From xen-users-bounces@lists.xenproject.org Tue Jul 14 12:06:16 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 14 Jul 2026 12:06:16 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1362231.1614138 (Exim 4.92) (envelope-from ) id 1wjbtE-0003OV-OS; Tue, 14 Jul 2026 12:05:32 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1362231.1614138; Tue, 14 Jul 2026 12:05:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wjbtE-0003Nn-JN; Tue, 14 Jul 2026 12:05:32 +0000 Received: by outflank-mailman (input) for mailman id 1362231; Tue, 14 Jul 2026 12:05:30 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wjbtC-00032f-2S; Tue, 14 Jul 2026 12:05:30 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wjbtA-00H7B6-TZ; Tue, 14 Jul 2026 14:05:28 +0200 Received: from [10.42.69.10] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a562604-e002-0a2a0a5209dd-0a2a450ae336-24 for ; Tue, 14 Jul 2026 14:05:28 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-4011c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a562607-f2d2-0a2a450a0019-6882d725d2a2-3 for ; Tue, 14 Jul 2026 14:05:28 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wjbt5-005zKb-0G; Tue, 14 Jul 2026 12:05:22 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wjbt4-001ipR-2I; Tue, 14 Jul 2026 12:05:22 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 498 v2 (CVE-2026-42491) - XAPI: Missing TLS verification in some SDKs Message-Id: Date: Tue, 14 Jul 2026 12:05:22 +0000 X-purgate-ID: tlsNG-4011c0/1784030728-514C7F5C-E3E2B5CD/0/0 X-purgate-type: clean X-purgate-size: 65343 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-42491 / XSA-498 version 2 XAPI: Missing TLS verification in some SDKs UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= XAPI provides SDKs; bindings for the API in various programming languages. These are artefacts from a build of XAPI, intended for integration into 3rd party products. In all SDKs, there is a main RPC connection to the XAPI host. TLS for this connection is verified properly, or delegated to the 3rd party logic, in all language bindings. There are also certain HTTP handlers which open a separate connection to the XAPI host. For two of the language bindings only (C# and Powershell), TLS verification is improperly implemented on these connections. IMPACT ====== A malicious actor able to perform a Man-in-the-Middle attack on the network communication between a program using one of the affected SDKs and a host running XAPI may be able to intercept the communication and: * Steal a session token, allowing for hijack of the administrative session, or * Read or tamper with exported/imported disk images, host backups, RRD (performance) data and patches/updates in transit. VULNERABLE SYSTEMS ================== This issues has been present in the XAPI C# and Powershell SDKs since TLS support was added. MITIGATION ========== There are no known mitigations. CREDITS ======= This issue was discovered by the Veeam Team. RESOLUTION ========== Applying the attached patch to XAPI master will generate fixed SDKs. 3rd party programs using vulnerable SDKs must be rebuilt against the fixed SDKs. xsa498.patch XAPI master $ sha256sum xsa498* f2db9e16561edc59b920e0ed95cce3a19147abc6eb2b8500bd73b87dc285d4ba xsa498.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpWJfMMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZgYEH/jqpKmvSl2oVn5v8Wdk3KZfOxW67ejyA5NpUyW1i MOwFQyA7gCrxwDaHN62u0aabs4kJNErOzeuVPCtElIyQN+bpB/5lR6nxnxQaQM8K Ddhtg6rFQfP121+XGYjtbUOr5fvDkLu290XExow5XWKNmk3P1B3HKImPtkmzGpN6 z9FceAqzGX9N7eCPw3waMGsy50/n8L9cLvkyjPHpfb5beTq0AVQFJVD38P8humk0 xY9r+Iq0aGCxyyEZkHJsDaQfuKo3OYGPVoEEB5YiXPS+1P72lRrwkSFL+qJqAPLn pDAqAGx1wRYvM6zITDnqbwnBYQ7je3UNZlMVEJj2dHWDOLs= =3Knk -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa498.patch" Content-Disposition: attachment; filename="xsa498.patch" Content-Transfer-Encoding: base64 RnJvbSA3MzY4MzQ2NmIyN2Q3NTMyNDU1ZjMwMjUyMzQ2NjEwOWEwM2U4NDMy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBLb25zdGFudGluYSBD aHJlbW1vdSA8a29uc3RhbnRpbmEuY2hyZW1tb3VAY2l0cml4LmNvbT4KRGF0 ZTogRnJpLCAzIEp1bCAyMDI2IDE0OjU1OjI2ICswMTAwClN1YmplY3Q6IFtQ QVRDSF0gQ29ycmVjdGVkIGNlcnRpZmljYXRlIHZhbGlkYXRpb24gZm9yIEhU VFAgY2FsbHMKClRoaXMgaXMgWFNBLTQ5OCAvIENWRS0yMDI2LTQyNDkxLgoK U2lnbmVkLW9mZi1ieTogS29uc3RhbnRpbmEgQ2hyZW1tb3UgPGtvbnN0YW50 aW5hLmNocmVtbW91QGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBNb2hhbW1l ZCBaYWhpZCA8bW9oYW1tZWQuemFoaWRAY2l0cml4LmNvbT4KCmRpZmYgLS1n aXQgYS9vY2FtbC9zZGstZ2VuL2NzaGFycC9hdXRvZ2VuL3NyYy9IVFRQLmNz IGIvb2NhbWwvc2RrLWdlbi9jc2hhcnAvYXV0b2dlbi9zcmMvSFRUUC5jcwpp bmRleCBjOWIwN2ViYTkuLjQxNjA5MTAxYSAxMDA2NDQKLS0tIGEvb2NhbWwv c2RrLWdlbi9jc2hhcnAvYXV0b2dlbi9zcmMvSFRUUC5jcworKysgYi9vY2Ft bC9zZGstZ2VuL2NzaGFycC9hdXRvZ2VuL3NyYy9IVFRQLmNzCkBAIC0yMDMs NyArMjAzLDcgQEAgbmFtZXNwYWNlIFhlbkFQSQogICAgICAgICAvLy8gUmVh ZCBIVFRQIGhlYWRlcnMsIGRvaW5nIGFueSByZWRpcmVjdHMgYXMgbmVjZXNz YXJ5DQogICAgICAgICAvLy8gPC9zdW1tYXJ5Pg0KICAgICAgICAgLy8vIDxy ZXR1cm5zPlRydWUgaWYgYSByZWRpcmVjdCBoYXMgb2NjdXJyZWQgLSBoZWFk ZXJzIHdpbGwgbmVlZCB0byBiZSByZXNlbnQuPC9yZXR1cm5zPg0KLSAgICAg ICAgcHJpdmF0ZSBzdGF0aWMgYm9vbCBSZWFkSHR0cEhlYWRlcnMocmVmIFN0 cmVhbSBzdHJlYW0sIElXZWJQcm94eSBwcm94eSwgYm9vbCBub2RlbGF5LCBp bnQgdGltZW91dF9tcywgTGlzdDxzdHJpbmc+IGhlYWRlcnMgPSBudWxsKQ0K KyAgICAgICAgcHJpdmF0ZSBzdGF0aWMgYm9vbCBSZWFkSHR0cEhlYWRlcnMo cmVmIFN0cmVhbSBzdHJlYW0sIElXZWJQcm94eSBwcm94eSwgUmVtb3RlQ2Vy dGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIGJvb2wgbm9k ZWxheSwgaW50IHRpbWVvdXRNcywgTGlzdDxzdHJpbmc+IGhlYWRlcnMgPSBu dWxsKQ0KICAgICAgICAgew0KICAgICAgICAgICAgIC8vIHJlYWQgaGVhZGVy cy9maWVsZHMNCiAgICAgICAgICAgICBzdHJpbmcgbGluZSA9IFJlYWRMaW5l KHN0cmVhbSk7DQpAQCAtMjc3LDcgKzI3Nyw3IEBAIG5hbWVzcGFjZSBYZW5B UEkKICAgICAgICAgICAgICAgICAgICAgc3RyaW5nIHVybCA9IGhlYWRlciA9 PSBudWxsID8gIiIgOiBoZWFkZXIuU3Vic3RyaW5nKDkpLlRyaW0oKTsNCiAg ICAgICAgICAgICAgICAgICAgIFVyaSByZWRpcmVjdCA9IG5ldyBVcmkodXJs KTsNCiAgICAgICAgICAgICAgICAgICAgIHN0cmVhbS5DbG9zZSgpOw0KLSAg ICAgICAgICAgICAgICAgICAgc3RyZWFtID0gQ29ubmVjdFN0cmVhbShyZWRp cmVjdCwgcHJveHksIG5vZGVsYXksIHRpbWVvdXRfbXMpOw0KKyAgICAgICAg ICAgICAgICAgICAgc3RyZWFtID0gQ29ubmVjdFN0cmVhbShyZWRpcmVjdCwg cHJveHksIGNhbGxiYWNrLCBub2RlbGF5LCB0aW1lb3V0TXMpOw0KICAgICAg ICAgICAgICAgICAgICAgcmV0dXJuIHRydWU7IC8vIGhlYWRlcnMgbmVlZCB0 byBiZSBzZW50IGFnYWluDQogDQogICAgICAgICAgICAgICAgIGRlZmF1bHQ6 DQpAQCAtMzA5LDIwICszMDksNiBAQCBuYW1lc3BhY2UgWGVuQVBJCiAgICAg ICAgICAgICByZXR1cm4gYml0cy5MZW5ndGggPCAyID8gMCA6IEludDMyLlBh cnNlKGJpdHNbMV0pOw0KICAgICAgICAgfQ0KIA0KLSAgICAgICAgcHVibGlj IHN0YXRpYyBib29sIFVzZVNTTChVcmkgdXJpKQ0KLSAgICAgICAgew0KLSAg ICAgICAgICAgIHJldHVybiB1cmkuU2NoZW1lID09ICJodHRwcyIgfHwgdXJp LlBvcnQgPT0gREVGQVVMVF9IVFRQU19QT1JUOw0KLSAgICAgICAgfQ0KLQ0K LSAgICAgICAgcHJpdmF0ZSBzdGF0aWMgYm9vbCBWYWxpZGF0ZVNlcnZlckNl cnRpZmljYXRlKA0KLSAgICAgICAgICAgICAgb2JqZWN0IHNlbmRlciwNCi0g ICAgICAgICAgICAgIFg1MDlDZXJ0aWZpY2F0ZSBjZXJ0aWZpY2F0ZSwNCi0g ICAgICAgICAgICAgIFg1MDlDaGFpbiBjaGFpbiwNCi0gICAgICAgICAgICAg IFNzbFBvbGljeUVycm9ycyBzc2xQb2xpY3lFcnJvcnMpDQotICAgICAgICB7 DQotICAgICAgICAgICAgcmV0dXJuIHRydWU7DQotICAgICAgICB9DQotDQog ICAgICAgICAvLy8gPHN1bW1hcnk+DQogICAgICAgICAvLy8gUmV0dXJucyBh IHNlY3VyZSBNRDUgaGFzaCBvZiB0aGUgZ2l2ZW4gaW5wdXQgc3RyaW5nLg0K ICAgICAgICAgLy8vIDwvc3VtbWFyeT4NCkBAIC00NzUsNDUgKzQ2MSwyNCBA QCBuYW1lc3BhY2UgWGVuQVBJCiAgICAgICAgIC8vLyA8L3N1bW1hcnk+DQog ICAgICAgICAvLy8gPHBhcmFtIG5hbWU9InVyaSI+PC9wYXJhbT4NCiAgICAg ICAgIC8vLyA8cGFyYW0gbmFtZT0icHJveHkiPjwvcGFyYW0+DQorICAgICAg ICAvLy8gPHBhcmFtIG5hbWU9ImNhbGxiYWNrIj48L3BhcmFtPg0KICAgICAg ICAgLy8vIDxwYXJhbSBuYW1lPSJub2RlbGF5Ij48L3BhcmFtPg0KICAgICAg ICAgLy8vIDxwYXJhbSBuYW1lPSJ0aW1lb3V0TXMiPlRpbWVvdXQsIGluIG1z LiAwIGZvciBubyB0aW1lb3V0LjwvcGFyYW0+DQotICAgICAgICBwdWJsaWMg c3RhdGljIFN0cmVhbSBDb25uZWN0U3RyZWFtKFVyaSB1cmksIElXZWJQcm94 eSBwcm94eSwgYm9vbCBub2RlbGF5LCBpbnQgdGltZW91dE1zKQ0KKyAgICAg ICAgcHJpdmF0ZSBzdGF0aWMgU3RyZWFtIENvbm5lY3RTdHJlYW0oVXJpIHVy aSwgSVdlYlByb3h5IHByb3h5LCBSZW1vdGVDZXJ0aWZpY2F0ZVZhbGlkYXRp b25DYWxsYmFjayBjYWxsYmFjaywgYm9vbCBub2RlbGF5LCBpbnQgdGltZW91 dE1zKQ0KICAgICAgICAgew0KICAgICAgICAgICAgIGlmIChwcm94eSBpcyBJ TW9ja1dlYlByb3h5IG1vY2tQcm94eSkNCiAgICAgICAgICAgICAgICAgcmV0 dXJuIG1vY2tQcm94eS5HZXRTdHJlYW0odXJpKTsNCiANCi0gICAgICAgICAg ICBTdHJlYW0gc3RyZWFtOw0KLSAgICAgICAgICAgIGJvb2wgdXNlUHJveHkg PSBwcm94eSAhPSBudWxsICYmICFwcm94eS5Jc0J5cGFzc2VkKHVyaSk7DQot DQotICAgICAgICAgICAgaWYgKHVzZVByb3h5KQ0KLSAgICAgICAgICAgIHsN Ci0gICAgICAgICAgICAgICAgVXJpIHByb3h5VVJJID0gcHJveHkuR2V0UHJv eHkodXJpKTsNCi0gICAgICAgICAgICAgICAgc3RyZWFtID0gQ29ubmVjdFNv Y2tldChwcm94eVVSSSwgbm9kZWxheSwgdGltZW91dE1zKTsNCi0gICAgICAg ICAgICB9DQotICAgICAgICAgICAgZWxzZQ0KLSAgICAgICAgICAgIHsNCi0g ICAgICAgICAgICAgICAgc3RyZWFtID0gQ29ubmVjdFNvY2tldCh1cmksIG5v ZGVsYXksIHRpbWVvdXRNcyk7DQotICAgICAgICAgICAgfQ0KKyAgICAgICAg ICAgIFN0cmVhbSBzdHJlYW0gPSBudWxsOw0KIA0KICAgICAgICAgICAgIHRy eQ0KICAgICAgICAgICAgIHsNCi0gICAgICAgICAgICAgICAgaWYgKHVzZVBy b3h5KQ0KLSAgICAgICAgICAgICAgICB7DQotICAgICAgICAgICAgICAgICAg ICBzdHJpbmcgbGluZSA9ICQiQ09OTkVDVCB7dXJpLkhvc3R9Ont1cmkuUG9y dH0gSFRUUC8xLjAiOw0KLSAgICAgICAgICAgICAgICAgICAgV3JpdGVMaW5l KGxpbmUsIHN0cmVhbSk7DQotICAgICAgICAgICAgICAgICAgICBXcml0ZUxp bmUoc3RyZWFtKTsNCisgICAgICAgICAgICAgICAgc3RyZWFtID0gQXV0aGVu dGljYXRlUHJveHkodXJpLCBwcm94eSwgY2FsbGJhY2ssIG5vZGVsYXksIHRp bWVvdXRNcyk7DQogDQotICAgICAgICAgICAgICAgICAgICBMaXN0PHN0cmlu Zz4gaW5pdGlhbFJlc3BvbnNlID0gbmV3IExpc3Q8c3RyaW5nPigpOw0KLSAg ICAgICAgICAgICAgICAgICAgUmVhZEh0dHBIZWFkZXJzKHJlZiBzdHJlYW0s IHByb3h5LCBub2RlbGF5LCB0aW1lb3V0TXMsIGluaXRpYWxSZXNwb25zZSk7 DQotDQotICAgICAgICAgICAgICAgICAgICBBdXRoZW50aWNhdGVQcm94eShy ZWYgc3RyZWFtLCB1cmksIHByb3h5LCBub2RlbGF5LCB0aW1lb3V0TXMsIGlu aXRpYWxSZXNwb25zZSwgbGluZSk7DQotICAgICAgICAgICAgICAgIH0NCi0N Ci0gICAgICAgICAgICAgICAgaWYgKFVzZVNTTCh1cmkpKQ0KKyAgICAgICAg ICAgICAgICBpZiAodXJpLlNjaGVtZSA9PSAiaHR0cHMiIHx8IHVyaS5Qb3J0 ID09IERFRkFVTFRfSFRUUFNfUE9SVCkNCiAgICAgICAgICAgICAgICAgew0K LSAgICAgICAgICAgICAgICAgICAgU3NsU3RyZWFtIHNzbFN0cmVhbSA9IG5l dyBTc2xTdHJlYW0oc3RyZWFtLCBmYWxzZSwgVmFsaWRhdGVTZXJ2ZXJDZXJ0 aWZpY2F0ZSwgbnVsbCk7DQorICAgICAgICAgICAgICAgICAgICBTc2xTdHJl YW0gc3NsU3RyZWFtID0gbmV3IFNzbFN0cmVhbShzdHJlYW0sIGZhbHNlLCBj YWxsYmFjaywgbnVsbCk7DQogICAgICAgICAgICAgICAgICAgICBzc2xTdHJl YW0uQXV0aGVudGljYXRlQXNDbGllbnQoIiIsIG51bGwsIFNzbFByb3RvY29s cy5UbHMxMiwgdHJ1ZSk7DQotDQogICAgICAgICAgICAgICAgICAgICBzdHJl YW0gPSBzc2xTdHJlYW07DQogICAgICAgICAgICAgICAgIH0NCiANCkBAIC01 MjEsMjUgKzQ4NiwzNyBAQCBuYW1lc3BhY2UgWGVuQVBJCiAgICAgICAgICAg ICB9DQogICAgICAgICAgICAgY2F0Y2gNCiAgICAgICAgICAgICB7DQotICAg ICAgICAgICAgICAgIHN0cmVhbS5DbG9zZSgpOw0KKyAgICAgICAgICAgICAg ICBzdHJlYW0/LkNsb3NlKCk7DQogICAgICAgICAgICAgICAgIHRocm93Ow0K ICAgICAgICAgICAgIH0NCiAgICAgICAgIH0NCiANCi0gICAgICAgIHByaXZh dGUgc3RhdGljIHZvaWQgQXV0aGVudGljYXRlUHJveHkocmVmIFN0cmVhbSBz dHJlYW0sIFVyaSB1cmksIElXZWJQcm94eSBwcm94eSwgYm9vbCBub2RlbGF5 LCBpbnQgdGltZW91dE1zLCBMaXN0PHN0cmluZz4gaW5pdGlhbFJlc3BvbnNl LCBzdHJpbmcgaGVhZGVyKQ0KKyAgICAgICAgcHJpdmF0ZSBzdGF0aWMgU3Ry ZWFtIEF1dGhlbnRpY2F0ZVByb3h5KFVyaSB1cmksIElXZWJQcm94eSBwcm94 eSwgUmVtb3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJh Y2ssIGJvb2wgbm9kZWxheSwgaW50IHRpbWVvdXRNcykNCiAgICAgICAgIHsN CisgICAgICAgICAgICBpZiAocHJveHkgPT0gbnVsbCB8fCBwcm94eS5Jc0J5 cGFzc2VkKHVyaSkpDQorICAgICAgICAgICAgICAgIHJldHVybiBDb25uZWN0 U29ja2V0KHVyaSwgbm9kZWxheSwgdGltZW91dE1zKTsNCisNCisgICAgICAg ICAgICBVcmkgcHJveHlVcmkgPSBwcm94eS5HZXRQcm94eSh1cmkpOw0KKyAg ICAgICAgICAgIFN0cmVhbSBzdHJlYW0gPSBDb25uZWN0U29ja2V0KHByb3h5 VXJpLCBub2RlbGF5LCB0aW1lb3V0TXMpOw0KKw0KKyAgICAgICAgICAgIHN0 cmluZyBoZWFkZXIgPSAkIkNPTk5FQ1Qge3VyaS5Ib3N0fTp7dXJpLlBvcnR9 IEhUVFAvMS4wIjsNCisgICAgICAgICAgICBXcml0ZUxpbmUoaGVhZGVyLCBz dHJlYW0pOw0KKyAgICAgICAgICAgIFdyaXRlTGluZShzdHJlYW0pOw0KKw0K KyAgICAgICAgICAgIHZhciBpbml0aWFsUmVzcG9uc2UgPSBuZXcgTGlzdDxz dHJpbmc+KCk7DQorICAgICAgICAgICAgUmVhZEh0dHBIZWFkZXJzKHJlZiBz dHJlYW0sIHByb3h5LCBjYWxsYmFjaywgbm9kZWxheSwgdGltZW91dE1zLCBp bml0aWFsUmVzcG9uc2UpOw0KKw0KICAgICAgICAgICAgIC8vIHBlcmZvcm0g YXV0aGVudGljYXRpb24gb25seSBpZiBwcm94eSByZXF1aXJlcyBpdA0KICAg ICAgICAgICAgIExpc3Q8c3RyaW5nPiBmaWVsZHMgPSBpbml0aWFsUmVzcG9u c2UuRmluZEFsbChzdHIgPT4gc3RyLlN0YXJ0c1dpdGgoIlByb3h5LUF1dGhl bnRpY2F0ZToiLCBTdHJpbmdDb21wYXJpc29uLkludmFyaWFudEN1bHR1cmVJ Z25vcmVDYXNlKSk7DQogICAgICAgICAgICAgaWYgKGZpZWxkcy5Db3VudCA8 PSAwKQ0KLSAgICAgICAgICAgICAgICByZXR1cm47DQorICAgICAgICAgICAg ICAgIHJldHVybiBzdHJlYW07DQogDQogICAgICAgICAgICAgLy8gY2xlYW4g dXAgKGlmIGluaXRpYWwgc2VydmVyIHJlc3BvbnNlIHNwZWNpZmllcyAiUHJv eHktQ29ubmVjdGlvbjogQ2xvc2UiIHRoZW4gc3RyZWFtIGNhbm5vdCBiZSBy ZS11c2VkKQ0KICAgICAgICAgICAgIHN0cmluZyBmaWVsZCA9IGluaXRpYWxS ZXNwb25zZS5GaW5kKHN0ciA9PiBzdHIuU3RhcnRzV2l0aCgiUHJveHktQ29u bmVjdGlvbjogQ2xvc2UiLCBTdHJpbmdDb21wYXJpc29uLkludmFyaWFudEN1 bHR1cmVJZ25vcmVDYXNlKSk7DQogICAgICAgICAgICAgaWYgKCFzdHJpbmcu SXNOdWxsT3JFbXB0eShmaWVsZCkpDQogICAgICAgICAgICAgew0KICAgICAg ICAgICAgICAgICBzdHJlYW0uQ2xvc2UoKTsNCi0gICAgICAgICAgICAgICAg VXJpIHByb3h5VVJJID0gcHJveHkuR2V0UHJveHkodXJpKTsNCi0gICAgICAg ICAgICAgICAgc3RyZWFtID0gQ29ubmVjdFNvY2tldChwcm94eVVSSSwgbm9k ZWxheSwgdGltZW91dE1zKTsNCisgICAgICAgICAgICAgICAgc3RyZWFtID0g Q29ubmVjdFNvY2tldChwcm94eVVyaSwgbm9kZWxheSwgdGltZW91dE1zKTsN CiAgICAgICAgICAgICB9DQogDQogICAgICAgICAgICAgaWYgKHByb3h5LkNy ZWRlbnRpYWxzID09IG51bGwpDQpAQCAtNjc1LDcgKzY1Miw4IEBAIG5hbWVz cGFjZSBYZW5BUEkKIA0KICAgICAgICAgICAgIC8vIGhhbmRsZSBhdXRoZW50 aWNhdGlvbiBhdHRlbXB0IHJlc3BvbnNlDQogICAgICAgICAgICAgTGlzdDxz dHJpbmc+IGF1dGhlbnRpY2F0ZWRSZXNwb25zZSA9IG5ldyBMaXN0PHN0cmlu Zz4oKTsNCi0gICAgICAgICAgICBSZWFkSHR0cEhlYWRlcnMocmVmIHN0cmVh bSwgcHJveHksIG5vZGVsYXksIHRpbWVvdXRNcywgYXV0aGVudGljYXRlZFJl c3BvbnNlKTsNCisgICAgICAgICAgICBSZWFkSHR0cEhlYWRlcnMocmVmIHN0 cmVhbSwgcHJveHksIGNhbGxiYWNrLCBub2RlbGF5LCB0aW1lb3V0TXMsIGF1 dGhlbnRpY2F0ZWRSZXNwb25zZSk7DQorDQogICAgICAgICAgICAgaWYgKGF1 dGhlbnRpY2F0ZWRSZXNwb25zZS5Db3VudCA9PSAwKQ0KICAgICAgICAgICAg ICAgICB0aHJvdyBuZXcgQmFkU2VydmVyUmVzcG9uc2VFeGNlcHRpb24oIk5v IHJlc3BvbnNlIGZyb20gdGhlIHByb3h5IHNlcnZlciBhZnRlciBhdXRoZW50 aWNhdGlvbiBhdHRlbXB0LiIpOw0KIA0KQEAgLTY4OCwxMSArNjY2LDEzIEBA IG5hbWVzcGFjZSBYZW5BUEkKICAgICAgICAgICAgICAgICBkZWZhdWx0Og0K ICAgICAgICAgICAgICAgICAgICAgdGhyb3cgbmV3IEJhZFNlcnZlclJlc3Bv bnNlRXhjZXB0aW9uKCQiUmVjZWl2ZWQgZXJyb3IgY29kZSB7YXV0aGVudGlj YXRlZFJlc3BvbnNlWzBdfSBmcm9tIHRoZSBzZXJ2ZXIiKTsNCiAgICAgICAg ICAgICB9DQorDQorICAgICAgICAgICAgcmV0dXJuIHN0cmVhbTsNCiAgICAg ICAgIH0NCiANCi0gICAgICAgIHByaXZhdGUgc3RhdGljIFN0cmVhbSBEb0h0 dHAoVXJpIHVyaSwgSVdlYlByb3h5IHByb3h5LCBib29sIG5vRGVsYXksIGlu dCB0aW1lb3V0TXMsIHBhcmFtcyBzdHJpbmdbXSBoZWFkZXJzKQ0KKyAgICAg ICAgcHJpdmF0ZSBzdGF0aWMgU3RyZWFtIERvSHR0cChVcmkgdXJpLCBJV2Vi UHJveHkgcHJveHksIFJlbW90ZUNlcnRpZmljYXRlVmFsaWRhdGlvbkNhbGxi YWNrIGNhbGxiYWNrLCBib29sIG5vRGVsYXksIGludCB0aW1lb3V0TXMsIHBh cmFtcyBzdHJpbmdbXSBoZWFkZXJzKQ0KICAgICAgICAgew0KLSAgICAgICAg ICAgIFN0cmVhbSBzdHJlYW0gPSBDb25uZWN0U3RyZWFtKHVyaSwgcHJveHks IG5vRGVsYXksIHRpbWVvdXRNcyk7DQorICAgICAgICAgICAgU3RyZWFtIHN0 cmVhbSA9IENvbm5lY3RTdHJlYW0odXJpLCBwcm94eSwgY2FsbGJhY2ssIG5v RGVsYXksIHRpbWVvdXRNcyk7DQogDQogICAgICAgICAgICAgaW50IHJlZGly ZWN0cyA9IDA7DQogDQpAQCAtNzA5LDcgKzY4OSw3IEBAIG5hbWVzcGFjZSBY ZW5BUEkKIA0KICAgICAgICAgICAgICAgICBzdHJlYW0uRmx1c2goKTsNCiAg ICAgICAgICAgICB9DQotICAgICAgICAgICAgd2hpbGUgKFJlYWRIdHRwSGVh ZGVycyhyZWYgc3RyZWFtLCBwcm94eSwgbm9EZWxheSwgdGltZW91dE1zKSk7 DQorICAgICAgICAgICAgd2hpbGUgKFJlYWRIdHRwSGVhZGVycyhyZWYgc3Ry ZWFtLCBwcm94eSwgY2FsbGJhY2ssIG5vRGVsYXksIHRpbWVvdXRNcykpOw0K IA0KICAgICAgICAgICAgIHJldHVybiBzdHJlYW07DQogICAgICAgICB9DQpA QCAtNzE3LDcgKzY5Nyw3IEBAIG5hbWVzcGFjZSBYZW5BUEkKICAgICAgICAg Ly8vIDxzdW1tYXJ5Pg0KICAgICAgICAgLy8vIEFkZHMgSFRUUCBDT05ORUNU IGhlYWRlcnMgcmV0dXJuaW5nIHRoZSBzdHJlYW0gcmVhZHkgZm9yIHVzZQ0K ICAgICAgICAgLy8vIDwvc3VtbWFyeT4NCi0gICAgICAgIHB1YmxpYyBzdGF0 aWMgU3RyZWFtIEh0dHBDb25uZWN0U3RyZWFtKFVyaSB1cmksIElXZWJQcm94 eSBwcm94eSwgc3RyaW5nIHNlc3Npb24sIGludCB0aW1lb3V0TXMsIERpY3Rp b25hcnk8c3RyaW5nLCBzdHJpbmc+IGFkZGl0aW9uYWxIZWFkZXJzID0gbnVs bCkNCisgICAgICAgIHB1YmxpYyBzdGF0aWMgU3RyZWFtIEh0dHBDb25uZWN0 U3RyZWFtKFVyaSB1cmksIElXZWJQcm94eSBwcm94eSwgUmVtb3RlQ2VydGlm aWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIHN0cmluZyBzZXNz aW9uLCBpbnQgdGltZW91dE1zLCBEaWN0aW9uYXJ5PHN0cmluZywgc3RyaW5n PiBhZGRpdGlvbmFsSGVhZGVycyA9IG51bGwpDQogICAgICAgICB7DQogICAg ICAgICAgICAgdmFyIGFsbEhlYWRlcnMgPSBuZXcgTGlzdDxzdHJpbmc+DQog ICAgICAgICAgICAgew0KQEAgLTczMiwxMyArNzEyLDEzIEBAIG5hbWVzcGFj ZSBYZW5BUEkKICAgICAgICAgICAgICAgICAgICAgYWxsSGVhZGVycy5BZGQo JCJ7a3ZwLktleX06IHtrdnAuVmFsdWV9Iik7DQogICAgICAgICAgICAgfQ0K IA0KLSAgICAgICAgICAgIHJldHVybiBEb0h0dHAodXJpLCBwcm94eSwgdHJ1 ZSwgdGltZW91dE1zLCBhbGxIZWFkZXJzLlRvQXJyYXkoKSk7DQorICAgICAg ICAgICAgcmV0dXJuIERvSHR0cCh1cmksIHByb3h5LCBjYWxsYmFjaywgdHJ1 ZSwgdGltZW91dE1zLCBhbGxIZWFkZXJzLlRvQXJyYXkoKSk7DQogICAgICAg ICB9DQogDQogICAgICAgICAvLy8gPHN1bW1hcnk+DQogICAgICAgICAvLy8g QWRkcyBIVFRQIFBVVCBoZWFkZXJzIHJldHVybmluZyB0aGUgc3RyZWFtIHJl YWR5IGZvciB1c2UNCiAgICAgICAgIC8vLyA8L3N1bW1hcnk+DQotICAgICAg ICBwdWJsaWMgc3RhdGljIFN0cmVhbSBIdHRwUHV0U3RyZWFtKFVyaSB1cmks IElXZWJQcm94eSBwcm94eSwgbG9uZyBjb250ZW50TGVuZ3RoLCBpbnQgdGlt ZW91dE1zLCBEaWN0aW9uYXJ5PHN0cmluZywgc3RyaW5nPiBhZGRpdGlvbmFs SGVhZGVycyA9IG51bGwpDQorICAgICAgICBwdWJsaWMgc3RhdGljIFN0cmVh bSBIdHRwUHV0U3RyZWFtKFVyaSB1cmksIElXZWJQcm94eSBwcm94eSwgUmVt b3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIGxv bmcgY29udGVudExlbmd0aCwgaW50IHRpbWVvdXRNcywgRGljdGlvbmFyeTxz dHJpbmcsIHN0cmluZz4gYWRkaXRpb25hbEhlYWRlcnMgPSBudWxsKQ0KICAg ICAgICAgew0KICAgICAgICAgICAgIHZhciBhbGxIZWFkZXJzID0gbmV3IExp c3Q8c3RyaW5nPg0KICAgICAgICAgICAgIHsNCkBAIC03NTMsMTMgKzczMywx MyBAQCBuYW1lc3BhY2UgWGVuQVBJCiAgICAgICAgICAgICAgICAgICAgIGFs bEhlYWRlcnMuQWRkKCQie2t2cC5LZXl9OiB7a3ZwLlZhbHVlfSIpOw0KICAg ICAgICAgICAgIH0NCiANCi0gICAgICAgICAgICByZXR1cm4gRG9IdHRwKHVy aSwgcHJveHksIGZhbHNlLCB0aW1lb3V0TXMsIGFsbEhlYWRlcnMuVG9BcnJh eSgpKTsNCisgICAgICAgICAgICByZXR1cm4gRG9IdHRwKHVyaSwgcHJveHks IGNhbGxiYWNrLCBmYWxzZSwgdGltZW91dE1zLCBhbGxIZWFkZXJzLlRvQXJy YXkoKSk7DQogICAgICAgICB9DQogDQogICAgICAgICAvLy8gPHN1bW1hcnk+ DQogICAgICAgICAvLy8gQWRkcyBIVFRQIEdFVCBoZWFkZXJzIHJldHVybmlu ZyB0aGUgc3RyZWFtIHJlYWR5IGZvciB1c2UNCiAgICAgICAgIC8vLyA8L3N1 bW1hcnk+DQotICAgICAgICBwdWJsaWMgc3RhdGljIFN0cmVhbSBIdHRwR2V0 U3RyZWFtKFVyaSB1cmksIElXZWJQcm94eSBwcm94eSwgaW50IHRpbWVvdXRN cywgRGljdGlvbmFyeTxzdHJpbmcsIHN0cmluZz4gYWRkaXRpb25hbEhlYWRl cnMgPSBudWxsKQ0KKyAgICAgICAgcHVibGljIHN0YXRpYyBTdHJlYW0gSHR0 cEdldFN0cmVhbShVcmkgdXJpLCBJV2ViUHJveHkgcHJveHksIFJlbW90ZUNl cnRpZmljYXRlVmFsaWRhdGlvbkNhbGxiYWNrIGNhbGxiYWNrLCBpbnQgdGlt ZW91dE1zLCBEaWN0aW9uYXJ5PHN0cmluZywgc3RyaW5nPiBhZGRpdGlvbmFs SGVhZGVycyA9IG51bGwpDQogICAgICAgICB7DQogICAgICAgICAgICAgdmFy IGFsbEhlYWRlcnMgPSBuZXcgTGlzdDxzdHJpbmc+DQogICAgICAgICAgICAg ew0KQEAgLTc3Myw3ICs3NTMsNyBAQCBuYW1lc3BhY2UgWGVuQVBJCiAgICAg ICAgICAgICAgICAgICAgIGFsbEhlYWRlcnMuQWRkKCQie2t2cC5LZXl9OiB7 a3ZwLlZhbHVlfSIpOw0KICAgICAgICAgICAgIH0NCiANCi0gICAgICAgICAg ICByZXR1cm4gRG9IdHRwKHVyaSwgcHJveHksIGZhbHNlLCB0aW1lb3V0TXMs IGFsbEhlYWRlcnMuVG9BcnJheSgpKTsNCisgICAgICAgICAgICByZXR1cm4g RG9IdHRwKHVyaSwgcHJveHksIGNhbGxiYWNrLCBmYWxzZSwgdGltZW91dE1z LCBhbGxIZWFkZXJzLlRvQXJyYXkoKSk7DQogICAgICAgICB9DQogDQogICAg ICAgICAvLy8gPHN1bW1hcnk+DQpAQCAtNzgzLDEzICs3NjMsMTQgQEAgbmFt ZXNwYWNlIFhlbkFQSQogICAgICAgICAvLy8gPHBhcmFtIG5hbWU9ImNhbmNl bGxpbmdEZWxlZ2F0ZSI+RGVsZWdhdGUgY2FsbGVkIHBlcmlvZGljYWxseSB0 byBzZWUgaWYgbmVlZCB0byBjYW5jZWw8L3BhcmFtPg0KICAgICAgICAgLy8v IDxwYXJhbSBuYW1lPSJ1cmkiPlVSSSB0byBQVVQgdG88L3BhcmFtPg0KICAg ICAgICAgLy8vIDxwYXJhbSBuYW1lPSJwcm94eSI+QSBwcm94eSB0byBoYW5k bGUgdGhlIEhUVFAgY29ubmVjdGlvbjwvcGFyYW0+DQorICAgICAgICAvLy8g PHBhcmFtIG5hbWU9ImNhbGxiYWNrIj48L3BhcmFtPg0KICAgICAgICAgLy8v IDxwYXJhbSBuYW1lPSJwYXRoIj5QYXRoIHRvIGZpbGUgdG8gcHV0PC9wYXJh bT4NCiAgICAgICAgIC8vLyA8cGFyYW0gbmFtZT0idGltZW91dE1zIj5UaW1l b3V0IGZvciB0aGUgY29ubmVjdGlvbiBpbiBtcy4gMCBmb3Igbm8gdGltZW91 dC48L3BhcmFtPg0KICAgICAgICAgcHVibGljIHN0YXRpYyB2b2lkIFB1dChV cGRhdGVQcm9ncmVzc0RlbGVnYXRlIHByb2dyZXNzRGVsZWdhdGUsIEZ1bmNC b29sIGNhbmNlbGxpbmdEZWxlZ2F0ZSwNCi0gICAgICAgICAgICBVcmkgdXJp LCBJV2ViUHJveHkgcHJveHksIHN0cmluZyBwYXRoLCBpbnQgdGltZW91dE1z KQ0KKyAgICAgICAgICAgIFVyaSB1cmksIElXZWJQcm94eSBwcm94eSwgUmVt b3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIHN0 cmluZyBwYXRoLCBpbnQgdGltZW91dE1zKQ0KICAgICAgICAgew0KICAgICAg ICAgICAgIHVzaW5nIChTdHJlYW0gZmlsZVN0cmVhbSA9IG5ldyBGaWxlU3Ry ZWFtKHBhdGgsIEZpbGVNb2RlLk9wZW4sIEZpbGVBY2Nlc3MuUmVhZCksDQot ICAgICAgICAgICAgICAgIHJlcXVlc3RTdHJlYW0gPSBIdHRwUHV0U3RyZWFt KHVyaSwgcHJveHksIGZpbGVTdHJlYW0uTGVuZ3RoLCB0aW1lb3V0TXMpKQ0K KyAgICAgICAgICAgICAgICByZXF1ZXN0U3RyZWFtID0gSHR0cFB1dFN0cmVh bSh1cmksIHByb3h5LCBjYWxsYmFjaywgZmlsZVN0cmVhbS5MZW5ndGgsIHRp bWVvdXRNcykpDQogICAgICAgICAgICAgew0KICAgICAgICAgICAgICAgICBs b25nIGxlbiA9IGZpbGVTdHJlYW0uTGVuZ3RoOw0KICAgICAgICAgICAgICAg ICBEYXRhQ29waWVkRGVsZWdhdGUgZGF0YUNvcGllZERlbGVnYXRlID0gZGVs ZWdhdGUobG9uZyBieXRlcykNCkBAIC04MDksMTAgKzc5MCwxMSBAQCBuYW1l c3BhY2UgWGVuQVBJCiAgICAgICAgIC8vLyA8cGFyYW0gbmFtZT0iY2FuY2Vs bGluZ0RlbGVnYXRlIj5EZWxlZ2F0ZSBjYWxsZWQgcGVyaW9kaWNhbGx5IHRv IHNlZSBpZiBuZWVkIHRvIGNhbmNlbDwvcGFyYW0+DQogICAgICAgICAvLy8g PHBhcmFtIG5hbWU9InVyaSI+VVJJIHRvIEdFVCBmcm9tPC9wYXJhbT4NCiAg ICAgICAgIC8vLyA8cGFyYW0gbmFtZT0icHJveHkiPkEgcHJveHkgdG8gaGFu ZGxlIHRoZSBIVFRQIGNvbm5lY3Rpb248L3BhcmFtPg0KKyAgICAgICAgLy8v IDxwYXJhbSBuYW1lPSJjYWxsYmFjayI+PC9wYXJhbT4NCiAgICAgICAgIC8v LyA8cGFyYW0gbmFtZT0icGF0aCI+UGF0aCB0byBmaWxlIHRvIHJlY2VpdmUg dGhlIGRhdGE8L3BhcmFtPg0KICAgICAgICAgLy8vIDxwYXJhbSBuYW1lPSJ0 aW1lb3V0TXMiPlRpbWVvdXQgZm9yIHRoZSBjb25uZWN0aW9uIGluIG1zLiAw IGZvciBubyB0aW1lb3V0LjwvcGFyYW0+DQogICAgICAgICBwdWJsaWMgc3Rh dGljIHZvaWQgR2V0KERhdGFDb3BpZWREZWxlZ2F0ZSBkYXRhQ29waWVkRGVs ZWdhdGUsIEZ1bmNCb29sIGNhbmNlbGxpbmdEZWxlZ2F0ZSwNCi0gICAgICAg ICAgICBVcmkgdXJpLCBJV2ViUHJveHkgcHJveHksIHN0cmluZyBwYXRoLCBp bnQgdGltZW91dE1zKQ0KKyAgICAgICAgICAgIFVyaSB1cmksIElXZWJQcm94 eSBwcm94eSwgUmVtb3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sg Y2FsbGJhY2ssIHN0cmluZyBwYXRoLCBpbnQgdGltZW91dE1zKQ0KICAgICAg ICAgew0KICAgICAgICAgICAgIGlmIChzdHJpbmcuSXNOdWxsT3JXaGl0ZVNw YWNlKHBhdGgpKQ0KICAgICAgICAgICAgICAgICB0aHJvdyBuZXcgQXJndW1l bnRFeGNlcHRpb24obmFtZW9mKHBhdGgpKTsNCkBAIC04MzMsNyArODE1LDcg QEAgbmFtZXNwYWNlIFhlbkFQSQogICAgICAgICAgICAgdHJ5DQogICAgICAg ICAgICAgew0KICAgICAgICAgICAgICAgICB1c2luZyAoU3RyZWFtIGZpbGVT dHJlYW0gPSBuZXcgRmlsZVN0cmVhbSh0bXBGaWxlLCBGaWxlTW9kZS5DcmVh dGUsIEZpbGVBY2Nlc3MuV3JpdGUsIEZpbGVTaGFyZS5Ob25lKSwNCi0gICAg ICAgICAgICAgICAgICAgICAgIGRvd25sb2FkU3RyZWFtID0gSHR0cEdldFN0 cmVhbSh1cmksIHByb3h5LCB0aW1lb3V0TXMpKQ0KKyAgICAgICAgICAgICAg ICAgICAgICAgZG93bmxvYWRTdHJlYW0gPSBIdHRwR2V0U3RyZWFtKHVyaSwg cHJveHksIGNhbGxiYWNrLCB0aW1lb3V0TXMpKQ0KICAgICAgICAgICAgICAg ICB7DQogICAgICAgICAgICAgICAgICAgICBDb3B5U3RyZWFtKGRvd25sb2Fk U3RyZWFtLCBmaWxlU3RyZWFtLCBkYXRhQ29waWVkRGVsZWdhdGUsIGNhbmNl bGxpbmdEZWxlZ2F0ZSk7DQogICAgICAgICAgICAgICAgICAgICBmaWxlU3Ry ZWFtLkZsdXNoKCk7DQpkaWZmIC0tZ2l0IGEvb2NhbWwvc2RrLWdlbi9jc2hh cnAvdGVtcGxhdGVzL0hUVFBfYWN0aW9ucy5tdXN0YWNoZSBiL29jYW1sL3Nk ay1nZW4vY3NoYXJwL3RlbXBsYXRlcy9IVFRQX2FjdGlvbnMubXVzdGFjaGUK aW5kZXggM2M3MDJjMmFmLi5mMTUzMWJiNjMgMTAwNjQ0Ci0tLSBhL29jYW1s L3Nkay1nZW4vY3NoYXJwL3RlbXBsYXRlcy9IVFRQX2FjdGlvbnMubXVzdGFj aGUKKysrIGIvb2NhbWwvc2RrLWdlbi9jc2hhcnAvdGVtcGxhdGVzL0hUVFBf YWN0aW9ucy5tdXN0YWNoZQpAQCAtMjgsNDQgKzI4LDQ1IEBACiAgKi8KIAog dXNpbmcgU3lzdGVtLk5ldDsKK3VzaW5nIFN5c3RlbS5OZXQuU2VjdXJpdHk7 CiAKIG5hbWVzcGFjZSBYZW5BUEkKIHsKICAgICBwdWJsaWMgcGFydGlhbCBj bGFzcyBIVFRQX2FjdGlvbnMKICAgICB7CiAgICAgICAgIHByaXZhdGUgc3Rh dGljIHZvaWQgR2V0KEhUVFAuRGF0YUNvcGllZERlbGVnYXRlIGRhdGFDb3Bp ZWREZWxlZ2F0ZSwgSFRUUC5GdW5jQm9vbCBjYW5jZWxsaW5nRGVsZWdhdGUs IGludCB0aW1lb3V0X21zLAotICAgICAgICAgICAgc3RyaW5nIGhvc3RuYW1l LCBzdHJpbmcgcmVtb3RlUGF0aCwgSVdlYlByb3h5IHByb3h5LCBzdHJpbmcg bG9jYWxQYXRoLCBwYXJhbXMgb2JqZWN0W10gYXJncykKKyAgICAgICAgICAg IHN0cmluZyBob3N0bmFtZSwgc3RyaW5nIHJlbW90ZVBhdGgsIElXZWJQcm94 eSBwcm94eSwgUmVtb3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sg Y2FsbGJhY2ssIHN0cmluZyBsb2NhbFBhdGgsIHBhcmFtcyBvYmplY3RbXSBh cmdzKQogICAgICAgICB7Ci0gICAgICAgICAgICBIVFRQLkdldChkYXRhQ29w aWVkRGVsZWdhdGUsIGNhbmNlbGxpbmdEZWxlZ2F0ZSwgSFRUUC5CdWlsZFVy aShob3N0bmFtZSwgcmVtb3RlUGF0aCwgYXJncyksIHByb3h5LCBsb2NhbFBh dGgsIHRpbWVvdXRfbXMpOworICAgICAgICAgICAgSFRUUC5HZXQoZGF0YUNv cGllZERlbGVnYXRlLCBjYW5jZWxsaW5nRGVsZWdhdGUsIEhUVFAuQnVpbGRV cmkoaG9zdG5hbWUsIHJlbW90ZVBhdGgsIGFyZ3MpLCBwcm94eSwgY2FsbGJh Y2ssIGxvY2FsUGF0aCwgdGltZW91dF9tcyk7CiAgICAgICAgIH0KIAogICAg ICAgICBwcml2YXRlIHN0YXRpYyB2b2lkIFB1dChIVFRQLlVwZGF0ZVByb2dy ZXNzRGVsZWdhdGUgcHJvZ3Jlc3NEZWxlZ2F0ZSwgSFRUUC5GdW5jQm9vbCBj YW5jZWxsaW5nRGVsZWdhdGUsIGludCB0aW1lb3V0X21zLAotICAgICAgICAg ICAgc3RyaW5nIGhvc3RuYW1lLCBzdHJpbmcgcmVtb3RlUGF0aCwgSVdlYlBy b3h5IHByb3h5LCBzdHJpbmcgbG9jYWxQYXRoLCBwYXJhbXMgb2JqZWN0W10g YXJncykKKyAgICAgICAgICAgIHN0cmluZyBob3N0bmFtZSwgc3RyaW5nIHJl bW90ZVBhdGgsIElXZWJQcm94eSBwcm94eSwgUmVtb3RlQ2VydGlmaWNhdGVW YWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIHN0cmluZyBsb2NhbFBhdGgs IHBhcmFtcyBvYmplY3RbXSBhcmdzKQogICAgICAgICB7Ci0gICAgICAgICAg ICBIVFRQLlB1dChwcm9ncmVzc0RlbGVnYXRlLCBjYW5jZWxsaW5nRGVsZWdh dGUsIEhUVFAuQnVpbGRVcmkoaG9zdG5hbWUsIHJlbW90ZVBhdGgsIGFyZ3Mp LCBwcm94eSwgbG9jYWxQYXRoLCB0aW1lb3V0X21zKTsKKyAgICAgICAgICAg IEhUVFAuUHV0KHByb2dyZXNzRGVsZWdhdGUsIGNhbmNlbGxpbmdEZWxlZ2F0 ZSwgSFRUUC5CdWlsZFVyaShob3N0bmFtZSwgcmVtb3RlUGF0aCwgYXJncyks IHByb3h5LCBjYWxsYmFjaywgbG9jYWxQYXRoLCB0aW1lb3V0X21zKTsKICAg ICAgICAgfQogCiB7eyNodHRwX2FjdGlvbnN9fQogICAgICAgICBwdWJsaWMg c3RhdGljIHZvaWQge3tuYW1lfX0oSFRUUC57eyNpc1B1dH19VXBkYXRlUHJv Z3Jlc3NEZWxlZ2F0ZSBwcm9ncmVzc0RlbGVnYXRle3svaXNQdXR9fXt7I2lz R2V0fX1EYXRhQ29waWVkRGVsZWdhdGUgZGF0YUNvcGllZERlbGVnYXRle3sv aXNHZXR9fSwgSFRUUC5GdW5jQm9vbCBjYW5jZWxsaW5nRGVsZWdhdGUsIGlu dCB0aW1lb3V0X21zLAotICAgICAgICAgICAgc3RyaW5nIGhvc3RuYW1lLCBJ V2ViUHJveHkgcHJveHksIHN0cmluZyBwYXRoLCBzdHJpbmcgdGFza19pZCA9 IG51bGwsIHN0cmluZyBzZXNzaW9uX2lkID0gbnVsbHt7I2FyZ3N9fSwge3t7 YXJnX2RlY2x9fX17ey9hcmdzfX0pCisgICAgICAgICAgICBzdHJpbmcgaG9z dG5hbWUsIElXZWJQcm94eSBwcm94eSwgUmVtb3RlQ2VydGlmaWNhdGVWYWxp ZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIHN0cmluZyBwYXRoLCBzdHJpbmcg dGFza19pZCA9IG51bGwsIHN0cmluZyBzZXNzaW9uX2lkID0gbnVsbHt7I2Fy Z3N9fSwge3t7YXJnX2RlY2x9fX17ey9hcmdzfX0pCiAgICAgICAgIHsKLSAg ICAgICAgICAgIHt7I2lzUHV0fX1QdXR7ey9pc1B1dH19e3sjaXNHZXR9fUdl dHt7L2lzR2V0fX0oe3sjaXNQdXR9fXByb2dyZXNzRGVsZWdhdGV7ey9pc1B1 dH19e3sjaXNHZXR9fWRhdGFDb3BpZWREZWxlZ2F0ZXt7L2lzR2V0fX0sIGNh bmNlbGxpbmdEZWxlZ2F0ZSwgdGltZW91dF9tcywgaG9zdG5hbWUsICJ7e3Vy aX19IiwgcHJveHksIHBhdGgsCisgICAgICAgICAgICB7eyNpc1B1dH19UHV0 e3svaXNQdXR9fXt7I2lzR2V0fX1HZXR7ey9pc0dldH19KHt7I2lzUHV0fX1w cm9ncmVzc0RlbGVnYXRle3svaXNQdXR9fXt7I2lzR2V0fX1kYXRhQ29waWVk RGVsZWdhdGV7ey9pc0dldH19LCBjYW5jZWxsaW5nRGVsZWdhdGUsIHRpbWVv dXRfbXMsIGhvc3RuYW1lLCAie3t1cml9fSIsIHByb3h5LCBjYWxsYmFjaywg cGF0aCwKICAgICAgICAgICAgICAgICAidGFza19pZCIsIHRhc2tfaWQsICJz ZXNzaW9uX2lkIiwgc2Vzc2lvbl9pZHt7I2FyZ3N9fSwge3t7YXJnX3VzZX19 fXt7L2FyZ3N9fSk7CiAgICAgICAgIH0KIAoge3svaHR0cF9hY3Rpb25zfX0K IAogICAgICAgICBwdWJsaWMgc3RhdGljIHZvaWQgZ2V0X3Bvb2xfcGF0Y2hf ZG93bmxvYWQoSFRUUC5EYXRhQ29waWVkRGVsZWdhdGUgZGF0YUNvcGllZERl bGVnYXRlLCBIVFRQLkZ1bmNCb29sIGNhbmNlbGxpbmdEZWxlZ2F0ZSwgaW50 IHRpbWVvdXRfbXMsCi0gICAgICAgICAgICBzdHJpbmcgaG9zdG5hbWUsIElX ZWJQcm94eSBwcm94eSwgc3RyaW5nIHBhdGgsIHN0cmluZyB0YXNrX2lkLCBz dHJpbmcgc2Vzc2lvbl9pZCwgc3RyaW5nIHV1aWQpCisgICAgICAgICAgICBz dHJpbmcgaG9zdG5hbWUsIElXZWJQcm94eSBwcm94eSwgUmVtb3RlQ2VydGlm aWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2FsbGJhY2ssIHN0cmluZyBwYXRo LCBzdHJpbmcgdGFza19pZCwgc3RyaW5nIHNlc3Npb25faWQsIHN0cmluZyB1 dWlkKQogICAgICAgICB7Ci0gICAgICAgICAgICBHZXQoZGF0YUNvcGllZERl bGVnYXRlLCBjYW5jZWxsaW5nRGVsZWdhdGUsIHRpbWVvdXRfbXMsIGhvc3Ru YW1lLCAiL3Bvb2xfcGF0Y2hfZG93bmxvYWQiLCBwcm94eSwgcGF0aCwKKyAg ICAgICAgICAgIEdldChkYXRhQ29waWVkRGVsZWdhdGUsIGNhbmNlbGxpbmdE ZWxlZ2F0ZSwgdGltZW91dF9tcywgaG9zdG5hbWUsICIvcG9vbF9wYXRjaF9k b3dubG9hZCIsIHByb3h5LCBjYWxsYmFjaywgcGF0aCwKICAgICAgICAgICAg ICAgICAidGFza19pZCIsIHRhc2tfaWQsICJzZXNzaW9uX2lkIiwgc2Vzc2lv bl9pZCwgInV1aWQiLCB1dWlkKTsKICAgICAgICAgfQogCiAgICAgICAgIHB1 YmxpYyBzdGF0aWMgdm9pZCBwdXRfb2VtX3BhdGNoX3N0cmVhbShIVFRQLlVw ZGF0ZVByb2dyZXNzRGVsZWdhdGUgcHJvZ3Jlc3NEZWxlZ2F0ZSwgSFRUUC5G dW5jQm9vbCBjYW5jZWxsaW5nRGVsZWdhdGUsIGludCB0aW1lb3V0X21zLAot ICAgICAgICAgICAgc3RyaW5nIGhvc3RuYW1lLCBJV2ViUHJveHkgcHJveHks IHN0cmluZyBwYXRoLCBzdHJpbmcgdGFza19pZCwgc3RyaW5nIHNlc3Npb25f aWQpCisgICAgICAgICAgICBzdHJpbmcgaG9zdG5hbWUsIElXZWJQcm94eSBw cm94eSwgUmVtb3RlQ2VydGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgY2Fs bGJhY2ssIHN0cmluZyBwYXRoLCBzdHJpbmcgdGFza19pZCwgc3RyaW5nIHNl c3Npb25faWQpCiAgICAgICAgIHsKLSAgICAgICAgICAgIFB1dChwcm9ncmVz c0RlbGVnYXRlLCBjYW5jZWxsaW5nRGVsZWdhdGUsIHRpbWVvdXRfbXMsIGhv c3RuYW1lLCAiL29lbV9wYXRjaF9zdHJlYW0iLCBwcm94eSwgcGF0aCwKKyAg ICAgICAgICAgIFB1dChwcm9ncmVzc0RlbGVnYXRlLCBjYW5jZWxsaW5nRGVs ZWdhdGUsIHRpbWVvdXRfbXMsIGhvc3RuYW1lLCAiL29lbV9wYXRjaF9zdHJl YW0iLCBwcm94eSwgY2FsbGJhY2ssIHBhdGgsCiAgICAgICAgICAgICAgICAg InRhc2tfaWQiLCB0YXNrX2lkLCAic2Vzc2lvbl9pZCIsIHNlc3Npb25faWQp OwogICAgICAgICB9CiAgICAgfQpkaWZmIC0tZ2l0IGEvb2NhbWwvc2RrLWdl bi9wb3dlcnNoZWxsL2F1dG9nZW4vc3JjL0NvbW1vbkNtZGxldEZ1bmN0aW9u cy5jcyBiL29jYW1sL3Nkay1nZW4vcG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9D b21tb25DbWRsZXRGdW5jdGlvbnMuY3MKaW5kZXggOTQzYzkxYTc2Li41YzEw NjU2YTAgMTAwNjQ0Ci0tLSBhL29jYW1sL3Nkay1nZW4vcG93ZXJzaGVsbC9h dXRvZ2VuL3NyYy9Db21tb25DbWRsZXRGdW5jdGlvbnMuY3MKKysrIGIvb2Nh bWwvc2RrLWdlbi9wb3dlcnNoZWxsL2F1dG9nZW4vc3JjL0NvbW1vbkNtZGxl dEZ1bmN0aW9ucy5jcwpAQCAtMzAsNyArMzAsMTEgQEAKIHVzaW5nIFN5c3Rl bTsNCiB1c2luZyBTeXN0ZW0uQ29sbGVjdGlvbnM7DQogdXNpbmcgU3lzdGVt LkNvbGxlY3Rpb25zLkdlbmVyaWM7DQordXNpbmcgU3lzdGVtLklPOw0KIHVz aW5nIFN5c3RlbS5NYW5hZ2VtZW50LkF1dG9tYXRpb247DQordXNpbmcgU3lz dGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeTsNCit1c2luZyBTeXN0ZW0uU2Vj dXJpdHkuQ3J5cHRvZ3JhcGh5Llg1MDlDZXJ0aWZpY2F0ZXM7DQordXNpbmcg U3lzdGVtLlhtbDsNCiB1c2luZyBYZW5BUEk7DQogDQogbmFtZXNwYWNlIENp dHJpeC5YZW5TZXJ2ZXINCkBAIC0zOSw2ICs0Myw3IEBAIG5hbWVzcGFjZSBD aXRyaXguWGVuU2VydmVyCiAgICAgew0KICAgICAgICAgcHJpdmF0ZSBjb25z dCBzdHJpbmcgU2Vzc2lvbnNWYXJpYWJsZSA9ICJnbG9iYWw6Q2l0cml4Llhl blNlcnZlci5TZXNzaW9ucyI7DQogICAgICAgICBwcml2YXRlIGNvbnN0IHN0 cmluZyBEZWZhdWx0U2Vzc2lvblZhcmlhYmxlID0gImdsb2JhbDpYZW5TZXJ2 ZXJfRGVmYXVsdF9TZXNzaW9uIjsNCisgICAgICAgIHByaXZhdGUgY29uc3Qg c3RyaW5nIENlcnRpZmljYXRlc1BhdGhWYXJpYWJsZSA9ICJnbG9iYWw6S25v d25TZXJ2ZXJDZXJ0aWZpY2F0ZXNGaWxlUGF0aCI7DQogDQogICAgICAgICBp bnRlcm5hbCBzdGF0aWMgRGljdGlvbmFyeTxzdHJpbmcsIFNlc3Npb24+IEdl dEFsbFNlc3Npb25zKFBTQ21kbGV0IGNtZGxldCkNCiAgICAgICAgIHsNCkBA IC0xMzcsNSArMTQyLDEyNSBAQCBuYW1lc3BhY2UgQ2l0cml4LlhlblNlcnZl cgogICAgICAgICAgICAgICAgIH0NCiAgICAgICAgICAgICB9DQogICAgICAg ICB9DQorDQorICAgICAgICBpbnRlcm5hbCBzdGF0aWMgYm9vbCBWZXJpZnlJ bkFsbFN0b3JlcyhYNTA5Q2VydGlmaWNhdGUyIGNlcnRpZmljYXRlMikNCisg ICAgICAgIHsNCisgICAgICAgICAgICB0cnkNCisgICAgICAgICAgICB7DQor ICAgICAgICAgICAgICAgIFg1MDlDaGFpbiBjaGFpbiA9IG5ldyBYNTA5Q2hh aW4odHJ1ZSk7DQorICAgICAgICAgICAgICAgIHJldHVybiBjaGFpbi5CdWls ZChjZXJ0aWZpY2F0ZTIpIHx8IGNlcnRpZmljYXRlMi5WZXJpZnkoKTsNCisg ICAgICAgICAgICB9DQorICAgICAgICAgICAgY2F0Y2ggKENyeXB0b2dyYXBo aWNFeGNlcHRpb24pDQorICAgICAgICAgICAgew0KKyAgICAgICAgICAgICAg ICByZXR1cm4gZmFsc2U7DQorICAgICAgICAgICAgfQ0KKyAgICAgICAgfQ0K Kw0KKyAgICAgICAgaW50ZXJuYWwgc3RhdGljIHN0cmluZyBHZXRDZXJ0aWZp Y2F0ZXNQYXRoKFBTQ21kbGV0IGNtZGxldCkNCisgICAgICAgIHsNCisgICAg ICAgICAgICB2YXIgY2VydFBhdGhPYmplY3QgPSBjbWRsZXQuU2Vzc2lvblN0 YXRlLlBTVmFyaWFibGUuR2V0VmFsdWUoQ2VydGlmaWNhdGVzUGF0aFZhcmlh YmxlKTsNCisNCisgICAgICAgICAgICByZXR1cm4gY2VydFBhdGhPYmplY3Qg aXMgUFNPYmplY3QgcHNPYmplY3QNCisgICAgICAgICAgICAgICAgPyBwc09i amVjdC5CYXNlT2JqZWN0IGFzIHN0cmluZw0KKyAgICAgICAgICAgICAgICA6 IGNlcnRQYXRoT2JqZWN0Py5Ub1N0cmluZygpID8/IHN0cmluZy5FbXB0eTsN CisgICAgICAgIH0NCisNCisgICAgICAgIGludGVybmFsIHN0YXRpYyBEaWN0 aW9uYXJ5PHN0cmluZywgc3RyaW5nPiBMb2FkQ2VydGlmaWNhdGVzKHN0cmlu ZyBjZXJ0UGF0aCkNCisgICAgICAgIHsNCisgICAgICAgICAgICB2YXIgY2Vy dGlmaWNhdGVzID0gbmV3IERpY3Rpb25hcnk8c3RyaW5nLCBzdHJpbmc+KCk7 DQorDQorICAgICAgICAgICAgaWYgKEZpbGUuRXhpc3RzKGNlcnRQYXRoKSkN CisgICAgICAgICAgICB7DQorICAgICAgICAgICAgICAgIHZhciBkb2MgPSBu ZXcgWG1sRG9jdW1lbnQoKTsNCisgICAgICAgICAgICAgICAgZG9jLkxvYWQo Y2VydFBhdGgpOw0KKw0KKyAgICAgICAgICAgICAgICBmb3JlYWNoIChYbWxO b2RlIG5vZGUgaW4gZG9jLkdldEVsZW1lbnRzQnlUYWdOYW1lKCJjZXJ0aWZp Y2F0ZSIpKQ0KKyAgICAgICAgICAgICAgICB7DQorICAgICAgICAgICAgICAg ICAgICB2YXIgaG9zdEF0dCA9IG5vZGUuQXR0cmlidXRlcz9bImhvc3RuYW1l Il07DQorICAgICAgICAgICAgICAgICAgICB2YXIgZm5ncHJ0QXR0ID0gbm9k ZS5BdHRyaWJ1dGVzP1siZmluZ2VycHJpbnQiXTsNCisNCisgICAgICAgICAg ICAgICAgICAgIGlmIChob3N0QXR0ICE9IG51bGwgJiYgZm5ncHJ0QXR0ICE9 IG51bGwpDQorICAgICAgICAgICAgICAgICAgICAgICAgY2VydGlmaWNhdGVz W2hvc3RBdHQuVmFsdWVdID0gZm5ncHJ0QXR0LlZhbHVlOw0KKyAgICAgICAg ICAgICAgICB9DQorICAgICAgICAgICAgfQ0KKw0KKyAgICAgICAgICAgIHJl dHVybiBjZXJ0aWZpY2F0ZXM7DQorICAgICAgICB9DQorDQorICAgICAgICBp bnRlcm5hbCBzdGF0aWMgdm9pZCBTYXZlQ2VydGlmaWNhdGVzKHN0cmluZyBj ZXJ0UGF0aCwgRGljdGlvbmFyeTxzdHJpbmcsIHN0cmluZz4gY2VydGlmaWNh dGVzKQ0KKyAgICAgICAgew0KKyAgICAgICAgICAgIHN0cmluZyBkaXJOYW1l ID0gUGF0aC5HZXREaXJlY3RvcnlOYW1lKGNlcnRQYXRoKTsNCisNCisgICAg ICAgICAgICBpZiAoIURpcmVjdG9yeS5FeGlzdHMoZGlyTmFtZSkpDQorICAg ICAgICAgICAgICAgIERpcmVjdG9yeS5DcmVhdGVEaXJlY3RvcnkoZGlyTmFt ZSk7DQorDQorICAgICAgICAgICAgWG1sRG9jdW1lbnQgZG9jID0gbmV3IFht bERvY3VtZW50KCk7DQorICAgICAgICAgICAgWG1sRGVjbGFyYXRpb24gZGVj bCA9IGRvYy5DcmVhdGVYbWxEZWNsYXJhdGlvbigiMS4wIiwgInV0Zi04Iiwg bnVsbCk7DQorICAgICAgICAgICAgZG9jLkFwcGVuZENoaWxkKGRlY2wpOw0K KyAgICAgICAgICAgIFhtbE5vZGUgbm9kZSA9IGRvYy5DcmVhdGVFbGVtZW50 KCJjZXJ0aWZpY2F0ZXMiKTsNCisNCisgICAgICAgICAgICBmb3JlYWNoIChL ZXlWYWx1ZVBhaXI8c3RyaW5nLCBzdHJpbmc+IGNlcnQgaW4gY2VydGlmaWNh dGVzKQ0KKyAgICAgICAgICAgIHsNCisgICAgICAgICAgICAgICAgWG1sTm9k ZSBjZXJ0Tm9kZSA9IGRvYy5DcmVhdGVFbGVtZW50KCJjZXJ0aWZpY2F0ZSIp Ow0KKyAgICAgICAgICAgICAgICBYbWxBdHRyaWJ1dGUgaG9zdG5hbWUgPSBk b2MuQ3JlYXRlQXR0cmlidXRlKCJob3N0bmFtZSIpOw0KKyAgICAgICAgICAg ICAgICBYbWxBdHRyaWJ1dGUgZmluZ2VycHJpbnQgPSBkb2MuQ3JlYXRlQXR0 cmlidXRlKCJmaW5nZXJwcmludCIpOw0KKyAgICAgICAgICAgICAgICBob3N0 bmFtZS5WYWx1ZSA9IGNlcnQuS2V5Ow0KKyAgICAgICAgICAgICAgICBmaW5n ZXJwcmludC5WYWx1ZSA9IGNlcnQuVmFsdWU7DQorICAgICAgICAgICAgICAg IGNlcnROb2RlLkF0dHJpYnV0ZXM/LkFwcGVuZChob3N0bmFtZSk7DQorICAg ICAgICAgICAgICAgIGNlcnROb2RlLkF0dHJpYnV0ZXM/LkFwcGVuZChmaW5n ZXJwcmludCk7DQorICAgICAgICAgICAgICAgIG5vZGUuQXBwZW5kQ2hpbGQo Y2VydE5vZGUpOw0KKyAgICAgICAgICAgIH0NCisNCisgICAgICAgICAgICBk b2MuQXBwZW5kQ2hpbGQobm9kZSk7DQorICAgICAgICAgICAgZG9jLlNhdmUo Y2VydFBhdGgpOw0KKyAgICAgICAgfQ0KKyAgICB9DQorDQorICAgIGludGVy bmFsIGFic3RyYWN0IGNsYXNzIENlcnRpZmljYXRlVmFsaWRhdGlvbkV4Y2Vw dGlvbiA6IEV4Y2VwdGlvbg0KKyAgICB7DQorICAgICAgICBwcm90ZWN0ZWQg Y29uc3Qgc3RyaW5nIENFUlRfVFJVU1RFRCA9ICJUaGUgY2VydGlmaWNhdGUg b24gdGhpcyBzZXJ2ZXIgaXMgdHJ1c3RlZC4gSXQgaXMgcmVjb21tZW5kZWQg eW91IHJlLWlzc3VlIHRoaXMgc2VydmVyJ3MgY2VydGlmaWNhdGUuIjsNCisg ICAgICAgIHByb3RlY3RlZCBjb25zdCBzdHJpbmcgQ0VSVF9OT1RfVFJVU1RF RCA9ICJUaGUgY2VydGlmaWNhdGUgb24gdGhpcyBzZXJ2ZXIgaXMgbm90IHRy dXN0ZWQuIjsNCisNCisgICAgICAgIHByb3RlY3RlZCBDZXJ0aWZpY2F0ZVZh bGlkYXRpb25FeGNlcHRpb24oc3RyaW5nIGZpbmdlcnByaW50LCBib29sIHRy dXN0ZWQsIHN0cmluZyBob3N0bmFtZSkNCisgICAgICAgIHsNCisgICAgICAg ICAgICBGaW5nZXJwcmludCA9IGZpbmdlcnByaW50Ow0KKyAgICAgICAgICAg IFRydXN0ZWQgPSB0cnVzdGVkOw0KKyAgICAgICAgICAgIEhvc3RuYW1lID0g aG9zdG5hbWU7DQorICAgICAgICB9DQorDQorICAgICAgICBwcm90ZWN0ZWQg Ym9vbCBUcnVzdGVkIHsgZ2V0OyB9DQorICAgICAgICBwdWJsaWMgc3RyaW5n IEZpbmdlcnByaW50IHsgZ2V0OyB9DQorICAgICAgICBwdWJsaWMgc3RyaW5n IEhvc3RuYW1lIHsgZ2V0OyB9DQorICAgICAgICBwdWJsaWMgYWJzdHJhY3Qg c3RyaW5nIENhcHRpb24geyBnZXQ7IH0NCisgICAgfQ0KKw0KKyAgICBpbnRl cm5hbCBjbGFzcyBDZXJ0aWZpY2F0ZUNoYW5nZWRFeGNlcHRpb24gOiBDZXJ0 aWZpY2F0ZVZhbGlkYXRpb25FeGNlcHRpb24NCisgICAgew0KKyAgICAgICAg cHVibGljIENlcnRpZmljYXRlQ2hhbmdlZEV4Y2VwdGlvbihzdHJpbmcgZmlu Z2VycHJpbnQsIGJvb2wgdHJ1c3RlZCwgc3RyaW5nIGhvc3RuYW1lKQ0KKyAg ICAgICAgICAgIDogYmFzZShmaW5nZXJwcmludCwgdHJ1c3RlZCwgaG9zdG5h bWUpDQorICAgICAgICB7DQorICAgICAgICB9DQorDQorICAgICAgICBwdWJs aWMgb3ZlcnJpZGUgc3RyaW5nIENhcHRpb24gPT4gIlNlY3VyaXR5IENlcnRp ZmljYXRlIENoYW5nZWQiOw0KKw0KKyAgICAgICAgcHVibGljIG92ZXJyaWRl IHN0cmluZyBNZXNzYWdlID0+DQorICAgICAgICAgICAgJCJUaGUgY2VydGlm aWNhdGUgdGh1bWJwcmludCBvZiBzZXJ2ZXIge0hvc3RuYW1lfSBoYXMgY2hh bmdlZCBzaW5jZSB0aGUgbGFzdCB0aW1lIHlvdSBjb25uZWN0ZWQuXG4iICsN CisgICAgICAgICAgICAkIlRoZSBjZXJ0aWZpY2F0ZSB0aHVtYnByaW50IG9m IHRoZSBzZXJ2ZXIgaXM6XG57RmluZ2VycHJpbnR9XG4iICsNCisgICAgICAg ICAgICAoVHJ1c3RlZCA/IENFUlRfVFJVU1RFRCA6IENFUlRfTk9UX1RSVVNU RUQpICsNCisgICAgICAgICAgICAiXG5EbyB5b3Ugd2lzaCB0byBjb250aW51 ZT8iOw0KKyAgICB9DQorDQorICAgIGludGVybmFsIGNsYXNzIENlcnRpZmlj YXRlTm90Rm91bmRFeGNlcHRpb24gOiBDZXJ0aWZpY2F0ZVZhbGlkYXRpb25F eGNlcHRpb24NCisgICAgew0KKyAgICAgICAgcHVibGljIENlcnRpZmljYXRl Tm90Rm91bmRFeGNlcHRpb24oc3RyaW5nIGZpbmdlcnByaW50LCBib29sIHRy dXN0ZWQsIHN0cmluZyBob3N0bmFtZSkNCisgICAgICAgICAgICA6IGJhc2Uo ZmluZ2VycHJpbnQsIHRydXN0ZWQsIGhvc3RuYW1lKQ0KKyAgICAgICAgew0K KyAgICAgICAgfQ0KKw0KKyAgICAgICAgcHVibGljIG92ZXJyaWRlIHN0cmlu ZyBDYXB0aW9uID0+ICJOZXcgU2VjdXJpdHkgQ2VydGlmaWNhdGUiOw0KKw0K KyAgICAgICAgcHVibGljIG92ZXJyaWRlIHN0cmluZyBNZXNzYWdlID0+ICQi VGhlIGNlcnRpZmljYXRlIHRodW1icHJpbnQgb2YgdGhlIHNlcnZlciB5b3Ug aGF2ZSBjb25uZWN0ZWQgdG8gaXMgOlxue0ZpbmdlcnByaW50fVxuIiArDQor ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKFRy dXN0ZWQgPyBDRVJUX1RSVVNURUQgOiBDRVJUX05PVF9UUlVTVEVEKSArDQor ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlxu RG8geW91IHdpc2ggdG8gY29udGludWU/IjsNCiAgICAgfQ0KIH0NCmRpZmYg LS1naXQgYS9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMv Q29ubmVjdC1YZW5TZXJ2ZXIuY3MgYi9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hl bGwvYXV0b2dlbi9zcmMvQ29ubmVjdC1YZW5TZXJ2ZXIuY3MKaW5kZXggZGQ2 MWYzNTg1Li5mOTcxOTk3OTEgMTAwNjQ0Ci0tLSBhL29jYW1sL3Nkay1nZW4v cG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9Db25uZWN0LVhlblNlcnZlci5jcwor KysgYi9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMvQ29u bmVjdC1YZW5TZXJ2ZXIuY3MKQEAgLTI5LDcgKzI5LDYgQEAKIA0KIHVzaW5n IFN5c3RlbTsNCiB1c2luZyBTeXN0ZW0uQ29sbGVjdGlvbnMuR2VuZXJpYzsN Ci11c2luZyBTeXN0ZW0uSU87DQogdXNpbmcgU3lzdGVtLk1hbmFnZW1lbnQu QXV0b21hdGlvbjsNCiB1c2luZyBTeXN0ZW0uTmV0Ow0KICNpZiBORVQ4XzBf T1JfR1JFQVRFUg0KQEAgLTM4LDkgKzM3LDcgQEAgdXNpbmcgU3lzdGVtLk5l dC5IdHRwOwogdXNpbmcgU3lzdGVtLk5ldC5TZWN1cml0eTsNCiB1c2luZyBT eXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXM7DQogdXNpbmcgU3lzdGVt LlNlY3VyaXR5Ow0KLXVzaW5nIFN5c3RlbS5TZWN1cml0eS5DcnlwdG9ncmFw aHk7DQogdXNpbmcgU3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeS5YNTA5 Q2VydGlmaWNhdGVzOw0KLXVzaW5nIFN5c3RlbS5YbWw7DQogdXNpbmcgWGVu QVBJOw0KIA0KIG5hbWVzcGFjZSBDaXRyaXguWGVuU2VydmVyLkNvbW1hbmRz DQpAQCAtNDgsMTEgKzQ1LDggQEAgbmFtZXNwYWNlIENpdHJpeC5YZW5TZXJ2 ZXIuQ29tbWFuZHMKICAgICBbQ21kbGV0KCJDb25uZWN0IiwgIlhlblNlcnZl ciIpXQ0KICAgICBwdWJsaWMgY2xhc3MgQ29ubmVjdFhlblNlcnZlckNvbW1h bmQgOiBQU0NtZGxldA0KICAgICB7DQotICAgICAgICBwcml2YXRlIGNvbnN0 IHN0cmluZyBDZXJ0aWZpY2F0ZXNQYXRoVmFyaWFibGUgPSAiZ2xvYmFsOktu b3duU2VydmVyQ2VydGlmaWNhdGVzRmlsZVBhdGgiOw0KLQ0KLSAgICAgICAg cHJpdmF0ZSByZWFkb25seSBvYmplY3QgX2NlcnRpZmljYXRlVmFsaWRhdGlv bkxvY2sgPSBuZXcgb2JqZWN0KCk7DQotDQotICAgICAgICBwcml2YXRlIHN0 YXRpYyByZWFkb25seSBzdHJpbmcgRGVmYXVsdFVzZXJBZ2VudCA9ICQiWGVu U2VydmVyUFNNb2R1bGUvQFNES19WRVJTSU9OQCI7DQorICAgICAgICBwcml2 YXRlIHN0YXRpYyByZWFkb25seSBzdHJpbmcgRGVmYXVsdFVzZXJBZ2VudCA9 ICJYZW5TZXJ2ZXJQU01vZHVsZS9AU0RLX1ZFUlNJT05AIjsNCisgICAgICAg IHByaXZhdGUgc3RhdGljIHJlYWRvbmx5IG9iamVjdCBDZXJ0aWZpY2F0ZVZh bGlkYXRpb25Mb2NrID0gbmV3IG9iamVjdCgpOw0KIA0KICAgICAgICAgcHVi bGljIENvbm5lY3RYZW5TZXJ2ZXJDb21tYW5kKCkNCiAgICAgICAgIHsNCkBA IC0yMjgsMTAgKzIyMiwxMCBAQCBuYW1lc3BhY2UgQ2l0cml4LlhlblNlcnZl ci5Db21tYW5kcwogICAgICAgICAgICAgICAgICAgICAgICAgew0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBpZiAoU2hvdWxkQ29udGludWUoZXgu TWVzc2FnZSwgZXguQ2FwdGlvbikpDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHsNCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHZh ciBjZXJ0UGF0aCA9IEdldENlcnRpZmljYXRlc1BhdGgoKTsNCi0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHZhciBjZXJ0aWZpY2F0ZXMgPSBM b2FkQ2VydGlmaWNhdGVzKGNlcnRQYXRoKTsNCisgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHZhciBjZXJ0UGF0aCA9IENvbW1vbkNtZGxldEZ1 bmN0aW9ucy5HZXRDZXJ0aWZpY2F0ZXNQYXRoKHRoaXMpOw0KKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgdmFyIGNlcnRpZmljYXRlcyA9IENv bW1vbkNtZGxldEZ1bmN0aW9ucy5Mb2FkQ2VydGlmaWNhdGVzKGNlcnRQYXRo KTsNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNlcnRpZmlj YXRlc1tleC5Ib3N0bmFtZV0gPSBleC5GaW5nZXJwcmludDsNCi0gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFNhdmVDZXJ0aWZpY2F0ZXMoY2Vy dFBhdGgsIGNlcnRpZmljYXRlcyk7DQorICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBDb21tb25DbWRsZXRGdW5jdGlvbnMuU2F2ZUNlcnRpZmlj YXRlcyhjZXJ0UGF0aCwgY2VydGlmaWNhdGVzKTsNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGktLTsNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGNvbnRpbnVlOw0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB9DQpAQCAtMjc0LDE3MSArMjY4LDUzIEBAIG5hbWVzcGFjZSBD aXRyaXguWGVuU2VydmVyLkNvbW1hbmRzCiAgICAgICAgICAgICAgICAgV3Jp dGVPYmplY3QobmV3U2Vzc2lvbnMuVmFsdWVzLCB0cnVlKTsNCiAgICAgICAg IH0NCiANCi0gICAgICAgIHByaXZhdGUgYm9vbCBWYWxpZGF0ZVNlcnZlckNl cnRpZmljYXRlKG9iamVjdCBzZW5kZXIsIFg1MDlDZXJ0aWZpY2F0ZSBjZXJ0 aWZpY2F0ZSwgWDUwOUNoYWluIGNoYWluLCBTc2xQb2xpY3lFcnJvcnMgc3Ns UG9saWN5RXJyb3JzKQ0KKyAgICAgICAgcHJpdmF0ZSBib29sIFZhbGlkYXRl U2VydmVyQ2VydGlmaWNhdGUob2JqZWN0IHNlbmRlciwgWDUwOUNlcnRpZmlj YXRlIGNlcnRpZmljYXRlLCBYNTA5Q2hhaW4gY2hhaW4sDQorICAgICAgICAg ICAgU3NsUG9saWN5RXJyb3JzIHNzbFBvbGljeUVycm9ycykNCiAgICAgICAg IHsNCiAgICAgICAgICAgICBpZiAoc3NsUG9saWN5RXJyb3JzID09IFNzbFBv bGljeUVycm9ycy5Ob25lKQ0KICAgICAgICAgICAgICAgICByZXR1cm4gdHJ1 ZTsNCiANCi0gICAgICAgICAgICBsb2NrIChfY2VydGlmaWNhdGVWYWxpZGF0 aW9uTG9jaykNCi0gICAgICAgICAgICB7DQotICAgICAgICAgICAgICAgIGJv b2wgaWdub3JlQ2hhbmdlZCA9IEZvcmNlIHx8IE5vV2FybkNlcnRpZmljYXRl cyB8fCAoYm9vbClHZXRWYXJpYWJsZVZhbHVlKCJOb1dhcm5DZXJ0aWZpY2F0 ZXMiLCBmYWxzZSk7DQotICAgICAgICAgICAgICAgIGJvb2wgaWdub3JlTmV3 ID0gRm9yY2UgfHwgTm9XYXJuTmV3Q2VydGlmaWNhdGVzIHx8IChib29sKUdl dFZhcmlhYmxlVmFsdWUoIk5vV2Fybk5ld0NlcnRpZmljYXRlcyIsIGZhbHNl KTsNCi0NCiAjaWYgTkVUOF8wX09SX0dSRUFURVINCi0gICAgICAgICAgICAg ICAgdmFyIHJlcXVlc3RNZXNzYWdlID0gc2VuZGVyIGFzIEh0dHBSZXF1ZXN0 TWVzc2FnZTsNCi0gICAgICAgICAgICAgICAgc3RyaW5nIGhvc3RuYW1lID0g cmVxdWVzdE1lc3NhZ2U/LlJlcXVlc3RVcmk/Lkhvc3QgPz8gc3RyaW5nLkVt cHR5Ow0KKyAgICAgICAgICAgIHZhciByZXF1ZXN0TWVzc2FnZSA9IHNlbmRl ciBhcyBIdHRwUmVxdWVzdE1lc3NhZ2U7DQorICAgICAgICAgICAgc3RyaW5n IGhvc3RuYW1lID0gcmVxdWVzdE1lc3NhZ2U/LlJlcXVlc3RVcmk/Lkhvc3Qg Pz8gc3RyaW5nLkVtcHR5Ow0KICNlbHNlDQotICAgICAgICAgICAgICAgIHZh ciB3ZWJyZXEgPSBzZW5kZXIgYXMgSHR0cFdlYlJlcXVlc3Q7DQotICAgICAg ICAgICAgICAgIHN0cmluZyBob3N0bmFtZSA9IHdlYnJlcT8uQWRkcmVzcz8u SG9zdCA/PyBzdHJpbmcuRW1wdHk7DQorICAgICAgICAgICAgdmFyIHdlYnJl cSA9IHNlbmRlciBhcyBIdHRwV2ViUmVxdWVzdDsNCisgICAgICAgICAgICBz dHJpbmcgaG9zdG5hbWUgPSB3ZWJyZXE/LkFkZHJlc3M/Lkhvc3QgPz8gc3Ry aW5nLkVtcHR5Ow0KICNlbmRpZg0KLSAgICAgICAgICAgICAgICBzdHJpbmcg ZmluZ2VycHJpbnQgPSBDb21tb25DbWRsZXRGdW5jdGlvbnMuRmluZ2VycHJp bnRQcmV0dHlTdHJpbmcoY2VydGlmaWNhdGUuR2V0Q2VydEhhc2hTdHJpbmco KSk7DQogDQotICAgICAgICAgICAgICAgIGJvb2wgdHJ1c3RlZCA9IFZlcmlm eUluQWxsU3RvcmVzKG5ldyBYNTA5Q2VydGlmaWNhdGUyKGNlcnRpZmljYXRl KSk7DQorICAgICAgICAgICAgc3RyaW5nIGZpbmdlcnByaW50ID0gQ29tbW9u Q21kbGV0RnVuY3Rpb25zLkZpbmdlcnByaW50UHJldHR5U3RyaW5nKGNlcnRp ZmljYXRlLkdldENlcnRIYXNoU3RyaW5nKCkpOw0KIA0KLSAgICAgICAgICAg ICAgICB2YXIgY2VydFBhdGggPSBHZXRDZXJ0aWZpY2F0ZXNQYXRoKCk7DQot ICAgICAgICAgICAgICAgIHZhciBjZXJ0aWZpY2F0ZXMgPSBMb2FkQ2VydGlm aWNhdGVzKGNlcnRQYXRoKTsNCisgICAgICAgICAgICBsb2NrIChDZXJ0aWZp Y2F0ZVZhbGlkYXRpb25Mb2NrKQ0KKyAgICAgICAgICAgIHsNCisgICAgICAg ICAgICAgICAgdmFyIGNlcnRQYXRoID0gQ29tbW9uQ21kbGV0RnVuY3Rpb25z LkdldENlcnRpZmljYXRlc1BhdGgodGhpcyk7DQorICAgICAgICAgICAgICAg IHZhciBjZXJ0aWZpY2F0ZXMgPSBDb21tb25DbWRsZXRGdW5jdGlvbnMuTG9h ZENlcnRpZmljYXRlcyhjZXJ0UGF0aCk7DQogDQogICAgICAgICAgICAgICAg IGlmIChjZXJ0aWZpY2F0ZXMuVHJ5R2V0VmFsdWUoaG9zdG5hbWUsIG91dCB2 YXIgZmluZ2VycHJpbnRPbGQpKQ0KICAgICAgICAgICAgICAgICB7DQogICAg ICAgICAgICAgICAgICAgICBpZiAoZmluZ2VycHJpbnRPbGQgPT0gZmluZ2Vy cHJpbnQpDQogICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIHRydWU7 DQogDQorICAgICAgICAgICAgICAgICAgICBib29sIGlnbm9yZUNoYW5nZWQg PSBGb3JjZSB8fCBOb1dhcm5DZXJ0aWZpY2F0ZXMgfHwgKGJvb2wpR2V0VmFy aWFibGVWYWx1ZSgiTm9XYXJuQ2VydGlmaWNhdGVzIiwgZmFsc2UpOw0KICAg ICAgICAgICAgICAgICAgICAgaWYgKCFpZ25vcmVDaGFuZ2VkKQ0KLSAgICAg ICAgICAgICAgICAgICAgICAgIHRocm93IG5ldyBDZXJ0aWZpY2F0ZUNoYW5n ZWRFeGNlcHRpb24oZmluZ2VycHJpbnQsIGZpbmdlcnByaW50T2xkLCB0cnVz dGVkLCBob3N0bmFtZSk7DQorICAgICAgICAgICAgICAgICAgICB7DQorICAg ICAgICAgICAgICAgICAgICAgICAgdmFyIHRydXN0ZWQgPSBDb21tb25DbWRs ZXRGdW5jdGlvbnMuVmVyaWZ5SW5BbGxTdG9yZXMobmV3IFg1MDlDZXJ0aWZp Y2F0ZTIoY2VydGlmaWNhdGUpKTsNCisgICAgICAgICAgICAgICAgICAgICAg ICB0aHJvdyBuZXcgQ2VydGlmaWNhdGVDaGFuZ2VkRXhjZXB0aW9uKGZpbmdl cnByaW50LCB0cnVzdGVkLCBob3N0bmFtZSk7DQorICAgICAgICAgICAgICAg ICAgICB9DQogICAgICAgICAgICAgICAgIH0NCiAgICAgICAgICAgICAgICAg ZWxzZQ0KICAgICAgICAgICAgICAgICB7DQorICAgICAgICAgICAgICAgICAg ICBib29sIGlnbm9yZU5ldyA9IEZvcmNlIHx8IE5vV2Fybk5ld0NlcnRpZmlj YXRlcyB8fCAoYm9vbClHZXRWYXJpYWJsZVZhbHVlKCJOb1dhcm5OZXdDZXJ0 aWZpY2F0ZXMiLCBmYWxzZSk7DQogICAgICAgICAgICAgICAgICAgICBpZiAo IWlnbm9yZU5ldykNCisgICAgICAgICAgICAgICAgICAgIHsNCisgICAgICAg ICAgICAgICAgICAgICAgICB2YXIgdHJ1c3RlZCA9IENvbW1vbkNtZGxldEZ1 bmN0aW9ucy5WZXJpZnlJbkFsbFN0b3JlcyhuZXcgWDUwOUNlcnRpZmljYXRl MihjZXJ0aWZpY2F0ZSkpOw0KICAgICAgICAgICAgICAgICAgICAgICAgIHRo cm93IG5ldyBDZXJ0aWZpY2F0ZU5vdEZvdW5kRXhjZXB0aW9uKGZpbmdlcnBy aW50LCB0cnVzdGVkLCBob3N0bmFtZSk7DQorICAgICAgICAgICAgICAgICAg ICB9DQogICAgICAgICAgICAgICAgIH0NCiANCiAgICAgICAgICAgICAgICAg Y2VydGlmaWNhdGVzW2hvc3RuYW1lXSA9IGZpbmdlcnByaW50Ow0KLSAgICAg ICAgICAgICAgICBTYXZlQ2VydGlmaWNhdGVzKGNlcnRQYXRoLCBjZXJ0aWZp Y2F0ZXMpOw0KKyAgICAgICAgICAgICAgICBDb21tb25DbWRsZXRGdW5jdGlv bnMuU2F2ZUNlcnRpZmljYXRlcyhjZXJ0UGF0aCwgY2VydGlmaWNhdGVzKTsN CiAgICAgICAgICAgICAgICAgcmV0dXJuIHRydWU7DQogICAgICAgICAgICAg fQ0KICAgICAgICAgfQ0KLQ0KLSAgICAgICAgcHJpdmF0ZSBib29sIFZlcmlm eUluQWxsU3RvcmVzKFg1MDlDZXJ0aWZpY2F0ZTIgY2VydGlmaWNhdGUyKQ0K LSAgICAgICAgew0KLSAgICAgICAgICAgIHRyeQ0KLSAgICAgICAgICAgIHsN Ci0gICAgICAgICAgICAgICAgWDUwOUNoYWluIGNoYWluID0gbmV3IFg1MDlD aGFpbih0cnVlKTsNCi0gICAgICAgICAgICAgICAgcmV0dXJuIGNoYWluLkJ1 aWxkKGNlcnRpZmljYXRlMikgfHwgY2VydGlmaWNhdGUyLlZlcmlmeSgpOw0K LSAgICAgICAgICAgIH0NCi0gICAgICAgICAgICBjYXRjaCAoQ3J5cHRvZ3Jh cGhpY0V4Y2VwdGlvbikNCi0gICAgICAgICAgICB7DQotICAgICAgICAgICAg ICAgIHJldHVybiBmYWxzZTsNCi0gICAgICAgICAgICB9DQotICAgICAgICB9 DQotDQotICAgICAgICBwcml2YXRlIHN0cmluZyBHZXRDZXJ0aWZpY2F0ZXNQ YXRoKCkNCi0gICAgICAgIHsNCi0gICAgICAgICAgICB2YXIgY2VydFBhdGhP YmplY3QgPSBTZXNzaW9uU3RhdGUuUFNWYXJpYWJsZS5HZXRWYWx1ZShDZXJ0 aWZpY2F0ZXNQYXRoVmFyaWFibGUpOw0KLQ0KLSAgICAgICAgICAgIHJldHVy biBjZXJ0UGF0aE9iamVjdCBpcyBQU09iamVjdCBwc09iamVjdA0KLSAgICAg ICAgICAgICAgICA/IHBzT2JqZWN0LkJhc2VPYmplY3QgYXMgc3RyaW5nDQot ICAgICAgICAgICAgICAgIDogY2VydFBhdGhPYmplY3Q/LlRvU3RyaW5nKCkg Pz8gc3RyaW5nLkVtcHR5Ow0KLSAgICAgICAgfQ0KLQ0KLSAgICAgICAgcHJp dmF0ZSBEaWN0aW9uYXJ5PHN0cmluZywgc3RyaW5nPiBMb2FkQ2VydGlmaWNh dGVzKHN0cmluZyBjZXJ0UGF0aCkNCi0gICAgICAgIHsNCi0gICAgICAgICAg ICB2YXIgY2VydGlmaWNhdGVzID0gbmV3IERpY3Rpb25hcnk8c3RyaW5nLCBz dHJpbmc+KCk7DQotDQotICAgICAgICAgICAgaWYgKEZpbGUuRXhpc3RzKGNl cnRQYXRoKSkNCi0gICAgICAgICAgICB7DQotICAgICAgICAgICAgICAgIHZh ciBkb2MgPSBuZXcgWG1sRG9jdW1lbnQoKTsNCi0gICAgICAgICAgICAgICAg ZG9jLkxvYWQoY2VydFBhdGgpOw0KLQ0KLSAgICAgICAgICAgICAgICBmb3Jl YWNoIChYbWxOb2RlIG5vZGUgaW4gZG9jLkdldEVsZW1lbnRzQnlUYWdOYW1l KCJjZXJ0aWZpY2F0ZSIpKQ0KLSAgICAgICAgICAgICAgICB7DQotICAgICAg ICAgICAgICAgICAgICB2YXIgaG9zdEF0dCA9IG5vZGUuQXR0cmlidXRlcz9b Imhvc3RuYW1lIl07DQotICAgICAgICAgICAgICAgICAgICB2YXIgZm5ncHJ0 QXR0ID0gbm9kZS5BdHRyaWJ1dGVzP1siZmluZ2VycHJpbnQiXTsNCi0NCi0g ICAgICAgICAgICAgICAgICAgIGlmIChob3N0QXR0ICE9IG51bGwgJiYgZm5n cHJ0QXR0ICE9IG51bGwpDQotICAgICAgICAgICAgICAgICAgICAgICAgY2Vy dGlmaWNhdGVzW2hvc3RBdHQuVmFsdWVdID0gZm5ncHJ0QXR0LlZhbHVlOw0K LSAgICAgICAgICAgICAgICB9DQotICAgICAgICAgICAgfQ0KLQ0KLSAgICAg ICAgICAgIHJldHVybiBjZXJ0aWZpY2F0ZXM7DQotICAgICAgICB9DQotDQot ICAgICAgICBwcml2YXRlIHZvaWQgU2F2ZUNlcnRpZmljYXRlcyhzdHJpbmcg Y2VydFBhdGgsIERpY3Rpb25hcnk8c3RyaW5nLCBzdHJpbmc+IGNlcnRpZmlj YXRlcykNCi0gICAgICAgIHsNCi0gICAgICAgICAgICBzdHJpbmcgZGlyTmFt ZSA9IFBhdGguR2V0RGlyZWN0b3J5TmFtZShjZXJ0UGF0aCk7DQotDQotICAg ICAgICAgICAgaWYgKCFEaXJlY3RvcnkuRXhpc3RzKGRpck5hbWUpKQ0KLSAg ICAgICAgICAgICAgICBEaXJlY3RvcnkuQ3JlYXRlRGlyZWN0b3J5KGRpck5h bWUpOw0KLQ0KLSAgICAgICAgICAgIFhtbERvY3VtZW50IGRvYyA9IG5ldyBY bWxEb2N1bWVudCgpOw0KLSAgICAgICAgICAgIFhtbERlY2xhcmF0aW9uIGRl Y2wgPSBkb2MuQ3JlYXRlWG1sRGVjbGFyYXRpb24oIjEuMCIsICJ1dGYtOCIs IG51bGwpOw0KLSAgICAgICAgICAgIGRvYy5BcHBlbmRDaGlsZChkZWNsKTsN Ci0gICAgICAgICAgICBYbWxOb2RlIG5vZGUgPSBkb2MuQ3JlYXRlRWxlbWVu dCgiY2VydGlmaWNhdGVzIik7DQotDQotICAgICAgICAgICAgZm9yZWFjaCAo S2V5VmFsdWVQYWlyPHN0cmluZywgc3RyaW5nPiBjZXJ0IGluIGNlcnRpZmlj YXRlcykNCi0gICAgICAgICAgICB7DQotICAgICAgICAgICAgICAgIFhtbE5v ZGUgY2VydE5vZGUgPSBkb2MuQ3JlYXRlRWxlbWVudCgiY2VydGlmaWNhdGUi KTsNCi0gICAgICAgICAgICAgICAgWG1sQXR0cmlidXRlIGhvc3RuYW1lID0g ZG9jLkNyZWF0ZUF0dHJpYnV0ZSgiaG9zdG5hbWUiKTsNCi0gICAgICAgICAg ICAgICAgWG1sQXR0cmlidXRlIGZpbmdlcnByaW50ID0gZG9jLkNyZWF0ZUF0 dHJpYnV0ZSgiZmluZ2VycHJpbnQiKTsNCi0gICAgICAgICAgICAgICAgaG9z dG5hbWUuVmFsdWUgPSBjZXJ0LktleTsNCi0gICAgICAgICAgICAgICAgZmlu Z2VycHJpbnQuVmFsdWUgPSBjZXJ0LlZhbHVlOw0KLSAgICAgICAgICAgICAg ICBjZXJ0Tm9kZS5BdHRyaWJ1dGVzPy5BcHBlbmQoaG9zdG5hbWUpOw0KLSAg ICAgICAgICAgICAgICBjZXJ0Tm9kZS5BdHRyaWJ1dGVzPy5BcHBlbmQoZmlu Z2VycHJpbnQpOw0KLSAgICAgICAgICAgICAgICBub2RlLkFwcGVuZENoaWxk KGNlcnROb2RlKTsNCi0gICAgICAgICAgICB9DQotDQotICAgICAgICAgICAg ZG9jLkFwcGVuZENoaWxkKG5vZGUpOw0KLSAgICAgICAgICAgIGRvYy5TYXZl KGNlcnRQYXRoKTsNCi0gICAgICAgIH0NCi0gICAgfQ0KLQ0KLSAgICBpbnRl cm5hbCBhYnN0cmFjdCBjbGFzcyBDZXJ0aWZpY2F0ZVZhbGlkYXRpb25FeGNl cHRpb24gOiBFeGNlcHRpb24NCi0gICAgew0KLSAgICAgICAgcHJvdGVjdGVk IGNvbnN0IHN0cmluZyBDRVJUX1RSVVNURUQgPSAiVGhlIGNlcnRpZmljYXRl IG9uIHRoaXMgc2VydmVyIGlzIHRydXN0ZWQuIEl0IGlzIHJlY29tbWVuZGVk IHlvdSByZS1pc3N1ZSB0aGlzIHNlcnZlcidzIGNlcnRpZmljYXRlLiI7DQot ICAgICAgICBwcm90ZWN0ZWQgY29uc3Qgc3RyaW5nIENFUlRfTk9UX1RSVVNU RUQgPSAiVGhlIGNlcnRpZmljYXRlIG9uIHRoaXMgc2VydmVyIGlzIG5vdCB0 cnVzdGVkLiI7DQotDQotICAgICAgICBwcm90ZWN0ZWQgcmVhZG9ubHkgYm9v bCBUcnVzdGVkOw0KLSAgICAgICAgcHVibGljIHJlYWRvbmx5IHN0cmluZyBG aW5nZXJwcmludDsNCi0gICAgICAgIHB1YmxpYyByZWFkb25seSBzdHJpbmcg SG9zdG5hbWU7DQotDQotICAgICAgICBwcm90ZWN0ZWQgQ2VydGlmaWNhdGVW YWxpZGF0aW9uRXhjZXB0aW9uKHN0cmluZyBmaW5nZXJwcmludCwgYm9vbCB0 cnVzdGVkLCBzdHJpbmcgaG9zdG5hbWUpDQotICAgICAgICB7DQotICAgICAg ICAgICAgRmluZ2VycHJpbnQgPSBmaW5nZXJwcmludDsNCi0gICAgICAgICAg ICBUcnVzdGVkID0gdHJ1c3RlZDsNCi0gICAgICAgICAgICBIb3N0bmFtZSA9 IGhvc3RuYW1lOw0KLSAgICAgICAgfQ0KLQ0KLSAgICAgICAgcHVibGljIGFi c3RyYWN0IHN0cmluZyBDYXB0aW9uIHsgZ2V0OyB9DQotICAgIH0NCi0NCi0g ICAgaW50ZXJuYWwgY2xhc3MgQ2VydGlmaWNhdGVDaGFuZ2VkRXhjZXB0aW9u IDogQ2VydGlmaWNhdGVWYWxpZGF0aW9uRXhjZXB0aW9uDQotICAgIHsNCi0g ICAgICAgIHByaXZhdGUgcmVhZG9ubHkgc3RyaW5nIF9vbGRGaW5nZXJwcmlu dDsNCi0NCi0gICAgICAgIHB1YmxpYyBDZXJ0aWZpY2F0ZUNoYW5nZWRFeGNl cHRpb24oc3RyaW5nIGZpbmdlcnByaW50LCBzdHJpbmcgb2xkRmluZ2VycHJp bnQsIGJvb2wgdHJ1c3RlZCwgc3RyaW5nIGhvc3RuYW1lKQ0KLSAgICAgICAg ICAgIDogYmFzZShmaW5nZXJwcmludCwgdHJ1c3RlZCwgaG9zdG5hbWUpDQot ICAgICAgICB7DQotICAgICAgICAgICAgX29sZEZpbmdlcnByaW50ID0gb2xk RmluZ2VycHJpbnQ7DQotICAgICAgICB9DQotDQotICAgICAgICBwdWJsaWMg b3ZlcnJpZGUgc3RyaW5nIENhcHRpb24gPT4gIlNlY3VyaXR5IENlcnRpZmlj YXRlIENoYW5nZWQiOw0KLQ0KLSAgICAgICAgcHVibGljIG92ZXJyaWRlIHN0 cmluZyBNZXNzYWdlID0+ICQiVGhlIGNlcnRpZmljYXRlIGZpbmdlcnByaW50 IG9mIHRoZSBzZXJ2ZXIgeW91IGhhdmUgY29ubmVjdGVkIHRvIGlzOlxue0Zp bmdlcnByaW50fVxuIiArDQotICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgJCJCdXQgd2FzIGV4cGVjdGVkIHRvIGJlOlxue19v bGRGaW5nZXJwcmludH1cbiIgKw0KLSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIChUcnVzdGVkID8gQ0VSVF9UUlVTVEVEIDog Q0VSVF9OT1RfVFJVU1RFRCkgKw0KLSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICJcbkRvIHlvdSB3aXNoIHRvIGNvbnRpbnVl PyI7DQotICAgIH0NCi0NCi0gICAgaW50ZXJuYWwgY2xhc3MgQ2VydGlmaWNh dGVOb3RGb3VuZEV4Y2VwdGlvbiA6IENlcnRpZmljYXRlVmFsaWRhdGlvbkV4 Y2VwdGlvbg0KLSAgICB7DQotICAgICAgICBwdWJsaWMgQ2VydGlmaWNhdGVO b3RGb3VuZEV4Y2VwdGlvbihzdHJpbmcgZmluZ2VycHJpbnQsIGJvb2wgdHJ1 c3RlZCwgc3RyaW5nIGhvc3RuYW1lKQ0KLSAgICAgICAgICAgIDogYmFzZShm aW5nZXJwcmludCwgdHJ1c3RlZCwgaG9zdG5hbWUpDQotICAgICAgICB7DQot ICAgICAgICB9DQotDQotICAgICAgICBwdWJsaWMgb3ZlcnJpZGUgc3RyaW5n IENhcHRpb24gPT4gIk5ldyBTZWN1cml0eSBDZXJ0aWZpY2F0ZSI7DQotDQot ICAgICAgICBwdWJsaWMgb3ZlcnJpZGUgc3RyaW5nIE1lc3NhZ2UgPT4gJCJU aGUgY2VydGlmaWNhdGUgZmluZ2VycHJpbnQgb2YgdGhlIHNlcnZlciB5b3Ug aGF2ZSBjb25uZWN0ZWQgdG8gaXMgOlxue0ZpbmdlcnByaW50fVxuIiArDQot ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKFRy dXN0ZWQgPyBDRVJUX1RSVVNURUQgOiBDRVJUX05PVF9UUlVTVEVEKSArDQot ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlxu RG8geW91IHdpc2ggdG8gY29udGludWU/IjsNCiAgICAgfQ0KIH0NCmRpZmYg LS1naXQgYS9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMv UmVjZWl2ZS1YZW5Qb29sUGF0Y2guY3MgYi9vY2FtbC9zZGstZ2VuL3Bvd2Vy c2hlbGwvYXV0b2dlbi9zcmMvUmVjZWl2ZS1YZW5Qb29sUGF0Y2guY3MKaW5k ZXggNzQ0MmUwNDdlLi44MzY4MTllMTIgMTAwNjQ0Ci0tLSBhL29jYW1sL3Nk ay1nZW4vcG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9SZWNlaXZlLVhlblBvb2xQ YXRjaC5jcworKysgYi9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dl bi9zcmMvUmVjZWl2ZS1YZW5Qb29sUGF0Y2guY3MKQEAgLTU4LDggKzU4LDgg QEAgbmFtZXNwYWNlIENpdHJpeC5YZW5TZXJ2ZXIuQ29tbWFuZHMKICAgICAg ICAgICAgIEdldFNlc3Npb24oKTsNCiANCiAgICAgICAgICAgICBSdW5BcGlD YWxsKCgpID0+IFhlbkFQSS5IVFRQX2FjdGlvbnMuZ2V0X3Bvb2xfcGF0Y2hf ZG93bmxvYWQoRGF0YUNvcGllZERlbGVnYXRlLA0KLSAgICAgICAgICAgICAg ICBDYW5jZWxsaW5nRGVsZWdhdGUsIFRpbWVvdXRNcywgWGVuSG9zdCwgUHJv eHksIFBhdGgsIFRhc2tSZWYsDQotICAgICAgICAgICAgICAgIHNlc3Npb24u b3BhcXVlX3JlZiwgVXVpZCkpOw0KKyAgICAgICAgICAgICAgICBDYW5jZWxs aW5nRGVsZWdhdGUsIFRpbWVvdXRNcywgWGVuSG9zdCwgUHJveHksIENlcnRp ZmljYXRlVmFsaWRhdGlvbkNhbGxiYWNrLA0KKyAgICAgICAgICAgICAgICBQ YXRoLCBUYXNrUmVmLCBzZXNzaW9uLm9wYXF1ZV9yZWYsIFV1aWQpKTsNCiAg ICAgICAgIH0NCiANCiAgICAgICAgICNlbmRyZWdpb24NCmRpZmYgLS1naXQg YS9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMvU2VuZC1Y ZW5PZW1QYXRjaFN0cmVhbS5jcyBiL29jYW1sL3Nkay1nZW4vcG93ZXJzaGVs bC9hdXRvZ2VuL3NyYy9TZW5kLVhlbk9lbVBhdGNoU3RyZWFtLmNzCmluZGV4 IDNjNjc2OGY2ZC4uMmRhMDU3ODFjIDEwMDY0NAotLS0gYS9vY2FtbC9zZGst Z2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMvU2VuZC1YZW5PZW1QYXRjaFN0 cmVhbS5jcworKysgYi9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dl bi9zcmMvU2VuZC1YZW5PZW1QYXRjaFN0cmVhbS5jcwpAQCAtNTgsOCArNTgs OCBAQCBuYW1lc3BhY2UgQ2l0cml4LlhlblNlcnZlci5Db21tYW5kcwogICAg ICAgICAgICAgICAgIHJldHVybjsNCiANCiAgICAgICAgICAgICBSdW5BcGlD YWxsKCgpID0+IFhlbkFQSS5IVFRQX2FjdGlvbnMucHV0X29lbV9wYXRjaF9z dHJlYW0oUHJvZ3Jlc3NEZWxlZ2F0ZSwNCi0gICAgICAgICAgICAgICAgQ2Fu Y2VsbGluZ0RlbGVnYXRlLCBUaW1lb3V0TXMsIFhlbkhvc3QsIFByb3h5LCBQ YXRoLCBUYXNrUmVmLA0KLSAgICAgICAgICAgICAgICBzZXNzaW9uLm9wYXF1 ZV9yZWYpKTsNCisgICAgICAgICAgICAgICAgQ2FuY2VsbGluZ0RlbGVnYXRl LCBUaW1lb3V0TXMsIFhlbkhvc3QsIFByb3h5LCBDZXJ0aWZpY2F0ZVZhbGlk YXRpb25DYWxsYmFjaywNCisgICAgICAgICAgICAgICAgUGF0aCwgVGFza1Jl Ziwgc2Vzc2lvbi5vcGFxdWVfcmVmKSk7DQogICAgICAgICB9DQogDQogICAg ICAgICAjZW5kcmVnaW9uDQpkaWZmIC0tZ2l0IGEvb2NhbWwvc2RrLWdlbi9w b3dlcnNoZWxsL2F1dG9nZW4vc3JjL1hlblNlcnZlckNtZGxldC5jcyBiL29j YW1sL3Nkay1nZW4vcG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9YZW5TZXJ2ZXJD bWRsZXQuY3MKaW5kZXggZmZmYTY1YjU4Li4xNTcyYjM0NmQgMTAwNjQ0Ci0t LSBhL29jYW1sL3Nkay1nZW4vcG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9YZW5T ZXJ2ZXJDbWRsZXQuY3MKKysrIGIvb2NhbWwvc2RrLWdlbi9wb3dlcnNoZWxs L2F1dG9nZW4vc3JjL1hlblNlcnZlckNtZGxldC5jcwpAQCAtMjksNyArMjks NiBAQAogDQogDQogdXNpbmcgU3lzdGVtOw0KLXVzaW5nIFN5c3RlbS5Db2xs ZWN0aW9uczsNCiB1c2luZyBTeXN0ZW0uQ29sbGVjdGlvbnMuR2VuZXJpYzsN CiB1c2luZyBTeXN0ZW0uTWFuYWdlbWVudC5BdXRvbWF0aW9uOw0KIA0KQEAg LTExMywyMyArMTEyLDQ0IEBAIG5hbWVzcGFjZSBDaXRyaXguWGVuU2VydmVy LkNvbW1hbmRzCiANCiAgICAgICAgIHByb3RlY3RlZCB2b2lkIFJ1bkFwaUNh bGwoWGVuQXBpQ2FsbCBjYWxsKQ0KICAgICAgICAgew0KLSAgICAgICAgICAg IHRyeQ0KKyAgICAgICAgICAgIGZvciAoaW50IGkgPSAwOyBpIDwgMTsgaSsr KQ0KICAgICAgICAgICAgIHsNCi0gICAgICAgICAgICAgICAgY2FsbC5JbnZv a2UoKTsNCi0gICAgICAgICAgICB9DQotICAgICAgICAgICAgY2F0Y2ggKEV4 Y2VwdGlvbiBlKQ0KLSAgICAgICAgICAgIHsNCi0gICAgICAgICAgICAgICAg Ly8gaWYgeW91IHdhbnQgdG8gdHJhcCBlcnJvcnMgZWl0aGVyIHNldCBjb21t YW5kLWxpbmUgc3dpdGNoICItQmVzdEVmZm9ydCINCi0gICAgICAgICAgICAg ICAgLy8gb3Igc2Vzc2lvbi1zdGF0ZSB2YXJpYWJsZSAiJEJlc3RFZmZvcnQi IHRvICIkdHJ1ZSINCi0NCi0gICAgICAgICAgICAgICAgYm9vbCBiZXN0RWZm b3J0ID0gKGJvb2wpR2V0VmFyaWFibGVWYWx1ZSgiQmVzdEVmZm9ydCIsIGZh bHNlKSB8fCBCZXN0RWZmb3J0Ow0KLSAgICAgICAgICAgICAgICBpZiAoIWJl c3RFZmZvcnQpDQotICAgICAgICAgICAgICAgICAgICB0aHJvdzsNCi0NCi0g ICAgICAgICAgICAgICAgLy8gY2F0Y2ggZXhjZXB0aW9uIGFuZCB3cml0ZSBp dCB0byB0aGUgdGVybWluYWwgdGhlbiByZXR1cm4NCi0gICAgICAgICAgICAg ICAgLy8gZG9uJ3QgdGhyb3cgaXQgYmVjYXVzZSB0aGlzIHdpbGwgYnJlYWsg cGlwaW5nIGEgbGlzdCBpbnRvIHRoZSBjbWQgKHdvbid0IHJ1biByZXN0IG9m IGxpc3QpDQotDQotICAgICAgICAgICAgICAgIFRocm93VGVybWluYXRpbmdF cnJvcihuZXcgRXJyb3JSZWNvcmQoZSwgc3RyaW5nLkVtcHR5LCBFcnJvckNh dGVnb3J5LkludmFsaWRPcGVyYXRpb24sIG51bGwpKTsNCisgICAgICAgICAg ICAgICAgdHJ5DQorICAgICAgICAgICAgICAgIHsNCisgICAgICAgICAgICAg ICAgICAgIGNhbGwuSW52b2tlKCk7DQorICAgICAgICAgICAgICAgIH0NCisg ICAgICAgICAgICAgICAgY2F0Y2ggKEV4Y2VwdGlvbiBlKQ0KKyAgICAgICAg ICAgICAgICB7DQorICAgICAgICAgICAgICAgICAgICBpZiAoZSBpcyBDZXJ0 aWZpY2F0ZVZhbGlkYXRpb25FeGNlcHRpb24gZXgpDQorICAgICAgICAgICAg ICAgICAgICB7DQorICAgICAgICAgICAgICAgICAgICAgICAgaWYgKFNob3Vs ZENvbnRpbnVlKGV4Lk1lc3NhZ2UsIGV4LkNhcHRpb24pKQ0KKyAgICAgICAg ICAgICAgICAgICAgICAgIHsNCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgdmFyIGNlcnRQYXRoID0gQ29tbW9uQ21kbGV0RnVuY3Rpb25zLkdldENl cnRpZmljYXRlc1BhdGgodGhpcyk7DQorICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHZhciBjZXJ0aWZpY2F0ZXMgPSBDb21tb25DbWRsZXRGdW5jdGlv bnMuTG9hZENlcnRpZmljYXRlcyhjZXJ0UGF0aCk7DQorICAgICAgICAgICAg ICAgICAgICAgICAgICAgIGNlcnRpZmljYXRlc1tleC5Ib3N0bmFtZV0gPSBl eC5GaW5nZXJwcmludDsNCisgICAgICAgICAgICAgICAgICAgICAgICAgICAg Q29tbW9uQ21kbGV0RnVuY3Rpb25zLlNhdmVDZXJ0aWZpY2F0ZXMoY2VydFBh dGgsIGNlcnRpZmljYXRlcyk7DQorICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGktLTsNCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgY29udGlu dWU7DQorICAgICAgICAgICAgICAgICAgICAgICAgfQ0KKw0KKyAgICAgICAg ICAgICAgICAgICAgICAgIFRocm93VGVybWluYXRpbmdFcnJvcihuZXcgRXJy b3JSZWNvcmQoZXgsICIiLCBFcnJvckNhdGVnb3J5LkF1dGhlbnRpY2F0aW9u RXJyb3IsIGV4Lkhvc3RuYW1lKQ0KKyAgICAgICAgICAgICAgICAgICAgICAg IHsNCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgRXJyb3JEZXRhaWxz ID0gbmV3IEVycm9yRGV0YWlscygkIkNlcnRpZmljYXRlIGZpbmdlcnByaW50 IHJlamVjdGVkLiAoe2V4LkZpbmdlcnByaW50fSAtIHtleC5Ib3N0bmFtZX0p LiIpDQorICAgICAgICAgICAgICAgICAgICAgICAgfSk7DQorICAgICAgICAg ICAgICAgICAgICB9DQorDQorICAgICAgICAgICAgICAgICAgICAvLyBpZiB5 b3Ugd2FudCB0byB0cmFwIGVycm9ycyBlaXRoZXIgc2V0IGNvbW1hbmQtbGlu ZSBzd2l0Y2ggIi1CZXN0RWZmb3J0Ig0KKyAgICAgICAgICAgICAgICAgICAg Ly8gb3Igc2Vzc2lvbi1zdGF0ZSB2YXJpYWJsZSAiJEJlc3RFZmZvcnQiIHRv ICIkdHJ1ZSINCisNCisgICAgICAgICAgICAgICAgICAgIGJvb2wgYmVzdEVm Zm9ydCA9IChib29sKUdldFZhcmlhYmxlVmFsdWUoIkJlc3RFZmZvcnQiLCBm YWxzZSkgfHwgQmVzdEVmZm9ydDsNCisgICAgICAgICAgICAgICAgICAgIGlm ICghYmVzdEVmZm9ydCkNCisgICAgICAgICAgICAgICAgICAgICAgICB0aHJv dzsNCisNCisgICAgICAgICAgICAgICAgICAgIC8vIGNhdGNoIGV4Y2VwdGlv biBhbmQgd3JpdGUgaXQgdG8gdGhlIHRlcm1pbmFsIHRoZW4gcmV0dXJuDQor ICAgICAgICAgICAgICAgICAgICAvLyBkb24ndCB0aHJvdyBpdCBiZWNhdXNl IHRoaXMgd2lsbCBicmVhayBwaXBpbmcgYSBsaXN0IGludG8gdGhlIGNtZCAo d29uJ3QgcnVuIHJlc3Qgb2YgbGlzdCkNCisNCisgICAgICAgICAgICAgICAg ICAgIFRocm93VGVybWluYXRpbmdFcnJvcihuZXcgRXJyb3JSZWNvcmQoZSwg c3RyaW5nLkVtcHR5LCBFcnJvckNhdGVnb3J5LkludmFsaWRPcGVyYXRpb24s IG51bGwpKTsNCisgICAgICAgICAgICAgICAgfQ0KICAgICAgICAgICAgIH0N CiAgICAgICAgIH0NCiANCmRpZmYgLS1naXQgYS9vY2FtbC9zZGstZ2VuL3Bv d2Vyc2hlbGwvYXV0b2dlbi9zcmMvWGVuU2VydmVySHR0cENtZGxldC5jcyBi L29jYW1sL3Nkay1nZW4vcG93ZXJzaGVsbC9hdXRvZ2VuL3NyYy9YZW5TZXJ2 ZXJIdHRwQ21kbGV0LmNzCmluZGV4IDBmZGVjYmFiMC4uZmNiZjRkMThiIDEw MDY0NAotLS0gYS9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvYXV0b2dlbi9z cmMvWGVuU2VydmVySHR0cENtZGxldC5jcworKysgYi9vY2FtbC9zZGstZ2Vu L3Bvd2Vyc2hlbGwvYXV0b2dlbi9zcmMvWGVuU2VydmVySHR0cENtZGxldC5j cwpAQCAtMjksMTYgKzI5LDI0IEBACiANCiANCiB1c2luZyBTeXN0ZW07DQot dXNpbmcgU3lzdGVtLkNvbGxlY3Rpb25zLkdlbmVyaWM7DQogdXNpbmcgU3lz dGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbjsNCiB1c2luZyBTeXN0ZW0uTmV0 Ow0KLQ0KK3VzaW5nIFN5c3RlbS5OZXQuU2VjdXJpdHk7DQordXNpbmcgU3lz dGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeS5YNTA5Q2VydGlmaWNhdGVzOw0K IHVzaW5nIFhlbkFQSTsNCiANCiBuYW1lc3BhY2UgQ2l0cml4LlhlblNlcnZl ci5Db21tYW5kcw0KIHsNCiAgICAgcHVibGljIGNsYXNzIFhlblNlcnZlckh0 dHBDbWRsZXQgOiBYZW5TZXJ2ZXJDbWRsZXQNCiAgICAgew0KKyAgICAgICAg cHJpdmF0ZSBib29sIF9oaXRvbmNlOw0KKyAgICAgICAgcHJpdmF0ZSBzdGF0 aWMgcmVhZG9ubHkgb2JqZWN0IENlcnRpZmljYXRlVmFsaWRhdGlvbkxvY2sg PSBuZXcgb2JqZWN0KCk7DQorDQorICAgICAgICBwcm90ZWN0ZWQgWGVuU2Vy dmVySHR0cENtZGxldCgpDQorICAgICAgICB7DQorICAgICAgICAgICAgQ2Vy dGlmaWNhdGVWYWxpZGF0aW9uQ2FsbGJhY2sgPSBWYWxpZGF0ZVNlcnZlckNl cnRpZmljYXRlOw0KKyAgICAgICAgfQ0KKw0KICAgICAgICAgI3JlZ2lvbiBD bWRsZXQgUGFyYW1ldGVycw0KIA0KICAgICAgICAgW1BhcmFtZXRlcl0NCkBA IC01Myw2ICs2MSwxNSBAQCBuYW1lc3BhY2UgQ2l0cml4LlhlblNlcnZlci5D b21tYW5kcwogICAgICAgICBbUGFyYW1ldGVyXQ0KICAgICAgICAgcHVibGlj IElXZWJQcm94eSBQcm94eSB7IGdldDsgc2V0OyB9DQogDQorICAgICAgICBb UGFyYW1ldGVyXQ0KKyAgICAgICAgcHVibGljIFJlbW90ZUNlcnRpZmljYXRl VmFsaWRhdGlvbkNhbGxiYWNrIENlcnRpZmljYXRlVmFsaWRhdGlvbkNhbGxi YWNrIHsgZ2V0OyBzZXQ7IH0NCisNCisgICAgICAgIFtQYXJhbWV0ZXJdDQor ICAgICAgICBwdWJsaWMgU3dpdGNoUGFyYW1ldGVyIE5vV2Fybk5ld0NlcnRp ZmljYXRlcyB7IGdldDsgc2V0OyB9DQorDQorICAgICAgICBbUGFyYW1ldGVy XQ0KKyAgICAgICAgcHVibGljIFN3aXRjaFBhcmFtZXRlciBOb1dhcm5DZXJ0 aWZpY2F0ZXMgeyBnZXQ7IHNldDsgfQ0KKw0KICAgICAgICAgW1BhcmFtZXRl cihNYW5kYXRvcnkgPSB0cnVlKV0NCiAgICAgICAgIHB1YmxpYyBzdHJpbmcg UGF0aCB7IGdldDsgc2V0OyB9DQogDQpAQCAtNjAsNSArNzcsNTUgQEAgbmFt ZXNwYWNlIENpdHJpeC5YZW5TZXJ2ZXIuQ29tbWFuZHMKICAgICAgICAgcHVi bGljIHN0cmluZyBUYXNrUmVmIHsgZ2V0OyBzZXQ7IH0NCiANCiAgICAgICAg ICNlbmRyZWdpb24NCisNCisgICAgICAgIHByaXZhdGUgYm9vbCBWYWxpZGF0 ZVNlcnZlckNlcnRpZmljYXRlKG9iamVjdCBzZW5kZXIsIFg1MDlDZXJ0aWZp Y2F0ZSBjZXJ0aWZpY2F0ZSwgWDUwOUNoYWluIGNoYWluLCBTc2xQb2xpY3lF cnJvcnMgc3NsUG9saWN5RXJyb3JzKQ0KKyAgICAgICAgew0KKyAgICAgICAg ICAgIHRyeQ0KKyAgICAgICAgICAgIHsNCisgICAgICAgICAgICAgICAgaWYg KHNzbFBvbGljeUVycm9ycyA9PSBTc2xQb2xpY3lFcnJvcnMuTm9uZSkNCisg ICAgICAgICAgICAgICAgICAgIHJldHVybiB0cnVlOw0KKw0KKyAgICAgICAg ICAgICAgICBzdHJpbmcgZmluZ2VycHJpbnRUb0NoZWNrID0gQ29tbW9uQ21k bGV0RnVuY3Rpb25zLkZpbmdlcnByaW50UHJldHR5U3RyaW5nKGNlcnRpZmlj YXRlLkdldENlcnRIYXNoU3RyaW5nKCkpOw0KKw0KKyAgICAgICAgICAgICAg ICBsb2NrIChDZXJ0aWZpY2F0ZVZhbGlkYXRpb25Mb2NrKQ0KKyAgICAgICAg ICAgICAgICB7DQorICAgICAgICAgICAgICAgICAgICB2YXIgY2VydFBhdGgg PSBDb21tb25DbWRsZXRGdW5jdGlvbnMuR2V0Q2VydGlmaWNhdGVzUGF0aCh0 aGlzKTsNCisgICAgICAgICAgICAgICAgICAgIHZhciBjZXJ0aWZpY2F0ZXMg PSBDb21tb25DbWRsZXRGdW5jdGlvbnMuTG9hZENlcnRpZmljYXRlcyhjZXJ0 UGF0aCk7DQorDQorICAgICAgICAgICAgICAgICAgICBpZiAoY2VydGlmaWNh dGVzLlRyeUdldFZhbHVlKFhlbkhvc3QsIG91dCB2YXIgaG9zdEZpbmdlcnBy aW50KSkNCisgICAgICAgICAgICAgICAgICAgIHsNCisgICAgICAgICAgICAg ICAgICAgICAgICBpZiAoZmluZ2VycHJpbnRUb0NoZWNrID09IGhvc3RGaW5n ZXJwcmludCkNCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmV0dXJu IHRydWU7DQorDQorICAgICAgICAgICAgICAgICAgICAgICAgYm9vbCBpZ25v cmVDaGFuZ2VkID0gTm9XYXJuQ2VydGlmaWNhdGVzIHx8IChib29sKUdldFZh cmlhYmxlVmFsdWUoIk5vV2FybkNlcnRpZmljYXRlcyIsIGZhbHNlKTsNCisg ICAgICAgICAgICAgICAgICAgICAgICBpZiAoIWlnbm9yZUNoYW5nZWQpDQor ICAgICAgICAgICAgICAgICAgICAgICAgew0KKyAgICAgICAgICAgICAgICAg ICAgICAgICAgICBpZiAoX2hpdG9uY2UpDQorICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB0aHJvdyBuZXcgRXhjZXB0aW9uKCQie1hlbkhvc3R9 IGlzIG5vdCB0aGUgY29ycmVjdCBzZXJ2ZXIgZm9yIHRoaXMgb3BlcmF0aW9u LiBQbGVhc2Ugc3BlY2lmeSBhIGRpZmZlcmVudCBzZXJ2ZXIgaW4gdGhlIHBv b2wuIik7DQorDQorICAgICAgICAgICAgICAgICAgICAgICAgICAgIHZhciB0 cnVzdGVkID0gQ29tbW9uQ21kbGV0RnVuY3Rpb25zLlZlcmlmeUluQWxsU3Rv cmVzKG5ldyBYNTA5Q2VydGlmaWNhdGUyKGNlcnRpZmljYXRlKSk7DQorICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHRocm93IG5ldyBDZXJ0aWZpY2F0 ZUNoYW5nZWRFeGNlcHRpb24oZmluZ2VycHJpbnRUb0NoZWNrLCB0cnVzdGVk LCBYZW5Ib3N0KTsNCisgICAgICAgICAgICAgICAgICAgICAgICB9DQorICAg ICAgICAgICAgICAgICAgICB9DQorICAgICAgICAgICAgICAgICAgICBlbHNl DQorICAgICAgICAgICAgICAgICAgICB7DQorICAgICAgICAgICAgICAgICAg ICAgICAgYm9vbCBpZ25vcmVOZXcgPSBOb1dhcm5OZXdDZXJ0aWZpY2F0ZXMg fHwgKGJvb2wpR2V0VmFyaWFibGVWYWx1ZSgiTm9XYXJuTmV3Q2VydGlmaWNh dGVzIiwgZmFsc2UpOw0KKyAgICAgICAgICAgICAgICAgICAgICAgIGlmICgh aWdub3JlTmV3KQ0KKyAgICAgICAgICAgICAgICAgICAgICAgIHsNCisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgdmFyIHRydXN0ZWQgPSBDb21tb25D bWRsZXRGdW5jdGlvbnMuVmVyaWZ5SW5BbGxTdG9yZXMobmV3IFg1MDlDZXJ0 aWZpY2F0ZTIoY2VydGlmaWNhdGUpKTsNCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAgdGhyb3cgbmV3IENlcnRpZmljYXRlTm90Rm91bmRFeGNlcHRp b24oZmluZ2VycHJpbnRUb0NoZWNrLCB0cnVzdGVkLCBYZW5Ib3N0KTsNCisg ICAgICAgICAgICAgICAgICAgICAgICB9DQorICAgICAgICAgICAgICAgICAg ICB9DQorDQorICAgICAgICAgICAgICAgICAgICBjZXJ0aWZpY2F0ZXNbWGVu SG9zdF0gPSBmaW5nZXJwcmludFRvQ2hlY2s7DQorICAgICAgICAgICAgICAg ICAgICBDb21tb25DbWRsZXRGdW5jdGlvbnMuU2F2ZUNlcnRpZmljYXRlcyhj ZXJ0UGF0aCwgY2VydGlmaWNhdGVzKTsNCisgICAgICAgICAgICAgICAgICAg IHJldHVybiB0cnVlOw0KKyAgICAgICAgICAgICAgICB9DQorICAgICAgICAg ICAgfQ0KKyAgICAgICAgICAgIGZpbmFsbHkNCisgICAgICAgICAgICB7DQor ICAgICAgICAgICAgICAgIF9oaXRvbmNlID0gdHJ1ZTsNCisgICAgICAgICAg ICB9DQorICAgICAgICB9DQogICAgIH0NCiB9DQpkaWZmIC0tZ2l0IGEvb2Nh bWwvc2RrLWdlbi9wb3dlcnNoZWxsL3RlbXBsYXRlcy9IdHRwQWN0aW9uLm11 c3RhY2hlIGIvb2NhbWwvc2RrLWdlbi9wb3dlcnNoZWxsL3RlbXBsYXRlcy9I dHRwQWN0aW9uLm11c3RhY2hlCmluZGV4IGUzNDZhNjhiOC4uNDBiNWI4OTc3 IDEwMDY0NAotLS0gYS9vY2FtbC9zZGstZ2VuL3Bvd2Vyc2hlbGwvdGVtcGxh dGVzL0h0dHBBY3Rpb24ubXVzdGFjaGUKKysrIGIvb2NhbWwvc2RrLWdlbi9w b3dlcnNoZWxsL3RlbXBsYXRlcy9IdHRwQWN0aW9uLm11c3RhY2hlCkBAIC03 MSw3ICs3MSw3IEBAIG5hbWVzcGFjZSBDaXRyaXguWGVuU2VydmVyLkNvbW1h bmRzCiB7ey9pc1B1dH19CiAKICAgICAgICAgICAgIFJ1bkFwaUNhbGwoKCkg PT4gSFRUUF9hY3Rpb25zLnt7YWN0aW9uX25hbWV9fSh7eyNpc1B1dH19UHJv Z3Jlc3NEZWxlZ2F0ZXt7L2lzUHV0fX17eyNpc0dldH19RGF0YUNvcGllZERl bGVnYXRle3svaXNHZXR9fSwKLSAgICAgICAgICAgICAgICBDYW5jZWxsaW5n RGVsZWdhdGUsIFRpbWVvdXRNcywgWGVuSG9zdCwgUHJveHksIFBhdGgsIFRh c2tSZWYsCisgICAgICAgICAgICAgICAgQ2FuY2VsbGluZ0RlbGVnYXRlLCBU aW1lb3V0TXMsIFhlbkhvc3QsIFByb3h5LCBDZXJ0aWZpY2F0ZVZhbGlkYXRp b25DYWxsYmFjaywgUGF0aCwgVGFza1JlZiwKICAgICAgICAgICAgICAgICBz ZXNzaW9uLm9wYXF1ZV9yZWZ7eyNhcmdzfX0sIHt7YXJnX25hbWV9fXt7L2Fy Z3N9fSkpOwogICAgICAgICB9CiAK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372459.1619793 (Exim 4.92) (envelope-from ) id 1wogYN-0006ak-O7; Tue, 28 Jul 2026 12:04:59 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372459.1619793; Tue, 28 Jul 2026 12:04:59 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYN-0006XX-J7; Tue, 28 Jul 2026 12:04:59 +0000 Received: by outflank-mailman (input) for mailman id 1372459; Tue, 28 Jul 2026 12:04:57 +0000 Received: from mx.expurgate.net ([194.145.224.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYL-0006Qv-83; Tue, 28 Jul 2026 12:04:57 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYK-006xWW-Kc; Tue, 28 Jul 2026 14:04:56 +0200 Received: from [10.42.69.9] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689ae1-bab6-0a2a0a5309dd-0a2a4509a2a2-34 for ; Tue, 28 Jul 2026 14:04:56 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-bad1c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689ae7-be1a-0a2a45090019-6882d725ebf0-3 for ; Tue, 28 Jul 2026 14:04:56 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYD-00DP7e-0o; Tue, 28 Jul 2026 12:04:48 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYC-003Db7-2s; Tue, 28 Jul 2026 12:04:48 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 495 v2 (CVE-2026-42493) - x86 shadow paging is deprecated Message-Id: Date: Tue, 28 Jul 2026 12:04:48 +0000 X-purgate-ID: tlsNG-bad1c0/1785240296-FC212034-EB6E98A6/0/0 X-purgate-type: clean X-purgate-size: 27271 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-42493 / XSA-495 version 2 x86 shadow paging is deprecated UPDATES IN VERSION 2 ==================== Updated the patch for staging with further CI adjustements. Public release. ISSUE DESCRIPTION ================= Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives (HVM/PVH: HAP, PV: shim) are commonly available, the decision was to deprecate the functionality, while still retaining it for people to use at their own (security) risk. Memory-wise small enough guests may still be okay to run. IMPACT ====== An unprivileged guest may be able to cause Denial of Service (DoS) affecting the entire host. VULNERABLE SYSTEMS ================== All x86 systems with builds of Xen having SHADOW_PAGING=y are affected. Note that prior to Xen 4.7 this control didn't exist, and all builds of Xen would be affected. (Strictly speaking Xen 4.6 had a different, harder to use mechanism to disable shadow paging support: One could pass "shadow-paging=n" on the make command line.) MITIGATION ========== Running HVM and PVH in Hardware Assisted Paging (HAP) mode will avoid this vulnerability. There's no mitigation available for PV guests. This is because shadow mode, if support is enabled in the hypervisor, could be engaged at any time. Note that without shadow mode built into Xen, guests not properly dealing with L1TF will simply be crashed instead. RESOLUTION ========== Applying the appropriate attached patch documents this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa495.patch xen-unstable - Xen 4.22.0 xsa495-4.21.patch Xen 4.21.x xsa495-4.20.patch Xen 4.20.x - Xen 4.19.x xsa495-4.18.patch Xen 4.18.x xsa495-4.17.patch Xen 4.17.x $ sha256sum xsa495* 949624ce241ddc455c43cdde0ff045cc5fdf29b69f06f7079fa8f1d2400e1d9d xsa495.patch bb1fea4b49840b81a1a7ca86124e308f23edd6eb078857d44d9ebaf1b352b374 xsa495-4.17.patch 06f2c862df85a17b9dc1d4a0df42cadb97e24b7033c070c9ad74ad72d278af0e xsa495-4.18.patch bffa5816be9ddf0fabec0509f2b74e30a5dd0e5429a3b7919e304150cb5091f2 xsa495-4.20.patch 7092cf37dbcfecc9aa6bf9a2836ed70f48f52bccb9630e94c89d2afe120b47f5 xsa495-4.21.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of patches or mitigations is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because switching HVM or PVH guests from shadow to HAP mode is a guest noticeable change, while for PV guests the lack of shadow mode is noticeable because they then cannot be migrated anymore, and guests not properly fixed for L1TF would be forcibly crashed. Deployment is permitted only AFTER the embargo ends. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomqUMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZH9wH/2EYJsV5YVdJsoQSlG94dqOR7IDPEI2I17wUVSoG OK6BaqaejA1SHJbt0/wSkhJ9er+1UHzgr61S7EnE813mugu7T9nwTku1/++4DB9O V/ID/NZzWwGJ2EjCHGrVTPZvmxMmVBGZs3bex00xrQ83y97D3TfmCRH0k6ip7sUh kKSmdvTdlnODuV1+3KT09RIpDvOjVGXLpnd22++0CcT0eFoOrn0nH2dgdUw/grTf 7ye6pGcj2xViznw7FDJnXG4XOAC+wIBMX9HJK6rMOFR9P2DFUxUEcYVN+DlzR67h 3Mejc9U4Ll+65RoZbI01lmpnpqEJ33kPRGkwzA0CJmkF8wQ= =evRY -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa495.patch" Content-Disposition: attachment; filename="xsa495.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IFNIQURPV19QQUdJTkcgaXMgZGVwcmVjYXRlZAoKQWRkcmVzc2lu ZyBjZXJ0YWluIGlzc3VlcywgaW4gcGFydGljdWxhciByZWxhdGVkIHRvIG9w ZXJhdGlvbnMgd2hpY2ggbWF5CnRha2UgZXhjZXNzaXZlbHkgbG9uZyBhbmQg dGhlcmVmb3JlIHdvdWxkIG5lZWQgcHJlZW1wdGlvbiwgaGFzIHR1cm5lZCBv dXQKb3Zlcmx5IGNvc3RseS4gU2luY2UgYWx0ZXJuYXRpdmVzIChIVk0vUFZI OiBIQVAsIFBWOiBzaGltKSBhcmUgY29tbW9ubHkKYXZhaWxhYmxlLCB0aGUg ZGVjaXNpb24gd2FzIHRvIGRlcHJlY2F0ZSB0aGUgZnVuY3Rpb25hbGl0eSwg d2hpbGUgc3RpbGwKcmV0YWluaW5nIGl0IGZvciBwZW9wbGUgdG8gdXNlIGF0 IHRoZWlyIG93biAoc2VjdXJpdHkpIHJpc2suIE1lbW9yeS13aXNlCnNtYWxs IGVub3VnaCBndWVzdHMgbWF5IHN0aWxsIGJlIG9rYXkgdG8gcnVuLgoKU29t ZSBDSSB0ZXN0aW5nIGRlcGVuZHMgb24gU0hBRE9XX1BBR0lORy4gIEV4cGxp Y2l0bHkgZW5hYmxlIGl0IHdoZW4gbmVlZGVkLgoKVGhpcyBpcyBDVkUtMjAy Ni00MjQ5MyAvIFhTQS00OTUuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdy b3NzIDxqZ3Jvc3NAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEvU1VQUE9SVC5t ZCBiL1NVUFBPUlQubWQKaW5kZXggMDIxMjY0OTA4Y2JjLi41NWYyYjBkMTAy YTcgMTAwNjQ0Ci0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMzY2LDYgKzM2NiwxNiBAQCBUaGlzIGlzIHR5cGljYWxseSBkb25lIGJ5 IGEgZ3Vlc3Qga2VybmVsIGFnZW50IGtub3duIGFzIGEgImJhbGxvb24gZHJp dmVyIi4KIAogICAgIFN0YXR1czogU3VwcG9ydGVkCiAKKyMjIyBTaGFkb3cg cGFnaW5nCisKK0FsbG93cyBmdWxseSB2aXJ0dWFsaXplZCBndWVzdHMgKEhW TSAvIFBWSCkgdG8gYmUgcnVuIHdpdGhvdXQgKGhvc3Qgc2lkZSkgcGFnZQor dHJhbnNsYXRpb24gc3VwcG9ydCBieSBoYXJkd2FyZSAoQU1EOiBOUFQsIElu dGVsOiBFUFQpLgorCitJdCBpcyBhbHNvIHJlcXVpcmVkIHRvIG1pZ3JhdGUg UFYgZ3Vlc3RzLCBhbmQgdG8gYWxsb3cgTDFURi12dWxuZXJhYmxlIGd1ZXN0 cwordG8gY29udGludWUgdG8gcnVuIHdpdGhvdXQgY29tcHJvbWlzaW5nIGhv c3Qgc2VjdXJpdHkuCisKKyAgICBTdGF0dXM6IFN1cHBvcnRlZCwgbm90IHNl Y3VyaXR5IHN1cHBvcnRlZAorCiAjIyMgUG9wdWxhdGUtb24tZGVtYW5kIG1l bW9yeQogCiBUaGlzIGlzIGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIG5vcm1h bCBvcGVyYXRpbmcgc3lzdGVtcyB3aXRoIG9ubHkgYSBiYWxsb29uIGRyaXZl cgpAQCAtNDk4LDcgKzUwOCw3IEBAIFRoaXMgZmVhdHVyZSBpcyBpbmRlcGVu ZGVudAogb2YgdGhlIEFSTSAicGFnZSBncmFudWxhcml0eSIgZmVhdHVyZSAo c2VlIGJlbG93KS4KIAogICAgIFN0YXR1cywgeDg2IEhWTS9QVkgsIEhBUDog U3VwcG9ydGVkCi0gICAgU3RhdHVzLCB4ODYgSFZNL1BWSCwgU2hhZG93LCAy TWlCOiBTdXBwb3J0ZWQKKyAgICBTdGF0dXMsIHg4NiBIVk0vUFZILCBTaGFk b3csIDJNaUI6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgQVJNOiBTdXBwb3J0ZWQKIAogT24geDg2IGluIHNoYWRv dyBtb2RlLCBvbmx5IDJNaUIgKEwyKSBzdXBlcnBhZ2VzIGFyZSBhdmFpbGFi bGU7CmRpZmYgLS1naXQgYS9hdXRvbWF0aW9uL2dpdGxhYi1jaS9hbmFseXpl LnlhbWwgYi9hdXRvbWF0aW9uL2dpdGxhYi1jaS9hbmFseXplLnlhbWwKaW5k ZXggM2Y3NTMyZWUxZDI1Li5jNjUwZWQ2MWM0ZDEgMTAwNjQ0Ci0tLSBhL2F1 dG9tYXRpb24vZ2l0bGFiLWNpL2FuYWx5emUueWFtbAorKysgYi9hdXRvbWF0 aW9uL2dpdGxhYi1jaS9hbmFseXplLnlhbWwKQEAgLTU5LDYgKzU5LDcgQEAg ZWNsYWlyLXg4Nl82NC1hbGxjb2RlOgogICAgICAgQ09ORklHX1BFUkZfQVJS QVlTPXkKICAgICAgIENPTkZJR19QRVJGX0NPVU5URVJTPXkKICAgICAgIENP TkZJR19QVjMyPXkKKyAgICAgIENPTkZJR19TSEFET1dfUEFHSU5HPXkKICAg ICAgIENPTkZJR19VTlNVUFBPUlRFRD15CiAgICAgICBDT05GSUdfWEVOX0dV RVNUPXkKICAgICAgIENPTkZJR19YSENJPXkKQEAgLTkxLDcgKzkyLDYgQEAg ZWNsYWlyLXg4Nl82NC1hbWQ6CiAgICAgICBDT05GSUdfUFY9bgogICAgICAg Q09ORklHX1hFTl9JQlQ9bgogICAgICAgQ09ORklHX1hFTl9TSFNUSz1uCi0g ICAgICBDT05GSUdfU0hBRE9XX1BBR0lORz1uCiAgICAgICBDT05GSUdfSFZN X0ZFUD1uCiAgICAgICBDT05GSUdfVEJPT1Q9bgogICAgICAgQ09ORklHX0hZ UEZTPW4KZGlmZiAtLWdpdCBhL2F1dG9tYXRpb24vZ2l0bGFiLWNpL2J1aWxk LnlhbWwgYi9hdXRvbWF0aW9uL2dpdGxhYi1jaS9idWlsZC55YW1sCmluZGV4 IGQ1OTI5ZTM0ZWNhYS4uMjdlZWZlYzVmOWE1IDEwMDY0NAotLS0gYS9hdXRv bWF0aW9uL2dpdGxhYi1jaS9idWlsZC55YW1sCisrKyBiL2F1dG9tYXRpb24v Z2l0bGFiLWNpL2J1aWxkLnlhbWwKQEAgLTI5NiwxMiArMjk2LDE2IEBAIGRl Ymlhbi0xMy14ODZfNjQtZ2NjLWRlYnVnOgogICA8PDogKmJ1aWxkLXRlc3QK ICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjogZGViaWFuOjEzLXg4Nl82 NAorICAgIEVYVFJBX1hFTl9DT05GSUc6IHwKKyAgICAgIENPTkZJR19TSEFE T1dfUEFHSU5HPXkKIAogZGViaWFuLTEzLXg4Nl82NC1jbGFuZy1kZWJ1ZzoK ICAgZXh0ZW5kczogLmNsYW5nLXg4Nl82NC1idWlsZC1kZWJ1ZwogICA8PDog KmJ1aWxkLXRlc3QKICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjogZGVi aWFuOjEzLXg4Nl82NAorICAgIEVYVFJBX1hFTl9DT05GSUc6IHwKKyAgICAg IENPTkZJR19TSEFET1dfUEFHSU5HPXkKIAogZGViaWFuLTEzLXBwYzY0bGUt Z2NjLWRlYnVnOgogICBleHRlbmRzOiAuZ2NjLXBwYzY0bGUtY3Jvc3MtYnVp bGQtZGVidWcKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9LY29uZmlnIGIv eGVuL2FyY2gveDg2L0tjb25maWcKaW5kZXggMmNlNDc0N2Y2ZWE3Li4zY2Uw Nzc0YjhkNzYgMTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9LY29uZmlnCisr KyBiL3hlbi9hcmNoL3g4Ni9LY29uZmlnCkBAIC0xNDUsNyArMTQ1LDYgQEAg Y29uZmlnIFhFTl9JQlQKIAogY29uZmlnIFNIQURPV19QQUdJTkcKIAlib29s ICJTaGFkb3cgUGFnaW5nIgotCWRlZmF1bHQgIVBWX1NISU1fRVhDTFVTSVZF CiAJZGVwZW5kcyBvbiBQViB8fCBIVk0KIAloZWxwCiAJICBTaGFkb3cgcGFn aW5nIGlzIGEgc29mdHdhcmUgYWx0ZXJuYXRpdmUgdG8gaGFyZHdhcmUgcGFn aW5nIHN1cHBvcnQKQEAgLTE2MCw2ICsxNTksOSBAQCBjb25maWcgU0hBRE9X X1BBR0lORwogCSAgVW5kZXIgYSBzbWFsbCBudW1iZXIgb2Ygc3BlY2lmaWMg d29ya2xvYWRzLCBzaGFkb3cgcGFnaW5nIG1heSBiZQogCSAgZGVsaWJlcmF0 ZWx5IHVzZWQgYXMgYSBwZXJmb3JtYW5jZSBvcHRpbWlzYXRpb24uCiAKKwkg IE5PVEU6IFRoaXMgZmVhdHVyZSBpcyBub3cgZGVwcmVjYXRlZC4gSXQgaXMg aW4gcGFydGljdWxhciBubyBsb25nZXIKKwkgICAgICAgIHNlY3VyaXR5IHN1 cHBvcnRlZC4KKwogY29uZmlnIFBBR0lORwogCWRlZl9ib29sIEhWTSB8fCBT SEFET1dfUEFHSU5HCiAK --=separator Content-Type: application/octet-stream; name="xsa495-4.17.patch" Content-Disposition: attachment; filename="xsa495-4.17.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IFNIQURPV19QQUdJTkcgaXMgZGVwcmVjYXRlZAoKQWRkcmVzc2lu ZyBjZXJ0YWluIGlzc3VlcywgaW4gcGFydGljdWxhciByZWxhdGVkIHRvIG9w ZXJhdGlvbnMgd2hpY2ggbWF5CnRha2UgZXhjZXNzaXZlbHkgbG9uZyBhbmQg dGhlcmVmb3JlIHdvdWxkIG5lZWQgcHJlZW1wdGlvbiwgaGFzIHR1cm5lZCBv dXQKb3Zlcmx5IGNvc3RseS4gU2luY2UgYWx0ZXJuYXRpdmVzIChIVk0vUFZI OiBIQVAsIFBWOiBzaGltKSBhcmUgY29tbW9ubHkKYXZhaWxhYmxlLCB0aGUg ZGVjaXNpb24gd2FzIHRvIGRlcHJlY2F0ZSB0aGUgZnVuY3Rpb25hbGl0eSwg d2hpbGUgc3RpbGwKcmV0YWluaW5nIGl0IGZvciBwZW9wbGUgdG8gdXNlIGF0 IHRoZWlyIG93biAoc2VjdXJpdHkpIHJpc2suIE1lbW9yeS13aXNlCnNtYWxs IGVub3VnaCBndWVzdHMgbWF5IHN0aWxsIGJlIG9rYXkgdG8gcnVuLgoKU29t ZSBDSSB0ZXN0aW5nIGRlcGVuZHMgb24gU0hBRE9XX1BBR0lORy4gIEV4cGxp Y2l0bHkgZW5hYmxlIGl0IHdoZW4gbmVlZGVkLgoKVGhpcyBpcyBDVkUtMjAy Ni00MjQ5MyAvIFhTQS00OTUuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdy b3NzIDxqZ3Jvc3NAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEvU1VQUE9SVC5t ZCBiL1NVUFBPUlQubWQKaW5kZXggYTU1OTEwZmNjZWNkLi5iMDQwZjk1MjQy YTkgMTAwNjQ0Ci0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMjg2LDYgKzI4NiwxNiBAQCBUaGlzIGlzIHR5cGljYWxseSBkb25lIGJ5 IGEgZ3Vlc3Qga2VybmVsIGFnZW50IGtub3duIGFzIGEgImJhbGxvb24gZHJp dmVyIi4KIAogICAgIFN0YXR1czogU3VwcG9ydGVkCiAKKyMjIyBTaGFkb3cg cGFnaW5nCisKK0FsbG93cyBmdWxseSB2aXJ0dWFsaXplZCBndWVzdHMgKEhW TSAvIFBWSCkgdG8gYmUgcnVuIHdpdGhvdXQgKGhvc3Qgc2lkZSkgcGFnZQor dHJhbnNsYXRpb24gc3VwcG9ydCBieSBoYXJkd2FyZSAoQU1EOiBOUFQsIElu dGVsOiBFUFQpLgorCitJdCBpcyBhbHNvIHJlcXVpcmVkIHRvIG1pZ3JhdGUg UFYgZ3Vlc3RzLCBhbmQgdG8gYWxsb3cgTDFURi12dWxuZXJhYmxlIGd1ZXN0 cwordG8gY29udGludWUgdG8gcnVuIHdpdGhvdXQgY29tcHJvbWlzaW5nIGhv c3Qgc2VjdXJpdHkuCisKKyAgICBTdGF0dXM6IFN1cHBvcnRlZCwgbm90IHNl Y3VyaXR5IHN1cHBvcnRlZAorCiAjIyMgUG9wdWxhdGUtb24tZGVtYW5kIG1l bW9yeQogCiBUaGlzIGlzIGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIG5vcm1h bCBvcGVyYXRpbmcgc3lzdGVtcyB3aXRoIG9ubHkgYSBiYWxsb29uIGRyaXZl cgpAQCAtNDExLDcgKzQyMSw3IEBAIFRoaXMgZmVhdHVyZSBpcyBpbmRlcGVu ZGVudAogb2YgdGhlIEFSTSAicGFnZSBncmFudWxhcml0eSIgZmVhdHVyZSAo c2VlIGJlbG93KS4KIAogICAgIFN0YXR1cywgeDg2IEhWTS9QVkgsIEhBUDog U3VwcG9ydGVkCi0gICAgU3RhdHVzLCB4ODYgSFZNL1BWSCwgU2hhZG93LCAy TWlCOiBTdXBwb3J0ZWQKKyAgICBTdGF0dXMsIHg4NiBIVk0vUFZILCBTaGFk b3csIDJNaUI6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgQVJNOiBTdXBwb3J0ZWQKIAogT24geDg2IGluIHNoYWRv dyBtb2RlLCBvbmx5IDJNaUIgKEwyKSBzdXBlcnBhZ2VzIGFyZSBhdmFpbGFi bGU7CmRpZmYgLS1naXQgYS9hdXRvbWF0aW9uL2dpdGxhYi1jaS9idWlsZC55 YW1sIGIvYXV0b21hdGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAppbmRleCAx YjI3ZTVjMDFiNzUuLjM0NDkwNDg4ZDA4NCAxMDA2NDQKLS0tIGEvYXV0b21h dGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAorKysgYi9hdXRvbWF0aW9uL2dp dGxhYi1jaS9idWlsZC55YW1sCkBAIC0yMzgsNiArMjM4LDggQEAgZGViaWFu LXN0cmV0Y2gtZ2NjLWRlYnVnOgogICBleHRlbmRzOiAuZ2NjLXg4Ni02NC1i dWlsZC1kZWJ1ZwogICB2YXJpYWJsZXM6CiAgICAgQ09OVEFJTkVSOiBkZWJp YW46c3RyZXRjaAorICAgIEVYVFJBX1hFTl9DT05GSUc6IHwKKyAgICAgIENP TkZJR19TSEFET1dfUEFHSU5HPXkKIAogZGViaWFuLXN0cmV0Y2gtMzItY2xh bmctZGVidWc6CiAgIGV4dGVuZHM6IC5jbGFuZy14ODYtMzItYnVpbGQtZGVi dWcKQEAgLTI2Niw2ICsyNjgsOCBAQCBkZWJpYW4tYm9va3dvcm0tY2xhbmct ZGVidWc6CiAgIGV4dGVuZHM6IC5jbGFuZy14ODYtNjQtYnVpbGQtZGVidWcK ICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjogZGViaWFuOmJvb2t3b3Jt CisgICAgRVhUUkFfWEVOX0NPTkZJRzogfAorICAgICAgQ09ORklHX1NIQURP V19QQUdJTkc9eQogCiBkZWJpYW4tYm9va3dvcm0tZ2NjOgogICBleHRlbmRz OiAuZ2NjLXg4Ni02NC1idWlsZApkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2 L0tjb25maWcgYi94ZW4vYXJjaC94ODYvS2NvbmZpZwppbmRleCAzNzA1NTg3 NTZmMGQuLmY0ZTM4NTg4YzZkZSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L0tjb25maWcKKysrIGIveGVuL2FyY2gveDg2L0tjb25maWcKQEAgLTE1MSw3 ICsxNTEsNiBAQCBjb25maWcgWEVOX0lCVAogCiBjb25maWcgU0hBRE9XX1BB R0lORwogCWJvb2wgIlNoYWRvdyBQYWdpbmciCi0JZGVmYXVsdCAhUFZfU0hJ TV9FWENMVVNJVkUKIAlkZXBlbmRzIG9uIFBWIHx8IEhWTQogCS0tLWhlbHAt LS0KIApAQCAtMTY3LDcgKzE2Niw4IEBAIGNvbmZpZyBTSEFET1dfUEFHSU5H CiAgICAgICAgICAgVW5kZXIgYSBzbWFsbCBudW1iZXIgb2Ygc3BlY2lmaWMg d29ya2xvYWRzLCBzaGFkb3cgcGFnaW5nIG1heSBiZQogICAgICAgICAgIGRl bGliZXJhdGVseSB1c2VkIGFzIGEgcGVyZm9ybWFuY2Ugb3B0aW1pc2F0aW9u LgogCi0gICAgICAgICAgSWYgdW5zdXJlLCBzYXkgWS4KKwkgIE5PVEU6IFRo aXMgZmVhdHVyZSBpcyBub3cgZGVwcmVjYXRlZC4gSXQgaXMgaW4gcGFydGlj dWxhciBubyBsb25nZXIKKwkgICAgICAgIHNlY3VyaXR5IHN1cHBvcnRlZC4K IAogY29uZmlnIEJJR01FTQogCWJvb2wgImJpZyBtZW1vcnkgc3VwcG9ydCIK --=separator Content-Type: application/octet-stream; name="xsa495-4.18.patch" Content-Disposition: attachment; filename="xsa495-4.18.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IFNIQURPV19QQUdJTkcgaXMgZGVwcmVjYXRlZAoKQWRkcmVzc2lu ZyBjZXJ0YWluIGlzc3VlcywgaW4gcGFydGljdWxhciByZWxhdGVkIHRvIG9w ZXJhdGlvbnMgd2hpY2ggbWF5CnRha2UgZXhjZXNzaXZlbHkgbG9uZyBhbmQg dGhlcmVmb3JlIHdvdWxkIG5lZWQgcHJlZW1wdGlvbiwgaGFzIHR1cm5lZCBv dXQKb3Zlcmx5IGNvc3RseS4gU2luY2UgYWx0ZXJuYXRpdmVzIChIVk0vUFZI OiBIQVAsIFBWOiBzaGltKSBhcmUgY29tbW9ubHkKYXZhaWxhYmxlLCB0aGUg ZGVjaXNpb24gd2FzIHRvIGRlcHJlY2F0ZSB0aGUgZnVuY3Rpb25hbGl0eSwg d2hpbGUgc3RpbGwKcmV0YWluaW5nIGl0IGZvciBwZW9wbGUgdG8gdXNlIGF0 IHRoZWlyIG93biAoc2VjdXJpdHkpIHJpc2suIE1lbW9yeS13aXNlCnNtYWxs IGVub3VnaCBndWVzdHMgbWF5IHN0aWxsIGJlIG9rYXkgdG8gcnVuLgoKU29t ZSBDSSB0ZXN0aW5nIGRlcGVuZHMgb24gU0hBRE9XX1BBR0lORy4gIEV4cGxp Y2l0bHkgZW5hYmxlIGl0IHdoZW4gbmVlZGVkLgoKVGhpcyBpcyBDVkUtMjAy Ni00MjQ5MyAvIFhTQS00OTUuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdy b3NzIDxqZ3Jvc3NAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEvU1VQUE9SVC5t ZCBiL1NVUFBPUlQubWQKaW5kZXggMjcyMDljYWI3ZDRmLi4zOWU1NTBlN2Ez MGUgMTAwNjQ0Ci0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMzE1LDYgKzMxNSwxNiBAQCBUaGlzIGlzIHR5cGljYWxseSBkb25lIGJ5 IGEgZ3Vlc3Qga2VybmVsIGFnZW50IGtub3duIGFzIGEgImJhbGxvb24gZHJp dmVyIi4KIAogICAgIFN0YXR1czogU3VwcG9ydGVkCiAKKyMjIyBTaGFkb3cg cGFnaW5nCisKK0FsbG93cyBmdWxseSB2aXJ0dWFsaXplZCBndWVzdHMgKEhW TSAvIFBWSCkgdG8gYmUgcnVuIHdpdGhvdXQgKGhvc3Qgc2lkZSkgcGFnZQor dHJhbnNsYXRpb24gc3VwcG9ydCBieSBoYXJkd2FyZSAoQU1EOiBOUFQsIElu dGVsOiBFUFQpLgorCitJdCBpcyBhbHNvIHJlcXVpcmVkIHRvIG1pZ3JhdGUg UFYgZ3Vlc3RzLCBhbmQgdG8gYWxsb3cgTDFURi12dWxuZXJhYmxlIGd1ZXN0 cwordG8gY29udGludWUgdG8gcnVuIHdpdGhvdXQgY29tcHJvbWlzaW5nIGhv c3Qgc2VjdXJpdHkuCisKKyAgICBTdGF0dXM6IFN1cHBvcnRlZCwgbm90IHNl Y3VyaXR5IHN1cHBvcnRlZAorCiAjIyMgUG9wdWxhdGUtb24tZGVtYW5kIG1l bW9yeQogCiBUaGlzIGlzIGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIG5vcm1h bCBvcGVyYXRpbmcgc3lzdGVtcyB3aXRoIG9ubHkgYSBiYWxsb29uIGRyaXZl cgpAQCAtNDQwLDcgKzQ1MCw3IEBAIFRoaXMgZmVhdHVyZSBpcyBpbmRlcGVu ZGVudAogb2YgdGhlIEFSTSAicGFnZSBncmFudWxhcml0eSIgZmVhdHVyZSAo c2VlIGJlbG93KS4KIAogICAgIFN0YXR1cywgeDg2IEhWTS9QVkgsIEhBUDog U3VwcG9ydGVkCi0gICAgU3RhdHVzLCB4ODYgSFZNL1BWSCwgU2hhZG93LCAy TWlCOiBTdXBwb3J0ZWQKKyAgICBTdGF0dXMsIHg4NiBIVk0vUFZILCBTaGFk b3csIDJNaUI6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgQVJNOiBTdXBwb3J0ZWQKIAogT24geDg2IGluIHNoYWRv dyBtb2RlLCBvbmx5IDJNaUIgKEwyKSBzdXBlcnBhZ2VzIGFyZSBhdmFpbGFi bGU7CmRpZmYgLS1naXQgYS9hdXRvbWF0aW9uL2dpdGxhYi1jaS9idWlsZC55 YW1sIGIvYXV0b21hdGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAppbmRleCAy MDFhY2JiZmZkNjAuLmYyMmYxNDlmZTdlMiAxMDA2NDQKLS0tIGEvYXV0b21h dGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAorKysgYi9hdXRvbWF0aW9uL2dp dGxhYi1jaS9idWlsZC55YW1sCkBAIC0zNjMsMTEgKzM2MywxNSBAQCBkZWJp YW4tc3RyZXRjaC1nY2MtZGVidWc6CiAgIGV4dGVuZHM6IC5nY2MteDg2LTY0 LWJ1aWxkLWRlYnVnCiAgIHZhcmlhYmxlczoKICAgICBDT05UQUlORVI6IGRl YmlhbjpzdHJldGNoCisgICAgRVhUUkFfWEVOX0NPTkZJRzogfAorICAgICAg Q09ORklHX1NIQURPV19QQUdJTkc9eQogCiBkZWJpYW4tYm9va3dvcm0tY2xh bmctZGVidWc6CiAgIGV4dGVuZHM6IC5jbGFuZy14ODYtNjQtYnVpbGQtZGVi dWcKICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjogZGViaWFuOmJvb2t3 b3JtCisgICAgRVhUUkFfWEVOX0NPTkZJRzogfAorICAgICAgQ09ORklHX1NI QURPV19QQUdJTkc9eQogCiAjIEFybTMyIGNyb3NzLWJ1aWxkCiAKZGlmZiAt LWdpdCBhL3hlbi9hcmNoL3g4Ni9LY29uZmlnIGIveGVuL2FyY2gveDg2L0tj b25maWcKaW5kZXggOTYxMWI4MDc2MTk3Li5mYjkxZWU0ZmE5ZDcgMTAwNjQ0 Ci0tLSBhL3hlbi9hcmNoL3g4Ni9LY29uZmlnCisrKyBiL3hlbi9hcmNoL3g4 Ni9LY29uZmlnCkBAIC0xNTEsNyArMTUxLDYgQEAgY29uZmlnIFhFTl9JQlQK IAogY29uZmlnIFNIQURPV19QQUdJTkcKIAlib29sICJTaGFkb3cgUGFnaW5n IgotCWRlZmF1bHQgIVBWX1NISU1fRVhDTFVTSVZFCiAJZGVwZW5kcyBvbiBQ ViB8fCBIVk0KIAktLS1oZWxwLS0tCiAKQEAgLTE2Nyw3ICsxNjYsOCBAQCBj b25maWcgU0hBRE9XX1BBR0lORwogICAgICAgICAgIFVuZGVyIGEgc21hbGwg bnVtYmVyIG9mIHNwZWNpZmljIHdvcmtsb2Fkcywgc2hhZG93IHBhZ2luZyBt YXkgYmUKICAgICAgICAgICBkZWxpYmVyYXRlbHkgdXNlZCBhcyBhIHBlcmZv cm1hbmNlIG9wdGltaXNhdGlvbi4KIAotICAgICAgICAgIElmIHVuc3VyZSwg c2F5IFkuCisJICBOT1RFOiBUaGlzIGZlYXR1cmUgaXMgbm93IGRlcHJlY2F0 ZWQuIEl0IGlzIGluIHBhcnRpY3VsYXIgbm8gbG9uZ2VyCisJICAgICAgICBz ZWN1cml0eSBzdXBwb3J0ZWQuCiAKIGNvbmZpZyBCSUdNRU0KIAlib29sICJi aWcgbWVtb3J5IHN1cHBvcnQiCg== --=separator Content-Type: application/octet-stream; name="xsa495-4.20.patch" Content-Disposition: attachment; filename="xsa495-4.20.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IFNIQURPV19QQUdJTkcgaXMgZGVwcmVjYXRlZAoKQWRkcmVzc2lu ZyBjZXJ0YWluIGlzc3VlcywgaW4gcGFydGljdWxhciByZWxhdGVkIHRvIG9w ZXJhdGlvbnMgd2hpY2ggbWF5CnRha2UgZXhjZXNzaXZlbHkgbG9uZyBhbmQg dGhlcmVmb3JlIHdvdWxkIG5lZWQgcHJlZW1wdGlvbiwgaGFzIHR1cm5lZCBv dXQKb3Zlcmx5IGNvc3RseS4gU2luY2UgYWx0ZXJuYXRpdmVzIChIVk0vUFZI OiBIQVAsIFBWOiBzaGltKSBhcmUgY29tbW9ubHkKYXZhaWxhYmxlLCB0aGUg ZGVjaXNpb24gd2FzIHRvIGRlcHJlY2F0ZSB0aGUgZnVuY3Rpb25hbGl0eSwg d2hpbGUgc3RpbGwKcmV0YWluaW5nIGl0IGZvciBwZW9wbGUgdG8gdXNlIGF0 IHRoZWlyIG93biAoc2VjdXJpdHkpIHJpc2suIE1lbW9yeS13aXNlCnNtYWxs IGVub3VnaCBndWVzdHMgbWF5IHN0aWxsIGJlIG9rYXkgdG8gcnVuLgoKU29t ZSBDSSB0ZXN0aW5nIGRlcGVuZHMgb24gU0hBRE9XX1BBR0lORy4gIEV4cGxp Y2l0bHkgZW5hYmxlIGl0IHdoZW4gbmVlZGVkLgoKVGhpcyBpcyBDVkUtMjAy Ni00MjQ5MyAvIFhTQS00OTUuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdy b3NzIDxqZ3Jvc3NAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEvU1VQUE9SVC5t ZCBiL1NVUFBPUlQubWQKaW5kZXggNjdiZTVhNTc4M2Q3Li43ZGI3Y2U5YzNl MzcgMTAwNjQ0Ci0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMzUzLDYgKzM1MywxNiBAQCBUaGlzIGlzIHR5cGljYWxseSBkb25lIGJ5 IGEgZ3Vlc3Qga2VybmVsIGFnZW50IGtub3duIGFzIGEgImJhbGxvb24gZHJp dmVyIi4KIAogICAgIFN0YXR1czogU3VwcG9ydGVkCiAKKyMjIyBTaGFkb3cg cGFnaW5nCisKK0FsbG93cyBmdWxseSB2aXJ0dWFsaXplZCBndWVzdHMgKEhW TSAvIFBWSCkgdG8gYmUgcnVuIHdpdGhvdXQgKGhvc3Qgc2lkZSkgcGFnZQor dHJhbnNsYXRpb24gc3VwcG9ydCBieSBoYXJkd2FyZSAoQU1EOiBOUFQsIElu dGVsOiBFUFQpLgorCitJdCBpcyBhbHNvIHJlcXVpcmVkIHRvIG1pZ3JhdGUg UFYgZ3Vlc3RzLCBhbmQgdG8gYWxsb3cgTDFURi12dWxuZXJhYmxlIGd1ZXN0 cwordG8gY29udGludWUgdG8gcnVuIHdpdGhvdXQgY29tcHJvbWlzaW5nIGhv c3Qgc2VjdXJpdHkuCisKKyAgICBTdGF0dXM6IFN1cHBvcnRlZCwgbm90IHNl Y3VyaXR5IHN1cHBvcnRlZAorCiAjIyMgUG9wdWxhdGUtb24tZGVtYW5kIG1l bW9yeQogCiBUaGlzIGlzIGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIG5vcm1h bCBvcGVyYXRpbmcgc3lzdGVtcyB3aXRoIG9ubHkgYSBiYWxsb29uIGRyaXZl cgpAQCAtNDg1LDcgKzQ5NSw3IEBAIFRoaXMgZmVhdHVyZSBpcyBpbmRlcGVu ZGVudAogb2YgdGhlIEFSTSAicGFnZSBncmFudWxhcml0eSIgZmVhdHVyZSAo c2VlIGJlbG93KS4KIAogICAgIFN0YXR1cywgeDg2IEhWTS9QVkgsIEhBUDog U3VwcG9ydGVkCi0gICAgU3RhdHVzLCB4ODYgSFZNL1BWSCwgU2hhZG93LCAy TWlCOiBTdXBwb3J0ZWQKKyAgICBTdGF0dXMsIHg4NiBIVk0vUFZILCBTaGFk b3csIDJNaUI6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgQVJNOiBTdXBwb3J0ZWQKIAogT24geDg2IGluIHNoYWRv dyBtb2RlLCBvbmx5IDJNaUIgKEwyKSBzdXBlcnBhZ2VzIGFyZSBhdmFpbGFi bGU7CmRpZmYgLS1naXQgYS9hdXRvbWF0aW9uL2dpdGxhYi1jaS9idWlsZC55 YW1sIGIvYXV0b21hdGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAppbmRleCA1 ZjBhY2RhOTQyYWMuLjkzMDllMTBlYmJhMCAxMDA2NDQKLS0tIGEvYXV0b21h dGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAorKysgYi9hdXRvbWF0aW9uL2dp dGxhYi1jaS9idWlsZC55YW1sCkBAIC0zMTIsMTEgKzMxMiwxNSBAQCBkZWJp YW4tMTIteDg2XzY0LWdjYy1kZWJ1ZzoKICAgZXh0ZW5kczogLmdjYy14ODYt NjQtYnVpbGQtZGVidWcKICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjog ZGViaWFuOjEyLXg4Nl82NAorICAgIEVYVFJBX1hFTl9DT05GSUc6IHwKKyAg ICAgIENPTkZJR19TSEFET1dfUEFHSU5HPXkKIAogZGViaWFuLTEyLXg4Nl82 NC1jbGFuZy1kZWJ1ZzoKICAgZXh0ZW5kczogLmNsYW5nLXg4Ni02NC1idWls ZC1kZWJ1ZwogICB2YXJpYWJsZXM6CiAgICAgQ09OVEFJTkVSOiBkZWJpYW46 MTIteDg2XzY0CisgICAgRVhUUkFfWEVOX0NPTkZJRzogfAorICAgICAgQ09O RklHX1NIQURPV19QQUdJTkc9eQogCiBkZWJpYW4tMTItcHBjNjRsZS1nY2Mt ZGVidWc6CiAgIGV4dGVuZHM6IC5nY2MtcHBjNjRsZS1jcm9zcy1idWlsZC1k ZWJ1ZwpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L0tjb25maWcgYi94ZW4v YXJjaC94ODYvS2NvbmZpZwppbmRleCA5NmZkMWMzMjcyZDEuLmY2M2M1NWM3 ODNmYyAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L0tjb25maWcKKysrIGIv eGVuL2FyY2gveDg2L0tjb25maWcKQEAgLTE3Nyw3ICsxNzcsNiBAQCBjb25m aWcgWEVOX0lCVAogCiBjb25maWcgU0hBRE9XX1BBR0lORwogCWJvb2wgIlNo YWRvdyBQYWdpbmciCi0JZGVmYXVsdCAhUFZfU0hJTV9FWENMVVNJVkUKIAlk ZXBlbmRzIG9uIFBWIHx8IEhWTQogCWhlbHAKIApAQCAtMTkzLDcgKzE5Miw4 IEBAIGNvbmZpZyBTSEFET1dfUEFHSU5HCiAgICAgICAgICAgVW5kZXIgYSBz bWFsbCBudW1iZXIgb2Ygc3BlY2lmaWMgd29ya2xvYWRzLCBzaGFkb3cgcGFn aW5nIG1heSBiZQogICAgICAgICAgIGRlbGliZXJhdGVseSB1c2VkIGFzIGEg cGVyZm9ybWFuY2Ugb3B0aW1pc2F0aW9uLgogCi0gICAgICAgICAgSWYgdW5z dXJlLCBzYXkgWS4KKwkgIE5PVEU6IFRoaXMgZmVhdHVyZSBpcyBub3cgZGVw cmVjYXRlZC4gSXQgaXMgaW4gcGFydGljdWxhciBubyBsb25nZXIKKwkgICAg ICAgIHNlY3VyaXR5IHN1cHBvcnRlZC4KIAogY29uZmlnIEJJR01FTQogCWJv b2wgImJpZyBtZW1vcnkgc3VwcG9ydCIK --=separator Content-Type: application/octet-stream; name="xsa495-4.21.patch" Content-Disposition: attachment; filename="xsa495-4.21.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODY6IFNIQURPV19QQUdJTkcgaXMgZGVwcmVjYXRlZAoKQWRkcmVzc2lu ZyBjZXJ0YWluIGlzc3VlcywgaW4gcGFydGljdWxhciByZWxhdGVkIHRvIG9w ZXJhdGlvbnMgd2hpY2ggbWF5CnRha2UgZXhjZXNzaXZlbHkgbG9uZyBhbmQg dGhlcmVmb3JlIHdvdWxkIG5lZWQgcHJlZW1wdGlvbiwgaGFzIHR1cm5lZCBv dXQKb3Zlcmx5IGNvc3RseS4gU2luY2UgYWx0ZXJuYXRpdmVzIChIVk0vUFZI OiBIQVAsIFBWOiBzaGltKSBhcmUgY29tbW9ubHkKYXZhaWxhYmxlLCB0aGUg ZGVjaXNpb24gd2FzIHRvIGRlcHJlY2F0ZSB0aGUgZnVuY3Rpb25hbGl0eSwg d2hpbGUgc3RpbGwKcmV0YWluaW5nIGl0IGZvciBwZW9wbGUgdG8gdXNlIGF0 IHRoZWlyIG93biAoc2VjdXJpdHkpIHJpc2suIE1lbW9yeS13aXNlCnNtYWxs IGVub3VnaCBndWVzdHMgbWF5IHN0aWxsIGJlIG9rYXkgdG8gcnVuLgoKU29t ZSBDSSB0ZXN0aW5nIGRlcGVuZHMgb24gU0hBRE9XX1BBR0lORy4gIEV4cGxp Y2l0bHkgZW5hYmxlIGl0IHdoZW4gbmVlZGVkLgoKVGhpcyBpcyBDVkUtMjAy Ni00MjQ5MyAvIFhTQS00OTUuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGlj aCA8amJldWxpY2hAc3VzZS5jb20+ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdy b3NzIDxqZ3Jvc3NAc3VzZS5jb20+CgpkaWZmIC0tZ2l0IGEvU1VQUE9SVC5t ZCBiL1NVUFBPUlQubWQKaW5kZXggNGJhNTYyZWFmMDYyLi5mYTIwYWQ2Mjlj MjYgMTAwNjQ0Ci0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMzY2LDYgKzM2NiwxNiBAQCBUaGlzIGlzIHR5cGljYWxseSBkb25lIGJ5 IGEgZ3Vlc3Qga2VybmVsIGFnZW50IGtub3duIGFzIGEgImJhbGxvb24gZHJp dmVyIi4KIAogICAgIFN0YXR1czogU3VwcG9ydGVkCiAKKyMjIyBTaGFkb3cg cGFnaW5nCisKK0FsbG93cyBmdWxseSB2aXJ0dWFsaXplZCBndWVzdHMgKEhW TSAvIFBWSCkgdG8gYmUgcnVuIHdpdGhvdXQgKGhvc3Qgc2lkZSkgcGFnZQor dHJhbnNsYXRpb24gc3VwcG9ydCBieSBoYXJkd2FyZSAoQU1EOiBOUFQsIElu dGVsOiBFUFQpLgorCitJdCBpcyBhbHNvIHJlcXVpcmVkIHRvIG1pZ3JhdGUg UFYgZ3Vlc3RzLCBhbmQgdG8gYWxsb3cgTDFURi12dWxuZXJhYmxlIGd1ZXN0 cwordG8gY29udGludWUgdG8gcnVuIHdpdGhvdXQgY29tcHJvbWlzaW5nIGhv c3Qgc2VjdXJpdHkuCisKKyAgICBTdGF0dXM6IFN1cHBvcnRlZCwgbm90IHNl Y3VyaXR5IHN1cHBvcnRlZAorCiAjIyMgUG9wdWxhdGUtb24tZGVtYW5kIG1l bW9yeQogCiBUaGlzIGlzIGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIG5vcm1h bCBvcGVyYXRpbmcgc3lzdGVtcyB3aXRoIG9ubHkgYSBiYWxsb29uIGRyaXZl cgpAQCAtNDk4LDcgKzUwOCw3IEBAIFRoaXMgZmVhdHVyZSBpcyBpbmRlcGVu ZGVudAogb2YgdGhlIEFSTSAicGFnZSBncmFudWxhcml0eSIgZmVhdHVyZSAo c2VlIGJlbG93KS4KIAogICAgIFN0YXR1cywgeDg2IEhWTS9QVkgsIEhBUDog U3VwcG9ydGVkCi0gICAgU3RhdHVzLCB4ODYgSFZNL1BWSCwgU2hhZG93LCAy TWlCOiBTdXBwb3J0ZWQKKyAgICBTdGF0dXMsIHg4NiBIVk0vUFZILCBTaGFk b3csIDJNaUI6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgQVJNOiBTdXBwb3J0ZWQKIAogT24geDg2IGluIHNoYWRv dyBtb2RlLCBvbmx5IDJNaUIgKEwyKSBzdXBlcnBhZ2VzIGFyZSBhdmFpbGFi bGU7CmRpZmYgLS1naXQgYS9hdXRvbWF0aW9uL2dpdGxhYi1jaS9idWlsZC55 YW1sIGIvYXV0b21hdGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAppbmRleCA0 Y2I1MmZlNTk3MTUuLjUxMTA1ZWJiZTk5YyAxMDA2NDQKLS0tIGEvYXV0b21h dGlvbi9naXRsYWItY2kvYnVpbGQueWFtbAorKysgYi9hdXRvbWF0aW9uL2dp dGxhYi1jaS9idWlsZC55YW1sCkBAIC0zMTMsMTEgKzMxMywxNSBAQCBkZWJp YW4tMTMteDg2XzY0LWdjYy1kZWJ1ZzoKICAgZXh0ZW5kczogLmdjYy14ODYt NjQtYnVpbGQtZGVidWcKICAgdmFyaWFibGVzOgogICAgIENPTlRBSU5FUjog ZGViaWFuOjEzLXg4Nl82NAorICAgIEVYVFJBX1hFTl9DT05GSUc6IHwKKyAg ICAgIENPTkZJR19TSEFET1dfUEFHSU5HPXkKIAogZGViaWFuLTEzLXg4Nl82 NC1jbGFuZy1kZWJ1ZzoKICAgZXh0ZW5kczogLmNsYW5nLXg4Ni02NC1idWls ZC1kZWJ1ZwogICB2YXJpYWJsZXM6CiAgICAgQ09OVEFJTkVSOiBkZWJpYW46 MTMteDg2XzY0CisgICAgRVhUUkFfWEVOX0NPTkZJRzogfAorICAgICAgQ09O RklHX1NIQURPV19QQUdJTkc9eQogCiBkZWJpYW4tMTMtcHBjNjRsZS1nY2Mt ZGVidWc6CiAgIGV4dGVuZHM6IC5nY2MtcHBjNjRsZS1jcm9zcy1idWlsZC1k ZWJ1ZwpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L0tjb25maWcgYi94ZW4v YXJjaC94ODYvS2NvbmZpZwppbmRleCAzZjBmM2EwZjNhNzcuLjA2YmY5MjY5 NzY4YiAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2L0tjb25maWcKKysrIGIv eGVuL2FyY2gveDg2L0tjb25maWcKQEAgLTE0NCw3ICsxNDQsNiBAQCBjb25m aWcgWEVOX0lCVAogCiBjb25maWcgU0hBRE9XX1BBR0lORwogCWJvb2wgIlNo YWRvdyBQYWdpbmciCi0JZGVmYXVsdCAhUFZfU0hJTV9FWENMVVNJVkUKIAlk ZXBlbmRzIG9uIFBWIHx8IEhWTQogCWhlbHAKIApAQCAtMTYwLDcgKzE1OSw4 IEBAIGNvbmZpZyBTSEFET1dfUEFHSU5HCiAgICAgICAgICAgVW5kZXIgYSBz bWFsbCBudW1iZXIgb2Ygc3BlY2lmaWMgd29ya2xvYWRzLCBzaGFkb3cgcGFn aW5nIG1heSBiZQogICAgICAgICAgIGRlbGliZXJhdGVseSB1c2VkIGFzIGEg cGVyZm9ybWFuY2Ugb3B0aW1pc2F0aW9uLgogCi0gICAgICAgICAgSWYgdW5z dXJlLCBzYXkgWS4KKwkgIE5PVEU6IFRoaXMgZmVhdHVyZSBpcyBub3cgZGVw cmVjYXRlZC4gSXQgaXMgaW4gcGFydGljdWxhciBubyBsb25nZXIKKwkgICAg ICAgIHNlY3VyaXR5IHN1cHBvcnRlZC4KIAogY29uZmlnIFBBR0lORwogCWRl Zl9ib29sIEhWTSB8fCBTSEFET1dfUEFHSU5HCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372509.1620006 (Exim 4.92) (envelope-from ) id 1wogZ1-0005RE-1Z; Tue, 28 Jul 2026 12:05:39 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372509.1620006; Tue, 28 Jul 2026 12:05:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYz-0005Fm-3X; Tue, 28 Jul 2026 12:05:37 +0000 Received: by outflank-mailman (input) for mailman id 1372509; Tue, 28 Jul 2026 12:05:22 +0000 Received: from mx.expurgate.net ([195.190.135.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYg-0002Bt-33; Tue, 28 Jul 2026 12:05:18 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYf-00BEKG-DM; Tue, 28 Jul 2026 14:05:17 +0200 Received: from [10.42.69.9] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689aee-2eae-0a2a0a5409dd-0a2a4509d8e2-48 for ; Tue, 28 Jul 2026 14:05:17 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-bad1c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689afb-be1a-0a2a45090019-6882d725de4e-3 for ; Tue, 28 Jul 2026 14:05:16 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYZ-00DPA2-0I; Tue, 28 Jul 2026 12:05:10 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYY-003Dm1-2W; Tue, 28 Jul 2026 12:05:10 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 501 v4 (CVE-2026-62435,CVE-2026-62436) - grant-table: version change racing with other operations Message-Id: Date: Tue, 28 Jul 2026 12:05:10 +0000 X-purgate-ID: tlsNG-bad1c0/1785240316-3A2C4034-0750D1FE/0/0 X-purgate-type: clean X-purgate-size: 49447 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62435,CVE-2026-62436 / XSA-501 version 4 grant-table: version change racing with other operations UPDATES IN VERSION 4 ==================== Properly sync backports with staging patch (there was no functional issue, just a code arrangement one). Public release. ISSUE DESCRIPTION ================= With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, as a bigger shared entry structure is then needed while the shared table doesn't change size. Switching from v2 back to v1 the status frames, which are separate in v2, go away. Code holding, but intermediately dropping and then re-acquiring the grant table lock, sometimes wrongly assumes that said properties wouldn't change across the window in time where the lock is not being held. The v1 -> v2 issue is CVE-2026-62435. The v2 -> v1 issue is CVE-2026-62436. IMPACT ====== An unprivileged guest may be able to elevate its privileges to that of the host. Information leaks and Denial of Service (DoS) are possible as well. VULNERABLE SYSTEMS ================== All Xen versions from 4.0 onwards are vulnerable. Xen versions 3.4 and earlier are not vulnerable. Only x86 guests permitted to use grant table version 2 interfaces can leverage this vulnerability. On Arm, grant table v2 use is explicitly unsupported. Only multi-vCPU guests can leverage this vulnerability. Xen versions 4.13 and newer offer a way to build Xen without grant table support. Such hypervisors (CONFIG_GRANT_TABLE turned off) are not vulnerable. MITIGATION ========== Using the "gnttab=max-ver:1" hypervisor command line option will avoid the vulnerability. Using the "max_grant_version=1" guest configuration option for guests will also avoid the vulnerability. CREDITS ======= This issue was discovered by Mark Esler. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa501.patch xen-unstable - Xen 4.19.x xsa501-4.18.patch Xen 4.18.x xsa501-4.17.patch Xen 4.17.x $ sha256sum xsa501* e856d64f5b1a16dbb3d7ec19140f24eca508b62de0d25036fa5735cdd5b72be6 xsa501.patch e006c4fe0a35698318eca59ce828202cac19327f5139d51645116124fc3126e8 xsa501-4.17.patch 10477adfd82fa09123f08497d6a5d44ae61f48d026590ce262cac65f482b2d97 xsa501-4.18.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public- facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because restricting the available grant table version is a guest visible configuration change, which may lead to re-discovery of the issue. Deployment of this mitigation is permitted only AFTER the embargo ends. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrIMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZc98H/0wOjr4aa/IMxNH41B8p6vx1ayiBDvTV8qWgmjf9 AyjNGWG5sAjViMDjtFMUE/CeOeoby+gPRfzop9L7cjlHzy8+y/5s9oRUzC+0VIDq 1V5SBbD0XzhqujoLj5LBF0M1a/EyAJzYeVIV3t1DL6yFAz9YRpUGz6pNAwnF0dui bfNZcT2K0+BV0YHUQMrEkAUd+PV/mObG8AiVDS8j9BU8sGN4m1Wx2hsYzqYBCXpK T3lT8dG9qaYcnlH+m9jfWFIE2Srr9a2rLdCMs4dHY1CB/FmZLRrWe304yFuQntET OGiyZWW86cjmANEKAjrYHSD/CRa81gBqdxiAH/N13zBxZ7I= =VVHS -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa501.patch" Content-Disposition: attachment; filename="xsa501.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IGNvcGUgd2l0aCB2ZXJzaW9uIGNoYW5nZXMgcmFjaW5nIG90 aGVyIG9wZXJhdGlvbnMKCkRyb3BwaW5nIGFuZCByZS1hY3F1aXJpbmcgdGhl IGdyYW50IHRhYmxlIGxvY2sgZm9yIGEgcGFydGljdWxhciBvcGVyYXRpb24K cmVxdWlyZXMgc3BlY2lhbCBjYXJlLCBhcyBpbiB0aGUgbWVhbnRpbWUgdGhl IGdyYW50IHRhYmxlIHZlcnNpb24gY2FuCmNoYW5nZS4KCkR1cmluZyBhIHYy IC0+IHYxIGNoYW5nZSwgc3RhdHVzIGZyYW1lcyBnb2luZyBhd2F5IG1lYW5z IHRoYXQgcHJlLQpjYWxjdWxhdGVkIHN0YXR1cyBwb2ludGVycyBnbyBzdGFs ZSwgcmVmZXJlbmNpbmcgZnJlZWQgKGFuZCBwb3NzaWJseQphbHJlYWR5IHJl LXVzZWQpIG1lbW9yeS4gUmVjb3JkIGluLWZsaWdodCB2MiBvcGVyYXRpb25z LCBwZXJtaXR0aW5nIHRoZQp2ZXJzaW9uIGNoYW5nZSBvbmx5IHdoZW4gdGhl cmUgYXJlIG5vbmUgb2YgdGhlbS4gUmVjYWxjdWxhdGUgInN0YXR1cyIgaW4K dGhlIG9uZSBwbGFjZSAobWFwX2dyYW50X3JlZigpJ3MgZXJyb3IgcGF0aCkg d2hlcmUgaXQgY291bGQgYmUgc3RhbGUsIGJ1dApjb25maW5lIHRoaXMgdG8g cmVzZXJ2ZWQgZW50cmllcy4KClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MzYuCgpS ZXBvcnRlZC1ieTogTWFyayBFc2xlciA8bWFya0BoZXhwcm9vZi5kZXY+CgpE dXJpbmcgYSB2MSAtPiB2MiBjaGFuZ2UsIHRoZSBudW1iZXIgb2Ygc2hhcmVk IHRhYmxlIGVudHJpZXMgcmVkdWNlcywKbWVhbmluZyB0aGF0IHByZXZpb3Vz bHkgdmFsaWRhdGVkIGdyYW50IHJlZmVyZW5jZXMgbWF5IG5vdyBiZSBvdXQg b2YKYm91bmRzLiBCZWNhdXNlIG9mIHRoZSBjaGVja2luZyBvZiBwaW4gY291 bnRzIGluIGdudHRhYl9zZXRfdmVyc2lvbigpCih3aXRoIHRoZSBncmFudCB0 YWJsZSBsb2NrIGhlbGQgZm9yIHdyaXRpbmcpLCBmb3Igbm93LW91dC1vZi1i b3VuZHMgZ3JlZi1zCm5laXRoZXIgYWN0aXZlIG1hcHBpbmdzIGNhbiBleGlz dCwgbm9yIGNhbiB0aGVyZSBiZSBpbi1wcm9ncmVzcyBjb3B5Cm9wZXJhdGlv bnMuIE5ldmVydGhlbGVzcyBib3VuZHMgY2hlY2tzIGFyZSBhZGRlZCB0aGVy ZSwganVzdCB0byBiZSBvbiB0aGUKc2FmZSBzaWRlLgoKRm9yIGdudHRhYl90 cmFuc2ZlcigpLCB0byBjb3ZlciB0aGUgZ2FwIGJldHdlZW4gdGhlIGxvY2sg YmVpbmcgZHJvcHBlZCBieQpnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIo KSBhbmQgaXQgYmVpbmcgcmUtYWNxdWlyZWQsIGhhdmUgdGhlIGhlbHBlcgpy ZXR1cm4gdGhlIHZlcnNpb24gaXQgZm91bmQsIGFuZCBmYWlsIHRoZSBvcGVy YXRpb24gaWYgdGhlIHZlcnNpb24gdHVybnMKb3V0IHRvIGhhdmUgY2hhbmdl ZCBhZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpGdXJ0aGVyIGF2b2lk IG5lZWRsZXNzIHVzZSBvZiBzaGFyZWRfZW50cnlfaGVhZGVyKCksIGFzIGl0 IGludm9sdmVzCnBvaW50ZXIgYXJpdGhtZXRpYyB3aGljaCwgd2hlbiB1c2lu ZyBhbiBvdXQtb2YtYm91bmRzIHJlZiwgaXMgVUIuCgpUaGlzIGlzIENWRS0y MDI2LTYyNDM1LgoKRXZlcnl0aGluZyB0b2dldGhlciBpcyBYU0EtNTAxLgoK Rml4ZXM6IGE5OGRjMTM3MDNlMCAoIkludHJvZHVjZSBhIGdyYW50X2VudHJ5 X3YyIHN0cnVjdHVyZSIpClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBNYXJrIEVzbGVyIDxtYXJr QGhleHByb29mLmRldj4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2Nv bW1vbi9ncmFudF90YWJsZS5jIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5j CmluZGV4IGI4M2RkN2JjMmFmMi4uMzNlZjVmNjUxYmU4IDEwMDY0NAotLS0g YS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9n cmFudF90YWJsZS5jCkBAIC03MSw2ICs3MSwxMCBAQCBzdHJ1Y3QgZ3JhbnRf dGFibGUgewogICAgIHVuc2lnbmVkIGludCAgICAgICAgICBucl9ncmFudF9m cmFtZXM7CiAgICAgLyogTnVtYmVyIG9mIGdyYW50IHN0YXR1cyBmcmFtZXMg c2hhcmVkIHdpdGggZ3Vlc3QgKGZvciB2ZXJzaW9uIDIpICovCiAgICAgdW5z aWduZWQgaW50ICAgICAgICAgIG5yX3N0YXR1c19mcmFtZXM7CisKKyAgICAv KiBOdW1iZXIgb2YgdmVyc2lvbiAyIG9wZXJhdGlvbnMgaW4gcHJvZ3Jlc3Mu ICovCisgICAgYXRvbWljX3QgICAgICAgICAgICAgIG5yX3YyX29wczsKKwog ICAgIC8qCiAgICAgICogTnVtYmVyIG9mIGF2YWlsYWJsZSBtYXB0cmFjayBl bnRyaWVzLiAgRm9yIGNsZWFudXAgcHVycG9zZXMgaXQgaXMKICAgICAgKiBp bXBvcnRhbnQgdG8gcmVhbGl6ZSB0aGF0IHRoaXMgZmllbGQgYW5kIEBtYXB0 cmFjayBmdXJ0aGVyIGRvd24gd2lsbApAQCAtOTMzLDYgKzkzNyw5IEBAIHN0 YXRpYyB2b2lkIHJlZHVjZV9zdGF0dXNfZm9yX3BpbihzdHJ1Y3QgZG9tYWlu ICpyZCwKIHsKICAgICB1bnNpZ25lZCBpbnQgY2xlYXJfZmxhZ3MgPSBhY3Qt PnBpbiA/IDAgOiBHVEZfcmVhZGluZzsKIAorICAgIGlmICggdW5saWtlbHko IXN0YXR1cykgKQorICAgICAgICByZXR1cm47CisKICAgICBpZiAoICFyZWFk b25seSAmJiAhKGFjdC0+cGluICYgKEdOVFBJTl9oc3R3X21hc2sgfCBHTlRQ SU5fZGV2d19tYXNrKSkgKQogICAgICAgICBjbGVhcl9mbGFncyB8PSBHVEZf d3JpdGluZzsKIApAQCAtMTM0Myw2ICsxMzUwLDIyIEBAIG1hcF9ncmFudF9y ZWYoCiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsKIAorICAgIGlmICgg dW5saWtlbHkoZXZhbHVhdGVfbm9zcGVjKChyZ3QtPmd0X3ZlcnNpb24gPT0g MSkgIT0KKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAoc3Rh dHVzID09ICZzaGFoLT5mbGFncykpKSApCisgICAgeworICAgICAgICAvKgor ICAgICAgICAgKiBBZnRlciBhIHYxIC0+IHYyIGNoYW5nZSBiZWhpbmQgb3Vy IGJhY2tzICJyZWYiIG1heSBub3cgYmUgb3V0IG9mCisgICAgICAgICAqIGJv dW5kcy4gIFJlY2FsY3VsYXRlIGl0LCBidXQgb25seSBmb3IgcmVzZXJ2ZWQg ZW50cmllcy4gIE90aGVycworICAgICAgICAgKiB3aWxsIGhhdmUgYmVlbiBj bGVhcmVkIGFueXdheSBieSB0aGUgdmVyc2lvbiBjaGFuZ2UuCisgICAgICAg ICAqLworICAgICAgICBpZiAoIHJlZiA8IEdOVFRBQl9OUl9SRVNFUlZFRF9F TlRSSUVTICkKKyAgICAgICAgICAgIHN0YXR1cyA9IGV2YWx1YXRlX25vc3Bl YyhyZ3QtPmd0X3ZlcnNpb24gPT0gMSkKKyAgICAgICAgICAgICAgICAgICAg ID8gJnNoYWgtPmZsYWdzCisgICAgICAgICAgICAgICAgICAgICA6ICZzdGF0 dXNfZW50cnkocmd0LCByZWYpOworICAgICAgICBlbHNlCisgICAgICAgICAg ICBzdGF0dXMgPSBOVUxMOworICAgIH0KKwogICAgIGFjdCA9IGFjdGl2ZV9l bnRyeV9hY3F1aXJlKHJndCwgb3AtPnJlZik7CiAgICAgYWN0LT5waW4gLT0g cGluX2luY3I7CiAKQEAgLTE1ODYsOSArMTYwOSw4IEBAIHVubWFwX2NvbW1v bl9jb21wbGV0ZShzdHJ1Y3QgZ250dGFiX3VubWFwX2NvbW1vbiAqb3ApCiAg ICAgc3RydWN0IGRvbWFpbiAqbGQsICpyZCA9IG9wLT5yZDsKICAgICBzdHJ1 Y3QgZ3JhbnRfdGFibGUgKnJndDsKICAgICBzdHJ1Y3QgYWN0aXZlX2dyYW50 X2VudHJ5ICphY3Q7Ci0gICAgZ3JhbnRfZW50cnlfaGVhZGVyX3QgKnNoYTsK ICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZzsKLSAgICB1aW50MTZfdCAqc3Rh dHVzOworICAgIHVpbnQxNl90ICpzdGF0dXMgPSBOVUxMOwogCiAgICAgaWYg KCBldmFsdWF0ZV9ub3NwZWMoIW9wLT5kb25lKSApCiAgICAgewpAQCAtMTYw NCwxMSArMTYyNiwxMCBAQCB1bm1hcF9jb21tb25fY29tcGxldGUoc3RydWN0 IGdudHRhYl91bm1hcF9jb21tb24gKm9wKQogICAgIGdyYW50X3JlYWRfbG9j ayhyZ3QpOwogCiAgICAgYWN0ID0gYWN0aXZlX2VudHJ5X2FjcXVpcmUocmd0 LCBvcC0+cmVmKTsKLSAgICBzaGEgPSBzaGFyZWRfZW50cnlfaGVhZGVyKHJn dCwgb3AtPnJlZik7CiAKICAgICBpZiAoIGV2YWx1YXRlX25vc3BlYyhyZ3Qt Pmd0X3ZlcnNpb24gPT0gMSkgKQotICAgICAgICBzdGF0dXMgPSAmc2hhLT5m bGFnczsKLSAgICBlbHNlCisgICAgICAgIHN0YXR1cyA9ICZzaGFyZWRfZW50 cnlfdjEocmd0LCBvcC0+cmVmKS5mbGFnczsKKyAgICBlbHNlIGlmICggZXZh bHVhdGVfbm9zcGVjKG9wLT5yZWYgPCBucl9ncmFudF9lbnRyaWVzKHJndCkp ICkKICAgICAgICAgc3RhdHVzID0gJnN0YXR1c19lbnRyeShyZ3QsIG9wLT5y ZWYpOwogCiAgICAgcGcgPSAhaXNfaW9tZW1fcGFnZShhY3QtPm1mbikgPyBt Zm5fdG9fcGFnZShvcC0+bWZuKSA6IE5VTEw7CkBAIC0yMTk2LDE0ICsyMjE3 LDE0IEBAIGdudHRhYl9xdWVyeV9zaXplKAogICogQ2hlY2sgdGhhdCB0aGUg Z2l2ZW4gZ3JhbnQgcmVmZXJlbmNlIChyZCxyZWYpIGFsbG93cyAnbGQnIHRv IHRyYW5zZmVyCiAgKiBvd25lcnNoaXAgb2YgYSBwYWdlIGZyYW1lLiBJZiBz bywgbG9jayBkb3duIHRoZSBncmFudCBlbnRyeS4KICAqLwotc3RhdGljIGlu dAorc3RhdGljIHVuc2lnbmVkIGludAogZ250dGFiX3ByZXBhcmVfZm9yX3Ry YW5zZmVyKAogICAgIHN0cnVjdCBkb21haW4gKnJkLCBzdHJ1Y3QgZG9tYWlu ICpsZCwgZ3JhbnRfcmVmX3QgcmVmKQogewogICAgIHN0cnVjdCBncmFudF90 YWJsZSAqcmd0ID0gcmQtPmdyYW50X3RhYmxlOwogICAgIHVpbnQzMl90ICpy YXdfc2hhaDsKICAgICB1bmlvbiBncmFudF9jb21ibyBzY29tYm87Ci0gICAg aW50ICAgICAgICAgICAgICAgICByZXRyaWVzID0gMDsKKyAgICB1bnNpZ25l ZCBpbnQgcmV0cmllcyA9IDAsIHZlcjsKIAogICAgIGdyYW50X3JlYWRfbG9j ayhyZ3QpOwogCkBAIC0yMjQ4LDggKzIyNjksMTEgQEAgZ250dGFiX3ByZXBh cmVfZm9yX3RyYW5zZmVyKAogICAgICAgICBzY29tYm8gPSBwcmV2OwogICAg IH0KIAorICAgIHZlciA9IHJndC0+Z3RfdmVyc2lvbjsKKwogICAgIGdyYW50 X3JlYWRfdW5sb2NrKHJndCk7Ci0gICAgcmV0dXJuIDE7CisKKyAgICByZXR1 cm4gdmVyOwogCiAgZmFpbDoKICAgICBncmFudF9yZWFkX3VubG9jayhyZ3Qp OwpAQCAtMjI3NCw3ICsyMjk4LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogCiAg ICAgZm9yICggaSA9IDA7IGkgPCBjb3VudDsgaSsrICkKICAgICB7Ci0gICAg ICAgIGJvb2wgb2theTsKKyAgICAgICAgdW5zaWduZWQgaW50IHZlcjsKICAg ICAgICAgaW50IHJjOwogCiAgICAgICAgIGlmICggaSAmJiBoeXBlcmNhbGxf cHJlZW1wdF9jaGVjaygpICkKQEAgLTI0MTQsMTQgKzI0MzgsMTQgQEAgZ250 dGFiX3RyYW5zZmVyKAogICAgICAgICAgKiBwYWdlbGlzdC4KICAgICAgICAg ICovCiAgICAgICAgIG5yc3Bpbl91bmxvY2soJmUtPnBhZ2VfYWxsb2NfbG9j ayk7Ci0gICAgICAgIG9rYXkgPSBnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNm ZXIoZSwgZCwgZ29wLnJlZik7CisgICAgICAgIHZlciA9IGdudHRhYl9wcmVw YXJlX2Zvcl90cmFuc2ZlcihlLCBkLCBnb3AucmVmKTsKIAogICAgICAgICAv KgogICAgICAgICAgKiBNYWtlIHN1cmUgdGhlIHJlZmVyZW5jZSBib3VuZCBj aGVjayBpbiBnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIKICAgICAgICAg ICogaXMgcmVzcGVjdGVkIGFuZCBzcGVjdWxhdGl2ZSBleGVjdXRpb24gaXMg YmxvY2tlZCBhY2NvcmRpbmdseQogICAgICAgICAgKi8KLSAgICAgICAgaWYg KCB1bmxpa2VseSghZXZhbHVhdGVfbm9zcGVjKG9rYXkpKSB8fAotICAgICAg ICAgICAgdW5saWtlbHkoYXNzaWduX3BhZ2VzKHBhZ2UsIDEsIGUsIE1FTUZf bm9fcmVmY291bnQpKSApCisgICAgICAgIGlmICggdW5saWtlbHkoIWV2YWx1 YXRlX25vc3BlYyh2ZXIpKSB8fAorICAgICAgICAgICAgIHVubGlrZWx5KGFz c2lnbl9wYWdlcyhwYWdlLCAxLCBlLCBNRU1GX25vX3JlZmNvdW50KSkgKQog ICAgICAgICB7CiAgICAgICAgICAgICBib29sIGRyb3BfZG9tX3JlZjsKIApA QCAtMjQzMyw3ICsyNDU3LDcgQEAgZ250dGFiX3RyYW5zZmVyKAogICAgICAg ICAgICAgZHJvcF9kb21fcmVmID0gIWRvbWFpbl9hZGp1c3RfdG90X3BhZ2Vz KGUsIC0xKTsKICAgICAgICAgICAgIG5yc3Bpbl91bmxvY2soJmUtPnBhZ2Vf YWxsb2NfbG9jayk7CiAKLSAgICAgICAgICAgIGlmICggb2theSAvKiBpLmUu IGUtPmlzX2R5aW5nIGR1ZSB0byB0aGUgc3Vycm91bmRpbmcgaWYoKSAqLyAp CisgICAgICAgICAgICBpZiAoIHZlciAvKiBpLmUuIGUtPmlzX2R5aW5nIGR1 ZSB0byB0aGUgc3Vycm91bmRpbmcgaWYoKSAqLyApCiAgICAgICAgICAgICAg ICAgZ2RwcmludGsoWEVOTE9HX0lORk8sICJUcmFuc2ZlcmVlIGQlZCBpcyBu b3cgZHlpbmdcbiIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgZS0+ZG9t YWluX2lkKTsKIApAQCAtMjQ1Myw3ICsyNDc3LDEzIEBAIGdudHRhYl90cmFu c2ZlcigKICAgICAgICAgZ3JhbnRfcmVhZF9sb2NrKGUtPmdyYW50X3RhYmxl KTsKICAgICAgICAgYWN0ID0gYWN0aXZlX2VudHJ5X2FjcXVpcmUoZS0+Z3Jh bnRfdGFibGUsIGdvcC5yZWYpOwogCi0gICAgICAgIGlmICggZXZhbHVhdGVf bm9zcGVjKGUtPmdyYW50X3RhYmxlLT5ndF92ZXJzaW9uID09IDEpICkKKyAg ICAgICAgaWYgKCB1bmxpa2VseShldmFsdWF0ZV9ub3NwZWMoZS0+Z3JhbnRf dGFibGUtPmd0X3ZlcnNpb24gIT0gdmVyKSkgKQorICAgICAgICB7CisgICAg ICAgICAgICByYyA9IC1FSUxTRVE7CisgICAgICAgICAgICBnb3RvIHJlbGVh c2U7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIGV2YWx1YXRlX25vc3Bl Yyh2ZXIgPT0gMSkgKQogICAgICAgICB7CiAgICAgICAgICAgICBncmFudF9l bnRyeV92MV90ICpzaGEgPSAmc2hhcmVkX2VudHJ5X3YxKGUtPmdyYW50X3Rh YmxlLCBnb3AucmVmKTsKIApAQCAtMjQ3Myw2ICsyNTAzLDcgQEAgZ250dGFi X3RyYW5zZmVyKAogICAgICAgICBzaGFyZWRfZW50cnlfaGVhZGVyKGUtPmdy YW50X3RhYmxlLCBnb3AucmVmKS0+ZmxhZ3MgfD0KICAgICAgICAgICAgIEdU Rl90cmFuc2Zlcl9jb21wbGV0ZWQ7CiAKKyAgICByZWxlYXNlOgogICAgICAg ICBhY3RpdmVfZW50cnlfcmVsZWFzZShhY3QpOwogICAgICAgICBncmFudF9y ZWFkX3VubG9jayhlLT5ncmFudF90YWJsZSk7CiAKQEAgLTI1MDEsMjggKzI1 MzIsMjcgQEAgcmVsZWFzZV9ncmFudF9mb3JfY29weSgKICAgICBzdHJ1Y3Qg ZG9tYWluICpyZCwgZ3JhbnRfcmVmX3QgZ3JlZiwgYm9vbCByZWFkb25seSkK IHsKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKnJndCA9IHJkLT5ncmFudF90 YWJsZTsKLSAgICBncmFudF9lbnRyeV9oZWFkZXJfdCAqc2hhOwogICAgIHN0 cnVjdCBhY3RpdmVfZ3JhbnRfZW50cnkgKmFjdDsKICAgICBtZm5fdCBtZm47 Ci0gICAgdWludDE2X3QgKnN0YXR1czsKKyAgICB1aW50MTZfdCAqc3RhdHVz ID0gTlVMTDsKICAgICBncmFudF9yZWZfdCB0cmFuc19ncmVmOwogICAgIHN0 cnVjdCBkb21haW4gKnRkOwogCiAgICAgZ3JhbnRfcmVhZF9sb2NrKHJndCk7 CiAKICAgICBhY3QgPSBhY3RpdmVfZW50cnlfYWNxdWlyZShyZ3QsIGdyZWYp OwotICAgIHNoYSA9IHNoYXJlZF9lbnRyeV9oZWFkZXIocmd0LCBncmVmKTsK ICAgICBtZm4gPSBhY3QtPm1mbjsKIAogICAgIGlmICggZXZhbHVhdGVfbm9z cGVjKHJndC0+Z3RfdmVyc2lvbiA9PSAxKSApCiAgICAgewotICAgICAgICBz dGF0dXMgPSAmc2hhLT5mbGFnczsKKyAgICAgICAgc3RhdHVzID0gJnNoYXJl ZF9lbnRyeV92MShyZ3QsIGdyZWYpLmZsYWdzOwogICAgICAgICB0ZCA9IHJk OwogICAgICAgICB0cmFuc19ncmVmID0gZ3JlZjsKICAgICB9CiAgICAgZWxz ZQogICAgIHsKLSAgICAgICAgc3RhdHVzID0gJnN0YXR1c19lbnRyeShyZ3Qs IGdyZWYpOworICAgICAgICBpZiAoIGV2YWx1YXRlX25vc3BlYyhncmVmIDwg bnJfZ3JhbnRfZW50cmllcyhyZ3QpKSApCisgICAgICAgICAgICBzdGF0dXMg PSAmc3RhdHVzX2VudHJ5KHJndCwgZ3JlZik7CiAgICAgICAgIHRkID0gKGFj dC0+c3JjX2RvbWlkID09IHJkLT5kb21haW5faWQpCiAgICAgICAgICAgICAg PyByZCA6IGtub3duYWxpdmVfZG9tYWluX2Zyb21fZG9taWQoYWN0LT5zcmNf ZG9taWQpOwogICAgICAgICB0cmFuc19ncmVmID0gYWN0LT50cmFuc19ncmVm OwpAQCAtMjU0MSw2ICsyNTcxLDkgQEAgcmVsZWFzZV9ncmFudF9mb3JfY29w eSgKIAogICAgIHJlZHVjZV9zdGF0dXNfZm9yX3BpbihyZCwgYWN0LCBzdGF0 dXMsIHJlYWRvbmx5KTsKIAorICAgIGlmICggIWFjdC0+cGluICYmIGFjdC0+ aXNfc3ViX3BhZ2UgKQorICAgICAgICBhdG9taWNfZGVjKCZyZ3QtPm5yX3Yy X29wcyk7CisKICAgICBhY3RpdmVfZW50cnlfcmVsZWFzZShhY3QpOwogICAg IGdyYW50X3JlYWRfdW5sb2NrKHJndCk7CiAKQEAgLTI2NzIsOCArMjcwNSwx MCBAQCBhY3F1aXJlX2dyYW50X2Zvcl9jb3B5KAogCiAgICAgICAgIC8qCiAg ICAgICAgICAqIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoKSB3aWxsIHRha2Ug dGhlIGxvY2sgb24gdGhlIHJlbW90ZSB0YWJsZSwKLSAgICAgICAgICogc28g d2UgaGF2ZSB0byBkcm9wIHRoZSBsb2NrIGhlcmUgYW5kIHJlYWNxdWlyZS4K KyAgICAgICAgICogc28gd2UgaGF2ZSB0byBkcm9wIHRoZSBsb2NrIGhlcmUg YW5kIHJlYWNxdWlyZS4gIEJlZm9yZSBkb2luZyBzbywKKyAgICAgICAgICog cmVjb3JkIHRoYXQgYSB2MiBvcGVyYXRpb24gaXMgaW4gcHJvZ3Jlc3MuCiAg ICAgICAgICAqLworICAgICAgICBhdG9taWNfaW5jKCZyZ3QtPm5yX3YyX29w cyk7CiAgICAgICAgIGFjdGl2ZV9lbnRyeV9yZWxlYXNlKGFjdCk7CiAgICAg ICAgIGdyYW50X3JlYWRfdW5sb2NrKHJndCk7CiAKQEAgLTI2ODcsNiArMjcy Miw3IEBAIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoCiAKICAgICAgICAgaWYg KCByYyAhPSBHTlRTVF9va2F5ICkKICAgICAgICAgeworICAgICAgICAgICAg YXRvbWljX2RlYygmcmd0LT5ucl92Ml9vcHMpOwogICAgICAgICAgICAgcmN1 X3VubG9ja19kb21haW4odGQpOwogICAgICAgICAgICAgcmVkdWNlX3N0YXR1 c19mb3JfcGluKHJkLCBhY3QsIHN0YXR1cywgcmVhZG9ubHkpOwogICAgICAg ICAgICAgYWN0aXZlX2VudHJ5X3JlbGVhc2UoYWN0KTsKQEAgLTI3MjMsNiAr Mjc1OSw4IEBAIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoCiAgICAgICAgICAg ICByY3VfdW5sb2NrX2RvbWFpbih0ZCk7CiAKICAgICAgICAgICAgIGdyYW50 X3JlYWRfbG9jayhyZ3QpOworICAgICAgICAgICAgYXRvbWljX2RlYygmcmd0 LT5ucl92Ml9vcHMpOworCiAgICAgICAgICAgICBhY3QgPSBhY3RpdmVfZW50 cnlfYWNxdWlyZShyZ3QsIGdyZWYpOwogICAgICAgICAgICAgcmVkdWNlX3N0 YXR1c19mb3JfcGluKHJkLCBhY3QsIHN0YXR1cywgcmVhZG9ubHkpOwogICAg ICAgICAgICAgYWN0aXZlX2VudHJ5X3JlbGVhc2UoYWN0KTsKQEAgLTI3NDks NiArMjc4Nyw4IEBAIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoCiAgICAgICAg ICAgICAgKi8KICAgICAgICAgICAgIGFjdC0+aXNfc3ViX3BhZ2UgPSB0cnVl OwogICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgICAgIGF0b21p Y19kZWMoJnJndC0+bnJfdjJfb3BzKTsKICAgICB9CiAgICAgZWxzZSBpZiAo ICFvbGRfcGluIHx8CiAgICAgICAgICAgICAgICghcmVhZG9ubHkgJiYgIShv bGRfcGluICYgKEdOVFBJTl9kZXZ3X21hc2t8R05UUElOX2hzdHdfbWFzaykp KSApCkBAIC0yODAzLDYgKzI4NDMsOSBAQCBhY3F1aXJlX2dyYW50X2Zvcl9j b3B5KAogICAgICAgICAgICAgYWN0LT5zcmNfZG9taWQgPSB0ZC0+ZG9tYWlu X2lkOwogICAgICAgICAgICAgYWN0LT50cmFuc19ncmVmID0gdHJhbnNfZ3Jl ZjsKICAgICAgICAgICAgIGFjdC0+bWZuID0gZ3JhbnRfbWZuOworCisgICAg ICAgICAgICBpZiAoIGlzX3N1Yl9wYWdlICkKKyAgICAgICAgICAgICAgICBh dG9taWNfaW5jKCZyZ3QtPm5yX3YyX29wcyk7CiAgICAgICAgIH0KICAgICAg ICAgZWxzZSBpZiAoICFtZm5fZXEoYWN0LT5tZm4sIGdyYW50X21mbikgfHwK ICAgICAgICAgICAgICAgICAgIGFjdC0+c3JjX2RvbWlkICE9IHRkLT5kb21h aW5faWQgfHwKQEAgLTMyMzIsNyArMzI3NSwxNyBAQCBnbnR0YWJfc2V0X3Zl cnNpb24oWEVOX0dVRVNUX0hBTkRMRV9QQVJBTShnbnR0YWJfc2V0X3ZlcnNp b25fdCkgdW9wKQogICAgICAgICBpZiAoIHJlcyA8IDApCiAgICAgICAgICAg ICBnb3RvIG91dF91bmxvY2s7CiAgICAgICAgIGJyZWFrOworCiAgICAgY2Fz ZSAyOgorICAgICAgICBpZiAoIGF0b21pY19yZWFkKCZndC0+bnJfdjJfb3Bz KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19X QVJOSU5HLAorICAgICAgICAgICAgICAgICAgICAgInRyaWVkIHRvIGNoYW5n ZSB0byBncmFudCB0YWJsZSB2MSwgYnV0ICVkIHYyIG9wZXJhdGlvbnMgc3Rp bGwgaW4gcHJvZ3Jlc3NcbiIsCisgICAgICAgICAgICAgICAgICAgICBhdG9t aWNfcmVhZCgmZ3QtPm5yX3YyX29wcykpOworICAgICAgICAgICAgcmVzID0g LUVBR0FJTjsKKyAgICAgICAgICAgIGdvdG8gb3V0X3VubG9jazsKKyAgICAg ICAgfQorCiAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgR05UVEFCX05SX1JF U0VSVkVEX0VOVFJJRVM7IGkrKyApCiAgICAgICAgIHsKICAgICAgICAgICAg IHN3aXRjaCAoIHNoYXJlZF9lbnRyeV92MihndCwgaSkuaGRyLmZsYWdzICYg R1RGX3R5cGVfbWFzayApCg== --=separator Content-Type: application/octet-stream; name="xsa501-4.17.patch" Content-Disposition: attachment; filename="xsa501-4.17.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IGNvcGUgd2l0aCB2ZXJzaW9uIGNoYW5nZXMgcmFjaW5nIG90 aGVyIG9wZXJhdGlvbnMKCkRyb3BwaW5nIGFuZCByZS1hY3F1aXJpbmcgdGhl IGdyYW50IHRhYmxlIGxvY2sgZm9yIGEgcGFydGljdWxhciBvcGVyYXRpb24K cmVxdWlyZXMgc3BlY2lhbCBjYXJlLCBhcyBpbiB0aGUgbWVhbnRpbWUgdGhl IGdyYW50IHRhYmxlIHZlcnNpb24gY2FuCmNoYW5nZS4KCkR1cmluZyBhIHYy IC0+IHYxIGNoYW5nZSwgc3RhdHVzIGZyYW1lcyBnb2luZyBhd2F5IG1lYW5z IHRoYXQgcHJlLQpjYWxjdWxhdGVkIHN0YXR1cyBwb2ludGVycyBnbyBzdGFs ZSwgcmVmZXJlbmNpbmcgZnJlZWQgKGFuZCBwb3NzaWJseQphbHJlYWR5IHJl LXVzZWQpIG1lbW9yeS4gUmVjb3JkIGluLWZsaWdodCB2MiBvcGVyYXRpb25z LCBwZXJtaXR0aW5nIHRoZQp2ZXJzaW9uIGNoYW5nZSBvbmx5IHdoZW4gdGhl cmUgYXJlIG5vbmUgb2YgdGhlbS4gUmVjYWxjdWxhdGUgInN0YXR1cyIgaW4K dGhlIG9uZSBwbGFjZSAobWFwX2dyYW50X3JlZigpJ3MgZXJyb3IgcGF0aCkg d2hlcmUgaXQgY291bGQgYmUgc3RhbGUsIGJ1dApjb25maW5lIHRoaXMgdG8g cmVzZXJ2ZWQgZW50cmllcy4KClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MzYuCgpS ZXBvcnRlZC1ieTogTWFyayBFc2xlciA8bWFya0BoZXhwcm9vZi5kZXY+CgpE dXJpbmcgYSB2MSAtPiB2MiBjaGFuZ2UsIHRoZSBudW1iZXIgb2Ygc2hhcmVk IHRhYmxlIGVudHJpZXMgcmVkdWNlcywKbWVhbmluZyB0aGF0IHByZXZpb3Vz bHkgdmFsaWRhdGVkIGdyYW50IHJlZmVyZW5jZXMgbWF5IG5vdyBiZSBvdXQg b2YKYm91bmRzLiBCZWNhdXNlIG9mIHRoZSBjaGVja2luZyBvZiBwaW4gY291 bnRzIGluIGdudHRhYl9zZXRfdmVyc2lvbigpCih3aXRoIHRoZSBncmFudCB0 YWJsZSBsb2NrIGhlbGQgZm9yIHdyaXRpbmcpLCBmb3Igbm93LW91dC1vZi1i b3VuZHMgZ3JlZi1zCm5laXRoZXIgYWN0aXZlIG1hcHBpbmdzIGNhbiBleGlz dCwgbm9yIGNhbiB0aGVyZSBiZSBpbi1wcm9ncmVzcyBjb3B5Cm9wZXJhdGlv bnMuIE5ldmVydGhlbGVzcyBib3VuZHMgY2hlY2tzIGFyZSBhZGRlZCB0aGVy ZSwganVzdCB0byBiZSBvbiB0aGUKc2FmZSBzaWRlLgoKRm9yIGdudHRhYl90 cmFuc2ZlcigpLCB0byBjb3ZlciB0aGUgZ2FwIGJldHdlZW4gdGhlIGxvY2sg YmVpbmcgZHJvcHBlZCBieQpnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIo KSBhbmQgaXQgYmVpbmcgcmUtYWNxdWlyZWQsIGhhdmUgdGhlIGhlbHBlcgpy ZXR1cm4gdGhlIHZlcnNpb24gaXQgZm91bmQsIGFuZCBmYWlsIHRoZSBvcGVy YXRpb24gaWYgdGhlIHZlcnNpb24gdHVybnMKb3V0IHRvIGhhdmUgY2hhbmdl ZCBhZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpGdXJ0aGVyIGF2b2lk IG5lZWRsZXNzIHVzZSBvZiBzaGFyZWRfZW50cnlfaGVhZGVyKCksIGFzIGl0 IGludm9sdmVzCnBvaW50ZXIgYXJpdGhtZXRpYyB3aGljaCwgd2hlbiB1c2lu ZyBhbiBvdXQtb2YtYm91bmRzIHJlZiwgaXMgVUIuCgpUaGlzIGlzIENWRS0y MDI2LTYyNDM1LgoKRXZlcnl0aGluZyB0b2dldGhlciBpcyBYU0EtNTAxLgoK Rml4ZXM6IGE5OGRjMTM3MDNlMCAoIkludHJvZHVjZSBhIGdyYW50X2VudHJ5 X3YyIHN0cnVjdHVyZSIpClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBNYXJrIEVzbGVyIDxtYXJr QGhleHByb29mLmRldj4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL2dy YW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCkBA IC03MSw2ICs3MSwxMCBAQCBzdHJ1Y3QgZ3JhbnRfdGFibGUgewogICAgIHVu c2lnbmVkIGludCAgICAgICAgICBucl9ncmFudF9mcmFtZXM7CiAgICAgLyog TnVtYmVyIG9mIGdyYW50IHN0YXR1cyBmcmFtZXMgc2hhcmVkIHdpdGggZ3Vl c3QgKGZvciB2ZXJzaW9uIDIpICovCiAgICAgdW5zaWduZWQgaW50ICAgICAg ICAgIG5yX3N0YXR1c19mcmFtZXM7CisKKyAgICAvKiBOdW1iZXIgb2YgdmVy c2lvbiAyIG9wZXJhdGlvbnMgaW4gcHJvZ3Jlc3MuICovCisgICAgYXRvbWlj X3QgICAgICAgICAgICAgIG5yX3YyX29wczsKKwogICAgIC8qCiAgICAgICog TnVtYmVyIG9mIGF2YWlsYWJsZSBtYXB0cmFjayBlbnRyaWVzLiAgRm9yIGNs ZWFudXAgcHVycG9zZXMgaXQgaXMKICAgICAgKiBpbXBvcnRhbnQgdG8gcmVh bGl6ZSB0aGF0IHRoaXMgZmllbGQgYW5kIEBtYXB0cmFjayBmdXJ0aGVyIGRv d24gd2lsbApAQCAtOTE4LDYgKzkyMiw5IEBAIHN0YXRpYyB2b2lkIHJlZHVj ZV9zdGF0dXNfZm9yX3BpbihzdHJ1Y3QKIHsKICAgICB1bnNpZ25lZCBpbnQg Y2xlYXJfZmxhZ3MgPSBhY3QtPnBpbiA/IDAgOiBHVEZfcmVhZGluZzsKIAor ICAgIGlmICggdW5saWtlbHkoIXN0YXR1cykgKQorICAgICAgICByZXR1cm47 CisKICAgICBpZiAoICFyZWFkb25seSAmJiAhKGFjdC0+cGluICYgKEdOVFBJ Tl9oc3R3X21hc2sgfCBHTlRQSU5fZGV2d19tYXNrKSkgKQogICAgICAgICBj bGVhcl9mbGFncyB8PSBHVEZfd3JpdGluZzsKIApAQCAtMTMxOCw2ICsxMzI1 LDIyIEBAIG1hcF9ncmFudF9yZWYoCiAKICAgICBncmFudF9yZWFkX2xvY2so cmd0KTsKIAorICAgIGlmICggdW5saWtlbHkoZXZhbHVhdGVfbm9zcGVjKChy Z3QtPmd0X3ZlcnNpb24gPT0gMSkgIT0KKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAoc3RhdHVzID09ICZzaGFoLT5mbGFncykpKSApCisg ICAgeworICAgICAgICAvKgorICAgICAgICAgKiBBZnRlciBhIHYxIC0+IHYy IGNoYW5nZSBiZWhpbmQgb3VyIGJhY2tzICJyZWYiIG1heSBub3cgYmUgb3V0 IG9mCisgICAgICAgICAqIGJvdW5kcy4gIFJlY2FsY3VsYXRlIGl0LCBidXQg b25seSBmb3IgcmVzZXJ2ZWQgZW50cmllcy4gIE90aGVycworICAgICAgICAg KiB3aWxsIGhhdmUgYmVlbiBjbGVhcmVkIGFueXdheSBieSB0aGUgdmVyc2lv biBjaGFuZ2UuCisgICAgICAgICAqLworICAgICAgICBpZiAoIHJlZiA8IEdO VFRBQl9OUl9SRVNFUlZFRF9FTlRSSUVTICkKKyAgICAgICAgICAgIHN0YXR1 cyA9IGV2YWx1YXRlX25vc3BlYyhyZ3QtPmd0X3ZlcnNpb24gPT0gMSkKKyAg ICAgICAgICAgICAgICAgICAgID8gJnNoYWgtPmZsYWdzCisgICAgICAgICAg ICAgICAgICAgICA6ICZzdGF0dXNfZW50cnkocmd0LCByZWYpOworICAgICAg ICBlbHNlCisgICAgICAgICAgICBzdGF0dXMgPSBOVUxMOworICAgIH0KKwog ICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgb3AtPnJlZik7 CiAgICAgYWN0LT5waW4gLT0gcGluX2luY3I7CiAKQEAgLTE1NTcsOSArMTU4 MCw4IEBAIHVubWFwX2NvbW1vbl9jb21wbGV0ZShzdHJ1Y3QgZ250dGFiX3Vu bWEKICAgICBzdHJ1Y3QgZG9tYWluICpsZCwgKnJkID0gb3AtPnJkOwogICAg IHN0cnVjdCBncmFudF90YWJsZSAqcmd0OwogICAgIHN0cnVjdCBhY3RpdmVf Z3JhbnRfZW50cnkgKmFjdDsKLSAgICBncmFudF9lbnRyeV9oZWFkZXJfdCAq c2hhOwogICAgIHN0cnVjdCBwYWdlX2luZm8gKnBnOwotICAgIHVpbnQxNl90 ICpzdGF0dXM7CisgICAgdWludDE2X3QgKnN0YXR1cyA9IE5VTEw7CiAKICAg ICBpZiAoIGV2YWx1YXRlX25vc3BlYyghb3AtPmRvbmUpICkKICAgICB7CkBA IC0xNTc1LDExICsxNTk3LDEwIEBAIHVubWFwX2NvbW1vbl9jb21wbGV0ZShz dHJ1Y3QgZ250dGFiX3VubWEKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsK IAogICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgb3AtPnJl Zik7Ci0gICAgc2hhID0gc2hhcmVkX2VudHJ5X2hlYWRlcihyZ3QsIG9wLT5y ZWYpOwogCiAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMocmd0LT5ndF92ZXJz aW9uID09IDEpICkKLSAgICAgICAgc3RhdHVzID0gJnNoYS0+ZmxhZ3M7Ci0g ICAgZWxzZQorICAgICAgICBzdGF0dXMgPSAmc2hhcmVkX2VudHJ5X3YxKHJn dCwgb3AtPnJlZikuZmxhZ3M7CisgICAgZWxzZSBpZiAoIGV2YWx1YXRlX25v c3BlYyhvcC0+cmVmIDwgbnJfZ3JhbnRfZW50cmllcyhyZ3QpKSApCiAgICAg ICAgIHN0YXR1cyA9ICZzdGF0dXNfZW50cnkocmd0LCBvcC0+cmVmKTsKIAog ICAgIHBnID0gIWlzX2lvbWVtX3BhZ2UoYWN0LT5tZm4pID8gbWZuX3RvX3Bh Z2Uob3AtPm1mbikgOiBOVUxMOwpAQCAtMjE2NywxNCArMjE4OCwxNCBAQCBn bnR0YWJfcXVlcnlfc2l6ZSgKICAqIENoZWNrIHRoYXQgdGhlIGdpdmVuIGdy YW50IHJlZmVyZW5jZSAocmQscmVmKSBhbGxvd3MgJ2xkJyB0byB0cmFuc2Zl cgogICogb3duZXJzaGlwIG9mIGEgcGFnZSBmcmFtZS4gSWYgc28sIGxvY2sg ZG93biB0aGUgZ3JhbnQgZW50cnkuCiAgKi8KLXN0YXRpYyBpbnQKK3N0YXRp YyB1bnNpZ25lZCBpbnQKIGdudHRhYl9wcmVwYXJlX2Zvcl90cmFuc2ZlcigK ICAgICBzdHJ1Y3QgZG9tYWluICpyZCwgc3RydWN0IGRvbWFpbiAqbGQsIGdy YW50X3JlZl90IHJlZikKIHsKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKnJn dCA9IHJkLT5ncmFudF90YWJsZTsKICAgICB1aW50MzJfdCAqcmF3X3NoYWg7 CiAgICAgdW5pb24gZ3JhbnRfY29tYm8gc2NvbWJvOwotICAgIGludCAgICAg ICAgICAgICAgICAgcmV0cmllcyA9IDA7CisgICAgdW5zaWduZWQgaW50IHJl dHJpZXMgPSAwLCB2ZXI7CiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsK IApAQCAtMjIxOSw4ICsyMjQwLDExIEBAIGdudHRhYl9wcmVwYXJlX2Zvcl90 cmFuc2ZlcigKICAgICAgICAgc2NvbWJvID0gcHJldjsKICAgICB9CiAKKyAg ICB2ZXIgPSByZ3QtPmd0X3ZlcnNpb247CisKICAgICBncmFudF9yZWFkX3Vu bG9jayhyZ3QpOwotICAgIHJldHVybiAxOworCisgICAgcmV0dXJuIHZlcjsK IAogIGZhaWw6CiAgICAgZ3JhbnRfcmVhZF91bmxvY2socmd0KTsKQEAgLTIy NDUsNyArMjI2OSw3IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgIGZvciAo IGkgPSAwOyBpIDwgY291bnQ7IGkrKyApCiAgICAgewotICAgICAgICBib29s X3Qgb2theTsKKyAgICAgICAgdW5zaWduZWQgaW50IHZlcjsKICAgICAgICAg aW50IHJjOwogCiAgICAgICAgIGlmICggaSAmJiBoeXBlcmNhbGxfcHJlZW1w dF9jaGVjaygpICkKQEAgLTIzODUsMTQgKzI0MDksMTQgQEAgZ250dGFiX3Ry YW5zZmVyKAogICAgICAgICAgKiBwYWdlbGlzdC4KICAgICAgICAgICovCiAg ICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwotICAg ICAgICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQs IGdvcC5yZWYpOworICAgICAgICB2ZXIgPSBnbnR0YWJfcHJlcGFyZV9mb3Jf dHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7CiAKICAgICAgICAgLyoKICAgICAg ICAgICogTWFrZSBzdXJlIHRoZSByZWZlcmVuY2UgYm91bmQgY2hlY2sgaW4g Z250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyCiAgICAgICAgICAqIGlzIHJl c3BlY3RlZCBhbmQgc3BlY3VsYXRpdmUgZXhlY3V0aW9uIGlzIGJsb2NrZWQg YWNjb3JkaW5nbHkKICAgICAgICAgICovCi0gICAgICAgIGlmICggdW5saWtl bHkoIWV2YWx1YXRlX25vc3BlYyhva2F5KSkgfHwKLSAgICAgICAgICAgIHVu bGlrZWx5KGFzc2lnbl9wYWdlcyhwYWdlLCAxLCBlLCBNRU1GX25vX3JlZmNv dW50KSkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KCFldmFsdWF0ZV9ub3Nw ZWModmVyKSkgfHwKKyAgICAgICAgICAgICB1bmxpa2VseShhc3NpZ25fcGFn ZXMocGFnZSwgMSwgZSwgTUVNRl9ub19yZWZjb3VudCkpICkKICAgICAgICAg ewogICAgICAgICAgICAgYm9vbCBkcm9wX2RvbV9yZWY7CiAKQEAgLTI0MDQs NyArMjQyOCw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGRy b3BfZG9tX3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7 CiAgICAgICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxvY19sb2Nr KTsKIAotICAgICAgICAgICAgaWYgKCBva2F5IC8qIGkuZS4gZS0+aXNfZHlp bmcgZHVlIHRvIHRoZSBzdXJyb3VuZGluZyBpZigpICovICkKKyAgICAgICAg ICAgIGlmICggdmVyIC8qIGkuZS4gZS0+aXNfZHlpbmcgZHVlIHRvIHRoZSBz dXJyb3VuZGluZyBpZigpICovICkKICAgICAgICAgICAgICAgICBnZHByaW50 ayhYRU5MT0dfSU5GTywgIlRyYW5zZmVyZWUgZCVkIGlzIG5vdyBkeWluZ1xu IiwKICAgICAgICAgICAgICAgICAgICAgICAgICBlLT5kb21haW5faWQpOwog CkBAIC0yNDI0LDcgKzI0NDgsMTMgQEAgZ250dGFiX3RyYW5zZmVyKAogICAg ICAgICBncmFudF9yZWFkX2xvY2soZS0+Z3JhbnRfdGFibGUpOwogICAgICAg ICBhY3QgPSBhY3RpdmVfZW50cnlfYWNxdWlyZShlLT5ncmFudF90YWJsZSwg Z29wLnJlZik7CiAKLSAgICAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMoZS0+ Z3JhbnRfdGFibGUtPmd0X3ZlcnNpb24gPT0gMSkgKQorICAgICAgICBpZiAo IHVubGlrZWx5KGV2YWx1YXRlX25vc3BlYyhlLT5ncmFudF90YWJsZS0+Z3Rf dmVyc2lvbiAhPSB2ZXIpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHJj ID0gLUVJTFNFUTsKKyAgICAgICAgICAgIGdvdG8gcmVsZWFzZTsKKyAgICAg ICAgfQorCisgICAgICAgIGlmICggZXZhbHVhdGVfbm9zcGVjKHZlciA9PSAx KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGdyYW50X2VudHJ5X3YxX3Qg KnNoYSA9ICZzaGFyZWRfZW50cnlfdjEoZS0+Z3JhbnRfdGFibGUsIGdvcC5y ZWYpOwogCkBAIC0yNDQ0LDYgKzI0NzQsNyBAQCBnbnR0YWJfdHJhbnNmZXIo CiAgICAgICAgIHNoYXJlZF9lbnRyeV9oZWFkZXIoZS0+Z3JhbnRfdGFibGUs IGdvcC5yZWYpLT5mbGFncyB8PQogICAgICAgICAgICAgR1RGX3RyYW5zZmVy X2NvbXBsZXRlZDsKIAorICAgIHJlbGVhc2U6CiAgICAgICAgIGFjdGl2ZV9l bnRyeV9yZWxlYXNlKGFjdCk7CiAgICAgICAgIGdyYW50X3JlYWRfdW5sb2Nr KGUtPmdyYW50X3RhYmxlKTsKIApAQCAtMjQ3MiwyOCArMjUwMywyNyBAQCBy ZWxlYXNlX2dyYW50X2Zvcl9jb3B5KAogICAgIHN0cnVjdCBkb21haW4gKnJk LCBncmFudF9yZWZfdCBncmVmLCBib29sIHJlYWRvbmx5KQogewogICAgIHN0 cnVjdCBncmFudF90YWJsZSAqcmd0ID0gcmQtPmdyYW50X3RhYmxlOwotICAg IGdyYW50X2VudHJ5X2hlYWRlcl90ICpzaGE7CiAgICAgc3RydWN0IGFjdGl2 ZV9ncmFudF9lbnRyeSAqYWN0OwogICAgIG1mbl90IG1mbjsKLSAgICB1aW50 MTZfdCAqc3RhdHVzOworICAgIHVpbnQxNl90ICpzdGF0dXMgPSBOVUxMOwog ICAgIGdyYW50X3JlZl90IHRyYW5zX2dyZWY7CiAgICAgc3RydWN0IGRvbWFp biAqdGQ7CiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsKIAogICAgIGFj dCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgZ3JlZik7Ci0gICAgc2hh ID0gc2hhcmVkX2VudHJ5X2hlYWRlcihyZ3QsIGdyZWYpOwogICAgIG1mbiA9 IGFjdC0+bWZuOwogCiAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMocmd0LT5n dF92ZXJzaW9uID09IDEpICkKICAgICB7Ci0gICAgICAgIHN0YXR1cyA9ICZz aGEtPmZsYWdzOworICAgICAgICBzdGF0dXMgPSAmc2hhcmVkX2VudHJ5X3Yx KHJndCwgZ3JlZikuZmxhZ3M7CiAgICAgICAgIHRkID0gcmQ7CiAgICAgICAg IHRyYW5zX2dyZWYgPSBncmVmOwogICAgIH0KICAgICBlbHNlCiAgICAgewot ICAgICAgICBzdGF0dXMgPSAmc3RhdHVzX2VudHJ5KHJndCwgZ3JlZik7Cisg ICAgICAgIGlmICggZXZhbHVhdGVfbm9zcGVjKGdyZWYgPCBucl9ncmFudF9l bnRyaWVzKHJndCkpICkKKyAgICAgICAgICAgIHN0YXR1cyA9ICZzdGF0dXNf ZW50cnkocmd0LCBncmVmKTsKICAgICAgICAgdGQgPSBhY3QtPnRyYW5zX2Rv bWFpbjsKICAgICAgICAgdHJhbnNfZ3JlZiA9IGFjdC0+dHJhbnNfZ3JlZjsK ICAgICB9CkBAIC0yNTExLDYgKzI1NDEsOSBAQCByZWxlYXNlX2dyYW50X2Zv cl9jb3B5KAogCiAgICAgcmVkdWNlX3N0YXR1c19mb3JfcGluKHJkLCBhY3Qs IHN0YXR1cywgcmVhZG9ubHkpOwogCisgICAgaWYgKCAhYWN0LT5waW4gJiYg YWN0LT5pc19zdWJfcGFnZSApCisgICAgICAgIGF0b21pY19kZWMoJnJndC0+ bnJfdjJfb3BzKTsKKwogICAgIGFjdGl2ZV9lbnRyeV9yZWxlYXNlKGFjdCk7 CiAgICAgZ3JhbnRfcmVhZF91bmxvY2socmd0KTsKIApAQCAtMjYyMyw4ICsy NjU2LDEwIEBAIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoCiAKICAgICAgICAg LyoKICAgICAgICAgICogYWNxdWlyZV9ncmFudF9mb3JfY29weSgpIHdpbGwg dGFrZSB0aGUgbG9jayBvbiB0aGUgcmVtb3RlIHRhYmxlLAotICAgICAgICAg KiBzbyB3ZSBoYXZlIHRvIGRyb3AgdGhlIGxvY2sgaGVyZSBhbmQgcmVhY3F1 aXJlLgorICAgICAgICAgKiBzbyB3ZSBoYXZlIHRvIGRyb3AgdGhlIGxvY2sg aGVyZSBhbmQgcmVhY3F1aXJlLiAgQmVmb3JlIGRvaW5nIHNvLAorICAgICAg ICAgKiByZWNvcmQgdGhhdCBhIHYyIG9wZXJhdGlvbiBpcyBpbiBwcm9ncmVz cy4KICAgICAgICAgICovCisgICAgICAgIGF0b21pY19pbmMoJnJndC0+bnJf djJfb3BzKTsKICAgICAgICAgYWN0aXZlX2VudHJ5X3JlbGVhc2UoYWN0KTsK ICAgICAgICAgZ3JhbnRfcmVhZF91bmxvY2socmd0KTsKIApAQCAtMjYzOCw2 ICsyNjczLDcgQEAgYWNxdWlyZV9ncmFudF9mb3JfY29weSgKIAogICAgICAg ICBpZiAoIHJjICE9IEdOVFNUX29rYXkgKQogICAgICAgICB7CisgICAgICAg ICAgICBhdG9taWNfZGVjKCZyZ3QtPm5yX3YyX29wcyk7CiAgICAgICAgICAg ICByY3VfdW5sb2NrX2RvbWFpbih0ZCk7CiAgICAgICAgICAgICByZWR1Y2Vf c3RhdHVzX2Zvcl9waW4ocmQsIGFjdCwgc3RhdHVzLCByZWFkb25seSk7CiAg ICAgICAgICAgICBhY3RpdmVfZW50cnlfcmVsZWFzZShhY3QpOwpAQCAtMjY3 NCw2ICsyNzEwLDggQEAgYWNxdWlyZV9ncmFudF9mb3JfY29weSgKICAgICAg ICAgICAgIHJjdV91bmxvY2tfZG9tYWluKHRkKTsKIAogICAgICAgICAgICAg Z3JhbnRfcmVhZF9sb2NrKHJndCk7CisgICAgICAgICAgICBhdG9taWNfZGVj KCZyZ3QtPm5yX3YyX29wcyk7CisKICAgICAgICAgICAgIGFjdCA9IGFjdGl2 ZV9lbnRyeV9hY3F1aXJlKHJndCwgZ3JlZik7CiAgICAgICAgICAgICByZWR1 Y2Vfc3RhdHVzX2Zvcl9waW4ocmQsIGFjdCwgc3RhdHVzLCByZWFkb25seSk7 CiAgICAgICAgICAgICBhY3RpdmVfZW50cnlfcmVsZWFzZShhY3QpOwpAQCAt MjcwMCw2ICsyNzM4LDggQEAgYWNxdWlyZV9ncmFudF9mb3JfY29weSgKICAg ICAgICAgICAgICAqLwogICAgICAgICAgICAgYWN0LT5pc19zdWJfcGFnZSA9 IHRydWU7CiAgICAgICAgIH0KKyAgICAgICAgZWxzZQorICAgICAgICAgICAg YXRvbWljX2RlYygmcmd0LT5ucl92Ml9vcHMpOwogICAgIH0KICAgICBlbHNl IGlmICggIW9sZF9waW4gfHwKICAgICAgICAgICAgICAgKCFyZWFkb25seSAm JiAhKG9sZF9waW4gJiAoR05UUElOX2RldndfbWFza3xHTlRQSU5faHN0d19t YXNrKSkpICkKQEAgLTI3NTQsNiArMjc5NCw5IEBAIGFjcXVpcmVfZ3JhbnRf Zm9yX2NvcHkoCiAgICAgICAgICAgICBhY3QtPnRyYW5zX2RvbWFpbiA9IHRk OwogICAgICAgICAgICAgYWN0LT50cmFuc19ncmVmID0gdHJhbnNfZ3JlZjsK ICAgICAgICAgICAgIGFjdC0+bWZuID0gZ3JhbnRfbWZuOworCisgICAgICAg ICAgICBpZiAoIGlzX3N1Yl9wYWdlICkKKyAgICAgICAgICAgICAgICBhdG9t aWNfaW5jKCZyZ3QtPm5yX3YyX29wcyk7CiAgICAgICAgIH0KICAgICAgICAg ZWxzZSBpZiAoICFtZm5fZXEoYWN0LT5tZm4sIGdyYW50X21mbikgfHwKICAg ICAgICAgICAgICAgICAgIGFjdC0+dHJhbnNfZG9tYWluICE9IHRkIHx8CkBA IC0zMTczLDcgKzMyMTYsMTcgQEAgZ250dGFiX3NldF92ZXJzaW9uKFhFTl9H VUVTVF9IQU5ETEVfUEFSQQogICAgICAgICBpZiAoIHJlcyA8IDApCiAgICAg ICAgICAgICBnb3RvIG91dF91bmxvY2s7CiAgICAgICAgIGJyZWFrOworCiAg ICAgY2FzZSAyOgorICAgICAgICBpZiAoIGF0b21pY19yZWFkKCZndC0+bnJf djJfb3BzKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIGdkcHJpbnRrKFhF TkxPR19XQVJOSU5HLAorICAgICAgICAgICAgICAgICAgICAgInRyaWVkIHRv IGNoYW5nZSB0byBncmFudCB0YWJsZSB2MSwgYnV0ICVkIHYyIG9wZXJhdGlv bnMgc3RpbGwgaW4gcHJvZ3Jlc3NcbiIsCisgICAgICAgICAgICAgICAgICAg ICBhdG9taWNfcmVhZCgmZ3QtPm5yX3YyX29wcykpOworICAgICAgICAgICAg cmVzID0gLUVBR0FJTjsKKyAgICAgICAgICAgIGdvdG8gb3V0X3VubG9jazsK KyAgICAgICAgfQorCiAgICAgICAgIGZvciAoIGkgPSAwOyBpIDwgR05UVEFC X05SX1JFU0VSVkVEX0VOVFJJRVM7IGkrKyApCiAgICAgICAgIHsKICAgICAg ICAgICAgIHN3aXRjaCAoIHNoYXJlZF9lbnRyeV92MihndCwgaSkuaGRyLmZs YWdzICYgR1RGX3R5cGVfbWFzayApCg== --=separator Content-Type: application/octet-stream; name="xsa501-4.18.patch" Content-Disposition: attachment; filename="xsa501-4.18.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IGNvcGUgd2l0aCB2ZXJzaW9uIGNoYW5nZXMgcmFjaW5nIG90 aGVyIG9wZXJhdGlvbnMKCkRyb3BwaW5nIGFuZCByZS1hY3F1aXJpbmcgdGhl IGdyYW50IHRhYmxlIGxvY2sgZm9yIGEgcGFydGljdWxhciBvcGVyYXRpb24K cmVxdWlyZXMgc3BlY2lhbCBjYXJlLCBhcyBpbiB0aGUgbWVhbnRpbWUgdGhl IGdyYW50IHRhYmxlIHZlcnNpb24gY2FuCmNoYW5nZS4KCkR1cmluZyBhIHYy IC0+IHYxIGNoYW5nZSwgc3RhdHVzIGZyYW1lcyBnb2luZyBhd2F5IG1lYW5z IHRoYXQgcHJlLQpjYWxjdWxhdGVkIHN0YXR1cyBwb2ludGVycyBnbyBzdGFs ZSwgcmVmZXJlbmNpbmcgZnJlZWQgKGFuZCBwb3NzaWJseQphbHJlYWR5IHJl LXVzZWQpIG1lbW9yeS4gUmVjb3JkIGluLWZsaWdodCB2MiBvcGVyYXRpb25z LCBwZXJtaXR0aW5nIHRoZQp2ZXJzaW9uIGNoYW5nZSBvbmx5IHdoZW4gdGhl cmUgYXJlIG5vbmUgb2YgdGhlbS4gUmVjYWxjdWxhdGUgInN0YXR1cyIgaW4K dGhlIG9uZSBwbGFjZSAobWFwX2dyYW50X3JlZigpJ3MgZXJyb3IgcGF0aCkg d2hlcmUgaXQgY291bGQgYmUgc3RhbGUsIGJ1dApjb25maW5lIHRoaXMgdG8g cmVzZXJ2ZWQgZW50cmllcy4KClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MzYuCgpS ZXBvcnRlZC1ieTogTWFyayBFc2xlciA8bWFya0BoZXhwcm9vZi5kZXY+CgpE dXJpbmcgYSB2MSAtPiB2MiBjaGFuZ2UsIHRoZSBudW1iZXIgb2Ygc2hhcmVk IHRhYmxlIGVudHJpZXMgcmVkdWNlcywKbWVhbmluZyB0aGF0IHByZXZpb3Vz bHkgdmFsaWRhdGVkIGdyYW50IHJlZmVyZW5jZXMgbWF5IG5vdyBiZSBvdXQg b2YKYm91bmRzLiBCZWNhdXNlIG9mIHRoZSBjaGVja2luZyBvZiBwaW4gY291 bnRzIGluIGdudHRhYl9zZXRfdmVyc2lvbigpCih3aXRoIHRoZSBncmFudCB0 YWJsZSBsb2NrIGhlbGQgZm9yIHdyaXRpbmcpLCBmb3Igbm93LW91dC1vZi1i b3VuZHMgZ3JlZi1zCm5laXRoZXIgYWN0aXZlIG1hcHBpbmdzIGNhbiBleGlz dCwgbm9yIGNhbiB0aGVyZSBiZSBpbi1wcm9ncmVzcyBjb3B5Cm9wZXJhdGlv bnMuIE5ldmVydGhlbGVzcyBib3VuZHMgY2hlY2tzIGFyZSBhZGRlZCB0aGVy ZSwganVzdCB0byBiZSBvbiB0aGUKc2FmZSBzaWRlLgoKRm9yIGdudHRhYl90 cmFuc2ZlcigpLCB0byBjb3ZlciB0aGUgZ2FwIGJldHdlZW4gdGhlIGxvY2sg YmVpbmcgZHJvcHBlZCBieQpnbnR0YWJfcHJlcGFyZV9mb3JfdHJhbnNmZXIo KSBhbmQgaXQgYmVpbmcgcmUtYWNxdWlyZWQsIGhhdmUgdGhlIGhlbHBlcgpy ZXR1cm4gdGhlIHZlcnNpb24gaXQgZm91bmQsIGFuZCBmYWlsIHRoZSBvcGVy YXRpb24gaWYgdGhlIHZlcnNpb24gdHVybnMKb3V0IHRvIGhhdmUgY2hhbmdl ZCBhZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpGdXJ0aGVyIGF2b2lk IG5lZWRsZXNzIHVzZSBvZiBzaGFyZWRfZW50cnlfaGVhZGVyKCksIGFzIGl0 IGludm9sdmVzCnBvaW50ZXIgYXJpdGhtZXRpYyB3aGljaCwgd2hlbiB1c2lu ZyBhbiBvdXQtb2YtYm91bmRzIHJlZiwgaXMgVUIuCgpUaGlzIGlzIENWRS0y MDI2LTYyNDM1LgoKRXZlcnl0aGluZyB0b2dldGhlciBpcyBYU0EtNTAxLgoK Rml4ZXM6IGE5OGRjMTM3MDNlMCAoIkludHJvZHVjZSBhIGdyYW50X2VudHJ5 X3YyIHN0cnVjdHVyZSIpClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxq YmV1bGljaEBzdXNlLmNvbT4KVGVzdGVkLWJ5OiBNYXJrIEVzbGVyIDxtYXJr QGhleHByb29mLmRldj4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFu ZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL2dy YW50X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCkBA IC03MSw2ICs3MSwxMCBAQCBzdHJ1Y3QgZ3JhbnRfdGFibGUgewogICAgIHVu c2lnbmVkIGludCAgICAgICAgICBucl9ncmFudF9mcmFtZXM7CiAgICAgLyog TnVtYmVyIG9mIGdyYW50IHN0YXR1cyBmcmFtZXMgc2hhcmVkIHdpdGggZ3Vl c3QgKGZvciB2ZXJzaW9uIDIpICovCiAgICAgdW5zaWduZWQgaW50ICAgICAg ICAgIG5yX3N0YXR1c19mcmFtZXM7CisKKyAgICAvKiBOdW1iZXIgb2YgdmVy c2lvbiAyIG9wZXJhdGlvbnMgaW4gcHJvZ3Jlc3MuICovCisgICAgYXRvbWlj X3QgICAgICAgICAgICAgIG5yX3YyX29wczsKKwogICAgIC8qCiAgICAgICog TnVtYmVyIG9mIGF2YWlsYWJsZSBtYXB0cmFjayBlbnRyaWVzLiAgRm9yIGNs ZWFudXAgcHVycG9zZXMgaXQgaXMKICAgICAgKiBpbXBvcnRhbnQgdG8gcmVh bGl6ZSB0aGF0IHRoaXMgZmllbGQgYW5kIEBtYXB0cmFjayBmdXJ0aGVyIGRv d24gd2lsbApAQCAtOTMzLDYgKzkzNyw5IEBAIHN0YXRpYyB2b2lkIHJlZHVj ZV9zdGF0dXNfZm9yX3BpbihzdHJ1Y3QKIHsKICAgICB1bnNpZ25lZCBpbnQg Y2xlYXJfZmxhZ3MgPSBhY3QtPnBpbiA/IDAgOiBHVEZfcmVhZGluZzsKIAor ICAgIGlmICggdW5saWtlbHkoIXN0YXR1cykgKQorICAgICAgICByZXR1cm47 CisKICAgICBpZiAoICFyZWFkb25seSAmJiAhKGFjdC0+cGluICYgKEdOVFBJ Tl9oc3R3X21hc2sgfCBHTlRQSU5fZGV2d19tYXNrKSkgKQogICAgICAgICBj bGVhcl9mbGFncyB8PSBHVEZfd3JpdGluZzsKIApAQCAtMTM0MSw2ICsxMzQ4 LDIyIEBAIG1hcF9ncmFudF9yZWYoCiAKICAgICBncmFudF9yZWFkX2xvY2so cmd0KTsKIAorICAgIGlmICggdW5saWtlbHkoZXZhbHVhdGVfbm9zcGVjKChy Z3QtPmd0X3ZlcnNpb24gPT0gMSkgIT0KKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAoc3RhdHVzID09ICZzaGFoLT5mbGFncykpKSApCisg ICAgeworICAgICAgICAvKgorICAgICAgICAgKiBBZnRlciBhIHYxIC0+IHYy IGNoYW5nZSBiZWhpbmQgb3VyIGJhY2tzICJyZWYiIG1heSBub3cgYmUgb3V0 IG9mCisgICAgICAgICAqIGJvdW5kcy4gIFJlY2FsY3VsYXRlIGl0LCBidXQg b25seSBmb3IgcmVzZXJ2ZWQgZW50cmllcy4gIE90aGVycworICAgICAgICAg KiB3aWxsIGhhdmUgYmVlbiBjbGVhcmVkIGFueXdheSBieSB0aGUgdmVyc2lv biBjaGFuZ2UuCisgICAgICAgICAqLworICAgICAgICBpZiAoIHJlZiA8IEdO VFRBQl9OUl9SRVNFUlZFRF9FTlRSSUVTICkKKyAgICAgICAgICAgIHN0YXR1 cyA9IGV2YWx1YXRlX25vc3BlYyhyZ3QtPmd0X3ZlcnNpb24gPT0gMSkKKyAg ICAgICAgICAgICAgICAgICAgID8gJnNoYWgtPmZsYWdzCisgICAgICAgICAg ICAgICAgICAgICA6ICZzdGF0dXNfZW50cnkocmd0LCByZWYpOworICAgICAg ICBlbHNlCisgICAgICAgICAgICBzdGF0dXMgPSBOVUxMOworICAgIH0KKwog ICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgb3AtPnJlZik7 CiAgICAgYWN0LT5waW4gLT0gcGluX2luY3I7CiAKQEAgLTE1ODQsOSArMTYw Nyw4IEBAIHVubWFwX2NvbW1vbl9jb21wbGV0ZShzdHJ1Y3QgZ250dGFiX3Vu bWEKICAgICBzdHJ1Y3QgZG9tYWluICpsZCwgKnJkID0gb3AtPnJkOwogICAg IHN0cnVjdCBncmFudF90YWJsZSAqcmd0OwogICAgIHN0cnVjdCBhY3RpdmVf Z3JhbnRfZW50cnkgKmFjdDsKLSAgICBncmFudF9lbnRyeV9oZWFkZXJfdCAq c2hhOwogICAgIHN0cnVjdCBwYWdlX2luZm8gKnBnOwotICAgIHVpbnQxNl90 ICpzdGF0dXM7CisgICAgdWludDE2X3QgKnN0YXR1cyA9IE5VTEw7CiAKICAg ICBpZiAoIGV2YWx1YXRlX25vc3BlYyghb3AtPmRvbmUpICkKICAgICB7CkBA IC0xNjAyLDExICsxNjI0LDEwIEBAIHVubWFwX2NvbW1vbl9jb21wbGV0ZShz dHJ1Y3QgZ250dGFiX3VubWEKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsK IAogICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgb3AtPnJl Zik7Ci0gICAgc2hhID0gc2hhcmVkX2VudHJ5X2hlYWRlcihyZ3QsIG9wLT5y ZWYpOwogCiAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMocmd0LT5ndF92ZXJz aW9uID09IDEpICkKLSAgICAgICAgc3RhdHVzID0gJnNoYS0+ZmxhZ3M7Ci0g ICAgZWxzZQorICAgICAgICBzdGF0dXMgPSAmc2hhcmVkX2VudHJ5X3YxKHJn dCwgb3AtPnJlZikuZmxhZ3M7CisgICAgZWxzZSBpZiAoIGV2YWx1YXRlX25v c3BlYyhvcC0+cmVmIDwgbnJfZ3JhbnRfZW50cmllcyhyZ3QpKSApCiAgICAg ICAgIHN0YXR1cyA9ICZzdGF0dXNfZW50cnkocmd0LCBvcC0+cmVmKTsKIAog ICAgIHBnID0gIWlzX2lvbWVtX3BhZ2UoYWN0LT5tZm4pID8gbWZuX3RvX3Bh Z2Uob3AtPm1mbikgOiBOVUxMOwpAQCAtMjE5NCwxNCArMjIxNSwxNCBAQCBn bnR0YWJfcXVlcnlfc2l6ZSgKICAqIENoZWNrIHRoYXQgdGhlIGdpdmVuIGdy YW50IHJlZmVyZW5jZSAocmQscmVmKSBhbGxvd3MgJ2xkJyB0byB0cmFuc2Zl cgogICogb3duZXJzaGlwIG9mIGEgcGFnZSBmcmFtZS4gSWYgc28sIGxvY2sg ZG93biB0aGUgZ3JhbnQgZW50cnkuCiAgKi8KLXN0YXRpYyBpbnQKK3N0YXRp YyB1bnNpZ25lZCBpbnQKIGdudHRhYl9wcmVwYXJlX2Zvcl90cmFuc2ZlcigK ICAgICBzdHJ1Y3QgZG9tYWluICpyZCwgc3RydWN0IGRvbWFpbiAqbGQsIGdy YW50X3JlZl90IHJlZikKIHsKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKnJn dCA9IHJkLT5ncmFudF90YWJsZTsKICAgICB1aW50MzJfdCAqcmF3X3NoYWg7 CiAgICAgdW5pb24gZ3JhbnRfY29tYm8gc2NvbWJvOwotICAgIGludCAgICAg ICAgICAgICAgICAgcmV0cmllcyA9IDA7CisgICAgdW5zaWduZWQgaW50IHJl dHJpZXMgPSAwLCB2ZXI7CiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsK IApAQCAtMjI0Niw4ICsyMjY3LDExIEBAIGdudHRhYl9wcmVwYXJlX2Zvcl90 cmFuc2ZlcigKICAgICAgICAgc2NvbWJvID0gcHJldjsKICAgICB9CiAKKyAg ICB2ZXIgPSByZ3QtPmd0X3ZlcnNpb247CisKICAgICBncmFudF9yZWFkX3Vu bG9jayhyZ3QpOwotICAgIHJldHVybiAxOworCisgICAgcmV0dXJuIHZlcjsK IAogIGZhaWw6CiAgICAgZ3JhbnRfcmVhZF91bmxvY2socmd0KTsKQEAgLTIy NzIsNyArMjI5Niw3IEBAIGdudHRhYl90cmFuc2ZlcigKIAogICAgIGZvciAo IGkgPSAwOyBpIDwgY291bnQ7IGkrKyApCiAgICAgewotICAgICAgICBib29s X3Qgb2theTsKKyAgICAgICAgdW5zaWduZWQgaW50IHZlcjsKICAgICAgICAg aW50IHJjOwogCiAgICAgICAgIGlmICggaSAmJiBoeXBlcmNhbGxfcHJlZW1w dF9jaGVjaygpICkKQEAgLTI0MTIsMTQgKzI0MzYsMTQgQEAgZ250dGFiX3Ry YW5zZmVyKAogICAgICAgICAgKiBwYWdlbGlzdC4KICAgICAgICAgICovCiAg ICAgICAgIHNwaW5fdW5sb2NrKCZlLT5wYWdlX2FsbG9jX2xvY2spOwotICAg ICAgICBva2F5ID0gZ250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyKGUsIGQs IGdvcC5yZWYpOworICAgICAgICB2ZXIgPSBnbnR0YWJfcHJlcGFyZV9mb3Jf dHJhbnNmZXIoZSwgZCwgZ29wLnJlZik7CiAKICAgICAgICAgLyoKICAgICAg ICAgICogTWFrZSBzdXJlIHRoZSByZWZlcmVuY2UgYm91bmQgY2hlY2sgaW4g Z250dGFiX3ByZXBhcmVfZm9yX3RyYW5zZmVyCiAgICAgICAgICAqIGlzIHJl c3BlY3RlZCBhbmQgc3BlY3VsYXRpdmUgZXhlY3V0aW9uIGlzIGJsb2NrZWQg YWNjb3JkaW5nbHkKICAgICAgICAgICovCi0gICAgICAgIGlmICggdW5saWtl bHkoIWV2YWx1YXRlX25vc3BlYyhva2F5KSkgfHwKLSAgICAgICAgICAgIHVu bGlrZWx5KGFzc2lnbl9wYWdlcyhwYWdlLCAxLCBlLCBNRU1GX25vX3JlZmNv dW50KSkgKQorICAgICAgICBpZiAoIHVubGlrZWx5KCFldmFsdWF0ZV9ub3Nw ZWModmVyKSkgfHwKKyAgICAgICAgICAgICB1bmxpa2VseShhc3NpZ25fcGFn ZXMocGFnZSwgMSwgZSwgTUVNRl9ub19yZWZjb3VudCkpICkKICAgICAgICAg ewogICAgICAgICAgICAgYm9vbCBkcm9wX2RvbV9yZWY7CiAKQEAgLTI0MzEs NyArMjQ1NSw3IEBAIGdudHRhYl90cmFuc2ZlcigKICAgICAgICAgICAgIGRy b3BfZG9tX3JlZiA9ICFkb21haW5fYWRqdXN0X3RvdF9wYWdlcyhlLCAtMSk7 CiAgICAgICAgICAgICBzcGluX3VubG9jaygmZS0+cGFnZV9hbGxvY19sb2Nr KTsKIAotICAgICAgICAgICAgaWYgKCBva2F5IC8qIGkuZS4gZS0+aXNfZHlp bmcgZHVlIHRvIHRoZSBzdXJyb3VuZGluZyBpZigpICovICkKKyAgICAgICAg ICAgIGlmICggdmVyIC8qIGkuZS4gZS0+aXNfZHlpbmcgZHVlIHRvIHRoZSBz dXJyb3VuZGluZyBpZigpICovICkKICAgICAgICAgICAgICAgICBnZHByaW50 ayhYRU5MT0dfSU5GTywgIlRyYW5zZmVyZWUgZCVkIGlzIG5vdyBkeWluZ1xu IiwKICAgICAgICAgICAgICAgICAgICAgICAgICBlLT5kb21haW5faWQpOwog CkBAIC0yNDUxLDcgKzI0NzUsMTMgQEAgZ250dGFiX3RyYW5zZmVyKAogICAg ICAgICBncmFudF9yZWFkX2xvY2soZS0+Z3JhbnRfdGFibGUpOwogICAgICAg ICBhY3QgPSBhY3RpdmVfZW50cnlfYWNxdWlyZShlLT5ncmFudF90YWJsZSwg Z29wLnJlZik7CiAKLSAgICAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMoZS0+ Z3JhbnRfdGFibGUtPmd0X3ZlcnNpb24gPT0gMSkgKQorICAgICAgICBpZiAo IHVubGlrZWx5KGV2YWx1YXRlX25vc3BlYyhlLT5ncmFudF90YWJsZS0+Z3Rf dmVyc2lvbiAhPSB2ZXIpKSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHJj ID0gLUVJTFNFUTsKKyAgICAgICAgICAgIGdvdG8gcmVsZWFzZTsKKyAgICAg ICAgfQorCisgICAgICAgIGlmICggZXZhbHVhdGVfbm9zcGVjKHZlciA9PSAx KSApCiAgICAgICAgIHsKICAgICAgICAgICAgIGdyYW50X2VudHJ5X3YxX3Qg KnNoYSA9ICZzaGFyZWRfZW50cnlfdjEoZS0+Z3JhbnRfdGFibGUsIGdvcC5y ZWYpOwogCkBAIC0yNDcxLDYgKzI1MDEsNyBAQCBnbnR0YWJfdHJhbnNmZXIo CiAgICAgICAgIHNoYXJlZF9lbnRyeV9oZWFkZXIoZS0+Z3JhbnRfdGFibGUs IGdvcC5yZWYpLT5mbGFncyB8PQogICAgICAgICAgICAgR1RGX3RyYW5zZmVy X2NvbXBsZXRlZDsKIAorICAgIHJlbGVhc2U6CiAgICAgICAgIGFjdGl2ZV9l bnRyeV9yZWxlYXNlKGFjdCk7CiAgICAgICAgIGdyYW50X3JlYWRfdW5sb2Nr KGUtPmdyYW50X3RhYmxlKTsKIApAQCAtMjQ5OSwyOCArMjUzMCwyNyBAQCBy ZWxlYXNlX2dyYW50X2Zvcl9jb3B5KAogICAgIHN0cnVjdCBkb21haW4gKnJk LCBncmFudF9yZWZfdCBncmVmLCBib29sIHJlYWRvbmx5KQogewogICAgIHN0 cnVjdCBncmFudF90YWJsZSAqcmd0ID0gcmQtPmdyYW50X3RhYmxlOwotICAg IGdyYW50X2VudHJ5X2hlYWRlcl90ICpzaGE7CiAgICAgc3RydWN0IGFjdGl2 ZV9ncmFudF9lbnRyeSAqYWN0OwogICAgIG1mbl90IG1mbjsKLSAgICB1aW50 MTZfdCAqc3RhdHVzOworICAgIHVpbnQxNl90ICpzdGF0dXMgPSBOVUxMOwog ICAgIGdyYW50X3JlZl90IHRyYW5zX2dyZWY7CiAgICAgc3RydWN0IGRvbWFp biAqdGQ7CiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsKIAogICAgIGFj dCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgZ3JlZik7Ci0gICAgc2hh ID0gc2hhcmVkX2VudHJ5X2hlYWRlcihyZ3QsIGdyZWYpOwogICAgIG1mbiA9 IGFjdC0+bWZuOwogCiAgICAgaWYgKCBldmFsdWF0ZV9ub3NwZWMocmd0LT5n dF92ZXJzaW9uID09IDEpICkKICAgICB7Ci0gICAgICAgIHN0YXR1cyA9ICZz aGEtPmZsYWdzOworICAgICAgICBzdGF0dXMgPSAmc2hhcmVkX2VudHJ5X3Yx KHJndCwgZ3JlZikuZmxhZ3M7CiAgICAgICAgIHRkID0gcmQ7CiAgICAgICAg IHRyYW5zX2dyZWYgPSBncmVmOwogICAgIH0KICAgICBlbHNlCiAgICAgewot ICAgICAgICBzdGF0dXMgPSAmc3RhdHVzX2VudHJ5KHJndCwgZ3JlZik7Cisg ICAgICAgIGlmICggZXZhbHVhdGVfbm9zcGVjKGdyZWYgPCBucl9ncmFudF9l bnRyaWVzKHJndCkpICkKKyAgICAgICAgICAgIHN0YXR1cyA9ICZzdGF0dXNf ZW50cnkocmd0LCBncmVmKTsKICAgICAgICAgdGQgPSAoYWN0LT5zcmNfZG9t aWQgPT0gcmQtPmRvbWFpbl9pZCkKICAgICAgICAgICAgICA/IHJkIDoga25v d25hbGl2ZV9kb21haW5fZnJvbV9kb21pZChhY3QtPnNyY19kb21pZCk7CiAg ICAgICAgIHRyYW5zX2dyZWYgPSBhY3QtPnRyYW5zX2dyZWY7CkBAIC0yNTM5 LDYgKzI1NjksOSBAQCByZWxlYXNlX2dyYW50X2Zvcl9jb3B5KAogCiAgICAg cmVkdWNlX3N0YXR1c19mb3JfcGluKHJkLCBhY3QsIHN0YXR1cywgcmVhZG9u bHkpOwogCisgICAgaWYgKCAhYWN0LT5waW4gJiYgYWN0LT5pc19zdWJfcGFn ZSApCisgICAgICAgIGF0b21pY19kZWMoJnJndC0+bnJfdjJfb3BzKTsKKwog ICAgIGFjdGl2ZV9lbnRyeV9yZWxlYXNlKGFjdCk7CiAgICAgZ3JhbnRfcmVh ZF91bmxvY2socmd0KTsKIApAQCAtMjY3MCw4ICsyNzAzLDEwIEBAIGFjcXVp cmVfZ3JhbnRfZm9yX2NvcHkoCiAKICAgICAgICAgLyoKICAgICAgICAgICog YWNxdWlyZV9ncmFudF9mb3JfY29weSgpIHdpbGwgdGFrZSB0aGUgbG9jayBv biB0aGUgcmVtb3RlIHRhYmxlLAotICAgICAgICAgKiBzbyB3ZSBoYXZlIHRv IGRyb3AgdGhlIGxvY2sgaGVyZSBhbmQgcmVhY3F1aXJlLgorICAgICAgICAg KiBzbyB3ZSBoYXZlIHRvIGRyb3AgdGhlIGxvY2sgaGVyZSBhbmQgcmVhY3F1 aXJlLiAgQmVmb3JlIGRvaW5nIHNvLAorICAgICAgICAgKiByZWNvcmQgdGhh dCBhIHYyIG9wZXJhdGlvbiBpcyBpbiBwcm9ncmVzcy4KICAgICAgICAgICov CisgICAgICAgIGF0b21pY19pbmMoJnJndC0+bnJfdjJfb3BzKTsKICAgICAg ICAgYWN0aXZlX2VudHJ5X3JlbGVhc2UoYWN0KTsKICAgICAgICAgZ3JhbnRf cmVhZF91bmxvY2socmd0KTsKIApAQCAtMjY4NSw2ICsyNzIwLDcgQEAgYWNx dWlyZV9ncmFudF9mb3JfY29weSgKIAogICAgICAgICBpZiAoIHJjICE9IEdO VFNUX29rYXkgKQogICAgICAgICB7CisgICAgICAgICAgICBhdG9taWNfZGVj KCZyZ3QtPm5yX3YyX29wcyk7CiAgICAgICAgICAgICByY3VfdW5sb2NrX2Rv bWFpbih0ZCk7CiAgICAgICAgICAgICByZWR1Y2Vfc3RhdHVzX2Zvcl9waW4o cmQsIGFjdCwgc3RhdHVzLCByZWFkb25seSk7CiAgICAgICAgICAgICBhY3Rp dmVfZW50cnlfcmVsZWFzZShhY3QpOwpAQCAtMjcyMSw2ICsyNzU3LDggQEAg YWNxdWlyZV9ncmFudF9mb3JfY29weSgKICAgICAgICAgICAgIHJjdV91bmxv Y2tfZG9tYWluKHRkKTsKIAogICAgICAgICAgICAgZ3JhbnRfcmVhZF9sb2Nr KHJndCk7CisgICAgICAgICAgICBhdG9taWNfZGVjKCZyZ3QtPm5yX3YyX29w cyk7CisKICAgICAgICAgICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJl KHJndCwgZ3JlZik7CiAgICAgICAgICAgICByZWR1Y2Vfc3RhdHVzX2Zvcl9w aW4ocmQsIGFjdCwgc3RhdHVzLCByZWFkb25seSk7CiAgICAgICAgICAgICBh Y3RpdmVfZW50cnlfcmVsZWFzZShhY3QpOwpAQCAtMjc0Nyw2ICsyNzg1LDgg QEAgYWNxdWlyZV9ncmFudF9mb3JfY29weSgKICAgICAgICAgICAgICAqLwog ICAgICAgICAgICAgYWN0LT5pc19zdWJfcGFnZSA9IHRydWU7CiAgICAgICAg IH0KKyAgICAgICAgZWxzZQorICAgICAgICAgICAgYXRvbWljX2RlYygmcmd0 LT5ucl92Ml9vcHMpOwogICAgIH0KICAgICBlbHNlIGlmICggIW9sZF9waW4g fHwKICAgICAgICAgICAgICAgKCFyZWFkb25seSAmJiAhKG9sZF9waW4gJiAo R05UUElOX2RldndfbWFza3xHTlRQSU5faHN0d19tYXNrKSkpICkKQEAgLTI4 MDEsNiArMjg0MSw5IEBAIGFjcXVpcmVfZ3JhbnRfZm9yX2NvcHkoCiAgICAg ICAgICAgICBhY3QtPnNyY19kb21pZCA9IHRkLT5kb21haW5faWQ7CiAgICAg ICAgICAgICBhY3QtPnRyYW5zX2dyZWYgPSB0cmFuc19ncmVmOwogICAgICAg ICAgICAgYWN0LT5tZm4gPSBncmFudF9tZm47CisKKyAgICAgICAgICAgIGlm ICggaXNfc3ViX3BhZ2UgKQorICAgICAgICAgICAgICAgIGF0b21pY19pbmMo JnJndC0+bnJfdjJfb3BzKTsKICAgICAgICAgfQogICAgICAgICBlbHNlIGlm ICggIW1mbl9lcShhY3QtPm1mbiwgZ3JhbnRfbWZuKSB8fAogICAgICAgICAg ICAgICAgICAgYWN0LT5zcmNfZG9taWQgIT0gdGQtPmRvbWFpbl9pZCB8fApA QCAtMzIyNiw3ICszMjY5LDE3IEBAIGdudHRhYl9zZXRfdmVyc2lvbihYRU5f R1VFU1RfSEFORExFX1BBUkEKICAgICAgICAgaWYgKCByZXMgPCAwKQogICAg ICAgICAgICAgZ290byBvdXRfdW5sb2NrOwogICAgICAgICBicmVhazsKKwog ICAgIGNhc2UgMjoKKyAgICAgICAgaWYgKCBhdG9taWNfcmVhZCgmZ3QtPm5y X3YyX29wcykgKQorICAgICAgICB7CisgICAgICAgICAgICBnZHByaW50ayhY RU5MT0dfV0FSTklORywKKyAgICAgICAgICAgICAgICAgICAgICJ0cmllZCB0 byBjaGFuZ2UgdG8gZ3JhbnQgdGFibGUgdjEsIGJ1dCAlZCB2MiBvcGVyYXRp b25zIHN0aWxsIGluIHByb2dyZXNzXG4iLAorICAgICAgICAgICAgICAgICAg ICAgYXRvbWljX3JlYWQoJmd0LT5ucl92Ml9vcHMpKTsKKyAgICAgICAgICAg IHJlcyA9IC1FQUdBSU47CisgICAgICAgICAgICBnb3RvIG91dF91bmxvY2s7 CisgICAgICAgIH0KKwogICAgICAgICBmb3IgKCBpID0gMDsgaSA8IEdOVFRB Ql9OUl9SRVNFUlZFRF9FTlRSSUVTOyBpKysgKQogICAgICAgICB7CiAgICAg ICAgICAgICBzd2l0Y2ggKCBzaGFyZWRfZW50cnlfdjIoZ3QsIGkpLmhkci5m bGFncyAmIEdURl90eXBlX21hc2sgKQo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372518.1620031 (Exim 4.92) (envelope-from ) id 1wogZ7-0006Xv-FI; Tue, 28 Jul 2026 12:05:45 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372518.1620031; Tue, 28 Jul 2026 12:05:44 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogZ5-0006Nx-PB; Tue, 28 Jul 2026 12:05:43 +0000 Received: by outflank-mailman (input) for mailman id 1372518; Tue, 28 Jul 2026 12:05:24 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYh-0002Mk-8e; Tue, 28 Jul 2026 12:05:19 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYg-004Och-HD; Tue, 28 Jul 2026 14:05:18 +0200 Received: from [10.42.69.1] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689af8-bab6-0a2a0a5309dd-0a2a4501e800-14 for ; Tue, 28 Jul 2026 14:05:18 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-d62444.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689afd-5984-0a2a45010019-6882d725ebc2-3 for ; Tue, 28 Jul 2026 14:05:18 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYb-00DPCC-2J; Tue, 28 Jul 2026 12:05:13 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYb-003Dnj-1I; Tue, 28 Jul 2026 12:05:13 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 502 v3 (CVE-2026-62429) - vNUMA domain cleanup may race other operations Message-Id: Date: Tue, 28 Jul 2026 12:05:13 +0000 X-purgate-ID: tlsNG-d62444/1785240318-BDA7E757-0BADA150/0/0 X-purgate-type: clean X-purgate-size: 20992 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62429 / XSA-502 version 3 vNUMA domain cleanup may race other operations UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest. IMPACT ====== While Denial of Service (DoS) affecting the entire host and information leaks and are the prevailing effect, a device model stub domain or a de-privileged device model running in the control domain may also be able to elevate its privileges to that of the host. VULNERABLE SYSTEMS ================== All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable. Only entities controlling guests (on x86: HVM guests) can leverage the vulnerability. These are device models running in either a stub domain or de-privileged in Dom0. Only guests which have vNUMA enabled allow their controlling entities to leverage the vulnerability. MITIGATION ========== On x86, running only PV or PVH guests will avoid the vulnerability. Not enabling vNUMA for HVM guests will also avoid the vulnerability. CREDITS ======= This issue was discovered by Teddy Astie of Vates. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa502.patch xen-unstable - Xen 4.22.0 xsa502-4.21.patch Xen 4.21.x - Xen 4.19.x xsa502-4.18.patch Xen 4.18.x - Xen 4.17.x $ sha256sum xsa502* e6150a6c468906a1bbcd4b9fca1f28cf3dc2c4617d6aab7c48507dbac003df82 xsa502.patch f780c280539aedb3eeb4f5a43f3d2f4bc5a112ca1a2d7ad6a95eb2fbdc5f5cc8 xsa502-4.18.patch a0b2b6f543a566e997a9f38bbd718cc81e8de8e7b442ff47e92260f70e66f647 xsa502-4.21.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public- facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because no longer exposing vNUMA is a guest visible configuration change, which may lead to re-discovery of the issue. Deployment of this mitigation is permitted only AFTER the embargo ends. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrQMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ58sH/2CogHDnmyLVcaB68ySxCnCZI5qNt0VonyH4n3s0 Ef4H74nwh3osLXrvkcnXvbrH4hqDKI3MtydScfHc5dpa1rQHXO8utHxZtGUU+CSv A1nSYD42pu96V5xvTXO+xK5sCZoBREgUNS2TGCE02dkwXdngsCWnAPFn1BQi7wsG LJWuzurlSRSc28PPuIEaKJM+eiyG88ep5fADrLycVPvltqd6bktEE1Xa82h5iSYd 9K7KTEDT9Kc0HZEg4x0h2OBwVqGdKF+8FHDNCEtpiwtE2Ao6OycTVzGNX7f+fq4/ CeQjI8I94j/r1zVPtuGBHNVkUdgrCIe36156RC7f1LFy0JM= =7hf1 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa502.patch" Content-Disposition: attachment; filename="xsa502.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB2TlVNQTogY2xvc2UgcmFjZSB3aW5kb3cgaW4gZG9tYWluIGNsZWFudXAK CkNhbGxpbmcgdm51bWFfZGVzdHJveSgpIHdpdGhvdXQgYW55IGxvY2tpbmcg Y2FuIHJhY2UgdGhlIGhhbmRsaW5nIG9mIGJvdGgKWEVOTUVNX2dldF92bnVt YWluZm8gYW5kIFhFTl9ET01DVExfc2V0dm51bWFpbmZvLiBXaGlsZSB0aGUg bGF0dGVyIGlzLAp3aXRob3V0IEZsYXNrLCBzdHJpY3RseSBvbmx5IGV4cG9z ZWQgdG8gdGhlIGNvbnRyb2wgZG9tYWluLCB0aGUgZm9ybWVyCmNhbiBhbHNv IGJlIGludm9rZWQgYnkgYSBzdHViZG9tIERNIG9yIGEgZGUtcHJpdmlsZWdl ZCBETSBydW5uaW5nIGluIHRoZQpjb250cm9sIGRvbWFpbi4gSXNvbGF0ZSB0 aGUgbG9naWMgdXNlZCBieSBYRU5fRE9NQ1RMX3NldHZudW1haW5mbyBpbnRv IGEKbmV3IGhlbHBlciBmdW5jdGlvbiwgd2hpY2ggdGhlbiBpcyBhbHNvIHVz ZWQgZnJvbSBkb21haW5fa2lsbCgpLiBXaGlsZQpkb2luZyBzbyBhbHNvIG1v dmUgdGhlIHZudW1hX2Rlc3Ryb3koKSBpbnZvY2F0aW9uIG91dCBvZiB0aGUg bG9ja2VkCnJlZ2lvbi4KCldpdGggZC0+dm51bWEgcHJvcGVybHkgY2xlYXJl ZCBieSBkb21haW5fa2lsbCgpLCBYRU5NRU1fZ2V0X3ZudW1haW5mbyBub3cK cmVhbGx5IG9ubHkgbmVlZHMgdG8gY2hlY2sgZm9yIHRoZSBmaWVsZCBiZWlu ZyBOVUxMLiBUaGF0IGNoZWNrIG5lZWRzCnJlcGVhdGluZywgdGhvdWdoLCBh ZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpUaGlzIGlzIENWRS0yMDI2 LTYyNDI5IC8gWFNBLTUwMi4KCkZpeGVzOiA5Njk1MDE0OTY2YjUgKCJ4ZW46 IHZudW1hIHRvcG9sb2d5IGFuZCBzdWJvcCBoeXBlcmNhbGxzIikKUmVwb3J0 ZWQtYnk6IFRlZGR5IEFzdGllIDx0ZWRkeS5hc3RpZUB2YXRlcy50ZWNoPgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NAc3VzZS5jb20+ CgotLS0gYS94ZW4vY29tbW9uL2RvbWFpbi5jCisrKyBiL3hlbi9jb21tb24v ZG9tYWluLmMKQEAgLTEzMjAsNyArMTMyMCw3IEBAIGludCBkb21haW5fa2ls bChzdHJ1Y3QgZG9tYWluICpkKQogICAgICAgICBkLT5pc19keWluZyA9IERP TURZSU5HX2R5aW5nOwogICAgICAgICByc3Bpbl9iYXJyaWVyKCZkLT5kb21h aW5fbG9jayk7CiAgICAgICAgIGFyZ29fZGVzdHJveShkKTsKLSAgICAgICAg dm51bWFfZGVzdHJveShkLT52bnVtYSk7CisgICAgICAgIHZudW1hX3JlcGxh Y2UoZCwgTlVMTCk7CiAgICAgICAgIGRvbWFpbl9zZXRfb3V0c3RhbmRpbmdf cGFnZXMoZCwgMCk7CiAgICAgICAgIC8qIGZhbGx0aHJvdWdoICovCiAgICAg Y2FzZSBET01EWUlOR19keWluZzoKLS0tIGEveGVuL2NvbW1vbi9kb21jdGwu YworKysgYi94ZW4vY29tbW9uL2RvbWN0bC5jCkBAIC0xNDAsNyArMTQwLDcg QEAgdm9pZCBkb21jdGxfbG9ja19yZWxlYXNlKHZvaWQpCiAgICAgc3Bpbl91 bmxvY2soJmN1cnJlbnQtPmRvbWFpbi0+aHlwZXJjYWxsX2RlYWRsb2NrX211 dGV4KTsKIH0KIAotdm9pZCB2bnVtYV9kZXN0cm95KHN0cnVjdCB2bnVtYV9p bmZvICp2bnVtYSkKK3N0YXRpYyB2b2lkIHZudW1hX2Rlc3Ryb3koc3RydWN0 IHZudW1hX2luZm8gKnZudW1hKQogewogICAgIGlmICggdm51bWEgKQogICAg IHsKQEAgLTE1Miw2ICsxNTIsMTkgQEAgdm9pZCB2bnVtYV9kZXN0cm95KHN0 cnVjdCB2bnVtYV9pbmZvICp2bgogICAgIH0KIH0KIAorLyogT3ZlcndyaXRl IChyZXBsYWNlKSB2bnVtYSB0b3BvbG9neSBmb3IgYSBkb21haW4uICovCit2 b2lkIHZudW1hX3JlcGxhY2Uoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHZu dW1hX2luZm8gKnZudW1hKQoreworICAgIHN0cnVjdCB2bnVtYV9pbmZvICpv bGQ7CisKKyAgICB3cml0ZV9sb2NrKCZkLT52bnVtYV9yd2xvY2spOworICAg IG9sZCA9IGQtPnZudW1hOworICAgIGQtPnZudW1hID0gdm51bWE7CisgICAg d3JpdGVfdW5sb2NrKCZkLT52bnVtYV9yd2xvY2spOworCisgICAgdm51bWFf ZGVzdHJveShvbGQpOworfQorCiAvKgogICogQWxsb2NhdGVzIG1lbW9yeSBm b3Igdk5VTUEsICoqdm51bWEgc2hvdWxkIGJlIE5VTEwuCiAgKiBDYWxsZXIg aGFzIHRvIG1ha2Ugc3VyZSB0aGF0IGRvbWFpbiBoYXMgbWF4X3BhZ2VzCkBA IC04OTUsMTIgKzkwOCw3IEBAIGxvbmcgZG9fZG9tY3RsKFhFTl9HVUVTVF9I QU5ETEVfUEFSQU0oeGUKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9 CiAKLSAgICAgICAgLyogb3ZlcndyaXRlIHZudW1hIHRvcG9sb2d5IGZvciBk b21haW4uICovCi0gICAgICAgIHdyaXRlX2xvY2soJmQtPnZudW1hX3J3bG9j ayk7Ci0gICAgICAgIHZudW1hX2Rlc3Ryb3koZC0+dm51bWEpOwotICAgICAg ICBkLT52bnVtYSA9IHZudW1hOwotICAgICAgICB3cml0ZV91bmxvY2soJmQt PnZudW1hX3J3bG9jayk7Ci0KKyAgICAgICAgdm51bWFfcmVwbGFjZShkLCB2 bnVtYSk7CiAgICAgICAgIGJyZWFrOwogICAgIH0KIAotLS0gYS94ZW4vY29t bW9uL21lbW9yeS5jCisrKyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTE5 MjIsMTIgKzE5MjIsMjQgQEAgbG9uZyBkb19tZW1vcnlfb3AodW5zaWduZWQg bG9uZyBjbWQsIFhFTgogICAgICAgICAgICAgZ290byB2bnVtYWluZm9fb3V0 OwogICAgICAgICB9CiAKKyAgICAgICAgcmVhZF9sb2NrKCZkLT52bnVtYV9y d2xvY2spOworCisgICAgICAgIC8qCisgICAgICAgICAqIENoZWNrIGQtPnZu dW1hIGFnYWluIGFmdGVyIHJlLWFjcXVpcmluZyB0aGUgbG9jayBhcyB3ZSBj YW4gcmFjZQorICAgICAgICAgKiB3aXRoIGRvbWFpbiBkZXN0cnVjdGlvbi4K KyAgICAgICAgICovCisgICAgICAgIGlmICggIWQtPnZudW1hICkKKyAgICAg ICAgeworICAgICAgICAgICAgQVNTRVJUKGQtPmlzX2R5aW5nKTsKKyAgICAg ICAgICAgIHJlYWRfdW5sb2NrKCZkLT52bnVtYV9yd2xvY2spOworICAgICAg ICAgICAgcmMgPSAtRVNSQ0g7CisgICAgICAgICAgICBnb3RvIHZudW1haW5m b19vdXQ7CisgICAgICAgIH0KKwogICAgICAgICAvKgogICAgICAgICAgKiBD aGVjayBpZiB2bnVtYSBpbmZvIGhhcyBjaGFuZ2VkIGFuZCBpZiB0aGUgYWxs b2NhdGVkIGFycmF5cwogICAgICAgICAgKiBhcmUgbm90IGJpZyBlbm91Z2gu CiAgICAgICAgICAqLwotICAgICAgICByZWFkX2xvY2soJmQtPnZudW1hX3J3 bG9jayk7Ci0KICAgICAgICAgaWYgKCBkb21fdm5vZGVzIDwgZC0+dm51bWEt Pm5yX3Zub2RlcyB8fAogICAgICAgICAgICAgIGRvbV92cmFuZ2VzIDwgZC0+ dm51bWEtPm5yX3ZtZW1yYW5nZXMgfHwKICAgICAgICAgICAgICBkb21fdmNw dXMgPCBkLT5tYXhfdmNwdXMgKQotLS0gYS94ZW4vaW5jbHVkZS94ZW4vZG9t YWluLmgKKysrIGIveGVuL2luY2x1ZGUveGVuL2RvbWFpbi5oCkBAIC0xOTMs OSArMTkzLDEwIEBAIHN0cnVjdCB2bnVtYV9pbmZvIHsKIH07CiAKICNpZm5k ZWYgQ09ORklHX1BWX1NISU1fRVhDTFVTSVZFCi12b2lkIHZudW1hX2Rlc3Ry b3koc3RydWN0IHZudW1hX2luZm8gKnZudW1hKTsKK3ZvaWQgdm51bWFfcmVw bGFjZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qgdm51bWFfaW5mbyAqdm51 bWEpOwogI2Vsc2UKLXN0YXRpYyBpbmxpbmUgdm9pZCB2bnVtYV9kZXN0cm95 KHN0cnVjdCB2bnVtYV9pbmZvICp2bnVtYSkgeyBBU1NFUlQoIXZudW1hKTsg fQorc3RhdGljIGlubGluZSB2b2lkIHZudW1hX3JlcGxhY2Uoc3RydWN0IGRv bWFpbiAqZCwgc3RydWN0IHZudW1hX2luZm8gKnZudW1hKQoreyBBU1NFUlQo IXZudW1hKTsgfQogI2VuZGlmCiAKICNpZmRlZiBDT05GSUdfVk1UUkFDRQo= --=separator Content-Type: application/octet-stream; name="xsa502-4.18.patch" Content-Disposition: attachment; filename="xsa502-4.18.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB2TlVNQTogY2xvc2UgcmFjZSB3aW5kb3cgaW4gZG9tYWluIGNsZWFudXAK CkNhbGxpbmcgdm51bWFfZGVzdHJveSgpIHdpdGhvdXQgYW55IGxvY2tpbmcg Y2FuIHJhY2UgdGhlIGhhbmRsaW5nIG9mIGJvdGgKWEVOTUVNX2dldF92bnVt YWluZm8gYW5kIFhFTl9ET01DVExfc2V0dm51bWFpbmZvLiBXaGlsZSB0aGUg bGF0dGVyIGlzLAp3aXRob3V0IEZsYXNrLCBzdHJpY3RseSBvbmx5IGV4cG9z ZWQgdG8gdGhlIGNvbnRyb2wgZG9tYWluLCB0aGUgZm9ybWVyCmNhbiBhbHNv IGJlIGludm9rZWQgYnkgYSBzdHViZG9tIERNIG9yIGEgZGUtcHJpdmlsZWdl ZCBETSBydW5uaW5nIGluIHRoZQpjb250cm9sIGRvbWFpbi4gSXNvbGF0ZSB0 aGUgbG9naWMgdXNlZCBieSBYRU5fRE9NQ1RMX3NldHZudW1haW5mbyBpbnRv IGEKbmV3IGhlbHBlciBmdW5jdGlvbiwgd2hpY2ggdGhlbiBpcyBhbHNvIHVz ZWQgZnJvbSBkb21haW5fa2lsbCgpLiBXaGlsZQpkb2luZyBzbyBhbHNvIG1v dmUgdGhlIHZudW1hX2Rlc3Ryb3koKSBpbnZvY2F0aW9uIG91dCBvZiB0aGUg bG9ja2VkCnJlZ2lvbi4KCldpdGggZC0+dm51bWEgcHJvcGVybHkgY2xlYXJl ZCBieSBkb21haW5fa2lsbCgpLCBYRU5NRU1fZ2V0X3ZudW1haW5mbyBub3cK cmVhbGx5IG9ubHkgbmVlZHMgdG8gY2hlY2sgZm9yIHRoZSBmaWVsZCBiZWlu ZyBOVUxMLiBUaGF0IGNoZWNrIG5lZWRzCnJlcGVhdGluZywgdGhvdWdoLCBh ZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpUaGlzIGlzIENWRS0yMDI2 LTYyNDI5IC8gWFNBLTUwMi4KCkZpeGVzOiA5Njk1MDE0OTY2YjUgKCJ4ZW46 IHZudW1hIHRvcG9sb2d5IGFuZCBzdWJvcCBoeXBlcmNhbGxzIikKUmVwb3J0 ZWQtYnk6IFRlZGR5IEFzdGllIDx0ZWRkeS5hc3RpZUB2YXRlcy50ZWNoPgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NAc3VzZS5jb20+ CgotLS0gYS94ZW4vY29tbW9uL2RvbWFpbi5jCisrKyBiL3hlbi9jb21tb24v ZG9tYWluLmMKQEAgLTEwMDMsNyArMTAwMyw3IEBAIGludCBkb21haW5fa2ls bChzdHJ1Y3QgZG9tYWluICpkKQogICAgICAgICBkLT5pc19keWluZyA9IERP TURZSU5HX2R5aW5nOwogICAgICAgICBzcGluX2JhcnJpZXIoJmQtPmRvbWFp bl9sb2NrKTsKICAgICAgICAgYXJnb19kZXN0cm95KGQpOwotICAgICAgICB2 bnVtYV9kZXN0cm95KGQtPnZudW1hKTsKKyAgICAgICAgdm51bWFfcmVwbGFj ZShkLCBOVUxMKTsKICAgICAgICAgZG9tYWluX3NldF9vdXRzdGFuZGluZ19w YWdlcyhkLCAwKTsKICAgICAgICAgLyogZmFsbHRocm91Z2ggKi8KICAgICBj YXNlIERPTURZSU5HX2R5aW5nOgotLS0gYS94ZW4vY29tbW9uL2RvbWN0bC5j CisrKyBiL3hlbi9jb21tb24vZG9tY3RsLmMKQEAgLTE1Myw3ICsxNTMsNyBA QCB2b2lkIGRvbWN0bF9sb2NrX3JlbGVhc2Uodm9pZCkKICAgICBzcGluX3Vu bG9jaygmY3VycmVudC0+ZG9tYWluLT5oeXBlcmNhbGxfZGVhZGxvY2tfbXV0 ZXgpOwogfQogCi12b2lkIHZudW1hX2Rlc3Ryb3koc3RydWN0IHZudW1hX2lu Zm8gKnZudW1hKQorc3RhdGljIHZvaWQgdm51bWFfZGVzdHJveShzdHJ1Y3Qg dm51bWFfaW5mbyAqdm51bWEpCiB7CiAgICAgaWYgKCB2bnVtYSApCiAgICAg ewpAQCAtMTY1LDYgKzE2NSwxOSBAQCB2b2lkIHZudW1hX2Rlc3Ryb3koc3Ry dWN0IHZudW1hX2luZm8gKnZuCiAgICAgfQogfQogCisvKiBPdmVyd3JpdGUg KHJlcGxhY2UpIHZudW1hIHRvcG9sb2d5IGZvciBhIGRvbWFpbi4gKi8KK3Zv aWQgdm51bWFfcmVwbGFjZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qgdm51 bWFfaW5mbyAqdm51bWEpCit7CisgICAgc3RydWN0IHZudW1hX2luZm8gKm9s ZDsKKworICAgIHdyaXRlX2xvY2soJmQtPnZudW1hX3J3bG9jayk7CisgICAg b2xkID0gZC0+dm51bWE7CisgICAgZC0+dm51bWEgPSB2bnVtYTsKKyAgICB3 cml0ZV91bmxvY2soJmQtPnZudW1hX3J3bG9jayk7CisKKyAgICB2bnVtYV9k ZXN0cm95KG9sZCk7Cit9CisKIC8qCiAgKiBBbGxvY2F0ZXMgbWVtb3J5IGZv ciB2TlVNQSwgKip2bnVtYSBzaG91bGQgYmUgTlVMTC4KICAqIENhbGxlciBo YXMgdG8gbWFrZSBzdXJlIHRoYXQgZG9tYWluIGhhcyBtYXhfcGFnZXMKQEAg LTkwOCwxMiArOTIxLDcgQEAgbG9uZyBkb19kb21jdGwoWEVOX0dVRVNUX0hB TkRMRV9QQVJBTSh4ZQogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0K IAotICAgICAgICAvKiBvdmVyd3JpdGUgdm51bWEgdG9wb2xvZ3kgZm9yIGRv bWFpbi4gKi8KLSAgICAgICAgd3JpdGVfbG9jaygmZC0+dm51bWFfcndsb2Nr KTsKLSAgICAgICAgdm51bWFfZGVzdHJveShkLT52bnVtYSk7Ci0gICAgICAg IGQtPnZudW1hID0gdm51bWE7Ci0gICAgICAgIHdyaXRlX3VubG9jaygmZC0+ dm51bWFfcndsb2NrKTsKLQorICAgICAgICB2bnVtYV9yZXBsYWNlKGQsIHZu dW1hKTsKICAgICAgICAgYnJlYWs7CiAgICAgfQogCi0tLSBhL3hlbi9jb21t b24vbWVtb3J5LmMKKysrIGIveGVuL2NvbW1vbi9tZW1vcnkuYwpAQCAtMTc2 MSwxMiArMTc2MSwyNCBAQCBsb25nIGRvX21lbW9yeV9vcCh1bnNpZ25lZCBs b25nIGNtZCwgWEVOCiAgICAgICAgICAgICBnb3RvIHZudW1haW5mb19vdXQ7 CiAgICAgICAgIH0KIAorICAgICAgICByZWFkX2xvY2soJmQtPnZudW1hX3J3 bG9jayk7CisKKyAgICAgICAgLyoKKyAgICAgICAgICogQ2hlY2sgZC0+dm51 bWEgYWdhaW4gYWZ0ZXIgcmUtYWNxdWlyaW5nIHRoZSBsb2NrIGFzIHdlIGNh biByYWNlCisgICAgICAgICAqIHdpdGggZG9tYWluIGRlc3RydWN0aW9uLgor ICAgICAgICAgKi8KKyAgICAgICAgaWYgKCAhZC0+dm51bWEgKQorICAgICAg ICB7CisgICAgICAgICAgICBBU1NFUlQoZC0+aXNfZHlpbmcpOworICAgICAg ICAgICAgcmVhZF91bmxvY2soJmQtPnZudW1hX3J3bG9jayk7CisgICAgICAg ICAgICByYyA9IC1FU1JDSDsKKyAgICAgICAgICAgIGdvdG8gdm51bWFpbmZv X291dDsKKyAgICAgICAgfQorCiAgICAgICAgIC8qCiAgICAgICAgICAqIENo ZWNrIGlmIHZudW1hIGluZm8gaGFzIGNoYW5nZWQgYW5kIGlmIHRoZSBhbGxv Y2F0ZWQgYXJyYXlzCiAgICAgICAgICAqIGFyZSBub3QgYmlnIGVub3VnaC4K ICAgICAgICAgICovCi0gICAgICAgIHJlYWRfbG9jaygmZC0+dm51bWFfcnds b2NrKTsKLQogICAgICAgICBpZiAoIGRvbV92bm9kZXMgPCBkLT52bnVtYS0+ bnJfdm5vZGVzIHx8CiAgICAgICAgICAgICAgZG9tX3ZyYW5nZXMgPCBkLT52 bnVtYS0+bnJfdm1lbXJhbmdlcyB8fAogICAgICAgICAgICAgIGRvbV92Y3B1 cyA8IGQtPm1heF92Y3B1cyApCi0tLSBhL3hlbi9pbmNsdWRlL3hlbi9kb21h aW4uaAorKysgYi94ZW4vaW5jbHVkZS94ZW4vZG9tYWluLmgKQEAgLTE1OSw5 ICsxNTksMTAgQEAgc3RydWN0IHZudW1hX2luZm8gewogfTsKIAogI2lmbmRl ZiBDT05GSUdfUFZfU0hJTV9FWENMVVNJVkUKLXZvaWQgdm51bWFfZGVzdHJv eShzdHJ1Y3Qgdm51bWFfaW5mbyAqdm51bWEpOwordm9pZCB2bnVtYV9yZXBs YWNlKHN0cnVjdCBkb21haW4gKmQsIHN0cnVjdCB2bnVtYV9pbmZvICp2bnVt YSk7CiAjZWxzZQotc3RhdGljIGlubGluZSB2b2lkIHZudW1hX2Rlc3Ryb3ko c3RydWN0IHZudW1hX2luZm8gKnZudW1hKSB7IEFTU0VSVCghdm51bWEpOyB9 CitzdGF0aWMgaW5saW5lIHZvaWQgdm51bWFfcmVwbGFjZShzdHJ1Y3QgZG9t YWluICpkLCBzdHJ1Y3Qgdm51bWFfaW5mbyAqdm51bWEpCit7IEFTU0VSVCgh dm51bWEpOyB9CiAjZW5kaWYKIAogZXh0ZXJuIGJvb2wgdm10cmFjZV9hdmFp bGFibGU7Cg== --=separator Content-Type: application/octet-stream; name="xsa502-4.21.patch" Content-Disposition: attachment; filename="xsa502-4.21.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB2TlVNQTogY2xvc2UgcmFjZSB3aW5kb3cgaW4gZG9tYWluIGNsZWFudXAK CkNhbGxpbmcgdm51bWFfZGVzdHJveSgpIHdpdGhvdXQgYW55IGxvY2tpbmcg Y2FuIHJhY2UgdGhlIGhhbmRsaW5nIG9mIGJvdGgKWEVOTUVNX2dldF92bnVt YWluZm8gYW5kIFhFTl9ET01DVExfc2V0dm51bWFpbmZvLiBXaGlsZSB0aGUg bGF0dGVyIGlzLAp3aXRob3V0IEZsYXNrLCBzdHJpY3RseSBvbmx5IGV4cG9z ZWQgdG8gdGhlIGNvbnRyb2wgZG9tYWluLCB0aGUgZm9ybWVyCmNhbiBhbHNv IGJlIGludm9rZWQgYnkgYSBzdHViZG9tIERNIG9yIGEgZGUtcHJpdmlsZWdl ZCBETSBydW5uaW5nIGluIHRoZQpjb250cm9sIGRvbWFpbi4gSXNvbGF0ZSB0 aGUgbG9naWMgdXNlZCBieSBYRU5fRE9NQ1RMX3NldHZudW1haW5mbyBpbnRv IGEKbmV3IGhlbHBlciBmdW5jdGlvbiwgd2hpY2ggdGhlbiBpcyBhbHNvIHVz ZWQgZnJvbSBkb21haW5fa2lsbCgpLiBXaGlsZQpkb2luZyBzbyBhbHNvIG1v dmUgdGhlIHZudW1hX2Rlc3Ryb3koKSBpbnZvY2F0aW9uIG91dCBvZiB0aGUg bG9ja2VkCnJlZ2lvbi4KCldpdGggZC0+dm51bWEgcHJvcGVybHkgY2xlYXJl ZCBieSBkb21haW5fa2lsbCgpLCBYRU5NRU1fZ2V0X3ZudW1haW5mbyBub3cK cmVhbGx5IG9ubHkgbmVlZHMgdG8gY2hlY2sgZm9yIHRoZSBmaWVsZCBiZWlu ZyBOVUxMLiBUaGF0IGNoZWNrIG5lZWRzCnJlcGVhdGluZywgdGhvdWdoLCBh ZnRlciByZS1hY3F1aXJpbmcgdGhlIGxvY2suCgpUaGlzIGlzIENWRS0yMDI2 LTYyNDI5IC8gWFNBLTUwMi4KCkZpeGVzOiA5Njk1MDE0OTY2YjUgKCJ4ZW46 IHZudW1hIHRvcG9sb2d5IGFuZCBzdWJvcCBoeXBlcmNhbGxzIikKUmVwb3J0 ZWQtYnk6IFRlZGR5IEFzdGllIDx0ZWRkeS5hc3RpZUB2YXRlcy50ZWNoPgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBKdWVyZ2VuIEdyb3NzIDxqZ3Jvc3NAc3VzZS5jb20+ CgotLS0gYS94ZW4vY29tbW9uL2RvbWFpbi5jCisrKyBiL3hlbi9jb21tb24v ZG9tYWluLmMKQEAgLTEyNTUsNyArMTI1NSw3IEBAIGludCBkb21haW5fa2ls bChzdHJ1Y3QgZG9tYWluICpkKQogICAgICAgICBkLT5pc19keWluZyA9IERP TURZSU5HX2R5aW5nOwogICAgICAgICByc3Bpbl9iYXJyaWVyKCZkLT5kb21h aW5fbG9jayk7CiAgICAgICAgIGFyZ29fZGVzdHJveShkKTsKLSAgICAgICAg dm51bWFfZGVzdHJveShkLT52bnVtYSk7CisgICAgICAgIHZudW1hX3JlcGxh Y2UoZCwgTlVMTCk7CiAgICAgICAgIGRvbWFpbl9zZXRfb3V0c3RhbmRpbmdf cGFnZXMoZCwgMCk7CiAgICAgICAgIC8qIGZhbGx0aHJvdWdoICovCiAgICAg Y2FzZSBET01EWUlOR19keWluZzoKLS0tIGEveGVuL2NvbW1vbi9kb21jdGwu YworKysgYi94ZW4vY29tbW9uL2RvbWN0bC5jCkBAIC0xNDIsNyArMTQyLDcg QEAgdm9pZCBkb21jdGxfbG9ja19yZWxlYXNlKHZvaWQpCiAgICAgc3Bpbl91 bmxvY2soJmN1cnJlbnQtPmRvbWFpbi0+aHlwZXJjYWxsX2RlYWRsb2NrX211 dGV4KTsKIH0KIAotdm9pZCB2bnVtYV9kZXN0cm95KHN0cnVjdCB2bnVtYV9p bmZvICp2bnVtYSkKK3N0YXRpYyB2b2lkIHZudW1hX2Rlc3Ryb3koc3RydWN0 IHZudW1hX2luZm8gKnZudW1hKQogewogICAgIGlmICggdm51bWEgKQogICAg IHsKQEAgLTE1NCw2ICsxNTQsMTkgQEAgdm9pZCB2bnVtYV9kZXN0cm95KHN0 cnVjdCB2bnVtYV9pbmZvICp2bgogICAgIH0KIH0KIAorLyogT3ZlcndyaXRl IChyZXBsYWNlKSB2bnVtYSB0b3BvbG9neSBmb3IgYSBkb21haW4uICovCit2 b2lkIHZudW1hX3JlcGxhY2Uoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHZu dW1hX2luZm8gKnZudW1hKQoreworICAgIHN0cnVjdCB2bnVtYV9pbmZvICpv bGQ7CisKKyAgICB3cml0ZV9sb2NrKCZkLT52bnVtYV9yd2xvY2spOworICAg IG9sZCA9IGQtPnZudW1hOworICAgIGQtPnZudW1hID0gdm51bWE7CisgICAg d3JpdGVfdW5sb2NrKCZkLT52bnVtYV9yd2xvY2spOworCisgICAgdm51bWFf ZGVzdHJveShvbGQpOworfQorCiAvKgogICogQWxsb2NhdGVzIG1lbW9yeSBm b3Igdk5VTUEsICoqdm51bWEgc2hvdWxkIGJlIE5VTEwuCiAgKiBDYWxsZXIg aGFzIHRvIG1ha2Ugc3VyZSB0aGF0IGRvbWFpbiBoYXMgbWF4X3BhZ2VzCkBA IC05MDcsMTIgKzkyMCw3IEBAIGxvbmcgZG9fZG9tY3RsKFhFTl9HVUVTVF9I QU5ETEVfUEFSQU0oeGUKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9 CiAKLSAgICAgICAgLyogb3ZlcndyaXRlIHZudW1hIHRvcG9sb2d5IGZvciBk b21haW4uICovCi0gICAgICAgIHdyaXRlX2xvY2soJmQtPnZudW1hX3J3bG9j ayk7Ci0gICAgICAgIHZudW1hX2Rlc3Ryb3koZC0+dm51bWEpOwotICAgICAg ICBkLT52bnVtYSA9IHZudW1hOwotICAgICAgICB3cml0ZV91bmxvY2soJmQt PnZudW1hX3J3bG9jayk7Ci0KKyAgICAgICAgdm51bWFfcmVwbGFjZShkLCB2 bnVtYSk7CiAgICAgICAgIGJyZWFrOwogICAgIH0KIAotLS0gYS94ZW4vY29t bW9uL21lbW9yeS5jCisrKyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTE4 MDQsMTIgKzE4MDQsMjQgQEAgbG9uZyBkb19tZW1vcnlfb3AodW5zaWduZWQg bG9uZyBjbWQsIFhFTgogICAgICAgICAgICAgZ290byB2bnVtYWluZm9fb3V0 OwogICAgICAgICB9CiAKKyAgICAgICAgcmVhZF9sb2NrKCZkLT52bnVtYV9y d2xvY2spOworCisgICAgICAgIC8qCisgICAgICAgICAqIENoZWNrIGQtPnZu dW1hIGFnYWluIGFmdGVyIHJlLWFjcXVpcmluZyB0aGUgbG9jayBhcyB3ZSBj YW4gcmFjZQorICAgICAgICAgKiB3aXRoIGRvbWFpbiBkZXN0cnVjdGlvbi4K KyAgICAgICAgICovCisgICAgICAgIGlmICggIWQtPnZudW1hICkKKyAgICAg ICAgeworICAgICAgICAgICAgQVNTRVJUKGQtPmlzX2R5aW5nKTsKKyAgICAg ICAgICAgIHJlYWRfdW5sb2NrKCZkLT52bnVtYV9yd2xvY2spOworICAgICAg ICAgICAgcmMgPSAtRVNSQ0g7CisgICAgICAgICAgICBnb3RvIHZudW1haW5m b19vdXQ7CisgICAgICAgIH0KKwogICAgICAgICAvKgogICAgICAgICAgKiBD aGVjayBpZiB2bnVtYSBpbmZvIGhhcyBjaGFuZ2VkIGFuZCBpZiB0aGUgYWxs b2NhdGVkIGFycmF5cwogICAgICAgICAgKiBhcmUgbm90IGJpZyBlbm91Z2gu CiAgICAgICAgICAqLwotICAgICAgICByZWFkX2xvY2soJmQtPnZudW1hX3J3 bG9jayk7Ci0KICAgICAgICAgaWYgKCBkb21fdm5vZGVzIDwgZC0+dm51bWEt Pm5yX3Zub2RlcyB8fAogICAgICAgICAgICAgIGRvbV92cmFuZ2VzIDwgZC0+ dm51bWEtPm5yX3ZtZW1yYW5nZXMgfHwKICAgICAgICAgICAgICBkb21fdmNw dXMgPCBkLT5tYXhfdmNwdXMgKQotLS0gYS94ZW4vaW5jbHVkZS94ZW4vZG9t YWluLmgKKysrIGIveGVuL2luY2x1ZGUveGVuL2RvbWFpbi5oCkBAIC0xODgs OSArMTg4LDEwIEBAIHN0cnVjdCB2bnVtYV9pbmZvIHsKIH07CiAKICNpZm5k ZWYgQ09ORklHX1BWX1NISU1fRVhDTFVTSVZFCi12b2lkIHZudW1hX2Rlc3Ry b3koc3RydWN0IHZudW1hX2luZm8gKnZudW1hKTsKK3ZvaWQgdm51bWFfcmVw bGFjZShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qgdm51bWFfaW5mbyAqdm51 bWEpOwogI2Vsc2UKLXN0YXRpYyBpbmxpbmUgdm9pZCB2bnVtYV9kZXN0cm95 KHN0cnVjdCB2bnVtYV9pbmZvICp2bnVtYSkgeyBBU1NFUlQoIXZudW1hKTsg fQorc3RhdGljIGlubGluZSB2b2lkIHZudW1hX3JlcGxhY2Uoc3RydWN0IGRv bWFpbiAqZCwgc3RydWN0IHZudW1hX2luZm8gKnZudW1hKQoreyBBU1NFUlQo IXZudW1hKTsgfQogI2VuZGlmCiAKIGV4dGVybiBib29sIHZtdHJhY2VfYXZh aWxhYmxlOwo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372480.1619947 (Exim 4.92) (envelope-from ) id 1wogYg-0002Db-No; Tue, 28 Jul 2026 12:05:18 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372480.1619947; Tue, 28 Jul 2026 12:05:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYf-0002A7-PP; Tue, 28 Jul 2026 12:05:17 +0000 Received: by outflank-mailman (input) for mailman id 1372480; Tue, 28 Jul 2026 12:05:15 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYb-0001KN-Fw; Tue, 28 Jul 2026 12:05:13 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYa-00EbnI-Ro; Tue, 28 Jul 2026 14:05:12 +0200 Received: from [10.42.69.7] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689af5-bab6-0a2a0a5309dd-0a2a4507dc4c-28 for ; Tue, 28 Jul 2026 14:05:12 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-ef75cf.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689af7-b4ea-0a2a45070019-6882d725a2aa-3 for ; Tue, 28 Jul 2026 14:05:12 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYW-00DP9S-0I; Tue, 28 Jul 2026 12:05:07 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYV-003DkN-2W; Tue, 28 Jul 2026 12:05:07 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 500 v2 (CVE-2026-62428) - grant-table: type confusion in grant-copy Message-Id: Date: Tue, 28 Jul 2026 12:05:07 +0000 X-purgate-ID: tlsNG-ef75cf/1785240312-370DDAE4-1BAE9ED8/0/0 X-purgate-type: clean X-purgate-size: 9147 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62428 / XSA-500 version 2 grant-table: type confusion in grant-copy UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant (the grant is "pinned"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy. IMPACT ====== An unprivileged guest may be able to elevate its privileges to that of the host. Information leaks and Denial of Service (DoS) are possible as well. VULNERABLE SYSTEMS ================== All Xen versions from 4.2 onwards are vulnerable. Xen versions 4.1 and earlier are not vulnerable. Xen versions 4.13 and newer offer a way to build Xen without grant table support. Such hypervisors (CONFIG_GRANT_TABLE turned off) are not vulnerable. MITIGATION ========== There is no known mitigation. CREDITS ======= This issue was discovered by Roman S. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa500.patch xen-unstable - Xen 4.18.x xsa500-4.17.patch Xen 4.17.x $ sha256sum xsa500* e09e06ef5d4044b4c6104ae83d5e509d45495d7bab1da73f2beb7a916d24f462 xsa500.patch 5fabb02fd4cc62f58a07a8322883b04c638832f65fdf0216a0efde6229d1fd73 xsa500-4.17.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrEMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ4B4H/1dGUPMt2yREv0C6uHyxT50MoAwaZ01A6Dwm2CNm 2eIjsJGeF3mtlw0T4c6hCmF7fcULFJMcPkJi09TS38ADIOBpivgP+tRkRa+ZRPtG E6vpRtlHmD57WVPWRfTM0uk6UL/CCyvlUILR8A9lu7tF5PFef3Dzeiqpuh/rMNPx DmEcn3Mw8DpKvkoMIVJd1TgAtFX0KwWwByxClUIV84K2SBvcNxVoiw2fkKkx1HRa lB7sVEkKliUyIN/uWmh1VcLshQuulHYNcnkq7ErCEIQqo30ay6WER6W5TS0cfh/F OUSQWlWzkht2GY0pRXp5UQaBFc8UCsOnVty8DhvLrCyllSk= =gRtn -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa500.patch" Content-Disposition: attachment; filename="xsa500.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IGNoZWNrIHZhbHVlcyBhZ2FpbnN0IGFjdGl2ZSBlbnRyeSB3 aGVuIGNvcHlpbmcgYW4KIGFscmVhZHktcGlubmVkIG9uZQoKYWNxdWlyZV9n cmFudF9mb3JfY29weSgpIHBhc3NlcyB0byBpdHMgY2FsbGVyIGJvdGggYW4g TUZOIGFuZCBhIHN0cnVjdApwYWdlX2luZm8gKi4gVGhlIHR3byByZWFsbHkg bmVlZCB0byBiZSBpbiBzeW5jIGZvciB0aGUgZ2V0X3BhZ2UoKQp1bmRlcmx5 aW5nIGdldF9wYWdlZF9mcmFtZSgpIGFuZCBnZXRfcGFnZV90eXBlKCkgKGJv dGggYWN0aW5nIG9uIHRoZQpwYXNzZWQgYmFjayBzdHJ1Y3QgcGFnZV9pbmZv ICopIGFuZCB0aGUgbWFwX2RvbWFpbl9wYWdlKCkgKGFjdGluZyBvbiB0aGUK cGFzc2VkIGJhY2sgTUZOKSB0byBhY2hpZXZlIHRoZSBpbnRlbmRlZCBlZmZl Y3QuCgpHbyBmdXJ0aGVyIGFuZCBhbHNvIGNoZWNrIG90aGVyIHByb3BlcnRp ZXM6IEdURl90cmFuc2l0aXZlIC8gR1RGX3N1Yl9wYWdlCm1heSBoYXZlIGJl ZW4gZmxpcHBlZCBpbiB0aGUgc2hhcmVkIGVudHJ5LCBzbyByZXNwZWN0aXZl IGZpZWxkcyAvIHZhbHVlcwphbHNvIG1heSBub3QgbWF0Y2guCgpUaGUgb25l IGZpZWxkIHdoaWNoIHdlIGNhbiBiZSBzdXJlIGRvZXMgbWF0Y2ggKGFzIGl0 IHdhcyBjaGVja2VkIGVhcmxpZXIKaW4gdGhlIGZ1bmN0aW9uKSBpcyAtPmRv bWlkLiBBZGQgYW4gYXNzZXJ0aW9uIG5ldmVydGhlbGVzcy4KClRoaXMgaXMg Q1ZFLTIwMjYtNjI0MjggLyBYU0EtNTAwLgoKRml4ZXM6IGQ4Y2JlY2IxZWVl ZCAoImdyYW50LXRhYmxlczogVXNlIGdldF9wYWdlX2Zyb21fZ2ZuKCkgaW5z dGVhZCBvZiBnZXRfZ2ZuKCkvcHV0X2dmbiIpClNpZ25lZC1vZmYtYnk6IEph biBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEp1 ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94 ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29tbW9uL2dyYW50X3Rh YmxlLmMKaW5kZXggMTdlMWFmOWZjZjhhLi5iODNkZDdiYzJhZjIgMTAwNjQ0 Ci0tLSBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYworKysgYi94ZW4vY29t bW9uL2dyYW50X3RhYmxlLmMKQEAgLTI4MDQsNiArMjgwNCwyMSBAQCBhY3F1 aXJlX2dyYW50X2Zvcl9jb3B5KAogICAgICAgICAgICAgYWN0LT50cmFuc19n cmVmID0gdHJhbnNfZ3JlZjsKICAgICAgICAgICAgIGFjdC0+bWZuID0gZ3Jh bnRfbWZuOwogICAgICAgICB9CisgICAgICAgIGVsc2UgaWYgKCAhbWZuX2Vx KGFjdC0+bWZuLCBncmFudF9tZm4pIHx8CisgICAgICAgICAgICAgICAgICBh Y3QtPnNyY19kb21pZCAhPSB0ZC0+ZG9tYWluX2lkIHx8CisgICAgICAgICAg ICAgICAgICBhY3QtPnRyYW5zX2dyZWYgIT0gdHJhbnNfZ3JlZiB8fAorICAg ICAgICAgICAgICAgICAgKGFjdC0+aXNfc3ViX3BhZ2UgJiYKKyAgICAgICAg ICAgICAgICAgICAoIWlzX3N1Yl9wYWdlIHx8CisgICAgICAgICAgICAgICAg ICAgIGFjdC0+c3RhcnQgIT0gdHJhbnNfcGFnZV9vZmYgfHwKKyAgICAgICAg ICAgICAgICAgICAgYWN0LT5sZW5ndGggIT0gdHJhbnNfbGVuZ3RoKSkgKQor ICAgICAgICB7CisgICAgICAgICAgICBwdXRfcGFnZSgqcGFnZSk7CisgICAg ICAgICAgICAqcGFnZSA9IE5VTEw7CisgICAgICAgICAgICByYyA9IEdOVFNU X2dlbmVyYWxfZXJyb3I7CisgICAgICAgICAgICBnb3RvIHVubG9ja19vdXRf Y2xlYXI7CisgICAgICAgIH0KKyAgICAgICAgZWxzZQorICAgICAgICAgICAg QVNTRVJUKGFjdC0+ZG9taWQgPT0gbGRvbSk7CiAgICAgfQogICAgIGVsc2UK ICAgICB7Cg== --=separator Content-Type: application/octet-stream; name="xsa500-4.17.patch" Content-Disposition: attachment; filename="xsa500-4.17.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBnbnR0YWI6IGNoZWNrIHZhbHVlcyBhZ2FpbnN0IGFjdGl2ZSBlbnRyeSB3 aGVuIGNvcHlpbmcgYW4KIGFscmVhZHktcGlubmVkIG9uZQoKYWNxdWlyZV9n cmFudF9mb3JfY29weSgpIHBhc3NlcyB0byBpdHMgY2FsbGVyIGJvdGggYW4g TUZOIGFuZCBhIHN0cnVjdApwYWdlX2luZm8gKi4gVGhlIHR3byByZWFsbHkg bmVlZCB0byBiZSBpbiBzeW5jIGZvciB0aGUgZ2V0X3BhZ2UoKQp1bmRlcmx5 aW5nIGdldF9wYWdlZF9mcmFtZSgpIGFuZCBnZXRfcGFnZV90eXBlKCkgKGJv dGggYWN0aW5nIG9uIHRoZQpwYXNzZWQgYmFjayBzdHJ1Y3QgcGFnZV9pbmZv ICopIGFuZCB0aGUgbWFwX2RvbWFpbl9wYWdlKCkgKGFjdGluZyBvbiB0aGUK cGFzc2VkIGJhY2sgTUZOKSB0byBhY2hpZXZlIHRoZSBpbnRlbmRlZCBlZmZl Y3QuCgpHbyBmdXJ0aGVyIGFuZCBhbHNvIGNoZWNrIG90aGVyIHByb3BlcnRp ZXM6IEdURl90cmFuc2l0aXZlIC8gR1RGX3N1Yl9wYWdlCm1heSBoYXZlIGJl ZW4gZmxpcHBlZCBpbiB0aGUgc2hhcmVkIGVudHJ5LCBzbyByZXNwZWN0aXZl IGZpZWxkcyAvIHZhbHVlcwphbHNvIG1heSBub3QgbWF0Y2guCgpUaGUgb25l IGZpZWxkIHdoaWNoIHdlIGNhbiBiZSBzdXJlIGRvZXMgbWF0Y2ggKGFzIGl0 IHdhcyBjaGVja2VkIGVhcmxpZXIKaW4gdGhlIGZ1bmN0aW9uKSBpcyAtPmRv bWlkLiBBZGQgYW4gYXNzZXJ0aW9uIG5ldmVydGhlbGVzcy4KClRoaXMgaXMg Q1ZFLTIwMjYtNjI0MjggLyBYU0EtNTAwLgoKRml4ZXM6IGQ4Y2JlY2IxZWVl ZCAoImdyYW50LXRhYmxlczogVXNlIGdldF9wYWdlX2Zyb21fZ2ZuKCkgaW5z dGVhZCBvZiBnZXRfZ2ZuKCkvcHV0X2dmbiIpClNpZ25lZC1vZmYtYnk6IEph biBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEp1 ZXJnZW4gR3Jvc3MgPGpncm9zc0BzdXNlLmNvbT4KCmRpZmYgLS1naXQgYS94 ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29tbW9uL2dyYW50X3Rh YmxlLmMKaW5kZXggY2M3ZjJiZDgyMTAzLi5iZjFiMGQzNjc3NDYgMTAwNjQ0 Ci0tLSBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYworKysgYi94ZW4vY29t bW9uL2dyYW50X3RhYmxlLmMKQEAgLTI3NTUsNiArMjc1NSwyMSBAQCBhY3F1 aXJlX2dyYW50X2Zvcl9jb3B5KAogICAgICAgICAgICAgYWN0LT50cmFuc19n cmVmID0gdHJhbnNfZ3JlZjsKICAgICAgICAgICAgIGFjdC0+bWZuID0gZ3Jh bnRfbWZuOwogICAgICAgICB9CisgICAgICAgIGVsc2UgaWYgKCAhbWZuX2Vx KGFjdC0+bWZuLCBncmFudF9tZm4pIHx8CisgICAgICAgICAgICAgICAgICBh Y3QtPnRyYW5zX2RvbWFpbiAhPSB0ZCB8fAorICAgICAgICAgICAgICAgICAg YWN0LT50cmFuc19ncmVmICE9IHRyYW5zX2dyZWYgfHwKKyAgICAgICAgICAg ICAgICAgIChhY3QtPmlzX3N1Yl9wYWdlICYmCisgICAgICAgICAgICAgICAg ICAgKCFpc19zdWJfcGFnZSB8fAorICAgICAgICAgICAgICAgICAgICBhY3Qt PnN0YXJ0ICE9IHRyYW5zX3BhZ2Vfb2ZmIHx8CisgICAgICAgICAgICAgICAg ICAgIGFjdC0+bGVuZ3RoICE9IHRyYW5zX2xlbmd0aCkpICkKKyAgICAgICAg eworICAgICAgICAgICAgcHV0X3BhZ2UoKnBhZ2UpOworICAgICAgICAgICAg KnBhZ2UgPSBOVUxMOworICAgICAgICAgICAgcmMgPSBHTlRTVF9nZW5lcmFs X2Vycm9yOworICAgICAgICAgICAgZ290byB1bmxvY2tfb3V0X2NsZWFyOwor ICAgICAgICB9CisgICAgICAgIGVsc2UKKyAgICAgICAgICAgIEFTU0VSVChh Y3QtPmRvbWlkID09IGxkb20pOwogICAgIH0KICAgICBlbHNlCiAgICAgewo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372472.1619916 (Exim 4.92) (envelope-from ) id 1wogYb-0001Mm-Ki; Tue, 28 Jul 2026 12:05:13 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372472.1619916; Tue, 28 Jul 2026 12:05:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYb-0001KT-Bn; Tue, 28 Jul 2026 12:05:13 +0000 Received: by outflank-mailman (input) for mailman id 1372472; Tue, 28 Jul 2026 12:05:10 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYY-0000xY-1Z; Tue, 28 Jul 2026 12:05:10 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYX-004ZQt-ET; Tue, 28 Jul 2026 14:05:09 +0200 Received: from [10.42.69.10] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689af0-e002-0a2a0a5209dd-0a2a450acd6e-44 for ; Tue, 28 Jul 2026 14:05:09 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-4011c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689af3-f2d2-0a2a450a0019-6882d725da5e-3 for ; Tue, 28 Jul 2026 14:05:08 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYO-00DP8v-1q; Tue, 28 Jul 2026 12:05:00 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYO-003DhI-0o; Tue, 28 Jul 2026 12:05:00 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 499 v2 (CVE-2026-62426,CVE-2026-62427) - sysctl and platform-op locks open to abuse Message-Id: Date: Tue, 28 Jul 2026 12:05:00 +0000 X-purgate-ID: tlsNG-4011c0/1785240309-522C0F5C-33D38788/0/0 X-purgate-type: clean X-purgate-size: 156181 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62426,CVE-2026-62427 / XSA-499 version 2 sysctl and platform-op locks open to abuse UPDATES IN VERSION 2 ==================== Add further tags to patches. Public release. ISSUE DESCRIPTION ================= To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in parallel, so a system-wide lock each is used. The way those locks are acquired is, however, not providing any fairness. Furthermore, with XSM/Flask in use, the lock acquire will, for some operations, occur ahead of any permission checking. The sysctl issue is CVE-2026-62426. The platform-op issue is CVE-2026-62427. IMPACT ====== A less privileged entity may stall an equally or more privileged entity, potentially leading to a Denial od Service (DoS) of up to the entire host. VULNERABLE SYSTEMS ================== All Xen versions from 4.0 onwards are vulnerable. Earlier versions use a different locking operation, but may also be vulnerable. MITIGATION ========== There is no known mitigation. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the appropriate set of attached patches resolves this issue. NOTE: The patches include an adjustment to the default Flask policy. When custom policies are in use, a respective change will need making there. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa499/xsa499-?.patch xen-unstable - Xen 4.21.x xsa499/xsa499-4.20-?.patch Xen 4.20.x - Xen 4.19.x xsa499/xsa499-4.18-?.patch Xen 4.18.x xsa499/xsa499-4.17-?.patch Xen 4.17.x $ sha256sum xsa499*/* 1b716186d37cb6be7b2917bc4801a5d431111f6a01f6e710e2899b6fbf91d747 xsa499/xsa499-1.patch 7789699993f993aa0f118437b9a18c2207cf29491fa08f21e029aa4293698d38 xsa499/xsa499-2.patch 4860a286a7161a407a7e7dc95ecb04a453847295ca73f91f3bd07c3e9e94b7fe xsa499/xsa499-3.patch fd59436b871caad09017da250996968797ada23223b1e76f9a2e80ae814d63ca xsa499/xsa499-4.17-1.patch 9f83e4866fd20a3e45ecf40a80898446d243444fdf4c17eb695ff7f3d3e9f816 xsa499/xsa499-4.17-2.patch e7e4fcb7502deb605a854ce451403237ea295394dc30f771001680cc3aaa8f9e xsa499/xsa499-4.17-3.patch 3a979d5c59d690313ec9c3d82d8859dadd6d106296cbf6fe75ef9b42f2626bb5 xsa499/xsa499-4.17-4.patch d2b3bcad9eb0d82f16befff35ef8fa0d8ed6d06b7e7e2c360003f1eee14d26b2 xsa499/xsa499-4.17-5.patch ac1f4d1935dc7546c32e5b9c42ebd08d71ca232e559a7021e3ed685c0973675e xsa499/xsa499-4.17-6.patch 143a9b46b3edf689e8b75fb87d1e15b0f0b96baf48547f6d77c00ba5e90ea5ac xsa499/xsa499-4.17-7.patch cd51ddc70ac765ef00a404d3a21c04a0e234ebca1904159820504e10f70e3812 xsa499/xsa499-4.18-1.patch 32f7827da6a6cdff848a1b620dd1a4d4861008f53d31050c6cde1d353794d22f xsa499/xsa499-4.18-2.patch 3ed288dd99051ebb014cf1cd124d5ed0837935bb0d56963f54699a9e3a966c4e xsa499/xsa499-4.18-3.patch 86fecda24801913f408f86db0b02d0017e870fa95e6edfe5d414343c89b29b37 xsa499/xsa499-4.18-4.patch 055c9114e0c1e789ee510dfb739bf8067a7acbdad6b6edaf2c0e7ed3daac2b81 xsa499/xsa499-4.18-5.patch 211b7410562f438e82266d3101beaef32d66c54b4681a370dd3e47abeec7c5c5 xsa499/xsa499-4.18-6.patch a0849d860536a199ebeabb6199012d9eae70ee2ed41573765af50aec7b7e7f85 xsa499/xsa499-4.18-7.patch 48b96df5981193f182eda567ad65f1343718656a36ea1ef2d24bdc534ea4ead1 xsa499/xsa499-4.20-1.patch 3e9a315184f64d41011721b2f09275fcc6969d46be3c6f6b788b65fe78c1a0a8 xsa499/xsa499-4.20-2.patch cf66937eecf0b8a559e60553c21de0e3767270df022c7098d7dd94a46c5ad176 xsa499/xsa499-4.20-3.patch 8932a1480b7431a0ebb048312dda49d5b7d06a5d2b57efb04df0b90bc81e95be xsa499/xsa499-4.20-4.patch 6777a824bc0248f8e12a71f87b60a3209a7a74a08fe7e072d26f80095d188a01 xsa499/xsa499-4.20-5.patch 3ab8c66b133d2b942f7caad0251d427076ad2ef38bcbf6672a937c1406f098ac xsa499/xsa499-4.20-6.patch 1254cc886eb62d65624bcc417701c119e02cc35d31f62e3dda1bda062e170446 xsa499/xsa499-4.20-7.patch 70c315beca0afa411c9e31117d8e0b22b36b5cd70e8d9d2243f5501167a2c631 xsa499/xsa499-4.patch d0ff37c4807445bd5146057ddaed31d7ce5a0fe6abf413a04f4bceca8419baeb xsa499/xsa499-5.patch 961d31a715ae2c8dd25b74243a6c759ce8c43409c4156ae6bbdcf3faac03f592 xsa499/xsa499-6.patch 60cb3b1e4beef97d633a0156feb0f4f10ac8d21c54152969f5b7a77ecc4a24d3 xsa499/xsa499-7.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomq8MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ9AcH/3XOTFbTvmwW48Q6nVkwvys5fiU2esrkFOTK96nn p55QQoVVjebet7N+eRtezkjfHGCqphGOuHcAJ0uMlNNgUfhXNxxu6qaqMHX5h29P DqQKZzOKuQM1frcyupJdhi8dbNxan1pXMv6rJAcWpmBoPEt9e+qwpnWtBX/HPH3b 66cQwLhmenlqwZak7E0bsLFw1A6WUXs1VS4xeiOE3Cj91F5hPUvqkZGI0pNbNAIn 6copsM0UAcTkwGrwIvKuN5b3BqFmaCWvGBfqsuNpj5MnJddigV68UeylMepFjoDH Urn2qiOTcJKxdFt/AUX57AqiBF2MtDbi49RLLxsTCJvYvFM= =R0It -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-1.patch" Content-Disposition: attachment; filename="xsa499/xsa499-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBwbGF0Zm9ybS1vcC9YU006IG1vdmUgcmVzb3VyY2Uteyx1bn1wbHVnLWNv cmUgY2hlY2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggZmxhc2tf cGxhdGZvcm1fb3AoKTsgdGhlcmUgbmV2ZXIgcmVhbGx5IHdhcyBhCm5lZWQg dG8gZGVmZXIgdGhlc2UgY2hlY2tzLCBhcyB0aGUgc3ViLW9wIGhhcyBhbHdh eXMgYmVlbiBrbm93biB0byB0aGUKZnVuY3Rpb24uIEFzIGEgcG9zaXRpdmUg c2lkZSBlZmZlY3QsIHBlcm1pc3Npb25zIGFyZSB0aGVuIGNoZWNrZWQgYXQg dGhlCnNhbWUgZWFybHkgcG9pbnQgd2l0aCBhbmQgd2l0aG91dCBGbGFzay4K ClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MjcgLyBwYXJ0IG9mIFhTQS00OTkuCgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0 cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGgg PGRwc21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vYXJj aC94ODYvcGxhdGZvcm1faHlwZXJjYWxsLmMKKysrIGIveGVuL2FyY2gveDg2 L3BsYXRmb3JtX2h5cGVyY2FsbC5jCkBAIC03MzUsMTAgKzczNSw2IEBAIHJl dF90IGRvX3BsYXRmb3JtX29wKAogICAgIHsKICAgICAgICAgaW50IGNwdSA9 IG9wLT51LmNwdV9vbC5jcHVpZDsKIAotICAgICAgICByZXQgPSB4c21fcmVz b3VyY2VfcGx1Z19jb3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQg KQotICAgICAgICAgICAgYnJlYWs7Ci0KICAgICAgICAgaWYgKCBjcHUgPj0g bnJfY3B1X2lkcyB8fCAhY3B1X3ByZXNlbnQoY3B1KSB8fAogICAgICAgICAg ICAgIGNsb2Nrc291cmNlX2lzX3RzYygpICkKICAgICAgICAgewpAQCAtNzYx LDEwICs3NTcsNiBAQCByZXRfdCBkb19wbGF0Zm9ybV9vcCgKICAgICB7CiAg ICAgICAgIGludCBjcHUgPSBvcC0+dS5jcHVfb2wuY3B1aWQ7CiAKLSAgICAg ICAgcmV0ID0geHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9IT09LKTsK LSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAgICAgYnJlYWs7Ci0KICAg ICAgICAgaWYgKCBjcHUgPT0gMCApCiAgICAgICAgIHsKICAgICAgICAgICAg IHJldCA9IC1FT1BOT1RTVVBQOwpAQCAtNzg5LDIwICs3ODEsMTIgQEAgcmV0 X3QgZG9fcGxhdGZvcm1fb3AoCiAgICAgfQogCiAgICAgY2FzZSBYRU5QRl9j cHVfaG90YWRkOgotICAgICAgICByZXQgPSB4c21fcmVzb3VyY2VfcGx1Z19j b3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAg ICAgYnJlYWs7Ci0KICAgICAgICAgcmV0ID0gY3B1X2FkZChvcC0+dS5jcHVf YWRkLmFwaWNfaWQsCiAgICAgICAgICAgICAgICAgICAgICAgb3AtPnUuY3B1 X2FkZC5hY3BpX2lkLAogICAgICAgICAgICAgICAgICAgICAgIG9wLT51LmNw dV9hZGQucHhtKTsKICAgICAgICAgYnJlYWs7CiAKICAgICBjYXNlIFhFTlBG X21lbV9ob3RhZGQ6Ci0gICAgICAgIHJldCA9IHhzbV9yZXNvdXJjZV9wbHVn X2NvcmUoWFNNX0hPT0spOwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAg ICAgICBicmVhazsKLQogICAgICAgICByZXQgPSBtZW1vcnlfYWRkKG9wLT51 Lm1lbV9hZGQuc3BmbiwKICAgICAgICAgICAgICAgICAgICAgICBvcC0+dS5t ZW1fYWRkLmVwZm4sCiAgICAgICAgICAgICAgICAgICAgICAgb3AtPnUubWVt X2FkZC5weG0pOwotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysrIGIv eGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC0xMjA3LDYgKzEyMDcsNyBAQCBz dGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3BjaV9jb25maWdfcGVyCiAKIH0K IAorI2lmIGRlZmluZWQoQ09ORklHX1NZU0NUTCkgfHwgZGVmaW5lZChDT05G SUdfWDg2KQogc3RhdGljIGludCBjZl9jaGVjayBmbGFza19yZXNvdXJjZV9w bHVnX2NvcmUodm9pZCkKIHsKICAgICByZXR1cm4gYXZjX2N1cnJlbnRfaGFz X3Blcm0oU0VDSU5JVFNJRF9ET01YRU4sIFNFQ0NMQVNTX1JFU09VUkNFLCBS RVNPVVJDRV9fUExVRywgTlVMTCk7CkBAIC0xMjE2LDYgKzEyMTcsNyBAQCBz dGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3Jlc291cmNlX3VucGx1CiB7CiAg ICAgcmV0dXJuIGF2Y19jdXJyZW50X2hhc19wZXJtKFNFQ0lOSVRTSURfRE9N WEVOLCBTRUNDTEFTU19SRVNPVVJDRSwgUkVTT1VSQ0VfX1VOUExVRywgTlVM TCk7CiB9CisjZW5kaWYgLyogQ09ORklHX1NZU0NUTCB8fCBDT05GSUdfWDg2 ICovCiAKICNpZmRlZiBDT05GSUdfU1lTQ1RMCiBzdGF0aWMgaW50IGZsYXNr X3Jlc291cmNlX3VzZV9jb3JlKHZvaWQpCkBAIC0xNTM2LDEyICsxNTM4LDEz IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfcGxhdGZvcm1fb3AodWkK ICAgICBzd2l0Y2ggKCBvcCApCiAgICAgewogI2lmZGVmIENPTkZJR19YODYK LSAgICAvKiBUaGVzZSBvcGVyYXRpb25zIGhhdmUgdGhlaXIgb3duIFhTTSBo b29rcyAqLwogICAgIGNhc2UgWEVOUEZfY3B1X29ubGluZToKLSAgICBjYXNl IFhFTlBGX2NwdV9vZmZsaW5lOgogICAgIGNhc2UgWEVOUEZfY3B1X2hvdGFk ZDoKICAgICBjYXNlIFhFTlBGX21lbV9ob3RhZGQ6Ci0gICAgICAgIHJldHVy biAwOworICAgICAgICByZXR1cm4gZmxhc2tfcmVzb3VyY2VfcGx1Z19jb3Jl KCk7CisKKyAgICBjYXNlIFhFTlBGX2NwdV9vZmZsaW5lOgorICAgICAgICBy ZXR1cm4gZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUoKTsKICNlbmRpZgog CiAgICAgY2FzZSBYRU5QRl9zZXR0aW1lMzI6Cg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-2.patch" Content-Disposition: attachment; filename="xsa499/xsa499-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBwYXNzIGZ1bGwgc3RydWN0IHhlbl9zeXNjdGwgdG8g eHNtX3N5c2N0bCgpCgpTdWJzZXF1ZW50bHkgc29tZSBzdWItb3BzIHdpbGwg d2FudCB0byBpbnNwZWN0IHRoZWlyIHN1Yi1zdWItb3BzLgoKVGhpcyBpcyBw YXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6 IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KQWNrZWQtYnk6IERhbmllbCBQLiBTbWl0aCA8ZHBzbWl0aEBhcGVy dHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24vc3lzY3RsLmMK KysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNDIsNyArNDIsNyBAQCBs b25nIGRvX3N5c2N0bChYRU5fR1VFU1RfSEFORExFX1BBUkFNKHhlCiAgICAg aWYgKCBvcC0+aW50ZXJmYWNlX3ZlcnNpb24gIT0gWEVOX1NZU0NUTF9JTlRF UkZBQ0VfVkVSU0lPTiApCiAgICAgICAgIHJldHVybiAtRUFDQ0VTOwogCi0g ICAgcmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3AtPmNtZCk7CisgICAg cmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3ApOwogICAgIGlmICggcmV0 ICkKICAgICAgICAgcmV0dXJuIHJldDsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTgwLDcgKzE4MCw4IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVj ayB4c21fZG9tY3QKICAgICB9CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc3lzY3RsKFhTTV9ERUZBVUxUX0FSRyBpbnQgY21k KQorc3RhdGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9zeXNjdGwo CisgICAgWFNNX0RFRkFVTFRfQVJHIGNvbnN0IHN0cnVjdCB4ZW5fc3lzY3Rs ICpvcCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01fUFJJVik7CiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgTlVMTCk7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAor KysgYi94ZW4vaW5jbHVkZS94c20veHNtLmgKQEAgLTYyLDcgKzYyLDcgQEAg c3RydWN0IHhzbV9vcHMgewogICAgIGludCAoKnNldF90YXJnZXQpKHN0cnVj dCBkb21haW4gKmQsIHN0cnVjdCBkb21haW4gKmUpOwogICAgIGludCAoKmRv bWN0bCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IHhlbl9kb21jdGwgKm9w KTsKICNpZmRlZiBDT05GSUdfU1lTQ1RMCi0gICAgaW50ICgqc3lzY3RsKShp bnQgY21kKTsKKyAgICBpbnQgKCpzeXNjdGwpKGNvbnN0IHN0cnVjdCB4ZW5f c3lzY3RsICpvcCk7CiAgICAgaW50ICgqcmVhZGNvbnNvbGUpKHVpbnQzMl90 IGNsZWFyKTsKICNlbmRpZgogCkBAIC0yNTEsOSArMjUxLDkgQEAgc3RhdGlj IGlubGluZSBpbnQgeHNtX2RvbWN0bCh4c21fZGVmYXVsdAogfQogCiAjaWZk ZWYgQ09ORklHX1NZU0NUTAotc3RhdGljIGlubGluZSBpbnQgeHNtX3N5c2N0 bCh4c21fZGVmYXVsdF90IGRlZiwgaW50IGNtZCkKK3N0YXRpYyBpbmxpbmUg aW50IHhzbV9zeXNjdGwoeHNtX2RlZmF1bHRfdCBkZWYsIGNvbnN0IHN0cnVj dCB4ZW5fc3lzY3RsICpvcCkKIHsKLSAgICByZXR1cm4gYWx0ZXJuYXRpdmVf Y2FsbCh4c21fb3BzLnN5c2N0bCwgY21kKTsKKyAgICByZXR1cm4gYWx0ZXJu YXRpdmVfY2FsbCh4c21fb3BzLnN5c2N0bCwgb3ApOwogfQogCiBzdGF0aWMg aW5saW5lIGludCB4c21fcmVhZGNvbnNvbGUoeHNtX2RlZmF1bHRfdCBkZWYs IHVpbnQzMl90IGNsZWFyKQotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMK KysrIGIveGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC04NzIsOSArODcyLDkg QEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19kb21jdGwoc3RydWN0CiB9 CiAKICNpZmRlZiBDT05GSUdfU1lTQ1RMCi1zdGF0aWMgaW50IGNmX2NoZWNr IGZsYXNrX3N5c2N0bChpbnQgY21kKQorc3RhdGljIGludCBjZl9jaGVjayBm bGFza19zeXNjdGwoY29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKQogewot ICAgIHN3aXRjaCAoIGNtZCApCisgICAgc3dpdGNoICggb3AtPmNtZCApCiAg ICAgewogICAgIC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBYU00gaG9va3Mg Ki8KICAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6CkBAIC05NDIs NyArOTQyLDcgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwo aW50IGNtZAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg WEVOMl9fQ09WRVJBR0VfT1AsIE5VTEwpOwogCiAgICAgZGVmYXVsdDoKLSAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oInN5c2N0bCIs IGNtZCk7CisgICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNzaW9u KCJzeXNjdGwiLCBvcC0+Y21kKTsKICAgICB9CiB9CiAK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-3.patch" Content-Disposition: attachment; filename="xsa499/xsa499-3.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5zY2hlZHVsZXJfb3AoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3NjaGVkL2NvcmUuYworKysgYi94ZW4vY29tbW9uL3NjaGVkL2NvcmUuYwpA QCAtMjEyMiwxMCArMjEyMiw2IEBAIGxvbmcgc2NoZWRfYWRqdXN0X2dsb2Jh bChzdHJ1Y3QgeGVuX3N5c2MKICAgICBzdHJ1Y3QgY3B1cG9vbCAqcG9vbDsK ICAgICBpbnQgcmM7CiAKLSAgICByYyA9IHhzbV9zeXNjdGxfc2NoZWR1bGVy X29wKFhTTV9IT09LLCBvcC0+Y21kKTsKLSAgICBpZiAoIHJjICkKLSAgICAg ICAgcmV0dXJuIHJjOwotCiAgICAgaWYgKCAob3AtPmNtZCAhPSBYRU5fU1lT Q1RMX1NDSEVET1BfcHV0aW5mbykgJiYKICAgICAgICAgIChvcC0+Y21kICE9 IFhFTl9TWVNDVExfU0NIRURPUF9nZXRpbmZvKSApCiAgICAgICAgIHJldHVy biAtRUlOVkFMOwotLS0gYS94ZW4vaW5jbHVkZS94c20vZHVtbXkuaAorKysg Yi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAtMTQxLDEyICsxNDEsNiBA QCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX2dldGRvCiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgZCk7CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcChYU01fREVGQVVMVF9BUkcg aW50IGNtZCkKLXsKLSAgICBYU01fQVNTRVJUX0FDVElPTihYU01fSE9PSyk7 Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJl bnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc2V0X3RhcmdldCgKICAgICBYU01fREVGQVVMVF9B Ukcgc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSkKIHsKLS0t IGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hz bS94c20uaApAQCAtNTYsOSArNTYsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCB4ZW5fZG9t Y3RsX2dldGRvbWFpbmluZm8gKmluZm8pOwogICAgIGludCAoKmRvbWFpbl9j cmVhdGUpKHN0cnVjdCBkb21haW4gKmQsIHVpbnQzMl90IHNzaWRyZWYpOwog ICAgIGludCAoKmdldGRvbWFpbmluZm8pKHN0cnVjdCBkb21haW4gKmQpOwot I2lmZGVmIENPTkZJR19TWVNDVEwKLSAgICBpbnQgKCpzeXNjdGxfc2NoZWR1 bGVyX29wKShpbnQgb3ApOwotI2VuZGlmCiAgICAgaW50ICgqc2V0X3Rhcmdl dCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSk7CiAgICAg aW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3QgeGVuX2Rv bWN0bCAqb3ApOwogI2lmZGVmIENPTkZJR19TWVNDVEwKQEAgLTIzMSwxMyAr MjI4LDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX2dldF9kb21haW5fc3Rh dGUoeAogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZ2V0 X2RvbWFpbl9zdGF0ZSwgZCk7CiB9CiAKLSNpZmRlZiBDT05GSUdfU1lTQ1RM Ci1zdGF0aWMgaW5saW5lIGludCB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcCh4 c21fZGVmYXVsdF90IGRlZiwgaW50IGNtZCkKLXsKLSAgICByZXR1cm4gYWx0 ZXJuYXRpdmVfY2FsbCh4c21fb3BzLnN5c2N0bF9zY2hlZHVsZXJfb3AsIGNt ZCk7Ci19Ci0jZW5kaWYKLQogc3RhdGljIGlubGluZSBpbnQgeHNtX3NldF90 YXJnZXQoCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHN0cnVjdCBkb21haW4g KmQsIHN0cnVjdCBkb21haW4gKmUpCiB7Ci0tLSBhL3hlbi94c20vZHVtbXku YworKysgYi94ZW4veHNtL2R1bW15LmMKQEAgLTE4LDkgKzE4LDYgQEAgc3Rh dGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5z ZWN1cml0eV9kb21haW5pbmZvICAgICAgICAgICA9IHhzbV9zZWN1cml0eV9k b21haW5pbmZvLAogICAgIC5kb21haW5fY3JlYXRlICAgICAgICAgICAgICAg ICA9IHhzbV9kb21haW5fY3JlYXRlLAogICAgIC5nZXRkb21haW5pbmZvICAg ICAgICAgICAgICAgICA9IHhzbV9nZXRkb21haW5pbmZvLAotI2lmZGVmIENP TkZJR19TWVNDVEwKLSAgICAuc3lzY3RsX3NjaGVkdWxlcl9vcCAgICAgICAg ICAgPSB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcCwKLSNlbmRpZgogICAgIC5z ZXRfdGFyZ2V0ICAgICAgICAgICAgICAgICAgICA9IHhzbV9zZXRfdGFyZ2V0 LAogICAgIC5kb21jdGwgICAgICAgICAgICAgICAgICAgICAgICA9IHhzbV9k b21jdGwsCiAjaWZkZWYgQ09ORklHX1NZU0NUTAotLS0gYS94ZW4veHNtL2Zs YXNrL2hvb2tzLmMKKysrIGIveGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC02 MDYsNyArNjA2LDcgQEAgc3RhdGljIGludCBmbGFza19kb21jdGxfc2NoZWR1 bGVyX29wKHN0cgogfQogCiAjaWZkZWYgQ09ORklHX1NZU0NUTAotc3RhdGlj IGludCBjZl9jaGVjayBmbGFza19zeXNjdGxfc2NoZWR1bGVyX29wKGludCBv cCkKK3N0YXRpYyBpbnQgZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9vcCh1bnNp Z25lZCBpbnQgb3ApCiB7CiAgICAgc3dpdGNoICggb3AgKQogICAgIHsKQEAg LTg4MCw3ICs4ODAsNiBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5 c2N0bChjb25zdCBzCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRjb25zb2xl OgogICAgIGNhc2UgWEVOX1NZU0NUTF9nZXRkb21haW5pbmZvbGlzdDoKICAg ICBjYXNlIFhFTl9TWVNDVExfcGFnZV9vZmZsaW5lX29wOgotICAgIGNhc2Ug WEVOX1NZU0NUTF9zY2hlZHVsZXJfb3A6CiAjaWZkZWYgQ09ORklHX1g4Ngog ICAgIGNhc2UgWEVOX1NZU0NUTF9jcHVfaG90cGx1ZzoKICNlbmRpZgpAQCAt OTE2LDYgKzkxNSw5IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lz Y3RsKGNvbnN0IHMKICAgICBjYXNlIFhFTl9TWVNDVExfY3B1cG9vbF9vcDoK ICAgICAgICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJlbnQtPmRvbWFp biwgWEVOX19DUFVQT09MX09QKTsKIAorICAgIGNhc2UgWEVOX1NZU0NUTF9z Y2hlZHVsZXJfb3A6CisgICAgICAgIHJldHVybiBmbGFza19zeXNjdGxfc2No ZWR1bGVyX29wKG9wLT51LnNjaGVkdWxlcl9vcC5jbWQpOworCiAgICAgY2Fz ZSBYRU5fU1lTQ1RMX3BoeXNpbmZvOgogICAgIGNhc2UgWEVOX1NZU0NUTF9j cHV0b3BvaW5mbzoKICAgICBjYXNlIFhFTl9TWVNDVExfbnVtYWluZm86CkBA IC0xODk1LDkgKzE4OTcsNiBAQCBzdGF0aWMgY29uc3Qgc3RydWN0IHhzbV9v cHMgX19pbml0Y29uc3RfCiAgICAgLnNlY3VyaXR5X2RvbWFpbmluZm8gPSBm bGFza19zZWN1cml0eV9kb21haW5pbmZvLAogICAgIC5kb21haW5fY3JlYXRl ID0gZmxhc2tfZG9tYWluX2NyZWF0ZSwKICAgICAuZ2V0ZG9tYWluaW5mbyA9 IGZsYXNrX2dldGRvbWFpbmluZm8sCi0jaWZkZWYgQ09ORklHX1NZU0NUTAot ICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wID0gZmxhc2tfc3lzY3RsX3NjaGVk dWxlcl9vcCwKLSNlbmRpZgogICAgIC5zZXRfdGFyZ2V0ID0gZmxhc2tfc2V0 X3RhcmdldCwKICAgICAuZG9tY3RsID0gZmxhc2tfZG9tY3RsLAogI2lmZGVm IENPTkZJR19TWVNDVEwK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-1.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBwbGF0Zm9ybS1vcC9YU006IG1vdmUgcmVzb3VyY2Uteyx1bn1wbHVnLWNv cmUgY2hlY2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggZmxhc2tf cGxhdGZvcm1fb3AoKTsgdGhlcmUgbmV2ZXIgcmVhbGx5IHdhcyBhCm5lZWQg dG8gZGVmZXIgdGhlc2UgY2hlY2tzLCBhcyB0aGUgc3ViLW9wIGhhcyBhbHdh eXMgYmVlbiBrbm93biB0byB0aGUKZnVuY3Rpb24uIEFzIGEgcG9zaXRpdmUg c2lkZSBlZmZlY3QsIHBlcm1pc3Npb25zIGFyZSB0aGVuIGNoZWNrZWQgYXQg dGhlCnNhbWUgZWFybHkgcG9pbnQgd2l0aCBhbmQgd2l0aG91dCBGbGFzay4K ClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MjcgLyBwYXJ0IG9mIFhTQS00OTkuCgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0 cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGgg PGRwc21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vYXJj aC94ODYvcGxhdGZvcm1faHlwZXJjYWxsLmMKKysrIGIveGVuL2FyY2gveDg2 L3BsYXRmb3JtX2h5cGVyY2FsbC5jCkBAIC02NDQsMTAgKzY0NCw2IEBAIHJl dF90IGRvX3BsYXRmb3JtX29wKAogICAgIHsKICAgICAgICAgaW50IGNwdSA9 IG9wLT51LmNwdV9vbC5jcHVpZDsKIAotICAgICAgICByZXQgPSB4c21fcmVz b3VyY2VfcGx1Z19jb3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQg KQotICAgICAgICAgICAgYnJlYWs7Ci0KICAgICAgICAgaWYgKCBjcHUgPj0g bnJfY3B1X2lkcyB8fCAhY3B1X3ByZXNlbnQoY3B1KSB8fAogICAgICAgICAg ICAgIGNsb2Nrc291cmNlX2lzX3RzYygpICkKICAgICAgICAgewpAQCAtNjcw LDEwICs2NjYsNiBAQCByZXRfdCBkb19wbGF0Zm9ybV9vcCgKICAgICB7CiAg ICAgICAgIGludCBjcHUgPSBvcC0+dS5jcHVfb2wuY3B1aWQ7CiAKLSAgICAg ICAgcmV0ID0geHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9IT09LKTsK LSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAgICAgYnJlYWs7Ci0KICAg ICAgICAgaWYgKCBjcHUgPT0gMCApCiAgICAgICAgIHsKICAgICAgICAgICAg IHJldCA9IC1FT1BOT1RTVVBQOwpAQCAtNjk5LDIwICs2OTEsMTIgQEAgcmV0 X3QgZG9fcGxhdGZvcm1fb3AoCiAgICAgYnJlYWs7CiAKICAgICBjYXNlIFhF TlBGX2NwdV9ob3RhZGQ6Ci0gICAgICAgIHJldCA9IHhzbV9yZXNvdXJjZV9w bHVnX2NvcmUoWFNNX0hPT0spOwotICAgICAgICBpZiAoIHJldCApCi0gICAg ICAgICAgICBicmVhazsKLQogICAgICAgICByZXQgPSBjcHVfYWRkKG9wLT51 LmNwdV9hZGQuYXBpY19pZCwKICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5jcHVfYWRkLmFjcGlfaWQsCiAgICAgICAgICAgICAgICAgICAgICAgb3At PnUuY3B1X2FkZC5weG0pOwotICAgIGJyZWFrOworICAgICAgICBicmVhazsK IAogICAgIGNhc2UgWEVOUEZfbWVtX2hvdGFkZDoKLSAgICAgICAgcmV0ID0g eHNtX3Jlc291cmNlX3BsdWdfY29yZShYU01fSE9PSyk7Ci0gICAgICAgIGlm ICggcmV0ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHJldCA9 IG1lbW9yeV9hZGQob3AtPnUubWVtX2FkZC5zcGZuLAogICAgICAgICAgICAg ICAgICAgICAgIG9wLT51Lm1lbV9hZGQuZXBmbiwKICAgICAgICAgICAgICAg ICAgICAgICBvcC0+dS5tZW1fYWRkLnB4bSk7Ci0tLSBhL3hlbi94c20vZmxh c2svaG9va3MuYworKysgYi94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKQEAgLTE1 NTEsMTIgKzE1NTEsMTMgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19w bGF0Zm9ybV9vcCh1aQogICAgIHN3aXRjaCAoIG9wICkKICAgICB7CiAjaWZk ZWYgQ09ORklHX1g4NgotICAgIC8qIFRoZXNlIG9wZXJhdGlvbnMgaGF2ZSB0 aGVpciBvd24gWFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5QRl9jcHVfb25s aW5lOgotICAgIGNhc2UgWEVOUEZfY3B1X29mZmxpbmU6CiAgICAgY2FzZSBY RU5QRl9jcHVfaG90YWRkOgogICAgIGNhc2UgWEVOUEZfbWVtX2hvdGFkZDoK LSAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIHJldHVybiBmbGFza19yZXNv dXJjZV9wbHVnX2NvcmUoKTsKKworICAgIGNhc2UgWEVOUEZfY3B1X29mZmxp bmU6CisgICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV91bnBsdWdfY29y ZSgpOwogI2VuZGlmCiAKICAgICBjYXNlIFhFTlBGX3NldHRpbWUzMjoK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-2.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBwYXNzIGZ1bGwgc3RydWN0IHhlbl9zeXNjdGwgdG8g eHNtX3N5c2N0bCgpCgpTdWJzZXF1ZW50bHkgc29tZSBzdWItb3BzIHdpbGwg d2FudCB0byBpbnNwZWN0IHRoZWlyIHN1Yi1zdWItb3BzLgoKVGhpcyBpcyBw YXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6 IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KQWNrZWQtYnk6IERhbmllbCBQLiBTbWl0aCA8ZHBzbWl0aEBhcGVy dHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24vc3lzY3RsLmMK KysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNDIsNyArNDIsNyBAQCBs b25nIGRvX3N5c2N0bChYRU5fR1VFU1RfSEFORExFX1BBUkFNKHhlCiAgICAg aWYgKCBvcC0+aW50ZXJmYWNlX3ZlcnNpb24gIT0gWEVOX1NZU0NUTF9JTlRF UkZBQ0VfVkVSU0lPTiApCiAgICAgICAgIHJldHVybiAtRUFDQ0VTOwogCi0g ICAgcmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3AtPmNtZCk7CisgICAg cmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3ApOwogICAgIGlmICggcmV0 ICkKICAgICAgICAgcmV0dXJuIHJldDsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTc4LDcgKzE3OCw4IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVj ayB4c21fZG9tY3QKICAgICB9CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc3lzY3RsKFhTTV9ERUZBVUxUX0FSRyBpbnQgY21k KQorc3RhdGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9zeXNjdGwo CisgICAgWFNNX0RFRkFVTFRfQVJHIGNvbnN0IHN0cnVjdCB4ZW5fc3lzY3Rs ICpvcCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01fUFJJVik7CiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgTlVMTCk7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAor KysgYi94ZW4vaW5jbHVkZS94c20veHNtLmgKQEAgLTYwLDcgKzYwLDcgQEAg c3RydWN0IHhzbV9vcHMgewogICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJf b3ApKGludCBvcCk7CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRv bWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3Rs KShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwot ICAgIGludCAoKnN5c2N0bCkoaW50IGNtZCk7CisgICAgaW50ICgqc3lzY3Rs KShjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAqb3ApOwogICAgIGludCAoKnJl YWRjb25zb2xlKSh1aW50MzJfdCBjbGVhcik7CiAKICAgICBpbnQgKCpldnRj aG5fdW5ib3VuZCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGV2dGNobiAq Y2huLCBkb21pZF90IGlkMik7CkBAIC0yMzcsOSArMjM3LDkgQEAgc3RhdGlj IGlubGluZSBpbnQgeHNtX2RvbWN0bCh4c21fZGVmYXVsdAogICAgIHJldHVy biBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZG9tY3RsLCBkLCBvcCk7CiB9 CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNjdGwoeHNtX2RlZmF1bHRf dCBkZWYsIGludCBjbWQpCitzdGF0aWMgaW5saW5lIGludCB4c21fc3lzY3Rs KHhzbV9kZWZhdWx0X3QgZGVmLCBjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAq b3ApCiB7Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5z eXNjdGwsIGNtZCk7CisgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNt X29wcy5zeXNjdGwsIG9wKTsKIH0KIAogc3RhdGljIGlubGluZSBpbnQgeHNt X3JlYWRjb25zb2xlKHhzbV9kZWZhdWx0X3QgZGVmLCB1aW50MzJfdCBjbGVh cikKLS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20v Zmxhc2svaG9va3MuYwpAQCAtODg5LDkgKzg4OSw5IEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfZG9tY3RsKHN0cnVjdAogICAgIH0KIH0KIAotc3Rh dGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoaW50IGNtZCkKK3N0YXRp YyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHN0cnVjdCB4ZW5f c3lzY3RsICpvcCkKIHsKLSAgICBzd2l0Y2ggKCBjbWQgKQorICAgIHN3aXRj aCAoIG9wLT5jbWQgKQogICAgIHsKICAgICAvKiBUaGVzZSBoYXZlIGluZGl2 aWR1YWwgWFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRj b25zb2xlOgpAQCAtOTYzLDcgKzk2Myw3IEBAIHN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfc3lzY3RsKGludCBjbWQKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFhFTjJfX0NPVkVSQUdFX09QLCBOVUxMKTsKIAog ICAgIGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJt aXNzaW9uKCJzeXNjdGwiLCBjbWQpOworICAgICAgICByZXR1cm4gYXZjX3Vu a25vd25fcGVybWlzc2lvbigic3lzY3RsIiwgb3AtPmNtZCk7CiAgICAgfQog fQogCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-3.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-3.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5zY2hlZHVsZXJfb3AoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3NjaGVkL2NvcmUuYworKysgYi94ZW4vY29tbW9uL3NjaGVkL2NvcmUuYwpA QCAtMjA4OSwxMCArMjA4OSw2IEBAIGxvbmcgc2NoZWRfYWRqdXN0X2dsb2Jh bChzdHJ1Y3QgeGVuX3N5c2MKICAgICBzdHJ1Y3QgY3B1cG9vbCAqcG9vbDsK ICAgICBpbnQgcmM7CiAKLSAgICByYyA9IHhzbV9zeXNjdGxfc2NoZWR1bGVy X29wKFhTTV9IT09LLCBvcC0+Y21kKTsKLSAgICBpZiAoIHJjICkKLSAgICAg ICAgcmV0dXJuIHJjOwotCiAgICAgaWYgKCAob3AtPmNtZCAhPSBYRU5fU1lT Q1RMX1NDSEVET1BfcHV0aW5mbykgJiYKICAgICAgICAgIChvcC0+Y21kICE9 IFhFTl9TWVNDVExfU0NIRURPUF9nZXRpbmZvKSApCiAgICAgICAgIHJldHVy biAtRUlOVkFMOwotLS0gYS94ZW4vaW5jbHVkZS94c20vZHVtbXkuaAorKysg Yi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAtMTQxLDEyICsxNDEsNiBA QCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX2dldGRvCiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgZCk7CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcChYU01fREVGQVVMVF9BUkcg aW50IGNtZCkKLXsKLSAgICBYU01fQVNTRVJUX0FDVElPTihYU01fSE9PSyk7 Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJl bnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc2V0X3RhcmdldCgKICAgICBYU01fREVGQVVMVF9B Ukcgc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSkKIHsKLS0t IGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hz bS94c20uaApAQCAtNTcsNyArNTcsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCB4ZW5fZG9t Y3RsX2dldGRvbWFpbmluZm8gKmluZm8pOwogICAgIGludCAoKmRvbWFpbl9j cmVhdGUpKHN0cnVjdCBkb21haW4gKmQsIHVpbnQzMl90IHNzaWRyZWYpOwog ICAgIGludCAoKmdldGRvbWFpbmluZm8pKHN0cnVjdCBkb21haW4gKmQpOwot ICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJfb3ApKGludCBvcCk7CiAgICAg aW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRv bWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9tYWluICpk LCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5c2N0bCko Y29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKQEAgLTIyMCwxMSArMjE5 LDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX2dldGRvbWFpbmluZm8oeHNt XwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZ2V0ZG9t YWluaW5mbywgZCk7CiB9CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wKHhzbV9kZWZhdWx0X3QgZGVmLCBpbnQgY21kKQot ewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuc3lzY3Rs X3NjaGVkdWxlcl9vcCwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBpbnQg eHNtX3NldF90YXJnZXQoCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHN0cnVj dCBkb21haW4gKmQsIHN0cnVjdCBkb21haW4gKmUpCiB7Ci0tLSBhL3hlbi94 c20vZHVtbXkuYworKysgYi94ZW4veHNtL2R1bW15LmMKQEAgLTE4LDcgKzE4 LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0 XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvICAgICAgICAgICA9IHhzbV9z ZWN1cml0eV9kb21haW5pbmZvLAogICAgIC5kb21haW5fY3JlYXRlICAgICAg ICAgICAgICAgICA9IHhzbV9kb21haW5fY3JlYXRlLAogICAgIC5nZXRkb21h aW5pbmZvICAgICAgICAgICAgICAgICA9IHhzbV9nZXRkb21haW5pbmZvLAot ICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wICAgICAgICAgICA9IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wLAogICAgIC5zZXRfdGFyZ2V0ICAgICAgICAgICAg ICAgICAgICA9IHhzbV9zZXRfdGFyZ2V0LAogICAgIC5kb21jdGwgICAgICAg ICAgICAgICAgICAgICAgICA9IHhzbV9kb21jdGwsCiAgICAgLnN5c2N0bCAg ICAgICAgICAgICAgICAgICAgICAgID0geHNtX3N5c2N0bCwKLS0tIGEveGVu L3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3Mu YwpAQCAtNjM2LDcgKzYzNiw3IEBAIHN0YXRpYyBpbnQgZmxhc2tfZG9tY3Rs X3NjaGVkdWxlcl9vcChzdHIKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9vcChpbnQgb3ApCitzdGF0 aWMgaW50IGZsYXNrX3N5c2N0bF9zY2hlZHVsZXJfb3AodW5zaWduZWQgaW50 IG9wKQogewogICAgIHN3aXRjaCAoIG9wICkKICAgICB7CkBAIC04OTcsNyAr ODk3LDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoY29u c3QgcwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKICAgICBj YXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2FzZSBY RU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICBjYXNlIFhFTl9TWVND VExfc2NoZWR1bGVyX29wOgogI2lmZGVmIENPTkZJR19YODYKICAgICBjYXNl IFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6CiAjZW5kaWYKQEAgLTkzMyw2ICs5 MzIsOSBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25z dCBzCiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdXBvb2xfb3A6CiAgICAgICAg IHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9f Q1BVUE9PTF9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVNDVExfc2NoZWR1bGVy X29wOgorICAgICAgICByZXR1cm4gZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9v cChvcC0+dS5zY2hlZHVsZXJfb3AuY21kKTsKKwogICAgIGNhc2UgWEVOX1NZ U0NUTF9waHlzaW5mbzoKICAgICBjYXNlIFhFTl9TWVNDVExfY3B1dG9wb2lu Zm86CiAgICAgY2FzZSBYRU5fU1lTQ1RMX251bWFpbmZvOgpAQCAtMTg5NSw3 ICsxODk3LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5p dGNvbnN0XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvID0gZmxhc2tfc2Vj dXJpdHlfZG9tYWluaW5mbywKICAgICAuZG9tYWluX2NyZWF0ZSA9IGZsYXNr X2RvbWFpbl9jcmVhdGUsCiAgICAgLmdldGRvbWFpbmluZm8gPSBmbGFza19n ZXRkb21haW5pbmZvLAotICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wID0gZmxh c2tfc3lzY3RsX3NjaGVkdWxlcl9vcCwKICAgICAuc2V0X3RhcmdldCA9IGZs YXNrX3NldF90YXJnZXQsCiAgICAgLmRvbWN0bCA9IGZsYXNrX2RvbWN0bCwK ICAgICAuc3lzY3RsID0gZmxhc2tfc3lzY3RsLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-4.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-4.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvRmxhc2s6IGFkZCBwcmVsaW1pbmFyeSBjaGVjayBmb3IgWEVO X1NZU0NUTF9nZXRkb21haW5pbmZvbGlzdAoKVG8gc2hpZWxkIHRoZSBzeXNj dGwgbG9jayBmcm9tIGFidXNlIGJ5IHVuYXV0aG9yaXplZCBkb21haW5zLCBm b2xsb3cgd2hhdAo1MTU0ZmRkYTExMjQgKCJkb21jdGw6IHByb3RlY3QgbG9j a2luZyBmb3IgZ2V0X2RvbWFpbl9zdGF0ZSIpIGRpZDogQ2hlY2sKZm9yIHBl cm1pc3Npb24gdG8gaXNzdWUgdGhlIG9wZXJhdGlvbiBhZ2FpbnN0IERPTV9Y RU4gaW4gZmxhc2tfc3lzY3RsKCkuClRoZSBmaW5lci1ncmFpbmVkIHhzbV9n ZXRkb21haW5pbmZvKCkgbGF0ZXIgaW4gdGhlIGhhbmRsaW5nIG9mIHRoZSBz dWItb3AKcmVtYWlucyB1bmFsdGVyZWQuCgpJbiB0aGUgaW4tdHJlZSBwb2xp Y3kgcmVzcGVjdGl2ZSBwZXJtaXNzaW9uIHRoZXJlZm9yZSBuZWVkcyBncmFu dGluZy4KClRoaXMgaXMgcGFydCBvZiBDVkUtMjAyNi02MjQyNiAvIFhTQS00 OTkuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29v cGVyM0BjaXRyaXguY29tPgpBY2tlZC1ieTogRGFuaWVsIFAuIFNtaXRoIDxk cHNtaXRoQGFwZXJ0dXNzb2x1dGlvbnMuY29tPgoKLS0tIGEvdG9vbHMvZmxh c2svcG9saWN5L21vZHVsZXMveGVuLmlmCisrKyBiL3Rvb2xzL2ZsYXNrL3Bv bGljeS9tb2R1bGVzL3hlbi5pZgpAQCAtOTAsNiArOTAsNyBAQCBkZWZpbmUo YGNyZWF0ZV9kb21haW5fYnVpbGRfbGFiZWwnLCBgCiAjIG1hbmFnZV9kb21h aW4ocHJpdiwgdGFyZ2V0KQogIyAgIEFsbG93IG1hbmFnaW5nIGEgcnVubmlu ZyBkb21haW4KIGRlZmluZShgbWFuYWdlX2RvbWFpbicsIGAKKwlhbGxvdyAk MSBkb214ZW5fdDpkb21haW4gZ2V0ZG9tYWluaW5mbzsKIAlhbGxvdyAkMSAk Mjpkb21haW4geyBnZXRkb21haW5pbmZvIGdldHZjcHVpbmZvIGdldGFmZmlu aXR5CiAJCQlnZXRhZGRyc2l6ZSBwYXVzZSB1bnBhdXNlIHRyaWdnZXIgc2h1 dGRvd24gZGVzdHJveQogCQkJc2V0YWZmaW5pdHkgc2V0ZG9tYWlubWF4bWVt IGdldHNjaGVkdWxlciByZXN1bWUKLS0tIGEveGVuL3hzbS9mbGFzay9ob29r cy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3MuYwpAQCAtODk1LDcgKzg5 NSw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0 IHMKICAgICB7CiAgICAgLyogVGhlc2UgaGF2ZSBpbmRpdmlkdWFsIFhTTSBo b29rcyAqLwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKLSAg ICBjYXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2Fz ZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRlZiBDT05GSUdf WDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVnOgpAQCAtOTQy LDYgKzk0MSw5IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3Rs KGNvbnN0IHMKICAgICBjYXNlIFhFTl9TWVNDVExfZ2V0X2NwdV9wb2xpY3k6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sIFhFTl9fUEhZU0lORk8pOwogCisgICAgY2FzZSBYRU5fU1lTQ1RMX2dl dGRvbWFpbmluZm9saXN0OgorICAgICAgICByZXR1cm4gZmxhc2tfZ2V0ZG9t YWluaW5mbyhkb21feGVuKTsKKwogICAgIGNhc2UgWEVOX1NZU0NUTF9wc3Jf Y210X29wOgogICAgICAgICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0o U0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1hFTjIsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBYRU4yX19QU1JfQ01UX09QLCBOVUxM KTsK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-5.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZWFkY29uc29sZSgpIGhvb2sKCkludGVn cmF0ZSB0aGUgY2hlY2tpbmcgd2l0aCB4c21fc3lzY3RsKCksIG5vdyB0aGF0 IGl0IGhhcyB0aGUgZnVsbCBvcApzdHJ1Y3QgcGFzc2VkLiBBcyBhIHBvc2l0 aXZlIHNpZGUgZWZmZWN0LCBwZXJtaXNzaW9ucyBhcmUgdGhlbiBjaGVja2Vk IGF0CnRoZSBzYW1lIGVhcmx5IHBvaW50IHdpdGggYW5kIHdpdGhvdXQgRmxh c2suCgpUaGlzIGlzIHBhcnQgb2YgQ1ZFLTIwMjYtNjI0MjYgLyBYU0EtNDk5 LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2Uu Y29tPgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3Bl cjNAY2l0cml4LmNvbT4KQWNrZWQtQnk6IERhbmllbCBQLiBTbWl0aCA8ZHBz bWl0aEBhcGVydHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24v c3lzY3RsLmMKKysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNTksMTAg KzU5LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJB TSh4ZQogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsKICAgICBjYXNl IFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6Ci0gICAgICAgIHJldCA9IHhzbV9y ZWFkY29uc29sZShYU01fSE9PSywgb3AtPnUucmVhZGNvbnNvbGUuY2xlYXIp OwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAgICAgICBicmVhazsKLQog ICAgICAgICByZXQgPSByZWFkX2NvbnNvbGVfcmluZygmb3AtPnUucmVhZGNv bnNvbGUpOwogICAgICAgICBicmVhazsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTc5LDEyICsxNzksNiBAQCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hl Y2sgeHNtX3N5c2N0CiAgICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihh Y3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7CiB9CiAKLXN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fcmVhZGNvbnNvbGUoWFNNX0RF RkFVTFRfQVJHIHVpbnQzMl90IGNsZWFyKQotewotICAgIFhTTV9BU1NFUlRf QUNUSU9OKFhTTV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0 aW9uKGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3Rh dGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9hbGxvY19zZWN1cml0 eV9kb21haW4oc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICByZXR1cm4gMDsK LS0tIGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRl L3hzbS94c20uaApAQCAtNjAsNyArNjAsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3Ry dWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9t YWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5 c2N0bCkoY29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKLSAgICBpbnQg KCpyZWFkY29uc29sZSkodWludDMyX3QgY2xlYXIpOwogCiAgICAgaW50ICgq ZXZ0Y2huX3VuYm91bmQpKHN0cnVjdCBkb21haW4gKmQsIHN0cnVjdCBldnRj aG4gKmNobiwgZG9taWRfdCBpZDIpOwogICAgIGludCAoKmV2dGNobl9pbnRl cmRvbWFpbikoc3RydWN0IGRvbWFpbiAqZDEsIHN0cnVjdCBldnRjaG4gKmNo bjEsCkBAIC0yMzYsMTEgKzIzNSw2IEBAIHN0YXRpYyBpbmxpbmUgaW50IHhz bV9zeXNjdGwoeHNtX2RlZmF1bHQKICAgICByZXR1cm4gYWx0ZXJuYXRpdmVf Y2FsbCh4c21fb3BzLnN5c2N0bCwgb3ApOwogfQogCi1zdGF0aWMgaW5saW5l IGludCB4c21fcmVhZGNvbnNvbGUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNsZWFyKQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhz bV9vcHMucmVhZGNvbnNvbGUsIGNsZWFyKTsKLX0KLQogc3RhdGljIGlubGlu ZSBpbnQgeHNtX2V2dGNobl91bmJvdW5kKAogICAgIHhzbV9kZWZhdWx0X3Qg ZGVmLCBzdHJ1Y3QgZG9tYWluICpkMSwgc3RydWN0IGV2dGNobiAqY2huLCBk b21pZF90IGlkMikKIHsKLS0tIGEveGVuL3hzbS9kdW1teS5jCisrKyBiL3hl bi94c20vZHVtbXkuYwpAQCAtMjEsNyArMjEsNiBAQCBzdGF0aWMgY29uc3Qg c3RydWN0IHhzbV9vcHMgX19pbml0Y29uc3RfCiAgICAgLnNldF90YXJnZXQg ICAgICAgICAgICAgICAgICAgID0geHNtX3NldF90YXJnZXQsCiAgICAgLmRv bWN0bCAgICAgICAgICAgICAgICAgICAgICAgID0geHNtX2RvbWN0bCwKICAg ICAuc3lzY3RsICAgICAgICAgICAgICAgICAgICAgICAgPSB4c21fc3lzY3Rs LAotICAgIC5yZWFkY29uc29sZSAgICAgICAgICAgICAgICAgICA9IHhzbV9y ZWFkY29uc29sZSwKIAogICAgIC5ldnRjaG5fdW5ib3VuZCAgICAgICAgICAg ICAgICA9IHhzbV9ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVy ZG9tYWluICAgICAgICAgICAgPSB4c21fZXZ0Y2huX2ludGVyZG9tYWluLAot LS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysrIGIveGVuL3hzbS9mbGFz ay9ob29rcy5jCkBAIC04OTQsMTMgKzg5NCwxOCBAQCBzdGF0aWMgaW50IGNm X2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgc3dpdGNoICggb3At PmNtZCApCiAgICAgewogICAgIC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBY U00gaG9va3MgKi8KLSAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRl ZiBDT05GSUdfWDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVn OgogI2VuZGlmCiAgICAgICAgIHJldHVybiAwOwogCisgICAgY2FzZSBYRU5f U1lTQ1RMX3JlYWRjb25zb2xlOgorICAgICAgICByZXR1cm4gZG9tYWluX2hh c194ZW4oY3VycmVudC0+ZG9tYWluLAorICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgWEVOX19SRUFEQ09OU09MRSB8CisgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAob3AtPnUucmVhZGNvbnNvbGUuY2xlYXIgPyBYRU5f X0NMRUFSQ09OU09MRQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDogMCkpOworCiAgICAgY2FzZSBY RU5fU1lTQ1RMX3RidWZfb3A6CiAgICAgICAgIHJldHVybiBkb21haW5faGFz X3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9fVEJVRkNPTlRST0wpOwogCkBA IC05NzEsMTYgKzk3Niw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tf c3lzY3RsKGNvbnN0IHMKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfcmVhZGNvbnNvbGUodWludDMyX3QgY2xlYXIpCi17Ci0gICAg dWludDMyX3QgcGVybXMgPSBYRU5fX1JFQURDT05TT0xFOwotCi0gICAgaWYg KCBjbGVhciApCi0gICAgICAgIHBlcm1zIHw9IFhFTl9fQ0xFQVJDT05TT0xF OwotCi0gICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJlbnQtPmRvbWFp biwgcGVybXMpOwotfQotCiBzdGF0aWMgaW5saW5lIHVpbnQzMl90IHJlc291 cmNlX3RvX3Blcm0odWludDhfdCBhY2Nlc3MpCiB7CiAgICAgaWYgKCBhY2Nl c3MgKQpAQCAtMTkwMiw3ICsxODk3LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVj dCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5zZXRfdGFyZ2V0ID0gZmxh c2tfc2V0X3RhcmdldCwKICAgICAuZG9tY3RsID0gZmxhc2tfZG9tY3RsLAog ICAgIC5zeXNjdGwgPSBmbGFza19zeXNjdGwsCi0gICAgLnJlYWRjb25zb2xl ID0gZmxhc2tfcmVhZGNvbnNvbGUsCiAKICAgICAuZXZ0Y2huX3VuYm91bmQg PSBmbGFza19ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVyZG9t YWluID0gZmxhc2tfZXZ0Y2huX2ludGVyZG9tYWluLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-6.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-6.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZXNvdXJjZV97LHVufXBsdWdfY29yZSgp IGhvb2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0 bCgpLCBub3cgdGhhdCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3Nl ZC4gQXMgYSBwb3NpdGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJl IHRoZW4gY2hlY2tlZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFu ZCB3aXRob3V0IEZsYXNrLiBOb3RlIHRoYXQgdGhlc2Ugd2VyZSB4ODYtCm9u bHksIGkuZS4gc29tZSBkZWFkL3VucmVhY2hhYmxlIGNvZGUgZ2V0cyBlbGlt aW5hdGVkIGZvciAoaW4gcGFydGljdWxhcikKQXJtLgoKVGhpcyBpcyBwYXJ0 IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CkFj a2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRwc21pdGhAYXBlcnR1c3NvbHV0 aW9ucy5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvc3lzY3RsLmMKKysrIGIv eGVuL2FyY2gveDg2L3N5c2N0bC5jCkBAIC0xMTgsMjAgKzExOCwxNyBAQCBs b25nIGFyY2hfZG9fc3lzY3RsKAogICAgIHsKICAgICAgICAgdW5zaWduZWQg aW50IGNwdSA9IHN5c2N0bC0+dS5jcHVfaG90cGx1Zy5jcHU7CiAgICAgICAg IHVuc2lnbmVkIGludCBvcCAgPSBzeXNjdGwtPnUuY3B1X2hvdHBsdWcub3A7 Ci0gICAgICAgIGJvb2wgcGx1ZzsKICAgICAgICAgbG9uZyAoKmZuKSh2b2lk ICopOwogICAgICAgICB2b2lkICpoY3B1OwogCiAgICAgICAgIHN3aXRjaCAo IG9wICkKICAgICAgICAgewogICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfT05MSU5FOgotICAgICAgICAgICAgcGx1ZyA9IHRydWU7CiAg ICAgICAgICAgICBmbiA9IGNwdV91cF9oZWxwZXI7CiAgICAgICAgICAgICBo Y3B1ID0gX3AoY3B1KTsKICAgICAgICAgICAgIGJyZWFrOwogCiAgICAgICAg IGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19PRkZMSU5FOgotICAgICAg ICAgICAgcGx1ZyA9IGZhbHNlOwogICAgICAgICAgICAgZm4gPSBjcHVfZG93 bl9oZWxwZXI7CiAgICAgICAgICAgICBoY3B1ID0gX3AoY3B1KTsKICAgICAg ICAgICAgIGJyZWFrOwpAQCAtMTUxLDkgKzE0OCw4IEBAIGxvbmcgYXJjaF9k b19zeXNjdGwoCiAgICAgICAgICAgICBpZiAoIENPTkZJR19OUl9DUFVTIDw9 IDEgKQogICAgICAgICAgICAgICAgIC8qIE1pbWljIGJlaGF2aW9yIG9mIHNt dF91cF9kb3duX2hlbHBlcigpLiAqLwogICAgICAgICAgICAgICAgIHJldHVy biAwOwotICAgICAgICAgICAgcGx1ZyA9IG9wID09IFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfU01UX0VOQUJMRTsKICAgICAgICAgICAgIGZuID0gc210X3Vw X2Rvd25faGVscGVyOwotICAgICAgICAgICAgaGNwdSA9IF9wKHBsdWcpOwor ICAgICAgICAgICAgaGNwdSA9IF9wKG9wID09IFhFTl9TWVNDVExfQ1BVX0hP VFBMVUdfU01UX0VOQUJMRSk7CiAgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBkZWZhdWx0OgpAQCAtMTYyLDEwICsxNTgsNiBAQCBsb25nIGFyY2hf ZG9fc3lzY3RsKAogICAgICAgICB9CiAKICAgICAgICAgaWYgKCAhcmV0ICkK LSAgICAgICAgICAgIHJldCA9IHBsdWcgPyB4c21fcmVzb3VyY2VfcGx1Z19j b3JlKFhTTV9IT09LKQotICAgICAgICAgICAgICAgICAgICAgICA6IHhzbV9y ZXNvdXJjZV91bnBsdWdfY29yZShYU01fSE9PSyk7Ci0KLSAgICAgICAgaWYg KCAhcmV0ICkKICAgICAgICAgICAgIHJldCA9IGNvbnRpbnVlX2h5cGVyY2Fs bF9vbl9jcHUoMCwgZm4sIGhjcHUpOwogICAgIH0KICAgICBicmVhazsKLS0t IGEveGVuL2luY2x1ZGUveHNtL2R1bW15LmgKKysrIGIveGVuL2luY2x1ZGUv eHNtL2R1bW15LmgKQEAgLTM5NSwxOCArMzk1LDYgQEAgc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9nZXRfZAogfQogI2VuZGlmIC8qIEhB U19QQVNTVEhST1VHSCAmJiBIQVNfUENJICovCiAKLXN0YXRpYyBYU01fSU5M SU5FIGludCBjZl9jaGVjayB4c21fcmVzb3VyY2VfcGx1Z19jb3JlKFhTTV9E RUZBVUxUX1ZPSUQpCi17Ci0gICAgWFNNX0FTU0VSVF9BQ1RJT04oWFNNX0hP T0spOwotICAgIHJldHVybiB4c21fZGVmYXVsdF9hY3Rpb24oYWN0aW9uLCBj dXJyZW50LT5kb21haW4sIE5VTEwpOwotfQotCi1zdGF0aWMgWFNNX0lOTElO RSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9E RUZBVUxUX1ZPSUQpCi17Ci0gICAgWFNNX0FTU0VSVF9BQ1RJT04oWFNNX0hP T0spOwotICAgIHJldHVybiB4c21fZGVmYXVsdF9hY3Rpb24oYWN0aW9uLCBj dXJyZW50LT5kb21haW4sIE5VTEwpOwotfQotCiBzdGF0aWMgWFNNX0lOTElO RSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3BsdWdfcGNpKAogICAgIFhT TV9ERUZBVUxUX0FSRyB1aW50MzJfdCBtYWNoaW5lX2JkZikKIHsKLS0tIGEv eGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS94 c20uaApAQCAtMTIxLDggKzEyMSw2IEBAIHN0cnVjdCB4c21fb3BzIHsKICAg ICBpbnQgKCpnZXRfZGV2aWNlX2dyb3VwKSh1aW50MzJfdCBtYWNoaW5lX2Jk Zik7CiAjZW5kaWYKIAotICAgIGludCAoKnJlc291cmNlX3BsdWdfY29yZSko dm9pZCk7Ci0gICAgaW50ICgqcmVzb3VyY2VfdW5wbHVnX2NvcmUpKHZvaWQp OwogICAgIGludCAoKnJlc291cmNlX3BsdWdfcGNpKSh1aW50MzJfdCBtYWNo aW5lX2JkZik7CiAgICAgaW50ICgqcmVzb3VyY2VfdW5wbHVnX3BjaSkodWlu dDMyX3QgbWFjaGluZV9iZGYpOwogICAgIGludCAoKnJlc291cmNlX3NldHVw X3BjaSkodWludDMyX3QgbWFjaGluZV9iZGYpOwpAQCAtNTAwLDE2ICs0OTgs NiBAQCBzdGF0aWMgaW5saW5lIGludCB4c21fcmVzb3VyY2VfdW5wbHVnX3Bj CiAgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5yZXNvdXJj ZV91bnBsdWdfcGNpLCBtYWNoaW5lX2JkZik7CiB9CiAKLXN0YXRpYyBpbmxp bmUgaW50IHhzbV9yZXNvdXJjZV9wbHVnX2NvcmUoeHNtX2RlZmF1bHRfdCBk ZWYpCi17Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5y ZXNvdXJjZV9wbHVnX2NvcmUpOwotfQotCi1zdGF0aWMgaW5saW5lIGludCB4 c21fcmVzb3VyY2VfdW5wbHVnX2NvcmUoeHNtX2RlZmF1bHRfdCBkZWYpCi17 Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5yZXNvdXJj ZV91bnBsdWdfY29yZSk7Ci19Ci0KIHN0YXRpYyBpbmxpbmUgaW50IHhzbV9y ZXNvdXJjZV9zZXR1cF9wY2koCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHVp bnQzMl90IG1hY2hpbmVfYmRmKQogewotLS0gYS94ZW4veHNtL2R1bW15LmMK KysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC03Niw4ICs3Niw2IEBAIHN0YXRp YyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAuZ2V0 X2RldmljZV9ncm91cCAgICAgICAgICAgICAgPSB4c21fZ2V0X2RldmljZV9n cm91cCwKICNlbmRpZgogCi0gICAgLnJlc291cmNlX3BsdWdfY29yZSAgICAg ICAgICAgID0geHNtX3Jlc291cmNlX3BsdWdfY29yZSwKLSAgICAucmVzb3Vy Y2VfdW5wbHVnX2NvcmUgICAgICAgICAgPSB4c21fcmVzb3VyY2VfdW5wbHVn X2NvcmUsCiAgICAgLnJlc291cmNlX3BsdWdfcGNpICAgICAgICAgICAgID0g eHNtX3Jlc291cmNlX3BsdWdfcGNpLAogICAgIC5yZXNvdXJjZV91bnBsdWdf cGNpICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV91bnBsdWdfcGNpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9wY2kgICAgICAgICAgICA9IHhzbV9yZXNvdXJj ZV9zZXR1cF9wY2ksCi0tLSBhL3hlbi94c20vZmxhc2svaG9va3MuYworKysg Yi94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKQEAgLTU2LDYgKzU2LDkgQEAgc3Rh dGljIGludCBmbGFza19kZWFzc2lnbl9kdGRldmljZShzdHJ1YwogI2VuZGlm CiAjZW5kaWYgLyogQ09ORklHX0hBU19QQVNTVEhST1VHSCAqLwogCitzdGF0 aWMgaW50IGZsYXNrX3Jlc291cmNlX3BsdWdfY29yZSh2b2lkKTsKK3N0YXRp YyBpbnQgZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUodm9pZCk7CisKIHN0 YXRpYyB1aW50MzJfdCBkb21haW5fc2lkKGNvbnN0IHN0cnVjdCBkb21haW4g KmRvbSkKIHsKICAgICBzdHJ1Y3QgZG9tYWluX3NlY3VyaXR5X3N0cnVjdCAq ZHNlYyA9IGRvbS0+c3NpZDsKQEAgLTg5NSw5ICs4OTgsNiBAQCBzdGF0aWMg aW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgewogICAg IC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBYU00gaG9va3MgKi8KICAgICBj YXNlIFhFTl9TWVNDVExfcGFnZV9vZmZsaW5lX29wOgotI2lmZGVmIENPTkZJ R19YODYKLSAgICBjYXNlIFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6Ci0jZW5k aWYKICAgICAgICAgcmV0dXJuIDA7CiAKICAgICBjYXNlIFhFTl9TWVNDVExf cmVhZGNvbnNvbGU6CkBAIC05NDksNiArOTQ5LDIzIEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICBjYXNlIFhFTl9T WVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgICAgIHJldHVybiBmbGFz a19nZXRkb21haW5pbmZvKGRvbV94ZW4pOwogCisjaWZkZWYgQ09ORklHX1g4 NgorICAgIGNhc2UgWEVOX1NZU0NUTF9jcHVfaG90cGx1ZzoKKyAgICAgICAg c3dpdGNoICggb3AtPnUuY3B1X2hvdHBsdWcub3AgKQorICAgICAgICB7Cisg ICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19PTkxJTkU6Cisg ICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19TTVRfRU5BQkxF OgorICAgICAgICAgICAgcmV0dXJuIGZsYXNrX3Jlc291cmNlX3BsdWdfY29y ZSgpOworCisgICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19P RkZMSU5FOgorICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdf U01UX0RJU0FCTEU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tfcmVzb3Vy Y2VfdW5wbHVnX2NvcmUoKTsKKworICAgICAgICBkZWZhdWx0OgorICAgICAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oImNwdV9ob3Rw bHVnIiwgb3AtPnUuY3B1X2hvdHBsdWcub3ApOworICAgICAgICB9CisjZW5k aWYKKwogICAgIGNhc2UgWEVOX1NZU0NUTF9wc3JfY210X29wOgogICAgICAg ICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4s IFNFQ0NMQVNTX1hFTjIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBYRU4yX19QU1JfQ01UX09QLCBOVUxMKTsKQEAgLTEyMjYsMTIg KzEyNDMsMTIgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19wY2lfY29u ZmlnX3BlcgogCiB9CiAKLXN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfcmVz b3VyY2VfcGx1Z19jb3JlKHZvaWQpCitzdGF0aWMgaW50IGZsYXNrX3Jlc291 cmNlX3BsdWdfY29yZSh2b2lkKQogewogICAgIHJldHVybiBhdmNfY3VycmVu dF9oYXNfcGVybShTRUNJTklUU0lEX0RPTVhFTiwgU0VDQ0xBU1NfUkVTT1VS Q0UsIFJFU09VUkNFX19QTFVHLCBOVUxMKTsKIH0KIAotc3RhdGljIGludCBj Zl9jaGVjayBmbGFza19yZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKQorc3Rh dGljIGludCBmbGFza19yZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKQogewog ICAgIHJldHVybiBhdmNfY3VycmVudF9oYXNfcGVybShTRUNJTklUU0lEX0RP TVhFTiwgU0VDQ0xBU1NfUkVTT1VSQ0UsIFJFU09VUkNFX19VTlBMVUcsIE5V TEwpOwogfQpAQCAtMTk0Nyw4ICsxOTY0LDYgQEAgc3RhdGljIGNvbnN0IHN0 cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5pb21lbV9tYXBwaW5n ID0gZmxhc2tfaW9tZW1fbWFwcGluZywKICAgICAucGNpX2NvbmZpZ19wZXJt aXNzaW9uID0gZmxhc2tfcGNpX2NvbmZpZ19wZXJtaXNzaW9uLAogCi0gICAg LnJlc291cmNlX3BsdWdfY29yZSA9IGZsYXNrX3Jlc291cmNlX3BsdWdfY29y ZSwKLSAgICAucmVzb3VyY2VfdW5wbHVnX2NvcmUgPSBmbGFza19yZXNvdXJj ZV91bnBsdWdfY29yZSwKICAgICAucmVzb3VyY2VfcGx1Z19wY2kgPSBmbGFz a19yZXNvdXJjZV9wbHVnX3BjaSwKICAgICAucmVzb3VyY2VfdW5wbHVnX3Bj aSA9IGZsYXNrX3Jlc291cmNlX3VucGx1Z19wY2ksCiAgICAgLnJlc291cmNl X3NldHVwX3BjaSA9IGZsYXNrX3Jlc291cmNlX3NldHVwX3BjaSwK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.17-7.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.17-7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5wYWdlX29mZmxpbmUoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3N5c2N0bC5jCisrKyBiL3hlbi9jb21tb24vc3lzY3RsLmMKQEAgLTE4Nywx MCArMTg3LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9Q QVJBTSh4ZQogICAgICAgICBpZiAoIG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg PCBvcC0+dS5wYWdlX29mZmxpbmUuc3RhcnQgKQogICAgICAgICAgICAgYnJl YWs7CiAKLSAgICAgICAgcmV0ID0geHNtX3BhZ2Vfb2ZmbGluZShYU01fSE9P Sywgb3AtPnUucGFnZV9vZmZsaW5lLmNtZCk7Ci0gICAgICAgIGlmICggcmV0 ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHB0ciA9IHN0YXR1 cyA9IHhtYWxsb2NfYXJyYXkodWludDMyX3QsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg LQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5wYWdlX29mZmxpbmUuc3RhcnQgKyAxKSk7Ci0tLSBhL3hlbi9pbmNsdWRl L3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCkBA IC00MjgsMTIgKzQyOCw2IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fcmVzb3UKICAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9u KGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKIH0KIAotc3RhdGlj IFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9wYWdlX29mZmxpbmUoWFNN X0RFRkFVTFRfQVJHIHVpbnQzMl90IGNtZCkKLXsKLSAgICBYU01fQVNTRVJU X0FDVElPTihYU01fSE9PSyk7Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2Fj dGlvbihhY3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0 YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVjayB4c21faHlwZnNfb3AoWFNN X0RFRkFVTFRfVk9JRCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01f UFJJVik7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4v aW5jbHVkZS94c20veHNtLmgKQEAgLTEyNyw3ICsxMjcsNiBAQCBzdHJ1Y3Qg eHNtX29wcyB7CiAgICAgaW50ICgqcmVzb3VyY2Vfc2V0dXBfZ3NpKShpbnQg Z3NpKTsKICAgICBpbnQgKCpyZXNvdXJjZV9zZXR1cF9taXNjKSh2b2lkKTsK IAotICAgIGludCAoKnBhZ2Vfb2ZmbGluZSkodWludDMyX3QgY21kKTsKICAg ICBpbnQgKCpoeXBmc19vcCkodm9pZCk7CiAKICAgICBsb25nICgqZG9feHNt X29wKShYRU5fR1VFU1RfSEFORExFX1BBUkFNKHZvaWQpIG9wKTsKQEAgLTUx NCwxMSArNTEzLDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNl X3NldHVwX21pcwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9v cHMucmVzb3VyY2Vfc2V0dXBfbWlzYyk7CiB9CiAKLXN0YXRpYyBpbmxpbmUg aW50IHhzbV9wYWdlX29mZmxpbmUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNtZCkKLXsKLSAgICByZXR1cm4gYWx0ZXJuYXRpdmVfY2FsbCh4c21f b3BzLnBhZ2Vfb2ZmbGluZSwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBp bnQgeHNtX2h5cGZzX29wKHhzbV9kZWZhdWx0X3QgZGVmKQogewogICAgIHJl dHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuaHlwZnNfb3ApOwotLS0g YS94ZW4veHNtL2R1bW15LmMKKysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC04 Miw3ICs4Miw2IEBAIHN0YXRpYyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2lu aXRjb25zdF8KICAgICAucmVzb3VyY2Vfc2V0dXBfZ3NpICAgICAgICAgICAg PSB4c21fcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAgIC5yZXNvdXJjZV9zZXR1 cF9taXNjICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV9zZXR1cF9taXNjLAog Ci0gICAgLnBhZ2Vfb2ZmbGluZSAgICAgICAgICAgICAgICAgID0geHNtX3Bh Z2Vfb2ZmbGluZSwKICAgICAuaHlwZnNfb3AgICAgICAgICAgICAgICAgICAg ICAgPSB4c21faHlwZnNfb3AsCiAgICAgLmh2bV9wYXJhbSAgICAgICAgICAg ICAgICAgICAgID0geHNtX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSAgICAgICAgICAgPSB4c21faHZtX3BhcmFtX2FsdHAybWh2bSwK LS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxh c2svaG9va3MuYwpAQCAtNTgsNiArNTgsNyBAQCBzdGF0aWMgaW50IGZsYXNr X2RlYXNzaWduX2R0ZGV2aWNlKHN0cnVjCiAKIHN0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfcGx1Z19jb3JlKHZvaWQpOwogc3RhdGljIGludCBmbGFza19y ZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKTsKK3N0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfdXNlX2NvcmUodm9pZCk7CiAKIHN0YXRpYyB1aW50MzJfdCBk b21haW5fc2lkKGNvbnN0IHN0cnVjdCBkb21haW4gKmRvbSkKIHsKQEAgLTg5 NiwxMCArODk3LDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNj dGwoY29uc3QgcwogewogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsK LSAgICAvKiBUaGVzZSBoYXZlIGluZGl2aWR1YWwgWFNNIGhvb2tzICovCi0g ICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICAgICAg cmV0dXJuIDA7Ci0KICAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBYRU5fX1JFQURD T05TT0xFIHwKQEAgLTkzMCw2ICs5MjcsMjMgQEAgc3RhdGljIGludCBjZl9j aGVjayBmbGFza19zeXNjdGwoY29uc3QgcwogICAgIGNhc2UgWEVOX1NZU0NU TF9wbV9vcDoKICAgICAgICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJl bnQtPmRvbWFpbiwgWEVOX19QTV9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVND VExfcGFnZV9vZmZsaW5lX29wOgorICAgICAgICBzd2l0Y2ggKCBvcC0+dS5w YWdlX29mZmxpbmUuY21kICkKKyAgICAgICAgeworICAgICAgICBjYXNlIHN5 c2N0bF9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tf cmVzb3VyY2VfdW5wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0 bF9wYWdlX29ubGluZToKKyAgICAgICAgICAgIHJldHVybiBmbGFza19yZXNv dXJjZV9wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0bF9xdWVy eV9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tfcmVz b3VyY2VfdXNlX2NvcmUoKTsKKworICAgICAgICBkZWZhdWx0OgorICAgICAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oInBhZ2Vfb2Zm bGluZSIsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBvcC0+dS5wYWdlX29mZmxpbmUuY21kKTsKKyAgICAgICAgfQorCiAg ICAgY2FzZSBYRU5fU1lTQ1RMX2xvY2twcm9mX29wOgogICAgICAgICByZXR1 cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBYRU5fX0xPQ0tQ Uk9GKTsKIApAQCAtMTMyMSwyMSArMTMzNSw2IEBAIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfcmVzb3VyY2Vfc2V0dXAKICAgICByZXR1cm4gYXZjX2N1 cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1JFU09V UkNFLCBSRVNPVVJDRV9fU0VUVVAsIE5VTEwpOwogfQogCi1zdGF0aWMgaW5s aW5lIGludCBjZl9jaGVjayBmbGFza19wYWdlX29mZmxpbmUodWludDMyX3Qg Y21kKQotewotICAgIHN3aXRjaCAoIGNtZCApCi0gICAgewotICAgIGNhc2Ug c3lzY3RsX3BhZ2Vfb2ZmbGluZToKLSAgICAgICAgcmV0dXJuIGZsYXNrX3Jl c291cmNlX3VucGx1Z19jb3JlKCk7Ci0gICAgY2FzZSBzeXNjdGxfcGFnZV9v bmxpbmU6Ci0gICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV9wbHVnX2Nv cmUoKTsKLSAgICBjYXNlIHN5c2N0bF9xdWVyeV9wYWdlX29mZmxpbmU6Ci0g ICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV91c2VfY29yZSgpOwotICAg IGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNz aW9uKCJwYWdlX29mZmxpbmUiLCBjbWQpOwotICAgIH0KLX0KLQogc3RhdGlj IGlubGluZSBpbnQgY2ZfY2hlY2sgZmxhc2tfaHlwZnNfb3Aodm9pZCkKIHsK ICAgICByZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBY RU5fX0hZUEZTX09QKTsKQEAgLTE5NzAsNyArMTk2OSw2IEBAIHN0YXRpYyBj b25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAucmVzb3Vy Y2Vfc2V0dXBfZ3NpID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9taXNjID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBf bWlzYywKIAotICAgIC5wYWdlX29mZmxpbmUgPSBmbGFza19wYWdlX29mZmxp bmUsCiAgICAgLmh5cGZzX29wID0gZmxhc2tfaHlwZnNfb3AsCiAgICAgLmh2 bV9wYXJhbSA9IGZsYXNrX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSA9IGZsYXNrX2h2bV9wYXJhbV9hbHRwMm1odm0sCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-1.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBwbGF0Zm9ybS1vcC9YU006IG1vdmUgcmVzb3VyY2Uteyx1bn1wbHVnLWNv cmUgY2hlY2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggZmxhc2tf cGxhdGZvcm1fb3AoKTsgdGhlcmUgbmV2ZXIgcmVhbGx5IHdhcyBhCm5lZWQg dG8gZGVmZXIgdGhlc2UgY2hlY2tzLCBhcyB0aGUgc3ViLW9wIGhhcyBhbHdh eXMgYmVlbiBrbm93biB0byB0aGUKZnVuY3Rpb24uIEFzIGEgcG9zaXRpdmUg c2lkZSBlZmZlY3QsIHBlcm1pc3Npb25zIGFyZSB0aGVuIGNoZWNrZWQgYXQg dGhlCnNhbWUgZWFybHkgcG9pbnQgd2l0aCBhbmQgd2l0aG91dCBGbGFzay4K ClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MjcgLyBwYXJ0IG9mIFhTQS00OTkuCgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0 cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGgg PGRwc21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vYXJj aC94ODYvcGxhdGZvcm1faHlwZXJjYWxsLmMKKysrIGIveGVuL2FyY2gveDg2 L3BsYXRmb3JtX2h5cGVyY2FsbC5jCkBAIC02NzMsMTAgKzY3Myw2IEBAIHJl dF90IGRvX3BsYXRmb3JtX29wKAogICAgIHsKICAgICAgICAgaW50IGNwdSA9 IG9wLT51LmNwdV9vbC5jcHVpZDsKIAotICAgICAgICByZXQgPSB4c21fcmVz b3VyY2VfcGx1Z19jb3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQg KQotICAgICAgICAgICAgYnJlYWs7Ci0KICAgICAgICAgaWYgKCBjcHUgPj0g bnJfY3B1X2lkcyB8fCAhY3B1X3ByZXNlbnQoY3B1KSB8fAogICAgICAgICAg ICAgIGNsb2Nrc291cmNlX2lzX3RzYygpICkKICAgICAgICAgewpAQCAtNjk5 LDEwICs2OTUsNiBAQCByZXRfdCBkb19wbGF0Zm9ybV9vcCgKICAgICB7CiAg ICAgICAgIGludCBjcHUgPSBvcC0+dS5jcHVfb2wuY3B1aWQ7CiAKLSAgICAg ICAgcmV0ID0geHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9IT09LKTsK LSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAgICAgYnJlYWs7Ci0KICAg ICAgICAgaWYgKCBjcHUgPT0gMCApCiAgICAgICAgIHsKICAgICAgICAgICAg IHJldCA9IC1FT1BOT1RTVVBQOwpAQCAtNzI4LDIwICs3MjAsMTIgQEAgcmV0 X3QgZG9fcGxhdGZvcm1fb3AoCiAgICAgYnJlYWs7CiAKICAgICBjYXNlIFhF TlBGX2NwdV9ob3RhZGQ6Ci0gICAgICAgIHJldCA9IHhzbV9yZXNvdXJjZV9w bHVnX2NvcmUoWFNNX0hPT0spOwotICAgICAgICBpZiAoIHJldCApCi0gICAg ICAgICAgICBicmVhazsKLQogICAgICAgICByZXQgPSBjcHVfYWRkKG9wLT51 LmNwdV9hZGQuYXBpY19pZCwKICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5jcHVfYWRkLmFjcGlfaWQsCiAgICAgICAgICAgICAgICAgICAgICAgb3At PnUuY3B1X2FkZC5weG0pOwotICAgIGJyZWFrOworICAgICAgICBicmVhazsK IAogICAgIGNhc2UgWEVOUEZfbWVtX2hvdGFkZDoKLSAgICAgICAgcmV0ID0g eHNtX3Jlc291cmNlX3BsdWdfY29yZShYU01fSE9PSyk7Ci0gICAgICAgIGlm ICggcmV0ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHJldCA9 IG1lbW9yeV9hZGQob3AtPnUubWVtX2FkZC5zcGZuLAogICAgICAgICAgICAg ICAgICAgICAgIG9wLT51Lm1lbV9hZGQuZXBmbiwKICAgICAgICAgICAgICAg ICAgICAgICBvcC0+dS5tZW1fYWRkLnB4bSk7Ci0tLSBhL3hlbi94c20vZmxh c2svaG9va3MuYworKysgYi94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKQEAgLTE1 NTQsMTIgKzE1NTQsMTMgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19w bGF0Zm9ybV9vcCh1aQogICAgIHN3aXRjaCAoIG9wICkKICAgICB7CiAjaWZk ZWYgQ09ORklHX1g4NgotICAgIC8qIFRoZXNlIG9wZXJhdGlvbnMgaGF2ZSB0 aGVpciBvd24gWFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5QRl9jcHVfb25s aW5lOgotICAgIGNhc2UgWEVOUEZfY3B1X29mZmxpbmU6CiAgICAgY2FzZSBY RU5QRl9jcHVfaG90YWRkOgogICAgIGNhc2UgWEVOUEZfbWVtX2hvdGFkZDoK LSAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIHJldHVybiBmbGFza19yZXNv dXJjZV9wbHVnX2NvcmUoKTsKKworICAgIGNhc2UgWEVOUEZfY3B1X29mZmxp bmU6CisgICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV91bnBsdWdfY29y ZSgpOwogI2VuZGlmCiAKICAgICBjYXNlIFhFTlBGX3NldHRpbWUzMjoK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-2.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBwYXNzIGZ1bGwgc3RydWN0IHhlbl9zeXNjdGwgdG8g eHNtX3N5c2N0bCgpCgpTdWJzZXF1ZW50bHkgc29tZSBzdWItb3BzIHdpbGwg d2FudCB0byBpbnNwZWN0IHRoZWlyIHN1Yi1zdWItb3BzLgoKVGhpcyBpcyBw YXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6 IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KQWNrZWQtYnk6IERhbmllbCBQLiBTbWl0aCA8ZHBzbWl0aEBhcGVy dHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24vc3lzY3RsLmMK KysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNDIsNyArNDIsNyBAQCBs b25nIGRvX3N5c2N0bChYRU5fR1VFU1RfSEFORExFX1BBUkFNKHhlCiAgICAg aWYgKCBvcC0+aW50ZXJmYWNlX3ZlcnNpb24gIT0gWEVOX1NZU0NUTF9JTlRF UkZBQ0VfVkVSU0lPTiApCiAgICAgICAgIHJldHVybiAtRUFDQ0VTOwogCi0g ICAgcmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3AtPmNtZCk7CisgICAg cmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3ApOwogICAgIGlmICggcmV0 ICkKICAgICAgICAgcmV0dXJuIHJldDsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTc4LDcgKzE3OCw4IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVj ayB4c21fZG9tY3QKICAgICB9CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc3lzY3RsKFhTTV9ERUZBVUxUX0FSRyBpbnQgY21k KQorc3RhdGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9zeXNjdGwo CisgICAgWFNNX0RFRkFVTFRfQVJHIGNvbnN0IHN0cnVjdCB4ZW5fc3lzY3Rs ICpvcCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01fUFJJVik7CiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgTlVMTCk7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAor KysgYi94ZW4vaW5jbHVkZS94c20veHNtLmgKQEAgLTYwLDcgKzYwLDcgQEAg c3RydWN0IHhzbV9vcHMgewogICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJf b3ApKGludCBvcCk7CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRv bWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3Rs KShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwot ICAgIGludCAoKnN5c2N0bCkoaW50IGNtZCk7CisgICAgaW50ICgqc3lzY3Rs KShjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAqb3ApOwogICAgIGludCAoKnJl YWRjb25zb2xlKSh1aW50MzJfdCBjbGVhcik7CiAKICAgICBpbnQgKCpldnRj aG5fdW5ib3VuZCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGV2dGNobiAq Y2huLCBkb21pZF90IGlkMik7CkBAIC0yMzksOSArMjM5LDkgQEAgc3RhdGlj IGlubGluZSBpbnQgeHNtX2RvbWN0bCh4c21fZGVmYXVsdAogICAgIHJldHVy biBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZG9tY3RsLCBkLCBvcCk7CiB9 CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNjdGwoeHNtX2RlZmF1bHRf dCBkZWYsIGludCBjbWQpCitzdGF0aWMgaW5saW5lIGludCB4c21fc3lzY3Rs KHhzbV9kZWZhdWx0X3QgZGVmLCBjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAq b3ApCiB7Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5z eXNjdGwsIGNtZCk7CisgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNt X29wcy5zeXNjdGwsIG9wKTsKIH0KIAogc3RhdGljIGlubGluZSBpbnQgeHNt X3JlYWRjb25zb2xlKHhzbV9kZWZhdWx0X3QgZGVmLCB1aW50MzJfdCBjbGVh cikKLS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20v Zmxhc2svaG9va3MuYwpAQCAtODkyLDkgKzg5Miw5IEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfZG9tY3RsKHN0cnVjdAogICAgIH0KIH0KIAotc3Rh dGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoaW50IGNtZCkKK3N0YXRp YyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHN0cnVjdCB4ZW5f c3lzY3RsICpvcCkKIHsKLSAgICBzd2l0Y2ggKCBjbWQgKQorICAgIHN3aXRj aCAoIG9wLT5jbWQgKQogICAgIHsKICAgICAvKiBUaGVzZSBoYXZlIGluZGl2 aWR1YWwgWFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRj b25zb2xlOgpAQCAtOTY2LDcgKzk2Niw3IEBAIHN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfc3lzY3RsKGludCBjbWQKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFhFTjJfX0NPVkVSQUdFX09QLCBOVUxMKTsKIAog ICAgIGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJt aXNzaW9uKCJzeXNjdGwiLCBjbWQpOworICAgICAgICByZXR1cm4gYXZjX3Vu a25vd25fcGVybWlzc2lvbigic3lzY3RsIiwgb3AtPmNtZCk7CiAgICAgfQog fQogCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-3.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-3.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5zY2hlZHVsZXJfb3AoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3NjaGVkL2NvcmUuYworKysgYi94ZW4vY29tbW9uL3NjaGVkL2NvcmUuYwpA QCAtMjA4OSwxMCArMjA4OSw2IEBAIGxvbmcgc2NoZWRfYWRqdXN0X2dsb2Jh bChzdHJ1Y3QgeGVuX3N5c2MKICAgICBzdHJ1Y3QgY3B1cG9vbCAqcG9vbDsK ICAgICBpbnQgcmM7CiAKLSAgICByYyA9IHhzbV9zeXNjdGxfc2NoZWR1bGVy X29wKFhTTV9IT09LLCBvcC0+Y21kKTsKLSAgICBpZiAoIHJjICkKLSAgICAg ICAgcmV0dXJuIHJjOwotCiAgICAgaWYgKCAob3AtPmNtZCAhPSBYRU5fU1lT Q1RMX1NDSEVET1BfcHV0aW5mbykgJiYKICAgICAgICAgIChvcC0+Y21kICE9 IFhFTl9TWVNDVExfU0NIRURPUF9nZXRpbmZvKSApCiAgICAgICAgIHJldHVy biAtRUlOVkFMOwotLS0gYS94ZW4vaW5jbHVkZS94c20vZHVtbXkuaAorKysg Yi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAtMTQxLDEyICsxNDEsNiBA QCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX2dldGRvCiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgZCk7CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcChYU01fREVGQVVMVF9BUkcg aW50IGNtZCkKLXsKLSAgICBYU01fQVNTRVJUX0FDVElPTihYU01fSE9PSyk7 Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJl bnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc2V0X3RhcmdldCgKICAgICBYU01fREVGQVVMVF9B Ukcgc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSkKIHsKLS0t IGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hz bS94c20uaApAQCAtNTcsNyArNTcsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCB4ZW5fZG9t Y3RsX2dldGRvbWFpbmluZm8gKmluZm8pOwogICAgIGludCAoKmRvbWFpbl9j cmVhdGUpKHN0cnVjdCBkb21haW4gKmQsIHVpbnQzMl90IHNzaWRyZWYpOwog ICAgIGludCAoKmdldGRvbWFpbmluZm8pKHN0cnVjdCBkb21haW4gKmQpOwot ICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJfb3ApKGludCBvcCk7CiAgICAg aW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRv bWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9tYWluICpk LCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5c2N0bCko Y29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKQEAgLTIyMiwxMSArMjIx LDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX2dldGRvbWFpbmluZm8oeHNt XwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZ2V0ZG9t YWluaW5mbywgZCk7CiB9CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wKHhzbV9kZWZhdWx0X3QgZGVmLCBpbnQgY21kKQot ewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuc3lzY3Rs X3NjaGVkdWxlcl9vcCwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBpbnQg eHNtX3NldF90YXJnZXQoCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHN0cnVj dCBkb21haW4gKmQsIHN0cnVjdCBkb21haW4gKmUpCiB7Ci0tLSBhL3hlbi94 c20vZHVtbXkuYworKysgYi94ZW4veHNtL2R1bW15LmMKQEAgLTE4LDcgKzE4 LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0 XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvICAgICAgICAgICA9IHhzbV9z ZWN1cml0eV9kb21haW5pbmZvLAogICAgIC5kb21haW5fY3JlYXRlICAgICAg ICAgICAgICAgICA9IHhzbV9kb21haW5fY3JlYXRlLAogICAgIC5nZXRkb21h aW5pbmZvICAgICAgICAgICAgICAgICA9IHhzbV9nZXRkb21haW5pbmZvLAot ICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wICAgICAgICAgICA9IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wLAogICAgIC5zZXRfdGFyZ2V0ICAgICAgICAgICAg ICAgICAgICA9IHhzbV9zZXRfdGFyZ2V0LAogICAgIC5kb21jdGwgICAgICAg ICAgICAgICAgICAgICAgICA9IHhzbV9kb21jdGwsCiAgICAgLnN5c2N0bCAg ICAgICAgICAgICAgICAgICAgICAgID0geHNtX3N5c2N0bCwKLS0tIGEveGVu L3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3Mu YwpAQCAtNjM2LDcgKzYzNiw3IEBAIHN0YXRpYyBpbnQgZmxhc2tfZG9tY3Rs X3NjaGVkdWxlcl9vcChzdHIKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9vcChpbnQgb3ApCitzdGF0 aWMgaW50IGZsYXNrX3N5c2N0bF9zY2hlZHVsZXJfb3AodW5zaWduZWQgaW50 IG9wKQogewogICAgIHN3aXRjaCAoIG9wICkKICAgICB7CkBAIC05MDAsNyAr OTAwLDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoY29u c3QgcwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKICAgICBj YXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2FzZSBY RU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICBjYXNlIFhFTl9TWVND VExfc2NoZWR1bGVyX29wOgogI2lmZGVmIENPTkZJR19YODYKICAgICBjYXNl IFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6CiAjZW5kaWYKQEAgLTkzNiw2ICs5 MzUsOSBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25z dCBzCiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdXBvb2xfb3A6CiAgICAgICAg IHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9f Q1BVUE9PTF9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVNDVExfc2NoZWR1bGVy X29wOgorICAgICAgICByZXR1cm4gZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9v cChvcC0+dS5zY2hlZHVsZXJfb3AuY21kKTsKKwogICAgIGNhc2UgWEVOX1NZ U0NUTF9waHlzaW5mbzoKICAgICBjYXNlIFhFTl9TWVNDVExfY3B1dG9wb2lu Zm86CiAgICAgY2FzZSBYRU5fU1lTQ1RMX251bWFpbmZvOgpAQCAtMTkwMiw3 ICsxOTA0LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5p dGNvbnN0XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvID0gZmxhc2tfc2Vj dXJpdHlfZG9tYWluaW5mbywKICAgICAuZG9tYWluX2NyZWF0ZSA9IGZsYXNr X2RvbWFpbl9jcmVhdGUsCiAgICAgLmdldGRvbWFpbmluZm8gPSBmbGFza19n ZXRkb21haW5pbmZvLAotICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wID0gZmxh c2tfc3lzY3RsX3NjaGVkdWxlcl9vcCwKICAgICAuc2V0X3RhcmdldCA9IGZs YXNrX3NldF90YXJnZXQsCiAgICAgLmRvbWN0bCA9IGZsYXNrX2RvbWN0bCwK ICAgICAuc3lzY3RsID0gZmxhc2tfc3lzY3RsLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-4.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-4.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvRmxhc2s6IGFkZCBwcmVsaW1pbmFyeSBjaGVjayBmb3IgWEVO X1NZU0NUTF9nZXRkb21haW5pbmZvbGlzdAoKVG8gc2hpZWxkIHRoZSBzeXNj dGwgbG9jayBmcm9tIGFidXNlIGJ5IHVuYXV0aG9yaXplZCBkb21haW5zLCBm b2xsb3cgd2hhdAo1MTU0ZmRkYTExMjQgKCJkb21jdGw6IHByb3RlY3QgbG9j a2luZyBmb3IgZ2V0X2RvbWFpbl9zdGF0ZSIpIGRpZDogQ2hlY2sKZm9yIHBl cm1pc3Npb24gdG8gaXNzdWUgdGhlIG9wZXJhdGlvbiBhZ2FpbnN0IERPTV9Y RU4gaW4gZmxhc2tfc3lzY3RsKCkuClRoZSBmaW5lci1ncmFpbmVkIHhzbV9n ZXRkb21haW5pbmZvKCkgbGF0ZXIgaW4gdGhlIGhhbmRsaW5nIG9mIHRoZSBz dWItb3AKcmVtYWlucyB1bmFsdGVyZWQuCgpJbiB0aGUgaW4tdHJlZSBwb2xp Y3kgcmVzcGVjdGl2ZSBwZXJtaXNzaW9uIHRoZXJlZm9yZSBuZWVkcyBncmFu dGluZy4KClRoaXMgaXMgcGFydCBvZiBDVkUtMjAyNi02MjQyNiAvIFhTQS00 OTkuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29v cGVyM0BjaXRyaXguY29tPgpBY2tlZC1ieTogRGFuaWVsIFAuIFNtaXRoIDxk cHNtaXRoQGFwZXJ0dXNzb2x1dGlvbnMuY29tPgoKLS0tIGEvdG9vbHMvZmxh c2svcG9saWN5L21vZHVsZXMveGVuLmlmCisrKyBiL3Rvb2xzL2ZsYXNrL3Bv bGljeS9tb2R1bGVzL3hlbi5pZgpAQCAtOTAsNiArOTAsNyBAQCBkZWZpbmUo YGNyZWF0ZV9kb21haW5fYnVpbGRfbGFiZWwnLCBgCiAjIG1hbmFnZV9kb21h aW4ocHJpdiwgdGFyZ2V0KQogIyAgIEFsbG93IG1hbmFnaW5nIGEgcnVubmlu ZyBkb21haW4KIGRlZmluZShgbWFuYWdlX2RvbWFpbicsIGAKKwlhbGxvdyAk MSBkb214ZW5fdDpkb21haW4gZ2V0ZG9tYWluaW5mbzsKIAlhbGxvdyAkMSAk Mjpkb21haW4geyBnZXRkb21haW5pbmZvIGdldHZjcHVpbmZvIGdldGFmZmlu aXR5CiAJCQlnZXRhZGRyc2l6ZSBwYXVzZSB1bnBhdXNlIHRyaWdnZXIgc2h1 dGRvd24gZGVzdHJveQogCQkJc2V0YWZmaW5pdHkgc2V0ZG9tYWlubWF4bWVt IGdldHNjaGVkdWxlciByZXN1bWUKLS0tIGEveGVuL3hzbS9mbGFzay9ob29r cy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3MuYwpAQCAtODk4LDcgKzg5 OCw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0 IHMKICAgICB7CiAgICAgLyogVGhlc2UgaGF2ZSBpbmRpdmlkdWFsIFhTTSBo b29rcyAqLwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKLSAg ICBjYXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2Fz ZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRlZiBDT05GSUdf WDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVnOgpAQCAtOTQ1 LDYgKzk0NCw5IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3Rs KGNvbnN0IHMKICAgICBjYXNlIFhFTl9TWVNDVExfZ2V0X2NwdV9wb2xpY3k6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sIFhFTl9fUEhZU0lORk8pOwogCisgICAgY2FzZSBYRU5fU1lTQ1RMX2dl dGRvbWFpbmluZm9saXN0OgorICAgICAgICByZXR1cm4gZmxhc2tfZ2V0ZG9t YWluaW5mbyhkb21feGVuKTsKKwogICAgIGNhc2UgWEVOX1NZU0NUTF9wc3Jf Y210X29wOgogICAgICAgICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0o U0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1hFTjIsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBYRU4yX19QU1JfQ01UX09QLCBOVUxM KTsK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-5.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZWFkY29uc29sZSgpIGhvb2sKCkludGVn cmF0ZSB0aGUgY2hlY2tpbmcgd2l0aCB4c21fc3lzY3RsKCksIG5vdyB0aGF0 IGl0IGhhcyB0aGUgZnVsbCBvcApzdHJ1Y3QgcGFzc2VkLiBBcyBhIHBvc2l0 aXZlIHNpZGUgZWZmZWN0LCBwZXJtaXNzaW9ucyBhcmUgdGhlbiBjaGVja2Vk IGF0CnRoZSBzYW1lIGVhcmx5IHBvaW50IHdpdGggYW5kIHdpdGhvdXQgRmxh c2suCgpUaGlzIGlzIHBhcnQgb2YgQ1ZFLTIwMjYtNjI0MjYgLyBYU0EtNDk5 LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2Uu Y29tPgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3Bl cjNAY2l0cml4LmNvbT4KQWNrZWQtQnk6IERhbmllbCBQLiBTbWl0aCA8ZHBz bWl0aEBhcGVydHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24v c3lzY3RsLmMKKysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNTksMTAg KzU5LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJB TSh4ZQogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsKICAgICBjYXNl IFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6Ci0gICAgICAgIHJldCA9IHhzbV9y ZWFkY29uc29sZShYU01fSE9PSywgb3AtPnUucmVhZGNvbnNvbGUuY2xlYXIp OwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAgICAgICBicmVhazsKLQog ICAgICAgICByZXQgPSByZWFkX2NvbnNvbGVfcmluZygmb3AtPnUucmVhZGNv bnNvbGUpOwogICAgICAgICBicmVhazsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTc5LDEyICsxNzksNiBAQCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hl Y2sgeHNtX3N5c2N0CiAgICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihh Y3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7CiB9CiAKLXN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fcmVhZGNvbnNvbGUoWFNNX0RF RkFVTFRfQVJHIHVpbnQzMl90IGNsZWFyKQotewotICAgIFhTTV9BU1NFUlRf QUNUSU9OKFhTTV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0 aW9uKGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3Rh dGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9hbGxvY19zZWN1cml0 eV9kb21haW4oc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICByZXR1cm4gMDsK LS0tIGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRl L3hzbS94c20uaApAQCAtNjAsNyArNjAsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3Ry dWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9t YWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5 c2N0bCkoY29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKLSAgICBpbnQg KCpyZWFkY29uc29sZSkodWludDMyX3QgY2xlYXIpOwogCiAgICAgaW50ICgq ZXZ0Y2huX3VuYm91bmQpKHN0cnVjdCBkb21haW4gKmQsIHN0cnVjdCBldnRj aG4gKmNobiwgZG9taWRfdCBpZDIpOwogICAgIGludCAoKmV2dGNobl9pbnRl cmRvbWFpbikoc3RydWN0IGRvbWFpbiAqZDEsIHN0cnVjdCBldnRjaG4gKmNo bjEsCkBAIC0yMzgsMTEgKzIzNyw2IEBAIHN0YXRpYyBpbmxpbmUgaW50IHhz bV9zeXNjdGwoeHNtX2RlZmF1bHQKICAgICByZXR1cm4gYWx0ZXJuYXRpdmVf Y2FsbCh4c21fb3BzLnN5c2N0bCwgb3ApOwogfQogCi1zdGF0aWMgaW5saW5l IGludCB4c21fcmVhZGNvbnNvbGUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNsZWFyKQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhz bV9vcHMucmVhZGNvbnNvbGUsIGNsZWFyKTsKLX0KLQogc3RhdGljIGlubGlu ZSBpbnQgeHNtX2V2dGNobl91bmJvdW5kKAogICAgIHhzbV9kZWZhdWx0X3Qg ZGVmLCBzdHJ1Y3QgZG9tYWluICpkMSwgc3RydWN0IGV2dGNobiAqY2huLCBk b21pZF90IGlkMikKIHsKLS0tIGEveGVuL3hzbS9kdW1teS5jCisrKyBiL3hl bi94c20vZHVtbXkuYwpAQCAtMjEsNyArMjEsNiBAQCBzdGF0aWMgY29uc3Qg c3RydWN0IHhzbV9vcHMgX19pbml0Y29uc3RfCiAgICAgLnNldF90YXJnZXQg ICAgICAgICAgICAgICAgICAgID0geHNtX3NldF90YXJnZXQsCiAgICAgLmRv bWN0bCAgICAgICAgICAgICAgICAgICAgICAgID0geHNtX2RvbWN0bCwKICAg ICAuc3lzY3RsICAgICAgICAgICAgICAgICAgICAgICAgPSB4c21fc3lzY3Rs LAotICAgIC5yZWFkY29uc29sZSAgICAgICAgICAgICAgICAgICA9IHhzbV9y ZWFkY29uc29sZSwKIAogICAgIC5ldnRjaG5fdW5ib3VuZCAgICAgICAgICAg ICAgICA9IHhzbV9ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVy ZG9tYWluICAgICAgICAgICAgPSB4c21fZXZ0Y2huX2ludGVyZG9tYWluLAot LS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysrIGIveGVuL3hzbS9mbGFz ay9ob29rcy5jCkBAIC04OTcsMTMgKzg5NywxOCBAQCBzdGF0aWMgaW50IGNm X2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgc3dpdGNoICggb3At PmNtZCApCiAgICAgewogICAgIC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBY U00gaG9va3MgKi8KLSAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRl ZiBDT05GSUdfWDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVn OgogI2VuZGlmCiAgICAgICAgIHJldHVybiAwOwogCisgICAgY2FzZSBYRU5f U1lTQ1RMX3JlYWRjb25zb2xlOgorICAgICAgICByZXR1cm4gZG9tYWluX2hh c194ZW4oY3VycmVudC0+ZG9tYWluLAorICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgWEVOX19SRUFEQ09OU09MRSB8CisgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAob3AtPnUucmVhZGNvbnNvbGUuY2xlYXIgPyBYRU5f X0NMRUFSQ09OU09MRQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDogMCkpOworCiAgICAgY2FzZSBY RU5fU1lTQ1RMX3RidWZfb3A6CiAgICAgICAgIHJldHVybiBkb21haW5faGFz X3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9fVEJVRkNPTlRST0wpOwogCkBA IC05NzQsMTYgKzk3OSw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tf c3lzY3RsKGNvbnN0IHMKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfcmVhZGNvbnNvbGUodWludDMyX3QgY2xlYXIpCi17Ci0gICAg dWludDMyX3QgcGVybXMgPSBYRU5fX1JFQURDT05TT0xFOwotCi0gICAgaWYg KCBjbGVhciApCi0gICAgICAgIHBlcm1zIHw9IFhFTl9fQ0xFQVJDT05TT0xF OwotCi0gICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJlbnQtPmRvbWFp biwgcGVybXMpOwotfQotCiBzdGF0aWMgaW5saW5lIHVpbnQzMl90IHJlc291 cmNlX3RvX3Blcm0odWludDhfdCBhY2Nlc3MpCiB7CiAgICAgaWYgKCBhY2Nl c3MgKQpAQCAtMTkwOSw3ICsxOTA0LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVj dCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5zZXRfdGFyZ2V0ID0gZmxh c2tfc2V0X3RhcmdldCwKICAgICAuZG9tY3RsID0gZmxhc2tfZG9tY3RsLAog ICAgIC5zeXNjdGwgPSBmbGFza19zeXNjdGwsCi0gICAgLnJlYWRjb25zb2xl ID0gZmxhc2tfcmVhZGNvbnNvbGUsCiAKICAgICAuZXZ0Y2huX3VuYm91bmQg PSBmbGFza19ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVyZG9t YWluID0gZmxhc2tfZXZ0Y2huX2ludGVyZG9tYWluLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-6.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-6.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZXNvdXJjZV97LHVufXBsdWdfY29yZSgp IGhvb2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0 bCgpLCBub3cgdGhhdCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3Nl ZC4gQXMgYSBwb3NpdGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJl IHRoZW4gY2hlY2tlZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFu ZCB3aXRob3V0IEZsYXNrLiBOb3RlIHRoYXQgdGhlc2Ugd2VyZSB4ODYtCm9u bHksIGkuZS4gc29tZSBkZWFkL3VucmVhY2hhYmxlIGNvZGUgZ2V0cyBlbGlt aW5hdGVkIGZvciAoaW4gcGFydGljdWxhcikKQXJtLgoKVGhpcyBpcyBwYXJ0 IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CkFj a2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRwc21pdGhAYXBlcnR1c3NvbHV0 aW9ucy5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvc3lzY3RsLmMKKysrIGIv eGVuL2FyY2gveDg2L3N5c2N0bC5jCkBAIC0xMTcsMjAgKzExNywxNyBAQCBs b25nIGFyY2hfZG9fc3lzY3RsKAogICAgIHsKICAgICAgICAgdW5zaWduZWQg aW50IGNwdSA9IHN5c2N0bC0+dS5jcHVfaG90cGx1Zy5jcHU7CiAgICAgICAg IHVuc2lnbmVkIGludCBvcCAgPSBzeXNjdGwtPnUuY3B1X2hvdHBsdWcub3A7 Ci0gICAgICAgIGJvb2wgcGx1ZzsKICAgICAgICAgbG9uZyAoKmZuKSh2b2lk ICopOwogICAgICAgICB2b2lkICpoY3B1OwogCiAgICAgICAgIHN3aXRjaCAo IG9wICkKICAgICAgICAgewogICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfT05MSU5FOgotICAgICAgICAgICAgcGx1ZyA9IHRydWU7CiAg ICAgICAgICAgICBmbiA9IGNwdV91cF9oZWxwZXI7CiAgICAgICAgICAgICBo Y3B1ID0gX3AoY3B1KTsKICAgICAgICAgICAgIGJyZWFrOwogCiAgICAgICAg IGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19PRkZMSU5FOgotICAgICAg ICAgICAgcGx1ZyA9IGZhbHNlOwogICAgICAgICAgICAgZm4gPSBjcHVfZG93 bl9oZWxwZXI7CiAgICAgICAgICAgICBoY3B1ID0gX3AoY3B1KTsKICAgICAg ICAgICAgIGJyZWFrOwpAQCAtMTUwLDkgKzE0Nyw4IEBAIGxvbmcgYXJjaF9k b19zeXNjdGwoCiAgICAgICAgICAgICBpZiAoIENPTkZJR19OUl9DUFVTIDw9 IDEgKQogICAgICAgICAgICAgICAgIC8qIE1pbWljIGJlaGF2aW9yIG9mIHNt dF91cF9kb3duX2hlbHBlcigpLiAqLwogICAgICAgICAgICAgICAgIHJldHVy biAwOwotICAgICAgICAgICAgcGx1ZyA9IG9wID09IFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfU01UX0VOQUJMRTsKICAgICAgICAgICAgIGZuID0gc210X3Vw X2Rvd25faGVscGVyOwotICAgICAgICAgICAgaGNwdSA9IF9wKHBsdWcpOwor ICAgICAgICAgICAgaGNwdSA9IF9wKG9wID09IFhFTl9TWVNDVExfQ1BVX0hP VFBMVUdfU01UX0VOQUJMRSk7CiAgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBkZWZhdWx0OgpAQCAtMTYxLDEwICsxNTcsNiBAQCBsb25nIGFyY2hf ZG9fc3lzY3RsKAogICAgICAgICB9CiAKICAgICAgICAgaWYgKCAhcmV0ICkK LSAgICAgICAgICAgIHJldCA9IHBsdWcgPyB4c21fcmVzb3VyY2VfcGx1Z19j b3JlKFhTTV9IT09LKQotICAgICAgICAgICAgICAgICAgICAgICA6IHhzbV9y ZXNvdXJjZV91bnBsdWdfY29yZShYU01fSE9PSyk7Ci0KLSAgICAgICAgaWYg KCAhcmV0ICkKICAgICAgICAgICAgIHJldCA9IGNvbnRpbnVlX2h5cGVyY2Fs bF9vbl9jcHUoMCwgZm4sIGhjcHUpOwogICAgIH0KICAgICBicmVhazsKLS0t IGEveGVuL2luY2x1ZGUveHNtL2R1bW15LmgKKysrIGIveGVuL2luY2x1ZGUv eHNtL2R1bW15LmgKQEAgLTM5NSwxOCArMzk1LDYgQEAgc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9nZXRfZAogfQogI2VuZGlmIC8qIEhB U19QQVNTVEhST1VHSCAmJiBIQVNfUENJICovCiAKLXN0YXRpYyBYU01fSU5M SU5FIGludCBjZl9jaGVjayB4c21fcmVzb3VyY2VfcGx1Z19jb3JlKFhTTV9E RUZBVUxUX1ZPSUQpCi17Ci0gICAgWFNNX0FTU0VSVF9BQ1RJT04oWFNNX0hP T0spOwotICAgIHJldHVybiB4c21fZGVmYXVsdF9hY3Rpb24oYWN0aW9uLCBj dXJyZW50LT5kb21haW4sIE5VTEwpOwotfQotCi1zdGF0aWMgWFNNX0lOTElO RSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9E RUZBVUxUX1ZPSUQpCi17Ci0gICAgWFNNX0FTU0VSVF9BQ1RJT04oWFNNX0hP T0spOwotICAgIHJldHVybiB4c21fZGVmYXVsdF9hY3Rpb24oYWN0aW9uLCBj dXJyZW50LT5kb21haW4sIE5VTEwpOwotfQotCiBzdGF0aWMgWFNNX0lOTElO RSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3BsdWdfcGNpKAogICAgIFhT TV9ERUZBVUxUX0FSRyB1aW50MzJfdCBtYWNoaW5lX2JkZikKIHsKLS0tIGEv eGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS94 c20uaApAQCAtMTIzLDggKzEyMyw2IEBAIHN0cnVjdCB4c21fb3BzIHsKICAg ICBpbnQgKCpnZXRfZGV2aWNlX2dyb3VwKSh1aW50MzJfdCBtYWNoaW5lX2Jk Zik7CiAjZW5kaWYKIAotICAgIGludCAoKnJlc291cmNlX3BsdWdfY29yZSko dm9pZCk7Ci0gICAgaW50ICgqcmVzb3VyY2VfdW5wbHVnX2NvcmUpKHZvaWQp OwogICAgIGludCAoKnJlc291cmNlX3BsdWdfcGNpKSh1aW50MzJfdCBtYWNo aW5lX2JkZik7CiAgICAgaW50ICgqcmVzb3VyY2VfdW5wbHVnX3BjaSkodWlu dDMyX3QgbWFjaGluZV9iZGYpOwogICAgIGludCAoKnJlc291cmNlX3NldHVw X3BjaSkodWludDMyX3QgbWFjaGluZV9iZGYpOwpAQCAtNTA4LDE2ICs1MDYs NiBAQCBzdGF0aWMgaW5saW5lIGludCB4c21fcmVzb3VyY2VfdW5wbHVnX3Bj CiAgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5yZXNvdXJj ZV91bnBsdWdfcGNpLCBtYWNoaW5lX2JkZik7CiB9CiAKLXN0YXRpYyBpbmxp bmUgaW50IHhzbV9yZXNvdXJjZV9wbHVnX2NvcmUoeHNtX2RlZmF1bHRfdCBk ZWYpCi17Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5y ZXNvdXJjZV9wbHVnX2NvcmUpOwotfQotCi1zdGF0aWMgaW5saW5lIGludCB4 c21fcmVzb3VyY2VfdW5wbHVnX2NvcmUoeHNtX2RlZmF1bHRfdCBkZWYpCi17 Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5yZXNvdXJj ZV91bnBsdWdfY29yZSk7Ci19Ci0KIHN0YXRpYyBpbmxpbmUgaW50IHhzbV9y ZXNvdXJjZV9zZXR1cF9wY2koCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHVp bnQzMl90IG1hY2hpbmVfYmRmKQogewotLS0gYS94ZW4veHNtL2R1bW15LmMK KysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC03Nyw4ICs3Nyw2IEBAIHN0YXRp YyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAuZ2V0 X2RldmljZV9ncm91cCAgICAgICAgICAgICAgPSB4c21fZ2V0X2RldmljZV9n cm91cCwKICNlbmRpZgogCi0gICAgLnJlc291cmNlX3BsdWdfY29yZSAgICAg ICAgICAgID0geHNtX3Jlc291cmNlX3BsdWdfY29yZSwKLSAgICAucmVzb3Vy Y2VfdW5wbHVnX2NvcmUgICAgICAgICAgPSB4c21fcmVzb3VyY2VfdW5wbHVn X2NvcmUsCiAgICAgLnJlc291cmNlX3BsdWdfcGNpICAgICAgICAgICAgID0g eHNtX3Jlc291cmNlX3BsdWdfcGNpLAogICAgIC5yZXNvdXJjZV91bnBsdWdf cGNpICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV91bnBsdWdfcGNpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9wY2kgICAgICAgICAgICA9IHhzbV9yZXNvdXJj ZV9zZXR1cF9wY2ksCi0tLSBhL3hlbi94c20vZmxhc2svaG9va3MuYworKysg Yi94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKQEAgLTU2LDYgKzU2LDkgQEAgc3Rh dGljIGludCBmbGFza19kZWFzc2lnbl9kdGRldmljZShzdHJ1YwogI2VuZGlm CiAjZW5kaWYgLyogQ09ORklHX0hBU19QQVNTVEhST1VHSCAqLwogCitzdGF0 aWMgaW50IGZsYXNrX3Jlc291cmNlX3BsdWdfY29yZSh2b2lkKTsKK3N0YXRp YyBpbnQgZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUodm9pZCk7CisKIHN0 YXRpYyB1aW50MzJfdCBkb21haW5fc2lkKGNvbnN0IHN0cnVjdCBkb21haW4g KmRvbSkKIHsKICAgICBzdHJ1Y3QgZG9tYWluX3NlY3VyaXR5X3N0cnVjdCAq ZHNlYyA9IGRvbS0+c3NpZDsKQEAgLTg5OCw5ICs5MDEsNiBAQCBzdGF0aWMg aW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgewogICAg IC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBYU00gaG9va3MgKi8KICAgICBj YXNlIFhFTl9TWVNDVExfcGFnZV9vZmZsaW5lX29wOgotI2lmZGVmIENPTkZJ R19YODYKLSAgICBjYXNlIFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6Ci0jZW5k aWYKICAgICAgICAgcmV0dXJuIDA7CiAKICAgICBjYXNlIFhFTl9TWVNDVExf cmVhZGNvbnNvbGU6CkBAIC05NTIsNiArOTUyLDIzIEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICBjYXNlIFhFTl9T WVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgICAgIHJldHVybiBmbGFz a19nZXRkb21haW5pbmZvKGRvbV94ZW4pOwogCisjaWZkZWYgQ09ORklHX1g4 NgorICAgIGNhc2UgWEVOX1NZU0NUTF9jcHVfaG90cGx1ZzoKKyAgICAgICAg c3dpdGNoICggb3AtPnUuY3B1X2hvdHBsdWcub3AgKQorICAgICAgICB7Cisg ICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19PTkxJTkU6Cisg ICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19TTVRfRU5BQkxF OgorICAgICAgICAgICAgcmV0dXJuIGZsYXNrX3Jlc291cmNlX3BsdWdfY29y ZSgpOworCisgICAgICAgIGNhc2UgWEVOX1NZU0NUTF9DUFVfSE9UUExVR19P RkZMSU5FOgorICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdf U01UX0RJU0FCTEU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tfcmVzb3Vy Y2VfdW5wbHVnX2NvcmUoKTsKKworICAgICAgICBkZWZhdWx0OgorICAgICAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oImNwdV9ob3Rw bHVnIiwgb3AtPnUuY3B1X2hvdHBsdWcub3ApOworICAgICAgICB9CisjZW5k aWYKKwogICAgIGNhc2UgWEVOX1NZU0NUTF9wc3JfY210X29wOgogICAgICAg ICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4s IFNFQ0NMQVNTX1hFTjIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBYRU4yX19QU1JfQ01UX09QLCBOVUxMKTsKQEAgLTEyMjksMTIg KzEyNDYsMTIgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19wY2lfY29u ZmlnX3BlcgogCiB9CiAKLXN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfcmVz b3VyY2VfcGx1Z19jb3JlKHZvaWQpCitzdGF0aWMgaW50IGZsYXNrX3Jlc291 cmNlX3BsdWdfY29yZSh2b2lkKQogewogICAgIHJldHVybiBhdmNfY3VycmVu dF9oYXNfcGVybShTRUNJTklUU0lEX0RPTVhFTiwgU0VDQ0xBU1NfUkVTT1VS Q0UsIFJFU09VUkNFX19QTFVHLCBOVUxMKTsKIH0KIAotc3RhdGljIGludCBj Zl9jaGVjayBmbGFza19yZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKQorc3Rh dGljIGludCBmbGFza19yZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKQogewog ICAgIHJldHVybiBhdmNfY3VycmVudF9oYXNfcGVybShTRUNJTklUU0lEX0RP TVhFTiwgU0VDQ0xBU1NfUkVTT1VSQ0UsIFJFU09VUkNFX19VTlBMVUcsIE5V TEwpOwogfQpAQCAtMTk1NSw4ICsxOTcyLDYgQEAgc3RhdGljIGNvbnN0IHN0 cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5pb21lbV9tYXBwaW5n X3ZwY2kgPSBmbGFza19pb21lbV9tYXBwaW5nLAogICAgIC5wY2lfY29uZmln X3Blcm1pc3Npb24gPSBmbGFza19wY2lfY29uZmlnX3Blcm1pc3Npb24sCiAK LSAgICAucmVzb3VyY2VfcGx1Z19jb3JlID0gZmxhc2tfcmVzb3VyY2VfcGx1 Z19jb3JlLAotICAgIC5yZXNvdXJjZV91bnBsdWdfY29yZSA9IGZsYXNrX3Jl c291cmNlX3VucGx1Z19jb3JlLAogICAgIC5yZXNvdXJjZV9wbHVnX3BjaSA9 IGZsYXNrX3Jlc291cmNlX3BsdWdfcGNpLAogICAgIC5yZXNvdXJjZV91bnBs dWdfcGNpID0gZmxhc2tfcmVzb3VyY2VfdW5wbHVnX3BjaSwKICAgICAucmVz b3VyY2Vfc2V0dXBfcGNpID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBfcGNpLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.18-7.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.18-7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5wYWdlX29mZmxpbmUoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3N5c2N0bC5jCisrKyBiL3hlbi9jb21tb24vc3lzY3RsLmMKQEAgLTE4Nywx MCArMTg3LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9Q QVJBTSh4ZQogICAgICAgICBpZiAoIG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg PCBvcC0+dS5wYWdlX29mZmxpbmUuc3RhcnQgKQogICAgICAgICAgICAgYnJl YWs7CiAKLSAgICAgICAgcmV0ID0geHNtX3BhZ2Vfb2ZmbGluZShYU01fSE9P Sywgb3AtPnUucGFnZV9vZmZsaW5lLmNtZCk7Ci0gICAgICAgIGlmICggcmV0 ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHB0ciA9IHN0YXR1 cyA9IHhtYWxsb2NfYXJyYXkodWludDMyX3QsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg LQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5wYWdlX29mZmxpbmUuc3RhcnQgKyAxKSk7Ci0tLSBhL3hlbi9pbmNsdWRl L3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCkBA IC00MjgsMTIgKzQyOCw2IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fcmVzb3UKICAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9u KGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKIH0KIAotc3RhdGlj IFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9wYWdlX29mZmxpbmUoWFNN X0RFRkFVTFRfQVJHIHVpbnQzMl90IGNtZCkKLXsKLSAgICBYU01fQVNTRVJU X0FDVElPTihYU01fSE9PSyk7Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2Fj dGlvbihhY3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0 YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVjayB4c21faHlwZnNfb3AoWFNN X0RFRkFVTFRfVk9JRCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01f UFJJVik7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4v aW5jbHVkZS94c20veHNtLmgKQEAgLTEyOSw3ICsxMjksNiBAQCBzdHJ1Y3Qg eHNtX29wcyB7CiAgICAgaW50ICgqcmVzb3VyY2Vfc2V0dXBfZ3NpKShpbnQg Z3NpKTsKICAgICBpbnQgKCpyZXNvdXJjZV9zZXR1cF9taXNjKSh2b2lkKTsK IAotICAgIGludCAoKnBhZ2Vfb2ZmbGluZSkodWludDMyX3QgY21kKTsKICAg ICBpbnQgKCpoeXBmc19vcCkodm9pZCk7CiAKICAgICBsb25nICgqZG9feHNt X29wKShYRU5fR1VFU1RfSEFORExFX1BBUkFNKHZvaWQpIG9wKTsKQEAgLTUy MiwxMSArNTIxLDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNl X3NldHVwX21pcwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9v cHMucmVzb3VyY2Vfc2V0dXBfbWlzYyk7CiB9CiAKLXN0YXRpYyBpbmxpbmUg aW50IHhzbV9wYWdlX29mZmxpbmUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNtZCkKLXsKLSAgICByZXR1cm4gYWx0ZXJuYXRpdmVfY2FsbCh4c21f b3BzLnBhZ2Vfb2ZmbGluZSwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBp bnQgeHNtX2h5cGZzX29wKHhzbV9kZWZhdWx0X3QgZGVmKQogewogICAgIHJl dHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuaHlwZnNfb3ApOwotLS0g YS94ZW4veHNtL2R1bW15LmMKKysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC04 Myw3ICs4Myw2IEBAIHN0YXRpYyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2lu aXRjb25zdF8KICAgICAucmVzb3VyY2Vfc2V0dXBfZ3NpICAgICAgICAgICAg PSB4c21fcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAgIC5yZXNvdXJjZV9zZXR1 cF9taXNjICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV9zZXR1cF9taXNjLAog Ci0gICAgLnBhZ2Vfb2ZmbGluZSAgICAgICAgICAgICAgICAgID0geHNtX3Bh Z2Vfb2ZmbGluZSwKICAgICAuaHlwZnNfb3AgICAgICAgICAgICAgICAgICAg ICAgPSB4c21faHlwZnNfb3AsCiAgICAgLmh2bV9wYXJhbSAgICAgICAgICAg ICAgICAgICAgID0geHNtX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSAgICAgICAgICAgPSB4c21faHZtX3BhcmFtX2FsdHAybWh2bSwK LS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxh c2svaG9va3MuYwpAQCAtNTgsNiArNTgsNyBAQCBzdGF0aWMgaW50IGZsYXNr X2RlYXNzaWduX2R0ZGV2aWNlKHN0cnVjCiAKIHN0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfcGx1Z19jb3JlKHZvaWQpOwogc3RhdGljIGludCBmbGFza19y ZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKTsKK3N0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfdXNlX2NvcmUodm9pZCk7CiAKIHN0YXRpYyB1aW50MzJfdCBk b21haW5fc2lkKGNvbnN0IHN0cnVjdCBkb21haW4gKmRvbSkKIHsKQEAgLTg5 OSwxMCArOTAwLDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNj dGwoY29uc3QgcwogewogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsK LSAgICAvKiBUaGVzZSBoYXZlIGluZGl2aWR1YWwgWFNNIGhvb2tzICovCi0g ICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICAgICAg cmV0dXJuIDA7Ci0KICAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBYRU5fX1JFQURD T05TT0xFIHwKQEAgLTkzMyw2ICs5MzAsMjMgQEAgc3RhdGljIGludCBjZl9j aGVjayBmbGFza19zeXNjdGwoY29uc3QgcwogICAgIGNhc2UgWEVOX1NZU0NU TF9wbV9vcDoKICAgICAgICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJl bnQtPmRvbWFpbiwgWEVOX19QTV9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVND VExfcGFnZV9vZmZsaW5lX29wOgorICAgICAgICBzd2l0Y2ggKCBvcC0+dS5w YWdlX29mZmxpbmUuY21kICkKKyAgICAgICAgeworICAgICAgICBjYXNlIHN5 c2N0bF9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tf cmVzb3VyY2VfdW5wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0 bF9wYWdlX29ubGluZToKKyAgICAgICAgICAgIHJldHVybiBmbGFza19yZXNv dXJjZV9wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0bF9xdWVy eV9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tfcmVz b3VyY2VfdXNlX2NvcmUoKTsKKworICAgICAgICBkZWZhdWx0OgorICAgICAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oInBhZ2Vfb2Zm bGluZSIsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBvcC0+dS5wYWdlX29mZmxpbmUuY21kKTsKKyAgICAgICAgfQorCiAg ICAgY2FzZSBYRU5fU1lTQ1RMX2xvY2twcm9mX29wOgogICAgICAgICByZXR1 cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBYRU5fX0xPQ0tQ Uk9GKTsKIApAQCAtMTMyNCwyMSArMTMzOCw2IEBAIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfcmVzb3VyY2Vfc2V0dXAKICAgICByZXR1cm4gYXZjX2N1 cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1JFU09V UkNFLCBSRVNPVVJDRV9fU0VUVVAsIE5VTEwpOwogfQogCi1zdGF0aWMgaW5s aW5lIGludCBjZl9jaGVjayBmbGFza19wYWdlX29mZmxpbmUodWludDMyX3Qg Y21kKQotewotICAgIHN3aXRjaCAoIGNtZCApCi0gICAgewotICAgIGNhc2Ug c3lzY3RsX3BhZ2Vfb2ZmbGluZToKLSAgICAgICAgcmV0dXJuIGZsYXNrX3Jl c291cmNlX3VucGx1Z19jb3JlKCk7Ci0gICAgY2FzZSBzeXNjdGxfcGFnZV9v bmxpbmU6Ci0gICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV9wbHVnX2Nv cmUoKTsKLSAgICBjYXNlIHN5c2N0bF9xdWVyeV9wYWdlX29mZmxpbmU6Ci0g ICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV91c2VfY29yZSgpOwotICAg IGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNz aW9uKCJwYWdlX29mZmxpbmUiLCBjbWQpOwotICAgIH0KLX0KLQogc3RhdGlj IGlubGluZSBpbnQgY2ZfY2hlY2sgZmxhc2tfaHlwZnNfb3Aodm9pZCkKIHsK ICAgICByZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBY RU5fX0hZUEZTX09QKTsKQEAgLTE5NzgsNyArMTk3Nyw2IEBAIHN0YXRpYyBj b25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAucmVzb3Vy Y2Vfc2V0dXBfZ3NpID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9taXNjID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBf bWlzYywKIAotICAgIC5wYWdlX29mZmxpbmUgPSBmbGFza19wYWdlX29mZmxp bmUsCiAgICAgLmh5cGZzX29wID0gZmxhc2tfaHlwZnNfb3AsCiAgICAgLmh2 bV9wYXJhbSA9IGZsYXNrX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSA9IGZsYXNrX2h2bV9wYXJhbV9hbHRwMm1odm0sCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-1.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-1.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBwbGF0Zm9ybS1vcC9YU006IG1vdmUgcmVzb3VyY2Uteyx1bn1wbHVnLWNv cmUgY2hlY2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggZmxhc2tf cGxhdGZvcm1fb3AoKTsgdGhlcmUgbmV2ZXIgcmVhbGx5IHdhcyBhCm5lZWQg dG8gZGVmZXIgdGhlc2UgY2hlY2tzLCBhcyB0aGUgc3ViLW9wIGhhcyBhbHdh eXMgYmVlbiBrbm93biB0byB0aGUKZnVuY3Rpb24uIEFzIGEgcG9zaXRpdmUg c2lkZSBlZmZlY3QsIHBlcm1pc3Npb25zIGFyZSB0aGVuIGNoZWNrZWQgYXQg dGhlCnNhbWUgZWFybHkgcG9pbnQgd2l0aCBhbmQgd2l0aG91dCBGbGFzay4K ClRoaXMgaXMgQ1ZFLTIwMjYtNjI0MjcgLyBwYXJ0IG9mIFhTQS00OTkuCgpT aWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5wYXVAY2l0 cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGgg PGRwc21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vYXJj aC94ODYvcGxhdGZvcm1faHlwZXJjYWxsLmMKKysrIGIveGVuL2FyY2gveDg2 L3BsYXRmb3JtX2h5cGVyY2FsbC5jCkBAIC02ODIsMTAgKzY4Miw2IEBAIHJl dF90IGRvX3BsYXRmb3JtX29wKAogICAgIHsKICAgICAgICAgaW50IGNwdSA9 IG9wLT51LmNwdV9vbC5jcHVpZDsKIAotICAgICAgICByZXQgPSB4c21fcmVz b3VyY2VfcGx1Z19jb3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQg KQotICAgICAgICAgICAgYnJlYWs7Ci0KICAgICAgICAgaWYgKCBjcHUgPj0g bnJfY3B1X2lkcyB8fCAhY3B1X3ByZXNlbnQoY3B1KSB8fAogICAgICAgICAg ICAgIGNsb2Nrc291cmNlX2lzX3RzYygpICkKICAgICAgICAgewpAQCAtNzA4 LDEwICs3MDQsNiBAQCByZXRfdCBkb19wbGF0Zm9ybV9vcCgKICAgICB7CiAg ICAgICAgIGludCBjcHUgPSBvcC0+dS5jcHVfb2wuY3B1aWQ7CiAKLSAgICAg ICAgcmV0ID0geHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKFhTTV9IT09LKTsK LSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAgICAgYnJlYWs7Ci0KICAg ICAgICAgaWYgKCBjcHUgPT0gMCApCiAgICAgICAgIHsKICAgICAgICAgICAg IHJldCA9IC1FT1BOT1RTVVBQOwpAQCAtNzM2LDIwICs3MjgsMTIgQEAgcmV0 X3QgZG9fcGxhdGZvcm1fb3AoCiAgICAgfQogCiAgICAgY2FzZSBYRU5QRl9j cHVfaG90YWRkOgotICAgICAgICByZXQgPSB4c21fcmVzb3VyY2VfcGx1Z19j b3JlKFhTTV9IT09LKTsKLSAgICAgICAgaWYgKCByZXQgKQotICAgICAgICAg ICAgYnJlYWs7Ci0KICAgICAgICAgcmV0ID0gY3B1X2FkZChvcC0+dS5jcHVf YWRkLmFwaWNfaWQsCiAgICAgICAgICAgICAgICAgICAgICAgb3AtPnUuY3B1 X2FkZC5hY3BpX2lkLAogICAgICAgICAgICAgICAgICAgICAgIG9wLT51LmNw dV9hZGQucHhtKTsKICAgICAgICAgYnJlYWs7CiAKICAgICBjYXNlIFhFTlBG X21lbV9ob3RhZGQ6Ci0gICAgICAgIHJldCA9IHhzbV9yZXNvdXJjZV9wbHVn X2NvcmUoWFNNX0hPT0spOwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAg ICAgICBicmVhazsKLQogICAgICAgICByZXQgPSBtZW1vcnlfYWRkKG9wLT51 Lm1lbV9hZGQuc3BmbiwKICAgICAgICAgICAgICAgICAgICAgICBvcC0+dS5t ZW1fYWRkLmVwZm4sCiAgICAgICAgICAgICAgICAgICAgICAgb3AtPnUubWVt X2FkZC5weG0pOwotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysrIGIv eGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC0xNTY0LDEyICsxNTY0LDEzIEBA IHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfcGxhdGZvcm1fb3AodWkKICAg ICBzd2l0Y2ggKCBvcCApCiAgICAgewogI2lmZGVmIENPTkZJR19YODYKLSAg ICAvKiBUaGVzZSBvcGVyYXRpb25zIGhhdmUgdGhlaXIgb3duIFhTTSBob29r cyAqLwogICAgIGNhc2UgWEVOUEZfY3B1X29ubGluZToKLSAgICBjYXNlIFhF TlBGX2NwdV9vZmZsaW5lOgogICAgIGNhc2UgWEVOUEZfY3B1X2hvdGFkZDoK ICAgICBjYXNlIFhFTlBGX21lbV9ob3RhZGQ6Ci0gICAgICAgIHJldHVybiAw OworICAgICAgICByZXR1cm4gZmxhc2tfcmVzb3VyY2VfcGx1Z19jb3JlKCk7 CisKKyAgICBjYXNlIFhFTlBGX2NwdV9vZmZsaW5lOgorICAgICAgICByZXR1 cm4gZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUoKTsKICNlbmRpZgogCiAg ICAgY2FzZSBYRU5QRl9zZXR0aW1lMzI6Cg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-2.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-2.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBwYXNzIGZ1bGwgc3RydWN0IHhlbl9zeXNjdGwgdG8g eHNtX3N5c2N0bCgpCgpTdWJzZXF1ZW50bHkgc29tZSBzdWItb3BzIHdpbGwg d2FudCB0byBpbnNwZWN0IHRoZWlyIHN1Yi1zdWItb3BzLgoKVGhpcyBpcyBw YXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYt Ynk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KQWNrZWQtYnk6 IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KQWNrZWQtYnk6IERhbmllbCBQLiBTbWl0aCA8ZHBzbWl0aEBhcGVy dHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24vc3lzY3RsLmMK KysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNDIsNyArNDIsNyBAQCBs b25nIGRvX3N5c2N0bChYRU5fR1VFU1RfSEFORExFX1BBUkFNKHhlCiAgICAg aWYgKCBvcC0+aW50ZXJmYWNlX3ZlcnNpb24gIT0gWEVOX1NZU0NUTF9JTlRF UkZBQ0VfVkVSU0lPTiApCiAgICAgICAgIHJldHVybiAtRUFDQ0VTOwogCi0g ICAgcmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3AtPmNtZCk7CisgICAg cmV0ID0geHNtX3N5c2N0bChYU01fUFJJViwgb3ApOwogICAgIGlmICggcmV0 ICkKICAgICAgICAgcmV0dXJuIHJldDsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTc5LDcgKzE3OSw4IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVj ayB4c21fZG9tY3QKICAgICB9CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc3lzY3RsKFhTTV9ERUZBVUxUX0FSRyBpbnQgY21k KQorc3RhdGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9zeXNjdGwo CisgICAgWFNNX0RFRkFVTFRfQVJHIGNvbnN0IHN0cnVjdCB4ZW5fc3lzY3Rs ICpvcCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01fUFJJVik7CiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgTlVMTCk7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAor KysgYi94ZW4vaW5jbHVkZS94c20veHNtLmgKQEAgLTU5LDcgKzU5LDcgQEAg c3RydWN0IHhzbV9vcHMgewogICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJf b3ApKGludCBvcCk7CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRv bWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3Rs KShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwot ICAgIGludCAoKnN5c2N0bCkoaW50IGNtZCk7CisgICAgaW50ICgqc3lzY3Rs KShjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAqb3ApOwogICAgIGludCAoKnJl YWRjb25zb2xlKSh1aW50MzJfdCBjbGVhcik7CiAKICAgICBpbnQgKCpldnRj aG5fdW5ib3VuZCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGV2dGNobiAq Y2huLCBkb21pZF90IGlkMik7CkBAIC0yMzgsOSArMjM4LDkgQEAgc3RhdGlj IGlubGluZSBpbnQgeHNtX2RvbWN0bCh4c21fZGVmYXVsdAogICAgIHJldHVy biBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZG9tY3RsLCBkLCBvcCk7CiB9 CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNjdGwoeHNtX2RlZmF1bHRf dCBkZWYsIGludCBjbWQpCitzdGF0aWMgaW5saW5lIGludCB4c21fc3lzY3Rs KHhzbV9kZWZhdWx0X3QgZGVmLCBjb25zdCBzdHJ1Y3QgeGVuX3N5c2N0bCAq b3ApCiB7Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNtX29wcy5z eXNjdGwsIGNtZCk7CisgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNt X29wcy5zeXNjdGwsIG9wKTsKIH0KIAogc3RhdGljIGlubGluZSBpbnQgeHNt X3JlYWRjb25zb2xlKHhzbV9kZWZhdWx0X3QgZGVmLCB1aW50MzJfdCBjbGVh cikKLS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20v Zmxhc2svaG9va3MuYwpAQCAtOTAxLDkgKzkwMSw5IEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfZG9tY3RsKHN0cnVjdAogICAgIH0KIH0KIAotc3Rh dGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoaW50IGNtZCkKK3N0YXRp YyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHN0cnVjdCB4ZW5f c3lzY3RsICpvcCkKIHsKLSAgICBzd2l0Y2ggKCBjbWQgKQorICAgIHN3aXRj aCAoIG9wLT5jbWQgKQogICAgIHsKICAgICAvKiBUaGVzZSBoYXZlIGluZGl2 aWR1YWwgWFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRj b25zb2xlOgpAQCAtOTc1LDcgKzk3NSw3IEBAIHN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfc3lzY3RsKGludCBjbWQKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFhFTjJfX0NPVkVSQUdFX09QLCBOVUxMKTsKIAog ICAgIGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJt aXNzaW9uKCJzeXNjdGwiLCBjbWQpOworICAgICAgICByZXR1cm4gYXZjX3Vu a25vd25fcGVybWlzc2lvbigic3lzY3RsIiwgb3AtPmNtZCk7CiAgICAgfQog fQogCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-3.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-3.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5zY2hlZHVsZXJfb3AoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3NjaGVkL2NvcmUuYworKysgYi94ZW4vY29tbW9uL3NjaGVkL2NvcmUuYwpA QCAtMjA4NywxMCArMjA4Nyw2IEBAIGxvbmcgc2NoZWRfYWRqdXN0X2dsb2Jh bChzdHJ1Y3QgeGVuX3N5c2MKICAgICBzdHJ1Y3QgY3B1cG9vbCAqcG9vbDsK ICAgICBpbnQgcmM7CiAKLSAgICByYyA9IHhzbV9zeXNjdGxfc2NoZWR1bGVy X29wKFhTTV9IT09LLCBvcC0+Y21kKTsKLSAgICBpZiAoIHJjICkKLSAgICAg ICAgcmV0dXJuIHJjOwotCiAgICAgaWYgKCAob3AtPmNtZCAhPSBYRU5fU1lT Q1RMX1NDSEVET1BfcHV0aW5mbykgJiYKICAgICAgICAgIChvcC0+Y21kICE9 IFhFTl9TWVNDVExfU0NIRURPUF9nZXRpbmZvKSApCiAgICAgICAgIHJldHVy biAtRUlOVkFMOwotLS0gYS94ZW4vaW5jbHVkZS94c20vZHVtbXkuaAorKysg Yi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAtMTQxLDEyICsxNDEsNiBA QCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX2dldGRvCiAg ICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJlbnQt PmRvbWFpbiwgZCk7CiB9CiAKLXN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fc3lzY3RsX3NjaGVkdWxlcl9vcChYU01fREVGQVVMVF9BUkcg aW50IGNtZCkKLXsKLSAgICBYU01fQVNTRVJUX0FDVElPTihYU01fSE9PSyk7 Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihhY3Rpb24sIGN1cnJl bnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0YXRpYyBYU01fSU5MSU5FIGlu dCBjZl9jaGVjayB4c21fc2V0X3RhcmdldCgKICAgICBYU01fREVGQVVMVF9B Ukcgc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRvbWFpbiAqZSkKIHsKLS0t IGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRlL3hz bS94c20uaApAQCAtNTYsNyArNTYsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7CiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCB4ZW5fZG9t Y3RsX2dldGRvbWFpbmluZm8gKmluZm8pOwogICAgIGludCAoKmRvbWFpbl9j cmVhdGUpKHN0cnVjdCBkb21haW4gKmQsIHVpbnQzMl90IHNzaWRyZWYpOwog ICAgIGludCAoKmdldGRvbWFpbmluZm8pKHN0cnVjdCBkb21haW4gKmQpOwot ICAgIGludCAoKnN5c2N0bF9zY2hlZHVsZXJfb3ApKGludCBvcCk7CiAgICAg aW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGRv bWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9tYWluICpk LCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5c2N0bCko Y29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKQEAgLTIyMSwxMSArMjIw LDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX2dldGRvbWFpbmluZm8oeHNt XwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuZ2V0ZG9t YWluaW5mbywgZCk7CiB9CiAKLXN0YXRpYyBpbmxpbmUgaW50IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wKHhzbV9kZWZhdWx0X3QgZGVmLCBpbnQgY21kKQot ewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuc3lzY3Rs X3NjaGVkdWxlcl9vcCwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBpbnQg eHNtX3NldF90YXJnZXQoCiAgICAgeHNtX2RlZmF1bHRfdCBkZWYsIHN0cnVj dCBkb21haW4gKmQsIHN0cnVjdCBkb21haW4gKmUpCiB7Ci0tLSBhL3hlbi94 c20vZHVtbXkuYworKysgYi94ZW4veHNtL2R1bW15LmMKQEAgLTE4LDcgKzE4 LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5pdGNvbnN0 XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvICAgICAgICAgICA9IHhzbV9z ZWN1cml0eV9kb21haW5pbmZvLAogICAgIC5kb21haW5fY3JlYXRlICAgICAg ICAgICAgICAgICA9IHhzbV9kb21haW5fY3JlYXRlLAogICAgIC5nZXRkb21h aW5pbmZvICAgICAgICAgICAgICAgICA9IHhzbV9nZXRkb21haW5pbmZvLAot ICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wICAgICAgICAgICA9IHhzbV9zeXNj dGxfc2NoZWR1bGVyX29wLAogICAgIC5zZXRfdGFyZ2V0ICAgICAgICAgICAg ICAgICAgICA9IHhzbV9zZXRfdGFyZ2V0LAogICAgIC5kb21jdGwgICAgICAg ICAgICAgICAgICAgICAgICA9IHhzbV9kb21jdGwsCiAgICAgLnN5c2N0bCAg ICAgICAgICAgICAgICAgICAgICAgID0geHNtX3N5c2N0bCwKLS0tIGEveGVu L3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3Mu YwpAQCAtNjM4LDcgKzYzOCw3IEBAIHN0YXRpYyBpbnQgZmxhc2tfZG9tY3Rs X3NjaGVkdWxlcl9vcChzdHIKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9vcChpbnQgb3ApCitzdGF0 aWMgaW50IGZsYXNrX3N5c2N0bF9zY2hlZHVsZXJfb3AodW5zaWduZWQgaW50 IG9wKQogewogICAgIHN3aXRjaCAoIG9wICkKICAgICB7CkBAIC05MDksNyAr OTA5LDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoY29u c3QgcwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKICAgICBj YXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2FzZSBY RU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICBjYXNlIFhFTl9TWVND VExfc2NoZWR1bGVyX29wOgogI2lmZGVmIENPTkZJR19YODYKICAgICBjYXNl IFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6CiAjZW5kaWYKQEAgLTk0NSw2ICs5 NDQsOSBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25z dCBzCiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdXBvb2xfb3A6CiAgICAgICAg IHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9f Q1BVUE9PTF9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVNDVExfc2NoZWR1bGVy X29wOgorICAgICAgICByZXR1cm4gZmxhc2tfc3lzY3RsX3NjaGVkdWxlcl9v cChvcC0+dS5zY2hlZHVsZXJfb3AuY21kKTsKKwogICAgIGNhc2UgWEVOX1NZ U0NUTF9waHlzaW5mbzoKICAgICBjYXNlIFhFTl9TWVNDVExfY3B1dG9wb2lu Zm86CiAgICAgY2FzZSBYRU5fU1lTQ1RMX251bWFpbmZvOgpAQCAtMTkxNiw3 ICsxOTE4LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVjdCB4c21fb3BzIF9faW5p dGNvbnN0XwogICAgIC5zZWN1cml0eV9kb21haW5pbmZvID0gZmxhc2tfc2Vj dXJpdHlfZG9tYWluaW5mbywKICAgICAuZG9tYWluX2NyZWF0ZSA9IGZsYXNr X2RvbWFpbl9jcmVhdGUsCiAgICAgLmdldGRvbWFpbmluZm8gPSBmbGFza19n ZXRkb21haW5pbmZvLAotICAgIC5zeXNjdGxfc2NoZWR1bGVyX29wID0gZmxh c2tfc3lzY3RsX3NjaGVkdWxlcl9vcCwKICAgICAuc2V0X3RhcmdldCA9IGZs YXNrX3NldF90YXJnZXQsCiAgICAgLmRvbWN0bCA9IGZsYXNrX2RvbWN0bCwK ICAgICAuc3lzY3RsID0gZmxhc2tfc3lzY3RsLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-4.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-4.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvRmxhc2s6IGFkZCBwcmVsaW1pbmFyeSBjaGVjayBmb3IgWEVO X1NZU0NUTF9nZXRkb21haW5pbmZvbGlzdAoKVG8gc2hpZWxkIHRoZSBzeXNj dGwgbG9jayBmcm9tIGFidXNlIGJ5IHVuYXV0aG9yaXplZCBkb21haW5zLCBm b2xsb3cgd2hhdAo1MTU0ZmRkYTExMjQgKCJkb21jdGw6IHByb3RlY3QgbG9j a2luZyBmb3IgZ2V0X2RvbWFpbl9zdGF0ZSIpIGRpZDogQ2hlY2sKZm9yIHBl cm1pc3Npb24gdG8gaXNzdWUgdGhlIG9wZXJhdGlvbiBhZ2FpbnN0IERPTV9Y RU4gaW4gZmxhc2tfc3lzY3RsKCkuClRoZSBmaW5lci1ncmFpbmVkIHhzbV9n ZXRkb21haW5pbmZvKCkgbGF0ZXIgaW4gdGhlIGhhbmRsaW5nIG9mIHRoZSBz dWItb3AKcmVtYWlucyB1bmFsdGVyZWQuCgpJbiB0aGUgaW4tdHJlZSBwb2xp Y3kgcmVzcGVjdGl2ZSBwZXJtaXNzaW9uIHRoZXJlZm9yZSBuZWVkcyBncmFu dGluZy4KClRoaXMgaXMgcGFydCBvZiBDVkUtMjAyNi02MjQyNiAvIFhTQS00 OTkuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29v cGVyM0BjaXRyaXguY29tPgpBY2tlZC1ieTogRGFuaWVsIFAuIFNtaXRoIDxk cHNtaXRoQGFwZXJ0dXNzb2x1dGlvbnMuY29tPgoKLS0tIGEvdG9vbHMvZmxh c2svcG9saWN5L21vZHVsZXMveGVuLmlmCisrKyBiL3Rvb2xzL2ZsYXNrL3Bv bGljeS9tb2R1bGVzL3hlbi5pZgpAQCAtOTAsNiArOTAsNyBAQCBkZWZpbmUo YGNyZWF0ZV9kb21haW5fYnVpbGRfbGFiZWwnLCBgCiAjIG1hbmFnZV9kb21h aW4ocHJpdiwgdGFyZ2V0KQogIyAgIEFsbG93IG1hbmFnaW5nIGEgcnVubmlu ZyBkb21haW4KIGRlZmluZShgbWFuYWdlX2RvbWFpbicsIGAKKwlhbGxvdyAk MSBkb214ZW5fdDpkb21haW4gZ2V0ZG9tYWluaW5mbzsKIAlhbGxvdyAkMSAk Mjpkb21haW4geyBnZXRkb21haW5pbmZvIGdldHZjcHVpbmZvIGdldGFmZmlu aXR5CiAJCQlnZXRhZGRyc2l6ZSBwYXVzZSB1bnBhdXNlIHRyaWdnZXIgc2h1 dGRvd24gZGVzdHJveQogCQkJc2V0YWZmaW5pdHkgc2V0ZG9tYWlubWF4bWVt IGdldHNjaGVkdWxlciByZXN1bWUKLS0tIGEveGVuL3hzbS9mbGFzay9ob29r cy5jCisrKyBiL3hlbi94c20vZmxhc2svaG9va3MuYwpAQCAtOTA3LDcgKzkw Nyw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0 IHMKICAgICB7CiAgICAgLyogVGhlc2UgaGF2ZSBpbmRpdmlkdWFsIFhTTSBo b29rcyAqLwogICAgIGNhc2UgWEVOX1NZU0NUTF9yZWFkY29uc29sZToKLSAg ICBjYXNlIFhFTl9TWVNDVExfZ2V0ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2Fz ZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRlZiBDT05GSUdf WDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVnOgpAQCAtOTU0 LDYgKzk1Myw5IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3Rs KGNvbnN0IHMKICAgICBjYXNlIFhFTl9TWVNDVExfZ2V0X2NwdV9wb2xpY3k6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sIFhFTl9fUEhZU0lORk8pOwogCisgICAgY2FzZSBYRU5fU1lTQ1RMX2dl dGRvbWFpbmluZm9saXN0OgorICAgICAgICByZXR1cm4gZmxhc2tfZ2V0ZG9t YWluaW5mbyhkb21feGVuKTsKKwogICAgIGNhc2UgWEVOX1NZU0NUTF9wc3Jf Y210X29wOgogICAgICAgICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0o U0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1hFTjIsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBYRU4yX19QU1JfQ01UX09QLCBOVUxM KTsK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-5.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZWFkY29uc29sZSgpIGhvb2sKCkludGVn cmF0ZSB0aGUgY2hlY2tpbmcgd2l0aCB4c21fc3lzY3RsKCksIG5vdyB0aGF0 IGl0IGhhcyB0aGUgZnVsbCBvcApzdHJ1Y3QgcGFzc2VkLiBBcyBhIHBvc2l0 aXZlIHNpZGUgZWZmZWN0LCBwZXJtaXNzaW9ucyBhcmUgdGhlbiBjaGVja2Vk IGF0CnRoZSBzYW1lIGVhcmx5IHBvaW50IHdpdGggYW5kIHdpdGhvdXQgRmxh c2suCgpUaGlzIGlzIHBhcnQgb2YgQ1ZFLTIwMjYtNjI0MjYgLyBYU0EtNDk5 LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2Uu Y29tPgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3Bl cjNAY2l0cml4LmNvbT4KQWNrZWQtQnk6IERhbmllbCBQLiBTbWl0aCA8ZHBz bWl0aEBhcGVydHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24v c3lzY3RsLmMKKysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNTksMTAg KzU5LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJB TSh4ZQogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsKICAgICBjYXNl IFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6Ci0gICAgICAgIHJldCA9IHhzbV9y ZWFkY29uc29sZShYU01fSE9PSywgb3AtPnUucmVhZGNvbnNvbGUuY2xlYXIp OwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAgICAgICBicmVhazsKLQog ICAgICAgICByZXQgPSByZWFkX2NvbnNvbGVfcmluZygmb3AtPnUucmVhZGNv bnNvbGUpOwogICAgICAgICBicmVhazsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTgwLDEyICsxODAsNiBAQCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hl Y2sgeHNtX3N5c2N0CiAgICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihh Y3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7CiB9CiAKLXN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fcmVhZGNvbnNvbGUoWFNNX0RF RkFVTFRfQVJHIHVpbnQzMl90IGNsZWFyKQotewotICAgIFhTTV9BU1NFUlRf QUNUSU9OKFhTTV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0 aW9uKGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3Rh dGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9hbGxvY19zZWN1cml0 eV9kb21haW4oc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICByZXR1cm4gMDsK LS0tIGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRl L3hzbS94c20uaApAQCAtNTksNyArNTksNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqc2V0X3RhcmdldCkoc3RydWN0IGRvbWFpbiAqZCwgc3Ry dWN0IGRvbWFpbiAqZSk7CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9t YWluICpkLCBzdHJ1Y3QgeGVuX2RvbWN0bCAqb3ApOwogICAgIGludCAoKnN5 c2N0bCkoY29uc3Qgc3RydWN0IHhlbl9zeXNjdGwgKm9wKTsKLSAgICBpbnQg KCpyZWFkY29uc29sZSkodWludDMyX3QgY2xlYXIpOwogCiAgICAgaW50ICgq ZXZ0Y2huX3VuYm91bmQpKHN0cnVjdCBkb21haW4gKmQsIHN0cnVjdCBldnRj aG4gKmNobiwgZG9taWRfdCBpZDIpOwogICAgIGludCAoKmV2dGNobl9pbnRl cmRvbWFpbikoc3RydWN0IGRvbWFpbiAqZDEsIHN0cnVjdCBldnRjaG4gKmNo bjEsCkBAIC0yMzcsMTEgKzIzNiw2IEBAIHN0YXRpYyBpbmxpbmUgaW50IHhz bV9zeXNjdGwoeHNtX2RlZmF1bHQKICAgICByZXR1cm4gYWx0ZXJuYXRpdmVf Y2FsbCh4c21fb3BzLnN5c2N0bCwgb3ApOwogfQogCi1zdGF0aWMgaW5saW5l IGludCB4c21fcmVhZGNvbnNvbGUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNsZWFyKQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhz bV9vcHMucmVhZGNvbnNvbGUsIGNsZWFyKTsKLX0KLQogc3RhdGljIGlubGlu ZSBpbnQgeHNtX2V2dGNobl91bmJvdW5kKAogICAgIHhzbV9kZWZhdWx0X3Qg ZGVmLCBzdHJ1Y3QgZG9tYWluICpkMSwgc3RydWN0IGV2dGNobiAqY2huLCBk b21pZF90IGlkMikKIHsKLS0tIGEveGVuL3hzbS9kdW1teS5jCisrKyBiL3hl bi94c20vZHVtbXkuYwpAQCAtMjEsNyArMjEsNiBAQCBzdGF0aWMgY29uc3Qg c3RydWN0IHhzbV9vcHMgX19pbml0Y29uc3RfCiAgICAgLnNldF90YXJnZXQg ICAgICAgICAgICAgICAgICAgID0geHNtX3NldF90YXJnZXQsCiAgICAgLmRv bWN0bCAgICAgICAgICAgICAgICAgICAgICAgID0geHNtX2RvbWN0bCwKICAg ICAuc3lzY3RsICAgICAgICAgICAgICAgICAgICAgICAgPSB4c21fc3lzY3Rs LAotICAgIC5yZWFkY29uc29sZSAgICAgICAgICAgICAgICAgICA9IHhzbV9y ZWFkY29uc29sZSwKIAogICAgIC5ldnRjaG5fdW5ib3VuZCAgICAgICAgICAg ICAgICA9IHhzbV9ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVy ZG9tYWluICAgICAgICAgICAgPSB4c21fZXZ0Y2huX2ludGVyZG9tYWluLAot LS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysrIGIveGVuL3hzbS9mbGFz ay9ob29rcy5jCkBAIC05MDYsMTMgKzkwNiwxOCBAQCBzdGF0aWMgaW50IGNm X2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgc3dpdGNoICggb3At PmNtZCApCiAgICAgewogICAgIC8qIFRoZXNlIGhhdmUgaW5kaXZpZHVhbCBY U00gaG9va3MgKi8KLSAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKICNpZmRl ZiBDT05GSUdfWDg2CiAgICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVn OgogI2VuZGlmCiAgICAgICAgIHJldHVybiAwOwogCisgICAgY2FzZSBYRU5f U1lTQ1RMX3JlYWRjb25zb2xlOgorICAgICAgICByZXR1cm4gZG9tYWluX2hh c194ZW4oY3VycmVudC0+ZG9tYWluLAorICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgWEVOX19SRUFEQ09OU09MRSB8CisgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAob3AtPnUucmVhZGNvbnNvbGUuY2xlYXIgPyBYRU5f X0NMRUFSQ09OU09MRQorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDogMCkpOworCiAgICAgY2FzZSBY RU5fU1lTQ1RMX3RidWZfb3A6CiAgICAgICAgIHJldHVybiBkb21haW5faGFz X3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9fVEJVRkNPTlRST0wpOwogCkBA IC05ODMsMTYgKzk4OCw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tf c3lzY3RsKGNvbnN0IHMKICAgICB9CiB9CiAKLXN0YXRpYyBpbnQgY2ZfY2hl Y2sgZmxhc2tfcmVhZGNvbnNvbGUodWludDMyX3QgY2xlYXIpCi17Ci0gICAg dWludDMyX3QgcGVybXMgPSBYRU5fX1JFQURDT05TT0xFOwotCi0gICAgaWYg KCBjbGVhciApCi0gICAgICAgIHBlcm1zIHw9IFhFTl9fQ0xFQVJDT05TT0xF OwotCi0gICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJlbnQtPmRvbWFp biwgcGVybXMpOwotfQotCiBzdGF0aWMgaW5saW5lIHVpbnQzMl90IHJlc291 cmNlX3RvX3Blcm0odWludDhfdCBhY2Nlc3MpCiB7CiAgICAgaWYgKCBhY2Nl c3MgKQpAQCAtMTkyMyw3ICsxOTE4LDYgQEAgc3RhdGljIGNvbnN0IHN0cnVj dCB4c21fb3BzIF9faW5pdGNvbnN0XwogICAgIC5zZXRfdGFyZ2V0ID0gZmxh c2tfc2V0X3RhcmdldCwKICAgICAuZG9tY3RsID0gZmxhc2tfZG9tY3RsLAog ICAgIC5zeXNjdGwgPSBmbGFza19zeXNjdGwsCi0gICAgLnJlYWRjb25zb2xl ID0gZmxhc2tfcmVhZGNvbnNvbGUsCiAKICAgICAuZXZ0Y2huX3VuYm91bmQg PSBmbGFza19ldnRjaG5fdW5ib3VuZCwKICAgICAuZXZ0Y2huX2ludGVyZG9t YWluID0gZmxhc2tfZXZ0Y2huX2ludGVyZG9tYWluLAo= --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-6.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-6.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZXNvdXJjZV97LHVufXBsdWdfY29yZSgp IGhvb2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0 bCgpLCBub3cgdGhhdCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3Nl ZC4gQXMgYSBwb3NpdGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJl IHRoZW4gY2hlY2tlZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFu ZCB3aXRob3V0IEZsYXNrLiBOb3RlIHRoYXQgdGhlc2Ugd2VyZSB4ODYtCm9u bHksIGkuZS4gc29tZSBkZWFkL3VucmVhY2hhYmxlIGNvZGUgZ2V0cyBlbGlt aW5hdGVkIGZvciAoaW4gcGFydGljdWxhcikKQXJtLgoKVGhpcyBpcyBwYXJ0 IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CkFj a2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRwc21pdGhAYXBlcnR1c3NvbHV0 aW9ucy5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvc3lzY3RsLmMKKysrIGIv eGVuL2FyY2gveDg2L3N5c2N0bC5jCkBAIC0xMTcsMjAgKzExNywxNyBAQCBs b25nIGFyY2hfZG9fc3lzY3RsKAogICAgIHsKICAgICAgICAgdW5zaWduZWQg aW50IGNwdSA9IHN5c2N0bC0+dS5jcHVfaG90cGx1Zy5jcHU7CiAgICAgICAg IHVuc2lnbmVkIGludCBvcCAgPSBzeXNjdGwtPnUuY3B1X2hvdHBsdWcub3A7 Ci0gICAgICAgIGJvb2wgcGx1ZzsKICAgICAgICAgbG9uZyAoKmZuKSh2b2lk ICpkYXRhKTsKICAgICAgICAgdm9pZCAqaGNwdTsKIAogICAgICAgICBzd2l0 Y2ggKCBvcCApCiAgICAgICAgIHsKICAgICAgICAgY2FzZSBYRU5fU1lTQ1RM X0NQVV9IT1RQTFVHX09OTElORToKLSAgICAgICAgICAgIHBsdWcgPSB0cnVl OwogICAgICAgICAgICAgZm4gPSBjcHVfdXBfaGVscGVyOwogICAgICAgICAg ICAgaGNwdSA9IF9wKGNwdSk7CiAgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdfT0ZGTElORToKLSAg ICAgICAgICAgIHBsdWcgPSBmYWxzZTsKICAgICAgICAgICAgIGZuID0gY3B1 X2Rvd25faGVscGVyOwogICAgICAgICAgICAgaGNwdSA9IF9wKGNwdSk7CiAg ICAgICAgICAgICBicmVhazsKQEAgLTE1MCw5ICsxNDcsOCBAQCBsb25nIGFy Y2hfZG9fc3lzY3RsKAogICAgICAgICAgICAgaWYgKCBDT05GSUdfTlJfQ1BV UyA8PSAxICkKICAgICAgICAgICAgICAgICAvKiBNaW1pYyBiZWhhdmlvciBv ZiBzbXRfdXBfZG93bl9oZWxwZXIoKS4gKi8KICAgICAgICAgICAgICAgICBy ZXR1cm4gMDsKLSAgICAgICAgICAgIHBsdWcgPSBvcCA9PSBYRU5fU1lTQ1RM X0NQVV9IT1RQTFVHX1NNVF9FTkFCTEU7CiAgICAgICAgICAgICBmbiA9IHNt dF91cF9kb3duX2hlbHBlcjsKLSAgICAgICAgICAgIGhjcHUgPSBfcChwbHVn KTsKKyAgICAgICAgICAgIGhjcHUgPSBfcChvcCA9PSBYRU5fU1lTQ1RMX0NQ VV9IT1RQTFVHX1NNVF9FTkFCTEUpOwogICAgICAgICAgICAgYnJlYWs7CiAK ICAgICAgICAgZGVmYXVsdDoKQEAgLTE2MSwxMCArMTU3LDYgQEAgbG9uZyBh cmNoX2RvX3N5c2N0bCgKICAgICAgICAgfQogCiAgICAgICAgIGlmICggIXJl dCApCi0gICAgICAgICAgICByZXQgPSBwbHVnID8geHNtX3Jlc291cmNlX3Bs dWdfY29yZShYU01fSE9PSykKLSAgICAgICAgICAgICAgICAgICAgICAgOiB4 c21fcmVzb3VyY2VfdW5wbHVnX2NvcmUoWFNNX0hPT0spOwotCi0gICAgICAg IGlmICggIXJldCApCiAgICAgICAgICAgICByZXQgPSBjb250aW51ZV9oeXBl cmNhbGxfb25fY3B1KDAsIGZuLCBoY3B1KTsKICAgICB9CiAgICAgYnJlYWs7 Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNs dWRlL3hzbS9kdW1teS5oCkBAIC0zOTYsMTggKzM5Niw2IEBAIHN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fZ2V0X2QKIH0KICNlbmRpZiAv KiBIQVNfUEFTU1RIUk9VR0ggJiYgSEFTX1BDSSAqLwogCi1zdGF0aWMgWFNN X0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3BsdWdfY29yZShY U01fREVGQVVMVF9WT0lEKQotewotICAgIFhTTV9BU1NFUlRfQUNUSU9OKFhT TV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9uKGFjdGlv biwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQotc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9yZXNvdXJjZV91bnBsdWdfY29yZShY U01fREVGQVVMVF9WT0lEKQotewotICAgIFhTTV9BU1NFUlRfQUNUSU9OKFhT TV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9uKGFjdGlv biwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9yZXNvdXJjZV9wbHVnX3BjaSgKICAg ICBYU01fREVGQVVMVF9BUkcgdWludDMyX3QgbWFjaGluZV9iZGYpCiB7Ci0t LSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4vaW5jbHVkZS94 c20veHNtLmgKQEAgLTEyMiw4ICsxMjIsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqZ2V0X2RldmljZV9ncm91cCkodWludDMyX3QgbWFjaGlu ZV9iZGYpOwogI2VuZGlmCiAKLSAgICBpbnQgKCpyZXNvdXJjZV9wbHVnX2Nv cmUpKHZvaWQpOwotICAgIGludCAoKnJlc291cmNlX3VucGx1Z19jb3JlKSh2 b2lkKTsKICAgICBpbnQgKCpyZXNvdXJjZV9wbHVnX3BjaSkodWludDMyX3Qg bWFjaGluZV9iZGYpOwogICAgIGludCAoKnJlc291cmNlX3VucGx1Z19wY2kp KHVpbnQzMl90IG1hY2hpbmVfYmRmKTsKICAgICBpbnQgKCpyZXNvdXJjZV9z ZXR1cF9wY2kpKHVpbnQzMl90IG1hY2hpbmVfYmRmKTsKQEAgLTUwNywxNiAr NTA1LDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNlX3VucGx1 Z19wYwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMucmVz b3VyY2VfdW5wbHVnX3BjaSwgbWFjaGluZV9iZGYpOwogfQogCi1zdGF0aWMg aW5saW5lIGludCB4c21fcmVzb3VyY2VfcGx1Z19jb3JlKHhzbV9kZWZhdWx0 X3QgZGVmKQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9v cHMucmVzb3VyY2VfcGx1Z19jb3JlKTsKLX0KLQotc3RhdGljIGlubGluZSBp bnQgeHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKHhzbV9kZWZhdWx0X3QgZGVm KQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMucmVz b3VyY2VfdW5wbHVnX2NvcmUpOwotfQotCiBzdGF0aWMgaW5saW5lIGludCB4 c21fcmVzb3VyY2Vfc2V0dXBfcGNpKAogICAgIHhzbV9kZWZhdWx0X3QgZGVm LCB1aW50MzJfdCBtYWNoaW5lX2JkZikKIHsKLS0tIGEveGVuL3hzbS9kdW1t eS5jCisrKyBiL3hlbi94c20vZHVtbXkuYwpAQCAtNzcsOCArNzcsNiBAQCBz dGF0aWMgY29uc3Qgc3RydWN0IHhzbV9vcHMgX19pbml0Y29uc3RfCiAgICAg LmdldF9kZXZpY2VfZ3JvdXAgICAgICAgICAgICAgID0geHNtX2dldF9kZXZp Y2VfZ3JvdXAsCiAjZW5kaWYKIAotICAgIC5yZXNvdXJjZV9wbHVnX2NvcmUg ICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV9wbHVnX2NvcmUsCi0gICAgLnJl c291cmNlX3VucGx1Z19jb3JlICAgICAgICAgID0geHNtX3Jlc291cmNlX3Vu cGx1Z19jb3JlLAogICAgIC5yZXNvdXJjZV9wbHVnX3BjaSAgICAgICAgICAg ICA9IHhzbV9yZXNvdXJjZV9wbHVnX3BjaSwKICAgICAucmVzb3VyY2VfdW5w bHVnX3BjaSAgICAgICAgICAgPSB4c21fcmVzb3VyY2VfdW5wbHVnX3BjaSwK ICAgICAucmVzb3VyY2Vfc2V0dXBfcGNpICAgICAgICAgICAgPSB4c21fcmVz b3VyY2Vfc2V0dXBfcGNpLAotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMK KysrIGIveGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC01Niw2ICs1Niw5IEBA IHN0YXRpYyBpbnQgZmxhc2tfZGVhc3NpZ25fZHRkZXZpY2Uoc3RydWMKICNl bmRpZgogI2VuZGlmIC8qIENPTkZJR19IQVNfUEFTU1RIUk9VR0ggKi8KIAor c3RhdGljIGludCBmbGFza19yZXNvdXJjZV9wbHVnX2NvcmUodm9pZCk7Citz dGF0aWMgaW50IGZsYXNrX3Jlc291cmNlX3VucGx1Z19jb3JlKHZvaWQpOwor CiBzdGF0aWMgdWludDMyX3QgZG9tYWluX3NpZChjb25zdCBzdHJ1Y3QgZG9t YWluICpkb20pCiB7CiAgICAgc3RydWN0IGRvbWFpbl9zZWN1cml0eV9zdHJ1 Y3QgKmRzZWMgPSBkb20tPnNzaWQ7CkBAIC05MDcsOSArOTEwLDYgQEAgc3Rh dGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwoY29uc3QgcwogICAgIHsK ICAgICAvKiBUaGVzZSBoYXZlIGluZGl2aWR1YWwgWFNNIGhvb2tzICovCiAg ICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSNpZmRlZiBD T05GSUdfWDg2Ci0gICAgY2FzZSBYRU5fU1lTQ1RMX2NwdV9ob3RwbHVnOgot I2VuZGlmCiAgICAgICAgIHJldHVybiAwOwogCiAgICAgY2FzZSBYRU5fU1lT Q1RMX3JlYWRjb25zb2xlOgpAQCAtOTYxLDYgKzk2MSwyMyBAQCBzdGF0aWMg aW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAgICAgY2FzZSBY RU5fU1lTQ1RMX2dldGRvbWFpbmluZm9saXN0OgogICAgICAgICByZXR1cm4g Zmxhc2tfZ2V0ZG9tYWluaW5mbyhkb21feGVuKTsKIAorI2lmZGVmIENPTkZJ R19YODYKKyAgICBjYXNlIFhFTl9TWVNDVExfY3B1X2hvdHBsdWc6CisgICAg ICAgIHN3aXRjaCAoIG9wLT51LmNwdV9ob3RwbHVnLm9wICkKKyAgICAgICAg eworICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdfT05MSU5F OgorICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdfU01UX0VO QUJMRToKKyAgICAgICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV9wbHVn X2NvcmUoKTsKKworICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBM VUdfT0ZGTElORToKKyAgICAgICAgY2FzZSBYRU5fU1lTQ1RMX0NQVV9IT1RQ TFVHX1NNVF9ESVNBQkxFOgorICAgICAgICAgICAgcmV0dXJuIGZsYXNrX3Jl c291cmNlX3VucGx1Z19jb3JlKCk7CisKKyAgICAgICAgZGVmYXVsdDoKKyAg ICAgICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNzaW9uKCJjcHVf aG90cGx1ZyIsIG9wLT51LmNwdV9ob3RwbHVnLm9wKTsKKyAgICAgICAgfQor I2VuZGlmCisKICAgICBjYXNlIFhFTl9TWVNDVExfcHNyX2NtdF9vcDoKICAg ICAgICAgcmV0dXJuIGF2Y19jdXJyZW50X2hhc19wZXJtKFNFQ0lOSVRTSURf WEVOLCBTRUNDTEFTU19YRU4yLAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgWEVOMl9fUFNSX0NNVF9PUCwgTlVMTCk7CkBAIC0xMjM4 LDEyICsxMjU1LDEyIEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tfcGNp X2NvbmZpZ19wZXIKIAogfQogCi1zdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNr X3Jlc291cmNlX3BsdWdfY29yZSh2b2lkKQorc3RhdGljIGludCBmbGFza19y ZXNvdXJjZV9wbHVnX2NvcmUodm9pZCkKIHsKICAgICByZXR1cm4gYXZjX2N1 cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9ET01YRU4sIFNFQ0NMQVNTX1JF U09VUkNFLCBSRVNPVVJDRV9fUExVRywgTlVMTCk7CiB9CiAKLXN0YXRpYyBp bnQgY2ZfY2hlY2sgZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUodm9pZCkK K3N0YXRpYyBpbnQgZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUodm9pZCkK IHsKICAgICByZXR1cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJ RF9ET01YRU4sIFNFQ0NMQVNTX1JFU09VUkNFLCBSRVNPVVJDRV9fVU5QTFVH LCBOVUxMKTsKIH0KQEAgLTE5NjksOCArMTk4Niw2IEBAIHN0YXRpYyBjb25z dCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAuaW9tZW1fbWFw cGluZ192cGNpID0gZmxhc2tfaW9tZW1fbWFwcGluZywKICAgICAucGNpX2Nv bmZpZ19wZXJtaXNzaW9uID0gZmxhc2tfcGNpX2NvbmZpZ19wZXJtaXNzaW9u LAogCi0gICAgLnJlc291cmNlX3BsdWdfY29yZSA9IGZsYXNrX3Jlc291cmNl X3BsdWdfY29yZSwKLSAgICAucmVzb3VyY2VfdW5wbHVnX2NvcmUgPSBmbGFz a19yZXNvdXJjZV91bnBsdWdfY29yZSwKICAgICAucmVzb3VyY2VfcGx1Z19w Y2kgPSBmbGFza19yZXNvdXJjZV9wbHVnX3BjaSwKICAgICAucmVzb3VyY2Vf dW5wbHVnX3BjaSA9IGZsYXNrX3Jlc291cmNlX3VucGx1Z19wY2ksCiAgICAg LnJlc291cmNlX3NldHVwX3BjaSA9IGZsYXNrX3Jlc291cmNlX3NldHVwX3Bj aSwK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.20-7.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.20-7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5wYWdlX29mZmxpbmUoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3N5c2N0bC5jCisrKyBiL3hlbi9jb21tb24vc3lzY3RsLmMKQEAgLTE4Nywx MCArMTg3LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9Q QVJBTSh4ZQogICAgICAgICBpZiAoIG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg PCBvcC0+dS5wYWdlX29mZmxpbmUuc3RhcnQgKQogICAgICAgICAgICAgYnJl YWs7CiAKLSAgICAgICAgcmV0ID0geHNtX3BhZ2Vfb2ZmbGluZShYU01fSE9P Sywgb3AtPnUucGFnZV9vZmZsaW5lLmNtZCk7Ci0gICAgICAgIGlmICggcmV0 ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHB0ciA9IHN0YXR1 cyA9IHhtYWxsb2NfYXJyYXkodWludDMyX3QsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg LQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5wYWdlX29mZmxpbmUuc3RhcnQgKyAxKSk7Ci0tLSBhL3hlbi9pbmNsdWRl L3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCkBA IC00MjksMTIgKzQyOSw2IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fcmVzb3UKICAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9u KGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKIH0KIAotc3RhdGlj IFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9wYWdlX29mZmxpbmUoWFNN X0RFRkFVTFRfQVJHIHVpbnQzMl90IGNtZCkKLXsKLSAgICBYU01fQVNTRVJU X0FDVElPTihYU01fSE9PSyk7Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2Fj dGlvbihhY3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0 YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVjayB4c21faHlwZnNfb3AoWFNN X0RFRkFVTFRfVk9JRCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01f UFJJVik7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4v aW5jbHVkZS94c20veHNtLmgKQEAgLTEyOCw3ICsxMjgsNiBAQCBzdHJ1Y3Qg eHNtX29wcyB7CiAgICAgaW50ICgqcmVzb3VyY2Vfc2V0dXBfZ3NpKShpbnQg Z3NpKTsKICAgICBpbnQgKCpyZXNvdXJjZV9zZXR1cF9taXNjKSh2b2lkKTsK IAotICAgIGludCAoKnBhZ2Vfb2ZmbGluZSkodWludDMyX3QgY21kKTsKICAg ICBpbnQgKCpoeXBmc19vcCkodm9pZCk7CiAKICAgICBsb25nICgqZG9feHNt X29wKShYRU5fR1VFU1RfSEFORExFX1BBUkFNKHZvaWQpIG9wKTsKQEAgLTUy MSwxMSArNTIwLDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNl X3NldHVwX21pcwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9v cHMucmVzb3VyY2Vfc2V0dXBfbWlzYyk7CiB9CiAKLXN0YXRpYyBpbmxpbmUg aW50IHhzbV9wYWdlX29mZmxpbmUoeHNtX2RlZmF1bHRfdCBkZWYsIHVpbnQz Ml90IGNtZCkKLXsKLSAgICByZXR1cm4gYWx0ZXJuYXRpdmVfY2FsbCh4c21f b3BzLnBhZ2Vfb2ZmbGluZSwgY21kKTsKLX0KLQogc3RhdGljIGlubGluZSBp bnQgeHNtX2h5cGZzX29wKHhzbV9kZWZhdWx0X3QgZGVmKQogewogICAgIHJl dHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMuaHlwZnNfb3ApOwotLS0g YS94ZW4veHNtL2R1bW15LmMKKysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC04 Myw3ICs4Myw2IEBAIHN0YXRpYyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2lu aXRjb25zdF8KICAgICAucmVzb3VyY2Vfc2V0dXBfZ3NpICAgICAgICAgICAg PSB4c21fcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAgIC5yZXNvdXJjZV9zZXR1 cF9taXNjICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV9zZXR1cF9taXNjLAog Ci0gICAgLnBhZ2Vfb2ZmbGluZSAgICAgICAgICAgICAgICAgID0geHNtX3Bh Z2Vfb2ZmbGluZSwKICAgICAuaHlwZnNfb3AgICAgICAgICAgICAgICAgICAg ICAgPSB4c21faHlwZnNfb3AsCiAgICAgLmh2bV9wYXJhbSAgICAgICAgICAg ICAgICAgICAgID0geHNtX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSAgICAgICAgICAgPSB4c21faHZtX3BhcmFtX2FsdHAybWh2bSwK LS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxh c2svaG9va3MuYwpAQCAtNTgsNiArNTgsNyBAQCBzdGF0aWMgaW50IGZsYXNr X2RlYXNzaWduX2R0ZGV2aWNlKHN0cnVjCiAKIHN0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfcGx1Z19jb3JlKHZvaWQpOwogc3RhdGljIGludCBmbGFza19y ZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKTsKK3N0YXRpYyBpbnQgZmxhc2tf cmVzb3VyY2VfdXNlX2NvcmUodm9pZCk7CiAKIHN0YXRpYyB1aW50MzJfdCBk b21haW5fc2lkKGNvbnN0IHN0cnVjdCBkb21haW4gKmRvbSkKIHsKQEAgLTkw OCwxMCArOTA5LDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNj dGwoY29uc3QgcwogewogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsK LSAgICAvKiBUaGVzZSBoYXZlIGluZGl2aWR1YWwgWFNNIGhvb2tzICovCi0g ICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKLSAgICAgICAg cmV0dXJuIDA7Ci0KICAgICBjYXNlIFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6 CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21h aW4sCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBYRU5fX1JFQURD T05TT0xFIHwKQEAgLTk0Miw2ICs5MzksMjMgQEAgc3RhdGljIGludCBjZl9j aGVjayBmbGFza19zeXNjdGwoY29uc3QgcwogICAgIGNhc2UgWEVOX1NZU0NU TF9wbV9vcDoKICAgICAgICAgcmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJl bnQtPmRvbWFpbiwgWEVOX19QTV9PUCk7CiAKKyAgICBjYXNlIFhFTl9TWVND VExfcGFnZV9vZmZsaW5lX29wOgorICAgICAgICBzd2l0Y2ggKCBvcC0+dS5w YWdlX29mZmxpbmUuY21kICkKKyAgICAgICAgeworICAgICAgICBjYXNlIHN5 c2N0bF9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tf cmVzb3VyY2VfdW5wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0 bF9wYWdlX29ubGluZToKKyAgICAgICAgICAgIHJldHVybiBmbGFza19yZXNv dXJjZV9wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIHN5c2N0bF9xdWVy eV9wYWdlX29mZmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tfcmVz b3VyY2VfdXNlX2NvcmUoKTsKKworICAgICAgICBkZWZhdWx0OgorICAgICAg ICAgICAgcmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oInBhZ2Vfb2Zm bGluZSIsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBvcC0+dS5wYWdlX29mZmxpbmUuY21kKTsKKyAgICAgICAgfQorCiAg ICAgY2FzZSBYRU5fU1lTQ1RMX2xvY2twcm9mX29wOgogICAgICAgICByZXR1 cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBYRU5fX0xPQ0tQ Uk9GKTsKIApAQCAtMTMzMywyMSArMTM0Nyw2IEBAIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfcmVzb3VyY2Vfc2V0dXAKICAgICByZXR1cm4gYXZjX2N1 cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4sIFNFQ0NMQVNTX1JFU09V UkNFLCBSRVNPVVJDRV9fU0VUVVAsIE5VTEwpOwogfQogCi1zdGF0aWMgaW5s aW5lIGludCBjZl9jaGVjayBmbGFza19wYWdlX29mZmxpbmUodWludDMyX3Qg Y21kKQotewotICAgIHN3aXRjaCAoIGNtZCApCi0gICAgewotICAgIGNhc2Ug c3lzY3RsX3BhZ2Vfb2ZmbGluZToKLSAgICAgICAgcmV0dXJuIGZsYXNrX3Jl c291cmNlX3VucGx1Z19jb3JlKCk7Ci0gICAgY2FzZSBzeXNjdGxfcGFnZV9v bmxpbmU6Ci0gICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV9wbHVnX2Nv cmUoKTsKLSAgICBjYXNlIHN5c2N0bF9xdWVyeV9wYWdlX29mZmxpbmU6Ci0g ICAgICAgIHJldHVybiBmbGFza19yZXNvdXJjZV91c2VfY29yZSgpOwotICAg IGRlZmF1bHQ6Ci0gICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNz aW9uKCJwYWdlX29mZmxpbmUiLCBjbWQpOwotICAgIH0KLX0KLQogc3RhdGlj IGlubGluZSBpbnQgY2ZfY2hlY2sgZmxhc2tfaHlwZnNfb3Aodm9pZCkKIHsK ICAgICByZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBY RU5fX0hZUEZTX09QKTsKQEAgLTE5OTIsNyArMTk5MSw2IEBAIHN0YXRpYyBj b25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAucmVzb3Vy Y2Vfc2V0dXBfZ3NpID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9taXNjID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBf bWlzYywKIAotICAgIC5wYWdlX29mZmxpbmUgPSBmbGFza19wYWdlX29mZmxp bmUsCiAgICAgLmh5cGZzX29wID0gZmxhc2tfaHlwZnNfb3AsCiAgICAgLmh2 bV9wYXJhbSA9IGZsYXNrX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSA9IGZsYXNrX2h2bV9wYXJhbV9hbHRwMm1odm0sCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-4.patch" Content-Disposition: attachment; filename="xsa499/xsa499-4.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvRmxhc2s6IGFkZCBwcmVsaW1pbmFyeSBjaGVjayBmb3IgWEVO X1NZU0NUTF9nZXRkb21haW5pbmZvbGlzdAoKVG8gc2hpZWxkIHRoZSBzeXNj dGwgbG9jayBmcm9tIGFidXNlIGJ5IHVuYXV0aG9yaXplZCBkb21haW5zLCBm b2xsb3cgd2hhdAo1MTU0ZmRkYTExMjQgKCJkb21jdGw6IHByb3RlY3QgbG9j a2luZyBmb3IgZ2V0X2RvbWFpbl9zdGF0ZSIpIGRpZDogQ2hlY2sKZm9yIHBl cm1pc3Npb24gdG8gaXNzdWUgdGhlIG9wZXJhdGlvbiBhZ2FpbnN0IERPTV9Y RU4gaW4gZmxhc2tfc3lzY3RsKCkuClRoZSBmaW5lci1ncmFpbmVkIHhzbV9n ZXRkb21haW5pbmZvKCkgbGF0ZXIgaW4gdGhlIGhhbmRsaW5nIG9mIHRoZSBz dWItb3AKcmVtYWlucyB1bmFsdGVyZWQuCgpJbiB0aGUgaW4tdHJlZSBwb2xp Y3kgcmVzcGVjdGl2ZSBwZXJtaXNzaW9uIHRoZXJlZm9yZSBuZWVkcyBncmFu dGluZy4KClRoaXMgaXMgcGFydCBvZiBDVkUtMjAyNi02MjQyNiAvIFhTQS00 OTkuCgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29v cGVyM0BjaXRyaXguY29tPgpBY2tlZC1ieTogRGFuaWVsIFAuIFNtaXRoIDxk cHNtaXRoQGFwZXJ0dXNzb2x1dGlvbnMuY29tPgoKLS0tIGEvdG9vbHMvZmxh c2svcG9saWN5L21vZHVsZXMveGVuLmlmCisrKyBiL3Rvb2xzL2ZsYXNrL3Bv bGljeS9tb2R1bGVzL3hlbi5pZgpAQCAtMTUwLDYgKzE1MCw3IEBAIGRlZmlu ZShgY3JlYXRlX2RvbWFpbl9idWlsZF9sYWJlbCcsIGAKICMgbWFuYWdlX2Rv bWFpbihwcml2LCB0YXJnZXQpCiAjICAgQWxsb3cgbWFuYWdpbmcgYSBydW5u aW5nIGRvbWFpbgogZGVmaW5lKGBtYW5hZ2VfZG9tYWluJywgYAorCWFsbG93 ICQxIGRvbXhlbl90OmRvbWFpbiBnZXRkb21haW5pbmZvOwogCWFsbG93ICQx ICQyOmRvbWFpbiB7CiAJCWdldGRvbWFpbmluZm8KIAkJZ2V0dmNwdWluZm8K LS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxh c2svaG9va3MuYwpAQCAtODc4LDcgKzg3OCw2IEBAIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICB7CiAgICAgLyogVGhl c2UgaGF2ZSBpbmRpdmlkdWFsIFhTTSBob29rcyAqLwogICAgIGNhc2UgWEVO X1NZU0NUTF9yZWFkY29uc29sZToKLSAgICBjYXNlIFhFTl9TWVNDVExfZ2V0 ZG9tYWluaW5mb2xpc3Q6CiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2Zm bGluZV9vcDoKICNpZmRlZiBDT05GSUdfWDg2CiAgICAgY2FzZSBYRU5fU1lT Q1RMX2NwdV9ob3RwbHVnOgpAQCAtOTI1LDYgKzkyNCw5IEBAIHN0YXRpYyBp bnQgY2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICBjYXNlIFhF Tl9TWVNDVExfZ2V0X2NwdV9wb2xpY3k6CiAgICAgICAgIHJldHVybiBkb21h aW5faGFzX3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9fUEhZU0lORk8pOwog CisgICAgY2FzZSBYRU5fU1lTQ1RMX2dldGRvbWFpbmluZm9saXN0OgorICAg ICAgICByZXR1cm4gZmxhc2tfZ2V0ZG9tYWluaW5mbyhkb21feGVuKTsKKwog ICAgIGNhc2UgWEVOX1NZU0NUTF9wc3JfY210X29wOgogICAgICAgICByZXR1 cm4gYXZjX2N1cnJlbnRfaGFzX3Blcm0oU0VDSU5JVFNJRF9YRU4sIFNFQ0NM QVNTX1hFTjIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBYRU4yX19QU1JfQ01UX09QLCBOVUxMKTsK --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-5.patch" Content-Disposition: attachment; filename="xsa499/xsa499-5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZWFkY29uc29sZSgpIGhvb2sKCkludGVn cmF0ZSB0aGUgY2hlY2tpbmcgd2l0aCB4c21fc3lzY3RsKCksIG5vdyB0aGF0 IGl0IGhhcyB0aGUgZnVsbCBvcApzdHJ1Y3QgcGFzc2VkLiBBcyBhIHBvc2l0 aXZlIHNpZGUgZWZmZWN0LCBwZXJtaXNzaW9ucyBhcmUgdGhlbiBjaGVja2Vk IGF0CnRoZSBzYW1lIGVhcmx5IHBvaW50IHdpdGggYW5kIHdpdGhvdXQgRmxh c2suCgpUaGlzIGlzIHBhcnQgb2YgQ1ZFLTIwMjYtNjI0MjYgLyBYU0EtNDk5 LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2Uu Y29tPgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3Bl cjNAY2l0cml4LmNvbT4KQWNrZWQtQnk6IERhbmllbCBQLiBTbWl0aCA8ZHBz bWl0aEBhcGVydHVzc29sdXRpb25zLmNvbT4KCi0tLSBhL3hlbi9jb21tb24v c3lzY3RsLmMKKysrIGIveGVuL2NvbW1vbi9zeXNjdGwuYwpAQCAtNTksMTAg KzU5LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9QQVJB TSh4ZQogICAgIHN3aXRjaCAoIG9wLT5jbWQgKQogICAgIHsKICAgICBjYXNl IFhFTl9TWVNDVExfcmVhZGNvbnNvbGU6Ci0gICAgICAgIHJldCA9IHhzbV9y ZWFkY29uc29sZShYU01fSE9PSywgb3AtPnUucmVhZGNvbnNvbGUuY2xlYXIp OwotICAgICAgICBpZiAoIHJldCApCi0gICAgICAgICAgICBicmVhazsKLQog ICAgICAgICByZXQgPSByZWFkX2NvbnNvbGVfcmluZygmb3AtPnUucmVhZGNv bnNvbGUpOwogICAgICAgICBicmVhazsKIAotLS0gYS94ZW4vaW5jbHVkZS94 c20vZHVtbXkuaAorKysgYi94ZW4vaW5jbHVkZS94c20vZHVtbXkuaApAQCAt MTgxLDEyICsxODEsNiBAQCBzdGF0aWMgWFNNX0lOTElORSBpbnQgY2ZfY2hl Y2sgeHNtX3N5c2N0CiAgICAgcmV0dXJuIHhzbV9kZWZhdWx0X2FjdGlvbihh Y3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7CiB9CiAKLXN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fcmVhZGNvbnNvbGUoWFNNX0RF RkFVTFRfQVJHIHVpbnQzMl90IGNsZWFyKQotewotICAgIFhTTV9BU1NFUlRf QUNUSU9OKFhTTV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0 aW9uKGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3Rh dGljIFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9hbGxvY19zZWN1cml0 eV9kb21haW4oc3RydWN0IGRvbWFpbiAqZCkKIHsKICAgICByZXR1cm4gMDsK LS0tIGEveGVuL2luY2x1ZGUveHNtL3hzbS5oCisrKyBiL3hlbi9pbmNsdWRl L3hzbS94c20uaApAQCAtNjAsNyArNjAsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqZG9tY3RsKShzdHJ1Y3QgZG9tYWluICpkLCBzdHJ1Y3Qg eGVuX2RvbWN0bCAqb3ApOwogI2lmZGVmIENPTkZJR19TWVNDVEwKICAgICBp bnQgKCpzeXNjdGwpKGNvbnN0IHN0cnVjdCB4ZW5fc3lzY3RsICpvcCk7Ci0g ICAgaW50ICgqcmVhZGNvbnNvbGUpKHVpbnQzMl90IGNsZWFyKTsKICNlbmRp ZgogCiAgICAgaW50ICgqZXZ0Y2huX3VuYm91bmQpKHN0cnVjdCBkb21haW4g KmQsIHN0cnVjdCBldnRjaG4gKmNobiwgZG9taWRfdCBpZDIpOwpAQCAtMjQ1 LDExICsyNDQsNiBAQCBzdGF0aWMgaW5saW5lIGludCB4c21fc3lzY3RsKHhz bV9kZWZhdWx0CiB7CiAgICAgcmV0dXJuIGFsdGVybmF0aXZlX2NhbGwoeHNt X29wcy5zeXNjdGwsIG9wKTsKIH0KLQotc3RhdGljIGlubGluZSBpbnQgeHNt X3JlYWRjb25zb2xlKHhzbV9kZWZhdWx0X3QgZGVmLCB1aW50MzJfdCBjbGVh cikKLXsKLSAgICByZXR1cm4gYWx0ZXJuYXRpdmVfY2FsbCh4c21fb3BzLnJl YWRjb25zb2xlLCBjbGVhcik7Ci19CiAjZW5kaWYKIAogc3RhdGljIGlubGlu ZSBpbnQgeHNtX2V2dGNobl91bmJvdW5kKAotLS0gYS94ZW4veHNtL2R1bW15 LmMKKysrIGIveGVuL3hzbS9kdW1teS5jCkBAIC0yMiw3ICsyMiw2IEBAIHN0 YXRpYyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAu ZG9tY3RsICAgICAgICAgICAgICAgICAgICAgICAgPSB4c21fZG9tY3RsLAog I2lmZGVmIENPTkZJR19TWVNDVEwKICAgICAuc3lzY3RsICAgICAgICAgICAg ICAgICAgICAgICAgPSB4c21fc3lzY3RsLAotICAgIC5yZWFkY29uc29sZSAg ICAgICAgICAgICAgICAgICA9IHhzbV9yZWFkY29uc29sZSwKICNlbmRpZgog CiAgICAgLmV2dGNobl91bmJvdW5kICAgICAgICAgICAgICAgID0geHNtX2V2 dGNobl91bmJvdW5kLAotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMKKysr IGIveGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC04NzcsMTMgKzg3NywxOCBA QCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25zdCBzCiAg ICAgc3dpdGNoICggb3AtPmNtZCApCiAgICAgewogICAgIC8qIFRoZXNlIGhh dmUgaW5kaXZpZHVhbCBYU00gaG9va3MgKi8KLSAgICBjYXNlIFhFTl9TWVND VExfcmVhZGNvbnNvbGU6CiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2Zm bGluZV9vcDoKICNpZmRlZiBDT05GSUdfWDg2CiAgICAgY2FzZSBYRU5fU1lT Q1RMX2NwdV9ob3RwbHVnOgogI2VuZGlmCiAgICAgICAgIHJldHVybiAwOwog CisgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRjb25zb2xlOgorICAgICAgICBy ZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLAorICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgWEVOX19SRUFEQ09OU09MRSB8Cisg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAob3AtPnUucmVhZGNvbnNv bGUuY2xlYXIgPyBYRU5fX0NMRUFSQ09OU09MRQorICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDogMCkp OworCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3RidWZfb3A6CiAgICAgICAgIHJl dHVybiBkb21haW5faGFzX3hlbihjdXJyZW50LT5kb21haW4sIFhFTl9fVEJV RkNPTlRST0wpOwogCkBAIC05NDksMTYgKzk1NCw2IEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICAgICAgcmV0dXJu IGF2Y191bmtub3duX3Blcm1pc3Npb24oInN5c2N0bCIsIG9wLT5jbWQpOwog ICAgIH0KIH0KLQotc3RhdGljIGludCBjZl9jaGVjayBmbGFza19yZWFkY29u c29sZSh1aW50MzJfdCBjbGVhcikKLXsKLSAgICB1aW50MzJfdCBwZXJtcyA9 IFhFTl9fUkVBRENPTlNPTEU7Ci0KLSAgICBpZiAoIGNsZWFyICkKLSAgICAg ICAgcGVybXMgfD0gWEVOX19DTEVBUkNPTlNPTEU7Ci0KLSAgICByZXR1cm4g ZG9tYWluX2hhc194ZW4oY3VycmVudC0+ZG9tYWluLCBwZXJtcyk7Ci19CiAj ZW5kaWYgLyogQ09ORklHX1NZU0NUTCAqLwogCiBzdGF0aWMgaW5saW5lIHVp bnQzMl90IHJlc291cmNlX3RvX3Blcm0odWludDhfdCBhY2Nlc3MpCkBAIC0x OTAzLDcgKzE4OTgsNiBAQCBzdGF0aWMgY29uc3Qgc3RydWN0IHhzbV9vcHMg X19pbml0Y29uc3RfCiAgICAgLmRvbWN0bCA9IGZsYXNrX2RvbWN0bCwKICNp ZmRlZiBDT05GSUdfU1lTQ1RMCiAgICAgLnN5c2N0bCA9IGZsYXNrX3N5c2N0 bCwKLSAgICAucmVhZGNvbnNvbGUgPSBmbGFza19yZWFkY29uc29sZSwKICNl bmRpZgogCiAgICAgLmV2dGNobl91bmJvdW5kID0gZmxhc2tfZXZ0Y2huX3Vu Ym91bmQsCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-6.patch" Content-Disposition: attachment; filename="xsa499/xsa499-6.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5yZXNvdXJjZV97LHVufXBsdWdfY29yZSgp IGhvb2tzCgpJbnRlZ3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0 bCgpLCBub3cgdGhhdCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3Nl ZC4gQXMgYSBwb3NpdGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJl IHRoZW4gY2hlY2tlZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFu ZCB3aXRob3V0IEZsYXNrLiBOb3RlIHRoYXQgdGhlc2Ugd2VyZSB4ODYtCm9u bHksIGkuZS4gc29tZSBkZWFkL3VucmVhY2hhYmxlIGNvZGUgZ2V0cyBlbGlt aW5hdGVkIGZvciAoaW4gcGFydGljdWxhcikKQXJtLgoKVGhpcyBpcyBwYXJ0 IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5OS4KClNpZ25lZC1vZmYtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CkFj a2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRwc21pdGhAYXBlcnR1c3NvbHV0 aW9ucy5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvc3lzY3RsLmMKKysrIGIv eGVuL2FyY2gveDg2L3N5c2N0bC5jCkBAIC0xMTcsMjAgKzExNywxNyBAQCBs b25nIGFyY2hfZG9fc3lzY3RsKAogICAgIHsKICAgICAgICAgdW5zaWduZWQg aW50IGNwdSA9IHN5c2N0bC0+dS5jcHVfaG90cGx1Zy5jcHU7CiAgICAgICAg IHVuc2lnbmVkIGludCBvcCAgPSBzeXNjdGwtPnUuY3B1X2hvdHBsdWcub3A7 Ci0gICAgICAgIGJvb2wgcGx1ZzsKICAgICAgICAgbG9uZyAoKmZuKSh2b2lk ICpkYXRhKTsKICAgICAgICAgdm9pZCAqaGNwdTsKIAogICAgICAgICBzd2l0 Y2ggKCBvcCApCiAgICAgICAgIHsKICAgICAgICAgY2FzZSBYRU5fU1lTQ1RM X0NQVV9IT1RQTFVHX09OTElORToKLSAgICAgICAgICAgIHBsdWcgPSB0cnVl OwogICAgICAgICAgICAgZm4gPSBjcHVfdXBfaGVscGVyOwogICAgICAgICAg ICAgaGNwdSA9IF9wKGNwdSk7CiAgICAgICAgICAgICBicmVhazsKIAogICAg ICAgICBjYXNlIFhFTl9TWVNDVExfQ1BVX0hPVFBMVUdfT0ZGTElORToKLSAg ICAgICAgICAgIHBsdWcgPSBmYWxzZTsKICAgICAgICAgICAgIGZuID0gY3B1 X2Rvd25faGVscGVyOwogICAgICAgICAgICAgaGNwdSA9IF9wKGNwdSk7CiAg ICAgICAgICAgICBicmVhazsKQEAgLTE1MCw5ICsxNDcsOCBAQCBsb25nIGFy Y2hfZG9fc3lzY3RsKAogICAgICAgICAgICAgaWYgKCBDT05GSUdfTlJfQ1BV UyA8PSAxICkKICAgICAgICAgICAgICAgICAvKiBNaW1pYyBiZWhhdmlvciBv ZiBzbXRfdXBfZG93bl9oZWxwZXIoKS4gKi8KICAgICAgICAgICAgICAgICBy ZXR1cm4gMDsKLSAgICAgICAgICAgIHBsdWcgPSBvcCA9PSBYRU5fU1lTQ1RM X0NQVV9IT1RQTFVHX1NNVF9FTkFCTEU7CiAgICAgICAgICAgICBmbiA9IHNt dF91cF9kb3duX2hlbHBlcjsKLSAgICAgICAgICAgIGhjcHUgPSBfcChwbHVn KTsKKyAgICAgICAgICAgIGhjcHUgPSBfcChvcCA9PSBYRU5fU1lTQ1RMX0NQ VV9IT1RQTFVHX1NNVF9FTkFCTEUpOwogICAgICAgICAgICAgYnJlYWs7CiAK ICAgICAgICAgZGVmYXVsdDoKQEAgLTE2MSwxMCArMTU3LDYgQEAgbG9uZyBh cmNoX2RvX3N5c2N0bCgKICAgICAgICAgfQogCiAgICAgICAgIGlmICggIXJl dCApCi0gICAgICAgICAgICByZXQgPSBwbHVnID8geHNtX3Jlc291cmNlX3Bs dWdfY29yZShYU01fSE9PSykKLSAgICAgICAgICAgICAgICAgICAgICAgOiB4 c21fcmVzb3VyY2VfdW5wbHVnX2NvcmUoWFNNX0hPT0spOwotCi0gICAgICAg IGlmICggIXJldCApCiAgICAgICAgICAgICByZXQgPSBjb250aW51ZV9oeXBl cmNhbGxfb25fY3B1KDAsIGZuLCBoY3B1KTsKICAgICB9CiAgICAgYnJlYWs7 Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNs dWRlL3hzbS9kdW1teS5oCkBAIC0zOTAsMTggKzM5MCw2IEBAIHN0YXRpYyBY U01fSU5MSU5FIGludCBjZl9jaGVjayB4c21fZ2V0X2QKIH0KICNlbmRpZiAv KiBIQVNfUEFTU1RIUk9VR0ggJiYgSEFTX1BDSSAqLwogCi1zdGF0aWMgWFNN X0lOTElORSBpbnQgY2ZfY2hlY2sgeHNtX3Jlc291cmNlX3BsdWdfY29yZShY U01fREVGQVVMVF9WT0lEKQotewotICAgIFhTTV9BU1NFUlRfQUNUSU9OKFhT TV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9uKGFjdGlv biwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQotc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9yZXNvdXJjZV91bnBsdWdfY29yZShY U01fREVGQVVMVF9WT0lEKQotewotICAgIFhTTV9BU1NFUlRfQUNUSU9OKFhT TV9IT09LKTsKLSAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9uKGFjdGlv biwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKLX0KLQogc3RhdGljIFhTTV9J TkxJTkUgaW50IGNmX2NoZWNrIHhzbV9yZXNvdXJjZV9wbHVnX3BjaSgKICAg ICBYU01fREVGQVVMVF9BUkcgdWludDMyX3QgbWFjaGluZV9iZGYpCiB7Ci0t LSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4vaW5jbHVkZS94 c20veHNtLmgKQEAgLTEyMiw4ICsxMjIsNiBAQCBzdHJ1Y3QgeHNtX29wcyB7 CiAgICAgaW50ICgqZ2V0X2RldmljZV9ncm91cCkodWludDMyX3QgbWFjaGlu ZV9iZGYpOwogI2VuZGlmCiAKLSAgICBpbnQgKCpyZXNvdXJjZV9wbHVnX2Nv cmUpKHZvaWQpOwotICAgIGludCAoKnJlc291cmNlX3VucGx1Z19jb3JlKSh2 b2lkKTsKICAgICBpbnQgKCpyZXNvdXJjZV9wbHVnX3BjaSkodWludDMyX3Qg bWFjaGluZV9iZGYpOwogICAgIGludCAoKnJlc291cmNlX3VucGx1Z19wY2kp KHVpbnQzMl90IG1hY2hpbmVfYmRmKTsKICAgICBpbnQgKCpyZXNvdXJjZV9z ZXR1cF9wY2kpKHVpbnQzMl90IG1hY2hpbmVfYmRmKTsKQEAgLTUxMiwxNiAr NTEwLDYgQEAgc3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNlX3VucGx1 Z19wYwogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMucmVz b3VyY2VfdW5wbHVnX3BjaSwgbWFjaGluZV9iZGYpOwogfQogCi1zdGF0aWMg aW5saW5lIGludCB4c21fcmVzb3VyY2VfcGx1Z19jb3JlKHhzbV9kZWZhdWx0 X3QgZGVmKQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9v cHMucmVzb3VyY2VfcGx1Z19jb3JlKTsKLX0KLQotc3RhdGljIGlubGluZSBp bnQgeHNtX3Jlc291cmNlX3VucGx1Z19jb3JlKHhzbV9kZWZhdWx0X3QgZGVm KQotewotICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMucmVz b3VyY2VfdW5wbHVnX2NvcmUpOwotfQotCiBzdGF0aWMgaW5saW5lIGludCB4 c21fcmVzb3VyY2Vfc2V0dXBfcGNpKAogICAgIHhzbV9kZWZhdWx0X3QgZGVm LCB1aW50MzJfdCBtYWNoaW5lX2JkZikKIHsKLS0tIGEveGVuL3hzbS9kdW1t eS5jCisrKyBiL3hlbi94c20vZHVtbXkuYwpAQCAtNzcsOCArNzcsNiBAQCBz dGF0aWMgY29uc3Qgc3RydWN0IHhzbV9vcHMgX19pbml0Y29uc3RfCiAgICAg LmdldF9kZXZpY2VfZ3JvdXAgICAgICAgICAgICAgID0geHNtX2dldF9kZXZp Y2VfZ3JvdXAsCiAjZW5kaWYKIAotICAgIC5yZXNvdXJjZV9wbHVnX2NvcmUg ICAgICAgICAgICA9IHhzbV9yZXNvdXJjZV9wbHVnX2NvcmUsCi0gICAgLnJl c291cmNlX3VucGx1Z19jb3JlICAgICAgICAgID0geHNtX3Jlc291cmNlX3Vu cGx1Z19jb3JlLAogICAgIC5yZXNvdXJjZV9wbHVnX3BjaSAgICAgICAgICAg ICA9IHhzbV9yZXNvdXJjZV9wbHVnX3BjaSwKICAgICAucmVzb3VyY2VfdW5w bHVnX3BjaSAgICAgICAgICAgPSB4c21fcmVzb3VyY2VfdW5wbHVnX3BjaSwK ICAgICAucmVzb3VyY2Vfc2V0dXBfcGNpICAgICAgICAgICAgPSB4c21fcmVz b3VyY2Vfc2V0dXBfcGNpLAotLS0gYS94ZW4veHNtL2ZsYXNrL2hvb2tzLmMK KysrIGIveGVuL3hzbS9mbGFzay9ob29rcy5jCkBAIC01NSw2ICs1NSwxMSBA QCBzdGF0aWMgaW50IGZsYXNrX2RlYXNzaWduX2R0ZGV2aWNlKHN0cnVjCiAj ZW5kaWYKICNlbmRpZiAvKiBDT05GSUdfSEFTX1BBU1NUSFJPVUdIICovCiAK KyNpZiBkZWZpbmVkKENPTkZJR19TWVNDVEwpIHx8IGRlZmluZWQoQ09ORklH X1g4NikKK3N0YXRpYyBpbnQgZmxhc2tfcmVzb3VyY2VfcGx1Z19jb3JlKHZv aWQpOworc3RhdGljIGludCBmbGFza19yZXNvdXJjZV91bnBsdWdfY29yZSh2 b2lkKTsKKyNlbmRpZgorCiBzdGF0aWMgdWludDMyX3QgZG9tYWluX3NpZChj b25zdCBzdHJ1Y3QgZG9tYWluICpkb20pCiB7CiAgICAgc3RydWN0IGRvbWFp bl9zZWN1cml0eV9zdHJ1Y3QgKmRzZWMgPSBkb20tPnNzaWQ7CkBAIC04Nzgs OSArODgzLDYgQEAgc3RhdGljIGludCBjZl9jaGVjayBmbGFza19zeXNjdGwo Y29uc3QgcwogICAgIHsKICAgICAvKiBUaGVzZSBoYXZlIGluZGl2aWR1YWwg WFNNIGhvb2tzICovCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3BhZ2Vfb2ZmbGlu ZV9vcDoKLSNpZmRlZiBDT05GSUdfWDg2Ci0gICAgY2FzZSBYRU5fU1lTQ1RM X2NwdV9ob3RwbHVnOgotI2VuZGlmCiAgICAgICAgIHJldHVybiAwOwogCiAg ICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRjb25zb2xlOgpAQCAtOTMyLDYgKzkz NCwyMyBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3N5c2N0bChjb25z dCBzCiAgICAgY2FzZSBYRU5fU1lTQ1RMX2dldGRvbWFpbmluZm9saXN0Ogog ICAgICAgICByZXR1cm4gZmxhc2tfZ2V0ZG9tYWluaW5mbyhkb21feGVuKTsK IAorI2lmZGVmIENPTkZJR19YODYKKyAgICBjYXNlIFhFTl9TWVNDVExfY3B1 X2hvdHBsdWc6CisgICAgICAgIHN3aXRjaCAoIG9wLT51LmNwdV9ob3RwbHVn Lm9wICkKKyAgICAgICAgeworICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfT05MSU5FOgorICAgICAgICBjYXNlIFhFTl9TWVNDVExfQ1BV X0hPVFBMVUdfU01UX0VOQUJMRToKKyAgICAgICAgICAgIHJldHVybiBmbGFz a19yZXNvdXJjZV9wbHVnX2NvcmUoKTsKKworICAgICAgICBjYXNlIFhFTl9T WVNDVExfQ1BVX0hPVFBMVUdfT0ZGTElORToKKyAgICAgICAgY2FzZSBYRU5f U1lTQ1RMX0NQVV9IT1RQTFVHX1NNVF9ESVNBQkxFOgorICAgICAgICAgICAg cmV0dXJuIGZsYXNrX3Jlc291cmNlX3VucGx1Z19jb3JlKCk7CisKKyAgICAg ICAgZGVmYXVsdDoKKyAgICAgICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9w ZXJtaXNzaW9uKCJjcHVfaG90cGx1ZyIsIG9wLT51LmNwdV9ob3RwbHVnLm9w KTsKKyAgICAgICAgfQorI2VuZGlmCisKICAgICBjYXNlIFhFTl9TWVNDVExf cHNyX2NtdF9vcDoKICAgICAgICAgcmV0dXJuIGF2Y19jdXJyZW50X2hhc19w ZXJtKFNFQ0lOSVRTSURfWEVOLCBTRUNDTEFTU19YRU4yLAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgWEVOMl9fUFNSX0NNVF9PUCwg TlVMTCk7CkBAIC0xMjA3LDEyICsxMjI2LDEyIEBAIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgZmxhc2tfcGNpX2NvbmZpZ19wZXIKIH0KIAogI2lmIGRlZmluZWQo Q09ORklHX1NZU0NUTCkgfHwgZGVmaW5lZChDT05GSUdfWDg2KQotc3RhdGlj IGludCBjZl9jaGVjayBmbGFza19yZXNvdXJjZV9wbHVnX2NvcmUodm9pZCkK K3N0YXRpYyBpbnQgZmxhc2tfcmVzb3VyY2VfcGx1Z19jb3JlKHZvaWQpCiB7 CiAgICAgcmV0dXJuIGF2Y19jdXJyZW50X2hhc19wZXJtKFNFQ0lOSVRTSURf RE9NWEVOLCBTRUNDTEFTU19SRVNPVVJDRSwgUkVTT1VSQ0VfX1BMVUcsIE5V TEwpOwogfQogCi1zdGF0aWMgaW50IGNmX2NoZWNrIGZsYXNrX3Jlc291cmNl X3VucGx1Z19jb3JlKHZvaWQpCitzdGF0aWMgaW50IGZsYXNrX3Jlc291cmNl X3VucGx1Z19jb3JlKHZvaWQpCiB7CiAgICAgcmV0dXJuIGF2Y19jdXJyZW50 X2hhc19wZXJtKFNFQ0lOSVRTSURfRE9NWEVOLCBTRUNDTEFTU19SRVNPVVJD RSwgUkVTT1VSQ0VfX1VOUExVRywgTlVMTCk7CiB9CkBAIC0xOTQ4LDggKzE5 NjcsNiBAQCBzdGF0aWMgY29uc3Qgc3RydWN0IHhzbV9vcHMgX19pbml0Y29u c3RfCiAgICAgLmlvbWVtX21hcHBpbmdfdnBjaSA9IGZsYXNrX2lvbWVtX21h cHBpbmcsCiAgICAgLnBjaV9jb25maWdfcGVybWlzc2lvbiA9IGZsYXNrX3Bj aV9jb25maWdfcGVybWlzc2lvbiwKIAotICAgIC5yZXNvdXJjZV9wbHVnX2Nv cmUgPSBmbGFza19yZXNvdXJjZV9wbHVnX2NvcmUsCi0gICAgLnJlc291cmNl X3VucGx1Z19jb3JlID0gZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUsCiAg ICAgLnJlc291cmNlX3BsdWdfcGNpID0gZmxhc2tfcmVzb3VyY2VfcGx1Z19w Y2ksCiAgICAgLnJlc291cmNlX3VucGx1Z19wY2kgPSBmbGFza19yZXNvdXJj ZV91bnBsdWdfcGNpLAogICAgIC5yZXNvdXJjZV9zZXR1cF9wY2kgPSBmbGFz a19yZXNvdXJjZV9zZXR1cF9wY2ksCg== --=separator Content-Type: application/octet-stream; name="xsa499/xsa499-7.patch" Content-Disposition: attachment; filename="xsa499/xsa499-7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBzeXNjdGwvWFNNOiBkcm9wIC5wYWdlX29mZmxpbmUoKSBob29rCgpJbnRl Z3JhdGUgdGhlIGNoZWNraW5nIHdpdGggeHNtX3N5c2N0bCgpLCBub3cgdGhh dCBpdCBoYXMgdGhlIGZ1bGwgb3AKc3RydWN0IHBhc3NlZC4gQXMgYSBwb3Np dGl2ZSBzaWRlIGVmZmVjdCwgcGVybWlzc2lvbnMgYXJlIHRoZW4gY2hlY2tl ZCBhdAp0aGUgc2FtZSBlYXJseSBwb2ludCB3aXRoIGFuZCB3aXRob3V0IEZs YXNrLgoKVGhpcyBpcyBwYXJ0IG9mIENWRS0yMDI2LTYyNDI2IC8gWFNBLTQ5 OS4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNl LmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+CkFja2VkLUJ5OiBEYW5pZWwgUC4gU21pdGggPGRw c21pdGhAYXBlcnR1c3NvbHV0aW9ucy5jb20+CgotLS0gYS94ZW4vY29tbW9u L3N5c2N0bC5jCisrKyBiL3hlbi9jb21tb24vc3lzY3RsLmMKQEAgLTE4OSwx MCArMTg5LDYgQEAgbG9uZyBkb19zeXNjdGwoWEVOX0dVRVNUX0hBTkRMRV9Q QVJBTSh4ZQogICAgICAgICBpZiAoIG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg PCBvcC0+dS5wYWdlX29mZmxpbmUuc3RhcnQgKQogICAgICAgICAgICAgYnJl YWs7CiAKLSAgICAgICAgcmV0ID0geHNtX3BhZ2Vfb2ZmbGluZShYU01fSE9P Sywgb3AtPnUucGFnZV9vZmZsaW5lLmNtZCk7Ci0gICAgICAgIGlmICggcmV0 ICkKLSAgICAgICAgICAgIGJyZWFrOwotCiAgICAgICAgIHB0ciA9IHN0YXR1 cyA9IHhtYWxsb2NfYXJyYXkodWludDMyX3QsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKG9wLT51LnBhZ2Vfb2ZmbGluZS5lbmQg LQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvcC0+ dS5wYWdlX29mZmxpbmUuc3RhcnQgKyAxKSk7Ci0tLSBhL3hlbi9pbmNsdWRl L3hzbS9kdW1teS5oCisrKyBiL3hlbi9pbmNsdWRlL3hzbS9kdW1teS5oCkBA IC00MjMsMTIgKzQyMyw2IEBAIHN0YXRpYyBYU01fSU5MSU5FIGludCBjZl9j aGVjayB4c21fcmVzb3UKICAgICByZXR1cm4geHNtX2RlZmF1bHRfYWN0aW9u KGFjdGlvbiwgY3VycmVudC0+ZG9tYWluLCBOVUxMKTsKIH0KIAotc3RhdGlj IFhTTV9JTkxJTkUgaW50IGNmX2NoZWNrIHhzbV9wYWdlX29mZmxpbmUoWFNN X0RFRkFVTFRfQVJHIHVpbnQzMl90IGNtZCkKLXsKLSAgICBYU01fQVNTRVJU X0FDVElPTihYU01fSE9PSyk7Ci0gICAgcmV0dXJuIHhzbV9kZWZhdWx0X2Fj dGlvbihhY3Rpb24sIGN1cnJlbnQtPmRvbWFpbiwgTlVMTCk7Ci19Ci0KIHN0 YXRpYyBYU01fSU5MSU5FIGludCBjZl9jaGVjayB4c21faHlwZnNfb3AoWFNN X0RFRkFVTFRfVk9JRCkKIHsKICAgICBYU01fQVNTRVJUX0FDVElPTihYU01f UFJJVik7Ci0tLSBhL3hlbi9pbmNsdWRlL3hzbS94c20uaAorKysgYi94ZW4v aW5jbHVkZS94c20veHNtLmgKQEAgLTEyOCw5ICsxMjgsNiBAQCBzdHJ1Y3Qg eHNtX29wcyB7CiAgICAgaW50ICgqcmVzb3VyY2Vfc2V0dXBfZ3NpKShpbnQg Z3NpKTsKICAgICBpbnQgKCpyZXNvdXJjZV9zZXR1cF9taXNjKSh2b2lkKTsK IAotI2lmZGVmIENPTkZJR19TWVNDVEwKLSAgICBpbnQgKCpwYWdlX29mZmxp bmUpKHVpbnQzMl90IGNtZCk7Ci0jZW5kaWYKICAgICBpbnQgKCpoeXBmc19v cCkodm9pZCk7CiAKICAgICBsb25nICgqZG9feHNtX29wKShYRU5fR1VFU1Rf SEFORExFX1BBUkFNKHZvaWQpIG9wKTsKQEAgLTUyNiwxMyArNTIzLDYgQEAg c3RhdGljIGlubGluZSBpbnQgeHNtX3Jlc291cmNlX3NldHVwX21pcwogICAg IHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMucmVzb3VyY2Vfc2V0 dXBfbWlzYyk7CiB9CiAKLSNpZmRlZiBDT05GSUdfU1lTQ1RMCi1zdGF0aWMg aW5saW5lIGludCB4c21fcGFnZV9vZmZsaW5lKHhzbV9kZWZhdWx0X3QgZGVm LCB1aW50MzJfdCBjbWQpCi17Ci0gICAgcmV0dXJuIGFsdGVybmF0aXZlX2Nh bGwoeHNtX29wcy5wYWdlX29mZmxpbmUsIGNtZCk7Ci19Ci0jZW5kaWYKLQog c3RhdGljIGlubGluZSBpbnQgeHNtX2h5cGZzX29wKHhzbV9kZWZhdWx0X3Qg ZGVmKQogewogICAgIHJldHVybiBhbHRlcm5hdGl2ZV9jYWxsKHhzbV9vcHMu aHlwZnNfb3ApOwotLS0gYS94ZW4veHNtL2R1bW15LmMKKysrIGIveGVuL3hz bS9kdW1teS5jCkBAIC04Myw5ICs4Myw2IEBAIHN0YXRpYyBjb25zdCBzdHJ1 Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAgICAucmVzb3VyY2Vfc2V0dXBf Z3NpICAgICAgICAgICAgPSB4c21fcmVzb3VyY2Vfc2V0dXBfZ3NpLAogICAg IC5yZXNvdXJjZV9zZXR1cF9taXNjICAgICAgICAgICA9IHhzbV9yZXNvdXJj ZV9zZXR1cF9taXNjLAogCi0jaWZkZWYgQ09ORklHX1NZU0NUTAotICAgIC5w YWdlX29mZmxpbmUgICAgICAgICAgICAgICAgICA9IHhzbV9wYWdlX29mZmxp bmUsCi0jZW5kaWYKICAgICAuaHlwZnNfb3AgICAgICAgICAgICAgICAgICAg ICAgPSB4c21faHlwZnNfb3AsCiAgICAgLmh2bV9wYXJhbSAgICAgICAgICAg ICAgICAgICAgID0geHNtX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2Fs dHAybWh2bSAgICAgICAgICAgPSB4c21faHZtX3BhcmFtX2FsdHAybWh2bSwK LS0tIGEveGVuL3hzbS9mbGFzay9ob29rcy5jCisrKyBiL3hlbi94c20vZmxh c2svaG9va3MuYwpAQCAtNjAsNiArNjAsMTAgQEAgc3RhdGljIGludCBmbGFz a19yZXNvdXJjZV9wbHVnX2NvcmUodm9pZAogc3RhdGljIGludCBmbGFza19y ZXNvdXJjZV91bnBsdWdfY29yZSh2b2lkKTsKICNlbmRpZgogCisjaWZkZWYg Q09ORklHX1NZU0NUTAorc3RhdGljIGludCBmbGFza19yZXNvdXJjZV91c2Vf Y29yZSh2b2lkKTsKKyNlbmRpZgorCiBzdGF0aWMgdWludDMyX3QgZG9tYWlu X3NpZChjb25zdCBzdHJ1Y3QgZG9tYWluICpkb20pCiB7CiAgICAgc3RydWN0 IGRvbWFpbl9zZWN1cml0eV9zdHJ1Y3QgKmRzZWMgPSBkb20tPnNzaWQ7CkBA IC04ODEsMTAgKzg4NSw2IEBAIHN0YXRpYyBpbnQgY2ZfY2hlY2sgZmxhc2tf c3lzY3RsKGNvbnN0IHMKIHsKICAgICBzd2l0Y2ggKCBvcC0+Y21kICkKICAg ICB7Ci0gICAgLyogVGhlc2UgaGF2ZSBpbmRpdmlkdWFsIFhTTSBob29rcyAq LwotICAgIGNhc2UgWEVOX1NZU0NUTF9wYWdlX29mZmxpbmVfb3A6Ci0gICAg ICAgIHJldHVybiAwOwotCiAgICAgY2FzZSBYRU5fU1lTQ1RMX3JlYWRjb25z b2xlOgogICAgICAgICByZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ ZG9tYWluLAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgWEVOX19S RUFEQ09OU09MRSB8CkBAIC05MTUsNiArOTE1LDIzIEBAIHN0YXRpYyBpbnQg Y2ZfY2hlY2sgZmxhc2tfc3lzY3RsKGNvbnN0IHMKICAgICBjYXNlIFhFTl9T WVNDVExfcG1fb3A6CiAgICAgICAgIHJldHVybiBkb21haW5faGFzX3hlbihj dXJyZW50LT5kb21haW4sIFhFTl9fUE1fT1ApOwogCisgICAgY2FzZSBYRU5f U1lTQ1RMX3BhZ2Vfb2ZmbGluZV9vcDoKKyAgICAgICAgc3dpdGNoICggb3At PnUucGFnZV9vZmZsaW5lLmNtZCApCisgICAgICAgIHsKKyAgICAgICAgY2Fz ZSBzeXNjdGxfcGFnZV9vZmZsaW5lOgorICAgICAgICAgICAgcmV0dXJuIGZs YXNrX3Jlc291cmNlX3VucGx1Z19jb3JlKCk7CisKKyAgICAgICAgY2FzZSBz eXNjdGxfcGFnZV9vbmxpbmU6CisgICAgICAgICAgICByZXR1cm4gZmxhc2tf cmVzb3VyY2VfcGx1Z19jb3JlKCk7CisKKyAgICAgICAgY2FzZSBzeXNjdGxf cXVlcnlfcGFnZV9vZmZsaW5lOgorICAgICAgICAgICAgcmV0dXJuIGZsYXNr X3Jlc291cmNlX3VzZV9jb3JlKCk7CisKKyAgICAgICAgZGVmYXVsdDoKKyAg ICAgICAgICAgIHJldHVybiBhdmNfdW5rbm93bl9wZXJtaXNzaW9uKCJwYWdl X29mZmxpbmUiLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgb3AtPnUucGFnZV9vZmZsaW5lLmNtZCk7CisgICAgICAgIH0K KwogICAgIGNhc2UgWEVOX1NZU0NUTF9sb2NrcHJvZl9vcDoKICAgICAgICAg cmV0dXJuIGRvbWFpbl9oYXNfeGVuKGN1cnJlbnQtPmRvbWFpbiwgWEVOX19M T0NLUFJPRik7CiAKQEAgLTEzMDcsMjMgKzEzMjQsNiBAQCBzdGF0aWMgaW50 IGNmX2NoZWNrIGZsYXNrX3Jlc291cmNlX3NldHVwCiAgICAgcmV0dXJuIGF2 Y19jdXJyZW50X2hhc19wZXJtKFNFQ0lOSVRTSURfWEVOLCBTRUNDTEFTU19S RVNPVVJDRSwgUkVTT1VSQ0VfX1NFVFVQLCBOVUxMKTsKIH0KIAotI2lmZGVm IENPTkZJR19TWVNDVEwKLXN0YXRpYyBpbmxpbmUgaW50IGNmX2NoZWNrIGZs YXNrX3BhZ2Vfb2ZmbGluZSh1aW50MzJfdCBjbWQpCi17Ci0gICAgc3dpdGNo ICggY21kICkKLSAgICB7Ci0gICAgY2FzZSBzeXNjdGxfcGFnZV9vZmZsaW5l OgotICAgICAgICByZXR1cm4gZmxhc2tfcmVzb3VyY2VfdW5wbHVnX2NvcmUo KTsKLSAgICBjYXNlIHN5c2N0bF9wYWdlX29ubGluZToKLSAgICAgICAgcmV0 dXJuIGZsYXNrX3Jlc291cmNlX3BsdWdfY29yZSgpOwotICAgIGNhc2Ugc3lz Y3RsX3F1ZXJ5X3BhZ2Vfb2ZmbGluZToKLSAgICAgICAgcmV0dXJuIGZsYXNr X3Jlc291cmNlX3VzZV9jb3JlKCk7Ci0gICAgZGVmYXVsdDoKLSAgICAgICAg cmV0dXJuIGF2Y191bmtub3duX3Blcm1pc3Npb24oInBhZ2Vfb2ZmbGluZSIs IGNtZCk7Ci0gICAgfQotfQotI2VuZGlmIC8qIENPTkZJR19TWVNDVEwgKi8K LQogc3RhdGljIGlubGluZSBpbnQgY2ZfY2hlY2sgZmxhc2tfaHlwZnNfb3Ao dm9pZCkKIHsKICAgICByZXR1cm4gZG9tYWluX2hhc194ZW4oY3VycmVudC0+ ZG9tYWluLCBYRU5fX0hZUEZTX09QKTsKQEAgLTE5NzMsOSArMTk3Myw2IEBA IHN0YXRpYyBjb25zdCBzdHJ1Y3QgeHNtX29wcyBfX2luaXRjb25zdF8KICAg ICAucmVzb3VyY2Vfc2V0dXBfZ3NpID0gZmxhc2tfcmVzb3VyY2Vfc2V0dXBf Z3NpLAogICAgIC5yZXNvdXJjZV9zZXR1cF9taXNjID0gZmxhc2tfcmVzb3Vy Y2Vfc2V0dXBfbWlzYywKIAotI2lmZGVmIENPTkZJR19TWVNDVEwKLSAgICAu cGFnZV9vZmZsaW5lID0gZmxhc2tfcGFnZV9vZmZsaW5lLAotI2VuZGlmCiAg ICAgLmh5cGZzX29wID0gZmxhc2tfaHlwZnNfb3AsCiAgICAgLmh2bV9wYXJh bSA9IGZsYXNrX2h2bV9wYXJhbSwKICAgICAuaHZtX3BhcmFtX2FsdHAybWh2 bSA9IGZsYXNrX2h2bV9wYXJhbV9hbHRwMm1odm0sCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372463.1619826 (Exim 4.92) (envelope-from ) id 1wogYP-0007AW-IN; Tue, 28 Jul 2026 12:05:01 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372463.1619826; Tue, 28 Jul 2026 12:05:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYP-000786-6c; Tue, 28 Jul 2026 12:05:01 +0000 Received: by outflank-mailman (input) for mailman id 1372463; Tue, 28 Jul 2026 12:04:59 +0000 Received: from mx.expurgate.net ([195.190.135.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYN-0006RS-87; Tue, 28 Jul 2026 12:04:59 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYM-00BEEG-Kg; Tue, 28 Jul 2026 14:04:58 +0200 Received: from [10.42.69.12] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689adb-2eae-0a2a0a5409dd-0a2a450ce1f8-48 for ; Tue, 28 Jul 2026 14:04:58 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-d25034.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689ae9-f479-0a2a450c0019-6882d725b7c2-3 for ; Tue, 28 Jul 2026 14:04:58 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYG-00DP88-1t; Tue, 28 Jul 2026 12:04:52 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYG-003Dcb-0p; Tue, 28 Jul 2026 12:04:52 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 496 v2 (CVE-2026-42492) - vIRQ event channel binding may break Xenstore Message-Id: Date: Tue, 28 Jul 2026 12:04:52 +0000 X-purgate-ID: tlsNG-d25034/1785240298-50321A5B-A6843B0E/0/0 X-purgate-type: clean X-purgate-size: 5444 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-42492 / XSA-496 version 2 vIRQ event channel binding may break Xenstore UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state was introduced. The management of the bitmap underlying that operation is tied into the binding of the VIRQ_DOM_EXC virtual IRQ. Unfortunately an error path there would tear down the bitmap even in cases when it wasn't set up. Unprivileged domains can trigger that error path. IMPACT ====== An unprivileged domain can affect the operation of Xenstore, potentially leading to a Denial of Service (DoS) affecting the entire host. A hypervisor crash with similar host wide effect also is possible, albeit unlikely. VULNERABLE SYSTEMS ================== Xen 4.21 and onwards are vulnerable. Xen 4.20 and older are not vulnerable. MITIGATION ========== There is no known mitigation. CREDITS ======= This issue was discovered by Grygorii Strashko of EPAM. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa496.patch xen-unstable - Xen 4.21.x $ sha256sum xsa496* 80a0a807dd9d7ae793b462d78da2bd9d4f84eb5062f3e60622d12edde9c2a27c xsa496.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomqwMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZc8IIALEzvp6RymbSYDSTBqNl4k+mRBOfMTdwOGKA9lNm zYl9rFlGcTTR2HogU9Vplm0gQmcrksFndwXMzjkOqLlRnbDs6JsSIpuQaWi6jm7f Fj0QLAMXLxLLMAPvC8j9kLJjJrlv7X1VeYolsHBSq3lCoqb5YgZaqMIDuOXgO9+7 //cSTRbaEnm4UBrV/WxUX1pd6RHOBbioJjyLwy4QZyfoTfXtVrw6bv5IHsq8GyD6 QYRFnh9fZ+33p7LDoU5jUlDO+TnJZeUlbWGqMTsxdGx8l93662nNGDIYrxJr+/8g 6CmXyObBkiI3qXRT7sSt1/FzdnoDIQTPtIyv4xuIi4GMT+0= =V0J6 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa496.patch" Content-Disposition: attachment; filename="xsa496.patch" Content-Transfer-Encoding: base64 RnJvbTogR3J5Z29yaWkgU3RyYXNoa28gPGdyeWdvcmlpX3N0cmFzaGtvQGVw YW0uY29tPgpTdWJqZWN0OiBldnRjaG46IGV2dGNobl9iaW5kX3ZpcnEoKSBl cnJvciBwYXRoIHVuY29uZGl0aW9uYWxseSBjYWxscyBkb21haW5fZGVpbml0 X3N0YXRlcygpCgpUaGVyZSBpcyBhIGNvcm5lciBjYXNlIGluIHRoZSBlcnJv ciBwYXRoIG9mIGV2dGNobl9iaW5kX3ZpcnEoKSAoaGFuZGxpbmcKRVZUQ0hO T1BfYmluZF92aXJxIGh5cGVyY2FsbCkgd2hpY2ggYWxsb3dzIHVucHJpdmls ZWdlZCBkb21haW5zIHRvCmludGVyZmVyZSB3aXRoIHByaXZpbGVnZWQgb25l czogSWYgYW4gdW5wcml2aWxlZ2VkIGRvbWFpbiBhbGxvY2F0ZXMgYWxsCmF2 YWlsYWJsZSBwb3J0cyB0byByZWFjaCAibm8gbW9yZSBwb3J0cyBhdmFpbGFi bGUiIGFuZCB0aGVuIGlzc3VlcyBhbgpFVlRDSE5PUF9iaW5kX3ZpcnEgaHlw ZXJjYWxsIHRvIGJpbmQgYW55IGFsbG93ZWQgVklSUSAoZS5nLiBWSVJRX0RF QlVHKSwKZG9tYWluX2RlaW5pdF9zdGF0ZXMoKSB3aWxsIGJlIGNhbGxlZCBk ZXNwaXRlIG5vdCBoYXZpbmcgY2FsbGVkCmRvbWFpbl9pbml0X3N0YXRlcygp LgoKVG8gZml4IHRoZSBpc3N1ZSBtb3ZlIGRvbWFpbl9kZWluaXRfc3RhdGVz KGQpIHVuZGVyIHRoZSBzYW1lIGNvbmRpdGlvbiBhcwp1c2VkIGZvciB0aGUg ZG9tYWluX2luaXRfc3RhdGVzKCkgY2FsbC4KClRoaXMgaXMgQ1ZFLTIwMjYt NDI0OTIgLyBYU0EtNDk2LgoKRml4ZXM6IGY5NDM2MGE3ZmU5YiAoInhlbjog YWRkIGJpdG1hcCB0byBpbmRpY2F0ZSBwZXItZG9tYWluIHN0YXRlIGNoYW5n ZXMiKQpTaWduZWQtb2ZmLWJ5OiBHcnlnb3JpaSBTdHJhc2hrbyA8Z3J5Z29y aWlfc3RyYXNoa29AZXBhbS5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEp1ZXJnZW4g R3Jvc3MgPGpncm9zc0BzdXNlLmNvbT4KCi0tLSBhL3hlbi9jb21tb24vZXZl bnRfY2hhbm5lbC5jCisrKyBiL3hlbi9jb21tb24vZXZlbnRfY2hhbm5lbC5j CkBAIC01MjMsNyArNTIzLDggQEAgaW50IGV2dGNobl9iaW5kX3ZpcnEoZXZ0 Y2huX2JpbmRfdmlycV90CiAgICAgaWYgKCByYyA8IDAgKQogICAgIHsKICAg ICAgICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJFVlRDSE5PUCBmYWls dXJlOiBlcnJvciAlZFxuIiwgcmMpOwotICAgICAgICBkb21haW5fZGVpbml0 X3N0YXRlcyhkKTsKKyAgICAgICAgaWYgKCB2aXJxID09IFZJUlFfRE9NX0VY QyApCisgICAgICAgICAgICBkb21haW5fZGVpbml0X3N0YXRlcyhkKTsKICAg ICAgICAgZ290byBvdXQ7CiAgICAgfQogCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372467.1619871 (Exim 4.92) (envelope-from ) id 1wogYS-0008C1-ER; Tue, 28 Jul 2026 12:05:04 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372467.1619871; Tue, 28 Jul 2026 12:05:04 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYS-00089H-0g; Tue, 28 Jul 2026 12:05:04 +0000 Received: by outflank-mailman (input) for mailman id 1372467; Tue, 28 Jul 2026 12:05:02 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYP-000752-8s; Tue, 28 Jul 2026 12:05:01 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYO-004OSi-Kv; Tue, 28 Jul 2026 14:05:00 +0200 Received: from [10.42.69.10] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689ae7-5cb7-0a2a0a5109dd-0a2a450ad736-18 for ; Tue, 28 Jul 2026 14:05:00 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-4011c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689aeb-f2d2-0a2a450a0019-6882d725aa00-3 for ; Tue, 28 Jul 2026 14:05:00 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYJ-00DP8U-1f; Tue, 28 Jul 2026 12:04:55 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYJ-003Ddz-0e; Tue, 28 Jul 2026 12:04:55 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 497 v2 (CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425) - buffer overruns in libfsimage iso9660 handling Message-Id: Date: Tue, 28 Jul 2026 12:04:55 +0000 X-purgate-ID: tlsNG-4011c0/1785240300-4BED2CFC-6E1EE151/0/0 X-purgate-type: clean X-purgate-size: 13351 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425 / XSA-497 version 2 buffer overruns in libfsimage iso9660 handling UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them: * The directory loop itself assumes a good record length. This is CVE-2026-42494. * The calculation of the System Use area may underflow. This is CVE-2026-42495. * The Rock Ridge extension loop assumes a good (inner) record length. This is CVE-2026-62423. * The Rock Ridge NM record processing assumes a good entry length. This is CVE-2026-62424. * The Rock Ridge CE record processing assumes a good size and offset. This is CVE-2026-62425. IMPACT ====== A guest using pygrub can escalate its privilege to that of the domain construction tools (i.e., normally, to control of the host). If the mechanism introduced by XSA-443 (see the mitigation section below) is in use, then the guest can only escalate to this limited context. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are affected. Older versions have not been inspected. MITIGATION ========== XSA-443 added a mechanism to run pygrub de-privileged. Using this mode will mitigate the vulnerability. Ensuring that guests do not use the pygrub bootloader will avoid this vulnerability. For cases where the PV guest is known to be 64bit, and uses grub2 as a bootloader, pvgrub is a suitable alternative to pygrub. Running only HVM or PVH guests will avoid the vulnerability. CREDITS ======= This issue was discovered by Syed Abdul Khaliq of BugQore. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa497.patch xen-unstable - Xen 4.17.x $ sha256sum xsa497* 65925ac5a322b9eacc8538d6486e3e37ddcb83fe6f02f61c18216ccd2770f964 xsa497.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomq0MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZyesH/0dz6MuK3DsILiWvYuGNuX//RcdpBlQtLmyQR382 vpoicCuEAJLJlZFZsPddIxjTxte77nbFs2Ih51br95J//ou6sX7q6V9wDGt4EHDK pF4ECI8SCkHDszogIDGDFiSdi7V7VknGpLCjFtINaAcaRLMHx+MMcdMV80IZyoXw 8p2XY7xvaXyo90I1FiecN7yU0H49sYJswLvihJU55hDuBZ25HLe2K59UGs2uaVm2 J0QKIBi3k20kZ5p9diny+cjU81fVu8LwGPKjvK3KUoyNnFsNbsO5owrAq2w/FSbE 1K54Lj6FXk0w08c4S0kz4zLXKLhSeCl7hFvqUpmQAXaN7ew= =0lw8 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa497.patch" Content-Disposition: attachment; filename="xsa497.patch" Content-Transfer-Encoding: base64 RnJvbTogU3llZCBBYmR1bCBLaGFsaXEgPGFiZHVsQGJ1Z3FvcmUuY29tPgpT dWJqZWN0OiBsaWJmc2ltYWdlL2lzbzk2NjA6IGhhcmRlbiBSb2NrIFJpZGdl IFNVU1AgcGFyc2luZyBhZ2FpbnN0IG1hbGZvcm1lZCBsZW5ndGhzCgpUaGUg ZGlyZWN0b3J5IGFuZCBSb2NrIFJpZGdlIC8gU1VTUCB3YWxrIGluIGlzbzk2 NjBfZGlyKCkgZGVyaXZlcyBzZXZlcmFsCmxlbmd0aHMgZGlyZWN0bHkgZnJv bSBhdHRhY2tlci1jb250cm9sbGVkIG9uLWRpc2sgZmllbGRzIHdpdGhvdXQg dmFsaWRhdGluZwp0aGVtLiAgbGliZnNpbWFnZSBpcyB1c2VkIGJ5IHB5Z3J1 Yiwgd2hpY2ggcGFyc2VzIHRoZSBmaWxlc3lzdGVtIG9mIGFuCnVudHJ1c3Rl ZCBndWVzdCBkaXNrIGltYWdlIGZyb20gZG9tMCwgc28gdGhlc2UgYXJlIHJl YWNoYWJsZSBhY3Jvc3MgYSB0cnVzdApib3VuZGFyeS4KCkZpdmUgcmVsYXRl ZCBwcm9ibGVtcyBhcmUgYWRkcmVzc2VkOgoKICAqIFRoZSBkaXJlY3Rvcnkg cmVjb3JkIGxvb3AgYWR2YW5jZXMgYnkKCiAgICAgICAgaWRyID0gKGNoYXIg KilpZHIgKyBpZHItPmxlbmd0aC5sCgogICAgYW5kIG9ubHkgc3RvcHMgb24g bGVuZ3RoLmwgPT0gMC4gIEEgcmVjb3JkIHdob3NlIGxlbmd0aCBpcyBzbWFs bGVyIHRoYW4KICAgIHRoZSBmaXhlZCBwYXJ0IG9mIHRoZSBvbi1kaXNrIGxh eW91dCBjYW5ub3QgaG9sZCBpdHMgb3duIG1hbmRhdG9yeQogICAgZmllbGRz LCB5ZXQgdGhlIGJvZHkgc3RpbGwgcmVhZHMgbmFtZV9sZW4vZXh0ZW50L3Np emUgYW5kIGNvbXB1dGVzIHRoZQogICAgU3lzdGVtIFVzZSBhcmVhIGxlbmd0 aCBmcm9tIGl0LiAgUmVxdWlyZSBsZW5ndGggdG8gY292ZXIgYXQgbGVhc3Qg dGhlCiAgICBmaXhlZCByZWNvcmQgKHNpemVvZigqaWRyKSAtIHNpemVvZihp ZHItPm5hbWUpKSBiZWZvcmUgZW50ZXJpbmcgdGhlIGJvZHkuCgogICAgVGhp cyBpcyBDVkUtMjAyNi00MjQ5NC4KCiAgKiBUaGUgU3lzdGVtIFVzZSBhcmVh IGxlbmd0aCBpcyBjb21wdXRlZCBiZWZvcmUgdGhlIGlubmVyIGxvb3AgYXMK CiAgICAgICAgcnJfbGVuID0gaWRyLT5sZW5ndGgubCAtIGlkci0+bmFtZV9s ZW4ubAogICAgICAgICAgICAgICAgIC0gc2l6ZW9mKHN0cnVjdCBpc29fZGly ZWN0b3J5X3JlY29yZCkgKyBzaXplb2YoaWRyLT5uYW1lKTsKCiAgICBpbiB1 bnNpZ25lZCBhcml0aG1ldGljLiAgSWYgbGVuZ3RoLmwgaXMgc21hbGxlciB0 aGFuIG5hbWVfbGVuLmwgcGx1cyB0aGUKICAgIGZpeGVkIHJlY29yZCBzaXpl LCBycl9sZW4gdW5kZXJmbG93cyB0byBhIGh1Z2UgdmFsdWUgYW5kIHRoZSB3 aG9sZSBTVVNQCiAgICB3YWxrIHJ1bnMgb2ZmIHRoZSBkaXJlY3RvcnkgYnVm ZmVyLiAgR3VhcmQgdGhlIHN1YnRyYWN0aW9uIGFuZCB0cmVhdCBzdWNoCiAg ICByZWNvcmRzIGFzIGhhdmluZyBubyBTeXN0ZW0gVXNlIGFyZWEuCgogICAg VGhpcyBpcyBDVkUtMjAyNi00MjQ5NS4KCiAgKiBJbnNpZGUgdGhlIGxvb3As IGVhY2ggZW50cnkgaXMgY29uc3VtZWQgd2l0aAoKICAgICAgICBycl9sZW4g LT0gcnJfcHRyLnJyLT5sZW47CiAgICAgICAgcnJfcHRyLnB0ciArPSBycl9w dHIucnItPmxlbjsKCiAgICB3aXRoIG5vIGxvd2VyIG9yIHVwcGVyIGJvdW5k IG9uIHRoZSBlbnRyeSdzIG93biBsZW4gYnl0ZS4gIEEgbGVuIG9mIDAKICAg IHNwaW5zIGZvcmV2ZXI7IGEgbGVuIGdyZWF0ZXIgdGhhbiB0aGUgcmVtYWlu aW5nIHJyX2xlbiB1bmRlcmZsb3dzIGl0IGFuZAogICAgd2Fsa3MgcGFzdCB0 aGUgYnVmZmVyLiAgVmFsaWRhdGUgNCA8PSBsZW4gPD0gcnJfbGVuIGF0IHRo ZSB0b3Agb2YgdGhlCiAgICBsb29wIGFuZCBzdG9wIG9uIHZpb2xhdGlvbjog YSBzdHJ1Y3R1cmFsbHkgYnJva2VuIGVudHJ5IHN0cmVhbSBjYW5ub3QgYmUK ICAgIGFkdmFuY2VkIHJlbGlhYmx5LCBzbyBjb250aW51aW5nIGlzIG5vdCBt ZWFuaW5nZnVsLgoKICAgIFRoaXMgaXMgQ1ZFLTIwMjYtNjI0MjMuCgogICog VGhlIE5NIGhhbmRsZXIgc3VidHJhY3RlZCB0aGUgNS1ieXRlIFNVU1AvTk0g aGVhZGVyIGZyb20gbGVuIHdpdGhvdXQgYQogICAgbG93ZXItYm91bmQgY2hl Y2ssIHVuZGVyZmxvd2luZyBuYW1lX2xlbiAodGhlIG9yaWdpbmFsIHJlcG9y dCkuICBUaGUKICAgIGdlbmVyaWMgY2hlY2sgYWJvdmUgb25seSBndWFyYW50 ZWVzIGxlbiA+PSA0OyBOTSBoYXMgYW4gZXh0cmEgZmxhZ3MgYnl0ZSwKICAg IHNvIGtlZXAgYW4gTk0tc3BlY2lmaWMgbGVuID49IDUgY2hlY2suCgogICAg VGhpcyBpcyBDVkUtMjAyNi02MjQyNC4KCiAgKiBUaGUgQ0UgY29udGludWF0 aW9uIHJlc2V0cyBycl9wdHIvcnJfbGVuIGZyb20gY2Uub2Zmc2V0IGFuZCBj ZS5zaXplLCBib3RoCiAgICBpbWFnZS1jb250cm9sbGVkLCBpbnRvIHRoZSBm aXhlZCBzaW5nbGUtc2VjdG9yIFJSQ09OVF9CVUYgd2l0aCBubyBib3VuZHMK ICAgIGNoZWNrLiAgUmVqZWN0IGEgd2luZG93IHRoYXQgZG9lcyBub3QgZml0 IGluIHRoZSBidWZmZXIuCgogICAgVGhpcyBpcyBDVkUtMjAyNi02MjQyNS4K ClRoaXMgaXMgWFNBLTQ5Ny4KClNpZ25lZC1vZmYtYnk6IFN5ZWQgQWJkdWwg S2hhbGlxIDxhYmR1bEBidWdxb3JlLmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBC ZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KCi0tLSBhL3Rvb2xzL2xpYmZz aW1hZ2UvaXNvOTY2MC9mc3lzX2lzbzk2NjAuYworKysgYi90b29scy9saWJm c2ltYWdlL2lzbzk2NjAvZnN5c19pc285NjYwLmMKQEAgLTE4MCw3ICsxODAs MTUgQEAgaXNvOTY2MF9kaXIgKGZzaV9maWxlX3QgKmZmaSwgY2hhciAqZGly bgogCSAgZXh0ZW50Kys7CiAKIAkgIGlkciA9IChzdHJ1Y3QgaXNvX2RpcmVj dG9yeV9yZWNvcmQgKilESVJSRUM7Ci0JICBmb3IgKDsgaWRyLT5sZW5ndGgu bCA+IDA7CisJICAvKgorCSAgICogIGxlbmd0aCBpcyB0YWtlbiB2ZXJiYXRp bSBmcm9tIHRoZSAodW50cnVzdGVkKSBpbWFnZS4gIEEgcmVjb3JkCisJICAg KiAgc2hvcnRlciB0aGFuIHRoZSBmaXhlZCBwYXJ0IG9mIHRoZSBvbi1kaXNr IGxheW91dCBjYW5ub3QgaG9sZCBpdHMKKwkgICAqICBvd24gbWFuZGF0b3J5 IGZpZWxkcyAobmFtZV9sZW4sIGV4dGVudCwgc2l6ZSwgLi4uKSwgd2hpY2gg dGhlIGxvb3AKKwkgICAqICBib2R5IHJlYWRzIGJlbG93OyBzdG9wIHRoZSB3 YWxrIHJhdGhlciB0aGFuIGRlcmVmZXJlbmNlIHBhc3QgaXQuCisJICAgKi8K KwkgIGZvciAoOyBpZHItPmxlbmd0aC5sID49IHNpemVvZigqaWRyKSAtIHNp emVvZihpZHItPm5hbWUpCisJCSAmJiBpZHItPmxlbmd0aC5sCisJCSAgICA+ PSBzaXplb2YoKmlkcikgLSBzaXplb2YoaWRyLT5uYW1lKSArIGlkci0+bmFt ZV9sZW4ubDsKIAkgICAgICAgaWRyID0gKHN0cnVjdCBpc29fZGlyZWN0b3J5 X3JlY29yZCAqKSgoY2hhciAqKWlkciArIGlkci0+bGVuZ3RoLmwpICkKIAkg ICAgewogCSAgICAgIGNvbnN0IGNoYXIgKm5hbWUgPSAoY29uc3QgY2hhciAq KWlkci0+bmFtZTsKQEAgLTIwMSwyMSArMjA5LDM5IEBAIGlzbzk2NjBfZGly IChmc2lfZmlsZV90ICpmZmksIGNoYXIgKmRpcm4KIAkJfQogCiAJICAgICAg LyoKLQkgICAgICAgKiAgUGFyc2UgUm9jay1SaWRnZSBleHRlbnNpb24KKwkg ICAgICAgKiAgUGFyc2UgUm9jay1SaWRnZSBleHRlbnNpb24uCisJICAgICAg ICoKKwkgICAgICAgKiAgbGVuZ3RoIGFuZCBuYW1lX2xlbiBhcmUgdGFrZW4g dmVyYmF0aW0gZnJvbSB0aGUgKHVudHJ1c3RlZCkKKwkgICAgICAgKiAgaW1h Z2UuICBSZWplY3QgYSByZWNvcmQgd2hvc2UgbmFtZSB3b3VsZCBhbHJlYWR5 IG92ZXJydW4gdGhlCisJICAgICAgICogIGZpeGVkIG9uLWRpc2sgbGF5b3V0 LCBzbyB0aGF0IHRoZSBTeXN0ZW0gVXNlIGFyZWEgbGVuZ3RoIGRvZXMKKwkg ICAgICAgKiAgbm90IHVuZGVyZmxvdyB0byBhIGh1Z2UgdmFsdWUgYmVsb3cu CiAJICAgICAgICovCi0JICAgICAgcnJfbGVuID0gKGlkci0+bGVuZ3RoLmwg LSBpZHItPm5hbWVfbGVuLmwKLQkJCS0gc2l6ZW9mKHN0cnVjdCBpc29fZGly ZWN0b3J5X3JlY29yZCkKLQkJCSsgc2l6ZW9mKGlkci0+bmFtZSkpOworCSAg ICAgIGlmIChpZHItPmxlbmd0aC5sIDwgaWRyLT5uYW1lX2xlbi5sCisJCSAg KyBzaXplb2Yoc3RydWN0IGlzb19kaXJlY3RvcnlfcmVjb3JkKSAtIHNpemVv ZihpZHItPm5hbWUpKQorCQlycl9sZW4gPSAwOworCSAgICAgIGVsc2UKKwkJ cnJfbGVuID0gKGlkci0+bGVuZ3RoLmwgLSBpZHItPm5hbWVfbGVuLmwKKwkJ CSAgLSBzaXplb2Yoc3RydWN0IGlzb19kaXJlY3RvcnlfcmVjb3JkKQorCQkJ ICArIHNpemVvZihpZHItPm5hbWUpKTsKIAkgICAgICBycl9wdHIucHRyID0g KChjaGFyICopaWRyICsgaWRyLT5uYW1lX2xlbi5sCiAJCQkgICAgKyBzaXpl b2Yoc3RydWN0IGlzb19kaXJlY3RvcnlfcmVjb3JkKQogCQkJICAgIC0gc2l6 ZW9mKGlkci0+bmFtZSkpOwotCSAgICAgIGlmIChycl9wdHIuaSAmIDEpCisJ ICAgICAgaWYgKChycl9wdHIuaSAmIDEpICYmIHJyX2xlbikKIAkJcnJfcHRy LmkrKywgcnJfbGVuLS07CiAJICAgICAgY2VfcHRyID0gTlVMTDsKIAkgICAg ICBycl9mbGFnID0gUlJfRkxBR19OTSB8IFJSX0ZMQUdfUFggLyp8IFJSX0ZM QUdfU0wqLzsKIAogCSAgICAgIHdoaWxlIChycl9sZW4gPj0gNCkKIAkJewor CQkgIC8qCisJCSAgICogQSBTVVNQIGVudHJ5IGlzIGF0IGxlYXN0IDQgYnl0 ZXMgKHNpZ25hdHVyZSwgbGVuZ3RoLAorCQkgICAqIHZlcnNpb24pIGFuZCBt dXN0IGZpdCBpbiB0aGUgcmVtYWluaW5nIFN5c3RlbSBVc2UgYXJlYS4KKwkJ ICAgKiBBIHNob3J0ZXIgb3Igb3ZlcmxvbmcgbGVuIGlzIHVucGFyc2VhYmxl OiBzdG9wLCByYXRoZXIKKwkJICAgKiB0aGFuIHNwaW4gZm9yZXZlciAobGVu ID09IDApIG9yIHVuZGVyZmxvdyBycl9sZW4gaW4gdGhlCisJCSAgICogYWR2 YW5jZSBiZWxvdyAobGVuID4gcnJfbGVuKS4KKwkJICAgKi8KKwkJICBpZiAo cnJfcHRyLnJyLT5sZW4gPCA0IHx8IHJyX3B0ci5yci0+bGVuID4gcnJfbGVu KQorCQkgICAgYnJlYWs7CiAJCSAgaWYgKHJyX3B0ci5yci0+dmVyc2lvbiAh PSAxKQogCQkgICAgewogI2lmbmRlZiBTVEFHRTFfNQpAQCAtMjM2LDkgKzI2 MiwxNyBAQCBpc285NjYwX2RpciAoZnNpX2ZpbGVfdCAqZmZpLCBjaGFyICpk aXJuCiAJCQkgICAgcnJfZmxhZyAmPSBycl9wdHIucnItPnUucnIuZmxhZ3Mu bDsKIAkJCSAgYnJlYWs7CiAJCQljYXNlIFJSTUFHSUMoJ04nLCAnTScpOgot CQkJICBuYW1lID0gKGNvbnN0IGNoYXIgKilycl9wdHIucnItPnUubm0ubmFt ZTsKLQkJCSAgbmFtZV9sZW4gPSBycl9wdHIucnItPmxlbiAtICg0K3NpemVv ZihzdHJ1Y3QgTk0pKTsKLQkJCSAgcnJfZmxhZyAmPSB+UlJfRkxBR19OTTsK KwkJCSAgLyoKKwkJCSAgICogVGhlIGdlbmVyaWMgY2hlY2sgYWJvdmUgb25s eSBndWFyYW50ZWVzIGxlbiA+PSA0OworCQkJICAgKiBOTSBhZGRpdGlvbmFs bHkgaGFzIGEgZmxhZ3MgYnl0ZSwgc28gbGVuIG11c3QgYmUgYXQKKwkJCSAg ICogbGVhc3QgNSBmb3IgbmFtZV9sZW4gbm90IHRvIHVuZGVyZmxvdy4KKwkJ CSAgICovCisJCQkgIGlmIChycl9wdHIucnItPmxlbiA+PSAoNCtzaXplb2Yo c3RydWN0IE5NKSkpCisJCQkgICAgeworCQkJICAgICAgbmFtZSA9IChjb25z dCBjaGFyICopcnJfcHRyLnJyLT51Lm5tLm5hbWU7CisJCQkgICAgICBuYW1l X2xlbiA9IHJyX3B0ci5yci0+bGVuIC0gKDQrc2l6ZW9mKHN0cnVjdCBOTSkp OworCQkJICAgICAgcnJfZmxhZyAmPSB+UlJfRkxBR19OTTsKKwkJCSAgICB9 CiAJCQkgIGJyZWFrOwogCQkJY2FzZSBSUk1BR0lDKCdQJywgJ1gnKToKIAkJ CSAgaWYgKHJyX3B0ci5yci0+bGVuID49ICg0K3NpemVvZihzdHJ1Y3QgUFgp KSkKQEAgLTMzOSw2ICszNzMsMTUgQEAgaXNvOTY2MF9kaXIgKGZzaV9maWxl X3QgKmZmaSwgY2hhciAqZGlybgogCQkJICBtZW1jcHkoTkFNRV9CVUYsIG5h bWUsIG5hbWVfbGVuKTsKIAkJCSAgbmFtZSA9IChjb25zdCBjaGFyICopTkFN RV9CVUY7CiAJCQl9CisJCSAgICAgIC8qCisJCSAgICAgICAqIG9mZnNldCBh bmQgc2l6ZSBhcmUgaW1hZ2UtY29udHJvbGxlZDsgdGhlIGxvYWRlZAorCQkg ICAgICAgKiBjb250aW51YXRpb24gbGl2ZXMgaW4gYSBzaW5nbGUtc2VjdG9y IGJ1ZmZlci4gIEJhaWwKKwkJICAgICAgICogb3V0IGlmIHRoZSByZWZlcmVu Y2VkIHdpbmRvdyBkb2VzIG5vdCBmaXQgaW5zaWRlIGl0LgorCQkgICAgICAg Ki8KKwkJICAgICAgaWYgKGNlX3B0ci0+dS5jZS5vZmZzZXQubCA+PSBJU09f U0VDVE9SX1NJWkUKKwkJCSAgfHwgY2VfcHRyLT51LmNlLnNpemUubAorCQkJ ICAgICA+IElTT19TRUNUT1JfU0laRSAtIGNlX3B0ci0+dS5jZS5vZmZzZXQu bCkKKwkJCWJyZWFrOwogCQkgICAgICBycl9wdHIucHRyID0gKGNoYXIgKilS UkNPTlRfQlVGICsgY2VfcHRyLT51LmNlLm9mZnNldC5sOwogCQkgICAgICBy cl9sZW4gPSBjZV9wdHItPnUuY2Uuc2l6ZS5sOwogCQkgICAgICBpZiAoIWlz bzk2NjBfZGV2cmVhZChmZmksIGNlX3B0ci0+dS5jZS5leHRlbnQubCwgMCwg SVNPX1NFQ1RPUl9TSVpFLCAoY2hhciAqKVJSQ09OVF9CVUYpKQo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:09 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:09 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372547.1620067 (Exim 4.92) (envelope-from ) id 1wogZF-00088z-LU; Tue, 28 Jul 2026 12:05:53 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372547.1620067; Tue, 28 Jul 2026 12:05:53 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogZE-00080F-Dq; Tue, 28 Jul 2026 12:05:52 +0000 Received: by outflank-mailman (input) for mailman id 1372547; Tue, 28 Jul 2026 12:05:29 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYl-00036z-0S; Tue, 28 Jul 2026 12:05:23 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYk-00Ebq5-9l; Tue, 28 Jul 2026 14:05:22 +0200 Received: from [10.42.69.8] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689afb-5cb7-0a2a0a5109dd-0a2a45089998-22 for ; Tue, 28 Jul 2026 14:05:22 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-c1860d.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b00-f659-0a2a45080019-6882d725e092-3 for ; Tue, 28 Jul 2026 14:05:21 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYf-00DPEI-27; Tue, 28 Jul 2026 12:05:17 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYf-003DpD-15; Tue, 28 Jul 2026 12:05:17 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 503 v2 (CVE-2026-62430) - x86: Out-of-bounds read in vRTC emulation Message-Id: Date: Tue, 28 Jul 2026 12:05:17 +0000 X-purgate-ID: tlsNG-c1860d/1785240322-DFAD487B-A38BD2BE/0/0 X-purgate-type: clean X-purgate-size: 9217 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62430 / XSA-503 version 2 x86: Out-of-bounds read in vRTC emulation UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array. IMPACT ====== An attacker can read out-of-bounds, this is limited to Xen data, and not data belonging to other guests. VULNERABLE SYSTEMS ================== All Xen versions from 3.2 onwards are vulnerable. Xen versions 3.1 and earlier are not vulnerable. MITIGATION ========== Running only PV or PVH guests will avoid the vulnerability. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa503.patch xen-unstable - Xen 4.19.x xsa503-4.18.patch Xen 4.18.x - Xen 4.17.x $ sha256sum xsa503* 86ffb287767aa410e2c6b970db5167d743ca3c788b43522d46d06f41caead929 xsa503.patch 3a09ea83f092ade72c8d107c91b480f44e5c865d7f36306db8490403db9aa7ed xsa503-4.18.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrgMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZMg8H/0FuxuDZLnfvFfa8uGtWBokPW93kxSjCoPG3obbR pJ4IqULRNrdMQfo+3ssrppoH41/ADzatAkbB6seW7UWhVmXCFBE19ZELGXtkn1bh GU68jjUq4u4BgQSIXsapcN2wNPahVOnD8+N5dayb+/zde8aBST10xhT3tmvNnR5k dI4t1W3LOXqO4QPXKua7ipLGzTnnzkgHflssYbyclmL2qq82frDUCl5Kf8EDkzhC I2YigSVjYsreQHIYUpeGADB7/Xpr/ARnqaWi2cB9O3FhlkvJDIWOAR3fUuIfZnim ASzMZSPwRQ8Mo2TuzSSXjG2oIVkZy8+6thia9cZLuP18UzY= =UuFk -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa503.patch" Content-Disposition: attachment; filename="xsa503.patch" Content-Transfer-Encoding: base64 RnJvbSA5Mjg4NTA3NmVkNmVhM2E2NTJiMDE0M2NlMTEyNTgyZjkxOTMyYjEz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpEYXRlOiBGcmksIDEwIEp1bCAy MDI2IDE1OjA1OjUwICswMjAwClN1YmplY3Q6IHg4Ni92cnRjOiBmaXggcmFj ZSBpbiBDTU9TIGluZGV4IGNoZWNraW5nCk1JTUUtVmVyc2lvbjogMS4wCkNv bnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50 LVRyYW5zZmVyLUVuY29kaW5nOiA4Yml0CgpEbyB0aGUgY2hlY2tpbmcgZm9y IGEgdmFsaWQgQ01PUyBpbmRleCB3aGlsZSBob2xkaW5nIHRoZSBzcGlubG9j aywKb3RoZXJ3aXNlIHRoZSB2YWx1ZSBjb3VsZCBiZSBjaGFuZ2VkIGJ5IHRo ZSBndWVzdCBhZnRlciBoYXZpbmcgYmVlbgpjaGVja2VkLgoKVGhpcyBpcyBY U0EtNTAzIC8gQ1ZFLTIwMjYtNjI0MzAuCgpGaXhlczogMzRiZWYwZTZkNWY0 ICgiaHZtOiBBZGQgbG9ja2luZyB0byBwbGF0Zm9ybSB0aW1lcnMuIikKU2ln bmVkLW9mZi1ieTogUm9nZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJp eC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+Ci0tLQogeGVuL2FyY2gveDg2L2h2bS9ydGMuYyB8IDE5ICsrKysr KysrKysrKystLS0tLS0KIDEgZmlsZSBjaGFuZ2VkLCAxMyBpbnNlcnRpb25z KCspLCA2IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4 Ni9odm0vcnRjLmMgYi94ZW4vYXJjaC94ODYvaHZtL3J0Yy5jCmluZGV4IDRi YTU4ODFiMjRkZS4uNjViM2I3OWYxZWRiIDEwMDY0NAotLS0gYS94ZW4vYXJj aC94ODYvaHZtL3J0Yy5jCisrKyBiL3hlbi9hcmNoL3g4Ni9odm0vcnRjLmMK QEAgLTY0NywxMyArNjQ3LDIxIEBAIHN0YXRpYyBpbnQgdXBkYXRlX2luX3By b2dyZXNzKFJUQ1N0YXRlICpzKQogICAgIHJldHVybiAwOwogfQogCi1zdGF0 aWMgdWludDMyX3QgcnRjX2lvcG9ydF9yZWFkKFJUQ1N0YXRlICpzKQorc3Rh dGljIGJvb2wgcnRjX2lvcG9ydF9yZWFkKFJUQ1N0YXRlICpzLCB1aW50MzJf dCAqdmFsKQogewogICAgIGludCByZXQ7CiAgICAgc3RydWN0IGRvbWFpbiAq ZCA9IHZydGNfZG9tYWluKHMpOwogCisgICAgKnZhbCA9IH4wOworCiAgICAg c3Bpbl9sb2NrKCZzLT5sb2NrKTsKIAorICAgIGlmICggcy0+aHcuY21vc19p bmRleCA+PSBSVENfQ01PU19TSVpFICkKKyAgICB7CisgICAgICAgIHNwaW5f dW5sb2NrKCZzLT5sb2NrKTsKKyAgICAgICAgcmV0dXJuIGZhbHNlOworICAg IH0KKwogICAgIHN3aXRjaCAoIHMtPmh3LmNtb3NfaW5kZXggKQogICAgIHsK ICAgICBjYXNlIFJUQ19TRUNPTkRTOgpAQCAtNjkzLDcgKzcwMSw5IEBAIHN0 YXRpYyB1aW50MzJfdCBydGNfaW9wb3J0X3JlYWQoUlRDU3RhdGUgKnMpCiAK ICAgICBzcGluX3VubG9jaygmcy0+bG9jayk7CiAKLSAgICByZXR1cm4gcmV0 OworICAgICp2YWwgPSByZXQ7CisKKyAgICByZXR1cm4gdHJ1ZTsKIH0KIAog c3RhdGljIGludCBjZl9jaGVjayBoYW5kbGVfcnRjX2lvKApAQCAtNzE4LDEx ICs3MjgsOCBAQCBzdGF0aWMgaW50IGNmX2NoZWNrIGhhbmRsZV9ydGNfaW8o CiAgICAgICAgICp2YWwgPSAweGZmOwogICAgICAgICByZXR1cm4gWDg2RU1V TF9PS0FZOwogICAgIH0KLSAgICBlbHNlIGlmICggdnJ0Yy0+aHcuY21vc19p bmRleCA8IFJUQ19DTU9TX1NJWkUgKQotICAgIHsKLSAgICAgICAgKnZhbCA9 IHJ0Y19pb3BvcnRfcmVhZCh2cnRjKTsKKyAgICBlbHNlIGlmICggcnRjX2lv cG9ydF9yZWFkKHZydGMsIHZhbCkgKQogICAgICAgICByZXR1cm4gWDg2RU1V TF9PS0FZOwotICAgIH0KIAogICAgIHJldHVybiBYODZFTVVMX1VOSEFORExF QUJMRTsKIH0KLS0gCjIuNTMuMAoK --=separator Content-Type: application/octet-stream; name="xsa503-4.18.patch" Content-Disposition: attachment; filename="xsa503-4.18.patch" Content-Transfer-Encoding: base64 RnJvbSAyNjQ1MmUyODllYjZmNjRlODVkNjMwYzA2YTlmM2RlN2QwMTg4Y2Q3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpEYXRlOiBXZWQsIDE1IEp1bCAy MDI2IDEyOjQ0OjM3ICswMjAwClN1YmplY3Q6IHg4Ni92cnRjOiBmaXggcmFj ZSBpbiBDTU9TIGluZGV4IGNoZWNraW5nCk1JTUUtVmVyc2lvbjogMS4wCkNv bnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50 LVRyYW5zZmVyLUVuY29kaW5nOiA4Yml0CgpEbyB0aGUgY2hlY2tpbmcgZm9y IGEgdmFsaWQgQ01PUyBpbmRleCB3aGlsZSBob2xkaW5nIHRoZSBzcGlubG9j aywKb3RoZXJ3aXNlIHRoZSB2YWx1ZSBjb3VsZCBiZSBjaGFuZ2VkIGJ5IHRo ZSBndWVzdCBhZnRlciBoYXZpbmcgYmVlbgpjaGVja2VkLgoKVGhpcyBpcyBY U0EtNTAzIC8gQ1ZFLTIwMjYtNjI0MzAuCgpGaXhlczogMzRiZWYwZTZkNWY0 ICgiaHZtOiBBZGQgbG9ja2luZyB0byBwbGF0Zm9ybSB0aW1lcnMuIikKU2ln bmVkLW9mZi1ieTogUm9nZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJp eC5jb20+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+Ci0tLQogeGVuL2FyY2gveDg2L2h2bS9ydGMuYyB8IDIxICsrKysr KysrKysrKysrLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE0IGluc2VydGlv bnMoKyksIDcgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gv eDg2L2h2bS9ydGMuYyBiL3hlbi9hcmNoL3g4Ni9odm0vcnRjLmMKaW5kZXgg NDgzOTM3NDM1MjA1Li5hZDE1ODI1YTFmMjAgMTAwNjQ0Ci0tLSBhL3hlbi9h cmNoL3g4Ni9odm0vcnRjLmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS9ydGMu YwpAQCAtNjQ3LDE2ICs2NDcsMjQgQEAgc3RhdGljIGludCB1cGRhdGVfaW5f cHJvZ3Jlc3MoUlRDU3RhdGUgKnMpCiAgICAgcmV0dXJuIDA7CiB9CiAKLXN0 YXRpYyB1aW50MzJfdCBydGNfaW9wb3J0X3JlYWQoUlRDU3RhdGUgKnMsIHVp bnQzMl90IGFkZHIpCitzdGF0aWMgYm9vbCBydGNfaW9wb3J0X3JlYWQoUlRD U3RhdGUgKnMsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90ICp2YWwpCiB7CiAg ICAgaW50IHJldDsKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gdnJ0Y19kb21h aW4ocyk7CiAKKyAgICAqdmFsID0gfjA7CisKICAgICBpZiAoIChhZGRyICYg MSkgPT0gMCApCi0gICAgICAgIHJldHVybiAweGZmOworICAgICAgICByZXR1 cm4gdHJ1ZTsKIAogICAgIHNwaW5fbG9jaygmcy0+bG9jayk7CiAKKyAgICBp ZiAoIHMtPmh3LmNtb3NfaW5kZXggPj0gUlRDX0NNT1NfU0laRSApCisgICAg eworICAgICAgICBzcGluX3VubG9jaygmcy0+bG9jayk7CisgICAgICAgIHJl dHVybiBmYWxzZTsKKyAgICB9CisKICAgICBzd2l0Y2ggKCBzLT5ody5jbW9z X2luZGV4ICkKICAgICB7CiAgICAgY2FzZSBSVENfU0VDT05EUzoKQEAgLTY5 Niw3ICs3MDQsOSBAQCBzdGF0aWMgdWludDMyX3QgcnRjX2lvcG9ydF9yZWFk KFJUQ1N0YXRlICpzLCB1aW50MzJfdCBhZGRyKQogCiAgICAgc3Bpbl91bmxv Y2soJnMtPmxvY2spOwogCi0gICAgcmV0dXJuIHJldDsKKyAgICAqdmFsID0g cmV0OworCisgICAgcmV0dXJuIHRydWU7CiB9CiAKIHN0YXRpYyBpbnQgY2Zf Y2hlY2sgaGFuZGxlX3J0Y19pbygKQEAgLTcxNiwxMSArNzI2LDggQEAgc3Rh dGljIGludCBjZl9jaGVjayBoYW5kbGVfcnRjX2lvKAogICAgICAgICBpZiAo IHJ0Y19pb3BvcnRfd3JpdGUodnJ0YywgcG9ydCwgKHVpbnQ4X3QpKnZhbCkg KQogICAgICAgICAgICAgcmV0dXJuIFg4NkVNVUxfT0tBWTsKICAgICB9Ci0g ICAgZWxzZSBpZiAoIHZydGMtPmh3LmNtb3NfaW5kZXggPCBSVENfQ01PU19T SVpFICkKLSAgICB7Ci0gICAgICAgICp2YWwgPSBydGNfaW9wb3J0X3JlYWQo dnJ0YywgcG9ydCk7CisgICAgZWxzZSBpZiAoIHJ0Y19pb3BvcnRfcmVhZCh2 cnRjLCBwb3J0LCB2YWwpICkKICAgICAgICAgcmV0dXJuIFg4NkVNVUxfT0tB WTsKLSAgICB9CiAKICAgICByZXR1cm4gWDg2RU1VTF9VTkhBTkRMRUFCTEU7 CiB9Ci0tIAoyLjUzLjAKCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:28 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:28 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372581.1620117 (Exim 4.92) (envelope-from ) id 1wogZU-0001xw-1s; Tue, 28 Jul 2026 12:06:08 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372581.1620117; Tue, 28 Jul 2026 12:06:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogZR-0001lC-KU; Tue, 28 Jul 2026 12:06:05 +0000 Received: by outflank-mailman (input) for mailman id 1372581; Tue, 28 Jul 2026 12:05:34 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYn-0003Yx-WB; Tue, 28 Jul 2026 12:05:26 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYn-00Ebq5-7I; Tue, 28 Jul 2026 14:05:25 +0200 Received: from [10.42.69.3] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689b05-5cb7-0a2a0a5109dd-0a2a45039fd6-2 for ; Tue, 28 Jul 2026 14:05:25 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-33051d.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b03-fae8-0a2a45030019-6882d725a78e-3 for ; Tue, 28 Jul 2026 14:05:25 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYi-00DPEj-20; Tue, 28 Jul 2026 12:05:20 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYi-003Drz-0y; Tue, 28 Jul 2026 12:05:20 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 504 v2 (CVE-2026-62431) - Viridian STIMER division by zero Message-Id: Date: Tue, 28 Jul 2026 12:05:20 +0000 X-purgate-ID: tlsNG-33051d/1785240325-6E6CE4E9-78BE6C56/0/0 X-purgate-type: clean X-purgate-size: 6429 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62431 / XSA-504 version 2 Viridian STIMER division by zero UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault. IMPACT ====== Enabling Viridian STIMERs to unprivileged HVM guests can result in a Denial of Service (DoS) affecting the entire host. VULNERABLE SYSTEMS ================== All Xen versions from 4.13 onwards are vulnerable. Xen versions 4.12 and earlier are not vulnerable. Only HVM guests with Viridian STIMERs enabled can trigger the vulnerability. MITIGATION ========== Not enabling Viridian STIMERs for HVM guests will avoid the vulnerability. Note Viridian extensions are not enabled by default. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa504.patch xen-unstable - Xen 4.17.x $ sha256sum xsa504* cc142e53866a27f3c97bd8532f42df2197f9e8e85fb3846b6fcd682d854e5689 xsa504.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomroMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZiF4H+QFl08pzXWh5Zd2uOlbjYCaQMoDFeWSGCAkCcG8z PlKv4yVLPwxUB0W5cPVV61M/fFDgihZh0usNZ/xm5aTt0uhPE31kXItsYRRLPpmg zbV5OgUgIJxeAABML030lNjlAyLBpVculHAWbyFZdMh/xf0bQc1ty8U/xQDLU+IE cohmtH8v6WvK2PxTA8nNj39EB9rUcz1gYInLh2QltW14di7+FUHGISxiIr/eNcUv 9d/at8ESSH1WNeSRSr+sbE0dMRxAQgoMa93GvU7sEvuZtdwOnnET8l1nVN/84kXM sCMq6mjgVDUmSNOH2aBXxewimjp9DV0BLkmliqHrHDKer3s= =intH -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa504.patch" Content-Disposition: attachment; filename="xsa504.patch" Content-Transfer-Encoding: base64 RnJvbSBiM2ZlN2JkM2JmNmMyYWM3MzI0ZWEwYjMzY2E2YWZjMzhkODFmMTU5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpEYXRlOiBGcmksIDEwIEp1bCAy MDI2IDE1OjE4OjEyICswMjAwClN1YmplY3Q6IHg4Ni92aXJpZGlhbjogZW5z dXJlIGNvdW50IGlzIGFsd2F5cyBzZXQgd2hlbiBzdGFydGluZyBhIHRpbWVy Ck1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsg Y2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA4Yml0 CgpPdGhlcndpc2UgaW4gcGVyaW9kaWMgbW9kZSBhIGRpdmlzaW9uIGJ5IDAg d291bGQgaGFwcGVuIG9uIHRoZSBzZWNvbmQgY2FsbAp0byBzdGFydF9zdGlt ZXIoKSB3aGVuIHVzaW5nIHBlcmlvZGljIG1vZGUuCgpOb3RlIHRoYXQgdGhl IEh5cGVyViBzcGVjaWZpY2F0aW9uIHN0YXRlczogIldyaXRpbmcgdGhlIHZh bHVlIHplcm8gdG8gdGhlCkNvdW50IHJlZ2lzdGVyIHdpbGwgc3RvcCB0aGUg Y291bnRlciwgdGhlcmVieSBkaXNhYmxpbmcgdGhlIHRpbWVyLAppbmRlcGVu ZGVudCBvZiB0aGUgc2V0dGluZyBvZiBBdXRvRW5hYmxlIGluIHRoZSBjb25m aWd1cmF0aW9uIHJlZ2lzdGVyLiIKc28gYSB0aW1lciB3aXRoIGEgMCBjb3Vu dCBzaG91bGQgbmV2ZXIgYmUgaW4gdGhlIGVuYWJsZWQgc3RhdGUuCgpUaGlz IGlzIFhTQS01MDQgLyBDVkUtMjAyNi02MjQzMS4KCkZpeGVzOiAyNmZiYTNj ODU1NzEgKCJ2aXJpZGlhbjogYWRkIGltcGxlbWVudGF0aW9uIG9mIHN5bnRo ZXRpYyB0aW1lcnMiKQpTaWduZWQtb2ZmLWJ5OiBSb2dlciBQYXUgTW9ubsOp IDxyb2dlci5wYXVAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVs aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KLS0tCiB4ZW4vYXJjaC94ODYvaHZt L3ZpcmlkaWFuL3RpbWUuYyB8IDEzICsrKysrKysrKysrKy0KIDEgZmlsZSBj aGFuZ2VkLCAxMiBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZm IC0tZ2l0IGEveGVuL2FyY2gveDg2L2h2bS92aXJpZGlhbi90aW1lLmMgYi94 ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3RpbWUuYwppbmRleCA5MzExODU4 ZDYzYzAuLjE1ZjYyOWFmMGYzOSAxMDA2NDQKLS0tIGEveGVuL2FyY2gveDg2 L2h2bS92aXJpZGlhbi90aW1lLmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS92 aXJpZGlhbi90aW1lLmMKQEAgLTE1NSw2ICsxNTUsMTQgQEAgc3RhdGljIHZv aWQgc3RhcnRfc3RpbWVyKHN0cnVjdCB2aXJpZGlhbl9zdGltZXIgKnZzKQog ICAgICAgICBwcmludGsoWEVOTE9HX0dfSU5GTyAiJXB2OiBWSVJJRElBTiBT VElNRVIldTogZW5hYmxlZFxuIiwgdiwKICAgICAgICAgICAgICAgIHN0aW1l cngpOwogCisgICAgaWYgKCAhdnMtPmNvdW50ICkKKyAgICB7CisgICAgICAg IGdwcmludGsoWEVOTE9HX0VSUiwgIlZJUklESUFOIFNUSU1FUiBzdGFydGVk IHdpdGggMCBjb3VudFxuIik7CisgICAgICAgIEFTU0VSVF9VTlJFQUNIQUJM RSgpOworICAgICAgICBkb21haW5fY3Jhc2godi0+ZG9tYWluKTsKKyAgICAg ICAgcmV0dXJuOworICAgIH0KKwogICAgIGlmICggdnMtPmNvbmZpZy5wZXJp b2RpYyApCiAgICAgewogICAgICAgICAvKgpAQCAtMzY0LDcgKzM3Miw3IEBA IGludCB2aXJpZGlhbl90aW1lX3dybXNyKHN0cnVjdCB2Y3B1ICp2LCB1aW50 MzJfdCBpZHgsIHVpbnQ2NF90IHZhbCkKIAogICAgICAgICB2cy0+Y29uZmln LmFzX3VpbnQ2NCA9IHZhbDsKIAotICAgICAgICBpZiAoICF2cy0+Y29uZmln LnNpbnR4ICkKKyAgICAgICAgaWYgKCAhdnMtPmNvbmZpZy5zaW50eCB8fCAh dnMtPmNvdW50ICkKICAgICAgICAgICAgIHZzLT5jb25maWcuZW5hYmxlID0g MDsKIAogICAgICAgICBpZiAoIHZzLT5jb25maWcuZW5hYmxlICkKQEAgLTU3 NSw2ICs1ODMsOSBAQCB2b2lkIHZpcmlkaWFuX3RpbWVfbG9hZF92Y3B1X2N0 eHQoCiAKICAgICAgICAgdnMtPmNvbmZpZy5hc191aW50NjQgPSBjdHh0LT5z dGltZXJfY29uZmlnX21zcltpXTsKICAgICAgICAgdnMtPmNvdW50ID0gY3R4 dC0+c3RpbWVyX2NvdW50X21zcltpXTsKKyAgICAgICAgaWYgKCAhdnMtPmNv bmZpZy5zaW50eCB8fCAhdnMtPmNvdW50ICkKKyAgICAgICAgICAgIC8qIFJl amVjdCBlbmFibGluZyB3aXRoIGEgemVybyBzaW50eCBvciBjb3VudCBmaWVs ZHMuICovCisgICAgICAgICAgICB2cy0+Y29uZmlnLmVuYWJsZSA9IDA7CiAg ICAgfQogfQogCi0tIAoyLjUzLjAKCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:32 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:32 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372608.1620158 (Exim 4.92) (envelope-from ) id 1wogZh-00048A-93; Tue, 28 Jul 2026 12:06:21 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372608.1620158; Tue, 28 Jul 2026 12:06:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogZf-0003w4-0Q; Tue, 28 Jul 2026 12:06:19 +0000 Received: by outflank-mailman (input) for mailman id 1372608; Tue, 28 Jul 2026 12:05:39 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYr-00049f-Tx; Tue, 28 Jul 2026 12:05:29 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYr-004Ofp-75; Tue, 28 Jul 2026 14:05:29 +0200 Received: from [10.42.69.4] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689aff-bab6-0a2a0a5309dd-0a2a450491da-38 for ; Tue, 28 Jul 2026 14:05:29 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-ebf023.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b07-b57f-0a2a45040019-6882d725aca0-3 for ; Tue, 28 Jul 2026 14:05:29 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYm-00DPFD-06; Tue, 28 Jul 2026 12:05:23 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYl-003Dvz-2L; Tue, 28 Jul 2026 12:05:23 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 505 v2 (CVE-2026-62432) - evtchn: Race between FIFO expand and reset Message-Id: Date: Tue, 28 Jul 2026 12:05:23 +0000 X-purgate-ID: tlsNG-ebf023/1785240329-C36C2B50-0B82A60E/0/0 X-purgate-type: clean X-purgate-size: 5223 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62432 / XSA-505 version 2 evtchn: Race between FIFO expand and reset UPDATES IN VERSION 2 ==================== Typo correction in description. Public release. ISSUE DESCRIPTION ================= The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in dereferencing a NULL pointer. IMPACT ====== A malicious HVM guest (x86 HVM or PVH, and ARM) can crash Xen leading to a denial of service. A malicious x86 PV guest can most likely crash Xen leading to a denial of service, but memory corruption or privilege escalation cannot be ruled out. VULNERABLE SYSTEMS ================== All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable. MITIGATION ========== There are no mitigations. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa505.patch xen-unstable - Xen 4.17 $ sha256sum xsa505* 80619fdbb547dea191439ef1c9539fa0991e8f6c449b3970a086f3287fb9ce6e xsa505.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrsMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ5H8IAMKtDfTsBJaoOosFHEU0Gyv96fP98D89URo21RrD V+Lpd9CTatYuTnz53gztlUa7s2/ARYl488bNURwPTdTjSEdJBbFQKrEyAZsryTyh hiIJF7AhQf8LsY3qk2xuJ+/tKc720WK/zsUGVRz6Jhf9W90g5wBhIM1RAhfy7H2t Zn74wXDi4dsMLQg6VivzRq+y+XJfZKR6qoKztiDHk0DBobmJzQFF2cfkiiWDRW9l NuvLxKjsPyS4K+Jcm9k65RzmWfDprxmL/63VDAt0W8dSAe+u1zyDh/aT+OFK5R1g c6CwdjquY4hhSYhwix4TW18LRlY0NA/pqn3FmhLQl3XZmfU= =z4Qy -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa505.patch" Content-Disposition: attachment; filename="xsa505.patch" Content-Transfer-Encoding: base64 RnJvbTogUm9nZXIgUGF1IE1vbm5lIDxyb2dlci5wYXVAY2l0cml4LmNvbT4K U3ViamVjdDogeGVuL2V2dGNobjogZml4IHJhY2UgYmV0d2VlbiBGSUZPIGV4 cGFuZCBhbmQgcmVzZXQgb3BlcmF0aW9ucwoKZXZ0Y2huX2ZpZm9fZXhwYW5k X2FycmF5KCkgd2lsbCBjaGVjayBmb3IgdGhlIGRvbWFpbiBldnRjaG5fZmlm byBiZWluZwpwb3B1bGF0ZWQgd2l0aG91dCBob2xkaW5nIHRoZSBldmVudF9s b2NrLCB3aGljaCBjYW4gbGVhZCB0byBhIHJhY2Ugd2l0aCBhCmNvbmN1cnJl bnQgZXZ0Y2huX3Jlc2V0KCkuCgpFbnN1cmUgdGhlIGNoZWNraW5nIGZvciBl dnRjaG5fZmlmbyBwcmVzZW5jZSBpcyBkb25lIHdoaWxlIGhvbGRpbmcgdGhl CmV2ZW50X2xvY2suCgpUaGlzIGlzIFhTQS01MDUgLyBDVkUtMjAyNi02MjQz Mi4KCkZpeGVzOiA0MDBiM2JkNjQyNmYgKCJldnRjaG46IG1ha2UgRVZUQ0hO T1BfcmVzZXQgc3VpdGFibGUgZm9yIGtleGVjIikKU2lnbmVkLW9mZi1ieTog Um9nZXIgUGF1IE1vbm7DqSA8cm9nZXIucGF1QGNpdHJpeC5jb20+ClJldmll d2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll d2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXgu Y29tPgoKZGlmZiAtLWdpdCBhL3hlbi9jb21tb24vZXZlbnRfZmlmby5jIGIv eGVuL2NvbW1vbi9ldmVudF9maWZvLmMKaW5kZXggMzdjYmE5YmM0NTY0Li5j YWUwOGE1OTRlOWYgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vZXZlbnRfZmlm by5jCisrKyBiL3hlbi9jb21tb24vZXZlbnRfZmlmby5jCkBAIC02OTIsMTMg KzY5MiwxMSBAQCBzdGF0aWMgaW50IGFkZF9wYWdlX3RvX2V2ZW50X2FycmF5 KHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGxvbmcgZ2ZuKQogaW50IGV2 dGNobl9maWZvX2V4cGFuZF9hcnJheShjb25zdCBzdHJ1Y3QgZXZ0Y2huX2V4 cGFuZF9hcnJheSAqZXhwYW5kX2FycmF5KQogewogICAgIHN0cnVjdCBkb21h aW4gKmQgPSBjdXJyZW50LT5kb21haW47Ci0gICAgaW50IHJjOwotCi0gICAg aWYgKCAhZC0+ZXZ0Y2huX2ZpZm8gKQotICAgICAgICByZXR1cm4gLUVPUE5P VFNVUFA7CisgICAgaW50IHJjID0gLUVPUE5PVFNVUFA7CiAKICAgICB3cml0 ZV9sb2NrKCZkLT5ldmVudF9sb2NrKTsKLSAgICByYyA9IGFkZF9wYWdlX3Rv X2V2ZW50X2FycmF5KGQsIGV4cGFuZF9hcnJheS0+YXJyYXlfZ2ZuKTsKKyAg ICBpZiAoIGQtPmV2dGNobl9maWZvICkKKyAgICAgICAgcmMgPSBhZGRfcGFn ZV90b19ldmVudF9hcnJheShkLCBleHBhbmRfYXJyYXktPmFycmF5X2dmbik7 CiAgICAgd3JpdGVfdW5sb2NrKCZkLT5ldmVudF9sb2NrKTsKIAogICAgIHJl dHVybiByYzsK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:06:33 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:06:33 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1372628.1620168 (Exim 4.92) (envelope-from ) id 1wogZl-0004u2-JJ; Tue, 28 Jul 2026 12:06:25 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1372628.1620168; Tue, 28 Jul 2026 12:06:24 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogZj-0004iv-Aa; Tue, 28 Jul 2026 12:06:23 +0000 Received: by outflank-mailman (input) for mailman id 1372628; Tue, 28 Jul 2026 12:05:41 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogYu-0004Zl-Pp; Tue, 28 Jul 2026 12:05:32 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogYu-00EbuA-2u; Tue, 28 Jul 2026 14:05:32 +0200 Received: from [10.42.69.6] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689b0a-5cb7-0a2a0a5109dd-0a2a4506d2aa-4 for ; Tue, 28 Jul 2026 14:05:32 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-16d1c6.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b0a-195a-0a2a45060019-6882d725acb0-3 for ; Tue, 28 Jul 2026 14:05:31 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYp-00DPFi-1f; Tue, 28 Jul 2026 12:05:27 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYp-003Dy5-0f; Tue, 28 Jul 2026 12:05:27 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 506 v2 (CVE-2026-62433) - correct buffer checks for DM_OP hypercalls Message-Id: Date: Tue, 28 Jul 2026 12:05:27 +0000 X-purgate-ID: tlsNG-16d1c6/1785240331-FEA7477B-8DF5F12B/0/0 X-purgate-type: clean X-purgate-size: 7333 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62433 / XSA-506 version 2 correct buffer checks for DM_OP hypercalls UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized. IMPACT ====== A device model of a HVM guest can gain insight on the contents of the Xen stack, thus possibly leaking data from other guests contexts. VULNERABLE SYSTEMS ================== All Xen versions from 4.10 onwards are vulnerable. Xen versions 4.9 and earlier are not vulnerable. Only entities controlling HVM guests can leverage the vulnerability. These are device models running in either a stub domain or de-privileged in Dom0. MITIGATION ========== Running only PV or PVH guests will avoid the vulnerability. (Switching from a device model stub domain or a de-privileged device model to a fully privileged Dom0 device model does NOT mitigate this vulnerability. Rather, it simply recategorises the vulnerability to hostile management code, regarding it "as designed"; thus it merely reclassifies these issues as "not a bug". The security of a Xen system using stub domains is still better than with a qemu-dm running as a Dom0 process. Users and vendors of stub qemu dm systems should not change their configuration to use a Dom0 QEMU process.) RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa506.patch xen-unstable - Xen 4.17.x $ sha256sum xsa506* 7fa79f0421eafa420f7af791ad35a96a769c945260d81419052611771347b411 xsa506.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomrwMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZNF4H/0c6JMsivAWWDIQ920Bwh7EEOKhMv3nGIrBqrN8/ TGKJNNoNQinhoQv9fnqwsHaiC8e49PNUJqTpEN8/o/b0obnl4Tw2JyUXFY1bZyaz XNS85rkrUc0+Ue/Ka2464mmQ826TJXfaXG9CZYlC5cO/JtzX65ecMW4H7ju2tdnt c9xK+I5kIQPwUwy3HUMrKFvWi+JIvpCzhuHYDH2iJDecmk42pOmnKtS54q6YO15n c4xdn7aNyeECKQw4qUcjKC7zKRgrqFu5J3BlvXauZOkJCL50PK+OpWK6QV+fRNGy N7dnY5w+1BMVrHywZI5iy8WqZtJoi6TOO1Gl0WcB07/vvJk= =APkr -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa506.patch" Content-Disposition: attachment; filename="xsa506.patch" Content-Transfer-Encoding: base64 RnJvbSA2YzM4ODIzZTg5NzFmYWJkNGQyZTRkNDQ3YzY1YjM5ZjU3Yjk1M2Uz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpEYXRlOiBUdWUsIDE0IEp1bCAy MDI2IDEzOjEzOjEyICswMjAwClN1YmplY3Q6IHhlbi9kbW9wOiBjaGVjayBu dW1iZXIgb2YgaW5wdXQgYnVmZmVycwpNSU1FLVZlcnNpb246IDEuMApDb250 ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1U cmFuc2Zlci1FbmNvZGluZzogOGJpdAoKVGhlIGh5cGVyY2FsbCByZXF1aXJl cyBhdCBsZWFzdCBvbmUgaW5wdXQgYnVmZmVyLCBhcyBib3RoIGFyY2gtc3Bl Y2lmaWMKaW1wbGVtZW50YXRpb25zIG9mIGRtX29wKCkgdW5jb25kaXRpb25h bGx5IGFzc3VtZSAtPmJ1ZlswXSB0byBiZSB2YWxpZCAoYW5kCm5vdCBzdGFj ayBydWJibGUpLgoKQWRkaXRpb25hbGx5LCBYRU5fRE1PUF9tb2RpZmllZF9t ZW1vcnkgcmVxdWlyZXMgdHdvIGlucHV0IGJ1ZmZlcnMsIHlldCB0aGUKY29k ZSB3YXMgYXNzdW1pbmcgdGhlIHNlY29uZCBidWZmZXIgdG8gYWx3YXlzIGJl IHByb3ZpZGVkIGJ5IHRoZSB1c2VyIHdoZW4KY2hlY2tpbmcgZm9yIHRoZSBu dW1iZXIgb2YgZXh0ZW50cy4gIEluIGNhc2UgdGhlIGNhbGxlciBzZXRzIG5y X2J1ZnMgdG8gMSwKdGhlIGNvZGUgaW4gbW9kaWZpZWRfbWVtb3J5KCkgd2ls bCByZWFkIHN0YWNrIGdhcmJhZ2UgYXMgdGhlIHNpemUgb2YgdGhlCmJ1ZmZl ciwgdGh1cyBhbGxvd2luZyB0aGUgY2FsbGVyIHNvbWUgZGVncmVlIG9mIGlu c2lnaHQgb24gdGhlIGNvbnRlbnRzIG9mCnRoZSBzdGFjayBieSBwcm9iaW5n IHdoZXRoZXIgdGhlIGh5cGVyY2FsbCByZXR1cm5zIC1FSU5WQUwgb3IgLUVG QVVMVCBhcyBhCnJlc3VsdCBvZiBzdWNoIGJvZ3VzIGNhbGwuCgpUaGlzIGlz IFhTQS01MDYgLyBDVkUtMjAyNi02MjQzMy4KCkZpeGVzOiBlM2I5M2IzYzU5 NTQgKCJkbW9wOiBhZGQgeGVuZGV2aWNlbW9kZWxfbW9kaWZpZWRfbWVtb3J5 X2J1bGsoKSIpCkZpeGVzOiA4NWNiMTVkZmU0ZDEgKCJ4ODYvaHZtL2Rtb3A6 IG9ubHkgY29weSB3aGF0IGlzIG5lZWRlZCB0by9mcm9tIHRoZSBndWVzdCIp ClNpZ25lZC1vZmYtYnk6IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBj aXRyaXguY29tPgpSZXZpZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3 LmNvb3BlcjNAY2l0cml4LmNvbT4KUmV2aWV3ZWQtYnk6IEphbiBCZXVsaWNo IDxqYmV1bGljaEBzdXNlLmNvbT4KLS0tCiB4ZW4vYXJjaC94ODYvaHZtL2Rt LmMgfCA5ICsrKysrKysrKwogeGVuL2NvbW1vbi9kbS5jICAgICAgIHwgMyAr KysKIDIgZmlsZXMgY2hhbmdlZCwgMTIgaW5zZXJ0aW9ucygrKQoKZGlmZiAt LWdpdCBhL3hlbi9hcmNoL3g4Ni9odm0vZG0uYyBiL3hlbi9hcmNoL3g4Ni9o dm0vZG0uYwppbmRleCAwNjY0OThlMDdlYTEuLjFmNDRmZmYxMmEyMSAxMDA2 NDQKLS0tIGEveGVuL2FyY2gveDg2L2h2bS9kbS5jCisrKyBiL3hlbi9hcmNo L3g4Ni9odm0vZG0uYwpAQCAtNDk0LDYgKzQ5NCwxMiBAQCBpbnQgZG1fb3Ao Y29uc3Qgc3RydWN0IGRtb3BfYXJncyAqb3BfYXJncykKICAgICAgICAgc3Ry dWN0IHhlbl9kbV9vcF9tb2RpZmllZF9tZW1vcnkgKmRhdGEgPQogICAgICAg ICAgICAgJm9wLnUubW9kaWZpZWRfbWVtb3J5OwogCisgICAgICAgIGlmICgg b3BfYXJncy0+bnJfYnVmcyAhPSAyICkKKyAgICAgICAgeworICAgICAgICAg ICAgcmMgPSAtRUlOVkFMOworICAgICAgICAgICAgYnJlYWs7CisgICAgICAg IH0KKwogICAgICAgICByYyA9IG1vZGlmaWVkX21lbW9yeShkLCBvcF9hcmdz LCBkYXRhKTsKICAgICAgICAgY29uc3Rfb3AgPSAhcmM7CiAgICAgICAgIGJy ZWFrOwpAQCAtNjU1LDYgKzY2MSw5IEBAIGludCBjb21wYXRfZG1fb3AoCiAg ICAgdW5zaWduZWQgaW50IGk7CiAgICAgaW50IHJjOwogCisgICAgaWYgKCAh bnJfYnVmcyApCisgICAgICAgIHJldHVybiAtRU5PREFUQTsKKwogICAgIGlm ICggbnJfYnVmcyA+IEFSUkFZX1NJWkUoYXJncy5idWYpICkKICAgICAgICAg cmV0dXJuIC1FMkJJRzsKIApkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9kbS5j IGIveGVuL2NvbW1vbi9kbS5jCmluZGV4IDIwMWI2NTJkZWI3ZS4uODY4OTcy OGFiN2EzIDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL2RtLmMKKysrIGIveGVu L2NvbW1vbi9kbS5jCkBAIC0yNiw2ICsyNiw5IEBAIGxvbmcgZG9fZG1fb3Ao CiAgICAgc3RydWN0IGRtb3BfYXJncyBhcmdzOwogICAgIGludCByYzsKIAor ICAgIGlmICggIW5yX2J1ZnMgKQorICAgICAgICByZXR1cm4gLUVOT0RBVEE7 CisKICAgICBpZiAoIG5yX2J1ZnMgPiBBUlJBWV9TSVpFKGFyZ3MuYnVmKSAp CiAgICAgICAgIHJldHVybiAtRTJCSUc7CiAKLS0gCjIuNTMuMAoK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:07:44 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:07:44 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1373166.1620273 (Exim 4.92) (envelope-from ) id 1wogb1-0005nF-C9; Tue, 28 Jul 2026 12:07:43 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1373166.1620273; Tue, 28 Jul 2026 12:07:43 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogb0-0005ic-VP; Tue, 28 Jul 2026 12:07:42 +0000 Received: by outflank-mailman (input) for mailman id 1373166; Tue, 28 Jul 2026 12:07:41 +0000 Received: from mx.expurgate.net ([194.145.224.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogay-0004wc-1W; Tue, 28 Jul 2026 12:07:40 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogax-006yAC-DV; Tue, 28 Jul 2026 14:07:39 +0200 Received: from [10.42.69.7] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689b7a-bab6-0a2a0a5309dd-0a2a4507b18c-48 for ; Tue, 28 Jul 2026 14:07:39 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-ef75cf.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b11-b4ea-0a2a45070019-6882d7259636-3 for ; Tue, 28 Jul 2026 14:05:39 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYw-00DPGa-1s; Tue, 28 Jul 2026 12:05:34 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYw-003E18-0s; Tue, 28 Jul 2026 12:05:34 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 508 v2 - pygrub is only supported in de-privileged mode Message-Id: Date: Tue, 28 Jul 2026 12:05:34 +0000 X-purgate-ID: tlsNG-ef75cf/1785240339-35CC7AE4-356D51DD/0/0 X-purgate-type: clean X-purgate-size: 5079 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-508 version 2 pygrub is only supported in de-privileged mode UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= XSA-443 and XSA-497 addressed specific issues in specific file system drivers (libfsimage) used by pygrub. Further issues were reported, and yet more are to be expected. XSA-443 introduced a means to run pygrub de-privileged. Only this mode of operation is security supported from now on. IMPACT ====== A guest using pygrub can escalate its privilege to that of the domain construction tools (i.e., normally, to control of the host). VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are affected. Older versions have not been inspected. MITIGATION ========== XSA-443 added a mechanism to run pygrub de-privileged. Using this mode will mitigate the vulnerability. Ensuring that guests do not use the pygrub bootloader will avoid this vulnerability. For cases where the PV guest is known to be 64bit, and uses grub2 as a bootloader, pvgrub is a suitable alternative to pygrub. Running only HVM or PVH guests will avoid the vulnerability. RESOLUTION ========== Applying the attached patch documents this issue. Patches for XSA-443 added additional functionality to pygrub and libxl in order to run pygrub in a restricted environment using a specific UID. Check xl.cfg man page for information on the bootloader_restrict option. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa508.patch xen-unstable - Xen 4.17.x $ sha256sum xsa508* f1e4b6490228b7fac61fd968229f98a3dfb782d56c6729d3fe01bc34c77fbd5c xsa508.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomsAMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZLhoH/38QGcVs3Xc3KuskdvBx57IV/vW9XjNlVYSngmdm lKzXTZhjrecrPZvwBbhuqOBXkaFQSL17+lLVK3xRAzv2dd5hn2PqXkMj06JSwcrh haXN/JWUDwQtmJuLfGNkQ9P1W27oMXZ3pBGhv1SsEfD0mNiyC7ZZKizU291usZbF 6JMUGNUmQ1Dyom2CiylmJGmrNrHzKdfNqURc+DoSOctpS9vbT0U0xLtKYvbVr3cj 7DuITo1/gS/3pxiUw/7E5uR7zPusBGISP1ir5rBqTkgoMf2tJkt7tfygqJtrqnkU BaUt0ZCo7NBKg71o0AESZIdO3Ddg2QD6xrymtI0BVqa0n1E= =9mkq -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa508.patch" Content-Disposition: attachment; filename="xsa508.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBweWdydWI6IHNlY3VyaXR5LXN1cHBvcnRlZCBvbmx5IHdoZW4gcnVuIGRl LXByaXZpbGVnZWQKClhTQS00NDMgYW5kIFhTQS00OTcgYWRkcmVzc2VkIHNw ZWNpZmljIGlzc3VlcyBpbiBzcGVjaWZpYyBmaWxlIHN5c3RlbQpkcml2ZXJz IChsaWJmc2ltYWdlKSB1c2VkIGJ5IHB5Z3J1Yi4gRnVydGhlciBpc3N1ZXMg d2VyZSByZXBvcnRlZCwgYW5kIHlldAptb3JlIGFyZSB0byBiZSBleHBlY3Rl ZC4gWFNBLTQ0MyBpbnRyb2R1Y2VkIGEgbWVhbnMgdG8gcnVuIHB5Z3J1YiBk ZS0KcHJpdmlsZWdlZC4gT25seSB0aGlzIG1vZGUgb2Ygb3BlcmF0aW9uIGlz IHNlY3VyaXR5IHN1cHBvcnRlZCBmcm9tIG5vdyBvbi4KClRoaXMgaXMgWFNB LTUwOC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBz dXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEp1ZXJnZW4gR3Jvc3MgPGpncm9zc0Bz dXNlLmNvbT4KCi0tLSBhL1NVUFBPUlQubWQKKysrIGIvU1VQUE9SVC5tZApA QCAtMjg4LDYgKzI4OCwxMiBAQCBvciBpdHNlbGYgd2lsbCBub3QgYmUgcmVn YXJkZWQgYSBzZWN1cml0CiAgICAgU3RhdHVzLCB1bnRydXN0ZWQgZHJpdmVy IGRvbWFpbnM6IFN1cHBvcnRlZCwgbm90IHNlY3VyaXR5IHN1cHBvcnRlZAog ICAgIFN0YXR1cywgTGl2ZXVwZGF0ZTogTm90IGZ1bmN0aW9uYWwKIAorIyMg R3Vlc3QgYm9vdCBsb2FkZXJzCisKKyMjIyBQeWdydWIKKworICAgIFN0YXR1 czogU3VwcG9ydGVkLCBzZWN1cml0eSBzdXBwb3J0ZWQgb25seSB3aGVuIHJ1 biBkZS1wcml2aWxlZ2VkCisKICMjIFRvb2xzdGFjay8zcmQgcGFydHkKIAog IyMjIGxpYnZpcnQgZHJpdmVyIGZvciB4bAo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Jul 28 12:07:44 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Jul 2026 12:07:44 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1373155.1620236 (Exim 4.92) (envelope-from ) id 1wogax-0004oV-HA; Tue, 28 Jul 2026 12:07:39 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1373155.1620236; Tue, 28 Jul 2026 12:07:39 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogax-0004mP-63; Tue, 28 Jul 2026 12:07:39 +0000 Received: by outflank-mailman (input) for mailman id 1373155; Tue, 28 Jul 2026 12:07:37 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wogau-0004a7-Lq; Tue, 28 Jul 2026 12:07:36 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wogau-00EcR4-2W; Tue, 28 Jul 2026 14:07:36 +0200 Received: from [10.42.69.12] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a689b7b-5cb7-0a2a0a5109dd-0a2a450ce798-34 for ; Tue, 28 Jul 2026 14:07:36 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-d25034.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a689b0e-f479-0a2a450c0019-6882d725b970-3 for ; Tue, 28 Jul 2026 14:05:35 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1wogYt-00DPGA-0x; Tue, 28 Jul 2026 12:05:31 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1wogYs-003Dzb-3C; Tue, 28 Jul 2026 12:05:30 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 507 v2 (CVE-2026-62434) - PoD: Don't try to reclaim special pages Message-Id: Date: Tue, 28 Jul 2026 12:05:30 +0000 X-purgate-ID: tlsNG-d25034/1785240335-01AC4A5B-4B6FAA98/0/0 X-purgate-type: clean X-purgate-size: 6587 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62434 / XSA-507 version 2 PoD: Don't try to reclaim special pages UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. IMPACT ====== A buggy or malicious guest can cause corruption of Xen's state, leading to crashes or other malfunctions. Information leak and privilege escalation cannot be ruled out. VULNERABLE SYSTEMS ================== All Xen versions from 3.4 onwards are vulnerable. Xen versions 3.3 and earlier are not vulnerable. Only x86 systems are vulnerable. Only x86 HVM and PVH guests started in populate-on-demand mode are believed to be able to leverage the vulnerability. Populate-on-demand mode is activated when the guest's xl configuration file specifies a "maxmem" value which is larger than the "memory" value. MITIGATION ========== Running only PV guests or HVM/PVH guests without PoD will avoid the vulnerability. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa507.patch xen-unstable - Xen 4.17.x $ sha256sum xsa507* 41485ddf0912cfa53fa05e236aa27c3c6490919ac2dab5b9f57ed69f5b38f60a xsa507.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomr4MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ+04H/i3UMWbGcPG2kp978waMmF3Gtfb/r8mw3UBzVGCi cIOBWf/FizjWu54SQEQtjwYPfi0nKftFN1UPqAGs+OUtyiZ8EcPL5x9i7arrqA2T uGfpCTb3NtFmacBbrpGnqkNahMtSLWtE8aSVEQhLxvZcLTPB6OPzIi/MVPGyA7jl /LSGWs4vd99Y8ZvAN20rhxaEAjYynfd7N4tXn38EoW9WiQBuPZ5eNzsbieah8PEo Ajntyx774ipvtYYStA4fhsLwO+6LyqH7okDR1g8Xkq6IVrOshP194mxnsuEfcMIO 4TCkWbzhmspfxQ1E2aW2VVPzIC2X2b+i8JieUK/z3mmrRSU= =AfG5 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa507.patch" Content-Disposition: attachment; filename="xsa507.patch" Content-Transfer-Encoding: base64 RnJvbSBjMWZlN2QxMGU4YjQ4OWRkNjZhZDVhMmQ3NTA4ZTk4ZTljOGRhYmM2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpEYXRlOiBUdWUsIDE0IEp1bCAy MDI2IDE3OjA1OjQ1ICswMjAwClN1YmplY3Q6IHg4Ni9wb2Q6IGRvIG5vdCBy ZWNsYWltIHNwZWNpYWwgcGFnZXMgZm9yIFBvRCBjYWNoZQpNSU1FLVZlcnNp b246IDEuMApDb250ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJzZXQ9VVRG LTgKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogOGJpdAoKV2hlbiBkb2lu ZyBQb0QgY2FjaGUgcmVjbGFpbSBhcyBwYXJ0IG9mIGEgZGVjcmVhc2UgcmVz ZXJ2YXRpb24gY2FsbCwgYXZvaWQKcmVjbGFpbWluZyBzcGVjaWFsIHBhZ2Vz IGZvciB0aGUgUG9EIGNhY2hlLiAgT3RoZXJ3aXNlIHN1Y2ggcGFnZXMgZ2V0 IG1vdmVkCmZyb20gdGhlIGRvbWFpbiAtPnhlbnBhZ2VfbGlzdCB0byB0aGUg LT5wYWdlX2xpc3QsIHdoaWxlIHN0aWxsIGJlaW5nCnJlZmVyZW5jZWQgaW4g LT5zaGFyZWRfaW5mbyBkb21haW4gZmllbGQuCgpQcmV2ZW50IFBvRCBjYWNo ZSBmcm9tIHJlY2xhaW1pbmcgc3BlY2lhbCBwYWdlcywgYXMgbm90aGluZyBn b29kIGNhbiBjb21lCm91dCBvZiBpdC4KClRoaXMgaXMgWFNBLTUwNyAvIENW RS0yMDI2LTYyNDM0LgoKRml4ZXM6IDQxYWEwYjYyNjk5ZSAoIlBvRCBtZW1v cnkgNC85OiBEZWNyZWFzZSByZXNlcnZhdGlvbiIpClNpZ25lZC1vZmYtYnk6 IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpSZXZp ZXdlZC1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0K IHhlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMgfCA4ICsrKysrKy0tCiAxIGZp bGUgY2hhbmdlZCwgNiBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQoK ZGlmZiAtLWdpdCBhL3hlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMgYi94ZW4v YXJjaC94ODYvbW0vcDJtLXBvZC5jCmluZGV4IDdhMGJlYmQyZDNiNS4uNDYw MmMzMmNmZmFmIDEwMDY0NAotLS0gYS94ZW4vYXJjaC94ODYvbW0vcDJtLXBv ZC5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9wMm0tcG9kLmMKQEAgLTUzNiwx MiArNTM2LDEzIEBAIGRlY3JlYXNlX3Jlc2VydmF0aW9uKHN0cnVjdCBkb21h aW4gKmQsIGdmbl90IGdmbiwgdW5zaWduZWQgaW50IG9yZGVyKQogICAgICAg ICBwMm1fYWNjZXNzX3QgYTsKICAgICAgICAgcDJtX3R5cGVfdCB0OwogICAg ICAgICB1bnNpZ25lZCBpbnQgY3VyX29yZGVyOworICAgICAgICBtZm5fdCBt Zm4gPSBwMm0tPmdldF9lbnRyeShwMm0sIGdmbl9hZGQoZ2ZuLCBpKSwgJnQs ICZhLCAwLCAmY3VyX29yZGVyLAorICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBOVUxMKTsKIAotICAgICAgICBwMm0tPmdldF9lbnRyeShw Mm0sIGdmbl9hZGQoZ2ZuLCBpKSwgJnQsICZhLCAwLCAmY3VyX29yZGVyLCBO VUxMKTsKICAgICAgICAgbiA9IDFVTCA8PCBtaW4ob3JkZXIsIGN1cl9vcmRl cik7CiAgICAgICAgIGlmICggcDJtX2lzX3BvZCh0KSApCiAgICAgICAgICAg ICBwb2QgKz0gbjsKLSAgICAgICAgZWxzZSBpZiAoIHAybV9pc19yYW0odCkg KQorICAgICAgICBlbHNlIGlmICggcDJtX2lzX3JhbSh0KSAmJiAhaXNfc3Bl Y2lhbF9wYWdlKG1mbl90b19wYWdlKG1mbikpICkKICAgICAgICAgICAgIHJh bSArPSBuOwogICAgIH0KIApAQCAtNjQ0LDYgKzY0NSw5IEBAIGRlY3JlYXNl X3Jlc2VydmF0aW9uKHN0cnVjdCBkb21haW4gKmQsIGdmbl90IGdmbiwgdW5z aWduZWQgaW50IG9yZGVyKQogICAgICAgICAgICAgQVNTRVJUKG1mbl92YWxp ZChtZm4pKTsKIAogICAgICAgICAgICAgcGFnZSA9IG1mbl90b19wYWdlKG1m bik7CisgICAgICAgICAgICBpZiAoIGlzX3NwZWNpYWxfcGFnZShwYWdlKSAp CisgICAgICAgICAgICAgICAgLyogRG8gbm90IHRvdWNoIHNwZWNpYWwgcGFn ZXMsIGxldCBnZW5lcmljIGNvZGUgaGFuZGxlIHRoZW0uICovCisgICAgICAg ICAgICAgICAgY29udGludWU7CiAKICAgICAgICAgICAgIC8qIFRoaXMgc2hv dWxkbid0IGJlIGFibGUgdG8gZmFpbCAqLwogICAgICAgICAgICAgaWYgKCBw Mm1fc2V0X2VudHJ5KHAybSwgZ2ZuX2FkZChnZm4sIGkpLCBJTlZBTElEX01G TiwgY3VyX29yZGVyLAotLSAKMi41My4wCgo= --=separator--