGVuIHN0b3JlZC4gIEVu c3VyZSB0aGF0IHRoaXMgaXMgYWx3YXlzIHRydWUuCisgICAgICAgICAqLwor ICAgICAgICBCVUlMRF9CVUdfT04oc2l6ZW9mKG5jKSA+PSBzaXplb2YoaW50 KSk7CisgICAgICAgIG9jID0gbmMrKzsKKyAgICAgICAgaWYgKCBuYyA8PSAw ICkKKyAgICAgICAgICAgIHJldHVybiAwOworICAgICAgICBuYyA9IGNtcHhj aGcoJnBnLT5saW5lYXJfcHRfY291bnQsIG9jLCBuYyk7CisgICAgfSB3aGls ZSAoIG9jICE9IG5jICk7CisKKyAgICByZXR1cm4gMTsKK30KKworc3RhdGlj IHZvaWQgZGVjX2xpbmVhcl9lbnRyaWVzKHN0cnVjdCBwYWdlX2luZm8gKnBn KQoreworICAgIHR5cGVvZihwZy0+bGluZWFyX3B0X2NvdW50KSBvYzsKKwor ICAgIG9jID0gYXJjaF9mZXRjaF9hbmRfYWRkKCZwZy0+bGluZWFyX3B0X2Nv dW50LCAtMSk7CisgICAgQVNTRVJUKG9jID4gMCk7Cit9CisKK3N0YXRpYyBi b29sX3QgaW5jX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQor eworICAgIHR5cGVvZihwZy0+bGluZWFyX3B0X2NvdW50KSBuYyA9IHJlYWRf YXRvbWljKCZwZy0+bGluZWFyX3B0X2NvdW50KSwgb2M7CisKKyAgICBkbyB7 CisgICAgICAgIC8qIFNlZSB0aGUgcmVzcGVjdGl2ZSBjb21tZW50IGluIGlu Y19saW5lYXJfZW50cmllcygpLiAqLworICAgICAgICBCVUlMRF9CVUdfT04o c2l6ZW9mKG5jKSA+PSBzaXplb2YoaW50KSk7CisgICAgICAgIG9jID0gbmMt LTsKKyAgICAgICAgaWYgKCBuYyA+PSAwICkKKyAgICAgICAgICAgIHJldHVy biAwOworICAgICAgICBuYyA9IGNtcHhjaGcoJnBnLT5saW5lYXJfcHRfY291 bnQsIG9jLCBuYyk7CisgICAgfSB3aGlsZSAoIG9jICE9IG5jICk7CisKKyAg ICByZXR1cm4gMTsKK30KKworc3RhdGljIHZvaWQgZGVjX2xpbmVhcl91c2Vz KHN0cnVjdCBwYWdlX2luZm8gKnBnKQoreworICAgIHR5cGVvZihwZy0+bGlu ZWFyX3B0X2NvdW50KSBvYzsKKworICAgIG9jID0gYXJjaF9mZXRjaF9hbmRf YWRkKCZwZy0+bGluZWFyX3B0X2NvdW50LCAxKTsKKyAgICBBU1NFUlQob2Mg PCAwKTsKK30KKwogLyoKICAqIFdlIGFsbG93IHJvb3QgdGFibGVzIHRvIG1h cCBlYWNoIG90aGVyIChhLmsuYS4gbGluZWFyIHBhZ2UgdGFibGVzKS4gSXQK ICAqIG5lZWRzIHNvbWUgc3BlY2lhbCBjYXJlIHdpdGggcmVmZXJlbmNlIGNv dW50cyBhbmQgYWNjZXNzIHBlcm1pc3Npb25zOgpAQCAtNjk2LDE1ICs3NTEs MzUgQEAgZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFnZXRhYmxlKCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgaWYgKCAocGZuID0g bGV2ZWwjI2VfZ2V0X3BmbihwZGUpKSAhPSBwZGVfcGZuICkgICAgICAgICAg ICAgICAgICAgICAgICAgXAogICAgIHsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcHRwZyA9IG1mbl90 b19wYWdlKHBkZV9wZm4pOyAgICAgICAgICAgICAgICAgICAgICBcCisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICAvKiBNYWtl IHN1cmUgdGhlIHBhZ2UgdGFibGUgYmVsb25ncyB0byB0aGUgY29ycmVjdCBk b21haW4uICovICAgICAgIFwKKyAgICAgICAgaWYgKCB1bmxpa2VseShwYWdl X2dldF9vd25lcihwdHBnKSAhPSBkKSApICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgLyogTWFr ZSBzdXJlIHRoZSBtYXBwZWQgZnJhbWUgYmVsb25ncyB0byB0aGUgY29ycmVj dCBkb21haW4uICovICAgICBcCiAgICAgICAgIGlmICggdW5saWtlbHkoIWdl dF9wYWdlX2Zyb21fcGFnZW5yKHBmbiwgZCkpICkgICAgICAgICAgICAgICAg ICAgICAgXAogICAgICAgICAgICAgcmV0dXJuIDA7ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgIC8qICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAotICAgICAgICAgKiBFbnN1cmUgdGhhdCB0 aGUgbWFwcGVkIGZyYW1lIGlzIGFuIGFscmVhZHktdmFsaWRhdGVkIHBhZ2Ug dGFibGUuIFwKKyAgICAgICAgICogRW5zdXJlIHRoYXQgdGhlIG1hcHBlZCBm cmFtZSBpcyBhbiBhbHJlYWR5LXZhbGlkYXRlZCBwYWdlIHRhYmxlICBcCisg ICAgICAgICAqIGFuZCBpcyBub3QgaXRzZWxmIGhhdmluZyBsaW5lYXIgZW50 cmllcywgYXMgd2VsbCBhcyB0aGF0IHRoZSAgICAgXAorICAgICAgICAgKiBj b250YWluaW5nIHBhZ2UgdGFibGUgaXMgbm90IGlzZWxmIGluIHVzZSBhcyBh IGxpbmVhciBwYWdlIHRhYmxlIFwKKyAgICAgICAgICogZWxzZXdoZXJlLiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCiAgICAgICAgICAqIElmIHNvLCBhdG9taWNhbGx5IGluY3Jl bWVudCB0aGUgY291bnQgKGNoZWNraW5nIGZvciBvdmVyZmxvdykuICAgXAog ICAgICAgICAgKi8gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgcGFn ZSA9IG1mbl90b19wYWdlKHBmbik7ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgIGlmICggIWluY19saW5l YXJfZW50cmllcyhwdHBnKSApICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAorICAgICAgICB7ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK KyAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAg ICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICB9ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKKyAgICAgICAgaWYgKCAhaW5jX2xpbmVhcl91c2VzKHBh Z2UpICkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CisgICAgICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICAg ICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0cGcpOyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHB1dF9wYWdl KHBhZ2UpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAorICAgICAgICB9ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAg eSA9IHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvOyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgIGRvIHsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXAogICAgICAgICAgICAgeCA9IHk7ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKQEAgLTcxMiw2ICs3ODcsOCBAQCBnZXRfIyNsZXZlbCMjX2xpbmVhcl9w YWdldGFibGUoICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAogICAgICAgICAgICAgICAgICB1bmxpa2VseSgoeCAmIChQ R1RfdHlwZV9tYXNrfFBHVF92YWxpZGF0ZWQpKSAhPSAgICAgICAgICAgIFwK ICAgICAgICAgICAgICAgICAgICAgICAgICAgKFBHVF8jI2xldmVsIyNfcGFn ZV90YWJsZXxQR1RfdmFsaWRhdGVkKSkgKSAgICAgICBcCiAgICAgICAgICAg ICB7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICAgICAgICAgIGRlY19s aW5lYXJfdXNlcyhwYWdlKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKKyAgICAgICAgICAgICAgICBkZWNfbGluZWFyX2VudHJp ZXMocHRwZyk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CiAgICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAg ICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgICAgIH0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCkBAIC0xMDgyLDYgKzExNTksOSBAQCBnZXRfcGFnZV9m cm9tX2w0ZSgKICAgICAgICAgICAgIGwzZV9yZW1vdmVfZmxhZ3MoKHBsM2Up LCBfUEFHRV9VU0VSfF9QQUdFX1JXfF9QQUdFX0FDQ0VTU0VEKTsgICBcCiAg ICAgfSB3aGlsZSAoIDAgKQogCitzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBl KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIGJvb2xfdCBwcmVlbXB0aWJsZSwK KyAgICAgICAgICAgICAgICAgICAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAq cHRwZyk7CisKIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90 IGwxZSwgc3RydWN0IGRvbWFpbiAqbDFlX293bmVyKQogewogICAgIHVuc2ln bmVkIGxvbmcgICAgIHBmbiA9IGwxZV9nZXRfcGZuKGwxZSk7CkBAIC0xMTUx LDE3ICsxMjMxLDIyIEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUo bDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4pCiAgICAgaWYg KCBsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0UgKQogICAgICAgICBw dXRfc3VwZXJwYWdlKGwyZV9nZXRfcGZuKGwyZSkpOwogICAgIGVsc2UKLSAg ICAgICAgcHV0X3BhZ2VfYW5kX3R5cGUobDJlX2dldF9wYWdlKGwyZSkpOwor ICAgIHsKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcGcgPSBsMmVfZ2V0 X3BhZ2UobDJlKTsKKyAgICAgICAgaW50IHJjID0gX3B1dF9wYWdlX3R5cGUo cGcsIDAsIG1mbl90b19wYWdlKHBmbikpOworCisgICAgICAgIEFTU0VSVCgh cmMpOworICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgfQogCiAgICAgcmV0 dXJuIDA7CiB9CiAKLXN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBlKHN0cnVj dCBwYWdlX2luZm8gKiwgaW50IHByZWVtcHRpYmxlKTsKLQogc3RhdGljIGlu dCBwdXRfcGFnZV9mcm9tX2wzZShsM19wZ2VudHJ5X3QgbDNlLCB1bnNpZ25l ZCBsb25nIHBmbiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50 IHBhcnRpYWwsIGJvb2xfdCBkZWZlcikKIHsKICAgICBzdHJ1Y3QgcGFnZV9p bmZvICpwZzsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAoICEobDNlX2dldF9m bGFncyhsM2UpICYgX1BBR0VfUFJFU0VOVCkgfHwgKGwzZV9nZXRfcGZuKGwz ZSkgPT0gcGZuKSApCiAgICAgICAgIHJldHVybiAxOwpAQCAtMTE4NCwyMSAr MTI2OSwyOCBAQCBzdGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDNlKGwzX3Bn ZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcgcGZuLAogICAgIGlmICggdW5s aWtlbHkocGFydGlhbCA+IDApICkKICAgICB7CiAgICAgICAgIEFTU0VSVCgh ZGVmZXIpOwotICAgICAgICByZXR1cm4gX19wdXRfcGFnZV90eXBlKHBnLCAx KTsKKyAgICAgICAgcmV0dXJuIF9wdXRfcGFnZV90eXBlKHBnLCAxLCBtZm5f dG9fcGFnZShwZm4pKTsKICAgICB9CiAKICAgICBpZiAoIGRlZmVyICkKICAg ICB7CisgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBt Zm5fdG9fcGFnZShwZm4pOwogICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9n dWVzdF90YWJsZSA9IHBnOwogICAgICAgICByZXR1cm4gMDsKICAgICB9CiAK LSAgICByZXR1cm4gcHV0X3BhZ2VfYW5kX3R5cGVfcHJlZW1wdGlibGUocGcp OworICAgIHJjID0gX3B1dF9wYWdlX3R5cGUocGcsIDEsIG1mbl90b19wYWdl KHBmbikpOworICAgIGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICBwdXRf cGFnZShwZyk7CisKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQg cHV0X3BhZ2VfZnJvbV9sNGUobDRfcGdlbnRyeV90IGw0ZSwgdW5zaWduZWQg bG9uZyBwZm4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGludCBw YXJ0aWFsLCBib29sX3QgZGVmZXIpCiB7CisgICAgaW50IHJjID0gMTsKKwog ICAgIGlmICggKGw0ZV9nZXRfZmxhZ3MobDRlKSAmIF9QQUdFX1BSRVNFTlQp ICYmIAogICAgICAgICAgKGw0ZV9nZXRfcGZuKGw0ZSkgIT0gcGZuKSApCiAg ICAgewpAQCAtMTIwNywxOCArMTI5OSwyMiBAQCBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDRlKGw0X3BnZW50cnlfdCBsNGUsIHVuc2lnbmVkIGxvbmcg cGZuLAogICAgICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAwKSApCiAg ICAgICAgIHsKICAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOwotICAgICAg ICAgICAgcmV0dXJuIF9fcHV0X3BhZ2VfdHlwZShwZywgMSk7CisgICAgICAg ICAgICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGcsIDEsIG1mbl90b19wYWdl KHBmbikpOwogICAgICAgICB9CiAKICAgICAgICAgaWYgKCBkZWZlciApCiAg ICAgICAgIHsKKyAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0 X3B0cGcgPSBtZm5fdG9fcGFnZShwZm4pOwogICAgICAgICAgICAgY3VycmVu dC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwZzsKICAgICAgICAgICAgIHJl dHVybiAwOwogICAgICAgICB9CiAKLSAgICAgICAgcmV0dXJuIHB1dF9wYWdl X2FuZF90eXBlX3ByZWVtcHRpYmxlKHBnKTsKKyAgICAgICAgcmMgPSBfcHV0 X3BhZ2VfdHlwZShwZywgMSwgbWZuX3RvX3BhZ2UocGZuKSk7CisgICAgICAg IGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICAgICAgcHV0X3BhZ2UocGcp OwogICAgIH0KLSAgICByZXR1cm4gMTsKKworICAgIHJldHVybiByYzsKIH0K IAogc3RhdGljIGludCBhbGxvY19sMV90YWJsZShzdHJ1Y3QgcGFnZV9pbmZv ICpwYWdlKQpAQCAtMTQxNiw2ICsxNTEyLDcgQEAgc3RhdGljIGludCBhbGxv Y19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlKQogICAgICAgICB7 CiAgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CiAg ICAgICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAg ICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gTlVMTDsKICAgICAg ICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsK ICAgICAgICAgfQogICAgICAgICB3aGlsZSAoIGktLSA+IDAgKQpAQCAtMTQ4 MSw2ICsxNTc4LDcgQEAgc3RhdGljIGludCBhbGxvY19sNF90YWJsZShzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlKQogICAgICAgICAgICAgICAgIHsKICAgICAg ICAgICAgICAgICAgICAgaWYgKCBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90 YWJsZSApCiAgICAgICAgICAgICAgICAgICAgICAgICBwYWdlLT5ucl92YWxp ZGF0ZWRfcHRlcysrOworICAgICAgICAgICAgICAgICAgICBjdXJyZW50LT5h cmNoLm9sZF9ndWVzdF9wdHBnID0gTlVMTDsKICAgICAgICAgICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAg ICAgICAgICAgICAgIH0KICAgICAgICAgICAgIH0KQEAgLTIyMTMsMTQgKzIz MTEsMjAgQEAgaW50IGZyZWVfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2luZm8g KnBhZwogfQogCiAKLXN0YXRpYyBpbnQgX19wdXRfZmluYWxfcGFnZV90eXBl KAotICAgIHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcg dHlwZSwgaW50IHByZWVtcHRpYmxlKQorc3RhdGljIGludCBfcHV0X2ZpbmFs X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBs b25nIHR5cGUsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJv b2xfdCBwcmVlbXB0aWJsZSwgc3RydWN0IHBhZ2VfaW5mbyAqcHRwZykKIHsK ICAgICBpbnQgcmMgPSBmcmVlX3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVl bXB0aWJsZSk7CiAKICAgICAvKiBObyBuZWVkIGZvciBhdG9taWMgdXBkYXRl IG9mIHR5cGVfaW5mbyBoZXJlOiBub29uZSBlbHNlIHVwZGF0ZXMgaXQuICov CiAgICAgaWYgKCByYyA9PSAwICkKICAgICB7CisgICAgICAgIGlmICggcHRw ZyAmJiBQR1RfdHlwZV9lcXVhbCh0eXBlLCBwdHBnLT51LmludXNlLnR5cGVf aW5mbykgKQorICAgICAgICB7CisgICAgICAgICAgICBkZWNfbGluZWFyX3Vz ZXMocGFnZSk7CisgICAgICAgICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRw Zyk7CisgICAgICAgIH0KKyAgICAgICAgQVNTRVJUKCFwYWdlLT5saW5lYXJf cHRfY291bnQgfHwgcGFnZV9nZXRfb3duZXIocGFnZSktPmlzX2R5aW5nKTsK ICAgICAgICAgLyoKICAgICAgICAgICogUmVjb3JkIFRMQiBpbmZvcm1hdGlv biBmb3IgZmx1c2ggbGF0ZXIuIFdlIGRvIG5vdCBzdGFtcCBwYWdlIHRhYmxl cwogICAgICAgICAgKiB3aGVuIHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CkBA IC0yMjU2LDggKzIzNjAsOCBAQCBzdGF0aWMgaW50IF9fcHV0X2ZpbmFsX3Bh Z2VfdHlwZSgKIH0KIAogCi1zdGF0aWMgaW50IF9fcHV0X3BhZ2VfdHlwZShz dHJ1Y3QgcGFnZV9pbmZvICpwYWdlLAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgaW50IHByZWVtcHRpYmxlKQorc3RhdGljIGludCBfcHV0X3BhZ2Vf dHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCBib29sX3QgcHJlZW1wdGli bGUsCisgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCBwYWdlX2lu Zm8gKnB0cGcpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBueCwgeCwgeSA9IHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvOwogICAgIGludCByYyA9IDA7CkBAIC0y Mjg0LDEyICsyMzg4LDI4IEBAIHN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBl KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgeCwgbngpKSAhPSB4KSApCiAgICAg ICAgICAgICAgICAgICAgIGNvbnRpbnVlOwogICAgICAgICAgICAgICAgIC8q IFdlIGNsZWFyZWQgdGhlICd2YWxpZCBiaXQnIHNvIHdlIGRvIHRoZSBjbGVh biB1cC4gKi8KLSAgICAgICAgICAgICAgICByYyA9IF9fcHV0X2ZpbmFsX3Bh Z2VfdHlwZShwYWdlLCB4LCBwcmVlbXB0aWJsZSk7CisgICAgICAgICAgICAg ICAgcmMgPSBfcHV0X2ZpbmFsX3BhZ2VfdHlwZShwYWdlLCB4LCBwcmVlbXB0 aWJsZSwgcHRwZyk7CisgICAgICAgICAgICAgICAgcHRwZyA9IE5VTEw7CiAg ICAgICAgICAgICAgICAgaWYgKCB4ICYgUEdUX3BhcnRpYWwgKQogICAgICAg ICAgICAgICAgICAgICBwdXRfcGFnZShwYWdlKTsKICAgICAgICAgICAgICAg ICBicmVhazsKICAgICAgICAgICAgIH0KIAorICAgICAgICAgICAgaWYgKCBw dHBnICYmIFBHVF90eXBlX2VxdWFsKHgsIHB0cGctPnUuaW51c2UudHlwZV9p bmZvKSApCisgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgLyoKKyAg ICAgICAgICAgICAgICAgKiBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAo KSBhY2Nlc3NlcyB0aGUgc2FtZSB1bmlvbgorICAgICAgICAgICAgICAgICAq IGxpbmVhcl9wdF9jb3VudCBsaXZlcyBpbi4gVW52YWxpZGF0ZWQgcGFnZSB0 YWJsZSBwYWdlcywKKyAgICAgICAgICAgICAgICAgKiBob3dldmVyLCBzaG91 bGQgb2NjdXIgZHVyaW5nIGRvbWFpbiBkZXN0cnVjdGlvbiBvbmx5CisgICAg ICAgICAgICAgICAgICogYW55d2F5LiAgVXBkYXRpbmcgb2YgbGluZWFyX3B0 X2NvdW50IGx1Y2tpbHkgaXMgbm90CisgICAgICAgICAgICAgICAgICogbmVj ZXNzYXJ5IGFueW1vcmUgZm9yIGEgZHlpbmcgZG9tYWluLgorICAgICAgICAg ICAgICAgICAqLworICAgICAgICAgICAgICAgIEFTU0VSVChwYWdlX2dldF9v d25lcihwYWdlKS0+aXNfZHlpbmcpOworICAgICAgICAgICAgICAgIEFTU0VS VChwYWdlLT5saW5lYXJfcHRfY291bnQgPCAwKTsKKyAgICAgICAgICAgICAg ICBBU1NFUlQocHRwZy0+bGluZWFyX3B0X2NvdW50ID4gMCk7CisgICAgICAg ICAgICAgICAgcHRwZyA9IE5VTEw7CisgICAgICAgICAgICB9CisKICAgICAg ICAgICAgIC8qCiAgICAgICAgICAgICAgKiBSZWNvcmQgVExCIGluZm9ybWF0 aW9uIGZvciBmbHVzaCBsYXRlci4gV2UgZG8gbm90IHN0YW1wIHBhZ2UKICAg ICAgICAgICAgICAqIHRhYmxlcyB3aGVuIHJ1bm5pbmcgaW4gc2hhZG93IG1v ZGU6CkBAIC0yMzA5LDYgKzI0MjksMTMgQEAgc3RhdGljIGludCBfX3B1dF9w YWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwKICAgICAgICAgICAg IHJldHVybiAtRUlOVFI7CiAgICAgfQogCisgICAgaWYgKCBwdHBnICYmIFBH VF90eXBlX2VxdWFsKHgsIHB0cGctPnUuaW51c2UudHlwZV9pbmZvKSApCisg ICAgeworICAgICAgICBBU1NFUlQoIXJjKTsKKyAgICAgICAgZGVjX2xpbmVh cl91c2VzKHBhZ2UpOworICAgICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRw Zyk7CisgICAgfQorCiAgICAgcmV0dXJuIHJjOwogfQogCkBAIC0yNDQzLDYg KzI1NzAsNyBAQCBzdGF0aWMgaW50IF9fZ2V0X3BhZ2VfdHlwZShzdHJ1Y3Qg cGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUsCiAgICAgICAg ICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IDA7CiAgICAgICAgICAg ICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CiAgICAgICAgIH0KKyAgICAgICAg cGFnZS0+bGluZWFyX3B0X2NvdW50ID0gMDsKICAgICAgICAgcmMgPSBhbGxv Y19wYWdlX3R5cGUocGFnZSwgdHlwZSwgcHJlZW1wdGlibGUpOwogICAgIH0K IApAQCAtMjQ1NCw3ICsyNTgyLDcgQEAgc3RhdGljIGludCBfX2dldF9wYWdl X3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0 eXBlLAogCiB2b2lkIHB1dF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAq cGFnZSkKIHsKLSAgICBpbnQgcmMgPSBfX3B1dF9wYWdlX3R5cGUocGFnZSwg MCk7CisgICAgaW50IHJjID0gX3B1dF9wYWdlX3R5cGUocGFnZSwgMCwgTlVM TCk7CiAgICAgQVNTRVJUKHJjID09IDApOwogICAgICh2b2lkKXJjOwogfQpA QCAtMjQ3MCw3ICsyNTk4LDcgQEAgaW50IGdldF9wYWdlX3R5cGUoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBlKQogCiBpbnQg cHV0X3BhZ2VfdHlwZV9wcmVlbXB0aWJsZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlKQogewotICAgIHJldHVybiBfX3B1dF9wYWdlX3R5cGUocGFnZSwgMSk7 CisgICAgcmV0dXJuIF9wdXRfcGFnZV90eXBlKHBhZ2UsIDEsIE5VTEwpOwog fQogCiBpbnQgZ2V0X3BhZ2VfdHlwZV9wcmVlbXB0aWJsZShzdHJ1Y3QgcGFn ZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUpCkBAIC0yNjc2LDEx ICsyODA0LDE0IEBAIGludCBwdXRfb2xkX2d1ZXN0X3RhYmxlKHN0cnVjdCB2 Y3B1ICp2KQogICAgIGlmICggIXYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlICkK ICAgICAgICAgcmV0dXJuIDA7CiAKLSAgICBzd2l0Y2ggKCByYyA9IHB1dF9w YWdlX2FuZF90eXBlX3ByZWVtcHRpYmxlKHYtPmFyY2gub2xkX2d1ZXN0X3Rh YmxlKSApCisgICAgc3dpdGNoICggcmMgPSBfcHV0X3BhZ2VfdHlwZSh2LT5h cmNoLm9sZF9ndWVzdF90YWJsZSwgMSwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHYtPmFyY2gub2xkX2d1ZXN0X3B0cGcpICkKICAgICB7 CiAgICAgY2FzZSAtRUlOVFI6CiAgICAgY2FzZSAtRVJFU1RBUlQ6CiAgICAg ICAgIHJldHVybiAtRVJFU1RBUlQ7CisgICAgY2FzZSAwOgorICAgICAgICBw dXRfcGFnZSh2LT5hcmNoLm9sZF9ndWVzdF90YWJsZSk7CiAgICAgfQogCiAg ICAgdi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBOVUxMOwpAQCAtMjgzNCw2 ICsyOTY1LDcgQEAgaW50IG5ld19ndWVzdF9jcjModW5zaWduZWQgbG9uZyBt Zm4pCiAgICAgICAgICAgICBjYXNlIC1FSU5UUjoKICAgICAgICAgICAgICAg ICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAgIGNhc2UgLUVSRVNUQVJU OgorICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcg PSBOVUxMOwogICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGFnZTsKICAgICAgICAgICAgICAgICBicmVhazsKICAgICAg ICAgICAgIGRlZmF1bHQ6CkBAIC0zMDc5LDcgKzMyMTEsMTAgQEAgbG9uZyBk b19tbXVleHRfb3AoCiAgICAgICAgICAgICAgICAgICAgIGlmICggdHlwZSA9 PSBQR1RfbDFfcGFnZV90YWJsZSApCiAgICAgICAgICAgICAgICAgICAgICAg ICBwdXRfcGFnZV9hbmRfdHlwZShwYWdlKTsKICAgICAgICAgICAgICAgICAg ICAgZWxzZQorICAgICAgICAgICAgICAgICAgICB7CisgICAgICAgICAgICAg ICAgICAgICAgICBjdXJyLT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gTlVMTDsK ICAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGFnZTsKKyAgICAgICAgICAgICAgICAgICAgfQogICAgICAg ICAgICAgICAgIH0KICAgICAgICAgICAgIH0KIApAQCAtMzExMiw2ICszMjQ3 LDcgQEAgbG9uZyBkb19tbXVleHRfb3AoCiAgICAgICAgICAgICB7CiAgICAg ICAgICAgICBjYXNlIC1FSU5UUjoKICAgICAgICAgICAgIGNhc2UgLUVSRVNU QVJUOgorICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0 cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1 ZXN0X3RhYmxlID0gcGFnZTsKICAgICAgICAgICAgICAgICByYyA9IDA7CiAg ICAgICAgICAgICAgICAgYnJlYWs7CkBAIC0zMTg5LDYgKzMzMjUsNyBAQCBs b25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgY2FzZSAt RUlOVFI6CiAgICAgICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVTVEFS VDsKICAgICAgICAgICAgICAgICAgICAgY2FzZSAtRVJFU1RBUlQ6CisgICAg ICAgICAgICAgICAgICAgICAgICBjdXJyLT5hcmNoLm9sZF9ndWVzdF9wdHBn ID0gTlVMTDsKICAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gu b2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsKICAgICAgICAgICAgICAgICAgICAg ICAgIG9rYXkgPSAwOwogICAgICAgICAgICAgICAgICAgICAgICAgYnJlYWs7 CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5oIGIv eGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCAwNjJkZTllZDhl Li5hM2YzNzlkNDI5IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK QEAgLTQ1Myw2ICs0NTMsOCBAQCBzdHJ1Y3QgYXJjaF92Y3B1CiAgICAgcGFn ZXRhYmxlX3QgZ3Vlc3RfdGFibGVfdXNlcjsgICAgICAgLyogKE1GTikgeDg2 LzY0IHVzZXItc3BhY2UgcGFnZXRhYmxlICovCiAgICAgcGFnZXRhYmxlX3Qg Z3Vlc3RfdGFibGU7ICAgICAgICAgICAgLyogKE1GTikgZ3Vlc3Qgbm90aW9u IG9mIGNyMyAqLwogICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVzdF90 YWJsZTsgIC8qIHBhcnRpYWxseSBkZXN0cnVjdGVkIHBhZ2V0YWJsZSAqLwor ICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVzdF9wdHBnOyAgIC8qIGNv bnRhaW5pbmcgcGFnZSB0YWJsZSBvZiB0aGUgKi8KKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmb3JtZXIsIGlmIGFueSAq LwogICAgIC8qIGd1ZXN0X3RhYmxlIGhvbGRzIGEgcmVmIHRvIHRoZSBwYWdl LCBhbmQgYWxzbyBhIHR5cGUtY291bnQgdW5sZXNzCiAgICAgICogc2hhZG93 IHJlZmNvdW50cyBhcmUgaW4gdXNlICovCiAgICAgcGFnZXRhYmxlX3Qgc2hh ZG93X3RhYmxlWzRdOyAgICAgICAgLyogKE1GTikgc2hhZG93KHMpIG9mIGd1 ZXN0ICovCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgg Yi94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgKaW5kZXggZGNhMjk4ZmI2NC4u NTU4YjdmMDBmMiAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9t bS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbW0uaApAQCAtMTE5LDEx ICsxMTksMTEgQEAgc3RydWN0IHBhZ2VfaW5mbwogICAgICAgICB1MzIgdGxi Zmx1c2hfdGltZXN0YW1wOwogCiAgICAgICAgIC8qCi0gICAgICAgICAqIFdo ZW4gUEdUX3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRoaXMgZmllbGQgaXMgdmFs aWQgYW5kIGluZGljYXRlcwotICAgICAgICAgKiB0aGF0IFBURXMgaW4gdGhl IHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMpIGhhdmUgYmVlbiB2YWxp ZGF0ZWQuCi0gICAgICAgICAqIEFuIGV4dHJhIHBhZ2UgcmVmZXJlbmNlIG11 c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVkKSB3aGVuZXZlcgotICAg ICAgICAgKiBQR1RfcGFydGlhbCBnZXRzIHNldCwgYW5kIGl0IG11c3QgYmUg ZHJvcHBlZCB3aGVuIHRoZSBmbGFnIGdldHMKLSAgICAgICAgICogY2xlYXJl ZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVhdmluZyBhIHBhZ2UgaW4g cGFydGlhbGx5CisgICAgICAgICAqIFdoZW4gUEdUX3BhcnRpYWwgaXMgdHJ1 ZSB0aGVuIHRoZSBmaXJzdCB0d28gZmllbGRzIGFyZSB2YWxpZCBhbmQKKyAg ICAgICAgICogaW5kaWNhdGUgdGhhdCBQVEVzIGluIHRoZSByYW5nZSBbMCwg QG5yX3ZhbGlkYXRlZF9wdGVzKSBoYXZlIGJlZW4KKyAgICAgICAgICogdmFs aWRhdGVkLiBBbiBleHRyYSBwYWdlIHJlZmVyZW5jZSBtdXN0IGJlIGFjcXVp cmVkIChvciBub3QgZHJvcHBlZCkKKyAgICAgICAgICogd2hlbmV2ZXIgUEdU X3BhcnRpYWwgZ2V0cyBzZXQsIGFuZCBpdCBtdXN0IGJlIGRyb3BwZWQgd2hl biB0aGUgZmxhZworICAgICAgICAgKiBnZXRzIGNsZWFyZWQuIFRoaXMgaXMg c28gdGhhdCBhIGdldCgpIGxlYXZpbmcgYSBwYWdlIGluIHBhcnRpYWxseQog ICAgICAgICAgKiB2YWxpZGF0ZWQgc3RhdGUgKHdoZXJlIHRoZSBjYWxsZXIg d291bGQgZHJvcCB0aGUgcmVmZXJlbmNlIGFjcXVpcmVkCiAgICAgICAgICAq IGR1ZSB0byB0aGUgZ2V0dGluZyBvZiB0aGUgdHlwZSBbYXBwYXJlbnRseV0g ZmFpbGluZyBbLUVSRVNUQVJUXSkKICAgICAgICAgICogd291bGQgbm90IGFj Y2lkZW50YWxseSByZXN1bHQgaW4gYSBwYWdlIGxlZnQgd2l0aCB6ZXJvIGdl bmVyYWwKQEAgLTE0NywxMCArMTQ3LDE4IEBAIHN0cnVjdCBwYWdlX2luZm8K ICAgICAgICAgICogcHV0X3BhZ2VfZnJvbV9sTmUoKSAoZHVlIHRvIHRoZSBh cHBhcmVudCBmYWlsdXJlKSwgYW5kIGhlbmNlIGl0CiAgICAgICAgICAqIG11 c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBwdXQgb3BlcmF0aW9uIGlzIHJlc3Vt ZWQgKGFuZCBjb21wbGV0ZXMpLAogICAgICAgICAgKiBidXQgaXQgbXVzdCBu b3QgYmUgYWNxdWlyZWQgaWYgcGlja2luZyB1cCB0aGUgcGFnZSBmb3IgdmFs aWRhdGlvbi4KKyAgICAgICAgICoKKyAgICAgICAgICogVGhlIDNyZCBmaWVs ZCwgQGxpbmVhcl9wdF9jb3VudCwgaW5kaWNhdGVzCisgICAgICAgICAqIC0g YnkgYSBwb3NpdGl2ZSB2YWx1ZSwgaG93IG1hbnkgc2FtZS1sZXZlbCBwYWdl IHRhYmxlIGVudHJpZXMgYSBwYWdlCisgICAgICAgICAqICAgdGFibGUgaGFz LAorICAgICAgICAgKiAtIGJ5IGEgbmVnYXRpdmUgdmFsdWUsIGluIGhvdyBt YW55IHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgYSBwYWdlIGlzCisgICAgICAg ICAqICAgaW4gdXNlLgogICAgICAgICAgKi8KICAgICAgICAgc3RydWN0IHsK LSAgICAgICAgICAgIHUxNiBucl92YWxpZGF0ZWRfcHRlczsKLSAgICAgICAg ICAgIHM4IHBhcnRpYWxfcHRlOworICAgICAgICAgICAgdTE2IG5yX3ZhbGlk YXRlZF9wdGVzOlBBR0VUQUJMRV9PUkRFUiArIDE7CisgICAgICAgICAgICB1 MTYgOjE2IC0gUEFHRVRBQkxFX09SREVSIC0gMSAtIDI7CisgICAgICAgICAg ICBzMTYgcGFydGlhbF9wdGU6MjsKKyAgICAgICAgICAgIHMxNiBsaW5lYXJf cHRfY291bnQ7CiAgICAgICAgIH07CiAKICAgICAgICAgLyoKQEAgLTIwMSw2 ICsyMDksOSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAjZGVmaW5lIFBHVF9jb3Vu dF93aWR0aCAgIFBHX3NoaWZ0KDkpCiAjZGVmaW5lIFBHVF9jb3VudF9tYXNr ICAgICgoMVVMPDxQR1RfY291bnRfd2lkdGgpLTEpCiAKKy8qIEFyZSB0aGUg J3R5cGUgbWFzaycgYml0cyBpZGVudGljYWw/ICovCisjZGVmaW5lIFBHVF90 eXBlX2VxdWFsKHgsIHkpICghKCgoeCkgXiAoeSkpICYgUEdUX3R5cGVfbWFz aykpCisKICAvKiBDbGVhcmVkIHdoZW4gdGhlIG93bmluZyBndWVzdCAnZnJl ZXMnIHRoaXMgcGFnZS4gKi8KICNkZWZpbmUgX1BHQ19hbGxvY2F0ZWQgICAg UEdfc2hpZnQoMSkKICNkZWZpbmUgUEdDX2FsbG9jYXRlZCAgICAgUEdfbWFz aygxLCAxKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9zeXN0 ZW0uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvc3lzdGVtLmgKaW5kZXggNzEx MTMyOTViZC4uZWZlNzIxY2I0NCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9zeXN0ZW0uaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L3N5 c3RlbS5oCkBAIC0xMTcsNiArMTE3LDUyIEBAIHN0YXRpYyBhbHdheXNfaW5s aW5lIHVuc2lnbmVkIGxvbmcgX19jbXB4Y2hnKAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAodW5zaWduZWQgbG9uZylfX24sc2l6ZW9m KCoocHRyKSkpKTsgXAogfSkKIAorLyoKKyAqIFVuZGVmaW5lZCBzeW1ib2wg dG8gY2F1c2UgbGluayBmYWlsdXJlIGlmIGEgd3Jvbmcgc2l6ZSBpcyB1c2Vk IHdpdGgKKyAqIGFyY2hfZmV0Y2hfYW5kX2FkZCgpLgorICovCitleHRlcm4g dW5zaWduZWQgbG9uZyBfX2JhZF9mZXRjaF9hbmRfYWRkX3NpemUodm9pZCk7 CisKK3N0YXRpYyBhbHdheXNfaW5saW5lIHVuc2lnbmVkIGxvbmcgX194YWRk KAorICAgIHZvbGF0aWxlIHZvaWQgKnB0ciwgdW5zaWduZWQgbG9uZyB2LCBp bnQgc2l6ZSkKK3sKKyAgICBzd2l0Y2ggKCBzaXplICkKKyAgICB7CisgICAg Y2FzZSAxOgorICAgICAgICBhc20gdm9sYXRpbGUgKCAibG9jazsgeGFkZGIg JWIwLCUxIgorICAgICAgICAgICAgICAgICAgICAgICA6ICIrciIgKHYpLCAi K20iICgqX194ZyhwdHIpKQorICAgICAgICAgICAgICAgICAgICAgICA6OiAi bWVtb3J5Iik7CisgICAgICAgIHJldHVybiB2OworICAgIGNhc2UgMjoKKyAg ICAgICAgYXNtIHZvbGF0aWxlICggImxvY2s7IHhhZGR3ICV3MCwlMSIKKyAg ICAgICAgICAgICAgICAgICAgICAgOiAiK3IiICh2KSwgIittIiAoKl9feGco cHRyKSkKKyAgICAgICAgICAgICAgICAgICAgICAgOjogIm1lbW9yeSIpOwor ICAgICAgICByZXR1cm4gdjsKKyAgICBjYXNlIDQ6CisgICAgICAgIGFzbSB2 b2xhdGlsZSAoICJsb2NrOyB4YWRkbCAlazAsJTEiCisgICAgICAgICAgICAg ICAgICAgICAgIDogIityIiAodiksICIrbSIgKCpfX3hnKHB0cikpCisgICAg ICAgICAgICAgICAgICAgICAgIDo6ICJtZW1vcnkiKTsKKyAgICAgICAgcmV0 dXJuIHY7CisgICAgY2FzZSA4OgorICAgICAgICBhc20gdm9sYXRpbGUgKCAi bG9jazsgeGFkZHEgJXEwLCUxIgorICAgICAgICAgICAgICAgICAgICAgICA6 ICIrciIgKHYpLCAiK20iICgqX194ZyhwdHIpKQorICAgICAgICAgICAgICAg ICAgICAgICA6OiAibWVtb3J5Iik7CisKKyAgICAgICAgcmV0dXJuIHY7Cisg ICAgZGVmYXVsdDoKKyAgICAgICAgcmV0dXJuIF9fYmFkX2ZldGNoX2FuZF9h ZGRfc2l6ZSgpOworICAgIH0KK30KKworLyoKKyAqIEF0b21pY2FsbHkgYWRk IEB2IHRvIHRoZSAxLCAyLCA0LCBvciA4IGJ5dGUgdmFsdWUgYXQgQHB0ci4g IFJldHVybnMKKyAqIHRoZSBwcmV2aW91cyB2YWx1ZS4KKyAqCisgKiBUaGlz IGlzIGEgZnVsbCBtZW1vcnkgYmFycmllci4KKyAqLworI2RlZmluZSBhcmNo X2ZldGNoX2FuZF9hZGQocHRyLCB2KSBcCisgICAgKCh0eXBlb2YoKihwdHIp KSlfX3hhZGQocHRyLCAodHlwZW9mKCoocHRyKSkpKHYpLCBzaXplb2YoKihw dHIpKSkpCisKIC8qCiAgKiBCb3RoIEludGVsIGFuZCBBTUQgYWdyZWUgdGhh dCwgZnJvbSBhIHByb2dyYW1tZXIncyB2aWV3cG9pbnQ6CiAgKiAgTG9hZHMg Y2Fubm90IGJlIHJlb3JkZXJlZCByZWxhdGl2ZSB0byBvdGhlciBsb2Fkcy4K LS0gCjIuMTQuMQoK --=separator Content-Type: application/octet-stream; name="xsa240-4.5/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-4.5/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSA3NDQ0ZjhhNmMxYThkZjA4MmMyM2EwYzFhY2M1NDJkZWZjZmZjMGFk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAgOSArKysrKysrKysKIDIgZmlsZXMgY2hhbmdlZCwgMjQgaW5z ZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL2RvY3MvbWlzYy94ZW4tY29tbWFu ZC1saW5lLm1hcmtkb3duIGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUu bWFya2Rvd24KaW5kZXggMTZiZmIzOWQwMi4uMzZhZTlkOTkyNSAxMDA2NDQK LS0tIGEvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KKysr IGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KQEAgLTEx MzcsNiArMTEzNywyMSBAQCBUaGUgZm9sbG93aW5nIHJlc291cmNlcyBhcmUg YXZhaWxhYmxlOgogICBMMyBjYWNoZSBvY2N1cGFuY3kuCiAgICogYGNtdGAg aW5zdHJ1Y3RzIFhlbiB0byBlbmFibGUvZGlzYWJsZSBDYWNoZSBNb25pdG9y aW5nIFRlY2hub2xvZ3kuCiAgICogYHJtaWRfbWF4YCBpbmRpY2F0ZXMgdGhl IG1heCB2YWx1ZSBmb3Igcm1pZC4KKworIyMjIHB2LWxpbmVhci1wdAorPiBg PSA8Ym9vbGVhbj5gCisKKz4gRGVmYXVsdDogYGZhbHNlYAorCitBbGxvdyBQ ViBndWVzdHMgdG8gaGF2ZSBwYWdldGFibGUgZW50cmllcyBwb2ludGluZyB0 byBvdGhlciBwYWdldGFibGVzCitvZiB0aGUgc2FtZSBsZXZlbCAoaS5lLiwg YWxsb3dpbmcgTDIgUFRFcyB0byBwb2ludCB0byBvdGhlciBMMiBwYWdlcyku CitUaGlzIHRlY2huaXF1ZSBpcyBvZnRlbiBjYWxsZWQgImxpbmVhciBwYWdl dGFibGVzIiwgYW5kIGlzIHNvbWV0aW1lcwordXNlZCB0byBhbGxvdyBvcGVy YXRpbmcgc3lzdGVtcyBhIHNpbXBsZSB3YXkgdG8gY29uc2lzdGVudGx5IG1h cCB0aGUKK2N1cnJlbnQgcHJvY2VzcydzIHBhZ2V0YWJsZXMgaW50byBpdHMg b3duIHZpcnR1YWwgYWRkcmVzcyBzcGFjZS4KKworTm9uZSBvZiB0aGUgbW9z dCBjb21tb24gUFYgb3BlcmF0aW5nIHN5c3RlbXMgKExpbnV4LCBOZXRCU0Qs IE1pbmlPUykKK3VzZSB0aGlzIHRlY2huaXF1ZSwgYnV0IHRoZXJlIG1heSBi ZSBjdXN0b20gb3BlcmF0aW5nIHN5c3RlbXMgd2hpY2gKK2RvLgogCiAjIyMg cmVib290CiA+IGA9IHRbcmlwbGVdIHwga1tiZF0gfCBhW2NwaV0gfCBwW2Np XSB8IGVbZmldIHwgbltvXSBbLCBbd11hcm0gfCBbY11vbGRdYApkaWZmIC0t Z2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwpp bmRleCA3YjRiZjFmN2ViLi43MjEzOWJkNTRjIDEwMDY0NAotLS0gYS94ZW4v YXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNzM0 LDYgKzczNCw5IEBAIHN0YXRpYyB2b2lkIGRlY19saW5lYXJfdXNlcyhzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKICAqICAgICBmcmFtZSBpZiBpdCBpcyBtYXBw ZWQgYnkgYSBkaWZmZXJlbnQgcm9vdCB0YWJsZS4gVGhpcyBpcyBzdWZmaWNp ZW50IGFuZAogICogICAgIGFsc28gbmVjZXNzYXJ5IHRvIGFsbG93IHZhbGlk YXRpb24gb2YgYSByb290IHRhYmxlIG1hcHBpbmcgaXRzZWxmLgogICovCitz dGF0aWMgYm9vbF90IF9fcmVhZF9tb3N0bHkgcHZfbGluZWFyX3B0X2VuYWJs ZSA9IDA7Citib29sZWFuX3BhcmFtKCJwdi1saW5lYXItcHQiLCBwdl9saW5l YXJfcHRfZW5hYmxlKTsKKwogI2RlZmluZSBkZWZpbmVfZ2V0X2xpbmVhcl9w YWdldGFibGUobGV2ZWwpICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKIHN0YXRpYyBpbnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiBnZXRf IyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXApAQCAtNzQzLDYgKzc0Niwx MiBAQCBnZXRfIyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIHN0 cnVjdCBwYWdlX2luZm8gKnBhZ2U7ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICB1bnNpZ25lZCBsb25n IHBmbjsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAorICAgIGlmICggIXB2X2xpbmVhcl9wdF9lbmFibGUgKSAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICB7 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgIE1FTV9MT0co IkF0dGVtcHQgdG8gY3JlYXRlIGxpbmVhciBwLnQuIChmZWF0dXJlIGRpc2Fi bGVkKSIpOyAgICAgICAgXAorICAgICAgICByZXR1cm4gMDsgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKKyAgICB9ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIGlmICggKGxldmVs IyNlX2dldF9mbGFncyhwZGUpICYgX1BBR0VfUlcpICkgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKICAgICB7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgICAgIE1FTV9MT0coIkF0dGVtcHQgdG8gY3JlYXRlIGxp bmVhciBwLnQuIHdpdGggd3JpdGUgcGVybXMiKTsgICAgICAgICAgXAotLSAK Mi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-4.5/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-4.5/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjQ0NiwyOSArMjQ0 NiwyMCBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAK LSAgICAgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBw dHBnLT51LmludXNlLnR5cGVfaW5mbykgKQotICAgICAgICAgICAgewotICAg ICAgICAgICAgICAgIC8qCi0gICAgICAgICAgICAgICAgICogc2V0X3RsYmZs dXNoX3RpbWVzdGFtcCgpIGFjY2Vzc2VzIHRoZSBzYW1lIHVuaW9uCi0gICAg ICAgICAgICAgICAgICogbGluZWFyX3B0X2NvdW50IGxpdmVzIGluLiBVbnZh bGlkYXRlZCBwYWdlIHRhYmxlIHBhZ2VzLAotICAgICAgICAgICAgICAgICAq IGhvd2V2ZXIsIHNob3VsZCBvY2N1ciBkdXJpbmcgZG9tYWluIGRlc3RydWN0 aW9uIG9ubHkKLSAgICAgICAgICAgICAgICAgKiBhbnl3YXkuICBVcGRhdGlu ZyBvZiBsaW5lYXJfcHRfY291bnQgbHVja2lseSBpcyBub3QKLSAgICAgICAg ICAgICAgICAgKiBuZWNlc3NhcnkgYW55bW9yZSBmb3IgYSBkeWluZyBkb21h aW4uCi0gICAgICAgICAgICAgICAgICovCi0gICAgICAgICAgICAgICAgQVNT RVJUKHBhZ2VfZ2V0X293bmVyKHBhZ2UpLT5pc19keWluZyk7Ci0gICAgICAg ICAgICAgICAgQVNTRVJUKHBhZ2UtPmxpbmVhcl9wdF9jb3VudCA8IDApOwot ICAgICAgICAgICAgICAgIEFTU0VSVChwdHBnLT5saW5lYXJfcHRfY291bnQg PiAwKTsKLSAgICAgICAgICAgICAgICBwdHBnID0gTlVMTDsKLSAgICAgICAg ICAgIH0KLQogICAgICAgICAgICAgLyoKICAgICAgICAgICAgICAqIFJlY29y ZCBUTEIgaW5mb3JtYXRpb24gZm9yIGZsdXNoIGxhdGVyLiBXZSBkbyBub3Qg c3RhbXAgcGFnZQogICAgICAgICAgICAgICogdGFibGVzIHdoZW4gcnVubmlu ZyBpbiBzaGFkb3cgbW9kZToKICAgICAgICAgICAgICAqICAxLiBQb2ludGxl c3MsIHNpbmNlIGl0J3MgdGhlIHNoYWRvdyBwdCdzIHdoaWNoIG11c3QgYmUg dHJhY2tlZC4KICAgICAgICAgICAgICAqICAyLiBTaGFkb3cgbW9kZSByZXVz ZXMgdGhpcyBmaWVsZCBmb3Igc2hhZG93ZWQgcGFnZSB0YWJsZXMgdG8KICAg ICAgICAgICAgICAqICAgICBzdG9yZSBmbGFncyBpbmZvIC0tIHdlIGRvbid0 IHdhbnQgdG8gY29uZmxpY3Qgd2l0aCB0aGF0LgorICAgICAgICAgICAgICog QWxzbyBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAoKSBhY2Nlc3NlcyB0 aGUgc2FtZSB1bmlvbgorICAgICAgICAgICAgICogbGluZWFyX3B0X2NvdW50 IGxpdmVzIGluLiBQYWdlcyAoaW5jbHVkaW5nIHBhZ2UgdGFibGUgb25lcyks CisgICAgICAgICAgICAgKiBob3dldmVyLCBkb24ndCBuZWVkIHRoZWlyIGZs dXNoIHRpbWUgc3RhbXAgc2V0IGV4Y2VwdCB3aGVuCisgICAgICAgICAgICAg KiB0aGUgbGFzdCByZWZlcmVuY2UgaXMgYmVpbmcgZHJvcHBlZC4gRm9yIHBh Z2UgdGFibGUgcGFnZXMKKyAgICAgICAgICAgICAqIHRoaXMgaGFwcGVucyBp biBfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLgogICAgICAgICAgICAgICovCi0g ICAgICAgICAgICBpZiAoICEoc2hhZG93X21vZGVfZW5hYmxlZChwYWdlX2dl dF9vd25lcihwYWdlKSkgJiYKKyAgICAgICAgICAgIGlmICggKCFwdHBnIHx8 ICFQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykp ICYmCisgICAgICAgICAgICAgICAgICEoc2hhZG93X21vZGVfZW5hYmxlZChw YWdlX2dldF9vd25lcihwYWdlKSkgJiYKICAgICAgICAgICAgICAgICAgICAo cGFnZS0+Y291bnRfaW5mbyAmIFBHQ19wYWdlX3RhYmxlKSkgKQogICAgICAg ICAgICAgICAgIHBhZ2Vfc2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsK ICAgICAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.5/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-4.5/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTIzNTUsOSArMjM1NSw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0 X293bmVyKHBhZ2UpKSAmJgotICAgICAgICAgICAgICAgKHBhZ2UtPmNvdW50 X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKLSAgICAgICAgICAgIHBhZ2Vf c2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsKICAgICAgICAgd21iKCk7 CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvIHw9IFBHVF92YWxp ZGF0ZWQ7CiAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.6/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-4.6/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSBjZTMxMTk4ZGQ4MTE0NzlkYTM0ZGZiNjYzMTVmMzk5ZGM0Yjk4MDU1 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMjggU2VwIDIwMTcgMTU6 MTc6MjggKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAgIDEgKwog eGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MSArKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tCiB4ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14 ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogNCBmaWxlcyBjaGFuZ2VkLCAx NzUgaW5zZXJ0aW9ucygrKSwgMjQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IGJmZTYxNGQ3YjcuLjIzZDAzNGZhOGQgMTAwNjQ0Ci0tLSBh L3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9t YWluLmMKQEAgLTExMzEsNiArMTEzMSw3IEBAIGludCBhcmNoX3NldF9pbmZv X2d1ZXN0KAogICAgICAgICAgICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAg ICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAgICAg ICBjYXNlIC1FUkVTVEFSVDoKKyAgICAgICAgICAgICAgICAgICAgdi0+YXJj aC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgICAg IHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0KICAgICAgICAgICAgICAgICAg ICAgICAgIHBhZ2V0YWJsZV9nZXRfcGFnZSh2LT5hcmNoLmd1ZXN0X3RhYmxl KTsKICAgICAgICAgICAgICAgICAgICAgdi0+YXJjaC5ndWVzdF90YWJsZSA9 IHBhZ2V0YWJsZV9udWxsKCk7CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYv bW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDIwZDk2M2NiMjIuLjgx MDc0YWE0NzMgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBi L3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC02NjAsNiArNjYwLDYxIEBAIHN0YXRp YyB2b2lkIHB1dF9kYXRhX3BhZ2UoCiAgICAgICAgIHB1dF9wYWdlKHBhZ2Up OwogfQogCitzdGF0aWMgYm9vbF90IGluY19saW5lYXJfZW50cmllcyhzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKK3sKKyAgICB0eXBlb2YocGctPmxpbmVhcl9w dF9jb3VudCkgbmMgPSByZWFkX2F0b21pYygmcGctPmxpbmVhcl9wdF9jb3Vu dCksIG9jOworCisgICAgZG8geworICAgICAgICAvKgorICAgICAgICAgKiBU aGUgY2hlY2sgYmVsb3cgY2hlY2tzIGZvciB0aGUgImxpbmVhciB1c2UiIGNv dW50IGJlaW5nIG5vbi16ZXJvCisgICAgICAgICAqIGFzIHdlbGwgYXMgb3Zl cmZsb3cuICBTaWduZWQgaW50ZWdlciBvdmVyZmxvdyBpcyB1bmRlZmluZWQg YmVoYXZpb3IKKyAgICAgICAgICogYWNjb3JkaW5nIHRvIHRoZSBDIHNwZWMu ICBIb3dldmVyLCBhcyBsb25nIGFzIGxpbmVhcl9wdF9jb3VudCBpcworICAg ICAgICAgKiBzbWFsbGVyIGluIHNpemUgdGhhbiAnaW50JywgdGhlIGFyaXRo bWV0aWMgb3BlcmF0aW9uIG9mIHRoZQorICAgICAgICAgKiBpbmNyZW1lbnQg YmVsb3cgd29uJ3Qgb3ZlcmZsb3c7IHJhdGhlciB0aGUgcmVzdWx0IHdpbGwg YmUgdHJ1bmNhdGVkCisgICAgICAgICAqIHdoZW4gc3RvcmVkLiAgRW5zdXJl IHRoYXQgdGhpcyBpcyBhbHdheXMgdHJ1ZS4KKyAgICAgICAgICovCisgICAg ICAgIEJVSUxEX0JVR19PTihzaXplb2YobmMpID49IHNpemVvZihpbnQpKTsK KyAgICAgICAgb2MgPSBuYysrOworICAgICAgICBpZiAoIG5jIDw9IDAgKQor ICAgICAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIG5jID0gY21weGNoZygm cGctPmxpbmVhcl9wdF9jb3VudCwgb2MsIG5jKTsKKyAgICB9IHdoaWxlICgg b2MgIT0gbmMgKTsKKworICAgIHJldHVybiAxOworfQorCitzdGF0aWMgdm9p ZCBkZWNfbGluZWFyX2VudHJpZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7 CisgICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG9jOworCisgICAg b2MgPSBhcmNoX2ZldGNoX2FuZF9hZGQoJnBnLT5saW5lYXJfcHRfY291bnQs IC0xKTsKKyAgICBBU1NFUlQob2MgPiAwKTsKK30KKworc3RhdGljIGJvb2xf dCBpbmNfbGluZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7Cisg ICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9t aWMoJnBnLT5saW5lYXJfcHRfY291bnQpLCBvYzsKKworICAgIGRvIHsKKyAg ICAgICAgLyogU2VlIHRoZSByZXNwZWN0aXZlIGNvbW1lbnQgaW4gaW5jX2xp bmVhcl9lbnRyaWVzKCkuICovCisgICAgICAgIEJVSUxEX0JVR19PTihzaXpl b2YobmMpID49IHNpemVvZihpbnQpKTsKKyAgICAgICAgb2MgPSBuYy0tOwor ICAgICAgICBpZiAoIG5jID49IDAgKQorICAgICAgICAgICAgcmV0dXJuIDA7 CisgICAgICAgIG5jID0gY21weGNoZygmcGctPmxpbmVhcl9wdF9jb3VudCwg b2MsIG5jKTsKKyAgICB9IHdoaWxlICggb2MgIT0gbmMgKTsKKworICAgIHJl dHVybiAxOworfQorCitzdGF0aWMgdm9pZCBkZWNfbGluZWFyX3VzZXMoc3Ry dWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5lYXJf cHRfY291bnQpIG9jOworCisgICAgb2MgPSBhcmNoX2ZldGNoX2FuZF9hZGQo JnBnLT5saW5lYXJfcHRfY291bnQsIDEpOworICAgIEFTU0VSVChvYyA8IDAp OworfQorCiAvKgogICogV2UgYWxsb3cgcm9vdCB0YWJsZXMgdG8gbWFwIGVh Y2ggb3RoZXIgKGEuay5hLiBsaW5lYXIgcGFnZSB0YWJsZXMpLiBJdAogICog bmVlZHMgc29tZSBzcGVjaWFsIGNhcmUgd2l0aCByZWZlcmVuY2UgY291bnRz IGFuZCBhY2Nlc3MgcGVybWlzc2lvbnM6CkBAIC02ODksMTUgKzc0NCwzNSBA QCBnZXRfIyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBpZiAoIChwZm4gPSBsZXZl bCMjZV9nZXRfcGZuKHBkZSkpICE9IHBkZV9wZm4gKSAgICAgICAgICAgICAg ICAgICAgICAgICBcCiAgICAgeyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAorICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3Bh Z2UocGRlX3Bmbik7ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgIC8qIE1ha2Ugc3Vy ZSB0aGUgcGFnZSB0YWJsZSBiZWxvbmdzIHRvIHRoZSBjb3JyZWN0IGRvbWFp bi4gKi8gICAgICAgXAorICAgICAgICBpZiAoIHVubGlrZWx5KHBhZ2VfZ2V0 X293bmVyKHB0cGcpICE9IGQpICkgICAgICAgICAgICAgICAgICAgICAgICAg IFwKKyAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAvKiBNYWtlIHN1 cmUgdGhlIG1hcHBlZCBmcmFtZSBiZWxvbmdzIHRvIHRoZSBjb3JyZWN0IGRv bWFpbi4gKi8gICAgIFwKICAgICAgICAgaWYgKCB1bmxpa2VseSghZ2V0X3Bh Z2VfZnJvbV9wYWdlbnIocGZuLCBkKSkgKSAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgLyogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCi0gICAgICAgICAqIEVuc3VyZSB0aGF0IHRoZSBt YXBwZWQgZnJhbWUgaXMgYW4gYWxyZWFkeS12YWxpZGF0ZWQgcGFnZSB0YWJs ZS4gXAorICAgICAgICAgKiBFbnN1cmUgdGhhdCB0aGUgbWFwcGVkIGZyYW1l IGlzIGFuIGFscmVhZHktdmFsaWRhdGVkIHBhZ2UgdGFibGUgIFwKKyAgICAg ICAgICogYW5kIGlzIG5vdCBpdHNlbGYgaGF2aW5nIGxpbmVhciBlbnRyaWVz LCBhcyB3ZWxsIGFzIHRoYXQgdGhlICAgICBcCisgICAgICAgICAqIGNvbnRh aW5pbmcgcGFnZSB0YWJsZSBpcyBub3QgaXNlbGYgaW4gdXNlIGFzIGEgbGlu ZWFyIHBhZ2UgdGFibGUgXAorICAgICAgICAgKiBlbHNld2hlcmUuICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgICogSWYgc28sIGF0b21pY2FsbHkgaW5jcmVtZW50 IHRoZSBjb3VudCAoY2hlY2tpbmcgZm9yIG92ZXJmbG93KS4gICBcCiAgICAg ICAgICAqLyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICBwYWdlID0g bWZuX3RvX3BhZ2UocGZuKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKKyAgICAgICAgaWYgKCAhaW5jX2xpbmVhcl9l bnRyaWVzKHB0cGcpICkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAg ICAgICAgICAgcHV0X3BhZ2UocGFnZSk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHJl dHVybiAwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCisgICAgICAgIH0gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAorICAgICAgICBpZiAoICFpbmNfbGluZWFyX3VzZXMocGFnZSkg KSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAg ICAgICAgeyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICBk ZWNfbGluZWFyX2VudHJpZXMocHRwZyk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAorICAgICAgICAgICAgcHV0X3BhZ2UocGFn ZSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKKyAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisg ICAgICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICB5ID0g cGFnZS0+dS5pbnVzZS50eXBlX2luZm87ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgZG8geyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCiAgICAgICAgICAgICB4ID0geTsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXApA QCAtNzA1LDYgKzc4MCw4IEBAIGdldF8jI2xldmVsIyNfbGluZWFyX3BhZ2V0 YWJsZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgICAgICAgICAgICAgIHVubGlrZWx5KCh4ICYgKFBHVF90 eXBlX21hc2t8UEdUX3ZhbGlkYXRlZCkpICE9ICAgICAgICAgICAgXAogICAg ICAgICAgICAgICAgICAgICAgICAgICAoUEdUXyMjbGV2ZWwjI19wYWdlX3Rh YmxlfFBHVF92YWxpZGF0ZWQpKSApICAgICAgIFwKICAgICAgICAgICAgIHsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICAgICAgZGVjX2xpbmVh cl91c2VzKHBhZ2UpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAorICAgICAgICAgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhw dHBnKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAg ICAgICAgICAgICAgICBwdXRfcGFnZShwYWdlKTsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAg ICAgcmV0dXJuIDA7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgfSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKQEAgLTExMjksNiArMTIwNiw5IEBAIGdldF9wYWdlX2Zyb21f bDRlKAogICAgICAgICAgICAgbDNlX3JlbW92ZV9mbGFncygocGwzZSksIF9Q QUdFX1VTRVJ8X1BBR0VfUld8X1BBR0VfQUNDRVNTRUQpOyAgIFwKICAgICB9 IHdoaWxlICggMCApCiAKK3N0YXRpYyBpbnQgX3B1dF9wYWdlX3R5cGUoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSwgYm9vbF90IHByZWVtcHRpYmxlLAorICAg ICAgICAgICAgICAgICAgICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBn KTsKKwogdm9pZCBwdXRfcGFnZV9mcm9tX2wxZShsMV9wZ2VudHJ5X3QgbDFl LCBzdHJ1Y3QgZG9tYWluICpsMWVfb3duZXIpCiB7CiAgICAgdW5zaWduZWQg bG9uZyAgICAgcGZuID0gbDFlX2dldF9wZm4obDFlKTsKQEAgLTExOTgsMTcg KzEyNzgsMjIgQEAgc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wyZShsMl9w Z2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKICAgICBpZiAoIGwy ZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BTRSApCiAgICAgICAgIHB1dF9z dXBlcnBhZ2UobDJlX2dldF9wZm4obDJlKSk7CiAgICAgZWxzZQotICAgICAg ICBwdXRfcGFnZV9hbmRfdHlwZShsMmVfZ2V0X3BhZ2UobDJlKSk7CisgICAg eworICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9nZXRfcGFn ZShsMmUpOworICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg MCwgbWZuX3RvX3BhZ2UocGZuKSk7CisKKyAgICAgICAgQVNTRVJUKCFyYyk7 CisgICAgICAgIHB1dF9wYWdlKHBnKTsKKyAgICB9CiAKICAgICByZXR1cm4g MDsKIH0KIAotc3RhdGljIGludCBfX3B1dF9wYWdlX3R5cGUoc3RydWN0IHBh Z2VfaW5mbyAqLCBpbnQgcHJlZW1wdGlibGUpOwotCiBzdGF0aWMgaW50IHB1 dF9wYWdlX2Zyb21fbDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxv bmcgcGZuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQgcGFy dGlhbCwgYm9vbF90IGRlZmVyKQogewogICAgIHN0cnVjdCBwYWdlX2luZm8g KnBnOworICAgIGludCByYzsKIAogICAgIGlmICggIShsM2VfZ2V0X2ZsYWdz KGwzZSkgJiBfUEFHRV9QUkVTRU5UKSB8fCAobDNlX2dldF9wZm4obDNlKSA9 PSBwZm4pICkKICAgICAgICAgcmV0dXJuIDE7CkBAIC0xMjMxLDIxICsxMzE2 LDI4IEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sM2UobDNfcGdlbnRy eV90IGwzZSwgdW5zaWduZWQgbG9uZyBwZm4sCiAgICAgaWYgKCB1bmxpa2Vs eShwYXJ0aWFsID4gMCkgKQogICAgIHsKICAgICAgICAgQVNTRVJUKCFkZWZl cik7Ci0gICAgICAgIHJldHVybiBfX3B1dF9wYWdlX3R5cGUocGcsIDEpOwor ICAgICAgICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGcsIDEsIG1mbl90b19w YWdlKHBmbikpOwogICAgIH0KIAogICAgIGlmICggZGVmZXIgKQogICAgIHsK KyAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90 b19wYWdlKHBmbik7CiAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGc7CiAgICAgICAgIHJldHVybiAwOwogICAgIH0KIAotICAg IHJldHVybiBwdXRfcGFnZV9hbmRfdHlwZV9wcmVlbXB0aWJsZShwZyk7Cisg ICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgMSwgbWZuX3RvX3BhZ2UocGZu KSk7CisgICAgaWYgKCBsaWtlbHkoIXJjKSApCisgICAgICAgIHB1dF9wYWdl KHBnKTsKKworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBwdXRf cGFnZV9mcm9tX2w0ZShsNF9wZ2VudHJ5X3QgbDRlLCB1bnNpZ25lZCBsb25n IHBmbiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHBhcnRp YWwsIGJvb2xfdCBkZWZlcikKIHsKKyAgICBpbnQgcmMgPSAxOworCiAgICAg aWYgKCAobDRlX2dldF9mbGFncyhsNGUpICYgX1BBR0VfUFJFU0VOVCkgJiYg CiAgICAgICAgICAobDRlX2dldF9wZm4obDRlKSAhPSBwZm4pICkKICAgICB7 CkBAIC0xMjU0LDE4ICsxMzQ2LDIyIEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2Vf ZnJvbV9sNGUobDRfcGdlbnRyeV90IGw0ZSwgdW5zaWduZWQgbG9uZyBwZm4s CiAgICAgICAgIGlmICggdW5saWtlbHkocGFydGlhbCA+IDApICkKICAgICAg ICAgewogICAgICAgICAgICAgQVNTRVJUKCFkZWZlcik7Ci0gICAgICAgICAg ICByZXR1cm4gX19wdXRfcGFnZV90eXBlKHBnLCAxKTsKKyAgICAgICAgICAg IHJldHVybiBfcHV0X3BhZ2VfdHlwZShwZywgMSwgbWZuX3RvX3BhZ2UocGZu KSk7CiAgICAgICAgIH0KIAogICAgICAgICBpZiAoIGRlZmVyICkKICAgICAg ICAgeworICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRw ZyA9IG1mbl90b19wYWdlKHBmbik7CiAgICAgICAgICAgICBjdXJyZW50LT5h cmNoLm9sZF9ndWVzdF90YWJsZSA9IHBnOwogICAgICAgICAgICAgcmV0dXJu IDA7CiAgICAgICAgIH0KIAotICAgICAgICByZXR1cm4gcHV0X3BhZ2VfYW5k X3R5cGVfcHJlZW1wdGlibGUocGcpOworICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCAxLCBtZm5fdG9fcGFnZShwZm4pKTsKKyAgICAgICAgaWYg KCBsaWtlbHkoIXJjKSApCisgICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAg ICAgfQotICAgIHJldHVybiAxOworCisgICAgcmV0dXJuIHJjOwogfQogCiBz dGF0aWMgaW50IGFsbG9jX2wxX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCkBAIC0xNDYzLDYgKzE1NTksNyBAQCBzdGF0aWMgaW50IGFsbG9jX2wz X3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiAgICAgICAgIHsKICAg ICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKICAgICAg ICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIGN1 cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAg ICAgICB9CiAgICAgICAgIHdoaWxlICggaS0tID4gMCApCkBAIC0xNTU1LDYg KzE2NTIsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2w0X3RhYmxlKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCiAgICAgICAgICAgICAgICAgewogICAgICAgICAg ICAgICAgICAgICBpZiAoIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxl ICkKICAgICAgICAgICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRl ZF9wdGVzKys7CisgICAgICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICBj dXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CiAgICAgICAg ICAgICAgICAgfQogICAgICAgICAgICAgfQpAQCAtMjMwMywxNCArMjQwMSwy MCBAQCBpbnQgZnJlZV9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFn CiB9CiAKIAotc3RhdGljIGludCBfX3B1dF9maW5hbF9wYWdlX3R5cGUoCi0g ICAgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBl LCBpbnQgcHJlZW1wdGlibGUpCitzdGF0aWMgaW50IF9wdXRfZmluYWxfcGFn ZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcg dHlwZSwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbF90 IHByZWVtcHRpYmxlLCBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnKQogewogICAg IGludCByYyA9IGZyZWVfcGFnZV90eXBlKHBhZ2UsIHR5cGUsIHByZWVtcHRp YmxlKTsKIAogICAgIC8qIE5vIG5lZWQgZm9yIGF0b21pYyB1cGRhdGUgb2Yg dHlwZV9pbmZvIGhlcmU6IG5vb25lIGVsc2UgdXBkYXRlcyBpdC4gKi8KICAg ICBpZiAoIHJjID09IDAgKQogICAgIHsKKyAgICAgICAgaWYgKCBwdHBnICYm IFBHVF90eXBlX2VxdWFsKHR5cGUsIHB0cGctPnUuaW51c2UudHlwZV9pbmZv KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGRlY19saW5lYXJfdXNlcyhw YWdlKTsKKyAgICAgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhwdHBnKTsK KyAgICAgICAgfQorICAgICAgICBBU1NFUlQoIXBhZ2UtPmxpbmVhcl9wdF9j b3VudCB8fCBwYWdlX2dldF9vd25lcihwYWdlKS0+aXNfZHlpbmcpOwogICAg ICAgICAvKgogICAgICAgICAgKiBSZWNvcmQgVExCIGluZm9ybWF0aW9uIGZv ciBmbHVzaCBsYXRlci4gV2UgZG8gbm90IHN0YW1wIHBhZ2UgdGFibGVzCiAg ICAgICAgICAqIHdoZW4gcnVubmluZyBpbiBzaGFkb3cgbW9kZToKQEAgLTIz NDYsOCArMjQ1MCw4IEBAIHN0YXRpYyBpbnQgX19wdXRfZmluYWxfcGFnZV90 eXBlKAogfQogCiAKLXN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UsCi0gICAgICAgICAgICAgICAgICAgICAgICAg ICBpbnQgcHJlZW1wdGlibGUpCitzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBl KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIGJvb2xfdCBwcmVlbXB0aWJsZSwK KyAgICAgICAgICAgICAgICAgICAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAq cHRwZykKIHsKICAgICB1bnNpZ25lZCBsb25nIG54LCB4LCB5ID0gcGFnZS0+ dS5pbnVzZS50eXBlX2luZm87CiAgICAgaW50IHJjID0gMDsKQEAgLTIzNzQs MTIgKzI0NzgsMjggQEAgc3RhdGljIGludCBfX3B1dF9wYWdlX3R5cGUoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB4LCBueCkpICE9IHgpICkKICAgICAgICAg ICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgICAgICAgLyogV2Ug Y2xlYXJlZCB0aGUgJ3ZhbGlkIGJpdCcgc28gd2UgZG8gdGhlIGNsZWFuIHVw LiAqLwotICAgICAgICAgICAgICAgIHJjID0gX19wdXRfZmluYWxfcGFnZV90 eXBlKHBhZ2UsIHgsIHByZWVtcHRpYmxlKTsKKyAgICAgICAgICAgICAgICBy YyA9IF9wdXRfZmluYWxfcGFnZV90eXBlKHBhZ2UsIHgsIHByZWVtcHRpYmxl LCBwdHBnKTsKKyAgICAgICAgICAgICAgICBwdHBnID0gTlVMTDsKICAgICAg ICAgICAgICAgICBpZiAoIHggJiBQR1RfcGFydGlhbCApCiAgICAgICAgICAg ICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICAgICAgfQogCisgICAgICAgICAgICBpZiAoIHB0cGcg JiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBlX2luZm8p ICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAvKgorICAgICAg ICAgICAgICAgICAqIHBhZ2Vfc2V0X3RsYmZsdXNoX3RpbWVzdGFtcCgpIGFj Y2Vzc2VzIHRoZSBzYW1lIHVuaW9uCisgICAgICAgICAgICAgICAgICogbGlu ZWFyX3B0X2NvdW50IGxpdmVzIGluLiBVbnZhbGlkYXRlZCBwYWdlIHRhYmxl IHBhZ2VzLAorICAgICAgICAgICAgICAgICAqIGhvd2V2ZXIsIHNob3VsZCBv Y2N1ciBkdXJpbmcgZG9tYWluIGRlc3RydWN0aW9uIG9ubHkKKyAgICAgICAg ICAgICAgICAgKiBhbnl3YXkuICBVcGRhdGluZyBvZiBsaW5lYXJfcHRfY291 bnQgbHVja2lseSBpcyBub3QKKyAgICAgICAgICAgICAgICAgKiBuZWNlc3Nh cnkgYW55bW9yZSBmb3IgYSBkeWluZyBkb21haW4uCisgICAgICAgICAgICAg ICAgICovCisgICAgICAgICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVy KHBhZ2UpLT5pc19keWluZyk7CisgICAgICAgICAgICAgICAgQVNTRVJUKHBh Z2UtPmxpbmVhcl9wdF9jb3VudCA8IDApOworICAgICAgICAgICAgICAgIEFT U0VSVChwdHBnLT5saW5lYXJfcHRfY291bnQgPiAwKTsKKyAgICAgICAgICAg ICAgICBwdHBnID0gTlVMTDsKKyAgICAgICAgICAgIH0KKwogICAgICAgICAg ICAgLyoKICAgICAgICAgICAgICAqIFJlY29yZCBUTEIgaW5mb3JtYXRpb24g Zm9yIGZsdXNoIGxhdGVyLiBXZSBkbyBub3Qgc3RhbXAgcGFnZQogICAgICAg ICAgICAgICogdGFibGVzIHdoZW4gcnVubmluZyBpbiBzaGFkb3cgbW9kZToK QEAgLTIzOTksNiArMjUxOSwxMyBAQCBzdGF0aWMgaW50IF9fcHV0X3BhZ2Vf dHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLAogICAgICAgICAgICAgcmV0 dXJuIC1FSU5UUjsKICAgICB9CiAKKyAgICBpZiAoIHB0cGcgJiYgUEdUX3R5 cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBlX2luZm8pICkKKyAgICB7 CisgICAgICAgIEFTU0VSVCghcmMpOworICAgICAgICBkZWNfbGluZWFyX3Vz ZXMocGFnZSk7CisgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhwdHBnKTsK KyAgICB9CisKICAgICByZXR1cm4gcmM7CiB9CiAKQEAgLTI1MzMsNiArMjY2 MCw3IEBAIHN0YXRpYyBpbnQgX19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKICAgICAgICAgICAg IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gMDsKICAgICAgICAgICAgIHBh Z2UtPnBhcnRpYWxfcHRlID0gMDsKICAgICAgICAgfQorICAgICAgICBwYWdl LT5saW5lYXJfcHRfY291bnQgPSAwOwogICAgICAgICByYyA9IGFsbG9jX3Bh Z2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAgICAgfQogCkBA IC0yNTQ0LDcgKzI2NzIsNyBAQCBzdGF0aWMgaW50IF9fZ2V0X3BhZ2VfdHlw ZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUs CiAKIHZvaWQgcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl KQogewotICAgIGludCByYyA9IF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAwKTsK KyAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwYWdlLCAwLCBOVUxMKTsK ICAgICBBU1NFUlQocmMgPT0gMCk7CiAgICAgKHZvaWQpcmM7CiB9CkBAIC0y NTYwLDcgKzI2ODgsNyBAQCBpbnQgZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFn ZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUpCiAKIGludCBwdXRf cGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2Up CiB7Ci0gICAgcmV0dXJuIF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAxKTsKKyAg ICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGFnZSwgMSwgTlVMTCk7CiB9CiAK IGludCBnZXRfcGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2lu Zm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSkKQEAgLTI3NjYsMTEgKzI4 OTQsMTQgQEAgaW50IHB1dF9vbGRfZ3Vlc3RfdGFibGUoc3RydWN0IHZjcHUg KnYpCiAgICAgaWYgKCAhdi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgKQogICAg ICAgICByZXR1cm4gMDsKIAotICAgIHN3aXRjaCAoIHJjID0gcHV0X3BhZ2Vf YW5kX3R5cGVfcHJlZW1wdGlibGUodi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUp ICkKKyAgICBzd2l0Y2ggKCByYyA9IF9wdXRfcGFnZV90eXBlKHYtPmFyY2gu b2xkX2d1ZXN0X3RhYmxlLCAxLAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZykgKQogICAgIHsKICAg ICBjYXNlIC1FSU5UUjoKICAgICBjYXNlIC1FUkVTVEFSVDoKICAgICAgICAg cmV0dXJuIC1FUkVTVEFSVDsKKyAgICBjYXNlIDA6CisgICAgICAgIHB1dF9w YWdlKHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlKTsKICAgICB9CiAKICAgICB2 LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IE5VTEw7CkBAIC0yOTI3LDYgKzMw NTgsNyBAQCBpbnQgbmV3X2d1ZXN0X2NyMyh1bnNpZ25lZCBsb25nIG1mbikK ICAgICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAg ICAgICAvKiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgY2FzZSAtRVJF U1RBUlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf cHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRf Z3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIGJyZWFrOwog ICAgICAgICAgICAgZGVmYXVsdDoKQEAgLTMxNzIsNyArMzMwNCwxMCBAQCBs b25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgaWYgKCB0 eXBlID09IFBHVF9sMV9wYWdlX3RhYmxlICkKICAgICAgICAgICAgICAgICAg ICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOwogICAgICAgICAgICAg ICAgICAgICBlbHNlCisgICAgICAgICAgICAgICAgICAgIHsKKyAgICAgICAg ICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBO VUxMOwogICAgICAgICAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRf Z3Vlc3RfdGFibGUgPSBwYWdlOworICAgICAgICAgICAgICAgICAgICB9CiAg ICAgICAgICAgICAgICAgfQogICAgICAgICAgICAgfQogCkBAIC0zMjA1LDYg KzMzNDAsNyBAQCBsb25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgIHsK ICAgICAgICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAgICAgICAgY2FzZSAt RVJFU1RBUlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vl c3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5v bGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIHJjID0g MDsKICAgICAgICAgICAgICAgICBicmVhazsKQEAgLTMyODUsNiArMzQyMSw3 IEBAIGxvbmcgZG9fbW11ZXh0X29wKAogICAgICAgICAgICAgICAgICAgICAg ICAgcmMgPSAtRVJFU1RBUlQ7CiAgICAgICAgICAgICAgICAgICAgICAgICAv KiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgICAgICAgICBjYXNlIC1F UkVTVEFSVDoKKyAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICAg ICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAg ICAgICAgICAgICAgICAgICAgb2theSA9IDA7CiAgICAgICAgICAgICAgICAg ICAgICAgICBicmVhazsKZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL2FzbS14 ODYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5oCmlu ZGV4IGEyZDRmNzQ2OTYuLjQyNzk1NDljMjggMTAwNjQ0Ci0tLSBhL3hlbi9p bmNsdWRlL2FzbS14ODYvZG9tYWluLmgKKysrIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9kb21haW4uaApAQCAtNTEyLDYgKzUxMiw4IEBAIHN0cnVjdCBhcmNo X3ZjcHUKICAgICBwYWdldGFibGVfdCBndWVzdF90YWJsZV91c2VyOyAgICAg ICAvKiAoTUZOKSB4ODYvNjQgdXNlci1zcGFjZSBwYWdldGFibGUgKi8KICAg ICBwYWdldGFibGVfdCBndWVzdF90YWJsZTsgICAgICAgICAgICAvKiAoTUZO KSBndWVzdCBub3Rpb24gb2YgY3IzICovCiAgICAgc3RydWN0IHBhZ2VfaW5m byAqb2xkX2d1ZXN0X3RhYmxlOyAgLyogcGFydGlhbGx5IGRlc3RydWN0ZWQg cGFnZXRhYmxlICovCisgICAgc3RydWN0IHBhZ2VfaW5mbyAqb2xkX2d1ZXN0 X3B0cGc7ICAgLyogY29udGFpbmluZyBwYWdlIHRhYmxlIG9mIHRoZSAqLwor ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8qIGZv cm1lciwgaWYgYW55ICovCiAgICAgLyogZ3Vlc3RfdGFibGUgaG9sZHMgYSBy ZWYgdG8gdGhlIHBhZ2UsIGFuZCBhbHNvIGEgdHlwZS1jb3VudCB1bmxlc3MK ICAgICAgKiBzaGFkb3cgcmVmY291bnRzIGFyZSBpbiB1c2UgKi8KICAgICBw YWdldGFibGVfdCBzaGFkb3dfdGFibGVbNF07ICAgICAgICAvKiAoTUZOKSBz aGFkb3cocykgb2YgZ3Vlc3QgKi8KZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRl L2FzbS14ODYvbW0uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbW0uaAppbmRl eCBiNDI5OWZkZGVhLi40MTkxZTEzMTEyIDEwMDY0NAotLS0gYS94ZW4vaW5j bHVkZS9hc20teDg2L21tLmgKKysrIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9t bS5oCkBAIC0xMjQsMTEgKzEyNCwxMSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAg ICAgICAgIHUzMiB0bGJmbHVzaF90aW1lc3RhbXA7CiAKICAgICAgICAgLyoK LSAgICAgICAgICogV2hlbiBQR1RfcGFydGlhbCBpcyB0cnVlIHRoZW4gdGhp cyBmaWVsZCBpcyB2YWxpZCBhbmQgaW5kaWNhdGVzCi0gICAgICAgICAqIHRo YXQgUFRFcyBpbiB0aGUgcmFuZ2UgWzAsIEBucl92YWxpZGF0ZWRfcHRlcykg aGF2ZSBiZWVuIHZhbGlkYXRlZC4KLSAgICAgICAgICogQW4gZXh0cmEgcGFn ZSByZWZlcmVuY2UgbXVzdCBiZSBhY3F1aXJlZCAob3Igbm90IGRyb3BwZWQp IHdoZW5ldmVyCi0gICAgICAgICAqIFBHVF9wYXJ0aWFsIGdldHMgc2V0LCBh bmQgaXQgbXVzdCBiZSBkcm9wcGVkIHdoZW4gdGhlIGZsYWcgZ2V0cwotICAg ICAgICAgKiBjbGVhcmVkLiBUaGlzIGlzIHNvIHRoYXQgYSBnZXQoKSBsZWF2 aW5nIGEgcGFnZSBpbiBwYXJ0aWFsbHkKKyAgICAgICAgICogV2hlbiBQR1Rf cGFydGlhbCBpcyB0cnVlIHRoZW4gdGhlIGZpcnN0IHR3byBmaWVsZHMgYXJl IHZhbGlkIGFuZAorICAgICAgICAgKiBpbmRpY2F0ZSB0aGF0IFBURXMgaW4g dGhlIHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMpIGhhdmUgYmVlbgor ICAgICAgICAgKiB2YWxpZGF0ZWQuIEFuIGV4dHJhIHBhZ2UgcmVmZXJlbmNl IG11c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVkKQorICAgICAgICAg KiB3aGVuZXZlciBQR1RfcGFydGlhbCBnZXRzIHNldCwgYW5kIGl0IG11c3Qg YmUgZHJvcHBlZCB3aGVuIHRoZSBmbGFnCisgICAgICAgICAqIGdldHMgY2xl YXJlZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVhdmluZyBhIHBhZ2Ug aW4gcGFydGlhbGx5CiAgICAgICAgICAqIHZhbGlkYXRlZCBzdGF0ZSAod2hl cmUgdGhlIGNhbGxlciB3b3VsZCBkcm9wIHRoZSByZWZlcmVuY2UgYWNxdWly ZWQKICAgICAgICAgICogZHVlIHRvIHRoZSBnZXR0aW5nIG9mIHRoZSB0eXBl IFthcHBhcmVudGx5XSBmYWlsaW5nIFstRVJFU1RBUlRdKQogICAgICAgICAg KiB3b3VsZCBub3QgYWNjaWRlbnRhbGx5IHJlc3VsdCBpbiBhIHBhZ2UgbGVm dCB3aXRoIHplcm8gZ2VuZXJhbApAQCAtMTUyLDEwICsxNTIsMTggQEAgc3Ry dWN0IHBhZ2VfaW5mbwogICAgICAgICAgKiBwdXRfcGFnZV9mcm9tX2xOZSgp IChkdWUgdG8gdGhlIGFwcGFyZW50IGZhaWx1cmUpLCBhbmQgaGVuY2UgaXQK ICAgICAgICAgICogbXVzdCBiZSBkcm9wcGVkIHdoZW4gdGhlIHB1dCBvcGVy YXRpb24gaXMgcmVzdW1lZCAoYW5kIGNvbXBsZXRlcyksCiAgICAgICAgICAq IGJ1dCBpdCBtdXN0IG5vdCBiZSBhY3F1aXJlZCBpZiBwaWNraW5nIHVwIHRo ZSBwYWdlIGZvciB2YWxpZGF0aW9uLgorICAgICAgICAgKgorICAgICAgICAg KiBUaGUgM3JkIGZpZWxkLCBAbGluZWFyX3B0X2NvdW50LCBpbmRpY2F0ZXMK KyAgICAgICAgICogLSBieSBhIHBvc2l0aXZlIHZhbHVlLCBob3cgbWFueSBz YW1lLWxldmVsIHBhZ2UgdGFibGUgZW50cmllcyBhIHBhZ2UKKyAgICAgICAg ICogICB0YWJsZSBoYXMsCisgICAgICAgICAqIC0gYnkgYSBuZWdhdGl2ZSB2 YWx1ZSwgaW4gaG93IG1hbnkgc2FtZS1sZXZlbCBwYWdlIHRhYmxlcyBhIHBh Z2UgaXMKKyAgICAgICAgICogICBpbiB1c2UuCiAgICAgICAgICAqLwogICAg ICAgICBzdHJ1Y3QgewotICAgICAgICAgICAgdTE2IG5yX3ZhbGlkYXRlZF9w dGVzOwotICAgICAgICAgICAgczggcGFydGlhbF9wdGU7CisgICAgICAgICAg ICB1MTYgbnJfdmFsaWRhdGVkX3B0ZXM6UEFHRVRBQkxFX09SREVSICsgMTsK KyAgICAgICAgICAgIHUxNiA6MTYgLSBQQUdFVEFCTEVfT1JERVIgLSAxIC0g MjsKKyAgICAgICAgICAgIHMxNiBwYXJ0aWFsX3B0ZToyOworICAgICAgICAg ICAgczE2IGxpbmVhcl9wdF9jb3VudDsKICAgICAgICAgfTsKIAogICAgICAg ICAvKgpAQCAtMjA2LDYgKzIxNCw5IEBAIHN0cnVjdCBwYWdlX2luZm8KICNk ZWZpbmUgUEdUX2NvdW50X3dpZHRoICAgUEdfc2hpZnQoOSkKICNkZWZpbmUg UEdUX2NvdW50X21hc2sgICAgKCgxVUw8PFBHVF9jb3VudF93aWR0aCktMSkK IAorLyogQXJlIHRoZSAndHlwZSBtYXNrJyBiaXRzIGlkZW50aWNhbD8gKi8K KyNkZWZpbmUgUEdUX3R5cGVfZXF1YWwoeCwgeSkgKCEoKCh4KSBeICh5KSkg JiBQR1RfdHlwZV9tYXNrKSkKKwogIC8qIENsZWFyZWQgd2hlbiB0aGUgb3du aW5nIGd1ZXN0ICdmcmVlcycgdGhpcyBwYWdlLiAqLwogI2RlZmluZSBfUEdD X2FsbG9jYXRlZCAgICBQR19zaGlmdCgxKQogI2RlZmluZSBQR0NfYWxsb2Nh dGVkICAgICBQR19tYXNrKDEsIDEpCi0tIAoyLjE0LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa240-4.6/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-4.6/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSBlZWVhMDBjNDI3Mzc2YzI2OWZmYTM0NTg3ZjE2ZmExMTgyZDhjMjlk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAgOSArKysrKysrKysKIDIgZmlsZXMgY2hhbmdlZCwgMjQgaW5z ZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL2RvY3MvbWlzYy94ZW4tY29tbWFu ZC1saW5lLm1hcmtkb3duIGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUu bWFya2Rvd24KaW5kZXggZDk5YTIwYTQ0Yi4uYzkxYWNhYTQ2NCAxMDA2NDQK LS0tIGEvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KKysr IGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KQEAgLTEy MzEsNiArMTIzMSwyMSBAQCBUaGUgZm9sbG93aW5nIHJlc291cmNlcyBhcmUg YXZhaWxhYmxlOgogICB0aGUgY2FjaGUgYWxsb2NhdGlvbi4KICAgKiBgY2F0 YCBpbnN0cnVjdHMgWGVuIHRvIGVuYWJsZS9kaXNhYmxlIENhY2hlIEFsbG9j YXRpb24gVGVjaG5vbG9neS4KICAgKiBgY29zX21heGAgaW5kaWNhdGVzIHRo ZSBtYXggdmFsdWUgZm9yIENPUyBJRC4KKworIyMjIHB2LWxpbmVhci1wdAor PiBgPSA8Ym9vbGVhbj5gCisKKz4gRGVmYXVsdDogYGZhbHNlYAorCitBbGxv dyBQViBndWVzdHMgdG8gaGF2ZSBwYWdldGFibGUgZW50cmllcyBwb2ludGlu ZyB0byBvdGhlciBwYWdldGFibGVzCitvZiB0aGUgc2FtZSBsZXZlbCAoaS5l LiwgYWxsb3dpbmcgTDIgUFRFcyB0byBwb2ludCB0byBvdGhlciBMMiBwYWdl cykuCitUaGlzIHRlY2huaXF1ZSBpcyBvZnRlbiBjYWxsZWQgImxpbmVhciBw YWdldGFibGVzIiwgYW5kIGlzIHNvbWV0aW1lcwordXNlZCB0byBhbGxvdyBv cGVyYXRpbmcgc3lzdGVtcyBhIHNpbXBsZSB3YXkgdG8gY29uc2lzdGVudGx5 IG1hcCB0aGUKK2N1cnJlbnQgcHJvY2VzcydzIHBhZ2V0YWJsZXMgaW50byBp dHMgb3duIHZpcnR1YWwgYWRkcmVzcyBzcGFjZS4KKworTm9uZSBvZiB0aGUg bW9zdCBjb21tb24gUFYgb3BlcmF0aW5nIHN5c3RlbXMgKExpbnV4LCBOZXRC U0QsIE1pbmlPUykKK3VzZSB0aGlzIHRlY2huaXF1ZSwgYnV0IHRoZXJlIG1h eSBiZSBjdXN0b20gb3BlcmF0aW5nIHN5c3RlbXMgd2hpY2gKK2RvLgogCiAj IyMgcmVib290CiA+IGA9IHRbcmlwbGVdIHwga1tiZF0gfCBhW2NwaV0gfCBw W2NpXSB8IFBbb3dlcl0gfCBlW2ZpXSB8IG5bb10gWywgW3ddYXJtIHwgW2Nd b2xkXWAKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS5jIGIveGVuL2Fy Y2gveDg2L21tLmMKaW5kZXggODEwNzRhYTQ3My4uNzVkZDA3NzA0NiAxMDA2 NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2 L21tLmMKQEAgLTcyNyw2ICs3MjcsOSBAQCBzdGF0aWMgdm9pZCBkZWNfbGlu ZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCiAgKiAgICAgZnJhbWUg aWYgaXQgaXMgbWFwcGVkIGJ5IGEgZGlmZmVyZW50IHJvb3QgdGFibGUuIFRo aXMgaXMgc3VmZmljaWVudCBhbmQKICAqICAgICBhbHNvIG5lY2Vzc2FyeSB0 byBhbGxvdyB2YWxpZGF0aW9uIG9mIGEgcm9vdCB0YWJsZSBtYXBwaW5nIGl0 c2VsZi4KICAqLworc3RhdGljIGJvb2xfdCBfX3JlYWRfbW9zdGx5IHB2X2xp bmVhcl9wdF9lbmFibGUgPSAwOworYm9vbGVhbl9wYXJhbSgicHYtbGluZWFy LXB0IiwgcHZfbGluZWFyX3B0X2VuYWJsZSk7CisKICNkZWZpbmUgZGVmaW5l X2dldF9saW5lYXJfcGFnZXRhYmxlKGxldmVsKSAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCiBzdGF0aWMgaW50ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAogZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFnZXRhYmxlKCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKQEAg LTczNiw2ICs3MzksMTIgQEAgZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFnZXRh YmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlOyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAg dW5zaWduZWQgbG9uZyBwZm47ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKKyAgICBpZiAoICFwdl9saW5lYXJfcHRfZW5h YmxlICkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgeyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAg ICAgICBNRU1fTE9HKCJBdHRlbXB0IHRvIGNyZWF0ZSBsaW5lYXIgcC50LiAo ZmVhdHVyZSBkaXNhYmxlZCkiKTsgICAgICAgIFwKKyAgICAgICAgcmV0dXJu IDA7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCisgICAgfSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAg ICBpZiAoIChsZXZlbCMjZV9nZXRfZmxhZ3MocGRlKSAmIF9QQUdFX1JXKSAp ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgeyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAogICAgICAgICBNRU1fTE9HKCJBdHRlbXB0 IHRvIGNyZWF0ZSBsaW5lYXIgcC50LiB3aXRoIHdyaXRlIHBlcm1zIik7ICAg ICAgICAgIFwKLS0gCjIuMTQuMQoK --=separator Content-Type: application/octet-stream; name="xsa240-4.6/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-4.6/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjQ5OCwyOSArMjQ5 OCwyMCBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAK LSAgICAgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBw dHBnLT51LmludXNlLnR5cGVfaW5mbykgKQotICAgICAgICAgICAgewotICAg ICAgICAgICAgICAgIC8qCi0gICAgICAgICAgICAgICAgICogc2V0X3RsYmZs dXNoX3RpbWVzdGFtcCgpIGFjY2Vzc2VzIHRoZSBzYW1lIHVuaW9uCi0gICAg ICAgICAgICAgICAgICogbGluZWFyX3B0X2NvdW50IGxpdmVzIGluLiBVbnZh bGlkYXRlZCBwYWdlIHRhYmxlIHBhZ2VzLAotICAgICAgICAgICAgICAgICAq IGhvd2V2ZXIsIHNob3VsZCBvY2N1ciBkdXJpbmcgZG9tYWluIGRlc3RydWN0 aW9uIG9ubHkKLSAgICAgICAgICAgICAgICAgKiBhbnl3YXkuICBVcGRhdGlu ZyBvZiBsaW5lYXJfcHRfY291bnQgbHVja2lseSBpcyBub3QKLSAgICAgICAg ICAgICAgICAgKiBuZWNlc3NhcnkgYW55bW9yZSBmb3IgYSBkeWluZyBkb21h aW4uCi0gICAgICAgICAgICAgICAgICovCi0gICAgICAgICAgICAgICAgQVNT RVJUKHBhZ2VfZ2V0X293bmVyKHBhZ2UpLT5pc19keWluZyk7Ci0gICAgICAg ICAgICAgICAgQVNTRVJUKHBhZ2UtPmxpbmVhcl9wdF9jb3VudCA8IDApOwot ICAgICAgICAgICAgICAgIEFTU0VSVChwdHBnLT5saW5lYXJfcHRfY291bnQg PiAwKTsKLSAgICAgICAgICAgICAgICBwdHBnID0gTlVMTDsKLSAgICAgICAg ICAgIH0KLQogICAgICAgICAgICAgLyoKICAgICAgICAgICAgICAqIFJlY29y ZCBUTEIgaW5mb3JtYXRpb24gZm9yIGZsdXNoIGxhdGVyLiBXZSBkbyBub3Qg c3RhbXAgcGFnZQogICAgICAgICAgICAgICogdGFibGVzIHdoZW4gcnVubmlu ZyBpbiBzaGFkb3cgbW9kZToKICAgICAgICAgICAgICAqICAxLiBQb2ludGxl c3MsIHNpbmNlIGl0J3MgdGhlIHNoYWRvdyBwdCdzIHdoaWNoIG11c3QgYmUg dHJhY2tlZC4KICAgICAgICAgICAgICAqICAyLiBTaGFkb3cgbW9kZSByZXVz ZXMgdGhpcyBmaWVsZCBmb3Igc2hhZG93ZWQgcGFnZSB0YWJsZXMgdG8KICAg ICAgICAgICAgICAqICAgICBzdG9yZSBmbGFncyBpbmZvIC0tIHdlIGRvbid0 IHdhbnQgdG8gY29uZmxpY3Qgd2l0aCB0aGF0LgorICAgICAgICAgICAgICog QWxzbyBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAoKSBhY2Nlc3NlcyB0 aGUgc2FtZSB1bmlvbgorICAgICAgICAgICAgICogbGluZWFyX3B0X2NvdW50 IGxpdmVzIGluLiBQYWdlcyAoaW5jbHVkaW5nIHBhZ2UgdGFibGUgb25lcyks CisgICAgICAgICAgICAgKiBob3dldmVyLCBkb24ndCBuZWVkIHRoZWlyIGZs dXNoIHRpbWUgc3RhbXAgc2V0IGV4Y2VwdCB3aGVuCisgICAgICAgICAgICAg KiB0aGUgbGFzdCByZWZlcmVuY2UgaXMgYmVpbmcgZHJvcHBlZC4gRm9yIHBh Z2UgdGFibGUgcGFnZXMKKyAgICAgICAgICAgICAqIHRoaXMgaGFwcGVucyBp biBfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLgogICAgICAgICAgICAgICovCi0g ICAgICAgICAgICBpZiAoICEoc2hhZG93X21vZGVfZW5hYmxlZChwYWdlX2dl dF9vd25lcihwYWdlKSkgJiYKKyAgICAgICAgICAgIGlmICggKCFwdHBnIHx8 ICFQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykp ICYmCisgICAgICAgICAgICAgICAgICEoc2hhZG93X21vZGVfZW5hYmxlZChw YWdlX2dldF9vd25lcihwYWdlKSkgJiYKICAgICAgICAgICAgICAgICAgICAo cGFnZS0+Y291bnRfaW5mbyAmIFBHQ19wYWdlX3RhYmxlKSkgKQogICAgICAg ICAgICAgICAgIHBhZ2Vfc2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsK ICAgICAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.6/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-4.6/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI0NDUsOSArMjQ0NSw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0 X293bmVyKHBhZ2UpKSAmJgotICAgICAgICAgICAgICAgKHBhZ2UtPmNvdW50 X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKLSAgICAgICAgICAgIHBhZ2Vf c2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsKICAgICAgICAgd21iKCk7 CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvIHw9IFBHVF92YWxp ZGF0ZWQ7CiAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.7/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-4.7/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSBlYTc1MTNhM2UzZjI4Y2ZlYzU5ZGRhNmUxMjhiNmI0OTY4Njg1NzYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMjggU2VwIDIwMTcgMTU6 MTc6MjcgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAgIDEgKwog eGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MSArKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tCiB4ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14 ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogNCBmaWxlcyBjaGFuZ2VkLCAx NzUgaW5zZXJ0aW9ucygrKSwgMjQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IDQ1Mjc0OGRkNWIuLjQ0ZWQyY2NkMGEgMTAwNjQ0Ci0tLSBh L3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9t YWluLmMKQEAgLTEyMzcsNiArMTIzNyw3IEBAIGludCBhcmNoX3NldF9pbmZv X2d1ZXN0KAogICAgICAgICAgICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAg ICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAgICAg ICBjYXNlIC1FUkVTVEFSVDoKKyAgICAgICAgICAgICAgICAgICAgdi0+YXJj aC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgICAg IHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0KICAgICAgICAgICAgICAgICAg ICAgICAgIHBhZ2V0YWJsZV9nZXRfcGFnZSh2LT5hcmNoLmd1ZXN0X3RhYmxl KTsKICAgICAgICAgICAgICAgICAgICAgdi0+YXJjaC5ndWVzdF90YWJsZSA9 IHBhZ2V0YWJsZV9udWxsKCk7CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYv bW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGU5N2VjY2NkOTMuLmU4 MWE0NjFiOTEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBi L3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC03MzIsNiArNzMyLDYxIEBAIHN0YXRp YyB2b2lkIHB1dF9kYXRhX3BhZ2UoCiAgICAgICAgIHB1dF9wYWdlKHBhZ2Up OwogfQogCitzdGF0aWMgYm9vbF90IGluY19saW5lYXJfZW50cmllcyhzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKK3sKKyAgICB0eXBlb2YocGctPmxpbmVhcl9w dF9jb3VudCkgbmMgPSByZWFkX2F0b21pYygmcGctPmxpbmVhcl9wdF9jb3Vu dCksIG9jOworCisgICAgZG8geworICAgICAgICAvKgorICAgICAgICAgKiBU aGUgY2hlY2sgYmVsb3cgY2hlY2tzIGZvciB0aGUgImxpbmVhciB1c2UiIGNv dW50IGJlaW5nIG5vbi16ZXJvCisgICAgICAgICAqIGFzIHdlbGwgYXMgb3Zl cmZsb3cuICBTaWduZWQgaW50ZWdlciBvdmVyZmxvdyBpcyB1bmRlZmluZWQg YmVoYXZpb3IKKyAgICAgICAgICogYWNjb3JkaW5nIHRvIHRoZSBDIHNwZWMu ICBIb3dldmVyLCBhcyBsb25nIGFzIGxpbmVhcl9wdF9jb3VudCBpcworICAg ICAgICAgKiBzbWFsbGVyIGluIHNpemUgdGhhbiAnaW50JywgdGhlIGFyaXRo bWV0aWMgb3BlcmF0aW9uIG9mIHRoZQorICAgICAgICAgKiBpbmNyZW1lbnQg YmVsb3cgd29uJ3Qgb3ZlcmZsb3c7IHJhdGhlciB0aGUgcmVzdWx0IHdpbGwg YmUgdHJ1bmNhdGVkCisgICAgICAgICAqIHdoZW4gc3RvcmVkLiAgRW5zdXJl IHRoYXQgdGhpcyBpcyBhbHdheXMgdHJ1ZS4KKyAgICAgICAgICovCisgICAg ICAgIEJVSUxEX0JVR19PTihzaXplb2YobmMpID49IHNpemVvZihpbnQpKTsK KyAgICAgICAgb2MgPSBuYysrOworICAgICAgICBpZiAoIG5jIDw9IDAgKQor ICAgICAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIG5jID0gY21weGNoZygm cGctPmxpbmVhcl9wdF9jb3VudCwgb2MsIG5jKTsKKyAgICB9IHdoaWxlICgg b2MgIT0gbmMgKTsKKworICAgIHJldHVybiAxOworfQorCitzdGF0aWMgdm9p ZCBkZWNfbGluZWFyX2VudHJpZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7 CisgICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG9jOworCisgICAg b2MgPSBhcmNoX2ZldGNoX2FuZF9hZGQoJnBnLT5saW5lYXJfcHRfY291bnQs IC0xKTsKKyAgICBBU1NFUlQob2MgPiAwKTsKK30KKworc3RhdGljIGJvb2xf dCBpbmNfbGluZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7Cisg ICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9t aWMoJnBnLT5saW5lYXJfcHRfY291bnQpLCBvYzsKKworICAgIGRvIHsKKyAg ICAgICAgLyogU2VlIHRoZSByZXNwZWN0aXZlIGNvbW1lbnQgaW4gaW5jX2xp bmVhcl9lbnRyaWVzKCkuICovCisgICAgICAgIEJVSUxEX0JVR19PTihzaXpl b2YobmMpID49IHNpemVvZihpbnQpKTsKKyAgICAgICAgb2MgPSBuYy0tOwor ICAgICAgICBpZiAoIG5jID49IDAgKQorICAgICAgICAgICAgcmV0dXJuIDA7 CisgICAgICAgIG5jID0gY21weGNoZygmcGctPmxpbmVhcl9wdF9jb3VudCwg b2MsIG5jKTsKKyAgICB9IHdoaWxlICggb2MgIT0gbmMgKTsKKworICAgIHJl dHVybiAxOworfQorCitzdGF0aWMgdm9pZCBkZWNfbGluZWFyX3VzZXMoc3Ry dWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5lYXJf cHRfY291bnQpIG9jOworCisgICAgb2MgPSBhcmNoX2ZldGNoX2FuZF9hZGQo JnBnLT5saW5lYXJfcHRfY291bnQsIDEpOworICAgIEFTU0VSVChvYyA8IDAp OworfQorCiAvKgogICogV2UgYWxsb3cgcm9vdCB0YWJsZXMgdG8gbWFwIGVh Y2ggb3RoZXIgKGEuay5hLiBsaW5lYXIgcGFnZSB0YWJsZXMpLiBJdAogICog bmVlZHMgc29tZSBzcGVjaWFsIGNhcmUgd2l0aCByZWZlcmVuY2UgY291bnRz IGFuZCBhY2Nlc3MgcGVybWlzc2lvbnM6CkBAIC03NjEsMTUgKzgxNiwzNSBA QCBnZXRfIyNsZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBpZiAoIChwZm4gPSBsZXZl bCMjZV9nZXRfcGZuKHBkZSkpICE9IHBkZV9wZm4gKSAgICAgICAgICAgICAg ICAgICAgICAgICBcCiAgICAgeyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAorICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3Bh Z2UocGRlX3Bmbik7ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgIC8qIE1ha2Ugc3Vy ZSB0aGUgcGFnZSB0YWJsZSBiZWxvbmdzIHRvIHRoZSBjb3JyZWN0IGRvbWFp bi4gKi8gICAgICAgXAorICAgICAgICBpZiAoIHVubGlrZWx5KHBhZ2VfZ2V0 X293bmVyKHB0cGcpICE9IGQpICkgICAgICAgICAgICAgICAgICAgICAgICAg IFwKKyAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAvKiBNYWtlIHN1 cmUgdGhlIG1hcHBlZCBmcmFtZSBiZWxvbmdzIHRvIHRoZSBjb3JyZWN0IGRv bWFpbi4gKi8gICAgIFwKICAgICAgICAgaWYgKCB1bmxpa2VseSghZ2V0X3Bh Z2VfZnJvbV9wYWdlbnIocGZuLCBkKSkgKSAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgLyogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCi0gICAgICAgICAqIEVuc3VyZSB0aGF0IHRoZSBt YXBwZWQgZnJhbWUgaXMgYW4gYWxyZWFkeS12YWxpZGF0ZWQgcGFnZSB0YWJs ZS4gXAorICAgICAgICAgKiBFbnN1cmUgdGhhdCB0aGUgbWFwcGVkIGZyYW1l IGlzIGFuIGFscmVhZHktdmFsaWRhdGVkIHBhZ2UgdGFibGUgIFwKKyAgICAg ICAgICogYW5kIGlzIG5vdCBpdHNlbGYgaGF2aW5nIGxpbmVhciBlbnRyaWVz LCBhcyB3ZWxsIGFzIHRoYXQgdGhlICAgICBcCisgICAgICAgICAqIGNvbnRh aW5pbmcgcGFnZSB0YWJsZSBpcyBub3QgaXNlbGYgaW4gdXNlIGFzIGEgbGlu ZWFyIHBhZ2UgdGFibGUgXAorICAgICAgICAgKiBlbHNld2hlcmUuICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgICogSWYgc28sIGF0b21pY2FsbHkgaW5jcmVtZW50 IHRoZSBjb3VudCAoY2hlY2tpbmcgZm9yIG92ZXJmbG93KS4gICBcCiAgICAg ICAgICAqLyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICBwYWdlID0g bWZuX3RvX3BhZ2UocGZuKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKKyAgICAgICAgaWYgKCAhaW5jX2xpbmVhcl9l bnRyaWVzKHB0cGcpICkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAg ICAgICAgICAgcHV0X3BhZ2UocGFnZSk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHJl dHVybiAwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCisgICAgICAgIH0gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAorICAgICAgICBpZiAoICFpbmNfbGluZWFyX3VzZXMocGFnZSkg KSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAg ICAgICAgeyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICBk ZWNfbGluZWFyX2VudHJpZXMocHRwZyk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAorICAgICAgICAgICAgcHV0X3BhZ2UocGFn ZSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKKyAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisg ICAgICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICB5ID0g cGFnZS0+dS5pbnVzZS50eXBlX2luZm87ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgZG8geyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCiAgICAgICAgICAgICB4ID0geTsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXApA QCAtNzc3LDYgKzg1Miw4IEBAIGdldF8jI2xldmVsIyNfbGluZWFyX3BhZ2V0 YWJsZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgICAgICAgICAgICAgIHVubGlrZWx5KCh4ICYgKFBHVF90 eXBlX21hc2t8UEdUX3ZhbGlkYXRlZCkpICE9ICAgICAgICAgICAgXAogICAg ICAgICAgICAgICAgICAgICAgICAgICAoUEdUXyMjbGV2ZWwjI19wYWdlX3Rh YmxlfFBHVF92YWxpZGF0ZWQpKSApICAgICAgIFwKICAgICAgICAgICAgIHsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICAgICAgZGVjX2xpbmVh cl91c2VzKHBhZ2UpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAorICAgICAgICAgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhw dHBnKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAg ICAgICAgICAgICAgICBwdXRfcGFnZShwYWdlKTsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAg ICAgcmV0dXJuIDA7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgfSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKQEAgLTEyMDEsNiArMTI3OCw5IEBAIGdldF9wYWdlX2Zyb21f bDRlKAogICAgICAgICAgICAgbDNlX3JlbW92ZV9mbGFncygocGwzZSksIF9Q QUdFX1VTRVJ8X1BBR0VfUld8X1BBR0VfQUNDRVNTRUQpOyAgIFwKICAgICB9 IHdoaWxlICggMCApCiAKK3N0YXRpYyBpbnQgX3B1dF9wYWdlX3R5cGUoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSwgYm9vbF90IHByZWVtcHRpYmxlLAorICAg ICAgICAgICAgICAgICAgICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBn KTsKKwogdm9pZCBwdXRfcGFnZV9mcm9tX2wxZShsMV9wZ2VudHJ5X3QgbDFl LCBzdHJ1Y3QgZG9tYWluICpsMWVfb3duZXIpCiB7CiAgICAgdW5zaWduZWQg bG9uZyAgICAgcGZuID0gbDFlX2dldF9wZm4obDFlKTsKQEAgLTEyNzAsMTcg KzEzNTAsMjIgQEAgc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wyZShsMl9w Z2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKICAgICBpZiAoIGwy ZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BTRSApCiAgICAgICAgIHB1dF9z dXBlcnBhZ2UobDJlX2dldF9wZm4obDJlKSk7CiAgICAgZWxzZQotICAgICAg ICBwdXRfcGFnZV9hbmRfdHlwZShsMmVfZ2V0X3BhZ2UobDJlKSk7CisgICAg eworICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9nZXRfcGFn ZShsMmUpOworICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg MCwgbWZuX3RvX3BhZ2UocGZuKSk7CisKKyAgICAgICAgQVNTRVJUKCFyYyk7 CisgICAgICAgIHB1dF9wYWdlKHBnKTsKKyAgICB9CiAKICAgICByZXR1cm4g MDsKIH0KIAotc3RhdGljIGludCBfX3B1dF9wYWdlX3R5cGUoc3RydWN0IHBh Z2VfaW5mbyAqLCBpbnQgcHJlZW1wdGlibGUpOwotCiBzdGF0aWMgaW50IHB1 dF9wYWdlX2Zyb21fbDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxv bmcgcGZuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQgcGFy dGlhbCwgYm9vbF90IGRlZmVyKQogewogICAgIHN0cnVjdCBwYWdlX2luZm8g KnBnOworICAgIGludCByYzsKIAogICAgIGlmICggIShsM2VfZ2V0X2ZsYWdz KGwzZSkgJiBfUEFHRV9QUkVTRU5UKSB8fCAobDNlX2dldF9wZm4obDNlKSA9 PSBwZm4pICkKICAgICAgICAgcmV0dXJuIDE7CkBAIC0xMzAzLDIxICsxMzg4 LDI4IEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sM2UobDNfcGdlbnRy eV90IGwzZSwgdW5zaWduZWQgbG9uZyBwZm4sCiAgICAgaWYgKCB1bmxpa2Vs eShwYXJ0aWFsID4gMCkgKQogICAgIHsKICAgICAgICAgQVNTRVJUKCFkZWZl cik7Ci0gICAgICAgIHJldHVybiBfX3B1dF9wYWdlX3R5cGUocGcsIDEpOwor ICAgICAgICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGcsIDEsIG1mbl90b19w YWdlKHBmbikpOwogICAgIH0KIAogICAgIGlmICggZGVmZXIgKQogICAgIHsK KyAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90 b19wYWdlKHBmbik7CiAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGc7CiAgICAgICAgIHJldHVybiAwOwogICAgIH0KIAotICAg IHJldHVybiBwdXRfcGFnZV9hbmRfdHlwZV9wcmVlbXB0aWJsZShwZyk7Cisg ICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgMSwgbWZuX3RvX3BhZ2UocGZu KSk7CisgICAgaWYgKCBsaWtlbHkoIXJjKSApCisgICAgICAgIHB1dF9wYWdl KHBnKTsKKworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBwdXRf cGFnZV9mcm9tX2w0ZShsNF9wZ2VudHJ5X3QgbDRlLCB1bnNpZ25lZCBsb25n IHBmbiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHBhcnRp YWwsIGJvb2xfdCBkZWZlcikKIHsKKyAgICBpbnQgcmMgPSAxOworCiAgICAg aWYgKCAobDRlX2dldF9mbGFncyhsNGUpICYgX1BBR0VfUFJFU0VOVCkgJiYg CiAgICAgICAgICAobDRlX2dldF9wZm4obDRlKSAhPSBwZm4pICkKICAgICB7 CkBAIC0xMzI2LDE4ICsxNDE4LDIyIEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2Vf ZnJvbV9sNGUobDRfcGdlbnRyeV90IGw0ZSwgdW5zaWduZWQgbG9uZyBwZm4s CiAgICAgICAgIGlmICggdW5saWtlbHkocGFydGlhbCA+IDApICkKICAgICAg ICAgewogICAgICAgICAgICAgQVNTRVJUKCFkZWZlcik7Ci0gICAgICAgICAg ICByZXR1cm4gX19wdXRfcGFnZV90eXBlKHBnLCAxKTsKKyAgICAgICAgICAg IHJldHVybiBfcHV0X3BhZ2VfdHlwZShwZywgMSwgbWZuX3RvX3BhZ2UocGZu KSk7CiAgICAgICAgIH0KIAogICAgICAgICBpZiAoIGRlZmVyICkKICAgICAg ICAgeworICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRw ZyA9IG1mbl90b19wYWdlKHBmbik7CiAgICAgICAgICAgICBjdXJyZW50LT5h cmNoLm9sZF9ndWVzdF90YWJsZSA9IHBnOwogICAgICAgICAgICAgcmV0dXJu IDA7CiAgICAgICAgIH0KIAotICAgICAgICByZXR1cm4gcHV0X3BhZ2VfYW5k X3R5cGVfcHJlZW1wdGlibGUocGcpOworICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCAxLCBtZm5fdG9fcGFnZShwZm4pKTsKKyAgICAgICAgaWYg KCBsaWtlbHkoIXJjKSApCisgICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAg ICAgfQotICAgIHJldHVybiAxOworCisgICAgcmV0dXJuIHJjOwogfQogCiBz dGF0aWMgaW50IGFsbG9jX2wxX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCkBAIC0xNTM1LDYgKzE2MzEsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2wz X3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiAgICAgICAgIHsKICAg ICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKICAgICAg ICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIGN1 cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAg ICAgICB9CiAgICAgICAgIHdoaWxlICggaS0tID4gMCApCkBAIC0xNjI3LDYg KzE3MjQsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2w0X3RhYmxlKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCiAgICAgICAgICAgICAgICAgewogICAgICAgICAg ICAgICAgICAgICBpZiAoIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxl ICkKICAgICAgICAgICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRl ZF9wdGVzKys7CisgICAgICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICBj dXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CiAgICAgICAg ICAgICAgICAgfQogICAgICAgICAgICAgfQpAQCAtMjM2OSwxNCArMjQ2Nywy MCBAQCBpbnQgZnJlZV9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFn CiB9CiAKIAotc3RhdGljIGludCBfX3B1dF9maW5hbF9wYWdlX3R5cGUoCi0g ICAgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBl LCBpbnQgcHJlZW1wdGlibGUpCitzdGF0aWMgaW50IF9wdXRfZmluYWxfcGFn ZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcg dHlwZSwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbF90 IHByZWVtcHRpYmxlLCBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnKQogewogICAg IGludCByYyA9IGZyZWVfcGFnZV90eXBlKHBhZ2UsIHR5cGUsIHByZWVtcHRp YmxlKTsKIAogICAgIC8qIE5vIG5lZWQgZm9yIGF0b21pYyB1cGRhdGUgb2Yg dHlwZV9pbmZvIGhlcmU6IG5vb25lIGVsc2UgdXBkYXRlcyBpdC4gKi8KICAg ICBpZiAoIHJjID09IDAgKQogICAgIHsKKyAgICAgICAgaWYgKCBwdHBnICYm IFBHVF90eXBlX2VxdWFsKHR5cGUsIHB0cGctPnUuaW51c2UudHlwZV9pbmZv KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGRlY19saW5lYXJfdXNlcyhw YWdlKTsKKyAgICAgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhwdHBnKTsK KyAgICAgICAgfQorICAgICAgICBBU1NFUlQoIXBhZ2UtPmxpbmVhcl9wdF9j b3VudCB8fCBwYWdlX2dldF9vd25lcihwYWdlKS0+aXNfZHlpbmcpOwogICAg ICAgICAvKgogICAgICAgICAgKiBSZWNvcmQgVExCIGluZm9ybWF0aW9uIGZv ciBmbHVzaCBsYXRlci4gV2UgZG8gbm90IHN0YW1wIHBhZ2UgdGFibGVzCiAg ICAgICAgICAqIHdoZW4gcnVubmluZyBpbiBzaGFkb3cgbW9kZToKQEAgLTI0 MTIsOCArMjUxNiw4IEBAIHN0YXRpYyBpbnQgX19wdXRfZmluYWxfcGFnZV90 eXBlKAogfQogCiAKLXN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UsCi0gICAgICAgICAgICAgICAgICAgICAgICAg ICBpbnQgcHJlZW1wdGlibGUpCitzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBl KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIGJvb2xfdCBwcmVlbXB0aWJsZSwK KyAgICAgICAgICAgICAgICAgICAgICAgICAgc3RydWN0IHBhZ2VfaW5mbyAq cHRwZykKIHsKICAgICB1bnNpZ25lZCBsb25nIG54LCB4LCB5ID0gcGFnZS0+ dS5pbnVzZS50eXBlX2luZm87CiAgICAgaW50IHJjID0gMDsKQEAgLTI0NDAs MTIgKzI1NDQsMjggQEAgc3RhdGljIGludCBfX3B1dF9wYWdlX3R5cGUoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB4LCBueCkpICE9IHgpICkKICAgICAgICAg ICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgICAgICAgLyogV2Ug Y2xlYXJlZCB0aGUgJ3ZhbGlkIGJpdCcgc28gd2UgZG8gdGhlIGNsZWFuIHVw LiAqLwotICAgICAgICAgICAgICAgIHJjID0gX19wdXRfZmluYWxfcGFnZV90 eXBlKHBhZ2UsIHgsIHByZWVtcHRpYmxlKTsKKyAgICAgICAgICAgICAgICBy YyA9IF9wdXRfZmluYWxfcGFnZV90eXBlKHBhZ2UsIHgsIHByZWVtcHRpYmxl LCBwdHBnKTsKKyAgICAgICAgICAgICAgICBwdHBnID0gTlVMTDsKICAgICAg ICAgICAgICAgICBpZiAoIHggJiBQR1RfcGFydGlhbCApCiAgICAgICAgICAg ICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICAgICAgfQogCisgICAgICAgICAgICBpZiAoIHB0cGcg JiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBlX2luZm8p ICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAvKgorICAgICAg ICAgICAgICAgICAqIHBhZ2Vfc2V0X3RsYmZsdXNoX3RpbWVzdGFtcCgpIGFj Y2Vzc2VzIHRoZSBzYW1lIHVuaW9uCisgICAgICAgICAgICAgICAgICogbGlu ZWFyX3B0X2NvdW50IGxpdmVzIGluLiBVbnZhbGlkYXRlZCBwYWdlIHRhYmxl IHBhZ2VzLAorICAgICAgICAgICAgICAgICAqIGhvd2V2ZXIsIHNob3VsZCBv Y2N1ciBkdXJpbmcgZG9tYWluIGRlc3RydWN0aW9uIG9ubHkKKyAgICAgICAg ICAgICAgICAgKiBhbnl3YXkuICBVcGRhdGluZyBvZiBsaW5lYXJfcHRfY291 bnQgbHVja2lseSBpcyBub3QKKyAgICAgICAgICAgICAgICAgKiBuZWNlc3Nh cnkgYW55bW9yZSBmb3IgYSBkeWluZyBkb21haW4uCisgICAgICAgICAgICAg ICAgICovCisgICAgICAgICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVy KHBhZ2UpLT5pc19keWluZyk7CisgICAgICAgICAgICAgICAgQVNTRVJUKHBh Z2UtPmxpbmVhcl9wdF9jb3VudCA8IDApOworICAgICAgICAgICAgICAgIEFT U0VSVChwdHBnLT5saW5lYXJfcHRfY291bnQgPiAwKTsKKyAgICAgICAgICAg ICAgICBwdHBnID0gTlVMTDsKKyAgICAgICAgICAgIH0KKwogICAgICAgICAg ICAgLyoKICAgICAgICAgICAgICAqIFJlY29yZCBUTEIgaW5mb3JtYXRpb24g Zm9yIGZsdXNoIGxhdGVyLiBXZSBkbyBub3Qgc3RhbXAgcGFnZQogICAgICAg ICAgICAgICogdGFibGVzIHdoZW4gcnVubmluZyBpbiBzaGFkb3cgbW9kZToK QEAgLTI0NjUsNiArMjU4NSwxMyBAQCBzdGF0aWMgaW50IF9fcHV0X3BhZ2Vf dHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLAogICAgICAgICAgICAgcmV0 dXJuIC1FSU5UUjsKICAgICB9CiAKKyAgICBpZiAoIHB0cGcgJiYgUEdUX3R5 cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBlX2luZm8pICkKKyAgICB7 CisgICAgICAgIEFTU0VSVCghcmMpOworICAgICAgICBkZWNfbGluZWFyX3Vz ZXMocGFnZSk7CisgICAgICAgIGRlY19saW5lYXJfZW50cmllcyhwdHBnKTsK KyAgICB9CisKICAgICByZXR1cm4gcmM7CiB9CiAKQEAgLTI1OTksNiArMjcy Niw3IEBAIHN0YXRpYyBpbnQgX19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKICAgICAgICAgICAg IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gMDsKICAgICAgICAgICAgIHBh Z2UtPnBhcnRpYWxfcHRlID0gMDsKICAgICAgICAgfQorICAgICAgICBwYWdl LT5saW5lYXJfcHRfY291bnQgPSAwOwogICAgICAgICByYyA9IGFsbG9jX3Bh Z2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAgICAgfQogCkBA IC0yNjEwLDcgKzI3MzgsNyBAQCBzdGF0aWMgaW50IF9fZ2V0X3BhZ2VfdHlw ZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUs CiAKIHZvaWQgcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl KQogewotICAgIGludCByYyA9IF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAwKTsK KyAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwYWdlLCAwLCBOVUxMKTsK ICAgICBBU1NFUlQocmMgPT0gMCk7CiAgICAgKHZvaWQpcmM7CiB9CkBAIC0y NjI2LDcgKzI3NTQsNyBAQCBpbnQgZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFn ZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBsb25nIHR5cGUpCiAKIGludCBwdXRf cGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2Up CiB7Ci0gICAgcmV0dXJuIF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAxKTsKKyAg ICByZXR1cm4gX3B1dF9wYWdlX3R5cGUocGFnZSwgMSwgTlVMTCk7CiB9CiAK IGludCBnZXRfcGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2lu Zm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSkKQEAgLTI4MzIsMTEgKzI5 NjAsMTQgQEAgaW50IHB1dF9vbGRfZ3Vlc3RfdGFibGUoc3RydWN0IHZjcHUg KnYpCiAgICAgaWYgKCAhdi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgKQogICAg ICAgICByZXR1cm4gMDsKIAotICAgIHN3aXRjaCAoIHJjID0gcHV0X3BhZ2Vf YW5kX3R5cGVfcHJlZW1wdGlibGUodi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUp ICkKKyAgICBzd2l0Y2ggKCByYyA9IF9wdXRfcGFnZV90eXBlKHYtPmFyY2gu b2xkX2d1ZXN0X3RhYmxlLCAxLAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZykgKQogICAgIHsKICAg ICBjYXNlIC1FSU5UUjoKICAgICBjYXNlIC1FUkVTVEFSVDoKICAgICAgICAg cmV0dXJuIC1FUkVTVEFSVDsKKyAgICBjYXNlIDA6CisgICAgICAgIHB1dF9w YWdlKHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlKTsKICAgICB9CiAKICAgICB2 LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IE5VTEw7CkBAIC0yOTkzLDYgKzMx MjQsNyBAQCBpbnQgbmV3X2d1ZXN0X2NyMyh1bnNpZ25lZCBsb25nIG1mbikK ICAgICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAg ICAgICAvKiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgY2FzZSAtRVJF U1RBUlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf cHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRf Z3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIGJyZWFrOwog ICAgICAgICAgICAgZGVmYXVsdDoKQEAgLTMyNjAsNyArMzM5MiwxMCBAQCBs b25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgaWYgKCB0 eXBlID09IFBHVF9sMV9wYWdlX3RhYmxlICkKICAgICAgICAgICAgICAgICAg ICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOwogICAgICAgICAgICAg ICAgICAgICBlbHNlCisgICAgICAgICAgICAgICAgICAgIHsKKyAgICAgICAg ICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBO VUxMOwogICAgICAgICAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRf Z3Vlc3RfdGFibGUgPSBwYWdlOworICAgICAgICAgICAgICAgICAgICB9CiAg ICAgICAgICAgICAgICAgfQogICAgICAgICAgICAgfQogCkBAIC0zMjkzLDYg KzM0MjgsNyBAQCBsb25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgIHsK ICAgICAgICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAgICAgICAgY2FzZSAt RVJFU1RBUlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vl c3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5v bGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIHJjID0g MDsKICAgICAgICAgICAgICAgICBicmVhazsKQEAgLTMzNzEsNiArMzUwNyw3 IEBAIGxvbmcgZG9fbW11ZXh0X29wKAogICAgICAgICAgICAgICAgICAgICAg ICAgcmMgPSAtRVJFU1RBUlQ7CiAgICAgICAgICAgICAgICAgICAgICAgICAv KiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgICAgICAgICBjYXNlIC1F UkVTVEFSVDoKKyAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICAg ICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAg ICAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICAgICAgICAg IGRlZmF1bHQ6CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2Rv bWFpbi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCAx NjVlNTMzYWIzLi41ZWY3NjFiZThiIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv ZG9tYWluLmgKQEAgLTUyOSw2ICs1MjksOCBAQCBzdHJ1Y3QgYXJjaF92Y3B1 CiAgICAgcGFnZXRhYmxlX3QgZ3Vlc3RfdGFibGVfdXNlcjsgICAgICAgLyog KE1GTikgeDg2LzY0IHVzZXItc3BhY2UgcGFnZXRhYmxlICovCiAgICAgcGFn ZXRhYmxlX3QgZ3Vlc3RfdGFibGU7ICAgICAgICAgICAgLyogKE1GTikgZ3Vl c3Qgbm90aW9uIG9mIGNyMyAqLwogICAgIHN0cnVjdCBwYWdlX2luZm8gKm9s ZF9ndWVzdF90YWJsZTsgIC8qIHBhcnRpYWxseSBkZXN0cnVjdGVkIHBhZ2V0 YWJsZSAqLworICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVzdF9wdHBn OyAgIC8qIGNvbnRhaW5pbmcgcGFnZSB0YWJsZSBvZiB0aGUgKi8KKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmb3JtZXIs IGlmIGFueSAqLwogICAgIC8qIGd1ZXN0X3RhYmxlIGhvbGRzIGEgcmVmIHRv IHRoZSBwYWdlLCBhbmQgYWxzbyBhIHR5cGUtY291bnQgdW5sZXNzCiAgICAg ICogc2hhZG93IHJlZmNvdW50cyBhcmUgaW4gdXNlICovCiAgICAgcGFnZXRh YmxlX3Qgc2hhZG93X3RhYmxlWzRdOyAgICAgICAgLyogKE1GTikgc2hhZG93 KHMpIG9mIGd1ZXN0ICovCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20t eDg2L21tLmggYi94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgKaW5kZXggYTMw ZTc2ZGIxZS4uOTA1Yzc5NzFmMiAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9tbS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbW0uaApA QCAtMTI1LDExICsxMjUsMTEgQEAgc3RydWN0IHBhZ2VfaW5mbwogICAgICAg ICB1MzIgdGxiZmx1c2hfdGltZXN0YW1wOwogCiAgICAgICAgIC8qCi0gICAg ICAgICAqIFdoZW4gUEdUX3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRoaXMgZmll bGQgaXMgdmFsaWQgYW5kIGluZGljYXRlcwotICAgICAgICAgKiB0aGF0IFBU RXMgaW4gdGhlIHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMpIGhhdmUg YmVlbiB2YWxpZGF0ZWQuCi0gICAgICAgICAqIEFuIGV4dHJhIHBhZ2UgcmVm ZXJlbmNlIG11c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVkKSB3aGVu ZXZlcgotICAgICAgICAgKiBQR1RfcGFydGlhbCBnZXRzIHNldCwgYW5kIGl0 IG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBmbGFnIGdldHMKLSAgICAgICAg ICogY2xlYXJlZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVhdmluZyBh IHBhZ2UgaW4gcGFydGlhbGx5CisgICAgICAgICAqIFdoZW4gUEdUX3BhcnRp YWwgaXMgdHJ1ZSB0aGVuIHRoZSBmaXJzdCB0d28gZmllbGRzIGFyZSB2YWxp ZCBhbmQKKyAgICAgICAgICogaW5kaWNhdGUgdGhhdCBQVEVzIGluIHRoZSBy YW5nZSBbMCwgQG5yX3ZhbGlkYXRlZF9wdGVzKSBoYXZlIGJlZW4KKyAgICAg ICAgICogdmFsaWRhdGVkLiBBbiBleHRyYSBwYWdlIHJlZmVyZW5jZSBtdXN0 IGJlIGFjcXVpcmVkIChvciBub3QgZHJvcHBlZCkKKyAgICAgICAgICogd2hl bmV2ZXIgUEdUX3BhcnRpYWwgZ2V0cyBzZXQsIGFuZCBpdCBtdXN0IGJlIGRy b3BwZWQgd2hlbiB0aGUgZmxhZworICAgICAgICAgKiBnZXRzIGNsZWFyZWQu IFRoaXMgaXMgc28gdGhhdCBhIGdldCgpIGxlYXZpbmcgYSBwYWdlIGluIHBh cnRpYWxseQogICAgICAgICAgKiB2YWxpZGF0ZWQgc3RhdGUgKHdoZXJlIHRo ZSBjYWxsZXIgd291bGQgZHJvcCB0aGUgcmVmZXJlbmNlIGFjcXVpcmVkCiAg ICAgICAgICAqIGR1ZSB0byB0aGUgZ2V0dGluZyBvZiB0aGUgdHlwZSBbYXBw YXJlbnRseV0gZmFpbGluZyBbLUVSRVNUQVJUXSkKICAgICAgICAgICogd291 bGQgbm90IGFjY2lkZW50YWxseSByZXN1bHQgaW4gYSBwYWdlIGxlZnQgd2l0 aCB6ZXJvIGdlbmVyYWwKQEAgLTE1MywxMCArMTUzLDE4IEBAIHN0cnVjdCBw YWdlX2luZm8KICAgICAgICAgICogcHV0X3BhZ2VfZnJvbV9sTmUoKSAoZHVl IHRvIHRoZSBhcHBhcmVudCBmYWlsdXJlKSwgYW5kIGhlbmNlIGl0CiAgICAg ICAgICAqIG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBwdXQgb3BlcmF0aW9u IGlzIHJlc3VtZWQgKGFuZCBjb21wbGV0ZXMpLAogICAgICAgICAgKiBidXQg aXQgbXVzdCBub3QgYmUgYWNxdWlyZWQgaWYgcGlja2luZyB1cCB0aGUgcGFn ZSBmb3IgdmFsaWRhdGlvbi4KKyAgICAgICAgICoKKyAgICAgICAgICogVGhl IDNyZCBmaWVsZCwgQGxpbmVhcl9wdF9jb3VudCwgaW5kaWNhdGVzCisgICAg ICAgICAqIC0gYnkgYSBwb3NpdGl2ZSB2YWx1ZSwgaG93IG1hbnkgc2FtZS1s ZXZlbCBwYWdlIHRhYmxlIGVudHJpZXMgYSBwYWdlCisgICAgICAgICAqICAg dGFibGUgaGFzLAorICAgICAgICAgKiAtIGJ5IGEgbmVnYXRpdmUgdmFsdWUs IGluIGhvdyBtYW55IHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgYSBwYWdlIGlz CisgICAgICAgICAqICAgaW4gdXNlLgogICAgICAgICAgKi8KICAgICAgICAg c3RydWN0IHsKLSAgICAgICAgICAgIHUxNiBucl92YWxpZGF0ZWRfcHRlczsK LSAgICAgICAgICAgIHM4IHBhcnRpYWxfcHRlOworICAgICAgICAgICAgdTE2 IG5yX3ZhbGlkYXRlZF9wdGVzOlBBR0VUQUJMRV9PUkRFUiArIDE7CisgICAg ICAgICAgICB1MTYgOjE2IC0gUEFHRVRBQkxFX09SREVSIC0gMSAtIDI7Cisg ICAgICAgICAgICBzMTYgcGFydGlhbF9wdGU6MjsKKyAgICAgICAgICAgIHMx NiBsaW5lYXJfcHRfY291bnQ7CiAgICAgICAgIH07CiAKICAgICAgICAgLyoK QEAgLTIwNyw2ICsyMTUsOSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAjZGVmaW5l IFBHVF9jb3VudF93aWR0aCAgIFBHX3NoaWZ0KDkpCiAjZGVmaW5lIFBHVF9j b3VudF9tYXNrICAgICgoMVVMPDxQR1RfY291bnRfd2lkdGgpLTEpCiAKKy8q IEFyZSB0aGUgJ3R5cGUgbWFzaycgYml0cyBpZGVudGljYWw/ICovCisjZGVm aW5lIFBHVF90eXBlX2VxdWFsKHgsIHkpICghKCgoeCkgXiAoeSkpICYgUEdU X3R5cGVfbWFzaykpCisKICAvKiBDbGVhcmVkIHdoZW4gdGhlIG93bmluZyBn dWVzdCAnZnJlZXMnIHRoaXMgcGFnZS4gKi8KICNkZWZpbmUgX1BHQ19hbGxv Y2F0ZWQgICAgUEdfc2hpZnQoMSkKICNkZWZpbmUgUEdDX2FsbG9jYXRlZCAg ICAgUEdfbWFzaygxLCAxKQotLSAKMi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-4.7/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-4.7/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSA5YTRiMzQ3MjlmMWJiOTJlZWExZTFlZmU1MmU2ZmFjZTlmMGIxN2Fl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAgOSArKysrKysrKysKIDIgZmlsZXMgY2hhbmdlZCwgMjQgaW5z ZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL2RvY3MvbWlzYy94ZW4tY29tbWFu ZC1saW5lLm1hcmtkb3duIGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUu bWFya2Rvd24KaW5kZXggNzNmNTI2NWZjNi4uMDYxYWZmNWVkYyAxMDA2NDQK LS0tIGEvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KKysr IGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KQEAgLTEy ODAsNiArMTI4MCwyMSBAQCBUaGUgZm9sbG93aW5nIHJlc291cmNlcyBhcmUg YXZhaWxhYmxlOgogICAgIENEUCwgb25lIENPUyB3aWxsIGNvcmVzcG9uZCB0 d28gQ0JNcyBvdGhlciB0aGFuIG9uZSB3aXRoIENBVCwgZHVlIHRvIHRoZQog ICAgIHN1bSBvZiBDQk1zIGlzIGZpeGVkLCB0aGF0IG1lYW5zIGFjdHVhbCBg Y29zX21heGAgaW4gdXNlIHdpbGwgYXV0b21hdGljYWxseQogICAgIHJlZHVj ZSB0byBoYWxmIHdoZW4gQ0RQIGlzIGVuYWJsZWQuCisKKyMjIyBwdi1saW5l YXItcHQKKz4gYD0gPGJvb2xlYW4+YAorCis+IERlZmF1bHQ6IGBmYWxzZWAK KworQWxsb3cgUFYgZ3Vlc3RzIHRvIGhhdmUgcGFnZXRhYmxlIGVudHJpZXMg cG9pbnRpbmcgdG8gb3RoZXIgcGFnZXRhYmxlcworb2YgdGhlIHNhbWUgbGV2 ZWwgKGkuZS4sIGFsbG93aW5nIEwyIFBURXMgdG8gcG9pbnQgdG8gb3RoZXIg TDIgcGFnZXMpLgorVGhpcyB0ZWNobmlxdWUgaXMgb2Z0ZW4gY2FsbGVkICJs aW5lYXIgcGFnZXRhYmxlcyIsIGFuZCBpcyBzb21ldGltZXMKK3VzZWQgdG8g YWxsb3cgb3BlcmF0aW5nIHN5c3RlbXMgYSBzaW1wbGUgd2F5IHRvIGNvbnNp c3RlbnRseSBtYXAgdGhlCitjdXJyZW50IHByb2Nlc3MncyBwYWdldGFibGVz IGludG8gaXRzIG93biB2aXJ0dWFsIGFkZHJlc3Mgc3BhY2UuCisKK05vbmUg b2YgdGhlIG1vc3QgY29tbW9uIFBWIG9wZXJhdGluZyBzeXN0ZW1zIChMaW51 eCwgTmV0QlNELCBNaW5pT1MpCit1c2UgdGhpcyB0ZWNobmlxdWUsIGJ1dCB0 aGVyZSBtYXkgYmUgY3VzdG9tIG9wZXJhdGluZyBzeXN0ZW1zIHdoaWNoCitk by4KIAogIyMjIHJlYm9vdAogPiBgPSB0W3JpcGxlXSB8IGtbYmRdIHwgYVtj cGldIHwgcFtjaV0gfCBQW293ZXJdIHwgZVtmaV0gfCBuW29dIFssIFt3XWFy bSB8IFtjXW9sZF1gCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0uYyBi L3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGU4MWE0NjFiOTEuLmY3NDhkNGEy MjEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC03OTksNiArNzk5LDkgQEAgc3RhdGljIHZvaWQg ZGVjX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQogICogICAg IGZyYW1lIGlmIGl0IGlzIG1hcHBlZCBieSBhIGRpZmZlcmVudCByb290IHRh YmxlLiBUaGlzIGlzIHN1ZmZpY2llbnQgYW5kCiAgKiAgICAgYWxzbyBuZWNl c3NhcnkgdG8gYWxsb3cgdmFsaWRhdGlvbiBvZiBhIHJvb3QgdGFibGUgbWFw cGluZyBpdHNlbGYuCiAgKi8KK3N0YXRpYyBib29sX3QgX19yZWFkX21vc3Rs eSBwdl9saW5lYXJfcHRfZW5hYmxlID0gMDsKK2Jvb2xlYW5fcGFyYW0oInB2 LWxpbmVhci1wdCIsIHB2X2xpbmVhcl9wdF9lbmFibGUpOworCiAjZGVmaW5l IGRlZmluZV9nZXRfbGluZWFyX3BhZ2V0YWJsZShsZXZlbCkgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogc3RhdGljIGludCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKIGdldF8jI2xldmVsIyNfbGluZWFyX3BhZ2V0YWJs ZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCkBAIC04MDgsNiArODExLDEyIEBAIGdldF8jI2xldmVsIyNfbGluZWFy X3BhZ2V0YWJsZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCiAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZTsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAogICAgIHVuc2lnbmVkIGxvbmcgcGZuOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgaWYgKCAhcHZfbGluZWFy X3B0X2VuYWJsZSApICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXAorICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKKyAgICAgICAgTUVNX0xPRygiQXR0ZW1wdCB0byBjcmVhdGUgbGluZWFy IHAudC4gKGZlYXR1cmUgZGlzYWJsZWQpIik7ICAgICAgICBcCisgICAgICAg IHJldHVybiAwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgIH0gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgaWYgKCAobGV2ZWwjI2VfZ2V0X2ZsYWdzKHBkZSkgJiBfUEFH RV9SVykgKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIHsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAgICAgTUVNX0xPRygi QXR0ZW1wdCB0byBjcmVhdGUgbGluZWFyIHAudC4gd2l0aCB3cml0ZSBwZXJt cyIpOyAgICAgICAgICBcCi0tIAoyLjE0LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa240-4.7/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-4.7/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjYxMiwzNCArMjYx MiwyMiBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAK LSNpZmRlZiBDT05GSUdfUFZfTElORUFSX1BUCi0gICAgICAgICAgICBpZiAo IHB0cGcgJiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBl X2luZm8pICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICAvKgot ICAgICAgICAgICAgICAgICAqIHNldF90bGJmbHVzaF90aW1lc3RhbXAoKSBh Y2Nlc3NlcyB0aGUgc2FtZSB1bmlvbgotICAgICAgICAgICAgICAgICAqIGxp bmVhcl9wdF9jb3VudCBsaXZlcyBpbi4gVW52YWxpZGF0ZWQgcGFnZSB0YWJs ZSBwYWdlcywKLSAgICAgICAgICAgICAgICAgKiBob3dldmVyLCBzaG91bGQg b2NjdXIgZHVyaW5nIGRvbWFpbiBkZXN0cnVjdGlvbiBvbmx5Ci0gICAgICAg ICAgICAgICAgICogYW55d2F5LiAgVXBkYXRpbmcgb2YgbGluZWFyX3B0X2Nv dW50IGx1Y2tpbHkgaXMgbm90Ci0gICAgICAgICAgICAgICAgICogbmVjZXNz YXJ5IGFueW1vcmUgZm9yIGEgZHlpbmcgZG9tYWluLgotICAgICAgICAgICAg ICAgICAqLwotICAgICAgICAgICAgICAgIEFTU0VSVChwYWdlX2dldF9vd25l cihwYWdlKS0+aXNfZHlpbmcpOwotICAgICAgICAgICAgICAgIEFTU0VSVChw YWdlLT5saW5lYXJfcHRfY291bnQgPCAwKTsKLSAgICAgICAgICAgICAgICBB U1NFUlQocHRwZy0+bGluZWFyX3B0X2NvdW50ID4gMCk7Ci0gICAgICAgICAg ICAgICAgcHRwZyA9IE5VTEw7Ci0gICAgICAgICAgICB9Ci0jZWxzZSAvKiBD T05GSUdfUFZfTElORUFSX1BUICovCi0gICAgICAgICAgICBCVUdfT04ocHRw ZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5m bykpOwotI2VuZGlmCi0KICAgICAgICAgICAgIC8qCiAgICAgICAgICAgICAg KiBSZWNvcmQgVExCIGluZm9ybWF0aW9uIGZvciBmbHVzaCBsYXRlci4gV2Ug ZG8gbm90IHN0YW1wIHBhZ2UKICAgICAgICAgICAgICAqIHRhYmxlcyB3aGVu IHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CiAgICAgICAgICAgICAgKiAgMS4g UG9pbnRsZXNzLCBzaW5jZSBpdCdzIHRoZSBzaGFkb3cgcHQncyB3aGljaCBt dXN0IGJlIHRyYWNrZWQuCiAgICAgICAgICAgICAgKiAgMi4gU2hhZG93IG1v ZGUgcmV1c2VzIHRoaXMgZmllbGQgZm9yIHNoYWRvd2VkIHBhZ2UgdGFibGVz IHRvCiAgICAgICAgICAgICAgKiAgICAgc3RvcmUgZmxhZ3MgaW5mbyAtLSB3 ZSBkb24ndCB3YW50IHRvIGNvbmZsaWN0IHdpdGggdGhhdC4KKyAgICAgICAg ICAgICAqIEFsc28gcGFnZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNj ZXNzZXMgdGhlIHNhbWUgdW5pb24KKyAgICAgICAgICAgICAqIGxpbmVhcl9w dF9jb3VudCBsaXZlcyBpbi4gUGFnZXMgKGluY2x1ZGluZyBwYWdlIHRhYmxl IG9uZXMpLAorICAgICAgICAgICAgICogaG93ZXZlciwgZG9uJ3QgbmVlZCB0 aGVpciBmbHVzaCB0aW1lIHN0YW1wIHNldCBleGNlcHQgd2hlbgorICAgICAg ICAgICAgICogdGhlIGxhc3QgcmVmZXJlbmNlIGlzIGJlaW5nIGRyb3BwZWQu IEZvciBwYWdlIHRhYmxlIHBhZ2VzCisgICAgICAgICAgICAgKiB0aGlzIGhh cHBlbnMgaW4gX3B1dF9maW5hbF9wYWdlX3R5cGUoKS4KICAgICAgICAgICAg ICAqLwotICAgICAgICAgICAgaWYgKCAhKHNoYWRvd19tb2RlX2VuYWJsZWQo cGFnZV9nZXRfb3duZXIocGFnZSkpICYmCi0gICAgICAgICAgICAgICAgICAg KHBhZ2UtPmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKKyAgICAg ICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51 LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICAgICAgICAgIEJVR19PTigh SVNfRU5BQkxFRChDT05GSUdfUFZfTElORUFSX1BUKSk7CisgICAgICAgICAg ICBlbHNlIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0X293 bmVyKHBhZ2UpKSAmJgorICAgICAgICAgICAgICAgICAgICAgICAgKHBhZ2Ut PmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKICAgICAgICAgICAg ICAgICBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAocGFnZSk7CiAgICAg ICAgIH0KICAgICAgICAgZWxzZSBpZiAoIHVubGlrZWx5KChueCAmIChQR1Rf bG9ja2VkIHwgUEdUX2NvdW50X21hc2spKSA9PQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.7/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-4.7/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI1NTksOSArMjU1OSw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0 X293bmVyKHBhZ2UpKSAmJgotICAgICAgICAgICAgICAgKHBhZ2UtPmNvdW50 X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKLSAgICAgICAgICAgIHBhZ2Vf c2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsKICAgICAgICAgd21iKCk7 CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvIHw9IFBHVF92YWxp ZGF0ZWQ7CiAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.8/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-4.8/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSAyMzE1YjhjNjUxZTBjYzMxYzkxNTNkMDljOTkxMmI4ZmJlNjMyYWQy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMjggU2VwIDIwMTcgMTU6 MTc6MjUgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAgIDEgKwog eGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MSArKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tCiB4ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14 ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogNCBmaWxlcyBjaGFuZ2VkLCAx NzUgaW5zZXJ0aW9ucygrKSwgMjQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IGE3MjViNDNhNjcuLjUyNjViMDQ5NmMgMTAwNjQ0Ci0tLSBh L3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9t YWluLmMKQEAgLTEyNDUsNiArMTI0NSw3IEBAIGludCBhcmNoX3NldF9pbmZv X2d1ZXN0KAogICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsK ICAgICAgICAgICAgICAgICAgICAgLyogRmFsbHRocm91Z2ggKi8KICAgICAg ICAgICAgICAgICBjYXNlIC1FUkVTVEFSVDoKKyAgICAgICAgICAgICAgICAg ICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAg ICAgICAgICAgIHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0KICAgICAgICAg ICAgICAgICAgICAgICAgIHBhZ2V0YWJsZV9nZXRfcGFnZSh2LT5hcmNoLmd1 ZXN0X3RhYmxlKTsKICAgICAgICAgICAgICAgICAgICAgdi0+YXJjaC5ndWVz dF90YWJsZSA9IHBhZ2V0YWJsZV9udWxsKCk7CmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGE0MDQ2 MWQ0ZDYuLjMxZDRhMDM4NDAgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC03MzMsNiArNzMzLDYx IEBAIHN0YXRpYyB2b2lkIHB1dF9kYXRhX3BhZ2UoCiAgICAgICAgIHB1dF9w YWdlKHBhZ2UpOwogfQogCitzdGF0aWMgYm9vbCBpbmNfbGluZWFyX2VudHJp ZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5s aW5lYXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJf cHRfY291bnQpLCBvYzsKKworICAgIGRvIHsKKyAgICAgICAgLyoKKyAgICAg ICAgICogVGhlIGNoZWNrIGJlbG93IGNoZWNrcyBmb3IgdGhlICJsaW5lYXIg dXNlIiBjb3VudCBiZWluZyBub24temVybworICAgICAgICAgKiBhcyB3ZWxs IGFzIG92ZXJmbG93LiAgU2lnbmVkIGludGVnZXIgb3ZlcmZsb3cgaXMgdW5k ZWZpbmVkIGJlaGF2aW9yCisgICAgICAgICAqIGFjY29yZGluZyB0byB0aGUg QyBzcGVjLiAgSG93ZXZlciwgYXMgbG9uZyBhcyBsaW5lYXJfcHRfY291bnQg aXMKKyAgICAgICAgICogc21hbGxlciBpbiBzaXplIHRoYW4gJ2ludCcsIHRo ZSBhcml0aG1ldGljIG9wZXJhdGlvbiBvZiB0aGUKKyAgICAgICAgICogaW5j cmVtZW50IGJlbG93IHdvbid0IG92ZXJmbG93OyByYXRoZXIgdGhlIHJlc3Vs dCB3aWxsIGJlIHRydW5jYXRlZAorICAgICAgICAgKiB3aGVuIHN0b3JlZC4g IEVuc3VyZSB0aGF0IHRoaXMgaXMgYWx3YXlzIHRydWUuCisgICAgICAgICAq LworICAgICAgICBCVUlMRF9CVUdfT04oc2l6ZW9mKG5jKSA+PSBzaXplb2Yo aW50KSk7CisgICAgICAgIG9jID0gbmMrKzsKKyAgICAgICAgaWYgKCBuYyA8 PSAwICkKKyAgICAgICAgICAgIHJldHVybiBmYWxzZTsKKyAgICAgICAgbmMg PSBjbXB4Y2hnKCZwZy0+bGluZWFyX3B0X2NvdW50LCBvYywgbmMpOworICAg IH0gd2hpbGUgKCBvYyAhPSBuYyApOworCisgICAgcmV0dXJuIHRydWU7Cit9 CisKK3N0YXRpYyB2b2lkIGRlY19saW5lYXJfZW50cmllcyhzdHJ1Y3QgcGFn ZV9pbmZvICpwZykKK3sKKyAgICB0eXBlb2YocGctPmxpbmVhcl9wdF9jb3Vu dCkgb2M7CisKKyAgICBvYyA9IGFyY2hfZmV0Y2hfYW5kX2FkZCgmcGctPmxp bmVhcl9wdF9jb3VudCwgLTEpOworICAgIEFTU0VSVChvYyA+IDApOworfQor CitzdGF0aWMgYm9vbCBpbmNfbGluZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5m byAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG5j ID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJfcHRfY291bnQpLCBvYzsKKwor ICAgIGRvIHsKKyAgICAgICAgLyogU2VlIHRoZSByZXNwZWN0aXZlIGNvbW1l bnQgaW4gaW5jX2xpbmVhcl9lbnRyaWVzKCkuICovCisgICAgICAgIEJVSUxE X0JVR19PTihzaXplb2YobmMpID49IHNpemVvZihpbnQpKTsKKyAgICAgICAg b2MgPSBuYy0tOworICAgICAgICBpZiAoIG5jID49IDAgKQorICAgICAgICAg ICAgcmV0dXJuIGZhbHNlOworICAgICAgICBuYyA9IGNtcHhjaGcoJnBnLT5s aW5lYXJfcHRfY291bnQsIG9jLCBuYyk7CisgICAgfSB3aGlsZSAoIG9jICE9 IG5jICk7CisKKyAgICByZXR1cm4gdHJ1ZTsKK30KKworc3RhdGljIHZvaWQg ZGVjX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQoreworICAg IHR5cGVvZihwZy0+bGluZWFyX3B0X2NvdW50KSBvYzsKKworICAgIG9jID0g YXJjaF9mZXRjaF9hbmRfYWRkKCZwZy0+bGluZWFyX3B0X2NvdW50LCAxKTsK KyAgICBBU1NFUlQob2MgPCAwKTsKK30KKwogLyoKICAqIFdlIGFsbG93IHJv b3QgdGFibGVzIHRvIG1hcCBlYWNoIG90aGVyIChhLmsuYS4gbGluZWFyIHBh Z2UgdGFibGVzKS4gSXQKICAqIG5lZWRzIHNvbWUgc3BlY2lhbCBjYXJlIHdp dGggcmVmZXJlbmNlIGNvdW50cyBhbmQgYWNjZXNzIHBlcm1pc3Npb25zOgpA QCAtNzYyLDE1ICs4MTcsMzUgQEAgZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFn ZXRhYmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAg ICAgaWYgKCAocGZuID0gbGV2ZWwjI2VfZ2V0X3BmbihwZGUpKSAhPSBwZGVf cGZuICkgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIHsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5m byAqcHRwZyA9IG1mbl90b19wYWdlKHBkZV9wZm4pOyAgICAgICAgICAgICAg ICAgICAgICBcCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAor ICAgICAgICAvKiBNYWtlIHN1cmUgdGhlIHBhZ2UgdGFibGUgYmVsb25ncyB0 byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICAgIFwKKyAgICAgICAgaWYg KCB1bmxpa2VseShwYWdlX2dldF9vd25lcihwdHBnKSAhPSBkKSApICAgICAg ICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1cm4gMDsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK ICAgICAgICAgLyogTWFrZSBzdXJlIHRoZSBtYXBwZWQgZnJhbWUgYmVsb25n cyB0byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICBcCiAgICAgICAgIGlm ICggdW5saWtlbHkoIWdldF9wYWdlX2Zyb21fcGFnZW5yKHBmbiwgZCkpICkg ICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgcmV0dXJuIDA7 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CiAgICAgICAgIC8qICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICAg KiBFbnN1cmUgdGhhdCB0aGUgbWFwcGVkIGZyYW1lIGlzIGFuIGFscmVhZHkt dmFsaWRhdGVkIHBhZ2UgdGFibGUuIFwKKyAgICAgICAgICogRW5zdXJlIHRo YXQgdGhlIG1hcHBlZCBmcmFtZSBpcyBhbiBhbHJlYWR5LXZhbGlkYXRlZCBw YWdlIHRhYmxlICBcCisgICAgICAgICAqIGFuZCBpcyBub3QgaXRzZWxmIGhh dmluZyBsaW5lYXIgZW50cmllcywgYXMgd2VsbCBhcyB0aGF0IHRoZSAgICAg XAorICAgICAgICAgKiBjb250YWluaW5nIHBhZ2UgdGFibGUgaXMgbm90IGlz ZWxmIGluIHVzZSBhcyBhIGxpbmVhciBwYWdlIHRhYmxlIFwKKyAgICAgICAg ICogZWxzZXdoZXJlLiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAqIElmIHNvLCBh dG9taWNhbGx5IGluY3JlbWVudCB0aGUgY291bnQgKGNoZWNraW5nIGZvciBv dmVyZmxvdykuICAgXAogICAgICAgICAgKi8gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKICAgICAgICAgcGFnZSA9IG1mbl90b19wYWdlKHBmbik7ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAg IGlmICggIWluY19saW5lYXJfZW50cmllcyhwdHBnKSApICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICB7ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCisgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAg ICB9ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgaWYgKCAhaW5j X2xpbmVhcl91c2VzKHBhZ2UpICkgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCisgICAgICAgIHsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAorICAgICAgICAgICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0cGcpOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAg ICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1 cm4gMDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAorICAgICAgICB9ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgeSA9IHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAg ICAgIGRvIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgeCA9 IHk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKQEAgLTc3OCw2ICs4NTMsOCBAQCBnZXRfIyNs ZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgICAgICB1 bmxpa2VseSgoeCAmIChQR1RfdHlwZV9tYXNrfFBHVF92YWxpZGF0ZWQpKSAh PSAgICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgKFBH VF8jI2xldmVsIyNfcGFnZV90YWJsZXxQR1RfdmFsaWRhdGVkKSkgKSAgICAg ICBcCiAgICAgICAgICAgICB7ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAg ICAgICAgICAgIGRlY19saW5lYXJfdXNlcyhwYWdlKTsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgICAgICBk ZWNfbGluZWFyX2VudHJpZXMocHRwZyk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFn ZSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgICAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAg ICAgICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCkBAIC0xMjAyLDYgKzEyNzks OSBAQCBnZXRfcGFnZV9mcm9tX2w0ZSgKICAgICAgICAgICAgIGwzZV9yZW1v dmVfZmxhZ3MoKHBsM2UpLCBfUEFHRV9VU0VSfF9QQUdFX1JXfF9QQUdFX0FD Q0VTU0VEKTsgICBcCiAgICAgfSB3aGlsZSAoIDAgKQogCitzdGF0aWMgaW50 IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIGJvb2wg cHJlZW1wdGlibGUsCisgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVj dCBwYWdlX2luZm8gKnB0cGcpOworCiB2b2lkIHB1dF9wYWdlX2Zyb21fbDFl KGwxX3BnZW50cnlfdCBsMWUsIHN0cnVjdCBkb21haW4gKmwxZV9vd25lcikK IHsKICAgICB1bnNpZ25lZCBsb25nICAgICBwZm4gPSBsMWVfZ2V0X3Bmbihs MWUpOwpAQCAtMTI3MSwxNyArMTM1MSwyMiBAQCBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxvbmcg cGZuKQogICAgIGlmICggbDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0VfUFNF ICkKICAgICAgICAgcHV0X3N1cGVycGFnZShsMmVfZ2V0X3BmbihsMmUpKTsK ICAgICBlbHNlCi0gICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKGwyZV9nZXRf cGFnZShsMmUpKTsKKyAgICB7CisgICAgICAgIHN0cnVjdCBwYWdlX2luZm8g KnBnID0gbDJlX2dldF9wYWdlKGwyZSk7CisgICAgICAgIGludCByYyA9IF9w dXRfcGFnZV90eXBlKHBnLCBmYWxzZSwgbWZuX3RvX3BhZ2UocGZuKSk7CisK KyAgICAgICAgQVNTRVJUKCFyYyk7CisgICAgICAgIHB1dF9wYWdlKHBnKTsK KyAgICB9CiAKICAgICByZXR1cm4gMDsKIH0KIAotc3RhdGljIGludCBfX3B1 dF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqLCBpbnQgcHJlZW1wdGli bGUpOwotCiBzdGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDNlKGwzX3BnZW50 cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcgcGZuLAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBpbnQgcGFydGlhbCwgYm9vbF90IGRlZmVyKQogewog ICAgIHN0cnVjdCBwYWdlX2luZm8gKnBnOworICAgIGludCByYzsKIAogICAg IGlmICggIShsM2VfZ2V0X2ZsYWdzKGwzZSkgJiBfUEFHRV9QUkVTRU5UKSB8 fCAobDNlX2dldF9wZm4obDNlKSA9PSBwZm4pICkKICAgICAgICAgcmV0dXJu IDE7CkBAIC0xMzA0LDIxICsxMzg5LDI4IEBAIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCiAgICAgaWYgKCB1bmxpa2VseShwYXJ0aWFsID4gMCkgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKCFkZWZlcik7Ci0gICAgICAgIHJldHVybiBfX3B1 dF9wYWdlX3R5cGUocGcsIDEpOworICAgICAgICByZXR1cm4gX3B1dF9wYWdl X3R5cGUocGcsIHRydWUsIG1mbl90b19wYWdlKHBmbikpOwogICAgIH0KIAog ICAgIGlmICggZGVmZXIgKQogICAgIHsKKyAgICAgICAgY3VycmVudC0+YXJj aC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90b19wYWdlKHBmbik7CiAgICAgICAg IGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CiAgICAgICAg IHJldHVybiAwOwogICAgIH0KIAotICAgIHJldHVybiBwdXRfcGFnZV9hbmRf dHlwZV9wcmVlbXB0aWJsZShwZyk7CisgICAgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgdHJ1ZSwgbWZuX3RvX3BhZ2UocGZuKSk7CisgICAgaWYgKCBsaWtl bHkoIXJjKSApCisgICAgICAgIHB1dF9wYWdlKHBnKTsKKworICAgIHJldHVy biByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2w0ZShsNF9w Z2VudHJ5X3QgbDRlLCB1bnNpZ25lZCBsb25nIHBmbiwKICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgaW50IHBhcnRpYWwsIGJvb2xfdCBkZWZlcikK IHsKKyAgICBpbnQgcmMgPSAxOworCiAgICAgaWYgKCAobDRlX2dldF9mbGFn cyhsNGUpICYgX1BBR0VfUFJFU0VOVCkgJiYgCiAgICAgICAgICAobDRlX2dl dF9wZm4obDRlKSAhPSBwZm4pICkKICAgICB7CkBAIC0xMzI3LDE4ICsxNDE5 LDIyIEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sNGUobDRfcGdlbnRy eV90IGw0ZSwgdW5zaWduZWQgbG9uZyBwZm4sCiAgICAgICAgIGlmICggdW5s aWtlbHkocGFydGlhbCA+IDApICkKICAgICAgICAgewogICAgICAgICAgICAg QVNTRVJUKCFkZWZlcik7Ci0gICAgICAgICAgICByZXR1cm4gX19wdXRfcGFn ZV90eXBlKHBnLCAxKTsKKyAgICAgICAgICAgIHJldHVybiBfcHV0X3BhZ2Vf dHlwZShwZywgdHJ1ZSwgbWZuX3RvX3BhZ2UocGZuKSk7CiAgICAgICAgIH0K IAogICAgICAgICBpZiAoIGRlZmVyICkKICAgICAgICAgeworICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90b19wYWdl KHBmbik7CiAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90 YWJsZSA9IHBnOwogICAgICAgICAgICAgcmV0dXJuIDA7CiAgICAgICAgIH0K IAotICAgICAgICByZXR1cm4gcHV0X3BhZ2VfYW5kX3R5cGVfcHJlZW1wdGli bGUocGcpOworICAgICAgICByYyA9IF9wdXRfcGFnZV90eXBlKHBnLCB0cnVl LCBtZm5fdG9fcGFnZShwZm4pKTsKKyAgICAgICAgaWYgKCBsaWtlbHkoIXJj KSApCisgICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAgICAgfQotICAgIHJl dHVybiAxOworCisgICAgcmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IGFs bG9jX2wxX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0xNTM2 LDYgKzE2MzIsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2wzX3RhYmxlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UpCiAgICAgICAgIHsKICAgICAgICAgICAgIHBh Z2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKICAgICAgICAgICAgIHBhZ2Ut PnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgY3VycmVudC0+ YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICB9CiAgICAg ICAgIHdoaWxlICggaS0tID4gMCApCkBAIC0xNjI4LDYgKzE3MjUsNyBAQCBz dGF0aWMgaW50IGFsbG9jX2w0X3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCiAgICAgICAgICAgICAgICAgewogICAgICAgICAgICAgICAgICAgICBp ZiAoIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlICkKICAgICAgICAg ICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzKys7Cisg ICAgICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0 cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNo Lm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CiAgICAgICAgICAgICAgICAgfQog ICAgICAgICAgICAgfQpAQCAtMjM3MCwxNCArMjQ2OCwyMCBAQCBpbnQgZnJl ZV9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnCiB9CiAKIAotc3Rh dGljIGludCBfX3B1dF9maW5hbF9wYWdlX3R5cGUoCi0gICAgc3RydWN0IHBh Z2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBlLCBpbnQgcHJlZW1w dGlibGUpCitzdGF0aWMgaW50IF9wdXRfZmluYWxfcGFnZV90eXBlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbCBwcmVlbXB0aWJsZSwg c3RydWN0IHBhZ2VfaW5mbyAqcHRwZykKIHsKICAgICBpbnQgcmMgPSBmcmVl X3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAKICAgICAv KiBObyBuZWVkIGZvciBhdG9taWMgdXBkYXRlIG9mIHR5cGVfaW5mbyBoZXJl OiBub29uZSBlbHNlIHVwZGF0ZXMgaXQuICovCiAgICAgaWYgKCByYyA9PSAw ICkKICAgICB7CisgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVh bCh0eXBlLCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICB7 CisgICAgICAgICAgICBkZWNfbGluZWFyX3VzZXMocGFnZSk7CisgICAgICAg ICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRwZyk7CisgICAgICAgIH0KKyAg ICAgICAgQVNTRVJUKCFwYWdlLT5saW5lYXJfcHRfY291bnQgfHwgcGFnZV9n ZXRfb3duZXIocGFnZSktPmlzX2R5aW5nKTsKICAgICAgICAgLyoKICAgICAg ICAgICogUmVjb3JkIFRMQiBpbmZvcm1hdGlvbiBmb3IgZmx1c2ggbGF0ZXIu IFdlIGRvIG5vdCBzdGFtcCBwYWdlIHRhYmxlcwogICAgICAgICAgKiB3aGVu IHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CkBAIC0yNDEzLDggKzI1MTcsOCBA QCBzdGF0aWMgaW50IF9fcHV0X2ZpbmFsX3BhZ2VfdHlwZSgKIH0KIAogCi1z dGF0aWMgaW50IF9fcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlLAotICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHByZWVtcHRp YmxlKQorc3RhdGljIGludCBfcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9p bmZvICpwYWdlLCBib29sIHByZWVtcHRpYmxlLAorICAgICAgICAgICAgICAg ICAgICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnKQogewogICAgIHVu c2lnbmVkIGxvbmcgbngsIHgsIHkgPSBwYWdlLT51LmludXNlLnR5cGVfaW5m bzsKICAgICBpbnQgcmMgPSAwOwpAQCAtMjQ0MSwxMiArMjU0NSwyOCBAQCBz dGF0aWMgaW50IF9fcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHgsIG54KSkgIT0geCkgKQogICAgICAgICAgICAgICAgICAgICBjb250 aW51ZTsKICAgICAgICAgICAgICAgICAvKiBXZSBjbGVhcmVkIHRoZSAndmFs aWQgYml0JyBzbyB3ZSBkbyB0aGUgY2xlYW4gdXAuICovCi0gICAgICAgICAg ICAgICAgcmMgPSBfX3B1dF9maW5hbF9wYWdlX3R5cGUocGFnZSwgeCwgcHJl ZW1wdGlibGUpOworICAgICAgICAgICAgICAgIHJjID0gX3B1dF9maW5hbF9w YWdlX3R5cGUocGFnZSwgeCwgcHJlZW1wdGlibGUsIHB0cGcpOworICAgICAg ICAgICAgICAgIHB0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgIGlmICgg eCAmIFBHVF9wYXJ0aWFsICkKICAgICAgICAgICAgICAgICAgICAgcHV0X3Bh Z2UocGFnZSk7CiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAg ICB9CiAKKyAgICAgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVh bCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICAgICAg eworICAgICAgICAgICAgICAgIC8qCisgICAgICAgICAgICAgICAgICogcGFn ZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNjZXNzZXMgdGhlIHNhbWUg dW5pb24KKyAgICAgICAgICAgICAgICAgKiBsaW5lYXJfcHRfY291bnQgbGl2 ZXMgaW4uIFVudmFsaWRhdGVkIHBhZ2UgdGFibGUgcGFnZXMsCisgICAgICAg ICAgICAgICAgICogaG93ZXZlciwgc2hvdWxkIG9jY3VyIGR1cmluZyBkb21h aW4gZGVzdHJ1Y3Rpb24gb25seQorICAgICAgICAgICAgICAgICAqIGFueXdh eS4gIFVwZGF0aW5nIG9mIGxpbmVhcl9wdF9jb3VudCBsdWNraWx5IGlzIG5v dAorICAgICAgICAgICAgICAgICAqIG5lY2Vzc2FyeSBhbnltb3JlIGZvciBh IGR5aW5nIGRvbWFpbi4KKyAgICAgICAgICAgICAgICAgKi8KKyAgICAgICAg ICAgICAgICBBU1NFUlQocGFnZV9nZXRfb3duZXIocGFnZSktPmlzX2R5aW5n KTsKKyAgICAgICAgICAgICAgICBBU1NFUlQocGFnZS0+bGluZWFyX3B0X2Nv dW50IDwgMCk7CisgICAgICAgICAgICAgICAgQVNTRVJUKHB0cGctPmxpbmVh cl9wdF9jb3VudCA+IDApOworICAgICAgICAgICAgICAgIHB0cGcgPSBOVUxM OworICAgICAgICAgICAgfQorCiAgICAgICAgICAgICAvKgogICAgICAgICAg ICAgICogUmVjb3JkIFRMQiBpbmZvcm1hdGlvbiBmb3IgZmx1c2ggbGF0ZXIu IFdlIGRvIG5vdCBzdGFtcCBwYWdlCiAgICAgICAgICAgICAgKiB0YWJsZXMg d2hlbiBydW5uaW5nIGluIHNoYWRvdyBtb2RlOgpAQCAtMjQ2Niw2ICsyNTg2 LDEzIEBAIHN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luZm8gKnBhZ2UsCiAgICAgICAgICAgICByZXR1cm4gLUVJTlRSOwogICAg IH0KIAorICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBn LT51LmludXNlLnR5cGVfaW5mbykgKQorICAgIHsKKyAgICAgICAgQVNTRVJU KCFyYyk7CisgICAgICAgIGRlY19saW5lYXJfdXNlcyhwYWdlKTsKKyAgICAg ICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0cGcpOworICAgIH0KKwogICAgIHJl dHVybiByYzsKIH0KIApAQCAtMjYwMCw2ICsyNzI3LDcgQEAgc3RhdGljIGlu dCBfX2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgbG9uZyB0eXBlLAogICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRh dGVkX3B0ZXMgPSAwOwogICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUg PSAwOwogICAgICAgICB9CisgICAgICAgIHBhZ2UtPmxpbmVhcl9wdF9jb3Vu dCA9IDA7CiAgICAgICAgIHJjID0gYWxsb2NfcGFnZV90eXBlKHBhZ2UsIHR5 cGUsIHByZWVtcHRpYmxlKTsKICAgICB9CiAKQEAgLTI2MTQsNyArMjc0Miw3 IEBAIHN0YXRpYyBpbnQgX19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2lu Zm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKIAogdm9pZCBwdXRfcGFn ZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgaW50IHJj ID0gX19wdXRfcGFnZV90eXBlKHBhZ2UsIDApOworICAgIGludCByYyA9IF9w dXRfcGFnZV90eXBlKHBhZ2UsIGZhbHNlLCBOVUxMKTsKICAgICBBU1NFUlQo cmMgPT0gMCk7CiAgICAgKHZvaWQpcmM7CiB9CkBAIC0yNjMwLDcgKzI3NTgs NyBAQCBpbnQgZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl LCB1bnNpZ25lZCBsb25nIHR5cGUpCiAKIGludCBwdXRfcGFnZV90eXBlX3By ZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgcmV0 dXJuIF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAxKTsKKyAgICByZXR1cm4gX3B1 dF9wYWdlX3R5cGUocGFnZSwgdHJ1ZSwgTlVMTCk7CiB9CiAKIGludCBnZXRf cGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2Us IHVuc2lnbmVkIGxvbmcgdHlwZSkKQEAgLTI4MzYsMTEgKzI5NjQsMTQgQEAg aW50IHB1dF9vbGRfZ3Vlc3RfdGFibGUoc3RydWN0IHZjcHUgKnYpCiAgICAg aWYgKCAhdi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgKQogICAgICAgICByZXR1 cm4gMDsKIAotICAgIHN3aXRjaCAoIHJjID0gcHV0X3BhZ2VfYW5kX3R5cGVf cHJlZW1wdGlibGUodi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUpICkKKyAgICBz d2l0Y2ggKCByYyA9IF9wdXRfcGFnZV90eXBlKHYtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlLCB0cnVlLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZykgKQogICAgIHsKICAgICBjYXNl IC1FSU5UUjoKICAgICBjYXNlIC1FUkVTVEFSVDoKICAgICAgICAgcmV0dXJu IC1FUkVTVEFSVDsKKyAgICBjYXNlIDA6CisgICAgICAgIHB1dF9wYWdlKHYt PmFyY2gub2xkX2d1ZXN0X3RhYmxlKTsKICAgICB9CiAKICAgICB2LT5hcmNo Lm9sZF9ndWVzdF90YWJsZSA9IE5VTEw7CkBAIC0yOTk3LDYgKzMxMjgsNyBA QCBpbnQgbmV3X2d1ZXN0X2NyMyh1bnNpZ25lZCBsb25nIG1mbikKICAgICAg ICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAgICAgICAv KiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgY2FzZSAtRVJFU1RBUlQ6 CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9 IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf dGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAg ICAgICAgZGVmYXVsdDoKQEAgLTMyNjQsNyArMzM5NiwxMCBAQCBsb25nIGRv X21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgaWYgKCB0eXBlID09 IFBHVF9sMV9wYWdlX3RhYmxlICkKICAgICAgICAgICAgICAgICAgICAgICAg IHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOwogICAgICAgICAgICAgICAgICAg ICBlbHNlCisgICAgICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAg ICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwog ICAgICAgICAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf dGFibGUgPSBwYWdlOworICAgICAgICAgICAgICAgICAgICB9CiAgICAgICAg ICAgICAgICAgfQogICAgICAgICAgICAgfQogCkBAIC0zMjk3LDYgKzM0MzIs NyBAQCBsb25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgIHsKICAgICAg ICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAgICAgICAgY2FzZSAtRVJFU1RB UlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfcHRw ZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vl c3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIHJjID0gMDsKICAg ICAgICAgICAgICAgICBicmVhazsKQEAgLTMzNzUsNiArMzUxMSw3IEBAIGxv bmcgZG9fbW11ZXh0X29wKAogICAgICAgICAgICAgICAgICAgICAgICAgcmMg PSAtRVJFU1RBUlQ7CiAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmYWxs dGhyb3VnaCAqLwogICAgICAgICAgICAgICAgICAgICBjYXNlIC1FUkVTVEFS VDoKKyAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1 ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICAgICAgY3Vy ci0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAg ICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICAgICAgICAgIGRlZmF1 bHQ6CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5o IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCBmNmE0MGVi ODgxLi42MGJiOGM5MDE0IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20t eDg2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWlu LmgKQEAgLTUzMSw2ICs1MzEsOCBAQCBzdHJ1Y3QgYXJjaF92Y3B1CiAgICAg cGFnZXRhYmxlX3QgZ3Vlc3RfdGFibGVfdXNlcjsgICAgICAgLyogKE1GTikg eDg2LzY0IHVzZXItc3BhY2UgcGFnZXRhYmxlICovCiAgICAgcGFnZXRhYmxl X3QgZ3Vlc3RfdGFibGU7ICAgICAgICAgICAgLyogKE1GTikgZ3Vlc3Qgbm90 aW9uIG9mIGNyMyAqLwogICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVz dF90YWJsZTsgIC8qIHBhcnRpYWxseSBkZXN0cnVjdGVkIHBhZ2V0YWJsZSAq LworICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVzdF9wdHBnOyAgIC8q IGNvbnRhaW5pbmcgcGFnZSB0YWJsZSBvZiB0aGUgKi8KKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmb3JtZXIsIGlmIGFu eSAqLwogICAgIC8qIGd1ZXN0X3RhYmxlIGhvbGRzIGEgcmVmIHRvIHRoZSBw YWdlLCBhbmQgYWxzbyBhIHR5cGUtY291bnQgdW5sZXNzCiAgICAgICogc2hh ZG93IHJlZmNvdW50cyBhcmUgaW4gdXNlICovCiAgICAgcGFnZXRhYmxlX3Qg c2hhZG93X3RhYmxlWzRdOyAgICAgICAgLyogKE1GTikgc2hhZG93KHMpIG9m IGd1ZXN0ICovCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L21t LmggYi94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgKaW5kZXggNjY4N2RiYzk4 NS4uNjM1OTBhNzcxNiAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tbS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbW0uaApAQCAtMTI1 LDExICsxMjUsMTEgQEAgc3RydWN0IHBhZ2VfaW5mbwogICAgICAgICB1MzIg dGxiZmx1c2hfdGltZXN0YW1wOwogCiAgICAgICAgIC8qCi0gICAgICAgICAq IFdoZW4gUEdUX3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRoaXMgZmllbGQgaXMg dmFsaWQgYW5kIGluZGljYXRlcwotICAgICAgICAgKiB0aGF0IFBURXMgaW4g dGhlIHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMpIGhhdmUgYmVlbiB2 YWxpZGF0ZWQuCi0gICAgICAgICAqIEFuIGV4dHJhIHBhZ2UgcmVmZXJlbmNl IG11c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVkKSB3aGVuZXZlcgot ICAgICAgICAgKiBQR1RfcGFydGlhbCBnZXRzIHNldCwgYW5kIGl0IG11c3Qg YmUgZHJvcHBlZCB3aGVuIHRoZSBmbGFnIGdldHMKLSAgICAgICAgICogY2xl YXJlZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVhdmluZyBhIHBhZ2Ug aW4gcGFydGlhbGx5CisgICAgICAgICAqIFdoZW4gUEdUX3BhcnRpYWwgaXMg dHJ1ZSB0aGVuIHRoZSBmaXJzdCB0d28gZmllbGRzIGFyZSB2YWxpZCBhbmQK KyAgICAgICAgICogaW5kaWNhdGUgdGhhdCBQVEVzIGluIHRoZSByYW5nZSBb MCwgQG5yX3ZhbGlkYXRlZF9wdGVzKSBoYXZlIGJlZW4KKyAgICAgICAgICog dmFsaWRhdGVkLiBBbiBleHRyYSBwYWdlIHJlZmVyZW5jZSBtdXN0IGJlIGFj cXVpcmVkIChvciBub3QgZHJvcHBlZCkKKyAgICAgICAgICogd2hlbmV2ZXIg UEdUX3BhcnRpYWwgZ2V0cyBzZXQsIGFuZCBpdCBtdXN0IGJlIGRyb3BwZWQg d2hlbiB0aGUgZmxhZworICAgICAgICAgKiBnZXRzIGNsZWFyZWQuIFRoaXMg aXMgc28gdGhhdCBhIGdldCgpIGxlYXZpbmcgYSBwYWdlIGluIHBhcnRpYWxs eQogICAgICAgICAgKiB2YWxpZGF0ZWQgc3RhdGUgKHdoZXJlIHRoZSBjYWxs ZXIgd291bGQgZHJvcCB0aGUgcmVmZXJlbmNlIGFjcXVpcmVkCiAgICAgICAg ICAqIGR1ZSB0byB0aGUgZ2V0dGluZyBvZiB0aGUgdHlwZSBbYXBwYXJlbnRs eV0gZmFpbGluZyBbLUVSRVNUQVJUXSkKICAgICAgICAgICogd291bGQgbm90 IGFjY2lkZW50YWxseSByZXN1bHQgaW4gYSBwYWdlIGxlZnQgd2l0aCB6ZXJv IGdlbmVyYWwKQEAgLTE1MywxMCArMTUzLDE4IEBAIHN0cnVjdCBwYWdlX2lu Zm8KICAgICAgICAgICogcHV0X3BhZ2VfZnJvbV9sTmUoKSAoZHVlIHRvIHRo ZSBhcHBhcmVudCBmYWlsdXJlKSwgYW5kIGhlbmNlIGl0CiAgICAgICAgICAq IG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBwdXQgb3BlcmF0aW9uIGlzIHJl c3VtZWQgKGFuZCBjb21wbGV0ZXMpLAogICAgICAgICAgKiBidXQgaXQgbXVz dCBub3QgYmUgYWNxdWlyZWQgaWYgcGlja2luZyB1cCB0aGUgcGFnZSBmb3Ig dmFsaWRhdGlvbi4KKyAgICAgICAgICoKKyAgICAgICAgICogVGhlIDNyZCBm aWVsZCwgQGxpbmVhcl9wdF9jb3VudCwgaW5kaWNhdGVzCisgICAgICAgICAq IC0gYnkgYSBwb3NpdGl2ZSB2YWx1ZSwgaG93IG1hbnkgc2FtZS1sZXZlbCBw YWdlIHRhYmxlIGVudHJpZXMgYSBwYWdlCisgICAgICAgICAqICAgdGFibGUg aGFzLAorICAgICAgICAgKiAtIGJ5IGEgbmVnYXRpdmUgdmFsdWUsIGluIGhv dyBtYW55IHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgYSBwYWdlIGlzCisgICAg ICAgICAqICAgaW4gdXNlLgogICAgICAgICAgKi8KICAgICAgICAgc3RydWN0 IHsKLSAgICAgICAgICAgIHUxNiBucl92YWxpZGF0ZWRfcHRlczsKLSAgICAg ICAgICAgIHM4IHBhcnRpYWxfcHRlOworICAgICAgICAgICAgdTE2IG5yX3Zh bGlkYXRlZF9wdGVzOlBBR0VUQUJMRV9PUkRFUiArIDE7CisgICAgICAgICAg ICB1MTYgOjE2IC0gUEFHRVRBQkxFX09SREVSIC0gMSAtIDI7CisgICAgICAg ICAgICBzMTYgcGFydGlhbF9wdGU6MjsKKyAgICAgICAgICAgIHMxNiBsaW5l YXJfcHRfY291bnQ7CiAgICAgICAgIH07CiAKICAgICAgICAgLyoKQEAgLTIw Nyw2ICsyMTUsOSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAjZGVmaW5lIFBHVF9j b3VudF93aWR0aCAgIFBHX3NoaWZ0KDkpCiAjZGVmaW5lIFBHVF9jb3VudF9t YXNrICAgICgoMVVMPDxQR1RfY291bnRfd2lkdGgpLTEpCiAKKy8qIEFyZSB0 aGUgJ3R5cGUgbWFzaycgYml0cyBpZGVudGljYWw/ICovCisjZGVmaW5lIFBH VF90eXBlX2VxdWFsKHgsIHkpICghKCgoeCkgXiAoeSkpICYgUEdUX3R5cGVf bWFzaykpCisKICAvKiBDbGVhcmVkIHdoZW4gdGhlIG93bmluZyBndWVzdCAn ZnJlZXMnIHRoaXMgcGFnZS4gKi8KICNkZWZpbmUgX1BHQ19hbGxvY2F0ZWQg ICAgUEdfc2hpZnQoMSkKICNkZWZpbmUgUEdDX2FsbG9jYXRlZCAgICAgUEdf bWFzaygxLCAxKQotLSAKMi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-4.8/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-4.8/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSA0MWQ1NzlhYWQyZmVlOTcxZTVjZTAyNzlhOWI1NTlhMGZkYzc0NDUy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAgOSArKysrKysrKysKIDIgZmlsZXMgY2hhbmdlZCwgMjQgaW5z ZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL2RvY3MvbWlzYy94ZW4tY29tbWFu ZC1saW5lLm1hcmtkb3duIGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUu bWFya2Rvd24KaW5kZXggNTRhY2M2MDcyMy4uZmZhNjZlYjE0NiAxMDA2NDQK LS0tIGEvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KKysr IGIvZG9jcy9taXNjL3hlbi1jb21tYW5kLWxpbmUubWFya2Rvd24KQEAgLTEz NTAsNiArMTM1MCwyMSBAQCBUaGUgZm9sbG93aW5nIHJlc291cmNlcyBhcmUg YXZhaWxhYmxlOgogICAgIENEUCwgb25lIENPUyB3aWxsIGNvcmVzcG9uZCB0 d28gQ0JNcyBvdGhlciB0aGFuIG9uZSB3aXRoIENBVCwgZHVlIHRvIHRoZQog ICAgIHN1bSBvZiBDQk1zIGlzIGZpeGVkLCB0aGF0IG1lYW5zIGFjdHVhbCBg Y29zX21heGAgaW4gdXNlIHdpbGwgYXV0b21hdGljYWxseQogICAgIHJlZHVj ZSB0byBoYWxmIHdoZW4gQ0RQIGlzIGVuYWJsZWQuCisKKyMjIyBwdi1saW5l YXItcHQKKz4gYD0gPGJvb2xlYW4+YAorCis+IERlZmF1bHQ6IGBmYWxzZWAK KworQWxsb3cgUFYgZ3Vlc3RzIHRvIGhhdmUgcGFnZXRhYmxlIGVudHJpZXMg cG9pbnRpbmcgdG8gb3RoZXIgcGFnZXRhYmxlcworb2YgdGhlIHNhbWUgbGV2 ZWwgKGkuZS4sIGFsbG93aW5nIEwyIFBURXMgdG8gcG9pbnQgdG8gb3RoZXIg TDIgcGFnZXMpLgorVGhpcyB0ZWNobmlxdWUgaXMgb2Z0ZW4gY2FsbGVkICJs aW5lYXIgcGFnZXRhYmxlcyIsIGFuZCBpcyBzb21ldGltZXMKK3VzZWQgdG8g YWxsb3cgb3BlcmF0aW5nIHN5c3RlbXMgYSBzaW1wbGUgd2F5IHRvIGNvbnNp c3RlbnRseSBtYXAgdGhlCitjdXJyZW50IHByb2Nlc3MncyBwYWdldGFibGVz IGludG8gaXRzIG93biB2aXJ0dWFsIGFkZHJlc3Mgc3BhY2UuCisKK05vbmUg b2YgdGhlIG1vc3QgY29tbW9uIFBWIG9wZXJhdGluZyBzeXN0ZW1zIChMaW51 eCwgTmV0QlNELCBNaW5pT1MpCit1c2UgdGhpcyB0ZWNobmlxdWUsIGJ1dCB0 aGVyZSBtYXkgYmUgY3VzdG9tIG9wZXJhdGluZyBzeXN0ZW1zIHdoaWNoCitk by4KIAogIyMjIHJlYm9vdAogPiBgPSB0W3JpcGxlXSB8IGtbYmRdIHwgYVtj cGldIHwgcFtjaV0gfCBQW293ZXJdIHwgZVtmaV0gfCBuW29dIFssIFt3XWFy bSB8IFtjXW9sZF1gCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0uYyBi L3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDMxZDRhMDM4NDAuLjVkMTI1Y2Zm M2EgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC04MDAsNiArODAwLDkgQEAgc3RhdGljIHZvaWQg ZGVjX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQogICogICAg IGZyYW1lIGlmIGl0IGlzIG1hcHBlZCBieSBhIGRpZmZlcmVudCByb290IHRh YmxlLiBUaGlzIGlzIHN1ZmZpY2llbnQgYW5kCiAgKiAgICAgYWxzbyBuZWNl c3NhcnkgdG8gYWxsb3cgdmFsaWRhdGlvbiBvZiBhIHJvb3QgdGFibGUgbWFw cGluZyBpdHNlbGYuCiAgKi8KK3N0YXRpYyBib29sIF9fcmVhZF9tb3N0bHkg cHZfbGluZWFyX3B0X2VuYWJsZSA9IGZhbHNlOworYm9vbGVhbl9wYXJhbSgi cHYtbGluZWFyLXB0IiwgcHZfbGluZWFyX3B0X2VuYWJsZSk7CisKICNkZWZp bmUgZGVmaW5lX2dldF9saW5lYXJfcGFnZXRhYmxlKGxldmVsKSAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCiBzdGF0aWMgaW50ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAogZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFnZXRh YmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKQEAgLTgwOSw2ICs4MTIsMTIgQEAgZ2V0XyMjbGV2ZWwjI19saW5l YXJfcGFnZXRhYmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgdW5zaWduZWQgbG9uZyBwZm47ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICBpZiAoICFwdl9saW5l YXJfcHRfZW5hYmxlICkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCisgICAgeyAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAorICAgICAgICBNRU1fTE9HKCJBdHRlbXB0IHRvIGNyZWF0ZSBsaW5l YXIgcC50LiAoZmVhdHVyZSBkaXNhYmxlZCkiKTsgICAgICAgIFwKKyAgICAg ICAgcmV0dXJuIDA7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgfSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICBpZiAoIChsZXZlbCMjZV9nZXRfZmxhZ3MocGRlKSAmIF9Q QUdFX1JXKSApICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAg eyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICBNRU1fTE9H KCJBdHRlbXB0IHRvIGNyZWF0ZSBsaW5lYXIgcC50LiB3aXRoIHdyaXRlIHBl cm1zIik7ICAgICAgICAgIFwKLS0gCjIuMTQuMQoK --=separator Content-Type: application/octet-stream; name="xsa240-4.8/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-4.8/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjYxMywzNCArMjYx MywyMiBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAK LSNpZmRlZiBDT05GSUdfUFZfTElORUFSX1BUCi0gICAgICAgICAgICBpZiAo IHB0cGcgJiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBl X2luZm8pICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICAvKgot ICAgICAgICAgICAgICAgICAqIHNldF90bGJmbHVzaF90aW1lc3RhbXAoKSBh Y2Nlc3NlcyB0aGUgc2FtZSB1bmlvbgotICAgICAgICAgICAgICAgICAqIGxp bmVhcl9wdF9jb3VudCBsaXZlcyBpbi4gVW52YWxpZGF0ZWQgcGFnZSB0YWJs ZSBwYWdlcywKLSAgICAgICAgICAgICAgICAgKiBob3dldmVyLCBzaG91bGQg b2NjdXIgZHVyaW5nIGRvbWFpbiBkZXN0cnVjdGlvbiBvbmx5Ci0gICAgICAg ICAgICAgICAgICogYW55d2F5LiAgVXBkYXRpbmcgb2YgbGluZWFyX3B0X2Nv dW50IGx1Y2tpbHkgaXMgbm90Ci0gICAgICAgICAgICAgICAgICogbmVjZXNz YXJ5IGFueW1vcmUgZm9yIGEgZHlpbmcgZG9tYWluLgotICAgICAgICAgICAg ICAgICAqLwotICAgICAgICAgICAgICAgIEFTU0VSVChwYWdlX2dldF9vd25l cihwYWdlKS0+aXNfZHlpbmcpOwotICAgICAgICAgICAgICAgIEFTU0VSVChw YWdlLT5saW5lYXJfcHRfY291bnQgPCAwKTsKLSAgICAgICAgICAgICAgICBB U1NFUlQocHRwZy0+bGluZWFyX3B0X2NvdW50ID4gMCk7Ci0gICAgICAgICAg ICAgICAgcHRwZyA9IE5VTEw7Ci0gICAgICAgICAgICB9Ci0jZWxzZSAvKiBD T05GSUdfUFZfTElORUFSX1BUICovCi0gICAgICAgICAgICBCVUdfT04ocHRw ZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5m bykpOwotI2VuZGlmCi0KICAgICAgICAgICAgIC8qCiAgICAgICAgICAgICAg KiBSZWNvcmQgVExCIGluZm9ybWF0aW9uIGZvciBmbHVzaCBsYXRlci4gV2Ug ZG8gbm90IHN0YW1wIHBhZ2UKICAgICAgICAgICAgICAqIHRhYmxlcyB3aGVu IHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CiAgICAgICAgICAgICAgKiAgMS4g UG9pbnRsZXNzLCBzaW5jZSBpdCdzIHRoZSBzaGFkb3cgcHQncyB3aGljaCBt dXN0IGJlIHRyYWNrZWQuCiAgICAgICAgICAgICAgKiAgMi4gU2hhZG93IG1v ZGUgcmV1c2VzIHRoaXMgZmllbGQgZm9yIHNoYWRvd2VkIHBhZ2UgdGFibGVz IHRvCiAgICAgICAgICAgICAgKiAgICAgc3RvcmUgZmxhZ3MgaW5mbyAtLSB3 ZSBkb24ndCB3YW50IHRvIGNvbmZsaWN0IHdpdGggdGhhdC4KKyAgICAgICAg ICAgICAqIEFsc28gcGFnZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNj ZXNzZXMgdGhlIHNhbWUgdW5pb24KKyAgICAgICAgICAgICAqIGxpbmVhcl9w dF9jb3VudCBsaXZlcyBpbi4gUGFnZXMgKGluY2x1ZGluZyBwYWdlIHRhYmxl IG9uZXMpLAorICAgICAgICAgICAgICogaG93ZXZlciwgZG9uJ3QgbmVlZCB0 aGVpciBmbHVzaCB0aW1lIHN0YW1wIHNldCBleGNlcHQgd2hlbgorICAgICAg ICAgICAgICogdGhlIGxhc3QgcmVmZXJlbmNlIGlzIGJlaW5nIGRyb3BwZWQu IEZvciBwYWdlIHRhYmxlIHBhZ2VzCisgICAgICAgICAgICAgKiB0aGlzIGhh cHBlbnMgaW4gX3B1dF9maW5hbF9wYWdlX3R5cGUoKS4KICAgICAgICAgICAg ICAqLwotICAgICAgICAgICAgaWYgKCAhKHNoYWRvd19tb2RlX2VuYWJsZWQo cGFnZV9nZXRfb3duZXIocGFnZSkpICYmCi0gICAgICAgICAgICAgICAgICAg KHBhZ2UtPmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKKyAgICAg ICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51 LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICAgICAgICAgIEJVR19PTigh SVNfRU5BQkxFRChDT05GSUdfUFZfTElORUFSX1BUKSk7CisgICAgICAgICAg ICBlbHNlIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0X293 bmVyKHBhZ2UpKSAmJgorICAgICAgICAgICAgICAgICAgICAgICAgKHBhZ2Ut PmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKICAgICAgICAgICAg ICAgICBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAocGFnZSk7CiAgICAg ICAgIH0KICAgICAgICAgZWxzZSBpZiAoIHVubGlrZWx5KChueCAmIChQR1Rf bG9ja2VkIHwgUEdUX2NvdW50X21hc2spKSA9PQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.8/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-4.8/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI1NjAsOSArMjU2MCw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0 X293bmVyKHBhZ2UpKSAmJgotICAgICAgICAgICAgICAgKHBhZ2UtPmNvdW50 X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKLSAgICAgICAgICAgIHBhZ2Vf c2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsKICAgICAgICAgd21iKCk7 CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvIHw9IFBHVF92YWxp ZGF0ZWQ7CiAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.9/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Disposition: attachment; filename="xsa240-4.9/0001-x86-limit-linear-page-table-use-to-a-single-level.patch" Content-Transfer-Encoding: base64 RnJvbSA4Njc5ODgyMzdkM2U0NzJmZTJjOTllODFhZTczM2UxMDM0MjI1NjZj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMjggU2VwIDIwMTcgMTU6 MTc6MjUgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvMl0geDg2OiBsaW1pdCBs aW5lYXIgcGFnZSB0YWJsZSB1c2UgdG8gYSBzaW5nbGUgbGV2ZWwKClRoYXQn cyB0aGUgb25seSB3YXkgdGhhdCB0aGV5J3JlIG1lYW50IHRvIGJlIHVzZWQu IFdpdGhvdXQgc3VjaCBhCnJlc3RyaWN0aW9uIGFyYml0cmFyaWx5IGxvbmcg Y2hhaW5zIG9mIHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgY2FuIGJlCmJ1aWx0 LCB0ZWFyaW5nIGRvd24gb2Ygd2hpY2ggbWF5IHRoZW4gY2F1c2UgYXJiaXRy YXJpbHkgZGVlcCByZWN1cnNpb24sCmNhdXNpbmcgYSBzdGFjayBvdmVyZmxv dy4gVG8gZmFjaWxpdGF0ZSB0aGlzIHJlc3RyaWN0aW9uLCBhIGNvdW50ZXIg aXMKYmVpbmcgaW50cm9kdWNlZCB0byB0cmFjayBib3RoIHRoZSBudW1iZXIg b2Ygc2FtZS1sZXZlbCBlbnRyaWVzIGluIGEKcGFnZSB0YWJsZSBhcyB3ZWxs IGFzIHRoZSBudW1iZXIgb2YgdXNlcyBvZiBhIHBhZ2UgdGFibGUgaW4gYW5v dGhlcgpzYW1lLWxldmVsIG9uZSAoY291bnRpbmcgaW50byBwb3NpdGl2ZSBh bmQgbmVnYXRpdmUgZGlyZWN0aW9uCnJlc3BlY3RpdmVseSwgdXRpbGl6aW5n IHRoZSBmYWN0IHRoYXQgYm90aCBjb3VudHMgY2FuJ3QgYmUgbm9uLXplcm8g YXQKdGhlIHNhbWUgdGltZSkuCgpOb3RlIHRoYXQgdGhlIGFkZGVkIGFjY291 bnRpbmcgaW50cm9kdWNlcyBhIHJlc3RyaWN0aW9uIG9uIHRoZSBudW1iZXIK b2YgdGltZXMgYSBwYWdlIGNhbiBiZSB1c2VkIGluIG90aGVyIHNhbWUtbGV2 ZWwgcGFnZSB0YWJsZXMgLSBtb3JlIHRoYW4KMzJrIG9mIHN1Y2ggdXNlcyBh cmUgbm8gbG9uZ2VyIHBvc3NpYmxlLgoKTm90ZSBhbHNvIHRoYXQgc29tZSBw dXRfcGFnZV9hbmRfdHlwZVtfcHJlZW1wdGlibGVdKCkgY2FsbHMgYXJlCnJl cGxhY2VkIHdpdGggb3Blbi1jb2RlZCBlcXVpdmFsZW50cy4gIFRoaXMgc2Vl bWVkIHByZWZlcnJhYmxlIHRvCmFkZGluZyAicGFyZW50X3RhYmxlIiB0byB0 aGUgbWF0cml4IG9mIGZ1bmN0aW9ucy4KCk5vdGUgZnVydGhlciB0aGF0IGNy b3NzLWRvbWFpbiBzYW1lLWxldmVsIHBhZ2UgdGFibGUgcmVmZXJlbmNlcyBh cmUgbm8KbG9uZ2VyIHBlcm1pdHRlZCAodGhleSBwcm9iYWJseSBuZXZlciBz aG91bGQgaGF2ZSBiZWVuKS4KClRoaXMgaXMgWFNBLTI0MC4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9m Zi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29t PgotLS0KIHhlbi9hcmNoL3g4Ni9kb21haW4uYyAgICAgICAgfCAgIDEgKwog eGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICB8IDE3MSArKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKy0tLS0tCiB4ZW4vaW5jbHVk ZS9hc20teDg2L2RvbWFpbi5oIHwgICAyICsKIHhlbi9pbmNsdWRlL2FzbS14 ODYvbW0uaCAgICAgfCAgMjUgKysrKystLQogNCBmaWxlcyBjaGFuZ2VkLCAx NzUgaW5zZXJ0aW9ucygrKSwgMjQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IGQ3ZTY5OTIyOGMuLmQ3ZWQ3MmMyNDYgMTAwNjQ0Ci0tLSBh L3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9t YWluLmMKQEAgLTEyMjYsNiArMTIyNiw3IEBAIGludCBhcmNoX3NldF9pbmZv X2d1ZXN0KAogICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsK ICAgICAgICAgICAgICAgICAgICAgLyogRmFsbHRocm91Z2ggKi8KICAgICAg ICAgICAgICAgICBjYXNlIC1FUkVTVEFSVDoKKyAgICAgICAgICAgICAgICAg ICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CiAgICAgICAgICAg ICAgICAgICAgIHYtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0KICAgICAgICAg ICAgICAgICAgICAgICAgIHBhZ2V0YWJsZV9nZXRfcGFnZSh2LT5hcmNoLmd1 ZXN0X3RhYmxlKTsKICAgICAgICAgICAgICAgICAgICAgdi0+YXJjaC5ndWVz dF90YWJsZSA9IHBhZ2V0YWJsZV9udWxsKCk7CmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDg2ZjVl ZGE1MmQuLjFlNDY5YmQzNTQgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC03NDcsNiArNzQ3LDYx IEBAIHN0YXRpYyB2b2lkIHB1dF9kYXRhX3BhZ2UoCiAgICAgICAgIHB1dF9w YWdlKHBhZ2UpOwogfQogCitzdGF0aWMgYm9vbCBpbmNfbGluZWFyX2VudHJp ZXMoc3RydWN0IHBhZ2VfaW5mbyAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5s aW5lYXJfcHRfY291bnQpIG5jID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJf cHRfY291bnQpLCBvYzsKKworICAgIGRvIHsKKyAgICAgICAgLyoKKyAgICAg ICAgICogVGhlIGNoZWNrIGJlbG93IGNoZWNrcyBmb3IgdGhlICJsaW5lYXIg dXNlIiBjb3VudCBiZWluZyBub24temVybworICAgICAgICAgKiBhcyB3ZWxs IGFzIG92ZXJmbG93LiAgU2lnbmVkIGludGVnZXIgb3ZlcmZsb3cgaXMgdW5k ZWZpbmVkIGJlaGF2aW9yCisgICAgICAgICAqIGFjY29yZGluZyB0byB0aGUg QyBzcGVjLiAgSG93ZXZlciwgYXMgbG9uZyBhcyBsaW5lYXJfcHRfY291bnQg aXMKKyAgICAgICAgICogc21hbGxlciBpbiBzaXplIHRoYW4gJ2ludCcsIHRo ZSBhcml0aG1ldGljIG9wZXJhdGlvbiBvZiB0aGUKKyAgICAgICAgICogaW5j cmVtZW50IGJlbG93IHdvbid0IG92ZXJmbG93OyByYXRoZXIgdGhlIHJlc3Vs dCB3aWxsIGJlIHRydW5jYXRlZAorICAgICAgICAgKiB3aGVuIHN0b3JlZC4g IEVuc3VyZSB0aGF0IHRoaXMgaXMgYWx3YXlzIHRydWUuCisgICAgICAgICAq LworICAgICAgICBCVUlMRF9CVUdfT04oc2l6ZW9mKG5jKSA+PSBzaXplb2Yo aW50KSk7CisgICAgICAgIG9jID0gbmMrKzsKKyAgICAgICAgaWYgKCBuYyA8 PSAwICkKKyAgICAgICAgICAgIHJldHVybiBmYWxzZTsKKyAgICAgICAgbmMg PSBjbXB4Y2hnKCZwZy0+bGluZWFyX3B0X2NvdW50LCBvYywgbmMpOworICAg IH0gd2hpbGUgKCBvYyAhPSBuYyApOworCisgICAgcmV0dXJuIHRydWU7Cit9 CisKK3N0YXRpYyB2b2lkIGRlY19saW5lYXJfZW50cmllcyhzdHJ1Y3QgcGFn ZV9pbmZvICpwZykKK3sKKyAgICB0eXBlb2YocGctPmxpbmVhcl9wdF9jb3Vu dCkgb2M7CisKKyAgICBvYyA9IGFyY2hfZmV0Y2hfYW5kX2FkZCgmcGctPmxp bmVhcl9wdF9jb3VudCwgLTEpOworICAgIEFTU0VSVChvYyA+IDApOworfQor CitzdGF0aWMgYm9vbCBpbmNfbGluZWFyX3VzZXMoc3RydWN0IHBhZ2VfaW5m byAqcGcpCit7CisgICAgdHlwZW9mKHBnLT5saW5lYXJfcHRfY291bnQpIG5j ID0gcmVhZF9hdG9taWMoJnBnLT5saW5lYXJfcHRfY291bnQpLCBvYzsKKwor ICAgIGRvIHsKKyAgICAgICAgLyogU2VlIHRoZSByZXNwZWN0aXZlIGNvbW1l bnQgaW4gaW5jX2xpbmVhcl9lbnRyaWVzKCkuICovCisgICAgICAgIEJVSUxE X0JVR19PTihzaXplb2YobmMpID49IHNpemVvZihpbnQpKTsKKyAgICAgICAg b2MgPSBuYy0tOworICAgICAgICBpZiAoIG5jID49IDAgKQorICAgICAgICAg ICAgcmV0dXJuIGZhbHNlOworICAgICAgICBuYyA9IGNtcHhjaGcoJnBnLT5s aW5lYXJfcHRfY291bnQsIG9jLCBuYyk7CisgICAgfSB3aGlsZSAoIG9jICE9 IG5jICk7CisKKyAgICByZXR1cm4gdHJ1ZTsKK30KKworc3RhdGljIHZvaWQg ZGVjX2xpbmVhcl91c2VzKHN0cnVjdCBwYWdlX2luZm8gKnBnKQoreworICAg IHR5cGVvZihwZy0+bGluZWFyX3B0X2NvdW50KSBvYzsKKworICAgIG9jID0g YXJjaF9mZXRjaF9hbmRfYWRkKCZwZy0+bGluZWFyX3B0X2NvdW50LCAxKTsK KyAgICBBU1NFUlQob2MgPCAwKTsKK30KKwogLyoKICAqIFdlIGFsbG93IHJv b3QgdGFibGVzIHRvIG1hcCBlYWNoIG90aGVyIChhLmsuYS4gbGluZWFyIHBh Z2UgdGFibGVzKS4gSXQKICAqIG5lZWRzIHNvbWUgc3BlY2lhbCBjYXJlIHdp dGggcmVmZXJlbmNlIGNvdW50cyBhbmQgYWNjZXNzIHBlcm1pc3Npb25zOgpA QCAtNzc3LDE1ICs4MzIsMzUgQEAgZ2V0XyMjbGV2ZWwjI19saW5lYXJfcGFn ZXRhYmxlKCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAg ICAgaWYgKCAocGZuID0gbGV2ZWwjI2VfZ2V0X3BmbihwZGUpKSAhPSBwZGVf cGZuICkgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIHsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5m byAqcHRwZyA9IG1mbl90b19wYWdlKHBkZV9wZm4pOyAgICAgICAgICAgICAg ICAgICAgICBcCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAor ICAgICAgICAvKiBNYWtlIHN1cmUgdGhlIHBhZ2UgdGFibGUgYmVsb25ncyB0 byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICAgIFwKKyAgICAgICAgaWYg KCB1bmxpa2VseShwYWdlX2dldF9vd25lcihwdHBnKSAhPSBkKSApICAgICAg ICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1cm4gMDsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK ICAgICAgICAgLyogTWFrZSBzdXJlIHRoZSBtYXBwZWQgZnJhbWUgYmVsb25n cyB0byB0aGUgY29ycmVjdCBkb21haW4uICovICAgICBcCiAgICAgICAgIGlm ICggdW5saWtlbHkoIWdldF9wYWdlX2Zyb21fcGFnZW5yKHBmbiwgZCkpICkg ICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgcmV0dXJuIDA7 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CiAgICAgICAgIC8qICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICAg KiBFbnN1cmUgdGhhdCB0aGUgbWFwcGVkIGZyYW1lIGlzIGFuIGFscmVhZHkt dmFsaWRhdGVkIHBhZ2UgdGFibGUuIFwKKyAgICAgICAgICogRW5zdXJlIHRo YXQgdGhlIG1hcHBlZCBmcmFtZSBpcyBhbiBhbHJlYWR5LXZhbGlkYXRlZCBw YWdlIHRhYmxlICBcCisgICAgICAgICAqIGFuZCBpcyBub3QgaXRzZWxmIGhh dmluZyBsaW5lYXIgZW50cmllcywgYXMgd2VsbCBhcyB0aGF0IHRoZSAgICAg XAorICAgICAgICAgKiBjb250YWluaW5nIHBhZ2UgdGFibGUgaXMgbm90IGlz ZWxmIGluIHVzZSBhcyBhIGxpbmVhciBwYWdlIHRhYmxlIFwKKyAgICAgICAg ICogZWxzZXdoZXJlLiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgICAqIElmIHNvLCBh dG9taWNhbGx5IGluY3JlbWVudCB0aGUgY291bnQgKGNoZWNraW5nIGZvciBv dmVyZmxvdykuICAgXAogICAgICAgICAgKi8gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKICAgICAgICAgcGFnZSA9IG1mbl90b19wYWdlKHBmbik7ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAg IGlmICggIWluY19saW5lYXJfZW50cmllcyhwdHBnKSApICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAgICB7ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKKyAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCisgICAgICAgICAgICByZXR1cm4gMDsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAg ICB9ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgaWYgKCAhaW5j X2xpbmVhcl91c2VzKHBhZ2UpICkgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCisgICAgICAgIHsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAorICAgICAgICAgICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0cGcpOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAg ICAgICAgIHB1dF9wYWdlKHBhZ2UpOyAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgICAgICAgICByZXR1 cm4gMDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAorICAgICAgICB9ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgeSA9IHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAg ICAgIGRvIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgeCA9 IHk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKQEAgLTc5Myw2ICs4NjgsOCBAQCBnZXRfIyNs ZXZlbCMjX2xpbmVhcl9wYWdldGFibGUoICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgICAgICB1 bmxpa2VseSgoeCAmIChQR1RfdHlwZV9tYXNrfFBHVF92YWxpZGF0ZWQpKSAh PSAgICAgICAgICAgIFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgKFBH VF8jI2xldmVsIyNfcGFnZV90YWJsZXxQR1RfdmFsaWRhdGVkKSkgKSAgICAg ICBcCiAgICAgICAgICAgICB7ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgICAg ICAgICAgICAgIGRlY19saW5lYXJfdXNlcyhwYWdlKTsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgICAgICAgICBk ZWNfbGluZWFyX2VudHJpZXMocHRwZyk7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFn ZSk7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgICAgICAgICAgICAgIHJldHVybiAwOyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAg ICAgICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCkBAIC0xMjI2LDYgKzEzMDMs OSBAQCBnZXRfcGFnZV9mcm9tX2w0ZSgKICAgICAgICAgICAgIGwzZV9yZW1v dmVfZmxhZ3MoKHBsM2UpLCBfUEFHRV9VU0VSfF9QQUdFX1JXfF9QQUdFX0FD Q0VTU0VEKTsgICBcCiAgICAgfSB3aGlsZSAoIDAgKQogCitzdGF0aWMgaW50 IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UsIGJvb2wg cHJlZW1wdGlibGUsCisgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVj dCBwYWdlX2luZm8gKnB0cGcpOworCiB2b2lkIHB1dF9wYWdlX2Zyb21fbDFl KGwxX3BnZW50cnlfdCBsMWUsIHN0cnVjdCBkb21haW4gKmwxZV9vd25lcikK IHsKICAgICB1bnNpZ25lZCBsb25nICAgICBwZm4gPSBsMWVfZ2V0X3Bmbihs MWUpOwpAQCAtMTI5NiwxNyArMTM3NiwyMiBAQCBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxvbmcg cGZuKQogICAgIGlmICggbDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0VfUFNF ICkKICAgICAgICAgcHV0X3N1cGVycGFnZShsMmVfZ2V0X3BmbihsMmUpKTsK ICAgICBlbHNlCi0gICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKGwyZV9nZXRf cGFnZShsMmUpKTsKKyAgICB7CisgICAgICAgIHN0cnVjdCBwYWdlX2luZm8g KnBnID0gbDJlX2dldF9wYWdlKGwyZSk7CisgICAgICAgIGludCByYyA9IF9w dXRfcGFnZV90eXBlKHBnLCBmYWxzZSwgbWZuX3RvX3BhZ2UocGZuKSk7CisK KyAgICAgICAgQVNTRVJUKCFyYyk7CisgICAgICAgIHB1dF9wYWdlKHBnKTsK KyAgICB9CiAKICAgICByZXR1cm4gMDsKIH0KIAotc3RhdGljIGludCBfX3B1 dF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqLCBpbnQgcHJlZW1wdGli bGUpOwotCiBzdGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDNlKGwzX3BnZW50 cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcgcGZuLAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBpbnQgcGFydGlhbCwgYm9vbF90IGRlZmVyKQogewog ICAgIHN0cnVjdCBwYWdlX2luZm8gKnBnOworICAgIGludCByYzsKIAogICAg IGlmICggIShsM2VfZ2V0X2ZsYWdzKGwzZSkgJiBfUEFHRV9QUkVTRU5UKSB8 fCAobDNlX2dldF9wZm4obDNlKSA9PSBwZm4pICkKICAgICAgICAgcmV0dXJu IDE7CkBAIC0xMzI5LDIxICsxNDE0LDI4IEBAIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCiAgICAgaWYgKCB1bmxpa2VseShwYXJ0aWFsID4gMCkgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKCFkZWZlcik7Ci0gICAgICAgIHJldHVybiBfX3B1 dF9wYWdlX3R5cGUocGcsIDEpOworICAgICAgICByZXR1cm4gX3B1dF9wYWdl X3R5cGUocGcsIHRydWUsIG1mbl90b19wYWdlKHBmbikpOwogICAgIH0KIAog ICAgIGlmICggZGVmZXIgKQogICAgIHsKKyAgICAgICAgY3VycmVudC0+YXJj aC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90b19wYWdlKHBmbik7CiAgICAgICAg IGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CiAgICAgICAg IHJldHVybiAwOwogICAgIH0KIAotICAgIHJldHVybiBwdXRfcGFnZV9hbmRf dHlwZV9wcmVlbXB0aWJsZShwZyk7CisgICAgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgdHJ1ZSwgbWZuX3RvX3BhZ2UocGZuKSk7CisgICAgaWYgKCBsaWtl bHkoIXJjKSApCisgICAgICAgIHB1dF9wYWdlKHBnKTsKKworICAgIHJldHVy biByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2w0ZShsNF9w Z2VudHJ5X3QgbDRlLCB1bnNpZ25lZCBsb25nIHBmbiwKICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgaW50IHBhcnRpYWwsIGJvb2xfdCBkZWZlcikK IHsKKyAgICBpbnQgcmMgPSAxOworCiAgICAgaWYgKCAobDRlX2dldF9mbGFn cyhsNGUpICYgX1BBR0VfUFJFU0VOVCkgJiYgCiAgICAgICAgICAobDRlX2dl dF9wZm4obDRlKSAhPSBwZm4pICkKICAgICB7CkBAIC0xMzUyLDE4ICsxNDQ0 LDIyIEBAIHN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sNGUobDRfcGdlbnRy eV90IGw0ZSwgdW5zaWduZWQgbG9uZyBwZm4sCiAgICAgICAgIGlmICggdW5s aWtlbHkocGFydGlhbCA+IDApICkKICAgICAgICAgewogICAgICAgICAgICAg QVNTRVJUKCFkZWZlcik7Ci0gICAgICAgICAgICByZXR1cm4gX19wdXRfcGFn ZV90eXBlKHBnLCAxKTsKKyAgICAgICAgICAgIHJldHVybiBfcHV0X3BhZ2Vf dHlwZShwZywgdHJ1ZSwgbWZuX3RvX3BhZ2UocGZuKSk7CiAgICAgICAgIH0K IAogICAgICAgICBpZiAoIGRlZmVyICkKICAgICAgICAgeworICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IG1mbl90b19wYWdl KHBmbik7CiAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90 YWJsZSA9IHBnOwogICAgICAgICAgICAgcmV0dXJuIDA7CiAgICAgICAgIH0K IAotICAgICAgICByZXR1cm4gcHV0X3BhZ2VfYW5kX3R5cGVfcHJlZW1wdGli bGUocGcpOworICAgICAgICByYyA9IF9wdXRfcGFnZV90eXBlKHBnLCB0cnVl LCBtZm5fdG9fcGFnZShwZm4pKTsKKyAgICAgICAgaWYgKCBsaWtlbHkoIXJj KSApCisgICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAgICAgfQotICAgIHJl dHVybiAxOworCisgICAgcmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IGFs bG9jX2wxX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0xNTYx LDYgKzE2NTcsNyBAQCBzdGF0aWMgaW50IGFsbG9jX2wzX3RhYmxlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UpCiAgICAgICAgIHsKICAgICAgICAgICAgIHBh Z2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKICAgICAgICAgICAgIHBhZ2Ut PnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gu b2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgY3VycmVudC0+ YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICB9CiAgICAg ICAgIHdoaWxlICggaS0tID4gMCApCkBAIC0xNjU0LDYgKzE3NTEsNyBAQCBz dGF0aWMgaW50IGFsbG9jX2w0X3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCiAgICAgICAgICAgICAgICAgewogICAgICAgICAgICAgICAgICAgICBp ZiAoIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlICkKICAgICAgICAg ICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzKys7Cisg ICAgICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0 cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNo Lm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CiAgICAgICAgICAgICAgICAgfQog ICAgICAgICAgICAgfQpAQCAtMjQwMywxNCArMjUwMSwyMCBAQCBpbnQgZnJl ZV9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnCiB9CiAKIAotc3Rh dGljIGludCBfX3B1dF9maW5hbF9wYWdlX3R5cGUoCi0gICAgc3RydWN0IHBh Z2VfaW5mbyAqcGFnZSwgdW5zaWduZWQgbG9uZyB0eXBlLCBpbnQgcHJlZW1w dGlibGUpCitzdGF0aWMgaW50IF9wdXRfZmluYWxfcGFnZV90eXBlKHN0cnVj dCBwYWdlX2luZm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgYm9vbCBwcmVlbXB0aWJsZSwg c3RydWN0IHBhZ2VfaW5mbyAqcHRwZykKIHsKICAgICBpbnQgcmMgPSBmcmVl X3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAKICAgICAv KiBObyBuZWVkIGZvciBhdG9taWMgdXBkYXRlIG9mIHR5cGVfaW5mbyBoZXJl OiBub29uZSBlbHNlIHVwZGF0ZXMgaXQuICovCiAgICAgaWYgKCByYyA9PSAw ICkKICAgICB7CisgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVh bCh0eXBlLCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICB7 CisgICAgICAgICAgICBkZWNfbGluZWFyX3VzZXMocGFnZSk7CisgICAgICAg ICAgICBkZWNfbGluZWFyX2VudHJpZXMocHRwZyk7CisgICAgICAgIH0KKyAg ICAgICAgQVNTRVJUKCFwYWdlLT5saW5lYXJfcHRfY291bnQgfHwgcGFnZV9n ZXRfb3duZXIocGFnZSktPmlzX2R5aW5nKTsKICAgICAgICAgLyoKICAgICAg ICAgICogUmVjb3JkIFRMQiBpbmZvcm1hdGlvbiBmb3IgZmx1c2ggbGF0ZXIu IFdlIGRvIG5vdCBzdGFtcCBwYWdlIHRhYmxlcwogICAgICAgICAgKiB3aGVu IHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CkBAIC0yNDQ2LDggKzI1NTAsOCBA QCBzdGF0aWMgaW50IF9fcHV0X2ZpbmFsX3BhZ2VfdHlwZSgKIH0KIAogCi1z dGF0aWMgaW50IF9fcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlLAotICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHByZWVtcHRp YmxlKQorc3RhdGljIGludCBfcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9p bmZvICpwYWdlLCBib29sIHByZWVtcHRpYmxlLAorICAgICAgICAgICAgICAg ICAgICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnKQogewogICAgIHVu c2lnbmVkIGxvbmcgbngsIHgsIHkgPSBwYWdlLT51LmludXNlLnR5cGVfaW5m bzsKICAgICBpbnQgcmMgPSAwOwpAQCAtMjQ3NCwxMiArMjU3OCwyOCBAQCBz dGF0aWMgaW50IF9fcHV0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHgsIG54KSkgIT0geCkgKQogICAgICAgICAgICAgICAgICAgICBjb250 aW51ZTsKICAgICAgICAgICAgICAgICAvKiBXZSBjbGVhcmVkIHRoZSAndmFs aWQgYml0JyBzbyB3ZSBkbyB0aGUgY2xlYW4gdXAuICovCi0gICAgICAgICAg ICAgICAgcmMgPSBfX3B1dF9maW5hbF9wYWdlX3R5cGUocGFnZSwgeCwgcHJl ZW1wdGlibGUpOworICAgICAgICAgICAgICAgIHJjID0gX3B1dF9maW5hbF9w YWdlX3R5cGUocGFnZSwgeCwgcHJlZW1wdGlibGUsIHB0cGcpOworICAgICAg ICAgICAgICAgIHB0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgIGlmICgg eCAmIFBHVF9wYXJ0aWFsICkKICAgICAgICAgICAgICAgICAgICAgcHV0X3Bh Z2UocGFnZSk7CiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAg ICB9CiAKKyAgICAgICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVh bCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICAgICAg eworICAgICAgICAgICAgICAgIC8qCisgICAgICAgICAgICAgICAgICogcGFn ZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNjZXNzZXMgdGhlIHNhbWUg dW5pb24KKyAgICAgICAgICAgICAgICAgKiBsaW5lYXJfcHRfY291bnQgbGl2 ZXMgaW4uIFVudmFsaWRhdGVkIHBhZ2UgdGFibGUgcGFnZXMsCisgICAgICAg ICAgICAgICAgICogaG93ZXZlciwgc2hvdWxkIG9jY3VyIGR1cmluZyBkb21h aW4gZGVzdHJ1Y3Rpb24gb25seQorICAgICAgICAgICAgICAgICAqIGFueXdh eS4gIFVwZGF0aW5nIG9mIGxpbmVhcl9wdF9jb3VudCBsdWNraWx5IGlzIG5v dAorICAgICAgICAgICAgICAgICAqIG5lY2Vzc2FyeSBhbnltb3JlIGZvciBh IGR5aW5nIGRvbWFpbi4KKyAgICAgICAgICAgICAgICAgKi8KKyAgICAgICAg ICAgICAgICBBU1NFUlQocGFnZV9nZXRfb3duZXIocGFnZSktPmlzX2R5aW5n KTsKKyAgICAgICAgICAgICAgICBBU1NFUlQocGFnZS0+bGluZWFyX3B0X2Nv dW50IDwgMCk7CisgICAgICAgICAgICAgICAgQVNTRVJUKHB0cGctPmxpbmVh cl9wdF9jb3VudCA+IDApOworICAgICAgICAgICAgICAgIHB0cGcgPSBOVUxM OworICAgICAgICAgICAgfQorCiAgICAgICAgICAgICAvKgogICAgICAgICAg ICAgICogUmVjb3JkIFRMQiBpbmZvcm1hdGlvbiBmb3IgZmx1c2ggbGF0ZXIu IFdlIGRvIG5vdCBzdGFtcCBwYWdlCiAgICAgICAgICAgICAgKiB0YWJsZXMg d2hlbiBydW5uaW5nIGluIHNoYWRvdyBtb2RlOgpAQCAtMjQ5OSw2ICsyNjE5 LDEzIEBAIHN0YXRpYyBpbnQgX19wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luZm8gKnBhZ2UsCiAgICAgICAgICAgICByZXR1cm4gLUVJTlRSOwogICAg IH0KIAorICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBn LT51LmludXNlLnR5cGVfaW5mbykgKQorICAgIHsKKyAgICAgICAgQVNTRVJU KCFyYyk7CisgICAgICAgIGRlY19saW5lYXJfdXNlcyhwYWdlKTsKKyAgICAg ICAgZGVjX2xpbmVhcl9lbnRyaWVzKHB0cGcpOworICAgIH0KKwogICAgIHJl dHVybiByYzsKIH0KIApAQCAtMjYzOCw2ICsyNzY1LDcgQEAgc3RhdGljIGlu dCBfX2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgbG9uZyB0eXBlLAogICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRh dGVkX3B0ZXMgPSAwOwogICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUg PSAwOwogICAgICAgICB9CisgICAgICAgIHBhZ2UtPmxpbmVhcl9wdF9jb3Vu dCA9IDA7CiAgICAgICAgIHJjID0gYWxsb2NfcGFnZV90eXBlKHBhZ2UsIHR5 cGUsIHByZWVtcHRpYmxlKTsKICAgICB9CiAKQEAgLTI2NTIsNyArMjc4MCw3 IEBAIHN0YXRpYyBpbnQgX19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2lu Zm8gKnBhZ2UsIHVuc2lnbmVkIGxvbmcgdHlwZSwKIAogdm9pZCBwdXRfcGFn ZV90eXBlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgaW50IHJj ID0gX19wdXRfcGFnZV90eXBlKHBhZ2UsIDApOworICAgIGludCByYyA9IF9w dXRfcGFnZV90eXBlKHBhZ2UsIGZhbHNlLCBOVUxMKTsKICAgICBBU1NFUlQo cmMgPT0gMCk7CiAgICAgKHZvaWQpcmM7CiB9CkBAIC0yNjY4LDcgKzI3OTYs NyBAQCBpbnQgZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl LCB1bnNpZ25lZCBsb25nIHR5cGUpCiAKIGludCBwdXRfcGFnZV90eXBlX3By ZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7Ci0gICAgcmV0 dXJuIF9fcHV0X3BhZ2VfdHlwZShwYWdlLCAxKTsKKyAgICByZXR1cm4gX3B1 dF9wYWdlX3R5cGUocGFnZSwgdHJ1ZSwgTlVMTCk7CiB9CiAKIGludCBnZXRf cGFnZV90eXBlX3ByZWVtcHRpYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2Us IHVuc2lnbmVkIGxvbmcgdHlwZSkKQEAgLTI4NzgsMTEgKzMwMDYsMTQgQEAg aW50IHB1dF9vbGRfZ3Vlc3RfdGFibGUoc3RydWN0IHZjcHUgKnYpCiAgICAg aWYgKCAhdi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgKQogICAgICAgICByZXR1 cm4gMDsKIAotICAgIHN3aXRjaCAoIHJjID0gcHV0X3BhZ2VfYW5kX3R5cGVf cHJlZW1wdGlibGUodi0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUpICkKKyAgICBz d2l0Y2ggKCByYyA9IF9wdXRfcGFnZV90eXBlKHYtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlLCB0cnVlLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgdi0+YXJjaC5vbGRfZ3Vlc3RfcHRwZykgKQogICAgIHsKICAgICBjYXNl IC1FSU5UUjoKICAgICBjYXNlIC1FUkVTVEFSVDoKICAgICAgICAgcmV0dXJu IC1FUkVTVEFSVDsKKyAgICBjYXNlIDA6CisgICAgICAgIHB1dF9wYWdlKHYt PmFyY2gub2xkX2d1ZXN0X3RhYmxlKTsKICAgICB9CiAKICAgICB2LT5hcmNo Lm9sZF9ndWVzdF90YWJsZSA9IE5VTEw7CkBAIC0zMDQyLDYgKzMxNzMsNyBA QCBpbnQgbmV3X2d1ZXN0X2NyMyh1bnNpZ25lZCBsb25nIG1mbikKICAgICAg ICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKICAgICAgICAgICAgICAgICAv KiBmYWxsdGhyb3VnaCAqLwogICAgICAgICAgICAgY2FzZSAtRVJFU1RBUlQ6 CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9 IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf dGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAg ICAgICAgZGVmYXVsdDoKQEAgLTMzMTAsNyArMzQ0MiwxMCBAQCBsb25nIGRv X21tdWV4dF9vcCgKICAgICAgICAgICAgICAgICAgICAgaWYgKCB0eXBlID09 IFBHVF9sMV9wYWdlX3RhYmxlICkKICAgICAgICAgICAgICAgICAgICAgICAg IHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOwogICAgICAgICAgICAgICAgICAg ICBlbHNlCisgICAgICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAg ICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBOVUxMOwog ICAgICAgICAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3Rf dGFibGUgPSBwYWdlOworICAgICAgICAgICAgICAgICAgICB9CiAgICAgICAg ICAgICAgICAgfQogICAgICAgICAgICAgfQogCkBAIC0zMzQ2LDYgKzM0ODEs NyBAQCBsb25nIGRvX21tdWV4dF9vcCgKICAgICAgICAgICAgIHsKICAgICAg ICAgICAgIGNhc2UgLUVJTlRSOgogICAgICAgICAgICAgY2FzZSAtRVJFU1RB UlQ6CisgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vlc3RfcHRw ZyA9IE5VTEw7CiAgICAgICAgICAgICAgICAgY3Vyci0+YXJjaC5vbGRfZ3Vl c3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAgICAgIHJjID0gMDsKICAg ICAgICAgICAgICAgICBicmVhazsKQEAgLTM0MjUsNiArMzU2MSw3IEBAIGxv bmcgZG9fbW11ZXh0X29wKAogICAgICAgICAgICAgICAgICAgICAgICAgcmMg PSAtRVJFU1RBUlQ7CiAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmYWxs dGhyb3VnaCAqLwogICAgICAgICAgICAgICAgICAgICBjYXNlIC1FUkVTVEFS VDoKKyAgICAgICAgICAgICAgICAgICAgICAgIGN1cnItPmFyY2gub2xkX2d1 ZXN0X3B0cGcgPSBOVUxMOwogICAgICAgICAgICAgICAgICAgICAgICAgY3Vy ci0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOwogICAgICAgICAgICAg ICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICAgICAgICAgIGRlZmF1 bHQ6CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5o IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCA5MjRjYWFj ODM0Li41YTUxMjkxOGNjIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20t eDg2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWlu LmgKQEAgLTUyNyw2ICs1MjcsOCBAQCBzdHJ1Y3QgYXJjaF92Y3B1CiAgICAg cGFnZXRhYmxlX3QgZ3Vlc3RfdGFibGVfdXNlcjsgICAgICAgLyogKE1GTikg eDg2LzY0IHVzZXItc3BhY2UgcGFnZXRhYmxlICovCiAgICAgcGFnZXRhYmxl X3QgZ3Vlc3RfdGFibGU7ICAgICAgICAgICAgLyogKE1GTikgZ3Vlc3Qgbm90 aW9uIG9mIGNyMyAqLwogICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVz dF90YWJsZTsgIC8qIHBhcnRpYWxseSBkZXN0cnVjdGVkIHBhZ2V0YWJsZSAq LworICAgIHN0cnVjdCBwYWdlX2luZm8gKm9sZF9ndWVzdF9wdHBnOyAgIC8q IGNvbnRhaW5pbmcgcGFnZSB0YWJsZSBvZiB0aGUgKi8KKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvKiBmb3JtZXIsIGlmIGFu eSAqLwogICAgIC8qIGd1ZXN0X3RhYmxlIGhvbGRzIGEgcmVmIHRvIHRoZSBw YWdlLCBhbmQgYWxzbyBhIHR5cGUtY291bnQgdW5sZXNzCiAgICAgICogc2hh ZG93IHJlZmNvdW50cyBhcmUgaW4gdXNlICovCiAgICAgcGFnZXRhYmxlX3Qg c2hhZG93X3RhYmxlWzRdOyAgICAgICAgLyogKE1GTikgc2hhZG93KHMpIG9m IGd1ZXN0ICovCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L21t LmggYi94ZW4vaW5jbHVkZS9hc20teDg2L21tLmgKaW5kZXggMTE5ZDdkZWM2 Yi4uNDQ1ZGE1MGQ0NyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tbS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbW0uaApAQCAtMTI0 LDExICsxMjQsMTEgQEAgc3RydWN0IHBhZ2VfaW5mbwogICAgICAgICB1MzIg dGxiZmx1c2hfdGltZXN0YW1wOwogCiAgICAgICAgIC8qCi0gICAgICAgICAq IFdoZW4gUEdUX3BhcnRpYWwgaXMgdHJ1ZSB0aGVuIHRoaXMgZmllbGQgaXMg dmFsaWQgYW5kIGluZGljYXRlcwotICAgICAgICAgKiB0aGF0IFBURXMgaW4g dGhlIHJhbmdlIFswLCBAbnJfdmFsaWRhdGVkX3B0ZXMpIGhhdmUgYmVlbiB2 YWxpZGF0ZWQuCi0gICAgICAgICAqIEFuIGV4dHJhIHBhZ2UgcmVmZXJlbmNl IG11c3QgYmUgYWNxdWlyZWQgKG9yIG5vdCBkcm9wcGVkKSB3aGVuZXZlcgot ICAgICAgICAgKiBQR1RfcGFydGlhbCBnZXRzIHNldCwgYW5kIGl0IG11c3Qg YmUgZHJvcHBlZCB3aGVuIHRoZSBmbGFnIGdldHMKLSAgICAgICAgICogY2xl YXJlZC4gVGhpcyBpcyBzbyB0aGF0IGEgZ2V0KCkgbGVhdmluZyBhIHBhZ2Ug aW4gcGFydGlhbGx5CisgICAgICAgICAqIFdoZW4gUEdUX3BhcnRpYWwgaXMg dHJ1ZSB0aGVuIHRoZSBmaXJzdCB0d28gZmllbGRzIGFyZSB2YWxpZCBhbmQK KyAgICAgICAgICogaW5kaWNhdGUgdGhhdCBQVEVzIGluIHRoZSByYW5nZSBb MCwgQG5yX3ZhbGlkYXRlZF9wdGVzKSBoYXZlIGJlZW4KKyAgICAgICAgICog dmFsaWRhdGVkLiBBbiBleHRyYSBwYWdlIHJlZmVyZW5jZSBtdXN0IGJlIGFj cXVpcmVkIChvciBub3QgZHJvcHBlZCkKKyAgICAgICAgICogd2hlbmV2ZXIg UEdUX3BhcnRpYWwgZ2V0cyBzZXQsIGFuZCBpdCBtdXN0IGJlIGRyb3BwZWQg d2hlbiB0aGUgZmxhZworICAgICAgICAgKiBnZXRzIGNsZWFyZWQuIFRoaXMg aXMgc28gdGhhdCBhIGdldCgpIGxlYXZpbmcgYSBwYWdlIGluIHBhcnRpYWxs eQogICAgICAgICAgKiB2YWxpZGF0ZWQgc3RhdGUgKHdoZXJlIHRoZSBjYWxs ZXIgd291bGQgZHJvcCB0aGUgcmVmZXJlbmNlIGFjcXVpcmVkCiAgICAgICAg ICAqIGR1ZSB0byB0aGUgZ2V0dGluZyBvZiB0aGUgdHlwZSBbYXBwYXJlbnRs eV0gZmFpbGluZyBbLUVSRVNUQVJUXSkKICAgICAgICAgICogd291bGQgbm90 IGFjY2lkZW50YWxseSByZXN1bHQgaW4gYSBwYWdlIGxlZnQgd2l0aCB6ZXJv IGdlbmVyYWwKQEAgLTE1MiwxMCArMTUyLDE4IEBAIHN0cnVjdCBwYWdlX2lu Zm8KICAgICAgICAgICogcHV0X3BhZ2VfZnJvbV9sTmUoKSAoZHVlIHRvIHRo ZSBhcHBhcmVudCBmYWlsdXJlKSwgYW5kIGhlbmNlIGl0CiAgICAgICAgICAq IG11c3QgYmUgZHJvcHBlZCB3aGVuIHRoZSBwdXQgb3BlcmF0aW9uIGlzIHJl c3VtZWQgKGFuZCBjb21wbGV0ZXMpLAogICAgICAgICAgKiBidXQgaXQgbXVz dCBub3QgYmUgYWNxdWlyZWQgaWYgcGlja2luZyB1cCB0aGUgcGFnZSBmb3Ig dmFsaWRhdGlvbi4KKyAgICAgICAgICoKKyAgICAgICAgICogVGhlIDNyZCBm aWVsZCwgQGxpbmVhcl9wdF9jb3VudCwgaW5kaWNhdGVzCisgICAgICAgICAq IC0gYnkgYSBwb3NpdGl2ZSB2YWx1ZSwgaG93IG1hbnkgc2FtZS1sZXZlbCBw YWdlIHRhYmxlIGVudHJpZXMgYSBwYWdlCisgICAgICAgICAqICAgdGFibGUg aGFzLAorICAgICAgICAgKiAtIGJ5IGEgbmVnYXRpdmUgdmFsdWUsIGluIGhv dyBtYW55IHNhbWUtbGV2ZWwgcGFnZSB0YWJsZXMgYSBwYWdlIGlzCisgICAg ICAgICAqICAgaW4gdXNlLgogICAgICAgICAgKi8KICAgICAgICAgc3RydWN0 IHsKLSAgICAgICAgICAgIHUxNiBucl92YWxpZGF0ZWRfcHRlczsKLSAgICAg ICAgICAgIHM4IHBhcnRpYWxfcHRlOworICAgICAgICAgICAgdTE2IG5yX3Zh bGlkYXRlZF9wdGVzOlBBR0VUQUJMRV9PUkRFUiArIDE7CisgICAgICAgICAg ICB1MTYgOjE2IC0gUEFHRVRBQkxFX09SREVSIC0gMSAtIDI7CisgICAgICAg ICAgICBzMTYgcGFydGlhbF9wdGU6MjsKKyAgICAgICAgICAgIHMxNiBsaW5l YXJfcHRfY291bnQ7CiAgICAgICAgIH07CiAKICAgICAgICAgLyoKQEAgLTIw Niw2ICsyMTQsOSBAQCBzdHJ1Y3QgcGFnZV9pbmZvCiAjZGVmaW5lIFBHVF9j b3VudF93aWR0aCAgIFBHX3NoaWZ0KDkpCiAjZGVmaW5lIFBHVF9jb3VudF9t YXNrICAgICgoMVVMPDxQR1RfY291bnRfd2lkdGgpLTEpCiAKKy8qIEFyZSB0 aGUgJ3R5cGUgbWFzaycgYml0cyBpZGVudGljYWw/ICovCisjZGVmaW5lIFBH VF90eXBlX2VxdWFsKHgsIHkpICghKCgoeCkgXiAoeSkpICYgUEdUX3R5cGVf bWFzaykpCisKICAvKiBDbGVhcmVkIHdoZW4gdGhlIG93bmluZyBndWVzdCAn ZnJlZXMnIHRoaXMgcGFnZS4gKi8KICNkZWZpbmUgX1BHQ19hbGxvY2F0ZWQg ICAgUEdfc2hpZnQoMSkKICNkZWZpbmUgUEdDX2FsbG9jYXRlZCAgICAgUEdf bWFzaygxLCAxKQotLSAKMi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-4.9/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Disposition: attachment; filename="xsa240-4.9/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch" Content-Transfer-Encoding: base64 RnJvbSBlNjE0OTc5Y2UwNTQwNDRkOWUxOTAyM2YxZWYxMGRhZTZlMzhiYWY0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMjIgU2Vw IDIwMTcgMTE6NDY6NTUgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvMl0geDg2 L21tOiBEaXNhYmxlIFBWIGxpbmVhciBwYWdldGFibGVzIGJ5IGRlZmF1bHQK CkFsbG93aW5nIHBhZ2V0YWJsZXMgdG8gcG9pbnQgdG8gb3RoZXIgcGFnZXRh YmxlcyBvZiB0aGUgc2FtZSBsZXZlbAoob2Z0ZW4gY2FsbGVkICdsaW5lYXIg cGFnZXRhYmxlcycpIGhhcyBiZWVuIGluY2x1ZGVkIGluIFhlbiBzaW5jZSBp dHMKaW5jZXB0aW9uLiAgQnV0IGl0IGlzIG5vdCB1c2VkIGJ5IHRoZSBtb3N0 IGNvbW1vbiBQViBndWVzdHMgKExpbnV4LApOZXRCU0QsIG1pbmlvcyksIGFu ZCBoYXMgYmVlbiB0aGUgc291cmNlIG9mIGEgbnVtYmVyIG9mIHN1YnRsZQpy ZWZlcmVuY2UtY291bnRpbmcgYnVncy4KCkFkZCBhIGNvbW1hbmQtbGluZSBv cHRpb24gdG8gY29udHJvbCB3aGV0aGVyIFBWIGxpbmVhciBwYWdldGFibGVz IGFyZQphbGxvd2VkIChkaXNhYmxlZCBieSBkZWZhdWx0KS4KClJlcG9ydGVk LWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2dsZS5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+Ci0tLQpDaGFuZ2VzIHNpbmNlIHYyOgotIHMvXy8tLzsgaW4g Y29tbWFuZC1saW5lIG9wdGlvbgotIEFkZGVkIF9fcmVhZF9tb3N0bHkKLS0t CiBkb2NzL21pc2MveGVuLWNvbW1hbmQtbGluZS5tYXJrZG93biB8IDE1ICsr KysrKysrKysrKysrKwogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAg ICAgICAgfCAxMCArKysrKysrKysrCiAyIGZpbGVzIGNoYW5nZWQsIDI1IGlu c2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kb2NzL21pc2MveGVuLWNvbW1h bmQtbGluZS5tYXJrZG93biBiL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5l Lm1hcmtkb3duCmluZGV4IDQ0ZDk5ODUyYWEuLjQ1ZWY4NzNhYmIgMTAwNjQ0 Ci0tLSBhL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCisr KyBiL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCkBAIC0x Mzc0LDYgKzEzNzQsMjEgQEAgVGhlIGZvbGxvd2luZyByZXNvdXJjZXMgYXJl IGF2YWlsYWJsZToKICAgICBDRFAsIG9uZSBDT1Mgd2lsbCBjb3Jlc3BvbmQg dHdvIENCTXMgb3RoZXIgdGhhbiBvbmUgd2l0aCBDQVQsIGR1ZSB0byB0aGUK ICAgICBzdW0gb2YgQ0JNcyBpcyBmaXhlZCwgdGhhdCBtZWFucyBhY3R1YWwg YGNvc19tYXhgIGluIHVzZSB3aWxsIGF1dG9tYXRpY2FsbHkKICAgICByZWR1 Y2UgdG8gaGFsZiB3aGVuIENEUCBpcyBlbmFibGVkLgorCisjIyMgcHYtbGlu ZWFyLXB0Cis+IGA9IDxib29sZWFuPmAKKworPiBEZWZhdWx0OiBgZmFsc2Vg CisKK0FsbG93IFBWIGd1ZXN0cyB0byBoYXZlIHBhZ2V0YWJsZSBlbnRyaWVz IHBvaW50aW5nIHRvIG90aGVyIHBhZ2V0YWJsZXMKK29mIHRoZSBzYW1lIGxl dmVsIChpLmUuLCBhbGxvd2luZyBMMiBQVEVzIHRvIHBvaW50IHRvIG90aGVy IEwyIHBhZ2VzKS4KK1RoaXMgdGVjaG5pcXVlIGlzIG9mdGVuIGNhbGxlZCAi bGluZWFyIHBhZ2V0YWJsZXMiLCBhbmQgaXMgc29tZXRpbWVzCit1c2VkIHRv IGFsbG93IG9wZXJhdGluZyBzeXN0ZW1zIGEgc2ltcGxlIHdheSB0byBjb25z aXN0ZW50bHkgbWFwIHRoZQorY3VycmVudCBwcm9jZXNzJ3MgcGFnZXRhYmxl cyBpbnRvIGl0cyBvd24gdmlydHVhbCBhZGRyZXNzIHNwYWNlLgorCitOb25l IG9mIHRoZSBtb3N0IGNvbW1vbiBQViBvcGVyYXRpbmcgc3lzdGVtcyAoTGlu dXgsIE5ldEJTRCwgTWluaU9TKQordXNlIHRoaXMgdGVjaG5pcXVlLCBidXQg dGhlcmUgbWF5IGJlIGN1c3RvbSBvcGVyYXRpbmcgc3lzdGVtcyB3aGljaAor ZG8uCiAKICMjIyByZWJvb3QKID4gYD0gdFtyaXBsZV0gfCBrW2JkXSB8IGFb Y3BpXSB8IHBbY2ldIHwgUFtvd2VyXSB8IGVbZmldIHwgbltvXSBbLCBbd11h cm0gfCBbY11vbGRdYApkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMg Yi94ZW4vYXJjaC94ODYvbW0uYwppbmRleCAxZTQ2OWJkMzU0Li4zMjk1MmE0 NmI5IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4v YXJjaC94ODYvbW0uYwpAQCAtODE0LDYgKzgxNCw5IEBAIHN0YXRpYyB2b2lk IGRlY19saW5lYXJfdXNlcyhzdHJ1Y3QgcGFnZV9pbmZvICpwZykKICAqICAg ICBmcmFtZSBpZiBpdCBpcyBtYXBwZWQgYnkgYSBkaWZmZXJlbnQgcm9vdCB0 YWJsZS4gVGhpcyBpcyBzdWZmaWNpZW50IGFuZAogICogICAgIGFsc28gbmVj ZXNzYXJ5IHRvIGFsbG93IHZhbGlkYXRpb24gb2YgYSByb290IHRhYmxlIG1h cHBpbmcgaXRzZWxmLgogICovCitzdGF0aWMgYm9vbCBfX3JlYWRfbW9zdGx5 IHB2X2xpbmVhcl9wdF9lbmFibGUgPSBmYWxzZTsKK2Jvb2xlYW5fcGFyYW0o InB2LWxpbmVhci1wdCIsIHB2X2xpbmVhcl9wdF9lbmFibGUpOworCiAjZGVm aW5lIGRlZmluZV9nZXRfbGluZWFyX3BhZ2V0YWJsZShsZXZlbCkgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogc3RhdGljIGludCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKIGdldF8jI2xldmVsIyNfbGluZWFyX3BhZ2V0 YWJsZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCkBAIC04MjMsNiArODI2LDEzIEBAIGdldF8jI2xldmVsIyNfbGlu ZWFyX3BhZ2V0YWJsZSggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZTsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgIHVuc2lnbmVkIGxvbmcgcGZuOyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAgaWYgKCAhcHZfbGlu ZWFyX3B0X2VuYWJsZSApICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAorICAgIHsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKKyAgICAgICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAg ICAgICAgICAgICAgICJBdHRlbXB0IHRvIGNyZWF0ZSBsaW5lYXIgcC50LiAo ZmVhdHVyZSBkaXNhYmxlZClcbiIpOyAgICAgXAorICAgICAgICByZXR1cm4g MDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKKyAgICB9ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAg IGlmICggKGxldmVsIyNlX2dldF9mbGFncyhwZGUpICYgX1BBR0VfUlcpICkg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICB7ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCiAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19X QVJOSU5HLCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotLSAKMi4xNC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa240-4.9/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Disposition: attachment; filename="xsa240-4.9/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24KCl9wdXRfcGFnZV90eXBlKCkgbWF5IGRvIG11bHRpcGxl IGl0ZXJhdGlvbnMgdW50aWwgaXRzIGNtcHhjaGcoKQpzdWNjZWVkcy4gSXQg aW52b2tlcyBzZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgb24gdGhlIGZpcnN0 Cml0ZXJhdGlvbiwgaG93ZXZlci4gQ29kZSBpbnNpZGUgdGhlIGZ1bmN0aW9u IHRha2VzIGNhcmUgb2YgdGhpcywgYnV0Ci0gdGhlIGFzc2VydGlvbiBpbiBf cHV0X2ZpbmFsX3BhZ2VfdHlwZSgpIHdvdWxkIHRyaWdnZXIgb24gdGhlIHNl Y29uZAogIGl0ZXJhdGlvbiBpZiB0aW1lIHN0YW1wcyBpbiBhIGRlYnVnIGJ1 aWxkIGFyZSBwZXJtaXR0ZWQgdG8gYmUKICBzdWZmaWNpZW50bHkgbXVjaCB3 aWRlciB0aGFuIHRoZSBkZWZhdWx0IDYgYml0cyAoc2VlIFdSQVBfTUFTSyBp bgogIGZsdXNodGxiLmMpLAotIGl0IHJldHVybmluZyAtRUlOVFIgKGZvciBh IGNvbnRpbnVhdGlvbiB0byBiZSBzY2hlZHVsZWQpIHdvdWxkIGxlYXZlCiAg dGhlIHBhZ2UgaW5jb25zaXN0ZW50IHN0YXRlICh1bnRpbCB0aGUgcmUtaW52 b2NhdGlvbiBjb21wbGV0ZXMpLgpNYWtlIHRoZSBzZXRfdGxiZmx1c2hfdGlt ZXN0YW1wKCkgaW52b2NhdGlvbiBjb25kaXRpb25hbCwgYnlwYXNzaW5nIGl0 Cihmb3Igbm93KSBvbmx5IGluIHRoZSBjYXNlIHdlIHJlYWxseSBjYW4ndCB0 b2xlcmF0ZSB0aGUgc3RhbXAgdG8gYmUKc3RvcmVkLgoKVGhpcyBpcyBwYXJ0 IG9mIFhTQS0yNDAuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJl dWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBHZW9yZ2UgRHVubGFwIDxn ZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMjY0NywzNCArMjY0 NywyMiBAQCBzdGF0aWMgaW50IF9wdXRfcGFnZV90eXBlKHN0cnVjdCBwYWdl X2luCiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICB9CiAK LSNpZmRlZiBDT05GSUdfUFZfTElORUFSX1BUCi0gICAgICAgICAgICBpZiAo IHB0cGcgJiYgUEdUX3R5cGVfZXF1YWwoeCwgcHRwZy0+dS5pbnVzZS50eXBl X2luZm8pICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICAvKgot ICAgICAgICAgICAgICAgICAqIHNldF90bGJmbHVzaF90aW1lc3RhbXAoKSBh Y2Nlc3NlcyB0aGUgc2FtZSB1bmlvbgotICAgICAgICAgICAgICAgICAqIGxp bmVhcl9wdF9jb3VudCBsaXZlcyBpbi4gVW52YWxpZGF0ZWQgcGFnZSB0YWJs ZSBwYWdlcywKLSAgICAgICAgICAgICAgICAgKiBob3dldmVyLCBzaG91bGQg b2NjdXIgZHVyaW5nIGRvbWFpbiBkZXN0cnVjdGlvbiBvbmx5Ci0gICAgICAg ICAgICAgICAgICogYW55d2F5LiAgVXBkYXRpbmcgb2YgbGluZWFyX3B0X2Nv dW50IGx1Y2tpbHkgaXMgbm90Ci0gICAgICAgICAgICAgICAgICogbmVjZXNz YXJ5IGFueW1vcmUgZm9yIGEgZHlpbmcgZG9tYWluLgotICAgICAgICAgICAg ICAgICAqLwotICAgICAgICAgICAgICAgIEFTU0VSVChwYWdlX2dldF9vd25l cihwYWdlKS0+aXNfZHlpbmcpOwotICAgICAgICAgICAgICAgIEFTU0VSVChw YWdlLT5saW5lYXJfcHRfY291bnQgPCAwKTsKLSAgICAgICAgICAgICAgICBB U1NFUlQocHRwZy0+bGluZWFyX3B0X2NvdW50ID4gMCk7Ci0gICAgICAgICAg ICAgICAgcHRwZyA9IE5VTEw7Ci0gICAgICAgICAgICB9Ci0jZWxzZSAvKiBD T05GSUdfUFZfTElORUFSX1BUICovCi0gICAgICAgICAgICBCVUdfT04ocHRw ZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51LmludXNlLnR5cGVfaW5m bykpOwotI2VuZGlmCi0KICAgICAgICAgICAgIC8qCiAgICAgICAgICAgICAg KiBSZWNvcmQgVExCIGluZm9ybWF0aW9uIGZvciBmbHVzaCBsYXRlci4gV2Ug ZG8gbm90IHN0YW1wIHBhZ2UKICAgICAgICAgICAgICAqIHRhYmxlcyB3aGVu IHJ1bm5pbmcgaW4gc2hhZG93IG1vZGU6CiAgICAgICAgICAgICAgKiAgMS4g UG9pbnRsZXNzLCBzaW5jZSBpdCdzIHRoZSBzaGFkb3cgcHQncyB3aGljaCBt dXN0IGJlIHRyYWNrZWQuCiAgICAgICAgICAgICAgKiAgMi4gU2hhZG93IG1v ZGUgcmV1c2VzIHRoaXMgZmllbGQgZm9yIHNoYWRvd2VkIHBhZ2UgdGFibGVz IHRvCiAgICAgICAgICAgICAgKiAgICAgc3RvcmUgZmxhZ3MgaW5mbyAtLSB3 ZSBkb24ndCB3YW50IHRvIGNvbmZsaWN0IHdpdGggdGhhdC4KKyAgICAgICAg ICAgICAqIEFsc28gcGFnZV9zZXRfdGxiZmx1c2hfdGltZXN0YW1wKCkgYWNj ZXNzZXMgdGhlIHNhbWUgdW5pb24KKyAgICAgICAgICAgICAqIGxpbmVhcl9w dF9jb3VudCBsaXZlcyBpbi4gUGFnZXMgKGluY2x1ZGluZyBwYWdlIHRhYmxl IG9uZXMpLAorICAgICAgICAgICAgICogaG93ZXZlciwgZG9uJ3QgbmVlZCB0 aGVpciBmbHVzaCB0aW1lIHN0YW1wIHNldCBleGNlcHQgd2hlbgorICAgICAg ICAgICAgICogdGhlIGxhc3QgcmVmZXJlbmNlIGlzIGJlaW5nIGRyb3BwZWQu IEZvciBwYWdlIHRhYmxlIHBhZ2VzCisgICAgICAgICAgICAgKiB0aGlzIGhh cHBlbnMgaW4gX3B1dF9maW5hbF9wYWdlX3R5cGUoKS4KICAgICAgICAgICAg ICAqLwotICAgICAgICAgICAgaWYgKCAhKHNoYWRvd19tb2RlX2VuYWJsZWQo cGFnZV9nZXRfb3duZXIocGFnZSkpICYmCi0gICAgICAgICAgICAgICAgICAg KHBhZ2UtPmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKKyAgICAg ICAgICAgIGlmICggcHRwZyAmJiBQR1RfdHlwZV9lcXVhbCh4LCBwdHBnLT51 LmludXNlLnR5cGVfaW5mbykgKQorICAgICAgICAgICAgICAgIEJVR19PTigh SVNfRU5BQkxFRChDT05GSUdfUFZfTElORUFSX1BUKSk7CisgICAgICAgICAg ICBlbHNlIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0X293 bmVyKHBhZ2UpKSAmJgorICAgICAgICAgICAgICAgICAgICAgICAgKHBhZ2Ut PmNvdW50X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKICAgICAgICAgICAg ICAgICBwYWdlX3NldF90bGJmbHVzaF90aW1lc3RhbXAocGFnZSk7CiAgICAg ICAgIH0KICAgICAgICAgZWxzZSBpZiAoIHVubGlrZWx5KChueCAmIChQR1Rf bG9ja2VkIHwgUEdUX2NvdW50X21hc2spKSA9PQo= --=separator Content-Type: application/octet-stream; name="xsa240-4.9/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Disposition: attachment; filename="xsa240-4.9/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IGRvbid0IHdyb25nbHkgdHJpZ2dlciBsaW5lYXIgcGFnZSB0YWJs ZSBhc3NlcnRpb24gKDIpCgpfcHV0X2ZpbmFsX3BhZ2VfdHlwZSgpLCB3aGVu IGZyZWVfcGFnZV90eXBlKCkgaGFzIGV4aXRlZCBlYXJseSB0byBhbGxvdwpm b3IgcHJlZW1wdGlvbiwgc2hvdWxkIG5vdCB1cGRhdGUgdGhlIHRpbWUgc3Rh bXAsIGFzIHRoZSBwYWdlIGNvbnRpbnVlcwp0byByZXRhaW4gdGhlIHR5cCB3 aGljaCBpcyBpbiB0aGUgcHJvY2VzcyBvZiBiZWluZyB1bnZhbGlkYXRlZC4g SSBjYW4ndApzZWUgd2h5IHRoZSB0aW1lIHN0YW1wIHVwZGF0ZSB3YXMgcHV0 IG9uIHRoYXQgcGF0aCBpbiB0aGUgZmlyc3QgcGxhY2UKKGFsYmVpdCBpdCBt YXkgd2VsbCBoYXZlIGJlZW4gbWUgd2hvIGhhZCBwdXQgaXQgdGhlcmUgeWVh cnMgYWdvKS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjQwLgoKU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogPEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXAuY29tPgoKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI1OTQsOSArMjU5NCw2IEBAIHN0YXRpYyBpbnQgX3B1dF9maW5hbF9w YWdlX3R5cGUoc3RydWN0IHAKICAgICB7CiAgICAgICAgIEFTU0VSVCgocGFn ZS0+dS5pbnVzZS50eXBlX2luZm8gJgogICAgICAgICAgICAgICAgIChQR1Rf Y291bnRfbWFza3xQR1RfdmFsaWRhdGVkfFBHVF9wYXJ0aWFsKSkgPT0gMSk7 Ci0gICAgICAgIGlmICggIShzaGFkb3dfbW9kZV9lbmFibGVkKHBhZ2VfZ2V0 X293bmVyKHBhZ2UpKSAmJgotICAgICAgICAgICAgICAgKHBhZ2UtPmNvdW50 X2luZm8gJiBQR0NfcGFnZV90YWJsZSkpICkKLSAgICAgICAgICAgIHBhZ2Vf c2V0X3RsYmZsdXNoX3RpbWVzdGFtcChwYWdlKTsKICAgICAgICAgd21iKCk7 CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvIHw9IFBHVF92YWxp ZGF0ZWQ7CiAgICAgfQo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Dec 12 12:01:21 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Dec 2017 12:01:21 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEY-0000v4-RY; Tue, 12 Dec 2017 12:00:26 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEW-0000u8-B3 for xen-announce@lists.xen.org; Tue, 12 Dec 2017 12:00:24 +0000 X-Inumbo-ID: 1a2362b2-df34-11e7-b0d7-9f685aff125f Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas1.inumbo.com (Halon) with ESMTPS id 1a2362b2-df34-11e7-b0d7-9f685aff125f; Tue, 12 Dec 2017 12:00:53 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEH-0008GI-CU; Tue, 12 Dec 2017 12:00:09 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eOjEH-0002D4-Bh; Tue, 12 Dec 2017 12:00:09 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 12 Dec 2017 12:00:09 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 249 - broken x86 shadow mode refcount overflow check X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-249 version 2 broken x86 shadow mode refcount overflow check UPDATES IN VERSION 2 ==================== Public release. Provide metadata file. ISSUE DESCRIPTION ================= Pages being used to run x86 guests in shadow mode are reference counted to track their uses. Unfortunately the overflow check when trying to obtain a new reference used a mask one bit wider than the reference count actually is, rendering the entire check ineffective. IMPACT ====== A malicious or buggy guest may cause a hypervisor crash, resulting in a Denial of Service (DoS) affecting the entire host, or cause hypervisor memory corruption. We cannot rule out a guest being able to escalate its privilege. VULNERABLE SYSTEMS ================== Xen versions 4.1 and later are affected. Xen versions 4.0 and earlier are not affected. x86 systems are vulnerable. ARM systems are not vulnerable. Only guests run in shadow mode can exploit the vulnerability. PV guests typically only run in shadow mode during live migration, as well as for features like VM snapshot. Note that save / restore does *not* use shadow mode, and so does not expose this vulnerability. Some downstreams also include a "non-live migration" feature, which also does not use shadow mode (and thus does not expose this vulnerability). HVM guests run in shadow mode on hardware without HAP support, or when HAP is disabled (globally or in the VM configuration file). Live migration does not affect an HVM guest's use of shadow mode. MITIGATION ========== For HVM guest explicitly configured to use shadow paging (e.g. via the `hap=0' xl domain configuration file parameter), changing to HAP (e.g. by setting `hap=1') will avoid exposing the vulnerability to those guests. HAP is the default (in upstream Xen), where the hardware supports it; so this mitigation is only applicable if HAP has been disabled by configuration. For PV guests, avoiding their live migration avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. xsa249.patch xen-unstable, Xen 4.9.x ... 4.5.x $ sha256sum xsa249* 38a4b8033d634e22939ad42b882c35e46482782619e3e03b968a2f6489e459c9 xsa249.meta e99066b0171d4757c6a66e1223aabe01e990de2d0dc50416936e064e6e750d00 xsa249.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlovuNkMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZD0AIAJN95Z7d9zV07qt4q1iPyyvmBnhusedCvZmTnJTr +nfYb/mg9H7C8Re3Fsf0RA66P+nA8a76HVC3kqBBuqUvE+QNHteWmVWZ6K7QbtlG cCW6CtjeT0be98G1KyvIhL6rLYjpB/4LWAeXusof6ckcbtxHBRtGL3kQhv3MN91q u/R9nHKUyIYS/G4J39ApHk0XOFJFFg9mx66HhZuMjJMjBDevT+EG516YerXlSWr9 bskfxPICFSC7g8z5I2mYdrAxinJ2QHpzurw2Q3T+adb2ag+ClkZRu3gS9jNHuC3F vqQr0r0LE68t77A2uD7UKyXuU5+kQ61yBE780I6BkhiG4PI= =0o90 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa249.meta" Content-Disposition: attachment; filename="xsa249.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyNDksCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwKICAgICI0LjgiLAog ICAgIjQuNyIsCiAgICAiNC42IiwKICAgICI0LjUiCiAgXSwKICAiVHJlZXMi OiBbCiAgICAieGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6 IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC4xMCIsCiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog IjM0NWJiOWNkNjM0NDIxZjUwYjczMmQ0ZjljODlhNjQ5YTdhMWQwZGIiLAog ICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OAogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh MjQ5LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAg fSwKICAgICI0LjUiOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIjQuNSIsCiAg ICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAi U3RhYmxlUmVmIjogIjQxZjZkZDA1ZDEwZmQxYjQyODFjMTcyMmUyZDhmMjll Mzc4YWJlOWEiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAg IDI0OAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAg ICAgICAgICAieHNhMjQ5LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0K ICAgICAgfQogICAgfSwKICAgICI0LjYiOiB7CiAgICAgICJYZW5WZXJzaW9u IjogIjQuNiIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7 CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjliMGMyYTIyMzEzMmEwN2YwNmYw YmU4ZTg1ZGEzOTBkZWZlOTk4ZjUiLAogICAgICAgICAgIlByZXJlcXMiOiBb CiAgICAgICAgICAgIDI0OAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjQ5LnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjciOiB7CiAgICAg ICJYZW5WZXJzaW9uIjogIjQuNyIsCiAgICAgICJSZWNpcGVzIjogewogICAg ICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogImJjYzllMjQ1 YWFmYmRhZTQ0Yzc2MTA1M2M4OThiZWRiMzU4MmNjNGQiLAogICAgICAgICAg IlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OAogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjQ5LnBhdGNo IgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0 LjgiOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIjQuOCIsCiAgICAgICJSZWNp cGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVm IjogIjliYTY3ODNlNDdkYjcxMzc5YzUxMjAwMzliODc4ZjYwNWJkZjMxZjMi LAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OAogICAg ICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAi eHNhMjQ5LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfSwKICAgICI0LjkiOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIjQuOSIs CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAg ICAiU3RhYmxlUmVmIjogImFlMzRhYjhjNWQyZTk3N2Y2ZDgwODFjMmNlNDQ5 NDg3NTIzMmY1NjMiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAg ICAgIDI0OAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjQ5LnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfSwKICAgICJtYXN0ZXIiOiB7CiAgICAgICJYZW5W ZXJzaW9uIjogIjQuMTAiLAogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAi eGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICIzNDViYjljZDYzNDQy MWY1MGI3MzJkNGY5Yzg5YTY0OWE3YTFkMGRiIiwKICAgICAgICAgICJQcmVy ZXFzIjogWwogICAgICAgICAgICAyNDgKICAgICAgICAgIF0sCiAgICAgICAg ICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI0OS5wYXRjaCIKICAg ICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa249.patch" Content-Disposition: attachment; filename="xsa249.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvc2hhZG93OiBmaXggcmVmY291bnQgb3ZlcmZsb3cgY2hlY2sKCkNv bW1pdCBjMzg1ZDI3MDc5ICgieDg2IHNoYWRvdzogZm9yIG11bHRpLXBhZ2Ug c2hhZG93cywgZXhwbGljaXRseSB0cmFjawp0aGUgZmlyc3QgcGFnZSIpIHJl ZHVjZWQgdGhlIHJlZmNvdW50IHdpZHRoIHRvIDI1LCB3aXRob3V0IGFkanVz dGluZyB0aGUKb3ZlcmZsb3cgY2hlY2suIEVsaW1pbmF0ZSB0aGUgZGlzY29u bmVjdCBieSB1c2luZyBhIG1hbmlmZXN0IGNvbnN0YW50LgoKSW50ZXJlc3Rp bmdseSwgdXAgdG8gY29tbWl0IDA0Nzc4MmZhMDEgKCJPdXQtb2Ytc3luYyBM MSBzaGFkb3dzOiBPT1MKc25hcHNob3QiKSB0aGUgcmVmY291bnQgd2FzIDI3 IGJpdHMgd2lkZSwgeWV0IHRoZSBjaGVjayB3YXMgYWxyZWFkeQp1c2luZyAy Ni4KClRoaXMgaXMgWFNBLTI0OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEdlb3JnZSBE dW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6 IFRpbSBEZWVnYW4gPHRpbUB4ZW4ub3JnPgotLS0KdjI6IFNpbXBsaWZ5IGV4 cHJlc3Npb24gYmFjayB0byB0aGUgc3R5bGUgaXQgd2FzLgoKLS0tIGEveGVu L2FyY2gveDg2L21tL3NoYWRvdy9wcml2YXRlLmgKKysrIGIveGVuL2FyY2gv eDg2L21tL3NoYWRvdy9wcml2YXRlLmgKQEAgLTUyOSw3ICs1MjksNyBAQCBz dGF0aWMgaW5saW5lIGludCBzaF9nZXRfcmVmKHN0cnVjdCBkb21hCiAgICAg eCA9IHNwLT51LnNoLmNvdW50OwogICAgIG54ID0geCArIDE7CiAKLSAgICBp ZiAoIHVubGlrZWx5KG54ID49IDFVPDwyNikgKQorICAgIGlmICggdW5saWtl bHkobnggPj0gKDFVIDw8IFBBR0VfU0hfUkVGQ09VTlRfV0lEVEgpKSApCiAg ICAgewogICAgICAgICBTSEFET1dfUFJJTlRLKCJzaGFkb3cgcmVmIG92ZXJm bG93LCBnbWZuPSVseCBzbWZuPSVseFxuIiwKICAgICAgICAgICAgICAgICAg ICAgICAgX19iYWNrcG9pbnRlcihzcCksIG1mbl94KHNtZm4pKTsKLS0tIGEv eGVuL2luY2x1ZGUvYXNtLXg4Ni9tbS5oCisrKyBiL3hlbi9pbmNsdWRlL2Fz bS14ODYvbW0uaApAQCAtODIsNyArODIsOCBAQCBzdHJ1Y3QgcGFnZV9pbmZv CiAgICAgICAgICAgICB1bnNpZ25lZCBsb25nIHR5cGU6NTsgICAvKiBXaGF0 IGtpbmQgb2Ygc2hhZG93IGlzIHRoaXM/ICovCiAgICAgICAgICAgICB1bnNp Z25lZCBsb25nIHBpbm5lZDoxOyAvKiBJcyB0aGUgc2hhZG93IHBpbm5lZD8g Ki8KICAgICAgICAgICAgIHVuc2lnbmVkIGxvbmcgaGVhZDoxOyAgIC8qIElz IHRoaXMgdGhlIGZpcnN0IHBhZ2Ugb2YgdGhlIHNoYWRvdz8gKi8KLSAgICAg ICAgICAgIHVuc2lnbmVkIGxvbmcgY291bnQ6MjU7IC8qIFJlZmVyZW5jZSBj b3VudCAqLworI2RlZmluZSBQQUdFX1NIX1JFRkNPVU5UX1dJRFRIIDI1Cisg ICAgICAgICAgICB1bnNpZ25lZCBsb25nIGNvdW50OlBBR0VfU0hfUkVGQ09V TlRfV0lEVEg7IC8qIFJlZmVyZW5jZSBjb3VudCAqLwogICAgICAgICB9IHNo OwogCiAgICAgICAgIC8qIFBhZ2UgaXMgb24gYSBmcmVlIGxpc3Q6ICgoY291 bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSA9PSAwKS4gKi8K --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Dec 12 12:01:21 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Dec 2017 12:01:21 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEe-0000vb-2e; Tue, 12 Dec 2017 12:00:32 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEc-0000ua-GH for xen-announce@lists.xen.org; Tue, 12 Dec 2017 12:00:30 +0000 X-Inumbo-ID: 1e0bf71b-df34-11e7-b0d7-9f685aff125f Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas1.inumbo.com (Halon) with ESMTPS id 1e0bf71b-df34-11e7-b0d7-9f685aff125f; Tue, 12 Dec 2017 12:00:59 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEE-0008G8-TD; Tue, 12 Dec 2017 12:00:06 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eOjEE-0002Bc-Qe; Tue, 12 Dec 2017 12:00:06 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 12 Dec 2017 12:00:06 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 248 - x86 PV guests may gain access to internally used pages X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-248 version 2 x86 PV guests may gain access to internally used pages UPDATES IN VERSION 2 ==================== Public release. Provide metadata file. ISSUE DESCRIPTION ================= Memory management for PV guests builds on page ownership and page attributes. A domain can always map, at least r/o, pages of which it is the owner. Certain fields in the control structure of a page are used for different purposes in the main PV memory management code and in code handling shadow paging. When a guest is running in shadow mode (which for PV guests is necessary e.g. for live migration), certain auxiliary pages used by Xen internally had their owner set to the guest itself. When the PV guest maps such a page, shadow code and PV memory management code will disagree on the meaning of said multi-purpose fields, generally leading to a crash of the hypervisor. IMPACT ====== A malicious or buggy PV guest may cause a hypervisor crash, resulting in a Denial of Service (DoS) affecting the entire host, or cause hypervisor memory corruption. We cannot rule out a guest being able to escalate its privilege. VULNERABLE SYSTEMS ================== All versions of Xen are vulnerable. Only x86 systems are affected. ARM systems are not vulnerable. x86 HVM guests cannot exploit this vulnerability. Only x86 PV guests can exploit this vulnerability, and only when being run in shadow mode. PV guests are typically run in shadow mode for live migration, as well as for features like VM snapshot. Note that save / restore does *not* use shadow mode, and so does not expose this vulnerability. Some downstreams also include a "non-live migration" feature, which also does not use shadow mode (and thus does not expose this vulnerability). MITIGATION ========== Running only HVM guests avoids the vulnerability. Avoiding live migration of x86 PV guests also avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa248.patch xen-unstable, Xen 4.9.x xsa248-4.8.patch Xen 4.8.x, Xen 4.7.x, Xen 4.6.x xsa248-4.5.patch Xen 4.5.x $ sha256sum xsa248* f0ac5c5ff956118f52821e111c6e27416f788cea6e98cc54cb051c42b793357e xsa248.meta 20bcfb1890d90bd74f52e45a1e8aa020a8991e3a0db37eecf53ce48b16e602bf xsa248.patch ec4227633df18f76fbd8cb12e367879470b63fb5236f10b2a971dccef9f83172 xsa248-4.5.patch 3bbd9fd92e5ffab1ddd7ff804bfbab09c1c654af3aa7f80f742f321da120b715 xsa248-4.8.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlovuMMMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZy20H/0z0FHbgG05yJtRNRZZ6p/YuygBi7yiuddoa1BTX jVHYBd6TBw577qVYCGv77+ta4RhZdmg+qjVayzMQy0r07maq8jbNse7bTfjkbS8L levYk0Yjr03jDRWW4//WurV9vlxgoTRGSjz3RlbqPPC/ugpZbj8VrrqOxqhV5dhR umZSXIFQroZrDsHeAl+or84h+psSvGYcUnuMI/ML96hBqUjVi/owLIPhJw3OzK1i VBQTuBAVWYR1CVIGq1KQCEpKD0NbRC3M0+cxDibdhwH+Md0O947m0W8fA5p3hYdg e8CwuA0pk6CVKkFummEcC5FvwQStyVZjgG+X7aOwXobsMlA= =aj+p -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa248.meta" Content-Disposition: attachment; filename="xsa248.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyNDgsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwKICAgICI0LjgiLAog ICAgIjQuNyIsCiAgICAiNC42IiwKICAgICI0LjUiCiAgXSwKICAiVHJlZXMi OiBbCiAgICAieGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6 IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC4xMCIsCiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog IjM0NWJiOWNkNjM0NDIxZjUwYjczMmQ0ZjljODlhNjQ5YTdhMWQwZGIiLAog ICAgICAgICAgIlByZXJlcXMiOiBbXSwKICAgICAgICAgICJQYXRjaGVzIjog WwogICAgICAgICAgICAieHNhMjQ4LnBhdGNoIgogICAgICAgICAgXQogICAg ICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjUiOiB7CiAgICAgICJYZW5W ZXJzaW9uIjogIjQuNSIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4 ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjQxZjZkZDA1ZDEwZmQx YjQyODFjMTcyMmUyZDhmMjllMzc4YWJlOWEiLAogICAgICAgICAgIlByZXJl cXMiOiBbXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAi eHNhMjQ4LTQuNS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAg IH0KICAgIH0sCiAgICAiNC42IjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0 LjYiLAogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAg ICAgICAgIlN0YWJsZVJlZiI6ICI5YjBjMmEyMjMxMzJhMDdmMDZmMGJlOGU4 NWRhMzkwZGVmZTk5OGY1IiwKICAgICAgICAgICJQcmVyZXFzIjogW10sCiAg ICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI0OC00Ljgu cGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAog ICAgIjQuNyI6IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC43IiwKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiYmNjOWUyNDVhYWZiZGFlNDRjNzYxMDUzYzg5OGJlZGIzNTgy Y2M0ZCIsCiAgICAgICAgICAiUHJlcmVxcyI6IFtdLAogICAgICAgICAgIlBh dGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyNDgtNC44LnBhdGNoIgogICAg ICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjgiOiB7 CiAgICAgICJYZW5WZXJzaW9uIjogIjQuOCIsCiAgICAgICJSZWNpcGVzIjog ewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjli YTY3ODNlNDdkYjcxMzc5YzUxMjAwMzliODc4ZjYwNWJkZjMxZjMiLAogICAg ICAgICAgIlByZXJlcXMiOiBbXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjQ4LTQuOC5wYXRjaCIKICAgICAgICAgIF0KICAg ICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAgICAiWGVu VmVyc2lvbiI6ICI0LjkiLAogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAi eGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICJhZTM0YWI4YzVkMmU5 NzdmNmQ4MDgxYzJjZTQ0OTQ4NzUyMzJmNTYzIiwKICAgICAgICAgICJQcmVy ZXFzIjogW10sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAg InhzYTI0OC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0 LjEwIiwKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAg ICAgICAgICJTdGFibGVSZWYiOiAiMzQ1YmI5Y2Q2MzQ0MjFmNTBiNzMyZDRm OWM4OWE2NDlhN2ExZDBkYiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFtdLAog ICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyNDgucGF0 Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9CiAgfQp9 --=separator Content-Type: application/octet-stream; name="xsa248.patch" Content-Disposition: attachment; filename="xsa248.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHdyb25nbHkgc2V0IHBhZ2Ugb3duZXJzaGlwCgpQ ViBkb21haW5zIGNhbiBvYnRhaW4gbWFwcGluZ3Mgb2YgYW55IHBhZ2VzIG93 bmVkIGJ5IHRoZSBjb3JyZWN0IGRvbWFpbiwKaW5jbHVkaW5nIG9uZXMgdGhh dCBhcmVuJ3QgYWN0dWFsbHkgYXNzaWduZWQgYXMgIm5vcm1hbCIgUkFNLCBi dXQgdXNlZApieSBYZW4gaW50ZXJuYWxseS4gIEF0IHRoZSBtb21lbnQgc3Vj aCAiaW50ZXJuYWwiIHBhZ2VzIG1hcmtlZCBhcyBvd25lZApieSBhIGd1ZXN0 IGluY2x1ZGUgcGFnZXMgdXNlZCB0byB0cmFjayBsb2dkaXJ0eSBiaXRzLCBh cyB3ZWxsIGFzIHAybQpwYWdlcyBhbmQgdGhlICJ1bnBhZ2VkIHBhZ2V0YWJs ZSIgZm9yIEhWTSBndWVzdHMuIFNpbmNlIHRoZSBQViBtZW1vcnkKbWFuYWdl bWVudCBhbmQgc2hhZG93IGNvZGUgY29uZmxpY3QgaW4gdGhlaXIgdXNlIG9m IHN0cnVjdCBwYWdlX2luZm8KZmllbGRzLCBhbmQgc2luY2Ugc2hhZG93IGNv ZGUgaXMgYmVpbmcgdXNlZCBmb3IgbG9nLWRpcnR5IGhhbmRsaW5nIGZvcgpQ ViBkb21haW5zLCBwYWdlcyBjb21pbmcgZnJvbSB0aGUgc2hhZG93IHBvb2wg bXVzdCwgZm9yIFBWIGRvbWFpbnMsIG5vdApoYXZlIHRoZSBkb21haW4gc2V0 IGFzIHRoZWlyIG93bmVyLgoKV2hpbGUgdGhlIGNoYW5nZSBjb3VsZCBiZSBk b25lIGNvbmRpdGlvbmFsbHkgZm9yIGp1c3QgdGhlIFBWIGNhc2UgaW4Kc2hh ZG93IGNvZGUsIGRvIGl0IHVuY29uZGl0aW9uYWxseSAoYW5kIGZvciBjb25z aXN0ZW5jeSBhbHNvIGZvciBIQVApLApqdXN0IHRvIGJlIG9uIHRoZSBzYWZl IHNpZGUuCgpUaGVyZSdzIG9uZSBzcGVjaWFsIGNhc2UgdGhvdWdoIGZvciBz aGFkb3cgY29kZTogVGhlIHBhZ2UgdGFibGUgdXNlZCBmb3IKcnVubmluZyBh IEhWTSBndWVzdCBpbiB1bnBhZ2VkIG1vZGUgaXMgc3ViamVjdCB0byBnZXRf cGFnZSgpIChpbgpzZXRfc2hhZG93X3N0YXR1cygpKSBhbmQgaGVuY2UgbXVz dCBoYXZlIGl0cyBvd25lciBzZXQuCgpUaGlzIGlzIFhTQS0yNDguCgpTaWdu ZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJl dmlld2VkLWJ5OiBUaW0gRGVlZ2FuIDx0aW1AeGVuLm9yZz4KUmV2aWV3ZWQt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K LS0tCnYyOiBEcm9wIFBHQ19wYWdlX3RhYmxlIHJlbGF0ZWQgcGllY2VzLgoK LS0tIGEveGVuL2FyY2gveDg2L21tL2hhcC9oYXAuYworKysgYi94ZW4vYXJj aC94ODYvbW0vaGFwL2hhcC5jCkBAIC0yODYsOCArMjg2LDcgQEAgc3RhdGlj IHN0cnVjdCBwYWdlX2luZm8gKmhhcF9hbGxvY19wMm1fcAogICAgIHsKICAg ICAgICAgZC0+YXJjaC5wYWdpbmcuaGFwLnRvdGFsX3BhZ2VzLS07CiAgICAg ICAgIGQtPmFyY2gucGFnaW5nLmhhcC5wMm1fcGFnZXMrKzsKLSAgICAgICAg cGFnZV9zZXRfb3duZXIocGcsIGQpOwotICAgICAgICBwZy0+Y291bnRfaW5m byB8PSAxOworICAgICAgICBBU1NFUlQoIXBhZ2VfZ2V0X293bmVyKHBnKSAm JiAhKHBnLT5jb3VudF9pbmZvICYgUEdDX2NvdW50X21hc2spKTsKICAgICB9 CiAgICAgZWxzZSBpZiAoICFkLT5hcmNoLnBhZ2luZy5wMm1fYWxsb2NfZmFp bGVkICkKICAgICB7CkBAIC0zMDIsMjEgKzMwMSwyMyBAQCBzdGF0aWMgc3Ry dWN0IHBhZ2VfaW5mbyAqaGFwX2FsbG9jX3AybV9wCiAKIHN0YXRpYyB2b2lk IGhhcF9mcmVlX3AybV9wYWdlKHN0cnVjdCBkb21haW4gKmQsIHN0cnVjdCBw YWdlX2luZm8gKnBnKQogeworICAgIHN0cnVjdCBkb21haW4gKm93bmVyID0g cGFnZV9nZXRfb3duZXIocGcpOworCiAgICAgLyogVGhpcyBpcyBjYWxsZWQg Ym90aCBmcm9tIHRoZSBwMm0gY29kZSAod2hpY2ggbmV2ZXIgaG9sZHMgdGhl IAogICAgICAqIHBhZ2luZyBsb2NrKSBhbmQgdGhlIGxvZy1kaXJ0eSBjb2Rl ICh3aGljaCBhbHdheXMgZG9lcykuICovCiAgICAgcGFnaW5nX2xvY2tfcmVj dXJzaXZlKGQpOwogCi0gICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVyKHBnKSA9 PSBkKTsKLSAgICAvKiBTaG91bGQgaGF2ZSBqdXN0IHRoZSBvbmUgcmVmIHdl IGdhdmUgaXQgaW4gYWxsb2NfcDJtX3BhZ2UoKSAqLwotICAgIGlmICggKHBn LT5jb3VudF9pbmZvICYgUEdDX2NvdW50X21hc2spICE9IDEgKSB7Ci0gICAg ICAgIEhBUF9FUlJPUigiT2RkIHAybSBwYWdlICVwIGNvdW50IGM9JSNseCB0 PSUiUFJ0eXBlX2luZm8iXG4iLAotICAgICAgICAgICAgICAgICAgICAgcGcs IHBnLT5jb3VudF9pbmZvLCBwZy0+dS5pbnVzZS50eXBlX2luZm8pOworICAg IC8qIFNob3VsZCBzdGlsbCBoYXZlIG5vIG93bmVyIGFuZCBjb3VudCB6ZXJv LiAqLworICAgIGlmICggb3duZXIgfHwgKHBnLT5jb3VudF9pbmZvICYgUEdD X2NvdW50X21hc2spICkKKyAgICB7CisgICAgICAgIEhBUF9FUlJPUigiZCVk OiBPZGQgcDJtIHBhZ2UgJSJQUklfbWZuIiBkPSVkIGM9JWx4IHQ9JSJQUnR5 cGVfaW5mbyJcbiIsCisgICAgICAgICAgICAgICAgICBkLT5kb21haW5faWQs IG1mbl94KHBhZ2VfdG9fbWZuKHBnKSksCisgICAgICAgICAgICAgICAgICBv d25lciA/IG93bmVyLT5kb21haW5faWQgOiBET01JRF9JTlZBTElELAorICAg ICAgICAgICAgICAgICAgcGctPmNvdW50X2luZm8sIHBnLT51LmludXNlLnR5 cGVfaW5mbyk7CiAgICAgICAgIFdBUk4oKTsKKyAgICAgICAgcGctPmNvdW50 X2luZm8gJj0gflBHQ19jb3VudF9tYXNrOworICAgICAgICBwYWdlX3NldF9v d25lcihwZywgTlVMTCk7CiAgICAgfQotICAgIHBnLT5jb3VudF9pbmZvICY9 IH5QR0NfY291bnRfbWFzazsKLSAgICAvKiBGcmVlIHNob3VsZCBub3QgZGVj cmVtZW50IGRvbWFpbidzIHRvdGFsIGFsbG9jYXRpb24sIHNpbmNlCi0gICAg ICogdGhlc2UgcGFnZXMgd2VyZSBhbGxvY2F0ZWQgd2l0aG91dCBhbiBvd25l ci4gKi8KLSAgICBwYWdlX3NldF9vd25lcihwZywgTlVMTCk7CiAgICAgZC0+ YXJjaC5wYWdpbmcuaGFwLnAybV9wYWdlcy0tOwogICAgIGQtPmFyY2gucGFn aW5nLmhhcC50b3RhbF9wYWdlcysrOwogICAgIGhhcF9mcmVlKGQsIHBhZ2Vf dG9fbWZuKHBnKSk7Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9zaGFkb3cvY29t bW9uLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3NoYWRvdy9jb21tb24uYwpA QCAtMTUwMywzMiArMTUwMywyOSBAQCBzaGFkb3dfYWxsb2NfcDJtX3BhZ2Uo c3RydWN0IGRvbWFpbiAqZCkKICAgICBwZyA9IG1mbl90b19wYWdlKHNoYWRv d19hbGxvYyhkLCBTSF90eXBlX3AybV90YWJsZSwgMCkpOwogICAgIGQtPmFy Y2gucGFnaW5nLnNoYWRvdy5wMm1fcGFnZXMrKzsKICAgICBkLT5hcmNoLnBh Z2luZy5zaGFkb3cudG90YWxfcGFnZXMtLTsKKyAgICBBU1NFUlQoIXBhZ2Vf Z2V0X293bmVyKHBnKSAmJiAhKHBnLT5jb3VudF9pbmZvICYgUEdDX2NvdW50 X21hc2spKTsKIAogICAgIHBhZ2luZ191bmxvY2soZCk7CiAKLSAgICAvKiBV bmxpa2Ugc2hhZG93IHBhZ2VzLCBtYXJrIHAybSBwYWdlcyBhcyBvd25lZCBi eSB0aGUgZG9tYWluLgotICAgICAqIE1hcmtpbmcgdGhlIGRvbWFpbiBhcyB0 aGUgb3duZXIgd291bGQgbm9ybWFsbHkgYWxsb3cgdGhlIGd1ZXN0IHRvCi0g ICAgICogY3JlYXRlIG1hcHBpbmdzIG9mIHRoZXNlIHBhZ2VzLCBidXQgdGhl c2UgcDJtIHBhZ2VzIHdpbGwgbmV2ZXIgYmUKLSAgICAgKiBpbiB0aGUgZG9t YWluJ3MgZ3Vlc3QtcGh5c2ljYWwgYWRkcmVzcyBzcGFjZSwgYW5kIHNvIHRo YXQgaXMgbm90Ci0gICAgICogYmVsaWV2ZWQgdG8gYmUgYSBjb25jZXJuLiAq LwotICAgIHBhZ2Vfc2V0X293bmVyKHBnLCBkKTsKLSAgICBwZy0+Y291bnRf aW5mbyB8PSAxOwogICAgIHJldHVybiBwZzsKIH0KIAogc3RhdGljIHZvaWQK IHNoYWRvd19mcmVlX3AybV9wYWdlKHN0cnVjdCBkb21haW4gKmQsIHN0cnVj dCBwYWdlX2luZm8gKnBnKQogewotICAgIEFTU0VSVChwYWdlX2dldF9vd25l cihwZykgPT0gZCk7Ci0gICAgLyogU2hvdWxkIGhhdmUganVzdCB0aGUgb25l IHJlZiB3ZSBnYXZlIGl0IGluIGFsbG9jX3AybV9wYWdlKCkgKi8KLSAgICBp ZiAoIChwZy0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSAhPSAxICkK KyAgICBzdHJ1Y3QgZG9tYWluICpvd25lciA9IHBhZ2VfZ2V0X293bmVyKHBn KTsKKworICAgIC8qIFNob3VsZCBzdGlsbCBoYXZlIG5vIG93bmVyIGFuZCBj b3VudCB6ZXJvLiAqLworICAgIGlmICggb3duZXIgfHwgKHBnLT5jb3VudF9p bmZvICYgUEdDX2NvdW50X21hc2spICkKICAgICB7Ci0gICAgICAgIFNIQURP V19FUlJPUigiT2RkIHAybSBwYWdlIGNvdW50IGM9JSNseCB0PSUiUFJ0eXBl X2luZm8iXG4iLAorICAgICAgICBTSEFET1dfRVJST1IoImQlZDogT2RkIHAy bSBwYWdlICUiUFJJX21mbiIgZD0lZCBjPSVseCB0PSUiUFJ0eXBlX2luZm8i XG4iLAorICAgICAgICAgICAgICAgICAgICAgZC0+ZG9tYWluX2lkLCBtZm5f eChwYWdlX3RvX21mbihwZykpLAorICAgICAgICAgICAgICAgICAgICAgb3du ZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5WQUxJRCwKICAgICAg ICAgICAgICAgICAgICAgIHBnLT5jb3VudF9pbmZvLCBwZy0+dS5pbnVzZS50 eXBlX2luZm8pOworICAgICAgICBwZy0+Y291bnRfaW5mbyAmPSB+UEdDX2Nv dW50X21hc2s7CisgICAgICAgIHBhZ2Vfc2V0X293bmVyKHBnLCBOVUxMKTsK ICAgICB9Ci0gICAgcGctPmNvdW50X2luZm8gJj0gflBHQ19jb3VudF9tYXNr OwogICAgIHBnLT51LnNoLnR5cGUgPSBTSF90eXBlX3AybV90YWJsZTsgLyog cDJtIGNvZGUgcmV1c2VzIHR5cGUtaW5mbyAqLwotICAgIHBhZ2Vfc2V0X293 bmVyKHBnLCBOVUxMKTsKIAogICAgIC8qIFRoaXMgaXMgY2FsbGVkIGJvdGgg ZnJvbSB0aGUgcDJtIGNvZGUgKHdoaWNoIG5ldmVyIGhvbGRzIHRoZQogICAg ICAqIHBhZ2luZyBsb2NrKSBhbmQgdGhlIGxvZy1kaXJ0eSBjb2RlICh3aGlj aCBhbHdheXMgZG9lcykuICovCkBAIC0zMTMyLDcgKzMxMjksOSBAQCBpbnQg c2hhZG93X2VuYWJsZShzdHJ1Y3QgZG9tYWluICpkLCB1MzIKICAgICAgICAg ZSA9IF9fbWFwX2RvbWFpbl9wYWdlKHBnKTsKICAgICAgICAgd3JpdGVfMzJi aXRfcHNlX2lkZW50bWFwKGUpOwogICAgICAgICB1bm1hcF9kb21haW5fcGFn ZShlKTsKKyAgICAgICAgcGctPmNvdW50X2luZm8gPSAxOwogICAgICAgICBw Zy0+dS5pbnVzZS50eXBlX2luZm8gPSBQR1RfbDJfcGFnZV90YWJsZSB8IDEg fCBQR1RfdmFsaWRhdGVkOworICAgICAgICBwYWdlX3NldF9vd25lcihwZywg ZCk7CiAgICAgfQogCiAgICAgcGFnaW5nX2xvY2soZCk7CkBAIC0zMTcwLDcg KzMxNjksMTEgQEAgaW50IHNoYWRvd19lbmFibGUoc3RydWN0IGRvbWFpbiAq ZCwgdTMyCiAgICAgaWYgKCBydiAhPSAwICYmICFwYWdldGFibGVfaXNfbnVs bChwMm1fZ2V0X3BhZ2V0YWJsZShwMm0pKSApCiAgICAgICAgIHAybV90ZWFy ZG93bihwMm0pOwogICAgIGlmICggcnYgIT0gMCAmJiBwZyAhPSBOVUxMICkK KyAgICB7CisgICAgICAgIHBnLT5jb3VudF9pbmZvICY9IH5QR0NfY291bnRf bWFzazsKKyAgICAgICAgcGFnZV9zZXRfb3duZXIocGcsIE5VTEwpOwogICAg ICAgICBzaGFkb3dfZnJlZV9wMm1fcGFnZShkLCBwZyk7CisgICAgfQogICAg IGRvbWFpbl91bnBhdXNlKGQpOwogICAgIHJldHVybiBydjsKIH0KQEAgLTMy NzksNyArMzI4MiwyMiBAQCBvdXQ6CiAKICAgICAvKiBNdXN0IGJlIGNhbGxl ZCBvdXRzaWRlIHRoZSBsb2NrICovCiAgICAgaWYgKCB1bnBhZ2VkX3BhZ2V0 YWJsZSApCisgICAgeworICAgICAgICBpZiAoIHBhZ2VfZ2V0X293bmVyKHVu cGFnZWRfcGFnZXRhYmxlKSA9PSBkICYmCisgICAgICAgICAgICAgKHVucGFn ZWRfcGFnZXRhYmxlLT5jb3VudF9pbmZvICYgUEdDX2NvdW50X21hc2spID09 IDEgKQorICAgICAgICB7CisgICAgICAgICAgICB1bnBhZ2VkX3BhZ2V0YWJs ZS0+Y291bnRfaW5mbyAmPSB+UEdDX2NvdW50X21hc2s7CisgICAgICAgICAg ICBwYWdlX3NldF9vd25lcih1bnBhZ2VkX3BhZ2V0YWJsZSwgTlVMTCk7Cisg ICAgICAgIH0KKyAgICAgICAgLyogQ29tcGxhaW4gaGVyZSBpbiBjYXNlcyB3 aGVyZSBzaGFkb3dfZnJlZV9wMm1fcGFnZSgpIHdvbid0LiAqLworICAgICAg ICBlbHNlIGlmICggIXBhZ2VfZ2V0X293bmVyKHVucGFnZWRfcGFnZXRhYmxl KSAmJgorICAgICAgICAgICAgICAgICAgISh1bnBhZ2VkX3BhZ2V0YWJsZS0+ Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSApCisgICAgICAgICAgICBT SEFET1dfRVJST1IoImQlZDogT2RkIHVucGFnZWQgcHQgJSJQUklfbWZuIiBj PSVseCB0PSUiUFJ0eXBlX2luZm8iXG4iLAorICAgICAgICAgICAgICAgICAg ICAgICAgIGQtPmRvbWFpbl9pZCwgbWZuX3gocGFnZV90b19tZm4odW5wYWdl ZF9wYWdldGFibGUpKSwKKyAgICAgICAgICAgICAgICAgICAgICAgICB1bnBh Z2VkX3BhZ2V0YWJsZS0+Y291bnRfaW5mbywKKyAgICAgICAgICAgICAgICAg ICAgICAgICB1bnBhZ2VkX3BhZ2V0YWJsZS0+dS5pbnVzZS50eXBlX2luZm8p OwogICAgICAgICBzaGFkb3dfZnJlZV9wMm1fcGFnZShkLCB1bnBhZ2VkX3Bh Z2V0YWJsZSk7CisgICAgfQogfQogCiB2b2lkIHNoYWRvd19maW5hbF90ZWFy ZG93bihzdHJ1Y3QgZG9tYWluICpkKQo= --=separator Content-Type: application/octet-stream; name="xsa248-4.5.patch" Content-Disposition: attachment; filename="xsa248-4.5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHdyb25nbHkgc2V0IHBhZ2Ugb3duZXJzaGlwCgpQ ViBkb21haW5zIGNhbiBvYnRhaW4gbWFwcGluZ3Mgb2YgYW55IHBhZ2VzIG93 bmVkIGJ5IHRoZSBjb3JyZWN0IGRvbWFpbiwKaW5jbHVkaW5nIG9uZXMgdGhh dCBhcmVuJ3QgYWN0dWFsbHkgYXNzaWduZWQgYXMgIm5vcm1hbCIgUkFNLCBi dXQgdXNlZApieSBYZW4gaW50ZXJuYWxseS4gIEF0IHRoZSBtb21lbnQgc3Vj aCAiaW50ZXJuYWwiIHBhZ2VzIG1hcmtlZCBhcyBvd25lZApieSBhIGd1ZXN0 IGluY2x1ZGUgcGFnZXMgdXNlZCB0byB0cmFjayBsb2dkaXJ0eSBiaXRzLCBh cyB3ZWxsIGFzIHAybQpwYWdlcyBhbmQgdGhlICJ1bnBhZ2VkIHBhZ2V0YWJs ZSIgZm9yIEhWTSBndWVzdHMuIFNpbmNlIHRoZSBQViBtZW1vcnkKbWFuYWdl bWVudCBhbmQgc2hhZG93IGNvZGUgY29uZmxpY3QgaW4gdGhlaXIgdXNlIG9m IHN0cnVjdCBwYWdlX2luZm8KZmllbGRzLCBhbmQgc2luY2Ugc2hhZG93IGNv ZGUgaXMgYmVpbmcgdXNlZCBmb3IgbG9nLWRpcnR5IGhhbmRsaW5nIGZvcgpQ ViBkb21haW5zLCBwYWdlcyBjb21pbmcgZnJvbSB0aGUgc2hhZG93IHBvb2wg bXVzdCwgZm9yIFBWIGRvbWFpbnMsIG5vdApoYXZlIHRoZSBkb21haW4gc2V0 IGFzIHRoZWlyIG93bmVyLgoKV2hpbGUgdGhlIGNoYW5nZSBjb3VsZCBiZSBk b25lIGNvbmRpdGlvbmFsbHkgZm9yIGp1c3QgdGhlIFBWIGNhc2UgaW4Kc2hh ZG93IGNvZGUsIGRvIGl0IHVuY29uZGl0aW9uYWxseSAoYW5kIGZvciBjb25z aXN0ZW5jeSBhbHNvIGZvciBIQVApLApqdXN0IHRvIGJlIG9uIHRoZSBzYWZl IHNpZGUuCgpUaGVyZSdzIG9uZSBzcGVjaWFsIGNhc2UgdGhvdWdoIGZvciBz aGFkb3cgY29kZTogVGhlIHBhZ2UgdGFibGUgdXNlZCBmb3IKcnVubmluZyBh IEhWTSBndWVzdCBpbiB1bnBhZ2VkIG1vZGUgaXMgc3ViamVjdCB0byBnZXRf cGFnZSgpIChpbgpzZXRfc2hhZG93X3N0YXR1cygpKSBhbmQgaGVuY2UgbXVz dCBoYXZlIGl0cyBvd25lciBzZXQuCgpUaGlzIGlzIFhTQS0yNDguCgpTaWdu ZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJl dmlld2VkLWJ5OiBUaW0gRGVlZ2FuIDx0aW1AeGVuLm9yZz4KUmV2aWV3ZWQt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9oYXAvaGFwLmMKKysrIGIveGVuL2Fy Y2gveDg2L21tL2hhcC9oYXAuYwpAQCAtMjY0LDggKzI2NCw3IEBAIHN0YXRp YyBzdHJ1Y3QgcGFnZV9pbmZvICpoYXBfYWxsb2NfcDJtX3AKICAgICB7CiAg ICAgICAgIGQtPmFyY2gucGFnaW5nLmhhcC50b3RhbF9wYWdlcy0tOwogICAg ICAgICBkLT5hcmNoLnBhZ2luZy5oYXAucDJtX3BhZ2VzKys7Ci0gICAgICAg IHBhZ2Vfc2V0X293bmVyKHBnLCBkKTsKLSAgICAgICAgcGctPmNvdW50X2lu Zm8gfD0gMTsKKyAgICAgICAgQVNTRVJUKCFwYWdlX2dldF9vd25lcihwZykg JiYgIShwZy0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSk7CiAgICAg fQogICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wYWdpbmcucDJtX2FsbG9jX2Zh aWxlZCApCiAgICAgewpAQCAtMjgwLDIxICsyNzksMjMgQEAgc3RhdGljIHN0 cnVjdCBwYWdlX2luZm8gKmhhcF9hbGxvY19wMm1fcAogCiBzdGF0aWMgdm9p ZCBoYXBfZnJlZV9wMm1fcGFnZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qg cGFnZV9pbmZvICpwZykKIHsKKyAgICBzdHJ1Y3QgZG9tYWluICpvd25lciA9 IHBhZ2VfZ2V0X293bmVyKHBnKTsKKwogICAgIC8qIFRoaXMgaXMgY2FsbGVk IGJvdGggZnJvbSB0aGUgcDJtIGNvZGUgKHdoaWNoIG5ldmVyIGhvbGRzIHRo ZSAKICAgICAgKiBwYWdpbmcgbG9jaykgYW5kIHRoZSBsb2ctZGlydHkgY29k ZSAod2hpY2ggYWx3YXlzIGRvZXMpLiAqLwogICAgIHBhZ2luZ19sb2NrX3Jl Y3Vyc2l2ZShkKTsKIAotICAgIEFTU0VSVChwYWdlX2dldF9vd25lcihwZykg PT0gZCk7Ci0gICAgLyogU2hvdWxkIGhhdmUganVzdCB0aGUgb25lIHJlZiB3 ZSBnYXZlIGl0IGluIGFsbG9jX3AybV9wYWdlKCkgKi8KLSAgICBpZiAoIChw Zy0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSAhPSAxICkgewotICAg ICAgICBIQVBfRVJST1IoIk9kZCBwMm0gcGFnZSAlcCBjb3VudCBjPSUjbHgg dD0lIlBSdHlwZV9pbmZvIlxuIiwKLSAgICAgICAgICAgICAgICAgICAgIHBn LCBwZy0+Y291bnRfaW5mbywgcGctPnUuaW51c2UudHlwZV9pbmZvKTsKKyAg ICAvKiBTaG91bGQgc3RpbGwgaGF2ZSBubyBvd25lciBhbmQgY291bnQgemVy by4gKi8KKyAgICBpZiAoIG93bmVyIHx8IChwZy0+Y291bnRfaW5mbyAmIFBH Q19jb3VudF9tYXNrKSApCisgICAgeworICAgICAgICBIQVBfRVJST1IoImQl ZDogT2RkIHAybSBwYWdlICUiUFJJX21mbiIgZD0lZCBjPSVseCB0PSUiUFJ0 eXBlX2luZm8iXG4iLAorICAgICAgICAgICAgICAgICAgZC0+ZG9tYWluX2lk LCBtZm5feChwYWdlX3RvX21mbihwZykpLAorICAgICAgICAgICAgICAgICAg b3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5WQUxJRCwKKyAg ICAgICAgICAgICAgICAgIHBnLT5jb3VudF9pbmZvLCBwZy0+dS5pbnVzZS50 eXBlX2luZm8pOwogICAgICAgICBXQVJOKCk7CisgICAgICAgIHBnLT5jb3Vu dF9pbmZvICY9IH5QR0NfY291bnRfbWFzazsKKyAgICAgICAgcGFnZV9zZXRf b3duZXIocGcsIE5VTEwpOwogICAgIH0KLSAgICBwZy0+Y291bnRfaW5mbyAm PSB+UEdDX2NvdW50X21hc2s7Ci0gICAgLyogRnJlZSBzaG91bGQgbm90IGRl Y3JlbWVudCBkb21haW4ncyB0b3RhbCBhbGxvY2F0aW9uLCBzaW5jZQotICAg ICAqIHRoZXNlIHBhZ2VzIHdlcmUgYWxsb2NhdGVkIHdpdGhvdXQgYW4gb3du ZXIuICovCi0gICAgcGFnZV9zZXRfb3duZXIocGcsIE5VTEwpOwogICAgIGQt PmFyY2gucGFnaW5nLmhhcC5wMm1fcGFnZXMtLTsKICAgICBkLT5hcmNoLnBh Z2luZy5oYXAudG90YWxfcGFnZXMrKzsKICAgICBoYXBfZnJlZShkLCBwYWdl X3RvX21mbihwZykpOwotLS0gYS94ZW4vYXJjaC94ODYvbW0vc2hhZG93L2Nv bW1vbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9zaGFkb3cvY29tbW9uLmMK QEAgLTE2MjIsMzIgKzE2MjIsMjkgQEAgc2hhZG93X2FsbG9jX3AybV9wYWdl KHN0cnVjdCBkb21haW4gKmQpCiAgICAgcGcgPSBtZm5fdG9fcGFnZShzaGFk b3dfYWxsb2MoZCwgU0hfdHlwZV9wMm1fdGFibGUsIDApKTsKICAgICBkLT5h cmNoLnBhZ2luZy5zaGFkb3cucDJtX3BhZ2VzKys7CiAgICAgZC0+YXJjaC5w YWdpbmcuc2hhZG93LnRvdGFsX3BhZ2VzLS07CisgICAgQVNTRVJUKCFwYWdl X2dldF9vd25lcihwZykgJiYgIShwZy0+Y291bnRfaW5mbyAmIFBHQ19jb3Vu dF9tYXNrKSk7CiAKICAgICBwYWdpbmdfdW5sb2NrKGQpOwogCi0gICAgLyog VW5saWtlIHNoYWRvdyBwYWdlcywgbWFyayBwMm0gcGFnZXMgYXMgb3duZWQg YnkgdGhlIGRvbWFpbi4KLSAgICAgKiBNYXJraW5nIHRoZSBkb21haW4gYXMg dGhlIG93bmVyIHdvdWxkIG5vcm1hbGx5IGFsbG93IHRoZSBndWVzdCB0bwot ICAgICAqIGNyZWF0ZSBtYXBwaW5ncyBvZiB0aGVzZSBwYWdlcywgYnV0IHRo ZXNlIHAybSBwYWdlcyB3aWxsIG5ldmVyIGJlCi0gICAgICogaW4gdGhlIGRv bWFpbidzIGd1ZXN0LXBoeXNpY2FsIGFkZHJlc3Mgc3BhY2UsIGFuZCBzbyB0 aGF0IGlzIG5vdAotICAgICAqIGJlbGlldmVkIHRvIGJlIGEgY29uY2Vybi4g Ki8KLSAgICBwYWdlX3NldF9vd25lcihwZywgZCk7Ci0gICAgcGctPmNvdW50 X2luZm8gfD0gMTsKICAgICByZXR1cm4gcGc7CiB9CiAKIHN0YXRpYyB2b2lk CiBzaGFkb3dfZnJlZV9wMm1fcGFnZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKIHsKLSAgICBBU1NFUlQocGFnZV9nZXRfb3du ZXIocGcpID09IGQpOwotICAgIC8qIFNob3VsZCBoYXZlIGp1c3QgdGhlIG9u ZSByZWYgd2UgZ2F2ZSBpdCBpbiBhbGxvY19wMm1fcGFnZSgpICovCi0gICAg aWYgKCAocGctPmNvdW50X2luZm8gJiBQR0NfY291bnRfbWFzaykgIT0gMSAp CisgICAgc3RydWN0IGRvbWFpbiAqb3duZXIgPSBwYWdlX2dldF9vd25lcihw Zyk7CisKKyAgICAvKiBTaG91bGQgc3RpbGwgaGF2ZSBubyBvd25lciBhbmQg Y291bnQgemVyby4gKi8KKyAgICBpZiAoIG93bmVyIHx8IChwZy0+Y291bnRf aW5mbyAmIFBHQ19jb3VudF9tYXNrKSApCiAgICAgewotICAgICAgICBTSEFE T1dfRVJST1IoIk9kZCBwMm0gcGFnZSBjb3VudCBjPSUjbHggdD0lIlBSdHlw ZV9pbmZvIlxuIiwKKyAgICAgICAgU0hBRE9XX0VSUk9SKCJkJWQ6IE9kZCBw Mm0gcGFnZSAlIlBSSV9tZm4iIGQ9JWQgYz0lbHggdD0lIlBSdHlwZV9pbmZv IlxuIiwKKyAgICAgICAgICAgICAgICAgICAgIGQtPmRvbWFpbl9pZCwgbWZu X3gocGFnZV90b19tZm4ocGcpKSwKKyAgICAgICAgICAgICAgICAgICAgIG93 bmVyID8gb3duZXItPmRvbWFpbl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAg ICAgICAgICAgICAgICAgICBwZy0+Y291bnRfaW5mbywgcGctPnUuaW51c2Uu dHlwZV9pbmZvKTsKKyAgICAgICAgcGctPmNvdW50X2luZm8gJj0gflBHQ19j b3VudF9tYXNrOworICAgICAgICBwYWdlX3NldF9vd25lcihwZywgTlVMTCk7 CiAgICAgfQotICAgIHBnLT5jb3VudF9pbmZvICY9IH5QR0NfY291bnRfbWFz azsKICAgICBwZy0+dS5zaC50eXBlID0gU0hfdHlwZV9wMm1fdGFibGU7IC8q IHAybSBjb2RlIHJldXNlcyB0eXBlLWluZm8gKi8KLSAgICBwYWdlX3NldF9v d25lcihwZywgTlVMTCk7IAogCiAgICAgLyogVGhpcyBpcyBjYWxsZWQgYm90 aCBmcm9tIHRoZSBwMm0gY29kZSAod2hpY2ggbmV2ZXIgaG9sZHMgdGhlIAog ICAgICAqIHBhZ2luZyBsb2NrKSBhbmQgdGhlIGxvZy1kaXJ0eSBjb2RlICh3 aGljaCBhbHdheXMgZG9lcykuICovCkBAIC0zMDEyLDcgKzMwMDksOSBAQCBp bnQgc2hhZG93X2VuYWJsZShzdHJ1Y3QgZG9tYWluICpkLCB1MzIKICAgICAg ICAgICAgICAgICAgICAgfCBfUEFHRV9QUkVTRU5UIHwgX1BBR0VfUlcgfCBf UEFHRV9VU0VSIAogICAgICAgICAgICAgICAgICAgICB8IF9QQUdFX0FDQ0VT U0VEIHwgX1BBR0VfRElSVFkgfCBfUEFHRV9QU0UpOwogICAgICAgICBzaF91 bm1hcF9kb21haW5fcGFnZShlKTsKKyAgICAgICAgcGctPmNvdW50X2luZm8g PSAxOwogICAgICAgICBwZy0+dS5pbnVzZS50eXBlX2luZm8gPSBQR1RfbDJf cGFnZV90YWJsZSB8IDEgfCBQR1RfdmFsaWRhdGVkOworICAgICAgICBwYWdl X3NldF9vd25lcihwZywgZCk7CiAgICAgfQogCiAgICAgcGFnaW5nX2xvY2so ZCk7CkBAIC0zMDUwLDcgKzMwNDksMTEgQEAgaW50IHNoYWRvd19lbmFibGUo c3RydWN0IGRvbWFpbiAqZCwgdTMyCiAgICAgaWYgKCBydiAhPSAwICYmICFw YWdldGFibGVfaXNfbnVsbChwMm1fZ2V0X3BhZ2V0YWJsZShwMm0pKSApCiAg ICAgICAgIHAybV90ZWFyZG93bihwMm0pOwogICAgIGlmICggcnYgIT0gMCAm JiBwZyAhPSBOVUxMICkKKyAgICB7CisgICAgICAgIHBnLT5jb3VudF9pbmZv ICY9IH5QR0NfY291bnRfbWFzazsKKyAgICAgICAgcGFnZV9zZXRfb3duZXIo cGcsIE5VTEwpOwogICAgICAgICBzaGFkb3dfZnJlZV9wMm1fcGFnZShkLCBw Zyk7CisgICAgfQogICAgIGRvbWFpbl91bnBhdXNlKGQpOwogICAgIHJldHVy biBydjsKIH0KQEAgLTMxNjEsNyArMzE2NCwyMiBAQCBvdXQ6CiAKICAgICAv KiBNdXN0IGJlIGNhbGxlZCBvdXRzaWRlIHRoZSBsb2NrICovCiAgICAgaWYg KCB1bnBhZ2VkX3BhZ2V0YWJsZSApIAorICAgIHsKKyAgICAgICAgaWYgKCBw YWdlX2dldF9vd25lcih1bnBhZ2VkX3BhZ2V0YWJsZSkgPT0gZCAmJgorICAg ICAgICAgICAgICh1bnBhZ2VkX3BhZ2V0YWJsZS0+Y291bnRfaW5mbyAmIFBH Q19jb3VudF9tYXNrKSA9PSAxICkKKyAgICAgICAgeworICAgICAgICAgICAg dW5wYWdlZF9wYWdldGFibGUtPmNvdW50X2luZm8gJj0gflBHQ19jb3VudF9t YXNrOworICAgICAgICAgICAgcGFnZV9zZXRfb3duZXIodW5wYWdlZF9wYWdl dGFibGUsIE5VTEwpOworICAgICAgICB9CisgICAgICAgIC8qIENvbXBsYWlu IGhlcmUgaW4gY2FzZXMgd2hlcmUgc2hhZG93X2ZyZWVfcDJtX3BhZ2UoKSB3 b24ndC4gKi8KKyAgICAgICAgZWxzZSBpZiAoICFwYWdlX2dldF9vd25lcih1 bnBhZ2VkX3BhZ2V0YWJsZSkgJiYKKyAgICAgICAgICAgICAgICAgICEodW5w YWdlZF9wYWdldGFibGUtPmNvdW50X2luZm8gJiBQR0NfY291bnRfbWFzaykg KQorICAgICAgICAgICAgU0hBRE9XX0VSUk9SKCJkJWQ6IE9kZCB1bnBhZ2Vk IHB0ICUiUFJJX21mbiIgYz0lbHggdD0lIlBSdHlwZV9pbmZvIlxuIiwKKyAg ICAgICAgICAgICAgICAgICAgICAgICBkLT5kb21haW5faWQsIG1mbl94KHBh Z2VfdG9fbWZuKHVucGFnZWRfcGFnZXRhYmxlKSksCisgICAgICAgICAgICAg ICAgICAgICAgICAgdW5wYWdlZF9wYWdldGFibGUtPmNvdW50X2luZm8sCisg ICAgICAgICAgICAgICAgICAgICAgICAgdW5wYWdlZF9wYWdldGFibGUtPnUu aW51c2UudHlwZV9pbmZvKTsKICAgICAgICAgc2hhZG93X2ZyZWVfcDJtX3Bh Z2UoZCwgdW5wYWdlZF9wYWdldGFibGUpOworICAgIH0KIH0KIAogdm9pZCBz aGFkb3dfZmluYWxfdGVhcmRvd24oc3RydWN0IGRvbWFpbiAqZCkK --=separator Content-Type: application/octet-stream; name="xsa248-4.8.patch" Content-Disposition: attachment; filename="xsa248-4.8.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHdyb25nbHkgc2V0IHBhZ2Ugb3duZXJzaGlwCgpQ ViBkb21haW5zIGNhbiBvYnRhaW4gbWFwcGluZ3Mgb2YgYW55IHBhZ2VzIG93 bmVkIGJ5IHRoZSBjb3JyZWN0IGRvbWFpbiwKaW5jbHVkaW5nIG9uZXMgdGhh dCBhcmVuJ3QgYWN0dWFsbHkgYXNzaWduZWQgYXMgIm5vcm1hbCIgUkFNLCBi dXQgdXNlZApieSBYZW4gaW50ZXJuYWxseS4gIEF0IHRoZSBtb21lbnQgc3Vj aCAiaW50ZXJuYWwiIHBhZ2VzIG1hcmtlZCBhcyBvd25lZApieSBhIGd1ZXN0 IGluY2x1ZGUgcGFnZXMgdXNlZCB0byB0cmFjayBsb2dkaXJ0eSBiaXRzLCBh cyB3ZWxsIGFzIHAybQpwYWdlcyBhbmQgdGhlICJ1bnBhZ2VkIHBhZ2V0YWJs ZSIgZm9yIEhWTSBndWVzdHMuIFNpbmNlIHRoZSBQViBtZW1vcnkKbWFuYWdl bWVudCBhbmQgc2hhZG93IGNvZGUgY29uZmxpY3QgaW4gdGhlaXIgdXNlIG9m IHN0cnVjdCBwYWdlX2luZm8KZmllbGRzLCBhbmQgc2luY2Ugc2hhZG93IGNv ZGUgaXMgYmVpbmcgdXNlZCBmb3IgbG9nLWRpcnR5IGhhbmRsaW5nIGZvcgpQ ViBkb21haW5zLCBwYWdlcyBjb21pbmcgZnJvbSB0aGUgc2hhZG93IHBvb2wg bXVzdCwgZm9yIFBWIGRvbWFpbnMsIG5vdApoYXZlIHRoZSBkb21haW4gc2V0 IGFzIHRoZWlyIG93bmVyLgoKV2hpbGUgdGhlIGNoYW5nZSBjb3VsZCBiZSBk b25lIGNvbmRpdGlvbmFsbHkgZm9yIGp1c3QgdGhlIFBWIGNhc2UgaW4Kc2hh ZG93IGNvZGUsIGRvIGl0IHVuY29uZGl0aW9uYWxseSAoYW5kIGZvciBjb25z aXN0ZW5jeSBhbHNvIGZvciBIQVApLApqdXN0IHRvIGJlIG9uIHRoZSBzYWZl IHNpZGUuCgpUaGVyZSdzIG9uZSBzcGVjaWFsIGNhc2UgdGhvdWdoIGZvciBz aGFkb3cgY29kZTogVGhlIHBhZ2UgdGFibGUgdXNlZCBmb3IKcnVubmluZyBh IEhWTSBndWVzdCBpbiB1bnBhZ2VkIG1vZGUgaXMgc3ViamVjdCB0byBnZXRf cGFnZSgpIChpbgpzZXRfc2hhZG93X3N0YXR1cygpKSBhbmQgaGVuY2UgbXVz dCBoYXZlIGl0cyBvd25lciBzZXQuCgpUaGlzIGlzIFhTQS0yNDguCgpTaWdu ZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJl dmlld2VkLWJ5OiBUaW0gRGVlZ2FuIDx0aW1AeGVuLm9yZz4KUmV2aWV3ZWQt Ynk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4K Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9oYXAvaGFwLmMKKysrIGIveGVuL2Fy Y2gveDg2L21tL2hhcC9oYXAuYwpAQCAtMjgzLDggKzI4Myw3IEBAIHN0YXRp YyBzdHJ1Y3QgcGFnZV9pbmZvICpoYXBfYWxsb2NfcDJtX3AKICAgICB7CiAg ICAgICAgIGQtPmFyY2gucGFnaW5nLmhhcC50b3RhbF9wYWdlcy0tOwogICAg ICAgICBkLT5hcmNoLnBhZ2luZy5oYXAucDJtX3BhZ2VzKys7Ci0gICAgICAg IHBhZ2Vfc2V0X293bmVyKHBnLCBkKTsKLSAgICAgICAgcGctPmNvdW50X2lu Zm8gfD0gMTsKKyAgICAgICAgQVNTRVJUKCFwYWdlX2dldF9vd25lcihwZykg JiYgIShwZy0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSk7CiAgICAg fQogICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wYWdpbmcucDJtX2FsbG9jX2Zh aWxlZCApCiAgICAgewpAQCAtMjk5LDIxICsyOTgsMjMgQEAgc3RhdGljIHN0 cnVjdCBwYWdlX2luZm8gKmhhcF9hbGxvY19wMm1fcAogCiBzdGF0aWMgdm9p ZCBoYXBfZnJlZV9wMm1fcGFnZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qg cGFnZV9pbmZvICpwZykKIHsKKyAgICBzdHJ1Y3QgZG9tYWluICpvd25lciA9 IHBhZ2VfZ2V0X293bmVyKHBnKTsKKwogICAgIC8qIFRoaXMgaXMgY2FsbGVk IGJvdGggZnJvbSB0aGUgcDJtIGNvZGUgKHdoaWNoIG5ldmVyIGhvbGRzIHRo ZSAKICAgICAgKiBwYWdpbmcgbG9jaykgYW5kIHRoZSBsb2ctZGlydHkgY29k ZSAod2hpY2ggYWx3YXlzIGRvZXMpLiAqLwogICAgIHBhZ2luZ19sb2NrX3Jl Y3Vyc2l2ZShkKTsKIAotICAgIEFTU0VSVChwYWdlX2dldF9vd25lcihwZykg PT0gZCk7Ci0gICAgLyogU2hvdWxkIGhhdmUganVzdCB0aGUgb25lIHJlZiB3 ZSBnYXZlIGl0IGluIGFsbG9jX3AybV9wYWdlKCkgKi8KLSAgICBpZiAoIChw Zy0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSAhPSAxICkgewotICAg ICAgICBIQVBfRVJST1IoIk9kZCBwMm0gcGFnZSAlcCBjb3VudCBjPSUjbHgg dD0lIlBSdHlwZV9pbmZvIlxuIiwKLSAgICAgICAgICAgICAgICAgICAgIHBn LCBwZy0+Y291bnRfaW5mbywgcGctPnUuaW51c2UudHlwZV9pbmZvKTsKKyAg ICAvKiBTaG91bGQgc3RpbGwgaGF2ZSBubyBvd25lciBhbmQgY291bnQgemVy by4gKi8KKyAgICBpZiAoIG93bmVyIHx8IChwZy0+Y291bnRfaW5mbyAmIFBH Q19jb3VudF9tYXNrKSApCisgICAgeworICAgICAgICBIQVBfRVJST1IoImQl ZDogT2RkIHAybSBwYWdlICUiUFJJX21mbiIgZD0lZCBjPSVseCB0PSUiUFJ0 eXBlX2luZm8iXG4iLAorICAgICAgICAgICAgICAgICAgZC0+ZG9tYWluX2lk LCBtZm5feChwYWdlX3RvX21mbihwZykpLAorICAgICAgICAgICAgICAgICAg b3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5WQUxJRCwKKyAg ICAgICAgICAgICAgICAgIHBnLT5jb3VudF9pbmZvLCBwZy0+dS5pbnVzZS50 eXBlX2luZm8pOwogICAgICAgICBXQVJOKCk7CisgICAgICAgIHBnLT5jb3Vu dF9pbmZvICY9IH5QR0NfY291bnRfbWFzazsKKyAgICAgICAgcGFnZV9zZXRf b3duZXIocGcsIE5VTEwpOwogICAgIH0KLSAgICBwZy0+Y291bnRfaW5mbyAm PSB+UEdDX2NvdW50X21hc2s7Ci0gICAgLyogRnJlZSBzaG91bGQgbm90IGRl Y3JlbWVudCBkb21haW4ncyB0b3RhbCBhbGxvY2F0aW9uLCBzaW5jZQotICAg ICAqIHRoZXNlIHBhZ2VzIHdlcmUgYWxsb2NhdGVkIHdpdGhvdXQgYW4gb3du ZXIuICovCi0gICAgcGFnZV9zZXRfb3duZXIocGcsIE5VTEwpOwogICAgIGQt PmFyY2gucGFnaW5nLmhhcC5wMm1fcGFnZXMtLTsKICAgICBkLT5hcmNoLnBh Z2luZy5oYXAudG90YWxfcGFnZXMrKzsKICAgICBoYXBfZnJlZShkLCBwYWdl X3RvX21mbihwZykpOwotLS0gYS94ZW4vYXJjaC94ODYvbW0vc2hhZG93L2Nv bW1vbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9zaGFkb3cvY29tbW9uLmMK QEAgLTE1NzMsMzIgKzE1NzMsMjkgQEAgc2hhZG93X2FsbG9jX3AybV9wYWdl KHN0cnVjdCBkb21haW4gKmQpCiAgICAgcGcgPSBtZm5fdG9fcGFnZShzaGFk b3dfYWxsb2MoZCwgU0hfdHlwZV9wMm1fdGFibGUsIDApKTsKICAgICBkLT5h cmNoLnBhZ2luZy5zaGFkb3cucDJtX3BhZ2VzKys7CiAgICAgZC0+YXJjaC5w YWdpbmcuc2hhZG93LnRvdGFsX3BhZ2VzLS07CisgICAgQVNTRVJUKCFwYWdl X2dldF9vd25lcihwZykgJiYgIShwZy0+Y291bnRfaW5mbyAmIFBHQ19jb3Vu dF9tYXNrKSk7CiAKICAgICBwYWdpbmdfdW5sb2NrKGQpOwogCi0gICAgLyog VW5saWtlIHNoYWRvdyBwYWdlcywgbWFyayBwMm0gcGFnZXMgYXMgb3duZWQg YnkgdGhlIGRvbWFpbi4KLSAgICAgKiBNYXJraW5nIHRoZSBkb21haW4gYXMg dGhlIG93bmVyIHdvdWxkIG5vcm1hbGx5IGFsbG93IHRoZSBndWVzdCB0bwot ICAgICAqIGNyZWF0ZSBtYXBwaW5ncyBvZiB0aGVzZSBwYWdlcywgYnV0IHRo ZXNlIHAybSBwYWdlcyB3aWxsIG5ldmVyIGJlCi0gICAgICogaW4gdGhlIGRv bWFpbidzIGd1ZXN0LXBoeXNpY2FsIGFkZHJlc3Mgc3BhY2UsIGFuZCBzbyB0 aGF0IGlzIG5vdAotICAgICAqIGJlbGlldmVkIHRvIGJlIGEgY29uY2Vybi4g Ki8KLSAgICBwYWdlX3NldF9vd25lcihwZywgZCk7Ci0gICAgcGctPmNvdW50 X2luZm8gfD0gMTsKICAgICByZXR1cm4gcGc7CiB9CiAKIHN0YXRpYyB2b2lk CiBzaGFkb3dfZnJlZV9wMm1fcGFnZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwZykKIHsKLSAgICBBU1NFUlQocGFnZV9nZXRfb3du ZXIocGcpID09IGQpOwotICAgIC8qIFNob3VsZCBoYXZlIGp1c3QgdGhlIG9u ZSByZWYgd2UgZ2F2ZSBpdCBpbiBhbGxvY19wMm1fcGFnZSgpICovCi0gICAg aWYgKCAocGctPmNvdW50X2luZm8gJiBQR0NfY291bnRfbWFzaykgIT0gMSAp CisgICAgc3RydWN0IGRvbWFpbiAqb3duZXIgPSBwYWdlX2dldF9vd25lcihw Zyk7CisKKyAgICAvKiBTaG91bGQgc3RpbGwgaGF2ZSBubyBvd25lciBhbmQg Y291bnQgemVyby4gKi8KKyAgICBpZiAoIG93bmVyIHx8IChwZy0+Y291bnRf aW5mbyAmIFBHQ19jb3VudF9tYXNrKSApCiAgICAgewotICAgICAgICBTSEFE T1dfRVJST1IoIk9kZCBwMm0gcGFnZSBjb3VudCBjPSUjbHggdD0lIlBSdHlw ZV9pbmZvIlxuIiwKKyAgICAgICAgU0hBRE9XX0VSUk9SKCJkJWQ6IE9kZCBw Mm0gcGFnZSAlIlBSSV9tZm4iIGQ9JWQgYz0lbHggdD0lIlBSdHlwZV9pbmZv IlxuIiwKKyAgICAgICAgICAgICAgICAgICAgIGQtPmRvbWFpbl9pZCwgbWZu X3gocGFnZV90b19tZm4ocGcpKSwKKyAgICAgICAgICAgICAgICAgICAgIG93 bmVyID8gb3duZXItPmRvbWFpbl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAg ICAgICAgICAgICAgICAgICBwZy0+Y291bnRfaW5mbywgcGctPnUuaW51c2Uu dHlwZV9pbmZvKTsKKyAgICAgICAgcGctPmNvdW50X2luZm8gJj0gflBHQ19j b3VudF9tYXNrOworICAgICAgICBwYWdlX3NldF9vd25lcihwZywgTlVMTCk7 CiAgICAgfQotICAgIHBnLT5jb3VudF9pbmZvICY9IH5QR0NfY291bnRfbWFz azsKICAgICBwZy0+dS5zaC50eXBlID0gU0hfdHlwZV9wMm1fdGFibGU7IC8q IHAybSBjb2RlIHJldXNlcyB0eXBlLWluZm8gKi8KLSAgICBwYWdlX3NldF9v d25lcihwZywgTlVMTCk7CiAKICAgICAvKiBUaGlzIGlzIGNhbGxlZCBib3Ro IGZyb20gdGhlIHAybSBjb2RlICh3aGljaCBuZXZlciBob2xkcyB0aGUKICAg ICAgKiBwYWdpbmcgbG9jaykgYW5kIHRoZSBsb2ctZGlydHkgY29kZSAod2hp Y2ggYWx3YXlzIGRvZXMpLiAqLwpAQCAtMzIxNiw3ICszMjEzLDkgQEAgaW50 IHNoYWRvd19lbmFibGUoc3RydWN0IGRvbWFpbiAqZCwgdTMyCiAgICAgICAg ICAgICAgICAgICAgIHwgX1BBR0VfUFJFU0VOVCB8IF9QQUdFX1JXIHwgX1BB R0VfVVNFUgogICAgICAgICAgICAgICAgICAgICB8IF9QQUdFX0FDQ0VTU0VE IHwgX1BBR0VfRElSVFkgfCBfUEFHRV9QU0UpOwogICAgICAgICB1bm1hcF9k b21haW5fcGFnZShlKTsKKyAgICAgICAgcGctPmNvdW50X2luZm8gPSAxOwog ICAgICAgICBwZy0+dS5pbnVzZS50eXBlX2luZm8gPSBQR1RfbDJfcGFnZV90 YWJsZSB8IDEgfCBQR1RfdmFsaWRhdGVkOworICAgICAgICBwYWdlX3NldF9v d25lcihwZywgZCk7CiAgICAgfQogCiAgICAgcGFnaW5nX2xvY2soZCk7CkBA IC0zMjU0LDcgKzMyNTMsMTEgQEAgaW50IHNoYWRvd19lbmFibGUoc3RydWN0 IGRvbWFpbiAqZCwgdTMyCiAgICAgaWYgKCBydiAhPSAwICYmICFwYWdldGFi bGVfaXNfbnVsbChwMm1fZ2V0X3BhZ2V0YWJsZShwMm0pKSApCiAgICAgICAg IHAybV90ZWFyZG93bihwMm0pOwogICAgIGlmICggcnYgIT0gMCAmJiBwZyAh PSBOVUxMICkKKyAgICB7CisgICAgICAgIHBnLT5jb3VudF9pbmZvICY9IH5Q R0NfY291bnRfbWFzazsKKyAgICAgICAgcGFnZV9zZXRfb3duZXIocGcsIE5V TEwpOwogICAgICAgICBzaGFkb3dfZnJlZV9wMm1fcGFnZShkLCBwZyk7Cisg ICAgfQogICAgIGRvbWFpbl91bnBhdXNlKGQpOwogICAgIHJldHVybiBydjsK IH0KQEAgLTMzNjMsNyArMzM2NiwyMiBAQCBvdXQ6CiAKICAgICAvKiBNdXN0 IGJlIGNhbGxlZCBvdXRzaWRlIHRoZSBsb2NrICovCiAgICAgaWYgKCB1bnBh Z2VkX3BhZ2V0YWJsZSApCisgICAgeworICAgICAgICBpZiAoIHBhZ2VfZ2V0 X293bmVyKHVucGFnZWRfcGFnZXRhYmxlKSA9PSBkICYmCisgICAgICAgICAg ICAgKHVucGFnZWRfcGFnZXRhYmxlLT5jb3VudF9pbmZvICYgUEdDX2NvdW50 X21hc2spID09IDEgKQorICAgICAgICB7CisgICAgICAgICAgICB1bnBhZ2Vk X3BhZ2V0YWJsZS0+Y291bnRfaW5mbyAmPSB+UEdDX2NvdW50X21hc2s7Cisg ICAgICAgICAgICBwYWdlX3NldF9vd25lcih1bnBhZ2VkX3BhZ2V0YWJsZSwg TlVMTCk7CisgICAgICAgIH0KKyAgICAgICAgLyogQ29tcGxhaW4gaGVyZSBp biBjYXNlcyB3aGVyZSBzaGFkb3dfZnJlZV9wMm1fcGFnZSgpIHdvbid0LiAq LworICAgICAgICBlbHNlIGlmICggIXBhZ2VfZ2V0X293bmVyKHVucGFnZWRf cGFnZXRhYmxlKSAmJgorICAgICAgICAgICAgICAgICAgISh1bnBhZ2VkX3Bh Z2V0YWJsZS0+Y291bnRfaW5mbyAmIFBHQ19jb3VudF9tYXNrKSApCisgICAg ICAgICAgICBTSEFET1dfRVJST1IoImQlZDogT2RkIHVucGFnZWQgcHQgJSJQ UklfbWZuIiBjPSVseCB0PSUiUFJ0eXBlX2luZm8iXG4iLAorICAgICAgICAg ICAgICAgICAgICAgICAgIGQtPmRvbWFpbl9pZCwgbWZuX3gocGFnZV90b19t Zm4odW5wYWdlZF9wYWdldGFibGUpKSwKKyAgICAgICAgICAgICAgICAgICAg ICAgICB1bnBhZ2VkX3BhZ2V0YWJsZS0+Y291bnRfaW5mbywKKyAgICAgICAg ICAgICAgICAgICAgICAgICB1bnBhZ2VkX3BhZ2V0YWJsZS0+dS5pbnVzZS50 eXBlX2luZm8pOwogICAgICAgICBzaGFkb3dfZnJlZV9wMm1fcGFnZShkLCB1 bnBhZ2VkX3BhZ2V0YWJsZSk7CisgICAgfQogfQogCiB2b2lkIHNoYWRvd19m aW5hbF90ZWFyZG93bihzdHJ1Y3QgZG9tYWluICpkKQo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Dec 12 12:01:32 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Dec 2017 12:01:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjFM-00019j-Kz; Tue, 12 Dec 2017 12:01:16 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjFL-00017j-93 for xen-announce@lists.xen.org; Tue, 12 Dec 2017 12:01:15 +0000 X-Inumbo-ID: 1fa6b235-df34-11e7-b0d7-9f685aff125f Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas1.inumbo.com (Halon) with ESMTPS id 1fa6b235-df34-11e7-b0d7-9f685aff125f; Tue, 12 Dec 2017 12:01:02 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEM-0008Gu-7c; Tue, 12 Dec 2017 12:00:14 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eOjEM-0002G1-6w; Tue, 12 Dec 2017 12:00:14 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 12 Dec 2017 12:00:14 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 251 - improper bug check in x86 log-dirty handling X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-251 version 2 improper bug check in x86 log-dirty handling UPDATES IN VERSION 2 ==================== Public release. Provide information for Xen 4.10-in-preparation branch in .meta. ISSUE DESCRIPTION ================= Memory sharing, available to x86 HVM guests only, uses a special value in the global machine to physical address translation table (M2P). PV guests have full control over M2P entries corresponding to pages they own. A bug check (specifically, an assertion that an M2P entry is not the special "shared" indicator) was insufficiently qualified, and as a consequence is triggerable by PV guests in log-dirty mode (e.g. because of being live migrated). IMPACT ====== A malicious or buggy PV guest may cause a hypervisor crash, resulting in a Denial of Service (DoS) affecting the entire host. VULNERABLE SYSTEMS ================== Xen versions 4.0 and later are affected. Xen versions 3.4 and earlier are not affected. Only x86 systems are vulnerable. ARM systems are not vulnerable. x86 HVM guests cannot exploit this vulnerability. Only x86 PV guests can exploit this vulnerability, and only when being run in shadow mode. PV guests are typically run in shadow mode for live migration, as well as for features like VM snapshot. Note that save / restore does *not* use shadow mode, and so does not expose this vulnerability. Some downstreams also include a "non-live migration" feature, which also does not use shadow mode (and thus does not expose this vulnerability). MITIGATION ========== Running only HVM guests avoids the vulnerability. Avoiding live migration of x86 PV guests also avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa251.patch xen-unstable, Xen 4.9.x xsa251-4.8.patch Xen 4.8.x, Xen 4.7.x, Xen 4.6.x xsa251-4.5.patch Xen 4.5.x $ sha256sum xsa251* 152cf5c88c3e441af01cdf5749877cabb6ab961afee9f29ae3077e725b703aa2 xsa251.meta 0dfbcfe459f051abb571d3fbedbe9760a4c6cd540ab5d525627050e3eeb9234e xsa251.patch 345a6e004e0d0d89c7fc8db55d48d68f53402a521bd1aa3cb4168043e1ae5673 xsa251-4.5.patch f8cecf013a3628038e0a4566778852a560b25a1ce2f3872a989087ab2fc9a913 xsa251-4.8.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlovuNkMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZvOgIALWR2TD54KrdAAtdp0q6b9eo4VcMi5BACeuOIxoY Ek0YA8CLVhj/zmT4/JFH8hZl4Jq0YkWCmxieAw8RvvzFD8WjS7CjTGjseYLL39rZ tyz+GTJ4ws1AVm/HL0JcYqoIWHv3I5M1OdoEKcAyYt4qoHTC00YtQFoSz0Gkruk0 37OMyAfSo3ex+YUpN4S5RXnXB0gdvIOnZJU2WAYYsXxncsOXSP87ohiK55QfK3zO HcSPbcux/NonLG1KqFGzEIXq3wFv1hXo9MGdKnmoeTkr0uaGjxxWySbTyZ5pPzXD Vyr6/W5GwQjee/48KzYEr/UggfeutUpYfSVnW/KL/CCqqy0= =sgSx -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa251.meta" Content-Disposition: attachment; filename="xsa251.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyNTEsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwKICAgICI0LjgiLAog ICAgIjQuNyIsCiAgICAiNC42IiwKICAgICI0LjUiCiAgXSwKICAiVHJlZXMi OiBbCiAgICAieGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6 IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC4xMCIsCiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog IjM0NWJiOWNkNjM0NDIxZjUwYjczMmQ0ZjljODlhNjQ5YTdhMWQwZGIiLAog ICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OCwKICAgICAg ICAgICAgMjQ5LAogICAgICAgICAgICAyNTAKICAgICAgICAgIF0sCiAgICAg ICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI1MS5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC41 IjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0LjUiLAogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICI0MWY2ZGQwNWQxMGZkMWI0MjgxYzE3MjJlMmQ4ZjI5ZTM3OGFiZTlhIiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyNDgsCiAgICAg ICAgICAgIDI0OSwKICAgICAgICAgICAgMjUwCiAgICAgICAgICBdLAogICAg ICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyNTEtNC41LnBh dGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAg ICI0LjYiOiB7CiAgICAgICJYZW5WZXJzaW9uIjogIjQuNiIsCiAgICAgICJS ZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxl UmVmIjogIjliMGMyYTIyMzEzMmEwN2YwNmYwYmU4ZTg1ZGEzOTBkZWZlOTk4 ZjUiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OCwK ICAgICAgICAgICAgMjQ5LAogICAgICAgICAgICAyNTAKICAgICAgICAgIF0s CiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI1MS00 LjgucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9 LAogICAgIjQuNyI6IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC43IiwKICAg ICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJT dGFibGVSZWYiOiAiYmNjOWUyNDVhYWZiZGFlNDRjNzYxMDUzYzg5OGJlZGIz NTgyY2M0ZCIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAg MjQ4LAogICAgICAgICAgICAyNDksCiAgICAgICAgICAgIDI1MAogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh MjUxLTQuOC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC44IjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0Ljgi LAogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAg ICAgIlN0YWJsZVJlZiI6ICI5YmE2NzgzZTQ3ZGI3MTM3OWM1MTIwMDM5Yjg3 OGY2MDViZGYzMWYzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAg ICAgICAyNDgsCiAgICAgICAgICAgIDI0OSwKICAgICAgICAgICAgMjUwCiAg ICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAg ICJ4c2EyNTEtNC44LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAg ICAgfQogICAgfSwKICAgICI0LjkiOiB7CiAgICAgICJYZW5WZXJzaW9uIjog IjQuOSIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAg ICAgICAgICAiU3RhYmxlUmVmIjogImFlMzRhYjhjNWQyZTk3N2Y2ZDgwODFj MmNlNDQ5NDg3NTIzMmY1NjMiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAg ICAgICAgICAgIDI0OCwKICAgICAgICAgICAgMjQ5LAogICAgICAgICAgICAy NTAKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAg ICAgICAgInhzYTI1MS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAg ICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiWGVuVmVyc2lv biI6ICI0LjEwIiwKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6 IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMzQ1YmI5Y2Q2MzQ0MjFmNTBi NzMyZDRmOWM4OWE2NDlhN2ExZDBkYiIsCiAgICAgICAgICAiUHJlcmVxcyI6 IFsKICAgICAgICAgICAgMjQ4LAogICAgICAgICAgICAyNDksCiAgICAgICAg ICAgIDI1MAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjUxLnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa251.patch" Content-Disposition: attachment; filename="xsa251.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcGFnaW5nOiBkb24ndCB1bmNvbmRpdGlvbmFsbHkgQlVHKCkgb24g ZmluZGluZyBTSEFSRURfTTJQX0VOVFJZCgpQViBndWVzdHMgY2FuIGZ1bGx5 IGNvbnRyb2wgdGhlIHZhbHVlcyB3cml0dGVuIGludG8gdGhlIFAyTS4KClRo aXMgaXMgWFNBLTI1MS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIg PGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94 ODYvbW0vcGFnaW5nLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3BhZ2luZy5j CkBAIC0yNzQsNyArMjc0LDcgQEAgdm9pZCBwYWdpbmdfbWFya19wZm5fZGly dHkoc3RydWN0IGRvbWFpbgogICAgICAgICByZXR1cm47CiAKICAgICAvKiBT aGFyZWQgTUZOcyBzaG91bGQgTkVWRVIgYmUgbWFya2VkIGRpcnR5ICovCi0g ICAgQlVHX09OKFNIQVJFRF9NMlAocGZuX3gocGZuKSkpOworICAgIEJVR19P TihwYWdpbmdfbW9kZV90cmFuc2xhdGUoZCkgJiYgU0hBUkVEX00yUChwZm5f eChwZm4pKSk7CiAKICAgICAvKgogICAgICAqIFZhbHVlcyB3aXRoIHRoZSBN U0Igc2V0IGRlbm90ZSBNRk5zIHRoYXQgYXJlbid0IHJlYWxseSBwYXJ0IG9m IHRoZQo= --=separator Content-Type: application/octet-stream; name="xsa251-4.5.patch" Content-Disposition: attachment; filename="xsa251-4.5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcGFnaW5nOiBkb24ndCB1bmNvbmRpdGlvbmFsbHkgQlVHKCkgb24g ZmluZGluZyBTSEFSRURfTTJQX0VOVFJZCgpQViBndWVzdHMgY2FuIGZ1bGx5 IGNvbnRyb2wgdGhlIHZhbHVlcyB3cml0dGVuIGludG8gdGhlIFAyTS4KClRo aXMgaXMgWFNBLTI1MS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIg PGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94 ODYvbW0vcGFnaW5nLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3BhZ2luZy5j CkBAIC0yODUsNyArMjg1LDcgQEAgdm9pZCBwYWdpbmdfbWFya19kaXJ0eShz dHJ1Y3QgZG9tYWluICpkLAogICAgIC8qIFdlIC9yZWFsbHkvIG1lYW4gUEZO IGhlcmUsIGV2ZW4gZm9yIG5vbi10cmFuc2xhdGVkIGd1ZXN0cy4gKi8KICAg ICBwZm4gPSBnZXRfZ3Bmbl9mcm9tX21mbihtZm5feChnbWZuKSk7CiAgICAg LyogU2hhcmVkIE1GTnMgc2hvdWxkIE5FVkVSIGJlIG1hcmtlZCBkaXJ0eSAq LwotICAgIEJVR19PTihTSEFSRURfTTJQKHBmbikpOworICAgIEJVR19PTihw YWdpbmdfbW9kZV90cmFuc2xhdGUoZCkgJiYgU0hBUkVEX00yUChwZm4pKTsK IAogICAgIC8qCiAgICAgICogVmFsdWVzIHdpdGggdGhlIE1TQiBzZXQgZGVu b3RlIE1GTnMgdGhhdCBhcmVuJ3QgcmVhbGx5IHBhcnQgb2YgdGhlCg== --=separator Content-Type: application/octet-stream; name="xsa251-4.8.patch" Content-Disposition: attachment; filename="xsa251-4.8.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcGFnaW5nOiBkb24ndCB1bmNvbmRpdGlvbmFsbHkgQlVHKCkgb24g ZmluZGluZyBTSEFSRURfTTJQX0VOVFJZCgpQViBndWVzdHMgY2FuIGZ1bGx5 IGNvbnRyb2wgdGhlIHZhbHVlcyB3cml0dGVuIGludG8gdGhlIFAyTS4KClRo aXMgaXMgWFNBLTI1MS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIg PGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94 ODYvbW0vcGFnaW5nLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3BhZ2luZy5j CkBAIC0yNzYsNyArMjc2LDcgQEAgdm9pZCBwYWdpbmdfbWFya19wZm5fZGly dHkoc3RydWN0IGRvbWFpbgogICAgICAgICByZXR1cm47CiAKICAgICAvKiBT aGFyZWQgTUZOcyBzaG91bGQgTkVWRVIgYmUgbWFya2VkIGRpcnR5ICovCi0g ICAgQlVHX09OKFNIQVJFRF9NMlAocGZuKSk7CisgICAgQlVHX09OKHBhZ2lu Z19tb2RlX3RyYW5zbGF0ZShkKSAmJiBTSEFSRURfTTJQKHBmbikpOwogCiAg ICAgLyoKICAgICAgKiBWYWx1ZXMgd2l0aCB0aGUgTVNCIHNldCBkZW5vdGUg TUZOcyB0aGF0IGFyZW4ndCByZWFsbHkgcGFydCBvZiB0aGUK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Dec 12 12:01:46 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Dec 2017 12:01:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjFo-0001Kx-Tk; Tue, 12 Dec 2017 12:01:44 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjFo-0001J8-LI for xen-announce@lists.xen.org; Tue, 12 Dec 2017 12:01:44 +0000 X-Inumbo-ID: 1b9dd4d1-df34-11e7-b0d7-9f685aff125f Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas1.inumbo.com (Halon) with ESMTPS id 1b9dd4d1-df34-11e7-b0d7-9f685aff125f; Tue, 12 Dec 2017 12:00:55 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eOjEJ-0008Ga-W4; Tue, 12 Dec 2017 12:00:11 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1eOjEJ-0002EY-VH; Tue, 12 Dec 2017 12:00:11 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 12 Dec 2017 12:00:11 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 250 - improper x86 shadow mode refcount error handling X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-250 version 2 improper x86 shadow mode refcount error handling UPDATES IN VERSION 2 ==================== Public release. Provide metadata file. ISSUE DESCRIPTION ================= Pages being used to run x86 guests in shadow mode are reference counted to track their uses. When another reference cannot be acquired, the corresponding page table entry must not be inserted. Due to incorrect error handling, this constraint could be violated. IMPACT ====== A malicious or buggy guest may cause a hypervisor crash, resulting in a Denial of Service (DoS) affecting the entire host, or cause hypervisor memory corruption. We cannot rule out a guest being able to escalate its privilege. VULNERABLE SYSTEMS ================== All Xen versions are affected. x86 systems are vulnerable. ARM systems are not vulnerable. Only guests run in shadow mode can exploit the vulnerability. PV guests typically only run in shadow mode during live migration, as well as for features like VM snapshot. Note that save / restore does *not* use shadow mode, and so does not expose this vulnerability. Some downstreams also include a "non-live migration" feature, which also does not use shadow mode (and thus does not expose this vulnerability). HVM guests run in shadow mode on hardware without HAP support, or when HAP is disabled (globally or in the VM configuration file). Live migration does not affect an HVM guest's use of shadow mode. MITIGATION ========== For HVM guest explicitly configured to use shadow paging (e.g. via the `hap=0' xl domain configuration file parameter), changing to HAP (e.g. by setting `hap=1') will avoid exposing the vulnerability to those guests. HAP is the default (in upstream Xen), where the hardware supports it; so this mitigation is only applicable if HAP has been disabled by configuration. For PV guests, avoiding their live migration avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa250.patch xen-unstable, Xen 4.9.x ... 4.6.x xsa250-4.5.patch Xen 4.5.x $ sha256sum xsa250* c15c1c3e64cfb7ab2e2c48970214aa8c3881deb7e11c498526554bb74535b601 xsa250.meta adf4d8242dbddb4ec52fe1effc1f8b233d33d8d6a59c1bb677dcc6e2ed2bf711 xsa250.patch d123a58308db606185c4e48dcf4a114ac29bb988ffc0eeb04ded213ec474e0f2 xsa250-4.5.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlovuNkMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZx+4H/2ADwtz7LzqBd7aZ9BnODa3L+KM/hO05tG0t+feh eunJSfxAY3jRep4NxWUgK8zerAusw3zZi9lRzmhdLMHYtmslJPDWy5ul0N09E6Y5 KH2Ky8zkFb2puzHZs2oMKywW25aRI6Bs7VdFK44KxWPRrLAFTNup6xOCVNWJ4VWw YhNTu4g/+mUUa+KLRPL/s6sKjIw07/sbh/koHWSwlAksxmlUfdHaFuLbsvspPRe0 vq8Q8zN/n9Att6i8RrjeWLAb36mYXhKYIzkZhmJXNlwQx9dkhuLdlRaJ4zb7uERb wDYYlT9wib8CB5tsKxX+ozLQ0mr43DAFfsLJpzi7TudYplE= =+/I2 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa250.meta" Content-Disposition: attachment; filename="xsa250.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyNTAsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwKICAgICI0LjgiLAog ICAgIjQuNyIsCiAgICAiNC42IiwKICAgICI0LjUiCiAgXSwKICAiVHJlZXMi OiBbCiAgICAieGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6 IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC4xMCIsCiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog IjM0NWJiOWNkNjM0NDIxZjUwYjczMmQ0ZjljODlhNjQ5YTdhMWQwZGIiLAog ICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI0OCwKICAgICAg ICAgICAgMjQ5CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBb CiAgICAgICAgICAgICJ4c2EyNTAucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIjQuNSI6IHsKICAgICAgIlhlblZl cnNpb24iOiAiNC41IiwKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhl biI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiNDFmNmRkMDVkMTBmZDFi NDI4MWMxNzIyZTJkOGYyOWUzNzhhYmU5YSIsCiAgICAgICAgICAiUHJlcmVx cyI6IFsKICAgICAgICAgICAgMjQ4LAogICAgICAgICAgICAyNDkKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI1MC00LjUucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9 CiAgICB9LAogICAgIjQuNiI6IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC42 IiwKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAg ICAgICJTdGFibGVSZWYiOiAiOWIwYzJhMjIzMTMyYTA3ZjA2ZjBiZThlODVk YTM5MGRlZmU5OThmNSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAg ICAgICAgMjQ4LAogICAgICAgICAgICAyNDkKICAgICAgICAgIF0sCiAgICAg ICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI1MC5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43 IjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0LjciLAogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICJiY2M5ZTI0NWFhZmJkYWU0NGM3NjEwNTNjODk4YmVkYjM1ODJjYzRkIiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyNDgsCiAgICAg ICAgICAgIDI0OQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjog WwogICAgICAgICAgICAieHNhMjUwLnBhdGNoIgogICAgICAgICAgXQogICAg ICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjgiOiB7CiAgICAgICJYZW5W ZXJzaW9uIjogIjQuOCIsCiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4 ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjliYTY3ODNlNDdkYjcx Mzc5YzUxMjAwMzliODc4ZjYwNWJkZjMxZjMiLAogICAgICAgICAgIlByZXJl cXMiOiBbCiAgICAgICAgICAgIDI0OCwKICAgICAgICAgICAgMjQ5CiAgICAg ICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4 c2EyNTAucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAg ICB9LAogICAgIjQuOSI6IHsKICAgICAgIlhlblZlcnNpb24iOiAiNC45IiwK ICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAg ICJTdGFibGVSZWYiOiAiYWUzNGFiOGM1ZDJlOTc3ZjZkODA4MWMyY2U0NDk0 ODc1MjMyZjU2MyIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAg ICAgMjQ4LAogICAgICAgICAgICAyNDkKICAgICAgICAgIF0sCiAgICAgICAg ICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI1MC5wYXRjaCIKICAg ICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAibWFzdGVy IjogewogICAgICAiWGVuVmVyc2lvbiI6ICI0LjEwIiwKICAgICAgIlJlY2lw ZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYi OiAiMzQ1YmI5Y2Q2MzQ0MjFmNTBiNzMyZDRmOWM4OWE2NDlhN2ExZDBkYiIs CiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjQ4LAogICAg ICAgICAgICAyNDkKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI1MC5wYXRjaCIKICAgICAgICAgIF0KICAg ICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa250.patch" Content-Disposition: attachment; filename="xsa250.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvc2hhZG93OiBmaXggcmVmLWNvdW50aW5nIGVycm9yIGhhbmRsaW5n CgpUaGUgb2xkLUxpbnV4IGhhbmRsaW5nIGluIHNoYWRvd19zZXRfbDRlKCkg bWlzdGFrZW5seSBPUmVkIHRvZ2V0aGVyIHRoZQpyZXN1bHRzIG9mIHNoX2dl dF9yZWYoKSBhbmQgc2hfcGluKCkuIEFzIHRoZSBsYXR0ZXIgZmFpbGluZyBp cyBub3QgYQpjb3JyZWN0bmVzcyBwcm9ibGVtLCBzaW1wbHkgaWdub3JlIGl0 cyByZXR1cm4gdmFsdWUuCgpJbiBzaF9zZXRfdG9wbGV2ZWxfc2hhZG93KCkg YSBmYWlsaW5nIHNoX2dldF9yZWYoKSBtdXN0IG5vdCBiZQphY2NvbXBhbmll ZCBieSBpbnN0YWxsaW5nIHRoZSBlbnRyeSwgZGVzcGl0ZSB0aGUgZG9tYWlu IGJlaW5nIGNyYXNoZWQuCgpUaGlzIGlzIFhTQS0yNTAuCgpTaWduZWQtb2Zm LWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2Vk LWJ5OiBUaW0gRGVlZ2FuIDx0aW1AeGVuLm9yZz4KCi0tLSBhL3hlbi9hcmNo L3g4Ni9tbS9zaGFkb3cvbXVsdGkuYworKysgYi94ZW4vYXJjaC94ODYvbW0v c2hhZG93L211bHRpLmMKQEAgLTkyMyw3ICs5MjMsNyBAQCBzdGF0aWMgaW50 IHNoYWRvd19zZXRfbDRlKHN0cnVjdCBkb21haW4KICAgICAgICAgICAgICAg ICAgICAgICAgICAgc2hhZG93X2w0ZV90IG5ld19zbDRlLAogICAgICAgICAg ICAgICAgICAgICAgICAgICBtZm5fdCBzbDRtZm4pCiB7Ci0gICAgaW50IGZs YWdzID0gMCwgb2s7CisgICAgaW50IGZsYWdzID0gMDsKICAgICBzaGFkb3df bDRlX3Qgb2xkX3NsNGU7CiAgICAgcGFkZHJfdCBwYWRkcjsKICAgICBBU1NF UlQoc2w0ZSAhPSBOVUxMKTsKQEAgLTkzOCwxNSArOTM4LDE2IEBAIHN0YXRp YyBpbnQgc2hhZG93X3NldF9sNGUoc3RydWN0IGRvbWFpbgogICAgIHsKICAg ICAgICAgLyogQWJvdXQgdG8gaW5zdGFsbCBhIG5ldyByZWZlcmVuY2UgKi8K ICAgICAgICAgbWZuX3Qgc2wzbWZuID0gc2hhZG93X2w0ZV9nZXRfbWZuKG5l d19zbDRlKTsKLSAgICAgICAgb2sgPSBzaF9nZXRfcmVmKGQsIHNsM21mbiwg cGFkZHIpOwotICAgICAgICAvKiBBcmUgd2UgcGlubmluZyBsMyBzaGFkb3dz IHRvIGhhbmRsZSB3aWVyZCBsaW51eCBiZWhhdmlvdXI/ICovCi0gICAgICAg IGlmICggc2hfdHlwZV9pc19waW5uYWJsZShkLCBTSF90eXBlX2wzXzY0X3No YWRvdykgKQotICAgICAgICAgICAgb2sgfD0gc2hfcGluKGQsIHNsM21mbik7 Ci0gICAgICAgIGlmICggIW9rICkKKworICAgICAgICBpZiAoICFzaF9nZXRf cmVmKGQsIHNsM21mbiwgcGFkZHIpICkKICAgICAgICAgewogICAgICAgICAg ICAgZG9tYWluX2NyYXNoKGQpOwogICAgICAgICAgICAgcmV0dXJuIFNIQURP V19TRVRfRVJST1I7CiAgICAgICAgIH0KKworICAgICAgICAvKiBBcmUgd2Ug cGlubmluZyBsMyBzaGFkb3dzIHRvIGhhbmRsZSB3ZWlyZCBMaW51eCBiZWhh dmlvdXI/ICovCisgICAgICAgIGlmICggc2hfdHlwZV9pc19waW5uYWJsZShk LCBTSF90eXBlX2wzXzY0X3NoYWRvdykgKQorICAgICAgICAgICAgc2hfcGlu KGQsIHNsM21mbik7CiAgICAgfQogCiAgICAgLyogV3JpdGUgdGhlIG5ldyBl bnRyeSAqLwpAQCAtMzk2NSwxNCArMzk2NiwxNSBAQCBzaF9zZXRfdG9wbGV2 ZWxfc2hhZG93KHN0cnVjdCB2Y3B1ICp2LAogCiAgICAgLyogVGFrZSBhIHJl ZiB0byB0aGlzIHBhZ2U6IGl0IHdpbGwgYmUgcmVsZWFzZWQgaW4gc2hfZGV0 YWNoX29sZF90YWJsZXMoKQogICAgICAqIG9yIHRoZSBuZXh0IGNhbGwgdG8g c2V0X3RvcGxldmVsX3NoYWRvdygpICovCi0gICAgaWYgKCAhc2hfZ2V0X3Jl ZihkLCBzbWZuLCAwKSApCisgICAgaWYgKCBzaF9nZXRfcmVmKGQsIHNtZm4s IDApICkKKyAgICAgICAgbmV3X2VudHJ5ID0gcGFnZXRhYmxlX2Zyb21fbWZu KHNtZm4pOworICAgIGVsc2UKICAgICB7CiAgICAgICAgIFNIQURPV19FUlJP UigiY2FuJ3QgaW5zdGFsbCAlI2x4IGFzIHRvcGxldmVsIHNoYWRvd1xuIiwg bWZuX3goc21mbikpOwogICAgICAgICBkb21haW5fY3Jhc2goZCk7CisgICAg ICAgIG5ld19lbnRyeSA9IHBhZ2V0YWJsZV9udWxsKCk7CiAgICAgfQogCi0g ICAgbmV3X2VudHJ5ID0gcGFnZXRhYmxlX2Zyb21fbWZuKHNtZm4pOwotCiAg aW5zdGFsbF9uZXdfZW50cnk6CiAgICAgLyogRG9uZS4gIEluc3RhbGwgaXQg Ki8KICAgICBTSEFET1dfUFJJTlRLKCIldS8ldSBbJXVdIGdtZm4gJSMiUFJJ X21mbiIgc21mbiAlIyJQUklfbWZuIlxuIiwK --=separator Content-Type: application/octet-stream; name="xsa250-4.5.patch" Content-Disposition: attachment; filename="xsa250-4.5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvc2hhZG93OiBmaXggcmVmLWNvdW50aW5nIGVycm9yIGhhbmRsaW5n CgpUaGUgb2xkLUxpbnV4IGhhbmRsaW5nIGluIHNoYWRvd19zZXRfbDRlKCkg bWlzdGFrZW5seSBPUmVkIHRvZ2V0aGVyIHRoZQpyZXN1bHRzIG9mIHNoX2dl dF9yZWYoKSBhbmQgc2hfcGluKCkuIEFzIHRoZSBsYXR0ZXIgZmFpbGluZyBp cyBub3QgYQpjb3JyZWN0bmVzcyBwcm9ibGVtLCBzaW1wbHkgaWdub3JlIGl0 cyByZXR1cm4gdmFsdWUuCgpJbiBzaF9zZXRfdG9wbGV2ZWxfc2hhZG93KCkg YSBmYWlsaW5nIHNoX2dldF9yZWYoKSBtdXN0IG5vdCBiZQphY2NvbXBhbmll ZCBieSBpbnN0YWxsaW5nIHRoZSBlbnRyeSwgZGVzcGl0ZSB0aGUgZG9tYWlu IGJlaW5nIGNyYXNoZWQuCgpUaGlzIGlzIFhTQS0yNTAuCgpTaWduZWQtb2Zm LWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2Vk LWJ5OiBUaW0gRGVlZ2FuIDx0aW1AeGVuLm9yZz4KCi0tLSBhL3hlbi9hcmNo L3g4Ni9tbS9zaGFkb3cvbXVsdGkuYworKysgYi94ZW4vYXJjaC94ODYvbW0v c2hhZG93L211bHRpLmMKQEAgLTg5Niw3ICs4OTYsNyBAQCBzdGF0aWMgaW50 IHNoYWRvd19zZXRfbDRlKHN0cnVjdCB2Y3B1ICp2CiAgICAgICAgICAgICAg ICAgICAgICAgICAgIHNoYWRvd19sNGVfdCBuZXdfc2w0ZSwgCiAgICAgICAg ICAgICAgICAgICAgICAgICAgIG1mbl90IHNsNG1mbikKIHsKLSAgICBpbnQg ZmxhZ3MgPSAwLCBvazsKKyAgICBpbnQgZmxhZ3MgPSAwOwogICAgIHNoYWRv d19sNGVfdCBvbGRfc2w0ZTsKICAgICBwYWRkcl90IHBhZGRyOwogICAgIEFT U0VSVChzbDRlICE9IE5VTEwpOwpAQCAtOTExLDE1ICs5MTEsMTYgQEAgc3Rh dGljIGludCBzaGFkb3dfc2V0X2w0ZShzdHJ1Y3QgdmNwdSAqdgogICAgIHsK ICAgICAgICAgLyogQWJvdXQgdG8gaW5zdGFsbCBhIG5ldyByZWZlcmVuY2Ug Ki8gICAgICAgIAogICAgICAgICBtZm5fdCBzbDNtZm4gPSBzaGFkb3dfbDRl X2dldF9tZm4obmV3X3NsNGUpOwotICAgICAgICBvayA9IHNoX2dldF9yZWYo diwgc2wzbWZuLCBwYWRkcik7Ci0gICAgICAgIC8qIEFyZSB3ZSBwaW5uaW5n IGwzIHNoYWRvd3MgdG8gaGFuZGxlIHdpZXJkIGxpbnV4IGJlaGF2aW91cj8g Ki8KLSAgICAgICAgaWYgKCBzaF90eXBlX2lzX3Bpbm5hYmxlKHYsIFNIX3R5 cGVfbDNfNjRfc2hhZG93KSApCi0gICAgICAgICAgICBvayB8PSBzaF9waW4o diwgc2wzbWZuKTsKLSAgICAgICAgaWYgKCAhb2sgKQorCisgICAgICAgIGlm ICggIXNoX2dldF9yZWYodiwgc2wzbWZuLCBwYWRkcikgKQogICAgICAgICB7 CiAgICAgICAgICAgICBkb21haW5fY3Jhc2godi0+ZG9tYWluKTsKICAgICAg ICAgICAgIHJldHVybiBTSEFET1dfU0VUX0VSUk9SOwogICAgICAgICB9CisK KyAgICAgICAgLyogQXJlIHdlIHBpbm5pbmcgbDMgc2hhZG93cyB0byBoYW5k bGUgd2VpcmQgTGludXggYmVoYXZpb3VyPyAqLworICAgICAgICBpZiAoIHNo X3R5cGVfaXNfcGlubmFibGUodiwgU0hfdHlwZV9sM182NF9zaGFkb3cpICkK KyAgICAgICAgICAgIHNoX3Bpbih2LCBzbDNtZm4pOwogICAgIH0KIAogICAg IC8qIFdyaXRlIHRoZSBuZXcgZW50cnkgKi8KQEAgLTM4ODEsMTQgKzM4ODIs MTUgQEAgc2hfc2V0X3RvcGxldmVsX3NoYWRvdyhzdHJ1Y3QgdmNwdSAqdiwK IAogICAgIC8qIFRha2UgYSByZWYgdG8gdGhpcyBwYWdlOiBpdCB3aWxsIGJl IHJlbGVhc2VkIGluIHNoX2RldGFjaF9vbGRfdGFibGVzKCkKICAgICAgKiBv ciB0aGUgbmV4dCBjYWxsIHRvIHNldF90b3BsZXZlbF9zaGFkb3coKSAqLwot ICAgIGlmICggIXNoX2dldF9yZWYodiwgc21mbiwgMCkgKQorICAgIGlmICgg c2hfZ2V0X3JlZih2LCBzbWZuLCAwKSApCisgICAgICAgIG5ld19lbnRyeSA9 IHBhZ2V0YWJsZV9mcm9tX21mbihzbWZuKTsKKyAgICBlbHNlCiAgICAgewog ICAgICAgICBTSEFET1dfRVJST1IoImNhbid0IGluc3RhbGwgJSNseCBhcyB0 b3BsZXZlbCBzaGFkb3dcbiIsIG1mbl94KHNtZm4pKTsKICAgICAgICAgZG9t YWluX2NyYXNoKHYtPmRvbWFpbik7CisgICAgICAgIG5ld19lbnRyeSA9IHBh Z2V0YWJsZV9udWxsKCk7CiAgICAgfQogCi0gICAgbmV3X2VudHJ5ID0gcGFn ZXRhYmxlX2Zyb21fbWZuKHNtZm4pOwotCiAgaW5zdGFsbF9uZXdfZW50cnk6 CiAgICAgLyogRG9uZS4gIEluc3RhbGwgaXQgKi8KICAgICBTSEFET1dfUFJJ TlRLKCIldS8ldSBbJXVdIGdtZm4gJSMiUFJJX21mbiIgc21mbiAlIyJQUklf bWZuIlxuIiwK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Dec 14 12:40:13 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 14 Dec 2017 12:40:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ePSn3-00045b-I1; Thu, 14 Dec 2017 12:39:05 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ePSid-0003aX-SF for xen-announce@lists.xenproject.org; Thu, 14 Dec 2017 12:34:31 +0000 X-Inumbo-ID: 0cb39593-e0cb-11e7-b4a6-bc764e045a96 Received: from mail-pg0-x243.google.com (unknown [2607:f8b0:400e:c05::243]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 0cb39593-e0cb-11e7-b4a6-bc764e045a96; Thu, 14 Dec 2017 13:33:56 +0100 (CET) Received: by mail-pg0-x243.google.com with SMTP id w7so3318041pgv.6 for ; Thu, 14 Dec 2017 04:34:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=from:to:cc:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=Nt0bZ8Ke6oQbd9LfX9OHvorjlh+buYV94PPdOdYY/A8=; b=biImK7GPAvjvCBbYP0HMc3IEiljKs/vnf96UEKNOehEsxWNPiS8XBw7BFyG874zsh8 NKM3RT25E25azVc8EC4ebvcOTEOvLamYmz89ymVOGmAYejwgP8pHHffYjhb5O345sEzU PoF0/6qHH7exJGCIQC6R9FxwCnQ06E1Ffmfe4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=Nt0bZ8Ke6oQbd9LfX9OHvorjlh+buYV94PPdOdYY/A8=; b=XIbdZKPIQkW9d21V4krLboT8lqtDIX5W+KeOVqQZhUbrsud6uwA7u85NbYjov7lG7h +dWeR4D9oEEf1Qe4xQsPXX4U1KuPlJi0bTV9KgWKrAtm+CstCQ5a5YdEzjHz3jhjhK0w EeRKtoC3hxkxU5XRNLFFFKzmxk+EnWxIkgmhkhsD1r1HcIg99oTBWxZxUWFKoXh7G673 2816yNghp+FnCBsar/PiQNlumaqtB5XHBuDWkd6zeOZ0b4rXtAPlR6KNodrs+dz/hQ0S iG0kcUxN6Gipl5itwrXqgxxZUbnUlllPa7UNt5icAhO1Nqt+TkAZFqDrmKnp3kwc6SZY Z8fg== X-Gm-Message-State: AKGB3mL0pcKGggVNfdbddsYCuKn2ZPBCqAmu0j+8ZrrAX5RJDKfHOedn M7fnKfGn2G2HzDxz6H619HQdLg== X-Google-Smtp-Source: ACJfBoueOyNbSm/O2liQO64Pk2BAhWc/f0K5pMFSSJ/0kjXLnEe/N08gV4KguGpvkezWXovlcIa1dA== X-Received: by 10.101.68.201 with SMTP id g9mr8453609pgs.149.1513254869706; Thu, 14 Dec 2017 04:34:29 -0800 (PST) Received: from ?IPv6:::1? ([2001:41d0:1:6c23::1]) by smtp.gmail.com with ESMTPSA id c4sm6804480pgn.93.2017.12.14.04.34.26 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Dec 2017 04:34:29 -0800 (PST) From: Julien Grall To: xen-devel , xen-announce@lists.xenproject.org, "xen-users@lists.xen.org" Message-ID: <96e8a086-9618-f8a3-3000-6004804576e4@linaro.org> Date: Thu, 14 Dec 2017 12:34:21 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Language: en-US X-Mailman-Approved-At: Thu, 14 Dec 2017 12:39:03 +0000 Cc: "lars.kurth@citrix.com" Subject: [Xen-announce] Xen 4.10.0 is released X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" RGVhciBjb21tdW5pdHkgbWVtYmVycywKCkknbSBwbGVhc2VkIHRvIGFubm91bmNlIHRoYXQgWGVu IDQuMTAuMCBpcyByZWxlYXNlZC4KClBsZWFzZSBmaW5kIHRoZSB0YXJiYWxsIGFuZCBpdHMgc2ln bmF0dXJlIGF0OgoKICBodHRwczovL3hlbnByb2plY3Qub3JnL2Rvd25sb2Fkcy94ZW4tYXJjaGl2 ZXMveGVuLXByb2plY3QtNDEwLXNlcmllcy94ZW4tcHJvamVjdC00MTAwLmh0bWwKCllvdSBjYW4g YWxzbyBjaGVjayBvdXQgdGhlIHRhZyBpbiB4ZW4uZ2l0OgoKICBodHRwczovL3hlbmJpdHMueGVu Lm9yZy9naXQtaHR0cC94ZW4uZ2l0IFJFTEVBU0UtNC4xMC4wCgpHaXQgY2hlY2tvdXQgYW5kIGJ1 aWxkIGluc3RydWN0aW9ucyBjYW4gYmUgZm91bmQgYXQ6CgogIGh0dHBzOi8vd2lraS54ZW5wcm9q ZWN0Lm9yZy93aWtpL1hlbl9Qcm9qZWN0XzQuMTBfUmVsZWFzZV9Ob3RlcyNCdWlsZF9SZXF1aXJl bWVudHMKClJlbGVhc2Ugbm90ZXMgY2FuIGJlIGZvdW5kIGF0OgoKICBodHRwczovL3dpa2kueGVu cHJvamVjdC5vcmcvd2lraS9YZW5fUHJvamVjdF80LjEwX1JlbGVhc2VfTm90ZXMKCkEgc3VtbWFy eSBmb3IgNC4xMCByZWxlYXNlIGRvY3VtZW50cyBjYW4gYmUgZm91bmQgYXQ6CgogIGh0dHBzOi8v d2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL0NhdGVnb3J5Olhlbl80LjEwCgpUZWNobmljYWwgYmxv ZyBwb3N0IGZvciA0LjEwIGNhbiBiZSBmb3VuZCBhdDoKCmh0dHBzOi8vYmxvZy54ZW5wcm9qZWN0 Lm9yZy8yMDE3LzEyLzEyL3doYXRzLW5ldy1pbi10aGUteGVuLXByb2plY3QtaHlwZXJ2aXNvci00 LTEwLwoKVGhhbmtzIGV2ZXJ5b25lIHdobyBjb250cmlidXRlZCB0byB0aGlzIHJlbGVhc2UuIFRo aXMgcmVsZWFzZSB3b3VsZApub3QgaGF2ZSBoYXBwZW5lZCB3aXRob3V0IGFsbCB0aGUgYXdlc29t ZSBjb250cmlidXRpb25zIGZyb20gYXJvdW5kCnRoZSBnbG9iZS4KClJlZ2FyZHMsCgpKdWxpZW4g R3JhbGwgKG9uIGJlaGFsZiBvZiB0aGUgWGVuIFByb2plY3QgSHlwZXJ2aXNvciB0ZWFtKQoKX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91bmNl IG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9s aXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ==