From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1F8ADC4363A for ; Mon, 26 Oct 2020 00:34:13 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id B691A20727 for ; Mon, 26 Oct 2020 00:34:12 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="gjSx9OkY" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1420859AbgJZAc3 (ORCPT ); Sun, 25 Oct 2020 20:32:29 -0400 Received: from mail-pj1-f67.google.com ([209.85.216.67]:36675 "EHLO mail-pj1-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1420857AbgJZAc3 (ORCPT ); Sun, 25 Oct 2020 20:32:29 -0400 Received: by mail-pj1-f67.google.com with SMTP id d22so811425pjz.1 for ; Sun, 25 Oct 2020 17:32:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=CsIU/W0BTwXYVtKEV+7B6DvVVf887wE6s7LJfI5jPZQ=; b=gjSx9OkYK0F201HMOba+DaS1gfGu88uaAWHzay0NvfJMz8deRRj88ibYk07CrEjiAk zj0Q+JE+AMt5fUHiAH/GVv7jPzOnznxhcPWZ0CVIUYrBxOiIGA3YLDIDm8eFuRsCX4yA oeTE6RhmL80X/x/JvK7tz/XlSr88LW4SKm1ME= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to; bh=CsIU/W0BTwXYVtKEV+7B6DvVVf887wE6s7LJfI5jPZQ=; b=mBCvMYxx8bJoA7dgcQP7ayBPLh1//eBdkkOi4+74Sd4bZuUsQY994Rplzy/pL/EiqX wBHWGeTtS48d21xGRDOdQjbkbKASMFw8JyJQs6nO4nJcShTMW9sVDi6ZDCIoX067/tjk hyREfd7JECDMUyeJOgk96hBioMSPiJP53gu5I5YQrje3p3F8L0C70WEXIBhEGB3sAkR9 r1lsKCbyC6a3HBWgb9R7PhU3jMmGPb5l1OZyWMapt7yDdgegf1y3sjVw1wtW/5UY6WFH FbKX20zFKqMIcMOk1cnWqOrPAaCSFk+VrBrhxWmKQSsV88xR7BmQBc38odPCbakxH1vz DAkw== X-Gm-Message-State: AOAM530gP4DkqYQ1nuC4hKcuk59GEifxij+L5gxXbTHCCO427ONF8p6t +TMT15SCjA8dH6BEBQMU4RHmSg== X-Google-Smtp-Source: ABdhPJwr1X6t3j45azHrIhS2mdTinP5F/ALvbWtggXrg1TXkO52IHM8o2EHJ9eVysLv3wSDWuvXFLw== X-Received: by 2002:a17:902:204:b029:d3:9c43:3715 with SMTP id 4-20020a1709020204b02900d39c433715mr5895361plc.74.1603672347924; Sun, 25 Oct 2020 17:32:27 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id 198sm2997682pfx.194.2020.10.25.17.32.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Oct 2020 17:32:26 -0700 (PDT) Date: Sun, 25 Oct 2020 17:32:25 -0700 From: Kees Cook To: Jann Horn Cc: Tycho Andersen , "Michael Kerrisk (man-pages)" , Sargun Dhillon , Christian Brauner , linux-man , lkml , Aleksa Sarai , Alexei Starovoitov , Will Drewry , bpf , Song Liu , Daniel Borkmann , Andy Lutomirski , Linux Containers , Giuseppe Scrivano , Robert Sesek Subject: Re: For review: seccomp_user_notif(2) manual page Message-ID: <202010251725.2BD96926E3@keescook> References: <45f07f17-18b6-d187-0914-6f341fe90857@gmail.com> <20200930150330.GC284424@cisco> <8bcd956f-58d2-d2f0-ca7c-0a30f3fcd5b8@gmail.com> <20200930230327.GA1260245@cisco> <20200930232456.GB1260245@cisco> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: bpf@vger.kernel.org On Thu, Oct 01, 2020 at 03:52:02AM +0200, Jann Horn wrote: > On Thu, Oct 1, 2020 at 1:25 AM Tycho Andersen wrote: > > On Thu, Oct 01, 2020 at 01:11:33AM +0200, Jann Horn wrote: > > > On Thu, Oct 1, 2020 at 1:03 AM Tycho Andersen wrote: > > > > On Wed, Sep 30, 2020 at 10:34:51PM +0200, Michael Kerrisk (man-pages) wrote: > > > > > On 9/30/20 5:03 PM, Tycho Andersen wrote: > > > > > > On Wed, Sep 30, 2020 at 01:07:38PM +0200, Michael Kerrisk (man-pages) wrote: > > > > > >> ┌─────────────────────────────────────────────────────┐ > > > > > >> │FIXME │ > > > > > >> ├─────────────────────────────────────────────────────┤ > > > > > >> │From my experiments, it appears that if a SEC‐ │ > > > > > >> │COMP_IOCTL_NOTIF_RECV is done after the target │ > > > > > >> │process terminates, then the ioctl() simply blocks │ > > > > > >> │(rather than returning an error to indicate that the │ > > > > > >> │target process no longer exists). │ > > > > > > > > > > > > Yeah, I think Christian wanted to fix this at some point, > > > > > > > > > > Do you have a pointer that discussion? I could not find it with a > > > > > quick search. > > > > > > > > > > > but it's a > > > > > > bit sticky to do. > > > > > > > > > > Can you say a few words about the nature of the problem? > > > > > > > > I remembered wrong, it's actually in the tree: 99cdb8b9a573 ("seccomp: > > > > notify about unused filter"). So maybe there's a bug here? > > > > > > That thing only notifies on ->poll, it doesn't unblock ioctls; and > > > Michael's sample code uses SECCOMP_IOCTL_NOTIF_RECV to wait. So that > > > commit doesn't have any effect on this kind of usage. > > > > Yes, thanks. And the ones stuck in RECV are waiting on a semaphore so > > we don't have a count of all of them, unfortunately. > > > > We could maybe look inside the wait_list, but that will probably make > > people angry :) > > The easiest way would probably be to open-code the semaphore-ish part, > and let the semaphore and poll share the waitqueue. The current code > kind of mirrors the semaphore's waitqueue in the wqh - open-coding the > entire semaphore would IMO be cleaner than that. And it's not like > semaphore semantics are even a good fit for this code anyway. > > Let's see... if we didn't have the existing UAPI to worry about, I'd > do it as follows (*completely* untested). That way, the ioctl would > block exactly until either there actually is a request to deliver or > there are no more users of the filter. The problem is that if we just > apply this patch, existing users of SECCOMP_IOCTL_NOTIF_RECV that use > an event loop and don't set O_NONBLOCK will be screwed. So we'd Wait, why? Do you mean a ioctl calling loop (rather than a poll event loop)? I think poll would be fine, but a "try calling RECV and expect to return ENOENT" loop would change. But I don't think anyone would do this exactly because it _currently_ acts like O_NONBLOCK, yes? > probably also have to add some stupid counter in place of the > semaphore's counter that we can use to preserve the old behavior of > returning -ENOENT once for each cancelled request. :( I only see this in Debian Code Search: https://sources.debian.org/src/crun/0.15+dfsg-1/src/libcrun/seccomp_notify.c/?hl=166#L166 which is using epoll_wait(): https://sources.debian.org/src/crun/0.15+dfsg-1/src/libcrun/container.c/?hl=1326#L1326 I expect LXC is using it. :) Let's change it ASAP! ;) -Kees > > I guess this is a nice point in favor of Michael's usual complaint > that if there are no man pages for a feature by the time the feature > lands upstream, there's a higher chance that the UAPI will suck > forever... > > > > diff --git a/kernel/seccomp.c b/kernel/seccomp.c > index 676d4af62103..f0f4c68e0bc6 100644 > --- a/kernel/seccomp.c > +++ b/kernel/seccomp.c > @@ -138,7 +138,6 @@ struct seccomp_kaddfd { > * @notifications: A list of struct seccomp_knotif elements. > */ > struct notification { > - struct semaphore request; > u64 next_id; > struct list_head notifications; > }; > @@ -859,7 +858,6 @@ static int seccomp_do_user_notification(int this_syscall, > list_add(&n.list, &match->notif->notifications); > INIT_LIST_HEAD(&n.addfd); > > - up(&match->notif->request); > wake_up_poll(&match->wqh, EPOLLIN | EPOLLRDNORM); > mutex_unlock(&match->notify_lock); > > @@ -1175,9 +1173,10 @@ find_notification(struct seccomp_filter *filter, u64 id) > > > static long seccomp_notify_recv(struct seccomp_filter *filter, > - void __user *buf) > + void __user *buf, bool blocking) > { > struct seccomp_knotif *knotif = NULL, *cur; > + DECLARE_WAITQUEUE(wait, current); > struct seccomp_notif unotif; > ssize_t ret; > > @@ -1190,11 +1189,9 @@ static long seccomp_notify_recv(struct > seccomp_filter *filter, > > memset(&unotif, 0, sizeof(unotif)); > > - ret = down_interruptible(&filter->notif->request); > - if (ret < 0) > - return ret; > - > mutex_lock(&filter->notify_lock); > + > +retry: > list_for_each_entry(cur, &filter->notif->notifications, list) { > if (cur->state == SECCOMP_NOTIFY_INIT) { > knotif = cur; > @@ -1202,14 +1199,32 @@ static long seccomp_notify_recv(struct > seccomp_filter *filter, > } > } > > - /* > - * If we didn't find a notification, it could be that the task was > - * interrupted by a fatal signal between the time we were woken and > - * when we were able to acquire the rw lock. > - */ > if (!knotif) { > - ret = -ENOENT; > - goto out; > + /* This has to happen before checking &filter->users. */ > + prepare_to_wait(&filter->wqh, &wait, TASK_INTERRUPTIBLE); > + > + /* > + * If all users of the filter are gone, throw an error instead > + * of pointlessly continuing to block. > + */ > + if (refcount_read(&filter->users) == 0) { > + ret = -ENOTCON; > + goto out; > + } > + if (blocking) { > + /* No notifications pending - wait for one, > then retry. */ > + mutex_unlock(&filter->notify_lock); > + schedule(); > + mutex_lock(&filter->notify_lock); > + if (signal_pending(current)) { > + ret = -EINTR; > + goto out; > + } > + goto retry; > + } else { > + ret = -ENOENT; > + goto out; > + } > } > > unotif.id = knotif->id; > @@ -1220,6 +1235,7 @@ static long seccomp_notify_recv(struct > seccomp_filter *filter, > wake_up_poll(&filter->wqh, EPOLLOUT | EPOLLWRNORM); > ret = 0; > out: > + finish_wait(&filter->wqh, &wait); > mutex_unlock(&filter->notify_lock); > > if (ret == 0 && copy_to_user(buf, &unotif, sizeof(unotif))) { > @@ -1233,10 +1249,8 @@ static long seccomp_notify_recv(struct > seccomp_filter *filter, > */ > mutex_lock(&filter->notify_lock); > knotif = find_notification(filter, unotif.id); > - if (knotif) { > + if (knotif) > knotif->state = SECCOMP_NOTIFY_INIT; > - up(&filter->notif->request); > - } > mutex_unlock(&filter->notify_lock); > } > > @@ -1412,11 +1426,12 @@ static long seccomp_notify_ioctl(struct file > *file, unsigned int cmd, > { > struct seccomp_filter *filter = file->private_data; > void __user *buf = (void __user *)arg; > + bool blocking = !(file->f_flags & O_NONBLOCK); > > /* Fixed-size ioctls */ > switch (cmd) { > case SECCOMP_IOCTL_NOTIF_RECV: > - return seccomp_notify_recv(filter, buf); > + return seccomp_notify_recv(filter, buf, blocking); > case SECCOMP_IOCTL_NOTIF_SEND: > return seccomp_notify_send(filter, buf); > case SECCOMP_IOCTL_NOTIF_ID_VALID_WRONG_DIR: > @@ -1485,7 +1500,6 @@ static struct file *init_listener(struct > seccomp_filter *filter) > if (!filter->notif) > goto out; > > - sema_init(&filter->notif->request, 0); > filter->notif->next_id = get_random_u64(); > INIT_LIST_HEAD(&filter->notif->notifications); -- Kees Cook From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.5 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id CB72CC4363A for ; Mon, 26 Oct 2020 00:32:36 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 145A320659 for ; Mon, 26 Oct 2020 00:32:35 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="gjSx9OkY" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 145A320659 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=chromium.org Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=containers-bounces@lists.linux-foundation.org Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 66FCE27236; Mon, 26 Oct 2020 00:32:35 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Qxac9kJUWzB; Mon, 26 Oct 2020 00:32:32 +0000 (UTC) Received: from lists.linuxfoundation.org (lf-lists.osuosl.org [140.211.9.56]) by silver.osuosl.org (Postfix) with ESMTP id 98C9D272E3; Mon, 26 Oct 2020 00:32:31 +0000 (UTC) Received: from lf-lists.osuosl.org (localhost [127.0.0.1]) by lists.linuxfoundation.org (Postfix) with ESMTP id 7C893C088B; Mon, 26 Oct 2020 00:32:31 +0000 (UTC) Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) by lists.linuxfoundation.org (Postfix) with ESMTP id A857FC0051 for ; Mon, 26 Oct 2020 00:32:30 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 7E15827236 for ; Mon, 26 Oct 2020 00:32:30 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7dIxQDJOoKj5 for ; Mon, 26 Oct 2020 00:32:28 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-pl1-f193.google.com (mail-pl1-f193.google.com [209.85.214.193]) by silver.osuosl.org (Postfix) with ESMTPS id 70F312041F for ; Mon, 26 Oct 2020 00:32:28 +0000 (UTC) Received: by mail-pl1-f193.google.com with SMTP id r3so3841963plo.1 for ; Sun, 25 Oct 2020 17:32:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=CsIU/W0BTwXYVtKEV+7B6DvVVf887wE6s7LJfI5jPZQ=; b=gjSx9OkYK0F201HMOba+DaS1gfGu88uaAWHzay0NvfJMz8deRRj88ibYk07CrEjiAk zj0Q+JE+AMt5fUHiAH/GVv7jPzOnznxhcPWZ0CVIUYrBxOiIGA3YLDIDm8eFuRsCX4yA oeTE6RhmL80X/x/JvK7tz/XlSr88LW4SKm1ME= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to; bh=CsIU/W0BTwXYVtKEV+7B6DvVVf887wE6s7LJfI5jPZQ=; b=Jogpdb3o6itrLDCcWvBJyOrKZNQfr4epXaeKtIiFYtNnCd/j/S3Zl+lY3giTouhY/V ULP7ns3syQtT7qu9IrgPYlUxvtwMxwb9ML9yqHLlPrv0DtkzqK+iEtlBIzOY/ksPBzsB xm2a+SxIhJDLubeC8cQQoSQ5r+7N+dA/XgBu4EaFBzTBG7wfkcXZuz63VkUtFUsImjIW WJyKLrArjiU/o+A3nPTde2Tt9ecgeKOWIcjbadKuEm9hE6vkBRKB2TbRtz73wfufBuNw fgWBEV/tjhLNJOxzlWkMvnOvZdzDsm+jbKpA3ejrf/LRk1zvWUFHTETGkJf4JXILpmH/ 1d2g== X-Gm-Message-State: AOAM533eY6yXP3FecFDo5pYvz+pz65KdrmQLKBK1uK3hYk5wsN2H2KDJ UXV/dqbVMXAkIRRNJjnMcFStSw== X-Google-Smtp-Source: ABdhPJwr1X6t3j45azHrIhS2mdTinP5F/ALvbWtggXrg1TXkO52IHM8o2EHJ9eVysLv3wSDWuvXFLw== X-Received: by 2002:a17:902:204:b029:d3:9c43:3715 with SMTP id 4-20020a1709020204b02900d39c433715mr5895361plc.74.1603672347924; Sun, 25 Oct 2020 17:32:27 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id 198sm2997682pfx.194.2020.10.25.17.32.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Oct 2020 17:32:26 -0700 (PDT) Date: Sun, 25 Oct 2020 17:32:25 -0700 From: Kees Cook To: Jann Horn Subject: Re: For review: seccomp_user_notif(2) manual page Message-ID: <202010251725.2BD96926E3@keescook> References: <45f07f17-18b6-d187-0914-6f341fe90857@gmail.com> <20200930150330.GC284424@cisco> <8bcd956f-58d2-d2f0-ca7c-0a30f3fcd5b8@gmail.com> <20200930230327.GA1260245@cisco> <20200930232456.GB1260245@cisco> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: Cc: linux-man , Song Liu , Will Drewry , Robert Sesek , Daniel Borkmann , Giuseppe Scrivano , Linux Containers , lkml , Alexei Starovoitov , "Michael Kerrisk \(man-pages\)" , bpf , Andy Lutomirski , Christian Brauner X-BeenThere: containers@lists.linux-foundation.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Linux Containers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: containers-bounces@lists.linux-foundation.org Sender: "Containers" T24gVGh1LCBPY3QgMDEsIDIwMjAgYXQgMDM6NTI6MDJBTSArMDIwMCwgSmFubiBIb3JuIHdyb3Rl Ogo+IE9uIFRodSwgT2N0IDEsIDIwMjAgYXQgMToyNSBBTSBUeWNobyBBbmRlcnNlbiA8dHljaG9A dHljaG8ucGl6emE+IHdyb3RlOgo+ID4gT24gVGh1LCBPY3QgMDEsIDIwMjAgYXQgMDE6MTE6MzNB TSArMDIwMCwgSmFubiBIb3JuIHdyb3RlOgo+ID4gPiBPbiBUaHUsIE9jdCAxLCAyMDIwIGF0IDE6 MDMgQU0gVHljaG8gQW5kZXJzZW4gPHR5Y2hvQHR5Y2hvLnBpenphPiB3cm90ZToKPiA+ID4gPiBP biBXZWQsIFNlcCAzMCwgMjAyMCBhdCAxMDozNDo1MVBNICswMjAwLCBNaWNoYWVsIEtlcnJpc2sg KG1hbi1wYWdlcykgd3JvdGU6Cj4gPiA+ID4gPiBPbiA5LzMwLzIwIDU6MDMgUE0sIFR5Y2hvIEFu ZGVyc2VuIHdyb3RlOgo+ID4gPiA+ID4gPiBPbiBXZWQsIFNlcCAzMCwgMjAyMCBhdCAwMTowNzoz OFBNICswMjAwLCBNaWNoYWVsIEtlcnJpc2sgKG1hbi1wYWdlcykgd3JvdGU6Cj4gPiA+ID4gPiA+ PiAgICAgICAg4pSM4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA 4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA 4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA4pSA 4pSQCj4gPiA+ID4gPiA+PiAgICAgICAg4pSCRklYTUUgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICDilIIKPiA+ID4gPiA+ID4+ICAgICAgICDilJzilIDilIDi lIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDi lIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDi lIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilIDilKQKPiA+ID4gPiA+ID4+ICAg ICAgICDilIJGcm9tIG15IGV4cGVyaW1lbnRzLCAgaXQgIGFwcGVhcnMgIHRoYXQgIGlmICBhICBT RUPigJAg4pSCCj4gPiA+ID4gPiA+PiAgICAgICAg4pSCQ09NUF9JT0NUTF9OT1RJRl9SRUNWICAg aXMgIGRvbmUgIGFmdGVyICB0aGUgIHRhcmdldCDilIIKPiA+ID4gPiA+ID4+ICAgICAgICDilIJw cm9jZXNzIHRlcm1pbmF0ZXMsIHRoZW4gdGhlIGlvY3RsKCkgIHNpbXBseSAgYmxvY2tzIOKUggo+ ID4gPiA+ID4gPj4gICAgICAgIOKUgihyYXRoZXIgdGhhbiByZXR1cm5pbmcgYW4gZXJyb3IgdG8g aW5kaWNhdGUgdGhhdCB0aGUg4pSCCj4gPiA+ID4gPiA+PiAgICAgICAg4pSCdGFyZ2V0IHByb2Nl c3Mgbm8gbG9uZ2VyIGV4aXN0cykuICAgICAgICAgICAgICAgICAgICDilIIKPiA+ID4gPiA+ID4K PiA+ID4gPiA+ID4gWWVhaCwgSSB0aGluayBDaHJpc3RpYW4gd2FudGVkIHRvIGZpeCB0aGlzIGF0 IHNvbWUgcG9pbnQsCj4gPiA+ID4gPgo+ID4gPiA+ID4gRG8geW91IGhhdmUgYSBwb2ludGVyIHRo YXQgZGlzY3Vzc2lvbj8gSSBjb3VsZCBub3QgZmluZCBpdCB3aXRoIGEKPiA+ID4gPiA+IHF1aWNr IHNlYXJjaC4KPiA+ID4gPiA+Cj4gPiA+ID4gPiA+IGJ1dCBpdCdzIGEKPiA+ID4gPiA+ID4gYml0 IHN0aWNreSB0byBkby4KPiA+ID4gPiA+Cj4gPiA+ID4gPiBDYW4geW91IHNheSBhIGZldyB3b3Jk cyBhYm91dCB0aGUgbmF0dXJlIG9mIHRoZSBwcm9ibGVtPwo+ID4gPiA+Cj4gPiA+ID4gSSByZW1l bWJlcmVkIHdyb25nLCBpdCdzIGFjdHVhbGx5IGluIHRoZSB0cmVlOiA5OWNkYjhiOWE1NzMgKCJz ZWNjb21wOgo+ID4gPiA+IG5vdGlmeSBhYm91dCB1bnVzZWQgZmlsdGVyIikuIFNvIG1heWJlIHRo ZXJlJ3MgYSBidWcgaGVyZT8KPiA+ID4KPiA+ID4gVGhhdCB0aGluZyBvbmx5IG5vdGlmaWVzIG9u IC0+cG9sbCwgaXQgZG9lc24ndCB1bmJsb2NrIGlvY3RsczsgYW5kCj4gPiA+IE1pY2hhZWwncyBz YW1wbGUgY29kZSB1c2VzIFNFQ0NPTVBfSU9DVExfTk9USUZfUkVDViB0byB3YWl0LiBTbyB0aGF0 Cj4gPiA+IGNvbW1pdCBkb2Vzbid0IGhhdmUgYW55IGVmZmVjdCBvbiB0aGlzIGtpbmQgb2YgdXNh Z2UuCj4gPgo+ID4gWWVzLCB0aGFua3MuIEFuZCB0aGUgb25lcyBzdHVjayBpbiBSRUNWIGFyZSB3 YWl0aW5nIG9uIGEgc2VtYXBob3JlIHNvCj4gPiB3ZSBkb24ndCBoYXZlIGEgY291bnQgb2YgYWxs IG9mIHRoZW0sIHVuZm9ydHVuYXRlbHkuCj4gPgo+ID4gV2UgY291bGQgbWF5YmUgbG9vayBpbnNp ZGUgdGhlIHdhaXRfbGlzdCwgYnV0IHRoYXQgd2lsbCBwcm9iYWJseSBtYWtlCj4gPiBwZW9wbGUg YW5ncnkgOikKPiAKPiBUaGUgZWFzaWVzdCB3YXkgd291bGQgcHJvYmFibHkgYmUgdG8gb3Blbi1j b2RlIHRoZSBzZW1hcGhvcmUtaXNoIHBhcnQsCj4gYW5kIGxldCB0aGUgc2VtYXBob3JlIGFuZCBw b2xsIHNoYXJlIHRoZSB3YWl0cXVldWUuIFRoZSBjdXJyZW50IGNvZGUKPiBraW5kIG9mIG1pcnJv cnMgdGhlIHNlbWFwaG9yZSdzIHdhaXRxdWV1ZSBpbiB0aGUgd3FoIC0gb3Blbi1jb2RpbmcgdGhl Cj4gZW50aXJlIHNlbWFwaG9yZSB3b3VsZCBJTU8gYmUgY2xlYW5lciB0aGFuIHRoYXQuIEFuZCBp dCdzIG5vdCBsaWtlCj4gc2VtYXBob3JlIHNlbWFudGljcyBhcmUgZXZlbiBhIGdvb2QgZml0IGZv ciB0aGlzIGNvZGUgYW55d2F5Lgo+IAo+IExldCdzIHNlZS4uLiBpZiB3ZSBkaWRuJ3QgaGF2ZSB0 aGUgZXhpc3RpbmcgVUFQSSB0byB3b3JyeSBhYm91dCwgSSdkCj4gZG8gaXQgYXMgZm9sbG93cyAo KmNvbXBsZXRlbHkqIHVudGVzdGVkKS4gVGhhdCB3YXksIHRoZSBpb2N0bCB3b3VsZAo+IGJsb2Nr IGV4YWN0bHkgdW50aWwgZWl0aGVyIHRoZXJlIGFjdHVhbGx5IGlzIGEgcmVxdWVzdCB0byBkZWxp dmVyIG9yCj4gdGhlcmUgYXJlIG5vIG1vcmUgdXNlcnMgb2YgdGhlIGZpbHRlci4gVGhlIHByb2Js ZW0gaXMgdGhhdCBpZiB3ZSBqdXN0Cj4gYXBwbHkgdGhpcyBwYXRjaCwgZXhpc3RpbmcgdXNlcnMg b2YgU0VDQ09NUF9JT0NUTF9OT1RJRl9SRUNWIHRoYXQgdXNlCj4gYW4gZXZlbnQgbG9vcCBhbmQg ZG9uJ3Qgc2V0IE9fTk9OQkxPQ0sgd2lsbCBiZSBzY3Jld2VkLiBTbyB3ZSdkCgpXYWl0LCB3aHk/ IERvIHlvdSBtZWFuIGEgaW9jdGwgY2FsbGluZyBsb29wIChyYXRoZXIgdGhhbiBhIHBvbGwgZXZl bnQKbG9vcCk/IEkgdGhpbmsgcG9sbCB3b3VsZCBiZSBmaW5lLCBidXQgYSAidHJ5IGNhbGxpbmcg UkVDViBhbmQgZXhwZWN0IHRvCnJldHVybiBFTk9FTlQiIGxvb3Agd291bGQgY2hhbmdlLiBCdXQg SSBkb24ndCB0aGluayBhbnlvbmUgd291bGQgZG8gdGhpcwpleGFjdGx5IGJlY2F1c2UgaXQgX2N1 cnJlbnRseV8gYWN0cyBsaWtlIE9fTk9OQkxPQ0ssIHllcz8KCj4gcHJvYmFibHkgYWxzbyBoYXZl IHRvIGFkZCBzb21lIHN0dXBpZCBjb3VudGVyIGluIHBsYWNlIG9mIHRoZQo+IHNlbWFwaG9yZSdz IGNvdW50ZXIgdGhhdCB3ZSBjYW4gdXNlIHRvIHByZXNlcnZlIHRoZSBvbGQgYmVoYXZpb3Igb2YK PiByZXR1cm5pbmcgLUVOT0VOVCBvbmNlIGZvciBlYWNoIGNhbmNlbGxlZCByZXF1ZXN0LiA6KAoK SSBvbmx5IHNlZSB0aGlzIGluIERlYmlhbiBDb2RlIFNlYXJjaDoKaHR0cHM6Ly9zb3VyY2VzLmRl Ymlhbi5vcmcvc3JjL2NydW4vMC4xNStkZnNnLTEvc3JjL2xpYmNydW4vc2VjY29tcF9ub3RpZnku Yy8/aGw9MTY2I0wxNjYKd2hpY2ggaXMgdXNpbmcgZXBvbGxfd2FpdCgpOgpodHRwczovL3NvdXJj ZXMuZGViaWFuLm9yZy9zcmMvY3J1bi8wLjE1K2Rmc2ctMS9zcmMvbGliY3J1bi9jb250YWluZXIu Yy8/aGw9MTMyNiNMMTMyNgoKSSBleHBlY3QgTFhDIGlzIHVzaW5nIGl0LiA6KQoKTGV0J3MgY2hh bmdlIGl0IEFTQVAhIDspCgotS2VlcwoKPiAKPiBJIGd1ZXNzIHRoaXMgaXMgYSBuaWNlIHBvaW50 IGluIGZhdm9yIG9mIE1pY2hhZWwncyB1c3VhbCBjb21wbGFpbnQKPiB0aGF0IGlmIHRoZXJlIGFy ZSBubyBtYW4gcGFnZXMgZm9yIGEgZmVhdHVyZSBieSB0aGUgdGltZSB0aGUgZmVhdHVyZQo+IGxh bmRzIHVwc3RyZWFtLCB0aGVyZSdzIGEgaGlnaGVyIGNoYW5jZSB0aGF0IHRoZSBVQVBJIHdpbGwg c3Vjawo+IGZvcmV2ZXIuLi4KPiAKPiAKPiAKPiBkaWZmIC0tZ2l0IGEva2VybmVsL3NlY2NvbXAu YyBiL2tlcm5lbC9zZWNjb21wLmMKPiBpbmRleCA2NzZkNGFmNjIxMDMuLmYwZjRjNjhlMGJjNiAx MDA2NDQKPiAtLS0gYS9rZXJuZWwvc2VjY29tcC5jCj4gKysrIGIva2VybmVsL3NlY2NvbXAuYwo+ IEBAIC0xMzgsNyArMTM4LDYgQEAgc3RydWN0IHNlY2NvbXBfa2FkZGZkIHsKPiAgICogQG5vdGlm aWNhdGlvbnM6IEEgbGlzdCBvZiBzdHJ1Y3Qgc2VjY29tcF9rbm90aWYgZWxlbWVudHMuCj4gICAq Lwo+ICBzdHJ1Y3Qgbm90aWZpY2F0aW9uIHsKPiAtICAgICAgIHN0cnVjdCBzZW1hcGhvcmUgcmVx dWVzdDsKPiAgICAgICAgIHU2NCBuZXh0X2lkOwo+ICAgICAgICAgc3RydWN0IGxpc3RfaGVhZCBu b3RpZmljYXRpb25zOwo+ICB9Owo+IEBAIC04NTksNyArODU4LDYgQEAgc3RhdGljIGludCBzZWNj b21wX2RvX3VzZXJfbm90aWZpY2F0aW9uKGludCB0aGlzX3N5c2NhbGwsCj4gICAgICAgICBsaXN0 X2FkZCgmbi5saXN0LCAmbWF0Y2gtPm5vdGlmLT5ub3RpZmljYXRpb25zKTsKPiAgICAgICAgIElO SVRfTElTVF9IRUFEKCZuLmFkZGZkKTsKPiAKPiAtICAgICAgIHVwKCZtYXRjaC0+bm90aWYtPnJl cXVlc3QpOwo+ICAgICAgICAgd2FrZV91cF9wb2xsKCZtYXRjaC0+d3FoLCBFUE9MTElOIHwgRVBP TExSRE5PUk0pOwo+ICAgICAgICAgbXV0ZXhfdW5sb2NrKCZtYXRjaC0+bm90aWZ5X2xvY2spOwo+ IAo+IEBAIC0xMTc1LDkgKzExNzMsMTAgQEAgZmluZF9ub3RpZmljYXRpb24oc3RydWN0IHNlY2Nv bXBfZmlsdGVyICpmaWx0ZXIsIHU2NCBpZCkKPiAKPiAKPiAgc3RhdGljIGxvbmcgc2VjY29tcF9u b3RpZnlfcmVjdihzdHJ1Y3Qgc2VjY29tcF9maWx0ZXIgKmZpbHRlciwKPiAtICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHZvaWQgX191c2VyICpidWYpCj4gKyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB2b2lkIF9fdXNlciAqYnVmLCBib29sIGJsb2NraW5nKQo+ICB7Cj4gICAg ICAgICBzdHJ1Y3Qgc2VjY29tcF9rbm90aWYgKmtub3RpZiA9IE5VTEwsICpjdXI7Cj4gKyAgICAg ICBERUNMQVJFX1dBSVRRVUVVRSh3YWl0LCBjdXJyZW50KTsKPiAgICAgICAgIHN0cnVjdCBzZWNj b21wX25vdGlmIHVub3RpZjsKPiAgICAgICAgIHNzaXplX3QgcmV0Owo+IAo+IEBAIC0xMTkwLDEx ICsxMTg5LDkgQEAgc3RhdGljIGxvbmcgc2VjY29tcF9ub3RpZnlfcmVjdihzdHJ1Y3QKPiBzZWNj b21wX2ZpbHRlciAqZmlsdGVyLAo+IAo+ICAgICAgICAgbWVtc2V0KCZ1bm90aWYsIDAsIHNpemVv Zih1bm90aWYpKTsKPiAKPiAtICAgICAgIHJldCA9IGRvd25faW50ZXJydXB0aWJsZSgmZmlsdGVy LT5ub3RpZi0+cmVxdWVzdCk7Cj4gLSAgICAgICBpZiAocmV0IDwgMCkKPiAtICAgICAgICAgICAg ICAgcmV0dXJuIHJldDsKPiAtCj4gICAgICAgICBtdXRleF9sb2NrKCZmaWx0ZXItPm5vdGlmeV9s b2NrKTsKPiArCj4gK3JldHJ5Ogo+ICAgICAgICAgbGlzdF9mb3JfZWFjaF9lbnRyeShjdXIsICZm aWx0ZXItPm5vdGlmLT5ub3RpZmljYXRpb25zLCBsaXN0KSB7Cj4gICAgICAgICAgICAgICAgIGlm IChjdXItPnN0YXRlID09IFNFQ0NPTVBfTk9USUZZX0lOSVQpIHsKPiAgICAgICAgICAgICAgICAg ICAgICAgICBrbm90aWYgPSBjdXI7Cj4gQEAgLTEyMDIsMTQgKzExOTksMzIgQEAgc3RhdGljIGxv bmcgc2VjY29tcF9ub3RpZnlfcmVjdihzdHJ1Y3QKPiBzZWNjb21wX2ZpbHRlciAqZmlsdGVyLAo+ ICAgICAgICAgICAgICAgICB9Cj4gICAgICAgICB9Cj4gCj4gLSAgICAgICAvKgo+IC0gICAgICAg ICogSWYgd2UgZGlkbid0IGZpbmQgYSBub3RpZmljYXRpb24sIGl0IGNvdWxkIGJlIHRoYXQgdGhl IHRhc2sgd2FzCj4gLSAgICAgICAgKiBpbnRlcnJ1cHRlZCBieSBhIGZhdGFsIHNpZ25hbCBiZXR3 ZWVuIHRoZSB0aW1lIHdlIHdlcmUgd29rZW4gYW5kCj4gLSAgICAgICAgKiB3aGVuIHdlIHdlcmUg YWJsZSB0byBhY3F1aXJlIHRoZSBydyBsb2NrLgo+IC0gICAgICAgICovCj4gICAgICAgICBpZiAo IWtub3RpZikgewo+IC0gICAgICAgICAgICAgICByZXQgPSAtRU5PRU5UOwo+IC0gICAgICAgICAg ICAgICBnb3RvIG91dDsKPiArICAgICAgICAgICAgICAgLyogVGhpcyBoYXMgdG8gaGFwcGVuIGJl Zm9yZSBjaGVja2luZyAmZmlsdGVyLT51c2Vycy4gKi8KPiArICAgICAgICAgICAgICAgcHJlcGFy ZV90b193YWl0KCZmaWx0ZXItPndxaCwgJndhaXQsIFRBU0tfSU5URVJSVVBUSUJMRSk7Cj4gKwo+ ICsgICAgICAgICAgICAgICAvKgo+ICsgICAgICAgICAgICAgICAgKiBJZiBhbGwgdXNlcnMgb2Yg dGhlIGZpbHRlciBhcmUgZ29uZSwgdGhyb3cgYW4gZXJyb3IgaW5zdGVhZAo+ICsgICAgICAgICAg ICAgICAgKiBvZiBwb2ludGxlc3NseSBjb250aW51aW5nIHRvIGJsb2NrLgo+ICsgICAgICAgICAg ICAgICAgKi8KPiArICAgICAgICAgICAgICAgaWYgKHJlZmNvdW50X3JlYWQoJmZpbHRlci0+dXNl cnMpID09IDApIHsKPiArICAgICAgICAgICAgICAgICAgICAgICByZXQgPSAtRU5PVENPTjsKPiAr ICAgICAgICAgICAgICAgICAgICAgICBnb3RvIG91dDsKPiArICAgICAgICAgICAgICAgfQo+ICsg ICAgICAgICAgICAgICBpZiAoYmxvY2tpbmcpIHsKPiArICAgICAgICAgICAgICAgICAgICAgICAv KiBObyBub3RpZmljYXRpb25zIHBlbmRpbmcgLSB3YWl0IGZvciBvbmUsCj4gdGhlbiByZXRyeS4g Ki8KPiArICAgICAgICAgICAgICAgICAgICAgICBtdXRleF91bmxvY2soJmZpbHRlci0+bm90aWZ5 X2xvY2spOwo+ICsgICAgICAgICAgICAgICAgICAgICAgIHNjaGVkdWxlKCk7Cj4gKyAgICAgICAg ICAgICAgICAgICAgICAgbXV0ZXhfbG9jaygmZmlsdGVyLT5ub3RpZnlfbG9jayk7Cj4gKyAgICAg ICAgICAgICAgICAgICAgICAgaWYgKHNpZ25hbF9wZW5kaW5nKGN1cnJlbnQpKSB7Cj4gKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICByZXQgPSAtRUlOVFI7Cj4gKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBnb3RvIG91dDsKPiArICAgICAgICAgICAgICAgICAgICAgICB9Cj4g KyAgICAgICAgICAgICAgICAgICAgICAgZ290byByZXRyeTsKPiArICAgICAgICAgICAgICAgfSBl bHNlIHsKPiArICAgICAgICAgICAgICAgICAgICAgICByZXQgPSAtRU5PRU5UOwo+ICsgICAgICAg ICAgICAgICAgICAgICAgIGdvdG8gb3V0Owo+ICsgICAgICAgICAgICAgICB9Cj4gICAgICAgICB9 Cj4gCj4gICAgICAgICB1bm90aWYuaWQgPSBrbm90aWYtPmlkOwo+IEBAIC0xMjIwLDYgKzEyMzUs NyBAQCBzdGF0aWMgbG9uZyBzZWNjb21wX25vdGlmeV9yZWN2KHN0cnVjdAo+IHNlY2NvbXBfZmls dGVyICpmaWx0ZXIsCj4gICAgICAgICB3YWtlX3VwX3BvbGwoJmZpbHRlci0+d3FoLCBFUE9MTE9V VCB8IEVQT0xMV1JOT1JNKTsKPiAgICAgICAgIHJldCA9IDA7Cj4gIG91dDoKPiArICAgICAgIGZp bmlzaF93YWl0KCZmaWx0ZXItPndxaCwgJndhaXQpOwo+ICAgICAgICAgbXV0ZXhfdW5sb2NrKCZm aWx0ZXItPm5vdGlmeV9sb2NrKTsKPiAKPiAgICAgICAgIGlmIChyZXQgPT0gMCAmJiBjb3B5X3Rv X3VzZXIoYnVmLCAmdW5vdGlmLCBzaXplb2YodW5vdGlmKSkpIHsKPiBAQCAtMTIzMywxMCArMTI0 OSw4IEBAIHN0YXRpYyBsb25nIHNlY2NvbXBfbm90aWZ5X3JlY3Yoc3RydWN0Cj4gc2VjY29tcF9m aWx0ZXIgKmZpbHRlciwKPiAgICAgICAgICAgICAgICAgICovCj4gICAgICAgICAgICAgICAgIG11 dGV4X2xvY2soJmZpbHRlci0+bm90aWZ5X2xvY2spOwo+ICAgICAgICAgICAgICAgICBrbm90aWYg PSBmaW5kX25vdGlmaWNhdGlvbihmaWx0ZXIsIHVub3RpZi5pZCk7Cj4gLSAgICAgICAgICAgICAg IGlmIChrbm90aWYpIHsKPiArICAgICAgICAgICAgICAgaWYgKGtub3RpZikKPiAgICAgICAgICAg ICAgICAgICAgICAgICBrbm90aWYtPnN0YXRlID0gU0VDQ09NUF9OT1RJRllfSU5JVDsKPiAtICAg ICAgICAgICAgICAgICAgICAgICB1cCgmZmlsdGVyLT5ub3RpZi0+cmVxdWVzdCk7Cj4gLSAgICAg ICAgICAgICAgIH0KPiAgICAgICAgICAgICAgICAgbXV0ZXhfdW5sb2NrKCZmaWx0ZXItPm5vdGlm eV9sb2NrKTsKPiAgICAgICAgIH0KPiAKPiBAQCAtMTQxMiwxMSArMTQyNiwxMiBAQCBzdGF0aWMg bG9uZyBzZWNjb21wX25vdGlmeV9pb2N0bChzdHJ1Y3QgZmlsZQo+ICpmaWxlLCB1bnNpZ25lZCBp bnQgY21kLAo+ICB7Cj4gICAgICAgICBzdHJ1Y3Qgc2VjY29tcF9maWx0ZXIgKmZpbHRlciA9IGZp bGUtPnByaXZhdGVfZGF0YTsKPiAgICAgICAgIHZvaWQgX191c2VyICpidWYgPSAodm9pZCBfX3Vz ZXIgKilhcmc7Cj4gKyAgICAgICBib29sIGJsb2NraW5nID0gIShmaWxlLT5mX2ZsYWdzICYgT19O T05CTE9DSyk7Cj4gCj4gICAgICAgICAvKiBGaXhlZC1zaXplIGlvY3RscyAqLwo+ICAgICAgICAg c3dpdGNoIChjbWQpIHsKPiAgICAgICAgIGNhc2UgU0VDQ09NUF9JT0NUTF9OT1RJRl9SRUNWOgo+ IC0gICAgICAgICAgICAgICByZXR1cm4gc2VjY29tcF9ub3RpZnlfcmVjdihmaWx0ZXIsIGJ1Zik7 Cj4gKyAgICAgICAgICAgICAgIHJldHVybiBzZWNjb21wX25vdGlmeV9yZWN2KGZpbHRlciwgYnVm LCBibG9ja2luZyk7Cj4gICAgICAgICBjYXNlIFNFQ0NPTVBfSU9DVExfTk9USUZfU0VORDoKPiAg ICAgICAgICAgICAgICAgcmV0dXJuIHNlY2NvbXBfbm90aWZ5X3NlbmQoZmlsdGVyLCBidWYpOwo+ ICAgICAgICAgY2FzZSBTRUNDT01QX0lPQ1RMX05PVElGX0lEX1ZBTElEX1dST05HX0RJUjoKPiBA QCAtMTQ4NSw3ICsxNTAwLDYgQEAgc3RhdGljIHN0cnVjdCBmaWxlICppbml0X2xpc3RlbmVyKHN0 cnVjdAo+IHNlY2NvbXBfZmlsdGVyICpmaWx0ZXIpCj4gICAgICAgICBpZiAoIWZpbHRlci0+bm90 aWYpCj4gICAgICAgICAgICAgICAgIGdvdG8gb3V0Owo+IAo+IC0gICAgICAgc2VtYV9pbml0KCZm aWx0ZXItPm5vdGlmLT5yZXF1ZXN0LCAwKTsKPiAgICAgICAgIGZpbHRlci0+bm90aWYtPm5leHRf aWQgPSBnZXRfcmFuZG9tX3U2NCgpOwo+ICAgICAgICAgSU5JVF9MSVNUX0hFQUQoJmZpbHRlci0+ bm90aWYtPm5vdGlmaWNhdGlvbnMpOwoKLS0gCktlZXMgQ29vawpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwpDb250YWluZXJzIG1haWxpbmcgbGlzdApDb250 YWluZXJzQGxpc3RzLmxpbnV4LWZvdW5kYXRpb24ub3JnCmh0dHBzOi8vbGlzdHMubGludXhmb3Vu ZGF0aW9uLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NvbnRhaW5lcnM=