From xen-users-bounces@lists.xenproject.org Mon Nov 15 01:02:22 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 15 Nov 2021 01:02:22 +0000 Received: from list by lists.xenproject.org with outflank-mailman.225598.389614 (Exim 4.92) (envelope-from ) id 1mmQMw-0000DO-9z; Mon, 15 Nov 2021 01:01:10 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 225598.389614; Mon, 15 Nov 2021 01:01:10 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mmQMw-0000AN-26; Mon, 15 Nov 2021 01:01:10 +0000 Received: by outflank-mailman (input) for mailman id 225598; Mon, 15 Nov 2021 01:01:08 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mmQMu-0007rR-PN for xen-users@lists.xenproject.org; Mon, 15 Nov 2021 01:01:08 +0000 Received: from mail-yb1-xb2f.google.com (mail-yb1-xb2f.google.com [2607:f8b0:4864:20::b2f]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 80d07210-45af-11ec-a9d2-d9f7a1cc8784; Mon, 15 Nov 2021 02:01:05 +0100 (CET) Received: by mail-yb1-xb2f.google.com with SMTP id d10so41971536ybe.3 for ; Sun, 14 Nov 2021 17:01:03 -0800 (PST) Received: by 2002:a05:6902:1105:0:0:0:0 with HTTP; Sun, 14 Nov 2021 17:01:01 -0800 (PST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 80d07210-45af-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=QuSvffMFJurGtiGL9SgyFmsjOKlITk3iMiCHb2NgewU=; b=AKgVTW7n/CJaNRg/9SIKM8W192aR+l2ZSwCDrkX/FDTkRdA3hvgBXQpV4+HB5l21nr ZwQW2ntofp6GqQOP/3E5w4X3c2gyrbjsIdldnW1IBdyyxNOjd/+tJUu5Nyf1mAKBSK0x qYbnkoqyeT5QKAKk9rV3do0aCGycMQ81oobNpNdPjxsCn1kNpgTw8eQI3clg6WXEWIMS 3s/Z47MFNqESglXEBqxwKkVucBJlKy+AS2W7gY8GxTKrcg1/MLDQYVIcyMynT8VJ8W4E ciO0sf5rZ4s9lF5crrd/JIBp5hilRQbLgmdYLf3fODebkq/UwCcMgDjQ3C+Xhs6OHCjY ko0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=QuSvffMFJurGtiGL9SgyFmsjOKlITk3iMiCHb2NgewU=; b=IeEyyrAydoFf0w/N21dPgClUz02WAhYDhUN0XmX+L5mKcRgaWUtkyuaSjvO2105Hnx xhfuk3Yg2Eg1cKtwKN0r95AOnV+KgNsHVBGuIWtX+Vo0pqQUDgCy4JdL/fZJJrGzWoRs fv1NzFC34naXpKJdrBsBKJ0DKyGHLlUMHh9ygvZtYLikOAzCo9UtHZELRRHcRl3H1Jsg 36+XdS4cpJK98dRdLlnhVxPC3sXcwPUDY6K+HrAGsqsvxnawSuGKu8MJNBPTMpYpVXlx Raj2iOHLgx0sjUz5+8jYmDzax3v6K3jrOXVd0SL++qZFbz6umxe74O736e814ED0EvHl iTbw== X-Gm-Message-State: AOAM530gKlXZhTZHrfx8IhEI/W0xC0XZqRgzxyoABkVA6k/sXGPgSf/b j0T52vrBikHx3zK/RMmMQnt5Ut5VlrKSX6YvFHObz7xH X-Google-Smtp-Source: ABdhPJzpxWKNtD2x3hKPAu47kLbv/x17OgliTG1xK/3O/kcat1V6iKpMS9/mxbP4XHDGf7VBS4DFrBS77qXi5t2H2KY= X-Received: by 2002:a25:d15:: with SMTP id 21mr35600213ybn.141.1636938061939; Sun, 14 Nov 2021 17:01:01 -0800 (PST) MIME-Version: 1.0 From: Pry Mar Date: Sun, 14 Nov 2021 17:01:01 -0800 Message-ID: Subject: CS9 builds are possible and xen-4.15.1 builds in el9 To: xen-users Content-Type: text/plain; charset="UTF-8" Hello xen-users, I noticed that a centos-stream-9-x86_64 chroot is now in mock-configs. That got me trying to build xen depends, and finally a noqemu build of xen-4.15.1. Ultimately I want to use these packages on AlmaLinux 9, once its released. Here is the COPR repo with the xen packages: https://copr.fedorainfracloud.org/coprs/prymar56/stream9-extra/builds/ Once epel-9 is released I will try a full qemu build. As of now there is no qemu* support here. regards, PryMar56 ##xen-packaging on OFTC From xen-users-bounces@lists.xenproject.org Fri Nov 19 14:12:11 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 19 Nov 2021 14:12:11 +0000 Received: from list by lists.xenproject.org with outflank-mailman.227990.394498 (Exim 4.92) (envelope-from ) id 1mo4bh-0007td-Jh; Fri, 19 Nov 2021 14:11:13 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 227990.394498; Fri, 19 Nov 2021 14:11:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mo4bh-0007rh-F6; Fri, 19 Nov 2021 14:11:13 +0000 Received: by outflank-mailman (input) for mailman id 227990; Fri, 19 Nov 2021 14:11:12 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mo4bg-0007IU-DO for xen-users@lists.xen.org; Fri, 19 Nov 2021 14:11:12 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 875420c1-4942-11ec-a9d2-d9f7a1cc8784; Fri, 19 Nov 2021 15:11:05 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mo4bO-0000fv-SH; Fri, 19 Nov 2021 14:10:54 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.92) (envelope-from ) id 1mo4bO-0006a8-Pf; Fri, 19 Nov 2021 14:10:54 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 875420c1-4942-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xen.org; s=20200302mail; h=Date:Message-Id:Subject:CC:From:To:MIME-Version: Content-Transfer-Encoding:Content-Type; bh=umEaDI8/hUmH+5yhUmlANGENfqJ8OeLb0pmTgj8hvss=; b=OEp38vmrfhW3Jlrh0MU+sVHTKw EcSoUTtlOsNS/jYmsPMdXKD35H7d5C2fiH0ZxZ3UcCNMNOt53q6ykM0A4gRyParMou61U4ydvDG6w 7pFDUh/TSLsW+hARM9OIHqHNkySj6qklqKMClqE6XCnJGV0RHRIIWvdQMUmk9xEovzgo=; Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 390 v1 (CVE-2021-28710) - certain VT-d IOMMUs may not work in shared page table mode Message-Id: Date: Fri, 19 Nov 2021 14:10:54 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2021-28710 / XSA-390 certain VT-d IOMMUs may not work in shared page table mode ISSUE DESCRIPTION ================= For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared between CPUs, for second-level translation (EPT), and IOMMUs. These page tables are presently set up to always be 4 levels deep. However, an IOMMU may require the use of just 3 page table levels. In such a configuration the lop level table needs to be stripped before inserting the root table's address into the hardware pagetable base register. When sharing page tables, Xen erroneously skipped this stripping. Consequently, the guest is able to write to leaf page table entries. IMPACT ====== A malicious guest may be able to escalate its privileges to that of the host. VULNERABLE SYSTEMS ================== Xen version 4.15 is vulnerable. Xen versions 4.14 and earlier are not vulnerable. Only x86 Intel systems with IOMMU(s) in use are affected. Arm systems, non-Intel x86 systems, and x86 systems without IOMMU are not affected. Only HVM guests with passed-through PCI devices and configured to share IOMMU and EPT page tables are able to leverage the vulnerability on affected hardware. Note that page table sharing is the default configuration on capable hardware. Systems are only affected if the IOMMU used for a passed through device requires the use of page tables less than 4 levels deep. We are informed that this is the case for some at least Ivybridge and earlier "client" chips; additionally it might be possible for such a situation to arise when Xen is running nested under another hypervisor, if an (emulated) Intel IOMMU is made available to Xen. MITIGATION ========== Suppressing the use of shared page tables avoids the vulnerability. This can be achieved globally by passing "iommu=no-sharept" on the hypervisor command line. This can also be achieved on a per-guest basis via the "passthrough=sync_pt" xl guest configuration file option. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa390.patch xen-unstable - Xen 4.15.x $ sha256sum xsa390* 34d3b59a52c79bd7f9d963ca44ee5cfee08274d49961726e81c34eeff6e6cd37 xsa390.patch $ CREDITS ======= This issue was discovered by Jan Beulich of SUSE. NOTE REGARDING LACK OF EMBARGO ============================== This fix for issue was submitted in public before realizing the security aspect. -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmGXsGUMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZiMkH/2t+q/yAO7srnKdt1yLhOcG/tok0pdSLe5b3ayES ZktW69wnSlQ/TeH96A64pZKxXbQpRh3cDbjn2xedCDGIOyaKuObgPY7aYfuvtOxN /6a3P3qUf2oxm5/nS0KG6kHX69gptXupvgCPwl2i1KWARi4uMEm76N7lCe3o8fFd s8HNfLvJ0tX6pXtOQjeQEt73fDWQ/hwKGGJctFI1hrvy01erqHDdZrYiJAO6vp8z c9LU1o8dIQSUg2dm5GSX5DCX6xEzOh6sT53CDQ7W5gTn+SnCGr7FT1iTeXYeTFSN EaYZVynkaxQeCXsoJO0K2o7lwwKvUrQ6GNhqdd4iOR/annY= =P/qb -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa390.patch" Content-Disposition: attachment; filename="xsa390.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBWVC1kOiBmaXggcmVkdWNlZCBwYWdlIHRhYmxlIGxldmVscyBzdXBwb3J0 IHdoZW4gc2hhcmluZyB0YWJsZXMKCmRvbWFpbl9wZ2RfbWFkZHIoKSBjb250 YWlucyBsb2dpYyB0byBhZGp1c3QgdGhlIHJvb3QgYWRkcmVzcyB0byBiZSBw dXQKaW4gdGhlIGNvbnRleHQgZW50cnkgaW4gY2FzZSA0LWxldmVsIHBhZ2Ug dGFibGVzIGFyZW4ndCBzdXBwb3J0ZWQgYnkgYW4KSU9NTVUuIFRoaXMgbG9n aWMgbWF5IG5vdCBiZSBieXBhc3NlZCB3aGVuIHNoYXJpbmcgcGFnZSB0YWJs ZXMuCgpUaGlzIGlzIENWRS0yMDIxLTI4NzEwIC8gWFNBLTM5MC4KCkZpeGVz OiAyNWNjZDA5MzQyNWMgKCJpb21tdTogcmVtb3ZlIHRoZSBzaGFyZV9wMm0g b3BlcmF0aW9uIikKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVs aWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogS2V2aW4gVGlhbiA8a2V2aW4u dGlhbkBpbnRlbC5jb20+CgotLS0gYS94ZW4vZHJpdmVycy9wYXNzdGhyb3Vn aC92dGQvaW9tbXUuYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC92 dGQvaW9tbXUuYwpAQCAtMzQwLDE5ICszNDAsMjEgQEAgc3RhdGljIHVpbnQ2 NF90IGRvbWFpbl9wZ2RfbWFkZHIoc3RydWN0CiAgICAgewogICAgICAgICBw YWdldGFibGVfdCBwZ3QgPSBwMm1fZ2V0X3BhZ2V0YWJsZShwMm1fZ2V0X2hv c3RwMm0oZCkpOwogCi0gICAgICAgIHJldHVybiBwYWdldGFibGVfZ2V0X3Bh ZGRyKHBndCk7CisgICAgICAgIHBnZF9tYWRkciA9IHBhZ2V0YWJsZV9nZXRf cGFkZHIocGd0KTsKICAgICB9Ci0KLSAgICBpZiAoICFoZC0+YXJjaC52dGQu cGdkX21hZGRyICkKKyAgICBlbHNlCiAgICAgewotICAgICAgICAvKiBFbnN1 cmUgd2UgaGF2ZSBwYWdldGFibGVzIGFsbG9jYXRlZCBkb3duIHRvIGxlYWYg UFRFLiAqLwotICAgICAgICBhZGRyX3RvX2RtYV9wYWdlX21hZGRyKGQsIDAs IDEpOwotCiAgICAgICAgIGlmICggIWhkLT5hcmNoLnZ0ZC5wZ2RfbWFkZHIg KQotICAgICAgICAgICAgcmV0dXJuIDA7Ci0gICAgfQorICAgICAgICB7Cisg ICAgICAgICAgICAvKiBFbnN1cmUgd2UgaGF2ZSBwYWdldGFibGVzIGFsbG9j YXRlZCBkb3duIHRvIGxlYWYgUFRFLiAqLworICAgICAgICAgICAgYWRkcl90 b19kbWFfcGFnZV9tYWRkcihkLCAwLCAxKTsKIAotICAgIHBnZF9tYWRkciA9 IGhkLT5hcmNoLnZ0ZC5wZ2RfbWFkZHI7CisgICAgICAgICAgICBpZiAoICFo ZC0+YXJjaC52dGQucGdkX21hZGRyICkKKyAgICAgICAgICAgICAgICByZXR1 cm4gMDsKKyAgICAgICAgfQorCisgICAgICAgIHBnZF9tYWRkciA9IGhkLT5h cmNoLnZ0ZC5wZ2RfbWFkZHI7CisgICAgfQogCiAgICAgLyogU2tpcCB0b3Ag bGV2ZWxzIG9mIHBhZ2UgdGFibGVzIGZvciAyLSBhbmQgMy1sZXZlbCBEUkhE cy4gKi8KICAgICBmb3IgKCBhZ2F3ID0gbGV2ZWxfdG9fYWdhdyg0KTsK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Nov 23 12:13:15 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 23 Nov 2021 12:13:15 +0000 Received: from list by lists.xenproject.org with outflank-mailman.229248.396779 (Exim 4.92) (envelope-from ) id 1mpUez-0001Ou-SX; Tue, 23 Nov 2021 12:12:29 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 229248.396779; Tue, 23 Nov 2021 12:12:29 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUez-0001MH-AD; Tue, 23 Nov 2021 12:12:29 +0000 Received: by outflank-mailman (input) for mailman id 229248; Tue, 23 Nov 2021 12:12:27 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUex-0008MT-Ne for xen-users@lists.xen.org; Tue, 23 Nov 2021 12:12:27 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 87884040-4c56-11ec-a9d2-d9f7a1cc8784; Tue, 23 Nov 2021 13:12:22 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUe8-0002WR-Qw; Tue, 23 Nov 2021 12:11:36 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.92) (envelope-from ) id 1mpUe8-0004X3-Q0; Tue, 23 Nov 2021 12:11:36 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 87884040-4c56-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xen.org; s=20200302mail; h=Date:Message-Id:Subject:CC:From:To:MIME-Version: Content-Transfer-Encoding:Content-Type; bh=q2HCCmRA4eyGBtlwL+LNVG30xiN/OakaIW2lLeVdN2E=; b=JTuizbbtWZk8XJEe1kYE1c8utZ fJ4p3XTcPB1Do3cF5H0FHnjqMwN5GlIu9Ld/CseW4EZh5XaNpAYVQD89tGRgCWTdTENS41PskXuco zazicsphTovKT/1CxD3niTkJhPjVoJ/gRebdKdEZiOPBMT8Nxf0gJgtKLxq0XVONuPFI=; Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 387 v2 (CVE-2021-28703) - grant table v2 status pages may remain accessible after de-allocation (take two) Message-Id: Date: Tue, 23 Nov 2021 12:11:36 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2021-28703 / XSA-387 version 2 grant table v2 status pages may remain accessible after de-allocation (take two) UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched (back) from v2 to v1. The freeing of such pages requires that the hypervisor know where in the guest these pages were mapped. The hypervisor tracks only one use within guest space, but racing requests from the guest to insert mappings of these pages may result in any of them to become mapped in multiple locations. Upon switching back from v2 to v1, the guest would then retain access to a page that was freed and perhaps re-used for other purposes. This bug was fortuitously fixed by code cleanup in Xen 4.14, and backported to security-supported Xen branches as a prerequisite of the fix for XSA-378. IMPACT ====== A malicious guest may be able to elevate its privileges to that of the host, cause host or guest Denial of Service (DoS), or cause information leaks. VULNERABLE SYSTEMS ================== All Xen branches up to and including 4.13 are vulnerable, but only if the patches for XSA-378 have not been applied. Xen versions 4.13.4, 4.14.x and 4.15.x are not affected. Only x86 HMV and PVH guests permitted to use grant table version 2 interfaces can leverage this vulnerability. x86 PV guests cannot leverage this vulnerability. On Arm, grant table v2 use is explicitly unsupported. MITIGATION ========== Running only PV guests will avoid this vulnerability. Suppressing use of grant table v2 interfaces for HVM or PVH guests will also avoid this vulnerability. CREDITS ======= This issue was discovered by Patryk Balicki and Julien Grall of Amazon. RESOLUTION ========== Applying the following patch resolves the issue: x86/p2m: don't assert that the passed in MFN matches for a remove This patch was supplied with XSA-378, as one of 378's prerequisites. The fix has already been applied to Xen stable branches as follows: c65ea16dbcafbe4fe21693b18f8c2a3c5d14600e in Xen 4.14.x, 4.15.x f50fbddbae81fcccae56d27317bd71cc0e678ba2 in Xen 4.13.4 d44643199c96ac22491ae002d3bcd1c989b95ea4 in xen.git#stable-4.12 66f400c71d12fe8adfb895984b14f2941e8cb6ce in xen.git#stable-4.11 DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmGc2jgMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZlWUIAJ4bU9n2q9A4sqhiW0xJOCI4MIdwV2ym6xziP9iN e5sg0u3gdp94M1vLf//8h7julxLXgdJd10HWWpJkfRQcsfz3E1ul1O+mAsoHxJwI /qGl1Xis7AkDFjrPXthJUKh/DNgi8F1Rok7XDbfFznk34v4g6anh4JDfqJIUwIFQ l2s6qIOc2PjvmrJMXEboT1wEUADZNtChIqOL7Ibre9Zz6/mdr0FjPfPvLAqfvf9m aLaMElJMRx5iTEUG7qCYXUn8oKLbWNTv88yceudE7QZl3/zv/UnEL8nvBZWs/Gkx UbrC6wkNFUSpF/ngexvzsSE/SrfMYYaUPfIciyuxvuosGJY= =DmKh -----END PGP SIGNATURE----- --=separator-- From xen-users-bounces@lists.xenproject.org Tue Nov 23 12:13:15 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 23 Nov 2021 12:13:15 +0000 Received: from list by lists.xenproject.org with outflank-mailman.229252.396820 (Exim 4.92) (envelope-from ) id 1mpUf4-0002Rh-4w; Tue, 23 Nov 2021 12:12:34 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 229252.396820; Tue, 23 Nov 2021 12:12:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUf3-0002Ni-Ko; Tue, 23 Nov 2021 12:12:33 +0000 Received: by outflank-mailman (input) for mailman id 229252; Tue, 23 Nov 2021 12:12:30 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUez-0008MT-Ns for xen-users@lists.xen.org; Tue, 23 Nov 2021 12:12:30 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 9a92209d-4c56-11ec-a9d2-d9f7a1cc8784; Tue, 23 Nov 2021 13:12:21 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUdl-0002Sy-C8; Tue, 23 Nov 2021 12:11:13 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.92) (envelope-from ) id 1mpUdl-0004Ug-Aw; Tue, 23 Nov 2021 12:11:13 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 9a92209d-4c56-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xen.org; s=20200302mail; h=Date:Message-Id:Subject:CC:From:To:MIME-Version: Content-Transfer-Encoding:Content-Type; bh=+XbWv5c1idsAXWtJad7tat3++/kYkbLaYNOJLiB0hIw=; b=42DXLkRR/6tow4p9o2YbQ1xF1j QmO9D4p5qRQltZDmt3TIXnkviLI1qCkRoYvPLWVdvy9kQ1j+N6pSuYk6BiStISiBhV6oJVXxN4RNq ecA4qLm5WthT+LRtZSOq9rOHlcs+LntXiFLxodjnaqkw4SEe5xCv/I3iMa2iqMB3zVog=; Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 388 v3 (CVE-2021-28704,CVE-2021-28707,CVE-2021-28708) - PoD operations on misaligned GFNs Message-Id: Date: Tue, 23 Nov 2021 12:11:13 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2021-28704,CVE-2021-28707,CVE-2021-28708 / XSA-388 version 3 PoD operations on misaligned GFNs UPDATES IN VERSION 3 ==================== Correct affected versions range. Add CVE numbers to patches. Public release. ISSUE DESCRIPTION ================= x86 HVM and PVH guests may be started in populate-on-demand (PoD) mode, to provide a way for them to later easily have more memory assigned. Guests are permitted to control certain P2M aspects of individual pages via hypercalls. These hypercalls may act on ranges of pages specified via page orders (resulting in a power-of-2 number of pages). The implementation of some of these hypercalls for PoD does not enforce the base page frame number to be suitably aligned for the specified order, yet some code involved in PoD handling actually makes such an assumption. These operations are XENMEM_decrease_reservation (CVE-2021-28704) and XENMEM_populate_physmap (CVE-2021-28707), the latter usable only by domains controlling the guest, i.e. a de-privileged qemu or a stub domain. (Patch 1, combining the fix to both these two issues.) In addition handling of XENMEM_decrease_reservation can also trigger a host crash when the specified page order is neither 4k nor 2M nor 1G (CVE-2021-28708, patch 2). IMPACT ====== Malicious or buggy guest kernels may be able to mount a Denial of Service (DoS) attack affecting the entire system. Privilege escalation and information leaks cannot be ruled out. VULNERABLE SYSTEMS ================== All Xen versions from 4.7 onwards are affected. Xen versions 4.6 and older are not affected. Only x86 HVM and PVH guests started in populate-on-demand mode can leverage the vulnerability. Populate-on-demand mode is activated when the guest's xl configuration file specifies a "maxmem" value which is larger than the "memory" value. MITIGATION ========== Not starting x86 HVM or PVH guests in populate-on-demand mode will avoid the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate pair if attached patches resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa388-?.patch xen-unstable xsa388-4.15-?.patch Xen 4.15.x xsa388-4.14-?.patch Xen 4.14.x - 4.12.x $ sha256sum xsa388* 43f6647e9f7d28d22eeb98680e116b301b0e29ef63ea65c9839a5aaebd449bc4 xsa388-1.patch 64b27a8c7c02036528e00a3070e27e873762d68f4ea1504e906aaf2ddc1c06be xsa388-2.patch 6917267482101a3f8f1d13905e14994344a0af81370c7a2b92275fb176b321a0 xsa388-4.14-1.patch d5886e046c69f34f98f7e1fc6ffcc36d92f8fc79242b9dc88412c39aa79b4ac3 xsa388-4.14-2.patch fbe6af409447edc2318940d7c4bc0861a236d40db037166608fc09fa57ef54b1 xsa388-4.15-1.patch c828d735aaa3f430ccef314bf27519cd6a5f4daaa79e1c493dc47e42ab09ec9f xsa388-4.15-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public- facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation described above is NOT permitted during the embargo on public-facing systems with untrusted guest users and administrators. This is because such a configuration change is recognizable by the affected guests. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmGc2jkMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZROMIALJsptV0nV8H5/nCLUWld3mKjAeb/+N20ul9NEwn rUwIGGGzyrKZQdAljno+9y9o5pM8+BC+aTBwYhmxEWsHm1kodTD+YnJYf8uNW/CW uhTJp/ZB5EsWhTFHF7YoKbPG0on4KIsy0TgoUug7bv+l2zEny9gfknsj8jdp3qCy aFv1Bb2PzRh462qVHI3f27Ee8bn7GfErouuLppmDpCva19D3bhUXQ5PhxFB+oqsI bww4VKUo0nxZftYhpbInWm34dajEIXK7jy5Z/CUPgCj2sTOHHBv7+5JJdw0umn/A lJ2Ta1u03sdC9JWbat4qjvdVgK9L9vT+jWsfcwk02qq+XSU= =uSRt -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa388-1.patch" Content-Disposition: attachment; filename="xsa388-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBkZWFsIHdpdGggbWlzYWxpZ25lZCBHRk5zCgpVc2VycyBv ZiBYRU5NRU1fZGVjcmVhc2VfcmVzZXJ2YXRpb24gYW5kIFhFTk1FTV9wb3B1 bGF0ZV9waHlzbWFwIGFyZW4ndApyZXF1aXJlZCB0byBwYXNzIGluIG9yZGVy LWFsaWduZWQgR0ZOIHZhbHVlcy4gKFdoaWxlIEkgY29uc2lkZXIgdGhpcwpi b2d1cywgSSBkb24ndCB0aGluayB3ZSBjYW4gZml4IHRoaXMgdGhlcmUsIGFz IHRoYXQgbWlnaHQgYnJlYWsgZXhpc3RpbmcKY29kZSwgZS5nIExpbnV4J2Vz IHN3aW90bGIsIHdoaWNoIC0gd2hpbGUgYWZmZWN0aW5nIFBWIG9ubHkgLSB1 bnRpbApyZWNlbnRseSBoYWQgYmVlbiBlbmZvcmNpbmcgb25seSBwYWdlIGFs aWdubWVudCBvbiB0aGUgb3JpZ2luYWwKYWxsb2NhdGlvbi4pIE9ubHkgbm9u LVBvRCBjb2RlIHBhdGhzIChndWVzdF9waHlzbWFwX3thZGQscmVtb3ZlfV9w YWdlKCksCnAybV9zZXRfZW50cnkoKSkgbG9vayB0byBiZSBkZWFsaW5nIHdp dGggdGhpcyBwcm9wZXJseSAoaW4gcGFydCBieSBiZWluZwppbXBsZW1lbnRl ZCBpbmVmZmljaWVudGx5LCBoYW5kbGluZyBldmVyeSA0ayBwYWdlIHNlcGFy YXRlbHkpLgoKSW50cm9kdWNlIHdyYXBwZXJzIHRha2luZyBjYXJlIG9mIHNw bGl0dGluZyB0aGUgaW5jb21pbmcgcmVxdWVzdCBpbnRvCmFsaWduZWQgY2h1 bmtzLCB3aXRob3V0IHB1dHRpbmcgbXVjaCBlZmZvcnQgaW4gdHJ5aW5nIHRv IGRldGVybWluZSB0aGUKbGFyZ2VzdCBwb3NzaWJsZSBjaHVuayBhdCBldmVy eSBpdGVyYXRpb24uCgpBbHNvICJoYW5kbGUiIHAybV9zZXRfZW50cnkoKSBm YWlsdXJlIGZvciBub24tb3JkZXItMCByZXF1ZXN0cyBieQpjcmFzaGluZyB0 aGUgZG9tYWluIGluIG9uZSBtb3JlIHBsYWNlLiBBbG9uZ3NpZGUgcHV0dGlu ZyBhIGxvZyBtZXNzYWdlCnRoZXJlLCBhbHNvIGFkZCBvbmUgdG8gdGhlIG90 aGVyIHNpbWlsYXIgcGF0aC4KCk5vdGUgcmVnYXJkaW5nIGxvY2tpbmc6IFRo aXMgaXMgbGVmdCBpbiB0aGUgYWN0dWFsIHdvcmtlciBmdW5jdGlvbnMgb24K dGhlIGFzc3VtcHRpb24gdGhhdCBjYWxsZXJzIGFyZW4ndCBndWFyYW50ZWVk IGF0b21pY2l0eSB3cnQgYWN0aW5nIG9uCm11bHRpcGxlIHBhZ2VzIGF0IGEg dGltZS4gRm9yIG1pcy1hbGlnbmVkIEdGTnMgZ2ZuX2xvY2soKSB3b3VsZG4n dCBoYXZlCmxvY2tlZCB0aGUgY29ycmVjdCBHRk4gcmFuZ2UgYW55d2F5LCBp ZiBpdCBkaWRuJ3Qgc2ltcGx5IHJlc29sdmUgdG8KcDJtX2xvY2soKSwgYW5k IGZvciB3ZWxsLWJlaGF2ZWQgY2FsbGVycyB0aGVyZSBjb250aW51ZXMgdG8g YmUgb25seSBhCnNpbmdsZSBpdGVyYXRpb24sIGkuZS4gYmVoYXZpb3IgaXMg dW5jaGFuZ2VkIGZvciB0aGVtLiAoRlRBT0QgcHVsbGluZwpvdXQganVzdCBw b2RfbG9jaygpIGludG8gcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZhdGlvbigp IHdvdWxkIHJlc3VsdCBpbgphIGxvY2sgb3JkZXIgdmlvbGF0aW9uLikKClRo aXMgaXMgQ1ZFLTIwMjEtMjg3MDQgYW5kIENWRS0yMDIxLTI4NzA3IC8gcGFy dCBvZiBYU0EtMzg4LgoKRml4ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6 IHNob3J0ZW4gY2VydGFpbiBvcGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciBy YW5nZXMiKQpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dl ci5wYXVAY2l0cml4LmNvbT4KLS0tClRoZSBzZWN1cml0eSBhc3BlY3QgaGVy ZSBzdGVtcyBmcm9tIHRoZSB2YXJpb3VzIEJVR19PTigpcyB3ZSBoYXZlCmNo ZWNraW5nCi0gcDJtLT5wb2QuZW50cnlfY291bnQsCi0gdGhlIGFsaWdubWVu dCBvZiB0aGUgTUZOIHAybV9wb2RfY2FjaGVfZ2V0KCkgcmV0dXJucy4KLS0t CnYzOiBSZS1kbyB1c2luZyB3cmFwcGVycy4KdjI6IFByZWZpeCBkb21haW5f Y3Jhc2goKSBieSBwcmludGsoWEVOTE9HX0dfRVJSIC4uLikgKGluY2x1ZGlu ZyB0aGUKICAgIHByZS1leGlzdGluZyBzaW1pbGFyIG9uZSkuCgotLS0gYS94 ZW4vYXJjaC94ODYvbW0vcDJtLXBvZC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9t bS9wMm0tcG9kLmMKQEAgLTUwNCw3ICs1MDQsNyBAQCBzdGF0aWMgdm9pZCBw b2RfdW5sb2NrX2FuZF9mbHVzaChzdHJ1Y3QKIH0KIAogLyoKLSAqIFRoaXMg ZnVuY3Rpb24gaXMgbmVlZGVkIGZvciB0d28gcmVhc29uczoKKyAqIFRoaXMg cGFpciBvZiBmdW5jdGlvbnMgaXMgbmVlZGVkIGZvciB0d28gcmVhc29uczoK ICAqICsgVG8gcHJvcGVybHkgaGFuZGxlIGNsZWFyaW5nIG9mIFBvRCBlbnRy aWVzCiAgKiArIFRvICJzdGVhbCBiYWNrIiBtZW1vcnkgYmVpbmcgZnJlZWQg Zm9yIHRoZSBQb0QgY2FjaGUsIHJhdGhlciB0aGFuCiAgKiAgIHJlbGVhc2lu ZyBpdC4KQEAgLTUxMiw4ICs1MTIsOCBAQCBzdGF0aWMgdm9pZCBwb2RfdW5s b2NrX2FuZF9mbHVzaChzdHJ1Y3QKICAqIE9uY2UgYm90aCBvZiB0aGVzZSBm dW5jdGlvbnMgaGF2ZSBiZWVuIGNvbXBsZXRlZCwgd2UgY2FuIHJldHVybiBh bmQKICAqIGFsbG93IGRlY3JlYXNlX3Jlc2VydmF0aW9uKCkgdG8gaGFuZGxl IGV2ZXJ5dGhpbmcgZWxzZS4KICAqLwotdW5zaWduZWQgbG9uZwotcDJtX3Bv ZF9kZWNyZWFzZV9yZXNlcnZhdGlvbihzdHJ1Y3QgZG9tYWluICpkLCBnZm5f dCBnZm4sIHVuc2lnbmVkIGludCBvcmRlcikKK3N0YXRpYyB1bnNpZ25lZCBs b25nCitkZWNyZWFzZV9yZXNlcnZhdGlvbihzdHJ1Y3QgZG9tYWluICpkLCBn Zm5fdCBnZm4sIHVuc2lnbmVkIGludCBvcmRlcikKIHsKICAgICB1bnNpZ25l ZCBsb25nIHJldCA9IDAsIGksIG47CiAgICAgc3RydWN0IHAybV9kb21haW4g KnAybSA9IHAybV9nZXRfaG9zdHAybShkKTsKQEAgLTU2MSw4ICs1NjEsMTAg QEAgcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZhdGlvbihzdHJ1Y3QgZG9tYQog ICAgICAgICAgKiBBbGwgUG9EOiBNYXJrIHRoZSB3aG9sZSByZWdpb24gaW52 YWxpZCBhbmQgdGVsbCBjYWxsZXIKICAgICAgICAgICogd2UncmUgZG9uZS4K ICAgICAgICAgICovCi0gICAgICAgIGlmICggcDJtX3NldF9lbnRyeShwMm0s IGdmbiwgSU5WQUxJRF9NRk4sIG9yZGVyLCBwMm1faW52YWxpZCwKLSAgICAg ICAgICAgICAgICAgICAgICAgICAgIHAybS0+ZGVmYXVsdF9hY2Nlc3MpICkK KyAgICAgICAgaW50IHJjID0gcDJtX3NldF9lbnRyeShwMm0sIGdmbiwgSU5W QUxJRF9NRk4sIG9yZGVyLCBwMm1faW52YWxpZCwKKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBwMm0tPmRlZmF1bHRfYWNjZXNzKTsKKworICAg ICAgICBpZiAoIHJjICkKICAgICAgICAgewogICAgICAgICAgICAgLyoKICAg ICAgICAgICAgICAqIElmIHRoaXMgZmFpbHMsIHdlIGNhbid0IHRlbGwgaG93 IG11Y2ggb2YgdGhlIHJhbmdlIHdhcyBjaGFuZ2VkLgpAQCAtNTcwLDcgKzU3 MiwxMiBAQCBwMm1fcG9kX2RlY3JlYXNlX3Jlc2VydmF0aW9uKHN0cnVjdCBk b21hCiAgICAgICAgICAgICAgKiBpbXBvc3NpYmxlLgogICAgICAgICAgICAg ICovCiAgICAgICAgICAgICBpZiAoIG9yZGVyICE9IDAgKQorICAgICAgICAg ICAgeworICAgICAgICAgICAgICAgIHByaW50ayhYRU5MT0dfR19FUlIKKyAg ICAgICAgICAgICAgICAgICAgICAgIiVwZDogbWFya2luZyBHRk4gJSNseCAo b3JkZXIgJXUpIGFzIG5vbi1Qb0QgZmFpbGVkOiAlZFxuIiwKKyAgICAgICAg ICAgICAgICAgICAgICAgZCwgZ2ZuX3goZ2ZuKSwgb3JkZXIsIHJjKTsKICAg ICAgICAgICAgICAgICBkb21haW5fY3Jhc2goZCk7CisgICAgICAgICAgICB9 CiAgICAgICAgICAgICBnb3RvIG91dF91bmxvY2s7CiAgICAgICAgIH0KICAg ICAgICAgcmV0ID0gMVVMIDw8IG9yZGVyOwpAQCAtNjc5LDYgKzY4NiwyMiBA QCBvdXRfdW5sb2NrOgogICAgIHJldHVybiByZXQ7CiB9CiAKK3Vuc2lnbmVk IGxvbmcKK3AybV9wb2RfZGVjcmVhc2VfcmVzZXJ2YXRpb24oc3RydWN0IGRv bWFpbiAqZCwgZ2ZuX3QgZ2ZuLCB1bnNpZ25lZCBpbnQgb3JkZXIpCit7Cisg ICAgdW5zaWduZWQgbG9uZyBsZWZ0ID0gMVVMIDw8IG9yZGVyLCByZXQgPSAw OworICAgIHVuc2lnbmVkIGludCBjaHVua19vcmRlciA9IGZpbmRfZmlyc3Rf c2V0X2JpdChnZm5feChnZm4pIHwgbGVmdCk7CisKKyAgICBkbyB7CisgICAg ICAgIHJldCArPSBkZWNyZWFzZV9yZXNlcnZhdGlvbihkLCBnZm4sIGNodW5r X29yZGVyKTsKKworICAgICAgICBsZWZ0IC09IDFVTCA8PCBjaHVua19vcmRl cjsKKyAgICAgICAgZ2ZuID0gZ2ZuX2FkZChnZm4sIDFVTCA8PCBjaHVua19v cmRlcik7CisgICAgfSB3aGlsZSAoIGxlZnQgKTsKKworICAgIHJldHVybiBy ZXQ7Cit9CisKIHZvaWQgcDJtX3BvZF9kdW1wX2RhdGEoc3RydWN0IGRvbWFp biAqZCkKIHsKICAgICBzdHJ1Y3QgcDJtX2RvbWFpbiAqcDJtID0gcDJtX2dl dF9ob3N0cDJtKGQpOwpAQCAtMTI4OSwxOSArMTMxMiwxNSBAQCByZW1hcF9h bmRfcmV0cnk6CiAgICAgcmV0dXJuIHRydWU7CiB9CiAKLQotaW50Ci1ndWVz dF9waHlzbWFwX21hcmtfcG9wdWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21h aW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuX2wsCi0gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHVuc2lnbmVkIGludCBvcmRlcikKK3N0 YXRpYyBpbnQKK21hcmtfcG9wdWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21h aW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuX2wsCisgICAgICAgICAgICAgICAg ICAgICAgICB1bnNpZ25lZCBpbnQgb3JkZXIpCiB7CiAgICAgc3RydWN0IHAy bV9kb21haW4gKnAybSA9IHAybV9nZXRfaG9zdHAybShkKTsKICAgICBnZm5f dCBnZm4gPSBfZ2ZuKGdmbl9sKTsKICAgICB1bnNpZ25lZCBsb25nIGksIG4s IHBvZF9jb3VudCA9IDA7CiAgICAgaW50IHJjID0gMDsKIAotICAgIGlmICgg IXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShkKSApCi0gICAgICAgIHJldHVybiAt RUlOVkFMOwotCiAgICAgZ2ZuX2xvY2socDJtLCBnZm4sIG9yZGVyKTsKIAog ICAgIFAyTV9ERUJVRygibWFyayBwb2QgZ2ZuPSUjbHhcbiIsIGdmbl9sKTsK QEAgLTEzNDEsMTIgKzEzNjAsNDQgQEAgZ3Vlc3RfcGh5c21hcF9tYXJrX3Bv cHVsYXRlX29uX2RlbWFuZChzdAogCiAgICAgICAgIGlvcmVxX3JlcXVlc3Rf bWFwY2FjaGVfaW52YWxpZGF0ZShkKTsKICAgICB9CisgICAgZWxzZSBpZiAo IG9yZGVyICkKKyAgICB7CisgICAgICAgIC8qCisgICAgICAgICAqIElmIHRo aXMgZmFpbGVkLCB3ZSBjYW4ndCB0ZWxsIGhvdyBtdWNoIG9mIHRoZSByYW5n ZSB3YXMgY2hhbmdlZC4KKyAgICAgICAgICogQmVzdCB0byBjcmFzaCB0aGUg ZG9tYWluLgorICAgICAgICAgKi8KKyAgICAgICAgcHJpbnRrKFhFTkxPR19H X0VSUgorICAgICAgICAgICAgICAgIiVwZDogbWFya2luZyBHRk4gJSNseCAo b3JkZXIgJXUpIGFzIFBvRCBmYWlsZWQ6ICVkXG4iLAorICAgICAgICAgICAg ICAgZCwgZ2ZuX2wsIG9yZGVyLCByYyk7CisgICAgICAgIGRvbWFpbl9jcmFz aChkKTsKKyAgICB9CiAKIG91dDoKICAgICBnZm5fdW5sb2NrKHAybSwgZ2Zu LCBvcmRlcik7CiAKICAgICByZXR1cm4gcmM7CiB9CisKK2ludAorZ3Vlc3Rf cGh5c21hcF9tYXJrX3BvcHVsYXRlX29uX2RlbWFuZChzdHJ1Y3QgZG9tYWlu ICpkLCB1bnNpZ25lZCBsb25nIGdmbiwKKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgdW5zaWduZWQgaW50IG9yZGVyKQoreworICAg IHVuc2lnbmVkIGxvbmcgbGVmdCA9IDFVTCA8PCBvcmRlcjsKKyAgICB1bnNp Z25lZCBpbnQgY2h1bmtfb3JkZXIgPSBmaW5kX2ZpcnN0X3NldF9iaXQoZ2Zu IHwgbGVmdCk7CisgICAgaW50IHJjOworCisgICAgaWYgKCAhcGFnaW5nX21v ZGVfdHJhbnNsYXRlKGQpICkKKyAgICAgICAgcmV0dXJuIC1FSU5WQUw7CisK KyAgICBkbyB7CisgICAgICAgIHJjID0gbWFya19wb3B1bGF0ZV9vbl9kZW1h bmQoZCwgZ2ZuLCBjaHVua19vcmRlcik7CisKKyAgICAgICAgbGVmdCAtPSAx VUwgPDwgY2h1bmtfb3JkZXI7CisgICAgICAgIGdmbiArPSAxVUwgPDwgY2h1 bmtfb3JkZXI7CisgICAgfSB3aGlsZSAoICFyYyAmJiBsZWZ0ICk7CisKKyAg ICByZXR1cm4gcmM7Cit9CiAKIHZvaWQgcDJtX3BvZF9pbml0KHN0cnVjdCBw Mm1fZG9tYWluICpwMm0pCiB7Cg== --=separator Content-Type: application/octet-stream; name="xsa388-2.patch" Content-Disposition: attachment; filename="xsa388-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBoYW5kbGUgaW50ZXJtZWRpYXRlIHBhZ2Ugb3JkZXJzIGlu IHAybV9wb2RfY2FjaGVfYWRkKCkKCnAybV9wb2RfZGVjcmVhc2VfcmVzZXJ2 YXRpb24oKSBtYXkgcGFzcyBwYWdlcyB0byB0aGUgZnVuY3Rpb24gd2hpY2gK YXJlbid0IDRrLCAyTSwgb3IgMUcuIEhhbmRsZSBhbGwgaW50ZXJtZWRpYXRl IG9yZGVycyBhcyB3ZWxsLCB0byBhdm9pZApoaXR0aW5nIHRoZSBCVUcoKSBh dCB0aGUgc3dpdGNoKCkgc3RhdGVtZW50J3MgImRlZmF1bHQiIGNhc2UuCgpU aGlzIGlzIENWRS0yMDIxLTI4NzA4IC8gcGFydCBvZiBYU0EtMzg4LgoKRml4 ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6IHNob3J0ZW4gY2VydGFpbiBv cGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciByYW5nZXMiKQpTaWduZWQtb2Zm LWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2Vk LWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4K Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMKKysrIGIveGVuL2Fy Y2gveDg2L21tL3AybS1wb2QuYwpAQCAtMTE0LDE1ICsxMTQsMTMgQEAgcDJt X3BvZF9jYWNoZV9hZGQoc3RydWN0IHAybV9kb21haW4gKnAybQogICAgIC8q IFRoZW4gYWRkIHRvIHRoZSBhcHByb3ByaWF0ZSBwb3B1bGF0ZS1vbi1kZW1h bmQgbGlzdC4gKi8KICAgICBzd2l0Y2ggKCBvcmRlciApCiAgICAgewotICAg IGNhc2UgUEFHRV9PUkRFUl8xRzoKLSAgICAgICAgZm9yICggaSA9IDA7IGkg PCAoMVVMIDw8IFBBR0VfT1JERVJfMUcpOyBpICs9IDFVTCA8PCBQQUdFX09S REVSXzJNICkKKyAgICBjYXNlIFBBR0VfT1JERVJfMk0gLi4uIFBBR0VfT1JE RVJfMUc6CisgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBvcmRl cik7IGkgKz0gMVVMIDw8IFBBR0VfT1JERVJfMk0gKQogICAgICAgICAgICAg cGFnZV9saXN0X2FkZF90YWlsKHBhZ2UgKyBpLCAmcDJtLT5wb2Quc3VwZXIp OwogICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfMk06Ci0g ICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Quc3Vw ZXIpOwotICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfNEs6 Ci0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Qu c2luZ2xlKTsKKyAgICBjYXNlIFBBR0VfT1JERVJfNEsgLi4uIFBBR0VfT1JE RVJfMk0gLSAxOgorICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwg b3JkZXIpOyBpICs9IDFVTCA8PCBQQUdFX09SREVSXzRLICkKKyAgICAgICAg ICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlICsgaSwgJnAybS0+cG9kLnNp bmdsZSk7CiAgICAgICAgIGJyZWFrOwogICAgIGRlZmF1bHQ6CiAgICAgICAg IEJVRygpOwo= --=separator Content-Type: application/octet-stream; name="xsa388-4.14-1.patch" Content-Disposition: attachment; filename="xsa388-4.14-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBkZWFsIHdpdGggbWlzYWxpZ25lZCBHRk5zCgpVc2VycyBv ZiBYRU5NRU1fZGVjcmVhc2VfcmVzZXJ2YXRpb24gYW5kIFhFTk1FTV9wb3B1 bGF0ZV9waHlzbWFwIGFyZW4ndApyZXF1aXJlZCB0byBwYXNzIGluIG9yZGVy LWFsaWduZWQgR0ZOIHZhbHVlcy4gKFdoaWxlIEkgY29uc2lkZXIgdGhpcwpi b2d1cywgSSBkb24ndCB0aGluayB3ZSBjYW4gZml4IHRoaXMgdGhlcmUsIGFz IHRoYXQgbWlnaHQgYnJlYWsgZXhpc3RpbmcKY29kZSwgZS5nIExpbnV4J2Vz IHN3aW90bGIsIHdoaWNoIC0gd2hpbGUgYWZmZWN0aW5nIFBWIG9ubHkgLSB1 bnRpbApyZWNlbnRseSBoYWQgYmVlbiBlbmZvcmNpbmcgb25seSBwYWdlIGFs aWdubWVudCBvbiB0aGUgb3JpZ2luYWwKYWxsb2NhdGlvbi4pIE9ubHkgbm9u LVBvRCBjb2RlIHBhdGhzIChndWVzdF9waHlzbWFwX3thZGQscmVtb3ZlfV9w YWdlKCksCnAybV9zZXRfZW50cnkoKSkgbG9vayB0byBiZSBkZWFsaW5nIHdp dGggdGhpcyBwcm9wZXJseSAoaW4gcGFydCBieSBiZWluZwppbXBsZW1lbnRl ZCBpbmVmZmljaWVudGx5LCBoYW5kbGluZyBldmVyeSA0ayBwYWdlIHNlcGFy YXRlbHkpLgoKSW50cm9kdWNlIHdyYXBwZXJzIHRha2luZyBjYXJlIG9mIHNw bGl0dGluZyB0aGUgaW5jb21pbmcgcmVxdWVzdCBpbnRvCmFsaWduZWQgY2h1 bmtzLCB3aXRob3V0IHB1dHRpbmcgbXVjaCBlZmZvcnQgaW4gdHJ5aW5nIHRv IGRldGVybWluZSB0aGUKbGFyZ2VzdCBwb3NzaWJsZSBjaHVuayBhdCBldmVy eSBpdGVyYXRpb24uCgpBbHNvICJoYW5kbGUiIHAybV9zZXRfZW50cnkoKSBm YWlsdXJlIGZvciBub24tb3JkZXItMCByZXF1ZXN0cyBieQpjcmFzaGluZyB0 aGUgZG9tYWluIGluIG9uZSBtb3JlIHBsYWNlLiBBbG9uZ3NpZGUgcHV0dGlu ZyBhIGxvZyBtZXNzYWdlCnRoZXJlLCBhbHNvIGFkZCBvbmUgdG8gdGhlIG90 aGVyIHNpbWlsYXIgcGF0aC4KCk5vdGUgcmVnYXJkaW5nIGxvY2tpbmc6IFRo aXMgaXMgbGVmdCBpbiB0aGUgYWN0dWFsIHdvcmtlciBmdW5jdGlvbnMgb24K dGhlIGFzc3VtcHRpb24gdGhhdCBjYWxsZXJzIGFyZW4ndCBndWFyYW50ZWVk IGF0b21pY2l0eSB3cnQgYWN0aW5nIG9uCm11bHRpcGxlIHBhZ2VzIGF0IGEg dGltZS4gRm9yIG1pcy1hbGlnbmVkIEdGTnMgZ2ZuX2xvY2soKSB3b3VsZG4n dCBoYXZlCmxvY2tlZCB0aGUgY29ycmVjdCBHRk4gcmFuZ2UgYW55d2F5LCBp ZiBpdCBkaWRuJ3Qgc2ltcGx5IHJlc29sdmUgdG8KcDJtX2xvY2soKSwgYW5k IGZvciB3ZWxsLWJlaGF2ZWQgY2FsbGVycyB0aGVyZSBjb250aW51ZXMgdG8g YmUgb25seSBhCnNpbmdsZSBpdGVyYXRpb24sIGkuZS4gYmVoYXZpb3IgaXMg dW5jaGFuZ2VkIGZvciB0aGVtLiAoRlRBT0QgcHVsbGluZwpvdXQganVzdCBw b2RfbG9jaygpIGludG8gcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZhdGlvbigp IHdvdWxkIHJlc3VsdCBpbgphIGxvY2sgb3JkZXIgdmlvbGF0aW9uLikKClRo aXMgaXMgQ1ZFLTIwMjEtMjg3MDQgYW5kIENWRS0yMDIxLTI4NzA3IC8gcGFy dCBvZiBYU0EtMzg4LgoKRml4ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6 IHNob3J0ZW4gY2VydGFpbiBvcGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciBy YW5nZXMiKQpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dl ci5wYXVAY2l0cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0t cG9kLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3AybS1wb2QuYwpAQCAtNDk1 LDcgKzQ5NSw3IEBAIHAybV9wb2RfemVyb19jaGVja19zdXBlcnBhZ2Uoc3Ry dWN0IHAybV8KIAogCiAvKgotICogVGhpcyBmdW5jdGlvbiBpcyBuZWVkZWQg Zm9yIHR3byByZWFzb25zOgorICogVGhpcyBwYWlyIG9mIGZ1bmN0aW9ucyBp cyBuZWVkZWQgZm9yIHR3byByZWFzb25zOgogICogKyBUbyBwcm9wZXJseSBo YW5kbGUgY2xlYXJpbmcgb2YgUG9EIGVudHJpZXMKICAqICsgVG8gInN0ZWFs IGJhY2siIG1lbW9yeSBiZWluZyBmcmVlZCBmb3IgdGhlIFBvRCBjYWNoZSwg cmF0aGVyIHRoYW4KICAqICAgcmVsZWFzaW5nIGl0LgpAQCAtNTAzLDggKzUw Myw4IEBAIHAybV9wb2RfemVyb19jaGVja19zdXBlcnBhZ2Uoc3RydWN0IHAy bV8KICAqIE9uY2UgYm90aCBvZiB0aGVzZSBmdW5jdGlvbnMgaGF2ZSBiZWVu IGNvbXBsZXRlZCwgd2UgY2FuIHJldHVybiBhbmQKICAqIGFsbG93IGRlY3Jl YXNlX3Jlc2VydmF0aW9uKCkgdG8gaGFuZGxlIGV2ZXJ5dGhpbmcgZWxzZS4K ICAqLwotdW5zaWduZWQgbG9uZwotcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZh dGlvbihzdHJ1Y3QgZG9tYWluICpkLCBnZm5fdCBnZm4sIHVuc2lnbmVkIGlu dCBvcmRlcikKK3N0YXRpYyB1bnNpZ25lZCBsb25nCitkZWNyZWFzZV9yZXNl cnZhdGlvbihzdHJ1Y3QgZG9tYWluICpkLCBnZm5fdCBnZm4sIHVuc2lnbmVk IGludCBvcmRlcikKIHsKICAgICB1bnNpZ25lZCBsb25nIHJldCA9IDAsIGks IG47CiAgICAgc3RydWN0IHAybV9kb21haW4gKnAybSA9IHAybV9nZXRfaG9z dHAybShkKTsKQEAgLTU1MSw4ICs1NTEsMTAgQEAgcDJtX3BvZF9kZWNyZWFz ZV9yZXNlcnZhdGlvbihzdHJ1Y3QgZG9tYQogICAgICAgICAgKiBBbGwgUG9E OiBNYXJrIHRoZSB3aG9sZSByZWdpb24gaW52YWxpZCBhbmQgdGVsbCBjYWxs ZXIKICAgICAgICAgICogd2UncmUgZG9uZS4KICAgICAgICAgICovCi0gICAg ICAgIGlmICggcDJtX3NldF9lbnRyeShwMm0sIGdmbiwgSU5WQUxJRF9NRk4s IG9yZGVyLCBwMm1faW52YWxpZCwKLSAgICAgICAgICAgICAgICAgICAgICAg ICAgIHAybS0+ZGVmYXVsdF9hY2Nlc3MpICkKKyAgICAgICAgaW50IHJjID0g cDJtX3NldF9lbnRyeShwMm0sIGdmbiwgSU5WQUxJRF9NRk4sIG9yZGVyLCBw Mm1faW52YWxpZCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBw Mm0tPmRlZmF1bHRfYWNjZXNzKTsKKworICAgICAgICBpZiAoIHJjICkKICAg ICAgICAgewogICAgICAgICAgICAgLyoKICAgICAgICAgICAgICAqIElmIHRo aXMgZmFpbHMsIHdlIGNhbid0IHRlbGwgaG93IG11Y2ggb2YgdGhlIHJhbmdl IHdhcyBjaGFuZ2VkLgpAQCAtNTYwLDcgKzU2MiwxMiBAQCBwMm1fcG9kX2Rl Y3JlYXNlX3Jlc2VydmF0aW9uKHN0cnVjdCBkb21hCiAgICAgICAgICAgICAg KiBpbXBvc3NpYmxlLgogICAgICAgICAgICAgICovCiAgICAgICAgICAgICBp ZiAoIG9yZGVyICE9IDAgKQorICAgICAgICAgICAgeworICAgICAgICAgICAg ICAgIHByaW50ayhYRU5MT0dfR19FUlIKKyAgICAgICAgICAgICAgICAgICAg ICAgIiVwZDogbWFya2luZyBHRk4gJSNseCAob3JkZXIgJXUpIGFzIG5vbi1Q b0QgZmFpbGVkOiAlZFxuIiwKKyAgICAgICAgICAgICAgICAgICAgICAgZCwg Z2ZuX3goZ2ZuKSwgb3JkZXIsIHJjKTsKICAgICAgICAgICAgICAgICBkb21h aW5fY3Jhc2goZCk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBnb3Rv IG91dF91bmxvY2s7CiAgICAgICAgIH0KICAgICAgICAgcmV0ID0gMVVMIDw8 IG9yZGVyOwpAQCAtNjY3LDYgKzY3NCwyMiBAQCBvdXRfdW5sb2NrOgogICAg IHJldHVybiByZXQ7CiB9CiAKK3Vuc2lnbmVkIGxvbmcKK3AybV9wb2RfZGVj cmVhc2VfcmVzZXJ2YXRpb24oc3RydWN0IGRvbWFpbiAqZCwgZ2ZuX3QgZ2Zu LCB1bnNpZ25lZCBpbnQgb3JkZXIpCit7CisgICAgdW5zaWduZWQgbG9uZyBs ZWZ0ID0gMVVMIDw8IG9yZGVyLCByZXQgPSAwOworICAgIHVuc2lnbmVkIGlu dCBjaHVua19vcmRlciA9IGZpbmRfZmlyc3Rfc2V0X2JpdChnZm5feChnZm4p IHwgbGVmdCk7CisKKyAgICBkbyB7CisgICAgICAgIHJldCArPSBkZWNyZWFz ZV9yZXNlcnZhdGlvbihkLCBnZm4sIGNodW5rX29yZGVyKTsKKworICAgICAg ICBsZWZ0IC09IDFVTCA8PCBjaHVua19vcmRlcjsKKyAgICAgICAgZ2ZuID0g Z2ZuX2FkZChnZm4sIDFVTCA8PCBjaHVua19vcmRlcik7CisgICAgfSB3aGls ZSAoIGxlZnQgKTsKKworICAgIHJldHVybiByZXQ7Cit9CisKIHZvaWQgcDJt X3BvZF9kdW1wX2RhdGEoc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICBzdHJ1 Y3QgcDJtX2RvbWFpbiAqcDJtID0gcDJtX2dldF9ob3N0cDJtKGQpOwpAQCAt MTI2NiwxOSArMTI4OSwxNSBAQCByZW1hcF9hbmRfcmV0cnk6CiAgICAgcmV0 dXJuIHRydWU7CiB9CiAKLQotaW50Ci1ndWVzdF9waHlzbWFwX21hcmtfcG9w dWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGxv bmcgZ2ZuX2wsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHVuc2lnbmVkIGludCBvcmRlcikKK3N0YXRpYyBpbnQKK21hcmtfcG9w dWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGxv bmcgZ2ZuX2wsCisgICAgICAgICAgICAgICAgICAgICAgICB1bnNpZ25lZCBp bnQgb3JkZXIpCiB7CiAgICAgc3RydWN0IHAybV9kb21haW4gKnAybSA9IHAy bV9nZXRfaG9zdHAybShkKTsKICAgICBnZm5fdCBnZm4gPSBfZ2ZuKGdmbl9s KTsKICAgICB1bnNpZ25lZCBsb25nIGksIG4sIHBvZF9jb3VudCA9IDA7CiAg ICAgaW50IHJjID0gMDsKIAotICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5z bGF0ZShkKSApCi0gICAgICAgIHJldHVybiAtRUlOVkFMOwotCiAgICAgZ2Zu X2xvY2socDJtLCBnZm4sIG9yZGVyKTsKIAogICAgIFAyTV9ERUJVRygibWFy ayBwb2QgZ2ZuPSUjbHhcbiIsIGdmbl9sKTsKQEAgLTEzMTYsMTIgKzEzMzUs NDQgQEAgZ3Vlc3RfcGh5c21hcF9tYXJrX3BvcHVsYXRlX29uX2RlbWFuZChz dAogICAgICAgICBCVUdfT04ocDJtLT5wb2QuZW50cnlfY291bnQgPCAwKTsK ICAgICAgICAgcG9kX3VubG9jayhwMm0pOwogICAgIH0KKyAgICBlbHNlIGlm ICggb3JkZXIgKQorICAgIHsKKyAgICAgICAgLyoKKyAgICAgICAgICogSWYg dGhpcyBmYWlsZWQsIHdlIGNhbid0IHRlbGwgaG93IG11Y2ggb2YgdGhlIHJh bmdlIHdhcyBjaGFuZ2VkLgorICAgICAgICAgKiBCZXN0IHRvIGNyYXNoIHRo ZSBkb21haW4uCisgICAgICAgICAqLworICAgICAgICBwcmludGsoWEVOTE9H X0dfRVJSCisgICAgICAgICAgICAgICAiJXBkOiBtYXJraW5nIEdGTiAlI2x4 IChvcmRlciAldSkgYXMgUG9EIGZhaWxlZDogJWRcbiIsCisgICAgICAgICAg ICAgICBkLCBnZm5fbCwgb3JkZXIsIHJjKTsKKyAgICAgICAgZG9tYWluX2Ny YXNoKGQpOworICAgIH0KIAogb3V0OgogICAgIGdmbl91bmxvY2socDJtLCBn Zm4sIG9yZGVyKTsKIAogICAgIHJldHVybiByYzsKIH0KKworaW50CitndWVz dF9waHlzbWFwX21hcmtfcG9wdWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21h aW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuLAorICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB1bnNpZ25lZCBpbnQgb3JkZXIpCit7Cisg ICAgdW5zaWduZWQgbG9uZyBsZWZ0ID0gMVVMIDw8IG9yZGVyOworICAgIHVu c2lnbmVkIGludCBjaHVua19vcmRlciA9IGZpbmRfZmlyc3Rfc2V0X2JpdChn Zm4gfCBsZWZ0KTsKKyAgICBpbnQgcmM7CisKKyAgICBpZiAoICFwYWdpbmdf bW9kZV90cmFuc2xhdGUoZCkgKQorICAgICAgICByZXR1cm4gLUVJTlZBTDsK KworICAgIGRvIHsKKyAgICAgICAgcmMgPSBtYXJrX3BvcHVsYXRlX29uX2Rl bWFuZChkLCBnZm4sIGNodW5rX29yZGVyKTsKKworICAgICAgICBsZWZ0IC09 IDFVTCA8PCBjaHVua19vcmRlcjsKKyAgICAgICAgZ2ZuICs9IDFVTCA8PCBj aHVua19vcmRlcjsKKyAgICB9IHdoaWxlICggIXJjICYmIGxlZnQgKTsKKwor ICAgIHJldHVybiByYzsKK30KIAogdm9pZCBwMm1fcG9kX2luaXQoc3RydWN0 IHAybV9kb21haW4gKnAybSkKIHsK --=separator Content-Type: application/octet-stream; name="xsa388-4.14-2.patch" Content-Disposition: attachment; filename="xsa388-4.14-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBoYW5kbGUgaW50ZXJtZWRpYXRlIHBhZ2Ugb3JkZXJzIGlu IHAybV9wb2RfY2FjaGVfYWRkKCkKCnAybV9wb2RfZGVjcmVhc2VfcmVzZXJ2 YXRpb24oKSBtYXkgcGFzcyBwYWdlcyB0byB0aGUgZnVuY3Rpb24gd2hpY2gK YXJlbid0IDRrLCAyTSwgb3IgMUcuIEhhbmRsZSBhbGwgaW50ZXJtZWRpYXRl IG9yZGVycyBhcyB3ZWxsLCB0byBhdm9pZApoaXR0aW5nIHRoZSBCVUcoKSBh dCB0aGUgc3dpdGNoKCkgc3RhdGVtZW50J3MgImRlZmF1bHQiIGNhc2UuCgpU aGlzIGlzIENWRS0yMDIxLTI4NzA4IC8gcGFydCBvZiBYU0EtMzg4LgoKRml4 ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6IHNob3J0ZW4gY2VydGFpbiBv cGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciByYW5nZXMiKQpTaWduZWQtb2Zm LWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2Vk LWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4K Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMKKysrIGIveGVuL2Fy Y2gveDg2L21tL3AybS1wb2QuYwpAQCAtMTExLDE1ICsxMTEsMTMgQEAgcDJt X3BvZF9jYWNoZV9hZGQoc3RydWN0IHAybV9kb21haW4gKnAybQogICAgIC8q IFRoZW4gYWRkIHRvIHRoZSBhcHByb3ByaWF0ZSBwb3B1bGF0ZS1vbi1kZW1h bmQgbGlzdC4gKi8KICAgICBzd2l0Y2ggKCBvcmRlciApCiAgICAgewotICAg IGNhc2UgUEFHRV9PUkRFUl8xRzoKLSAgICAgICAgZm9yICggaSA9IDA7IGkg PCAoMVVMIDw8IFBBR0VfT1JERVJfMUcpOyBpICs9IDFVTCA8PCBQQUdFX09S REVSXzJNICkKKyAgICBjYXNlIFBBR0VfT1JERVJfMk0gLi4uIFBBR0VfT1JE RVJfMUc6CisgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBvcmRl cik7IGkgKz0gMVVMIDw8IFBBR0VfT1JERVJfMk0gKQogICAgICAgICAgICAg cGFnZV9saXN0X2FkZF90YWlsKHBhZ2UgKyBpLCAmcDJtLT5wb2Quc3VwZXIp OwogICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfMk06Ci0g ICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Quc3Vw ZXIpOwotICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfNEs6 Ci0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Qu c2luZ2xlKTsKKyAgICBjYXNlIFBBR0VfT1JERVJfNEsgLi4uIFBBR0VfT1JE RVJfMk0gLSAxOgorICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwg b3JkZXIpOyBpICs9IDFVTCA8PCBQQUdFX09SREVSXzRLICkKKyAgICAgICAg ICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlICsgaSwgJnAybS0+cG9kLnNp bmdsZSk7CiAgICAgICAgIGJyZWFrOwogICAgIGRlZmF1bHQ6CiAgICAgICAg IEJVRygpOwo= --=separator Content-Type: application/octet-stream; name="xsa388-4.15-1.patch" Content-Disposition: attachment; filename="xsa388-4.15-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBkZWFsIHdpdGggbWlzYWxpZ25lZCBHRk5zCgpVc2VycyBv ZiBYRU5NRU1fZGVjcmVhc2VfcmVzZXJ2YXRpb24gYW5kIFhFTk1FTV9wb3B1 bGF0ZV9waHlzbWFwIGFyZW4ndApyZXF1aXJlZCB0byBwYXNzIGluIG9yZGVy LWFsaWduZWQgR0ZOIHZhbHVlcy4gKFdoaWxlIEkgY29uc2lkZXIgdGhpcwpi b2d1cywgSSBkb24ndCB0aGluayB3ZSBjYW4gZml4IHRoaXMgdGhlcmUsIGFz IHRoYXQgbWlnaHQgYnJlYWsgZXhpc3RpbmcKY29kZSwgZS5nIExpbnV4J2Vz IHN3aW90bGIsIHdoaWNoIC0gd2hpbGUgYWZmZWN0aW5nIFBWIG9ubHkgLSB1 bnRpbApyZWNlbnRseSBoYWQgYmVlbiBlbmZvcmNpbmcgb25seSBwYWdlIGFs aWdubWVudCBvbiB0aGUgb3JpZ2luYWwKYWxsb2NhdGlvbi4pIE9ubHkgbm9u LVBvRCBjb2RlIHBhdGhzIChndWVzdF9waHlzbWFwX3thZGQscmVtb3ZlfV9w YWdlKCksCnAybV9zZXRfZW50cnkoKSkgbG9vayB0byBiZSBkZWFsaW5nIHdp dGggdGhpcyBwcm9wZXJseSAoaW4gcGFydCBieSBiZWluZwppbXBsZW1lbnRl ZCBpbmVmZmljaWVudGx5LCBoYW5kbGluZyBldmVyeSA0ayBwYWdlIHNlcGFy YXRlbHkpLgoKSW50cm9kdWNlIHdyYXBwZXJzIHRha2luZyBjYXJlIG9mIHNw bGl0dGluZyB0aGUgaW5jb21pbmcgcmVxdWVzdCBpbnRvCmFsaWduZWQgY2h1 bmtzLCB3aXRob3V0IHB1dHRpbmcgbXVjaCBlZmZvcnQgaW4gdHJ5aW5nIHRv IGRldGVybWluZSB0aGUKbGFyZ2VzdCBwb3NzaWJsZSBjaHVuayBhdCBldmVy eSBpdGVyYXRpb24uCgpBbHNvICJoYW5kbGUiIHAybV9zZXRfZW50cnkoKSBm YWlsdXJlIGZvciBub24tb3JkZXItMCByZXF1ZXN0cyBieQpjcmFzaGluZyB0 aGUgZG9tYWluIGluIG9uZSBtb3JlIHBsYWNlLiBBbG9uZ3NpZGUgcHV0dGlu ZyBhIGxvZyBtZXNzYWdlCnRoZXJlLCBhbHNvIGFkZCBvbmUgdG8gdGhlIG90 aGVyIHNpbWlsYXIgcGF0aC4KCk5vdGUgcmVnYXJkaW5nIGxvY2tpbmc6IFRo aXMgaXMgbGVmdCBpbiB0aGUgYWN0dWFsIHdvcmtlciBmdW5jdGlvbnMgb24K dGhlIGFzc3VtcHRpb24gdGhhdCBjYWxsZXJzIGFyZW4ndCBndWFyYW50ZWVk IGF0b21pY2l0eSB3cnQgYWN0aW5nIG9uCm11bHRpcGxlIHBhZ2VzIGF0IGEg dGltZS4gRm9yIG1pcy1hbGlnbmVkIEdGTnMgZ2ZuX2xvY2soKSB3b3VsZG4n dCBoYXZlCmxvY2tlZCB0aGUgY29ycmVjdCBHRk4gcmFuZ2UgYW55d2F5LCBp ZiBpdCBkaWRuJ3Qgc2ltcGx5IHJlc29sdmUgdG8KcDJtX2xvY2soKSwgYW5k IGZvciB3ZWxsLWJlaGF2ZWQgY2FsbGVycyB0aGVyZSBjb250aW51ZXMgdG8g YmUgb25seSBhCnNpbmdsZSBpdGVyYXRpb24sIGkuZS4gYmVoYXZpb3IgaXMg dW5jaGFuZ2VkIGZvciB0aGVtLiAoRlRBT0QgcHVsbGluZwpvdXQganVzdCBw b2RfbG9jaygpIGludG8gcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZhdGlvbigp IHdvdWxkIHJlc3VsdCBpbgphIGxvY2sgb3JkZXIgdmlvbGF0aW9uLikKClRo aXMgaXMgQ1ZFLTIwMjEtMjg3MDQgYW5kIENWRS0yMDIxLTI4NzA3IC8gcGFy dCBvZiBYU0EtMzg4LgoKRml4ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6 IHNob3J0ZW4gY2VydGFpbiBvcGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciBy YW5nZXMiKQpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hA c3VzZS5jb20+ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dl ci5wYXVAY2l0cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0t cG9kLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3AybS1wb2QuYwpAQCAtNDk2 LDcgKzQ5Niw3IEBAIHAybV9wb2RfemVyb19jaGVja19zdXBlcnBhZ2Uoc3Ry dWN0IHAybV8KIAogCiAvKgotICogVGhpcyBmdW5jdGlvbiBpcyBuZWVkZWQg Zm9yIHR3byByZWFzb25zOgorICogVGhpcyBwYWlyIG9mIGZ1bmN0aW9ucyBp cyBuZWVkZWQgZm9yIHR3byByZWFzb25zOgogICogKyBUbyBwcm9wZXJseSBo YW5kbGUgY2xlYXJpbmcgb2YgUG9EIGVudHJpZXMKICAqICsgVG8gInN0ZWFs IGJhY2siIG1lbW9yeSBiZWluZyBmcmVlZCBmb3IgdGhlIFBvRCBjYWNoZSwg cmF0aGVyIHRoYW4KICAqICAgcmVsZWFzaW5nIGl0LgpAQCAtNTA0LDggKzUw NCw4IEBAIHAybV9wb2RfemVyb19jaGVja19zdXBlcnBhZ2Uoc3RydWN0IHAy bV8KICAqIE9uY2UgYm90aCBvZiB0aGVzZSBmdW5jdGlvbnMgaGF2ZSBiZWVu IGNvbXBsZXRlZCwgd2UgY2FuIHJldHVybiBhbmQKICAqIGFsbG93IGRlY3Jl YXNlX3Jlc2VydmF0aW9uKCkgdG8gaGFuZGxlIGV2ZXJ5dGhpbmcgZWxzZS4K ICAqLwotdW5zaWduZWQgbG9uZwotcDJtX3BvZF9kZWNyZWFzZV9yZXNlcnZh dGlvbihzdHJ1Y3QgZG9tYWluICpkLCBnZm5fdCBnZm4sIHVuc2lnbmVkIGlu dCBvcmRlcikKK3N0YXRpYyB1bnNpZ25lZCBsb25nCitkZWNyZWFzZV9yZXNl cnZhdGlvbihzdHJ1Y3QgZG9tYWluICpkLCBnZm5fdCBnZm4sIHVuc2lnbmVk IGludCBvcmRlcikKIHsKICAgICB1bnNpZ25lZCBsb25nIHJldCA9IDAsIGks IG47CiAgICAgc3RydWN0IHAybV9kb21haW4gKnAybSA9IHAybV9nZXRfaG9z dHAybShkKTsKQEAgLTU1Miw4ICs1NTIsMTAgQEAgcDJtX3BvZF9kZWNyZWFz ZV9yZXNlcnZhdGlvbihzdHJ1Y3QgZG9tYQogICAgICAgICAgKiBBbGwgUG9E OiBNYXJrIHRoZSB3aG9sZSByZWdpb24gaW52YWxpZCBhbmQgdGVsbCBjYWxs ZXIKICAgICAgICAgICogd2UncmUgZG9uZS4KICAgICAgICAgICovCi0gICAg ICAgIGlmICggcDJtX3NldF9lbnRyeShwMm0sIGdmbiwgSU5WQUxJRF9NRk4s IG9yZGVyLCBwMm1faW52YWxpZCwKLSAgICAgICAgICAgICAgICAgICAgICAg ICAgIHAybS0+ZGVmYXVsdF9hY2Nlc3MpICkKKyAgICAgICAgaW50IHJjID0g cDJtX3NldF9lbnRyeShwMm0sIGdmbiwgSU5WQUxJRF9NRk4sIG9yZGVyLCBw Mm1faW52YWxpZCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBw Mm0tPmRlZmF1bHRfYWNjZXNzKTsKKworICAgICAgICBpZiAoIHJjICkKICAg ICAgICAgewogICAgICAgICAgICAgLyoKICAgICAgICAgICAgICAqIElmIHRo aXMgZmFpbHMsIHdlIGNhbid0IHRlbGwgaG93IG11Y2ggb2YgdGhlIHJhbmdl IHdhcyBjaGFuZ2VkLgpAQCAtNTYxLDcgKzU2MywxMiBAQCBwMm1fcG9kX2Rl Y3JlYXNlX3Jlc2VydmF0aW9uKHN0cnVjdCBkb21hCiAgICAgICAgICAgICAg KiBpbXBvc3NpYmxlLgogICAgICAgICAgICAgICovCiAgICAgICAgICAgICBp ZiAoIG9yZGVyICE9IDAgKQorICAgICAgICAgICAgeworICAgICAgICAgICAg ICAgIHByaW50ayhYRU5MT0dfR19FUlIKKyAgICAgICAgICAgICAgICAgICAg ICAgIiVwZDogbWFya2luZyBHRk4gJSNseCAob3JkZXIgJXUpIGFzIG5vbi1Q b0QgZmFpbGVkOiAlZFxuIiwKKyAgICAgICAgICAgICAgICAgICAgICAgZCwg Z2ZuX3goZ2ZuKSwgb3JkZXIsIHJjKTsKICAgICAgICAgICAgICAgICBkb21h aW5fY3Jhc2goZCk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBnb3Rv IG91dF91bmxvY2s7CiAgICAgICAgIH0KICAgICAgICAgcmV0ID0gMVVMIDw8 IG9yZGVyOwpAQCAtNjcwLDYgKzY3NywyMiBAQCBvdXRfdW5sb2NrOgogICAg IHJldHVybiByZXQ7CiB9CiAKK3Vuc2lnbmVkIGxvbmcKK3AybV9wb2RfZGVj cmVhc2VfcmVzZXJ2YXRpb24oc3RydWN0IGRvbWFpbiAqZCwgZ2ZuX3QgZ2Zu LCB1bnNpZ25lZCBpbnQgb3JkZXIpCit7CisgICAgdW5zaWduZWQgbG9uZyBs ZWZ0ID0gMVVMIDw8IG9yZGVyLCByZXQgPSAwOworICAgIHVuc2lnbmVkIGlu dCBjaHVua19vcmRlciA9IGZpbmRfZmlyc3Rfc2V0X2JpdChnZm5feChnZm4p IHwgbGVmdCk7CisKKyAgICBkbyB7CisgICAgICAgIHJldCArPSBkZWNyZWFz ZV9yZXNlcnZhdGlvbihkLCBnZm4sIGNodW5rX29yZGVyKTsKKworICAgICAg ICBsZWZ0IC09IDFVTCA8PCBjaHVua19vcmRlcjsKKyAgICAgICAgZ2ZuID0g Z2ZuX2FkZChnZm4sIDFVTCA8PCBjaHVua19vcmRlcik7CisgICAgfSB3aGls ZSAoIGxlZnQgKTsKKworICAgIHJldHVybiByZXQ7Cit9CisKIHZvaWQgcDJt X3BvZF9kdW1wX2RhdGEoc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICBzdHJ1 Y3QgcDJtX2RvbWFpbiAqcDJtID0gcDJtX2dldF9ob3N0cDJtKGQpOwpAQCAt MTI3MywxOSArMTI5NiwxNSBAQCByZW1hcF9hbmRfcmV0cnk6CiAgICAgcmV0 dXJuIHRydWU7CiB9CiAKLQotaW50Ci1ndWVzdF9waHlzbWFwX21hcmtfcG9w dWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGxv bmcgZ2ZuX2wsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHVuc2lnbmVkIGludCBvcmRlcikKK3N0YXRpYyBpbnQKK21hcmtfcG9w dWxhdGVfb25fZGVtYW5kKHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGxv bmcgZ2ZuX2wsCisgICAgICAgICAgICAgICAgICAgICAgICB1bnNpZ25lZCBp bnQgb3JkZXIpCiB7CiAgICAgc3RydWN0IHAybV9kb21haW4gKnAybSA9IHAy bV9nZXRfaG9zdHAybShkKTsKICAgICBnZm5fdCBnZm4gPSBfZ2ZuKGdmbl9s KTsKICAgICB1bnNpZ25lZCBsb25nIGksIG4sIHBvZF9jb3VudCA9IDA7CiAg ICAgaW50IHJjID0gMDsKIAotICAgIGlmICggIXBhZ2luZ19tb2RlX3RyYW5z bGF0ZShkKSApCi0gICAgICAgIHJldHVybiAtRUlOVkFMOwotCiAgICAgZ2Zu X2xvY2socDJtLCBnZm4sIG9yZGVyKTsKIAogICAgIFAyTV9ERUJVRygibWFy ayBwb2QgZ2ZuPSUjbHhcbiIsIGdmbl9sKTsKQEAgLTEzMjUsMTIgKzEzNDQs NDQgQEAgZ3Vlc3RfcGh5c21hcF9tYXJrX3BvcHVsYXRlX29uX2RlbWFuZChz dAogCiAgICAgICAgIGlvcmVxX3JlcXVlc3RfbWFwY2FjaGVfaW52YWxpZGF0 ZShkKTsKICAgICB9CisgICAgZWxzZSBpZiAoIG9yZGVyICkKKyAgICB7Cisg ICAgICAgIC8qCisgICAgICAgICAqIElmIHRoaXMgZmFpbGVkLCB3ZSBjYW4n dCB0ZWxsIGhvdyBtdWNoIG9mIHRoZSByYW5nZSB3YXMgY2hhbmdlZC4KKyAg ICAgICAgICogQmVzdCB0byBjcmFzaCB0aGUgZG9tYWluLgorICAgICAgICAg Ki8KKyAgICAgICAgcHJpbnRrKFhFTkxPR19HX0VSUgorICAgICAgICAgICAg ICAgIiVwZDogbWFya2luZyBHRk4gJSNseCAob3JkZXIgJXUpIGFzIFBvRCBm YWlsZWQ6ICVkXG4iLAorICAgICAgICAgICAgICAgZCwgZ2ZuX2wsIG9yZGVy LCByYyk7CisgICAgICAgIGRvbWFpbl9jcmFzaChkKTsKKyAgICB9CiAKIG91 dDoKICAgICBnZm5fdW5sb2NrKHAybSwgZ2ZuLCBvcmRlcik7CiAKICAgICBy ZXR1cm4gcmM7CiB9CisKK2ludAorZ3Vlc3RfcGh5c21hcF9tYXJrX3BvcHVs YXRlX29uX2RlbWFuZChzdHJ1Y3QgZG9tYWluICpkLCB1bnNpZ25lZCBsb25n IGdmbiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg dW5zaWduZWQgaW50IG9yZGVyKQoreworICAgIHVuc2lnbmVkIGxvbmcgbGVm dCA9IDFVTCA8PCBvcmRlcjsKKyAgICB1bnNpZ25lZCBpbnQgY2h1bmtfb3Jk ZXIgPSBmaW5kX2ZpcnN0X3NldF9iaXQoZ2ZuIHwgbGVmdCk7CisgICAgaW50 IHJjOworCisgICAgaWYgKCAhcGFnaW5nX21vZGVfdHJhbnNsYXRlKGQpICkK KyAgICAgICAgcmV0dXJuIC1FSU5WQUw7CisKKyAgICBkbyB7CisgICAgICAg IHJjID0gbWFya19wb3B1bGF0ZV9vbl9kZW1hbmQoZCwgZ2ZuLCBjaHVua19v cmRlcik7CisKKyAgICAgICAgbGVmdCAtPSAxVUwgPDwgY2h1bmtfb3JkZXI7 CisgICAgICAgIGdmbiArPSAxVUwgPDwgY2h1bmtfb3JkZXI7CisgICAgfSB3 aGlsZSAoICFyYyAmJiBsZWZ0ICk7CisKKyAgICByZXR1cm4gcmM7Cit9CiAK IHZvaWQgcDJtX3BvZF9pbml0KHN0cnVjdCBwMm1fZG9tYWluICpwMm0pCiB7 Cg== --=separator Content-Type: application/octet-stream; name="xsa388-4.15-2.patch" Content-Disposition: attachment; filename="xsa388-4.15-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUG9EOiBoYW5kbGUgaW50ZXJtZWRpYXRlIHBhZ2Ugb3JkZXJzIGlu IHAybV9wb2RfY2FjaGVfYWRkKCkKCnAybV9wb2RfZGVjcmVhc2VfcmVzZXJ2 YXRpb24oKSBtYXkgcGFzcyBwYWdlcyB0byB0aGUgZnVuY3Rpb24gd2hpY2gK YXJlbid0IDRrLCAyTSwgb3IgMUcuIEhhbmRsZSBhbGwgaW50ZXJtZWRpYXRl IG9yZGVycyBhcyB3ZWxsLCB0byBhdm9pZApoaXR0aW5nIHRoZSBCVUcoKSBh dCB0aGUgc3dpdGNoKCkgc3RhdGVtZW50J3MgImRlZmF1bHQiIGNhc2UuCgpU aGlzIGlzIENWRS0yMDIxLTI4NzA4IC8gcGFydCBvZiBYU0EtMzg4LgoKRml4 ZXM6IDNjMzUyMDExYzBkMyAoIng4Ni9Qb0Q6IHNob3J0ZW4gY2VydGFpbiBv cGVyYXRpb25zIG9uIGhpZ2hlciBvcmRlciByYW5nZXMiKQpTaWduZWQtb2Zm LWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2Vk LWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4K Ci0tLSBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMKKysrIGIveGVuL2Fy Y2gveDg2L21tL3AybS1wb2QuYwpAQCAtMTEyLDE1ICsxMTIsMTMgQEAgcDJt X3BvZF9jYWNoZV9hZGQoc3RydWN0IHAybV9kb21haW4gKnAybQogICAgIC8q IFRoZW4gYWRkIHRvIHRoZSBhcHByb3ByaWF0ZSBwb3B1bGF0ZS1vbi1kZW1h bmQgbGlzdC4gKi8KICAgICBzd2l0Y2ggKCBvcmRlciApCiAgICAgewotICAg IGNhc2UgUEFHRV9PUkRFUl8xRzoKLSAgICAgICAgZm9yICggaSA9IDA7IGkg PCAoMVVMIDw8IFBBR0VfT1JERVJfMUcpOyBpICs9IDFVTCA8PCBQQUdFX09S REVSXzJNICkKKyAgICBjYXNlIFBBR0VfT1JERVJfMk0gLi4uIFBBR0VfT1JE RVJfMUc6CisgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBvcmRl cik7IGkgKz0gMVVMIDw8IFBBR0VfT1JERVJfMk0gKQogICAgICAgICAgICAg cGFnZV9saXN0X2FkZF90YWlsKHBhZ2UgKyBpLCAmcDJtLT5wb2Quc3VwZXIp OwogICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfMk06Ci0g ICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Quc3Vw ZXIpOwotICAgICAgICBicmVhazsKLSAgICBjYXNlIFBBR0VfT1JERVJfNEs6 Ci0gICAgICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlLCAmcDJtLT5wb2Qu c2luZ2xlKTsKKyAgICBjYXNlIFBBR0VfT1JERVJfNEsgLi4uIFBBR0VfT1JE RVJfMk0gLSAxOgorICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwg b3JkZXIpOyBpICs9IDFVTCA8PCBQQUdFX09SREVSXzRLICkKKyAgICAgICAg ICAgIHBhZ2VfbGlzdF9hZGRfdGFpbChwYWdlICsgaSwgJnAybS0+cG9kLnNp bmdsZSk7CiAgICAgICAgIGJyZWFrOwogICAgIGRlZmF1bHQ6CiAgICAgICAg IEJVRygpOwo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Nov 23 12:13:15 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 23 Nov 2021 12:13:15 +0000 Received: from list by lists.xenproject.org with outflank-mailman.229251.396808 (Exim 4.92) (envelope-from ) id 1mpUf2-00023h-RR; Tue, 23 Nov 2021 12:12:32 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 229251.396808; Tue, 23 Nov 2021 12:12:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUf2-00021q-5H; Tue, 23 Nov 2021 12:12:32 +0000 Received: by outflank-mailman (input) for mailman id 229251; Tue, 23 Nov 2021 12:12:29 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUey-0008MT-Nj for xen-users@lists.xen.org; Tue, 23 Nov 2021 12:12:29 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 99db2ea0-4c56-11ec-a9d2-d9f7a1cc8784; Tue, 23 Nov 2021 13:12:21 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUdk-0002Sq-Ah; Tue, 23 Nov 2021 12:11:12 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.92) (envelope-from ) id 1mpUdk-0004TE-9S; Tue, 23 Nov 2021 12:11:12 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 99db2ea0-4c56-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xen.org; s=20200302mail; h=Date:Message-Id:Subject:CC:From:To:MIME-Version: Content-Transfer-Encoding:Content-Type; bh=CWZ3s2wQ2GbyrtnX/367/JrTLXQ16T38Nv8RMy9Ibuo=; b=YUjTfMgav5JkdOE3pzd35yHMXB g02lNH/rGoO3ncHSBiAGO9QuItbiZezKGlGt+DWkHUtXjjbUqJfs2WM4tGBco+QUlKhfCGsK7iOOo h+jyq0lC8qaGSL3XGS04Y1mquxc2STd+461OJDz3pLklkRsb9G7q+Hk7j6OsGf+yHaSA=; Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 385 v2 (CVE-2021-28706) - guests may exceed their designated memory limit Message-Id: Date: Tue, 23 Nov 2021 12:11:12 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2021-28706 / XSA-385 version 2 guests may exceed their designated memory limit UPDATES IN VERSION 2 ==================== Add CVE numbers to patches. Public release. ISSUE DESCRIPTION ================= When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound. IMPACT ====== A guest may be able too allocate unbounded amounts of memory to itself. This may result in a Denial of Service (DoS) affecting the entire host. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are affected. On x86, only Xen builds with the BIGMEM configuration option enabled are affected. (This option is off by default.) Only hosts with more than 16 TiB of memory are affected. MITIGATION ========== Setting the maximum amount of memory a guest may allocate to strictly less than 1023 GiB will avoid the vulnerability. CREDITS ======= This issue was discovered by Julien Grall of Amazon. RESOLUTION ========== Applying the appropriate first attached patch resolves this specific issue. The second patch in addition documents altered support status of Xen on huge memory systems. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa385-?.patch xen-unstable xsa385-4.15.patch Xen 4.15.x - 4.14.x xsa385-4.13.patch Xen 4.13.x xsa385-4.12.patch Xen 4.12.x $ sha256sum xsa385* b278902e293730a117605200910180bb842cf95db4bdedfd54b42b7314041d8c xsa385-1.patch 46a5ccfbb763b857f6cd0df46a9b7eed155b9de399ca4c68c9925faf4d1d9adb xsa385-2.patch 69ebe63dc7dca71f74260af19205a6387be56c7dc67b97fa7695ab1acd3c4da4 xsa385-4.12.patch 858eaad715e7cc62c4ab9784360f4ec77df70b2636b0755afe780d5c618cf9b4 xsa385-4.13.patch 831e86c3adfec532b1a48a0b967b7c58c37db3733aee8d78216eb9d535b34f12 xsa385-4.15.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public- facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation described above is NOT permitted during the embargo on public-facing systems with untrusted guest users and administrators. This is because such a configuration change is recognizable by the affected guests. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmGc2jYMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZEd4IAMwrHHAqFvSHgZ8Uw+DzMeT54db9nowudP9i/kYy +KobbVlGkxwLAU3mvh5lRkOLYzoIonrcA99cajZQNIcOKt3Mfi/8qzGGUN+hWZvh 6EZo3m7+7vx9mhtAeDBUbjkcZBLiVyxRAWALMS67ScBEX9lZTvbyj9nGkdQJmmfR pKt98z2Da2uR9YF521KWobuPYC0AFXujYBoavaTQpU/M8SiM+Wp1A2Fc6ZG+9ZKo frMeqFbHvwj94Hbqpn6CoLu2d/XnykMvttuLlqCKTccQc3puHXdQRz14W8IxxGYx gqYaIShZCFw/bUCu8mYHroDUlELJI3PIWQ1nJxy02bd5+N0= =7E6A -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa385-1.patch" Content-Disposition: attachment; filename="xsa385-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSnVsaWVuIEdyYWxsIDxqZ3JhbGxAYW1hem9uLmNvbT4KU3ViamVj dDogeGVuL3BhZ2VfYWxsb2M6IEhhcmRlbiBhc3NpZ25fcGFnZXMoKQoKZG9t YWluX3RvdF9wYWdlcygpIGFuZCBkLT5tYXhfcGFnZXMgYXJlIDMyLWJpdCB2 YWx1ZXMuIFdoaWxlIHRoZSBvcmRlcgpzaG91bGQgYWx3YXlzIGJlIHF1aXRl IHNtYWxsLCBpdCB3b3VsZCBzdGlsbCBiZSBwb3NzaWJsZSB0byBvdmVyZmxv dwppZiBkb21haW5fdG90X3BhZ2VzKCkgaXMgbmVhciB0byAoMl4zMiAtIDEp LgoKQXMgdGhpcyBjb2RlIG1heSBiZSBjYWxsZWQgYnkgYSBndWVzdCB2aWEg WEVOTUVNX2luY3JlYXNlX3Jlc2VydmF0aW9uCmFuZCBYRU5NRU1fcG9wdWxh dGVfcGh5c21hcCwgd2Ugd2FudCB0byBtYWtlIHN1cmUgdGhlIGd1ZXN0IGlz IG5vdCBnb2luZwp0byBiZSBhYmxlIHRvIGFsbG9jYXRlIG1vcmUgdGhhbiBp dCBpcyBhbGxvd2VkLgoKUmV3b3JrIHRoZSBhbGxvY2F0aW9uIGNoZWNrIHRv IGF2b2lkIGFueSBwb3NzaWJsZSBvdmVyZmxvdy4gV2hpbGUgdGhlCmNoZWNr IGRvbWFpbl90b3RfcGFnZXMoKSA8IGQtPm1heF9wYWdlcyBzaG91bGQgdGVj aG5pY2FsbHkgbm90IGJlCm5lY2Vzc2FyeSwgaXQgaXMgcHJvYmFibHkgYmVz dCB0byBoYXZlIGl0IHRvIGNhdGNoIGFueSBwb3NzaWJsZQppbmNvbnNpc3Rl bmNpZXMgaW4gdGhlIGZ1dHVyZS4KClRoaXMgaXMgQ1ZFLTIwMjEtMjg3MDYg LyBwYXJ0IG9mIFhTQS0zODUuCgpTaWduZWQtb2ZmLWJ5OiBKdWxpZW4gR3Jh bGwgPGpncmFsbEBhbWF6b24uY29tPgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1 bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBSb2dlciBQ YXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0cml4LmNvbT4KLS0tCnYzOiBSZS1i YXNlLgp2MjogTGltaXQgdG8ganVzdCB0aGUgc2VjdXJpdHkgcmVsZXZhbnQg cGFydC4gVXNlIHRvdF9wYWdlcyAobm90CiAgICBkLT50b3RfcGFnZXMpIGFz IG5lY2Vzc2FyeS4gQWxzbyBhY2NvdW50IGZvciBvdmVyZmxvdyBmcm9tIFBH Q19leHRyYQogICAgYWxsb2NhdGlvbnMuIFVzZSBkaXN0aW5jdCBlcnJvciBj b2RlcyBmb3IgdGhlIHR3byBjYXNlcy4gQXZvaWQKICAgIGxvZ2dpbmcgYSBi b2d1cyAod3JhcHBlZCkgdmVyeSBzbWFsbCB2YWx1ZS4gQWxzbyBhZGp1c3QK ICAgIGdudHRhYl90cmFuc2ZlcigpLgotLS0KVGhlcmUncyB5ZXQgYW5vdGhl ciBzaW1pbGFyIGNhc2UgaW4gbWVtLXNoYXJpbmcsIGJ1dCB0aGF0J3Mgbm90 IHNlY3VyaXR5CnN1cHBvcnRlZCwgc28gZG9lc24ndCBnZXQgYWRqdXN0ZWQg aGVyZS4KCi0tLSBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYworKysgYi94 ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKQEAgLTIzMjQsNyArMjMyNCw4IEBA IGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICogcGFnZXMgd2hlbiBpdCBp cyBkeWluZy4KICAgICAgICAgICovCiAgICAgICAgIGlmICggdW5saWtlbHko ZS0+aXNfZHlpbmcpIHx8Ci0gICAgICAgICAgICAgdW5saWtlbHkoZG9tYWlu X3RvdF9wYWdlcyhlKSA+PSBlLT5tYXhfcGFnZXMpICkKKyAgICAgICAgICAg ICB1bmxpa2VseShkb21haW5fdG90X3BhZ2VzKGUpID49IGUtPm1heF9wYWdl cykgfHwKKyAgICAgICAgICAgICB1bmxpa2VseSghKGUtPnRvdF9wYWdlcyAr IDEpKSApCiAgICAgICAgIHsKICAgICAgICAgICAgIHNwaW5fdW5sb2NrKCZl LT5wYWdlX2FsbG9jX2xvY2spOwogCkBAIC0yMzMzLDggKzIzMzQsOCBAQCBn bnR0YWJfdHJhbnNmZXIoCiAgICAgICAgICAgICAgICAgICAgICAgICAgZS0+ ZG9tYWluX2lkKTsKICAgICAgICAgICAgIGVsc2UKICAgICAgICAgICAgICAg ICBnZHByaW50ayhYRU5MT0dfSU5GTywKLSAgICAgICAgICAgICAgICAgICAg ICAgICAiVHJhbnNmZXJlZSBkJWQgaGFzIG5vIGhlYWRyb29tICh0b3QgJXUs IG1heCAldSlcbiIsCi0gICAgICAgICAgICAgICAgICAgICAgICAgZS0+ZG9t YWluX2lkLCBkb21haW5fdG90X3BhZ2VzKGUpLCBlLT5tYXhfcGFnZXMpOwor ICAgICAgICAgICAgICAgICAgICAgICAgICJUcmFuc2ZlcmVlICVwZCBoYXMg bm8gaGVhZHJvb20gKHRvdCAldSwgbWF4ICV1LCBleCAldSlcbiIsCisgICAg ICAgICAgICAgICAgICAgICAgICAgZSwgZG9tYWluX3RvdF9wYWdlcyhlKSwg ZS0+bWF4X3BhZ2VzLCBlLT5leHRyYV9wYWdlcyk7CiAKICAgICAgICAgICAg IGdvcC5zdGF0dXMgPSBHTlRTVF9nZW5lcmFsX2Vycm9yOwogICAgICAgICAg ICAgZ290byB1bmxvY2tfYW5kX2NvcHliYWNrOwotLS0gYS94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwpA QCAtMjMwNSwyMCArMjMwNSw0MSBAQCBpbnQgYXNzaWduX3BhZ2VzKAogICAg IH0KICAgICBlbHNlIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291 bnQpICkKICAgICB7Ci0gICAgICAgIHVuc2lnbmVkIGludCB0b3RfcGFnZXMg PSBkb21haW5fdG90X3BhZ2VzKGQpICsgbnI7CisgICAgICAgIHVuc2lnbmVk IGludCB0b3RfcGFnZXMgPSBkb21haW5fdG90X3BhZ2VzKGQpOwogCiAgICAg ICAgIGlmICggdW5saWtlbHkodG90X3BhZ2VzID4gZC0+bWF4X3BhZ2VzKSAp CiAgICAgICAgIHsKLSAgICAgICAgICAgIGdwcmludGsoWEVOTE9HX0lORk8s ICJPdmVyLWFsbG9jYXRpb24gZm9yIGRvbWFpbiAldTogIgotICAgICAgICAg ICAgICAgICAgICAiJXUgPiAldVxuIiwgZC0+ZG9tYWluX2lkLCB0b3RfcGFn ZXMsIGQtPm1heF9wYWdlcyk7CisgICAgICAgICAgICBncHJpbnRrKFhFTkxP R19JTkZPLCAiSW5jb25zaXN0ZW50IGFsbG9jYXRpb24gZm9yICVwZDogJXUg PiAldVxuIiwKKyAgICAgICAgICAgICAgICAgICAgZCwgdG90X3BhZ2VzLCBk LT5tYXhfcGFnZXMpOworICAgICAgICAgICAgcmMgPSAtRVBFUk07CisgICAg ICAgICAgICBnb3RvIG91dDsKKyAgICAgICAgfQorCisgICAgICAgIGlmICgg dW5saWtlbHkobnIgPiBkLT5tYXhfcGFnZXMgLSB0b3RfcGFnZXMpICkKKyAg ICAgICAgeworICAgICAgICAgICAgZ3ByaW50ayhYRU5MT0dfSU5GTywgIk92 ZXItYWxsb2NhdGlvbiBmb3IgJXBkOiAlTHUgPiAldVxuIiwKKyAgICAgICAg ICAgICAgICAgICAgZCwgdG90X3BhZ2VzICsgMHVsbCArIG5yLCBkLT5tYXhf cGFnZXMpOwogICAgICAgICAgICAgcmMgPSAtRTJCSUc7CiAgICAgICAgICAg ICBnb3RvIG91dDsKICAgICAgICAgfQogICAgIH0KIAotICAgIGlmICggISht ZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICYmCi0gICAgICAgICB1bmxp a2VseShkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCBucikgPT0gbnIpICkK LSAgICAgICAgZ2V0X2tub3duYWxpdmVfZG9tYWluKGQpOworICAgIGlmICgg IShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICkKKyAgICB7CisgICAg ICAgIGlmICggdW5saWtlbHkoZC0+dG90X3BhZ2VzICsgbnIgPCBucikgKQor ICAgICAgICB7CisgICAgICAgICAgICBncHJpbnRrKFhFTkxPR19JTkZPLAor ICAgICAgICAgICAgICAgICAgICAiRXhjZXNzIGFsbG9jYXRpb24gZm9yICVw ZDogJUx1ICgldSBleHRyYSlcbiIsCisgICAgICAgICAgICAgICAgICAgIGQs IGQtPnRvdF9wYWdlcyArIDB1bGwgKyBuciwgZC0+ZXh0cmFfcGFnZXMpOwor ICAgICAgICAgICAgaWYgKCBwZ1swXS5jb3VudF9pbmZvICYgUEdDX2V4dHJh ICkKKyAgICAgICAgICAgICAgICBkLT5leHRyYV9wYWdlcyAtPSBucjsKKyAg ICAgICAgICAgIHJjID0gLUUyQklHOworICAgICAgICAgICAgZ290byBvdXQ7 CisgICAgICAgIH0KKworICAgICAgICBpZiAoIHVubGlrZWx5KGRvbWFpbl9h ZGp1c3RfdG90X3BhZ2VzKGQsIG5yKSA9PSBucikgKQorICAgICAgICAgICAg Z2V0X2tub3duYWxpdmVfZG9tYWluKGQpOworICAgIH0KIAogICAgIGZvciAo IGkgPSAwOyBpIDwgbnI7IGkrKyApCiAgICAgewo= --=separator Content-Type: application/octet-stream; name="xsa385-2.patch" Content-Disposition: attachment; filename="xsa385-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBTVVBQT1JULm1kOiBsaW1pdCBzZWN1cml0eSBzdXBwb3J0IGZvciBob3N0 cyB3aXRoIHZlcnkgbXVjaCBtZW1vcnkKClN1ZmZpY2llbnQgYW5kIGluIHBh cnRpY3VsYXIgcmVndWxhciB0ZXN0aW5nIG9uIHZlcnkgbGFyZ2UgaG9zdHMg Y2Fubm90CmN1cnJlbnRseSBiZSBndWFyYW50ZWVkLiBBbnlvbmUgd2FudGlu ZyB1cyB0byBzdXBwb3J0IGxhcmdlciBob3N0cyBpcwpmcmVlIHRvIHByb3Bv c2Ugc28sIGJ1dCB3aWxsIG5lZWQgdG8gc3VwcGx5IG5vdCBvbmx5IHRlc3Qg cmVzdWx0cywgYnV0CmFsc28gYSB0ZXN0IHBsYW4uCgpUaGlzIGlzIHBhcnQg b2YgWFNBLTM4NS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1 bGljaEBzdXNlLmNvbT4KCi0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9S VC5tZApAQCAtNDgsNiArNDgsMTIgQEAgRm9yIHRoZSBDb3J0ZXggQTU3IHIw cDAgLSByMXAxLCBzZWUgRXJyYQogCiAgICAgU3RhdHVzLCB4ODY6IFN1cHBv cnRlZAogCisjIyMgUGh5c2ljYWwgTWVtb3J5CisKKyAgICBTdGF0dXM6IFN1 cHBvcnRlZCB1cCB0byA4IFRpQgorCitIb3N0cyB3aXRoIG1vcmUgbWVtb3J5 IGFyZSBzdXBwb3J0ZWQsIGJ1dCBub3Qgc2VjdXJpdHkgc3VwcG9ydGVkLgor CiAjIyMgUGh5c2ljYWwgTWVtb3J5IEhvdHBsdWcKIAogICAgIFN0YXR1cywg eDg2OiBTdXBwb3J0ZWQK --=separator Content-Type: application/octet-stream; name="xsa385-4.12.patch" Content-Disposition: attachment; filename="xsa385-4.12.patch" Content-Transfer-Encoding: base64 RnJvbTogSnVsaWVuIEdyYWxsIDxqZ3JhbGxAYW1hem9uLmNvbT4KU3ViamVj dDogeGVuL3BhZ2VfYWxsb2M6IEhhcmRlbiBhc3NpZ25fcGFnZXMoKQoKZG9t YWluX3RvdF9wYWdlcygpIGFuZCBkLT5tYXhfcGFnZXMgYXJlIDMyLWJpdCB2 YWx1ZXMuIFdoaWxlIHRoZSBvcmRlcgpzaG91bGQgYWx3YXlzIGJlIHF1aXRl IHNtYWxsLCBpdCB3b3VsZCBzdGlsbCBiZSBwb3NzaWJsZSB0byBvdmVyZmxv dwppZiBkb21haW5fdG90X3BhZ2VzKCkgaXMgbmVhciB0byAoMl4zMiAtIDEp LgoKQXMgdGhpcyBjb2RlIG1heSBiZSBjYWxsZWQgYnkgYSBndWVzdCB2aWEg WEVOTUVNX2luY3JlYXNlX3Jlc2VydmF0aW9uCmFuZCBYRU5NRU1fcG9wdWxh dGVfcGh5c21hcCwgd2Ugd2FudCB0byBtYWtlIHN1cmUgdGhlIGd1ZXN0IGlz IG5vdCBnb2luZwp0byBiZSBhYmxlIHRvIGFsbG9jYXRlIG1vcmUgdGhhbiBp dCBpcyBhbGxvd2VkLgoKUmV3b3JrIHRoZSBhbGxvY2F0aW9uIGNoZWNrIHRv IGF2b2lkIGFueSBwb3NzaWJsZSBvdmVyZmxvdy4gV2hpbGUgdGhlCmNoZWNr IGRvbWFpbl90b3RfcGFnZXMoKSA8IGQtPm1heF9wYWdlcyBzaG91bGQgdGVj aG5pY2FsbHkgbm90IGJlCm5lY2Vzc2FyeSwgaXQgaXMgcHJvYmFibHkgYmVz dCB0byBoYXZlIGl0IHRvIGNhdGNoIGFueSBwb3NzaWJsZQppbmNvbnNpc3Rl bmNpZXMgaW4gdGhlIGZ1dHVyZS4KClRoaXMgaXMgQ1ZFLTIwMjEtMjg3MDYg LyBYU0EtMzg1LgoKU2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqZ3Jh bGxAYW1hem9uLmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpi ZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9nZXIgUGF1IE1vbm7D qSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL2dy YW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCkBA IC0yMjM5LDcgKzIyMzksOCBAQCBnbnR0YWJfdHJhbnNmZXIoCiAgICAgICAg ICAqIHBhZ2VzIHdoZW4gaXQgaXMgZHlpbmcuCiAgICAgICAgICAqLwogICAg ICAgICBpZiAoIHVubGlrZWx5KGUtPmlzX2R5aW5nKSB8fAotICAgICAgICAg ICAgIHVubGlrZWx5KGUtPnRvdF9wYWdlcyA+PSBlLT5tYXhfcGFnZXMpICkK KyAgICAgICAgICAgICB1bmxpa2VseShlLT50b3RfcGFnZXMgPj0gZS0+bWF4 X3BhZ2VzKSB8fAorICAgICAgICAgICAgIHVubGlrZWx5KCEoZS0+dG90X3Bh Z2VzICsgMSkpICkKICAgICAgICAgewogICAgICAgICAgICAgc3Bpbl91bmxv Y2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAKQEAgLTIyNDgsOCArMjI0OSw4 IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgICAgICAgICAgICAg ICBlLT5kb21haW5faWQpOwogICAgICAgICAgICAgZWxzZQogICAgICAgICAg ICAgICAgIGdkcHJpbnRrKFhFTkxPR19JTkZPLAotICAgICAgICAgICAgICAg ICAgICAgICAgICJUcmFuc2ZlcmVlIGQlZCBoYXMgbm8gaGVhZHJvb20gKHRv dCAldSwgbWF4ICV1KVxuIiwKLSAgICAgICAgICAgICAgICAgICAgICAgICBl LT5kb21haW5faWQsIGUtPnRvdF9wYWdlcywgZS0+bWF4X3BhZ2VzKTsKKyAg ICAgICAgICAgICAgICAgICAgICAgICAiVHJhbnNmZXJlZSAlcGQgaGFzIG5v IGhlYWRyb29tICh0b3QgJXUsIG1heCAldSlcbiIsCisgICAgICAgICAgICAg ICAgICAgICAgICAgZSwgZS0+dG90X3BhZ2VzLCBlLT5tYXhfcGFnZXMpOwog CiAgICAgICAgICAgICBnb3Auc3RhdHVzID0gR05UU1RfZ2VuZXJhbF9lcnJv cjsKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKLS0t IGEveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKKysrIGIveGVuL2NvbW1vbi9w YWdlX2FsbG9jLmMKQEAgLTIyNzgsMTcgKzIyNzgsMjYgQEAgaW50IGFzc2ln bl9wYWdlcygKIAogICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVm Y291bnQpICkKICAgICB7Ci0gICAgICAgIGlmICggdW5saWtlbHkoKGQtPnRv dF9wYWdlcyArICgxIDw8IG9yZGVyKSkgPiBkLT5tYXhfcGFnZXMpICkKKyAg ICAgICAgdW5zaWduZWQgaW50IG5yID0gMXUgPDwgb3JkZXI7CisKKyAgICAg ICAgaWYgKCB1bmxpa2VseShkLT50b3RfcGFnZXMgPiBkLT5tYXhfcGFnZXMp ICkKKyAgICAgICAgeworICAgICAgICAgICAgZ3ByaW50ayhYRU5MT0dfSU5G TywgIkluY29uc2lzdGVudCBhbGxvY2F0aW9uIGZvciAlcGQ6ICV1ID4gJXVc biIsCisgICAgICAgICAgICAgICAgICAgIGQsIGQtPnRvdF9wYWdlcywgZC0+ bWF4X3BhZ2VzKTsKKyAgICAgICAgICAgIHJjID0gLUVQRVJNOworICAgICAg ICAgICAgZ290byBvdXQ7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIHVu bGlrZWx5KG5yID4gZC0+bWF4X3BhZ2VzIC0gZC0+dG90X3BhZ2VzKSApCiAg ICAgICAgIHsKICAgICAgICAgICAgIGlmICggIXRtZW1fZW5hYmxlZCgpIHx8 IG9yZGVyICE9IDAgfHwgZC0+dG90X3BhZ2VzICE9IGQtPm1heF9wYWdlcyAp Ci0gICAgICAgICAgICAgICAgZ3ByaW50ayhYRU5MT0dfSU5GTywgIk92ZXIt YWxsb2NhdGlvbiBmb3IgZG9tYWluICV1OiAiCi0gICAgICAgICAgICAgICAg ICAgICAgICAiJXUgPiAldVxuIiwgZC0+ZG9tYWluX2lkLAotICAgICAgICAg ICAgICAgICAgICAgICAgZC0+dG90X3BhZ2VzICsgKDEgPDwgb3JkZXIpLCBk LT5tYXhfcGFnZXMpOworICAgICAgICAgICAgICAgIGdwcmludGsoWEVOTE9H X0lORk8sICJPdmVyLWFsbG9jYXRpb24gZm9yICVwZDogJUx1ID4gJXVcbiIs CisgICAgICAgICAgICAgICAgICAgICAgICBkLCBkLT50b3RfcGFnZXMgKyAw dWxsICsgbnIsIGQtPm1heF9wYWdlcyk7CiAgICAgICAgICAgICByYyA9IC1F MkJJRzsKICAgICAgICAgICAgIGdvdG8gb3V0OwogICAgICAgICB9CiAKLSAg ICAgICAgaWYgKCB1bmxpa2VseShkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhk LCAxIDw8IG9yZGVyKSA9PSAoMSA8PCBvcmRlcikpICkKKyAgICAgICAgaWYg KCB1bmxpa2VseShkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCBucikgPT0g bnIpICkKICAgICAgICAgICAgIGdldF9rbm93bmFsaXZlX2RvbWFpbihkKTsK ICAgICB9CiAK --=separator Content-Type: application/octet-stream; name="xsa385-4.13.patch" Content-Disposition: attachment; filename="xsa385-4.13.patch" Content-Transfer-Encoding: base64 RnJvbTogSnVsaWVuIEdyYWxsIDxqZ3JhbGxAYW1hem9uLmNvbT4KU3ViamVj dDogeGVuL3BhZ2VfYWxsb2M6IEhhcmRlbiBhc3NpZ25fcGFnZXMoKQoKZG9t YWluX3RvdF9wYWdlcygpIGFuZCBkLT5tYXhfcGFnZXMgYXJlIDMyLWJpdCB2 YWx1ZXMuIFdoaWxlIHRoZSBvcmRlcgpzaG91bGQgYWx3YXlzIGJlIHF1aXRl IHNtYWxsLCBpdCB3b3VsZCBzdGlsbCBiZSBwb3NzaWJsZSB0byBvdmVyZmxv dwppZiBkb21haW5fdG90X3BhZ2VzKCkgaXMgbmVhciB0byAoMl4zMiAtIDEp LgoKQXMgdGhpcyBjb2RlIG1heSBiZSBjYWxsZWQgYnkgYSBndWVzdCB2aWEg WEVOTUVNX2luY3JlYXNlX3Jlc2VydmF0aW9uCmFuZCBYRU5NRU1fcG9wdWxh dGVfcGh5c21hcCwgd2Ugd2FudCB0byBtYWtlIHN1cmUgdGhlIGd1ZXN0IGlz IG5vdCBnb2luZwp0byBiZSBhYmxlIHRvIGFsbG9jYXRlIG1vcmUgdGhhbiBp dCBpcyBhbGxvd2VkLgoKUmV3b3JrIHRoZSBhbGxvY2F0aW9uIGNoZWNrIHRv IGF2b2lkIGFueSBwb3NzaWJsZSBvdmVyZmxvdy4gV2hpbGUgdGhlCmNoZWNr IGRvbWFpbl90b3RfcGFnZXMoKSA8IGQtPm1heF9wYWdlcyBzaG91bGQgdGVj aG5pY2FsbHkgbm90IGJlCm5lY2Vzc2FyeSwgaXQgaXMgcHJvYmFibHkgYmVz dCB0byBoYXZlIGl0IHRvIGNhdGNoIGFueSBwb3NzaWJsZQppbmNvbnNpc3Rl bmNpZXMgaW4gdGhlIGZ1dHVyZS4KClRoaXMgaXMgQ1ZFLTIwMjEtMjg3MDYg LyBYU0EtMzg1LgoKU2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqZ3Jh bGxAYW1hem9uLmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpi ZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9nZXIgUGF1IE1vbm7D qSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL2dy YW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCkBA IC0yMjg2LDcgKzIyODYsOCBAQCBnbnR0YWJfdHJhbnNmZXIoCiAgICAgICAg ICAqIHBhZ2VzIHdoZW4gaXQgaXMgZHlpbmcuCiAgICAgICAgICAqLwogICAg ICAgICBpZiAoIHVubGlrZWx5KGUtPmlzX2R5aW5nKSB8fAotICAgICAgICAg ICAgIHVubGlrZWx5KGUtPnRvdF9wYWdlcyA+PSBlLT5tYXhfcGFnZXMpICkK KyAgICAgICAgICAgICB1bmxpa2VseShlLT50b3RfcGFnZXMgPj0gZS0+bWF4 X3BhZ2VzKSB8fAorICAgICAgICAgICAgIHVubGlrZWx5KCEoZS0+dG90X3Bh Z2VzICsgMSkpICkKICAgICAgICAgewogICAgICAgICAgICAgc3Bpbl91bmxv Y2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAKQEAgLTIyOTUsOCArMjI5Niw4 IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgICAgICAgICAgICAg ICBlLT5kb21haW5faWQpOwogICAgICAgICAgICAgZWxzZQogICAgICAgICAg ICAgICAgIGdkcHJpbnRrKFhFTkxPR19JTkZPLAotICAgICAgICAgICAgICAg ICAgICAgICAgICJUcmFuc2ZlcmVlIGQlZCBoYXMgbm8gaGVhZHJvb20gKHRv dCAldSwgbWF4ICV1KVxuIiwKLSAgICAgICAgICAgICAgICAgICAgICAgICBl LT5kb21haW5faWQsIGUtPnRvdF9wYWdlcywgZS0+bWF4X3BhZ2VzKTsKKyAg ICAgICAgICAgICAgICAgICAgICAgICAiVHJhbnNmZXJlZSAlcGQgaGFzIG5v IGhlYWRyb29tICh0b3QgJXUsIG1heCAldSlcbiIsCisgICAgICAgICAgICAg ICAgICAgICAgICAgZSwgZS0+dG90X3BhZ2VzLCBlLT5tYXhfcGFnZXMpOwog CiAgICAgICAgICAgICBnb3Auc3RhdHVzID0gR05UU1RfZ2VuZXJhbF9lcnJv cjsKICAgICAgICAgICAgIGdvdG8gdW5sb2NrX2FuZF9jb3B5YmFjazsKLS0t IGEveGVuL2NvbW1vbi9wYWdlX2FsbG9jLmMKKysrIGIveGVuL2NvbW1vbi9w YWdlX2FsbG9jLmMKQEAgLTIyNzYsMTYgKzIyNzYsMjUgQEAgaW50IGFzc2ln bl9wYWdlcygKIAogICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVm Y291bnQpICkKICAgICB7Ci0gICAgICAgIGlmICggdW5saWtlbHkoKGQtPnRv dF9wYWdlcyArICgxIDw8IG9yZGVyKSkgPiBkLT5tYXhfcGFnZXMpICkKKyAg ICAgICAgdW5zaWduZWQgaW50IG5yID0gMXUgPDwgb3JkZXI7CisKKyAgICAg ICAgaWYgKCB1bmxpa2VseShkLT50b3RfcGFnZXMgPiBkLT5tYXhfcGFnZXMp ICkKKyAgICAgICAgeworICAgICAgICAgICAgZ3ByaW50ayhYRU5MT0dfSU5G TywgIkluY29uc2lzdGVudCBhbGxvY2F0aW9uIGZvciAlcGQ6ICV1ID4gJXVc biIsCisgICAgICAgICAgICAgICAgICAgIGQsIGQtPnRvdF9wYWdlcywgZC0+ bWF4X3BhZ2VzKTsKKyAgICAgICAgICAgIHJjID0gLUVQRVJNOworICAgICAg ICAgICAgZ290byBvdXQ7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIHVu bGlrZWx5KG5yID4gZC0+bWF4X3BhZ2VzIC0gZC0+dG90X3BhZ2VzKSApCiAg ICAgICAgIHsKLSAgICAgICAgICAgIGdwcmludGsoWEVOTE9HX0lORk8sICJP dmVyLWFsbG9jYXRpb24gZm9yIGRvbWFpbiAldTogIgotICAgICAgICAgICAg ICAgICAgICAiJXUgPiAldVxuIiwgZC0+ZG9tYWluX2lkLAotICAgICAgICAg ICAgICAgICAgICBkLT50b3RfcGFnZXMgKyAoMSA8PCBvcmRlciksIGQtPm1h eF9wYWdlcyk7CisgICAgICAgICAgICBncHJpbnRrKFhFTkxPR19JTkZPLCAi T3Zlci1hbGxvY2F0aW9uIGZvciAlcGQ6ICVMdSA+ICV1XG4iLAorICAgICAg ICAgICAgICAgICAgICBkLCBkLT50b3RfcGFnZXMgKyAwdWxsICsgbnIsIGQt Pm1heF9wYWdlcyk7CiAgICAgICAgICAgICByYyA9IC1FMkJJRzsKICAgICAg ICAgICAgIGdvdG8gb3V0OwogICAgICAgICB9CiAKLSAgICAgICAgaWYgKCB1 bmxpa2VseShkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAxIDw8IG9yZGVy KSA9PSAoMSA8PCBvcmRlcikpICkKKyAgICAgICAgaWYgKCB1bmxpa2VseShk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCBucikgPT0gbnIpICkKICAgICAg ICAgICAgIGdldF9rbm93bmFsaXZlX2RvbWFpbihkKTsKICAgICB9CiAK --=separator Content-Type: application/octet-stream; name="xsa385-4.15.patch" Content-Disposition: attachment; filename="xsa385-4.15.patch" Content-Transfer-Encoding: base64 RnJvbTogSnVsaWVuIEdyYWxsIDxqZ3JhbGxAYW1hem9uLmNvbT4KU3ViamVj dDogeGVuL3BhZ2VfYWxsb2M6IEhhcmRlbiBhc3NpZ25fcGFnZXMoKQoKZG9t YWluX3RvdF9wYWdlcygpIGFuZCBkLT5tYXhfcGFnZXMgYXJlIDMyLWJpdCB2 YWx1ZXMuIFdoaWxlIHRoZSBvcmRlcgpzaG91bGQgYWx3YXlzIGJlIHF1aXRl IHNtYWxsLCBpdCB3b3VsZCBzdGlsbCBiZSBwb3NzaWJsZSB0byBvdmVyZmxv dwppZiBkb21haW5fdG90X3BhZ2VzKCkgaXMgbmVhciB0byAoMl4zMiAtIDEp LgoKQXMgdGhpcyBjb2RlIG1heSBiZSBjYWxsZWQgYnkgYSBndWVzdCB2aWEg WEVOTUVNX2luY3JlYXNlX3Jlc2VydmF0aW9uCmFuZCBYRU5NRU1fcG9wdWxh dGVfcGh5c21hcCwgd2Ugd2FudCB0byBtYWtlIHN1cmUgdGhlIGd1ZXN0IGlz IG5vdCBnb2luZwp0byBiZSBhYmxlIHRvIGFsbG9jYXRlIG1vcmUgdGhhbiBp dCBpcyBhbGxvd2VkLgoKUmV3b3JrIHRoZSBhbGxvY2F0aW9uIGNoZWNrIHRv IGF2b2lkIGFueSBwb3NzaWJsZSBvdmVyZmxvdy4gV2hpbGUgdGhlCmNoZWNr IGRvbWFpbl90b3RfcGFnZXMoKSA8IGQtPm1heF9wYWdlcyBzaG91bGQgdGVj aG5pY2FsbHkgbm90IGJlCm5lY2Vzc2FyeSwgaXQgaXMgcHJvYmFibHkgYmVz dCB0byBoYXZlIGl0IHRvIGNhdGNoIGFueSBwb3NzaWJsZQppbmNvbnNpc3Rl bmNpZXMgaW4gdGhlIGZ1dHVyZS4KClRoaXMgaXMgQ1ZFLTIwMjEtMjg3MDYg LyBYU0EtMzg1LgoKU2lnbmVkLW9mZi1ieTogSnVsaWVuIEdyYWxsIDxqZ3Jh bGxAYW1hem9uLmNvbT4KU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpi ZXVsaWNoQHN1c2UuY29tPgoKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtMjMzNiw3 ICsyMzM2LDggQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAgICAgKiBwYWdl cyB3aGVuIGl0IGlzIGR5aW5nLgogICAgICAgICAgKi8KICAgICAgICAgaWYg KCB1bmxpa2VseShlLT5pc19keWluZykgfHwKLSAgICAgICAgICAgICB1bmxp a2VseShkb21haW5fdG90X3BhZ2VzKGUpID49IGUtPm1heF9wYWdlcykgKQor ICAgICAgICAgICAgIHVubGlrZWx5KGRvbWFpbl90b3RfcGFnZXMoZSkgPj0g ZS0+bWF4X3BhZ2VzKSB8fAorICAgICAgICAgICAgIHVubGlrZWx5KCEoZS0+ dG90X3BhZ2VzICsgMSkpICkKICAgICAgICAgewogICAgICAgICAgICAgc3Bp bl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9jayk7CiAKQEAgLTIzNDUsOCAr MjM0Niw4IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgICAgICAg ICAgICAgICBlLT5kb21haW5faWQpOwogICAgICAgICAgICAgZWxzZQogICAg ICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19JTkZPLAotICAgICAgICAg ICAgICAgICAgICAgICAgICJUcmFuc2ZlcmVlIGQlZCBoYXMgbm8gaGVhZHJv b20gKHRvdCAldSwgbWF4ICV1KVxuIiwKLSAgICAgICAgICAgICAgICAgICAg ICAgICBlLT5kb21haW5faWQsIGRvbWFpbl90b3RfcGFnZXMoZSksIGUtPm1h eF9wYWdlcyk7CisgICAgICAgICAgICAgICAgICAgICAgICAgIlRyYW5zZmVy ZWUgJXBkIGhhcyBubyBoZWFkcm9vbSAodG90ICV1LCBtYXggJXUsIGV4ICV1 KVxuIiwKKyAgICAgICAgICAgICAgICAgICAgICAgICBlLCBkb21haW5fdG90 X3BhZ2VzKGUpLCBlLT5tYXhfcGFnZXMsIGUtPmV4dHJhX3BhZ2VzKTsKIAog ICAgICAgICAgICAgZ29wLnN0YXR1cyA9IEdOVFNUX2dlbmVyYWxfZXJyb3I7 CiAgICAgICAgICAgICBnb3RvIHVubG9ja19hbmRfY29weWJhY2s7Ci0tLSBh L3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCisrKyBiL3hlbi9jb21tb24vcGFn ZV9hbGxvYy5jCkBAIC0yMjk4LDIwICsyMjk4LDQzIEBAIGludCBhc3NpZ25f cGFnZXMoCiAgICAgfQogICAgIGVsc2UgaWYgKCAhKG1lbWZsYWdzICYgTUVN Rl9ub19yZWZjb3VudCkgKQogICAgIHsKLSAgICAgICAgdW5zaWduZWQgaW50 IHRvdF9wYWdlcyA9IGRvbWFpbl90b3RfcGFnZXMoZCkgKyAoMSA8PCBvcmRl cik7CisgICAgICAgIHVuc2lnbmVkIGludCB0b3RfcGFnZXMgPSBkb21haW5f dG90X3BhZ2VzKGQpLCBuciA9IDF1IDw8IG9yZGVyOwogCiAgICAgICAgIGlm ICggdW5saWtlbHkodG90X3BhZ2VzID4gZC0+bWF4X3BhZ2VzKSApCiAgICAg ICAgIHsKLSAgICAgICAgICAgIGdwcmludGsoWEVOTE9HX0lORk8sICJPdmVy LWFsbG9jYXRpb24gZm9yIGRvbWFpbiAldTogIgotICAgICAgICAgICAgICAg ICAgICAiJXUgPiAldVxuIiwgZC0+ZG9tYWluX2lkLCB0b3RfcGFnZXMsIGQt Pm1heF9wYWdlcyk7CisgICAgICAgICAgICBncHJpbnRrKFhFTkxPR19JTkZP LCAiSW5jb25zaXN0ZW50IGFsbG9jYXRpb24gZm9yICVwZDogJXUgPiAldVxu IiwKKyAgICAgICAgICAgICAgICAgICAgZCwgdG90X3BhZ2VzLCBkLT5tYXhf cGFnZXMpOworICAgICAgICAgICAgcmMgPSAtRVBFUk07CisgICAgICAgICAg ICBnb3RvIG91dDsKKyAgICAgICAgfQorCisgICAgICAgIGlmICggdW5saWtl bHkobnIgPiBkLT5tYXhfcGFnZXMgLSB0b3RfcGFnZXMpICkKKyAgICAgICAg eworICAgICAgICAgICAgZ3ByaW50ayhYRU5MT0dfSU5GTywgIk92ZXItYWxs b2NhdGlvbiBmb3IgJXBkOiAlTHUgPiAldVxuIiwKKyAgICAgICAgICAgICAg ICAgICAgZCwgdG90X3BhZ2VzICsgMHVsbCArIG5yLCBkLT5tYXhfcGFnZXMp OwogICAgICAgICAgICAgcmMgPSAtRTJCSUc7CiAgICAgICAgICAgICBnb3Rv IG91dDsKICAgICAgICAgfQogICAgIH0KIAotICAgIGlmICggIShtZW1mbGFn cyAmIE1FTUZfbm9fcmVmY291bnQpICYmCi0gICAgICAgICB1bmxpa2VseShk b21haW5fYWRqdXN0X3RvdF9wYWdlcyhkLCAxIDw8IG9yZGVyKSA9PSAoMSA8 PCBvcmRlcikpICkKLSAgICAgICAgZ2V0X2tub3duYWxpdmVfZG9tYWluKGQp OworICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9fcmVmY291bnQpICkK KyAgICB7CisgICAgICAgIHVuc2lnbmVkIGludCBuciA9IDF1IDw8IG9yZGVy OworCisgICAgICAgIGlmICggdW5saWtlbHkoZC0+dG90X3BhZ2VzICsgbnIg PCBucikgKQorICAgICAgICB7CisgICAgICAgICAgICBncHJpbnRrKFhFTkxP R19JTkZPLAorICAgICAgICAgICAgICAgICAgICAiRXhjZXNzIGFsbG9jYXRp b24gZm9yICVwZDogJUx1ICgldSBleHRyYSlcbiIsCisgICAgICAgICAgICAg ICAgICAgIGQsIGQtPnRvdF9wYWdlcyArIDB1bGwgKyBuciwgZC0+ZXh0cmFf cGFnZXMpOworICAgICAgICAgICAgaWYgKCBwZ1swXS5jb3VudF9pbmZvICYg UEdDX2V4dHJhICkKKyAgICAgICAgICAgICAgICBkLT5leHRyYV9wYWdlcyAt PSBucjsKKyAgICAgICAgICAgIHJjID0gLUUyQklHOworICAgICAgICAgICAg Z290byBvdXQ7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIHVubGlrZWx5 KGRvbWFpbl9hZGp1c3RfdG90X3BhZ2VzKGQsIG5yKSA9PSBucikgKQorICAg ICAgICAgICAgZ2V0X2tub3duYWxpdmVfZG9tYWluKGQpOworICAgIH0KIAog ICAgIGZvciAoIGkgPSAwOyBpIDwgKDEgPDwgb3JkZXIpOyBpKysgKQogICAg IHsK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Nov 23 12:13:15 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 23 Nov 2021 12:13:15 +0000 Received: from list by lists.xenproject.org with outflank-mailman.229243.396736 (Exim 4.92) (envelope-from ) id 1mpUew-0000Ya-Un; Tue, 23 Nov 2021 12:12:26 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 229243.396736; Tue, 23 Nov 2021 12:12:26 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUew-0000Y2-NS; Tue, 23 Nov 2021 12:12:26 +0000 Received: by outflank-mailman (input) for mailman id 229243; Tue, 23 Nov 2021 12:12:25 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUev-0008MT-4c for xen-users@lists.xen.org; Tue, 23 Nov 2021 12:12:25 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 7c4b1d2c-4c56-11ec-a9d2-d9f7a1cc8784; Tue, 23 Nov 2021 13:12:00 +0100 (CET) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpUdm-0002TE-5M; Tue, 23 Nov 2021 12:11:14 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.92) (envelope-from ) id 1mpUdm-0004Vs-4E; Tue, 23 Nov 2021 12:11:14 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 7c4b1d2c-4c56-11ec-a9d2-d9f7a1cc8784 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xen.org; s=20200302mail; h=Date:Message-Id:Subject:CC:From:To:MIME-Version: Content-Transfer-Encoding:Content-Type; bh=ztQrKzqJ+vewZDjPFkCb6Oy2jFYOOtZTzWA6OEgCWAw=; b=nIwu2YM4Vv4enxnzMjeAHryfrY Y9btjHpK1/+5UB+KO5q2hdEiIkyTsugO1APOdtxXbgMWCGwfUDUYeJpI7kQqvSYkXs66EBwfagb09 kBiS64FzBjX2pp1EXjZQ7x8iOWrNuK9LsRpZ0Yh+vX9XU/79HsBafFSRPDiNSwzh2g9c=; Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 389 v3 (CVE-2021-28705,CVE-2021-28709) - issues with partially successful P2M updates on x86 Message-Id: Date: Tue, 23 Nov 2021 12:11:14 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2021-28705,CVE-2021-28709 / XSA-389 version 3 issues with partially successful P2M updates on x86 UPDATES IN VERSION 3 ==================== Add CVE numbers to patches. Public release. ISSUE DESCRIPTION ================= x86 HVM and PVH guests may be started in populate-on-demand (PoD) mode, to provide a way for them to later easily have more memory assigned. Guests are permitted to control certain P2M aspects of individual pages via hypercalls. These hypercalls may act on ranges of pages specified via page orders (resulting in a power-of-2 number of pages). In some cases the hypervisor carries out the requests by splitting them into smaller chunks. Error handling in certain PoD cases has been insufficient in that in particular partial success of some operations was not properly accounted for. There are two code paths affected - page removal (CVE-2021-28705) and insertion of new pages (CVE-2021-28709). (We provide one patch which combines the fix to both issues.) IMPACT ====== Malicious or buggy guest kernels may be able to mount a Denial of Service (DoS) attack affecting the entire system. Privilege escalation and information leaks cannot be ruled out. VULNERABLE SYSTEMS ================== All Xen versions from 3.4 onwards are affected. Xen versions 3.3 and older are believed to not be affected. Only x86 HVM and PVH guests started in populate-on-demand mode are believed to be able to leverage the vulnerability. Populate-on-demand mode is activated when the guest's xl configuration file specifies a "maxmem" value which is larger than the "memory" value. MITIGATION ========== Not starting x86 HVM or PVH guests in populate-on-demand mode is believed to allow avoiding the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa389.patch xen-unstable xsa389-4.15.patch Xen 4.15.x xsa389-4.14.patch Xen 4.14.x xsa389-4.13.patch Xen 4.13.x xsa389-4.12.patch Xen 4.12.x $ sha256sum xsa389* c00f5b07594a6459bdd6f7334acc373bc3b0c14a5b0e444ec624ac60f857fc6f xsa389.patch bf0d66623c3239e334a17332035be5d7c7e33cfdd7f04f9b385f70ce8fa92752 xsa389-4.12.patch 2737affcf1e0fae5d412067ea8c7fe1cc91a28fa22f3f7e97a502cbd032582cc xsa389-4.13.patch b243284679b32ab8c817a2e41562d8694d9781fa8096c268bb41b0cd91684baa xsa389-4.14.patch 0a213e141089fe7808eae067b3c43beed6c7d5887fa4c901e8f9352618788e5a xsa389-4.15.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public- facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation described above is NOT permitted during the embargo on public-facing systems with untrusted guest users and administrators. This is because such a configuration change is recognizable by the affected guests. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmGc2jkMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZkOAIAInsof4UP5VTDcLtiwCvGskCXZT0SwbJ5OKbmxG7 RmPJg+R5sy89aHyJ4BP4eRfgrfbG35qBSCB5zLHy2FR3oioRmDz3y4KAFP3hXJRc B0hSNM9Al9nEfdt0YQeVxt297X0Ouz/bihLoHXKOTZ2AqKcafu9GRIdK0Kcj1v49 azcW1ndfAkIEYDGvtcdZDXYT3CyjLusQme3pweohZGwcQW6UYg7DhRKl0KPQZP/L paQZd60walNWgDcV7qfMnWit2jYxF4AptLW8c+KFig7qorLE5z9Xj7AIJ6kGriry fnwy/DE2xRr4IxWk/FsJgDxeAS6mv3KQ2Mpgx2bRAD0jB6I= =3P7k -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa389.patch" Content-Disposition: attachment; filename="xsa389.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUDJNOiBkZWFsIHdpdGggcGFydGlhbCBzdWNjZXNzIG9mIHAybV9z ZXRfZW50cnkoKQoKTTJQIGFuZCBQb0Qgc3RhdHMgbmVlZCB0byByZW1haW4g aW4gc3luYyB3aXRoIFAyTTsgaWYgYW4gdXBkYXRlIHN1Y2NlZWRzCm9ubHkg cGFydGlhbGx5LCByZXNwZWN0aXZlIGFkanVzdG1lbnRzIG5lZWQgdG8gYmUg bWFkZS4gSWYgdXBkYXRlcyBnZXQKbWFkZSBiZWZvcmUgdGhlIGNhbGwsIHRo ZXkgbWF5IGFsc28gbmVlZCB1bmRvaW5nIHVwb24gY29tcGxldGUgZmFpbHVy ZQooaS5lLiBpbmNsdWRpbmcgdGhlIHNpbmdsZS1wYWdlIGNhc2UpLgoKTG9n LWRpcnR5IHN0YXRlIHdvdWxkIGJldHRlciBhbHNvIGJlIGtlcHQgaW4gc3lu Yy4KCk5vdGUgdGhhdCB0aGUgY2hhbmdlIHRvIHNldF90eXBlZF9wMm1fZW50 cnkoKSBtYXkgbm90IGJlIHN0cmljdGx5Cm5lY2Vzc2FyeSAoZHVlIHRvIHRo ZSBvcmRlciByZXN0cmljdGlvbiBlbmZvcmNlZCBuZWFyIHRoZSB0b3Agb2Yg dGhlCmZ1bmN0aW9uKSwgYnV0IGlzIGJlaW5nIGtlcHQgaGVyZSB0byBiZSBv biB0aGUgc2FmZSBzaWRlLgoKVGhpcyBpcyBDVkUtMjAyMS0yODcwNSBhbmQg Q1ZFLTIwMjEtMjg3MDkgLyBYU0EtMzg5LgoKU2lnbmVkLW9mZi1ieTogSmFu IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9n ZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+Ci0tLQpJIHRo aW5rIHRoZSBNMlAgYXNwZWN0ICh3cnQgd3JvbmdseSBhbGxvd2luZyBtdWx0 aXBsZSBHRk4gbWFwcGluZ3Mgb2YgYQpwYWdlIHRoYXQgbWF5IGxhdGVyIGdl dCBmcmVlZCwgaS5lLiBwcmltYXJpbHkgdGhlIGdyYW50IHRhYmxlIHYyIHN0 YXR1cwpwYWdlcykgaXMgb25seSB0aGVvcmV0aWNhbCBhdCB0aGlzIHBvaW50 LiBUaGF0J3MgYmVjYXVzZSBhbnkgc3VjaApzcGVjaWFsIG1hcHBpbmdzIHdv dWxkIG9ubHkgZXZlciBiZSA0ayBvbmVzLCBhbmQgcmVwbGFjaW5nIGV4aXN0 aW5nCnNtYWxsIG1hcHBpbmdzIGNhbid0IGZhaWwgd2l0aCAtRU5PTUVNIGZy b20gaW50ZXJtZWRpYXRlIHBhZ2UgdGFibGUKYWxsb2NhdGlvbi4gQW5kIEkg dGhpbmsgYWxsIG90aGVyIGVycm9yIHJldHVybnMgd291bGQsIGlmIGluIGZh Y3QKcmVhY2hhYmxlLCByZXByZXNlbnQgKHByZXN1bWFibHkgc2VjdXJpdHkg cmVsZXZhbnQpIGJ1Z3MgdGhlbXNlbHZlcywgc28KYWRkcmVzc2luZyB0aGlz IHBhcnQgbWF5IGJlIG1lcmVseSBkZWZlbnNlLWluLWRlcHRoLgotLS0KdjQ6 IFJlLWJhc2UgYWhlYWQgb2YgIng4Ni9tbTogdXBkYXRlIGxvZy1kaXJ0eSBi aXRtYXAgd2hlbiBtYW5pcHVsYXRpbmcKICAgIFAyTSIuCnYzOiBSZW1vdmUg Ym9ndXMgc3BlY2lhbCBjYXNpbmcgb2Ygb3JkZXItMCBmcm9tIHAybV9yZW1v dmVfcGFnZSgpIGFuZAogICAgZ3Vlc3RfcGh5c21hcF9hZGRfZW50cnkoKS4g QWRqdXN0IGRlc2NyaXB0aW9uIGFjY29yZGluZ2x5Lgp2MjogQ29ycmVjdCB1 bmRvIGNvbmRpdGlvbmFsIGluIHAybV9yZW1vdmVfcGFnZSgpLgoKLS0tIGEv eGVuL2FyY2gveDg2L21tL3AybS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9w Mm0uYwpAQCAtNzk0LDYgKzc5NCw3IEBAIHAybV9yZW1vdmVfcGFnZShzdHJ1 Y3QgcDJtX2RvbWFpbiAqcDJtLAogICAgIHVuc2lnbmVkIGxvbmcgaTsKICAg ICBwMm1fdHlwZV90IHQ7CiAgICAgcDJtX2FjY2Vzc190IGE7CisgICAgaW50 IHJjOwogCiAgICAgQVNTRVJUKGdmbl9sb2NrZWRfYnlfbWUocDJtLCBnZm4p KTsKICAgICBQMk1fREVCVUcoInJlbW92aW5nIGdmbj0lI2x4IG1mbj0lI2x4 XG4iLCBnZm5feChnZm4pLCBtZm5feChtZm4pKTsKQEAgLTgyNSw4ICs4MjYs MjcgQEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVjdCBwMm1fZG9tYWluICpwMm0s CiAKICAgICBpb3JlcV9yZXF1ZXN0X21hcGNhY2hlX2ludmFsaWRhdGUocDJt LT5kb21haW4pOwogCi0gICAgcmV0dXJuIHAybV9zZXRfZW50cnkocDJtLCBn Zm4sIElOVkFMSURfTUZOLCBwYWdlX29yZGVyLCBwMm1faW52YWxpZCwKLSAg ICAgICAgICAgICAgICAgICAgICAgICBwMm0tPmRlZmF1bHRfYWNjZXNzKTsK KyAgICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIElOVkFMSURfTUZO LCBwYWdlX29yZGVyLCBwMm1faW52YWxpZCwKKyAgICAgICAgICAgICAgICAg ICAgICAgcDJtLT5kZWZhdWx0X2FjY2Vzcyk7CisgICAgaWYgKCBsaWtlbHko IXJjKSB8fCAhbWZuX3ZhbGlkKG1mbikgKQorICAgICAgICByZXR1cm4gcmM7 CisKKyAgICAvKgorICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUgcGFy dGlhbGx5IHN1Y2NlZWRlZC4gRm9yIHRoZSBmYWlsZWQgcGFydCB3ZSBuZWVk CisgICAgICogdG8gdW5kbyB0aGUgTTJQIHVwZGF0ZSBhbmQsIG91dCBvZiBw cmVjYXV0aW9uLCBtYXJrIHRoZSBwYWdlcyBkaXJ0eQorICAgICAqIGFnYWlu LgorICAgICAqLworICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBwYWdl X29yZGVyKTsgKytpICkKKyAgICB7CisgICAgICAgIHAybS0+Z2V0X2VudHJ5 KHAybSwgZ2ZuX2FkZChnZm4sIGkpLCAmdCwgJmEsIDAsIE5VTEwsIE5VTEwp OworICAgICAgICBpZiAoICFwMm1faXNfaG9sZSh0KSAmJiAhcDJtX2lzX3Nw ZWNpYWwodCkgJiYgIXAybV9pc19zaGFyZWQodCkgKQorICAgICAgICB7Cisg ICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbihtZm5feChtZm4pICsgaSwg Z2ZuX3goZ2ZuKSArIGkpOworICAgICAgICAgICAgcGFnaW5nX21hcmtfcGZu X2RpcnR5KHAybS0+ZG9tYWluLCBfcGZuKGdmbl94KGdmbikgKyBpKSk7Cisg ICAgICAgIH0KKyAgICB9CisKKyAgICByZXR1cm4gcmM7CiB9CiAKIGludApA QCAtMTAyMiwxMyArMTA0Miw4IEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5 KHN0cnVjdCBkb21haW4gKmQKIAogICAgIC8qIE5vdywgYWN0dWFsbHkgZG8g dGhlIHR3by13YXkgbWFwcGluZyAqLwogICAgIHJjID0gcDJtX3NldF9lbnRy eShwMm0sIGdmbiwgbWZuLCBwYWdlX29yZGVyLCB0LCBwMm0tPmRlZmF1bHRf YWNjZXNzKTsKLSAgICBpZiAoIHJjID09IDAgKQorICAgIGlmICggbGlrZWx5 KCFyYykgKQogICAgIHsKLSAgICAgICAgcG9kX2xvY2socDJtKTsKLSAgICAg ICAgcDJtLT5wb2QuZW50cnlfY291bnQgLT0gcG9kX2NvdW50OwotICAgICAg ICBCVUdfT04ocDJtLT5wb2QuZW50cnlfY291bnQgPCAwKTsKLSAgICAgICAg cG9kX3VubG9jayhwMm0pOwotCiAgICAgICAgIGlmICggIXAybV9pc19ncmFu dCh0KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGZvciAoIGkgPSAwOyBp IDwgKDFVTCA8PCBwYWdlX29yZGVyKTsgaSsrICkKQEAgLTEwMzYsNiArMTA1 MSw0MiBAQCBndWVzdF9waHlzbWFwX2FkZF9lbnRyeShzdHJ1Y3QgZG9tYWlu ICpkCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZ2ZuX3go Z2ZuX2FkZChnZm4sIGkpKSk7CiAgICAgICAgIH0KICAgICB9CisgICAgZWxz ZQorICAgIHsKKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlIG9wZXJhdGlv biBtYXkgaGF2ZSBwYXJ0aWFsbHkgc3VjY2VlZGVkLiBGb3IgdGhlIHN1Y2Nl c3NmdWwgcGFydAorICAgICAgICAgKiB3ZSBuZWVkIHRvIHVwZGF0ZSBNMlAg YW5kIGRpcnR5IHN0YXRlLCB3aGlsZSBmb3IgdGhlIGZhaWxlZCBwYXJ0IHdl CisgICAgICAgICAqIG1heSBuZWVkIHRvIGFkanVzdCBQb0Qgc3RhdHMgYXMg d2VsbCBhcyB1bmRvIHRoZSBlYXJsaWVyIE0yUCB1cGRhdGUuCisgICAgICAg ICAqLworICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgcGFnZV9v cmRlcik7ICsraSApCisgICAgICAgIHsKKyAgICAgICAgICAgIG9tZm4gPSBw Mm0tPmdldF9lbnRyeShwMm0sIGdmbl9hZGQoZ2ZuLCBpKSwgJm90LCAmYSwg MCwgTlVMTCwgTlVMTCk7CisgICAgICAgICAgICBpZiAoIHAybV9pc19wb2Qo b3QpICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBCVUdfT04o IXBvZF9jb3VudCk7CisgICAgICAgICAgICAgICAgLS1wb2RfY291bnQ7Cisg ICAgICAgICAgICB9CisgICAgICAgICAgICBlbHNlIGlmICggbWZuX2VxKG9t Zm4sIG1mbl9hZGQobWZuLCBpKSkgJiYgb3QgPT0gdCAmJgorICAgICAgICAg ICAgICAgICAgICAgIGEgPT0gcDJtLT5kZWZhdWx0X2FjY2VzcyAmJiAhcDJt X2lzX2dyYW50KHQpICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAg ICBzZXRfZ3Bmbl9mcm9tX21mbihtZm5feChvbWZuKSwgZ2ZuX3goZ2ZuKSAr IGkpOworICAgICAgICAgICAgICAgIHBhZ2luZ19tYXJrX3Bmbl9kaXJ0eShk LCBfcGZuKGdmbl94KGdmbikgKyBpKSk7CisgICAgICAgICAgICB9CisgICAg ICAgICAgICBlbHNlIGlmICggcDJtX2lzX3JhbShvdCkgJiYgIXAybV9pc19w YWdlZChvdCkgKQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIEFT U0VSVChtZm5fdmFsaWQob21mbikpOworICAgICAgICAgICAgICAgIHNldF9n cGZuX2Zyb21fbWZuKG1mbl94KG9tZm4pLCBnZm5feChnZm4pICsgaSk7Cisg ICAgICAgICAgICB9CisgICAgICAgIH0KKyAgICB9CisKKyAgICBpZiAoIHBv ZF9jb3VudCApCisgICAgeworICAgICAgICBwb2RfbG9jayhwMm0pOworICAg ICAgICBwMm0tPnBvZC5lbnRyeV9jb3VudCAtPSBwb2RfY291bnQ7CisgICAg ICAgIEJVR19PTihwMm0tPnBvZC5lbnRyeV9jb3VudCA8IDApOworICAgICAg ICBwb2RfdW5sb2NrKHAybSk7CisgICAgfQogCiBvdXQ6CiAgICAgcDJtX3Vu bG9jayhwMm0pOwpAQCAtMTMyNSw2ICsxMzc2LDQ5IEBAIHN0YXRpYyBpbnQg c2V0X3R5cGVkX3AybV9lbnRyeShzdHJ1Y3QgZG8KICAgICAgICAgICAgIHJl dHVybiAwOwogICAgICAgICB9CiAgICAgfQorCisgICAgUDJNX0RFQlVHKCJz ZXQgJWQgJWx4ICVseFxuIiwgZ2ZuX3AybXQsIGdmbl9sLCBtZm5feChtZm4p KTsKKyAgICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIG1mbiwgb3Jk ZXIsIGdmbl9wMm10LCBhY2Nlc3MpOworICAgIGlmICggdW5saWtlbHkocmMp ICkKKyAgICB7CisgICAgICAgIGdkcHJpbnRrKFhFTkxPR19FUlIsICJwMm1f c2V0X2VudHJ5OiAlI2x4OiV1IC0+ICVkICgweCUiUFJJX21mbiIpXG4iLAor ICAgICAgICAgICAgICAgICBnZm5fbCwgb3JkZXIsIHJjLCBtZm5feChtZm4p KTsKKworICAgICAgICAvKgorICAgICAgICAgKiBUaGUgb3BlcmF0aW9uIG1h eSBoYXZlIHBhcnRpYWxseSBzdWNjZWVkZWQuIEZvciB0aGUgc3VjY2Vzc2Z1 bCBwYXJ0CisgICAgICAgICAqIHdlIG5lZWQgdG8gdXBkYXRlIFBvRCBzdGF0 cywgTTJQLCBhbmQgZGlydHkgc3RhdGUuCisgICAgICAgICAqLworICAgICAg ICBpZiAoIG9yZGVyICE9IFBBR0VfT1JERVJfNEsgKQorICAgICAgICB7Cisg ICAgICAgICAgICB1bnNpZ25lZCBsb25nIGk7CisKKyAgICAgICAgICAgIGZv ciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBvcmRlcik7ICsraSApCisgICAgICAg ICAgICB7CisgICAgICAgICAgICAgICAgcDJtX3R5cGVfdCB0OworICAgICAg ICAgICAgICAgIG1mbl90IGNtZm4gPSBwMm0tPmdldF9lbnRyeShwMm0sIGdm bl9hZGQoZ2ZuLCBpKSwgJnQsICZhLCAwLAorICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBOVUxMLCBOVUxMKTsKKworICAg ICAgICAgICAgICAgIGlmICggIW1mbl9lcShjbWZuLCBtZm5fYWRkKG1mbiwg aSkpIHx8IHQgIT0gZ2ZuX3AybXQgfHwKKyAgICAgICAgICAgICAgICAgICAg IGEgIT0gYWNjZXNzICkKKyAgICAgICAgICAgICAgICAgICAgY29udGludWU7 CisKKyAgICAgICAgICAgICAgICBpZiAoIHAybV9pc19yYW0ob3QpICkKKyAg ICAgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgICAgIEFTU0VSVCht Zm5fdmFsaWQobWZuX2FkZChvbWZuLCBpKSkpOworICAgICAgICAgICAgICAg ICAgICBzZXRfZ3Bmbl9mcm9tX21mbihtZm5feChvbWZuKSArIGksIElOVkFM SURfTTJQX0VOVFJZKTsKKworICAgICAgICAgICAgICAgICAgICBpb3JlcV9y ZXF1ZXN0X21hcGNhY2hlX2ludmFsaWRhdGUoZCk7CisgICAgICAgICAgICAg ICAgfQorICAgICAgICAgICAgICAgIGVsc2UgaWYgKCBwMm1faXNfcG9kKG90 KSApCisgICAgICAgICAgICAgICAgeworICAgICAgICAgICAgICAgICAgICBw b2RfbG9jayhwMm0pOworICAgICAgICAgICAgICAgICAgICBCVUdfT04oIXAy bS0+cG9kLmVudHJ5X2NvdW50KTsKKyAgICAgICAgICAgICAgICAgICAgLS1w Mm0tPnBvZC5lbnRyeV9jb3VudDsKKyAgICAgICAgICAgICAgICAgICAgcG9k X3VubG9jayhwMm0pOworICAgICAgICAgICAgICAgIH0KKyAgICAgICAgICAg IH0KKyAgICAgICAgfQorICAgIH0KICAgICBlbHNlIGlmICggcDJtX2lzX3Jh bShvdCkgKQogICAgIHsKICAgICAgICAgdW5zaWduZWQgbG9uZyBpOwpAQCAt MTMzNywxMiArMTQzMSw2IEBAIHN0YXRpYyBpbnQgc2V0X3R5cGVkX3AybV9l bnRyeShzdHJ1Y3QgZG8KIAogICAgICAgICBpb3JlcV9yZXF1ZXN0X21hcGNh Y2hlX2ludmFsaWRhdGUoZCk7CiAgICAgfQotCi0gICAgUDJNX0RFQlVHKCJz ZXQgJWQgJWx4ICVseFxuIiwgZ2ZuX3AybXQsIGdmbl9sLCBtZm5feChtZm4p KTsKLSAgICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIG1mbiwgb3Jk ZXIsIGdmbl9wMm10LCBhY2Nlc3MpOwotICAgIGlmICggcmMgKQotICAgICAg ICBnZHByaW50ayhYRU5MT0dfRVJSLCAicDJtX3NldF9lbnRyeTogJSNseDol dSAtPiAlZCAoMHglIlBSSV9tZm4iKVxuIiwKLSAgICAgICAgICAgICAgICAg Z2ZuX2wsIG9yZGVyLCByYywgbWZuX3gobWZuKSk7CiAgICAgZWxzZSBpZiAo IHAybV9pc19wb2Qob3QpICkKICAgICB7CiAgICAgICAgIHBvZF9sb2NrKHAy bSk7Cg== --=separator Content-Type: application/octet-stream; name="xsa389-4.12.patch" Content-Disposition: attachment; filename="xsa389-4.12.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUDJNOiBkZWFsIHdpdGggcGFydGlhbCBzdWNjZXNzIG9mIHAybV9z ZXRfZW50cnkoKQoKTTJQIGFuZCBQb0Qgc3RhdHMgbmVlZCB0byByZW1haW4g aW4gc3luYyB3aXRoIFAyTTsgaWYgYW4gdXBkYXRlIHN1Y2NlZWRzCm9ubHkg cGFydGlhbGx5LCByZXNwZWN0aXZlIGFkanVzdG1lbnRzIG5lZWQgdG8gYmUg bWFkZS4gSWYgdXBkYXRlcyBnZXQKbWFkZSBiZWZvcmUgdGhlIGNhbGwsIHRo ZXkgbWF5IGFsc28gbmVlZCB1bmRvaW5nIHVwb24gY29tcGxldGUgZmFpbHVy ZQooaS5lLiBpbmNsdWRpbmcgdGhlIHNpbmdsZS1wYWdlIGNhc2UpLgoKTG9n LWRpcnR5IHN0YXRlIHdvdWxkIGJldHRlciBhbHNvIGJlIGtlcHQgaW4gc3lu Yy4KCk5vdGUgdGhhdCB0aGUgY2hhbmdlIHRvIHNldF90eXBlZF9wMm1fZW50 cnkoKSBtYXkgbm90IGJlIHN0cmljdGx5Cm5lY2Vzc2FyeSAoZHVlIHRvIHRo ZSBvcmRlciByZXN0cmljdGlvbiBlbmZvcmNlZCBuZWFyIHRoZSB0b3Agb2Yg dGhlCmZ1bmN0aW9uKSwgYnV0IGlzIGJlaW5nIGtlcHQgaGVyZSB0byBiZSBv biB0aGUgc2FmZSBzaWRlLgoKVGhpcyBpcyBDVkUtMjAyMS0yODcwNSBhbmQg Q1ZFLTIwMjEtMjg3MDkgLyBYU0EtMzg5LgoKU2lnbmVkLW9mZi1ieTogSmFu IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9n ZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3Ay bS5jCkBAIC03ODAsNiArNzgwLDcgQEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVj dCBwMm1fZG9tYWluICpwMm0sCiAgICAgZ2ZuX3QgZ2ZuID0gX2dmbihnZm5f bCk7CiAgICAgcDJtX3R5cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwor ICAgIGludCByYzsKIAogICAgIC8qIElPTU1VIGZvciBQViBndWVzdHMgaXMg aGFuZGxlZCBpbiBnZXRfcGFnZV90eXBlKCkgYW5kIHB1dF9wYWdlKCkuICov CiAgICAgaWYgKCAhcGFnaW5nX21vZGVfdHJhbnNsYXRlKHAybS0+ZG9tYWlu KSApCkBAIC04MTEsOCArODEyLDI3IEBAIHAybV9yZW1vdmVfcGFnZShzdHJ1 Y3QgcDJtX2RvbWFpbiAqcDJtLAogICAgICAgICAgICAgICAgIHNldF9ncGZu X2Zyb21fbWZuKG1mbitpLCBJTlZBTElEX00yUF9FTlRSWSk7CiAgICAgICAg IH0KICAgICB9Ci0gICAgcmV0dXJuIHAybV9zZXRfZW50cnkocDJtLCBnZm4s IElOVkFMSURfTUZOLCBwYWdlX29yZGVyLCBwMm1faW52YWxpZCwKLSAgICAg ICAgICAgICAgICAgICAgICAgICBwMm0tPmRlZmF1bHRfYWNjZXNzKTsKKyAg ICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIElOVkFMSURfTUZOLCBw YWdlX29yZGVyLCBwMm1faW52YWxpZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgcDJtLT5kZWZhdWx0X2FjY2Vzcyk7CisgICAgaWYgKCBsaWtlbHkoIXJj KSB8fCAhbWZuX3ZhbGlkKF9tZm4obWZuKSkgKQorICAgICAgICByZXR1cm4g cmM7CisKKyAgICAvKgorICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUg cGFydGlhbGx5IHN1Y2NlZWRlZC4gRm9yIHRoZSBmYWlsZWQgcGFydCB3ZSBu ZWVkCisgICAgICogdG8gdW5kbyB0aGUgTTJQIHVwZGF0ZSBhbmQsIG91dCBv ZiBwcmVjYXV0aW9uLCBtYXJrIHRoZSBwYWdlcyBkaXJ0eQorICAgICAqIGFn YWluLgorICAgICAqLworICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBw YWdlX29yZGVyKTsgKytpICkKKyAgICB7CisgICAgICAgIHAybS0+Z2V0X2Vu dHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkpLCAmdCwgJmEsIDAsIE5VTEwsIE5V TEwpOworICAgICAgICBpZiAoICFwMm1faXNfaG9sZSh0KSAmJiAhcDJtX2lz X3NwZWNpYWwodCkgJiYgIXAybV9pc19zaGFyZWQodCkgKQorICAgICAgICB7 CisgICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbihtZm4gKyBpLCBnZm5f bCArIGkpOworICAgICAgICAgICAgcGFnaW5nX21hcmtfcGZuX2RpcnR5KHAy bS0+ZG9tYWluLCBfcGZuKGdmbl9sICsgaSkpOworICAgICAgICB9CisgICAg fQorCisgICAgcmV0dXJuIHJjOwogfQogCiBpbnQKQEAgLTk4MCwxNSArMTAw MCw4IEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0cnVjdCBkb21haW4g KmQKIAogICAgIC8qIE5vdywgYWN0dWFsbHkgZG8gdGhlIHR3by13YXkgbWFw cGluZyAqLwogICAgIHJjID0gcDJtX3NldF9lbnRyeShwMm0sIGdmbiwgbWZu LCBwYWdlX29yZGVyLCB0LCBwMm0tPmRlZmF1bHRfYWNjZXNzKTsKLSAgICBp ZiAoIHJjID09IDAgKQorICAgIGlmICggbGlrZWx5KCFyYykgKQogICAgIHsK LSNpZmRlZiBDT05GSUdfSFZNCi0gICAgICAgIHBvZF9sb2NrKHAybSk7Ci0g ICAgICAgIHAybS0+cG9kLmVudHJ5X2NvdW50IC09IHBvZF9jb3VudDsKLSAg ICAgICAgQlVHX09OKHAybS0+cG9kLmVudHJ5X2NvdW50IDwgMCk7Ci0gICAg ICAgIHBvZF91bmxvY2socDJtKTsKLSNlbmRpZgotCiAgICAgICAgIGlmICgg IXAybV9pc19ncmFudCh0KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGZv ciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBwYWdlX29yZGVyKTsgaSsrICkKQEAg LTk5Niw2ICsxMDA5LDQ0IEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0 cnVjdCBkb21haW4gKmQKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBnZm5feChnZm5fYWRkKGdmbiwgaSkpKTsKICAgICAgICAgfQogICAg IH0KKyAgICBlbHNlCisgICAgeworICAgICAgICAvKgorICAgICAgICAgKiBU aGUgb3BlcmF0aW9uIG1heSBoYXZlIHBhcnRpYWxseSBzdWNjZWVkZWQuIEZv ciB0aGUgc3VjY2Vzc2Z1bCBwYXJ0CisgICAgICAgICAqIHdlIG5lZWQgdG8g dXBkYXRlIE0yUCBhbmQgZGlydHkgc3RhdGUsIHdoaWxlIGZvciB0aGUgZmFp bGVkIHBhcnQgd2UKKyAgICAgICAgICogbWF5IG5lZWQgdG8gYWRqdXN0IFBv RCBzdGF0cyBhcyB3ZWxsIGFzIHVuZG8gdGhlIGVhcmxpZXIgTTJQIHVwZGF0 ZS4KKyAgICAgICAgICovCisgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDFV TCA8PCBwYWdlX29yZGVyKTsgKytpICkKKyAgICAgICAgeworICAgICAgICAg ICAgb21mbiA9IHAybS0+Z2V0X2VudHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkp LCAmb3QsICZhLCAwLCBOVUxMLCBOVUxMKTsKKyAgICAgICAgICAgIGlmICgg cDJtX2lzX3BvZChvdCkgKQorICAgICAgICAgICAgeworICAgICAgICAgICAg ICAgIEJVR19PTighcG9kX2NvdW50KTsKKyAgICAgICAgICAgICAgICAtLXBv ZF9jb3VudDsKKyAgICAgICAgICAgIH0KKyAgICAgICAgICAgIGVsc2UgaWYg KCBtZm5fZXEob21mbiwgbWZuX2FkZChtZm4sIGkpKSAmJiBvdCA9PSB0ICYm CisgICAgICAgICAgICAgICAgICAgICAgYSA9PSBwMm0tPmRlZmF1bHRfYWNj ZXNzICYmICFwMm1faXNfZ3JhbnQodCkgKQorICAgICAgICAgICAgeworICAg ICAgICAgICAgICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94KG9tZm4pLCBn Zm5feChnZm4pICsgaSk7CisgICAgICAgICAgICAgICAgcGFnaW5nX21hcmtf cGZuX2RpcnR5KGQsIF9wZm4oZ2ZuX3goZ2ZuKSArIGkpKTsKKyAgICAgICAg ICAgIH0KKyAgICAgICAgICAgIGVsc2UgaWYgKCBwMm1faXNfcmFtKG90KSAm JiAhcDJtX2lzX3BhZ2VkKG90KSApCisgICAgICAgICAgICB7CisgICAgICAg ICAgICAgICAgQVNTRVJUKG1mbl92YWxpZChvbWZuKSk7CisgICAgICAgICAg ICAgICAgc2V0X2dwZm5fZnJvbV9tZm4obWZuX3gob21mbiksIGdmbl94KGdm bikgKyBpKTsKKyAgICAgICAgICAgIH0KKyAgICAgICAgfQorICAgIH0KKwor I2lmZGVmIENPTkZJR19IVk0KKyAgICBpZiAoIHBvZF9jb3VudCApCisgICAg eworICAgICAgICBwb2RfbG9jayhwMm0pOworICAgICAgICBwMm0tPnBvZC5l bnRyeV9jb3VudCAtPSBwb2RfY291bnQ7CisgICAgICAgIEJVR19PTihwMm0t PnBvZC5lbnRyeV9jb3VudCA8IDApOworICAgICAgICBwb2RfdW5sb2NrKHAy bSk7CisgICAgfQorI2VuZGlmCiAKICBvdXQ6CiAgICAgcDJtX3VubG9jayhw Mm0pOwpAQCAtMTI3OCw2ICsxMzI5LDQ5IEBAIHN0YXRpYyBpbnQgc2V0X3R5 cGVkX3AybV9lbnRyeShzdHJ1Y3QgZG8KICAgICAgICAgZG9tYWluX2NyYXNo KGQpOwogICAgICAgICByZXR1cm4gLUVQRVJNOwogICAgIH0KKworICAgIFAy TV9ERUJVRygic2V0ICVkICVseCAlbHhcbiIsIGdmbl9wMm10LCBnZm5fbCwg bWZuX3gobWZuKSk7CisgICAgcmMgPSBwMm1fc2V0X2VudHJ5KHAybSwgZ2Zu LCBtZm4sIG9yZGVyLCBnZm5fcDJtdCwgYWNjZXNzKTsKKyAgICBpZiAoIHVu bGlrZWx5KHJjKSApCisgICAgeworICAgICAgICBnZHByaW50ayhYRU5MT0df RVJSLCAicDJtX3NldF9lbnRyeTogJSNseDoldSAtPiAlZCAoMHglIlBSSV9t Zm4iKVxuIiwKKyAgICAgICAgICAgICAgICAgZ2ZuX2wsIG9yZGVyLCByYywg bWZuX3gobWZuKSk7CisKKyAgICAgICAgLyoKKyAgICAgICAgICogVGhlIG9w ZXJhdGlvbiBtYXkgaGF2ZSBwYXJ0aWFsbHkgc3VjY2VlZGVkLiBGb3IgdGhl IHN1Y2Nlc3NmdWwgcGFydAorICAgICAgICAgKiB3ZSBuZWVkIHRvIHVwZGF0 ZSBQb0Qgc3RhdHMsIE0yUCwgYW5kIGRpcnR5IHN0YXRlLgorICAgICAgICAg Ki8KKyAgICAgICAgaWYgKCBvcmRlciAhPSBQQUdFX09SREVSXzRLICkKKyAg ICAgICAgeworICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBpOworCisgICAg ICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgb3JkZXIpOyArK2kg KQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHAybV90eXBlX3Qg dDsKKyAgICAgICAgICAgICAgICBtZm5fdCBjbWZuID0gcDJtLT5nZXRfZW50 cnkocDJtLCBnZm5fYWRkKGdmbiwgaSksICZ0LCAmYSwgMCwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTlVMTCwgTlVM TCk7CisKKyAgICAgICAgICAgICAgICBpZiAoICFtZm5fZXEoY21mbiwgbWZu X2FkZChtZm4sIGkpKSB8fCB0ICE9IGdmbl9wMm10IHx8CisgICAgICAgICAg ICAgICAgICAgICBhICE9IGFjY2VzcyApCisgICAgICAgICAgICAgICAgICAg IGNvbnRpbnVlOworCisgICAgICAgICAgICAgICAgaWYgKCBwMm1faXNfcmFt KG90KSApCisgICAgICAgICAgICAgICAgeworICAgICAgICAgICAgICAgICAg ICBBU1NFUlQobWZuX3ZhbGlkKG1mbl9hZGQob21mbiwgaSkpKTsKKyAgICAg ICAgICAgICAgICAgICAgc2V0X2dwZm5fZnJvbV9tZm4obWZuX3gob21mbikg KyBpLCBJTlZBTElEX00yUF9FTlRSWSk7CisgICAgICAgICAgICAgICAgfQor I2lmZGVmIENPTkZJR19IVk0KKyAgICAgICAgICAgICAgICBlbHNlIGlmICgg cDJtX2lzX3BvZChvdCkgKQorICAgICAgICAgICAgICAgIHsKKyAgICAgICAg ICAgICAgICAgICAgcG9kX2xvY2socDJtKTsKKyAgICAgICAgICAgICAgICAg ICAgQlVHX09OKCFwMm0tPnBvZC5lbnRyeV9jb3VudCk7CisgICAgICAgICAg ICAgICAgICAgIC0tcDJtLT5wb2QuZW50cnlfY291bnQ7CisgICAgICAgICAg ICAgICAgICAgIHBvZF91bmxvY2socDJtKTsKKyAgICAgICAgICAgICAgICB9 CisjZW5kaWYKKyAgICAgICAgICAgIH0KKyAgICAgICAgfQorICAgIH0KICAg ICBlbHNlIGlmICggcDJtX2lzX3JhbShvdCkgKQogICAgIHsKICAgICAgICAg dW5zaWduZWQgbG9uZyBpOwpAQCAtMTI4OCwxMiArMTM4Miw2IEBAIHN0YXRp YyBpbnQgc2V0X3R5cGVkX3AybV9lbnRyeShzdHJ1Y3QgZG8KICAgICAgICAg ICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94KG9tZm4pICsgaSwgSU5WQUxJ RF9NMlBfRU5UUlkpOwogICAgICAgICB9CiAgICAgfQotCi0gICAgUDJNX0RF QlVHKCJzZXQgJWQgJWx4ICVseFxuIiwgZ2ZuX3AybXQsIGdmbl9sLCBtZm5f eChtZm4pKTsKLSAgICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIG1m biwgb3JkZXIsIGdmbl9wMm10LCBhY2Nlc3MpOwotICAgIGlmICggcmMgKQot ICAgICAgICBnZHByaW50ayhYRU5MT0dfRVJSLCAicDJtX3NldF9lbnRyeTog JSNseDoldSAtPiAlZCAoMHglIlBSSV9tZm4iKVxuIiwKLSAgICAgICAgICAg ICAgICAgZ2ZuX2wsIG9yZGVyLCByYywgbWZuX3gobWZuKSk7CiAjaWZkZWYg Q09ORklHX0hWTQogICAgIGVsc2UgaWYgKCBwMm1faXNfcG9kKG90KSApCiAg ICAgewo= --=separator Content-Type: application/octet-stream; name="xsa389-4.13.patch" Content-Disposition: attachment; filename="xsa389-4.13.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUDJNOiBkZWFsIHdpdGggcGFydGlhbCBzdWNjZXNzIG9mIHAybV9z ZXRfZW50cnkoKQoKTTJQIGFuZCBQb0Qgc3RhdHMgbmVlZCB0byByZW1haW4g aW4gc3luYyB3aXRoIFAyTTsgaWYgYW4gdXBkYXRlIHN1Y2NlZWRzCm9ubHkg cGFydGlhbGx5LCByZXNwZWN0aXZlIGFkanVzdG1lbnRzIG5lZWQgdG8gYmUg bWFkZS4gSWYgdXBkYXRlcyBnZXQKbWFkZSBiZWZvcmUgdGhlIGNhbGwsIHRo ZXkgbWF5IGFsc28gbmVlZCB1bmRvaW5nIHVwb24gY29tcGxldGUgZmFpbHVy ZQooaS5lLiBpbmNsdWRpbmcgdGhlIHNpbmdsZS1wYWdlIGNhc2UpLgoKTG9n LWRpcnR5IHN0YXRlIHdvdWxkIGJldHRlciBhbHNvIGJlIGtlcHQgaW4gc3lu Yy4KCk5vdGUgdGhhdCB0aGUgY2hhbmdlIHRvIHNldF90eXBlZF9wMm1fZW50 cnkoKSBtYXkgbm90IGJlIHN0cmljdGx5Cm5lY2Vzc2FyeSAoZHVlIHRvIHRo ZSBvcmRlciByZXN0cmljdGlvbiBlbmZvcmNlZCBuZWFyIHRoZSB0b3Agb2Yg dGhlCmZ1bmN0aW9uKSwgYnV0IGlzIGJlaW5nIGtlcHQgaGVyZSB0byBiZSBv biB0aGUgc2FmZSBzaWRlLgoKVGhpcyBpcyBDVkUtMjAyMS0yODcwNSBhbmQg Q1ZFLTIwMjEtMjg3MDkgLyBYU0EtMzg5LgoKU2lnbmVkLW9mZi1ieTogSmFu IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9n ZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3Ay bS5jCkBAIC03ODEsNiArNzgxLDcgQEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVj dCBwMm1fZG9tYWluICpwMm0sCiAgICAgZ2ZuX3QgZ2ZuID0gX2dmbihnZm5f bCk7CiAgICAgcDJtX3R5cGVfdCB0OwogICAgIHAybV9hY2Nlc3NfdCBhOwor ICAgIGludCByYzsKIAogICAgIC8qIElPTU1VIGZvciBQViBndWVzdHMgaXMg aGFuZGxlZCBpbiBnZXRfcGFnZV90eXBlKCkgYW5kIHB1dF9wYWdlKCkuICov CiAgICAgaWYgKCAhcGFnaW5nX21vZGVfdHJhbnNsYXRlKHAybS0+ZG9tYWlu KSApCkBAIC04MTIsOCArODEzLDI3IEBAIHAybV9yZW1vdmVfcGFnZShzdHJ1 Y3QgcDJtX2RvbWFpbiAqcDJtLAogICAgICAgICAgICAgICAgIHNldF9ncGZu X2Zyb21fbWZuKG1mbitpLCBJTlZBTElEX00yUF9FTlRSWSk7CiAgICAgICAg IH0KICAgICB9Ci0gICAgcmV0dXJuIHAybV9zZXRfZW50cnkocDJtLCBnZm4s IElOVkFMSURfTUZOLCBwYWdlX29yZGVyLCBwMm1faW52YWxpZCwKLSAgICAg ICAgICAgICAgICAgICAgICAgICBwMm0tPmRlZmF1bHRfYWNjZXNzKTsKKyAg ICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIElOVkFMSURfTUZOLCBw YWdlX29yZGVyLCBwMm1faW52YWxpZCwKKyAgICAgICAgICAgICAgICAgICAg ICAgcDJtLT5kZWZhdWx0X2FjY2Vzcyk7CisgICAgaWYgKCBsaWtlbHkoIXJj KSB8fCAhbWZuX3ZhbGlkKF9tZm4obWZuKSkgKQorICAgICAgICByZXR1cm4g cmM7CisKKyAgICAvKgorICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUg cGFydGlhbGx5IHN1Y2NlZWRlZC4gRm9yIHRoZSBmYWlsZWQgcGFydCB3ZSBu ZWVkCisgICAgICogdG8gdW5kbyB0aGUgTTJQIHVwZGF0ZSBhbmQsIG91dCBv ZiBwcmVjYXV0aW9uLCBtYXJrIHRoZSBwYWdlcyBkaXJ0eQorICAgICAqIGFn YWluLgorICAgICAqLworICAgIGZvciAoIGkgPSAwOyBpIDwgKDFVTCA8PCBw YWdlX29yZGVyKTsgKytpICkKKyAgICB7CisgICAgICAgIHAybS0+Z2V0X2Vu dHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkpLCAmdCwgJmEsIDAsIE5VTEwsIE5V TEwpOworICAgICAgICBpZiAoICFwMm1faXNfaG9sZSh0KSAmJiAhcDJtX2lz X3NwZWNpYWwodCkgJiYgIXAybV9pc19zaGFyZWQodCkgKQorICAgICAgICB7 CisgICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbihtZm4gKyBpLCBnZm5f bCArIGkpOworICAgICAgICAgICAgcGFnaW5nX21hcmtfcGZuX2RpcnR5KHAy bS0+ZG9tYWluLCBfcGZuKGdmbl9sICsgaSkpOworICAgICAgICB9CisgICAg fQorCisgICAgcmV0dXJuIHJjOwogfQogCiBpbnQKQEAgLTEwMDIsMTMgKzEw MjIsOCBAQCBndWVzdF9waHlzbWFwX2FkZF9lbnRyeShzdHJ1Y3QgZG9tYWlu ICpkCiAKICAgICAvKiBOb3csIGFjdHVhbGx5IGRvIHRoZSB0d28td2F5IG1h cHBpbmcgKi8KICAgICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIG1m biwgcGFnZV9vcmRlciwgdCwgcDJtLT5kZWZhdWx0X2FjY2Vzcyk7Ci0gICAg aWYgKCByYyA9PSAwICkKKyAgICBpZiAoIGxpa2VseSghcmMpICkKICAgICB7 Ci0gICAgICAgIHBvZF9sb2NrKHAybSk7Ci0gICAgICAgIHAybS0+cG9kLmVu dHJ5X2NvdW50IC09IHBvZF9jb3VudDsKLSAgICAgICAgQlVHX09OKHAybS0+ cG9kLmVudHJ5X2NvdW50IDwgMCk7Ci0gICAgICAgIHBvZF91bmxvY2socDJt KTsKLQogICAgICAgICBpZiAoICFwMm1faXNfZ3JhbnQodCkgKQogICAgICAg ICB7CiAgICAgICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgcGFn ZV9vcmRlcik7IGkrKyApCkBAIC0xMDE2LDYgKzEwMzEsNDIgQEAgZ3Vlc3Rf cGh5c21hcF9hZGRfZW50cnkoc3RydWN0IGRvbWFpbiAqZAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGdmbl94KGdmbl9hZGQoZ2ZuLCBp KSkpOwogICAgICAgICB9CiAgICAgfQorICAgIGVsc2UKKyAgICB7CisgICAg ICAgIC8qCisgICAgICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUgcGFy dGlhbGx5IHN1Y2NlZWRlZC4gRm9yIHRoZSBzdWNjZXNzZnVsIHBhcnQKKyAg ICAgICAgICogd2UgbmVlZCB0byB1cGRhdGUgTTJQIGFuZCBkaXJ0eSBzdGF0 ZSwgd2hpbGUgZm9yIHRoZSBmYWlsZWQgcGFydCB3ZQorICAgICAgICAgKiBt YXkgbmVlZCB0byBhZGp1c3QgUG9EIHN0YXRzIGFzIHdlbGwgYXMgdW5kbyB0 aGUgZWFybGllciBNMlAgdXBkYXRlLgorICAgICAgICAgKi8KKyAgICAgICAg Zm9yICggaSA9IDA7IGkgPCAoMVVMIDw8IHBhZ2Vfb3JkZXIpOyArK2kgKQor ICAgICAgICB7CisgICAgICAgICAgICBvbWZuID0gcDJtLT5nZXRfZW50cnko cDJtLCBnZm5fYWRkKGdmbiwgaSksICZvdCwgJmEsIDAsIE5VTEwsIE5VTEwp OworICAgICAgICAgICAgaWYgKCBwMm1faXNfcG9kKG90KSApCisgICAgICAg ICAgICB7CisgICAgICAgICAgICAgICAgQlVHX09OKCFwb2RfY291bnQpOwor ICAgICAgICAgICAgICAgIC0tcG9kX2NvdW50OworICAgICAgICAgICAgfQor ICAgICAgICAgICAgZWxzZSBpZiAoIG1mbl9lcShvbWZuLCBtZm5fYWRkKG1m biwgaSkpICYmIG90ID09IHQgJiYKKyAgICAgICAgICAgICAgICAgICAgICBh ID09IHAybS0+ZGVmYXVsdF9hY2Nlc3MgJiYgIXAybV9pc19ncmFudCh0KSAp CisgICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgc2V0X2dwZm5fZnJv bV9tZm4obWZuX3gob21mbiksIGdmbl94KGdmbikgKyBpKTsKKyAgICAgICAg ICAgICAgICBwYWdpbmdfbWFya19wZm5fZGlydHkoZCwgX3BmbihnZm5feChn Zm4pICsgaSkpOworICAgICAgICAgICAgfQorICAgICAgICAgICAgZWxzZSBp ZiAoIHAybV9pc19yYW0ob3QpICYmICFwMm1faXNfcGFnZWQob3QpICkKKyAg ICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBBU1NFUlQobWZuX3ZhbGlk KG9tZm4pKTsKKyAgICAgICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbiht Zm5feChvbWZuKSwgZ2ZuX3goZ2ZuKSArIGkpOworICAgICAgICAgICAgfQor ICAgICAgICB9CisgICAgfQorCisgICAgaWYgKCBwb2RfY291bnQgKQorICAg IHsKKyAgICAgICAgcG9kX2xvY2socDJtKTsKKyAgICAgICAgcDJtLT5wb2Qu ZW50cnlfY291bnQgLT0gcG9kX2NvdW50OworICAgICAgICBCVUdfT04ocDJt LT5wb2QuZW50cnlfY291bnQgPCAwKTsKKyAgICAgICAgcG9kX3VubG9jayhw Mm0pOworICAgIH0KIAogIG91dDoKICAgICBwMm1fdW5sb2NrKHAybSk7CkBA IC0xMzA3LDYgKzEzNTgsNDkgQEAgc3RhdGljIGludCBzZXRfdHlwZWRfcDJt X2VudHJ5KHN0cnVjdCBkbwogICAgICAgICAgICAgcmV0dXJuIDA7CiAgICAg ICAgIH0KICAgICB9CisKKyAgICBQMk1fREVCVUcoInNldCAlZCAlbHggJWx4 XG4iLCBnZm5fcDJtdCwgZ2ZuX2wsIG1mbl94KG1mbikpOworICAgIHJjID0g cDJtX3NldF9lbnRyeShwMm0sIGdmbiwgbWZuLCBvcmRlciwgZ2ZuX3AybXQs IGFjY2Vzcyk7CisgICAgaWYgKCB1bmxpa2VseShyYykgKQorICAgIHsKKyAg ICAgICAgZ2RwcmludGsoWEVOTE9HX0VSUiwgInAybV9zZXRfZW50cnk6ICUj bHg6JXUgLT4gJWQgKDB4JSJQUklfbWZuIilcbiIsCisgICAgICAgICAgICAg ICAgIGdmbl9sLCBvcmRlciwgcmMsIG1mbl94KG1mbikpOworCisgICAgICAg IC8qCisgICAgICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUgcGFydGlh bGx5IHN1Y2NlZWRlZC4gRm9yIHRoZSBzdWNjZXNzZnVsIHBhcnQKKyAgICAg ICAgICogd2UgbmVlZCB0byB1cGRhdGUgUG9EIHN0YXRzLCBNMlAsIGFuZCBk aXJ0eSBzdGF0ZS4KKyAgICAgICAgICovCisgICAgICAgIGlmICggb3JkZXIg IT0gUEFHRV9PUkRFUl80SyApCisgICAgICAgIHsKKyAgICAgICAgICAgIHVu c2lnbmVkIGxvbmcgaTsKKworICAgICAgICAgICAgZm9yICggaSA9IDA7IGkg PCAoMVVMIDw8IG9yZGVyKTsgKytpICkKKyAgICAgICAgICAgIHsKKyAgICAg ICAgICAgICAgICBwMm1fdHlwZV90IHQ7CisgICAgICAgICAgICAgICAgbWZu X3QgY21mbiA9IHAybS0+Z2V0X2VudHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkp LCAmdCwgJmEsIDAsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE5VTEwsIE5VTEwpOworCisgICAgICAgICAgICAgICAg aWYgKCAhbWZuX2VxKGNtZm4sIG1mbl9hZGQobWZuLCBpKSkgfHwgdCAhPSBn Zm5fcDJtdCB8fAorICAgICAgICAgICAgICAgICAgICAgYSAhPSBhY2Nlc3Mg KQorICAgICAgICAgICAgICAgICAgICBjb250aW51ZTsKKworICAgICAgICAg ICAgICAgIGlmICggcDJtX2lzX3JhbShvdCkgKQorICAgICAgICAgICAgICAg IHsKKyAgICAgICAgICAgICAgICAgICAgQVNTRVJUKG1mbl92YWxpZChtZm5f YWRkKG9tZm4sIGkpKSk7CisgICAgICAgICAgICAgICAgICAgIHNldF9ncGZu X2Zyb21fbWZuKG1mbl94KG9tZm4pICsgaSwgSU5WQUxJRF9NMlBfRU5UUlkp OworICAgICAgICAgICAgICAgIH0KKyNpZmRlZiBDT05GSUdfSFZNCisgICAg ICAgICAgICAgICAgZWxzZSBpZiAoIHAybV9pc19wb2Qob3QpICkKKyAgICAg ICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgICAgIHBvZF9sb2NrKHAy bSk7CisgICAgICAgICAgICAgICAgICAgIEJVR19PTighcDJtLT5wb2QuZW50 cnlfY291bnQpOworICAgICAgICAgICAgICAgICAgICAtLXAybS0+cG9kLmVu dHJ5X2NvdW50OworICAgICAgICAgICAgICAgICAgICBwb2RfdW5sb2NrKHAy bSk7CisgICAgICAgICAgICAgICAgfQorI2VuZGlmCisgICAgICAgICAgICB9 CisgICAgICAgIH0KKyAgICB9CiAgICAgZWxzZSBpZiAoIHAybV9pc19yYW0o b3QpICkKICAgICB7CiAgICAgICAgIHVuc2lnbmVkIGxvbmcgaTsKQEAgLTEz MTcsMTIgKzE0MTEsNiBAQCBzdGF0aWMgaW50IHNldF90eXBlZF9wMm1fZW50 cnkoc3RydWN0IGRvCiAgICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbiht Zm5feChvbWZuKSArIGksIElOVkFMSURfTTJQX0VOVFJZKTsKICAgICAgICAg fQogICAgIH0KLQotICAgIFAyTV9ERUJVRygic2V0ICVkICVseCAlbHhcbiIs IGdmbl9wMm10LCBnZm5fbCwgbWZuX3gobWZuKSk7Ci0gICAgcmMgPSBwMm1f c2V0X2VudHJ5KHAybSwgZ2ZuLCBtZm4sIG9yZGVyLCBnZm5fcDJtdCwgYWNj ZXNzKTsKLSAgICBpZiAoIHJjICkKLSAgICAgICAgZ2RwcmludGsoWEVOTE9H X0VSUiwgInAybV9zZXRfZW50cnk6ICUjbHg6JXUgLT4gJWQgKDB4JSJQUklf bWZuIilcbiIsCi0gICAgICAgICAgICAgICAgIGdmbl9sLCBvcmRlciwgcmMs IG1mbl94KG1mbikpOwogI2lmZGVmIENPTkZJR19IVk0KICAgICBlbHNlIGlm ICggcDJtX2lzX3BvZChvdCkgKQogICAgIHsK --=separator Content-Type: application/octet-stream; name="xsa389-4.14.patch" Content-Disposition: attachment; filename="xsa389-4.14.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUDJNOiBkZWFsIHdpdGggcGFydGlhbCBzdWNjZXNzIG9mIHAybV9z ZXRfZW50cnkoKQoKTTJQIGFuZCBQb0Qgc3RhdHMgbmVlZCB0byByZW1haW4g aW4gc3luYyB3aXRoIFAyTTsgaWYgYW4gdXBkYXRlIHN1Y2NlZWRzCm9ubHkg cGFydGlhbGx5LCByZXNwZWN0aXZlIGFkanVzdG1lbnRzIG5lZWQgdG8gYmUg bWFkZS4gSWYgdXBkYXRlcyBnZXQKbWFkZSBiZWZvcmUgdGhlIGNhbGwsIHRo ZXkgbWF5IGFsc28gbmVlZCB1bmRvaW5nIHVwb24gY29tcGxldGUgZmFpbHVy ZQooaS5lLiBpbmNsdWRpbmcgdGhlIHNpbmdsZS1wYWdlIGNhc2UpLgoKTG9n LWRpcnR5IHN0YXRlIHdvdWxkIGJldHRlciBhbHNvIGJlIGtlcHQgaW4gc3lu Yy4KCk5vdGUgdGhhdCB0aGUgY2hhbmdlIHRvIHNldF90eXBlZF9wMm1fZW50 cnkoKSBtYXkgbm90IGJlIHN0cmljdGx5Cm5lY2Vzc2FyeSAoZHVlIHRvIHRo ZSBvcmRlciByZXN0cmljdGlvbiBlbmZvcmNlZCBuZWFyIHRoZSB0b3Agb2Yg dGhlCmZ1bmN0aW9uKSwgYnV0IGlzIGJlaW5nIGtlcHQgaGVyZSB0byBiZSBv biB0aGUgc2FmZSBzaWRlLgoKVGhpcyBpcyBDVkUtMjAyMS0yODcwNSBhbmQg Q1ZFLTIwMjEtMjg3MDkgLyBYU0EtMzg5LgoKU2lnbmVkLW9mZi1ieTogSmFu IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9n ZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3Ay bS5jCkBAIC03ODAsNiArNzgwLDcgQEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVj dCBwMm1fZG9tYWluICpwMm0sCiAgICAgdW5zaWduZWQgbG9uZyBpOwogICAg IHAybV90eXBlX3QgdDsKICAgICBwMm1fYWNjZXNzX3QgYTsKKyAgICBpbnQg cmM7CiAKICAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQg aW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlm ICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShwMm0tPmRvbWFpbikgKQpAQCAt ODEzLDggKzgxNCwyNyBAQCBwMm1fcmVtb3ZlX3BhZ2Uoc3RydWN0IHAybV9k b21haW4gKnAybSwKICAgICAgICAgfQogICAgIH0KIAotICAgIHJldHVybiBw Mm1fc2V0X2VudHJ5KHAybSwgZ2ZuLCBJTlZBTElEX01GTiwgcGFnZV9vcmRl ciwgcDJtX2ludmFsaWQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgcDJt LT5kZWZhdWx0X2FjY2Vzcyk7CisgICAgcmMgPSBwMm1fc2V0X2VudHJ5KHAy bSwgZ2ZuLCBJTlZBTElEX01GTiwgcGFnZV9vcmRlciwgcDJtX2ludmFsaWQs CisgICAgICAgICAgICAgICAgICAgICAgIHAybS0+ZGVmYXVsdF9hY2Nlc3Mp OworICAgIGlmICggbGlrZWx5KCFyYykgfHwgIW1mbl92YWxpZChtZm4pICkK KyAgICAgICAgcmV0dXJuIHJjOworCisgICAgLyoKKyAgICAgKiBUaGUgb3Bl cmF0aW9uIG1heSBoYXZlIHBhcnRpYWxseSBzdWNjZWVkZWQuIEZvciB0aGUg ZmFpbGVkIHBhcnQgd2UgbmVlZAorICAgICAqIHRvIHVuZG8gdGhlIE0yUCB1 cGRhdGUgYW5kLCBvdXQgb2YgcHJlY2F1dGlvbiwgbWFyayB0aGUgcGFnZXMg ZGlydHkKKyAgICAgKiBhZ2Fpbi4KKyAgICAgKi8KKyAgICBmb3IgKCBpID0g MDsgaSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7ICsraSApCisgICAgeworICAg ICAgICBwMm0tPmdldF9lbnRyeShwMm0sIGdmbl9hZGQoZ2ZuLCBpKSwgJnQs ICZhLCAwLCBOVUxMLCBOVUxMKTsKKyAgICAgICAgaWYgKCAhcDJtX2lzX2hv bGUodCkgJiYgIXAybV9pc19zcGVjaWFsKHQpICYmICFwMm1faXNfc2hhcmVk KHQpICkKKyAgICAgICAgeworICAgICAgICAgICAgc2V0X2dwZm5fZnJvbV9t Zm4obWZuX3gobWZuKSArIGksIGdmbl94KGdmbikgKyBpKTsKKyAgICAgICAg ICAgIHBhZ2luZ19tYXJrX3Bmbl9kaXJ0eShwMm0tPmRvbWFpbiwgX3Bmbihn Zm5feChnZm4pICsgaSkpOworICAgICAgICB9CisgICAgfQorCisgICAgcmV0 dXJuIHJjOwogfQogCiBpbnQKQEAgLTEwMDMsMTMgKzEwMjMsOCBAQCBndWVz dF9waHlzbWFwX2FkZF9lbnRyeShzdHJ1Y3QgZG9tYWluICpkCiAKICAgICAv KiBOb3csIGFjdHVhbGx5IGRvIHRoZSB0d28td2F5IG1hcHBpbmcgKi8KICAg ICByYyA9IHAybV9zZXRfZW50cnkocDJtLCBnZm4sIG1mbiwgcGFnZV9vcmRl ciwgdCwgcDJtLT5kZWZhdWx0X2FjY2Vzcyk7Ci0gICAgaWYgKCByYyA9PSAw ICkKKyAgICBpZiAoIGxpa2VseSghcmMpICkKICAgICB7Ci0gICAgICAgIHBv ZF9sb2NrKHAybSk7Ci0gICAgICAgIHAybS0+cG9kLmVudHJ5X2NvdW50IC09 IHBvZF9jb3VudDsKLSAgICAgICAgQlVHX09OKHAybS0+cG9kLmVudHJ5X2Nv dW50IDwgMCk7Ci0gICAgICAgIHBvZF91bmxvY2socDJtKTsKLQogICAgICAg ICBpZiAoICFwMm1faXNfZ3JhbnQodCkgKQogICAgICAgICB7CiAgICAgICAg ICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgcGFnZV9vcmRlcik7IGkr KyApCkBAIC0xMDE3LDYgKzEwMzIsNDIgQEAgZ3Vlc3RfcGh5c21hcF9hZGRf ZW50cnkoc3RydWN0IGRvbWFpbiAqZAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGdmbl94KGdmbl9hZGQoZ2ZuLCBpKSkpOwogICAgICAg ICB9CiAgICAgfQorICAgIGVsc2UKKyAgICB7CisgICAgICAgIC8qCisgICAg ICAgICAqIFRoZSBvcGVyYXRpb24gbWF5IGhhdmUgcGFydGlhbGx5IHN1Y2Nl ZWRlZC4gRm9yIHRoZSBzdWNjZXNzZnVsIHBhcnQKKyAgICAgICAgICogd2Ug bmVlZCB0byB1cGRhdGUgTTJQIGFuZCBkaXJ0eSBzdGF0ZSwgd2hpbGUgZm9y IHRoZSBmYWlsZWQgcGFydCB3ZQorICAgICAgICAgKiBtYXkgbmVlZCB0byBh ZGp1c3QgUG9EIHN0YXRzIGFzIHdlbGwgYXMgdW5kbyB0aGUgZWFybGllciBN MlAgdXBkYXRlLgorICAgICAgICAgKi8KKyAgICAgICAgZm9yICggaSA9IDA7 IGkgPCAoMVVMIDw8IHBhZ2Vfb3JkZXIpOyArK2kgKQorICAgICAgICB7Cisg ICAgICAgICAgICBvbWZuID0gcDJtLT5nZXRfZW50cnkocDJtLCBnZm5fYWRk KGdmbiwgaSksICZvdCwgJmEsIDAsIE5VTEwsIE5VTEwpOworICAgICAgICAg ICAgaWYgKCBwMm1faXNfcG9kKG90KSApCisgICAgICAgICAgICB7CisgICAg ICAgICAgICAgICAgQlVHX09OKCFwb2RfY291bnQpOworICAgICAgICAgICAg ICAgIC0tcG9kX2NvdW50OworICAgICAgICAgICAgfQorICAgICAgICAgICAg ZWxzZSBpZiAoIG1mbl9lcShvbWZuLCBtZm5fYWRkKG1mbiwgaSkpICYmIG90 ID09IHQgJiYKKyAgICAgICAgICAgICAgICAgICAgICBhID09IHAybS0+ZGVm YXVsdF9hY2Nlc3MgJiYgIXAybV9pc19ncmFudCh0KSApCisgICAgICAgICAg ICB7CisgICAgICAgICAgICAgICAgc2V0X2dwZm5fZnJvbV9tZm4obWZuX3go b21mbiksIGdmbl94KGdmbikgKyBpKTsKKyAgICAgICAgICAgICAgICBwYWdp bmdfbWFya19wZm5fZGlydHkoZCwgX3BmbihnZm5feChnZm4pICsgaSkpOwor ICAgICAgICAgICAgfQorICAgICAgICAgICAgZWxzZSBpZiAoIHAybV9pc19y YW0ob3QpICYmICFwMm1faXNfcGFnZWQob3QpICkKKyAgICAgICAgICAgIHsK KyAgICAgICAgICAgICAgICBBU1NFUlQobWZuX3ZhbGlkKG9tZm4pKTsKKyAg ICAgICAgICAgICAgICBzZXRfZ3Bmbl9mcm9tX21mbihtZm5feChvbWZuKSwg Z2ZuX3goZ2ZuKSArIGkpOworICAgICAgICAgICAgfQorICAgICAgICB9Cisg ICAgfQorCisgICAgaWYgKCBwb2RfY291bnQgKQorICAgIHsKKyAgICAgICAg cG9kX2xvY2socDJtKTsKKyAgICAgICAgcDJtLT5wb2QuZW50cnlfY291bnQg LT0gcG9kX2NvdW50OworICAgICAgICBCVUdfT04ocDJtLT5wb2QuZW50cnlf Y291bnQgPCAwKTsKKyAgICAgICAgcG9kX3VubG9jayhwMm0pOworICAgIH0K IAogb3V0OgogICAgIHAybV91bmxvY2socDJtKTsKQEAgLTEzMDgsNiArMTM1 OSw0OSBAQCBzdGF0aWMgaW50IHNldF90eXBlZF9wMm1fZW50cnkoc3RydWN0 IGRvCiAgICAgICAgICAgICByZXR1cm4gMDsKICAgICAgICAgfQogICAgIH0K KworICAgIFAyTV9ERUJVRygic2V0ICVkICVseCAlbHhcbiIsIGdmbl9wMm10 LCBnZm5fbCwgbWZuX3gobWZuKSk7CisgICAgcmMgPSBwMm1fc2V0X2VudHJ5 KHAybSwgZ2ZuLCBtZm4sIG9yZGVyLCBnZm5fcDJtdCwgYWNjZXNzKTsKKyAg ICBpZiAoIHVubGlrZWx5KHJjKSApCisgICAgeworICAgICAgICBnZHByaW50 ayhYRU5MT0dfRVJSLCAicDJtX3NldF9lbnRyeTogJSNseDoldSAtPiAlZCAo MHglIlBSSV9tZm4iKVxuIiwKKyAgICAgICAgICAgICAgICAgZ2ZuX2wsIG9y ZGVyLCByYywgbWZuX3gobWZuKSk7CisKKyAgICAgICAgLyoKKyAgICAgICAg ICogVGhlIG9wZXJhdGlvbiBtYXkgaGF2ZSBwYXJ0aWFsbHkgc3VjY2VlZGVk LiBGb3IgdGhlIHN1Y2Nlc3NmdWwgcGFydAorICAgICAgICAgKiB3ZSBuZWVk IHRvIHVwZGF0ZSBQb0Qgc3RhdHMsIE0yUCwgYW5kIGRpcnR5IHN0YXRlLgor ICAgICAgICAgKi8KKyAgICAgICAgaWYgKCBvcmRlciAhPSBQQUdFX09SREVS XzRLICkKKyAgICAgICAgeworICAgICAgICAgICAgdW5zaWduZWQgbG9uZyBp OworCisgICAgICAgICAgICBmb3IgKCBpID0gMDsgaSA8ICgxVUwgPDwgb3Jk ZXIpOyArK2kgKQorICAgICAgICAgICAgeworICAgICAgICAgICAgICAgIHAy bV90eXBlX3QgdDsKKyAgICAgICAgICAgICAgICBtZm5fdCBjbWZuID0gcDJt LT5nZXRfZW50cnkocDJtLCBnZm5fYWRkKGdmbiwgaSksICZ0LCAmYSwgMCwK KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg TlVMTCwgTlVMTCk7CisKKyAgICAgICAgICAgICAgICBpZiAoICFtZm5fZXEo Y21mbiwgbWZuX2FkZChtZm4sIGkpKSB8fCB0ICE9IGdmbl9wMm10IHx8Cisg ICAgICAgICAgICAgICAgICAgICBhICE9IGFjY2VzcyApCisgICAgICAgICAg ICAgICAgICAgIGNvbnRpbnVlOworCisgICAgICAgICAgICAgICAgaWYgKCBw Mm1faXNfcmFtKG90KSApCisgICAgICAgICAgICAgICAgeworICAgICAgICAg ICAgICAgICAgICBBU1NFUlQobWZuX3ZhbGlkKG1mbl9hZGQob21mbiwgaSkp KTsKKyAgICAgICAgICAgICAgICAgICAgc2V0X2dwZm5fZnJvbV9tZm4obWZu X3gob21mbikgKyBpLCBJTlZBTElEX00yUF9FTlRSWSk7CisgICAgICAgICAg ICAgICAgfQorI2lmZGVmIENPTkZJR19IVk0KKyAgICAgICAgICAgICAgICBl bHNlIGlmICggcDJtX2lzX3BvZChvdCkgKQorICAgICAgICAgICAgICAgIHsK KyAgICAgICAgICAgICAgICAgICAgcG9kX2xvY2socDJtKTsKKyAgICAgICAg ICAgICAgICAgICAgQlVHX09OKCFwMm0tPnBvZC5lbnRyeV9jb3VudCk7Cisg ICAgICAgICAgICAgICAgICAgIC0tcDJtLT5wb2QuZW50cnlfY291bnQ7Cisg ICAgICAgICAgICAgICAgICAgIHBvZF91bmxvY2socDJtKTsKKyAgICAgICAg ICAgICAgICB9CisjZW5kaWYKKyAgICAgICAgICAgIH0KKyAgICAgICAgfQor ICAgIH0KICAgICBlbHNlIGlmICggcDJtX2lzX3JhbShvdCkgKQogICAgIHsK ICAgICAgICAgdW5zaWduZWQgbG9uZyBpOwpAQCAtMTMxOCwxMiArMTQxMiw2 IEBAIHN0YXRpYyBpbnQgc2V0X3R5cGVkX3AybV9lbnRyeShzdHJ1Y3QgZG8K ICAgICAgICAgICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94KG9tZm4pICsg aSwgSU5WQUxJRF9NMlBfRU5UUlkpOwogICAgICAgICB9CiAgICAgfQotCi0g ICAgUDJNX0RFQlVHKCJzZXQgJWQgJWx4ICVseFxuIiwgZ2ZuX3AybXQsIGdm bl9sLCBtZm5feChtZm4pKTsKLSAgICByYyA9IHAybV9zZXRfZW50cnkocDJt LCBnZm4sIG1mbiwgb3JkZXIsIGdmbl9wMm10LCBhY2Nlc3MpOwotICAgIGlm ICggcmMgKQotICAgICAgICBnZHByaW50ayhYRU5MT0dfRVJSLCAicDJtX3Nl dF9lbnRyeTogJSNseDoldSAtPiAlZCAoMHglIlBSSV9tZm4iKVxuIiwKLSAg ICAgICAgICAgICAgICAgZ2ZuX2wsIG9yZGVyLCByYywgbWZuX3gobWZuKSk7 CiAjaWZkZWYgQ09ORklHX0hWTQogICAgIGVsc2UgaWYgKCBwMm1faXNfcG9k KG90KSApCiAgICAgewo= --=separator Content-Type: application/octet-stream; name="xsa389-4.15.patch" Content-Disposition: attachment; filename="xsa389-4.15.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvUDJNOiBkZWFsIHdpdGggcGFydGlhbCBzdWNjZXNzIG9mIHAybV9z ZXRfZW50cnkoKQoKTTJQIGFuZCBQb0Qgc3RhdHMgbmVlZCB0byByZW1haW4g aW4gc3luYyB3aXRoIFAyTTsgaWYgYW4gdXBkYXRlIHN1Y2NlZWRzCm9ubHkg cGFydGlhbGx5LCByZXNwZWN0aXZlIGFkanVzdG1lbnRzIG5lZWQgdG8gYmUg bWFkZS4gSWYgdXBkYXRlcyBnZXQKbWFkZSBiZWZvcmUgdGhlIGNhbGwsIHRo ZXkgbWF5IGFsc28gbmVlZCB1bmRvaW5nIHVwb24gY29tcGxldGUgZmFpbHVy ZQooaS5lLiBpbmNsdWRpbmcgdGhlIHNpbmdsZS1wYWdlIGNhc2UpLgoKTG9n LWRpcnR5IHN0YXRlIHdvdWxkIGJldHRlciBhbHNvIGJlIGtlcHQgaW4gc3lu Yy4KCk5vdGUgdGhhdCB0aGUgY2hhbmdlIHRvIHNldF90eXBlZF9wMm1fZW50 cnkoKSBtYXkgbm90IGJlIHN0cmljdGx5Cm5lY2Vzc2FyeSAoZHVlIHRvIHRo ZSBvcmRlciByZXN0cmljdGlvbiBlbmZvcmNlZCBuZWFyIHRoZSB0b3Agb2Yg dGhlCmZ1bmN0aW9uKSwgYnV0IGlzIGJlaW5nIGtlcHQgaGVyZSB0byBiZSBv biB0aGUgc2FmZSBzaWRlLgoKVGhpcyBpcyBDVkUtMjAyMS0yODcwNSBhbmQg Q1ZFLTIwMjEtMjg3MDkgLyBYU0EtMzg5LgoKU2lnbmVkLW9mZi1ieTogSmFu IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogUm9n ZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+CgotLS0gYS94 ZW4vYXJjaC94ODYvbW0vcDJtLmMKKysrIGIveGVuL2FyY2gveDg2L21tL3Ay bS5jCkBAIC03ODQsNiArNzg0LDcgQEAgcDJtX3JlbW92ZV9wYWdlKHN0cnVj dCBwMm1fZG9tYWluICpwMm0sCiAgICAgdW5zaWduZWQgbG9uZyBpOwogICAg IHAybV90eXBlX3QgdDsKICAgICBwMm1fYWNjZXNzX3QgYTsKKyAgICBpbnQg cmM7CiAKICAgICAvKiBJT01NVSBmb3IgUFYgZ3Vlc3RzIGlzIGhhbmRsZWQg aW4gZ2V0X3BhZ2VfdHlwZSgpIGFuZCBwdXRfcGFnZSgpLiAqLwogICAgIGlm ICggIXBhZ2luZ19tb2RlX3RyYW5zbGF0ZShwMm0tPmRvbWFpbikgKQpAQCAt ODE5LDggKzgyMCwyNyBAQCBwMm1fcmVtb3ZlX3BhZ2Uoc3RydWN0IHAybV9k b21haW4gKnAybSwKIAogICAgIGlvcmVxX3JlcXVlc3RfbWFwY2FjaGVfaW52 YWxpZGF0ZShwMm0tPmRvbWFpbik7CiAKLSAgICByZXR1cm4gcDJtX3NldF9l bnRyeShwMm0sIGdmbiwgSU5WQUxJRF9NRk4sIHBhZ2Vfb3JkZXIsIHAybV9p bnZhbGlkLAotICAgICAgICAgICAgICAgICAgICAgICAgIHAybS0+ZGVmYXVs dF9hY2Nlc3MpOworICAgIHJjID0gcDJtX3NldF9lbnRyeShwMm0sIGdmbiwg SU5WQUxJRF9NRk4sIHBhZ2Vfb3JkZXIsIHAybV9pbnZhbGlkLAorICAgICAg ICAgICAgICAgICAgICAgICBwMm0tPmRlZmF1bHRfYWNjZXNzKTsKKyAgICBp ZiAoIGxpa2VseSghcmMpIHx8ICFtZm5fdmFsaWQobWZuKSApCisgICAgICAg IHJldHVybiByYzsKKworICAgIC8qCisgICAgICogVGhlIG9wZXJhdGlvbiBt YXkgaGF2ZSBwYXJ0aWFsbHkgc3VjY2VlZGVkLiBGb3IgdGhlIGZhaWxlZCBw YXJ0IHdlIG5lZWQKKyAgICAgKiB0byB1bmRvIHRoZSBNMlAgdXBkYXRlIGFu ZCwgb3V0IG9mIHByZWNhdXRpb24sIG1hcmsgdGhlIHBhZ2VzIGRpcnR5Cisg ICAgICogYWdhaW4uCisgICAgICovCisgICAgZm9yICggaSA9IDA7IGkgPCAo MVVMIDw8IHBhZ2Vfb3JkZXIpOyArK2kgKQorICAgIHsKKyAgICAgICAgcDJt LT5nZXRfZW50cnkocDJtLCBnZm5fYWRkKGdmbiwgaSksICZ0LCAmYSwgMCwg TlVMTCwgTlVMTCk7CisgICAgICAgIGlmICggIXAybV9pc19ob2xlKHQpICYm ICFwMm1faXNfc3BlY2lhbCh0KSAmJiAhcDJtX2lzX3NoYXJlZCh0KSApCisg ICAgICAgIHsKKyAgICAgICAgICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94 KG1mbikgKyBpLCBnZm5feChnZm4pICsgaSk7CisgICAgICAgICAgICBwYWdp bmdfbWFya19wZm5fZGlydHkocDJtLT5kb21haW4sIF9wZm4oZ2ZuX3goZ2Zu KSArIGkpKTsKKyAgICAgICAgfQorICAgIH0KKworICAgIHJldHVybiByYzsK IH0KIAogaW50CkBAIC0xMDA5LDEzICsxMDI5LDggQEAgZ3Vlc3RfcGh5c21h cF9hZGRfZW50cnkoc3RydWN0IGRvbWFpbiAqZAogCiAgICAgLyogTm93LCBh Y3R1YWxseSBkbyB0aGUgdHdvLXdheSBtYXBwaW5nICovCiAgICAgcmMgPSBw Mm1fc2V0X2VudHJ5KHAybSwgZ2ZuLCBtZm4sIHBhZ2Vfb3JkZXIsIHQsIHAy bS0+ZGVmYXVsdF9hY2Nlc3MpOwotICAgIGlmICggcmMgPT0gMCApCisgICAg aWYgKCBsaWtlbHkoIXJjKSApCiAgICAgewotICAgICAgICBwb2RfbG9jayhw Mm0pOwotICAgICAgICBwMm0tPnBvZC5lbnRyeV9jb3VudCAtPSBwb2RfY291 bnQ7Ci0gICAgICAgIEJVR19PTihwMm0tPnBvZC5lbnRyeV9jb3VudCA8IDAp OwotICAgICAgICBwb2RfdW5sb2NrKHAybSk7Ci0KICAgICAgICAgaWYgKCAh cDJtX2lzX2dyYW50KHQpICkKICAgICAgICAgewogICAgICAgICAgICAgZm9y ICggaSA9IDA7IGkgPCAoMVVMIDw8IHBhZ2Vfb3JkZXIpOyBpKysgKQpAQCAt MTAyMyw2ICsxMDM4LDQyIEBAIGd1ZXN0X3BoeXNtYXBfYWRkX2VudHJ5KHN0 cnVjdCBkb21haW4gKmQKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBnZm5feChnZm5fYWRkKGdmbiwgaSkpKTsKICAgICAgICAgfQogICAg IH0KKyAgICBlbHNlCisgICAgeworICAgICAgICAvKgorICAgICAgICAgKiBU aGUgb3BlcmF0aW9uIG1heSBoYXZlIHBhcnRpYWxseSBzdWNjZWVkZWQuIEZv ciB0aGUgc3VjY2Vzc2Z1bCBwYXJ0CisgICAgICAgICAqIHdlIG5lZWQgdG8g dXBkYXRlIE0yUCBhbmQgZGlydHkgc3RhdGUsIHdoaWxlIGZvciB0aGUgZmFp bGVkIHBhcnQgd2UKKyAgICAgICAgICogbWF5IG5lZWQgdG8gYWRqdXN0IFBv RCBzdGF0cyBhcyB3ZWxsIGFzIHVuZG8gdGhlIGVhcmxpZXIgTTJQIHVwZGF0 ZS4KKyAgICAgICAgICovCisgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgKDFV TCA8PCBwYWdlX29yZGVyKTsgKytpICkKKyAgICAgICAgeworICAgICAgICAg ICAgb21mbiA9IHAybS0+Z2V0X2VudHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkp LCAmb3QsICZhLCAwLCBOVUxMLCBOVUxMKTsKKyAgICAgICAgICAgIGlmICgg cDJtX2lzX3BvZChvdCkgKQorICAgICAgICAgICAgeworICAgICAgICAgICAg ICAgIEJVR19PTighcG9kX2NvdW50KTsKKyAgICAgICAgICAgICAgICAtLXBv ZF9jb3VudDsKKyAgICAgICAgICAgIH0KKyAgICAgICAgICAgIGVsc2UgaWYg KCBtZm5fZXEob21mbiwgbWZuX2FkZChtZm4sIGkpKSAmJiBvdCA9PSB0ICYm CisgICAgICAgICAgICAgICAgICAgICAgYSA9PSBwMm0tPmRlZmF1bHRfYWNj ZXNzICYmICFwMm1faXNfZ3JhbnQodCkgKQorICAgICAgICAgICAgeworICAg ICAgICAgICAgICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94KG9tZm4pLCBn Zm5feChnZm4pICsgaSk7CisgICAgICAgICAgICAgICAgcGFnaW5nX21hcmtf cGZuX2RpcnR5KGQsIF9wZm4oZ2ZuX3goZ2ZuKSArIGkpKTsKKyAgICAgICAg ICAgIH0KKyAgICAgICAgICAgIGVsc2UgaWYgKCBwMm1faXNfcmFtKG90KSAm JiAhcDJtX2lzX3BhZ2VkKG90KSApCisgICAgICAgICAgICB7CisgICAgICAg ICAgICAgICAgQVNTRVJUKG1mbl92YWxpZChvbWZuKSk7CisgICAgICAgICAg ICAgICAgc2V0X2dwZm5fZnJvbV9tZm4obWZuX3gob21mbiksIGdmbl94KGdm bikgKyBpKTsKKyAgICAgICAgICAgIH0KKyAgICAgICAgfQorICAgIH0KKwor ICAgIGlmICggcG9kX2NvdW50ICkKKyAgICB7CisgICAgICAgIHBvZF9sb2Nr KHAybSk7CisgICAgICAgIHAybS0+cG9kLmVudHJ5X2NvdW50IC09IHBvZF9j b3VudDsKKyAgICAgICAgQlVHX09OKHAybS0+cG9kLmVudHJ5X2NvdW50IDwg MCk7CisgICAgICAgIHBvZF91bmxvY2socDJtKTsKKyAgICB9CiAKIG91dDoK ICAgICBwMm1fdW5sb2NrKHAybSk7CkBAIC0xMzE0LDYgKzEzNjUsNTEgQEAg c3RhdGljIGludCBzZXRfdHlwZWRfcDJtX2VudHJ5KHN0cnVjdCBkbwogICAg ICAgICAgICAgcmV0dXJuIDA7CiAgICAgICAgIH0KICAgICB9CisKKyAgICBQ Mk1fREVCVUcoInNldCAlZCAlbHggJWx4XG4iLCBnZm5fcDJtdCwgZ2ZuX2ws IG1mbl94KG1mbikpOworICAgIHJjID0gcDJtX3NldF9lbnRyeShwMm0sIGdm biwgbWZuLCBvcmRlciwgZ2ZuX3AybXQsIGFjY2Vzcyk7CisgICAgaWYgKCB1 bmxpa2VseShyYykgKQorICAgIHsKKyAgICAgICAgZ2RwcmludGsoWEVOTE9H X0VSUiwgInAybV9zZXRfZW50cnk6ICUjbHg6JXUgLT4gJWQgKDB4JSJQUklf bWZuIilcbiIsCisgICAgICAgICAgICAgICAgIGdmbl9sLCBvcmRlciwgcmMs IG1mbl94KG1mbikpOworCisgICAgICAgIC8qCisgICAgICAgICAqIFRoZSBv cGVyYXRpb24gbWF5IGhhdmUgcGFydGlhbGx5IHN1Y2NlZWRlZC4gRm9yIHRo ZSBzdWNjZXNzZnVsIHBhcnQKKyAgICAgICAgICogd2UgbmVlZCB0byB1cGRh dGUgUG9EIHN0YXRzLCBNMlAsIGFuZCBkaXJ0eSBzdGF0ZS4KKyAgICAgICAg ICovCisgICAgICAgIGlmICggb3JkZXIgIT0gUEFHRV9PUkRFUl80SyApCisg ICAgICAgIHsKKyAgICAgICAgICAgIHVuc2lnbmVkIGxvbmcgaTsKKworICAg ICAgICAgICAgZm9yICggaSA9IDA7IGkgPCAoMVVMIDw8IG9yZGVyKTsgKytp ICkKKyAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICBwMm1fdHlwZV90 IHQ7CisgICAgICAgICAgICAgICAgbWZuX3QgY21mbiA9IHAybS0+Z2V0X2Vu dHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkpLCAmdCwgJmEsIDAsCisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5VTEwsIE5V TEwpOworCisgICAgICAgICAgICAgICAgaWYgKCAhbWZuX2VxKGNtZm4sIG1m bl9hZGQobWZuLCBpKSkgfHwgdCAhPSBnZm5fcDJtdCB8fAorICAgICAgICAg ICAgICAgICAgICAgYSAhPSBhY2Nlc3MgKQorICAgICAgICAgICAgICAgICAg ICBjb250aW51ZTsKKworICAgICAgICAgICAgICAgIGlmICggcDJtX2lzX3Jh bShvdCkgKQorICAgICAgICAgICAgICAgIHsKKyAgICAgICAgICAgICAgICAg ICAgQVNTRVJUKG1mbl92YWxpZChtZm5fYWRkKG9tZm4sIGkpKSk7CisgICAg ICAgICAgICAgICAgICAgIHNldF9ncGZuX2Zyb21fbWZuKG1mbl94KG9tZm4p ICsgaSwgSU5WQUxJRF9NMlBfRU5UUlkpOworCisgICAgICAgICAgICAgICAg ICAgIGlvcmVxX3JlcXVlc3RfbWFwY2FjaGVfaW52YWxpZGF0ZShkKTsKKyAg ICAgICAgICAgICAgICB9CisjaWZkZWYgQ09ORklHX0hWTQorICAgICAgICAg ICAgICAgIGVsc2UgaWYgKCBwMm1faXNfcG9kKG90KSApCisgICAgICAgICAg ICAgICAgeworICAgICAgICAgICAgICAgICAgICBwb2RfbG9jayhwMm0pOwor ICAgICAgICAgICAgICAgICAgICBCVUdfT04oIXAybS0+cG9kLmVudHJ5X2Nv dW50KTsKKyAgICAgICAgICAgICAgICAgICAgLS1wMm0tPnBvZC5lbnRyeV9j b3VudDsKKyAgICAgICAgICAgICAgICAgICAgcG9kX3VubG9jayhwMm0pOwor ICAgICAgICAgICAgICAgIH0KKyNlbmRpZgorICAgICAgICAgICAgfQorICAg ICAgICB9CisgICAgfQogICAgIGVsc2UgaWYgKCBwMm1faXNfcmFtKG90KSAp CiAgICAgewogICAgICAgICB1bnNpZ25lZCBsb25nIGk7CkBAIC0xMzI2LDEy ICsxNDIyLDYgQEAgc3RhdGljIGludCBzZXRfdHlwZWRfcDJtX2VudHJ5KHN0 cnVjdCBkbwogCiAgICAgICAgIGlvcmVxX3JlcXVlc3RfbWFwY2FjaGVfaW52 YWxpZGF0ZShkKTsKICAgICB9Ci0KLSAgICBQMk1fREVCVUcoInNldCAlZCAl bHggJWx4XG4iLCBnZm5fcDJtdCwgZ2ZuX2wsIG1mbl94KG1mbikpOwotICAg IHJjID0gcDJtX3NldF9lbnRyeShwMm0sIGdmbiwgbWZuLCBvcmRlciwgZ2Zu X3AybXQsIGFjY2Vzcyk7Ci0gICAgaWYgKCByYyApCi0gICAgICAgIGdkcHJp bnRrKFhFTkxPR19FUlIsICJwMm1fc2V0X2VudHJ5OiAlI2x4OiV1IC0+ICVk ICgweCUiUFJJX21mbiIpXG4iLAotICAgICAgICAgICAgICAgICBnZm5fbCwg b3JkZXIsIHJjLCBtZm5feChtZm4pKTsKICNpZmRlZiBDT05GSUdfSFZNCiAg ICAgZWxzZSBpZiAoIHAybV9pc19wb2Qob3QpICkKICAgICB7Cg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Nov 23 19:53:35 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 23 Nov 2021 19:53:35 +0000 Received: from list by lists.xenproject.org with outflank-mailman.229763.397515 (Exim 4.92) (envelope-from ) id 1mpbqF-0005lE-7q; Tue, 23 Nov 2021 19:52:35 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 229763.397515; Tue, 23 Nov 2021 19:52:35 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpbqF-0005l6-3s; Tue, 23 Nov 2021 19:52:35 +0000 Received: by outflank-mailman (input) for mailman id 229763; Tue, 23 Nov 2021 16:42:32 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mpYsJ-0001Rb-9c for xen-users@lists.xenproject.org; Tue, 23 Nov 2021 16:42:32 +0000 Received: from JPN01-TYC-obe.outbound.protection.outlook.com (mail-tycjpn01olkn2081d.outbound.protection.outlook.com [2a01:111:f403:7010::81d]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 585375e0-4c7c-11ec-a9d2-d9f7a1cc8784; Tue, 23 Nov 2021 17:42:30 +0100 (CET) Received: from OS3P286MB1995.JPNP286.PROD.OUTLOOK.COM (2603:1096:604:1a2::6) by OSZP286MB1926.JPNP286.PROD.OUTLOOK.COM (2603:1096:604:165::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4713.21; Tue, 23 Nov 2021 16:42:26 +0000 Received: from OS3P286MB1995.JPNP286.PROD.OUTLOOK.COM ([fe80::9c31:6396:f5d2:35e6]) by OS3P286MB1995.JPNP286.PROD.OUTLOOK.COM ([fe80::9c31:6396:f5d2:35e6%9]) with mapi id 15.20.4713.026; Tue, 23 Nov 2021 16:42:26 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 585375e0-4c7c-11ec-a9d2-d9f7a1cc8784 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Xv8hepK9HiIJpXHUmM8PyLuGueE8WMl3UJMyXCfDrZIlIsxh9DG7R2ibNic2q5rWsxZs7Cp1KPMlbBKndus+CRqY/Gkzujw1MSqGlLjPXTz1vP83B3o8Qlu7T+sJ8+yf558ipZWNDmWs+4cq7lqmLLcpOOsqcDWH0Dz3YIWZrxRYSEStDwRCyknQL+WhJdbX3MSVH3L9YHMvjZqH+3tEmyQic1ArisjZE0XNYm7GDrSYkmkqlHFBar6a9koPn2RW4sUNl7Fd6zrd2yTkBMGxCMJcotai4u41w9wOK49qe0wFG6lHtWzF+jHTCZWoRFPp/8nrHUAOwto0OIPXdoOFqQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eSPbEhQK+9Xj33u77w07TpQGlJPye3R/DgNg6SrashA=; b=Z7a7bq++NgspYPn3vS6itj8eGFRAi8qRzDuQzN9/dHv47KqAzHqpq8i3D5n7R+sItA6MbPhG+sjbM3Ov1HoW7daBiLclh5afqvRS2er7liI31R0O/FRDX1kG5uwhcYEf19smAnmmzDj7w1yOkef327HxcM3xW520Yri7ssfhU8PWWKkGfdxQbpugcSBK6ja87++Ybs6Juxbyj4RlJkM8/U1ihNVJbAaUy9toR/BNRWCqaTdz+ineZYtgzi82W+P9AG8ZS2PNx7OJOH5T9mZEpQLoIfAztnXdVEfnw1woLX218aaaCLBpuI9QtF3ePTEb62fY8NJbEEhnSdwNA3R+fQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eSPbEhQK+9Xj33u77w07TpQGlJPye3R/DgNg6SrashA=; b=My9+uldipaSr+xMG4q7rH2GGDzGtV5ZXmGs9G8QYjMp/TvP+jdJGkElvq186IqHsoceWUbnd+EwOG4wmQRJA+qLWUcJU06Wuz3lxXq+PSgqpCGkt+5tFCFMJK8HL6Fh/qTXvhoBkTZN/Fl2SpXeK673rnst8qMm8cEAEACuGf8pqw26MjM7Hq1mOZRjK3+xHKhCuhXWoun2+1blGemryZHvW/bxZ3N7kb5EGvaONKK/WJd2qcmOgfq1cnwOWicznCuf2gXUXmyhgC5zYhh8kZ2wIW/khigcl7O52D5V/mLGW2bLq9VXKSH/6QeyZDJhbYCmDzEDG+e5sH5GwubNP9w== From: YAN Untitled To: "xen-users@lists.xenproject.org" Subject: Does memory event support AMD CPUs now? Thread-Topic: Does memory event support AMD CPUs now? Thread-Index: AQHX4IjxEFtFn9EMQUy1pwyZOZ9+Dg== Date: Tue, 23 Nov 2021 16:42:25 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: suggested_attachment_session_id: 085c4425-8082-2e60-92e6-3712c4914660 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [YzBJJc6OUKDseRJdM/38KkPwB0aoa0qMmmfUX9AE3+A=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d5418a0e-f97f-456b-4641-08d9aea03b32 x-ms-traffictypediagnostic: OSZP286MB1926: x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: 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 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: sct-15-20-3174-20-msonline-outlook-18f16.templateTenant X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: OS3P286MB1995.JPNP286.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: d5418a0e-f97f-456b-4641-08d9aea03b32 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Nov 2021 16:42:25.9691 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSZP286MB1926 SGksCgpJIGFtIHJ1bm5pbmcgTGliVk1JIDAuMTUuMCArIFhlbiA0LjE0LjMgb24gYW4gKipBTUQg Q1BVKiouIFdoZW4gSSB3YXMgdHJ5aW5nIHRvCnJlZ2lzdGVyIGEgKiptZW1vcnkgZXZlbnQqKiBo YW5kbGVyLCBJIGdvdCB0aGUgZXJyb3IgZnJvbSBMaWJWTUkKInhjX2h2bV9zZXRfbWVtX2FjY2Vz cyBmYWlsZWQgd2l0aCBjb2RlOiAtMSIuIEJ5IGluc3BlY3RpbmcgdGhlIHNvdXJjZSBjb2RlIG9m CkxpYlZNSSwgSSBmaW5kIHRoZSBkaXJlY3QgY2F1c2UgaXMgb25lIG9mIHRoZSBsaWJ4YyBmdW5j dGlvbnMsCnhjX3NldF9tZW1fYWNjZXNzIG9yIHhjX2FsdHAybV9zZXRfbWVtX2FjY2VzcywgcmV0 dXJuZWQgZXJyb3IgY29kZSAtMS4KCkFmdGVyIHNvbWUgc2VhcmNoaW5nLCBJIGZvdW5kIHNvbWVv bmUgZWxzZSBoYXZpbmcgYSBzaW1pbGFyIHByb2JsZW0gWzFdLiBJIGFsc28Kbm90ZWQgTGliVk1J IHNheXM6Cgo+IEN1cnJlbnRseSBvbmx5IHRoZSBYZW4gSHlwZXJ2aXNvciBwcm92aWRlcyB0aGVz ZSBmZWF0dXJlcywKPiBhbmQgc29tZSBvZiB0aGVzZSBhcmUgc3BlY2lmaWNhbGx5IG9ubHkgYXZh aWxhYmxlIG9uIEludGVsIENQVXMKCkhvd2V2ZXIsIEkgY2FuJ3QgZmluZCB0aGUgZXhhY3QgY29u ZmlybWF0aW9uIGZvciB0aGUgYXZhaWxhYmlsaXR5IG9mIG1lbW9yeQpldmVudCBvbiBBTUQgQ1BV cyBmcm9tIGh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy4KCkNvdWxkIHNvbWVvbmUgcGxlYXNl IGNvbmZpcm0gdGhpcz8gQW5kIGlmIGl0IGlzIG5vdCBhdmFpbGFibGUgb24gQU1EIENQVSwgaXQg aXMKdG8gYmUgaW1wbGVtZW50ZWQgaW4gdGhlIGZ1dHVyZT8KClsxXSBodHRwczovL2dpdGh1Yi5j b20vbGlidm1pL2xpYnZtaS9wdWxsLzcwOSNkaXNjdXNzaW9uX3IzNTM3Mjk3NzcKCgpVbnRpdGxl ZCBZQU4= From xen-users-bounces@lists.xenproject.org Tue Nov 30 08:25:03 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 30 Nov 2021 08:25:03 +0000 Received: from list by lists.xenproject.org with outflank-mailman.234904.407610 (Exim 4.92) (envelope-from ) id 1mryQu-0003ca-MF; Tue, 30 Nov 2021 08:24:12 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 234904.407610; Tue, 30 Nov 2021 08:24:12 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mryQu-0003cP-I6; Tue, 30 Nov 2021 08:24:12 +0000 Received: by outflank-mailman (input) for mailman id 234904; Tue, 30 Nov 2021 08:24:11 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mryQt-0003cJ-An for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 08:24:11 +0000 Received: from portola.ca-zephyr.org (oroville.ca-zephyr.org [166.84.7.202]) by se1-gles-sth1.inumbo.com (Halon) with ESMTP id e35b65bc-51b6-11ec-976b-d102b41d0961; Tue, 30 Nov 2021 09:24:10 +0100 (CET) Received: from webmail.ca-zephyr.org (shelter-imap.ca-zephyr.internal [50.247.112.105]) by portola.ca-zephyr.org (Postfix) with ESMTP id B736140134 for ; Tue, 30 Nov 2021 03:24:07 -0500 (EST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: e35b65bc-51b6-11ec-976b-d102b41d0961 MIME-Version: 1.0 Date: Tue, 30 Nov 2021 00:24:07 -0800 From: Bill MacAllister To: xen-users@lists.xenproject.org Subject: dmidecode domu help, domu boot question User-Agent: Roundcube Webmail/1.4.11 Message-ID: <1301fa0f9915b759b29ab4ae5e1cae2f@ca-zephyr.org> X-Sender: bill@ca-zephyr.org Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit I am managing some xen systems on both Debian bullseye and Ubuntu focal. I would like dmidecode to return some useful information, but when I run dmidecode I am getting the following message: # dmidecode # dmidecode 3.2 Scanning /dev/mem for entry point. # No SMBIOS nor DMI entry point found, sorry. This works fine on physical systems. I am clearly missing something in the Xen environment. The bullseye systems are all using "bootloader = 'pygrub'" and the focal systems are 'using "type = 'pvh'". What am I missing? What should I try? In looking at the problem I decided to try "type = 'pv'" with "kernel = "/usr/lib/grub-xen/grub-x86_64.bin'" on a focal system. When I try this I get the following messages: error: file `/boot/grub/fonts/unicode.pf2` not found. error: no suitable video mode found. error: not xen image. [ grub.cfg 8.70Kib 100% 10.91Kib/s ] error: you need to load the kernel first. I am not sure how to correct this. What have I done wrong? Thanks in advance for your help, Bill -- Bill MacAllister From xen-users-bounces@lists.xenproject.org Tue Nov 30 13:54:16 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 30 Nov 2021 13:54:16 +0000 Received: from list by lists.xenproject.org with outflank-mailman.235134.407980 (Exim 4.92) (envelope-from ) id 1ms3ZV-0002f3-Dq; Tue, 30 Nov 2021 13:53:25 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 235134.407980; Tue, 30 Nov 2021 13:53:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms3ZV-0002ev-AY; Tue, 30 Nov 2021 13:53:25 +0000 Received: by outflank-mailman (input) for mailman id 235134; Tue, 30 Nov 2021 13:53:24 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms3ZU-0002ep-Aj for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 13:53:24 +0000 Received: from mail.bitfolk.com (mail.bitfolk.com [2001:ba8:1f1:f019::25]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id e0cffed3-51e4-11ec-b941-1df2895da90e; Tue, 30 Nov 2021 14:53:22 +0100 (CET) Received: from andy by mail.bitfolk.com with local (Exim 4.89) (envelope-from ) id 1ms3ZQ-0006NA-HR for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 13:53:20 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: e0cffed3-51e4-11ec-b941-1df2895da90e DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bitfolk.com ; s=alpha; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:To:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=e04ZELlakeWa51n9pu2y0YE9Sm/+4cjUID82s2PgdKI=; b=EFf8R6lmkKX8l2r4IpjzX8bljE 9TGC9cO1NOapSTYNMsmE+oUrAnRUlZRKDTBTGq5t8dO2yq+TtKw2niLfK6ydOG4rRZLrim94Km2B+ zmhuC2bWlr/x5wOoMOhL4X7USoP2/GBbkFLfT1yU2tAR80vwoIT5KgMUIKj4Kh14EddZTA5zoc2Jf UDMhU5pQoDS9/B33zJrykHrgAEe2/FyyUXBVBAKzLue7VLpUKxueL1+8LqDAtk3UU8SMROSQJgQ8C Oj+FumdyhK5ToLcpwOCwM10vs5A3Lwuw0ZqitOs6xjUmiyWiIUh3G7wiFCwZttHa9f3Ag6ACYLiyb OS1VPhoQ==; Date: Tue, 30 Nov 2021 13:53:20 +0000 From: Andy Smith To: xen-users@lists.xenproject.org Subject: Re: dmidecode domu help, domu boot question Message-ID: <20211130135320.ima7suw27gglbwjf@bitfolk.com> References: <1301fa0f9915b759b29ab4ae5e1cae2f@ca-zephyr.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1301fa0f9915b759b29ab4ae5e1cae2f@ca-zephyr.org> OpenPGP: id=BF15490B; url=http://strugglers.net/~andy/pubkey.asc X-URL: http://strugglers.net/wiki/User:Andy User-Agent: NeoMutt/20170113 (1.7.2) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: andy@strugglers.net X-SA-Exim-Scanned: No (on mail.bitfolk.com); SAEximRunCond expanded to false Hi Bill, On Tue, Nov 30, 2021 at 12:24:07AM -0800, Bill MacAllister wrote: > In looking at the problem I decided to try "type = 'pv'" with > "kernel = "/usr/lib/grub-xen/grub-x86_64.bin'" on a focal system. When > I try this I get the following messages: > > error: file `/boot/grub/fonts/unicode.pf2` not found. > error: no suitable video mode found. > error: not xen image. [ grub.cfg 8.70Kib 100% 10.91Kib/s ] > error: you need to load the kernel first. > > I am not sure how to correct this. What have I done wrong? I don't know the answer to your dmidecode question, but this bit is because you're trying to load an LZ4-compressed kernel, which pvgrub doesn't support. If you need to run PV mode guests instead of PVH mode then you can make it work by decompressing the kernel image. Here are some pointers to how to do that: https://tools.bitfolk.com/wiki/Ubuntu#No_support_for_LZ4-compressed_kernels_in_Xen_PV_mode Cheers, Andy From xen-users-bounces@lists.xenproject.org Tue Nov 30 16:15:03 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 30 Nov 2021 16:15:03 +0000 Received: from list by lists.xenproject.org with outflank-mailman.235132.408304 (Exim 4.92) (envelope-from ) id 1ms5m5-0008LO-Qk; Tue, 30 Nov 2021 16:14:33 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 235132.408304; Tue, 30 Nov 2021 16:14:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms5m5-0008LG-MM; Tue, 30 Nov 2021 16:14:33 +0000 Received: by outflank-mailman (input) for mailman id 235132; Tue, 30 Nov 2021 13:52:18 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms3YQ-0002bM-C0 for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 13:52:18 +0000 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id b99aef8d-51e4-11ec-976b-d102b41d0961; Tue, 30 Nov 2021 14:52:16 +0100 (CET) Received: from mail-ed1-f71.google.com (mail-ed1-f71.google.com [209.85.208.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-498-oCXlgSjIOkqnGYhmlBylMg-1; Tue, 30 Nov 2021 08:52:13 -0500 Received: by mail-ed1-f71.google.com with SMTP id c1-20020aa7c741000000b003e7bf1da4bcso16905906eds.21 for ; Tue, 30 Nov 2021 05:52:12 -0800 (PST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: b99aef8d-51e4-11ec-976b-d102b41d0961 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1638280334; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type; bh=xTygmKErpOJ3srrDga8wz647R5qS4DywdExZKaZnCLs=; b=Tm+25gBgOcydQe5TMgIFB7AHZ9Pph/yG85bPQqh/0OzBWDPsMfRVecWIOZPl9F+WTUY6rm r9NHqCa0B5cCeKnlVJaYvHLT/LR5MhzkQMTyYvH1iQJ5J+GQ99msPTEd+NMp3kRIkuZP3L 5hUjsN1F9DD8eL6S3Ch7jB14bwkdVe8= X-MC-Unique: oCXlgSjIOkqnGYhmlBylMg-1 X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=xTygmKErpOJ3srrDga8wz647R5qS4DywdExZKaZnCLs=; b=a9ARE4QBlaa5U6zvkDrj4HFBMV3I6+B3nyCNNkIQoaiWoAl9q9tSB9ghz+9xTlIXG/ 2W09bjsr3qwnmyhpYlNRUydDE3bDnDj2fgbe5TYVEMexdYa/6pmllUA9h5vqNfTGfOGR EOCzhHLSHOXcibODtiYT1MpiorUA553Bjp2ena7MdzENsA8Db4vkz7ctbAHVJQr/PNeX xWhDqlm+4ntRoeognkBHW7qJdfchlRnZ9tLJsskDONFx5C7gCKmXj/8bWkEpHwkYh2fA m45fXteJl+V89g8Eu4hbOJr5Ac1wW7fsynsxsOoTWRM/nYyeAE8up7lsBzQhirEsRkwC 6PIQ== X-Gm-Message-State: AOAM533rt/CdBPux3nX14Ks+ZjLXgawvPo7hMJRa9a0KRgRr1vG+J/gW oXkF7kSMCB93HUTc0uuxZluhsOu39tqNpnGkp4Qr+OyEkSK2bbgwOK2Awn6a7VHQh2k/+hx1Dqa c5YSntFZrcXmv6km4+M7xH+ysuz3VnDqZHgIGL89sxLM= X-Received: by 2002:a17:907:6e1c:: with SMTP id sd28mr68973418ejc.28.1638280331234; Tue, 30 Nov 2021 05:52:11 -0800 (PST) X-Google-Smtp-Source: ABdhPJxK1vq5WqCrFZCX3HnW5vbdWvN3QFExdIidWSH3Pa60jLOhf7onRTt0gvL+0K2uul6/bzfzzshm85LYkAFdB3s= X-Received: by 2002:a17:907:6e1c:: with SMTP id sd28mr68973378ejc.28.1638280330948; Tue, 30 Nov 2021 05:52:10 -0800 (PST) MIME-Version: 1.0 From: Piotr Kliczewski Date: Tue, 30 Nov 2021 14:51:59 +0100 Message-ID: Subject: [FOSDEM] [CFP] Virtualization & IaaS Devroom To: xen-users@lists.xenproject.org Cc: Tal Nisan Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=pkliczew@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: multipart/alternative; boundary="0000000000002b4b5c05d201dd2d" --0000000000002b4b5c05d201dd2d Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable We are excited to announce that the call for proposals is now open for the Virtualization & IaaS devroom at the upcoming FOSDEM 2022, to be hosted virtually on February 5th 2022. This year will mark FOSDEM=E2=80=99s 22nd anniversary as one of the longest= -running free and open source software developer events, attracting thousands of developers and users from all over the world. Due to Covid-19, FOSDEM will be held virtually this year on February 5th & 6th, 2022. About the Devroom The Virtualization & IaaS devroom will feature session topics such as open source hypervisors and virtual machine managers such as Xen Project, KVM, bhyve, and VirtualBox, and Infrastructure-as-a-Service projects such as KubeVirt, Apache CloudStack, Foreman, OpenStack, oVirt, QEMU and OpenNebula= . This devroom will host presentations that focus on topics of shared interest, such as KVM; libvirt; shared storage; virtualized networking; cloud security; clustering and high availability; interfacing with multiple hypervisors; hyperconverged deployments; and scaling across hundreds or thousands of servers. Presentations in this devroom will be aimed at users or developers working on these platforms who are looking to collaborate and improve shared infrastructure or solve common problems. We seek topics that encourage dialog between projects and continued work post-FOSDEM. Important Dates Submission deadline: 20th of December Acceptance notifications: 25th of December Final schedule announcement: 31st of December Recorded presentations upload deadline: 15th of January Devroom: 6th February 2022 Submit Your Proposal All submissions must be made via the Pentabarf event planning site[1]. If you have not used Pentabarf before, you will need to create an account. If you submitted proposals for FOSDEM in previous years, you can use your existing account. After creating the account, select Create Event to start the submission process. Make sure to select Virtualization and IaaS devroom from the Track list. Please fill out all the required fields, and provide a meaningful abstract and description of your proposed session. Submission Guidelines We expect more proposals than we can possibly accept, so it is vitally important that you submit your proposal on or before the deadline. Late submissions are unlikely to be considered. All presentation slots are 30 minutes, with 20 minutes planned for presentations, and 10 minutes for Q&A. All presentations will need to be pre-recorded and put into our system at least a couple of weeks before the event. The presentations should be uploaded by 15th of January and made available under Creative Commons licenses. In the Submission notes field, please indicate that you agree that your presentation will be licensed under the CC-By-SA-4.0 or CC-By-4.0 license and that you agree to have your presentation recorded. For example: "If my presentation is accepted for FOSDEM, I hereby agree to license all recordings, slides, and other associated materials under the Creative Commons Attribution Share-Alike 4.0 International License. Sincerely, ." In the Submission notes field, please also confirm that if your talk is accepted, you will be able to attend the virtual FOSDEM event for the Q&A. We will not consider proposals from prospective speakers who are unsure whether they will be able to attend the FOSDEM virtual event. If you are experiencing problems with Pentabarf, the proposal submission interface, or have other questions, you can email our devroom mailing list[2] and we will try to help you. Code of Conduct Following the release of the updated code of conduct for FOSDEM, we'd like to remind all speakers and attendees that all of the presentations and discussions in our devroom are held under the guidelines set in the CoC and we expect attendees, speakers, and volunteers to follow the CoC at all times. If you submit a proposal and it is accepted, you will be required to confirm that you accept the FOSDEM CoC. If you have any questions about the CoC or wish to have one of the devroom organizers review your presentation slides or any other content for CoC compliance, please email us and we will do our best to assist you. Call for Volunteers We are also looking for volunteers to help run the devroom. We need assistance with helping speakers to record the presentation as well as helping with streaming and chat moderation for the devroom. Please contact devroom mailing list [2] for more information. Questions? If you have any questions about this devroom, please send your questions to our devroom mailing list. You can also subscribe to the list to receive updates about important dates, session announcements, and to connect with other attendees. See you all at FOSDEM! [1] https://penta.fosdem.org/submission/FOSDEM22 [2] iaas-virt-devroom at lists.fosdem.org --0000000000002b4b5c05d201dd2d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

We are excited to announce that the call for proposals is now open for th= e Virtualization & IaaS devroom at the upcoming FOSDEM 2022, to be host= ed virtually on February 5th 2022.


This year will mark FOSDEM=E2=80=99= s 22nd anniversary as one of the longest-running free and open source softw= are developer events, attracting thousands of developers and users from all= over the world. Due to Covid-19, FOSDEM will be held virtually this year o= n February 5th & 6th, 2022.


About the Devroom


The Virtualizat= ion & IaaS devroom will feature session topics such as open source hype= rvisors and virtual machine managers such as Xen Project, KVM, bhyve, and V= irtualBox, and Infrastructure-as-a-Service projects such as KubeVirt, Apach= e CloudStack, Foreman, OpenStack, oVirt, QEMU and OpenNebula.

This dev= room will host presentations that focus on topics of shared interest, such = as KVM; libvirt; shared storage; virtualized networking; cloud security; cl= ustering and high availability; interfacing with multiple hypervisors; hype= rconverged deployments; and scaling across hundreds or thousands of servers= .


Presentations in this devroom will be aimed at users or developers w= orking on these platforms who are looking to collaborate and improve shared= infrastructure or solve common problems. We seek topics that encourage dia= log between projects and continued work post-FOSDEM.


Important Dates=


Submission deadline: 20th of December

Acceptance notifications: 25t= h of December

Final schedule announcement: 31st of December

Recorded pres= entations upload deadline: 15th of January

Devroom: 6th February 2022


Submit Your Proposal


All submissions must be made via the Pentabarf= event planning site[1]. If you have not used Pentabarf before, you will ne= ed to create an account. If you submitted proposals for FOSDEM in previous = years, you can use your existing account.


After creating the account, = select Create Event to start the submission process. Make sure to select Vi= rtualization and IaaS devroom from the Track list. Please fill out all the = required fields, and provide a meaningful abstract and description of your = proposed session.


Submission Guidelines


We expect more proposals = than we can possibly accept, so it is vitally important that you submit you= r proposal on or before the deadline. Late submissions are unlikely to be c= onsidered.


All presentation slots are 30 minutes, with 20 minutes plan= ned for presentations, and 10 minutes for Q&A.


All presentations w= ill need to be pre-recorded and put into our system at least a couple of we= eks before the event.

The presentations should be uploaded by 15th of Janu= ary = and made available under Creative

Commons licenses. In the Submission note= s field, please indicate that you agree that your presentation will be lice= nsed under the CC-By-SA-4.0 or CC-By-4.0 license and that you agree to have= your presentation recorded. For example:


"If my presentation is = accepted for FOSDEM, I hereby agree to license all recordings, slides, and = other associated materials under the Creative Commons Attribution Share-Ali= ke 4.0 International License. Sincerely, <NAME>."


=

In the Su= bmission notes field, please also confirm that if your talk is accepted, yo= u will be able to attend the virtual FOSDEM event for the Q&A. We will = not consider proposals from prospective speakers who are unsure whether the= y will be able to attend the FOSDEM virtual event.


If you are experien= cing problems with Pentabarf, the proposal submission interface, or have ot= her questions, you can email our devroom mailing list[2] and we will try to= help you.



Code of Conduct


Following the release of the updat= ed code of conduct for FOSDEM, we'd like to remind all speakers and att= endees that all of the presentations and discussions in our devroom are hel= d under the guidelines set in the CoC and we expect attendees, speakers, an= d volunteers to follow the CoC at all times.


If you submit a proposal = and it is accepted, you will be required to confirm that you accept the FOS= DEM CoC. If you have any questions about the CoC or wish to have one of the= devroom organizers review your presentation slides or any other content fo= r CoC compliance, please email us and we will do our best to assist you.


Call for Volunteers


We are also looking for volunteers to help run = the devroom. We need assistance with helping speakers to record the present= ation as well as helping with streaming and chat moderation for the devroom= . Please contact devroom mailing list [2] for more information.

<= br>

Questi= ons?


If you have any questions about this devroom, please send your qu= estions to our devroom mailing list. You can also subscribe to the list to = receive updates about important dates, session announcements, and to connec= t with other attendees.


See you all at FOSDEM!


[1] https://penta.fosdem.org/submission= /FOSDEM22

[2] iaas-virt-devroom at<= /span> lists= .fosdem.org

--0000000000002b4b5c05d201dd2d-- From xen-users-bounces@lists.xenproject.org Tue Nov 30 16:15:04 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 30 Nov 2021 16:15:04 +0000 Received: from list by lists.xenproject.org with outflank-mailman.234889.408321 (Exim 4.92) (envelope-from ) id 1ms5mP-0000e0-7s; Tue, 30 Nov 2021 16:14:53 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 234889.408321; Tue, 30 Nov 2021 16:14:53 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms5mP-0000dq-47; Tue, 30 Nov 2021 16:14:53 +0000 Received: by outflank-mailman (input) for mailman id 234889; Tue, 30 Nov 2021 07:30:52 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1mrxbH-0005xX-UJ for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 07:30:51 +0000 Received: from mail-il1-x12c.google.com (mail-il1-x12c.google.com [2607:f8b0:4864:20::12c]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 70e89b60-51af-11ec-b941-1df2895da90e; Tue, 30 Nov 2021 08:30:51 +0100 (CET) Received: by mail-il1-x12c.google.com with SMTP id t8so20230344ilu.8 for ; Mon, 29 Nov 2021 23:30:50 -0800 (PST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 70e89b60-51af-11ec-b941-1df2895da90e DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cimware-in.20210112.gappssmtp.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=gzn/hUKFpyfdgLV20dVnyZ27s24eXO2mm28CFHGMIyA=; b=DE/2xCJatl3o+JcKddl+WRzIqK3PyaFfQG1FYe1fPefL5V+WTemyk+/sjYqRmybqjw Q7brax9xYwyoiGB5dYSYvVOd2DyKFdyj0w6QW59WoIAWY8qEtths0yQdeRl9csxrU79E 407Rp8Cr5D3bXiNNzGYF9scD5JyZtTiorIxBsvT9nuf/5lmWcc1kEbz7IlnB0N7MRqXe fxXeisK6xETKCSsPl35Baa5lVGMB6n+iB9a6Z01AFteg5+16LqP2W/87WwnpIjHjO9rG rtM/+kosN2yz5DssUKkrLUQRULPXsfP7SClnLlkDcfe1g2Wcugz4TfRxywlhRv7rnZe0 mZeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=gzn/hUKFpyfdgLV20dVnyZ27s24eXO2mm28CFHGMIyA=; b=bFYmlDGt5dPjk9dWCxC5G3rIQWJLUHDd9meQJoraq+FluaxbvenOrY9wDK6PnpdAew fQnCsAKfQtfHDXLXUR8FerRdAxHIDZBxLqwpYPSOvTTrAnd0qhYCx1OXLt+9Xxz6aiwg weRSUGnZvEZ+2sqh8YiL94hEVW7JhREWS0UpeiisFPk3XNgxDyemE/6v43oIIF8/nMbt VatVPMnCUmf2Fm6XFA5prki0HASwn+DppoGqcrDr4hk9FZtiwy8Nxwlo/8UlmPGylu9i VZRqdwHQqSgDdz8I9aMw2Q59+SLAF5sJh7yxDg52p2psQLxIb6JPUJol7j7E3PGoB8A0 gMXQ== X-Gm-Message-State: AOAM531Mga5b+E5sM5TApBbsgCrnk4wawhz103hhIeGnH/WKsmulcoP5 N5zeilPZme+62JwiEkYbVd3mkzjxfYmr4xFLbakW/x5yOezl X-Google-Smtp-Source: ABdhPJwaD+UFd6a3KFrQx2dBZ+OkWmv4Wt6eP8WwwHokjXMFk3K/nM3QGIbrXPH9AM4jtpDYCuIJcpKzsCzrgRLrxrs= X-Received: by 2002:a05:6e02:1a2d:: with SMTP id g13mr60691956ile.134.1638257449170; Mon, 29 Nov 2021 23:30:49 -0800 (PST) MIME-Version: 1.0 From: Sai Kiran Kumar Reddy Date: Tue, 30 Nov 2021 13:00:38 +0530 Message-ID: Subject: Xen on LFS To: xen-users@lists.xenproject.org Content-Type: multipart/alternative; boundary="0000000000004f0c6d05d1fc893f" --0000000000004f0c6d05d1fc893f Content-Type: text/plain; charset="UTF-8" Hi, I am Sai Kiran. I am currently working on installing xen on Linux From Scratch(LFS) system. One of the dependencies of xen is "xorg" package. This package is present in Beyond Linux From Scratch(BLFS) manual. But, there are a lot of packages to be installed. I am not sure if all these packages are required for Xen. Also, is xorg a must, to build and install xen? Kindly help me out here. Thanks in advance, for the support. Regards, Sai Kiran --0000000000004f0c6d05d1fc893f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

I am Sai Kiran. I am currently work= ing on installing xen on Linux From Scratch(LFS) system. One of the depende= ncies of xen is "xorg" package. This package is present=C2=A0in= =C2=A0Beyond=C2=A0Linux From Scratch(BLFS= )=C2=A0manual. But, there are a lot of packages to be installed. I am n= ot sure if all these packages are required for Xen. Also, is xorg a must, t= o build and install xen?=C2=A0

Kindly help me out = here. Thanks in advance, for the support.

Regards,=
Sai Kiran
--0000000000004f0c6d05d1fc893f-- From xen-users-bounces@lists.xenproject.org Tue Nov 30 16:48:12 2021 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 30 Nov 2021 16:48:12 +0000 Received: from list by lists.xenproject.org with outflank-mailman.235370.408371 (Exim 4.92) (envelope-from ) id 1ms6ID-00072t-Oa; Tue, 30 Nov 2021 16:47:45 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 235370.408371; Tue, 30 Nov 2021 16:47:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms6ID-00072l-LW; Tue, 30 Nov 2021 16:47:45 +0000 Received: by outflank-mailman (input) for mailman id 235370; Tue, 30 Nov 2021 16:47:43 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1ms6IB-00072f-Ie for xen-users@lists.xenproject.org; Tue, 30 Nov 2021 16:47:43 +0000 Received: from portola.ca-zephyr.org (oroville.ca-zephyr.org [166.84.7.202]) by se1-gles-sth1.inumbo.com (Halon) with ESMTP id 3b3dd65e-51fd-11ec-976b-d102b41d0961; Tue, 30 Nov 2021 17:47:41 +0100 (CET) Received: from webmail.ca-zephyr.org (shelter-imap.ca-zephyr.internal [50.247.112.105]) by portola.ca-zephyr.org (Postfix) with ESMTP id 45B8F40134; Tue, 30 Nov 2021 11:47:39 -0500 (EST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 3b3dd65e-51fd-11ec-976b-d102b41d0961 MIME-Version: 1.0 Date: Tue, 30 Nov 2021 08:47:38 -0800 From: Bill MacAllister To: Andy Smith Cc: xen-users@lists.xenproject.org Subject: Re: dmidecode domu help, domu boot question In-Reply-To: <20211130135320.ima7suw27gglbwjf@bitfolk.com> References: <1301fa0f9915b759b29ab4ae5e1cae2f@ca-zephyr.org> <20211130135320.ima7suw27gglbwjf@bitfolk.com> User-Agent: Roundcube Webmail/1.4.11 Message-ID: <6f008db2adebc722e7d4e7ac1d6a833c@ca-zephyr.org> X-Sender: bill@ca-zephyr.org Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Hi Andy, On 2021-11-30 05:53, Andy Smith wrote: > Hi Bill, > I don't know the answer to your dmidecode question, but this bit is > because you're trying to load an LZ4-compressed kernel, which pvgrub > doesn't support. > > If you need to run PV mode guests instead of PVH mode then you can > make it work by decompressing the kernel image. Here are some > pointers to how to do that: > > > https://tools.bitfolk.com/wiki/Ubuntu#No_support_for_LZ4-compressed_kernels_in_Xen_PV_mode I should have remembered this. Thanks for reminding me. Bill -- Bill MacAllister