From xen-announce-bounces@lists.xenproject.org Mon Oct 14 11:22:22 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 14 Oct 2019 11:22:22 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iJyPv-0000s1-4d; Mon, 14 Oct 2019 11:21:35 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iJyNT-0008WR-FT for xen-announce@lists.xenproject.org; Mon, 14 Oct 2019 11:19:03 +0000 X-Inumbo-ID: 652028f4-ee74-11e9-9379-12813bfff9fa Received: from mx1.suse.de (unknown [195.135.220.15]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 652028f4-ee74-11e9-9379-12813bfff9fa; Mon, 14 Oct 2019 11:18:49 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id D18ACB126; Mon, 14 Oct 2019 11:18:48 +0000 (UTC) From: Juergen Gross To: xen-users , xen-devel , xen-announce@lists.xenproject.org Message-ID: <02a5b82e-3ddb-217b-a970-feb60797ef9e@suse.com> Date: Mon, 14 Oct 2019 13:18:48 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.1.1 MIME-Version: 1.0 Content-Language: en-US X-Mailman-Approved-At: Mon, 14 Oct 2019 11:21:34 +0000 Subject: [Xen-announce] [ANNOUNCE] Xen 4.13 RC1 X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" SGkgYWxsLAoKWGVuIDQuMTMgcmMxIGlzIHRhZ2dlZC4gWW91IGNhbiBjaGVjayB0aGF0IG91dCBm cm9tIHhlbi5naXQ6CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjEzLjAtcmMxCgpG b3IgeW91ciBjb252ZW5pZW5jZSB0aGVyZSBpcyBhbHNvIGEgdGFyYmFsbCBhdDoKaHR0cHM6Ly9k b3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC4xMy4wLXJjMS94ZW4tNC4xMy4w LXJjMS50YXIuZ3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwczovL2Rvd25sb2Fkcy54 ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjEzLjAtcmMxL3hlbi00LjEzLjAtcmMxLnRhci5n ei5zaWcKClBsZWFzZSBzZW5kIGJ1ZyByZXBvcnRzIGFuZCB0ZXN0IHJlcG9ydHMgdG8geGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnLgpXaGVuIHNlbmRpbmcgYnVnIHJlcG9ydHMsIHBsZWFz ZSBDQyByZWxldmFudCBtYWludGFpbmVycyBhbmQgbWUKKGpncm9zc0BzdXNlLmNvbSkuCgpUaGVy ZSB3aWxsIGJlIGEgWGVuIFRlc3QgRGF5IG9uIEZlYiAxNXRoLgoKU2VlIGluc3RydWN0aW9ucyBv bjoKCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl80LjEzX1JDX3Rlc3RfaW5z dHJ1Y3Rpb25zCmh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtpL1hlbl9Qcm9qZWN0X1Rl c3RfRGF5cwoKCkp1ZXJnZW4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhl bnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5m by94ZW4tYW5ub3VuY2U= From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:16 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUi-0001oI-0U; Fri, 25 Oct 2019 11:11:00 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUg-0001nM-6H for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:10:58 +0000 X-Inumbo-ID: 13f0e05c-f718-11e9-beca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 13f0e05c-f718-11e9-beca-bc764e2007e4; Fri, 25 Oct 2019 11:10:39 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUJ-0001W6-Aq; Fri, 25 Oct 2019 11:10:35 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUJ-0002iy-7t; Fri, 25 Oct 2019 11:10:35 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:35 +0000 Subject: [Xen-announce] Xen Security Advisory 290 v3 (CVE-2019-17344) - missing preemption in x86 PV page table unvalidation X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17344 / XSA-290 version 3 missing preemption in x86 PV page table unvalidation UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= XSA-273 changes required, among other things, making any PTE updates restartable. The changes making PTE updates restartable assumed that L2 pagetables would always be promoted preemptibly; but this turns out not to be the case when using the 'linear pagetable' feature; the result was that interrupted operations are not handled properly in certain cases. Furthermore, previous security work making pagetable update preemptible failed to account for 'linear pagetables' at L3 and L4 levels, making it possible for operations to run for longer than acceptable times. IMPACT ====== Malicious or buggy x86 PV guest kernels can mount a Denial of Service (DoS) attack affecting the whole system. VULNERABLE SYSTEMS ================== All Xen versions are vulnerable. Only x86 systems are affected. ARM systems are not affected. Only Xen versions which permit linear page table use by PV guests are vulnerable. Only x86 PV guests can leverage this vulnerability. x86 HVM guests cannot leverage this vulnerability. MITIGATION ========== Not permitting linear page table use by PV guests avoids the vulnerability. This can be done both at build time, by turning off the PV_LINEAR_PT configure option, or at runtime, by passing specifying "pv-linear-pt=0" on the hypervisor command line. Doing so would, however, render PV guests using the functionality, like NetBSD, unusable. On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels which only issue sane hypercalls will prevent untrusted guest users from exploiting this issue. However untrusted guest administrators can still trigger it unless further steps are taken to prevent them from loading code into the kernel (e.g by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. Running only HVM guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Manuel Bouyer. RESOLUTION ========== Applying the appropriate pair of attached patches resolves this issue. xsa290/unstable-?.patch xen-unstable xsa290/4.11-?.patch Xen 4.11.x xsa290/4.10-?.patch Xen 4.10.x xsa290/4.9-?.patch Xen 4.9.x xsa290/4.8-?.patch Xen 4.8.x xsa290/4.7-?.patch Xen 4.7.x $ sha256sum xsa290* xsa290*/* e74014bf97f223f35dc6142fbfadd8a3df6c7ecf1818d5d04ebb717a1d600959 xsa290.meta 87ffaf9712bfd2283e845d168811e572b9ebc8a580e750128586a48e65ae4c67 xsa290/4.7-1.patch 4137eb15d963a77ff302cb65f9f04e402ea23f69042f89ece4baaf4b7a58d638 xsa290/4.7-2.patch 0f5ce8c13c99431cae69736e117c7420c3202e3a680b42a66027646ae0aa141c xsa290/4.8-1.patch bb4102dd6f3daf60859a88b6a2f0828bc8aeb224d3d3b6fd2d2cc96b3f131a24 xsa290/4.8-2.patch a7e4902968529289c63149608d48e1eeac2feffa644e1337b1b5b9a624dc746d xsa290/4.9-1.patch 7798b063a8db95fc18bca1ea25d84937fbe9c6e0add15056841fd97d5aec2885 xsa290/4.9-2.patch 3a0bf44875bb5a8525b4418d6efd49bd6ed6cfaffe669cbdcfde61a65fe9cdea xsa290/4.10-1.patch 1e7dfe1b0c57e245daef1351db855a9312a4c225c05a6720460ea4aa1148ee22 xsa290/4.10-2.patch 3dd47f3bc1a004260d05cba548a80e475f85ffe60b663879de386e32a8e9ffbc xsa290/4.11-1.patch b3b17546fc553bf60572cf56023d8177f96973fcd072a8adfc622b4030e58d00 xsa290/4.11-2.patch 4ff1d857f46a781fd7483a30297ebf51bf079ccd1d598df799e5779ddc893674 xsa290/unstable-1.patch 3a85ecc426d482052aaf2a84bfde9840eb7a566638dbab042dac84b0019ca473 xsa290/unstable-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or the HVM-only as well as host controlled kernel mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. HOWEVER deployment of the "pv-linear-pt=0" mitigation described above is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because in that case the configuration change is visible to the guest, which could lead to the rediscovery of the vulnerability. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y19YMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZj0kIAK0GjYVugAQ4Neq0Dsr9JZFKdPCV+AiBRg2Di8ME HvLYoMzG7OOP7L0LnyZh1qSxfCXalKuMitNhOFH4zUHIOl4XA8iSEmxKhE6aKXCu TLngS5KCsqXb11+vDJsx7K4Z5UW7AXZwpI6jfi5nmXBEhRo9rdvO0y7I+j9x3v08 4TNSRE6lIO2OePCwOHbE9iUCHOvpldJ6PG9tDsBwsWdWgiMsPHk5XZI1Saiqa2r0 yoMD+ma6huWVph1Th+qlpjy1IORwcRp/y1OcSXzB8QX0Oz2ynaO/BZZNnm4LS3sD Ub9BlY01fC/g1evvh97/M//D4GRP6xEe5g3n2V5drD6Zaws= =dqbz -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa290.meta" Content-Disposition: attachment; filename="xsa290.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTAsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI5MC80LjEwLVsxMl0ucGF0Y2giCiAgICAgICAgICBd CiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7CiAgICAg ICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3Rh YmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3YTljMTY0 NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI4 NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcsCiAgICAgICAg ICAgIDI4OAogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjkwLzQuMTEtWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFmMWFjY2Ew YjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjctWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC44IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI5MDhlNzY4ZmFlNDlhOGRiMDA4OWU2ODE4ODY1MjA3OWUz YmZhYTY2IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjgtWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2Rh NzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5MC80LjktWzEyXS5wYXRjaCIKICAgICAgICAg IF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICIyNGQ1MjgyNTI3ZjQ2NDc5MDdiMzU3MjgyMGI1MzM1 YzE1Y2QwMzU2IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAg ICAgICAgICAyODgKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5MC91bnN0YWJsZS1bMTJdLnBhdGNoIgog ICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa290/4.7-1.patch" Content-Disposition: attachment; filename="xsa290/4.7-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkJlc2lkZXMgdGhpcyBoYXZpbmcgYmVjb21lIGEgcmVx dWlyZW1lbnQgYXMgb2YgY29tbWl0IGM2MTI0ODFkMWMKKCJ4ODYvbW06IFBs dW1iaW5nIHRvIGFsbG93IGFueSBQVEUgdXBkYXRlIHRvIGZhaWwgd2l0aCAt RVJFU1RBUlQiKSwKd2hpY2ggYWRkZWQgYW4gYXNzZXJ0aW9uIHRvIGZyZWVf bDJfdGFibGUoKSwgd2hpY2ggd2FzIG5vdyBvYnNlcnZlZCB0bwp0cmlnZ2Vy IHdoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVzIGdldCBjbGVhbmVkIHVwLCBp dCB3YXMgYWxzbyBhIG1pc3Rha2UKdG8gbm90IGV4dGVuZCBwcmVlbXB0aW9u IHRvIEwyIHdoZW4gaXQgd2FzIGFkZGVkIHRvIEwzL0w0IHRhYmxlCmhhbmRs aW5nLiBUaGlzIGlzIGJlY2F1c2UgaW4gdGhlIHJlY3Vyc2l2ZSBwYWdlIHRh YmxlIGNhc2UgZXZlbiB0aGVyZQp0aGUgdGltZSB0YWtlbiB0byB1bnZhbGlk YXRlIGEgc2luZ2xlIHRhYmxlIG1heSBiZSBleGNlc3NpdmUuCgpUaGUgdmFs aWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0IGZvciBzeW1t ZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKUmVwb3J0ZWQtYnk6 IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5vcmc+ClRlc3Rl ZC1ieTogTWFudWVsIEJvdXllciA8Ym91eWVyQGFudGlvY2hlLmV1Lm9yZz4K U2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29t PgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNA Y2l0cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0xMjM5LDcgKzEyMzksNyBAQCBnZXRfcGFn ZV9mcm9tX2wxZSgKIGRlZmluZV9nZXRfbGluZWFyX3BhZ2V0YWJsZShsMik7 CiBzdGF0aWMgaW50CiBnZXRfcGFnZV9mcm9tX2wyZSgKLSAgICBsMl9wZ2Vu dHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwgc3RydWN0IGRvbWFpbiAq ZCkKKyAgICBsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwg c3RydWN0IGRvbWFpbiAqZCwgaW50IHBhcnRpYWwpCiB7CiAgICAgdW5zaWdu ZWQgbG9uZyBtZm4gPSBsMmVfZ2V0X3BmbihsMmUpOwogICAgIGludCByYzsK QEAgLTEyNTUsNyArMTI1NSw4IEBAIGdldF9wYWdlX2Zyb21fbDJlKAogCiAg ICAgaWYgKCAhKGwyZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BTRSkgKQog ICAgIHsKLSAgICAgICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX3Bh Z2VucihtZm4sIFBHVF9sMV9wYWdlX3RhYmxlLCBkLCAwLCAwKTsKKyAgICAg ICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX3BhZ2VucihtZm4sIFBH VF9sMV9wYWdlX3RhYmxlLCBkLAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHBhcnRpYWwsIDApOwogICAgICAgICBpZiAo IHVubGlrZWx5KHJjID09IC1FSU5WQUwpICYmIGdldF9sMl9saW5lYXJfcGFn ZXRhYmxlKGwyZSwgcGZuLCBkKSApCiAgICAgICAgICAgICByYyA9IDA7CiAg ICAgICAgIHJldHVybiByYzsKQEAgLTE0NTAsOCArMTQ1MSwxMSBAQCB2b2lk IHB1dF9wYWdlX2Zyb21fbDFlKGwxX3BnZW50cnlfdCBsMWUsCiAgKiBOQi4g VmlydHVhbCBhZGRyZXNzICdsMmUnIG1hcHMgdG8gYSBtYWNoaW5lIGFkZHJl c3Mgd2l0aGluIGZyYW1lICdwZm4nLgogICogTm90ZSBhbHNvIHRoYXQgdGhp cyBhdXRvbWF0aWNhbGx5IGRlYWxzIGNvcnJlY3RseSB3aXRoIGxpbmVhciBw LnQuJ3MuCiAgKi8KLXN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4pCitzdGF0aWMgaW50 IHB1dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVk IGxvbmcgcGZuLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQg cGFydGlhbCwgYm9vbF90IGRlZmVyKQogeworICAgIGludCByYyA9IDA7CisK ICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0VfUFJFU0VO VCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAgICAgIHJl dHVybiAxOwogCkBAIC0xNDYwLDEzICsxNDY0LDI3IEBAIHN0YXRpYyBpbnQg cHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNlCiAgICAg ewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9nZXRfcGFn ZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg MCwgbWZuX3RvX3BhZ2UocGZuKSk7CisgICAgICAgIHN0cnVjdCBwYWdlX2lu Zm8gKnB0cGcgPSBtZm5fdG9fcGFnZShwZm4pOwogCi0gICAgICAgIEFTU0VS VCghcmMpOwotICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIGlmICgg dW5saWtlbHkocGFydGlhbCA+IDApICkKKyAgICAgICAgeworICAgICAgICAg ICAgQVNTRVJUKCFkZWZlcik7CisgICAgICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCAxLCBwdHBnKTsKKyAgICAgICAgfQorICAgICAgICBlbHNl IGlmICggZGVmZXIgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJyZW50 LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gcHRwZzsKKyAgICAgICAgICAgIGN1 cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CisgICAgICAgIH0K KyAgICAgICAgZWxzZQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IF9w dXRfcGFnZV90eXBlKHBnLCAxLCBwdHBnKTsKKyAgICAgICAgICAgIGlmICgg bGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdlKHBnKTsK KyAgICAgICAgfQogICAgIH0KIAotICAgIHJldHVybiAwOworICAgIHJldHVy biByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wzZShsM19w Z2VudHJ5X3QgbDNlLCB1bnNpZ25lZCBsb25nIHBmbiwKQEAgLTE2NDEsMTEg KzE2NTksMTIgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShzdHJ1Y3Qg cGFnZV9pbgogICAgIHVuc2lnbmVkIGxvbmcgIHBmbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgIGwyX3BnZW50cnlfdCAgKnBsMmU7CiAgICAgdW5zaWdu ZWQgaW50ICAgaTsKLSAgICBpbnQgICAgICAgICAgICByYyA9IDA7CisgICAg aW50ICAgICAgICAgICAgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+cGFydGlh bF9wdGU7CiAKICAgICBwbDJlID0gbWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZu KSk7CiAKLSAgICBmb3IgKCBpID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7 IGkgPCBMMl9QQUdFVEFCTEVfRU5UUklFUzsgaSsrICkKKyAgICBmb3IgKCBp ID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVf RU5UUklFUzsKKyAgICAgICAgICBpKyssIHBhcnRpYWwgPSAwICkKICAgICB7 CiAgICAgICAgIGlmICggaSA+IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzICYm IGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkgKQogICAgICAgICB7CkBAIC0x NjU1LDIzICsxNjc0LDMzIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUo c3RydWN0IHBhZ2VfaW4KICAgICAgICAgfQogCiAgICAgICAgIGlmICggIWlz X2d1ZXN0X2wyX3Nsb3QoZCwgdHlwZSwgaSkgfHwKLSAgICAgICAgICAgICAo cmMgPSBnZXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQpKSA+IDAg KQorICAgICAgICAgICAgIChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKHBsMmVb aV0sIHBmbiwgZCwgcGFydGlhbCkpID4gMCApCiAgICAgICAgICAgICBjb250 aW51ZTsKIAotICAgICAgICBpZiAoIHVubGlrZWx5KHJjID09IC1FUkVTVEFS VCkgKQorICAgICAgICBpZiAoIHJjID09IC1FUkVTVEFSVCApCiAgICAgICAg IHsKICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsK LSAgICAgICAgICAgIGJyZWFrOworICAgICAgICAgICAgcGFnZS0+cGFydGlh bF9wdGUgPSBwYXJ0aWFsID86IDE7CiAgICAgICAgIH0KLQotICAgICAgICBp ZiAoIHJjIDwgMCApCisgICAgICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIg JiYgaSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKKyAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gMDsKKyAgICAgICAgICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICB9 CisgICAgICAgIGVsc2UgaWYgKCByYyA8IDAgJiYgcmMgIT0gLUVJTlRSICkK ICAgICAgICAgewogICAgICAgICAgICAgTUVNX0xPRygiRmFpbHVyZSBpbiBh bGxvY19sMl90YWJsZTogZW50cnkgJWQiLCBpKTsKLSAgICAgICAgICAgIHdo aWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAgaWYgKCBpc19ndWVz dF9sMl9zbG90KGQsIHR5cGUsIGkpICkKLSAgICAgICAgICAgICAgICAgICAg cHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKTsKLSAgICAgICAgICAg IGJyZWFrOworICAgICAgICAgICAgaWYgKCBpICkKKyAgICAgICAgICAgIHsK KyAgICAgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7 CisgICAgICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSAwOworICAg ICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBO VUxMOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0 X3RhYmxlID0gcGFnZTsKKyAgICAgICAgICAgIH0KICAgICAgICAgfQorICAg ICAgICBpZiAoIHJjIDwgMCApCisgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBhZGp1c3RfZ3Vlc3RfbDJlKHBsMmVbaV0sIGQpOwogICAgIH0KQEAg LTE4OTMsMjggKzE5MjIsNTAgQEAgc3RhdGljIGludCBmcmVlX2wyX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogICAgIHN0cnVjdCBkb21haW4gKmQgPSBwYWdl X2dldF9vd25lcihwYWdlKTsKICAgICB1bnNpZ25lZCBsb25nIHBmbiA9IHBh Z2VfdG9fbWZuKHBhZ2UpOwogICAgIGwyX3BnZW50cnlfdCAqcGwyZTsKLSAg ICB1bnNpZ25lZCBpbnQgIGkgPSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyAt IDE7Ci0gICAgaW50IGVyciA9IDA7CisgICAgaW50IHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOworICAgIHVuc2lnbmVkIGludCBpID0g cGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgLSAhcGFydGlhbDsKIAogICAgIHBs MmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4pKTsKIAotICAgIEFTU0VS VChwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyk7Ci0gICAgZG8gewotICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8sIGkpICYmCi0gICAgICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUo cGwyZVtpXSwgcGZuKSA9PSAwICYmCi0gICAgICAgICAgICAgaSAmJiBoeXBl cmNhbGxfcHJlZW1wdF9jaGVjaygpICkKKyAgICBmb3IgKCA7IDsgKQorICAg IHsKKyAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHBhZ2UtPnUu aW51c2UudHlwZV9pbmZvLCBpKSApCisgICAgICAgICAgICByYyA9IHB1dF9w YWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgcGFydGlhbCwgMCk7CisgICAg ICAgIGlmICggcmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAg ICAgIHBhcnRpYWwgPSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAg ICAgICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVl bXB0X2NoZWNrKCkgKQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNU QVJUOworICAgICAgICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBi cmVhazsKICAgICAgICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSAp OworICAgIH0KIAogICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0g ICAgaWYgKCAhZXJyICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAg ICAgICAgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVu X2wyOworICAgICAgICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCBy YyA9PSAtRVJFU1RBUlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFs aWRhdGVkX3B0ZXMgPSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9 IHBhcnRpYWwgPzogLTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAt RUlOVFIgJiYgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAg eworICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOwor ICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0g LUVSRVNUQVJUOworICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0 dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTIyMzksNyArMjI5MCw3IEBAIHN0YXRp YyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAg ICAgIHJldHVybiAtRUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAo IHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwg ZCkpIDwgMCkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9w YWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAg ICAgICAgcmV0dXJuIHJjOwogCiAgICAgICAgIGFkanVzdF9ndWVzdF9sMmUo bmwyZSwgZCk7CkBAIC0yMjU4LDcgKzIzMDksOCBAQCBzdGF0aWMgaW50IG1v ZF9sMl9lbnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgIHJldHVybiAt RUJVU1k7CiAgICAgfQogCi0gICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwg cGZuKTsKKyAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4sIDAsIDEp OworCiAgICAgcmV0dXJuIHJjOwogfQogCg== --=separator Content-Type: application/octet-stream; name="xsa290/4.7-2.patch" Content-Disposition: attachment; filename="xsa290/4.7-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzQxLDYgKzE3NDEsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5NzgsMTggKzE5ODUsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.8-1.patch" Content-Disposition: attachment; filename="xsa290/4.8-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTI0MCw3ICsxMjQwLDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMjU2LDcgKzEyNTYsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9wYWdlbnIobWZuLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7Cisg ICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9wYWdlbnIobWZu LCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAgICAg ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAgIHJj ID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTQ1MSw4ICsxNDUyLDEx IEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwxZSwK ICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1hY2hp bmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFsc28g dGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdpdGgg bGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKK3N0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwyZSwg dW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCByYyA9 IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0Vf UFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAg ICAgIHJldHVybiAxOwogCkBAIC0xNDYxLDEzICsxNDY1LDI3IEBAIHN0YXRp YyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNl CiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9n ZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgZmFsc2UsIG1mbl90b19wYWdlKHBmbikpOworICAgICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UocGZuKTsKIAotICAg ICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0X3BhZ2UocGcpOworICAg ICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAwKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOworICAgICAgICAgICAgcmMg PSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7CisgICAgICAgIH0K KyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IHB0cGc7Cisg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBn OworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgeworICAgICAg ICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7Cisg ICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAg ICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAgICB9CiAKLSAgICByZXR1 cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCkBAIC0xNjQwLDExICsxNjU4LDEyIEBAIHN0YXRpYyBpbnQgYWxsb2Nf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1bnNpZ25lZCBsb25nICBw Zm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2VudHJ5X3QgICpw bDJlOwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAg ICAgcmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21h aW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkr KyApCisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBp IDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0 aWFsID0gMCApCiAgICAgewogICAgICAgICBpZiAoIGkgPiBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewpAQCAtMTY1NCwyMyArMTY3MywzMyBAQCBzdGF0aWMgaW50 IGFsbG9jX2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgICAgIH0KIAog ICAgICAgICBpZiAoICFpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpIHx8 Ci0gICAgICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtp XSwgcGZuLCBkKSkgPiAwICkKKyAgICAgICAgICAgICAocmMgPSBnZXRfcGFn ZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQsIHBhcnRpYWwpKSA+IDAgKQog ICAgICAgICAgICAgY29udGludWU7CiAKLSAgICAgICAgaWYgKCB1bmxpa2Vs eShyYyA9PSAtRVJFU1RBUlQpICkKKyAgICAgICAgaWYgKCByYyA9PSAtRVJF U1RBUlQgKQogICAgICAgICB7CiAgICAgICAgICAgICBwYWdlLT5ucl92YWxp ZGF0ZWRfcHRlcyA9IGk7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAg ICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAxOwogICAgICAg ICB9Ci0KLSAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICBlbHNlIGlm ICggcmMgPT0gLUVJTlRSICYmIGkgKQorICAgICAgICB7CisgICAgICAgICAg ICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICBw YWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICggcmMgPCAwICYm IHJjICE9IC1FSU5UUiApCiAgICAgICAgIHsKICAgICAgICAgICAgIE1FTV9M T0coIkZhaWx1cmUgaW4gYWxsb2NfbDJfdGFibGU6IGVudHJ5ICVkIiwgaSk7 Ci0gICAgICAgICAgICB3aGlsZSAoIGktLSA+IDAgKQotICAgICAgICAgICAg ICAgIGlmICggaXNfZ3Vlc3RfbDJfc2xvdChkLCB0eXBlLCBpKSApCi0gICAg ICAgICAgICAgICAgICAgIHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBm bik7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAgICAgIGlmICggaSAp CisgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgcGFnZS0+bnJfdmFs aWRhdGVkX3B0ZXMgPSBpOworICAgICAgICAgICAgICAgIHBhZ2UtPnBhcnRp YWxfcHRlID0gMDsKKyAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9s ZF9ndWVzdF9wdHBnID0gTlVMTDsKKyAgICAgICAgICAgICAgICBjdXJyZW50 LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBhZ2U7CisgICAgICAgICAgICB9 CiAgICAgICAgIH0KKyAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICAg ICAgYnJlYWs7CiAKICAgICAgICAgYWRqdXN0X2d1ZXN0X2wyZShwbDJlW2ld LCBkKTsKICAgICB9CkBAIC0xODkyLDI4ICsxOTIxLDUwIEBAIHN0YXRpYyBp bnQgZnJlZV9sMl90YWJsZShzdHJ1Y3QgcGFnZV9pbmYKICAgICBzdHJ1Y3Qg ZG9tYWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CiAgICAgdW5zaWdu ZWQgbG9uZyBwZm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2Vu dHJ5X3QgKnBsMmU7Ci0gICAgdW5zaWduZWQgaW50ICBpID0gcGFnZS0+bnJf dmFsaWRhdGVkX3B0ZXMgLSAxOwotICAgIGludCBlcnIgPSAwOworICAgIGlu dCByYyA9IDAsIHBhcnRpYWwgPSBwYWdlLT5wYXJ0aWFsX3B0ZTsKKyAgICB1 bnNpZ25lZCBpbnQgaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gIXBh cnRpYWw7CiAKICAgICBwbDJlID0gbWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZu KSk7CiAKLSAgICBBU1NFUlQocGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMpOwot ICAgIGRvIHsKLSAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvLCBpKSAmJgotICAgICAgICAgICAgIHB1 dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbikgPT0gMCAmJgotICAgICAg ICAgICAgIGkgJiYgaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg Zm9yICggOyA7ICkKKyAgICB7CisgICAgICAgIGlmICggaXNfZ3Vlc3RfbDJf c2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkgKQorICAgICAg ICAgICAgcmMgPSBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIHBh cnRpYWwsIGZhbHNlKTsKKyAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAg ICAgICAgYnJlYWs7CisKKyAgICAgICAgcGFydGlhbCA9IDA7CisKKyAgICAg ICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAg IGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCiAgICAgICAgIHsK LSAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwotICAg ICAgICAgICBlcnIgPSAtRVJFU1RBUlQ7CisgICAgICAgICAgICByYyA9IC1F SU5UUjsKKyAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9Ci0gICAgfSB3 aGlsZSAoICFlcnIgJiYgaS0tICk7CisgICAgfQogCiAgICAgdW5tYXBfZG9t YWluX3BhZ2UocGwyZSk7CiAKLSAgICBpZiAoICFlcnIgKQorICAgIGlmICgg cmMgPj0gMCApCisgICAgewogICAgICAgICBwYWdlLT51LmludXNlLnR5cGVf aW5mbyAmPSB+UEdUX3BhZV94ZW5fbDI7CisgICAgICAgIHJjID0gMDsKKyAg ICB9CisgICAgZWxzZSBpZiAoIHJjID09IC1FUkVTVEFSVCApCisgICAgewor ICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAg IHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAtMTsKKyAgICB9Cisg ICAgZWxzZSBpZiAoIHJjID09IC1FSU5UUiAmJiBpIDwgTDJfUEFHRVRBQkxF X0VOVFJJRVMgLSAxICkKKyAgICB7CisgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaSArIDE7CisgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gMDsKKyAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgfQogCi0gICAg cmV0dXJuIGVycjsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQg ZnJlZV9sM190YWJsZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlKQpAQCAtMjIz OCw3ICsyMjg5LDcgQEAgc3RhdGljIGludCBtb2RfbDJfZW50cnkobDJfcGdl bnRyeV90ICpwbAogICAgICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICAg ICAgfQogCi0gICAgICAgIGlmICggdW5saWtlbHkoKHJjID0gZ2V0X3BhZ2Vf ZnJvbV9sMmUobmwyZSwgcGZuLCBkKSkgPCAwKSApCisgICAgICAgIGlmICgg dW5saWtlbHkoKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUobmwyZSwgcGZuLCBk LCAwKSkgPCAwKSApCiAgICAgICAgICAgICByZXR1cm4gcmM7CiAKICAgICAg ICAgYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBkKTsKQEAgLTIyNTcsNyArMjMw OCw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAq cGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICB9CiAKLSAgICBwdXRf cGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOworICAgIHB1dF9wYWdlX2Zyb21f bDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisKICAgICByZXR1cm4gcmM7CiB9 CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.8-2.patch" Content-Disposition: attachment; filename="xsa290/4.8-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzQwLDYgKzE3NDAsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5NzcsMTggKzE5ODQsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.9-1.patch" Content-Disposition: attachment; filename="xsa290/4.9-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTI2MSw3ICsxMjYxLDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMjc4LDcgKzEyNzgsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9wYWdlbnIobWZuLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7Cisg ICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9wYWdlbnIobWZu LCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAgICAg ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAgIHJj ID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTQ3Nyw4ICsxNDc4LDEx IEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwxZSwK ICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1hY2hp bmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFsc28g dGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdpdGgg bGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikKK3N0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwyZSwg dW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCByYyA9 IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BBR0Vf UFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAgICAg ICAgIHJldHVybiAxOwogCkBAIC0xNDg3LDEzICsxNDkxLDI3IEBAIHN0YXRp YyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBlbHNl CiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwyZV9n ZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2VfdHlw ZShwZywgZmFsc2UsIG1mbl90b19wYWdlKHBmbikpOworICAgICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UocGZuKTsKIAotICAg ICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0X3BhZ2UocGcpOworICAg ICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAwKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOworICAgICAgICAgICAgcmMg PSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7CisgICAgICAgIH0K KyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IHB0cGc7Cisg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90YWJsZSA9IHBn OworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgeworICAgICAg ICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRwZyk7Cisg ICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAg ICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAgICB9CiAKLSAgICByZXR1 cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0YXRpYyBpbnQgcHV0X3Bh Z2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwgdW5zaWduZWQgbG9uZyBw Zm4sCkBAIC0xNjY2LDExICsxNjg0LDEyIEBAIHN0YXRpYyBpbnQgYWxsb2Nf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1bnNpZ25lZCBsb25nICBw Zm4gPSBwYWdlX3RvX21mbihwYWdlKTsKICAgICBsMl9wZ2VudHJ5X3QgICpw bDJlOwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAg ICAgcmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlh bCA9IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21h aW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkr KyApCisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBp IDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0 aWFsID0gMCApCiAgICAgewogICAgICAgICBpZiAoIGkgPiBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewpAQCAtMTY4MCwyMyArMTY5OSwzMyBAQCBzdGF0aWMgaW50 IGFsbG9jX2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgICAgIH0KIAog ICAgICAgICBpZiAoICFpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpIHx8 Ci0gICAgICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtp XSwgcGZuLCBkKSkgPiAwICkKKyAgICAgICAgICAgICAocmMgPSBnZXRfcGFn ZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4sIGQsIHBhcnRpYWwpKSA+IDAgKQog ICAgICAgICAgICAgY29udGludWU7CiAKLSAgICAgICAgaWYgKCB1bmxpa2Vs eShyYyA9PSAtRVJFU1RBUlQpICkKKyAgICAgICAgaWYgKCByYyA9PSAtRVJF U1RBUlQgKQogICAgICAgICB7CiAgICAgICAgICAgICBwYWdlLT5ucl92YWxp ZGF0ZWRfcHRlcyA9IGk7Ci0gICAgICAgICAgICBicmVhazsKKyAgICAgICAg ICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gcGFydGlhbCA/OiAxOwogICAgICAg ICB9Ci0KLSAgICAgICAgaWYgKCByYyA8IDAgKQorICAgICAgICBlbHNlIGlm ICggcmMgPT0gLUVJTlRSICYmIGkgKQorICAgICAgICB7CisgICAgICAgICAg ICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICBw YWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICggcmMgPCAwICYm IHJjICE9IC1FSU5UUiApCiAgICAgICAgIHsKICAgICAgICAgICAgIGdkcHJp bnRrKFhFTkxPR19XQVJOSU5HLCAiRmFpbHVyZSBpbiBhbGxvY19sMl90YWJs ZTogc2xvdCAlI3hcbiIsIGkpOwotICAgICAgICAgICAgd2hpbGUgKCBpLS0g PiAwICkKLSAgICAgICAgICAgICAgICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3Qo ZCwgdHlwZSwgaSkgKQotICAgICAgICAgICAgICAgICAgICBwdXRfcGFnZV9m cm9tX2wyZShwbDJlW2ldLCBwZm4pOwotICAgICAgICAgICAgYnJlYWs7Cisg ICAgICAgICAgICBpZiAoIGkgKQorICAgICAgICAgICAgeworICAgICAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgICAgICAg ICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfcHRwZyA9IE5VTEw7CisgICAg ICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBw YWdlOworICAgICAgICAgICAgfQogICAgICAgICB9CisgICAgICAgIGlmICgg cmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOwogCiAgICAgICAgIGFkanVz dF9ndWVzdF9sMmUocGwyZVtpXSwgZCk7CiAgICAgfQpAQCAtMTkxOSwyOCAr MTk0OCw1MCBAQCBzdGF0aWMgaW50IGZyZWVfbDJfdGFibGUoc3RydWN0IHBh Z2VfaW5mCiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBhZ2VfZ2V0X293bmVy KHBhZ2UpOwogICAgIHVuc2lnbmVkIGxvbmcgcGZuID0gcGFnZV90b19tZm4o cGFnZSk7CiAgICAgbDJfcGdlbnRyeV90ICpwbDJlOwotICAgIHVuc2lnbmVk IGludCAgaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gMTsKLSAgICBp bnQgZXJyID0gMDsKKyAgICBpbnQgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+ cGFydGlhbF9wdGU7CisgICAgdW5zaWduZWQgaW50IGkgPSBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAtICFwYXJ0aWFsOwogCiAgICAgcGwyZSA9IG1hcF9k b21haW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgQVNTRVJUKHBhZ2UtPm5y X3ZhbGlkYXRlZF9wdGVzKTsKLSAgICBkbyB7Ci0gICAgICAgIGlmICggaXNf Z3Vlc3RfbDJfc2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkg JiYKLSAgICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBw Zm4pID09IDAgJiYKLSAgICAgICAgICAgICBpICYmIGh5cGVyY2FsbF9wcmVl bXB0X2NoZWNrKCkgKQorICAgIGZvciAoIDsgOyApCisgICAgeworICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8sIGkpICkKKyAgICAgICAgICAgIHJjID0gcHV0X3BhZ2VfZnJvbV9s MmUocGwyZVtpXSwgcGZuLCBwYXJ0aWFsLCBmYWxzZSk7CisgICAgICAgIGlm ICggcmMgPCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAgIHBh cnRpYWwgPSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAgICAg ICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNUQVJUOwor ICAgICAgICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBicmVhazsK ICAgICAgICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSApOworICAg IH0KIAogICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0gICAgaWYg KCAhZXJyICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAgICAgICAg cGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVuX2wyOwor ICAgICAgICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAt RVJFU1RBUlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXMgPSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IHBhcnRp YWwgPzogLTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIg JiYgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAgeworICAg ICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOworICAgICAg ICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0gLUVSRVNU QVJUOworICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0dXJuIHJj OwogfQogCiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0IHBhZ2Vf aW5mbyAqcGFnZSkKQEAgLTIyNjcsNyArMjMxOCw3IEBAIHN0YXRpYyBpbnQg bW9kX2wyX2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgICAgIHJl dHVybiAtRUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAoIHVubGlr ZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCkpIDwg MCkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zy b21fbDJlKG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAgICAgICAg cmV0dXJuIHJjOwogCiAgICAgICAgIGFkanVzdF9ndWVzdF9sMmUobmwyZSwg ZCk7CkBAIC0yMjg2LDcgKzIzMzcsOCBAQCBzdGF0aWMgaW50IG1vZF9sMl9l bnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgIHJldHVybiAtRUJVU1k7 CiAgICAgfQogCi0gICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwgcGZuKTsK KyAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4sIDAsIHRydWUpOwor CiAgICAgcmV0dXJuIHJjOwogfQogCg== --=separator Content-Type: application/octet-stream; name="xsa290/4.9-2.patch" Content-Disposition: attachment; filename="xsa290/4.9-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNzY2LDYgKzE3NjYsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTIwMDQsMTggKzIwMTEsMjggQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICBpZiAoIGlzX2d1ZXN0X2wzX3Nsb3QoaSkgKQogICAg ICAgICB7CiAgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBs M2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgICAgICBpZiAoIHJj IDwgMCApCiAgICAgICAgICAgICAgICAgYnJlYWs7CisKICAgICAgICAgICAg IHBhcnRpYWwgPSAwOwotICAgICAgICAgICAgaWYgKCByYyA+IDAgKQotICAg ICAgICAgICAgICAgIGNvbnRpbnVlOwotICAgICAgICAgICAgdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworICAgICAgICAgICAgaWYgKCByYyA9 PSAwICkKKyAgICAgICAgICAgICAgICB1bmFkanVzdF9ndWVzdF9sM2UocGwz ZVtpXSwgZCk7CiAgICAgICAgIH0KLSAgICB9IHdoaWxlICggaS0tICk7CisK KyAgICAgICAgaWYgKCAhaS0tICkKKyAgICAgICAgICAgIGJyZWFrOworCisg ICAgICAgIGlmICggaHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAg ICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAg YnJlYWs7CisgICAgICAgIH0KKyAgICB9CiAKICAgICB1bm1hcF9kb21haW5f cGFnZShwbDNlKTsKIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.10-1.patch" Content-Disposition: attachment; filename="xsa290/4.10-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTE2OCw3ICsxMTY4LDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMTg1LDcgKzExODUsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK IAogICAgIGlmICggIShsMmVfZ2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QU0Up ICkKICAgICB7Ci0gICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJv bV9tZm4oX21mbihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwgMCwgMCk7 CisgICAgICAgIHJjID0gZ2V0X3BhZ2VfYW5kX3R5cGVfZnJvbV9tZm4oX21m bihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwgZCwKKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFsLCBmYWxzZSk7CiAg ICAgICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wy X2xpbmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgICAg IHJjID0gMDsKICAgICAgICAgcmV0dXJuIHJjOwpAQCAtMTMyNiw4ICsxMzI3 LDExIEBAIHZvaWQgcHV0X3BhZ2VfZnJvbV9sMWUobDFfcGdlbnRyeV90IGwx ZSwKICAqIE5CLiBWaXJ0dWFsIGFkZHJlc3MgJ2wyZScgbWFwcyB0byBhIG1h Y2hpbmUgYWRkcmVzcyB3aXRoaW4gZnJhbWUgJ3BmbicuCiAgKiBOb3RlIGFs c28gdGhhdCB0aGlzIGF1dG9tYXRpY2FsbHkgZGVhbHMgY29ycmVjdGx5IHdp dGggbGluZWFyIHAudC4ncy4KICAqLwotc3RhdGljIGludCBwdXRfcGFnZV9m cm9tX2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbikK K3N0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV90IGwy ZSwgdW5zaWduZWQgbG9uZyBwZm4sCisgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGludCBwYXJ0aWFsLCBib29sIGRlZmVyKQogeworICAgIGludCBy YyA9IDA7CisKICAgICBpZiAoICEobDJlX2dldF9mbGFncyhsMmUpICYgX1BB R0VfUFJFU0VOVCkgfHwgKGwyZV9nZXRfcGZuKGwyZSkgPT0gcGZuKSApCiAg ICAgICAgIHJldHVybiAxOwogCkBAIC0xMzQyLDEzICsxMzQ2LDI3IEBAIHN0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdlbnRyeV8KICAgICBl bHNlCiAgICAgewogICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IGwy ZV9nZXRfcGFnZShsMmUpOwotICAgICAgICBpbnQgcmMgPSBfcHV0X3BhZ2Vf dHlwZShwZywgZmFsc2UsIG1mbl90b19wYWdlKF9tZm4ocGZuKSkpOworICAg ICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwdHBnID0gbWZuX3RvX3BhZ2UoX21m bihwZm4pKTsKIAotICAgICAgICBBU1NFUlQoIXJjKTsKLSAgICAgICAgcHV0 X3BhZ2UocGcpOworICAgICAgICBpZiAoIHVubGlrZWx5KHBhcnRpYWwgPiAw KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIEFTU0VSVCghZGVmZXIpOwor ICAgICAgICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywgdHJ1ZSwgcHRw Zyk7CisgICAgICAgIH0KKyAgICAgICAgZWxzZSBpZiAoIGRlZmVyICkKKyAg ICAgICAgeworICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3Rf cHRwZyA9IHB0cGc7CisgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9n dWVzdF90YWJsZSA9IHBnOworICAgICAgICB9CisgICAgICAgIGVsc2UKKyAg ICAgICAgeworICAgICAgICAgICAgcmMgPSBfcHV0X3BhZ2VfdHlwZShwZywg dHJ1ZSwgcHRwZyk7CisgICAgICAgICAgICBpZiAoIGxpa2VseSghcmMpICkK KyAgICAgICAgICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIH0KICAg ICB9CiAKLSAgICByZXR1cm4gMDsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0 YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sM2UobDNfcGdlbnRyeV90IGwzZSwg dW5zaWduZWQgbG9uZyBwZm4sCkBAIC0xNTE4LDExICsxNTM2LDEyIEBAIHN0 YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICB1 bnNpZ25lZCBsb25nICBwZm4gPSBtZm5feChwYWdlX3RvX21mbihwYWdlKSk7 CiAgICAgbDJfcGdlbnRyeV90ICAqcGwyZTsKICAgICB1bnNpZ25lZCBpbnQg ICBpOwotICAgIGludCAgICAgICAgICAgIHJjID0gMDsKKyAgICBpbnQgICAg ICAgICAgICByYyA9IDAsIHBhcnRpYWwgPSBwYWdlLT5wYXJ0aWFsX3B0ZTsK IAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4pKTsKIAot ICAgIGZvciAoIGkgPSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwy X1BBR0VUQUJMRV9FTlRSSUVTOyBpKysgKQorICAgIGZvciAoIGkgPSBwYWdl LT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwyX1BBR0VUQUJMRV9FTlRSSUVT OworICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsKICAgICAg ICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYgaHlwZXJj YWxsX3ByZWVtcHRfY2hlY2soKSApCiAgICAgICAgIHsKQEAgLTE1MzIsMjMg KzE1NTEsMzMgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShzdHJ1Y3Qg cGFnZV9pbgogICAgICAgICB9CiAKICAgICAgICAgaWYgKCAhaXNfZ3Vlc3Rf bDJfc2xvdChkLCB0eXBlLCBpKSB8fAotICAgICAgICAgICAgIChyYyA9IGdl dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgZCkpID4gMCApCisgICAg ICAgICAgICAgKHJjID0gZ2V0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZu LCBkLCBwYXJ0aWFsKSkgPiAwICkKICAgICAgICAgICAgIGNvbnRpbnVlOwog Ci0gICAgICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVSRVNUQVJUKSApCisg ICAgICAgIGlmICggcmMgPT0gLUVSRVNUQVJUICkKICAgICAgICAgewogICAg ICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwotICAgICAg ICAgICAgYnJlYWs7CisgICAgICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9 IHBhcnRpYWwgPzogMTsKICAgICAgICAgfQotCi0gICAgICAgIGlmICggcmMg PCAwICkKKyAgICAgICAgZWxzZSBpZiAoIHJjID09IC1FSU5UUiAmJiBpICkK KyAgICAgICAgeworICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0 ZXMgPSBpOworICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSAwOwor ICAgICAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgICAgIH0KKyAgICAg ICAgZWxzZSBpZiAoIHJjIDwgMCAmJiByYyAhPSAtRUlOVFIgKQogICAgICAg ICB7CiAgICAgICAgICAgICBnZHByaW50ayhYRU5MT0dfV0FSTklORywgIkZh aWx1cmUgaW4gYWxsb2NfbDJfdGFibGU6IHNsb3QgJSN4XG4iLCBpKTsKLSAg ICAgICAgICAgIHdoaWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAg aWYgKCBpc19ndWVzdF9sMl9zbG90KGQsIHR5cGUsIGkpICkKLSAgICAgICAg ICAgICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKTsK LSAgICAgICAgICAgIGJyZWFrOworICAgICAgICAgICAgaWYgKCBpICkKKyAg ICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyA9IGk7CisgICAgICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9w dGUgPSAwOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1 ZXN0X3B0cGcgPSBOVUxMOworICAgICAgICAgICAgICAgIGN1cnJlbnQtPmFy Y2gub2xkX2d1ZXN0X3RhYmxlID0gcGFnZTsKKyAgICAgICAgICAgIH0KICAg ICAgICAgfQorICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAgICAgICBi cmVhazsKIAogICAgICAgICBwbDJlW2ldID0gYWRqdXN0X2d1ZXN0X2wyZShw bDJlW2ldLCBkKTsKICAgICB9CkBAIC0xODI4LDI4ICsxODU3LDUwIEBAIHN0 YXRpYyBpbnQgZnJlZV9sMl90YWJsZShzdHJ1Y3QgcGFnZV9pbmYKICAgICBz dHJ1Y3QgZG9tYWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CiAgICAg dW5zaWduZWQgbG9uZyBwZm4gPSBtZm5feChwYWdlX3RvX21mbihwYWdlKSk7 CiAgICAgbDJfcGdlbnRyeV90ICpwbDJlOwotICAgIHVuc2lnbmVkIGludCAg aSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzIC0gMTsKLSAgICBpbnQgZXJy ID0gMDsKKyAgICBpbnQgcmMgPSAwLCBwYXJ0aWFsID0gcGFnZS0+cGFydGlh bF9wdGU7CisgICAgdW5zaWduZWQgaW50IGkgPSBwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyAtICFwYXJ0aWFsOwogCiAgICAgcGwyZSA9IG1hcF9kb21haW5f cGFnZShfbWZuKHBmbikpOwogCi0gICAgQVNTRVJUKHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzKTsKLSAgICBkbyB7Ci0gICAgICAgIGlmICggaXNfZ3Vlc3Rf bDJfc2xvdChkLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbywgaSkgJiYKLSAg ICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4pID09 IDAgJiYKLSAgICAgICAgICAgICBpICYmIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQorICAgIGZvciAoIDsgOyApCisgICAgeworICAgICAgICBpZiAo IGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8s IGkpICkKKyAgICAgICAgICAgIHJjID0gcHV0X3BhZ2VfZnJvbV9sMmUocGwy ZVtpXSwgcGZuLCBwYXJ0aWFsLCBmYWxzZSk7CisgICAgICAgIGlmICggcmMg PCAwICkKKyAgICAgICAgICAgIGJyZWFrOworCisgICAgICAgIHBhcnRpYWwg PSAwOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAgICAgICBicmVh azsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkg KQogICAgICAgICB7Ci0gICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9w dGVzID0gaTsKLSAgICAgICAgICAgZXJyID0gLUVSRVNUQVJUOworICAgICAg ICAgICAgcmMgPSAtRUlOVFI7CisgICAgICAgICAgICBicmVhazsKICAgICAg ICAgfQotICAgIH0gd2hpbGUgKCAhZXJyICYmIGktLSApOworICAgIH0KIAog ICAgIHVubWFwX2RvbWFpbl9wYWdlKHBsMmUpOwogCi0gICAgaWYgKCAhZXJy ICkKKyAgICBpZiAoIHJjID49IDAgKQorICAgIHsKICAgICAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gJj0gflBHVF9wYWVfeGVuX2wyOworICAgICAg ICByYyA9IDA7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRVJFU1RB UlQgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMg PSBpOworICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IHBhcnRpYWwgPzog LTE7CisgICAgfQorICAgIGVsc2UgaWYgKCByYyA9PSAtRUlOVFIgJiYgaSA8 IEwyX1BBR0VUQUJMRV9FTlRSSUVTIC0gMSApCisgICAgeworICAgICAgICBw YWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGkgKyAxOworICAgICAgICBwYWdl LT5wYXJ0aWFsX3B0ZSA9IDA7CisgICAgICAgIHJjID0gLUVSRVNUQVJUOwor ICAgIH0KIAotICAgIHJldHVybiBlcnI7CisgICAgcmV0dXJuIHJjOwogfQog CiBzdGF0aWMgaW50IGZyZWVfbDNfdGFibGUoc3RydWN0IHBhZ2VfaW5mbyAq cGFnZSkKQEAgLTIxMTUsNyArMjE2Niw3IEBAIHN0YXRpYyBpbnQgbW9kX2wy X2VudHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgICAgIHJldHVybiAt RUJVU1k7CiAgICAgICAgIH0KIAotICAgICAgICBpZiAoIHVubGlrZWx5KChy YyA9IGdldF9wYWdlX2Zyb21fbDJlKG5sMmUsIHBmbiwgZCkpIDwgMCkgKQor ICAgICAgICBpZiAoIHVubGlrZWx5KChyYyA9IGdldF9wYWdlX2Zyb21fbDJl KG5sMmUsIHBmbiwgZCwgMCkpIDwgMCkgKQogICAgICAgICAgICAgcmV0dXJu IHJjOwogCiAgICAgICAgIG5sMmUgPSBhZGp1c3RfZ3Vlc3RfbDJlKG5sMmUs IGQpOwpAQCAtMjEzNCw3ICsyMTg1LDggQEAgc3RhdGljIGludCBtb2RfbDJf ZW50cnkobDJfcGdlbnRyeV90ICpwbAogICAgICAgICByZXR1cm4gLUVCVVNZ OwogICAgIH0KIAotICAgIHB1dF9wYWdlX2Zyb21fbDJlKG9sMmUsIHBmbik7 CisgICAgcHV0X3BhZ2VfZnJvbV9sMmUob2wyZSwgcGZuLCAwLCB0cnVlKTsK KwogICAgIHJldHVybiByYzsKIH0KIAo= --=separator Content-Type: application/octet-stream; name="xsa290/4.10-2.patch" Content-Disposition: attachment; filename="xsa290/4.10-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNjEyLDYgKzE2MTIsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE5MTMsMTUgKzE5MjAsMjUgQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBsM2VbaV0s IHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMgPCAwICkKICAg ICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwgPSAwOwotICAg ICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250aW51ZTsKLSAg ICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShwbDNlW2ldLCBk KTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlmICggcmMgPT0g MCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3RfZ3Vlc3RfbDNl KHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0 X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IC1FSU5U UjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9CisgICAgfQogCiAg ICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.11-1.patch" Content-Disposition: attachment; filename="xsa290/4.11-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg cHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21tOiBQbHVt YmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndpdGggLUVS RVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7YWxsb2Ms ZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVudCAoYW5k IHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4pdmFsaWRh dGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3NlcnRpb24g aW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRvIHRyaWdn ZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNsZWFuZWQg dXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkncyBhc3N1 bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdheXMgc3Vj Y2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRpYWxseSB1 bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGljaCBoYXMg bm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxhdGVyIG9u LiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwgdGhpcyB3 b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAtPnUuaW51 c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpmcmVlaW5n IHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21haW4gaGFz IGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lkZXJlZCBh IG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlvbiBmdWxs eSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJsZSBoYW5k bGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0LgoKVGhl IHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVzdCBmb3Ig c3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJlcG9ydGVk LWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUub3JnPgpU ZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2NoZS5ldS5v cmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysg Yi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTEyNiw3ICsxMTI2LDcgQEAgZ2V0 X3BhZ2VfZnJvbV9sMWUoCiBkZWZpbmVfZ2V0X2xpbmVhcl9wYWdldGFibGUo bDIpOwogc3RhdGljIGludAogZ2V0X3BhZ2VfZnJvbV9sMmUoCi0gICAgbDJf cGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4sIHN0cnVjdCBkb21h aW4gKmQpCisgICAgbDJfcGdlbnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBw Zm4sIHN0cnVjdCBkb21haW4gKmQsIGludCBwYXJ0aWFsKQogewogICAgIHVu c2lnbmVkIGxvbmcgbWZuID0gbDJlX2dldF9wZm4obDJlKTsKICAgICBpbnQg cmM7CkBAIC0xMTQxLDcgKzExNDEsOCBAQCBnZXRfcGFnZV9mcm9tX2wyZSgK ICAgICAgICAgcmV0dXJuIC1FSU5WQUw7CiAgICAgfQogCi0gICAgcmMgPSBn ZXRfcGFnZV9hbmRfdHlwZV9mcm9tX21mbihfbWZuKG1mbiksIFBHVF9sMV9w YWdlX3RhYmxlLCBkLCAwLCAwKTsKKyAgICByYyA9IGdldF9wYWdlX2FuZF90 eXBlX2Zyb21fbWZuKF9tZm4obWZuKSwgUEdUX2wxX3BhZ2VfdGFibGUsIGQs CisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwYXJ0aWFs LCBmYWxzZSk7CiAgICAgaWYgKCB1bmxpa2VseShyYyA9PSAtRUlOVkFMKSAm JiBnZXRfbDJfbGluZWFyX3BhZ2V0YWJsZShsMmUsIHBmbiwgZCkgKQogICAg ICAgICByYyA9IDA7CiAKQEAgLTEyOTUsOCArMTI5NiwxMSBAQCB2b2lkIHB1 dF9wYWdlX2Zyb21fbDFlKGwxX3BnZW50cnlfdCBsMWUsCiAgKiBOQi4gVmly dHVhbCBhZGRyZXNzICdsMmUnIG1hcHMgdG8gYSBtYWNoaW5lIGFkZHJlc3Mg d2l0aGluIGZyYW1lICdwZm4nLgogICogTm90ZSBhbHNvIHRoYXQgdGhpcyBh dXRvbWF0aWNhbGx5IGRlYWxzIGNvcnJlY3RseSB3aXRoIGxpbmVhciBwLnQu J3MuCiAgKi8KLXN0YXRpYyBpbnQgcHV0X3BhZ2VfZnJvbV9sMmUobDJfcGdl bnRyeV90IGwyZSwgdW5zaWduZWQgbG9uZyBwZm4pCitzdGF0aWMgaW50IHB1 dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxv bmcgcGZuLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpbnQgcGFy dGlhbCwgYm9vbCBkZWZlcikKIHsKKyAgICBpbnQgcmMgPSAwOworCiAgICAg aWYgKCAhKGwyZV9nZXRfZmxhZ3MobDJlKSAmIF9QQUdFX1BSRVNFTlQpIHx8 IChsMmVfZ2V0X3BmbihsMmUpID09IHBmbikgKQogICAgICAgICByZXR1cm4g MTsKIApAQCAtMTMxMSwxMyArMTMxNSwyNyBAQCBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfCiAgICAgZWxzZQogICAgIHsKICAg ICAgICAgc3RydWN0IHBhZ2VfaW5mbyAqcGcgPSBsMmVfZ2V0X3BhZ2UobDJl KTsKLSAgICAgICAgaW50IHJjID0gX3B1dF9wYWdlX3R5cGUocGcsIGZhbHNl LCBtZm5fdG9fcGFnZShfbWZuKHBmbikpKTsKKyAgICAgICAgc3RydWN0IHBh Z2VfaW5mbyAqcHRwZyA9IG1mbl90b19wYWdlKF9tZm4ocGZuKSk7CiAKLSAg ICAgICAgQVNTRVJUKCFyYyk7Ci0gICAgICAgIHB1dF9wYWdlKHBnKTsKKyAg ICAgICAgaWYgKCB1bmxpa2VseShwYXJ0aWFsID4gMCkgKQorICAgICAgICB7 CisgICAgICAgICAgICBBU1NFUlQoIWRlZmVyKTsKKyAgICAgICAgICAgIHJj ID0gX3B1dF9wYWdlX3R5cGUocGcsIHRydWUsIHB0cGcpOworICAgICAgICB9 CisgICAgICAgIGVsc2UgaWYgKCBkZWZlciApCisgICAgICAgIHsKKyAgICAg ICAgICAgIGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3B0cGcgPSBwdHBnOwor ICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBw ZzsKKyAgICAgICAgfQorICAgICAgICBlbHNlCisgICAgICAgIHsKKyAgICAg ICAgICAgIHJjID0gX3B1dF9wYWdlX3R5cGUocGcsIHRydWUsIHB0cGcpOwor ICAgICAgICAgICAgaWYgKCBsaWtlbHkoIXJjKSApCisgICAgICAgICAgICAg ICAgcHV0X3BhZ2UocGcpOworICAgICAgICB9CiAgICAgfQogCi0gICAgcmV0 dXJuIDA7CisgICAgcmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IHB1dF9w YWdlX2Zyb21fbDNlKGwzX3BnZW50cnlfdCBsM2UsIHVuc2lnbmVkIGxvbmcg cGZuLApAQCAtMTQ4NywxMSArMTUwNSwxMiBAQCBzdGF0aWMgaW50IGFsbG9j X2wyX3RhYmxlKHN0cnVjdCBwYWdlX2luCiAgICAgdW5zaWduZWQgbG9uZyAg cGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwogICAgIGwyX3BnZW50 cnlfdCAgKnBsMmU7CiAgICAgdW5zaWduZWQgaW50ICAgaTsKLSAgICBpbnQg ICAgICAgICAgICByYyA9IDA7CisgICAgaW50ICAgICAgICAgICAgcmMgPSAw LCBwYXJ0aWFsID0gcGFnZS0+cGFydGlhbF9wdGU7CiAKICAgICBwbDJlID0g bWFwX2RvbWFpbl9wYWdlKF9tZm4ocGZuKSk7CiAKLSAgICBmb3IgKCBpID0g cGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVfRU5U UklFUzsgaSsrICkKKyAgICBmb3IgKCBpID0gcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXM7IGkgPCBMMl9QQUdFVEFCTEVfRU5UUklFUzsKKyAgICAgICAgICBp KyssIHBhcnRpYWwgPSAwICkKICAgICB7CiAgICAgICAgIGlmICggaSA+IHBh Z2UtPm5yX3ZhbGlkYXRlZF9wdGVzICYmIGh5cGVyY2FsbF9wcmVlbXB0X2No ZWNrKCkgKQogICAgICAgICB7CkBAIC0xNTAxLDIzICsxNTIwLDMzIEBAIHN0 YXRpYyBpbnQgYWxsb2NfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW4KICAgICAg ICAgfQogCiAgICAgICAgIGlmICggIWlzX2d1ZXN0X2wyX3Nsb3QoZCwgdHlw ZSwgaSkgfHwKLSAgICAgICAgICAgICAocmMgPSBnZXRfcGFnZV9mcm9tX2wy ZShwbDJlW2ldLCBwZm4sIGQpKSA+IDAgKQorICAgICAgICAgICAgIChyYyA9 IGdldF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgZCwgcGFydGlhbCkp ID4gMCApCiAgICAgICAgICAgICBjb250aW51ZTsKIAotICAgICAgICBpZiAo IHVubGlrZWx5KHJjID09IC1FUkVTVEFSVCkgKQorICAgICAgICBpZiAoIHJj ID09IC1FUkVTVEFSVCApCiAgICAgICAgIHsKICAgICAgICAgICAgIHBhZ2Ut Pm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKLSAgICAgICAgICAgIGJyZWFrOwor ICAgICAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IDE7 CiAgICAgICAgIH0KLQotICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAg IGVsc2UgaWYgKCByYyA9PSAtRUlOVFIgJiYgaSApCisgICAgICAgIHsKKyAg ICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAg ICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAgICAgICAgIHJj ID0gLUVSRVNUQVJUOworICAgICAgICB9CisgICAgICAgIGVsc2UgaWYgKCBy YyA8IDAgJiYgcmMgIT0gLUVJTlRSICkKICAgICAgICAgewogICAgICAgICAg ICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJGYWlsdXJlIGluIGFsbG9j X2wyX3RhYmxlOiBzbG90ICUjeFxuIiwgaSk7Ci0gICAgICAgICAgICB3aGls ZSAoIGktLSA+IDAgKQotICAgICAgICAgICAgICAgIGlmICggaXNfZ3Vlc3Rf bDJfc2xvdChkLCB0eXBlLCBpKSApCi0gICAgICAgICAgICAgICAgICAgIHB1 dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbik7Ci0gICAgICAgICAgICBi cmVhazsKKyAgICAgICAgICAgIGlmICggaSApCisgICAgICAgICAgICB7Cisg ICAgICAgICAgICAgICAgcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpOwor ICAgICAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRlID0gMDsKKyAgICAg ICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gTlVM TDsKKyAgICAgICAgICAgICAgICBjdXJyZW50LT5hcmNoLm9sZF9ndWVzdF90 YWJsZSA9IHBhZ2U7CisgICAgICAgICAgICB9CiAgICAgICAgIH0KKyAgICAg ICAgaWYgKCByYyA8IDAgKQorICAgICAgICAgICAgYnJlYWs7CiAKICAgICAg ICAgcGwyZVtpXSA9IGFkanVzdF9ndWVzdF9sMmUocGwyZVtpXSwgZCk7CiAg ICAgfQpAQCAtMTc5NywyOCArMTgyNiw1MCBAQCBzdGF0aWMgaW50IGZyZWVf bDJfdGFibGUoc3RydWN0IHBhZ2VfaW5mCiAgICAgc3RydWN0IGRvbWFpbiAq ZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOwogICAgIHVuc2lnbmVkIGxvbmcg cGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwogICAgIGwyX3BnZW50 cnlfdCAqcGwyZTsKLSAgICB1bnNpZ25lZCBpbnQgIGkgPSBwYWdlLT5ucl92 YWxpZGF0ZWRfcHRlcyAtIDE7Ci0gICAgaW50IGVyciA9IDA7CisgICAgaW50 IHJjID0gMCwgcGFydGlhbCA9IHBhZ2UtPnBhcnRpYWxfcHRlOworICAgIHVu c2lnbmVkIGludCBpID0gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgLSAhcGFy dGlhbDsKIAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3BhZ2UoX21mbihwZm4p KTsKIAotICAgIEFTU0VSVChwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyk7Ci0g ICAgZG8gewotICAgICAgICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgcGFn ZS0+dS5pbnVzZS50eXBlX2luZm8sIGkpICYmCi0gICAgICAgICAgICAgcHV0 X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKSA9PSAwICYmCi0gICAgICAg ICAgICAgaSAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkKKyAgICBm b3IgKCA7IDsgKQorICAgIHsKKyAgICAgICAgaWYgKCBpc19ndWVzdF9sMl9z bG90KGQsIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvLCBpKSApCisgICAgICAg ICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVbaV0sIHBmbiwgcGFy dGlhbCwgZmFsc2UpOworICAgICAgICBpZiAoIHJjIDwgMCApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBwYXJ0aWFsID0gMDsKKworICAgICAg ICBpZiAoICFpLS0gKQorICAgICAgICAgICAgYnJlYWs7CisKKyAgICAgICAg aWYgKCBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkKICAgICAgICAgewot ICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7Ci0gICAg ICAgICAgIGVyciA9IC1FUkVTVEFSVDsKKyAgICAgICAgICAgIHJjID0gLUVJ TlRSOworICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KLSAgICB9IHdo aWxlICggIWVyciAmJiBpLS0gKTsKKyAgICB9CiAKICAgICB1bm1hcF9kb21h aW5fcGFnZShwbDJlKTsKIAotICAgIGlmICggIWVyciApCisgICAgaWYgKCBy YyA+PSAwICkKKyAgICB7CiAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9p bmZvICY9IH5QR1RfcGFlX3hlbl9sMjsKKyAgICAgICAgcmMgPSAwOworICAg IH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVSRVNUQVJUICkKKyAgICB7Cisg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg cGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IC0xOworICAgIH0KKyAg ICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkgPCBMMl9QQUdFVEFCTEVf RU5UUklFUyAtIDEgKQorICAgIHsKKyAgICAgICAgcGFnZS0+bnJfdmFsaWRh dGVkX3B0ZXMgPSBpICsgMTsKKyAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUg PSAwOworICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICB9CiAKLSAgICBy ZXR1cm4gZXJyOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBm cmVlX2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0yMTM4 LDcgKzIxODksNyBAQCBzdGF0aWMgaW50IG1vZF9sMl9lbnRyeShsMl9wZ2Vu dHJ5X3QgKnBsCiAgICAgICAgICAgICByZXR1cm4gLUVCVVNZOwogICAgICAg ICB9CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSgocmMgPSBnZXRfcGFnZV9m cm9tX2wyZShubDJlLCBwZm4sIGQpKSA8IDApICkKKyAgICAgICAgaWYgKCB1 bmxpa2VseSgocmMgPSBnZXRfcGFnZV9mcm9tX2wyZShubDJlLCBwZm4sIGQs IDApKSA8IDApICkKICAgICAgICAgICAgIHJldHVybiByYzsKIAogICAgICAg ICBubDJlID0gYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBkKTsKQEAgLTIxNTcs NyArMjIwOCw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2VudHJ5KGwyX3BnZW50 cnlfdCAqcGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsKICAgICB9CiAKLSAg ICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOworICAgIHB1dF9wYWdl X2Zyb21fbDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisKICAgICByZXR1cm4g cmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa290/4.11-2.patch" Content-Disposition: attachment; filename="xsa290/4.11-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9h cmNoL3g4Ni9tbS5jCkBAIC0xNTgxLDYgKzE1ODEsMTMgQEAgc3RhdGljIGlu dCBhbGxvY19sM190YWJsZShzdHJ1Y3QgcGFnZV9pbgogICAgIGZvciAoIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlczsgaSA8IEwzX1BBR0VUQUJMRV9F TlRSSUVTOwogICAgICAgICAgIGkrKywgcGFydGlhbCA9IDAgKQogICAgIHsK KyAgICAgICAgaWYgKCBpID4gcGFnZS0+bnJfdmFsaWRhdGVkX3B0ZXMgJiYg aHlwZXJjYWxsX3ByZWVtcHRfY2hlY2soKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0gaTsKKyAgICAgICAg ICAgIHJjID0gLUVSRVNUQVJUOworICAgICAgICAgICAgYnJlYWs7CisgICAg ICAgIH0KKwogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSAm JiAoaSA9PSAzKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGlmICggIShs M2VfZ2V0X2ZsYWdzKHBsM2VbaV0pICYgX1BBR0VfUFJFU0VOVCkgfHwKQEAg LTE4ODIsMTUgKzE4ODksMjUgQEAgc3RhdGljIGludCBmcmVlX2wzX3RhYmxl KHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9kb21haW5fcGFn ZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAoIDsgOyApCisg ICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNlKHBsM2VbaV0s IHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMgPCAwICkKICAg ICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwgPSAwOwotICAg ICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250aW51ZTsKLSAg ICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShwbDNlW2ldLCBk KTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlmICggcmMgPT0g MCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3RfZ3Vlc3RfbDNl KHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSApCisgICAgICAg ICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2FsbF9wcmVlbXB0 X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICByYyA9IC1FSU5U UjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9CisgICAgfQogCiAg ICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: application/octet-stream; name="xsa290/unstable-1.patch" Content-Disposition: attachment; filename="xsa290/unstable-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFsc28gYWxsb3cgTDIgKHVuKXZhbGlkYXRpb24gdG8gYmUg ZnVsbHkgcHJlZW1wdGlibGUKCkNvbW1pdCBjNjEyNDgxZDFjICgieDg2L21t OiBQbHVtYmluZyB0byBhbGxvdyBhbnkgUFRFIHVwZGF0ZSB0byBmYWlsCndp dGggLUVSRVNUQVJUIikgYWRkZWQgYXNzZXJ0aW9ucyBuZXh0IHRvIHRoZSB7 YWxsb2MsZnJlZX1fbDJfdGFibGUoKQppbnZvY2F0aW9ucyB0byBkb2N1bWVu dCAoYW5kIHZhbGlkYXRlIGluIGRlYnVnIGJ1aWxkcykgdGhhdCBMMgoodW4p dmFsaWRhdGlvbnMgYXJlIGFsd2F5cyBwcmVlbXB0aWJsZS4KClRoZSBhc3Nl cnRpb24gaW4gZnJlZV9wYWdlX3R5cGUoKSB3YXMgbm93IG9ic2VydmVkIHRv IHRyaWdnZXIgd2hlbgpyZWN1cnNpdmUgTDIgcGFnZSB0YWJsZXMgZ2V0IGNs ZWFuZWQgdXAuCgpJbiBwYXJ0aWN1bGFyIHB1dF9wYWdlX2Zyb21fbDJlKCkn cyBhc3N1bXB0aW9uIHRoYXQgX3B1dF9wYWdlX3R5cGUoKQp3b3VsZCBhbHdh eXMgc3VjY2VlZCBpcyBub3cgd3JvbmcsIHJlc3VsdGluZyBpbiBhIHBhcnRp YWxseSB1bi12YWxpZGF0ZWQKcGFnZSBsZWZ0IGluIGEgZG9tYWluLCB3aGlj aCBoYXMgbm8gb3RoZXIgbWVhbnMgb2YgZ2V0dGluZyBjbGVhbmVkIHVwCmxh dGVyIG9uLiBJZiBub3QgY2F1c2luZyBhbnkgcHJvYmxlbXMgZWFybGllciwg dGhpcyB3b3VsZCB1bHRpbWF0ZWx5CnRyaWdnZXIgdGhlIGNoZWNrIGZvciAt PnUuaW51c2UudHlwZV9pbmZvIGhhdmluZyBhIHplcm8gY291bnQgd2hlbgpm cmVlaW5nIHRoZSBwYWdlIGR1cmluZyBjbGVhbnVwIGFmdGVyIHRoZSBkb21h aW4gaGFzIGRpZWQuCgpBcyBhIHJlc3VsdCBpdCBzaG91bGQgYmUgY29uc2lk ZXJlZCBhIG1pc3Rha2UgdG8gbm90IGhhdmUgZXh0ZW5kZWQKcHJlZW1wdGlv biBmdWxseSB0byBMMiB3aGVuIGl0IHdhcyBhZGRlZCB0byBMMy9MNCB0YWJs ZSBoYW5kbGluZywgd2hpY2gKdGhpcyBjaGFuZ2UgYWltcyB0byBjb3JyZWN0 LgoKVGhlIHZhbGlkYXRpb24gc2lkZSBhZGRpdGlvbnMgYXJlIGRvbmUganVz dCBmb3Igc3ltbWV0cnkuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTI5MC4KClJl cG9ydGVkLWJ5OiBNYW51ZWwgQm91eWVyIDxib3V5ZXJAYW50aW9jaGUuZXUu b3JnPgpUZXN0ZWQtYnk6IE1hbnVlbCBCb3V5ZXIgPGJvdXllckBhbnRpb2No ZS5ldS5vcmc+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+Ci0tLQp2MzogUmUtd3JpdHRlbiBkZXNj cmlwdGlvbi4KdjI6IENsYXJpZnkgdGhhdCBpdCdzIG1haW5seSB1bnZhbGlk YXRpb24gd2hpY2ggbmVlZHMgYWRqdXN0bWVudC4KCi0tLSBhL3hlbi9hcmNo L3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC0xMTIzLDcg KzExMjMsNyBAQCBzdGF0aWMgaW50IGdldF9wYWdlX2FuZF90eXBlX2Zyb21f bWZuKAogZGVmaW5lX2dldF9saW5lYXJfcGFnZXRhYmxlKGwyKTsKIHN0YXRp YyBpbnQKIGdldF9wYWdlX2Zyb21fbDJlKAotICAgIGwyX3BnZW50cnlfdCBs MmUsIHVuc2lnbmVkIGxvbmcgcGZuLCBzdHJ1Y3QgZG9tYWluICpkKQorICAg IGwyX3BnZW50cnlfdCBsMmUsIHVuc2lnbmVkIGxvbmcgcGZuLCBzdHJ1Y3Qg ZG9tYWluICpkLCBpbnQgcGFydGlhbCkKIHsKICAgICB1bnNpZ25lZCBsb25n IG1mbiA9IGwyZV9nZXRfcGZuKGwyZSk7CiAgICAgaW50IHJjOwpAQCAtMTEz NSw3ICsxMTM1LDggQEAgZ2V0X3BhZ2VfZnJvbV9sMmUoCiAgICAgICAgIHJl dHVybiAtRUlOVkFMOwogICAgIH0KIAotICAgIHJjID0gZ2V0X3BhZ2VfYW5k X3R5cGVfZnJvbV9tZm4oX21mbihtZm4pLCBQR1RfbDFfcGFnZV90YWJsZSwg ZCwgMCwgMCk7CisgICAgcmMgPSBnZXRfcGFnZV9hbmRfdHlwZV9mcm9tX21m bihfbWZuKG1mbiksIFBHVF9sMV9wYWdlX3RhYmxlLCBkLAorICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgcGFydGlhbCwgZmFsc2UpOwog ICAgIGlmICggdW5saWtlbHkocmMgPT0gLUVJTlZBTCkgJiYgZ2V0X2wyX2xp bmVhcl9wYWdldGFibGUobDJlLCBwZm4sIGQpICkKICAgICAgICAgcmMgPSAw OwogCkBAIC0xMjgxLDggKzEyODIsMTEgQEAgc3RhdGljIHZvaWQgcHV0X2Rh dGFfcGFnZShzdHJ1Y3QgcGFnZV9pbgogICogTkIuIFZpcnR1YWwgYWRkcmVz cyAnbDJlJyBtYXBzIHRvIGEgbWFjaGluZSBhZGRyZXNzIHdpdGhpbiBmcmFt ZSAncGZuJy4KICAqIE5vdGUgYWxzbyB0aGF0IHRoaXMgYXV0b21hdGljYWxs eSBkZWFscyBjb3JyZWN0bHkgd2l0aCBsaW5lYXIgcC50LidzLgogICovCi1z dGF0aWMgaW50IHB1dF9wYWdlX2Zyb21fbDJlKGwyX3BnZW50cnlfdCBsMmUs IHVuc2lnbmVkIGxvbmcgcGZuKQorc3RhdGljIGludCBwdXRfcGFnZV9mcm9t X2wyZShsMl9wZ2VudHJ5X3QgbDJlLCB1bnNpZ25lZCBsb25nIHBmbiwKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50IHBhcnRpYWwsIGJvb2wg ZGVmZXIpCiB7CisgICAgaW50IHJjID0gMDsKKwogICAgIGlmICggIShsMmVf Z2V0X2ZsYWdzKGwyZSkgJiBfUEFHRV9QUkVTRU5UKSB8fCAobDJlX2dldF9w Zm4obDJlKSA9PSBwZm4pICkKICAgICAgICAgcmV0dXJuIDE7CiAKQEAgLTEz MDAsMTMgKzEzMDQsMjcgQEAgc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wy ZShsMl9wZ2VudHJ5XwogICAgIGVsc2UKICAgICB7CiAgICAgICAgIHN0cnVj dCBwYWdlX2luZm8gKnBnID0gbDJlX2dldF9wYWdlKGwyZSk7Ci0gICAgICAg IGludCByYyA9IF9wdXRfcGFnZV90eXBlKHBnLCBmYWxzZSwgbWZuX3RvX3Bh Z2UoX21mbihwZm4pKSk7CisgICAgICAgIHN0cnVjdCBwYWdlX2luZm8gKnB0 cGcgPSBtZm5fdG9fcGFnZShfbWZuKHBmbikpOwogCi0gICAgICAgIEFTU0VS VCghcmMpOwotICAgICAgICBwdXRfcGFnZShwZyk7CisgICAgICAgIGlmICgg dW5saWtlbHkocGFydGlhbCA+IDApICkKKyAgICAgICAgeworICAgICAgICAg ICAgQVNTRVJUKCFkZWZlcik7CisgICAgICAgICAgICByYyA9IF9wdXRfcGFn ZV90eXBlKHBnLCB0cnVlLCBwdHBnKTsKKyAgICAgICAgfQorICAgICAgICBl bHNlIGlmICggZGVmZXIgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJy ZW50LT5hcmNoLm9sZF9ndWVzdF9wdHBnID0gcHRwZzsKKyAgICAgICAgICAg IGN1cnJlbnQtPmFyY2gub2xkX2d1ZXN0X3RhYmxlID0gcGc7CisgICAgICAg IH0KKyAgICAgICAgZWxzZQorICAgICAgICB7CisgICAgICAgICAgICByYyA9 IF9wdXRfcGFnZV90eXBlKHBnLCB0cnVlLCBwdHBnKTsKKyAgICAgICAgICAg IGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdl KHBnKTsKKyAgICAgICAgfQogICAgIH0KIAotICAgIHJldHVybiAwOworICAg IHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBwdXRfcGFnZV9mcm9tX2wz ZShsM19wZ2VudHJ5X3QgbDNlLCB1bnNpZ25lZCBsb25nIHBmbiwKQEAgLTE0 ODAsMTEgKzE0OTgsMTIgQEAgc3RhdGljIGludCBhbGxvY19sMl90YWJsZShz dHJ1Y3QgcGFnZV9pbgogICAgIHVuc2lnbmVkIGxvbmcgIHBmbiA9IG1mbl94 KHBhZ2VfdG9fbWZuKHBhZ2UpKTsKICAgICBsMl9wZ2VudHJ5X3QgICpwbDJl OwogICAgIHVuc2lnbmVkIGludCAgIGk7Ci0gICAgaW50ICAgICAgICAgICAg cmMgPSAwOworICAgIGludCAgICAgICAgICAgIHJjID0gMCwgcGFydGlhbCA9 IHBhZ2UtPnBhcnRpYWxfcHRlOwogCiAgICAgcGwyZSA9IG1hcF9kb21haW5f cGFnZShfbWZuKHBmbikpOwogCi0gICAgZm9yICggaSA9IHBhZ2UtPm5yX3Zh bGlkYXRlZF9wdGVzOyBpIDwgTDJfUEFHRVRBQkxFX0VOVFJJRVM7IGkrKyAp CisgICAgZm9yICggaSA9IHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzOyBpIDwg TDJfUEFHRVRBQkxFX0VOVFJJRVM7CisgICAgICAgICAgaSsrLCBwYXJ0aWFs ID0gMCApCiAgICAgewogICAgICAgICBsMl9wZ2VudHJ5X3QgbDJlOwogCkBA IC0xNTA3LDIyICsxNTI2LDMyIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDJfdGFi bGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgIHJjID0gLUVSRVNUQVJU OwogICAgICAgICB9CiAgICAgICAgIGVsc2UKLSAgICAgICAgICAgIHJjID0g Z2V0X3BhZ2VfZnJvbV9sMmUobDJlLCBwZm4sIGQpOworICAgICAgICAgICAg cmMgPSBnZXRfcGFnZV9mcm9tX2wyZShsMmUsIHBmbiwgZCwgcGFydGlhbCk7 CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseShyYyA9PSAtRVJFU1RBUlQpICkK KyAgICAgICAgaWYgKCByYyA9PSAtRVJFU1RBUlQgKQogICAgICAgICB7CiAg ICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9IGk7Ci0gICAg ICAgICAgICBicmVhazsKKyAgICAgICAgICAgIHBhZ2UtPnBhcnRpYWxfcHRl ID0gcGFydGlhbCA/OiAxOwogICAgICAgICB9Ci0KLSAgICAgICAgaWYgKCBy YyA8IDAgKQorICAgICAgICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkg KQorICAgICAgICB7CisgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRf cHRlcyA9IGk7CisgICAgICAgICAgICBwYWdlLT5wYXJ0aWFsX3B0ZSA9IDA7 CisgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICAgICAgfQorICAg ICAgICBlbHNlIGlmICggcmMgPCAwICYmIHJjICE9IC1FSU5UUiApCiAgICAg ICAgIHsKICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLCAi RmFpbHVyZSBpbiBhbGxvY19sMl90YWJsZTogc2xvdCAlI3hcbiIsIGkpOwot ICAgICAgICAgICAgd2hpbGUgKCBpLS0gPiAwICkKLSAgICAgICAgICAgICAg ICBpZiAoIGlzX2d1ZXN0X2wyX3Nsb3QoZCwgdHlwZSwgaSkgKQotICAgICAg ICAgICAgICAgICAgICBwdXRfcGFnZV9mcm9tX2wyZShwbDJlW2ldLCBwZm4p OwotICAgICAgICAgICAgYnJlYWs7CisgICAgICAgICAgICBpZiAoIGkgKQor ICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzID0gaTsKKyAgICAgICAgICAgICAgICBwYWdlLT5wYXJ0aWFs X3B0ZSA9IDA7CisgICAgICAgICAgICAgICAgY3VycmVudC0+YXJjaC5vbGRf Z3Vlc3RfcHRwZyA9IE5VTEw7CisgICAgICAgICAgICAgICAgY3VycmVudC0+ YXJjaC5vbGRfZ3Vlc3RfdGFibGUgPSBwYWdlOworICAgICAgICAgICAgfQog ICAgICAgICB9CisgICAgICAgIGlmICggcmMgPCAwICkKKyAgICAgICAgICAg IGJyZWFrOwogCiAgICAgICAgIHBsMmVbaV0gPSBhZGp1c3RfZ3Vlc3RfbDJl KGwyZSwgZCk7CiAgICAgfQpAQCAtMTgyMywyOCArMTg1Miw1MCBAQCBzdGF0 aWMgaW50IGZyZWVfbDJfdGFibGUoc3RydWN0IHBhZ2VfaW5mCiAgICAgc3Ry dWN0IGRvbWFpbiAqZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOwogICAgIHVu c2lnbmVkIGxvbmcgcGZuID0gbWZuX3gocGFnZV90b19tZm4ocGFnZSkpOwog ICAgIGwyX3BnZW50cnlfdCAqcGwyZTsKLSAgICB1bnNpZ25lZCBpbnQgIGkg PSBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyAtIDE7Ci0gICAgaW50IGVyciA9 IDA7CisgICAgaW50IHJjID0gMCwgcGFydGlhbCA9IHBhZ2UtPnBhcnRpYWxf cHRlOworICAgIHVuc2lnbmVkIGludCBpID0gcGFnZS0+bnJfdmFsaWRhdGVk X3B0ZXMgLSAhcGFydGlhbDsKIAogICAgIHBsMmUgPSBtYXBfZG9tYWluX3Bh Z2UoX21mbihwZm4pKTsKIAotICAgIEFTU0VSVChwYWdlLT5ucl92YWxpZGF0 ZWRfcHRlcyk7Ci0gICAgZG8gewotICAgICAgICBpZiAoIGlzX2d1ZXN0X2wy X3Nsb3QoZCwgcGFnZS0+dS5pbnVzZS50eXBlX2luZm8sIGkpICYmCi0gICAg ICAgICAgICAgcHV0X3BhZ2VfZnJvbV9sMmUocGwyZVtpXSwgcGZuKSA9PSAw ICYmCi0gICAgICAgICAgICAgaSAmJiBoeXBlcmNhbGxfcHJlZW1wdF9jaGVj aygpICkKKyAgICBmb3IgKCA7IDsgKQorICAgIHsKKyAgICAgICAgaWYgKCBp c19ndWVzdF9sMl9zbG90KGQsIHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvLCBp KSApCisgICAgICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDJlKHBsMmVb aV0sIHBmbiwgcGFydGlhbCwgZmFsc2UpOworICAgICAgICBpZiAoIHJjIDwg MCApCisgICAgICAgICAgICBicmVhazsKKworICAgICAgICBwYXJ0aWFsID0g MDsKKworICAgICAgICBpZiAoICFpLS0gKQorICAgICAgICAgICAgYnJlYWs7 CisKKyAgICAgICAgaWYgKCBoeXBlcmNhbGxfcHJlZW1wdF9jaGVjaygpICkK ICAgICAgICAgewotICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRl cyA9IGk7Ci0gICAgICAgICAgIGVyciA9IC1FUkVTVEFSVDsKKyAgICAgICAg ICAgIHJjID0gLUVJTlRSOworICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IH0KLSAgICB9IHdoaWxlICggIWVyciAmJiBpLS0gKTsKKyAgICB9CiAKICAg ICB1bm1hcF9kb21haW5fcGFnZShwbDJlKTsKIAotICAgIGlmICggIWVyciAp CisgICAgaWYgKCByYyA+PSAwICkKKyAgICB7CiAgICAgICAgIHBhZ2UtPnUu aW51c2UudHlwZV9pbmZvICY9IH5QR1RfcGFlX3hlbl9sMjsKKyAgICAgICAg cmMgPSAwOworICAgIH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVSRVNUQVJU ICkKKyAgICB7CisgICAgICAgIHBhZ2UtPm5yX3ZhbGlkYXRlZF9wdGVzID0g aTsKKyAgICAgICAgcGFnZS0+cGFydGlhbF9wdGUgPSBwYXJ0aWFsID86IC0x OworICAgIH0KKyAgICBlbHNlIGlmICggcmMgPT0gLUVJTlRSICYmIGkgPCBM Ml9QQUdFVEFCTEVfRU5UUklFUyAtIDEgKQorICAgIHsKKyAgICAgICAgcGFn ZS0+bnJfdmFsaWRhdGVkX3B0ZXMgPSBpICsgMTsKKyAgICAgICAgcGFnZS0+ cGFydGlhbF9wdGUgPSAwOworICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAg ICB9CiAKLSAgICByZXR1cm4gZXJyOworICAgIHJldHVybiByYzsKIH0KIAog c3RhdGljIGludCBmcmVlX2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCkBAIC0yMTY2LDcgKzIyMTcsNyBAQCBzdGF0aWMgaW50IG1vZF9sMl9l bnRyeShsMl9wZ2VudHJ5X3QgKnBsCiAgICAgICAgICAgICByZXR1cm4gLUVC VVNZOwogICAgICAgICB9CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSgocmMg PSBnZXRfcGFnZV9mcm9tX2wyZShubDJlLCBwZm4sIGQpKSA8IDApICkKKyAg ICAgICAgaWYgKCB1bmxpa2VseSgocmMgPSBnZXRfcGFnZV9mcm9tX2wyZShu bDJlLCBwZm4sIGQsIDApKSA8IDApICkKICAgICAgICAgICAgIHJldHVybiBy YzsKIAogICAgICAgICBubDJlID0gYWRqdXN0X2d1ZXN0X2wyZShubDJlLCBk KTsKQEAgLTIxODUsNyArMjIzNiw4IEBAIHN0YXRpYyBpbnQgbW9kX2wyX2Vu dHJ5KGwyX3BnZW50cnlfdCAqcGwKICAgICAgICAgcmV0dXJuIC1FQlVTWTsK ICAgICB9CiAKLSAgICBwdXRfcGFnZV9mcm9tX2wyZShvbDJlLCBwZm4pOwor ICAgIHB1dF9wYWdlX2Zyb21fbDJlKG9sMmUsIHBmbiwgMCwgdHJ1ZSk7CisK ICAgICByZXR1cm4gcmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa290/unstable-2.patch" Content-Disposition: attachment; filename="xsa290/unstable-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGFkZCBleHBsaWNpdCBwcmVlbXB0aW9uIGNoZWNrcyB0byBM MyAodW4pdmFsaWRhdGlvbgoKV2hlbiByZWN1cnNpdmUgcGFnZSB0YWJsZXMg YXJlIHVzZWQgYXQgdGhlIEwzIGxldmVsLCB1bnZhbGlkYXRpb24gb2YgYQpz aW5nbGUgTDQgdGFibGUgbWF5IGluY3VyIHVudmFsaWRhdGlvbiBvZiB0d28g bGV2ZWxzIG9mIEwzIHRhYmxlcywgaS5lLgphIG1heGltdW0gaXRlcmF0aW9u IGNvdW50IG9mIDUxMl4zIGZvciB1bnZhbGlkYXRpbmcgYW4gTDQgdGFibGUu IFRoZQpwcmVlbXB0aW9uIGNoZWNrIGluIGZyZWVfbDJfdGFibGUoKSBhcyB3 ZWxsIGFzIHRoZSBvbmUgaW4KX3B1dF9wYWdlX3R5cGUoKSBtYXkgbmV2ZXIg YmUgcmVhY2hlZCwgc28gZXhwbGljaXQgY2hlY2tpbmcgaXMgbmVlZGVkIGlu CmZyZWVfbDNfdGFibGUoKS4KCldoZW4gcmVjdXJzaXZlIHBhZ2UgdGFibGVz IGFyZSB1c2VkIGF0IHRoZSBMNCBsZXZlbCwgdGhlIGl0ZXJhdGlvbiBjb3Vu dAphdCBMNCBhbG9uZSBpcyBjYXBwZWQgYXQgNTEyXjIuIEFzIHNvb24gYXMg YSBwcmVzZW50IEwzIGVudHJ5IGlzIGhpdAp3aGljaCBpdHNlbGYgbmVlZHMg dW52YWxpZGF0aW9uIChhbmQgaGVuY2UgcmVxdWlyaW5nIGFub3RoZXIgbmVz dGVkIGxvb3AKd2l0aCA1MTIgaXRlcmF0aW9ucyksIHRoZSBwcmVlbXB0aW9u IGNoZWNrcyBhZGRlZCBoZXJlIGtpY2sgaW4sIHNvIG5vCmZ1cnRoZXIgcHJl ZW1wdGlvbiBjaGVja2luZyBpcyBuZWVkZWQgYXQgTDQgKHVudGlsIHdlIGRl Y2lkZSB0byBwZXJtaXQKNS1sZXZlbCBwYWdpbmcgZm9yIFBWIGd1ZXN0cyku CgpUaGUgdmFsaWRhdGlvbiBzaWRlIGFkZGl0aW9ucyBhcmUgZG9uZSBqdXN0 IGZvciBzeW1tZXRyeS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjkwLgoKU2ln bmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpS ZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0 cml4LmNvbT4KLS0tCnYyOiBDbGFyaWZ5IHRoYXQgaXQncyBtYWlubHkgdW52 YWxpZGF0aW9uIHdoaWNoIG5lZWRzIGFkanVzdG1lbnQuCgotLS0gYS94ZW4v YXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtMTU4 OCw2ICsxNTg4LDEzIEBAIHN0YXRpYyBpbnQgYWxsb2NfbDNfdGFibGUoc3Ry dWN0IHBhZ2VfaW4KICAgICB7CiAgICAgICAgIGwzX3BnZW50cnlfdCBsM2Ug PSBwbDNlW2ldOwogCisgICAgICAgIGlmICggaSA+IHBhZ2UtPm5yX3ZhbGlk YXRlZF9wdGVzICYmIGh5cGVyY2FsbF9wcmVlbXB0X2NoZWNrKCkgKQorICAg ICAgICB7CisgICAgICAgICAgICBwYWdlLT5ucl92YWxpZGF0ZWRfcHRlcyA9 IGk7CisgICAgICAgICAgICByYyA9IC1FUkVTVEFSVDsKKyAgICAgICAgICAg IGJyZWFrOworICAgICAgICB9CisKICAgICAgICAgaWYgKCBpc19wdl8zMmJp dF9kb21haW4oZCkgJiYgKGkgPT0gMykgKQogICAgICAgICB7CiAgICAgICAg ICAgICBpZiAoICEobDNlX2dldF9mbGFncyhsM2UpICYgX1BBR0VfUFJFU0VO VCkgfHwKQEAgLTE5MDgsMTUgKzE5MTUsMjUgQEAgc3RhdGljIGludCBmcmVl X2wzX3RhYmxlKHN0cnVjdCBwYWdlX2luZgogCiAgICAgcGwzZSA9IG1hcF9k b21haW5fcGFnZShfbWZuKHBmbikpOwogCi0gICAgZG8geworICAgIGZvciAo IDsgOyApCisgICAgewogICAgICAgICByYyA9IHB1dF9wYWdlX2Zyb21fbDNl KHBsM2VbaV0sIHBmbiwgcGFydGlhbCwgMCk7CiAgICAgICAgIGlmICggcmMg PCAwICkKICAgICAgICAgICAgIGJyZWFrOworCiAgICAgICAgIHBhcnRpYWwg PSAwOwotICAgICAgICBpZiAoIHJjID4gMCApCi0gICAgICAgICAgICBjb250 aW51ZTsKLSAgICAgICAgcGwzZVtpXSA9IHVuYWRqdXN0X2d1ZXN0X2wzZShw bDNlW2ldLCBkKTsKLSAgICB9IHdoaWxlICggaS0tICk7CisgICAgICAgIGlm ICggcmMgPT0gMCApCisgICAgICAgICAgICBwbDNlW2ldID0gdW5hZGp1c3Rf Z3Vlc3RfbDNlKHBsM2VbaV0sIGQpOworCisgICAgICAgIGlmICggIWktLSAp CisgICAgICAgICAgICBicmVhazsKKworICAgICAgICBpZiAoIGh5cGVyY2Fs bF9wcmVlbXB0X2NoZWNrKCkgKQorICAgICAgICB7CisgICAgICAgICAgICBy YyA9IC1FSU5UUjsKKyAgICAgICAgICAgIGJyZWFrOworICAgICAgICB9Cisg ICAgfQogCiAgICAgdW5tYXBfZG9tYWluX3BhZ2UocGwzZSk7CiAK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:16 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUq-0001vk-T0; Fri, 25 Oct 2019 11:11:08 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUp-0001uk-ES for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:07 +0000 X-Inumbo-ID: 15661916-f718-11e9-94c4-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 15661916-f718-11e9-94c4-12813bfff9fa; Fri, 25 Oct 2019 11:10:42 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUK-0001WO-V6; Fri, 25 Oct 2019 11:10:36 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUK-0002k5-SN; Fri, 25 Oct 2019 11:10:36 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:36 +0000 Subject: [Xen-announce] Xen Security Advisory 291 v3 (CVE-2019-17345) - x86/PV: page type reference counting issue with failed IOMMU update X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17345 / XSA-291 version 3 x86/PV: page type reference counting issue with failed IOMMU update UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= When an x86 PV domain has a passed-through PCI device assigned, IOMMU mappings may need to be updated when the type of a particular page changes. Such an IOMMU operation may fail. In the event of failure, while at present the affected guest would be forcibly crashed, the already recorded additional type reference was not dropped again. This causes a bug check to trigger while cleaning up after the crashed guest. IMPACT ====== Malicious or buggy x86 PV guest kernels can mount a Denial of Service (DoS) attack affecting the whole system. VULNERABLE SYSTEMS ================== Xen versions from 4.8 onwards are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. Only guests which are assigned a physical device can exploit this vulnerability. Guests which are not assigned physical devices cannot exploit this vulnerability. MITIGATION ========== Running only HVM or PVH guests avoids the vulnerability. Not passing through PCI devices to PV guests also avoids the vulnerability. CREDITS ======= This issue was discovered by Igor Druzhinin and Andrew Cooper of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa291.patch xen-unstable xsa291-4.11.patch Xen 4.11.x, Xen 4.10.x xsa291-4.9.patch Xen 4.9.x, Xen 4.8.x $ sha256sum xsa291* 01883c11ae45a5771644270445e463538a61d98c66adbba852de74ccd272eae9 xsa291.meta fb5f2a75ba113f21e9cb2dfbc22520495c69a4fef631c030a4834c680045e587 xsa291.patch 299bb4913e7ddb46ce90f415f91ee5e5480050631281c87e1a764b66fb116d89 xsa291-4.9.patch 16087ba5c59b9644f4f61c0c7fa124d9e04e88089b235aaae91daa04cdf1b8a1 xsa291-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y1+EMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZlLUIAIIHkQgn80yjzaDnIGp0iFhcoTjDGlwk47MaQiJ2 QbmVstpVbg4ZUuPmxJ6eWTJXoMbdelthA9klXX9zc0LWEOrMwWeykAxkWB8uVj+b URN6fJrLu73U2tqjmPT/P63FVgETXDbFGQcjsSkZ17VHcblmsysCUPmjLWn4r3Tc /lCXcEjwHYV2HnYUBrXO2biDVChRt3ClLhJZW9pfvI8hIzCqL+tdtNuvvqVSwR3Y SzR75k2lKwkmHQju2rpL00mNsyHsUOl3tDVeHTQa9V7yW4WO4vSb83oZExz9ChgH g9ro6epGfGYCQYB9mNSaQbOM3LhOrWeiR1i3nUcR0qRG1wY= =r9AC -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa291.meta" Content-Disposition: attachment; filename="xsa291.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTEsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAieGVuIgogIF0sCiAg IlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAgIlJlY2lwZXMiOiB7 CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiYTAx NmI4ZjIwN2M3YTNmZThiZGQyYjZmN2MwODAwMjBlM2UxYzgyMyIsCiAgICAg ICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAg ICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAg ICAgICAgICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5MS00LjExLnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjExIjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI4N2Y1MWJmMzY2Y2E3OWI5OGUxZTIwMWJmOWJkN2E5YzE2 NDYzMWUyIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy ODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAg ICAgICAyODgsCiAgICAgICAgICAgIDI5MAogICAgICAgICAgXSwKICAgICAg ICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjkxLTQuMTEucGF0 Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAg IjQuOCI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsK ICAgICAgICAgICJTdGFibGVSZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODll NjgxODg2NTIwNzllM2JmYWE2NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsK ICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAg IDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAgICAyOTAKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI5MS00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9 CiAgICB9LAogICAgIjQuOSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAg ICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiZjVhY2Y5N2Y2 NjljNmJjOTY5MWUwMzc3MWFkMDY3MDNkYTc3ZTBkNSIsCiAgICAgICAgICAi UHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUs CiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAg ICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI5MS00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1 NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAog ICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAg Mjg4LAogICAgICAgICAgICAyOTAKICAgICAgICAgIF0sCiAgICAgICAgICAi UGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI5MS5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa291.patch" Content-Disposition: attachment; filename="xsa291.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjgwOCw2ICsyODA4LDEzIEBAIHN0YXRpYyBpbnQg X2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBBR0VfT1JERVJfNEss CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBJT01NVUZfcmVhZGFibGUgfAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgSU9NTVVGX3dyaXRhYmxlKTsKKworICAg ICAgICAgICAgaWYgKCB1bmxpa2VseShpb21tdV9yZXQpICkKKyAgICAgICAg ICAgIHsKKyAgICAgICAgICAgICAgICBfcHV0X3BhZ2VfdHlwZShwYWdlLCBm YWxzZSwgTlVMTCk7CisgICAgICAgICAgICAgICAgcmMgPSBpb21tdV9yZXQ7 CisgICAgICAgICAgICAgICAgZ290byBvdXQ7CisgICAgICAgICAgICB9CiAg ICAgICAgIH0KICAgICB9CiAKQEAgLTI4MjIsMTIgKzI4MjksMTAgQEAgc3Rh dGljIGludCBfZ2V0X3BhZ2VfdHlwZShzdHJ1Y3QgcGFnZV9pbgogICAgICAg ICByYyA9IGFsbG9jX3BhZ2VfdHlwZShwYWdlLCB0eXBlLCBwcmVlbXB0aWJs ZSk7CiAgICAgfQogCisgb3V0OgogICAgIGlmICggKHggJiBQR1RfcGFydGlh bCkgJiYgIShueCAmIFBHVF9wYXJ0aWFsKSApCiAgICAgICAgIHB1dF9wYWdl KHBhZ2UpOwogCi0gICAgaWYgKCAhcmMgKQotICAgICAgICByYyA9IGlvbW11 X3JldDsKLQogICAgIHJldHVybiByYzsKIH0KIAo= --=separator Content-Type: application/octet-stream; name="xsa291-4.9.patch" Content-Disposition: attachment; filename="xsa291-4.9.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjg5Miw2ICsyODkyLDEzIEBAIHN0YXRpYyBpbnQg X19nZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2kKICAgICAgICAgICAgICAg ICBpb21tdV9yZXQgPSBpb21tdV9tYXBfcGFnZShkLCBtZm5fdG9fZ21mbihk LCBwYWdlX3RvX21mbihwYWdlKSksCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSU9NTVVG X3JlYWRhYmxlfElPTU1VRl93cml0YWJsZSk7CisKKyAgICAgICAgICAgIGlm ICggdW5saWtlbHkoaW9tbXVfcmV0KSApCisgICAgICAgICAgICB7CisgICAg ICAgICAgICAgICAgX3B1dF9wYWdlX3R5cGUocGFnZSwgZmFsc2UsIE5VTEwp OworICAgICAgICAgICAgICAgIHJjID0gaW9tbXVfcmV0OworICAgICAgICAg ICAgICAgIGdvdG8gb3V0OworICAgICAgICAgICAgfQogICAgICAgICB9CiAg ICAgfQogCkBAIC0yOTA2LDEyICsyOTEzLDEwIEBAIHN0YXRpYyBpbnQgX19n ZXRfcGFnZV90eXBlKHN0cnVjdCBwYWdlX2kKICAgICAgICAgcmMgPSBhbGxv Y19wYWdlX3R5cGUocGFnZSwgdHlwZSwgcHJlZW1wdGlibGUpOwogICAgIH0K IAorIG91dDoKICAgICBpZiAoICh4ICYgUEdUX3BhcnRpYWwpICYmICEobngg JiBQR1RfcGFydGlhbCkgKQogICAgICAgICBwdXRfcGFnZShwYWdlKTsKIAot ICAgIGlmICggIXJjICkKLSAgICAgICAgcmMgPSBpb21tdV9yZXQ7Ci0KICAg ICByZXR1cm4gcmM7CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa291-4.11.patch" Content-Disposition: attachment; filename="xsa291-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IGRvbid0IHJldGFpbiBwYWdlIHR5cGUgcmVmZXJlbmNlIHdo ZW4gSU9NTVUgb3BlcmF0aW9uIGZhaWxzCgpUaGUgSU9NTVUgdXBkYXRlIGlu IF9nZXRfcGFnZV90eXBlKCkgaGFwcGVucyBiZXR3ZWVuIHJlY29yZGluZyBv ZiB0aGUKbmV3IHJlZmVyZW5jZSBhbmQgdmFsaWRhdGlvbiBvZiB0aGUgcGFn ZSBmb3IgaXRzIG5ldyB0eXBlIChpZgpuZWNlc3NhcnkpLiBJZiB0aGUgSU9N TVUgb3BlcmF0aW9uIGZhaWxzLCB0aGVyZSdzIG5vIHBvaW50IGluIGFjdHVh bGx5CmNhcnJ5aW5nIG91dCB2YWxpZGF0aW9uLiBGdXJ0aGVybW9yZSwgd2l0 aCB0aGlzIHJlc3VsdGluZyBpbiBmYWlsdXJlCmdldHRpbmcgaW5kaWNhdGVk IHRvIHRoZSBjYWxsZXIsIHRoZSByZWNvcmRlZCB0eXBlIHJlZmVyZW5jZSBh bHNvIG5lZWRzCnRvIGJlIGRyb3BwZWQgYWdhaW4uCgpOb3RlIHRoYXQgaW4g Y2FzZSBvZiBmYWlsdXJlIG9mIGFsbG9jX3BhZ2VfdHlwZSgpIHRoZXJlJ3Mg bm8gbmVlZCB0bwp1bmRvIHRoZSBJT01NVSBvcGVyYXRpb246IE9ubHkgc3Bl Y2lhbCB0eXBlcyBnZXQgaGFuZGVkIHRvIHRoZSBmdW5jdGlvbi4KVGhlIGZ1 bmN0aW9uLCB1cG9uIGZhaWx1cmUsIGNsZWFycyAtPnUuaW51c2UudHlwZV9p bmZvLCBlZmZlY3RpdmVseQpjb252ZXJ0aW5nIHRoZSBwYWdlIHRvIFBHVF9u b25lLiBUaGUgSU9NTVUgbWFwcGluZywgaG93ZXZlciwgc29sZWx5CmRlcGVu ZHMgb24gd2hldGhlciB0aGUgdHlwZSBpcyBQR1Rfd3JpdGFibGVfcGFnZS4K ClRoaXMgaXMgWFNBLTI5MS4KClJlcG9ydGVkLWJ5OiBJZ29yIERydXpoaW5p biA8aWdvci5kcnV6aGluaW5AY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2 aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJp eC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJj aC94ODYvbW0uYwpAQCAtMjc1MSw2ICsyNzUxLDEzIEBAIHN0YXRpYyBpbnQg X2dldF9wYWdlX3R5cGUoc3RydWN0IHBhZ2VfaW4KICAgICAgICAgICAgICAg ICBpb21tdV9yZXQgPSBpb21tdV9tYXBfcGFnZShkLCBnZm5feChnZm4pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1m bl94KHBhZ2VfdG9fbWZuKHBhZ2UpKSwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBJT01NVUZfcmVhZGFibGV8SU9NTVVG X3dyaXRhYmxlKTsKKworICAgICAgICAgICAgaWYgKCB1bmxpa2VseShpb21t dV9yZXQpICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBfcHV0 X3BhZ2VfdHlwZShwYWdlLCBmYWxzZSwgTlVMTCk7CisgICAgICAgICAgICAg ICAgcmMgPSBpb21tdV9yZXQ7CisgICAgICAgICAgICAgICAgZ290byBvdXQ7 CisgICAgICAgICAgICB9CiAgICAgICAgIH0KICAgICB9CiAKQEAgLTI3NjUs MTIgKzI3NzIsMTAgQEAgc3RhdGljIGludCBfZ2V0X3BhZ2VfdHlwZShzdHJ1 Y3QgcGFnZV9pbgogICAgICAgICByYyA9IGFsbG9jX3BhZ2VfdHlwZShwYWdl LCB0eXBlLCBwcmVlbXB0aWJsZSk7CiAgICAgfQogCisgb3V0OgogICAgIGlm ICggKHggJiBQR1RfcGFydGlhbCkgJiYgIShueCAmIFBHVF9wYXJ0aWFsKSAp CiAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOwogCi0gICAgaWYgKCAhcmMgKQot ICAgICAgICByYyA9IGlvbW11X3JldDsKLQogICAgIHJldHVybiByYzsKIH0K IAo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:16 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUc-0001jb-AH; Fri, 25 Oct 2019 11:10:54 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUa-0001ic-Hj for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:10:52 +0000 X-Inumbo-ID: 136f2170-f718-11e9-94c4-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 136f2170-f718-11e9-94c4-12813bfff9fa; Fri, 25 Oct 2019 11:10:39 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUH-0001Vt-79; Fri, 25 Oct 2019 11:10:33 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUH-0002hA-3u; Fri, 25 Oct 2019 11:10:33 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:33 +0000 Subject: [Xen-announce] Xen Security Advisory 287 v3 (CVE-2019-17342) - x86: steal_page violates page_struct access discipline X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17342 / XSA-287 version 3 x86: steal_page violates page_struct access discipline UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= Xen's reference counting rules were designed to allow pages to change owner and state without requiring a global lock. Each page has a page structure, and a very specific set of access disciplines must be observed to ensure that pages are freed properly, and that no writable mappings exist for PV pagetable pages. Unfortunately, when the XENMEM_exchange hypercall was introduced, these access disciplines were violated, opening up several potential race conditions. IMPACT ====== A single PV guest can leak arbitrary amounts of memory, leading to a denial of service. A cooperating pair of PV and HVM/PVH guests can get a writable pagetable entry, leading to information disclosure or privilege escalation. Privilege escalation attacks using only a single PV guest or a pair of PV guests have not been ruled out. Note that both of these attacks require very precise timing, which may be difficult to exploit in practice. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. Only systems which run PV guests are vulnerable. Systems which run only HVM/PVH guests are not vulnerable. MITIGATION ========== Running only HVM or PVH guests will avoid these vulnerabilities. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa287.patch xen-unstable xsa287-4.11.patch Xen 4.11.x xsa287-4.10.patch Xen 4.10.x xsa287-4.9.patch Xen 4.9.x xsa287-4.8.patch Xen 4.8.x xsa287-4.7.patch Xen 4.7.x $ sha256sum xsa287* ae2b9261e26df871693478629c63970ba30817ee1dcb2266b89d8b067833c1b3 xsa287.meta 7de1b886d69dd7c497f88d41adf9a6f7cf9a305fd8ae9d714e1125e2a22208ab xsa287.patch 55f40f2f9bb41c85ac80dac775352e28b25fada80dae574e9d10300d5e2b91ce xsa287-4.7.patch 57312ff131eb6b51235723e862adf42ad3529ed13135375875c054fa0b55f80b xsa287-4.8.patch 34f4b835766a38bcf4066ccbab74676eda176e15ed2a6bd7884678a64507f89a xsa287-4.9.patch c7eaf8a325011dda84b02ee097ddbc7b5f2f4d3399de545a3a7b14e2d23f4278 xsa287-4.10.patch 6793315f714a249a4fad12b36559640b2f97f19f5b85f0d58694c6e78aa3d567 xsa287-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y18cMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZMbcIAKcMpCX29ANW9/W2cnGremzicicGAQW9KvmZVK5e weLBItv9pTqIGeVm71/X2dXt5KeRryh+Py53zYtUhy4pFQXQAezEzlRs+Y4TtX3l +XVsfDFqks+bfyduBKMerwJpqr2Hd3DOdvir8iSqH2jHLLd5JqTYho+m0L0HPD9J Smn43rwurMChSjSFR4H+TnrOcX/1iUWgj3BVUkswGn3CrUdBJFe5mp6QeoYlyiL1 CN6rmx5+CWLvBTwMkEiA8/3GX322qv4f2P0woOnaFW+aNgj1VRcyB2l1V0ParYYw 0Yfj32XNIhdzNfUanenRAUNnTYSzVFFdbTMgV2sgwZjXNgE= =7jA5 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa287.meta" Content-Disposition: attachment; filename="xsa287.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODcsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjg3LTQuMTAucGF0Y2giCiAgICAg ICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7 CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAg ICAiU3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3 YTljMTY0NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAg ICAgIDI4NCwKICAgICAgICAgICAgMjg1CiAgICAgICAgICBdLAogICAgICAg ICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODctNC4xMS5wYXRj aCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAi NC43IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewog ICAgICAgICAgIlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlh YWJiOWFmMWFjY2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwog ICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQogICAgICAgICAgXSwK ICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg3LTQu Ny5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0s CiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVu IjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI5MDhlNzY4ZmFlNDlhOGRi MDA4OWU2ODE4ODY1MjA3OWUzYmZhYTY2IiwKICAgICAgICAgICJQcmVyZXFz IjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh Mjg3LTQuOC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC45IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAg ICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2 OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2RhNzdlMGQ1IiwKICAgICAgICAgICJQ cmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NQog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg3LTQuOS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAg ICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiUmVjaXBlcyI6 IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICIy NGQ1MjgyNTI3ZjQ2NDc5MDdiMzU3MjgyMGI1MzM1YzE1Y2QwMzU2IiwKICAg ICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAg ICAgIDI4NQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMjg3LnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa287.patch" Content-Disposition: attachment; filename="xsa287.patch" Content-Transfer-Encoding: base64 RnJvbSBjMGI4OWMzZDNhNThiN2M4ODUzMmIzNmI5ZDEyNzdjMjc0NTU0MzEz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDdlYzU5NTRiMDMuLjRkM2Ix N2YzYTggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTg5LDcwICszOTg5LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiAjaWZkZWYgQ09ORklHX1BWCmRpZmYgLS1naXQg YS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29tbW9uL2dyYW50 X3RhYmxlLmMKaW5kZXggZGIyMmQ2YjQ0MS4uODA3MjhlYTU3ZCAxMDA2NDQK LS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCisrKyBiL3hlbi9jb21t b24vZ3JhbnRfdGFibGUuYwpAQCAtMjE1Nyw3ICsyMTU3LDcgQEAgZ250dGFi X3RyYW5zZmVyKAogI2lmZGVmIENPTkZJR19YODYKICAgICAgICAgICAgIHB1 dF9nZm4oZCwgZ29wLm1mbik7CiAjZW5kaWYKLSAgICAgICAgICAgIHBhZ2Ut PmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQR0NfYWxsb2NhdGVk KTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5 IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJlZV9kb21oZWFwX3Bh Z2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHliYWNrOwogICAgICAg ICB9CkBAIC0yMTgwLDEwICsyMTgwLDkgQEAgZ250dGFiX3RyYW5zZmVyKAog CiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKHBhZ2VfdG9fbWZuKG5l d19wYWdlKSwgbWZuKTsKIAotICAgICAgICAgICAgcGFnZS0+Y291bnRfaW5m byAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpOworICAgICAg ICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVhZHkgYmVlbiBjbGVh cmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgICAgIHBhZ2UgPSBuZXdfcGFnZTsKLSAgICAgICAgICAgIHBh Z2UtPmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwgMTsKICAgICAgICAg ICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAgICAgICB9CiAKQEAg LTIyMjMsMTIgKzIyMjIsMTcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAg ICAgKi8KICAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAgICAgICAgIG9rYXkgPSBnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNm ZXIoZSwgZCwgZ29wLnJlZik7Ci0gICAgICAgIHNwaW5fbG9jaygmZS0+cGFn ZV9hbGxvY19sb2NrKTsKIAotICAgICAgICBpZiAoIHVubGlrZWx5KCFva2F5 KSB8fCB1bmxpa2VseShlLT5pc19keWluZykgKQorICAgICAgICBpZiAoIHVu bGlrZWx5KCFva2F5IHx8IGFzc2lnbl9wYWdlcyhlLCBwYWdlLCAwLCBNRU1G X25vX3JlZmNvdW50KSkgKQogICAgICAgICB7Ci0gICAgICAgICAgICBib29s X3QgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUs IC0xKTsKKyAgICAgICAgICAgIGJvb2wgZHJvcF9kb21fcmVmOwogCisgICAg ICAgICAgICAvKgorICAgICAgICAgICAgICogTmVlZCB0byBncmFiIHRoaXMg YWdhaW4gdG8gc2FmZWx5IGZyZWUgb3VyICJyZXNlcnZlZCIKKyAgICAgICAg ICAgICAqIHBhZ2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAgICAgICAgICAgICAq LworICAgICAgICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2sp OworICAgICAgICAgICAgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3Rf dG90X3BhZ2VzKGUsIC0xKTsKICAgICAgICAgICAgIHNwaW5fdW5sb2NrKCZl LT5wYWdlX2FsbG9jX2xvY2spOwogCiAgICAgICAgICAgICBpZiAoIG9rYXkg LyogaS5lLiBlLT5pc19keWluZyBkdWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlm KCkgKi8gKQpAQCAtMjI0MSwxMCArMjI0NSw2IEBAIGdudHRhYl90cmFuc2Zl cigKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKICAg ICAgICAgfQogCi0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAm ZS0+cGFnZV9saXN0KTsKLSAgICAgICAgcGFnZV9zZXRfb3duZXIocGFnZSwg ZSk7Ci0KLSAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAjaWZkZWYgQ09ORklHX1g4NgogICAgICAgICBwdXRfZ2ZuKGQsIGdv cC5tZm4pOwogI2VuZGlmCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9y eS5jIGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCBiNmNmMDk1ODVjLi41 Mzg3NzY5OTg3IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5jCisr KyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTY5NCwyMCArNjk0LDIyIEBA IHN0YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFORExF X1BBUkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAgICAg KiBTdWNjZXNzISBCZXlvbmQgdGhpcyBwb2ludCB3ZSBjYW5ub3QgZmFpbCBm b3IgdGhpcyBjaHVuay4KICAgICAgICAgICovCiAKLSAgICAgICAgLyogRGVz dHJveSBmaW5hbCByZWZlcmVuY2UgdG8gZWFjaCBpbnB1dCBwYWdlLiAqLwor ICAgICAgICAvKgorICAgICAgICAgKiBUaGVzZSBwYWdlcyBoYXZlIGFscmVh ZHkgaGFkIG93bmVyIGFuZCByZWZlcmVuY2UgY2xlYXJlZC4KKyAgICAgICAg ICogRG8gdGhlIGZpbmFsIHR3byBzdGVwczogUmVtb3ZlIGZyb20gdGhlIHBo eXNtYXAsIGFuZCBmcmVlCisgICAgICAgICAqIHRoZW0uCisgICAgICAgICAq LwogICAgICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9o ZWFkKCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICB7CiAgICAgICAgICAg ICB1bnNpZ25lZCBsb25nIGdmbjsKIAotICAgICAgICAgICAgaWYgKCAhdGVz dF9hbmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRf aW5mbykgKQotICAgICAgICAgICAgICAgIEJVRygpOwogICAgICAgICAgICAg bWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICBnZm4gPSBt Zm5fdG9fZ21mbihkLCBtZm5feChtZm4pKTsKICAgICAgICAgICAgIC8qIFBh Z2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUgKi8KICAgICAgICAgICAgIEJVR19P TihTSEFSRURfTTJQKGdmbikpOwogICAgICAgICAgICAgaWYgKCBndWVzdF9w aHlzbWFwX3JlbW92ZV9wYWdlKGQsIF9nZm4oZ2ZuKSwgbWZuLCAwKSApCiAg ICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQpOwotICAgICAgICAgICAg cHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFn ZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAgIC8qIEFzc2lnbiBlYWNo IG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICovCkBAIC03ODAsMTMgKzc4 MiwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNU X0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3QpIGFyZykKICAg ICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAqLwogIGZhaWw6Ci0gICAg LyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3Rl YWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2lnbiBhbnkgaW5wdXQgcGFn ZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRoYXQgaWYgdGhlIGFzc2ln bgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBvbiB0aGUgaG9vayBmb3Ig ZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUgYWxyZWFkeQorICAgICAq IGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAgKi8KICAgICB3aGlsZSAo IChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFkKCZpbl9jaHVua19saXN0 KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdlcyhkLCBwYWdlLCAwLCBN RU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIEJV R19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAgICAgaWYgKCB0ZXN0X2Fu ZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZwYWdlLT5jb3VudF9pbmZv KSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAg ICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAg ZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyBi L3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4IGY3MWQzYmI3YTEuLmJl NDQxNTgwMzMgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCkBAIC0yMjc5LDcgKzIy NzksNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAgIGZvciAoIGkgPSAwOyBp IDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsKICAgICAgICAgQVNTRVJU KHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVMTCk7Ci0gICAgICAgIEFT U0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdDX2FsbG9jYXRlZCB8IDEp KSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tpXS5jb3VudF9pbmZvKTsK ICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ldLCBkKTsKICAgICAgICAg c21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBtdXN0IGJlIHZpc2libGUg YmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAgICAgICAgcGdbaV0uY291 bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwotLSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.7.patch" Content-Disposition: attachment; filename="xsa287-4.7.patch" Content-Transfer-Encoding: base64 RnJvbSA2ZjU5YmNlMDA4MWU2MDkxMjI2NWY2ZTI3MzQzZWQ1NWE5YzMwNjhk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCBjOWM2ZmM5ZGM4Li40N2Y0YWE0ZjZhIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDcxNyw2OSArNDcxNywxMDUgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgTUVNX0xPRygi QmFkIHBhZ2UgJWx4OiBlZD0lZCBzZD0lZCBjYWY9JTA4bHggdGFmPSUiIFBS dHlwZV9pbmZvLAogICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksIGQt PmRvbWFpbl9pZCwKICAgICAgICAgICAgIG93bmVyID8gb3duZXItPmRvbWFp bl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJu IC0xOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBfX2RvX3Vw ZGF0ZV92YV9tYXBwaW5nKApkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFu dF90YWJsZS5jIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IGFk NDRiOTYzMDMuLjcwOWUzODcxZjUgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v Z3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMK QEAgLTE5ODUsNyArMTk4NSw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGUpOwogICAgICAgICBwdXRfZ2Zu X2FuZF9jb3B5YmFjazoKICAgICAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1m bik7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9IH4oUEdDX2Nv dW50X21hc2t8UEdDX2FsbG9jYXRlZCk7CisgICAgICAgICAgICAvKiBUaGUg Y291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVuIGNsZWFuZWQgKi8KICAgICAg ICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAg Z290byBjb3B5YmFjazsKICAgICAgICAgfQpAQCAtMjAwOCwxMCArMjAwOCw5 IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgICAgICAgICAgY29weV9kb21h aW5fcGFnZShfbWZuKHBhZ2VfdG9fbWZuKG5ld19wYWdlKSksIF9tZm4obWZu KSk7CiAKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0Nf Y291bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRo ZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5IGJlZW4gY2xlYXJlZCAqLwogICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAg ICBwYWdlID0gbmV3X3BhZ2U7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7CiAgICAgICAgICAgICBtZm4gPSBw YWdlX3RvX21mbihwYWdlKTsKICAgICAgICAgfQogCkBAIC0yMDUxLDEyICsy MDUwLDE3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICovCiAgICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQsIGdv cC5yZWYpOwotICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSghb2theSkgfHwgdW5saWtl bHkoZS0+aXNfZHlpbmcpICkKKyAgICAgICAgaWYgKCB1bmxpa2VseSghb2th eSB8fCBhc3NpZ25fcGFnZXMoZSwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3Vu dCkpICkKICAgICAgICAgewotICAgICAgICAgICAgYm9vbF90IGRyb3BfZG9t X3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7CisgICAg ICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmOwogCisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogTmVlZCB0byBncmFiIHRoaXMgYWdhaW4gdG8g c2FmZWx5IGZyZWUgb3VyICJyZXNlcnZlZCIKKyAgICAgICAgICAgICAqIHBh Z2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAgICAgICAgICAgICAqLworICAgICAg ICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOworICAgICAg ICAgICAgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2Vz KGUsIC0xKTsKICAgICAgICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2Fs bG9jX2xvY2spOwogCiAgICAgICAgICAgICBpZiAoIG9rYXkgLyogaS5lLiBl LT5pc19keWluZyBkdWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlmKCkgKi8gKQpA QCAtMjA2OSwxMCArMjA3Myw2IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKICAgICAgICAgfQog Ci0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmZS0+cGFnZV9s aXN0KTsKLSAgICAgICAgcGFnZV9zZXRfb3duZXIocGFnZSwgZSk7Ci0KLSAg ICAgICAgc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAg ICAgIHB1dF9nZm4oZCwgZ29wLm1mbik7CiAKICAgICAgICAgVFJBQ0VfMUQo VFJDX01FTV9QQUdFX0dSQU5UX1RSQU5TRkVSLCBlLT5kb21haW5faWQpOwpk aWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9tZW1vcnkuYyBiL3hlbi9jb21tb24v bWVtb3J5LmMKaW5kZXggMThjZTYyYTcwNS4uOTU4MWY4MTkwMiAxMDA2NDQK LS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29tbW9uL21l bW9yeS5jCkBAIC01ODksMjAgKzU4OSwyMiBAQCBzdGF0aWMgbG9uZyBtZW1v cnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5 X2V4Y2hhbmdlX3QpIGFyZykKICAgICAgICAgICogU3VjY2VzcyEgQmV5b25k IHRoaXMgcG9pbnQgd2UgY2Fubm90IGZhaWwgZm9yIHRoaXMgY2h1bmsuCiAg ICAgICAgICAqLwogCi0gICAgICAgIC8qIERlc3Ryb3kgZmluYWwgcmVmZXJl bmNlIHRvIGVhY2ggaW5wdXQgcGFnZS4gKi8KKyAgICAgICAgLyoKKyAgICAg ICAgICogVGhlc2UgcGFnZXMgaGF2ZSBhbHJlYWR5IGhhZCBvd25lciBhbmQg cmVmZXJlbmNlIGNsZWFyZWQuCisgICAgICAgICAqIERvIHRoZSBmaW5hbCB0 d28gc3RlcHM6IFJlbW92ZSBmcm9tIHRoZSBwaHlzbWFwLCBhbmQgZnJlZQor ICAgICAgICAgKiB0aGVtLgorICAgICAgICAgKi8KICAgICAgICAgd2hpbGUg KCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlz dCkpICkKICAgICAgICAgewogICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBn Zm47CiAKLSAgICAgICAgICAgIGlmICggIXRlc3RfYW5kX2NsZWFyX2JpdChf UEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNvdW50X2luZm8pICkKLSAgICAgICAg ICAgICAgICBCVUcoKTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgICAgICAgICAgZ2ZuID0gbWZuX3RvX2dtZm4oZCwgbWZu KTsKICAgICAgICAgICAgIC8qIFBhZ2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUg Ki8KICAgICAgICAgICAgIEJVR19PTihTSEFSRURfTTJQKGdmbikpOwogICAg ICAgICAgICAgaWYgKCBndWVzdF9waHlzbWFwX3JlbW92ZV9wYWdlKGQsIGdm biwgbWZuLCAwKSApCiAgICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQp OwotICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAg IC8qIEFzc2lnbiBlYWNoIG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICov CkBAIC02NzQsMTMgKzY3NiwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhj aGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hh bmdlX3QpIGFyZykKICAgICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAq LwogIGZhaWw6Ci0gICAgLyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdl IG1hbmFnZWQgdG8gc3RlYWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2ln biBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRo YXQgaWYgdGhlIGFzc2lnbgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBv biB0aGUgaG9vayBmb3IgZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUg YWxyZWFkeQorICAgICAqIGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAg Ki8KICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdl cyhkLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsK ICAgICAgICAgICAgIEJVR19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAg ICAgaWYgKCB0ZXN0X2FuZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZw YWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2Uo cGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgfQogCiAgZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4 IGQwMjc4MTlmN2IuLjU5ZmE1Yjk3NGYgMTAwNjQ0Ci0tLSBhL3hlbi9jb21t b24vcGFnZV9hbGxvYy5jCisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CkBAIC0xNzgwLDcgKzE3ODAsNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAg IGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVM TCk7Ci0gICAgICAgIEFTU0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdD X2FsbG9jYXRlZCB8IDEpKSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tp XS5jb3VudF9pbmZvKTsKICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ld LCBkKTsKICAgICAgICAgc21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBt dXN0IGJlIHZpc2libGUgYmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAg ICAgICAgcGdbaV0uY291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.8.patch" Content-Disposition: attachment; filename="xsa287-4.8.patch" Content-Transfer-Encoding: base64 RnJvbSBkNzMzMjNmZWQ3OGU0YmRhMTE2NDRiN2FhOWI5MDJhNzVmM2Q3MDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCAyYjkzZWZiNTA0Li5lZjNiMjA4ZmIwIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDcyMiw2OSArNDcyMiwxMDUgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgTUVNX0xPRygi QmFkIHBhZ2UgJWx4OiBlZD0lZCBzZD0lZCBjYWY9JTA4bHggdGFmPSUiIFBS dHlwZV9pbmZvLAogICAgICAgICAgICAgcGFnZV90b19tZm4ocGFnZSksIGQt PmRvbWFpbl9pZCwKICAgICAgICAgICAgIG93bmVyID8gb3duZXItPmRvbWFp bl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvLCBwYWdlLT51LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJu IC0xOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBfX2RvX3Vw ZGF0ZV92YV9tYXBwaW5nKApkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFu dF90YWJsZS5jIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IDI3 Y2NlMTc2YTMuLjAzZmUzOGFjYjUgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v Z3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMK QEAgLTE5ODUsNyArMTk4NSw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAg ICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGUpOwogICAgICAgICBwdXRfZ2Zu X2FuZF9jb3B5YmFjazoKICAgICAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1m bik7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9IH4oUEdDX2Nv dW50X21hc2t8UEdDX2FsbG9jYXRlZCk7CisgICAgICAgICAgICAvKiBUaGUg Y291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVuIGNsZWFuZWQgKi8KICAgICAg ICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAg Z290byBjb3B5YmFjazsKICAgICAgICAgfQpAQCAtMjAwOCwxMCArMjAwOCw5 IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgICAgICAgICAgY29weV9kb21h aW5fcGFnZShfbWZuKHBhZ2VfdG9fbWZuKG5ld19wYWdlKSksIF9tZm4obWZu KSk7CiAKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0Nf Y291bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRo ZSBjb3VudF9pbmZvIGhhcyBhbHJlYWR5IGJlZW4gY2xlYXJlZCAqLwogICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAg ICBwYWdlID0gbmV3X3BhZ2U7Ci0gICAgICAgICAgICBwYWdlLT5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7CiAgICAgICAgICAgICBtZm4gPSBw YWdlX3RvX21mbihwYWdlKTsKICAgICAgICAgfQogCkBAIC0yMDUxLDEyICsy MDUwLDE3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICovCiAgICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQsIGdv cC5yZWYpOwotICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7CiAKLSAgICAgICAgaWYgKCB1bmxpa2VseSghb2theSkgfHwgdW5saWtl bHkoZS0+aXNfZHlpbmcpICkKKyAgICAgICAgaWYgKCB1bmxpa2VseSghb2th eSB8fCBhc3NpZ25fcGFnZXMoZSwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3Vu dCkpICkKICAgICAgICAgewotICAgICAgICAgICAgYm9vbF90IGRyb3BfZG9t X3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7CisgICAg ICAgICAgICBib29sIGRyb3BfZG9tX3JlZjsKIAorICAgICAgICAgICAgLyoK KyAgICAgICAgICAgICAqIE5lZWQgdG8gZ3JhYiB0aGlzIGFnYWluIHRvIHNh ZmVseSBmcmVlIG91ciAicmVzZXJ2ZWQiCisgICAgICAgICAgICAgKiBwYWdl IGluIHRoZSBwYWdlIHRvdGFsCisgICAgICAgICAgICAgKi8KKyAgICAgICAg ICAgIHNwaW5fbG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKKyAgICAgICAg ICAgIGRyb3BfZG9tX3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhl LCAtMSk7CiAgICAgICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKIAogICAgICAgICAgICAgaWYgKCBva2F5IC8qIGkuZS4gZS0+ aXNfZHlpbmcgZHVlIHRvIHRoZSBzdXJyb3VuZGluZyBpZigpICovICkKQEAg LTIwNjksMTAgKzIwNzMsNiBAQCBnbnR0YWJfdHJhbnNmZXIoCiAgICAgICAg ICAgICBnb3RvIHVubG9ja19hbmRfY29weWJhY2s7CiAgICAgICAgIH0KIAot ICAgICAgICBwYWdlX2xpc3RfYWRkX3RhaWwocGFnZSwgJmUtPnBhZ2VfbGlz dCk7Ci0gICAgICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIGUpOwotCi0gICAg ICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogICAgICAg ICBwdXRfZ2ZuKGQsIGdvcC5tZm4pOwogCiAgICAgICAgIFRSQUNFXzFEKFRS Q19NRU1fUEFHRV9HUkFOVF9UUkFOU0ZFUiwgZS0+ZG9tYWluX2lkKTsKZGlm ZiAtLWdpdCBhL3hlbi9jb21tb24vbWVtb3J5LmMgYi94ZW4vY29tbW9uL21l bW9yeS5jCmluZGV4IGNkYTc5MTg1YjkuLjFjMGNkMGUzMTQgMTAwNjQ0Ci0t LSBhL3hlbi9jb21tb24vbWVtb3J5LmMKKysrIGIveGVuL2NvbW1vbi9tZW1v cnkuYwpAQCAtNjExLDIwICs2MTEsMjIgQEAgc3RhdGljIGxvbmcgbWVtb3J5 X2V4Y2hhbmdlKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX21lbW9yeV9l eGNoYW5nZV90KSBhcmcpCiAgICAgICAgICAqIFN1Y2Nlc3MhIEJleW9uZCB0 aGlzIHBvaW50IHdlIGNhbm5vdCBmYWlsIGZvciB0aGlzIGNodW5rLgogICAg ICAgICAgKi8KIAotICAgICAgICAvKiBEZXN0cm95IGZpbmFsIHJlZmVyZW5j ZSB0byBlYWNoIGlucHV0IHBhZ2UuICovCisgICAgICAgIC8qCisgICAgICAg ICAqIFRoZXNlIHBhZ2VzIGhhdmUgYWxyZWFkeSBoYWQgb3duZXIgYW5kIHJl ZmVyZW5jZSBjbGVhcmVkLgorICAgICAgICAgKiBEbyB0aGUgZmluYWwgdHdv IHN0ZXBzOiBSZW1vdmUgZnJvbSB0aGUgcGh5c21hcCwgYW5kIGZyZWUKKyAg ICAgICAgICogdGhlbS4KKyAgICAgICAgICovCiAgICAgICAgIHdoaWxlICgg KHBhZ2UgPSBwYWdlX2xpc3RfcmVtb3ZlX2hlYWQoJmluX2NodW5rX2xpc3Qp KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIHVuc2lnbmVkIGxvbmcgZ2Zu OwogCi0gICAgICAgICAgICBpZiAoICF0ZXN0X2FuZF9jbGVhcl9iaXQoX1BH Q19hbGxvY2F0ZWQsICZwYWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAg ICAgICAgQlVHKCk7CiAgICAgICAgICAgICBtZm4gPSBwYWdlX3RvX21mbihw YWdlKTsKICAgICAgICAgICAgIGdmbiA9IG1mbl90b19nbWZuKGQsIG1mbik7 CiAgICAgICAgICAgICAvKiBQYWdlcyB3ZXJlIHVuc2hhcmVkIGFib3ZlICov CiAgICAgICAgICAgICBCVUdfT04oU0hBUkVEX00yUChnZm4pKTsKICAgICAg ICAgICAgIGlmICggZ3Vlc3RfcGh5c21hcF9yZW1vdmVfcGFnZShkLCBfZ2Zu KGdmbiksIF9tZm4obWZuKSwgMCkgKQogICAgICAgICAgICAgICAgIGRvbWFp bl9jcmFzaChkKTsKLSAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOworICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIH0K IAogICAgICAgICAvKiBBc3NpZ24gZWFjaCBvdXRwdXQgcGFnZSB0byB0aGUg ZG9tYWluLiAqLwpAQCAtNjk3LDEzICs2OTksMTYgQEAgc3RhdGljIGxvbmcg bWVtb3J5X2V4Y2hhbmdlKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX21l bW9yeV9leGNoYW5nZV90KSBhcmcpCiAgICAgICogY2h1bmtzIHN1Y2NlZWRl ZC4KICAgICAgKi8KICBmYWlsOgotICAgIC8qIFJlYXNzaWduIGFueSBpbnB1 dCBwYWdlcyB3ZSBtYW5hZ2VkIHRvIHN0ZWFsLiAqLworICAgIC8qCisgICAg ICogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3Rl YWwuICBOQiB0aGF0IGlmIHRoZSBhc3NpZ24KKyAgICAgKiBmYWlscyBhZ2Fp biwgd2UncmUgb24gdGhlIGhvb2sgZm9yIGZyZWVpbmcgdGhlIHBhZ2UsIHNp bmNlIHdlJ3ZlIGFscmVhZHkKKyAgICAgKiBjbGVhcmVkIFBHQ19hbGxvY2F0 ZWQuCisgICAgICovCiAgICAgd2hpbGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9y ZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAgICAgaWYgKCBh c3NpZ25fcGFnZXMoZCwgcGFnZSwgMCwgTUVNRl9ub19yZWZjb3VudCkgKQog ICAgICAgICB7CiAgICAgICAgICAgICBCVUdfT04oIWQtPmlzX2R5aW5nKTsK LSAgICAgICAgICAgIGlmICggdGVzdF9hbmRfY2xlYXJfYml0KF9QR0NfYWxs b2NhdGVkLCAmcGFnZS0+Y291bnRfaW5mbykgKQotICAgICAgICAgICAgICAg IHB1dF9wYWdlKHBhZ2UpOworICAgICAgICAgICAgZnJlZV9kb21oZWFwX3Bh Z2UocGFnZSk7CiAgICAgICAgIH0KIAogIGR5aW5nOgpkaWZmIC0tZ2l0IGEv eGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgYi94ZW4vY29tbW9uL3BhZ2VfYWxs b2MuYwppbmRleCAyYjUzYTI1ZjFjLi44ZDQxYjVhZmZhIDEwMDY0NAotLS0g YS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9uL3Bh Z2VfYWxsb2MuYwpAQCAtMTc3MCw3ICsxNzcwLDcgQEAgaW50IGFzc2lnbl9w YWdlcygKICAgICBmb3IgKCBpID0gMDsgaSA8ICgxIDw8IG9yZGVyKTsgaSsr ICkKICAgICB7CiAgICAgICAgIEFTU0VSVChwYWdlX2dldF9vd25lcigmcGdb aV0pID09IE5VTEwpOwotICAgICAgICBBU1NFUlQoKHBnW2ldLmNvdW50X2lu Zm8gJiB+KFBHQ19hbGxvY2F0ZWQgfCAxKSkgPT0gMCk7CisgICAgICAgIEFT U0VSVCghcGdbaV0uY291bnRfaW5mbyk7CiAgICAgICAgIHBhZ2Vfc2V0X293 bmVyKCZwZ1tpXSwgZCk7CiAgICAgICAgIHNtcF93bWIoKTsgLyogRG9tYWlu IHBvaW50ZXIgbXVzdCBiZSB2aXNpYmxlIGJlZm9yZSB1cGRhdGluZyByZWZj bnQuICovCiAgICAgICAgIHBnW2ldLmNvdW50X2luZm8gPSBQR0NfYWxsb2Nh dGVkIHwgMTsKLS0gCjIuMjAuMQoK --=separator Content-Type: application/octet-stream; name="xsa287-4.9.patch" Content-Disposition: attachment; filename="xsa287-4.9.patch" Content-Transfer-Encoding: base64 RnJvbSBhNTE1NzVlZTNmNTc0YTczY2NiNzZiYTMxZTljNjZkMWYwMzRhNzMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpCYWNr cG9ydDogUmV0dXJuIC1FT1BOT1RTVVBQIGluIHBhZ2luZ19tb2RlX2V4dGVy bmFsKCkgZm9yIGNvbnNpc3RlbmN5LgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICAgICB8IDg2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0t LS0tLS0tLS0KIHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDIwICsrKysr LS0tLS0KIHhlbi9jb21tb24vbWVtb3J5LmMgICAgICB8IDE5ICsrKysrLS0t LQogeGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMgIHwgIDIgKy0KIDQgZmlsZXMg Y2hhbmdlZCwgODQgaW5zZXJ0aW9ucygrKSwgNDMgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYv bW0uYwppbmRleCAyOTgyZWVjNDNlLi40NzZlZjhlZTg1IDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpA QCAtNDc3NSw3MCArNDc3NSwxMDYgQEAgaW50IGRvbmF0ZV9wYWdlKAogICAg IHJldHVybiAtMTsKIH0KIAorLyoKKyAqIFN0ZWFsIHBhZ2Ugd2lsbCBhdHRl bXB0IHRvIHJlbW92ZSBgcGFnZWAgZnJvbSBkb21haW4gYGRgLiAgVXBvbgor ICogcmV0dXJuLCBgcGFnZWAgd2lsbCBiZSBpbiBhIHN0YXRlIHNpbWlsYXIg dG8gdGhlIHN0YXRlIG9mIGEgcGFnZQorICogcmV0dXJuZWQgZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2UoKSB3aXRoIE1FTUZfbm9fb3duZXIgc2V0OgorICog LSByZWZjb3VudCAwCisgKiAtIHR5cGUgY291bnQgY2xlYXJlZAorICogLSBv d25lciBOVUxMCisgKiAtIHBhZ2UgY2FjaGluZyBhdHRyaWJ1dGVzIGNsZWFu ZWQgdXAKKyAqIC0gcmVtb3ZlZCBmcm9tIHRoZSBkb21haW4ncyBwYWdlX2xp c3QKKyAqCisgKiBJZiBNRU1GX25vX3JlZmNvdW50IGlzIG5vdCBzZXQsIHRo ZSBkb21haW4ncyB0b3RfcGFnZXMgd2lsbCBiZQorICogYWRqdXN0ZWQuICBJ ZiB0aGlzIHJlc3VsdHMgaW4gdGhlIHBhZ2UgY291bnQgZmFsbGluZyB0byAw LAorICogcHV0X2RvbWFpbigpIHdpbGwgYmUgY2FsbGVkLgorICoKKyAqIFRo ZSBjYWxsZXIgc2hvdWxkIGVpdGhlciBjYWxsIGZyZWVfZG9taGVhcF9wYWdl KCkgdG8gZnJlZSB0aGUKKyAqIHBhZ2UsIG9yIGFzc2lnbl9wYWdlcygpIHRv IHB1dCBpdCBiYWNrIG9uIHNvbWUgZG9tYWluJ3MgcGFnZSBsaXN0LgorICov CiBpbnQgc3RlYWxfcGFnZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlLCB1bnNpZ25lZCBpbnQgbWVtZmxhZ3MpCiB7 CiAgICAgdW5zaWduZWQgbG9uZyB4LCB5OwogICAgIGJvb2xfdCBkcm9wX2Rv bV9yZWYgPSAwOwotICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKm93bmVyID0g ZG9tX3hlbjsKKyAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpvd25lcjsKKyAg ICBpbnQgcmM7CiAKICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGQp ICkKLSAgICAgICAgcmV0dXJuIC0xOwotCi0gICAgc3Bpbl9sb2NrKCZkLT5w YWdlX2FsbG9jX2xvY2spOworICAgICAgICByZXR1cm4gLUVPUE5PVFNVUFA7 CiAKLSAgICBpZiAoIGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgfHwgKChvd25l ciA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpKSAhPSBkKSApCisgICAgLyogR3Jh YiBhIHJlZmVyZW5jZSB0byBtYWtlIHN1cmUgdGhlIHBhZ2UgZG9lc24ndCBj aGFuZ2UgdW5kZXIgb3VyIGZlZXQgKi8KKyAgICByYyA9IC1FSU5WQUw7Cisg ICAgaWYgKCAhKG93bmVyID0gcGFnZV9nZXRfb3duZXJfYW5kX3JlZmVyZW5j ZShwYWdlKSkgKQogICAgICAgICBnb3RvIGZhaWw7CiAKKyAgICBpZiAoIG93 bmVyICE9IGQgfHwgaXNfeGVuX2hlYXBfcGFnZShwYWdlKSApCisgICAgICAg IGdvdG8gZmFpbF9wdXQ7CisKICAgICAvKgotICAgICAqIFdlIHJlcXVpcmUg dGhlcmUgaXMganVzdCBvbmUgcmVmZXJlbmNlIChQR0NfYWxsb2NhdGVkKS4g V2UgdGVtcG9yYXJpbHkKLSAgICAgKiBkcm9wIHRoaXMgcmVmZXJlbmNlIG5v dyBzbyB0aGF0IHdlIGNhbiBzYWZlbHkgc3dpenpsZSB0aGUgb3duZXIuCisg ICAgICogV2UgcmVxdWlyZSB0aGVyZSBhcmUgZXhhY3RseSB0d28gcmVmZXJl bmNlcyAtLSB0aGUgb25lIHdlIGp1c3QKKyAgICAgKiB0b29rLCBhbmQgUEdD X2FsbG9jYXRlZC4gV2UgdGVtcG9yYXJpbHkgZHJvcCBib3RoIHRoZXNlCisg ICAgICogcmVmZXJlbmNlcyBzbyB0aGF0IHRoZSBwYWdlIGJlY29tZXMgZWZm ZWN0aXZlbHkgbm9uLSJsaXZlIiBmb3IKKyAgICAgKiB0aGUgZG9tYWluLgog ICAgICAqLwogICAgIHkgPSBwYWdlLT5jb3VudF9pbmZvOwogICAgIGRvIHsK ICAgICAgICAgeCA9IHk7Ci0gICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50 X21hc2t8UEdDX2FsbG9jYXRlZCkpICE9ICgxIHwgUEdDX2FsbG9jYXRlZCkg KQotICAgICAgICAgICAgZ290byBmYWlsOwotICAgICAgICB5ID0gY21weGNo ZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCAmIH5QR0NfY291bnRfbWFzayk7 CisgICAgICAgIGlmICggKHggJiAoUEdDX2NvdW50X21hc2t8UEdDX2FsbG9j YXRlZCkpICE9ICgyIHwgUEdDX2FsbG9jYXRlZCkgKQorICAgICAgICAgICAg Z290byBmYWlsX3B1dDsKKyAgICAgICAgeSA9IGNtcHhjaGcoJnBhZ2UtPmNv dW50X2luZm8sIHgsIHggJiB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpKTsKICAgICB9IHdoaWxlICggeSAhPSB4ICk7CiAKICAgICAvKgotICAg ICAqIFdpdGggdGhlIHNvbGUgcmVmZXJlbmNlIGRyb3BwZWQgdGVtcG9yYXJp bHksIG5vLW9uZSBjYW4gdXBkYXRlIHR5cGUKLSAgICAgKiBpbmZvcm1hdGlv bi4gVHlwZSBjb3VudCBhbHNvIG5lZWRzIHRvIGJlIHplcm8gaW4gdGhpcyBj YXNlLCBidXQgZS5nLgotICAgICAqIFBHVF9zZWdfZGVzY19wYWdlIG1heSBz dGlsbCBoYXZlIFBHVF92YWxpZGF0ZWQgc2V0LCB3aGljaCB3ZSBuZWVkIHRv Ci0gICAgICogY2xlYXIgYmVmb3JlIHRyYW5zZmVycmluZyBvd25lcnNoaXAg KGFzIHZhbGlkYXRpb24gY3JpdGVyaWEgdmFyeQotICAgICAqIGRlcGVuZGlu ZyBvbiBkb21haW4gdHlwZSkuCisgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2 ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCisg ICAgICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzog c3Vic2VxdWVudCBtYXBwaW5ncyB3aWxsCisgICAgICogY2F1c2UgdGhlIGNh Y2hlIGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCisgICAg ICogZ2V0X3BhZ2VfZnJvbV9sMWUoKS4KICAgICAgKi8KKyAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKKyAgICAgICAg ICogaXQgYW5kIHJldHVybiBhbiBlcnJvcgorICAgICAgICAgKi8KKyAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyB8PSBQR0NfYWxsb2NhdGVkIHwgMTsKKyAg ICAgICAgZ290byBmYWlsOworICAgIH0KKworICAgIC8qCisgICAgICogV2l0 aCB0aGUgcmVmZXJlbmNlIGNvdW50IG5vdyB6ZXJvLCBub2JvZHkgY2FuIGdy YWIgcmVmZXJlbmNlcworICAgICAqIHRvIGRvIGFueXRoaW5nIGVsc2Ugd2l0 aCB0aGUgcGFnZS4gIFJldHVybiB0aGUgcGFnZSB0byBhIHN0YXRlCisgICAg ICogdGhhdCBpdCBtaWdodCBiZSB1cG9uIHJldHVybiBmcm9tIGFsbG9jX2Rv bWhlYXBfcGFnZXMgd2l0aAorICAgICAqIE1FTUZfbm9fb3duZXIgc2V0Lgor ICAgICAqLworICAgIHNwaW5fbG9jaygmZC0+cGFnZV9hbGxvY19sb2NrKTsK KwogICAgIEJVR19PTihwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmIChQR1Rf Y291bnRfbWFzayB8IFBHVF9sb2NrZWQgfAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBQR1RfcGlubmVkKSk7CiAgICAgcGFnZS0+ dS5pbnVzZS50eXBlX2luZm8gPSAwOwotCi0gICAgLyogU3dpenpsZSB0aGUg b3duZXIgdGhlbiByZWluc3RhdGUgdGhlIFBHQ19hbGxvY2F0ZWQgcmVmZXJl bmNlLiAqLwogICAgIHBhZ2Vfc2V0X293bmVyKHBhZ2UsIE5VTEwpOwotICAg IHkgPSBwYWdlLT5jb3VudF9pbmZvOwotICAgIGRvIHsKLSAgICAgICAgeCA9 IHk7Ci0gICAgICAgIEJVR19PTigoeCAmIChQR0NfY291bnRfbWFza3xQR0Nf YWxsb2NhdGVkKSkgIT0gUEdDX2FsbG9jYXRlZCk7Ci0gICAgfSB3aGlsZSAo ICh5ID0gY21weGNoZygmcGFnZS0+Y291bnRfaW5mbywgeCwgeCB8IDEpKSAh PSB4ICk7CisgICAgcGFnZV9saXN0X2RlbChwYWdlLCAmZC0+cGFnZV9saXN0 KTsKIAogICAgIC8qIFVubGluayBmcm9tIG9yaWdpbmFsIG93bmVyLiAqLwog ICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmICFk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAtMSkgKQogICAgICAgICBkcm9w X2RvbV9yZWYgPSAxOwotICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBh Z2VfbGlzdCk7CiAKICAgICBzcGluX3VubG9jaygmZC0+cGFnZV9hbGxvY19s b2NrKTsKKwogICAgIGlmICggdW5saWtlbHkoZHJvcF9kb21fcmVmKSApCiAg ICAgICAgIHB1dF9kb21haW4oZCk7CisKICAgICByZXR1cm4gMDsKIAorIGZh aWxfcHV0OgorICAgIHB1dF9wYWdlKHBhZ2UpOwogIGZhaWw6Ci0gICAgc3Bp bl91bmxvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgZ2RwcmludGso WEVOTE9HX1dBUk5JTkcsICJCYWQgc3RlYWwgbWZuICUiIFBSSV9tZm4KICAg ICAgICAgICAgICAiIGZyb20gZCVkIChvd25lciBkJWQpIGNhZj0lMDhseCB0 YWY9JSIgUFJ0eXBlX2luZm8gIlxuIiwKICAgICAgICAgICAgICBwYWdlX3Rv X21mbihwYWdlKSwgZC0+ZG9tYWluX2lkLAogICAgICAgICAgICAgIG93bmVy ID8gb3duZXItPmRvbWFpbl9pZCA6IERPTUlEX0lOVkFMSUQsCiAgICAgICAg ICAgICAgcGFnZS0+Y291bnRfaW5mbywgcGFnZS0+dS5pbnVzZS50eXBlX2lu Zm8pOwotICAgIHJldHVybiAtMTsKKyAgICByZXR1cm4gcmM7CiB9CiAKIHN0 YXRpYyBpbnQgX19kb191cGRhdGVfdmFfbWFwcGluZygKZGlmZiAtLWdpdCBh L3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYyBiL3hlbi9jb21tb24vZ3JhbnRf dGFibGUuYwppbmRleCA1ZWUwOTgxODMyLi41YjMzOGU5NWZmIDEwMDY0NAot LS0gYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1v bi9ncmFudF90YWJsZS5jCkBAIC0xOTg1LDcgKzE5ODUsNyBAQCBnbnR0YWJf dHJhbnNmZXIoCiAgICAgICAgICAgICByY3VfdW5sb2NrX2RvbWFpbihlKTsK ICAgICAgICAgcHV0X2dmbl9hbmRfY29weWJhY2s6CiAgICAgICAgICAgICBw dXRfZ2ZuKGQsIGdvcC5tZm4pOwotICAgICAgICAgICAgcGFnZS0+Y291bnRf aW5mbyAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpOworICAg ICAgICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVhZHkgYmVlbiBj bGVhbmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdl KTsKICAgICAgICAgICAgIGdvdG8gY29weWJhY2s7CiAgICAgICAgIH0KQEAg LTIwMDgsMTAgKzIwMDgsOSBAQCBnbnR0YWJfdHJhbnNmZXIoCiAKICAgICAg ICAgICAgIGNvcHlfZG9tYWluX3BhZ2UoX21mbihwYWdlX3RvX21mbihuZXdf cGFnZSkpLCBfbWZuKG1mbikpOwogCi0gICAgICAgICAgICBwYWdlLT5jb3Vu dF9pbmZvICY9IH4oUEdDX2NvdW50X21hc2t8UEdDX2FsbG9jYXRlZCk7Cisg ICAgICAgICAgICAvKiBUaGUgY291bnRfaW5mbyBoYXMgYWxyZWFkeSBiZWVu IGNsZWFyZWQgKi8KICAgICAgICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBh Z2UpOwogICAgICAgICAgICAgcGFnZSA9IG5ld19wYWdlOwotICAgICAgICAg ICAgcGFnZS0+Y291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwogICAg ICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgIH0K IApAQCAtMjA1MSwxMiArMjA1MCwxNyBAQCBnbnR0YWJfdHJhbnNmZXIoCiAg ICAgICAgICAqLwogICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKICAgICAgICAgb2theSA9IGdudHRhYl9wcmVwYXJlX2Zvcl90 cmFuc2ZlcihlLCBkLCBnb3AucmVmKTsKLSAgICAgICAgc3Bpbl9sb2NrKCZl LT5wYWdlX2FsbG9jX2xvY2spOwogCi0gICAgICAgIGlmICggdW5saWtlbHko IW9rYXkpIHx8IHVubGlrZWx5KGUtPmlzX2R5aW5nKSApCisgICAgICAgIGlm ICggdW5saWtlbHkoIW9rYXkgfHwgYXNzaWduX3BhZ2VzKGUsIHBhZ2UsIDAs IE1FTUZfbm9fcmVmY291bnQpKSApCiAgICAgICAgIHsKLSAgICAgICAgICAg IGJvb2xfdCBkcm9wX2RvbV9yZWYgPSAhZG9tYWluX2FkanVzdF90b3RfcGFn ZXMoZSwgLTEpOworICAgICAgICAgICAgYm9vbCBkcm9wX2RvbV9yZWY7CiAK KyAgICAgICAgICAgIC8qCisgICAgICAgICAgICAgKiBOZWVkIHRvIGdyYWIg dGhpcyBhZ2FpbiB0byBzYWZlbHkgZnJlZSBvdXIgInJlc2VydmVkIgorICAg ICAgICAgICAgICogcGFnZSBpbiB0aGUgcGFnZSB0b3RhbAorICAgICAgICAg ICAgICovCisgICAgICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxsb2Nf bG9jayk7CisgICAgICAgICAgICBkcm9wX2RvbV9yZWYgPSAhZG9tYWluX2Fk anVzdF90b3RfcGFnZXMoZSwgLTEpOwogICAgICAgICAgICAgc3Bpbl91bmxv Y2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAKICAgICAgICAgICAgIGlmICgg b2theSAvKiBpLmUuIGUtPmlzX2R5aW5nIGR1ZSB0byB0aGUgc3Vycm91bmRp bmcgaWYoKSAqLyApCkBAIC0yMDY5LDEwICsyMDczLDYgQEAgZ250dGFiX3Ry YW5zZmVyKAogICAgICAgICAgICAgZ290byB1bmxvY2tfYW5kX2NvcHliYWNr OwogICAgICAgICB9CiAKLSAgICAgICAgcGFnZV9saXN0X2FkZF90YWlsKHBh Z2UsICZlLT5wYWdlX2xpc3QpOwotICAgICAgICBwYWdlX3NldF9vd25lcihw YWdlLCBlKTsKLQotICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxv Y19sb2NrKTsKICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKIAogICAg ICAgICBUUkFDRV8xRChUUkNfTUVNX1BBR0VfR1JBTlRfVFJBTlNGRVIsIGUt PmRvbWFpbl9pZCk7CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5j IGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCBjMWQwZGEzMThlLi4xYWRl NjJhMzA5IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5jCisrKyBi L3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTYxMCwyMCArNjEwLDIyIEBAIHN0 YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFORExFX1BB UkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAgICAgKiBT dWNjZXNzISBCZXlvbmQgdGhpcyBwb2ludCB3ZSBjYW5ub3QgZmFpbCBmb3Ig dGhpcyBjaHVuay4KICAgICAgICAgICovCiAKLSAgICAgICAgLyogRGVzdHJv eSBmaW5hbCByZWZlcmVuY2UgdG8gZWFjaCBpbnB1dCBwYWdlLiAqLworICAg ICAgICAvKgorICAgICAgICAgKiBUaGVzZSBwYWdlcyBoYXZlIGFscmVhZHkg aGFkIG93bmVyIGFuZCByZWZlcmVuY2UgY2xlYXJlZC4KKyAgICAgICAgICog RG8gdGhlIGZpbmFsIHR3byBzdGVwczogUmVtb3ZlIGZyb20gdGhlIHBoeXNt YXAsIGFuZCBmcmVlCisgICAgICAgICAqIHRoZW0uCisgICAgICAgICAqLwog ICAgICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICB7CiAgICAgICAgICAgICB1 bnNpZ25lZCBsb25nIGdmbjsKIAotICAgICAgICAgICAgaWYgKCAhdGVzdF9h bmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRfaW5m bykgKQotICAgICAgICAgICAgICAgIEJVRygpOwogICAgICAgICAgICAgbWZu ID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICBnZm4gPSBtZm5f dG9fZ21mbihkLCBtZm4pOwogICAgICAgICAgICAgLyogUGFnZXMgd2VyZSB1 bnNoYXJlZCBhYm92ZSAqLwogICAgICAgICAgICAgQlVHX09OKFNIQVJFRF9N MlAoZ2ZuKSk7CiAgICAgICAgICAgICBpZiAoIGd1ZXN0X3BoeXNtYXBfcmVt b3ZlX3BhZ2UoZCwgX2dmbihnZm4pLCBfbWZuKG1mbiksIDApICkKICAgICAg ICAgICAgICAgICBkb21haW5fY3Jhc2goZCk7Ci0gICAgICAgICAgICBwdXRf cGFnZShwYWdlKTsKKyAgICAgICAgICAgIGZyZWVfZG9taGVhcF9wYWdlKHBh Z2UpOwogICAgICAgICB9CiAKICAgICAgICAgLyogQXNzaWduIGVhY2ggb3V0 cHV0IHBhZ2UgdG8gdGhlIGRvbWFpbi4gKi8KQEAgLTY5NiwxMyArNjk4LDE2 IEBAIHN0YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEFO RExFX1BBUkFNKHhlbl9tZW1vcnlfZXhjaGFuZ2VfdCkgYXJnKQogICAgICAq IGNodW5rcyBzdWNjZWVkZWQuCiAgICAgICovCiAgZmFpbDoKLSAgICAvKiBS ZWFzc2lnbiBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4g Ki8KKyAgICAvKgorICAgICAqIFJlYXNzaWduIGFueSBpbnB1dCBwYWdlcyB3 ZSBtYW5hZ2VkIHRvIHN0ZWFsLiAgTkIgdGhhdCBpZiB0aGUgYXNzaWduCisg ICAgICogZmFpbHMgYWdhaW4sIHdlJ3JlIG9uIHRoZSBob29rIGZvciBmcmVl aW5nIHRoZSBwYWdlLCBzaW5jZSB3ZSd2ZSBhbHJlYWR5CisgICAgICogY2xl YXJlZCBQR0NfYWxsb2NhdGVkLgorICAgICAqLwogICAgIHdoaWxlICggKHBh Z2UgPSBwYWdlX2xpc3RfcmVtb3ZlX2hlYWQoJmluX2NodW5rX2xpc3QpKSAp CiAgICAgICAgIGlmICggYXNzaWduX3BhZ2VzKGQsIHBhZ2UsIDAsIE1FTUZf bm9fcmVmY291bnQpICkKICAgICAgICAgewogICAgICAgICAgICAgQlVHX09O KCFkLT5pc19keWluZyk7Ci0gICAgICAgICAgICBpZiAoIHRlc3RfYW5kX2Ns ZWFyX2JpdChfUEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNvdW50X2luZm8pICkK LSAgICAgICAgICAgICAgICBwdXRfcGFnZShwYWdlKTsKKyAgICAgICAgICAg IGZyZWVfZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICB9CiAKICBkeWlu ZzoKZGlmZiAtLWdpdCBhL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jIGIveGVu L2NvbW1vbi9wYWdlX2FsbG9jLmMKaW5kZXggN2Q4YzM3ZWYzNi4uNTJiNTMw MWMwZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKKysr IGIveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKQEAgLTE3NjYsNyArMTc2Niw3 IEBAIGludCBhc3NpZ25fcGFnZXMoCiAgICAgZm9yICggaSA9IDA7IGkgPCAo MSA8PCBvcmRlcik7IGkrKyApCiAgICAgewogICAgICAgICBBU1NFUlQocGFn ZV9nZXRfb3duZXIoJnBnW2ldKSA9PSBOVUxMKTsKLSAgICAgICAgQVNTRVJU KChwZ1tpXS5jb3VudF9pbmZvICYgfihQR0NfYWxsb2NhdGVkIHwgMSkpID09 IDApOworICAgICAgICBBU1NFUlQoIXBnW2ldLmNvdW50X2luZm8pOwogICAg ICAgICBwYWdlX3NldF9vd25lcigmcGdbaV0sIGQpOwogICAgICAgICBzbXBf d21iKCk7IC8qIERvbWFpbiBwb2ludGVyIG11c3QgYmUgdmlzaWJsZSBiZWZv cmUgdXBkYXRpbmcgcmVmY250LiAqLwogICAgICAgICBwZ1tpXS5jb3VudF9p bmZvID0gUEdDX2FsbG9jYXRlZCB8IDE7Ci0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa287-4.10.patch" Content-Disposition: attachment; filename="xsa287-4.10.patch" Content-Transfer-Encoding: base64 RnJvbSA5YjFmNjE5MmU0YjAzNjZkYzA5Y2VhOTA1ZDNlMGE0YjgyY2FkNDVi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGMyMGVkYjk1NGQuLjY3ZjZj ZmMxZDUgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTI0LDcwICszOTI0LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IF9fZG9fdXBkYXRlX3ZhX21h cHBpbmcoCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMg Yi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKaW5kZXggZTY3OTBkNWZhYy4u NDJlYTUwZjQ4NSAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtMjE3NSw3 ICsyMTc1LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAgICAgICAgcmN1 X3VubG9ja19kb21haW4oZSk7CiAgICAgICAgIHB1dF9nZm5fYW5kX2NvcHli YWNrOgogICAgICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKLSAgICAg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQ R0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZv IGhhcyBhbHJlYWR5IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJl ZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHli YWNrOwogICAgICAgICB9CkBAIC0yMTk4LDEwICsyMTk4LDkgQEAgZ250dGFi X3RyYW5zZmVyKAogCiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKF9t Zm4ocGFnZV90b19tZm4obmV3X3BhZ2UpKSwgX21mbihtZm4pKTsKIAotICAg ICAgICAgICAgcGFnZS0+Y291bnRfaW5mbyAmPSB+KFBHQ19jb3VudF9tYXNr fFBHQ19hbGxvY2F0ZWQpOworICAgICAgICAgICAgLyogVGhlIGNvdW50X2lu Zm8gaGFzIGFscmVhZHkgYmVlbiBjbGVhcmVkICovCiAgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgICAgIHBhZ2UgPSBu ZXdfcGFnZTsKLSAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gPSBQR0Nf YWxsb2NhdGVkIHwgMTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogICAgICAgICB9CiAKQEAgLTIyNDEsMTIgKzIyNDAsMTcgQEAg Z250dGFiX3RyYW5zZmVyKAogICAgICAgICAgKi8KICAgICAgICAgc3Bpbl91 bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgICAgIG9rYXkgPSBn bnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7Ci0g ICAgICAgIHNwaW5fbG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKIAotICAg ICAgICBpZiAoIHVubGlrZWx5KCFva2F5KSB8fCB1bmxpa2VseShlLT5pc19k eWluZykgKQorICAgICAgICBpZiAoIHVubGlrZWx5KCFva2F5IHx8IGFzc2ln bl9wYWdlcyhlLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSkgKQogICAg ICAgICB7Ci0gICAgICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmID0gIWRv bWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKKyAgICAgICAgICAgIGJv b2wgZHJvcF9kb21fcmVmOwogCisgICAgICAgICAgICAvKgorICAgICAgICAg ICAgICogTmVlZCB0byBncmFiIHRoaXMgYWdhaW4gdG8gc2FmZWx5IGZyZWUg b3VyICJyZXNlcnZlZCIKKyAgICAgICAgICAgICAqIHBhZ2UgaW4gdGhlIHBh Z2UgdG90YWwKKyAgICAgICAgICAgICAqLworICAgICAgICAgICAgc3Bpbl9s b2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOworICAgICAgICAgICAgZHJvcF9k b21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKICAg ICAgICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwog CiAgICAgICAgICAgICBpZiAoIG9rYXkgLyogaS5lLiBlLT5pc19keWluZyBk dWUgdG8gdGhlIHN1cnJvdW5kaW5nIGlmKCkgKi8gKQpAQCAtMjI1OSwxMCAr MjI2Myw2IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGdvdG8g dW5sb2NrX2FuZF9jb3B5YmFjazsKICAgICAgICAgfQogCi0gICAgICAgIHBh Z2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmZS0+cGFnZV9saXN0KTsKLSAgICAg ICAgcGFnZV9zZXRfb3duZXIocGFnZSwgZSk7Ci0KLSAgICAgICAgc3Bpbl91 bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAgICAgICAgIHB1dF9nZm4o ZCwgZ29wLm1mbik7CiAKICAgICAgICAgVFJBQ0VfMUQoVFJDX01FTV9QQUdF X0dSQU5UX1RSQU5TRkVSLCBlLT5kb21haW5faWQpOwpkaWZmIC0tZ2l0IGEv eGVuL2NvbW1vbi9tZW1vcnkuYyBiL3hlbi9jb21tb24vbWVtb3J5LmMKaW5k ZXggMDg4MDgzZTRkMS4uOGFhZWNiNDQ5NSAxMDA2NDQKLS0tIGEveGVuL2Nv bW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC02 MzEsMjAgKzYzMSwyMiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2Uo WEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3Qp IGFyZykKICAgICAgICAgICogU3VjY2VzcyEgQmV5b25kIHRoaXMgcG9pbnQg d2UgY2Fubm90IGZhaWwgZm9yIHRoaXMgY2h1bmsuCiAgICAgICAgICAqLwog Ci0gICAgICAgIC8qIERlc3Ryb3kgZmluYWwgcmVmZXJlbmNlIHRvIGVhY2gg aW5wdXQgcGFnZS4gKi8KKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlc2Ug cGFnZXMgaGF2ZSBhbHJlYWR5IGhhZCBvd25lciBhbmQgcmVmZXJlbmNlIGNs ZWFyZWQuCisgICAgICAgICAqIERvIHRoZSBmaW5hbCB0d28gc3RlcHM6IFJl bW92ZSBmcm9tIHRoZSBwaHlzbWFwLCBhbmQgZnJlZQorICAgICAgICAgKiB0 aGVtLgorICAgICAgICAgKi8KICAgICAgICAgd2hpbGUgKCAocGFnZSA9IHBh Z2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAg ICAgewogICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBnZm47CiAKLSAgICAg ICAgICAgIGlmICggIXRlc3RfYW5kX2NsZWFyX2JpdChfUEdDX2FsbG9jYXRl ZCwgJnBhZ2UtPmNvdW50X2luZm8pICkKLSAgICAgICAgICAgICAgICBCVUco KTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAg ICAgICAgICAgZ2ZuID0gbWZuX3RvX2dtZm4oZCwgbWZuKTsKICAgICAgICAg ICAgIC8qIFBhZ2VzIHdlcmUgdW5zaGFyZWQgYWJvdmUgKi8KICAgICAgICAg ICAgIEJVR19PTihTSEFSRURfTTJQKGdmbikpOwogICAgICAgICAgICAgaWYg KCBndWVzdF9waHlzbWFwX3JlbW92ZV9wYWdlKGQsIF9nZm4oZ2ZuKSwgX21m bihtZm4pLCAwKSApCiAgICAgICAgICAgICAgICAgZG9tYWluX2NyYXNoKGQp OwotICAgICAgICAgICAgcHV0X3BhZ2UocGFnZSk7CisgICAgICAgICAgICBm cmVlX2RvbWhlYXBfcGFnZShwYWdlKTsKICAgICAgICAgfQogCiAgICAgICAg IC8qIEFzc2lnbiBlYWNoIG91dHB1dCBwYWdlIHRvIHRoZSBkb21haW4uICov CkBAIC03MTcsMTMgKzcxOSwxNiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhj aGFuZ2UoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hh bmdlX3QpIGFyZykKICAgICAgKiBjaHVua3Mgc3VjY2VlZGVkLgogICAgICAq LwogIGZhaWw6Ci0gICAgLyogUmVhc3NpZ24gYW55IGlucHV0IHBhZ2VzIHdl IG1hbmFnZWQgdG8gc3RlYWwuICovCisgICAgLyoKKyAgICAgKiBSZWFzc2ln biBhbnkgaW5wdXQgcGFnZXMgd2UgbWFuYWdlZCB0byBzdGVhbC4gIE5CIHRo YXQgaWYgdGhlIGFzc2lnbgorICAgICAqIGZhaWxzIGFnYWluLCB3ZSdyZSBv biB0aGUgaG9vayBmb3IgZnJlZWluZyB0aGUgcGFnZSwgc2luY2Ugd2UndmUg YWxyZWFkeQorICAgICAqIGNsZWFyZWQgUEdDX2FsbG9jYXRlZC4KKyAgICAg Ki8KICAgICB3aGlsZSAoIChwYWdlID0gcGFnZV9saXN0X3JlbW92ZV9oZWFk KCZpbl9jaHVua19saXN0KSkgKQogICAgICAgICBpZiAoIGFzc2lnbl9wYWdl cyhkLCBwYWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSApCiAgICAgICAgIHsK ICAgICAgICAgICAgIEJVR19PTighZC0+aXNfZHlpbmcpOwotICAgICAgICAg ICAgaWYgKCB0ZXN0X2FuZF9jbGVhcl9iaXQoX1BHQ19hbGxvY2F0ZWQsICZw YWdlLT5jb3VudF9pbmZvKSApCi0gICAgICAgICAgICAgICAgcHV0X3BhZ2Uo cGFnZSk7CisgICAgICAgICAgICBmcmVlX2RvbWhlYXBfcGFnZShwYWdlKTsK ICAgICAgICAgfQogCiAgZHlpbmc6CmRpZmYgLS1naXQgYS94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4 IDU5OGMzNDMyYzkuLjE1YTZmMDE4ZjggMTAwNjQ0Ci0tLSBhL3hlbi9jb21t b24vcGFnZV9hbGxvYy5jCisrKyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5j CkBAIC0yMjE5LDcgKzIyMTksNyBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAg IGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAgIHsK ICAgICAgICAgQVNTRVJUKHBhZ2VfZ2V0X293bmVyKCZwZ1tpXSkgPT0gTlVM TCk7Ci0gICAgICAgIEFTU0VSVCgocGdbaV0uY291bnRfaW5mbyAmIH4oUEdD X2FsbG9jYXRlZCB8IDEpKSA9PSAwKTsKKyAgICAgICAgQVNTRVJUKCFwZ1tp XS5jb3VudF9pbmZvKTsKICAgICAgICAgcGFnZV9zZXRfb3duZXIoJnBnW2ld LCBkKTsKICAgICAgICAgc21wX3dtYigpOyAvKiBEb21haW4gcG9pbnRlciBt dXN0IGJlIHZpc2libGUgYmVmb3JlIHVwZGF0aW5nIHJlZmNudC4gKi8KICAg ICAgICAgcGdbaV0uY291bnRfaW5mbyA9IFBHQ19hbGxvY2F0ZWQgfCAxOwot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa287-4.11.patch" Content-Disposition: attachment; filename="xsa287-4.11.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzYyMGMxY2NiMTNmN2I1ODY0NWY0ODI0OGJhMWY0MDhiMDIxZmRj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMTggSmFu IDIwMTkgMTU6MDA6MzQgKzAwMDAKU3ViamVjdDogW1BBVENIXSBzdGVhbF9w YWdlOiBHZXQgcmlkIG9mIGJvZ3VzIHN0cnVjdCBwYWdlIHN0YXRlcwoKVGhl IG9yaWdpbmFsIHJ1bGVzIGZvciBgc3RydWN0IHBhZ2VgIHJlcXVpcmVkIHRo ZSBmb2xsb3dpbmcgaW52YXJpYW50cwphdCBhbGwgdGltZXM6CgotIHJlZmNv dW50ID4gMCBpbXBsaWVzIG93bmVyICE9IE5VTEwKLSBQR0NfYWxsb2NhdGVk IGltcGxpZXMgcmVmY291bnQgPiAwCgpzdGVhbF9wYWdlLCBpbiBhIG1pc2d1 aWRlZCBhdHRlbXB0IHRvIHByb3RlY3QgYWdhaW5zdCB1bmtub3duIHJhY2Vz LAp2aW9sYXRlcyBib3RoIG9mIHRoZXNlIHJ1bGVzLCB0aHVzIGludHJvZHVj aW5nIG90aGVyIHJhY2VzOgoKLSBUZW1wb3JhcmlseSwgdGhlIGNvdW50X2lu Zm8gaGFzIHRoZSByZWZjb3VudCBnbyB0byAwIHdoaWxlCiAgUEdDX2FsbG9j YXRlZCBpcyBzZXQKCi0gSXQgZXhwbGljaXRseSByZXR1cm5zIHRoZSBwYWdl IFBHQ19hbGxvY2F0ZWQgc2V0LCBidXQgb3duZXIgPT0gTlVMTAogIGFuZCBw YWdlIG5vdCBvbiB0aGUgcGFnZV9saXN0LgoKVGhlIHNlY29uZCBvbmUgbWVh bnQgdGhhdCBwYWdlX2dldF9vd25lcl9hbmRfcmVmZXJlbmNlKCkgY291bGQg cmV0dXJuCk5VTEwgZXZlbiBhZnRlciBoYXZpbmcgc3VjY2Vzc2Z1bGx5IGdy YWJiZWQgYSByZWZlcmVuY2Ugb24gdGhlIHBhZ2UsCmxlYWRpbmcgdGhlIGNh bGxlciB0byBsZWFrIHRoZSByZWZlcmVuY2UgKHNpbmNlICJjb3VsZG4ndCBn ZXQgcmVmIiBhbmQKImdvdCByZWYgYnV0IG5vIG93bmVyIiBsb29rIHRoZSBz YW1lKS4KCkZ1cnRoZXJtb3JlLCByYXRoZXIgdGhhbiBncmFiYmluZyBhIHBh Z2UgcmVmZXJlbmNlIHRvIGVuc3VyZSB0aGF0IHRoZQpvd25lciBkb2Vzbid0 IGNoYW5nZSB1bmRlciBpdHMgZmVldCwgaXQgYXBwZWFycyB0byByZWx5IG9u IGhvbGRpbmcKZC0+cGFnZV9hbGxvYyBsb2NrIHRvIHByZXZlbnQgdGhpcy4K ClVuZm9ydHVuYXRlbHksIHRoaXMgaXMgaW5lZmZlY3RpdmU6IHBhZ2UtPm93 bmVyIHJlbWFpbnMgbm9uLU5VTEwgZm9yCnNvbWUgdGltZSBhZnRlciB0aGUg Y291bnQgaGFzIGJlZW4gc2V0IHRvIDA7IG1lYW5pbmcgdGhhdCBpdCB3b3Vs ZCBiZQplbnRpcmVseSBwb3NzaWJsZSBmb3IgdGhlIHBhZ2UgdG8gYmUgZnJl ZWQgYW5kIHJlLWFsbG9jYXRlZCB0byBhCmRpZmZlcmVudCBkb21haW4gYmV0 d2VlbiB0aGUgcGFnZV9nZXRfb3duZXIoKSBjaGVjayBhbmQgdGhlIGNvdW50 X2luZm8KY2hlY2suCgpNb2RpZnkgc3RlYWxfcGFnZSB0byBpbnN0ZWFkIGZv bGxvdyB0aGUgYXBwcm9wcmlhdGUgYWNjZXNzIGRpc2NpcGxpbmUsCnRha2lu ZyB0aGUgcGFnZSB0aHJvdWdoIHNlcmllcyBvZiBzdGF0ZXMgc2ltaWxhciB0 byBiZWluZyBmcmVlZCBhbmQKdGhlbiByZS1hbGxvY2F0ZWQgd2l0aCBNRU1G X25vX293bmVyOgoKLSBHcmFiIGFuIGV4dHJhIHJlZmVyZW5jZSB0byBtYWtl IHN1cmUgd2UgZG9uJ3QgcmFjZSB3aXRoIGFueW9uZSBlbHNlCiAgZnJlZWlu ZyB0aGUgcGFnZQoKLSBEcm9wIGJvdGggcmVmZXJlbmNlcyBhbmQgUEdDX2Fs bG9jYXRlZCBhdG9taWNhbGx5LCBzbyB0aGF0IChpZgpzdWNjZXNzZnVsKSwg YW55b25lIGVsc2UgdHJ5aW5nIHRvIGdyYWIgYSByZWZlcmVuY2Ugd2lsbCBm YWlsCgotIEF0dGVtcHQgdG8gcmVzZXQgWGVuJ3MgbWFwcGluZ3MKCi0gUmVz ZXQgdGhlIHJlc3Qgb2YgdGhlIHN0YXRlLgoKVGhlbiwgbW9kaWZ5IHRoZSB0 d28gY2FsbGVycyBhcHByb3ByaWF0ZWx5OgoKLSBMZWF2ZSBjb3VudF9pbmZv IGFsb25lIChpdCdzIGFscmVhZHkgYmVlbiBjbGVhcmVkKQotIENhbGwgZnJl ZV9kb21oZWFwX3BhZ2UoKSBkaXJlY3RseSBpZiBhcHByb3ByaWF0ZQotIENh bGwgYXNzaWduX3BhZ2VzKCkgcmF0aGVyIHRoYW4gb3Blbi1jb2RpbmcgYSBw YXJ0aWFsIGFzc2lnbgoKV2l0aCBhbGwgY2FsbGVycyB0byBhc3NpZ25fcGFn ZXMoKSBub3cgcGFzc2luZyBpbiBwYWdlcyB3aXRoIHRoZQp0eXBlX2luZm8g ZmllbGQgY2xlYXIsIHRpZ2h0ZW4gdGhlIHJlc3BlY3RpdmUgYXNzZXJ0aW9u IHRoZXJlLgoKVGhpcyBpcyBYU0EtMjg3LgoKU2lnbmVkLW9mZi1ieTogR2Vv cmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQog eGVuL2FyY2gveDg2L21tLmMgICAgICAgIHwgODQgKysrKysrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0tLQogeGVuL2NvbW1vbi9ncmFudF90 YWJsZS5jIHwgMjAgKysrKystLS0tLQogeGVuL2NvbW1vbi9tZW1vcnkuYyAg ICAgIHwgMTkgKysrKystLS0tCiB4ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyAg fCAgMiArLQogNCBmaWxlcyBjaGFuZ2VkLCA4MyBpbnNlcnRpb25zKCspLCA0 MiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDY1MDkwMzVhNWMuLmQ4ZmY1 OGM5MDEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hl bi9hcmNoL3g4Ni9tbS5jCkBAIC0zOTY2LDcwICszOTY2LDEwNiBAQCBpbnQg ZG9uYXRlX3BhZ2UoCiAgICAgcmV0dXJuIC1FSU5WQUw7CiB9CiAKKy8qCisg KiBTdGVhbCBwYWdlIHdpbGwgYXR0ZW1wdCB0byByZW1vdmUgYHBhZ2VgIGZy b20gZG9tYWluIGBkYC4gIFVwb24KKyAqIHJldHVybiwgYHBhZ2VgIHdpbGwg YmUgaW4gYSBzdGF0ZSBzaW1pbGFyIHRvIHRoZSBzdGF0ZSBvZiBhIHBhZ2UK KyAqIHJldHVybmVkIGZyb20gYWxsb2NfZG9taGVhcF9wYWdlKCkgd2l0aCBN RU1GX25vX293bmVyIHNldDoKKyAqIC0gcmVmY291bnQgMAorICogLSB0eXBl IGNvdW50IGNsZWFyZWQKKyAqIC0gb3duZXIgTlVMTAorICogLSBwYWdlIGNh Y2hpbmcgYXR0cmlidXRlcyBjbGVhbmVkIHVwCisgKiAtIHJlbW92ZWQgZnJv bSB0aGUgZG9tYWluJ3MgcGFnZV9saXN0CisgKgorICogSWYgTUVNRl9ub19y ZWZjb3VudCBpcyBub3Qgc2V0LCB0aGUgZG9tYWluJ3MgdG90X3BhZ2VzIHdp bGwgYmUKKyAqIGFkanVzdGVkLiAgSWYgdGhpcyByZXN1bHRzIGluIHRoZSBw YWdlIGNvdW50IGZhbGxpbmcgdG8gMCwKKyAqIHB1dF9kb21haW4oKSB3aWxs IGJlIGNhbGxlZC4KKyAqCisgKiBUaGUgY2FsbGVyIHNob3VsZCBlaXRoZXIg Y2FsbCBmcmVlX2RvbWhlYXBfcGFnZSgpIHRvIGZyZWUgdGhlCisgKiBwYWdl LCBvciBhc3NpZ25fcGFnZXMoKSB0byBwdXQgaXQgYmFjayBvbiBzb21lIGRv bWFpbidzIHBhZ2UgbGlzdC4KKyAqLwogaW50IHN0ZWFsX3BhZ2UoCiAgICAg c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSwgdW5z aWduZWQgaW50IG1lbWZsYWdzKQogewogICAgIHVuc2lnbmVkIGxvbmcgeCwg eTsKICAgICBib29sIGRyb3BfZG9tX3JlZiA9IGZhbHNlOwotICAgIGNvbnN0 IHN0cnVjdCBkb21haW4gKm93bmVyID0gZG9tX3hlbjsKKyAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpvd25lcjsKKyAgICBpbnQgcmM7CiAKICAgICBpZiAo IHBhZ2luZ19tb2RlX2V4dGVybmFsKGQpICkKICAgICAgICAgcmV0dXJuIC1F T1BOT1RTVVBQOwogCi0gICAgc3Bpbl9sb2NrKCZkLT5wYWdlX2FsbG9jX2xv Y2spOwotCi0gICAgaWYgKCBpc194ZW5faGVhcF9wYWdlKHBhZ2UpIHx8ICgo b3duZXIgPSBwYWdlX2dldF9vd25lcihwYWdlKSkgIT0gZCkgKQorICAgIC8q IEdyYWIgYSByZWZlcmVuY2UgdG8gbWFrZSBzdXJlIHRoZSBwYWdlIGRvZXNu J3QgY2hhbmdlIHVuZGVyIG91ciBmZWV0ICovCisgICAgcmMgPSAtRUlOVkFM OworICAgIGlmICggIShvd25lciA9IHBhZ2VfZ2V0X293bmVyX2FuZF9yZWZl cmVuY2UocGFnZSkpICkKICAgICAgICAgZ290byBmYWlsOwogCisgICAgaWYg KCBvd25lciAhPSBkIHx8IGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkgKQorICAg ICAgICBnb3RvIGZhaWxfcHV0OworCiAgICAgLyoKLSAgICAgKiBXZSByZXF1 aXJlIHRoZXJlIGlzIGp1c3Qgb25lIHJlZmVyZW5jZSAoUEdDX2FsbG9jYXRl ZCkuIFdlIHRlbXBvcmFyaWx5Ci0gICAgICogZHJvcCB0aGlzIHJlZmVyZW5j ZSBub3cgc28gdGhhdCB3ZSBjYW4gc2FmZWx5IHN3aXp6bGUgdGhlIG93bmVy LgorICAgICAqIFdlIHJlcXVpcmUgdGhlcmUgYXJlIGV4YWN0bHkgdHdvIHJl ZmVyZW5jZXMgLS0gdGhlIG9uZSB3ZSBqdXN0CisgICAgICogdG9vaywgYW5k IFBHQ19hbGxvY2F0ZWQuIFdlIHRlbXBvcmFyaWx5IGRyb3AgYm90aCB0aGVz ZQorICAgICAqIHJlZmVyZW5jZXMgc28gdGhhdCB0aGUgcGFnZSBiZWNvbWVz IGVmZmVjdGl2ZWx5IG5vbi0ibGl2ZSIgZm9yCisgICAgICogdGhlIGRvbWFp bi4KICAgICAgKi8KICAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKICAgICBk byB7CiAgICAgICAgIHggPSB5OwotICAgICAgICBpZiAoICh4ICYgKFBHQ19j b3VudF9tYXNrfFBHQ19hbGxvY2F0ZWQpKSAhPSAoMSB8IFBHQ19hbGxvY2F0 ZWQpICkKLSAgICAgICAgICAgIGdvdG8gZmFpbDsKLSAgICAgICAgeSA9IGNt cHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggJiB+UEdDX2NvdW50X21h c2spOworICAgICAgICBpZiAoICh4ICYgKFBHQ19jb3VudF9tYXNrfFBHQ19h bGxvY2F0ZWQpKSAhPSAoMiB8IFBHQ19hbGxvY2F0ZWQpICkKKyAgICAgICAg ICAgIGdvdG8gZmFpbF9wdXQ7CisgICAgICAgIHkgPSBjbXB4Y2hnKCZwYWdl LT5jb3VudF9pbmZvLCB4LCB4ICYgfihQR0NfY291bnRfbWFza3xQR0NfYWxs b2NhdGVkKSk7CiAgICAgfSB3aGlsZSAoIHkgIT0geCApOwogCiAgICAgLyoK LSAgICAgKiBXaXRoIHRoZSBzb2xlIHJlZmVyZW5jZSBkcm9wcGVkIHRlbXBv cmFyaWx5LCBuby1vbmUgY2FuIHVwZGF0ZSB0eXBlCi0gICAgICogaW5mb3Jt YXRpb24uIFR5cGUgY291bnQgYWxzbyBuZWVkcyB0byBiZSB6ZXJvIGluIHRo aXMgY2FzZSwgYnV0IGUuZy4KLSAgICAgKiBQR1Rfc2VnX2Rlc2NfcGFnZSBt YXkgc3RpbGwgaGF2ZSBQR1RfdmFsaWRhdGVkIHNldCwgd2hpY2ggd2UgbmVl ZCB0bwotICAgICAqIGNsZWFyIGJlZm9yZSB0cmFuc2ZlcnJpbmcgb3duZXJz aGlwIChhcyB2YWxpZGF0aW9uIGNyaXRlcmlhIHZhcnkKLSAgICAgKiBkZXBl bmRpbmcgb24gZG9tYWluIHR5cGUpLgorICAgICAqIE5CIHRoaXMgaXMgc2Fm ZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2ZW4gYmFjayB0 bworICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNvdW50IGlzIHpl cm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAorICAgICAqIGNhdXNlIHRo ZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVkIGluc2lkZQor ICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICovCisgICAgaWYg KCAocmMgPSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAg eworICAgICAgICAvKgorICAgICAgICAgKiBDb3VsZG4ndCBmaXh1cCBYZW4n cyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdlIGZvdW5kCisgICAg ICAgICAqIGl0IGFuZCByZXR1cm4gYW4gZXJyb3IKKyAgICAgICAgICovCisg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gfD0gUEdDX2FsbG9jYXRlZCB8IDE7 CisgICAgICAgIGdvdG8gZmFpbDsKKyAgICB9CisKKyAgICAvKgorICAgICAq IFdpdGggdGhlIHJlZmVyZW5jZSBjb3VudCBub3cgemVybywgbm9ib2R5IGNh biBncmFiIHJlZmVyZW5jZXMKKyAgICAgKiB0byBkbyBhbnl0aGluZyBlbHNl IHdpdGggdGhlIHBhZ2UuICBSZXR1cm4gdGhlIHBhZ2UgdG8gYSBzdGF0ZQor ICAgICAqIHRoYXQgaXQgbWlnaHQgYmUgdXBvbiByZXR1cm4gZnJvbSBhbGxv Y19kb21oZWFwX3BhZ2VzIHdpdGgKKyAgICAgKiBNRU1GX25vX293bmVyIHNl dC4KICAgICAgKi8KKyAgICBzcGluX2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9j ayk7CisKICAgICBCVUdfT04ocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiAo UEdUX2NvdW50X21hc2sgfCBQR1RfbG9ja2VkIHwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUEdUX3Bpbm5lZCkpOwogICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvID0gMDsKLQotICAgIC8qIFN3aXp6bGUg dGhlIG93bmVyIHRoZW4gcmVpbnN0YXRlIHRoZSBQR0NfYWxsb2NhdGVkIHJl ZmVyZW5jZS4gKi8KICAgICBwYWdlX3NldF9vd25lcihwYWdlLCBOVUxMKTsK LSAgICB5ID0gcGFnZS0+Y291bnRfaW5mbzsKLSAgICBkbyB7Ci0gICAgICAg IHggPSB5OwotICAgICAgICBCVUdfT04oKHggJiAoUEdDX2NvdW50X21hc2t8 UEdDX2FsbG9jYXRlZCkpICE9IFBHQ19hbGxvY2F0ZWQpOwotICAgIH0gd2hp bGUgKCAoeSA9IGNtcHhjaGcoJnBhZ2UtPmNvdW50X2luZm8sIHgsIHggfCAx KSkgIT0geCApOworICAgIHBhZ2VfbGlzdF9kZWwocGFnZSwgJmQtPnBhZ2Vf bGlzdCk7CiAKICAgICAvKiBVbmxpbmsgZnJvbSBvcmlnaW5hbCBvd25lci4g Ki8KICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3JlZmNvdW50KSAm JiAhZG9tYWluX2FkanVzdF90b3RfcGFnZXMoZCwgLTEpICkKICAgICAgICAg ZHJvcF9kb21fcmVmID0gdHJ1ZTsKLSAgICBwYWdlX2xpc3RfZGVsKHBhZ2Us ICZkLT5wYWdlX2xpc3QpOwogCiAgICAgc3Bpbl91bmxvY2soJmQtPnBhZ2Vf YWxsb2NfbG9jayk7CisKICAgICBpZiAoIHVubGlrZWx5KGRyb3BfZG9tX3Jl ZikgKQogICAgICAgICBwdXRfZG9tYWluKGQpOworCiAgICAgcmV0dXJuIDA7 CiAKKyBmYWlsX3B1dDoKKyAgICBwdXRfcGFnZShwYWdlKTsKICBmYWlsOgot ICAgIHNwaW5fdW5sb2NrKCZkLT5wYWdlX2FsbG9jX2xvY2spOwogICAgIGdk cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQmFkIHN0ZWFsIG1mbiAlIiBQUklf bWZuCiAgICAgICAgICAgICAgIiBmcm9tIGQlZCAob3duZXIgZCVkKSBjYWY9 JTA4bHggdGFmPSUiIFBSdHlwZV9pbmZvICJcbiIsCiAgICAgICAgICAgICAg bWZuX3gocGFnZV90b19tZm4ocGFnZSkpLCBkLT5kb21haW5faWQsCiAgICAg ICAgICAgICAgb3duZXIgPyBvd25lci0+ZG9tYWluX2lkIDogRE9NSURfSU5W QUxJRCwKICAgICAgICAgICAgICBwYWdlLT5jb3VudF9pbmZvLCBwYWdlLT51 LmludXNlLnR5cGVfaW5mbyk7Ci0gICAgcmV0dXJuIC1FSU5WQUw7CisgICAg cmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IF9fZG9fdXBkYXRlX3ZhX21h cHBpbmcoCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMg Yi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKaW5kZXggYzA1ODVkMzNmNC4u NjU2ZmFkMWI0MiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtMjE3OSw3 ICsyMTc5LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAgICAgICAgcmN1 X3VubG9ja19kb21haW4oZSk7CiAgICAgICAgIHB1dF9nZm5fYW5kX2NvcHli YWNrOgogICAgICAgICAgICAgcHV0X2dmbihkLCBnb3AubWZuKTsKLSAgICAg ICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291bnRfbWFza3xQ R0NfYWxsb2NhdGVkKTsKKyAgICAgICAgICAgIC8qIFRoZSBjb3VudF9pbmZv IGhhcyBhbHJlYWR5IGJlZW4gY2xlYW5lZCAqLwogICAgICAgICAgICAgZnJl ZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgICAgICBnb3RvIGNvcHli YWNrOwogICAgICAgICB9CkBAIC0yMjAyLDEwICsyMjAyLDkgQEAgZ250dGFi X3RyYW5zZmVyKAogCiAgICAgICAgICAgICBjb3B5X2RvbWFpbl9wYWdlKHBh Z2VfdG9fbWZuKG5ld19wYWdlKSwgbWZuKTsKIAotICAgICAgICAgICAgcGFn ZS0+Y291bnRfaW5mbyAmPSB+KFBHQ19jb3VudF9tYXNrfFBHQ19hbGxvY2F0 ZWQpOworICAgICAgICAgICAgLyogVGhlIGNvdW50X2luZm8gaGFzIGFscmVh ZHkgYmVlbiBjbGVhcmVkICovCiAgICAgICAgICAgICBmcmVlX2RvbWhlYXBf cGFnZShwYWdlKTsKICAgICAgICAgICAgIHBhZ2UgPSBuZXdfcGFnZTsKLSAg ICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwg MTsKICAgICAgICAgICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAg ICAgICB9CiAKQEAgLTIyNDUsMTIgKzIyNDQsMTcgQEAgZ250dGFiX3RyYW5z ZmVyKAogICAgICAgICAgKi8KICAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBh Z2VfYWxsb2NfbG9jayk7CiAgICAgICAgIG9rYXkgPSBnbnR0YWJfcHJlcGFy ZV9mb3JfdHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7Ci0gICAgICAgIHNwaW5f bG9jaygmZS0+cGFnZV9hbGxvY19sb2NrKTsKIAotICAgICAgICBpZiAoIHVu bGlrZWx5KCFva2F5KSB8fCB1bmxpa2VseShlLT5pc19keWluZykgKQorICAg ICAgICBpZiAoIHVubGlrZWx5KCFva2F5IHx8IGFzc2lnbl9wYWdlcyhlLCBw YWdlLCAwLCBNRU1GX25vX3JlZmNvdW50KSkgKQogICAgICAgICB7Ci0gICAg ICAgICAgICBib29sX3QgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3Rf dG90X3BhZ2VzKGUsIC0xKTsKKyAgICAgICAgICAgIGJvb2wgZHJvcF9kb21f cmVmOwogCisgICAgICAgICAgICAvKgorICAgICAgICAgICAgICogTmVlZCB0 byBncmFiIHRoaXMgYWdhaW4gdG8gc2FmZWx5IGZyZWUgb3VyICJyZXNlcnZl ZCIKKyAgICAgICAgICAgICAqIHBhZ2UgaW4gdGhlIHBhZ2UgdG90YWwKKyAg ICAgICAgICAgICAqLworICAgICAgICAgICAgc3Bpbl9sb2NrKCZlLT5wYWdl X2FsbG9jX2xvY2spOworICAgICAgICAgICAgZHJvcF9kb21fcmVmID0gIWRv bWFpbl9hZGp1c3RfdG90X3BhZ2VzKGUsIC0xKTsKICAgICAgICAgICAgIHNw aW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwogCiAgICAgICAgICAg ICBpZiAoIG9rYXkgLyogaS5lLiBlLT5pc19keWluZyBkdWUgdG8gdGhlIHN1 cnJvdW5kaW5nIGlmKCkgKi8gKQpAQCAtMjI2MywxMCArMjI2Nyw2IEBAIGdu dHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9j b3B5YmFjazsKICAgICAgICAgfQogCi0gICAgICAgIHBhZ2VfbGlzdF9hZGRf dGFpbChwYWdlLCAmZS0+cGFnZV9saXN0KTsKLSAgICAgICAgcGFnZV9zZXRf b3duZXIocGFnZSwgZSk7Ci0KLSAgICAgICAgc3Bpbl91bmxvY2soJmUtPnBh Z2VfYWxsb2NfbG9jayk7CiAgICAgICAgIHB1dF9nZm4oZCwgZ29wLm1mbik7 CiAKICAgICAgICAgVFJBQ0VfMUQoVFJDX01FTV9QQUdFX0dSQU5UX1RSQU5T RkVSLCBlLT5kb21haW5faWQpOwpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9t ZW1vcnkuYyBiL3hlbi9jb21tb24vbWVtb3J5LmMKaW5kZXggNGZiNzk2MmM3 OS4uZjcxMTYzMjIxZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnku YworKysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC02NzUsMjAgKzY3NSwy MiBAQCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hB TkRMRV9QQVJBTSh4ZW5fbWVtb3J5X2V4Y2hhbmdlX3QpIGFyZykKICAgICAg ICAgICogU3VjY2VzcyEgQmV5b25kIHRoaXMgcG9pbnQgd2UgY2Fubm90IGZh aWwgZm9yIHRoaXMgY2h1bmsuCiAgICAgICAgICAqLwogCi0gICAgICAgIC8q IERlc3Ryb3kgZmluYWwgcmVmZXJlbmNlIHRvIGVhY2ggaW5wdXQgcGFnZS4g Ki8KKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlc2UgcGFnZXMgaGF2ZSBh bHJlYWR5IGhhZCBvd25lciBhbmQgcmVmZXJlbmNlIGNsZWFyZWQuCisgICAg ICAgICAqIERvIHRoZSBmaW5hbCB0d28gc3RlcHM6IFJlbW92ZSBmcm9tIHRo ZSBwaHlzbWFwLCBhbmQgZnJlZQorICAgICAgICAgKiB0aGVtLgorICAgICAg ICAgKi8KICAgICAgICAgd2hpbGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1v dmVfaGVhZCgmaW5fY2h1bmtfbGlzdCkpICkKICAgICAgICAgewogICAgICAg ICAgICAgdW5zaWduZWQgbG9uZyBnZm47CiAKLSAgICAgICAgICAgIGlmICgg IXRlc3RfYW5kX2NsZWFyX2JpdChfUEdDX2FsbG9jYXRlZCwgJnBhZ2UtPmNv dW50X2luZm8pICkKLSAgICAgICAgICAgICAgICBCVUcoKTsKICAgICAgICAg ICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAgICAgICAgICAgZ2Zu ID0gbWZuX3RvX2dtZm4oZCwgbWZuX3gobWZuKSk7CiAgICAgICAgICAgICAv KiBQYWdlcyB3ZXJlIHVuc2hhcmVkIGFib3ZlICovCiAgICAgICAgICAgICBC VUdfT04oU0hBUkVEX00yUChnZm4pKTsKICAgICAgICAgICAgIGlmICggZ3Vl c3RfcGh5c21hcF9yZW1vdmVfcGFnZShkLCBfZ2ZuKGdmbiksIG1mbiwgMCkg KQogICAgICAgICAgICAgICAgIGRvbWFpbl9jcmFzaChkKTsKLSAgICAgICAg ICAgIHB1dF9wYWdlKHBhZ2UpOworICAgICAgICAgICAgZnJlZV9kb21oZWFw X3BhZ2UocGFnZSk7CiAgICAgICAgIH0KIAogICAgICAgICAvKiBBc3NpZ24g ZWFjaCBvdXRwdXQgcGFnZSB0byB0aGUgZG9tYWluLiAqLwpAQCAtNzYxLDEz ICs3NjMsMTYgQEAgc3RhdGljIGxvbmcgbWVtb3J5X2V4Y2hhbmdlKFhFTl9H VUVTVF9IQU5ETEVfUEFSQU0oeGVuX21lbW9yeV9leGNoYW5nZV90KSBhcmcp CiAgICAgICogY2h1bmtzIHN1Y2NlZWRlZC4KICAgICAgKi8KICBmYWlsOgot ICAgIC8qIFJlYXNzaWduIGFueSBpbnB1dCBwYWdlcyB3ZSBtYW5hZ2VkIHRv IHN0ZWFsLiAqLworICAgIC8qCisgICAgICogUmVhc3NpZ24gYW55IGlucHV0 IHBhZ2VzIHdlIG1hbmFnZWQgdG8gc3RlYWwuICBOQiB0aGF0IGlmIHRoZSBh c3NpZ24KKyAgICAgKiBmYWlscyBhZ2Fpbiwgd2UncmUgb24gdGhlIGhvb2sg Zm9yIGZyZWVpbmcgdGhlIHBhZ2UsIHNpbmNlIHdlJ3ZlIGFscmVhZHkKKyAg ICAgKiBjbGVhcmVkIFBHQ19hbGxvY2F0ZWQuCisgICAgICovCiAgICAgd2hp bGUgKCAocGFnZSA9IHBhZ2VfbGlzdF9yZW1vdmVfaGVhZCgmaW5fY2h1bmtf bGlzdCkpICkKICAgICAgICAgaWYgKCBhc3NpZ25fcGFnZXMoZCwgcGFnZSwg MCwgTUVNRl9ub19yZWZjb3VudCkgKQogICAgICAgICB7CiAgICAgICAgICAg ICBCVUdfT04oIWQtPmlzX2R5aW5nKTsKLSAgICAgICAgICAgIGlmICggdGVz dF9hbmRfY2xlYXJfYml0KF9QR0NfYWxsb2NhdGVkLCAmcGFnZS0+Y291bnRf aW5mbykgKQotICAgICAgICAgICAgICAgIHB1dF9wYWdlKHBhZ2UpOworICAg ICAgICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIH0K IAogIGR5aW5nOgpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9wYWdlX2FsbG9j LmMgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwppbmRleCA0ODJmMDk4OGY3 Li41MmRhNzc2MmUzIDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL3BhZ2VfYWxs b2MuYworKysgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwpAQCAtMjIyMSw3 ICsyMjIxLDcgQEAgaW50IGFzc2lnbl9wYWdlcygKICAgICBmb3IgKCBpID0g MDsgaSA8ICgxIDw8IG9yZGVyKTsgaSsrICkKICAgICB7CiAgICAgICAgIEFT U0VSVChwYWdlX2dldF9vd25lcigmcGdbaV0pID09IE5VTEwpOwotICAgICAg ICBBU1NFUlQoKHBnW2ldLmNvdW50X2luZm8gJiB+KFBHQ19hbGxvY2F0ZWQg fCAxKSkgPT0gMCk7CisgICAgICAgIEFTU0VSVCghcGdbaV0uY291bnRfaW5m byk7CiAgICAgICAgIHBhZ2Vfc2V0X293bmVyKCZwZ1tpXSwgZCk7CiAgICAg ICAgIHNtcF93bWIoKTsgLyogRG9tYWluIHBvaW50ZXIgbXVzdCBiZSB2aXNp YmxlIGJlZm9yZSB1cGRhdGluZyByZWZjbnQuICovCiAgICAgICAgIHBnW2ld LmNvdW50X2luZm8gPSBQR0NfYWxsb2NhdGVkIHwgMTsKLS0gCjIuMjAuMQoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:16 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUE-0001c9-45; Fri, 25 Oct 2019 11:10:30 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUC-0001by-6Y for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:10:28 +0000 X-Inumbo-ID: 08d7804a-f718-11e9-beca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 08d7804a-f718-11e9-beca-bc764e2007e4; Fri, 25 Oct 2019 11:10:21 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxTx-0001VO-Rw; Fri, 25 Oct 2019 11:10:13 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxTx-0002eb-OQ; Fri, 25 Oct 2019 11:10:13 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:13 +0000 Subject: [Xen-announce] Xen Security Advisory 284 v3 (CVE-2019-17340) - grant table transfer issues on large hosts X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17340 / XSA-284 version 3 grant table transfer issues on large hosts UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= When the code processing grant table transfer requests finds a page with an address too large to be represented in the interface with the guest, it allocates a replacement page and copies page contents. However, the code doing so fails to set the newly allocated page's accounting properties correctly, resulting in the page becoming not only unusable by the target domain, but also unfreeable upon domain cleanup. The page as well as certain other remnants of an affected guest will be leaked. Furthermore internal state of the processing code was also not updated correctly, resulting in the insertion of an IOMMU mapping to the page being replaced (and subsequently freed), allowing the domain access to memory it does not own. IMPACT ====== The primary impact is a memory leak. Malicious or buggy guests with passed through PCI devices may also be able to escalate their privileges, crash the host, or access data belonging to other guests. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are vulnerable. 64-bit x86 PV guests can leverage the vulnerability on hosts with physical memory extending past the 16 TiB boundary. This is only possible for hypervisors built with CONFIG_BIGMEM enabled. 32-bit x86 PV guests can leverage the vulnerability on hosts with physical memory extending past the 168 GiB boundary. x86 HVM and PVH guests cannot leverage the vulnerability on libxl based systems. On xend based systems x86 HVM guests can leverage the vulnerability if their guest config file has a 'machine_address_size' setting. ARM systems are not vulnerable. MITIGATION ========== Running only x86 HVM/PVH guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. xsa284.patch xen-unstable, Xen 4.11.x ... 4.7.x $ sha256sum xsa284* 5359796890fc59dd2bbf8d23398c229153c8b9b716c01842dfb9f95d063a3ad4 xsa284.meta 3a95ae9faef3886fd3a4ed5b22d944939bb2f819bb5a2a8061b2311cf3c05776 xsa284.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y17gMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZkqwH/3M5SYKUH8RiLQierb63SJuwkRsxtQeFERCTZMh2 Q5jgE9RX3/QqubExkVV5gSJRDu0QtOGoo0cG1HwEgJ9fMRg1jtap1AGzGLyvSLMZ KQBRVuiaLhsQlrfQ3hRIbvUt/XcF58PWlX923bx7o7HJIUUpmF3+vr5V5QQ2SPz9 5/7extQJKeDG1lixlQfGGr3dLX1d7J20Rh5/vgdfpPYcjX9+Cl+EF1BlW6BQrQz3 S6MiHkxU4GUtPhJjZvqPupJcB5qDw2BTlEtcjzqhe1e60jzniPJW61D5xSFVcPmW uRAV3oDHzG2N2kOk61dTVhI53XdL81IwiGcMeVYg9drzPAo= =Nq7N -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa284.meta" Content-Disposition: attachment; filename="xsa284.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODQsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg0LnBhdGNo IgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0 LjExIjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewog ICAgICAgICAgIlN0YWJsZVJlZiI6ICI4N2Y1MWJmMzY2Y2E3OWI5OGUxZTIw MWJmOWJkN2E5YzE2NDYzMWUyIiwKICAgICAgICAgICJQcmVyZXFzIjogWwog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg0LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAg fQogICAgfSwKICAgICI0LjciOiB7CiAgICAgICJSZWNpcGVzIjogewogICAg ICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjcxMGNjMDk2 OTcxMDE5YmMyZTVhOWFhYmI5YWYxYWNjYTBiNWI5ZTciLAogICAgICAgICAg IlByZXJlcXMiOiBbCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMi OiBbCiAgICAgICAgICAgICJ4c2EyODQucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOCI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODllNjgxODg2NTIwNzllM2JmYWE2 NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgIF0sCiAgICAg ICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI4NC5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45 IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAg ICAgICAgIlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcx YWQwNjcwM2RhNzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAg ICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAi eHNhMjg0LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfSwKICAgICJtYXN0ZXIiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAg ICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjI0ZDUyODI1 MjdmNDY0NzkwN2IzNTcyODIwYjUzMzVjMTVjZDAzNTYiLAogICAgICAgICAg IlByZXJlcXMiOiBbCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMi OiBbCiAgICAgICAgICAgICJ4c2EyODQucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9CiAgfQp9 --=separator Content-Type: application/octet-stream; name="xsa284.patch" Content-Disposition: attachment; filename="xsa284.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IHNldCBwYWdlIHJlZmNvdW50IGZvciBjb3B5LW9uLWdyYW50 LXRyYW5zZmVyCgpDb21taXQgNWNjNzdmOTA5OCAoIjMyLW9uLTY0OiBGaXgg ZG9tYWluIGFkZHJlc3Mtc2l6ZSBjbGFtcGluZywKaW1wbGVtZW50IiksIHdo aWNoIGludHJvZHVjZWQgdGhpcyBmdW5jdGlvbmFsaXR5LCB0b29rIGNhcmUg b2YgY2xlYXJpbmcKdGhlIG9sZCBwYWdlJ3MgUEdDX2FsbG9jYXRlZCwgYnV0 IGZhaWxlZCB0byBzZXQgdGhlIGJpdCAoYW5kIGluc3RhbGwgdGhlCmFzc29j aWF0ZWQgcmVmZXJlbmNlKSBvbiB0aGUgbmV3bHkgYWxsb2NhdGVkIG9uZS4g RnVydGhlcm1vcmUgdGhlICJtZm4iCmxvY2FsIHZhcmlhYmxlIHdhcyBuZXZl ciB1cGRhdGVkLCBhbmQgaGVuY2UgdGhlIHdyb25nIE1GTiB3YXMgcGFzc2Vk IHRvCmd1ZXN0X3BoeXNtYXBfYWRkX3BhZ2UoKSAoYW5kIGJhY2sgdG8gdGhl IGRlc3RpbmF0aW9uIGRvbWFpbikgaW4gdGhpcwpjYXNlLCBsZWFkaW5nIHRv IGFuIElPTU1VIG1hcHBpbmcgaW50byBhbiB1bm93bmVkIHBhZ2UuCgpJZGVh bGx5IHRoZSBjb2RlIHdvdWxkIHVzZSBhc3NpZ25fcGFnZXMoKSwgYnV0IHRo ZSBjYWxsIHRvCmdudHRhYl9wcmVwYXJlX2Zvcl90cmFuc2ZlcigpIHNpdHMg aW4gdGhlIG1pZGRsZSBvZiB0aGUgYWN0aW9ucwptaXJyb3JpbmcgdGhhdCBm dW5jdGlvbi4KClRoaXMgaXMgWFNBLTI4NC4KClNpZ25lZC1vZmYtYnk6IEph biBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6IEdlb3Jn ZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4KCi0tLSBhL3hl bi9jb21tb24vZ3JhbnRfdGFibGUuYworKysgYi94ZW4vY29tbW9uL2dyYW50 X3RhYmxlLmMKQEAgLTIxODMsNiArMjE4Myw4IEBAIGdudHRhYl90cmFuc2Zl cigKICAgICAgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gfihQR0NfY291 bnRfbWFza3xQR0NfYWxsb2NhdGVkKTsKICAgICAgICAgICAgIGZyZWVfZG9t aGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICAgICAgcGFnZSA9IG5ld19wYWdl OworICAgICAgICAgICAgcGFnZS0+Y291bnRfaW5mbyA9IFBHQ19hbGxvY2F0 ZWQgfCAxOworICAgICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7 CiAgICAgICAgIH0KIAogICAgICAgICBzcGluX2xvY2soJmUtPnBhZ2VfYWxs b2NfbG9jayk7Cg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:24 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:24 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxV5-0002AL-G7; Fri, 25 Oct 2019 11:11:23 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxV4-000296-Ey for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:22 +0000 X-Inumbo-ID: 1576e67e-f718-11e9-94c4-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 1576e67e-f718-11e9-94c4-12813bfff9fa; Fri, 25 Oct 2019 11:10:42 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUF-0001Vj-GY; Fri, 25 Oct 2019 11:10:31 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUF-0002fv-DR; Fri, 25 Oct 2019 11:10:31 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:31 +0000 Subject: [Xen-announce] Xen Security Advisory 285 v3 (CVE-2019-17341) - race with pass-through device hotplug X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17341 / XSA-285 version 3 race with pass-through device hotplug UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= When adding a passed-through PCI device to a domain after it was already started, IOMMU page tables may need constructing on the fly. For PV guests the decision whether a page ought to have a mapping is based on whether the page is writable, to prevent IOMMU access to things like page tables. Writablility of a page may, however, change at any time. Failure of the relevant code to respect this possible race may lead to IOMMU mappings of, in particular, page tables, allowing the guest to alter such page tables without Xen auditing the changes. IMPACT ====== Malicious PV guests can escalate their privilege to that of the hypervisor. VULNERABLE SYSTEMS ================== All versions of Xen are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. Only guests which are assigned a device after domain creation can exploit this vulnerability. Guests which are not assigned devices, or guests assigned devices at domain creation time, cannot exploit this vulnerability. MITIGATION ========== Running only HVM or PVH guests avoids the vulnerability. Assigning passed-through PCI devices to PV guests at domain creation time also avoids the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa285.patch xen-unstable xsa285-4.11.patch Xen 4.7.x - Xen 4.11.x $ sha256sum xsa285* 0851a4a9120220e2b03eafaf94648077154b6a6f27c29055d3779ccad7684fce xsa285.meta 9e96d3763158edde8d664c3e26761e63ca6f96bb921e0d7eb68351fe47499bde xsa285.patch 38ec20b04e0a859abe9850803ae00a33e48591a9949e5287dfa3725f3bd179f3 xsa285-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y178MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZnhUIALWg5ROzP7vpvNOEQDICm/A/AxjPLB6uHnj95bBJ CxfLZPZyxUak9jmn8bJJrhJBNGS/RFUWrwWm+mHku8ywNKTcHkhGtweS8/GjuMeG I7hhh/Ux39vs/kPWvy7uydMIMrcIsiG69NWXl6xWMGkcmcmlkJCAi2KHX20Jb5qi Izy7swNoBFWuuGMaBTg8YJ+XfqQGonemzgviY01EHQqJo/2wPyJjgsbZzu6XlNJc R3K9K4RDzjtemIEQps9CWA8ilEXxv6DIhVKBx0gNLIrJZPVEh2awLr5Ve2YZIdk6 N5hSP2LFyueDhmKvwrMnrrKF4XqHlfyIsW0l8TXwa/OUTVI= =6noj -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa285.meta" Content-Disposition: attachment; filename="xsa285.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODUsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQK ICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAg ICAgInhzYTI4NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0K ICAgICAgfQogICAgfSwKICAgICI0LjExIjogewogICAgICAiUmVjaXBlcyI6 IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI4 N2Y1MWJmMzY2Y2E3OWI5OGUxZTIwMWJmOWJkN2E5YzE2NDYzMWUyIiwKICAg ICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQKICAgICAgICAg IF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI4 NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfSwKICAgICI0LjciOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAg ICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjcxMGNjMDk2OTcx MDE5YmMyZTVhOWFhYmI5YWYxYWNjYTBiNWI5ZTciLAogICAgICAgICAgIlBy ZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NAogICAgICAgICAgXSwKICAgICAg ICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg1LTQuMTEucGF0 Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAg IjQuOCI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsK ICAgICAgICAgICJTdGFibGVSZWYiOiAiOTA4ZTc2OGZhZTQ5YThkYjAwODll NjgxODg2NTIwNzllM2JmYWE2NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsK ICAgICAgICAgICAgMjg0CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODUtNC4xMS5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45Ijogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcw M2RhNzdlMGQ1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI4NS00LjExLnBhdGNoIgogICAgICAgICAgXQogICAg ICAgIH0KICAgICAgfQogICAgfSwKICAgICJtYXN0ZXIiOiB7CiAgICAgICJS ZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxl UmVmIjogIjI0ZDUyODI1MjdmNDY0NzkwN2IzNTcyODIwYjUzMzVjMTVjZDAz NTYiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NAog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMjg1LnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAg fQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa285.patch" Content-Disposition: attachment; filename="xsa285.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBJT01NVS94ODY6IGZpeCB0eXBlIHJlZi1jb3VudGluZyByYWNlIHVwb24g SU9NTVUgcGFnZSB0YWJsZSBjb25zdHJ1Y3Rpb24KCldoZW4gYXJjaF9pb21t dV9wb3B1bGF0ZV9wYWdlX3RhYmxlKCkgZ2V0cyBpbnZva2VkIGZvciBhbiBh bHJlYWR5CnJ1bm5pbmcgZ3Vlc3QsIHNpbXBseSBsb29raW5nIGF0IHBhZ2Ug dHlwZXMgb25jZSBpc24ndCBlbm91Z2gsIGFzIHRoZXkKbWF5IGNoYW5nZSBh dCBhbnkgdGltZS4gQWRkIGxvZ2ljIHRvIHJlLWNoZWNrIHRoZSB0eXBlIGFm dGVyIGhhdmluZwptYXBwZWQgdGhlIHBhZ2UsIHVubWFwcGluZyBpdCBhZ2Fp biBpZiBuZWVkZWQuCgpUaGlzIGlzIFhTQS0yODUuCgpTaWduZWQtb2ZmLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClRlbnRhdGl2ZWx5 LUFja2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRy aXguY29tPgotLS0KdjQ6IFJlLXdyaXRlIGNvbW1lbnQgKHVzZSBHZW9yZ2Un cyB3b3JkaW5nKS4KdjM6IFJlLWJhc2UuCnYyOiBSZS1iYXNlLgoKLS0tIGEv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11LmMKKysrIGIveGVu L2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11LmMKQEAgLTcwLDYgKzcw LDI3IEBAIGludCBhcmNoX2lvbW11X3BvcHVsYXRlX3BhZ2VfdGFibGUoc3Ry dWMKICAgICAgICAgICAgICAgICByYyA9IGlvbW11X21hcChkLCBfZGZuKGdm biksIF9tZm4obWZuKSwgUEFHRV9PUkRFUl80SywKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBJT01NVUZfcmVhZGFibGUgfCBJT01NVUZfd3Jp dGFibGUsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJmZsdXNo X2ZsYWdzKTsKKworICAgICAgICAgICAgICAgIC8qCisgICAgICAgICAgICAg ICAgICogV2UgbWF5IGJlIHdvcmtpbmcgYmVoaW5kIHRoZSBiYWNrIG9mIGEg cnVubmluZyBndWVzdCwgd2hpY2gKKyAgICAgICAgICAgICAgICAgKiBtYXkg Y2hhbmdlIHRoZSB0eXBlIG9mIGEgcGFnZSBhdCBhbnkgdGltZS4gIFdlIGNh bid0IHByZXZlbnQKKyAgICAgICAgICAgICAgICAgKiB0aGlzIChmb3IgaW5z dGFuY2UsIGJ5IGJ1bXBpbmcgdGhlIHR5cGUgY291bnQgd2hpbGUgbWFwcGlu ZworICAgICAgICAgICAgICAgICAqIHRoZSBwYWdlKSB3aXRob3V0IGNhdXNp bmcgbGVnaXRpbWF0ZSBndWVzdCB0eXBlLWNoYW5nZQorICAgICAgICAgICAg ICAgICAqIG9wZXJhdGlvbnMgdG8gZmFpbC4gIFNvIGFmdGVyIGFkZGluZyB0 aGUgcGFnZSB0byB0aGUgSU9NTVUsCisgICAgICAgICAgICAgICAgICogY2hl Y2sgYWdhaW4gdG8gbWFrZSBzdXJlIHRoaXMgaXMgc3RpbGwgdmFsaWQuICBO QiB0aGF0IHRoZQorICAgICAgICAgICAgICAgICAqIHdyaXRhYmxlIGVudHJ5 IGluIHRoZSBpb21tdSBpcyBoYXJtbGVzcyB1bnRpbCBsYXRlciwgd2hlbgor ICAgICAgICAgICAgICAgICAqIHRoZSBhY3R1YWwgZGV2aWNlIGdldHMgYXNz aWduZWQuCisgICAgICAgICAgICAgICAgICovCisgICAgICAgICAgICAgICAg aWYgKCAhcmMgJiYgIWlzX2h2bV9kb21haW4oZCkgJiYKKyAgICAgICAgICAg ICAgICAgICAgICgocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiBQR1RfdHlw ZV9tYXNrKSAhPQorICAgICAgICAgICAgICAgICAgICAgIFBHVF93cml0YWJs ZV9wYWdlKSApCisgICAgICAgICAgICAgICAgeworICAgICAgICAgICAgICAg ICAgICByYyA9IGlvbW11X3VubWFwKGQsIF9kZm4oZ2ZuKSwgUEFHRV9PUkRF Ul80SywgJmZsdXNoX2ZsYWdzKTsKKyAgICAgICAgICAgICAgICAgICAgLyog SWYgdGhlIHR5cGUgY2hhbmdlZCB5ZXQgYWdhaW4sIHNpbXBseSBmb3JjZSBh IHJldHJ5LiAqLworICAgICAgICAgICAgICAgICAgICBpZiAoICFyYyAmJiAo KHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0K KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBHVF93cml0YWJs ZV9wYWdlKSApCisgICAgICAgICAgICAgICAgICAgICAgICByYyA9IC1FUkVT VEFSVDsKKyAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgICB9CiAgICAg ICAgICAgICBpZiAoIHJjICkKICAgICAgICAgICAgIHsK --=separator Content-Type: application/octet-stream; name="xsa285-4.11.patch" Content-Disposition: attachment; filename="xsa285-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBJT01NVS94ODY6IGZpeCB0eXBlIHJlZi1jb3VudGluZyByYWNlIHVwb24g SU9NTVUgcGFnZSB0YWJsZSBjb25zdHJ1Y3Rpb24KCldoZW4gYXJjaF9pb21t dV9wb3B1bGF0ZV9wYWdlX3RhYmxlKCkgZ2V0cyBpbnZva2VkIGZvciBhbiBh bHJlYWR5CnJ1bm5pbmcgZ3Vlc3QsIHNpbXBseSBsb29raW5nIGF0IHBhZ2Ug dHlwZXMgb25jZSBpc24ndCBlbm91Z2gsIGFzIHRoZXkKbWF5IGNoYW5nZSBh dCBhbnkgdGltZS4gQWRkIGxvZ2ljIHRvIHJlLWNoZWNrIHRoZSB0eXBlIGFm dGVyIGhhdmluZwptYXBwZWQgdGhlIHBhZ2UsIHVubWFwcGluZyBpdCBhZ2Fp biBpZiBuZWVkZWQuCgpUaGlzIGlzIFhTQS0yODUuCgpTaWduZWQtb2ZmLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClRlbnRhdGl2ZWx5 LUFja2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRy aXguY29tPgoKLS0tIGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lv bW11LmMKKysrIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gveDg2L2lvbW11 LmMKQEAgLTY4LDYgKzY4LDI3IEBAIGludCBhcmNoX2lvbW11X3BvcHVsYXRl X3BhZ2VfdGFibGUoc3RydWN0IGRvbWFpbiAqZCkKICAgICAgICAgICAgICAg ICByYyA9IGhkLT5wbGF0Zm9ybV9vcHMtPm1hcF9wYWdlKGQsIGdmbiwgbWZu LAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgSU9NTVVGX3JlYWRhYmxlIHwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl93cml0YWJsZSk7 CisKKyAgICAgICAgICAgICAgICAvKgorICAgICAgICAgICAgICAgICAqIFdl IG1heSBiZSB3b3JraW5nIGJlaGluZCB0aGUgYmFjayBvZiBhIHJ1bm5pbmcg Z3Vlc3QsIHdoaWNoCisgICAgICAgICAgICAgICAgICogbWF5IGNoYW5nZSB0 aGUgdHlwZSBvZiBhIHBhZ2UgYXQgYW55IHRpbWUuICBXZSBjYW4ndCBwcmV2 ZW50CisgICAgICAgICAgICAgICAgICogdGhpcyAoZm9yIGluc3RhbmNlLCBi eSBidW1waW5nIHRoZSB0eXBlIGNvdW50IHdoaWxlIG1hcHBpbmcKKyAgICAg ICAgICAgICAgICAgKiB0aGUgcGFnZSkgd2l0aG91dCBjYXVzaW5nIGxlZ2l0 aW1hdGUgZ3Vlc3QgdHlwZS1jaGFuZ2UKKyAgICAgICAgICAgICAgICAgKiBv cGVyYXRpb25zIHRvIGZhaWwuICBTbyBhZnRlciBhZGRpbmcgdGhlIHBhZ2Ug dG8gdGhlIElPTU1VLAorICAgICAgICAgICAgICAgICAqIGNoZWNrIGFnYWlu IHRvIG1ha2Ugc3VyZSB0aGlzIGlzIHN0aWxsIHZhbGlkLiAgTkIgdGhhdCB0 aGUKKyAgICAgICAgICAgICAgICAgKiB3cml0YWJsZSBlbnRyeSBpbiB0aGUg aW9tbXUgaXMgaGFybWxlc3MgdW50aWwgbGF0ZXIsIHdoZW4KKyAgICAgICAg ICAgICAgICAgKiB0aGUgYWN0dWFsIGRldmljZSBnZXRzIGFzc2lnbmVkLgor ICAgICAgICAgICAgICAgICAqLworICAgICAgICAgICAgICAgIGlmICggIXJj ICYmICFpc19odm1fZG9tYWluKGQpICYmCisgICAgICAgICAgICAgICAgICAg ICAoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykg IT0KKyAgICAgICAgICAgICAgICAgICAgICBQR1Rfd3JpdGFibGVfcGFnZSkg KQorICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAgICAgcmMg PSBoZC0+cGxhdGZvcm1fb3BzLT51bm1hcF9wYWdlKGQsIGdmbik7CisgICAg ICAgICAgICAgICAgICAgIC8qIElmIHRoZSB0eXBlIGNoYW5nZWQgeWV0IGFn YWluLCBzaW1wbHkgZm9yY2UgYSByZXRyeS4gKi8KKyAgICAgICAgICAgICAg ICAgICAgaWYgKCAhcmMgJiYgKChwYWdlLT51LmludXNlLnR5cGVfaW5mbyAm IFBHVF90eXBlX21hc2spID09CisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAg ICAgICAgICAgcmMgPSAtRVJFU1RBUlQ7CisgICAgICAgICAgICAgICAgfQog ICAgICAgICAgICAgfQogICAgICAgICAgICAgaWYgKCByYyApCiAgICAgICAg ICAgICB7Cg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:35 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:35 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVH-0002Od-3D; Fri, 25 Oct 2019 11:11:35 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVF-0002MT-8o for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:33 +0000 X-Inumbo-ID: 1667b16c-f718-11e9-bbab-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 1667b16c-f718-11e9-bbab-bc764e2007e4; Fri, 25 Oct 2019 11:10:44 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUM-0001Wi-Hm; Fri, 25 Oct 2019 11:10:38 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUM-0002l3-Ex; Fri, 25 Oct 2019 11:10:38 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:38 +0000 Subject: [Xen-announce] Xen Security Advisory 292 v3 (CVE-2019-17346) - x86: insufficient TLB flushing when using PCID X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17346 / XSA-292 version 3 x86: insufficient TLB flushing when using PCID UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= Use of Process Context Identifiers (PCID) was introduced into Xen in order to improve performance after XSA-254 (and in particular its Meltdown sub-issue). This enablement implied changes to the TLB flushing logic. The particular case of context switch to a vCPU of a PCID-enabled guest left open a time window between the full TLB flush, and the actual address space switch, during which additional TLB entries (from the address space about to be switched away from) can be accumulated, which will not subsequently be purged. IMPACT ====== Malicious PV guests may be able to cause a host crash (Denial of Service) or to gain access to data pertaining to other guests. Privilege escalation opportunities cannot be ruled out. Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems running x86 PV guests are vulnerable. Systems running only x86 HVM or PVH guests are not vulnerable. Only systems with at least one PCID-enabled PV guest are vulnerable. Systems where PCID or INVPCID are unavailable or entirely disabled are not vulnerable. Note that PCID is enabled by default for both 64-bit dom0 and 64-bit domU when hardware supports it. PCID acceleration has been backported to the following versions: - Xen 4.11.x, - Xen 4.10.2 and onwards, - Xen 4.9.3 and onwards, - Xen 4.8.4 and onwards, - Xen 4.7.6. To exploit this vulnerability, problematic TLB entries must be created between the full TLB flush and the address space switch. The NMI watchdog handler (enabled via the "watchdog" command line option) is known to create such entries; other vectors cannot be ruled out. MITIGATION ========== Running only HVM or PVH guests will avoid this vulnerability. Running only 32-bit PV guests alongside the other two types mentioned above will also avoid this vulnerability, provided Dom0 is also 32-bit or is not using PCID. Making a 64-bit Dom0 not use PCID can be achieved by e.g. "xpti=no-dom0 pcid=xpti". Disabling use of PCID entirely, by passing "pcid=0" or "invpcid=0" as a command line option to the hypervisor, will also avoid this vulnerability (albeit re-introducing the XPTI performance regression use of PCID was intended to reduce). Disabling the watchdog timer will remove the only known way of reliably creating problematic TLB entries, potentially reducing the risk of a successful attack. CREDITS ======= This issue was discovered by Sergey Dyasli and Andrew Cooper of Citrix. RESOLUTION ========== Applying the attached patch resolves this issue. xsa292.patch xen-unstable, Xen 4.11.x ... Xen 4.7.6 $ sha256sum xsa292* c515e98e5ae8a16bc5c894741eea5523a7e568f81ee8a570626dcc0f58f40b40 xsa292.meta f42cb5e1eae5a5c6f0fd84e38df4db9f09a4e1176905c37f292fef9855c82fea xsa292.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y1+cMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZV48H/i1Wi6DV90quHvewv0j792crdJojnHgq/8V3+hfT lXWcmfW5IQLi02o4aG7XjUYwRTQ6clRgF4AZDZyrAY15QyVCz9diusvWOUzaq7Pd hrvuIMeaB3+ba2OY7bB3P0sCekhhj6MwqKEhGVlbLEB8A0vGq9XjZBuTmws6QA2J 6Il8fxEVupdtETsf3KlYfxvJOubN/B+tByaIpdWU0C2M66EVa4pcijSLcvoylGxi YS7jJrSMcqg4Sx/e/HnzCJ7jrvzhxSDHeyhPy1/NrwlQz2NQjd+FoFownsH48LuH 6LA6GGTIk5v+a/GtNVpb8Wwfg0UleabF+8S30C6QasUO70E= =Pk5K -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa292.meta" Content-Disposition: attachment; filename="xsa292.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTIsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxCiAgICAg ICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4 c2EyOTIucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAg ICB9LAogICAgIjQuMTEiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAg ICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZj YTc5Yjk4ZTFlMjAxYmY5YmQ3YTljMTY0NjMxZTIiLAogICAgICAgICAgIlBy ZXJlcXMiOiBbCiAgICAgICAgICAgIDI4NCwKICAgICAgICAgICAgMjg1LAog ICAgICAgICAgICAyODcsCiAgICAgICAgICAgIDI4OCwKICAgICAgICAgICAg MjkwLAogICAgICAgICAgICAyOTEKICAgICAgICAgIF0sCiAgICAgICAgICAi UGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTI5Mi5wYXRjaCIKICAgICAg ICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43Ijogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFmMWFj Y2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAg ICAgICAgICAyODgsCiAgICAgICAgICAgIDI5MAogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjkyLnBhdGNo IgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0 LjgiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAg ICAgICAgICAiU3RhYmxlUmVmIjogIjkwOGU3NjhmYWU0OWE4ZGIwMDg5ZTY4 MTg4NjUyMDc5ZTNiZmFhNjYiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAg ICAgICAgICAgIDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAy ODcsCiAgICAgICAgICAgIDI4OCwKICAgICAgICAgICAgMjkwLAogICAgICAg ICAgICAyOTEKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsK ICAgICAgICAgICAgInhzYTI5Mi5wYXRjaCIKICAgICAgICAgIF0KICAgICAg ICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICJmNWFjZjk3ZjY2OWM2YmM5NjkxZTAzNzcxYWQwNjcwM2RhNzdlMGQ1IiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAg ICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAgICAyODgs CiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxCiAgICAgICAgICBd LAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyOTIu cGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAog ICAgIm1hc3RlciI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhl biI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3 OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1NiIsCiAgICAgICAgICAiUHJlcmVx cyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAgICAg ICAgICAgIDI4NywKICAgICAgICAgICAgMjg4LAogICAgICAgICAgICAyOTAs CiAgICAgICAgICAgIDI5MQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjkyLnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa292.patch" Content-Disposition: attachment; filename="xsa292.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvbW06IHByb3Blcmx5IGZsdXNoIFRMQiBpbiBzd2l0Y2hfY3IzX2Ny NCgpCgpUaGUgQ1IzIHZhbHVlcyB1c2VkIGZvciBjb250ZXh0cyBydW4gd2l0 aCBQQ0lEIGVuYWJsZWQgdW5pZm9ybWx5IGhhdmUKQ1IzLk5PRkxVU0ggc2V0 LCByZXN1bHRpbmcgaW4gdGhlIENSMyB3cml0ZSBpdHNlbGYgdG8gbm90IGNh dXNlIGFueQpmbHVzaGluZyBhdCBhbGwuIFdoZW4gdGhlIHNlY29uZCBDUjQg d3JpdGUgaXMgc2tpcHBlZCBvciBkb2Vzbid0IGRvIGFueQpmbHVzaGluZywg dGhlcmUncyBub3RoaW5nIHNvIGZhciB3aGljaCB3b3VsZCBwdXJnZSBUTEIg ZW50cmllcyB3aGljaCBtYXkKaGF2ZSBhY2N1bXVsYXRlZCBhZ2FpbiBpZiB0 aGUgUENJRCBkb2Vzbid0IGNoYW5nZTsgdGhlICJqdXN0IGluIGNhc2UiCmZs dXNoIG9ubHkgYWZmZWN0cyB0aGUgY2FzZSB3aGVyZSB0aGUgUENJRCBhY3R1 YWxseSBjaGFuZ2VzLiAoVGhlcmUgbWF5CmJlIHBhcnRpY3VsYXJseSBtYW55 IFRMQiBlbnRyaWVzIHJlLWFjY3VtdWxhdGVkIGluIGNhc2Ugb2YgYSB3YXRj aGRvZwpOTUkga2lja2luZyBpbiBkdXJpbmcgdGhlIGNyaXRpY2FsIHRpbWUg d2luZG93LikKClN1cHByZXNzIHRoZSBuby1mbHVzaCBiZWhhdmlvciBvZiB0 aGUgQ1IzIHdyaXRlIGluIHRoaXMgcGFydGljdWxhciBjYXNlLgoKU2ltaWxh cmx5IHRoZSBzZWNvbmQgQ1I0IHdyaXRlIG1heSBub3QgY2F1c2UgYW55IGZs dXNoaW5nIG9mIFRMQiBlbnRyaWVzCmVzdGFibGlzaGVkIGFnYWluIHdoaWxl IHRoZSBvcmlnaW5hbCBQQ0lEIHdhcyBzdGlsbCBpbiB1c2UgLSBpdCBtYXkg Z2V0CnBlcmZvcm1lZCBiZWNhdXNlIG9mIHVucmVsYXRlZCBiaXRzIGNoYW5n aW5nLiBUaGUgZmx1c2ggb2YgdGhlIG9sZCBQQ0lECm5lZWRzIHRvIGhhcHBl biBuZXZlcnRoZWxlc3MuCgpBdCB0aGUgc2FtZSB0aW1lIGFsc28gZWxpbWlu YXRlIGEgcG9zc2libGUgcmFjZSB3aXRoIGxhenkgY29udGV4dApzd2l0Y2g6 IEp1c3QgbGlrZSBmb3IgQ1I0LCBDUjMgbWF5IGNoYW5nZSBhdCBhbnkgdGlt ZSB3aGlsZSBpbnRlcnJ1cHRzCmFyZSBlbmFibGVkLCBkdWUgdG8gdGhlIF9f c3luY19sb2NhbF9leGVjc3RhdGUoKSBpbnZvY2F0aW9uIGZyb20gdGhlCmZs dXNoIElQSSBoYW5kbGVyLiBJdCBpcyBmb3IgdGhhdCByZWFzb24gdGhhdCB0 aGUgQ1IzIHJlYWQsIGp1c3QgbGlrZQp0aGUgQ1I0IG9uZSwgbXVzdCBoYXBw ZW4gb25seSBhZnRlciBpbnRlcnJ1cHRzIGhhdmUgYmVlbiB0dXJuZWQgb2Zm LgoKVGhpcyBpcyBYU0EtMjkyLgoKUmVwb3J0ZWQtYnk6IFNlcmdleSBEeWFz bGkgPHNlcmdleS5keWFzbGlAY2l0cml4LmNvbT4KUmVwb3J0ZWQtYnk6IEFu ZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClRlc3Rl ZC1ieTogU2VyZ2V5IER5YXNsaSA8c2VyZ2V5LmR5YXNsaUBjaXRyaXguY29t PgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5j b20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KdjM6IEFkanVzdCBjb21tZW50cy4gRHJvcCBv bGRfY3I0IGZyb20gdGhlIFBHRSBjaGVjayBpbiB0aGUgZXhwcmVzc2lvbgog ICAgY29udHJvbGxpbmcgdGhlIGludm9jYXRpb24gb2YgaW52cGNpZF9mbHVz aF9zaW5nbGVfY29udGV4dCgpLCBhcyBQR0UKICAgIGlzIGFsd2F5cyBjbGVh ciB0aGVyZS4KdjI6IERlY291cGxlIGludnBjaWRfZmx1c2hfc2luZ2xlX2Nv bnRleHQoKSBmcm9tIDJuZCBDUjQgd3JpdGUuCgotLS0gYS94ZW4vYXJjaC94 ODYvZmx1c2h0bGIuYworKysgYi94ZW4vYXJjaC94ODYvZmx1c2h0bGIuYwpA QCAtMTAzLDkgKzEwMyw4IEBAIHN0YXRpYyB2b2lkIGRvX3RsYl9mbHVzaCh2 b2lkKQogCiB2b2lkIHN3aXRjaF9jcjNfY3I0KHVuc2lnbmVkIGxvbmcgY3Iz LCB1bnNpZ25lZCBsb25nIGNyNCkKIHsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBvbGRfY3I0OworICAgIHVuc2lnbmVkIGxvbmcgZmxhZ3MsIG9sZF9j cjQsIG9sZF9wY2lkOwogICAgIHUzMiB0OwotICAgIHVuc2lnbmVkIGxvbmcg b2xkX3BjaWQgPSBjcjNfcGNpZChyZWFkX2NyMygpKTsKIAogICAgIC8qIFRo aXMgbm9uLXJlZW50cmFudCBmdW5jdGlvbiBpcyBzb21ldGltZXMgY2FsbGVk IGluIGludGVycnVwdCBjb250ZXh0LiAqLwogICAgIGxvY2FsX2lycV9zYXZl KGZsYWdzKTsKQEAgLTEzMywxNSArMTMyLDM4IEBAIHZvaWQgc3dpdGNoX2Ny M19jcjQodW5zaWduZWQgbG9uZyBjcjMsIHUKICAgICAgICAgICovCiAgICAg ICAgIGludnBjaWRfZmx1c2hfYWxsX25vbmdsb2JhbHMoKTsKIAorICAgIC8q CisgICAgICogSWYgd2UgZG9uJ3QgY2hhbmdlIFBDSURzLCB0aGUgQ1IzIHdy aXRlIGJlbG93IG5lZWRzIHRvIGZsdXNoIHRoaXMgdmVyeQorICAgICAqIFBD SUQsIGV2ZW4gd2hlbiBhIGZ1bGwgZmx1c2ggd2FzIHBlcmZvcm1lZCBhYm92 ZSwgYXMgd2UgYXJlIGN1cnJlbnRseQorICAgICAqIGFjY3VtdWxhdGluZyBU TEIgZW50cmllcyBhZ2FpbiBmcm9tIHRoZSBvbGQgYWRkcmVzcyBzcGFjZS4K KyAgICAgKiBOQjogQ2xlYXJpbmcgdGhlIGJpdCB3aGVuIHdlIGRvbid0IHVz ZSBQQ0lEIGlzIGJlbmlnbiAoYXMgaXQgaXMgY2xlYXIKKyAgICAgKiBhbHJl YWR5IGluIHRoYXQgY2FzZSksIGJ1dCBhbGxvd3MgdGhlIGlmKCkgdG8gYmUg bW9yZSBzaW1wbGUuCisgICAgICovCisgICAgb2xkX3BjaWQgPSBjcjNfcGNp ZChyZWFkX2NyMygpKTsKKyAgICBpZiAoIG9sZF9wY2lkID09IGNyM19wY2lk KGNyMykgKQorICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9GTFVTSDsKKwog ICAgIHdyaXRlX2NyMyhjcjMpOwogCiAgICAgaWYgKCBvbGRfY3I0ICE9IGNy NCApCiAgICAgICAgIHdyaXRlX2NyNChjcjQpOwotICAgIGVsc2UgaWYgKCBv bGRfcGNpZCAhPSBjcjNfcGNpZChjcjMpICkKLSAgICAgICAgLyoKLSAgICAg ICAgICogTWFrZSBzdXJlIG5vIFRMQiBlbnRyaWVzIHJlbGF0ZWQgdG8gdGhl IG9sZCBQQ0lEIGNyZWF0ZWQgYmV0d2VlbgotICAgICAgICAgKiBmbHVzaGlu ZyB0aGUgVExCIGFuZCB3cml0aW5nIHRoZSBuZXcgJWNyMyB2YWx1ZSByZW1h aW4gaW4gdGhlIFRMQi4KLSAgICAgICAgICovCisKKyAgICAvKgorICAgICAq IE1ha2Ugc3VyZSBubyBUTEIgZW50cmllcyByZWxhdGVkIHRvIHRoZSBvbGQg UENJRCBjcmVhdGVkIGJldHdlZW4KKyAgICAgKiBmbHVzaGluZyB0aGUgVExC IGFuZCB3cml0aW5nIHRoZSBuZXcgJWNyMyB2YWx1ZSByZW1haW4gaW4gdGhl IFRMQi4KKyAgICAgKgorICAgICAqIFRoZSB3cml0ZSB0byBDUjQganVzdCBh Ym92ZSBoYXMgcGVyZm9ybWVkIGEgd2lkZXIgZmx1c2ggaW4gY2VydGFpbgor ICAgICAqIGNhc2VzLCB3aGljaCB0aGVyZWZvcmUgZ2V0IGV4Y2x1ZGVkIGhl cmUuIFNpbmNlIHRoYXQgd3JpdGUgaXMKKyAgICAgKiBjb25kaXRpb25hbCwg bm90ZSBpbiBwYXJ0aWN1bGFyIHRoYXQgaXQgd29uJ3QgYmUgc2tpcHBlZCBp ZiBQQ0lERQorICAgICAqIHRyYW5zaXRpb25zIGZyb20gMSB0byAwLiBUaGlz IGlzIGJlY2F1c2UgdGhlIENSNCB3cml0ZSBmdXJ0aGVyIHVwIHdpbGwKKyAg ICAgKiBoYXZlIGJlZW4gc2tpcHBlZCBpbiB0aGlzIGNhc2UsIGFzIFBDSURF IGFuZCBQR0Ugd29uJ3QgYm90aCBiZSBzZXQgYXQKKyAgICAgKiB0aGUgc2Ft ZSB0aW1lLgorICAgICAqCisgICAgICogTm90ZSBhbHNvIHRoYXQgUEdFIGlz IGFsd2F5cyBjbGVhciBpbiBvbGRfY3I0LgorICAgICAqLworICAgIGlmICgg b2xkX3BjaWQgIT0gY3IzX3BjaWQoY3IzKSAmJgorICAgICAgICAgIShjcjQg JiBYODZfQ1I0X1BHRSkgJiYKKyAgICAgICAgIChvbGRfY3I0ICYgWDg2X0NS NF9QQ0lERSkgPD0gKGNyNCAmIFg4Nl9DUjRfUENJREUpICkKICAgICAgICAg aW52cGNpZF9mbHVzaF9zaW5nbGVfY29udGV4dChvbGRfcGNpZCk7CiAKICAg ICBwb3N0X2ZsdXNoKHQpOwo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:45 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVQ-0002ZB-PU; Fri, 25 Oct 2019 11:11:44 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVP-0002Xd-93 for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:43 +0000 X-Inumbo-ID: 18ef2a50-f718-11e9-beca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 18ef2a50-f718-11e9-beca-bc764e2007e4; Fri, 25 Oct 2019 11:10:48 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUO-0001X4-7z; Fri, 25 Oct 2019 11:10:40 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUO-0002mf-4u; Fri, 25 Oct 2019 11:10:40 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:40 +0000 Subject: [Xen-announce] Xen Security Advisory 293 v4 (CVE-2019-17347) - x86: PV kernel context switch corruption X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17347 / XSA-293 version 4 x86: PV kernel context switch corruption UPDATES IN VERSION 4 ==================== Correct affected versions statement. CVE assigned. ISSUE DESCRIPTION ================= On hardware supporting the fsgsbase feature, 64bit PV guests can set and clear the applicable control bit in its virtualised %cr4, but the feature remains fully active in hardware. Therefore, the associated instructions are actually usable. Linux, which does not currently support this feature, has various optimisations in its context switch path which justifiably assume that userspace can't actually make changes without a system call. Xen's behaviour of having this feature active behind the guest kernel's back undermines the correctness of any context switch logic which depends on the feature being disabled. Userspace can therefore corrupt fsbase or gsbase (commonly used for Thread Local Storage) in the next thread to be scheduled on the current vcpu. IMPACT ====== A malicious unprivileged guest userspace process can escalate its privilege to that of other userspace processes in the same guest, and potentially thereby to that of the guest operating system. Additionally, some guest software which attempts to use this CPU feature may trigger the bug accidentally, leading to crashes or corruption of other processes in the same guest. VULNERABLE SYSTEMS ================== Xen versions 4.4 and later are vulnerable. Xen 4.3 and earlier are not vulnerable. Only x86 hardware with the fsgsbase feature is vulnerable. This is believed to be Intel IvyBridge and later hardware, and AMD Steamroller and later hardware. ARM hardware is not affected. Only 64bit PV guests can exploit the vulnerability. 32bit PV guests, and HVM/PVH guests cannot exploit the vulnerability. Whether the bug is exploitable, and whether it will be triggered by accident, depend in a complicated way on the guest operating system and its configuration. Most guests are vulnerable to malicious userspace processes. MITIGATION ========== Running only 32bit PV or HVM/PVH guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Andy Lutomirski. RESOLUTION ========== Applying the appropriate attached patches resolves this issue. xsa293/unstable-?.patch xen-unstable xsa293/4.11-?.patch Xen 4.11.x xsa293/4.10-?.patch Xen 4.10.x xsa293/4.9-?.patch Xen 4.9.x xsa293/4.8-?.patch Xen 4.8.x xsa293/4.7-?.patch Xen 4.7.x $ sha256sum xsa293* xsa293*/* 27baf055642a3a7e9d2b1a961e15a46b592eca7c6f63e28e3bcb19e4cebfd0bd xsa293.meta 865596b3dca81712a7d3d78f22e40aed1a08732f93b1950af6f092d893323a0f xsa293/4.7-1.patch 032559c4bbdfe0987b9d3b15cf8661d8d8a5d4e2e989c944490ac171305fba3b xsa293/4.7-2.patch d3d91a1a5083b0a1992750b808aefacd0f0d4e7e92d1436e620a542e935cdadd xsa293/4.7-3.patch 14b3db49375e353394b831a342d873d83615285d516f8cb08a0e1564d675cd51 xsa293/4.8-1.patch 1efc2ee18f54c7c41f478e944b3b708eb283bfa9de68a1046033d57784846c30 xsa293/4.8-2.patch 0d28899cad0e6798ae6a96717c15363ddf5a35e334ede02becdc81538ae589cc xsa293/4.8-3.patch b24210a74eb9dca5c7af902d223dba1b1b372df06a99fb1b0df8e92c9f9632f3 xsa293/4.9-1.patch f68101f80d9843c1cdbb70188caec7009a0d52d33d811d22091e7c1f265a15e1 xsa293/4.9-2.patch 194e42599eac16afab14856760901705a0600c1308645495f30d30f8dd68734c xsa293/4.10-1.patch 1fdee59bba66bd6b3ea4949913457dbcb1b8d5cb85fd8fb60aacac9a403ee9a9 xsa293/4.10-2.patch 277ba95e9a2276378fc9b3bcf89b694b9670256cde62278ade2e90d3fd5f7c46 xsa293/4.11-1.patch 724a0f433427a747876cbec09381dc1ca99286cea0ecbdd098c6e68fb135eeda xsa293/4.11-2.patch 837eb67900a7c70cf7a00836cb312506925ca1fd29529144ff312316b0dbb086 xsa293/unstable-1.patch 0a6df8c8778a1c7e1fb71825695a86dee36f2e9345b39a06e3a364ad8b938de0 xsa293/unstable-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y1+8MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ+v0H/21IMJyzcEdBt5Ki3zJ4gWL5XKxzy7p5r8IyvLto KulFRzMU2gopsrSji394Inl+iydSEgSRGNMytpJ6HlYmAH+O5xJe3BVsLyf4tvTO ONTs72xin6mm3h/cUSVtLzTfLAYX6AA37uy/kqUOGH9Bn1VDNhKFDwTjwb7riaDe cHpvCaQJGK9HBYjzD8HyAfh0nKupgLb19FdG5r2CjXqyHK1A+bC3LPdOc9jfNYrY YP4LV0nSU5XOBi6RrOSXySadvQQTXtaFACtpcRGQEhrXKmO+bUCQiyJzn2JtmxZP 7uMN9OqR6idl3mxgBb1QiHfxIFw2NB/MC6BoTBn4+Ea7yJk= =cxjY -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa293.meta" Content-Disposition: attachment; filename="xsa293.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTMsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAogICAgICAgICAg ICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAgMjkxLAogICAg ICAgICAgICAyOTIKICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6 IFsKICAgICAgICAgICAgInhzYTI5My80LjEwLT8ucGF0Y2giCiAgICAgICAg ICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTEiOiB7CiAg ICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAi U3RhYmxlUmVmIjogIjg3ZjUxYmYzNjZjYTc5Yjk4ZTFlMjAxYmY5YmQ3YTlj MTY0NjMxZTIiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAg IDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcsCiAgICAg ICAgICAgIDI4OCwKICAgICAgICAgICAgMjkwLAogICAgICAgICAgICAyOTEs CiAgICAgICAgICAgIDI5MgogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMjkzLzQuMTEtPy5wYXRjaCIKICAg ICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC43Ijog ewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAg ICAgIlN0YWJsZVJlZiI6ICI3MTBjYzA5Njk3MTAxOWJjMmU1YTlhYWJiOWFm MWFjY2EwYjViOWU3IiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAg ICAgICAyODQsCiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3LAog ICAgICAgICAgICAyODgsCiAgICAgICAgICAgIDI5MCwKICAgICAgICAgICAg MjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAg ICAgICAgICJ4c2EyOTMvNC43LT8ucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOCI6IHsKICAgICAgIlJlY2lw ZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYi OiAiOTA4ZTc2OGZhZTQ5YThkYjAwODllNjgxODg2NTIwNzllM2JmYWE2NiIs CiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAg ICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAgMjg4 LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwKICAgICAgICAg ICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAg ICAgICAgICAgICJ4c2EyOTMvNC44LT8ucGF0Y2giCiAgICAgICAgICBdCiAg ICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOSI6IHsKICAgICAgIlJl Y2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVS ZWYiOiAiZjVhY2Y5N2Y2NjljNmJjOTY5MWUwMzc3MWFkMDY3MDNkYTc3ZTBk NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAog ICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAgICAgICAg Mjg4LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwKICAgICAg ICAgICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBb CiAgICAgICAgICAgICJ4c2EyOTMvNC45LT8ucGF0Y2giCiAgICAgICAgICBd CiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAg ICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJT dGFibGVSZWYiOiAiMjRkNTI4MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMx NWNkMDM1NiIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAg Mjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NywKICAgICAg ICAgICAgMjg4LAogICAgICAgICAgICAyOTAsCiAgICAgICAgICAgIDI5MSwK ICAgICAgICAgICAgMjkyCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyOTMvdW5zdGFibGUtPy5wYXRjaCIK ICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa293/4.7-1.patch" Content-Disposition: attachment; filename="xsa293/4.7-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBJbXByb3ZlIHB2X2NwdWlkKCkncyBBUEkK CnB2X2NwdWlkKCkncyBBUEkgaXMgYXdrd2FyZCB0byB1c2UuICBUaGVyZSBh cmUgYWxyZWFkeSB0d28gY2FsbGVycyBqdW1waW5nCnRocm91Z2ggaG9vcHMg dG8gdXNlIGl0LCBhbmQgYSB0aGlyZCBpcyBvbiBpdHMgd2F5LgoKQ2hhbmdl IHRoZSBBUEkgdG8gdGFrZSBlYWNoIHBhcmFtZXRlciBpbmRpdmlkdWFsbHkg KGxpa2UgaXRzIGNvdW50ZXJwYXJ0LApodm1fY3B1aWQoKSwgYWxyZWFkeSBk b2VzKSwgYW5kIGludHJvZHVjZSBhIG5ldyBwdl9jcHVpZF9yZWdzKCkgd3Jh cHBlcgppbXBsZW1lbnRpbmcgdGhlIG9sZCBBUEkuCgpObyBmdW5jdGlvbmFs IGNoYW5nZS4KClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L2h2bS92bXgvdm14LmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZteC92bXgu YwppbmRleCA4MmUzYzJjLi41OTM5NWRkIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvaHZtL3ZteC92bXguYworKysgYi94ZW4vYXJjaC94ODYvaHZtL3Zt eC92bXguYwpAQCAtMzY5OCw3ICszNjk4LDcgQEAgdm9pZCB2bXhfdm1leGl0 X2hhbmRsZXIoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAgICAgICAg IGJyZWFrOwogICAgIH0KICAgICBjYXNlIEVYSVRfUkVBU09OX0NQVUlEOgot ICAgICAgICBpc19wdmhfdmNwdSh2KSA/IHB2X2NwdWlkKHJlZ3MpIDogdm14 X2RvX2NwdWlkKHJlZ3MpOworICAgICAgICBpc19wdmhfdmNwdSh2KSA/IHB2 X2NwdWlkX3JlZ3MocmVncykgOiB2bXhfZG9fY3B1aWQocmVncyk7CiAgICAg ICAgIHVwZGF0ZV9ndWVzdF9laXAoKTsgLyogU2FmZTogQ1BVSUQgKi8KICAg ICAgICAgYnJlYWs7CiAgICAgY2FzZSBFWElUX1JFQVNPTl9ITFQ6CmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni90 cmFwcy5jCmluZGV4IDEzOTczN2IuLmMwMDFmOTMgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9hcmNoL3g4Ni90cmFwcy5j CkBAIC05MjQsMTcgKzkyNCwxNCBAQCBzdGF0aWMgdm9pZCBfZG9tYWluX2Nw dWlkKHN0cnVjdCBkb21haW4gKmN1cnJkLAogICAgICAgICBjcHVpZF9jb3Vu dChsZWFmLCBzdWJsZWFmLCBlYXgsIGVieCwgZWN4LCBlZHgpOwogfQogCi12 b2lkIHB2X2NwdWlkKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQordm9p ZCBwdl9jcHVpZCh1aW50MzJfdCBsZWFmLCB1aW50MzJfdCBzdWJsZWFmLAor ICAgICAgICAgICAgICB1aW50MzJfdCAqZWF4LCB1aW50MzJfdCAqZWJ4LCB1 aW50MzJfdCAqZWN4LCB1aW50MzJfdCAqZWR4KQogewotICAgIHVpbnQzMl90 IGxlYWYsIHN1YmxlYWYsIGEsIGIsIGMsIGQ7CisgICAgdWludDMyX3QgYSwg YiwgYywgZDsKKyAgICBjb25zdCBzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVn cyA9IGd1ZXN0X2NwdV91c2VyX3JlZ3MoKTsKICAgICBzdHJ1Y3QgdmNwdSAq Y3VyciA9IGN1cnJlbnQ7CiAgICAgc3RydWN0IGRvbWFpbiAqY3VycmQgPSBj dXJyLT5kb21haW47CiAKLSAgICBsZWFmID0gYSA9IHJlZ3MtPmVheDsKLSAg ICBiID0gcmVncy0+ZWJ4OwotICAgIHN1YmxlYWYgPSBjID0gcmVncy0+ZWN4 OwotICAgIGQgPSByZWdzLT5lZHg7Ci0KICAgICBpZiAoIGNwdWlkX2h5cGVy dmlzb3JfbGVhdmVzKGxlYWYsIHN1YmxlYWYsICZhLCAmYiwgJmMsICZkKSAp CiAgICAgICAgIGdvdG8gb3V0OwogCkBAIC0xMjAwLDE3ICsxMTk3LDIxIEBA IHZvaWQgcHZfY3B1aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAg ICAgY2FzZSAweDgwMDAwMDFlOiAvKiBFeHRlbmRlZCB0b3BvbG9neSByZXBv cnRpbmcgKi8KICAgICB1bnN1cHBvcnRlZDoKICAgICAgICAgYSA9IGIgPSBj ID0gZCA9IDA7Ci0gICAgICAgIGJyZWFrOworICAgICAgICBnb3RvIG91dDsK ICAgICB9CiAKLSBvdXQ6CiAgICAgLyogVlBNVSBtYXkgZGVjaWRlIHRvIG1v ZGlmeSBzb21lIG9mIHRoZSBsZWF2ZXMgKi8KICAgICB2cG11X2RvX2NwdWlk KGxlYWYsICZhLCAmYiwgJmMsICZkKTsKIAotICAgIHJlZ3MtPmVheCA9IGE7 Ci0gICAgcmVncy0+ZWJ4ID0gYjsKLSAgICByZWdzLT5lY3ggPSBjOwotICAg IHJlZ3MtPmVkeCA9IGQ7Cisgb3V0OgorICAgIGlmICggZWF4ICkKKyAgICAg ICAgKmVheCA9IGE7CisgICAgaWYgKCBlYnggKQorICAgICAgICAqZWJ4ID0g YjsKKyAgICBpZiAoIGVjeCApCisgICAgICAgICplY3ggPSBjOworICAgIGlm ICggZWR4ICkKKyAgICAgICAgKmVkeCA9IGQ7CiB9CiAKIHN0YXRpYyBpbnQg ZW11bGF0ZV9pbnZhbGlkX3JkdHNjcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAq cmVncykKQEAgLTEyNjAsNyArMTI2MSw3IEBAIHN0YXRpYyBpbnQgZW11bGF0 ZV9mb3JjZWRfaW52YWxpZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVn cykKICAgICAgICAgcmV0dXJuIDA7CiAgICAgZWlwICs9IHNpemVvZihpbnN0 cik7CiAKLSAgICBwdl9jcHVpZChyZWdzKTsKKyAgICBwdl9jcHVpZF9yZWdz KHJlZ3MpOwogCiAgICAgaW5zdHJ1Y3Rpb25fZG9uZShyZWdzLCBlaXAsIDAp OwogCkBAIC0zMTM1LDcgKzMxMzYsNyBAQCBzdGF0aWMgaW50IGVtdWxhdGVf cHJpdmlsZWdlZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAg ICAgICAgYnJlYWs7CiAKICAgICBjYXNlIDB4YTI6IC8qIENQVUlEICovCi0g ICAgICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICBwdl9jcHVpZF9yZWdz KHJlZ3MpOwogICAgICAgICBicmVhazsKIAogICAgIGRlZmF1bHQ6CmRpZmYg LS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oIGIveGVu L2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRleCAxNGJlZDkyLi42 YTM1Yjg5IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgK QEAgLTY0OSw3ICs2NDksMTQgQEAgZW51bSBnZXRfY3B1X3ZlbmRvciB7CiB9 OwogCiBpbnQgZ2V0X2NwdV92ZW5kb3IoY29uc3QgY2hhciB2ZW5kb3JfaWRb XSwgZW51bSBnZXRfY3B1X3ZlbmRvcik7Ci12b2lkIHB2X2NwdWlkKHN0cnVj dCBjcHVfdXNlcl9yZWdzICpyZWdzKTsKK3ZvaWQgcHZfY3B1aWQodWludDMy X3QgbGVhZiwgdWludDMyX3Qgc3VibGVhZiwKKyAgICAgICAgICAgICAgdWlu dDMyX3QgKmVheCwgdWludDMyX3QgKmVieCwgdWludDMyX3QgKmVjeCwgdWlu dDMyX3QgKmVkeCk7CisKK3N0YXRpYyBpbmxpbmUgdm9pZCBwdl9jcHVpZF9y ZWdzKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQoreworICAgIHB2X2Nw dWlkKHJlZ3MtPl9lYXgsIHJlZ3MtPl9lY3gsCisgICAgICAgICAgICAgJnJl Z3MtPl9lYXgsICZyZWdzLT5fZWJ4LCAmcmVncy0+X2VjeCwgJnJlZ3MtPl9l ZHgpOworfQogCiAjZW5kaWYgLyogIV9fQVNTRU1CTFlfXyAqLwogCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.7-2.patch" Content-Disposition: attachment; filename="xsa293/4.7-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKUmVwb3J0ZWQtYnk6IEFuZHkgTHV0b21pcnNraSA8bHV0 b0BrZXJuZWwub3JnPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxh bmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogSmFuIEJl dWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwppbmRl eCA5MzhmY2UwLi44ZGRiMTJjIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv ZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L2RvbWFpbi5jCkBAIC0zNzcs NiArMzc3LDYzIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjFfZWN4ID0gMCwg bGVhZjFfZWR4ID0gMDsKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjdfMF9lYngg PSAwLCBsZXZlbCA9IDA7CisKKyAgICBwdl9jcHVpZCgwLCAwLCAmbGV2ZWws IE5VTEwsIE5VTEwsIE5VTEwpOworICAgIGlmICggbGV2ZWwgPj0gMSApCisg ICAgICAgIHB2X2NwdWlkKDEsIDAsIE5VTEwsIE5VTEwsICZsZWFmMV9lY3gs ICZsZWFmMV9lZHgpOworICAgIGlmICggbGV2ZWwgPj0gNyApCisgICAgICAg IHB2X2NwdWlkKDcsIDAsIE5VTEwsICZsZWFmN18wX2VieCwgTlVMTCwgTlVM TCk7CisKKyAgICAvKiBEaXNjYXJkIGF0dGVtcHRzIHRvIHNldCBndWVzdCBj b250cm9sbGFibGUgYml0cyBvdXRzaWRlIG9mIHRoZSBwb2xpY3kuICovCisg ICAgY3I0ICY9IH4oKChsZWFmMV9lZHggJiBjcHVmZWF0X21hc2soWDg2X0ZF QVRVUkVfVFNDKSkKKyAgICAgICAgICAgICAgPyAwIDogWDg2X0NSNF9UU0Qp IHwKKyAgICAgICAgICAgICAoKGxlYWYxX2VkeCAmIGNwdWZlYXRfbWFzayhY ODZfRkVBVFVSRV9ERSkpCisgICAgICAgICAgICAgID8gMCA6IFg4Nl9DUjRf REUpIHwKKyAgICAgICAgICAgICAoKGxlYWY3XzBfZWJ4ICYgY3B1ZmVhdF9t YXNrKFg4Nl9GRUFUVVJFX0ZTR1NCQVNFKSkKKyAgICAgICAgICAgICAgPyAw IDogWDg2X0NSNF9GU0dTQkFTRSkgfAorICAgICAgICAgICAgICgobGVhZjFf ZWN4ICYgY3B1ZmVhdF9tYXNrKFg4Nl9GRUFUVVJFX1hTQVZFKSkKKyAgICAg ICAgICAgICAgPyAwIDogWDg2X0NSNF9PU1hTQVZFKSk7CisKKyAgICAvKiBN YXNrcyBleHBlY3RlZCB0byBiZSBkaXNqb2ludCBzZXRzLiAqLworICAgIEJV SUxEX0JVR19PTihQVl9DUjRfR1VFU1RfTUFTSyAmIFBWX0NSNF9HVUVTVF9W SVNJQkxFX01BU0spOworCisgICAgLyoKKyAgICAgKiBBIGd1ZXN0IHNlZXMg dGhlIHBvbGljeSBzdWJzZXQgb2YgaXRzIG93biBjaG9pY2Ugb2YgZ3Vlc3Qg Y29udHJvbGxhYmxlCisgICAgICogYml0cywgYW5kIGEgc3Vic2V0IG9mIFhl bidzIGNob2ljZSBvZiBjZXJ0YWluIGhhcmR3YXJlIHNldHRpbmdzLgorICAg ICAqLworICAgIHJldHVybiAoKGNyNCAmIFBWX0NSNF9HVUVTVF9NQVNLKSB8 CisgICAgICAgICAgICAobW11X2NyNF9mZWF0dXJlcyAmIFBWX0NSNF9HVUVT VF9WSVNJQkxFX01BU0spKTsKK30KKwordW5zaWduZWQgbG9uZyBwdl9tYWtl X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKK3sKKyAgICBjb25zdCBzdHJ1 Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHVuc2lnbmVkIGxvbmcg Y3I0ID0gbW11X2NyNF9mZWF0dXJlcyAmCisgICAgICAgIH4oWDg2X0NSNF9Q Q0lERSB8IFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9UU0QpOworCisgICAgLyoK KyAgICAgKiBQQ0lERSBvciBQR0UgZGVwZW5kcyBvbiB0aGUgUENJRC9YUFRJ IHNldHRpbmdzLCBidXQgbXVzdCBub3QgYm90aCBiZQorICAgICAqIHNldCwg YXMgaXQgaW1wYWN0cyB0aGUgc2FmZXR5IG9mIFRMQiBmbHVzaGluZy4KKyAg ICAgKi8KKyAgICBpZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQorICAg ICAgICBjcjQgfD0gWDg2X0NSNF9QQ0lERTsKKyAgICBlbHNlIGlmICggIWQt PmFyY2gucHZfZG9tYWluLnhwdGkgKQorICAgICAgICBjcjQgfD0gWDg2X0NS NF9QR0U7CisKKyAgICAvKgorICAgICAqIFRTRCBpcyBuZWVkZWQgaWYgZWl0 aGVyIHRoZSBndWVzdCBoYXMgZWxlY3RlZCB0byB1c2UgaXQsIG9yIFhlbiBp cworICAgICAqIHZpcnR1YWxpc2luZyB0aGUgVFNDIHZhbHVlIHRoZSBndWVz dCBzZWVzLgorICAgICAqLworICAgIGlmICggZC0+YXJjaC52dHNjIHx8ICh2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNEKSApCisg ICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVybiBjcjQ7 Cit9CisKIHN0YXRpYyB2b2lkIHNldF9kb21haW5feHB0aShzdHJ1Y3QgZG9t YWluICpkKQogewogICAgIGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkK QEAgLTU1MSw2ICs2MDgsOCBAQCBpbnQgdmNwdV9pbml0aWFsaXNlKHN0cnVj dCB2Y3B1ICp2KQogCiAgICAgICAgIC8qIFBWIGd1ZXN0cyBieSBkZWZhdWx0 IGhhdmUgYSAxMDBIeiB0aWNrZXIuICovCiAgICAgICAgIHYtPnBlcmlvZGlj X3BlcmlvZCA9IE1JTExJU0VDUygxMCk7CisKKyAgICAgICAgdi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwgMCk7 CiAgICAgfQogCiAgICAgdi0+YXJjaC5zY2hlZHVsZV90YWlsID0gY29udGlu dWVfbm9uaWRsZV9kb21haW47CkBAIC01NjMsOCArNjIyLDYgQEAgaW50IHZj cHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAgICAgdi0+YXJj aC5jcjMgICAgICAgICAgID0gX19wYShpZGxlX3BnX3RhYmxlKTsKICAgICB9 CiAKLSAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0 X3RvX3B2X2d1ZXN0X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsKLQogICAgIGlm ICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkKICAgICB7CiAgICAgICAgIGlm ICggKHJjID0gc2V0dXBfY29tcGF0X2FyZ194bGF0KHYpKSApCkBAIC05Mzcs NDkgKzk5NCw2IEBAIGludCBhcmNoX2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVj dCBkb21haW4gKmQpCiAgICAgcmV0dXJuIHJldDsKIH0KIAotLyoKLSAqIFRo ZXNlIGFyZSB0aGUgbWFza3Mgb2YgQ1I0IGJpdHMgKHN1YmplY3QgdG8gaGFy ZHdhcmUgYXZhaWxhYmlsaXR5KSB3aGljaCBhCi0gKiBQViBndWVzdCBtYXkg bm90IGxlZ2l0aW1pYXRlbHkgYXR0ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0 YXRpYyB1bnNpZ25lZCBsb25nIF9fcmVhZF9tb3N0bHkgcHZfY3I0X21hc2ss IGNvbXBhdF9wdl9jcjRfbWFzazsKLQotc3RhdGljIGludCBfX2luaXQgaW5p dF9wdl9jcjRfbWFza3Modm9pZCkKLXsKLSAgICB1bnNpZ25lZCBsb25nIGNv bW1vbl9tYXNrID0gflg4Nl9DUjRfVFNEOwotCi0gICAgLyoKLSAgICAgKiBB bGwgUFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBUU0QsIERFIGFu ZCBPU1hTQVZFLgotICAgICAqLwotICAgIGlmICggY3B1X2hhc19kZSApCi0g ICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X0RFOwotICAgIGlmICgg Y3B1X2hhc194c2F2ZSApCi0gICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZf Q1I0X09TWFNBVkU7Ci0KLSAgICBwdl9jcjRfbWFzayA9IGNvbXBhdF9wdl9j cjRfbWFzayA9IGNvbW1vbl9tYXNrOwotCi0gICAgLyoKLSAgICAgKiA2NGJp dCBQViBndWVzdHMgbWF5IGF0dGVtcHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgot ICAgICAqLwotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCi0gICAgICAg IHB2X2NyNF9tYXNrICY9IH5YODZfQ1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0 dXJuIDA7Ci19Ci1fX2luaXRjYWxsKGluaXRfcHZfY3I0X21hc2tzKTsKLQot dW5zaWduZWQgbG9uZyBwdl9ndWVzdF9jcjRfZml4dXAoY29uc3Qgc3RydWN0 IHZjcHUgKnYsIHVuc2lnbmVkIGxvbmcgZ3Vlc3RfY3I0KQotewotICAgIHVu c2lnbmVkIGxvbmcgaHZfY3I0ID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0 KHJlYWRfY3I0KCkpOwotICAgIHVuc2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2 XzMyYml0X3ZjcHUodikgPyBjb21wYXRfcHZfY3I0X21hc2sgOiBwdl9jcjRf bWFzazsKLQotICAgIGlmICggKGd1ZXN0X2NyNCAmIG1hc2spICE9IChodl9j cjQgJiBtYXNrKSApCi0gICAgICAgIHByaW50ayhYRU5MT0dfR19XQVJOSU5H Ci0gICAgICAgICAgICAgICAiZCVkIGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2 J3MgQ1I0IGZsYWdzICUwOGx4IC0+ICUwOGx4XG4iLAotICAgICAgICAgICAg ICAgY3VycmVudC0+ZG9tYWluLT5kb21haW5faWQsIHYsIGh2X2NyNCwgZ3Vl c3RfY3I0KTsKLQotICAgIHJldHVybiAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vl c3RfY3I0ICYgfm1hc2spOwotfQotCiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0 X2NvbnRleHQgdmNwdV9ndWVzdF9jb250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0 IGZwdV9jdHh0LngKIENIRUNLX0ZJRUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3Rf Y29udGV4dCwgZnB1X2N0eHQpOwpAQCAtOTkzLDcgKzEwMDcsNyBAQCBpbnQg YXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0g di0+ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBz dHJ1Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25n IGZsYWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1 bnNpZ25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAg LTEyMTAsOSArMTIyNCw4IEBAIGludCBhcmNoX3NldF9pbmZvX2d1ZXN0KAog ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdICY9IFg4Nl9DUjBfVFM7 CiAgICAgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbMF0gfD0gcmVhZF9jcjAo KSAmIH5YODZfQ1IwX1RTOwogCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF07Ci0gICAgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0g PSBjcjQgPyBwdl9ndWVzdF9jcjRfZml4dXAodiwgY3I0KSA6Ci0gICAgICAg IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsK KyAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9CisgICAgICAgIHB2 X2ZpeHVwX2d1ZXN0X2NyNCh2LCB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0 XSk7CiAKICAgICBtZW1zZXQodi0+YXJjaC5kZWJ1Z3JlZywgMCwgc2l6ZW9m KHYtPmFyY2guZGVidWdyZWcpKTsKICAgICBmb3IgKCBpID0gMDsgaSA8IDg7 IGkrKyApCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0uYyBiL3hlbi9h cmNoL3g4Ni9tbS5jCmluZGV4IGM5YzZmYzkuLjA2ZmQ0ZTQgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5j CkBAIC01MDEsMzMgKzUwMSwxMyBAQCB2b2lkIG1ha2VfY3IzKHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIG1mbikKICAgICAgICAgdi0+YXJjaC5j cjMgfD0gZ2V0X3BjaWRfYml0cyh2LCAwKTsKIH0KIAotdW5zaWduZWQgbG9u ZyBwdl9ndWVzdF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYpCi17Ci0gICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFp bjsKLSAgICB1bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFy Y2gucHZfdmNwdS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0 IHw9IG1tdV9jcjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0 X1NNRVAgfCBYODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0Up OwotCi0gICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAg ICAgY3I0IHw9IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5h cmNoLnB2X2RvbWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRf UEdFOwotCi0gICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNE IDogMDsKLQotICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRi YXNlKHN0cnVjdCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAq Y3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25n IG5ld19jcjQ7CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYg IWlzX2lkbGVfdmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9j cjRfdG9fcmVhbF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0 KCkgJiB+KFg4Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NS NF9QR0UpOworICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11 X2NyNF9mZWF0dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2 LT5kb21haW4tPmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU0 Niw4ICs1MjYsNiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAq dikKICAgICAgICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19j cjQpOwogICAgICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0K LSAgICBBU1NFUlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1t dV9jcjRfZmVhdHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2Fy Y2gveDg2L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwppbmRleCBj MDAxZjkzLi42Y2JiZjNmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvdHJh cHMuYworKysgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpAQCAtOTE4LDcgKzkx OCw4IEBAIHN0YXRpYyB2b2lkIF9kb21haW5fY3B1aWQoc3RydWN0IGRvbWFp biAqY3VycmQsCiAgICAgICAgICAgICAgICAgICAgICAgICAgIHVuc2lnbmVk IGludCAqZWF4LCB1bnNpZ25lZCBpbnQgKmVieCwKICAgICAgICAgICAgICAg ICAgICAgICAgICAgdW5zaWduZWQgaW50ICplY3gsIHVuc2lnbmVkIGludCAq ZWR4KQogewotICAgIGlmICggIWlzX2NvbnRyb2xfZG9tYWluKGN1cnJkKSAm JiAhaXNfaGFyZHdhcmVfZG9tYWluKGN1cnJkKSApCisgICAgaWYgKCAhaXNf Y29udHJvbF9kb21haW4oY3VycmQpICYmICFpc19oYXJkd2FyZV9kb21haW4o Y3VycmQpICYmCisgICAgICAgICAhaXNfaWRsZV9kb21haW4oY3VycmQpICkK ICAgICAgICAgZG9tYWluX2NwdWlkKGN1cnJkLCBsZWFmLCBzdWJsZWFmLCBl YXgsIGVieCwgZWN4LCBlZHgpOwogICAgIGVsc2UKICAgICAgICAgY3B1aWRf Y291bnQobGVhZiwgc3VibGVhZiwgZWF4LCBlYngsIGVjeCwgZWR4KTsKQEAg LTI3MjEsOCArMjcyMiw4IEBAIHN0YXRpYyBpbnQgZW11bGF0ZV9wcml2aWxl Z2VkX29wKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQogICAgICAgICB9 CiAKICAgICAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KLSAgICAgICAg ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKHYsICpyZWcpOwotICAgICAgICAgICAgd3JpdGVfY3I0KHB2X2d1 ZXN0X2NyNF90b19yZWFsX2NyNCh2KSk7CisgICAgICAgICAgICB2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCAq cmVnKTsKKyAgICAgICAgICAgIHdyaXRlX2NyNChwdl9tYWtlX2NyNCh2KSk7 CiAgICAgICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcodik7CiAgICAg ICAgICAgICBicmVhazsKIApkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNt LXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK aW5kZXggMTMyYzJiMC4uM2Q2ZjU0NyAxMDA2NDQKLS0tIGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCkBAIC02MzcsMTYgKzYzNywyMiBAQCBib29sX3QgdXBkYXRl X3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3QgdmNwdSAqLAogdm9pZCB2 Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVjdCB2Y3B1ICopOwogdm9p ZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0cnVjdCB2Y3B1ICopOwog Ci0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFyZSBub3QgdW5kZXIgZ3Vl c3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2Zp eHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2lnbmVkIGxvbmcgZ3Vlc3Rf Y3I0KTsKKy8qCisgKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2ds ZSBpbiBpdHMgdmlldyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bwor ICogaGFyZHdhcmUsIHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgor ICovCisjZGVmaW5lIFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NS NF9UU0QgfCBYODZfQ1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9D UjRfT1NYU0FWRSkKKworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBv YnNlcnZlIGZyb20gdGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisj ZGVmaW5lIFBWX0NSNF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZf Q1I0X1BBRSB8IFg4Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZf Q1I0X09TWE1NRVhDUFQpCiAKLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12 aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25n IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAq dik7CisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNvbnN0cnVjdCB0aGUg cmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVlLiAqLwordW5zaWdu ZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKIAotI2RlZmluZSByZWFsX2NyNF90 b19wdl9ndWVzdF9jcjQoYykgICAgICAgICAgICAgICAgICAgICAgICAgXAot ICAgICgoYykgJiB+KFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZf Q1I0X1RTRCB8ICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FW RSB8IFg4Nl9DUjRfU01FUCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAg ICAgIFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0 X1BDSURFKSkKKy8qIENyZWF0ZSBhIGNyNCB2YWx1ZSB0byBsb2FkIGludG8g aGFyZHdhcmUsIGJhc2VkIG9uIHZjcHUgc2V0dGluZ3MuICovCit1bnNpZ25l ZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKIAog dm9pZCBkb21haW5fY3B1aWQoc3RydWN0IGRvbWFpbiAqZCwKICAgICAgICAg ICAgICAgICAgIHVuc2lnbmVkIGludCAgaW5wdXQsCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.7-3.patch" Content-Disposition: attachment; filename="xsa293/4.7-3.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClNpZ25lZC1vZmYtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJl dmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Cgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gv eDg2L2RvbWFpbi5jCmluZGV4IDhkZGIxMmMuLjIwYzBiZDAgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYv ZG9tYWluLmMKQEAgLTQzMSw2ICs0MzEsMTYgQEAgdW5zaWduZWQgbG9uZyBw dl9tYWtlX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGQt PmFyY2gudnRzYyB8fCAodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBY ODZfQ1I0X1RTRCkgKQogICAgICAgICBjcjQgfD0gWDg2X0NSNF9UU0Q7CiAK KyAgICAvKgorICAgICAqIFRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgYXJlIG9u bHkgdXNlYWJsZSBpbiA2NGJpdCBjb2RlIHNlZ21lbnRzLiAgV2hpbGUKKyAg ICAgKiB3ZSBtdXN0IG5vdCBoYXZlIENSNC5GU0dTQkFTRSBzZXQgYmVoaW5k IHRoZSBiYWNrIG9mIGEgNjRiaXQgUFYga2VybmVsLAorICAgICAqIHdlIGRv IGxlYXZlIGl0IHNldCBpbiAzMmJpdCBQViBjb250ZXh0IHRvIHNwZWVkIHVw IFhlbidzIGNvbnRleHQgc3dpdGNoCisgICAgICogcGF0aC4KKyAgICAgKi8K KyAgICBpZiAoICFpc19wdl8zMmJpdF9kb21haW4oZCkgJiYKKyAgICAgICAg ICEodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NC QVNFKSApCisgICAgICAgIGNyNCAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKKwog ICAgIHJldHVybiBjcjQ7CiB9CiAKQEAgLTIwMTIsNyArMjAyMiw4IEBAIHN0 YXRpYyB2b2lkIHNhdmVfc2VnbWVudHMoc3RydWN0IHZjcHUgKnYpCiAgICAg cmVncy0+ZnMgPSByZWFkX3NyZWcoZnMpOwogICAgIHJlZ3MtPmdzID0gcmVh ZF9zcmVnKGdzKTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAmJiAh aXNfcHZfMzJiaXRfdmNwdSh2KSApCisgICAgLyogJWZzLyVncyBiYXNlcyBj YW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNFIGFyZSB1c2FibGUu ICovCisgICAgaWYgKCAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAgICAgIHYt PmFyY2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOwogICAgICAg ICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9kZSApCmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBiL3hlbi9hcmNoL3g4Ni9z ZXR1cC5jCmluZGV4IDAwNzJkZTcuLjllY2E1N2EgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9zZXR1cC5j CkBAIC0xNDQyLDcgKzE0NDIsNyBAQCB2b2lkIF9faW5pdCBub3JldHVybiBf X3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9wKQogCiAgICAgY3I0X3B2 MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBYRU5fQ1I0X1BWMzJfQklU UzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JBU0UpICkKICAgICAgICAg c2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsKIAogICAgIGlmICggb3B0 X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKaW5k ZXggNmNiYmYzZi4uNTgzOTM2ZSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKQEAgLTI3MjIs NiArMjcyMiwxNyBAQCBzdGF0aWMgaW50IGVtdWxhdGVfcHJpdmlsZWdlZF9v cChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAgICAgICAgfQogCiAg ICAgICAgIGNhc2UgNDogLyogV3JpdGUgQ1I0ICovCisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2FibGUg RlNHU0JBU0UsIHJlZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAgICAg ICAgICAqIGd1ZXN0IGJhc2VzIG5vdyB0aGF0IHRoZXkgY2FuIG5vIGxvbmdl ciBjaGFuZ2UuCisgICAgICAgICAgICAgKi8KKyAgICAgICAgICAgIGlmICgg KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgJiYKKyAgICAgICAgICAgICAgICAgISgqcmVnICYgWDg2X0NSNF9GU0dT QkFTRSkgKQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHYtPmFy Y2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOworICAgICAgICAg ICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9IF9fcmRn c2Jhc2UoKTsKKyAgICAgICAgICAgIH0KKwogICAgICAgICAgICAgdi0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwg KnJlZyk7CiAgICAgICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9jcjQodikp OwogICAgICAgICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKHYpOwpAQCAt Mjk5MywxMyArMzAwNCwxNCBAQCBzdGF0aWMgaW50IGVtdWxhdGVfcHJpdmls ZWdlZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKICAgICAgICAg Y2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgICAgIGlmICggaXNfcHZfMzJi aXRfZG9tYWluKGN1cnJkKSApCiAgICAgICAgICAgICAgICAgZ290byBmYWls OwotICAgICAgICAgICAgdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRm c2Jhc2UoKSA6IHYtPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAg ICAgdmFsID0gKHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9f cmRmc2Jhc2UoKQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA6IHYtPmFyY2gucHZfdmNwdS5mc19iYXNlOwog ICAgICAgICAgICAgZ290byByZG1zcl93cml0ZWJhY2s7CiAgICAgICAgIGNh c2UgTVNSX0dTX0JBU0U6CiAgICAgICAgICAgICBpZiAoIGlzX3B2XzMyYml0 X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAgICAgICAgIGdvdG8gZmFpbDsK LSAgICAgICAgICAgIHZhbCA9IGNwdV9oYXNfZnNnc2Jhc2UgPyBfX3JkZ3Ni YXNlKCkKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgOiB2 LT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9rZXJuZWw7CisgICAgICAgICAgICB2 YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UpID8gX19yZGdz YmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIDogdi0+YXJjaC5wdl92Y3B1LmdzX2Jhc2Vfa2VybmVs OwogICAgICAgICAgICAgZ290byByZG1zcl93cml0ZWJhY2s7CiAgICAgICAg IGNhc2UgTVNSX1NIQURPV19HU19CQVNFOgogICAgICAgICAgICAgaWYgKCBp c19wdl8zMmJpdF9kb21haW4oY3VycmQpICkKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQv dHJhcHMuYwppbmRleCA1NmVkMTU2Li4wNGNjNjBkIDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2 L3g4Nl82NC90cmFwcy5jCkBAIC0yNjUsNyArMjY1LDkgQEAgdm9pZCB0b2dn bGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBpZiAoIGlz X3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47Ci0gICAgaWYg KCBjcHVfaGFzX2ZzZ3NiYXNlICkKKworICAgIC8qICVmcy8lZ3MgYmFzZXMg Y2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNhYmxl LiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZfa2Vy bmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9hc20t eDg2L2NwdWZlYXR1cmUuaAppbmRleCAwNGQ5ZTI4Li5mOWM4MzM1IDEwMDY0 NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAorKysg Yi94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtNzIsNyAr NzIsNiBAQAogI2RlZmluZSBjcHVfaGFzX254CQlib290X2NwdV9oYXMoWDg2 X0ZFQVRVUkVfTlgpCiAjZGVmaW5lIGNwdV9oYXNfY2xmbHVzaAkJYm9vdF9j cHVfaGFzKFg4Nl9GRUFUVVJFX0NMRkxVU0gpCiAjZGVmaW5lIGNwdV9oYXNf cGFnZTFnYgkJYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX1BBR0UxR0IpCi0j ZGVmaW5lIGNwdV9oYXNfZnNnc2Jhc2UJYm9vdF9jcHVfaGFzKFg4Nl9GRUFU VVJFX0ZTR1NCQVNFKQogI2RlZmluZSBjcHVfaGFzX2FwZXJmbXBlcmYJYm9v dF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0FQRVJGTVBFUkYpCiAjZGVmaW5lIGNw dV9oYXNfc21lcCAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVS RV9TTUVQKQogI2RlZmluZSBjcHVfaGFzX2ludnBjaWQgICAgICAgICBib290 X2NwdV9oYXMoWDg2X0ZFQVRVUkVfSU5WUENJRCkKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L21zci5oCmluZGV4IDRiNGMxNTYuLjI1MmNiZGMgMTAwNjQ0Ci0tLSBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKKysrIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9tc3IuaApAQCAtOTMsNiArOTMsMTQgQEAgc3RhdGljIGlubGluZSB1 aW50NjRfdCByZHRzYyh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIg KGhpZ2gpIFwKIAkJCSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24g aGFyZHdhcmUgc3VwcG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRl ZCBpbnRvIGhhcmR3YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hv aWNlIGZvciA2NGJpdCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRs ZSwgSFZNIGFuZAorICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwg dGhlIHtSRCxXUn17RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkg c2FmZSB0byB1c2UgaWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICov CiBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lk KQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKQEAgLTEyMyw3ICsxMzEs NyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9p ZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNw dV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9D UjRfRlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwog CiAgICAgcmRtc3JsKE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTEzNSw3ICsx NDMsNyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uo dm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAo IGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4 Nl9DUjRfRlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgp OwogCiAgICAgcmRtc3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE0NSw3 ICsxNTMsNyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jh c2Uodm9pZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2ln bmVkIGxvbmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2Ug KQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQog I2lmZGVmIEhBVkVfR0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xhdGls ZSAoICJ3cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UKQEAg LTE1Nyw3ICsxNjUsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2Uo dW5zaWduZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jn c2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hh c19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9G U0dTQkFTRSApCiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAg YXNtIHZvbGF0aWxlICggIndyZ3NiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7 CiAjZWxzZQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9j ZXNzb3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgKaW5k ZXggNmEzNWI4OS4uNjEwYjZmMyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9wcm9jZXNzb3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L3Byb2Nlc3Nvci5oCkBAIC0zNjMsMTEgKzM2MywzMSBAQCBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgcmVhZF9jcjQodm9pZCkKIAogc3RhdGljIGlu bGluZSB2b2lkIHdyaXRlX2NyNCh1bnNpZ25lZCBsb25nIHZhbCkKIHsKKyAg ICBzdHJ1Y3QgY3B1X2luZm8gKmluZm8gPSBnZXRfY3B1X2luZm8oKTsKKwog ICAgIC8qIE5vIGdsb2JhbCBwYWdlcyBpbiBjYXNlIG9mIFBDSURzIGVuYWJs ZWQhICovCiAgICAgQVNTRVJUKCEodmFsICYgWDg2X0NSNF9QR0UpIHx8ICEo dmFsICYgWDg2X0NSNF9QQ0lERSkpOwogCi0gICAgZ2V0X2NwdV9pbmZvKCkt PmNyNCA9IHZhbDsKLSAgICBhc20gdm9sYXRpbGUgKCAibW92ICUwLCUlY3I0 IiA6IDogInIiICh2YWwpICk7CisgICAgLyoKKyAgICAgKiBPbiBoYXJkd2Fy ZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgaW4gJWNyNCBpcyB0 aGUga2VybmVsJ3MKKyAgICAgKiBjaG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0 cywgd2hpY2ggaW1wYWN0cyB3aGV0aGVyIFhlbiBjYW4gdXNlIHRoZQorICAg ICAqIGluc3RydWN0aW9ucy4KKyAgICAgKgorICAgICAqIFRoZSB7cmQsd3J9 e2ZzLGdzfWJhc2UoKSBoZWxwZXJzIHVzZSBpbmZvLT5jcjQgdG8gd29yayBv dXQgd2hldGhlciBpdAorICAgICAqIGlzIHNhZmUgdG8gZXhlY3V0ZSB0aGUg e1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9uLCBmYWxsaW5nIGJhY2sg dG8KKyAgICAgKiB0aGUgTVNSIHBhdGggaWYgbm90LiAgU29tZSB1c2VycyBy ZXF1aXJlIGludGVycnVwdCBzYWZldHkuCisgICAgICoKKyAgICAgKiBJZiBG U0dTQkFTRSBpcyBjdXJyZW50bHkgb3IgYWJvdXQgdG8gYmVjb21lIGNsZWFy LCByZWZsZWN0IHRoaXMgaW4KKyAgICAgKiBpbmZvLT5jcjQgYmVmb3JlIHVw ZGF0aW5nICVjcjQsIHNvIGFuIGludGVycnVwdCB3aGljaCBoaXRzIGluIHRo ZQorICAgICAqIG1pZGRsZSB3b24ndCBvYnNlcnZlIEZTR1NCQVNFIHNldCBp biBpbmZvLT5jcjQgYnV0IGNsZWFyIGluICVjcjQuCisgICAgICovCisgICAg aW5mby0+Y3I0ID0gdmFsICYgKGluZm8tPmNyNCB8IH5YODZfQ1I0X0ZTR1NC QVNFKTsKKworICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJVt2YWxdLCAlJWNy NCIKKyAgICAgICAgICAgICAgICAgICA6ICIrbSIgKGluZm8tPmNyNCkgLyog Rm9yY2Ugb3JkZXJpbmcgd2l0aG91dCBhIGJhcnJpZXIuICovCisgICAgICAg ICAgICAgICAgICAgOiBbdmFsXSAiciIgKHZhbCkgKTsKKworICAgIGluZm8t PmNyNCA9IHZhbDsKIH0KIAogLyogQ2xlYXIgYW5kIHNldCAnVFMnIGJpdCBy ZXNwZWN0aXZlbHkgKi8K --=separator Content-Type: application/octet-stream; name="xsa293/4.8-1.patch" Content-Disposition: attachment; filename="xsa293/4.8-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBJbXByb3ZlIHB2X2NwdWlkKCkncyBBUEkK CnB2X2NwdWlkKCkncyBBUEkgaXMgYXdrd2FyZCB0byB1c2UuICBUaGVyZSBh cmUgYWxyZWFkeSB0d28gY2FsbGVycyBqdW1waW5nCnRocm91Z2ggaG9vcHMg dG8gdXNlIGl0LCBhbmQgYSB0aGlyZCBpcyBvbiBpdHMgd2F5LgoKQ2hhbmdl IHRoZSBBUEkgdG8gdGFrZSBlYWNoIHBhcmFtZXRlciBpbmRpdmlkdWFsbHkg KGxpa2UgaXRzIGNvdW50ZXJwYXJ0LApodm1fY3B1aWQoKSwgYWxyZWFkeSBk b2VzKSwgYW5kIGludHJvZHVjZSBhIG5ldyBwdl9jcHVpZF9yZWdzKCkgd3Jh cHBlcgppbXBsZW1lbnRpbmcgdGhlIG9sZCBBUEkuCgpObyBmdW5jdGlvbmFs IGNoYW5nZS4KClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L2h2bS92bXgvdm14LmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZteC92bXgu YwppbmRleCBhYjM5YTQ1Li4wMDUzYWMwIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvaHZtL3ZteC92bXguYworKysgYi94ZW4vYXJjaC94ODYvaHZtL3Zt eC92bXguYwpAQCAtMzgwMyw3ICszODAzLDcgQEAgdm9pZCB2bXhfdm1leGl0 X2hhbmRsZXIoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAKICAgICAg ICAgaWYgKCBpc19wdmhfdmNwdSh2KSApCiAgICAgICAgIHsKLSAgICAgICAg ICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICAgICAgcHZfY3B1aWRfcmVn cyhyZWdzKTsKICAgICAgICAgICAgIHJjID0gMDsKICAgICAgICAgfQogICAg ICAgICBlbHNlCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IDFhMjI4OTUuLjc3Zjc4NmMg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9h cmNoL3g4Ni90cmFwcy5jCkBAIC05NzIsMTcgKzk3MiwxNCBAQCBzdGF0aWMg dm9pZCBfZG9tYWluX2NwdWlkKGNvbnN0IHN0cnVjdCBkb21haW4gKmN1cnJk LAogICAgICAgICBjcHVpZF9jb3VudChsZWFmLCBzdWJsZWFmLCBlYXgsIGVi eCwgZWN4LCBlZHgpOwogfQogCi12b2lkIHB2X2NwdWlkKHN0cnVjdCBjcHVf dXNlcl9yZWdzICpyZWdzKQordm9pZCBwdl9jcHVpZCh1aW50MzJfdCBsZWFm LCB1aW50MzJfdCBzdWJsZWFmLAorICAgICAgICAgICAgICB1aW50MzJfdCAq ZWF4LCB1aW50MzJfdCAqZWJ4LCB1aW50MzJfdCAqZWN4LCB1aW50MzJfdCAq ZWR4KQogewotICAgIHVpbnQzMl90IGxlYWYsIHN1YmxlYWYsIGEsIGIsIGMs IGQ7CisgICAgdWludDMyX3QgYSwgYiwgYywgZDsKKyAgICBjb25zdCBzdHJ1 Y3QgY3B1X3VzZXJfcmVncyAqcmVncyA9IGd1ZXN0X2NwdV91c2VyX3JlZ3Mo KTsKICAgICBzdHJ1Y3QgdmNwdSAqY3VyciA9IGN1cnJlbnQ7CiAgICAgc3Ry dWN0IGRvbWFpbiAqY3VycmQgPSBjdXJyLT5kb21haW47CiAKLSAgICBsZWFm ID0gYSA9IHJlZ3MtPmVheDsKLSAgICBiID0gcmVncy0+ZWJ4OwotICAgIHN1 YmxlYWYgPSBjID0gcmVncy0+ZWN4OwotICAgIGQgPSByZWdzLT5lZHg7Ci0K ICAgICBpZiAoIGNwdWlkX2h5cGVydmlzb3JfbGVhdmVzKGxlYWYsIHN1Ymxl YWYsICZhLCAmYiwgJmMsICZkKSApCiAgICAgICAgIGdvdG8gb3V0OwogCkBA IC05OTcsMTMgKzk5NCw3IEBAIHZvaWQgcHZfY3B1aWQoc3RydWN0IGNwdV91 c2VyX3JlZ3MgKnJlZ3MpCiAKICAgICAgICAgX2RvbWFpbl9jcHVpZChjdXJy ZCwgbGltaXQsIDAsICZsaW1pdCwgJmR1bW15LCAmZHVtbXksICZkdW1teSk7 CiAgICAgICAgIGlmICggbGVhZiA+IGxpbWl0ICkKLSAgICAgICAgewotICAg ICAgICAgICAgcmVncy0+ZWF4ID0gMDsKLSAgICAgICAgICAgIHJlZ3MtPmVi eCA9IDA7Ci0gICAgICAgICAgICByZWdzLT5lY3ggPSAwOwotICAgICAgICAg ICAgcmVncy0+ZWR4ID0gMDsKLSAgICAgICAgICAgIHJldHVybjsKLSAgICAg ICAgfQorICAgICAgICAgICAgZ290byB1bnN1cHBvcnRlZDsKICAgICB9CiAK ICAgICBfZG9tYWluX2NwdWlkKGN1cnJkLCBsZWFmLCBzdWJsZWFmLCAmYSwg JmIsICZjLCAmZCk7CkBAIC0xMjg0LDE3ICsxMjc1LDIxIEBAIHZvaWQgcHZf Y3B1aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAgICAgY2FzZSAw eDgwMDAwMDFlOiAvKiBFeHRlbmRlZCB0b3BvbG9neSByZXBvcnRpbmcgKi8K ICAgICB1bnN1cHBvcnRlZDoKICAgICAgICAgYSA9IGIgPSBjID0gZCA9IDA7 Ci0gICAgICAgIGJyZWFrOworICAgICAgICBnb3RvIG91dDsKICAgICB9CiAK LSBvdXQ6CiAgICAgLyogVlBNVSBtYXkgZGVjaWRlIHRvIG1vZGlmeSBzb21l IG9mIHRoZSBsZWF2ZXMgKi8KICAgICB2cG11X2RvX2NwdWlkKGxlYWYsICZh LCAmYiwgJmMsICZkKTsKIAotICAgIHJlZ3MtPmVheCA9IGE7Ci0gICAgcmVn cy0+ZWJ4ID0gYjsKLSAgICByZWdzLT5lY3ggPSBjOwotICAgIHJlZ3MtPmVk eCA9IGQ7Cisgb3V0OgorICAgIGlmICggZWF4ICkKKyAgICAgICAgKmVheCA9 IGE7CisgICAgaWYgKCBlYnggKQorICAgICAgICAqZWJ4ID0gYjsKKyAgICBp ZiAoIGVjeCApCisgICAgICAgICplY3ggPSBjOworICAgIGlmICggZWR4ICkK KyAgICAgICAgKmVkeCA9IGQ7CiB9CiAKIHN0YXRpYyBpbnQgZW11bGF0ZV9p bnZhbGlkX3JkdHNjcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKQEAg LTEzNTMsNyArMTM0OCw3IEBAIHN0YXRpYyBpbnQgZW11bGF0ZV9mb3JjZWRf aW52YWxpZF9vcChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKIAogICAg IGVpcCArPSBzaXplb2YoaW5zdHIpOwogCi0gICAgcHZfY3B1aWQocmVncyk7 CisgICAgcHZfY3B1aWRfcmVncyhyZWdzKTsKIAogICAgIGluc3RydWN0aW9u X2RvbmUocmVncywgZWlwLCAwKTsKIApAQCAtMjgyOCwxNyArMjgyMyw3IEBA IHN0YXRpYyBpbnQgcHJpdl9vcF93cml0ZV9tc3IodW5zaWduZWQgaW50IHJl ZywgdWludDY0X3QgdmFsLAogaW50IHB2X2VtdWxfY3B1aWQodW5zaWduZWQg aW50ICplYXgsIHVuc2lnbmVkIGludCAqZWJ4LCB1bnNpZ25lZCBpbnQgKmVj eCwKICAgICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCAqZWR4LCBzdHJ1 Y3QgeDg2X2VtdWxhdGVfY3R4dCAqY3R4dCkKIHsKLSAgICBzdHJ1Y3QgY3B1 X3VzZXJfcmVncyByZWdzID0gKmN0eHQtPnJlZ3M7Ci0KLSAgICByZWdzLl9l YXggPSAqZWF4OwotICAgIHJlZ3MuX2VjeCA9ICplY3g7Ci0KLSAgICBwdl9j cHVpZCgmcmVncyk7Ci0KLSAgICAqZWF4ID0gcmVncy5fZWF4OwotICAgICpl YnggPSByZWdzLl9lYng7Ci0gICAgKmVjeCA9IHJlZ3MuX2VjeDsKLSAgICAq ZWR4ID0gcmVncy5fZWR4OworICAgIHB2X2NwdWlkKCplYXgsICplY3gsIGVh eCwgZWJ4LCBlY3gsIGVkeCk7CiAKICAgICByZXR1cm4gWDg2RU1VTF9PS0FZ OwogfQpAQCAtMzMyOSw3ICszMzE0LDcgQEAgc3RhdGljIGludCBlbXVsYXRl X3ByaXZpbGVnZWRfb3Aoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCiAg ICAgICAgIGlmICggdi0+YXJjaC5jcHVpZF9mYXVsdGluZyAmJiAhZ3Vlc3Rf a2VybmVsX21vZGUodiwgcmVncykgKQogICAgICAgICAgICAgZ290byBmYWls OwogCi0gICAgICAgIHB2X2NwdWlkKHJlZ3MpOworICAgICAgICBwdl9jcHVp ZF9yZWdzKHJlZ3MpOwogICAgICAgICBicmVhazsKIAogICAgIGRlZmF1bHQ6 CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYveHN0YXRlLmMgYi94ZW4vYXJj aC94ODYveHN0YXRlLmMKaW5kZXggNWM0M2VjOS4uMDlkMjVhYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L3hzdGF0ZS5jCisrKyBiL3hlbi9hcmNoL3g4 Ni94c3RhdGUuYwpAQCAtNjU0LDI0ICs2NTQsMTggQEAgc3RhdGljIGJvb2xf dCB2YWxpZF94Y3IwKHU2NCB4Y3IwKQogCiBzdGF0aWMgdWludDY0X3QgZ3Vl c3RfeGNyMF9tYXgoY29uc3Qgc3RydWN0IGRvbWFpbiAqZCkKIHsKKyAgICB1 aW50MzJfdCBlYXgsIGVkeDsKKwogICAgIGlmICggaGFzX2h2bV9jb250YWlu ZXJfZG9tYWluKGQpICkKICAgICB7Ci0gICAgICAgIHVpbnQzMl90IGVheCwg ZWN4ID0gMCwgZWR4OworICAgICAgICB1aW50MzJfdCBlY3ggPSAwOwogCiAg ICAgICAgIGh2bV9jcHVpZChYU1RBVEVfQ1BVSUQsICZlYXgsIE5VTEwsICZl Y3gsICZlZHgpOwotCi0gICAgICAgIHJldHVybiAoKHVpbnQ2NF90KWVkeCA8 PCAzMikgfCBlYXg7CiAgICAgfQogICAgIGVsc2UKLSAgICB7Ci0gICAgICAg IHN0cnVjdCBjcHVfdXNlcl9yZWdzIHJlZ3MgPSB7IH07CisgICAgICAgIHB2 X2NwdWlkKFhTVEFURV9DUFVJRCwgMCwgJmVheCwgTlVMTCwgTlVMTCwgJmVk eCk7CiAKLSAgICAgICAgcmVncy5fZWF4ID0gWFNUQVRFX0NQVUlEOwotICAg ICAgICByZWdzLl9lY3ggPSAwOwotICAgICAgICBwdl9jcHVpZCgmcmVncyk7 Ci0KLSAgICAgICAgcmV0dXJuIChyZWdzLnJkeCA8PCAzMikgfCByZWdzLl9l YXg7Ci0gICAgfQorICAgIHJldHVybiAoKHVpbnQ2NF90KWVkeCA8PCAzMikg fCBlYXg7CiB9CiAKIGludCB2YWxpZGF0ZV94c3RhdGUoY29uc3Qgc3RydWN0 IGRvbWFpbiAqZCwgdWludDY0X3QgeGNyMCwgdWludDY0X3QgeGNyMF9hY2N1 bSwKZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29y LmggYi94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oCmluZGV4IDU4 MWQ3YjAuLjUwYmFkYWIgMTAwNjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKKysrIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9j ZXNzb3IuaApAQCAtNjYzLDcgKzY2MywxNCBAQCBlbnVtIGdldF9jcHVfdmVu ZG9yIHsKIH07CiAKIGludCBnZXRfY3B1X3ZlbmRvcihjb25zdCBjaGFyIHZl bmRvcl9pZFtdLCBlbnVtIGdldF9jcHVfdmVuZG9yKTsKLXZvaWQgcHZfY3B1 aWQoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpOwordm9pZCBwdl9jcHVp ZCh1aW50MzJfdCBsZWFmLCB1aW50MzJfdCBzdWJsZWFmLAorICAgICAgICAg ICAgICB1aW50MzJfdCAqZWF4LCB1aW50MzJfdCAqZWJ4LCB1aW50MzJfdCAq ZWN4LCB1aW50MzJfdCAqZWR4KTsKKworc3RhdGljIGlubGluZSB2b2lkIHB2 X2NwdWlkX3JlZ3Moc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MpCit7Cisg ICAgcHZfY3B1aWQocmVncy0+X2VheCwgcmVncy0+X2VjeCwKKyAgICAgICAg ICAgICAmcmVncy0+X2VheCwgJnJlZ3MtPl9lYngsICZyZWdzLT5fZWN4LCAm cmVncy0+X2VkeCk7Cit9CiAKICNlbmRpZiAvKiAhX19BU1NFTUJMWV9fICov CiAK --=separator Content-Type: application/octet-stream; name="xsa293/4.8-2.patch" Content-Disposition: attachment; filename="xsa293/4.8-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKUmVwb3J0ZWQtYnk6IEFuZHkgTHV0b21pcnNraSA8bHV0 b0BrZXJuZWwub3JnPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxh bmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogSmFuIEJl dWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwppbmRl eCA0MDhmYzBiLi42YzM4ZDg0IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv ZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L2RvbWFpbi5jCkBAIC0zNzcs NiArMzc3LDYwIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjFfZWN4ID0gMCwg bGVhZjFfZWR4ID0gMDsKKyAgICB1bnNpZ25lZCBpbnQgbGVhZjdfMF9lYngg PSAwOworCisgICAgcHZfY3B1aWQoMSwgMCwgTlVMTCwgTlVMTCwgJmxlYWYx X2VjeCwgJmxlYWYxX2VkeCk7CisgICAgcHZfY3B1aWQoNywgMCwgTlVMTCwg JmxlYWY3XzBfZWJ4LCBOVUxMLCBOVUxMKTsKKworICAgIC8qIERpc2NhcmQg YXR0ZW1wdHMgdG8gc2V0IGd1ZXN0IGNvbnRyb2xsYWJsZSBiaXRzIG91dHNp ZGUgb2YgdGhlIHBvbGljeS4gKi8KKyAgICBjcjQgJj0gfigoKGxlYWYxX2Vk eCAmIGNwdWZlYXRfbWFzayhYODZfRkVBVFVSRV9UU0MpKQorICAgICAgICAg ICAgICA/IDAgOiBYODZfQ1I0X1RTRCkgfAorICAgICAgICAgICAgICgobGVh ZjFfZWR4ICYgY3B1ZmVhdF9tYXNrKFg4Nl9GRUFUVVJFX0RFKSkKKyAgICAg ICAgICAgICAgPyAwIDogWDg2X0NSNF9ERSkgfAorICAgICAgICAgICAgICgo bGVhZjdfMF9lYnggJiBjcHVmZWF0X21hc2soWDg2X0ZFQVRVUkVfRlNHU0JB U0UpKQorICAgICAgICAgICAgICA/IDAgOiBYODZfQ1I0X0ZTR1NCQVNFKSB8 CisgICAgICAgICAgICAgKChsZWFmMV9lY3ggJiBjcHVmZWF0X21hc2soWDg2 X0ZFQVRVUkVfWFNBVkUpKQorICAgICAgICAgICAgICA/IDAgOiBYODZfQ1I0 X09TWFNBVkUpKTsKKworICAgIC8qIE1hc2tzIGV4cGVjdGVkIHRvIGJlIGRp c2pvaW50IHNldHMuICovCisgICAgQlVJTERfQlVHX09OKFBWX0NSNF9HVUVT VF9NQVNLICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFTSyk7CisKKyAgICAv KgorICAgICAqIEEgZ3Vlc3Qgc2VlcyB0aGUgcG9saWN5IHN1YnNldCBvZiBp dHMgb3duIGNob2ljZSBvZiBndWVzdCBjb250cm9sbGFibGUKKyAgICAgKiBi aXRzLCBhbmQgYSBzdWJzZXQgb2YgWGVuJ3MgY2hvaWNlIG9mIGNlcnRhaW4g aGFyZHdhcmUgc2V0dGluZ3MuCisgICAgICovCisgICAgcmV0dXJuICgoY3I0 ICYgUFZfQ1I0X0dVRVNUX01BU0spIHwKKyAgICAgICAgICAgIChtbXVfY3I0 X2ZlYXR1cmVzICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFTSykpOworfQor Cit1bnNpZ25lZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1 ICp2KQoreworICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKmQgPSB2LT5kb21h aW47CisgICAgdW5zaWduZWQgbG9uZyBjcjQgPSBtbXVfY3I0X2ZlYXR1cmVz ICYKKyAgICAgICAgfihYODZfQ1I0X1BDSURFIHwgWDg2X0NSNF9QR0UgfCBY ODZfQ1I0X1RTRCk7CisKKyAgICAvKgorICAgICAqIFBDSURFIG9yIFBHRSBk ZXBlbmRzIG9uIHRoZSBQQ0lEL1hQVEkgc2V0dGluZ3MsIGJ1dCBtdXN0IG5v dCBib3RoIGJlCisgICAgICogc2V0LCBhcyBpdCBpbXBhY3RzIHRoZSBzYWZl dHkgb2YgVExCIGZsdXNoaW5nLgorICAgICAqLworICAgIGlmICggZC0+YXJj aC5wdl9kb21haW4ucGNpZCApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BD SURFOworICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wdl9kb21haW4ueHB0aSAp CisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKKworICAgIC8qCisgICAg ICogVFNEIGlzIG5lZWRlZCBpZiBlaXRoZXIgdGhlIGd1ZXN0IGhhcyBlbGVj dGVkIHRvIHVzZSBpdCwgb3IgWGVuIGlzCisgICAgICogdmlydHVhbGlzaW5n IHRoZSBUU0MgdmFsdWUgdGhlIGd1ZXN0IHNlZXMuCisgICAgICovCisgICAg aWYgKCBkLT5hcmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVn WzRdICYgWDg2X0NSNF9UU0QpICkKKyAgICAgICAgY3I0IHw9IFg4Nl9DUjRf VFNEOworCisgICAgcmV0dXJuIGNyNDsKK30KKwogc3RhdGljIHZvaWQgc2V0 X2RvbWFpbl94cHRpKHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAgaWYgKCBp c19wdl8zMmJpdF9kb21haW4oZCkgKQpAQCAtNTY0LDYgKzYxOCw4IEBAIGlu dCB2Y3B1X2luaXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAKICAgICAgICAg LyogUFYgZ3Vlc3RzIGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4g Ki8KICAgICAgICAgdi0+cGVyaW9kaWNfcGVyaW9kID0gTUlMTElTRUNTKDEw KTsKKworICAgICAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2 X2ZpeHVwX2d1ZXN0X2NyNCh2LCAwKTsKICAgICB9CiAKICAgICB2LT5hcmNo LnNjaGVkdWxlX3RhaWwgPSBjb250aW51ZV9ub25pZGxlX2RvbWFpbjsKQEAg LTU3Niw4ICs2MzIsNiBAQCBpbnQgdmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2 Y3B1ICp2KQogICAgICAgICB2LT5hcmNoLmNyMyAgICAgICAgICAgPSBfX3Bh KGlkbGVfcGdfdGFibGUpOwogICAgIH0KIAotICAgIHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KG1tdV9j cjRfZmVhdHVyZXMpOwotCiAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4o ZCkgKQogICAgIHsKICAgICAgICAgaWYgKCAocmMgPSBzZXR1cF9jb21wYXRf YXJnX3hsYXQodikpICkKQEAgLTk1NSw0OSArMTAwOSw2IEBAIGludCBhcmNo X2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVjdCBkb21haW4gKmQpCiAgICAgcmV0 dXJuIHJldDsKIH0KIAotLyoKLSAqIFRoZXNlIGFyZSB0aGUgbWFza3Mgb2Yg Q1I0IGJpdHMgKHN1YmplY3QgdG8gaGFyZHdhcmUgYXZhaWxhYmlsaXR5KSB3 aGljaCBhCi0gKiBQViBndWVzdCBtYXkgbm90IGxlZ2l0aW1pYXRlbHkgYXR0 ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0YXRpYyB1bnNpZ25lZCBsb25nIF9f cmVhZF9tb3N0bHkgcHZfY3I0X21hc2ssIGNvbXBhdF9wdl9jcjRfbWFzazsK LQotc3RhdGljIGludCBfX2luaXQgaW5pdF9wdl9jcjRfbWFza3Modm9pZCkK LXsKLSAgICB1bnNpZ25lZCBsb25nIGNvbW1vbl9tYXNrID0gflg4Nl9DUjRf VFNEOwotCi0gICAgLyoKLSAgICAgKiBBbGwgUFYgZ3Vlc3RzIG1heSBhdHRl bXB0IHRvIG1vZGlmeSBUU0QsIERFIGFuZCBPU1hTQVZFLgotICAgICAqLwot ICAgIGlmICggY3B1X2hhc19kZSApCi0gICAgICAgIGNvbW1vbl9tYXNrICY9 IH5YODZfQ1I0X0RFOwotICAgIGlmICggY3B1X2hhc194c2F2ZSApCi0gICAg ICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X09TWFNBVkU7Ci0KLSAgICBw dl9jcjRfbWFzayA9IGNvbXBhdF9wdl9jcjRfbWFzayA9IGNvbW1vbl9tYXNr OwotCi0gICAgLyoKLSAgICAgKiA2NGJpdCBQViBndWVzdHMgbWF5IGF0dGVt cHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgotICAgICAqLwotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCi0gICAgICAgIHB2X2NyNF9tYXNrICY9IH5YODZf Q1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0dXJuIDA7Ci19Ci1fX2luaXRjYWxs KGluaXRfcHZfY3I0X21hc2tzKTsKLQotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfZml4dXAoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2lnbmVkIGxv bmcgZ3Vlc3RfY3I0KQotewotICAgIHVuc2lnbmVkIGxvbmcgaHZfY3I0ID0g cmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KHJlYWRfY3I0KCkpOwotICAgIHVu c2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2XzMyYml0X3ZjcHUodikgPyBjb21w YXRfcHZfY3I0X21hc2sgOiBwdl9jcjRfbWFzazsKLQotICAgIGlmICggKGd1 ZXN0X2NyNCAmIG1hc2spICE9IChodl9jcjQgJiBtYXNrKSApCi0gICAgICAg IHByaW50ayhYRU5MT0dfR19XQVJOSU5HCi0gICAgICAgICAgICAgICAiZCVk IGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2J3MgQ1I0IGZsYWdzICUwOGx4IC0+ ICUwOGx4XG4iLAotICAgICAgICAgICAgICAgY3VycmVudC0+ZG9tYWluLT5k b21haW5faWQsIHYsIGh2X2NyNCwgZ3Vlc3RfY3I0KTsKLQotICAgIHJldHVy biAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vlc3RfY3I0ICYgfm1hc2spOwotfQot CiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0X2NvbnRleHQgdmNwdV9ndWVzdF9j b250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0IGZwdV9jdHh0LngKIENIRUNLX0ZJ RUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3RfY29udGV4dCwgZnB1X2N0eHQpOwpA QCAtMTAxMSw3ICsxMDIyLDcgQEAgaW50IGFyY2hfc2V0X2luZm9fZ3Vlc3Qo CiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKICAgICB1bnNp Z25lZCBsb25nIGNyM19nZm47CiAgICAgc3RydWN0IHBhZ2VfaW5mbyAqY3Iz X3BhZ2U7Ci0gICAgdW5zaWduZWQgbG9uZyBmbGFncywgY3I0OworICAgIHVu c2lnbmVkIGxvbmcgZmxhZ3M7CiAgICAgdW5zaWduZWQgaW50IGk7CiAgICAg aW50IHJjID0gMCwgY29tcGF0OwogCkBAIC0xMjI4LDkgKzEyMzksOCBAQCBp bnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2LT5hcmNoLnB2X3ZjcHUu Y3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAgIHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+WDg2X0NSMF9UUzsKIAot ICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdOwotICAgIHYt PmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0ID8gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFsX2NyNF90b19wdl9ndWVz dF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1cF9ndWVzdF9jcjQodiwg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwogCiAgICAgbWVtc2V0KHYt PmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5hcmNoLmRlYnVncmVnKSk7 CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysgKQpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwppbmRleCAy YjkzZWZiLi40ZTk4ZjgyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0u YworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNTAxLDMzICs1MDEsMTMg QEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAqdiwgdW5zaWduZWQgbG9u ZyBtZm4pCiAgICAgICAgIHYtPmFyY2guY3IzIHw9IGdldF9wY2lkX2JpdHMo diwgZmFsc2UpOwogfQogCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0X2NyNF90 b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKLXsKLSAgICBjb25z dCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOwotICAgIHVuc2lnbmVk IGxvbmcgY3I0OwotCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1LmN0cmxy ZWdbNF0gJiB+WDg2X0NSNF9ERTsKLSAgICBjcjQgfD0gbW11X2NyNF9mZWF0 dXJlcyAmIChYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfU01FUCB8IFg4Nl9DUjRf U01BUCB8Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgWDg2X0NS NF9PU1hTQVZFIHwgWDg2X0NSNF9GU0dTQkFTRSk7Ci0KLSAgICBpZiAoIGQt PmFyY2gucHZfZG9tYWluLnBjaWQgKQotICAgICAgICBjcjQgfD0gWDg2X0NS NF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHZfZG9tYWluLnhw dGkgKQotICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7Ci0KLSAgICBjcjQg fD0gZC0+YXJjaC52dHNjID8gWDg2X0NSNF9UU0QgOiAwOwotCi0gICAgcmV0 dXJuIGNyNDsKLX0KLQogdm9pZCB3cml0ZV9wdGJhc2Uoc3RydWN0IHZjcHUg KnYpCiB7CiAgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9IGdldF9j cHVfaW5mbygpOwogICAgIHVuc2lnbmVkIGxvbmcgbmV3X2NyNDsKIAogICAg IG5ld19jcjQgPSAoaXNfcHZfdmNwdSh2KSAmJiAhaXNfaWRsZV92Y3B1KHYp KQotICAgICAgICAgICAgICA/IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNCh2 KQotICAgICAgICAgICAgICA6ICgocmVhZF9jcjQoKSAmIH4oWDg2X0NSNF9Q Q0lERSB8IFg4Nl9DUjRfVFNEKSkgfCBYODZfQ1I0X1BHRSk7CisgICAgICAg ICAgICAgID8gcHZfbWFrZV9jcjQodikgOiBtbXVfY3I0X2ZlYXR1cmVzOwog CiAgICAgaWYgKCBpc19wdl92Y3B1KHYpICYmIHYtPmRvbWFpbi0+YXJjaC5w dl9kb21haW4ueHB0aSApCiAgICAgewpAQCAtNTQ2LDggKzUyNiw2IEBAIHZv aWQgd3JpdGVfcHRiYXNlKHN0cnVjdCB2Y3B1ICp2KQogICAgICAgICBzd2l0 Y2hfY3IzX2NyNCh2LT5hcmNoLmNyMywgbmV3X2NyNCk7CiAgICAgICAgIGNw dV9pbmZvLT5wdl9jcjMgPSAwOwogICAgIH0KLQotICAgIEFTU0VSVChpc19w dl92Y3B1KHYpIHx8IHJlYWRfY3I0KCkgPT0gbW11X2NyNF9mZWF0dXJlcyk7 CiB9CiAKIC8qCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJhcHMuYyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IDc3Zjc4NmMuLmE4YWViZTUg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBiL3hlbi9h cmNoL3g4Ni90cmFwcy5jCkBAIC05NjYsNyArOTY2LDggQEAgc3RhdGljIHZv aWQgX2RvbWFpbl9jcHVpZChjb25zdCBzdHJ1Y3QgZG9tYWluICpjdXJyZCwK ICAgICAgICAgICAgICAgICAgICAgICAgICAgdW5zaWduZWQgaW50ICplYXgs IHVuc2lnbmVkIGludCAqZWJ4LAogICAgICAgICAgICAgICAgICAgICAgICAg ICB1bnNpZ25lZCBpbnQgKmVjeCwgdW5zaWduZWQgaW50ICplZHgpCiB7Ci0g ICAgaWYgKCAhaXNfY29udHJvbF9kb21haW4oY3VycmQpICYmICFpc19oYXJk d2FyZV9kb21haW4oY3VycmQpICkKKyAgICBpZiAoICFpc19jb250cm9sX2Rv bWFpbihjdXJyZCkgJiYgIWlzX2hhcmR3YXJlX2RvbWFpbihjdXJyZCkgJiYK KyAgICAgICAgICFpc19pZGxlX2RvbWFpbihjdXJyZCkgKQogICAgICAgICBk b21haW5fY3B1aWQoY3VycmQsIGxlYWYsIHN1YmxlYWYsIGVheCwgZWJ4LCBl Y3gsIGVkeCk7CiAgICAgZWxzZQogICAgICAgICBjcHVpZF9jb3VudChsZWFm LCBzdWJsZWFmLCBlYXgsIGVieCwgZWN4LCBlZHgpOwpAQCAtMjM3Miw4ICsy MzczLDggQEAgc3RhdGljIGludCBwcml2X29wX3dyaXRlX2NyKHVuc2lnbmVk IGludCByZWcsIHVuc2lnbmVkIGxvbmcgdmFsLAogICAgIH0KIAogICAgIGNh c2UgNDogLyogV3JpdGUgQ1I0ICovCi0gICAgICAgIGN1cnItPmFyY2gucHZf dmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0X2ZpeHVwKGN1cnIsIHZh bCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9ndWVzdF9jcjRfdG9fcmVhbF9j cjQoY3VycikpOworICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJl Z1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOworICAgICAg ICB3cml0ZV9jcjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0 X3N3aXRjaF9sZXZlbGxpbmcoY3Vycik7CiAgICAgICAgIHJldHVybiBYODZF TVVMX09LQVk7CiAgICAgfQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNt LXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK aW5kZXggZTdhYmFhZC4uMDEzNzI4MyAxMDA2NDQKLS0tIGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCkBAIC02NDIsMTYgKzY0MiwyMiBAQCBib29sX3QgdXBkYXRl X3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3QgdmNwdSAqLAogdm9pZCB2 Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVjdCB2Y3B1ICopOwogdm9p ZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0cnVjdCB2Y3B1ICopOwog Ci0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFyZSBub3QgdW5kZXIgZ3Vl c3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2Zp eHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2lnbmVkIGxvbmcgZ3Vlc3Rf Y3I0KTsKKy8qCisgKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2ds ZSBpbiBpdHMgdmlldyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bwor ICogaGFyZHdhcmUsIHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgor ICovCisjZGVmaW5lIFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NS NF9UU0QgfCBYODZfQ1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9D UjRfT1NYU0FWRSkKKworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBv YnNlcnZlIGZyb20gdGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisj ZGVmaW5lIFBWX0NSNF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZf Q1I0X1BBRSB8IFg4Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZf Q1I0X09TWE1NRVhDUFQpCiAKLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12 aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25n IHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAq dik7CisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNvbnN0cnVjdCB0aGUg cmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVlLiAqLwordW5zaWdu ZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKIAotI2RlZmluZSByZWFsX2NyNF90 b19wdl9ndWVzdF9jcjQoYykgICAgICAgICAgICAgICAgICAgICAgICAgXAot ICAgICgoYykgJiB+KFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZf Q1I0X1RTRCB8ICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FW RSB8IFg4Nl9DUjRfU01FUCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAg ICAgIFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0 X1BDSURFKSkKKy8qIENyZWF0ZSBhIGNyNCB2YWx1ZSB0byBsb2FkIGludG8g aGFyZHdhcmUsIGJhc2VkIG9uIHZjcHUgc2V0dGluZ3MuICovCit1bnNpZ25l ZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKIAog dm9pZCBkb21haW5fY3B1aWQoY29uc3Qgc3RydWN0IGRvbWFpbiAqZCwKICAg ICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCAgaW5wdXQsCg== --=separator Content-Type: application/octet-stream; name="xsa293/4.8-3.patch" Content-Disposition: attachment; filename="xsa293/4.8-3.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClNpZ25lZC1vZmYtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJl dmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Cgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gv eDg2L2RvbWFpbi5jCmluZGV4IDEyMGYxZTMuLmQyNDZlNDAgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYv ZG9tYWluLmMKQEAgLTQyOCw2ICs0MjgsMTYgQEAgdW5zaWduZWQgbG9uZyBw dl9tYWtlX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGQt PmFyY2gudnRzYyB8fCAodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBY ODZfQ1I0X1RTRCkgKQogICAgICAgICBjcjQgfD0gWDg2X0NSNF9UU0Q7CiAK KyAgICAvKgorICAgICAqIFRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgYXJlIG9u bHkgdXNlYWJsZSBpbiA2NGJpdCBjb2RlIHNlZ21lbnRzLiAgV2hpbGUKKyAg ICAgKiB3ZSBtdXN0IG5vdCBoYXZlIENSNC5GU0dTQkFTRSBzZXQgYmVoaW5k IHRoZSBiYWNrIG9mIGEgNjRiaXQgUFYga2VybmVsLAorICAgICAqIHdlIGRv IGxlYXZlIGl0IHNldCBpbiAzMmJpdCBQViBjb250ZXh0IHRvIHNwZWVkIHVw IFhlbidzIGNvbnRleHQgc3dpdGNoCisgICAgICogcGF0aC4KKyAgICAgKi8K KyAgICBpZiAoICFpc19wdl8zMmJpdF9kb21haW4oZCkgJiYKKyAgICAgICAg ICEodi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NC QVNFKSApCisgICAgICAgIGNyNCAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKKwog ICAgIHJldHVybiBjcjQ7CiB9CiAKQEAgLTIwMjIsNyArMjAzMiw4IEBAIHN0 YXRpYyB2b2lkIHNhdmVfc2VnbWVudHMoc3RydWN0IHZjcHUgKnYpCiAgICAg cmVncy0+ZnMgPSByZWFkX3NyZWcoZnMpOwogICAgIHJlZ3MtPmdzID0gcmVh ZF9zcmVnKGdzKTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAmJiAh aXNfcHZfMzJiaXRfdmNwdSh2KSApCisgICAgLyogJWZzLyVncyBiYXNlcyBj YW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNFIGFyZSB1c2FibGUu ICovCisgICAgaWYgKCAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAgICAgIHYt PmFyY2gucHZfdmNwdS5mc19iYXNlID0gX19yZGZzYmFzZSgpOwogICAgICAg ICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9kZSApCmRpZmYg LS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBiL3hlbi9hcmNoL3g4Ni9z ZXR1cC5jCmluZGV4IDU1MDQzNWMuLjNhN2IzNjIgMTAwNjQ0Ci0tLSBhL3hl bi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9zZXR1cC5j CkBAIC0xNTA0LDcgKzE1MDQsNyBAQCB2b2lkIF9faW5pdCBub3JldHVybiBf X3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9wKQogCiAgICAgY3I0X3B2 MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBYRU5fQ1I0X1BWMzJfQklU UzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JBU0UpICkKICAgICAgICAg c2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsKIAogICAgIGlmICggb3B0 X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni90cmFwcy5jIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKaW5k ZXggN2Q0NGE0Yy4uYjFjZmY1ZSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3RyYXBzLmMKQEAgLTIzNzIs NiArMjM3MiwxNyBAQCBzdGF0aWMgaW50IHByaXZfb3Bfd3JpdGVfY3IodW5z aWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2YWwsCiAgICAgfQogCiAg ICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KKyAgICAgICAgLyoKKyAgICAg ICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2FibGUgRlNHU0JBU0UsIHJl ZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAgICAgICogZ3Vlc3QgYmFz ZXMgbm93IHRoYXQgdGhleSBjYW4gbm8gbG9uZ2VyIGNoYW5nZS4KKyAgICAg ICAgICovCisgICAgICAgIGlmICggKGN1cnItPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYKKyAgICAgICAgICAgICAh KHZhbCAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAgICAgICAgeworICAgICAg ICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNl KCk7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9r ZXJuZWwgPSBfX3JkZ3NiYXNlKCk7CisgICAgICAgIH0KKwogICAgICAgICBj dXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0 X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9j cjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcoY3Vy cik7CkBAIC0yNDMyLDE0ICsyNDQzLDE1IEBAIHN0YXRpYyBpbnQgcHJpdl9v cF9yZWFkX21zcih1bnNpZ25lZCBpbnQgcmVnLCB1aW50NjRfdCAqdmFsLAog ICAgIGNhc2UgTVNSX0ZTX0JBU0U6CiAgICAgICAgIGlmICggaXNfcHZfMzJi aXRfZG9tYWluKGN1cnJkKSApCiAgICAgICAgICAgICBicmVhazsKLSAgICAg ICAgKnZhbCA9IGNwdV9oYXNfZnNnc2Jhc2UgPyBfX3JkZnNiYXNlKCkgOiBj dXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZTsKKyAgICAgICAgKnZhbCA9IChy ZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZnNiYXNlKCkK KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZTsKICAgICAgICAgcmV0 dXJuIFg4NkVNVUxfT0tBWTsKIAogICAgIGNhc2UgTVNSX0dTX0JBU0U6CiAg ICAgICAgIGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGN1cnJkKSApCiAgICAg ICAgICAgICBicmVhazsKLSAgICAgICAgKnZhbCA9IGNwdV9oYXNfZnNnc2Jh c2UgPyBfX3JkZ3NiYXNlKCkKLSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3NfYmFzZV9rZXJuZWw7Cisg ICAgICAgICp2YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ID8gX19yZGdzYmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsOwogICAgICAgICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAg ICAgY2FzZSBNU1JfU0hBRE9XX0dTX0JBU0U6CmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYveDg2XzY0L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYveDg2XzY0 L3RyYXBzLmMKaW5kZXggMzk2ZTY3Ny4uY2IyYWJiMSAxMDA2NDQKLS0tIGEv eGVuL2FyY2gveDg2L3g4Nl82NC90cmFwcy5jCisrKyBiL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYwpAQCAtMjY3LDcgKzI2Nyw5IEBAIHZvaWQgdG9n Z2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB7CiAgICAgaWYgKCBp c19wdl8zMmJpdF92Y3B1KHYpICkKICAgICAgICAgcmV0dXJuOwotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCisKKyAgICAvKiAlZnMvJWdzIGJhc2Vz IGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJs ZS4gKi8KKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNF ICkKICAgICB7CiAgICAgICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tl cm5lbF9tb2RlICkKICAgICAgICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19i YXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKZGlmZiAtLWdpdCBhL3hlbi9p bmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9jcHVmZWF0dXJlLmgKaW5kZXggYWYyYTg5Mi4uODlmZjI0OSAxMDA2 NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKKysr IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKQEAgLTgwLDcg KzgwLDYgQEAgWEVOX0NQVUZFQVRVUkUoWEVOX0xCUiwgICAgICAgICAoRlND QVBJTlRTKzApKjMyKzI0KSAvKiBYZW4gdXNlcyBNU1JfREVCVUdDVEwuTEIK ICNkZWZpbmUgY3B1X2hhc19ueAkJYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJF X05YKQogI2RlZmluZSBjcHVfaGFzX2NsZmx1c2gJCWJvb3RfY3B1X2hhcyhY ODZfRkVBVFVSRV9DTEZMVVNIKQogI2RlZmluZSBjcHVfaGFzX3BhZ2UxZ2IJ CWJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9QQUdFMUdCKQotI2RlZmluZSBj cHVfaGFzX2ZzZ3NiYXNlCWJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dT QkFTRSkKICNkZWZpbmUgY3B1X2hhc19hcGVyZm1wZXJmCWJvb3RfY3B1X2hh cyhYODZfRkVBVFVSRV9BUEVSRk1QRVJGKQogI2RlZmluZSBjcHVfaGFzX3Nt ZXAgICAgICAgICAgICBib290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfU01FUCkK ICNkZWZpbmUgY3B1X2hhc19pbnZwY2lkICAgICAgICAgYm9vdF9jcHVfaGFz KFg4Nl9GRUFUVVJFX0lOVlBDSUQpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVk ZS9hc20teDg2L21zci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3IuaApp bmRleCA1ZTFkZjhmLi4wOGVlYzMwIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS9hc20teDg2L21zci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNy LmgKQEAgLTEwOSw2ICsxMDksMTQgQEAgc3RhdGljIGlubGluZSB1aW50NjRf dCByZHRzY19vcmRlcmVkKHZvaWQpCiAJCQkgIDogIj1hIiAobG93KSwgIj1k IiAoaGlnaCkgXAogCQkJICA6ICJjIiAoY291bnRlcikpCiAKKy8qCisgKiBP biBoYXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgbG9h ZGVkIGludG8gaGFyZHdhcmUgaXMgdGhlCisgKiBndWVzdCBrZXJuZWwncyBj aG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0cyAoWGVuJ3MgY2hvaWNlIGZvciBJ ZGxlLCBIVk0gYW5kCisgKiAzMmJpdCBQVikuCisgKgorICogVGhlcmVmb3Jl LCB0aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9ucyBhcmUgb25s eSBzYWZlIHRvIHVzZSBpZgorICogJWNyNC5mc2dzYmFzZSBpcyBzZXQuCisg Ki8KIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBfX3JkZnNiYXNlKHZv aWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwpAQCAtMTM5LDcgKzE0 Nyw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGZzYmFzZSh2 b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICgg Y3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZnNiYXNlKCk7 CiAKICAgICByZG1zcmwoTVNSX0ZTX0JBU0UsIGJhc2UpOwpAQCAtMTUxLDcg KzE1OSw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFz ZSh2b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYg WDg2X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZ3NiYXNl KCk7CiAKICAgICByZG1zcmwoTVNSX0dTX0JBU0UsIGJhc2UpOwpAQCAtMTYx LDcgKzE2OSw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdz YmFzZSh2b2lkKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5z aWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dzYmFz ZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSAp CiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0 aWxlICggIndyZnNiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpA QCAtMTczLDcgKzE4MSw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFz ZSh1bnNpZ25lZCBsb25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3 cmdzYmFzZSh1bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVf aGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0 X0ZTR1NCQVNFICkKICNpZmRlZiBIQVZFX0dBU19GU0dTQkFTRQogICAgICAg ICBhc20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkg KTsKICNlbHNlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3By b2Nlc3Nvci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaApp bmRleCA1MGJhZGFiLi5hNTMxOWUzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS9hc20teDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKQEAgLTM4MCwxMSArMzgwLDMxIEBAIHN0YXRpYyBp bmxpbmUgdW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMg aW5saW5lIHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogewor ICAgIHN0cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOwor CiAgICAgLyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5h YmxlZCEgKi8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwg ISh2YWwgJiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8o KS0+Y3I0ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVj cjQiIDogOiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3 YXJlIHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlz IHRoZSBrZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vl c3RzLCB3aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisg ICAgICogaW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3 cn17ZnMsZ3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3Jr IG91dCB3aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRo ZSB7UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFj ayB0bworICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJz IHJlcXVpcmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElm IEZTR1NCQVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xl YXIsIHJlZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUg dXBkYXRpbmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4g dGhlCisgICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0 IGluIGluZm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAg ICBpbmZvLT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNH U0JBU0UpOworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUl Y3I0IgorICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAv KiBGb3JjZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAg ICAgICAgICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5m by0+Y3I0ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0 IHJlc3BlY3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.9-1.patch" Content-Disposition: attachment; filename="xsa293/4.9-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg NjFmNjY3MS4uZTliOTVlNCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtMzk4LDYg KzM5OCw1MiBAQCBzdGF0aWMgdm9pZCByZWxlYXNlX2NvbXBhdF9sNChzdHJ1 Y3QgdmNwdSAqdikKICAgICB2LT5hcmNoLmd1ZXN0X3RhYmxlX3VzZXIgPSBw YWdldGFibGVfbnVsbCgpOwogfQogCit1bnNpZ25lZCBsb25nIHB2X2ZpeHVw X2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwgdW5zaWduZWQgbG9u ZyBjcjQpCit7CisgICAgY29uc3Qgc3RydWN0IGNwdWlkX3BvbGljeSAqcCA9 IHYtPmRvbWFpbi0+YXJjaC5jcHVpZDsKKworICAgIC8qIERpc2NhcmQgYXR0 ZW1wdHMgdG8gc2V0IGd1ZXN0IGNvbnRyb2xsYWJsZSBiaXRzIG91dHNpZGUg b2YgdGhlIHBvbGljeS4gKi8KKyAgICBjcjQgJj0gfigocC0+YmFzaWMudHNj ICAgICA/IDAgOiBYODZfQ1I0X1RTRCkgICAgICB8CisgICAgICAgICAgICAg KHAtPmJhc2ljLmRlICAgICAgPyAwIDogWDg2X0NSNF9ERSkgICAgICAgfAor ICAgICAgICAgICAgIChwLT5mZWF0LmZzZ3NiYXNlID8gMCA6IFg4Nl9DUjRf RlNHU0JBU0UpIHwKKyAgICAgICAgICAgICAocC0+YmFzaWMueHNhdmUgICA/ IDAgOiBYODZfQ1I0X09TWFNBVkUpKTsKKworICAgIC8qIE1hc2tzIGV4cGVj dGVkIHRvIGJlIGRpc2pvaW50IHNldHMuICovCisgICAgQlVJTERfQlVHX09O KFBWX0NSNF9HVUVTVF9NQVNLICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVfTUFT Syk7CisKKyAgICAvKgorICAgICAqIEEgZ3Vlc3Qgc2VlcyB0aGUgcG9saWN5 IHN1YnNldCBvZiBpdHMgb3duIGNob2ljZSBvZiBndWVzdCBjb250cm9sbGFi bGUKKyAgICAgKiBiaXRzLCBhbmQgYSBzdWJzZXQgb2YgWGVuJ3MgY2hvaWNl IG9mIGNlcnRhaW4gaGFyZHdhcmUgc2V0dGluZ3MuCisgICAgICovCisgICAg cmV0dXJuICgoY3I0ICYgUFZfQ1I0X0dVRVNUX01BU0spIHwKKyAgICAgICAg ICAgIChtbXVfY3I0X2ZlYXR1cmVzICYgUFZfQ1I0X0dVRVNUX1ZJU0lCTEVf TUFTSykpOworfQorCit1bnNpZ25lZCBsb25nIHB2X21ha2VfY3I0KGNvbnN0 IHN0cnVjdCB2Y3B1ICp2KQoreworICAgIGNvbnN0IHN0cnVjdCBkb21haW4g KmQgPSB2LT5kb21haW47CisgICAgdW5zaWduZWQgbG9uZyBjcjQgPSBtbXVf Y3I0X2ZlYXR1cmVzICYKKyAgICAgICAgfihYODZfQ1I0X1BDSURFIHwgWDg2 X0NSNF9QR0UgfCBYODZfQ1I0X1RTRCk7CisKKyAgICAvKgorICAgICAqIFBD SURFIG9yIFBHRSBkZXBlbmRzIG9uIHRoZSBQQ0lEL1hQVEkgc2V0dGluZ3Ms IGJ1dCBtdXN0IG5vdCBib3RoIGJlCisgICAgICogc2V0LCBhcyBpdCBpbXBh Y3RzIHRoZSBzYWZldHkgb2YgVExCIGZsdXNoaW5nLgorICAgICAqLworICAg IGlmICggZC0+YXJjaC5wdl9kb21haW4ucGNpZCApCisgICAgICAgIGNyNCB8 PSBYODZfQ1I0X1BDSURFOworICAgIGVsc2UgaWYgKCAhZC0+YXJjaC5wdl9k b21haW4ueHB0aSApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKKwor ICAgIC8qCisgICAgICogVFNEIGlzIG5lZWRlZCBpZiBlaXRoZXIgdGhlIGd1 ZXN0IGhhcyBlbGVjdGVkIHRvIHVzZSBpdCwgb3IgWGVuIGlzCisgICAgICog dmlydHVhbGlzaW5nIHRoZSBUU0MgdmFsdWUgdGhlIGd1ZXN0IHNlZXMuCisg ICAgICovCisgICAgaWYgKCBkLT5hcmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZf dmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9UU0QpICkKKyAgICAgICAgY3I0 IHw9IFg4Nl9DUjRfVFNEOworCisgICAgcmV0dXJuIGNyNDsKK30KKwogaW50 IHN3aXRjaF9jb21wYXQoc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICBzdHJ1 Y3QgdmNwdSAqdjsKQEAgLTUxMiwxMiArNTU4LDEyIEBAIGludCB2Y3B1X2lu aXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAKICAgICAgICAgLyogUFYgZ3Vl c3RzIGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4gKi8KICAgICAg ICAgdi0+cGVyaW9kaWNfcGVyaW9kID0gTUlMTElTRUNTKDEwKTsKKworICAg ICAgICB2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1 ZXN0X2NyNCh2LCAwKTsKICAgICB9CiAgICAgZWxzZQogICAgICAgICB2LT5h cmNoLmNyMyA9IF9fcGEoaWRsZV9wZ190YWJsZSk7CiAKLSAgICB2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2Ny NChtbXVfY3I0X2ZlYXR1cmVzKTsKLQogICAgIGlmICggaXNfcHZfMzJiaXRf ZG9tYWluKGQpICkKICAgICB7CiAgICAgICAgIGlmICggKHJjID0gc2V0dXBf Y29tcGF0X2FyZ194bGF0KHYpKSApCkBAIC05NTMsNDkgKzk5OSw2IEBAIGlu dCBhcmNoX2RvbWFpbl9zb2Z0X3Jlc2V0KHN0cnVjdCBkb21haW4gKmQpCiAg ICAgcmV0dXJuIHJldDsKIH0KIAotLyoKLSAqIFRoZXNlIGFyZSB0aGUgbWFz a3Mgb2YgQ1I0IGJpdHMgKHN1YmplY3QgdG8gaGFyZHdhcmUgYXZhaWxhYmls aXR5KSB3aGljaCBhCi0gKiBQViBndWVzdCBtYXkgbm90IGxlZ2l0aW1pYXRl bHkgYXR0ZW1wdCB0byBtb2RpZnkuCi0gKi8KLXN0YXRpYyB1bnNpZ25lZCBs b25nIF9fcmVhZF9tb3N0bHkgcHZfY3I0X21hc2ssIGNvbXBhdF9wdl9jcjRf bWFzazsKLQotc3RhdGljIGludCBfX2luaXQgaW5pdF9wdl9jcjRfbWFza3Mo dm9pZCkKLXsKLSAgICB1bnNpZ25lZCBsb25nIGNvbW1vbl9tYXNrID0gflg4 Nl9DUjRfVFNEOwotCi0gICAgLyoKLSAgICAgKiBBbGwgUFYgZ3Vlc3RzIG1h eSBhdHRlbXB0IHRvIG1vZGlmeSBUU0QsIERFIGFuZCBPU1hTQVZFLgotICAg ICAqLwotICAgIGlmICggY3B1X2hhc19kZSApCi0gICAgICAgIGNvbW1vbl9t YXNrICY9IH5YODZfQ1I0X0RFOwotICAgIGlmICggY3B1X2hhc194c2F2ZSAp Ci0gICAgICAgIGNvbW1vbl9tYXNrICY9IH5YODZfQ1I0X09TWFNBVkU7Ci0K LSAgICBwdl9jcjRfbWFzayA9IGNvbXBhdF9wdl9jcjRfbWFzayA9IGNvbW1v bl9tYXNrOwotCi0gICAgLyoKLSAgICAgKiA2NGJpdCBQViBndWVzdHMgbWF5 IGF0dGVtcHQgdG8gbW9kaWZ5IEZTR1NCQVNFLgotICAgICAqLwotICAgIGlm ICggY3B1X2hhc19mc2dzYmFzZSApCi0gICAgICAgIHB2X2NyNF9tYXNrICY9 IH5YODZfQ1I0X0ZTR1NCQVNFOwotCi0gICAgcmV0dXJuIDA7Ci19Ci1fX2lu aXRjYWxsKGluaXRfcHZfY3I0X21hc2tzKTsKLQotdW5zaWduZWQgbG9uZyBw dl9ndWVzdF9jcjRfZml4dXAoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2ln bmVkIGxvbmcgZ3Vlc3RfY3I0KQotewotICAgIHVuc2lnbmVkIGxvbmcgaHZf Y3I0ID0gcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KHJlYWRfY3I0KCkpOwot ICAgIHVuc2lnbmVkIGxvbmcgbWFzayA9IGlzX3B2XzMyYml0X3ZjcHUodikg PyBjb21wYXRfcHZfY3I0X21hc2sgOiBwdl9jcjRfbWFzazsKLQotICAgIGlm ICggKGd1ZXN0X2NyNCAmIG1hc2spICE9IChodl9jcjQgJiBtYXNrKSApCi0g ICAgICAgIHByaW50ayhYRU5MT0dfR19XQVJOSU5HCi0gICAgICAgICAgICAg ICAiZCVkIGF0dGVtcHRlZCB0byBjaGFuZ2UgJXB2J3MgQ1I0IGZsYWdzICUw OGx4IC0+ICUwOGx4XG4iLAotICAgICAgICAgICAgICAgY3VycmVudC0+ZG9t YWluLT5kb21haW5faWQsIHYsIGh2X2NyNCwgZ3Vlc3RfY3I0KTsKLQotICAg IHJldHVybiAoaHZfY3I0ICYgbWFzaykgfCAoZ3Vlc3RfY3I0ICYgfm1hc2sp OwotfQotCiAjZGVmaW5lIHhlbl92Y3B1X2d1ZXN0X2NvbnRleHQgdmNwdV9n dWVzdF9jb250ZXh0CiAjZGVmaW5lIGZwdV9jdHh0IGZwdV9jdHh0LngKIENI RUNLX0ZJRUxEXyhzdHJ1Y3QsIHZjcHVfZ3Vlc3RfY29udGV4dCwgZnB1X2N0 eHQpOwpAQCAtMTAwOSw3ICsxMDEyLDcgQEAgaW50IGFyY2hfc2V0X2luZm9f Z3Vlc3QoCiAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKICAg ICB1bnNpZ25lZCBsb25nIGNyM19nZm47CiAgICAgc3RydWN0IHBhZ2VfaW5m byAqY3IzX3BhZ2U7Ci0gICAgdW5zaWduZWQgbG9uZyBmbGFncywgY3I0Owor ICAgIHVuc2lnbmVkIGxvbmcgZmxhZ3M7CiAgICAgdW5zaWduZWQgaW50IGk7 CiAgICAgaW50IHJjID0gMCwgY29tcGF0OwogCkBAIC0xMjAwLDkgKzEyMDMs OCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2LT5hcmNoLnB2 X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAgIHYtPmFyY2gu cHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+WDg2X0NSMF9U UzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdOwot ICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0ID8gcHZfZ3Vl c3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFsX2NyNF90b19w dl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1cF9ndWVzdF9j cjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwogCiAgICAgbWVt c2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5hcmNoLmRlYnVn cmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysgKQpkaWZmIC0t Z2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94ODYvbW0uYwpp bmRleCAyOTgyZWVjLi4yMzQ5MTNmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94 ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNTE0LDMzICs1 MTQsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAqdiwgdW5zaWdu ZWQgbG9uZyBtZm4pCiAgICAgICAgIHYtPmFyY2guY3IzIHw9IGdldF9wY2lk X2JpdHModiwgZmFsc2UpOwogfQogCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0 X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikKLXsKLSAg ICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOwotICAgIHVu c2lnbmVkIGxvbmcgY3I0OwotCi0gICAgY3I0ID0gdi0+YXJjaC5wdl92Y3B1 LmN0cmxyZWdbNF0gJiB+WDg2X0NSNF9ERTsKLSAgICBjcjQgfD0gbW11X2Ny NF9mZWF0dXJlcyAmIChYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfU01FUCB8IFg4 Nl9DUjRfU01BUCB8Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg WDg2X0NSNF9PU1hTQVZFIHwgWDg2X0NSNF9GU0dTQkFTRSk7Ci0KLSAgICBp ZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQotICAgICAgICBjcjQgfD0g WDg2X0NSNF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHZfZG9t YWluLnhwdGkgKQotICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7Ci0KLSAg ICBjcjQgfD0gZC0+YXJjaC52dHNjID8gWDg2X0NSNF9UU0QgOiAwOwotCi0g ICAgcmV0dXJuIGNyNDsKLX0KLQogdm9pZCB3cml0ZV9wdGJhc2Uoc3RydWN0 IHZjcHUgKnYpCiB7CiAgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9 IGdldF9jcHVfaW5mbygpOwogICAgIHVuc2lnbmVkIGxvbmcgbmV3X2NyNDsK IAogICAgIG5ld19jcjQgPSAoaXNfcHZfdmNwdSh2KSAmJiAhaXNfaWRsZV92 Y3B1KHYpKQotICAgICAgICAgICAgICA/IHB2X2d1ZXN0X2NyNF90b19yZWFs X2NyNCh2KQotICAgICAgICAgICAgICA6ICgocmVhZF9jcjQoKSAmIH4oWDg2 X0NSNF9QQ0lERSB8IFg4Nl9DUjRfVFNEKSkgfCBYODZfQ1I0X1BHRSk7Cisg ICAgICAgICAgICAgID8gcHZfbWFrZV9jcjQodikgOiBtbXVfY3I0X2ZlYXR1 cmVzOwogCiAgICAgaWYgKCBpc19wdl92Y3B1KHYpICYmIHYtPmRvbWFpbi0+ YXJjaC5wdl9kb21haW4ueHB0aSApCiAgICAgewpAQCAtNTU5LDggKzUzOSw2 IEBAIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVjdCB2Y3B1ICp2KQogICAgICAg ICBzd2l0Y2hfY3IzX2NyNCh2LT5hcmNoLmNyMywgbmV3X2NyNCk7CiAgICAg ICAgIGNwdV9pbmZvLT5wdl9jcjMgPSAwOwogICAgIH0KLQotICAgIEFTU0VS VChpc19wdl92Y3B1KHYpIHx8IHJlYWRfY3I0KCkgPT0gbW11X2NyNF9mZWF0 dXJlcyk7CiB9CiAKIC8qCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvdHJh cHMuYyBiL3hlbi9hcmNoL3g4Ni90cmFwcy5jCmluZGV4IGZlYzVlNTUuLmRj NWEwZDYgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni90cmFwcy5jCisrKyBi L3hlbi9hcmNoL3g4Ni90cmFwcy5jCkBAIC0yNDg2LDggKzI0ODYsOCBAQCBz dGF0aWMgaW50IHByaXZfb3Bfd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywg dW5zaWduZWQgbG9uZyB2YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBX cml0ZSBDUjQgKi8KLSAgICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmN0cmxy ZWdbNF0gPSBwdl9ndWVzdF9jcjRfZml4dXAoY3VyciwgdmFsKTsKLSAgICAg ICAgd3JpdGVfY3I0KHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjdXJyKSk7 CisgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZf Zml4dXBfZ3Vlc3RfY3I0KGN1cnIsIHZhbCk7CisgICAgICAgIHdyaXRlX2Ny NChwdl9tYWtlX2NyNChjdXJyKSk7CiAgICAgICAgIGN0eHRfc3dpdGNoX2xl dmVsbGluZyhjdXJyKTsKICAgICAgICAgcmV0dXJuIFg4NkVNVUxfT0tBWTsK ICAgICB9CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFp bi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAppbmRleCA3YzI2 ZjYwLi43ZWE2NzUzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgK QEAgLTY0OCwxNiArNjQ4LDIyIEBAIGJvb2xfdCB1cGRhdGVfc2Vjb25kYXJ5 X3N5c3RlbV90aW1lKHN0cnVjdCB2Y3B1ICosCiB2b2lkIHZjcHVfc2hvd19l eGVjdXRpb25fc3RhdGUoc3RydWN0IHZjcHUgKik7CiB2b2lkIHZjcHVfc2hv d19yZWdpc3RlcnMoY29uc3Qgc3RydWN0IHZjcHUgKik7CiAKLS8qIENsZWFu IHVwIENSNCBiaXRzIHRoYXQgYXJlIG5vdCB1bmRlciBndWVzdCBjb250cm9s LiAqLwotdW5zaWduZWQgbG9uZyBwdl9ndWVzdF9jcjRfZml4dXAoY29uc3Qg c3RydWN0IHZjcHUgKiwgdW5zaWduZWQgbG9uZyBndWVzdF9jcjQpOworLyoK KyAqIEJpdHMgd2hpY2ggYSBQViBndWVzdCBjYW4gdG9nZ2xlIGluIGl0cyB2 aWV3IG9mIGNyNC4gIFNvbWUgYXJlIGxvYWRlZCBpbnRvCisgKiBoYXJkd2Fy ZSwgd2hpbGUgc29tZSBhcmUgZnVsbHkgZW11bGF0ZWQuCisgKi8KKyNkZWZp bmUgUFZfQ1I0X0dVRVNUX01BU0sgXAorICAgIChYODZfQ1I0X1RTRCB8IFg4 Nl9DUjRfREUgfCBYODZfQ1I0X0ZTR1NCQVNFIHwgWDg2X0NSNF9PU1hTQVZF KQorCisvKiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgbWF5IG9ic2VydmUgZnJv bSB0aGUgcmVhbCBoYXJkd2FyZSBzZXR0aW5ncy4gKi8KKyNkZWZpbmUgUFZf Q1I0X0dVRVNUX1ZJU0lCTEVfTUFTSyBcCisgICAgKFg4Nl9DUjRfUEFFIHwg WDg2X0NSNF9NQ0UgfCBYODZfQ1I0X09TRlhTUiB8IFg4Nl9DUjRfT1NYTU1F WENQVCkKIAotLyogQ29udmVydCBiZXR3ZWVuIGd1ZXN0LXZpc2libGUgYW5k IHJlYWwgQ1I0IHZhbHVlcy4gKi8KLXVuc2lnbmVkIGxvbmcgcHZfZ3Vlc3Rf Y3I0X3RvX3JlYWxfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KTsKKy8qIEdp dmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRoZSByZXN1bHRpbmcg Z3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNpZ25lZCBsb25nIHB2 X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwgdW5zaWdu ZWQgbG9uZyBjcjQpOwogCi0jZGVmaW5lIHJlYWxfY3I0X3RvX3B2X2d1ZXN0 X2NyNChjKSAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgKChjKSAm IH4oWDg2X0NSNF9QR0UgfCBYODZfQ1I0X1BTRSB8IFg4Nl9DUjRfVFNEIHwg ICAgICBcCi0gICAgICAgICAgICAgWDg2X0NSNF9PU1hTQVZFIHwgWDg2X0NS NF9TTUVQIHwgICAgICAgICAgICAgICBcCi0gICAgICAgICAgICAgWDg2X0NS NF9GU0dTQkFTRSB8IFg4Nl9DUjRfU01BUCB8IFg4Nl9DUjRfUENJREUpKQor LyogQ3JlYXRlIGEgY3I0IHZhbHVlIHRvIGxvYWQgaW50byBoYXJkd2FyZSwg YmFzZWQgb24gdmNwdSBzZXR0aW5ncy4gKi8KK3Vuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpOwogCiAjZGVmaW5lIGRv bWFpbl9tYXhfdmNwdXMoZCkgKGlzX2h2bV9kb21haW4oZCkgPyBIVk1fTUFY X1ZDUFVTIDogTUFYX1ZJUlRfQ1BVUykKIAo= --=separator Content-Type: application/octet-stream; name="xsa293/4.9-2.patch" Content-Disposition: attachment; filename="xsa293/4.9-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggZWZkYWIxYS4uMGVkYjEzMSAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtNDQxLDYgKzQ0MSwxNiBAQCB1bnNpZ25lZCBsb25n IHB2X21ha2VfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2KQogICAgIGlmICgg ZC0+YXJjaC52dHNjIHx8ICh2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAm IFg4Nl9DUjRfVFNEKSApCiAgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsK IAorICAgIC8qCisgICAgICogVGhlIHtSRCxXUn17RlMsR1N9QkFTRSBhcmUg b25seSB1c2VhYmxlIGluIDY0Yml0IGNvZGUgc2VnbWVudHMuICBXaGlsZQor ICAgICAqIHdlIG11c3Qgbm90IGhhdmUgQ1I0LkZTR1NCQVNFIHNldCBiZWhp bmQgdGhlIGJhY2sgb2YgYSA2NGJpdCBQViBrZXJuZWwsCisgICAgICogd2Ug ZG8gbGVhdmUgaXQgc2V0IGluIDMyYml0IFBWIGNvbnRleHQgdG8gc3BlZWQg dXAgWGVuJ3MgY29udGV4dCBzd2l0Y2gKKyAgICAgKiBwYXRoLgorICAgICAq LworICAgIGlmICggIWlzX3B2XzMyYml0X2RvbWFpbihkKSAmJgorICAgICAg ICAgISh2LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfRlNH U0JBU0UpICkKKyAgICAgICAgY3I0ICY9IH5YODZfQ1I0X0ZTR1NCQVNFOwor CiAgICAgcmV0dXJuIGNyNDsKIH0KIApAQCAtMTk4Nyw3ICsxOTk3LDggQEAg c3RhdGljIHZvaWQgc2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAg ICByZWdzLT5mcyA9IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSBy ZWFkX3NyZWcoZ3MpOwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYm ICFpc19wdl8zMmJpdF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2Vz IGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJs ZS4gKi8KKyAgICBpZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgJiYgIWlzX3B2XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAg di0+YXJjaC5wdl92Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAg ICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlm ZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9zZXR1cC5jIGIveGVuL2FyY2gveDg2 L3NldHVwLmMKaW5kZXggYmY1ZWQxZi4uNDBhZjdlNiAxMDA2NDQKLS0tIGEv eGVuL2FyY2gveDg2L3NldHVwLmMKKysrIGIveGVuL2FyY2gveDg2L3NldHVw LmMKQEAgLTE1MTAsNyArMTUxMCw3IEBAIHZvaWQgX19pbml0IG5vcmV0dXJu IF9fc3RhcnRfeGVuKHVuc2lnbmVkIGxvbmcgbWJpX3ApCiAKICAgICBjcjRf cHYzMl9tYXNrID0gbW11X2NyNF9mZWF0dXJlcyAmIFhFTl9DUjRfUFYzMl9C SVRTOwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAo IGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkgKQogICAgICAg ICBzZXRfaW5fY3I0KFg4Nl9DUjRfRlNHU0JBU0UpOwogCiAgICAgaWYgKCBv cHRfaW52cGNpZCAmJiBjcHVfaGFzX2ludnBjaWQgKQpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L3RyYXBzLmMgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpp bmRleCBkYzVhMGQ2Li4yZjlmNzVmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94 ODYvdHJhcHMuYworKysgYi94ZW4vYXJjaC94ODYvdHJhcHMuYwpAQCAtMjQ4 Niw2ICsyNDg2LDE3IEBAIHN0YXRpYyBpbnQgcHJpdl9vcF93cml0ZV9jcih1 bnNpZ25lZCBpbnQgcmVnLCB1bnNpZ25lZCBsb25nIHZhbCwKICAgICB9CiAK ICAgICBjYXNlIDQ6IC8qIFdyaXRlIENSNCAqLworICAgICAgICAvKgorICAg ICAgICAgKiBJZiB0aGlzIHdyaXRlIHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwg cmVmcmVzaCBYZW4ncyBpZGVhIG9mIHRoZQorICAgICAgICAgKiBndWVzdCBi YXNlcyBub3cgdGhhdCB0aGV5IGNhbiBubyBsb25nZXIgY2hhbmdlLgorICAg ICAgICAgKi8KKyAgICAgICAgaWYgKCAoY3Vyci0+YXJjaC5wdl92Y3B1LmN0 cmxyZWdbNF0gJiBYODZfQ1I0X0ZTR1NCQVNFKSAmJgorICAgICAgICAgICAg ICEodmFsICYgWDg2X0NSNF9GU0dTQkFTRSkgKQorICAgICAgICB7CisgICAg ICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuZnNfYmFzZSA9IF9fcmRmc2Jh c2UoKTsKKyAgICAgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNl X2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKKyAgICAgICAgfQorCiAgICAgICAg IGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZml4dXBfZ3Vl c3RfY3I0KGN1cnIsIHZhbCk7CiAgICAgICAgIHdyaXRlX2NyNChwdl9tYWtl X2NyNChjdXJyKSk7CiAgICAgICAgIGN0eHRfc3dpdGNoX2xldmVsbGluZyhj dXJyKTsKQEAgLTI1MjYsMTQgKzI1MzcsMTUgQEAgc3RhdGljIGludCBwcml2 X29wX3JlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2YWws CiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19wdl8z MmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwotICAg ICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2UoKSA6 IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAqdmFsID0g KHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRmc2Jhc2Uo KQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOwogICAgICAgICBy ZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfR1NfQkFTRToK ICAgICAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oY3VycmQpICkKICAg ICAgICAgICAgIGJyZWFrOwotICAgICAgICAqdmFsID0gY3B1X2hhc19mc2dz YmFzZSA/IF9fcmRnc2Jhc2UoKQotICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbDsK KyAgICAgICAgKnZhbCA9IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgPyBfX3JkZ3NiYXNlKCkKKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUuZ3Nf YmFzZV9rZXJuZWw7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAK ICAgICBjYXNlIE1TUl9TSEFET1dfR1NfQkFTRToKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZf NjQvdHJhcHMuYwppbmRleCA4YTA2YjIxLi42N2E5OTkzIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gv eDg2L3g4Nl82NC90cmFwcy5jCkBAIC0yNjYsNyArMjY2LDkgQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBpZiAo IGlzX3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47Ci0gICAg aWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKworICAgIC8qICVmcy8lZ3MgYmFz ZXMgY2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNh YmxlLiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JB U0UgKQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZf a2VybmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1Lmdz X2Jhc2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVu L2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L2NwdWZlYXR1cmUuaAppbmRleCBmZjZmOTY5Li41MDQzMjMxIDEw MDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAor KysgYi94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtODQs NyArODQsNiBAQAogI2RlZmluZSBjcHVfaGFzX3hzYXZlcyAgICAgICAgICBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfWFNBVkVTKQogCiAvKiBDUFVJRCBs ZXZlbCAweDAwMDAwMDA3OjAuZWJ4ICovCi0jZGVmaW5lIGNwdV9oYXNfZnNn c2Jhc2UgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFT RSkKICNkZWZpbmUgY3B1X2hhc19ibWkxICAgICAgICAgICAgYm9vdF9jcHVf aGFzKFg4Nl9GRUFUVVJFX0JNSTEpCiAjZGVmaW5lIGNwdV9oYXNfaGxlICAg ICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9ITEUpCiAjZGVm aW5lIGNwdV9oYXNfYXZ4MiAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZf RkVBVFVSRV9BVlgyKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tc3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKaW5kZXggOGQ0 ZGU2MS4uZmU2ZDVhMCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9tc3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L21zci5oCkBAIC0x MjAsNiArMTIwLDE0IEBAIHN0YXRpYyBpbmxpbmUgdWludDY0X3QgcmR0c2Nf b3JkZXJlZCh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIgKGhpZ2gp IFwKIAkJCSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24gaGFyZHdh cmUgc3VwcG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRlZCBpbnRv IGhhcmR3YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hvaWNlIGZv ciA2NGJpdCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRsZSwgSFZN IGFuZAorICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwgdGhlIHtS RCxXUn17RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkgc2FmZSB0 byB1c2UgaWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICovCiBzdGF0 aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lkKQogewog ICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKQEAgLTE1MCw3ICsxNTgsNyBAQCBz dGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9pZCkKIHsK ICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNf ZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNH U0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwogCiAgICAg cmRtc3JsKE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTE2Miw3ICsxNzAsNyBA QCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9pZCkK IHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9o YXNfZnNnc2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRf RlNHU0JBU0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgpOwogCiAg ICAgcmRtc3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE3Miw3ICsxODAs NyBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9p ZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2lnbmVkIGxv bmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAg IGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogI2lmZGVm IEhBVkVfR0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xhdGlsZSAoICJ3 cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UKQEAgLTE4NCw3 ICsxOTIsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWdu ZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jnc2Jhc2Uo dW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dz YmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSApCiAjaWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZv bGF0aWxlICggIndyZ3NiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxz ZQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3Iu aCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJvY2Vzc29yLmgKaW5kZXggZGE0 MmU4NC4uNDQ4NzM0NyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9wcm9jZXNzb3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oCkBAIC0zMDYsMTEgKzMwNiwzMSBAQCBzdGF0aWMgaW5saW5lIHVu c2lnbmVkIGxvbmcgcmVhZF9jcjQodm9pZCkKIAogc3RhdGljIGlubGluZSB2 b2lkIHdyaXRlX2NyNCh1bnNpZ25lZCBsb25nIHZhbCkKIHsKKyAgICBzdHJ1 Y3QgY3B1X2luZm8gKmluZm8gPSBnZXRfY3B1X2luZm8oKTsKKwogICAgIC8q IE5vIGdsb2JhbCBwYWdlcyBpbiBjYXNlIG9mIFBDSURzIGVuYWJsZWQhICov CiAgICAgQVNTRVJUKCEodmFsICYgWDg2X0NSNF9QR0UpIHx8ICEodmFsICYg WDg2X0NSNF9QQ0lERSkpOwogCi0gICAgZ2V0X2NwdV9pbmZvKCktPmNyNCA9 IHZhbDsKLSAgICBhc20gdm9sYXRpbGUgKCAibW92ICUwLCUlY3I0IiA6IDog InIiICh2YWwpICk7CisgICAgLyoKKyAgICAgKiBPbiBoYXJkd2FyZSBzdXBw b3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgaW4gJWNyNCBpcyB0aGUga2Vy bmVsJ3MKKyAgICAgKiBjaG9pY2UgZm9yIDY0Yml0IFBWIGd1ZXN0cywgd2hp Y2ggaW1wYWN0cyB3aGV0aGVyIFhlbiBjYW4gdXNlIHRoZQorICAgICAqIGlu c3RydWN0aW9ucy4KKyAgICAgKgorICAgICAqIFRoZSB7cmQsd3J9e2ZzLGdz fWJhc2UoKSBoZWxwZXJzIHVzZSBpbmZvLT5jcjQgdG8gd29yayBvdXQgd2hl dGhlciBpdAorICAgICAqIGlzIHNhZmUgdG8gZXhlY3V0ZSB0aGUge1JELFdS fXtGUyxHU31CQVNFIGluc3RydWN0aW9uLCBmYWxsaW5nIGJhY2sgdG8KKyAg ICAgKiB0aGUgTVNSIHBhdGggaWYgbm90LiAgU29tZSB1c2VycyByZXF1aXJl IGludGVycnVwdCBzYWZldHkuCisgICAgICoKKyAgICAgKiBJZiBGU0dTQkFT RSBpcyBjdXJyZW50bHkgb3IgYWJvdXQgdG8gYmVjb21lIGNsZWFyLCByZWZs ZWN0IHRoaXMgaW4KKyAgICAgKiBpbmZvLT5jcjQgYmVmb3JlIHVwZGF0aW5n ICVjcjQsIHNvIGFuIGludGVycnVwdCB3aGljaCBoaXRzIGluIHRoZQorICAg ICAqIG1pZGRsZSB3b24ndCBvYnNlcnZlIEZTR1NCQVNFIHNldCBpbiBpbmZv LT5jcjQgYnV0IGNsZWFyIGluICVjcjQuCisgICAgICovCisgICAgaW5mby0+ Y3I0ID0gdmFsICYgKGluZm8tPmNyNCB8IH5YODZfQ1I0X0ZTR1NCQVNFKTsK KworICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJVt2YWxdLCAlJWNyNCIKKyAg ICAgICAgICAgICAgICAgICA6ICIrbSIgKGluZm8tPmNyNCkgLyogRm9yY2Ug b3JkZXJpbmcgd2l0aG91dCBhIGJhcnJpZXIuICovCisgICAgICAgICAgICAg ICAgICAgOiBbdmFsXSAiciIgKHZhbCkgKTsKKworICAgIGluZm8tPmNyNCA9 IHZhbDsKIH0KIAogLyogQ2xlYXIgYW5kIHNldCAnVFMnIGJpdCByZXNwZWN0 aXZlbHkgKi8K --=separator Content-Type: application/octet-stream; name="xsa293/4.10-1.patch" Content-Disposition: attachment; filename="xsa293/4.10-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg ZmNiZTc2Ny4uODUzYjUyNCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtNzM0LDQ5 ICs3MzQsNiBAQCBpbnQgYXJjaF9kb21haW5fc29mdF9yZXNldChzdHJ1Y3Qg ZG9tYWluICpkKQogICAgIHJldHVybiByZXQ7CiB9CiAKLS8qCi0gKiBUaGVz ZSBhcmUgdGhlIG1hc2tzIG9mIENSNCBiaXRzIChzdWJqZWN0IHRvIGhhcmR3 YXJlIGF2YWlsYWJpbGl0eSkgd2hpY2ggYQotICogUFYgZ3Vlc3QgbWF5IG5v dCBsZWdpdGltaWF0ZWx5IGF0dGVtcHQgdG8gbW9kaWZ5LgotICovCi1zdGF0 aWMgdW5zaWduZWQgbG9uZyBfX3JlYWRfbW9zdGx5IHB2X2NyNF9tYXNrLCBj b21wYXRfcHZfY3I0X21hc2s7Ci0KLXN0YXRpYyBpbnQgX19pbml0IGluaXRf cHZfY3I0X21hc2tzKHZvaWQpCi17Ci0gICAgdW5zaWduZWQgbG9uZyBjb21t b25fbWFzayA9IH5YODZfQ1I0X1RTRDsKLQotICAgIC8qCi0gICAgICogQWxs IFBWIGd1ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgVFNELCBERSBhbmQg T1NYU0FWRS4KLSAgICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZGUgKQotICAg ICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NSNF9ERTsKLSAgICBpZiAoIGNw dV9oYXNfeHNhdmUgKQotICAgICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NS NF9PU1hTQVZFOwotCi0gICAgcHZfY3I0X21hc2sgPSBjb21wYXRfcHZfY3I0 X21hc2sgPSBjb21tb25fbWFzazsKLQotICAgIC8qCi0gICAgICogNjRiaXQg UFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBGU0dTQkFTRS4KLSAg ICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQotICAgICAgICBw dl9jcjRfbWFzayAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKLQotICAgIHJldHVy biAwOwotfQotX19pbml0Y2FsbChpbml0X3B2X2NyNF9tYXNrcyk7Ci0KLXVu c2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGd1ZXN0X2NyNCkKLXsKLSAgICB1bnNp Z25lZCBsb25nIGh2X2NyNCA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChy ZWFkX2NyNCgpKTsKLSAgICB1bnNpZ25lZCBsb25nIG1hc2sgPSBpc19wdl8z MmJpdF92Y3B1KHYpID8gY29tcGF0X3B2X2NyNF9tYXNrIDogcHZfY3I0X21h c2s7Ci0KLSAgICBpZiAoIChndWVzdF9jcjQgJiBtYXNrKSAhPSAoaHZfY3I0 ICYgbWFzaykgKQotICAgICAgICBwcmludGsoWEVOTE9HX0dfV0FSTklORwot ICAgICAgICAgICAgICAgImQlZCBhdHRlbXB0ZWQgdG8gY2hhbmdlICVwdidz IENSNCBmbGFncyAlMDhseCAtPiAlMDhseFxuIiwKLSAgICAgICAgICAgICAg IGN1cnJlbnQtPmRvbWFpbi0+ZG9tYWluX2lkLCB2LCBodl9jcjQsIGd1ZXN0 X2NyNCk7Ci0KLSAgICByZXR1cm4gKGh2X2NyNCAmIG1hc2spIHwgKGd1ZXN0 X2NyNCAmIH5tYXNrKTsKLX0KLQogI2RlZmluZSB4ZW5fdmNwdV9ndWVzdF9j b250ZXh0IHZjcHVfZ3Vlc3RfY29udGV4dAogI2RlZmluZSBmcHVfY3R4dCBm cHVfY3R4dC54CiBDSEVDS19GSUVMRF8oc3RydWN0LCB2Y3B1X2d1ZXN0X2Nv bnRleHQsIGZwdV9jdHh0KTsKQEAgLTc5MCw3ICs3NDcsNyBAQCBpbnQgYXJj aF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1bnNp Z25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAgLTk4 MSw5ICs5MzgsOCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAg IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+ WDg2X0NSMF9UUzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0 ID8gcHZfZ3Vlc3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFs X2NyNF90b19wdl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1 cF9ndWVzdF9jcjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwog CiAgICAgbWVtc2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5h cmNoLmRlYnVncmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysg KQpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94 ODYvbW0uYwppbmRleCBjMjBlZGI5Li43MTY0OTlhIDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAt NTExLDMzICs1MTEsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAq diwgbWZuX3QgbWZuKQogICAgICAgICB2LT5hcmNoLmNyMyB8PSBnZXRfcGNp ZF9iaXRzKHYsIGZhbHNlKTsKIH0KIAotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCi17Ci0g ICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKLSAgICB1 bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0IHw9IG1tdV9j cjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1NNRVAgfCBY ODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0UpOwotCi0gICAg aWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAgICAgY3I0IHw9 IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2X2Rv bWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwotCi0g ICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNEIDogMDsKLQot ICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVj dCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8g PSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25nIG5ld19jcjQ7 CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYgIWlzX2lkbGVf dmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9jcjRfdG9fcmVh bF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0KCkgJiB+KFg4 Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NSNF9QR0UpOwor ICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11X2NyNF9mZWF0 dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2LT5kb21haW4t PmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU1Niw4ICs1MzYs NiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAg ICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAg ICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NF UlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVh dHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2 L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IDk1 OGM2ZTMuLmE5Y2FhMDEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTEw Myw2ICsxMDMsNTIgQEAgc3RhdGljIHZvaWQgcmVsZWFzZV9jb21wYXRfbDQo c3RydWN0IHZjcHUgKnYpCiAgICAgdi0+YXJjaC5ndWVzdF90YWJsZV91c2Vy ID0gcGFnZXRhYmxlX251bGwoKTsKIH0KIAordW5zaWduZWQgbG9uZyBwdl9m aXh1cF9ndWVzdF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYsIHVuc2lnbmVk IGxvbmcgY3I0KQoreworICAgIGNvbnN0IHN0cnVjdCBjcHVpZF9wb2xpY3kg KnAgPSB2LT5kb21haW4tPmFyY2guY3B1aWQ7CisKKyAgICAvKiBEaXNjYXJk IGF0dGVtcHRzIHRvIHNldCBndWVzdCBjb250cm9sbGFibGUgYml0cyBvdXRz aWRlIG9mIHRoZSBwb2xpY3kuICovCisgICAgY3I0ICY9IH4oKHAtPmJhc2lj LnRzYyAgICAgPyAwIDogWDg2X0NSNF9UU0QpICAgICAgfAorICAgICAgICAg ICAgIChwLT5iYXNpYy5kZSAgICAgID8gMCA6IFg4Nl9DUjRfREUpICAgICAg IHwKKyAgICAgICAgICAgICAocC0+ZmVhdC5mc2dzYmFzZSA/IDAgOiBYODZf Q1I0X0ZTR1NCQVNFKSB8CisgICAgICAgICAgICAgKHAtPmJhc2ljLnhzYXZl ICAgPyAwIDogWDg2X0NSNF9PU1hTQVZFKSk7CisKKyAgICAvKiBNYXNrcyBl eHBlY3RlZCB0byBiZSBkaXNqb2ludCBzZXRzLiAqLworICAgIEJVSUxEX0JV R19PTihQVl9DUjRfR1VFU1RfTUFTSyAmIFBWX0NSNF9HVUVTVF9WSVNJQkxF X01BU0spOworCisgICAgLyoKKyAgICAgKiBBIGd1ZXN0IHNlZXMgdGhlIHBv bGljeSBzdWJzZXQgb2YgaXRzIG93biBjaG9pY2Ugb2YgZ3Vlc3QgY29udHJv bGxhYmxlCisgICAgICogYml0cywgYW5kIGEgc3Vic2V0IG9mIFhlbidzIGNo b2ljZSBvZiBjZXJ0YWluIGhhcmR3YXJlIHNldHRpbmdzLgorICAgICAqLwor ICAgIHJldHVybiAoKGNyNCAmIFBWX0NSNF9HVUVTVF9NQVNLKSB8CisgICAg ICAgICAgICAobW11X2NyNF9mZWF0dXJlcyAmIFBWX0NSNF9HVUVTVF9WSVNJ QkxFX01BU0spKTsKK30KKwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChj b25zdCBzdHJ1Y3QgdmNwdSAqdikKK3sKKyAgICBjb25zdCBzdHJ1Y3QgZG9t YWluICpkID0gdi0+ZG9tYWluOworICAgIHVuc2lnbmVkIGxvbmcgY3I0ID0g bW11X2NyNF9mZWF0dXJlcyAmCisgICAgICAgIH4oWDg2X0NSNF9QQ0lERSB8 IFg4Nl9DUjRfUEdFIHwgWDg2X0NSNF9UU0QpOworCisgICAgLyoKKyAgICAg KiBQQ0lERSBvciBQR0UgZGVwZW5kcyBvbiB0aGUgUENJRC9YUFRJIHNldHRp bmdzLCBidXQgbXVzdCBub3QgYm90aCBiZQorICAgICAqIHNldCwgYXMgaXQg aW1wYWN0cyB0aGUgc2FmZXR5IG9mIFRMQiBmbHVzaGluZy4KKyAgICAgKi8K KyAgICBpZiAoIGQtPmFyY2gucHZfZG9tYWluLnBjaWQgKQorICAgICAgICBj cjQgfD0gWDg2X0NSNF9QQ0lERTsKKyAgICBlbHNlIGlmICggIWQtPmFyY2gu cHZfZG9tYWluLnhwdGkgKQorICAgICAgICBjcjQgfD0gWDg2X0NSNF9QR0U7 CisKKyAgICAvKgorICAgICAqIFRTRCBpcyBuZWVkZWQgaWYgZWl0aGVyIHRo ZSBndWVzdCBoYXMgZWxlY3RlZCB0byB1c2UgaXQsIG9yIFhlbiBpcworICAg ICAqIHZpcnR1YWxpc2luZyB0aGUgVFNDIHZhbHVlIHRoZSBndWVzdCBzZWVz LgorICAgICAqLworICAgIGlmICggZC0+YXJjaC52dHNjIHx8ICh2LT5hcmNo LnB2X3ZjcHUuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNEKSApCisgICAgICAg IGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVybiBjcjQ7Cit9CisK IGludCBzd2l0Y2hfY29tcGF0KHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAg c3RydWN0IHZjcHUgKnY7CkBAIC0xOTcsNyArMjQzLDcgQEAgaW50IHB2X3Zj cHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAvKiBQViBndWVz dHMgYnkgZGVmYXVsdCBoYXZlIGEgMTAwSHogdGlja2VyLiAqLwogICAgIHYt PnBlcmlvZGljX3BlcmlvZCA9IE1JTExJU0VDUygxMCk7CiAKLSAgICB2LT5h cmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0 X2NyNChtbXVfY3I0X2ZlYXR1cmVzKTsKKyAgICB2LT5hcmNoLnB2X3ZjcHUu Y3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCAwKTsKIAogICAg IGlmICggaXNfcHZfMzJiaXRfZG9tYWluKGQpICkKICAgICB7CmRpZmYgLS1n aXQgYS94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMgYi94ZW4vYXJj aC94ODYvcHYvZW11bC1wcml2LW9wLmMKaW5kZXggYzI4MTkzNi4uY2QwNDU3 NCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5j CisrKyBiL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwpAQCAtMzIs NiArMzIsNyBAQAogI2luY2x1ZGUgPGFzbS9oeXBlcmNhbGwuaD4KICNpbmNs dWRlIDxhc20vbWMxNDY4MThydGMuaD4KICNpbmNsdWRlIDxhc20vcDJtLmg+ CisjaW5jbHVkZSA8YXNtL3B2L2RvbWFpbi5oPgogI2luY2x1ZGUgPGFzbS9w di90cmFwcy5oPgogI2luY2x1ZGUgPGFzbS9zaGFyZWQuaD4KICNpbmNsdWRl IDxhc20vdHJhcHMuaD4KQEAgLTgwNCw4ICs4MDUsOCBAQCBzdGF0aWMgaW50 IHdyaXRlX2NyKHVuc2lnbmVkIGludCByZWcsIHVuc2lnbmVkIGxvbmcgdmFs LAogICAgIH0KIAogICAgIGNhc2UgNDogLyogV3JpdGUgQ1I0ICovCi0gICAg ICAgIGN1cnItPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gcHZfZ3Vlc3Rf Y3I0X2ZpeHVwKGN1cnIsIHZhbCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9n dWVzdF9jcjRfdG9fcmVhbF9jcjQoY3VycikpOworICAgICAgICBjdXJyLT5h cmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNChj dXJyLCB2YWwpOworICAgICAgICB3cml0ZV9jcjQocHZfbWFrZV9jcjQoY3Vy cikpOwogICAgICAgICBjdHh0X3N3aXRjaF9sZXZlbGxpbmcoY3Vycik7CiAg ICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAgICAgfQpkaWZmIC0tZ2l0 IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaCBiL3hlbi9pbmNsdWRl L2FzbS14ODYvZG9tYWluLmgKaW5kZXggYjlmYTk4OC4uYWVjNjU2MyAxMDA2 NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2RvbWFpbi5oCkBAIC02MjMsMTcgKzYyMyw2 IEBAIGJvb2wgdXBkYXRlX3NlY29uZGFyeV9zeXN0ZW1fdGltZShzdHJ1Y3Qg dmNwdSAqLAogdm9pZCB2Y3B1X3Nob3dfZXhlY3V0aW9uX3N0YXRlKHN0cnVj dCB2Y3B1ICopOwogdm9pZCB2Y3B1X3Nob3dfcmVnaXN0ZXJzKGNvbnN0IHN0 cnVjdCB2Y3B1ICopOwogCi0vKiBDbGVhbiB1cCBDUjQgYml0cyB0aGF0IGFy ZSBub3QgdW5kZXIgZ3Vlc3QgY29udHJvbC4gKi8KLXVuc2lnbmVkIGxvbmcg cHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2Y3B1ICosIHVuc2ln bmVkIGxvbmcgZ3Vlc3RfY3I0KTsKLQotLyogQ29udmVydCBiZXR3ZWVuIGd1 ZXN0LXZpc2libGUgYW5kIHJlYWwgQ1I0IHZhbHVlcy4gKi8KLXVuc2lnbmVk IGxvbmcgcHZfZ3Vlc3RfY3I0X3RvX3JlYWxfY3I0KGNvbnN0IHN0cnVjdCB2 Y3B1ICp2KTsKLQotI2RlZmluZSByZWFsX2NyNF90b19wdl9ndWVzdF9jcjQo YykgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICgoYykgJiB+KFg4 Nl9DUjRfUEdFIHwgWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1RTRCB8ICAgICAg XAotICAgICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfU01F UCB8ICAgICAgICAgICAgICAgXAotICAgICAgICAgICAgIFg4Nl9DUjRfRlNH U0JBU0UgfCBYODZfQ1I0X1NNQVAgfCBYODZfQ1I0X1BDSURFKSkKLQogI2Rl ZmluZSBkb21haW5fbWF4X3ZjcHVzKGQpIChpc19odm1fZG9tYWluKGQpID8g SFZNX01BWF9WQ1BVUyA6IE1BWF9WSVJUX0NQVVMpCiAKIHN0YXRpYyBpbmxp bmUgc3RydWN0IHZjcHVfZ3Vlc3RfY29udGV4dCAqYWxsb2NfdmNwdV9ndWVz dF9jb250ZXh0KHZvaWQpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20t eDg2L3B2L2RvbWFpbi5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wdi9kb21h aW4uaAppbmRleCA2Nzc4ZTFiLi4xZGRjNzI4IDEwMDY0NAotLS0gYS94ZW4v aW5jbHVkZS9hc20teDg2L3B2L2RvbWFpbi5oCisrKyBiL3hlbi9pbmNsdWRl L2FzbS14ODYvcHYvZG9tYWluLmgKQEAgLTYwLDYgKzYwLDIzIEBAIHZvaWQg cHZfZG9tYWluX2Rlc3Ryb3koc3RydWN0IGRvbWFpbiAqZCk7CiBpbnQgcHZf ZG9tYWluX2luaXRpYWxpc2Uoc3RydWN0IGRvbWFpbiAqZCwgdW5zaWduZWQg aW50IGRvbWNyX2ZsYWdzLAogICAgICAgICAgICAgICAgICAgICAgICAgIHN0 cnVjdCB4ZW5fYXJjaF9kb21haW5jb25maWcgKmNvbmZpZyk7CiAKKy8qCisg KiBCaXRzIHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2dsZSBpbiBpdHMgdmll dyBvZiBjcjQuICBTb21lIGFyZSBsb2FkZWQgaW50bworICogaGFyZHdhcmUs IHdoaWxlIHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgorICovCisjZGVmaW5l IFBWX0NSNF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NSNF9UU0QgfCBYODZf Q1I0X0RFIHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9DUjRfT1NYU0FWRSkK KworLyogQml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBvYnNlcnZlIGZyb20g dGhlIHJlYWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisjZGVmaW5lIFBWX0NS NF9HVUVTVF9WSVNJQkxFX01BU0sgXAorICAgIChYODZfQ1I0X1BBRSB8IFg4 Nl9DUjRfTUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZfQ1I0X09TWE1NRVhD UFQpCisKKy8qIEdpdmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRo ZSByZXN1bHRpbmcgZ3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNp Z25lZCBsb25nIHB2X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNw dSAqdiwgdW5zaWduZWQgbG9uZyBjcjQpOworCisvKiBDcmVhdGUgYSBjcjQg dmFsdWUgdG8gbG9hZCBpbnRvIGhhcmR3YXJlLCBiYXNlZCBvbiB2Y3B1IHNl dHRpbmdzLiAqLwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBz dHJ1Y3QgdmNwdSAqdik7CisKICNlbHNlICAvKiAhQ09ORklHX1BWICovCiAK ICNpbmNsdWRlIDx4ZW4vZXJybm8uaD4KQEAgLTczLDYgKzkwLDkgQEAgc3Rh dGljIGlubGluZSBpbnQgcHZfZG9tYWluX2luaXRpYWxpc2Uoc3RydWN0IGRv bWFpbiAqZCwKIHsKICAgICByZXR1cm4gLUVPUE5PVFNVUFA7CiB9CisKK3N0 YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBz dHJ1Y3QgdmNwdSAqdikgeyByZXR1cm4gfjB1bDsgfQorCiAjZW5kaWYJLyog Q09ORklHX1BWICovCiAKIHZvaWQgcGFyYXZpcnRfY3R4dF9zd2l0Y2hfZnJv bShzdHJ1Y3QgdmNwdSAqdik7Cg== --=separator Content-Type: application/octet-stream; name="xsa293/4.10-2.patch" Content-Disposition: attachment; filename="xsa293/4.10-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggODUzYjUyNC4uOTFjMmIxYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtMTQzMSw3ICsxNDMxLDggQEAgc3RhdGljIHZvaWQg c2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAgICByZWdzLT5mcyA9 IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSByZWFkX3NyZWcoZ3Mp OwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYmICFpc19wdl8zMmJp dF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2 XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAgdi0+YXJjaC5wdl92 Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAgICAgIGlmICggdi0+ YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21h aW4uYwppbmRleCBhOWNhYTAxLi44MmM2ZTJmIDEwMDY0NAotLS0gYS94ZW4v YXJjaC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2Rv bWFpbi5jCkBAIC0xNDYsNiArMTQ2LDE2IEBAIHVuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5h cmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2 X0NSNF9UU0QpICkKICAgICAgICAgY3I0IHw9IFg4Nl9DUjRfVFNEOwogCisg ICAgLyoKKyAgICAgKiBUaGUge1JELFdSfXtGUyxHU31CQVNFIGFyZSBvbmx5 IHVzZWFibGUgaW4gNjRiaXQgY29kZSBzZWdtZW50cy4gIFdoaWxlCisgICAg ICogd2UgbXVzdCBub3QgaGF2ZSBDUjQuRlNHU0JBU0Ugc2V0IGJlaGluZCB0 aGUgYmFjayBvZiBhIDY0Yml0IFBWIGtlcm5lbCwKKyAgICAgKiB3ZSBkbyBs ZWF2ZSBpdCBzZXQgaW4gMzJiaXQgUFYgY29udGV4dCB0byBzcGVlZCB1cCBY ZW4ncyBjb250ZXh0IHN3aXRjaAorICAgICAqIHBhdGguCisgICAgICovCisg ICAgaWYgKCAhaXNfcHZfMzJiaXRfZG9tYWluKGQpICYmCisgICAgICAgICAh KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgKQorICAgICAgICBjcjQgJj0gflg4Nl9DUjRfRlNHU0JBU0U7CisKICAg ICByZXR1cm4gY3I0OwogfQogCkBAIC0zNTEsNyArMzYxLDggQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKICAgICBpZiAoIGlz X3B2XzMyYml0X3ZjcHUodikgKQogICAgICAgICByZXR1cm47CiAKLSAgICBp ZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIC8qICVmcy8lZ3MgYmFzZXMg Y2FuIG9ubHkgYmUgc3RhbGUgaWYgV1J7RlMsR1N9QkFTRSBhcmUgdXNhYmxl LiAqLworICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgaWYgKCB2LT5hcmNoLmZsYWdzICYgVEZfa2Vy bmVsX21vZGUgKQogICAgICAgICAgICAgdi0+YXJjaC5wdl92Y3B1LmdzX2Jh c2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEveGVuL2Fy Y2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gveDg2L3B2L2Vt dWwtcHJpdi1vcC5jCmluZGV4IGNkMDQ1NzQuLjAzNDRjOTggMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYworKysgYi94ZW4v YXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTgwNSw2ICs4MDUsMTcg QEAgc3RhdGljIGludCB3cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVnLCB1bnNp Z25lZCBsb25nIHZhbCwKICAgICB9CiAKICAgICBjYXNlIDQ6IC8qIFdyaXRl IENSNCAqLworICAgICAgICAvKgorICAgICAgICAgKiBJZiB0aGlzIHdyaXRl IHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwgcmVmcmVzaCBYZW4ncyBpZGVhIG9m IHRoZQorICAgICAgICAgKiBndWVzdCBiYXNlcyBub3cgdGhhdCB0aGV5IGNh biBubyBsb25nZXIgY2hhbmdlLgorICAgICAgICAgKi8KKyAgICAgICAgaWYg KCAoY3Vyci0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X0ZT R1NCQVNFKSAmJgorICAgICAgICAgICAgICEodmFsICYgWDg2X0NSNF9GU0dT QkFTRSkgKQorICAgICAgICB7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2 X3ZjcHUuZnNfYmFzZSA9IF9fcmRmc2Jhc2UoKTsKKyAgICAgICAgICAgIGN1 cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2Uo KTsKKyAgICAgICAgfQorCiAgICAgICAgIGN1cnItPmFyY2gucHZfdmNwdS5j dHJscmVnWzRdID0gcHZfZml4dXBfZ3Vlc3RfY3I0KGN1cnIsIHZhbCk7CiAg ICAgICAgIHdyaXRlX2NyNChwdl9tYWtlX2NyNChjdXJyKSk7CiAgICAgICAg IGN0eHRfc3dpdGNoX2xldmVsbGluZyhjdXJyKTsKQEAgLTg1NCwxNCArODY1 LDE1IEBAIHN0YXRpYyBpbnQgcmVhZF9tc3IodW5zaWduZWQgaW50IHJlZywg dWludDY0X3QgKnZhbCwKICAgICBjYXNlIE1TUl9GU19CQVNFOgogICAgICAg ICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAg ICAgYnJlYWs7Ci0gICAgICAgICp2YWwgPSBjcHVfaGFzX2ZzZ3NiYXNlID8g X19yZGZzYmFzZSgpIDogY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jhc2U7Cisg ICAgICAgICp2YWwgPSAocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Up ID8gX19yZGZzYmFzZSgpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jh c2U7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7CiAKICAgICBjYXNl IE1TUl9HU19CQVNFOgogICAgICAgICBpZiAoIGlzX3B2XzMyYml0X2RvbWFp bihjdXJyZCkgKQogICAgICAgICAgICAgYnJlYWs7Ci0gICAgICAgICp2YWwg PSBjcHVfaGFzX2ZzZ3NiYXNlID8gX19yZGdzYmFzZSgpCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDogY3Vyci0+YXJjaC5wdl92Y3B1Lmdz X2Jhc2Vfa2VybmVsOworICAgICAgICAqdmFsID0gKHJlYWRfY3I0KCkgJiBY ODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRnc2Jhc2UoKQorICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA6IGN1cnItPmFy Y2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbDsKICAgICAgICAgcmV0dXJuIFg4 NkVNVUxfT0tBWTsKIAogICAgIGNhc2UgTVNSX1NIQURPV19HU19CQVNFOgpk aWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3NldHVwLmMgYi94ZW4vYXJjaC94 ODYvc2V0dXAuYwppbmRleCA2MTdkYmIxLi43OTAzMjA0IDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvc2V0dXAuYworKysgYi94ZW4vYXJjaC94ODYvc2V0 dXAuYwpAQCAtMTU2MCw3ICsxNTYwLDcgQEAgdm9pZCBfX2luaXQgbm9yZXR1 cm4gX19zdGFydF94ZW4odW5zaWduZWQgbG9uZyBtYmlfcCkKIAogICAgIGNy NF9wdjMyX21hc2sgPSBtbXVfY3I0X2ZlYXR1cmVzICYgWEVOX0NSNF9QVjMy X0JJVFM7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlm ICggYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0ZTR1NCQVNFKSApCiAgICAg ICAgIHNldF9pbl9jcjQoWDg2X0NSNF9GU0dTQkFTRSk7CiAKICAgICBpZiAo IG9wdF9pbnZwY2lkICYmIGNwdV9oYXNfaW52cGNpZCApCmRpZmYgLS1naXQg YS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaCBiL3hlbi9pbmNs dWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oCmluZGV4IGZmNmY5NjkuLjUwNDMy MzEgMTAwNjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVy ZS5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5oCkBA IC04NCw3ICs4NCw2IEBACiAjZGVmaW5lIGNwdV9oYXNfeHNhdmVzICAgICAg ICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9YU0FWRVMpCiAKIC8qIENQ VUlEIGxldmVsIDB4MDAwMDAwMDc6MC5lYnggKi8KLSNkZWZpbmUgY3B1X2hh c19mc2dzYmFzZSAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0ZT R1NCQVNFKQogI2RlZmluZSBjcHVfaGFzX2JtaTEgICAgICAgICAgICBib290 X2NwdV9oYXMoWDg2X0ZFQVRVUkVfQk1JMSkKICNkZWZpbmUgY3B1X2hhc19o bGUgICAgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX0hMRSkK ICNkZWZpbmUgY3B1X2hhc19hdngyICAgICAgICAgICAgYm9vdF9jcHVfaGFz KFg4Nl9GRUFUVVJFX0FWWDIpCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9h c20teDg2L21zci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3IuaAppbmRl eCAyMmQ1YjcxLi4xNDNlZWEzIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9h c20teDg2L21zci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgK QEAgLTEyMCw2ICsxMjAsMTQgQEAgc3RhdGljIGlubGluZSB1aW50NjRfdCBy ZHRzY19vcmRlcmVkKHZvaWQpCiAJCQkgIDogIj1hIiAobG93KSwgIj1kIiAo aGlnaCkgXAogCQkJICA6ICJjIiAoY291bnRlcikpCiAKKy8qCisgKiBPbiBo YXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUgdmFsdWUgbG9hZGVk IGludG8gaGFyZHdhcmUgaXMgdGhlCisgKiBndWVzdCBrZXJuZWwncyBjaG9p Y2UgZm9yIDY0Yml0IFBWIGd1ZXN0cyAoWGVuJ3MgY2hvaWNlIGZvciBJZGxl LCBIVk0gYW5kCisgKiAzMmJpdCBQVikuCisgKgorICogVGhlcmVmb3JlLCB0 aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0aW9ucyBhcmUgb25seSBz YWZlIHRvIHVzZSBpZgorICogJWNyNC5mc2dzYmFzZSBpcyBzZXQuCisgKi8K IHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBfX3JkZnNiYXNlKHZvaWQp CiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwpAQCAtMTUwLDcgKzE1OCw3 IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGZzYmFzZSh2b2lk KQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZnNiYXNlKCk7CiAK ICAgICByZG1zcmwoTVNSX0ZTX0JBU0UsIGJhc2UpOwpAQCAtMTYyLDcgKzE3 MCw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFzZSh2 b2lkKQogewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICgg Y3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSApCiAgICAgICAgIHJldHVybiBfX3JkZ3NiYXNlKCk7 CiAKICAgICByZG1zcmwoTVNSX0dTX0JBU0UsIGJhc2UpOwpAQCAtMTcyLDcg KzE4MCw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdzYmFz ZSh2b2lkKQogCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWdu ZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSAp CisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAj aWZkZWYgSEFWRV9HQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0aWxl ICggIndyZnNiYXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpAQCAt MTg0LDcgKzE5Miw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFzZSh1 bnNpZ25lZCBsb25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdz YmFzZSh1bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZT R1NCQVNFICkKICNpZmRlZiBIQVZFX0dBU19GU0dTQkFTRQogICAgICAgICBh c20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkgKTsK ICNlbHNlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nl c3Nvci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRl eCA5MGEyNzAxLi5hMGY4YmY0IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9h c20teDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv cHJvY2Vzc29yLmgKQEAgLTMxNSwxMSArMzE1LDMxIEBAIHN0YXRpYyBpbmxp bmUgdW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMgaW5s aW5lIHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogeworICAg IHN0cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOworCiAg ICAgLyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5hYmxl ZCEgKi8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwgISh2 YWwgJiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8oKS0+ Y3I0ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVjcjQi IDogOiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3YXJl IHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlzIHRo ZSBrZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3Rz LCB3aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisgICAg ICogaW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3cn17 ZnMsZ3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3JrIG91 dCB3aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFjayB0 bworICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJzIHJl cXVpcmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElmIEZT R1NCQVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xlYXIs IHJlZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUgdXBk YXRpbmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4gdGhl CisgICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0IGlu IGluZm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAgICBp bmZvLT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNHU0JB U0UpOworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUlY3I0 IgorICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAvKiBG b3JjZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAgICAg ICAgICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5mby0+ Y3I0ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0IHJl c3BlY3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.11-1.patch" Content-Disposition: attachment; filename="xsa293/4.11-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg YjFlNTBkMS4uNjc1MTUyYSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2Rv bWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4Ni9kb21haW4uYwpAQCAtNzMzLDQ5 ICs3MzMsNiBAQCBpbnQgYXJjaF9kb21haW5fc29mdF9yZXNldChzdHJ1Y3Qg ZG9tYWluICpkKQogICAgIHJldHVybiByZXQ7CiB9CiAKLS8qCi0gKiBUaGVz ZSBhcmUgdGhlIG1hc2tzIG9mIENSNCBiaXRzIChzdWJqZWN0IHRvIGhhcmR3 YXJlIGF2YWlsYWJpbGl0eSkgd2hpY2ggYQotICogUFYgZ3Vlc3QgbWF5IG5v dCBsZWdpdGltaWF0ZWx5IGF0dGVtcHQgdG8gbW9kaWZ5LgotICovCi1zdGF0 aWMgdW5zaWduZWQgbG9uZyBfX3JlYWRfbW9zdGx5IHB2X2NyNF9tYXNrLCBj b21wYXRfcHZfY3I0X21hc2s7Ci0KLXN0YXRpYyBpbnQgX19pbml0IGluaXRf cHZfY3I0X21hc2tzKHZvaWQpCi17Ci0gICAgdW5zaWduZWQgbG9uZyBjb21t b25fbWFzayA9IH5YODZfQ1I0X1RTRDsKLQotICAgIC8qCi0gICAgICogQWxs IFBWIGd1ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgVFNELCBERSBhbmQg T1NYU0FWRS4KLSAgICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZGUgKQotICAg ICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NSNF9ERTsKLSAgICBpZiAoIGNw dV9oYXNfeHNhdmUgKQotICAgICAgICBjb21tb25fbWFzayAmPSB+WDg2X0NS NF9PU1hTQVZFOwotCi0gICAgcHZfY3I0X21hc2sgPSBjb21wYXRfcHZfY3I0 X21hc2sgPSBjb21tb25fbWFzazsKLQotICAgIC8qCi0gICAgICogNjRiaXQg UFYgZ3Vlc3RzIG1heSBhdHRlbXB0IHRvIG1vZGlmeSBGU0dTQkFTRS4KLSAg ICAgKi8KLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQotICAgICAgICBw dl9jcjRfbWFzayAmPSB+WDg2X0NSNF9GU0dTQkFTRTsKLQotICAgIHJldHVy biAwOwotfQotX19pbml0Y2FsbChpbml0X3B2X2NyNF9tYXNrcyk7Ci0KLXVu c2lnbmVkIGxvbmcgcHZfZ3Vlc3RfY3I0X2ZpeHVwKGNvbnN0IHN0cnVjdCB2 Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGd1ZXN0X2NyNCkKLXsKLSAgICB1bnNp Z25lZCBsb25nIGh2X2NyNCA9IHJlYWxfY3I0X3RvX3B2X2d1ZXN0X2NyNChy ZWFkX2NyNCgpKTsKLSAgICB1bnNpZ25lZCBsb25nIG1hc2sgPSBpc19wdl8z MmJpdF92Y3B1KHYpID8gY29tcGF0X3B2X2NyNF9tYXNrIDogcHZfY3I0X21h c2s7Ci0KLSAgICBpZiAoIChndWVzdF9jcjQgJiBtYXNrKSAhPSAoaHZfY3I0 ICYgbWFzaykgKQotICAgICAgICBwcmludGsoWEVOTE9HX0dfV0FSTklORwot ICAgICAgICAgICAgICAgImQlZCBhdHRlbXB0ZWQgdG8gY2hhbmdlICVwdidz IENSNCBmbGFncyAlMDhseCAtPiAlMDhseFxuIiwKLSAgICAgICAgICAgICAg IGN1cnJlbnQtPmRvbWFpbi0+ZG9tYWluX2lkLCB2LCBodl9jcjQsIGd1ZXN0 X2NyNCk7Ci0KLSAgICByZXR1cm4gKGh2X2NyNCAmIG1hc2spIHwgKGd1ZXN0 X2NyNCAmIH5tYXNrKTsKLX0KLQogI2RlZmluZSB4ZW5fdmNwdV9ndWVzdF9j b250ZXh0IHZjcHVfZ3Vlc3RfY29udGV4dAogI2RlZmluZSBmcHVfY3R4dCBm cHVfY3R4dC54CiBDSEVDS19GSUVMRF8oc3RydWN0LCB2Y3B1X2d1ZXN0X2Nv bnRleHQsIGZwdV9jdHh0KTsKQEAgLTc4OSw3ICs3NDYsNyBAQCBpbnQgYXJj aF9zZXRfaW5mb19ndWVzdCgKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwogICAgIHVuc2lnbmVkIGxvbmcgY3IzX2dmbjsKICAgICBzdHJ1 Y3QgcGFnZV9pbmZvICpjcjNfcGFnZTsKLSAgICB1bnNpZ25lZCBsb25nIGZs YWdzLCBjcjQ7CisgICAgdW5zaWduZWQgbG9uZyBmbGFnczsKICAgICB1bnNp Z25lZCBpbnQgaTsKICAgICBpbnQgcmMgPSAwLCBjb21wYXQ7CiAKQEAgLTk3 OCw5ICs5MzUsOCBAQCBpbnQgYXJjaF9zZXRfaW5mb19ndWVzdCgKICAgICB2 LT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1swXSAmPSBYODZfQ1IwX1RTOwogICAg IHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzBdIHw9IHJlYWRfY3IwKCkgJiB+ WDg2X0NSMF9UUzsKIAotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNwdS5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdID0gY3I0 ID8gcHZfZ3Vlc3RfY3I0X2ZpeHVwKHYsIGNyNCkgOgotICAgICAgICByZWFs X2NyNF90b19wdl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAg di0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0gPQorICAgICAgICBwdl9maXh1 cF9ndWVzdF9jcjQodiwgdi0+YXJjaC5wdl92Y3B1LmN0cmxyZWdbNF0pOwog CiAgICAgbWVtc2V0KHYtPmFyY2guZGVidWdyZWcsIDAsIHNpemVvZih2LT5h cmNoLmRlYnVncmVnKSk7CiAgICAgZm9yICggaSA9IDA7IGkgPCA4OyBpKysg KQpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tLmMgYi94ZW4vYXJjaC94 ODYvbW0uYwppbmRleCA2NTA5MDM1Li4wODYzNGI3IDEwMDY0NAotLS0gYS94 ZW4vYXJjaC94ODYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAt NTA1LDMzICs1MDUsMTMgQEAgdm9pZCBtYWtlX2NyMyhzdHJ1Y3QgdmNwdSAq diwgbWZuX3QgbWZuKQogICAgICAgICB2LT5hcmNoLmNyMyB8PSBnZXRfcGNp ZF9iaXRzKHYsIGZhbHNlKTsKIH0KIAotdW5zaWduZWQgbG9uZyBwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCi17Ci0g ICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRvbWFpbjsKLSAgICB1 bnNpZ25lZCBsb25nIGNyNDsKLQotICAgIGNyNCA9IHYtPmFyY2gucHZfdmNw dS5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0IHw9IG1tdV9j cjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0X1NNRVAgfCBY ODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0UpOwotCi0gICAg aWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKLSAgICAgICAgY3I0IHw9 IFg4Nl9DUjRfUENJREU7Ci0gICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2X2Rv bWFpbi54cHRpICkKLSAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwotCi0g ICAgY3I0IHw9IGQtPmFyY2gudnRzYyA/IFg4Nl9DUjRfVFNEIDogMDsKLQot ICAgIHJldHVybiBjcjQ7Ci19Ci0KIHZvaWQgd3JpdGVfcHRiYXNlKHN0cnVj dCB2Y3B1ICp2KQogewogICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8g PSBnZXRfY3B1X2luZm8oKTsKICAgICB1bnNpZ25lZCBsb25nIG5ld19jcjQ7 CiAKICAgICBuZXdfY3I0ID0gKGlzX3B2X3ZjcHUodikgJiYgIWlzX2lkbGVf dmNwdSh2KSkKLSAgICAgICAgICAgICAgPyBwdl9ndWVzdF9jcjRfdG9fcmVh bF9jcjQodikKLSAgICAgICAgICAgICAgOiAoKHJlYWRfY3I0KCkgJiB+KFg4 Nl9DUjRfUENJREUgfCBYODZfQ1I0X1RTRCkpIHwgWDg2X0NSNF9QR0UpOwor ICAgICAgICAgICAgICA/IHB2X21ha2VfY3I0KHYpIDogbW11X2NyNF9mZWF0 dXJlczsKIAogICAgIGlmICggaXNfcHZfdmNwdSh2KSAmJiB2LT5kb21haW4t PmFyY2gucHZfZG9tYWluLnhwdGkgKQogICAgIHsKQEAgLTU1MCw4ICs1MzAs NiBAQCB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAg ICAgc3dpdGNoX2NyM19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAg ICAgICBjcHVfaW5mby0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NF UlQoaXNfcHZfdmNwdSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVh dHVyZXMpOwogfQogCiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2 L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IGI3 NWZmNmIuLjM5NjU5NTkgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTk3 LDYgKzk3LDUyIEBAIHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0 cnVjdCB2Y3B1ICp2KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9 IHBhZ2V0YWJsZV9udWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4 dXBfZ3Vlc3RfY3I0KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBs b25nIGNyNCkKK3sKKyAgICBjb25zdCBzdHJ1Y3QgY3B1aWRfcG9saWN5ICpw ID0gdi0+ZG9tYWluLT5hcmNoLmNwdWlkOworCisgICAgLyogRGlzY2FyZCBh dHRlbXB0cyB0byBzZXQgZ3Vlc3QgY29udHJvbGxhYmxlIGJpdHMgb3V0c2lk ZSBvZiB0aGUgcG9saWN5LiAqLworICAgIGNyNCAmPSB+KChwLT5iYXNpYy50 c2MgICAgID8gMCA6IFg4Nl9DUjRfVFNEKSAgICAgIHwKKyAgICAgICAgICAg ICAocC0+YmFzaWMuZGUgICAgICA/IDAgOiBYODZfQ1I0X0RFKSAgICAgICB8 CisgICAgICAgICAgICAgKHAtPmZlYXQuZnNnc2Jhc2UgPyAwIDogWDg2X0NS NF9GU0dTQkFTRSkgfAorICAgICAgICAgICAgIChwLT5iYXNpYy54c2F2ZSAg ID8gMCA6IFg4Nl9DUjRfT1NYU0FWRSkpOworCisgICAgLyogTWFza3MgZXhw ZWN0ZWQgdG8gYmUgZGlzam9pbnQgc2V0cy4gKi8KKyAgICBCVUlMRF9CVUdf T04oUFZfQ1I0X0dVRVNUX01BU0sgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9N QVNLKTsKKworICAgIC8qCisgICAgICogQSBndWVzdCBzZWVzIHRoZSBwb2xp Y3kgc3Vic2V0IG9mIGl0cyBvd24gY2hvaWNlIG9mIGd1ZXN0IGNvbnRyb2xs YWJsZQorICAgICAqIGJpdHMsIGFuZCBhIHN1YnNldCBvZiBYZW4ncyBjaG9p Y2Ugb2YgY2VydGFpbiBoYXJkd2FyZSBzZXR0aW5ncy4KKyAgICAgKi8KKyAg ICByZXR1cm4gKChjcjQgJiBQVl9DUjRfR1VFU1RfTUFTSykgfAorICAgICAg ICAgICAgKG1tdV9jcjRfZmVhdHVyZXMgJiBQVl9DUjRfR1VFU1RfVklTSUJM RV9NQVNLKSk7Cit9CisKK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29u c3Qgc3RydWN0IHZjcHUgKnYpCit7CisgICAgY29uc3Qgc3RydWN0IGRvbWFp biAqZCA9IHYtPmRvbWFpbjsKKyAgICB1bnNpZ25lZCBsb25nIGNyNCA9IG1t dV9jcjRfZmVhdHVyZXMgJgorICAgICAgICB+KFg4Nl9DUjRfUENJREUgfCBY ODZfQ1I0X1BHRSB8IFg4Nl9DUjRfVFNEKTsKKworICAgIC8qCisgICAgICog UENJREUgb3IgUEdFIGRlcGVuZHMgb24gdGhlIFBDSUQvWFBUSSBzZXR0aW5n cywgYnV0IG11c3Qgbm90IGJvdGggYmUKKyAgICAgKiBzZXQsIGFzIGl0IGlt cGFjdHMgdGhlIHNhZmV0eSBvZiBUTEIgZmx1c2hpbmcuCisgICAgICovCisg ICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi5wY2lkICkKKyAgICAgICAgY3I0 IHw9IFg4Nl9DUjRfUENJREU7CisgICAgZWxzZSBpZiAoICFkLT5hcmNoLnB2 X2RvbWFpbi54cHRpICkKKyAgICAgICAgY3I0IHw9IFg4Nl9DUjRfUEdFOwor CisgICAgLyoKKyAgICAgKiBUU0QgaXMgbmVlZGVkIGlmIGVpdGhlciB0aGUg Z3Vlc3QgaGFzIGVsZWN0ZWQgdG8gdXNlIGl0LCBvciBYZW4gaXMKKyAgICAg KiB2aXJ0dWFsaXNpbmcgdGhlIFRTQyB2YWx1ZSB0aGUgZ3Vlc3Qgc2Vlcy4K KyAgICAgKi8KKyAgICBpZiAoIGQtPmFyY2gudnRzYyB8fCAodi0+YXJjaC5w dl92Y3B1LmN0cmxyZWdbNF0gJiBYODZfQ1I0X1RTRCkgKQorICAgICAgICBj cjQgfD0gWDg2X0NSNF9UU0Q7CisKKyAgICByZXR1cm4gY3I0OworfQorCiBp bnQgc3dpdGNoX2NvbXBhdChzdHJ1Y3QgZG9tYWluICpkKQogewogICAgIHN0 cnVjdCB2Y3B1ICp2OwpAQCAtMTkxLDcgKzIzNyw3IEBAIGludCBwdl92Y3B1 X2luaXRpYWxpc2Uoc3RydWN0IHZjcHUgKnYpCiAgICAgLyogUFYgZ3Vlc3Rz IGJ5IGRlZmF1bHQgaGF2ZSBhIDEwMEh6IHRpY2tlci4gKi8KICAgICB2LT5w ZXJpb2RpY19wZXJpb2QgPSBNSUxMSVNFQ1MoMTApOwogCi0gICAgdi0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSByZWFsX2NyNF90b19wdl9ndWVzdF9j cjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5wdl92Y3B1LmN0 cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQodiwgMCk7CiAKICAgICBp ZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSApCiAgICAgewpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gv eDg2L3B2L2VtdWwtcHJpdi1vcC5jCmluZGV4IGNlMmVjNzYuLjRhYmJjMTQg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwor KysgYi94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTMyLDYg KzMyLDcgQEAKICNpbmNsdWRlIDxhc20vaHlwZXJjYWxsLmg+CiAjaW5jbHVk ZSA8YXNtL21jMTQ2ODE4cnRjLmg+CiAjaW5jbHVkZSA8YXNtL3AybS5oPgor I2luY2x1ZGUgPGFzbS9wdi9kb21haW4uaD4KICNpbmNsdWRlIDxhc20vcHYv dHJhcHMuaD4KICNpbmNsdWRlIDxhc20vc2hhcmVkLmg+CiAjaW5jbHVkZSA8 YXNtL3RyYXBzLmg+CkBAIC03ODUsOCArNzg2LDggQEAgc3RhdGljIGludCB3 cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVnLCB1bnNpZ25lZCBsb25nIHZhbCwK ICAgICB9CiAKICAgICBjYXNlIDQ6IC8qIFdyaXRlIENSNCAqLwotICAgICAg ICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9IHB2X2d1ZXN0X2Ny NF9maXh1cChjdXJyLCB2YWwpOwotICAgICAgICB3cml0ZV9jcjQocHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KGN1cnIpKTsKKyAgICAgICAgY3Vyci0+YXJj aC5wdl92Y3B1LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQoY3Vy ciwgdmFsKTsKKyAgICAgICAgd3JpdGVfY3I0KHB2X21ha2VfY3I0KGN1cnIp KTsKICAgICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKGN1cnIpOwogICAg ICAgICByZXR1cm4gWDg2RU1VTF9PS0FZOwogICAgIH0KZGlmZiAtLWdpdCBh L3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L2RvbWFpbi5oCmluZGV4IGVjODFkNzguLmM4YWE4YTUgMTAwNjQ0 Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgKKysrIGIveGVu L2luY2x1ZGUvYXNtLXg4Ni9kb21haW4uaApAQCAtNjEwLDE3ICs2MTAsNiBA QCBib29sIHVwZGF0ZV9zZWNvbmRhcnlfc3lzdGVtX3RpbWUoc3RydWN0IHZj cHUgKiwKIHZvaWQgdmNwdV9zaG93X2V4ZWN1dGlvbl9zdGF0ZShzdHJ1Y3Qg dmNwdSAqKTsKIHZvaWQgdmNwdV9zaG93X3JlZ2lzdGVycyhjb25zdCBzdHJ1 Y3QgdmNwdSAqKTsKIAotLyogQ2xlYW4gdXAgQ1I0IGJpdHMgdGhhdCBhcmUg bm90IHVuZGVyIGd1ZXN0IGNvbnRyb2wuICovCi11bnNpZ25lZCBsb25nIHB2 X2d1ZXN0X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAqLCB1bnNpZ25l ZCBsb25nIGd1ZXN0X2NyNCk7Ci0KLS8qIENvbnZlcnQgYmV0d2VlbiBndWVz dC12aXNpYmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBs b25nIHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNw dSAqdik7Ci0KLSNkZWZpbmUgcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KGMp ICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAoKGMpICYgfihYODZf Q1I0X1BHRSB8IFg4Nl9DUjRfUFNFIHwgWDg2X0NSNF9UU0QgfCAgICAgIFwK LSAgICAgICAgICAgICBYODZfQ1I0X09TWFNBVkUgfCBYODZfQ1I0X1NNRVAg fCAgICAgICAgICAgICAgIFwKLSAgICAgICAgICAgICBYODZfQ1I0X0ZTR1NC QVNFIHwgWDg2X0NSNF9TTUFQIHwgWDg2X0NSNF9QQ0lERSkpCi0KICNkZWZp bmUgZG9tYWluX21heF92Y3B1cyhkKSAoaXNfaHZtX2RvbWFpbihkKSA/IEhW TV9NQVhfVkNQVVMgOiBNQVhfVklSVF9DUFVTKQogCiBzdGF0aWMgaW5saW5l IHN0cnVjdCB2Y3B1X2d1ZXN0X2NvbnRleHQgKmFsbG9jX3ZjcHVfZ3Vlc3Rf Y29udGV4dCh2b2lkKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9wdi9kb21haW4uaCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWlu LmgKaW5kZXggNGZlYTc2NC4uNGU0NzEwYyAxMDA2NDQKLS0tIGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9wdi9kb21haW4uaAorKysgYi94ZW4vaW5jbHVkZS9h c20teDg2L3B2L2RvbWFpbi5oCkBAIC01OSw2ICs1OSwyMyBAQCBpbnQgcHZf dmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2Y3B1ICp2KTsKIHZvaWQgcHZfZG9t YWluX2Rlc3Ryb3koc3RydWN0IGRvbWFpbiAqZCk7CiBpbnQgcHZfZG9tYWlu X2luaXRpYWxpc2Uoc3RydWN0IGRvbWFpbiAqZCk7CiAKKy8qCisgKiBCaXRz IHdoaWNoIGEgUFYgZ3Vlc3QgY2FuIHRvZ2dsZSBpbiBpdHMgdmlldyBvZiBj cjQuICBTb21lIGFyZSBsb2FkZWQgaW50bworICogaGFyZHdhcmUsIHdoaWxl IHNvbWUgYXJlIGZ1bGx5IGVtdWxhdGVkLgorICovCisjZGVmaW5lIFBWX0NS NF9HVUVTVF9NQVNLIFwKKyAgICAoWDg2X0NSNF9UU0QgfCBYODZfQ1I0X0RF IHwgWDg2X0NSNF9GU0dTQkFTRSB8IFg4Nl9DUjRfT1NYU0FWRSkKKworLyog Qml0cyB3aGljaCBhIFBWIGd1ZXN0IG1heSBvYnNlcnZlIGZyb20gdGhlIHJl YWwgaGFyZHdhcmUgc2V0dGluZ3MuICovCisjZGVmaW5lIFBWX0NSNF9HVUVT VF9WSVNJQkxFX01BU0sgXAorICAgIChYODZfQ1I0X1BBRSB8IFg4Nl9DUjRf TUNFIHwgWDg2X0NSNF9PU0ZYU1IgfCBYODZfQ1I0X09TWE1NRVhDUFQpCisK Ky8qIEdpdmVuIGEgbmV3IGNyNCB2YWx1ZSwgY29uc3RydWN0IHRoZSByZXN1 bHRpbmcgZ3Vlc3QtdmlzaWJsZSBjcjQgdmFsdWUuICovCit1bnNpZ25lZCBs b25nIHB2X2ZpeHVwX2d1ZXN0X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdiwg dW5zaWduZWQgbG9uZyBjcjQpOworCisvKiBDcmVhdGUgYSBjcjQgdmFsdWUg dG8gbG9hZCBpbnRvIGhhcmR3YXJlLCBiYXNlZCBvbiB2Y3B1IHNldHRpbmdz LiAqLwordW5zaWduZWQgbG9uZyBwdl9tYWtlX2NyNChjb25zdCBzdHJ1Y3Qg dmNwdSAqdik7CisKICNlbHNlICAvKiAhQ09ORklHX1BWICovCiAKICNpbmNs dWRlIDx4ZW4vZXJybm8uaD4KQEAgLTY4LDYgKzg1LDggQEAgc3RhdGljIGlu bGluZSBpbnQgcHZfdmNwdV9pbml0aWFsaXNlKHN0cnVjdCB2Y3B1ICp2KSB7 IHJldHVybiAtRU9QTk9UU1VQUDsgfQogc3RhdGljIGlubGluZSB2b2lkIHB2 X2RvbWFpbl9kZXN0cm95KHN0cnVjdCBkb21haW4gKmQpIHt9CiBzdGF0aWMg aW5saW5lIGludCBwdl9kb21haW5faW5pdGlhbGlzZShzdHJ1Y3QgZG9tYWlu ICpkKSB7IHJldHVybiAtRU9QTk9UU1VQUDsgfQogCitzdGF0aWMgaW5saW5l IHVuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUg KnYpIHsgcmV0dXJuIH4wdWw7IH0KKwogI2VuZGlmCS8qIENPTkZJR19QViAq LwogCiB2b2lkIHBhcmF2aXJ0X2N0eHRfc3dpdGNoX2Zyb20oc3RydWN0IHZj cHUgKnYpOwo= --=separator Content-Type: application/octet-stream; name="xsa293/4.11-2.patch" Content-Disposition: attachment; filename="xsa293/4.11-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBwdl9tYWtlX2NyNCgpIGlzIHVwZGF0ZWQgZm9yIDY0Yml0IFBWIGd1ZXN0 cyB0byB1c2UgdGhlIGd1ZXN0IGtlcm5lbHMKICAgY2hvaWNlIG9mIEZTR1NC QVNFLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yOTMKClJlcG9ydGVkLWJ5OiBB bmR5IEx1dG9taXJza2kgPGx1dG9Aa2VybmVsLm9yZz4KU2lnbmVkLW9mZi1i eTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4K UmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJj aC94ODYvZG9tYWluLmMKaW5kZXggNjc1MTUyYS4uMjlmODkyYyAxMDA2NDQK LS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9kb21haW4uYwpAQCAtMTQzMyw3ICsxNDMzLDggQEAgc3RhdGljIHZvaWQg c2F2ZV9zZWdtZW50cyhzdHJ1Y3QgdmNwdSAqdikKICAgICByZWdzLT5mcyA9 IHJlYWRfc3JlZyhmcyk7CiAgICAgcmVncy0+Z3MgPSByZWFkX3NyZWcoZ3Mp OwogCi0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICYmICFpc19wdl8zMmJp dF92Y3B1KHYpICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2 XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAgdi0+YXJjaC5wdl92 Y3B1LmZzX2Jhc2UgPSBfX3JkZnNiYXNlKCk7CiAgICAgICAgIGlmICggdi0+ YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkKZGlmZiAtLWdpdCBhL3hl bi9hcmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21h aW4uYwppbmRleCAzOTY1OTU5Li4yMjhhMTc0IDEwMDY0NAotLS0gYS94ZW4v YXJjaC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2Rv bWFpbi5jCkBAIC0xNDAsNiArMTQwLDE2IEBAIHVuc2lnbmVkIGxvbmcgcHZf bWFrZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5h cmNoLnZ0c2MgfHwgKHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2 X0NSNF9UU0QpICkKICAgICAgICAgY3I0IHw9IFg4Nl9DUjRfVFNEOwogCisg ICAgLyoKKyAgICAgKiBUaGUge1JELFdSfXtGUyxHU31CQVNFIGFyZSBvbmx5 IHVzZWFibGUgaW4gNjRiaXQgY29kZSBzZWdtZW50cy4gIFdoaWxlCisgICAg ICogd2UgbXVzdCBub3QgaGF2ZSBDUjQuRlNHU0JBU0Ugc2V0IGJlaGluZCB0 aGUgYmFjayBvZiBhIDY0Yml0IFBWIGtlcm5lbCwKKyAgICAgKiB3ZSBkbyBs ZWF2ZSBpdCBzZXQgaW4gMzJiaXQgUFYgY29udGV4dCB0byBzcGVlZCB1cCBY ZW4ncyBjb250ZXh0IHN3aXRjaAorICAgICAqIHBhdGguCisgICAgICovCisg ICAgaWYgKCAhaXNfcHZfMzJiaXRfZG9tYWluKGQpICYmCisgICAgICAgICAh KHYtPmFyY2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFT RSkgKQorICAgICAgICBjcjQgJj0gflg4Nl9DUjRfRlNHU0JBU0U7CisKICAg ICByZXR1cm4gY3I0OwogfQogCkBAIC0zNzUsNyArMzg1LDggQEAgdm9pZCB0 b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBBU1NF UlQoIWlzX3B2XzMyYml0X3ZjcHUodikpOwogCi0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICkKKyAgICAvKiAlZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJl IHN0YWxlIGlmIFdSe0ZTLEdTfUJBU0UgYXJlIHVzYWJsZS4gKi8KKyAgICBp ZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICB7CiAg ICAgICAgIGlmICggdi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlICkK ICAgICAgICAgICAgIHYtPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5lbCA9 IF9fcmRnc2Jhc2UoKTsKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9wdi9l bXVsLXByaXYtb3AuYyBiL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3Au YwppbmRleCA0YWJiYzE0Li4zMTJjMWVlIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvcHYvZW11bC1wcml2LW9wLmMKKysrIGIveGVuL2FyY2gveDg2L3B2 L2VtdWwtcHJpdi1vcC5jCkBAIC03ODYsNiArNzg2LDE3IEBAIHN0YXRpYyBp bnQgd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2 YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KKyAg ICAgICAgLyoKKyAgICAgICAgICogSWYgdGhpcyB3cml0ZSB3aWxsIGRpc2Fi bGUgRlNHU0JBU0UsIHJlZnJlc2ggWGVuJ3MgaWRlYSBvZiB0aGUKKyAgICAg ICAgICogZ3Vlc3QgYmFzZXMgbm93IHRoYXQgdGhleSBjYW4gbm8gbG9uZ2Vy IGNoYW5nZS4KKyAgICAgICAgICovCisgICAgICAgIGlmICggKGN1cnItPmFy Y2gucHZfdmNwdS5jdHJscmVnWzRdICYgWDg2X0NSNF9GU0dTQkFTRSkgJiYK KyAgICAgICAgICAgICAhKHZhbCAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAg ICAgICAgeworICAgICAgICAgICAgY3Vyci0+YXJjaC5wdl92Y3B1LmZzX2Jh c2UgPSBfX3JkZnNiYXNlKCk7CisgICAgICAgICAgICBjdXJyLT5hcmNoLnB2 X3ZjcHUuZ3NfYmFzZV9rZXJuZWwgPSBfX3JkZ3NiYXNlKCk7CisgICAgICAg IH0KKwogICAgICAgICBjdXJyLT5hcmNoLnB2X3ZjcHUuY3RybHJlZ1s0XSA9 IHB2X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0 ZV9jcjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRj aF9sZXZlbGxpbmcoY3Vycik7CkBAIC04MzUsMTQgKzg0NiwxNSBAQCBzdGF0 aWMgaW50IHJlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2 YWwsCiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19w dl8zMmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwot ICAgICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2Uo KSA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOworICAgICAgICAqdmFs ID0gKHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFKSA/IF9fcmRmc2Jh c2UoKQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5mc19iYXNlOwogICAgICAg ICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfR1NfQkFT RToKICAgICAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oY3VycmQpICkK ICAgICAgICAgICAgIGJyZWFrOwotICAgICAgICAqdmFsID0gY3B1X2hhc19m c2dzYmFzZSA/IF9fcmRnc2Jhc2UoKQotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA6IGN1cnItPmFyY2gucHZfdmNwdS5nc19iYXNlX2tlcm5l bDsKKyAgICAgICAgKnZhbCA9IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dT QkFTRSkgPyBfX3JkZ3NiYXNlKCkKKyAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgOiBjdXJyLT5hcmNoLnB2X3ZjcHUu Z3NfYmFzZV9rZXJuZWw7CiAgICAgICAgIHJldHVybiBYODZFTVVMX09LQVk7 CiAKICAgICBjYXNlIE1TUl9TSEFET1dfR1NfQkFTRToKZGlmZiAtLWdpdCBh L3hlbi9hcmNoL3g4Ni9zZXR1cC5jIGIveGVuL2FyY2gveDg2L3NldHVwLmMK aW5kZXggZWNiMDE0OS4uYTM1M2Q3NiAxMDA2NDQKLS0tIGEveGVuL2FyY2gv eDg2L3NldHVwLmMKKysrIGIveGVuL2FyY2gveDg2L3NldHVwLmMKQEAgLTE1 NjcsNyArMTU2Nyw3IEBAIHZvaWQgX19pbml0IG5vcmV0dXJuIF9fc3RhcnRf eGVuKHVuc2lnbmVkIGxvbmcgbWJpX3ApCiAKICAgICBjcjRfcHYzMl9tYXNr ID0gbW11X2NyNF9mZWF0dXJlcyAmIFhFTl9DUjRfUFYzMl9CSVRTOwogCi0g ICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIGJvb3RfY3B1 X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkgKQogICAgICAgICBzZXRfaW5f Y3I0KFg4Nl9DUjRfRlNHU0JBU0UpOwogCiAgICAgaWYgKCBvcHRfaW52cGNp ZCAmJiBjcHVfaGFzX2ludnBjaWQgKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1 ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L2NwdWZlYXR1cmUuaAppbmRleCBiMjM3ZGExLi44NjFjYjBhIDEwMDY0NAot LS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2NwdWZlYXR1cmUuaApAQCAtOTAsNyArOTAs NiBAQAogI2RlZmluZSBjcHVfaGFzX3hzYXZlcyAgICAgICAgICBib290X2Nw dV9oYXMoWDg2X0ZFQVRVUkVfWFNBVkVTKQogCiAvKiBDUFVJRCBsZXZlbCAw eDAwMDAwMDA3OjAuZWJ4ICovCi0jZGVmaW5lIGNwdV9oYXNfZnNnc2Jhc2Ug ICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9GU0dTQkFTRSkKICNk ZWZpbmUgY3B1X2hhc19ibWkxICAgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4 Nl9GRUFUVVJFX0JNSTEpCiAjZGVmaW5lIGNwdV9oYXNfaGxlICAgICAgICAg ICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9ITEUpCiAjZGVmaW5lIGNw dV9oYXNfYXZ4MiAgICAgICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVS RV9BVlgyKQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3Iu aCBiL3hlbi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKaW5kZXggYWZiZWI3Zi4u MWJhNmVlMyAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9tc3Iu aAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L21zci5oCkBAIC0xMjAsNiAr MTIwLDE0IEBAIHN0YXRpYyBpbmxpbmUgdWludDY0X3QgcmR0c2Nfb3JkZXJl ZCh2b2lkKQogCQkJICA6ICI9YSIgKGxvdyksICI9ZCIgKGhpZ2gpIFwKIAkJ CSAgOiAiYyIgKGNvdW50ZXIpKQogCisvKgorICogT24gaGFyZHdhcmUgc3Vw cG9ydGluZyBGU0dTQkFTRSwgdGhlIHZhbHVlIGxvYWRlZCBpbnRvIGhhcmR3 YXJlIGlzIHRoZQorICogZ3Vlc3Qga2VybmVsJ3MgY2hvaWNlIGZvciA2NGJp dCBQViBndWVzdHMgKFhlbidzIGNob2ljZSBmb3IgSWRsZSwgSFZNIGFuZAor ICogMzJiaXQgUFYpLgorICoKKyAqIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17 RlMsR1N9QkFTRSBpbnN0cnVjdGlvbnMgYXJlIG9ubHkgc2FmZSB0byB1c2Ug aWYKKyAqICVjcjQuZnNnc2Jhc2UgaXMgc2V0LgorICovCiBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgX19yZGZzYmFzZSh2b2lkKQogewogICAgIHVu c2lnbmVkIGxvbmcgYmFzZTsKQEAgLTE1MCw3ICsxNTgsNyBAQCBzdGF0aWMg aW5saW5lIHVuc2lnbmVkIGxvbmcgcmRmc2Jhc2Uodm9pZCkKIHsKICAgICB1 bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jh c2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgICAgICByZXR1cm4gX19yZGZzYmFzZSgpOwogCiAgICAgcmRtc3Js KE1TUl9GU19CQVNFLCBiYXNlKTsKQEAgLTE2Miw3ICsxNzAsNyBAQCBzdGF0 aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc2Jhc2Uodm9pZCkKIHsKICAg ICB1bnNpZ25lZCBsb25nIGJhc2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNn c2Jhc2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JB U0UgKQogICAgICAgICByZXR1cm4gX19yZGdzYmFzZSgpOwogCiAgICAgcmRt c3JsKE1TUl9HU19CQVNFLCBiYXNlKTsKQEAgLTE3NCw3ICsxODIsNyBAQCBz dGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmRnc3NoYWRvdyh2b2lkKQog ewogICAgIHVuc2lnbmVkIGxvbmcgYmFzZTsKIAotICAgIGlmICggY3B1X2hh c19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NSNF9G U0dTQkFTRSApCiAgICAgewogICAgICAgICBhc20gdm9sYXRpbGUgKCAic3dh cGdzIiApOwogICAgICAgICBiYXNlID0gX19yZGdzYmFzZSgpOwpAQCAtMTg4 LDcgKzE5Niw3IEBAIHN0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyByZGdz c2hhZG93KHZvaWQpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmZzYmFzZSh1 bnNpZ25lZCBsb25nIGJhc2UpCiB7Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3Ni YXNlICkKKyAgICBpZiAoIHJlYWRfY3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNF ICkKICNpZmRlZiBIQVZFX0FTX0ZTR1NCQVNFCiAgICAgICAgIGFzbSB2b2xh dGlsZSAoICJ3cmZzYmFzZSAlMCIgOjogInIiIChiYXNlKSApOwogI2Vsc2UK QEAgLTIwMCw3ICsyMDgsNyBAQCBzdGF0aWMgaW5saW5lIHZvaWQgd3Jmc2Jh c2UodW5zaWduZWQgbG9uZyBiYXNlKQogCiBzdGF0aWMgaW5saW5lIHZvaWQg d3Jnc2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewotICAgIGlmICggY3B1 X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAjaWZkZWYgSEFWRV9BU19GU0dTQkFTRQogICAgICAg ICBhc20gdm9sYXRpbGUgKCAid3Jnc2Jhc2UgJTAiIDo6ICJyIiAoYmFzZSkg KTsKICNlbHNlCkBAIC0yMTIsNyArMjIwLDcgQEAgc3RhdGljIGlubGluZSB2 b2lkIHdyZ3NiYXNlKHVuc2lnbmVkIGxvbmcgYmFzZSkKIAogc3RhdGljIGlu bGluZSB2b2lkIHdyZ3NzaGFkb3codW5zaWduZWQgbG9uZyBiYXNlKQogewot ICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2Ny NCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAgICAgewogICAgICAgICBhc20g dm9sYXRpbGUgKCAic3dhcGdzXG5cdCIKICNpZmRlZiBIQVZFX0FTX0ZTR1NC QVNFCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nv ci5oIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAppbmRleCAy YmQ5ZTY5Li44ZTI1M2RjIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS9hc20t eDg2L3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYvcHJv Y2Vzc29yLmgKQEAgLTMwNSwxMSArMzA1LDMxIEBAIHN0YXRpYyBpbmxpbmUg dW5zaWduZWQgbG9uZyByZWFkX2NyNCh2b2lkKQogCiBzdGF0aWMgaW5saW5l IHZvaWQgd3JpdGVfY3I0KHVuc2lnbmVkIGxvbmcgdmFsKQogeworICAgIHN0 cnVjdCBjcHVfaW5mbyAqaW5mbyA9IGdldF9jcHVfaW5mbygpOworCiAgICAg LyogTm8gZ2xvYmFsIHBhZ2VzIGluIGNhc2Ugb2YgUENJRHMgZW5hYmxlZCEg Ki8KICAgICBBU1NFUlQoISh2YWwgJiBYODZfQ1I0X1BHRSkgfHwgISh2YWwg JiBYODZfQ1I0X1BDSURFKSk7CiAKLSAgICBnZXRfY3B1X2luZm8oKS0+Y3I0 ID0gdmFsOwotICAgIGFzbSB2b2xhdGlsZSAoICJtb3YgJTAsJSVjcjQiIDog OiAiciIgKHZhbCkgKTsKKyAgICAvKgorICAgICAqIE9uIGhhcmR3YXJlIHN1 cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2YWx1ZSBpbiAlY3I0IGlzIHRoZSBr ZXJuZWwncworICAgICAqIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3RzLCB3 aGljaCBpbXBhY3RzIHdoZXRoZXIgWGVuIGNhbiB1c2UgdGhlCisgICAgICog aW5zdHJ1Y3Rpb25zLgorICAgICAqCisgICAgICogVGhlIHtyZCx3cn17ZnMs Z3N9YmFzZSgpIGhlbHBlcnMgdXNlIGluZm8tPmNyNCB0byB3b3JrIG91dCB3 aGV0aGVyIGl0CisgICAgICogaXMgc2FmZSB0byBleGVjdXRlIHRoZSB7UkQs V1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb24sIGZhbGxpbmcgYmFjayB0bwor ICAgICAqIHRoZSBNU1IgcGF0aCBpZiBub3QuICBTb21lIHVzZXJzIHJlcXVp cmUgaW50ZXJydXB0IHNhZmV0eS4KKyAgICAgKgorICAgICAqIElmIEZTR1NC QVNFIGlzIGN1cnJlbnRseSBvciBhYm91dCB0byBiZWNvbWUgY2xlYXIsIHJl ZmxlY3QgdGhpcyBpbgorICAgICAqIGluZm8tPmNyNCBiZWZvcmUgdXBkYXRp bmcgJWNyNCwgc28gYW4gaW50ZXJydXB0IHdoaWNoIGhpdHMgaW4gdGhlCisg ICAgICogbWlkZGxlIHdvbid0IG9ic2VydmUgRlNHU0JBU0Ugc2V0IGluIGlu Zm8tPmNyNCBidXQgY2xlYXIgaW4gJWNyNC4KKyAgICAgKi8KKyAgICBpbmZv LT5jcjQgPSB2YWwgJiAoaW5mby0+Y3I0IHwgflg4Nl9DUjRfRlNHU0JBU0Up OworCisgICAgYXNtIHZvbGF0aWxlICggIm1vdiAlW3ZhbF0sICUlY3I0Igor ICAgICAgICAgICAgICAgICAgIDogIittIiAoaW5mby0+Y3I0KSAvKiBGb3Jj ZSBvcmRlcmluZyB3aXRob3V0IGEgYmFycmllci4gKi8KKyAgICAgICAgICAg ICAgICAgICA6IFt2YWxdICJyIiAodmFsKSApOworCisgICAgaW5mby0+Y3I0 ID0gdmFsOwogfQogCiAvKiBDbGVhciBhbmQgc2V0ICdUUycgYml0IHJlc3Bl Y3RpdmVseSAqLwo= --=separator Content-Type: application/octet-stream; name="xsa293/unstable-1.patch" Content-Disposition: attachment; filename="xsa293/unstable-1.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBSZXdyaXRlIGd1ZXN0ICVjcjQgaGFuZGxp bmcgZnJvbSBzY3JhdGNoCgpUaGUgUFYgY3I0IGxvZ2ljIGlzIGFsbW9zdCBp bXBvc3NpYmxlIHRvIGZvbGxvdywgYW5kIGxlYWtzIGJpdHMgaW50byBndWVz dApjb250ZXh0IHdoaWNoIGRlZmluaXRlbHkgc2hvdWxkbid0IGJlIHZpc2li bGUgKGluIHBhcnRpY3VsYXIsIFZNWEUpLgoKVGhlIGJpZ2dlc3QgcHJvYmxl bSBob3dldmVyLCBhbmQgc291cmNlIG9mIHRoZSBjb21wbGV4aXR5LCBpcyB0 aGF0IGl0IGRlcml2ZXMKbmV3IHJlYWwgYW5kIGd1ZXN0IGNyNCB2YWx1ZXMg ZnJvbSB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZSAtIHRoaXMgaXMK Y29udGV4dCBkZXBlbmRlbnQgYW5kIGFuIGluYXBwcm9wcmlhdGUgc291cmNl IG9mIGluZm9ybWF0aW9uLgoKUmV3cml0ZSB0aGUgY3I0IGxvZ2ljIHRvIGJl IGludmFyaWFudCBvZiB0aGUgY3VycmVudCB2YWx1ZSBpbiBoYXJkd2FyZS4K CkZpcnN0IG9mIGFsbCwgbW9kaWZ5IHdyaXRlX3B0YmFzZSgpIHRvIGFsd2F5 cyB1c2UgbW11X2NyNF9mZWF0dXJlcyBmb3IgSURMRQphbmQgSFZNIGNvbnRl eHRzLiAgbW11X2NyNF9mZWF0dXJlcyAqaXMqIHRoZSBjb3JyZWN0IHZhbHVl IHRvIHVzZSwgYW5kIG1ha2VzCnRoZSBBU1NFUlQoKSBvYnZpb3VzbHkgcmVk dW5kYW50LgoKRm9yIFBWIGd1ZXN0cywgY3Vyci0+YXJjaC5wdi5jdHJscmVn WzRdIHJlbWFpbnMgdGhlIGd1ZXN0cyB2aWV3IG9mIGNyNCwgYnV0CmFsbCBs b2dpYyBnZXRzIHJld29ya2VkIGluIHRlcm1zIG9mIHRoaXMgYW5kIG1tdV9j cjRfZmVhdHVyZXMgb25seS4KClR3byBtYXNrcyBhcmUgaW50cm9kdWNlZDsg Yml0cyB3aGljaCB0aGUgZ3Vlc3QgaGFzIGNvbnRyb2wgb3ZlciwgYW5kIGJp dHMKd2hpY2ggYXJlIGZvcndhcmRlZCBmcm9tIFhlbidzIHNldHRpbmdzLiAg T25lIGd1ZXN0LXZpc2libGUgY2hhbmdlIGhlcmUgaXMKdGhhdCBYZW4ncyBW TVhFIHNldHRpbmcgaXMgbm8gbG9uZ2VyIHZpc2libGUgYXQgYWxsLgoKcHZf bWFrZV9jcjQoKSBmb2xsb3dzIGZhaXJseSBjbG9zZWx5IGZyb20gcHZfZ3Vl c3RfY3I0X3RvX3JlYWxfY3I0KCksIGJ1dApkZWxpYmVyYXRlbHkgc3RhcnRz IHdpdGggbW11X2NyNF9mZWF0dXJlcywgYW5kIG9ubHkgYWx0ZXJzIHRoZSBt aW5pbWFsIHN1YnNldApvZiBiaXRzLgoKVGhlIGJvb3QtdGltZSB7Y29tcGF0 Xyx9cHZfY3I0X21hc2sgdmFyaWFibGVzIGFyZSByZW1vdmVkLCBhcyB0aGV5 IGFyZSBhCnJlbW5hbnQgb2YgdGhlIHByZS1DUFVJRCBwb2xpY3kgZGF5cy4g IHB2X2ZpeHVwX2d1ZXN0X2NyNCgpIGdhaW5zIGEgcmVsYXRlZApkZXJpdmF0 aW9uIGZyb20gdGhlIHBvbGljeS4KCkFub3RoZXIgZ3Vlc3QgdmlzaWJsZSBj aGFuZ2UgaGVyZSBpcyB0aGF0IGEgMzJiaXQgUFYgZ3Vlc3QgY2FuIG5vdyBm bGlwCkZTR1NCQVNFIGluIGl0cyB2aWV3IG9mIENSNC4gIFdoaWxlIHRoZSB7 UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25zIGFyZQp1bnVzYWJsZSBv dXRzaWRlIG9mIGEgNjRiaXQgY29kZSBzZWdtZW50LCB0aGUgYWJpbGl0eSB0 byBtb2RpZnkgRlNHU0JBU0UKbWF0Y2hlcyByZWFsIGhhcmR3YXJlIGJlaGF2 aW91ciwgYW5kIGF2b2lkcyB0aGUgbmVlZCBmb3IgYW55IDMyYml0LzY0Yml0 CmRpZmZlcmVuY2VzIGluIHRoZSBsb2dpYy4KCk92ZXJhbGwsIHRoaXMgcGF0 Y2ggc2hvdWxkbid0IGhhdmUgYSBwcmFjdGljYWwgY2hhbmdlIGluIGd1ZXN0 IGJlaGF2aW91ci4KVk1YRSB3aWxsIGRpc2FwcGVhciBmcm9tIHZpZXcsIGFu ZCBhbiBpbnF1aXNpdGl2ZSAzMmJpdCBrZXJuZWwgY2FuIG5vdyBzZWUKRlNH U0JBU0UgY2hhbmdpbmcsIGJ1dCB0aGlzIG5ldyBsb2dpYyBpcyBvdGhlcndp c2UgYnVnLWNvbXBhdGlibGUgd2l0aCBiZWZvcmUuCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTI5MwoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5k cmV3LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJj aC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKaW5kZXgg MzJkYzQyNTMuLjdmZjBmMTAgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9k b21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMKQEAgLTc2OSw0 OSArNzY5LDYgQEAgdm9pZCBhcmNoX2RvbWFpbl9jcmVhdGlvbl9maW5pc2hl ZChzdHJ1Y3QgZG9tYWluICpkKQogewogfQogCi0vKgotICogVGhlc2UgYXJl IHRoZSBtYXNrcyBvZiBDUjQgYml0cyAoc3ViamVjdCB0byBoYXJkd2FyZSBh dmFpbGFiaWxpdHkpIHdoaWNoIGEKLSAqIFBWIGd1ZXN0IG1heSBub3QgbGVn aXRpbWlhdGVseSBhdHRlbXB0IHRvIG1vZGlmeS4KLSAqLwotc3RhdGljIHVu c2lnbmVkIGxvbmcgX19yZWFkX21vc3RseSBwdl9jcjRfbWFzaywgY29tcGF0 X3B2X2NyNF9tYXNrOwotCi1zdGF0aWMgaW50IF9faW5pdCBpbml0X3B2X2Ny NF9tYXNrcyh2b2lkKQotewotICAgIHVuc2lnbmVkIGxvbmcgY29tbW9uX21h c2sgPSB+WDg2X0NSNF9UU0Q7Ci0KLSAgICAvKgotICAgICAqIEFsbCBQViBn dWVzdHMgbWF5IGF0dGVtcHQgdG8gbW9kaWZ5IFRTRCwgREUgYW5kIE9TWFNB VkUuCi0gICAgICovCi0gICAgaWYgKCBjcHVfaGFzX2RlICkKLSAgICAgICAg Y29tbW9uX21hc2sgJj0gflg4Nl9DUjRfREU7Ci0gICAgaWYgKCBjcHVfaGFz X3hzYXZlICkKLSAgICAgICAgY29tbW9uX21hc2sgJj0gflg4Nl9DUjRfT1NY U0FWRTsKLQotICAgIHB2X2NyNF9tYXNrID0gY29tcGF0X3B2X2NyNF9tYXNr ID0gY29tbW9uX21hc2s7Ci0KLSAgICAvKgotICAgICAqIDY0Yml0IFBWIGd1 ZXN0cyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgRlNHU0JBU0UuCi0gICAgICov Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKLSAgICAgICAgcHZfY3I0 X21hc2sgJj0gflg4Nl9DUjRfRlNHU0JBU0U7Ci0KLSAgICByZXR1cm4gMDsK LX0KLV9faW5pdGNhbGwoaW5pdF9wdl9jcjRfbWFza3MpOwotCi11bnNpZ25l ZCBsb25nIHB2X2d1ZXN0X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAq diwgdW5zaWduZWQgbG9uZyBndWVzdF9jcjQpCi17Ci0gICAgdW5zaWduZWQg bG9uZyBodl9jcjQgPSByZWFsX2NyNF90b19wdl9ndWVzdF9jcjQocmVhZF9j cjQoKSk7Ci0gICAgdW5zaWduZWQgbG9uZyBtYXNrID0gaXNfcHZfMzJiaXRf dmNwdSh2KSA/IGNvbXBhdF9wdl9jcjRfbWFzayA6IHB2X2NyNF9tYXNrOwot Ci0gICAgaWYgKCAoZ3Vlc3RfY3I0ICYgbWFzaykgIT0gKGh2X2NyNCAmIG1h c2spICkKLSAgICAgICAgcHJpbnRrKFhFTkxPR19HX1dBUk5JTkcKLSAgICAg ICAgICAgICAgICJkJWQgYXR0ZW1wdGVkIHRvIGNoYW5nZSAlcHYncyBDUjQg ZmxhZ3MgJTA4bHggLT4gJTA4bHhcbiIsCi0gICAgICAgICAgICAgICBjdXJy ZW50LT5kb21haW4tPmRvbWFpbl9pZCwgdiwgaHZfY3I0LCBndWVzdF9jcjQp OwotCi0gICAgcmV0dXJuIChodl9jcjQgJiBtYXNrKSB8IChndWVzdF9jcjQg JiB+bWFzayk7Ci19Ci0KICNkZWZpbmUgeGVuX3ZjcHVfZ3Vlc3RfY29udGV4 dCB2Y3B1X2d1ZXN0X2NvbnRleHQKICNkZWZpbmUgZnB1X2N0eHQgZnB1X2N0 eHQueAogQ0hFQ0tfRklFTERfKHN0cnVjdCwgdmNwdV9ndWVzdF9jb250ZXh0 LCBmcHVfY3R4dCk7CkBAIC04MjksNyArNzg2LDYgQEAgaW50IGFyY2hfc2V0 X2luZm9fZ3Vlc3QoCiAjaWZkZWYgQ09ORklHX1BWCiAgICAgdW5zaWduZWQg bG9uZyBjcjNfZ2ZuOwogICAgIHN0cnVjdCBwYWdlX2luZm8gKmNyM19wYWdl OwotICAgIHVuc2lnbmVkIGxvbmcgY3I0OwogICAgIGludCByYyA9IDA7CiAj ZW5kaWYKIApAQCAtMTAwNSw5ICs5NjEsNyBAQCBpbnQgYXJjaF9zZXRfaW5m b19ndWVzdCgKICAgICB2LT5hcmNoLnB2LmN0cmxyZWdbMF0gJj0gWDg2X0NS MF9UUzsKICAgICB2LT5hcmNoLnB2LmN0cmxyZWdbMF0gfD0gcmVhZF9jcjAo KSAmIH5YODZfQ1IwX1RTOwogCi0gICAgY3I0ID0gdi0+YXJjaC5wdi5jdHJs cmVnWzRdOwotICAgIHYtPmFyY2gucHYuY3RybHJlZ1s0XSA9IGNyNCA/IHB2 X2d1ZXN0X2NyNF9maXh1cCh2LCBjcjQpIDoKLSAgICAgICAgcmVhbF9jcjRf dG9fcHZfZ3Vlc3RfY3I0KG1tdV9jcjRfZmVhdHVyZXMpOworICAgIHYtPmFy Y2gucHYuY3RybHJlZ1s0XSA9IHB2X2ZpeHVwX2d1ZXN0X2NyNCh2LCB2LT5h cmNoLnB2LmN0cmxyZWdbNF0pOwogCiAgICAgbWVtc2V0KHYtPmFyY2guZHIs IDAsIHNpemVvZih2LT5hcmNoLmRyKSk7CiAgICAgdi0+YXJjaC5kcjYgPSBY ODZfRFI2X0RFRkFVTFQ7CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0u YyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDdlYzU5NTQuLmJhNDQ0ZDIg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS5jCisrKyBiL3hlbi9hcmNo L3g4Ni9tbS5jCkBAIC01MjksMzMgKzUyOSwxMyBAQCB2b2lkIG1ha2VfY3Iz KHN0cnVjdCB2Y3B1ICp2LCBtZm5fdCBtZm4pCiAgICAgICAgIHYtPmFyY2gu Y3IzIHw9IGdldF9wY2lkX2JpdHModiwgZmFsc2UpOwogfQogCi11bnNpZ25l ZCBsb25nIHB2X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3Qg dmNwdSAqdikKLXsKLSAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0gdi0+ ZG9tYWluOwotICAgIHVuc2lnbmVkIGxvbmcgY3I0OwotCi0gICAgY3I0ID0g di0+YXJjaC5wdi5jdHJscmVnWzRdICYgflg4Nl9DUjRfREU7Ci0gICAgY3I0 IHw9IG1tdV9jcjRfZmVhdHVyZXMgJiAoWDg2X0NSNF9QU0UgfCBYODZfQ1I0 X1NNRVAgfCBYODZfQ1I0X1NNQVAgfAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFg4Nl9DUjRfT1NYU0FWRSB8IFg4Nl9DUjRfRlNHU0JBU0Up OwotCi0gICAgaWYgKCBkLT5hcmNoLnB2LnBjaWQgKQotICAgICAgICBjcjQg fD0gWDg2X0NSNF9QQ0lERTsKLSAgICBlbHNlIGlmICggIWQtPmFyY2gucHYu eHB0aSApCi0gICAgICAgIGNyNCB8PSBYODZfQ1I0X1BHRTsKLQotICAgIGNy NCB8PSBkLT5hcmNoLnZ0c2MgPyBYODZfQ1I0X1RTRCA6IDA7Ci0KLSAgICBy ZXR1cm4gY3I0OwotfQotCiB2b2lkIHdyaXRlX3B0YmFzZShzdHJ1Y3QgdmNw dSAqdikKIHsKICAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9pbmZvID0gZ2V0 X2NwdV9pbmZvKCk7CiAgICAgdW5zaWduZWQgbG9uZyBuZXdfY3I0OwogCiAg ICAgbmV3X2NyNCA9IChpc19wdl92Y3B1KHYpICYmICFpc19pZGxlX3ZjcHUo dikpCi0gICAgICAgICAgICAgID8gcHZfZ3Vlc3RfY3I0X3RvX3JlYWxfY3I0 KHYpCi0gICAgICAgICAgICAgIDogKChyZWFkX2NyNCgpICYgfihYODZfQ1I0 X1BDSURFIHwgWDg2X0NSNF9UU0QpKSB8IFg4Nl9DUjRfUEdFKTsKKyAgICAg ICAgICAgICAgPyBwdl9tYWtlX2NyNCh2KSA6IG1tdV9jcjRfZmVhdHVyZXM7 CiAKICAgICBpZiAoIGlzX3B2X3ZjcHUodikgJiYgdi0+ZG9tYWluLT5hcmNo LnB2LnhwdGkgKQogICAgIHsKQEAgLTU3NCw4ICs1NTQsNiBAQCB2b2lkIHdy aXRlX3B0YmFzZShzdHJ1Y3QgdmNwdSAqdikKICAgICAgICAgc3dpdGNoX2Ny M19jcjQodi0+YXJjaC5jcjMsIG5ld19jcjQpOwogICAgICAgICBjcHVfaW5m by0+cHZfY3IzID0gMDsKICAgICB9Ci0KLSAgICBBU1NFUlQoaXNfcHZfdmNw dSh2KSB8fCByZWFkX2NyNCgpID09IG1tdV9jcjRfZmVhdHVyZXMpOwogfQog CiAvKgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jIGIv eGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCmluZGV4IDdlODRiMDQuLjkxMTIz YTggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYworKysg Yi94ZW4vYXJjaC94ODYvcHYvZG9tYWluLmMKQEAgLTk3LDYgKzk3LDUyIEBA IHN0YXRpYyB2b2lkIHJlbGVhc2VfY29tcGF0X2w0KHN0cnVjdCB2Y3B1ICp2 KQogICAgIHYtPmFyY2guZ3Vlc3RfdGFibGVfdXNlciA9IHBhZ2V0YWJsZV9u dWxsKCk7CiB9CiAKK3Vuc2lnbmVkIGxvbmcgcHZfZml4dXBfZ3Vlc3RfY3I0 KGNvbnN0IHN0cnVjdCB2Y3B1ICp2LCB1bnNpZ25lZCBsb25nIGNyNCkKK3sK KyAgICBjb25zdCBzdHJ1Y3QgY3B1aWRfcG9saWN5ICpwID0gdi0+ZG9tYWlu LT5hcmNoLmNwdWlkOworCisgICAgLyogRGlzY2FyZCBhdHRlbXB0cyB0byBz ZXQgZ3Vlc3QgY29udHJvbGxhYmxlIGJpdHMgb3V0c2lkZSBvZiB0aGUgcG9s aWN5LiAqLworICAgIGNyNCAmPSB+KChwLT5iYXNpYy50c2MgICAgID8gMCA6 IFg4Nl9DUjRfVFNEKSAgICAgIHwKKyAgICAgICAgICAgICAocC0+YmFzaWMu ZGUgICAgICA/IDAgOiBYODZfQ1I0X0RFKSAgICAgICB8CisgICAgICAgICAg ICAgKHAtPmZlYXQuZnNnc2Jhc2UgPyAwIDogWDg2X0NSNF9GU0dTQkFTRSkg fAorICAgICAgICAgICAgIChwLT5iYXNpYy54c2F2ZSAgID8gMCA6IFg4Nl9D UjRfT1NYU0FWRSkpOworCisgICAgLyogTWFza3MgZXhwZWN0ZWQgdG8gYmUg ZGlzam9pbnQgc2V0cy4gKi8KKyAgICBCVUlMRF9CVUdfT04oUFZfQ1I0X0dV RVNUX01BU0sgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLKTsKKworICAg IC8qCisgICAgICogQSBndWVzdCBzZWVzIHRoZSBwb2xpY3kgc3Vic2V0IG9m IGl0cyBvd24gY2hvaWNlIG9mIGd1ZXN0IGNvbnRyb2xsYWJsZQorICAgICAq IGJpdHMsIGFuZCBhIHN1YnNldCBvZiBYZW4ncyBjaG9pY2Ugb2YgY2VydGFp biBoYXJkd2FyZSBzZXR0aW5ncy4KKyAgICAgKi8KKyAgICByZXR1cm4gKChj cjQgJiBQVl9DUjRfR1VFU1RfTUFTSykgfAorICAgICAgICAgICAgKG1tdV9j cjRfZmVhdHVyZXMgJiBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLKSk7Cit9 CisKK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9jcjQoY29uc3Qgc3RydWN0IHZj cHUgKnYpCit7CisgICAgY29uc3Qgc3RydWN0IGRvbWFpbiAqZCA9IHYtPmRv bWFpbjsKKyAgICB1bnNpZ25lZCBsb25nIGNyNCA9IG1tdV9jcjRfZmVhdHVy ZXMgJgorICAgICAgICB+KFg4Nl9DUjRfUENJREUgfCBYODZfQ1I0X1BHRSB8 IFg4Nl9DUjRfVFNEKTsKKworICAgIC8qCisgICAgICogUENJREUgb3IgUEdF IGRlcGVuZHMgb24gdGhlIFBDSUQvWFBUSSBzZXR0aW5ncywgYnV0IG11c3Qg bm90IGJvdGggYmUKKyAgICAgKiBzZXQsIGFzIGl0IGltcGFjdHMgdGhlIHNh ZmV0eSBvZiBUTEIgZmx1c2hpbmcuCisgICAgICovCisgICAgaWYgKCBkLT5h cmNoLnB2LnBjaWQgKQorICAgICAgICBjcjQgfD0gWDg2X0NSNF9QQ0lERTsK KyAgICBlbHNlIGlmICggIWQtPmFyY2gucHYueHB0aSApCisgICAgICAgIGNy NCB8PSBYODZfQ1I0X1BHRTsKKworICAgIC8qCisgICAgICogVFNEIGlzIG5l ZWRlZCBpZiBlaXRoZXIgdGhlIGd1ZXN0IGhhcyBlbGVjdGVkIHRvIHVzZSBp dCwgb3IgWGVuIGlzCisgICAgICogdmlydHVhbGlzaW5nIHRoZSBUU0MgdmFs dWUgdGhlIGd1ZXN0IHNlZXMuCisgICAgICovCisgICAgaWYgKCBkLT5hcmNo LnZ0c2MgfHwgKHYtPmFyY2gucHYuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNE KSApCisgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKKworICAgIHJldHVy biBjcjQ7Cit9CisKIGludCBzd2l0Y2hfY29tcGF0KHN0cnVjdCBkb21haW4g KmQpCiB7CiAgICAgc3RydWN0IHZjcHUgKnY7CkBAIC0xOTEsNyArMjM3LDcg QEAgaW50IHB2X3ZjcHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAqdikKICAg ICAvKiBQViBndWVzdHMgYnkgZGVmYXVsdCBoYXZlIGEgMTAwSHogdGlja2Vy LiAqLwogICAgIHYtPnBlcmlvZGljX3BlcmlvZCA9IE1JTExJU0VDUygxMCk7 CiAKLSAgICB2LT5hcmNoLnB2LmN0cmxyZWdbNF0gPSByZWFsX2NyNF90b19w dl9ndWVzdF9jcjQobW11X2NyNF9mZWF0dXJlcyk7CisgICAgdi0+YXJjaC5w di5jdHJscmVnWzRdID0gcHZfZml4dXBfZ3Vlc3RfY3I0KHYsIDApOwogCiAg ICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oZCkgKQogICAgIHsKZGlmZiAt LWdpdCBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYyBiL3hlbi9h cmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYwppbmRleCA5NDJlY2UyLi5iNGE1 NmY5IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9w LmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jCkBAIC0z Myw2ICszMyw3IEBACiAjaW5jbHVkZSA8YXNtL2h5cGVyY2FsbC5oPgogI2lu Y2x1ZGUgPGFzbS9tYzE0NjgxOHJ0Yy5oPgogI2luY2x1ZGUgPGFzbS9wMm0u aD4KKyNpbmNsdWRlIDxhc20vcHYvZG9tYWluLmg+CiAjaW5jbHVkZSA8YXNt L3B2L3RyYXBzLmg+CiAjaW5jbHVkZSA8YXNtL3NoYXJlZC5oPgogI2luY2x1 ZGUgPGFzbS90cmFwcy5oPgpAQCAtNzc5LDggKzc4MCw4IEBAIHN0YXRpYyBp bnQgd3JpdGVfY3IodW5zaWduZWQgaW50IHJlZywgdW5zaWduZWQgbG9uZyB2 YWwsCiAgICAgfQogCiAgICAgY2FzZSA0OiAvKiBXcml0ZSBDUjQgKi8KLSAg ICAgICAgY3Vyci0+YXJjaC5wdi5jdHJscmVnWzRdID0gcHZfZ3Vlc3RfY3I0 X2ZpeHVwKGN1cnIsIHZhbCk7Ci0gICAgICAgIHdyaXRlX2NyNChwdl9ndWVz dF9jcjRfdG9fcmVhbF9jcjQoY3VycikpOworICAgICAgICBjdXJyLT5hcmNo LnB2LmN0cmxyZWdbNF0gPSBwdl9maXh1cF9ndWVzdF9jcjQoY3VyciwgdmFs KTsKKyAgICAgICAgd3JpdGVfY3I0KHB2X21ha2VfY3I0KGN1cnIpKTsKICAg ICAgICAgY3R4dF9zd2l0Y2hfbGV2ZWxsaW5nKGN1cnIpOwogICAgICAgICBy ZXR1cm4gWDg2RU1VTF9PS0FZOwogICAgIH0KZGlmZiAtLWdpdCBhL3hlbi9p bmNsdWRlL2FzbS14ODYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L2RvbWFpbi5oCmluZGV4IDI3N2Y5OWYuLmExMzFjYTIgMTAwNjQ0Ci0tLSBh L3hlbi9pbmNsdWRlL2FzbS14ODYvZG9tYWluLmgKKysrIGIveGVuL2luY2x1 ZGUvYXNtLXg4Ni9kb21haW4uaApAQCAtNjUzLDE3ICs2NTMsNiBAQCBib29s IHVwZGF0ZV9zZWNvbmRhcnlfc3lzdGVtX3RpbWUoc3RydWN0IHZjcHUgKiwK IHZvaWQgdmNwdV9zaG93X2V4ZWN1dGlvbl9zdGF0ZShzdHJ1Y3QgdmNwdSAq KTsKIHZvaWQgdmNwdV9zaG93X3JlZ2lzdGVycyhjb25zdCBzdHJ1Y3QgdmNw dSAqKTsKIAotLyogQ2xlYW4gdXAgQ1I0IGJpdHMgdGhhdCBhcmUgbm90IHVu ZGVyIGd1ZXN0IGNvbnRyb2wuICovCi11bnNpZ25lZCBsb25nIHB2X2d1ZXN0 X2NyNF9maXh1cChjb25zdCBzdHJ1Y3QgdmNwdSAqLCB1bnNpZ25lZCBsb25n IGd1ZXN0X2NyNCk7Ci0KLS8qIENvbnZlcnQgYmV0d2VlbiBndWVzdC12aXNp YmxlIGFuZCByZWFsIENSNCB2YWx1ZXMuICovCi11bnNpZ25lZCBsb25nIHB2 X2d1ZXN0X2NyNF90b19yZWFsX2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdik7 Ci0KLSNkZWZpbmUgcmVhbF9jcjRfdG9fcHZfZ3Vlc3RfY3I0KGMpICAgICAg ICAgICAgICAgICAgICAgICAgIFwKLSAgICAoKGMpICYgfihYODZfQ1I0X1BH RSB8IFg4Nl9DUjRfUFNFIHwgWDg2X0NSNF9UU0QgfCAgICAgIFwKLSAgICAg ICAgICAgICBYODZfQ1I0X09TWFNBVkUgfCBYODZfQ1I0X1NNRVAgfCAgICAg ICAgICAgICAgIFwKLSAgICAgICAgICAgICBYODZfQ1I0X0ZTR1NCQVNFIHwg WDg2X0NSNF9TTUFQIHwgWDg2X0NSNF9QQ0lERSkpCi0KIHN0YXRpYyBpbmxp bmUgc3RydWN0IHZjcHVfZ3Vlc3RfY29udGV4dCAqYWxsb2NfdmNwdV9ndWVz dF9jb250ZXh0KHZvaWQpCiB7CiAgICAgcmV0dXJuIHZtYWxsb2Moc2l6ZW9m KHN0cnVjdCB2Y3B1X2d1ZXN0X2NvbnRleHQpKTsKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWluLmggYi94ZW4vaW5jbHVkZS9h c20teDg2L3B2L2RvbWFpbi5oCmluZGV4IDdkOWQwOWQuLjk5YTBmZTcgMTAw NjQ0Ci0tLSBhL3hlbi9pbmNsdWRlL2FzbS14ODYvcHYvZG9tYWluLmgKKysr IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9wdi9kb21haW4uaApAQCAtNjEsNiAr NjEsMjMgQEAgaW50IHB2X3ZjcHVfaW5pdGlhbGlzZShzdHJ1Y3QgdmNwdSAq dik7CiB2b2lkIHB2X2RvbWFpbl9kZXN0cm95KHN0cnVjdCBkb21haW4gKmQp OwogaW50IHB2X2RvbWFpbl9pbml0aWFsaXNlKHN0cnVjdCBkb21haW4gKmQp OwogCisvKgorICogQml0cyB3aGljaCBhIFBWIGd1ZXN0IGNhbiB0b2dnbGUg aW4gaXRzIHZpZXcgb2YgY3I0LiAgU29tZSBhcmUgbG9hZGVkIGludG8KKyAq IGhhcmR3YXJlLCB3aGlsZSBzb21lIGFyZSBmdWxseSBlbXVsYXRlZC4KKyAq LworI2RlZmluZSBQVl9DUjRfR1VFU1RfTUFTSyBcCisgICAgKFg4Nl9DUjRf VFNEIHwgWDg2X0NSNF9ERSB8IFg4Nl9DUjRfRlNHU0JBU0UgfCBYODZfQ1I0 X09TWFNBVkUpCisKKy8qIEJpdHMgd2hpY2ggYSBQViBndWVzdCBtYXkgb2Jz ZXJ2ZSBmcm9tIHRoZSByZWFsIGhhcmR3YXJlIHNldHRpbmdzLiAqLworI2Rl ZmluZSBQVl9DUjRfR1VFU1RfVklTSUJMRV9NQVNLIFwKKyAgICAoWDg2X0NS NF9QQUUgfCBYODZfQ1I0X01DRSB8IFg4Nl9DUjRfT1NGWFNSIHwgWDg2X0NS NF9PU1hNTUVYQ1BUKQorCisvKiBHaXZlbiBhIG5ldyBjcjQgdmFsdWUsIGNv bnN0cnVjdCB0aGUgcmVzdWx0aW5nIGd1ZXN0LXZpc2libGUgY3I0IHZhbHVl LiAqLwordW5zaWduZWQgbG9uZyBwdl9maXh1cF9ndWVzdF9jcjQoY29uc3Qg c3RydWN0IHZjcHUgKnYsIHVuc2lnbmVkIGxvbmcgY3I0KTsKKworLyogQ3Jl YXRlIGEgY3I0IHZhbHVlIHRvIGxvYWQgaW50byBoYXJkd2FyZSwgYmFzZWQg b24gdmNwdSBzZXR0aW5ncy4gKi8KK3Vuc2lnbmVkIGxvbmcgcHZfbWFrZV9j cjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpOworCiBib29sIHhwdGlfcGNpZF9l bmFibGVkKHZvaWQpOwogCiAjZWxzZSAgLyogIUNPTkZJR19QViAqLwpAQCAt NzIsNiArODksOCBAQCBzdGF0aWMgaW5saW5lIGludCBwdl92Y3B1X2luaXRp YWxpc2Uoc3RydWN0IHZjcHUgKnYpIHsgcmV0dXJuIC1FT1BOT1RTVVBQOyB9 CiBzdGF0aWMgaW5saW5lIHZvaWQgcHZfZG9tYWluX2Rlc3Ryb3koc3RydWN0 IGRvbWFpbiAqZCkge30KIHN0YXRpYyBpbmxpbmUgaW50IHB2X2RvbWFpbl9p bml0aWFsaXNlKHN0cnVjdCBkb21haW4gKmQpIHsgcmV0dXJuIC1FT1BOT1RT VVBQOyB9CiAKK3N0YXRpYyBpbmxpbmUgdW5zaWduZWQgbG9uZyBwdl9tYWtl X2NyNChjb25zdCBzdHJ1Y3QgdmNwdSAqdikgeyByZXR1cm4gfjB1bDsgfQor CiAjZW5kaWYJLyogQ09ORklHX1BWICovCiAKIHZvaWQgcGFyYXZpcnRfY3R4 dF9zd2l0Y2hfZnJvbShzdHJ1Y3QgdmNwdSAqdik7Cg== --=separator Content-Type: application/octet-stream; name="xsa293/unstable-2.patch" Content-Disposition: attachment; filename="xsa293/unstable-2.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeDg2L3B2OiBEb24ndCBoYXZlICVjcjQuZnNnc2Jhc2Ug YWN0aXZlIGJlaGluZCBhIGd1ZXN0IGtlcm5lbHMgYmFjawoKQ3VycmVudGx5 LCBhIDY0Yml0IFBWIGd1ZXN0IGNhbiBhcHBlYXIgdG8gc2V0IGFuZCBjbGVh ciBGU0dTQkFTRSBpbiAlY3I0LCBidXQKdGhlIGJpdCByZW1haW5zIHNldCBp biBoYXJkd2FyZS4gIFRoZXJlZm9yZSwgdGhlIHtSRCxXUn17RlMsR1N9QkFT RSBhcmUgdXNhYmxlCmV2ZW4gd2hlbiB0aGUgZ3Vlc3Qga2VybmVsIGJlbGll dmVzIHRoYXQgdGhleSBhcmUgZGlzYWJsZWQuCgpUaGUgRlNHU0JBU0UgZmVh dHVyZSBpc24ndCBjdXJyZW50bHkgc3VwcG9ydGVkIGluIExpbnV4LCBhbmQg aXRzIGNvbnRleHQKc3dpdGNoIHBhdGggaGFzIHNvbWUgb3B0aW1pc2F0aW9u cyB3aGljaCByZWx5IG9uIHVzZXJzcGFjZSBiZWluZyB1bmFibGUgdG8gdXNl CnRoZSBXUntGUyxHU31CQVNFIGluc3RydWN0aW9ucy4gIFhlbidzIGN1cnJl bnQgYmVoYXZpb3VyIHVuZGVybWluZXMgdGhpcwpleHBlY3RhdGlvbi4KCklu IDY0Yml0IFBWIGd1ZXN0IGNvbnRleHQsIGFsd2F5cyBsb2FkIHRoZSBndWVz dCBrZXJuZWxzIHNldHRpbmcgb2YgRlNHU0JBU0UKaW50byAlY3I0LiAgVGhp cyByZXF1aXJlcyBhZGp1c3RpbmcgaG93IFhlbiB1c2VzIHRoZSB7UkQsV1J9 e0ZTLEdTfUJBU0UKaW5zdHJ1Y3Rpb25zLgoKICogRGVsZXRlIHRoZSBjcHVf aGFzX2ZzZ3NiYXNlIGhlbHBlci4gIEl0IGlzIG5vIGxvbmdlciBzYWZlLCBh cyB1c2VycyBuZWVkIHRvCiAgIGNoZWNrICVjcjQgZGlyZWN0bHkuCiAqIFRo ZSByYXcgX19yZHtmcyxnc31iYXNlKCkgaGVscGVycyBhcmUgb25seSBzYWZl IHRvIHVzZSB3aGVuICVjcjQuZnNnc2Jhc2UKICAgaXMgc2V0LiAgQ29tbWVu dCB0aGlzIHByb3BlcnR5LgogKiBUaGUge3JkLHdyfXtmcyxnc317YmFzZSxz aGFkb3d9KCkgYW5kIHJlYWRfbXNyKCkgaGVscGVycyBhcmUgdXBkYXRlZCB0 byB1c2UKICAgdGhlIGN1cnJlbnQgJWNyNCB2YWx1ZSB0byBkZXRlcm1pbmUg d2hpY2ggbWVjaGFuaXNtIHRvIHVzZS4KICogdG9nZ2xlX2d1ZXN0X21vZGUo KSBhbmQgc2F2ZV9zZWdtZW50cygpIGFyZSB1cGRhdGUgdG8gYXZvaWQgcmVh ZGluZwogICBmcy9nc2Jhc2UgaWYgdGhlIHZhbHVlcyBpbiBoYXJkd2FyZSBj YW5ub3QgYmUgc3RhbGUgV1JUIHN0cnVjdCB2Y3B1LiAgQQogICBjb25zZXF1 ZW5jZSBvZiB0aGlzIGlzIHRoYXQgdGhlIHdyaXRlX2NyKCkgcGF0aCBuZWVk cyB0byBjYWNoZSB0aGUgY3VycmVudAogICBiYXNlcywgYXMgc3Vic2VxdWVu dCBjb250ZXh0IHN3aXRjaGVzIHdpbGwgc2tpcCBzYXZpbmcgdGhlIHZhbHVl cy4KICogd3JpdGVfY3I0KCkgaXMgdXBkYXRlZCB0byBlbnN1cmUgdGhhdCB0 aGUgc2hhZG93ICVjcjQuZnNnc2Jhc2UgdmFsdWUgaXMKICAgb2JzZXJ2ZWQg aW4gYSBzYWZlIHdheSBXUlQgdGhlIGhhcmR3YXJlIHNldHRpbmcsIGlmIGFu IGludGVycnVwdCBoYXBwZW5zIHRvCiAgIGhpdCBpbiB0aGUgbWlkZGxlLgog KiBsb2FkX3NlZ21lbnRzKCkgaXMgdXBkYXRlZCB0byB1c2UgdGhlIFZNTE9B RCBvcHRpbWlzYXRpb24gaWYgRlNHU0JBU0UgaXMKICAgdW5hdmFpbGFibGUs IGV2ZW4gaWYgb25seSBnc19zaGFkb3cgbmVlZHMgdXBkYXRpbmcuICBBcyBh IG1pbm9yIHBlcmYKICAgaW1wcm92ZW1lbnQsIGNoZWNrIGNwdV9oYXNfc3Zt IGZpcnN0IHRvIHNob3J0IGNpcmN1aXQgYSBjb250ZXh0LWRlcGVuZGVudAog ICBjb25kaXRpb25hbCBvbiBJbnRlbCBoYXJkd2FyZS4KICogcHZfbWFrZV9j cjQoKSBpcyB1cGRhdGVkIGZvciA2NGJpdCBQViBndWVzdHMgdG8gdXNlIHRo ZSBndWVzdCBrZXJuZWxzCiAgIGNob2ljZSBvZiBGU0dTQkFTRS4KClRoaXMg aXMgcGFydCBvZiBYU0EtMjkzCgpSZXBvcnRlZC1ieTogQW5keSBMdXRvbWly c2tpIDxsdXRvQGtlcm5lbC5vcmc+ClNpZ25lZC1vZmYtYnk6IEFuZHJldyBD b29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5 OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+CgpkaWZmIC0tZ2l0 IGEveGVuL2FyY2gveDg2L2RvbWFpbi5jIGIveGVuL2FyY2gveDg2L2RvbWFp bi5jCmluZGV4IDdmZjBmMTAuLmFkZWUzNWUgMTAwNjQ0Ci0tLSBhL3hlbi9h cmNoL3g4Ni9kb21haW4uYworKysgYi94ZW4vYXJjaC94ODYvZG9tYWluLmMK QEAgLTEzMDMsMTMgKzEzMDMsOCBAQCBzdGF0aWMgdm9pZCBsb2FkX3NlZ21l bnRzKHN0cnVjdCB2Y3B1ICpuKQogICAgIHBlcl9jcHUoZGlydHlfc2VnbWVu dF9tYXNrLCBjcHUpID0gMDsKIAogI2lmZGVmIENPTkZJR19IVk0KLSAgICBp ZiAoICFpc19wdl8zMmJpdF92Y3B1KG4pICYmICFjcHVfaGFzX2ZzZ3NiYXNl ICYmIGNwdV9oYXNfc3ZtICYmCi0gICAgICAgICAhKCh1cmVncy0+ZnMgfCB1 cmVncy0+Z3MpICYgfjMpICYmCi0gICAgICAgICAvKgotICAgICAgICAgICog VGhlIHJlbWFpbmluZyBwYXJ0IGlzIGp1c3QgZm9yIG9wdGltaXphdGlvbjog SWYgb25seSBzaGFkb3cgR1MKLSAgICAgICAgICAqIG5lZWRzIGxvYWRpbmcs IHRoZXJlJ3Mgbm90aGluZyB0byBiZSBnYWluZWQgaGVyZS4KLSAgICAgICAg ICAqLwotICAgICAgICAgKG4tPmFyY2gucHYuZnNfYmFzZSB8IG4tPmFyY2gu cHYuZ3NfYmFzZV91c2VyIHwgbi0+YXJjaC5wdi5sZHRfZW50cykgKQorICAg IGlmICggY3B1X2hhc19zdm0gJiYgIWlzX3B2XzMyYml0X3ZjcHUobikgJiYK KyAgICAgICAgICEocmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UpICYm ICEoKHVyZWdzLT5mcyB8IHVyZWdzLT5ncykgJiB+MykgKQogICAgIHsKICAg ICAgICAgdW5zaWduZWQgbG9uZyBnc2IgPSBuLT5hcmNoLmZsYWdzICYgVEZf a2VybmVsX21vZGUKICAgICAgICAgICAgID8gbi0+YXJjaC5wdi5nc19iYXNl X2tlcm5lbCA6IG4tPmFyY2gucHYuZ3NfYmFzZV91c2VyOwpAQCAtMTQ4OCw3 ICsxNDgzLDggQEAgc3RhdGljIHZvaWQgc2F2ZV9zZWdtZW50cyhzdHJ1Y3Qg dmNwdSAqdikKICAgICByZWdzLT5mcyA9IHJlYWRfc3JlZyhmcyk7CiAgICAg cmVncy0+Z3MgPSByZWFkX3NyZWcoZ3MpOwogCi0gICAgaWYgKCBjcHVfaGFz X2ZzZ3NiYXNlICYmICFpc19wdl8zMmJpdF92Y3B1KHYpICkKKyAgICAvKiAl ZnMvJWdzIGJhc2VzIGNhbiBvbmx5IGJlIHN0YWxlIGlmIFdSe0ZTLEdTfUJB U0UgYXJlIHVzYWJsZS4gKi8KKyAgICBpZiAoIChyZWFkX2NyNCgpICYgWDg2 X0NSNF9GU0dTQkFTRSkgJiYgIWlzX3B2XzMyYml0X3ZjcHUodikgKQogICAg IHsKICAgICAgICAgdi0+YXJjaC5wdi5mc19iYXNlID0gX19yZGZzYmFzZSgp OwogICAgICAgICBpZiAoIHYtPmFyY2guZmxhZ3MgJiBURl9rZXJuZWxfbW9k ZSApCkBAIC0xNjkyLDggKzE2ODgsOCBAQCBzdGF0aWMgdm9pZCBfX2NvbnRl eHRfc3dpdGNoKHZvaWQpCiAKICNpZiBkZWZpbmVkKENPTkZJR19QVikgJiYg ZGVmaW5lZChDT05GSUdfSFZNKQogICAgIC8qIFByZWZldGNoIHRoZSBWTUNC IGlmIHdlIGV4cGVjdCB0byB1c2UgaXQgbGF0ZXIgaW4gdGhlIGNvbnRleHQg c3dpdGNoICovCi0gICAgaWYgKCBpc19wdl9kb21haW4obmQpICYmICFpc19w dl8zMmJpdF9kb21haW4obmQpICYmICFpc19pZGxlX2RvbWFpbihuZCkgJiYK LSAgICAgICAgICFjcHVfaGFzX2ZzZ3NiYXNlICYmIGNwdV9oYXNfc3ZtICkK KyAgICBpZiAoIGNwdV9oYXNfc3ZtICYmIGlzX3B2X2RvbWFpbihuZCkgJiYg IWlzX3B2XzMyYml0X2RvbWFpbihuZCkgJiYKKyAgICAgICAgICFpc19pZGxl X2RvbWFpbihuZCkgJiYgIShyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFT RSkgKQogICAgICAgICBzdm1fbG9hZF9zZWdzKDAsIDAsIDAsIDAsIDAsIDAs IDApOwogI2VuZGlmCiAKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9odm0v c3ZtL3N2bS5jIGIveGVuL2FyY2gveDg2L2h2bS9zdm0vc3ZtLmMKaW5kZXgg MjU4NGI5MC4uMjNkNzJlOCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L2h2 bS9zdm0vc3ZtLmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS9zdm0vc3ZtLmMK QEAgLTE1NzQsOCArMTU3NCw3IEBAIHN0YXRpYyBpbnQgc3ZtX2NwdV91cF9w cmVwYXJlKHVuc2lnbmVkIGludCBjcHUpCiAgICAgICAgICAgICBnb3RvIGVy cjsKIAogI2lmZGVmIENPTkZJR19QVgotICAgICAgICBpZiAoICFjcHVfaGFz X2ZzZ3NiYXNlICkKLSAgICAgICAgICAgIHBlcl9jcHUoaG9zdF92bWNiX3Zh LCBjcHUpID0gX19tYXBfZG9tYWluX3BhZ2VfZ2xvYmFsKHBnKTsKKyAgICAg ICAgcGVyX2NwdShob3N0X3ZtY2JfdmEsIGNwdSkgPSBfX21hcF9kb21haW5f cGFnZV9nbG9iYWwocGcpOwogI2VuZGlmCiAKICAgICAgICAgY2xlYXJfZG9t YWluX3BhZ2UocGFnZV90b19tZm4ocGcpKTsKZGlmZiAtLWdpdCBhL3hlbi9h cmNoL3g4Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4u YwppbmRleCA5MTEyM2E4Li4zZTgyY2ZmIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvcHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFp bi5jCkBAIC0xNDAsNiArMTQwLDE1IEBAIHVuc2lnbmVkIGxvbmcgcHZfbWFr ZV9jcjQoY29uc3Qgc3RydWN0IHZjcHUgKnYpCiAgICAgaWYgKCBkLT5hcmNo LnZ0c2MgfHwgKHYtPmFyY2gucHYuY3RybHJlZ1s0XSAmIFg4Nl9DUjRfVFNE KSApCiAgICAgICAgIGNyNCB8PSBYODZfQ1I0X1RTRDsKIAorICAgIC8qCisg ICAgICogVGhlIHtSRCxXUn17RlMsR1N9QkFTRSBhcmUgb25seSB1c2VhYmxl IGluIDY0Yml0IGNvZGUgc2VnbWVudHMuICBXaGlsZQorICAgICAqIHdlIG11 c3Qgbm90IGhhdmUgQ1I0LkZTR1NCQVNFIHNldCBiZWhpbmQgdGhlIGJhY2sg b2YgYSA2NGJpdCBQViBrZXJuZWwsCisgICAgICogd2UgZG8gbGVhdmUgaXQg c2V0IGluIDMyYml0IFBWIGNvbnRleHQgdG8gc3BlZWQgdXAgWGVuJ3MgY29u dGV4dCBzd2l0Y2gKKyAgICAgKiBwYXRoLgorICAgICAqLworICAgIGlmICgg IWlzX3B2XzMyYml0X2RvbWFpbihkKSAmJiAhKHYtPmFyY2gucHYuY3RybHJl Z1s0XSAmIFg4Nl9DUjRfRlNHU0JBU0UpICkKKyAgICAgICAgY3I0ICY9IH5Y ODZfQ1I0X0ZTR1NCQVNFOworCiAgICAgcmV0dXJuIGNyNDsKIH0KIApAQCAt MzcxLDcgKzM4MCw4IEBAIHZvaWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0 IHZjcHUgKnYpCiB7CiAgICAgQVNTRVJUKCFpc19wdl8zMmJpdF92Y3B1KHYp KTsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgLyogJWZz LyVncyBiYXNlcyBjYW4gb25seSBiZSBzdGFsZSBpZiBXUntGUyxHU31CQVNF IGFyZSB1c2FibGUuICovCisgICAgaWYgKCByZWFkX2NyNCgpICYgWDg2X0NS NF9GU0dTQkFTRSApCiAgICAgewogICAgICAgICBpZiAoIHYtPmFyY2guZmxh Z3MgJiBURl9rZXJuZWxfbW9kZSApCiAgICAgICAgICAgICB2LT5hcmNoLnB2 LmdzX2Jhc2Vfa2VybmVsID0gX19yZGdzYmFzZSgpOwpkaWZmIC0tZ2l0IGEv eGVuL2FyY2gveDg2L3B2L2VtdWwtcHJpdi1vcC5jIGIveGVuL2FyY2gveDg2 L3B2L2VtdWwtcHJpdi1vcC5jCmluZGV4IGI0YTU2ZjkuLjM3NDZlMmEgMTAw NjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLXByaXYtb3AuYworKysg Yi94ZW4vYXJjaC94ODYvcHYvZW11bC1wcml2LW9wLmMKQEAgLTc4MCw2ICs3 ODAsMTcgQEAgc3RhdGljIGludCB3cml0ZV9jcih1bnNpZ25lZCBpbnQgcmVn LCB1bnNpZ25lZCBsb25nIHZhbCwKICAgICB9CiAKICAgICBjYXNlIDQ6IC8q IFdyaXRlIENSNCAqLworICAgICAgICAvKgorICAgICAgICAgKiBJZiB0aGlz IHdyaXRlIHdpbGwgZGlzYWJsZSBGU0dTQkFTRSwgcmVmcmVzaCBYZW4ncyBp ZGVhIG9mIHRoZQorICAgICAgICAgKiBndWVzdCBiYXNlcyBub3cgdGhhdCB0 aGV5IGNhbiBubyBsb25nZXIgY2hhbmdlLgorICAgICAgICAgKi8KKyAgICAg ICAgaWYgKCAoY3Vyci0+YXJjaC5wdi5jdHJscmVnWzRdICYgWDg2X0NSNF9G U0dTQkFTRSkgJiYKKyAgICAgICAgICAgICAhKHZhbCAmIFg4Nl9DUjRfRlNH U0JBU0UpICkKKyAgICAgICAgeworICAgICAgICAgICAgY3Vyci0+YXJjaC5w di5mc19iYXNlID0gX19yZGZzYmFzZSgpOworICAgICAgICAgICAgY3Vyci0+ YXJjaC5wdi5nc19iYXNlX2tlcm5lbCA9IF9fcmRnc2Jhc2UoKTsKKyAgICAg ICAgfQorCiAgICAgICAgIGN1cnItPmFyY2gucHYuY3RybHJlZ1s0XSA9IHB2 X2ZpeHVwX2d1ZXN0X2NyNChjdXJyLCB2YWwpOwogICAgICAgICB3cml0ZV9j cjQocHZfbWFrZV9jcjQoY3VycikpOwogICAgICAgICBjdHh0X3N3aXRjaF9s ZXZlbGxpbmcoY3Vycik7CkBAIC04MjgsMTQgKzgzOSwxNSBAQCBzdGF0aWMg aW50IHJlYWRfbXNyKHVuc2lnbmVkIGludCByZWcsIHVpbnQ2NF90ICp2YWws CiAgICAgY2FzZSBNU1JfRlNfQkFTRToKICAgICAgICAgaWYgKCBpc19wdl8z MmJpdF9kb21haW4oY3VycmQpICkKICAgICAgICAgICAgIGJyZWFrOwotICAg ICAgICAqdmFsID0gY3B1X2hhc19mc2dzYmFzZSA/IF9fcmRmc2Jhc2UoKSA6 IGN1cnItPmFyY2gucHYuZnNfYmFzZTsKKyAgICAgICAgKnZhbCA9IChyZWFk X2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZnNiYXNlKCkKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg OiBjdXJyLT5hcmNoLnB2LmZzX2Jhc2U7CiAgICAgICAgIHJldHVybiBYODZF TVVMX09LQVk7CiAKICAgICBjYXNlIE1TUl9HU19CQVNFOgogICAgICAgICBp ZiAoIGlzX3B2XzMyYml0X2RvbWFpbihjdXJyZCkgKQogICAgICAgICAgICAg YnJlYWs7Ci0gICAgICAgICp2YWwgPSBjcHVfaGFzX2ZzZ3NiYXNlID8gX19y ZGdzYmFzZSgpCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDog Y3Vyci0+YXJjaC5wdi5nc19iYXNlX2tlcm5lbDsKKyAgICAgICAgKnZhbCA9 IChyZWFkX2NyNCgpICYgWDg2X0NSNF9GU0dTQkFTRSkgPyBfX3JkZ3NiYXNl KCkKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgOiBjdXJyLT5hcmNoLnB2LmdzX2Jhc2Vfa2VybmVsOwogICAgICAg ICByZXR1cm4gWDg2RU1VTF9PS0FZOwogCiAgICAgY2FzZSBNU1JfU0hBRE9X X0dTX0JBU0U6CmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvc2V0dXAuYyBi L3hlbi9hcmNoL3g4Ni9zZXR1cC5jCmluZGV4IDkyZGEwNjAuLjM0NDA3OTQg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9zZXR1cC5jCisrKyBiL3hlbi9h cmNoL3g4Ni9zZXR1cC5jCkBAIC0xNjEwLDcgKzE2MTAsNyBAQCB2b2lkIF9f aW5pdCBub3JldHVybiBfX3N0YXJ0X3hlbih1bnNpZ25lZCBsb25nIG1iaV9w KQogCiAgICAgY3I0X3B2MzJfbWFzayA9IG1tdV9jcjRfZmVhdHVyZXMgJiBY RU5fQ1I0X1BWMzJfQklUUzsKIAotICAgIGlmICggY3B1X2hhc19mc2dzYmFz ZSApCisgICAgaWYgKCBib290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfRlNHU0JB U0UpICkKICAgICAgICAgc2V0X2luX2NyNChYODZfQ1I0X0ZTR1NCQVNFKTsK IAogICAgIGlmICggb3B0X2ludnBjaWQgJiYgY3B1X2hhc19pbnZwY2lkICkK ZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL2FzbS14ODYvY3B1ZmVhdHVyZS5o IGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVmZWF0dXJlLmgKaW5kZXggNTU5 MmUxNy4uMWZiOWFmNCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4 Ni9jcHVmZWF0dXJlLmgKKysrIGIveGVuL2luY2x1ZGUvYXNtLXg4Ni9jcHVm ZWF0dXJlLmgKQEAgLTg5LDcgKzg5LDYgQEAKICNkZWZpbmUgY3B1X2hhc194 c2F2ZXMgICAgICAgICAgYm9vdF9jcHVfaGFzKFg4Nl9GRUFUVVJFX1hTQVZF UykKIAogLyogQ1BVSUQgbGV2ZWwgMHgwMDAwMDAwNzowLmVieCAqLwotI2Rl ZmluZSBjcHVfaGFzX2ZzZ3NiYXNlICAgICAgICBib290X2NwdV9oYXMoWDg2 X0ZFQVRVUkVfRlNHU0JBU0UpCiAjZGVmaW5lIGNwdV9oYXNfYm1pMSAgICAg ICAgICAgIGJvb3RfY3B1X2hhcyhYODZfRkVBVFVSRV9CTUkxKQogI2RlZmlu ZSBjcHVfaGFzX2hsZSAgICAgICAgICAgICBib290X2NwdV9oYXMoWDg2X0ZF QVRVUkVfSExFKQogI2RlZmluZSBjcHVfaGFzX2F2eDIgICAgICAgICAgICBi b290X2NwdV9oYXMoWDg2X0ZFQVRVUkVfQVZYMikKZGlmZiAtLWdpdCBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmggYi94ZW4vaW5jbHVkZS9hc20teDg2 L21zci5oCmluZGV4IGFkZmEyZmEuLmE3MjQ0NzkgMTAwNjQ0Ci0tLSBhL3hl bi9pbmNsdWRlL2FzbS14ODYvbXNyLmgKKysrIGIveGVuL2luY2x1ZGUvYXNt LXg4Ni9tc3IuaApAQCAtMTI0LDYgKzEyNCwxNCBAQCBzdGF0aWMgaW5saW5l IHVpbnQ2NF90IHJkdHNjX29yZGVyZWQodm9pZCkKIAkJCSAgOiAiPWEiIChs b3cpLCAiPWQiIChoaWdoKSBcCiAJCQkgIDogImMiIChjb3VudGVyKSkKIAor LyoKKyAqIE9uIGhhcmR3YXJlIHN1cHBvcnRpbmcgRlNHU0JBU0UsIHRoZSB2 YWx1ZSBsb2FkZWQgaW50byBoYXJkd2FyZSBpcyB0aGUKKyAqIGd1ZXN0IGtl cm5lbCdzIGNob2ljZSBmb3IgNjRiaXQgUFYgZ3Vlc3RzIChYZW4ncyBjaG9p Y2UgZm9yIElkbGUsIEhWTSBhbmQKKyAqIDMyYml0IFBWKS4KKyAqCisgKiBU aGVyZWZvcmUsIHRoZSB7UkQsV1J9e0ZTLEdTfUJBU0UgaW5zdHJ1Y3Rpb25z IGFyZSBvbmx5IHNhZmUgdG8gdXNlIGlmCisgKiAlY3I0LmZzZ3NiYXNlIGlz IHNldC4KKyAqLwogc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25nIF9fcmRm c2Jhc2Uodm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJhc2U7CkBAIC0x NTQsNyArMTYyLDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25nIHJk ZnNiYXNlKHZvaWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwogCi0g ICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRfY3I0 KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICAgICAgcmV0dXJuIF9fcmRm c2Jhc2UoKTsKIAogICAgIHJkbXNybChNU1JfRlNfQkFTRSwgYmFzZSk7CkBA IC0xNjYsNyArMTc0LDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBsb25n IHJkZ3NiYXNlKHZvaWQpCiB7CiAgICAgdW5zaWduZWQgbG9uZyBiYXNlOwog Ci0gICAgaWYgKCBjcHVfaGFzX2ZzZ3NiYXNlICkKKyAgICBpZiAoIHJlYWRf Y3I0KCkgJiBYODZfQ1I0X0ZTR1NCQVNFICkKICAgICAgICAgcmV0dXJuIF9f cmRnc2Jhc2UoKTsKIAogICAgIHJkbXNybChNU1JfR1NfQkFTRSwgYmFzZSk7 CkBAIC0xNzgsNyArMTg2LDcgQEAgc3RhdGljIGlubGluZSB1bnNpZ25lZCBs b25nIHJkZ3NzaGFkb3codm9pZCkKIHsKICAgICB1bnNpZ25lZCBsb25nIGJh c2U7CiAKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlmICgg cmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogICAgIHsKICAgICAg ICAgYXNtIHZvbGF0aWxlICggInN3YXBncyIgKTsKICAgICAgICAgYmFzZSA9 IF9fcmRnc2Jhc2UoKTsKQEAgLTE5Miw3ICsyMDAsNyBAQCBzdGF0aWMgaW5s aW5lIHVuc2lnbmVkIGxvbmcgcmRnc3NoYWRvdyh2b2lkKQogCiBzdGF0aWMg aW5saW5lIHZvaWQgd3Jmc2Jhc2UodW5zaWduZWQgbG9uZyBiYXNlKQogewot ICAgIGlmICggY3B1X2hhc19mc2dzYmFzZSApCisgICAgaWYgKCByZWFkX2Ny NCgpICYgWDg2X0NSNF9GU0dTQkFTRSApCiAjaWZkZWYgSEFWRV9BU19GU0dT QkFTRQogICAgICAgICBhc20gdm9sYXRpbGUgKCAid3Jmc2Jhc2UgJTAiIDo6 ICJyIiAoYmFzZSkgKTsKICNlbHNlCkBAIC0yMDQsNyArMjEyLDcgQEAgc3Rh dGljIGlubGluZSB2b2lkIHdyZnNiYXNlKHVuc2lnbmVkIGxvbmcgYmFzZSkK IAogc3RhdGljIGlubGluZSB2b2lkIHdyZ3NiYXNlKHVuc2lnbmVkIGxvbmcg YmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jhc2UgKQorICAgIGlm ICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0UgKQogI2lmZGVmIEhB VkVfQVNfRlNHU0JBU0UKICAgICAgICAgYXNtIHZvbGF0aWxlICggIndyZ3Ni YXNlICUwIiA6OiAiciIgKGJhc2UpICk7CiAjZWxzZQpAQCAtMjE2LDcgKzIy NCw3IEBAIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdzYmFzZSh1bnNpZ25lZCBs b25nIGJhc2UpCiAKIHN0YXRpYyBpbmxpbmUgdm9pZCB3cmdzc2hhZG93KHVu c2lnbmVkIGxvbmcgYmFzZSkKIHsKLSAgICBpZiAoIGNwdV9oYXNfZnNnc2Jh c2UgKQorICAgIGlmICggcmVhZF9jcjQoKSAmIFg4Nl9DUjRfRlNHU0JBU0Ug KQogICAgIHsKICAgICAgICAgYXNtIHZvbGF0aWxlICggInN3YXBnc1xuXHQi CiAjaWZkZWYgSEFWRV9BU19GU0dTQkFTRQpkaWZmIC0tZ2l0IGEveGVuL2lu Y2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaCBiL3hlbi9pbmNsdWRlL2FzbS14 ODYvcHJvY2Vzc29yLmgKaW5kZXggZGYwMWFlMy4uZjMyNzVjYSAxMDA2NDQK LS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9wcm9jZXNzb3IuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L3Byb2Nlc3Nvci5oCkBAIC0zMDQsMTEgKzMw NCwzMSBAQCBzdGF0aWMgaW5saW5lIHVuc2lnbmVkIGxvbmcgcmVhZF9jcjQo dm9pZCkKIAogc3RhdGljIGlubGluZSB2b2lkIHdyaXRlX2NyNCh1bnNpZ25l ZCBsb25nIHZhbCkKIHsKKyAgICBzdHJ1Y3QgY3B1X2luZm8gKmluZm8gPSBn ZXRfY3B1X2luZm8oKTsKKwogICAgIC8qIE5vIGdsb2JhbCBwYWdlcyBpbiBj YXNlIG9mIFBDSURzIGVuYWJsZWQhICovCiAgICAgQVNTRVJUKCEodmFsICYg WDg2X0NSNF9QR0UpIHx8ICEodmFsICYgWDg2X0NSNF9QQ0lERSkpOwogCi0g ICAgZ2V0X2NwdV9pbmZvKCktPmNyNCA9IHZhbDsKLSAgICBhc20gdm9sYXRp bGUgKCAibW92ICUwLCUlY3I0IiA6IDogInIiICh2YWwpICk7CisgICAgLyoK KyAgICAgKiBPbiBoYXJkd2FyZSBzdXBwb3J0aW5nIEZTR1NCQVNFLCB0aGUg dmFsdWUgaW4gJWNyNCBpcyB0aGUga2VybmVsJ3MKKyAgICAgKiBjaG9pY2Ug Zm9yIDY0Yml0IFBWIGd1ZXN0cywgd2hpY2ggaW1wYWN0cyB3aGV0aGVyIFhl biBjYW4gdXNlIHRoZQorICAgICAqIGluc3RydWN0aW9ucy4KKyAgICAgKgor ICAgICAqIFRoZSB7cmQsd3J9e2ZzLGdzfWJhc2UoKSBoZWxwZXJzIHVzZSBp bmZvLT5jcjQgdG8gd29yayBvdXQgd2hldGhlciBpdAorICAgICAqIGlzIHNh ZmUgdG8gZXhlY3V0ZSB0aGUge1JELFdSfXtGUyxHU31CQVNFIGluc3RydWN0 aW9uLCBmYWxsaW5nIGJhY2sgdG8KKyAgICAgKiB0aGUgTVNSIHBhdGggaWYg bm90LiAgU29tZSB1c2VycyByZXF1aXJlIGludGVycnVwdCBzYWZldHkuCisg ICAgICoKKyAgICAgKiBJZiBGU0dTQkFTRSBpcyBjdXJyZW50bHkgb3IgYWJv dXQgdG8gYmVjb21lIGNsZWFyLCByZWZsZWN0IHRoaXMgaW4KKyAgICAgKiBp bmZvLT5jcjQgYmVmb3JlIHVwZGF0aW5nICVjcjQsIHNvIGFuIGludGVycnVw dCB3aGljaCBoaXRzIGluIHRoZQorICAgICAqIG1pZGRsZSB3b24ndCBvYnNl cnZlIEZTR1NCQVNFIHNldCBpbiBpbmZvLT5jcjQgYnV0IGNsZWFyIGluICVj cjQuCisgICAgICovCisgICAgaW5mby0+Y3I0ID0gdmFsICYgKGluZm8tPmNy NCB8IH5YODZfQ1I0X0ZTR1NCQVNFKTsKKworICAgIGFzbSB2b2xhdGlsZSAo ICJtb3YgJVt2YWxdLCAlJWNyNCIKKyAgICAgICAgICAgICAgICAgICA6ICIr bSIgKGluZm8tPmNyNCkgLyogRm9yY2Ugb3JkZXJpbmcgd2l0aG91dCBhIGJh cnJpZXIuICovCisgICAgICAgICAgICAgICAgICAgOiBbdmFsXSAiciIgKHZh bCkgKTsKKworICAgIGluZm8tPmNyNCA9IHZhbDsKIH0KIAogLyogQ2xlYXIg YW5kIHNldCAnVFMnIGJpdCByZXNwZWN0aXZlbHkgKi8K --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:11:45 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:11:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVQ-0002YQ-8B; Fri, 25 Oct 2019 11:11:44 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVO-0002We-Fr for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:42 +0000 X-Inumbo-ID: 18f7354c-f718-11e9-94c5-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 18f7354c-f718-11e9-94c5-12813bfff9fa; Fri, 25 Oct 2019 11:10:48 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUP-0001XO-U2; Fri, 25 Oct 2019 11:10:41 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUP-0002nr-RQ; Fri, 25 Oct 2019 11:10:41 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:41 +0000 Subject: [Xen-announce] Xen Security Advisory 294 v3 (CVE-2019-17348) - x86 shadow: Insufficient TLB flushing when using PCID X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17348 / XSA-294 version 3 x86 shadow: Insufficient TLB flushing when using PCID UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= Use of Process Context Identifiers (PCID) was introduced into Xen in order to improve performance after XSA-254 (and in particular its Meltdown sub-issue). This enablement implied changes to the TLB flushing logic. One aspect which was overlooked is the safety of switching between shadow pagetables, which previously relied on the unconditional flushing of a write to CR3. With PCID enabled, a switch of shadow pagetable for a 64bit PV guest fails to invalidate the linear mappings of the previous shadow pagetable. As a result, subsequent accesses to the shadow pagetables may be deemed to be safe by the shadow logic (based on the old shadow pagetable) but fault when made in practice. IMPACT ====== Malicious 64bit PV guests may be able to cause a host crash (Denial of Service). Additionally, vulnerable configurations are unstable even in the absence of an attack. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems running 64-bit x86 PV guests are vulnerable. Systems running only x86 HVM or PVH or 32bit PV guests are not vulnerable. Only systems with at least one PCID-enabled PV guest are vulnerable. Systems where PCID or INVPCID are unavailable or entirely disabled are not vulnerable. Note that PCID is enabled by default for both 64-bit dom0 and 64-bit domU when hardware supports it. PCID acceleration has been backported to the following versions: - Xen 4.11.x, - Xen 4.10.2 and onwards, - Xen 4.9.3 and onwards, - Xen 4.8.4 and onwards, - Xen 4.7.6. MITIGATION ========== Running only HVM or PVH guests will avoid this vulnerability. Disabling use of PCID entirely, by passing "pcid=0" or "invpcid=0" as a command line option to the hypervisor, will also avoid this vulnerability (albeit re-introducing the XPTI performance regression use of PCID was intended to reduce). CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa294/unstable.patch xen-unstable xsa294/4.11.patch Xen 4.11.x xsa294/4.10.patch Xen 4.10.x xsa294/4.9.patch Xen 4.9.x xsa294/4.8.patch Xen 4.8.x xsa294/4.7.patch Xen 4.7.x $ sha256sum xsa294*/* c10b7b79a2067cc6d95e40bc78ee8fddaf31f8614bb183fdd5f00e4272e08a0e xsa294/4.7.patch 3ac1c3caf01feaf341e977fcbae691f2e4425aa9691f2dfa66795acfe823d76e xsa294/4.8.patch a8dfc8b2d2f0d0865b70fb0051f9d5a80a6c7456d004957a0155d989ec875611 xsa294/4.9.patch c6fe1e0173b665a88cbab423737dcb060eed1f634f9bca880d9ddfa2ac855d03 xsa294/4.10.patch 61a341510f45c0cf63a7438645f5c2b3ab1cd72bc2476e5fad331e322f834f4a xsa294/4.11.patch 1fb22eab53f9b1e93fc25f5a08d37121a9278854174f1fbd495b3fe6e8babf3a xsa294/unstable.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y1/cMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZH54H/iShmv1F1GDALKhJJdm+BOEtyVy+ZCFU5Atn97dV 3Bm+3BtX1Nfcd1pnLdzQs0ocasw+FSp0Swq93nrpM8hPK9ze4aAKwo/Srhf/WV2/ V9N5lKwxCUub6p2QbAcqj//zLxv0llkhduVGzV9/NXOzeLn5Rp2Af/rgSchQ4QHp oEdHXNV93Pm1pi4NpCu8uXQAW4Mp7rRiWJPuBkuJDhgVftXItSNMc6jLunJS581X z+3SmLpfF3IDVpa5GqjtFJ3Exk9DJe4oYHZPmb2qwJTsfV20emIc/7mARGErgdwT jpRjss41gJX1l41zRF9mwKPc1qPW6Rc9xgh6q1jrjY1CCvk= =TV/a -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa294/4.7.patch" Content-Disposition: attachment; filename="xsa294/4.7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCA1NmVkMTU2Li5lZTFmNDA4IDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMCw2ICsyMCw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgwLDYgKzI4MSw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI4OCwxNiArMjkxLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IDE7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3BhKHRo aXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgMSkgOiAwKTsKICAgICB9 CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBm cm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwotICAgIHdy aXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBEb24ndCBm bHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIuIERvbid0 IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hhZG93IG1v ZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJlIGFjY29t cGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0IHRoZSBp bmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRhYmxlIG1h eQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tzLiBUbyBi ZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAgKiBuby1m bHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUgWFBUSSBD UjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVuIG5lZWQg dG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAgIGNyMyA9 IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5hYmxlZChk KSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9GTFVTSDsK KyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19OT0ZMVVNI OworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlmICggISh2 LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAgICAgcmV0 dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.8.patch" Content-Disposition: attachment; filename="xsa294/4.8.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCAzOTZlNjc3Li45OWU5OTViIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMSw2ICsyMSw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgyLDYgKzI4Myw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI5MCwxNiArMjkzLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3Bh KHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1ZSkgOiAwKTsK ICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBw aW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwot ICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBE b24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIu IERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hh ZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJl IGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0 IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRh YmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tz LiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAg KiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUg WFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVu IG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAg IGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5h YmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9G TFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19O T0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlm ICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAg ICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.9.patch" Content-Disposition: attachment; filename="xsa294/4.9.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni94ODZfNjQvdHJhcHMuYyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvdHJhcHMu YwppbmRleCA4YTA2YjIxLi4wNTA5YmU0IDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYveDg2XzY0L3RyYXBzLmMKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82 NC90cmFwcy5jCkBAIC0yMCw2ICsyMCw3IEBACiAjaW5jbHVkZSA8YXNtL2V2 ZW50Lmg+CiAjaW5jbHVkZSA8YXNtL21zci5oPgogI2luY2x1ZGUgPGFzbS9w YWdlLmg+CisjaW5jbHVkZSA8YXNtL3NoYWRvdy5oPgogI2luY2x1ZGUgPGFz bS9zaGFyZWQuaD4KICNpbmNsdWRlIDxhc20vaHZtL2h2bS5oPgogI2luY2x1 ZGUgPGFzbS9odm0vc3VwcG9ydC5oPgpAQCAtMjgxLDYgKzI4Miw4IEBAIHZv aWQgdG9nZ2xlX2d1ZXN0X21vZGUoc3RydWN0IHZjcHUgKnYpCiB2b2lkIHRv Z2dsZV9ndWVzdF9wdChzdHJ1Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluICpkID0gdi0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVf aW5mbyAqY3B1X2luZm8gPSBnZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25l ZCBsb25nIGNyMzsKIAogICAgIGlmICggaXNfcHZfMzJiaXRfdmNwdSh2KSAp CiAgICAgICAgIHJldHVybjsKQEAgLTI4OSwxNiArMjkyLDI4IEBAIHZvaWQg dG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1ICp2KQogICAgIHVwZGF0ZV9j cjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54cHRpICkKICAg ICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBnZXRf Y3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9vdF9wZ3RfY2hh bmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgPSBfX3Bh KHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1ZSkgOiAwKTsK ICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBw aW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLiAqLwot ICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoKKyAgICAgKiBE b24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIu IERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAgICogSW4gc2hh ZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBuZWVkIHRvIGJl IGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2ggKGZvciBqdXN0 IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZlbCBwYWdlIHRh YmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQgb3VyIGJhY2tz LiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0aGUKKyAgICAg KiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBjYXNlLiBUaGUg WFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICogd2lsbCB0aGVu IG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAgICAqLworICAg IGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93X21vZGVfZW5h YmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4Nl9DUjNfTk9G TFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+WDg2X0NSM19O T0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsKIAogICAgIGlm ICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUpICkKICAgICAg ICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/4.10.patch" Content-Disposition: attachment; filename="xsa294/4.10.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCA5NThjNmUzLi43OTczMTU1IDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0zMjAsNiArMzIwLDggQEAgdm9pZCB0b2dnbGVfZ3Vlc3RfbW9kZShzdHJ1 Y3QgdmNwdSAqdikKIHZvaWQgdG9nZ2xlX2d1ZXN0X3B0KHN0cnVjdCB2Y3B1 ICp2KQogewogICAgIGNvbnN0IHN0cnVjdCBkb21haW4gKmQgPSB2LT5kb21h aW47CisgICAgc3RydWN0IGNwdV9pbmZvICpjcHVfaW5mbyA9IGdldF9jcHVf aW5mbygpOworICAgIHVuc2lnbmVkIGxvbmcgY3IzOwogCiAgICAgaWYgKCBp c19wdl8zMmJpdF92Y3B1KHYpICkKICAgICAgICAgcmV0dXJuOwpAQCAtMzI4 LDE2ICszMzAsMjggQEAgdm9pZCB0b2dnbGVfZ3Vlc3RfcHQoc3RydWN0IHZj cHUgKnYpCiAgICAgdXBkYXRlX2NyMyh2KTsKICAgICBpZiAoIGQtPmFyY2gu cHZfZG9tYWluLnhwdGkgKQogICAgIHsKLSAgICAgICAgc3RydWN0IGNwdV9p bmZvICpjcHVfaW5mbyA9IGdldF9jcHVfaW5mbygpOwotCiAgICAgICAgIGNw dV9pbmZvLT5yb290X3BndF9jaGFuZ2VkID0gdHJ1ZTsKICAgICAgICAgY3B1 X2luZm8tPnB2X2NyMyA9IF9fcGEodGhpc19jcHUocm9vdF9wZ3QpKSB8CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAoZC0+YXJjaC5wdl9kb21haW4u cGNpZAogICAgICAgICAgICAgICAgICAgICAgICAgICAgID8gZ2V0X3BjaWRf Yml0cyh2LCB0cnVlKSA6IDApOwogICAgIH0KIAotICAgIC8qIERvbid0IGZs dXNoIHVzZXIgZ2xvYmFsIG1hcHBpbmdzIGZyb20gdGhlIFRMQi4gRG9uJ3Qg dGljayBUTEIgY2xvY2suICovCi0gICAgd3JpdGVfY3IzKHYtPmFyY2guY3Iz KTsKKyAgICAvKgorICAgICAqIERvbid0IGZsdXNoIHVzZXIgZ2xvYmFsIG1h cHBpbmdzIGZyb20gdGhlIFRMQi4gRG9uJ3QgdGljayBUTEIgY2xvY2suCisg ICAgICoKKyAgICAgKiBJbiBzaGFkb3cgbW9kZSwgdGhvdWdoLCB1cGRhdGVf Y3IzKCkgbWF5IG5lZWQgdG8gYmUgYWNjb21wYW5pZWQgYnkgYQorICAgICAq IFRMQiBmbHVzaCAoZm9yIGp1c3QgdGhlIGluY29taW5nIFBDSUQpLCBhcyB0 aGUgdG9wIGxldmVsIHBhZ2UgdGFibGUgbWF5CisgICAgICogaGF2ZSBjaGFu Z2VkIGJlaGluZCBvdXIgYmFja3MuIFRvIGJlIG9uIHRoZSBzYWZlIHNpZGUs IHN1cHByZXNzIHRoZQorICAgICAqIG5vLWZsdXNoIHVuY29uZGl0aW9uYWxs eSBpbiB0aGlzIGNhc2UuIFRoZSBYUFRJIENSMyB3cml0ZSwgaWYgZW5hYmxl ZCwKKyAgICAgKiB3aWxsIHRoZW4gbmVlZCB0byBiZSBhIGZsdXNoaW5nIG9u ZSB0b28uCisgICAgICovCisgICAgY3IzID0gdi0+YXJjaC5jcjM7CisgICAg aWYgKCBzaGFkb3dfbW9kZV9lbmFibGVkKGQpICkKKyAgICB7CisgICAgICAg IGNyMyAmPSB+WDg2X0NSM19OT0ZMVVNIOworICAgICAgICBjcHVfaW5mby0+ cHZfY3IzICY9IH5YODZfQ1IzX05PRkxVU0g7CisgICAgfQorICAgIHdyaXRl X2NyMyhjcjMpOwogCiAgICAgaWYgKCAhKHYtPmFyY2guZmxhZ3MgJiBURl9r ZXJuZWxfbW9kZSkgKQogICAgICAgICByZXR1cm47Cg== --=separator Content-Type: application/octet-stream; name="xsa294/4.11.patch" Content-Disposition: attachment; filename="xsa294/4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCBiNzVmZjZiLi41Mjg0MTNhIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0yOTYsMjEgKzI5NiwzNSBAQCBpbnQgcHZfZG9tYWluX2luaXRpYWxpc2Uo c3RydWN0IGRvbWFpbiAqZCkKIHN0YXRpYyB2b2lkIF90b2dnbGVfZ3Vlc3Rf cHQoc3RydWN0IHZjcHUgKnYpCiB7CiAgICAgY29uc3Qgc3RydWN0IGRvbWFp biAqZCA9IHYtPmRvbWFpbjsKKyAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9p bmZvID0gZ2V0X2NwdV9pbmZvKCk7CisgICAgdW5zaWduZWQgbG9uZyBjcjM7 CiAKICAgICB2LT5hcmNoLmZsYWdzIF49IFRGX2tlcm5lbF9tb2RlOwogICAg IHVwZGF0ZV9jcjModik7CiAgICAgaWYgKCBkLT5hcmNoLnB2X2RvbWFpbi54 cHRpICkKICAgICB7Ci0gICAgICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2lu Zm8gPSBnZXRfY3B1X2luZm8oKTsKLQogICAgICAgICBjcHVfaW5mby0+cm9v dF9wZ3RfY2hhbmdlZCA9IHRydWU7CiAgICAgICAgIGNwdV9pbmZvLT5wdl9j cjMgPSBfX3BhKHRoaXNfY3B1KHJvb3RfcGd0KSkgfAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgKGQtPmFyY2gucHZfZG9tYWluLnBjaWQKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA/IGdldF9wY2lkX2JpdHModiwgdHJ1 ZSkgOiAwKTsKICAgICB9CiAKLSAgICAvKiBEb24ndCBmbHVzaCB1c2VyIGds b2JhbCBtYXBwaW5ncyBmcm9tIHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNs b2NrLiAqLwotICAgIHdyaXRlX2NyMyh2LT5hcmNoLmNyMyk7CisgICAgLyoK KyAgICAgKiBEb24ndCBmbHVzaCB1c2VyIGdsb2JhbCBtYXBwaW5ncyBmcm9t IHRoZSBUTEIuIERvbid0IHRpY2sgVExCIGNsb2NrLgorICAgICAqCisgICAg ICogSW4gc2hhZG93IG1vZGUsIHRob3VnaCwgdXBkYXRlX2NyMygpIG1heSBu ZWVkIHRvIGJlIGFjY29tcGFuaWVkIGJ5IGEKKyAgICAgKiBUTEIgZmx1c2gg KGZvciBqdXN0IHRoZSBpbmNvbWluZyBQQ0lEKSwgYXMgdGhlIHRvcCBsZXZl bCBwYWdlIHRhYmxlIG1heQorICAgICAqIGhhdmUgY2hhbmdlZCBiZWhpbmQg b3VyIGJhY2tzLiBUbyBiZSBvbiB0aGUgc2FmZSBzaWRlLCBzdXBwcmVzcyB0 aGUKKyAgICAgKiBuby1mbHVzaCB1bmNvbmRpdGlvbmFsbHkgaW4gdGhpcyBj YXNlLiBUaGUgWFBUSSBDUjMgd3JpdGUsIGlmIGVuYWJsZWQsCisgICAgICog d2lsbCB0aGVuIG5lZWQgdG8gYmUgYSBmbHVzaGluZyBvbmUgdG9vLgorICAg ICAqLworICAgIGNyMyA9IHYtPmFyY2guY3IzOworICAgIGlmICggc2hhZG93 X21vZGVfZW5hYmxlZChkKSApCisgICAgeworICAgICAgICBjcjMgJj0gflg4 Nl9DUjNfTk9GTFVTSDsKKyAgICAgICAgY3B1X2luZm8tPnB2X2NyMyAmPSB+ WDg2X0NSM19OT0ZMVVNIOworICAgIH0KKyAgICB3cml0ZV9jcjMoY3IzKTsK IAogICAgIGlmICggISh2LT5hcmNoLmZsYWdzICYgVEZfa2VybmVsX21vZGUp ICkKICAgICAgICAgcmV0dXJuOwo= --=separator Content-Type: application/octet-stream; name="xsa294/unstable.patch" Content-Disposition: attachment; filename="xsa294/unstable.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcHY6IF90b2dnbGVfZ3Vlc3RfcHQoKSBtYXkgbm90IHNraXAgVExC IGZsdXNoIGZvciBzaGFkb3cgbW9kZSBndWVzdHMKCkZvciBzaGFkb3cgbW9k ZSBndWVzdHMgKGUuZy4gUFYgb25lcyBmb3JjZWQgaW50byB0aGF0IG1vZGUg YXMgTDFURgptaXRpZ2F0aW9uLCBvciBkdXJpbmcgbWlncmF0aW9uKSB1cGRh dGVfY3IzKCkgLT4gc2hfdXBkYXRlX2NyMygpIG1heQpyZXN1bHQgaW4gYSBj aGFuZ2UgdG8gdGhlIChzaGFkb3cpIHJvb3QgcGFnZSB0YWJsZSAoY29tcGFy ZWQgdG8gdGhlCnByZXZpb3VzIG9uZSB3aGVuIHJ1bm5pbmcgdGhlIHNhbWUg dkNQVSB3aXRoIHRoZSBzYW1lIFBDSUQpLiBUaGlzIGNhbiwKZmlyc3QgYW5k IGZvcmVtb3N0LCBiZSBhIHJlc3VsdCBvZiBtZW1vcnkgcHJlc3N1cmUgb24g dGhlIHNoYWRvdyBtZW1vcnkKcG9vbCBvZiB0aGUgZG9tYWluLiBTaGFkb3cg Y29kZSBsZWdpdGltYXRlbHkgcmVsaWVzIG9uIHRoZSBvcmlnaW5hbAoocHJp b3IgdG8gY29tbWl0IDVjODFkMjYwYzIgWyJ4ZW4veDg2OiB1c2UgUENJRCBm ZWF0dXJlIl0pIGJlaGF2aW9yIG9mCnRoZSBzdWJzZXF1ZW50IENSMyB3cml0 ZSB0byBmbHVzaCB0aGUgVExCIG9mIGVudHJpZXMgc3RpbGwgbGVmdCBmcm9t CndhbGtzIHdpdGggYW4gZWFybGllciwgZGlmZmVyZW50IChzaGFkb3cpIHJv b3QgcGFnZSB0YWJsZS4KClJlc3RvcmUgdGhlIGZsdXNoaW5nIGJlaGF2aW9y LCBhbHNvIGZvciB0aGUgc2Vjb25kIENSMyB3cml0ZSBvbiB0aGUgZXhpdApw YXRoIHRvIGd1ZXN0IGNvbnRleHQgd2hlbiBYUFRJIGlzIGFjdGl2ZS4gRm9y IHRoZSBtb21lbnQgYWNjZXB0IHRoYXQKdGhpcyB3aWxsIGludHJvZHVjZSBt b3JlIGZsdXNoZXMgdGhhbiBhcmUgc3RyaWN0bHkgbmVjZXNzYXJ5IC0gbm8g Zmx1c2gKd291bGQgYmUgbmVlZGVkIHdoZW4gdGhlIChzaGFkb3cpIHJvb3Qg cGFnZSB0YWJsZSBkb2Vzbid0IGFjdHVhbGx5CmNoYW5nZSwgYnV0IHRoaXMg aW5mb3JtYXRpb24gaXNuJ3QgcmVhZGlseSAoaS5lLiB3aXRob3V0IGludHJv ZHVjaW5nIGEKbGF5ZXJpbmcgdmlvbGF0aW9uKSBhdmFpbGFibGUgaGVyZS4K ClRoaXMgaXMgWFNBLTI5NC4KClJlcG9ydGVkLWJ5OiBYWFggUEVSU09OIDxY WFggRU1BSUw+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGlj aEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcu Y29vcGVyM0BjaXRyaXguY29tPgoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9wdi9kb21haW4uYyBiL3hlbi9hcmNoL3g4Ni9wdi9kb21haW4uYwppbmRl eCA3ZTg0YjA0Li5iYWZiNzgyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYv cHYvZG9tYWluLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2RvbWFpbi5jCkBA IC0yOTUsMjAgKzI5NSwzNCBAQCBib29sIF9faW5pdCB4cHRpX3BjaWRfZW5h YmxlZCh2b2lkKQogc3RhdGljIHZvaWQgX3RvZ2dsZV9ndWVzdF9wdChzdHJ1 Y3QgdmNwdSAqdikKIHsKICAgICBjb25zdCBzdHJ1Y3QgZG9tYWluICpkID0g di0+ZG9tYWluOworICAgIHN0cnVjdCBjcHVfaW5mbyAqY3B1X2luZm8gPSBn ZXRfY3B1X2luZm8oKTsKKyAgICB1bnNpZ25lZCBsb25nIGNyMzsKIAogICAg IHYtPmFyY2guZmxhZ3MgXj0gVEZfa2VybmVsX21vZGU7CiAgICAgdXBkYXRl X2NyMyh2KTsKICAgICBpZiAoIGQtPmFyY2gucHYueHB0aSApCiAgICAgewot ICAgICAgICBzdHJ1Y3QgY3B1X2luZm8gKmNwdV9pbmZvID0gZ2V0X2NwdV9p bmZvKCk7Ci0KICAgICAgICAgY3B1X2luZm8tPnJvb3RfcGd0X2NoYW5nZWQg PSB0cnVlOwogICAgICAgICBjcHVfaW5mby0+cHZfY3IzID0gX19wYSh0aGlz X2NwdShyb290X3BndCkpIHwKICAgICAgICAgICAgICAgICAgICAgICAgICAg IChkLT5hcmNoLnB2LnBjaWQgPyBnZXRfcGNpZF9iaXRzKHYsIHRydWUpIDog MCk7CiAgICAgfQogCi0gICAgLyogRG9uJ3QgZmx1c2ggdXNlciBnbG9iYWwg bWFwcGluZ3MgZnJvbSB0aGUgVExCLiBEb24ndCB0aWNrIFRMQiBjbG9jay4g Ki8KLSAgICB3cml0ZV9jcjModi0+YXJjaC5jcjMpOworICAgIC8qCisgICAg ICogRG9uJ3QgZmx1c2ggdXNlciBnbG9iYWwgbWFwcGluZ3MgZnJvbSB0aGUg VExCLiBEb24ndCB0aWNrIFRMQiBjbG9jay4KKyAgICAgKgorICAgICAqIElu IHNoYWRvdyBtb2RlLCB0aG91Z2gsIHVwZGF0ZV9jcjMoKSBtYXkgbmVlZCB0 byBiZSBhY2NvbXBhbmllZCBieSBhCisgICAgICogVExCIGZsdXNoIChmb3Ig anVzdCB0aGUgaW5jb21pbmcgUENJRCksIGFzIHRoZSB0b3AgbGV2ZWwgcGFn ZSB0YWJsZSBtYXkKKyAgICAgKiBoYXZlIGNoYW5nZWQgYmVoaW5kIG91ciBi YWNrcy4gVG8gYmUgb24gdGhlIHNhZmUgc2lkZSwgc3VwcHJlc3MgdGhlCisg ICAgICogbm8tZmx1c2ggdW5jb25kaXRpb25hbGx5IGluIHRoaXMgY2FzZS4g VGhlIFhQVEkgQ1IzIHdyaXRlLCBpZiBlbmFibGVkLAorICAgICAqIHdpbGwg dGhlbiBuZWVkIHRvIGJlIGEgZmx1c2hpbmcgb25lIHRvby4KKyAgICAgKi8K KyAgICBjcjMgPSB2LT5hcmNoLmNyMzsKKyAgICBpZiAoIHNoYWRvd19tb2Rl X2VuYWJsZWQoZCkgKQorICAgIHsKKyAgICAgICAgY3IzICY9IH5YODZfQ1Iz X05PRkxVU0g7CisgICAgICAgIGNwdV9pbmZvLT5wdl9jcjMgJj0gflg4Nl9D UjNfTk9GTFVTSDsKKyAgICB9CisgICAgd3JpdGVfY3IzKGNyMyk7CiAKICAg ICBpZiAoICEodi0+YXJjaC5mbGFncyAmIFRGX2tlcm5lbF9tb2RlKSApCiAg ICAgICAgIHJldHVybjsK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:12:01 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:12:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVf-0002vo-Jy; Fri, 25 Oct 2019 11:11:59 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxVe-0002tq-8i for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:11:58 +0000 X-Inumbo-ID: 1bac2482-f718-11e9-beca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 1bac2482-f718-11e9-beca-bc764e2007e4; Fri, 25 Oct 2019 11:10:52 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUU-0001Y8-E8; Fri, 25 Oct 2019 11:10:46 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUU-0002vA-BF; Fri, 25 Oct 2019 11:10:46 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:10:46 +0000 Subject: [Xen-announce] Xen Security Advisory 300 v3 (CVE-2019-17351) - Linux: No grant table and foreign mapping limits X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17351 / XSA-300 version 3 Linux: No grant table and foreign mapping limits UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= Virtual device backends and device models running in domain 0, or other backend driver domains, need to be able to map guest memory (either via grant mappings, or via the foreign mapping interface). Inside Xen, mapped grants are tracked by the maptrack structure. The size of this structure is chosen during domain creation, and has a fixed upper bound for the lifetime of the domain. For Linux to keep track of these mappings, it needs to have a page structure for each one. In practice the number of page structures is usually limited. In PV guests, a range of pfns are typically set aside at boot ("pre-ballooned") for this purpose. For HVM/PVH and Arm guests, no memory is set aside to begin with. In either case, when more of this "foreign / grant map pfn space" is needed, Linux will balloon out extra pages to use for this purpose. Unfortunately, in Linux, there are no limits, either on the total amount of memory which the domain will attempt to balloon out, nor on the amount of "foreign / grant map" memory which any individual guest can consume. For Linux userspace backends (e.g. QEMU) which use /dev/xen/gnttab or /proc/xen/gnttab, there is an arbitrary mapping limit which, if hit, will prevent further mappings from being established. As a result, a malicious guest may be able to, with crafted requests, cause a backend Linux domain to either: 1) Fill the maptrack table in Xen and/or hit the userspace limit. This will starve I/O from other guests served by the same backend. 2) Balloon out sufficient RAM to cause it to swap excessively, or run completely out of memory. This may starve all operations from the domain, including I/O from other guests, or may cause a crash of the domain. IMPACT ====== Guest may be able to crash backend Linux domains, or starve operations inside the domain, including the processing of guest I/O requests (Guest Denial-of-Service). If the backend is domain 0, which is the most common configuration, then host-wide operations may be starved, or the host may crash (Host Denial-of-Service). VULNERABLE SYSTEMS ================== All versions of Linux are vulnerable. Only Linux guests acting as backend domains for other guests may be exploited. All Arm domains are vulnerable, as are x86 PVH/HVM guests. The vulnerability of x86 PV guests depends on how they were configured at boot. MITIGATION ========== PV guests can be constructed with "pre-ballooned" memory, by building it with maxmem > memory. See `man 5 xl.cfg` for full details of these two parameters. For PV dom0, these are controlled by Xen's "dom0_mem=$X,max:$Y" command line parameter. The larger the difference between memory and maxmem, the more space Linux has to fill with grant/foreign mappings before it will start ballooning out real memory to satisfy further mapping requests. This makes the attack more difficult to accomplish. CREDITS ======= This issue was discovered by Julien Grall of ARM. RESOLUTION ========== Applying the appropriate attached patch resolves the backend memory exhaustion issue. NOTE: This does NOT fix the guest starvation issue. Fixing fixing this issue is more complex, and it was determined that it was better to work on a robust fix for the issue in public. This advisory will be updated when fixes are available. xsa300-linux-5.2.patch Linux 4.4 ... 5.2 $ sha256sum xsa300* 9c8a9aec52b147f8e8ef41444e1dd11803bacf3bd4d0f6efa863b16f7a9621ac xsa300-linux-5.2.patch $ NOTE ON LACK OF EMBARGO ======================= The lack of predisclosure is due to a short schedule set by the discoverer, and efforts to resolve the advisory wording. -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y2AYMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ1zEH/0EshvAErWXqQzUnuqxyCeCOPnVtTbnGRDBR4B62 znE6Kbu449nh7qnkqyRGQxwGgdKnsFPDbXuQJb1hyjSl1Ph+u5KbA3aDcIxNy4d0 y0gumH8tcW+ag1P9Z9geACrRT+1dJ7RiMfi+IaBA7nD3raYUtHLdGrAHGTxX1B3u k3kXjP5pyXl96u9zCAd4lOe6hLnQr3gaPrBdDDkF+ArY8WO8+XaTqKPH0YsdrHxA kexqH3Ts9sBO+YC7LZdF9Q54K91xOfzwmmmZUTL99pJhzAAl4fwh/ZZj/rRZhC58 FnRy0lL7D2lFyhzlPIrXk+sjuu4tS/ZslQKk14Q7etcXGFQ= =rVDQ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa300-linux-5.2.patch" Content-Disposition: attachment; filename="xsa300-linux-5.2.patch" Content-Transfer-Encoding: base64 RnJvbSBlYTQ5NDUwZGVkNTc1ZmFjYzBlNjRlMGQ2YWRjYjFjYThhYWFkMGJh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWVyZ2VuIEdyb3Nz IDxqZ3Jvc3NAc3VzZS5jb20+CkRhdGU6IFdlZCwgMTkgSnVuIDIwMTkgMTE6 MDA6NTYgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IGxldCBhbGxvY194 ZW5iYWxsb29uZWRfcGFnZXMoKSBmYWlsIGlmIG5vdCBlbm91Z2ggbWVtb3J5 CiBmcmVlCgpJbnN0ZWFkIG9mIHRyeWluZyB0byBhbGxvY2F0ZSBwYWdlcyB3 aXRoIEdGUF9VU0VSIGluCmFkZF9iYWxsb29uZWRfcGFnZXMoKSBjaGVjayB0 aGUgYXZhaWxhYmxlIGZyZWUgbWVtb3J5IHZpYQpzaV9tZW1fYXZhaWxhYmxl KCkuIEdGUF9VU0VSIGlzIGZhciBsZXNzIGxpbWl0aW5nIG1lbW9yeSBleGhh dXN0aW9uCnRoYW4gdGhlIHRlc3QgdmlhIHNpX21lbV9hdmFpbGFibGUoKS4K ClRoaXMgd2lsbCBhdm9pZCBkb20wIHJ1bm5pbmcgb3V0IG9mIG1lbW9yeSBk dWUgdG8gZXhjZXNzaXZlIGZvcmVpZ24KcGFnZSBtYXBwaW5ncyBlc3BlY2lh bGx5IG9uIEFSTSBhbmQgb24geDg2IGluIFBWSCBtb2RlLCBhcyB0aG9zZSBk b24ndApoYXZlIGEgcHJlLWJhbGxvb25lZCBhcmVhIHdoaWNoIGNhbiBiZSB1 c2VkIGZvciBmb3JlaWduIG1hcHBpbmdzLgoKQXMgdGhlIG5vcm1hbCBiYWxs b29uaW5nIHN1ZmZlcnMgZnJvbSB0aGUgc2FtZSBwcm9ibGVtIGRvbid0IGJh bGxvb24KZG93biBtb3JlIHRoYW4gc2lfbWVtX2F2YWlsYWJsZSgpIHBhZ2Vz IGluIG9uZSBpdGVyYXRpb24uIEF0IHRoZSBzYW1lCnRpbWUgbGltaXQgdGhl IGRlZmF1bHQgbWF4aW11bSBudW1iZXIgb2YgcmV0cmllcy4KClJlcG9ydGVk LWJ5OiBKdWxpZW4gR3JhbGwgPGp1bGllbi5ncmFsbEBhcm0uY29tPgpTaWdu ZWQtb2ZmLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NAc3VzZS5jb20+Ci0t LQogZHJpdmVycy94ZW4vYmFsbG9vbi5jIHwgMTYgKysrKysrKysrKysrKy0t LQogMSBmaWxlIGNoYW5nZWQsIDEzIGluc2VydGlvbnMoKyksIDMgZGVsZXRp b25zKC0pCgpkaWZmIC0tZ2l0IGEvZHJpdmVycy94ZW4vYmFsbG9vbi5jIGIv ZHJpdmVycy94ZW4vYmFsbG9vbi5jCmluZGV4IGQzN2RkNWJiN2E4Zi4uNTU5 NzY4ZGMyNTY3IDEwMDY0NAotLS0gYS9kcml2ZXJzL3hlbi9iYWxsb29uLmMK KysrIGIvZHJpdmVycy94ZW4vYmFsbG9vbi5jCkBAIC01MzgsOCArNTM4LDE1 IEBAIHN0YXRpYyB2b2lkIGJhbGxvb25fcHJvY2VzcyhzdHJ1Y3Qgd29ya19z dHJ1Y3QgKndvcmspCiAJCQkJc3RhdGUgPSByZXNlcnZlX2FkZGl0aW9uYWxf bWVtb3J5KCk7CiAJCX0KIAotCQlpZiAoY3JlZGl0IDwgMCkKLQkJCXN0YXRl ID0gZGVjcmVhc2VfcmVzZXJ2YXRpb24oLWNyZWRpdCwgR0ZQX0JBTExPT04p OworCQlpZiAoY3JlZGl0IDwgMCkgeworCQkJbG9uZyBuX3BhZ2VzOworCisJ CQluX3BhZ2VzID0gbWluKC1jcmVkaXQsIHNpX21lbV9hdmFpbGFibGUoKSk7 CisJCQlzdGF0ZSA9IGRlY3JlYXNlX3Jlc2VydmF0aW9uKG5fcGFnZXMsIEdG UF9CQUxMT09OKTsKKwkJCWlmIChzdGF0ZSA9PSBCUF9ET05FICYmIG5fcGFn ZXMgIT0gLWNyZWRpdCAmJgorCQkJICAgIG5fcGFnZXMgPCB0b3RhbHJlc2Vy dmVfcGFnZXMpCisJCQkJc3RhdGUgPSBCUF9FQUdBSU47CisJCX0KIAogCQlz dGF0ZSA9IHVwZGF0ZV9zY2hlZHVsZShzdGF0ZSk7CiAKQEAgLTU3OCw2ICs1 ODUsOSBAQCBzdGF0aWMgaW50IGFkZF9iYWxsb29uZWRfcGFnZXMoaW50IG5y X3BhZ2VzKQogCQl9CiAJfQogCisJaWYgKHNpX21lbV9hdmFpbGFibGUoKSA8 IG5yX3BhZ2VzKQorCQlyZXR1cm4gLUVOT01FTTsKKwogCXN0ID0gZGVjcmVh c2VfcmVzZXJ2YXRpb24obnJfcGFnZXMsIEdGUF9VU0VSKTsKIAlpZiAoc3Qg IT0gQlBfRE9ORSkKIAkJcmV0dXJuIC1FTk9NRU07CkBAIC03MTAsNyArNzIw LDcgQEAgc3RhdGljIGludCBfX2luaXQgYmFsbG9vbl9pbml0KHZvaWQpCiAJ YmFsbG9vbl9zdGF0cy5zY2hlZHVsZV9kZWxheSA9IDE7CiAJYmFsbG9vbl9z dGF0cy5tYXhfc2NoZWR1bGVfZGVsYXkgPSAzMjsKIAliYWxsb29uX3N0YXRz LnJldHJ5X2NvdW50ID0gMTsKLQliYWxsb29uX3N0YXRzLm1heF9yZXRyeV9j b3VudCA9IFJFVFJZX1VOTElNSVRFRDsKKwliYWxsb29uX3N0YXRzLm1heF9y ZXRyeV9jb3VudCA9IDQ7CiAKICNpZmRlZiBDT05GSUdfWEVOX0JBTExPT05f TUVNT1JZX0hPVFBMVUcKIAlzZXRfb25saW5lX3BhZ2VfY2FsbGJhY2soJnhl bl9vbmxpbmVfcGFnZSk7Ci0tIAoyLjE2LjQKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Fri Oct 25 11:12:23 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 25 Oct 2019 11:12:23 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxW3-0003Qe-Af; Fri, 25 Oct 2019 11:12:23 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxW2-0003Pe-GO for xen-announce@lists.xen.org; Fri, 25 Oct 2019 11:12:22 +0000 X-Inumbo-ID: 2d6305a7-f718-11e9-94c5-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 2d6305a7-f718-11e9-94c5-12813bfff9fa; Fri, 25 Oct 2019 11:11:23 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iNxUx-0001aA-AP; Fri, 25 Oct 2019 11:11:15 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iNxUx-0003zV-7X; Fri, 25 Oct 2019 11:11:15 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Fri, 25 Oct 2019 11:11:15 +0000 Subject: [Xen-announce] Xen Security Advisory 288 v3 (CVE-2019-17343) - x86: Inconsistent PV IOMMU discipline X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-17343 / XSA-288 version 3 x86: Inconsistent PV IOMMU discipline UPDATES IN VERSION 3 ==================== CVE assigned. ISSUE DESCRIPTION ================= In order for a PV domain to set up DMA from a passed-through device to one of its pages, the page must be mapped in the IOMMU. On the other hand, before a PV page may be used as a "special" page type (such as a pagetable or descriptor table), it _must not_ be writable in the IOMMU (otherwise a malicious guest could DMA arbitrary page tables into the memory, bypassing Xen's safety checks); and Xen's current rule is to have such pages not in the IOMMU at all. Until now, in order to accomplish this, the code has borrowed HVM domain's "physmap" concept: When a page is assigned to a guest, guess_physmap_add_entry() is called, which for PV guests, will create a writable IOMMU mapping; and when a page is removed, guest_physmap_remove_entry() is called, which will remove the mapping. Additionally, when a page gains the PGT_writable page type, the page will be added into the IOMMU; and when the page changes away from a PGT_writable type, the page will be removed from the IOMMU. Unfortunately, borrowing the "physmap" concept from HVM domains is problematic. HVM domains have a lock on their p2m tables, ensuring synchronization between modifications to the p2m; and all hypercall parameters must first be translated through the p2m before being used. Trying to mix this locked-and-gated approach with PV's lock-free approach leads to several races and inconsistencies. IMPACT ====== An untrusted PV domain with access to a physical device can DMA into its own pagetables, leading to privilege escalation. VULNERABLE SYSTEMS ================== Only x86 systems are vulnerable. ARM systems are not vulnerable. Only systems where PV guests are given direct access to physical devices (PCI pass-through) are vulnerable. Systems with only HVM guests, or systems which do not use PCI pass-through, are not vulnerable. MITIGATION ========== Only assigning devices to HVM guests will avoid these vulnerabilities. CREDITS ======= This issue was discovered by Paul Durrant of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa288.patch xen-unstable xsa288-4.11.patch Xen 4.11.x, Xen 4.10.x xsa288-4.9.patch Xen 4.9.x xsa288-4.8.patch Xen 4.8.x xsa288-4.7.patch Xen 4.7.x $ sha256sum xsa288* 7254f0ce791b5543aec68643ec47e2bcf7823650949c7eb32db5122591f12e8c xsa288.meta e1159cb5c1c5a01b28753739b6a78b555ebe4b920cae766db47e0f2a1a21c188 xsa288.patch e9986ceda84e7391c27d80fd541a0e5edf1eadef302a560b4e445ca9bad4c56e xsa288-4.7.patch 14856543ccaa5b3db2a209d25637ed025f2eb940294d0cd07e03f56630a9e5af xsa288-4.8.patch df5e4a367f58491d54c778e2997142792c881d4f7b5a2a1d3339d2a3f1abafe5 xsa288-4.9.patch 58ba46b4814695dc34beaa5fb644931253bd0b0c6a8dc843c735beec152ae722 xsa288-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2y19AMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZmCoH/3PTKQLGVnhe5iGtXVgfbb1h+vz/8t/BATDFgreL LXSvxxK42FZ+inbr/qz/NUPS21yISOUu9agqWFzTq5qYpU1E4+FybwdjvIHBE6tG 16gFjHYfawvA3QAPndaZR8vdWVqOEu/YdhOSa7m9vRiUnxh2B44nX0oT/bXuGdKv pyKrQk91hpeWPXxWzJ2k1hy1+/I+eEDxLvauvVaIulO/0bQyMTWcCDRCYdzShJEp njdVj3+4ZvvNbtc4zrWmVtfyZfMLWFdYwCTcTQ7Gy0b9wVmGhD1UhZsgXd4i8H2Z 62HfUOesi7yO2OtI1T08GaRFoo9ArcUbyEKvxTGW5Iyh6NE= =EvlR -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa288.meta" Content-Disposition: attachment; filename="xsa288.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyODgsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIsCiAgICAiNC45IiwK ICAgICI0LjgiLAogICAgIjQuNyIKICBdLAogICJUcmVlcyI6IFsKICAgICJ4 ZW4iCiAgXSwKICAiUmVjaXBlcyI6IHsKICAgICI0LjEwIjogewogICAgICAi UmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJs ZVJlZiI6ICJhMDE2YjhmMjA3YzdhM2ZlOGJkZDJiNmY3YzA4MDAyMGUzZTFj ODIzIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyODQs CiAgICAgICAgICAgIDI4NSwKICAgICAgICAgICAgMjg3CiAgICAgICAgICBd LAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODgt NC4xMS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAg IH0sCiAgICAiNC4xMSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAg InhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiODdmNTFiZjM2NmNh NzliOThlMWUyMDFiZjliZDdhOWMxNjQ2MzFlMiIsCiAgICAgICAgICAiUHJl cmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAyODUsCiAg ICAgICAgICAgIDI4NwogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVz IjogWwogICAgICAgICAgICAieHNhMjg4LTQuMTEucGF0Y2giCiAgICAgICAg ICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuNyI6IHsKICAg ICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJT dGFibGVSZWYiOiAiNzEwY2MwOTY5NzEwMTliYzJlNWE5YWFiYjlhZjFhY2Nh MGI1YjllNyIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAg Mjg0LAogICAgICAgICAgICAyODUsCiAgICAgICAgICAgIDI4NwogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh Mjg4LTQuNy5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAg ICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI5MDhlNzY4ZmFl NDlhOGRiMDA4OWU2ODE4ODY1MjA3OWUzYmZhYTY2IiwKICAgICAgICAgICJQ cmVyZXFzIjogWwogICAgICAgICAgICAyODQsCiAgICAgICAgICAgIDI4NSwK ICAgICAgICAgICAgMjg3CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNo ZXMiOiBbCiAgICAgICAgICAgICJ4c2EyODgtNC44LnBhdGNoIgogICAgICAg ICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjkiOiB7CiAg ICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAi U3RhYmxlUmVmIjogImY1YWNmOTdmNjY5YzZiYzk2OTFlMDM3NzFhZDA2NzAz ZGE3N2UwZDUiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAg IDI4NCwKICAgICAgICAgICAgMjg1LAogICAgICAgICAgICAyODcKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI4OC00LjkucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9 CiAgICB9LAogICAgIm1hc3RlciI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAg ICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMjRkNTI4 MjUyN2Y0NjQ3OTA3YjM1NzI4MjBiNTMzNWMxNWNkMDM1NiIsCiAgICAgICAg ICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjg0LAogICAgICAgICAgICAy ODUsCiAgICAgICAgICAgIDI4NwogICAgICAgICAgXSwKICAgICAgICAgICJQ YXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjg4LnBhdGNoIgogICAgICAg ICAgXQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa288.patch" Content-Disposition: attachment; filename="xsa288.patch" Content-Transfer-Encoding: base64 RnJvbSAzYWEwZjk5ZmEyNzU0MGVhNWUzY2UwYWUzNTRjN2M4OTAzNDhjNjdh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDM1ICsrKysrKysr KysrKystLS0KIDIgZmlsZXMgY2hhbmdlZCwgMTE2IGluc2VydGlvbnMoKyks IDE0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9t bS5jIGIveGVuL2FyY2gveDg2L21tLmMKaW5kZXggNGQzYjE3ZjNhOC4uNzFi Mzk4NGRkMSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIv eGVuL2FyY2gveDg2L21tLmMKQEAgLTgxLDYgKzgxLDIyIEBACiAgKiBPUydz LCB3aGljaCB3aWxsIGdlbmVyYWxseSB1c2UgdGhlIFdQIGJpdCB0byBzaW1w bGlmeSBjb3B5LW9uLXdyaXRlCiAgKiBpbXBsZW1lbnRhdGlvbiAoaW4gdGhh dCBjYXNlLCBPUyB3YW50cyBhIGZhdWx0IHdoZW4gaXQgd3JpdGVzIHRvCiAg KiBhbiBhcHBsaWNhdGlvbi1zdXBwbGllZCBidWZmZXIpLgorICoKKyAqIFBW IGRvbVVzIGFuZCBJT01NVXM6CisgKiAtLS0tLS0tLS0tLS0tLS0tLS0tLQor ICogRm9yIGEgZ3Vlc3QgdG8gYmUgYWJsZSB0byBETUEgaW50byBhIHBhZ2Us IHRoYXQgcGFnZSBtdXN0IGJlIGluIHRoZQorICogZG9tYWluJ3MgSU9NTVUu ICBIb3dldmVyLCB3ZSAqbXVzdCBub3QqIGFsbG93IERNQSBpbnRvICdzcGVj aWFsJworICogcGFnZXMgKHN1Y2ggYXMgcGFnZSB0YWJsZSBwYWdlcywgZGVz Y3JpcHRvciB0YWJsZXMsICZjKTsgYW5kIHdlCisgKiBtdXN0IGFsc28gZW5z dXJlIHRoYXQgbWFwcGluZ3MgYXJlIHJlbW92ZWQgZnJvbSB0aGUgSU9NTVUg d2hlbiB0aGUKKyAqIHBhZ2UgaXMgZnJlZWQuICBGaW5hbGx5LCBpdCBpcyBp bmhlcmVudGx5IHJhY3kgdG8gbWFrZSBhbnkgY2hhbmdlcworICogYmFzZWQg b24gYSBwYWdlIHdpdGggYSBub24temVybyB0eXBlIGNvdW50LgorICoKKyAq IFRvIHRoYXQgZW5kLCB3ZSBwdXQgdGhlIHBhZ2UgaW4gdGhlIElPTU1VIG9u bHkgd2hlbiBhIHBhZ2UgZ2FpbnMKKyAqIHRoZSBQR1Rfd3JpdGVhYmxlIHR5 cGU7IGFuZCB3ZSByZW1vdmUgdGhlIHBhZ2Ugd2hlbiBpdCBsb3NlcyB0aGUK KyAqIFBHVF93cml0ZWFibGUgdHlwZSAobm90IHdoZW4gdGhlIHR5cGUgY291 bnQgZ29lcyB0byB6ZXJvKS4gIFRoaXMKKyAqIGVmZmVjdGl2ZWx5IHByb3Rl Y3RzIHRoZSBJT01NVSBzdGF0dXMgdXBkYXRlIHdpdGggdGhlIHR5cGUgY291 bnQgd2UKKyAqIGhhdmUganVzdCBhY3F1aXJlZC4gIFdlIG11c3QgYWxzbyBj aGVjayBmb3IgUEdUX3dyaXRhYmxlIHR5cGUgd2hlbgorICogZG9pbmcgdGhl IGZpbmFsIHB1dF9wYWdlKCksIGFuZCByZW1vdmUgaXQgZnJvbSB0aGUgaW9t bXUgaWYgc28uCiAgKi8KIAogI2luY2x1ZGUgPHhlbi9pbml0Lmg+CkBAIC0y MzIwLDE5ICsyMzM2LDc5IEBAIHN0YXRpYyBpbnQgbW9kX2w0X2VudHJ5KGw0 X3BnZW50cnlfdCAqcGw0ZSwKIH0KICNlbmRpZiAvKiBDT05GSUdfUFYgKi8K IAotc3RhdGljIGludCBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHN0cnVjdCBw YWdlX2luZm8gKnBhZ2UpCisvKgorICogSW4gdGhlIGNvdXJzZSBvZiBhIHBh Z2UncyB1c2UsIGl0IG1heSBoYXZlIGNhdXNlZCBvdGhlciBzZWNvbmRhcnkK KyAqIG1hcHBpbmdzIHRvIGhhdmUgY2hhbmdlZDoKKyAqIC0gWGVuJ3MgbWFw cGluZ3MgbWF5IGhhdmUgYmVlbiBjaGFuZ2VkIHRvIGFjY29tb2RhdGUgdGhl IHJlcXVlc3RlZAorICogICBjYWNoZSBhdHRpYnV0ZXMKKyAqIC0gQSBwYWdl IG1heSBoYXZlIGJlZW4gcHV0IGludG8gdGhlIElPTU1VIG9mIGEgUFYgZ3Vl c3Qgd2hlbiBpdAorICogICBnYWluZWQgYSB3cml0YWJsZSBtYXBwaW5nLgor ICoKKyAqIE5vdyB0aGF0IHRoZSBwYWdlIGlzIGJlaW5nIGZyZWVkLCBjbGVh biB1cCB0aGVzZSBtYXBwaW5ncyBpZgorICogYXBwcm9wcmlhdGUuICBOQiB0 aGF0IGF0IHRoaXMgcG9pbnQgdGhlIHBhZ2UgaXMgc3RpbGwgImFsbG9jYXRl ZCIsCisgKiBidXQgbm90ICJsaXZlIiAoaS5lLiwgaXRzIHJlZmNvdW50IGlz IDApLCBzbyBpdCdzIHNhZmUgdG8gcmVhZCB0aGUKKyAqIGNvdW50X2luZm8s IG93bmVyLCBhbmQgdHlwZV9pbmZvIHdpdGhvdXQgc3luY2hyb25pemF0aW9u LgorICovCitzdGF0aWMgaW50IGNsZWFudXBfcGFnZV9tYXBwaW5ncyhzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlKQogewogICAgIHVuc2lnbmVkIGludCBjYWNo ZWF0dHIgPQogICAgICAgICAocGFnZS0+Y291bnRfaW5mbyAmIFBHQ19jYWNo ZWF0dHJfbWFzaykgPj4gUEdDX2NhY2hlYXR0cl9iYXNlOworICAgIGludCBy YyA9IDA7CisgICAgdW5zaWduZWQgbG9uZyBtZm4gPSBtZm5feChwYWdlX3Rv X21mbihwYWdlKSk7CiAKLSAgICBpZiAoIGxpa2VseShjYWNoZWF0dHIgPT0g MCkgKQotICAgICAgICByZXR1cm4gMDsKKyAgICAvKgorICAgICAqIElmIHdl J3ZlIG1vZGlmaWVkIHhlbiBtYXBwaW5ncyBhcyBhIHJlc3VsdCBvZiBndWVz dCBjYWNoZQorICAgICAqIGF0dHJpYnV0ZXMsIHJlc3RvcmUgdGhlbSB0byB0 aGUgIm5vcm1hbCIgc3RhdGUuCisgICAgICovCisgICAgaWYgKCB1bmxpa2Vs eShjYWNoZWF0dHIpICkKKyAgICB7CisgICAgICAgIHBhZ2UtPmNvdW50X2lu Zm8gJj0gflBHQ19jYWNoZWF0dHJfbWFzazsKIAotICAgIHBhZ2UtPmNvdW50 X2luZm8gJj0gflBHQ19jYWNoZWF0dHJfbWFzazsKKyAgICAgICAgQlVHX09O KGlzX3hlbl9oZWFwX3BhZ2UocGFnZSkpOwogCi0gICAgQlVHX09OKGlzX3hl bl9oZWFwX3BhZ2UocGFnZSkpOworICAgICAgICByYyA9IHVwZGF0ZV94ZW5f bWFwcGluZ3MobWZuLCAwKTsKKyAgICB9CiAKLSAgICByZXR1cm4gdXBkYXRl X3hlbl9tYXBwaW5ncyhtZm5feChwYWdlX3RvX21mbihwYWdlKSksIDApOwor ICAgIC8qCisgICAgICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4n cyBJT01NVSwgcmVtb3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3 cml0YWJsZSB4ZW5oZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5k IGNsZWFyZWQgYnkKKyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBj b2RlLCByYXRoZXIgdGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNo OgorICAgICAqIC0gVGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJ T01NVSBtYXBwaW5nLCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2Fy aWx5IGV4cGVjdCB0aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhl IGZpbmFsCisgICAgICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAg ICAqIEdvIGFoZWFkIGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgp IG9uIHhlbmhlYXAgcGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2Fz ZTsgYnV0IG9ubHkgQVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6 ZXJvIGFuZCByZW1vdmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUg Zm9yIG5vbi14ZW5oZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdU X3dyaXRhYmxlX3BhZ2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFp biAqZCA9IHBhZ2VfZ2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICgg ZCAmJiBpc19wdl9kb21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdV9w dF9zeW5jKGQpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGludCByYzIg PSBpb21tdV9sZWdhY3lfdW5tYXAoZCwgX2RmbihtZm4pLCBQQUdFX09SREVS XzRLKTsKKworICAgICAgICAgICAgaWYgKCAhcmMgKQorICAgICAgICAgICAg ICAgIHJjID0gcmMyOworICAgICAgICB9CisKKyAgICAgICAgaWYgKCBsaWtl bHkoIWlzX3hlbl9oZWFwX3BhZ2UocGFnZSkpICkKKyAgICAgICAgeworICAg ICAgICAgICAgQVNTRVJUKChwYWdlLT51LmludXNlLnR5cGVfaW5mbyAmCisg ICAgICAgICAgICAgICAgICAgIChQR1RfdHlwZV9tYXNrIHwgUEdUX2NvdW50 X21hc2spKSA9PSBQR1Rfd3JpdGFibGVfcGFnZSk7CisgICAgICAgICAgICAv KgorICAgICAgICAgICAgICogQ2xlYXIgdGhlIHR5cGUgdG8gcmVjb3JkIHRo ZSBmYWN0IHRoYXQgYWxsIHdyaXRhYmxlIG1hcHBpbmdzCisgICAgICAgICAg ICAgKiBoYXZlIGJlZW4gcmVtb3ZlZC4gIEJ1dCBpZiBlaXRoZXIgb3BlcmF0 aW9uIGZhaWxlZCwgbGVhdmUKKyAgICAgICAgICAgICAqIHR5cGVfaW5mbyBh bG9uZS4KKyAgICAgICAgICAgICAqLworICAgICAgICAgICAgaWYgKCBsaWtl bHkoIXJjKSApCisgICAgICAgICAgICAgICAgcGFnZS0+dS5pbnVzZS50eXBl X2luZm8gJj0gfihQR1RfdHlwZV9tYXNrIHwgUEdUX2NvdW50X21hc2spOwor ICAgICAgICB9CisgICAgfQorCisgICAgcmV0dXJuIHJjOwogfQogCiB2b2lk IHB1dF9wYWdlKHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCkBAIC0yMzQ4LDcg KzI0MjQsNyBAQCB2b2lkIHB1dF9wYWdlKHN0cnVjdCBwYWdlX2luZm8gKnBh Z2UpCiAKICAgICBpZiAoIHVubGlrZWx5KChueCAmIFBHQ19jb3VudF9tYXNr KSA9PSAwKSApCiAgICAgewotICAgICAgICBpZiAoIGNsZWFudXBfcGFnZV9j YWNoZWF0dHIocGFnZSkgPT0gMCApCisgICAgICAgIGlmICggIWNsZWFudXBf cGFnZV9tYXBwaW5ncyhwYWdlKSApCiAgICAgICAgICAgICBmcmVlX2RvbWhl YXBfcGFnZShwYWdlKTsKICAgICAgICAgZWxzZQogICAgICAgICAgICAgZ2Rw cmludGsoWEVOTE9HX1dBUk5JTkcsCkBAIC00MDQzLDkgKzQxMTksMTAgQEAg aW50IHN0ZWFsX3BhZ2UoCiAgICAgICogTkIgdGhpcyBpcyBzYWZlIGV2ZW4g aWYgdGhlIHBhZ2UgZW5kcyB1cCBiZWluZyBnaXZlbiBiYWNrIHRvCiAgICAg ICogdGhlIGRvbWFpbiwgYmVjYXVzZSB0aGUgY291bnQgaXMgemVybzogc3Vi c2VxdWVudCBtYXBwaW5ncyB3aWxsCiAgICAgICogY2F1c2UgdGhlIGNhY2hl IGF0dHJpYnV0ZXMgdG8gYmUgcmUtaW5zdGF0ZWQgaW5zaWRlCi0gICAgICog Z2V0X3BhZ2VfZnJvbV9sMWUoKS4KKyAgICAgKiBnZXRfcGFnZV9mcm9tX2wx ZSgpLCBvciB0aGUgcGFnZSB0byBiZSBhZGRlZCBiYWNrIHRvIHRoZSBJT01N VQorICAgICAqIHVwb24gdGhlIHR5cGUgY2hhbmdpbmcgdG8gUEdUX3dyaXRl YWJsZSwgYXMgYXBwcm9wcmlhdGUuCiAgICAgICovCi0gICAgaWYgKCAocmMg PSBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpKSApCisgICAgaWYgKCAo cmMgPSBjbGVhbnVwX3BhZ2VfbWFwcGluZ3MocGFnZSkpICkKICAgICB7CiAg ICAgICAgIC8qCiAgICAgICAgICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1h cHBpbmdzOyBwdXQgdGhpbmdzIHRoZSB3YXkgd2UgZm91bmQKZGlmZiAtLWdp dCBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYyBiL3hlbi9hcmNoL3g4Ni9tbS9w Mm0uYwppbmRleCBkMTRjZTU3ZGQ1Li5lNmViODQyMTcyIDEwMDY0NAotLS0g YS94ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21t L3AybS5jCkBAIC03NzgsOSArNzc4LDkgQEAgcDJtX3JlbW92ZV9wYWdlKHN0 cnVjdCBwMm1fZG9tYWluICpwMm0sIHVuc2lnbmVkIGxvbmcgZ2ZuX2wsIHVu c2lnbmVkIGxvbmcgbWZuLAogICAgIHAybV90eXBlX3QgdDsKICAgICBwMm1f YWNjZXNzX3QgYTsKIAorICAgIC8qIElPTU1VIGZvciBQViBndWVzdHMgaXMg aGFuZGxlZCBpbiBnZXRfcGFnZV90eXBlKCkgYW5kIHB1dF9wYWdlKCkuICov CiAgICAgaWYgKCAhcGFnaW5nX21vZGVfdHJhbnNsYXRlKHAybS0+ZG9tYWlu KSApCi0gICAgICAgIHJldHVybiBuZWVkX2lvbW11X3B0X3N5bmMocDJtLT5k b21haW4pID8KLSAgICAgICAgICAgIGlvbW11X2xlZ2FjeV91bm1hcChwMm0t PmRvbWFpbiwgX2RmbihtZm4pLCBwYWdlX29yZGVyKSA6IDA7CisgICAgICAg IHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2NrZWRfYnlfbWUocDJt LCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5nIGdmbj0lI2x4IG1m bj0lI2x4XG4iLCBnZm5fbCwgbWZuKTsKQEAgLTgyNSwxMCArODI1LDM1IEBA IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQsIGdm bl90IGdmbiwgbWZuX3QgbWZuLAogICAgIGludCBwb2RfY291bnQgPSAwOwog ICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3Rz IGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgp LiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSApCi0g ICAgICAgIHJldHVybiAobmVlZF9pb21tdV9wdF9zeW5jKGQpICYmIHQgPT0g cDJtX3JhbV9ydykgPwotICAgICAgICAgICAgaW9tbXVfbGVnYWN5X21hcChk LCBfZGZuKG1mbl94KG1mbikpLCBtZm4sIHBhZ2Vfb3JkZXIsCi0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl9yZWFkYWJsZSB8IElPTU1V Rl93cml0YWJsZSkgOiAwOworICAgIHsKKyAgICAgICAgc3RydWN0IHBhZ2Vf aW5mbyAqcGFnZSA9IG1mbl90b19wYWdlKG1mbik7CisKKyAgICAgICAgLyoK KyAgICAgICAgICogT3VyIGludGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdydCBJ T01NVSBlbnRyaWVzIGhhc24ndCBiZWVuIHZlcnkKKyAgICAgICAgICogY2xl YXI7IGJ1dCBoaXN0b3JpY2FsbHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBvdXQg d2l0aCBJT01NVSBtYXBwaW5ncywKKyAgICAgICAgICogYW5kIG9ubHkgbG9z ZSB0aGVtIHdoZW4gY2hhbmdlZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5cGUu CisgICAgICAgICAqCisgICAgICAgICAqIFJldGFpbiB0aGlzIHByb3BlcnR5 IGJ5IGdyYWJiaW5nIGEgd3JpdGFibGUgdHlwZSByZWYgYW5kIHRoZW4KKyAg ICAgICAgICogZHJvcHBpbmcgaXQgaW1tZWRpYXRlbHkuICBUaGUgcmVzdWx0 IHdpbGwgYmUgcGFnZXMgdGhhdCBoYXZlIGEKKyAgICAgICAgICogd3JpdGFi bGUgdHlwZSAoYW5kIGFuIElPTU1VIGVudHJ5KSwgYnV0IGEgY291bnQgb2Yg MCAoc3VjaCB0aGF0CisgICAgICAgICAqIGFueSBndWVzdC1yZXF1ZXN0ZWQg dHlwZSBjaGFuZ2VzIHN1Y2NlZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUKKyAg ICAgICAgICogZW50cnkpLgorICAgICAgICAgKi8KKyAgICAgICAgaWYgKCAh bmVlZF9pb21tdV9wdF9zeW5jKGQpIHx8IHQgIT0gcDJtX3JhbV9ydyApCisg ICAgICAgICAgICByZXR1cm4gMDsKKworICAgICAgICBmb3IgKCBpID0gMDsg aSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytwYWdlICkKKyAgICAg ICAgeworICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdl LCBkLCBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1 dF9wYWdlX2FuZF90eXBlKHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAg ICAgICAgICAgICAgIHJldHVybiAtRUlOVkFMOworICAgICAgICB9CisKKyAg ICAgICAgcmV0dXJuIDA7CisgICAgfQogCiAgICAgLyogZm9yZWlnbiBwYWdl cyBhcmUgYWRkZWQgdGhydSBwMm1fYWRkX2ZvcmVpZ24gKi8KICAgICBpZiAo IHAybV9pc19mb3JlaWduKHQpICkKLS0gCjIuMjAuMQoK --=separator Content-Type: application/octet-stream; name="xsa288-4.7.patch" Content-Disposition: attachment; filename="xsa288-4.7.patch" Content-Transfer-Encoding: base64 RnJvbSBkYzkzODU1YThiMzlmYmMyNmYzM2JmZmExMzRmYzk0ZDM2NzI2YTlm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDQxICsrKysrKysr KysrLS0tLS0tLS0KIDIgZmlsZXMgY2hhbmdlZCwgMTEwIGluc2VydGlvbnMo KyksIDI2IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9tbS5jIGIveGVuL2FyY2gveDg2L21tLmMKaW5kZXggNDdmNGFhNGY2YS4u MTQ0NDc5ODIwYiAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysr IGIveGVuL2FyY2gveDg2L21tLmMKQEAgLTgxLDYgKzgxLDIyIEBACiAgKiBP UydzLCB3aGljaCB3aWxsIGdlbmVyYWxseSB1c2UgdGhlIFdQIGJpdCB0byBz aW1wbGlmeSBjb3B5LW9uLXdyaXRlCiAgKiBpbXBsZW1lbnRhdGlvbiAoaW4g dGhhdCBjYXNlLCBPUyB3YW50cyBhIGZhdWx0IHdoZW4gaXQgd3JpdGVzIHRv CiAgKiBhbiBhcHBsaWNhdGlvbi1zdXBwbGllZCBidWZmZXIpLgorICoKKyAq IFBWIGRvbVVzIGFuZCBJT01NVXM6CisgKiAtLS0tLS0tLS0tLS0tLS0tLS0t LQorICogRm9yIGEgZ3Vlc3QgdG8gYmUgYWJsZSB0byBETUEgaW50byBhIHBh Z2UsIHRoYXQgcGFnZSBtdXN0IGJlIGluIHRoZQorICogZG9tYWluJ3MgSU9N TVUuICBIb3dldmVyLCB3ZSAqbXVzdCBub3QqIGFsbG93IERNQSBpbnRvICdz cGVjaWFsJworICogcGFnZXMgKHN1Y2ggYXMgcGFnZSB0YWJsZSBwYWdlcywg ZGVzY3JpcHRvciB0YWJsZXMsICZjKTsgYW5kIHdlCisgKiBtdXN0IGFsc28g ZW5zdXJlIHRoYXQgbWFwcGluZ3MgYXJlIHJlbW92ZWQgZnJvbSB0aGUgSU9N TVUgd2hlbiB0aGUKKyAqIHBhZ2UgaXMgZnJlZWQuICBGaW5hbGx5LCBpdCBp cyBpbmhlcmVudGx5IHJhY3kgdG8gbWFrZSBhbnkgY2hhbmdlcworICogYmFz ZWQgb24gYSBwYWdlIHdpdGggYSBub24temVybyB0eXBlIGNvdW50LgorICoK KyAqIFRvIHRoYXQgZW5kLCB3ZSBwdXQgdGhlIHBhZ2UgaW4gdGhlIElPTU1V IG9ubHkgd2hlbiBhIHBhZ2UgZ2FpbnMKKyAqIHRoZSBQR1Rfd3JpdGVhYmxl IHR5cGU7IGFuZCB3ZSByZW1vdmUgdGhlIHBhZ2Ugd2hlbiBpdCBsb3NlcyB0 aGUKKyAqIFBHVF93cml0ZWFibGUgdHlwZSAobm90IHdoZW4gdGhlIHR5cGUg Y291bnQgZ29lcyB0byB6ZXJvKS4gIFRoaXMKKyAqIGVmZmVjdGl2ZWx5IHBy b3RlY3RzIHRoZSBJT01NVSBzdGF0dXMgdXBkYXRlIHdpdGggdGhlIHR5cGUg Y291bnQgd2UKKyAqIGhhdmUganVzdCBhY3F1aXJlZC4gIFdlIG11c3QgYWxz byBjaGVjayBmb3IgUEdUX3dyaXRhYmxlIHR5cGUgd2hlbgorICogZG9pbmcg dGhlIGZpbmFsIHB1dF9wYWdlKCksIGFuZCByZW1vdmUgaXQgZnJvbSB0aGUg aW9tbXUgaWYgc28uCiAgKi8KIAogI2luY2x1ZGUgPHhlbi9rY29uZmlnLmg+ CkBAIC0yMzc5LDE5ICsyMzk1LDc5IEBAIHN0YXRpYyBpbnQgbW9kX2w0X2Vu dHJ5KGw0X3BnZW50cnlfdCAqcGw0ZSwKICAgICByZXR1cm4gcmM7CiB9CiAK LXN0YXRpYyBpbnQgY2xlYW51cF9wYWdlX2NhY2hlYXR0cihzdHJ1Y3QgcGFn ZV9pbmZvICpwYWdlKQorLyoKKyAqIEluIHRoZSBjb3Vyc2Ugb2YgYSBwYWdl J3MgdXNlLCBpdCBtYXkgaGF2ZSBjYXVzZWQgb3RoZXIgc2Vjb25kYXJ5Cisg KiBtYXBwaW5ncyB0byBoYXZlIGNoYW5nZWQ6CisgKiAtIFhlbidzIG1hcHBp bmdzIG1heSBoYXZlIGJlZW4gY2hhbmdlZCB0byBhY2NvbW9kYXRlIHRoZSBy ZXF1ZXN0ZWQKKyAqICAgY2FjaGUgYXR0aWJ1dGVzCisgKiAtIEEgcGFnZSBt YXkgaGF2ZSBiZWVuIHB1dCBpbnRvIHRoZSBJT01NVSBvZiBhIFBWIGd1ZXN0 IHdoZW4gaXQKKyAqICAgZ2FpbmVkIGEgd3JpdGFibGUgbWFwcGluZy4KKyAq CisgKiBOb3cgdGhhdCB0aGUgcGFnZSBpcyBiZWluZyBmcmVlZCwgY2xlYW4g dXAgdGhlc2UgbWFwcGluZ3MgaWYKKyAqIGFwcHJvcHJpYXRlLiAgTkIgdGhh dCBhdCB0aGlzIHBvaW50IHRoZSBwYWdlIGlzIHN0aWxsICJhbGxvY2F0ZWQi LAorICogYnV0IG5vdCAibGl2ZSIgKGkuZS4sIGl0cyByZWZjb3VudCBpcyAw KSwgc28gaXQncyBzYWZlIHRvIHJlYWQgdGhlCisgKiBjb3VudF9pbmZvLCBv d25lciwgYW5kIHR5cGVfaW5mbyB3aXRob3V0IHN5bmNocm9uaXphdGlvbi4K KyAqLworc3RhdGljIGludCBjbGVhbnVwX3BhZ2VfbWFwcGluZ3Moc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKIHsKICAgICB1bnNpZ25lZCBpbnQgY2FjaGVh dHRyID0KICAgICAgICAgKHBhZ2UtPmNvdW50X2luZm8gJiBQR0NfY2FjaGVh dHRyX21hc2spID4+IFBHQ19jYWNoZWF0dHJfYmFzZTsKKyAgICBpbnQgcmMg PSAwOworICAgIHVuc2lnbmVkIGxvbmcgbWZuID0gcGFnZV90b19tZm4ocGFn ZSk7CiAKLSAgICBpZiAoIGxpa2VseShjYWNoZWF0dHIgPT0gMCkgKQotICAg ICAgICByZXR1cm4gMDsKKyAgICAvKgorICAgICAqIElmIHdlJ3ZlIG1vZGlm aWVkIHhlbiBtYXBwaW5ncyBhcyBhIHJlc3VsdCBvZiBndWVzdCBjYWNoZQor ICAgICAqIGF0dHJpYnV0ZXMsIHJlc3RvcmUgdGhlbSB0byB0aGUgIm5vcm1h bCIgc3RhdGUuCisgICAgICovCisgICAgaWYgKCB1bmxpa2VseShjYWNoZWF0 dHIpICkKKyAgICB7CisgICAgICAgIHBhZ2UtPmNvdW50X2luZm8gJj0gflBH Q19jYWNoZWF0dHJfbWFzazsKIAotICAgIHBhZ2UtPmNvdW50X2luZm8gJj0g flBHQ19jYWNoZWF0dHJfbWFzazsKKyAgICAgICAgQlVHX09OKGlzX3hlbl9o ZWFwX3BhZ2UocGFnZSkpOwogCi0gICAgQlVHX09OKGlzX3hlbl9oZWFwX3Bh Z2UocGFnZSkpOworICAgICAgICByYyA9IHVwZGF0ZV94ZW5fbWFwcGluZ3Mo bWZuLCAwKTsKKyAgICB9CiAKLSAgICByZXR1cm4gdXBkYXRlX3hlbl9tYXBw aW5ncyhwYWdlX3RvX21mbihwYWdlKSwgMCk7CisgICAgLyoKKyAgICAgKiBJ ZiB0aGlzIG1heSBiZSBpbiBhIFBWIGRvbWFpbidzIElPTU1VLCByZW1vdmUg aXQuCisgICAgICoKKyAgICAgKiBOQiB0aGF0IHdyaXRhYmxlIHhlbmhlYXAg cGFnZXMgaGF2ZSB0aGVpciB0eXBlIHNldCBhbmQgY2xlYXJlZCBieQorICAg ICAqIGltcGxlbWVudGF0aW9uLXNwZWNpZmljIGNvZGUsIHJhdGhlciB0aGFu IGJ5IGdldF9wYWdlX3R5cGUoKS4gIEFzIHN1Y2g6CisgICAgICogLSBUaGV5 IGFyZW4ndCBleHBlY3RlZCB0byBoYXZlIGFuIElPTU1VIG1hcHBpbmcsIGFu ZAorICAgICAqIC0gV2UgZG9uJ3QgbmVjZXNzYXJpbHkgZXhwZWN0IHRoZSB0 eXBlIGNvdW50IHRvIGJlIHplcm8gd2hlbiB0aGUgZmluYWwKKyAgICAgKiBw dXRfcGFnZSBoYXBwZW5zLgorICAgICAqCisgICAgICogR28gYWhlYWQgYW5k IGF0dGVtcCB0byBjYWxsIGlvbW11X3VubWFwKCkgb24geGVuaGVhcCBwYWdl cyBhbnl3YXksIGp1c3QKKyAgICAgKiBpbiBjYXNlOyBidXQgb25seSBBU1NF UlQoKSB0aGF0IHRoZSB0eXBlIGNvdW50IGlzIHplcm8gYW5kIHJlbW92ZSB0 aGUKKyAgICAgKiBQR1Rfd3JpdGFibGUgdHlwZSBmb3Igbm9uLXhlbmhlYXAg cGFnZXMuCisgICAgICovCisgICAgaWYgKCAocGFnZS0+dS5pbnVzZS50eXBl X2luZm8gJiBQR1RfdHlwZV9tYXNrKSA9PSBQR1Rfd3JpdGFibGVfcGFnZSAp CisgICAgeworICAgICAgICBzdHJ1Y3QgZG9tYWluICpkID0gcGFnZV9nZXRf b3duZXIocGFnZSk7CisKKyAgICAgICAgaWYgKCBkICYmIGlzX3B2X2RvbWFp bihkKSAmJiB1bmxpa2VseShuZWVkX2lvbW11KGQpKSApCisgICAgICAgIHsK KyAgICAgICAgICAgIGludCByYzIgPSBpb21tdV91bm1hcF9wYWdlKGQsIG1m bik7CisKKyAgICAgICAgICAgIGlmICggIXJjICkKKyAgICAgICAgICAgICAg ICByYyA9IHJjMjsKKyAgICAgICAgfQorCisgICAgICAgIGlmICggbGlrZWx5 KCFpc194ZW5faGVhcF9wYWdlKHBhZ2UpKSApCisgICAgICAgIHsKKyAgICAg ICAgICAgIEFTU0VSVCgocGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJgorICAg ICAgICAgICAgICAgICAgICAoUEdUX3R5cGVfbWFzayB8IFBHVF9jb3VudF9t YXNrKSkgPT0gUEdUX3dyaXRhYmxlX3BhZ2UpOworICAgICAgICAgICAgLyoK KyAgICAgICAgICAgICAqIENsZWFyIHRoZSB0eXBlIHRvIHJlY29yZCB0aGUg ZmFjdCB0aGF0IGFsbCB3cml0YWJsZSBtYXBwaW5ncworICAgICAgICAgICAg ICogaGF2ZSBiZWVuIHJlbW92ZWQuICBCdXQgaWYgZWl0aGVyIG9wZXJhdGlv biBmYWlsZWQsIGxlYXZlCisgICAgICAgICAgICAgKiB0eXBlX2luZm8gYWxv bmUuCisgICAgICAgICAgICAgKi8KKyAgICAgICAgICAgIGlmICggbGlrZWx5 KCFyYykgKQorICAgICAgICAgICAgICAgIHBhZ2UtPnUuaW51c2UudHlwZV9p bmZvICY9IH4oUEdUX3R5cGVfbWFzayB8IFBHVF9jb3VudF9tYXNrKTsKKyAg ICAgICAgfQorICAgIH0KKworICAgIHJldHVybiByYzsKIH0KIAogdm9pZCBw dXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlKQpAQCAtMjQwNyw3ICsy NDgzLDcgQEAgdm9pZCBwdXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpwYWdl KQogCiAgICAgaWYgKCB1bmxpa2VseSgobnggJiBQR0NfY291bnRfbWFzaykg PT0gMCkgKQogICAgIHsKLSAgICAgICAgaWYgKCBjbGVhbnVwX3BhZ2VfY2Fj aGVhdHRyKHBhZ2UpID09IDAgKQorICAgICAgICBpZiAoICFjbGVhbnVwX3Bh Z2VfbWFwcGluZ3MocGFnZSkgKQogICAgICAgICAgICAgZnJlZV9kb21oZWFw X3BhZ2UocGFnZSk7CiAgICAgICAgIGVsc2UKICAgICAgICAgICAgIE1FTV9M T0coIkxlYWtpbmcgcGZuICVseCIsIHBhZ2VfdG9fbWZuKHBhZ2UpKTsKQEAg LTQ3NzEsOSArNDg0NywxMCBAQCBpbnQgc3RlYWxfcGFnZSgKICAgICAgKiBO QiB0aGlzIGlzIHNhZmUgZXZlbiBpZiB0aGUgcGFnZSBlbmRzIHVwIGJlaW5n IGdpdmVuIGJhY2sgdG8KICAgICAgKiB0aGUgZG9tYWluLCBiZWNhdXNlIHRo ZSBjb3VudCBpcyB6ZXJvOiBzdWJzZXF1ZW50IG1hcHBpbmdzIHdpbGwKICAg ICAgKiBjYXVzZSB0aGUgY2FjaGUgYXR0cmlidXRlcyB0byBiZSByZS1pbnN0 YXRlZCBpbnNpZGUKLSAgICAgKiBnZXRfcGFnZV9mcm9tX2wxZSgpLgorICAg ICAqIGdldF9wYWdlX2Zyb21fbDFlKCksIG9yIHRoZSBwYWdlIHRvIGJlIGFk ZGVkIGJhY2sgdG8gdGhlIElPTU1VCisgICAgICogdXBvbiB0aGUgdHlwZSBj aGFuZ2luZyB0byBQR1Rfd3JpdGVhYmxlLCBhcyBhcHByb3ByaWF0ZS4KICAg ICAgKi8KLSAgICBpZiAoIChyYyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIo cGFnZSkpICkKKyAgICBpZiAoIChyYyA9IGNsZWFudXBfcGFnZV9tYXBwaW5n cyhwYWdlKSkgKQogICAgIHsKICAgICAgICAgLyoKICAgICAgICAgICogQ291 bGRuJ3QgZml4dXAgWGVuJ3MgbWFwcGluZ3M7IHB1dCB0aGluZ3MgdGhlIHdh eSB3ZSBmb3VuZApkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L21tL3AybS5j IGIveGVuL2FyY2gveDg2L21tL3AybS5jCmluZGV4IDdiYmI3ODJiZGUuLjE0 ZjViZGI3ODcgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwor KysgYi94ZW4vYXJjaC94ODYvbW0vcDJtLmMKQEAgLTY0MiwxMyArNjQyLDkg QEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVjdCBwMm1fZG9tYWluICpwMm0sIHVu c2lnbmVkIGxvbmcgZ2ZuLCB1bnNpZ25lZCBsb25nIG1mbiwKICAgICBwMm1f dHlwZV90IHQ7CiAgICAgcDJtX2FjY2Vzc190IGE7CiAKKyAgICAvKiBJT01N VSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgp IGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3Ry YW5zbGF0ZShwMm0tPmRvbWFpbikgKQotICAgIHsKLSAgICAgICAgaWYgKCBu ZWVkX2lvbW11KHAybS0+ZG9tYWluKSApCi0gICAgICAgICAgICBmb3IgKCBp ID0gMDsgaSA8ICgxIDw8IHBhZ2Vfb3JkZXIpOyBpKysgKQotICAgICAgICAg ICAgICAgIGlvbW11X3VubWFwX3BhZ2UocDJtLT5kb21haW4sIG1mbiArIGkp OwogICAgICAgICByZXR1cm4gMDsKLSAgICB9CiAKICAgICBBU1NFUlQoZ2Zu X2xvY2tlZF9ieV9tZShwMm0sIGdmbikpOwogICAgIFAyTV9ERUJVRygicmVt b3ZpbmcgZ2ZuPSUjbHggbWZuPSUjbHhcbiIsIGdmbiwgbWZuKTsKQEAgLTY5 MiwyMiArNjg4LDMzIEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVj dCBkb21haW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuLAogICAgIGludCBwb2Rf Y291bnQgPSAwOwogICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBm b3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFu ZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5z bGF0ZShkKSApCiAgICAgewotICAgICAgICBpZiAoIG5lZWRfaW9tbXUoZCkg JiYgdCA9PSBwMm1fcmFtX3J3ICkKKyAgICAgICAgc3RydWN0IHBhZ2VfaW5m byAqcGFnZSA9IG1mbl90b19wYWdlKF9tZm4obWZuKSk7CisKKyAgICAgICAg LyoKKyAgICAgICAgICogT3VyIGludGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdy dCBJT01NVSBlbnRyaWVzIGhhc24ndCBiZWVuIHZlcnkKKyAgICAgICAgICog Y2xlYXI7IGJ1dCBoaXN0b3JpY2FsbHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBv dXQgd2l0aCBJT01NVSBtYXBwaW5ncywKKyAgICAgICAgICogYW5kIG9ubHkg bG9zZSB0aGVtIHdoZW4gY2hhbmdlZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5 cGUuCisgICAgICAgICAqCisgICAgICAgICAqIFJldGFpbiB0aGlzIHByb3Bl cnR5IGJ5IGdyYWJiaW5nIGEgd3JpdGFibGUgdHlwZSByZWYgYW5kIHRoZW4K KyAgICAgICAgICogZHJvcHBpbmcgaXQgaW1tZWRpYXRlbHkuICBUaGUgcmVz dWx0IHdpbGwgYmUgcGFnZXMgdGhhdCBoYXZlIGEKKyAgICAgICAgICogd3Jp dGFibGUgdHlwZSAoYW5kIGFuIElPTU1VIGVudHJ5KSwgYnV0IGEgY291bnQg b2YgMCAoc3VjaCB0aGF0CisgICAgICAgICAqIGFueSBndWVzdC1yZXF1ZXN0 ZWQgdHlwZSBjaGFuZ2VzIHN1Y2NlZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUK KyAgICAgICAgICogZW50cnkpLgorICAgICAgICAgKi8KKyAgICAgICAgaWYg KCAhbmVlZF9pb21tdShkKSB8fCB0ICE9IHAybV9yYW1fcncgKQorICAgICAg ICAgICAgcmV0dXJuIDA7CisKKyAgICAgICAgZm9yICggaSA9IDA7IGkgPCAo MVVMIDw8IHBhZ2Vfb3JkZXIpOyArK2ksICsrcGFnZSApCiAgICAgICAgIHsK LSAgICAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgcGFnZV9vcmRl cik7IGkrKyApCi0gICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgcmMg PSBpb21tdV9tYXBfcGFnZSgKLSAgICAgICAgICAgICAgICAgICAgZCwgbWZu ICsgaSwgbWZuICsgaSwgSU9NTVVGX3JlYWRhYmxlfElPTU1VRl93cml0YWJs ZSk7Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAhPSAwICkKLSAgICAgICAg ICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAgIHdoaWxlICggaS0tID4g MCApCi0gICAgICAgICAgICAgICAgICAgICAgICBpb21tdV91bm1hcF9wYWdl KGQsIG1mbiArIGkpOwotICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgfQorICAgICAgICAg ICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdlLCBkLCBQR1Rfd3JpdGFi bGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdlX2FuZF90eXBl KHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAgICAgICAgICAgICAgIHJl dHVybiAtRUlOVkFMOwogICAgICAgICB9CisKICAgICAgICAgcmV0dXJuIDA7 CiAgICAgfQogCi0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa288-4.8.patch" Content-Disposition: attachment; filename="xsa288-4.8.patch" Content-Transfer-Encoding: base64 RnJvbSBjNDE2OWE3MmViMzkxYzZhMzgxYmMxODVlZmM4ZTgzZjI3MzQ1ODAx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGVmM2Iy MDhmYjAuLjlmMzc1YmMyMzYgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4va2Nv bmZpZy5oPgpAQCAtMjM4MCwxOSArMjM5Niw3OSBAQCBzdGF0aWMgaW50IG1v ZF9sNF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJj OwogfQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3Ry dWN0IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9m IGEgcGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29u ZGFyeQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4n cyBtYXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0 ZSB0aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBB IHBhZ2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQ ViBndWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBp bmcuCisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQs IGNsZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4g IE5CIHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxs b2NhdGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291 bnQgaXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRf aW5mbywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6 YXRpb24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdz KHN0cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50 IGNhY2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdD X2NhY2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAg aW50IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IHBhZ2VfdG9f bWZuKHBhZ2UpOwogCi0gICAgaWYgKCBsaWtlbHkoY2FjaGVhdHRyID09IDAp ICkKLSAgICAgICAgcmV0dXJuIDA7CisgICAgLyoKKyAgICAgKiBJZiB3ZSd2 ZSBtb2RpZmllZCB4ZW4gbWFwcGluZ3MgYXMgYSByZXN1bHQgb2YgZ3Vlc3Qg Y2FjaGUKKyAgICAgKiBhdHRyaWJ1dGVzLCByZXN0b3JlIHRoZW0gdG8gdGhl ICJub3JtYWwiIHN0YXRlLgorICAgICAqLworICAgIGlmICggdW5saWtlbHko Y2FjaGVhdHRyKSApCisgICAgeworICAgICAgICBwYWdlLT5jb3VudF9pbmZv ICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CiAKLSAgICBwYWdlLT5jb3VudF9p bmZvICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CisgICAgICAgIEJVR19PTihp c194ZW5faGVhcF9wYWdlKHBhZ2UpKTsKIAotICAgIEJVR19PTihpc194ZW5f aGVhcF9wYWdlKHBhZ2UpKTsKKyAgICAgICAgcmMgPSB1cGRhdGVfeGVuX21h cHBpbmdzKG1mbiwgMCk7CisgICAgfQogCi0gICAgcmV0dXJuIHVwZGF0ZV94 ZW5fbWFwcGluZ3MocGFnZV90b19tZm4ocGFnZSksIDApOworICAgIC8qCisg ICAgICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4ncyBJT01NVSwg cmVtb3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3cml0YWJsZSB4 ZW5oZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5kIGNsZWFyZWQg YnkKKyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBjb2RlLCByYXRo ZXIgdGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNoOgorICAgICAq IC0gVGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJT01NVSBtYXBw aW5nLCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2FyaWx5IGV4cGVj dCB0aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhlIGZpbmFsCisg ICAgICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAgICAqIEdvIGFo ZWFkIGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgpIG9uIHhlbmhl YXAgcGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2FzZTsgYnV0IG9u bHkgQVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6ZXJvIGFuZCBy ZW1vdmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUgZm9yIG5vbi14 ZW5oZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBhZ2UtPnUuaW51 c2UudHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdUX3dyaXRhYmxl X3BhZ2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBh Z2VfZ2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICggZCAmJiBpc19w dl9kb21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdShkKSkgKQorICAg ICAgICB7CisgICAgICAgICAgICBpbnQgcmMyID0gaW9tbXVfdW5tYXBfcGFn ZShkLCBtZm4pOworCisgICAgICAgICAgICBpZiAoICFyYyApCisgICAgICAg ICAgICAgICAgcmMgPSByYzI7CisgICAgICAgIH0KKworICAgICAgICBpZiAo IGxpa2VseSghaXNfeGVuX2hlYXBfcGFnZShwYWdlKSkgKQorICAgICAgICB7 CisgICAgICAgICAgICBBU1NFUlQoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZv ICYKKyAgICAgICAgICAgICAgICAgICAgKFBHVF90eXBlX21hc2sgfCBQR1Rf Y291bnRfbWFzaykpID09IFBHVF93cml0YWJsZV9wYWdlKTsKKyAgICAgICAg ICAgIC8qCisgICAgICAgICAgICAgKiBDbGVhciB0aGUgdHlwZSB0byByZWNv cmQgdGhlIGZhY3QgdGhhdCBhbGwgd3JpdGFibGUgbWFwcGluZ3MKKyAgICAg ICAgICAgICAqIGhhdmUgYmVlbiByZW1vdmVkLiAgQnV0IGlmIGVpdGhlciBv cGVyYXRpb24gZmFpbGVkLCBsZWF2ZQorICAgICAgICAgICAgICogdHlwZV9p bmZvIGFsb25lLgorICAgICAgICAgICAgICovCisgICAgICAgICAgICBpZiAo IGxpa2VseSghcmMpICkKKyAgICAgICAgICAgICAgICBwYWdlLT51LmludXNl LnR5cGVfaW5mbyAmPSB+KFBHVF90eXBlX21hc2sgfCBQR1RfY291bnRfbWFz ayk7CisgICAgICAgIH0KKyAgICB9CisKKyAgICByZXR1cm4gcmM7CiB9CiAK IHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTI0 MDgsNyArMjQ4NCw3IEBAIHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5m byAqcGFnZSkKIAogICAgIGlmICggdW5saWtlbHkoKG54ICYgUEdDX2NvdW50 X21hc2spID09IDApICkKICAgICB7Ci0gICAgICAgIGlmICggY2xlYW51cF9w YWdlX2NhY2hlYXR0cihwYWdlKSA9PSAwICkKKyAgICAgICAgaWYgKCAhY2xl YW51cF9wYWdlX21hcHBpbmdzKHBhZ2UpICkKICAgICAgICAgICAgIGZyZWVf ZG9taGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICBlbHNlCiAgICAgICAgICAg ICBNRU1fTE9HKCJMZWFraW5nIHBmbiAlbHgiLCBwYWdlX3RvX21mbihwYWdl KSk7CkBAIC00Nzc2LDkgKzQ4NTIsMTAgQEAgaW50IHN0ZWFsX3BhZ2UoCiAg ICAgICogTkIgdGhpcyBpcyBzYWZlIGV2ZW4gaWYgdGhlIHBhZ2UgZW5kcyB1 cCBiZWluZyBnaXZlbiBiYWNrIHRvCiAgICAgICogdGhlIGRvbWFpbiwgYmVj YXVzZSB0aGUgY291bnQgaXMgemVybzogc3Vic2VxdWVudCBtYXBwaW5ncyB3 aWxsCiAgICAgICogY2F1c2UgdGhlIGNhY2hlIGF0dHJpYnV0ZXMgdG8gYmUg cmUtaW5zdGF0ZWQgaW5zaWRlCi0gICAgICogZ2V0X3BhZ2VfZnJvbV9sMWUo KS4KKyAgICAgKiBnZXRfcGFnZV9mcm9tX2wxZSgpLCBvciB0aGUgcGFnZSB0 byBiZSBhZGRlZCBiYWNrIHRvIHRoZSBJT01NVQorICAgICAqIHVwb24gdGhl IHR5cGUgY2hhbmdpbmcgdG8gUEdUX3dyaXRlYWJsZSwgYXMgYXBwcm9wcmlh dGUuCiAgICAgICovCi0gICAgaWYgKCAocmMgPSBjbGVhbnVwX3BhZ2VfY2Fj aGVhdHRyKHBhZ2UpKSApCisgICAgaWYgKCAocmMgPSBjbGVhbnVwX3BhZ2Vf bWFwcGluZ3MocGFnZSkpICkKICAgICB7CiAgICAgICAgIC8qCiAgICAgICAg ICAqIENvdWxkbid0IGZpeHVwIFhlbidzIG1hcHBpbmdzOyBwdXQgdGhpbmdz IHRoZSB3YXkgd2UgZm91bmQKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9t bS9wMm0uYyBiL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwppbmRleCAyMzlmOGU4 ODJiLi45YzE4NDliZjUyIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0v cDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3AybS5jCkBAIC02NDQsMjMg KzY0NCw5IEBAIHAybV9yZW1vdmVfcGFnZShzdHJ1Y3QgcDJtX2RvbWFpbiAq cDJtLCB1bnNpZ25lZCBsb25nIGdmbiwgdW5zaWduZWQgbG9uZyBtZm4sCiAg ICAgcDJtX3R5cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwogCisgICAg LyogSU9NTVUgZm9yIFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdl X3R5cGUoKSBhbmQgcHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdf bW9kZV90cmFuc2xhdGUocDJtLT5kb21haW4pICkKLSAgICB7Ci0gICAgICAg IGludCByYyA9IDA7Ci0KLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KHAybS0+ ZG9tYWluKSApCi0gICAgICAgIHsKLSAgICAgICAgICAgIGZvciAoIGkgPSAw OyBpIDwgKDEgPDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAgICAgICAgICB7 Ci0gICAgICAgICAgICAgICAgaW50IHJldCA9IGlvbW11X3VubWFwX3BhZ2Uo cDJtLT5kb21haW4sIG1mbiArIGkpOwotCi0gICAgICAgICAgICAgICAgaWYg KCAhcmMgKQotICAgICAgICAgICAgICAgICAgICByYyA9IHJldDsKLSAgICAg ICAgICAgIH0KLSAgICAgICAgfQotCi0gICAgICAgIHJldHVybiByYzsKLSAg ICB9CisgICAgICAgIHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2Nr ZWRfYnlfbWUocDJtLCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5n IGdmbj0lI2x4IG1mbj0lI2x4XG4iLCBnZm4sIG1mbik7CkBAIC03MDMsMjYg KzY4OSwzMyBAQCBndWVzdF9waHlzbWFwX2FkZF9lbnRyeShzdHJ1Y3QgZG9t YWluICpkLCBnZm5fdCBnZm4sIG1mbl90IG1mbiwKICAgICBpbnQgcG9kX2Nv dW50ID0gMDsKICAgICBpbnQgcmMgPSAwOwogCisgICAgLyogSU9NTVUgZm9y IFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdlX3R5cGUoKSBhbmQg cHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdfbW9kZV90cmFuc2xh dGUoZCkgKQogICAgIHsKLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KGQpICYm IHQgPT0gcDJtX3JhbV9ydyApCi0gICAgICAgIHsKLSAgICAgICAgICAgIGZv ciAoIGkgPSAwOyBpIDwgKDEgPDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAg ICAgICAgICB7Ci0gICAgICAgICAgICAgICAgcmMgPSBpb21tdV9tYXBfcGFn ZShkLCBtZm5feChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgbWZuX3gobWZuX2FkZChtZm4sIGkpKSwK LSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIElPTU1VRl9y ZWFkYWJsZXxJT01NVUZfd3JpdGFibGUpOwotICAgICAgICAgICAgICAgIGlm ICggcmMgIT0gMCApCi0gICAgICAgICAgICAgICAgewotICAgICAgICAgICAg ICAgICAgICB3aGlsZSAoIGktLSA+IDAgKQotICAgICAgICAgICAgICAgICAg ICAgICAgLyogSWYgc3RhdGVtZW50IHRvIHNhdGlzZnkgX19tdXN0X2NoZWNr LiAqLwotICAgICAgICAgICAgICAgICAgICAgICAgaWYgKCBpb21tdV91bm1h cF9wYWdlKGQsIG1mbl94KG1mbl9hZGQobWZuLCBpKSkpICkKLSAgICAgICAg ICAgICAgICAgICAgICAgICAgICBjb250aW51ZTsKKyAgICAgICAgc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSA9IG1mbl90b19wYWdlKG1mbik7CiAKLSAgICAg ICAgICAgICAgICAgICAgcmV0dXJuIHJjOwotICAgICAgICAgICAgICAgIH0K LSAgICAgICAgICAgIH0KKyAgICAgICAgLyoKKyAgICAgICAgICogT3VyIGlu dGVyZmFjZSBmb3IgUFYgZ3Vlc3RzIHdydCBJT01NVSBlbnRyaWVzIGhhc24n dCBiZWVuIHZlcnkKKyAgICAgICAgICogY2xlYXI7IGJ1dCBoaXN0b3JpY2Fs bHksIHBhZ2VzIGhhdmUgc3RhcnRlZCBvdXQgd2l0aCBJT01NVSBtYXBwaW5n cywKKyAgICAgICAgICogYW5kIG9ubHkgbG9zZSB0aGVtIHdoZW4gY2hhbmdl ZCB0byBhIGRpZmZlcmVudCBwYWdlIHR5cGUuCisgICAgICAgICAqCisgICAg ICAgICAqIFJldGFpbiB0aGlzIHByb3BlcnR5IGJ5IGdyYWJiaW5nIGEgd3Jp dGFibGUgdHlwZSByZWYgYW5kIHRoZW4KKyAgICAgICAgICogZHJvcHBpbmcg aXQgaW1tZWRpYXRlbHkuICBUaGUgcmVzdWx0IHdpbGwgYmUgcGFnZXMgdGhh dCBoYXZlIGEKKyAgICAgICAgICogd3JpdGFibGUgdHlwZSAoYW5kIGFuIElP TU1VIGVudHJ5KSwgYnV0IGEgY291bnQgb2YgMCAoc3VjaCB0aGF0CisgICAg ICAgICAqIGFueSBndWVzdC1yZXF1ZXN0ZWQgdHlwZSBjaGFuZ2VzIHN1Y2Nl ZWQgYW5kIHJlbW92ZSB0aGUgSU9NTVUKKyAgICAgICAgICogZW50cnkpLgor ICAgICAgICAgKi8KKyAgICAgICAgaWYgKCAhbmVlZF9pb21tdShkKSB8fCB0 ICE9IHAybV9yYW1fcncgKQorICAgICAgICAgICAgcmV0dXJuIDA7CisKKyAg ICAgICAgZm9yICggaSA9IDA7IGkgPCAoMVVMIDw8IHBhZ2Vfb3JkZXIpOyAr K2ksICsrcGFnZSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGlmICggZ2V0 X3BhZ2VfYW5kX3R5cGUocGFnZSwgZCwgUEdUX3dyaXRhYmxlX3BhZ2UpICkK KyAgICAgICAgICAgICAgICBwdXRfcGFnZV9hbmRfdHlwZShwYWdlKTsKKyAg ICAgICAgICAgIGVsc2UKKyAgICAgICAgICAgICAgICByZXR1cm4gLUVJTlZB TDsKICAgICAgICAgfQorCiAgICAgICAgIHJldHVybiAwOwogICAgIH0KIAot LSAKMi4yMC4xCgo= --=separator Content-Type: application/octet-stream; name="xsa288-4.9.patch" Content-Disposition: attachment; filename="xsa288-4.9.patch" Content-Transfer-Encoding: base64 RnJvbSBiYzQ0NTllOTEyMzM2NzljZDAxMzk5ODllZGY0NjU2NDE3ZTk1Yjg1 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IDQ3NmVm OGVlODUuLjNhMTFjNjc0NzggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4vaW5p dC5oPgpAQCAtMjQxMSwxOSArMjQyNyw3OSBAQCBzdGF0aWMgaW50IG1vZF9s NF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJjOwog fQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9mIGEg cGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29uZGFy eQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4ncyBt YXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0ZSB0 aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBBIHBh Z2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQViBn dWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBpbmcu CisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQsIGNs ZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4gIE5C IHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxsb2Nh dGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291bnQg aXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRfaW5m bywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6YXRp b24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdzKHN0 cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50IGNh Y2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdDX2Nh Y2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAgaW50 IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IHBhZ2VfdG9fbWZu KHBhZ2UpOwogCi0gICAgaWYgKCBsaWtlbHkoY2FjaGVhdHRyID09IDApICkK LSAgICAgICAgcmV0dXJuIDA7CisgICAgLyoKKyAgICAgKiBJZiB3ZSd2ZSBt b2RpZmllZCB4ZW4gbWFwcGluZ3MgYXMgYSByZXN1bHQgb2YgZ3Vlc3QgY2Fj aGUKKyAgICAgKiBhdHRyaWJ1dGVzLCByZXN0b3JlIHRoZW0gdG8gdGhlICJu b3JtYWwiIHN0YXRlLgorICAgICAqLworICAgIGlmICggdW5saWtlbHkoY2Fj aGVhdHRyKSApCisgICAgeworICAgICAgICBwYWdlLT5jb3VudF9pbmZvICY9 IH5QR0NfY2FjaGVhdHRyX21hc2s7CiAKLSAgICBwYWdlLT5jb3VudF9pbmZv ICY9IH5QR0NfY2FjaGVhdHRyX21hc2s7CisgICAgICAgIEJVR19PTihpc194 ZW5faGVhcF9wYWdlKHBhZ2UpKTsKIAotICAgIEJVR19PTihpc194ZW5faGVh cF9wYWdlKHBhZ2UpKTsKKyAgICAgICAgcmMgPSB1cGRhdGVfeGVuX21hcHBp bmdzKG1mbiwgMCk7CisgICAgfQogCi0gICAgcmV0dXJuIHVwZGF0ZV94ZW5f bWFwcGluZ3MocGFnZV90b19tZm4ocGFnZSksIDApOworICAgIC8qCisgICAg ICogSWYgdGhpcyBtYXkgYmUgaW4gYSBQViBkb21haW4ncyBJT01NVSwgcmVt b3ZlIGl0LgorICAgICAqCisgICAgICogTkIgdGhhdCB3cml0YWJsZSB4ZW5o ZWFwIHBhZ2VzIGhhdmUgdGhlaXIgdHlwZSBzZXQgYW5kIGNsZWFyZWQgYnkK KyAgICAgKiBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYyBjb2RlLCByYXRoZXIg dGhhbiBieSBnZXRfcGFnZV90eXBlKCkuICBBcyBzdWNoOgorICAgICAqIC0g VGhleSBhcmVuJ3QgZXhwZWN0ZWQgdG8gaGF2ZSBhbiBJT01NVSBtYXBwaW5n LCBhbmQKKyAgICAgKiAtIFdlIGRvbid0IG5lY2Vzc2FyaWx5IGV4cGVjdCB0 aGUgdHlwZSBjb3VudCB0byBiZSB6ZXJvIHdoZW4gdGhlIGZpbmFsCisgICAg ICogcHV0X3BhZ2UgaGFwcGVucy4KKyAgICAgKgorICAgICAqIEdvIGFoZWFk IGFuZCBhdHRlbXAgdG8gY2FsbCBpb21tdV91bm1hcCgpIG9uIHhlbmhlYXAg cGFnZXMgYW55d2F5LCBqdXN0CisgICAgICogaW4gY2FzZTsgYnV0IG9ubHkg QVNTRVJUKCkgdGhhdCB0aGUgdHlwZSBjb3VudCBpcyB6ZXJvIGFuZCByZW1v dmUgdGhlCisgICAgICogUEdUX3dyaXRhYmxlIHR5cGUgZm9yIG5vbi14ZW5o ZWFwIHBhZ2VzLgorICAgICAqLworICAgIGlmICggKHBhZ2UtPnUuaW51c2Uu dHlwZV9pbmZvICYgUEdUX3R5cGVfbWFzaykgPT0gUEdUX3dyaXRhYmxlX3Bh Z2UgKQorICAgIHsKKyAgICAgICAgc3RydWN0IGRvbWFpbiAqZCA9IHBhZ2Vf Z2V0X293bmVyKHBhZ2UpOworCisgICAgICAgIGlmICggZCAmJiBpc19wdl9k b21haW4oZCkgJiYgdW5saWtlbHkobmVlZF9pb21tdShkKSkgKQorICAgICAg ICB7CisgICAgICAgICAgICBpbnQgcmMyID0gaW9tbXVfdW5tYXBfcGFnZShk LCBtZm4pOworCisgICAgICAgICAgICBpZiAoICFyYyApCisgICAgICAgICAg ICAgICAgcmMgPSByYzI7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIGxp a2VseSghaXNfeGVuX2hlYXBfcGFnZShwYWdlKSkgKQorICAgICAgICB7Cisg ICAgICAgICAgICBBU1NFUlQoKHBhZ2UtPnUuaW51c2UudHlwZV9pbmZvICYK KyAgICAgICAgICAgICAgICAgICAgKFBHVF90eXBlX21hc2sgfCBQR1RfY291 bnRfbWFzaykpID09IFBHVF93cml0YWJsZV9wYWdlKTsKKyAgICAgICAgICAg IC8qCisgICAgICAgICAgICAgKiBDbGVhciB0aGUgdHlwZSB0byByZWNvcmQg dGhlIGZhY3QgdGhhdCBhbGwgd3JpdGFibGUgbWFwcGluZ3MKKyAgICAgICAg ICAgICAqIGhhdmUgYmVlbiByZW1vdmVkLiAgQnV0IGlmIGVpdGhlciBvcGVy YXRpb24gZmFpbGVkLCBsZWF2ZQorICAgICAgICAgICAgICogdHlwZV9pbmZv IGFsb25lLgorICAgICAgICAgICAgICovCisgICAgICAgICAgICBpZiAoIGxp a2VseSghcmMpICkKKyAgICAgICAgICAgICAgICBwYWdlLT51LmludXNlLnR5 cGVfaW5mbyAmPSB+KFBHVF90eXBlX21hc2sgfCBQR1RfY291bnRfbWFzayk7 CisgICAgICAgIH0KKyAgICB9CisKKyAgICByZXR1cm4gcmM7CiB9CiAKIHZv aWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAqcGFnZSkKQEAgLTI0Mzks NyArMjUxNSw3IEBAIHZvaWQgcHV0X3BhZ2Uoc3RydWN0IHBhZ2VfaW5mbyAq cGFnZSkKIAogICAgIGlmICggdW5saWtlbHkoKG54ICYgUEdDX2NvdW50X21h c2spID09IDApICkKICAgICB7Ci0gICAgICAgIGlmICggY2xlYW51cF9wYWdl X2NhY2hlYXR0cihwYWdlKSA9PSAwICkKKyAgICAgICAgaWYgKCAhY2xlYW51 cF9wYWdlX21hcHBpbmdzKHBhZ2UpICkKICAgICAgICAgICAgIGZyZWVfZG9t aGVhcF9wYWdlKHBhZ2UpOwogICAgICAgICBlbHNlCiAgICAgICAgICAgICBn ZHByaW50ayhYRU5MT0dfV0FSTklORywKQEAgLTQ4MjksOSArNDkwNSwxMCBA QCBpbnQgc3RlYWxfcGFnZSgKICAgICAgKiBOQiB0aGlzIGlzIHNhZmUgZXZl biBpZiB0aGUgcGFnZSBlbmRzIHVwIGJlaW5nIGdpdmVuIGJhY2sgdG8KICAg ICAgKiB0aGUgZG9tYWluLCBiZWNhdXNlIHRoZSBjb3VudCBpcyB6ZXJvOiBz dWJzZXF1ZW50IG1hcHBpbmdzIHdpbGwKICAgICAgKiBjYXVzZSB0aGUgY2Fj aGUgYXR0cmlidXRlcyB0byBiZSByZS1pbnN0YXRlZCBpbnNpZGUKLSAgICAg KiBnZXRfcGFnZV9mcm9tX2wxZSgpLgorICAgICAqIGdldF9wYWdlX2Zyb21f bDFlKCksIG9yIHRoZSBwYWdlIHRvIGJlIGFkZGVkIGJhY2sgdG8gdGhlIElP TU1VCisgICAgICogdXBvbiB0aGUgdHlwZSBjaGFuZ2luZyB0byBQR1Rfd3Jp dGVhYmxlLCBhcyBhcHByb3ByaWF0ZS4KICAgICAgKi8KLSAgICBpZiAoIChy YyA9IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIocGFnZSkpICkKKyAgICBpZiAo IChyYyA9IGNsZWFudXBfcGFnZV9tYXBwaW5ncyhwYWdlKSkgKQogICAgIHsK ICAgICAgICAgLyoKICAgICAgICAgICogQ291bGRuJ3QgZml4dXAgWGVuJ3Mg bWFwcGluZ3M7IHB1dCB0aGluZ3MgdGhlIHdheSB3ZSBmb3VuZApkaWZmIC0t Z2l0IGEveGVuL2FyY2gveDg2L21tL3AybS5jIGIveGVuL2FyY2gveDg2L21t L3AybS5jCmluZGV4IGVjZTMyZmZiOGYuLjI1ZmVkMDhlZmIgMTAwNjQ0Ci0t LSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0uYworKysgYi94ZW4vYXJjaC94ODYv bW0vcDJtLmMKQEAgLTcwNiwyMyArNzA2LDkgQEAgcDJtX3JlbW92ZV9wYWdl KHN0cnVjdCBwMm1fZG9tYWluICpwMm0sIHVuc2lnbmVkIGxvbmcgZ2ZuLCB1 bnNpZ25lZCBsb25nIG1mbiwKICAgICBwMm1fdHlwZV90IHQ7CiAgICAgcDJt X2FjY2Vzc190IGE7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlz IGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAq LwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShwMm0tPmRvbWFp bikgKQotICAgIHsKLSAgICAgICAgaW50IHJjID0gMDsKLQotICAgICAgICBp ZiAoIG5lZWRfaW9tbXUocDJtLT5kb21haW4pICkKLSAgICAgICAgewotICAg ICAgICAgICAgZm9yICggaSA9IDA7IGkgPCAoMSA8PCBwYWdlX29yZGVyKTsg aSsrICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICBpbnQgcmV0 ID0gaW9tbXVfdW5tYXBfcGFnZShwMm0tPmRvbWFpbiwgbWZuICsgaSk7Ci0K LSAgICAgICAgICAgICAgICBpZiAoICFyYyApCi0gICAgICAgICAgICAgICAg ICAgIHJjID0gcmV0OwotICAgICAgICAgICAgfQotICAgICAgICB9Ci0KLSAg ICAgICAgcmV0dXJuIHJjOwotICAgIH0KKyAgICAgICAgcmV0dXJuIDA7CiAK ICAgICBBU1NFUlQoZ2ZuX2xvY2tlZF9ieV9tZShwMm0sIGdmbikpOwogICAg IFAyTV9ERUJVRygicmVtb3ZpbmcgZ2ZuPSUjbHggbWZuPSUjbHhcbiIsIGdm biwgbWZuKTsKQEAgLTc2NSwyNiArNzUxLDMzIEBAIGd1ZXN0X3BoeXNtYXBf YWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQsIGdmbl90IGdmbiwgbWZuX3Qg bWZuLAogICAgIGludCBwb2RfY291bnQgPSAwOwogICAgIGludCByYyA9IDA7 CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQgaW4g Z2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlmICgg IXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSApCiAgICAgewotICAgICAgICBp ZiAoIG5lZWRfaW9tbXUoZCkgJiYgdCA9PSBwMm1fcmFtX3J3ICkKLSAgICAg ICAgewotICAgICAgICAgICAgZm9yICggaSA9IDA7IGkgPCAoMSA8PCBwYWdl X29yZGVyKTsgaSsrICkKLSAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAg ICByYyA9IGlvbW11X21hcF9wYWdlKGQsIG1mbl94KG1mbl9hZGQobWZuLCBp KSksCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtZm5f eChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgSU9NTVVGX3JlYWRhYmxlfElPTU1VRl93cml0YWJsZSk7 Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAhPSAwICkKLSAgICAgICAgICAg ICAgICB7Ci0gICAgICAgICAgICAgICAgICAgIHdoaWxlICggaS0tID4gMCAp Ci0gICAgICAgICAgICAgICAgICAgICAgICAvKiBJZiBzdGF0ZW1lbnQgdG8g c2F0aXNmeSBfX211c3RfY2hlY2suICovCi0gICAgICAgICAgICAgICAgICAg ICAgICBpZiAoIGlvbW11X3VubWFwX3BhZ2UoZCwgbWZuX3gobWZuX2FkZCht Zm4sIGkpKSkgKQotICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNvbnRp bnVlOworICAgICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwYWdlID0gbWZuX3Rv X3BhZ2UobWZuKTsKIAotICAgICAgICAgICAgICAgICAgICByZXR1cm4gcmM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgfQorICAgICAgICAv KgorICAgICAgICAgKiBPdXIgaW50ZXJmYWNlIGZvciBQViBndWVzdHMgd3J0 IElPTU1VIGVudHJpZXMgaGFzbid0IGJlZW4gdmVyeQorICAgICAgICAgKiBj bGVhcjsgYnV0IGhpc3RvcmljYWxseSwgcGFnZXMgaGF2ZSBzdGFydGVkIG91 dCB3aXRoIElPTU1VIG1hcHBpbmdzLAorICAgICAgICAgKiBhbmQgb25seSBs b3NlIHRoZW0gd2hlbiBjaGFuZ2VkIHRvIGEgZGlmZmVyZW50IHBhZ2UgdHlw ZS4KKyAgICAgICAgICoKKyAgICAgICAgICogUmV0YWluIHRoaXMgcHJvcGVy dHkgYnkgZ3JhYmJpbmcgYSB3cml0YWJsZSB0eXBlIHJlZiBhbmQgdGhlbgor ICAgICAgICAgKiBkcm9wcGluZyBpdCBpbW1lZGlhdGVseS4gIFRoZSByZXN1 bHQgd2lsbCBiZSBwYWdlcyB0aGF0IGhhdmUgYQorICAgICAgICAgKiB3cml0 YWJsZSB0eXBlIChhbmQgYW4gSU9NTVUgZW50cnkpLCBidXQgYSBjb3VudCBv ZiAwIChzdWNoIHRoYXQKKyAgICAgICAgICogYW55IGd1ZXN0LXJlcXVlc3Rl ZCB0eXBlIGNoYW5nZXMgc3VjY2VlZCBhbmQgcmVtb3ZlIHRoZSBJT01NVQor ICAgICAgICAgKiBlbnRyeSkuCisgICAgICAgICAqLworICAgICAgICBpZiAo ICFuZWVkX2lvbW11KGQpIHx8IHQgIT0gcDJtX3JhbV9ydyApCisgICAgICAg ICAgICByZXR1cm4gMDsKKworICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgx VUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytwYWdlICkKKyAgICAgICAgewor ICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9hbmRfdHlwZShwYWdlLCBkLCBQ R1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAgIHB1dF9wYWdl X2FuZF90eXBlKHBhZ2UpOworICAgICAgICAgICAgZWxzZQorICAgICAgICAg ICAgICAgIHJldHVybiAtRUlOVkFMOwogICAgICAgICB9CisKICAgICAgICAg cmV0dXJuIDA7CiAgICAgfQogCi0tIAoyLjIwLjEKCg== --=separator Content-Type: application/octet-stream; name="xsa288-4.11.patch" Content-Disposition: attachment; filename="xsa288-4.11.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZDNhMDJlMzIwZjg4NzQ3Yjc1ZTM3OTRjMmU2OTQyODRhZTY0YzNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFdlZCwgMjMgSmFu IDIwMTkgMTE6NTc6NDYgKzAwMDAKU3ViamVjdDogW1BBVENIXSB4ZW46IE1h a2UgY29oZXJlbnQgUFYgSU9NTVUgZGlzY2lwbGluZQoKSW4gb3JkZXIgZm9y IGEgUFYgZG9tYWluIHRvIHNldCB1cCBETUEgZnJvbSBhIHBhc3NlZC10aHJv dWdoIGRldmljZSB0bwpvbmUgb2YgaXRzIHBhZ2VzLCB0aGUgcGFnZSBtdXN0 IGJlIG1hcHBlZCBpbiB0aGUgSU9NTVUuICBPbiB0aGUgb3RoZXIKaGFuZCwg YmVmb3JlIGEgUFYgcGFnZSBtYXkgYmUgdXNlZCBhcyBhICJzcGVjaWFsIiBw YWdlIHR5cGUgKHN1Y2ggYXMgYQpwYWdldGFibGUgb3IgZGVzY3JpcHRvciB0 YWJsZSksIGl0IF9tdXN0IG5vdF8gYmUgd3JpdGFibGUgaW4gdGhlIElPTU1V CihvdGhlcndpc2UgYSBtYWxpY2lvdXMgZ3Vlc3QgY291bGQgRE1BIGFyYml0 cmFyeSBwYWdlIHRhYmxlcyBpbnRvIHRoZQptZW1vcnksIGJ5cGFzc2luZyBY ZW4ncyBzYWZldHkgY2hlY2tzKTsgYW5kIFhlbidzIGN1cnJlbnQgcnVsZSBp cyB0bwpoYXZlIHN1Y2ggcGFnZXMgbm90IGluIHRoZSBJT01NVSBhdCBhbGwu CgpBdCB0aGUgbW9tZW50LCBpbiBvcmRlciB0byBhY2NvbXBsaXNoIHRoaXMs IHRoZSBjb2RlIGJvcnJvd3MgSFZNCmRvbWFpbidzICJwaHlzbWFwIiBjb25j ZXB0OiBXaGVuIGEgcGFnZSBpcyBhc3NpZ25lZCB0byBhIGd1ZXN0LApndWVz c19waHlzbWFwX2FkZF9lbnRyeSgpIGlzIGNhbGxlZCwgd2hpY2ggZm9yIFBW IGd1ZXN0cywgd2lsbCBjcmVhdGUKYSB3cml0YWJsZSBJT01NVSBtYXBwaW5n OyBhbmQgd2hlbiBhIHBhZ2UgaXMgcmVtb3ZlZCwKZ3Vlc3RfcGh5c21hcF9y ZW1vdmVfZW50cnkoKSBpcyBjYWxsZWQsIHdoaWNoIHdpbGwgcmVtb3ZlIHRo ZSBtYXBwaW5nLgoKQWRkaXRpb25hbGx5LCB3aGVuIGEgcGFnZSBnYWlucyB0 aGUgUEdUX3dyaXRhYmxlIHBhZ2UgdHlwZSwgdGhlIHBhZ2UKd2lsbCBiZSBh ZGRlZCBpbnRvIHRoZSBJT01NVTsgYW5kIHdoZW4gdGhlIHBhZ2UgY2hhbmdl cyBhd2F5IGZyb20gYQpQR1Rfd3JpdGFibGUgdHlwZSwgdGhlIHBhZ2Ugd2ls bCBiZSByZW1vdmVkIGZyb20gdGhlIElPTU1VLgoKVW5mb3J0dW5hdGVseSwg Ym9ycm93aW5nIHRoZSAicGh5c21hcCIgY29uY2VwdCBmcm9tIEhWTSBkb21h aW5zIGlzCnByb2JsZW1hdGljLiAgSFZNIGRvbWFpbnMgaGF2ZSBhIGxvY2sg b24gdGhlaXIgcDJtIHRhYmxlcywgZW5zdXJpbmcKc3luY2hyb25pemF0aW9u IGJldHdlZW4gbW9kaWZpY2F0aW9ucyB0byB0aGUgcDJtOyBhbmQgYWxsIGh5 cGVyY2FsbApwYXJhbWV0ZXJzIG11c3QgZmlyc3QgYmUgdHJhbnNsYXRlZCB0 aHJvdWdoIHRoZSBwMm0gYmVmb3JlIGJlaW5nIHVzZWQuCgpUcnlpbmcgdG8g bWl4IHRoaXMgbG9ja2VkLWFuZC1nYXRlZCBhcHByb2FjaCB3aXRoIFBWJ3Mg bG9jay1mcmVlCmFwcHJvYWNoIGxlYWRzIHRvIHNldmVyYWwgcmFjZXMgYW5k IGluY29uc2lzdGVuY2llczoKCiogQSByYWNlIGJldHdlZW4gYSBwYWdlIGJl aW5nIGFzc2lnbmVkIGFuZCBpdCBiZWluZyBwdXQgaW50byB0aGUKICBwaHlz bWFwOyBmb3IgZXhhbXBsZToKICAtIFAxOiBjYWxsIHBvcHVsYXRlX3BoeXNt YXAoKSB7IEEgPSBhbGxvY2F0ZV9kb21oZWFwX3BhZ2VzKCkgfQogIC0gUDI6 IEd1ZXNzIHBhZ2UgQSdzIG1mbiwgYW5kIGNhbGwgZGVjcmVhc2VfcmVzZXJ2 YXRpb24oQSkuICBBIGlzIG93bmVkIGJ5IHRoZSBkb21haW4sCiAgICAgICAg YW5kIHNvIFhlbiB3aWxsIGNsZWFyIHRoZSBQR0NfYWxsb2NhdGVkIGJpdCBh bmQgZnJlZSB0aGUgcGFnZQogIC0gUDE6IGZpbmlzaGVzIHBvcHVsYXRlX3Bo eXNtYXAoKSB7IGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KCkgfQoKICBOb3cg dGhlIGRvbWFpbiBoYXMgYSB3cml0YWJsZSBJT01NVSBtYXBwaW5nIHRvIGEg cGFnZSBpdCBubyBsb25nZXIgb3ducy4KCiogUGFnZXMgc3RhcnQgb3V0IGFz IHR5cGUgUEdUX25vbmUsIGJ1dCB3aXRoIGEgd3JpdGFibGUgSU9NTVUgbWFw cGluZy4KICBJZiBhIGd1ZXN0IHVzZXMgYSBwYWdlIGFzIGEgcGFnZSB0YWJs ZSB3aXRob3V0IGV2ZXIgaGF2aW5nIGNyZWF0ZWQgYQogIHdyaXRhYmxlIG1h cHBpbmcsIHRoZSBJT01NVSBtYXBwaW5nIHdpbGwgbm90IGJlIHJlbW92ZWQ7 IHRoZSBndWVzdAogIHdpbGwgaGF2ZSBhIHdyaXRhYmxlIElPTU1VIG1hcHBp bmcgdG8gYSBwYWdlIGl0IGlzIGN1cnJlbnRseSB1c2luZwogIGFzIGEgcGFn ZSB0YWJsZS4KCiogQSBuZXdseS1hbGxvY2F0ZWQgcGFnZSBjYW4gYmUgRE1B J2QgaW50byB3aXRoIG5vIHNwZWNpYWwgYWN0aW9ucyBvbgogIHRoZSBwYXJ0 IG9mIHRoZSBndWVzdDsgSG93ZXZlciwgaWYgYSBwYWdlIGlzIHByb21vdGVk IHRvIGEKICBub24td3JpdGFibGUgdHlwZSwgdGhlIHBhZ2UgbXVzdCBiZSBt YXBwZWQgd2l0aCBhIHdyaXRhYmxlIHR5cGUgYmVmb3JlCiAgRE1BJ2luZyB0 byBpdCBhZ2Fpbiwgb3IgdGhlIHRyYW5zYWN0aW9uIHdpbGwgZmFpbC4KClRv IGZpeCB0aGlzLCBkbyBhd2F5IHdpdGggdGhlICJQViBwaHlzbWFwIiBjb25j ZXB0IGVudGlyZWx5LCBhbmQKcmVwbGFjZSBpdCB3aXRoIHRoZSBmb2xsb3dp bmcgSU9NTVUgZGlzY2lwbGluZSBmb3IgUFYgZ3Vlc3RzOgogLSAodHlwZSA9 PSBQR1Rfd3JpdGFibGUpIDw9PiBpbiBpb21tdSAoZXZlbiBpZiB0eXBlX2Nv dW50ID09IDApCiAtIFVwb24gYSBmaW5hbCBwdXRfcGFnZSgpLCBjaGVjayB0 byBzZWUgaWYgdHlwZSBpcyBQR1Rfd3JpdGFibGU7IGlmIHNvLAogICBpb21t dV91bm1hcC4KCkluIG9yZGVyIHRvIGFjaGlldmUgdGhhdDoKCi0gUmVtb3Zl IFBWIElPTU1VIHJlbGF0ZWQgY29kZSBmcm9tIGd1ZXN0X3BoeXNtYXBfKgoK LSBSZXB1cnBvc2UgY2xlYW51cF9wYWdlX2NhY2hlYXR0cigpIGludG8gYSBn ZW5lcmFsCiAgY2xlYW51cF9wYWdlX21hcHBpbmdzKCkgZnVuY3Rpb24sIHdo aWNoIHdpbGwgYm90aCBmaXggdXAgWGVuCiAgbWFwcGluZ3MgZm9yIHBhZ2Vz IHdpdGggc3BlY2lhbCBjYWNoZSBhdHRyaWJ1dGVzLCBhbmQgYWxzbyBjaGVj ayBmb3IKICBhIFBHVF93cml0YWJsZSB0eXBlIGFuZCByZW1vdmUgcGFnZXMg aWYgYXBwcm9wcmlhdGUuCgotIEZvciBjb21wYXRpYmlsaXR5IHdpdGggY3Vy cmVudCBndWVzdHMsIGdyYWItYW5kLXJlbGVhc2UgYQogIFBHVF93cml0YWJs ZV9wYWdlIHR5cGUgZm9yIFBWIGd1ZXN0cyBpbiBndWVzdF9waHlzbWFwX2Fk ZF9lbnRyeSgpLgogIFRoaXMgd2lsbCBjYXVzZSBtb3N0ICJub3JtYWwiIGd1 ZXN0IHBhZ2VzIHRvIHN0YXJ0IG91dCBsaWZlIHdpdGgKICBQR1Rfd3JpdGFi bGVfcGFnZSB0eXBlIChhbmQgdGh1cyBhbiBJT01NVSBtYXBwaW5nKSwgYnV0 IG5vIHR5cGUKICBjb3VudCAoc28gdGhhdCB0aGV5IGNhbiBiZSB1c2VkIGFz IHNwZWNpYWwgY2FzZXMgYXQgd2lsbCkuCgpBbHNvLCBub3RlIHRoYXQgdGhl cmUgaXMgb25lIGV4Y2VwdGlvbiB0byB0byB0aGUgIlBHVF93cml0YWJsZSA9 PiBpbgppb21tdSIgcnVsZTogeGVuaGVhcCBwYWdlcyBzaGFyZWQgd2l0aCBn dWVzdHMgbWF5IGJlIGdpdmVuIGEKUEdUX3dyaXRhYmxlIHR5cGUgd2l0aCBv bmUgdHlwZSByZWZlcmVuY2UuICBUaGlzIHJlZmVyZW5jZSBwcmV2ZW50cwp0 aGUgdHlwZSBmcm9tIGNoYW5naW5nLCB3aGljaCBpbiB0dXJuIHByZXZlbnRz IHBhZ2UgZnJvbSBnYWluaW5nIGFuCklPTU1VIG1hcHBpbmcgaW4gZ2V0X3Bh Z2VfdHlwZSgpLiAgSXQncyBub3QgY2xlYXIgd2hldGhlciB0aGlzIHdhcwpp bnRlbnRpb25hbCBvciBub3QsIGJ1dCBpdCdzIG5vdCBzb21ldGhpbmcgdG8g Y2hhbmdlIGluIGEgc2VjdXJpdHkKdXBkYXRlLgoKVGhpcyBpcyBYU0EtMjg4 LgoKUmVwb3J0ZWQtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNp dHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3Jn ZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0KIHhlbi9hcmNoL3g4Ni9tbS5j ICAgICB8IDk1ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKy0tLS0KIHhlbi9hcmNoL3g4Ni9tbS9wMm0uYyB8IDU3ICsrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNl cnRpb25zKCspLCA0MSBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4v YXJjaC94ODYvbW0uYyBiL3hlbi9hcmNoL3g4Ni9tbS5jCmluZGV4IGQ4ZmY1 OGM5MDEuLmFkOGFhY2FkNjggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9t bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS5jCkBAIC04MSw2ICs4MSwyMiBA QAogICogT1Mncywgd2hpY2ggd2lsbCBnZW5lcmFsbHkgdXNlIHRoZSBXUCBi aXQgdG8gc2ltcGxpZnkgY29weS1vbi13cml0ZQogICogaW1wbGVtZW50YXRp b24gKGluIHRoYXQgY2FzZSwgT1Mgd2FudHMgYSBmYXVsdCB3aGVuIGl0IHdy aXRlcyB0bwogICogYW4gYXBwbGljYXRpb24tc3VwcGxpZWQgYnVmZmVyKS4K KyAqCisgKiBQViBkb21VcyBhbmQgSU9NTVVzOgorICogLS0tLS0tLS0tLS0t LS0tLS0tLS0KKyAqIEZvciBhIGd1ZXN0IHRvIGJlIGFibGUgdG8gRE1BIGlu dG8gYSBwYWdlLCB0aGF0IHBhZ2UgbXVzdCBiZSBpbiB0aGUKKyAqIGRvbWFp bidzIElPTU1VLiAgSG93ZXZlciwgd2UgKm11c3Qgbm90KiBhbGxvdyBETUEg aW50byAnc3BlY2lhbCcKKyAqIHBhZ2VzIChzdWNoIGFzIHBhZ2UgdGFibGUg cGFnZXMsIGRlc2NyaXB0b3IgdGFibGVzLCAmYyk7IGFuZCB3ZQorICogbXVz dCBhbHNvIGVuc3VyZSB0aGF0IG1hcHBpbmdzIGFyZSByZW1vdmVkIGZyb20g dGhlIElPTU1VIHdoZW4gdGhlCisgKiBwYWdlIGlzIGZyZWVkLiAgRmluYWxs eSwgaXQgaXMgaW5oZXJlbnRseSByYWN5IHRvIG1ha2UgYW55IGNoYW5nZXMK KyAqIGJhc2VkIG9uIGEgcGFnZSB3aXRoIGEgbm9uLXplcm8gdHlwZSBjb3Vu dC4KKyAqCisgKiBUbyB0aGF0IGVuZCwgd2UgcHV0IHRoZSBwYWdlIGluIHRo ZSBJT01NVSBvbmx5IHdoZW4gYSBwYWdlIGdhaW5zCisgKiB0aGUgUEdUX3dy aXRlYWJsZSB0eXBlOyBhbmQgd2UgcmVtb3ZlIHRoZSBwYWdlIHdoZW4gaXQg bG9zZXMgdGhlCisgKiBQR1Rfd3JpdGVhYmxlIHR5cGUgKG5vdCB3aGVuIHRo ZSB0eXBlIGNvdW50IGdvZXMgdG8gemVybykuICBUaGlzCisgKiBlZmZlY3Rp dmVseSBwcm90ZWN0cyB0aGUgSU9NTVUgc3RhdHVzIHVwZGF0ZSB3aXRoIHRo ZSB0eXBlIGNvdW50IHdlCisgKiBoYXZlIGp1c3QgYWNxdWlyZWQuICBXZSBt dXN0IGFsc28gY2hlY2sgZm9yIFBHVF93cml0YWJsZSB0eXBlIHdoZW4KKyAq IGRvaW5nIHRoZSBmaW5hbCBwdXRfcGFnZSgpLCBhbmQgcmVtb3ZlIGl0IGZy b20gdGhlIGlvbW11IGlmIHNvLgogICovCiAKICNpbmNsdWRlIDx4ZW4vaW5p dC5oPgpAQCAtMjI3NSwxOSArMjI5MSw3OSBAQCBzdGF0aWMgaW50IG1vZF9s NF9lbnRyeShsNF9wZ2VudHJ5X3QgKnBsNGUsCiAgICAgcmV0dXJuIHJjOwog fQogCi1zdGF0aWMgaW50IGNsZWFudXBfcGFnZV9jYWNoZWF0dHIoc3RydWN0 IHBhZ2VfaW5mbyAqcGFnZSkKKy8qCisgKiBJbiB0aGUgY291cnNlIG9mIGEg cGFnZSdzIHVzZSwgaXQgbWF5IGhhdmUgY2F1c2VkIG90aGVyIHNlY29uZGFy eQorICogbWFwcGluZ3MgdG8gaGF2ZSBjaGFuZ2VkOgorICogLSBYZW4ncyBt YXBwaW5ncyBtYXkgaGF2ZSBiZWVuIGNoYW5nZWQgdG8gYWNjb21vZGF0ZSB0 aGUgcmVxdWVzdGVkCisgKiAgIGNhY2hlIGF0dGlidXRlcworICogLSBBIHBh Z2UgbWF5IGhhdmUgYmVlbiBwdXQgaW50byB0aGUgSU9NTVUgb2YgYSBQViBn dWVzdCB3aGVuIGl0CisgKiAgIGdhaW5lZCBhIHdyaXRhYmxlIG1hcHBpbmcu CisgKgorICogTm93IHRoYXQgdGhlIHBhZ2UgaXMgYmVpbmcgZnJlZWQsIGNs ZWFuIHVwIHRoZXNlIG1hcHBpbmdzIGlmCisgKiBhcHByb3ByaWF0ZS4gIE5C IHRoYXQgYXQgdGhpcyBwb2ludCB0aGUgcGFnZSBpcyBzdGlsbCAiYWxsb2Nh dGVkIiwKKyAqIGJ1dCBub3QgImxpdmUiIChpLmUuLCBpdHMgcmVmY291bnQg aXMgMCksIHNvIGl0J3Mgc2FmZSB0byByZWFkIHRoZQorICogY291bnRfaW5m bywgb3duZXIsIGFuZCB0eXBlX2luZm8gd2l0aG91dCBzeW5jaHJvbml6YXRp b24uCisgKi8KK3N0YXRpYyBpbnQgY2xlYW51cF9wYWdlX21hcHBpbmdzKHN0 cnVjdCBwYWdlX2luZm8gKnBhZ2UpCiB7CiAgICAgdW5zaWduZWQgaW50IGNh Y2hlYXR0ciA9CiAgICAgICAgIChwYWdlLT5jb3VudF9pbmZvICYgUEdDX2Nh Y2hlYXR0cl9tYXNrKSA+PiBQR0NfY2FjaGVhdHRyX2Jhc2U7CisgICAgaW50 IHJjID0gMDsKKyAgICB1bnNpZ25lZCBsb25nIG1mbiA9IG1mbl94KHBhZ2Vf dG9fbWZuKHBhZ2UpKTsKIAotICAgIGlmICggbGlrZWx5KGNhY2hlYXR0ciA9 PSAwKSApCi0gICAgICAgIHJldHVybiAwOworICAgIC8qCisgICAgICogSWYg d2UndmUgbW9kaWZpZWQgeGVuIG1hcHBpbmdzIGFzIGEgcmVzdWx0IG9mIGd1 ZXN0IGNhY2hlCisgICAgICogYXR0cmlidXRlcywgcmVzdG9yZSB0aGVtIHRv IHRoZSAibm9ybWFsIiBzdGF0ZS4KKyAgICAgKi8KKyAgICBpZiAoIHVubGlr ZWx5KGNhY2hlYXR0cikgKQorICAgIHsKKyAgICAgICAgcGFnZS0+Y291bnRf aW5mbyAmPSB+UEdDX2NhY2hlYXR0cl9tYXNrOwogCi0gICAgcGFnZS0+Y291 bnRfaW5mbyAmPSB+UEdDX2NhY2hlYXR0cl9tYXNrOworICAgICAgICBCVUdf T04oaXNfeGVuX2hlYXBfcGFnZShwYWdlKSk7CiAKLSAgICBCVUdfT04oaXNf eGVuX2hlYXBfcGFnZShwYWdlKSk7CisgICAgICAgIHJjID0gdXBkYXRlX3hl bl9tYXBwaW5ncyhtZm4sIDApOworICAgIH0KIAotICAgIHJldHVybiB1cGRh dGVfeGVuX21hcHBpbmdzKG1mbl94KHBhZ2VfdG9fbWZuKHBhZ2UpKSwgMCk7 CisgICAgLyoKKyAgICAgKiBJZiB0aGlzIG1heSBiZSBpbiBhIFBWIGRvbWFp bidzIElPTU1VLCByZW1vdmUgaXQuCisgICAgICoKKyAgICAgKiBOQiB0aGF0 IHdyaXRhYmxlIHhlbmhlYXAgcGFnZXMgaGF2ZSB0aGVpciB0eXBlIHNldCBh bmQgY2xlYXJlZCBieQorICAgICAqIGltcGxlbWVudGF0aW9uLXNwZWNpZmlj IGNvZGUsIHJhdGhlciB0aGFuIGJ5IGdldF9wYWdlX3R5cGUoKS4gIEFzIHN1 Y2g6CisgICAgICogLSBUaGV5IGFyZW4ndCBleHBlY3RlZCB0byBoYXZlIGFu IElPTU1VIG1hcHBpbmcsIGFuZAorICAgICAqIC0gV2UgZG9uJ3QgbmVjZXNz YXJpbHkgZXhwZWN0IHRoZSB0eXBlIGNvdW50IHRvIGJlIHplcm8gd2hlbiB0 aGUgZmluYWwKKyAgICAgKiBwdXRfcGFnZSBoYXBwZW5zLgorICAgICAqCisg ICAgICogR28gYWhlYWQgYW5kIGF0dGVtcCB0byBjYWxsIGlvbW11X3VubWFw KCkgb24geGVuaGVhcCBwYWdlcyBhbnl3YXksIGp1c3QKKyAgICAgKiBpbiBj YXNlOyBidXQgb25seSBBU1NFUlQoKSB0aGF0IHRoZSB0eXBlIGNvdW50IGlz IHplcm8gYW5kIHJlbW92ZSB0aGUKKyAgICAgKiBQR1Rfd3JpdGFibGUgdHlw ZSBmb3Igbm9uLXhlbmhlYXAgcGFnZXMuCisgICAgICovCisgICAgaWYgKCAo cGFnZS0+dS5pbnVzZS50eXBlX2luZm8gJiBQR1RfdHlwZV9tYXNrKSA9PSBQ R1Rfd3JpdGFibGVfcGFnZSApCisgICAgeworICAgICAgICBzdHJ1Y3QgZG9t YWluICpkID0gcGFnZV9nZXRfb3duZXIocGFnZSk7CisKKyAgICAgICAgaWYg KCBkICYmIGlzX3B2X2RvbWFpbihkKSAmJiB1bmxpa2VseShuZWVkX2lvbW11 KGQpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGludCByYzIgPSBpb21t dV91bm1hcF9wYWdlKGQsIG1mbik7CisKKyAgICAgICAgICAgIGlmICggIXJj ICkKKyAgICAgICAgICAgICAgICByYyA9IHJjMjsKKyAgICAgICAgfQorCisg ICAgICAgIGlmICggbGlrZWx5KCFpc194ZW5faGVhcF9wYWdlKHBhZ2UpKSAp CisgICAgICAgIHsKKyAgICAgICAgICAgIEFTU0VSVCgocGFnZS0+dS5pbnVz ZS50eXBlX2luZm8gJgorICAgICAgICAgICAgICAgICAgICAoUEdUX3R5cGVf bWFzayB8IFBHVF9jb3VudF9tYXNrKSkgPT0gUEdUX3dyaXRhYmxlX3BhZ2Up OworICAgICAgICAgICAgLyoKKyAgICAgICAgICAgICAqIENsZWFyIHRoZSB0 eXBlIHRvIHJlY29yZCB0aGUgZmFjdCB0aGF0IGFsbCB3cml0YWJsZSBtYXBw aW5ncworICAgICAgICAgICAgICogaGF2ZSBiZWVuIHJlbW92ZWQuICBCdXQg aWYgZWl0aGVyIG9wZXJhdGlvbiBmYWlsZWQsIGxlYXZlCisgICAgICAgICAg ICAgKiB0eXBlX2luZm8gYWxvbmUuCisgICAgICAgICAgICAgKi8KKyAgICAg ICAgICAgIGlmICggbGlrZWx5KCFyYykgKQorICAgICAgICAgICAgICAgIHBh Z2UtPnUuaW51c2UudHlwZV9pbmZvICY9IH4oUEdUX3R5cGVfbWFzayB8IFBH VF9jb3VudF9tYXNrKTsKKyAgICAgICAgfQorICAgIH0KKworICAgIHJldHVy biByYzsKIH0KIAogdm9pZCBwdXRfcGFnZShzdHJ1Y3QgcGFnZV9pbmZvICpw YWdlKQpAQCAtMjMwMyw3ICsyMzc5LDcgQEAgdm9pZCBwdXRfcGFnZShzdHJ1 Y3QgcGFnZV9pbmZvICpwYWdlKQogCiAgICAgaWYgKCB1bmxpa2VseSgobngg JiBQR0NfY291bnRfbWFzaykgPT0gMCkgKQogICAgIHsKLSAgICAgICAgaWYg KCBjbGVhbnVwX3BhZ2VfY2FjaGVhdHRyKHBhZ2UpID09IDAgKQorICAgICAg ICBpZiAoICFjbGVhbnVwX3BhZ2VfbWFwcGluZ3MocGFnZSkgKQogICAgICAg ICAgICAgZnJlZV9kb21oZWFwX3BhZ2UocGFnZSk7CiAgICAgICAgIGVsc2UK ICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLApAQCAtNDAy MCw5ICs0MDk2LDEwIEBAIGludCBzdGVhbF9wYWdlKAogICAgICAqIE5CIHRo aXMgaXMgc2FmZSBldmVuIGlmIHRoZSBwYWdlIGVuZHMgdXAgYmVpbmcgZ2l2 ZW4gYmFjayB0bwogICAgICAqIHRoZSBkb21haW4sIGJlY2F1c2UgdGhlIGNv dW50IGlzIHplcm86IHN1YnNlcXVlbnQgbWFwcGluZ3Mgd2lsbAogICAgICAq IGNhdXNlIHRoZSBjYWNoZSBhdHRyaWJ1dGVzIHRvIGJlIHJlLWluc3RhdGVk IGluc2lkZQotICAgICAqIGdldF9wYWdlX2Zyb21fbDFlKCkuCisgICAgICog Z2V0X3BhZ2VfZnJvbV9sMWUoKSwgb3IgdGhlIHBhZ2UgdG8gYmUgYWRkZWQg YmFjayB0byB0aGUgSU9NTVUKKyAgICAgKiB1cG9uIHRoZSB0eXBlIGNoYW5n aW5nIHRvIFBHVF93cml0ZWFibGUsIGFzIGFwcHJvcHJpYXRlLgogICAgICAq LwotICAgIGlmICggKHJjID0gY2xlYW51cF9wYWdlX2NhY2hlYXR0cihwYWdl KSkgKQorICAgIGlmICggKHJjID0gY2xlYW51cF9wYWdlX21hcHBpbmdzKHBh Z2UpKSApCiAgICAgewogICAgICAgICAvKgogICAgICAgICAgKiBDb3VsZG4n dCBmaXh1cCBYZW4ncyBtYXBwaW5nczsgcHV0IHRoaW5ncyB0aGUgd2F5IHdl IGZvdW5kCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvbW0vcDJtLmMgYi94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKaW5kZXggYzUzY2FiNDRkOS4uMmI2MmJj NjFkZCAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tL3AybS5jCisrKyBi L3hlbi9hcmNoL3g4Ni9tbS9wMm0uYwpAQCAtNzA4LDIzICs3MDgsOSBAQCBw Mm1fcmVtb3ZlX3BhZ2Uoc3RydWN0IHAybV9kb21haW4gKnAybSwgdW5zaWdu ZWQgbG9uZyBnZm5fbCwgdW5zaWduZWQgbG9uZyBtZm4sCiAgICAgcDJtX3R5 cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwogCisgICAgLyogSU9NTVUg Zm9yIFBWIGd1ZXN0cyBpcyBoYW5kbGVkIGluIGdldF9wYWdlX3R5cGUoKSBh bmQgcHV0X3BhZ2UoKS4gKi8KICAgICBpZiAoICFwYWdpbmdfbW9kZV90cmFu c2xhdGUocDJtLT5kb21haW4pICkKLSAgICB7Ci0gICAgICAgIGludCByYyA9 IDA7Ci0KLSAgICAgICAgaWYgKCBuZWVkX2lvbW11KHAybS0+ZG9tYWluKSAp Ci0gICAgICAgIHsKLSAgICAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDEg PDwgcGFnZV9vcmRlcik7IGkrKyApCi0gICAgICAgICAgICB7Ci0gICAgICAg ICAgICAgICAgaW50IHJldCA9IGlvbW11X3VubWFwX3BhZ2UocDJtLT5kb21h aW4sIG1mbiArIGkpOwotCi0gICAgICAgICAgICAgICAgaWYgKCAhcmMgKQot ICAgICAgICAgICAgICAgICAgICByYyA9IHJldDsKLSAgICAgICAgICAgIH0K LSAgICAgICAgfQotCi0gICAgICAgIHJldHVybiByYzsKLSAgICB9CisgICAg ICAgIHJldHVybiAwOwogCiAgICAgQVNTRVJUKGdmbl9sb2NrZWRfYnlfbWUo cDJtLCBnZm4pKTsKICAgICBQMk1fREVCVUcoInJlbW92aW5nIGdmbj0lI2x4 IG1mbj0lI2x4XG4iLCBnZm5fbCwgbWZuKTsKQEAgLTc2OSwyNiArNzU1LDMz IEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVjdCBkb21haW4gKmQs IGdmbl90IGdmbiwgbWZuX3QgbWZuLAogICAgIGludCBwb2RfY291bnQgPSAw OwogICAgIGludCByYyA9IDA7CiAKKyAgICAvKiBJT01NVSBmb3IgUFYgZ3Vl c3RzIGlzIGhhbmRsZWQgaW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFn ZSgpLiAqLwogICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSAp CiAgICAgewotICAgICAgICBpZiAoIG5lZWRfaW9tbXUoZCkgJiYgdCA9PSBw Mm1fcmFtX3J3ICkKLSAgICAgICAgewotICAgICAgICAgICAgZm9yICggaSA9 IDA7IGkgPCAoMSA8PCBwYWdlX29yZGVyKTsgaSsrICkKLSAgICAgICAgICAg IHsKLSAgICAgICAgICAgICAgICByYyA9IGlvbW11X21hcF9wYWdlKGQsIG1m bl94KG1mbl9hZGQobWZuLCBpKSksCi0gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBtZm5feChtZm5fYWRkKG1mbiwgaSkpLAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSU9NTVVGX3JlYWRhYmxl fElPTU1VRl93cml0YWJsZSk7Ci0gICAgICAgICAgICAgICAgaWYgKCByYyAh PSAwICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAg IHdoaWxlICggaS0tID4gMCApCi0gICAgICAgICAgICAgICAgICAgICAgICAv KiBJZiBzdGF0ZW1lbnQgdG8gc2F0aXNmeSBfX211c3RfY2hlY2suICovCi0g ICAgICAgICAgICAgICAgICAgICAgICBpZiAoIGlvbW11X3VubWFwX3BhZ2Uo ZCwgbWZuX3gobWZuX2FkZChtZm4sIGkpKSkgKQotICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGNvbnRpbnVlOworICAgICAgICBzdHJ1Y3QgcGFnZV9p bmZvICpwYWdlID0gbWZuX3RvX3BhZ2UobWZuKTsKIAotICAgICAgICAgICAg ICAgICAgICByZXR1cm4gcmM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgfQorICAgICAgICAvKgorICAgICAgICAgKiBPdXIgaW50ZXJmYWNl IGZvciBQViBndWVzdHMgd3J0IElPTU1VIGVudHJpZXMgaGFzbid0IGJlZW4g dmVyeQorICAgICAgICAgKiBjbGVhcjsgYnV0IGhpc3RvcmljYWxseSwgcGFn ZXMgaGF2ZSBzdGFydGVkIG91dCB3aXRoIElPTU1VIG1hcHBpbmdzLAorICAg ICAgICAgKiBhbmQgb25seSBsb3NlIHRoZW0gd2hlbiBjaGFuZ2VkIHRvIGEg ZGlmZmVyZW50IHBhZ2UgdHlwZS4KKyAgICAgICAgICoKKyAgICAgICAgICog UmV0YWluIHRoaXMgcHJvcGVydHkgYnkgZ3JhYmJpbmcgYSB3cml0YWJsZSB0 eXBlIHJlZiBhbmQgdGhlbgorICAgICAgICAgKiBkcm9wcGluZyBpdCBpbW1l ZGlhdGVseS4gIFRoZSByZXN1bHQgd2lsbCBiZSBwYWdlcyB0aGF0IGhhdmUg YQorICAgICAgICAgKiB3cml0YWJsZSB0eXBlIChhbmQgYW4gSU9NTVUgZW50 cnkpLCBidXQgYSBjb3VudCBvZiAwIChzdWNoIHRoYXQKKyAgICAgICAgICog YW55IGd1ZXN0LXJlcXVlc3RlZCB0eXBlIGNoYW5nZXMgc3VjY2VlZCBhbmQg cmVtb3ZlIHRoZSBJT01NVQorICAgICAgICAgKiBlbnRyeSkuCisgICAgICAg ICAqLworICAgICAgICBpZiAoICFuZWVkX2lvbW11KGQpIHx8IHQgIT0gcDJt X3JhbV9ydyApCisgICAgICAgICAgICByZXR1cm4gMDsKKworICAgICAgICBm b3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7ICsraSwgKytw YWdlICkKKyAgICAgICAgeworICAgICAgICAgICAgaWYgKCBnZXRfcGFnZV9h bmRfdHlwZShwYWdlLCBkLCBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAg ICAgICAgICAgIHB1dF9wYWdlX2FuZF90eXBlKHBhZ2UpOworICAgICAgICAg ICAgZWxzZQorICAgICAgICAgICAgICAgIHJldHVybiAtRUlOVkFMOwogICAg ICAgICB9CisKICAgICAgICAgcmV0dXJuIDA7CiAgICAgfQogCi0tIAoyLjIw LjEKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Oct 31 12:30:07 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 31 Oct 2019 12:30:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9Zw-00077z-Lx; Thu, 31 Oct 2019 12:29:28 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9Zv-00077X-KA for xen-announce@lists.xen.org; Thu, 31 Oct 2019 12:29:27 +0000 X-Inumbo-ID: 0ccebde6-fbda-11e9-9540-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 0ccebde6-fbda-11e9-9540-12813bfff9fa; Thu, 31 Oct 2019 12:29:15 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9Zd-00078Z-L4; Thu, 31 Oct 2019 12:29:09 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iQ9Zd-0002pV-Ht; Thu, 31 Oct 2019 12:29:09 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Thu, 31 Oct 2019 12:29:09 +0000 Subject: [Xen-announce] Xen Security Advisory 296 v4 (CVE-2019-18420) - VCPUOP_initialise DoS X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-18420 / XSA-296 version 4 VCPUOP_initialise DoS UPDATES IN VERSION 4 ==================== Public release. ISSUE DESCRIPTION ================= hypercall_create_continuation() is a variadic function which uses a printf-like format string to interpret its parameters. Error handling for a bad format character was done using BUG(), which crashes Xen. One path, via the VCPUOP_initialise hypercall, has a bad format character. The BUG() can be hit if VCPUOP_initialise executes for a sufficiently long period of time for a continuation to be created. IMPACT ====== Malicious guests may cause a hypervisor crash, resulting in a Denial of Service (Dos). VULNERABLE SYSTEMS ================== Xen versions 4.6 and newer are vulnerable. Xen versions 4.5 and earlier are not vulnerable. Only x86 PV guests can exploit the vulnerability. HVM and PVH guests, and guests on ARM systems, cannot exploit the vulnerability. MITIGATION ========== There are no mitigations. CREDITS ======= This issue was discovered by Andrew Cooper of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa296.patch Xen 4.9 ... unstable xsa296-4.8.patch Xen 4.7 ... 4.8 $ sha256sum xsa296* 71bd433f788dd511fad90165bc5ba9bcabe949eecd912f2a616e3c996960d67d xsa296.meta ccfd81b162b8535d952f56b1f87dfdd960e71bf07c1cf8388976e78e2e86cde5 xsa296.patch b283be3df6789402553172b7fd582bfffb4fa72a6b33543439bd2fb1b87bfbd4 xsa296-4.8.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2600kMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZn10IAKQhLY9RfkgZhY/6cACYnXqFGWhS6MvyeZrVs1L4 BaojMJilpAo7kc9Xcf+0ThxKI5M/eEeDUdGjFHfBtOUrjOAhaZjaYI1paJwX0JEV QoAMQERTtopFnkCNtvykrMiKZQ2xp6hiios+32PvDdVnjO+rkrKESRNoBVNYlC1f qN8SbZ6m0C5jP4C82ifDEeJHJsVJtfYQSeRl95pgCmsmxxd3x7q7ubPcR6kizT5t Bu4sAtrWNF5zaBrb5kL29yohn4oBLmMV5NO0hSlCbR3FgeFZ7LTwiz8y4d7tVSHg fjbsvhmhfhYO1OnZWFea3QXMgfZjsg6qq9jBnpmGu35WVMY= =xUlU -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa296.meta" Content-Disposition: attachment; filename="xsa296.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTYsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMiIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIs CiAgICAiNC45IiwKICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAi eGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiMzEzMWJmOTU2YWIxNTkyOTVlY2RkZTBjNWFkMDAzZDBjNWFm NDY5NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFtdLAogICAgICAgICAgIlBh dGNoZXMiOiBbXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjEx IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAg ICAgICAgIlN0YWJsZVJlZiI6ICIzMzQyZWU5MzE4Y2QzOGJhMDA2MjU1YjY4 N2FiN2ExNDUzOTllYTkyIiwKICAgICAgICAgICJQcmVyZXFzIjogW10sCiAg ICAgICAgICAiUGF0Y2hlcyI6IFtdCiAgICAgICAgfQogICAgICB9CiAgICB9 LAogICAgIjQuMTIiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4 ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjU5OWQ2ZDIzY2JiNzkw YTc4OGY3YTQ5YWI0ZjExZjFhM2I1YjQyOWUiLAogICAgICAgICAgIlByZXJl cXMiOiBbXSwKICAgICAgICAgICJQYXRjaGVzIjogW10KICAgICAgICB9CiAg ICAgIH0KICAgIH0sCiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6IHsK ICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICJjNjcy MTBmNjBkZmE4MzU2NWQyNmFlNzEwZTRmNWU3MjlhOTVkY2U1IiwKICAgICAg ICAgICJQcmVyZXFzIjogW10sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAg ICAgICAgICAgInhzYTI5Ni00LjgucGF0Y2giCiAgICAgICAgICBdCiAgICAg ICAgfQogICAgICB9CiAgICB9LAogICAgIjQuOSI6IHsKICAgICAgIlJlY2lw ZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYi OiAiOGQyYTY4ODAxNTE5M2UyMGFlNDdmZTNjMjA4Zjk5MTI4MjQwZjgyMSIs CiAgICAgICAgICAiUHJlcmVxcyI6IFtdLAogICAgICAgICAgIlBhdGNoZXMi OiBbXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICJtYXN0ZXIiOiB7 CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAg ICAiU3RhYmxlUmVmIjogIjU1YWIyOTJjNDJkYjQxYjA1Y2ZkYmEwMTI2ODBi ZjFlMGVhMDJmN2EiLAogICAgICAgICAgIlByZXJlcXMiOiBbXSwKICAgICAg ICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMjk2LnBhdGNoIgog ICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa296.patch" Content-Disposition: attachment; filename="xsa296.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeGVuL2h5cGVyY2FsbDogRG9uJ3QgdXNlIEJVRygpIGZv ciBwYXJhbWV0ZXIgY2hlY2tpbmcgaW4gaHlwZXJjYWxsX2NyZWF0ZV9jb250 aW51YXRpb24oKQoKU2luY2UgYy9zIDFkNDI5MDM0ICJoeXBlcmNhbGw6IHVw ZGF0ZSB2Y3B1X29wIHRvIHRha2UgYW4gdW5zaWduZWQgdmNwdWlkIiwKd2hp Y2ggaW5jb3JyZWN0bHkgc3dhcHBlZCAnaScgZm9yICd1JyBpbiB0aGUgcGFy YW1ldGVyIHR5cGUgbGlzdCwgZ3Vlc3RzIGhhdmUKYmVlbiBhYmxlIHRvIGhp dCB0aGUgQlVHKCkgaW4gbmV4dF9hcmdzKCkncyBkZWZhdWx0IGNhc2UuCgpD b3JyZWN0IHRoZXNlIGJhY2sgdG8gJ2knLgoKSW4gYWRkaXRpb24sIG1ha2Ug YWRqdXN0bWVudHMgdG8gcHJldmVudCB0aGlzIGNsYXNzIG9mIGlzc3VlIGZy b20gb2NjdXJyaW5nIGluCnRoZSBmdXR1cmUgLSBjcmFzaGluZyBYZW4gaXMg bm90IGFuIGFwcHJvcHJpYXRlIGZvcm0gb2YgcGFyYW1ldGVyIGNoZWNraW5n LgoKQ2FwaXRhbGlzZSBORVhUX0FSRygpIHRvIGNhdGNoIGFsbCB1c2VzLCB0 byBoaWdobGlnaHQgdGhhdCBpdCBpcyBhIG1hY3JvIGRvaW5nCm5vbi1mdW5j dGlvbi1saWtlIHRoaW5ncyBiZWhpbmQgdGhlIHNjZW5lcywgYW5kIHVuZGVm IGl0IHdoZW4gYXBwcm9wcmlhdGUuCkltcGxlbWVudCBhIGJhZF9mbXQ6IGJs b2NrIHdoaWNoIHByaW50cyBhbiBlcnJvciwgYXNzZXJ0cyB1bnJlYWNoYWJs ZSwgYW5kCmNyYXNoZXMgdGhlIGd1ZXN0LgoKT24gdGhlIEFSTSBzaWRlLCBk cm9wIGFsbCBwYXJhbWV0ZXIgY2hlY2tpbmcgb2YgcC4gIEl0IGlzIGFzeW1t ZXRyaWMgd2l0aCB0aGUKeDg2IHNpZGUsIGFuZCBha2luIHRvIGV4cGVjdGlu ZyBtZW1jcHkoKSBvciBzcHJpbnRmKCkgdG8gY2hlY2sgdGhlaXIgc3JjL2Zt dApwYXJhbWV0ZXIgYmVmb3JlIHVzZS4gIEEgY2FsbGVyIHBhc3NpbmcgIiIg b3Igc29tZXRoaW5nIG90aGVyIHRoYW4gYSBzdHJpbmcKbGl0ZXJhbCB3aWxs IGJlIG9idmlvdXMgZHVyaW5nIGNvZGUgcmV2aWV3LgoKVGhpcyBpcyBYU0Et Mjk2LgoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNv b3BlcjNAY2l0cml4LmNvbT4KQWNrZWQtYnk6IEp1bGllbiBHcmFsbCA8anVs aWVuLmdyYWxsQGFybS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gvYXJt L2RvbWFpbi5jIGIveGVuL2FyY2gvYXJtL2RvbWFpbi5jCmluZGV4IDk0MWJi ZmY0ZmUuLmEzZGE4ZTljMDggMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9k b21haW4uYworKysgYi94ZW4vYXJjaC9hcm0vZG9tYWluLmMKQEAgLTM4Mywx NCArMzgzLDE1IEBAIHZvaWQgc3luY192Y3B1X2V4ZWNzdGF0ZShzdHJ1Y3Qg dmNwdSAqdikKICAgICAvKiBOb3RoaW5nIHRvIGRvIC0tIG5vIGxhenkgc3dp dGNoaW5nICovCiB9CiAKLSNkZWZpbmUgbmV4dF9hcmcoZm10LCBhcmdzKSAo eyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCisjZGVmaW5lIE5FWFRfQVJHKGZtdCwgYXJncykgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorKHsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICB1bnNpZ25lZCBsb25n IF9fYXJnOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgc3dpdGNoICggKihmbXQpKysgKSAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBj YXNlICdpJzogX19hcmcgPSAodW5zaWduZWQgbG9uZyl2YV9hcmcoYXJncywg dW5zaWduZWQgaW50KTsgIGJyZWFrOyAgICBcCiAgICAgY2FzZSAnbCc6IF9f YXJnID0gKHVuc2lnbmVkIGxvbmcpdmFfYXJnKGFyZ3MsIHVuc2lnbmVkIGxv bmcpOyBicmVhazsgICAgXAogICAgIGNhc2UgJ2gnOiBfX2FyZyA9ICh1bnNp Z25lZCBsb25nKXZhX2FyZyhhcmdzLCB2b2lkICopOyAgICAgICAgYnJlYWs7 ICAgIFwKLSAgICBkZWZhdWx0OiAgX19hcmcgPSAwOyBCVUcoKTsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAg ZGVmYXVsdDogIGdvdG8gYmFkX2ZtdDsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIH0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKICAgICBfX2FyZzsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiB9KQpAQCAtNDA1LDkgKzQwNiw2IEBAIHVuc2lnbmVkIGxvbmcg aHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAgdW5zaWduZWQg aW50IGk7CiAgICAgdmFfbGlzdCBhcmdzOwogCi0gICAgLyogQWxsIGh5cGVy Y2FsbHMgdGFrZSBhdCBsZWFzdCBvbmUgYXJndW1lbnQgKi8KLSAgICBCVUdf T04oICFwIHx8ICpwID09ICdcMCcgKTsKLQogICAgIGN1cnJlbnQtPmhjYWxs X3ByZWVtcHRlZCA9IHRydWU7CiAKICAgICB2YV9zdGFydChhcmdzLCBmb3Jt YXQpOwpAQCAtNDE1LDcgKzQxMyw3IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJj YWxsX2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAgaWYgKCBtY3MtPmZsYWdz ICYgTUNTRl9pbl9tdWx0aWNhbGwgKQogICAgIHsKICAgICAgICAgZm9yICgg aSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCi0gICAgICAgICAgICBtY3MtPmNh bGwuYXJnc1tpXSA9IG5leHRfYXJnKHAsIGFyZ3MpOworICAgICAgICAgICAg bWNzLT5jYWxsLmFyZ3NbaV0gPSBORVhUX0FSRyhwLCBhcmdzKTsKIAogICAg ICAgICAvKiBSZXR1cm4gdmFsdWUgZ2V0cyB3cml0dGVuIGJhY2sgdG8gbWNz LT5jYWxsLnJlc3VsdCAqLwogICAgICAgICByYyA9IG1jcy0+Y2FsbC5yZXN1 bHQ7CkBAIC00MzEsNyArNDI5LDcgQEAgdW5zaWduZWQgbG9uZyBoeXBlcmNh bGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKIAogICAgICAgICAgICAgZm9yICgg aSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCiAgICAgICAgICAgICB7Ci0gICAg ICAgICAgICAgICAgYXJnID0gbmV4dF9hcmcocCwgYXJncyk7CisgICAgICAg ICAgICAgICAgYXJnID0gTkVYVF9BUkcocCwgYXJncyk7CiAKICAgICAgICAg ICAgICAgICBzd2l0Y2ggKCBpICkKICAgICAgICAgICAgICAgICB7CkBAIC00 NTQsNyArNDUyLDcgQEAgdW5zaWduZWQgbG9uZyBoeXBlcmNhbGxfY3JlYXRl X2NvbnRpbnVhdGlvbigKIAogICAgICAgICAgICAgZm9yICggaSA9IDA7ICpw ICE9ICdcMCc7IGkrKyApCiAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAg ICAgYXJnID0gbmV4dF9hcmcocCwgYXJncyk7CisgICAgICAgICAgICAgICAg YXJnID0gTkVYVF9BUkcocCwgYXJncyk7CiAKICAgICAgICAgICAgICAgICBz d2l0Y2ggKCBpICkKICAgICAgICAgICAgICAgICB7CkBAIC00NzUsOCArNDcz LDE2IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51 YXRpb24oCiAgICAgdmFfZW5kKGFyZ3MpOwogCiAgICAgcmV0dXJuIHJjOwor CisgYmFkX2ZtdDoKKyAgICBncHJpbnRrKFhFTkxPR19FUlIsICJCYWQgaHlw ZXJjYWxsIGNvbnRpbnVhdGlvbiBmb3JtYXQgJyVjJ1xuIiwgKnApOworICAg IEFTU0VSVF9VTlJFQUNIQUJMRSgpOworICAgIGRvbWFpbl9jcmFzaChjdXJy ZW50LT5kb21haW4pOworICAgIHJldHVybiAwOwogfQogCisjdW5kZWYgTkVY VF9BUkcKKwogdm9pZCBzdGFydHVwX2NwdV9pZGxlX2xvb3Aodm9pZCkKIHsK ICAgICBzdHJ1Y3QgdmNwdSAqdiA9IGN1cnJlbnQ7CmRpZmYgLS1naXQgYS94 ZW4vYXJjaC94ODYvaHlwZXJjYWxsLmMgYi94ZW4vYXJjaC94ODYvaHlwZXJj YWxsLmMKaW5kZXggZDQ4M2RiYWE2Yi4uNDY0M2U1ZWI0MyAxMDA2NDQKLS0t IGEveGVuL2FyY2gveDg2L2h5cGVyY2FsbC5jCisrKyBiL3hlbi9hcmNoL3g4 Ni9oeXBlcmNhbGwuYwpAQCAtODAsMTQgKzgwLDE1IEBAIGNvbnN0IGh5cGVy Y2FsbF9hcmdzX3QgaHlwZXJjYWxsX2FyZ3NfdGFibGVbTlJfaHlwZXJjYWxs c10gPQogI3VuZGVmIENPTVAKICN1bmRlZiBBUkdTCiAKLSNkZWZpbmUgbmV4 dF9hcmcoZm10LCBhcmdzKSAoeyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCisjZGVmaW5lIE5FWFRfQVJHKGZtdCwg YXJncykgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXAorKHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwK ICAgICB1bnNpZ25lZCBsb25nIF9fYXJnOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgc3dpdGNo ICggKihmbXQpKysgKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAogICAgIHsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKICAgICBjYXNlICdpJzogX19hcmcgPSAodW5zaWduZWQg bG9uZyl2YV9hcmcoYXJncywgdW5zaWduZWQgaW50KTsgIGJyZWFrOyAgICBc CiAgICAgY2FzZSAnbCc6IF9fYXJnID0gKHVuc2lnbmVkIGxvbmcpdmFfYXJn KGFyZ3MsIHVuc2lnbmVkIGxvbmcpOyBicmVhazsgICAgXAogICAgIGNhc2Ug J2gnOiBfX2FyZyA9ICh1bnNpZ25lZCBsb25nKXZhX2FyZyhhcmdzLCB2b2lk ICopOyAgICAgICAgYnJlYWs7ICAgIFwKLSAgICBkZWZhdWx0OiAgX19hcmcg PSAwOyBCVUcoKTsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBcCisgICAgZGVmYXVsdDogIGdvdG8gYmFkX2ZtdDsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg XAogICAgIH0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBfX2Fy ZzsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCiB9KQpAQCAtMTA5LDcgKzExMCw3 IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRp b24oCiAgICAgaWYgKCBtY3MtPmZsYWdzICYgTUNTRl9pbl9tdWx0aWNhbGwg KQogICAgIHsKICAgICAgICAgZm9yICggaSA9IDA7ICpwICE9ICdcMCc7IGkr KyApCi0gICAgICAgICAgICBtY3MtPmNhbGwuYXJnc1tpXSA9IG5leHRfYXJn KHAsIGFyZ3MpOworICAgICAgICAgICAgbWNzLT5jYWxsLmFyZ3NbaV0gPSBO RVhUX0FSRyhwLCBhcmdzKTsKICAgICB9CiAgICAgZWxzZQogICAgIHsKQEAg LTEyMSw3ICsxMjIsNyBAQCB1bnNpZ25lZCBsb25nIGh5cGVyY2FsbF9jcmVh dGVfY29udGludWF0aW9uKAogICAgICAgICB7CiAgICAgICAgICAgICBmb3Ig KCBpID0gMDsgKnAgIT0gJ1wwJzsgaSsrICkKICAgICAgICAgICAgIHsKLSAg ICAgICAgICAgICAgICBhcmcgPSBuZXh0X2FyZyhwLCBhcmdzKTsKKyAgICAg ICAgICAgICAgICBhcmcgPSBORVhUX0FSRyhwLCBhcmdzKTsKICAgICAgICAg ICAgICAgICBzd2l0Y2ggKCBpICkKICAgICAgICAgICAgICAgICB7CiAgICAg ICAgICAgICAgICAgY2FzZSAwOiByZWdzLT5yZGkgPSBhcmc7IGJyZWFrOwpA QCAtMTM3LDcgKzEzOCw3IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJjYWxsX2Ny ZWF0ZV9jb250aW51YXRpb24oCiAgICAgICAgIHsKICAgICAgICAgICAgIGZv ciAoIGkgPSAwOyAqcCAhPSAnXDAnOyBpKysgKQogICAgICAgICAgICAgewot ICAgICAgICAgICAgICAgIGFyZyA9IG5leHRfYXJnKHAsIGFyZ3MpOworICAg ICAgICAgICAgICAgIGFyZyA9IE5FWFRfQVJHKHAsIGFyZ3MpOwogICAgICAg ICAgICAgICAgIHN3aXRjaCAoIGkgKQogICAgICAgICAgICAgICAgIHsKICAg ICAgICAgICAgICAgICBjYXNlIDA6IHJlZ3MtPnJieCA9IGFyZzsgYnJlYWs7 CkBAIC0xNTQsOCArMTU1LDE2IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJjYWxs X2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAgdmFfZW5kKGFyZ3MpOwogCiAg ICAgcmV0dXJuIG9wOworCisgYmFkX2ZtdDoKKyAgICBncHJpbnRrKFhFTkxP R19FUlIsICJCYWQgaHlwZXJjYWxsIGNvbnRpbnVhdGlvbiBmb3JtYXQgJyVj J1xuIiwgKnApOworICAgIEFTU0VSVF9VTlJFQUNIQUJMRSgpOworICAgIGRv bWFpbl9jcmFzaChjdXJyLT5kb21haW4pOworICAgIHJldHVybiAwOwogfQog CisjdW5kZWYgTkVYVF9BUkcKKwogaW50IGh5cGVyY2FsbF94bGF0X2NvbnRp bnVhdGlvbih1bnNpZ25lZCBpbnQgKmlkLCB1bnNpZ25lZCBpbnQgbnIsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCBt YXNrLCAuLi4pCiB7CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2NvbXBhdC9k b21haW4uYyBiL3hlbi9jb21tb24vY29tcGF0L2RvbWFpbi5jCmluZGV4IDM5 ODc3YjNhYjIuLjI1MzFmYTc0MjEgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v Y29tcGF0L2RvbWFpbi5jCisrKyBiL3hlbi9jb21tb24vY29tcGF0L2RvbWFp bi5jCkBAIC04MSw3ICs4MSw3IEBAIGludCBjb21wYXRfdmNwdV9vcChpbnQg Y21kLCB1bnNpZ25lZCBpbnQgdmNwdWlkLCBYRU5fR1VFU1RfSEFORExFX1BB UkFNKHZvaWQpIGFyCiAgICAgICAgIH0KIAogICAgICAgICBpZiAoIHJjID09 IC1FUkVTVEFSVCApCi0gICAgICAgICAgICByYyA9IGh5cGVyY2FsbF9jcmVh dGVfY29udGludWF0aW9uKF9fSFlQRVJWSVNPUl92Y3B1X29wLCAiaXVoIiwK KyAgICAgICAgICAgIHJjID0gaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRp b24oX19IWVBFUlZJU09SX3ZjcHVfb3AsICJpaWgiLAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBjbWQsIHZjcHVp ZCwgYXJnKTsKIAogICAgICAgICBicmVhazsKZGlmZiAtLWdpdCBhL3hlbi9j b21tb24vZG9tYWluLmMgYi94ZW4vY29tbW9uL2RvbWFpbi5jCmluZGV4IDIz MDg1ODgwNTIuLjY1YmNkODVlMzQgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24v ZG9tYWluLmMKKysrIGIveGVuL2NvbW1vbi9kb21haW4uYwpAQCAtMTQxMSw3 ICsxNDExLDcgQEAgbG9uZyBkb192Y3B1X29wKGludCBjbWQsIHVuc2lnbmVk IGludCB2Y3B1aWQsIFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0odm9pZCkgYXJn KQogCiAgICAgICAgIHJjID0gYXJjaF9pbml0aWFsaXNlX3ZjcHUodiwgYXJn KTsKICAgICAgICAgaWYgKCByYyA9PSAtRVJFU1RBUlQgKQotICAgICAgICAg ICAgcmMgPSBoeXBlcmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbihfX0hZUEVS VklTT1JfdmNwdV9vcCwgIml1aCIsCisgICAgICAgICAgICByYyA9IGh5cGVy Y2FsbF9jcmVhdGVfY29udGludWF0aW9uKF9fSFlQRVJWSVNPUl92Y3B1X29w LCAiaWloIiwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgY21kLCB2Y3B1aWQsIGFyZyk7CiAKICAgICAgICAgYnJl YWs7Cg== --=separator Content-Type: application/octet-stream; name="xsa296-4.8.patch" Content-Disposition: attachment; filename="xsa296-4.8.patch" Content-Transfer-Encoding: base64 RnJvbTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNv bT4KU3ViamVjdDogeGVuL2h5cGVyY2FsbDogRG9uJ3QgdXNlIEJVRygpIGZv ciBwYXJhbWV0ZXIgY2hlY2tpbmcgaW4gaHlwZXJjYWxsX2NyZWF0ZV9jb250 aW51YXRpb24oKQoKU2luY2UgYy9zIDFkNDI5MDM0ICJoeXBlcmNhbGw6IHVw ZGF0ZSB2Y3B1X29wIHRvIHRha2UgYW4gdW5zaWduZWQgdmNwdWlkIiwKd2hp Y2ggaW5jb3JyZWN0bHkgc3dhcHBlZCAnaScgZm9yICd1JyBpbiB0aGUgcGFy YW1ldGVyIHR5cGUgbGlzdCwgZ3Vlc3RzIGhhdmUKYmVlbiBhYmxlIHRvIGhp dCB0aGUgQlVHKCkgaW4gbmV4dF9hcmdzKCkncyBkZWZhdWx0IGNhc2UuCgpD b3JyZWN0IHRoZXNlIGJhY2sgdG8gJ2knLgoKSW4gYWRkaXRpb24sIG1ha2Ug YWRqdXN0bWVudHMgdG8gcHJldmVudCB0aGlzIGNsYXNzIG9mIGlzc3VlIGZy b20gb2NjdXJyaW5nIGluCnRoZSBmdXR1cmUgLSBjcmFzaGluZyBYZW4gaXMg bm90IGFuIGFwcHJvcHJpYXRlIGZvcm0gb2YgcGFyYW1ldGVyIGNoZWNraW5n LgoKQ2FwaXRhbGlzZSBORVhUX0FSRygpIHRvIGNhdGNoIGFsbCB1c2VzLCB0 byBoaWdobGlnaHQgdGhhdCBpdCBpcyBhIG1hY3JvIGRvaW5nCm5vbi1mdW5j dGlvbi1saWtlIHRoaW5ncyBiZWhpbmQgdGhlIHNjZW5lcywgYW5kIHVuZGVm IGl0IHdoZW4gYXBwcm9wcmlhdGUuCkltcGxlbWVudCBhIGJhZF9mbXQ6IGJs b2NrIHdoaWNoIHByaW50cyBhbiBlcnJvciwgYXNzZXJ0cyB1bnJlYWNoYWJs ZSwgYW5kCmNyYXNoZXMgdGhlIGd1ZXN0LgoKT24gdGhlIEFSTSBzaWRlLCBk cm9wIGFsbCBwYXJhbWV0ZXIgY2hlY2tpbmcgb2YgcC4gIEl0IGlzIGFzeW1t ZXRyaWMgd2l0aCB0aGUKeDg2IHNpZGUsIGFuZCBha2luIHRvIGV4cGVjdGlu ZyBtZW1jcHkoKSBvciBzcHJpbnRmKCkgdG8gY2hlY2sgdGhlaXIgc3JjL2Zt dApwYXJhbWV0ZXIgYmVmb3JlIHVzZS4gIEEgY2FsbGVyIHBhc3NpbmcgIiIg b3Igc29tZXRoaW5nIG90aGVyIHRoYW4gYSBzdHJpbmcKbGl0ZXJhbCB3aWxs IGJlIG9idmlvdXMgZHVyaW5nIGNvZGUgcmV2aWV3LgoKVGhpcyBpcyBYU0Et Mjk2LgoKU2lnbmVkLW9mZi1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNv b3BlcjNAY2l0cml4LmNvbT4KQWNrZWQtYnk6IEp1bGllbiBHcmFsbCA8anVs aWVuLmdyYWxsQGFybS5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gvYXJt L2RvbWFpbi5jIGIveGVuL2FyY2gvYXJtL2RvbWFpbi5jCmluZGV4IGQ5ZTc5 NmRjYmUuLmY2Njc4ZDIyMjcgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9k b21haW4uYworKysgYi94ZW4vYXJjaC9hcm0vZG9tYWluLmMKQEAgLTMzNiwx NCArMzM2LDE1IEBAIHZvaWQgc3luY192Y3B1X2V4ZWNzdGF0ZShzdHJ1Y3Qg dmNwdSAqdikKICAgICAvKiBOb3RoaW5nIHRvIGRvIC0tIG5vIGxhenkgc3dp dGNoaW5nICovCiB9CiAKLSNkZWZpbmUgbmV4dF9hcmcoZm10LCBhcmdzKSAo eyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCisjZGVmaW5lIE5FWFRfQVJHKGZtdCwgYXJncykgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorKHsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICB1bnNpZ25lZCBsb25n IF9fYXJnOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCiAgICAgc3dpdGNoICggKihmbXQpKysgKSAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgIHsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBj YXNlICdpJzogX19hcmcgPSAodW5zaWduZWQgbG9uZyl2YV9hcmcoYXJncywg dW5zaWduZWQgaW50KTsgIGJyZWFrOyAgICBcCiAgICAgY2FzZSAnbCc6IF9f YXJnID0gKHVuc2lnbmVkIGxvbmcpdmFfYXJnKGFyZ3MsIHVuc2lnbmVkIGxv bmcpOyBicmVhazsgICAgXAogICAgIGNhc2UgJ2gnOiBfX2FyZyA9ICh1bnNp Z25lZCBsb25nKXZhX2FyZyhhcmdzLCB2b2lkICopOyAgICAgICAgYnJlYWs7 ICAgIFwKLSAgICBkZWZhdWx0OiAgX19hcmcgPSAwOyBCVUcoKTsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisgICAg ZGVmYXVsdDogIGdvdG8gYmFkX2ZtdDsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIH0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKICAgICBfX2FyZzsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiB9KQpAQCAtMzczLDkgKzM3NCw2IEBAIHVuc2lnbmVkIGxvbmcg aHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAgdW5zaWduZWQg aW50IGk7CiAgICAgdmFfbGlzdCBhcmdzOwogCi0gICAgLyogQWxsIGh5cGVy Y2FsbHMgdGFrZSBhdCBsZWFzdCBvbmUgYXJndW1lbnQgKi8KLSAgICBCVUdf T04oICFwIHx8ICpwID09ICdcMCcgKTsKLQogICAgIHZhX3N0YXJ0KGFyZ3Ms IGZvcm1hdCk7CiAKICAgICBpZiAoIG1jcy0+ZmxhZ3MgJiBNQ1NGX2luX211 bHRpY2FsbCApCkBAIC0zODMsNyArMzgxLDcgQEAgdW5zaWduZWQgbG9uZyBo eXBlcmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKICAgICAgICAgX19zZXRf Yml0KF9NQ1NGX2NhbGxfcHJlZW1wdGVkLCAmbWNzLT5mbGFncyk7CiAKICAg ICAgICAgZm9yICggaSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCi0gICAgICAg ICAgICBtY3MtPmNhbGwuYXJnc1tpXSA9IG5leHRfYXJnKHAsIGFyZ3MpOwor ICAgICAgICAgICAgbWNzLT5jYWxsLmFyZ3NbaV0gPSBORVhUX0FSRyhwLCBh cmdzKTsKIAogICAgICAgICAvKiBSZXR1cm4gdmFsdWUgZ2V0cyB3cml0dGVu IGJhY2sgdG8gbWNzLT5jYWxsLnJlc3VsdCAqLwogICAgICAgICByYyA9IG1j cy0+Y2FsbC5yZXN1bHQ7CkBAIC00MDIsNyArNDAwLDcgQEAgdW5zaWduZWQg bG9uZyBoeXBlcmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKIAogICAgICAg ICAgICAgZm9yICggaSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCiAgICAgICAg ICAgICB7Ci0gICAgICAgICAgICAgICAgYXJnID0gbmV4dF9hcmcocCwgYXJn cyk7CisgICAgICAgICAgICAgICAgYXJnID0gTkVYVF9BUkcocCwgYXJncyk7 CiAKICAgICAgICAgICAgICAgICBzd2l0Y2ggKCBpICkKICAgICAgICAgICAg ICAgICB7CkBAIC00MjUsNyArNDIzLDcgQEAgdW5zaWduZWQgbG9uZyBoeXBl cmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKIAogICAgICAgICAgICAgZm9y ICggaSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCiAgICAgICAgICAgICB7Ci0g ICAgICAgICAgICAgICAgYXJnID0gbmV4dF9hcmcocCwgYXJncyk7CisgICAg ICAgICAgICAgICAgYXJnID0gTkVYVF9BUkcocCwgYXJncyk7CiAKICAgICAg ICAgICAgICAgICBzd2l0Y2ggKCBpICkKICAgICAgICAgICAgICAgICB7CkBA IC00NDYsOCArNDQ0LDE2IEBAIHVuc2lnbmVkIGxvbmcgaHlwZXJjYWxsX2Ny ZWF0ZV9jb250aW51YXRpb24oCiAgICAgdmFfZW5kKGFyZ3MpOwogCiAgICAg cmV0dXJuIHJjOworCisgYmFkX2ZtdDoKKyAgICBncHJpbnRrKFhFTkxPR19F UlIsICJCYWQgaHlwZXJjYWxsIGNvbnRpbnVhdGlvbiBmb3JtYXQgJyVjJ1xu IiwgKnApOworICAgIEFTU0VSVF9VTlJFQUNIQUJMRSgpOworICAgIGRvbWFp bl9jcmFzaChjdXJyZW50LT5kb21haW4pOworICAgIHJldHVybiAwOwogfQog CisjdW5kZWYgTkVYVF9BUkcKKwogdm9pZCBzdGFydHVwX2NwdV9pZGxlX2xv b3Aodm9pZCkKIHsKICAgICBzdHJ1Y3QgdmNwdSAqdiA9IGN1cnJlbnQ7CmRp ZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvZG9tYWluLmMgYi94ZW4vYXJjaC94 ODYvZG9tYWluLmMKaW5kZXggZGRlYjY4Zjk2Ny4uMzk0NmVhMzhmZCAxMDA2 NDQKLS0tIGEveGVuL2FyY2gveDg2L2RvbWFpbi5jCisrKyBiL3hlbi9hcmNo L3g4Ni9kb21haW4uYwpAQCAtMjQwMywxNCArMjQwMywxNSBAQCB2b2lkIHN5 bmNfdmNwdV9leGVjc3RhdGUoc3RydWN0IHZjcHUgKnYpCiAgICAgZmx1c2hf dGxiX21hc2sodi0+dmNwdV9kaXJ0eV9jcHVtYXNrKTsKIH0KIAotI2RlZmlu ZSBuZXh0X2FyZyhmbXQsIGFyZ3MpICh7ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyNkZWZpbmUgTkVYVF9BUkco Zm10LCBhcmdzKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBcCisoeyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgXAogICAgIHVuc2lnbmVkIGxvbmcgX19hcmc7ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBz d2l0Y2ggKCAqKGZtdCkrKyApICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgeyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAogICAgIGNhc2UgJ2knOiBfX2FyZyA9ICh1bnNp Z25lZCBsb25nKXZhX2FyZyhhcmdzLCB1bnNpZ25lZCBpbnQpOyAgYnJlYWs7 ICAgIFwKICAgICBjYXNlICdsJzogX19hcmcgPSAodW5zaWduZWQgbG9uZyl2 YV9hcmcoYXJncywgdW5zaWduZWQgbG9uZyk7IGJyZWFrOyAgICBcCiAgICAg Y2FzZSAnaCc6IF9fYXJnID0gKHVuc2lnbmVkIGxvbmcpdmFfYXJnKGFyZ3Ms IHZvaWQgKik7ICAgICAgICBicmVhazsgICAgXAotICAgIGRlZmF1bHQ6ICBf X2FyZyA9IDA7IEJVRygpOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFwKKyAgICBkZWZhdWx0OiAgZ290byBiYWRfZm10 OyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgfSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAg IF9fYXJnOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKIH0pCkBAIC0yNDQ5LDcg KzI0NTAsNyBAQCB1bnNpZ25lZCBsb25nIGh5cGVyY2FsbF9jcmVhdGVfY29u dGludWF0aW9uKAogICAgICAgICBfX3NldF9iaXQoX01DU0ZfY2FsbF9wcmVl bXB0ZWQsICZtY3MtPmZsYWdzKTsKIAogICAgICAgICBmb3IgKCBpID0gMDsg KnAgIT0gJ1wwJzsgaSsrICkKLSAgICAgICAgICAgIG1jcy0+Y2FsbC5hcmdz W2ldID0gbmV4dF9hcmcocCwgYXJncyk7CisgICAgICAgICAgICBtY3MtPmNh bGwuYXJnc1tpXSA9IE5FWFRfQVJHKHAsIGFyZ3MpOwogICAgIH0KICAgICBl bHNlCiAgICAgewpAQCAtMjQ3MCw3ICsyNDcxLDcgQEAgdW5zaWduZWQgbG9u ZyBoeXBlcmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKICAgICAgICAgewog ICAgICAgICAgICAgZm9yICggaSA9IDA7ICpwICE9ICdcMCc7IGkrKyApCiAg ICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgYXJnID0gbmV4dF9hcmco cCwgYXJncyk7CisgICAgICAgICAgICAgICAgYXJnID0gTkVYVF9BUkcocCwg YXJncyk7CiAgICAgICAgICAgICAgICAgc3dpdGNoICggaSApCiAgICAgICAg ICAgICAgICAgewogICAgICAgICAgICAgICAgIGNhc2UgMDogcmVncy0+cmRp ID0gYXJnOyBicmVhazsKQEAgLTI0ODYsNyArMjQ4Nyw3IEBAIHVuc2lnbmVk IGxvbmcgaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAgICAg IHsKICAgICAgICAgICAgIGZvciAoIGkgPSAwOyAqcCAhPSAnXDAnOyBpKysg KQogICAgICAgICAgICAgewotICAgICAgICAgICAgICAgIGFyZyA9IG5leHRf YXJnKHAsIGFyZ3MpOworICAgICAgICAgICAgICAgIGFyZyA9IE5FWFRfQVJH KHAsIGFyZ3MpOwogICAgICAgICAgICAgICAgIHN3aXRjaCAoIGkgKQogICAg ICAgICAgICAgICAgIHsKICAgICAgICAgICAgICAgICBjYXNlIDA6IHJlZ3Mt PmVieCA9IGFyZzsgYnJlYWs7CkBAIC0yNTAzLDggKzI1MDQsMTYgQEAgdW5z aWduZWQgbG9uZyBoeXBlcmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbigKICAg ICB2YV9lbmQoYXJncyk7CiAKICAgICByZXR1cm4gb3A7CisKKyBiYWRfZm10 OgorICAgIGdwcmludGsoWEVOTE9HX0VSUiwgIkJhZCBoeXBlcmNhbGwgY29u dGludWF0aW9uIGZvcm1hdCAnJWMnXG4iLCAqcCk7CisgICAgQVNTRVJUX1VO UkVBQ0hBQkxFKCk7CisgICAgZG9tYWluX2NyYXNoKGN1cnJlbnQtPmRvbWFp bik7CisgICAgcmV0dXJuIDA7CiB9CiAKKyN1bmRlZiBORVhUX0FSRworCiBp bnQgaHlwZXJjYWxsX3hsYXRfY29udGludWF0aW9uKHVuc2lnbmVkIGludCAq aWQsIHVuc2lnbmVkIGludCBuciwKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgdW5zaWduZWQgaW50IG1hc2ssIC4uLikKIHsKZGlmZiAtLWdp dCBhL3hlbi9jb21tb24vY29tcGF0L2RvbWFpbi5jIGIveGVuL2NvbW1vbi9j b21wYXQvZG9tYWluLmMKaW5kZXggODhiZmRjODM2ZC4uZDQ0NmVkMTMxYiAx MDA2NDQKLS0tIGEveGVuL2NvbW1vbi9jb21wYXQvZG9tYWluLmMKKysrIGIv eGVuL2NvbW1vbi9jb21wYXQvZG9tYWluLmMKQEAgLTgxLDcgKzgxLDcgQEAg aW50IGNvbXBhdF92Y3B1X29wKGludCBjbWQsIHVuc2lnbmVkIGludCB2Y3B1 aWQsIFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0odm9pZCkgYXIKICAgICAgICAg fQogCiAgICAgICAgIGlmICggcmMgPT0gLUVSRVNUQVJUICkKLSAgICAgICAg ICAgIHJjID0gaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oX19IWVBF UlZJU09SX3ZjcHVfb3AsICJpdWgiLAorICAgICAgICAgICAgcmMgPSBoeXBl cmNhbGxfY3JlYXRlX2NvbnRpbnVhdGlvbihfX0hZUEVSVklTT1JfdmNwdV9v cCwgImlpaCIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGNtZCwgdmNwdWlkLCBhcmcpOwogCiAgICAgICAgIGJy ZWFrOwpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9kb21haW4uYyBiL3hlbi9j b21tb24vZG9tYWluLmMKaW5kZXggNzQwMTYzZWU3Ny4uMjhkNzkwM2E5NiAx MDA2NDQKLS0tIGEveGVuL2NvbW1vbi9kb21haW4uYworKysgYi94ZW4vY29t bW9uL2RvbWFpbi5jCkBAIC0xMjc3LDcgKzEyNzcsNyBAQCBsb25nIGRvX3Zj cHVfb3AoaW50IGNtZCwgdW5zaWduZWQgaW50IHZjcHVpZCwgWEVOX0dVRVNU X0hBTkRMRV9QQVJBTSh2b2lkKSBhcmcpCiAKICAgICAgICAgcmMgPSBhcmNo X2luaXRpYWxpc2VfdmNwdSh2LCBhcmcpOwogICAgICAgICBpZiAoIHJjID09 IC1FUkVTVEFSVCApCi0gICAgICAgICAgICByYyA9IGh5cGVyY2FsbF9jcmVh dGVfY29udGludWF0aW9uKF9fSFlQRVJWSVNPUl92Y3B1X29wLCAiaXVoIiwK KyAgICAgICAgICAgIHJjID0gaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRp b24oX19IWVBFUlZJU09SX3ZjcHVfb3AsICJpaWgiLAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBjbWQsIHZjcHVp ZCwgYXJnKTsKIAogICAgICAgICBicmVhazsK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Oct 31 12:30:07 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 31 Oct 2019 12:30:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9a5-0007An-A9; Thu, 31 Oct 2019 12:29:37 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9a4-0007AK-59 for xen-announce@lists.xen.org; Thu, 31 Oct 2019 12:29:36 +0000 X-Inumbo-ID: 108b52c8-fbda-11e9-bbab-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 108b52c8-fbda-11e9-bbab-bc764e2007e4; Thu, 31 Oct 2019 12:29:21 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9Zi-00078q-AR; Thu, 31 Oct 2019 12:29:14 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iQ9Zi-0002qc-7S; Thu, 31 Oct 2019 12:29:14 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Thu, 31 Oct 2019 12:29:14 +0000 Subject: [Xen-announce] Xen Security Advisory 298 v3 (CVE-2019-18425) - missing descriptor table limit checking in x86 PV emulation X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-18425 / XSA-298 version 3 missing descriptor table limit checking in x86 PV emulation UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= When emulating certain PV guest operations, descriptor table accesses are performed by the emulating code. Such accesses should respect the guest specified limits, unless otherwise guaranteed to fail in such a case. Without this, emulation of 32-bit guest user mode calls through call gates would allow guest user mode to install and then use descriptors of their choice, as long as the guest kernel did not itself install an LDT. (Most OSes don't install any LDT by default). IMPACT ====== 32-bit PV guest user mode can elevate its privileges to that of the guest kernel. VULNERABLE SYSTEMS ================== Xen versions from at least 3.2 onwards are affected. Only 32-bit PV guest user mode can leverage this vulnerability. HVM, PVH, as well as 64-bit PV guests cannot leverage this vulnerability. Arm systems are unaffected. MITIGATION ========== Running only HVM, PVH, or 64-bit PV guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Andrew Cooper of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa298.patch xen-unstable, Xen 4.12.x xsa298-4.11.patch Xen 4.11.x xsa298-4.10.patch Xen 4.10.x xsa298-4.9.patch Xen 4.9.x, Xen 4.8.x, Xen 4.7.x $ sha256sum xsa298* 82c6f626732f99711212155b280270fe2f6683460299b1a6fc3f70b3932970ce xsa298.meta 3f422ad83abb54fe6afed460a5982cf1faa1717e51ab19fbf2375be1b5f8f4a3 xsa298.patch da8d5bad97a46c072dd1715c96401b145cecda14f0303043e6dca313e7ffff0c xsa298-4.9.patch 92dba14b6a208379c2569b9c1c11438da384ec47db2508b4761af30d74a9403d xsa298-4.10.patch d2d8eb5de5601b88f2a6503ecf6bb83207e4b2f17833d61a74fcd185ac7f5a71 xsa298-4.11.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2601AMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZk/AH/iLP9TpdOKNoW8fJDuOjlIQHsI0RPtU6KIdSc1a8 nzrcPfwpdP3/89GJQyEHwi5ZZdXAnNcXSK7BC+EEzqznV/VwHRDusCBH0enjUe0z jDpOsxeI5RsuyJnSFojhI2E+y1khjKtVvnbNWbHzBfWMPD9Inc+nw9Q1KWfpSkk6 TTS8OwR9DwNiVXz9Na+BKuIBOVinFd1wA+HBNZKJl3JCz8N0Oa6RHDKFQQKJ4Uy2 KzBdzm5dWr0xP4stQmnYoU7JobGbcvKyMVMwwryS3cffLyhOLuzCWjDO+n7RkoRy xWmGWVeQWAeIzqvvtb104NrHSVwVeFSOsen0cqFLvV82MRw= =tmUK -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa298.meta" Content-Disposition: attachment; filename="xsa298.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAyOTgsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMiIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIs CiAgICAiNC45IiwKICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAi eGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiMzEzMWJmOTU2YWIxNTkyOTVlY2RkZTBjNWFkMDAzZDBjNWFm NDY5NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2 CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAg ICAgICJ4c2EyOTgtNC4xMC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9 CiAgICAgIH0KICAgIH0sCiAgICAiNC4xMSI6IHsKICAgICAgIlJlY2lwZXMi OiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAi MzM0MmVlOTMxOGNkMzhiYTAwNjI1NWI2ODdhYjdhMTQ1Mzk5ZWE5MiIsCiAg ICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2CiAgICAgICAg ICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2Ey OTgtNC4xMS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC4xMiI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAg ICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiNTk5ZDZkMjNj YmI3OTBhNzg4ZjdhNDlhYjRmMTFmMWEzYjViNDI5ZSIsCiAgICAgICAgICAi UHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2CiAgICAgICAgICBdLAogICAg ICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EyOTgucGF0Y2gi CiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQu OCI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAg ICAgICAgICJTdGFibGVSZWYiOiAiYzY3MjEwZjYwZGZhODM1NjVkMjZhZTcx MGU0ZjVlNzI5YTk1ZGNlNSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAg ICAgICAgICAgMjk2CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMi OiBbCiAgICAgICAgICAgICJ4c2EyOTgtNC45LnBhdGNoIgogICAgICAgICAg XQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjkiOiB7CiAgICAg ICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3Rh YmxlUmVmIjogIjhkMmE2ODgwMTUxOTNlMjBhZTQ3ZmUzYzIwOGY5OTEyODI0 MGY4MjEiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI5 NgogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAg ICAgICAieHNhMjk4LTQuOS5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9 CiAgICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICI1NWFiMjkyYzQyZGI0MWIwNWNmZGJhMDEyNjgwYmYxZTBlYTAyZjdhIiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTI5OC5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAg IH0KICB9Cn0= --=separator Content-Type: application/octet-stream; name="xsa298.patch" Content-Disposition: attachment; filename="xsa298.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUFY6IGNoZWNrIEdEVC9MRFQgbGltaXRzIGR1cmluZyBlbXVsYXRp b24KCkFjY2Vzc2VzIGJleW9uZCB0aGUgTERUIGxpbWl0IG9yaWdpbmF0aW5n IGZyb20gZW11bGF0aW9uIHdvdWxkIHRyaWdnZXIKdGhlIEFTU0VSVCgpIGlu IHB2X21hcF9sZHRfc2hhZG93X3BhZ2UoKS4gT24gcHJvZHVjdGlvbiBidWls ZHMgc3VjaAphY2Nlc3NlcyB3b3VsZCBjYXVzZSBhbiBhdHRlbXB0IHRvIHBy b21vdGUgdGhlIHRvdWNoZWQgcGFnZSAob2Zmc2V0IGZyb20KdGhlIHByZXNl bnQgTERUIGJhc2UgYWRkcmVzcykgdG8gYSBzZWdtZW50IGRlc2NyaXB0b3Ig b25lLiBJZiB0aGlzCmhhcHBlbnMgdG8gc3VjY2VlZCwgZ3Vlc3QgdXNlciBt b2RlIHdvdWxkIGJlIGFibGUgdG8gZWxldmF0ZSBpdHMKcHJpdmlsZWdlcyB0 byB0aGF0IG9mIHRoZSBndWVzdCBrZXJuZWwuIFRoaXMgaXMgcGFydGljdWxh cmx5IGVhc3kgd2hlbgp0aGVyZSdzIG5vIExEVCBhdCBhbGwsIGluIHdoaWNo IGNhc2UgdGhlIExEVCBiYXNlIHN0b3JlZCBpbnRlcm5hbGx5IHRvClhlbiBp cyBzaW1wbHkgemVyby4KCkFsc28gYWRqdXN0IHRoZSBBU1NFUlQoKSB0aGF0 IHdhcyB0cmlnZ2VyaW5nOiBJdCB3YXMgb2ZmIGJ5IG9uZSB0bwpiZWdpbiB3 aXRoLCBhbmQgZm9yIHByb2R1Y3Rpb24gYnVpbGRzIHdlIGFsc28gYmV0dGVy IHVzZQpBU1NFUlRfVU5SRUFDSEFCTEUoKSBpbnN0ZWFkIHdpdGggc3VpdGFi bGUgcmVjb3ZlcnkgY29kZSBhZnRlcndhcmRzLgoKVGhpcyBpcyBYU0EtMjk4 LgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIz QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+Ci0tLQp2MjogQ29ycmVjdCA2NC1i aXQtb25seSBsaW1pdCBjaGVjayAoYnkgZm9sZGluZyBpbnRvIHRoZSBjb21t b24gb25lKS4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9wdi9lbXVsLWdhdGUtb3Au YworKysgYi94ZW4vYXJjaC94ODYvcHYvZW11bC1nYXRlLW9wLmMKQEAgLTUx LDcgKzUxLDEzIEBAIHN0YXRpYyBpbnQgcmVhZF9nYXRlX2Rlc2NyaXB0b3Io dW5zaWduZWQKICAgICBjb25zdCBzZWdfZGVzY190ICpwZGVzYyA9IGdkdF9s ZHRfZGVzY19wdHIoZ2F0ZV9zZWwpOwogCiAgICAgaWYgKCAoZ2F0ZV9zZWwg PCA0KSB8fAotICAgICAgICAgKChnYXRlX3NlbCA+PSBGSVJTVF9SRVNFUlZF RF9HRFRfQllURSkgJiYgIShnYXRlX3NlbCAmIDQpKSB8fAorICAgICAgICAg LyoKKyAgICAgICAgICAqIFdlJ3JlIGludGVyZXN0ZWQgaW4gY2FsbCBnYXRl cyBvbmx5LCB3aGljaCBvY2N1cHkgYSBzaW5nbGUKKyAgICAgICAgICAqIHNl Z19kZXNjX3QgZm9yIDMyLWJpdCBhbmQgYSBjb25zZWN1dGl2ZSBwYWlyIG9m IHRoZW0gZm9yIDY0LWJpdC4KKyAgICAgICAgICAqLworICAgICAgICAgKChn YXRlX3NlbCA+PiAzKSArICFpc19wdl8zMmJpdF92Y3B1KHYpID49CisgICAg ICAgICAgKGdhdGVfc2VsICYgNCA/IHYtPmFyY2gucHYubGR0X2VudHMKKyAg ICAgICAgICAgICAgICAgICAgICAgIDogdi0+YXJjaC5wdi5nZHRfZW50cykp IHx8CiAgICAgICAgICBfX2dldF91c2VyKGRlc2MsIHBkZXNjKSApCiAgICAg ICAgIHJldHVybiAwOwogCkBAIC03MCw3ICs3Niw3IEBAIHN0YXRpYyBpbnQg cmVhZF9nYXRlX2Rlc2NyaXB0b3IodW5zaWduZWQKICAgICBpZiAoICFpc19w dl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAgICAgIGlmICggKCphciAm IDB4MWYwMCkgIT0gMHgwYzAwIHx8Ci0gICAgICAgICAgICAgKGdhdGVfc2Vs ID49IEZJUlNUX1JFU0VSVkVEX0dEVF9CWVRFIC0gOCAmJiAhKGdhdGVfc2Vs ICYgNCkpIHx8CisgICAgICAgICAgICAgLyogTGltaXQgY2hlY2sgZG9uZSBh Ym92ZSBhbHJlYWR5LiAqLwogICAgICAgICAgICAgIF9fZ2V0X3VzZXIoZGVz YywgcGRlc2MgKyAxKSB8fAogICAgICAgICAgICAgIChkZXNjLmIgJiAweDFm MDApICkKICAgICAgICAgICAgIHJldHVybiAwOwotLS0gYS94ZW4vYXJjaC94 ODYvcHYvZW11bGF0ZS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9wdi9lbXVsYXRl LmMKQEAgLTMxLDcgKzMxLDE0IEBAIGludCBwdl9lbXVsX3JlYWRfZGVzY3Jp cHRvcih1bnNpZ25lZCBpbnQKIHsKICAgICBzZWdfZGVzY190IGRlc2M7CiAK LSAgICBpZiAoIHNlbCA8IDQpCisgICAgaWYgKCBzZWwgPCA0IHx8CisgICAg ICAgICAvKgorICAgICAgICAgICogRG9uJ3QgYXBwbHkgdGhlIEdEVCBsaW1p dCBoZXJlLCBhcyB0aGUgc2VsZWN0b3IgbWF5IGJlIGEgWGVuCisgICAgICAg ICAgKiBwcm92aWRlZCBvbmUuIF9fZ2V0X3VzZXIoKSB3aWxsIGZhaWwgKHdp dGhvdXQgdGFraW5nIGZ1cnRoZXIKKyAgICAgICAgICAqIGFjdGlvbikgZm9y IG9uZXMgZmFsbGluZyBpbiB0aGUgZ2FwIGJldHdlZW4gZ3Vlc3QgcG9wdWxh dGVkCisgICAgICAgICAgKiBhbmQgWGVuIG9uZXMuCisgICAgICAgICAgKi8K KyAgICAgICAgICgoc2VsICYgNCkgJiYgKHNlbCA+PiAzKSA+PSB2LT5hcmNo LnB2LmxkdF9lbnRzKSApCiAgICAgICAgIGRlc2MuYiA9IGRlc2MuYSA9IDA7 CiAgICAgZWxzZSBpZiAoIF9fZ2V0X3VzZXIoZGVzYywgZ2R0X2xkdF9kZXNj X3B0cihzZWwpKSApCiAgICAgICAgIHJldHVybiAwOwotLS0gYS94ZW4vYXJj aC94ODYvcHYvbW0uYworKysgYi94ZW4vYXJjaC94ODYvcHYvbW0uYwpAQCAt OTIsMTIgKzkyLDE2IEBAIGJvb2wgcHZfbWFwX2xkdF9zaGFkb3dfcGFnZSh1 bnNpZ25lZCBpbnQKICAgICBCVUdfT04odW5saWtlbHkoaW5faXJxKCkpKTsK IAogICAgIC8qCi0gICAgICogSGFyZHdhcmUgbGltaXQgY2hlY2tpbmcgc2hv dWxkIGd1YXJhbnRlZSB0aGlzIHByb3BlcnR5LiAgTkIuIFRoaXMgaXMKKyAg ICAgKiBQcmlvciBsaW1pdCBjaGVja2luZyBzaG91bGQgZ3VhcmFudGVlIHRo aXMgcHJvcGVydHkuICBOQi4gVGhpcyBpcwogICAgICAqIHNhZmUgYXMgdXBk YXRlcyB0byB0aGUgTERUIGNhbiBvbmx5IGJlIG1hZGUgYnkgTU1VRVhUX1NF VF9MRFQgdG8gdGhlCiAgICAgICogY3VycmVudCB2Y3B1LCBhbmQgdmNwdV9y ZXNldCgpIHdpbGwgYmxvY2sgdW50aWwgdGhpcyB2Y3B1IGhhcyBiZWVuCiAg ICAgICogZGVzY2hlZHVsZWQgYmVmb3JlIGNvbnRpbnVpbmcuCiAgICAgICov Ci0gICAgQVNTRVJUKChvZmZzZXQgPj4gMykgPD0gY3Vyci0+YXJjaC5wdi5s ZHRfZW50cyk7CisgICAgaWYgKCB1bmxpa2VseSgob2Zmc2V0ID4+IDMpID49 IGN1cnItPmFyY2gucHYubGR0X2VudHMpICkKKyAgICB7CisgICAgICAgIEFT U0VSVF9VTlJFQUNIQUJMRSgpOworICAgICAgICByZXR1cm4gZmFsc2U7Cisg ICAgfQogCiAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21haW4oY3VycmQpICkK ICAgICAgICAgbGluZWFyID0gKHVpbnQzMl90KWxpbmVhcjsK --=separator Content-Type: application/octet-stream; name="xsa298-4.9.patch" Content-Disposition: attachment; filename="xsa298-4.9.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUFY6IGNoZWNrIEdEVC9MRFQgbGltaXRzIGR1cmluZyBlbXVsYXRp b24KCkFjY2Vzc2VzIGJleW9uZCB0aGUgTERUIGxpbWl0IG9yaWdpbmF0aW5n IGZyb20gZW11bGF0aW9uIHdvdWxkIHRyaWdnZXIKdGhlIEFTU0VSVCgpIGlu IHB2X21hcF9sZHRfc2hhZG93X3BhZ2UoKS4gT24gcHJvZHVjdGlvbiBidWls ZHMgc3VjaAphY2Nlc3NlcyB3b3VsZCBjYXVzZSBhbiBhdHRlbXB0IHRvIHBy b21vdGUgdGhlIHRvdWNoZWQgcGFnZSAob2Zmc2V0IGZyb20KdGhlIHByZXNl bnQgTERUIGJhc2UgYWRkcmVzcykgdG8gYSBzZWdtZW50IGRlc2NyaXB0b3Ig b25lLiBJZiB0aGlzCmhhcHBlbnMgdG8gc3VjY2VlZCwgZ3Vlc3QgdXNlciBt b2RlIHdvdWxkIGJlIGFibGUgdG8gZWxldmF0ZSBpdHMKcHJpdmlsZWdlcyB0 byB0aGF0IG9mIHRoZSBndWVzdCBrZXJuZWwuIFRoaXMgaXMgcGFydGljdWxh cmx5IGVhc3kgd2hlbgp0aGVyZSdzIG5vIExEVCBhdCBhbGwsIGluIHdoaWNo IGNhc2UgdGhlIExEVCBiYXNlIHN0b3JlZCBpbnRlcm5hbGx5IHRvClhlbiBp cyBzaW1wbHkgemVyby4KCkFsc28gYWRqdXN0IHRoZSBBU1NFUlQoKSB0aGF0 IHdhcyB0cmlnZ2VyaW5nOiBJdCB3YXMgb2ZmIGJ5IG9uZSB0bwpiZWdpbiB3 aXRoLCBhbmQgZm9yIHByb2R1Y3Rpb24gYnVpbGRzIHdlIGFsc28gYmV0dGVy IHVzZQpBU1NFUlRfVU5SRUFDSEFCTEUoKSBpbnN0ZWFkIHdpdGggc3VpdGFi bGUgcmVjb3ZlcnkgY29kZSBhZnRlcndhcmRzLgoKVGhpcyBpcyBYU0EtMjk4 LgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIz QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv bW0uYworKysgYi94ZW4vYXJjaC94ODYvbW0uYwpAQCAtNzEyLDYgKzcxMiwx OCBAQCBpbnQgbWFwX2xkdF9zaGFkb3dfcGFnZSh1bnNpZ25lZCBpbnQgb2Zm CiAKICAgICBCVUdfT04odW5saWtlbHkoaW5faXJxKCkpKTsKIAorICAgIC8q CisgICAgICogUHJpb3IgbGltaXQgY2hlY2tpbmcgc2hvdWxkIGd1YXJhbnRl ZSB0aGlzIHByb3BlcnR5LiAgTkIuIFRoaXMgaXMKKyAgICAgKiBzYWZlIGFz IHVwZGF0ZXMgdG8gdGhlIExEVCBjYW4gb25seSBiZSBtYWRlIGJ5IE1NVUVY VF9TRVRfTERUIHRvIHRoZQorICAgICAqIGN1cnJlbnQgdmNwdSwgYW5kIHZj cHVfcmVzZXQoKSB3aWxsIGJsb2NrIHVudGlsIHRoaXMgdmNwdSBoYXMgYmVl bgorICAgICAqIGRlc2NoZWR1bGVkIGJlZm9yZSBjb250aW51aW5nLgorICAg ICAqLworICAgIGlmICggdW5saWtlbHkoKG9mZiA+PiAzKSA+PSB2LT5hcmNo LnB2X3ZjcHUubGR0X2VudHMpICkKKyAgICB7CisgICAgICAgIEFTU0VSVF9V TlJFQUNIQUJMRSgpOworICAgICAgICByZXR1cm4gMDsKKyAgICB9CisKICAg ICBpZiAoIGlzX3B2XzMyYml0X2RvbWFpbihkKSApCiAgICAgICAgIGd2YSA9 ICh1MzIpZ3ZhOwogICAgIGd1ZXN0X2dldF9lZmZfa2Vybl9sMWUodiwgZ3Zh LCAmbDFlKTsKLS0tIGEveGVuL2FyY2gveDg2L3RyYXBzLmMKKysrIGIveGVu L2FyY2gveDg2L3RyYXBzLmMKQEAgLTE2MzksNyArMTYzOSwxNCBAQCBzdGF0 aWMgaW50IHJlYWRfZGVzY3JpcHRvcih1bnNpZ25lZCBpbnQKIHsKICAgICBz dHJ1Y3QgZGVzY19zdHJ1Y3QgZGVzYzsKIAotICAgIGlmICggc2VsIDwgNCkK KyAgICBpZiAoIHNlbCA8IDQgfHwKKyAgICAgICAgIC8qCisgICAgICAgICAg KiBEb24ndCBhcHBseSB0aGUgR0RUIGxpbWl0IGhlcmUsIGFzIHRoZSBzZWxl Y3RvciBtYXkgYmUgYSBYZW4KKyAgICAgICAgICAqIHByb3ZpZGVkIG9uZS4g X19nZXRfdXNlcigpIHdpbGwgZmFpbCAod2l0aG91dCB0YWtpbmcgZnVydGhl cgorICAgICAgICAgICogYWN0aW9uKSBmb3Igb25lcyBmYWxsaW5nIGluIHRo ZSBnYXAgYmV0d2VlbiBndWVzdCBwb3B1bGF0ZWQKKyAgICAgICAgICAqIGFu ZCBYZW4gb25lcy4KKyAgICAgICAgICAqLworICAgICAgICAgKChzZWwgJiA0 KSAmJiAoc2VsID4+IDMpID49IHYtPmFyY2gucHZfdmNwdS5sZHRfZW50cykg KQogICAgICAgICBkZXNjLmIgPSBkZXNjLmEgPSAwOwogICAgIGVsc2UgaWYg KCBfX2dldF91c2VyKGRlc2MsCiAgICAgICAgICAgICAgICAgICAgICAgICAg KGNvbnN0IHN0cnVjdCBkZXNjX3N0cnVjdCAqKSghKHNlbCAmIDQpCkBAIC0x Njk4LDcgKzE3MDUsMTMgQEAgc3RhdGljIGludCByZWFkX2dhdGVfZGVzY3Jp cHRvcih1bnNpZ25lZAogICAgICAgICAoIShnYXRlX3NlbCAmIDQpID8gR0RU X1ZJUlRfU1RBUlQodikgOiBMRFRfVklSVF9TVEFSVCh2KSkKICAgICAgICAg KyAoZ2F0ZV9zZWwgPj4gMyk7CiAgICAgaWYgKCAoZ2F0ZV9zZWwgPCA0KSB8 fAotICAgICAgICAgKChnYXRlX3NlbCA+PSBGSVJTVF9SRVNFUlZFRF9HRFRf QllURSkgJiYgIShnYXRlX3NlbCAmIDQpKSB8fAorICAgICAgICAgLyoKKyAg ICAgICAgICAqIFdlJ3JlIGludGVyZXN0ZWQgaW4gY2FsbCBnYXRlcyBvbmx5 LCB3aGljaCBvY2N1cHkgYSBzaW5nbGUKKyAgICAgICAgICAqIHNlZ19kZXNj X3QgZm9yIDMyLWJpdCBhbmQgYSBjb25zZWN1dGl2ZSBwYWlyIG9mIHRoZW0g Zm9yIDY0LWJpdC4KKyAgICAgICAgICAqLworICAgICAgICAgKChnYXRlX3Nl bCA+PiAzKSArICFpc19wdl8zMmJpdF92Y3B1KHYpID49CisgICAgICAgICAg KGdhdGVfc2VsICYgNCA/IHYtPmFyY2gucHZfdmNwdS5sZHRfZW50cworICAg ICAgICAgICAgICAgICAgICAgICAgOiB2LT5hcmNoLnB2X3ZjcHUuZ2R0X2Vu dHMpKSB8fAogICAgICAgICAgX19nZXRfdXNlcihkZXNjLCBwZGVzYykgKQog ICAgICAgICByZXR1cm4gMDsKIApAQCAtMTcxNyw3ICsxNzMwLDcgQEAgc3Rh dGljIGludCByZWFkX2dhdGVfZGVzY3JpcHRvcih1bnNpZ25lZAogICAgIGlm ICggIWlzX3B2XzMyYml0X3ZjcHUodikgKQogICAgIHsKICAgICAgICAgaWYg KCAoKmFyICYgMHgxZjAwKSAhPSAweDBjMDAgfHwKLSAgICAgICAgICAgICAo Z2F0ZV9zZWwgPj0gRklSU1RfUkVTRVJWRURfR0RUX0JZVEUgLSA4ICYmICEo Z2F0ZV9zZWwgJiA0KSkgfHwKKyAgICAgICAgICAgICAvKiBMaW1pdCBjaGVj ayBkb25lIGFib3ZlIGFscmVhZHkuICovCiAgICAgICAgICAgICAgX19nZXRf dXNlcihkZXNjLCBwZGVzYyArIDEpIHx8CiAgICAgICAgICAgICAgKGRlc2Mu YiAmIDB4MWYwMCkgKQogICAgICAgICAgICAgcmV0dXJuIDA7Cg== --=separator Content-Type: application/octet-stream; name="xsa298-4.10.patch" Content-Disposition: attachment; filename="xsa298-4.10.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUFY6IGNoZWNrIEdEVC9MRFQgbGltaXRzIGR1cmluZyBlbXVsYXRp b24KCkFjY2Vzc2VzIGJleW9uZCB0aGUgTERUIGxpbWl0IG9yaWdpbmF0aW5n IGZyb20gZW11bGF0aW9uIHdvdWxkIHRyaWdnZXIKdGhlIEFTU0VSVCgpIGlu IHB2X21hcF9sZHRfc2hhZG93X3BhZ2UoKS4gT24gcHJvZHVjdGlvbiBidWls ZHMgc3VjaAphY2Nlc3NlcyB3b3VsZCBjYXVzZSBhbiBhdHRlbXB0IHRvIHBy b21vdGUgdGhlIHRvdWNoZWQgcGFnZSAob2Zmc2V0IGZyb20KdGhlIHByZXNl bnQgTERUIGJhc2UgYWRkcmVzcykgdG8gYSBzZWdtZW50IGRlc2NyaXB0b3Ig b25lLiBJZiB0aGlzCmhhcHBlbnMgdG8gc3VjY2VlZCwgZ3Vlc3QgdXNlciBt b2RlIHdvdWxkIGJlIGFibGUgdG8gZWxldmF0ZSBpdHMKcHJpdmlsZWdlcyB0 byB0aGF0IG9mIHRoZSBndWVzdCBrZXJuZWwuIFRoaXMgaXMgcGFydGljdWxh cmx5IGVhc3kgd2hlbgp0aGVyZSdzIG5vIExEVCBhdCBhbGwsIGluIHdoaWNo IGNhc2UgdGhlIExEVCBiYXNlIHN0b3JlZCBpbnRlcm5hbGx5IHRvClhlbiBp cyBzaW1wbHkgemVyby4KCkFsc28gYWRqdXN0IHRoZSBBU1NFUlQoKSB0aGF0 IHdhcyB0cmlnZ2VyaW5nOiBJdCB3YXMgb2ZmIGJ5IG9uZSB0bwpiZWdpbiB3 aXRoLCBhbmQgZm9yIHByb2R1Y3Rpb24gYnVpbGRzIHdlIGFsc28gYmV0dGVy IHVzZQpBU1NFUlRfVU5SRUFDSEFCTEUoKSBpbnN0ZWFkIHdpdGggc3VpdGFi bGUgcmVjb3ZlcnkgY29kZSBhZnRlcndhcmRzLgoKVGhpcyBpcyBYU0EtMjk4 LgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIz QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv cHYvZW11bC1nYXRlLW9wLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2VtdWwt Z2F0ZS1vcC5jCkBAIC02MCw3ICs2MCwxMyBAQCBzdGF0aWMgaW50IHJlYWRf Z2F0ZV9kZXNjcmlwdG9yKHVuc2lnbmVkCiAgICAgICAgICghKGdhdGVfc2Vs ICYgNCkgPyBHRFRfVklSVF9TVEFSVCh2KSA6IExEVF9WSVJUX1NUQVJUKHYp KQogICAgICAgICArIChnYXRlX3NlbCA+PiAzKTsKICAgICBpZiAoIChnYXRl X3NlbCA8IDQpIHx8Ci0gICAgICAgICAoKGdhdGVfc2VsID49IEZJUlNUX1JF U0VSVkVEX0dEVF9CWVRFKSAmJiAhKGdhdGVfc2VsICYgNCkpIHx8CisgICAg ICAgICAvKgorICAgICAgICAgICogV2UncmUgaW50ZXJlc3RlZCBpbiBjYWxs IGdhdGVzIG9ubHksIHdoaWNoIG9jY3VweSBhIHNpbmdsZQorICAgICAgICAg ICogc2VnX2Rlc2NfdCBmb3IgMzItYml0IGFuZCBhIGNvbnNlY3V0aXZlIHBh aXIgb2YgdGhlbSBmb3IgNjQtYml0LgorICAgICAgICAgICovCisgICAgICAg ICAoKGdhdGVfc2VsID4+IDMpICsgIWlzX3B2XzMyYml0X3ZjcHUodikgPj0K KyAgICAgICAgICAoZ2F0ZV9zZWwgJiA0ID8gdi0+YXJjaC5wdl92Y3B1Lmxk dF9lbnRzCisgICAgICAgICAgICAgICAgICAgICAgICA6IHYtPmFyY2gucHZf dmNwdS5nZHRfZW50cykpIHx8CiAgICAgICAgICBfX2dldF91c2VyKGRlc2Ms IHBkZXNjKSApCiAgICAgICAgIHJldHVybiAwOwogCkBAIC03OSw3ICs4NSw3 IEBAIHN0YXRpYyBpbnQgcmVhZF9nYXRlX2Rlc2NyaXB0b3IodW5zaWduZWQK ICAgICBpZiAoICFpc19wdl8zMmJpdF92Y3B1KHYpICkKICAgICB7CiAgICAg ICAgIGlmICggKCphciAmIDB4MWYwMCkgIT0gMHgwYzAwIHx8Ci0gICAgICAg ICAgICAgKGdhdGVfc2VsID49IEZJUlNUX1JFU0VSVkVEX0dEVF9CWVRFIC0g OCAmJiAhKGdhdGVfc2VsICYgNCkpIHx8CisgICAgICAgICAgICAgLyogTGlt aXQgY2hlY2sgZG9uZSBhYm92ZSBhbHJlYWR5LiAqLwogICAgICAgICAgICAg IF9fZ2V0X3VzZXIoZGVzYywgcGRlc2MgKyAxKSB8fAogICAgICAgICAgICAg IChkZXNjLmIgJiAweDFmMDApICkKICAgICAgICAgICAgIHJldHVybiAwOwot LS0gYS94ZW4vYXJjaC94ODYvcHYvZW11bGF0ZS5jCisrKyBiL3hlbi9hcmNo L3g4Ni9wdi9lbXVsYXRlLmMKQEAgLTMxLDcgKzMxLDE0IEBAIGludCBwdl9l bXVsX3JlYWRfZGVzY3JpcHRvcih1bnNpZ25lZCBpbnQKIHsKICAgICBzdHJ1 Y3QgZGVzY19zdHJ1Y3QgZGVzYzsKIAotICAgIGlmICggc2VsIDwgNCkKKyAg ICBpZiAoIHNlbCA8IDQgfHwKKyAgICAgICAgIC8qCisgICAgICAgICAgKiBE b24ndCBhcHBseSB0aGUgR0RUIGxpbWl0IGhlcmUsIGFzIHRoZSBzZWxlY3Rv ciBtYXkgYmUgYSBYZW4KKyAgICAgICAgICAqIHByb3ZpZGVkIG9uZS4gX19n ZXRfdXNlcigpIHdpbGwgZmFpbCAod2l0aG91dCB0YWtpbmcgZnVydGhlcgor ICAgICAgICAgICogYWN0aW9uKSBmb3Igb25lcyBmYWxsaW5nIGluIHRoZSBn YXAgYmV0d2VlbiBndWVzdCBwb3B1bGF0ZWQKKyAgICAgICAgICAqIGFuZCBY ZW4gb25lcy4KKyAgICAgICAgICAqLworICAgICAgICAgKChzZWwgJiA0KSAm JiAoc2VsID4+IDMpID49IHYtPmFyY2gucHZfdmNwdS5sZHRfZW50cykgKQog ICAgICAgICBkZXNjLmIgPSBkZXNjLmEgPSAwOwogICAgIGVsc2UgaWYgKCBf X2dldF91c2VyKGRlc2MsCiAgICAgICAgICAgICAgICAgICAgICAgICAgKGNv bnN0IHN0cnVjdCBkZXNjX3N0cnVjdCAqKSghKHNlbCAmIDQpCi0tLSBhL3hl bi9hcmNoL3g4Ni9wdi9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9wdi9tbS5j CkBAIC05OCwxMiArOTgsMTYgQEAgYm9vbCBwdl9tYXBfbGR0X3NoYWRvd19w YWdlKHVuc2lnbmVkIGludAogICAgIEJVR19PTih1bmxpa2VseShpbl9pcnEo KSkpOwogCiAgICAgLyoKLSAgICAgKiBIYXJkd2FyZSBsaW1pdCBjaGVja2lu ZyBzaG91bGQgZ3VhcmFudGVlIHRoaXMgcHJvcGVydHkuICBOQi4gVGhpcyBp cworICAgICAqIFByaW9yIGxpbWl0IGNoZWNraW5nIHNob3VsZCBndWFyYW50 ZWUgdGhpcyBwcm9wZXJ0eS4gIE5CLiBUaGlzIGlzCiAgICAgICogc2FmZSBh cyB1cGRhdGVzIHRvIHRoZSBMRFQgY2FuIG9ubHkgYmUgbWFkZSBieSBNTVVF WFRfU0VUX0xEVCB0byB0aGUKICAgICAgKiBjdXJyZW50IHZjcHUsIGFuZCB2 Y3B1X3Jlc2V0KCkgd2lsbCBibG9jayB1bnRpbCB0aGlzIHZjcHUgaGFzIGJl ZW4KICAgICAgKiBkZXNjaGVkdWxlZCBiZWZvcmUgY29udGludWluZy4KICAg ICAgKi8KLSAgICBBU1NFUlQoKG9mZnNldCA+PiAzKSA8PSBjdXJyLT5hcmNo LnB2X3ZjcHUubGR0X2VudHMpOworICAgIGlmICggdW5saWtlbHkoKG9mZnNl dCA+PiAzKSA+PSBjdXJyLT5hcmNoLnB2X3ZjcHUubGR0X2VudHMpICkKKyAg ICB7CisgICAgICAgIEFTU0VSVF9VTlJFQUNIQUJMRSgpOworICAgICAgICBy ZXR1cm4gZmFsc2U7CisgICAgfQogCiAgICAgaWYgKCBpc19wdl8zMmJpdF9k b21haW4oY3VycmQpICkKICAgICAgICAgbGluZWFyID0gKHVpbnQzMl90KWxp bmVhcjsK --=separator Content-Type: application/octet-stream; name="xsa298-4.11.patch" Content-Disposition: attachment; filename="xsa298-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUFY6IGNoZWNrIEdEVC9MRFQgbGltaXRzIGR1cmluZyBlbXVsYXRp b24KCkFjY2Vzc2VzIGJleW9uZCB0aGUgTERUIGxpbWl0IG9yaWdpbmF0aW5n IGZyb20gZW11bGF0aW9uIHdvdWxkIHRyaWdnZXIKdGhlIEFTU0VSVCgpIGlu IHB2X21hcF9sZHRfc2hhZG93X3BhZ2UoKS4gT24gcHJvZHVjdGlvbiBidWls ZHMgc3VjaAphY2Nlc3NlcyB3b3VsZCBjYXVzZSBhbiBhdHRlbXB0IHRvIHBy b21vdGUgdGhlIHRvdWNoZWQgcGFnZSAob2Zmc2V0IGZyb20KdGhlIHByZXNl bnQgTERUIGJhc2UgYWRkcmVzcykgdG8gYSBzZWdtZW50IGRlc2NyaXB0b3Ig b25lLiBJZiB0aGlzCmhhcHBlbnMgdG8gc3VjY2VlZCwgZ3Vlc3QgdXNlciBt b2RlIHdvdWxkIGJlIGFibGUgdG8gZWxldmF0ZSBpdHMKcHJpdmlsZWdlcyB0 byB0aGF0IG9mIHRoZSBndWVzdCBrZXJuZWwuIFRoaXMgaXMgcGFydGljdWxh cmx5IGVhc3kgd2hlbgp0aGVyZSdzIG5vIExEVCBhdCBhbGwsIGluIHdoaWNo IGNhc2UgdGhlIExEVCBiYXNlIHN0b3JlZCBpbnRlcm5hbGx5IHRvClhlbiBp cyBzaW1wbHkgemVyby4KCkFsc28gYWRqdXN0IHRoZSBBU1NFUlQoKSB0aGF0 IHdhcyB0cmlnZ2VyaW5nOiBJdCB3YXMgb2ZmIGJ5IG9uZSB0bwpiZWdpbiB3 aXRoLCBhbmQgZm9yIHByb2R1Y3Rpb24gYnVpbGRzIHdlIGFsc28gYmV0dGVy IHVzZQpBU1NFUlRfVU5SRUFDSEFCTEUoKSBpbnN0ZWFkIHdpdGggc3VpdGFi bGUgcmVjb3ZlcnkgY29kZSBhZnRlcndhcmRzLgoKVGhpcyBpcyBYU0EtMjk4 LgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIz QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYv cHYvZW11bC1nYXRlLW9wLmMKKysrIGIveGVuL2FyY2gveDg2L3B2L2VtdWwt Z2F0ZS1vcC5jCkBAIC01MSw3ICs1MSwxMyBAQCBzdGF0aWMgaW50IHJlYWRf Z2F0ZV9kZXNjcmlwdG9yKHVuc2lnbmVkCiAgICAgY29uc3Qgc3RydWN0IGRl c2Nfc3RydWN0ICpwZGVzYyA9IGdkdF9sZHRfZGVzY19wdHIoZ2F0ZV9zZWwp OwogCiAgICAgaWYgKCAoZ2F0ZV9zZWwgPCA0KSB8fAotICAgICAgICAgKChn YXRlX3NlbCA+PSBGSVJTVF9SRVNFUlZFRF9HRFRfQllURSkgJiYgIShnYXRl X3NlbCAmIDQpKSB8fAorICAgICAgICAgLyoKKyAgICAgICAgICAqIFdlJ3Jl IGludGVyZXN0ZWQgaW4gY2FsbCBnYXRlcyBvbmx5LCB3aGljaCBvY2N1cHkg YSBzaW5nbGUKKyAgICAgICAgICAqIHNlZ19kZXNjX3QgZm9yIDMyLWJpdCBh bmQgYSBjb25zZWN1dGl2ZSBwYWlyIG9mIHRoZW0gZm9yIDY0LWJpdC4KKyAg ICAgICAgICAqLworICAgICAgICAgKChnYXRlX3NlbCA+PiAzKSArICFpc19w dl8zMmJpdF92Y3B1KHYpID49CisgICAgICAgICAgKGdhdGVfc2VsICYgNCA/ IHYtPmFyY2gucHZfdmNwdS5sZHRfZW50cworICAgICAgICAgICAgICAgICAg ICAgICAgOiB2LT5hcmNoLnB2X3ZjcHUuZ2R0X2VudHMpKSB8fAogICAgICAg ICAgX19nZXRfdXNlcihkZXNjLCBwZGVzYykgKQogICAgICAgICByZXR1cm4g MDsKIApAQCAtNzAsNyArNzYsNyBAQCBzdGF0aWMgaW50IHJlYWRfZ2F0ZV9k ZXNjcmlwdG9yKHVuc2lnbmVkCiAgICAgaWYgKCAhaXNfcHZfMzJiaXRfdmNw dSh2KSApCiAgICAgewogICAgICAgICBpZiAoICgqYXIgJiAweDFmMDApICE9 IDB4MGMwMCB8fAotICAgICAgICAgICAgIChnYXRlX3NlbCA+PSBGSVJTVF9S RVNFUlZFRF9HRFRfQllURSAtIDggJiYgIShnYXRlX3NlbCAmIDQpKSB8fAor ICAgICAgICAgICAgIC8qIExpbWl0IGNoZWNrIGRvbmUgYWJvdmUgYWxyZWFk eS4gKi8KICAgICAgICAgICAgICBfX2dldF91c2VyKGRlc2MsIHBkZXNjICsg MSkgfHwKICAgICAgICAgICAgICAoZGVzYy5iICYgMHgxZjAwKSApCiAgICAg ICAgICAgICByZXR1cm4gMDsKLS0tIGEveGVuL2FyY2gveDg2L3B2L2VtdWxh dGUuYworKysgYi94ZW4vYXJjaC94ODYvcHYvZW11bGF0ZS5jCkBAIC0zMSw3 ICszMSwxNCBAQCBpbnQgcHZfZW11bF9yZWFkX2Rlc2NyaXB0b3IodW5zaWdu ZWQgaW50CiB7CiAgICAgc3RydWN0IGRlc2Nfc3RydWN0IGRlc2M7CiAKLSAg ICBpZiAoIHNlbCA8IDQpCisgICAgaWYgKCBzZWwgPCA0IHx8CisgICAgICAg ICAvKgorICAgICAgICAgICogRG9uJ3QgYXBwbHkgdGhlIEdEVCBsaW1pdCBo ZXJlLCBhcyB0aGUgc2VsZWN0b3IgbWF5IGJlIGEgWGVuCisgICAgICAgICAg KiBwcm92aWRlZCBvbmUuIF9fZ2V0X3VzZXIoKSB3aWxsIGZhaWwgKHdpdGhv dXQgdGFraW5nIGZ1cnRoZXIKKyAgICAgICAgICAqIGFjdGlvbikgZm9yIG9u ZXMgZmFsbGluZyBpbiB0aGUgZ2FwIGJldHdlZW4gZ3Vlc3QgcG9wdWxhdGVk CisgICAgICAgICAgKiBhbmQgWGVuIG9uZXMuCisgICAgICAgICAgKi8KKyAg ICAgICAgICgoc2VsICYgNCkgJiYgKHNlbCA+PiAzKSA+PSB2LT5hcmNoLnB2 X3ZjcHUubGR0X2VudHMpICkKICAgICAgICAgZGVzYy5iID0gZGVzYy5hID0g MDsKICAgICBlbHNlIGlmICggX19nZXRfdXNlcihkZXNjLCBnZHRfbGR0X2Rl c2NfcHRyKHNlbCkpICkKICAgICAgICAgcmV0dXJuIDA7Ci0tLSBhL3hlbi9h cmNoL3g4Ni9wdi9tbS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9wdi9tbS5jCkBA IC05MiwxMiArOTIsMTYgQEAgYm9vbCBwdl9tYXBfbGR0X3NoYWRvd19wYWdl KHVuc2lnbmVkIGludAogICAgIEJVR19PTih1bmxpa2VseShpbl9pcnEoKSkp OwogCiAgICAgLyoKLSAgICAgKiBIYXJkd2FyZSBsaW1pdCBjaGVja2luZyBz aG91bGQgZ3VhcmFudGVlIHRoaXMgcHJvcGVydHkuICBOQi4gVGhpcyBpcwor ICAgICAqIFByaW9yIGxpbWl0IGNoZWNraW5nIHNob3VsZCBndWFyYW50ZWUg dGhpcyBwcm9wZXJ0eS4gIE5CLiBUaGlzIGlzCiAgICAgICogc2FmZSBhcyB1 cGRhdGVzIHRvIHRoZSBMRFQgY2FuIG9ubHkgYmUgbWFkZSBieSBNTVVFWFRf U0VUX0xEVCB0byB0aGUKICAgICAgKiBjdXJyZW50IHZjcHUsIGFuZCB2Y3B1 X3Jlc2V0KCkgd2lsbCBibG9jayB1bnRpbCB0aGlzIHZjcHUgaGFzIGJlZW4K ICAgICAgKiBkZXNjaGVkdWxlZCBiZWZvcmUgY29udGludWluZy4KICAgICAg Ki8KLSAgICBBU1NFUlQoKG9mZnNldCA+PiAzKSA8PSBjdXJyLT5hcmNoLnB2 X3ZjcHUubGR0X2VudHMpOworICAgIGlmICggdW5saWtlbHkoKG9mZnNldCA+ PiAzKSA+PSBjdXJyLT5hcmNoLnB2X3ZjcHUubGR0X2VudHMpICkKKyAgICB7 CisgICAgICAgIEFTU0VSVF9VTlJFQUNIQUJMRSgpOworICAgICAgICByZXR1 cm4gZmFsc2U7CisgICAgfQogCiAgICAgaWYgKCBpc19wdl8zMmJpdF9kb21h aW4oY3VycmQpICkKICAgICAgICAgbGluZWFyID0gKHVpbnQzMl90KWxpbmVh cjsK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Oct 31 12:31:15 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 31 Oct 2019 12:31:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9b1-00083X-11; Thu, 31 Oct 2019 12:30:35 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9az-00083E-Vy for xen-announce@lists.xen.org; Thu, 31 Oct 2019 12:30:34 +0000 X-Inumbo-ID: 3848a0cc-fbda-11e9-9540-12813bfff9fa Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 3848a0cc-fbda-11e9-9540-12813bfff9fa; Thu, 31 Oct 2019 12:30:27 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9ao-0007CC-QS; Thu, 31 Oct 2019 12:30:22 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iQ9ao-0004LS-NU; Thu, 31 Oct 2019 12:30:22 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Thu, 31 Oct 2019 12:30:22 +0000 Subject: [Xen-announce] Xen Security Advisory 301 v3 (CVE-2019-18423) - add-to-physmap can be abused to DoS Arm hosts X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-18423 / XSA-301 version 3 add-to-physmap can be abused to DoS Arm hosts UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame. The rest of the code in the two functions will assume that there is a valid root table and check that with BUG_ON(). The function p2m_get_root_pointer() will ignore the unused top bits of a guest physical frame. This means that the function p2m_set_entry() will alias the frame. However, p2m->max_mapped_gfn will be updated using the original frame. It would be possible to set p2m->max_mapped_gfn high enough to cover a frame that would lead p2m_get_root_pointer() to return NULL in p2m_get_entry() and p2m_resolve_translation_fault(). Additionally, the sanity check on p2m->max_mapped_gfn is off-by-one allowing "highest mapped + 1" to be considered valid. However, p2m_get_root_pointer() will return NULL. The problem could be triggered with a specially crafted hypercall XENMEM_add_to_physmap{, _batch} followed by an access to an address (via hypercall or direct access) that passes the sanity check but cause p2m_get_root_pointer() to return NULL. IMPACT ====== A malicious guest administrator may cause a hypervisor crash, resulting in a Denial of Service (DoS). VULNERABLE SYSTEMS ================== Xen version 4.8 and newer are vulnerable. Only Arm systems are vulnerable. x86 systems are not affected. MITIGATION ========== There are no mitigations. CREDITS ======= This issue was discovered by Julian Grall of Arm. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa301-master-*.patch xen-unstable to Xen 4.12 xsa301-4.11-*.patch Xen 4.11 to Xen 4.8 $ sha256sum xsa301* c3f334d3de1fd7385a5b73edca1f979b6027595d8aa2a3fce451ee5a37d57662 xsa301.meta 1f6f76e0da4bd8cbce38a127d446593058a76565bade57672d6a00357fdc64fa xsa301-4.11-1.patch b1ea7b323f509a6150983ece24ecd38f3a9ea97a11360d7a36f715ebaf85e8b1 xsa301-4.11-2.patch 67fffdd5f827f783e8752ca779a3234d30f26df5c42844c5b2b4a34618d7a0c2 xsa301-4.11-3.patch 3dba13afd3449b85215058c596f6a60a255e5a11c6865cbcaa05e9768f535b46 xsa301-master-1.patch dbf952c2333807d5ee0fe4cccb069ddfda87e295c83a43ec46621b486b19f6e8 xsa301-master-2.patch ad544e5e2da130540d5475954b1512fc00743773cad382c4c0451fd91536287d xsa301-master-3.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl2601sMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZV3sH/0LnX74pFsicNGw73H2zrLQuvXQolWvThF3sZDKj VeeX6WZ3u7n4au3TNytoFcx6IKR5ysqWWL2NpTW2ZXq+5ZZ3TSv39e7mGrUdQ/tC YB/bWc8IxIgfwpL10ph12heqcQXUbpppBLIVgklCMUEpNTHWPubJuPEeMp5xPexK cmpCuIck7HcyiSpTMAdZ+cj8voV3h3Wmc2pLXPgR3+T56KsuV5IdoIr5I9s4kPAM hsh+4Ip/uYa4JUepxap3AD+yqLBDXggGwua50wVEtSPPVR6FEMvDYtuiMUEq+G7d 3DOKy6ylf9XzMOQWSHEvWOLzu5CSAxwMnVB0KJ8T0bI+HxU= =wp/o -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa301.meta" Content-Disposition: attachment; filename="xsa301.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAzMDEsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMiIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIs CiAgICAiNC45IiwKICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAi eGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiMzEzMWJmOTU2YWIxNTkyOTVlY2RkZTBjNWFkMDAzZDBjNWFm NDY5NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2 LAogICAgICAgICAgICAyOTgsCiAgICAgICAgICAgIDI5OQogICAgICAgICAg XSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMzAx LTQuMTEtKi5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAiNC4xMSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAg ICAgInhlbiI6IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiMzM0MmVlOTMx OGNkMzhiYTAwNjI1NWI2ODdhYjdhMTQ1Mzk5ZWE5MiIsCiAgICAgICAgICAi UHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2LAogICAgICAgICAgICAyOTgs CiAgICAgICAgICAgIDI5OQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRj aGVzIjogWwogICAgICAgICAgICAieHNhMzAxLTQuMTEtKi5wYXRjaCIKICAg ICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAiNC4xMiI6 IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAg ICAgICJTdGFibGVSZWYiOiAiNTk5ZDZkMjNjYmI3OTBhNzg4ZjdhNDlhYjRm MTFmMWEzYjViNDI5ZSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAg ICAgICAgMjk2LAogICAgICAgICAgICAyOTgsCiAgICAgICAgICAgIDI5OQog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMzAxLW1hc3Rlci0qLnBhdGNoIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfSwKICAgICI0LjgiOiB7CiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog ImM2NzIxMGY2MGRmYTgzNTY1ZDI2YWU3MTBlNGY1ZTcyOWE5NWRjZTUiLAog ICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI5NiwKICAgICAg ICAgICAgMjk4LAogICAgICAgICAgICAyOTkKICAgICAgICAgIF0sCiAgICAg ICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTMwMS00LjExLSou cGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAog ICAgIjQuOSI6IHsKICAgICAgIlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6 IHsKICAgICAgICAgICJTdGFibGVSZWYiOiAiOGQyYTY4ODAxNTE5M2UyMGFl NDdmZTNjMjA4Zjk5MTI4MjQwZjgyMSIsCiAgICAgICAgICAiUHJlcmVxcyI6 IFsKICAgICAgICAgICAgMjk2LAogICAgICAgICAgICAyOTgsCiAgICAgICAg ICAgIDI5OQogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMzAxLTQuMTEtKi5wYXRjaCIKICAgICAgICAgIF0K ICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAg ICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0 YWJsZVJlZiI6ICI1NWFiMjkyYzQyZGI0MWIwNWNmZGJhMDEyNjgwYmYxZTBl YTAyZjdhIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAy OTYsCiAgICAgICAgICAgIDI5OCwKICAgICAgICAgICAgMjk5CiAgICAgICAg ICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2Ez MDEtbWFzdGVyLSoucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAgfQogICAg ICB9CiAgICB9CiAgfQp9 --=separator Content-Type: application/octet-stream; name="xsa301-4.11-1.patch" Content-Disposition: attachment; filename="xsa301-4.11-1.patch" Content-Transfer-Encoding: base64 RnJvbSAyMWRmZThmNzA3ZmViZDYyODY5ZDRlYmJhYTE1NTczNjg3MGJlYmVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBXZWQsIDIgT2N0IDIwMTkg MTI6MDY6NTAgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvM10geGVuL2FybTog cDJtOiBBdm9pZCBhbGlhc2luZyBndWVzdCBwaHlzaWNhbCBmcmFtZQoKVGhl IFAyTSBoZWxwZXJzIGltcGxlbWVudGF0aW9uIGlzIHF1aXRlIGxheCBhbmQg d2lsbCBlbmQgdXAgdG8gaWdub3JlCnRoZSB1bnVzZWQgdG9wIGJpdHMgb2Yg YSBndWVzdCBwaHlzaWNhbCBmcmFtZS4KClRoaXMgZWZmZWN0aXZlbHkgbWVh bnMgdGhhdCBwMm1fc2V0X2VudHJ5KCkgd2lsbCBjcmVhdGUgYSBtYXBwaW5n IGZvciBhCmRpZmZlcmVudCBmcmFtZSAoaXQgaXMgYWx3YXlzIGVxdWFsIHRv IGdmbiAmIChtYXNrIHVudXNlZCBiaXRzKSkuIFlldApwMm0tPm1heF9tYXBw ZWRfZ2ZuIHdpbGwgYmUgdXBkYXRlZCB1c2luZyB0aGUgb3JpZ2luYWwgZnJh bWUuCgpBdCB0aGUgbW9tZW50LCBwMm1fZ2V0X2VudHJ5KCkgYW5kIHAybV9y ZXNvbHZlX3RyYW5zbGF0aW9uX2ZhdWx0KCkKYXNzdW1lIHRoYXQgcDJtX2dl dF9yb290X3BvaW50ZXIoKSB3aWxsIGFsd2F5cyByZXR1cm4gYSBub24tTlVM TCBwb2ludGVyCndoZW4gdGhlIEdGTiBpcyBzbWFsbGVyIHRoYW4gcDJtLT5t YXhfbWFwcGVkX2dmbi4KClVuZm9ydHVuYXRlbHksIGJlY2F1c2Ugb2YgdGhl IGFsaWFzaW5nIGRlc2NyaWJlZCBhYm92ZSwgaXQgd291bGQgYmUKcG9zc2li bGUgdG8gc2V0IHAybS0+bWF4X21hcHBlZF9nZm4gaGlnaCBlbm91Z2ggc28g aXQgY292ZXJzIGZyYW1lIHRoYXQKd291bGQgbGVhZCBwMm1fZ2V0X3Jvb3Rf cG9pbnRlcigpIHRvIHJldHVybiBOVUxMLgoKQXMgd2UgZG9uJ3Qgc2FuaXR5 IGNoZWNrIHRoZSBndWVzdCBwaHlzaWNhbCBmcmFtZSBwcm92aWRlZCBieSBh IGd1ZXN0LCBhCm1hbGljaW91cyBndWVzdCBjb3VsZCBjcmFmdCBhIHNlcmll cyBvZiBoeXBlcmNhbGxzIHRoYXQgd2lsbCBoaXQgdGhlCkJVR19PTigpIGFu ZCB0aGVyZWZvcmUgRG9TIFhlbi4KClRvIHByZXZlbnQgYWxpYXNpbmcsIHRo ZSBmdW5jdGlvbiBwMm1fZ2V0X3Jvb3RfcG9pbnRlcigpIGlzIG5vdyByZXdv cmtlZAp0byByZXR1cm4gTlVMTCBJZiBhbnkgb2YgdGhlIHVudXNlZCB0b3Ag Yml0cyBhcmUgbm90IHplcm8uIFRoZSBjYWxsZXIKY2FuIHRoZW4gZGVjaWRl IHdoYXQncyB0aGUgYXBwcm9wcmlhdGUgYWN0aW9uIHRvIGRvLiBTaW5jZSB0 aGUgdHdvIHBhdGhzCihpLmUuIFAyTV9ST09UX1BBR0VTID09IDEgYW5kIFAy TV9ST09UX1BBR0VTICE9IDEpIGFyZSBub3cgdmVyeQpzaW1pbGFybHksIHRh a2UgdGhlIG9wcG9ydHVuaXR5IHRvIGNvbnNvbGlkYXRlIHRoZW0gbWFraW5n IHRoZSBjb2RlIGEKYml0IHNpbXBsZXIuCgpXaXRoIHRoaXMgY2hhbmdlLCBw Mm1fZ2V0X2VudHJ5KCkgd2lsbCBub3QgdHJ5IHRvIGluc2VydCBhIG1hcHBp bmcgYXMKdGhlIHJvb3QgcG9pbnRlciBpcyBpbnZhbGlkLgoKTm90ZSB0aGF0 IHJvb3RfdGFibGUgaXMgbm93IHN3aXRjaCB0byB1bnNpZ25lZCBsb25nIGFz IHVuc2lnbmVkIGludCBpcwpub3QgZW5vdWdoIHRvIGhvbGQgcGFydCBvZiBh IEdGTi4KClRoaXMgaXMgcGFydCBvZiBYU0EtMzAxLgoKUmVwb3J0ZWQtYnk6 IEp1bGllbiBHcmFsbCA8SnVsaWVuLkdyYWxsQGFybS5jb20+ClNpZ25lZC1v ZmYtYnk6IEp1bGllbiBHcmFsbCA8anVsaWVuLmdyYWxsQGFybS5jb20+ClJl dmlld2VkLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtl cm5lbC5vcmc+Ci0tLQogeGVuL2FyY2gvYXJtL3AybS5jIHwgMTcgKysrKyst LS0tLS0tLS0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyks IDEyIGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL2FybS9w Mm0uYyBiL3hlbi9hcmNoL2FybS9wMm0uYwppbmRleCBkNDNjM2FhODk2Li4z OTY3ZWU3MzA2IDEwMDY0NAotLS0gYS94ZW4vYXJjaC9hcm0vcDJtLmMKKysr IGIveGVuL2FyY2gvYXJtL3AybS5jCkBAIC0xNzcsMjEgKzE3NywxNCBAQCB2 b2lkIHAybV90bGJfZmx1c2hfc3luYyhzdHJ1Y3QgcDJtX2RvbWFpbiAqcDJt KQogc3RhdGljIGxwYWVfdCAqcDJtX2dldF9yb290X3BvaW50ZXIoc3RydWN0 IHAybV9kb21haW4gKnAybSwKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIGdmbl90IGdmbikKIHsKLSAgICB1bnNpZ25lZCBpbnQgcm9v dF90YWJsZTsKLQotICAgIGlmICggUDJNX1JPT1RfUEFHRVMgPT0gMSApCi0g ICAgICAgIHJldHVybiBfX21hcF9kb21haW5fcGFnZShwMm0tPnJvb3QpOwor ICAgIHVuc2lnbmVkIGxvbmcgcm9vdF90YWJsZTsKIAogICAgIC8qCi0gICAg ICogQ29uY2F0ZW5hdGVkIHJvb3QtbGV2ZWwgdGFibGVzLiBUaGUgdGFibGUg bnVtYmVyIHdpbGwgYmUgdGhlCi0gICAgICogb2Zmc2V0IGF0IHRoZSBwcmV2 aW91cyBsZXZlbC4gSXQgaXMgbm90IHBvc3NpYmxlIHRvCi0gICAgICogY29u Y2F0ZW5hdGUgYSBsZXZlbC0wIHJvb3QuCisgICAgICogV2hpbGUgdGhlIHJv b3QgdGFibGUgaW5kZXggaXMgdGhlIG9mZnNldCBmcm9tIHRoZSBwcmV2aW91 cyBsZXZlbCwKKyAgICAgKiB3ZSBjYW4ndCB1c2UgKFAyTV9ST09UX0xFVkVM IC0gMSkgYmVjYXVzZSB0aGUgcm9vdCBsZXZlbCBtaWdodCBiZQorICAgICAq IDAuIFlldCB3ZSBzdGlsbCB3YW50IHRvIGNoZWNrIGlmIGFsbCB0aGUgdW51 c2VkIGJpdHMgYXJlIHplcm9lZC4KICAgICAgKi8KLSAgICBBU1NFUlQoUDJN X1JPT1RfTEVWRUwgPiAwKTsKLQotICAgIHJvb3RfdGFibGUgPSBnZm5feChn Zm4pID4+IChsZXZlbF9vcmRlcnNbUDJNX1JPT1RfTEVWRUwgLSAxXSk7Ci0g ICAgcm9vdF90YWJsZSAmPSBMUEFFX0VOVFJZX01BU0s7Ci0KKyAgICByb290 X3RhYmxlID0gZ2ZuX3goZ2ZuKSA+PiAobGV2ZWxfb3JkZXJzW1AyTV9ST09U X0xFVkVMXSArIExQQUVfU0hJRlQpOwogICAgIGlmICggcm9vdF90YWJsZSA+ PSBQMk1fUk9PVF9QQUdFUyApCiAgICAgICAgIHJldHVybiBOVUxMOwogCi0t IAoyLjExLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa301-4.11-2.patch" Content-Disposition: attachment; filename="xsa301-4.11-2.patch" Content-Transfer-Encoding: base64 RnJvbSA0NDI2ZDk5M2I3ZWUwOTY2ZmIzOTUzMWRjNWEyNjljZTg0OTNjYTk3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBXZWQsIDIgT2N0IDIwMTkg MTI6MzU6NTkgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvM10geGVuL2FybTog cDJtOiBBdm9pZCBvZmYtYnktb25lIGNoZWNrIG9uCiBwMm0tPm1heF9tYXBw ZWRfZ2ZuCgpUaGUgY29kZSBiYXNlIGlzIHVzaW5nIGluY29uc2lzdGVudGx5 IHRoZSBmaWVsZCBwMm0tPm1heF9tYXBwZWRfZ2ZuLgpTb21lIG9mIHRoZSB1 c2VyZXMgZXhwZWN0IHRoYXQgcDJtLT5tYXhfZ3Vlc3RfZ2ZuIGNvbnRhaW4g dGhlIGhpZ2hlc3QKbWFwcGVkIEdGTiB3aGlsZSBvdGhlcnMgZXhwZWN0IGhp Z2hlc3QgKyAxLgoKcDJtLT5tYXhfZ3Vlc3RfZ2ZuIGlzIHNldCBhcyBoaWdo ZXN0ICsgMSwgYmVjYXVzZSBvZiB0aGF0IHRoZSBzYW5pdHkKY2hlY2sgb24g dGhlIEdGTiBpbiBwMm1fcmVzb2x2ZWRfdHJhbnNsYXRpb25fZmF1bHQoKSBh bmQKcDJtX2dldF9lbnRyeSgpIGNhbiBiZSBieXBhc3NlZCB3aGVuIEdGTiA9 PSBwMm0tPm1heF9ndWVzdF9nZm4uCgpwMm1fZ2V0X3Jvb3RfcG9pbnRlcihw Mm0tPm1heF9ndWVzdF9nZm4pIG1heSByZXR1cm4gTlVMTCBpZiBpdCBpcwpv dXRzaWRlIG9mIGFkZHJlc3MgcmFuZ2Ugc3VwcG9ydGVkIGFuZCB0aGVyZWZv cmUgdGhlIEJVR19PTigpIGNvdWxkIGJlCmhpdC4KClRoZSBjdXJyZW50IHZh bHVlIGhvbGQgaW4gcDJtLT5tYXhfbWFwcGVkX2dmbiBpcyBpbmNvbnNpc3Rl bnQgd2l0aCB0aGUKZXhwZWN0YXRpb24gb2YgdGhlIGNvbW1vbiBjb2RlIChz ZWUgZG9tYWluX2dldF9tYXhpbXVtX2dwZm4oKSkgYW5kIGFsc28KdGhlIGRv Y3VtZW50YXRpb24gb2YgdGhlIGZpZWxkLgoKUmF0aGVyIHRoYW4gY2hhbmdp bmcgdGhlIGNoZWNrIGluIHAybV90cmFuc2xhdGlvbl9mYXVsdCgpIGFuZApw Mm1fZ2V0X2VudHJ5KCksIHAybS0+bWF4X21hcHBlZF9nZm4gaXMgbm93IGNv bnRhaW5pbmcgdGhlIGhpZ2hlc3QKbWFwcGVkIEdGTiBhbmQgdGhlIGNhbGxl cnMgYXNzdW1pbmcgImhpZ2hlc3QgKyAxIiBhcmUgbm93IGFkanVzdGVkLgoK VGFrZSB0aGUgb3Bwb3J0dW5pdHkgdG8gdXNlIDFVTCByYXRoZXIgdGhhbiAx IGFzIHBhZ2Vfb3JkZXIgY291bGQKdGhlb3JpdGljYWxseSBiaWcgZW5vdWdo IHRvIG92ZXJmbG93IGEgMzItYml0IGludGVnZXIuCgpMYXN0bHksIHRoZSBk b2N1bWVudGF0aW9uIG9mIHRoZSBmaWVsZCBtYXhfZ3Vlc3RfZ2ZuIHRvIHJl ZmxlY3QgaG93IGl0CmlzIGNvbXB1dGVkLgoKVGhpcyBpcyBwYXJ0IG9mIFhT QS0zMDEuCgpSZXBvcnRlZC1ieTogSnVsaWVuIEdyYWxsIDxKdWxpZW4uR3Jh bGxAYXJtLmNvbT4KU2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqdWxp ZW4uZ3JhbGxAYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbm8gU3RhYmVs bGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiB4ZW4vYXJjaC9h cm0vcDJtLmMgICAgICAgIHwgNiArKystLS0KIHhlbi9pbmNsdWRlL2FzbS1h cm0vcDJtLmggfCA1ICstLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDQgaW5zZXJ0 aW9ucygrKSwgNyBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJj aC9hcm0vcDJtLmMgYi94ZW4vYXJjaC9hcm0vcDJtLmMKaW5kZXggMzk2N2Vl NzMwNi4uYzdlMDQ5OTAxZCAxMDA2NDQKLS0tIGEveGVuL2FyY2gvYXJtL3Ay bS5jCisrKyBiL3hlbi9hcmNoL2FybS9wMm0uYwpAQCAtOTMxLDcgKzkzMSw3 IEBAIHN0YXRpYyBpbnQgX19wMm1fc2V0X2VudHJ5KHN0cnVjdCBwMm1fZG9t YWluICpwMm0sCiAgICAgICAgIHAybV93cml0ZV9wdGUoZW50cnksIHB0ZSwg cDJtLT5jbGVhbl9wdGUpOwogCiAgICAgICAgIHAybS0+bWF4X21hcHBlZF9n Zm4gPSBnZm5fbWF4KHAybS0+bWF4X21hcHBlZF9nZm4sCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGdmbl9hZGQoc2dmbiwgMSA8 PCBwYWdlX29yZGVyKSk7CisgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIGdmbl9hZGQoc2dmbiwgKDFVTCA8PCBwYWdlX29yZGVyKSAt IDEpKTsKICAgICAgICAgcDJtLT5sb3dlc3RfbWFwcGVkX2dmbiA9IGdmbl9t aW4ocDJtLT5sb3dlc3RfbWFwcGVkX2dmbiwgc2dmbik7CiAgICAgfQogCkBA IC0xMjkxLDcgKzEyOTEsNyBAQCBpbnQgcmVsaW5xdWlzaF9wMm1fbWFwcGlu ZyhzdHJ1Y3QgZG9tYWluICpkKQogICAgIHAybV93cml0ZV9sb2NrKHAybSk7 CiAKICAgICBzdGFydCA9IHAybS0+bG93ZXN0X21hcHBlZF9nZm47Ci0gICAg ZW5kID0gcDJtLT5tYXhfbWFwcGVkX2dmbjsKKyAgICBlbmQgPSBnZm5fYWRk KHAybS0+bWF4X21hcHBlZF9nZm4sIDEpOwogCiAgICAgZm9yICggOyBnZm5f eChzdGFydCkgPCBnZm5feChlbmQpOwogICAgICAgICAgIHN0YXJ0ID0gZ2Zu X25leHRfYm91bmRhcnkoc3RhcnQsIG9yZGVyKSApCkBAIC0xMzU2LDcgKzEz NTYsNyBAQCBpbnQgcDJtX2NhY2hlX2ZsdXNoKHN0cnVjdCBkb21haW4gKmQs IGdmbl90IHN0YXJ0LCB1bnNpZ25lZCBsb25nIG5yKQogICAgIHAybV9yZWFk X2xvY2socDJtKTsKIAogICAgIHN0YXJ0ID0gZ2ZuX21heChzdGFydCwgcDJt LT5sb3dlc3RfbWFwcGVkX2dmbik7Ci0gICAgZW5kID0gZ2ZuX21pbihlbmQs IHAybS0+bWF4X21hcHBlZF9nZm4pOworICAgIGVuZCA9IGdmbl9taW4oZW5k LCBnZm5fYWRkKHAybS0+bWF4X21hcHBlZF9nZm4sIDEpKTsKIAogICAgIGZv ciAoIDsgZ2ZuX3goc3RhcnQpIDwgZ2ZuX3goZW5kKTsgc3RhcnQgPSBuZXh0 X2dmbiApCiAgICAgewpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUvYXNtLWFy bS9wMm0uaCBiL3hlbi9pbmNsdWRlL2FzbS1hcm0vcDJtLmgKaW5kZXggODgy MzcwN2MxNy4uN2YxZjdlOTEwOSAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv YXNtLWFybS9wMm0uaAorKysgYi94ZW4vaW5jbHVkZS9hc20tYXJtL3AybS5o CkBAIC0zOCwxMCArMzgsNyBAQCBzdHJ1Y3QgcDJtX2RvbWFpbiB7CiAgICAg LyogQ3VycmVudCBUcmFuc2xhdGlvbiBUYWJsZSBCYXNlIFJlZ2lzdGVyIGZv ciB0aGUgcDJtICovCiAgICAgdWludDY0X3QgdnR0YnI7CiAKLSAgICAvKgot ICAgICAqIEhpZ2hlc3QgZ3Vlc3QgZnJhbWUgdGhhdCdzIGV2ZXIgYmVlbiBt YXBwZWQgaW4gdGhlIHAybQotICAgICAqIE9ubHkgdGFrZXMgaW50byBhY2Nv dW50IHJhbSBhbmQgZm9yZWlnbiBtYXBwaW5nCi0gICAgICovCisgICAgLyog SGlnaGVzdCBndWVzdCBmcmFtZSB0aGF0J3MgZXZlciBiZWVuIG1hcHBlZCBp biB0aGUgcDJtICovCiAgICAgZ2ZuX3QgbWF4X21hcHBlZF9nZm47CiAKICAg ICAvKgotLSAKMi4xMS4wCgo= --=separator Content-Type: application/octet-stream; name="xsa301-4.11-3.patch" Content-Disposition: attachment; filename="xsa301-4.11-3.patch" Content-Transfer-Encoding: base64 RnJvbSA2MWM3M2FmMDhiNGVkZTFmYzhjZmQyY2Y3MjY2MWU2YzdjZmRiZWFh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBXZWQsIDIgT2N0IDIwMTkg MTA6NTU6MDcgKzAxMDAKU3ViamVjdDogW1BBVENIIDMvM10geGVuL2FybTog cDJtOiBEb24ndCBjaGVjayB0aGUgcmV0dXJuIG9mCiBwMm1fZ2V0X3Jvb3Rf cG9pbnRlcigpIHdpdGggQlVHX09OKCkKCkl0IHR1cm5zIG91dCB0aGF0IHRo ZSBCVUdfT04oKSB3YXMgYWN0dWFsbHkgcmVhY2hhYmxlIHdpdGggd2VsbC1j cmFmdGVkCmh5cGVyY2FsbHMuIFRoZSBCVUdfT04oKSBpcyBoZXJlIHRvIHBy ZXZlbnQgY2F0Y2ggbG9naWNhbCBlcnJvciwgc28KY3Jhc2hpbmcgWGVuIGlz IGEgYml0IG92ZXIgdGhlIHRvcC4KCldoaWxlIGFsbCB0aGUgaG9sZXMgc2hv dWxkIG5vdyBiZSBmaXhlZCwgaXQgd291bGQgYmUgYmV0dGVyIHRvIGRvd25n cmFkZQp0aGUgQlVHX09OKCkgdG8gc29tZXRoaW5nIGxlc3MgZmF0YWwgdG8g cHJldmVudCBhbnkgbW9yZSBEb1MuCgpUaGUgQlVHX09OKCkgaW4gcDJtX2dl dF9lbnRyeSgpIGlzIG5vdyByZXBsYWNlZCBieSBBU1NFUlRfVU5SRUFDSEFC TEUoKQp0byBjYXRjaCBtaXN0YWtlIGluIGRlYnVnIGJ1aWxkIGFuZCByZXR1 cm4gSU5WQUxJRF9NRk4gZm9yIHByb2R1Y3Rpb24KYnVpbGQuIFRoZSBpbnRl cmZhY2UgYWxzbyByZXF1aXJlcyB0byBzZXQgcGFnZV9vcmRlciB0byBnaXZl IGFuIGlkZWEgb2YKdGhlIHNpemUgb2YgImhvbGUiLiBTbyAnbGV2ZWwnIGlz IG5vdyBzZXQgc28gd2UgcmVwb3J0IGEgaG9sZSBvZiBzaXplIG9mCnRoZSBh biBlbnRyeSBvZiB0aGUgcm9vdCBwYWdlLXRhYmxlLiBUaGlzIHN0YXlzIGlu bGluZSB3aXRoIHdoYXQgaGFwcGVuCndoZW4gdGhlIEdGTiBpcyBoaWdoZXIg dGhhbiBwMm0tPm1heF9tYXBwZWRfZ2ZuLgoKVGhpcyBpcyBwYXJ0IG9mIFhT QS0zMDEuCgpSZXBvcnRlZC1ieTogSnVsaWVuIEdyYWxsIDxKdWxpZW4uR3Jh bGxAYXJtLmNvbT4KU2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqdWxp ZW4uZ3JhbGxAYXJtLmNvbT4KLS0tCiB4ZW4vYXJjaC9hcm0vcDJtLmMgfCA3 ICsrKysrKy0KIDEgZmlsZSBjaGFuZ2VkLCA2IGluc2VydGlvbnMoKyksIDEg ZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC9hcm0vcDJtLmMg Yi94ZW4vYXJjaC9hcm0vcDJtLmMKaW5kZXggYzdlMDQ5OTAxZC4uYWYzNTE1 ZGY0MiAxMDA2NDQKLS0tIGEveGVuL2FyY2gvYXJtL3AybS5jCisrKyBiL3hl bi9hcmNoL2FybS9wMm0uYwpAQCAtMzE4LDcgKzMxOCwxMiBAQCBtZm5fdCBw Mm1fZ2V0X2VudHJ5KHN0cnVjdCBwMm1fZG9tYWluICpwMm0sIGdmbl90IGdm biwKICAgICAgKiB0aGUgdGFibGUgc2hvdWxkIGFsd2F5cyBiZSBub24tTlVM TCBiZWNhdXNlIHRoZSBnZm4gaXMgYmVsb3cKICAgICAgKiBwMm0tPm1heF9t YXBwZWRfZ2ZuIGFuZCB0aGUgcm9vdCB0YWJsZSBwYWdlcyBhcmUgYWx3YXlz IHByZXNlbnQuCiAgICAgICovCi0gICAgQlVHX09OKHRhYmxlID09IE5VTEwp OworICAgIGlmICggIXRhYmxlICkKKyAgICB7CisgICAgICAgIEFTU0VSVF9V TlJFQUNIQUJMRSgpOworICAgICAgICBsZXZlbCA9IFAyTV9ST09UX0xFVkVM OworICAgICAgICBnb3RvIG91dDsKKyAgICB9CiAKICAgICBmb3IgKCBsZXZl bCA9IFAyTV9ST09UX0xFVkVMOyBsZXZlbCA8IDM7IGxldmVsKysgKQogICAg IHsKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa301-master-1.patch" Content-Disposition: attachment; filename="xsa301-master-1.patch" Content-Transfer-Encoding: base64 RnJvbSAxOWQ2MzMwZjE0MmNiOTQxYjYzNDBhODg1OTJlOGEyOTRkZTBmZjhj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDE1IE9jdCAyMDE5 IDE3OjEwOjQwICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzNdIHhlbi9hcm06 IHAybTogQXZvaWQgYWxpYXNpbmcgZ3Vlc3QgcGh5c2ljYWwgZnJhbWUKClRo ZSBQMk0gaGVscGVycyBpbXBsZW1lbnRhdGlvbiBpcyBxdWl0ZSBsYXggYW5k IHdpbGwgZW5kIHVwIHRvIGlnbm9yZQp0aGUgdW51c2VkIHRvcCBiaXRzIG9m IGEgZ3Vlc3QgcGh5c2ljYWwgZnJhbWUuCgpUaGlzIGVmZmVjdGl2ZWx5IG1l YW5zIHRoYXQgcDJtX3NldF9lbnRyeSgpIHdpbGwgY3JlYXRlIGEgbWFwcGlu ZyBmb3IgYQpkaWZmZXJlbnQgZnJhbWUgKGl0IGlzIGFsd2F5cyBlcXVhbCB0 byBnZm4gJiAobWFzayB1bnVzZWQgYml0cykpLiBZZXQKcDJtLT5tYXhfbWFw cGVkX2dmbiB3aWxsIGJlIHVwZGF0ZWQgdXNpbmcgdGhlIG9yaWdpbmFsIGZy YW1lLgoKQXQgdGhlIG1vbWVudCwgcDJtX2dldF9lbnRyeSgpIGFuZCBwMm1f cmVzb2x2ZV90cmFuc2xhdGlvbl9mYXVsdCgpCmFzc3VtZSB0aGF0IHAybV9n ZXRfcm9vdF9wb2ludGVyKCkgd2lsbCBhbHdheXMgcmV0dXJuIGEgbm9uLU5V TEwgcG9pbnRlcgp3aGVuIHRoZSBHRk4gaXMgc21hbGxlciB0aGFuIHAybS0+ bWF4X21hcHBlZF9nZm4uCgpVbmZvcnR1bmF0ZWx5LCBiZWNhdXNlIG9mIHRo ZSBhbGlhc2luZyBkZXNjcmliZWQgYWJvdmUsIGl0IHdvdWxkIGJlCnBvc3Np YmxlIHRvIHNldCBwMm0tPm1heF9tYXBwZWRfZ2ZuIGhpZ2ggZW5vdWdoIHNv IGl0IGNvdmVycyBmcmFtZSB0aGF0CndvdWxkIGxlYWQgcDJtX2dldF9yb290 X3BvaW50ZXIoKSB0byByZXR1cm4gTlVMTC4KCkFzIHdlIGRvbid0IHNhbml0 eSBjaGVjayB0aGUgZ3Vlc3QgcGh5c2ljYWwgZnJhbWUgcHJvdmlkZWQgYnkg YSBndWVzdCwgYQptYWxpY2lvdXMgZ3Vlc3QgY291bGQgY3JhZnQgYSBzZXJp ZXMgb2YgaHlwZXJjYWxscyB0aGF0IHdpbGwgaGl0IHRoZQpCVUdfT04oKSBh bmQgdGhlcmVmb3JlIERvUyBYZW4uCgpUbyBwcmV2ZW50IGFsaWFzaW5nLCB0 aGUgZnVuY3Rpb24gcDJtX2dldF9yb290X3BvaW50ZXIoKSBpcyBub3cgcmV3 b3JrZWQKdG8gcmV0dXJuIE5VTEwgSWYgYW55IG9mIHRoZSB1bnVzZWQgdG9w IGJpdHMgYXJlIG5vdCB6ZXJvLiBUaGUgY2FsbGVyCmNhbiB0aGVuIGRlY2lk ZSB3aGF0J3MgdGhlIGFwcHJvcHJpYXRlIGFjdGlvbiB0byBkby4gU2luY2Ug dGhlIHR3byBwYXRocwooaS5lLiBQMk1fUk9PVF9QQUdFUyA9PSAxIGFuZCBQ Mk1fUk9PVF9QQUdFUyAhPSAxKSBhcmUgbm93IHZlcnkKc2ltaWxhcmx5LCB0 YWtlIHRoZSBvcHBvcnR1bml0eSB0byBjb25zb2xpZGF0ZSB0aGVtIG1ha2lu ZyB0aGUgY29kZSBhCmJpdCBzaW1wbGVyLgoKV2l0aCB0aGlzIGNoYW5nZSwg cDJtX2dldF9lbnRyeSgpIHdpbGwgbm90IHRyeSB0byBpbnNlcnQgYSBtYXBw aW5nIGFzCnRoZSByb290IHBvaW50ZXIgaXMgaW52YWxpZC4KCk5vdGUgdGhh dCByb290X3RhYmxlIGlzIG5vdyBzd2l0Y2ggdG8gdW5zaWduZWQgbG9uZyBh cyB1bnNpZ25lZCBpbnQgaXMKbm90IGVub3VnaCB0byBob2xkIHBhcnQgb2Yg YSBHRk4uCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTMwMS4KClJlcG9ydGVkLWJ5 OiBKdWxpZW4gR3JhbGwgPEp1bGllbi5HcmFsbEBhcm0uY29tPgpTaWduZWQt b2ZmLWJ5OiBKdWxpZW4gR3JhbGwgPGp1bGllbi5ncmFsbEBhcm0uY29tPgpS ZXZpZXdlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3RhYmVsbGluaUBr ZXJuZWwub3JnPgotLS0KIHhlbi9hcmNoL2FybS9wMm0uYyB8IDE3ICsrKysr LS0tLS0tLS0tLS0tCiAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCsp LCAxMiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC9hcm0v cDJtLmMgYi94ZW4vYXJjaC9hcm0vcDJtLmMKaW5kZXggYTI3NDlkOWI2Zi4u ZDAwNDVhOGIyOCAxMDA2NDQKLS0tIGEveGVuL2FyY2gvYXJtL3AybS5jCisr KyBiL3hlbi9hcmNoL2FybS9wMm0uYwpAQCAtMjI5LDIxICsyMjksMTQgQEAg dm9pZCBwMm1fdGxiX2ZsdXNoX3N5bmMoc3RydWN0IHAybV9kb21haW4gKnAy bSkKIHN0YXRpYyBscGFlX3QgKnAybV9nZXRfcm9vdF9wb2ludGVyKHN0cnVj dCBwMm1fZG9tYWluICpwMm0sCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBnZm5fdCBnZm4pCiB7Ci0gICAgdW5zaWduZWQgaW50IHJv b3RfdGFibGU7Ci0KLSAgICBpZiAoIFAyTV9ST09UX1BBR0VTID09IDEgKQot ICAgICAgICByZXR1cm4gX19tYXBfZG9tYWluX3BhZ2UocDJtLT5yb290KTsK KyAgICB1bnNpZ25lZCBsb25nIHJvb3RfdGFibGU7CiAKICAgICAvKgotICAg ICAqIENvbmNhdGVuYXRlZCByb290LWxldmVsIHRhYmxlcy4gVGhlIHRhYmxl IG51bWJlciB3aWxsIGJlIHRoZQotICAgICAqIG9mZnNldCBhdCB0aGUgcHJl dmlvdXMgbGV2ZWwuIEl0IGlzIG5vdCBwb3NzaWJsZSB0bwotICAgICAqIGNv bmNhdGVuYXRlIGEgbGV2ZWwtMCByb290LgorICAgICAqIFdoaWxlIHRoZSBy b290IHRhYmxlIGluZGV4IGlzIHRoZSBvZmZzZXQgZnJvbSB0aGUgcHJldmlv dXMgbGV2ZWwsCisgICAgICogd2UgY2FuJ3QgdXNlIChQMk1fUk9PVF9MRVZF TCAtIDEpIGJlY2F1c2UgdGhlIHJvb3QgbGV2ZWwgbWlnaHQgYmUKKyAgICAg KiAwLiBZZXQgd2Ugc3RpbGwgd2FudCB0byBjaGVjayBpZiBhbGwgdGhlIHVu dXNlZCBiaXRzIGFyZSB6ZXJvZWQuCiAgICAgICovCi0gICAgQVNTRVJUKFAy TV9ST09UX0xFVkVMID4gMCk7Ci0KLSAgICByb290X3RhYmxlID0gZ2ZuX3go Z2ZuKSA+PiAobGV2ZWxfb3JkZXJzW1AyTV9ST09UX0xFVkVMIC0gMV0pOwot ICAgIHJvb3RfdGFibGUgJj0gTFBBRV9FTlRSWV9NQVNLOwotCisgICAgcm9v dF90YWJsZSA9IGdmbl94KGdmbikgPj4gKGxldmVsX29yZGVyc1tQMk1fUk9P VF9MRVZFTF0gKyBMUEFFX1NISUZUKTsKICAgICBpZiAoIHJvb3RfdGFibGUg Pj0gUDJNX1JPT1RfUEFHRVMgKQogICAgICAgICByZXR1cm4gTlVMTDsKIAot LSAKMi4yMy4wCgo= --=separator Content-Type: application/octet-stream; name="xsa301-master-2.patch" Content-Disposition: attachment; filename="xsa301-master-2.patch" Content-Transfer-Encoding: base64 RnJvbSAzYjg5NjkzNmY3NTA1ZTkyOWRkODY5ZDE0YWZjYjE4NWQwZWU3NWY4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDE1IE9jdCAyMDE5 IDE3OjEwOjQxICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzNdIHhlbi9hcm06 IHAybTogQXZvaWQgb2ZmLWJ5LW9uZSBjaGVjayBvbgogcDJtLT5tYXhfbWFw cGVkX2dmbgoKVGhlIGNvZGUgYmFzZSBpcyB1c2luZyBpbmNvbnNpc3RlbnRs eSB0aGUgZmllbGQgcDJtLT5tYXhfbWFwcGVkX2dmbi4KU29tZSBvZiB0aGUg dXNlcmVzIGV4cGVjdCB0aGF0IHAybS0+bWF4X2d1ZXN0X2dmbiBjb250YWlu IHRoZSBoaWdoZXN0Cm1hcHBlZCBHRk4gd2hpbGUgb3RoZXJzIGV4cGVjdCBo aWdoZXN0ICsgMS4KCnAybS0+bWF4X2d1ZXN0X2dmbiBpcyBzZXQgYXMgaGln aGVzdCArIDEsIGJlY2F1c2Ugb2YgdGhhdCB0aGUgc2FuaXR5CmNoZWNrIG9u IHRoZSBHRk4gaW4gcDJtX3Jlc29sdmVkX3RyYW5zbGF0aW9uX2ZhdWx0KCkg YW5kCnAybV9nZXRfZW50cnkoKSBjYW4gYmUgYnlwYXNzZWQgd2hlbiBHRk4g PT0gcDJtLT5tYXhfZ3Vlc3RfZ2ZuLgoKcDJtX2dldF9yb290X3BvaW50ZXIo cDJtLT5tYXhfZ3Vlc3RfZ2ZuKSBtYXkgcmV0dXJuIE5VTEwgaWYgaXQgaXMK b3V0c2lkZSBvZiBhZGRyZXNzIHJhbmdlIHN1cHBvcnRlZCBhbmQgdGhlcmVm b3JlIHRoZSBCVUdfT04oKSBjb3VsZCBiZQpoaXQuCgpUaGUgY3VycmVudCB2 YWx1ZSBob2xkIGluIHAybS0+bWF4X21hcHBlZF9nZm4gaXMgaW5jb25zaXN0 ZW50IHdpdGggdGhlCmV4cGVjdGF0aW9uIG9mIHRoZSBjb21tb24gY29kZSAo c2VlIGRvbWFpbl9nZXRfbWF4aW11bV9ncGZuKCkpIGFuZCBhbHNvCnRoZSBk b2N1bWVudGF0aW9uIG9mIHRoZSBmaWVsZC4KClJhdGhlciB0aGFuIGNoYW5n aW5nIHRoZSBjaGVjayBpbiBwMm1fdHJhbnNsYXRpb25fZmF1bHQoKSBhbmQK cDJtX2dldF9lbnRyeSgpLCBwMm0tPm1heF9tYXBwZWRfZ2ZuIGlzIG5vdyBj b250YWluaW5nIHRoZSBoaWdoZXN0Cm1hcHBlZCBHRk4gYW5kIHRoZSBjYWxs ZXJzIGFzc3VtaW5nICJoaWdoZXN0ICsgMSIgYXJlIG5vdyBhZGp1c3RlZC4K ClRha2UgdGhlIG9wcG9ydHVuaXR5IHRvIHVzZSAxVUwgcmF0aGVyIHRoYW4g MSBhcyBwYWdlX29yZGVyIGNvdWxkCnRoZW9yaXRpY2FsbHkgYmlnIGVub3Vn aCB0byBvdmVyZmxvdyBhIDMyLWJpdCBpbnRlZ2VyLgoKTGFzdGx5LCB0aGUg ZG9jdW1lbnRhdGlvbiBvZiB0aGUgZmllbGQgbWF4X2d1ZXN0X2dmbiB0byBy ZWZsZWN0IGhvdyBpdAppcyBjb21wdXRlZC4KClRoaXMgaXMgcGFydCBvZiBY U0EtMzAxLgoKUmVwb3J0ZWQtYnk6IEp1bGllbiBHcmFsbCA8SnVsaWVuLkdy YWxsQGFybS5jb20+ClNpZ25lZC1vZmYtYnk6IEp1bGllbiBHcmFsbCA8anVs aWVuLmdyYWxsQGFybS5jb20+ClJldmlld2VkLWJ5OiBTdGVmYW5vIFN0YWJl bGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogeGVuL2FyY2gv YXJtL3AybS5jICAgICAgICB8IDYgKysrLS0tCiB4ZW4vaW5jbHVkZS9hc20t YXJtL3AybS5oIHwgNSArLS0tLQogMiBmaWxlcyBjaGFuZ2VkLCA0IGluc2Vy dGlvbnMoKyksIDcgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2Fy Y2gvYXJtL3AybS5jIGIveGVuL2FyY2gvYXJtL3AybS5jCmluZGV4IGQwMDQ1 YThiMjguLjhkMjBkMjc5NjEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9w Mm0uYworKysgYi94ZW4vYXJjaC9hcm0vcDJtLmMKQEAgLTEwNDEsNyArMTA0 MSw3IEBAIHN0YXRpYyBpbnQgX19wMm1fc2V0X2VudHJ5KHN0cnVjdCBwMm1f ZG9tYWluICpwMm0sCiAgICAgICAgIHAybV93cml0ZV9wdGUoZW50cnksIHB0 ZSwgcDJtLT5jbGVhbl9wdGUpOwogCiAgICAgICAgIHAybS0+bWF4X21hcHBl ZF9nZm4gPSBnZm5fbWF4KHAybS0+bWF4X21hcHBlZF9nZm4sCi0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGdmbl9hZGQoc2dmbiwg MSA8PCBwYWdlX29yZGVyKSk7CisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGdmbl9hZGQoc2dmbiwgKDFVTCA8PCBwYWdlX29yZGVy KSAtIDEpKTsKICAgICAgICAgcDJtLT5sb3dlc3RfbWFwcGVkX2dmbiA9IGdm bl9taW4ocDJtLT5sb3dlc3RfbWFwcGVkX2dmbiwgc2dmbik7CiAgICAgfQog CkBAIC0xNTcyLDcgKzE1NzIsNyBAQCBpbnQgcmVsaW5xdWlzaF9wMm1fbWFw cGluZyhzdHJ1Y3QgZG9tYWluICpkKQogICAgIHAybV93cml0ZV9sb2NrKHAy bSk7CiAKICAgICBzdGFydCA9IHAybS0+bG93ZXN0X21hcHBlZF9nZm47Ci0g ICAgZW5kID0gcDJtLT5tYXhfbWFwcGVkX2dmbjsKKyAgICBlbmQgPSBnZm5f YWRkKHAybS0+bWF4X21hcHBlZF9nZm4sIDEpOwogCiAgICAgZm9yICggOyBn Zm5feChzdGFydCkgPCBnZm5feChlbmQpOwogICAgICAgICAgIHN0YXJ0ID0g Z2ZuX25leHRfYm91bmRhcnkoc3RhcnQsIG9yZGVyKSApCkBAIC0xNjQxLDcg KzE2NDEsNyBAQCBpbnQgcDJtX2NhY2hlX2ZsdXNoX3JhbmdlKHN0cnVjdCBk b21haW4gKmQsIGdmbl90ICpwc3RhcnQsIGdmbl90IGVuZCkKICAgICBwMm1f cmVhZF9sb2NrKHAybSk7CiAKICAgICBzdGFydCA9IGdmbl9tYXgoc3RhcnQs IHAybS0+bG93ZXN0X21hcHBlZF9nZm4pOwotICAgIGVuZCA9IGdmbl9taW4o ZW5kLCBwMm0tPm1heF9tYXBwZWRfZ2ZuKTsKKyAgICBlbmQgPSBnZm5fbWlu KGVuZCwgZ2ZuX2FkZChwMm0tPm1heF9tYXBwZWRfZ2ZuLCAxKSk7CiAKICAg ICBuZXh0X2Jsb2NrX2dmbiA9IHN0YXJ0OwogCmRpZmYgLS1naXQgYS94ZW4v aW5jbHVkZS9hc20tYXJtL3AybS5oIGIveGVuL2luY2x1ZGUvYXNtLWFybS9w Mm0uaAppbmRleCA4OWY4MmRmMzgwLi41ZmRiNmU4MTgzIDEwMDY0NAotLS0g YS94ZW4vaW5jbHVkZS9hc20tYXJtL3AybS5oCisrKyBiL3hlbi9pbmNsdWRl L2FzbS1hcm0vcDJtLmgKQEAgLTM2LDEwICszNiw3IEBAIHN0cnVjdCBwMm1f ZG9tYWluIHsKICAgICAvKiBDdXJyZW50IFRyYW5zbGF0aW9uIFRhYmxlIEJh c2UgUmVnaXN0ZXIgZm9yIHRoZSBwMm0gKi8KICAgICB1aW50NjRfdCB2dHRi cjsKIAotICAgIC8qCi0gICAgICogSGlnaGVzdCBndWVzdCBmcmFtZSB0aGF0 J3MgZXZlciBiZWVuIG1hcHBlZCBpbiB0aGUgcDJtCi0gICAgICogT25seSB0 YWtlcyBpbnRvIGFjY291bnQgcmFtIGFuZCBmb3JlaWduIG1hcHBpbmcKLSAg ICAgKi8KKyAgICAvKiBIaWdoZXN0IGd1ZXN0IGZyYW1lIHRoYXQncyBldmVy IGJlZW4gbWFwcGVkIGluIHRoZSBwMm0gKi8KICAgICBnZm5fdCBtYXhfbWFw cGVkX2dmbjsKIAogICAgIC8qCi0tIAoyLjIzLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa301-master-3.patch" Content-Disposition: attachment; filename="xsa301-master-3.patch" Content-Transfer-Encoding: base64 RnJvbSAwNjBjMmRkM2I3YzI2NzRhMDE5ZDk0YWZiMmI0ZWJmMzY2M2Y2YzZl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDE1IE9jdCAyMDE5 IDE3OjEwOjQyICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzNdIHhlbi9hcm06 IHAybTogRG9uJ3QgY2hlY2sgdGhlIHJldHVybiBvZgogcDJtX2dldF9yb290 X3BvaW50ZXIoKSB3aXRoIEJVR19PTigpCgpJdCB0dXJucyBvdXQgdGhhdCB0 aGUgQlVHX09OKCkgd2FzIGFjdHVhbGx5IHJlYWNoYWJsZSB3aXRoIHdlbGwt Y3JhZnRlZApoeXBlcmNhbGxzLiBUaGUgQlVHX09OKCkgaXMgaGVyZSB0byBw cmV2ZW50IGNhdGNoIGxvZ2ljYWwgZXJyb3IsIHNvCmNyYXNoaW5nIFhlbiBp cyBhIGJpdCBvdmVyIHRoZSB0b3AuCgpXaGlsZSBhbGwgdGhlIGhvbGVzIHNo b3VsZCBub3cgYmUgZml4ZWQsIGl0IHdvdWxkIGJlIGJldHRlciB0byBkb3du Z3JhZGUKdGhlIEJVR19PTigpIHRvIHNvbWV0aGluZyBsZXNzIGZhdGFsIHRv IHByZXZlbnQgYW55IG1vcmUgRG9TLgoKVGhlIEJVR19PTigpIGluIHAybV9n ZXRfZW50cnkoKSBpcyBub3cgcmVwbGFjZWQgYnkgQVNTRVJUX1VOUkVBQ0hB QkxFKCkKdG8gY2F0Y2ggbWlzdGFrZSBpbiBkZWJ1ZyBidWlsZCBhbmQgcmV0 dXJuIElOVkFMSURfTUZOIGZvciBwcm9kdWN0aW9uCmJ1aWxkLiBUaGUgaW50 ZXJmYWNlIGFsc28gcmVxdWlyZXMgdG8gc2V0IHBhZ2Vfb3JkZXIgdG8gZ2l2 ZSBhbiBpZGVhIG9mCnRoZSBzaXplIG9mICJob2xlIi4gU28gJ2xldmVsJyBp cyBub3cgc2V0IHNvIHdlIHJlcG9ydCBhIGhvbGUgb2Ygc2l6ZSBvZgp0aGUg YW4gZW50cnkgb2YgdGhlIHJvb3QgcGFnZS10YWJsZS4gVGhpcyBzdGF5cyBp bmxpbmUgd2l0aCB3aGF0IGhhcHBlbgp3aGVuIHRoZSBHRk4gaXMgaGlnaGVy IHRoYW4gcDJtLT5tYXhfbWFwcGVkX2dmbi4KClRoZSBCVUdfT04oKSBpbiBw Mm1fcmVzb2x2ZV90cmFuc2xhdGlvbl9mYXVsdCgpIGlzIG5vdyByZXBsYWNl ZCBieQpBU1NFUlRfVU5SRUFDSEFCTEUoKSB0byBjYXRjaCBtaXN0YWtlIGlu IGRlYnVnIGJ1aWxkIGFuZCBqdXN0IHJlcG9ydCBhCmZhdWx0IGZvciBwcm9k dWNpb24gYnVpbGQuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTMwMS4KClJlcG9y dGVkLWJ5OiBKdWxpZW4gR3JhbGwgPEp1bGllbi5HcmFsbEBhcm0uY29tPgpT aWduZWQtb2ZmLWJ5OiBKdWxpZW4gR3JhbGwgPGp1bGllbi5ncmFsbEBhcm0u Y29tPgpSZXZpZXdlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3RhYmVs bGluaUBrZXJuZWwub3JnPgotLS0KIHhlbi9hcmNoL2FybS9wMm0uYyB8IDEz ICsrKysrKysrKysrLS0KIDEgZmlsZSBjaGFuZ2VkLCAxMSBpbnNlcnRpb25z KCspLCAyIGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL2Fy bS9wMm0uYyBiL3hlbi9hcmNoL2FybS9wMm0uYwppbmRleCA4ZDIwZDI3OTYx Li5jZTU5ZjJiNTAzIDEwMDY0NAotLS0gYS94ZW4vYXJjaC9hcm0vcDJtLmMK KysrIGIveGVuL2FyY2gvYXJtL3AybS5jCkBAIC0zOTUsNyArMzk1LDEyIEBA IG1mbl90IHAybV9nZXRfZW50cnkoc3RydWN0IHAybV9kb21haW4gKnAybSwg Z2ZuX3QgZ2ZuLAogICAgICAqIHRoZSB0YWJsZSBzaG91bGQgYWx3YXlzIGJl IG5vbi1OVUxMIGJlY2F1c2UgdGhlIGdmbiBpcyBiZWxvdwogICAgICAqIHAy bS0+bWF4X21hcHBlZF9nZm4gYW5kIHRoZSByb290IHRhYmxlIHBhZ2VzIGFy ZSBhbHdheXMgcHJlc2VudC4KICAgICAgKi8KLSAgICBCVUdfT04odGFibGUg PT0gTlVMTCk7CisgICAgaWYgKCAhdGFibGUgKQorICAgIHsKKyAgICAgICAg QVNTRVJUX1VOUkVBQ0hBQkxFKCk7CisgICAgICAgIGxldmVsID0gUDJNX1JP T1RfTEVWRUw7CisgICAgICAgIGdvdG8gb3V0OworICAgIH0KIAogICAgIGZv ciAoIGxldmVsID0gUDJNX1JPT1RfTEVWRUw7IGxldmVsIDwgMzsgbGV2ZWwr KyApCiAgICAgewpAQCAtMTE5Niw3ICsxMjAxLDExIEBAIGJvb2wgcDJtX3Jl c29sdmVfdHJhbnNsYXRpb25fZmF1bHQoc3RydWN0IGRvbWFpbiAqZCwgZ2Zu X3QgZ2ZuKQogICAgICAqIFRoZSB0YWJsZSBzaG91bGQgYWx3YXlzIGJlIG5v bi1OVUxMIGJlY2F1c2UgdGhlIGdmbiBpcyBiZWxvdwogICAgICAqIHAybS0+ bWF4X21hcHBlZF9nZm4gYW5kIHRoZSByb290IHRhYmxlIHBhZ2VzIGFyZSBh bHdheXMgcHJlc2VudC4KICAgICAgKi8KLSAgICBCVUdfT04odGFibGUgPT0g TlVMTCk7CisgICAgaWYgKCAhdGFibGUgKQorICAgIHsKKyAgICAgICAgQVNT RVJUX1VOUkVBQ0hBQkxFKCk7CisgICAgICAgIGdvdG8gb3V0OworICAgIH0K IAogICAgIC8qCiAgICAgICogR28gZG93biB0aGUgcGFnZS10YWJsZXMgdW50 aWwgYW4gZW50cnkgaGFzIHRoZSB2YWxpZCBiaXQgdW5zZXQgb3IKLS0gCjIu MjMuMAoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Oct 31 12:31:15 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 31 Oct 2019 12:31:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9ba-0008Nn-NM; Thu, 31 Oct 2019 12:31:10 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9bZ-0008MC-2P for xen-announce@lists.xen.org; Thu, 31 Oct 2019 12:31:09 +0000 X-Inumbo-ID: 4ef634f6-fbda-11e9-8aca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 4ef634f6-fbda-11e9-8aca-bc764e2007e4; Thu, 31 Oct 2019 12:31:06 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9bP-0007DL-Cp; Thu, 31 Oct 2019 12:30:59 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iQ9bP-0004PX-AC; Thu, 31 Oct 2019 12:30:59 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Thu, 31 Oct 2019 12:30:59 +0000 Subject: [Xen-announce] Xen Security Advisory 302 v5 (CVE-2019-18424) - passed through PCI devices may corrupt host memory after deassignment X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-18424 / XSA-302 version 5 passed through PCI devices may corrupt host memory after deassignment UPDATES IN VERSION 5 ==================== Public release. The patches are broken on ARM (which is not affected by the issue). Don't apply the patches on ARM. See Resolution. ISSUE DESCRIPTION ================= When a PCI device is assigned to an untrusted domain, it is possible for that domain to program the device to DMA to an arbitrary address. The IOMMU is used to protect the host from malicious DMA by making sure that the device addresses can only target memory assigned to the guest. However, when the guest domain is torn down, or the device is deassigned, the device is assigned back to dom0, thus allowing any in-flight DMA to potentially target critical host data. IMPACT ====== An untrusted domain with access to a physical device can DMA into host memory, leading to privilege escalation. VULNERABLE SYSTEMS ================== Only systems where guests are given direct access to physical devices capable of DMA (PCI pass-through) are vulnerable. Systems which do not use PCI pass-through are not vulnerable. MITIGATION ========== In some configurations, use of passthrough can be replaced with a higher-level protocol such as Xen PV block or network devices. CREDITS ======= This issue was discovered by Paul Durrant of Citrix. RESOLUTION ========== Applying the appropriate attached patchset should resolve this issue. For Xen 4.9 and earlier at least the first patch of XSA-299 (whitespace cleanup) is also needed for XSA-302 to apply. Unfortunately, at the time of writing, these patches have not been tested to our satisfaction. The patches are known to break on ARM. ARM is not affected by the issue, so do not apply these patches on ARM systems. (On x86, there is a latent bug but the patches are good to use.) xsa302/*.patch xen-unstable xsa302-4.12/*.patch Xen 4.12.x xsa302-4.11/*.patch Xen 4.11.x xsa302-4.10/*.patch Xen 4.10.x xsa302-4.9/*.patch Xen 4.9.x, Xen 4.8.x $ sha256sum xsa302* xsa302*/* d722d1bed2440a5d35f0fd041e4a77966b7d26980a0f874d38d48710db0b9ebd xsa302.meta 703faced133ca21142f484acd8cf16578258e12ae0cf1413a5d9252f1e099465 xsa302-4.9/0001-IOMMU-add-missing-HVM-check.patch edb4753b91fa66e2f4b51d0075d106fc28d8451241ba482a33c2db4be53f21d1 xsa302-4.9/0002-passthrough-quarantine-PCI-devices.patch 3c79107d8fd94807543443192fb31f3d188912c208f4dbda61f1f2ff92701afc xsa302-4.10/0001-IOMMU-add-missing-HVM-check.patch 2a76add5a907baf0217e57e2a4dca91a6a8ce84c67b9ff87be1bcbb1f29efdc6 xsa302-4.10/0002-passthrough-quarantine-PCI-devices.patch a75723160c52c2c65d563905d0904b587beda1cfb6ca3ee18fb70e79818d3faa xsa302-4.11/0001-IOMMU-add-missing-HVM-check.patch 48b9dae7adbe2438dcaa00f969532d835061cb4a06ab2bf47ada2afb644de4c5 xsa302-4.11/0002-passthrough-quarantine-PCI-devices.patch a21efa6cae14e87318ca3927f0ac310aee2dd1323f2dbf040c0fe80789d78712 xsa302-4.12/0001-IOMMU-add-missing-HVM-check.patch 0a95f750ad1d5eb1838b6488e4ac188acdc2e568eb21b26306d5af2980bffb58 xsa302-4.12/0002-passthrough-quarantine-PCI-devices.patch 11d7015960eab265b1f9ce372dd14597b6c4cc7907d77ed3eed14d161dd50e5c xsa302/0001-passthrough-quarantine-PCI-devices.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the *patches* described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Also: deployment of the reconfiguration *mitigation* is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because this reconfiguration reveals that a PCI passthrough vulnerability is involved. Deployment of that migitation is permitted only AFTER the embargo ends. Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl260/wMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ2TYH/A+tmA2Wsw0NbdEhSzztj6cVFZpev16S75vOxLUm /dFTQSxNVeqyzZjI7u9JPZUatQVIHwdDPi9Oiwygn8pFid1RBe+fn3saM3JdNQrA pYVOCEYGoxnz/lpPLWfcI8aUIkdhU4Ns/hwXVa6lUNno9MaqqJR278k6nmB9/0QS bFvsMirqTKHm7wQptY5mRcULdjcpn+u4W45nje3+TU0mMRQkbm+pnNX57qzn/LFI /atzBQ8iyv9/y3e/soAXv3AkWzs/lUVIAZepaFhXCHi3WuMsMUyZAdDOUBmD0tBt pjQzx408ZoMPtqqDKpY1qEn9Bu1MsIxx/4htqlgG0c9Kh1U= =cUbr -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa302.meta" Content-Disposition: attachment; filename="xsa302.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAzMDIsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMiIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIs CiAgICAiNC45IiwKICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAi eGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiMzEzMWJmOTU2YWIxNTkyOTVlY2RkZTBjNWFkMDAzZDBjNWFm NDY5NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2 LAogICAgICAgICAgICAyOTgsCiAgICAgICAgICAgIDI5OSwKICAgICAgICAg ICAgMzAxCiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAg ICAgICAgICAgICJ4c2EzMDItNC4xMC8qIgogICAgICAgICAgXQogICAgICAg IH0KICAgICAgfQogICAgfSwKICAgICI0LjExIjogewogICAgICAiUmVjaXBl cyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6 ICIzMzQyZWU5MzE4Y2QzOGJhMDA2MjU1YjY4N2FiN2ExNDUzOTllYTkyIiwK ICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYsCiAgICAg ICAgICAgIDI5OCwKICAgICAgICAgICAgMjk5LAogICAgICAgICAgICAzMDEK ICAgICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAg ICAgInhzYTMwMi00LjExLyoucGF0Y2giCiAgICAgICAgICBdCiAgICAgICAg fQogICAgICB9CiAgICB9LAogICAgIjQuMTIiOiB7CiAgICAgICJSZWNpcGVz IjogewogICAgICAgICJ4ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjog IjU5OWQ2ZDIzY2JiNzkwYTc4OGY3YTQ5YWI0ZjExZjFhM2I1YjQyOWUiLAog ICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAgICAgICAgIDI5NiwKICAgICAg ICAgICAgMjk4LAogICAgICAgICAgICAyOTksCiAgICAgICAgICAgIDMwMQog ICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAg ICAieHNhMzAyLTQuMTIvKi5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9 CiAgICAgIH0KICAgIH0sCiAgICAiNC44IjogewogICAgICAiUmVjaXBlcyI6 IHsKICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICJj NjcyMTBmNjBkZmE4MzU2NWQyNmFlNzEwZTRmNWU3MjlhOTVkY2U1IiwKICAg ICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYsCiAgICAgICAg ICAgIDI5OCwKICAgICAgICAgICAgMjk5LAogICAgICAgICAgICAzMDEKICAg ICAgICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAg InhzYTMwMi00LjkvKi5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAg ICAgIH0KICAgIH0sCiAgICAiNC45IjogewogICAgICAiUmVjaXBlcyI6IHsK ICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI4ZDJh Njg4MDE1MTkzZTIwYWU0N2ZlM2MyMDhmOTkxMjgyNDBmODIxIiwKICAgICAg ICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYsCiAgICAgICAgICAg IDI5OCwKICAgICAgICAgICAgMjk5LAogICAgICAgICAgICAzMDEKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTMwMi00LjkvKi5wYXRjaCIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAg IH0KICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiUmVjaXBlcyI6IHsK ICAgICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI1NWFi MjkyYzQyZGI0MWIwNWNmZGJhMDEyNjgwYmYxZTBlYTAyZjdhIiwKICAgICAg ICAgICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYsCiAgICAgICAgICAg IDI5OCwKICAgICAgICAgICAgMjk5LAogICAgICAgICAgICAzMDEKICAgICAg ICAgIF0sCiAgICAgICAgICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhz YTMwMi8qLnBhdGNoIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQog ICAgfQogIH0KfQ== --=separator Content-Type: application/octet-stream; name="xsa302-4.9/0001-IOMMU-add-missing-HVM-check.patch" Content-Disposition: attachment; filename="xsa302-4.9/0001-IOMMU-add-missing-HVM-check.patch" Content-Transfer-Encoding: base64 RnJvbSBiMTYxNjA0NWRjMmZjM2QyOGU2MTcwMTY0Y2VlZWY2M2E5ZjMyNWI5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFdlZCwgMiBPY3QgMjAxOSAxMzoz Njo1OSArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS8yXSBJT01NVTogYWRkIG1p c3NpbmcgSFZNIGNoZWNrCk1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlw ZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVy LUVuY29kaW5nOiA4Yml0CgpGaXggYW4gdW5ndWFyZGVkIGQtPmFyY2guaHZt IGFjY2VzcyBpbiBhc3NpZ25fZGV2aWNlKCkuCgpTaWduZWQtb2ZmLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBS b2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4KQWNrZWQt Ynk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ CgooY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA0MWZkMTAwOWNkNzQxNmI3 M2Q3NDVhNzdjMjRiNGU4ZDFhMjk2ZmU2KQpTaWduZWQtb2ZmLWJ5OiBJYW4g SmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KLS0tCiB4ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYyB8IDMgKystCiAxIGZpbGUgY2hh bmdlZCwgMiBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0t Z2l0IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgYi94ZW4vZHJp dmVycy9wYXNzdGhyb3VnaC9wY2kuYwppbmRleCBiMDBkZTI0M2I4Li5lY2I2 N2ViYzcwIDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9w Y2kuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYwpAQCAt MTM3MSw3ICsxMzcxLDggQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogICAgIC8qIFByZXZlbnQgZGV2aWNlIGFzc2lnbiBpZiBtZW0g cGFnaW5nIG9yIG1lbSBzaGFyaW5nIGhhdmUgYmVlbiAKICAgICAgKiBlbmFi bGVkIGZvciB0aGlzIGRvbWFpbiAqLwogICAgIGlmICggdW5saWtlbHkoIW5l ZWRfaW9tbXUoZCkgJiYKLSAgICAgICAgICAgIChkLT5hcmNoLmh2bV9kb21h aW4ubWVtX3NoYXJpbmdfZW5hYmxlZCB8fAorICAgICAgICAgICAgKChpc19o dm1fZG9tYWluKGQpICYmCisgICAgICAgICAgICAgIGQtPmFyY2guaHZtX2Rv bWFpbi5tZW1fc2hhcmluZ19lbmFibGVkKSB8fAogICAgICAgICAgICAgIGQt PnZtX2V2ZW50LT5wYWdpbmcucmluZ19wYWdlIHx8CiAgICAgICAgICAgICAg cDJtX2dldF9ob3N0cDJtKGQpLT5nbG9iYWxfbG9nZGlydHkpKSApCiAgICAg ICAgIHJldHVybiAtRVhERVY7Ci0tIAoyLjExLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa302-4.9/0002-passthrough-quarantine-PCI-devices.patch" Content-Disposition: attachment; filename="xsa302-4.9/0002-passthrough-quarantine-PCI-devices.patch" Content-Transfer-Encoding: base64 RnJvbSA4OGNlMzFiNjRiOWNkYTkzNzYyZGIwYjg4ZDI5NDMxODBhZmUzYTMz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIER1cnJhbnQg PHBhdWwuZHVycmFudEBjaXRyaXguY29tPgpEYXRlOiBNb24sIDE0IE9jdCAy MDE5IDE3OjUyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzJdIHBhc3N0 aHJvdWdoOiBxdWFyYW50aW5lIFBDSSBkZXZpY2VzCgpXaGVuIGEgUENJIGRl dmljZSBpcyBhc3NpZ25lZCB0byBhbiB1bnRydXN0ZWQgZG9tYWluLCBpdCBp cyBwb3NzaWJsZSBmb3IKdGhhdCBkb21haW4gdG8gcHJvZ3JhbSB0aGUgZGV2 aWNlIHRvIERNQSB0byBhbiBhcmJpdHJhcnkgYWRkcmVzcy4gVGhlCklPTU1V IGlzIHVzZWQgdG8gcHJvdGVjdCB0aGUgaG9zdCBmcm9tIG1hbGljaW91cyBE TUEgYnkgbWFraW5nIHN1cmUgdGhhdAp0aGUgZGV2aWNlIGFkZHJlc3NlcyBj YW4gb25seSB0YXJnZXQgbWVtb3J5IGFzc2lnbmVkIHRvIHRoZSBndWVzdC4g SG93ZXZlciwKd2hlbiB0aGUgZ3Vlc3QgZG9tYWluIGlzIHRvcm4gZG93biB0 aGUgZGV2aWNlIGlzIGFzc2lnbmVkIGJhY2sgdG8gZG9tMCwKdGh1cyBhbGxv d2luZyBhbnkgaW4tZmxpZ2h0IERNQSB0byBwb3RlbnRpYWxseSB0YXJnZXQg Y3JpdGljYWwgaG9zdCBkYXRhLgoKVGhpcyBwYXRjaCBpbnRyb2R1Y2VzIGEg J3F1YXJhbnRpbmUnIGZvciBQQ0kgZGV2aWNlcyB1c2luZyBkb21faW8uIFdo ZW4KdGhlIHRvb2xzdGFjayBtYWtlcyBhIGRldmljZSBhc3NpZ25hYmxlIChi eSBiaW5kaW5nIGl0IHRvIHBjaWJhY2spLCBpdAp3aWxsIG5vdyBhbHNvIGFz c2lnbiBpdCB0byBET01JRF9JTyBhbmQgdGhlIGRldmljZSB3aWxsIG9ubHkg YmUgYXNzaWduZWQKYmFjayB0byBkb20wIHdoZW4gdGhlIGRldmljZSBpcyBt YWRlIHVuYXNzaWduYWJsZSBhZ2Fpbi4gV2hpbHN0IGRldmljZSBpcwphc3Np Z25hYmxlIGl0IHdpbGwgb25seSBldmVyIHRyYW5zZmVyIGJldHdlZW4gZG9t X2lvIGFuZCBndWVzdCBkb21haW5zLgpkb21faW8gaXMgYWN0dWFsbHkgb25s eSB1c2VkIGFzIGEgc2VudGluZWwgZG9tYWluIGZvciBxdWFyYW50aW5pbmcg cHVycG9zZXM7Cml0IGlzIG5vdCBjb25maWd1cmVkIHdpdGggYW55IElPTU1V IG1hcHBpbmdzLiBBc3NpZ25tZW50IHRvIGRvbV9pbyBzaW1wbHkKbWVhbnMg dGhhdCB0aGUgZGV2aWNlJ3MgaW5pdGlhdG9yIChyZXF1ZXN0b3IpIGlkZW50 aWZpZXIgaXMgbm90IHByZXNlbnQgaW4KdGhlIElPTU1VJ3MgZGV2aWNlIHRh YmxlIGFuZCB0aHVzIGFueSBETUEgdHJhbnNhY3Rpb25zIGlzc3VlZCB3aWxs IGJlCnRlcm1pbmF0ZWQgd2l0aCBhIGZhdWx0IGNvbmRpdGlvbi4KCkluIGFk ZGl0aW9uLCBhIGZpeCB0byBhc3NpZ25tZW50IGhhbmRsaW5nIGlzIG1hZGUg Zm9yIFZULWQuICBGYWlsdXJlCmR1cmluZyB0aGUgYXNzaWdubWVudCBzdGVw IHNob3VsZCBub3QgbGVhZCB0byBhIGRldmljZSBzdGlsbCBiZWluZwphc3Nv Y2lhdGVkIHdpdGggaXRzIHByaW9yIG93bmVyLiBIYW5kIHRoZSBkZXZpY2Ug dG8gRG9tSU8gdGVtcG9yYXJpbHksCnVudGlsIHRoZSBhc3NpZ25tZW50IHN0 ZXAgaGFzIGNvbXBsZXRlZCBzdWNjZXNzZnVsbHkuICBSZW1vdmUgdGhlIFBJ Cmhvb2tzIGZyb20gdGhlIHNvdXJjZSBkb21haW4gdGhlbiBlYXJsaWVyIGFz IHdlbGwuCgpGYWlsdXJlIG9mIHRoZSByZWNvdmVyeSByZWFzc2lnbl9kZXZp Y2Vfb3duZXJzaGlwKCkgbWF5IG5vdCBnbyBzaWxlbnQ6ClRoZXJlIGUuZy4g bWF5IHN0aWxsIGJlIGxlZnQgb3ZlciBSTVJSIG1hcHBpbmdzIGluIHRoZSBk b21haW4gYXNzaWdubWVudAp0byB3aGljaCBoYXMgZmFpbGVkLCBhbmQgaGVu Y2Ugd2UgY2FuJ3QgYWxsb3cgdGhhdCBkb21haW4gdG8gY29udGludWUKZXhl Y3V0aW5nLgoKTk9URTogVGhpcyBwYXRjaCBhbHNvIGluY2x1ZGVzIG9uZSBw cmludGsoKSBjbGVhbnVwOyB0aGUKICAgICAgIlhFTl9ET01DVExfYXNzaWdu X2RldmljZTogIiB0YWcgaXMgZHJvcHBlZCBpbiBpb21tdV9kb19wY2lfZG9t Y3RsKCksCiAgICAgIHNpbmNlIHNpbWlsYXIgcHJpbnRrKCktcyBlbHNld2hl cmUgYWxzbyBkb24ndCBsb2cgc3VjaCBhIHRhZy4KClRoaXMgaXMgWFNBLTMw Mi4KClNpZ25lZC1vZmYtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50 QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIEphY2tzb24gPGlh bi5qYWNrc29uQGV1LmNpdHJpeC5jb20+Ci0tLQogdG9vbHMvbGlieGwvbGli eGxfcGNpLmMgICAgICAgICAgICAgICAgICAgICB8IDI1ICsrKysrKysrKysr LQogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAgICAgICAgICAgICAg ICB8ICAyICsKIHhlbi9jb21tb24vZG9tY3RsLmMgICAgICAgICAgICAgICAg ICAgICAgICAgfCAxNCArKysrKystCiB4ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9hbWQvcGNpX2FtZF9pb21tdS5jIHwgMTAgKysrKy0KIHhlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL2lvbW11LmMgICAgICAgICAgICAgfCAgOSArKysrKwog eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgICAgICAgICAgICAgICB8 IDU5ICsrKysrKysrKysrKysrKysrKysrKystLS0tLS0tCiB4ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC92dGQvaW9tbXUuYyAgICAgICAgIHwgNDAgKysrKysr KysrKysrKysrKy0tLQogeGVuL2luY2x1ZGUveGVuL3BjaS5oICAgICAgICAg ICAgICAgICAgICAgICB8ICAzICsrCiA4IGZpbGVzIGNoYW5nZWQsIDEzOCBp bnNlcnRpb25zKCspLCAyNCBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS90 b29scy9saWJ4bC9saWJ4bF9wY2kuYyBiL3Rvb2xzL2xpYnhsL2xpYnhsX3Bj aS5jCmluZGV4IGIxNGRmMTYyOWEuLjg0YTI5M2NmOTkgMTAwNjQ0Ci0tLSBh L3Rvb2xzL2xpYnhsL2xpYnhsX3BjaS5jCisrKyBiL3Rvb2xzL2xpYnhsL2xp YnhsX3BjaS5jCkBAIC03NjEsNiArNzYxLDcgQEAgc3RhdGljIGludCBsaWJ4 bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX2FkZChsaWJ4bF9fZ2MgKmdjLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBs aWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGludCByZWJpbmQpCiB7CisgICAg bGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3duZXIoZ2MpOwogICAgIHVu c2lnbmVkIGRvbSwgYnVzLCBkZXYsIGZ1bmM7CiAgICAgY2hhciAqc3BhdGgs ICpkcml2ZXJfcGF0aCA9IE5VTEw7CiAgICAgaW50IHJjOwpAQCAtNzg2LDcg Kzc4Nyw3IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNzaWdu YWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICB9CiAgICAgaWYgKCByYyAp IHsKICAgICAgICAgTE9HKFdBUk4sIFBDSV9CREYiIGFscmVhZHkgYXNzaWdu ZWQgdG8gcGNpYmFjayIsIGRvbSwgYnVzLCBkZXYsIGZ1bmMpOwotICAgICAg ICByZXR1cm4gMDsKKyAgICAgICAgZ290byBxdWFyYW50aW5lOwogICAgIH0K IAogICAgIC8qIENoZWNrIHRvIHNlZSBpZiB0aGVyZSdzIGFscmVhZHkgYSBk cml2ZXIgdGhhdCB3ZSBuZWVkIHRvIHVuYmluZCBmcm9tICovCkBAIC04MTcs NiArODE4LDE5IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNz aWduYWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICAgICAgcmV0dXJuIEVS Uk9SX0ZBSUw7CiAgICAgfQogCitxdWFyYW50aW5lOgorICAgIC8qCisgICAg ICogRE9NSURfSU8gaXMganVzdCBhIHNlbnRpbmVsIGRvbWFpbiwgd2l0aG91 dCBhbnkgYWN0dWFsIG1hcHBpbmdzLAorICAgICAqIHNvIGFsd2F5cyBwYXNz IFhFTl9ET01DVExfREVWX1JETV9SRUxBWEVEIHRvIGF2b2lkIGFzc2lnbm1l bnQgYmVpbmcKKyAgICAgKiB1bm5lY2Vzc2FyaWx5IGRlbmllZC4KKyAgICAg Ki8KKyAgICByYyA9IHhjX2Fzc2lnbl9kZXZpY2UoY3R4LT54Y2gsIERPTUlE X0lPLCBwY2lkZXZfZW5jb2RlX2JkZihwY2lkZXYpLAorICAgICAgICAgICAg ICAgICAgICAgICAgICBYRU5fRE9NQ1RMX0RFVl9SRE1fUkVMQVhFRCk7Cisg ICAgaWYgKCByYyA8IDAgKSB7CisgICAgICAgIExPRyhFUlJPUiwgImZhaWxl ZCB0byBxdWFyYW50aW5lICJQQ0lfQkRGLCBkb20sIGJ1cywgZGV2LCBmdW5j KTsKKyAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CisgICAgfQorCiAgICAg cmV0dXJuIDA7CiB9CiAKQEAgLTgyNCw5ICs4MzgsMTggQEAgc3RhdGljIGlu dCBsaWJ4bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX3JlbW92ZShsaWJ4bF9f Z2MgKmdjLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBsaWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGludCBy ZWJpbmQpCiB7CisgICAgbGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3du ZXIoZ2MpOwogICAgIGludCByYzsKICAgICBjaGFyICpkcml2ZXJfcGF0aDsK IAorICAgIC8qIERlLXF1YXJhbnRpbmUgKi8KKyAgICByYyA9IHhjX2RlYXNz aWduX2RldmljZShjdHgtPnhjaCwgRE9NSURfSU8sIHBjaWRldl9lbmNvZGVf YmRmKHBjaWRldikpOworICAgIGlmICggcmMgPCAwICkgeworICAgICAgICBM T0coRVJST1IsICJmYWlsZWQgdG8gZGUtcXVhcmFudGluZSAiUENJX0JERiwg cGNpZGV2LT5kb21haW4sIHBjaWRldi0+YnVzLAorICAgICAgICAgICAgcGNp ZGV2LT5kZXYsIHBjaWRldi0+ZnVuYyk7CisgICAgICAgIHJldHVybiBFUlJP Ul9GQUlMOworICAgIH0KKwogICAgIC8qIFVuYmluZCBmcm9tIHBjaWJhY2sg Ki8KICAgICBpZiAoIChyYz1wY2liYWNrX2Rldl9pc19hc3NpZ25lZChnYywg cGNpZGV2KSkgPCAwICkgewogICAgICAgICByZXR1cm4gRVJST1JfRkFJTDsK ZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS5jIGIveGVuL2FyY2gveDg2 L21tLmMKaW5kZXggZjdlMGNjNDUwOC4uZGYyODM5MTg1OSAxMDA2NDQKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTMwOCw5ICszMDgsMTEgQEAgdm9pZCBfX2luaXQgYXJjaF9pbml0X21l bW9yeSh2b2lkKQogICAgICAqIEluaXRpYWxpc2Ugb3VyIERPTUlEX0lPIGRv bWFpbi4KICAgICAgKiBUaGlzIGRvbWFpbiBvd25zIEkvTyBwYWdlcyB0aGF0 IGFyZSB3aXRoaW4gdGhlIHJhbmdlIG9mIHRoZSBwYWdlX2luZm8KICAgICAg KiBhcnJheS4gTWFwcGluZ3Mgb2NjdXIgYXQgdGhlIHByaXYgb2YgdGhlIGNh bGxlci4KKyAgICAgKiBRdWFyYW50aW5lZCBQQ0kgZGV2aWNlcyB3aWxsIGJl IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGRvbWFpbi4KICAgICAgKi8KICAgICBk b21faW8gPSBkb21haW5fY3JlYXRlKERPTUlEX0lPLCBET01DUkZfZHVtbXks IDAsIE5VTEwpOwogICAgIEJVR19PTihJU19FUlIoZG9tX2lvKSk7CisgICAg SU5JVF9MSVNUX0hFQUQoJmRvbV9pby0+YXJjaC5wZGV2X2xpc3QpOwogCiAg ICAgLyoKICAgICAgKiBJbml0aWFsaXNlIG91ciBDT1cgZG9tYWluLgpkaWZm IC0tZ2l0IGEveGVuL2NvbW1vbi9kb21jdGwuYyBiL3hlbi9jb21tb24vZG9t Y3RsLmMKaW5kZXggMDExYTdkZTM1NS4uZjhmN2FhNWY0MCAxMDA2NDQKLS0t IGEveGVuL2NvbW1vbi9kb21jdGwuYworKysgYi94ZW4vY29tbW9uL2RvbWN0 bC5jCkBAIC0zOTYsNiArMzk2LDE2IEBAIGxvbmcgZG9fZG9tY3RsKFhFTl9H VUVTVF9IQU5ETEVfUEFSQU0oeGVuX2RvbWN0bF90KSB1X2RvbWN0bCkKICAg ICBjYXNlIFhFTl9ET01DVExfZ2Ric3hfZ3Vlc3RtZW1pbzoKICAgICAgICAg ZCA9IE5VTEw7CiAgICAgICAgIGJyZWFrOworICAgIGNhc2UgWEVOX0RPTUNU TF9hc3NpZ25fZGV2aWNlOgorICAgIGNhc2UgWEVOX0RPTUNUTF9kZWFzc2ln bl9kZXZpY2U6CisgICAgICAgIGlmICggb3AtPmRvbWFpbiA9PSBET01JRF9J TyApCisgICAgICAgIHsKKyAgICAgICAgICAgIGQgPSBkb21faW87CisgICAg ICAgICAgICBicmVhazsKKyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICgg b3AtPmRvbWFpbiA9PSBET01JRF9JTlZBTElEICkKKyAgICAgICAgICAgIHJl dHVybiAtRVNSQ0g7CisgICAgICAgIC8qIGZhbGwgdGhyb3VnaCAqLwogICAg IGRlZmF1bHQ6CiAgICAgICAgIGQgPSByY3VfbG9ja19kb21haW5fYnlfaWQo b3AtPmRvbWFpbik7CiAgICAgICAgIGlmICggIWQgJiYgb3AtPmNtZCAhPSBY RU5fRE9NQ1RMX2dldGRvbWFpbmluZm8gKQpAQCAtNDA4LDcgKzQxOCw3IEBA IGxvbmcgZG9fZG9tY3RsKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX2Rv bWN0bF90KSB1X2RvbWN0bCkKIAogICAgIGlmICggIWRvbWN0bF9sb2NrX2Fj cXVpcmUoKSApCiAgICAgewotICAgICAgICBpZiAoIGQgKQorICAgICAgICBp ZiAoIGQgJiYgZCAhPSBkb21faW8gKQogICAgICAgICAgICAgcmN1X3VubG9j a19kb21haW4oZCk7CiAgICAgICAgIHJldHVybiBoeXBlcmNhbGxfY3JlYXRl X2NvbnRpbnVhdGlvbigKICAgICAgICAgICAgIF9fSFlQRVJWSVNPUl9kb21j dGwsICJoIiwgdV9kb21jdGwpOwpAQCAtMTE1MCw3ICsxMTYwLDcgQEAgbG9u ZyBkb19kb21jdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fZG9tY3Rs X3QpIHVfZG9tY3RsKQogICAgIGRvbWN0bF9sb2NrX3JlbGVhc2UoKTsKIAog IGRvbWN0bF9vdXRfdW5sb2NrX2RvbW9ubHk6Ci0gICAgaWYgKCBkICkKKyAg ICBpZiAoIGQgJiYgZCAhPSBkb21faW8gKQogICAgICAgICByY3VfdW5sb2Nr X2RvbWFpbihkKTsKIAogICAgIGlmICggY29weWJhY2sgJiYgX19jb3B5X3Rv X2d1ZXN0KHVfZG9tY3RsLCBvcCwgMSkgKQpkaWZmIC0tZ2l0IGEveGVuL2Ry aXZlcnMvcGFzc3Rocm91Z2gvYW1kL3BjaV9hbWRfaW9tbXUuYyBiL3hlbi9k cml2ZXJzL3Bhc3N0aHJvdWdoL2FtZC9wY2lfYW1kX2lvbW11LmMKaW5kZXgg OGMyNTExMGVhZS4uZDExZGM5Yzk0ZSAxMDA2NDQKLS0tIGEveGVuL2RyaXZl cnMvcGFzc3Rocm91Z2gvYW1kL3BjaV9hbWRfaW9tbXUuYworKysgYi94ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9pb21tdS5jCkBAIC0x MTgsNiArMTE4LDEwIEBAIHN0YXRpYyB2b2lkIGFtZF9pb21tdV9zZXR1cF9k b21haW5fZGV2aWNlKAogICAgIHU4IGJ1cyA9IHBkZXYtPmJ1czsKICAgICBj b25zdCBzdHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21tdShkb21h aW4pOwogCisgICAgLyogZG9tX2lvIGlzIHVzZWQgYXMgYSBzZW50aW5lbCBm b3IgcXVhcmFudGluZWQgZGV2aWNlcyAqLworICAgIGlmICggZG9tYWluID09 IGRvbV9pbyApCisgICAgICAgIHJldHVybjsKKwogICAgIEJVR19PTiggIWhk LT5hcmNoLnJvb3RfdGFibGUgfHwgIWhkLT5hcmNoLnBhZ2luZ19tb2RlIHx8 CiAgICAgICAgICAgICAhaW9tbXUtPmRldl90YWJsZS5idWZmZXIgKTsKIApA QCAtMzMwLDYgKzMzNCwxMCBAQCB2b2lkIGFtZF9pb21tdV9kaXNhYmxlX2Rv bWFpbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAqZG9tYWluLAogICAgIGludCBy ZXFfaWQ7CiAgICAgdTggYnVzID0gcGRldi0+YnVzOwogCisgICAgLyogZG9t X2lvIGlzIHVzZWQgYXMgYSBzZW50aW5lbCBmb3IgcXVhcmFudGluZWQgZGV2 aWNlcyAqLworICAgIGlmICggZG9tYWluID09IGRvbV9pbyApCisgICAgICAg IHJldHVybjsKKwogICAgIEJVR19PTiAoIGlvbW11LT5kZXZfdGFibGUuYnVm ZmVyID09IE5VTEwgKTsKICAgICByZXFfaWQgPSBnZXRfZG1hX3JlcXVlc3Rv cl9pZChpb21tdS0+c2VnLCBQQ0lfQkRGMihidXMsIGRldmZuKSk7CiAgICAg ZHRlID0gaW9tbXUtPmRldl90YWJsZS5idWZmZXIgKyAocmVxX2lkICogSU9N TVVfREVWX1RBQkxFX0VOVFJZX1NJWkUpOwpAQCAtNDE2LDcgKzQyNCw3IEBA IHN0YXRpYyBpbnQgYW1kX2lvbW11X2Fzc2lnbl9kZXZpY2Uoc3RydWN0IGRv bWFpbiAqZCwgdTggZGV2Zm4sCiAgICAgICAgICAgICBpdnJzX21hcHBpbmdz W3JlcV9pZF0ucmVhZF9wZXJtaXNzaW9uKTsKICAgICB9CiAKLSAgICByZXR1 cm4gcmVhc3NpZ25fZGV2aWNlKGhhcmR3YXJlX2RvbWFpbiwgZCwgZGV2Zm4s IHBkZXYpOworICAgIHJldHVybiByZWFzc2lnbl9kZXZpY2UocGRldi0+ZG9t YWluLCBkLCBkZXZmbiwgcGRldik7CiB9CiAKIHN0YXRpYyB2b2lkIGRlYWxs b2NhdGVfbmV4dF9wYWdlX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBnLCBp bnQgbGV2ZWwpCmRpZmYgLS1naXQgYS94ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9pb21tdS5jIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvaW9tbXUuYwpp bmRleCA1ZTgxODEzOTQyLi45ZWJiOGM2YmM0IDEwMDY0NAotLS0gYS94ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9pb21tdS5jCisrKyBiL3hlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL2lvbW11LmMKQEAgLTIwOCw2ICsyMDgsOSBAQCB2b2lk IGlvbW11X3RlYXJkb3duKHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAgY29u c3Qgc3RydWN0IGRvbWFpbl9pb21tdSAqaGQgPSBkb21faW9tbXUoZCk7CiAK KyAgICBpZiAoIGQgPT0gZG9tX2lvICkKKyAgICAgICAgcmV0dXJuOworCiAg ICAgZC0+bmVlZF9pb21tdSA9IDA7CiAgICAgaGQtPnBsYXRmb3JtX29wcy0+ dGVhcmRvd24oZCk7CiAgICAgdGFza2xldF9zY2hlZHVsZSgmaW9tbXVfcHRf Y2xlYW51cF90YXNrbGV0KTsKQEAgLTIxOCw2ICsyMjEsOSBAQCBpbnQgaW9t bXVfY29uc3RydWN0KHN0cnVjdCBkb21haW4gKmQpCiAgICAgaWYgKCBuZWVk X2lvbW11KGQpID4gMCApCiAgICAgICAgIHJldHVybiAwOwogCisgICAgaWYg KCBkID09IGRvbV9pbyApCisgICAgICAgIHJldHVybiAwOworCiAgICAgaWYg KCAhaW9tbXVfdXNlX2hhcF9wdChkKSApCiAgICAgewogICAgICAgICBpbnQg cmM7CkBAIC0zOTMsNiArMzk5LDkgQEAgaW50IF9faW5pdCBpb21tdV9zZXR1 cCh2b2lkKQogICAgIHByaW50aygiSS9PIHZpcnR1YWxpc2F0aW9uICVzYWJs ZWRcbiIsIGlvbW11X2VuYWJsZWQgPyAiZW4iIDogImRpcyIpOwogICAgIGlm ICggaW9tbXVfZW5hYmxlZCApCiAgICAgeworICAgICAgICBpZiAoIGlvbW11 X2RvbWFpbl9pbml0KGRvbV9pbykgKQorICAgICAgICAgICAgcGFuaWMoIkNv dWxkIG5vdCBzZXQgdXAgcXVhcmFudGluZVxuIik7CisKICAgICAgICAgcHJp bnRrKCIgLSBEb20wIG1vZGU6ICVzXG4iLAogICAgICAgICAgICAgICAgaW9t bXVfcGFzc3Rocm91Z2ggPyAiUGFzc3Rocm91Z2giIDoKICAgICAgICAgICAg ICAgIGlvbW11X2RvbTBfc3RyaWN0ID8gIlN0cmljdCIgOiAiUmVsYXhlZCIp OwpkaWZmIC0tZ2l0IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMg Yi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYwppbmRleCBlY2I2N2Vi YzcwLi4wMjUwZDE5YWU1IDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNz dGhyb3VnaC9wY2kuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9w Y2kuYwpAQCAtMTM0NCwxOSArMTM0NCwyOSBAQCBpbnQgaW9tbXVfcmVtb3Zl X2RldmljZShzdHJ1Y3QgcGNpX2RldiAqcGRldikKICAgICByZXR1cm4gaGQt PnBsYXRmb3JtX29wcy0+cmVtb3ZlX2RldmljZShwZGV2LT5kZXZmbiwgcGNp X3RvX2RldihwZGV2KSk7CiB9CiAKLS8qCi0gKiBJZiB0aGUgZGV2aWNlIGlz bid0IG93bmVkIGJ5IHRoZSBoYXJkd2FyZSBkb21haW4sIGl0IG1lYW5zIGl0 IGFscmVhZHkKLSAqIGhhcyBiZWVuIGFzc2lnbmVkIHRvIG90aGVyIGRvbWFp biwgb3IgaXQgZG9lc24ndCBleGlzdC4KLSAqLwogc3RhdGljIGludCBkZXZp Y2VfYXNzaWduZWQodTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKIHsKICAg ICBzdHJ1Y3QgcGNpX2RldiAqcGRldjsKKyAgICBpbnQgcmMgPSAwOwogCiAg ICAgcGNpZGV2c19sb2NrKCk7Ci0gICAgcGRldiA9IHBjaV9nZXRfcGRldl9i eV9kb21haW4oaGFyZHdhcmVfZG9tYWluLCBzZWcsIGJ1cywgZGV2Zm4pOwor CisgICAgcGRldiA9IHBjaV9nZXRfcGRldihzZWcsIGJ1cywgZGV2Zm4pOwor CisgICAgaWYgKCAhcGRldiApCisgICAgICAgIHJjID0gLUVOT0RFVjsKKyAg ICAvKgorICAgICAqIElmIHRoZSBkZXZpY2UgZXhpc3RzIGFuZCBpdCBpcyBu b3Qgb3duZWQgYnkgZWl0aGVyIHRoZSBoYXJkd2FyZQorICAgICAqIGRvbWFp biBvciBkb21faW8gdGhlbiBpdCBtdXN0IGJlIGFzc2lnbmVkIHRvIGEgZ3Vl c3QsIG9yIGJlCisgICAgICogaGlkZGVuIChvd25lZCBieSBkb21feGVuKS4K KyAgICAgKi8KKyAgICBlbHNlIGlmICggcGRldi0+ZG9tYWluICE9IGhhcmR3 YXJlX2RvbWFpbiAmJgorICAgICAgICAgICAgICBwZGV2LT5kb21haW4gIT0g ZG9tX2lvICkKKyAgICAgICAgcmMgPSAtRUJVU1k7CisKICAgICBwY2lkZXZz X3VubG9jaygpOwogCi0gICAgcmV0dXJuIHBkZXYgPyAwIDogLUVCVVNZOwor ICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGludCBhc3NpZ25fZGV2aWNl KHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4s IHUzMiBmbGFnKQpAQCAtMTM3MCw3ICsxMzgwLDggQEAgc3RhdGljIGludCBh c3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1 cywgdTggZGV2Zm4sIHUzMiBmbGFnKQogCiAgICAgLyogUHJldmVudCBkZXZp Y2UgYXNzaWduIGlmIG1lbSBwYWdpbmcgb3IgbWVtIHNoYXJpbmcgaGF2ZSBi ZWVuIAogICAgICAqIGVuYWJsZWQgZm9yIHRoaXMgZG9tYWluICovCi0gICAg aWYgKCB1bmxpa2VseSghbmVlZF9pb21tdShkKSAmJgorICAgIGlmICggZCAh PSBkb21faW8gJiYKKyAgICAgICAgIHVubGlrZWx5KCFuZWVkX2lvbW11KGQp ICYmCiAgICAgICAgICAgICAoKGlzX2h2bV9kb21haW4oZCkgJiYKICAgICAg ICAgICAgICAgZC0+YXJjaC5odm1fZG9tYWluLm1lbV9zaGFyaW5nX2VuYWJs ZWQpIHx8CiAgICAgICAgICAgICAgZC0+dm1fZXZlbnQtPnBhZ2luZy5yaW5n X3BhZ2UgfHwKQEAgLTEzODcsMTIgKzEzOTgsMjAgQEAgc3RhdGljIGludCBh c3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1 cywgdTggZGV2Zm4sIHUzMiBmbGFnKQogICAgICAgICByZXR1cm4gcmM7CiAg ICAgfQogCi0gICAgcGRldiA9IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFy ZHdhcmVfZG9tYWluLCBzZWcsIGJ1cywgZGV2Zm4pOworICAgIHBkZXYgPSBw Y2lfZ2V0X3BkZXYoc2VnLCBidXMsIGRldmZuKTsKKworICAgIHJjID0gLUVO T0RFVjsKICAgICBpZiAoICFwZGV2ICkKLSAgICB7Ci0gICAgICAgIHJjID0g cGNpX2dldF9wZGV2KHNlZywgYnVzLCBkZXZmbikgPyAtRUJVU1kgOiAtRU5P REVWOwogICAgICAgICBnb3RvIGRvbmU7Ci0gICAgfQorCisgICAgcmMgPSAw OworICAgIGlmICggZCA9PSBwZGV2LT5kb21haW4gKQorICAgICAgICBnb3Rv IGRvbmU7CisKKyAgICByYyA9IC1FQlVTWTsKKyAgICBpZiAoIHBkZXYtPmRv bWFpbiAhPSBoYXJkd2FyZV9kb21haW4gJiYKKyAgICAgICAgIHBkZXYtPmRv bWFpbiAhPSBkb21faW8gKQorICAgICAgICBnb3RvIGRvbmU7CiAKICAgICBp ZiAoIHBkZXYtPm1zaXggKQogICAgICAgICBtc2l4dGJsX2luaXQoZCk7CkBA IC0xNDE1LDYgKzE0MzQsMTAgQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNl KHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4s IHUzMiBmbGFnKQogICAgIH0KIAogIGRvbmU6CisgICAgLyogVGhlIGRldmlj ZSBpcyBhc3NpZ25lZCB0byBkb21faW8gc28gbWFyayBpdCBhcyBxdWFyYW50 aW5lZCAqLworICAgIGlmICggIXJjICYmIGQgPT0gZG9tX2lvICkKKyAgICAg ICAgcGRldi0+cXVhcmFudGluZSA9IHRydWU7CisKICAgICBpZiAoICFoYXNf YXJjaF9wZGV2cyhkKSAmJiBuZWVkX2lvbW11KGQpICkKICAgICAgICAgaW9t bXVfdGVhcmRvd24oZCk7CiAgICAgcGNpZGV2c191bmxvY2soKTsKQEAgLTE0 MjcsNiArMTQ1MCw3IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRv bWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKIHsKICAgICBj b25zdCBzdHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21tdShkKTsK ICAgICBzdHJ1Y3QgcGNpX2RldiAqcGRldiA9IE5VTEw7CisgICAgc3RydWN0 IGRvbWFpbiAqdGFyZ2V0OwogICAgIGludCByZXQgPSAwOwogCiAgICAgaWYg KCAhaW9tbXVfZW5hYmxlZCB8fCAhaGQtPnBsYXRmb3JtX29wcyApCkBAIC0x NDM3LDEyICsxNDYxLDE2IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0 IGRvbWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKICAgICBp ZiAoICFwZGV2ICkKICAgICAgICAgcmV0dXJuIC1FTk9ERVY7CiAKKyAgICAv KiBEZS1hc3NpZ25tZW50IGZyb20gZG9tX2lvIHNob3VsZCBkZS1xdWFyYW50 aW5lIHRoZSBkZXZpY2UgKi8KKyAgICB0YXJnZXQgPSAocGRldi0+cXVhcmFu dGluZSAmJiBwZGV2LT5kb21haW4gIT0gZG9tX2lvKSA/CisgICAgICAgIGRv bV9pbyA6IGhhcmR3YXJlX2RvbWFpbjsKKwogICAgIHdoaWxlICggcGRldi0+ cGhhbnRvbV9zdHJpZGUgKQogICAgIHsKICAgICAgICAgZGV2Zm4gKz0gcGRl di0+cGhhbnRvbV9zdHJpZGU7CiAgICAgICAgIGlmICggUENJX1NMT1QoZGV2 Zm4pICE9IFBDSV9TTE9UKHBkZXYtPmRldmZuKSApCiAgICAgICAgICAgICBi cmVhazsKLSAgICAgICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3Np Z25fZGV2aWNlKGQsIGhhcmR3YXJlX2RvbWFpbiwgZGV2Zm4sCisgICAgICAg IHJldCA9IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2RldmljZShkLCB0 YXJnZXQsIGRldmZuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgcGNpX3RvX2RldihwZGV2KSk7CiAgICAgICAg IGlmICggIXJldCApCiAgICAgICAgICAgICBjb250aW51ZTsKQEAgLTE0NTMs NyArMTQ4MSw3IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFp biAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKICAgICB9CiAKICAg ICBkZXZmbiA9IHBkZXYtPmRldmZuOwotICAgIHJldCA9IGhkLT5wbGF0Zm9y bV9vcHMtPnJlYXNzaWduX2RldmljZShkLCBoYXJkd2FyZV9kb21haW4sIGRl dmZuLAorICAgIHJldCA9IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2Rl dmljZShkLCB0YXJnZXQsIGRldmZuLAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBwY2lfdG9fZGV2KHBkZXYpKTsKICAg ICBpZiAoIHJldCApCiAgICAgewpAQCAtMTQ2Myw2ICsxNDkxLDkgQEAgaW50 IGRlYXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1MTYgc2VnLCB1 OCBidXMsIHU4IGRldmZuKQogICAgICAgICByZXR1cm4gcmV0OwogICAgIH0K IAorICAgIGlmICggcGRldi0+ZG9tYWluID09IGhhcmR3YXJlX2RvbWFpbiAg KQorICAgICAgICBwZGV2LT5xdWFyYW50aW5lID0gZmFsc2U7CisKICAgICBw ZGV2LT5mYXVsdC5jb3VudCA9IDA7CiAKICAgICBpZiAoICFoYXNfYXJjaF9w ZGV2cyhkKSAmJiBuZWVkX2lvbW11KGQpICkKQEAgLTE2NTQsNyArMTY4NSw3 IEBAIGludCBpb21tdV9kb19wY2lfZG9tY3RsKAogICAgICAgICAgICAgcmV0 ID0gaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oX19IWVBFUlZJU09S X2RvbWN0bCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICJoIiwgdV9kb21jdGwpOwogICAgICAgICBlbHNlIGlm ICggcmV0ICkKLSAgICAgICAgICAgIHByaW50ayhYRU5MT0dfR19FUlIgIlhF Tl9ET01DVExfYXNzaWduX2RldmljZTogIgorICAgICAgICAgICAgcHJpbnRr KFhFTkxPR19HX0VSUgogICAgICAgICAgICAgICAgICAgICJhc3NpZ24gJTA0 eDolMDJ4OiUwMnguJXUgdG8gZG9tJWQgZmFpbGVkICglZClcbiIsCiAgICAg ICAgICAgICAgICAgICAgc2VnLCBidXMsIFBDSV9TTE9UKGRldmZuKSwgUENJ X0ZVTkMoZGV2Zm4pLAogICAgICAgICAgICAgICAgICAgIGQtPmRvbWFpbl9p ZCwgcmV0KTsKZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdo L3Z0ZC9pb21tdS5jIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lv bW11LmMKaW5kZXggMjA5MzY2ODMyOC4uMGUwYWE2ZDUxNyAxMDA2NDQKLS0t IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lvbW11LmMKKysrIGIv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lvbW11LmMKQEAgLTEzMzIs NiArMTMzMiwxMCBAQCBpbnQgZG9tYWluX2NvbnRleHRfbWFwcGluZ19vbmUo CiAgICAgaW50IGFnYXcsIHJjLCByZXQ7CiAgICAgYm9vbF90IGZsdXNoX2Rl dl9pb3RsYjsKIAorICAgIC8qIGRvbV9pbyBpcyB1c2VkIGFzIGEgc2VudGlu ZWwgZm9yIHF1YXJhbnRpbmVkIGRldmljZXMgKi8KKyAgICBpZiAoIGRvbWFp biA9PSBkb21faW8gKQorICAgICAgICByZXR1cm4gMDsKKwogICAgIEFTU0VS VChwY2lkZXZzX2xvY2tlZCgpKTsKICAgICBzcGluX2xvY2soJmlvbW11LT5s b2NrKTsKICAgICBtYWRkciA9IGJ1c190b19jb250ZXh0X21hZGRyKGlvbW11 LCBidXMpOwpAQCAtMTU2Nyw2ICsxNTcxLDEwIEBAIGludCBkb21haW5fY29u dGV4dF91bm1hcF9vbmUoCiAgICAgaW50IGlvbW11X2RvbWlkLCByYywgcmV0 OwogICAgIGJvb2xfdCBmbHVzaF9kZXZfaW90bGI7CiAKKyAgICAvKiBkb21f aW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBkZXZp Y2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAgICAg cmV0dXJuIDA7CisKICAgICBBU1NFUlQocGNpZGV2c19sb2NrZWQoKSk7CiAg ICAgc3Bpbl9sb2NrKCZpb21tdS0+bG9jayk7CiAKQEAgLTE2OTksNiArMTcw NywxMCBAQCBzdGF0aWMgaW50IGRvbWFpbl9jb250ZXh0X3VubWFwKHN0cnVj dCBkb21haW4gKmRvbWFpbiwgdTggZGV2Zm4sCiAgICAgICAgIGdvdG8gb3V0 OwogICAgIH0KIAorICAgIC8qIGRvbV9pbyBpcyB1c2VkIGFzIGEgc2VudGlu ZWwgZm9yIHF1YXJhbnRpbmVkIGRldmljZXMgKi8KKyAgICBpZiAoIGRvbWFp biA9PSBkb21faW8gKQorICAgICAgICBnb3RvIG91dDsKKwogICAgIC8qCiAg ICAgICogaWYgbm8gb3RoZXIgZGV2aWNlcyB1bmRlciB0aGUgc2FtZSBpb21t dSBvd25lZCBieSB0aGlzIGRvbWFpbiwKICAgICAgKiBjbGVhciBpb21tdSBp biBpb21tdV9iaXRtYXAgYW5kIGNsZWFyIGRvbWFpbl9pZCBpbiBkb21pZF9i aXRtcApAQCAtMjM4Myw2ICsyMzk1LDE1IEBAIHN0YXRpYyBpbnQgcmVhc3Np Z25fZGV2aWNlX293bmVyc2hpcCgKICAgICBpZiAoIHJldCApCiAgICAgICAg IHJldHVybiByZXQ7CiAKKyAgICBpZiAoIGRldmZuID09IHBkZXYtPmRldmZu ICkKKyAgICB7CisgICAgICAgIGxpc3RfbW92ZSgmcGRldi0+ZG9tYWluX2xp c3QsICZkb21faW8tPmFyY2gucGRldl9saXN0KTsKKyAgICAgICAgcGRldi0+ ZG9tYWluID0gZG9tX2lvOworICAgIH0KKworICAgIGlmICggIWhhc19hcmNo X3BkZXZzKHNvdXJjZSkgKQorICAgICAgICB2bXhfcGlfaG9va3NfZGVhc3Np Z24oc291cmNlKTsKKwogICAgIGlmICggIWhhc19hcmNoX3BkZXZzKHRhcmdl dCkgKQogICAgICAgICB2bXhfcGlfaG9va3NfYXNzaWduKHRhcmdldCk7CiAK QEAgLTI0MDEsMTUgKzI0MjIsMTMgQEAgc3RhdGljIGludCByZWFzc2lnbl9k ZXZpY2Vfb3duZXJzaGlwKAogICAgICAgICBwZGV2LT5kb21haW4gPSB0YXJn ZXQ7CiAgICAgfQogCi0gICAgaWYgKCAhaGFzX2FyY2hfcGRldnMoc291cmNl KSApCi0gICAgICAgIHZteF9waV9ob29rc19kZWFzc2lnbihzb3VyY2UpOwot CiAgICAgcmV0dXJuIHJldDsKIH0KIAogc3RhdGljIGludCBpbnRlbF9pb21t dV9hc3NpZ25fZGV2aWNlKAogICAgIHN0cnVjdCBkb21haW4gKmQsIHU4IGRl dmZuLCBzdHJ1Y3QgcGNpX2RldiAqcGRldiwgdTMyIGZsYWcpCiB7CisgICAg c3RydWN0IGRvbWFpbiAqcyA9IHBkZXYtPmRvbWFpbjsKICAgICBzdHJ1Y3Qg YWNwaV9ybXJyX3VuaXQgKnJtcnI7CiAgICAgaW50IHJldCA9IDAsIGk7CiAg ICAgdTE2IGJkZiwgc2VnOwpAQCAtMjQ1Miw4ICsyNDcxLDggQEAgc3RhdGlj IGludCBpbnRlbF9pb21tdV9hc3NpZ25fZGV2aWNlKAogICAgICAgICB9CiAg ICAgfQogCi0gICAgcmV0ID0gcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcCho YXJkd2FyZV9kb21haW4sIGQsIGRldmZuLCBwZGV2KTsKLSAgICBpZiAoIHJl dCApCisgICAgcmV0ID0gcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcChzLCBk LCBkZXZmbiwgcGRldik7CisgICAgaWYgKCByZXQgfHwgZCA9PSBkb21faW8g KQogICAgICAgICByZXR1cm4gcmV0OwogCiAgICAgLyogU2V0dXAgcm1yciBp ZGVudGl0eSBtYXBwaW5nICovCkBAIC0yNDY2LDExICsyNDg1LDIwIEBAIHN0 YXRpYyBpbnQgaW50ZWxfaW9tbXVfYXNzaWduX2RldmljZSgKICAgICAgICAg ICAgIHJldCA9IHJtcnJfaWRlbnRpdHlfbWFwcGluZyhkLCAxLCBybXJyLCBm bGFnKTsKICAgICAgICAgICAgIGlmICggcmV0ICkKICAgICAgICAgICAgIHsK LSAgICAgICAgICAgICAgICByZWFzc2lnbl9kZXZpY2Vfb3duZXJzaGlwKGQs IGhhcmR3YXJlX2RvbWFpbiwgZGV2Zm4sIHBkZXYpOworICAgICAgICAgICAg ICAgIGludCByYzsKKworICAgICAgICAgICAgICAgIHJjID0gcmVhc3NpZ25f ZGV2aWNlX293bmVyc2hpcChkLCBzLCBkZXZmbiwgcGRldik7CiAgICAgICAg ICAgICAgICAgcHJpbnRrKFhFTkxPR19HX0VSUiBWVERQUkVGSVgKICAgICAg ICAgICAgICAgICAgICAgICAgIiBjYW5ub3QgbWFwIHJlc2VydmVkIHJlZ2lv biAoJSJQUkl4NjQiLCUiUFJJeDY0Il0gZm9yIERvbSVkICglZClcbiIsCiAg ICAgICAgICAgICAgICAgICAgICAgIHJtcnItPmJhc2VfYWRkcmVzcywgcm1y ci0+ZW5kX2FkZHJlc3MsCiAgICAgICAgICAgICAgICAgICAgICAgIGQtPmRv bWFpbl9pZCwgcmV0KTsKKyAgICAgICAgICAgICAgICBpZiAoIHJjICkKKyAg ICAgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgICAgIHByaW50ayhY RU5MT0dfRVJSIFZURFBSRUZJWAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgIiBmYWlsZWQgdG8gcmVjbGFpbSAlMDR4OiUwMng6JTAyeC4ldSBmcm9t ICVwZCAoJWQpXG4iLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgc2Vn LCBidXMsIFBDSV9TTE9UKGRldmZuKSwgUENJX0ZVTkMoZGV2Zm4pLCBkLCBy Yyk7CisgICAgICAgICAgICAgICAgICAgIGRvbWFpbl9jcmFzaChkKTsKKyAg ICAgICAgICAgICAgICB9CiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAg ICAgICAgICB9CiAgICAgICAgIH0KZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRl L3hlbi9wY2kuaCBiL3hlbi9pbmNsdWRlL3hlbi9wY2kuaAppbmRleCBkYTFi ZDIyMjIzLi4yOTE3ZDAwYTQ3IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS94 ZW4vcGNpLmgKKysrIGIveGVuL2luY2x1ZGUveGVuL3BjaS5oCkBAIC02OCw2 ICs2OCw5IEBAIHN0cnVjdCBwY2lfZGV2IHsKIAogICAgIG5vZGVpZF90IG5v ZGU7IC8qIE5VTUEgbm9kZSAqLwogCisgICAgLyogRGV2aWNlIHRvIGJlIHF1 YXJhbnRpbmVkLCBkb24ndCBhdXRvbWF0aWNhbGx5IHJlLWFzc2lnbiB0byBk b20wICovCisgICAgYm9vbCBxdWFyYW50aW5lOworCiAgICAgZW51bSBwZGV2 X3R5cGUgewogICAgICAgICBERVZfVFlQRV9QQ0lfVU5LTk9XTiwKICAgICAg ICAgREVWX1RZUEVfUENJZV9FTkRQT0lOVCwKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa302-4.10/0001-IOMMU-add-missing-HVM-check.patch" Content-Disposition: attachment; filename="xsa302-4.10/0001-IOMMU-add-missing-HVM-check.patch" Content-Transfer-Encoding: base64 RnJvbSAyYmNiZjI4NDMyNTA4ODhiNzIwYmZlYTE4OGFjOTg0MmM4NDdmMzg4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFdlZCwgMiBPY3QgMjAxOSAxMzoz Njo1OSArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS8yXSBJT01NVTogYWRkIG1p c3NpbmcgSFZNIGNoZWNrCk1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlw ZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVy LUVuY29kaW5nOiA4Yml0CgpGaXggYW4gdW5ndWFyZGVkIGQtPmFyY2guaHZt IGFjY2VzcyBpbiBhc3NpZ25fZGV2aWNlKCkuCgpTaWduZWQtb2ZmLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBS b2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4KQWNrZWQt Ynk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ CgooY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA0MWZkMTAwOWNkNzQxNmI3 M2Q3NDVhNzdjMjRiNGU4ZDFhMjk2ZmU2KQpTaWduZWQtb2ZmLWJ5OiBJYW4g SmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KLS0tCiB4ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYyB8IDMgKystCiAxIGZpbGUgY2hh bmdlZCwgMiBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0t Z2l0IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgYi94ZW4vZHJp dmVycy9wYXNzdGhyb3VnaC9wY2kuYwppbmRleCBlMDIxYzdhMzE3Li5lMTY2 OGExOTY4IDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9w Y2kuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYwpAQCAt MTM4Niw3ICsxMzg2LDggQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogICAgIC8qIFByZXZlbnQgZGV2aWNlIGFzc2lnbiBpZiBtZW0g cGFnaW5nIG9yIG1lbSBzaGFyaW5nIGhhdmUgYmVlbiAKICAgICAgKiBlbmFi bGVkIGZvciB0aGlzIGRvbWFpbiAqLwogICAgIGlmICggdW5saWtlbHkoIW5l ZWRfaW9tbXUoZCkgJiYKLSAgICAgICAgICAgIChkLT5hcmNoLmh2bV9kb21h aW4ubWVtX3NoYXJpbmdfZW5hYmxlZCB8fAorICAgICAgICAgICAgKChpc19o dm1fZG9tYWluKGQpICYmCisgICAgICAgICAgICAgIGQtPmFyY2guaHZtX2Rv bWFpbi5tZW1fc2hhcmluZ19lbmFibGVkKSB8fAogICAgICAgICAgICAgIHZt X2V2ZW50X2NoZWNrX3JpbmcoZC0+dm1fZXZlbnRfcGFnaW5nKSB8fAogICAg ICAgICAgICAgIHAybV9nZXRfaG9zdHAybShkKS0+Z2xvYmFsX2xvZ2RpcnR5 KSkgKQogICAgICAgICByZXR1cm4gLUVYREVWOwotLSAKMi4xMS4wCgo= --=separator Content-Type: application/octet-stream; name="xsa302-4.10/0002-passthrough-quarantine-PCI-devices.patch" Content-Disposition: attachment; filename="xsa302-4.10/0002-passthrough-quarantine-PCI-devices.patch" Content-Transfer-Encoding: base64 RnJvbSAwMmRkMDdlNTNiOTA0NTcwZTAzMjBkMTdkNzcwMjJkZGJjNGU4MjI1 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIER1cnJhbnQg PHBhdWwuZHVycmFudEBjaXRyaXguY29tPgpEYXRlOiBNb24sIDE0IE9jdCAy MDE5IDE3OjUyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzJdIHBhc3N0 aHJvdWdoOiBxdWFyYW50aW5lIFBDSSBkZXZpY2VzCgpXaGVuIGEgUENJIGRl dmljZSBpcyBhc3NpZ25lZCB0byBhbiB1bnRydXN0ZWQgZG9tYWluLCBpdCBp cyBwb3NzaWJsZSBmb3IKdGhhdCBkb21haW4gdG8gcHJvZ3JhbSB0aGUgZGV2 aWNlIHRvIERNQSB0byBhbiBhcmJpdHJhcnkgYWRkcmVzcy4gVGhlCklPTU1V IGlzIHVzZWQgdG8gcHJvdGVjdCB0aGUgaG9zdCBmcm9tIG1hbGljaW91cyBE TUEgYnkgbWFraW5nIHN1cmUgdGhhdAp0aGUgZGV2aWNlIGFkZHJlc3NlcyBj YW4gb25seSB0YXJnZXQgbWVtb3J5IGFzc2lnbmVkIHRvIHRoZSBndWVzdC4g SG93ZXZlciwKd2hlbiB0aGUgZ3Vlc3QgZG9tYWluIGlzIHRvcm4gZG93biB0 aGUgZGV2aWNlIGlzIGFzc2lnbmVkIGJhY2sgdG8gZG9tMCwKdGh1cyBhbGxv d2luZyBhbnkgaW4tZmxpZ2h0IERNQSB0byBwb3RlbnRpYWxseSB0YXJnZXQg Y3JpdGljYWwgaG9zdCBkYXRhLgoKVGhpcyBwYXRjaCBpbnRyb2R1Y2VzIGEg J3F1YXJhbnRpbmUnIGZvciBQQ0kgZGV2aWNlcyB1c2luZyBkb21faW8uIFdo ZW4KdGhlIHRvb2xzdGFjayBtYWtlcyBhIGRldmljZSBhc3NpZ25hYmxlIChi eSBiaW5kaW5nIGl0IHRvIHBjaWJhY2spLCBpdAp3aWxsIG5vdyBhbHNvIGFz c2lnbiBpdCB0byBET01JRF9JTyBhbmQgdGhlIGRldmljZSB3aWxsIG9ubHkg YmUgYXNzaWduZWQKYmFjayB0byBkb20wIHdoZW4gdGhlIGRldmljZSBpcyBt YWRlIHVuYXNzaWduYWJsZSBhZ2Fpbi4gV2hpbHN0IGRldmljZSBpcwphc3Np Z25hYmxlIGl0IHdpbGwgb25seSBldmVyIHRyYW5zZmVyIGJldHdlZW4gZG9t X2lvIGFuZCBndWVzdCBkb21haW5zLgpkb21faW8gaXMgYWN0dWFsbHkgb25s eSB1c2VkIGFzIGEgc2VudGluZWwgZG9tYWluIGZvciBxdWFyYW50aW5pbmcg cHVycG9zZXM7Cml0IGlzIG5vdCBjb25maWd1cmVkIHdpdGggYW55IElPTU1V IG1hcHBpbmdzLiBBc3NpZ25tZW50IHRvIGRvbV9pbyBzaW1wbHkKbWVhbnMg dGhhdCB0aGUgZGV2aWNlJ3MgaW5pdGlhdG9yIChyZXF1ZXN0b3IpIGlkZW50 aWZpZXIgaXMgbm90IHByZXNlbnQgaW4KdGhlIElPTU1VJ3MgZGV2aWNlIHRh YmxlIGFuZCB0aHVzIGFueSBETUEgdHJhbnNhY3Rpb25zIGlzc3VlZCB3aWxs IGJlCnRlcm1pbmF0ZWQgd2l0aCBhIGZhdWx0IGNvbmRpdGlvbi4KCkluIGFk ZGl0aW9uLCBhIGZpeCB0byBhc3NpZ25tZW50IGhhbmRsaW5nIGlzIG1hZGUg Zm9yIFZULWQuICBGYWlsdXJlCmR1cmluZyB0aGUgYXNzaWdubWVudCBzdGVw IHNob3VsZCBub3QgbGVhZCB0byBhIGRldmljZSBzdGlsbCBiZWluZwphc3Nv Y2lhdGVkIHdpdGggaXRzIHByaW9yIG93bmVyLiBIYW5kIHRoZSBkZXZpY2Ug dG8gRG9tSU8gdGVtcG9yYXJpbHksCnVudGlsIHRoZSBhc3NpZ25tZW50IHN0 ZXAgaGFzIGNvbXBsZXRlZCBzdWNjZXNzZnVsbHkuICBSZW1vdmUgdGhlIFBJ Cmhvb2tzIGZyb20gdGhlIHNvdXJjZSBkb21haW4gdGhlbiBlYXJsaWVyIGFz IHdlbGwuCgpGYWlsdXJlIG9mIHRoZSByZWNvdmVyeSByZWFzc2lnbl9kZXZp Y2Vfb3duZXJzaGlwKCkgbWF5IG5vdCBnbyBzaWxlbnQ6ClRoZXJlIGUuZy4g bWF5IHN0aWxsIGJlIGxlZnQgb3ZlciBSTVJSIG1hcHBpbmdzIGluIHRoZSBk b21haW4gYXNzaWdubWVudAp0byB3aGljaCBoYXMgZmFpbGVkLCBhbmQgaGVu Y2Ugd2UgY2FuJ3QgYWxsb3cgdGhhdCBkb21haW4gdG8gY29udGludWUKZXhl Y3V0aW5nLgoKTk9URTogVGhpcyBwYXRjaCBhbHNvIGluY2x1ZGVzIG9uZSBw cmludGsoKSBjbGVhbnVwOyB0aGUKICAgICAgIlhFTl9ET01DVExfYXNzaWdu X2RldmljZTogIiB0YWcgaXMgZHJvcHBlZCBpbiBpb21tdV9kb19wY2lfZG9t Y3RsKCksCiAgICAgIHNpbmNlIHNpbWlsYXIgcHJpbnRrKCktcyBlbHNld2hl cmUgYWxzbyBkb24ndCBsb2cgc3VjaCBhIHRhZy4KClRoaXMgaXMgWFNBLTMw Mi4KClNpZ25lZC1vZmYtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50 QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIEphY2tzb24gPGlh bi5qYWNrc29uQGV1LmNpdHJpeC5jb20+Ci0tLQogdG9vbHMvbGlieGwvbGli eGxfcGNpLmMgICAgICAgICAgICAgICAgICAgICB8IDI1ICsrKysrKysrKysr LQogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAgICAgICAgICAgICAg ICB8ICAyICsKIHhlbi9jb21tb24vZG9tY3RsLmMgICAgICAgICAgICAgICAg ICAgICAgICAgfCAxNCArKysrKystCiB4ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9hbWQvcGNpX2FtZF9pb21tdS5jIHwgMTAgKysrKy0KIHhlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL2lvbW11LmMgICAgICAgICAgICAgfCAgOSArKysrKwog eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgICAgICAgICAgICAgICB8 IDU5ICsrKysrKysrKysrKysrKysrKysrKystLS0tLS0tCiB4ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC92dGQvaW9tbXUuYyAgICAgICAgIHwgNDAgKysrKysr KysrKysrKysrKy0tLQogeGVuL2luY2x1ZGUveGVuL3BjaS5oICAgICAgICAg ICAgICAgICAgICAgICB8ICAzICsrCiA4IGZpbGVzIGNoYW5nZWQsIDEzOCBp bnNlcnRpb25zKCspLCAyNCBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS90 b29scy9saWJ4bC9saWJ4bF9wY2kuYyBiL3Rvb2xzL2xpYnhsL2xpYnhsX3Bj aS5jCmluZGV4IDg4YTU1Y2U4YmQuLjFiNWM0NGYzZTcgMTAwNjQ0Ci0tLSBh L3Rvb2xzL2xpYnhsL2xpYnhsX3BjaS5jCisrKyBiL3Rvb2xzL2xpYnhsL2xp YnhsX3BjaS5jCkBAIC03NDksNiArNzQ5LDcgQEAgc3RhdGljIGludCBsaWJ4 bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX2FkZChsaWJ4bF9fZ2MgKmdjLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBs aWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGludCByZWJpbmQpCiB7CisgICAg bGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3duZXIoZ2MpOwogICAgIHVu c2lnbmVkIGRvbSwgYnVzLCBkZXYsIGZ1bmM7CiAgICAgY2hhciAqc3BhdGgs ICpkcml2ZXJfcGF0aCA9IE5VTEw7CiAgICAgaW50IHJjOwpAQCAtNzc0LDcg Kzc3NSw3IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNzaWdu YWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICB9CiAgICAgaWYgKCByYyAp IHsKICAgICAgICAgTE9HKFdBUk4sIFBDSV9CREYiIGFscmVhZHkgYXNzaWdu ZWQgdG8gcGNpYmFjayIsIGRvbSwgYnVzLCBkZXYsIGZ1bmMpOwotICAgICAg ICByZXR1cm4gMDsKKyAgICAgICAgZ290byBxdWFyYW50aW5lOwogICAgIH0K IAogICAgIC8qIENoZWNrIHRvIHNlZSBpZiB0aGVyZSdzIGFscmVhZHkgYSBk cml2ZXIgdGhhdCB3ZSBuZWVkIHRvIHVuYmluZCBmcm9tICovCkBAIC04MDUs NiArODA2LDE5IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNz aWduYWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICAgICAgcmV0dXJuIEVS Uk9SX0ZBSUw7CiAgICAgfQogCitxdWFyYW50aW5lOgorICAgIC8qCisgICAg ICogRE9NSURfSU8gaXMganVzdCBhIHNlbnRpbmVsIGRvbWFpbiwgd2l0aG91 dCBhbnkgYWN0dWFsIG1hcHBpbmdzLAorICAgICAqIHNvIGFsd2F5cyBwYXNz IFhFTl9ET01DVExfREVWX1JETV9SRUxBWEVEIHRvIGF2b2lkIGFzc2lnbm1l bnQgYmVpbmcKKyAgICAgKiB1bm5lY2Vzc2FyaWx5IGRlbmllZC4KKyAgICAg Ki8KKyAgICByYyA9IHhjX2Fzc2lnbl9kZXZpY2UoY3R4LT54Y2gsIERPTUlE X0lPLCBwY2lkZXZfZW5jb2RlX2JkZihwY2lkZXYpLAorICAgICAgICAgICAg ICAgICAgICAgICAgICBYRU5fRE9NQ1RMX0RFVl9SRE1fUkVMQVhFRCk7Cisg ICAgaWYgKCByYyA8IDAgKSB7CisgICAgICAgIExPRyhFUlJPUiwgImZhaWxl ZCB0byBxdWFyYW50aW5lICJQQ0lfQkRGLCBkb20sIGJ1cywgZGV2LCBmdW5j KTsKKyAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CisgICAgfQorCiAgICAg cmV0dXJuIDA7CiB9CiAKQEAgLTgxMiw5ICs4MjYsMTggQEAgc3RhdGljIGlu dCBsaWJ4bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX3JlbW92ZShsaWJ4bF9f Z2MgKmdjLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBsaWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGludCBy ZWJpbmQpCiB7CisgICAgbGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3du ZXIoZ2MpOwogICAgIGludCByYzsKICAgICBjaGFyICpkcml2ZXJfcGF0aDsK IAorICAgIC8qIERlLXF1YXJhbnRpbmUgKi8KKyAgICByYyA9IHhjX2RlYXNz aWduX2RldmljZShjdHgtPnhjaCwgRE9NSURfSU8sIHBjaWRldl9lbmNvZGVf YmRmKHBjaWRldikpOworICAgIGlmICggcmMgPCAwICkgeworICAgICAgICBM T0coRVJST1IsICJmYWlsZWQgdG8gZGUtcXVhcmFudGluZSAiUENJX0JERiwg cGNpZGV2LT5kb21haW4sIHBjaWRldi0+YnVzLAorICAgICAgICAgICAgcGNp ZGV2LT5kZXYsIHBjaWRldi0+ZnVuYyk7CisgICAgICAgIHJldHVybiBFUlJP Ul9GQUlMOworICAgIH0KKwogICAgIC8qIFVuYmluZCBmcm9tIHBjaWJhY2sg Ki8KICAgICBpZiAoIChyYz1wY2liYWNrX2Rldl9pc19hc3NpZ25lZChnYywg cGNpZGV2KSkgPCAwICkgewogICAgICAgICByZXR1cm4gRVJST1JfRkFJTDsK ZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS5jIGIveGVuL2FyY2gveDg2 L21tLmMKaW5kZXggY2UyYzA4MmNhZi4uMGU0MjQ5N2NmNyAxMDA2NDQKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI5NSw5ICsyOTUsMTEgQEAgdm9pZCBfX2luaXQgYXJjaF9pbml0X21l bW9yeSh2b2lkKQogICAgICAqIEluaXRpYWxpc2Ugb3VyIERPTUlEX0lPIGRv bWFpbi4KICAgICAgKiBUaGlzIGRvbWFpbiBvd25zIEkvTyBwYWdlcyB0aGF0 IGFyZSB3aXRoaW4gdGhlIHJhbmdlIG9mIHRoZSBwYWdlX2luZm8KICAgICAg KiBhcnJheS4gTWFwcGluZ3Mgb2NjdXIgYXQgdGhlIHByaXYgb2YgdGhlIGNh bGxlci4KKyAgICAgKiBRdWFyYW50aW5lZCBQQ0kgZGV2aWNlcyB3aWxsIGJl IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGRvbWFpbi4KICAgICAgKi8KICAgICBk b21faW8gPSBkb21haW5fY3JlYXRlKERPTUlEX0lPLCBET01DUkZfZHVtbXks IDAsIE5VTEwpOwogICAgIEJVR19PTihJU19FUlIoZG9tX2lvKSk7CisgICAg SU5JVF9MSVNUX0hFQUQoJmRvbV9pby0+YXJjaC5wZGV2X2xpc3QpOwogCiAg ICAgLyoKICAgICAgKiBJbml0aWFsaXNlIG91ciBDT1cgZG9tYWluLgpkaWZm IC0tZ2l0IGEveGVuL2NvbW1vbi9kb21jdGwuYyBiL3hlbi9jb21tb24vZG9t Y3RsLmMKaW5kZXggM2M2ZmE0ZWM2Ny4uYTcwZjRiNDZmOCAxMDA2NDQKLS0t IGEveGVuL2NvbW1vbi9kb21jdGwuYworKysgYi94ZW4vY29tbW9uL2RvbWN0 bC5jCkBAIC0zOTIsNiArMzkyLDE2IEBAIGxvbmcgZG9fZG9tY3RsKFhFTl9H VUVTVF9IQU5ETEVfUEFSQU0oeGVuX2RvbWN0bF90KSB1X2RvbWN0bCkKIAog ICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsKKyAgICBjYXNlIFhFTl9E T01DVExfYXNzaWduX2RldmljZToKKyAgICBjYXNlIFhFTl9ET01DVExfZGVh c3NpZ25fZGV2aWNlOgorICAgICAgICBpZiAoIG9wLT5kb21haW4gPT0gRE9N SURfSU8gKQorICAgICAgICB7CisgICAgICAgICAgICBkID0gZG9tX2lvOwor ICAgICAgICAgICAgYnJlYWs7CisgICAgICAgIH0KKyAgICAgICAgZWxzZSBp ZiAoIG9wLT5kb21haW4gPT0gRE9NSURfSU5WQUxJRCApCisgICAgICAgICAg ICByZXR1cm4gLUVTUkNIOworICAgICAgICAvKiBmYWxsIHRocm91Z2ggKi8K ICAgICBjYXNlIFhFTl9ET01DVExfdGVzdF9hc3NpZ25fZGV2aWNlOgogICAg ICAgICBpZiAoIG9wLT5kb21haW4gPT0gRE9NSURfSU5WQUxJRCApCiAgICAg ICAgIHsKQEAgLTQxMyw3ICs0MjMsNyBAQCBsb25nIGRvX2RvbWN0bChYRU5f R1VFU1RfSEFORExFX1BBUkFNKHhlbl9kb21jdGxfdCkgdV9kb21jdGwpCiAK ICAgICBpZiAoICFkb21jdGxfbG9ja19hY3F1aXJlKCkgKQogICAgIHsKLSAg ICAgICAgaWYgKCBkICkKKyAgICAgICAgaWYgKCBkICYmIGQgIT0gZG9tX2lv ICkKICAgICAgICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGQpOwogICAgICAg ICByZXR1cm4gaHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oCiAgICAg ICAgICAgICBfX0hZUEVSVklTT1JfZG9tY3RsLCAiaCIsIHVfZG9tY3RsKTsK QEAgLTExNjMsNyArMTE3Myw3IEBAIGxvbmcgZG9fZG9tY3RsKFhFTl9HVUVT VF9IQU5ETEVfUEFSQU0oeGVuX2RvbWN0bF90KSB1X2RvbWN0bCkKICAgICBk b21jdGxfbG9ja19yZWxlYXNlKCk7CiAKICBkb21jdGxfb3V0X3VubG9ja19k b21vbmx5OgotICAgIGlmICggZCApCisgICAgaWYgKCBkICYmIGQgIT0gZG9t X2lvICkKICAgICAgICAgcmN1X3VubG9ja19kb21haW4oZCk7CiAKICAgICBp ZiAoIGNvcHliYWNrICYmIF9fY29weV90b19ndWVzdCh1X2RvbWN0bCwgb3As IDEpICkKZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2Ft ZC9wY2lfYW1kX2lvbW11LmMgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9h bWQvcGNpX2FtZF9pb21tdS5jCmluZGV4IDEyZDI2OTViODkuLmVjOGJhYWU3 MTcgMTAwNjQ0Ci0tLSBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2FtZC9w Y2lfYW1kX2lvbW11LmMKKysrIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gv YW1kL3BjaV9hbWRfaW9tbXUuYwpAQCAtMTE4LDYgKzExOCwxMCBAQCBzdGF0 aWMgdm9pZCBhbWRfaW9tbXVfc2V0dXBfZG9tYWluX2RldmljZSgKICAgICB1 OCBidXMgPSBwZGV2LT5idXM7CiAgICAgY29uc3Qgc3RydWN0IGRvbWFpbl9p b21tdSAqaGQgPSBkb21faW9tbXUoZG9tYWluKTsKIAorICAgIC8qIGRvbV9p byBpcyB1c2VkIGFzIGEgc2VudGluZWwgZm9yIHF1YXJhbnRpbmVkIGRldmlj ZXMgKi8KKyAgICBpZiAoIGRvbWFpbiA9PSBkb21faW8gKQorICAgICAgICBy ZXR1cm47CisKICAgICBCVUdfT04oICFoZC0+YXJjaC5yb290X3RhYmxlIHx8 ICFoZC0+YXJjaC5wYWdpbmdfbW9kZSB8fAogICAgICAgICAgICAgIWlvbW11 LT5kZXZfdGFibGUuYnVmZmVyICk7CiAKQEAgLTMwNSw2ICszMDksMTAgQEAg dm9pZCBhbWRfaW9tbXVfZGlzYWJsZV9kb21haW5fZGV2aWNlKHN0cnVjdCBk b21haW4gKmRvbWFpbiwKICAgICBpbnQgcmVxX2lkOwogICAgIHU4IGJ1cyA9 IHBkZXYtPmJ1czsKIAorICAgIC8qIGRvbV9pbyBpcyB1c2VkIGFzIGEgc2Vu dGluZWwgZm9yIHF1YXJhbnRpbmVkIGRldmljZXMgKi8KKyAgICBpZiAoIGRv bWFpbiA9PSBkb21faW8gKQorICAgICAgICByZXR1cm47CisKICAgICBCVUdf T04gKCBpb21tdS0+ZGV2X3RhYmxlLmJ1ZmZlciA9PSBOVUxMICk7CiAgICAg cmVxX2lkID0gZ2V0X2RtYV9yZXF1ZXN0b3JfaWQoaW9tbXUtPnNlZywgUENJ X0JERjIoYnVzLCBkZXZmbikpOwogICAgIGR0ZSA9IGlvbW11LT5kZXZfdGFi bGUuYnVmZmVyICsgKHJlcV9pZCAqIElPTU1VX0RFVl9UQUJMRV9FTlRSWV9T SVpFKTsKQEAgLTM5MSw3ICszOTksNyBAQCBzdGF0aWMgaW50IGFtZF9pb21t dV9hc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHU4IGRldmZuLAog ICAgICAgICAgICAgaXZyc19tYXBwaW5nc1tyZXFfaWRdLnJlYWRfcGVybWlz c2lvbik7CiAgICAgfQogCi0gICAgcmV0dXJuIHJlYXNzaWduX2RldmljZSho YXJkd2FyZV9kb21haW4sIGQsIGRldmZuLCBwZGV2KTsKKyAgICByZXR1cm4g cmVhc3NpZ25fZGV2aWNlKHBkZXYtPmRvbWFpbiwgZCwgZGV2Zm4sIHBkZXYp OwogfQogCiBzdGF0aWMgdm9pZCBkZWFsbG9jYXRlX25leHRfcGFnZV90YWJs ZShzdHJ1Y3QgcGFnZV9pbmZvICpwZywgaW50IGxldmVsKQpkaWZmIC0tZ2l0 IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvaW9tbXUuYyBiL3hlbi9kcml2 ZXJzL3Bhc3N0aHJvdWdoL2lvbW11LmMKaW5kZXggYjVmODA0NDQzOS4uYWQy Y2U4ZjM5YiAxMDA2NDQKLS0tIGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gv aW9tbXUuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9pb21tdS5j CkBAIC0yMTksNiArMjE5LDkgQEAgdm9pZCBpb21tdV90ZWFyZG93bihzdHJ1 Y3QgZG9tYWluICpkKQogewogICAgIGNvbnN0IHN0cnVjdCBkb21haW5faW9t bXUgKmhkID0gZG9tX2lvbW11KGQpOwogCisgICAgaWYgKCBkID09IGRvbV9p byApCisgICAgICAgIHJldHVybjsKKwogICAgIGQtPm5lZWRfaW9tbXUgPSAw OwogICAgIGhkLT5wbGF0Zm9ybV9vcHMtPnRlYXJkb3duKGQpOwogICAgIHRh c2tsZXRfc2NoZWR1bGUoJmlvbW11X3B0X2NsZWFudXBfdGFza2xldCk7CkBA IC0yMjksNiArMjMyLDkgQEAgaW50IGlvbW11X2NvbnN0cnVjdChzdHJ1Y3Qg ZG9tYWluICpkKQogICAgIGlmICggbmVlZF9pb21tdShkKSA+IDAgKQogICAg ICAgICByZXR1cm4gMDsKIAorICAgIGlmICggZCA9PSBkb21faW8gKQorICAg ICAgICByZXR1cm4gMDsKKwogICAgIGlmICggIWlvbW11X3VzZV9oYXBfcHQo ZCkgKQogICAgIHsKICAgICAgICAgaW50IHJjOwpAQCAtNDA0LDYgKzQxMCw5 IEBAIGludCBfX2luaXQgaW9tbXVfc2V0dXAodm9pZCkKICAgICBwcmludGso IkkvTyB2aXJ0dWFsaXNhdGlvbiAlc2FibGVkXG4iLCBpb21tdV9lbmFibGVk ID8gImVuIiA6ICJkaXMiKTsKICAgICBpZiAoIGlvbW11X2VuYWJsZWQgKQog ICAgIHsKKyAgICAgICAgaWYgKCBpb21tdV9kb21haW5faW5pdChkb21faW8p ICkKKyAgICAgICAgICAgIHBhbmljKCJDb3VsZCBub3Qgc2V0IHVwIHF1YXJh bnRpbmVcbiIpOworCiAgICAgICAgIHByaW50aygiIC0gRG9tMCBtb2RlOiAl c1xuIiwKICAgICAgICAgICAgICAgIGlvbW11X3Bhc3N0aHJvdWdoID8gIlBh c3N0aHJvdWdoIiA6CiAgICAgICAgICAgICAgICBpb21tdV9kb20wX3N0cmlj dCA/ICJTdHJpY3QiIDogIlJlbGF4ZWQiKTsKZGlmZiAtLWdpdCBhL3hlbi9k cml2ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jIGIveGVuL2RyaXZlcnMvcGFzc3Ro cm91Z2gvcGNpLmMKaW5kZXggZTE2NjhhMTk2OC4uNmIyZTlkMjg5NiAxMDA2 NDQKLS0tIGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMKKysrIGIv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMKQEAgLTEzNTksMTkgKzEz NTksMjkgQEAgc3RhdGljIGludCBpb21tdV9yZW1vdmVfZGV2aWNlKHN0cnVj dCBwY2lfZGV2ICpwZGV2KQogICAgIHJldHVybiBoZC0+cGxhdGZvcm1fb3Bz LT5yZW1vdmVfZGV2aWNlKHBkZXYtPmRldmZuLCBwY2lfdG9fZGV2KHBkZXYp KTsKIH0KIAotLyoKLSAqIElmIHRoZSBkZXZpY2UgaXNuJ3Qgb3duZWQgYnkg dGhlIGhhcmR3YXJlIGRvbWFpbiwgaXQgbWVhbnMgaXQgYWxyZWFkeQotICog aGFzIGJlZW4gYXNzaWduZWQgdG8gb3RoZXIgZG9tYWluLCBvciBpdCBkb2Vz bid0IGV4aXN0LgotICovCiBzdGF0aWMgaW50IGRldmljZV9hc3NpZ25lZCh1 MTYgc2VnLCB1OCBidXMsIHU4IGRldmZuKQogewogICAgIHN0cnVjdCBwY2lf ZGV2ICpwZGV2OworICAgIGludCByYyA9IDA7CiAKICAgICBwY2lkZXZzX2xv Y2soKTsKLSAgICBwZGV2ID0gcGNpX2dldF9wZGV2X2J5X2RvbWFpbihoYXJk d2FyZV9kb21haW4sIHNlZywgYnVzLCBkZXZmbik7CisKKyAgICBwZGV2ID0g cGNpX2dldF9wZGV2KHNlZywgYnVzLCBkZXZmbik7CisKKyAgICBpZiAoICFw ZGV2ICkKKyAgICAgICAgcmMgPSAtRU5PREVWOworICAgIC8qCisgICAgICog SWYgdGhlIGRldmljZSBleGlzdHMgYW5kIGl0IGlzIG5vdCBvd25lZCBieSBl aXRoZXIgdGhlIGhhcmR3YXJlCisgICAgICogZG9tYWluIG9yIGRvbV9pbyB0 aGVuIGl0IG11c3QgYmUgYXNzaWduZWQgdG8gYSBndWVzdCwgb3IgYmUKKyAg ICAgKiBoaWRkZW4gKG93bmVkIGJ5IGRvbV94ZW4pLgorICAgICAqLworICAg IGVsc2UgaWYgKCBwZGV2LT5kb21haW4gIT0gaGFyZHdhcmVfZG9tYWluICYm CisgICAgICAgICAgICAgIHBkZXYtPmRvbWFpbiAhPSBkb21faW8gKQorICAg ICAgICByYyA9IC1FQlVTWTsKKwogICAgIHBjaWRldnNfdW5sb2NrKCk7CiAK LSAgICByZXR1cm4gcGRldiA/IDAgOiAtRUJVU1k7CisgICAgcmV0dXJuIHJj OwogfQogCiBzdGF0aWMgaW50IGFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFp biAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbiwgdTMyIGZsYWcpCkBA IC0xMzg1LDcgKzEzOTUsOCBAQCBzdGF0aWMgaW50IGFzc2lnbl9kZXZpY2Uo c3RydWN0IGRvbWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbiwg dTMyIGZsYWcpCiAKICAgICAvKiBQcmV2ZW50IGRldmljZSBhc3NpZ24gaWYg bWVtIHBhZ2luZyBvciBtZW0gc2hhcmluZyBoYXZlIGJlZW4gCiAgICAgICog ZW5hYmxlZCBmb3IgdGhpcyBkb21haW4gKi8KLSAgICBpZiAoIHVubGlrZWx5 KCFuZWVkX2lvbW11KGQpICYmCisgICAgaWYgKCBkICE9IGRvbV9pbyAmJgor ICAgICAgICAgdW5saWtlbHkoIW5lZWRfaW9tbXUoZCkgJiYKICAgICAgICAg ICAgICgoaXNfaHZtX2RvbWFpbihkKSAmJgogICAgICAgICAgICAgICBkLT5h cmNoLmh2bV9kb21haW4ubWVtX3NoYXJpbmdfZW5hYmxlZCkgfHwKICAgICAg ICAgICAgICB2bV9ldmVudF9jaGVja19yaW5nKGQtPnZtX2V2ZW50X3BhZ2lu ZykgfHwKQEAgLTE0MDIsMTIgKzE0MTMsMjAgQEAgc3RhdGljIGludCBhc3Np Z25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywg dTggZGV2Zm4sIHUzMiBmbGFnKQogICAgICAgICByZXR1cm4gcmM7CiAgICAg fQogCi0gICAgcGRldiA9IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFyZHdh cmVfZG9tYWluLCBzZWcsIGJ1cywgZGV2Zm4pOworICAgIHBkZXYgPSBwY2lf Z2V0X3BkZXYoc2VnLCBidXMsIGRldmZuKTsKKworICAgIHJjID0gLUVOT0RF VjsKICAgICBpZiAoICFwZGV2ICkKLSAgICB7Ci0gICAgICAgIHJjID0gcGNp X2dldF9wZGV2KHNlZywgYnVzLCBkZXZmbikgPyAtRUJVU1kgOiAtRU5PREVW OwogICAgICAgICBnb3RvIGRvbmU7Ci0gICAgfQorCisgICAgcmMgPSAwOwor ICAgIGlmICggZCA9PSBwZGV2LT5kb21haW4gKQorICAgICAgICBnb3RvIGRv bmU7CisKKyAgICByYyA9IC1FQlVTWTsKKyAgICBpZiAoIHBkZXYtPmRvbWFp biAhPSBoYXJkd2FyZV9kb21haW4gJiYKKyAgICAgICAgIHBkZXYtPmRvbWFp biAhPSBkb21faW8gKQorICAgICAgICBnb3RvIGRvbmU7CiAKICAgICBpZiAo IHBkZXYtPm1zaXggKQogICAgICAgICBtc2l4dGJsX2luaXQoZCk7CkBAIC0x NDMwLDYgKzE0NDksMTAgQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogICAgIH0KIAogIGRvbmU6CisgICAgLyogVGhlIGRldmljZSBp cyBhc3NpZ25lZCB0byBkb21faW8gc28gbWFyayBpdCBhcyBxdWFyYW50aW5l ZCAqLworICAgIGlmICggIXJjICYmIGQgPT0gZG9tX2lvICkKKyAgICAgICAg cGRldi0+cXVhcmFudGluZSA9IHRydWU7CisKICAgICBpZiAoICFoYXNfYXJj aF9wZGV2cyhkKSAmJiBuZWVkX2lvbW11KGQpICkKICAgICAgICAgaW9tbXVf dGVhcmRvd24oZCk7CiAgICAgcGNpZGV2c191bmxvY2soKTsKQEAgLTE0NDIs NiArMTQ2NSw3IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFp biAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKIHsKICAgICBjb25z dCBzdHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21tdShkKTsKICAg ICBzdHJ1Y3QgcGNpX2RldiAqcGRldiA9IE5VTEw7CisgICAgc3RydWN0IGRv bWFpbiAqdGFyZ2V0OwogICAgIGludCByZXQgPSAwOwogCiAgICAgaWYgKCAh aW9tbXVfZW5hYmxlZCB8fCAhaGQtPnBsYXRmb3JtX29wcyApCkBAIC0xNDUy LDEyICsxNDc2LDE2IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRv bWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKICAgICBpZiAo ICFwZGV2ICkKICAgICAgICAgcmV0dXJuIC1FTk9ERVY7CiAKKyAgICAvKiBE ZS1hc3NpZ25tZW50IGZyb20gZG9tX2lvIHNob3VsZCBkZS1xdWFyYW50aW5l IHRoZSBkZXZpY2UgKi8KKyAgICB0YXJnZXQgPSAocGRldi0+cXVhcmFudGlu ZSAmJiBwZGV2LT5kb21haW4gIT0gZG9tX2lvKSA/CisgICAgICAgIGRvbV9p byA6IGhhcmR3YXJlX2RvbWFpbjsKKwogICAgIHdoaWxlICggcGRldi0+cGhh bnRvbV9zdHJpZGUgKQogICAgIHsKICAgICAgICAgZGV2Zm4gKz0gcGRldi0+ cGhhbnRvbV9zdHJpZGU7CiAgICAgICAgIGlmICggUENJX1NMT1QoZGV2Zm4p ICE9IFBDSV9TTE9UKHBkZXYtPmRldmZuKSApCiAgICAgICAgICAgICBicmVh azsKLSAgICAgICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3NpZ25f ZGV2aWNlKGQsIGhhcmR3YXJlX2RvbWFpbiwgZGV2Zm4sCisgICAgICAgIHJl dCA9IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2RldmljZShkLCB0YXJn ZXQsIGRldmZuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgcGNpX3RvX2RldihwZGV2KSk7CiAgICAgICAgIGlm ICggIXJldCApCiAgICAgICAgICAgICBjb250aW51ZTsKQEAgLTE0NjgsNyAr MTQ5Niw3IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAq ZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKICAgICB9CiAKICAgICBk ZXZmbiA9IHBkZXYtPmRldmZuOwotICAgIHJldCA9IGhkLT5wbGF0Zm9ybV9v cHMtPnJlYXNzaWduX2RldmljZShkLCBoYXJkd2FyZV9kb21haW4sIGRldmZu LAorICAgIHJldCA9IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2Rldmlj ZShkLCB0YXJnZXQsIGRldmZuLAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBwY2lfdG9fZGV2KHBkZXYpKTsKICAgICBp ZiAoIHJldCApCiAgICAgewpAQCAtMTQ3OCw2ICsxNTA2LDkgQEAgaW50IGRl YXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1MTYgc2VnLCB1OCBi dXMsIHU4IGRldmZuKQogICAgICAgICByZXR1cm4gcmV0OwogICAgIH0KIAor ICAgIGlmICggcGRldi0+ZG9tYWluID09IGhhcmR3YXJlX2RvbWFpbiAgKQor ICAgICAgICBwZGV2LT5xdWFyYW50aW5lID0gZmFsc2U7CisKICAgICBwZGV2 LT5mYXVsdC5jb3VudCA9IDA7CiAKICAgICBpZiAoICFoYXNfYXJjaF9wZGV2 cyhkKSAmJiBuZWVkX2lvbW11KGQpICkKQEAgLTE2NTYsNyArMTY4Nyw3IEBA IGludCBpb21tdV9kb19wY2lfZG9tY3RsKAogICAgICAgICAgICAgcmV0ID0g aHlwZXJjYWxsX2NyZWF0ZV9jb250aW51YXRpb24oX19IWVBFUlZJU09SX2Rv bWN0bCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICJoIiwgdV9kb21jdGwpOwogICAgICAgICBlbHNlIGlmICgg cmV0ICkKLSAgICAgICAgICAgIHByaW50ayhYRU5MT0dfR19FUlIgIlhFTl9E T01DVExfYXNzaWduX2RldmljZTogIgorICAgICAgICAgICAgcHJpbnRrKFhF TkxPR19HX0VSUgogICAgICAgICAgICAgICAgICAgICJhc3NpZ24gJTA0eDol MDJ4OiUwMnguJXUgdG8gZG9tJWQgZmFpbGVkICglZClcbiIsCiAgICAgICAg ICAgICAgICAgICAgc2VnLCBidXMsIFBDSV9TTE9UKGRldmZuKSwgUENJX0ZV TkMoZGV2Zm4pLAogICAgICAgICAgICAgICAgICAgIGQtPmRvbWFpbl9pZCwg cmV0KTsKZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3Z0 ZC9pb21tdS5jIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lvbW11 LmMKaW5kZXggNDgxZWZlZjJiMC4uMWQxNjEyN2Q4ZiAxMDA2NDQKLS0tIGEv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lvbW11LmMKKysrIGIveGVu L2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRkL2lvbW11LmMKQEAgLTEzMzIsNiAr MTMzMiwxMCBAQCBpbnQgZG9tYWluX2NvbnRleHRfbWFwcGluZ19vbmUoCiAg ICAgaW50IGFnYXcsIHJjLCByZXQ7CiAgICAgYm9vbF90IGZsdXNoX2Rldl9p b3RsYjsKIAorICAgIC8qIGRvbV9pbyBpcyB1c2VkIGFzIGEgc2VudGluZWwg Zm9yIHF1YXJhbnRpbmVkIGRldmljZXMgKi8KKyAgICBpZiAoIGRvbWFpbiA9 PSBkb21faW8gKQorICAgICAgICByZXR1cm4gMDsKKwogICAgIEFTU0VSVChw Y2lkZXZzX2xvY2tlZCgpKTsKICAgICBzcGluX2xvY2soJmlvbW11LT5sb2Nr KTsKICAgICBtYWRkciA9IGJ1c190b19jb250ZXh0X21hZGRyKGlvbW11LCBi dXMpOwpAQCAtMTU2Nyw2ICsxNTcxLDEwIEBAIGludCBkb21haW5fY29udGV4 dF91bm1hcF9vbmUoCiAgICAgaW50IGlvbW11X2RvbWlkLCByYywgcmV0Owog ICAgIGJvb2xfdCBmbHVzaF9kZXZfaW90bGI7CiAKKyAgICAvKiBkb21faW8g aXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBkZXZpY2Vz ICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAgICAgcmV0 dXJuIDA7CisKICAgICBBU1NFUlQocGNpZGV2c19sb2NrZWQoKSk7CiAgICAg c3Bpbl9sb2NrKCZpb21tdS0+bG9jayk7CiAKQEAgLTE2OTksNiArMTcwNywx MCBAQCBzdGF0aWMgaW50IGRvbWFpbl9jb250ZXh0X3VubWFwKHN0cnVjdCBk b21haW4gKmRvbWFpbiwgdTggZGV2Zm4sCiAgICAgICAgIGdvdG8gb3V0Owog ICAgIH0KIAorICAgIC8qIGRvbV9pbyBpcyB1c2VkIGFzIGEgc2VudGluZWwg Zm9yIHF1YXJhbnRpbmVkIGRldmljZXMgKi8KKyAgICBpZiAoIGRvbWFpbiA9 PSBkb21faW8gKQorICAgICAgICBnb3RvIG91dDsKKwogICAgIC8qCiAgICAg ICogaWYgbm8gb3RoZXIgZGV2aWNlcyB1bmRlciB0aGUgc2FtZSBpb21tdSBv d25lZCBieSB0aGlzIGRvbWFpbiwKICAgICAgKiBjbGVhciBpb21tdSBpbiBp b21tdV9iaXRtYXAgYW5kIGNsZWFyIGRvbWFpbl9pZCBpbiBkb21pZF9iaXRt cApAQCAtMjM4Myw2ICsyMzk1LDE1IEBAIHN0YXRpYyBpbnQgcmVhc3NpZ25f ZGV2aWNlX293bmVyc2hpcCgKICAgICBpZiAoIHJldCApCiAgICAgICAgIHJl dHVybiByZXQ7CiAKKyAgICBpZiAoIGRldmZuID09IHBkZXYtPmRldmZuICkK KyAgICB7CisgICAgICAgIGxpc3RfbW92ZSgmcGRldi0+ZG9tYWluX2xpc3Qs ICZkb21faW8tPmFyY2gucGRldl9saXN0KTsKKyAgICAgICAgcGRldi0+ZG9t YWluID0gZG9tX2lvOworICAgIH0KKworICAgIGlmICggIWhhc19hcmNoX3Bk ZXZzKHNvdXJjZSkgKQorICAgICAgICB2bXhfcGlfaG9va3NfZGVhc3NpZ24o c291cmNlKTsKKwogICAgIGlmICggIWhhc19hcmNoX3BkZXZzKHRhcmdldCkg KQogICAgICAgICB2bXhfcGlfaG9va3NfYXNzaWduKHRhcmdldCk7CiAKQEAg LTI0MDEsMTUgKzI0MjIsMTMgQEAgc3RhdGljIGludCByZWFzc2lnbl9kZXZp Y2Vfb3duZXJzaGlwKAogICAgICAgICBwZGV2LT5kb21haW4gPSB0YXJnZXQ7 CiAgICAgfQogCi0gICAgaWYgKCAhaGFzX2FyY2hfcGRldnMoc291cmNlKSAp Ci0gICAgICAgIHZteF9waV9ob29rc19kZWFzc2lnbihzb3VyY2UpOwotCiAg ICAgcmV0dXJuIHJldDsKIH0KIAogc3RhdGljIGludCBpbnRlbF9pb21tdV9h c3NpZ25fZGV2aWNlKAogICAgIHN0cnVjdCBkb21haW4gKmQsIHU4IGRldmZu LCBzdHJ1Y3QgcGNpX2RldiAqcGRldiwgdTMyIGZsYWcpCiB7CisgICAgc3Ry dWN0IGRvbWFpbiAqcyA9IHBkZXYtPmRvbWFpbjsKICAgICBzdHJ1Y3QgYWNw aV9ybXJyX3VuaXQgKnJtcnI7CiAgICAgaW50IHJldCA9IDAsIGk7CiAgICAg dTE2IGJkZiwgc2VnOwpAQCAtMjQ1Miw4ICsyNDcxLDggQEAgc3RhdGljIGlu dCBpbnRlbF9pb21tdV9hc3NpZ25fZGV2aWNlKAogICAgICAgICB9CiAgICAg fQogCi0gICAgcmV0ID0gcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcChoYXJk d2FyZV9kb21haW4sIGQsIGRldmZuLCBwZGV2KTsKLSAgICBpZiAoIHJldCAp CisgICAgcmV0ID0gcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcChzLCBkLCBk ZXZmbiwgcGRldik7CisgICAgaWYgKCByZXQgfHwgZCA9PSBkb21faW8gKQog ICAgICAgICByZXR1cm4gcmV0OwogCiAgICAgLyogU2V0dXAgcm1yciBpZGVu dGl0eSBtYXBwaW5nICovCkBAIC0yNDY2LDExICsyNDg1LDIwIEBAIHN0YXRp YyBpbnQgaW50ZWxfaW9tbXVfYXNzaWduX2RldmljZSgKICAgICAgICAgICAg IHJldCA9IHJtcnJfaWRlbnRpdHlfbWFwcGluZyhkLCAxLCBybXJyLCBmbGFn KTsKICAgICAgICAgICAgIGlmICggcmV0ICkKICAgICAgICAgICAgIHsKLSAg ICAgICAgICAgICAgICByZWFzc2lnbl9kZXZpY2Vfb3duZXJzaGlwKGQsIGhh cmR3YXJlX2RvbWFpbiwgZGV2Zm4sIHBkZXYpOworICAgICAgICAgICAgICAg IGludCByYzsKKworICAgICAgICAgICAgICAgIHJjID0gcmVhc3NpZ25fZGV2 aWNlX293bmVyc2hpcChkLCBzLCBkZXZmbiwgcGRldik7CiAgICAgICAgICAg ICAgICAgcHJpbnRrKFhFTkxPR19HX0VSUiBWVERQUkVGSVgKICAgICAgICAg ICAgICAgICAgICAgICAgIiBjYW5ub3QgbWFwIHJlc2VydmVkIHJlZ2lvbiAo JSJQUkl4NjQiLCUiUFJJeDY0Il0gZm9yIERvbSVkICglZClcbiIsCiAgICAg ICAgICAgICAgICAgICAgICAgIHJtcnItPmJhc2VfYWRkcmVzcywgcm1yci0+ ZW5kX2FkZHJlc3MsCiAgICAgICAgICAgICAgICAgICAgICAgIGQtPmRvbWFp bl9pZCwgcmV0KTsKKyAgICAgICAgICAgICAgICBpZiAoIHJjICkKKyAgICAg ICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgICAgIHByaW50ayhYRU5M T0dfRVJSIFZURFBSRUZJWAorICAgICAgICAgICAgICAgICAgICAgICAgICAg IiBmYWlsZWQgdG8gcmVjbGFpbSAlMDR4OiUwMng6JTAyeC4ldSBmcm9tICVw ZCAoJWQpXG4iLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgc2VnLCBi dXMsIFBDSV9TTE9UKGRldmZuKSwgUENJX0ZVTkMoZGV2Zm4pLCBkLCByYyk7 CisgICAgICAgICAgICAgICAgICAgIGRvbWFpbl9jcmFzaChkKTsKKyAgICAg ICAgICAgICAgICB9CiAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg ICAgICB9CiAgICAgICAgIH0KZGlmZiAtLWdpdCBhL3hlbi9pbmNsdWRlL3hl bi9wY2kuaCBiL3hlbi9pbmNsdWRlL3hlbi9wY2kuaAppbmRleCA0M2YyMTI1 MWE1Li4zMjQxZTUxZTNjIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS94ZW4v cGNpLmgKKysrIGIveGVuL2luY2x1ZGUveGVuL3BjaS5oCkBAIC02OCw2ICs2 OCw5IEBAIHN0cnVjdCBwY2lfZGV2IHsKIAogICAgIG5vZGVpZF90IG5vZGU7 IC8qIE5VTUEgbm9kZSAqLwogCisgICAgLyogRGV2aWNlIHRvIGJlIHF1YXJh bnRpbmVkLCBkb24ndCBhdXRvbWF0aWNhbGx5IHJlLWFzc2lnbiB0byBkb20w ICovCisgICAgYm9vbCBxdWFyYW50aW5lOworCiAgICAgZW51bSBwZGV2X3R5 cGUgewogICAgICAgICBERVZfVFlQRV9QQ0lfVU5LTk9XTiwKICAgICAgICAg REVWX1RZUEVfUENJZV9FTkRQT0lOVCwKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa302-4.11/0001-IOMMU-add-missing-HVM-check.patch" Content-Disposition: attachment; filename="xsa302-4.11/0001-IOMMU-add-missing-HVM-check.patch" Content-Transfer-Encoding: base64 RnJvbSBiYmNhMjlmODhkOWFkOWM3ZTkxMTI1YTNiNWQ1ZjEzYTIzZTU4MDFm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFdlZCwgMiBPY3QgMjAxOSAxMzoz Njo1OSArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS8yXSBJT01NVTogYWRkIG1p c3NpbmcgSFZNIGNoZWNrCk1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlw ZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVy LUVuY29kaW5nOiA4Yml0CgpGaXggYW4gdW5ndWFyZGVkIGQtPmFyY2guaHZt IGFjY2VzcyBpbiBhc3NpZ25fZGV2aWNlKCkuCgpTaWduZWQtb2ZmLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBS b2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4KQWNrZWQt Ynk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ CgooY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA0MWZkMTAwOWNkNzQxNmI3 M2Q3NDVhNzdjMjRiNGU4ZDFhMjk2ZmU2KQpTaWduZWQtb2ZmLWJ5OiBJYW4g SmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KLS0tCiB4ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYyB8IDMgKystCiAxIGZpbGUgY2hh bmdlZCwgMiBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0t Z2l0IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgYi94ZW4vZHJp dmVycy9wYXNzdGhyb3VnaC9wY2kuYwppbmRleCBmNTFjYWU3ZjRlLi4wMzdh YmE3Yzk0IDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9w Y2kuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYwpAQCAt MTQxNiw3ICsxNDE2LDggQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogICAgIC8qIFByZXZlbnQgZGV2aWNlIGFzc2lnbiBpZiBtZW0g cGFnaW5nIG9yIG1lbSBzaGFyaW5nIGhhdmUgYmVlbiAKICAgICAgKiBlbmFi bGVkIGZvciB0aGlzIGRvbWFpbiAqLwogICAgIGlmICggdW5saWtlbHkoIW5l ZWRfaW9tbXUoZCkgJiYKLSAgICAgICAgICAgIChkLT5hcmNoLmh2bV9kb21h aW4ubWVtX3NoYXJpbmdfZW5hYmxlZCB8fAorICAgICAgICAgICAgKChpc19o dm1fZG9tYWluKGQpICYmCisgICAgICAgICAgICAgIGQtPmFyY2guaHZtX2Rv bWFpbi5tZW1fc2hhcmluZ19lbmFibGVkKSB8fAogICAgICAgICAgICAgIHZt X2V2ZW50X2NoZWNrX3JpbmcoZC0+dm1fZXZlbnRfcGFnaW5nKSB8fAogICAg ICAgICAgICAgIHAybV9nZXRfaG9zdHAybShkKS0+Z2xvYmFsX2xvZ2RpcnR5 KSkgKQogICAgICAgICByZXR1cm4gLUVYREVWOwotLSAKMi4xMS4wCgo= --=separator Content-Type: application/octet-stream; name="xsa302-4.11/0002-passthrough-quarantine-PCI-devices.patch" Content-Disposition: attachment; filename="xsa302-4.11/0002-passthrough-quarantine-PCI-devices.patch" Content-Transfer-Encoding: base64 RnJvbSBlYzk5ODU3ZjU5ZjdmMDYyMzZmMTFjYThiMGIyMzAzZTVlNzQ1Y2M0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIER1cnJhbnQg PHBhdWwuZHVycmFudEBjaXRyaXguY29tPgpEYXRlOiBNb24sIDE0IE9jdCAy MDE5IDE3OjUyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzJdIHBhc3N0 aHJvdWdoOiBxdWFyYW50aW5lIFBDSSBkZXZpY2VzCgpXaGVuIGEgUENJIGRl dmljZSBpcyBhc3NpZ25lZCB0byBhbiB1bnRydXN0ZWQgZG9tYWluLCBpdCBp cyBwb3NzaWJsZSBmb3IKdGhhdCBkb21haW4gdG8gcHJvZ3JhbSB0aGUgZGV2 aWNlIHRvIERNQSB0byBhbiBhcmJpdHJhcnkgYWRkcmVzcy4gVGhlCklPTU1V IGlzIHVzZWQgdG8gcHJvdGVjdCB0aGUgaG9zdCBmcm9tIG1hbGljaW91cyBE TUEgYnkgbWFraW5nIHN1cmUgdGhhdAp0aGUgZGV2aWNlIGFkZHJlc3NlcyBj YW4gb25seSB0YXJnZXQgbWVtb3J5IGFzc2lnbmVkIHRvIHRoZSBndWVzdC4g SG93ZXZlciwKd2hlbiB0aGUgZ3Vlc3QgZG9tYWluIGlzIHRvcm4gZG93biB0 aGUgZGV2aWNlIGlzIGFzc2lnbmVkIGJhY2sgdG8gZG9tMCwKdGh1cyBhbGxv d2luZyBhbnkgaW4tZmxpZ2h0IERNQSB0byBwb3RlbnRpYWxseSB0YXJnZXQg Y3JpdGljYWwgaG9zdCBkYXRhLgoKVGhpcyBwYXRjaCBpbnRyb2R1Y2VzIGEg J3F1YXJhbnRpbmUnIGZvciBQQ0kgZGV2aWNlcyB1c2luZyBkb21faW8uIFdo ZW4KdGhlIHRvb2xzdGFjayBtYWtlcyBhIGRldmljZSBhc3NpZ25hYmxlIChi eSBiaW5kaW5nIGl0IHRvIHBjaWJhY2spLCBpdAp3aWxsIG5vdyBhbHNvIGFz c2lnbiBpdCB0byBET01JRF9JTyBhbmQgdGhlIGRldmljZSB3aWxsIG9ubHkg YmUgYXNzaWduZWQKYmFjayB0byBkb20wIHdoZW4gdGhlIGRldmljZSBpcyBt YWRlIHVuYXNzaWduYWJsZSBhZ2Fpbi4gV2hpbHN0IGRldmljZSBpcwphc3Np Z25hYmxlIGl0IHdpbGwgb25seSBldmVyIHRyYW5zZmVyIGJldHdlZW4gZG9t X2lvIGFuZCBndWVzdCBkb21haW5zLgpkb21faW8gaXMgYWN0dWFsbHkgb25s eSB1c2VkIGFzIGEgc2VudGluZWwgZG9tYWluIGZvciBxdWFyYW50aW5pbmcg cHVycG9zZXM7Cml0IGlzIG5vdCBjb25maWd1cmVkIHdpdGggYW55IElPTU1V IG1hcHBpbmdzLiBBc3NpZ25tZW50IHRvIGRvbV9pbyBzaW1wbHkKbWVhbnMg dGhhdCB0aGUgZGV2aWNlJ3MgaW5pdGlhdG9yIChyZXF1ZXN0b3IpIGlkZW50 aWZpZXIgaXMgbm90IHByZXNlbnQgaW4KdGhlIElPTU1VJ3MgZGV2aWNlIHRh YmxlIGFuZCB0aHVzIGFueSBETUEgdHJhbnNhY3Rpb25zIGlzc3VlZCB3aWxs IGJlCnRlcm1pbmF0ZWQgd2l0aCBhIGZhdWx0IGNvbmRpdGlvbi4KCkluIGFk ZGl0aW9uLCBhIGZpeCB0byBhc3NpZ25tZW50IGhhbmRsaW5nIGlzIG1hZGUg Zm9yIFZULWQuICBGYWlsdXJlCmR1cmluZyB0aGUgYXNzaWdubWVudCBzdGVw IHNob3VsZCBub3QgbGVhZCB0byBhIGRldmljZSBzdGlsbCBiZWluZwphc3Nv Y2lhdGVkIHdpdGggaXRzIHByaW9yIG93bmVyLiBIYW5kIHRoZSBkZXZpY2Ug dG8gRG9tSU8gdGVtcG9yYXJpbHksCnVudGlsIHRoZSBhc3NpZ25tZW50IHN0 ZXAgaGFzIGNvbXBsZXRlZCBzdWNjZXNzZnVsbHkuICBSZW1vdmUgdGhlIFBJ Cmhvb2tzIGZyb20gdGhlIHNvdXJjZSBkb21haW4gdGhlbiBlYXJsaWVyIGFz IHdlbGwuCgpGYWlsdXJlIG9mIHRoZSByZWNvdmVyeSByZWFzc2lnbl9kZXZp Y2Vfb3duZXJzaGlwKCkgbWF5IG5vdCBnbyBzaWxlbnQ6ClRoZXJlIGUuZy4g bWF5IHN0aWxsIGJlIGxlZnQgb3ZlciBSTVJSIG1hcHBpbmdzIGluIHRoZSBk b21haW4gYXNzaWdubWVudAp0byB3aGljaCBoYXMgZmFpbGVkLCBhbmQgaGVu Y2Ugd2UgY2FuJ3QgYWxsb3cgdGhhdCBkb21haW4gdG8gY29udGludWUKZXhl Y3V0aW5nLgoKTk9URTogVGhpcyBwYXRjaCBhbHNvIGluY2x1ZGVzIG9uZSBw cmludGsoKSBjbGVhbnVwOyB0aGUKICAgICAgIlhFTl9ET01DVExfYXNzaWdu X2RldmljZTogIiB0YWcgaXMgZHJvcHBlZCBpbiBpb21tdV9kb19wY2lfZG9t Y3RsKCksCiAgICAgIHNpbmNlIHNpbWlsYXIgcHJpbnRrKCktcyBlbHNld2hl cmUgYWxzbyBkb24ndCBsb2cgc3VjaCBhIHRhZy4KClRoaXMgaXMgWFNBLTMw Mi4KClNpZ25lZC1vZmYtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50 QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIEphY2tzb24gPGlh bi5qYWNrc29uQGV1LmNpdHJpeC5jb20+Ci0tLQogdG9vbHMvbGlieGwvbGli eGxfcGNpLmMgICAgICAgICAgICAgICAgICAgICB8IDI1ICsrKysrKysrKysr LQogeGVuL2FyY2gveDg2L21tLmMgICAgICAgICAgICAgICAgICAgICAgICAg ICB8ICAyICsKIHhlbi9jb21tb24vZG9tY3RsLmMgICAgICAgICAgICAgICAg ICAgICAgICAgfCAxNCArKysrKystCiB4ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9hbWQvcGNpX2FtZF9pb21tdS5jIHwgMTAgKysrKy0KIHhlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL2lvbW11LmMgICAgICAgICAgICAgfCAgOSArKysrKwog eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgICAgICAgICAgICAgICB8 IDU5ICsrKysrKysrKysrKysrKysrKysrKystLS0tLS0tCiB4ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC92dGQvaW9tbXUuYyAgICAgICAgIHwgNDAgKysrKysr KysrKysrKysrKy0tLQogeGVuL2luY2x1ZGUveGVuL3BjaS5oICAgICAgICAg ICAgICAgICAgICAgICB8ICAzICsrCiA4IGZpbGVzIGNoYW5nZWQsIDEzOCBp bnNlcnRpb25zKCspLCAyNCBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS90 b29scy9saWJ4bC9saWJ4bF9wY2kuYyBiL3Rvb2xzL2xpYnhsL2xpYnhsX3Bj aS5jCmluZGV4IDQ3NTVhMGM5M2MuLjgxODkwYTkxYWMgMTAwNjQ0Ci0tLSBh L3Rvb2xzL2xpYnhsL2xpYnhsX3BjaS5jCisrKyBiL3Rvb2xzL2xpYnhsL2xp YnhsX3BjaS5jCkBAIC03NTQsNiArNzU0LDcgQEAgc3RhdGljIGludCBsaWJ4 bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX2FkZChsaWJ4bF9fZ2MgKmdjLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBs aWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGludCByZWJpbmQpCiB7CisgICAg bGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3duZXIoZ2MpOwogICAgIHVu c2lnbmVkIGRvbSwgYnVzLCBkZXYsIGZ1bmM7CiAgICAgY2hhciAqc3BhdGgs ICpkcml2ZXJfcGF0aCA9IE5VTEw7CiAgICAgaW50IHJjOwpAQCAtNzc5LDcg Kzc4MCw3IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNzaWdu YWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICB9CiAgICAgaWYgKCByYyAp IHsKICAgICAgICAgTE9HKFdBUk4sIFBDSV9CREYiIGFscmVhZHkgYXNzaWdu ZWQgdG8gcGNpYmFjayIsIGRvbSwgYnVzLCBkZXYsIGZ1bmMpOwotICAgICAg ICByZXR1cm4gMDsKKyAgICAgICAgZ290byBxdWFyYW50aW5lOwogICAgIH0K IAogICAgIC8qIENoZWNrIHRvIHNlZSBpZiB0aGVyZSdzIGFscmVhZHkgYSBk cml2ZXIgdGhhdCB3ZSBuZWVkIHRvIHVuYmluZCBmcm9tICovCkBAIC04MTAs NiArODExLDE5IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNz aWduYWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICAgICAgcmV0dXJuIEVS Uk9SX0ZBSUw7CiAgICAgfQogCitxdWFyYW50aW5lOgorICAgIC8qCisgICAg ICogRE9NSURfSU8gaXMganVzdCBhIHNlbnRpbmVsIGRvbWFpbiwgd2l0aG91 dCBhbnkgYWN0dWFsIG1hcHBpbmdzLAorICAgICAqIHNvIGFsd2F5cyBwYXNz IFhFTl9ET01DVExfREVWX1JETV9SRUxBWEVEIHRvIGF2b2lkIGFzc2lnbm1l bnQgYmVpbmcKKyAgICAgKiB1bm5lY2Vzc2FyaWx5IGRlbmllZC4KKyAgICAg Ki8KKyAgICByYyA9IHhjX2Fzc2lnbl9kZXZpY2UoY3R4LT54Y2gsIERPTUlE X0lPLCBwY2lkZXZfZW5jb2RlX2JkZihwY2lkZXYpLAorICAgICAgICAgICAg ICAgICAgICAgICAgICBYRU5fRE9NQ1RMX0RFVl9SRE1fUkVMQVhFRCk7Cisg ICAgaWYgKCByYyA8IDAgKSB7CisgICAgICAgIExPRyhFUlJPUiwgImZhaWxl ZCB0byBxdWFyYW50aW5lICJQQ0lfQkRGLCBkb20sIGJ1cywgZGV2LCBmdW5j KTsKKyAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CisgICAgfQorCiAgICAg cmV0dXJuIDA7CiB9CiAKQEAgLTgxNyw5ICs4MzEsMTggQEAgc3RhdGljIGlu dCBsaWJ4bF9fZGV2aWNlX3BjaV9hc3NpZ25hYmxlX3JlbW92ZShsaWJ4bF9f Z2MgKmdjLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBsaWJ4bF9kZXZpY2VfcGNpICpwY2lkZXYsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGludCBy ZWJpbmQpCiB7CisgICAgbGlieGxfY3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3du ZXIoZ2MpOwogICAgIGludCByYzsKICAgICBjaGFyICpkcml2ZXJfcGF0aDsK IAorICAgIC8qIERlLXF1YXJhbnRpbmUgKi8KKyAgICByYyA9IHhjX2RlYXNz aWduX2RldmljZShjdHgtPnhjaCwgRE9NSURfSU8sIHBjaWRldl9lbmNvZGVf YmRmKHBjaWRldikpOworICAgIGlmICggcmMgPCAwICkgeworICAgICAgICBM T0coRVJST1IsICJmYWlsZWQgdG8gZGUtcXVhcmFudGluZSAiUENJX0JERiwg cGNpZGV2LT5kb21haW4sIHBjaWRldi0+YnVzLAorICAgICAgICAgICAgcGNp ZGV2LT5kZXYsIHBjaWRldi0+ZnVuYyk7CisgICAgICAgIHJldHVybiBFUlJP Ul9GQUlMOworICAgIH0KKwogICAgIC8qIFVuYmluZCBmcm9tIHBjaWJhY2sg Ki8KICAgICBpZiAoIChyYz1wY2liYWNrX2Rldl9pc19hc3NpZ25lZChnYywg cGNpZGV2KSkgPCAwICkgewogICAgICAgICByZXR1cm4gRVJST1JfRkFJTDsK ZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS5jIGIveGVuL2FyY2gveDg2 L21tLmMKaW5kZXggZTZhNGNiMjhmOC4uYzFhYjU3ZjlhNSAxMDA2NDQKLS0t IGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIveGVuL2FyY2gveDg2L21tLmMK QEAgLTI5NSw5ICsyOTUsMTEgQEAgdm9pZCBfX2luaXQgYXJjaF9pbml0X21l bW9yeSh2b2lkKQogICAgICAqIEluaXRpYWxpc2Ugb3VyIERPTUlEX0lPIGRv bWFpbi4KICAgICAgKiBUaGlzIGRvbWFpbiBvd25zIEkvTyBwYWdlcyB0aGF0 IGFyZSB3aXRoaW4gdGhlIHJhbmdlIG9mIHRoZSBwYWdlX2luZm8KICAgICAg KiBhcnJheS4gTWFwcGluZ3Mgb2NjdXIgYXQgdGhlIHByaXYgb2YgdGhlIGNh bGxlci4KKyAgICAgKiBRdWFyYW50aW5lZCBQQ0kgZGV2aWNlcyB3aWxsIGJl IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGRvbWFpbi4KICAgICAgKi8KICAgICBk b21faW8gPSBkb21haW5fY3JlYXRlKERPTUlEX0lPLCBOVUxMKTsKICAgICBC VUdfT04oSVNfRVJSKGRvbV9pbykpOworICAgIElOSVRfTElTVF9IRUFEKCZk b21faW8tPmFyY2gucGRldl9saXN0KTsKIAogICAgIC8qCiAgICAgICogSW5p dGlhbGlzZSBvdXIgQ09XIGRvbWFpbi4KZGlmZiAtLWdpdCBhL3hlbi9jb21t b24vZG9tY3RsLmMgYi94ZW4vY29tbW9uL2RvbWN0bC5jCmluZGV4IDliN2Jj MDgzZWUuLjc0MWQ3NzRjZDEgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vZG9t Y3RsLmMKKysrIGIveGVuL2NvbW1vbi9kb21jdGwuYwpAQCAtMzkyLDYgKzM5 MiwxNiBAQCBsb25nIGRvX2RvbWN0bChYRU5fR1VFU1RfSEFORExFX1BBUkFN KHhlbl9kb21jdGxfdCkgdV9kb21jdGwpCiAKICAgICBzd2l0Y2ggKCBvcC0+ Y21kICkKICAgICB7CisgICAgY2FzZSBYRU5fRE9NQ1RMX2Fzc2lnbl9kZXZp Y2U6CisgICAgY2FzZSBYRU5fRE9NQ1RMX2RlYXNzaWduX2RldmljZToKKyAg ICAgICAgaWYgKCBvcC0+ZG9tYWluID09IERPTUlEX0lPICkKKyAgICAgICAg eworICAgICAgICAgICAgZCA9IGRvbV9pbzsKKyAgICAgICAgICAgIGJyZWFr OworICAgICAgICB9CisgICAgICAgIGVsc2UgaWYgKCBvcC0+ZG9tYWluID09 IERPTUlEX0lOVkFMSUQgKQorICAgICAgICAgICAgcmV0dXJuIC1FU1JDSDsK KyAgICAgICAgLyogZmFsbCB0aHJvdWdoICovCiAgICAgY2FzZSBYRU5fRE9N Q1RMX3Rlc3RfYXNzaWduX2RldmljZToKICAgICAgICAgaWYgKCBvcC0+ZG9t YWluID09IERPTUlEX0lOVkFMSUQgKQogICAgICAgICB7CkBAIC00MTMsNyAr NDIzLDcgQEAgbG9uZyBkb19kb21jdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJB TSh4ZW5fZG9tY3RsX3QpIHVfZG9tY3RsKQogCiAgICAgaWYgKCAhZG9tY3Rs X2xvY2tfYWNxdWlyZSgpICkKICAgICB7Ci0gICAgICAgIGlmICggZCApCisg ICAgICAgIGlmICggZCAmJiBkICE9IGRvbV9pbyApCiAgICAgICAgICAgICBy Y3VfdW5sb2NrX2RvbWFpbihkKTsKICAgICAgICAgcmV0dXJuIGh5cGVyY2Fs bF9jcmVhdGVfY29udGludWF0aW9uKAogICAgICAgICAgICAgX19IWVBFUlZJ U09SX2RvbWN0bCwgImgiLCB1X2RvbWN0bCk7CkBAIC0xMTQ4LDcgKzExNTgs NyBAQCBsb25nIGRvX2RvbWN0bChYRU5fR1VFU1RfSEFORExFX1BBUkFNKHhl bl9kb21jdGxfdCkgdV9kb21jdGwpCiAgICAgZG9tY3RsX2xvY2tfcmVsZWFz ZSgpOwogCiAgZG9tY3RsX291dF91bmxvY2tfZG9tb25seToKLSAgICBpZiAo IGQgKQorICAgIGlmICggZCAmJiBkICE9IGRvbV9pbyApCiAgICAgICAgIHJj dV91bmxvY2tfZG9tYWluKGQpOwogCiAgICAgaWYgKCBjb3B5YmFjayAmJiBf X2NvcHlfdG9fZ3Vlc3QodV9kb21jdGwsIG9wLCAxKSApCmRpZmYgLS1naXQg YS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9pb21tdS5j IGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvYW1kL3BjaV9hbWRfaW9tbXUu YwppbmRleCAxMmQyNjk1Yjg5Li5lYzhiYWFlNzE3IDEwMDY0NAotLS0gYS94 ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9pb21tdS5jCisr KyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2FtZC9wY2lfYW1kX2lvbW11 LmMKQEAgLTExOCw2ICsxMTgsMTAgQEAgc3RhdGljIHZvaWQgYW1kX2lvbW11 X3NldHVwX2RvbWFpbl9kZXZpY2UoCiAgICAgdTggYnVzID0gcGRldi0+YnVz OwogICAgIGNvbnN0IHN0cnVjdCBkb21haW5faW9tbXUgKmhkID0gZG9tX2lv bW11KGRvbWFpbik7CiAKKyAgICAvKiBkb21faW8gaXMgdXNlZCBhcyBhIHNl bnRpbmVsIGZvciBxdWFyYW50aW5lZCBkZXZpY2VzICovCisgICAgaWYgKCBk b21haW4gPT0gZG9tX2lvICkKKyAgICAgICAgcmV0dXJuOworCiAgICAgQlVH X09OKCAhaGQtPmFyY2gucm9vdF90YWJsZSB8fCAhaGQtPmFyY2gucGFnaW5n X21vZGUgfHwKICAgICAgICAgICAgICFpb21tdS0+ZGV2X3RhYmxlLmJ1ZmZl ciApOwogCkBAIC0zMDUsNiArMzA5LDEwIEBAIHZvaWQgYW1kX2lvbW11X2Rp c2FibGVfZG9tYWluX2RldmljZShzdHJ1Y3QgZG9tYWluICpkb21haW4sCiAg ICAgaW50IHJlcV9pZDsKICAgICB1OCBidXMgPSBwZGV2LT5idXM7CiAKKyAg ICAvKiBkb21faW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50 aW5lZCBkZXZpY2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkK KyAgICAgICAgcmV0dXJuOworCiAgICAgQlVHX09OICggaW9tbXUtPmRldl90 YWJsZS5idWZmZXIgPT0gTlVMTCApOwogICAgIHJlcV9pZCA9IGdldF9kbWFf cmVxdWVzdG9yX2lkKGlvbW11LT5zZWcsIFBDSV9CREYyKGJ1cywgZGV2Zm4p KTsKICAgICBkdGUgPSBpb21tdS0+ZGV2X3RhYmxlLmJ1ZmZlciArIChyZXFf aWQgKiBJT01NVV9ERVZfVEFCTEVfRU5UUllfU0laRSk7CkBAIC0zOTEsNyAr Mzk5LDcgQEAgc3RhdGljIGludCBhbWRfaW9tbXVfYXNzaWduX2RldmljZShz dHJ1Y3QgZG9tYWluICpkLCB1OCBkZXZmbiwKICAgICAgICAgICAgIGl2cnNf bWFwcGluZ3NbcmVxX2lkXS5yZWFkX3Blcm1pc3Npb24pOwogICAgIH0KIAot ICAgIHJldHVybiByZWFzc2lnbl9kZXZpY2UoaGFyZHdhcmVfZG9tYWluLCBk LCBkZXZmbiwgcGRldik7CisgICAgcmV0dXJuIHJlYXNzaWduX2RldmljZShw ZGV2LT5kb21haW4sIGQsIGRldmZuLCBwZGV2KTsKIH0KIAogc3RhdGljIHZv aWQgZGVhbGxvY2F0ZV9uZXh0X3BhZ2VfdGFibGUoc3RydWN0IHBhZ2VfaW5m byAqcGcsIGludCBsZXZlbCkKZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bh c3N0aHJvdWdoL2lvbW11LmMgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9p b21tdS5jCmluZGV4IDA0YjBiZTM3ZDMuLjgwMjdkOTZmMWMgMTAwNjQ0Ci0t LSBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2lvbW11LmMKKysrIGIveGVu L2RyaXZlcnMvcGFzc3Rocm91Z2gvaW9tbXUuYwpAQCAtMjE5LDYgKzIxOSw5 IEBAIHZvaWQgaW9tbXVfdGVhcmRvd24oc3RydWN0IGRvbWFpbiAqZCkKIHsK ICAgICBjb25zdCBzdHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21t dShkKTsKIAorICAgIGlmICggZCA9PSBkb21faW8gKQorICAgICAgICByZXR1 cm47CisKICAgICBkLT5uZWVkX2lvbW11ID0gMDsKICAgICBoZC0+cGxhdGZv cm1fb3BzLT50ZWFyZG93bihkKTsKICAgICB0YXNrbGV0X3NjaGVkdWxlKCZp b21tdV9wdF9jbGVhbnVwX3Rhc2tsZXQpOwpAQCAtMjI5LDYgKzIzMiw5IEBA IGludCBpb21tdV9jb25zdHJ1Y3Qoc3RydWN0IGRvbWFpbiAqZCkKICAgICBp ZiAoIG5lZWRfaW9tbXUoZCkgPiAwICkKICAgICAgICAgcmV0dXJuIDA7CiAK KyAgICBpZiAoIGQgPT0gZG9tX2lvICkKKyAgICAgICAgcmV0dXJuIDA7CisK ICAgICBpZiAoICFpb21tdV91c2VfaGFwX3B0KGQpICkKICAgICB7CiAgICAg ICAgIGludCByYzsKQEAgLTQwNCw2ICs0MTAsOSBAQCBpbnQgX19pbml0IGlv bW11X3NldHVwKHZvaWQpCiAgICAgcHJpbnRrKCJJL08gdmlydHVhbGlzYXRp b24gJXNhYmxlZFxuIiwgaW9tbXVfZW5hYmxlZCA/ICJlbiIgOiAiZGlzIik7 CiAgICAgaWYgKCBpb21tdV9lbmFibGVkICkKICAgICB7CisgICAgICAgIGlm ICggaW9tbXVfZG9tYWluX2luaXQoZG9tX2lvKSApCisgICAgICAgICAgICBw YW5pYygiQ291bGQgbm90IHNldCB1cCBxdWFyYW50aW5lXG4iKTsKKwogICAg ICAgICBwcmludGsoIiAtIERvbTAgbW9kZTogJXNcbiIsCiAgICAgICAgICAg ICAgICBpb21tdV9wYXNzdGhyb3VnaCA/ICJQYXNzdGhyb3VnaCIgOgogICAg ICAgICAgICAgICAgaW9tbXVfZG9tMF9zdHJpY3QgPyAiU3RyaWN0IiA6ICJS ZWxheGVkIik7CmRpZmYgLS1naXQgYS94ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9wY2kuYyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jCmluZGV4 IDAzN2FiYTdjOTQuLmZiMDEwYTU0N2IgMTAwNjQ0Ci0tLSBhL3hlbi9kcml2 ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jCisrKyBiL3hlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL3BjaS5jCkBAIC0xMzg5LDE5ICsxMzg5LDI5IEBAIHN0YXRpYyBp bnQgaW9tbXVfcmVtb3ZlX2RldmljZShzdHJ1Y3QgcGNpX2RldiAqcGRldikK ICAgICByZXR1cm4gaGQtPnBsYXRmb3JtX29wcy0+cmVtb3ZlX2RldmljZShw ZGV2LT5kZXZmbiwgcGNpX3RvX2RldihwZGV2KSk7CiB9CiAKLS8qCi0gKiBJ ZiB0aGUgZGV2aWNlIGlzbid0IG93bmVkIGJ5IHRoZSBoYXJkd2FyZSBkb21h aW4sIGl0IG1lYW5zIGl0IGFscmVhZHkKLSAqIGhhcyBiZWVuIGFzc2lnbmVk IHRvIG90aGVyIGRvbWFpbiwgb3IgaXQgZG9lc24ndCBleGlzdC4KLSAqLwog c3RhdGljIGludCBkZXZpY2VfYXNzaWduZWQodTE2IHNlZywgdTggYnVzLCB1 OCBkZXZmbikKIHsKICAgICBzdHJ1Y3QgcGNpX2RldiAqcGRldjsKKyAgICBp bnQgcmMgPSAwOwogCiAgICAgcGNpZGV2c19sb2NrKCk7Ci0gICAgcGRldiA9 IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFyZHdhcmVfZG9tYWluLCBzZWcs IGJ1cywgZGV2Zm4pOworCisgICAgcGRldiA9IHBjaV9nZXRfcGRldihzZWcs IGJ1cywgZGV2Zm4pOworCisgICAgaWYgKCAhcGRldiApCisgICAgICAgIHJj ID0gLUVOT0RFVjsKKyAgICAvKgorICAgICAqIElmIHRoZSBkZXZpY2UgZXhp c3RzIGFuZCBpdCBpcyBub3Qgb3duZWQgYnkgZWl0aGVyIHRoZSBoYXJkd2Fy ZQorICAgICAqIGRvbWFpbiBvciBkb21faW8gdGhlbiBpdCBtdXN0IGJlIGFz c2lnbmVkIHRvIGEgZ3Vlc3QsIG9yIGJlCisgICAgICogaGlkZGVuIChvd25l ZCBieSBkb21feGVuKS4KKyAgICAgKi8KKyAgICBlbHNlIGlmICggcGRldi0+ ZG9tYWluICE9IGhhcmR3YXJlX2RvbWFpbiAmJgorICAgICAgICAgICAgICBw ZGV2LT5kb21haW4gIT0gZG9tX2lvICkKKyAgICAgICAgcmMgPSAtRUJVU1k7 CisKICAgICBwY2lkZXZzX3VubG9jaygpOwogCi0gICAgcmV0dXJuIHBkZXYg PyAwIDogLUVCVVNZOworICAgIHJldHVybiByYzsKIH0KIAogc3RhdGljIGlu dCBhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4 IGJ1cywgdTggZGV2Zm4sIHUzMiBmbGFnKQpAQCAtMTQxNSw3ICsxNDI1LDgg QEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQs IHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUzMiBmbGFnKQogCiAgICAg LyogUHJldmVudCBkZXZpY2UgYXNzaWduIGlmIG1lbSBwYWdpbmcgb3IgbWVt IHNoYXJpbmcgaGF2ZSBiZWVuIAogICAgICAqIGVuYWJsZWQgZm9yIHRoaXMg ZG9tYWluICovCi0gICAgaWYgKCB1bmxpa2VseSghbmVlZF9pb21tdShkKSAm JgorICAgIGlmICggZCAhPSBkb21faW8gJiYKKyAgICAgICAgIHVubGlrZWx5 KCFuZWVkX2lvbW11KGQpICYmCiAgICAgICAgICAgICAoKGlzX2h2bV9kb21h aW4oZCkgJiYKICAgICAgICAgICAgICAgZC0+YXJjaC5odm1fZG9tYWluLm1l bV9zaGFyaW5nX2VuYWJsZWQpIHx8CiAgICAgICAgICAgICAgdm1fZXZlbnRf Y2hlY2tfcmluZyhkLT52bV9ldmVudF9wYWdpbmcpIHx8CkBAIC0xNDMyLDEy ICsxNDQzLDIwIEBAIHN0YXRpYyBpbnQgYXNzaWduX2RldmljZShzdHJ1Y3Qg ZG9tYWluICpkLCB1MTYgc2VnLCB1OCBidXMsIHU4IGRldmZuLCB1MzIgZmxh ZykKICAgICAgICAgcmV0dXJuIHJjOwogICAgIH0KIAotICAgIHBkZXYgPSBw Y2lfZ2V0X3BkZXZfYnlfZG9tYWluKGhhcmR3YXJlX2RvbWFpbiwgc2VnLCBi dXMsIGRldmZuKTsKKyAgICBwZGV2ID0gcGNpX2dldF9wZGV2KHNlZywgYnVz LCBkZXZmbik7CisKKyAgICByYyA9IC1FTk9ERVY7CiAgICAgaWYgKCAhcGRl diApCi0gICAgewotICAgICAgICByYyA9IHBjaV9nZXRfcGRldihzZWcsIGJ1 cywgZGV2Zm4pID8gLUVCVVNZIDogLUVOT0RFVjsKICAgICAgICAgZ290byBk b25lOwotICAgIH0KKworICAgIHJjID0gMDsKKyAgICBpZiAoIGQgPT0gcGRl di0+ZG9tYWluICkKKyAgICAgICAgZ290byBkb25lOworCisgICAgcmMgPSAt RUJVU1k7CisgICAgaWYgKCBwZGV2LT5kb21haW4gIT0gaGFyZHdhcmVfZG9t YWluICYmCisgICAgICAgICBwZGV2LT5kb21haW4gIT0gZG9tX2lvICkKKyAg ICAgICAgZ290byBkb25lOwogCiAgICAgaWYgKCBwZGV2LT5tc2l4ICkKICAg ICAgICAgbXNpeHRibF9pbml0KGQpOwpAQCAtMTQ2MCw2ICsxNDc5LDEwIEBA IHN0YXRpYyBpbnQgYXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1 MTYgc2VnLCB1OCBidXMsIHU4IGRldmZuLCB1MzIgZmxhZykKICAgICB9CiAK ICBkb25lOgorICAgIC8qIFRoZSBkZXZpY2UgaXMgYXNzaWduZWQgdG8gZG9t X2lvIHNvIG1hcmsgaXQgYXMgcXVhcmFudGluZWQgKi8KKyAgICBpZiAoICFy YyAmJiBkID09IGRvbV9pbyApCisgICAgICAgIHBkZXYtPnF1YXJhbnRpbmUg PSB0cnVlOworCiAgICAgaWYgKCAhaGFzX2FyY2hfcGRldnMoZCkgJiYgbmVl ZF9pb21tdShkKSApCiAgICAgICAgIGlvbW11X3RlYXJkb3duKGQpOwogICAg IHBjaWRldnNfdW5sb2NrKCk7CkBAIC0xNDcyLDYgKzE0OTUsNyBAQCBpbnQg ZGVhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4 IGJ1cywgdTggZGV2Zm4pCiB7CiAgICAgY29uc3Qgc3RydWN0IGRvbWFpbl9p b21tdSAqaGQgPSBkb21faW9tbXUoZCk7CiAgICAgc3RydWN0IHBjaV9kZXYg KnBkZXYgPSBOVUxMOworICAgIHN0cnVjdCBkb21haW4gKnRhcmdldDsKICAg ICBpbnQgcmV0ID0gMDsKIAogICAgIGlmICggIWlvbW11X2VuYWJsZWQgfHwg IWhkLT5wbGF0Zm9ybV9vcHMgKQpAQCAtMTQ4MiwxMiArMTUwNiwxNiBAQCBp bnQgZGVhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcs IHU4IGJ1cywgdTggZGV2Zm4pCiAgICAgaWYgKCAhcGRldiApCiAgICAgICAg IHJldHVybiAtRU5PREVWOwogCisgICAgLyogRGUtYXNzaWdubWVudCBmcm9t IGRvbV9pbyBzaG91bGQgZGUtcXVhcmFudGluZSB0aGUgZGV2aWNlICovCisg ICAgdGFyZ2V0ID0gKHBkZXYtPnF1YXJhbnRpbmUgJiYgcGRldi0+ZG9tYWlu ICE9IGRvbV9pbykgPworICAgICAgICBkb21faW8gOiBoYXJkd2FyZV9kb21h aW47CisKICAgICB3aGlsZSAoIHBkZXYtPnBoYW50b21fc3RyaWRlICkKICAg ICB7CiAgICAgICAgIGRldmZuICs9IHBkZXYtPnBoYW50b21fc3RyaWRlOwog ICAgICAgICBpZiAoIFBDSV9TTE9UKGRldmZuKSAhPSBQQ0lfU0xPVChwZGV2 LT5kZXZmbikgKQogICAgICAgICAgICAgYnJlYWs7Ci0gICAgICAgIHJldCA9 IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2RldmljZShkLCBoYXJkd2Fy ZV9kb21haW4sIGRldmZuLAorICAgICAgICByZXQgPSBoZC0+cGxhdGZvcm1f b3BzLT5yZWFzc2lnbl9kZXZpY2UoZCwgdGFyZ2V0LCBkZXZmbiwKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHBj aV90b19kZXYocGRldikpOwogICAgICAgICBpZiAoICFyZXQgKQogICAgICAg ICAgICAgY29udGludWU7CkBAIC0xNDk4LDcgKzE1MjYsNyBAQCBpbnQgZGVh c3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1 cywgdTggZGV2Zm4pCiAgICAgfQogCiAgICAgZGV2Zm4gPSBwZGV2LT5kZXZm bjsKLSAgICByZXQgPSBoZC0+cGxhdGZvcm1fb3BzLT5yZWFzc2lnbl9kZXZp Y2UoZCwgaGFyZHdhcmVfZG9tYWluLCBkZXZmbiwKKyAgICByZXQgPSBoZC0+ cGxhdGZvcm1fb3BzLT5yZWFzc2lnbl9kZXZpY2UoZCwgdGFyZ2V0LCBkZXZm biwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgcGNpX3RvX2RldihwZGV2KSk7CiAgICAgaWYgKCByZXQgKQogICAgIHsK QEAgLTE1MDgsNiArMTUzNiw5IEBAIGludCBkZWFzc2lnbl9kZXZpY2Uoc3Ry dWN0IGRvbWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKICAg ICAgICAgcmV0dXJuIHJldDsKICAgICB9CiAKKyAgICBpZiAoIHBkZXYtPmRv bWFpbiA9PSBoYXJkd2FyZV9kb21haW4gICkKKyAgICAgICAgcGRldi0+cXVh cmFudGluZSA9IGZhbHNlOworCiAgICAgcGRldi0+ZmF1bHQuY291bnQgPSAw OwogCiAgICAgaWYgKCAhaGFzX2FyY2hfcGRldnMoZCkgJiYgbmVlZF9pb21t dShkKSApCkBAIC0xNjg2LDcgKzE3MTcsNyBAQCBpbnQgaW9tbXVfZG9fcGNp X2RvbWN0bCgKICAgICAgICAgICAgIHJldCA9IGh5cGVyY2FsbF9jcmVhdGVf Y29udGludWF0aW9uKF9fSFlQRVJWSVNPUl9kb21jdGwsCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiaCIsIHVf ZG9tY3RsKTsKICAgICAgICAgZWxzZSBpZiAoIHJldCApCi0gICAgICAgICAg ICBwcmludGsoWEVOTE9HX0dfRVJSICJYRU5fRE9NQ1RMX2Fzc2lnbl9kZXZp Y2U6ICIKKyAgICAgICAgICAgIHByaW50ayhYRU5MT0dfR19FUlIKICAgICAg ICAgICAgICAgICAgICAiYXNzaWduICUwNHg6JTAyeDolMDJ4LiV1IHRvIGRv bSVkIGZhaWxlZCAoJWQpXG4iLAogICAgICAgICAgICAgICAgICAgIHNlZywg YnVzLCBQQ0lfU0xPVChkZXZmbiksIFBDSV9GVU5DKGRldmZuKSwKICAgICAg ICAgICAgICAgICAgICBkLT5kb21haW5faWQsIHJldCk7CmRpZmYgLS1naXQg YS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC92dGQvaW9tbXUuYyBiL3hlbi9k cml2ZXJzL3Bhc3N0aHJvdWdoL3Z0ZC9pb21tdS5jCmluZGV4IDRjNzE5ZDRl ZTcuLjE5ZjdkMTMwMTMgMTAwNjQ0Ci0tLSBhL3hlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL3Z0ZC9pb21tdS5jCisrKyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJv dWdoL3Z0ZC9pb21tdS5jCkBAIC0xMzM4LDYgKzEzMzgsMTAgQEAgaW50IGRv bWFpbl9jb250ZXh0X21hcHBpbmdfb25lKAogICAgIGludCBhZ2F3LCByYywg cmV0OwogICAgIGJvb2xfdCBmbHVzaF9kZXZfaW90bGI7CiAKKyAgICAvKiBk b21faW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBk ZXZpY2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAg ICAgcmV0dXJuIDA7CisKICAgICBBU1NFUlQocGNpZGV2c19sb2NrZWQoKSk7 CiAgICAgc3Bpbl9sb2NrKCZpb21tdS0+bG9jayk7CiAgICAgbWFkZHIgPSBi dXNfdG9fY29udGV4dF9tYWRkcihpb21tdSwgYnVzKTsKQEAgLTE1NzMsNiAr MTU3NywxMCBAQCBpbnQgZG9tYWluX2NvbnRleHRfdW5tYXBfb25lKAogICAg IGludCBpb21tdV9kb21pZCwgcmMsIHJldDsKICAgICBib29sX3QgZmx1c2hf ZGV2X2lvdGxiOwogCisgICAgLyogZG9tX2lvIGlzIHVzZWQgYXMgYSBzZW50 aW5lbCBmb3IgcXVhcmFudGluZWQgZGV2aWNlcyAqLworICAgIGlmICggZG9t YWluID09IGRvbV9pbyApCisgICAgICAgIHJldHVybiAwOworCiAgICAgQVNT RVJUKHBjaWRldnNfbG9ja2VkKCkpOwogICAgIHNwaW5fbG9jaygmaW9tbXUt PmxvY2spOwogCkBAIC0xNzA1LDYgKzE3MTMsMTAgQEAgc3RhdGljIGludCBk b21haW5fY29udGV4dF91bm1hcChzdHJ1Y3QgZG9tYWluICpkb21haW4sIHU4 IGRldmZuLAogICAgICAgICBnb3RvIG91dDsKICAgICB9CiAKKyAgICAvKiBk b21faW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBk ZXZpY2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAg ICAgZ290byBvdXQ7CisKICAgICAvKgogICAgICAqIGlmIG5vIG90aGVyIGRl dmljZXMgdW5kZXIgdGhlIHNhbWUgaW9tbXUgb3duZWQgYnkgdGhpcyBkb21h aW4sCiAgICAgICogY2xlYXIgaW9tbXUgaW4gaW9tbXVfYml0bWFwIGFuZCBj bGVhciBkb21haW5faWQgaW4gZG9taWRfYml0bXAKQEAgLTIzODksNiArMjQw MSwxNSBAQCBzdGF0aWMgaW50IHJlYXNzaWduX2RldmljZV9vd25lcnNoaXAo CiAgICAgaWYgKCByZXQgKQogICAgICAgICByZXR1cm4gcmV0OwogCisgICAg aWYgKCBkZXZmbiA9PSBwZGV2LT5kZXZmbiApCisgICAgeworICAgICAgICBs aXN0X21vdmUoJnBkZXYtPmRvbWFpbl9saXN0LCAmZG9tX2lvLT5hcmNoLnBk ZXZfbGlzdCk7CisgICAgICAgIHBkZXYtPmRvbWFpbiA9IGRvbV9pbzsKKyAg ICB9CisKKyAgICBpZiAoICFoYXNfYXJjaF9wZGV2cyhzb3VyY2UpICkKKyAg ICAgICAgdm14X3BpX2hvb2tzX2RlYXNzaWduKHNvdXJjZSk7CisKICAgICBp ZiAoICFoYXNfYXJjaF9wZGV2cyh0YXJnZXQpICkKICAgICAgICAgdm14X3Bp X2hvb2tzX2Fzc2lnbih0YXJnZXQpOwogCkBAIC0yNDA3LDE1ICsyNDI4LDEz IEBAIHN0YXRpYyBpbnQgcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcCgKICAg ICAgICAgcGRldi0+ZG9tYWluID0gdGFyZ2V0OwogICAgIH0KIAotICAgIGlm ICggIWhhc19hcmNoX3BkZXZzKHNvdXJjZSkgKQotICAgICAgICB2bXhfcGlf aG9va3NfZGVhc3NpZ24oc291cmNlKTsKLQogICAgIHJldHVybiByZXQ7CiB9 CiAKIHN0YXRpYyBpbnQgaW50ZWxfaW9tbXVfYXNzaWduX2RldmljZSgKICAg ICBzdHJ1Y3QgZG9tYWluICpkLCB1OCBkZXZmbiwgc3RydWN0IHBjaV9kZXYg KnBkZXYsIHUzMiBmbGFnKQogeworICAgIHN0cnVjdCBkb21haW4gKnMgPSBw ZGV2LT5kb21haW47CiAgICAgc3RydWN0IGFjcGlfcm1ycl91bml0ICpybXJy OwogICAgIGludCByZXQgPSAwLCBpOwogICAgIHUxNiBiZGYsIHNlZzsKQEAg LTI0NTgsOCArMjQ3Nyw4IEBAIHN0YXRpYyBpbnQgaW50ZWxfaW9tbXVfYXNz aWduX2RldmljZSgKICAgICAgICAgfQogICAgIH0KIAotICAgIHJldCA9IHJl YXNzaWduX2RldmljZV9vd25lcnNoaXAoaGFyZHdhcmVfZG9tYWluLCBkLCBk ZXZmbiwgcGRldik7Ci0gICAgaWYgKCByZXQgKQorICAgIHJldCA9IHJlYXNz aWduX2RldmljZV9vd25lcnNoaXAocywgZCwgZGV2Zm4sIHBkZXYpOworICAg IGlmICggcmV0IHx8IGQgPT0gZG9tX2lvICkKICAgICAgICAgcmV0dXJuIHJl dDsKIAogICAgIC8qIFNldHVwIHJtcnIgaWRlbnRpdHkgbWFwcGluZyAqLwpA QCAtMjQ3MiwxMSArMjQ5MSwyMCBAQCBzdGF0aWMgaW50IGludGVsX2lvbW11 X2Fzc2lnbl9kZXZpY2UoCiAgICAgICAgICAgICByZXQgPSBybXJyX2lkZW50 aXR5X21hcHBpbmcoZCwgMSwgcm1yciwgZmxhZyk7CiAgICAgICAgICAgICBp ZiAoIHJldCApCiAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgcmVh c3NpZ25fZGV2aWNlX293bmVyc2hpcChkLCBoYXJkd2FyZV9kb21haW4sIGRl dmZuLCBwZGV2KTsKKyAgICAgICAgICAgICAgICBpbnQgcmM7CisKKyAgICAg ICAgICAgICAgICByYyA9IHJlYXNzaWduX2RldmljZV9vd25lcnNoaXAoZCwg cywgZGV2Zm4sIHBkZXYpOwogICAgICAgICAgICAgICAgIHByaW50ayhYRU5M T0dfR19FUlIgVlREUFJFRklYCiAgICAgICAgICAgICAgICAgICAgICAgICIg Y2Fubm90IG1hcCByZXNlcnZlZCByZWdpb24gKCUiUFJJeDY0IiwlIlBSSXg2 NCJdIGZvciBEb20lZCAoJWQpXG4iLAogICAgICAgICAgICAgICAgICAgICAg ICBybXJyLT5iYXNlX2FkZHJlc3MsIHJtcnItPmVuZF9hZGRyZXNzLAogICAg ICAgICAgICAgICAgICAgICAgICBkLT5kb21haW5faWQsIHJldCk7CisgICAg ICAgICAgICAgICAgaWYgKCByYyApCisgICAgICAgICAgICAgICAgeworICAg ICAgICAgICAgICAgICAgICBwcmludGsoWEVOTE9HX0VSUiBWVERQUkVGSVgK KyAgICAgICAgICAgICAgICAgICAgICAgICAgICIgZmFpbGVkIHRvIHJlY2xh aW0gJTA0eDolMDJ4OiUwMnguJXUgZnJvbSAlcGQgKCVkKVxuIiwKKyAgICAg ICAgICAgICAgICAgICAgICAgICAgIHNlZywgYnVzLCBQQ0lfU0xPVChkZXZm biksIFBDSV9GVU5DKGRldmZuKSwgZCwgcmMpOworICAgICAgICAgICAgICAg ICAgICBkb21haW5fY3Jhc2goZCk7CisgICAgICAgICAgICAgICAgfQogICAg ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgfQogICAgICAgICB9 CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS94ZW4vcGNpLmggYi94ZW4vaW5j bHVkZS94ZW4vcGNpLmgKaW5kZXggNGNmYTc3NDYxNS4uMDY2MzY0YmRlZiAx MDA2NDQKLS0tIGEveGVuL2luY2x1ZGUveGVuL3BjaS5oCisrKyBiL3hlbi9p bmNsdWRlL3hlbi9wY2kuaApAQCAtODgsNiArODgsOSBAQCBzdHJ1Y3QgcGNp X2RldiB7CiAKICAgICBub2RlaWRfdCBub2RlOyAvKiBOVU1BIG5vZGUgKi8K IAorICAgIC8qIERldmljZSB0byBiZSBxdWFyYW50aW5lZCwgZG9uJ3QgYXV0 b21hdGljYWxseSByZS1hc3NpZ24gdG8gZG9tMCAqLworICAgIGJvb2wgcXVh cmFudGluZTsKKwogICAgIGVudW0gcGRldl90eXBlIHsKICAgICAgICAgREVW X1RZUEVfUENJX1VOS05PV04sCiAgICAgICAgIERFVl9UWVBFX1BDSWVfRU5E UE9JTlQsCi0tIAoyLjExLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa302-4.12/0001-IOMMU-add-missing-HVM-check.patch" Content-Disposition: attachment; filename="xsa302-4.12/0001-IOMMU-add-missing-HVM-check.patch" Content-Transfer-Encoding: base64 RnJvbSAwYzljMGZiYjM1NmUzMjEwY2I3N2IzZDczOGJlNTA5ODFiMjYwNThh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8 amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFdlZCwgMiBPY3QgMjAxOSAxMzoz Njo1OSArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS8yXSBJT01NVTogYWRkIG1p c3NpbmcgSFZNIGNoZWNrCk1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlw ZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVy LUVuY29kaW5nOiA4Yml0CgpGaXggYW4gdW5ndWFyZGVkIGQtPmFyY2guaHZt IGFjY2VzcyBpbiBhc3NpZ25fZGV2aWNlKCkuCgpTaWduZWQtb2ZmLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBS b2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4KQWNrZWQt Ynk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ CgooY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA0MWZkMTAwOWNkNzQxNmI3 M2Q3NDVhNzdjMjRiNGU4ZDFhMjk2ZmU2KQpTaWduZWQtb2ZmLWJ5OiBJYW4g SmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KLS0tCiB4ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYyB8IDMgKystCiAxIGZpbGUgY2hh bmdlZCwgMiBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0t Z2l0IGEveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMgYi94ZW4vZHJp dmVycy9wYXNzdGhyb3VnaC9wY2kuYwppbmRleCA4MTA4ZWQ1ZjlhLi5kNzQy MGJkOGJmIDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9w Y2kuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYwpAQCAt MTQ1Miw3ICsxNDUyLDggQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogCiAgICAgLyogUHJldmVudCBkZXZpY2UgYXNzaWduIGlmIG1l bSBwYWdpbmcgb3IgbWVtIHNoYXJpbmcgaGF2ZSBiZWVuIAogICAgICAqIGVu YWJsZWQgZm9yIHRoaXMgZG9tYWluICovCi0gICAgaWYgKCB1bmxpa2VseShk LT5hcmNoLmh2bS5tZW1fc2hhcmluZ19lbmFibGVkIHx8CisgICAgaWYgKCB1 bmxpa2VseSgoaXNfaHZtX2RvbWFpbihkKSAmJgorICAgICAgICAgICAgICAg ICAgIGQtPmFyY2guaHZtLm1lbV9zaGFyaW5nX2VuYWJsZWQpIHx8CiAgICAg ICAgICAgICAgICAgICB2bV9ldmVudF9jaGVja19yaW5nKGQtPnZtX2V2ZW50 X3BhZ2luZykgfHwKICAgICAgICAgICAgICAgICAgIHAybV9nZXRfaG9zdHAy bShkKS0+Z2xvYmFsX2xvZ2RpcnR5KSApCiAgICAgICAgIHJldHVybiAtRVhE RVY7Ci0tIAoyLjExLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa302-4.12/0002-passthrough-quarantine-PCI-devices.patch" Content-Disposition: attachment; filename="xsa302-4.12/0002-passthrough-quarantine-PCI-devices.patch" Content-Transfer-Encoding: base64 RnJvbSAyNzhkOGU1ODVhOWYxMTBhMWFmMGJkOTJhOWZjNDM3MzNjOWM3MjI3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIER1cnJhbnQg PHBhdWwuZHVycmFudEBjaXRyaXguY29tPgpEYXRlOiBNb24sIDE0IE9jdCAy MDE5IDE3OjUyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzJdIHBhc3N0 aHJvdWdoOiBxdWFyYW50aW5lIFBDSSBkZXZpY2VzCgpXaGVuIGEgUENJIGRl dmljZSBpcyBhc3NpZ25lZCB0byBhbiB1bnRydXN0ZWQgZG9tYWluLCBpdCBp cyBwb3NzaWJsZSBmb3IKdGhhdCBkb21haW4gdG8gcHJvZ3JhbSB0aGUgZGV2 aWNlIHRvIERNQSB0byBhbiBhcmJpdHJhcnkgYWRkcmVzcy4gVGhlCklPTU1V IGlzIHVzZWQgdG8gcHJvdGVjdCB0aGUgaG9zdCBmcm9tIG1hbGljaW91cyBE TUEgYnkgbWFraW5nIHN1cmUgdGhhdAp0aGUgZGV2aWNlIGFkZHJlc3NlcyBj YW4gb25seSB0YXJnZXQgbWVtb3J5IGFzc2lnbmVkIHRvIHRoZSBndWVzdC4g SG93ZXZlciwKd2hlbiB0aGUgZ3Vlc3QgZG9tYWluIGlzIHRvcm4gZG93biB0 aGUgZGV2aWNlIGlzIGFzc2lnbmVkIGJhY2sgdG8gZG9tMCwKdGh1cyBhbGxv d2luZyBhbnkgaW4tZmxpZ2h0IERNQSB0byBwb3RlbnRpYWxseSB0YXJnZXQg Y3JpdGljYWwgaG9zdCBkYXRhLgoKVGhpcyBwYXRjaCBpbnRyb2R1Y2VzIGEg J3F1YXJhbnRpbmUnIGZvciBQQ0kgZGV2aWNlcyB1c2luZyBkb21faW8uIFdo ZW4KdGhlIHRvb2xzdGFjayBtYWtlcyBhIGRldmljZSBhc3NpZ25hYmxlIChi eSBiaW5kaW5nIGl0IHRvIHBjaWJhY2spLCBpdAp3aWxsIG5vdyBhbHNvIGFz c2lnbiBpdCB0byBET01JRF9JTyBhbmQgdGhlIGRldmljZSB3aWxsIG9ubHkg YmUgYXNzaWduZWQKYmFjayB0byBkb20wIHdoZW4gdGhlIGRldmljZSBpcyBt YWRlIHVuYXNzaWduYWJsZSBhZ2Fpbi4gV2hpbHN0IGRldmljZSBpcwphc3Np Z25hYmxlIGl0IHdpbGwgb25seSBldmVyIHRyYW5zZmVyIGJldHdlZW4gZG9t X2lvIGFuZCBndWVzdCBkb21haW5zLgpkb21faW8gaXMgYWN0dWFsbHkgb25s eSB1c2VkIGFzIGEgc2VudGluZWwgZG9tYWluIGZvciBxdWFyYW50aW5pbmcg cHVycG9zZXM7Cml0IGlzIG5vdCBjb25maWd1cmVkIHdpdGggYW55IElPTU1V IG1hcHBpbmdzLiBBc3NpZ25tZW50IHRvIGRvbV9pbyBzaW1wbHkKbWVhbnMg dGhhdCB0aGUgZGV2aWNlJ3MgaW5pdGlhdG9yIChyZXF1ZXN0b3IpIGlkZW50 aWZpZXIgaXMgbm90IHByZXNlbnQgaW4KdGhlIElPTU1VJ3MgZGV2aWNlIHRh YmxlIGFuZCB0aHVzIGFueSBETUEgdHJhbnNhY3Rpb25zIGlzc3VlZCB3aWxs IGJlCnRlcm1pbmF0ZWQgd2l0aCBhIGZhdWx0IGNvbmRpdGlvbi4KCkluIGFk ZGl0aW9uLCBhIGZpeCB0byBhc3NpZ25tZW50IGhhbmRsaW5nIGlzIG1hZGUg Zm9yIFZULWQuICBGYWlsdXJlCmR1cmluZyB0aGUgYXNzaWdubWVudCBzdGVw IHNob3VsZCBub3QgbGVhZCB0byBhIGRldmljZSBzdGlsbCBiZWluZwphc3Nv Y2lhdGVkIHdpdGggaXRzIHByaW9yIG93bmVyLiBIYW5kIHRoZSBkZXZpY2Ug dG8gRG9tSU8gdGVtcG9yYXJpbHksCnVudGlsIHRoZSBhc3NpZ25tZW50IHN0 ZXAgaGFzIGNvbXBsZXRlZCBzdWNjZXNzZnVsbHkuICBSZW1vdmUgdGhlIFBJ Cmhvb2tzIGZyb20gdGhlIHNvdXJjZSBkb21haW4gdGhlbiBlYXJsaWVyIGFz IHdlbGwuCgpGYWlsdXJlIG9mIHRoZSByZWNvdmVyeSByZWFzc2lnbl9kZXZp Y2Vfb3duZXJzaGlwKCkgbWF5IG5vdCBnbyBzaWxlbnQ6ClRoZXJlIGUuZy4g bWF5IHN0aWxsIGJlIGxlZnQgb3ZlciBSTVJSIG1hcHBpbmdzIGluIHRoZSBk b21haW4gYXNzaWdubWVudAp0byB3aGljaCBoYXMgZmFpbGVkLCBhbmQgaGVu Y2Ugd2UgY2FuJ3QgYWxsb3cgdGhhdCBkb21haW4gdG8gY29udGludWUKZXhl Y3V0aW5nLgoKTk9URTogVGhpcyBwYXRjaCBhbHNvIGluY2x1ZGVzIG9uZSBw cmludGsoKSBjbGVhbnVwOyB0aGUKICAgICAgIlhFTl9ET01DVExfYXNzaWdu X2RldmljZTogIiB0YWcgaXMgZHJvcHBlZCBpbiBpb21tdV9kb19wY2lfZG9t Y3RsKCksCiAgICAgIHNpbmNlIHNpbWlsYXIgcHJpbnRrKCktcyBlbHNld2hl cmUgYWxzbyBkb24ndCBsb2cgc3VjaCBhIHRhZy4KClRoaXMgaXMgWFNBLTMw Mi4KClNpZ25lZC1vZmYtYnk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50 QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIEphY2tzb24gPGlh bi5qYWNrc29uQGV1LmNpdHJpeC5jb20+CihjaGVycnkgcGlja2VkIGZyb20g Y29tbWl0IGVjOTk4NTdmNTlmN2YwNjIzNmYxMWNhOGIwYjIzMDNlNWU3NDVj YzQpCi0tLQogdG9vbHMvbGlieGwvbGlieGxfcGNpLmMgICAgICAgICAgICAg ICAgICAgICB8IDI1ICsrKysrKysrKysrLQogeGVuL2FyY2gveDg2L21tLmMg ICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAyICsKIHhlbi9jb21tb24v ZG9tY3RsLmMgICAgICAgICAgICAgICAgICAgICAgICAgfCAxNCArKysrKyst CiB4ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9pb21tdS5j IHwgMTAgKysrKy0KIHhlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2lvbW11LmMg ICAgICAgICAgICAgfCAgOSArKysrKwogeGVuL2RyaXZlcnMvcGFzc3Rocm91 Z2gvcGNpLmMgICAgICAgICAgICAgICB8IDU5ICsrKysrKysrKysrKysrKysr KysrKystLS0tLS0tCiB4ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC92dGQvaW9t bXUuYyAgICAgICAgIHwgNDAgKysrKysrKysrKysrKysrKy0tLQogeGVuL2lu Y2x1ZGUveGVuL3BjaS5oICAgICAgICAgICAgICAgICAgICAgICB8ICAzICsr CiA4IGZpbGVzIGNoYW5nZWQsIDEzOCBpbnNlcnRpb25zKCspLCAyNCBkZWxl dGlvbnMoLSkKCmRpZmYgLS1naXQgYS90b29scy9saWJ4bC9saWJ4bF9wY2ku YyBiL3Rvb2xzL2xpYnhsL2xpYnhsX3BjaS5jCmluZGV4IDg4YzMyNGVhMjMu LmQ2YTIzZmI1ZjggMTAwNjQ0Ci0tLSBhL3Rvb2xzL2xpYnhsL2xpYnhsX3Bj aS5jCisrKyBiL3Rvb2xzL2xpYnhsL2xpYnhsX3BjaS5jCkBAIC03NTQsNiAr NzU0LDcgQEAgc3RhdGljIGludCBsaWJ4bF9fZGV2aWNlX3BjaV9hc3NpZ25h YmxlX2FkZChsaWJ4bF9fZ2MgKmdjLAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBsaWJ4bF9kZXZpY2VfcGNpICpwY2lk ZXYsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGludCByZWJpbmQpCiB7CisgICAgbGlieGxfY3R4ICpjdHggPSBsaWJ4 bF9fZ2Nfb3duZXIoZ2MpOwogICAgIHVuc2lnbmVkIGRvbSwgYnVzLCBkZXYs IGZ1bmM7CiAgICAgY2hhciAqc3BhdGgsICpkcml2ZXJfcGF0aCA9IE5VTEw7 CiAgICAgaW50IHJjOwpAQCAtNzc5LDcgKzc4MCw3IEBAIHN0YXRpYyBpbnQg bGlieGxfX2RldmljZV9wY2lfYXNzaWduYWJsZV9hZGQobGlieGxfX2djICpn YywKICAgICB9CiAgICAgaWYgKCByYyApIHsKICAgICAgICAgTE9HKFdBUk4s IFBDSV9CREYiIGFscmVhZHkgYXNzaWduZWQgdG8gcGNpYmFjayIsIGRvbSwg YnVzLCBkZXYsIGZ1bmMpOwotICAgICAgICByZXR1cm4gMDsKKyAgICAgICAg Z290byBxdWFyYW50aW5lOwogICAgIH0KIAogICAgIC8qIENoZWNrIHRvIHNl ZSBpZiB0aGVyZSdzIGFscmVhZHkgYSBkcml2ZXIgdGhhdCB3ZSBuZWVkIHRv IHVuYmluZCBmcm9tICovCkBAIC04MTAsNiArODExLDE5IEBAIHN0YXRpYyBp bnQgbGlieGxfX2RldmljZV9wY2lfYXNzaWduYWJsZV9hZGQobGlieGxfX2dj ICpnYywKICAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CiAgICAgfQogCitx dWFyYW50aW5lOgorICAgIC8qCisgICAgICogRE9NSURfSU8gaXMganVzdCBh IHNlbnRpbmVsIGRvbWFpbiwgd2l0aG91dCBhbnkgYWN0dWFsIG1hcHBpbmdz LAorICAgICAqIHNvIGFsd2F5cyBwYXNzIFhFTl9ET01DVExfREVWX1JETV9S RUxBWEVEIHRvIGF2b2lkIGFzc2lnbm1lbnQgYmVpbmcKKyAgICAgKiB1bm5l Y2Vzc2FyaWx5IGRlbmllZC4KKyAgICAgKi8KKyAgICByYyA9IHhjX2Fzc2ln bl9kZXZpY2UoY3R4LT54Y2gsIERPTUlEX0lPLCBwY2lkZXZfZW5jb2RlX2Jk ZihwY2lkZXYpLAorICAgICAgICAgICAgICAgICAgICAgICAgICBYRU5fRE9N Q1RMX0RFVl9SRE1fUkVMQVhFRCk7CisgICAgaWYgKCByYyA8IDAgKSB7Cisg ICAgICAgIExPRyhFUlJPUiwgImZhaWxlZCB0byBxdWFyYW50aW5lICJQQ0lf QkRGLCBkb20sIGJ1cywgZGV2LCBmdW5jKTsKKyAgICAgICAgcmV0dXJuIEVS Uk9SX0ZBSUw7CisgICAgfQorCiAgICAgcmV0dXJuIDA7CiB9CiAKQEAgLTgx Nyw5ICs4MzEsMTggQEAgc3RhdGljIGludCBsaWJ4bF9fZGV2aWNlX3BjaV9h c3NpZ25hYmxlX3JlbW92ZShsaWJ4bF9fZ2MgKmdjLAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBsaWJ4bF9kZXZp Y2VfcGNpICpwY2lkZXYsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGludCByZWJpbmQpCiB7CisgICAgbGlieGxf Y3R4ICpjdHggPSBsaWJ4bF9fZ2Nfb3duZXIoZ2MpOwogICAgIGludCByYzsK ICAgICBjaGFyICpkcml2ZXJfcGF0aDsKIAorICAgIC8qIERlLXF1YXJhbnRp bmUgKi8KKyAgICByYyA9IHhjX2RlYXNzaWduX2RldmljZShjdHgtPnhjaCwg RE9NSURfSU8sIHBjaWRldl9lbmNvZGVfYmRmKHBjaWRldikpOworICAgIGlm ICggcmMgPCAwICkgeworICAgICAgICBMT0coRVJST1IsICJmYWlsZWQgdG8g ZGUtcXVhcmFudGluZSAiUENJX0JERiwgcGNpZGV2LT5kb21haW4sIHBjaWRl di0+YnVzLAorICAgICAgICAgICAgcGNpZGV2LT5kZXYsIHBjaWRldi0+ZnVu Yyk7CisgICAgICAgIHJldHVybiBFUlJPUl9GQUlMOworICAgIH0KKwogICAg IC8qIFVuYmluZCBmcm9tIHBjaWJhY2sgKi8KICAgICBpZiAoIChyYz1wY2li YWNrX2Rldl9pc19hc3NpZ25lZChnYywgcGNpZGV2KSkgPCAwICkgewogICAg ICAgICByZXR1cm4gRVJST1JfRkFJTDsKZGlmZiAtLWdpdCBhL3hlbi9hcmNo L3g4Ni9tbS5jIGIveGVuL2FyY2gveDg2L21tLmMKaW5kZXggMzU1N2NkMTE3 OC4uMTFkNzUzZDhkMiAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L21tLmMK KysrIGIveGVuL2FyY2gveDg2L21tLmMKQEAgLTI5NSw5ICsyOTUsMTEgQEAg dm9pZCBfX2luaXQgYXJjaF9pbml0X21lbW9yeSh2b2lkKQogICAgICAqIElu aXRpYWxpc2Ugb3VyIERPTUlEX0lPIGRvbWFpbi4KICAgICAgKiBUaGlzIGRv bWFpbiBvd25zIEkvTyBwYWdlcyB0aGF0IGFyZSB3aXRoaW4gdGhlIHJhbmdl IG9mIHRoZSBwYWdlX2luZm8KICAgICAgKiBhcnJheS4gTWFwcGluZ3Mgb2Nj dXIgYXQgdGhlIHByaXYgb2YgdGhlIGNhbGxlci4KKyAgICAgKiBRdWFyYW50 aW5lZCBQQ0kgZGV2aWNlcyB3aWxsIGJlIGFzc29jaWF0ZWQgd2l0aCB0aGlz IGRvbWFpbi4KICAgICAgKi8KICAgICBkb21faW8gPSBkb21haW5fY3JlYXRl KERPTUlEX0lPLCBOVUxMLCBmYWxzZSk7CiAgICAgQlVHX09OKElTX0VSUihk b21faW8pKTsKKyAgICBJTklUX0xJU1RfSEVBRCgmZG9tX2lvLT5hcmNoLnBk ZXZfbGlzdCk7CiAKICAgICAvKgogICAgICAqIEluaXRpYWxpc2Ugb3VyIENP VyBkb21haW4uCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2RvbWN0bC5jIGIv eGVuL2NvbW1vbi9kb21jdGwuYwppbmRleCBkMDhiNjI3NGUyLi5lM2M0YmUy YjQ4IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL2RvbWN0bC5jCisrKyBiL3hl bi9jb21tb24vZG9tY3RsLmMKQEAgLTM5MSw2ICszOTEsMTYgQEAgbG9uZyBk b19kb21jdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fZG9tY3RsX3Qp IHVfZG9tY3RsKQogCiAgICAgc3dpdGNoICggb3AtPmNtZCApCiAgICAgewor ICAgIGNhc2UgWEVOX0RPTUNUTF9hc3NpZ25fZGV2aWNlOgorICAgIGNhc2Ug WEVOX0RPTUNUTF9kZWFzc2lnbl9kZXZpY2U6CisgICAgICAgIGlmICggb3At PmRvbWFpbiA9PSBET01JRF9JTyApCisgICAgICAgIHsKKyAgICAgICAgICAg IGQgPSBkb21faW87CisgICAgICAgICAgICBicmVhazsKKyAgICAgICAgfQor ICAgICAgICBlbHNlIGlmICggb3AtPmRvbWFpbiA9PSBET01JRF9JTlZBTElE ICkKKyAgICAgICAgICAgIHJldHVybiAtRVNSQ0g7CisgICAgICAgIC8qIGZh bGwgdGhyb3VnaCAqLwogICAgIGNhc2UgWEVOX0RPTUNUTF90ZXN0X2Fzc2ln bl9kZXZpY2U6CiAgICAgICAgIGlmICggb3AtPmRvbWFpbiA9PSBET01JRF9J TlZBTElEICkKICAgICAgICAgewpAQCAtNDEyLDcgKzQyMiw3IEBAIGxvbmcg ZG9fZG9tY3RsKFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0oeGVuX2RvbWN0bF90 KSB1X2RvbWN0bCkKIAogICAgIGlmICggIWRvbWN0bF9sb2NrX2FjcXVpcmUo KSApCiAgICAgewotICAgICAgICBpZiAoIGQgKQorICAgICAgICBpZiAoIGQg JiYgZCAhPSBkb21faW8gKQogICAgICAgICAgICAgcmN1X3VubG9ja19kb21h aW4oZCk7CiAgICAgICAgIHJldHVybiBoeXBlcmNhbGxfY3JlYXRlX2NvbnRp bnVhdGlvbigKICAgICAgICAgICAgIF9fSFlQRVJWSVNPUl9kb21jdGwsICJo IiwgdV9kb21jdGwpOwpAQCAtMTA3NCw3ICsxMDg0LDcgQEAgbG9uZyBkb19k b21jdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fZG9tY3RsX3QpIHVf ZG9tY3RsKQogICAgIGRvbWN0bF9sb2NrX3JlbGVhc2UoKTsKIAogIGRvbWN0 bF9vdXRfdW5sb2NrX2RvbW9ubHk6Ci0gICAgaWYgKCBkICkKKyAgICBpZiAo IGQgJiYgZCAhPSBkb21faW8gKQogICAgICAgICByY3VfdW5sb2NrX2RvbWFp bihkKTsKIAogICAgIGlmICggY29weWJhY2sgJiYgX19jb3B5X3RvX2d1ZXN0 KHVfZG9tY3RsLCBvcCwgMSkgKQpkaWZmIC0tZ2l0IGEveGVuL2RyaXZlcnMv cGFzc3Rocm91Z2gvYW1kL3BjaV9hbWRfaW9tbXUuYyBiL3hlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL2FtZC9wY2lfYW1kX2lvbW11LmMKaW5kZXggMzNhMzc5 OGYzNi4uMTVjMTNlMTE2MyAxMDA2NDQKLS0tIGEveGVuL2RyaXZlcnMvcGFz c3Rocm91Z2gvYW1kL3BjaV9hbWRfaW9tbXUuYworKysgYi94ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9pb21tdS5jCkBAIC0xMjAsNiAr MTIwLDEwIEBAIHN0YXRpYyB2b2lkIGFtZF9pb21tdV9zZXR1cF9kb21haW5f ZGV2aWNlKAogICAgIHU4IGJ1cyA9IHBkZXYtPmJ1czsKICAgICBjb25zdCBz dHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21tdShkb21haW4pOwog CisgICAgLyogZG9tX2lvIGlzIHVzZWQgYXMgYSBzZW50aW5lbCBmb3IgcXVh cmFudGluZWQgZGV2aWNlcyAqLworICAgIGlmICggZG9tYWluID09IGRvbV9p byApCisgICAgICAgIHJldHVybjsKKwogICAgIEJVR19PTiggIWhkLT5hcmNo LnJvb3RfdGFibGUgfHwgIWhkLT5hcmNoLnBhZ2luZ19tb2RlIHx8CiAgICAg ICAgICAgICAhaW9tbXUtPmRldl90YWJsZS5idWZmZXIgKTsKIApAQCAtMjc3 LDYgKzI4MSwxMCBAQCB2b2lkIGFtZF9pb21tdV9kaXNhYmxlX2RvbWFpbl9k ZXZpY2Uoc3RydWN0IGRvbWFpbiAqZG9tYWluLAogICAgIGludCByZXFfaWQ7 CiAgICAgdTggYnVzID0gcGRldi0+YnVzOwogCisgICAgLyogZG9tX2lvIGlz IHVzZWQgYXMgYSBzZW50aW5lbCBmb3IgcXVhcmFudGluZWQgZGV2aWNlcyAq LworICAgIGlmICggZG9tYWluID09IGRvbV9pbyApCisgICAgICAgIHJldHVy bjsKKwogICAgIEJVR19PTiAoIGlvbW11LT5kZXZfdGFibGUuYnVmZmVyID09 IE5VTEwgKTsKICAgICByZXFfaWQgPSBnZXRfZG1hX3JlcXVlc3Rvcl9pZChp b21tdS0+c2VnLCBQQ0lfQkRGMihidXMsIGRldmZuKSk7CiAgICAgZHRlID0g aW9tbXUtPmRldl90YWJsZS5idWZmZXIgKyAocmVxX2lkICogSU9NTVVfREVW X1RBQkxFX0VOVFJZX1NJWkUpOwpAQCAtMzYzLDcgKzM3MSw3IEBAIHN0YXRp YyBpbnQgYW1kX2lvbW11X2Fzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAq ZCwgdTggZGV2Zm4sCiAgICAgICAgICAgICBpdnJzX21hcHBpbmdzW3JlcV9p ZF0ucmVhZF9wZXJtaXNzaW9uKTsKICAgICB9CiAKLSAgICByZXR1cm4gcmVh c3NpZ25fZGV2aWNlKGhhcmR3YXJlX2RvbWFpbiwgZCwgZGV2Zm4sIHBkZXYp OworICAgIHJldHVybiByZWFzc2lnbl9kZXZpY2UocGRldi0+ZG9tYWluLCBk LCBkZXZmbiwgcGRldik7CiB9CiAKIHN0YXRpYyB2b2lkIGRlYWxsb2NhdGVf bmV4dF9wYWdlX3RhYmxlKHN0cnVjdCBwYWdlX2luZm8gKnBnLCBpbnQgbGV2 ZWwpCmRpZmYgLS1naXQgYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9pb21t dS5jIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvaW9tbXUuYwppbmRleCBh NjY5N2Q1OGZiLi4yNzYyZTEzNDJmIDEwMDY0NAotLS0gYS94ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC9pb21tdS5jCisrKyBiL3hlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL2lvbW11LmMKQEAgLTIzMiw2ICsyMzIsOSBAQCB2b2lkIGlvbW11 X3RlYXJkb3duKHN0cnVjdCBkb21haW4gKmQpCiB7CiAgICAgc3RydWN0IGRv bWFpbl9pb21tdSAqaGQgPSBkb21faW9tbXUoZCk7CiAKKyAgICBpZiAoIGQg PT0gZG9tX2lvICkKKyAgICAgICAgcmV0dXJuOworCiAgICAgaGQtPnN0YXR1 cyA9IElPTU1VX1NUQVRVU19kaXNhYmxlZDsKICAgICBoZC0+cGxhdGZvcm1f b3BzLT50ZWFyZG93bihkKTsKICAgICB0YXNrbGV0X3NjaGVkdWxlKCZpb21t dV9wdF9jbGVhbnVwX3Rhc2tsZXQpOwpAQCAtMjQxLDYgKzI0NCw5IEBAIGlu dCBpb21tdV9jb25zdHJ1Y3Qoc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICBz dHJ1Y3QgZG9tYWluX2lvbW11ICpoZCA9IGRvbV9pb21tdShkKTsKIAorICAg IGlmICggZCA9PSBkb21faW8gKQorICAgICAgICByZXR1cm4gMDsKKwogICAg IGlmICggaGQtPnN0YXR1cyA9PSBJT01NVV9TVEFUVVNfaW5pdGlhbGl6ZWQg KQogICAgICAgICByZXR1cm4gMDsKIApAQCAtNTIxLDYgKzUyNyw5IEBAIGlu dCBfX2luaXQgaW9tbXVfc2V0dXAodm9pZCkKICAgICBwcmludGsoIkkvTyB2 aXJ0dWFsaXNhdGlvbiAlc2FibGVkXG4iLCBpb21tdV9lbmFibGVkID8gImVu IiA6ICJkaXMiKTsKICAgICBpZiAoIGlvbW11X2VuYWJsZWQgKQogICAgIHsK KyAgICAgICAgaWYgKCBpb21tdV9kb21haW5faW5pdChkb21faW8pICkKKyAg ICAgICAgICAgIHBhbmljKCJDb3VsZCBub3Qgc2V0IHVwIHF1YXJhbnRpbmVc biIpOworCiAgICAgICAgIHByaW50aygiIC0gRG9tMCBtb2RlOiAlc1xuIiwK ICAgICAgICAgICAgICAgIGlvbW11X2h3ZG9tX3Bhc3N0aHJvdWdoID8gIlBh c3N0aHJvdWdoIiA6CiAgICAgICAgICAgICAgICBpb21tdV9od2RvbV9zdHJp Y3QgPyAiU3RyaWN0IiA6ICJSZWxheGVkIik7CmRpZmYgLS1naXQgYS94ZW4v ZHJpdmVycy9wYXNzdGhyb3VnaC9wY2kuYyBiL3hlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL3BjaS5jCmluZGV4IGQ3NDIwYmQ4YmYuLmQ2NmE4YTFkYWYgMTAw NjQ0Ci0tLSBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jCisrKyBi L3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jCkBAIC0xNDI2LDE5ICsx NDI2LDI5IEBAIHN0YXRpYyBpbnQgaW9tbXVfcmVtb3ZlX2RldmljZShzdHJ1 Y3QgcGNpX2RldiAqcGRldikKICAgICByZXR1cm4gaGQtPnBsYXRmb3JtX29w cy0+cmVtb3ZlX2RldmljZShwZGV2LT5kZXZmbiwgcGNpX3RvX2RldihwZGV2 KSk7CiB9CiAKLS8qCi0gKiBJZiB0aGUgZGV2aWNlIGlzbid0IG93bmVkIGJ5 IHRoZSBoYXJkd2FyZSBkb21haW4sIGl0IG1lYW5zIGl0IGFscmVhZHkKLSAq IGhhcyBiZWVuIGFzc2lnbmVkIHRvIG90aGVyIGRvbWFpbiwgb3IgaXQgZG9l c24ndCBleGlzdC4KLSAqLwogc3RhdGljIGludCBkZXZpY2VfYXNzaWduZWQo dTE2IHNlZywgdTggYnVzLCB1OCBkZXZmbikKIHsKICAgICBzdHJ1Y3QgcGNp X2RldiAqcGRldjsKKyAgICBpbnQgcmMgPSAwOwogCiAgICAgcGNpZGV2c19s b2NrKCk7Ci0gICAgcGRldiA9IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFy ZHdhcmVfZG9tYWluLCBzZWcsIGJ1cywgZGV2Zm4pOworCisgICAgcGRldiA9 IHBjaV9nZXRfcGRldihzZWcsIGJ1cywgZGV2Zm4pOworCisgICAgaWYgKCAh cGRldiApCisgICAgICAgIHJjID0gLUVOT0RFVjsKKyAgICAvKgorICAgICAq IElmIHRoZSBkZXZpY2UgZXhpc3RzIGFuZCBpdCBpcyBub3Qgb3duZWQgYnkg ZWl0aGVyIHRoZSBoYXJkd2FyZQorICAgICAqIGRvbWFpbiBvciBkb21faW8g dGhlbiBpdCBtdXN0IGJlIGFzc2lnbmVkIHRvIGEgZ3Vlc3QsIG9yIGJlCisg ICAgICogaGlkZGVuIChvd25lZCBieSBkb21feGVuKS4KKyAgICAgKi8KKyAg ICBlbHNlIGlmICggcGRldi0+ZG9tYWluICE9IGhhcmR3YXJlX2RvbWFpbiAm JgorICAgICAgICAgICAgICBwZGV2LT5kb21haW4gIT0gZG9tX2lvICkKKyAg ICAgICAgcmMgPSAtRUJVU1k7CisKICAgICBwY2lkZXZzX3VubG9jaygpOwog Ci0gICAgcmV0dXJuIHBkZXYgPyAwIDogLUVCVVNZOworICAgIHJldHVybiBy YzsKIH0KIAogc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21h aW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUzMiBmbGFnKQpA QCAtMTQ1Miw3ICsxNDYyLDggQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNl KHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4s IHUzMiBmbGFnKQogCiAgICAgLyogUHJldmVudCBkZXZpY2UgYXNzaWduIGlm IG1lbSBwYWdpbmcgb3IgbWVtIHNoYXJpbmcgaGF2ZSBiZWVuIAogICAgICAq IGVuYWJsZWQgZm9yIHRoaXMgZG9tYWluICovCi0gICAgaWYgKCB1bmxpa2Vs eSgoaXNfaHZtX2RvbWFpbihkKSAmJgorICAgIGlmICggZCAhPSBkb21faW8g JiYKKyAgICAgICAgIHVubGlrZWx5KChpc19odm1fZG9tYWluKGQpICYmCiAg ICAgICAgICAgICAgICAgICAgZC0+YXJjaC5odm0ubWVtX3NoYXJpbmdfZW5h YmxlZCkgfHwKICAgICAgICAgICAgICAgICAgIHZtX2V2ZW50X2NoZWNrX3Jp bmcoZC0+dm1fZXZlbnRfcGFnaW5nKSB8fAogICAgICAgICAgICAgICAgICAg cDJtX2dldF9ob3N0cDJtKGQpLT5nbG9iYWxfbG9nZGlydHkpICkKQEAgLTE0 NjgsMTIgKzE0NzksMjAgQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0 cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUz MiBmbGFnKQogICAgICAgICByZXR1cm4gcmM7CiAgICAgfQogCi0gICAgcGRl diA9IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFyZHdhcmVfZG9tYWluLCBz ZWcsIGJ1cywgZGV2Zm4pOworICAgIHBkZXYgPSBwY2lfZ2V0X3BkZXYoc2Vn LCBidXMsIGRldmZuKTsKKworICAgIHJjID0gLUVOT0RFVjsKICAgICBpZiAo ICFwZGV2ICkKLSAgICB7Ci0gICAgICAgIHJjID0gcGNpX2dldF9wZGV2KHNl ZywgYnVzLCBkZXZmbikgPyAtRUJVU1kgOiAtRU5PREVWOwogICAgICAgICBn b3RvIGRvbmU7Ci0gICAgfQorCisgICAgcmMgPSAwOworICAgIGlmICggZCA9 PSBwZGV2LT5kb21haW4gKQorICAgICAgICBnb3RvIGRvbmU7CisKKyAgICBy YyA9IC1FQlVTWTsKKyAgICBpZiAoIHBkZXYtPmRvbWFpbiAhPSBoYXJkd2Fy ZV9kb21haW4gJiYKKyAgICAgICAgIHBkZXYtPmRvbWFpbiAhPSBkb21faW8g KQorICAgICAgICBnb3RvIGRvbmU7CiAKICAgICBpZiAoIHBkZXYtPm1zaXgg KQogICAgICAgICBtc2l4dGJsX2luaXQoZCk7CkBAIC0xNDk2LDYgKzE1MTUs MTAgQEAgc3RhdGljIGludCBhc3NpZ25fZGV2aWNlKHN0cnVjdCBkb21haW4g KmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2Zm4sIHUzMiBmbGFnKQogICAg IH0KIAogIGRvbmU6CisgICAgLyogVGhlIGRldmljZSBpcyBhc3NpZ25lZCB0 byBkb21faW8gc28gbWFyayBpdCBhcyBxdWFyYW50aW5lZCAqLworICAgIGlm ICggIXJjICYmIGQgPT0gZG9tX2lvICkKKyAgICAgICAgcGRldi0+cXVhcmFu dGluZSA9IHRydWU7CisKICAgICBpZiAoICFoYXNfYXJjaF9wZGV2cyhkKSAm JiBoYXNfaW9tbXVfcHQoZCkgKQogICAgICAgICBpb21tdV90ZWFyZG93bihk KTsKICAgICBwY2lkZXZzX3VubG9jaygpOwpAQCAtMTUwOCw2ICsxNTMxLDcg QEAgaW50IGRlYXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1MTYg c2VnLCB1OCBidXMsIHU4IGRldmZuKQogewogICAgIGNvbnN0IHN0cnVjdCBk b21haW5faW9tbXUgKmhkID0gZG9tX2lvbW11KGQpOwogICAgIHN0cnVjdCBw Y2lfZGV2ICpwZGV2ID0gTlVMTDsKKyAgICBzdHJ1Y3QgZG9tYWluICp0YXJn ZXQ7CiAgICAgaW50IHJldCA9IDA7CiAKICAgICBpZiAoICFpb21tdV9lbmFi bGVkIHx8ICFoZC0+cGxhdGZvcm1fb3BzICkKQEAgLTE1MTgsMTIgKzE1NDIs MTYgQEAgaW50IGRlYXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1 MTYgc2VnLCB1OCBidXMsIHU4IGRldmZuKQogICAgIGlmICggIXBkZXYgKQog ICAgICAgICByZXR1cm4gLUVOT0RFVjsKIAorICAgIC8qIERlLWFzc2lnbm1l bnQgZnJvbSBkb21faW8gc2hvdWxkIGRlLXF1YXJhbnRpbmUgdGhlIGRldmlj ZSAqLworICAgIHRhcmdldCA9IChwZGV2LT5xdWFyYW50aW5lICYmIHBkZXYt PmRvbWFpbiAhPSBkb21faW8pID8KKyAgICAgICAgZG9tX2lvIDogaGFyZHdh cmVfZG9tYWluOworCiAgICAgd2hpbGUgKCBwZGV2LT5waGFudG9tX3N0cmlk ZSApCiAgICAgewogICAgICAgICBkZXZmbiArPSBwZGV2LT5waGFudG9tX3N0 cmlkZTsKICAgICAgICAgaWYgKCBQQ0lfU0xPVChkZXZmbikgIT0gUENJX1NM T1QocGRldi0+ZGV2Zm4pICkKICAgICAgICAgICAgIGJyZWFrOwotICAgICAg ICByZXQgPSBoZC0+cGxhdGZvcm1fb3BzLT5yZWFzc2lnbl9kZXZpY2UoZCwg aGFyZHdhcmVfZG9tYWluLCBkZXZmbiwKKyAgICAgICAgcmV0ID0gaGQtPnBs YXRmb3JtX29wcy0+cmVhc3NpZ25fZGV2aWNlKGQsIHRhcmdldCwgZGV2Zm4s CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBwY2lfdG9fZGV2KHBkZXYpKTsKICAgICAgICAgaWYgKCAhcmV0ICkK ICAgICAgICAgICAgIGNvbnRpbnVlOwpAQCAtMTUzNCw3ICsxNTYyLDcgQEAg aW50IGRlYXNzaWduX2RldmljZShzdHJ1Y3QgZG9tYWluICpkLCB1MTYgc2Vn LCB1OCBidXMsIHU4IGRldmZuKQogICAgIH0KIAogICAgIGRldmZuID0gcGRl di0+ZGV2Zm47Ci0gICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3Np Z25fZGV2aWNlKGQsIGhhcmR3YXJlX2RvbWFpbiwgZGV2Zm4sCisgICAgcmV0 ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3NpZ25fZGV2aWNlKGQsIHRhcmdl dCwgZGV2Zm4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHBjaV90b19kZXYocGRldikpOwogICAgIGlmICggcmV0ICkK ICAgICB7CkBAIC0xNTQ0LDYgKzE1NzIsOSBAQCBpbnQgZGVhc3NpZ25fZGV2 aWNlKHN0cnVjdCBkb21haW4gKmQsIHUxNiBzZWcsIHU4IGJ1cywgdTggZGV2 Zm4pCiAgICAgICAgIHJldHVybiByZXQ7CiAgICAgfQogCisgICAgaWYgKCBw ZGV2LT5kb21haW4gPT0gaGFyZHdhcmVfZG9tYWluICApCisgICAgICAgIHBk ZXYtPnF1YXJhbnRpbmUgPSBmYWxzZTsKKwogICAgIHBkZXYtPmZhdWx0LmNv dW50ID0gMDsKIAogICAgIGlmICggIWhhc19hcmNoX3BkZXZzKGQpICYmIGhh c19pb21tdV9wdChkKSApCkBAIC0xNzIyLDcgKzE3NTMsNyBAQCBpbnQgaW9t bXVfZG9fcGNpX2RvbWN0bCgKICAgICAgICAgICAgIHJldCA9IGh5cGVyY2Fs bF9jcmVhdGVfY29udGludWF0aW9uKF9fSFlQRVJWSVNPUl9kb21jdGwsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAiaCIsIHVfZG9tY3RsKTsKICAgICAgICAgZWxzZSBpZiAoIHJldCApCi0g ICAgICAgICAgICBwcmludGsoWEVOTE9HX0dfRVJSICJYRU5fRE9NQ1RMX2Fz c2lnbl9kZXZpY2U6ICIKKyAgICAgICAgICAgIHByaW50ayhYRU5MT0dfR19F UlIKICAgICAgICAgICAgICAgICAgICAiYXNzaWduICUwNHg6JTAyeDolMDJ4 LiV1IHRvIGRvbSVkIGZhaWxlZCAoJWQpXG4iLAogICAgICAgICAgICAgICAg ICAgIHNlZywgYnVzLCBQQ0lfU0xPVChkZXZmbiksIFBDSV9GVU5DKGRldmZu KSwKICAgICAgICAgICAgICAgICAgICBkLT5kb21haW5faWQsIHJldCk7CmRp ZmYgLS1naXQgYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC92dGQvaW9tbXUu YyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3Z0ZC9pb21tdS5jCmluZGV4 IDFkYjFjZDlmMmQuLmE4ZDFiYWEwNjQgMTAwNjQ0Ci0tLSBhL3hlbi9kcml2 ZXJzL3Bhc3N0aHJvdWdoL3Z0ZC9pb21tdS5jCisrKyBiL3hlbi9kcml2ZXJz L3Bhc3N0aHJvdWdoL3Z0ZC9pb21tdS5jCkBAIC0xMzM4LDYgKzEzMzgsMTAg QEAgaW50IGRvbWFpbl9jb250ZXh0X21hcHBpbmdfb25lKAogICAgIGludCBh Z2F3LCByYywgcmV0OwogICAgIGJvb2xfdCBmbHVzaF9kZXZfaW90bGI7CiAK KyAgICAvKiBkb21faW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFy YW50aW5lZCBkZXZpY2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lv ICkKKyAgICAgICAgcmV0dXJuIDA7CisKICAgICBBU1NFUlQocGNpZGV2c19s b2NrZWQoKSk7CiAgICAgc3Bpbl9sb2NrKCZpb21tdS0+bG9jayk7CiAgICAg bWFkZHIgPSBidXNfdG9fY29udGV4dF9tYWRkcihpb21tdSwgYnVzKTsKQEAg LTE1NzMsNiArMTU3NywxMCBAQCBpbnQgZG9tYWluX2NvbnRleHRfdW5tYXBf b25lKAogICAgIGludCBpb21tdV9kb21pZCwgcmMsIHJldDsKICAgICBib29s X3QgZmx1c2hfZGV2X2lvdGxiOwogCisgICAgLyogZG9tX2lvIGlzIHVzZWQg YXMgYSBzZW50aW5lbCBmb3IgcXVhcmFudGluZWQgZGV2aWNlcyAqLworICAg IGlmICggZG9tYWluID09IGRvbV9pbyApCisgICAgICAgIHJldHVybiAwOwor CiAgICAgQVNTRVJUKHBjaWRldnNfbG9ja2VkKCkpOwogICAgIHNwaW5fbG9j aygmaW9tbXUtPmxvY2spOwogCkBAIC0xNzA1LDYgKzE3MTMsMTAgQEAgc3Rh dGljIGludCBkb21haW5fY29udGV4dF91bm1hcChzdHJ1Y3QgZG9tYWluICpk b21haW4sIHU4IGRldmZuLAogICAgICAgICBnb3RvIG91dDsKICAgICB9CiAK KyAgICAvKiBkb21faW8gaXMgdXNlZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFy YW50aW5lZCBkZXZpY2VzICovCisgICAgaWYgKCBkb21haW4gPT0gZG9tX2lv ICkKKyAgICAgICAgZ290byBvdXQ7CisKICAgICAvKgogICAgICAqIGlmIG5v IG90aGVyIGRldmljZXMgdW5kZXIgdGhlIHNhbWUgaW9tbXUgb3duZWQgYnkg dGhpcyBkb21haW4sCiAgICAgICogY2xlYXIgaW9tbXUgaW4gaW9tbXVfYml0 bWFwIGFuZCBjbGVhciBkb21haW5faWQgaW4gZG9taWRfYml0bXAKQEAgLTI0 NDEsNiArMjQ1MywxNSBAQCBzdGF0aWMgaW50IHJlYXNzaWduX2RldmljZV9v d25lcnNoaXAoCiAgICAgaWYgKCByZXQgKQogICAgICAgICByZXR1cm4gcmV0 OwogCisgICAgaWYgKCBkZXZmbiA9PSBwZGV2LT5kZXZmbiApCisgICAgewor ICAgICAgICBsaXN0X21vdmUoJnBkZXYtPmRvbWFpbl9saXN0LCAmZG9tX2lv LT5hcmNoLnBkZXZfbGlzdCk7CisgICAgICAgIHBkZXYtPmRvbWFpbiA9IGRv bV9pbzsKKyAgICB9CisKKyAgICBpZiAoICFoYXNfYXJjaF9wZGV2cyhzb3Vy Y2UpICkKKyAgICAgICAgdm14X3BpX2hvb2tzX2RlYXNzaWduKHNvdXJjZSk7 CisKICAgICBpZiAoICFoYXNfYXJjaF9wZGV2cyh0YXJnZXQpICkKICAgICAg ICAgdm14X3BpX2hvb2tzX2Fzc2lnbih0YXJnZXQpOwogCkBAIC0yNDU5LDE1 ICsyNDgwLDEzIEBAIHN0YXRpYyBpbnQgcmVhc3NpZ25fZGV2aWNlX293bmVy c2hpcCgKICAgICAgICAgcGRldi0+ZG9tYWluID0gdGFyZ2V0OwogICAgIH0K IAotICAgIGlmICggIWhhc19hcmNoX3BkZXZzKHNvdXJjZSkgKQotICAgICAg ICB2bXhfcGlfaG9va3NfZGVhc3NpZ24oc291cmNlKTsKLQogICAgIHJldHVy biByZXQ7CiB9CiAKIHN0YXRpYyBpbnQgaW50ZWxfaW9tbXVfYXNzaWduX2Rl dmljZSgKICAgICBzdHJ1Y3QgZG9tYWluICpkLCB1OCBkZXZmbiwgc3RydWN0 IHBjaV9kZXYgKnBkZXYsIHUzMiBmbGFnKQogeworICAgIHN0cnVjdCBkb21h aW4gKnMgPSBwZGV2LT5kb21haW47CiAgICAgc3RydWN0IGFjcGlfcm1ycl91 bml0ICpybXJyOwogICAgIGludCByZXQgPSAwLCBpOwogICAgIHUxNiBiZGYs IHNlZzsKQEAgLTI1MTAsOCArMjUyOSw4IEBAIHN0YXRpYyBpbnQgaW50ZWxf aW9tbXVfYXNzaWduX2RldmljZSgKICAgICAgICAgfQogICAgIH0KIAotICAg IHJldCA9IHJlYXNzaWduX2RldmljZV9vd25lcnNoaXAoaGFyZHdhcmVfZG9t YWluLCBkLCBkZXZmbiwgcGRldik7Ci0gICAgaWYgKCByZXQgKQorICAgIHJl dCA9IHJlYXNzaWduX2RldmljZV9vd25lcnNoaXAocywgZCwgZGV2Zm4sIHBk ZXYpOworICAgIGlmICggcmV0IHx8IGQgPT0gZG9tX2lvICkKICAgICAgICAg cmV0dXJuIHJldDsKIAogICAgIC8qIFNldHVwIHJtcnIgaWRlbnRpdHkgbWFw cGluZyAqLwpAQCAtMjUyNCwxMSArMjU0MywyMCBAQCBzdGF0aWMgaW50IGlu dGVsX2lvbW11X2Fzc2lnbl9kZXZpY2UoCiAgICAgICAgICAgICByZXQgPSBy bXJyX2lkZW50aXR5X21hcHBpbmcoZCwgMSwgcm1yciwgZmxhZyk7CiAgICAg ICAgICAgICBpZiAoIHJldCApCiAgICAgICAgICAgICB7Ci0gICAgICAgICAg ICAgICAgcmVhc3NpZ25fZGV2aWNlX293bmVyc2hpcChkLCBoYXJkd2FyZV9k b21haW4sIGRldmZuLCBwZGV2KTsKKyAgICAgICAgICAgICAgICBpbnQgcmM7 CisKKyAgICAgICAgICAgICAgICByYyA9IHJlYXNzaWduX2RldmljZV9vd25l cnNoaXAoZCwgcywgZGV2Zm4sIHBkZXYpOwogICAgICAgICAgICAgICAgIHBy aW50ayhYRU5MT0dfR19FUlIgVlREUFJFRklYCiAgICAgICAgICAgICAgICAg ICAgICAgICIgY2Fubm90IG1hcCByZXNlcnZlZCByZWdpb24gKCUiUFJJeDY0 IiwlIlBSSXg2NCJdIGZvciBEb20lZCAoJWQpXG4iLAogICAgICAgICAgICAg ICAgICAgICAgICBybXJyLT5iYXNlX2FkZHJlc3MsIHJtcnItPmVuZF9hZGRy ZXNzLAogICAgICAgICAgICAgICAgICAgICAgICBkLT5kb21haW5faWQsIHJl dCk7CisgICAgICAgICAgICAgICAgaWYgKCByYyApCisgICAgICAgICAgICAg ICAgeworICAgICAgICAgICAgICAgICAgICBwcmludGsoWEVOTE9HX0VSUiBW VERQUkVGSVgKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICIgZmFpbGVk IHRvIHJlY2xhaW0gJTA0eDolMDJ4OiUwMnguJXUgZnJvbSAlcGQgKCVkKVxu IiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgIHNlZywgYnVzLCBQQ0lf U0xPVChkZXZmbiksIFBDSV9GVU5DKGRldmZuKSwgZCwgcmMpOworICAgICAg ICAgICAgICAgICAgICBkb21haW5fY3Jhc2goZCk7CisgICAgICAgICAgICAg ICAgfQogICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgfQog ICAgICAgICB9CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS94ZW4vcGNpLmgg Yi94ZW4vaW5jbHVkZS94ZW4vcGNpLmgKaW5kZXggOGIyMWU4ZGM4NC4uYTAz MWZkNjAyMCAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUveGVuL3BjaS5oCisr KyBiL3hlbi9pbmNsdWRlL3hlbi9wY2kuaApAQCAtODgsNiArODgsOSBAQCBz dHJ1Y3QgcGNpX2RldiB7CiAKICAgICBub2RlaWRfdCBub2RlOyAvKiBOVU1B IG5vZGUgKi8KIAorICAgIC8qIERldmljZSB0byBiZSBxdWFyYW50aW5lZCwg ZG9uJ3QgYXV0b21hdGljYWxseSByZS1hc3NpZ24gdG8gZG9tMCAqLworICAg IGJvb2wgcXVhcmFudGluZTsKKwogICAgIC8qIERldmljZSB3aXRoIGVycmF0 YSwgaWdub3JlIHRoZSBCQVJzLiAqLwogICAgIGJvb2wgaWdub3JlX2JhcnM7 CiAKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa302/0001-passthrough-quarantine-PCI-devices.patch" Content-Disposition: attachment; filename="xsa302/0001-passthrough-quarantine-PCI-devices.patch" Content-Transfer-Encoding: base64 RnJvbSA4YTlmZWM1M2YxNzQwMjJhZGM4OGYyNTM3MmM1N2IyZWI2M2ZhNTM4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIER1cnJhbnQg PHBhdWxAeGVuLm9yZz4KRGF0ZTogRnJpLCAxOCBPY3QgMjAxOSAxNzo0MTo0 NCArMDEwMApTdWJqZWN0OiBbUEFUQ0hdIHBhc3N0aHJvdWdoOiBxdWFyYW50 aW5lIFBDSSBkZXZpY2VzCgpXaGVuIGEgUENJIGRldmljZSBpcyBhc3NpZ25l ZCB0byBhbiB1bnRydXN0ZWQgZG9tYWluLCBpdCBpcyBwb3NzaWJsZSBmb3IK dGhhdCBkb21haW4gdG8gcHJvZ3JhbSB0aGUgZGV2aWNlIHRvIERNQSB0byBh biBhcmJpdHJhcnkgYWRkcmVzcy4gVGhlCklPTU1VIGlzIHVzZWQgdG8gcHJv dGVjdCB0aGUgaG9zdCBmcm9tIG1hbGljaW91cyBETUEgYnkgbWFraW5nIHN1 cmUgdGhhdAp0aGUgZGV2aWNlIGFkZHJlc3NlcyBjYW4gb25seSB0YXJnZXQg bWVtb3J5IGFzc2lnbmVkIHRvIHRoZSBndWVzdC4gSG93ZXZlciwKd2hlbiB0 aGUgZ3Vlc3QgZG9tYWluIGlzIHRvcm4gZG93biB0aGUgZGV2aWNlIGlzIGFz c2lnbmVkIGJhY2sgdG8gZG9tMCwKdGh1cyBhbGxvd2luZyBhbnkgaW4tZmxp Z2h0IERNQSB0byBwb3RlbnRpYWxseSB0YXJnZXQgY3JpdGljYWwgaG9zdCBk YXRhLgoKVGhpcyBwYXRjaCBpbnRyb2R1Y2VzIGEgJ3F1YXJhbnRpbmUnIGZv ciBQQ0kgZGV2aWNlcyB1c2luZyBkb21faW8uIFdoZW4KdGhlIHRvb2xzdGFj ayBtYWtlcyBhIGRldmljZSBhc3NpZ25hYmxlIChieSBiaW5kaW5nIGl0IHRv IHBjaWJhY2spLCBpdAp3aWxsIG5vdyBhbHNvIGFzc2lnbiBpdCB0byBET01J RF9JTyBhbmQgdGhlIGRldmljZSB3aWxsIG9ubHkgYmUgYXNzaWduZWQKYmFj ayB0byBkb20wIHdoZW4gdGhlIGRldmljZSBpcyBtYWRlIHVuYXNzaWduYWJs ZSBhZ2Fpbi4gV2hpbHN0IGRldmljZSBpcwphc3NpZ25hYmxlIGl0IHdpbGwg b25seSBldmVyIHRyYW5zZmVyIGJldHdlZW4gZG9tX2lvIGFuZCBndWVzdCBk b21haW5zLgpkb21faW8gaXMgYWN0dWFsbHkgb25seSB1c2VkIGFzIGEgc2Vu dGluZWwgZG9tYWluIGZvciBxdWFyYW50aW5pbmcgcHVycG9zZXM7Cml0IGlz IG5vdCBjb25maWd1cmVkIHdpdGggYW55IElPTU1VIG1hcHBpbmdzLiBBc3Np Z25tZW50IHRvIGRvbV9pbyBzaW1wbHkKbWVhbnMgdGhhdCB0aGUgZGV2aWNl J3MgaW5pdGlhdG9yIChyZXF1ZXN0b3IpIGlkZW50aWZpZXIgaXMgbm90IHBy ZXNlbnQgaW4KdGhlIElPTU1VJ3MgZGV2aWNlIHRhYmxlIGFuZCB0aHVzIGFu eSBETUEgdHJhbnNhY3Rpb25zIGlzc3VlZCB3aWxsIGJlCnRlcm1pbmF0ZWQg d2l0aCBhIGZhdWx0IGNvbmRpdGlvbi4KCkluIGFkZGl0aW9uLCBhIGZpeCB0 byBhc3NpZ25tZW50IGhhbmRsaW5nIGlzIG1hZGUgZm9yIFZULWQuICBGYWls dXJlCmR1cmluZyB0aGUgYXNzaWdubWVudCBzdGVwIHNob3VsZCBub3QgbGVh ZCB0byBhIGRldmljZSBzdGlsbCBiZWluZwphc3NvY2lhdGVkIHdpdGggaXRz IHByaW9yIG93bmVyLiBIYW5kIHRoZSBkZXZpY2UgdG8gRG9tSU8gdGVtcG9y YXJpbHksCnVudGlsIHRoZSBhc3NpZ25tZW50IHN0ZXAgaGFzIGNvbXBsZXRl ZCBzdWNjZXNzZnVsbHkuICBSZW1vdmUgdGhlIFBJCmhvb2tzIGZyb20gdGhl IHNvdXJjZSBkb21haW4gdGhlbiBlYXJsaWVyIGFzIHdlbGwuCgpGYWlsdXJl IG9mIHRoZSByZWNvdmVyeSByZWFzc2lnbl9kZXZpY2Vfb3duZXJzaGlwKCkg bWF5IG5vdCBnbyBzaWxlbnQ6ClRoZXJlIGUuZy4gbWF5IHN0aWxsIGJlIGxl ZnQgb3ZlciBSTVJSIG1hcHBpbmdzIGluIHRoZSBkb21haW4gYXNzaWdubWVu dAp0byB3aGljaCBoYXMgZmFpbGVkLCBhbmQgaGVuY2Ugd2UgY2FuJ3QgYWxs b3cgdGhhdCBkb21haW4gdG8gY29udGludWUKZXhlY3V0aW5nLgoKTk9URTog VGhpcyBwYXRjaCBhbHNvIGluY2x1ZGVzIG9uZSBwcmludGsoKSBjbGVhbnVw OyB0aGUKICAgICAgIlhFTl9ET01DVExfYXNzaWduX2RldmljZTogIiB0YWcg aXMgZHJvcHBlZCBpbiBpb21tdV9kb19wY2lfZG9tY3RsKCksCiAgICAgIHNp bmNlIHNpbWlsYXIgcHJpbnRrKCktcyBlbHNld2hlcmUgYWxzbyBkb24ndCBs b2cgc3VjaCBhIHRhZy4KClRoaXMgaXMgWFNBLTMwMi4KClNpZ25lZC1vZmYt Ynk6IFBhdWwgRHVycmFudCA8cGF1bC5kdXJyYW50QGNpdHJpeC5jb20+ClNp Z25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4K U2lnbmVkLW9mZi1ieTogSWFuIEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNp dHJpeC5jb20+Ci0tLQogdG9vbHMvbGlieGwvbGlieGxfcGNpLmMgICAgICAg ICAgICAgICAgICAgICB8IDI1ICsrKysrKysrKysrLQogeGVuL2NvbW1vbi9k b21haW4uYyAgICAgICAgICAgICAgICAgICAgICAgICB8ICAxICsKIHhlbi9j b21tb24vZG9tY3RsLmMgICAgICAgICAgICAgICAgICAgICAgICAgfCAxNCAr KysrKystCiB4ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9hbWQvcGNpX2FtZF9p b21tdS5jIHwgMTAgKysrKy0KIHhlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2lv bW11LmMgICAgICAgICAgICAgfCAgNiArKy0KIHhlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL3BjaS5jICAgICAgICAgICAgICAgfCA1OSArKysrKysrKysrKysr KysrKysrKysrLS0tLS0tLQogeGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvdnRk L2lvbW11LmMgICAgICAgICB8IDQwICsrKysrKysrKysrKysrKystLS0KIHhl bi9pbmNsdWRlL3hlbi9wY2kuaCAgICAgICAgICAgICAgICAgICAgICAgfCAg MyArKwogOCBmaWxlcyBjaGFuZ2VkLCAxMzMgaW5zZXJ0aW9ucygrKSwgMjUg ZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvdG9vbHMvbGlieGwvbGlieGxf cGNpLmMgYi90b29scy9saWJ4bC9saWJ4bF9wY2kuYwppbmRleCBiNTQ0NGQx NTUyLi4yY2NhYjAzM2I0IDEwMDY0NAotLS0gYS90b29scy9saWJ4bC9saWJ4 bF9wY2kuYworKysgYi90b29scy9saWJ4bC9saWJ4bF9wY2kuYwpAQCAtNzY2 LDYgKzc2Niw3IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9wY2lfYXNz aWduYWJsZV9hZGQobGlieGxfX2djICpnYywKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgbGlieGxfZGV2aWNlX3BjaSAq cGNpZGV2LAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBpbnQgcmViaW5kKQogeworICAgIGxpYnhsX2N0eCAqY3R4ID0g bGlieGxfX2djX293bmVyKGdjKTsKICAgICB1bnNpZ25lZCBkb20sIGJ1cywg ZGV2LCBmdW5jOwogICAgIGNoYXIgKnNwYXRoLCAqZHJpdmVyX3BhdGggPSBO VUxMOwogICAgIGludCByYzsKQEAgLTc5MSw3ICs3OTIsNyBAQCBzdGF0aWMg aW50IGxpYnhsX19kZXZpY2VfcGNpX2Fzc2lnbmFibGVfYWRkKGxpYnhsX19n YyAqZ2MsCiAgICAgfQogICAgIGlmICggcmMgKSB7CiAgICAgICAgIExPRyhX QVJOLCBQQ0lfQkRGIiBhbHJlYWR5IGFzc2lnbmVkIHRvIHBjaWJhY2siLCBk b20sIGJ1cywgZGV2LCBmdW5jKTsKLSAgICAgICAgcmV0dXJuIDA7CisgICAg ICAgIGdvdG8gcXVhcmFudGluZTsKICAgICB9CiAKICAgICAvKiBDaGVjayB0 byBzZWUgaWYgdGhlcmUncyBhbHJlYWR5IGEgZHJpdmVyIHRoYXQgd2UgbmVl ZCB0byB1bmJpbmQgZnJvbSAqLwpAQCAtODIyLDYgKzgyMywxOSBAQCBzdGF0 aWMgaW50IGxpYnhsX19kZXZpY2VfcGNpX2Fzc2lnbmFibGVfYWRkKGxpYnhs X19nYyAqZ2MsCiAgICAgICAgIHJldHVybiBFUlJPUl9GQUlMOwogICAgIH0K IAorcXVhcmFudGluZToKKyAgICAvKgorICAgICAqIERPTUlEX0lPIGlzIGp1 c3QgYSBzZW50aW5lbCBkb21haW4sIHdpdGhvdXQgYW55IGFjdHVhbCBtYXBw aW5ncywKKyAgICAgKiBzbyBhbHdheXMgcGFzcyBYRU5fRE9NQ1RMX0RFVl9S RE1fUkVMQVhFRCB0byBhdm9pZCBhc3NpZ25tZW50IGJlaW5nCisgICAgICog dW5uZWNlc3NhcmlseSBkZW5pZWQuCisgICAgICovCisgICAgcmMgPSB4Y19h c3NpZ25fZGV2aWNlKGN0eC0+eGNoLCBET01JRF9JTywgcGNpZGV2X2VuY29k ZV9iZGYocGNpZGV2KSwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgWEVO X0RPTUNUTF9ERVZfUkRNX1JFTEFYRUQpOworICAgIGlmICggcmMgPCAwICkg eworICAgICAgICBMT0coRVJST1IsICJmYWlsZWQgdG8gcXVhcmFudGluZSAi UENJX0JERiwgZG9tLCBidXMsIGRldiwgZnVuYyk7CisgICAgICAgIHJldHVy biBFUlJPUl9GQUlMOworICAgIH0KKwogICAgIHJldHVybiAwOwogfQogCkBA IC04MjksOSArODQzLDE4IEBAIHN0YXRpYyBpbnQgbGlieGxfX2RldmljZV9w Y2lfYXNzaWduYWJsZV9yZW1vdmUobGlieGxfX2djICpnYywKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbGlieGxf ZGV2aWNlX3BjaSAqcGNpZGV2LAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBpbnQgcmViaW5kKQogeworICAgIGxp YnhsX2N0eCAqY3R4ID0gbGlieGxfX2djX293bmVyKGdjKTsKICAgICBpbnQg cmM7CiAgICAgY2hhciAqZHJpdmVyX3BhdGg7CiAKKyAgICAvKiBEZS1xdWFy YW50aW5lICovCisgICAgcmMgPSB4Y19kZWFzc2lnbl9kZXZpY2UoY3R4LT54 Y2gsIERPTUlEX0lPLCBwY2lkZXZfZW5jb2RlX2JkZihwY2lkZXYpKTsKKyAg ICBpZiAoIHJjIDwgMCApIHsKKyAgICAgICAgTE9HKEVSUk9SLCAiZmFpbGVk IHRvIGRlLXF1YXJhbnRpbmUgIlBDSV9CREYsIHBjaWRldi0+ZG9tYWluLCBw Y2lkZXYtPmJ1cywKKyAgICAgICAgICAgIHBjaWRldi0+ZGV2LCBwY2lkZXYt PmZ1bmMpOworICAgICAgICByZXR1cm4gRVJST1JfRkFJTDsKKyAgICB9CisK ICAgICAvKiBVbmJpbmQgZnJvbSBwY2liYWNrICovCiAgICAgaWYgKCAocmM9 cGNpYmFja19kZXZfaXNfYXNzaWduZWQoZ2MsIHBjaWRldikpIDwgMCApIHsK ICAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CmRpZmYgLS1naXQgYS94ZW4v Y29tbW9uL2RvbWFpbi5jIGIveGVuL2NvbW1vbi9kb21haW4uYwppbmRleCA5 YzczNjBlZDJhLi5mYzI0MjNhNWQyIDEwMDY0NAotLS0gYS94ZW4vY29tbW9u L2RvbWFpbi5jCisrKyBiL3hlbi9jb21tb24vZG9tYWluLmMKQEAgLTU0OCw2 ICs1NDgsNyBAQCB2b2lkIF9faW5pdCBzZXR1cF9zeXN0ZW1fZG9tYWlucyh2 b2lkKQogICAgICAqIEluaXRpYWxpc2Ugb3VyIERPTUlEX0lPIGRvbWFpbi4K ICAgICAgKiBUaGlzIGRvbWFpbiBvd25zIEkvTyBwYWdlcyB0aGF0IGFyZSB3 aXRoaW4gdGhlIHJhbmdlIG9mIHRoZSBwYWdlX2luZm8KICAgICAgKiBhcnJh eS4gTWFwcGluZ3Mgb2NjdXIgYXQgdGhlIHByaXYgb2YgdGhlIGNhbGxlci4K KyAgICAgKiBRdWFyYW50aW5lZCBQQ0kgZGV2aWNlcyB3aWxsIGJlIGFzc29j aWF0ZWQgd2l0aCB0aGlzIGRvbWFpbi4KICAgICAgKi8KICAgICBkb21faW8g PSBkb21haW5fY3JlYXRlKERPTUlEX0lPLCBOVUxMLCBmYWxzZSk7CiAgICAg aWYgKCBJU19FUlIoZG9tX2lvKSApCmRpZmYgLS1naXQgYS94ZW4vY29tbW9u L2RvbWN0bC5jIGIveGVuL2NvbW1vbi9kb21jdGwuYwppbmRleCBkNTk3YTA5 Zjk4Li4wM2QwMjI2MDM5IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL2RvbWN0 bC5jCisrKyBiL3hlbi9jb21tb24vZG9tY3RsLmMKQEAgLTM4Myw2ICszODMs MTYgQEAgbG9uZyBkb19kb21jdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4 ZW5fZG9tY3RsX3QpIHVfZG9tY3RsKQogCiAgICAgc3dpdGNoICggb3AtPmNt ZCApCiAgICAgeworICAgIGNhc2UgWEVOX0RPTUNUTF9hc3NpZ25fZGV2aWNl OgorICAgIGNhc2UgWEVOX0RPTUNUTF9kZWFzc2lnbl9kZXZpY2U6CisgICAg ICAgIGlmICggb3AtPmRvbWFpbiA9PSBET01JRF9JTyApCisgICAgICAgIHsK KyAgICAgICAgICAgIGQgPSBkb21faW87CisgICAgICAgICAgICBicmVhazsK KyAgICAgICAgfQorICAgICAgICBlbHNlIGlmICggb3AtPmRvbWFpbiA9PSBE T01JRF9JTlZBTElEICkKKyAgICAgICAgICAgIHJldHVybiAtRVNSQ0g7Cisg ICAgICAgIC8qIGZhbGwgdGhyb3VnaCAqLwogICAgIGNhc2UgWEVOX0RPTUNU TF90ZXN0X2Fzc2lnbl9kZXZpY2U6CiAgICAgY2FzZSBYRU5fRE9NQ1RMX3Zt X2V2ZW50X29wOgogICAgICAgICBpZiAoIG9wLT5kb21haW4gPT0gRE9NSURf SU5WQUxJRCApCkBAIC00MDUsNyArNDE1LDcgQEAgbG9uZyBkb19kb21jdGwo WEVOX0dVRVNUX0hBTkRMRV9QQVJBTSh4ZW5fZG9tY3RsX3QpIHVfZG9tY3Rs KQogCiAgICAgaWYgKCAhZG9tY3RsX2xvY2tfYWNxdWlyZSgpICkKICAgICB7 Ci0gICAgICAgIGlmICggZCApCisgICAgICAgIGlmICggZCAmJiBkICE9IGRv bV9pbyApCiAgICAgICAgICAgICByY3VfdW5sb2NrX2RvbWFpbihkKTsKICAg ICAgICAgcmV0dXJuIGh5cGVyY2FsbF9jcmVhdGVfY29udGludWF0aW9uKAog ICAgICAgICAgICAgX19IWVBFUlZJU09SX2RvbWN0bCwgImgiLCB1X2RvbWN0 bCk7CkBAIC0xMDY0LDcgKzEwNzQsNyBAQCBsb25nIGRvX2RvbWN0bChYRU5f R1VFU1RfSEFORExFX1BBUkFNKHhlbl9kb21jdGxfdCkgdV9kb21jdGwpCiAg ICAgZG9tY3RsX2xvY2tfcmVsZWFzZSgpOwogCiAgZG9tY3RsX291dF91bmxv Y2tfZG9tb25seToKLSAgICBpZiAoIGQgKQorICAgIGlmICggZCAmJiBkICE9 IGRvbV9pbyApCiAgICAgICAgIHJjdV91bmxvY2tfZG9tYWluKGQpOwogCiAg ICAgaWYgKCBjb3B5YmFjayAmJiBfX2NvcHlfdG9fZ3Vlc3QodV9kb21jdGws IG9wLCAxKSApCmRpZmYgLS1naXQgYS94ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC9hbWQvcGNpX2FtZF9pb21tdS5jIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91 Z2gvYW1kL3BjaV9hbWRfaW9tbXUuYwppbmRleCAwNTNlNzM1NWM0Li5iMjA0 NjI0NWQ3IDEwMDY0NAotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9h bWQvcGNpX2FtZF9pb21tdS5jCisrKyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJv dWdoL2FtZC9wY2lfYW1kX2lvbW11LmMKQEAgLTk1LDYgKzk1LDEwIEBAIHN0 YXRpYyB2b2lkIGFtZF9pb21tdV9zZXR1cF9kb21haW5fZGV2aWNlKAogICAg IHU4IGJ1cyA9IHBkZXYtPmJ1czsKICAgICBjb25zdCBzdHJ1Y3QgZG9tYWlu X2lvbW11ICpoZCA9IGRvbV9pb21tdShkb21haW4pOwogCisgICAgLyogZG9t X2lvIGlzIHVzZWQgYXMgYSBzZW50aW5lbCBmb3IgcXVhcmFudGluZWQgZGV2 aWNlcyAqLworICAgIGlmICggZG9tYWluID09IGRvbV9pbyApCisgICAgICAg IHJldHVybjsKKwogICAgIEJVR19PTiggIWhkLT5hcmNoLnJvb3RfdGFibGUg fHwgIWhkLT5hcmNoLnBhZ2luZ19tb2RlIHx8CiAgICAgICAgICAgICAhaW9t bXUtPmRldl90YWJsZS5idWZmZXIgKTsKIApAQCAtMjc2LDYgKzI4MCwxMCBA QCBzdGF0aWMgdm9pZCBhbWRfaW9tbXVfZGlzYWJsZV9kb21haW5fZGV2aWNl KGNvbnN0IHN0cnVjdCBkb21haW4gKmRvbWFpbiwKICAgICBpbnQgcmVxX2lk OwogICAgIHU4IGJ1cyA9IHBkZXYtPmJ1czsKIAorICAgIC8qIGRvbV9pbyBp cyB1c2VkIGFzIGEgc2VudGluZWwgZm9yIHF1YXJhbnRpbmVkIGRldmljZXMg Ki8KKyAgICBpZiAoIGRvbWFpbiA9PSBkb21faW8gKQorICAgICAgICByZXR1 cm47CisKICAgICBCVUdfT04gKCBpb21tdS0+ZGV2X3RhYmxlLmJ1ZmZlciA9 PSBOVUxMICk7CiAgICAgcmVxX2lkID0gZ2V0X2RtYV9yZXF1ZXN0b3JfaWQo aW9tbXUtPnNlZywgUENJX0JERjIoYnVzLCBkZXZmbikpOwogICAgIHRhYmxl ID0gaW9tbXUtPmRldl90YWJsZS5idWZmZXI7CkBAIC0zNzMsNyArMzgxLDcg QEAgc3RhdGljIGludCBhbWRfaW9tbXVfYXNzaWduX2RldmljZShzdHJ1Y3Qg ZG9tYWluICpkLCB1OCBkZXZmbiwKICAgICAgICAgICAgIGl2cnNfbWFwcGlu Z3NbcmVxX2lkXS5yZWFkX3Blcm1pc3Npb24pOwogICAgIH0KIAotICAgIHJl dHVybiByZWFzc2lnbl9kZXZpY2UoaGFyZHdhcmVfZG9tYWluLCBkLCBkZXZm biwgcGRldik7CisgICAgcmV0dXJuIHJlYXNzaWduX2RldmljZShwZGV2LT5k b21haW4sIGQsIGRldmZuLCBwZGV2KTsKIH0KIAogc3RhdGljIHZvaWQgZGVh bGxvY2F0ZV9uZXh0X3BhZ2VfdGFibGUoc3RydWN0IHBhZ2VfaW5mbyAqcGcs IGludCBsZXZlbCkKZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJv dWdoL2lvbW11LmMgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC9pb21tdS5j CmluZGV4IDllZjVmMzc2YzUuLjhjYmU5MDhmZmYgMTAwNjQ0Ci0tLSBhL3hl bi9kcml2ZXJzL3Bhc3N0aHJvdWdoL2lvbW11LmMKKysrIGIveGVuL2RyaXZl cnMvcGFzc3Rocm91Z2gvaW9tbXUuYwpAQCAtMTgxLDcgKzE4MSw3IEBAIGlu dCBpb21tdV9kb21haW5faW5pdChzdHJ1Y3QgZG9tYWluICpkLCB1bnNpZ25l ZCBpbnQgb3B0cykKIAogICAgIGhkLT5wbGF0Zm9ybV9vcHMgPSBpb21tdV9n ZXRfb3BzKCk7CiAgICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+aW5pdChk KTsKLSAgICBpZiAoIHJldCApCisgICAgaWYgKCByZXQgfHwgaXNfc3lzdGVt X2RvbWFpbihkKSApCiAgICAgICAgIHJldHVybiByZXQ7CiAKICAgICBpZiAo IGlzX2hhcmR3YXJlX2RvbWFpbihkKSApCkBAIC00NzMsNiArNDczLDEwIEBA IGludCBfX2luaXQgaW9tbXVfc2V0dXAodm9pZCkKICAgICB9CiAgICAgZWxz ZQogICAgIHsKKyAgICAgICAgZG9tX2lvLT5vcHRpb25zIHw9IFhFTl9ET01D VExfQ0RGX2lvbW11OworICAgICAgICBpZiAoIGlvbW11X2RvbWFpbl9pbml0 KGRvbV9pbywgMCkgKQorICAgICAgICAgICAgcGFuaWMoIkNvdWxkIG5vdCBz ZXQgdXAgcXVhcmFudGluZVxuIik7CisKICAgICAgICAgcHJpbnRrKCIgLSBE b20wIG1vZGU6ICVzXG4iLAogICAgICAgICAgICAgICAgaW9tbXVfaHdkb21f cGFzc3Rocm91Z2ggPyAiUGFzc3Rocm91Z2giIDoKICAgICAgICAgICAgICAg IGlvbW11X2h3ZG9tX3N0cmljdCA/ICJTdHJpY3QiIDogIlJlbGF4ZWQiKTsK ZGlmZiAtLWdpdCBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3BjaS5jIGIv eGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNpLmMKaW5kZXggYmRjYzQ4MmQ4 MS4uMThhN2RjNzIyNCAxMDA2NDQKLS0tIGEveGVuL2RyaXZlcnMvcGFzc3Ro cm91Z2gvcGNpLmMKKysrIGIveGVuL2RyaXZlcnMvcGFzc3Rocm91Z2gvcGNp LmMKQEAgLTkxMCw2ICs5MTAsNyBAQCBzdGF0aWMgaW50IGRlYXNzaWduX2Rl dmljZShzdHJ1Y3QgZG9tYWluICpkLCB1aW50MTZfdCBzZWcsIHVpbnQ4X3Qg YnVzLAogewogICAgIGNvbnN0IHN0cnVjdCBkb21haW5faW9tbXUgKmhkID0g ZG9tX2lvbW11KGQpOwogICAgIHN0cnVjdCBwY2lfZGV2ICpwZGV2OworICAg IHN0cnVjdCBkb21haW4gKnRhcmdldDsKICAgICBpbnQgcmV0ID0gMDsKIAog ICAgIGlmICggIWlzX2lvbW11X2VuYWJsZWQoZCkgKQpAQCAtOTIwLDEyICs5 MjEsMTYgQEAgc3RhdGljIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRv bWFpbiAqZCwgdWludDE2X3Qgc2VnLCB1aW50OF90IGJ1cywKICAgICBpZiAo ICFwZGV2ICkKICAgICAgICAgcmV0dXJuIC1FTk9ERVY7CiAKKyAgICAvKiBE ZS1hc3NpZ25tZW50IGZyb20gZG9tX2lvIHNob3VsZCBkZS1xdWFyYW50aW5l IHRoZSBkZXZpY2UgKi8KKyAgICB0YXJnZXQgPSAocGRldi0+cXVhcmFudGlu ZSAmJiBwZGV2LT5kb21haW4gIT0gZG9tX2lvKSA/CisgICAgICAgIGRvbV9p byA6IGhhcmR3YXJlX2RvbWFpbjsKKwogICAgIHdoaWxlICggcGRldi0+cGhh bnRvbV9zdHJpZGUgKQogICAgIHsKICAgICAgICAgZGV2Zm4gKz0gcGRldi0+ cGhhbnRvbV9zdHJpZGU7CiAgICAgICAgIGlmICggUENJX1NMT1QoZGV2Zm4p ICE9IFBDSV9TTE9UKHBkZXYtPmRldmZuKSApCiAgICAgICAgICAgICBicmVh azsKLSAgICAgICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3NpZ25f ZGV2aWNlKGQsIGhhcmR3YXJlX2RvbWFpbiwgZGV2Zm4sCisgICAgICAgIHJl dCA9IGhkLT5wbGF0Zm9ybV9vcHMtPnJlYXNzaWduX2RldmljZShkLCB0YXJn ZXQsIGRldmZuLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgcGNpX3RvX2RldihwZGV2KSk7CiAgICAgICAgIGlm ICggIXJldCApCiAgICAgICAgICAgICBjb250aW51ZTsKQEAgLTkzNiw3ICs5 NDEsNyBAQCBzdGF0aWMgaW50IGRlYXNzaWduX2RldmljZShzdHJ1Y3QgZG9t YWluICpkLCB1aW50MTZfdCBzZWcsIHVpbnQ4X3QgYnVzLAogICAgIH0KIAog ICAgIGRldmZuID0gcGRldi0+ZGV2Zm47Ci0gICAgcmV0ID0gaGQtPnBsYXRm b3JtX29wcy0+cmVhc3NpZ25fZGV2aWNlKGQsIGhhcmR3YXJlX2RvbWFpbiwg ZGV2Zm4sCisgICAgcmV0ID0gaGQtPnBsYXRmb3JtX29wcy0+cmVhc3NpZ25f ZGV2aWNlKGQsIHRhcmdldCwgZGV2Zm4sCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHBjaV90b19kZXYocGRldikpOwog ICAgIGlmICggcmV0ICkKICAgICB7CkBAIC05NDYsNiArOTUxLDkgQEAgc3Rh dGljIGludCBkZWFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAqZCwgdWlu dDE2X3Qgc2VnLCB1aW50OF90IGJ1cywKICAgICAgICAgcmV0dXJuIHJldDsK ICAgICB9CiAKKyAgICBpZiAoIHBkZXYtPmRvbWFpbiA9PSBoYXJkd2FyZV9k b21haW4gICkKKyAgICAgICAgcGRldi0+cXVhcmFudGluZSA9IGZhbHNlOwor CiAgICAgcGRldi0+ZmF1bHQuY291bnQgPSAwOwogCiAgICAgcmV0dXJuIHJl dDsKQEAgLTE0NjIsMTkgKzE0NzAsMjkgQEAgc3RhdGljIGludCBpb21tdV9y ZW1vdmVfZGV2aWNlKHN0cnVjdCBwY2lfZGV2ICpwZGV2KQogICAgIHJldHVy biBoZC0+cGxhdGZvcm1fb3BzLT5yZW1vdmVfZGV2aWNlKHBkZXYtPmRldmZu LCBwY2lfdG9fZGV2KHBkZXYpKTsKIH0KIAotLyoKLSAqIElmIHRoZSBkZXZp Y2UgaXNuJ3Qgb3duZWQgYnkgdGhlIGhhcmR3YXJlIGRvbWFpbiwgaXQgbWVh bnMgaXQgYWxyZWFkeQotICogaGFzIGJlZW4gYXNzaWduZWQgdG8gb3RoZXIg ZG9tYWluLCBvciBpdCBkb2Vzbid0IGV4aXN0LgotICovCiBzdGF0aWMgaW50 IGRldmljZV9hc3NpZ25lZCh1MTYgc2VnLCB1OCBidXMsIHU4IGRldmZuKQog ewogICAgIHN0cnVjdCBwY2lfZGV2ICpwZGV2OworICAgIGludCByYyA9IDA7 CiAKICAgICBwY2lkZXZzX2xvY2soKTsKLSAgICBwZGV2ID0gcGNpX2dldF9w ZGV2X2J5X2RvbWFpbihoYXJkd2FyZV9kb21haW4sIHNlZywgYnVzLCBkZXZm bik7CisKKyAgICBwZGV2ID0gcGNpX2dldF9wZGV2KHNlZywgYnVzLCBkZXZm bik7CisKKyAgICBpZiAoICFwZGV2ICkKKyAgICAgICAgcmMgPSAtRU5PREVW OworICAgIC8qCisgICAgICogSWYgdGhlIGRldmljZSBleGlzdHMgYW5kIGl0 IGlzIG5vdCBvd25lZCBieSBlaXRoZXIgdGhlIGhhcmR3YXJlCisgICAgICog ZG9tYWluIG9yIGRvbV9pbyB0aGVuIGl0IG11c3QgYmUgYXNzaWduZWQgdG8g YSBndWVzdCwgb3IgYmUKKyAgICAgKiBoaWRkZW4gKG93bmVkIGJ5IGRvbV94 ZW4pLgorICAgICAqLworICAgIGVsc2UgaWYgKCBwZGV2LT5kb21haW4gIT0g aGFyZHdhcmVfZG9tYWluICYmCisgICAgICAgICAgICAgIHBkZXYtPmRvbWFp biAhPSBkb21faW8gKQorICAgICAgICByYyA9IC1FQlVTWTsKKwogICAgIHBj aWRldnNfdW5sb2NrKCk7CiAKLSAgICByZXR1cm4gcGRldiA/IDAgOiAtRUJV U1k7CisgICAgcmV0dXJuIHJjOwogfQogCiBzdGF0aWMgaW50IGFzc2lnbl9k ZXZpY2Uoc3RydWN0IGRvbWFpbiAqZCwgdTE2IHNlZywgdTggYnVzLCB1OCBk ZXZmbiwgdTMyIGZsYWcpCkBAIC0xNDg4LDcgKzE1MDYsOCBAQCBzdGF0aWMg aW50IGFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAqZCwgdTE2IHNlZywg dTggYnVzLCB1OCBkZXZmbiwgdTMyIGZsYWcpCiAKICAgICAvKiBQcmV2ZW50 IGRldmljZSBhc3NpZ24gaWYgbWVtIHBhZ2luZyBvciBtZW0gc2hhcmluZyBo YXZlIGJlZW4gCiAgICAgICogZW5hYmxlZCBmb3IgdGhpcyBkb21haW4gKi8K LSAgICBpZiAoIHVubGlrZWx5KChpc19odm1fZG9tYWluKGQpICYmCisgICAg aWYgKCBkICE9IGRvbV9pbyAmJgorICAgICAgICAgdW5saWtlbHkoKGlzX2h2 bV9kb21haW4oZCkgJiYKICAgICAgICAgICAgICAgICAgICBkLT5hcmNoLmh2 bS5tZW1fc2hhcmluZ19lbmFibGVkKSB8fAogICAgICAgICAgICAgICAgICAg dm1fZXZlbnRfY2hlY2tfcmluZyhkLT52bV9ldmVudF9wYWdpbmcpIHx8CiAg ICAgICAgICAgICAgICAgICBwMm1fZ2V0X2hvc3RwMm0oZCktPmdsb2JhbF9s b2dkaXJ0eSkgKQpAQCAtMTQ5NywxMiArMTUxNiwyMCBAQCBzdGF0aWMgaW50 IGFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAqZCwgdTE2IHNlZywgdTgg YnVzLCB1OCBkZXZmbiwgdTMyIGZsYWcpCiAgICAgaWYgKCAhcGNpZGV2c190 cnlsb2NrKCkgKQogICAgICAgICByZXR1cm4gLUVSRVNUQVJUOwogCi0gICAg cGRldiA9IHBjaV9nZXRfcGRldl9ieV9kb21haW4oaGFyZHdhcmVfZG9tYWlu LCBzZWcsIGJ1cywgZGV2Zm4pOworICAgIHBkZXYgPSBwY2lfZ2V0X3BkZXYo c2VnLCBidXMsIGRldmZuKTsKKworICAgIHJjID0gLUVOT0RFVjsKICAgICBp ZiAoICFwZGV2ICkKLSAgICB7Ci0gICAgICAgIHJjID0gcGNpX2dldF9wZGV2 KHNlZywgYnVzLCBkZXZmbikgPyAtRUJVU1kgOiAtRU5PREVWOwogICAgICAg ICBnb3RvIGRvbmU7Ci0gICAgfQorCisgICAgcmMgPSAwOworICAgIGlmICgg ZCA9PSBwZGV2LT5kb21haW4gKQorICAgICAgICBnb3RvIGRvbmU7CisKKyAg ICByYyA9IC1FQlVTWTsKKyAgICBpZiAoIHBkZXYtPmRvbWFpbiAhPSBoYXJk d2FyZV9kb21haW4gJiYKKyAgICAgICAgIHBkZXYtPmRvbWFpbiAhPSBkb21f aW8gKQorICAgICAgICBnb3RvIGRvbmU7CiAKICAgICBpZiAoIHBkZXYtPm1z aXggKQogICAgIHsKQEAgLTE1MzAsNiArMTU1NywxMCBAQCBzdGF0aWMgaW50 IGFzc2lnbl9kZXZpY2Uoc3RydWN0IGRvbWFpbiAqZCwgdTE2IHNlZywgdTgg YnVzLCB1OCBkZXZmbiwgdTMyIGZsYWcpCiAgICAgfQogCiAgZG9uZToKKyAg ICAvKiBUaGUgZGV2aWNlIGlzIGFzc2lnbmVkIHRvIGRvbV9pbyBzbyBtYXJr IGl0IGFzIHF1YXJhbnRpbmVkICovCisgICAgaWYgKCAhcmMgJiYgZCA9PSBk b21faW8gKQorICAgICAgICBwZGV2LT5xdWFyYW50aW5lID0gdHJ1ZTsKKwog ICAgIHBjaWRldnNfdW5sb2NrKCk7CiAKICAgICByZXR1cm4gcmM7CkBAIC0x NzA1LDcgKzE3MzYsNyBAQCBpbnQgaW9tbXVfZG9fcGNpX2RvbWN0bCgKICAg ICAgICAgICAgIHJldCA9IGh5cGVyY2FsbF9jcmVhdGVfY29udGludWF0aW9u KF9fSFlQRVJWSVNPUl9kb21jdGwsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAiaCIsIHVfZG9tY3RsKTsKICAg ICAgICAgZWxzZSBpZiAoIHJldCApCi0gICAgICAgICAgICBwcmludGsoWEVO TE9HX0dfRVJSICJYRU5fRE9NQ1RMX2Fzc2lnbl9kZXZpY2U6ICIKKyAgICAg ICAgICAgIHByaW50ayhYRU5MT0dfR19FUlIKICAgICAgICAgICAgICAgICAg ICAiYXNzaWduICUwNHg6JTAyeDolMDJ4LiV1IHRvIGRvbSVkIGZhaWxlZCAo JWQpXG4iLAogICAgICAgICAgICAgICAgICAgIHNlZywgYnVzLCBQQ0lfU0xP VChkZXZmbiksIFBDSV9GVU5DKGRldmZuKSwKICAgICAgICAgICAgICAgICAg ICBkLT5kb21haW5faWQsIHJldCk7CmRpZmYgLS1naXQgYS94ZW4vZHJpdmVy cy9wYXNzdGhyb3VnaC92dGQvaW9tbXUuYyBiL3hlbi9kcml2ZXJzL3Bhc3N0 aHJvdWdoL3Z0ZC9pb21tdS5jCmluZGV4IGYwOGVlYzA3MGQuLjUzNDkzZWZj Y2MgMTAwNjQ0Ci0tLSBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3Z0ZC9p b21tdS5jCisrKyBiL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdoL3Z0ZC9pb21t dS5jCkBAIC0xMjkwLDYgKzEyOTAsMTAgQEAgaW50IGRvbWFpbl9jb250ZXh0 X21hcHBpbmdfb25lKAogICAgIGludCBhZ2F3LCByYywgcmV0OwogICAgIGJv b2xfdCBmbHVzaF9kZXZfaW90bGI7CiAKKyAgICAvKiBkb21faW8gaXMgdXNl ZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBkZXZpY2VzICovCisg ICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAgICAgcmV0dXJuIDA7 CisKICAgICBBU1NFUlQocGNpZGV2c19sb2NrZWQoKSk7CiAgICAgc3Bpbl9s b2NrKCZpb21tdS0+bG9jayk7CiAgICAgbWFkZHIgPSBidXNfdG9fY29udGV4 dF9tYWRkcihpb21tdSwgYnVzKTsKQEAgLTE1MzYsNiArMTU0MCwxMCBAQCBp bnQgZG9tYWluX2NvbnRleHRfdW5tYXBfb25lKAogICAgIGludCBpb21tdV9k b21pZCwgcmMsIHJldDsKICAgICBib29sX3QgZmx1c2hfZGV2X2lvdGxiOwog CisgICAgLyogZG9tX2lvIGlzIHVzZWQgYXMgYSBzZW50aW5lbCBmb3IgcXVh cmFudGluZWQgZGV2aWNlcyAqLworICAgIGlmICggZG9tYWluID09IGRvbV9p byApCisgICAgICAgIHJldHVybiAwOworCiAgICAgQVNTRVJUKHBjaWRldnNf bG9ja2VkKCkpOwogICAgIHNwaW5fbG9jaygmaW9tbXUtPmxvY2spOwogCkBA IC0xNjY4LDYgKzE2NzYsMTAgQEAgc3RhdGljIGludCBkb21haW5fY29udGV4 dF91bm1hcChzdHJ1Y3QgZG9tYWluICpkb21haW4sIHU4IGRldmZuLAogICAg ICAgICBnb3RvIG91dDsKICAgICB9CiAKKyAgICAvKiBkb21faW8gaXMgdXNl ZCBhcyBhIHNlbnRpbmVsIGZvciBxdWFyYW50aW5lZCBkZXZpY2VzICovCisg ICAgaWYgKCBkb21haW4gPT0gZG9tX2lvICkKKyAgICAgICAgZ290byBvdXQ7 CisKICAgICAvKgogICAgICAqIGlmIG5vIG90aGVyIGRldmljZXMgdW5kZXIg dGhlIHNhbWUgaW9tbXUgb3duZWQgYnkgdGhpcyBkb21haW4sCiAgICAgICog Y2xlYXIgaW9tbXUgaW4gaW9tbXVfYml0bWFwIGFuZCBjbGVhciBkb21haW5f aWQgaW4gZG9taWRfYml0bXAKQEAgLTIzOTQsNiArMjQwNiwxNSBAQCBzdGF0 aWMgaW50IHJlYXNzaWduX2RldmljZV9vd25lcnNoaXAoCiAgICAgaWYgKCBy ZXQgKQogICAgICAgICByZXR1cm4gcmV0OwogCisgICAgaWYgKCBkZXZmbiA9 PSBwZGV2LT5kZXZmbiApCisgICAgeworICAgICAgICBsaXN0X21vdmUoJnBk ZXYtPmRvbWFpbl9saXN0LCAmZG9tX2lvLT5wZGV2X2xpc3QpOworICAgICAg ICBwZGV2LT5kb21haW4gPSBkb21faW87CisgICAgfQorCisgICAgaWYgKCAh aGFzX2FyY2hfcGRldnMoc291cmNlKSApCisgICAgICAgIHZteF9waV9ob29r c19kZWFzc2lnbihzb3VyY2UpOworCiAgICAgaWYgKCAhaGFzX2FyY2hfcGRl dnModGFyZ2V0KSApCiAgICAgICAgIHZteF9waV9ob29rc19hc3NpZ24odGFy Z2V0KTsKIApAQCAtMjQxMiwxNSArMjQzMywxMyBAQCBzdGF0aWMgaW50IHJl YXNzaWduX2RldmljZV9vd25lcnNoaXAoCiAgICAgICAgIHBkZXYtPmRvbWFp biA9IHRhcmdldDsKICAgICB9CiAKLSAgICBpZiAoICFoYXNfYXJjaF9wZGV2 cyhzb3VyY2UpICkKLSAgICAgICAgdm14X3BpX2hvb2tzX2RlYXNzaWduKHNv dXJjZSk7Ci0KICAgICByZXR1cm4gcmV0OwogfQogCiBzdGF0aWMgaW50IGlu dGVsX2lvbW11X2Fzc2lnbl9kZXZpY2UoCiAgICAgc3RydWN0IGRvbWFpbiAq ZCwgdTggZGV2Zm4sIHN0cnVjdCBwY2lfZGV2ICpwZGV2LCB1MzIgZmxhZykK IHsKKyAgICBzdHJ1Y3QgZG9tYWluICpzID0gcGRldi0+ZG9tYWluOwogICAg IHN0cnVjdCBhY3BpX3JtcnJfdW5pdCAqcm1ycjsKICAgICBpbnQgcmV0ID0g MCwgaTsKICAgICB1MTYgYmRmLCBzZWc7CkBAIC0yNDYzLDggKzI0ODIsOCBA QCBzdGF0aWMgaW50IGludGVsX2lvbW11X2Fzc2lnbl9kZXZpY2UoCiAgICAg ICAgIH0KICAgICB9CiAKLSAgICByZXQgPSByZWFzc2lnbl9kZXZpY2Vfb3du ZXJzaGlwKGhhcmR3YXJlX2RvbWFpbiwgZCwgZGV2Zm4sIHBkZXYpOwotICAg IGlmICggcmV0ICkKKyAgICByZXQgPSByZWFzc2lnbl9kZXZpY2Vfb3duZXJz aGlwKHMsIGQsIGRldmZuLCBwZGV2KTsKKyAgICBpZiAoIHJldCB8fCBkID09 IGRvbV9pbyApCiAgICAgICAgIHJldHVybiByZXQ7CiAKICAgICAvKiBTZXR1 cCBybXJyIGlkZW50aXR5IG1hcHBpbmcgKi8KQEAgLTI0NzcsMTEgKzI0OTYs MjAgQEAgc3RhdGljIGludCBpbnRlbF9pb21tdV9hc3NpZ25fZGV2aWNlKAog ICAgICAgICAgICAgcmV0ID0gcm1ycl9pZGVudGl0eV9tYXBwaW5nKGQsIDEs IHJtcnIsIGZsYWcpOwogICAgICAgICAgICAgaWYgKCByZXQgKQogICAgICAg ICAgICAgewotICAgICAgICAgICAgICAgIHJlYXNzaWduX2RldmljZV9vd25l cnNoaXAoZCwgaGFyZHdhcmVfZG9tYWluLCBkZXZmbiwgcGRldik7CisgICAg ICAgICAgICAgICAgaW50IHJjOworCisgICAgICAgICAgICAgICAgcmMgPSBy ZWFzc2lnbl9kZXZpY2Vfb3duZXJzaGlwKGQsIHMsIGRldmZuLCBwZGV2KTsK ICAgICAgICAgICAgICAgICBwcmludGsoWEVOTE9HX0dfRVJSIFZURFBSRUZJ WAogICAgICAgICAgICAgICAgICAgICAgICAiIGNhbm5vdCBtYXAgcmVzZXJ2 ZWQgcmVnaW9uICglIlBSSXg2NCIsJSJQUkl4NjQiXSBmb3IgRG9tJWQgKCVk KVxuIiwKICAgICAgICAgICAgICAgICAgICAgICAgcm1yci0+YmFzZV9hZGRy ZXNzLCBybXJyLT5lbmRfYWRkcmVzcywKICAgICAgICAgICAgICAgICAgICAg ICAgZC0+ZG9tYWluX2lkLCByZXQpOworICAgICAgICAgICAgICAgIGlmICgg cmMgKQorICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAgICAg cHJpbnRrKFhFTkxPR19FUlIgVlREUFJFRklYCisgICAgICAgICAgICAgICAg ICAgICAgICAgICAiIGZhaWxlZCB0byByZWNsYWltICUwNHg6JTAyeDolMDJ4 LiV1IGZyb20gJXBkICglZClcbiIsCisgICAgICAgICAgICAgICAgICAgICAg ICAgICBzZWcsIGJ1cywgUENJX1NMT1QoZGV2Zm4pLCBQQ0lfRlVOQyhkZXZm biksIGQsIHJjKTsKKyAgICAgICAgICAgICAgICAgICAgZG9tYWluX2NyYXNo KGQpOworICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgICAgICBicmVh azsKICAgICAgICAgICAgIH0KICAgICAgICAgfQpkaWZmIC0tZ2l0IGEveGVu L2luY2x1ZGUveGVuL3BjaS5oIGIveGVuL2luY2x1ZGUveGVuL3BjaS5oCmlu ZGV4IDM5M2NiNDVkZTMuLjJiYzRhYWY0NTMgMTAwNjQ0Ci0tLSBhL3hlbi9p bmNsdWRlL3hlbi9wY2kuaAorKysgYi94ZW4vaW5jbHVkZS94ZW4vcGNpLmgK QEAgLTk5LDYgKzk5LDkgQEAgc3RydWN0IHBjaV9kZXYgewogCiAgICAgbm9k ZWlkX3Qgbm9kZTsgLyogTlVNQSBub2RlICovCiAKKyAgICAvKiBEZXZpY2Ug dG8gYmUgcXVhcmFudGluZWQsIGRvbid0IGF1dG9tYXRpY2FsbHkgcmUtYXNz aWduIHRvIGRvbTAgKi8KKyAgICBib29sIHF1YXJhbnRpbmU7CisKICAgICAv KiBEZXZpY2Ugd2l0aCBlcnJhdGEsIGlnbm9yZSB0aGUgQkFScy4gKi8KICAg ICBib29sIGlnbm9yZV9iYXJzOwogCi0tIAoyLjExLjAKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator-- From xen-announce-bounces@lists.xenproject.org Thu Oct 31 12:31:15 2019 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 31 Oct 2019 12:31:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9bL-0008BQ-I3; Thu, 31 Oct 2019 12:30:55 +0000 Received: from us1-rack-iad1.inumbo.com ([172.99.69.81]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9bK-0008Aq-3g for xen-announce@lists.xen.org; Thu, 31 Oct 2019 12:30:54 +0000 X-Inumbo-ID: 4654f1de-fbda-11e9-beca-bc764e2007e4 Received: from mail.xenproject.org (unknown [104.130.215.37]) by us1-rack-iad1.inumbo.com (Halon) with ESMTPS id 4654f1de-fbda-11e9-beca-bc764e2007e4; Thu, 31 Oct 2019 12:30:51 +0000 (UTC) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1iQ9bA-0007Ca-Cb; Thu, 31 Oct 2019 12:30:44 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.89) (envelope-from ) id 1iQ9bA-0004NO-AA; Thu, 31 Oct 2019 12:30:44 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.508 (Entity 5.508) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Thu, 31 Oct 2019 12:30:44 +0000 Subject: [Xen-announce] Xen Security Advisory 303 v4 (CVE-2019-18422) - ARM: Interrupts are unconditionally unmasked in exception handlers X-BeenThere: xen-announce@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: "Xen.org security team" Errors-To: xen-announce-bounces@lists.xenproject.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2019-18422 / XSA-303 version 4 ARM: Interrupts are unconditionally unmasked in exception handlers UPDATES IN VERSION 4 ==================== Fix typoes in the series and add more reviewed-by tag. Public release. ISSUE DESCRIPTION ================= When an exception occurs on an ARM system which is handled without changing processor level, some interrupts are unconditionally enabled during exception entry. So exceptions which occur when interrupts are masked will effectively unmask the interrupts. IMPACT ====== A malicious guest might contrive to arrange for critical Xen code to run with interrupts erroneously enabled. This could lead to data corruption, denial of service, or possibly even privilege escalation. However a precise attack technique has not been identified. VULNERABLE SYSTEMS ================== All ARM systems are vulnerable. x86 systems are not vulnerable. On some platforms this issue could possibly be exploited by an unprivileged userspace attacker. CREDITS ======= This issue was discovered by Julian Grall of Arm. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa303/*.patch xen-unstable .. Xen 4.9 xsa303-4.8/*.patch Xen 4.8 $ sha256sum xsa303* xsa303*/* 66b3eb28cfa633999da7480a37cd919293eb87aa730e7bc58b12c47bcdb0c9c0 xsa303.meta 7769eee9b876cdb7dde2ec664d34a5067f9b639d5c543ee89ff2eda818f04cab xsa303-4.8/0001-Revert-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY.patch f1337aa8c4b38f4ab61e7206c7bd8f5c782583947d9b9e1e8c6f139db73ca2cb xsa303-4.8/0002-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY-macros.patch 160ea6acfba85faf1cbb670b0a3873f025c0dab388f73018a22a61104e1a5fe1 xsa303-4.8/0003-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch 2cc1e3282263f03c6b9c6e05039f84173b8dbc893a2cd88f80ce2275ff7478d8 xsa303-4.8/0004-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch 63c4a90c45ae28032e0149353cafd495cce5caa8c84ad022d21b8078710e996d xsa303-4.8/0005-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch 4da48a29aaad85a410021952b2b3cb4dae14365c688e724ed7fc80feea1334df xsa303/0001-xen-arm32-entry-Split-__DEFINE_ENTRY_TRAP-in-two.patch 99773cbfb6f0df5f0c83477c9dcd39127cb361213455bd2cb1f6bcfe4566d5a2 xsa303/0002-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch 9e8241c311aa8da7fcb1da09b9d8b5a55c26a10f02355e37e97d1e7a3b6db7be xsa303/0003-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch 4c9bc0d0b27eff06f65f1a679263ffbcc8aa4c65117840284dc115ae49e7966d xsa303/0004-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAl26014MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ79IIALZ04OSkaCmDXeNhb7mXPjqyNPGY8bqXwD1TQd51 W7yLo+DM/cnkj+u3UR96Mkma3eAj8sJLKeuQGRMScyyfNCj/b0pY0M1h6XRi5NLN zV6EWk7rR/87ID4Z82nwAq4lhsTgfgglH4I39oKZzFflHQtmij4DKuf/5K9g+6qT 8lc70ylgBep3Q3e73qJ1aLEvBYVnhs0lxY8QJDHOIS9GWY6/kqSVoWzK1dUtJDhD vB/MPBtG1WxJETrCjC1Fat6lmfErjqiqX/tunFVFASFPL4aOTSVA7Oo9IJYX9XSY 6f3le7BYj8xJUp7A0z2vv0YBQvOQ/bsvs4ONMRpRswwDA+Q= =eraI -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa303.meta" Content-Disposition: attachment; filename="xsa303.meta" Content-Transfer-Encoding: base64 ewogICJYU0EiOiAzMDMsCiAgIlN1cHBvcnRlZFZlcnNpb25zIjogWwogICAg Im1hc3RlciIsCiAgICAiNC4xMiIsCiAgICAiNC4xMSIsCiAgICAiNC4xMCIs CiAgICAiNC45IiwKICAgICI0LjgiCiAgXSwKICAiVHJlZXMiOiBbCiAgICAi eGVuIgogIF0sCiAgIlJlY2lwZXMiOiB7CiAgICAiNC4xMCI6IHsKICAgICAg IlJlY2lwZXMiOiB7CiAgICAgICAgInhlbiI6IHsKICAgICAgICAgICJTdGFi bGVSZWYiOiAiMzEzMWJmOTU2YWIxNTkyOTVlY2RkZTBjNWFkMDAzZDBjNWFm NDY5NSIsCiAgICAgICAgICAiUHJlcmVxcyI6IFsKICAgICAgICAgICAgMjk2 LAogICAgICAgICAgICAyOTgsCiAgICAgICAgICAgIDI5OSwKICAgICAgICAg ICAgMzAxLAogICAgICAgICAgICAzMDIKICAgICAgICAgIF0sCiAgICAgICAg ICAiUGF0Y2hlcyI6IFsKICAgICAgICAgICAgInhzYTMwMy8qIgogICAgICAg ICAgXQogICAgICAgIH0KICAgICAgfQogICAgfSwKICAgICI0LjExIjogewog ICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewogICAgICAgICAg IlN0YWJsZVJlZiI6ICIzMzQyZWU5MzE4Y2QzOGJhMDA2MjU1YjY4N2FiN2Ex NDUzOTllYTkyIiwKICAgICAgICAgICJQcmVyZXFzIjogWwogICAgICAgICAg ICAyOTYsCiAgICAgICAgICAgIDI5OCwKICAgICAgICAgICAgMjk5LAogICAg ICAgICAgICAzMDEsCiAgICAgICAgICAgIDMwMgogICAgICAgICAgXSwKICAg ICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNhMzAzLyoiCiAg ICAgICAgICBdCiAgICAgICAgfQogICAgICB9CiAgICB9LAogICAgIjQuMTIi OiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4ZW4iOiB7CiAgICAg ICAgICAiU3RhYmxlUmVmIjogIjU5OWQ2ZDIzY2JiNzkwYTc4OGY3YTQ5YWI0 ZjExZjFhM2I1YjQyOWUiLAogICAgICAgICAgIlByZXJlcXMiOiBbCiAgICAg ICAgICAgIDI5NiwKICAgICAgICAgICAgMjk4LAogICAgICAgICAgICAyOTks CiAgICAgICAgICAgIDMwMSwKICAgICAgICAgICAgMzAyCiAgICAgICAgICBd LAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAgICAgICJ4c2EzMDMv KiIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0KICAgIH0sCiAgICAi NC44IjogewogICAgICAiUmVjaXBlcyI6IHsKICAgICAgICAieGVuIjogewog ICAgICAgICAgIlN0YWJsZVJlZiI6ICJjNjcyMTBmNjBkZmE4MzU2NWQyNmFl NzEwZTRmNWU3MjlhOTVkY2U1IiwKICAgICAgICAgICJQcmVyZXFzIjogWwog ICAgICAgICAgICAyOTYsCiAgICAgICAgICAgIDI5OCwKICAgICAgICAgICAg Mjk5LAogICAgICAgICAgICAzMDEsCiAgICAgICAgICAgIDMwMgogICAgICAg ICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwogICAgICAgICAgICAieHNh MzAzLTQuOC8qIgogICAgICAgICAgXQogICAgICAgIH0KICAgICAgfQogICAg fSwKICAgICI0LjkiOiB7CiAgICAgICJSZWNpcGVzIjogewogICAgICAgICJ4 ZW4iOiB7CiAgICAgICAgICAiU3RhYmxlUmVmIjogIjhkMmE2ODgwMTUxOTNl MjBhZTQ3ZmUzYzIwOGY5OTEyODI0MGY4MjEiLAogICAgICAgICAgIlByZXJl cXMiOiBbCiAgICAgICAgICAgIDI5NiwKICAgICAgICAgICAgMjk4LAogICAg ICAgICAgICAyOTksCiAgICAgICAgICAgIDMwMSwKICAgICAgICAgICAgMzAy CiAgICAgICAgICBdLAogICAgICAgICAgIlBhdGNoZXMiOiBbCiAgICAgICAg ICAgICJ4c2EzMDMvKiIKICAgICAgICAgIF0KICAgICAgICB9CiAgICAgIH0K ICAgIH0sCiAgICAibWFzdGVyIjogewogICAgICAiUmVjaXBlcyI6IHsKICAg ICAgICAieGVuIjogewogICAgICAgICAgIlN0YWJsZVJlZiI6ICI1NWFiMjky YzQyZGI0MWIwNWNmZGJhMDEyNjgwYmYxZTBlYTAyZjdhIiwKICAgICAgICAg ICJQcmVyZXFzIjogWwogICAgICAgICAgICAyOTYsCiAgICAgICAgICAgIDI5 OCwKICAgICAgICAgICAgMjk5LAogICAgICAgICAgICAzMDEsCiAgICAgICAg ICAgIDMwMgogICAgICAgICAgXSwKICAgICAgICAgICJQYXRjaGVzIjogWwog ICAgICAgICAgICAieHNhMzAzLyoiCiAgICAgICAgICBdCiAgICAgICAgfQog ICAgICB9CiAgICB9CiAgfQp9 --=separator Content-Type: application/octet-stream; name="xsa303-4.8/0001-Revert-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY.patch" Content-Disposition: attachment; filename="xsa303-4.8/0001-Revert-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY.patch" Content-Transfer-Encoding: base64 RnJvbSAzYzI5NWExZWE1MWJkY2QzMTcwNGU5NjBhODg0N2VmNDFhYmI4YTYw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUaHUsIDE3IE9jdCAyMDE5 IDE0OjI1OjA1ICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzVdIFJldmVydCAi eGVuL2FybTMyOiBlbnRyeTogQ29uc29saWRhdGUgREVGSU5FX1RSQVBfRU5U UllfKgogbWFjcm9zIgoKVGhpcyByZXZlcnRzIGNvbW1pdCA2MDgyZTNiYTg5 NDFiM2QxMGMzY2I3M2Y0NDU3NTljMTllODlhZmM5LgoKVGhlIHBhdGNoIHdh cyBtZWFudCB0byBvbmx5IGNvbnNvbGlkYXRlIHRoZSBjb2RlIGJ1dCBpdCBh bHNvIHJlLWVuYWJsZXMKQWJvcnQgaW50ZXJydXB0LiBGb2xsb3ctdXAgcGF0 Y2ggd2lsbCBpbnRyb2R1Y2UgYSBkaWZmZXJlbnQgd2F5IHRvCmNvbnNvbGlk YXRlIHRoZSBjb2RlLgoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0zMDMuCgpSZXBv cnRlZC1ieTogSnVsaWVuIEdyYWxsIDxKdWxpZW4uR3JhbGxAYXJtLmNvbT4K U2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqdWxpZW4uZ3JhbGxAYXJt LmNvbT4KQWNrZWQtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxp bmlAa2VybmVsLm9yZz4KLS0tCiB4ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnku UyB8IDIyICsrKysrKysrKysrLS0tLS0tLS0tLS0KIDEgZmlsZSBjaGFuZ2Vk LCAxMSBpbnNlcnRpb25zKCspLCAxMSBkZWxldGlvbnMoLSkKCmRpZmYgLS1n aXQgYS94ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnkuUyBiL3hlbi9hcmNoL2Fy bS9hcm0zMi9lbnRyeS5TCmluZGV4IGI2NjcwNWZmNTAuLjNlMzIwZGM4YWMg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCisrKyBi L3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCkBAIC0xMTYsMTUgKzExNiwx MSBAQCBhYm9ydF9ndWVzdF9leGl0X2VuZDoKIAogICAgICAgICBtb3YgcGMs IGxyCiAKLS8qCi0gKiBNYWNybyB0byBkZWZpbmUgdHJhcCBlbnRyeS4gVGhl IGlmbGFncyBjb3JyZXNwb25kcyB0byB0aGUgbGlzdCBvZgotICogaW50ZXJy dXB0cyAoQXN5bmNocm9ub3VzIEFib3J0LCBJUlEsIEZJUSkgdG8gdW5tYXNr LgotICovCi0jZGVmaW5lIF9fREVGSU5FX1RSQVBfRU5UUlkodHJhcCwgaWZs YWdzKSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCisjZGVmaW5l IERFRklORV9UUkFQX0VOVFJZKHRyYXApICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgIEFMSUdOOyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiB0cmFwXyMjdHJhcDogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAg IFNBVkVfQUxMOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIGNwc2llIGlmbGFnczsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCisgICAgICAgIGNwc2llIGk7ICAgICAgICAvKiBsb2NhbF9pcnFf ZW5hYmxlICovICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAg IGFkciBsciwgcmV0dXJuX2Zyb21fdHJhcDsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCiAgICAgICAgIG1vdiByMCwgc3A7ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBcCiAgICAgICAgIC8qICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCkBAIC0xMzUs MTEgKzEzMSwxNSBAQCB0cmFwXyMjdHJhcDogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiAg ICAgICAgIGJpYyBzcCwgIzc7IC8qIEFsaWduIHRoZSBzdGFjayBwb2ludGVy IChub29wIG9uIGd1ZXN0IHRyYXApICovICBcCiAgICAgICAgIGIgZG9fdHJh cF8jI3RyYXAKIAotLyogVHJhcCBoYW5kbGVyIHdoaWNoIHVubWFzayBJUlEv QWJvcnQsIGtlZXAgRklRIG1hc2tlZCAqLwotI2RlZmluZSBERUZJTkVfVFJB UF9FTlRSWSh0cmFwKSBfX0RFRklORV9UUkFQX0VOVFJZKHRyYXAsIGFpKQot Ci0vKiBUcmFwIGhhbmRsZXIgd2hpY2ggdW5tYXNrIEFib3J0LCBrZWVwIElS US9GSVEgbWFza2VkICovCi0jZGVmaW5lIERFRklORV9UUkFQX0VOVFJZX05P SVJRKHRyYXApIF9fREVGSU5FX1RSQVBfRU5UUlkodHJhcCwgYSkKKyNkZWZp bmUgREVGSU5FX1RSQVBfRU5UUllfTk9JUlEodHJhcCkgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgQUxJR047ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKK3RyYXBfIyN0cmFwOiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAg ICAgU0FWRV9BTEw7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgYWRyIGxyLCByZXR1 cm5fZnJvbV90cmFwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKKyAgICAgICAgbW92IHIwLCBzcDsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAg ICAgbW92IHIxMSwgc3A7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKKyAgICAgICAgYmljIHNwLCAjNzsg LyogQWxpZ24gdGhlIHN0YWNrIHBvaW50ZXIgKG5vb3Agb24gZ3Vlc3QgdHJh cCkgKi8gIFwKKyAgICAgICAgYiBkb190cmFwXyMjdHJhcAogCiAgICAgICAg IC5hbGlnbiA1CiBHTE9CQUwoaHlwX3RyYXBzX3ZlY3RvcikKLS0gCjIuMTEu MAoK --=separator Content-Type: application/octet-stream; name="xsa303-4.8/0002-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY-macros.patch" Content-Disposition: attachment; filename="xsa303-4.8/0002-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY-macros.patch" Content-Transfer-Encoding: base64 RnJvbSBmOTg3OWY0ZWQxOThjYTAzYTAzYmY2OTE1MmYwMTU4YmU2NTgwMjUy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDEgT2N0IDIwMTkg MTM6MDc6NTMgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvNV0geGVuL2FybTMy OiBlbnRyeTogQ29uc29saWRhdGUgREVGSU5FX1RSQVBfRU5UUlkqKCkgbWFj cm9zCgpUaGUgb25seSBkaWZmZXJlbmNlIGJldHdlZW4gdGhlIHR3byBtYWNy b3MgREVGSU5FX1RSQVBfRU5UUlkoKSBhbmQKREVGSU5FX1RSQVBfRU5UUllf Tk9JUlEoKSBpcyB0aGUgbGlzdCBvZiBpbnRlcnJ1cHRzIHRvIGJlIHVubWFz a2VkLgoKV2hpbGUgdGhlIG1hY3JvcyBhcmUgZmFpcmx5IHNtYWxsIHRvZGF5 LCBpdCB3aWxsIGJlIG5lY2Vzc2FyeSB0byBhZGQgdGhlCnNhbWUgY29kZSB0 d2ljZSBpbiBmb2xsb3ctdXAgcGF0Y2hlcy4KClRvIHByZXZlbnQgdG9vIG11 Y2ggZHVwbGljYXRpb24sIGEgbmV3IGFzc2VtYmx5IG1hY3JvcyBpcyBpbnRy b2R1Y2VkIHRvCmdlbmVyYXRlIHRoZSBib2R5IG9mIGEgdHJhcC4KClRoaXMg aXMgcGFydCBvZiBYU0EtMzAzLgoKUmVwb3J0ZWQtYnk6IEp1bGllbiBHcmFs bCA8SnVsaWVuLkdyYWxsQGFybS5jb20+ClNpZ25lZC1vZmYtYnk6IEp1bGll biBHcmFsbCA8anVsaWVuLmdyYWxsQGFybS5jb20+CkFja2VkLWJ5OiBTdGVm YW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQog eGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMgfCA0MSArKysrKysrKysrKysr KysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQs IDI0IGluc2VydGlvbnMoKyksIDE3IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdp dCBhL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TIGIveGVuL2FyY2gvYXJt L2FybTMyL2VudHJ5LlMKaW5kZXggM2UzMjBkYzhhYy4uZjZiYTVhMjA4MiAx MDA2NDQKLS0tIGEveGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMKKysrIGIv eGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMKQEAgLTExNiwzMCArMTE2LDM3 IEBAIGFib3J0X2d1ZXN0X2V4aXRfZW5kOgogCiAgICAgICAgIG1vdiBwYywg bHIKIAorCisgICAgICAgIC8qCisgICAgICAgICAqIE1hY3JvIHRvIGRlZmlu ZSBhIHRyYXAgZW50cnkuIFRoZSBpZmxhZ3MgaXMgb3B0aW9uYWwgYW5kCisg ICAgICAgICAqIGNvcnJlc3BvbmRzIHRvIGFsaXN0IG9mIGludGVycnVwdHMg KEFzeW5jaHJvbm91cyBBYm9ydCwgSVJRLCBGSVEpCisgICAgICAgICAqIHRv IHVubWFzay4KKyAgICAgICAgICovCisgICAgICAgIC5tYWNybyB2ZWN0b3Ig dHJhcCwgaWZsYWdzPW4KKyAgICAgICAgU0FWRV9BTEwKKyAgICAgICAgLmlm IFxpZmxhZ3MgIT0gbgorICAgICAgICBjcHNpZSAgIFxpZmxhZ3MKKyAgICAg ICAgLmVuZGlmCisgICAgICAgIGFkciAgICAgbHIsIHJldHVybl9mcm9tX3Ry YXAKKyAgICAgICAgbW92ICAgICByMCwgc3AKKyAgICAgICAgLyoKKyAgICAg ICAgICogU2F2ZSB0aGUgc3RhY2sgcG9pbnRlciBpbiByMTEuIEl0IHdpbGwg YmUgcmVzdG9yZWQgYWZ0ZXIgdGhlCisgICAgICAgICAqIHRyYXAgaGFzIGJl ZW4gaGFuZGxlZCAoc2VlIHJldHVybl9mcm9tX3RyYXApLgorICAgICAgICAg Ki8KKyAgICAgICAgbW92ICAgICByMTEsIHNwCisgICAgICAgIGJpYyAgICAg c3AsICM3ICAgICAgLyogQWxpZ24gdGhlIHN0YWNrIHBvaW50ZXIgKG5vb3Ag b24gZ3Vlc3QgdHJhcCkgKi8KKyAgICAgICAgYiAgICAgICBkb190cmFwX1x0 cmFwCisgICAgICAgIC5lbmRtCisKICNkZWZpbmUgREVGSU5FX1RSQVBfRU5U UlkodHJhcCkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKICAgICAgICAgQUxJR047ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKIHRyYXBfIyN0 cmFwOiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgU0FWRV9BTEw7ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKLSAgICAgICAgY3BzaWUgaTsgICAgICAgIC8qIGxvY2FsX2lycV9l bmFibGUgKi8gICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAg YWRyIGxyLCByZXR1cm5fZnJvbV90cmFwOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgbW92IHIwLCBzcDsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFwKLSAgICAgICAgLyogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAg ICogU2F2ZSB0aGUgc3RhY2sgcG9pbnRlciBpbiByMTEuIEl0IHdpbGwgYmUg cmVzdG9yZWQgYWZ0ZXIgdGhlIFwKLSAgICAgICAgICogdHJhcCBoYXMgYmVl biBoYW5kbGVkIChzZWUgcmV0dXJuX2Zyb21fdHJhcCkuICAgICAgICAgICAg ICAgIFwKLSAgICAgICAgICovICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAg bW92IHIxMSwgc3A7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgYmljIHNwLCAjNzsgLyog QWxpZ24gdGhlIHN0YWNrIHBvaW50ZXIgKG5vb3Agb24gZ3Vlc3QgdHJhcCkg Ki8gIFwKLSAgICAgICAgYiBkb190cmFwXyMjdHJhcAorICAgICAgICB2ZWN0 b3IgdHJhcCwgaWZsYWdzPWkgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgXAogCiAjZGVmaW5lIERFRklORV9UUkFQX0VOVFJZ X05PSVJRKHRyYXApICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCiAgICAgICAgIEFMSUdOOyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCiB0cmFwXyMjdHJh cDogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIFNBVkVfQUxMOyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgIGFkciBsciwgcmV0dXJuX2Zyb21fdHJhcDsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIG1v diByMCwgc3A7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIG1vdiByMTEsIHNwOyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgIGJpYyBzcCwgIzc7IC8qIEFsaWduIHRoZSBzdGFjayBw b2ludGVyIChub29wIG9uIGd1ZXN0IHRyYXApICovICBcCi0gICAgICAgIGIg ZG9fdHJhcF8jI3RyYXAKKyAgICAgICAgdmVjdG9yIHRyYXAKIAogICAgICAg ICAuYWxpZ24gNQogR0xPQkFMKGh5cF90cmFwc192ZWN0b3IpCi0tIAoyLjEx LjAKCg== --=separator Content-Type: application/octet-stream; name="xsa303-4.8/0003-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch" Content-Disposition: attachment; filename="xsa303-4.8/0003-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch" Content-Transfer-Encoding: base64 RnJvbSA4ZGI0YTkzZGM2ZTJhYzY2YmFkMGRhYzI1NGU0OTc4OWE4Y2Q5ZmQy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDEgT2N0IDIwMTkg MTM6MTU6NDggKzAxMDAKU3ViamVjdDogW1BBVENIIDMvNV0geGVuL2FybTMy OiBlbnRyeTogRm9sZCB0aGUgbWFjcm8gU0FWRV9BTEwgaW4gdGhlIG1hY3Jv CiB2ZWN0b3IKCkZvbGxvdy11cCByZXdvcmsgd2lsbCByZXF1aXJlIHRoZSBt YWNybyB2ZWN0b3IgdG8gZGlzdGluZ3Vpc2ggYmV0d2VlbgphIHRyYXAgZnJv bSBhIGd1ZXN0IHZzIHdoaWxlIGluIHRoZSBoeXBlcnZpc29yLgoKVGhlIG1h Y3JvIFNBVkVfQUxMIGFscmVhZHkgaGFzIGNvZGUgdG8gZGlzdGluZ3Vpc2gg YmV0d2VlbiB0aGUgdHdvIGFuZAppdCBpcyBvbmx5IGNhbGxlZCBieSB0aGUg dmVjdG9yIG1hY3JvLiBTbyBmb2xkIHRoZSBmb3JtZXIgaW50byB0aGUKbGF0 dGVyLiBUaGlzIHdpbGwgaGVscCB0byBhdm9pZCBkdXBsaWNhdGluZyB0aGUg Y2hlY2suCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTMwMy4KClJlcG9ydGVkLWJ5 OiBKdWxpZW4gR3JhbGwgPEp1bGllbi5HcmFsbEBhcm0uY29tPgpTaWduZWQt b2ZmLWJ5OiBKdWxpZW4gR3JhbGwgPGp1bGllbi5ncmFsbEBhcm0uY29tPgpB Y2tlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3RhYmVsbGluaUBrZXJu ZWwub3JnPgotLS0KIHhlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TIHwgNDYg KysrKysrKysrKysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQogMSBmaWxlIGNoYW5nZWQsIDIzIGluc2VydGlvbnMoKyksIDIzIGRlbGV0 aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRy eS5TIGIveGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMKaW5kZXggZjZiYTVh MjA4Mi4uYzJkMGVjMjI3MyAxMDA2NDQKLS0tIGEveGVuL2FyY2gvYXJtL2Fy bTMyL2VudHJ5LlMKKysrIGIveGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMK QEAgLTEyLDI3ICsxMiw2IEBACiAjZGVmaW5lIFJFU1RPUkVfQkFOS0VEKG1v ZGUpIFwKICAgICAgICAgUkVTVE9SRV9PTkVfQkFOS0VEKFNQXyMjbW9kZSkg OyBSRVNUT1JFX09ORV9CQU5LRUQoTFJfIyNtb2RlKSA7IFJFU1RPUkVfT05F X0JBTktFRChTUFNSXyMjbW9kZSkKIAotI2RlZmluZSBTQVZFX0FMTCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBzdWIgc3AsICMoVVJFR1NfU1BfdXNyIC0gVVJF R1Nfc3ApOyAvKiBTUCwgTFIsIFNQU1IsIFBDICovICAgICAgXAotICAgICAg ICBwdXNoIHtyMC1yMTJ9OyAvKiBTYXZlIFIwLVIxMiAqLyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBtcnMgcjExLCBFTFJfaHlwOyAgICAgICAgICAg ICAgIC8qIEVMUl9oeXAgaXMgcmV0dXJuIGFkZHJlc3MuICovXAotICAgICAg ICBzdHIgcjExLCBbc3AsICNVUkVHU19wY107ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBzdHIgbHIsIFtzcCwgI1VSRUdTX2xyXTsgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICBhZGQgcjExLCBzcCwg I1VSRUdTX2tlcm5lbF9zaXplb2YrNDsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBzdHIgcjExLCBbc3AsICNVUkVHU19zcF07ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICBtcmMgQ1AzMihyMTEs IEhTUik7ICAgICAgICAgICAgIC8qIFNhdmUgZXhjZXB0aW9uIHN5bmRyb21l ICovICAgXAotICAgICAgICBzdHIgcjExLCBbc3AsICNVUkVHU19oc3JdOyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICBtcnMgcjExLCBTUFNS X2h5cDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBzdHIgcjExLCBbc3AsICNVUkVHU19jcHNyXTsg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotICAgICAg ICBhbmQgcjExLCAjUFNSX01PREVfTUFTSzsgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICBjbXAgcjExLCAjUFNS X01PREVfSFlQOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBibG5lIHNhdmVfZ3Vlc3RfcmVncwotCiBzYXZl X2d1ZXN0X3JlZ3M6CiAjaWZkZWYgQ09ORklHX0FSTTMyX0hBUkRFTl9CUkFO Q0hfUFJFRElDVE9SCiAgICAgICAgIC8qCkBAIC01MSw3ICszMCw3IEBAIHNh dmVfZ3Vlc3RfcmVnczoKICAgICAgICAgbGRyIHIxMSwgPTB4ZmZmZmZmZmYg IC8qIENsb2JiZXIgU1Agd2hpY2ggaXMgb25seSB2YWxpZCBmb3IgaHlwZXJ2 aXNvciBmcmFtZXMuICovCiAgICAgICAgIHN0ciByMTEsIFtzcCwgI1VSRUdT X3NwXQogICAgICAgICBTQVZFX09ORV9CQU5LRUQoU1BfdXNyKQotICAgICAg ICAvKiBMUl91c3IgaXMgdGhlIHNhbWUgcGh5c2ljYWwgcmVnaXN0ZXIgYXMg bHIgYW5kIGlzIHNhdmVkIGluIFNBVkVfQUxMICovCisgICAgICAgIC8qIExS X3VzciBpcyB0aGUgc2FtZSBwaHlzaWNhbCByZWdpc3RlciBhcyBsciBhbmQg aXMgc2F2ZWQgYnkgdGhlIGNhbGxlciAqLwogICAgICAgICBTQVZFX0JBTktF RChzdmMpCiAgICAgICAgIFNBVkVfQkFOS0VEKGFidCkKICAgICAgICAgU0FW RV9CQU5LRUQodW5kKQpAQCAtMTIzLDcgKzEwMiwyOCBAQCBhYm9ydF9ndWVz dF9leGl0X2VuZDoKICAgICAgICAgICogdG8gdW5tYXNrLgogICAgICAgICAg Ki8KICAgICAgICAgLm1hY3JvIHZlY3RvciB0cmFwLCBpZmxhZ3M9bgotICAg ICAgICBTQVZFX0FMTAorICAgICAgICAvKiBTYXZlIHJlZ2lzdGVycyBpbiB0 aGUgc3RhY2sgKi8KKyAgICAgICAgc3ViICAgICBzcCwgIyhVUkVHU19TUF91 c3IgLSBVUkVHU19zcCkgLyogU1AsIExSLCBTUFNSLCBQQyAqLworICAgICAg ICBwdXNoICAgIHtyMC1yMTJ9ICAgICAgICAgICAgICAgICAgICAgICAvKiBT YXZlIFIwLVIxMiAqLworICAgICAgICBtcnMgICAgIHIxMSwgRUxSX2h5cCAg ICAgICAgICAgICAgICAgICAvKiBFTFJfaHlwIGlzIHJldHVybiBhZGRyZXNz ICovCisgICAgICAgIHN0ciAgICAgcjExLCBbc3AsICNVUkVHU19wY10KKwor ICAgICAgICBzdHIgICAgIGxyLCBbc3AsICNVUkVHU19scl0KKworICAgICAg ICBhZGQgICAgIHIxMSwgc3AsICMoVVJFR1Nfa2VybmVsX3NpemVvZiArIDQp CisKKyAgICAgICAgc3RyICAgICByMTEsIFtzcCwgI1VSRUdTX3NwXQorCisg ICAgICAgIG1yYyAgICAgQ1AzMihyMTEsIEhTUikgICAgICAgICAgICAgICAg IC8qIFNhdmUgZXhjZXB0aW9uIHN5bmRyb21lICovCisgICAgICAgIHN0ciAg ICAgcjExLCBbc3AsICNVUkVHU19oc3JdCisKKyAgICAgICAgbXJzICAgICBy MTEsIFNQU1JfaHlwCisgICAgICAgIHN0ciAgICAgcjExLCBbc3AsICNVUkVH U19jcHNyXQorICAgICAgICBhbmQgICAgIHIxMSwgI1BTUl9NT0RFX01BU0sK KyAgICAgICAgY21wICAgICByMTEsICNQU1JfTU9ERV9IWVAKKyAgICAgICAg YmxuZSAgICBzYXZlX2d1ZXN0X3JlZ3MKKworICAgICAgICAvKiBXZSBhcmUg cmVhZHkgdG8gaGFuZGxlIHRoZSB0cmFwLCBzZXR1cCB0aGUgcmVnaXN0ZXJz IGFuZCBqdW1wLiAqLwogICAgICAgICAuaWYgXGlmbGFncyAhPSBuCiAgICAg ICAgIGNwc2llICAgXGlmbGFncwogICAgICAgICAuZW5kaWYKLS0gCjIuMTEu MAoK --=separator Content-Type: application/octet-stream; name="xsa303-4.8/0004-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Disposition: attachment; filename="xsa303-4.8/0004-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Transfer-Encoding: base64 RnJvbSA4YjY2YTExMDRkOTIwYzQ3OGYwYzM1ZTYzNjAxNTRlMDYwMjVmMDYw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBGcmksIDExIE9jdCAyMDE5 IDE3OjQ5OjI4ICswMTAwClN1YmplY3Q6IFtQQVRDSCA0LzVdIHhlbi9hcm0z MjogRG9uJ3QgYmxpbmRseSB1bm1hc2sgaW50ZXJydXB0cyBvbiB0cmFwCiB3 aXRob3V0IGEgY2hhbmdlIG9mIGxldmVsCgpFeGNlcHRpb24gdmVjdG9ycyB3 aWxsIHVubWFzayBpbnRlcnJ1cHRzIHJlZ2FyZGxlc3MgdGhlIHN0YXRlIG9m IHRoZW0gaW4KdGhlIGludGVycnVwdGVkIGNvbnRleHQuCgpPbmUgb2YgdGhl IGNvbnNlcXVlbmNlcyBpcyBJUlEgd2lsbCBiZSB1bm1hc2tlZCB3aGVuIHJl Y2VpdmluZyBhbgp1bmRlZmluZWQgaW5zdHJ1Y3Rpb24gZXhjZXB0aW9uICh1 c2VkIGJ5IFdBUk4qKSBmcm9tIHRoZSBoeXBlcnZpc29yLgpUaGlzIGNvdWxk IHJlc3VsdCB0byB1bmV4cGVjdGVkIGJlaGF2aW9yIHN1Y2ggYXMgZGVhZGxv Y2sgKGlmIGEgbG9jayB3YXMKc2hhcmVkIHdpdGggaW50ZXJydXB0cykuCgpJ biBhIG51dHNoZWxsLCBpbnRlcnJ1cHRzIHNob3VsZCBvbmx5IGJlIHVubWFz a2VkIHdoZW4gaXQgaXMgc2FmZSB0byBkby4KWGVuIG9ubHkgdW5tYXNrIElS USBpbnRlcnJ1cHRzLCBzbyB0aGUgbG9naWMgY2FuIHN0YXkgc2ltcGxlLgoK QXMgdmVjdG9ycyBleGNlcHRpb25zIG1heSBiZSBzaGFyZWQgYmV0d2VlbiBn dWVzdCBhbmQgaHlwZXJ2aXNvciwgd2Ugbm93Cm5lZWQgdG8gaGF2ZSBhIGRp ZmZlcmVudCBwb2xpY3kgZm9yIHRoZSBpbnRlcnJ1cHRzLgoKT24gZXhjZXB0 aW9uIGZyb20gaHlwZXJ2aXNvciwgZWFjaCB2ZWN0b3Igd2lsbCBzZWxlY3Qg dGhlIGxpc3Qgb2YKaW50ZXJydXB0cyB0byBpbmhlcml0IGZyb20gdGhlIGlu dGVycnVwdGVkIGNvbnRleHQuIEFueSBpbnRlcnJ1cHRzIG5vdApsaXN0ZWQg d2lsbCBiZSBrZXB0IG1hc2tlZC4KCk9uIGV4Y2VwdGlvbiBmcm9tIHRoZSBn dWVzdCwgdGhlIElSUSB3aWxsIGJlIHVubWFza2VkIGRlcGVuZGluZyBvbiB0 aGUKZXhhY3QgdmVjdG9yLgoKVGhlIGludGVycnVwdHMgd2lsbCBiZSBrZXB0 IHVubWFza2VkIHdoZW4gdGhlIHZlY3RvciBjYW5ub3QgdXNlZCBieQplaXRo ZXIgZ3Vlc3Qgb3IgaHlwZXJ2aXNvci4KCk5vdGUgdGhhdCBlYWNoIHZlY3Rv ciBpcyBub3QgYW55bW9yZSBwcmVjZWRlZCBieSBBTElHTi4gVGhpcyBpcyBm aW5lCmJlY2F1c2UgdGhlIGFsaWdubWVudCBpcyBhbHJlYWR5IGJpZ2dlciB0 aGFuIHdoYXQgd2UgbmVlZC4KClRoaXMgaXMgcGFydCBvZiBYU0EtMzAzLgoK UmVwb3J0ZWQtYnk6IEp1bGllbiBHcmFsbCA8SnVsaWVuLkdyYWxsQGFybS5j b20+ClNpZ25lZC1vZmYtYnk6IEp1bGllbiBHcmFsbCA8anVsaWVuLmdyYWxs QGFybS5jb20+CkFja2VkLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFi ZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogeGVuL2FyY2gvYXJtL2FybTMyL2Vu dHJ5LlMgfCAxMzYgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KystLS0tLS0tLS0tCiAxIGZpbGUgY2hhbmdlZCwgMTA3IGluc2VydGlvbnMo KyksIDI5IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL2Fy bS9hcm0zMi9lbnRyeS5TIGIveGVuL2FyY2gvYXJtL2FybTMyL2VudHJ5LlMK aW5kZXggYzJkMGVjMjI3My4uZjFmM2I1NThkZCAxMDA2NDQKLS0tIGEveGVu L2FyY2gvYXJtL2FybTMyL2VudHJ5LlMKKysrIGIveGVuL2FyY2gvYXJtL2Fy bTMyL2VudHJ5LlMKQEAgLTMsNiArMywxNiBAQAogI2luY2x1ZGUgPGFzbS9y ZWdzLmg+CiAjaW5jbHVkZSA8cHVibGljL3hlbi5oPgogCisvKgorICogU2hv cnQtaGFuZHMgdG8gZGVmaW5lZCB0aGUgaW50ZXJydXB0cyAoQSwgSSwgRikK KyAqCisgKiBfIG1lYW5zIHRoZSBpbnRlcnJ1cHQgc3RhdGUgd2lsbCBub3Qg Y2hhbmdlCisgKiBYIG1lYW5zIHRoZSBzdGF0ZSBvZiBpbnRlcnJ1cHQgWCB3 aWxsIGNoYW5nZQorICoKKyAqIFRvIGJlIHVzZWQgd2l0aCBtc3IgY3Bzcl8q IG9ubHkKKyAqLworI2RlZmluZSBJRkxBR1NfX0lfICAgICAgUFNSX0lSUV9N QVNLCisKICNkZWZpbmUgU0FWRV9PTkVfQkFOS0VEKHJlZykgICAgbXJzIHIx MSwgcmVnOyBzdHIgcjExLCBbc3AsICNVUkVHU18jI3JlZ10KICNkZWZpbmUg UkVTVE9SRV9PTkVfQkFOS0VEKHJlZykgbGRyIHIxMSwgW3NwLCAjVVJFR1Nf IyNyZWddOyBtc3IgcmVnLCByMTEKIApAQCAtOTUsMTMgKzEwNSwxOSBAQCBh Ym9ydF9ndWVzdF9leGl0X2VuZDoKIAogICAgICAgICBtb3YgcGMsIGxyCiAK LQogICAgICAgICAvKgotICAgICAgICAgKiBNYWNybyB0byBkZWZpbmUgYSB0 cmFwIGVudHJ5LiBUaGUgaWZsYWdzIGlzIG9wdGlvbmFsIGFuZAotICAgICAg ICAgKiBjb3JyZXNwb25kcyB0byBhbGlzdCBvZiBpbnRlcnJ1cHRzIChBc3lu Y2hyb25vdXMgQWJvcnQsIElSUSwgRklRKQotICAgICAgICAgKiB0byB1bm1h c2suCisgICAgICAgICAqIE1hY3JvIHRvIGRlZmluZSBhIHRyYXAgZW50cnku CisgICAgICAgICAqCisgICAgICAgICAqICBAZ3Vlc3RfaWZsYWdzOiBPcHRp b25hbCBsaXN0IG9mIGludGVycnVwdHMgdG8gdW5tYXNrIHdoZW4KKyAgICAg ICAgICogICAgICBlbnRlcmluZyBmcm9tIGd1ZXN0IGNvbnRleHQuIEFzIHRo aXMgaXMgdXNlZCB3aXRoIGNwc2llLAorICAgICAgICAgKiAgICAgIHRoZSBs ZXR0ZXIgKGEsIGksIGYpIHNob3VsZCBiZSB1c2VkLgorICAgICAgICAgKgor ICAgICAgICAgKiAgQGh5cF9pZmxhZ3M6IE9wdGlvbmFsIGxpc3Qgb2YgaW50 ZXJydXB0cyB0byBpbmhlcml0IHdoZW4KKyAgICAgICAgICogICAgICBlbnRl cmluZyBmcm9tIGh5cGVydmlzb3IgY29udGV4dC4gQW55IGludGVycnVwdHMg bm90CisgICAgICAgICAqICAgICAgbGlzdGVkIHdpbGwgYmUga2VwdCB1bmNo YW5nZWQuIEFzIHRoaXMgaXMgdXNlZCB3aXRoIGNwc3JfKiwKKyAgICAgICAg ICogICAgICBJRkxBR1NfKiBzaG9ydC1oYW5kcyBzaG91bGQgYmUgdXNlZC4K ICAgICAgICAgICovCi0gICAgICAgIC5tYWNybyB2ZWN0b3IgdHJhcCwgaWZs YWdzPW4KKyAgICAgICAgLm1hY3JvIHZlY3RvciB0cmFwLCBndWVzdF9pZmxh Z3M9biwgaHlwX2lmbGFncz0wCiAgICAgICAgIC8qIFNhdmUgcmVnaXN0ZXJz IGluIHRoZSBzdGFjayAqLwogICAgICAgICBzdWIgICAgIHNwLCAjKFVSRUdT X1NQX3VzciAtIFVSRUdTX3NwKSAvKiBTUCwgTFIsIFNQU1IsIFBDICovCiAg ICAgICAgIHB1c2ggICAge3IwLXIxMn0gICAgICAgICAgICAgICAgICAgICAg IC8qIFNhdmUgUjAtUjEyICovCkBAIC0xMTksMTQgKzEzNSw0MCBAQCBhYm9y dF9ndWVzdF9leGl0X2VuZDoKIAogICAgICAgICBtcnMgICAgIHIxMSwgU1BT Ul9oeXAKICAgICAgICAgc3RyICAgICByMTEsIFtzcCwgI1VSRUdTX2Nwc3Jd Ci0gICAgICAgIGFuZCAgICAgcjExLCAjUFNSX01PREVfTUFTSwotICAgICAg ICBjbXAgICAgIHIxMSwgI1BTUl9NT0RFX0hZUAotICAgICAgICBibG5lICAg IHNhdmVfZ3Vlc3RfcmVncwogCi0gICAgICAgIC8qIFdlIGFyZSByZWFkeSB0 byBoYW5kbGUgdGhlIHRyYXAsIHNldHVwIHRoZSByZWdpc3RlcnMgYW5kIGp1 bXAuICovCi0gICAgICAgIC5pZiBcaWZsYWdzICE9IG4KLSAgICAgICAgY3Bz aWUgICBcaWZsYWdzCisKKyAgICAgICAgLyoKKyAgICAgICAgICogV2UgbmVl ZCB0byBkaXN0aW5ndWlzaCB3aGV0aGVyIHdlIGNhbWUgZnJvbSBndWVzdCBv cgorICAgICAgICAgKiBoeXBlcnZpc29yIGNvbnRleHQuCisgICAgICAgICAq LworICAgICAgICBhbmQgICAgIHIwLCByMTEsICNQU1JfTU9ERV9NQVNLCisg ICAgICAgIGNtcCAgICAgcjAsICNQU1JfTU9ERV9IWVAKKworICAgICAgICBi bmUgICAgIDFmCisgICAgICAgIC8qCisgICAgICAgICAqIFRyYXAgZnJvbSB0 aGUgaHlwZXJ2aXNvcgorICAgICAgICAgKgorICAgICAgICAgKiBJbmhlcml0 IHRoZSBzdGF0ZSBvZiB0aGUgaW50ZXJydXB0cyBmcm9tIHRoZSBoeXBlcnZp c29yCisgICAgICAgICAqIGNvbnRleHQuIEZvciB0aGF0IHdlIG5lZWQgdG8g dXNlIFNQU1IgKHN0b3JlZCBpbiByMTEpIGFuZAorICAgICAgICAgKiBtb2Rp ZnkgQ1BTUiBhY2NvcmRpbmdseS4KKyAgICAgICAgICoKKyAgICAgICAgICog Q1BTUiA9IChDUFNSICYgfmh5cF9pZmxhZ3MpIHwgKFNQU1IgJiBoeXBfaWZs YWdzKQorICAgICAgICAgKi8KKyAgICAgICAgbXJzICAgICByMTAsIGNwc3IK KyAgICAgICAgYmljICAgICByMTAsIHIxMCwgI1xoeXBfaWZsYWdzCisgICAg ICAgIGFuZCAgICAgcjExLCByMTEsICNcaHlwX2lmbGFncworICAgICAgICBv cnIgICAgIHIxMCwgcjEwLCByMTEKKyAgICAgICAgbXNyICAgICBjcHNyX2N4 LCByMTAKKyAgICAgICAgYiAgICAgICAyZgorCisxOgorICAgICAgICAvKiBU cmFwIGZyb20gdGhlIGd1ZXN0ICovCisgICAgICAgIGJsICAgICAgc2F2ZV9n dWVzdF9yZWdzCisgICAgICAgIC5pZiAgICAgXGd1ZXN0X2lmbGFncyAhPSBu CisgICAgICAgIGNwc2llICAgXGd1ZXN0X2lmbGFncwogICAgICAgICAuZW5k aWYKKzI6CisgICAgICAgIC8qIFdlIGFyZSByZWFkeSB0byBoYW5kbGUgdGhl IHRyYXAsIHNldHVwIHRoZSByZWdpc3RlcnMgYW5kIGp1bXAuICovCiAgICAg ICAgIGFkciAgICAgbHIsIHJldHVybl9mcm9tX3RyYXAKICAgICAgICAgbW92 ICAgICByMCwgc3AKICAgICAgICAgLyoKQEAgLTEzOCwxNiArMTgwLDYgQEAg YWJvcnRfZ3Vlc3RfZXhpdF9lbmQ6CiAgICAgICAgIGIgICAgICAgZG9fdHJh cF9cdHJhcAogICAgICAgICAuZW5kbQogCi0jZGVmaW5lIERFRklORV9UUkFQ X0VOVFJZKHRyYXApICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCi0gICAgICAgIEFMSUdOOyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi10cmFw XyMjdHJhcDogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIHZlY3RvciB0cmFw LCBpZmxhZ3M9aSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBcCi0KLSNkZWZpbmUgREVGSU5FX1RSQVBfRU5UUllfTk9JUlEo dHJhcCkgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAg ICAgICAgQUxJR047ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFwKLXRyYXBfIyN0cmFwOiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFwKLSAgICAgICAgdmVjdG9yIHRyYXAKLQogICAgICAgICAu YWxpZ24gNQogR0xPQkFMKGh5cF90cmFwc192ZWN0b3IpCiAgICAgICAgIGIg dHJhcF9yZXNldCAgICAgICAgICAgICAgICAgICAgLyogMHgwMCAtIFJlc2V0 ICovCkBAIC0yMTgsMTQgKzI1MCw2MCBAQCBkZWNvZGVfdmVjdG9yczoKIAog I2VuZGlmIC8qIENPTkZJR19IQVJERU5fQlJBTkNIX1BSRURJQ1RPUiAqLwog Ci1ERUZJTkVfVFJBUF9FTlRSWShyZXNldCkKLURFRklORV9UUkFQX0VOVFJZ KHVuZGVmaW5lZF9pbnN0cnVjdGlvbikKLURFRklORV9UUkFQX0VOVFJZKHN1 cGVydmlzb3JfY2FsbCkKLURFRklORV9UUkFQX0VOVFJZKHByZWZldGNoX2Fi b3J0KQotREVGSU5FX1RSQVBfRU5UUlkoZGF0YV9hYm9ydCkKLURFRklORV9U UkFQX0VOVFJZKGd1ZXN0X3N5bmMpCi1ERUZJTkVfVFJBUF9FTlRSWV9OT0lS UShpcnEpCi1ERUZJTkVfVFJBUF9FTlRSWV9OT0lSUShmaXEpCisvKiBWZWN0 b3Igbm90IHVzZWQgYnkgdGhlIEh5cGVydmlzb3IuICovCit0cmFwX3Jlc2V0 OgorICAgICAgICB2ZWN0b3IgcmVzZXQKKworLyoKKyAqIFZlY3RvciBvbmx5 IHVzZWQgYnkgdGhlIEh5cGVydmlzb3IuCisgKgorICogV2hpbGUgdGhlIGV4 Y2VwdGlvbiBjYW4gYmUgZXhlY3V0ZWQgd2l0aCBJUlEgdW5tYXNrZWQsIHRo ZSBpbnRlcnJ1cHRlZAorICogY29udGV4dCBtYXkgaGF2ZSBwdXJwb3NlZnVs bHkgbWFza2VkIGl0LiBTbyB3ZSB3YW50IHRvIGluaGVyaXQgdGhlIHN0YXRl CisgKiBmcm9tIHRoZSBpbnRlcnJ1cHRlZCBjb250ZXh0LgorICovCit0cmFw X3VuZGVmaW5lZF9pbnN0cnVjdGlvbjoKKyAgICAgICAgdmVjdG9yIHVuZGVm aW5lZF9pbnN0cnVjdGlvbiwgaHlwX2lmbGFncz1JRkxBR1NfX0lfCisKKy8q IFdlIHNob3VsZCBuZXZlciByZWFjaCB0aGlzIHRyYXAgKi8KK3RyYXBfc3Vw ZXJ2aXNvcl9jYWxsOgorICAgICAgICB2ZWN0b3Igc3VwZXJ2aXNvcl9jYWxs CisKKy8qCisgKiBWZWN0b3Igb25seSB1c2VkIGJ5IHRoZSBoeXBlcnZpc29y LgorICoKKyAqIFdoaWxlIHRoZSBleGNlcHRpb24gY2FuIGJlIGV4ZWN1dGVk IHdpdGggSVJRIHVubWFza2VkLCB0aGUgaW50ZXJydXB0ZWQKKyAqIGNvbnRl eHQgbWF5IGhhdmUgcHVycG9zZWZ1bGx5IG1hc2tlZCBpdC4gU28gd2Ugd2Fu dCB0byBpbmhlcml0IHRoZSBzdGF0ZQorICogZnJvbSB0aGUgaW50ZXJydXB0 ZWQgY29udGV4dC4KKyAqLwordHJhcF9wcmVmZXRjaF9hYm9ydDoKKyAgICAg ICB2ZWN0b3IgcHJlZmV0Y2hfYWJvcnQsIGh5cF9pZmxhZ3M9SUZMQUdTX19J XworCisvKgorICogVmVjdG9yIG9ubHkgdXNlZCBieSB0aGUgaHlwZXJ2aXNv ci4KKyAqCisgKiBEYXRhIEFib3J0IHNob3VsZCBiZSByYXJlIGFuZCBtb3N0 IGxpa2VseSBmYXRhbC4gSXQgaXMgYmVzdCB0byBub3QKKyAqIHVubWFzayBh bnkgaW50ZXJydXB0cyB0byBsaW1pdCB0aGUgYW1vdW50IG9mIGNvZGUgdGhh dCBjYW4gcnVuIGJlZm9yZQorICogdGhlIERhdGEgQWJvcnQgaXMgdHJlYXRl ZC4KKyAqLwordHJhcF9kYXRhX2Fib3J0OgorICAgICAgICB2ZWN0b3IgZGF0 YV9hYm9ydAorCisvKiBWZWN0b3Igb25seSB1c2VkIGJ5IHRoZSBndWVzdC4g V2UgY2FuIHVubWFzayBJUlEuICovCit0cmFwX2d1ZXN0X3N5bmM6CisgICAg ICAgIHZlY3RvciBndWVzdF9zeW5jLCBndWVzdF9pZmxhZ3M9aQorCisKKy8q IFZlY3RvciB1c2VkIGJ5IHRoZSBoeXBlcnZpc29yIGFuZCB0aGUgZ3Vlc3Qu ICovCit0cmFwX2lycToKKyAgICAgICAgdmVjdG9yIGlycQorCisvKgorICog VmVjdG9yIHVzZWQgYnkgdGhlIGh5cGVydmlzb3IgYW5kIHRoZSBndWVzdC4K KyAqCisgKiBGSVEgYXJlIG5vdCBtZWFudCB0byBoYXBwZW4sIHNvIHdlIGRv bid0IHVubWFzayBhbnkgaW50ZXJydXB0cy4KKyAqLwordHJhcF9maXE6Cisg ICAgICAgIHZlY3RvciBmaXEKIAogcmV0dXJuX2Zyb21fdHJhcDoKICAgICAg ICAgLyoKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa303-4.8/0005-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Disposition: attachment; filename="xsa303-4.8/0005-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Transfer-Encoding: base64 RnJvbSBhYTM0MmU0YWY4MTRlYWIxMDdiMTFmMGI3YWJjYTA0NTdiNjE2ZmJj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBNb24sIDcgT2N0IDIwMTkg MTg6MTA6NTYgKzAxMDAKU3ViamVjdDogW1BBVENIIDUvNV0geGVuL2FybTY0 OiBEb24ndCBibGluZGx5IHVubWFzayBpbnRlcnJ1cHRzIG9uIHRyYXAKIHdp dGhvdXQgYSBjaGFuZ2Ugb2YgbGV2ZWwKClNvbWUgb2YgdGhlIHRyYXBzIHdp dGhvdXQgYSBjaGFuZ2Ugb2YgdGhlIGxldmVsIChpLmUuIGh5cGVydmlzb3Ig LT4KaHlwZXJ2aXNvcikgd2lsbCB1bm1hc2sgaW50ZXJydXB0cyByZWdhcmRs ZXNzIHRoZSBzdGF0ZSBvZiB0aGVtIGluIHRoZQppbnRlcnJ1cHRlZCBjb250 ZXh0LgoKT25lIG9mIHRoZSBjb25zZXF1ZW5jZXMgaXMgSVJRIHdpbGwgYmUg dW5tYXNrZWQgd2hlbiByZWNlaXZpbmcgYQpzeW5jaHJvbm91cyBleGNlcHRp b24gKHVzZWQgYnkgV0FSTiooKSkuIFRoaXMgY291bGQgcmVzdWx0IHRvIHVu ZXhwZWN0ZWQKYmVoYXZpb3Igc3VjaCBhcyBkZWFkbG9jayAoaWYgYSBsb2Nr IHdhcyBzaGFyZWQgd2l0aCBpbnRlcnJ1cHRzKS4KCkluIGEgbnV0c2hlbGws IGludGVycnVwdHMgc2hvdWxkIG9ubHkgYmUgdW5tYXNrZWQgd2hlbiBpdCBp cyBzYWZlIHRvCmRvLiBYZW4gb25seSB1bm1hc2sgSVJRIGludGVycnVwdHMs IHNvIHRoZSBsb2dpYyBjYW4gc3RheSBzaW1wbGU6CiAgICAtIGh5cF9lcnJv cjogQWxsIHRoZSBpbnRlcnJ1cHRzIGFyZSBub3cga2VwdCBtYXNrZWQuIFNF cnJvciBzaG91bGQKICAgICAgYmUgcHJldHR5IHJhcmUgYW5kIGlmIGV2ZXIg aGFwcGVuIHRoZW4gd2UgbW9zdCBsaWtlbHkgd2FudCB0bwogICAgICBhdm9p ZCBhbnkgb3RoZXIgaW50ZXJydXB0cyB0byBiZSBnZW5lcmF0ZWQuIFRoZSBw b3RlbnRpYWwgbWFpbgogICAgICAiY2FsbGVyIiBpcyBkdXJpbmcgdmlydHVh bCBTRXJyb3Igc3luY2hyb25pemF0aW9uIG9uIHRoZSBleGl0CiAgICAgIHBh dGggZnJvbSB0aGUgZ3Vlc3QgKHNlZSBjaGVja19wZW5kaW5nX3ZzZXJyb3Ip LgoKICAgIC0gaHlwX3N5bmM6IFRoZSBJUlEgc3RhdGUgaXMgaW5oZXJpdGVk IGZyb20gdGhlIGludGVycnVwdGVkIGNvbnRleHQuCgogICAgLSBoeXBfaXJx OiBBbGwgaW50ZXJydXB0cyBhcmUgbm93IGtlcHQgbWFza2VkLgoKVGhpcyBp cyBwYXJ0IG9mIFhTQS0zMDMuCgpSZXBvcnRlZC1ieTogSnVsaWVuIEdyYWxs IDxKdWxpZW4uR3JhbGxAYXJtLmNvbT4KU2lnbmVkLW9mZi1ieTogSnVsaWVu IEdyYWxsIDxqdWxpZW4uZ3JhbGxAYXJtLmNvbT4KQWNrZWQtYnk6IFN0ZWZh bm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiB4 ZW4vYXJjaC9hcm0vYXJtNjQvZW50cnkuUyB8IDI3ICsrKysrKysrKysrKysr KysrKysrKysrKy0tLQogMSBmaWxlIGNoYW5nZWQsIDI0IGluc2VydGlvbnMo KyksIDMgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gvYXJt L2FybTY0L2VudHJ5LlMgYi94ZW4vYXJjaC9hcm0vYXJtNjQvZW50cnkuUwpp bmRleCAwZTdkZGRlOWVkLi43ZmQ1NTMwMGRiIDEwMDY0NAotLS0gYS94ZW4v YXJjaC9hcm0vYXJtNjQvZW50cnkuUworKysgYi94ZW4vYXJjaC9hcm0vYXJt NjQvZW50cnkuUwpAQCAtMTc3LDYgKzE3NywxNCBAQCBoeXBfZXJyb3JfaW52 YWxpZDoKICAgICAgICAgZW50cnkgICBoeXA9MQogICAgICAgICBpbnZhbGlk IEJBRF9FUlJPUgogCisvKgorICogU0Vycm9yIHJlY2VpdmVkIHdoaWxlIHJ1 bm5pbmcgaW4gdGhlIGh5cGVydmlzb3IgbW9kZS4KKyAqCisgKiBUZWNobmlj YWxseSwgd2UgY291bGQgdW5tYXNrIHRoZSBJUlEgaWYgaXQgd2VyZSB1bm1h c2tlZCBpbiB0aGUKKyAqIGludGVycnVwdGVkIGNvbnRleHQuIEhvd2V2ZXIs IHRoaXMgcmVxdWlyZSB0byBjaGVjayB0aGUgUFNUQVRFLiBGb3IKKyAqIHNp bXBsaWNpdHksIGFzIFNFcnJvciBzaG91bGQgYmUgcmFyZSBhbmQgcG90ZW50 aWFsbHkgZmF0YWwsCisgKiBhbGwgaW50ZXJydXB0cyBhcmUga2VwdCBtYXNr ZWQuCisgKi8KIGh5cF9lcnJvcjoKICAgICAgICAgLyoKICAgICAgICAgICog T25seSB0d28gcG9zc2liaWxpdGllczoKQEAgLTE4Niw3ICsxOTQsNiBAQCBo eXBfZXJyb3I6CiAgICAgICAgICAqIDIpIE9yIHdlIGNvbWUgZnJvbSBhbnl3 aGVyZSBlbHNlLCBhbmQgdGhhdCdzIGEgYnVnOiB3ZSBwYW5pYy4KICAgICAg ICAgICovCiAgICAgICAgIGVudHJ5ICAgaHlwPTEKLSAgICAgICAgbXNyICAg ICBkYWlmY2xyLCAjMgogCiAgICAgICAgIC8qCiAgICAgICAgICAqIFRoZSBF TFJfRUwyIG1heSBiZSBtb2RpZmllZCBieSBhbiBpbnRlcnJ1cHQsIHNvIHdl IGhhdmUgdG8gdXNlIHRoZQpAQCAtMjE0LDE0ICsyMjEsMjggQEAgaHlwX2Vy cm9yOgogICAgICAgICBibCAgICAgIGRvX3RyYXBfZ3Vlc3RfZXJyb3IKICAg ICAgICAgZXhpdCAgICBoeXA9MQogCi0vKiBUcmFwcyB0YWtlbiBpbiBDdXJy ZW50IEVMIHdpdGggU1BfRUx4ICovCisvKgorICogU3luY2hyb25vdXMgZXhj ZXB0aW9uIHJlY2VpdmVkIHdoaWxlIHJ1bm5pbmcgaW4gdGhlIGh5cGVydmlz b3IgbW9kZS4KKyAqCisgKiBXaGlsZSB0aGUgZXhjZXB0aW9uIGNhbiBiZSBl eGVjdXRlZCB3aXRoIElSUSB1bm1hc2tlZCwgdGhlIGludGVycnVwdAorICog Y29udGV4dCBtYXkgaGF2ZSBwdXJwb3NlZnVsbHkgbWFza2VkIGl0LiBTbyB3 ZSB3YW50IHRvIGluaGVyaXQgdGhlCisgKiBzdGF0ZSBmcm9tIHRoZSBpbnRl cnJ1cHRlZCBjb250ZXh0LgorICovCiBoeXBfc3luYzoKICAgICAgICAgZW50 cnkgICBoeXA9MQotICAgICAgICBtc3IgICAgIGRhaWZjbHIsICMyCisKKyAg ICAgICAgLyogSW5oZXJpdCBJUlEgc3RhdGUgYW5kIGtlZXAgdGhlIG90aGVy IGludGVycnVwdHMgbWFza2VkLiAqLworICAgICAgICBtcnMgICAgIHgwLCBT UFNSX2VsMgorICAgICAgICBhbmQgICAgIHgwLCB4MCwgI1BTUl9JUlFfTUFT SworICAgICAgICBtb3YgICAgIHgxLCAjKFBTUl9EQkdfTUFTSyB8IFBTUl9B QlRfTUFTSyB8IFBTUl9GSVFfTUFTSykKKyAgICAgICAgb3JyICAgICB4MCwg eDAsIHgxCisgICAgICAgIG1zciAgICAgZGFpZiwgeDAKKwogICAgICAgICBt b3YgICAgIHgwLCBzcAogICAgICAgICBibCAgICAgIGRvX3RyYXBfaHlwX3N5 bmMKICAgICAgICAgZXhpdCAgICBoeXA9MQogCisvKiBJUlEgcmVjZWl2ZWQg d2hpbGUgcnVubmluZyBpbiB0aGUgaHlwZXJ2aXNvciBtb2RlLiAqLwogaHlw X2lycToKICAgICAgICAgZW50cnkgICBoeXA9MQogICAgICAgICBtb3YgICAg IHgwLCBzcAotLSAKMi4xMS4wCgo= --=separator Content-Type: application/octet-stream; name="xsa303/0001-xen-arm32-entry-Split-__DEFINE_ENTRY_TRAP-in-two.patch" Content-Disposition: attachment; filename="xsa303/0001-xen-arm32-entry-Split-__DEFINE_ENTRY_TRAP-in-two.patch" Content-Transfer-Encoding: base64 RnJvbSBjOGNiMzNmYTY0YzljY2JmYTJhNDk0YTlkYWQyZTBhNzYzYzA5MTc2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDEgT2N0IDIwMTkg MTM6MDc6NTMgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvNF0geGVuL2FybTMy OiBlbnRyeTogU3BsaXQgX19ERUZJTkVfRU5UUllfVFJBUCBpbiB0d28KClRo ZSBwcmVwcm9jZXNzaW5nIG1hY3JvIF9fREVGSU5FX0VOVFJZX1RSQVAgaXMg dXNlZCB0byBnZW5lcmF0ZSB0cmFwCmVudHJ5IGZ1bmN0aW9uLiBXaGlsZSB0 aGUgbWFjcm8gaXMgZmFpcmx5IHNtYWxsIHRvZGF5LCBmb2xsb3ctdXAgcGF0 Y2hlcwp3aWxsIGluY3JlYXNlIHRoZSBzaXplIHNpZ25pY2FudGx5LgoKSW4g Z2VuZXJhbCwgYXNzZW1ibHkgbWFjcm9zIGFyZSBtb3JlIHJlYWRhYmxlIGFz IHRoZXkgYWxsb3cgeW91IHRvIG5hbWUKcGFyYW1ldGVycyBhbmQgYXZvaWQg J1wnLiBTbyB0aGUgYWN0dWFsIGltcGxlbWVudGF0aW9uIG9mIHRoZSB0cmFw IGlzCm5vdyBzd2l0Y2hlZCB0byBhbiBhc3NlbWJseSBtYWNyby4KClRoaXMg aXMgcGFydCBvZiBYU0EtMzAzLgoKUmVwb3J0ZWQtYnk6IEp1bGllbiBHcmFs bCA8SnVsaWVuLkdyYWxsQGFybS5jb20+ClNpZ25lZC1vZmYtYnk6IEp1bGll biBHcmFsbCA8anVsaWVuLmdyYWxsQGFybS5jb20+ClJldmlld2VkLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ClJl dmlld2VkLWJ5OiBBbmRyZSBQcnp5d2FyYSA8YW5kcmUucHJ6eXdhcmFAYXJt LmNvbT4KLS0tCiB4ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnkuUyB8IDM0ICsr KysrKysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0KIDEgZmlsZSBjaGFu Z2VkLCAxOSBpbnNlcnRpb25zKCspLCAxNSBkZWxldGlvbnMoLSkKCmRpZmYg LS1naXQgYS94ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnkuUyBiL3hlbi9hcmNo L2FybS9hcm0zMi9lbnRyeS5TCmluZGV4IDBiNGNkMTlhYmQuLjRhNzYyZTA0 ZjEgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCisr KyBiL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCkBAIC0xMjYsMjQgKzEy NiwyOCBAQCBhYm9ydF9ndWVzdF9leGl0X2VuZDoKIHNraXBfY2hlY2s6CiAg ICAgICAgIG1vdiBwYywgbHIKIAotLyoKLSAqIE1hY3JvIHRvIGRlZmluZSB0 cmFwIGVudHJ5LiBUaGUgaWZsYWdzIGNvcnJlc3BvbmRzIHRvIHRoZSBsaXN0 IG9mCi0gKiBpbnRlcnJ1cHRzIChBc3luY2hyb25vdXMgQWJvcnQsIElSUSwg RklRKSB0byB1bm1hc2suCi0gKi8KKyAgICAgICAgLyoKKyAgICAgICAgICog TWFjcm8gdG8gZGVmaW5lIHRyYXAgZW50cnkuIFRoZSBpZmxhZ3MgY29ycmVz cG9uZHMgdG8gdGhlIGxpc3Qgb2YKKyAgICAgICAgICogaW50ZXJydXB0cyAo QXN5bmNocm9ub3VzIEFib3J0LCBJUlEsIEZJUSkgdG8gdW5tYXNrLgorICAg ICAgICAgKi8KKyAgICAgICAgLm1hY3JvIHZlY3RvciB0cmFwLCBpZmxhZ3MK KyAgICAgICAgU0FWRV9BTEwKKyAgICAgICAgY3BzaWUgICBcaWZsYWdzCisg ICAgICAgIGFkciAgICAgbHIsIHJldHVybl9mcm9tX3RyYXAKKyAgICAgICAg bW92ICAgICByMCwgc3AKKyAgICAgICAgLyoKKyAgICAgICAgICogU2F2ZSB0 aGUgc3RhY2sgcG9pbnRlciBpbiByMTEuIEl0IHdpbGwgYmUgcmVzdG9yZWQg YWZ0ZXIgdGhlCisgICAgICAgICAqIHRyYXAgaGFzIGJlZW4gaGFuZGxlZCAo c2VlIHJldHVybl9mcm9tX3RyYXApLgorICAgICAgICAgKi8KKyAgICAgICAg bW92ICAgICByMTEsIHNwCisgICAgICAgIGJpYyAgICAgc3AsICM3ICAgICAg LyogQWxpZ24gdGhlIHN0YWNrIHBvaW50ZXIgKG5vb3Agb24gZ3Vlc3QgdHJh cCkgKi8KKyAgICAgICAgYiAgICAgICBkb190cmFwX1x0cmFwCisgICAgICAg IC5lbmRtCisKICNkZWZpbmUgX19ERUZJTkVfVFJBUF9FTlRSWSh0cmFwLCBp ZmxhZ3MpICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICAg ICAgQUxJR047ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKIHRyYXBfIyN0cmFwOiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKLSAgICAgICAgU0FWRV9BTEw7ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAg ICAgY3BzaWUgaWZsYWdzOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgYWRyIGxyLCByZXR1 cm5fZnJvbV90cmFwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKLSAgICAgICAgbW92IHIwLCBzcDsgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAg ICAgLyogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgICogU2F2ZSB0aGUg c3RhY2sgcG9pbnRlciBpbiByMTEuIEl0IHdpbGwgYmUgcmVzdG9yZWQgYWZ0 ZXIgdGhlIFwKLSAgICAgICAgICogdHJhcCBoYXMgYmVlbiBoYW5kbGVkIChz ZWUgcmV0dXJuX2Zyb21fdHJhcCkuICAgICAgICAgICAgICAgIFwKLSAgICAg ICAgICovICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwKLSAgICAgICAgbW92IHIxMSwgc3A7 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFwKLSAgICAgICAgYmljIHNwLCAjNzsgLyogQWxpZ24gdGhlIHN0 YWNrIHBvaW50ZXIgKG5vb3Agb24gZ3Vlc3QgdHJhcCkgKi8gIFwKLSAgICAg ICAgYiBkb190cmFwXyMjdHJhcAorICAgICAgICB2ZWN0b3IgdHJhcCwgaWZs YWdzCiAKIC8qIFRyYXAgaGFuZGxlciB3aGljaCB1bm1hc2sgSVJRL0Fib3J0 LCBrZWVwIEZJUSBtYXNrZWQgKi8KICNkZWZpbmUgREVGSU5FX1RSQVBfRU5U UlkodHJhcCkgX19ERUZJTkVfVFJBUF9FTlRSWSh0cmFwLCBhaSkKLS0gCjIu MTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa303/0002-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch" Content-Disposition: attachment; filename="xsa303/0002-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch" Content-Transfer-Encoding: base64 RnJvbSBiZTczNzkyMDdjODNmYTc0ZjhhNmMyMmE4ZWEyMTNmMDI3MTQ3NzZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBUdWUsIDEgT2N0IDIwMTkg MTM6MTU6NDggKzAxMDAKU3ViamVjdDogW1BBVENIIDIvNF0geGVuL2FybTMy OiBlbnRyeTogRm9sZCB0aGUgbWFjcm8gU0FWRV9BTEwgaW4gdGhlIG1hY3Jv CiB2ZWN0b3IKCkZvbGxvdy11cCByZXdvcmsgd2lsbCByZXF1aXJlIHRoZSBt YWNybyB2ZWN0b3IgdG8gZGlzdGluZ3Vpc2ggYmV0d2VlbgphIHRyYXAgZnJv bSBhIGd1ZXN0IHZzIHdoaWxlIGluIHRoZSBoeXBlcnZpc29yLgoKVGhlIG1h Y3JvIFNBVkVfQUxMIGFscmVhZHkgaGFzIGNvZGUgdG8gZGlzdGluZ3Vpc2gg YmV0d2VlbiB0aGUgdHdvIGFuZAppdCBpcyBvbmx5IGNhbGxlZCBieSB0aGUg dmVjdG9yIG1hY3JvLiBTbyBmb2xkIHRoZSBmb3JtZXIgaW50byB0aGUKbGF0 dGVyLiBUaGlzIHdpbGwgaGVscCB0byBhdm9pZCBkdXBsaWNhdGluZyB0aGUg Y2hlY2suCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTMwMy4KClJlcG9ydGVkLWJ5 OiBKdWxpZW4gR3JhbGwgPEp1bGllbi5HcmFsbEBhcm0uY29tPgpTaWduZWQt b2ZmLWJ5OiBKdWxpZW4gR3JhbGwgPGp1bGllbi5ncmFsbEBhcm0uY29tPgpS ZXZpZXdlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3RhYmVsbGluaUBr ZXJuZWwub3JnPgpSZXZpZXdlZC1ieTogQW5kcmUgUHJ6eXdhcmEgPGFuZHJl LnByenl3YXJhQGFybS5jb20+Ci0tLQogeGVuL2FyY2gvYXJtL2FybTMyL2Vu dHJ5LlMgfCA0NiArKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tCiAxIGZpbGUgY2hhbmdlZCwgMjMgaW5zZXJ0aW9ucygr KSwgMjMgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gvYXJt L2FybTMyL2VudHJ5LlMgYi94ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnkuUwpp bmRleCA0YTc2MmUwNGYxLi4xNTBjYmMwYjRiIDEwMDY0NAotLS0gYS94ZW4v YXJjaC9hcm0vYXJtMzIvZW50cnkuUworKysgYi94ZW4vYXJjaC9hcm0vYXJt MzIvZW50cnkuUwpAQCAtMTMsMjcgKzEzLDYgQEAKICNkZWZpbmUgUkVTVE9S RV9CQU5LRUQobW9kZSkgXAogICAgICAgICBSRVNUT1JFX09ORV9CQU5LRUQo U1BfIyNtb2RlKSA7IFJFU1RPUkVfT05FX0JBTktFRChMUl8jI21vZGUpIDsg UkVTVE9SRV9PTkVfQkFOS0VEKFNQU1JfIyNtb2RlKQogCi0jZGVmaW5lIFNB VkVfQUxMICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIHN1YiBzcCwgIyhVUkVHU19T UF91c3IgLSBVUkVHU19zcCk7IC8qIFNQLCBMUiwgU1BTUiwgUEMgKi8gICAg ICBcCi0gICAgICAgIHB1c2gge3IwLXIxMn07IC8qIFNhdmUgUjAtUjEyICov ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIG1ycyByMTEsIEVMUl9oeXA7 ICAgICAgICAgICAgICAgLyogRUxSX2h5cCBpcyByZXR1cm4gYWRkcmVzcy4g Ki9cCi0gICAgICAgIHN0ciByMTEsIFtzcCwgI1VSRUdTX3BjXTsgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIHN0ciBsciwgW3NwLCAjVVJF R1NfbHJdOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIGFk ZCByMTEsIHNwLCAjVVJFR1Nfa2VybmVsX3NpemVvZis0OyAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIHN0ciByMTEsIFtzcCwgI1VS RUdTX3NwXTsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIG1y YyBDUDMyKHIxMSwgSFNSKTsgICAgICAgICAgICAgLyogU2F2ZSBleGNlcHRp b24gc3luZHJvbWUgKi8gICBcCi0gICAgICAgIHN0ciByMTEsIFtzcCwgI1VS RUdTX2hzcl07ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIG1y cyByMTEsIFNQU1JfaHlwOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIHN0ciByMTEsIFtzcCwgI1VS RUdTX2Nwc3JdOyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBcCi0gICAgICAgIGFuZCByMTEsICNQU1JfTU9ERV9NQVNLOyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcCi0gICAgICAgIGNt cCByMTEsICNQU1JfTU9ERV9IWVA7ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBcCi0gICAgICAgIGJsbmUgc2F2ZV9ndWVzdF9y ZWdzCi0KIHNhdmVfZ3Vlc3RfcmVnczoKICNpZmRlZiBDT05GSUdfQVJNMzJf SEFSREVOX0JSQU5DSF9QUkVESUNUT1IKICAgICAgICAgLyoKQEAgLTUyLDcg KzMxLDcgQEAgc2F2ZV9ndWVzdF9yZWdzOgogICAgICAgICBsZHIgcjExLCA9 MHhmZmZmZmZmZiAgLyogQ2xvYmJlciBTUCB3aGljaCBpcyBvbmx5IHZhbGlk IGZvciBoeXBlcnZpc29yIGZyYW1lcy4gKi8KICAgICAgICAgc3RyIHIxMSwg W3NwLCAjVVJFR1Nfc3BdCiAgICAgICAgIFNBVkVfT05FX0JBTktFRChTUF91 c3IpCi0gICAgICAgIC8qIExSX3VzciBpcyB0aGUgc2FtZSBwaHlzaWNhbCBy ZWdpc3RlciBhcyBsciBhbmQgaXMgc2F2ZWQgaW4gU0FWRV9BTEwgKi8KKyAg ICAgICAgLyogTFJfdXNyIGlzIHRoZSBzYW1lIHBoeXNpY2FsIHJlZ2lzdGVy IGFzIGxyIGFuZCBpcyBzYXZlZCBieSB0aGUgY2FsbGVyICovCiAgICAgICAg IFNBVkVfQkFOS0VEKHN2YykKICAgICAgICAgU0FWRV9CQU5LRUQoYWJ0KQog ICAgICAgICBTQVZFX0JBTktFRCh1bmQpCkBAIC0xMzEsNyArMTEwLDI4IEBA IHNraXBfY2hlY2s6CiAgICAgICAgICAqIGludGVycnVwdHMgKEFzeW5jaHJv bm91cyBBYm9ydCwgSVJRLCBGSVEpIHRvIHVubWFzay4KICAgICAgICAgICov CiAgICAgICAgIC5tYWNybyB2ZWN0b3IgdHJhcCwgaWZsYWdzCi0gICAgICAg IFNBVkVfQUxMCisgICAgICAgIC8qIFNhdmUgcmVnaXN0ZXJzIGluIHRoZSBz dGFjayAqLworICAgICAgICBzdWIgICAgIHNwLCAjKFVSRUdTX1NQX3VzciAt IFVSRUdTX3NwKSAvKiBTUCwgTFIsIFNQU1IsIFBDICovCisgICAgICAgIHB1 c2ggICAge3IwLXIxMn0gICAgICAgICAgICAgICAgICAgICAgIC8qIFNhdmUg UjAtUjEyICovCisgICAgICAgIG1ycyAgICAgcjExLCBFTFJfaHlwICAgICAg ICAgICAgICAgICAgIC8qIEVMUl9oeXAgaXMgcmV0dXJuIGFkZHJlc3MgKi8K KyAgICAgICAgc3RyICAgICByMTEsIFtzcCwgI1VSRUdTX3BjXQorCisgICAg ICAgIHN0ciAgICAgbHIsIFtzcCwgI1VSRUdTX2xyXQorCisgICAgICAgIGFk ZCAgICAgcjExLCBzcCwgIyhVUkVHU19rZXJuZWxfc2l6ZW9mICsgNCkKKwor ICAgICAgICBzdHIgICAgIHIxMSwgW3NwLCAjVVJFR1Nfc3BdCisKKyAgICAg ICAgbXJjICAgICBDUDMyKHIxMSwgSFNSKSAgICAgICAgICAgICAgICAgLyog U2F2ZSBleGNlcHRpb24gc3luZHJvbWUgKi8KKyAgICAgICAgc3RyICAgICBy MTEsIFtzcCwgI1VSRUdTX2hzcl0KKworICAgICAgICBtcnMgICAgIHIxMSwg U1BTUl9oeXAKKyAgICAgICAgc3RyICAgICByMTEsIFtzcCwgI1VSRUdTX2Nw c3JdCisgICAgICAgIGFuZCAgICAgcjExLCAjUFNSX01PREVfTUFTSworICAg ICAgICBjbXAgICAgIHIxMSwgI1BTUl9NT0RFX0hZUAorICAgICAgICBibG5l ICAgIHNhdmVfZ3Vlc3RfcmVncworCisgICAgICAgIC8qIFdlIGFyZSByZWFk eSB0byBoYW5kbGUgdGhlIHRyYXAsIHNldHVwIHRoZSByZWdpc3RlcnMgYW5k IGp1bXAuICovCiAgICAgICAgIGNwc2llICAgXGlmbGFncwogICAgICAgICBh ZHIgICAgIGxyLCByZXR1cm5fZnJvbV90cmFwCiAgICAgICAgIG1vdiAgICAg cjAsIHNwCi0tIAoyLjExLjAKCg== --=separator Content-Type: application/octet-stream; name="xsa303/0003-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Disposition: attachment; filename="xsa303/0003-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Transfer-Encoding: base64 RnJvbSAwOThmZTg3Nzk2Nzg3MGZmZGEyZGZkOTYyOWE1ZmQyNzJmNmFhY2Rj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBGcmksIDExIE9jdCAyMDE5 IDE3OjQ5OjI4ICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzRdIHhlbi9hcm0z MjogRG9uJ3QgYmxpbmRseSB1bm1hc2sgaW50ZXJydXB0cyBvbiB0cmFwCiB3 aXRob3V0IGEgY2hhbmdlIG9mIGxldmVsCgpFeGNlcHRpb24gdmVjdG9ycyB3 aWxsIHVubWFzayBpbnRlcnJ1cHRzIHJlZ2FyZGxlc3MgdGhlIHN0YXRlIG9m IHRoZW0gaW4KdGhlIGludGVycnVwdGVkIGNvbnRleHQuCgpPbmUgb2YgdGhl IGNvbnNlcXVlbmNlcyBpcyBJUlEgd2lsbCBiZSB1bm1hc2tlZCB3aGVuIHJl Y2VpdmluZyBhbgp1bmRlZmluZWQgaW5zdHJ1Y3Rpb24gZXhjZXB0aW9uICh1 c2VkIGJ5IFdBUk4qKSBmcm9tIHRoZSBoeXBlcnZpc29yLgpUaGlzIGNvdWxk IHJlc3VsdCB0byB1bmV4cGVjdGVkIGJlaGF2aW9yIHN1Y2ggYXMgZGVhZGxv Y2sgKGlmIGEgbG9jayB3YXMKc2hhcmVkIHdpdGggaW50ZXJydXB0cykuCgpJ biBhIG51dHNoZWxsLCBpbnRlcnJ1cHRzIHNob3VsZCBvbmx5IGJlIHVubWFz a2VkIHdoZW4gaXQgaXMgc2FmZSB0byBkby4KWGVuIG9ubHkgdW5tYXNrIElS USBhbmQgQWJvcnQgaW50ZXJydXB0cywgc28gdGhlIGxvZ2ljIGNhbiBzdGF5 IHNpbXBsZS4KCkFzIHZlY3RvcnMgZXhjZXB0aW9ucyBtYXkgYmUgc2hhcmVk IGJldHdlZW4gZ3Vlc3QgYW5kIGh5cGVydmlzb3IsIHdlIG5vdwpuZWVkIHRv IGhhdmUgYSBkaWZmZXJlbnQgcG9saWN5IGZvciB0aGUgaW50ZXJydXB0cy4K Ck9uIGV4Y2VwdGlvbiBmcm9tIGh5cGVydmlzb3IsIGVhY2ggdmVjdG9yIHdp bGwgc2VsZWN0IHRoZSBsaXN0IG9mCmludGVycnVwdHMgdG8gaW5oZXJpdCBm cm9tIHRoZSBpbnRlcnJ1cHRlZCBjb250ZXh0LiBBbnkgaW50ZXJydXB0cyBu b3QKbGlzdGVkIHdpbGwgYmUga2VwdCBtYXNrZWQuCgpPbiBleGNlcHRpb24g ZnJvbSB0aGUgZ3Vlc3QsIHRoZSBBYm9ydCBhbmQgSVJRIHdpbGwgYmUgdW5t YXNrZWQKZGVwZW5kaW5nIG9uIHRoZSBleGFjdCB2ZWN0b3IuCgpUaGUgaW50 ZXJydXB0cyB3aWxsIGJlIGtlcHQgdW5tYXNrZWQgd2hlbiB0aGUgdmVjdG9y IGNhbm5vdCB1c2VkIGJ5CmVpdGhlciBndWVzdCBvciBoeXBlcnZpc29yLgoK Tm90ZSB0aGF0IGVhY2ggdmVjdG9yIGlzIG5vdCBhbnltb3JlIHByZWNlZGVk IGJ5IEFMSUdOLiBUaGlzIGlzIGZpbmUKYmVjYXVzZSB0aGUgYWxpZ25tZW50 IGlzIGFscmVhZHkgYmlnZ2VyIHRoYW4gd2hhdCB3ZSBuZWVkLgoKVGhpcyBp cyBwYXJ0IG9mIFhTQS0zMDMuCgpSZXBvcnRlZC1ieTogSnVsaWVuIEdyYWxs IDxKdWxpZW4uR3JhbGxAYXJtLmNvbT4KU2lnbmVkLW9mZi1ieTogSnVsaWVu IEdyYWxsIDxqdWxpZW4uZ3JhbGxAYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KUmV2 aWV3ZWQtYnk6IEFuZHJlIFByenl3YXJhIDxhbmRyZS5wcnp5d2FyYUBhcm0u Y29tPgotLS0KIHhlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TIHwgMTM4ICsr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tLQog MSBmaWxlIGNoYW5nZWQsIDEwOSBpbnNlcnRpb25zKCspLCAyOSBkZWxldGlv bnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC9hcm0vYXJtMzIvZW50cnku UyBiL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCmluZGV4IDE1MGNiYzBi NGIuLmVjOTBjY2EwOTMgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL2FybS9hcm0z Mi9lbnRyeS5TCisrKyBiL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCkBA IC00LDYgKzQsMTcgQEAKICNpbmNsdWRlIDxhc20vYWx0ZXJuYXRpdmUuaD4K ICNpbmNsdWRlIDxwdWJsaWMveGVuLmg+CiAKKy8qCisgKiBTaG9ydC1oYW5k cyB0byBkZWZpbmVkIHRoZSBpbnRlcnJ1cHRzIChBLCBJLCBGKQorICoKKyAq IF8gbWVhbnMgdGhlIGludGVycnVwdCBzdGF0ZSB3aWxsIG5vdCBjaGFuZ2UK KyAqIFggbWVhbnMgdGhlIHN0YXRlIG9mIGludGVycnVwdCBYIHdpbGwgY2hh bmdlCisgKgorICogVG8gYmUgdXNlZCB3aXRoIG1zciBjcHNyXyogb25seQor ICovCisjZGVmaW5lIElGTEFHU19BSUYgICAgICBQU1JfQUJUX01BU0sgfCBQ U1JfSVJRX01BU0sgfCBQU1JfRklRX01BU0sKKyNkZWZpbmUgSUZMQUdTX0Ff RiAgICAgIFBTUl9BQlRfTUFTSyB8IFBTUl9GSVFfTUFTSworCiAjZGVmaW5l IFNBVkVfT05FX0JBTktFRChyZWcpICAgIG1ycyByMTEsIHJlZzsgc3RyIHIx MSwgW3NwLCAjVVJFR1NfIyNyZWddCiAjZGVmaW5lIFJFU1RPUkVfT05FX0JB TktFRChyZWcpIGxkciByMTEsIFtzcCwgI1VSRUdTXyMjcmVnXTsgbXNyIHJl ZywgcjExCiAKQEAgLTEwNiwxMCArMTE3LDE4IEBAIHNraXBfY2hlY2s6CiAg ICAgICAgIG1vdiBwYywgbHIKIAogICAgICAgICAvKgotICAgICAgICAgKiBN YWNybyB0byBkZWZpbmUgdHJhcCBlbnRyeS4gVGhlIGlmbGFncyBjb3JyZXNw b25kcyB0byB0aGUgbGlzdCBvZgotICAgICAgICAgKiBpbnRlcnJ1cHRzIChB c3luY2hyb25vdXMgQWJvcnQsIElSUSwgRklRKSB0byB1bm1hc2suCisgICAg ICAgICAqIE1hY3JvIHRvIGRlZmluZSBhIHRyYXAgZW50cnkuCisgICAgICAg ICAqCisgICAgICAgICAqICBAZ3Vlc3RfaWZsYWdzOiBPcHRpb25hbCBsaXN0 IG9mIGludGVycnVwdHMgdG8gdW5tYXNrIHdoZW4KKyAgICAgICAgICogICAg ICBlbnRlcmluZyBmcm9tIGd1ZXN0IGNvbnRleHQuIEFzIHRoaXMgaXMgdXNl ZCB3aXRoIGNwc2llLAorICAgICAgICAgKiAgICAgIHRoZSBsZXR0ZXIgKGEs IGksIGYpIHNob3VsZCBiZSB1c2VkLgorICAgICAgICAgKgorICAgICAgICAg KiAgQGh5cF9pZmxhZ3M6IE9wdGlvbmFsIGxpc3Qgb2YgaW50ZXJydXB0cyB0 byBpbmhlcml0IHdoZW4KKyAgICAgICAgICogICAgICBlbnRlcmluZyBmcm9t IGh5cGVydmlzb3IgY29udGV4dC4gQW55IGludGVycnVwdHMgbm90CisgICAg ICAgICAqICAgICAgbGlzdGVkIHdpbGwgYmUga2VwdCB1bmNoYW5nZWQuIEFz IHRoaXMgaXMgdXNlZCB3aXRoIGNwc3JfKiwKKyAgICAgICAgICogICAgICBJ RkxBR1NfKiBzaG9ydC1oYW5kcyBzaG91bGQgYmUgdXNlZC4KICAgICAgICAg ICovCi0gICAgICAgIC5tYWNybyB2ZWN0b3IgdHJhcCwgaWZsYWdzCisgICAg ICAgIC5tYWNybyB2ZWN0b3IgdHJhcCwgZ3Vlc3RfaWZsYWdzPW4sIGh5cF9p ZmxhZ3M9MAogICAgICAgICAvKiBTYXZlIHJlZ2lzdGVycyBpbiB0aGUgc3Rh Y2sgKi8KICAgICAgICAgc3ViICAgICBzcCwgIyhVUkVHU19TUF91c3IgLSBV UkVHU19zcCkgLyogU1AsIExSLCBTUFNSLCBQQyAqLwogICAgICAgICBwdXNo ICAgIHtyMC1yMTJ9ICAgICAgICAgICAgICAgICAgICAgICAvKiBTYXZlIFIw LVIxMiAqLwpAQCAtMTI3LDEyICsxNDYsMzkgQEAgc2tpcF9jaGVjazoKIAog ICAgICAgICBtcnMgICAgIHIxMSwgU1BTUl9oeXAKICAgICAgICAgc3RyICAg ICByMTEsIFtzcCwgI1VSRUdTX2Nwc3JdCi0gICAgICAgIGFuZCAgICAgcjEx LCAjUFNSX01PREVfTUFTSwotICAgICAgICBjbXAgICAgIHIxMSwgI1BTUl9N T0RFX0hZUAotICAgICAgICBibG5lICAgIHNhdmVfZ3Vlc3RfcmVncwogCisg ICAgICAgIC8qCisgICAgICAgICAqIFdlIG5lZWQgdG8gZGlzdGluZ3Vpc2gg d2hldGhlciB3ZSBjYW1lIGZyb20gZ3Vlc3Qgb3IKKyAgICAgICAgICogaHlw ZXJ2aXNvciBjb250ZXh0LgorICAgICAgICAgKi8KKyAgICAgICAgYW5kICAg ICByMCwgcjExLCAjUFNSX01PREVfTUFTSworICAgICAgICBjbXAgICAgIHIw LCAjUFNSX01PREVfSFlQCisKKyAgICAgICAgYm5lICAgICAxZgorICAgICAg ICAvKgorICAgICAgICAgKiBUcmFwIGZyb20gdGhlIGh5cGVydmlzb3IKKyAg ICAgICAgICoKKyAgICAgICAgICogSW5oZXJpdCB0aGUgc3RhdGUgb2YgdGhl IGludGVycnVwdHMgZnJvbSB0aGUgaHlwZXJ2aXNvcgorICAgICAgICAgKiBj b250ZXh0LiBGb3IgdGhhdCB3ZSBuZWVkIHRvIHVzZSBTUFNSIChzdG9yZWQg aW4gcjExKSBhbmQKKyAgICAgICAgICogbW9kaWZ5IENQU1IgYWNjb3JkaW5n bHkuCisgICAgICAgICAqCisgICAgICAgICAqIENQU1IgPSAoQ1BTUiAmIH5o eXBfaWZsYWdzKSB8IChTUFNSICYgaHlwX2lmbGFncykKKyAgICAgICAgICov CisgICAgICAgIG1ycyAgICAgcjEwLCBjcHNyCisgICAgICAgIGJpYyAgICAg cjEwLCByMTAsICNcaHlwX2lmbGFncworICAgICAgICBhbmQgICAgIHIxMSwg cjExLCAjXGh5cF9pZmxhZ3MKKyAgICAgICAgb3JyICAgICByMTAsIHIxMCwg cjExCisgICAgICAgIG1zciAgICAgY3Bzcl9jeCwgcjEwCisgICAgICAgIGIg ICAgICAgMmYKKworMToKKyAgICAgICAgLyogVHJhcCBmcm9tIHRoZSBndWVz dCAqLworICAgICAgICBibCAgICAgIHNhdmVfZ3Vlc3RfcmVncworICAgICAg ICAuaWYgICAgIFxndWVzdF9pZmxhZ3MgIT0gbgorICAgICAgICBjcHNpZSAg IFxndWVzdF9pZmxhZ3MKKyAgICAgICAgLmVuZGlmCisyOgogICAgICAgICAv KiBXZSBhcmUgcmVhZHkgdG8gaGFuZGxlIHRoZSB0cmFwLCBzZXR1cCB0aGUg cmVnaXN0ZXJzIGFuZCBqdW1wLiAqLwotICAgICAgICBjcHNpZSAgIFxpZmxh Z3MKICAgICAgICAgYWRyICAgICBsciwgcmV0dXJuX2Zyb21fdHJhcAogICAg ICAgICBtb3YgICAgIHIwLCBzcAogICAgICAgICAvKgpAQCAtMTQ0LDIwICsx OTAsNiBAQCBza2lwX2NoZWNrOgogICAgICAgICBiICAgICAgIGRvX3RyYXBf XHRyYXAKICAgICAgICAgLmVuZG0KIAotI2RlZmluZSBfX0RFRklORV9UUkFQ X0VOVFJZKHRyYXAsIGlmbGFncykgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgXAotICAgICAgICBBTElHTjsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAotdHJhcF8j I3RyYXA6ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXAotICAgICAgICB2ZWN0b3IgdHJhcCwg aWZsYWdzCi0KLS8qIFRyYXAgaGFuZGxlciB3aGljaCB1bm1hc2sgSVJRL0Fi b3J0LCBrZWVwIEZJUSBtYXNrZWQgKi8KLSNkZWZpbmUgREVGSU5FX1RSQVBf RU5UUlkodHJhcCkgX19ERUZJTkVfVFJBUF9FTlRSWSh0cmFwLCBhaSkKLQot LyogVHJhcCBoYW5kbGVyIHdoaWNoIHVubWFzayBBYm9ydCwga2VlcCBJUlEv RklRIG1hc2tlZCAqLwotI2RlZmluZSBERUZJTkVfVFJBUF9FTlRSWV9OT0lS USh0cmFwKSBfX0RFRklORV9UUkFQX0VOVFJZKHRyYXAsIGEpCi0KLS8qIFRy YXAgaGFuZGxlciB3aGljaCB1bm1hc2sgSVJRLCBrZWVwIEFib3J0L0ZJUSBt YXNrZWQgKi8KLSNkZWZpbmUgREVGSU5FX1RSQVBfRU5UUllfTk9BQk9SVCh0 cmFwKSBfX0RFRklORV9UUkFQX0VOVFJZKHRyYXAsIGkpCi0KICAgICAgICAg LmFsaWduIDUKIEdMT0JBTChoeXBfdHJhcHNfdmVjdG9yKQogICAgICAgICBi IHRyYXBfcmVzZXQgICAgICAgICAgICAgICAgICAgIC8qIDB4MDAgLSBSZXNl dCAqLwpAQCAtMjI4LDE0ICsyNjAsNjIgQEAgZGVjb2RlX3ZlY3RvcnM6CiAK ICNlbmRpZiAvKiBDT05GSUdfSEFSREVOX0JSQU5DSF9QUkVESUNUT1IgKi8K IAotREVGSU5FX1RSQVBfRU5UUlkocmVzZXQpCi1ERUZJTkVfVFJBUF9FTlRS WSh1bmRlZmluZWRfaW5zdHJ1Y3Rpb24pCi1ERUZJTkVfVFJBUF9FTlRSWSho eXBlcnZpc29yX2NhbGwpCi1ERUZJTkVfVFJBUF9FTlRSWShwcmVmZXRjaF9h Ym9ydCkKLURFRklORV9UUkFQX0VOVFJZKGd1ZXN0X3N5bmMpCi1ERUZJTkVf VFJBUF9FTlRSWV9OT0lSUShpcnEpCi1ERUZJTkVfVFJBUF9FTlRSWV9OT0lS UShmaXEpCi1ERUZJTkVfVFJBUF9FTlRSWV9OT0FCT1JUKGRhdGFfYWJvcnQp CisvKiBWZWN0b3Igbm90IHVzZWQgYnkgdGhlIEh5cGVydmlzb3IuICovCit0 cmFwX3Jlc2V0OgorICAgICAgICB2ZWN0b3IgcmVzZXQKKworLyoKKyAqIFZl Y3RvciBvbmx5IHVzZWQgYnkgdGhlIEh5cGVydmlzb3IuCisgKgorICogV2hp bGUgdGhlIGV4Y2VwdGlvbiBjYW4gYmUgZXhlY3V0ZWQgd2l0aCBhbGwgdGhl IGludGVycnVwdHMgKGUuZy4KKyAqIElSUSkgdW5tYXNrZWQsIHRoZSBpbnRl cnJ1cHRlZCBjb250ZXh0IG1heSBoYXZlIHB1cnBvc2VmdWxseSBtYXNrZWQK KyAqIHNvbWUgb2YgdGhlbS4gU28gd2Ugd2FudCB0byBpbmhlcml0IHRoZSBz dGF0ZSBmcm9tIHRoZSBpbnRlcnJ1cHRlZAorICogY29udGV4dC4KKyAqLwor dHJhcF91bmRlZmluZWRfaW5zdHJ1Y3Rpb246CisgICAgICAgIHZlY3RvciB1 bmRlZmluZWRfaW5zdHJ1Y3Rpb24sIGh5cF9pZmxhZ3M9SUZMQUdTX0FJRgor CisvKiBXZSBzaG91bGQgbmV2ZXIgcmVhY2ggdGhpcyB0cmFwICovCit0cmFw X2h5cGVydmlzb3JfY2FsbDoKKyAgICAgICAgdmVjdG9yIGh5cGVydmlzb3Jf Y2FsbAorCisvKgorICogVmVjdG9yIG9ubHkgdXNlZCBieSB0aGUgaHlwZXJ2 aXNvci4KKyAqCisgKiBXaGlsZSB0aGUgZXhjZXB0aW9uIGNhbiBiZSBleGVj dXRlZCB3aXRoIGFsbCB0aGUgaW50ZXJydXB0cyAoZS5nLgorICogSVJRKSB1 bm1hc2tlZCwgdGhlIGludGVycnVwdGVkIGNvbnRleHQgbWF5IGhhdmUgcHVy cG9zZWZ1bGx5IG1hc2tlZAorICogc29tZSBvZiB0aGVtLiBTbyB3ZSB3YW50 IHRvIGluaGVyaXQgdGhlIHN0YXRlIGZyb20gdGhlIGludGVycnVwdGVkCisg KiBjb250ZXh0LgorICovCit0cmFwX3ByZWZldGNoX2Fib3J0OgorICAgICAg IHZlY3RvciBwcmVmZXRjaF9hYm9ydCwgaHlwX2lmbGFncz1JRkxBR1NfQUlG CisKKy8qCisgKiBWZWN0b3Igb25seSB1c2VkIGJ5IHRoZSBoeXBlcnZpc29y LgorICoKKyAqIERhdGEgQWJvcnQgc2hvdWxkIGJlIHJhcmUgYW5kIG1vc3Qg bGlrZWx5IGZhdGFsLiBJdCBpcyBiZXN0IHRvIG5vdAorICogdW5tYXNrIGFu eSBpbnRlcnJ1cHRzIHRvIGxpbWl0IHRoZSBhbW91bnQgb2YgY29kZSB0aGF0 IGNhbiBydW4gYmVmb3JlCisgKiB0aGUgRGF0YSBBYm9ydCBpcyB0cmVhdGVk LgorICovCit0cmFwX2RhdGFfYWJvcnQ6CisgICAgICAgIHZlY3RvciBkYXRh X2Fib3J0CisKKy8qIFZlY3RvciBvbmx5IHVzZWQgYnkgdGhlIGd1ZXN0LiBX ZSBjYW4gdW5tYXNrIEFib3J0L0lSUS4gKi8KK3RyYXBfZ3Vlc3Rfc3luYzoK KyAgICAgICAgdmVjdG9yIGd1ZXN0X3N5bmMsIGd1ZXN0X2lmbGFncz1haQor CisKKy8qIFZlY3RvciB1c2VkIGJ5IHRoZSBoeXBlcnZpc29yIGFuZCB0aGUg Z3Vlc3QuICovCit0cmFwX2lycToKKyAgICAgICAgdmVjdG9yIGlycSwgZ3Vl c3RfaWZsYWdzPWEsIGh5cF9pZmxhZ3M9SUZMQUdTX0FfRgorCisvKgorICog VmVjdG9yIHVzZWQgYnkgdGhlIGh5cGVydmlzb3IgYW5kIHRoZSBndWVzdC4K KyAqCisgKiBGSVEgYXJlIG5vdCBtZWFudCB0byBoYXBwZW4sIHNvIHdlIGRv bid0IHVubWFzayBhbnkgaW50ZXJydXB0cy4KKyAqLwordHJhcF9maXE6Cisg ICAgICAgIHZlY3RvciBmaXEKIAogcmV0dXJuX2Zyb21fdHJhcDoKICAgICAg ICAgLyoKLS0gCjIuMTEuMAoK --=separator Content-Type: application/octet-stream; name="xsa303/0004-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Disposition: attachment; filename="xsa303/0004-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch" Content-Transfer-Encoding: base64 RnJvbSBjNmQyOTBjZTE1N2EwNDRkZWM0MTdmZGRhOGRiNzFlNDFhMzdkNzQ0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWxpZW4gR3JhbGwg PGp1bGllbi5ncmFsbEBhcm0uY29tPgpEYXRlOiBNb24sIDcgT2N0IDIwMTkg MTg6MTA6NTYgKzAxMDAKU3ViamVjdDogW1BBVENIIDQvNF0geGVuL2FybTY0 OiBEb24ndCBibGluZGx5IHVubWFzayBpbnRlcnJ1cHRzIG9uIHRyYXAKIHdp dGhvdXQgYSBjaGFuZ2Ugb2YgbGV2ZWwKClNvbWUgb2YgdGhlIHRyYXBzIHdp dGhvdXQgYSBjaGFuZ2Ugb2YgdGhlIGxldmVsIChpLmUuIGh5cGVydmlzb3Ig LT4KaHlwZXJ2aXNvcikgd2lsbCB1bm1hc2sgaW50ZXJydXB0cyByZWdhcmRs ZXNzIHRoZSBzdGF0ZSBvZiB0aGVtIGluIHRoZQppbnRlcnJ1cHRlZCBjb250 ZXh0LgoKT25lIG9mIHRoZSBjb25zZXF1ZW5jZXMgaXMgSVJRIHdpbGwgYmUg dW5tYXNrZWQgd2hlbiByZWNlaXZpbmcgYQpzeW5jaHJvbm91cyBleGNlcHRp b24gKHVzZWQgYnkgV0FSTiooKSkuIFRoaXMgY291bGQgcmVzdWx0IHRvIHVu ZXhwZWN0ZWQKYmVoYXZpb3Igc3VjaCBhcyBkZWFkbG9jayAoaWYgYSBsb2Nr IHdhcyBzaGFyZWQgd2l0aCBpbnRlcnJ1cHRzKS4KCkluIGEgbnV0c2hlbGws IGludGVycnVwdHMgc2hvdWxkIG9ubHkgYmUgdW5tYXNrZWQgd2hlbiBpdCBp cyBzYWZlIHRvCmRvLiBYZW4gb25seSB1bm1hc2sgSVJRIGFuZCBBYm9ydCBp bnRlcnJ1cHRzLCBzbyB0aGUgbG9naWMgY2FuIHN0YXkKc2ltcGxlOgogICAg LSBoeXBfZXJyb3I6IEFsbCB0aGUgaW50ZXJydXB0cyBhcmUgbm93IGtlcHQg bWFza2VkLiBTRXJyb3Igc2hvdWxkCiAgICAgIGJlIHByZXR0eSByYXJlIGFu ZCBpZiBldmVyIGhhcHBlbiB0aGVuIHdlIG1vc3QgbGlrZWx5IHdhbnQgdG8K ICAgICAgYXZvaWQgYW55IG90aGVyIGludGVycnVwdHMgdG8gYmUgZ2VuZXJh dGVkLiBUaGUgcG90ZW50aWFsIG1haW4KICAgICAgImNhbGxlciIgaXMgZHVy aW5nIHZpcnR1YWwgU0Vycm9yIHN5bmNocm9uaXphdGlvbiBvbiB0aGUgZXhp dAogICAgICBwYXRoIGZyb20gdGhlIGd1ZXN0IChzZWUgY2hlY2tfcGVuZGlu Z192c2Vycm9yKS4KCiAgICAtIGh5cF9zeW5jOiBUaGUgaW50ZXJydXB0cyBz dGF0ZSBpcyBpbmhlcml0ZWQgZnJvbSB0aGUgaW50ZXJydXB0ZWQKICAgICAg Y29udGV4dC4KCiAgICAtIGh5cF9pcnE6IEFsbCB0aGUgaW50ZXJydXB0cyBi dXQgSVJRIHN0YXRlIGFyZSBpbmhlcml0ZWQgZnJvbSB0aGUKICAgICAgaW50 ZXJydXB0ZWQgY29udGV4dC4gSVJRIGlzIGtlcHQgbWFza2VkLgoKVGhpcyBp cyBwYXJ0IG9mIFhTQS0zMDMuCgpSZXBvcnRlZC1ieTogSnVsaWVuIEdyYWxs IDxKdWxpZW4uR3JhbGxAYXJtLmNvbT4KU2lnbmVkLW9mZi1ieTogSnVsaWVu IEdyYWxsIDxqdWxpZW4uZ3JhbGxAYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KUmV2 aWV3ZWQtYnk6IEFuZHJlIFByenl3YXJhIDxhbmRyZS5wcnp5d2FyYUBhcm0u Y29tPgotLS0KIHhlbi9hcmNoL2FybS9hcm02NC9lbnRyeS5TIHwgNDcgKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tLQog MSBmaWxlIGNoYW5nZWQsIDQzIGluc2VydGlvbnMoKyksIDQgZGVsZXRpb25z KC0pCgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gvYXJtL2FybTY0L2VudHJ5LlMg Yi94ZW4vYXJjaC9hcm0vYXJtNjQvZW50cnkuUwppbmRleCAyZDlhMjcxM2Ex Li4zZTQxYmE2NWI2IDEwMDY0NAotLS0gYS94ZW4vYXJjaC9hcm0vYXJtNjQv ZW50cnkuUworKysgYi94ZW4vYXJjaC9hcm0vYXJtNjQvZW50cnkuUwpAQCAt MTg4LDI0ICsxODgsNjMgQEAgaHlwX2Vycm9yX2ludmFsaWQ6CiAgICAgICAg IGVudHJ5ICAgaHlwPTEKICAgICAgICAgaW52YWxpZCBCQURfRVJST1IKIAor LyoKKyAqIFNFcnJvciByZWNlaXZlZCB3aGlsZSBydW5uaW5nIGluIHRoZSBo eXBlcnZpc29yIG1vZGUuCisgKgorICogVGVjaG5pY2FsbHksIHdlIGNvdWxk IHVubWFzayB0aGUgSVJRIGlmIGl0IHdlcmUgdW5tYXNrZWQgaW4gdGhlCisg KiBpbnRlcnJ1cHRlZCBjb250ZXh0LiBIb3dldmVyLCB0aGlzIHJlcXVpcmUg dG8gY2hlY2sgdGhlIFBTVEFURS4gRm9yCisgKiBzaW1wbGljaXR5LCBhcyBT RXJyb3Igc2hvdWxkIGJlIHJhcmUgYW5kIHBvdGVudGlhbGx5IGZhdGFsLAor ICogYWxsIGludGVycnVwdHMgYXJlIGtlcHQgbWFza2VkLgorICovCiBoeXBf ZXJyb3I6CiAgICAgICAgIGVudHJ5ICAgaHlwPTEKLSAgICAgICAgbXNyICAg ICBkYWlmY2xyLCAjMgogICAgICAgICBtb3YgICAgIHgwLCBzcAogICAgICAg ICBibCAgICAgIGRvX3RyYXBfaHlwX3NlcnJvcgogICAgICAgICBleGl0ICAg IGh5cD0xCiAKLS8qIFRyYXBzIHRha2VuIGluIEN1cnJlbnQgRUwgd2l0aCBT UF9FTHggKi8KKy8qCisgKiBTeW5jaHJvbm91cyBleGNlcHRpb24gcmVjZWl2 ZWQgd2hpbGUgcnVubmluZyBpbiB0aGUgaHlwZXJ2aXNvciBtb2RlLgorICoK KyAqIFdoaWxlIHRoZSBleGNlcHRpb24gY291bGQgYmUgZXhlY3V0ZWQgd2l0 aCBhbGwgdGhlIGludGVycnVwdHMgKGUuZy4KKyAqIElSUSkgdW5tYXNrZWQs IHRoZSBpbnRlcnJ1cHRlZCBjb250ZXh0IG1heSBoYXZlIHB1cnBvc2VmdWxs eSBtYXNrZWQKKyAqIHNvbWUgb2YgdGhlbS4gU28gd2Ugd2FudCB0byBpbmhl cml0IHRoZSBzdGF0ZSBmcm9tIHRoZSBpbnRlcnJ1cHRlZAorICogY29udGV4 dC4KKyAqLwogaHlwX3N5bmM6CiAgICAgICAgIGVudHJ5ICAgaHlwPTEKLSAg ICAgICAgbXNyICAgICBkYWlmY2xyLCAjNgorCisgICAgICAgIC8qIEluaGVy aXQgaW50ZXJydXB0cyAqLworICAgICAgICBtcnMgICAgIHgwLCBTUFNSX2Vs MgorICAgICAgICBhbmQgICAgIHgwLCB4MCwgIyhQU1JfREJHX01BU0sgfCBQ U1JfQUJUX01BU0sgfCBQU1JfSVJRX01BU0sgfCBQU1JfRklRX01BU0spCisg ICAgICAgIG1zciAgICAgZGFpZiwgeDAKKwogICAgICAgICBtb3YgICAgIHgw LCBzcAogICAgICAgICBibCAgICAgIGRvX3RyYXBfaHlwX3N5bmMKICAgICAg ICAgZXhpdCAgICBoeXA9MQogCisvKgorICogSVJRIHJlY2VpdmVkIHdoaWxl IHJ1bm5pbmcgaW4gdGhlIGh5cGVydmlzb3IgbW9kZS4KKyAqCisgKiBXaGls ZSB0aGUgZXhjZXB0aW9uIGNvdWxkIGJlIGV4ZWN1dGVkIHdpdGggYWxsIHRo ZSBpbnRlcnJ1cHRzIGJ1dCBJUlEKKyAqIHVubWFza2VkLCB0aGUgaW50ZXJy dXB0ZWQgY29udGV4dCBtYXkgaGF2ZSBwdXJwb3NlZnVsbHkgbWFza2VkIHNv bWUKKyAqIG9mIHRoZW0uIFNvIHdlIHdhbnQgdG8gaW5oZXJpdCB0aGUgc3Rh dGUgZnJvbSB0aGUgaW50ZXJydXB0IGNvbnRleHQKKyAqIGFuZCBrZWVwIElS USBtYXNrZWQuCisgKgorICogWFhYOiBXZSBtYXkgd2FudCB0byBjb25zaWRl ciBhbiBvcmRlcmluZyBiZXR3ZWVuIGludGVycnVwdHMgKGUuZy4gaWYKKyAq IFNFcnJvciBhcmUgbWFza2VkLCB0aGVuIElSUSBzaG91bGQgYmUgbWFza2Vk IHRvbykuIEhvd2V2ZXIsIHRoaXMKKyAqIHdvdWxkIHJlcXVpcmUgc29tZSBy ZXdvcmsgaW4gc29tZSBwYXRocyAoZS5nLiBwYW5pYywgbGl2ZXBhdGNoKSB0 bworICogZW5zdXJlIHRoZSBvcmRlcmluZyBpcyBlbmZvcmNlZCBldmVyeXdo ZXJlLgorICovCiBoeXBfaXJxOgogICAgICAgICBlbnRyeSAgIGh5cD0xCi0g ICAgICAgIG1zciAgICAgZGFpZmNsciwgIzQKKworICAgICAgICAvKiBJbmhl cml0IEQsIEEsIEYgaW50ZXJydXB0cyBhbmQga2VlcCBJIG1hc2tlZCAqLwor ICAgICAgICBtcnMgICAgIHgwLCBTUFNSX2VsMgorICAgICAgICBtb3YgICAg IHgxLCAjKFBTUl9EQkdfTUFTSyB8IFBTUl9BQlRfTUFTSyB8IFBTUl9GSVFf TUFTSykKKyAgICAgICAgYW5kICAgICB4MCwgeDAsIHgxCisgICAgICAgIG9y ciAgICAgeDAsIHgwLCAjUFNSX0lSUV9NQVNLCisgICAgICAgIG1zciAgICAg ZGFpZiwgeDAKKwogICAgICAgICBtb3YgICAgIHgwLCBzcAogICAgICAgICBi bCAgICAgIGRvX3RyYXBfaXJxCiAgICAgICAgIGV4aXQgICAgaHlwPTEKLS0g CjIuMTEuMAoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1hbm5vdW5jZQ== --=separator--