From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0D76EE7E62F for ; Tue, 26 Sep 2023 12:12:08 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S234505AbjIZMMM (ORCPT ); Tue, 26 Sep 2023 08:12:12 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:60078 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234540AbjIZMML (ORCPT ); Tue, 26 Sep 2023 08:12:11 -0400 Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 60B31124; Tue, 26 Sep 2023 05:12:04 -0700 (PDT) Received: by smtp.kernel.org (Postfix) with ESMTPSA id EC5A4C433C7; Tue, 26 Sep 2023 12:12:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1695730323; bh=4gshwzCPEkOGDm7Y/2pNlO1HGa6D9u9xDYT4Qd0MLHE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=anB5NgnuK8gXT1e0KMSbPuRVF7vfyBh4Vfc3TluzpTWr0xz+7ZYENG3hcPVQh1Dnc kl0+PnlgFhH+6WpEtywqoMRMXwcvVuU8KmkqBNb6s5DaBvTpyM2mvJH5WCm+2oLob5 /RnMy9N4/f8H017Q2A3t76jYDtQtUShIXSRvjXZFhByxAfdb+NSV5xrdgtxzjVmVLD lNu3AzYPotfql5EGb/Ffzr/15zFT+zgr21ygVLxZKw5Dssgg2tJaCLsqwKzHnVljka HSIBAM5lEU1rVwWAdxJN4rJ3hvTK5MkU6R7IfjpSw5ouLFJVDNOztwusOrAWrfvg1g Y1DlI1FdYtJIQ== Date: Tue, 26 Sep 2023 20:11:52 +0800 From: Peter Chen To: =?utf-8?B?TWljaGHFgiBNaXJvc8WCYXc=?= Cc: Greg Kroah-Hartman , Thierry Reding , Dmitry Osipenko , Peter Geis , Jonathan Hunter , linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-tegra@vger.kernel.org Subject: Re: [PATCH 1/3] usb: chipidea: Fix DMA overwrite for Tegra Message-ID: <20230926121152.GA2074070@nchen-desktop> References: <20230925114522.GA2070044@nchen-desktop> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-tegra@vger.kernel.org On 23-09-26 01:53:39, Michał Mirosław wrote: > On Mon, Sep 25, 2023 at 07:45:22PM +0800, Peter Chen wrote: > > On 23-09-23 21:41:55, Michał Mirosław wrote: > > > Tegra USB controllers seem to issue DMA in doubleword-sized chunks and thus > > > may write past the buffer provided. This is detected by SLUB: > > > > > > ============================================================================= > > > BUG kmalloc-64 (Tainted: G B ): kmalloc Redzone overwritten > > > ----------------------------------------------------------------------------- > > > > > > 0x8555cd02-0x8555cd03 @offset=3330. First byte 0x0 instead of 0xcc > > > Allocated in usb_get_status+0x2b/0xac age=1 cpu=3 pid=41 > > > __kmem_cache_alloc_node+0x12f/0x1e4 > > > __kmalloc+0x33/0x8c > > > usb_get_status+0x2b/0xac > > > hub_probe+0x5e9/0xcec > > > usb_probe_interface+0xbf/0x21c > > > really_probe+0xa5/0x2c4 > > > __driver_probe_device+0x75/0x174 > > > driver_probe_device+0x31/0x94 > > > __device_attach_driver+0x65/0xc0 > > > bus_for_each_drv+0x4b/0x74 > > > __device_attach+0x69/0x120 > > > bus_probe_device+0x65/0x6c > > > device_add+0x48b/0x5f8 > > > usb_set_configuration+0x37b/0x6b4 > > > usb_generic_driver_probe+0x37/0x68 > > > usb_probe_device+0x35/0xb4 > > > Slab 0xbf622b80 objects=21 used=18 fp=0x8555cdc0 flags=0x800(slab|zone=0) > > > Object 0x8555cd00 @offset=3328 fp=0x00000000 > > > > > > Redzone 8555ccc0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Redzone 8555ccd0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Redzone 8555cce0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Redzone 8555ccf0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Object 8555cd00: 01 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Object 8555cd10: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Object 8555cd20: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Object 8555cd30: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ > > > Redzone 8555cd40: cc cc cc cc .... > > > Padding 8555cd74: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZ > > > CPU: 3 PID: 41 Comm: kworker/3:1 Tainted: G B 6.6.0-rc1mq-00118-g59786f827ea1 #1115 > > > Hardware name: NVIDIA Tegra SoC (Flattened Device Tree) > > > Workqueue: usb_hub_wq hub_event > > > [<8010ca28>] (unwind_backtrace) from [<801090a5>] (show_stack+0x11/0x14) > > > [<801090a5>] (show_stack) from [<805da2fb>] (dump_stack_lvl+0x4d/0x7c) > > > [<805da2fb>] (dump_stack_lvl) from [<8026464f>] (check_bytes_and_report+0xb3/0xe4) > > > [<8026464f>] (check_bytes_and_report) from [<802648e1>] (check_object+0x261/0x290) > > > [<802648e1>] (check_object) from [<802671b1>] (free_to_partial_list+0x105/0x3f8) > > > [<802671b1>] (free_to_partial_list) from [<80268613>] (__kmem_cache_free+0x103/0x128) > > > [<80268613>] (__kmem_cache_free) from [<80425a67>] (usb_get_status+0x73/0xac) > > > [<80425a67>] (usb_get_status) from [<80421b31>] (hub_probe+0x5e9/0xcec) > > > [<80421b31>] (hub_probe) from [<80428bbb>] (usb_probe_interface+0xbf/0x21c) > > > [<80428bbb>] (usb_probe_interface) from [<803ee13d>] (really_probe+0xa5/0x2c4) > > > [<803ee13d>] (really_probe) from [<803ee3d1>] (__driver_probe_device+0x75/0x174) > > > [<803ee3d1>] (__driver_probe_device) from [<803ee501>] (driver_probe_device+0x31/0x94) > > > usb 1-1: device descriptor read/8, error -71 > > > > > > Fixes: fc53d5279094 ("usb: chipidea: tegra: Support host mode") > > > Signed-off-by: Michał Mirosław > > > --- > > > drivers/usb/chipidea/host.c | 7 ++++--- > > > 1 file changed, 4 insertions(+), 3 deletions(-) > > > > > > diff --git a/drivers/usb/chipidea/host.c b/drivers/usb/chipidea/host.c > > > index 08af26b762a2..abddd39d1ff1 100644 > > > --- a/drivers/usb/chipidea/host.c > > > +++ b/drivers/usb/chipidea/host.c > > > @@ -411,12 +411,13 @@ static int ci_hdrc_alloc_dma_aligned_buffer(struct urb *urb, gfp_t mem_flags) > > > const unsigned int ci_hdrc_usb_dma_align = 32; > > > size_t kmalloc_size; > > > > > > - if (urb->num_sgs || urb->sg || urb->transfer_buffer_length == 0 || > > > - !((uintptr_t)urb->transfer_buffer & (ci_hdrc_usb_dma_align - 1))) > > > + if (urb->num_sgs || urb->sg || urb->transfer_buffer_length == 0) > > > + return 0; > > > + if (!((uintptr_t)urb->transfer_buffer & (ci_hdrc_usb_dma_align - 1)) && !(urb->transfer_buffer_length & 3)) > > > return 0; > > > > > > /* Allocate a buffer with enough padding for alignment */ > > > - kmalloc_size = urb->transfer_buffer_length + > > > + kmalloc_size = ALIGN(urb->transfer_buffer_length, 4) + > > > sizeof(struct ci_hdrc_dma_aligned_buffer) + > > > ci_hdrc_usb_dma_align - 1; > > > > > > > Would you please explain why you make these changes? > > Can you point out what's unclear in the commit message? You may appended below words to commit log, current commit log looks too simple. > This is to fix > a buffer overflow by DMA from the USB controller as it seems to write > data 32-bit word at a time. What the patch does is extend the workaround > code to account for the extra room needed at the tail of the buffer. > > Best Regards > Michał Mirosław -- Thanks, Peter Chen From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id E0D02E7E62E for ; Tue, 26 Sep 2023 12:12:37 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References: Message-ID:Subject:Cc:To:From:Date:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=wJX6pAoz5IJkBvXl9L1vOMibyZBnPVNs5XVjvug8EPQ=; b=bb2i/Xk58Zrp1V QRKnO/BwhD7ztjHiWiN032RFPwD3QXHRnwiEMuBBYeXwMahpj8GebHIL1ff6jV4e2cv/goRjKZfz8 duIc7wEie5cRLSbUxrzTGRCdrsPlhlNGjRndMM+K5yXLO3DNk3WQ+LVvHXSnaVe/YZheLPrzotZO/ ucOrwYSmrElk4+siucWtrfL1bYe+UNhR/XV4P9SoDp8pX4teorMoQGQ4SkcLclKyBeFU0vOJkS+OZ UdyYORTcrN6CFrVBNhj1j+I1Kxe4atkXP5YbZXz56++pVV+dIR1IEsHN9EbZzlWpit5GZiAqDPTUb ag7zkWZM/g+5mA0cMIZA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.96 #2 (Red Hat Linux)) id 1ql6v9-00GKxM-1e; Tue, 26 Sep 2023 12:12:07 +0000 Received: from dfw.source.kernel.org ([139.178.84.217]) by bombadil.infradead.org with esmtps (Exim 4.96 #2 (Red Hat Linux)) id 1ql6v6-00GKwz-2q for linux-arm-kernel@lists.infradead.org; Tue, 26 Sep 2023 12:12:06 +0000 Received: from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58]) by dfw.source.kernel.org (Postfix) with ESMTP id EEE526144F; Tue, 26 Sep 2023 12:12:03 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id EC5A4C433C7; Tue, 26 Sep 2023 12:12:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1695730323; bh=4gshwzCPEkOGDm7Y/2pNlO1HGa6D9u9xDYT4Qd0MLHE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=anB5NgnuK8gXT1e0KMSbPuRVF7vfyBh4Vfc3TluzpTWr0xz+7ZYENG3hcPVQh1Dnc kl0+PnlgFhH+6WpEtywqoMRMXwcvVuU8KmkqBNb6s5DaBvTpyM2mvJH5WCm+2oLob5 /RnMy9N4/f8H017Q2A3t76jYDtQtUShIXSRvjXZFhByxAfdb+NSV5xrdgtxzjVmVLD lNu3AzYPotfql5EGb/Ffzr/15zFT+zgr21ygVLxZKw5Dssgg2tJaCLsqwKzHnVljka HSIBAM5lEU1rVwWAdxJN4rJ3hvTK5MkU6R7IfjpSw5ouLFJVDNOztwusOrAWrfvg1g Y1DlI1FdYtJIQ== Date: Tue, 26 Sep 2023 20:11:52 +0800 From: Peter Chen To: =?utf-8?B?TWljaGHFgiBNaXJvc8WCYXc=?= Cc: Greg Kroah-Hartman , Thierry Reding , Dmitry Osipenko , Peter Geis , Jonathan Hunter , linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-tegra@vger.kernel.org Subject: Re: [PATCH 1/3] usb: chipidea: Fix DMA overwrite for Tegra Message-ID: <20230926121152.GA2074070@nchen-desktop> References: <20230925114522.GA2070044@nchen-desktop> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20230926_051205_030606_6D13D7E6 X-CRM114-Status: GOOD ( 28.30 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gMjMtMDktMjYgMDE6NTM6MzksIE1pY2hhxYIgTWlyb3PFgmF3IHdyb3RlOgo+IE9uIE1vbiwg U2VwIDI1LCAyMDIzIGF0IDA3OjQ1OjIyUE0gKzA4MDAsIFBldGVyIENoZW4gd3JvdGU6Cj4gPiBP biAyMy0wOS0yMyAyMTo0MTo1NSwgTWljaGHFgiBNaXJvc8WCYXcgd3JvdGU6Cj4gPiA+IFRlZ3Jh IFVTQiBjb250cm9sbGVycyBzZWVtIHRvIGlzc3VlIERNQSBpbiBkb3VibGV3b3JkLXNpemVkIGNo dW5rcyBhbmQgdGh1cwo+ID4gPiBtYXkgd3JpdGUgcGFzdCB0aGUgYnVmZmVyIHByb3ZpZGVkLiBU aGlzIGlzIGRldGVjdGVkIGJ5IFNMVUI6Cj4gPiA+IAo+ID4gPiA9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQo+ID4gPiBCVUcga21hbGxvYy02NCAoVGFpbnRlZDogRyAgICBCICAgICAgICAgICAgICk6IGtt YWxsb2MgUmVkem9uZSBvdmVyd3JpdHRlbgo+ID4gPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQo+ID4g PiAKPiA+ID4gMHg4NTU1Y2QwMi0weDg1NTVjZDAzIEBvZmZzZXQ9MzMzMC4gRmlyc3QgYnl0ZSAw eDAgaW5zdGVhZCBvZiAweGNjCj4gPiA+IEFsbG9jYXRlZCBpbiB1c2JfZ2V0X3N0YXR1cysweDJi LzB4YWMgYWdlPTEgY3B1PTMgcGlkPTQxCj4gPiA+ICBfX2ttZW1fY2FjaGVfYWxsb2Nfbm9kZSsw eDEyZi8weDFlNAo+ID4gPiAgX19rbWFsbG9jKzB4MzMvMHg4Ywo+ID4gPiAgdXNiX2dldF9zdGF0 dXMrMHgyYi8weGFjCj4gPiA+ICBodWJfcHJvYmUrMHg1ZTkvMHhjZWMKPiA+ID4gIHVzYl9wcm9i ZV9pbnRlcmZhY2UrMHhiZi8weDIxYwo+ID4gPiAgcmVhbGx5X3Byb2JlKzB4YTUvMHgyYzQKPiA+ ID4gIF9fZHJpdmVyX3Byb2JlX2RldmljZSsweDc1LzB4MTc0Cj4gPiA+ICBkcml2ZXJfcHJvYmVf ZGV2aWNlKzB4MzEvMHg5NAo+ID4gPiAgX19kZXZpY2VfYXR0YWNoX2RyaXZlcisweDY1LzB4YzAK PiA+ID4gIGJ1c19mb3JfZWFjaF9kcnYrMHg0Yi8weDc0Cj4gPiA+ICBfX2RldmljZV9hdHRhY2gr MHg2OS8weDEyMAo+ID4gPiAgYnVzX3Byb2JlX2RldmljZSsweDY1LzB4NmMKPiA+ID4gIGRldmlj ZV9hZGQrMHg0OGIvMHg1ZjgKPiA+ID4gIHVzYl9zZXRfY29uZmlndXJhdGlvbisweDM3Yi8weDZi NAo+ID4gPiAgdXNiX2dlbmVyaWNfZHJpdmVyX3Byb2JlKzB4MzcvMHg2OAo+ID4gPiAgdXNiX3By b2JlX2RldmljZSsweDM1LzB4YjQKPiA+ID4gU2xhYiAweGJmNjIyYjgwIG9iamVjdHM9MjEgdXNl ZD0xOCBmcD0weDg1NTVjZGMwIGZsYWdzPTB4ODAwKHNsYWJ8em9uZT0wKQo+ID4gPiBPYmplY3Qg MHg4NTU1Y2QwMCBAb2Zmc2V0PTMzMjggZnA9MHgwMDAwMDAwMAo+ID4gPiAKPiA+ID4gUmVkem9u ZSAgODU1NWNjYzA6IGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNj IGNjICAuLi4uLi4uLi4uLi4uLi4uCj4gPiA+IFJlZHpvbmUgIDg1NTVjY2QwOiBjYyBjYyBjYyBj YyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyAgLi4uLi4uLi4uLi4uLi4uLgo+ ID4gPiBSZWR6b25lICA4NTU1Y2NlMDogY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2Mg Y2MgY2MgY2MgY2MgY2MgIC4uLi4uLi4uLi4uLi4uLi4KPiA+ID4gUmVkem9uZSAgODU1NWNjZjA6 IGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjICAuLi4uLi4u Li4uLi4uLi4uCj4gPiA+IE9iamVjdCAgIDg1NTVjZDAwOiAwMSAwMCAwMCAwMCBjYyBjYyBjYyBj YyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyAgLi4uLi4uLi4uLi4uLi4uLgo+ID4gPiBPYmplY3Qg ICA4NTU1Y2QxMDogY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2MgY2Mg Y2MgIC4uLi4uLi4uLi4uLi4uLi4KPiA+ID4gT2JqZWN0ICAgODU1NWNkMjA6IGNjIGNjIGNjIGNj IGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjIGNjICAuLi4uLi4uLi4uLi4uLi4uCj4g PiA+IE9iamVjdCAgIDg1NTVjZDMwOiBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBjYyBj YyBjYyBjYyBjYyBjYyAgLi4uLi4uLi4uLi4uLi4uLgo+ID4gPiBSZWR6b25lICA4NTU1Y2Q0MDog Y2MgY2MgY2MgY2MgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4uLi4KPiA+ ID4gUGFkZGluZyAgODU1NWNkNzQ6IDVhIDVhIDVhIDVhIDVhIDVhIDVhIDVhIDVhIDVhIDVhIDVh ICAgICAgICAgICAgICBaWlpaWlpaWlpaWloKPiA+ID4gQ1BVOiAzIFBJRDogNDEgQ29tbToga3dv cmtlci8zOjEgVGFpbnRlZDogRyAgICBCICAgICAgICAgICAgICA2LjYuMC1yYzFtcS0wMDExOC1n NTk3ODZmODI3ZWExICMxMTE1Cj4gPiA+IEhhcmR3YXJlIG5hbWU6IE5WSURJQSBUZWdyYSBTb0Mg KEZsYXR0ZW5lZCBEZXZpY2UgVHJlZSkKPiA+ID4gV29ya3F1ZXVlOiB1c2JfaHViX3dxIGh1Yl9l dmVudAo+ID4gPiBbPDgwMTBjYTI4Pl0gKHVud2luZF9iYWNrdHJhY2UpIGZyb20gWzw4MDEwOTBh NT5dIChzaG93X3N0YWNrKzB4MTEvMHgxNCkKPiA+ID4gWzw4MDEwOTBhNT5dIChzaG93X3N0YWNr KSBmcm9tIFs8ODA1ZGEyZmI+XSAoZHVtcF9zdGFja19sdmwrMHg0ZC8weDdjKQo+ID4gPiBbPDgw NWRhMmZiPl0gKGR1bXBfc3RhY2tfbHZsKSBmcm9tIFs8ODAyNjQ2NGY+XSAoY2hlY2tfYnl0ZXNf YW5kX3JlcG9ydCsweGIzLzB4ZTQpCj4gPiA+IFs8ODAyNjQ2NGY+XSAoY2hlY2tfYnl0ZXNfYW5k X3JlcG9ydCkgZnJvbSBbPDgwMjY0OGUxPl0gKGNoZWNrX29iamVjdCsweDI2MS8weDI5MCkKPiA+ ID4gWzw4MDI2NDhlMT5dIChjaGVja19vYmplY3QpIGZyb20gWzw4MDI2NzFiMT5dIChmcmVlX3Rv X3BhcnRpYWxfbGlzdCsweDEwNS8weDNmOCkKPiA+ID4gWzw4MDI2NzFiMT5dIChmcmVlX3RvX3Bh cnRpYWxfbGlzdCkgZnJvbSBbPDgwMjY4NjEzPl0gKF9fa21lbV9jYWNoZV9mcmVlKzB4MTAzLzB4 MTI4KQo+ID4gPiBbPDgwMjY4NjEzPl0gKF9fa21lbV9jYWNoZV9mcmVlKSBmcm9tIFs8ODA0MjVh Njc+XSAodXNiX2dldF9zdGF0dXMrMHg3My8weGFjKQo+ID4gPiBbPDgwNDI1YTY3Pl0gKHVzYl9n ZXRfc3RhdHVzKSBmcm9tIFs8ODA0MjFiMzE+XSAoaHViX3Byb2JlKzB4NWU5LzB4Y2VjKQo+ID4g PiBbPDgwNDIxYjMxPl0gKGh1Yl9wcm9iZSkgZnJvbSBbPDgwNDI4YmJiPl0gKHVzYl9wcm9iZV9p bnRlcmZhY2UrMHhiZi8weDIxYykKPiA+ID4gWzw4MDQyOGJiYj5dICh1c2JfcHJvYmVfaW50ZXJm YWNlKSBmcm9tIFs8ODAzZWUxM2Q+XSAocmVhbGx5X3Byb2JlKzB4YTUvMHgyYzQpCj4gPiA+IFs8 ODAzZWUxM2Q+XSAocmVhbGx5X3Byb2JlKSBmcm9tIFs8ODAzZWUzZDE+XSAoX19kcml2ZXJfcHJv YmVfZGV2aWNlKzB4NzUvMHgxNzQpCj4gPiA+IFs8ODAzZWUzZDE+XSAoX19kcml2ZXJfcHJvYmVf ZGV2aWNlKSBmcm9tIFs8ODAzZWU1MDE+XSAoZHJpdmVyX3Byb2JlX2RldmljZSsweDMxLzB4OTQp Cj4gPiA+IHVzYiAxLTE6IGRldmljZSBkZXNjcmlwdG9yIHJlYWQvOCwgZXJyb3IgLTcxCj4gPiA+ IAo+ID4gPiBGaXhlczogZmM1M2Q1Mjc5MDk0ICgidXNiOiBjaGlwaWRlYTogdGVncmE6IFN1cHBv cnQgaG9zdCBtb2RlIikKPiA+ID4gU2lnbmVkLW9mZi1ieTogTWljaGHFgiBNaXJvc8WCYXcgPG1p cnEtbGludXhAcmVyZS5xbXFtLnBsPgo+ID4gPiAtLS0KPiA+ID4gIGRyaXZlcnMvdXNiL2NoaXBp ZGVhL2hvc3QuYyB8IDcgKysrKy0tLQo+ID4gPiAgMSBmaWxlIGNoYW5nZWQsIDQgaW5zZXJ0aW9u cygrKSwgMyBkZWxldGlvbnMoLSkKPiA+ID4gCj4gPiA+IGRpZmYgLS1naXQgYS9kcml2ZXJzL3Vz Yi9jaGlwaWRlYS9ob3N0LmMgYi9kcml2ZXJzL3VzYi9jaGlwaWRlYS9ob3N0LmMKPiA+ID4gaW5k ZXggMDhhZjI2Yjc2MmEyLi5hYmRkZDM5ZDFmZjEgMTAwNjQ0Cj4gPiA+IC0tLSBhL2RyaXZlcnMv dXNiL2NoaXBpZGVhL2hvc3QuYwo+ID4gPiArKysgYi9kcml2ZXJzL3VzYi9jaGlwaWRlYS9ob3N0 LmMKPiA+ID4gQEAgLTQxMSwxMiArNDExLDEzIEBAIHN0YXRpYyBpbnQgY2lfaGRyY19hbGxvY19k bWFfYWxpZ25lZF9idWZmZXIoc3RydWN0IHVyYiAqdXJiLCBnZnBfdCBtZW1fZmxhZ3MpCj4gPiA+ ICAJY29uc3QgdW5zaWduZWQgaW50IGNpX2hkcmNfdXNiX2RtYV9hbGlnbiA9IDMyOwo+ID4gPiAg CXNpemVfdCBrbWFsbG9jX3NpemU7Cj4gPiA+ICAKPiA+ID4gLQlpZiAodXJiLT5udW1fc2dzIHx8 IHVyYi0+c2cgfHwgdXJiLT50cmFuc2Zlcl9idWZmZXJfbGVuZ3RoID09IDAgfHwKPiA+ID4gLQkg ICAgISgodWludHB0cl90KXVyYi0+dHJhbnNmZXJfYnVmZmVyICYgKGNpX2hkcmNfdXNiX2RtYV9h bGlnbiAtIDEpKSkKPiA+ID4gKwlpZiAodXJiLT5udW1fc2dzIHx8IHVyYi0+c2cgfHwgdXJiLT50 cmFuc2Zlcl9idWZmZXJfbGVuZ3RoID09IDApCj4gPiA+ICsJCXJldHVybiAwOwo+ID4gPiArCWlm ICghKCh1aW50cHRyX3QpdXJiLT50cmFuc2Zlcl9idWZmZXIgJiAoY2lfaGRyY191c2JfZG1hX2Fs aWduIC0gMSkpICYmICEodXJiLT50cmFuc2Zlcl9idWZmZXJfbGVuZ3RoICYgMykpCj4gPiA+ICAJ CXJldHVybiAwOwo+ID4gPiAgCj4gPiA+ICAJLyogQWxsb2NhdGUgYSBidWZmZXIgd2l0aCBlbm91 Z2ggcGFkZGluZyBmb3IgYWxpZ25tZW50ICovCj4gPiA+IC0Ja21hbGxvY19zaXplID0gdXJiLT50 cmFuc2Zlcl9idWZmZXJfbGVuZ3RoICsKPiA+ID4gKwlrbWFsbG9jX3NpemUgPSBBTElHTih1cmIt PnRyYW5zZmVyX2J1ZmZlcl9sZW5ndGgsIDQpICsKPiA+ID4gIAkJICAgICAgIHNpemVvZihzdHJ1 Y3QgY2lfaGRyY19kbWFfYWxpZ25lZF9idWZmZXIpICsKPiA+ID4gIAkJICAgICAgIGNpX2hkcmNf dXNiX2RtYV9hbGlnbiAtIDE7Cj4gPiA+ICAKPiA+IAo+ID4gV291bGQgeW91IHBsZWFzZSBleHBs YWluIHdoeSB5b3UgbWFrZSB0aGVzZSBjaGFuZ2VzPwo+IAo+IENhbiB5b3UgcG9pbnQgb3V0IHdo YXQncyB1bmNsZWFyIGluIHRoZSBjb21taXQgbWVzc2FnZT8KCllvdSBtYXkgYXBwZW5kZWQgYmVs b3cgd29yZHMgdG8gY29tbWl0IGxvZywgY3VycmVudCBjb21taXQgbG9nIGxvb2tzIHRvbwpzaW1w bGUuCgo+IFRoaXMgaXMgdG8gZml4Cj4gYSBidWZmZXIgb3ZlcmZsb3cgYnkgRE1BIGZyb20gdGhl IFVTQiBjb250cm9sbGVyIGFzIGl0IHNlZW1zIHRvIHdyaXRlCj4gZGF0YSAzMi1iaXQgd29yZCBh dCBhIHRpbWUuIFdoYXQgdGhlIHBhdGNoIGRvZXMgaXMgZXh0ZW5kIHRoZSB3b3JrYXJvdW5kCj4g Y29kZSB0byBhY2NvdW50IGZvciB0aGUgZXh0cmEgcm9vbSBuZWVkZWQgYXQgdGhlIHRhaWwgb2Yg dGhlIGJ1ZmZlci4KPiAKPiBCZXN0IFJlZ2FyZHMKPiBNaWNoYcWCIE1pcm9zxYJhdwoKLS0gCgpU aGFua3MsClBldGVyIENoZW4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCmxpbnV4LWFybS1rZXJuZWwgbWFpbGluZyBsaXN0CmxpbnV4LWFybS1rZXJuZWxA bGlzdHMuaW5mcmFkZWFkLm9yZwpodHRwOi8vbGlzdHMuaW5mcmFkZWFkLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2xpbnV4LWFybS1rZXJuZWwK