From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BD40C28CF6F; Wed, 1 Jul 2026 10:34:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782902051; cv=none; b=dKQcegwXNi3I0V+vJ+/frvqbyXdEN21hvH9nlHV7YlanYa3HgiqGKuVT/Q4fKbdj0wqDFoby7wZqtPjFLhbYXqw7kj11T0tkEnpzvEYxbgubNaEqrdZQ7xET1ethZs5wS0uKat84eEAOvseQIDJjGl5K9Ljiy4KzGPo/8Ug6Jyw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782902051; c=relaxed/simple; bh=//n8yQuXqMJdDkaH6TBXQfhz4KmXuGeEU0bKrvBD9Vs=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=cgXahGk3MuvMMMa/TmgIQ7qqC7PuyzGbknEdJW0LlKz+x+P5khvFXEaC0unXomKls5KgKAcjglSWT5s1fOaKO37Ko2kgX4JGDlp7h/l3awelCNVJQSZTGkjIL2j/cEw+ghMoEupSZUTPK2/I7orrdopYGmIE8h5U0GUz5T2I+pI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=i6ETZcbq; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="i6ETZcbq" Received: by smtp.kernel.org (Postfix) with UTF8SMTPSA id A3B691F000E9; Wed, 1 Jul 2026 10:34:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1782902049; bh=YC0bKrHQX1xBvkTArSRGDEKnTsZ6m1fH5b4vYO718+Q=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=i6ETZcbq3Ja5CM55rpJXRjrob3vRGBXuOFcb+/fD8tm2KMfrmZHGV8JvKtBfIHuhQ iegJirAfp2Z+TOwirR4Las7MlTZnz286OEkzfDpfywbScC3lHKTq0zEKepm2Mugh8K sghr4eSwknKkzslD4JE9cVTz6ULE9s3FsMADZCyrbN+dWqkHciegCqpVfz6dRib1VE yGUJU0JxxWaiCaziPKmGA8pZ2xoAeS1XZCXxiqzF662dU4QoD9WtisPOcL3OI50D5u oFZ3+oedgCJH3rN4CKR06W0MTGB4hiVrDph9Wt+QoV3E7FAVnyi8RoMGx4GRUft+K0 bOy1Ji1yuEGpg== Date: Wed, 1 Jul 2026 13:34:05 +0300 From: Jarkko Sakkinen To: Tao Liu Cc: pjw@kernel.org, palmer@dabbelt.com, aou@eecs.berkeley.edu, alex@ghiti.fr, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, kexec@lists.infradead.org, bhe@redhat.com, zohar@linux.ibm.com, roberto.sassu@huawei.com, dmitry.kasatkin@gmail.com, eric.snowberg@oracle.com, linux-integrity@vger.kernel.org, pratyush@kernel.org, Markus.Elfring@web.de, kernel-janitors@vger.kernel.org Subject: Re: [PATCH v3] riscv: Fix a NULL pointer dereference in machine_kexec_prepare Message-ID: References: <20260701025732.66330-2-ltao@redhat.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: On Wed, Jul 01, 2026 at 04:58:09PM +1200, Tao Liu wrote: > Hi Jarkko, > > On Wed, Jul 1, 2026 at 3:50 PM Jarkko Sakkinen wrote: > > > > On Wed, Jul 01, 2026 at 02:57:33PM +1200, Tao Liu wrote: > > > A NULL pointer dereference issue is noticed in riscv's machine_kexec_prepare, > > > where image->segment[i].buf might be NULL and copied unchecked. > > > > > > The NULL buf comes from security/integrity/ima/ima_kexec.c: > > > ima_add_kexec_buffer(), where kbuf is added by kexec_add_buffer(), > > > but kbuf.buffer is NULL > > > > This should have a proper call sequence. Now the root cause is > > obfuscated. > > Sure, I will attach the stack trace in v4. Here is the one: > > [ 62.867540] kexec_file(Image): Loaded kernel at 0x80200000 > bufsz=0x34ed800 memsz=0x35d0000 > [ 62.879983] Unable to handle kernel access to user memory without > uaccess routines at virtual address 0000000000000000 > [ 62.880736] Current kexec pgtable: 4K pagesize, 57-bit VAs, > pgdp=0x00000001062eb000 > [ 62.881185] [0000000000000000] pgd=00000000413b4401, > p4d=000000004151bc01, pud=00000000415b7801, pmd=0000000040af5801, > pte=0000000000000000 > [ 62.881969] Oops [#1] > [ 62.882077] Modules linked in: > [ 62.882717] CPU: 1 UID: 0 PID: 894 Comm: kexec Not tainted 7.1.1 #4 > PREEMPT(lazy) > [ 62.883037] Hardware name: QEMU QEMU Virtual Machine, BIOS > edk2-20260508-2.fc44 05/08/2026 > [ 62.883365] epc : __memcpy+0xd4/0xf8 > [ 62.883685] ra : machine_kexec_prepare+0x8a/0x298 > [ 62.883914] epc : ffffffff81393ee8 ra : ffffffff800366ca sp : > ff20000004a83d10 > [ 62.884214] gp : ffffffff83258db8 tp : ff6000008573db80 t0 : > ffffffff80033640 > [ 62.884433] t1 : 2152ffffffffffc0 t2 : 0000000003000000 s0 : > ff20000004a83d80 > [ 62.884710] s1 : 0000000000000000 a0 : ff20000004a83d10 a1 : > 0000000000000000 > [ 62.884987] a2 : 0000000000000028 a3 : 0000000000000028 a4 : > 0000000000000000 > [ 62.885208] a5 : 0000000000000000 a6 : 0000000104e33fff a7 : > 0000000000000000 > [ 62.885486] s2 : ff60000082a35800 s3 : 0000000000000000 s4 : > 0000000000000010 > [ 62.885774] s5 : 0000000000000028 s6 : ff20000004a83d10 s7 : > 0000000000000005 > [ 62.886005] s8 : 00000000000000c0 s9 : 000000000ac0d220 s10: > ffffffff835420e8 > [ 62.886218] s11: 0000000000000000 t3 : ffffff800000007c t4 : > ff1c000002138d00 > [ 62.886515] t5 : ffffffffffffffff t6 : ff20000004a83d10 ssp : > 0000000000000000 > [ 62.886860] status: 0000000200000120 badaddr: 0000000000000000 > cause: 000000000000000d > [ 62.887162] [] __memcpy+0xd4/0xf8 > [ 62.887388] [] __do_sys_kexec_file_load+0x1b2/0x338 > [ 62.887612] [] __riscv_sys_kexec_file_load+0x24/0x40 > [ 62.887855] [] do_trap_ecall_u+0x1a4/0x5a8 > [ 62.888134] [] handle_exception+0x16c/0x178 > [ 62.888445] Code: 7613 07f6 ca05 86b3 00c5 e7b3 01f5 8fd5 8b8d eb89 > (4198) 0591 > [ 62.889223] ---[ end trace 0000000000000000 ]--- > Segmentation fault kexec -l /boot/vmlinuz-7.1.1 > --initrd=/boot/initramfs-7.1.1.img --reuse-cmdline > > (gdb) p image->segment[0] > $3 = {{buf = 0x0, kbuf = 0x0}, bufsz = 0, mem = 10737586176, memsz = 4096} > > The buf = 0x0 and bufsz = 0 comes from ima_add_kexec_buffer(), thought > I'm not sure why it added a NULL segment, but it is no harm to add a > NULL checker here in case any other scenarios similar as IMA. The mission oriented purpose of kernel's git log is to be a quick checklist for bisecting bugs for instance. You have a dump of details there for a transcript. Now you should do rationalize that because how can you otherwise trust your own code? Here's one recent example from me: https://lore.kernel.org/linux-integrity/20260509185108.2681198-1-jarkko@kernel.org/ This is IMHO way more important part for a bug fix like this than the code change itself. It's the "engineering part" of the equation. > > > > > > > > > Fix this by simply adding a check before copy. > > > > > > Fixes: b7fb4d78a6ad ("RISC-V: use memcpy for kexec_file mode") > > > Acked-by: Baoquan He > > > Acked-by: Pratyush Yadav > > > Signed-off-by: Tao Liu > > > --- > > > > > > v3 -> v2: Add fixes tag; Replace "reference" to "dereference". > > > link to v2: https://lore.kernel.org/linux-riscv/20260627222602.23594-2-ltao@redhat.com/ > > > link to v1: https://lore.kernel.org/linux-riscv/20260529032739.13264-2-ltao@redhat.com/ > > > > > > --- > > > arch/riscv/kernel/machine_kexec.c | 7 +++++++ > > > 1 file changed, 7 insertions(+) > > > > > > diff --git a/arch/riscv/kernel/machine_kexec.c b/arch/riscv/kernel/machine_kexec.c > > > index 2306ce3e5f22..afc68f6a4aa1 100644 > > > --- a/arch/riscv/kernel/machine_kexec.c > > > +++ b/arch/riscv/kernel/machine_kexec.c > > > @@ -41,6 +41,13 @@ machine_kexec_prepare(struct kimage *image) > > > if (image->segment[i].memsz <= sizeof(fdt)) > > > continue; > > > > > > + /* > > > + * Some segments (e.g. IMA) reserve space but have no buffer > > > + * loaded yet. Skip them as they cannot contain an FDT. > > > + */ > > > > This is destined to rot over time. It also adds up also potentially to > > the backporting effort while backporting to stable kernes. And most > > importantly. Please, don't document every other null check. > > OK, will get rid of it. general rules of thumb i personally follow usually: 1. features/improvements: can be a bit more eager with comments 2. bugs: you really have to have rationale for having a commnet. E.g., mandatory SAFETY comment in linux-rust would obviously qualify. 3. both: if you add a comment are you sure it won't rot over time? > > Thanks, > Tao Liu > > > > > > + if (image->segment[i].buf == NULL) > > > > if (!image->segments[i].buf) > > > > > + continue; > > > + > > > if (image->file_mode) > > > memcpy(&fdt, image->segment[i].buf, sizeof(fdt)); > > > else if (copy_from_user(&fdt, image->segment[i].buf, sizeof(fdt))) > > > -- > > > 2.54.0 > > > > > > > > > > BR, Jarkko > > > BR, Jarkko From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 20158C43458 for ; Wed, 1 Jul 2026 10:34:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References: Message-ID:Subject:Cc:To:From:Date:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=2C4S8yFV1LLGFcYDmK23GdInrrGBuQaDQzaddvOksW4=; b=rCB99vg8u8Bh1H 2GX9ZdjWBBUHkTsentMF1s0yIWbTBgTeIf91iUof1t19OcMSoFLXPiHruMqs04vp79ndSdQHLKnBx taDxWHJ6Vg0+2v9XYLPa1QuqyzLttgxanUiGJtewh8q9MTx0VOP7LGQpvZ+BuH/O0+yW+0ZDxQoud xcXD7MXovsbyP0zMeOTWHqbKe2DCohfxuV2dK0lvhPOGGE+ltNGECKwHGzSlY0HJg3r8YZejUn4nk swMosY+WpVFLFHmSaRSSu4ZJrE5sZchSnUk5LMSUZCOPYiS286SeGoHd3ZhVtFdiBbIxqw4ftlLgz gmdHKQaRNpHtoH9+tCKg==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wesGh-00000001Jm8-0oDd; Wed, 01 Jul 2026 10:34:11 +0000 Received: from sea.source.kernel.org ([172.234.252.31]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1wesGf-00000001Jlt-3per; Wed, 01 Jul 2026 10:34:09 +0000 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) by sea.source.kernel.org (Postfix) with UTF8SMTP id 4EA5743B00; Wed, 1 Jul 2026 10:34:09 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with UTF8SMTPSA id A3B691F000E9; Wed, 1 Jul 2026 10:34:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1782902049; bh=YC0bKrHQX1xBvkTArSRGDEKnTsZ6m1fH5b4vYO718+Q=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=i6ETZcbq3Ja5CM55rpJXRjrob3vRGBXuOFcb+/fD8tm2KMfrmZHGV8JvKtBfIHuhQ iegJirAfp2Z+TOwirR4Las7MlTZnz286OEkzfDpfywbScC3lHKTq0zEKepm2Mugh8K sghr4eSwknKkzslD4JE9cVTz6ULE9s3FsMADZCyrbN+dWqkHciegCqpVfz6dRib1VE yGUJU0JxxWaiCaziPKmGA8pZ2xoAeS1XZCXxiqzF662dU4QoD9WtisPOcL3OI50D5u oFZ3+oedgCJH3rN4CKR06W0MTGB4hiVrDph9Wt+QoV3E7FAVnyi8RoMGx4GRUft+K0 bOy1Ji1yuEGpg== Date: Wed, 1 Jul 2026 13:34:05 +0300 From: Jarkko Sakkinen To: Tao Liu Cc: pjw@kernel.org, palmer@dabbelt.com, aou@eecs.berkeley.edu, alex@ghiti.fr, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, kexec@lists.infradead.org, bhe@redhat.com, zohar@linux.ibm.com, roberto.sassu@huawei.com, dmitry.kasatkin@gmail.com, eric.snowberg@oracle.com, linux-integrity@vger.kernel.org, pratyush@kernel.org, Markus.Elfring@web.de, kernel-janitors@vger.kernel.org Subject: Re: [PATCH v3] riscv: Fix a NULL pointer dereference in machine_kexec_prepare Message-ID: References: <20260701025732.66330-2-ltao@redhat.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org T24gV2VkLCBKdWwgMDEsIDIwMjYgYXQgMDQ6NTg6MDlQTSArMTIwMCwgVGFvIExpdSB3cm90ZToK PiBIaSBKYXJra28sCj4gCj4gT24gV2VkLCBKdWwgMSwgMjAyNiBhdCAzOjUw4oCvUE0gSmFya2tv IFNha2tpbmVuIDxqYXJra29Aa2VybmVsLm9yZz4gd3JvdGU6Cj4gPgo+ID4gT24gV2VkLCBKdWwg MDEsIDIwMjYgYXQgMDI6NTc6MzNQTSArMTIwMCwgVGFvIExpdSB3cm90ZToKPiA+ID4gQSBOVUxM IHBvaW50ZXIgZGVyZWZlcmVuY2UgaXNzdWUgaXMgbm90aWNlZCBpbiByaXNjdidzIG1hY2hpbmVf a2V4ZWNfcHJlcGFyZSwKPiA+ID4gd2hlcmUgaW1hZ2UtPnNlZ21lbnRbaV0uYnVmIG1pZ2h0IGJl IE5VTEwgYW5kIGNvcGllZCB1bmNoZWNrZWQuCj4gPiA+Cj4gPiA+IFRoZSBOVUxMIGJ1ZiBjb21l cyBmcm9tIHNlY3VyaXR5L2ludGVncml0eS9pbWEvaW1hX2tleGVjLmM6Cj4gPiA+IGltYV9hZGRf a2V4ZWNfYnVmZmVyKCksIHdoZXJlIGtidWYgaXMgYWRkZWQgYnkga2V4ZWNfYWRkX2J1ZmZlcigp LAo+ID4gPiBidXQga2J1Zi5idWZmZXIgaXMgTlVMTAo+ID4KPiA+IFRoaXMgc2hvdWxkIGhhdmUg YSBwcm9wZXIgY2FsbCBzZXF1ZW5jZS4gTm93IHRoZSByb290IGNhdXNlIGlzCj4gPiBvYmZ1c2Nh dGVkLgo+IAo+IFN1cmUsIEkgd2lsbCBhdHRhY2ggdGhlIHN0YWNrIHRyYWNlIGluIHY0LiBIZXJl IGlzIHRoZSBvbmU6Cj4gCj4gWyAgIDYyLjg2NzU0MF0ga2V4ZWNfZmlsZShJbWFnZSk6IExvYWRl ZCBrZXJuZWwgYXQgMHg4MDIwMDAwMAo+IGJ1ZnN6PTB4MzRlZDgwMCBtZW1zej0weDM1ZDAwMDAK PiBbICAgNjIuODc5OTgzXSBVbmFibGUgdG8gaGFuZGxlIGtlcm5lbCBhY2Nlc3MgdG8gdXNlciBt ZW1vcnkgd2l0aG91dAo+IHVhY2Nlc3Mgcm91dGluZXMgYXQgdmlydHVhbCBhZGRyZXNzIDAwMDAw MDAwMDAwMDAwMDAKPiBbICAgNjIuODgwNzM2XSBDdXJyZW50IGtleGVjIHBndGFibGU6IDRLIHBh Z2VzaXplLCA1Ny1iaXQgVkFzLAo+IHBnZHA9MHgwMDAwMDAwMTA2MmViMDAwCj4gWyAgIDYyLjg4 MTE4NV0gWzAwMDAwMDAwMDAwMDAwMDBdIHBnZD0wMDAwMDAwMDQxM2I0NDAxLAo+IHA0ZD0wMDAw MDAwMDQxNTFiYzAxLCBwdWQ9MDAwMDAwMDA0MTViNzgwMSwgcG1kPTAwMDAwMDAwNDBhZjU4MDEs Cj4gcHRlPTAwMDAwMDAwMDAwMDAwMDAKPiBbICAgNjIuODgxOTY5XSBPb3BzIFsjMV0KPiBbICAg NjIuODgyMDc3XSBNb2R1bGVzIGxpbmtlZCBpbjoKPiBbICAgNjIuODgyNzE3XSBDUFU6IDEgVUlE OiAwIFBJRDogODk0IENvbW06IGtleGVjIE5vdCB0YWludGVkIDcuMS4xICM0Cj4gUFJFRU1QVChs YXp5KQo+IFsgICA2Mi44ODMwMzddIEhhcmR3YXJlIG5hbWU6IFFFTVUgUUVNVSBWaXJ0dWFsIE1h Y2hpbmUsIEJJT1MKPiBlZGsyLTIwMjYwNTA4LTIuZmM0NCAwNS8wOC8yMDI2Cj4gWyAgIDYyLjg4 MzM2NV0gZXBjIDogX19tZW1jcHkrMHhkNC8weGY4Cj4gWyAgIDYyLjg4MzY4NV0gIHJhIDogbWFj aGluZV9rZXhlY19wcmVwYXJlKzB4OGEvMHgyOTgKPiBbICAgNjIuODgzOTE0XSBlcGMgOiBmZmZm ZmZmZjgxMzkzZWU4IHJhIDogZmZmZmZmZmY4MDAzNjZjYSBzcCA6Cj4gZmYyMDAwMDAwNGE4M2Qx MAo+IFsgICA2Mi44ODQyMTRdICBncCA6IGZmZmZmZmZmODMyNThkYjggdHAgOiBmZjYwMDAwMDg1 NzNkYjgwIHQwIDoKPiBmZmZmZmZmZjgwMDMzNjQwCj4gWyAgIDYyLjg4NDQzM10gIHQxIDogMjE1 MmZmZmZmZmZmZmZjMCB0MiA6IDAwMDAwMDAwMDMwMDAwMDAgczAgOgo+IGZmMjAwMDAwMDRhODNk ODAKPiBbICAgNjIuODg0NzEwXSAgczEgOiAwMDAwMDAwMDAwMDAwMDAwIGEwIDogZmYyMDAwMDAw NGE4M2QxMCBhMSA6Cj4gMDAwMDAwMDAwMDAwMDAwMAo+IFsgICA2Mi44ODQ5ODddICBhMiA6IDAw MDAwMDAwMDAwMDAwMjggYTMgOiAwMDAwMDAwMDAwMDAwMDI4IGE0IDoKPiAwMDAwMDAwMDAwMDAw MDAwCj4gWyAgIDYyLjg4NTIwOF0gIGE1IDogMDAwMDAwMDAwMDAwMDAwMCBhNiA6IDAwMDAwMDAx MDRlMzNmZmYgYTcgOgo+IDAwMDAwMDAwMDAwMDAwMDAKPiBbICAgNjIuODg1NDg2XSAgczIgOiBm ZjYwMDAwMDgyYTM1ODAwIHMzIDogMDAwMDAwMDAwMDAwMDAwMCBzNCA6Cj4gMDAwMDAwMDAwMDAw MDAxMAo+IFsgICA2Mi44ODU3NzRdICBzNSA6IDAwMDAwMDAwMDAwMDAwMjggczYgOiBmZjIwMDAw MDA0YTgzZDEwIHM3IDoKPiAwMDAwMDAwMDAwMDAwMDA1Cj4gWyAgIDYyLjg4NjAwNV0gIHM4IDog MDAwMDAwMDAwMDAwMDBjMCBzOSA6IDAwMDAwMDAwMGFjMGQyMjAgczEwOgo+IGZmZmZmZmZmODM1 NDIwZTgKPiBbICAgNjIuODg2MjE4XSAgczExOiAwMDAwMDAwMDAwMDAwMDAwIHQzIDogZmZmZmZm ODAwMDAwMDA3YyB0NCA6Cj4gZmYxYzAwMDAwMjEzOGQwMAo+IFsgICA2Mi44ODY1MTVdICB0NSA6 IGZmZmZmZmZmZmZmZmZmZmYgdDYgOiBmZjIwMDAwMDA0YTgzZDEwIHNzcCA6Cj4gMDAwMDAwMDAw MDAwMDAwMAo+IFsgICA2Mi44ODY4NjBdIHN0YXR1czogMDAwMDAwMDIwMDAwMDEyMCBiYWRhZGRy OiAwMDAwMDAwMDAwMDAwMDAwCj4gY2F1c2U6IDAwMDAwMDAwMDAwMDAwMGQKPiBbICAgNjIuODg3 MTYyXSBbPGZmZmZmZmZmODEzOTNlZTg+XSBfX21lbWNweSsweGQ0LzB4ZjgKPiBbICAgNjIuODg3 Mzg4XSBbPGZmZmZmZmZmODAxYjI1M2E+XSBfX2RvX3N5c19rZXhlY19maWxlX2xvYWQrMHgxYjIv MHgzMzgKPiBbICAgNjIuODg3NjEyXSBbPGZmZmZmZmZmODAxYjI2ZTQ+XSBfX3Jpc2N2X3N5c19r ZXhlY19maWxlX2xvYWQrMHgyNC8weDQwCj4gWyAgIDYyLjg4Nzg1NV0gWzxmZmZmZmZmZjgxMzk1 ZWE0Pl0gZG9fdHJhcF9lY2FsbF91KzB4MWE0LzB4NWE4Cj4gWyAgIDYyLjg4ODEzNF0gWzxmZmZm ZmZmZjgxM2E5ZWVjPl0gaGFuZGxlX2V4Y2VwdGlvbisweDE2Yy8weDE3OAo+IFsgICA2Mi44ODg0 NDVdIENvZGU6IDc2MTMgMDdmNiBjYTA1IDg2YjMgMDBjNSBlN2IzIDAxZjUgOGZkNSA4YjhkIGVi ODkKPiAoNDE5OCkgMDU5MQo+IFsgICA2Mi44ODkyMjNdIC0tLVsgZW5kIHRyYWNlIDAwMDAwMDAw MDAwMDAwMDAgXS0tLQo+IFNlZ21lbnRhdGlvbiBmYXVsdCAgICAgICAgIGtleGVjIC1sIC9ib290 L3ZtbGludXotNy4xLjEKPiAtLWluaXRyZD0vYm9vdC9pbml0cmFtZnMtNy4xLjEuaW1nIC0tcmV1 c2UtY21kbGluZQo+IAo+IChnZGIpIHAgaW1hZ2UtPnNlZ21lbnRbMF0KPiAkMyA9IHt7YnVmID0g MHgwLCBrYnVmID0gMHgwfSwgYnVmc3ogPSAwLCBtZW0gPSAxMDczNzU4NjE3NiwgbWVtc3ogPSA0 MDk2fQo+IAo+IFRoZSBidWYgPSAweDAgYW5kIGJ1ZnN6ID0gMCBjb21lcyBmcm9tIGltYV9hZGRf a2V4ZWNfYnVmZmVyKCksIHRob3VnaHQKPiBJJ20gbm90IHN1cmUgd2h5IGl0IGFkZGVkIGEgTlVM TCBzZWdtZW50LCBidXQgaXQgaXMgbm8gaGFybSB0byBhZGQgYQo+IE5VTEwgY2hlY2tlciBoZXJl IGluIGNhc2UgYW55IG90aGVyIHNjZW5hcmlvcyBzaW1pbGFyIGFzIElNQS4KClRoZSBtaXNzaW9u IG9yaWVudGVkIHB1cnBvc2Ugb2Yga2VybmVsJ3MgZ2l0IGxvZyBpcyB0byBiZSBhIHF1aWNrCmNo ZWNrbGlzdCBmb3IgYmlzZWN0aW5nIGJ1Z3MgZm9yIGluc3RhbmNlLiBZb3UgaGF2ZSBhIGR1bXAg b2YgZGV0YWlscwp0aGVyZSBmb3IgYSB0cmFuc2NyaXB0LiBOb3cgeW91IHNob3VsZCBkbyByYXRp b25hbGl6ZSB0aGF0IGJlY2F1c2UgaG93CmNhbiB5b3Ugb3RoZXJ3aXNlIHRydXN0IHlvdXIgb3du IGNvZGU/CgpIZXJlJ3Mgb25lIHJlY2VudCBleGFtcGxlIGZyb20gbWU6CgpodHRwczovL2xvcmUu a2VybmVsLm9yZy9saW51eC1pbnRlZ3JpdHkvMjAyNjA1MDkxODUxMDguMjY4MTE5OC0xLWphcmtr b0BrZXJuZWwub3JnLwoKVGhpcyBpcyBJTUhPIHdheSBtb3JlIGltcG9ydGFudCBwYXJ0IGZvciBh IGJ1ZyBmaXggbGlrZSB0aGlzIHRoYW4gdGhlCmNvZGUgY2hhbmdlIGl0c2VsZi4KCkl0J3MgdGhl ICJlbmdpbmVlcmluZyBwYXJ0IiBvZiB0aGUgIGVxdWF0aW9uLgoKPiAKPiA+Cj4gPiA+Cj4gPiA+ IEZpeCB0aGlzIGJ5IHNpbXBseSBhZGRpbmcgYSBjaGVjayBiZWZvcmUgY29weS4KPiA+ID4KPiA+ ID4gRml4ZXM6IGI3ZmI0ZDc4YTZhZCAoIlJJU0MtVjogdXNlIG1lbWNweSBmb3Iga2V4ZWNfZmls ZSBtb2RlIikKPiA+ID4gQWNrZWQtYnk6IEJhb3F1YW4gSGUgPGJoZUByZWRoYXQuY29tPgo+ID4g PiBBY2tlZC1ieTogUHJhdHl1c2ggWWFkYXYgPHByYXR5dXNoQGtlcm5lbC5vcmc+Cj4gPiA+IFNp Z25lZC1vZmYtYnk6IFRhbyBMaXUgPGx0YW9AcmVkaGF0LmNvbT4KPiA+ID4gLS0tCj4gPiA+Cj4g PiA+IHYzIC0+IHYyOiBBZGQgZml4ZXMgdGFnOyBSZXBsYWNlICJyZWZlcmVuY2UiIHRvICJkZXJl ZmVyZW5jZSIuCj4gPiA+IGxpbmsgdG8gdjI6IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2xpbnV4 LXJpc2N2LzIwMjYwNjI3MjIyNjAyLjIzNTk0LTItbHRhb0ByZWRoYXQuY29tLwo+ID4gPiBsaW5r IHRvIHYxOiBodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1yaXNjdi8yMDI2MDUyOTAzMjcz OS4xMzI2NC0yLWx0YW9AcmVkaGF0LmNvbS8KPiA+ID4KPiA+ID4gLS0tCj4gPiA+ICBhcmNoL3Jp c2N2L2tlcm5lbC9tYWNoaW5lX2tleGVjLmMgfCA3ICsrKysrKysKPiA+ID4gIDEgZmlsZSBjaGFu Z2VkLCA3IGluc2VydGlvbnMoKykKPiA+ID4KPiA+ID4gZGlmZiAtLWdpdCBhL2FyY2gvcmlzY3Yv a2VybmVsL21hY2hpbmVfa2V4ZWMuYyBiL2FyY2gvcmlzY3Yva2VybmVsL21hY2hpbmVfa2V4ZWMu Ywo+ID4gPiBpbmRleCAyMzA2Y2UzZTVmMjIuLmFmYzY4ZjZhNGFhMSAxMDA2NDQKPiA+ID4gLS0t IGEvYXJjaC9yaXNjdi9rZXJuZWwvbWFjaGluZV9rZXhlYy5jCj4gPiA+ICsrKyBiL2FyY2gvcmlz Y3Yva2VybmVsL21hY2hpbmVfa2V4ZWMuYwo+ID4gPiBAQCAtNDEsNiArNDEsMTMgQEAgbWFjaGlu ZV9rZXhlY19wcmVwYXJlKHN0cnVjdCBraW1hZ2UgKmltYWdlKQo+ID4gPiAgICAgICAgICAgICAg IGlmIChpbWFnZS0+c2VnbWVudFtpXS5tZW1zeiA8PSBzaXplb2YoZmR0KSkKPiA+ID4gICAgICAg ICAgICAgICAgICAgICAgIGNvbnRpbnVlOwo+ID4gPgo+ID4gPiArICAgICAgICAgICAgIC8qCj4g PiA+ICsgICAgICAgICAgICAgICogU29tZSBzZWdtZW50cyAoZS5nLiBJTUEpIHJlc2VydmUgc3Bh Y2UgYnV0IGhhdmUgbm8gYnVmZmVyCj4gPiA+ICsgICAgICAgICAgICAgICogbG9hZGVkIHlldC4g U2tpcCB0aGVtIGFzIHRoZXkgY2Fubm90IGNvbnRhaW4gYW4gRkRULgo+ID4gPiArICAgICAgICAg ICAgICAqLwo+ID4KPiA+IFRoaXMgaXMgZGVzdGluZWQgdG8gcm90IG92ZXIgdGltZS4gSXQgYWxz byBhZGRzIHVwIGFsc28gcG90ZW50aWFsbHkgdG8KPiA+IHRoZSBiYWNrcG9ydGluZyBlZmZvcnQg d2hpbGUgYmFja3BvcnRpbmcgdG8gc3RhYmxlIGtlcm5lcy4gQW5kIG1vc3QKPiA+IGltcG9ydGFu dGx5LiBQbGVhc2UsIGRvbid0IGRvY3VtZW50IGV2ZXJ5IG90aGVyIG51bGwgY2hlY2suCj4gCj4g T0ssIHdpbGwgZ2V0IHJpZCBvZiBpdC4KCmdlbmVyYWwgcnVsZXMgb2YgdGh1bWIgaSBwZXJzb25h bGx5IGZvbGxvdyB1c3VhbGx5OgoKMS4gZmVhdHVyZXMvaW1wcm92ZW1lbnRzOiBjYW4gYmUgYSBi aXQgbW9yZSBlYWdlciB3aXRoIGNvbW1lbnRzCjIuIGJ1Z3M6IHlvdSByZWFsbHkgaGF2ZSB0byBo YXZlIHJhdGlvbmFsZSBmb3IgaGF2aW5nIGEgY29tbW5ldC4gRS5nLiwKICAgbWFuZGF0b3J5IFNB RkVUWSBjb21tZW50IGluIGxpbnV4LXJ1c3Qgd291bGQgb2J2aW91c2x5IHF1YWxpZnkuCjMuIGJv dGg6IGlmIHlvdSBhZGQgYSBjb21tZW50IGFyZSB5b3Ugc3VyZSBpdCB3b24ndCByb3Qgb3ZlciB0 aW1lPwoKPiAKPiBUaGFua3MsCj4gVGFvIExpdQo+IAo+ID4KPiA+ID4gKyAgICAgICAgICAgICBp ZiAoaW1hZ2UtPnNlZ21lbnRbaV0uYnVmID09IE5VTEwpCj4gPgo+ID4gaWYgKCFpbWFnZS0+c2Vn bWVudHNbaV0uYnVmKQo+ID4KPiA+ID4gKyAgICAgICAgICAgICAgICAgICAgIGNvbnRpbnVlOwo+ ID4gPiArCj4gPiA+ICAgICAgICAgICAgICAgaWYgKGltYWdlLT5maWxlX21vZGUpCj4gPiA+ICAg ICAgICAgICAgICAgICAgICAgICBtZW1jcHkoJmZkdCwgaW1hZ2UtPnNlZ21lbnRbaV0uYnVmLCBz aXplb2YoZmR0KSk7Cj4gPiA+ICAgICAgICAgICAgICAgZWxzZSBpZiAoY29weV9mcm9tX3VzZXIo JmZkdCwgaW1hZ2UtPnNlZ21lbnRbaV0uYnVmLCBzaXplb2YoZmR0KSkpCj4gPiA+IC0tCj4gPiA+ IDIuNTQuMAo+ID4gPgo+ID4gPgo+ID4KPiA+IEJSLCBKYXJra28KPiA+Cj4gCgpCUiwgSmFya2tv CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpsaW51eC1y aXNjdiBtYWlsaW5nIGxpc3QKbGludXgtcmlzY3ZAbGlzdHMuaW5mcmFkZWFkLm9yZwpodHRwOi8v bGlzdHMuaW5mcmFkZWFkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LXJpc2N2Cg==