From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41697C433EF for ; Wed, 15 Dec 2021 06:49:36 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S240137AbhLOGtf (ORCPT ); Wed, 15 Dec 2021 01:49:35 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:57996 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234590AbhLOGtf (ORCPT ); Wed, 15 Dec 2021 01:49:35 -0500 Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1A0E5C06173E for ; Tue, 14 Dec 2021 22:49:35 -0800 (PST) Received: by mail-wr1-x433.google.com with SMTP id u17so36400731wrt.3 for ; Tue, 14 Dec 2021 22:49:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=d1ToojkIgklMB+4yJ7wavNNpDv07oHI9Uz3VmK4pBHA=; b=pWt085OoLtnHGEYfbyD38ZuZCPBCdpxa3JNzoRKz7r+1W64h5LGIRDL+cY+vL1Xxza mQfdu1EVE8D5nMBc8N56NeWgrSVYzCboFs+QZT95uIqBY7LSda7H61oR2WPJzndr2DYf awU+w3P1JtATCh5lkzNjwqIYpazCNrvXYtAvRVEn+wLaVsCqlKH/3Wg6xJ0a5ymXhlz7 uuAGnkrHPSWclqQjiNum9E2rwLxl79bPM1fvuiudSN0OYm6YUBs8jgLLq5nodAGlxhBR Gk8gNxjkM4bmBzsa76J0KcXuLXrcg5Rh3OdWv5OhOTyl4FedkuundOdWVJTLlKLHr6bD J/WA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to; bh=d1ToojkIgklMB+4yJ7wavNNpDv07oHI9Uz3VmK4pBHA=; b=tEOJ/tfS8Bndrl3aHHmS3sGJsb1iLNTP97+pP6eRyT0AZt5VC8M6tb8+Hz5ZbFp7LE rV/WEDzqVI0UeZ4gJmYZCx8aAMEla6beBEk0IbCneqtELprX1M9Arameb6wjSHWDrq7c bJgm4BTlr+Q8FseJSRKE1Kj40w/vrYe13JX18vdPUwYPldPO3Z6RFPkScWn+G3A67MM/ R7rQTgaea89owiFzt3XNwBZpN4RCav0U6c8R+sUJcbJUHEJ8+suWRX8aMB7OfQRLyBKi spM08ZPgin+fC7qeEIoocZfgKB/Tv4IQfAr5kog1MHi+wz69ulpAasVf/gaYRPRV9F4J gt0g== X-Gm-Message-State: AOAM531JdKcwfYqXRylJCharXJxACJNrRdok2Qn7Eg7ln1hY4jSS37U0 atcMD4hAYrBDGvxEfJyNomnvFQ== X-Google-Smtp-Source: ABdhPJyahB3zCXmo7DIPu0LNNlK0jgC448teBE2QGy3RKNDKLdrrKJoAh7KlN5LPDkMBJ+Eh7J+5GQ== X-Received: by 2002:adf:e58e:: with SMTP id l14mr3092324wrm.518.1639550973613; Tue, 14 Dec 2021 22:49:33 -0800 (PST) Received: from google.com ([2.31.167.18]) by smtp.gmail.com with ESMTPSA id g198sm1067840wme.23.2021.12.14.22.49.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 14 Dec 2021 22:49:32 -0800 (PST) Date: Wed, 15 Dec 2021 06:49:30 +0000 From: Lee Jones To: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Vlad Yasevich , Neil Horman , Marcelo Ricardo Leitner , "David S. Miller" , Jakub Kicinski , lksctp developers , "H.P. Yarroll" , Karl Knutson , Jon Grimm , Xingang Guo , Hui Huang , Sridhar Samudrala , Daisy Chang , Ryan Layer , Kevin Gao , netdev@vger.kernel.org Subject: Re: [PATCH 2/2] sctp: hold cached endpoints to prevent possible UAF Message-ID: References: <20211214192301.1496754-1-lee.jones@linaro.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20211214192301.1496754-1-lee.jones@linaro.org> Precedence: bulk List-ID: X-Mailing-List: linux-sctp@vger.kernel.org On Tue, 14 Dec 2021, Lee Jones wrote: > The cause of the resultant dump_stack() reported below is a > dereference of a freed pointer to 'struct sctp_endpoint' in > sctp_sock_dump(). > > This race condition occurs when a transport is cached into its > associated hash table followed by an endpoint/sock migration to a new > association in sctp_assoc_migrate() prior to their subsequent use in > sctp_diag_dump() which uses sctp_for_each_transport() to walk the hash > table calling into sctp_sock_dump() where the dereference occurs. > > BUG: KASAN: use-after-free in sctp_sock_dump+0xa8/0x438 [sctp_diag] > Call trace: > dump_backtrace+0x0/0x2dc > show_stack+0x20/0x2c > dump_stack+0x120/0x144 > print_address_description+0x80/0x2f4 > __kasan_report+0x174/0x194 > kasan_report+0x10/0x18 > __asan_load8+0x84/0x8c > sctp_sock_dump+0xa8/0x438 [sctp_diag] > sctp_for_each_transport+0x1e0/0x26c [sctp] > sctp_diag_dump+0x180/0x1f0 [sctp_diag] > inet_diag_dump+0x12c/0x168 > netlink_dump+0x24c/0x5b8 > __netlink_dump_start+0x274/0x2a8 > inet_diag_handler_cmd+0x224/0x274 > sock_diag_rcv_msg+0x21c/0x230 > netlink_rcv_skb+0xe0/0x1bc > sock_diag_rcv+0x34/0x48 > netlink_unicast+0x3b4/0x430 > netlink_sendmsg+0x4f0/0x574 > sock_write_iter+0x18c/0x1f0 > do_iter_readv_writev+0x230/0x2a8 > do_iter_write+0xc8/0x2b4 > vfs_writev+0xf8/0x184 > do_writev+0xb0/0x1a8 > __arm64_sys_writev+0x4c/0x5c > el0_svc_common+0x118/0x250 > el0_svc_handler+0x3c/0x9c > el0_svc+0x8/0xc > > To prevent this from happening we need to take a references to the > to-be-used/dereferenced 'struct sock' and 'struct sctp_endpoint's > until such a time when we know it can be safely released. > > When KASAN is not enabled, a similar, but slightly different NULL > pointer derefernce crash occurs later along the thread of execution in > inet_sctp_diag_fill() this time. > > Cc: Vlad Yasevich > Cc: Neil Horman > Cc: Marcelo Ricardo Leitner > Cc: "David S. Miller" > Cc: Jakub Kicinski > Cc: lksctp developers > Cc: "H.P. Yarroll" > Cc: Karl Knutson > Cc: Jon Grimm > Cc: Xingang Guo > Cc: Hui Huang > Cc: Sridhar Samudrala > Cc: Daisy Chang > Cc: Ryan Layer > Cc: Kevin Gao > Cc: linux-sctp@vger.kernel.org > Cc: netdev@vger.kernel.org > Signed-off-by: Lee Jones > --- > net/sctp/diag.c | 4 ++++ > 1 file changed, 4 insertions(+) Ignore this one. For some reason 1/2 didn't send. Submitted a RESEND of the set. -- Lee Jones [李琼斯] Senior Technical Lead - Developer Services Linaro.org │ Open source software for Arm SoCs Follow Linaro: Facebook | Twitter | Blog From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2A3F6C433F5 for ; Wed, 15 Dec 2021 06:59:18 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References: Message-ID:Subject:To:From:Date:Reply-To:Cc:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=KSVlXtuFDT8NqjpL2oRYVWEfVlZW1Sj2n2QNSj4ll+o=; b=EPgqUFCT/rVzd5 sAafAnIEZnn9QXe6thYBdTRmL/VJqT25n4jsg5kyp60veL+c94fRC8bAwAr7hJ9zi1j3GqI+RJyJ0 hF3okb8qawlzJ1HNnp+Ixqt57cGIJH56kjS9+nydK7BEg9gGToaOVNsm2FX1uQPhDg5mrZbvnWw2a mz9vNHbT54yHzl+9smYiH6bfMoW9oNqBRLfuMTATJcNJXP4vHvNW2Z0yobY7vjL4bnFe4mMAewqNy zy5QDKYnJOs78b7dVheIjuaLLxOBRtVNynlHu/J/wzAsw/ExLFjOD7hyVOES9rb6L54D+CAa4TAlb YuE2AGcw5RFa8Lhei1mA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.94.2 #2 (Red Hat Linux)) id 1mxODv-00H1sD-5S; Wed, 15 Dec 2021 06:57:11 +0000 Received: from mail-wr1-x42d.google.com ([2a00:1450:4864:20::42d]) by bombadil.infradead.org with esmtps (Exim 4.94.2 #2 (Red Hat Linux)) id 1mxO6Z-00GyxN-KB for linux-arm-kernel@lists.infradead.org; Wed, 15 Dec 2021 06:49:38 +0000 Received: by mail-wr1-x42d.google.com with SMTP id v11so36331512wrw.10 for ; Tue, 14 Dec 2021 22:49:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=d1ToojkIgklMB+4yJ7wavNNpDv07oHI9Uz3VmK4pBHA=; b=pWt085OoLtnHGEYfbyD38ZuZCPBCdpxa3JNzoRKz7r+1W64h5LGIRDL+cY+vL1Xxza mQfdu1EVE8D5nMBc8N56NeWgrSVYzCboFs+QZT95uIqBY7LSda7H61oR2WPJzndr2DYf awU+w3P1JtATCh5lkzNjwqIYpazCNrvXYtAvRVEn+wLaVsCqlKH/3Wg6xJ0a5ymXhlz7 uuAGnkrHPSWclqQjiNum9E2rwLxl79bPM1fvuiudSN0OYm6YUBs8jgLLq5nodAGlxhBR Gk8gNxjkM4bmBzsa76J0KcXuLXrcg5Rh3OdWv5OhOTyl4FedkuundOdWVJTLlKLHr6bD J/WA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to; bh=d1ToojkIgklMB+4yJ7wavNNpDv07oHI9Uz3VmK4pBHA=; b=ek9vgvqB+271e12jfC66uOENXSPFssUjii0yO6z8e64nqHjc0t9nmJ0KcTNjIC5qjh InQ60bUkGlnuogfCUlxipsUtExKF/JsescQEi9zwf38TxEOsF69bV/NkFnssQ2TImiPE 0u2rewdl0yFFgZVXts7E6jZFN0mjI37trTR4vHsBrKxV6y+YLWW1aa1CXoFom51L1dPM RntpFoe9CTfGzHQc8LKgkT9F5lGuCwXWGFancYOsUvi5P65meb3LcYtFYfpWC/rI0wJj QAHqnnxTe1mPxJU0jG4hUltDbR17XenFWB83enuwU8h3kHP4km+f+gmr6jpWbRsrXeZk F5/Q== X-Gm-Message-State: AOAM53060/q8IR5gbDe6oOpNlA0HnfinQeHdewANnPFENQ6SnQJWgeEm Wng0ajFFjVyr67FK2oUC3ZlnmdigxF9LNw== X-Google-Smtp-Source: ABdhPJyahB3zCXmo7DIPu0LNNlK0jgC448teBE2QGy3RKNDKLdrrKJoAh7KlN5LPDkMBJ+Eh7J+5GQ== X-Received: by 2002:adf:e58e:: with SMTP id l14mr3092324wrm.518.1639550973613; Tue, 14 Dec 2021 22:49:33 -0800 (PST) Received: from google.com ([2.31.167.18]) by smtp.gmail.com with ESMTPSA id g198sm1067840wme.23.2021.12.14.22.49.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 14 Dec 2021 22:49:32 -0800 (PST) Date: Wed, 15 Dec 2021 06:49:30 +0000 From: Lee Jones To: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Vlad Yasevich , Neil Horman , Marcelo Ricardo Leitner , "David S. Miller" , Jakub Kicinski , lksctp developers , "H.P. Yarroll" , Karl Knutson , Jon Grimm , Xingang Guo , Hui Huang , Sridhar Samudrala , Daisy Chang , Ryan Layer , Kevin Gao , netdev@vger.kernel.org Subject: Re: [PATCH 2/2] sctp: hold cached endpoints to prevent possible UAF Message-ID: References: <20211214192301.1496754-1-lee.jones@linaro.org> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <20211214192301.1496754-1-lee.jones@linaro.org> X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20211214_224935_827808_860C3747 X-CRM114-Status: GOOD ( 18.17 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gVHVlLCAxNCBEZWMgMjAyMSwgTGVlIEpvbmVzIHdyb3RlOgoKPiBUaGUgY2F1c2Ugb2YgdGhl IHJlc3VsdGFudCBkdW1wX3N0YWNrKCkgcmVwb3J0ZWQgYmVsb3cgaXMgYQo+IGRlcmVmZXJlbmNl IG9mIGEgZnJlZWQgcG9pbnRlciB0byAnc3RydWN0IHNjdHBfZW5kcG9pbnQnIGluCj4gc2N0cF9z b2NrX2R1bXAoKS4KPiAKPiBUaGlzIHJhY2UgY29uZGl0aW9uIG9jY3VycyB3aGVuIGEgdHJhbnNw b3J0IGlzIGNhY2hlZCBpbnRvIGl0cwo+IGFzc29jaWF0ZWQgaGFzaCB0YWJsZSBmb2xsb3dlZCBi eSBhbiBlbmRwb2ludC9zb2NrIG1pZ3JhdGlvbiB0byBhIG5ldwo+IGFzc29jaWF0aW9uIGluIHNj dHBfYXNzb2NfbWlncmF0ZSgpIHByaW9yIHRvIHRoZWlyIHN1YnNlcXVlbnQgdXNlIGluCj4gc2N0 cF9kaWFnX2R1bXAoKSB3aGljaCB1c2VzIHNjdHBfZm9yX2VhY2hfdHJhbnNwb3J0KCkgdG8gd2Fs ayB0aGUgaGFzaAo+IHRhYmxlIGNhbGxpbmcgaW50byBzY3RwX3NvY2tfZHVtcCgpIHdoZXJlIHRo ZSBkZXJlZmVyZW5jZSBvY2N1cnMuCj4gCj4gICBCVUc6IEtBU0FOOiB1c2UtYWZ0ZXItZnJlZSBp biBzY3RwX3NvY2tfZHVtcCsweGE4LzB4NDM4IFtzY3RwX2RpYWddCj4gICBDYWxsIHRyYWNlOgo+ ICAgIGR1bXBfYmFja3RyYWNlKzB4MC8weDJkYwo+ICAgIHNob3dfc3RhY2srMHgyMC8weDJjCj4g ICAgZHVtcF9zdGFjaysweDEyMC8weDE0NAo+ICAgIHByaW50X2FkZHJlc3NfZGVzY3JpcHRpb24r MHg4MC8weDJmNAo+ICAgIF9fa2FzYW5fcmVwb3J0KzB4MTc0LzB4MTk0Cj4gICAga2FzYW5fcmVw b3J0KzB4MTAvMHgxOAo+ICAgIF9fYXNhbl9sb2FkOCsweDg0LzB4OGMKPiAgICBzY3RwX3NvY2tf ZHVtcCsweGE4LzB4NDM4IFtzY3RwX2RpYWddCj4gICAgc2N0cF9mb3JfZWFjaF90cmFuc3BvcnQr MHgxZTAvMHgyNmMgW3NjdHBdCj4gICAgc2N0cF9kaWFnX2R1bXArMHgxODAvMHgxZjAgW3NjdHBf ZGlhZ10KPiAgICBpbmV0X2RpYWdfZHVtcCsweDEyYy8weDE2OAo+ICAgIG5ldGxpbmtfZHVtcCsw eDI0Yy8weDViOAo+ICAgIF9fbmV0bGlua19kdW1wX3N0YXJ0KzB4Mjc0LzB4MmE4Cj4gICAgaW5l dF9kaWFnX2hhbmRsZXJfY21kKzB4MjI0LzB4Mjc0Cj4gICAgc29ja19kaWFnX3Jjdl9tc2crMHgy MWMvMHgyMzAKPiAgICBuZXRsaW5rX3Jjdl9za2IrMHhlMC8weDFiYwo+ICAgIHNvY2tfZGlhZ19y Y3YrMHgzNC8weDQ4Cj4gICAgbmV0bGlua191bmljYXN0KzB4M2I0LzB4NDMwCj4gICAgbmV0bGlu a19zZW5kbXNnKzB4NGYwLzB4NTc0Cj4gICAgc29ja193cml0ZV9pdGVyKzB4MThjLzB4MWYwCj4g ICAgZG9faXRlcl9yZWFkdl93cml0ZXYrMHgyMzAvMHgyYTgKPiAgICBkb19pdGVyX3dyaXRlKzB4 YzgvMHgyYjQKPiAgICB2ZnNfd3JpdGV2KzB4ZjgvMHgxODQKPiAgICBkb193cml0ZXYrMHhiMC8w eDFhOAo+ICAgIF9fYXJtNjRfc3lzX3dyaXRldisweDRjLzB4NWMKPiAgICBlbDBfc3ZjX2NvbW1v bisweDExOC8weDI1MAo+ICAgIGVsMF9zdmNfaGFuZGxlcisweDNjLzB4OWMKPiAgICBlbDBfc3Zj KzB4OC8weGMKPiAKPiBUbyBwcmV2ZW50IHRoaXMgZnJvbSBoYXBwZW5pbmcgd2UgbmVlZCB0byB0 YWtlIGEgcmVmZXJlbmNlcyB0byB0aGUKPiB0by1iZS11c2VkL2RlcmVmZXJlbmNlZCAnc3RydWN0 IHNvY2snIGFuZCAnc3RydWN0IHNjdHBfZW5kcG9pbnQncwo+IHVudGlsIHN1Y2ggYSB0aW1lIHdo ZW4gd2Uga25vdyBpdCBjYW4gYmUgc2FmZWx5IHJlbGVhc2VkLgo+IAo+IFdoZW4gS0FTQU4gaXMg bm90IGVuYWJsZWQsIGEgc2ltaWxhciwgYnV0IHNsaWdodGx5IGRpZmZlcmVudCBOVUxMCj4gcG9p bnRlciBkZXJlZmVybmNlIGNyYXNoIG9jY3VycyBsYXRlciBhbG9uZyB0aGUgdGhyZWFkIG9mIGV4 ZWN1dGlvbiBpbgo+IGluZXRfc2N0cF9kaWFnX2ZpbGwoKSB0aGlzIHRpbWUuCj4gCj4gQ2M6IFZs YWQgWWFzZXZpY2ggPHZ5YXNldmljaEBnbWFpbC5jb20+Cj4gQ2M6IE5laWwgSG9ybWFuIDxuaG9y bWFuQHR1eGRyaXZlci5jb20+Cj4gQ2M6IE1hcmNlbG8gUmljYXJkbyBMZWl0bmVyIDxtYXJjZWxv LmxlaXRuZXJAZ21haWwuY29tPgo+IENjOiAiRGF2aWQgUy4gTWlsbGVyIiA8ZGF2ZW1AZGF2ZW1s b2Z0Lm5ldD4KPiBDYzogSmFrdWIgS2ljaW5za2kgPGt1YmFAa2VybmVsLm9yZz4KPiBDYzogbGtz Y3RwIGRldmVsb3BlcnMgPGxpbnV4LXNjdHBAdmdlci5rZXJuZWwub3JnPgo+IENjOiAiSC5QLiBZ YXJyb2xsIiA8cGlnZ3lAYWNtLm9yZz4KPiBDYzogS2FybCBLbnV0c29uIDxrYXJsQGF0aGVuYS5j aGljYWdvLmlsLnVzPgo+IENjOiBKb24gR3JpbW0gPGpncmltbUB1cy5pYm0uY29tPgo+IENjOiBY aW5nYW5nIEd1byA8eGluZ2FuZy5ndW9AaW50ZWwuY29tPgo+IENjOiBIdWkgSHVhbmcgPGh1aS5o dWFuZ0Bub2tpYS5jb20+Cj4gQ2M6IFNyaWRoYXIgU2FtdWRyYWxhIDxzcmlAdXMuaWJtLmNvbT4K PiBDYzogRGFpc3kgQ2hhbmcgPGRhaXN5Y0B1cy5pYm0uY29tPgo+IENjOiBSeWFuIExheWVyIDxy bWxheWVyQHVzLmlibS5jb20+Cj4gQ2M6IEtldmluIEdhbyA8a2V2aW4uZ2FvQGludGVsLmNvbT4K PiBDYzogbGludXgtc2N0cEB2Z2VyLmtlcm5lbC5vcmcKPiBDYzogbmV0ZGV2QHZnZXIua2VybmVs Lm9yZwo+IFNpZ25lZC1vZmYtYnk6IExlZSBKb25lcyA8bGVlLmpvbmVzQGxpbmFyby5vcmc+Cj4g LS0tCj4gIG5ldC9zY3RwL2RpYWcuYyB8IDQgKysrKwo+ICAxIGZpbGUgY2hhbmdlZCwgNCBpbnNl cnRpb25zKCspCgpJZ25vcmUgdGhpcyBvbmUuICBGb3Igc29tZSByZWFzb24gMS8yIGRpZG4ndCBz ZW5kLgoKU3VibWl0dGVkIGEgUkVTRU5EIG9mIHRoZSBzZXQuCgotLSAKTGVlIEpvbmVzIFvmnY7n kLzmlq9dClNlbmlvciBUZWNobmljYWwgTGVhZCAtIERldmVsb3BlciBTZXJ2aWNlcwpMaW5hcm8u b3JnIOKUgiBPcGVuIHNvdXJjZSBzb2Z0d2FyZSBmb3IgQXJtIFNvQ3MKRm9sbG93IExpbmFybzog RmFjZWJvb2sgfCBUd2l0dGVyIHwgQmxvZwoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18KbGludXgtYXJtLWtlcm5lbCBtYWlsaW5nIGxpc3QKbGludXgtYXJt LWtlcm5lbEBsaXN0cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3JnL21h aWxtYW4vbGlzdGluZm8vbGludXgtYXJtLWtlcm5lbAo=