From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:22:33 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:22:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h195Z-00034g-9d; Tue, 05 Mar 2019 12:22:29 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h195X-00033i-Dr for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:22:27 +0000 X-Inumbo-ID: 562c8a96-3f41-11e9-bc90-bc764e045a96 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 562c8a96-3f41-11e9-bc90-bc764e045a96; Tue, 05 Mar 2019 12:22:26 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h195O-0001lx-MJ; Tue, 05 Mar 2019 12:22:18 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h195O-0002lU-Jo; Tue, 05 Mar 2019 12:22:18 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:22:18 +0000 Subject: [Xen-announce] Xen Security Advisory 288 v2 - x86: Inconsistent PV IOMMU discipline X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-288 version 2 x86: Inconsistent PV IOMMU discipline UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. 4.7 backport updated to fix a debug build failure. Public release. ISSUE DESCRIPTION ================= In order for a PV domain to set up DMA from a passed-through device to one of its pages, the page must be mapped in the IOMMU. On the other hand, before a PV page may be used as a "special" page type (such as a pagetable or descriptor table), it _must not_ be writable in the IOMMU (otherwise a malicious guest could DMA arbitrary page tables into the memory, bypassing Xen's safety checks); and Xen's current rule is to have such pages not in the IOMMU at all. Until now, in order to accomplish this, the code has borrowed HVM domain's "physmap" concept: When a page is assigned to a guest, guess_physmap_add_entry() is called, which for PV guests, will create a writable IOMMU mapping; and when a page is removed, guest_physmap_remove_entry() is called, which will remove the mapping. Additionally, when a page gains the PGT_writable page type, the page will be added into the IOMMU; and when the page changes away from a PGT_writable type, the page will be removed from the IOMMU. Unfortunately, borrowing the "physmap" concept from HVM domains is problematic. HVM domains have a lock on their p2m tables, ensuring synchronization between modifications to the p2m; and all hypercall parameters must first be translated through the p2m before being used. Trying to mix this locked-and-gated approach with PV's lock-free approach leads to several races and inconsistencies. IMPACT ====== An untrusted PV domain with access to a physical device can DMA into its own pagetables, leading to privilege escalation. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems where PV guests are given direct access to physical devices (PCI pass-through) are vulnerable. Systems with only HVM guests, or systems which do not use PCI pass-through, are not vulnerable. MITIGATION ========== Only assigning devices to HVM guests will avoid these vulnerabilities. CREDITS ======= This issue was discovered by Paul Durrant of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa288.patch xen-unstable xsa288-4.11.patch Xen 4.11.x, Xen 4.10.x xsa288-4.9.patch Xen 4.9.x xsa288-4.8.patch Xen 4.8.x xsa288-4.7.patch Xen 4.7.x $ sha256sum xsa288* 7254f0ce791b5543aec68643ec47e2bcf7823650949c7eb32db5122591f12e8c xsa288.meta e1159cb5c1c5a01b28753739b6a78b555ebe4b920cae766db47e0f2a1a21c188 xsa288.patch e9986ceda84e7391c27d80fd541a0e5edf1eadef302a560b4e445ca9bad4c56e xsa288-4.7.patch 14856543ccaa5b3db2a209d25637ed025f2eb940294d0cd07e03f56630a9e5af xsa288-4.8.patch df5e4a367f58491d54c778e2997142792c881d4f7b5a2a1d3339d2a3f1abafe5 xsa288-4.9.patch 58ba46b4814695dc34beaa5fb644931253bd0b0c6a8dc843c735beec152ae722 xsa288-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa4MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZZcYIAKeJomA0DWjp8LewxvGSUugZ34CCoS2OaOVSBw0g r5gGZ1B3WF8JHcpoV3JdPsiv0O61Ye2XX/PhAfe577PW5357vnNHqE9GbOVwxXNZ pNsSJ5r7OG1OEQdGUetB9McqkDhX/kpg4tnAokeU7FKjwfMTqjGYmacjAWlAqGqp mZF83H2NLiXtroq7sWcTopO32O/dvUmd0+29mcTihS+XzdeTBfNuz4XiYF9YqA04 QN0NcqHACjM7C1OGAgXW9PXUPJzm5PuMCAR56qLxaN1V+JEC+hwkPliDpZUU2xrx I6mc0FkoKfIRvD8sVLB+z0rkjpnOPjVhH6okIBBcHya71fg= =JG+V -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa288.meta" Content-Disposition: attachment; filename="xsa288.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODgsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3CiAgICAgICAgICBd LAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODgt NC4xMS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAg IH0sCiAgICAiNC4xMSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAg InhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiODdmNTFiZjM2NmNh NzliOThlMWUyMDFiZjliZDdhOWMxNjQ2MzFlMiIsCiAgICAgICAgICAiUHJl cmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAg ICAgICAgICAgIDI4NwogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVz IjogWwogICAgICAgICAgICAieHNhMjg4LTQuMTEucGF0Y2giCiAgICAgICAg ICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuNyI6IHsKICAg ICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJT dGFibGVSZWYiOiAiNzEwY2MwOTY5NzEwMTliYzJlNWE5YWFiYjlhZjFhY2Nh MGI1YjllNyIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAg Mjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NwogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh Mjg4LTQuNy5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAg ICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI5MDhlNzY4ZmFl NDlhOGRiMDA4OWU2ODE4ODY1MjA3OWUzYmZhYTY2IiwKICAgICAgICAgICJQ cmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NSwK ICAgICAgICAgICAgMjg3CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODgtNC44LnBhdGNoIgogICAgICAg ICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjkiOiB7CiAg ICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAi U3RhYmxlUmVmIjogImY1YWNmOTdmNjY5YzZiYzk2OTFlMDM3NzFhZDA2NzAz ZGE3N2UwZDUiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAg IDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI4OC00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9 CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAg ICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMjRkNTI4 MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1NiIsCiAgICAgICAg ICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAy ODUsCiAgICAgICAgICAgIDI4NwogICAgICAgICAgXSwKICAgICAgICAgICJQ YXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg4LnBhdGNoIgogICAgICAg ICAgXQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa288.patch" Content-Disposition: attachment; filename="xsa288.patch" Content-Transfer-Encoding: base64 RnJvbSAzYWEwZjk5ZmEyNzU0MGVhNWUzY2UwYWUzNTRjN2M4OTAzNDhjNjdh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDM1ICsrKysrKysr KysrKystLS0KIDIgZmlsZXMgY2hhbmdlZCwgMTE2IGluc2VydGlvbnMoKyks IDE0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9t bS5jIGIveGVuL2FyY2gveDg2L21tLmMKaW5kZXggNGQzYjE3ZjNhOC4uNzFi Mzk4NGRkMSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIv eGVuL2FyY2gveDg2L21tLmMKQEAgLTgxLDYgKzgxLDIyIEBACiAgKiBPUydz LCB3aGljaCB3aWxsIGdlbmVyYWxseSB1c2UgdGhlIFdQIGJpdCB0byBzaW1w bGlmeSBjb3B5LW9uLXdyaXRlCiAgKiBpbXBsZW1lbnRhdGlvbiAoaW4gdGhh dCBjYXNlLCBPUyB3YW50cyBhIGZhdWx0IHdoZW4gaXQgd3JpdGVzIHRvCiAg KiBhbiBhcHBsaWNhdGlvbi1zdXBwbGllZCBidWZmZXIpLgorICoKKyAqIFBW IGRvbVVzIGFuZCBJT01NVXM6CisgKiAtLS0tLS0tLS0tLS0tLS0tLS0tLQor ICogRm9yIGEgZ3Vlc3QgdG8gYmUgYWJsZSB0byBETUEgaW50byBhIHBhZ2Us IHRoYXQgcGFnZSBtdXN0IGJlIGluIHRoZQorICogZG9tYWluJ3MgSU9NTVUu ICBIb3dldmVyLCB3ZSAqbXVzdCBub3QqIGFsbG93IERNQSBpbnRvICdzcGVj aWFsJworICogcGFnZXMgKHN1Y2ggYXMgcGFnZSB0YWJsZSBwYWdlcywgZGVz Y3JpcHRvciB0YWJsZXMsICZjKTsgYW5kIHdlCisgKiBtdXN0IGFsc28gZW5z dXJlIHRoYXQgbWFwcGluZ3MgYXJlIHJlbW92ZWQgZnJvbSB0aGUgSU9NTVUg d2hlbiB0aGUKKyAqIHBhZ2UgaXMgZnJlZWQuICBGaW5hbGx5LCBpdCBpcyBp bmhlcmVudGx5IHJhY3kgdG8gbWFrZSBhbnkgY2hhbmdlcworICogYmFzZWQg b24gYSBwYWdlIHdpdGggYSBub24temVybyB0eXBlIGNvdW50LgorICoKKyAq IFRvIHRoYXQgZW5kLCB3ZSBwdXQgdGhlIHBhZ2UgaW4gdGhlIElPTU1VIG9u bHkgd2hlbiBhIHBhZ2UgZ2FpbnMKKyAqIHRoZSBQR1Rfd3JpdGVhYmxlIHR5 cGU7IGFuZCB3ZSByZW1vdmUgdGhlIHBhZ2Ugd2hlbiBpdCBsb3NlcyB0aGUK KyAqIFBHVF93cml0ZWFibGUgdHlwZSAobm90IHdoZW4gdGhlIHR5cGUgY291 bnQgZ29lcyB0byB6ZXJvKS4gIFRoaXMKKyAqIGVmZmVjdGl2ZWx5IHByb3Rl Y3RzIHRoZSBJT01NVSBzdGF0dXMgdXBkYXRlIHdpdGggdGhlIHR5cGUgY291 bnQgd2UKKyAqIGhhdmUganVzdCBhY3F1aXJlZC4gIFdlIG11c3QgYWxzbyBj aGVjayBmb3IgUEdUX3dyaXRhYmxlIHR5cGUgd2hlbgorICogZG9pbmcgdGhl IGZpbmFsIHB1dF9wYWdlKCksIGFuZCByZW1vdmUgaXQgZnJvbSB0aGUgaW9t bXUgaWYgc28uCiAgKi8KIAogI2luY2x1ZGUgPHhlbi9pbml0Lmg+CkBAIC0y MzIwLDE5ICsyMzM2LDc5IEBAIHN0YXRpYyBpbnQgbW9kX2w0X2VudHJ5KGw0 X3BnZW50cnlfdCAqcGw0ZSwKIH0KICNlbmRpZiAvKiBDT05GSUdfUFYgKi8K IAotc3RhdGljIGludCBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCisvKgorICogSW4gdGhlIGNvdXJzZSBvZiBhIHBh Z2UncyB1c2UsIGl0IG1heSBoYXZlIGNhdXNlZCBvdGhlciBzZWNvbmRhcnkK KyAqIG1hcHBpbmdzIHRvIGhhdmUgY2hhbmdlZDoKKyAqIC0gWGVuJ3MgbWFw cGluZ3MgbWF5IGhhdmUgYmVlbiBjaGFuZ2VkIHRvIGFjY29tb2RhdGUgdGhl IHJlcXVlc3RlZAorICogICBjYWNoZSBhdHRpYnV0ZXMKKyAqIC0gQSBwYWdl IG1heSBoYXZlIGJlZW4gcHV0IGludG8gdGhlIElPTU1VIG9mIGEgUFYgZ3Vl c3Qgd2hlbiBpdAorICogICBnYWluZWQgYSB3cml0YWJsZSBtYXBwaW5nLgor ICoKKyAqIE5vdyB0aGF0IHRoZSBwYWdlIGlzIGJlaW5nIGZyZWVkLCBjbGVh biB1cCB0aGVzZSBtYXBwaW5ncyBpZgorICogYXBwcm9wcmlhdGUuICBOQiB0 aGF0IGF0IHRoaXMgcG9pbnQgdGhlIHBhZ2UgaXMgc3RpbGwgImFsbG9jYXRl ZCIsCisgKiBidXQgbm90ICJsaXZlIiAoaS5lLiwgaXRzIHJlZmNvdW50IGlz IDApLCBzbyBpdCdzIHNhZmUgdG8gcmVhZCB0aGUKKyAqIGNvdW50X2luZm8s IG93bmVyLCBhbmQgdHlwZV9pbmZvIHdpdGhvdXQgc3luY2hyb25pemF0aW9u LgorICovCitzdGF0aWMgaW50IGNsZWFudXBfcGFnZV9tYXBwaW5ncyhzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlKQogewogICAgIHVuc2lnbmVkIGludCBjYWNo ZWF0dHIgPQogICAgICAgICAocGFnZS0+Y291bnRfaW5mbyAmIFBHQ19jYWNo ZWF0dHJfbWFzaykgPj4gUEdDX2NhY2hlYXR0cl9iYXNlOworICAgIGludCBy YyA9IDA7CisgICAgdW5zaWduZWQgbG9uZyBtZm4gPSBtZm5feChwYWdlX3Rv X21mbihwYWdlKSk7CiAKLSAgICBpZiAoIGxpa2VseShjYWNoZWF0dHIgPT0g MCkgKQotICAgICAgICByZXR1cm4gMDsKKyAgICAvKgorICAgICAqIElmIHdl J3ZlIG1vZGlmaWVkIHhlbiBtYXBwaW5ncyBhcyBhIHJlc3VsdCBvZiBndWVz dCBjYWNoZQorICAgICAqIGF0dHJpYnV0ZXMsIHJlc3RvcmUgdGhlbSB0byB0 aGUgIm5vcm1hbCIgc3RhdGUuCisgICAgICovCisgICAgaWYgKCB1bmxpa2Vs eShjYWNoZWF0dHIpICkKKyAgICB7CisgICAgICAgIHBhZ2UtPmNvdW50X2lu Zm8gJj0gflBHQ19jYWNoZWF0dHJfbWFzazsKIAotICAgIHBhZ2UtPmNvdW50 X2luZm8gJj0gflBHQ19jYWNoZWF0dHJfbWFzazsKKyAgICAgICAgQlVHX09O KGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkpOwogCi0gICAgQlVHX09OKGlzX3hl bl9oZWFwX3BhZ2UocGFnZSkpOworICAgICAgICByYyA9IHVwZGF0ZV94ZW5f bWFwcGluZ3MobWZuLCAwKTsKKyAgICB9CiAKLSAgICByZXR1cm4gdXBkYXRl X3hlbl9tYXBwaW5ncyhtZm5feChwYWdlX3RvX21mbihwYWdlKSksIDApOwor ICAgIC8qCisgICAgICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4n cyBJT01NVSwgcmVtb3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3 cml0YWJsZSB4ZW5oZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5k IGNsZWFyZWQgYnkKKyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBj b2RlLCByYXRoZXIgdGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNo OgorICAgICAqIC0gVGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJ T01NVSBtYXBwaW5nLCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2Fy aWx5IGV4cGVjdCB0aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhl IGZpbmFsCisgICAgICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAg ICAqIEdvIGFoZWFkIGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgp IG9uIHhlbmhlYXAgcGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2Fz ZTsgYnV0IG9ubHkgQVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6 ZXJvIGFuZCByZW1vdmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUg Zm9yIG5vbi14ZW5oZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdU X3dyaXRhYmxlX3BhZ2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFp biAqZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICgg ZCAmJiBpc19wdl9kb21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdV9w dF9zeW5jKGQpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGludCByYzIg PSBpb21tdV9sZWdhY3lfdW5tYXAoZCwgX2RmbihtZm4pLCBQQUdFX09SREVS XzRLKTsKKworICAgICAgICAgICAgaWYgKCAhcmMgKQorICAgICAgICAgICAg ICAgIHJjID0gcmMyOworICAgICAgICB9CisKKyAgICAgICAgaWYgKCBsaWtl bHkoIWlzX3hlbl9oZWFwX3BhZ2UocGFnZSkpICkKKyAgICAgICAgeworICAg ICAgICAgICAgQVNTRVJUKChwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmCisg ICAgICAgICAgICAgICAgICAgIChQR1RfdHlwZV9tYXNrIHwgUEdUX2NvdW50 X21hc2spKSA9PSBQR1Rfd3JpdGFibGVfcGFnZSk7CisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogQ2xlYXIgdGhlIHR5cGUgdG8gcmVjb3JkIHRo ZSBmYWN0IHRoYXQgYWxsIHdyaXRhYmxlIG1hcHBpbmdzCisgICAgICAgICAg ICAgKiBoYXZlIGJlZW4gcmVtb3ZlZC4gIEJ1dCBpZiBlaXRoZXIgb3BlcmF0 aW9uIGZhaWxlZCwgbGVhdmUKKyAgICAgICAgICAgICAqIHR5cGVfaW5mbyBh bG9uZS4KKyAgICAgICAgICAgICAqLworICAgICAgICAgICAgaWYgKCBsaWtl bHkoIXJjKSApCisgICAgICAgICAgICAgICAgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8gJj0gfihQR1RfdHlwZV9tYXNrIHwgUEdUX2NvdW50X21hc2spOwor ICAgICAgICB9CisgICAgfQorCisgICAgcmV0dXJuIHJjOwogfQogCiB2b2lk IHB1dF9wYWdlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0yMzQ4LDcg KzI0MjQsNyBAQCB2b2lkIHB1dF9wYWdlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCiAKICAgICBpZiAoIHVubGlrZWx5KChueCAmIFBHQ19jb3VudF9tYXNr KSA9PSAwKSApCiAgICAgewotICAgICAgICBpZiAoIGNsZWFudXBfcGFnZV9j YWNoZWF0dHIocGFnZSkgPT0gMCApCisgICAgICAgIGlmICggIWNsZWFudXBf cGFnZV9tYXBwaW5ncyhwYWdlKSApCiAgICAgICAgICAgICBmcmVlX2RvbWhl YXBfcGFnZShwYWdlKTsKICAgICAgICAgZWxzZQogICAgICAgICAgICAgZ2Rw cmludGsoWEVOTE9HX1dBUk5JTkcsCkBAIC00MDQzLDkgKzQxMTksMTAgQEAg aW50IHN0ZWFsX3BhZ2UoCiAgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2ZW4g aWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCiAgICAg ICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzogc3Vi c2VxdWVudCBtYXBwaW5ncyB3aWxsCiAgICAgICogY2F1c2UgdGhlIGNhY2hl IGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCi0gICAgICog Z2V0X3BhZ2VfZnJvbV9sMWUoKS4KKyAgICAgKiBnZXRfcGFnZV9mcm9tX2wx ZSgpLCBvciB0aGUgcGFnZSB0byBiZSBhZGRlZCBiYWNrIHRvIHRoZSBJT01N VQorICAgICAqIHVwb24gdGhlIHR5cGUgY2hhbmdpbmcgdG8gUEdUX3dyaXRl YWJsZSwgYXMgYXBwcm9wcmlhdGUuCiAgICAgICovCi0gICAgaWYgKCAocmMg PSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAgaWYgKCAo cmMgPSBjbGVhbnVwX3BhZ2VfbWFwcGluZ3MocGFnZSkpICkKICAgICB7CiAg ICAgICAgIC8qCiAgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKZGlmZiAtLWdp dCBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYyBiL3hlbi9hcmNoL3g4Ni9tbS9w Mm0uYwppbmRleCBkMTRjZTU3ZGQ1Li5lNmViODQyMTcyIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21t L3AybS5jCkBAIC03NzgsOSArNzc4LDkgQEAgcDJtX3JlbW92ZV9wYWdlKHN0 cnVjdCBwMm1fZG9tYWluICpwMm0sIHVuc2lnbmVkIGxvbmcgZ2ZuX2wsIHVu c2lnbmVkIGxvbmcgbWZuLAogICAgIHAybV90eXBlX3QgdDsKICAgICBwMm1f YWNjZXNzX3QgYTsKIAorICAgIC8qIElPTU1VIGZvciBQViBndWVzdHMgaXMg aGFuZGxlZCBpbiBnZXRfcGFnZV90eXBlKCkgYW5kIHB1dF9wYWdlKCkuICov CiAgICAgaWYgKCAhcGFnaW5nX21vZGVfdHJhbnNsYXRlKHAybS0+ZG9tYWlu KSApCi0gICAgICAgIHJldHVybiBuZWVkX2lvbW11X3B0X3N5bmMocDJtLT5k b21haW4pID8KLSAgICAgICAgICAgIGlvbW11X2xlZ2FjeV91bm1hcChwMm0t PmRvbWFpbiwgX2RmbihtZm4pLCBwYWdlX29yZGVyKSA6IDA7CisgICAgICAg IHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2NrZWRfYnlfbWUocDJt LCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5nIGdmbj0lI2x4IG1m bj0lI2x4XG4iLCBnZm5fbCwgbWZuKTsKQEAgLTgyNSwxMCArODI1LDM1IEBA IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQsIGdm bl90IGdmbiwgbWZuX3QgbWZuLAogICAgIGludCBwb2RfY291bnQgPSAwOwog ICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3Rz IGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgp LiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSApCi0g ICAgICAgIHJldHVybiAobmVlZF9pb21tdV9wdF9zeW5jKGQpICYmIHQgPT0g cDJtX3JhbV9ydykgPwotICAgICAgICAgICAgaW9tbXVfbGVnYWN5X21hcChk LCBfZGZuKG1mbl94KG1mbikpLCBtZm4sIHBhZ2Vfb3JkZXIsCi0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl9yZWFkYWJsZSB8IElPTU1V Rl93cml0YWJsZSkgOiAwOworICAgIHsKKyAgICAgICAgc3RydWN0IHBhZ2Vf aW5mbyAqcGFnZSA9IG1mbl90b19wYWdlKG1mbik7CisKKyAgICAgICAgLyoK KyAgICAgICAgICogT3VyIGludGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdydCBJ T01NVSBlbnRyaWVzIGhhc24ndCBiZWVuIHZlcnkKKyAgICAgICAgICogY2xl YXI7IGJ1dCBoaXN0b3JpY2FsbHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBvdXQg d2l0aCBJT01NVSBtYXBwaW5ncywKKyAgICAgICAgICogYW5kIG9ubHkgbG9z ZSB0aGVtIHdoZW4gY2hhbmdlZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5cGUu CisgICAgICAgICAqCisgICAgICAgICAqIFJldGFpbiB0aGlzIHByb3BlcnR5 IGJ5IGdyYWJiaW5nIGEgd3JpdGFibGUgdHlwZSByZWYgYW5kIHRoZW4KKyAg ICAgICAgICogZHJvcHBpbmcgaXQgaW1tZWRpYXRlbHkuICBUaGUgcmVzdWx0 IHdpbGwgYmUgcGFnZXMgdGhhdCBoYXZlIGEKKyAgICAgICAgICogd3JpdGFi bGUgdHlwZSAoYW5kIGFuIElPTU1VIGVudHJ5KSwgYnV0IGEgY291bnQgb2Yg MCAoc3VjaCB0aGF0CisgICAgICAgICAqIGFueSBndWVzdC1yZXF1ZXN0ZWQg dHlwZSBjaGFuZ2VzIHN1Y2NlZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUKKyAg ICAgICAgICogZW50cnkpLgorICAgICAgICAgKi8KKyAgICAgICAgaWYgKCAh bmVlZF9pb21tdV9wdF9zeW5jKGQpIHx8IHQgIT0gcDJtX3JhbV9ydyApCisg ICAgICAgICAgICByZXR1cm4gMDsKKworICAgICAgICBmb3IgKCBpID0gMDsg aSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytwYWdlICkKKyAgICAg ICAgeworICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdl LCBkLCBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1 dF9wYWdlX2FuZF90eXBlKHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAg ICAgICAgICAgICAgIHJldHVybiAtRUlOVkFMOworICAgICAgICB9CisKKyAg ICAgICAgcmV0dXJuIDA7CisgICAgfQogCiAgICAgLyogZm9yZWlnbiBwYWdl cyBhcmUgYWRkZWQgdGhydSBwMm1fYWRkX2ZvcmVpZ24gKi8KICAgICBpZiAo IHAybV9pc19mb3JlaWduKHQpICkKLS0gCjIuMjAuMQoK --=separator Content-Type: application/octet-stream; name="xsa288-4.7.patch" Content-Disposition: attachment; filename="xsa288-4.7.patch" Content-Transfer-Encoding: base64 RnJvbSBkYzkzODU1YThiMzlmYmMyNmYzM2JmZmExMzRmYzk0ZDM2NzI2YTlm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDQxICsrKysrKysr KysrLS0tLS0tLS0KIDIgZmlsZXMgY2hhbmdlZCwgMTEwIGluc2VydGlvbnMo KyksIDI2IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9tbS5jIGIveGVuL2FyY2gveDg2L21tLmMKaW5kZXggNDdmNGFhNGY2YS4u MTQ0NDc5ODIwYiAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysr IGIveGVuL2FyY2gveDg2L21tLmMKQEAgLTgxLDYgKzgxLDIyIEBACiAgKiBP UydzLCB3aGljaCB3aWxsIGdlbmVyYWxseSB1c2UgdGhlIFdQIGJpdCB0byBz aW1wbGlmeSBjb3B5LW9uLXdyaXRlCiAgKiBpbXBsZW1lbnRhdGlvbiAoaW4g dGhhdCBjYXNlLCBPUyB3YW50cyBhIGZhdWx0IHdoZW4gaXQgd3JpdGVzIHRv CiAgKiBhbiBhcHBsaWNhdGlvbi1zdXBwbGllZCBidWZmZXIpLgorICoKKyAq IFBWIGRvbVVzIGFuZCBJT01NVXM6CisgKiAtLS0tLS0tLS0tLS0tLS0tLS0t LQorICogRm9yIGEgZ3Vlc3QgdG8gYmUgYWJsZSB0byBETUEgaW50byBhIHBh Z2UsIHRoYXQgcGFnZSBtdXN0IGJlIGluIHRoZQorICogZG9tYWluJ3MgSU9N TVUuICBIb3dldmVyLCB3ZSAqbXVzdCBub3QqIGFsbG93IERNQSBpbnRvICdz cGVjaWFsJworICogcGFnZXMgKHN1Y2ggYXMgcGFnZSB0YWJsZSBwYWdlcywg ZGVzY3JpcHRvciB0YWJsZXMsICZjKTsgYW5kIHdlCisgKiBtdXN0IGFsc28g ZW5zdXJlIHRoYXQgbWFwcGluZ3MgYXJlIHJlbW92ZWQgZnJvbSB0aGUgSU9N TVUgd2hlbiB0aGUKKyAqIHBhZ2UgaXMgZnJlZWQuICBGaW5hbGx5LCBpdCBp cyBpbmhlcmVudGx5IHJhY3kgdG8gbWFrZSBhbnkgY2hhbmdlcworICogYmFz ZWQgb24gYSBwYWdlIHdpdGggYSBub24temVybyB0eXBlIGNvdW50LgorICoK KyAqIFRvIHRoYXQgZW5kLCB3ZSBwdXQgdGhlIHBhZ2UgaW4gdGhlIElPTU1V IG9ubHkgd2hlbiBhIHBhZ2UgZ2FpbnMKKyAqIHRoZSBQR1Rfd3JpdGVhYmxl IHR5cGU7IGFuZCB3ZSByZW1vdmUgdGhlIHBhZ2Ugd2hlbiBpdCBsb3NlcyB0 aGUKKyAqIFBHVF93cml0ZWFibGUgdHlwZSAobm90IHdoZW4gdGhlIHR5cGUg Y291bnQgZ29lcyB0byB6ZXJvKS4gIFRoaXMKKyAqIGVmZmVjdGl2ZWx5IHBy b3RlY3RzIHRoZSBJT01NVSBzdGF0dXMgdXBkYXRlIHdpdGggdGhlIHR5cGUg Y291bnQgd2UKKyAqIGhhdmUganVzdCBhY3F1aXJlZC4gIFdlIG11c3QgYWxz byBjaGVjayBmb3IgUEdUX3dyaXRhYmxlIHR5cGUgd2hlbgorICogZG9pbmcg dGhlIGZpbmFsIHB1dF9wYWdlKCksIGFuZCByZW1vdmUgaXQgZnJvbSB0aGUg aW9tbXUgaWYgc28uCiAgKi8KIAogI2luY2x1ZGUgPHhlbi9rY29uZmlnLmg+ CkBAIC0yMzc5LDE5ICsyMzk1LDc5IEBAIHN0YXRpYyBpbnQgbW9kX2w0X2Vu dHJ5KGw0X3BnZW50cnlfdCAqcGw0ZSwKICAgICByZXR1cm4gcmM7CiB9CiAK LXN0YXRpYyBpbnQgY2xlYW51cF9wYWdlX2NhY2hlYXR0cihzdHJ1Y3QgcGFn ZV9pbmZvICpwYWdlKQorLyoKKyAqIEluIHRoZSBjb3Vyc2Ugb2YgYSBwYWdl J3MgdXNlLCBpdCBtYXkgaGF2ZSBjYXVzZWQgb3RoZXIgc2Vjb25kYXJ5Cisg KiBtYXBwaW5ncyB0byBoYXZlIGNoYW5nZWQ6CisgKiAtIFhlbidzIG1hcHBp bmdzIG1heSBoYXZlIGJlZW4gY2hhbmdlZCB0byBhY2NvbW9kYXRlIHRoZSBy ZXF1ZXN0ZWQKKyAqICAgY2FjaGUgYXR0aWJ1dGVzCisgKiAtIEEgcGFnZSBt YXkgaGF2ZSBiZWVuIHB1dCBpbnRvIHRoZSBJT01NVSBvZiBhIFBWIGd1ZXN0 IHdoZW4gaXQKKyAqICAgZ2FpbmVkIGEgd3JpdGFibGUgbWFwcGluZy4KKyAq CisgKiBOb3cgdGhhdCB0aGUgcGFnZSBpcyBiZWluZyBmcmVlZCwgY2xlYW4g dXAgdGhlc2UgbWFwcGluZ3MgaWYKKyAqIGFwcHJvcHJpYXRlLiAgTkIgdGhh dCBhdCB0aGlzIHBvaW50IHRoZSBwYWdlIGlzIHN0aWxsICJhbGxvY2F0ZWQi LAorICogYnV0IG5vdCAibGl2ZSIgKGkuZS4sIGl0cyByZWZjb3VudCBpcyAw KSwgc28gaXQncyBzYWZlIHRvIHJlYWQgdGhlCisgKiBjb3VudF9pbmZvLCBv d25lciwgYW5kIHR5cGVfaW5mbyB3aXRob3V0IHN5bmNocm9uaXphdGlvbi4K KyAqLworc3RhdGljIGludCBjbGVhbnVwX3BhZ2VfbWFwcGluZ3Moc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKIHsKICAgICB1bnNpZ25lZCBpbnQgY2FjaGVh dHRyID0KICAgICAgICAgKHBhZ2UtPmNvdW50X2luZm8gJiBQR0NfY2FjaGVh dHRyX21hc2spID4+IFBHQ19jYWNoZWF0dHJfYmFzZTsKKyAgICBpbnQgcmMg PSAwOworICAgIHVuc2lnbmVkIGxvbmcgbWZuID0gcGFnZV90b19tZm4ocGFn ZSk7CiAKLSAgICBpZiAoIGxpa2VseShjYWNoZWF0dHIgPT0gMCkgKQotICAg ICAgICByZXR1cm4gMDsKKyAgICAvKgorICAgICAqIElmIHdlJ3ZlIG1vZGlm aWVkIHhlbiBtYXBwaW5ncyBhcyBhIHJlc3VsdCBvZiBndWVzdCBjYWNoZQor ICAgICAqIGF0dHJpYnV0ZXMsIHJlc3RvcmUgdGhlbSB0byB0aGUgIm5vcm1h bCIgc3RhdGUuCisgICAgICovCisgICAgaWYgKCB1bmxpa2VseShjYWNoZWF0 dHIpICkKKyAgICB7CisgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gflBH Q19jYWNoZWF0dHJfbWFzazsKIAotICAgIHBhZ2UtPmNvdW50X2luZm8gJj0g flBHQ19jYWNoZWF0dHJfbWFzazsKKyAgICAgICAgQlVHX09OKGlzX3hlbl9o ZWFwX3BhZ2UocGFnZSkpOwogCi0gICAgQlVHX09OKGlzX3hlbl9oZWFwX3Bh Z2UocGFnZSkpOworICAgICAgICByYyA9IHVwZGF0ZV94ZW5fbWFwcGluZ3Mo bWZuLCAwKTsKKyAgICB9CiAKLSAgICByZXR1cm4gdXBkYXRlX3hlbl9tYXBw aW5ncyhwYWdlX3RvX21mbihwYWdlKSwgMCk7CisgICAgLyoKKyAgICAgKiBJ ZiB0aGlzIG1heSBiZSBpbiBhIFBWIGRvbWFpbidzIElPTU1VLCByZW1vdmUg aXQuCisgICAgICoKKyAgICAgKiBOQiB0aGF0IHdyaXRhYmxlIHhlbmhlYXAg cGFnZXMgaGF2ZSB0aGVpciB0eXBlIHNldCBhbmQgY2xlYXJlZCBieQorICAg ICAqIGltcGxlbWVudGF0aW9uLXNwZWNpZmljIGNvZGUsIHJhdGhlciB0aGFu IGJ5IGdldF9wYWdlX3R5cGUoKS4gIEFzIHN1Y2g6CisgICAgICogLSBUaGV5 IGFyZW4ndCBleHBlY3RlZCB0byBoYXZlIGFuIElPTU1VIG1hcHBpbmcsIGFu ZAorICAgICAqIC0gV2UgZG9uJ3QgbmVjZXNzYXJpbHkgZXhwZWN0IHRoZSB0 eXBlIGNvdW50IHRvIGJlIHplcm8gd2hlbiB0aGUgZmluYWwKKyAgICAgKiBw dXRfcGFnZSBoYXBwZW5zLgorICAgICAqCisgICAgICogR28gYWhlYWQgYW5k IGF0dGVtcCB0byBjYWxsIGlvbW11X3VubWFwKCkgb24geGVuaGVhcCBwYWdl cyBhbnl3YXksIGp1c3QKKyAgICAgKiBpbiBjYXNlOyBidXQgb25seSBBU1NF UlQoKSB0aGF0IHRoZSB0eXBlIGNvdW50IGlzIHplcm8gYW5kIHJlbW92ZSB0 aGUKKyAgICAgKiBQR1Rfd3JpdGFibGUgdHlwZSBmb3Igbm9uLXhlbmhlYXAg cGFnZXMuCisgICAgICovCisgICAgaWYgKCAocGFnZS0+dS5pbnVzZS50eXBl X2luZm8gJiBQR1RfdHlwZV9tYXNrKSA9PSBQR1Rfd3JpdGFibGVfcGFnZSAp CisgICAgeworICAgICAgICBzdHJ1Y3QgZG9tYWluICpkID0gcGFnZV9nZXRf b3duZXIocGFnZSk7CisKKyAgICAgICAgaWYgKCBkICYmIGlzX3B2X2RvbWFp bihkKSAmJiB1bmxpa2VseShuZWVkX2lvbW11KGQpKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIGludCByYzIgPSBpb21tdV91bm1hcF9wYWdlKGQsIG1m bik7CisKKyAgICAgICAgICAgIGlmICggIXJjICkKKyAgICAgICAgICAgICAg ICByYyA9IHJjMjsKKyAgICAgICAgfQorCisgICAgICAgIGlmICggbGlrZWx5 KCFpc194ZW5faGVhcF9wYWdlKHBhZ2UpKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIEFTU0VSVCgocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJgorICAg ICAgICAgICAgICAgICAgICAoUEdUX3R5cGVfbWFzayB8IFBHVF9jb3VudF9t YXNrKSkgPT0gUEdUX3dyaXRhYmxlX3BhZ2UpOworICAgICAgICAgICAgLyoK KyAgICAgICAgICAgICAqIENsZWFyIHRoZSB0eXBlIHRvIHJlY29yZCB0aGUg ZmFjdCB0aGF0IGFsbCB3cml0YWJsZSBtYXBwaW5ncworICAgICAgICAgICAg ICogaGF2ZSBiZWVuIHJlbW92ZWQuICBCdXQgaWYgZWl0aGVyIG9wZXJhdGlv biBmYWlsZWQsIGxlYXZlCisgICAgICAgICAgICAgKiB0eXBlX2luZm8gYWxv bmUuCisgICAgICAgICAgICAgKi8KKyAgICAgICAgICAgIGlmICggbGlrZWx5 KCFyYykgKQorICAgICAgICAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9p bmZvICY9IH4oUEdUX3R5cGVfbWFzayB8IFBHVF9jb3VudF9tYXNrKTsKKyAg ICAgICAgfQorICAgIH0KKworICAgIHJldHVybiByYzsKIH0KIAogdm9pZCBw dXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlKQpAQCAtMjQwNyw3ICsy NDgzLDcgQEAgdm9pZCBwdXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl KQogCiAgICAgaWYgKCB1bmxpa2VseSgobnggJiBQR0NfY291bnRfbWFzaykg PT0gMCkgKQogICAgIHsKLSAgICAgICAgaWYgKCBjbGVhbnVwX3BhZ2VfY2Fj aGVhdHRyKHBhZ2UpID09IDAgKQorICAgICAgICBpZiAoICFjbGVhbnVwX3Bh Z2VfbWFwcGluZ3MocGFnZSkgKQogICAgICAgICAgICAgZnJlZV9kb21oZWFw X3BhZ2UocGFnZSk7CiAgICAgICAgIGVsc2UKICAgICAgICAgICAgIE1FTV9M T0coIkxlYWtpbmcgcGZuICVseCIsIHBhZ2VfdG9fbWZuKHBhZ2UpKTsKQEAg LTQ3NzEsOSArNDg0NywxMCBAQCBpbnQgc3RlYWxfcGFnZSgKICAgICAgKiBO QiB0aGlzIGlzIHNhZmUgZXZlbiBpZiB0aGUgcGFnZSBlbmRzIHVwIGJlaW5n IGdpdmVuIGJhY2sgdG8KICAgICAgKiB0aGUgZG9tYWluLCBiZWNhdXNlIHRo ZSBjb3VudCBpcyB6ZXJvOiBzdWJzZXF1ZW50IG1hcHBpbmdzIHdpbGwKICAg ICAgKiBjYXVzZSB0aGUgY2FjaGUgYXR0cmlidXRlcyB0byBiZSByZS1pbnN0 YXRlZCBpbnNpZGUKLSAgICAgKiBnZXRfcGFnZV9mcm9tX2wxZSgpLgorICAg ICAqIGdldF9wYWdlX2Zyb21fbDFlKCksIG9yIHRoZSBwYWdlIHRvIGJlIGFk ZGVkIGJhY2sgdG8gdGhlIElPTU1VCisgICAgICogdXBvbiB0aGUgdHlwZSBj aGFuZ2luZyB0byBQR1Rfd3JpdGVhYmxlLCBhcyBhcHByb3ByaWF0ZS4KICAg ICAgKi8KLSAgICBpZiAoIChyYyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIo cGFnZSkpICkKKyAgICBpZiAoIChyYyA9IGNsZWFudXBfcGFnZV9tYXBwaW5n cyhwYWdlKSkgKQogICAgIHsKICAgICAgICAgLyoKICAgICAgICAgICogQ291 bGRuJ3QgZml4dXAgWGVuJ3MgbWFwcGluZ3M7IHB1dCB0aGluZ3MgdGhlIHdh eSB3ZSBmb3VuZApkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tL3AybS5j IGIveGVuL2FyY2gveDg2L21tL3AybS5jCmluZGV4IDdiYmI3ODJiZGUuLjE0 ZjViZGI3ODcgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwor KysgYi94ZW4vYXJjaC94ODYvbW0vcDJtLmMKQEAgLTY0MiwxMyArNjQyLDkg QEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVjdCBwMm1fZG9tYWluICpwMm0sIHVu c2lnbmVkIGxvbmcgZ2ZuLCB1bnNpZ25lZCBsb25nIG1mbiwKICAgICBwMm1f dHlwZV90IHQ7CiAgICAgcDJtX2FjY2Vzc190IGE7CiAKKyAgICAvKiBJT01N VSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgp IGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3Ry YW5zbGF0ZShwMm0tPmRvbWFpbikgKQotICAgIHsKLSAgICAgICAgaWYgKCBu ZWVkX2lvbW11KHAybS0+ZG9tYWluKSApCi0gICAgICAgICAgICBmb3IgKCBp ID0gMDsgaSA8ICgxIDw8IHBhZ2Vfb3JkZXIpOyBpKysgKQotICAgICAgICAg ICAgICAgIGlvbW11X3VubWFwX3BhZ2UocDJtLT5kb21haW4sIG1mbiArIGkp OwogICAgICAgICByZXR1cm4gMDsKLSAgICB9CiAKICAgICBBU1NFUlQoZ2Zu X2xvY2tlZF9ieV9tZShwMm0sIGdmbikpOwogICAgIFAyTV9ERUJVRygicmVt b3ZpbmcgZ2ZuPSUjbHggbWZuPSUjbHhcbiIsIGdmbiwgbWZuKTsKQEAgLTY5 MiwyMiArNjg4LDMzIEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVj dCBkb21haW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuLAogICAgIGludCBwb2Rf Y291bnQgPSAwOwogICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBm b3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFu ZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5z bGF0ZShkKSApCiAgICAgewotICAgICAgICBpZiAoIG5lZWRfaW9tbXUoZCkg JiYgdCA9PSBwMm1fcmFtX3J3ICkKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5m byAqcGFnZSA9IG1mbl90b19wYWdlKF9tZm4obWZuKSk7CisKKyAgICAgICAg LyoKKyAgICAgICAgICogT3VyIGludGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdy dCBJT01NVSBlbnRyaWVzIGhhc24ndCBiZWVuIHZlcnkKKyAgICAgICAgICog Y2xlYXI7IGJ1dCBoaXN0b3JpY2FsbHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBv dXQgd2l0aCBJT01NVSBtYXBwaW5ncywKKyAgICAgICAgICogYW5kIG9ubHkg bG9zZSB0aGVtIHdoZW4gY2hhbmdlZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5 cGUuCisgICAgICAgICAqCisgICAgICAgICAqIFJldGFpbiB0aGlzIHByb3Bl cnR5IGJ5IGdyYWJiaW5nIGEgd3JpdGFibGUgdHlwZSByZWYgYW5kIHRoZW4K KyAgICAgICAgICogZHJvcHBpbmcgaXQgaW1tZWRpYXRlbHkuICBUaGUgcmVz dWx0IHdpbGwgYmUgcGFnZXMgdGhhdCBoYXZlIGEKKyAgICAgICAgICogd3Jp dGFibGUgdHlwZSAoYW5kIGFuIElPTU1VIGVudHJ5KSwgYnV0IGEgY291bnQg b2YgMCAoc3VjaCB0aGF0CisgICAgICAgICAqIGFueSBndWVzdC1yZXF1ZXN0 ZWQgdHlwZSBjaGFuZ2VzIHN1Y2NlZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUK KyAgICAgICAgICogZW50cnkpLgorICAgICAgICAgKi8KKyAgICAgICAgaWYg KCAhbmVlZF9pb21tdShkKSB8fCB0ICE9IHAybV9yYW1fcncgKQorICAgICAg ICAgICAgcmV0dXJuIDA7CisKKyAgICAgICAgZm9yICggaSA9IDA7IGkgPCAo MVVMIDw8IHBhZ2Vfb3JkZXIpOyArK2ksICsrcGFnZSApCiAgICAgICAgIHsK LSAgICAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgcGFnZV9vcmRl cik7IGkrKyApCi0gICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgcmMg PSBpb21tdV9tYXBfcGFnZSgKLSAgICAgICAgICAgICAgICAgICAgZCwgbWZu ICsgaSwgbWZuICsgaSwgSU9NTVVGX3JlYWRhYmxlfElPTU1VRl93cml0YWJs ZSk7Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAhPSAwICkKLSAgICAgICAg ICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAgIHdoaWxlICggaS0tID4g MCApCi0gICAgICAgICAgICAgICAgICAgICAgICBpb21tdV91bm1hcF9wYWdl KGQsIG1mbiArIGkpOwotICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgfQorICAgICAgICAg ICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdlLCBkLCBQR1Rfd3JpdGFi bGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdlX2FuZF90eXBl KHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAgICAgICAgICAgICAgIHJl dHVybiAtRUlOVkFMOwogICAgICAgICB9CisKICAgICAgICAgcmV0dXJuIDA7 CiAgICAgfQogCi0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa288-4.8.patch" Content-Disposition: attachment; filename="xsa288-4.8.patch" Content-Transfer-Encoding: base64 RnJvbSBjNDE2OWE3MmViMzkxYzZhMzgxYmMxODVlZmM4ZTgzZjI3MzQ1ODAx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGVmM2Iy MDhmYjAuLjlmMzc1YmMyMzYgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4va2Nv bmZpZy5oPgpAQCAtMjM4MCwxOSArMjM5Niw3OSBAQCBzdGF0aWMgaW50IG1v ZF9sNF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJj OwogfQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9m IGEgcGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29u ZGFyeQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4n cyBtYXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0 ZSB0aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBB IHBhZ2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQ ViBndWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBp bmcuCisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQs IGNsZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4g IE5CIHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxs b2NhdGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291 bnQgaXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRf aW5mbywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6 YXRpb24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdz KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50 IGNhY2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdD X2NhY2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAg aW50IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IHBhZ2VfdG9f bWZuKHBhZ2UpOwogCi0gICAgaWYgKCBsaWtlbHkoY2FjaGVhdHRyID09IDAp ICkKLSAgICAgICAgcmV0dXJuIDA7CisgICAgLyoKKyAgICAgKiBJZiB3ZSd2 ZSBtb2RpZmllZCB4ZW4gbWFwcGluZ3MgYXMgYSByZXN1bHQgb2YgZ3Vlc3Qg Y2FjaGUKKyAgICAgKiBhdHRyaWJ1dGVzLCByZXN0b3JlIHRoZW0gdG8gdGhl ICJub3JtYWwiIHN0YXRlLgorICAgICAqLworICAgIGlmICggdW5saWtlbHko Y2FjaGVhdHRyKSApCisgICAgeworICAgICAgICBwYWdlLT5jb3VudF9pbmZv ICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CiAKLSAgICBwYWdlLT5jb3VudF9p bmZvICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CisgICAgICAgIEJVR19PTihp c194ZW5faGVhcF9wYWdlKHBhZ2UpKTsKIAotICAgIEJVR19PTihpc194ZW5f aGVhcF9wYWdlKHBhZ2UpKTsKKyAgICAgICAgcmMgPSB1cGRhdGVfeGVuX21h cHBpbmdzKG1mbiwgMCk7CisgICAgfQogCi0gICAgcmV0dXJuIHVwZGF0ZV94 ZW5fbWFwcGluZ3MocGFnZV90b19tZm4ocGFnZSksIDApOworICAgIC8qCisg ICAgICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4ncyBJT01NVSwg cmVtb3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3cml0YWJsZSB4 ZW5oZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5kIGNsZWFyZWQg YnkKKyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBjb2RlLCByYXRo ZXIgdGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNoOgorICAgICAq IC0gVGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJT01NVSBtYXBw aW5nLCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2FyaWx5IGV4cGVj dCB0aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhlIGZpbmFsCisg ICAgICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAgICAqIEdvIGFo ZWFkIGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgpIG9uIHhlbmhl YXAgcGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2FzZTsgYnV0IG9u bHkgQVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6ZXJvIGFuZCBy ZW1vdmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUgZm9yIG5vbi14 ZW5oZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBhZ2UtPnUuaW51 c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdUX3dyaXRhYmxl X3BhZ2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBh Z2VfZ2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICggZCAmJiBpc19w dl9kb21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdShkKSkgKQorICAg ICAgICB7CisgICAgICAgICAgICBpbnQgcmMyID0gaW9tbXVfdW5tYXBfcGFn ZShkLCBtZm4pOworCisgICAgICAgICAgICBpZiAoICFyYyApCisgICAgICAg ICAgICAgICAgcmMgPSByYzI7CisgICAgICAgIH0KKworICAgICAgICBpZiAo IGxpa2VseSghaXNfeGVuX2hlYXBfcGFnZShwYWdlKSkgKQorICAgICAgICB7 CisgICAgICAgICAgICBBU1NFUlQoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZv ICYKKyAgICAgICAgICAgICAgICAgICAgKFBHVF90eXBlX21hc2sgfCBQR1Rf Y291bnRfbWFzaykpID09IFBHVF93cml0YWJsZV9wYWdlKTsKKyAgICAgICAg ICAgIC8qCisgICAgICAgICAgICAgKiBDbGVhciB0aGUgdHlwZSB0byByZWNv cmQgdGhlIGZhY3QgdGhhdCBhbGwgd3JpdGFibGUgbWFwcGluZ3MKKyAgICAg ICAgICAgICAqIGhhdmUgYmVlbiByZW1vdmVkLiAgQnV0IGlmIGVpdGhlciBv cGVyYXRpb24gZmFpbGVkLCBsZWF2ZQorICAgICAgICAgICAgICogdHlwZV9p bmZvIGFsb25lLgorICAgICAgICAgICAgICovCisgICAgICAgICAgICBpZiAo IGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAgICBwYWdlLT51LmludXNl LnR5cGVfaW5mbyAmPSB+KFBHVF90eXBlX21hc2sgfCBQR1RfY291bnRfbWFz ayk7CisgICAgICAgIH0KKyAgICB9CisKKyAgICByZXR1cm4gcmM7CiB9CiAK IHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTI0 MDgsNyArMjQ4NCw3IEBAIHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5m byAqcGFnZSkKIAogICAgIGlmICggdW5saWtlbHkoKG54ICYgUEdDX2NvdW50 X21hc2spID09IDApICkKICAgICB7Ci0gICAgICAgIGlmICggY2xlYW51cF9w YWdlX2NhY2hlYXR0cihwYWdlKSA9PSAwICkKKyAgICAgICAgaWYgKCAhY2xl YW51cF9wYWdlX21hcHBpbmdzKHBhZ2UpICkKICAgICAgICAgICAgIGZyZWVf ZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICBlbHNlCiAgICAgICAgICAg ICBNRU1fTE9HKCJMZWFraW5nIHBmbiAlbHgiLCBwYWdlX3RvX21mbihwYWdl KSk7CkBAIC00Nzc2LDkgKzQ4NTIsMTAgQEAgaW50IHN0ZWFsX3BhZ2UoCiAg ICAgICogTkIgdGhpcyBpcyBzYWZlIGV2ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1 cCBiZWluZyBnaXZlbiBiYWNrIHRvCiAgICAgICogdGhlIGRvbWFpbiwgYmVj YXVzZSB0aGUgY291bnQgaXMgemVybzogc3Vic2VxdWVudCBtYXBwaW5ncyB3 aWxsCiAgICAgICogY2F1c2UgdGhlIGNhY2hlIGF0dHJpYnV0ZXMgdG8gYmUg cmUtaW5zdGF0ZWQgaW5zaWRlCi0gICAgICogZ2V0X3BhZ2VfZnJvbV9sMWUo KS4KKyAgICAgKiBnZXRfcGFnZV9mcm9tX2wxZSgpLCBvciB0aGUgcGFnZSB0 byBiZSBhZGRlZCBiYWNrIHRvIHRoZSBJT01NVQorICAgICAqIHVwb24gdGhl IHR5cGUgY2hhbmdpbmcgdG8gUEdUX3dyaXRlYWJsZSwgYXMgYXBwcm9wcmlh dGUuCiAgICAgICovCi0gICAgaWYgKCAocmMgPSBjbGVhbnVwX3BhZ2VfY2Fj aGVhdHRyKHBhZ2UpKSApCisgICAgaWYgKCAocmMgPSBjbGVhbnVwX3BhZ2Vf bWFwcGluZ3MocGFnZSkpICkKICAgICB7CiAgICAgICAgIC8qCiAgICAgICAg ICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1hcHBpbmdzOyBwdXQgdGhpbmdz IHRoZSB3YXkgd2UgZm91bmQKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9t bS9wMm0uYyBiL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwppbmRleCAyMzlmOGU4 ODJiLi45YzE4NDliZjUyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0v cDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3AybS5jCkBAIC02NDQsMjMg KzY0NCw5IEBAIHAybV9yZW1vdmVfcGFnZShzdHJ1Y3QgcDJtX2RvbWFpbiAq cDJtLCB1bnNpZ25lZCBsb25nIGdmbiwgdW5zaWduZWQgbG9uZyBtZm4sCiAg ICAgcDJtX3R5cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwogCisgICAg LyogSU9NTVUgZm9yIFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdl X3R5cGUoKSBhbmQgcHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdf bW9kZV90cmFuc2xhdGUocDJtLT5kb21haW4pICkKLSAgICB7Ci0gICAgICAg IGludCByYyA9IDA7Ci0KLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KHAybS0+ ZG9tYWluKSApCi0gICAgICAgIHsKLSAgICAgICAgICAgIGZvciAoIGkgPSAw OyBpIDwgKDEgPDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAgICAgICAgICB7 Ci0gICAgICAgICAgICAgICAgaW50IHJldCA9IGlvbW11X3VubWFwX3BhZ2Uo cDJtLT5kb21haW4sIG1mbiArIGkpOwotCi0gICAgICAgICAgICAgICAgaWYg KCAhcmMgKQotICAgICAgICAgICAgICAgICAgICByYyA9IHJldDsKLSAgICAg ICAgICAgIH0KLSAgICAgICAgfQotCi0gICAgICAgIHJldHVybiByYzsKLSAg ICB9CisgICAgICAgIHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2Nr ZWRfYnlfbWUocDJtLCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5n IGdmbj0lI2x4IG1mbj0lI2x4XG4iLCBnZm4sIG1mbik7CkBAIC03MDMsMjYg KzY4OSwzMyBAQCBndWVzdF9waHlzbWFwX2FkZF9lbnRyeShzdHJ1Y3QgZG9t YWluICpkLCBnZm5fdCBnZm4sIG1mbl90IG1mbiwKICAgICBpbnQgcG9kX2Nv dW50ID0gMDsKICAgICBpbnQgcmMgPSAwOwogCisgICAgLyogSU9NTVUgZm9y IFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdlX3R5cGUoKSBhbmQg cHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdfbW9kZV90cmFuc2xh dGUoZCkgKQogICAgIHsKLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KGQpICYm IHQgPT0gcDJtX3JhbV9ydyApCi0gICAgICAgIHsKLSAgICAgICAgICAgIGZv ciAoIGkgPSAwOyBpIDwgKDEgPDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAg ICAgICAgICB7Ci0gICAgICAgICAgICAgICAgcmMgPSBpb21tdV9tYXBfcGFn ZShkLCBtZm5feChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgbWZuX3gobWZuX2FkZChtZm4sIGkpKSwK LSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl9y ZWFkYWJsZXxJT01NVUZfd3JpdGFibGUpOwotICAgICAgICAgICAgICAgIGlm ICggcmMgIT0gMCApCi0gICAgICAgICAgICAgICAgewotICAgICAgICAgICAg ICAgICAgICB3aGlsZSAoIGktLSA+IDAgKQotICAgICAgICAgICAgICAgICAg ICAgICAgLyogSWYgc3RhdGVtZW50IHRvIHNhdGlzZnkgX19tdXN0X2NoZWNr LiAqLwotICAgICAgICAgICAgICAgICAgICAgICAgaWYgKCBpb21tdV91bm1h cF9wYWdlKGQsIG1mbl94KG1mbl9hZGQobWZuLCBpKSkpICkKLSAgICAgICAg ICAgICAgICAgICAgICAgICAgICBjb250aW51ZTsKKyAgICAgICAgc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSA9IG1mbl90b19wYWdlKG1mbik7CiAKLSAgICAg ICAgICAgICAgICAgICAgcmV0dXJuIHJjOwotICAgICAgICAgICAgICAgIH0K LSAgICAgICAgICAgIH0KKyAgICAgICAgLyoKKyAgICAgICAgICogT3VyIGlu dGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdydCBJT01NVSBlbnRyaWVzIGhhc24n dCBiZWVuIHZlcnkKKyAgICAgICAgICogY2xlYXI7IGJ1dCBoaXN0b3JpY2Fs bHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBvdXQgd2l0aCBJT01NVSBtYXBwaW5n cywKKyAgICAgICAgICogYW5kIG9ubHkgbG9zZSB0aGVtIHdoZW4gY2hhbmdl ZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5cGUuCisgICAgICAgICAqCisgICAg ICAgICAqIFJldGFpbiB0aGlzIHByb3BlcnR5IGJ5IGdyYWJiaW5nIGEgd3Jp dGFibGUgdHlwZSByZWYgYW5kIHRoZW4KKyAgICAgICAgICogZHJvcHBpbmcg aXQgaW1tZWRpYXRlbHkuICBUaGUgcmVzdWx0IHdpbGwgYmUgcGFnZXMgdGhh dCBoYXZlIGEKKyAgICAgICAgICogd3JpdGFibGUgdHlwZSAoYW5kIGFuIElP TU1VIGVudHJ5KSwgYnV0IGEgY291bnQgb2YgMCAoc3VjaCB0aGF0CisgICAg ICAgICAqIGFueSBndWVzdC1yZXF1ZXN0ZWQgdHlwZSBjaGFuZ2VzIHN1Y2Nl ZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUKKyAgICAgICAgICogZW50cnkpLgor ICAgICAgICAgKi8KKyAgICAgICAgaWYgKCAhbmVlZF9pb21tdShkKSB8fCB0 ICE9IHAybV9yYW1fcncgKQorICAgICAgICAgICAgcmV0dXJuIDA7CisKKyAg ICAgICAgZm9yICggaSA9IDA7IGkgPCAoMVVMIDw8IHBhZ2Vfb3JkZXIpOyAr K2ksICsrcGFnZSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGlmICggZ2V0 X3BhZ2VfYW5kX3R5cGUocGFnZSwgZCwgUEdUX3dyaXRhYmxlX3BhZ2UpICkK KyAgICAgICAgICAgICAgICBwdXRfcGFnZV9hbmRfdHlwZShwYWdlKTsKKyAg ICAgICAgICAgIGVsc2UKKyAgICAgICAgICAgICAgICByZXR1cm4gLUVJTlZB TDsKICAgICAgICAgfQorCiAgICAgICAgIHJldHVybiAwOwogICAgIH0KIAot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa288-4.9.patch" Content-Disposition: attachment; filename="xsa288-4.9.patch" Content-Transfer-Encoding: base64 RnJvbSBiYzQ0NTllOTEyMzM2NzljZDAxMzk5ODllZGY0NjU2NDE3ZTk1Yjg1 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDQ3NmVm OGVlODUuLjNhMTFjNjc0NzggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4vaW5p dC5oPgpAQCAtMjQxMSwxOSArMjQyNyw3OSBAQCBzdGF0aWMgaW50IG1vZF9s NF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJjOwog fQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9mIGEg cGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29uZGFy eQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4ncyBt YXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0ZSB0 aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBBIHBh Z2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQViBn dWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBpbmcu CisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQsIGNs ZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4gIE5C IHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxsb2Nh dGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291bnQg aXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRfaW5m bywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6YXRp b24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdzKHN0 cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50IGNh Y2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdDX2Nh Y2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAgaW50 IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogCi0gICAgaWYgKCBsaWtlbHkoY2FjaGVhdHRyID09IDApICkK LSAgICAgICAgcmV0dXJuIDA7CisgICAgLyoKKyAgICAgKiBJZiB3ZSd2ZSBt b2RpZmllZCB4ZW4gbWFwcGluZ3MgYXMgYSByZXN1bHQgb2YgZ3Vlc3QgY2Fj aGUKKyAgICAgKiBhdHRyaWJ1dGVzLCByZXN0b3JlIHRoZW0gdG8gdGhlICJu b3JtYWwiIHN0YXRlLgorICAgICAqLworICAgIGlmICggdW5saWtlbHkoY2Fj aGVhdHRyKSApCisgICAgeworICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9 IH5QR0NfY2FjaGVhdHRyX21hc2s7CiAKLSAgICBwYWdlLT5jb3VudF9pbmZv ICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CisgICAgICAgIEJVR19PTihpc194 ZW5faGVhcF9wYWdlKHBhZ2UpKTsKIAotICAgIEJVR19PTihpc194ZW5faGVh cF9wYWdlKHBhZ2UpKTsKKyAgICAgICAgcmMgPSB1cGRhdGVfeGVuX21hcHBp bmdzKG1mbiwgMCk7CisgICAgfQogCi0gICAgcmV0dXJuIHVwZGF0ZV94ZW5f bWFwcGluZ3MocGFnZV90b19tZm4ocGFnZSksIDApOworICAgIC8qCisgICAg ICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4ncyBJT01NVSwgcmVt b3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3cml0YWJsZSB4ZW5o ZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5kIGNsZWFyZWQgYnkK KyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBjb2RlLCByYXRoZXIg dGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNoOgorICAgICAqIC0g VGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJT01NVSBtYXBwaW5n LCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2FyaWx5IGV4cGVjdCB0 aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhlIGZpbmFsCisgICAg ICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAgICAqIEdvIGFoZWFk IGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgpIG9uIHhlbmhlYXAg cGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2FzZTsgYnV0IG9ubHkg QVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6ZXJvIGFuZCByZW1v dmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUgZm9yIG5vbi14ZW5o ZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBhZ2UtPnUuaW51c2Uu dHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdUX3dyaXRhYmxlX3Bh Z2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBhZ2Vf Z2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICggZCAmJiBpc19wdl9k b21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdShkKSkgKQorICAgICAg ICB7CisgICAgICAgICAgICBpbnQgcmMyID0gaW9tbXVfdW5tYXBfcGFnZShk LCBtZm4pOworCisgICAgICAgICAgICBpZiAoICFyYyApCisgICAgICAgICAg ICAgICAgcmMgPSByYzI7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIGxp a2VseSghaXNfeGVuX2hlYXBfcGFnZShwYWdlKSkgKQorICAgICAgICB7Cisg ICAgICAgICAgICBBU1NFUlQoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYK KyAgICAgICAgICAgICAgICAgICAgKFBHVF90eXBlX21hc2sgfCBQR1RfY291 bnRfbWFzaykpID09IFBHVF93cml0YWJsZV9wYWdlKTsKKyAgICAgICAgICAg IC8qCisgICAgICAgICAgICAgKiBDbGVhciB0aGUgdHlwZSB0byByZWNvcmQg dGhlIGZhY3QgdGhhdCBhbGwgd3JpdGFibGUgbWFwcGluZ3MKKyAgICAgICAg ICAgICAqIGhhdmUgYmVlbiByZW1vdmVkLiAgQnV0IGlmIGVpdGhlciBvcGVy YXRpb24gZmFpbGVkLCBsZWF2ZQorICAgICAgICAgICAgICogdHlwZV9pbmZv IGFsb25lLgorICAgICAgICAgICAgICovCisgICAgICAgICAgICBpZiAoIGxp a2VseSghcmMpICkKKyAgICAgICAgICAgICAgICBwYWdlLT51LmludXNlLnR5 cGVfaW5mbyAmPSB+KFBHVF90eXBlX21hc2sgfCBQR1RfY291bnRfbWFzayk7 CisgICAgICAgIH0KKyAgICB9CisKKyAgICByZXR1cm4gcmM7CiB9CiAKIHZv aWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTI0Mzks NyArMjUxNSw3IEBAIHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAq cGFnZSkKIAogICAgIGlmICggdW5saWtlbHkoKG54ICYgUEdDX2NvdW50X21h c2spID09IDApICkKICAgICB7Ci0gICAgICAgIGlmICggY2xlYW51cF9wYWdl X2NhY2hlYXR0cihwYWdlKSA9PSAwICkKKyAgICAgICAgaWYgKCAhY2xlYW51 cF9wYWdlX21hcHBpbmdzKHBhZ2UpICkKICAgICAgICAgICAgIGZyZWVfZG9t aGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICBlbHNlCiAgICAgICAgICAgICBn ZHByaW50ayhYRU5MT0dfV0FSTklORywKQEAgLTQ4MjksOSArNDkwNSwxMCBA QCBpbnQgc3RlYWxfcGFnZSgKICAgICAgKiBOQiB0aGlzIGlzIHNhZmUgZXZl biBpZiB0aGUgcGFnZSBlbmRzIHVwIGJlaW5nIGdpdmVuIGJhY2sgdG8KICAg ICAgKiB0aGUgZG9tYWluLCBiZWNhdXNlIHRoZSBjb3VudCBpcyB6ZXJvOiBz dWJzZXF1ZW50IG1hcHBpbmdzIHdpbGwKICAgICAgKiBjYXVzZSB0aGUgY2Fj aGUgYXR0cmlidXRlcyB0byBiZSByZS1pbnN0YXRlZCBpbnNpZGUKLSAgICAg KiBnZXRfcGFnZV9mcm9tX2wxZSgpLgorICAgICAqIGdldF9wYWdlX2Zyb21f bDFlKCksIG9yIHRoZSBwYWdlIHRvIGJlIGFkZGVkIGJhY2sgdG8gdGhlIElP TU1VCisgICAgICogdXBvbiB0aGUgdHlwZSBjaGFuZ2luZyB0byBQR1Rfd3Jp dGVhYmxlLCBhcyBhcHByb3ByaWF0ZS4KICAgICAgKi8KLSAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICBpZiAo IChyYyA9IGNsZWFudXBfcGFnZV9tYXBwaW5ncyhwYWdlKSkgKQogICAgIHsK ICAgICAgICAgLyoKICAgICAgICAgICogQ291bGRuJ3QgZml4dXAgWGVuJ3Mg bWFwcGluZ3M7IHB1dCB0aGluZ3MgdGhlIHdheSB3ZSBmb3VuZApkaWZmIC0t Z2l0IGEveGVuL2FyY2gveDg2L21tL3AybS5jIGIveGVuL2FyY2gveDg2L21t L3AybS5jCmluZGV4IGVjZTMyZmZiOGYuLjI1ZmVkMDhlZmIgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYworKysgYi94ZW4vYXJjaC94ODYv bW0vcDJtLmMKQEAgLTcwNiwyMyArNzA2LDkgQEAgcDJtX3JlbW92ZV9wYWdl KHN0cnVjdCBwMm1fZG9tYWluICpwMm0sIHVuc2lnbmVkIGxvbmcgZ2ZuLCB1 bnNpZ25lZCBsb25nIG1mbiwKICAgICBwMm1fdHlwZV90IHQ7CiAgICAgcDJt X2FjY2Vzc190IGE7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlz IGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAq LwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShwMm0tPmRvbWFp bikgKQotICAgIHsKLSAgICAgICAgaW50IHJjID0gMDsKLQotICAgICAgICBp ZiAoIG5lZWRfaW9tbXUocDJtLT5kb21haW4pICkKLSAgICAgICAgewotICAg ICAgICAgICAgZm9yICggaSA9IDA7IGkgPCAoMSA8PCBwYWdlX29yZGVyKTsg aSsrICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICBpbnQgcmV0 ID0gaW9tbXVfdW5tYXBfcGFnZShwMm0tPmRvbWFpbiwgbWZuICsgaSk7Ci0K LSAgICAgICAgICAgICAgICBpZiAoICFyYyApCi0gICAgICAgICAgICAgICAg ICAgIHJjID0gcmV0OwotICAgICAgICAgICAgfQotICAgICAgICB9Ci0KLSAg ICAgICAgcmV0dXJuIHJjOwotICAgIH0KKyAgICAgICAgcmV0dXJuIDA7CiAK ICAgICBBU1NFUlQoZ2ZuX2xvY2tlZF9ieV9tZShwMm0sIGdmbikpOwogICAg IFAyTV9ERUJVRygicmVtb3ZpbmcgZ2ZuPSUjbHggbWZuPSUjbHhcbiIsIGdm biwgbWZuKTsKQEAgLTc2NSwyNiArNzUxLDMzIEBAIGd1ZXN0X3BoeXNtYXBf YWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQsIGdmbl90IGdmbiwgbWZuX3Qg bWZuLAogICAgIGludCBwb2RfY291bnQgPSAwOwogICAgIGludCByYyA9IDA7 CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4g Z2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICgg IXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSApCiAgICAgewotICAgICAgICBp ZiAoIG5lZWRfaW9tbXUoZCkgJiYgdCA9PSBwMm1fcmFtX3J3ICkKLSAgICAg ICAgewotICAgICAgICAgICAgZm9yICggaSA9IDA7IGkgPCAoMSA8PCBwYWdl X29yZGVyKTsgaSsrICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAg ICByYyA9IGlvbW11X21hcF9wYWdlKGQsIG1mbl94KG1mbl9hZGQobWZuLCBp KSksCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtZm5f eChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgSU9NTVVGX3JlYWRhYmxlfElPTU1VRl93cml0YWJsZSk7 Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAhPSAwICkKLSAgICAgICAgICAg ICAgICB7Ci0gICAgICAgICAgICAgICAgICAgIHdoaWxlICggaS0tID4gMCAp Ci0gICAgICAgICAgICAgICAgICAgICAgICAvKiBJZiBzdGF0ZW1lbnQgdG8g c2F0aXNmeSBfX211c3RfY2hlY2suICovCi0gICAgICAgICAgICAgICAgICAg ICAgICBpZiAoIGlvbW11X3VubWFwX3BhZ2UoZCwgbWZuX3gobWZuX2FkZCht Zm4sIGkpKSkgKQotICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNvbnRp bnVlOworICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlID0gbWZuX3Rv X3BhZ2UobWZuKTsKIAotICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgfQorICAgICAgICAv KgorICAgICAgICAgKiBPdXIgaW50ZXJmYWNlIGZvciBQViBndWVzdHMgd3J0 IElPTU1VIGVudHJpZXMgaGFzbid0IGJlZW4gdmVyeQorICAgICAgICAgKiBj bGVhcjsgYnV0IGhpc3RvcmljYWxseSwgcGFnZXMgaGF2ZSBzdGFydGVkIG91 dCB3aXRoIElPTU1VIG1hcHBpbmdzLAorICAgICAgICAgKiBhbmQgb25seSBs b3NlIHRoZW0gd2hlbiBjaGFuZ2VkIHRvIGEgZGlmZmVyZW50IHBhZ2UgdHlw ZS4KKyAgICAgICAgICoKKyAgICAgICAgICogUmV0YWluIHRoaXMgcHJvcGVy dHkgYnkgZ3JhYmJpbmcgYSB3cml0YWJsZSB0eXBlIHJlZiBhbmQgdGhlbgor ICAgICAgICAgKiBkcm9wcGluZyBpdCBpbW1lZGlhdGVseS4gIFRoZSByZXN1 bHQgd2lsbCBiZSBwYWdlcyB0aGF0IGhhdmUgYQorICAgICAgICAgKiB3cml0 YWJsZSB0eXBlIChhbmQgYW4gSU9NTVUgZW50cnkpLCBidXQgYSBjb3VudCBv ZiAwIChzdWNoIHRoYXQKKyAgICAgICAgICogYW55IGd1ZXN0LXJlcXVlc3Rl ZCB0eXBlIGNoYW5nZXMgc3VjY2VlZCBhbmQgcmVtb3ZlIHRoZSBJT01NVQor ICAgICAgICAgKiBlbnRyeSkuCisgICAgICAgICAqLworICAgICAgICBpZiAo ICFuZWVkX2lvbW11KGQpIHx8IHQgIT0gcDJtX3JhbV9ydyApCisgICAgICAg ICAgICByZXR1cm4gMDsKKworICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgx VUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytwYWdlICkKKyAgICAgICAgewor ICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdlLCBkLCBQ R1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdl X2FuZF90eXBlKHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAgICAgICAg ICAgICAgIHJldHVybiAtRUlOVkFMOwogICAgICAgICB9CisKICAgICAgICAg cmV0dXJuIDA7CiAgICAgfQogCi0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa288-4.11.patch" Content-Disposition: attachment; filename="xsa288-4.11.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZDNhMDJlMzIwZjg4NzQ3Yjc1ZTM3OTRjMmU2OTQyODRhZTY0YzNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGQ4ZmY1 OGM5MDEuLmFkOGFhY2FkNjggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4vaW5p dC5oPgpAQCAtMjI3NSwxOSArMjI5MSw3OSBAQCBzdGF0aWMgaW50IG1vZF9s NF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJjOwog fQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9mIGEg cGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29uZGFy eQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4ncyBt YXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0ZSB0 aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBBIHBh Z2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQViBn dWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBpbmcu CisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQsIGNs ZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4gIE5C IHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxsb2Nh dGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291bnQg aXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRfaW5m bywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6YXRp b24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdzKHN0 cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50IGNh Y2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdDX2Nh Y2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAgaW50 IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IG1mbl94KHBhZ2Vf dG9fbWZuKHBhZ2UpKTsKIAotICAgIGlmICggbGlrZWx5KGNhY2hlYXR0ciA9 PSAwKSApCi0gICAgICAgIHJldHVybiAwOworICAgIC8qCisgICAgICogSWYg d2UndmUgbW9kaWZpZWQgeGVuIG1hcHBpbmdzIGFzIGEgcmVzdWx0IG9mIGd1 ZXN0IGNhY2hlCisgICAgICogYXR0cmlidXRlcywgcmVzdG9yZSB0aGVtIHRv IHRoZSAibm9ybWFsIiBzdGF0ZS4KKyAgICAgKi8KKyAgICBpZiAoIHVubGlr ZWx5KGNhY2hlYXR0cikgKQorICAgIHsKKyAgICAgICAgcGFnZS0+Y291bnRf aW5mbyAmPSB+UEdDX2NhY2hlYXR0cl9tYXNrOwogCi0gICAgcGFnZS0+Y291 bnRfaW5mbyAmPSB+UEdDX2NhY2hlYXR0cl9tYXNrOworICAgICAgICBCVUdf T04oaXNfeGVuX2hlYXBfcGFnZShwYWdlKSk7CiAKLSAgICBCVUdfT04oaXNf eGVuX2hlYXBfcGFnZShwYWdlKSk7CisgICAgICAgIHJjID0gdXBkYXRlX3hl bl9tYXBwaW5ncyhtZm4sIDApOworICAgIH0KIAotICAgIHJldHVybiB1cGRh dGVfeGVuX21hcHBpbmdzKG1mbl94KHBhZ2VfdG9fbWZuKHBhZ2UpKSwgMCk7 CisgICAgLyoKKyAgICAgKiBJZiB0aGlzIG1heSBiZSBpbiBhIFBWIGRvbWFp bidzIElPTU1VLCByZW1vdmUgaXQuCisgICAgICoKKyAgICAgKiBOQiB0aGF0 IHdyaXRhYmxlIHhlbmhlYXAgcGFnZXMgaGF2ZSB0aGVpciB0eXBlIHNldCBh bmQgY2xlYXJlZCBieQorICAgICAqIGltcGxlbWVudGF0aW9uLXNwZWNpZmlj IGNvZGUsIHJhdGhlciB0aGFuIGJ5IGdldF9wYWdlX3R5cGUoKS4gIEFzIHN1 Y2g6CisgICAgICogLSBUaGV5IGFyZW4ndCBleHBlY3RlZCB0byBoYXZlIGFu IElPTU1VIG1hcHBpbmcsIGFuZAorICAgICAqIC0gV2UgZG9uJ3QgbmVjZXNz YXJpbHkgZXhwZWN0IHRoZSB0eXBlIGNvdW50IHRvIGJlIHplcm8gd2hlbiB0 aGUgZmluYWwKKyAgICAgKiBwdXRfcGFnZSBoYXBwZW5zLgorICAgICAqCisg ICAgICogR28gYWhlYWQgYW5kIGF0dGVtcCB0byBjYWxsIGlvbW11X3VubWFw KCkgb24geGVuaGVhcCBwYWdlcyBhbnl3YXksIGp1c3QKKyAgICAgKiBpbiBj YXNlOyBidXQgb25seSBBU1NFUlQoKSB0aGF0IHRoZSB0eXBlIGNvdW50IGlz IHplcm8gYW5kIHJlbW92ZSB0aGUKKyAgICAgKiBQR1Rfd3JpdGFibGUgdHlw ZSBmb3Igbm9uLXhlbmhlYXAgcGFnZXMuCisgICAgICovCisgICAgaWYgKCAo cGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiBQR1RfdHlwZV9tYXNrKSA9PSBQ R1Rfd3JpdGFibGVfcGFnZSApCisgICAgeworICAgICAgICBzdHJ1Y3QgZG9t YWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CisKKyAgICAgICAgaWYg KCBkICYmIGlzX3B2X2RvbWFpbihkKSAmJiB1bmxpa2VseShuZWVkX2lvbW11 KGQpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGludCByYzIgPSBpb21t dV91bm1hcF9wYWdlKGQsIG1mbik7CisKKyAgICAgICAgICAgIGlmICggIXJj ICkKKyAgICAgICAgICAgICAgICByYyA9IHJjMjsKKyAgICAgICAgfQorCisg ICAgICAgIGlmICggbGlrZWx5KCFpc194ZW5faGVhcF9wYWdlKHBhZ2UpKSAp CisgICAgICAgIHsKKyAgICAgICAgICAgIEFTU0VSVCgocGFnZS0+dS5pbnVz ZS50eXBlX2luZm8gJgorICAgICAgICAgICAgICAgICAgICAoUEdUX3R5cGVf bWFzayB8IFBHVF9jb3VudF9tYXNrKSkgPT0gUEdUX3dyaXRhYmxlX3BhZ2Up OworICAgICAgICAgICAgLyoKKyAgICAgICAgICAgICAqIENsZWFyIHRoZSB0 eXBlIHRvIHJlY29yZCB0aGUgZmFjdCB0aGF0IGFsbCB3cml0YWJsZSBtYXBw aW5ncworICAgICAgICAgICAgICogaGF2ZSBiZWVuIHJlbW92ZWQuICBCdXQg aWYgZWl0aGVyIG9wZXJhdGlvbiBmYWlsZWQsIGxlYXZlCisgICAgICAgICAg ICAgKiB0eXBlX2luZm8gYWxvbmUuCisgICAgICAgICAgICAgKi8KKyAgICAg ICAgICAgIGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvICY9IH4oUEdUX3R5cGVfbWFzayB8IFBH VF9jb3VudF9tYXNrKTsKKyAgICAgICAgfQorICAgIH0KKworICAgIHJldHVy biByYzsKIH0KIAogdm9pZCBwdXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlKQpAQCAtMjMwMyw3ICsyMzc5LDcgQEAgdm9pZCBwdXRfcGFnZShzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlKQogCiAgICAgaWYgKCB1bmxpa2VseSgobngg JiBQR0NfY291bnRfbWFzaykgPT0gMCkgKQogICAgIHsKLSAgICAgICAgaWYg KCBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpID09IDAgKQorICAgICAg ICBpZiAoICFjbGVhbnVwX3BhZ2VfbWFwcGluZ3MocGFnZSkgKQogICAgICAg ICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIGVsc2UK ICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLApAQCAtNDAy MCw5ICs0MDk2LDEwIEBAIGludCBzdGVhbF9wYWdlKAogICAgICAqIE5CIHRo aXMgaXMgc2FmZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2 ZW4gYmFjayB0bwogICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNv dW50IGlzIHplcm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAogICAgICAq IGNhdXNlIHRoZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVk IGluc2lkZQotICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICog Z2V0X3BhZ2VfZnJvbV9sMWUoKSwgb3IgdGhlIHBhZ2UgdG8gYmUgYWRkZWQg YmFjayB0byB0aGUgSU9NTVUKKyAgICAgKiB1cG9uIHRoZSB0eXBlIGNoYW5n aW5nIHRvIFBHVF93cml0ZWFibGUsIGFzIGFwcHJvcHJpYXRlLgogICAgICAq LwotICAgIGlmICggKHJjID0gY2xlYW51cF9wYWdlX2NhY2hlYXR0cihwYWdl KSkgKQorICAgIGlmICggKHJjID0gY2xlYW51cF9wYWdlX21hcHBpbmdzKHBh Z2UpKSApCiAgICAgewogICAgICAgICAvKgogICAgICAgICAgKiBDb3VsZG4n dCBmaXh1cCBYZW4ncyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdl IGZvdW5kCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0vcDJtLmMgYi94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKaW5kZXggYzUzY2FiNDRkOS4uMmI2MmJj NjFkZCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tL3AybS5jCisrKyBi L3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwpAQCAtNzA4LDIzICs3MDgsOSBAQCBw Mm1fcmVtb3ZlX3BhZ2Uoc3RydWN0IHAybV9kb21haW4gKnAybSwgdW5zaWdu ZWQgbG9uZyBnZm5fbCwgdW5zaWduZWQgbG9uZyBtZm4sCiAgICAgcDJtX3R5 cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwogCisgICAgLyogSU9NTVUg Zm9yIFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdlX3R5cGUoKSBh bmQgcHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdfbW9kZV90cmFu c2xhdGUocDJtLT5kb21haW4pICkKLSAgICB7Ci0gICAgICAgIGludCByYyA9 IDA7Ci0KLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KHAybS0+ZG9tYWluKSAp Ci0gICAgICAgIHsKLSAgICAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDEg PDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAgICAgICAgICB7Ci0gICAgICAg ICAgICAgICAgaW50IHJldCA9IGlvbW11X3VubWFwX3BhZ2UocDJtLT5kb21h aW4sIG1mbiArIGkpOwotCi0gICAgICAgICAgICAgICAgaWYgKCAhcmMgKQot ICAgICAgICAgICAgICAgICAgICByYyA9IHJldDsKLSAgICAgICAgICAgIH0K LSAgICAgICAgfQotCi0gICAgICAgIHJldHVybiByYzsKLSAgICB9CisgICAg ICAgIHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2NrZWRfYnlfbWUo cDJtLCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5nIGdmbj0lI2x4 IG1mbj0lI2x4XG4iLCBnZm5fbCwgbWZuKTsKQEAgLTc2OSwyNiArNzU1LDMz IEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQs IGdmbl90IGdmbiwgbWZuX3QgbWZuLAogICAgIGludCBwb2RfY291bnQgPSAw OwogICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vl c3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFn ZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSAp CiAgICAgewotICAgICAgICBpZiAoIG5lZWRfaW9tbXUoZCkgJiYgdCA9PSBw Mm1fcmFtX3J3ICkKLSAgICAgICAgewotICAgICAgICAgICAgZm9yICggaSA9 IDA7IGkgPCAoMSA8PCBwYWdlX29yZGVyKTsgaSsrICkKLSAgICAgICAgICAg IHsKLSAgICAgICAgICAgICAgICByYyA9IGlvbW11X21hcF9wYWdlKGQsIG1m bl94KG1mbl9hZGQobWZuLCBpKSksCi0gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBtZm5feChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSU9NTVVGX3JlYWRhYmxl fElPTU1VRl93cml0YWJsZSk7Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAh PSAwICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAg IHdoaWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAgICAgICAgICAv KiBJZiBzdGF0ZW1lbnQgdG8gc2F0aXNmeSBfX211c3RfY2hlY2suICovCi0g ICAgICAgICAgICAgICAgICAgICAgICBpZiAoIGlvbW11X3VubWFwX3BhZ2Uo ZCwgbWZuX3gobWZuX2FkZChtZm4sIGkpKSkgKQotICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGNvbnRpbnVlOworICAgICAgICBzdHJ1Y3QgcGFnZV9p bmZvICpwYWdlID0gbWZuX3RvX3BhZ2UobWZuKTsKIAotICAgICAgICAgICAg ICAgICAgICByZXR1cm4gcmM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgfQorICAgICAgICAvKgorICAgICAgICAgKiBPdXIgaW50ZXJmYWNl IGZvciBQViBndWVzdHMgd3J0IElPTU1VIGVudHJpZXMgaGFzbid0IGJlZW4g dmVyeQorICAgICAgICAgKiBjbGVhcjsgYnV0IGhpc3RvcmljYWxseSwgcGFn ZXMgaGF2ZSBzdGFydGVkIG91dCB3aXRoIElPTU1VIG1hcHBpbmdzLAorICAg ICAgICAgKiBhbmQgb25seSBsb3NlIHRoZW0gd2hlbiBjaGFuZ2VkIHRvIGEg ZGlmZmVyZW50IHBhZ2UgdHlwZS4KKyAgICAgICAgICoKKyAgICAgICAgICog UmV0YWluIHRoaXMgcHJvcGVydHkgYnkgZ3JhYmJpbmcgYSB3cml0YWJsZSB0 eXBlIHJlZiBhbmQgdGhlbgorICAgICAgICAgKiBkcm9wcGluZyBpdCBpbW1l ZGlhdGVseS4gIFRoZSByZXN1bHQgd2lsbCBiZSBwYWdlcyB0aGF0IGhhdmUg YQorICAgICAgICAgKiB3cml0YWJsZSB0eXBlIChhbmQgYW4gSU9NTVUgZW50 cnkpLCBidXQgYSBjb3VudCBvZiAwIChzdWNoIHRoYXQKKyAgICAgICAgICog YW55IGd1ZXN0LXJlcXVlc3RlZCB0eXBlIGNoYW5nZXMgc3VjY2VlZCBhbmQg cmVtb3ZlIHRoZSBJT01NVQorICAgICAgICAgKiBlbnRyeSkuCisgICAgICAg ICAqLworICAgICAgICBpZiAoICFuZWVkX2lvbW11KGQpIHx8IHQgIT0gcDJt X3JhbV9ydyApCisgICAgICAgICAgICByZXR1cm4gMDsKKworICAgICAgICBm b3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytw YWdlICkKKyAgICAgICAgeworICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9h bmRfdHlwZShwYWdlLCBkLCBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAg ICAgICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOworICAgICAgICAg ICAgZWxzZQorICAgICAgICAgICAgICAgIHJldHVybiAtRUlOVkFMOwogICAg ICAgICB9CisKICAgICAgICAgcmV0dXJuIDA7CiAgICAgfQogCi0tIAoyLjIw LjEKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:22:33 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:22:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194q-0002dH-9h; Tue, 05 Mar 2019 12:21:44 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194o-0002cn-Di for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:21:42 +0000 X-Inumbo-ID: 3ad18741-3f41-11e9-bc90-bc764e045a96 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 3ad18741-3f41-11e9-bc90-bc764e045a96; Tue, 05 Mar 2019 12:21:40 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194f-0001jF-4t; Tue, 05 Mar 2019 12:21:33 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h194f-0001Hh-2I; Tue, 05 Mar 2019 12:21:33 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:21:33 +0000 Subject: [Xen-announce] Xen Security Advisory 291 v2 - x86/PV: page type reference counting issue with failed IOMMU update X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-291 version 2 x86/PV: page type reference counting issue with failed IOMMU update UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= When an x86 PV domain has a passed-through PCI device assigned, IOMMU mappings may need to be updated when the type of a particular page changes. Such an IOMMU operation may fail. In the event of failure, while at present the affected guest would be forcibly crashed, the already recorded additional type reference was not dropped again. This causes a bug check to trigger while cleaning up after the crashed guest. IMPACT ====== Malicious or buggy x86 PV guest kernels can mount a Denial of Service (DoS) attack affecting the whole system. VULNERABLE SYSTEMS ================== Xen versions from 4.8 onwards are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. Only guests which are assigned a physical device can exploit this vulnerability. Guests which are not assigned physical devices cannot exploit this vulnerability. MITIGATION ========== Running only HVM or PVH guests avoids the vulnerability. Not passing through PCI devices to PV guests also avoids the vulnerability. CREDITS ======= This issue was discovered by Igor Druzhinin and Andrew Cooper of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa291.patch xen-unstable xsa291-4.11.patch Xen 4.11.x, Xen 4.10.x xsa291-4.9.patch Xen 4.9.x, Xen 4.8.x $ sha256sum xsa291* 01883c11ae45a5771644270445e463538a61d98c66adbba852de74ccd272eae9 xsa291.meta fb5f2a75ba113f21e9cb2dfbc22520495c69a4fef631c030a4834c680045e587 xsa291.patch 299bb4913e7ddb46ce90f415f91ee5e5480050631281c87e1a764b66fb116d89 xsa291-4.9.patch 16087ba5c59b9644f4f61c0c7fa124d9e04e88089b235aaae91daa04cdf1b8a1 xsa291-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa4MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ7uEH+gKbe8qOoIa8/xDC1rOH5H+BNvjCSfuov4EUPsJ1 3DUPNSa3jCHTlX89+BwI+uOis3vHuQYBw/k9QYfx6nG617bu3/dUYiWlnE/DpPzm zur3McHNigWCXOYsrNlgnOncXixJIRcIlMJNudejzaFwnW9PDA8ZZ5r3UiTLY0fT wySjAL0cpMztmU7PfYAPib97JAM/+GHGiwjjumaaIvF3WnIADJ26HpmtiKELMwOh 7o53kTUPFutLq4McsbcrxLRhwSOsBfhPN1mb4Y0QFUP7yStFpNOmzppu8mLuewhE +PqJ0OQqqCx8hz/3TEDO59JUlH7Iwo4B3Eykhb5BqoSQHrY= =iq8p -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa291.meta" Content-Disposition: attachment; filename="xsa291.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTEsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAieGVuIgogIF0sCiAg IlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAgIlJlY2lwZXMiOiB7 CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiYTAx NmI4ZjIwN2M3YTNmZThiZGQyYjZmN2MwODAwMjBlM2UxYzgyMyIsCiAgICAg ICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAg ICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAg ICAgICAgICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5MS00LjExLnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjExIjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI4N2Y1MWJmMzY2Y2E3OWI5OGUxZTIwMWJmOWJkN2E5YzE2 NDYzMWUyIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgsCiAgICAgICAgICAgIDI5MAogICAgICAgICAgXSwKICAgICAg ICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjkxLTQuMTEucGF0 Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAg IjQuOCI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsK ICAgICAgICAgICJTdGFibGVSZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODll NjgxODg2NTIwNzllM2JmYWE2NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsK ICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAg IDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAgICAyOTAKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI5MS00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9 CiAgICB9LAogICAgIjQuOSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAg ICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiZjVhY2Y5N2Y2 NjljNmJjOTY5MWUwMzc3MWFkMDY3MDNkYTc3ZTBkNSIsCiAgICAgICAgICAi UHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUs CiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAg ICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI5MS00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1 NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAog ICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAg Mjg4LAogICAgICAgICAgICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAi UGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI5MS5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa291.patch" Content-Disposition: attachment; filename="xsa291.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjgwOCw2ICsyODA4LDEzIEBAIHN0YXRpYyBpbnQg X2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBBR0VfT1JERVJfNEss CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBJT01NVUZfcmVhZGFibGUgfAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgSU9NTVVGX3dyaXRhYmxlKTsKKworICAg ICAgICAgICAgaWYgKCB1bmxpa2VseShpb21tdV9yZXQpICkKKyAgICAgICAg ICAgIHsKKyAgICAgICAgICAgICAgICBfcHV0X3BhZ2VfdHlwZShwYWdlLCBm YWxzZSwgTlVMTCk7CisgICAgICAgICAgICAgICAgcmMgPSBpb21tdV9yZXQ7 CisgICAgICAgICAgICAgICAgZ290byBvdXQ7CisgICAgICAgICAgICB9CiAg ICAgICAgIH0KICAgICB9CiAKQEAgLTI4MjIsMTIgKzI4MjksMTAgQEAgc3Rh dGljIGludCBfZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbgogICAgICAg ICByYyA9IGFsbG9jX3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJs ZSk7CiAgICAgfQogCisgb3V0OgogICAgIGlmICggKHggJiBQR1RfcGFydGlh bCkgJiYgIShueCAmIFBHVF9wYXJ0aWFsKSApCiAgICAgICAgIHB1dF9wYWdl KHBhZ2UpOwogCi0gICAgaWYgKCAhcmMgKQotICAgICAgICByYyA9IGlvbW11 X3JldDsKLQogICAgIHJldHVybiByYzsKIH0KIAo= --=separator Content-Type: application/octet-stream; name="xsa291-4.9.patch" Content-Disposition: attachment; filename="xsa291-4.9.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjg5Miw2ICsyODkyLDEzIEBAIHN0YXRpYyBpbnQg X19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2kKICAgICAgICAgICAgICAg ICBpb21tdV9yZXQgPSBpb21tdV9tYXBfcGFnZShkLCBtZm5fdG9fZ21mbihk LCBwYWdlX3RvX21mbihwYWdlKSksCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSU9NTVVG X3JlYWRhYmxlfElPTU1VRl93cml0YWJsZSk7CisKKyAgICAgICAgICAgIGlm ICggdW5saWtlbHkoaW9tbXVfcmV0KSApCisgICAgICAgICAgICB7CisgICAg ICAgICAgICAgICAgX3B1dF9wYWdlX3R5cGUocGFnZSwgZmFsc2UsIE5VTEwp OworICAgICAgICAgICAgICAgIHJjID0gaW9tbXVfcmV0OworICAgICAgICAg ICAgICAgIGdvdG8gb3V0OworICAgICAgICAgICAgfQogICAgICAgICB9CiAg ICAgfQogCkBAIC0yOTA2LDEyICsyOTEzLDEwIEBAIHN0YXRpYyBpbnQgX19n ZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2kKICAgICAgICAgcmMgPSBhbGxv Y19wYWdlX3R5cGUocGFnZSwgdHlwZSwgcHJlZW1wdGlibGUpOwogICAgIH0K IAorIG91dDoKICAgICBpZiAoICh4ICYgUEdUX3BhcnRpYWwpICYmICEobngg JiBQR1RfcGFydGlhbCkgKQogICAgICAgICBwdXRfcGFnZShwYWdlKTsKIAot ICAgIGlmICggIXJjICkKLSAgICAgICAgcmMgPSBpb21tdV9yZXQ7Ci0KICAg ICByZXR1cm4gcmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa291-4.11.patch" Content-Disposition: attachment; filename="xsa291-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjc1MSw2ICsyNzUxLDEzIEBAIHN0YXRpYyBpbnQg X2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgICAg ICBpb21tdV9yZXQgPSBpb21tdV9tYXBfcGFnZShkLCBnZm5feChnZm4pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1m bl94KHBhZ2VfdG9fbWZuKHBhZ2UpKSwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBJT01NVUZfcmVhZGFibGV8SU9NTVVG X3dyaXRhYmxlKTsKKworICAgICAgICAgICAgaWYgKCB1bmxpa2VseShpb21t dV9yZXQpICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBfcHV0 X3BhZ2VfdHlwZShwYWdlLCBmYWxzZSwgTlVMTCk7CisgICAgICAgICAgICAg ICAgcmMgPSBpb21tdV9yZXQ7CisgICAgICAgICAgICAgICAgZ290byBvdXQ7 CisgICAgICAgICAgICB9CiAgICAgICAgIH0KICAgICB9CiAKQEAgLTI3NjUs MTIgKzI3NzIsMTAgQEAgc3RhdGljIGludCBfZ2V0X3BhZ2VfdHlwZShzdHJ1 Y3QgcGFnZV9pbgogICAgICAgICByYyA9IGFsbG9jX3BhZ2VfdHlwZShwYWdl LCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAgICAgfQogCisgb3V0OgogICAgIGlm ICggKHggJiBQR1RfcGFydGlhbCkgJiYgIShueCAmIFBHVF9wYXJ0aWFsKSAp CiAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOwogCi0gICAgaWYgKCAhcmMgKQot ICAgICAgICByYyA9IGlvbW11X3JldDsKLQogICAgIHJldHVybiByYzsKIH0K IAo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:22:33 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:22:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194v-0002fg-9H; Tue, 05 Mar 2019 12:21:49 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194u-0002er-0E for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:21:48 +0000 X-Inumbo-ID: 38071a54-3f41-11e9-bc2a-0be6625a4946 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 38071a54-3f41-11e9-bc2a-0be6625a4946; Tue, 05 Mar 2019 12:21:36 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194Z-0001iZ-UD; Tue, 05 Mar 2019 12:21:27 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h194Z-0001Ds-Qt; Tue, 05 Mar 2019 12:21:27 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:21:27 +0000 Subject: [Xen-announce] Xen Security Advisory 284 v2 - grant table transfer issues on large hosts X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-284 version 2 grant table transfer issues on large hosts UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= When the code processing grant table transfer requests finds a page with an address too large to be represented in the interface with the guest, it allocates a replacement page and copies page contents. However, the code doing so fails to set the newly allocated page's accounting properties correctly, resulting in the page becoming not only unusable by the target domain, but also unfreeable upon domain cleanup. The page as well as certain other remnants of an affected guest will be leaked. Furthermore internal state of the processing code was also not updated correctly, resulting in the insertion of an IOMMU mapping to the page being replaced (and subsequently freed), allowing the domain access to memory it does not own. IMPACT ====== The primary impact is a memory leak. Malicious or buggy guests with passed through PCI devices may also be able to escalate their privileges, crash the host, or access data belonging to other guests. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are vulnerable. 64-bit x86 PV guests can leverage the vulnerability on hosts with physical memory extending past the 16 TiB boundary. This is only possible for hypervisors built with CONFIG_BIGMEM enabled. 32-bit x86 PV guests can leverage the vulnerability on hosts with physical memory extending past the 168 GiB boundary. x86 HVM and PVH guests cannot leverage the vulnerability on libxl based systems. On xend based systems x86 HVM guests can leverage the vulnerability if their guest config file has a 'machine_address_size' setting. ARM systems are not vulnerable. MITIGATION ========== Running only x86 HVM/PVH guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. xsa284.patch xen-unstable, Xen 4.11.x ... 4.7.x $ sha256sum xsa284* 5359796890fc59dd2bbf8d23398c229153c8b9b716c01842dfb9f95d063a3ad4 xsa284.meta 3a95ae9faef3886fd3a4ed5b22d944939bb2f819bb5a2a8061b2311cf3c05776 xsa284.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa0MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZwsYH/1yPmIG8vO86sWbX4bvwOsiRQMyy+U/HGKnh3kRi lkDap3srzCRNveh/pqIJQF0okH/gD5VfHZrr3D73cHK7JKmlhoI0bPhpb6oE7/10 SmnaL/cW6/75FuDGdWzmKqx56Y/Ho/wxqGBj69rBbleOnGv+RHUQuGGTZ9g4rmzb Nn4DbVRLz2cqvQhHmwjQBl/unid1BAnHVATHnNdjlF/SgucR7oRweioYjTeoFbZv AdAWXX1GJRoXokGd1uE0eo/Mice/zmlHp//5JADCzo/oPevBFixMw/KWCaCMmUJt FyDNwlu8xtm/bopBWN9dGc2tSKj/0UnTA7FF61OG39BdJHo= =EzAi -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa284.meta" Content-Disposition: attachment; filename="xsa284.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODQsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg0LnBhdGNo IgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0 LjExIjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewog ICAgICAgICAgIlN0YWJsZVJlZiI6ICI4N2Y1MWJmMzY2Y2E3OWI5OGUxZTIw MWJmOWJkN2E5YzE2NDYzMWUyIiwKICAgICAgICAgICJQcmVyZXFzIjogWwog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg0LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAg fQogICAgfSwKICAgICI0LjciOiB7CiAgICAgICJSZWNpcGVzIjogewogICAg ICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjcxMGNjMDk2 OTcxMDE5YmMyZTVhOWFhYmI5YWYxYWNjYTBiNWI5ZTciLAogICAgICAgICAg IlByZXJlcXMiOiBbCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMi OiBbCiAgICAgICAgICAgICJ4c2EyODQucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOCI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODllNjgxODg2NTIwNzllM2JmYWE2 NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgIF0sCiAgICAg ICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI4NC5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45 IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAg ICAgICAgIlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcx YWQwNjcwM2RhNzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAg ICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAi eHNhMjg0LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfSwKICAgICJtYXN0ZXIiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAg ICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjI0ZDUyODI1 MjdmNDY0NzkwN2IzNTcyODIwYjUzMzVjMTVjZDAzNTYiLAogICAgICAgICAg IlByZXJlcXMiOiBbCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMi OiBbCiAgICAgICAgICAgICJ4c2EyODQucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9CiAgfQp9 --=separator Content-Type: application/octet-stream; name="xsa284.patch" Content-Disposition: attachment; filename="xsa284.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IHNldCBwYWdlIHJlZmNvdW50IGZvciBjb3B5LW9uLWdyYW50 LXRyYW5zZmVyCgpDb21taXQgNWNjNzdmOTA5OCAoIjMyLW9uLTY0OiBGaXgg ZG9tYWluIGFkZHJlc3Mtc2l6ZSBjbGFtcGluZywKaW1wbGVtZW50IiksIHdo aWNoIGludHJvZHVjZWQgdGhpcyBmdW5jdGlvbmFsaXR5LCB0b29rIGNhcmUg b2YgY2xlYXJpbmcKdGhlIG9sZCBwYWdlJ3MgUEdDX2FsbG9jYXRlZCwgYnV0 IGZhaWxlZCB0byBzZXQgdGhlIGJpdCAoYW5kIGluc3RhbGwgdGhlCmFzc29j aWF0ZWQgcmVmZXJlbmNlKSBvbiB0aGUgbmV3bHkgYWxsb2NhdGVkIG9uZS4g RnVydGhlcm1vcmUgdGhlICJtZm4iCmxvY2FsIHZhcmlhYmxlIHdhcyBuZXZl ciB1cGRhdGVkLCBhbmQgaGVuY2UgdGhlIHdyb25nIE1GTiB3YXMgcGFzc2Vk IHRvCmd1ZXN0X3BoeXNtYXBfYWRkX3BhZ2UoKSAoYW5kIGJhY2sgdG8gdGhl IGRlc3RpbmF0aW9uIGRvbWFpbikgaW4gdGhpcwpjYXNlLCBsZWFkaW5nIHRv IGFuIElPTU1VIG1hcHBpbmcgaW50byBhbiB1bm93bmVkIHBhZ2UuCgpJZGVh bGx5IHRoZSBjb2RlIHdvdWxkIHVzZSBhc3NpZ25fcGFnZXMoKSwgYnV0IHRo ZSBjYWxsIHRvCmdudHRhYl9wcmVwYXJlX2Zvcl90cmFuc2ZlcigpIHNpdHMg aW4gdGhlIG1pZGRsZSBvZiB0aGUgYWN0aW9ucwptaXJyb3JpbmcgdGhhdCBm dW5jdGlvbi4KClRoaXMgaXMgWFNBLTI4NC4KClNpZ25lZC1vZmYtYnk6IEph biBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6IEdlb3Jn ZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4KCi0tLSBhL3hl bi9jb21tb24vZ3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50 X3RhYmxlLmMKQEAgLTIxODMsNiArMjE4Myw4IEBAIGdudHRhYl90cmFuc2Zl cigKICAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291 bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKICAgICAgICAgICAgIGZyZWVfZG9t aGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAgcGFnZSA9IG5ld19wYWdl OworICAgICAgICAgICAgcGFnZS0+Y291bnRfaW5mbyA9IFBHQ19hbGxvY2F0 ZWQgfCAxOworICAgICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7 CiAgICAgICAgIH0KIAogICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxs b2NfbG9jayk7Cg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:22:33 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:22:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h1954-0002o9-SH; Tue, 05 Mar 2019 12:21:58 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h1953-0002mm-1q for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:21:57 +0000 X-Inumbo-ID: 3fd84352-3f41-11e9-b698-bb480ca9c20a Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 3fd84352-3f41-11e9-b698-bb480ca9c20a; Tue, 05 Mar 2019 12:21:48 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194n-0001k2-EE; Tue, 05 Mar 2019 12:21:41 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h194n-0001Io-BR; Tue, 05 Mar 2019 12:21:41 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:21:41 +0000 Subject: [Xen-announce] Xen Security Advisory 292 v2 - x86: insufficient TLB flushing when using PCID X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-292 version 2 x86: insufficient TLB flushing when using PCID UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= Use of Process Context Identifiers (PCID) was introduced into Xen in order to improve performance after XSA-254 (and in particular its Meltdown sub-issue). This enablement implied changes to the TLB flushing logic. The particular case of context switch to a vCPU of a PCID-enabled guest left open a time window between the full TLB flush, and the actual address space switch, during which additional TLB entries (from the address space about to be switched away from) can be accumulated, which will not subsequently be purged. IMPACT ====== Malicious PV guests may be able to cause a host crash (Denial of Service) or to gain access to data pertaining to other guests. Privilege escalation opportunities cannot be ruled out. Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems running x86 PV guests are vulnerable. Systems running only x86 HVM or PVH guests are not vulnerable. Only systems with at least one PCID-enabled PV guest are vulnerable. Systems where PCID or INVPCID are unavailable or entirely disabled are not vulnerable. Note that PCID is enabled by default for both 64-bit dom0 and 64-bit domU when hardware supports it. PCID acceleration has been backported to the following versions: - Xen 4.11.x, - Xen 4.10.2 and onwards, - Xen 4.9.3 and onwards, - Xen 4.8.4 and onwards, - Xen 4.7.6. To exploit this vulnerability, problematic TLB entries must be created between the full TLB flush and the address space switch. The NMI watchdog handler (enabled via the "watchdog" command line option) is known to create such entries; other vectors cannot be ruled out. MITIGATION ========== Running only HVM or PVH guests will avoid this vulnerability. Running only 32-bit PV guests alongside the other two types mentioned above will also avoid this vulnerability, provided Dom0 is also 32-bit or is not using PCID. Making a 64-bit Dom0 not use PCID can be achieved by e.g. "xpti=no-dom0 pcid=xpti". Disabling use of PCID entirely, by passing "pcid=0" or "invpcid=0" as a command line option to the hypervisor, will also avoid this vulnerability (albeit re-introducing the XPTI performance regression use of PCID was intended to reduce). Disabling the watchdog timer will remove the only known way of reliably creating problematic TLB entries, potentially reducing the risk of a successful attack. CREDITS ======= This issue was discovered by Sergey Dyasli and Andrew Cooper of Citrix. RESOLUTION ========== Applying the attached patch resolves this issue. xsa292.patch xen-unstable, Xen 4.11.x ... Xen 4.7.6 $ sha256sum xsa292* c515e98e5ae8a16bc5c894741eea5523a7e568f81ee8a570626dcc0f58f40b40 xsa292.meta f42cb5e1eae5a5c6f0fd84e38df4db9f09a4e1176905c37f292fef9855c82fea xsa292.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa4MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZOd8IAIlWY8Vz3rd9uo4ehIoIIGiQYowxl96NslzZEtEx LQhpHALXyd8uWJbPwunbOgwEc2ur8Z3xfk6gnKP39SWL9fv4n+0RhQ5TltCFKRc2 97jVk9F0Lmw9VceqI9icrMjkVBk+J6OcAytMLzwT9sX6wJfpD+KjlVXKosLWvmT+ LiGOYa8gQlGQe5s8V1VVVkXOBuz7Jgel4/aRi0bIovBNffagNXt2zXIRgpnNmhFG g3vMI0Y6WM2VkfOkZkYkcxdW/6vVBeIcmfKhZHyFv6wBo0mWYBz+mvIVFFs6BrFf IqowWWFAr7NwGFcfs4iKETWbACCCYrpDFX1c9Z7O+SjXCV0= =mVRN -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa292.meta" Content-Disposition: attachment; filename="xsa292.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTIsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxCiAgICAg ICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4 c2EyOTIucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAg ICB9LAogICAgIjQuMTEiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAg ICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZj YTc5Yjk4ZTFlMjAxYmY5YmQ3YTljMTY0NjMxZTIiLAogICAgICAgICAgIlBy ZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NCwKICAgICAgICAgICAgMjg1LAog ICAgICAgICAgICAyODcsCiAgICAgICAgICAgIDI4OCwKICAgICAgICAgICAg MjkwLAogICAgICAgICAgICAyOTEKICAgICAgICAgIF0sCiAgICAgICAgICAi UGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI5Mi5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43Ijogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFmMWFj Y2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAg ICAgICAgICAyODgsCiAgICAgICAgICAgIDI5MAogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjkyLnBhdGNo IgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0 LjgiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAg ICAgICAgICAiU3RhYmxlUmVmIjogIjkwOGU3NjhmYWU0OWE4ZGIwMDg5ZTY4 MTg4NjUyMDc5ZTNiZmFhNjYiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAg ICAgICAgICAgIDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAy ODcsCiAgICAgICAgICAgIDI4OCwKICAgICAgICAgICAgMjkwLAogICAgICAg ICAgICAyOTEKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5Mi5wYXRjaCIKICAgICAgICAgIF0KICAgICAg ICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2RhNzdlMGQ1IiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAg ICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAgICAyODgs CiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxCiAgICAgICAgICBd LAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyOTIu cGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAog ICAgIm1hc3RlciI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhl biI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3 OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1NiIsCiAgICAgICAgICAiUHJlcmVx cyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAgICAg ICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAgICAyOTAs CiAgICAgICAgICAgIDI5MQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjkyLnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa292.patch" Content-Disposition: attachment; filename="xsa292.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IHByb3Blcmx5IGZsdXNoIFRMQiBpbiBzd2l0Y2hfY3IzX2Ny NCgpCgpUaGUgQ1IzIHZhbHVlcyB1c2VkIGZvciBjb250ZXh0cyBydW4gd2l0 aCBQQ0lEIGVuYWJsZWQgdW5pZm9ybWx5IGhhdmUKQ1IzLk5PRkxVU0ggc2V0 LCByZXN1bHRpbmcgaW4gdGhlIENSMyB3cml0ZSBpdHNlbGYgdG8gbm90IGNh dXNlIGFueQpmbHVzaGluZyBhdCBhbGwuIFdoZW4gdGhlIHNlY29uZCBDUjQg d3JpdGUgaXMgc2tpcHBlZCBvciBkb2Vzbid0IGRvIGFueQpmbHVzaGluZywg dGhlcmUncyBub3RoaW5nIHNvIGZhciB3aGljaCB3b3VsZCBwdXJnZSBUTEIg ZW50cmllcyB3aGljaCBtYXkKaGF2ZSBhY2N1bXVsYXRlZCBhZ2FpbiBpZiB0 aGUgUENJRCBkb2Vzbid0IGNoYW5nZTsgdGhlICJqdXN0IGluIGNhc2UiCmZs dXNoIG9ubHkgYWZmZWN0cyB0aGUgY2FzZSB3aGVyZSB0aGUgUENJRCBhY3R1 YWxseSBjaGFuZ2VzLiAoVGhlcmUgbWF5CmJlIHBhcnRpY3VsYXJseSBtYW55 IFRMQiBlbnRyaWVzIHJlLWFjY3VtdWxhdGVkIGluIGNhc2Ugb2YgYSB3YXRj aGRvZwpOTUkga2lja2luZyBpbiBkdXJpbmcgdGhlIGNyaXRpY2FsIHRpbWUg d2luZG93LikKClN1cHByZXNzIHRoZSBuby1mbHVzaCBiZWhhdmlvciBvZiB0 aGUgQ1IzIHdyaXRlIGluIHRoaXMgcGFydGljdWxhciBjYXNlLgoKU2ltaWxh cmx5IHRoZSBzZWNvbmQgQ1I0IHdyaXRlIG1heSBub3QgY2F1c2UgYW55IGZs dXNoaW5nIG9mIFRMQiBlbnRyaWVzCmVzdGFibGlzaGVkIGFnYWluIHdoaWxl IHRoZSBvcmlnaW5hbCBQQ0lEIHdhcyBzdGlsbCBpbiB1c2UgLSBpdCBtYXkg Z2V0CnBlcmZvcm1lZCBiZWNhdXNlIG9mIHVucmVsYXRlZCBiaXRzIGNoYW5n aW5nLiBUaGUgZmx1c2ggb2YgdGhlIG9sZCBQQ0lECm5lZWRzIHRvIGhhcHBl biBuZXZlcnRoZWxlc3MuCgpBdCB0aGUgc2FtZSB0aW1lIGFsc28gZWxpbWlu YXRlIGEgcG9zc2libGUgcmFjZSB3aXRoIGxhenkgY29udGV4dApzd2l0Y2g6 IEp1c3QgbGlrZSBmb3IgQ1I0LCBDUjMgbWF5IGNoYW5nZSBhdCBhbnkgdGlt ZSB3aGlsZSBpbnRlcnJ1cHRzCmFyZSBlbmFibGVkLCBkdWUgdG8gdGhlIF9f c3luY19sb2NhbF9leGVjc3RhdGUoKSBpbnZvY2F0aW9uIGZyb20gdGhlCmZs dXNoIElQSSBoYW5kbGVyLiBJdCBpcyBmb3IgdGhhdCByZWFzb24gdGhhdCB0 aGUgQ1IzIHJlYWQsIGp1c3QgbGlrZQp0aGUgQ1I0IG9uZSwgbXVzdCBoYXBw ZW4gb25seSBhZnRlciBpbnRlcnJ1cHRzIGhhdmUgYmVlbiB0dXJuZWQgb2Zm LgoKVGhpcyBpcyBYU0EtMjkyLgoKUmVwb3J0ZWQtYnk6IFNlcmdleSBEeWFz bGkgPHNlcmdleS5keWFzbGlAY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClRlc3Rl ZC1ieTogU2VyZ2V5IER5YXNsaSA8c2VyZ2V5LmR5YXNsaUBjaXRyaXguY29t PgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5j b20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KdjM6IEFkanVzdCBjb21tZW50cy4gRHJvcCBv bGRfY3I0IGZyb20gdGhlIFBHRSBjaGVjayBpbiB0aGUgZXhwcmVzc2lvbgog ICAgY29udHJvbGxpbmcgdGhlIGludm9jYXRpb24gb2YgaW52cGNpZF9mbHVz aF9zaW5nbGVfY29udGV4dCgpLCBhcyBQR0UKICAgIGlzIGFsd2F5cyBjbGVh ciB0aGVyZS4KdjI6IERlY291cGxlIGludnBjaWRfZmx1c2hfc2luZ2xlX2Nv bnRleHQoKSBmcm9tIDJuZCBDUjQgd3JpdGUuCgotLS0gYS94ZW4vYXJjaC94 ODYvZmx1c2h0bGIuYworKysgYi94ZW4vYXJjaC94ODYvZmx1c2h0bGIuYwpA QCAtMTAzLDkgKzEwMyw4IEBAIHN0YXRpYyB2b2lkIGRvX3RsYl9mbHVzaCh2 b2lkKQogCiB2b2lkIHN3aXRjaF9jcjNfY3I0KHVuc2lnbmVkIGxvbmcgY3Iz LCB1bnNpZ25lZCBsb25nIGNyNCkKIHsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBvbGRfY3I0OworICAgIHVuc2lnbmVkIGxvbmcgZmxhZ3MsIG9sZF9j cjQsIG9sZF9wY2lkOwogICAgIHUzMiB0OwotICAgIHVuc2lnbmVkIGxvbmcg b2xkX3BjaWQgPSBjcjNfcGNpZChyZWFkX2NyMygpKTsKIAogICAgIC8qIFRo aXMgbm9uLXJlZW50cmFudCBmdW5jdGlvbiBpcyBzb21ldGltZXMgY2FsbGVk IGluIGludGVycnVwdCBjb250ZXh0LiAqLwogICAgIGxvY2FsX2lycV9zYXZl KGZsYWdzKTsKQEAgLTEzMywxNSArMTMyLDM4IEBAIHZvaWQgc3dpdGNoX2Ny M19jcjQodW5zaWduZWQgbG9uZyBjcjMsIHUKICAgICAgICAgICovCiAgICAg ICAgIGludnBjaWRfZmx1c2hfYWxsX25vbmdsb2JhbHMoKTsKIAorICAgIC8q CisgICAgICogSWYgd2UgZG9uJ3QgY2hhbmdlIFBDSURzLCB0aGUgQ1IzIHdy aXRlIGJlbG93IG5lZWRzIHRvIGZsdXNoIHRoaXMgdmVyeQorICAgICAqIFBD SUQsIGV2ZW4gd2hlbiBhIGZ1bGwgZmx1c2ggd2FzIHBlcmZvcm1lZCBhYm92 ZSwgYXMgd2UgYXJlIGN1cnJlbnRseQorICAgICAqIGFjY3VtdWxhdGluZyBU TEIgZW50cmllcyBhZ2FpbiBmcm9tIHRoZSBvbGQgYWRkcmVzcyBzcGFjZS4K KyAgICAgKiBOQjogQ2xlYXJpbmcgdGhlIGJpdCB3aGVuIHdlIGRvbid0IHVz ZSBQQ0lEIGlzIGJlbmlnbiAoYXMgaXQgaXMgY2xlYXIKKyAgICAgKiBhbHJl YWR5IGluIHRoYXQgY2FzZSksIGJ1dCBhbGxvd3MgdGhlIGlmKCkgdG8gYmUg bW9yZSBzaW1wbGUuCisgICAgICovCisgICAgb2xkX3BjaWQgPSBjcjNfcGNp ZChyZWFkX2NyMygpKTsKKyAgICBpZiAoIG9sZF9wY2lkID09IGNyM19wY2lk KGNyMykgKQorICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9GTFVTSDsKKwog ICAgIHdyaXRlX2NyMyhjcjMpOwogCiAgICAgaWYgKCBvbGRfY3I0ICE9IGNy NCApCiAgICAgICAgIHdyaXRlX2NyNChjcjQpOwotICAgIGVsc2UgaWYgKCBv bGRfcGNpZCAhPSBjcjNfcGNpZChjcjMpICkKLSAgICAgICAgLyoKLSAgICAg ICAgICogTWFrZSBzdXJlIG5vIFRMQiBlbnRyaWVzIHJlbGF0ZWQgdG8gdGhl IG9sZCBQQ0lEIGNyZWF0ZWQgYmV0d2VlbgotICAgICAgICAgKiBmbHVzaGlu ZyB0aGUgVExCIGFuZCB3cml0aW5nIHRoZSBuZXcgJWNyMyB2YWx1ZSByZW1h aW4gaW4gdGhlIFRMQi4KLSAgICAgICAgICovCisKKyAgICAvKgorICAgICAq IE1ha2Ugc3VyZSBubyBUTEIgZW50cmllcyByZWxhdGVkIHRvIHRoZSBvbGQg UENJRCBjcmVhdGVkIGJldHdlZW4KKyAgICAgKiBmbHVzaGluZyB0aGUgVExC IGFuZCB3cml0aW5nIHRoZSBuZXcgJWNyMyB2YWx1ZSByZW1haW4gaW4gdGhl IFRMQi4KKyAgICAgKgorICAgICAqIFRoZSB3cml0ZSB0byBDUjQganVzdCBh Ym92ZSBoYXMgcGVyZm9ybWVkIGEgd2lkZXIgZmx1c2ggaW4gY2VydGFpbgor ICAgICAqIGNhc2VzLCB3aGljaCB0aGVyZWZvcmUgZ2V0IGV4Y2x1ZGVkIGhl cmUuIFNpbmNlIHRoYXQgd3JpdGUgaXMKKyAgICAgKiBjb25kaXRpb25hbCwg bm90ZSBpbiBwYXJ0aWN1bGFyIHRoYXQgaXQgd29uJ3QgYmUgc2tpcHBlZCBp ZiBQQ0lERQorICAgICAqIHRyYW5zaXRpb25zIGZyb20gMSB0byAwLiBUaGlz IGlzIGJlY2F1c2UgdGhlIENSNCB3cml0ZSBmdXJ0aGVyIHVwIHdpbGwKKyAg ICAgKiBoYXZlIGJlZW4gc2tpcHBlZCBpbiB0aGlzIGNhc2UsIGFzIFBDSURF IGFuZCBQR0Ugd29uJ3QgYm90aCBiZSBzZXQgYXQKKyAgICAgKiB0aGUgc2Ft ZSB0aW1lLgorICAgICAqCisgICAgICogTm90ZSBhbHNvIHRoYXQgUEdFIGlz IGFsd2F5cyBjbGVhciBpbiBvbGRfY3I0LgorICAgICAqLworICAgIGlmICgg b2xkX3BjaWQgIT0gY3IzX3BjaWQoY3IzKSAmJgorICAgICAgICAgIShjcjQg JiBYODZfQ1I0X1BHRSkgJiYKKyAgICAgICAgIChvbGRfY3I0ICYgWDg2X0NS NF9QQ0lERSkgPD0gKGNyNCAmIFg4Nl9DUjRfUENJREUpICkKICAgICAgICAg aW52cGNpZF9mbHVzaF9zaW5nbGVfY29udGV4dChvbGRfcGNpZCk7CiAKICAg ICBwb3N0X2ZsdXNoKHQpOwo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:24:46 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:24:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h196l-0003rf-VH; Tue, 05 Mar 2019 12:23:43 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h196l-0003r9-0D for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:23:43 +0000 X-Inumbo-ID: 3ae4efbc-3f41-11e9-8cb1-8f76126e9ca1 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 3ae4efbc-3f41-11e9-8cb1-8f76126e9ca1; Tue, 05 Mar 2019 12:21:40 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194c-0001iu-W0; Tue, 05 Mar 2019 12:21:30 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h194c-0001G4-TC; Tue, 05 Mar 2019 12:21:30 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:21:30 +0000 Subject: [Xen-announce] Xen Security Advisory 287 v2 - x86: steal_page violates page_struct access discipline X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-287 version 2 x86: steal_page violates page_struct access discipline UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= Xen's reference counting rules were designed to allow pages to change owner and state without requiring a global lock. Each page has a page structure, and a very specific set of access disciplines must be observed to ensure that pages are freed properly, and that no writable mappings exist for PV pagetable pages. Unfortunately, when the XENMEM_exchange hypercall was introduced, these access disciplines were violated, opening up several potential race conditions. IMPACT ====== A single PV guest can leak arbitrary amounts of memory, leading to a denial of service. A cooperating pair of PV and HVM/PVH guests can get a writable pagetable entry, leading to information disclosure or privilege escalation. Privilege escalation attacks using only a single PV guest or a pair of PV guests have not been ruled out. Note that both of these attacks require very precise timing, which may be difficult to exploit in practice. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. Only systems which run PV guests are vulnerable. Systems which run only HVM/PVH guests are not vulnerable. MITIGATION ========== Running only HVM or PVH guests will avoid these vulnerabilities. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa287.patch xen-unstable xsa287-4.11.patch Xen 4.11.x xsa287-4.10.patch Xen 4.10.x xsa287-4.9.patch Xen 4.9.x xsa287-4.8.patch Xen 4.8.x xsa287-4.7.patch Xen 4.7.x $ sha256sum xsa287* ae2b9261e26df871693478629c63970ba30817ee1dcb2266b89d8b067833c1b3 xsa287.meta 7de1b886d69dd7c497f88d41adf9a6f7cf9a305fd8ae9d714e1125e2a22208ab xsa287.patch 55f40f2f9bb41c85ac80dac775352e28b25fada80dae574e9d10300d5e2b91ce xsa287-4.7.patch 57312ff131eb6b51235723e862adf42ad3529ed13135375875c054fa0b55f80b xsa287-4.8.patch 34f4b835766a38bcf4066ccbab74676eda176e15ed2a6bd7884678a64507f89a xsa287-4.9.patch c7eaf8a325011dda84b02ee097ddbc7b5f2f4d3399de545a3a7b14e2d23f4278 xsa287-4.10.patch 6793315f714a249a4fad12b36559640b2f97f19f5b85f0d58694c6e78aa3d567 xsa287-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa0MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ4ZMH/2inEgYog1U9+y+3hMQSMYx69bjZ6/0uHn4FnqPm 39Z/FUTjVjCz3GF2zHjsA1YpKCQJ6WLZhtADyed6NyXd8ux64+henAwiStVhSdvC 4HgxQIIenqM/ixJSYWHv6iEJKAAbCcN0Q4OW4/CH2Pax+pm58axor1zOGisLhopN pNJRlQ6uTFSLvTd7N2UGg/q0HADChtIOM/iZi3jMiQ1JJvWG2EjWHQdSpW5kxkV3 LYzaMa7tfeQ2EkCkji5xS/nWkET817b/obTWl3YlTAbPoDsTNMHhjwtsWmqLw4/r eg7+HGB2tAPrG0pqE9DPH99OMeDnLE2A917nXmNF6S8EgKU= =/95T -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa287.meta" Content-Disposition: attachment; filename="xsa287.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODcsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjg3LTQuMTAucGF0Y2giCiAgICAg ICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7 CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAg ICAiU3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3 YTljMTY0NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAg ICAgIDI4NCwKICAgICAgICAgICAgMjg1CiAgICAgICAgICBdLAogICAgICAg ICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODctNC4xMS5wYXRj aCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAi NC43IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewog ICAgICAgICAgIlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlh YWJiOWFmMWFjY2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwog ICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQogICAgICAgICAgXSwK ICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg3LTQu Ny5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0s CiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVu IjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI5MDhlNzY4ZmFlNDlhOGRi MDA4OWU2ODE4ODY1MjA3OWUzYmZhYTY2IiwKICAgICAgICAgICJQcmVyZXFz IjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh Mjg3LTQuOC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC45IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAg ICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2 OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2RhNzdlMGQ1IiwKICAgICAgICAgICJQ cmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg3LTQuOS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAg ICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiUmVjaXBlcyI6 IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICIy NGQ1MjgyNTI3ZjQ2NDc5MDdiMzU3MjgyMGI1MzM1YzE1Y2QwMzU2IiwKICAg ICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAg ICAgIDI4NQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjg3LnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa287.patch" Content-Disposition: attachment; filename="xsa287.patch" Content-Transfer-Encoding: base64 RnJvbSBjMGI4OWMzZDNhNThiN2M4ODUzMmIzNmI5ZDEyNzdjMjc0NTU0MzEz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDdlYzU5NTRiMDMuLjRkM2Ix N2YzYTggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTg5LDcwICszOTg5LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiAjaWZkZWYgQ09ORklHX1BWCmRpZmYgLS1naXQg YS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29tbW9uL2dyYW50 X3RhYmxlLmMKaW5kZXggZGIyMmQ2YjQ0MS4uODA3MjhlYTU3ZCAxMDA2NDQK LS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCisrKyBiL3hlbi9jb21t b24vZ3JhbnRfdGFibGUuYwpAQCAtMjE1Nyw3ICsyMTU3LDcgQEAgZ250dGFi X3RyYW5zZmVyKAogI2lmZGVmIENPTkZJR19YODYKICAgICAgICAgICAgIHB1 dF9nZm4oZCwgZ29wLm1mbik7CiAjZW5kaWYKLSAgICAgICAgICAgIHBhZ2Ut PmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQR0NfYWxsb2NhdGVk KTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5 IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJlZV9kb21oZWFwX3Bh Z2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHliYWNrOwogICAgICAg ICB9CkBAIC0yMTgwLDEwICsyMTgwLDkgQEAgZ250dGFiX3RyYW5zZmVyKAog CiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKHBhZ2VfdG9fbWZuKG5l d19wYWdlKSwgbWZuKTsKIAotICAgICAgICAgICAgcGFnZS0+Y291bnRfaW5m byAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpOworICAgICAg ICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVhZHkgYmVlbiBjbGVh cmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgICAgIHBhZ2UgPSBuZXdfcGFnZTsKLSAgICAgICAgICAgIHBh Z2UtPmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwgMTsKICAgICAgICAg ICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAgICAgICB9CiAKQEAg LTIyMjMsMTIgKzIyMjIsMTcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAg ICAgKi8KICAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAgICAgICAgIG9rYXkgPSBnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNm ZXIoZSwgZCwgZ29wLnJlZik7Ci0gICAgICAgIHNwaW5fbG9jaygmZS0+cGFn ZV9hbGxvY19sb2NrKTsKIAotICAgICAgICBpZiAoIHVubGlrZWx5KCFva2F5 KSB8fCB1bmxpa2VseShlLT5pc19keWluZykgKQorICAgICAgICBpZiAoIHVu bGlrZWx5KCFva2F5IHx8IGFzc2lnbl9wYWdlcyhlLCBwYWdlLCAwLCBNRU1G X25vX3JlZmNvdW50KSkgKQogICAgICAgICB7Ci0gICAgICAgICAgICBib29s X3QgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUs IC0xKTsKKyAgICAgICAgICAgIGJvb2wgZHJvcF9kb21fcmVmOwogCisgICAg ICAgICAgICAvKgorICAgICAgICAgICAgICogTmVlZCB0byBncmFiIHRoaXMg YWdhaW4gdG8gc2FmZWx5IGZyZWUgb3VyICJyZXNlcnZlZCIKKyAgICAgICAg ICAgICAqIHBhZ2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAgICAgICAgICAgICAq LworICAgICAgICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2sp OworICAgICAgICAgICAgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3Rf dG90X3BhZ2VzKGUsIC0xKTsKICAgICAgICAgICAgIHNwaW5fdW5sb2NrKCZl LT5wYWdlX2FsbG9jX2xvY2spOwogCiAgICAgICAgICAgICBpZiAoIG9rYXkg LyogaS5lLiBlLT5pc19keWluZyBkdWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlm KCkgKi8gKQpAQCAtMjI0MSwxMCArMjI0NSw2IEBAIGdudHRhYl90cmFuc2Zl cigKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKICAg ICAgICAgfQogCi0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAm ZS0+cGFnZV9saXN0KTsKLSAgICAgICAgcGFnZV9zZXRfb3duZXIocGFnZSwg ZSk7Ci0KLSAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAjaWZkZWYgQ09ORklHX1g4NgogICAgICAgICBwdXRfZ2ZuKGQsIGdv cC5tZm4pOwogI2VuZGlmCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9y eS5jIGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCBiNmNmMDk1ODVjLi41 Mzg3NzY5OTg3IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5jCisr KyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTY5NCwyMCArNjk0LDIyIEBA IHN0YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFORExF X1BBUkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAgICAg KiBTdWNjZXNzISBCZXlvbmQgdGhpcyBwb2ludCB3ZSBjYW5ub3QgZmFpbCBm b3IgdGhpcyBjaHVuay4KICAgICAgICAgICovCiAKLSAgICAgICAgLyogRGVz dHJveSBmaW5hbCByZWZlcmVuY2UgdG8gZWFjaCBpbnB1dCBwYWdlLiAqLwor ICAgICAgICAvKgorICAgICAgICAgKiBUaGVzZSBwYWdlcyBoYXZlIGFscmVh ZHkgaGFkIG93bmVyIGFuZCByZWZlcmVuY2UgY2xlYXJlZC4KKyAgICAgICAg ICogRG8gdGhlIGZpbmFsIHR3byBzdGVwczogUmVtb3ZlIGZyb20gdGhlIHBo eXNtYXAsIGFuZCBmcmVlCisgICAgICAgICAqIHRoZW0uCisgICAgICAgICAq LwogICAgICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9o ZWFkKCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICB7CiAgICAgICAgICAg ICB1bnNpZ25lZCBsb25nIGdmbjsKIAotICAgICAgICAgICAgaWYgKCAhdGVz dF9hbmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRf aW5mbykgKQotICAgICAgICAgICAgICAgIEJVRygpOwogICAgICAgICAgICAg bWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICBnZm4gPSBt Zm5fdG9fZ21mbihkLCBtZm5feChtZm4pKTsKICAgICAgICAgICAgIC8qIFBh Z2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUgKi8KICAgICAgICAgICAgIEJVR19P TihTSEFSRURfTTJQKGdmbikpOwogICAgICAgICAgICAgaWYgKCBndWVzdF9w aHlzbWFwX3JlbW92ZV9wYWdlKGQsIF9nZm4oZ2ZuKSwgbWZuLCAwKSApCiAg ICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQpOwotICAgICAgICAgICAg cHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFn ZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAgIC8qIEFzc2lnbiBlYWNo IG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICovCkBAIC03ODAsMTMgKzc4 MiwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNU X0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3QpIGFyZykKICAg ICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAqLwogIGZhaWw6Ci0gICAg LyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3Rl YWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2lnbiBhbnkgaW5wdXQgcGFn ZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRoYXQgaWYgdGhlIGFzc2ln bgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBvbiB0aGUgaG9vayBmb3Ig ZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUgYWxyZWFkeQorICAgICAq IGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAgKi8KICAgICB3aGlsZSAo IChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFkKCZpbl9jaHVua19saXN0 KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdlcyhkLCBwYWdlLCAwLCBN RU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIEJV R19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAgICAgaWYgKCB0ZXN0X2Fu ZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZwYWdlLT5jb3VudF9pbmZv KSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAg ICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAg ZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyBi L3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4IGY3MWQzYmI3YTEuLmJl NDQxNTgwMzMgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCkBAIC0yMjc5LDcgKzIy NzksNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAgIGZvciAoIGkgPSAwOyBp IDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsKICAgICAgICAgQVNTRVJU KHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVMTCk7Ci0gICAgICAgIEFT U0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdDX2FsbG9jYXRlZCB8IDEp KSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tpXS5jb3VudF9pbmZvKTsK ICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ldLCBkKTsKICAgICAgICAg c21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBtdXN0IGJlIHZpc2libGUg YmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAgICAgICAgcGdbaV0uY291 bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwotLSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.7.patch" Content-Disposition: attachment; filename="xsa287-4.7.patch" Content-Transfer-Encoding: base64 RnJvbSA2ZjU5YmNlMDA4MWU2MDkxMjI2NWY2ZTI3MzQzZWQ1NWE5YzMwNjhk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCBjOWM2ZmM5ZGM4Li40N2Y0YWE0ZjZhIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDcxNyw2OSArNDcxNywxMDUgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgTUVNX0xPRygi QmFkIHBhZ2UgJWx4OiBlZD0lZCBzZD0lZCBjYWY9JTA4bHggdGFmPSUiIFBS dHlwZV9pbmZvLAogICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksIGQt PmRvbWFpbl9pZCwKICAgICAgICAgICAgIG93bmVyID8gb3duZXItPmRvbWFp bl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJu IC0xOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBfX2RvX3Vw ZGF0ZV92YV9tYXBwaW5nKApkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFu dF90YWJsZS5jIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IGFk NDRiOTYzMDMuLjcwOWUzODcxZjUgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v Z3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMK QEAgLTE5ODUsNyArMTk4NSw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGUpOwogICAgICAgICBwdXRfZ2Zu X2FuZF9jb3B5YmFjazoKICAgICAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1m bik7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9IH4oUEdDX2Nv dW50X21hc2t8UEdDX2FsbG9jYXRlZCk7CisgICAgICAgICAgICAvKiBUaGUg Y291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVuIGNsZWFuZWQgKi8KICAgICAg ICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAg Z290byBjb3B5YmFjazsKICAgICAgICAgfQpAQCAtMjAwOCwxMCArMjAwOCw5 IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgICAgICAgICAgY29weV9kb21h aW5fcGFnZShfbWZuKHBhZ2VfdG9fbWZuKG5ld19wYWdlKSksIF9tZm4obWZu KSk7CiAKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0Nf Y291bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRo ZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5IGJlZW4gY2xlYXJlZCAqLwogICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAg ICBwYWdlID0gbmV3X3BhZ2U7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7CiAgICAgICAgICAgICBtZm4gPSBw YWdlX3RvX21mbihwYWdlKTsKICAgICAgICAgfQogCkBAIC0yMDUxLDEyICsy MDUwLDE3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICovCiAgICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQsIGdv cC5yZWYpOwotICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSghb2theSkgfHwgdW5saWtl bHkoZS0+aXNfZHlpbmcpICkKKyAgICAgICAgaWYgKCB1bmxpa2VseSghb2th eSB8fCBhc3NpZ25fcGFnZXMoZSwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3Vu dCkpICkKICAgICAgICAgewotICAgICAgICAgICAgYm9vbF90IGRyb3BfZG9t X3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7CisgICAg ICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmOwogCisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogTmVlZCB0byBncmFiIHRoaXMgYWdhaW4gdG8g c2FmZWx5IGZyZWUgb3VyICJyZXNlcnZlZCIKKyAgICAgICAgICAgICAqIHBh Z2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAgICAgICAgICAgICAqLworICAgICAg ICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOworICAgICAg ICAgICAgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2Vz KGUsIC0xKTsKICAgICAgICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2Fs bG9jX2xvY2spOwogCiAgICAgICAgICAgICBpZiAoIG9rYXkgLyogaS5lLiBl LT5pc19keWluZyBkdWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlmKCkgKi8gKQpA QCAtMjA2OSwxMCArMjA3Myw2IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKICAgICAgICAgfQog Ci0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmZS0+cGFnZV9s aXN0KTsKLSAgICAgICAgcGFnZV9zZXRfb3duZXIocGFnZSwgZSk7Ci0KLSAg ICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAg ICAgIHB1dF9nZm4oZCwgZ29wLm1mbik7CiAKICAgICAgICAgVFJBQ0VfMUQo VFJDX01FTV9QQUdFX0dSQU5UX1RSQU5TRkVSLCBlLT5kb21haW5faWQpOwpk aWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9tZW1vcnkuYyBiL3hlbi9jb21tb24v bWVtb3J5LmMKaW5kZXggMThjZTYyYTcwNS4uOTU4MWY4MTkwMiAxMDA2NDQK LS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29tbW9uL21l bW9yeS5jCkBAIC01ODksMjAgKzU4OSwyMiBAQCBzdGF0aWMgbG9uZyBtZW1v cnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5 X2V4Y2hhbmdlX3QpIGFyZykKICAgICAgICAgICogU3VjY2VzcyEgQmV5b25k IHRoaXMgcG9pbnQgd2UgY2Fubm90IGZhaWwgZm9yIHRoaXMgY2h1bmsuCiAg ICAgICAgICAqLwogCi0gICAgICAgIC8qIERlc3Ryb3kgZmluYWwgcmVmZXJl bmNlIHRvIGVhY2ggaW5wdXQgcGFnZS4gKi8KKyAgICAgICAgLyoKKyAgICAg ICAgICogVGhlc2UgcGFnZXMgaGF2ZSBhbHJlYWR5IGhhZCBvd25lciBhbmQg cmVmZXJlbmNlIGNsZWFyZWQuCisgICAgICAgICAqIERvIHRoZSBmaW5hbCB0 d28gc3RlcHM6IFJlbW92ZSBmcm9tIHRoZSBwaHlzbWFwLCBhbmQgZnJlZQor ICAgICAgICAgKiB0aGVtLgorICAgICAgICAgKi8KICAgICAgICAgd2hpbGUg KCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlz dCkpICkKICAgICAgICAgewogICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBn Zm47CiAKLSAgICAgICAgICAgIGlmICggIXRlc3RfYW5kX2NsZWFyX2JpdChf UEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNvdW50X2luZm8pICkKLSAgICAgICAg ICAgICAgICBCVUcoKTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgICAgICAgICAgZ2ZuID0gbWZuX3RvX2dtZm4oZCwgbWZu KTsKICAgICAgICAgICAgIC8qIFBhZ2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUg Ki8KICAgICAgICAgICAgIEJVR19PTihTSEFSRURfTTJQKGdmbikpOwogICAg ICAgICAgICAgaWYgKCBndWVzdF9waHlzbWFwX3JlbW92ZV9wYWdlKGQsIGdm biwgbWZuLCAwKSApCiAgICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQp OwotICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAg IC8qIEFzc2lnbiBlYWNoIG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICov CkBAIC02NzQsMTMgKzY3NiwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhj aGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hh bmdlX3QpIGFyZykKICAgICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAq LwogIGZhaWw6Ci0gICAgLyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdl IG1hbmFnZWQgdG8gc3RlYWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2ln biBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRo YXQgaWYgdGhlIGFzc2lnbgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBv biB0aGUgaG9vayBmb3IgZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUg YWxyZWFkeQorICAgICAqIGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAg Ki8KICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdl cyhkLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsK ICAgICAgICAgICAgIEJVR19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAg ICAgaWYgKCB0ZXN0X2FuZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZw YWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2Uo cGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgfQogCiAgZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4 IGQwMjc4MTlmN2IuLjU5ZmE1Yjk3NGYgMTAwNjQ0Ci0tLSBhL3hlbi9jb21t b24vcGFnZV9hbGxvYy5jCisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CkBAIC0xNzgwLDcgKzE3ODAsNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAg IGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVM TCk7Ci0gICAgICAgIEFTU0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdD X2FsbG9jYXRlZCB8IDEpKSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tp XS5jb3VudF9pbmZvKTsKICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ld LCBkKTsKICAgICAgICAgc21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBt dXN0IGJlIHZpc2libGUgYmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAg ICAgICAgcGdbaV0uY291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.8.patch" Content-Disposition: attachment; filename="xsa287-4.8.patch" Content-Transfer-Encoding: base64 RnJvbSBkNzMzMjNmZWQ3OGU0YmRhMTE2NDRiN2FhOWI5MDJhNzVmM2Q3MDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCAyYjkzZWZiNTA0Li5lZjNiMjA4ZmIwIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDcyMiw2OSArNDcyMiwxMDUgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgTUVNX0xPRygi QmFkIHBhZ2UgJWx4OiBlZD0lZCBzZD0lZCBjYWY9JTA4bHggdGFmPSUiIFBS dHlwZV9pbmZvLAogICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksIGQt PmRvbWFpbl9pZCwKICAgICAgICAgICAgIG93bmVyID8gb3duZXItPmRvbWFp bl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJu IC0xOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBfX2RvX3Vw ZGF0ZV92YV9tYXBwaW5nKApkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFu dF90YWJsZS5jIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IDI3 Y2NlMTc2YTMuLjAzZmUzOGFjYjUgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v Z3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMK QEAgLTE5ODUsNyArMTk4NSw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGUpOwogICAgICAgICBwdXRfZ2Zu X2FuZF9jb3B5YmFjazoKICAgICAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1m bik7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9IH4oUEdDX2Nv dW50X21hc2t8UEdDX2FsbG9jYXRlZCk7CisgICAgICAgICAgICAvKiBUaGUg Y291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVuIGNsZWFuZWQgKi8KICAgICAg ICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAg Z290byBjb3B5YmFjazsKICAgICAgICAgfQpAQCAtMjAwOCwxMCArMjAwOCw5 IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgICAgICAgICAgY29weV9kb21h aW5fcGFnZShfbWZuKHBhZ2VfdG9fbWZuKG5ld19wYWdlKSksIF9tZm4obWZu KSk7CiAKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0Nf Y291bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRo ZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5IGJlZW4gY2xlYXJlZCAqLwogICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAg ICBwYWdlID0gbmV3X3BhZ2U7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7CiAgICAgICAgICAgICBtZm4gPSBw YWdlX3RvX21mbihwYWdlKTsKICAgICAgICAgfQogCkBAIC0yMDUxLDEyICsy MDUwLDE3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICovCiAgICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQsIGdv cC5yZWYpOwotICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSghb2theSkgfHwgdW5saWtl bHkoZS0+aXNfZHlpbmcpICkKKyAgICAgICAgaWYgKCB1bmxpa2VseSghb2th eSB8fCBhc3NpZ25fcGFnZXMoZSwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3Vu dCkpICkKICAgICAgICAgewotICAgICAgICAgICAgYm9vbF90IGRyb3BfZG9t X3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7CisgICAg ICAgICAgICBib29sIGRyb3BfZG9tX3JlZjsKIAorICAgICAgICAgICAgLyoK KyAgICAgICAgICAgICAqIE5lZWQgdG8gZ3JhYiB0aGlzIGFnYWluIHRvIHNh ZmVseSBmcmVlIG91ciAicmVzZXJ2ZWQiCisgICAgICAgICAgICAgKiBwYWdl IGluIHRoZSBwYWdlIHRvdGFsCisgICAgICAgICAgICAgKi8KKyAgICAgICAg ICAgIHNwaW5fbG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKKyAgICAgICAg ICAgIGRyb3BfZG9tX3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhl LCAtMSk7CiAgICAgICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKIAogICAgICAgICAgICAgaWYgKCBva2F5IC8qIGkuZS4gZS0+ aXNfZHlpbmcgZHVlIHRvIHRoZSBzdXJyb3VuZGluZyBpZigpICovICkKQEAg LTIwNjksMTAgKzIwNzMsNiBAQCBnbnR0YWJfdHJhbnNmZXIoCiAgICAgICAg ICAgICBnb3RvIHVubG9ja19hbmRfY29weWJhY2s7CiAgICAgICAgIH0KIAot ICAgICAgICBwYWdlX2xpc3RfYWRkX3RhaWwocGFnZSwgJmUtPnBhZ2VfbGlz dCk7Ci0gICAgICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIGUpOwotCi0gICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBwdXRfZ2ZuKGQsIGdvcC5tZm4pOwogCiAgICAgICAgIFRSQUNFXzFEKFRS Q19NRU1fUEFHRV9HUkFOVF9UUkFOU0ZFUiwgZS0+ZG9tYWluX2lkKTsKZGlm ZiAtLWdpdCBhL3hlbi9jb21tb24vbWVtb3J5LmMgYi94ZW4vY29tbW9uL21l bW9yeS5jCmluZGV4IGNkYTc5MTg1YjkuLjFjMGNkMGUzMTQgMTAwNjQ0Ci0t LSBhL3hlbi9jb21tb24vbWVtb3J5LmMKKysrIGIveGVuL2NvbW1vbi9tZW1v cnkuYwpAQCAtNjExLDIwICs2MTEsMjIgQEAgc3RhdGljIGxvbmcgbWVtb3J5 X2V4Y2hhbmdlKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX21lbW9yeV9l eGNoYW5nZV90KSBhcmcpCiAgICAgICAgICAqIFN1Y2Nlc3MhIEJleW9uZCB0 aGlzIHBvaW50IHdlIGNhbm5vdCBmYWlsIGZvciB0aGlzIGNodW5rLgogICAg ICAgICAgKi8KIAotICAgICAgICAvKiBEZXN0cm95IGZpbmFsIHJlZmVyZW5j ZSB0byBlYWNoIGlucHV0IHBhZ2UuICovCisgICAgICAgIC8qCisgICAgICAg ICAqIFRoZXNlIHBhZ2VzIGhhdmUgYWxyZWFkeSBoYWQgb3duZXIgYW5kIHJl ZmVyZW5jZSBjbGVhcmVkLgorICAgICAgICAgKiBEbyB0aGUgZmluYWwgdHdv IHN0ZXBzOiBSZW1vdmUgZnJvbSB0aGUgcGh5c21hcCwgYW5kIGZyZWUKKyAg ICAgICAgICogdGhlbS4KKyAgICAgICAgICovCiAgICAgICAgIHdoaWxlICgg KHBhZ2UgPSBwYWdlX2xpc3RfcmVtb3ZlX2hlYWQoJmluX2NodW5rX2xpc3Qp KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIHVuc2lnbmVkIGxvbmcgZ2Zu OwogCi0gICAgICAgICAgICBpZiAoICF0ZXN0X2FuZF9jbGVhcl9iaXQoX1BH Q19hbGxvY2F0ZWQsICZwYWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAg ICAgICAgQlVHKCk7CiAgICAgICAgICAgICBtZm4gPSBwYWdlX3RvX21mbihw YWdlKTsKICAgICAgICAgICAgIGdmbiA9IG1mbl90b19nbWZuKGQsIG1mbik7 CiAgICAgICAgICAgICAvKiBQYWdlcyB3ZXJlIHVuc2hhcmVkIGFib3ZlICov CiAgICAgICAgICAgICBCVUdfT04oU0hBUkVEX00yUChnZm4pKTsKICAgICAg ICAgICAgIGlmICggZ3Vlc3RfcGh5c21hcF9yZW1vdmVfcGFnZShkLCBfZ2Zu KGdmbiksIF9tZm4obWZuKSwgMCkgKQogICAgICAgICAgICAgICAgIGRvbWFp bl9jcmFzaChkKTsKLSAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOworICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIH0K IAogICAgICAgICAvKiBBc3NpZ24gZWFjaCBvdXRwdXQgcGFnZSB0byB0aGUg ZG9tYWluLiAqLwpAQCAtNjk3LDEzICs2OTksMTYgQEAgc3RhdGljIGxvbmcg bWVtb3J5X2V4Y2hhbmdlKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX21l bW9yeV9leGNoYW5nZV90KSBhcmcpCiAgICAgICogY2h1bmtzIHN1Y2NlZWRl ZC4KICAgICAgKi8KICBmYWlsOgotICAgIC8qIFJlYXNzaWduIGFueSBpbnB1 dCBwYWdlcyB3ZSBtYW5hZ2VkIHRvIHN0ZWFsLiAqLworICAgIC8qCisgICAg ICogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3Rl YWwuICBOQiB0aGF0IGlmIHRoZSBhc3NpZ24KKyAgICAgKiBmYWlscyBhZ2Fp biwgd2UncmUgb24gdGhlIGhvb2sgZm9yIGZyZWVpbmcgdGhlIHBhZ2UsIHNp bmNlIHdlJ3ZlIGFscmVhZHkKKyAgICAgKiBjbGVhcmVkIFBHQ19hbGxvY2F0 ZWQuCisgICAgICovCiAgICAgd2hpbGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9y ZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAgICAgaWYgKCBh c3NpZ25fcGFnZXMoZCwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3VudCkgKQog ICAgICAgICB7CiAgICAgICAgICAgICBCVUdfT04oIWQtPmlzX2R5aW5nKTsK LSAgICAgICAgICAgIGlmICggdGVzdF9hbmRfY2xlYXJfYml0KF9QR0NfYWxs b2NhdGVkLCAmcGFnZS0+Y291bnRfaW5mbykgKQotICAgICAgICAgICAgICAg IHB1dF9wYWdlKHBhZ2UpOworICAgICAgICAgICAgZnJlZV9kb21oZWFwX3Bh Z2UocGFnZSk7CiAgICAgICAgIH0KIAogIGR5aW5nOgpkaWZmIC0tZ2l0IGEv eGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgYi94ZW4vY29tbW9uL3BhZ2VfYWxs b2MuYwppbmRleCAyYjUzYTI1ZjFjLi44ZDQxYjVhZmZhIDEwMDY0NAotLS0g YS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9uL3Bh Z2VfYWxsb2MuYwpAQCAtMTc3MCw3ICsxNzcwLDcgQEAgaW50IGFzc2lnbl9w YWdlcygKICAgICBmb3IgKCBpID0gMDsgaSA8ICgxIDw8IG9yZGVyKTsgaSsr ICkKICAgICB7CiAgICAgICAgIEFTU0VSVChwYWdlX2dldF9vd25lcigmcGdb aV0pID09IE5VTEwpOwotICAgICAgICBBU1NFUlQoKHBnW2ldLmNvdW50X2lu Zm8gJiB+KFBHQ19hbGxvY2F0ZWQgfCAxKSkgPT0gMCk7CisgICAgICAgIEFT U0VSVCghcGdbaV0uY291bnRfaW5mbyk7CiAgICAgICAgIHBhZ2Vfc2V0X293 bmVyKCZwZ1tpXSwgZCk7CiAgICAgICAgIHNtcF93bWIoKTsgLyogRG9tYWlu IHBvaW50ZXIgbXVzdCBiZSB2aXNpYmxlIGJlZm9yZSB1cGRhdGluZyByZWZj bnQuICovCiAgICAgICAgIHBnW2ldLmNvdW50X2luZm8gPSBQR0NfYWxsb2Nh dGVkIHwgMTsKLS0gCjIuMjAuMQoK --=separator Content-Type: application/octet-stream; name="xsa287-4.9.patch" Content-Disposition: attachment; filename="xsa287-4.9.patch" Content-Transfer-Encoding: base64 RnJvbSBhNTE1NzVlZTNmNTc0YTczY2NiNzZiYTMxZTljNjZkMWYwMzRhNzMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCAyOTgyZWVjNDNlLi40NzZlZjhlZTg1IDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDc3NSw3MCArNDc3NSwxMDYgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgZ2RwcmludGso WEVOTE9HX1dBUk5JTkcsICJCYWQgc3RlYWwgbWZuICUiIFBSSV9tZm4KICAg ICAgICAgICAgICAiIGZyb20gZCVkIChvd25lciBkJWQpIGNhZj0lMDhseCB0 YWY9JSIgUFJ0eXBlX2luZm8gIlxuIiwKICAgICAgICAgICAgICBwYWdlX3Rv X21mbihwYWdlKSwgZC0+ZG9tYWluX2lkLAogICAgICAgICAgICAgIG93bmVy ID8gb3duZXItPmRvbWFpbl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAg ICAgICAgcGFnZS0+Y291bnRfaW5mbywgcGFnZS0+dS5pbnVzZS50eXBlX2lu Zm8pOwotICAgIHJldHVybiAtMTsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0 YXRpYyBpbnQgX19kb191cGRhdGVfdmFfbWFwcGluZygKZGlmZiAtLWdpdCBh L3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYyBiL3hlbi9jb21tb24vZ3JhbnRf dGFibGUuYwppbmRleCA1ZWUwOTgxODMyLi41YjMzOGU5NWZmIDEwMDY0NAot LS0gYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1v bi9ncmFudF90YWJsZS5jCkBAIC0xOTg1LDcgKzE5ODUsNyBAQCBnbnR0YWJf dHJhbnNmZXIoCiAgICAgICAgICAgICByY3VfdW5sb2NrX2RvbWFpbihlKTsK ICAgICAgICAgcHV0X2dmbl9hbmRfY29weWJhY2s6CiAgICAgICAgICAgICBw dXRfZ2ZuKGQsIGdvcC5tZm4pOwotICAgICAgICAgICAgcGFnZS0+Y291bnRf aW5mbyAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpOworICAg ICAgICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVhZHkgYmVlbiBj bGVhbmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdl KTsKICAgICAgICAgICAgIGdvdG8gY29weWJhY2s7CiAgICAgICAgIH0KQEAg LTIwMDgsMTAgKzIwMDgsOSBAQCBnbnR0YWJfdHJhbnNmZXIoCiAKICAgICAg ICAgICAgIGNvcHlfZG9tYWluX3BhZ2UoX21mbihwYWdlX3RvX21mbihuZXdf cGFnZSkpLCBfbWZuKG1mbikpOwogCi0gICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvICY9IH4oUEdDX2NvdW50X21hc2t8UEdDX2FsbG9jYXRlZCk7Cisg ICAgICAgICAgICAvKiBUaGUgY291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVu IGNsZWFyZWQgKi8KICAgICAgICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBh Z2UpOwogICAgICAgICAgICAgcGFnZSA9IG5ld19wYWdlOwotICAgICAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwogICAg ICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgIH0K IApAQCAtMjA1MSwxMiArMjA1MCwxNyBAQCBnbnR0YWJfdHJhbnNmZXIoCiAg ICAgICAgICAqLwogICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKICAgICAgICAgb2theSA9IGdudHRhYl9wcmVwYXJlX2Zvcl90 cmFuc2ZlcihlLCBkLCBnb3AucmVmKTsKLSAgICAgICAgc3Bpbl9sb2NrKCZl LT5wYWdlX2FsbG9jX2xvY2spOwogCi0gICAgICAgIGlmICggdW5saWtlbHko IW9rYXkpIHx8IHVubGlrZWx5KGUtPmlzX2R5aW5nKSApCisgICAgICAgIGlm ICggdW5saWtlbHkoIW9rYXkgfHwgYXNzaWduX3BhZ2VzKGUsIHBhZ2UsIDAs IE1FTUZfbm9fcmVmY291bnQpKSApCiAgICAgICAgIHsKLSAgICAgICAgICAg IGJvb2xfdCBkcm9wX2RvbV9yZWYgPSAhZG9tYWluX2FkanVzdF90b3RfcGFn ZXMoZSwgLTEpOworICAgICAgICAgICAgYm9vbCBkcm9wX2RvbV9yZWY7CiAK KyAgICAgICAgICAgIC8qCisgICAgICAgICAgICAgKiBOZWVkIHRvIGdyYWIg dGhpcyBhZ2FpbiB0byBzYWZlbHkgZnJlZSBvdXIgInJlc2VydmVkIgorICAg ICAgICAgICAgICogcGFnZSBpbiB0aGUgcGFnZSB0b3RhbAorICAgICAgICAg ICAgICovCisgICAgICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2Nf bG9jayk7CisgICAgICAgICAgICBkcm9wX2RvbV9yZWYgPSAhZG9tYWluX2Fk anVzdF90b3RfcGFnZXMoZSwgLTEpOwogICAgICAgICAgICAgc3Bpbl91bmxv Y2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAKICAgICAgICAgICAgIGlmICgg b2theSAvKiBpLmUuIGUtPmlzX2R5aW5nIGR1ZSB0byB0aGUgc3Vycm91bmRp bmcgaWYoKSAqLyApCkBAIC0yMDY5LDEwICsyMDczLDYgQEAgZ250dGFiX3Ry YW5zZmVyKAogICAgICAgICAgICAgZ290byB1bmxvY2tfYW5kX2NvcHliYWNr OwogICAgICAgICB9CiAKLSAgICAgICAgcGFnZV9saXN0X2FkZF90YWlsKHBh Z2UsICZlLT5wYWdlX2xpc3QpOwotICAgICAgICBwYWdlX3NldF9vd25lcihw YWdlLCBlKTsKLQotICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKIAogICAg ICAgICBUUkFDRV8xRChUUkNfTUVNX1BBR0VfR1JBTlRfVFJBTlNGRVIsIGUt PmRvbWFpbl9pZCk7CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5j IGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCBjMWQwZGEzMThlLi4xYWRl NjJhMzA5IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5jCisrKyBi L3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTYxMCwyMCArNjEwLDIyIEBAIHN0 YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFORExFX1BB UkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAgICAgKiBT dWNjZXNzISBCZXlvbmQgdGhpcyBwb2ludCB3ZSBjYW5ub3QgZmFpbCBmb3Ig dGhpcyBjaHVuay4KICAgICAgICAgICovCiAKLSAgICAgICAgLyogRGVzdHJv eSBmaW5hbCByZWZlcmVuY2UgdG8gZWFjaCBpbnB1dCBwYWdlLiAqLworICAg ICAgICAvKgorICAgICAgICAgKiBUaGVzZSBwYWdlcyBoYXZlIGFscmVhZHkg aGFkIG93bmVyIGFuZCByZWZlcmVuY2UgY2xlYXJlZC4KKyAgICAgICAgICog RG8gdGhlIGZpbmFsIHR3byBzdGVwczogUmVtb3ZlIGZyb20gdGhlIHBoeXNt YXAsIGFuZCBmcmVlCisgICAgICAgICAqIHRoZW0uCisgICAgICAgICAqLwog ICAgICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICB7CiAgICAgICAgICAgICB1 bnNpZ25lZCBsb25nIGdmbjsKIAotICAgICAgICAgICAgaWYgKCAhdGVzdF9h bmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRfaW5m bykgKQotICAgICAgICAgICAgICAgIEJVRygpOwogICAgICAgICAgICAgbWZu ID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICBnZm4gPSBtZm5f dG9fZ21mbihkLCBtZm4pOwogICAgICAgICAgICAgLyogUGFnZXMgd2VyZSB1 bnNoYXJlZCBhYm92ZSAqLwogICAgICAgICAgICAgQlVHX09OKFNIQVJFRF9N MlAoZ2ZuKSk7CiAgICAgICAgICAgICBpZiAoIGd1ZXN0X3BoeXNtYXBfcmVt b3ZlX3BhZ2UoZCwgX2dmbihnZm4pLCBfbWZuKG1mbiksIDApICkKICAgICAg ICAgICAgICAgICBkb21haW5fY3Jhc2goZCk7Ci0gICAgICAgICAgICBwdXRf cGFnZShwYWdlKTsKKyAgICAgICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBh Z2UpOwogICAgICAgICB9CiAKICAgICAgICAgLyogQXNzaWduIGVhY2ggb3V0 cHV0IHBhZ2UgdG8gdGhlIGRvbWFpbi4gKi8KQEAgLTY5NiwxMyArNjk4LDE2 IEBAIHN0YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFO RExFX1BBUkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAq IGNodW5rcyBzdWNjZWVkZWQuCiAgICAgICovCiAgZmFpbDoKLSAgICAvKiBS ZWFzc2lnbiBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4g Ki8KKyAgICAvKgorICAgICAqIFJlYXNzaWduIGFueSBpbnB1dCBwYWdlcyB3 ZSBtYW5hZ2VkIHRvIHN0ZWFsLiAgTkIgdGhhdCBpZiB0aGUgYXNzaWduCisg ICAgICogZmFpbHMgYWdhaW4sIHdlJ3JlIG9uIHRoZSBob29rIGZvciBmcmVl aW5nIHRoZSBwYWdlLCBzaW5jZSB3ZSd2ZSBhbHJlYWR5CisgICAgICogY2xl YXJlZCBQR0NfYWxsb2NhdGVkLgorICAgICAqLwogICAgIHdoaWxlICggKHBh Z2UgPSBwYWdlX2xpc3RfcmVtb3ZlX2hlYWQoJmluX2NodW5rX2xpc3QpKSAp CiAgICAgICAgIGlmICggYXNzaWduX3BhZ2VzKGQsIHBhZ2UsIDAsIE1FTUZf bm9fcmVmY291bnQpICkKICAgICAgICAgewogICAgICAgICAgICAgQlVHX09O KCFkLT5pc19keWluZyk7Ci0gICAgICAgICAgICBpZiAoIHRlc3RfYW5kX2Ns ZWFyX2JpdChfUEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNvdW50X2luZm8pICkK LSAgICAgICAgICAgICAgICBwdXRfcGFnZShwYWdlKTsKKyAgICAgICAgICAg IGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICB9CiAKICBkeWlu ZzoKZGlmZiAtLWdpdCBhL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jIGIveGVu L2NvbW1vbi9wYWdlX2FsbG9jLmMKaW5kZXggN2Q4YzM3ZWYzNi4uNTJiNTMw MWMwZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKKysr IGIveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKQEAgLTE3NjYsNyArMTc2Niw3 IEBAIGludCBhc3NpZ25fcGFnZXMoCiAgICAgZm9yICggaSA9IDA7IGkgPCAo MSA8PCBvcmRlcik7IGkrKyApCiAgICAgewogICAgICAgICBBU1NFUlQocGFn ZV9nZXRfb3duZXIoJnBnW2ldKSA9PSBOVUxMKTsKLSAgICAgICAgQVNTRVJU KChwZ1tpXS5jb3VudF9pbmZvICYgfihQR0NfYWxsb2NhdGVkIHwgMSkpID09 IDApOworICAgICAgICBBU1NFUlQoIXBnW2ldLmNvdW50X2luZm8pOwogICAg ICAgICBwYWdlX3NldF9vd25lcigmcGdbaV0sIGQpOwogICAgICAgICBzbXBf d21iKCk7IC8qIERvbWFpbiBwb2ludGVyIG11c3QgYmUgdmlzaWJsZSBiZWZv cmUgdXBkYXRpbmcgcmVmY250LiAqLwogICAgICAgICBwZ1tpXS5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7Ci0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa287-4.10.patch" Content-Disposition: attachment; filename="xsa287-4.10.patch" Content-Transfer-Encoding: base64 RnJvbSA5YjFmNjE5MmU0YjAzNjZkYzA5Y2VhOTA1ZDNlMGE0YjgyY2FkNDVi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGMyMGVkYjk1NGQuLjY3ZjZj ZmMxZDUgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTI0LDcwICszOTI0LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IF9fZG9fdXBkYXRlX3ZhX21h cHBpbmcoCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMg Yi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKaW5kZXggZTY3OTBkNWZhYy4u NDJlYTUwZjQ4NSAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtMjE3NSw3 ICsyMTc1LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAgICAgICAgcmN1 X3VubG9ja19kb21haW4oZSk7CiAgICAgICAgIHB1dF9nZm5fYW5kX2NvcHli YWNrOgogICAgICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKLSAgICAg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQ R0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZv IGhhcyBhbHJlYWR5IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJl ZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHli YWNrOwogICAgICAgICB9CkBAIC0yMTk4LDEwICsyMTk4LDkgQEAgZ250dGFi X3RyYW5zZmVyKAogCiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKF9t Zm4ocGFnZV90b19tZm4obmV3X3BhZ2UpKSwgX21mbihtZm4pKTsKIAotICAg ICAgICAgICAgcGFnZS0+Y291bnRfaW5mbyAmPSB+KFBHQ19jb3VudF9tYXNr fFBHQ19hbGxvY2F0ZWQpOworICAgICAgICAgICAgLyogVGhlIGNvdW50X2lu Zm8gaGFzIGFscmVhZHkgYmVlbiBjbGVhcmVkICovCiAgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgICAgIHBhZ2UgPSBu ZXdfcGFnZTsKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gPSBQR0Nf YWxsb2NhdGVkIHwgMTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgICAgICB9CiAKQEAgLTIyNDEsMTIgKzIyNDAsMTcgQEAg Z250dGFiX3RyYW5zZmVyKAogICAgICAgICAgKi8KICAgICAgICAgc3Bpbl91 bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgICAgIG9rYXkgPSBn bnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7Ci0g ICAgICAgIHNwaW5fbG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKIAotICAg ICAgICBpZiAoIHVubGlrZWx5KCFva2F5KSB8fCB1bmxpa2VseShlLT5pc19k eWluZykgKQorICAgICAgICBpZiAoIHVubGlrZWx5KCFva2F5IHx8IGFzc2ln bl9wYWdlcyhlLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSkgKQogICAg ICAgICB7Ci0gICAgICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmID0gIWRv bWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKKyAgICAgICAgICAgIGJv b2wgZHJvcF9kb21fcmVmOwogCisgICAgICAgICAgICAvKgorICAgICAgICAg ICAgICogTmVlZCB0byBncmFiIHRoaXMgYWdhaW4gdG8gc2FmZWx5IGZyZWUg b3VyICJyZXNlcnZlZCIKKyAgICAgICAgICAgICAqIHBhZ2UgaW4gdGhlIHBh Z2UgdG90YWwKKyAgICAgICAgICAgICAqLworICAgICAgICAgICAgc3Bpbl9s b2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOworICAgICAgICAgICAgZHJvcF9k b21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKICAg ICAgICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwog CiAgICAgICAgICAgICBpZiAoIG9rYXkgLyogaS5lLiBlLT5pc19keWluZyBk dWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlmKCkgKi8gKQpAQCAtMjI1OSwxMCAr MjI2Myw2IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGdvdG8g dW5sb2NrX2FuZF9jb3B5YmFjazsKICAgICAgICAgfQogCi0gICAgICAgIHBh Z2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmZS0+cGFnZV9saXN0KTsKLSAgICAg ICAgcGFnZV9zZXRfb3duZXIocGFnZSwgZSk7Ci0KLSAgICAgICAgc3Bpbl91 bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgICAgIHB1dF9nZm4o ZCwgZ29wLm1mbik7CiAKICAgICAgICAgVFJBQ0VfMUQoVFJDX01FTV9QQUdF X0dSQU5UX1RSQU5TRkVSLCBlLT5kb21haW5faWQpOwpkaWZmIC0tZ2l0IGEv eGVuL2NvbW1vbi9tZW1vcnkuYyBiL3hlbi9jb21tb24vbWVtb3J5LmMKaW5k ZXggMDg4MDgzZTRkMS4uOGFhZWNiNDQ5NSAxMDA2NDQKLS0tIGEveGVuL2Nv bW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC02 MzEsMjAgKzYzMSwyMiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2Uo WEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3Qp IGFyZykKICAgICAgICAgICogU3VjY2VzcyEgQmV5b25kIHRoaXMgcG9pbnQg d2UgY2Fubm90IGZhaWwgZm9yIHRoaXMgY2h1bmsuCiAgICAgICAgICAqLwog Ci0gICAgICAgIC8qIERlc3Ryb3kgZmluYWwgcmVmZXJlbmNlIHRvIGVhY2gg aW5wdXQgcGFnZS4gKi8KKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlc2Ug cGFnZXMgaGF2ZSBhbHJlYWR5IGhhZCBvd25lciBhbmQgcmVmZXJlbmNlIGNs ZWFyZWQuCisgICAgICAgICAqIERvIHRoZSBmaW5hbCB0d28gc3RlcHM6IFJl bW92ZSBmcm9tIHRoZSBwaHlzbWFwLCBhbmQgZnJlZQorICAgICAgICAgKiB0 aGVtLgorICAgICAgICAgKi8KICAgICAgICAgd2hpbGUgKCAocGFnZSA9IHBh Z2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAg ICAgewogICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBnZm47CiAKLSAgICAg ICAgICAgIGlmICggIXRlc3RfYW5kX2NsZWFyX2JpdChfUEdDX2FsbG9jYXRl ZCwgJnBhZ2UtPmNvdW50X2luZm8pICkKLSAgICAgICAgICAgICAgICBCVUco KTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAg ICAgICAgICAgZ2ZuID0gbWZuX3RvX2dtZm4oZCwgbWZuKTsKICAgICAgICAg ICAgIC8qIFBhZ2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUgKi8KICAgICAgICAg ICAgIEJVR19PTihTSEFSRURfTTJQKGdmbikpOwogICAgICAgICAgICAgaWYg KCBndWVzdF9waHlzbWFwX3JlbW92ZV9wYWdlKGQsIF9nZm4oZ2ZuKSwgX21m bihtZm4pLCAwKSApCiAgICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQp OwotICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAg IC8qIEFzc2lnbiBlYWNoIG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICov CkBAIC03MTcsMTMgKzcxOSwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhj aGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hh bmdlX3QpIGFyZykKICAgICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAq LwogIGZhaWw6Ci0gICAgLyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdl IG1hbmFnZWQgdG8gc3RlYWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2ln biBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRo YXQgaWYgdGhlIGFzc2lnbgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBv biB0aGUgaG9vayBmb3IgZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUg YWxyZWFkeQorICAgICAqIGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAg Ki8KICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdl cyhkLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsK ICAgICAgICAgICAgIEJVR19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAg ICAgaWYgKCB0ZXN0X2FuZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZw YWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2Uo cGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgfQogCiAgZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4 IDU5OGMzNDMyYzkuLjE1YTZmMDE4ZjggMTAwNjQ0Ci0tLSBhL3hlbi9jb21t b24vcGFnZV9hbGxvYy5jCisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CkBAIC0yMjE5LDcgKzIyMTksNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAg IGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVM TCk7Ci0gICAgICAgIEFTU0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdD X2FsbG9jYXRlZCB8IDEpKSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tp XS5jb3VudF9pbmZvKTsKICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ld LCBkKTsKICAgICAgICAgc21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBt dXN0IGJlIHZpc2libGUgYmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAg ICAgICAgcGdbaV0uY291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.11.patch" Content-Disposition: attachment; filename="xsa287-4.11.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzYyMGMxY2NiMTNmN2I1ODY0NWY0ODI0OGJhMWY0MDhiMDIxZmRj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDY1MDkwMzVhNWMuLmQ4ZmY1 OGM5MDEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTY2LDcwICszOTY2LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IF9fZG9fdXBkYXRlX3ZhX21h cHBpbmcoCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMg Yi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKaW5kZXggYzA1ODVkMzNmNC4u NjU2ZmFkMWI0MiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtMjE3OSw3 ICsyMTc5LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAgICAgICAgcmN1 X3VubG9ja19kb21haW4oZSk7CiAgICAgICAgIHB1dF9nZm5fYW5kX2NvcHli YWNrOgogICAgICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKLSAgICAg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQ R0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZv IGhhcyBhbHJlYWR5IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJl ZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHli YWNrOwogICAgICAgICB9CkBAIC0yMjAyLDEwICsyMjAyLDkgQEAgZ250dGFi X3RyYW5zZmVyKAogCiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKHBh Z2VfdG9fbWZuKG5ld19wYWdlKSwgbWZuKTsKIAotICAgICAgICAgICAgcGFn ZS0+Y291bnRfaW5mbyAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpOworICAgICAgICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVh ZHkgYmVlbiBjbGVhcmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBf cGFnZShwYWdlKTsKICAgICAgICAgICAgIHBhZ2UgPSBuZXdfcGFnZTsKLSAg ICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwg MTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAg ICAgICB9CiAKQEAgLTIyNDUsMTIgKzIyNDQsMTcgQEAgZ250dGFiX3RyYW5z ZmVyKAogICAgICAgICAgKi8KICAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBh Z2VfYWxsb2NfbG9jayk7CiAgICAgICAgIG9rYXkgPSBnbnR0YWJfcHJlcGFy ZV9mb3JfdHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7Ci0gICAgICAgIHNwaW5f bG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKIAotICAgICAgICBpZiAoIHVu bGlrZWx5KCFva2F5KSB8fCB1bmxpa2VseShlLT5pc19keWluZykgKQorICAg ICAgICBpZiAoIHVubGlrZWx5KCFva2F5IHx8IGFzc2lnbl9wYWdlcyhlLCBw YWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSkgKQogICAgICAgICB7Ci0gICAg ICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3Rf dG90X3BhZ2VzKGUsIC0xKTsKKyAgICAgICAgICAgIGJvb2wgZHJvcF9kb21f cmVmOwogCisgICAgICAgICAgICAvKgorICAgICAgICAgICAgICogTmVlZCB0 byBncmFiIHRoaXMgYWdhaW4gdG8gc2FmZWx5IGZyZWUgb3VyICJyZXNlcnZl ZCIKKyAgICAgICAgICAgICAqIHBhZ2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAg ICAgICAgICAgICAqLworICAgICAgICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdl X2FsbG9jX2xvY2spOworICAgICAgICAgICAgZHJvcF9kb21fcmVmID0gIWRv bWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKICAgICAgICAgICAgIHNw aW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogCiAgICAgICAgICAg ICBpZiAoIG9rYXkgLyogaS5lLiBlLT5pc19keWluZyBkdWUgdG8gdGhlIHN1 cnJvdW5kaW5nIGlmKCkgKi8gKQpAQCAtMjI2MywxMCArMjI2Nyw2IEBAIGdu dHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9j b3B5YmFjazsKICAgICAgICAgfQogCi0gICAgICAgIHBhZ2VfbGlzdF9hZGRf dGFpbChwYWdlLCAmZS0+cGFnZV9saXN0KTsKLSAgICAgICAgcGFnZV9zZXRf b3duZXIocGFnZSwgZSk7Ci0KLSAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBh Z2VfYWxsb2NfbG9jayk7CiAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1mbik7 CiAKICAgICAgICAgVFJBQ0VfMUQoVFJDX01FTV9QQUdFX0dSQU5UX1RSQU5T RkVSLCBlLT5kb21haW5faWQpOwpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9t ZW1vcnkuYyBiL3hlbi9jb21tb24vbWVtb3J5LmMKaW5kZXggNGZiNzk2MmM3 OS4uZjcxMTYzMjIxZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnku YworKysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC02NzUsMjAgKzY3NSwy MiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hB TkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3QpIGFyZykKICAgICAg ICAgICogU3VjY2VzcyEgQmV5b25kIHRoaXMgcG9pbnQgd2UgY2Fubm90IGZh aWwgZm9yIHRoaXMgY2h1bmsuCiAgICAgICAgICAqLwogCi0gICAgICAgIC8q IERlc3Ryb3kgZmluYWwgcmVmZXJlbmNlIHRvIGVhY2ggaW5wdXQgcGFnZS4g Ki8KKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlc2UgcGFnZXMgaGF2ZSBh bHJlYWR5IGhhZCBvd25lciBhbmQgcmVmZXJlbmNlIGNsZWFyZWQuCisgICAg ICAgICAqIERvIHRoZSBmaW5hbCB0d28gc3RlcHM6IFJlbW92ZSBmcm9tIHRo ZSBwaHlzbWFwLCBhbmQgZnJlZQorICAgICAgICAgKiB0aGVtLgorICAgICAg ICAgKi8KICAgICAgICAgd2hpbGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1v dmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAgICAgewogICAgICAg ICAgICAgdW5zaWduZWQgbG9uZyBnZm47CiAKLSAgICAgICAgICAgIGlmICgg IXRlc3RfYW5kX2NsZWFyX2JpdChfUEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNv dW50X2luZm8pICkKLSAgICAgICAgICAgICAgICBCVUcoKTsKICAgICAgICAg ICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAgICAgICAgICAgZ2Zu ID0gbWZuX3RvX2dtZm4oZCwgbWZuX3gobWZuKSk7CiAgICAgICAgICAgICAv KiBQYWdlcyB3ZXJlIHVuc2hhcmVkIGFib3ZlICovCiAgICAgICAgICAgICBC VUdfT04oU0hBUkVEX00yUChnZm4pKTsKICAgICAgICAgICAgIGlmICggZ3Vl c3RfcGh5c21hcF9yZW1vdmVfcGFnZShkLCBfZ2ZuKGdmbiksIG1mbiwgMCkg KQogICAgICAgICAgICAgICAgIGRvbWFpbl9jcmFzaChkKTsKLSAgICAgICAg ICAgIHB1dF9wYWdlKHBhZ2UpOworICAgICAgICAgICAgZnJlZV9kb21oZWFw X3BhZ2UocGFnZSk7CiAgICAgICAgIH0KIAogICAgICAgICAvKiBBc3NpZ24g ZWFjaCBvdXRwdXQgcGFnZSB0byB0aGUgZG9tYWluLiAqLwpAQCAtNzYxLDEz ICs3NjMsMTYgQEAgc3RhdGljIGxvbmcgbWVtb3J5X2V4Y2hhbmdlKFhFTl9H VUVTVF9IQU5ETEVfUEFSQU0oeGVuX21lbW9yeV9leGNoYW5nZV90KSBhcmcp CiAgICAgICogY2h1bmtzIHN1Y2NlZWRlZC4KICAgICAgKi8KICBmYWlsOgot ICAgIC8qIFJlYXNzaWduIGFueSBpbnB1dCBwYWdlcyB3ZSBtYW5hZ2VkIHRv IHN0ZWFsLiAqLworICAgIC8qCisgICAgICogUmVhc3NpZ24gYW55IGlucHV0 IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3RlYWwuICBOQiB0aGF0IGlmIHRoZSBh c3NpZ24KKyAgICAgKiBmYWlscyBhZ2Fpbiwgd2UncmUgb24gdGhlIGhvb2sg Zm9yIGZyZWVpbmcgdGhlIHBhZ2UsIHNpbmNlIHdlJ3ZlIGFscmVhZHkKKyAg ICAgKiBjbGVhcmVkIFBHQ19hbGxvY2F0ZWQuCisgICAgICovCiAgICAgd2hp bGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtf bGlzdCkpICkKICAgICAgICAgaWYgKCBhc3NpZ25fcGFnZXMoZCwgcGFnZSwg MCwgTUVNRl9ub19yZWZjb3VudCkgKQogICAgICAgICB7CiAgICAgICAgICAg ICBCVUdfT04oIWQtPmlzX2R5aW5nKTsKLSAgICAgICAgICAgIGlmICggdGVz dF9hbmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRf aW5mbykgKQotICAgICAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOworICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIH0K IAogIGR5aW5nOgpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9wYWdlX2FsbG9j LmMgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwppbmRleCA0ODJmMDk4OGY3 Li41MmRhNzc2MmUzIDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL3BhZ2VfYWxs b2MuYworKysgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwpAQCAtMjIyMSw3 ICsyMjIxLDcgQEAgaW50IGFzc2lnbl9wYWdlcygKICAgICBmb3IgKCBpID0g MDsgaSA8ICgxIDw8IG9yZGVyKTsgaSsrICkKICAgICB7CiAgICAgICAgIEFT U0VSVChwYWdlX2dldF9vd25lcigmcGdbaV0pID09IE5VTEwpOwotICAgICAg ICBBU1NFUlQoKHBnW2ldLmNvdW50X2luZm8gJiB+KFBHQ19hbGxvY2F0ZWQg fCAxKSkgPT0gMCk7CisgICAgICAgIEFTU0VSVCghcGdbaV0uY291bnRfaW5m byk7CiAgICAgICAgIHBhZ2Vfc2V0X293bmVyKCZwZ1tpXSwgZCk7CiAgICAg ICAgIHNtcF93bWIoKTsgLyogRG9tYWluIHBvaW50ZXIgbXVzdCBiZSB2aXNp YmxlIGJlZm9yZSB1cGRhdGluZyByZWZjbnQuICovCiAgICAgICAgIHBnW2ld LmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwgMTsKLS0gCjIuMjAuMQoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:25:27 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:25:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h197j-0004IU-B4; Tue, 05 Mar 2019 12:24:43 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h197g-0004Gd-UN for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:24:41 +0000 X-Inumbo-ID: a39837a8-3f41-11e9-997b-5307752f89c7 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id a39837a8-3f41-11e9-997b-5307752f89c7; Tue, 05 Mar 2019 12:24:36 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h197Q-0001q5-3n; Tue, 05 Mar 2019 12:24:24 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h197Q-00049g-17; Tue, 05 Mar 2019 12:24:24 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:24:24 +0000 Subject: [Xen-announce] Xen Security Advisory 290 v2 - missing preemption in x86 PV page table unvalidation X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-290 version 2 missing preemption in x86 PV page table unvalidation UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= XSA-273 changes required, among other things, making any PTE updates restartable. The changes making PTE updates restartable assumed that L2 pagetables would always be promoted preemptibly; but this turns out not to be the case when using the 'linear pagetable' feature; the result was that interrupted operations are not handled properly in certain cases. Furthermore, previous security work making pagetable update preemptible failed to account for 'linear pagetables' at L3 and L4 levels, making it possible for operations to run for longer than acceptable times. IMPACT ====== Malicious or buggy x86 PV guest kernels can mount a Denial of Service (DoS) attack affecting the whole system. VULNERABLE SYSTEMS ================== All Xen versions are vulnerable. Only x86 systems are affected. ARM systems are not affected. Only Xen versions which permit linear page table use by PV guests are vulnerable. Only x86 PV guests can leverage this vulnerability. x86 HVM guests cannot leverage this vulnerability. MITIGATION ========== Not permitting linear page table use by PV guests avoids the vulnerability. This can be done both at build time, by turning off the PV_LINEAR_PT configure option, or at runtime, by passing specifying "pv-linear-pt=0" on the hypervisor command line. Doing so would, however, render PV guests using the functionality, like NetBSD, unusable. On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels which only issue sane hypercalls will prevent untrusted guest users from exploiting this issue. However untrusted guest administrators can still trigger it unless further steps are taken to prevent them from loading code into the kernel (e.g by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. Running only HVM guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Manuel Bouyer. RESOLUTION ========== Applying the appropriate pair of attached patches resolves this issue. xsa290/unstable-?.patch xen-unstable xsa290/4.11-?.patch Xen 4.11.x xsa290/4.10-?.patch Xen 4.10.x xsa290/4.9-?.patch Xen 4.9.x xsa290/4.8-?.patch Xen 4.8.x xsa290/4.7-?.patch Xen 4.7.x $ sha256sum xsa290* xsa290*/* e74014bf97f223f35dc6142fbfadd8a3df6c7ecf1818d5d04ebb717a1d600959 xsa290.meta 87ffaf9712bfd2283e845d168811e572b9ebc8a580e750128586a48e65ae4c67 xsa290/4.7-1.patch 4137eb15d963a77ff302cb65f9f04e402ea23f69042f89ece4baaf4b7a58d638 xsa290/4.7-2.patch 0f5ce8c13c99431cae69736e117c7420c3202e3a680b42a66027646ae0aa141c xsa290/4.8-1.patch bb4102dd6f3daf60859a88b6a2f0828bc8aeb224d3d3b6fd2d2cc96b3f131a24 xsa290/4.8-2.patch a7e4902968529289c63149608d48e1eeac2feffa644e1337b1b5b9a624dc746d xsa290/4.9-1.patch 7798b063a8db95fc18bca1ea25d84937fbe9c6e0add15056841fd97d5aec2885 xsa290/4.9-2.patch 3a0bf44875bb5a8525b4418d6efd49bd6ed6cfaffe669cbdcfde61a65fe9cdea xsa290/4.10-1.patch 1e7dfe1b0c57e245daef1351db855a9312a4c225c05a6720460ea4aa1148ee22 xsa290/4.10-2.patch 3dd47f3bc1a004260d05cba548a80e475f85ffe60b663879de386e32a8e9ffbc xsa290/4.11-1.patch b3b17546fc553bf60572cf56023d8177f96973fcd072a8adfc622b4030e58d00 xsa290/4.11-2.patch 4ff1d857f46a781fd7483a30297ebf51bf079ccd1d598df799e5779ddc893674 xsa290/unstable-1.patch 3a85ecc426d482052aaf2a84bfde9840eb7a566638dbab042dac84b0019ca473 xsa290/unstable-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or the HVM-only as well as host controlled kernel mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. HOWEVER deployment of the "pv-linear-pt=0" mitigation described above is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because in that case the configuration change is visible to the guest, which could lead to the rediscovery of the vulnerability. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+amwMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZaP0IALeZ9zd5UEHwM2Xq2VTZdJqTW9blhttrJbmfTiSe 7/wtwsMpRIrxycdouWzAZwo3ZFt3Y6qmk+6awkT23ck0OC1zNnMw9ANYdB2XqW+Q NGzz/ExDj+40EeaMcx2ZyNUZGya0yJVorzRSPM68bQAW2XXy1oBevTKqMkr3iSJf I06/J7vtap89F+JjfiBrVXubcjmUvX/MtsD4yz0lckC5Ti07Lcmv0pUGHprxXBgw QlMhgV3qKG3JBa7h0b11UnrpIPdCbwJIWJd/+Pzd4yD9R3ZXRiGyjOd+/zyXVcY7 vCrh2lCP4WpXvrLDUPt8IgJak8cjxZ2JGAxk3yN/QI6Uro0= =/yIK -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa290.meta" Content-Disposition: attachment; filename="xsa290.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTAsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI5MC80LjEwLVsxMl0ucGF0Y2giCiAgICAgICAgICBd CiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7CiAgICAg ICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3Rh YmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3YTljMTY0 NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI4 NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcsCiAgICAgICAg ICAgIDI4OAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjkwLzQuMTEtWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFmMWFjY2Ew YjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjctWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC44IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI5MDhlNzY4ZmFlNDlhOGRiMDA4OWU2ODE4ODY1MjA3OWUz YmZhYTY2IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjgtWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2Rh NzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjktWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICIyNGQ1MjgyNTI3ZjQ2NDc5MDdiMzU3MjgyMGI1MzM1 YzE1Y2QwMzU2IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAg ICAgICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5MC91bnN0YWJsZS1bMTJdLnBhdGNoIgog ICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa290/4.7-1.patch" Content-Disposition: attachment; filename="xsa290/4.7-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkJlc2lkZXMgdGhpcyBoYXZpbmcgYmVjb21lIGEgcmVx dWlyZW1lbnQgYXMgb2YgY29tbWl0IGM2MTI0ODFkMWMKKCJ4ODYvbW06IFBs dW1iaW5nIHRvIGFsbG93IGFueSBQVEUgdXBkYXRlIHRvIGZhaWwgd2l0aCAt RVJFU1RBUlQiKSwKd2hpY2ggYWRkZWQgYW4gYXNzZXJ0aW9uIHRvIGZyZWVf bDJfdGFibGUoKSwgd2hpY2ggd2FzIG5vdyBvYnNlcnZlZCB0bwp0cmlnZ2Vy IHdoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVzIGdldCBjbGVhbmVkIHVwLCBp dCB3YXMgYWxzbyBhIG1pc3Rha2UKdG8gbm90IGV4dGVuZCBwcmVlbXB0aW9u IHRvIEwyIHdoZW4gaXQgd2FzIGFkZGVkIHRvIEwzL0w0IHRhYmxlCmhhbmRs aW5nLiBUaGlzIGlzIGJlY2F1c2UgaW4gdGhlIHJlY3Vyc2l2ZSBwYWdlIHRh YmxlIGNhc2UgZXZlbiB0aGVyZQp0aGUgdGltZSB0YWtlbiB0byB1bnZhbGlk YXRlIGEgc2luZ2xlIHRhYmxlIG1heSBiZSBleGNlc3NpdmUuCgpUaGUgdmFs aWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0IGZvciBzeW1t ZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKUmVwb3J0ZWQtYnk6 IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5vcmc+ClRlc3Rl ZC1ieTogTWFudWVsIEJvdXllciA8Ym91eWVyQGFudGlvY2hlLmV1Lm9yZz4K U2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29t PgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNA Y2l0cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0xMjM5LDcgKzEyMzksNyBAQCBnZXRfcGFn ZV9mcm9tX2wxZSgKIGRlZmluZV9nZXRfbGluZWFyX3BhZ2V0YWJsZShsMik7 CiBzdGF0aWMgaW50CiBnZXRfcGFnZV9mcm9tX2wyZSgKLSAgICBsMl9wZ2Vu dHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwgc3RydWN0IGRvbWFpbiAq ZCkKKyAgICBsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwg c3RydWN0IGRvbWFpbiAqZCwgaW50IHBhcnRpYWwpCiB7CiAgICAgdW5zaWdu ZWQgbG9uZyBtZm4gPSBsMmVfZ2V0X3BmbihsMmUpOwogICAgIGludCByYzsK QEAgLTEyNTUsNyArMTI1NSw4IEBAIGdldF9wYWdlX2Zyb21fbDJlKAogCiAg ICAgaWYgKCAhKGwyZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BTRSkgKQog ICAgIHsKLSAgICAgICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX3Bh Z2VucihtZm4sIFBHVF9sMV9wYWdlX3RhYmxlLCBkLCAwLCAwKTsKKyAgICAg ICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX3BhZ2VucihtZm4sIFBH VF9sMV9wYWdlX3RhYmxlLCBkLAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHBhcnRpYWwsIDApOwogICAgICAgICBpZiAo IHVubGlrZWx5KHJjID09IC1FSU5WQUwpICYmIGdldF9sMl9saW5lYXJfcGFn ZXRhYmxlKGwyZSwgcGZuLCBkKSApCiAgICAgICAgICAgICByYyA9IDA7CiAg ICAgICAgIHJldHVybiByYzsKQEAgLTE0NTAsOCArMTQ1MSwxMSBAQCB2b2lk IHB1dF9wYWdlX2Zyb21fbDFlKGwxX3BnZW50cnlfdCBsMWUsCiAgKiBOQi4g VmlydHVhbCBhZGRyZXNzICdsMmUnIG1hcHMgdG8gYSBtYWNoaW5lIGFkZHJl c3Mgd2l0aGluIGZyYW1lICdwZm4nLgogICogTm90ZSBhbHNvIHRoYXQgdGhp cyBhdXRvbWF0aWNhbGx5IGRlYWxzIGNvcnJlY3RseSB3aXRoIGxpbmVhciBw LnQuJ3MuCiAgKi8KLXN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4pCitzdGF0aWMgaW50 IHB1dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVk IGxvbmcgcGZuLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQg cGFydGlhbCwgYm9vbF90IGRlZmVyKQogeworICAgIGludCByYyA9IDA7CisK ICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0VfUFJFU0VO VCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAgICAgIHJl dHVybiAxOwogCkBAIC0xNDYwLDEzICsxNDY0LDI3IEBAIHN0YXRpYyBpbnQg cHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNlCiAgICAg ewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9nZXRfcGFn ZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg MCwgbWZuX3RvX3BhZ2UocGZuKSk7CisgICAgICAgIHN0cnVjdCBwYWdlX2lu Zm8gKnB0cGcgPSBtZm5fdG9fcGFnZShwZm4pOwogCi0gICAgICAgIEFTU0VS VCghcmMpOwotICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIGlmICgg dW5saWtlbHkocGFydGlhbCA+IDApICkKKyAgICAgICAgeworICAgICAgICAg ICAgQVNTRVJUKCFkZWZlcik7CisgICAgICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCAxLCBwdHBnKTsKKyAgICAgICAgfQorICAgICAgICBlbHNl IGlmICggZGVmZXIgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJyZW50 LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gcHRwZzsKKyAgICAgICAgICAgIGN1 cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CisgICAgICAgIH0K KyAgICAgICAgZWxzZQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IF9w dXRfcGFnZV90eXBlKHBnLCAxLCBwdHBnKTsKKyAgICAgICAgICAgIGlmICgg bGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdlKHBnKTsK KyAgICAgICAgfQogICAgIH0KIAotICAgIHJldHVybiAwOworICAgIHJldHVy biByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wzZShsM19w Z2VudHJ5X3QgbDNlLCB1bnNpZ25lZCBsb25nIHBmbiwKQEAgLTE2NDEsMTEg KzE2NTksMTIgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShzdHJ1Y3Qg cGFnZV9pbgogICAgIHVuc2lnbmVkIGxvbmcgIHBmbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgIGwyX3BnZW50cnlfdCAgKnBsMmU7CiAgICAgdW5zaWdu ZWQgaW50ICAgaTsKLSAgICBpbnQgICAgICAgICAgICByYyA9IDA7CisgICAg aW50ICAgICAgICAgICAgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+cGFydGlh bF9wdGU7CiAKICAgICBwbDJlID0gbWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZu KSk7CiAKLSAgICBmb3IgKCBpID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7 IGkgPCBMMl9QQUdFVEFCTEVfRU5UUklFUzsgaSsrICkKKyAgICBmb3IgKCBp ID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVf RU5UUklFUzsKKyAgICAgICAgICBpKyssIHBhcnRpYWwgPSAwICkKICAgICB7 CiAgICAgICAgIGlmICggaSA+IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzICYm IGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkgKQogICAgICAgICB7CkBAIC0x NjU1LDIzICsxNjc0LDMzIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUo c3RydWN0IHBhZ2VfaW4KICAgICAgICAgfQogCiAgICAgICAgIGlmICggIWlz X2d1ZXN0X2wyX3Nsb3QoZCwgdHlwZSwgaSkgfHwKLSAgICAgICAgICAgICAo cmMgPSBnZXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQpKSA+IDAg KQorICAgICAgICAgICAgIChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKHBsMmVb aV0sIHBmbiwgZCwgcGFydGlhbCkpID4gMCApCiAgICAgICAgICAgICBjb250 aW51ZTsKIAotICAgICAgICBpZiAoIHVubGlrZWx5KHJjID09IC1FUkVTVEFS VCkgKQorICAgICAgICBpZiAoIHJjID09IC1FUkVTVEFSVCApCiAgICAgICAg IHsKICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsK LSAgICAgICAgICAgIGJyZWFrOworICAgICAgICAgICAgcGFnZS0+cGFydGlh bF9wdGUgPSBwYXJ0aWFsID86IDE7CiAgICAgICAgIH0KLQotICAgICAgICBp ZiAoIHJjIDwgMCApCisgICAgICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIg JiYgaSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKKyAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gMDsKKyAgICAgICAgICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICB9 CisgICAgICAgIGVsc2UgaWYgKCByYyA8IDAgJiYgcmMgIT0gLUVJTlRSICkK ICAgICAgICAgewogICAgICAgICAgICAgTUVNX0xPRygiRmFpbHVyZSBpbiBh bGxvY19sMl90YWJsZTogZW50cnkgJWQiLCBpKTsKLSAgICAgICAgICAgIHdo aWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAgaWYgKCBpc19ndWVz dF9sMl9zbG90KGQsIHR5cGUsIGkpICkKLSAgICAgICAgICAgICAgICAgICAg cHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKTsKLSAgICAgICAgICAg IGJyZWFrOworICAgICAgICAgICAgaWYgKCBpICkKKyAgICAgICAgICAgIHsK KyAgICAgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7 CisgICAgICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSAwOworICAg ICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBO VUxMOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGFnZTsKKyAgICAgICAgICAgIH0KICAgICAgICAgfQorICAg ICAgICBpZiAoIHJjIDwgMCApCisgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBhZGp1c3RfZ3Vlc3RfbDJlKHBsMmVbaV0sIGQpOwogICAgIH0KQEAg LTE4OTMsMjggKzE5MjIsNTAgQEAgc3RhdGljIGludCBmcmVlX2wyX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogICAgIHN0cnVjdCBkb21haW4gKmQgPSBwYWdl X2dldF9vd25lcihwYWdlKTsKICAgICB1bnNpZ25lZCBsb25nIHBmbiA9IHBh Z2VfdG9fbWZuKHBhZ2UpOwogICAgIGwyX3BnZW50cnlfdCAqcGwyZTsKLSAg ICB1bnNpZ25lZCBpbnQgIGkgPSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyAt IDE7Ci0gICAgaW50IGVyciA9IDA7CisgICAgaW50IHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOworICAgIHVuc2lnbmVkIGludCBpID0g cGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgLSAhcGFydGlhbDsKIAogICAgIHBs MmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4pKTsKIAotICAgIEFTU0VS VChwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyk7Ci0gICAgZG8gewotICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8sIGkpICYmCi0gICAgICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUo cGwyZVtpXSwgcGZuKSA9PSAwICYmCi0gICAgICAgICAgICAgaSAmJiBoeXBl cmNhbGxfcHJlZW1wdF9jaGVjaygpICkKKyAgICBmb3IgKCA7IDsgKQorICAg IHsKKyAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHBhZ2UtPnUu aW51c2UudHlwZV9pbmZvLCBpKSApCisgICAgICAgICAgICByYyA9IHB1dF9w YWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgcGFydGlhbCwgMCk7CisgICAg ICAgIGlmICggcmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAg ICAgIHBhcnRpYWwgPSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAg ICAgICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVl bXB0X2NoZWNrKCkgKQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNU QVJUOworICAgICAgICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBi cmVhazsKICAgICAgICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSAp OworICAgIH0KIAogICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0g ICAgaWYgKCAhZXJyICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAg ICAgICAgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVu X2wyOworICAgICAgICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCBy YyA9PSAtRVJFU1RBUlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFs aWRhdGVkX3B0ZXMgPSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9 IHBhcnRpYWwgPzogLTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAt RUlOVFIgJiYgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAg eworICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOwor ICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0g LUVSRVNUQVJUOworICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0 dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTIyMzksNyArMjI5MCw3IEBAIHN0YXRp YyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAg ICAgIHJldHVybiAtRUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAo IHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwg ZCkpIDwgMCkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9w YWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAg ICAgICAgcmV0dXJuIHJjOwogCiAgICAgICAgIGFkanVzdF9ndWVzdF9sMmUo bmwyZSwgZCk7CkBAIC0yMjU4LDcgKzIzMDksOCBAQCBzdGF0aWMgaW50IG1v ZF9sMl9lbnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgIHJldHVybiAt RUJVU1k7CiAgICAgfQogCi0gICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwg cGZuKTsKKyAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4sIDAsIDEp OworCiAgICAgcmV0dXJuIHJjOwogfQogCg== --=separator Content-Type: application/octet-stream; name="xsa290/4.7-2.patch" Content-Disposition: attachment; filename="xsa290/4.7-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzQxLDYgKzE3NDEsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5NzgsMTggKzE5ODUsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.8-1.patch" Content-Disposition: attachment; filename="xsa290/4.8-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTI0MCw3ICsxMjQwLDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMjU2LDcgKzEyNTYsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9wYWdlbnIobWZuLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7Cisg ICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9wYWdlbnIobWZu LCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAgICAg ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAgIHJj ID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTQ1MSw4ICsxNDUyLDEx IEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwxZSwK ICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1hY2hp bmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFsc28g dGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdpdGgg bGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKK3N0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwyZSwg dW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCByYyA9 IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0Vf UFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAg ICAgIHJldHVybiAxOwogCkBAIC0xNDYxLDEzICsxNDY1LDI3IEBAIHN0YXRp YyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNl CiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9n ZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgZmFsc2UsIG1mbl90b19wYWdlKHBmbikpOworICAgICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UocGZuKTsKIAotICAg ICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0X3BhZ2UocGcpOworICAg ICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAwKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOworICAgICAgICAgICAgcmMg PSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7CisgICAgICAgIH0K KyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IHB0cGc7Cisg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBn OworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgeworICAgICAg ICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7Cisg ICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAg ICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAgICB9CiAKLSAgICByZXR1 cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCkBAIC0xNjQwLDExICsxNjU4LDEyIEBAIHN0YXRpYyBpbnQgYWxsb2Nf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1bnNpZ25lZCBsb25nICBw Zm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2VudHJ5X3QgICpw bDJlOwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAg ICAgcmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21h aW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkr KyApCisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBp IDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0 aWFsID0gMCApCiAgICAgewogICAgICAgICBpZiAoIGkgPiBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewpAQCAtMTY1NCwyMyArMTY3MywzMyBAQCBzdGF0aWMgaW50 IGFsbG9jX2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgICAgIH0KIAog ICAgICAgICBpZiAoICFpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpIHx8 Ci0gICAgICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtp XSwgcGZuLCBkKSkgPiAwICkKKyAgICAgICAgICAgICAocmMgPSBnZXRfcGFn ZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQsIHBhcnRpYWwpKSA+IDAgKQog ICAgICAgICAgICAgY29udGludWU7CiAKLSAgICAgICAgaWYgKCB1bmxpa2Vs eShyYyA9PSAtRVJFU1RBUlQpICkKKyAgICAgICAgaWYgKCByYyA9PSAtRVJF U1RBUlQgKQogICAgICAgICB7CiAgICAgICAgICAgICBwYWdlLT5ucl92YWxp ZGF0ZWRfcHRlcyA9IGk7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAg ICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAxOwogICAgICAg ICB9Ci0KLSAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICBlbHNlIGlm ICggcmMgPT0gLUVJTlRSICYmIGkgKQorICAgICAgICB7CisgICAgICAgICAg ICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICBw YWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICggcmMgPCAwICYm IHJjICE9IC1FSU5UUiApCiAgICAgICAgIHsKICAgICAgICAgICAgIE1FTV9M T0coIkZhaWx1cmUgaW4gYWxsb2NfbDJfdGFibGU6IGVudHJ5ICVkIiwgaSk7 Ci0gICAgICAgICAgICB3aGlsZSAoIGktLSA+IDAgKQotICAgICAgICAgICAg ICAgIGlmICggaXNfZ3Vlc3RfbDJfc2xvdChkLCB0eXBlLCBpKSApCi0gICAg ICAgICAgICAgICAgICAgIHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBm bik7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAgICAgIGlmICggaSAp CisgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgcGFnZS0+bnJfdmFs aWRhdGVkX3B0ZXMgPSBpOworICAgICAgICAgICAgICAgIHBhZ2UtPnBhcnRp YWxfcHRlID0gMDsKKyAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9s ZF9ndWVzdF9wdHBnID0gTlVMTDsKKyAgICAgICAgICAgICAgICBjdXJyZW50 LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CisgICAgICAgICAgICB9 CiAgICAgICAgIH0KKyAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICAg ICAgYnJlYWs7CiAKICAgICAgICAgYWRqdXN0X2d1ZXN0X2wyZShwbDJlW2ld LCBkKTsKICAgICB9CkBAIC0xODkyLDI4ICsxOTIxLDUwIEBAIHN0YXRpYyBp bnQgZnJlZV9sMl90YWJsZShzdHJ1Y3QgcGFnZV9pbmYKICAgICBzdHJ1Y3Qg ZG9tYWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CiAgICAgdW5zaWdu ZWQgbG9uZyBwZm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2Vu dHJ5X3QgKnBsMmU7Ci0gICAgdW5zaWduZWQgaW50ICBpID0gcGFnZS0+bnJf dmFsaWRhdGVkX3B0ZXMgLSAxOwotICAgIGludCBlcnIgPSAwOworICAgIGlu dCByYyA9IDAsIHBhcnRpYWwgPSBwYWdlLT5wYXJ0aWFsX3B0ZTsKKyAgICB1 bnNpZ25lZCBpbnQgaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gIXBh cnRpYWw7CiAKICAgICBwbDJlID0gbWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZu KSk7CiAKLSAgICBBU1NFUlQocGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMpOwot ICAgIGRvIHsKLSAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvLCBpKSAmJgotICAgICAgICAgICAgIHB1 dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbikgPT0gMCAmJgotICAgICAg ICAgICAgIGkgJiYgaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg Zm9yICggOyA7ICkKKyAgICB7CisgICAgICAgIGlmICggaXNfZ3Vlc3RfbDJf c2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkgKQorICAgICAg ICAgICAgcmMgPSBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIHBh cnRpYWwsIGZhbHNlKTsKKyAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAg ICAgICAgYnJlYWs7CisKKyAgICAgICAgcGFydGlhbCA9IDA7CisKKyAgICAg ICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAg IGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCiAgICAgICAgIHsK LSAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwotICAg ICAgICAgICBlcnIgPSAtRVJFU1RBUlQ7CisgICAgICAgICAgICByYyA9IC1F SU5UUjsKKyAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9Ci0gICAgfSB3 aGlsZSAoICFlcnIgJiYgaS0tICk7CisgICAgfQogCiAgICAgdW5tYXBfZG9t YWluX3BhZ2UocGwyZSk7CiAKLSAgICBpZiAoICFlcnIgKQorICAgIGlmICgg cmMgPj0gMCApCisgICAgewogICAgICAgICBwYWdlLT51LmludXNlLnR5cGVf aW5mbyAmPSB+UEdUX3BhZV94ZW5fbDI7CisgICAgICAgIHJjID0gMDsKKyAg ICB9CisgICAgZWxzZSBpZiAoIHJjID09IC1FUkVTVEFSVCApCisgICAgewor ICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAg IHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAtMTsKKyAgICB9Cisg ICAgZWxzZSBpZiAoIHJjID09IC1FSU5UUiAmJiBpIDwgTDJfUEFHRVRBQkxF X0VOVFJJRVMgLSAxICkKKyAgICB7CisgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaSArIDE7CisgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gMDsKKyAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgfQogCi0gICAg cmV0dXJuIGVycjsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQg ZnJlZV9sM190YWJsZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlKQpAQCAtMjIz OCw3ICsyMjg5LDcgQEAgc3RhdGljIGludCBtb2RfbDJfZW50cnkobDJfcGdl bnRyeV90ICpwbAogICAgICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICAg ICAgfQogCi0gICAgICAgIGlmICggdW5saWtlbHkoKHJjID0gZ2V0X3BhZ2Vf ZnJvbV9sMmUobmwyZSwgcGZuLCBkKSkgPCAwKSApCisgICAgICAgIGlmICgg dW5saWtlbHkoKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUobmwyZSwgcGZuLCBk LCAwKSkgPCAwKSApCiAgICAgICAgICAgICByZXR1cm4gcmM7CiAKICAgICAg ICAgYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBkKTsKQEAgLTIyNTcsNyArMjMw OCw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAq cGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICB9CiAKLSAgICBwdXRf cGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOworICAgIHB1dF9wYWdlX2Zyb21f bDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisKICAgICByZXR1cm4gcmM7CiB9 CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.8-2.patch" Content-Disposition: attachment; filename="xsa290/4.8-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzQwLDYgKzE3NDAsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5NzcsMTggKzE5ODQsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.9-1.patch" Content-Disposition: attachment; filename="xsa290/4.9-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTI2MSw3ICsxMjYxLDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMjc4LDcgKzEyNzgsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9wYWdlbnIobWZuLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7Cisg ICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9wYWdlbnIobWZu LCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAgICAg ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAgIHJj ID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTQ3Nyw4ICsxNDc4LDEx IEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwxZSwK ICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1hY2hp bmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFsc28g dGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdpdGgg bGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKK3N0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwyZSwg dW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCByYyA9 IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0Vf UFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAg ICAgIHJldHVybiAxOwogCkBAIC0xNDg3LDEzICsxNDkxLDI3IEBAIHN0YXRp YyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNl CiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9n ZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgZmFsc2UsIG1mbl90b19wYWdlKHBmbikpOworICAgICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UocGZuKTsKIAotICAg ICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0X3BhZ2UocGcpOworICAg ICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAwKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOworICAgICAgICAgICAgcmMg PSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7CisgICAgICAgIH0K KyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IHB0cGc7Cisg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBn OworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgeworICAgICAg ICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7Cisg ICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAg ICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAgICB9CiAKLSAgICByZXR1 cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCkBAIC0xNjY2LDExICsxNjg0LDEyIEBAIHN0YXRpYyBpbnQgYWxsb2Nf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1bnNpZ25lZCBsb25nICBw Zm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2VudHJ5X3QgICpw bDJlOwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAg ICAgcmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21h aW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkr KyApCisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBp IDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0 aWFsID0gMCApCiAgICAgewogICAgICAgICBpZiAoIGkgPiBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewpAQCAtMTY4MCwyMyArMTY5OSwzMyBAQCBzdGF0aWMgaW50 IGFsbG9jX2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgICAgIH0KIAog ICAgICAgICBpZiAoICFpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpIHx8 Ci0gICAgICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtp XSwgcGZuLCBkKSkgPiAwICkKKyAgICAgICAgICAgICAocmMgPSBnZXRfcGFn ZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQsIHBhcnRpYWwpKSA+IDAgKQog ICAgICAgICAgICAgY29udGludWU7CiAKLSAgICAgICAgaWYgKCB1bmxpa2Vs eShyYyA9PSAtRVJFU1RBUlQpICkKKyAgICAgICAgaWYgKCByYyA9PSAtRVJF U1RBUlQgKQogICAgICAgICB7CiAgICAgICAgICAgICBwYWdlLT5ucl92YWxp ZGF0ZWRfcHRlcyA9IGk7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAg ICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAxOwogICAgICAg ICB9Ci0KLSAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICBlbHNlIGlm ICggcmMgPT0gLUVJTlRSICYmIGkgKQorICAgICAgICB7CisgICAgICAgICAg ICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICBw YWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICggcmMgPCAwICYm IHJjICE9IC1FSU5UUiApCiAgICAgICAgIHsKICAgICAgICAgICAgIGdkcHJp bnRrKFhFTkxPR19XQVJOSU5HLCAiRmFpbHVyZSBpbiBhbGxvY19sMl90YWJs ZTogc2xvdCAlI3hcbiIsIGkpOwotICAgICAgICAgICAgd2hpbGUgKCBpLS0g PiAwICkKLSAgICAgICAgICAgICAgICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3Qo ZCwgdHlwZSwgaSkgKQotICAgICAgICAgICAgICAgICAgICBwdXRfcGFnZV9m cm9tX2wyZShwbDJlW2ldLCBwZm4pOwotICAgICAgICAgICAgYnJlYWs7Cisg ICAgICAgICAgICBpZiAoIGkgKQorICAgICAgICAgICAgeworICAgICAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CisgICAg ICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBw YWdlOworICAgICAgICAgICAgfQogICAgICAgICB9CisgICAgICAgIGlmICgg cmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOwogCiAgICAgICAgIGFkanVz dF9ndWVzdF9sMmUocGwyZVtpXSwgZCk7CiAgICAgfQpAQCAtMTkxOSwyOCAr MTk0OCw1MCBAQCBzdGF0aWMgaW50IGZyZWVfbDJfdGFibGUoc3RydWN0IHBh Z2VfaW5mCiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBhZ2VfZ2V0X293bmVy KHBhZ2UpOwogICAgIHVuc2lnbmVkIGxvbmcgcGZuID0gcGFnZV90b19tZm4o cGFnZSk7CiAgICAgbDJfcGdlbnRyeV90ICpwbDJlOwotICAgIHVuc2lnbmVk IGludCAgaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gMTsKLSAgICBp bnQgZXJyID0gMDsKKyAgICBpbnQgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+ cGFydGlhbF9wdGU7CisgICAgdW5zaWduZWQgaW50IGkgPSBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAtICFwYXJ0aWFsOwogCiAgICAgcGwyZSA9IG1hcF9k b21haW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgQVNTRVJUKHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzKTsKLSAgICBkbyB7Ci0gICAgICAgIGlmICggaXNf Z3Vlc3RfbDJfc2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkg JiYKLSAgICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBw Zm4pID09IDAgJiYKLSAgICAgICAgICAgICBpICYmIGh5cGVyY2FsbF9wcmVl bXB0X2NoZWNrKCkgKQorICAgIGZvciAoIDsgOyApCisgICAgeworICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8sIGkpICkKKyAgICAgICAgICAgIHJjID0gcHV0X3BhZ2VfZnJvbV9s MmUocGwyZVtpXSwgcGZuLCBwYXJ0aWFsLCBmYWxzZSk7CisgICAgICAgIGlm ICggcmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAgIHBh cnRpYWwgPSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAgICAg ICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNUQVJUOwor ICAgICAgICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBicmVhazsK ICAgICAgICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSApOworICAg IH0KIAogICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0gICAgaWYg KCAhZXJyICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAgICAgICAg cGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVuX2wyOwor ICAgICAgICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAt RVJFU1RBUlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXMgPSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IHBhcnRp YWwgPzogLTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIg JiYgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAgeworICAg ICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOworICAgICAg ICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0gLUVSRVNU QVJUOworICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0dXJuIHJj OwogfQogCiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0IHBhZ2Vf aW5mbyAqcGFnZSkKQEAgLTIyNjcsNyArMjMxOCw3IEBAIHN0YXRpYyBpbnQg bW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgICAgIHJl dHVybiAtRUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAoIHVubGlr ZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCkpIDwg MCkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zy b21fbDJlKG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAgICAgICAg cmV0dXJuIHJjOwogCiAgICAgICAgIGFkanVzdF9ndWVzdF9sMmUobmwyZSwg ZCk7CkBAIC0yMjg2LDcgKzIzMzcsOCBAQCBzdGF0aWMgaW50IG1vZF9sMl9l bnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgIHJldHVybiAtRUJVU1k7 CiAgICAgfQogCi0gICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwgcGZuKTsK KyAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4sIDAsIHRydWUpOwor CiAgICAgcmV0dXJuIHJjOwogfQogCg== --=separator Content-Type: application/octet-stream; name="xsa290/4.9-2.patch" Content-Disposition: attachment; filename="xsa290/4.9-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzY2LDYgKzE3NjYsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTIwMDQsMTggKzIwMTEsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.10-1.patch" Content-Disposition: attachment; filename="xsa290/4.10-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTE2OCw3ICsxMTY4LDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMTg1LDcgKzExODUsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9tZm4oX21mbihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7 CisgICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9tZm4oX21m bihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAg ICAgICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wy X2xpbmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAg IHJjID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTMyNiw4ICsxMzI3 LDExIEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwx ZSwKICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1h Y2hpbmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFs c28gdGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdp dGggbGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9m cm9tX2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikK K3N0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwy ZSwgdW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCBy YyA9IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BB R0VfUFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAg ICAgICAgIHJldHVybiAxOwogCkBAIC0xMzQyLDEzICsxMzQ2LDI3IEBAIHN0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBl bHNlCiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwy ZV9nZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2Vf dHlwZShwZywgZmFsc2UsIG1mbl90b19wYWdlKF9tZm4ocGZuKSkpOworICAg ICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UoX21m bihwZm4pKTsKIAotICAgICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0 X3BhZ2UocGcpOworICAgICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAw KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOwor ICAgICAgICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRw Zyk7CisgICAgICAgIH0KKyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAg ICAgICAgeworICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3Rf cHRwZyA9IHB0cGc7CisgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9n dWVzdF90YWJsZSA9IHBnOworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAg ICAgICAgeworICAgICAgICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg dHJ1ZSwgcHRwZyk7CisgICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkK KyAgICAgICAgICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAg ICB9CiAKLSAgICByZXR1cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwg dW5zaWduZWQgbG9uZyBwZm4sCkBAIC0xNTE4LDExICsxNTM2LDEyIEBAIHN0 YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1 bnNpZ25lZCBsb25nICBwZm4gPSBtZm5feChwYWdlX3RvX21mbihwYWdlKSk7 CiAgICAgbDJfcGdlbnRyeV90ICAqcGwyZTsKICAgICB1bnNpZ25lZCBpbnQg ICBpOwotICAgIGludCAgICAgICAgICAgIHJjID0gMDsKKyAgICBpbnQgICAg ICAgICAgICByYyA9IDAsIHBhcnRpYWwgPSBwYWdlLT5wYXJ0aWFsX3B0ZTsK IAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4pKTsKIAot ICAgIGZvciAoIGkgPSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwy X1BBR0VUQUJMRV9FTlRSSUVTOyBpKysgKQorICAgIGZvciAoIGkgPSBwYWdl LT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVT OworICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsKICAgICAg ICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYgaHlwZXJj YWxsX3ByZWVtcHRfY2hlY2soKSApCiAgICAgICAgIHsKQEAgLTE1MzIsMjMg KzE1NTEsMzMgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShzdHJ1Y3Qg cGFnZV9pbgogICAgICAgICB9CiAKICAgICAgICAgaWYgKCAhaXNfZ3Vlc3Rf bDJfc2xvdChkLCB0eXBlLCBpKSB8fAotICAgICAgICAgICAgIChyYyA9IGdl dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgZCkpID4gMCApCisgICAg ICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZu LCBkLCBwYXJ0aWFsKSkgPiAwICkKICAgICAgICAgICAgIGNvbnRpbnVlOwog Ci0gICAgICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVSRVNUQVJUKSApCisg ICAgICAgIGlmICggcmMgPT0gLUVSRVNUQVJUICkKICAgICAgICAgewogICAg ICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwotICAgICAg ICAgICAgYnJlYWs7CisgICAgICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9 IHBhcnRpYWwgPzogMTsKICAgICAgICAgfQotCi0gICAgICAgIGlmICggcmMg PCAwICkKKyAgICAgICAgZWxzZSBpZiAoIHJjID09IC1FSU5UUiAmJiBpICkK KyAgICAgICAgeworICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0 ZXMgPSBpOworICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSAwOwor ICAgICAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgICAgIH0KKyAgICAg ICAgZWxzZSBpZiAoIHJjIDwgMCAmJiByYyAhPSAtRUlOVFIgKQogICAgICAg ICB7CiAgICAgICAgICAgICBnZHByaW50ayhYRU5MT0dfV0FSTklORywgIkZh aWx1cmUgaW4gYWxsb2NfbDJfdGFibGU6IHNsb3QgJSN4XG4iLCBpKTsKLSAg ICAgICAgICAgIHdoaWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAg aWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpICkKLSAgICAgICAg ICAgICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKTsK LSAgICAgICAgICAgIGJyZWFrOworICAgICAgICAgICAgaWYgKCBpICkKKyAg ICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9w dGUgPSAwOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1 ZXN0X3B0cGcgPSBOVUxMOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFy Y2gub2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsKKyAgICAgICAgICAgIH0KICAg ICAgICAgfQorICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAgICAgICBi cmVhazsKIAogICAgICAgICBwbDJlW2ldID0gYWRqdXN0X2d1ZXN0X2wyZShw bDJlW2ldLCBkKTsKICAgICB9CkBAIC0xODI4LDI4ICsxODU3LDUwIEBAIHN0 YXRpYyBpbnQgZnJlZV9sMl90YWJsZShzdHJ1Y3QgcGFnZV9pbmYKICAgICBz dHJ1Y3QgZG9tYWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CiAgICAg dW5zaWduZWQgbG9uZyBwZm4gPSBtZm5feChwYWdlX3RvX21mbihwYWdlKSk7 CiAgICAgbDJfcGdlbnRyeV90ICpwbDJlOwotICAgIHVuc2lnbmVkIGludCAg aSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gMTsKLSAgICBpbnQgZXJy ID0gMDsKKyAgICBpbnQgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+cGFydGlh bF9wdGU7CisgICAgdW5zaWduZWQgaW50IGkgPSBwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyAtICFwYXJ0aWFsOwogCiAgICAgcGwyZSA9IG1hcF9kb21haW5f cGFnZShfbWZuKHBmbikpOwogCi0gICAgQVNTRVJUKHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzKTsKLSAgICBkbyB7Ci0gICAgICAgIGlmICggaXNfZ3Vlc3Rf bDJfc2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkgJiYKLSAg ICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4pID09 IDAgJiYKLSAgICAgICAgICAgICBpICYmIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQorICAgIGZvciAoIDsgOyApCisgICAgeworICAgICAgICBpZiAo IGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8s IGkpICkKKyAgICAgICAgICAgIHJjID0gcHV0X3BhZ2VfZnJvbV9sMmUocGwy ZVtpXSwgcGZuLCBwYXJ0aWFsLCBmYWxzZSk7CisgICAgICAgIGlmICggcmMg PCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAgIHBhcnRpYWwg PSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAgICAgICBicmVh azsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkg KQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9w dGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNUQVJUOworICAgICAg ICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBicmVhazsKICAgICAg ICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSApOworICAgIH0KIAog ICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0gICAgaWYgKCAhZXJy ICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAgICAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVuX2wyOworICAgICAg ICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRVJFU1RB UlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMg PSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IHBhcnRpYWwgPzog LTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIgJiYgaSA8 IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAgeworICAgICAgICBw YWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOworICAgICAgICBwYWdl LT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0gLUVSRVNUQVJUOwor ICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0dXJuIHJjOwogfQog CiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0IHBhZ2VfaW5mbyAq cGFnZSkKQEAgLTIxMTUsNyArMjE2Niw3IEBAIHN0YXRpYyBpbnQgbW9kX2wy X2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgICAgIHJldHVybiAt RUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAoIHVubGlrZWx5KChy YyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCkpIDwgMCkgKQor ICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJl KG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAgICAgICAgcmV0dXJu IHJjOwogCiAgICAgICAgIG5sMmUgPSBhZGp1c3RfZ3Vlc3RfbDJlKG5sMmUs IGQpOwpAQCAtMjEzNCw3ICsyMTg1LDggQEAgc3RhdGljIGludCBtb2RfbDJf ZW50cnkobDJfcGdlbnRyeV90ICpwbAogICAgICAgICByZXR1cm4gLUVCVVNZ OwogICAgIH0KIAotICAgIHB1dF9wYWdlX2Zyb21fbDJlKG9sMmUsIHBmbik7 CisgICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwgcGZuLCAwLCB0cnVlKTsK KwogICAgIHJldHVybiByYzsKIH0KIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.10-2.patch" Content-Disposition: attachment; filename="xsa290/4.10-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNjEyLDYgKzE2MTIsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5MTMsMTUgKzE5MjAsMjUgQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBsM2VbaV0s IHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMgPCAwICkKICAg ICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwgPSAwOwotICAg ICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250aW51ZTsKLSAg ICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShwbDNlW2ldLCBk KTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlmICggcmMgPT0g MCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3RfZ3Vlc3RfbDNl KHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0 X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IC1FSU5U UjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9CisgICAgfQogCiAg ICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.11-1.patch" Content-Disposition: attachment; filename="xsa290/4.11-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTEyNiw3ICsxMTI2LDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMTQxLDcgKzExNDEsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK ICAgICAgICAgcmV0dXJuIC1FSU5WQUw7CiAgICAgfQogCi0gICAgcmMgPSBn ZXRfcGFnZV9hbmRfdHlwZV9mcm9tX21mbihfbWZuKG1mbiksIFBHVF9sMV9w YWdlX3RhYmxlLCBkLCAwLCAwKTsKKyAgICByYyA9IGdldF9wYWdlX2FuZF90 eXBlX2Zyb21fbWZuKF9tZm4obWZuKSwgUEdUX2wxX3BhZ2VfdGFibGUsIGQs CisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFs LCBmYWxzZSk7CiAgICAgaWYgKCB1bmxpa2VseShyYyA9PSAtRUlOVkFMKSAm JiBnZXRfbDJfbGluZWFyX3BhZ2V0YWJsZShsMmUsIHBmbiwgZCkgKQogICAg ICAgICByYyA9IDA7CiAKQEAgLTEyOTUsOCArMTI5NiwxMSBAQCB2b2lkIHB1 dF9wYWdlX2Zyb21fbDFlKGwxX3BnZW50cnlfdCBsMWUsCiAgKiBOQi4gVmly dHVhbCBhZGRyZXNzICdsMmUnIG1hcHMgdG8gYSBtYWNoaW5lIGFkZHJlc3Mg d2l0aGluIGZyYW1lICdwZm4nLgogICogTm90ZSBhbHNvIHRoYXQgdGhpcyBh dXRvbWF0aWNhbGx5IGRlYWxzIGNvcnJlY3RseSB3aXRoIGxpbmVhciBwLnQu J3MuCiAgKi8KLXN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdl bnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4pCitzdGF0aWMgaW50IHB1 dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxv bmcgcGZuLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQgcGFy dGlhbCwgYm9vbCBkZWZlcikKIHsKKyAgICBpbnQgcmMgPSAwOworCiAgICAg aWYgKCAhKGwyZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BSRVNFTlQpIHx8 IChsMmVfZ2V0X3BmbihsMmUpID09IHBmbikgKQogICAgICAgICByZXR1cm4g MTsKIApAQCAtMTMxMSwxMyArMTMxNSwyNyBAQCBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfCiAgICAgZWxzZQogICAgIHsKICAg ICAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcGcgPSBsMmVfZ2V0X3BhZ2UobDJl KTsKLSAgICAgICAgaW50IHJjID0gX3B1dF9wYWdlX3R5cGUocGcsIGZhbHNl LCBtZm5fdG9fcGFnZShfbWZuKHBmbikpKTsKKyAgICAgICAgc3RydWN0IHBh Z2VfaW5mbyAqcHRwZyA9IG1mbl90b19wYWdlKF9tZm4ocGZuKSk7CiAKLSAg ICAgICAgQVNTRVJUKCFyYyk7Ci0gICAgICAgIHB1dF9wYWdlKHBnKTsKKyAg ICAgICAgaWYgKCB1bmxpa2VseShwYXJ0aWFsID4gMCkgKQorICAgICAgICB7 CisgICAgICAgICAgICBBU1NFUlQoIWRlZmVyKTsKKyAgICAgICAgICAgIHJj ID0gX3B1dF9wYWdlX3R5cGUocGcsIHRydWUsIHB0cGcpOworICAgICAgICB9 CisgICAgICAgIGVsc2UgaWYgKCBkZWZlciApCisgICAgICAgIHsKKyAgICAg ICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBwdHBnOwor ICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBw ZzsKKyAgICAgICAgfQorICAgICAgICBlbHNlCisgICAgICAgIHsKKyAgICAg ICAgICAgIHJjID0gX3B1dF9wYWdlX3R5cGUocGcsIHRydWUsIHB0cGcpOwor ICAgICAgICAgICAgaWYgKCBsaWtlbHkoIXJjKSApCisgICAgICAgICAgICAg ICAgcHV0X3BhZ2UocGcpOworICAgICAgICB9CiAgICAgfQogCi0gICAgcmV0 dXJuIDA7CisgICAgcmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcg cGZuLApAQCAtMTQ4NywxMSArMTUwNSwxMiBAQCBzdGF0aWMgaW50IGFsbG9j X2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgdW5zaWduZWQgbG9uZyAg cGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwogICAgIGwyX3BnZW50 cnlfdCAgKnBsMmU7CiAgICAgdW5zaWduZWQgaW50ICAgaTsKLSAgICBpbnQg ICAgICAgICAgICByYyA9IDA7CisgICAgaW50ICAgICAgICAgICAgcmMgPSAw LCBwYXJ0aWFsID0gcGFnZS0+cGFydGlhbF9wdGU7CiAKICAgICBwbDJlID0g bWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZuKSk7CiAKLSAgICBmb3IgKCBpID0g cGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVfRU5U UklFUzsgaSsrICkKKyAgICBmb3IgKCBpID0gcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVfRU5UUklFUzsKKyAgICAgICAgICBp KyssIHBhcnRpYWwgPSAwICkKICAgICB7CiAgICAgICAgIGlmICggaSA+IHBh Z2UtPm5yX3ZhbGlkYXRlZF9wdGVzICYmIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQogICAgICAgICB7CkBAIC0xNTAxLDIzICsxNTIwLDMzIEBAIHN0 YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICAg ICAgfQogCiAgICAgICAgIGlmICggIWlzX2d1ZXN0X2wyX3Nsb3QoZCwgdHlw ZSwgaSkgfHwKLSAgICAgICAgICAgICAocmMgPSBnZXRfcGFnZV9mcm9tX2wy ZShwbDJlW2ldLCBwZm4sIGQpKSA+IDAgKQorICAgICAgICAgICAgIChyYyA9 IGdldF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgZCwgcGFydGlhbCkp ID4gMCApCiAgICAgICAgICAgICBjb250aW51ZTsKIAotICAgICAgICBpZiAo IHVubGlrZWx5KHJjID09IC1FUkVTVEFSVCkgKQorICAgICAgICBpZiAoIHJj ID09IC1FUkVTVEFSVCApCiAgICAgICAgIHsKICAgICAgICAgICAgIHBhZ2Ut Pm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgIGJyZWFrOwor ICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IDE7 CiAgICAgICAgIH0KLQotICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAg IGVsc2UgaWYgKCByYyA9PSAtRUlOVFIgJiYgaSApCisgICAgICAgIHsKKyAg ICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAg ICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIHJj ID0gLUVSRVNUQVJUOworICAgICAgICB9CisgICAgICAgIGVsc2UgaWYgKCBy YyA8IDAgJiYgcmMgIT0gLUVJTlRSICkKICAgICAgICAgewogICAgICAgICAg ICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJGYWlsdXJlIGluIGFsbG9j X2wyX3RhYmxlOiBzbG90ICUjeFxuIiwgaSk7Ci0gICAgICAgICAgICB3aGls ZSAoIGktLSA+IDAgKQotICAgICAgICAgICAgICAgIGlmICggaXNfZ3Vlc3Rf bDJfc2xvdChkLCB0eXBlLCBpKSApCi0gICAgICAgICAgICAgICAgICAgIHB1 dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbik7Ci0gICAgICAgICAgICBi cmVhazsKKyAgICAgICAgICAgIGlmICggaSApCisgICAgICAgICAgICB7Cisg ICAgICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwor ICAgICAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gTlVM TDsKKyAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90 YWJsZSA9IHBhZ2U7CisgICAgICAgICAgICB9CiAgICAgICAgIH0KKyAgICAg ICAgaWYgKCByYyA8IDAgKQorICAgICAgICAgICAgYnJlYWs7CiAKICAgICAg ICAgcGwyZVtpXSA9IGFkanVzdF9ndWVzdF9sMmUocGwyZVtpXSwgZCk7CiAg ICAgfQpAQCAtMTc5NywyOCArMTgyNiw1MCBAQCBzdGF0aWMgaW50IGZyZWVf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW5mCiAgICAgc3RydWN0IGRvbWFpbiAq ZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOwogICAgIHVuc2lnbmVkIGxvbmcg cGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwogICAgIGwyX3BnZW50 cnlfdCAqcGwyZTsKLSAgICB1bnNpZ25lZCBpbnQgIGkgPSBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAtIDE7Ci0gICAgaW50IGVyciA9IDA7CisgICAgaW50 IHJjID0gMCwgcGFydGlhbCA9IHBhZ2UtPnBhcnRpYWxfcHRlOworICAgIHVu c2lnbmVkIGludCBpID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgLSAhcGFy dGlhbDsKIAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4p KTsKIAotICAgIEFTU0VSVChwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyk7Ci0g ICAgZG8gewotICAgICAgICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFn ZS0+dS5pbnVzZS50eXBlX2luZm8sIGkpICYmCi0gICAgICAgICAgICAgcHV0 X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKSA9PSAwICYmCi0gICAgICAg ICAgICAgaSAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkKKyAgICBm b3IgKCA7IDsgKQorICAgIHsKKyAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9z bG90KGQsIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvLCBpKSApCisgICAgICAg ICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgcGFy dGlhbCwgZmFsc2UpOworICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBwYXJ0aWFsID0gMDsKKworICAgICAg ICBpZiAoICFpLS0gKQorICAgICAgICAgICAgYnJlYWs7CisKKyAgICAgICAg aWYgKCBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkKICAgICAgICAgewot ICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7Ci0gICAg ICAgICAgIGVyciA9IC1FUkVTVEFSVDsKKyAgICAgICAgICAgIHJjID0gLUVJ TlRSOworICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KLSAgICB9IHdo aWxlICggIWVyciAmJiBpLS0gKTsKKyAgICB9CiAKICAgICB1bm1hcF9kb21h aW5fcGFnZShwbDJlKTsKIAotICAgIGlmICggIWVyciApCisgICAgaWYgKCBy YyA+PSAwICkKKyAgICB7CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9p bmZvICY9IH5QR1RfcGFlX3hlbl9sMjsKKyAgICAgICAgcmMgPSAwOworICAg IH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVSRVNUQVJUICkKKyAgICB7Cisg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg cGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IC0xOworICAgIH0KKyAg ICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkgPCBMMl9QQUdFVEFCTEVf RU5UUklFUyAtIDEgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRh dGVkX3B0ZXMgPSBpICsgMTsKKyAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUg PSAwOworICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICB9CiAKLSAgICBy ZXR1cm4gZXJyOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBm cmVlX2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0yMTM4 LDcgKzIxODksNyBAQCBzdGF0aWMgaW50IG1vZF9sMl9lbnRyeShsMl9wZ2Vu dHJ5X3QgKnBsCiAgICAgICAgICAgICByZXR1cm4gLUVCVVNZOwogICAgICAg ICB9CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSgocmMgPSBnZXRfcGFnZV9m cm9tX2wyZShubDJlLCBwZm4sIGQpKSA8IDApICkKKyAgICAgICAgaWYgKCB1 bmxpa2VseSgocmMgPSBnZXRfcGFnZV9mcm9tX2wyZShubDJlLCBwZm4sIGQs IDApKSA8IDApICkKICAgICAgICAgICAgIHJldHVybiByYzsKIAogICAgICAg ICBubDJlID0gYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBkKTsKQEAgLTIxNTcs NyArMjIwOCw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50 cnlfdCAqcGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICB9CiAKLSAg ICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOworICAgIHB1dF9wYWdl X2Zyb21fbDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisKICAgICByZXR1cm4g cmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.11-2.patch" Content-Disposition: attachment; filename="xsa290/4.11-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNTgxLDYgKzE1ODEsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE4ODIsMTUgKzE4ODksMjUgQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBsM2VbaV0s IHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMgPCAwICkKICAg ICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwgPSAwOwotICAg ICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250aW51ZTsKLSAg ICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShwbDNlW2ldLCBk KTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlmICggcmMgPT0g MCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3RfZ3Vlc3RfbDNl KHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0 X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IC1FSU5U UjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9CisgICAgfQogCiAg ICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: application/octet-stream; name="xsa290/unstable-1.patch" Content-Disposition: attachment; filename="xsa290/unstable-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg ZnVsbHkgcHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21t OiBQbHVtYmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndp dGggLUVSRVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7 YWxsb2MsZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVu dCAoYW5kIHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4p dmFsaWRhdGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3Nl cnRpb24gaW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRv IHRyaWdnZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNs ZWFuZWQgdXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkn cyBhc3N1bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdh eXMgc3VjY2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRp YWxseSB1bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGlj aCBoYXMgbm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxh dGVyIG9uLiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwg dGhpcyB3b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAt PnUuaW51c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpm cmVlaW5nIHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21h aW4gaGFzIGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lk ZXJlZCBhIG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlv biBmdWxseSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJs ZSBoYW5kbGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0 LgoKVGhlIHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVz dCBmb3Igc3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJl cG9ydGVkLWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUu b3JnPgpUZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2No ZS5ldS5vcmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+Ci0tLQp2MzogUmUtd3JpdHRlbiBkZXNj cmlwdGlvbi4KdjI6IENsYXJpZnkgdGhhdCBpdCdzIG1haW5seSB1bnZhbGlk YXRpb24gd2hpY2ggbmVlZHMgYWRqdXN0bWVudC4KCi0tLSBhL3hlbi9hcmNo L3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC0xMTIzLDcg KzExMjMsNyBAQCBzdGF0aWMgaW50IGdldF9wYWdlX2FuZF90eXBlX2Zyb21f bWZuKAogZGVmaW5lX2dldF9saW5lYXJfcGFnZXRhYmxlKGwyKTsKIHN0YXRp YyBpbnQKIGdldF9wYWdlX2Zyb21fbDJlKAotICAgIGwyX3BnZW50cnlfdCBs MmUsIHVuc2lnbmVkIGxvbmcgcGZuLCBzdHJ1Y3QgZG9tYWluICpkKQorICAg IGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxvbmcgcGZuLCBzdHJ1Y3Qg ZG9tYWluICpkLCBpbnQgcGFydGlhbCkKIHsKICAgICB1bnNpZ25lZCBsb25n IG1mbiA9IGwyZV9nZXRfcGZuKGwyZSk7CiAgICAgaW50IHJjOwpAQCAtMTEz NSw3ICsxMTM1LDggQEAgZ2V0X3BhZ2VfZnJvbV9sMmUoCiAgICAgICAgIHJl dHVybiAtRUlOVkFMOwogICAgIH0KIAotICAgIHJjID0gZ2V0X3BhZ2VfYW5k X3R5cGVfZnJvbV9tZm4oX21mbihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwg ZCwgMCwgMCk7CisgICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX21m bihfbWZuKG1mbiksIFBHVF9sMV9wYWdlX3RhYmxlLCBkLAorICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgcGFydGlhbCwgZmFsc2UpOwog ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgcmMgPSAw OwogCkBAIC0xMjgxLDggKzEyODIsMTEgQEAgc3RhdGljIHZvaWQgcHV0X2Rh dGFfcGFnZShzdHJ1Y3QgcGFnZV9pbgogICogTkIuIFZpcnR1YWwgYWRkcmVz cyAnbDJlJyBtYXBzIHRvIGEgbWFjaGluZSBhZGRyZXNzIHdpdGhpbiBmcmFt ZSAncGZuJy4KICAqIE5vdGUgYWxzbyB0aGF0IHRoaXMgYXV0b21hdGljYWxs eSBkZWFscyBjb3JyZWN0bHkgd2l0aCBsaW5lYXIgcC50LidzLgogICovCi1z dGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUs IHVuc2lnbmVkIGxvbmcgcGZuKQorc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHBhcnRpYWwsIGJvb2wg ZGVmZXIpCiB7CisgICAgaW50IHJjID0gMDsKKwogICAgIGlmICggIShsMmVf Z2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QUkVTRU5UKSB8fCAobDJlX2dldF9w Zm4obDJlKSA9PSBwZm4pICkKICAgICAgICAgcmV0dXJuIDE7CiAKQEAgLTEz MDAsMTMgKzEzMDQsMjcgQEAgc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wy ZShsMl9wZ2VudHJ5XwogICAgIGVsc2UKICAgICB7CiAgICAgICAgIHN0cnVj dCBwYWdlX2luZm8gKnBnID0gbDJlX2dldF9wYWdlKGwyZSk7Ci0gICAgICAg IGludCByYyA9IF9wdXRfcGFnZV90eXBlKHBnLCBmYWxzZSwgbWZuX3RvX3Bh Z2UoX21mbihwZm4pKSk7CisgICAgICAgIHN0cnVjdCBwYWdlX2luZm8gKnB0 cGcgPSBtZm5fdG9fcGFnZShfbWZuKHBmbikpOwogCi0gICAgICAgIEFTU0VS VCghcmMpOwotICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIGlmICgg dW5saWtlbHkocGFydGlhbCA+IDApICkKKyAgICAgICAgeworICAgICAgICAg ICAgQVNTRVJUKCFkZWZlcik7CisgICAgICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCB0cnVlLCBwdHBnKTsKKyAgICAgICAgfQorICAgICAgICBl bHNlIGlmICggZGVmZXIgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJy ZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gcHRwZzsKKyAgICAgICAgICAg IGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CisgICAgICAg IH0KKyAgICAgICAgZWxzZQorICAgICAgICB7CisgICAgICAgICAgICByYyA9 IF9wdXRfcGFnZV90eXBlKHBnLCB0cnVlLCBwdHBnKTsKKyAgICAgICAgICAg IGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdl KHBnKTsKKyAgICAgICAgfQogICAgIH0KIAotICAgIHJldHVybiAwOworICAg IHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wz ZShsM19wZ2VudHJ5X3QgbDNlLCB1bnNpZ25lZCBsb25nIHBmbiwKQEAgLTE0 ODAsMTEgKzE0OTgsMTIgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShz dHJ1Y3QgcGFnZV9pbgogICAgIHVuc2lnbmVkIGxvbmcgIHBmbiA9IG1mbl94 KHBhZ2VfdG9fbWZuKHBhZ2UpKTsKICAgICBsMl9wZ2VudHJ5X3QgICpwbDJl OwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAgICAg cmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlhbCA9 IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21haW5f cGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5yX3Zh bGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkrKyAp CisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBpIDwg TDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0aWFs ID0gMCApCiAgICAgewogICAgICAgICBsMl9wZ2VudHJ5X3QgbDJlOwogCkBA IC0xNTA3LDIyICsxNTI2LDMyIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDJfdGFi bGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgIHJjID0gLUVSRVNUQVJU OwogICAgICAgICB9CiAgICAgICAgIGVsc2UKLSAgICAgICAgICAgIHJjID0g Z2V0X3BhZ2VfZnJvbV9sMmUobDJlLCBwZm4sIGQpOworICAgICAgICAgICAg cmMgPSBnZXRfcGFnZV9mcm9tX2wyZShsMmUsIHBmbiwgZCwgcGFydGlhbCk7 CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseShyYyA9PSAtRVJFU1RBUlQpICkK KyAgICAgICAgaWYgKCByYyA9PSAtRVJFU1RBUlQgKQogICAgICAgICB7CiAg ICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7Ci0gICAg ICAgICAgICBicmVhazsKKyAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gcGFydGlhbCA/OiAxOwogICAgICAgICB9Ci0KLSAgICAgICAgaWYgKCBy YyA8IDAgKQorICAgICAgICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkg KQorICAgICAgICB7CisgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRf cHRlcyA9IGk7CisgICAgICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7 CisgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICAgICAgfQorICAg ICAgICBlbHNlIGlmICggcmMgPCAwICYmIHJjICE9IC1FSU5UUiApCiAgICAg ICAgIHsKICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLCAi RmFpbHVyZSBpbiBhbGxvY19sMl90YWJsZTogc2xvdCAlI3hcbiIsIGkpOwot ICAgICAgICAgICAgd2hpbGUgKCBpLS0gPiAwICkKLSAgICAgICAgICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgdHlwZSwgaSkgKQotICAgICAg ICAgICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4p OwotICAgICAgICAgICAgYnJlYWs7CisgICAgICAgICAgICBpZiAoIGkgKQor ICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKKyAgICAgICAgICAgICAgICBwYWdlLT5wYXJ0aWFs X3B0ZSA9IDA7CisgICAgICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRf Z3Vlc3RfcHRwZyA9IE5VTEw7CisgICAgICAgICAgICAgICAgY3VycmVudC0+ YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOworICAgICAgICAgICAgfQog ICAgICAgICB9CisgICAgICAgIGlmICggcmMgPCAwICkKKyAgICAgICAgICAg IGJyZWFrOwogCiAgICAgICAgIHBsMmVbaV0gPSBhZGp1c3RfZ3Vlc3RfbDJl KGwyZSwgZCk7CiAgICAgfQpAQCAtMTgyMywyOCArMTg1Miw1MCBAQCBzdGF0 aWMgaW50IGZyZWVfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW5mCiAgICAgc3Ry dWN0IGRvbWFpbiAqZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOwogICAgIHVu c2lnbmVkIGxvbmcgcGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwog ICAgIGwyX3BnZW50cnlfdCAqcGwyZTsKLSAgICB1bnNpZ25lZCBpbnQgIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyAtIDE7Ci0gICAgaW50IGVyciA9 IDA7CisgICAgaW50IHJjID0gMCwgcGFydGlhbCA9IHBhZ2UtPnBhcnRpYWxf cHRlOworICAgIHVuc2lnbmVkIGludCBpID0gcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXMgLSAhcGFydGlhbDsKIAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3Bh Z2UoX21mbihwZm4pKTsKIAotICAgIEFTU0VSVChwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyk7Ci0gICAgZG8gewotICAgICAgICBpZiAoIGlzX2d1ZXN0X2wy X3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8sIGkpICYmCi0gICAg ICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKSA9PSAw ICYmCi0gICAgICAgICAgICAgaSAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVj aygpICkKKyAgICBmb3IgKCA7IDsgKQorICAgIHsKKyAgICAgICAgaWYgKCBp c19ndWVzdF9sMl9zbG90KGQsIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvLCBp KSApCisgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVb aV0sIHBmbiwgcGFydGlhbCwgZmFsc2UpOworICAgICAgICBpZiAoIHJjIDwg MCApCisgICAgICAgICAgICBicmVhazsKKworICAgICAgICBwYXJ0aWFsID0g MDsKKworICAgICAgICBpZiAoICFpLS0gKQorICAgICAgICAgICAgYnJlYWs7 CisKKyAgICAgICAgaWYgKCBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewotICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRl cyA9IGk7Ci0gICAgICAgICAgIGVyciA9IC1FUkVTVEFSVDsKKyAgICAgICAg ICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IH0KLSAgICB9IHdoaWxlICggIWVyciAmJiBpLS0gKTsKKyAgICB9CiAKICAg ICB1bm1hcF9kb21haW5fcGFnZShwbDJlKTsKIAotICAgIGlmICggIWVyciAp CisgICAgaWYgKCByYyA+PSAwICkKKyAgICB7CiAgICAgICAgIHBhZ2UtPnUu aW51c2UudHlwZV9pbmZvICY9IH5QR1RfcGFlX3hlbl9sMjsKKyAgICAgICAg cmMgPSAwOworICAgIH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVSRVNUQVJU ICkKKyAgICB7CisgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0g aTsKKyAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IC0x OworICAgIH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkgPCBM Ml9QQUdFVEFCTEVfRU5UUklFUyAtIDEgKQorICAgIHsKKyAgICAgICAgcGFn ZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpICsgMTsKKyAgICAgICAgcGFnZS0+ cGFydGlhbF9wdGUgPSAwOworICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAg ICB9CiAKLSAgICByZXR1cm4gZXJyOworICAgIHJldHVybiByYzsKIH0KIAog c3RhdGljIGludCBmcmVlX2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCkBAIC0yMTY2LDcgKzIyMTcsNyBAQCBzdGF0aWMgaW50IG1vZF9sMl9l bnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgICAgICByZXR1cm4gLUVC VVNZOwogICAgICAgICB9CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSgocmMg PSBnZXRfcGFnZV9mcm9tX2wyZShubDJlLCBwZm4sIGQpKSA8IDApICkKKyAg ICAgICAgaWYgKCB1bmxpa2VseSgocmMgPSBnZXRfcGFnZV9mcm9tX2wyZShu bDJlLCBwZm4sIGQsIDApKSA8IDApICkKICAgICAgICAgICAgIHJldHVybiBy YzsKIAogICAgICAgICBubDJlID0gYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBk KTsKQEAgLTIxODUsNyArMjIzNiw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2Vu dHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsK ICAgICB9CiAKLSAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOwor ICAgIHB1dF9wYWdlX2Zyb21fbDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisK ICAgICByZXR1cm4gcmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa290/unstable-2.patch" Content-Disposition: attachment; filename="xsa290/unstable-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KLS0tCnYyOiBDbGFyaWZ5IHRoYXQgaXQncyBtYWlubHkgdW52 YWxpZGF0aW9uIHdoaWNoIG5lZWRzIGFkanVzdG1lbnQuCgotLS0gYS94ZW4v YXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTU4 OCw2ICsxNTg4LDEzIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDNfdGFibGUoc3Ry dWN0IHBhZ2VfaW4KICAgICB7CiAgICAgICAgIGwzX3BnZW50cnlfdCBsM2Ug PSBwbDNlW2ldOwogCisgICAgICAgIGlmICggaSA+IHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzICYmIGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkgKQorICAg ICAgICB7CisgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9 IGk7CisgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICAgICAgICAg IGJyZWFrOworICAgICAgICB9CisKICAgICAgICAgaWYgKCBpc19wdl8zMmJp dF9kb21haW4oZCkgJiYgKGkgPT0gMykgKQogICAgICAgICB7CiAgICAgICAg ICAgICBpZiAoICEobDNlX2dldF9mbGFncyhsM2UpICYgX1BBR0VfUFJFU0VO VCkgfHwKQEAgLTE5MDgsMTUgKzE5MTUsMjUgQEAgc3RhdGljIGludCBmcmVl X2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9k b21haW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAo IDsgOyApCisgICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNl KHBsM2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMg PCAwICkKICAgICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwg PSAwOwotICAgICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250 aW51ZTsKLSAgICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShw bDNlW2ldLCBkKTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlm ICggcmMgPT0gMCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSAp CisgICAgICAgICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2Fs bF9wcmVlbXB0X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICBy YyA9IC1FSU5UUjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9Cisg ICAgfQogCiAgICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:26:19 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:26:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h198L-0004io-6r; Tue, 05 Mar 2019 12:25:21 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h198J-0004hb-Cs for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:25:19 +0000 X-Inumbo-ID: bc7569d5-3f41-11e9-bc90-bc764e045a96 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id bc7569d5-3f41-11e9-bc90-bc764e045a96; Tue, 05 Mar 2019 12:25:18 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h197y-0001qu-Ou; Tue, 05 Mar 2019 12:24:58 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h197y-0004C6-M3; Tue, 05 Mar 2019 12:24:58 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:24:58 +0000 Subject: [Xen-announce] Xen Security Advisory 293 v3 - x86: PV kernel context switch corruption X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-293 version 3 x86: PV kernel context switch corruption UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= On hardware supporting the fsgsbase feature, 64bit PV guests can set and clear the applicable control bit in its virtualised %cr4, but the feature remains fully active in hardware. Therefore, the associated instructions are actually usable. Linux, which does not currently support this feature, has various optimisations in its context switch path which justifiably assume that userspace can't actually make changes without a system call. Xen's behaviour of having this feature active behind the guest kernel's back undermines the correctness of any context switch logic which depends on the feature being disabled. Userspace can therefore corrupt fsbase or gsbase (commonly used for Thread Local Storage) in the next thread to be scheduled on the current vcpu. IMPACT ====== A malicious unprivileged guest userspace process can escalate its privilege to that of other userspace processes in the same guest, and potentially thereby to that of the guest operating system. Additionally, some guest software which attempts to use this CPU feature may trigger the bug accidentally, leading to crashes or corruption of other processes in the same guest. VULNERABLE SYSTEMS ================== Xen versions 4.1 and later are vulnerable. Xen 4.0 and earlier are not vulnerable. Only x86 hardware with the fsgsbase feature is vulnerable. This is believed to be Intel IvyBridge and later hardware, and AMD Steamroller and later hardware. ARM hardware is not affected. Only 64bit PV guests can exploit the vulnerability. 32bit PV guests, and HVM/PVH guests cannot exploit the vulnerability. Whether the bug is exploitable, and whether it will be triggered by accident, depend in a complicated way on the guest operating system and its configuration. Most guests are vulnerable to malicious userspace processes. MITIGATION ========== Running only 32bit PV or HVM/PVH guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Andy Lutomirski. RESOLUTION ========== Applying the appropriate attached patches resolves this issue. xsa293/unstable-?.patch xen-unstable xsa293/4.11-?.patch Xen 4.11.x xsa293/4.10-?.patch Xen 4.10.x xsa293/4.9-?.patch Xen 4.9.x xsa293/4.8-?.patch Xen 4.8.x xsa293/4.7-?.patch Xen 4.7.x $ sha256sum xsa293* xsa293*/* 27baf055642a3a7e9d2b1a961e15a46b592eca7c6f63e28e3bcb19e4cebfd0bd xsa293.meta 865596b3dca81712a7d3d78f22e40aed1a08732f93b1950af6f092d893323a0f xsa293/4.7-1.patch 032559c4bbdfe0987b9d3b15cf8661d8d8a5d4e2e989c944490ac171305fba3b xsa293/4.7-2.patch d3d91a1a5083b0a1992750b808aefacd0f0d4e7e92d1436e620a542e935cdadd xsa293/4.7-3.patch 14b3db49375e353394b831a342d873d83615285d516f8cb08a0e1564d675cd51 xsa293/4.8-1.patch 1efc2ee18f54c7c41f478e944b3b708eb283bfa9de68a1046033d57784846c30 xsa293/4.8-2.patch 0d28899cad0e6798ae6a96717c15363ddf5a35e334ede02becdc81538ae589cc xsa293/4.8-3.patch b24210a74eb9dca5c7af902d223dba1b1b372df06a99fb1b0df8e92c9f9632f3 xsa293/4.9-1.patch f68101f80d9843c1cdbb70188caec7009a0d52d33d811d22091e7c1f265a15e1 xsa293/4.9-2.patch 194e42599eac16afab14856760901705a0600c1308645495f30d30f8dd68734c xsa293/4.10-1.patch 1fdee59bba66bd6b3ea4949913457dbcb1b8d5cb85fd8fb60aacac9a403ee9a9 xsa293/4.10-2.patch 277ba95e9a2276378fc9b3bcf89b694b9670256cde62278ade2e90d3fd5f7c46 xsa293/4.11-1.patch 724a0f433427a747876cbec09381dc1ca99286cea0ecbdd098c6e68fb135eeda xsa293/4.11-2.patch 837eb67900a7c70cf7a00836cb312506925ca1fd29529144ff312316b0dbb086 xsa293/unstable-1.patch 0a6df8c8778a1c7e1fb71825695a86dee36f2e9345b39a06e3a364ad8b938de0 xsa293/unstable-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+apQMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZvVkH/j+PLpdjJ172FhBC2F73PE8/ojjK4qu9pew29TmH 4YZtNEEW2+4rB+vd3Y4oYmEHZiZoxrE7v6ER5+TxeMb4M9eK9JfgT59BO98msYLJ AMJkDw+xmRWxSf0oP8aig1Qbl3isY3Tv3Ny/KjLV33aZy0O/5Re3NnqpYRHAMDrj wLmeBezLQbqyK4Kc9y8Io+johmnOWbQDiXFGq/Rjh4C0EDkKBTpAY2By+sHxNBMU FCFsjxi/H25rhrYIb5DOhdlcAGxp+JrK679rKoYZP35QBQzkj3TKswfp7rmCactn xoD9N6uO483VVD6X1LosaK9jSxmHCdaOA+uswOBrBwWBjng= =OITY -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa293.meta" Content-Disposition: attachment; filename="xsa293.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTMsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxLAogICAg ICAgICAgICAyOTIKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5My80LjEwLT8ucGF0Y2giCiAgICAgICAg ICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7CiAg ICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAi U3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3YTlj MTY0NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAg IDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcsCiAgICAg ICAgICAgIDI4OCwKICAgICAgICAgICAgMjkwLAogICAgICAgICAgICAyOTEs CiAgICAgICAgICAgIDI5MgogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjkzLzQuMTEtPy5wYXRjaCIKICAg ICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43Ijog ewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAg ICAgIlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFm MWFjY2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAg ICAgICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAog ICAgICAgICAgICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAg MjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAg ICAgICAgICJ4c2EyOTMvNC43LT8ucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOCI6IHsKICAgICAgIlJlY2lw ZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYi OiAiOTA4ZTc2OGZhZTQ5YThkYjAwODllNjgxODg2NTIwNzllM2JmYWE2NiIs CiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAg ICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4 LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwKICAgICAgICAg ICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAg ICAgICAgICAgICJ4c2EyOTMvNC44LT8ucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOSI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiZjVhY2Y5N2Y2NjljNmJjOTY5MWUwMzc3MWFkMDY3MDNkYTc3ZTBk NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAog ICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAg Mjg4LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwKICAgICAg ICAgICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBb CiAgICAgICAgICAgICJ4c2EyOTMvNC45LT8ucGF0Y2giCiAgICAgICAgICBd CiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAg ICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJT dGFibGVSZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMx NWNkMDM1NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAg Mjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAg ICAgICAgMjg4LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwK ICAgICAgICAgICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyOTMvdW5zdGFibGUtPy5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa293/4.7-1.patch" Content-Disposition: attachment; filename="xsa293/4.7-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBJbXByb3ZlIHB2X2NwdWlkKCkncyBBUEkK CnB2X2NwdWlkKCkncyBBUEkgaXMgYXdrd2FyZCB0byB1c2UuICBUaGVyZSBh cmUgYWxyZWFkeSB0d28gY2FsbGVycyBqdW1waW5nCnRocm91Z2ggaG9vcHMg dG8gdXNlIGl0LCBhbmQgYSB0aGlyZCBpcyBvbiBpdHMgd2F5LgoKQ2hhbmdl IHRoZSBBUEkgdG8gdGFrZSBlYWNoIHBhcmFtZXRlciBpbmRpdmlkdWFsbHkg KGxpa2UgaXRzIGNvdW50ZXJwYXJ0LApodm1fY3B1aWQoKSwgYWxyZWFkeSBk b2VzKSwgYW5kIGludHJvZHVjZSBhIG5ldyBwdl9jcHVpZF9yZWdzKCkgd3Jh cHBlcgppbXBsZW1lbnRpbmcgdGhlIG9sZCBBUEkuCgpObyBmdW5jdGlvbmFs IGNoYW5nZS4KClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L2h2bS92bXgvdm14LmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZteC92bXgu YwppbmRleCA4MmUzYzJjLi41OTM5NWRkIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvaHZtL3ZteC92bXguYworKysgYi94ZW4vYXJjaC94ODYvaHZtL3Zt eC92bXguYwpAQCAtMzY5OCw3ICszNjk4LDcgQEAgdm9pZCB2bXhfdm1leGl0 X2hhbmRsZXIoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAgICAgICAg IGJyZWFrOwogICAgIH0KICAgICBjYXNlIEVYSVRfUkVBU09OX0NQVUlEOgot ICAgICAgICBpc19wdmhfdmNwdSh2KSA/IHB2X2NwdWlkKHJlZ3MpIDogdm14 X2RvX2NwdWlkKHJlZ3MpOworICAgICAgICBpc19wdmhfdmNwdSh2KSA/IHB2 X2NwdWlkX3JlZ3MocmVncykgOiB2bXhfZG9fY3B1aWQocmVncyk7CiAgICAg ICAgIHVwZGF0ZV9ndWVzdF9laXAoKTsgLyogU2FmZTogQ1BVSUQgKi8KICAg ICAgICAgYnJlYWs7CiAgICAgY2FzZSBFWElUX1JFQVNPTl9ITFQ6CmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni90 cmFwcy5jCmluZGV4IDEzOTczN2IuLmMwMDFmOTMgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9hcmNoL3g4Ni90cmFwcy5j CkBAIC05MjQsMTcgKzkyNCwxNCBAQCBzdGF0aWMgdm9pZCBfZG9tYWluX2Nw dWlkKHN0cnVjdCBkb21haW4gKmN1cnJkLAogICAgICAgICBjcHVpZF9jb3Vu dChsZWFmLCBzdWJsZWFmLCBlYXgsIGVieCwgZWN4LCBlZHgpOwogfQogCi12 b2lkIHB2X2NwdWlkKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQordm9p ZCBwdl9jcHVpZCh1aW50MzJfdCBsZWFmLCB1aW50MzJfdCBzdWJsZWFmLAor ICAgICAgICAgICAgICB1aW50MzJfdCAqZWF4LCB1aW50MzJfdCAqZWJ4LCB1 aW50MzJfdCAqZWN4LCB1aW50MzJfdCAqZWR4KQogewotICAgIHVpbnQzMl90 IGxlYWYsIHN1YmxlYWYsIGEsIGIsIGMsIGQ7CisgICAgdWludDMyX3QgYSwg YiwgYywgZDsKKyAgICBjb25zdCBzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVn cyA9IGd1ZXN0X2NwdV91c2VyX3JlZ3MoKTsKICAgICBzdHJ1Y3QgdmNwdSAq Y3VyciA9IGN1cnJlbnQ7CiAgICAgc3RydWN0IGRvbWFpbiAqY3VycmQgPSBj dXJyLT5kb21haW47CiAKLSAgICBsZWFmID0gYSA9IHJlZ3MtPmVheDsKLSAg ICBiID0gcmVncy0+ZWJ4OwotICAgIHN1YmxlYWYgPSBjID0gcmVncy0+ZWN4 OwotICAgIGQgPSByZWdzLT5lZHg7Ci0KICAgICBpZiAoIGNwdWlkX2h5cGVy dmlzb3JfbGVhdmVzKGxlYWYsIHN1YmxlYWYsICZhLCAmYiwgJmMsICZkKSAp CiAgICAgICAgIGdvdG8gb3V0OwogCkBAIC0xMjAwLDE3ICsxMTk3LDIxIEBA IHZvaWQgcHZfY3B1aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAg ICAgY2FzZSAweDgwMDAwMDFlOiAvKiBFeHRlbmRlZCB0b3BvbG9neSByZXBv cnRpbmcgKi8KICAgICB1bnN1cHBvcnRlZDoKICAgICAgICAgYSA9IGIgPSBj ID0gZCA9IDA7Ci0gICAgICAgIGJyZWFrOworICAgICAgICBnb3RvIG91dDsK ICAgICB9CiAKLSBvdXQ6CiAgICAgLyogVlBNVSBtYXkgZGVjaWRlIHRvIG1v ZGlmeSBzb21lIG9mIHRoZSBsZWF2ZXMgKi8KICAgICB2cG11X2RvX2NwdWlk KGxlYWYsICZhLCAmYiwgJmMsICZkKTsKIAotICAgIHJlZ3MtPmVheCA9IGE7 Ci0gICAgcmVncy0+ZWJ4ID0gYjsKLSAgICByZWdzLT5lY3ggPSBjOwotICAg IHJlZ3MtPmVkeCA9IGQ7Cisgb3V0OgorICAgIGlmICggZWF4ICkKKyAgICAg ICAgKmVheCA9IGE7CisgICAgaWYgKCBlYnggKQorICAgICAgICAqZWJ4ID0g YjsKKyAgICBpZiAoIGVjeCApCisgICAgICAgICplY3ggPSBjOworICAgIGlm ICggZWR4ICkKKyAgICAgICAgKmVkeCA9IGQ7CiB9CiAKIHN0YXRpYyBpbnQg ZW11bGF0ZV9pbnZhbGlkX3JkdHNjcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAq cmVncykKQEAgLTEyNjAsNyArMTI2MSw3IEBAIHN0YXRpYyBpbnQgZW11bGF0 ZV9mb3JjZWRfaW52YWxpZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVn cykKICAgICAgICAgcmV0dXJuIDA7CiAgICAgZWlwICs9IHNpemVvZihpbnN0 cik7CiAKLSAgICBwdl9jcHVpZChyZWdzKTsKKyAgICBwdl9jcHVpZF9yZWdz KHJlZ3MpOwogCiAgICAgaW5zdHJ1Y3Rpb25fZG9uZShyZWdzLCBlaXAsIDAp OwogCkBAIC0zMTM1LDcgKzMxMzYsNyBAQCBzdGF0aWMgaW50IGVtdWxhdGVf cHJpdmlsZWdlZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAg ICAgICAgYnJlYWs7CiAKICAgICBjYXNlIDB4YTI6IC8qIENQVUlEICovCi0g ICAgICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICBwdl9jcHVpZF9yZWdz KHJlZ3MpOwogICAgICAgICBicmVhazsKIAogICAgIGRlZmF1bHQ6CmRpZmYg LS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oIGIveGVu L2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRleCAxNGJlZDkyLi42 YTM1Yjg5IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgK QEAgLTY0OSw3ICs2NDksMTQgQEAgZW51bSBnZXRfY3B1X3ZlbmRvciB7CiB9 OwogCiBpbnQgZ2V0X2NwdV92ZW5kb3IoY29uc3QgY2hhciB2ZW5kb3JfaWRb XSwgZW51bSBnZXRfY3B1X3ZlbmRvcik7Ci12b2lkIHB2X2NwdWlkKHN0cnVj dCBjcHVfdXNlcl9yZWdzICpyZWdzKTsKK3ZvaWQgcHZfY3B1aWQodWludDMy X3QgbGVhZiwgdWludDMyX3Qgc3VibGVhZiwKKyAgICAgICAgICAgICAgdWlu dDMyX3QgKmVheCwgdWludDMyX3QgKmVieCwgdWludDMyX3QgKmVjeCwgdWlu dDMyX3QgKmVkeCk7CisKK3N0YXRpYyBpbmxpbmUgdm9pZCBwdl9jcHVpZF9y ZWdzKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQoreworICAgIHB2X2Nw dWlkKHJlZ3MtPl9lYXgsIHJlZ3MtPl9lY3gsCisgICAgICAgICAgICAgJnJl Z3MtPl9lYXgsICZyZWdzLT5fZWJ4LCAmcmVncy0+X2VjeCwgJnJlZ3MtPl9l ZHgpOworfQogCiAjZW5kaWYgLyogIV9fQVNTRU1CTFlfXyAqLwogCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.7-2.patch" Content-Disposition: attachment; filename="xsa293/4.7-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKUmVwb3J0ZWQtYnk6IEFuZHkgTHV0b21pcnNraSA8bHV0 b0BrZXJuZWwub3JnPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxh bmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogSmFuIEJl dWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwppbmRl eCA5MzhmY2UwLi44ZGRiMTJjIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv ZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L2RvbWFpbi5jCkBAIC0zNzcs NiArMzc3LDYzIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjFfZWN4ID0gMCwg bGVhZjFfZWR4ID0gMDsKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjdfMF9lYngg PSAwLCBsZXZlbCA9IDA7CisKKyAgICBwdl9jcHVpZCgwLCAwLCAmbGV2ZWws IE5VTEwsIE5VTEwsIE5VTEwpOworICAgIGlmICggbGV2ZWwgPj0gMSApCisg ICAgICAgIHB2X2NwdWlkKDEsIDAsIE5VTEwsIE5VTEwsICZsZWFmMV9lY3gs ICZsZWFmMV9lZHgpOworICAgIGlmICggbGV2ZWwgPj0gNyApCisgICAgICAg IHB2X2NwdWlkKDcsIDAsIE5VTEwsICZsZWFmN18wX2VieCwgTlVMTCwgTlVM TCk7CisKKyAgICAvKiBEaXNjYXJkIGF0dGVtcHRzIHRvIHNldCBndWVzdCBj b250cm9sbGFibGUgYml0cyBvdXRzaWRlIG9mIHRoZSBwb2xpY3kuICovCisg ICAgY3I0ICY9IH4oKChsZWFmMV9lZHggJiBjcHVmZWF0X21hc2soWDg2X0ZF QVRVUkVfVFNDKSkKKyAgICAgICAgICAgICAgPyAwIDogWDg2X0NSNF9UU0Qp IHwKKyAgICAgICAgICAgICAoKGxlYWYxX2VkeCAmIGNwdWZlYXRfbWFzayhY ODZfRkVBVFVSRV9ERSkpCisgICAgICAgICAgICAgID8gMCA6IFg4Nl9DUjRf REUpIHwKKyAgICAgICAgICAgICAoKGxlYWY3XzBfZWJ4ICYgY3B1ZmVhdF9t YXNrKFg4Nl9GRUFUVVJFX0ZTR1NCQVNFKSkKKyAgICAgICAgICAgICAgPyAw IDogWDg2X0NSNF9GU0dTQkFTRSkgfAorICAgICAgICAgICAgICgobGVhZjFf ZWN4ICYgY3B1ZmVhdF9tYXNrKFg4Nl9GRUFUVVJFX1hTQVZFKSkKKyAgICAg ICAgICAgICAgPyAwIDogWDg2X0NSNF9PU1hTQVZFKSk7CisKKyAgICAvKiBN YXNrcyBleHBlY3RlZCB0byBiZSBkaXNqb2ludCBzZXRzLiAqLworICAgIEJV SUxEX0JVR19PTihQVl9DUjRfR1VFU1RfTUFTSyAmIFBWX0NSNF9HVUVTVF9W SVNJQkxFX01BU0spOworCisgICAgLyoKKyAgICAgKiBBIGd1ZXN0IHNlZXMg dGhlIHBvbGljeSBzdWJzZXQgb2YgaXRzIG93biBjaG9pY2Ugb2YgZ3Vlc3Qg Y29udHJvbGxhYmxlCisgICAgICogYml0cywgYW5kIGEgc3Vic2V0IG9mIFhl bidzIGNob2ljZSBvZiBjZXJ0YWluIGhhcmR3YXJlIHNldHRpbmdzLgorICAg ICAqLworICAgIHJldHVybiAoKGNyNCAmIFBWX0NSNF9HVUVTVF9NQVNLKSB8 CisgICAgICAgICAgICAobW11X2NyNF9mZWF0dXJlcyAmIFBWX0NSNF9HVUVT VF9WSVNJQkxFX01BU0spKTsKK30KKwordW5zaWduZWQgbG9uZyBwdl9tYWtl X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKK3sKKyAgICBjb25zdCBzdHJ1 Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHVuc2lnbmVkIGxvbmcg Y3I0ID0gbW11X2NyNF9mZWF0dXJlcyAmCisgICAgICAgIH4oWDg2X0NSNF9Q Q0lERSB8IFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9UU0QpOworCisgICAgLyoK KyAgICAgKiBQQ0lERSBvciBQR0UgZGVwZW5kcyBvbiB0aGUgUENJRC9YUFRJ IHNldHRpbmdzLCBidXQgbXVzdCBub3QgYm90aCBiZQorICAgICAqIHNldCwg YXMgaXQgaW1wYWN0cyB0aGUgc2FmZXR5IG9mIFRMQiBmbHVzaGluZy4KKyAg ICAgKi8KKyAgICBpZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQorICAg ICAgICBjcjQgfD0gWDg2X0NSNF9QQ0lERTsKKyAgICBlbHNlIGlmICggIWQt PmFyY2gucHZfZG9tYWluLnhwdGkgKQorICAgICAgICBjcjQgfD0gWDg2X0NS NF9QR0U7CisKKyAgICAvKgorICAgICAqIFRTRCBpcyBuZWVkZWQgaWYgZWl0 aGVyIHRoZSBndWVzdCBoYXMgZWxlY3RlZCB0byB1c2UgaXQsIG9yIFhlbiBp cworICAgICAqIHZpcnR1YWxpc2luZyB0aGUgVFNDIHZhbHVlIHRoZSBndWVz dCBzZWVzLgorICAgICAqLworICAgIGlmICggZC0+YXJjaC52dHNjIHx8ICh2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNEKSApCisg ICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVybiBjcjQ7 Cit9CisKIHN0YXRpYyB2b2lkIHNldF9kb21haW5feHB0aShzdHJ1Y3QgZG9t YWluICpkKQogewogICAgIGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkK QEAgLTU1MSw2ICs2MDgsOCBAQCBpbnQgdmNwdV9pbml0aWFsaXNlKHN0cnVj dCB2Y3B1ICp2KQogCiAgICAgICAgIC8qIFBWIGd1ZXN0cyBieSBkZWZhdWx0 IGhhdmUgYSAxMDBIeiB0aWNrZXIuICovCiAgICAgICAgIHYtPnBlcmlvZGlj X3BlcmlvZCA9IE1JTExJU0VDUygxMCk7CisKKyAgICAgICAgdi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwgMCk7 CiAgICAgfQogCiAgICAgdi0+YXJjaC5zY2hlZHVsZV90YWlsID0gY29udGlu dWVfbm9uaWRsZV9kb21haW47CkBAIC01NjMsOCArNjIyLDYgQEAgaW50IHZj cHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAgICAgdi0+YXJj aC5jcjMgICAgICAgICAgID0gX19wYShpZGxlX3BnX3RhYmxlKTsKICAgICB9 CiAKLSAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0 X3RvX3B2X2d1ZXN0X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsKLQogICAgIGlm ICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkKICAgICB7CiAgICAgICAgIGlm ICggKHJjID0gc2V0dXBfY29tcGF0X2FyZ194bGF0KHYpKSApCkBAIC05Mzcs NDkgKzk5NCw2IEBAIGludCBhcmNoX2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVj dCBkb21haW4gKmQpCiAgICAgcmV0dXJuIHJldDsKIH0KIAotLyoKLSAqIFRo ZXNlIGFyZSB0aGUgbWFza3Mgb2YgQ1I0IGJpdHMgKHN1YmplY3QgdG8gaGFy ZHdhcmUgYXZhaWxhYmlsaXR5KSB3aGljaCBhCi0gKiBQViBndWVzdCBtYXkg bm90IGxlZ2l0aW1pYXRlbHkgYXR0ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0 YXRpYyB1bnNpZ25lZCBsb25nIF9fcmVhZF9tb3N0bHkgcHZfY3I0X21hc2ss IGNvbXBhdF9wdl9jcjRfbWFzazsKLQotc3RhdGljIGludCBfX2luaXQgaW5p dF9wdl9jcjRfbWFza3Modm9pZCkKLXsKLSAgICB1bnNpZ25lZCBsb25nIGNv bW1vbl9tYXNrID0gflg4Nl9DUjRfVFNEOwotCi0gICAgLyoKLSAgICAgKiBB bGwgUFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBUU0QsIERFIGFu ZCBPU1hTQVZFLgotICAgICAqLwotICAgIGlmICggY3B1X2hhc19kZSApCi0g ICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X0RFOwotICAgIGlmICgg Y3B1X2hhc194c2F2ZSApCi0gICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZf Q1I0X09TWFNBVkU7Ci0KLSAgICBwdl9jcjRfbWFzayA9IGNvbXBhdF9wdl9j cjRfbWFzayA9IGNvbW1vbl9tYXNrOwotCi0gICAgLyoKLSAgICAgKiA2NGJp dCBQViBndWVzdHMgbWF5IGF0dGVtcHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgot ICAgICAqLwotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCi0gICAgICAg IHB2X2NyNF9tYXNrICY9IH5YODZfQ1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0 dXJuIDA7Ci19Ci1fX2luaXRjYWxsKGluaXRfcHZfY3I0X21hc2tzKTsKLQot dW5zaWduZWQgbG9uZyBwdl9ndWVzdF9jcjRfZml4dXAoY29uc3Qgc3RydWN0 IHZjcHUgKnYsIHVuc2lnbmVkIGxvbmcgZ3Vlc3RfY3I0KQotewotICAgIHVu c2lnbmVkIGxvbmcgaHZfY3I0ID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0 KHJlYWRfY3I0KCkpOwotICAgIHVuc2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2 XzMyYml0X3ZjcHUodikgPyBjb21wYXRfcHZfY3I0X21hc2sgOiBwdl9jcjRf bWFzazsKLQotICAgIGlmICggKGd1ZXN0X2NyNCAmIG1hc2spICE9IChodl9j cjQgJiBtYXNrKSApCi0gICAgICAgIHByaW50ayhYRU5MT0dfR19XQVJOSU5H Ci0gICAgICAgICAgICAgICAiZCVkIGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2 J3MgQ1I0IGZsYWdzICUwOGx4IC0+ICUwOGx4XG4iLAotICAgICAgICAgICAg ICAgY3VycmVudC0+ZG9tYWluLT5kb21haW5faWQsIHYsIGh2X2NyNCwgZ3Vl c3RfY3I0KTsKLQotICAgIHJldHVybiAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vl c3RfY3I0ICYgfm1hc2spOwotfQotCiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0 X2NvbnRleHQgdmNwdV9ndWVzdF9jb250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0 IGZwdV9jdHh0LngKIENIRUNLX0ZJRUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3Rf Y29udGV4dCwgZnB1X2N0eHQpOwpAQCAtOTkzLDcgKzEwMDcsNyBAQCBpbnQg YXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0g di0+ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBz dHJ1Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25n IGZsYWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1 bnNpZ25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAg LTEyMTAsOSArMTIyNCw4IEBAIGludCBhcmNoX3NldF9pbmZvX2d1ZXN0KAog ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdICY9IFg4Nl9DUjBfVFM7 CiAgICAgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbMF0gfD0gcmVhZF9jcjAo KSAmIH5YODZfQ1IwX1RTOwogCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF07Ci0gICAgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0g PSBjcjQgPyBwdl9ndWVzdF9jcjRfZml4dXAodiwgY3I0KSA6Ci0gICAgICAg IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsK KyAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9CisgICAgICAgIHB2 X2ZpeHVwX2d1ZXN0X2NyNCh2LCB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0 XSk7CiAKICAgICBtZW1zZXQodi0+YXJjaC5kZWJ1Z3JlZywgMCwgc2l6ZW9m KHYtPmFyY2guZGVidWdyZWcpKTsKICAgICBmb3IgKCBpID0gMDsgaSA8IDg7 IGkrKyApCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0uYyBiL3hlbi9h cmNoL3g4Ni9tbS5jCmluZGV4IGM5YzZmYzkuLjA2ZmQ0ZTQgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5j CkBAIC01MDEsMzMgKzUwMSwxMyBAQCB2b2lkIG1ha2VfY3IzKHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIG1mbikKICAgICAgICAgdi0+YXJjaC5j cjMgfD0gZ2V0X3BjaWRfYml0cyh2LCAwKTsKIH0KIAotdW5zaWduZWQgbG9u ZyBwdl9ndWVzdF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYpCi17Ci0gICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFp bjsKLSAgICB1bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFy Y2gucHZfdmNwdS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0 IHw9IG1tdV9jcjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0 X1NNRVAgfCBYODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0Up OwotCi0gICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAg ICAgY3I0IHw9IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5h cmNoLnB2X2RvbWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRf UEdFOwotCi0gICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNE IDogMDsKLQotICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRi YXNlKHN0cnVjdCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAq Y3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25n IG5ld19jcjQ7CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYg IWlzX2lkbGVfdmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9j cjRfdG9fcmVhbF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0 KCkgJiB+KFg4Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NS NF9QR0UpOworICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11 X2NyNF9mZWF0dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2 LT5kb21haW4tPmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU0 Niw4ICs1MjYsNiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAq dikKICAgICAgICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19j cjQpOwogICAgICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0K LSAgICBBU1NFUlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1t dV9jcjRfZmVhdHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2Fy Y2gveDg2L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwppbmRleCBj MDAxZjkzLi42Y2JiZjNmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvdHJh cHMuYworKysgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpAQCAtOTE4LDcgKzkx OCw4IEBAIHN0YXRpYyB2b2lkIF9kb21haW5fY3B1aWQoc3RydWN0IGRvbWFp biAqY3VycmQsCiAgICAgICAgICAgICAgICAgICAgICAgICAgIHVuc2lnbmVk IGludCAqZWF4LCB1bnNpZ25lZCBpbnQgKmVieCwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgdW5zaWduZWQgaW50ICplY3gsIHVuc2lnbmVkIGludCAq ZWR4KQogewotICAgIGlmICggIWlzX2NvbnRyb2xfZG9tYWluKGN1cnJkKSAm JiAhaXNfaGFyZHdhcmVfZG9tYWluKGN1cnJkKSApCisgICAgaWYgKCAhaXNf Y29udHJvbF9kb21haW4oY3VycmQpICYmICFpc19oYXJkd2FyZV9kb21haW4o Y3VycmQpICYmCisgICAgICAgICAhaXNfaWRsZV9kb21haW4oY3VycmQpICkK ICAgICAgICAgZG9tYWluX2NwdWlkKGN1cnJkLCBsZWFmLCBzdWJsZWFmLCBl YXgsIGVieCwgZWN4LCBlZHgpOwogICAgIGVsc2UKICAgICAgICAgY3B1aWRf Y291bnQobGVhZiwgc3VibGVhZiwgZWF4LCBlYngsIGVjeCwgZWR4KTsKQEAg LTI3MjEsOCArMjcyMiw4IEBAIHN0YXRpYyBpbnQgZW11bGF0ZV9wcml2aWxl Z2VkX29wKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQogICAgICAgICB9 CiAKICAgICAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KLSAgICAgICAg ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKHYsICpyZWcpOwotICAgICAgICAgICAgd3JpdGVfY3I0KHB2X2d1 ZXN0X2NyNF90b19yZWFsX2NyNCh2KSk7CisgICAgICAgICAgICB2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCAq cmVnKTsKKyAgICAgICAgICAgIHdyaXRlX2NyNChwdl9tYWtlX2NyNCh2KSk7 CiAgICAgICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcodik7CiAgICAg ICAgICAgICBicmVhazsKIApkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNt LXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK aW5kZXggMTMyYzJiMC4uM2Q2ZjU0NyAxMDA2NDQKLS0tIGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCkBAIC02MzcsMTYgKzYzNywyMiBAQCBib29sX3QgdXBkYXRl X3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3QgdmNwdSAqLAogdm9pZCB2 Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVjdCB2Y3B1ICopOwogdm9p ZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0cnVjdCB2Y3B1ICopOwog Ci0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFyZSBub3QgdW5kZXIgZ3Vl c3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2Zp eHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2lnbmVkIGxvbmcgZ3Vlc3Rf Y3I0KTsKKy8qCisgKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2ds ZSBpbiBpdHMgdmlldyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bwor ICogaGFyZHdhcmUsIHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgor ICovCisjZGVmaW5lIFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NS NF9UU0QgfCBYODZfQ1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9D UjRfT1NYU0FWRSkKKworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBv YnNlcnZlIGZyb20gdGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisj ZGVmaW5lIFBWX0NSNF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZf Q1I0X1BBRSB8IFg4Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZf Q1I0X09TWE1NRVhDUFQpCiAKLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12 aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25n IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAq dik7CisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNvbnN0cnVjdCB0aGUg cmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVlLiAqLwordW5zaWdu ZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKIAotI2RlZmluZSByZWFsX2NyNF90 b19wdl9ndWVzdF9jcjQoYykgICAgICAgICAgICAgICAgICAgICAgICAgXAot ICAgICgoYykgJiB+KFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZf Q1I0X1RTRCB8ICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FW RSB8IFg4Nl9DUjRfU01FUCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAg ICAgIFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0 X1BDSURFKSkKKy8qIENyZWF0ZSBhIGNyNCB2YWx1ZSB0byBsb2FkIGludG8g aGFyZHdhcmUsIGJhc2VkIG9uIHZjcHUgc2V0dGluZ3MuICovCit1bnNpZ25l ZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKIAog dm9pZCBkb21haW5fY3B1aWQoc3RydWN0IGRvbWFpbiAqZCwKICAgICAgICAg ICAgICAgICAgIHVuc2lnbmVkIGludCAgaW5wdXQsCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.7-3.patch" Content-Disposition: attachment; filename="xsa293/4.7-3.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClNpZ25lZC1vZmYtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJl dmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Cgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gv eDg2L2RvbWFpbi5jCmluZGV4IDhkZGIxMmMuLjIwYzBiZDAgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYv ZG9tYWluLmMKQEAgLTQzMSw2ICs0MzEsMTYgQEAgdW5zaWduZWQgbG9uZyBw dl9tYWtlX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGQt PmFyY2gudnRzYyB8fCAodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBY ODZfQ1I0X1RTRCkgKQogICAgICAgICBjcjQgfD0gWDg2X0NSNF9UU0Q7CiAK KyAgICAvKgorICAgICAqIFRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgYXJlIG9u bHkgdXNlYWJsZSBpbiA2NGJpdCBjb2RlIHNlZ21lbnRzLiAgV2hpbGUKKyAg ICAgKiB3ZSBtdXN0IG5vdCBoYXZlIENSNC5GU0dTQkFTRSBzZXQgYmVoaW5k IHRoZSBiYWNrIG9mIGEgNjRiaXQgUFYga2VybmVsLAorICAgICAqIHdlIGRv IGxlYXZlIGl0IHNldCBpbiAzMmJpdCBQViBjb250ZXh0IHRvIHNwZWVkIHVw IFhlbidzIGNvbnRleHQgc3dpdGNoCisgICAgICogcGF0aC4KKyAgICAgKi8K KyAgICBpZiAoICFpc19wdl8zMmJpdF9kb21haW4oZCkgJiYKKyAgICAgICAg ICEodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NC QVNFKSApCisgICAgICAgIGNyNCAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKKwog ICAgIHJldHVybiBjcjQ7CiB9CiAKQEAgLTIwMTIsNyArMjAyMiw4IEBAIHN0 YXRpYyB2b2lkIHNhdmVfc2VnbWVudHMoc3RydWN0IHZjcHUgKnYpCiAgICAg cmVncy0+ZnMgPSByZWFkX3NyZWcoZnMpOwogICAgIHJlZ3MtPmdzID0gcmVh ZF9zcmVnKGdzKTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAmJiAh aXNfcHZfMzJiaXRfdmNwdSh2KSApCisgICAgLyogJWZzLyVncyBiYXNlcyBj YW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNFIGFyZSB1c2FibGUu ICovCisgICAgaWYgKCAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAgICAgIHYt PmFyY2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOwogICAgICAg ICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9kZSApCmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBiL3hlbi9hcmNoL3g4Ni9z ZXR1cC5jCmluZGV4IDAwNzJkZTcuLjllY2E1N2EgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9zZXR1cC5j CkBAIC0xNDQyLDcgKzE0NDIsNyBAQCB2b2lkIF9faW5pdCBub3JldHVybiBf X3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9wKQogCiAgICAgY3I0X3B2 MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBYRU5fQ1I0X1BWMzJfQklU UzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JBU0UpICkKICAgICAgICAg c2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsKIAogICAgIGlmICggb3B0 X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKaW5k ZXggNmNiYmYzZi4uNTgzOTM2ZSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKQEAgLTI3MjIs NiArMjcyMiwxNyBAQCBzdGF0aWMgaW50IGVtdWxhdGVfcHJpdmlsZWdlZF9v cChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAgICAgICAgfQogCiAg ICAgICAgIGNhc2UgNDogLyogV3JpdGUgQ1I0ICovCisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2FibGUg RlNHU0JBU0UsIHJlZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAgICAg ICAgICAqIGd1ZXN0IGJhc2VzIG5vdyB0aGF0IHRoZXkgY2FuIG5vIGxvbmdl ciBjaGFuZ2UuCisgICAgICAgICAgICAgKi8KKyAgICAgICAgICAgIGlmICgg KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgJiYKKyAgICAgICAgICAgICAgICAgISgqcmVnICYgWDg2X0NSNF9GU0dT QkFTRSkgKQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHYtPmFy Y2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOworICAgICAgICAg ICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9IF9fcmRn c2Jhc2UoKTsKKyAgICAgICAgICAgIH0KKwogICAgICAgICAgICAgdi0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwg KnJlZyk7CiAgICAgICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9jcjQodikp OwogICAgICAgICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKHYpOwpAQCAt Mjk5MywxMyArMzAwNCwxNCBAQCBzdGF0aWMgaW50IGVtdWxhdGVfcHJpdmls ZWdlZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAgICAgICAg Y2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgICAgIGlmICggaXNfcHZfMzJi aXRfZG9tYWluKGN1cnJkKSApCiAgICAgICAgICAgICAgICAgZ290byBmYWls OwotICAgICAgICAgICAgdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRm c2Jhc2UoKSA6IHYtPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAg ICAgdmFsID0gKHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9f cmRmc2Jhc2UoKQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA6IHYtPmFyY2gucHZfdmNwdS5mc19iYXNlOwog ICAgICAgICAgICAgZ290byByZG1zcl93cml0ZWJhY2s7CiAgICAgICAgIGNh c2UgTVNSX0dTX0JBU0U6CiAgICAgICAgICAgICBpZiAoIGlzX3B2XzMyYml0 X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAgICAgICAgIGdvdG8gZmFpbDsK LSAgICAgICAgICAgIHZhbCA9IGNwdV9oYXNfZnNnc2Jhc2UgPyBfX3JkZ3Ni YXNlKCkKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgOiB2 LT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9rZXJuZWw7CisgICAgICAgICAgICB2 YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UpID8gX19yZGdz YmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIDogdi0+YXJjaC5wdl92Y3B1LmdzX2Jhc2Vfa2VybmVs OwogICAgICAgICAgICAgZ290byByZG1zcl93cml0ZWJhY2s7CiAgICAgICAg IGNhc2UgTVNSX1NIQURPV19HU19CQVNFOgogICAgICAgICAgICAgaWYgKCBp c19wdl8zMmJpdF9kb21haW4oY3VycmQpICkKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQv dHJhcHMuYwppbmRleCA1NmVkMTU2Li4wNGNjNjBkIDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2 L3g4Nl82NC90cmFwcy5jCkBAIC0yNjUsNyArMjY1LDkgQEAgdm9pZCB0b2dn bGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBpZiAoIGlz X3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47Ci0gICAgaWYg KCBjcHVfaGFzX2ZzZ3NiYXNlICkKKworICAgIC8qICVmcy8lZ3MgYmFzZXMg Y2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNhYmxl LiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZfa2Vy bmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9hc20t eDg2L2NwdWZlYXR1cmUuaAppbmRleCAwNGQ5ZTI4Li5mOWM4MzM1IDEwMDY0 NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAorKysg Yi94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtNzIsNyAr NzIsNiBAQAogI2RlZmluZSBjcHVfaGFzX254CQlib290X2NwdV9oYXMoWDg2 X0ZFQVRVUkVfTlgpCiAjZGVmaW5lIGNwdV9oYXNfY2xmbHVzaAkJYm9vdF9j cHVfaGFzKFg4Nl9GRUFUVVJFX0NMRkxVU0gpCiAjZGVmaW5lIGNwdV9oYXNf cGFnZTFnYgkJYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX1BBR0UxR0IpCi0j ZGVmaW5lIGNwdV9oYXNfZnNnc2Jhc2UJYm9vdF9jcHVfaGFzKFg4Nl9GRUFU VVJFX0ZTR1NCQVNFKQogI2RlZmluZSBjcHVfaGFzX2FwZXJmbXBlcmYJYm9v dF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0FQRVJGTVBFUkYpCiAjZGVmaW5lIGNw dV9oYXNfc21lcCAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVS RV9TTUVQKQogI2RlZmluZSBjcHVfaGFzX2ludnBjaWQgICAgICAgICBib290 X2NwdV9oYXMoWDg2X0ZFQVRVUkVfSU5WUENJRCkKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L21zci5oCmluZGV4IDRiNGMxNTYuLjI1MmNiZGMgMTAwNjQ0Ci0tLSBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKKysrIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9tc3IuaApAQCAtOTMsNiArOTMsMTQgQEAgc3RhdGljIGlubGluZSB1 aW50NjRfdCByZHRzYyh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIg KGhpZ2gpIFwKIAkJCSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24g aGFyZHdhcmUgc3VwcG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRl ZCBpbnRvIGhhcmR3YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hv aWNlIGZvciA2NGJpdCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRs ZSwgSFZNIGFuZAorICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwg dGhlIHtSRCxXUn17RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkg c2FmZSB0byB1c2UgaWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICov CiBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lk KQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKQEAgLTEyMyw3ICsxMzEs NyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9p ZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNw dV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9D UjRfRlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwog CiAgICAgcmRtc3JsKE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTEzNSw3ICsx NDMsNyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uo dm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAo IGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4 Nl9DUjRfRlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgp OwogCiAgICAgcmRtc3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE0NSw3 ICsxNTMsNyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jh c2Uodm9pZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2ln bmVkIGxvbmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2Ug KQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQog I2lmZGVmIEhBVkVfR0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xhdGls ZSAoICJ3cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UKQEAg LTE1Nyw3ICsxNjUsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2Uo dW5zaWduZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jn c2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hh c19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9G U0dTQkFTRSApCiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAg YXNtIHZvbGF0aWxlICggIndyZ3NiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7 CiAjZWxzZQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9j ZXNzb3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgKaW5k ZXggNmEzNWI4OS4uNjEwYjZmMyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9wcm9jZXNzb3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L3Byb2Nlc3Nvci5oCkBAIC0zNjMsMTEgKzM2MywzMSBAQCBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgcmVhZF9jcjQodm9pZCkKIAogc3RhdGljIGlu bGluZSB2b2lkIHdyaXRlX2NyNCh1bnNpZ25lZCBsb25nIHZhbCkKIHsKKyAg ICBzdHJ1Y3QgY3B1X2luZm8gKmluZm8gPSBnZXRfY3B1X2luZm8oKTsKKwog ICAgIC8qIE5vIGdsb2JhbCBwYWdlcyBpbiBjYXNlIG9mIFBDSURzIGVuYWJs ZWQhICovCiAgICAgQVNTRVJUKCEodmFsICYgWDg2X0NSNF9QR0UpIHx8ICEo dmFsICYgWDg2X0NSNF9QQ0lERSkpOwogCi0gICAgZ2V0X2NwdV9pbmZvKCkt PmNyNCA9IHZhbDsKLSAgICBhc20gdm9sYXRpbGUgKCAibW92ICUwLCUlY3I0 IiA6IDogInIiICh2YWwpICk7CisgICAgLyoKKyAgICAgKiBPbiBoYXJkd2Fy ZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgaW4gJWNyNCBpcyB0 aGUga2VybmVsJ3MKKyAgICAgKiBjaG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0 cywgd2hpY2ggaW1wYWN0cyB3aGV0aGVyIFhlbiBjYW4gdXNlIHRoZQorICAg ICAqIGluc3RydWN0aW9ucy4KKyAgICAgKgorICAgICAqIFRoZSB7cmQsd3J9 e2ZzLGdzfWJhc2UoKSBoZWxwZXJzIHVzZSBpbmZvLT5jcjQgdG8gd29yayBv dXQgd2hldGhlciBpdAorICAgICAqIGlzIHNhZmUgdG8gZXhlY3V0ZSB0aGUg e1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9uLCBmYWxsaW5nIGJhY2sg dG8KKyAgICAgKiB0aGUgTVNSIHBhdGggaWYgbm90LiAgU29tZSB1c2VycyBy ZXF1aXJlIGludGVycnVwdCBzYWZldHkuCisgICAgICoKKyAgICAgKiBJZiBG U0dTQkFTRSBpcyBjdXJyZW50bHkgb3IgYWJvdXQgdG8gYmVjb21lIGNsZWFy LCByZWZsZWN0IHRoaXMgaW4KKyAgICAgKiBpbmZvLT5jcjQgYmVmb3JlIHVw ZGF0aW5nICVjcjQsIHNvIGFuIGludGVycnVwdCB3aGljaCBoaXRzIGluIHRo ZQorICAgICAqIG1pZGRsZSB3b24ndCBvYnNlcnZlIEZTR1NCQVNFIHNldCBp biBpbmZvLT5jcjQgYnV0IGNsZWFyIGluICVjcjQuCisgICAgICovCisgICAg aW5mby0+Y3I0ID0gdmFsICYgKGluZm8tPmNyNCB8IH5YODZfQ1I0X0ZTR1NC QVNFKTsKKworICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJVt2YWxdLCAlJWNy NCIKKyAgICAgICAgICAgICAgICAgICA6ICIrbSIgKGluZm8tPmNyNCkgLyog Rm9yY2Ugb3JkZXJpbmcgd2l0aG91dCBhIGJhcnJpZXIuICovCisgICAgICAg ICAgICAgICAgICAgOiBbdmFsXSAiciIgKHZhbCkgKTsKKworICAgIGluZm8t PmNyNCA9IHZhbDsKIH0KIAogLyogQ2xlYXIgYW5kIHNldCAnVFMnIGJpdCBy ZXNwZWN0aXZlbHkgKi8K --=separator Content-Type: application/octet-stream; name="xsa293/4.8-1.patch" Content-Disposition: attachment; filename="xsa293/4.8-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBJbXByb3ZlIHB2X2NwdWlkKCkncyBBUEkK CnB2X2NwdWlkKCkncyBBUEkgaXMgYXdrd2FyZCB0byB1c2UuICBUaGVyZSBh cmUgYWxyZWFkeSB0d28gY2FsbGVycyBqdW1waW5nCnRocm91Z2ggaG9vcHMg dG8gdXNlIGl0LCBhbmQgYSB0aGlyZCBpcyBvbiBpdHMgd2F5LgoKQ2hhbmdl IHRoZSBBUEkgdG8gdGFrZSBlYWNoIHBhcmFtZXRlciBpbmRpdmlkdWFsbHkg KGxpa2UgaXRzIGNvdW50ZXJwYXJ0LApodm1fY3B1aWQoKSwgYWxyZWFkeSBk b2VzKSwgYW5kIGludHJvZHVjZSBhIG5ldyBwdl9jcHVpZF9yZWdzKCkgd3Jh cHBlcgppbXBsZW1lbnRpbmcgdGhlIG9sZCBBUEkuCgpObyBmdW5jdGlvbmFs IGNoYW5nZS4KClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L2h2bS92bXgvdm14LmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZteC92bXgu YwppbmRleCBhYjM5YTQ1Li4wMDUzYWMwIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvaHZtL3ZteC92bXguYworKysgYi94ZW4vYXJjaC94ODYvaHZtL3Zt eC92bXguYwpAQCAtMzgwMyw3ICszODAzLDcgQEAgdm9pZCB2bXhfdm1leGl0 X2hhbmRsZXIoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAKICAgICAg ICAgaWYgKCBpc19wdmhfdmNwdSh2KSApCiAgICAgICAgIHsKLSAgICAgICAg ICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICAgICAgcHZfY3B1aWRfcmVn cyhyZWdzKTsKICAgICAgICAgICAgIHJjID0gMDsKICAgICAgICAgfQogICAg ICAgICBlbHNlCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IDFhMjI4OTUuLjc3Zjc4NmMg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9h cmNoL3g4Ni90cmFwcy5jCkBAIC05NzIsMTcgKzk3MiwxNCBAQCBzdGF0aWMg dm9pZCBfZG9tYWluX2NwdWlkKGNvbnN0IHN0cnVjdCBkb21haW4gKmN1cnJk LAogICAgICAgICBjcHVpZF9jb3VudChsZWFmLCBzdWJsZWFmLCBlYXgsIGVi eCwgZWN4LCBlZHgpOwogfQogCi12b2lkIHB2X2NwdWlkKHN0cnVjdCBjcHVf dXNlcl9yZWdzICpyZWdzKQordm9pZCBwdl9jcHVpZCh1aW50MzJfdCBsZWFm LCB1aW50MzJfdCBzdWJsZWFmLAorICAgICAgICAgICAgICB1aW50MzJfdCAq ZWF4LCB1aW50MzJfdCAqZWJ4LCB1aW50MzJfdCAqZWN4LCB1aW50MzJfdCAq ZWR4KQogewotICAgIHVpbnQzMl90IGxlYWYsIHN1YmxlYWYsIGEsIGIsIGMs IGQ7CisgICAgdWludDMyX3QgYSwgYiwgYywgZDsKKyAgICBjb25zdCBzdHJ1 Y3QgY3B1X3VzZXJfcmVncyAqcmVncyA9IGd1ZXN0X2NwdV91c2VyX3JlZ3Mo KTsKICAgICBzdHJ1Y3QgdmNwdSAqY3VyciA9IGN1cnJlbnQ7CiAgICAgc3Ry dWN0IGRvbWFpbiAqY3VycmQgPSBjdXJyLT5kb21haW47CiAKLSAgICBsZWFm ID0gYSA9IHJlZ3MtPmVheDsKLSAgICBiID0gcmVncy0+ZWJ4OwotICAgIHN1 YmxlYWYgPSBjID0gcmVncy0+ZWN4OwotICAgIGQgPSByZWdzLT5lZHg7Ci0K ICAgICBpZiAoIGNwdWlkX2h5cGVydmlzb3JfbGVhdmVzKGxlYWYsIHN1Ymxl YWYsICZhLCAmYiwgJmMsICZkKSApCiAgICAgICAgIGdvdG8gb3V0OwogCkBA IC05OTcsMTMgKzk5NCw3IEBAIHZvaWQgcHZfY3B1aWQoc3RydWN0IGNwdV91 c2VyX3JlZ3MgKnJlZ3MpCiAKICAgICAgICAgX2RvbWFpbl9jcHVpZChjdXJy ZCwgbGltaXQsIDAsICZsaW1pdCwgJmR1bW15LCAmZHVtbXksICZkdW1teSk7 CiAgICAgICAgIGlmICggbGVhZiA+IGxpbWl0ICkKLSAgICAgICAgewotICAg ICAgICAgICAgcmVncy0+ZWF4ID0gMDsKLSAgICAgICAgICAgIHJlZ3MtPmVi eCA9IDA7Ci0gICAgICAgICAgICByZWdzLT5lY3ggPSAwOwotICAgICAgICAg ICAgcmVncy0+ZWR4ID0gMDsKLSAgICAgICAgICAgIHJldHVybjsKLSAgICAg ICAgfQorICAgICAgICAgICAgZ290byB1bnN1cHBvcnRlZDsKICAgICB9CiAK ICAgICBfZG9tYWluX2NwdWlkKGN1cnJkLCBsZWFmLCBzdWJsZWFmLCAmYSwg JmIsICZjLCAmZCk7CkBAIC0xMjg0LDE3ICsxMjc1LDIxIEBAIHZvaWQgcHZf Y3B1aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAgICAgY2FzZSAw eDgwMDAwMDFlOiAvKiBFeHRlbmRlZCB0b3BvbG9neSByZXBvcnRpbmcgKi8K ICAgICB1bnN1cHBvcnRlZDoKICAgICAgICAgYSA9IGIgPSBjID0gZCA9IDA7 Ci0gICAgICAgIGJyZWFrOworICAgICAgICBnb3RvIG91dDsKICAgICB9CiAK LSBvdXQ6CiAgICAgLyogVlBNVSBtYXkgZGVjaWRlIHRvIG1vZGlmeSBzb21l IG9mIHRoZSBsZWF2ZXMgKi8KICAgICB2cG11X2RvX2NwdWlkKGxlYWYsICZh LCAmYiwgJmMsICZkKTsKIAotICAgIHJlZ3MtPmVheCA9IGE7Ci0gICAgcmVn cy0+ZWJ4ID0gYjsKLSAgICByZWdzLT5lY3ggPSBjOwotICAgIHJlZ3MtPmVk eCA9IGQ7Cisgb3V0OgorICAgIGlmICggZWF4ICkKKyAgICAgICAgKmVheCA9 IGE7CisgICAgaWYgKCBlYnggKQorICAgICAgICAqZWJ4ID0gYjsKKyAgICBp ZiAoIGVjeCApCisgICAgICAgICplY3ggPSBjOworICAgIGlmICggZWR4ICkK KyAgICAgICAgKmVkeCA9IGQ7CiB9CiAKIHN0YXRpYyBpbnQgZW11bGF0ZV9p bnZhbGlkX3JkdHNjcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKQEAg LTEzNTMsNyArMTM0OCw3IEBAIHN0YXRpYyBpbnQgZW11bGF0ZV9mb3JjZWRf aW52YWxpZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKIAogICAg IGVpcCArPSBzaXplb2YoaW5zdHIpOwogCi0gICAgcHZfY3B1aWQocmVncyk7 CisgICAgcHZfY3B1aWRfcmVncyhyZWdzKTsKIAogICAgIGluc3RydWN0aW9u X2RvbmUocmVncywgZWlwLCAwKTsKIApAQCAtMjgyOCwxNyArMjgyMyw3IEBA IHN0YXRpYyBpbnQgcHJpdl9vcF93cml0ZV9tc3IodW5zaWduZWQgaW50IHJl ZywgdWludDY0X3QgdmFsLAogaW50IHB2X2VtdWxfY3B1aWQodW5zaWduZWQg aW50ICplYXgsIHVuc2lnbmVkIGludCAqZWJ4LCB1bnNpZ25lZCBpbnQgKmVj eCwKICAgICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCAqZWR4LCBzdHJ1 Y3QgeDg2X2VtdWxhdGVfY3R4dCAqY3R4dCkKIHsKLSAgICBzdHJ1Y3QgY3B1 X3VzZXJfcmVncyByZWdzID0gKmN0eHQtPnJlZ3M7Ci0KLSAgICByZWdzLl9l YXggPSAqZWF4OwotICAgIHJlZ3MuX2VjeCA9ICplY3g7Ci0KLSAgICBwdl9j cHVpZCgmcmVncyk7Ci0KLSAgICAqZWF4ID0gcmVncy5fZWF4OwotICAgICpl YnggPSByZWdzLl9lYng7Ci0gICAgKmVjeCA9IHJlZ3MuX2VjeDsKLSAgICAq ZWR4ID0gcmVncy5fZWR4OworICAgIHB2X2NwdWlkKCplYXgsICplY3gsIGVh eCwgZWJ4LCBlY3gsIGVkeCk7CiAKICAgICByZXR1cm4gWDg2RU1VTF9PS0FZ OwogfQpAQCAtMzMyOSw3ICszMzE0LDcgQEAgc3RhdGljIGludCBlbXVsYXRl X3ByaXZpbGVnZWRfb3Aoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAg ICAgICAgIGlmICggdi0+YXJjaC5jcHVpZF9mYXVsdGluZyAmJiAhZ3Vlc3Rf a2VybmVsX21vZGUodiwgcmVncykgKQogICAgICAgICAgICAgZ290byBmYWls OwogCi0gICAgICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICBwdl9jcHVp ZF9yZWdzKHJlZ3MpOwogICAgICAgICBicmVhazsKIAogICAgIGRlZmF1bHQ6 CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYveHN0YXRlLmMgYi94ZW4vYXJj aC94ODYveHN0YXRlLmMKaW5kZXggNWM0M2VjOS4uMDlkMjVhYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L3hzdGF0ZS5jCisrKyBiL3hlbi9hcmNoL3g4 Ni94c3RhdGUuYwpAQCAtNjU0LDI0ICs2NTQsMTggQEAgc3RhdGljIGJvb2xf dCB2YWxpZF94Y3IwKHU2NCB4Y3IwKQogCiBzdGF0aWMgdWludDY0X3QgZ3Vl c3RfeGNyMF9tYXgoY29uc3Qgc3RydWN0IGRvbWFpbiAqZCkKIHsKKyAgICB1 aW50MzJfdCBlYXgsIGVkeDsKKwogICAgIGlmICggaGFzX2h2bV9jb250YWlu ZXJfZG9tYWluKGQpICkKICAgICB7Ci0gICAgICAgIHVpbnQzMl90IGVheCwg ZWN4ID0gMCwgZWR4OworICAgICAgICB1aW50MzJfdCBlY3ggPSAwOwogCiAg ICAgICAgIGh2bV9jcHVpZChYU1RBVEVfQ1BVSUQsICZlYXgsIE5VTEwsICZl Y3gsICZlZHgpOwotCi0gICAgICAgIHJldHVybiAoKHVpbnQ2NF90KWVkeCA8 PCAzMikgfCBlYXg7CiAgICAgfQogICAgIGVsc2UKLSAgICB7Ci0gICAgICAg IHN0cnVjdCBjcHVfdXNlcl9yZWdzIHJlZ3MgPSB7IH07CisgICAgICAgIHB2 X2NwdWlkKFhTVEFURV9DUFVJRCwgMCwgJmVheCwgTlVMTCwgTlVMTCwgJmVk eCk7CiAKLSAgICAgICAgcmVncy5fZWF4ID0gWFNUQVRFX0NQVUlEOwotICAg ICAgICByZWdzLl9lY3ggPSAwOwotICAgICAgICBwdl9jcHVpZCgmcmVncyk7 Ci0KLSAgICAgICAgcmV0dXJuIChyZWdzLnJkeCA8PCAzMikgfCByZWdzLl9l YXg7Ci0gICAgfQorICAgIHJldHVybiAoKHVpbnQ2NF90KWVkeCA8PCAzMikg fCBlYXg7CiB9CiAKIGludCB2YWxpZGF0ZV94c3RhdGUoY29uc3Qgc3RydWN0 IGRvbWFpbiAqZCwgdWludDY0X3QgeGNyMCwgdWludDY0X3QgeGNyMF9hY2N1 bSwKZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29y LmggYi94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oCmluZGV4IDU4 MWQ3YjAuLjUwYmFkYWIgMTAwNjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKKysrIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9j ZXNzb3IuaApAQCAtNjYzLDcgKzY2MywxNCBAQCBlbnVtIGdldF9jcHVfdmVu ZG9yIHsKIH07CiAKIGludCBnZXRfY3B1X3ZlbmRvcihjb25zdCBjaGFyIHZl bmRvcl9pZFtdLCBlbnVtIGdldF9jcHVfdmVuZG9yKTsKLXZvaWQgcHZfY3B1 aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpOwordm9pZCBwdl9jcHVp ZCh1aW50MzJfdCBsZWFmLCB1aW50MzJfdCBzdWJsZWFmLAorICAgICAgICAg ICAgICB1aW50MzJfdCAqZWF4LCB1aW50MzJfdCAqZWJ4LCB1aW50MzJfdCAq ZWN4LCB1aW50MzJfdCAqZWR4KTsKKworc3RhdGljIGlubGluZSB2b2lkIHB2 X2NwdWlkX3JlZ3Moc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCit7Cisg ICAgcHZfY3B1aWQocmVncy0+X2VheCwgcmVncy0+X2VjeCwKKyAgICAgICAg ICAgICAmcmVncy0+X2VheCwgJnJlZ3MtPl9lYngsICZyZWdzLT5fZWN4LCAm cmVncy0+X2VkeCk7Cit9CiAKICNlbmRpZiAvKiAhX19BU1NFTUJMWV9fICov CiAK --=separator Content-Type: application/octet-stream; name="xsa293/4.8-2.patch" Content-Disposition: attachment; filename="xsa293/4.8-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKUmVwb3J0ZWQtYnk6IEFuZHkgTHV0b21pcnNraSA8bHV0 b0BrZXJuZWwub3JnPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxh bmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogSmFuIEJl dWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwppbmRl eCA0MDhmYzBiLi42YzM4ZDg0IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv ZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L2RvbWFpbi5jCkBAIC0zNzcs NiArMzc3LDYwIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjFfZWN4ID0gMCwg bGVhZjFfZWR4ID0gMDsKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjdfMF9lYngg PSAwOworCisgICAgcHZfY3B1aWQoMSwgMCwgTlVMTCwgTlVMTCwgJmxlYWYx X2VjeCwgJmxlYWYxX2VkeCk7CisgICAgcHZfY3B1aWQoNywgMCwgTlVMTCwg JmxlYWY3XzBfZWJ4LCBOVUxMLCBOVUxMKTsKKworICAgIC8qIERpc2NhcmQg YXR0ZW1wdHMgdG8gc2V0IGd1ZXN0IGNvbnRyb2xsYWJsZSBiaXRzIG91dHNp ZGUgb2YgdGhlIHBvbGljeS4gKi8KKyAgICBjcjQgJj0gfigoKGxlYWYxX2Vk eCAmIGNwdWZlYXRfbWFzayhYODZfRkVBVFVSRV9UU0MpKQorICAgICAgICAg ICAgICA/IDAgOiBYODZfQ1I0X1RTRCkgfAorICAgICAgICAgICAgICgobGVh ZjFfZWR4ICYgY3B1ZmVhdF9tYXNrKFg4Nl9GRUFUVVJFX0RFKSkKKyAgICAg ICAgICAgICAgPyAwIDogWDg2X0NSNF9ERSkgfAorICAgICAgICAgICAgICgo bGVhZjdfMF9lYnggJiBjcHVmZWF0X21hc2soWDg2X0ZFQVRVUkVfRlNHU0JB U0UpKQorICAgICAgICAgICAgICA/IDAgOiBYODZfQ1I0X0ZTR1NCQVNFKSB8 CisgICAgICAgICAgICAgKChsZWFmMV9lY3ggJiBjcHVmZWF0X21hc2soWDg2 X0ZFQVRVUkVfWFNBVkUpKQorICAgICAgICAgICAgICA/IDAgOiBYODZfQ1I0 X09TWFNBVkUpKTsKKworICAgIC8qIE1hc2tzIGV4cGVjdGVkIHRvIGJlIGRp c2pvaW50IHNldHMuICovCisgICAgQlVJTERfQlVHX09OKFBWX0NSNF9HVUVT VF9NQVNLICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFTSyk7CisKKyAgICAv KgorICAgICAqIEEgZ3Vlc3Qgc2VlcyB0aGUgcG9saWN5IHN1YnNldCBvZiBp dHMgb3duIGNob2ljZSBvZiBndWVzdCBjb250cm9sbGFibGUKKyAgICAgKiBi aXRzLCBhbmQgYSBzdWJzZXQgb2YgWGVuJ3MgY2hvaWNlIG9mIGNlcnRhaW4g aGFyZHdhcmUgc2V0dGluZ3MuCisgICAgICovCisgICAgcmV0dXJuICgoY3I0 ICYgUFZfQ1I0X0dVRVNUX01BU0spIHwKKyAgICAgICAgICAgIChtbXVfY3I0 X2ZlYXR1cmVzICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFTSykpOworfQor Cit1bnNpZ25lZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1 ICp2KQoreworICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKmQgPSB2LT5kb21h aW47CisgICAgdW5zaWduZWQgbG9uZyBjcjQgPSBtbXVfY3I0X2ZlYXR1cmVz ICYKKyAgICAgICAgfihYODZfQ1I0X1BDSURFIHwgWDg2X0NSNF9QR0UgfCBY ODZfQ1I0X1RTRCk7CisKKyAgICAvKgorICAgICAqIFBDSURFIG9yIFBHRSBk ZXBlbmRzIG9uIHRoZSBQQ0lEL1hQVEkgc2V0dGluZ3MsIGJ1dCBtdXN0IG5v dCBib3RoIGJlCisgICAgICogc2V0LCBhcyBpdCBpbXBhY3RzIHRoZSBzYWZl dHkgb2YgVExCIGZsdXNoaW5nLgorICAgICAqLworICAgIGlmICggZC0+YXJj aC5wdl9kb21haW4ucGNpZCApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BD SURFOworICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wdl9kb21haW4ueHB0aSAp CisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKKworICAgIC8qCisgICAg ICogVFNEIGlzIG5lZWRlZCBpZiBlaXRoZXIgdGhlIGd1ZXN0IGhhcyBlbGVj dGVkIHRvIHVzZSBpdCwgb3IgWGVuIGlzCisgICAgICogdmlydHVhbGlzaW5n IHRoZSBUU0MgdmFsdWUgdGhlIGd1ZXN0IHNlZXMuCisgICAgICovCisgICAg aWYgKCBkLT5hcmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVn WzRdICYgWDg2X0NSNF9UU0QpICkKKyAgICAgICAgY3I0IHw9IFg4Nl9DUjRf VFNEOworCisgICAgcmV0dXJuIGNyNDsKK30KKwogc3RhdGljIHZvaWQgc2V0 X2RvbWFpbl94cHRpKHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAgaWYgKCBp c19wdl8zMmJpdF9kb21haW4oZCkgKQpAQCAtNTY0LDYgKzYxOCw4IEBAIGlu dCB2Y3B1X2luaXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAKICAgICAgICAg LyogUFYgZ3Vlc3RzIGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4g Ki8KICAgICAgICAgdi0+cGVyaW9kaWNfcGVyaW9kID0gTUlMTElTRUNTKDEw KTsKKworICAgICAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2 X2ZpeHVwX2d1ZXN0X2NyNCh2LCAwKTsKICAgICB9CiAKICAgICB2LT5hcmNo LnNjaGVkdWxlX3RhaWwgPSBjb250aW51ZV9ub25pZGxlX2RvbWFpbjsKQEAg LTU3Niw4ICs2MzIsNiBAQCBpbnQgdmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2 Y3B1ICp2KQogICAgICAgICB2LT5hcmNoLmNyMyAgICAgICAgICAgPSBfX3Bh KGlkbGVfcGdfdGFibGUpOwogICAgIH0KIAotICAgIHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KG1tdV9j cjRfZmVhdHVyZXMpOwotCiAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4o ZCkgKQogICAgIHsKICAgICAgICAgaWYgKCAocmMgPSBzZXR1cF9jb21wYXRf YXJnX3hsYXQodikpICkKQEAgLTk1NSw0OSArMTAwOSw2IEBAIGludCBhcmNo X2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVjdCBkb21haW4gKmQpCiAgICAgcmV0 dXJuIHJldDsKIH0KIAotLyoKLSAqIFRoZXNlIGFyZSB0aGUgbWFza3Mgb2Yg Q1I0IGJpdHMgKHN1YmplY3QgdG8gaGFyZHdhcmUgYXZhaWxhYmlsaXR5KSB3 aGljaCBhCi0gKiBQViBndWVzdCBtYXkgbm90IGxlZ2l0aW1pYXRlbHkgYXR0 ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0YXRpYyB1bnNpZ25lZCBsb25nIF9f cmVhZF9tb3N0bHkgcHZfY3I0X21hc2ssIGNvbXBhdF9wdl9jcjRfbWFzazsK LQotc3RhdGljIGludCBfX2luaXQgaW5pdF9wdl9jcjRfbWFza3Modm9pZCkK LXsKLSAgICB1bnNpZ25lZCBsb25nIGNvbW1vbl9tYXNrID0gflg4Nl9DUjRf VFNEOwotCi0gICAgLyoKLSAgICAgKiBBbGwgUFYgZ3Vlc3RzIG1heSBhdHRl bXB0IHRvIG1vZGlmeSBUU0QsIERFIGFuZCBPU1hTQVZFLgotICAgICAqLwot ICAgIGlmICggY3B1X2hhc19kZSApCi0gICAgICAgIGNvbW1vbl9tYXNrICY9 IH5YODZfQ1I0X0RFOwotICAgIGlmICggY3B1X2hhc194c2F2ZSApCi0gICAg ICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X09TWFNBVkU7Ci0KLSAgICBw dl9jcjRfbWFzayA9IGNvbXBhdF9wdl9jcjRfbWFzayA9IGNvbW1vbl9tYXNr OwotCi0gICAgLyoKLSAgICAgKiA2NGJpdCBQViBndWVzdHMgbWF5IGF0dGVt cHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgotICAgICAqLwotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCi0gICAgICAgIHB2X2NyNF9tYXNrICY9IH5YODZf Q1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0dXJuIDA7Ci19Ci1fX2luaXRjYWxs KGluaXRfcHZfY3I0X21hc2tzKTsKLQotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfZml4dXAoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2lnbmVkIGxv bmcgZ3Vlc3RfY3I0KQotewotICAgIHVuc2lnbmVkIGxvbmcgaHZfY3I0ID0g cmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KHJlYWRfY3I0KCkpOwotICAgIHVu c2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2XzMyYml0X3ZjcHUodikgPyBjb21w YXRfcHZfY3I0X21hc2sgOiBwdl9jcjRfbWFzazsKLQotICAgIGlmICggKGd1 ZXN0X2NyNCAmIG1hc2spICE9IChodl9jcjQgJiBtYXNrKSApCi0gICAgICAg IHByaW50ayhYRU5MT0dfR19XQVJOSU5HCi0gICAgICAgICAgICAgICAiZCVk IGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2J3MgQ1I0IGZsYWdzICUwOGx4IC0+ ICUwOGx4XG4iLAotICAgICAgICAgICAgICAgY3VycmVudC0+ZG9tYWluLT5k b21haW5faWQsIHYsIGh2X2NyNCwgZ3Vlc3RfY3I0KTsKLQotICAgIHJldHVy biAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vlc3RfY3I0ICYgfm1hc2spOwotfQot CiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0X2NvbnRleHQgdmNwdV9ndWVzdF9j b250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0IGZwdV9jdHh0LngKIENIRUNLX0ZJ RUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3RfY29udGV4dCwgZnB1X2N0eHQpOwpA QCAtMTAxMSw3ICsxMDIyLDcgQEAgaW50IGFyY2hfc2V0X2luZm9fZ3Vlc3Qo CiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKICAgICB1bnNp Z25lZCBsb25nIGNyM19nZm47CiAgICAgc3RydWN0IHBhZ2VfaW5mbyAqY3Iz X3BhZ2U7Ci0gICAgdW5zaWduZWQgbG9uZyBmbGFncywgY3I0OworICAgIHVu c2lnbmVkIGxvbmcgZmxhZ3M7CiAgICAgdW5zaWduZWQgaW50IGk7CiAgICAg aW50IHJjID0gMCwgY29tcGF0OwogCkBAIC0xMjI4LDkgKzEyMzksOCBAQCBp bnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2LT5hcmNoLnB2X3ZjcHUu Y3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAgIHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+WDg2X0NSMF9UUzsKIAot ICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdOwotICAgIHYt PmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0ID8gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFsX2NyNF90b19wdl9ndWVz dF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1cF9ndWVzdF9jcjQodiwg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwogCiAgICAgbWVtc2V0KHYt PmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5hcmNoLmRlYnVncmVnKSk7 CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysgKQpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwppbmRleCAy YjkzZWZiLi40ZTk4ZjgyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0u YworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNTAxLDMzICs1MDEsMTMg QEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAqdiwgdW5zaWduZWQgbG9u ZyBtZm4pCiAgICAgICAgIHYtPmFyY2guY3IzIHw9IGdldF9wY2lkX2JpdHMo diwgZmFsc2UpOwogfQogCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0X2NyNF90 b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKLXsKLSAgICBjb25z dCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOwotICAgIHVuc2lnbmVk IGxvbmcgY3I0OwotCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1LmN0cmxy ZWdbNF0gJiB+WDg2X0NSNF9ERTsKLSAgICBjcjQgfD0gbW11X2NyNF9mZWF0 dXJlcyAmIChYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfU01FUCB8IFg4Nl9DUjRf U01BUCB8Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgWDg2X0NS NF9PU1hTQVZFIHwgWDg2X0NSNF9GU0dTQkFTRSk7Ci0KLSAgICBpZiAoIGQt PmFyY2gucHZfZG9tYWluLnBjaWQgKQotICAgICAgICBjcjQgfD0gWDg2X0NS NF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHZfZG9tYWluLnhw dGkgKQotICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7Ci0KLSAgICBjcjQg fD0gZC0+YXJjaC52dHNjID8gWDg2X0NSNF9UU0QgOiAwOwotCi0gICAgcmV0 dXJuIGNyNDsKLX0KLQogdm9pZCB3cml0ZV9wdGJhc2Uoc3RydWN0IHZjcHUg KnYpCiB7CiAgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9IGdldF9j cHVfaW5mbygpOwogICAgIHVuc2lnbmVkIGxvbmcgbmV3X2NyNDsKIAogICAg IG5ld19jcjQgPSAoaXNfcHZfdmNwdSh2KSAmJiAhaXNfaWRsZV92Y3B1KHYp KQotICAgICAgICAgICAgICA/IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNCh2 KQotICAgICAgICAgICAgICA6ICgocmVhZF9jcjQoKSAmIH4oWDg2X0NSNF9Q Q0lERSB8IFg4Nl9DUjRfVFNEKSkgfCBYODZfQ1I0X1BHRSk7CisgICAgICAg ICAgICAgID8gcHZfbWFrZV9jcjQodikgOiBtbXVfY3I0X2ZlYXR1cmVzOwog CiAgICAgaWYgKCBpc19wdl92Y3B1KHYpICYmIHYtPmRvbWFpbi0+YXJjaC5w dl9kb21haW4ueHB0aSApCiAgICAgewpAQCAtNTQ2LDggKzUyNiw2IEBAIHZv aWQgd3JpdGVfcHRiYXNlKHN0cnVjdCB2Y3B1ICp2KQogICAgICAgICBzd2l0 Y2hfY3IzX2NyNCh2LT5hcmNoLmNyMywgbmV3X2NyNCk7CiAgICAgICAgIGNw dV9pbmZvLT5wdl9jcjMgPSAwOwogICAgIH0KLQotICAgIEFTU0VSVChpc19w dl92Y3B1KHYpIHx8IHJlYWRfY3I0KCkgPT0gbW11X2NyNF9mZWF0dXJlcyk7 CiB9CiAKIC8qCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IDc3Zjc4NmMuLmE4YWViZTUg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9h cmNoL3g4Ni90cmFwcy5jCkBAIC05NjYsNyArOTY2LDggQEAgc3RhdGljIHZv aWQgX2RvbWFpbl9jcHVpZChjb25zdCBzdHJ1Y3QgZG9tYWluICpjdXJyZCwK ICAgICAgICAgICAgICAgICAgICAgICAgICAgdW5zaWduZWQgaW50ICplYXgs IHVuc2lnbmVkIGludCAqZWJ4LAogICAgICAgICAgICAgICAgICAgICAgICAg ICB1bnNpZ25lZCBpbnQgKmVjeCwgdW5zaWduZWQgaW50ICplZHgpCiB7Ci0g ICAgaWYgKCAhaXNfY29udHJvbF9kb21haW4oY3VycmQpICYmICFpc19oYXJk d2FyZV9kb21haW4oY3VycmQpICkKKyAgICBpZiAoICFpc19jb250cm9sX2Rv bWFpbihjdXJyZCkgJiYgIWlzX2hhcmR3YXJlX2RvbWFpbihjdXJyZCkgJiYK KyAgICAgICAgICFpc19pZGxlX2RvbWFpbihjdXJyZCkgKQogICAgICAgICBk b21haW5fY3B1aWQoY3VycmQsIGxlYWYsIHN1YmxlYWYsIGVheCwgZWJ4LCBl Y3gsIGVkeCk7CiAgICAgZWxzZQogICAgICAgICBjcHVpZF9jb3VudChsZWFm LCBzdWJsZWFmLCBlYXgsIGVieCwgZWN4LCBlZHgpOwpAQCAtMjM3Miw4ICsy MzczLDggQEAgc3RhdGljIGludCBwcml2X29wX3dyaXRlX2NyKHVuc2lnbmVk IGludCByZWcsIHVuc2lnbmVkIGxvbmcgdmFsLAogICAgIH0KIAogICAgIGNh c2UgNDogLyogV3JpdGUgQ1I0ICovCi0gICAgICAgIGN1cnItPmFyY2gucHZf dmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0X2ZpeHVwKGN1cnIsIHZh bCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9ndWVzdF9jcjRfdG9fcmVhbF9j cjQoY3VycikpOworICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJl Z1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOworICAgICAg ICB3cml0ZV9jcjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0 X3N3aXRjaF9sZXZlbGxpbmcoY3Vycik7CiAgICAgICAgIHJldHVybiBYODZF TVVMX09LQVk7CiAgICAgfQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNt LXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK aW5kZXggZTdhYmFhZC4uMDEzNzI4MyAxMDA2NDQKLS0tIGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCkBAIC02NDIsMTYgKzY0MiwyMiBAQCBib29sX3QgdXBkYXRl X3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3QgdmNwdSAqLAogdm9pZCB2 Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVjdCB2Y3B1ICopOwogdm9p ZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0cnVjdCB2Y3B1ICopOwog Ci0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFyZSBub3QgdW5kZXIgZ3Vl c3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2Zp eHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2lnbmVkIGxvbmcgZ3Vlc3Rf Y3I0KTsKKy8qCisgKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2ds ZSBpbiBpdHMgdmlldyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bwor ICogaGFyZHdhcmUsIHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgor ICovCisjZGVmaW5lIFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NS NF9UU0QgfCBYODZfQ1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9D UjRfT1NYU0FWRSkKKworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBv YnNlcnZlIGZyb20gdGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisj ZGVmaW5lIFBWX0NSNF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZf Q1I0X1BBRSB8IFg4Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZf Q1I0X09TWE1NRVhDUFQpCiAKLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12 aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25n IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAq dik7CisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNvbnN0cnVjdCB0aGUg cmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVlLiAqLwordW5zaWdu ZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKIAotI2RlZmluZSByZWFsX2NyNF90 b19wdl9ndWVzdF9jcjQoYykgICAgICAgICAgICAgICAgICAgICAgICAgXAot ICAgICgoYykgJiB+KFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZf Q1I0X1RTRCB8ICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FW RSB8IFg4Nl9DUjRfU01FUCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAg ICAgIFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0 X1BDSURFKSkKKy8qIENyZWF0ZSBhIGNyNCB2YWx1ZSB0byBsb2FkIGludG8g aGFyZHdhcmUsIGJhc2VkIG9uIHZjcHUgc2V0dGluZ3MuICovCit1bnNpZ25l ZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKIAog dm9pZCBkb21haW5fY3B1aWQoY29uc3Qgc3RydWN0IGRvbWFpbiAqZCwKICAg ICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCAgaW5wdXQsCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.8-3.patch" Content-Disposition: attachment; filename="xsa293/4.8-3.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClNpZ25lZC1vZmYtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJl dmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Cgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gv eDg2L2RvbWFpbi5jCmluZGV4IDEyMGYxZTMuLmQyNDZlNDAgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYv ZG9tYWluLmMKQEAgLTQyOCw2ICs0MjgsMTYgQEAgdW5zaWduZWQgbG9uZyBw dl9tYWtlX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGQt PmFyY2gudnRzYyB8fCAodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBY ODZfQ1I0X1RTRCkgKQogICAgICAgICBjcjQgfD0gWDg2X0NSNF9UU0Q7CiAK KyAgICAvKgorICAgICAqIFRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgYXJlIG9u bHkgdXNlYWJsZSBpbiA2NGJpdCBjb2RlIHNlZ21lbnRzLiAgV2hpbGUKKyAg ICAgKiB3ZSBtdXN0IG5vdCBoYXZlIENSNC5GU0dTQkFTRSBzZXQgYmVoaW5k IHRoZSBiYWNrIG9mIGEgNjRiaXQgUFYga2VybmVsLAorICAgICAqIHdlIGRv IGxlYXZlIGl0IHNldCBpbiAzMmJpdCBQViBjb250ZXh0IHRvIHNwZWVkIHVw IFhlbidzIGNvbnRleHQgc3dpdGNoCisgICAgICogcGF0aC4KKyAgICAgKi8K KyAgICBpZiAoICFpc19wdl8zMmJpdF9kb21haW4oZCkgJiYKKyAgICAgICAg ICEodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NC QVNFKSApCisgICAgICAgIGNyNCAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKKwog ICAgIHJldHVybiBjcjQ7CiB9CiAKQEAgLTIwMjIsNyArMjAzMiw4IEBAIHN0 YXRpYyB2b2lkIHNhdmVfc2VnbWVudHMoc3RydWN0IHZjcHUgKnYpCiAgICAg cmVncy0+ZnMgPSByZWFkX3NyZWcoZnMpOwogICAgIHJlZ3MtPmdzID0gcmVh ZF9zcmVnKGdzKTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAmJiAh aXNfcHZfMzJiaXRfdmNwdSh2KSApCisgICAgLyogJWZzLyVncyBiYXNlcyBj YW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNFIGFyZSB1c2FibGUu ICovCisgICAgaWYgKCAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAgICAgIHYt PmFyY2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOwogICAgICAg ICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9kZSApCmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBiL3hlbi9hcmNoL3g4Ni9z ZXR1cC5jCmluZGV4IDU1MDQzNWMuLjNhN2IzNjIgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9zZXR1cC5j CkBAIC0xNTA0LDcgKzE1MDQsNyBAQCB2b2lkIF9faW5pdCBub3JldHVybiBf X3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9wKQogCiAgICAgY3I0X3B2 MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBYRU5fQ1I0X1BWMzJfQklU UzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JBU0UpICkKICAgICAgICAg c2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsKIAogICAgIGlmICggb3B0 X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKaW5k ZXggN2Q0NGE0Yy4uYjFjZmY1ZSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKQEAgLTIzNzIs NiArMjM3MiwxNyBAQCBzdGF0aWMgaW50IHByaXZfb3Bfd3JpdGVfY3IodW5z aWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2YWwsCiAgICAgfQogCiAg ICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KKyAgICAgICAgLyoKKyAgICAg ICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2FibGUgRlNHU0JBU0UsIHJl ZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAgICAgICogZ3Vlc3QgYmFz ZXMgbm93IHRoYXQgdGhleSBjYW4gbm8gbG9uZ2VyIGNoYW5nZS4KKyAgICAg ICAgICovCisgICAgICAgIGlmICggKGN1cnItPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYKKyAgICAgICAgICAgICAh KHZhbCAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNl KCk7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9r ZXJuZWwgPSBfX3JkZ3NiYXNlKCk7CisgICAgICAgIH0KKwogICAgICAgICBj dXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0 X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9j cjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcoY3Vy cik7CkBAIC0yNDMyLDE0ICsyNDQzLDE1IEBAIHN0YXRpYyBpbnQgcHJpdl9v cF9yZWFkX21zcih1bnNpZ25lZCBpbnQgcmVnLCB1aW50NjRfdCAqdmFsLAog ICAgIGNhc2UgTVNSX0ZTX0JBU0U6CiAgICAgICAgIGlmICggaXNfcHZfMzJi aXRfZG9tYWluKGN1cnJkKSApCiAgICAgICAgICAgICBicmVhazsKLSAgICAg ICAgKnZhbCA9IGNwdV9oYXNfZnNnc2Jhc2UgPyBfX3JkZnNiYXNlKCkgOiBj dXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZTsKKyAgICAgICAgKnZhbCA9IChy ZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZnNiYXNlKCkK KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZTsKICAgICAgICAgcmV0 dXJuIFg4NkVNVUxfT0tBWTsKIAogICAgIGNhc2UgTVNSX0dTX0JBU0U6CiAg ICAgICAgIGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGN1cnJkKSApCiAgICAg ICAgICAgICBicmVhazsKLSAgICAgICAgKnZhbCA9IGNwdV9oYXNfZnNnc2Jh c2UgPyBfX3JkZ3NiYXNlKCkKLSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9rZXJuZWw7Cisg ICAgICAgICp2YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ID8gX19yZGdzYmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsOwogICAgICAgICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAg ICAgY2FzZSBNU1JfU0hBRE9XX0dTX0JBU0U6CmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYveDg2XzY0L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYveDg2XzY0 L3RyYXBzLmMKaW5kZXggMzk2ZTY3Ny4uY2IyYWJiMSAxMDA2NDQKLS0tIGEv eGVuL2FyY2gveDg2L3g4Nl82NC90cmFwcy5jCisrKyBiL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYwpAQCAtMjY3LDcgKzI2Nyw5IEBAIHZvaWQgdG9n Z2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB7CiAgICAgaWYgKCBp c19wdl8zMmJpdF92Y3B1KHYpICkKICAgICAgICAgcmV0dXJuOwotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCisKKyAgICAvKiAlZnMvJWdzIGJhc2Vz IGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJs ZS4gKi8KKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNF ICkKICAgICB7CiAgICAgICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tl cm5lbF9tb2RlICkKICAgICAgICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19i YXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKZGlmZiAtLWdpdCBhL3hlbi9p bmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9jcHVmZWF0dXJlLmgKaW5kZXggYWYyYTg5Mi4uODlmZjI0OSAxMDA2 NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKKysr IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKQEAgLTgwLDcg KzgwLDYgQEAgWEVOX0NQVUZFQVRVUkUoWEVOX0xCUiwgICAgICAgICAoRlND QVBJTlRTKzApKjMyKzI0KSAvKiBYZW4gdXNlcyBNU1JfREVCVUdDVEwuTEIK ICNkZWZpbmUgY3B1X2hhc19ueAkJYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJF X05YKQogI2RlZmluZSBjcHVfaGFzX2NsZmx1c2gJCWJvb3RfY3B1X2hhcyhY ODZfRkVBVFVSRV9DTEZMVVNIKQogI2RlZmluZSBjcHVfaGFzX3BhZ2UxZ2IJ CWJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9QQUdFMUdCKQotI2RlZmluZSBj cHVfaGFzX2ZzZ3NiYXNlCWJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dT QkFTRSkKICNkZWZpbmUgY3B1X2hhc19hcGVyZm1wZXJmCWJvb3RfY3B1X2hh cyhYODZfRkVBVFVSRV9BUEVSRk1QRVJGKQogI2RlZmluZSBjcHVfaGFzX3Nt ZXAgICAgICAgICAgICBib290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfU01FUCkK ICNkZWZpbmUgY3B1X2hhc19pbnZwY2lkICAgICAgICAgYm9vdF9jcHVfaGFz KFg4Nl9GRUFUVVJFX0lOVlBDSUQpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVk ZS9hc20teDg2L21zci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3IuaApp bmRleCA1ZTFkZjhmLi4wOGVlYzMwIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS9hc20teDg2L21zci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNy LmgKQEAgLTEwOSw2ICsxMDksMTQgQEAgc3RhdGljIGlubGluZSB1aW50NjRf dCByZHRzY19vcmRlcmVkKHZvaWQpCiAJCQkgIDogIj1hIiAobG93KSwgIj1k IiAoaGlnaCkgXAogCQkJICA6ICJjIiAoY291bnRlcikpCiAKKy8qCisgKiBP biBoYXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgbG9h ZGVkIGludG8gaGFyZHdhcmUgaXMgdGhlCisgKiBndWVzdCBrZXJuZWwncyBj aG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0cyAoWGVuJ3MgY2hvaWNlIGZvciBJ ZGxlLCBIVk0gYW5kCisgKiAzMmJpdCBQVikuCisgKgorICogVGhlcmVmb3Jl LCB0aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9ucyBhcmUgb25s eSBzYWZlIHRvIHVzZSBpZgorICogJWNyNC5mc2dzYmFzZSBpcyBzZXQuCisg Ki8KIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBfX3JkZnNiYXNlKHZv aWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwpAQCAtMTM5LDcgKzE0 Nyw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGZzYmFzZSh2 b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICgg Y3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZnNiYXNlKCk7 CiAKICAgICByZG1zcmwoTVNSX0ZTX0JBU0UsIGJhc2UpOwpAQCAtMTUxLDcg KzE1OSw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFz ZSh2b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYg WDg2X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZ3NiYXNl KCk7CiAKICAgICByZG1zcmwoTVNSX0dTX0JBU0UsIGJhc2UpOwpAQCAtMTYx LDcgKzE2OSw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdz YmFzZSh2b2lkKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5z aWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dzYmFz ZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSAp CiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0 aWxlICggIndyZnNiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpA QCAtMTczLDcgKzE4MSw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFz ZSh1bnNpZ25lZCBsb25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3 cmdzYmFzZSh1bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVf aGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0 X0ZTR1NCQVNFICkKICNpZmRlZiBIQVZFX0dBU19GU0dTQkFTRQogICAgICAg ICBhc20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkg KTsKICNlbHNlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3By b2Nlc3Nvci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaApp bmRleCA1MGJhZGFiLi5hNTMxOWUzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS9hc20teDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKQEAgLTM4MCwxMSArMzgwLDMxIEBAIHN0YXRpYyBp bmxpbmUgdW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMg aW5saW5lIHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogewor ICAgIHN0cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOwor CiAgICAgLyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5h YmxlZCEgKi8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwg ISh2YWwgJiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8o KS0+Y3I0ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVj cjQiIDogOiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3 YXJlIHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlz IHRoZSBrZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vl c3RzLCB3aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisg ICAgICogaW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3 cn17ZnMsZ3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3Jr IG91dCB3aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRo ZSB7UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFj ayB0bworICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJz IHJlcXVpcmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElm IEZTR1NCQVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xl YXIsIHJlZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUg dXBkYXRpbmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4g dGhlCisgICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0 IGluIGluZm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAg ICBpbmZvLT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNH U0JBU0UpOworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUl Y3I0IgorICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAv KiBGb3JjZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAg ICAgICAgICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5m by0+Y3I0ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0 IHJlc3BlY3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.9-1.patch" Content-Disposition: attachment; filename="xsa293/4.9-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg NjFmNjY3MS4uZTliOTVlNCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtMzk4LDYg KzM5OCw1MiBAQCBzdGF0aWMgdm9pZCByZWxlYXNlX2NvbXBhdF9sNChzdHJ1 Y3QgdmNwdSAqdikKICAgICB2LT5hcmNoLmd1ZXN0X3RhYmxlX3VzZXIgPSBw YWdldGFibGVfbnVsbCgpOwogfQogCit1bnNpZ25lZCBsb25nIHB2X2ZpeHVw X2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwgdW5zaWduZWQgbG9u ZyBjcjQpCit7CisgICAgY29uc3Qgc3RydWN0IGNwdWlkX3BvbGljeSAqcCA9 IHYtPmRvbWFpbi0+YXJjaC5jcHVpZDsKKworICAgIC8qIERpc2NhcmQgYXR0 ZW1wdHMgdG8gc2V0IGd1ZXN0IGNvbnRyb2xsYWJsZSBiaXRzIG91dHNpZGUg b2YgdGhlIHBvbGljeS4gKi8KKyAgICBjcjQgJj0gfigocC0+YmFzaWMudHNj ICAgICA/IDAgOiBYODZfQ1I0X1RTRCkgICAgICB8CisgICAgICAgICAgICAg KHAtPmJhc2ljLmRlICAgICAgPyAwIDogWDg2X0NSNF9ERSkgICAgICAgfAor ICAgICAgICAgICAgIChwLT5mZWF0LmZzZ3NiYXNlID8gMCA6IFg4Nl9DUjRf RlNHU0JBU0UpIHwKKyAgICAgICAgICAgICAocC0+YmFzaWMueHNhdmUgICA/ IDAgOiBYODZfQ1I0X09TWFNBVkUpKTsKKworICAgIC8qIE1hc2tzIGV4cGVj dGVkIHRvIGJlIGRpc2pvaW50IHNldHMuICovCisgICAgQlVJTERfQlVHX09O KFBWX0NSNF9HVUVTVF9NQVNLICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFT Syk7CisKKyAgICAvKgorICAgICAqIEEgZ3Vlc3Qgc2VlcyB0aGUgcG9saWN5 IHN1YnNldCBvZiBpdHMgb3duIGNob2ljZSBvZiBndWVzdCBjb250cm9sbGFi bGUKKyAgICAgKiBiaXRzLCBhbmQgYSBzdWJzZXQgb2YgWGVuJ3MgY2hvaWNl IG9mIGNlcnRhaW4gaGFyZHdhcmUgc2V0dGluZ3MuCisgICAgICovCisgICAg cmV0dXJuICgoY3I0ICYgUFZfQ1I0X0dVRVNUX01BU0spIHwKKyAgICAgICAg ICAgIChtbXVfY3I0X2ZlYXR1cmVzICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVf TUFTSykpOworfQorCit1bnNpZ25lZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0 IHN0cnVjdCB2Y3B1ICp2KQoreworICAgIGNvbnN0IHN0cnVjdCBkb21haW4g KmQgPSB2LT5kb21haW47CisgICAgdW5zaWduZWQgbG9uZyBjcjQgPSBtbXVf Y3I0X2ZlYXR1cmVzICYKKyAgICAgICAgfihYODZfQ1I0X1BDSURFIHwgWDg2 X0NSNF9QR0UgfCBYODZfQ1I0X1RTRCk7CisKKyAgICAvKgorICAgICAqIFBD SURFIG9yIFBHRSBkZXBlbmRzIG9uIHRoZSBQQ0lEL1hQVEkgc2V0dGluZ3Ms IGJ1dCBtdXN0IG5vdCBib3RoIGJlCisgICAgICogc2V0LCBhcyBpdCBpbXBh Y3RzIHRoZSBzYWZldHkgb2YgVExCIGZsdXNoaW5nLgorICAgICAqLworICAg IGlmICggZC0+YXJjaC5wdl9kb21haW4ucGNpZCApCisgICAgICAgIGNyNCB8 PSBYODZfQ1I0X1BDSURFOworICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wdl9k b21haW4ueHB0aSApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKKwor ICAgIC8qCisgICAgICogVFNEIGlzIG5lZWRlZCBpZiBlaXRoZXIgdGhlIGd1 ZXN0IGhhcyBlbGVjdGVkIHRvIHVzZSBpdCwgb3IgWGVuIGlzCisgICAgICog dmlydHVhbGlzaW5nIHRoZSBUU0MgdmFsdWUgdGhlIGd1ZXN0IHNlZXMuCisg ICAgICovCisgICAgaWYgKCBkLT5hcmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZf dmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9UU0QpICkKKyAgICAgICAgY3I0 IHw9IFg4Nl9DUjRfVFNEOworCisgICAgcmV0dXJuIGNyNDsKK30KKwogaW50 IHN3aXRjaF9jb21wYXQoc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICBzdHJ1 Y3QgdmNwdSAqdjsKQEAgLTUxMiwxMiArNTU4LDEyIEBAIGludCB2Y3B1X2lu aXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAKICAgICAgICAgLyogUFYgZ3Vl c3RzIGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4gKi8KICAgICAg ICAgdi0+cGVyaW9kaWNfcGVyaW9kID0gTUlMTElTRUNTKDEwKTsKKworICAg ICAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1 ZXN0X2NyNCh2LCAwKTsKICAgICB9CiAgICAgZWxzZQogICAgICAgICB2LT5h cmNoLmNyMyA9IF9fcGEoaWRsZV9wZ190YWJsZSk7CiAKLSAgICB2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2Ny NChtbXVfY3I0X2ZlYXR1cmVzKTsKLQogICAgIGlmICggaXNfcHZfMzJiaXRf ZG9tYWluKGQpICkKICAgICB7CiAgICAgICAgIGlmICggKHJjID0gc2V0dXBf Y29tcGF0X2FyZ194bGF0KHYpKSApCkBAIC05NTMsNDkgKzk5OSw2IEBAIGlu dCBhcmNoX2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVjdCBkb21haW4gKmQpCiAg ICAgcmV0dXJuIHJldDsKIH0KIAotLyoKLSAqIFRoZXNlIGFyZSB0aGUgbWFz a3Mgb2YgQ1I0IGJpdHMgKHN1YmplY3QgdG8gaGFyZHdhcmUgYXZhaWxhYmls aXR5KSB3aGljaCBhCi0gKiBQViBndWVzdCBtYXkgbm90IGxlZ2l0aW1pYXRl bHkgYXR0ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0YXRpYyB1bnNpZ25lZCBs b25nIF9fcmVhZF9tb3N0bHkgcHZfY3I0X21hc2ssIGNvbXBhdF9wdl9jcjRf bWFzazsKLQotc3RhdGljIGludCBfX2luaXQgaW5pdF9wdl9jcjRfbWFza3Mo dm9pZCkKLXsKLSAgICB1bnNpZ25lZCBsb25nIGNvbW1vbl9tYXNrID0gflg4 Nl9DUjRfVFNEOwotCi0gICAgLyoKLSAgICAgKiBBbGwgUFYgZ3Vlc3RzIG1h eSBhdHRlbXB0IHRvIG1vZGlmeSBUU0QsIERFIGFuZCBPU1hTQVZFLgotICAg ICAqLwotICAgIGlmICggY3B1X2hhc19kZSApCi0gICAgICAgIGNvbW1vbl9t YXNrICY9IH5YODZfQ1I0X0RFOwotICAgIGlmICggY3B1X2hhc194c2F2ZSAp Ci0gICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X09TWFNBVkU7Ci0K LSAgICBwdl9jcjRfbWFzayA9IGNvbXBhdF9wdl9jcjRfbWFzayA9IGNvbW1v bl9tYXNrOwotCi0gICAgLyoKLSAgICAgKiA2NGJpdCBQViBndWVzdHMgbWF5 IGF0dGVtcHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgotICAgICAqLwotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCi0gICAgICAgIHB2X2NyNF9tYXNrICY9 IH5YODZfQ1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0dXJuIDA7Ci19Ci1fX2lu aXRjYWxsKGluaXRfcHZfY3I0X21hc2tzKTsKLQotdW5zaWduZWQgbG9uZyBw dl9ndWVzdF9jcjRfZml4dXAoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2ln bmVkIGxvbmcgZ3Vlc3RfY3I0KQotewotICAgIHVuc2lnbmVkIGxvbmcgaHZf Y3I0ID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KHJlYWRfY3I0KCkpOwot ICAgIHVuc2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2XzMyYml0X3ZjcHUodikg PyBjb21wYXRfcHZfY3I0X21hc2sgOiBwdl9jcjRfbWFzazsKLQotICAgIGlm ICggKGd1ZXN0X2NyNCAmIG1hc2spICE9IChodl9jcjQgJiBtYXNrKSApCi0g ICAgICAgIHByaW50ayhYRU5MT0dfR19XQVJOSU5HCi0gICAgICAgICAgICAg ICAiZCVkIGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2J3MgQ1I0IGZsYWdzICUw OGx4IC0+ICUwOGx4XG4iLAotICAgICAgICAgICAgICAgY3VycmVudC0+ZG9t YWluLT5kb21haW5faWQsIHYsIGh2X2NyNCwgZ3Vlc3RfY3I0KTsKLQotICAg IHJldHVybiAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vlc3RfY3I0ICYgfm1hc2sp OwotfQotCiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0X2NvbnRleHQgdmNwdV9n dWVzdF9jb250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0IGZwdV9jdHh0LngKIENI RUNLX0ZJRUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3RfY29udGV4dCwgZnB1X2N0 eHQpOwpAQCAtMTAwOSw3ICsxMDEyLDcgQEAgaW50IGFyY2hfc2V0X2luZm9f Z3Vlc3QoCiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKICAg ICB1bnNpZ25lZCBsb25nIGNyM19nZm47CiAgICAgc3RydWN0IHBhZ2VfaW5m byAqY3IzX3BhZ2U7Ci0gICAgdW5zaWduZWQgbG9uZyBmbGFncywgY3I0Owor ICAgIHVuc2lnbmVkIGxvbmcgZmxhZ3M7CiAgICAgdW5zaWduZWQgaW50IGk7 CiAgICAgaW50IHJjID0gMCwgY29tcGF0OwogCkBAIC0xMjAwLDkgKzEyMDMs OCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2LT5hcmNoLnB2 X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAgIHYtPmFyY2gu cHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+WDg2X0NSMF9U UzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdOwot ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0ID8gcHZfZ3Vl c3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFsX2NyNF90b19w dl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1cF9ndWVzdF9j cjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwogCiAgICAgbWVt c2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5hcmNoLmRlYnVn cmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysgKQpkaWZmIC0t Z2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwpp bmRleCAyOTgyZWVjLi4yMzQ5MTNmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94 ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNTE0LDMzICs1 MTQsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAqdiwgdW5zaWdu ZWQgbG9uZyBtZm4pCiAgICAgICAgIHYtPmFyY2guY3IzIHw9IGdldF9wY2lk X2JpdHModiwgZmFsc2UpOwogfQogCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0 X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKLXsKLSAg ICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOwotICAgIHVu c2lnbmVkIGxvbmcgY3I0OwotCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF0gJiB+WDg2X0NSNF9ERTsKLSAgICBjcjQgfD0gbW11X2Ny NF9mZWF0dXJlcyAmIChYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfU01FUCB8IFg4 Nl9DUjRfU01BUCB8Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg WDg2X0NSNF9PU1hTQVZFIHwgWDg2X0NSNF9GU0dTQkFTRSk7Ci0KLSAgICBp ZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQotICAgICAgICBjcjQgfD0g WDg2X0NSNF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHZfZG9t YWluLnhwdGkgKQotICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7Ci0KLSAg ICBjcjQgfD0gZC0+YXJjaC52dHNjID8gWDg2X0NSNF9UU0QgOiAwOwotCi0g ICAgcmV0dXJuIGNyNDsKLX0KLQogdm9pZCB3cml0ZV9wdGJhc2Uoc3RydWN0 IHZjcHUgKnYpCiB7CiAgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9 IGdldF9jcHVfaW5mbygpOwogICAgIHVuc2lnbmVkIGxvbmcgbmV3X2NyNDsK IAogICAgIG5ld19jcjQgPSAoaXNfcHZfdmNwdSh2KSAmJiAhaXNfaWRsZV92 Y3B1KHYpKQotICAgICAgICAgICAgICA/IHB2X2d1ZXN0X2NyNF90b19yZWFs X2NyNCh2KQotICAgICAgICAgICAgICA6ICgocmVhZF9jcjQoKSAmIH4oWDg2 X0NSNF9QQ0lERSB8IFg4Nl9DUjRfVFNEKSkgfCBYODZfQ1I0X1BHRSk7Cisg ICAgICAgICAgICAgID8gcHZfbWFrZV9jcjQodikgOiBtbXVfY3I0X2ZlYXR1 cmVzOwogCiAgICAgaWYgKCBpc19wdl92Y3B1KHYpICYmIHYtPmRvbWFpbi0+ YXJjaC5wdl9kb21haW4ueHB0aSApCiAgICAgewpAQCAtNTU5LDggKzUzOSw2 IEBAIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVjdCB2Y3B1ICp2KQogICAgICAg ICBzd2l0Y2hfY3IzX2NyNCh2LT5hcmNoLmNyMywgbmV3X2NyNCk7CiAgICAg ICAgIGNwdV9pbmZvLT5wdl9jcjMgPSAwOwogICAgIH0KLQotICAgIEFTU0VS VChpc19wdl92Y3B1KHYpIHx8IHJlYWRfY3I0KCkgPT0gbW11X2NyNF9mZWF0 dXJlcyk7CiB9CiAKIC8qCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJh cHMuYyBiL3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IGZlYzVlNTUuLmRj NWEwZDYgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCkBAIC0yNDg2LDggKzI0ODYsOCBAQCBz dGF0aWMgaW50IHByaXZfb3Bfd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywg dW5zaWduZWQgbG9uZyB2YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBX cml0ZSBDUjQgKi8KLSAgICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmN0cmxy ZWdbNF0gPSBwdl9ndWVzdF9jcjRfZml4dXAoY3VyciwgdmFsKTsKLSAgICAg ICAgd3JpdGVfY3I0KHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjdXJyKSk7 CisgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZf Zml4dXBfZ3Vlc3RfY3I0KGN1cnIsIHZhbCk7CisgICAgICAgIHdyaXRlX2Ny NChwdl9tYWtlX2NyNChjdXJyKSk7CiAgICAgICAgIGN0eHRfc3dpdGNoX2xl dmVsbGluZyhjdXJyKTsKICAgICAgICAgcmV0dXJuIFg4NkVNVUxfT0tBWTsK ICAgICB9CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFp bi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCA3YzI2 ZjYwLi43ZWE2NzUzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK QEAgLTY0OCwxNiArNjQ4LDIyIEBAIGJvb2xfdCB1cGRhdGVfc2Vjb25kYXJ5 X3N5c3RlbV90aW1lKHN0cnVjdCB2Y3B1ICosCiB2b2lkIHZjcHVfc2hvd19l eGVjdXRpb25fc3RhdGUoc3RydWN0IHZjcHUgKik7CiB2b2lkIHZjcHVfc2hv d19yZWdpc3RlcnMoY29uc3Qgc3RydWN0IHZjcHUgKik7CiAKLS8qIENsZWFu IHVwIENSNCBiaXRzIHRoYXQgYXJlIG5vdCB1bmRlciBndWVzdCBjb250cm9s LiAqLwotdW5zaWduZWQgbG9uZyBwdl9ndWVzdF9jcjRfZml4dXAoY29uc3Qg c3RydWN0IHZjcHUgKiwgdW5zaWduZWQgbG9uZyBndWVzdF9jcjQpOworLyoK KyAqIEJpdHMgd2hpY2ggYSBQViBndWVzdCBjYW4gdG9nZ2xlIGluIGl0cyB2 aWV3IG9mIGNyNC4gIFNvbWUgYXJlIGxvYWRlZCBpbnRvCisgKiBoYXJkd2Fy ZSwgd2hpbGUgc29tZSBhcmUgZnVsbHkgZW11bGF0ZWQuCisgKi8KKyNkZWZp bmUgUFZfQ1I0X0dVRVNUX01BU0sgXAorICAgIChYODZfQ1I0X1RTRCB8IFg4 Nl9DUjRfREUgfCBYODZfQ1I0X0ZTR1NCQVNFIHwgWDg2X0NSNF9PU1hTQVZF KQorCisvKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgbWF5IG9ic2VydmUgZnJv bSB0aGUgcmVhbCBoYXJkd2FyZSBzZXR0aW5ncy4gKi8KKyNkZWZpbmUgUFZf Q1I0X0dVRVNUX1ZJU0lCTEVfTUFTSyBcCisgICAgKFg4Nl9DUjRfUEFFIHwg WDg2X0NSNF9NQ0UgfCBYODZfQ1I0X09TRlhTUiB8IFg4Nl9DUjRfT1NYTU1F WENQVCkKIAotLyogQ29udmVydCBiZXR3ZWVuIGd1ZXN0LXZpc2libGUgYW5k IHJlYWwgQ1I0IHZhbHVlcy4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3Rf Y3I0X3RvX3JlYWxfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKKy8qIEdp dmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRoZSByZXN1bHRpbmcg Z3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNpZ25lZCBsb25nIHB2 X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwgdW5zaWdu ZWQgbG9uZyBjcjQpOwogCi0jZGVmaW5lIHJlYWxfY3I0X3RvX3B2X2d1ZXN0 X2NyNChjKSAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgKChjKSAm IH4oWDg2X0NSNF9QR0UgfCBYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfVFNEIHwg ICAgICBcCi0gICAgICAgICAgICAgWDg2X0NSNF9PU1hTQVZFIHwgWDg2X0NS NF9TTUVQIHwgICAgICAgICAgICAgICBcCi0gICAgICAgICAgICAgWDg2X0NS NF9GU0dTQkFTRSB8IFg4Nl9DUjRfU01BUCB8IFg4Nl9DUjRfUENJREUpKQor LyogQ3JlYXRlIGEgY3I0IHZhbHVlIHRvIGxvYWQgaW50byBoYXJkd2FyZSwg YmFzZWQgb24gdmNwdSBzZXR0aW5ncy4gKi8KK3Vuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpOwogCiAjZGVmaW5lIGRv bWFpbl9tYXhfdmNwdXMoZCkgKGlzX2h2bV9kb21haW4oZCkgPyBIVk1fTUFY X1ZDUFVTIDogTUFYX1ZJUlRfQ1BVUykKIAo= --=separator Content-Type: application/octet-stream; name="xsa293/4.9-2.patch" Content-Disposition: attachment; filename="xsa293/4.9-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggZWZkYWIxYS4uMGVkYjEzMSAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtNDQxLDYgKzQ0MSwxNiBAQCB1bnNpZ25lZCBsb25n IHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KQogICAgIGlmICgg ZC0+YXJjaC52dHNjIHx8ICh2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAm IFg4Nl9DUjRfVFNEKSApCiAgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsK IAorICAgIC8qCisgICAgICogVGhlIHtSRCxXUn17RlMsR1N9QkFTRSBhcmUg b25seSB1c2VhYmxlIGluIDY0Yml0IGNvZGUgc2VnbWVudHMuICBXaGlsZQor ICAgICAqIHdlIG11c3Qgbm90IGhhdmUgQ1I0LkZTR1NCQVNFIHNldCBiZWhp bmQgdGhlIGJhY2sgb2YgYSA2NGJpdCBQViBrZXJuZWwsCisgICAgICogd2Ug ZG8gbGVhdmUgaXQgc2V0IGluIDMyYml0IFBWIGNvbnRleHQgdG8gc3BlZWQg dXAgWGVuJ3MgY29udGV4dCBzd2l0Y2gKKyAgICAgKiBwYXRoLgorICAgICAq LworICAgIGlmICggIWlzX3B2XzMyYml0X2RvbWFpbihkKSAmJgorICAgICAg ICAgISh2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfRlNH U0JBU0UpICkKKyAgICAgICAgY3I0ICY9IH5YODZfQ1I0X0ZTR1NCQVNFOwor CiAgICAgcmV0dXJuIGNyNDsKIH0KIApAQCAtMTk4Nyw3ICsxOTk3LDggQEAg c3RhdGljIHZvaWQgc2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAg ICByZWdzLT5mcyA9IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSBy ZWFkX3NyZWcoZ3MpOwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYm ICFpc19wdl8zMmJpdF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2Vz IGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJs ZS4gKi8KKyAgICBpZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgJiYgIWlzX3B2XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAg di0+YXJjaC5wdl92Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAg ICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlm ZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9zZXR1cC5jIGIveGVuL2FyY2gveDg2 L3NldHVwLmMKaW5kZXggYmY1ZWQxZi4uNDBhZjdlNiAxMDA2NDQKLS0tIGEv eGVuL2FyY2gveDg2L3NldHVwLmMKKysrIGIveGVuL2FyY2gveDg2L3NldHVw LmMKQEAgLTE1MTAsNyArMTUxMCw3IEBAIHZvaWQgX19pbml0IG5vcmV0dXJu IF9fc3RhcnRfeGVuKHVuc2lnbmVkIGxvbmcgbWJpX3ApCiAKICAgICBjcjRf cHYzMl9tYXNrID0gbW11X2NyNF9mZWF0dXJlcyAmIFhFTl9DUjRfUFYzMl9C SVRTOwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAo IGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkgKQogICAgICAg ICBzZXRfaW5fY3I0KFg4Nl9DUjRfRlNHU0JBU0UpOwogCiAgICAgaWYgKCBv cHRfaW52cGNpZCAmJiBjcHVfaGFzX2ludnBjaWQgKQpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpp bmRleCBkYzVhMGQ2Li4yZjlmNzVmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94 ODYvdHJhcHMuYworKysgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpAQCAtMjQ4 Niw2ICsyNDg2LDE3IEBAIHN0YXRpYyBpbnQgcHJpdl9vcF93cml0ZV9jcih1 bnNpZ25lZCBpbnQgcmVnLCB1bnNpZ25lZCBsb25nIHZhbCwKICAgICB9CiAK ICAgICBjYXNlIDQ6IC8qIFdyaXRlIENSNCAqLworICAgICAgICAvKgorICAg ICAgICAgKiBJZiB0aGlzIHdyaXRlIHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwg cmVmcmVzaCBYZW4ncyBpZGVhIG9mIHRoZQorICAgICAgICAgKiBndWVzdCBi YXNlcyBub3cgdGhhdCB0aGV5IGNhbiBubyBsb25nZXIgY2hhbmdlLgorICAg ICAgICAgKi8KKyAgICAgICAgaWYgKCAoY3Vyci0+YXJjaC5wdl92Y3B1LmN0 cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NCQVNFKSAmJgorICAgICAgICAgICAg ICEodmFsICYgWDg2X0NSNF9GU0dTQkFTRSkgKQorICAgICAgICB7CisgICAg ICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZSA9IF9fcmRmc2Jh c2UoKTsKKyAgICAgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNl X2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKKyAgICAgICAgfQorCiAgICAgICAg IGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZml4dXBfZ3Vl c3RfY3I0KGN1cnIsIHZhbCk7CiAgICAgICAgIHdyaXRlX2NyNChwdl9tYWtl X2NyNChjdXJyKSk7CiAgICAgICAgIGN0eHRfc3dpdGNoX2xldmVsbGluZyhj dXJyKTsKQEAgLTI1MjYsMTQgKzI1MzcsMTUgQEAgc3RhdGljIGludCBwcml2 X29wX3JlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2YWws CiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19wdl8z MmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwotICAg ICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2UoKSA6 IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAqdmFsID0g KHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRmc2Jhc2Uo KQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOwogICAgICAgICBy ZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfR1NfQkFTRToK ICAgICAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oY3VycmQpICkKICAg ICAgICAgICAgIGJyZWFrOwotICAgICAgICAqdmFsID0gY3B1X2hhc19mc2dz YmFzZSA/IF9fcmRnc2Jhc2UoKQotICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbDsK KyAgICAgICAgKnZhbCA9IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgPyBfX3JkZ3NiYXNlKCkKKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3Nf YmFzZV9rZXJuZWw7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAK ICAgICBjYXNlIE1TUl9TSEFET1dfR1NfQkFTRToKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZf NjQvdHJhcHMuYwppbmRleCA4YTA2YjIxLi42N2E5OTkzIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gv eDg2L3g4Nl82NC90cmFwcy5jCkBAIC0yNjYsNyArMjY2LDkgQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBpZiAo IGlzX3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47Ci0gICAg aWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKworICAgIC8qICVmcy8lZ3MgYmFz ZXMgY2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNh YmxlLiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JB U0UgKQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZf a2VybmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1Lmdz X2Jhc2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVu L2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L2NwdWZlYXR1cmUuaAppbmRleCBmZjZmOTY5Li41MDQzMjMxIDEw MDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAor KysgYi94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtODQs NyArODQsNiBAQAogI2RlZmluZSBjcHVfaGFzX3hzYXZlcyAgICAgICAgICBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfWFNBVkVTKQogCiAvKiBDUFVJRCBs ZXZlbCAweDAwMDAwMDA3OjAuZWJ4ICovCi0jZGVmaW5lIGNwdV9oYXNfZnNn c2Jhc2UgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFT RSkKICNkZWZpbmUgY3B1X2hhc19ibWkxICAgICAgICAgICAgYm9vdF9jcHVf aGFzKFg4Nl9GRUFUVVJFX0JNSTEpCiAjZGVmaW5lIGNwdV9oYXNfaGxlICAg ICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9ITEUpCiAjZGVm aW5lIGNwdV9oYXNfYXZ4MiAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZf RkVBVFVSRV9BVlgyKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tc3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKaW5kZXggOGQ0 ZGU2MS4uZmU2ZDVhMCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tc3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L21zci5oCkBAIC0x MjAsNiArMTIwLDE0IEBAIHN0YXRpYyBpbmxpbmUgdWludDY0X3QgcmR0c2Nf b3JkZXJlZCh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIgKGhpZ2gp IFwKIAkJCSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24gaGFyZHdh cmUgc3VwcG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRlZCBpbnRv IGhhcmR3YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hvaWNlIGZv ciA2NGJpdCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRsZSwgSFZN IGFuZAorICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwgdGhlIHtS RCxXUn17RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkgc2FmZSB0 byB1c2UgaWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICovCiBzdGF0 aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lkKQogewog ICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKQEAgLTE1MCw3ICsxNTgsNyBAQCBz dGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9pZCkKIHsK ICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNf ZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNH U0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwogCiAgICAg cmRtc3JsKE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTE2Miw3ICsxNzAsNyBA QCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9pZCkK IHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9o YXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRf RlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgpOwogCiAg ICAgcmRtc3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE3Miw3ICsxODAs NyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9p ZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2lnbmVkIGxv bmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAg IGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogI2lmZGVm IEhBVkVfR0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xhdGlsZSAoICJ3 cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UKQEAgLTE4NCw3 ICsxOTIsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWdu ZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jnc2Jhc2Uo dW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dz YmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSApCiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZv bGF0aWxlICggIndyZ3NiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxz ZQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3Iu aCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgKaW5kZXggZGE0 MmU4NC4uNDQ4NzM0NyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9wcm9jZXNzb3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oCkBAIC0zMDYsMTEgKzMwNiwzMSBAQCBzdGF0aWMgaW5saW5lIHVu c2lnbmVkIGxvbmcgcmVhZF9jcjQodm9pZCkKIAogc3RhdGljIGlubGluZSB2 b2lkIHdyaXRlX2NyNCh1bnNpZ25lZCBsb25nIHZhbCkKIHsKKyAgICBzdHJ1 Y3QgY3B1X2luZm8gKmluZm8gPSBnZXRfY3B1X2luZm8oKTsKKwogICAgIC8q IE5vIGdsb2JhbCBwYWdlcyBpbiBjYXNlIG9mIFBDSURzIGVuYWJsZWQhICov CiAgICAgQVNTRVJUKCEodmFsICYgWDg2X0NSNF9QR0UpIHx8ICEodmFsICYg WDg2X0NSNF9QQ0lERSkpOwogCi0gICAgZ2V0X2NwdV9pbmZvKCktPmNyNCA9 IHZhbDsKLSAgICBhc20gdm9sYXRpbGUgKCAibW92ICUwLCUlY3I0IiA6IDog InIiICh2YWwpICk7CisgICAgLyoKKyAgICAgKiBPbiBoYXJkd2FyZSBzdXBw b3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgaW4gJWNyNCBpcyB0aGUga2Vy bmVsJ3MKKyAgICAgKiBjaG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0cywgd2hp Y2ggaW1wYWN0cyB3aGV0aGVyIFhlbiBjYW4gdXNlIHRoZQorICAgICAqIGlu c3RydWN0aW9ucy4KKyAgICAgKgorICAgICAqIFRoZSB7cmQsd3J9e2ZzLGdz fWJhc2UoKSBoZWxwZXJzIHVzZSBpbmZvLT5jcjQgdG8gd29yayBvdXQgd2hl dGhlciBpdAorICAgICAqIGlzIHNhZmUgdG8gZXhlY3V0ZSB0aGUge1JELFdS fXtGUyxHU31CQVNFIGluc3RydWN0aW9uLCBmYWxsaW5nIGJhY2sgdG8KKyAg ICAgKiB0aGUgTVNSIHBhdGggaWYgbm90LiAgU29tZSB1c2VycyByZXF1aXJl IGludGVycnVwdCBzYWZldHkuCisgICAgICoKKyAgICAgKiBJZiBGU0dTQkFT RSBpcyBjdXJyZW50bHkgb3IgYWJvdXQgdG8gYmVjb21lIGNsZWFyLCByZWZs ZWN0IHRoaXMgaW4KKyAgICAgKiBpbmZvLT5jcjQgYmVmb3JlIHVwZGF0aW5n ICVjcjQsIHNvIGFuIGludGVycnVwdCB3aGljaCBoaXRzIGluIHRoZQorICAg ICAqIG1pZGRsZSB3b24ndCBvYnNlcnZlIEZTR1NCQVNFIHNldCBpbiBpbmZv LT5jcjQgYnV0IGNsZWFyIGluICVjcjQuCisgICAgICovCisgICAgaW5mby0+ Y3I0ID0gdmFsICYgKGluZm8tPmNyNCB8IH5YODZfQ1I0X0ZTR1NCQVNFKTsK KworICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJVt2YWxdLCAlJWNyNCIKKyAg ICAgICAgICAgICAgICAgICA6ICIrbSIgKGluZm8tPmNyNCkgLyogRm9yY2Ug b3JkZXJpbmcgd2l0aG91dCBhIGJhcnJpZXIuICovCisgICAgICAgICAgICAg ICAgICAgOiBbdmFsXSAiciIgKHZhbCkgKTsKKworICAgIGluZm8tPmNyNCA9 IHZhbDsKIH0KIAogLyogQ2xlYXIgYW5kIHNldCAnVFMnIGJpdCByZXNwZWN0 aXZlbHkgKi8K --=separator Content-Type: application/octet-stream; name="xsa293/4.10-1.patch" Content-Disposition: attachment; filename="xsa293/4.10-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg ZmNiZTc2Ny4uODUzYjUyNCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtNzM0LDQ5 ICs3MzQsNiBAQCBpbnQgYXJjaF9kb21haW5fc29mdF9yZXNldChzdHJ1Y3Qg ZG9tYWluICpkKQogICAgIHJldHVybiByZXQ7CiB9CiAKLS8qCi0gKiBUaGVz ZSBhcmUgdGhlIG1hc2tzIG9mIENSNCBiaXRzIChzdWJqZWN0IHRvIGhhcmR3 YXJlIGF2YWlsYWJpbGl0eSkgd2hpY2ggYQotICogUFYgZ3Vlc3QgbWF5IG5v dCBsZWdpdGltaWF0ZWx5IGF0dGVtcHQgdG8gbW9kaWZ5LgotICovCi1zdGF0 aWMgdW5zaWduZWQgbG9uZyBfX3JlYWRfbW9zdGx5IHB2X2NyNF9tYXNrLCBj b21wYXRfcHZfY3I0X21hc2s7Ci0KLXN0YXRpYyBpbnQgX19pbml0IGluaXRf cHZfY3I0X21hc2tzKHZvaWQpCi17Ci0gICAgdW5zaWduZWQgbG9uZyBjb21t b25fbWFzayA9IH5YODZfQ1I0X1RTRDsKLQotICAgIC8qCi0gICAgICogQWxs IFBWIGd1ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgVFNELCBERSBhbmQg T1NYU0FWRS4KLSAgICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZGUgKQotICAg ICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NSNF9ERTsKLSAgICBpZiAoIGNw dV9oYXNfeHNhdmUgKQotICAgICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NS NF9PU1hTQVZFOwotCi0gICAgcHZfY3I0X21hc2sgPSBjb21wYXRfcHZfY3I0 X21hc2sgPSBjb21tb25fbWFzazsKLQotICAgIC8qCi0gICAgICogNjRiaXQg UFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBGU0dTQkFTRS4KLSAg ICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQotICAgICAgICBw dl9jcjRfbWFzayAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKLQotICAgIHJldHVy biAwOwotfQotX19pbml0Y2FsbChpbml0X3B2X2NyNF9tYXNrcyk7Ci0KLXVu c2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGd1ZXN0X2NyNCkKLXsKLSAgICB1bnNp Z25lZCBsb25nIGh2X2NyNCA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChy ZWFkX2NyNCgpKTsKLSAgICB1bnNpZ25lZCBsb25nIG1hc2sgPSBpc19wdl8z MmJpdF92Y3B1KHYpID8gY29tcGF0X3B2X2NyNF9tYXNrIDogcHZfY3I0X21h c2s7Ci0KLSAgICBpZiAoIChndWVzdF9jcjQgJiBtYXNrKSAhPSAoaHZfY3I0 ICYgbWFzaykgKQotICAgICAgICBwcmludGsoWEVOTE9HX0dfV0FSTklORwot ICAgICAgICAgICAgICAgImQlZCBhdHRlbXB0ZWQgdG8gY2hhbmdlICVwdidz IENSNCBmbGFncyAlMDhseCAtPiAlMDhseFxuIiwKLSAgICAgICAgICAgICAg IGN1cnJlbnQtPmRvbWFpbi0+ZG9tYWluX2lkLCB2LCBodl9jcjQsIGd1ZXN0 X2NyNCk7Ci0KLSAgICByZXR1cm4gKGh2X2NyNCAmIG1hc2spIHwgKGd1ZXN0 X2NyNCAmIH5tYXNrKTsKLX0KLQogI2RlZmluZSB4ZW5fdmNwdV9ndWVzdF9j b250ZXh0IHZjcHVfZ3Vlc3RfY29udGV4dAogI2RlZmluZSBmcHVfY3R4dCBm cHVfY3R4dC54CiBDSEVDS19GSUVMRF8oc3RydWN0LCB2Y3B1X2d1ZXN0X2Nv bnRleHQsIGZwdV9jdHh0KTsKQEAgLTc5MCw3ICs3NDcsNyBAQCBpbnQgYXJj aF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1bnNp Z25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAgLTk4 MSw5ICs5MzgsOCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAg IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+ WDg2X0NSMF9UUzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0 ID8gcHZfZ3Vlc3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFs X2NyNF90b19wdl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1 cF9ndWVzdF9jcjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwog CiAgICAgbWVtc2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5h cmNoLmRlYnVncmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysg KQpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94 ODYvbW0uYwppbmRleCBjMjBlZGI5Li43MTY0OTlhIDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAt NTExLDMzICs1MTEsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAq diwgbWZuX3QgbWZuKQogICAgICAgICB2LT5hcmNoLmNyMyB8PSBnZXRfcGNp ZF9iaXRzKHYsIGZhbHNlKTsKIH0KIAotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCi17Ci0g ICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKLSAgICB1 bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0IHw9IG1tdV9j cjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1NNRVAgfCBY ODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0UpOwotCi0gICAg aWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAgICAgY3I0IHw9 IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2X2Rv bWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwotCi0g ICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNEIDogMDsKLQot ICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVj dCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8g PSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25nIG5ld19jcjQ7 CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYgIWlzX2lkbGVf dmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9jcjRfdG9fcmVh bF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0KCkgJiB+KFg4 Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NSNF9QR0UpOwor ICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11X2NyNF9mZWF0 dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2LT5kb21haW4t PmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU1Niw4ICs1MzYs NiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAg ICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAg ICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NF UlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVh dHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2 L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IDk1 OGM2ZTMuLmE5Y2FhMDEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTEw Myw2ICsxMDMsNTIgQEAgc3RhdGljIHZvaWQgcmVsZWFzZV9jb21wYXRfbDQo c3RydWN0IHZjcHUgKnYpCiAgICAgdi0+YXJjaC5ndWVzdF90YWJsZV91c2Vy ID0gcGFnZXRhYmxlX251bGwoKTsKIH0KIAordW5zaWduZWQgbG9uZyBwdl9m aXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2lnbmVk IGxvbmcgY3I0KQoreworICAgIGNvbnN0IHN0cnVjdCBjcHVpZF9wb2xpY3kg KnAgPSB2LT5kb21haW4tPmFyY2guY3B1aWQ7CisKKyAgICAvKiBEaXNjYXJk IGF0dGVtcHRzIHRvIHNldCBndWVzdCBjb250cm9sbGFibGUgYml0cyBvdXRz aWRlIG9mIHRoZSBwb2xpY3kuICovCisgICAgY3I0ICY9IH4oKHAtPmJhc2lj LnRzYyAgICAgPyAwIDogWDg2X0NSNF9UU0QpICAgICAgfAorICAgICAgICAg ICAgIChwLT5iYXNpYy5kZSAgICAgID8gMCA6IFg4Nl9DUjRfREUpICAgICAg IHwKKyAgICAgICAgICAgICAocC0+ZmVhdC5mc2dzYmFzZSA/IDAgOiBYODZf Q1I0X0ZTR1NCQVNFKSB8CisgICAgICAgICAgICAgKHAtPmJhc2ljLnhzYXZl ICAgPyAwIDogWDg2X0NSNF9PU1hTQVZFKSk7CisKKyAgICAvKiBNYXNrcyBl eHBlY3RlZCB0byBiZSBkaXNqb2ludCBzZXRzLiAqLworICAgIEJVSUxEX0JV R19PTihQVl9DUjRfR1VFU1RfTUFTSyAmIFBWX0NSNF9HVUVTVF9WSVNJQkxF X01BU0spOworCisgICAgLyoKKyAgICAgKiBBIGd1ZXN0IHNlZXMgdGhlIHBv bGljeSBzdWJzZXQgb2YgaXRzIG93biBjaG9pY2Ugb2YgZ3Vlc3QgY29udHJv bGxhYmxlCisgICAgICogYml0cywgYW5kIGEgc3Vic2V0IG9mIFhlbidzIGNo b2ljZSBvZiBjZXJ0YWluIGhhcmR3YXJlIHNldHRpbmdzLgorICAgICAqLwor ICAgIHJldHVybiAoKGNyNCAmIFBWX0NSNF9HVUVTVF9NQVNLKSB8CisgICAg ICAgICAgICAobW11X2NyNF9mZWF0dXJlcyAmIFBWX0NSNF9HVUVTVF9WSVNJ QkxFX01BU0spKTsKK30KKwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChj b25zdCBzdHJ1Y3QgdmNwdSAqdikKK3sKKyAgICBjb25zdCBzdHJ1Y3QgZG9t YWluICpkID0gdi0+ZG9tYWluOworICAgIHVuc2lnbmVkIGxvbmcgY3I0ID0g bW11X2NyNF9mZWF0dXJlcyAmCisgICAgICAgIH4oWDg2X0NSNF9QQ0lERSB8 IFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9UU0QpOworCisgICAgLyoKKyAgICAg KiBQQ0lERSBvciBQR0UgZGVwZW5kcyBvbiB0aGUgUENJRC9YUFRJIHNldHRp bmdzLCBidXQgbXVzdCBub3QgYm90aCBiZQorICAgICAqIHNldCwgYXMgaXQg aW1wYWN0cyB0aGUgc2FmZXR5IG9mIFRMQiBmbHVzaGluZy4KKyAgICAgKi8K KyAgICBpZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQorICAgICAgICBj cjQgfD0gWDg2X0NSNF9QQ0lERTsKKyAgICBlbHNlIGlmICggIWQtPmFyY2gu cHZfZG9tYWluLnhwdGkgKQorICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7 CisKKyAgICAvKgorICAgICAqIFRTRCBpcyBuZWVkZWQgaWYgZWl0aGVyIHRo ZSBndWVzdCBoYXMgZWxlY3RlZCB0byB1c2UgaXQsIG9yIFhlbiBpcworICAg ICAqIHZpcnR1YWxpc2luZyB0aGUgVFNDIHZhbHVlIHRoZSBndWVzdCBzZWVz LgorICAgICAqLworICAgIGlmICggZC0+YXJjaC52dHNjIHx8ICh2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNEKSApCisgICAgICAg IGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVybiBjcjQ7Cit9CisK IGludCBzd2l0Y2hfY29tcGF0KHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAg c3RydWN0IHZjcHUgKnY7CkBAIC0xOTcsNyArMjQzLDcgQEAgaW50IHB2X3Zj cHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAvKiBQViBndWVz dHMgYnkgZGVmYXVsdCBoYXZlIGEgMTAwSHogdGlja2VyLiAqLwogICAgIHYt PnBlcmlvZGljX3BlcmlvZCA9IE1JTExJU0VDUygxMCk7CiAKLSAgICB2LT5h cmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0 X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsKKyAgICB2LT5hcmNoLnB2X3ZjcHUu Y3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCAwKTsKIAogICAg IGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkKICAgICB7CmRpZmYgLS1n aXQgYS94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMgYi94ZW4vYXJj aC94ODYvcHYvZW11bC1wcml2LW9wLmMKaW5kZXggYzI4MTkzNi4uY2QwNDU3 NCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5j CisrKyBiL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwpAQCAtMzIs NiArMzIsNyBAQAogI2luY2x1ZGUgPGFzbS9oeXBlcmNhbGwuaD4KICNpbmNs dWRlIDxhc20vbWMxNDY4MThydGMuaD4KICNpbmNsdWRlIDxhc20vcDJtLmg+ CisjaW5jbHVkZSA8YXNtL3B2L2RvbWFpbi5oPgogI2luY2x1ZGUgPGFzbS9w di90cmFwcy5oPgogI2luY2x1ZGUgPGFzbS9zaGFyZWQuaD4KICNpbmNsdWRl IDxhc20vdHJhcHMuaD4KQEAgLTgwNCw4ICs4MDUsOCBAQCBzdGF0aWMgaW50 IHdyaXRlX2NyKHVuc2lnbmVkIGludCByZWcsIHVuc2lnbmVkIGxvbmcgdmFs LAogICAgIH0KIAogICAgIGNhc2UgNDogLyogV3JpdGUgQ1I0ICovCi0gICAg ICAgIGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3Rf Y3I0X2ZpeHVwKGN1cnIsIHZhbCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9n dWVzdF9jcjRfdG9fcmVhbF9jcjQoY3VycikpOworICAgICAgICBjdXJyLT5h cmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNChj dXJyLCB2YWwpOworICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9jcjQoY3Vy cikpOwogICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcoY3Vycik7CiAg ICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAgICAgfQpkaWZmIC0tZ2l0 IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRl L2FzbS14ODYvZG9tYWluLmgKaW5kZXggYjlmYTk4OC4uYWVjNjU2MyAxMDA2 NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5oCkBAIC02MjMsMTcgKzYyMyw2 IEBAIGJvb2wgdXBkYXRlX3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3Qg dmNwdSAqLAogdm9pZCB2Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVj dCB2Y3B1ICopOwogdm9pZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0 cnVjdCB2Y3B1ICopOwogCi0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFy ZSBub3QgdW5kZXIgZ3Vlc3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcg cHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2ln bmVkIGxvbmcgZ3Vlc3RfY3I0KTsKLQotLyogQ29udmVydCBiZXR3ZWVuIGd1 ZXN0LXZpc2libGUgYW5kIHJlYWwgQ1I0IHZhbHVlcy4gKi8KLXVuc2lnbmVk IGxvbmcgcHZfZ3Vlc3RfY3I0X3RvX3JlYWxfY3I0KGNvbnN0IHN0cnVjdCB2 Y3B1ICp2KTsKLQotI2RlZmluZSByZWFsX2NyNF90b19wdl9ndWVzdF9jcjQo YykgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICgoYykgJiB+KFg4 Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1RTRCB8ICAgICAg XAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfU01F UCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfRlNH U0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0X1BDSURFKSkKLQogI2Rl ZmluZSBkb21haW5fbWF4X3ZjcHVzKGQpIChpc19odm1fZG9tYWluKGQpID8g SFZNX01BWF9WQ1BVUyA6IE1BWF9WSVJUX0NQVVMpCiAKIHN0YXRpYyBpbmxp bmUgc3RydWN0IHZjcHVfZ3Vlc3RfY29udGV4dCAqYWxsb2NfdmNwdV9ndWVz dF9jb250ZXh0KHZvaWQpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20t eDg2L3B2L2RvbWFpbi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wdi9kb21h aW4uaAppbmRleCA2Nzc4ZTFiLi4xZGRjNzI4IDEwMDY0NAotLS0gYS94ZW4v aW5jbHVkZS9hc20teDg2L3B2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRl L2FzbS14ODYvcHYvZG9tYWluLmgKQEAgLTYwLDYgKzYwLDIzIEBAIHZvaWQg cHZfZG9tYWluX2Rlc3Ryb3koc3RydWN0IGRvbWFpbiAqZCk7CiBpbnQgcHZf ZG9tYWluX2luaXRpYWxpc2Uoc3RydWN0IGRvbWFpbiAqZCwgdW5zaWduZWQg aW50IGRvbWNyX2ZsYWdzLAogICAgICAgICAgICAgICAgICAgICAgICAgIHN0 cnVjdCB4ZW5fYXJjaF9kb21haW5jb25maWcgKmNvbmZpZyk7CiAKKy8qCisg KiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2dsZSBpbiBpdHMgdmll dyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bworICogaGFyZHdhcmUs IHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgorICovCisjZGVmaW5l IFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NSNF9UU0QgfCBYODZf Q1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9DUjRfT1NYU0FWRSkK KworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBvYnNlcnZlIGZyb20g dGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisjZGVmaW5lIFBWX0NS NF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZfQ1I0X1BBRSB8IFg4 Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZfQ1I0X09TWE1NRVhD UFQpCisKKy8qIEdpdmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRo ZSByZXN1bHRpbmcgZ3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNp Z25lZCBsb25nIHB2X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNw dSAqdiwgdW5zaWduZWQgbG9uZyBjcjQpOworCisvKiBDcmVhdGUgYSBjcjQg dmFsdWUgdG8gbG9hZCBpbnRvIGhhcmR3YXJlLCBiYXNlZCBvbiB2Y3B1IHNl dHRpbmdzLiAqLwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBz dHJ1Y3QgdmNwdSAqdik7CisKICNlbHNlICAvKiAhQ09ORklHX1BWICovCiAK ICNpbmNsdWRlIDx4ZW4vZXJybm8uaD4KQEAgLTczLDYgKzkwLDkgQEAgc3Rh dGljIGlubGluZSBpbnQgcHZfZG9tYWluX2luaXRpYWxpc2Uoc3RydWN0IGRv bWFpbiAqZCwKIHsKICAgICByZXR1cm4gLUVPUE5PVFNVUFA7CiB9CisKK3N0 YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBz dHJ1Y3QgdmNwdSAqdikgeyByZXR1cm4gfjB1bDsgfQorCiAjZW5kaWYJLyog Q09ORklHX1BWICovCiAKIHZvaWQgcGFyYXZpcnRfY3R4dF9zd2l0Y2hfZnJv bShzdHJ1Y3QgdmNwdSAqdik7Cg== --=separator Content-Type: application/octet-stream; name="xsa293/4.10-2.patch" Content-Disposition: attachment; filename="xsa293/4.10-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggODUzYjUyNC4uOTFjMmIxYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtMTQzMSw3ICsxNDMxLDggQEAgc3RhdGljIHZvaWQg c2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAgICByZWdzLT5mcyA9 IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSByZWFkX3NyZWcoZ3Mp OwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYmICFpc19wdl8zMmJp dF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2 XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAgdi0+YXJjaC5wdl92 Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAgICAgIGlmICggdi0+ YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21h aW4uYwppbmRleCBhOWNhYTAxLi44MmM2ZTJmIDEwMDY0NAotLS0gYS94ZW4v YXJjaC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2Rv bWFpbi5jCkBAIC0xNDYsNiArMTQ2LDE2IEBAIHVuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5h cmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2 X0NSNF9UU0QpICkKICAgICAgICAgY3I0IHw9IFg4Nl9DUjRfVFNEOwogCisg ICAgLyoKKyAgICAgKiBUaGUge1JELFdSfXtGUyxHU31CQVNFIGFyZSBvbmx5 IHVzZWFibGUgaW4gNjRiaXQgY29kZSBzZWdtZW50cy4gIFdoaWxlCisgICAg ICogd2UgbXVzdCBub3QgaGF2ZSBDUjQuRlNHU0JBU0Ugc2V0IGJlaGluZCB0 aGUgYmFjayBvZiBhIDY0Yml0IFBWIGtlcm5lbCwKKyAgICAgKiB3ZSBkbyBs ZWF2ZSBpdCBzZXQgaW4gMzJiaXQgUFYgY29udGV4dCB0byBzcGVlZCB1cCBY ZW4ncyBjb250ZXh0IHN3aXRjaAorICAgICAqIHBhdGguCisgICAgICovCisg ICAgaWYgKCAhaXNfcHZfMzJiaXRfZG9tYWluKGQpICYmCisgICAgICAgICAh KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgKQorICAgICAgICBjcjQgJj0gflg4Nl9DUjRfRlNHU0JBU0U7CisKICAg ICByZXR1cm4gY3I0OwogfQogCkBAIC0zNTEsNyArMzYxLDggQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGlz X3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47CiAKLSAgICBp ZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIC8qICVmcy8lZ3MgYmFzZXMg Y2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNhYmxl LiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZfa2Vy bmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVuL2Fy Y2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gveDg2L3B2L2Vt dWwtcHJpdi1vcC5jCmluZGV4IGNkMDQ1NzQuLjAzNDRjOTggMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYworKysgYi94ZW4v YXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTgwNSw2ICs4MDUsMTcg QEAgc3RhdGljIGludCB3cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVnLCB1bnNp Z25lZCBsb25nIHZhbCwKICAgICB9CiAKICAgICBjYXNlIDQ6IC8qIFdyaXRl IENSNCAqLworICAgICAgICAvKgorICAgICAgICAgKiBJZiB0aGlzIHdyaXRl IHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwgcmVmcmVzaCBYZW4ncyBpZGVhIG9m IHRoZQorICAgICAgICAgKiBndWVzdCBiYXNlcyBub3cgdGhhdCB0aGV5IGNh biBubyBsb25nZXIgY2hhbmdlLgorICAgICAgICAgKi8KKyAgICAgICAgaWYg KCAoY3Vyci0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZT R1NCQVNFKSAmJgorICAgICAgICAgICAgICEodmFsICYgWDg2X0NSNF9GU0dT QkFTRSkgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2 X3ZjcHUuZnNfYmFzZSA9IF9fcmRmc2Jhc2UoKTsKKyAgICAgICAgICAgIGN1 cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2Uo KTsKKyAgICAgICAgfQorCiAgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5j dHJscmVnWzRdID0gcHZfZml4dXBfZ3Vlc3RfY3I0KGN1cnIsIHZhbCk7CiAg ICAgICAgIHdyaXRlX2NyNChwdl9tYWtlX2NyNChjdXJyKSk7CiAgICAgICAg IGN0eHRfc3dpdGNoX2xldmVsbGluZyhjdXJyKTsKQEAgLTg1NCwxNCArODY1 LDE1IEBAIHN0YXRpYyBpbnQgcmVhZF9tc3IodW5zaWduZWQgaW50IHJlZywg dWludDY0X3QgKnZhbCwKICAgICBjYXNlIE1TUl9GU19CQVNFOgogICAgICAg ICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAg ICAgYnJlYWs7Ci0gICAgICAgICp2YWwgPSBjcHVfaGFzX2ZzZ3NiYXNlID8g X19yZGZzYmFzZSgpIDogY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jhc2U7Cisg ICAgICAgICp2YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ID8gX19yZGZzYmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jh c2U7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAKICAgICBjYXNl IE1TUl9HU19CQVNFOgogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFp bihjdXJyZCkgKQogICAgICAgICAgICAgYnJlYWs7Ci0gICAgICAgICp2YWwg PSBjcHVfaGFzX2ZzZ3NiYXNlID8gX19yZGdzYmFzZSgpCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1Lmdz X2Jhc2Vfa2VybmVsOworICAgICAgICAqdmFsID0gKHJlYWRfY3I0KCkgJiBY ODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRnc2Jhc2UoKQorICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA6IGN1cnItPmFy Y2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbDsKICAgICAgICAgcmV0dXJuIFg4 NkVNVUxfT0tBWTsKIAogICAgIGNhc2UgTVNSX1NIQURPV19HU19CQVNFOgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3NldHVwLmMgYi94ZW4vYXJjaC94 ODYvc2V0dXAuYwppbmRleCA2MTdkYmIxLi43OTAzMjA0IDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvc2V0dXAuYworKysgYi94ZW4vYXJjaC94ODYvc2V0 dXAuYwpAQCAtMTU2MCw3ICsxNTYwLDcgQEAgdm9pZCBfX2luaXQgbm9yZXR1 cm4gX19zdGFydF94ZW4odW5zaWduZWQgbG9uZyBtYmlfcCkKIAogICAgIGNy NF9wdjMyX21hc2sgPSBtbXVfY3I0X2ZlYXR1cmVzICYgWEVOX0NSNF9QVjMy X0JJVFM7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlm ICggYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0ZTR1NCQVNFKSApCiAgICAg ICAgIHNldF9pbl9jcjQoWDg2X0NSNF9GU0dTQkFTRSk7CiAKICAgICBpZiAo IG9wdF9pbnZwY2lkICYmIGNwdV9oYXNfaW52cGNpZCApCmRpZmYgLS1naXQg YS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaCBiL3hlbi9pbmNs dWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oCmluZGV4IGZmNmY5NjkuLjUwNDMy MzEgMTAwNjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVy ZS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oCkBA IC04NCw3ICs4NCw2IEBACiAjZGVmaW5lIGNwdV9oYXNfeHNhdmVzICAgICAg ICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9YU0FWRVMpCiAKIC8qIENQ VUlEIGxldmVsIDB4MDAwMDAwMDc6MC5lYnggKi8KLSNkZWZpbmUgY3B1X2hh c19mc2dzYmFzZSAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0ZT R1NCQVNFKQogI2RlZmluZSBjcHVfaGFzX2JtaTEgICAgICAgICAgICBib290 X2NwdV9oYXMoWDg2X0ZFQVRVUkVfQk1JMSkKICNkZWZpbmUgY3B1X2hhc19o bGUgICAgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0hMRSkK ICNkZWZpbmUgY3B1X2hhc19hdngyICAgICAgICAgICAgYm9vdF9jcHVfaGFz KFg4Nl9GRUFUVVJFX0FWWDIpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9h c20teDg2L21zci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3IuaAppbmRl eCAyMmQ1YjcxLi4xNDNlZWEzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9h c20teDg2L21zci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgK QEAgLTEyMCw2ICsxMjAsMTQgQEAgc3RhdGljIGlubGluZSB1aW50NjRfdCBy ZHRzY19vcmRlcmVkKHZvaWQpCiAJCQkgIDogIj1hIiAobG93KSwgIj1kIiAo aGlnaCkgXAogCQkJICA6ICJjIiAoY291bnRlcikpCiAKKy8qCisgKiBPbiBo YXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgbG9hZGVk IGludG8gaGFyZHdhcmUgaXMgdGhlCisgKiBndWVzdCBrZXJuZWwncyBjaG9p Y2UgZm9yIDY0Yml0IFBWIGd1ZXN0cyAoWGVuJ3MgY2hvaWNlIGZvciBJZGxl LCBIVk0gYW5kCisgKiAzMmJpdCBQVikuCisgKgorICogVGhlcmVmb3JlLCB0 aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9ucyBhcmUgb25seSBz YWZlIHRvIHVzZSBpZgorICogJWNyNC5mc2dzYmFzZSBpcyBzZXQuCisgKi8K IHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBfX3JkZnNiYXNlKHZvaWQp CiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwpAQCAtMTUwLDcgKzE1OCw3 IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGZzYmFzZSh2b2lk KQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZnNiYXNlKCk7CiAK ICAgICByZG1zcmwoTVNSX0ZTX0JBU0UsIGJhc2UpOwpAQCAtMTYyLDcgKzE3 MCw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFzZSh2 b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICgg Y3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZ3NiYXNlKCk7 CiAKICAgICByZG1zcmwoTVNSX0dTX0JBU0UsIGJhc2UpOwpAQCAtMTcyLDcg KzE4MCw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFz ZSh2b2lkKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWdu ZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAp CisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAj aWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0aWxl ICggIndyZnNiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpAQCAt MTg0LDcgKzE5Miw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFzZSh1 bnNpZ25lZCBsb25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdz YmFzZSh1bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZT R1NCQVNFICkKICNpZmRlZiBIQVZFX0dBU19GU0dTQkFTRQogICAgICAgICBh c20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkgKTsK ICNlbHNlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRl eCA5MGEyNzAxLi5hMGY4YmY0IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9h c20teDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv cHJvY2Vzc29yLmgKQEAgLTMxNSwxMSArMzE1LDMxIEBAIHN0YXRpYyBpbmxp bmUgdW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMgaW5s aW5lIHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogeworICAg IHN0cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOworCiAg ICAgLyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5hYmxl ZCEgKi8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwgISh2 YWwgJiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8oKS0+ Y3I0ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVjcjQi IDogOiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3YXJl IHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlzIHRo ZSBrZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3Rz LCB3aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisgICAg ICogaW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3cn17 ZnMsZ3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3JrIG91 dCB3aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFjayB0 bworICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJzIHJl cXVpcmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElmIEZT R1NCQVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xlYXIs IHJlZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUgdXBk YXRpbmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4gdGhl CisgICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0IGlu IGluZm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAgICBp bmZvLT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNHU0JB U0UpOworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUlY3I0 IgorICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAvKiBG b3JjZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAgICAg ICAgICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5mby0+ Y3I0ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0IHJl c3BlY3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.11-1.patch" Content-Disposition: attachment; filename="xsa293/4.11-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg YjFlNTBkMS4uNjc1MTUyYSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtNzMzLDQ5 ICs3MzMsNiBAQCBpbnQgYXJjaF9kb21haW5fc29mdF9yZXNldChzdHJ1Y3Qg ZG9tYWluICpkKQogICAgIHJldHVybiByZXQ7CiB9CiAKLS8qCi0gKiBUaGVz ZSBhcmUgdGhlIG1hc2tzIG9mIENSNCBiaXRzIChzdWJqZWN0IHRvIGhhcmR3 YXJlIGF2YWlsYWJpbGl0eSkgd2hpY2ggYQotICogUFYgZ3Vlc3QgbWF5IG5v dCBsZWdpdGltaWF0ZWx5IGF0dGVtcHQgdG8gbW9kaWZ5LgotICovCi1zdGF0 aWMgdW5zaWduZWQgbG9uZyBfX3JlYWRfbW9zdGx5IHB2X2NyNF9tYXNrLCBj b21wYXRfcHZfY3I0X21hc2s7Ci0KLXN0YXRpYyBpbnQgX19pbml0IGluaXRf cHZfY3I0X21hc2tzKHZvaWQpCi17Ci0gICAgdW5zaWduZWQgbG9uZyBjb21t b25fbWFzayA9IH5YODZfQ1I0X1RTRDsKLQotICAgIC8qCi0gICAgICogQWxs IFBWIGd1ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgVFNELCBERSBhbmQg T1NYU0FWRS4KLSAgICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZGUgKQotICAg ICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NSNF9ERTsKLSAgICBpZiAoIGNw dV9oYXNfeHNhdmUgKQotICAgICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NS NF9PU1hTQVZFOwotCi0gICAgcHZfY3I0X21hc2sgPSBjb21wYXRfcHZfY3I0 X21hc2sgPSBjb21tb25fbWFzazsKLQotICAgIC8qCi0gICAgICogNjRiaXQg UFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBGU0dTQkFTRS4KLSAg ICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQotICAgICAgICBw dl9jcjRfbWFzayAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKLQotICAgIHJldHVy biAwOwotfQotX19pbml0Y2FsbChpbml0X3B2X2NyNF9tYXNrcyk7Ci0KLXVu c2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGd1ZXN0X2NyNCkKLXsKLSAgICB1bnNp Z25lZCBsb25nIGh2X2NyNCA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChy ZWFkX2NyNCgpKTsKLSAgICB1bnNpZ25lZCBsb25nIG1hc2sgPSBpc19wdl8z MmJpdF92Y3B1KHYpID8gY29tcGF0X3B2X2NyNF9tYXNrIDogcHZfY3I0X21h c2s7Ci0KLSAgICBpZiAoIChndWVzdF9jcjQgJiBtYXNrKSAhPSAoaHZfY3I0 ICYgbWFzaykgKQotICAgICAgICBwcmludGsoWEVOTE9HX0dfV0FSTklORwot ICAgICAgICAgICAgICAgImQlZCBhdHRlbXB0ZWQgdG8gY2hhbmdlICVwdidz IENSNCBmbGFncyAlMDhseCAtPiAlMDhseFxuIiwKLSAgICAgICAgICAgICAg IGN1cnJlbnQtPmRvbWFpbi0+ZG9tYWluX2lkLCB2LCBodl9jcjQsIGd1ZXN0 X2NyNCk7Ci0KLSAgICByZXR1cm4gKGh2X2NyNCAmIG1hc2spIHwgKGd1ZXN0 X2NyNCAmIH5tYXNrKTsKLX0KLQogI2RlZmluZSB4ZW5fdmNwdV9ndWVzdF9j b250ZXh0IHZjcHVfZ3Vlc3RfY29udGV4dAogI2RlZmluZSBmcHVfY3R4dCBm cHVfY3R4dC54CiBDSEVDS19GSUVMRF8oc3RydWN0LCB2Y3B1X2d1ZXN0X2Nv bnRleHQsIGZwdV9jdHh0KTsKQEAgLTc4OSw3ICs3NDYsNyBAQCBpbnQgYXJj aF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1bnNp Z25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAgLTk3 OCw5ICs5MzUsOCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAg IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+ WDg2X0NSMF9UUzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0 ID8gcHZfZ3Vlc3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFs X2NyNF90b19wdl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1 cF9ndWVzdF9jcjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwog CiAgICAgbWVtc2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5h cmNoLmRlYnVncmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysg KQpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94 ODYvbW0uYwppbmRleCA2NTA5MDM1Li4wODYzNGI3IDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAt NTA1LDMzICs1MDUsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAq diwgbWZuX3QgbWZuKQogICAgICAgICB2LT5hcmNoLmNyMyB8PSBnZXRfcGNp ZF9iaXRzKHYsIGZhbHNlKTsKIH0KIAotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCi17Ci0g ICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKLSAgICB1 bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0IHw9IG1tdV9j cjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1NNRVAgfCBY ODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0UpOwotCi0gICAg aWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAgICAgY3I0IHw9 IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2X2Rv bWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwotCi0g ICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNEIDogMDsKLQot ICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVj dCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8g PSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25nIG5ld19jcjQ7 CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYgIWlzX2lkbGVf dmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9jcjRfdG9fcmVh bF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0KCkgJiB+KFg4 Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NSNF9QR0UpOwor ICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11X2NyNF9mZWF0 dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2LT5kb21haW4t PmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU1MCw4ICs1MzAs NiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAg ICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAg ICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NF UlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVh dHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2 L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IGI3 NWZmNmIuLjM5NjU5NTkgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTk3 LDYgKzk3LDUyIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICBjb25zdCBzdHJ1Y3QgY3B1aWRfcG9saWN5ICpw ID0gdi0+ZG9tYWluLT5hcmNoLmNwdWlkOworCisgICAgLyogRGlzY2FyZCBh dHRlbXB0cyB0byBzZXQgZ3Vlc3QgY29udHJvbGxhYmxlIGJpdHMgb3V0c2lk ZSBvZiB0aGUgcG9saWN5LiAqLworICAgIGNyNCAmPSB+KChwLT5iYXNpYy50 c2MgICAgID8gMCA6IFg4Nl9DUjRfVFNEKSAgICAgIHwKKyAgICAgICAgICAg ICAocC0+YmFzaWMuZGUgICAgICA/IDAgOiBYODZfQ1I0X0RFKSAgICAgICB8 CisgICAgICAgICAgICAgKHAtPmZlYXQuZnNnc2Jhc2UgPyAwIDogWDg2X0NS NF9GU0dTQkFTRSkgfAorICAgICAgICAgICAgIChwLT5iYXNpYy54c2F2ZSAg ID8gMCA6IFg4Nl9DUjRfT1NYU0FWRSkpOworCisgICAgLyogTWFza3MgZXhw ZWN0ZWQgdG8gYmUgZGlzam9pbnQgc2V0cy4gKi8KKyAgICBCVUlMRF9CVUdf T04oUFZfQ1I0X0dVRVNUX01BU0sgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9N QVNLKTsKKworICAgIC8qCisgICAgICogQSBndWVzdCBzZWVzIHRoZSBwb2xp Y3kgc3Vic2V0IG9mIGl0cyBvd24gY2hvaWNlIG9mIGd1ZXN0IGNvbnRyb2xs YWJsZQorICAgICAqIGJpdHMsIGFuZCBhIHN1YnNldCBvZiBYZW4ncyBjaG9p Y2Ugb2YgY2VydGFpbiBoYXJkd2FyZSBzZXR0aW5ncy4KKyAgICAgKi8KKyAg ICByZXR1cm4gKChjcjQgJiBQVl9DUjRfR1VFU1RfTUFTSykgfAorICAgICAg ICAgICAgKG1tdV9jcjRfZmVhdHVyZXMgJiBQVl9DUjRfR1VFU1RfVklTSUJM RV9NQVNLKSk7Cit9CisKK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29u c3Qgc3RydWN0IHZjcHUgKnYpCit7CisgICAgY29uc3Qgc3RydWN0IGRvbWFp biAqZCA9IHYtPmRvbWFpbjsKKyAgICB1bnNpZ25lZCBsb25nIGNyNCA9IG1t dV9jcjRfZmVhdHVyZXMgJgorICAgICAgICB+KFg4Nl9DUjRfUENJREUgfCBY ODZfQ1I0X1BHRSB8IFg4Nl9DUjRfVFNEKTsKKworICAgIC8qCisgICAgICog UENJREUgb3IgUEdFIGRlcGVuZHMgb24gdGhlIFBDSUQvWFBUSSBzZXR0aW5n cywgYnV0IG11c3Qgbm90IGJvdGggYmUKKyAgICAgKiBzZXQsIGFzIGl0IGlt cGFjdHMgdGhlIHNhZmV0eSBvZiBUTEIgZmx1c2hpbmcuCisgICAgICovCisg ICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKKyAgICAgICAgY3I0 IHw9IFg4Nl9DUjRfUENJREU7CisgICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2 X2RvbWFpbi54cHRpICkKKyAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwor CisgICAgLyoKKyAgICAgKiBUU0QgaXMgbmVlZGVkIGlmIGVpdGhlciB0aGUg Z3Vlc3QgaGFzIGVsZWN0ZWQgdG8gdXNlIGl0LCBvciBYZW4gaXMKKyAgICAg KiB2aXJ0dWFsaXNpbmcgdGhlIFRTQyB2YWx1ZSB0aGUgZ3Vlc3Qgc2Vlcy4K KyAgICAgKi8KKyAgICBpZiAoIGQtPmFyY2gudnRzYyB8fCAodi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X1RTRCkgKQorICAgICAgICBj cjQgfD0gWDg2X0NSNF9UU0Q7CisKKyAgICByZXR1cm4gY3I0OworfQorCiBp bnQgc3dpdGNoX2NvbXBhdChzdHJ1Y3QgZG9tYWluICpkKQogewogICAgIHN0 cnVjdCB2Y3B1ICp2OwpAQCAtMTkxLDcgKzIzNyw3IEBAIGludCBwdl92Y3B1 X2luaXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAgICAgLyogUFYgZ3Vlc3Rz IGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4gKi8KICAgICB2LT5w ZXJpb2RpY19wZXJpb2QgPSBNSUxMSVNFQ1MoMTApOwogCi0gICAgdi0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSByZWFsX2NyNF90b19wdl9ndWVzdF9j cjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5wdl92Y3B1LmN0 cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwgMCk7CiAKICAgICBp ZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSApCiAgICAgewpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gv eDg2L3B2L2VtdWwtcHJpdi1vcC5jCmluZGV4IGNlMmVjNzYuLjRhYmJjMTQg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwor KysgYi94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTMyLDYg KzMyLDcgQEAKICNpbmNsdWRlIDxhc20vaHlwZXJjYWxsLmg+CiAjaW5jbHVk ZSA8YXNtL21jMTQ2ODE4cnRjLmg+CiAjaW5jbHVkZSA8YXNtL3AybS5oPgor I2luY2x1ZGUgPGFzbS9wdi9kb21haW4uaD4KICNpbmNsdWRlIDxhc20vcHYv dHJhcHMuaD4KICNpbmNsdWRlIDxhc20vc2hhcmVkLmg+CiAjaW5jbHVkZSA8 YXNtL3RyYXBzLmg+CkBAIC03ODUsOCArNzg2LDggQEAgc3RhdGljIGludCB3 cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVnLCB1bnNpZ25lZCBsb25nIHZhbCwK ICAgICB9CiAKICAgICBjYXNlIDQ6IC8qIFdyaXRlIENSNCAqLwotICAgICAg ICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2d1ZXN0X2Ny NF9maXh1cChjdXJyLCB2YWwpOwotICAgICAgICB3cml0ZV9jcjQocHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KGN1cnIpKTsKKyAgICAgICAgY3Vyci0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQoY3Vy ciwgdmFsKTsKKyAgICAgICAgd3JpdGVfY3I0KHB2X21ha2VfY3I0KGN1cnIp KTsKICAgICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKGN1cnIpOwogICAg ICAgICByZXR1cm4gWDg2RU1VTF9PS0FZOwogICAgIH0KZGlmZiAtLWdpdCBh L3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L2RvbWFpbi5oCmluZGV4IGVjODFkNzguLmM4YWE4YTUgMTAwNjQ0 Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgKKysrIGIveGVu L2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaApAQCAtNjEwLDE3ICs2MTAsNiBA QCBib29sIHVwZGF0ZV9zZWNvbmRhcnlfc3lzdGVtX3RpbWUoc3RydWN0IHZj cHUgKiwKIHZvaWQgdmNwdV9zaG93X2V4ZWN1dGlvbl9zdGF0ZShzdHJ1Y3Qg dmNwdSAqKTsKIHZvaWQgdmNwdV9zaG93X3JlZ2lzdGVycyhjb25zdCBzdHJ1 Y3QgdmNwdSAqKTsKIAotLyogQ2xlYW4gdXAgQ1I0IGJpdHMgdGhhdCBhcmUg bm90IHVuZGVyIGd1ZXN0IGNvbnRyb2wuICovCi11bnNpZ25lZCBsb25nIHB2 X2d1ZXN0X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAqLCB1bnNpZ25l ZCBsb25nIGd1ZXN0X2NyNCk7Ci0KLS8qIENvbnZlcnQgYmV0d2VlbiBndWVz dC12aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBs b25nIHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNw dSAqdik7Ci0KLSNkZWZpbmUgcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KGMp ICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAoKGMpICYgfihYODZf Q1I0X1BHRSB8IFg4Nl9DUjRfUFNFIHwgWDg2X0NSNF9UU0QgfCAgICAgIFwK LSAgICAgICAgICAgICBYODZfQ1I0X09TWFNBVkUgfCBYODZfQ1I0X1NNRVAg fCAgICAgICAgICAgICAgIFwKLSAgICAgICAgICAgICBYODZfQ1I0X0ZTR1NC QVNFIHwgWDg2X0NSNF9TTUFQIHwgWDg2X0NSNF9QQ0lERSkpCi0KICNkZWZp bmUgZG9tYWluX21heF92Y3B1cyhkKSAoaXNfaHZtX2RvbWFpbihkKSA/IEhW TV9NQVhfVkNQVVMgOiBNQVhfVklSVF9DUFVTKQogCiBzdGF0aWMgaW5saW5l IHN0cnVjdCB2Y3B1X2d1ZXN0X2NvbnRleHQgKmFsbG9jX3ZjcHVfZ3Vlc3Rf Y29udGV4dCh2b2lkKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9wdi9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWlu LmgKaW5kZXggNGZlYTc2NC4uNGU0NzEwYyAxMDA2NDQKLS0tIGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9wdi9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9h c20teDg2L3B2L2RvbWFpbi5oCkBAIC01OSw2ICs1OSwyMyBAQCBpbnQgcHZf dmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2Y3B1ICp2KTsKIHZvaWQgcHZfZG9t YWluX2Rlc3Ryb3koc3RydWN0IGRvbWFpbiAqZCk7CiBpbnQgcHZfZG9tYWlu X2luaXRpYWxpc2Uoc3RydWN0IGRvbWFpbiAqZCk7CiAKKy8qCisgKiBCaXRz IHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2dsZSBpbiBpdHMgdmlldyBvZiBj cjQuICBTb21lIGFyZSBsb2FkZWQgaW50bworICogaGFyZHdhcmUsIHdoaWxl IHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgorICovCisjZGVmaW5lIFBWX0NS NF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NSNF9UU0QgfCBYODZfQ1I0X0RF IHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9DUjRfT1NYU0FWRSkKKworLyog Qml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBvYnNlcnZlIGZyb20gdGhlIHJl YWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisjZGVmaW5lIFBWX0NSNF9HVUVT VF9WSVNJQkxFX01BU0sgXAorICAgIChYODZfQ1I0X1BBRSB8IFg4Nl9DUjRf TUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZfQ1I0X09TWE1NRVhDUFQpCisK Ky8qIEdpdmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRoZSByZXN1 bHRpbmcgZ3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNpZ25lZCBs b25nIHB2X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwg dW5zaWduZWQgbG9uZyBjcjQpOworCisvKiBDcmVhdGUgYSBjcjQgdmFsdWUg dG8gbG9hZCBpbnRvIGhhcmR3YXJlLCBiYXNlZCBvbiB2Y3B1IHNldHRpbmdz LiAqLwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBzdHJ1Y3Qg dmNwdSAqdik7CisKICNlbHNlICAvKiAhQ09ORklHX1BWICovCiAKICNpbmNs dWRlIDx4ZW4vZXJybm8uaD4KQEAgLTY4LDYgKzg1LDggQEAgc3RhdGljIGlu bGluZSBpbnQgcHZfdmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2Y3B1ICp2KSB7 IHJldHVybiAtRU9QTk9UU1VQUDsgfQogc3RhdGljIGlubGluZSB2b2lkIHB2 X2RvbWFpbl9kZXN0cm95KHN0cnVjdCBkb21haW4gKmQpIHt9CiBzdGF0aWMg aW5saW5lIGludCBwdl9kb21haW5faW5pdGlhbGlzZShzdHJ1Y3QgZG9tYWlu ICpkKSB7IHJldHVybiAtRU9QTk9UU1VQUDsgfQogCitzdGF0aWMgaW5saW5l IHVuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYpIHsgcmV0dXJuIH4wdWw7IH0KKwogI2VuZGlmCS8qIENPTkZJR19QViAq LwogCiB2b2lkIHBhcmF2aXJ0X2N0eHRfc3dpdGNoX2Zyb20oc3RydWN0IHZj cHUgKnYpOwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.11-2.patch" Content-Disposition: attachment; filename="xsa293/4.11-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggNjc1MTUyYS4uMjlmODkyYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtMTQzMyw3ICsxNDMzLDggQEAgc3RhdGljIHZvaWQg c2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAgICByZWdzLT5mcyA9 IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSByZWFkX3NyZWcoZ3Mp OwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYmICFpc19wdl8zMmJp dF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2 XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAgdi0+YXJjaC5wdl92 Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAgICAgIGlmICggdi0+ YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21h aW4uYwppbmRleCAzOTY1OTU5Li4yMjhhMTc0IDEwMDY0NAotLS0gYS94ZW4v YXJjaC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2Rv bWFpbi5jCkBAIC0xNDAsNiArMTQwLDE2IEBAIHVuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5h cmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2 X0NSNF9UU0QpICkKICAgICAgICAgY3I0IHw9IFg4Nl9DUjRfVFNEOwogCisg ICAgLyoKKyAgICAgKiBUaGUge1JELFdSfXtGUyxHU31CQVNFIGFyZSBvbmx5 IHVzZWFibGUgaW4gNjRiaXQgY29kZSBzZWdtZW50cy4gIFdoaWxlCisgICAg ICogd2UgbXVzdCBub3QgaGF2ZSBDUjQuRlNHU0JBU0Ugc2V0IGJlaGluZCB0 aGUgYmFjayBvZiBhIDY0Yml0IFBWIGtlcm5lbCwKKyAgICAgKiB3ZSBkbyBs ZWF2ZSBpdCBzZXQgaW4gMzJiaXQgUFYgY29udGV4dCB0byBzcGVlZCB1cCBY ZW4ncyBjb250ZXh0IHN3aXRjaAorICAgICAqIHBhdGguCisgICAgICovCisg ICAgaWYgKCAhaXNfcHZfMzJiaXRfZG9tYWluKGQpICYmCisgICAgICAgICAh KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgKQorICAgICAgICBjcjQgJj0gflg4Nl9DUjRfRlNHU0JBU0U7CisKICAg ICByZXR1cm4gY3I0OwogfQogCkBAIC0zNzUsNyArMzg1LDggQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBBU1NF UlQoIWlzX3B2XzMyYml0X3ZjcHUodikpOwogCi0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICB7CiAg ICAgICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkK ICAgICAgICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9 IF9fcmRnc2Jhc2UoKTsKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9wdi9l bXVsLXByaXYtb3AuYyBiL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3Au YwppbmRleCA0YWJiYzE0Li4zMTJjMWVlIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvcHYvZW11bC1wcml2LW9wLmMKKysrIGIveGVuL2FyY2gveDg2L3B2 L2VtdWwtcHJpdi1vcC5jCkBAIC03ODYsNiArNzg2LDE3IEBAIHN0YXRpYyBp bnQgd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2 YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KKyAg ICAgICAgLyoKKyAgICAgICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2Fi bGUgRlNHU0JBU0UsIHJlZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAg ICAgICogZ3Vlc3QgYmFzZXMgbm93IHRoYXQgdGhleSBjYW4gbm8gbG9uZ2Vy IGNoYW5nZS4KKyAgICAgICAgICovCisgICAgICAgIGlmICggKGN1cnItPmFy Y2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYK KyAgICAgICAgICAgICAhKHZhbCAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAg ICAgICAgeworICAgICAgICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jh c2UgPSBfX3JkZnNiYXNlKCk7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2 X3ZjcHUuZ3NfYmFzZV9rZXJuZWwgPSBfX3JkZ3NiYXNlKCk7CisgICAgICAg IH0KKwogICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9 IHB2X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0 ZV9jcjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRj aF9sZXZlbGxpbmcoY3Vycik7CkBAIC04MzUsMTQgKzg0NiwxNSBAQCBzdGF0 aWMgaW50IHJlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2 YWwsCiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19w dl8zMmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwot ICAgICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2Uo KSA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAqdmFs ID0gKHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRmc2Jh c2UoKQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOwogICAgICAg ICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfR1NfQkFT RToKICAgICAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oY3VycmQpICkK ICAgICAgICAgICAgIGJyZWFrOwotICAgICAgICAqdmFsID0gY3B1X2hhc19m c2dzYmFzZSA/IF9fcmRnc2Jhc2UoKQotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5l bDsKKyAgICAgICAgKnZhbCA9IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dT QkFTRSkgPyBfX3JkZ3NiYXNlKCkKKyAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUu Z3NfYmFzZV9rZXJuZWw7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7 CiAKICAgICBjYXNlIE1TUl9TSEFET1dfR1NfQkFTRToKZGlmZiAtLWdpdCBh L3hlbi9hcmNoL3g4Ni9zZXR1cC5jIGIveGVuL2FyY2gveDg2L3NldHVwLmMK aW5kZXggZWNiMDE0OS4uYTM1M2Q3NiAxMDA2NDQKLS0tIGEveGVuL2FyY2gv eDg2L3NldHVwLmMKKysrIGIveGVuL2FyY2gveDg2L3NldHVwLmMKQEAgLTE1 NjcsNyArMTU2Nyw3IEBAIHZvaWQgX19pbml0IG5vcmV0dXJuIF9fc3RhcnRf eGVuKHVuc2lnbmVkIGxvbmcgbWJpX3ApCiAKICAgICBjcjRfcHYzMl9tYXNr ID0gbW11X2NyNF9mZWF0dXJlcyAmIFhFTl9DUjRfUFYzMl9CSVRTOwogCi0g ICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIGJvb3RfY3B1 X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkgKQogICAgICAgICBzZXRfaW5f Y3I0KFg4Nl9DUjRfRlNHU0JBU0UpOwogCiAgICAgaWYgKCBvcHRfaW52cGNp ZCAmJiBjcHVfaGFzX2ludnBjaWQgKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L2NwdWZlYXR1cmUuaAppbmRleCBiMjM3ZGExLi44NjFjYjBhIDEwMDY0NAot LS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtOTAsNyArOTAs NiBAQAogI2RlZmluZSBjcHVfaGFzX3hzYXZlcyAgICAgICAgICBib290X2Nw dV9oYXMoWDg2X0ZFQVRVUkVfWFNBVkVTKQogCiAvKiBDUFVJRCBsZXZlbCAw eDAwMDAwMDA3OjAuZWJ4ICovCi0jZGVmaW5lIGNwdV9oYXNfZnNnc2Jhc2Ug ICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkKICNk ZWZpbmUgY3B1X2hhc19ibWkxICAgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4 Nl9GRUFUVVJFX0JNSTEpCiAjZGVmaW5lIGNwdV9oYXNfaGxlICAgICAgICAg ICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9ITEUpCiAjZGVmaW5lIGNw dV9oYXNfYXZ4MiAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVS RV9BVlgyKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3Iu aCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKaW5kZXggYWZiZWI3Zi4u MWJhNmVlMyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3Iu aAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L21zci5oCkBAIC0xMjAsNiAr MTIwLDE0IEBAIHN0YXRpYyBpbmxpbmUgdWludDY0X3QgcmR0c2Nfb3JkZXJl ZCh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIgKGhpZ2gpIFwKIAkJ CSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24gaGFyZHdhcmUgc3Vw cG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRlZCBpbnRvIGhhcmR3 YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hvaWNlIGZvciA2NGJp dCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRsZSwgSFZNIGFuZAor ICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17 RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkgc2FmZSB0byB1c2Ug aWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICovCiBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lkKQogewogICAgIHVu c2lnbmVkIGxvbmcgYmFzZTsKQEAgLTE1MCw3ICsxNTgsNyBAQCBzdGF0aWMg aW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9pZCkKIHsKICAgICB1 bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jh c2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwogCiAgICAgcmRtc3Js KE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTE2Miw3ICsxNzAsNyBAQCBzdGF0 aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9pZCkKIHsKICAg ICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNn c2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JB U0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgpOwogCiAgICAgcmRt c3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE3NCw3ICsxODIsNyBAQCBz dGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc3NoYWRvdyh2b2lkKQog ewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICggY3B1X2hh c19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9G U0dTQkFTRSApCiAgICAgewogICAgICAgICBhc20gdm9sYXRpbGUgKCAic3dh cGdzIiApOwogICAgICAgICBiYXNlID0gX19yZGdzYmFzZSgpOwpAQCAtMTg4 LDcgKzE5Niw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdz c2hhZG93KHZvaWQpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFzZSh1 bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3Ni YXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNF ICkKICNpZmRlZiBIQVZFX0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xh dGlsZSAoICJ3cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UK QEAgLTIwMCw3ICsyMDgsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jh c2UodW5zaWduZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQg d3Jnc2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAjaWZkZWYgSEFWRV9BU19GU0dTQkFTRQogICAgICAg ICBhc20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkg KTsKICNlbHNlCkBAIC0yMTIsNyArMjIwLDcgQEAgc3RhdGljIGlubGluZSB2 b2lkIHdyZ3NiYXNlKHVuc2lnbmVkIGxvbmcgYmFzZSkKIAogc3RhdGljIGlu bGluZSB2b2lkIHdyZ3NzaGFkb3codW5zaWduZWQgbG9uZyBiYXNlKQogewot ICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2Ny NCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAgICAgewogICAgICAgICBhc20g dm9sYXRpbGUgKCAic3dhcGdzXG5cdCIKICNpZmRlZiBIQVZFX0FTX0ZTR1NC QVNFCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nv ci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRleCAy YmQ5ZTY5Li44ZTI1M2RjIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20t eDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJv Y2Vzc29yLmgKQEAgLTMwNSwxMSArMzA1LDMxIEBAIHN0YXRpYyBpbmxpbmUg dW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMgaW5saW5l IHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogeworICAgIHN0 cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOworCiAgICAg LyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5hYmxlZCEg Ki8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwgISh2YWwg JiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8oKS0+Y3I0 ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVjcjQiIDog OiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3YXJlIHN1 cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlzIHRoZSBr ZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3RzLCB3 aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisgICAgICog aW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3cn17ZnMs Z3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3JrIG91dCB3 aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRoZSB7UkQs V1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFjayB0bwor ICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJzIHJlcXVp cmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElmIEZTR1NC QVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xlYXIsIHJl ZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUgdXBkYXRp bmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4gdGhlCisg ICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0IGluIGlu Zm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAgICBpbmZv LT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNHU0JBU0Up OworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUlY3I0Igor ICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAvKiBGb3Jj ZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAgICAgICAg ICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5mby0+Y3I0 ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0IHJlc3Bl Y3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/unstable-1.patch" Content-Disposition: attachment; filename="xsa293/unstable-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg MzJkYzQyNTMuLjdmZjBmMTAgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKQEAgLTc2OSw0 OSArNzY5LDYgQEAgdm9pZCBhcmNoX2RvbWFpbl9jcmVhdGlvbl9maW5pc2hl ZChzdHJ1Y3QgZG9tYWluICpkKQogewogfQogCi0vKgotICogVGhlc2UgYXJl IHRoZSBtYXNrcyBvZiBDUjQgYml0cyAoc3ViamVjdCB0byBoYXJkd2FyZSBh dmFpbGFiaWxpdHkpIHdoaWNoIGEKLSAqIFBWIGd1ZXN0IG1heSBub3QgbGVn aXRpbWlhdGVseSBhdHRlbXB0IHRvIG1vZGlmeS4KLSAqLwotc3RhdGljIHVu c2lnbmVkIGxvbmcgX19yZWFkX21vc3RseSBwdl9jcjRfbWFzaywgY29tcGF0 X3B2X2NyNF9tYXNrOwotCi1zdGF0aWMgaW50IF9faW5pdCBpbml0X3B2X2Ny NF9tYXNrcyh2b2lkKQotewotICAgIHVuc2lnbmVkIGxvbmcgY29tbW9uX21h c2sgPSB+WDg2X0NSNF9UU0Q7Ci0KLSAgICAvKgotICAgICAqIEFsbCBQViBn dWVzdHMgbWF5IGF0dGVtcHQgdG8gbW9kaWZ5IFRTRCwgREUgYW5kIE9TWFNB VkUuCi0gICAgICovCi0gICAgaWYgKCBjcHVfaGFzX2RlICkKLSAgICAgICAg Y29tbW9uX21hc2sgJj0gflg4Nl9DUjRfREU7Ci0gICAgaWYgKCBjcHVfaGFz X3hzYXZlICkKLSAgICAgICAgY29tbW9uX21hc2sgJj0gflg4Nl9DUjRfT1NY U0FWRTsKLQotICAgIHB2X2NyNF9tYXNrID0gY29tcGF0X3B2X2NyNF9tYXNr ID0gY29tbW9uX21hc2s7Ci0KLSAgICAvKgotICAgICAqIDY0Yml0IFBWIGd1 ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgRlNHU0JBU0UuCi0gICAgICov Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKLSAgICAgICAgcHZfY3I0 X21hc2sgJj0gflg4Nl9DUjRfRlNHU0JBU0U7Ci0KLSAgICByZXR1cm4gMDsK LX0KLV9faW5pdGNhbGwoaW5pdF9wdl9jcjRfbWFza3MpOwotCi11bnNpZ25l ZCBsb25nIHB2X2d1ZXN0X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAq diwgdW5zaWduZWQgbG9uZyBndWVzdF9jcjQpCi17Ci0gICAgdW5zaWduZWQg bG9uZyBodl9jcjQgPSByZWFsX2NyNF90b19wdl9ndWVzdF9jcjQocmVhZF9j cjQoKSk7Ci0gICAgdW5zaWduZWQgbG9uZyBtYXNrID0gaXNfcHZfMzJiaXRf dmNwdSh2KSA/IGNvbXBhdF9wdl9jcjRfbWFzayA6IHB2X2NyNF9tYXNrOwot Ci0gICAgaWYgKCAoZ3Vlc3RfY3I0ICYgbWFzaykgIT0gKGh2X2NyNCAmIG1h c2spICkKLSAgICAgICAgcHJpbnRrKFhFTkxPR19HX1dBUk5JTkcKLSAgICAg ICAgICAgICAgICJkJWQgYXR0ZW1wdGVkIHRvIGNoYW5nZSAlcHYncyBDUjQg ZmxhZ3MgJTA4bHggLT4gJTA4bHhcbiIsCi0gICAgICAgICAgICAgICBjdXJy ZW50LT5kb21haW4tPmRvbWFpbl9pZCwgdiwgaHZfY3I0LCBndWVzdF9jcjQp OwotCi0gICAgcmV0dXJuIChodl9jcjQgJiBtYXNrKSB8IChndWVzdF9jcjQg JiB+bWFzayk7Ci19Ci0KICNkZWZpbmUgeGVuX3ZjcHVfZ3Vlc3RfY29udGV4 dCB2Y3B1X2d1ZXN0X2NvbnRleHQKICNkZWZpbmUgZnB1X2N0eHQgZnB1X2N0 eHQueAogQ0hFQ0tfRklFTERfKHN0cnVjdCwgdmNwdV9ndWVzdF9jb250ZXh0 LCBmcHVfY3R4dCk7CkBAIC04MjksNyArNzg2LDYgQEAgaW50IGFyY2hfc2V0 X2luZm9fZ3Vlc3QoCiAjaWZkZWYgQ09ORklHX1BWCiAgICAgdW5zaWduZWQg bG9uZyBjcjNfZ2ZuOwogICAgIHN0cnVjdCBwYWdlX2luZm8gKmNyM19wYWdl OwotICAgIHVuc2lnbmVkIGxvbmcgY3I0OwogICAgIGludCByYyA9IDA7CiAj ZW5kaWYKIApAQCAtMTAwNSw5ICs5NjEsNyBAQCBpbnQgYXJjaF9zZXRfaW5m b19ndWVzdCgKICAgICB2LT5hcmNoLnB2LmN0cmxyZWdbMF0gJj0gWDg2X0NS MF9UUzsKICAgICB2LT5hcmNoLnB2LmN0cmxyZWdbMF0gfD0gcmVhZF9jcjAo KSAmIH5YODZfQ1IwX1RTOwogCi0gICAgY3I0ID0gdi0+YXJjaC5wdi5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHYuY3RybHJlZ1s0XSA9IGNyNCA/IHB2 X2d1ZXN0X2NyNF9maXh1cCh2LCBjcjQpIDoKLSAgICAgICAgcmVhbF9jcjRf dG9fcHZfZ3Vlc3RfY3I0KG1tdV9jcjRfZmVhdHVyZXMpOworICAgIHYtPmFy Y2gucHYuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCB2LT5h cmNoLnB2LmN0cmxyZWdbNF0pOwogCiAgICAgbWVtc2V0KHYtPmFyY2guZHIs IDAsIHNpemVvZih2LT5hcmNoLmRyKSk7CiAgICAgdi0+YXJjaC5kcjYgPSBY ODZfRFI2X0RFRkFVTFQ7CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDdlYzU5NTQuLmJhNDQ0ZDIg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNo L3g4Ni9tbS5jCkBAIC01MjksMzMgKzUyOSwxMyBAQCB2b2lkIG1ha2VfY3Iz KHN0cnVjdCB2Y3B1ICp2LCBtZm5fdCBtZm4pCiAgICAgICAgIHYtPmFyY2gu Y3IzIHw9IGdldF9wY2lkX2JpdHModiwgZmFsc2UpOwogfQogCi11bnNpZ25l ZCBsb25nIHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3Qg dmNwdSAqdikKLXsKLSAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwotICAgIHVuc2lnbmVkIGxvbmcgY3I0OwotCi0gICAgY3I0ID0g di0+YXJjaC5wdi5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0 IHw9IG1tdV9jcjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0 X1NNRVAgfCBYODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0Up OwotCi0gICAgaWYgKCBkLT5hcmNoLnB2LnBjaWQgKQotICAgICAgICBjcjQg fD0gWDg2X0NSNF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHYu eHB0aSApCi0gICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKLQotICAgIGNy NCB8PSBkLT5hcmNoLnZ0c2MgPyBYODZfQ1I0X1RTRCA6IDA7Ci0KLSAgICBy ZXR1cm4gY3I0OwotfQotCiB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNw dSAqdikKIHsKICAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9pbmZvID0gZ2V0 X2NwdV9pbmZvKCk7CiAgICAgdW5zaWduZWQgbG9uZyBuZXdfY3I0OwogCiAg ICAgbmV3X2NyNCA9IChpc19wdl92Y3B1KHYpICYmICFpc19pZGxlX3ZjcHUo dikpCi0gICAgICAgICAgICAgID8gcHZfZ3Vlc3RfY3I0X3RvX3JlYWxfY3I0 KHYpCi0gICAgICAgICAgICAgIDogKChyZWFkX2NyNCgpICYgfihYODZfQ1I0 X1BDSURFIHwgWDg2X0NSNF9UU0QpKSB8IFg4Nl9DUjRfUEdFKTsKKyAgICAg ICAgICAgICAgPyBwdl9tYWtlX2NyNCh2KSA6IG1tdV9jcjRfZmVhdHVyZXM7 CiAKICAgICBpZiAoIGlzX3B2X3ZjcHUodikgJiYgdi0+ZG9tYWluLT5hcmNo LnB2LnhwdGkgKQogICAgIHsKQEAgLTU3NCw4ICs1NTQsNiBAQCB2b2lkIHdy aXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAgICAgc3dpdGNoX2Ny M19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAgICAgICBjcHVfaW5m by0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NFUlQoaXNfcHZfdmNw dSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVhdHVyZXMpOwogfQog CiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jIGIv eGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IDdlODRiMDQuLjkxMTIz YTggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYworKysg Yi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTk3LDYgKzk3LDUyIEBA IHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0cnVjdCB2Y3B1ICp2 KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9IHBhZ2V0YWJsZV9u dWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4dXBfZ3Vlc3RfY3I0 KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGNyNCkKK3sK KyAgICBjb25zdCBzdHJ1Y3QgY3B1aWRfcG9saWN5ICpwID0gdi0+ZG9tYWlu LT5hcmNoLmNwdWlkOworCisgICAgLyogRGlzY2FyZCBhdHRlbXB0cyB0byBz ZXQgZ3Vlc3QgY29udHJvbGxhYmxlIGJpdHMgb3V0c2lkZSBvZiB0aGUgcG9s aWN5LiAqLworICAgIGNyNCAmPSB+KChwLT5iYXNpYy50c2MgICAgID8gMCA6 IFg4Nl9DUjRfVFNEKSAgICAgIHwKKyAgICAgICAgICAgICAocC0+YmFzaWMu ZGUgICAgICA/IDAgOiBYODZfQ1I0X0RFKSAgICAgICB8CisgICAgICAgICAg ICAgKHAtPmZlYXQuZnNnc2Jhc2UgPyAwIDogWDg2X0NSNF9GU0dTQkFTRSkg fAorICAgICAgICAgICAgIChwLT5iYXNpYy54c2F2ZSAgID8gMCA6IFg4Nl9D UjRfT1NYU0FWRSkpOworCisgICAgLyogTWFza3MgZXhwZWN0ZWQgdG8gYmUg ZGlzam9pbnQgc2V0cy4gKi8KKyAgICBCVUlMRF9CVUdfT04oUFZfQ1I0X0dV RVNUX01BU0sgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLKTsKKworICAg IC8qCisgICAgICogQSBndWVzdCBzZWVzIHRoZSBwb2xpY3kgc3Vic2V0IG9m IGl0cyBvd24gY2hvaWNlIG9mIGd1ZXN0IGNvbnRyb2xsYWJsZQorICAgICAq IGJpdHMsIGFuZCBhIHN1YnNldCBvZiBYZW4ncyBjaG9pY2Ugb2YgY2VydGFp biBoYXJkd2FyZSBzZXR0aW5ncy4KKyAgICAgKi8KKyAgICByZXR1cm4gKChj cjQgJiBQVl9DUjRfR1VFU1RfTUFTSykgfAorICAgICAgICAgICAgKG1tdV9j cjRfZmVhdHVyZXMgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLKSk7Cit9 CisKK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29uc3Qgc3RydWN0IHZj cHUgKnYpCit7CisgICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRv bWFpbjsKKyAgICB1bnNpZ25lZCBsb25nIGNyNCA9IG1tdV9jcjRfZmVhdHVy ZXMgJgorICAgICAgICB+KFg4Nl9DUjRfUENJREUgfCBYODZfQ1I0X1BHRSB8 IFg4Nl9DUjRfVFNEKTsKKworICAgIC8qCisgICAgICogUENJREUgb3IgUEdF IGRlcGVuZHMgb24gdGhlIFBDSUQvWFBUSSBzZXR0aW5ncywgYnV0IG11c3Qg bm90IGJvdGggYmUKKyAgICAgKiBzZXQsIGFzIGl0IGltcGFjdHMgdGhlIHNh ZmV0eSBvZiBUTEIgZmx1c2hpbmcuCisgICAgICovCisgICAgaWYgKCBkLT5h cmNoLnB2LnBjaWQgKQorICAgICAgICBjcjQgfD0gWDg2X0NSNF9QQ0lERTsK KyAgICBlbHNlIGlmICggIWQtPmFyY2gucHYueHB0aSApCisgICAgICAgIGNy NCB8PSBYODZfQ1I0X1BHRTsKKworICAgIC8qCisgICAgICogVFNEIGlzIG5l ZWRlZCBpZiBlaXRoZXIgdGhlIGd1ZXN0IGhhcyBlbGVjdGVkIHRvIHVzZSBp dCwgb3IgWGVuIGlzCisgICAgICogdmlydHVhbGlzaW5nIHRoZSBUU0MgdmFs dWUgdGhlIGd1ZXN0IHNlZXMuCisgICAgICovCisgICAgaWYgKCBkLT5hcmNo LnZ0c2MgfHwgKHYtPmFyY2gucHYuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNE KSApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVy biBjcjQ7Cit9CisKIGludCBzd2l0Y2hfY29tcGF0KHN0cnVjdCBkb21haW4g KmQpCiB7CiAgICAgc3RydWN0IHZjcHUgKnY7CkBAIC0xOTEsNyArMjM3LDcg QEAgaW50IHB2X3ZjcHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAg ICAvKiBQViBndWVzdHMgYnkgZGVmYXVsdCBoYXZlIGEgMTAwSHogdGlja2Vy LiAqLwogICAgIHYtPnBlcmlvZGljX3BlcmlvZCA9IE1JTExJU0VDUygxMCk7 CiAKLSAgICB2LT5hcmNoLnB2LmN0cmxyZWdbNF0gPSByZWFsX2NyNF90b19w dl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5w di5jdHJscmVnWzRdID0gcHZfZml4dXBfZ3Vlc3RfY3I0KHYsIDApOwogCiAg ICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oZCkgKQogICAgIHsKZGlmZiAt LWdpdCBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYyBiL3hlbi9h cmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwppbmRleCA5NDJlY2UyLi5iNGE1 NmY5IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9w LmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jCkBAIC0z Myw2ICszMyw3IEBACiAjaW5jbHVkZSA8YXNtL2h5cGVyY2FsbC5oPgogI2lu Y2x1ZGUgPGFzbS9tYzE0NjgxOHJ0Yy5oPgogI2luY2x1ZGUgPGFzbS9wMm0u aD4KKyNpbmNsdWRlIDxhc20vcHYvZG9tYWluLmg+CiAjaW5jbHVkZSA8YXNt L3B2L3RyYXBzLmg+CiAjaW5jbHVkZSA8YXNtL3NoYXJlZC5oPgogI2luY2x1 ZGUgPGFzbS90cmFwcy5oPgpAQCAtNzc5LDggKzc4MCw4IEBAIHN0YXRpYyBp bnQgd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2 YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KLSAg ICAgICAgY3Vyci0+YXJjaC5wdi5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKGN1cnIsIHZhbCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY3VycikpOworICAgICAgICBjdXJyLT5hcmNo LnB2LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQoY3VyciwgdmFs KTsKKyAgICAgICAgd3JpdGVfY3I0KHB2X21ha2VfY3I0KGN1cnIpKTsKICAg ICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKGN1cnIpOwogICAgICAgICBy ZXR1cm4gWDg2RU1VTF9PS0FZOwogICAgIH0KZGlmZiAtLWdpdCBhL3hlbi9p bmNsdWRlL2FzbS14ODYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCmluZGV4IDI3N2Y5OWYuLmExMzFjYTIgMTAwNjQ0Ci0tLSBh L3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgKKysrIGIveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaApAQCAtNjUzLDE3ICs2NTMsNiBAQCBib29s IHVwZGF0ZV9zZWNvbmRhcnlfc3lzdGVtX3RpbWUoc3RydWN0IHZjcHUgKiwK IHZvaWQgdmNwdV9zaG93X2V4ZWN1dGlvbl9zdGF0ZShzdHJ1Y3QgdmNwdSAq KTsKIHZvaWQgdmNwdV9zaG93X3JlZ2lzdGVycyhjb25zdCBzdHJ1Y3QgdmNw dSAqKTsKIAotLyogQ2xlYW4gdXAgQ1I0IGJpdHMgdGhhdCBhcmUgbm90IHVu ZGVyIGd1ZXN0IGNvbnRyb2wuICovCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0 X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAqLCB1bnNpZ25lZCBsb25n IGd1ZXN0X2NyNCk7Ci0KLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12aXNp YmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25nIHB2 X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdik7 Ci0KLSNkZWZpbmUgcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KGMpICAgICAg ICAgICAgICAgICAgICAgICAgIFwKLSAgICAoKGMpICYgfihYODZfQ1I0X1BH RSB8IFg4Nl9DUjRfUFNFIHwgWDg2X0NSNF9UU0QgfCAgICAgIFwKLSAgICAg ICAgICAgICBYODZfQ1I0X09TWFNBVkUgfCBYODZfQ1I0X1NNRVAgfCAgICAg ICAgICAgICAgIFwKLSAgICAgICAgICAgICBYODZfQ1I0X0ZTR1NCQVNFIHwg WDg2X0NSNF9TTUFQIHwgWDg2X0NSNF9QQ0lERSkpCi0KIHN0YXRpYyBpbmxp bmUgc3RydWN0IHZjcHVfZ3Vlc3RfY29udGV4dCAqYWxsb2NfdmNwdV9ndWVz dF9jb250ZXh0KHZvaWQpCiB7CiAgICAgcmV0dXJuIHZtYWxsb2Moc2l6ZW9m KHN0cnVjdCB2Y3B1X2d1ZXN0X2NvbnRleHQpKTsKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L3B2L2RvbWFpbi5oCmluZGV4IDdkOWQwOWQuLjk5YTBmZTcgMTAw NjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWluLmgKKysr IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wdi9kb21haW4uaApAQCAtNjEsNiAr NjEsMjMgQEAgaW50IHB2X3ZjcHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAq dik7CiB2b2lkIHB2X2RvbWFpbl9kZXN0cm95KHN0cnVjdCBkb21haW4gKmQp OwogaW50IHB2X2RvbWFpbl9pbml0aWFsaXNlKHN0cnVjdCBkb21haW4gKmQp OwogCisvKgorICogQml0cyB3aGljaCBhIFBWIGd1ZXN0IGNhbiB0b2dnbGUg aW4gaXRzIHZpZXcgb2YgY3I0LiAgU29tZSBhcmUgbG9hZGVkIGludG8KKyAq IGhhcmR3YXJlLCB3aGlsZSBzb21lIGFyZSBmdWxseSBlbXVsYXRlZC4KKyAq LworI2RlZmluZSBQVl9DUjRfR1VFU1RfTUFTSyBcCisgICAgKFg4Nl9DUjRf VFNEIHwgWDg2X0NSNF9ERSB8IFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0 X09TWFNBVkUpCisKKy8qIEJpdHMgd2hpY2ggYSBQViBndWVzdCBtYXkgb2Jz ZXJ2ZSBmcm9tIHRoZSByZWFsIGhhcmR3YXJlIHNldHRpbmdzLiAqLworI2Rl ZmluZSBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLIFwKKyAgICAoWDg2X0NS NF9QQUUgfCBYODZfQ1I0X01DRSB8IFg4Nl9DUjRfT1NGWFNSIHwgWDg2X0NS NF9PU1hNTUVYQ1BUKQorCisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNv bnN0cnVjdCB0aGUgcmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVl LiAqLwordW5zaWduZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qg c3RydWN0IHZjcHUgKnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKKworLyogQ3Jl YXRlIGEgY3I0IHZhbHVlIHRvIGxvYWQgaW50byBoYXJkd2FyZSwgYmFzZWQg b24gdmNwdSBzZXR0aW5ncy4gKi8KK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9j cjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpOworCiBib29sIHhwdGlfcGNpZF9l bmFibGVkKHZvaWQpOwogCiAjZWxzZSAgLyogIUNPTkZJR19QViAqLwpAQCAt NzIsNiArODksOCBAQCBzdGF0aWMgaW5saW5lIGludCBwdl92Y3B1X2luaXRp YWxpc2Uoc3RydWN0IHZjcHUgKnYpIHsgcmV0dXJuIC1FT1BOT1RTVVBQOyB9 CiBzdGF0aWMgaW5saW5lIHZvaWQgcHZfZG9tYWluX2Rlc3Ryb3koc3RydWN0 IGRvbWFpbiAqZCkge30KIHN0YXRpYyBpbmxpbmUgaW50IHB2X2RvbWFpbl9p bml0aWFsaXNlKHN0cnVjdCBkb21haW4gKmQpIHsgcmV0dXJuIC1FT1BOT1RT VVBQOyB9CiAKK3N0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBwdl9tYWtl X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikgeyByZXR1cm4gfjB1bDsgfQor CiAjZW5kaWYJLyogQ09ORklHX1BWICovCiAKIHZvaWQgcGFyYXZpcnRfY3R4 dF9zd2l0Y2hfZnJvbShzdHJ1Y3QgdmNwdSAqdik7Cg== --=separator Content-Type: application/octet-stream; name="xsa293/unstable-2.patch" Content-Disposition: attachment; filename="xsa293/unstable-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBsb2FkX3NlZ21lbnRzKCkgaXMgdXBkYXRlZCB0byB1c2UgdGhlIFZNTE9B RCBvcHRpbWlzYXRpb24gaWYgRlNHU0JBU0UgaXMKICAgdW5hdmFpbGFibGUs IGV2ZW4gaWYgb25seSBnc19zaGFkb3cgbmVlZHMgdXBkYXRpbmcuICBBcyBh IG1pbm9yIHBlcmYKICAgaW1wcm92ZW1lbnQsIGNoZWNrIGNwdV9oYXNfc3Zt IGZpcnN0IHRvIHNob3J0IGNpcmN1aXQgYSBjb250ZXh0LWRlcGVuZGVudAog ICBjb25kaXRpb25hbCBvbiBJbnRlbCBoYXJkd2FyZS4KICogcHZfbWFrZV9j cjQoKSBpcyB1cGRhdGVkIGZvciA2NGJpdCBQViBndWVzdHMgdG8gdXNlIHRo ZSBndWVzdCBrZXJuZWxzCiAgIGNob2ljZSBvZiBGU0dTQkFTRS4KClRoaXMg aXMgcGFydCBvZiBYU0EtMjkzCgpSZXBvcnRlZC1ieTogQW5keSBMdXRvbWly c2tpIDxsdXRvQGtlcm5lbC5vcmc+ClNpZ25lZC1vZmYtYnk6IEFuZHJldyBD b29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IDdmZjBmMTAuLmFkZWUzNWUgMTAwNjQ0Ci0tLSBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMK QEAgLTEzMDMsMTMgKzEzMDMsOCBAQCBzdGF0aWMgdm9pZCBsb2FkX3NlZ21l bnRzKHN0cnVjdCB2Y3B1ICpuKQogICAgIHBlcl9jcHUoZGlydHlfc2VnbWVu dF9tYXNrLCBjcHUpID0gMDsKIAogI2lmZGVmIENPTkZJR19IVk0KLSAgICBp ZiAoICFpc19wdl8zMmJpdF92Y3B1KG4pICYmICFjcHVfaGFzX2ZzZ3NiYXNl ICYmIGNwdV9oYXNfc3ZtICYmCi0gICAgICAgICAhKCh1cmVncy0+ZnMgfCB1 cmVncy0+Z3MpICYgfjMpICYmCi0gICAgICAgICAvKgotICAgICAgICAgICog VGhlIHJlbWFpbmluZyBwYXJ0IGlzIGp1c3QgZm9yIG9wdGltaXphdGlvbjog SWYgb25seSBzaGFkb3cgR1MKLSAgICAgICAgICAqIG5lZWRzIGxvYWRpbmcs IHRoZXJlJ3Mgbm90aGluZyB0byBiZSBnYWluZWQgaGVyZS4KLSAgICAgICAg ICAqLwotICAgICAgICAgKG4tPmFyY2gucHYuZnNfYmFzZSB8IG4tPmFyY2gu cHYuZ3NfYmFzZV91c2VyIHwgbi0+YXJjaC5wdi5sZHRfZW50cykgKQorICAg IGlmICggY3B1X2hhc19zdm0gJiYgIWlzX3B2XzMyYml0X3ZjcHUobikgJiYK KyAgICAgICAgICEocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UpICYm ICEoKHVyZWdzLT5mcyB8IHVyZWdzLT5ncykgJiB+MykgKQogICAgIHsKICAg ICAgICAgdW5zaWduZWQgbG9uZyBnc2IgPSBuLT5hcmNoLmZsYWdzICYgVEZf a2VybmVsX21vZGUKICAgICAgICAgICAgID8gbi0+YXJjaC5wdi5nc19iYXNl X2tlcm5lbCA6IG4tPmFyY2gucHYuZ3NfYmFzZV91c2VyOwpAQCAtMTQ4OCw3 ICsxNDgzLDggQEAgc3RhdGljIHZvaWQgc2F2ZV9zZWdtZW50cyhzdHJ1Y3Qg dmNwdSAqdikKICAgICByZWdzLT5mcyA9IHJlYWRfc3JlZyhmcyk7CiAgICAg cmVncy0+Z3MgPSByZWFkX3NyZWcoZ3MpOwogCi0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKKyAgICAvKiAl ZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJB U0UgYXJlIHVzYWJsZS4gKi8KKyAgICBpZiAoIChyZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2XzMyYml0X3ZjcHUodikgKQogICAg IHsKICAgICAgICAgdi0+YXJjaC5wdi5mc19iYXNlID0gX19yZGZzYmFzZSgp OwogICAgICAgICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9k ZSApCkBAIC0xNjkyLDggKzE2ODgsOCBAQCBzdGF0aWMgdm9pZCBfX2NvbnRl eHRfc3dpdGNoKHZvaWQpCiAKICNpZiBkZWZpbmVkKENPTkZJR19QVikgJiYg ZGVmaW5lZChDT05GSUdfSFZNKQogICAgIC8qIFByZWZldGNoIHRoZSBWTUNC IGlmIHdlIGV4cGVjdCB0byB1c2UgaXQgbGF0ZXIgaW4gdGhlIGNvbnRleHQg c3dpdGNoICovCi0gICAgaWYgKCBpc19wdl9kb21haW4obmQpICYmICFpc19w dl8zMmJpdF9kb21haW4obmQpICYmICFpc19pZGxlX2RvbWFpbihuZCkgJiYK LSAgICAgICAgICFjcHVfaGFzX2ZzZ3NiYXNlICYmIGNwdV9oYXNfc3ZtICkK KyAgICBpZiAoIGNwdV9oYXNfc3ZtICYmIGlzX3B2X2RvbWFpbihuZCkgJiYg IWlzX3B2XzMyYml0X2RvbWFpbihuZCkgJiYKKyAgICAgICAgICFpc19pZGxl X2RvbWFpbihuZCkgJiYgIShyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgKQogICAgICAgICBzdm1fbG9hZF9zZWdzKDAsIDAsIDAsIDAsIDAsIDAs IDApOwogI2VuZGlmCiAKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9odm0v c3ZtL3N2bS5jIGIveGVuL2FyY2gveDg2L2h2bS9zdm0vc3ZtLmMKaW5kZXgg MjU4NGI5MC4uMjNkNzJlOCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2h2 bS9zdm0vc3ZtLmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS9zdm0vc3ZtLmMK QEAgLTE1NzQsOCArMTU3NCw3IEBAIHN0YXRpYyBpbnQgc3ZtX2NwdV91cF9w cmVwYXJlKHVuc2lnbmVkIGludCBjcHUpCiAgICAgICAgICAgICBnb3RvIGVy cjsKIAogI2lmZGVmIENPTkZJR19QVgotICAgICAgICBpZiAoICFjcHVfaGFz X2ZzZ3NiYXNlICkKLSAgICAgICAgICAgIHBlcl9jcHUoaG9zdF92bWNiX3Zh LCBjcHUpID0gX19tYXBfZG9tYWluX3BhZ2VfZ2xvYmFsKHBnKTsKKyAgICAg ICAgcGVyX2NwdShob3N0X3ZtY2JfdmEsIGNwdSkgPSBfX21hcF9kb21haW5f cGFnZV9nbG9iYWwocGcpOwogI2VuZGlmCiAKICAgICAgICAgY2xlYXJfZG9t YWluX3BhZ2UocGFnZV90b19tZm4ocGcpKTsKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4u YwppbmRleCA5MTEyM2E4Li4zZTgyY2ZmIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFp bi5jCkBAIC0xNDAsNiArMTQwLDE1IEBAIHVuc2lnbmVkIGxvbmcgcHZfbWFr ZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5hcmNo LnZ0c2MgfHwgKHYtPmFyY2gucHYuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNE KSApCiAgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKIAorICAgIC8qCisg ICAgICogVGhlIHtSRCxXUn17RlMsR1N9QkFTRSBhcmUgb25seSB1c2VhYmxl IGluIDY0Yml0IGNvZGUgc2VnbWVudHMuICBXaGlsZQorICAgICAqIHdlIG11 c3Qgbm90IGhhdmUgQ1I0LkZTR1NCQVNFIHNldCBiZWhpbmQgdGhlIGJhY2sg b2YgYSA2NGJpdCBQViBrZXJuZWwsCisgICAgICogd2UgZG8gbGVhdmUgaXQg c2V0IGluIDMyYml0IFBWIGNvbnRleHQgdG8gc3BlZWQgdXAgWGVuJ3MgY29u dGV4dCBzd2l0Y2gKKyAgICAgKiBwYXRoLgorICAgICAqLworICAgIGlmICgg IWlzX3B2XzMyYml0X2RvbWFpbihkKSAmJiAhKHYtPmFyY2gucHYuY3RybHJl Z1s0XSAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAgICAgICAgY3I0ICY9IH5Y ODZfQ1I0X0ZTR1NCQVNFOworCiAgICAgcmV0dXJuIGNyNDsKIH0KIApAQCAt MzcxLDcgKzM4MCw4IEBAIHZvaWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0 IHZjcHUgKnYpCiB7CiAgICAgQVNTRVJUKCFpc19wdl8zMmJpdF92Y3B1KHYp KTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgLyogJWZz LyVncyBiYXNlcyBjYW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNF IGFyZSB1c2FibGUuICovCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAgICAgewogICAgICAgICBpZiAoIHYtPmFyY2guZmxh Z3MgJiBURl9rZXJuZWxfbW9kZSApCiAgICAgICAgICAgICB2LT5hcmNoLnB2 LmdzX2Jhc2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gveDg2 L3B2L2VtdWwtcHJpdi1vcC5jCmluZGV4IGI0YTU2ZjkuLjM3NDZlMmEgMTAw NjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYworKysg Yi94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTc4MCw2ICs3 ODAsMTcgQEAgc3RhdGljIGludCB3cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVn LCB1bnNpZ25lZCBsb25nIHZhbCwKICAgICB9CiAKICAgICBjYXNlIDQ6IC8q IFdyaXRlIENSNCAqLworICAgICAgICAvKgorICAgICAgICAgKiBJZiB0aGlz IHdyaXRlIHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwgcmVmcmVzaCBYZW4ncyBp ZGVhIG9mIHRoZQorICAgICAgICAgKiBndWVzdCBiYXNlcyBub3cgdGhhdCB0 aGV5IGNhbiBubyBsb25nZXIgY2hhbmdlLgorICAgICAgICAgKi8KKyAgICAg ICAgaWYgKCAoY3Vyci0+YXJjaC5wdi5jdHJscmVnWzRdICYgWDg2X0NSNF9G U0dTQkFTRSkgJiYKKyAgICAgICAgICAgICAhKHZhbCAmIFg4Nl9DUjRfRlNH U0JBU0UpICkKKyAgICAgICAgeworICAgICAgICAgICAgY3Vyci0+YXJjaC5w di5mc19iYXNlID0gX19yZGZzYmFzZSgpOworICAgICAgICAgICAgY3Vyci0+ YXJjaC5wdi5nc19iYXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKKyAgICAg ICAgfQorCiAgICAgICAgIGN1cnItPmFyY2gucHYuY3RybHJlZ1s0XSA9IHB2 X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0ZV9j cjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRjaF9s ZXZlbGxpbmcoY3Vycik7CkBAIC04MjgsMTQgKzgzOSwxNSBAQCBzdGF0aWMg aW50IHJlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2YWws CiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19wdl8z MmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwotICAg ICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2UoKSA6 IGN1cnItPmFyY2gucHYuZnNfYmFzZTsKKyAgICAgICAgKnZhbCA9IChyZWFk X2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZnNiYXNlKCkKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg OiBjdXJyLT5hcmNoLnB2LmZzX2Jhc2U7CiAgICAgICAgIHJldHVybiBYODZF TVVMX09LQVk7CiAKICAgICBjYXNlIE1TUl9HU19CQVNFOgogICAgICAgICBp ZiAoIGlzX3B2XzMyYml0X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAgICAg YnJlYWs7Ci0gICAgICAgICp2YWwgPSBjcHVfaGFzX2ZzZ3NiYXNlID8gX19y ZGdzYmFzZSgpCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDog Y3Vyci0+YXJjaC5wdi5nc19iYXNlX2tlcm5lbDsKKyAgICAgICAgKnZhbCA9 IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZ3NiYXNl KCkKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgOiBjdXJyLT5hcmNoLnB2LmdzX2Jhc2Vfa2VybmVsOwogICAgICAg ICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfU0hBRE9X X0dTX0JBU0U6CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBi L3hlbi9hcmNoL3g4Ni9zZXR1cC5jCmluZGV4IDkyZGEwNjAuLjM0NDA3OTQg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9h cmNoL3g4Ni9zZXR1cC5jCkBAIC0xNjEwLDcgKzE2MTAsNyBAQCB2b2lkIF9f aW5pdCBub3JldHVybiBfX3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9w KQogCiAgICAgY3I0X3B2MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBY RU5fQ1I0X1BWMzJfQklUUzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFz ZSApCisgICAgaWYgKCBib290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JB U0UpICkKICAgICAgICAgc2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsK IAogICAgIGlmICggb3B0X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkK ZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5o IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKaW5kZXggNTU5 MmUxNy4uMWZiOWFmNCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9jcHVmZWF0dXJlLmgKKysrIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVm ZWF0dXJlLmgKQEAgLTg5LDcgKzg5LDYgQEAKICNkZWZpbmUgY3B1X2hhc194 c2F2ZXMgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX1hTQVZF UykKIAogLyogQ1BVSUQgbGV2ZWwgMHgwMDAwMDAwNzowLmVieCAqLwotI2Rl ZmluZSBjcHVfaGFzX2ZzZ3NiYXNlICAgICAgICBib290X2NwdV9oYXMoWDg2 X0ZFQVRVUkVfRlNHU0JBU0UpCiAjZGVmaW5lIGNwdV9oYXNfYm1pMSAgICAg ICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9CTUkxKQogI2RlZmlu ZSBjcHVfaGFzX2hsZSAgICAgICAgICAgICBib290X2NwdV9oYXMoWDg2X0ZF QVRVUkVfSExFKQogI2RlZmluZSBjcHVfaGFzX2F2eDIgICAgICAgICAgICBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfQVZYMikKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L21zci5oCmluZGV4IGFkZmEyZmEuLmE3MjQ0NzkgMTAwNjQ0Ci0tLSBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKKysrIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9tc3IuaApAQCAtMTI0LDYgKzEyNCwxNCBAQCBzdGF0aWMgaW5saW5l IHVpbnQ2NF90IHJkdHNjX29yZGVyZWQodm9pZCkKIAkJCSAgOiAiPWEiIChs b3cpLCAiPWQiIChoaWdoKSBcCiAJCQkgIDogImMiIChjb3VudGVyKSkKIAor LyoKKyAqIE9uIGhhcmR3YXJlIHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2 YWx1ZSBsb2FkZWQgaW50byBoYXJkd2FyZSBpcyB0aGUKKyAqIGd1ZXN0IGtl cm5lbCdzIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3RzIChYZW4ncyBjaG9p Y2UgZm9yIElkbGUsIEhWTSBhbmQKKyAqIDMyYml0IFBWKS4KKyAqCisgKiBU aGVyZWZvcmUsIHRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25z IGFyZSBvbmx5IHNhZmUgdG8gdXNlIGlmCisgKiAlY3I0LmZzZ3NiYXNlIGlz IHNldC4KKyAqLwogc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25nIF9fcmRm c2Jhc2Uodm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CkBAIC0x NTQsNyArMTYyLDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25nIHJk ZnNiYXNlKHZvaWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwogCi0g ICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0 KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICAgICAgcmV0dXJuIF9fcmRm c2Jhc2UoKTsKIAogICAgIHJkbXNybChNU1JfRlNfQkFTRSwgYmFzZSk7CkBA IC0xNjYsNyArMTc0LDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25n IHJkZ3NiYXNlKHZvaWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwog Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRf Y3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICAgICAgcmV0dXJuIF9f cmRnc2Jhc2UoKTsKIAogICAgIHJkbXNybChNU1JfR1NfQkFTRSwgYmFzZSk7 CkBAIC0xNzgsNyArMTg2LDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBs b25nIHJkZ3NzaGFkb3codm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJh c2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICgg cmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogICAgIHsKICAgICAg ICAgYXNtIHZvbGF0aWxlICggInN3YXBncyIgKTsKICAgICAgICAgYmFzZSA9 IF9fcmRnc2Jhc2UoKTsKQEAgLTE5Miw3ICsyMDAsNyBAQCBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgcmRnc3NoYWRvdyh2b2lkKQogCiBzdGF0aWMg aW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewot ICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2Ny NCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAjaWZkZWYgSEFWRV9BU19GU0dT QkFTRQogICAgICAgICBhc20gdm9sYXRpbGUgKCAid3Jmc2Jhc2UgJTAiIDo6 ICJyIiAoYmFzZSkgKTsKICNlbHNlCkBAIC0yMDQsNyArMjEyLDcgQEAgc3Rh dGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2lnbmVkIGxvbmcgYmFzZSkK IAogc3RhdGljIGlubGluZSB2b2lkIHdyZ3NiYXNlKHVuc2lnbmVkIGxvbmcg YmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlm ICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogI2lmZGVmIEhB VkVfQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0aWxlICggIndyZ3Ni YXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpAQCAtMjE2LDcgKzIy NCw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdzYmFzZSh1bnNpZ25lZCBs b25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdzc2hhZG93KHVu c2lnbmVkIGxvbmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jh c2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgYXNtIHZvbGF0aWxlICggInN3YXBnc1xuXHQi CiAjaWZkZWYgSEFWRV9BU19GU0dTQkFTRQpkaWZmIC0tZ2l0IGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKaW5kZXggZGYwMWFlMy4uZjMyNzVjYSAxMDA2NDQK LS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oCkBAIC0zMDQsMTEgKzMw NCwzMSBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmVhZF9jcjQo dm9pZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyaXRlX2NyNCh1bnNpZ25l ZCBsb25nIHZhbCkKIHsKKyAgICBzdHJ1Y3QgY3B1X2luZm8gKmluZm8gPSBn ZXRfY3B1X2luZm8oKTsKKwogICAgIC8qIE5vIGdsb2JhbCBwYWdlcyBpbiBj YXNlIG9mIFBDSURzIGVuYWJsZWQhICovCiAgICAgQVNTRVJUKCEodmFsICYg WDg2X0NSNF9QR0UpIHx8ICEodmFsICYgWDg2X0NSNF9QQ0lERSkpOwogCi0g ICAgZ2V0X2NwdV9pbmZvKCktPmNyNCA9IHZhbDsKLSAgICBhc20gdm9sYXRp bGUgKCAibW92ICUwLCUlY3I0IiA6IDogInIiICh2YWwpICk7CisgICAgLyoK KyAgICAgKiBPbiBoYXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUg dmFsdWUgaW4gJWNyNCBpcyB0aGUga2VybmVsJ3MKKyAgICAgKiBjaG9pY2Ug Zm9yIDY0Yml0IFBWIGd1ZXN0cywgd2hpY2ggaW1wYWN0cyB3aGV0aGVyIFhl biBjYW4gdXNlIHRoZQorICAgICAqIGluc3RydWN0aW9ucy4KKyAgICAgKgor ICAgICAqIFRoZSB7cmQsd3J9e2ZzLGdzfWJhc2UoKSBoZWxwZXJzIHVzZSBp bmZvLT5jcjQgdG8gd29yayBvdXQgd2hldGhlciBpdAorICAgICAqIGlzIHNh ZmUgdG8gZXhlY3V0ZSB0aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0 aW9uLCBmYWxsaW5nIGJhY2sgdG8KKyAgICAgKiB0aGUgTVNSIHBhdGggaWYg bm90LiAgU29tZSB1c2VycyByZXF1aXJlIGludGVycnVwdCBzYWZldHkuCisg ICAgICoKKyAgICAgKiBJZiBGU0dTQkFTRSBpcyBjdXJyZW50bHkgb3IgYWJv dXQgdG8gYmVjb21lIGNsZWFyLCByZWZsZWN0IHRoaXMgaW4KKyAgICAgKiBp bmZvLT5jcjQgYmVmb3JlIHVwZGF0aW5nICVjcjQsIHNvIGFuIGludGVycnVw dCB3aGljaCBoaXRzIGluIHRoZQorICAgICAqIG1pZGRsZSB3b24ndCBvYnNl cnZlIEZTR1NCQVNFIHNldCBpbiBpbmZvLT5jcjQgYnV0IGNsZWFyIGluICVj cjQuCisgICAgICovCisgICAgaW5mby0+Y3I0ID0gdmFsICYgKGluZm8tPmNy NCB8IH5YODZfQ1I0X0ZTR1NCQVNFKTsKKworICAgIGFzbSB2b2xhdGlsZSAo ICJtb3YgJVt2YWxdLCAlJWNyNCIKKyAgICAgICAgICAgICAgICAgICA6ICIr bSIgKGluZm8tPmNyNCkgLyogRm9yY2Ugb3JkZXJpbmcgd2l0aG91dCBhIGJh cnJpZXIuICovCisgICAgICAgICAgICAgICAgICAgOiBbdmFsXSAiciIgKHZh bCkgKTsKKworICAgIGluZm8tPmNyNCA9IHZhbDsKIH0KIAogLyogQ2xlYXIg YW5kIHNldCAnVFMnIGJpdCByZXNwZWN0aXZlbHkgKi8K --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:27:38 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:27:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h199i-0005kl-RC; Tue, 05 Mar 2019 12:26:46 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h199h-0005jg-8A for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:26:45 +0000 X-Inumbo-ID: 3969c1e4-3f41-11e9-932f-63076f2b4f88 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 3969c1e4-3f41-11e9-932f-63076f2b4f88; Tue, 05 Mar 2019 12:21:38 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h194b-0001ij-DZ; Tue, 05 Mar 2019 12:21:29 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h194b-0001Er-AZ; Tue, 05 Mar 2019 12:21:29 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:21:29 +0000 Subject: [Xen-announce] Xen Security Advisory 285 v2 - race with pass-through device hotplug X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-285 version 2 race with pass-through device hotplug UPDATES IN VERSION 2 ==================== Metadata updated to remove dependency on XSA-283. Public release. ISSUE DESCRIPTION ================= When adding a passed-through PCI device to a domain after it was already started, IOMMU page tables may need constructing on the fly. For PV guests the decision whether a page ought to have a mapping is based on whether the page is writable, to prevent IOMMU access to things like page tables. Writablility of a page may, however, change at any time. Failure of the relevant code to respect this possible race may lead to IOMMU mappings of, in particular, page tables, allowing the guest to alter such page tables without Xen auditing the changes. IMPACT ====== Malicious PV guests can escalate their privilege to that of the hypervisor. VULNERABLE SYSTEMS ================== All versions of Xen are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. Only guests which are assigned a device after domain creation can exploit this vulnerability. Guests which are not assigned devices, or guests assigned devices at domain creation time, cannot exploit this vulnerability. MITIGATION ========== Running only HVM or PVH guests avoids the vulnerability. Assigning passed-through PCI devices to PV guests at domain creation time also avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa285.patch xen-unstable xsa285-4.11.patch Xen 4.7.x - Xen 4.11.x $ sha256sum xsa285* 0851a4a9120220e2b03eafaf94648077154b6a6f27c29055d3779ccad7684fce xsa285.meta 9e96d3763158edde8d664c3e26761e63ca6f96bb921e0d7eb68351fe47499bde xsa285.patch 38ec20b04e0a859abe9850803ae00a33e48591a9949e5287dfa3725f3bd179f3 xsa285-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+aa0MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZhOAIAMZ/Q0Pq2cnicghrabKDMjKUsdyAcbK20sxXdx9y l0abU4kMQcnsejlbGfAhZQaDIpkGZN+rNw0BnC3VBH61en22q3yNlQsxP/eQhGKm du7sdN6DBayqX1Sjdn+UPzrDFTu7JoSsXN9NrHKgVXNS+jKWZOR9yfZBYFAk3RQB R1oYL2OYiyYFibxzNwbiLxzgEhGls38JzDtvTDuN6YBViaWQWgE9aOCzTZ6vOlzn BcZf5fHc6F/zg5xI3FhBYEPfBdAZvno/xJJymxENWegqwhdgfx6uWetT3M6axv89 h0HdmJ5KaMOdD96Tf+CUVI3N7UcVcuyAaMQqJVAM/+gAiU0= =+pPX -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa285.meta" Content-Disposition: attachment; filename="xsa285.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODUsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQK ICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAg ICAgInhzYTI4NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0K ICAgICAgfQogICAgfSwKICAgICI0LjExIjogewogICAgICAiUmVjaXBlcyI6 IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI4 N2Y1MWJmMzY2Y2E3OWI5OGUxZTIwMWJmOWJkN2E5YzE2NDYzMWUyIiwKICAg ICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQKICAgICAgICAg IF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI4 NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfSwKICAgICI0LjciOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAg ICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjcxMGNjMDk2OTcx MDE5YmMyZTVhOWFhYmI5YWYxYWNjYTBiNWI5ZTciLAogICAgICAgICAgIlBy ZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NAogICAgICAgICAgXSwKICAgICAg ICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg1LTQuMTEucGF0 Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAg IjQuOCI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsK ICAgICAgICAgICJTdGFibGVSZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODll NjgxODg2NTIwNzllM2JmYWE2NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsK ICAgICAgICAgICAgMjg0CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODUtNC4xMS5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45Ijogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcw M2RhNzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI4NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAg ICAgIH0KICAgICAgfQogICAgfSwKICAgICJtYXN0ZXIiOiB7CiAgICAgICJS ZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxl UmVmIjogIjI0ZDUyODI1MjdmNDY0NzkwN2IzNTcyODIwYjUzMzVjMTVjZDAz NTYiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NAog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg1LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAg fQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa285.patch" Content-Disposition: attachment; filename="xsa285.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBJT01NVS94ODY6IGZpeCB0eXBlIHJlZi1jb3VudGluZyByYWNlIHVwb24g SU9NTVUgcGFnZSB0YWJsZSBjb25zdHJ1Y3Rpb24KCldoZW4gYXJjaF9pb21t dV9wb3B1bGF0ZV9wYWdlX3RhYmxlKCkgZ2V0cyBpbnZva2VkIGZvciBhbiBh bHJlYWR5CnJ1bm5pbmcgZ3Vlc3QsIHNpbXBseSBsb29raW5nIGF0IHBhZ2Ug dHlwZXMgb25jZSBpc24ndCBlbm91Z2gsIGFzIHRoZXkKbWF5IGNoYW5nZSBh dCBhbnkgdGltZS4gQWRkIGxvZ2ljIHRvIHJlLWNoZWNrIHRoZSB0eXBlIGFm dGVyIGhhdmluZwptYXBwZWQgdGhlIHBhZ2UsIHVubWFwcGluZyBpdCBhZ2Fp biBpZiBuZWVkZWQuCgpUaGlzIGlzIFhTQS0yODUuCgpTaWduZWQtb2ZmLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClRlbnRhdGl2ZWx5 LUFja2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRy aXguY29tPgotLS0KdjQ6IFJlLXdyaXRlIGNvbW1lbnQgKHVzZSBHZW9yZ2Un cyB3b3JkaW5nKS4KdjM6IFJlLWJhc2UuCnYyOiBSZS1iYXNlLgoKLS0tIGEv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11LmMKKysrIGIveGVu L2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11LmMKQEAgLTcwLDYgKzcw LDI3IEBAIGludCBhcmNoX2lvbW11X3BvcHVsYXRlX3BhZ2VfdGFibGUoc3Ry dWMKICAgICAgICAgICAgICAgICByYyA9IGlvbW11X21hcChkLCBfZGZuKGdm biksIF9tZm4obWZuKSwgUEFHRV9PUkRFUl80SywKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBJT01NVUZfcmVhZGFibGUgfCBJT01NVUZfd3Jp dGFibGUsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJmZsdXNo X2ZsYWdzKTsKKworICAgICAgICAgICAgICAgIC8qCisgICAgICAgICAgICAg ICAgICogV2UgbWF5IGJlIHdvcmtpbmcgYmVoaW5kIHRoZSBiYWNrIG9mIGEg cnVubmluZyBndWVzdCwgd2hpY2gKKyAgICAgICAgICAgICAgICAgKiBtYXkg Y2hhbmdlIHRoZSB0eXBlIG9mIGEgcGFnZSBhdCBhbnkgdGltZS4gIFdlIGNh bid0IHByZXZlbnQKKyAgICAgICAgICAgICAgICAgKiB0aGlzIChmb3IgaW5z dGFuY2UsIGJ5IGJ1bXBpbmcgdGhlIHR5cGUgY291bnQgd2hpbGUgbWFwcGlu ZworICAgICAgICAgICAgICAgICAqIHRoZSBwYWdlKSB3aXRob3V0IGNhdXNp bmcgbGVnaXRpbWF0ZSBndWVzdCB0eXBlLWNoYW5nZQorICAgICAgICAgICAg ICAgICAqIG9wZXJhdGlvbnMgdG8gZmFpbC4gIFNvIGFmdGVyIGFkZGluZyB0 aGUgcGFnZSB0byB0aGUgSU9NTVUsCisgICAgICAgICAgICAgICAgICogY2hl Y2sgYWdhaW4gdG8gbWFrZSBzdXJlIHRoaXMgaXMgc3RpbGwgdmFsaWQuICBO QiB0aGF0IHRoZQorICAgICAgICAgICAgICAgICAqIHdyaXRhYmxlIGVudHJ5 IGluIHRoZSBpb21tdSBpcyBoYXJtbGVzcyB1bnRpbCBsYXRlciwgd2hlbgor ICAgICAgICAgICAgICAgICAqIHRoZSBhY3R1YWwgZGV2aWNlIGdldHMgYXNz aWduZWQuCisgICAgICAgICAgICAgICAgICovCisgICAgICAgICAgICAgICAg aWYgKCAhcmMgJiYgIWlzX2h2bV9kb21haW4oZCkgJiYKKyAgICAgICAgICAg ICAgICAgICAgICgocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiBQR1RfdHlw ZV9tYXNrKSAhPQorICAgICAgICAgICAgICAgICAgICAgIFBHVF93cml0YWJs ZV9wYWdlKSApCisgICAgICAgICAgICAgICAgeworICAgICAgICAgICAgICAg ICAgICByYyA9IGlvbW11X3VubWFwKGQsIF9kZm4oZ2ZuKSwgUEFHRV9PUkRF Ul80SywgJmZsdXNoX2ZsYWdzKTsKKyAgICAgICAgICAgICAgICAgICAgLyog SWYgdGhlIHR5cGUgY2hhbmdlZCB5ZXQgYWdhaW4sIHNpbXBseSBmb3JjZSBh IHJldHJ5LiAqLworICAgICAgICAgICAgICAgICAgICBpZiAoICFyYyAmJiAo KHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0K KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBHVF93cml0YWJs ZV9wYWdlKSApCisgICAgICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgICB9CiAgICAg ICAgICAgICBpZiAoIHJjICkKICAgICAgICAgICAgIHsK --=separator Content-Type: application/octet-stream; name="xsa285-4.11.patch" Content-Disposition: attachment; filename="xsa285-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBJT01NVS94ODY6IGZpeCB0eXBlIHJlZi1jb3VudGluZyByYWNlIHVwb24g SU9NTVUgcGFnZSB0YWJsZSBjb25zdHJ1Y3Rpb24KCldoZW4gYXJjaF9pb21t dV9wb3B1bGF0ZV9wYWdlX3RhYmxlKCkgZ2V0cyBpbnZva2VkIGZvciBhbiBh bHJlYWR5CnJ1bm5pbmcgZ3Vlc3QsIHNpbXBseSBsb29raW5nIGF0IHBhZ2Ug dHlwZXMgb25jZSBpc24ndCBlbm91Z2gsIGFzIHRoZXkKbWF5IGNoYW5nZSBh dCBhbnkgdGltZS4gQWRkIGxvZ2ljIHRvIHJlLWNoZWNrIHRoZSB0eXBlIGFm dGVyIGhhdmluZwptYXBwZWQgdGhlIHBhZ2UsIHVubWFwcGluZyBpdCBhZ2Fp biBpZiBuZWVkZWQuCgpUaGlzIGlzIFhTQS0yODUuCgpTaWduZWQtb2ZmLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClRlbnRhdGl2ZWx5 LUFja2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRy aXguY29tPgoKLS0tIGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lv bW11LmMKKysrIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11 LmMKQEAgLTY4LDYgKzY4LDI3IEBAIGludCBhcmNoX2lvbW11X3BvcHVsYXRl X3BhZ2VfdGFibGUoc3RydWN0IGRvbWFpbiAqZCkKICAgICAgICAgICAgICAg ICByYyA9IGhkLT5wbGF0Zm9ybV9vcHMtPm1hcF9wYWdlKGQsIGdmbiwgbWZu LAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgSU9NTVVGX3JlYWRhYmxlIHwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl93cml0YWJsZSk7 CisKKyAgICAgICAgICAgICAgICAvKgorICAgICAgICAgICAgICAgICAqIFdl IG1heSBiZSB3b3JraW5nIGJlaGluZCB0aGUgYmFjayBvZiBhIHJ1bm5pbmcg Z3Vlc3QsIHdoaWNoCisgICAgICAgICAgICAgICAgICogbWF5IGNoYW5nZSB0 aGUgdHlwZSBvZiBhIHBhZ2UgYXQgYW55IHRpbWUuICBXZSBjYW4ndCBwcmV2 ZW50CisgICAgICAgICAgICAgICAgICogdGhpcyAoZm9yIGluc3RhbmNlLCBi eSBidW1waW5nIHRoZSB0eXBlIGNvdW50IHdoaWxlIG1hcHBpbmcKKyAgICAg ICAgICAgICAgICAgKiB0aGUgcGFnZSkgd2l0aG91dCBjYXVzaW5nIGxlZ2l0 aW1hdGUgZ3Vlc3QgdHlwZS1jaGFuZ2UKKyAgICAgICAgICAgICAgICAgKiBv cGVyYXRpb25zIHRvIGZhaWwuICBTbyBhZnRlciBhZGRpbmcgdGhlIHBhZ2Ug dG8gdGhlIElPTU1VLAorICAgICAgICAgICAgICAgICAqIGNoZWNrIGFnYWlu IHRvIG1ha2Ugc3VyZSB0aGlzIGlzIHN0aWxsIHZhbGlkLiAgTkIgdGhhdCB0 aGUKKyAgICAgICAgICAgICAgICAgKiB3cml0YWJsZSBlbnRyeSBpbiB0aGUg aW9tbXUgaXMgaGFybWxlc3MgdW50aWwgbGF0ZXIsIHdoZW4KKyAgICAgICAg ICAgICAgICAgKiB0aGUgYWN0dWFsIGRldmljZSBnZXRzIGFzc2lnbmVkLgor ICAgICAgICAgICAgICAgICAqLworICAgICAgICAgICAgICAgIGlmICggIXJj ICYmICFpc19odm1fZG9tYWluKGQpICYmCisgICAgICAgICAgICAgICAgICAg ICAoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykg IT0KKyAgICAgICAgICAgICAgICAgICAgICBQR1Rfd3JpdGFibGVfcGFnZSkg KQorICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAgICAgcmMg PSBoZC0+cGxhdGZvcm1fb3BzLT51bm1hcF9wYWdlKGQsIGdmbik7CisgICAg ICAgICAgICAgICAgICAgIC8qIElmIHRoZSB0eXBlIGNoYW5nZWQgeWV0IGFn YWluLCBzaW1wbHkgZm9yY2UgYSByZXRyeS4gKi8KKyAgICAgICAgICAgICAg ICAgICAgaWYgKCAhcmMgJiYgKChwYWdlLT51LmludXNlLnR5cGVfaW5mbyAm IFBHVF90eXBlX21hc2spID09CisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAg ICAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgICAgICAgICAgICAgfQog ICAgICAgICAgICAgfQogICAgICAgICAgICAgaWYgKCByYyApCiAgICAgICAg ICAgICB7Cg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 05 12:28:20 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 05 Mar 2019 12:28:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h19BB-0006SM-Lf; Tue, 05 Mar 2019 12:28:17 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h19B9-0006Qt-FT for xen-announce@lists.xen.org; Tue, 05 Mar 2019 12:28:15 +0000 X-Inumbo-ID: 21479540-3f42-11e9-ae1a-57bfb320c2a0 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 21479540-3f42-11e9-ae1a-57bfb320c2a0; Tue, 05 Mar 2019 12:28:07 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h19As-0001xf-Og; Tue, 05 Mar 2019 12:27:58 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1h19As-0005ZL-LS; Tue, 05 Mar 2019 12:27:58 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 05 Mar 2019 12:27:58 +0000 Subject: [Xen-announce] Xen Security Advisory 294 v2 - x86 shadow: Insufficient TLB flushing when using PCID X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-294 version 2 x86 shadow: Insufficient TLB flushing when using PCID UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Use of Process Context Identifiers (PCID) was introduced into Xen in order to improve performance after XSA-254 (and in particular its Meltdown sub-issue). This enablement implied changes to the TLB flushing logic. One aspect which was overlooked is the safety of switching between shadow pagetables, which previously relied on the unconditional flushing of a write to CR3. With PCID enabled, a switch of shadow pagetable for a 64bit PV guest fails to invalidate the linear mappings of the previous shadow pagetable. As a result, subsequent accesses to the shadow pagetables may be deemed to be safe by the shadow logic (based on the old shadow pagetable) but fault when made in practice. IMPACT ====== Malicious 64bit PV guests may be able to cause a host crash (Denial of Service). Additionally, vulnerable configurations are unstable even in the absence of an attack. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems running 64-bit x86 PV guests are vulnerable. Systems running only x86 HVM or PVH or 32bit PV guests are not vulnerable. Only systems with at least one PCID-enabled PV guest are vulnerable. Systems where PCID or INVPCID are unavailable or entirely disabled are not vulnerable. Note that PCID is enabled by default for both 64-bit dom0 and 64-bit domU when hardware supports it. PCID acceleration has been backported to the following versions: - Xen 4.11.x, - Xen 4.10.2 and onwards, - Xen 4.9.3 and onwards, - Xen 4.8.4 and onwards, - Xen 4.7.6. MITIGATION ========== Running only HVM or PVH guests will avoid this vulnerability. Disabling use of PCID entirely, by passing "pcid=0" or "invpcid=0" as a command line option to the hypervisor, will also avoid this vulnerability (albeit re-introducing the XPTI performance regression use of PCID was intended to reduce). CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa294/unstable.patch xen-unstable xsa294/4.11.patch Xen 4.11.x xsa294/4.10.patch Xen 4.10.x xsa294/4.9.patch Xen 4.9.x xsa294/4.8.patch Xen 4.8.x xsa294/4.7.patch Xen 4.7.x $ sha256sum xsa294*/* c10b7b79a2067cc6d95e40bc78ee8fddaf31f8614bb183fdd5f00e4272e08a0e xsa294/4.7.patch 3ac1c3caf01feaf341e977fcbae691f2e4425aa9691f2dfa66795acfe823d76e xsa294/4.8.patch a8dfc8b2d2f0d0865b70fb0051f9d5a80a6c7456d004957a0155d989ec875611 xsa294/4.9.patch c6fe1e0173b665a88cbab423737dcb060eed1f634f9bca880d9ddfa2ac855d03 xsa294/4.10.patch 61a341510f45c0cf63a7438645f5c2b3ab1cd72bc2476e5fad331e322f834f4a xsa294/4.11.patch 1fb22eab53f9b1e93fc25f5a08d37121a9278854174f1fbd495b3fe6e8babf3a xsa294/unstable.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAlx+a0YMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZkrsIAK1qu+18MSwMzh7jWNgtAHtlYftiAOScJaJDytAv Q0iIClp6Liu9A7VkvG0T5XZvOT2y2jLadsOZX0t4TgWz9dOgkZ2ElXtRYd7XlosX QhEEAQKAy2qTANHOPR6KJ7iuFAiR5Us9XZUqYUcWevP4PBvODFUbdJz12QaL7+eu e9Tcd6BHQMpyZN3Z39g4yVKSaA/pi1SYT7w7T/pGy+QtnBh1t5zbdpJwQ+gz6eg8 tRsYVZAxNsfQDInLuj27FzcxJbiIue1M++fJ0MazULb5rFKj1AfW+Z8KNhzppv7M OLU+r8lwJtRhVc/+Qqgc/AEYQypn3kx6ftCKCUKWlpn3W1E= =rkY1 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa294/4.7.patch" Content-Disposition: attachment; filename="xsa294/4.7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCA1NmVkMTU2Li5lZTFmNDA4IDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMCw2ICsyMCw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgwLDYgKzI4MSw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI4OCwxNiArMjkxLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IDE7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3BhKHRo aXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgMSkgOiAwKTsKICAgICB9 CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBm cm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwotICAgIHdy aXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBEb24ndCBm bHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIuIERvbid0 IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hhZG93IG1v ZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJlIGFjY29t cGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0IHRoZSBp bmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRhYmxlIG1h eQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tzLiBUbyBi ZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAgKiBuby1m bHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUgWFBUSSBD UjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVuIG5lZWQg dG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAgIGNyMyA9 IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5hYmxlZChk KSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9GTFVTSDsK KyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19OT0ZMVVNI OworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlmICggISh2 LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAgICAgcmV0 dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.8.patch" Content-Disposition: attachment; filename="xsa294/4.8.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCAzOTZlNjc3Li45OWU5OTViIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMSw2ICsyMSw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgyLDYgKzI4Myw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI5MCwxNiArMjkzLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3Bh KHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1ZSkgOiAwKTsK ICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBw aW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwot ICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBE b24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIu IERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hh ZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJl IGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0 IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRh YmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tz LiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAg KiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUg WFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVu IG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAg IGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5h YmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9G TFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19O T0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlm ICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAg ICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.9.patch" Content-Disposition: attachment; filename="xsa294/4.9.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCA4YTA2YjIxLi4wNTA5YmU0IDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMCw2ICsyMCw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgxLDYgKzI4Miw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI4OSwxNiArMjkyLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3Bh KHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1ZSkgOiAwKTsK ICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBw aW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwot ICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBE b24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIu IERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hh ZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJl IGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0 IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRh YmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tz LiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAg KiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUg WFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVu IG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAg IGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5h YmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9G TFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19O T0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlm ICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAg ICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.10.patch" Content-Disposition: attachment; filename="xsa294/4.10.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCA5NThjNmUzLi43OTczMTU1IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0zMjAsNiArMzIwLDggQEAgdm9pZCB0b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1 Y3QgdmNwdSAqdikKIHZvaWQgdG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1 ICp2KQogewogICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKmQgPSB2LT5kb21h aW47CisgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9IGdldF9jcHVf aW5mbygpOworICAgIHVuc2lnbmVkIGxvbmcgY3IzOwogCiAgICAgaWYgKCBp c19wdl8zMmJpdF92Y3B1KHYpICkKICAgICAgICAgcmV0dXJuOwpAQCAtMzI4 LDE2ICszMzAsMjggQEAgdm9pZCB0b2dnbGVfZ3Vlc3RfcHQoc3RydWN0IHZj cHUgKnYpCiAgICAgdXBkYXRlX2NyMyh2KTsKICAgICBpZiAoIGQtPmFyY2gu cHZfZG9tYWluLnhwdGkgKQogICAgIHsKLSAgICAgICAgc3RydWN0IGNwdV9p bmZvICpjcHVfaW5mbyA9IGdldF9jcHVfaW5mbygpOwotCiAgICAgICAgIGNw dV9pbmZvLT5yb290X3BndF9jaGFuZ2VkID0gdHJ1ZTsKICAgICAgICAgY3B1 X2luZm8tPnB2X2NyMyA9IF9fcGEodGhpc19jcHUocm9vdF9wZ3QpKSB8CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAoZC0+YXJjaC5wdl9kb21haW4u cGNpZAogICAgICAgICAgICAgICAgICAgICAgICAgICAgID8gZ2V0X3BjaWRf Yml0cyh2LCB0cnVlKSA6IDApOwogICAgIH0KIAotICAgIC8qIERvbid0IGZs dXNoIHVzZXIgZ2xvYmFsIG1hcHBpbmdzIGZyb20gdGhlIFRMQi4gRG9uJ3Qg dGljayBUTEIgY2xvY2suICovCi0gICAgd3JpdGVfY3IzKHYtPmFyY2guY3Iz KTsKKyAgICAvKgorICAgICAqIERvbid0IGZsdXNoIHVzZXIgZ2xvYmFsIG1h cHBpbmdzIGZyb20gdGhlIFRMQi4gRG9uJ3QgdGljayBUTEIgY2xvY2suCisg ICAgICoKKyAgICAgKiBJbiBzaGFkb3cgbW9kZSwgdGhvdWdoLCB1cGRhdGVf Y3IzKCkgbWF5IG5lZWQgdG8gYmUgYWNjb21wYW5pZWQgYnkgYQorICAgICAq IFRMQiBmbHVzaCAoZm9yIGp1c3QgdGhlIGluY29taW5nIFBDSUQpLCBhcyB0 aGUgdG9wIGxldmVsIHBhZ2UgdGFibGUgbWF5CisgICAgICogaGF2ZSBjaGFu Z2VkIGJlaGluZCBvdXIgYmFja3MuIFRvIGJlIG9uIHRoZSBzYWZlIHNpZGUs IHN1cHByZXNzIHRoZQorICAgICAqIG5vLWZsdXNoIHVuY29uZGl0aW9uYWxs eSBpbiB0aGlzIGNhc2UuIFRoZSBYUFRJIENSMyB3cml0ZSwgaWYgZW5hYmxl ZCwKKyAgICAgKiB3aWxsIHRoZW4gbmVlZCB0byBiZSBhIGZsdXNoaW5nIG9u ZSB0b28uCisgICAgICovCisgICAgY3IzID0gdi0+YXJjaC5jcjM7CisgICAg aWYgKCBzaGFkb3dfbW9kZV9lbmFibGVkKGQpICkKKyAgICB7CisgICAgICAg IGNyMyAmPSB+WDg2X0NSM19OT0ZMVVNIOworICAgICAgICBjcHVfaW5mby0+ cHZfY3IzICY9IH5YODZfQ1IzX05PRkxVU0g7CisgICAgfQorICAgIHdyaXRl X2NyMyhjcjMpOwogCiAgICAgaWYgKCAhKHYtPmFyY2guZmxhZ3MgJiBURl9r ZXJuZWxfbW9kZSkgKQogICAgICAgICByZXR1cm47Cg== --=separator Content-Type: application/octet-stream; name="xsa294/4.11.patch" Content-Disposition: attachment; filename="xsa294/4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCBiNzVmZjZiLi41Mjg0MTNhIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0yOTYsMjEgKzI5NiwzNSBAQCBpbnQgcHZfZG9tYWluX2luaXRpYWxpc2Uo c3RydWN0IGRvbWFpbiAqZCkKIHN0YXRpYyB2b2lkIF90b2dnbGVfZ3Vlc3Rf cHQoc3RydWN0IHZjcHUgKnYpCiB7CiAgICAgY29uc3Qgc3RydWN0IGRvbWFp biAqZCA9IHYtPmRvbWFpbjsKKyAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9p bmZvID0gZ2V0X2NwdV9pbmZvKCk7CisgICAgdW5zaWduZWQgbG9uZyBjcjM7 CiAKICAgICB2LT5hcmNoLmZsYWdzIF49IFRGX2tlcm5lbF9tb2RlOwogICAg IHVwZGF0ZV9jcjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54 cHRpICkKICAgICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2lu Zm8gPSBnZXRfY3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9v dF9wZ3RfY2hhbmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9j cjMgPSBfX3BhKHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1 ZSkgOiAwKTsKICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGds b2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNs b2NrLiAqLwotICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoK KyAgICAgKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9t IHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAg ICogSW4gc2hhZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBu ZWVkIHRvIGJlIGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2gg KGZvciBqdXN0IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZl bCBwYWdlIHRhYmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQg b3VyIGJhY2tzLiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0 aGUKKyAgICAgKiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBj YXNlLiBUaGUgWFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICog d2lsbCB0aGVuIG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAg ICAqLworICAgIGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93 X21vZGVfZW5hYmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4 Nl9DUjNfTk9GTFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+ WDg2X0NSM19OT0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsK IAogICAgIGlmICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUp ICkKICAgICAgICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/unstable.patch" Content-Disposition: attachment; filename="xsa294/unstable.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCA3ZTg0YjA0Li5iYWZiNzgyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0yOTUsMjAgKzI5NSwzNCBAQCBib29sIF9faW5pdCB4cHRpX3BjaWRfZW5h YmxlZCh2b2lkKQogc3RhdGljIHZvaWQgX3RvZ2dsZV9ndWVzdF9wdChzdHJ1 Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0g di0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBn ZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25lZCBsb25nIGNyMzsKIAogICAg IHYtPmFyY2guZmxhZ3MgXj0gVEZfa2VybmVsX21vZGU7CiAgICAgdXBkYXRl X2NyMyh2KTsKICAgICBpZiAoIGQtPmFyY2gucHYueHB0aSApCiAgICAgewot ICAgICAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9pbmZvID0gZ2V0X2NwdV9p bmZvKCk7Ci0KICAgICAgICAgY3B1X2luZm8tPnJvb3RfcGd0X2NoYW5nZWQg PSB0cnVlOwogICAgICAgICBjcHVfaW5mby0+cHZfY3IzID0gX19wYSh0aGlz X2NwdShyb290X3BndCkpIHwKICAgICAgICAgICAgICAgICAgICAgICAgICAg IChkLT5hcmNoLnB2LnBjaWQgPyBnZXRfcGNpZF9iaXRzKHYsIHRydWUpIDog MCk7CiAgICAgfQogCi0gICAgLyogRG9uJ3QgZmx1c2ggdXNlciBnbG9iYWwg bWFwcGluZ3MgZnJvbSB0aGUgVExCLiBEb24ndCB0aWNrIFRMQiBjbG9jay4g Ki8KLSAgICB3cml0ZV9jcjModi0+YXJjaC5jcjMpOworICAgIC8qCisgICAg ICogRG9uJ3QgZmx1c2ggdXNlciBnbG9iYWwgbWFwcGluZ3MgZnJvbSB0aGUg VExCLiBEb24ndCB0aWNrIFRMQiBjbG9jay4KKyAgICAgKgorICAgICAqIElu IHNoYWRvdyBtb2RlLCB0aG91Z2gsIHVwZGF0ZV9jcjMoKSBtYXkgbmVlZCB0 byBiZSBhY2NvbXBhbmllZCBieSBhCisgICAgICogVExCIGZsdXNoIChmb3Ig anVzdCB0aGUgaW5jb21pbmcgUENJRCksIGFzIHRoZSB0b3AgbGV2ZWwgcGFn ZSB0YWJsZSBtYXkKKyAgICAgKiBoYXZlIGNoYW5nZWQgYmVoaW5kIG91ciBi YWNrcy4gVG8gYmUgb24gdGhlIHNhZmUgc2lkZSwgc3VwcHJlc3MgdGhlCisg ICAgICogbm8tZmx1c2ggdW5jb25kaXRpb25hbGx5IGluIHRoaXMgY2FzZS4g VGhlIFhQVEkgQ1IzIHdyaXRlLCBpZiBlbmFibGVkLAorICAgICAqIHdpbGwg dGhlbiBuZWVkIHRvIGJlIGEgZmx1c2hpbmcgb25lIHRvby4KKyAgICAgKi8K KyAgICBjcjMgPSB2LT5hcmNoLmNyMzsKKyAgICBpZiAoIHNoYWRvd19tb2Rl X2VuYWJsZWQoZCkgKQorICAgIHsKKyAgICAgICAgY3IzICY9IH5YODZfQ1Iz X05PRkxVU0g7CisgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgJj0gflg4Nl9D UjNfTk9GTFVTSDsKKyAgICB9CisgICAgd3JpdGVfY3IzKGNyMyk7CiAKICAg ICBpZiAoICEodi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlKSApCiAg ICAgICAgIHJldHVybjsK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Tue Mar 12 05:46:30 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Mar 2019 05:46:30 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h3aE5-0004OT-At; Tue, 12 Mar 2019 05:45:21 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h0pYz-0001ru-AP for xen-announce@lists.xenproject.org; Mon, 04 Mar 2019 15:31:33 +0000 X-Inumbo-ID: 92d0e5c8-3e92-11e9-bbcc-03d742fa04fa Received: from mx1.suse.de (unknown [195.135.220.15]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 92d0e5c8-3e92-11e9-bbcc-03d742fa04fa; Mon, 04 Mar 2019 15:31:26 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id B0052AF95; Mon, 4 Mar 2019 15:31:25 +0000 (UTC) From: Juergen Gross To: xen-users , xen-devel , xen-announce@lists.xenproject.org Openpgp: preference=signencrypt Autocrypt: addr=jgross@suse.com; prefer-encrypt=mutual; keydata= xsBNBFOMcBYBCACgGjqjoGvbEouQZw/ToiBg9W98AlM2QHV+iNHsEs7kxWhKMjrioyspZKOB ycWxw3ie3j9uvg9EOB3aN4xiTv4qbnGiTr3oJhkB1gsb6ToJQZ8uxGq2kaV2KL9650I1SJve dYm8Of8Zd621lSmoKOwlNClALZNew72NjJLEzTalU1OdT7/i1TXkH09XSSI8mEQ/ouNcMvIJ NwQpd369y9bfIhWUiVXEK7MlRgUG6MvIj6Y3Am/BBLUVbDa4+gmzDC9ezlZkTZG2t14zWPvx XP3FAp2pkW0xqG7/377qptDmrk42GlSKN4z76ELnLxussxc7I2hx18NUcbP8+uty4bMxABEB AAHNHkp1ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmRlPsLAeQQTAQIAIwUCU4xw6wIbAwcL CQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJELDendYovxMvi4UH/Ri+OXlObzqMANruTd4N zmVBAZgx1VW6jLc8JZjQuJPSsd/a+bNr3BZeLV6lu4Pf1Yl2Log129EX1KWYiFFvPbIiq5M5 kOXTO8Eas4CaScCvAZ9jCMQCgK3pFqYgirwTgfwnPtxFxO/F3ZcS8jovza5khkSKL9JGq8Nk czDTruQ/oy0WUHdUr9uwEfiD9yPFOGqp4S6cISuzBMvaAiC5YGdUGXuPZKXLpnGSjkZswUzY d9BVSitRL5ldsQCg6GhDoEAeIhUC4SQnT9SOWkoDOSFRXZ+7+WIBGLiWMd+yKDdRG5RyP/8f 3tgGiB6cyuYfPDRGsELGjUaTUq3H2xZgIPfOwE0EU4xwFgEIAMsx+gDjgzAY4H1hPVXgoLK8 B93sTQFN9oC6tsb46VpxyLPfJ3T1A6Z6MVkLoCejKTJ3K9MUsBZhxIJ0hIyvzwI6aYJsnOew cCiCN7FeKJ/oA1RSUemPGUcIJwQuZlTOiY0OcQ5PFkV5YxMUX1F/aTYXROXgTmSaw0aC1Jpo w7Ss1mg4SIP/tR88/d1+HwkJDVW1RSxC1PWzGizwRv8eauImGdpNnseneO2BNWRXTJumAWDD pYxpGSsGHXuZXTPZqOOZpsHtInFyi5KRHSFyk2Xigzvh3b9WqhbgHHHE4PUVw0I5sIQt8hJq 5nH5dPqz4ITtCL9zjiJsExHuHKN3NZsAEQEAAcLAXwQYAQIACQUCU4xwFgIbDAAKCRCw3p3W KL8TL0P4B/9YWver5uD/y/m0KScK2f3Z3mXJhME23vGBbMNlfwbr+meDMrJZ950CuWWnQ+d+ Ahe0w1X7e3wuLVODzjcReQ/v7b4JD3wwHxe+88tgB9byc0NXzlPJWBaWV01yB2/uefVKryAf AHYEd0gCRhx7eESgNBe3+YqWAQawunMlycsqKa09dBDL1PFRosF708ic9346GLHRc6Vj5SRA UTHnQqLetIOXZm3a2eQ1gpQK9MmruO86Vo93p39bS1mqnLLspVrL4rhoyhsOyh0Hd28QCzpJ wKeHTd0MAWAirmewHXWPco8p1Wg+V+5xfZzuQY0f4tQxvOpXpt4gQ1817GQ5/Ed/wsDtBBgB CAAgFiEEhRJncuj2BJSl0Jf3sN6d1ii/Ey8FAlrd8NACGwIAgQkQsN6d1ii/Ey92IAQZFggA HRYhBFMtsHpB9jjzHji4HoBcYbtP2GO+BQJa3fDQAAoJEIBcYbtP2GO+TYsA/30H/0V6cr/W V+J/FCayg6uNtm3MJLo4rE+o4sdpjjsGAQCooqffpgA+luTT13YZNV62hAnCLKXH9n3+ZAgJ RtAyDWk1B/0SMDVs1wxufMkKC3Q/1D3BYIvBlrTVKdBYXPxngcRoqV2J77lscEvkLNUGsu/z W2pf7+P3mWWlrPMJdlbax00vevyBeqtqNKjHstHatgMZ2W0CFC4hJ3YEetuRBURYPiGzuJXU pAd7a7BdsqWC4o+GTm5tnGrCyD+4gfDSpkOT53S/GNO07YkPkm/8J4OBoFfgSaCnQ1izwgJQ jIpcG2fPCI2/hxf2oqXPYbKr1v4Z1wthmoyUgGN0LPTIm+B5vdY82wI5qe9uN6UOGyTH2B3p hRQUWqCwu2sqkI3LLbTdrnyDZaixT2T0f4tyF5Lfs+Ha8xVMhIyzNb1byDI5FKCb Message-ID: <8d677516-4177-e002-9112-fca6005ed99d@suse.com> Date: Mon, 4 Mar 2019 16:31:25 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.3.0 MIME-Version: 1.0 Content-Language: de-DE X-Mailman-Approved-At: Tue, 12 Mar 2019 05:45:20 +0000 Subject: [Xen-announce] Xen 4.12 RC4 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTIgcmM0IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjEyLjAtcmM0CgpG b3IgeW91ciBjb252ZW5pZW5jZSB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6Ly9k b3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMi4wLXJjNC94ZW4tNC4xMi4w LXJjNC50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fkcy54 ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEyLjAtcmM0L3hlbi00LjEyLjAtcmM0LnRhci5n ei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8geGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLgpXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBsZWFz ZSBDQyByZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUKKGpncm9zc0BzdXNlLmNvbSkuCgpUaGVy ZSB3aWxsIGJlIGEgWGVuIFRlc3QgRGF5IG9uIE1hciA2dGguCgpTZWUgaW5zdHJ1Y3Rpb25zIG9u OgoKaHR0cHM6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuMTJfUkNfdGVzdF9pbnN0 cnVjdGlvbnMKaHR0cHM6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuX1Byb2plY3RfVGVz dF9EYXlzCgoKSnVlcmdlbgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KWGVuLWFubm91bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVu cHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZv L3hlbi1hbm5vdW5jZQ== From xen-announce-bounces@lists.xenproject.org Tue Mar 12 05:46:30 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Mar 2019 05:46:30 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h3aE5-0004OZ-M0; Tue, 12 Mar 2019 05:45:21 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h3QQs-0000EN-5g for xen-announce@lists.xenproject.org; Mon, 11 Mar 2019 19:17:54 +0000 X-Inumbo-ID: 5cfa420e-4432-11e9-bc90-bc764e045a96 Received: from mx1.suse.de (unknown [195.135.220.15]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id 5cfa420e-4432-11e9-bc90-bc764e045a96; Mon, 11 Mar 2019 19:17:52 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id 8833AAB7D; Mon, 11 Mar 2019 19:17:50 +0000 (UTC) From: Juergen Gross To: xen-users , xen-devel , xen-announce@lists.xenproject.org Openpgp: preference=signencrypt Autocrypt: addr=jgross@suse.com; prefer-encrypt=mutual; keydata= mQENBFOMcBYBCACgGjqjoGvbEouQZw/ToiBg9W98AlM2QHV+iNHsEs7kxWhKMjrioyspZKOB ycWxw3ie3j9uvg9EOB3aN4xiTv4qbnGiTr3oJhkB1gsb6ToJQZ8uxGq2kaV2KL9650I1SJve dYm8Of8Zd621lSmoKOwlNClALZNew72NjJLEzTalU1OdT7/i1TXkH09XSSI8mEQ/ouNcMvIJ NwQpd369y9bfIhWUiVXEK7MlRgUG6MvIj6Y3Am/BBLUVbDa4+gmzDC9ezlZkTZG2t14zWPvx XP3FAp2pkW0xqG7/377qptDmrk42GlSKN4z76ELnLxussxc7I2hx18NUcbP8+uty4bMxABEB AAG0H0p1ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmNvbT6JATkEEwECACMFAlOMcK8CGwMH CwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAKCRCw3p3WKL8TL8eZB/9G0juS/kDY9LhEXseh mE9U+iA1VsLhgDqVbsOtZ/S14LRFHczNd/Lqkn7souCSoyWsBs3/wO+OjPvxf7m+Ef+sMtr0 G5lCWEWa9wa0IXx5HRPW/ScL+e4AVUbL7rurYMfwCzco+7TfjhMEOkC+va5gzi1KrErgNRHH kg3PhlnRY0Udyqx++UYkAsN4TQuEhNN32MvN0Np3WlBJOgKcuXpIElmMM5f1BBzJSKBkW0Jc Wy3h2Wy912vHKpPV/Xv7ZwVJ27v7KcuZcErtptDevAljxJtE7aJG6WiBzm+v9EswyWxwMCIO RoVBYuiocc51872tRGywc03xaQydB+9R7BHPuQENBFOMcBYBCADLMfoA44MwGOB9YT1V4KCy vAfd7E0BTfaAurbG+Olacciz3yd09QOmejFZC6AnoykydyvTFLAWYcSCdISMr88COmmCbJzn sHAogjexXiif6ANUUlHpjxlHCCcELmZUzomNDnEOTxZFeWMTFF9Rf2k2F0Tl4E5kmsNGgtSa aMO0rNZoOEiD/7UfPP3dfh8JCQ1VtUUsQtT1sxos8Eb/HmriJhnaTZ7Hp3jtgTVkV0ybpgFg w6WMaRkrBh17mV0z2ajjmabB7SJxcouSkR0hcpNl4oM74d2/VqoW4BxxxOD1FcNCObCELfIS auZx+XT6s+CE7Qi/c44ibBMR7hyjdzWbABEBAAGJAR8EGAECAAkFAlOMcBYCGwwACgkQsN6d 1ii/Ey9D+Af/WFr3q+bg/8v5tCknCtn92d5lyYTBNt7xgWzDZX8G6/pngzKyWfedArllp0Pn fgIXtMNV+3t8Li1Tg843EXkP7+2+CQ98MB8XvvPLYAfW8nNDV85TyVgWlldNcgdv7nn1Sq8g HwB2BHdIAkYce3hEoDQXt/mKlgEGsLpzJcnLKimtPXQQy9TxUaLBe9PInPd+Ohix0XOlY+Uk QFEx50Ki3rSDl2Zt2tnkNYKUCvTJq7jvOlaPd6d/W0tZqpyy7KVay+K4aMobDsodB3dvEAs6 ScCnh03dDAFgIq5nsB11j3KPKdVoPlfucX2c7kGNH+LUMbzqV6beIENfNexkOfxHf4kBrQQY AQgAIBYhBIUSZ3Lo9gSUpdCX97DendYovxMvBQJa3fDQAhsCAIEJELDendYovxMvdiAEGRYI AB0WIQRTLbB6QfY48x44uB6AXGG7T9hjvgUCWt3w0AAKCRCAXGG7T9hjvk2LAP99B/9FenK/ 1lfifxQmsoOrjbZtzCS6OKxPqOLHaY47BgEAqKKn36YAPpbk09d2GTVetoQJwiylx/Z9/mQI CUbQMg1pNQf9EjA1bNcMbnzJCgt0P9Q9wWCLwZa01SnQWFz8Z4HEaKldie+5bHBL5CzVBrLv 81tqX+/j95llpazzCXZW2sdNL3r8gXqrajSox7LR2rYDGdltAhQuISd2BHrbkQVEWD4hs7iV 1KQHe2uwXbKlguKPhk5ubZxqwsg/uIHw0qZDk+d0vxjTtO2JD5Jv/CeDgaBX4Emgp0NYs8IC UIyKXBtnzwiNv4cX9qKlz2Gyq9b+GdcLYZqMlIBjdCz0yJvgeb3WPNsCOanvbjelDhskx9gd 6YUUFFqgsLtrKpCNyy203a58g2WosU9k9H+LcheS37Ph2vMVTISMszW9W8gyORSgmw== Message-ID: <84e9c8ea-2dcb-1cb2-6945-0840c82988e6@suse.com> Date: Mon, 11 Mar 2019 20:17:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 MIME-Version: 1.0 Content-Language: de-DE X-Mailman-Approved-At: Tue, 12 Mar 2019 05:45:20 +0000 Subject: [Xen-announce] Xen 4.12 RC5 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTIgcmM1IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjEyLjAtcmM1CgpG b3IgeW91ciBjb252ZW5pZW5jZSB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6Ly9k b3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMi4wLXJjNS94ZW4tNC4xMi4w LXJjNS50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fkcy54 ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEyLjAtcmM1L3hlbi00LjEyLjAtcmM1LnRhci5n ei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8geGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLgpXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBsZWFz ZSBDQyByZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUKKGpncm9zc0BzdXNlLmNvbSkuCgpUaGVy ZSB3aWxsIGJlIGEgWGVuIFRlc3QgRGF5IG9uIE1hciAxM3RoLgoKU2VlIGluc3RydWN0aW9ucyBv bjoKCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl80LjEyX1JDX3Rlc3RfaW5z dHJ1Y3Rpb25zCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl9Qcm9qZWN0X1Rl c3RfRGF5cwoKCkp1ZXJnZW4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhl bnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5m by94ZW4tYW5ub3VuY2U= From xen-announce-bounces@lists.xenproject.org Mon Mar 18 15:01:02 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 18 Mar 2019 15:01:02 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h5tkL-0000lc-S3; Mon, 18 Mar 2019 15:00:13 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h5tix-0008G3-Af for xen-announce@lists.xenproject.org; Mon, 18 Mar 2019 14:58:47 +0000 X-Inumbo-ID: 515fcd64-498e-11e9-8c1c-5b05222776de Received: from mx1.suse.de (unknown [195.135.220.15]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 515fcd64-498e-11e9-8c1c-5b05222776de; Mon, 18 Mar 2019 14:58:41 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id A3D7FAF1C; Mon, 18 Mar 2019 14:58:40 +0000 (UTC) From: Juergen Gross To: xen-users , xen-devel , xen-announce@lists.xenproject.org Openpgp: preference=signencrypt Autocrypt: addr=jgross@suse.com; prefer-encrypt=mutual; keydata= mQENBFOMcBYBCACgGjqjoGvbEouQZw/ToiBg9W98AlM2QHV+iNHsEs7kxWhKMjrioyspZKOB ycWxw3ie3j9uvg9EOB3aN4xiTv4qbnGiTr3oJhkB1gsb6ToJQZ8uxGq2kaV2KL9650I1SJve dYm8Of8Zd621lSmoKOwlNClALZNew72NjJLEzTalU1OdT7/i1TXkH09XSSI8mEQ/ouNcMvIJ NwQpd369y9bfIhWUiVXEK7MlRgUG6MvIj6Y3Am/BBLUVbDa4+gmzDC9ezlZkTZG2t14zWPvx XP3FAp2pkW0xqG7/377qptDmrk42GlSKN4z76ELnLxussxc7I2hx18NUcbP8+uty4bMxABEB AAG0H0p1ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmNvbT6JATkEEwECACMFAlOMcK8CGwMH CwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAKCRCw3p3WKL8TL8eZB/9G0juS/kDY9LhEXseh mE9U+iA1VsLhgDqVbsOtZ/S14LRFHczNd/Lqkn7souCSoyWsBs3/wO+OjPvxf7m+Ef+sMtr0 G5lCWEWa9wa0IXx5HRPW/ScL+e4AVUbL7rurYMfwCzco+7TfjhMEOkC+va5gzi1KrErgNRHH kg3PhlnRY0Udyqx++UYkAsN4TQuEhNN32MvN0Np3WlBJOgKcuXpIElmMM5f1BBzJSKBkW0Jc Wy3h2Wy912vHKpPV/Xv7ZwVJ27v7KcuZcErtptDevAljxJtE7aJG6WiBzm+v9EswyWxwMCIO RoVBYuiocc51872tRGywc03xaQydB+9R7BHPuQENBFOMcBYBCADLMfoA44MwGOB9YT1V4KCy vAfd7E0BTfaAurbG+Olacciz3yd09QOmejFZC6AnoykydyvTFLAWYcSCdISMr88COmmCbJzn sHAogjexXiif6ANUUlHpjxlHCCcELmZUzomNDnEOTxZFeWMTFF9Rf2k2F0Tl4E5kmsNGgtSa aMO0rNZoOEiD/7UfPP3dfh8JCQ1VtUUsQtT1sxos8Eb/HmriJhnaTZ7Hp3jtgTVkV0ybpgFg w6WMaRkrBh17mV0z2ajjmabB7SJxcouSkR0hcpNl4oM74d2/VqoW4BxxxOD1FcNCObCELfIS auZx+XT6s+CE7Qi/c44ibBMR7hyjdzWbABEBAAGJAR8EGAECAAkFAlOMcBYCGwwACgkQsN6d 1ii/Ey9D+Af/WFr3q+bg/8v5tCknCtn92d5lyYTBNt7xgWzDZX8G6/pngzKyWfedArllp0Pn fgIXtMNV+3t8Li1Tg843EXkP7+2+CQ98MB8XvvPLYAfW8nNDV85TyVgWlldNcgdv7nn1Sq8g HwB2BHdIAkYce3hEoDQXt/mKlgEGsLpzJcnLKimtPXQQy9TxUaLBe9PInPd+Ohix0XOlY+Uk QFEx50Ki3rSDl2Zt2tnkNYKUCvTJq7jvOlaPd6d/W0tZqpyy7KVay+K4aMobDsodB3dvEAs6 ScCnh03dDAFgIq5nsB11j3KPKdVoPlfucX2c7kGNH+LUMbzqV6beIENfNexkOfxHf4kBrQQY AQgAIBYhBIUSZ3Lo9gSUpdCX97DendYovxMvBQJa3fDQAhsCAIEJELDendYovxMvdiAEGRYI AB0WIQRTLbB6QfY48x44uB6AXGG7T9hjvgUCWt3w0AAKCRCAXGG7T9hjvk2LAP99B/9FenK/ 1lfifxQmsoOrjbZtzCS6OKxPqOLHaY47BgEAqKKn36YAPpbk09d2GTVetoQJwiylx/Z9/mQI CUbQMg1pNQf9EjA1bNcMbnzJCgt0P9Q9wWCLwZa01SnQWFz8Z4HEaKldie+5bHBL5CzVBrLv 81tqX+/j95llpazzCXZW2sdNL3r8gXqrajSox7LR2rYDGdltAhQuISd2BHrbkQVEWD4hs7iV 1KQHe2uwXbKlguKPhk5ubZxqwsg/uIHw0qZDk+d0vxjTtO2JD5Jv/CeDgaBX4Emgp0NYs8IC UIyKXBtnzwiNv4cX9qKlz2Gyq9b+GdcLYZqMlIBjdCz0yJvgeb3WPNsCOanvbjelDhskx9gd 6YUUFFqgsLtrKpCNyy203a58g2WosU9k9H+LcheS37Ph2vMVTISMszW9W8gyORSgmw== Message-ID: Date: Mon, 18 Mar 2019 15:58:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 MIME-Version: 1.0 Content-Language: de-DE X-Mailman-Approved-At: Mon, 18 Mar 2019 15:00:12 +0000 Subject: [Xen-announce] Xen 4.12 RC6 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTIgcmM2IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjEyLjAtcmM2CgpG b3IgeW91ciBjb252ZW5pZW5jZSB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6Ly9k b3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMi4wLXJjNi94ZW4tNC4xMi4w LXJjNi50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fkcy54 ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEyLjAtcmM2L3hlbi00LjEyLjAtcmM2LnRhci5n ei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8geGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLgpXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBsZWFz ZSBDQyByZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUKKGpncm9zc0BzdXNlLmNvbSkuCgpUaGVy ZSB3aWxsIGJlIGEgWGVuIFRlc3QgRGF5IG9uIE1hciAyMHRoLgoKU2VlIGluc3RydWN0aW9ucyBv bjoKCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl80LjEyX1JDX3Rlc3RfaW5z dHJ1Y3Rpb25zCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl9Qcm9qZWN0X1Rl c3RfRGF5cwoKCkp1ZXJnZW4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhl bnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5m by94ZW4tYW5ub3VuY2U= From xen-announce-bounces@lists.xenproject.org Mon Mar 25 14:10:20 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 25 Mar 2019 14:10:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h8QI0-0007Ya-FJ; Mon, 25 Mar 2019 14:09:24 +0000 Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1h8Pqt-0004uI-Rs for xen-announce@lists.xenproject.org; Mon, 25 Mar 2019 13:41:23 +0000 X-Inumbo-ID: ac8b2181-4f03-11e9-bc90-bc764e045a96 Received: from mx1.suse.de (unknown [195.135.220.15]) by us1-rack-dfw2.inumbo.com (Halon) with ESMTPS id ac8b2181-4f03-11e9-bc90-bc764e045a96; Mon, 25 Mar 2019 13:41:22 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id 5BFE5AE28; Mon, 25 Mar 2019 13:41:20 +0000 (UTC) From: Juergen Gross To: xen-users , xen-devel , xen-announce@lists.xenproject.org Openpgp: preference=signencrypt Autocrypt: addr=jgross@suse.com; prefer-encrypt=mutual; keydata= mQENBFOMcBYBCACgGjqjoGvbEouQZw/ToiBg9W98AlM2QHV+iNHsEs7kxWhKMjrioyspZKOB ycWxw3ie3j9uvg9EOB3aN4xiTv4qbnGiTr3oJhkB1gsb6ToJQZ8uxGq2kaV2KL9650I1SJve dYm8Of8Zd621lSmoKOwlNClALZNew72NjJLEzTalU1OdT7/i1TXkH09XSSI8mEQ/ouNcMvIJ NwQpd369y9bfIhWUiVXEK7MlRgUG6MvIj6Y3Am/BBLUVbDa4+gmzDC9ezlZkTZG2t14zWPvx XP3FAp2pkW0xqG7/377qptDmrk42GlSKN4z76ELnLxussxc7I2hx18NUcbP8+uty4bMxABEB AAG0H0p1ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmNvbT6JATkEEwECACMFAlOMcK8CGwMH CwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAKCRCw3p3WKL8TL8eZB/9G0juS/kDY9LhEXseh mE9U+iA1VsLhgDqVbsOtZ/S14LRFHczNd/Lqkn7souCSoyWsBs3/wO+OjPvxf7m+Ef+sMtr0 G5lCWEWa9wa0IXx5HRPW/ScL+e4AVUbL7rurYMfwCzco+7TfjhMEOkC+va5gzi1KrErgNRHH kg3PhlnRY0Udyqx++UYkAsN4TQuEhNN32MvN0Np3WlBJOgKcuXpIElmMM5f1BBzJSKBkW0Jc Wy3h2Wy912vHKpPV/Xv7ZwVJ27v7KcuZcErtptDevAljxJtE7aJG6WiBzm+v9EswyWxwMCIO RoVBYuiocc51872tRGywc03xaQydB+9R7BHPuQENBFOMcBYBCADLMfoA44MwGOB9YT1V4KCy vAfd7E0BTfaAurbG+Olacciz3yd09QOmejFZC6AnoykydyvTFLAWYcSCdISMr88COmmCbJzn sHAogjexXiif6ANUUlHpjxlHCCcELmZUzomNDnEOTxZFeWMTFF9Rf2k2F0Tl4E5kmsNGgtSa aMO0rNZoOEiD/7UfPP3dfh8JCQ1VtUUsQtT1sxos8Eb/HmriJhnaTZ7Hp3jtgTVkV0ybpgFg w6WMaRkrBh17mV0z2ajjmabB7SJxcouSkR0hcpNl4oM74d2/VqoW4BxxxOD1FcNCObCELfIS auZx+XT6s+CE7Qi/c44ibBMR7hyjdzWbABEBAAGJAR8EGAECAAkFAlOMcBYCGwwACgkQsN6d 1ii/Ey9D+Af/WFr3q+bg/8v5tCknCtn92d5lyYTBNt7xgWzDZX8G6/pngzKyWfedArllp0Pn fgIXtMNV+3t8Li1Tg843EXkP7+2+CQ98MB8XvvPLYAfW8nNDV85TyVgWlldNcgdv7nn1Sq8g HwB2BHdIAkYce3hEoDQXt/mKlgEGsLpzJcnLKimtPXQQy9TxUaLBe9PInPd+Ohix0XOlY+Uk QFEx50Ki3rSDl2Zt2tnkNYKUCvTJq7jvOlaPd6d/W0tZqpyy7KVay+K4aMobDsodB3dvEAs6 ScCnh03dDAFgIq5nsB11j3KPKdVoPlfucX2c7kGNH+LUMbzqV6beIENfNexkOfxHf4kBrQQY AQgAIBYhBIUSZ3Lo9gSUpdCX97DendYovxMvBQJa3fDQAhsCAIEJELDendYovxMvdiAEGRYI AB0WIQRTLbB6QfY48x44uB6AXGG7T9hjvgUCWt3w0AAKCRCAXGG7T9hjvk2LAP99B/9FenK/ 1lfifxQmsoOrjbZtzCS6OKxPqOLHaY47BgEAqKKn36YAPpbk09d2GTVetoQJwiylx/Z9/mQI CUbQMg1pNQf9EjA1bNcMbnzJCgt0P9Q9wWCLwZa01SnQWFz8Z4HEaKldie+5bHBL5CzVBrLv 81tqX+/j95llpazzCXZW2sdNL3r8gXqrajSox7LR2rYDGdltAhQuISd2BHrbkQVEWD4hs7iV 1KQHe2uwXbKlguKPhk5ubZxqwsg/uIHw0qZDk+d0vxjTtO2JD5Jv/CeDgaBX4Emgp0NYs8IC UIyKXBtnzwiNv4cX9qKlz2Gyq9b+GdcLYZqMlIBjdCz0yJvgeb3WPNsCOanvbjelDhskx9gd 6YUUFFqgsLtrKpCNyy203a58g2WosU9k9H+LcheS37Ph2vMVTISMszW9W8gyORSgmw== Message-ID: <3b4adf66-3600-36a9-34ee-edb9813de300@suse.com> Date: Mon, 25 Mar 2019 14:41:19 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 MIME-Version: 1.0 Content-Language: de-DE X-Mailman-Approved-At: Mon, 25 Mar 2019 14:09:23 +0000 Subject: [Xen-announce] Xen 4.12 RC7 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTIgcmM3IGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjEyLjAtcmM3CgpG b3IgeW91ciBjb252ZW5pZW5jZSB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6Ly9k b3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMi4wLXJjNy94ZW4tNC4xMi4w LXJjNy50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fkcy54 ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEyLjAtcmM3L3hlbi00LjEyLjAtcmM3LnRhci5n ei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8geGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLgpXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBsZWFz ZSBDQyByZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUKKGpncm9zc0BzdXNlLmNvbSkuCgpUaGlz IHdpbGwgYmUgdGhlIGxhc3QgUkMgYmVmb3JlIFhlbiA0LjEyIHJlbGVhc2UgKGF0IGxlYXN0IEkg aG9wZSBzbykuCgoKSnVlcmdlbgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18KWGVuLWFubm91bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMu eGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3hlbi1hbm5vdW5jZQ==