From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: From: Sven Eckelmann Date: Wed, 12 Nov 2014 10:26:24 +0100 Message-ID: <5267417.3ygrW54Np4@bentobox> In-Reply-To: <2091412.EK1SUSK0CW@sven-edge> References: <1414917484-13213-1-git-send-email-antonio@meshcoding.com> <2091412.EK1SUSK0CW@sven-edge> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextPart1699829.ZP4a2DlUfM" Content-Transfer-Encoding: 7Bit Subject: Re: [B.A.T.M.A.N.] [PATCHv5] batctl: tcpdump - parse TVLV containers Reply-To: The list for a Better Approach To Mobile Ad-hoc Networking List-Id: The list for a Better Approach To Mobile Ad-hoc Networking List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: b.a.t.m.a.n@lists.open-mesh.org This is a multi-part message in MIME format. --nextPart1699829.ZP4a2DlUfM Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" On Tuesday 11 November 2014 23:56:03 Sven Eckelmann wrote: [...] > I've already explained this to Antonio but here again in public: > > * neither type nor version are validated > * the type can point in tvlv_parsers to an invalid (non-existing) entry > * the version of this entry can also point to an invalid parser > * this is a big problem because I can crash batctl td with data packets > send from other people (even valid data packets with mcast tvlv) > * I've already experienced this problem when using nodes from a company > which ships this patch since a while (> 4 months) > > Maybe it can be redone with some switch statements or > (more space consuming) full tables which can handle all input data. Of > course a check of the returned parser is still necessary inside the loops. > > Kind regards, > Sven For people who require a direct experience of the crash with normal traffic send by batman-adv: 1. compile batctl: CFLAGS="-g3 -fsanitize=address -fsanitize=undefined -fsanitize=leak" make 2. Start it on some interfaceL sudo ./batctl td eth0 3. run on another console tcpreplay on the same interface: sudo tcpreplay -i eth0 v15_iv_ogm.pcapng 4. experience the crash: 10:17:28.724487 BAT 00:21:cc:b4:82:33: OGM IV via neigh 00:21:cc:b4:82:33, seq 3093200194, tq 255, ttl 50, v 15, flags [..F], length 68, tvlv_len 44 TVLV TTv1: OGM DIFF [.] ttvn=4 vlan_num=1 entry_num=0 VLAN ID -1, crc 0xb8d4beb4 TVLV GWv1: down 10.0Mbps, up 2.0Mbps ================================================================= ==4213==ERROR: AddressSanitizer: global-buffer-overflow on address 0x000000639410 at pc 0x415f75 bp 0x7ffff4a02c70 sp 0x7ffff4a02c68 READ of size 8 at 0x000000639410 thread T0 #0 0x415f74 in dump_batman_iv_ogm batctl/tcpdump.c:654 #1 0x41710e in parse_eth_hdr batctl/tcpdump.c:825 #2 0x4195c8 in tcpdump batctl/tcpdump.c:1118 #3 0x403b7a in main batctl/main.c:146 #4 0x7fd0f52dbb44 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b44) #5 0x4029d8 (batctl+0x4029d8) 0x000000639410 is located 0 bytes to the right of global variable 'tvlv_parsers' from 'tcpdump.c' (0x6393e0) of size 48 0x000000639410 is located 48 bytes to the left of global variable '*.Lubsan_type7' from 'tcpdump.c' (0x639440) of size 4 SUMMARY: AddressSanitizer: global-buffer-overflow batctl/tcpdump.c:654 dump_batman_iv_ogm Shadow bytes around the buggy address: 0x0000800bf230: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 0x0000800bf240: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 0x0000800bf250: 00 00 00 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 0x0000800bf260: 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 0x0000800bf270: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 =>0x0000800bf280: 00 00[f9]f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 0x0000800bf290: 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 0x0000800bf2a0: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 0x0000800bf2b0: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 0x0000800bf2c0: 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 0x0000800bf2d0: 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==4213==ABORTING Kind regards, Sven --nextPart1699829.ZP4a2DlUfM Content-Disposition: attachment; filename="v15_iv_ogm.pcapng" Content-Transfer-Encoding: base64 Content-Type: application/x-pcapng; name="v15_iv_ogm.pcapng" Cg0NCmwAAABNPCsaAQAAAP//////////AwASAExpbnV4IDMuMTYtMi1hbWQ2NAAABAAtAER1bXBj YXAgMS4xMi4xIChHaXQgUmV2IFVua25vd24gZnJvbSB1bmtub3duKQAAAAAAAABsAAAAAQAAAEAA AAABAAAAAAAEAAIABABldGgwCQABAAYAAAAMABIATGludXggMy4xNi0yLWFtZDY0AAAAAAAAQAAA AAYAAAB0AAAAAAAAAFoEBQAxqvTFUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1CACHMtIIz ACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0 AAAABgAAAHQAAAAAAAAAWgQFAJ9J9sVSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUIAIcy0 gjMAIcy0gjMA3AAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAA AHQAAAAGAAAAZAAAAAAAAABaBAUAeRr6xUIAAABCAAAA////////rIZ0AdMgQwUADzICkYmwd6yG dAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAAgIu7DQAAHsACAQAAAABkAAAABgAAAGQAAAAA AAAAWgQFABiv+8VCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsHeshnQB0yCshnQB0yAA8AAc BAEAFAEDAAL35jaGgAAAAICLuw0AAB7AAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQDwvQPGUgAA AFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1DACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAA IAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAMVkBcZS AAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUMAIcy0gjMAIcy0gjMA3AAsBAEADAEEAAG41L60 AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAM6sJ xkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmweKyGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfm NoaAAAAAgIu7DQAAlLQCAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAF5PC8ZCAAAAQgAAAP////// /wAhzLSCM0MFAA8xBJGJsHishnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0AAJS0 AgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQDDwRLGUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4 Xn1EACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMB AAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFANxYFMZSAAAAUgAAAP///////6yGdAHTIEMFAA8x BLhefUQAIcy0gjMAIcy0gjMA3AAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAA AwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAqcUYxkIAAABCAAAA////////rIZ0AdMgQwUA DzICkYmweayGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAAgIu7DQAAlLQCAQAAAABkAAAA BgAAAGQAAAAAAAAAWgQFAJxyGsZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsHmshnQB0yCs hnQB0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0AAJS0AgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoE BQC+USLGUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1FACHMtIIzACHMtIIzAP8ALAQBAAwB BAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAA WgQFAA7pI8ZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUUAIcy0gjMAIcy0gjMA3AAsBAEA DAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAA AABaBAUAyQcoxkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmweqyGdAHTIKyGdAHTIAD/ABwE AQAUAQMAAvfmNoaAAAgDgIu7DQAAMkACAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFABGlKcZCAAAA QgAAAP///////wAhzLSCM0MFAA8xBJGJsHqshnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAI A4CLuw0AADJAAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQB9VTHGUgAAAFIAAAD///////8AIcy0 gjNDBQAPMgK4Xn1GACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQG AQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFABvdMsZSAAAAUgAAAP///////6yG dAHTIEMFAA8xBLhefUYAIcy0gjMAIcy0gjMA3AAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAA FAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAIXE3xkIAAABCAAAA//////// rIZ0AdMgQwUADzICkYmwe6yGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAhpgIu7DQAAMAAC AQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAEYGOcZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJ sHushnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAIaYCLuw0AADAAAgEAAAAAZAAAAAYAAAB0 AAAAAAAAAFoEBQAS5kDGUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1HACHMtIIzACHMtIIz AP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAA AHQAAAAAAAAAWgQFAKCUQsZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUcAIcy0gjMAIcy0 gjMA3AAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAG AAAAZAAAAAAAAABaBAUASbNGxkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmwfKyGdAHTIKyG dAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAAgIu7DQAAAAwCAQAAAABkAAAABgAAAGQAAAAAAAAAWgQF AKFISMZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsHyshnQB0yCshnQB0yAA8AAcBAEAFAED AAL35jaGgAAAAICLuw0AAAAMAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQCz6U/GUgAAAFIAAAD/ //////8AIcy0gjNDBQAPMgK4Xn1IACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAI AAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAK2IUcZSAAAAUgAA AP///////6yGdAHTIEMFAA8xBLhefUgAIcy0gjMAIcy0gjMA4QAsBAEADAEEAAG41L60AAAgAAEB AAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAdhxWxkIAAABC AAAA////////rIZ0AdMgQwUADzICkYmwfayGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAA gIu7DQAAlLQCAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFALy5V8ZCAAAAQgAAAP///////wAhzLSC M0MFAA8xBJGJsH2shnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0AAJS0AgEAAAAA ZAAAAAYAAAB0AAAAAAAAAFoEBQAOel/GUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1JACHM tIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAA AAB0AAAABgAAAHQAAAAAAAAAWgQFAAcZYcZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUkA Icy0gjMAIcy0gjMA3AAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIB AAAAAHQAAAAGAAAAZAAAAAAAAABaBAUApV5lxkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmw fqyGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAmUgIu7DQAAMkACAQAAAABkAAAABgAAAGQA AAAAAAAAWgQFAOj7ZsZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsH6shnQB0yCshnQB0yAA 8AAcBAEAFAEDAAL35jaGgAAJlICLuw0AADJAAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQAtbm7G UgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1KACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+ tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAA4N cMZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUoAIcy0gjMAIcy0gjMA3QAsBAEADAEEAAG4 1L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUA 3Md0xkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmwf6yGdAHTIKyGdAHTIAD/ABwEAQAUAQMA AvfmNoaAAAAAgIu7DQAAAAwCAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAG5ddsZCAAAAQgAAAP// /////wAhzLSCM0MFAA8xBJGJsH+shnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0A AAAMAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQCf/n3GUgAAAFIAAAD///////8AIcy0gjNDBQAP MgK4Xn1LACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAA AAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAFOdf8ZSAAAAUgAAAP///////6yGdAHTIEMF AA8xBLhefUsAIcy0gjMAIcy0gjMA4QAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQA AAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAAzGExkIAAABCAAAA////////rIZ0AdMg QwUADzICkYmwgKyGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAApcgIu7DQAAM8ACAQAAAABk AAAABgAAAGQAAAAAAAAAWgQFAFGvhcZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsICshnQB 0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAKXICLuw0AADPAAgEAAAAAZAAAAAYAAAB0AAAAAAAA AFoEBQA7MY3GUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1MACHMtIIzACHMtIIzAP8ALAQB AAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAA AAAAWgQFAIbfjsZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefUwAIcy0gjMAIcy0gjMA4QAs BAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAA AAAAAABaBAUAXUyTxkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmwgayGdAHTIKyGdAHTIAD/ ABwEAQAUAQMAAvfmNoaAAArCgIu7DQAAOQACAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAALilMZC AAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsIGshnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaG gAAKwoCLuw0AADkAAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQDXsZzGUgAAAFIAAAD///////8A Icy0gjNDBQAPMgK4Xn1NACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAA ABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFALhInsZSAAAAUgAAAP////// /6yGdAHTIEMFAA8xBLhefU0AIcy0gjMAIcy0gjMA4QAsBAEADAEEAAG41L60AAAgAAEBAAgAAABk AAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAQGeixkIAAABCAAAA//// ////rIZ0AdMgQwUADzICkYmwgqyGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAAgIu7DQAA AAwCAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAE/1o8ZCAAAAQgAAAP///////wAhzLSCM0MFAA8x BJGJsIKshnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0AAAAMAgEAAAAAZAAAAAYA AAB0AAAAAAAAAFoEBQB85KvGUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1OACHMtIIzACHM tIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAA BgAAAHQAAAAAAAAAWgQFAPCKrcZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhefU4AIcy0gjMA Icy0gjMA4QAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQA AAAGAAAAZAAAAAAAAABaBAUAjtCxxkIAAABCAAAA////////rIZ0AdMgQwUADzICkYmwg6yGdAHT IKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAuLgIu7DQAAMAACAQAAAABkAAAABgAAAGQAAAAAAAAA WgQFANKFs8ZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsIOshnQB0yCshnQB0yAA8AAcBAEA FAEDAAL35jaGgAALi4CLuw0AADAAAgEAAAAAZAAAAAYAAAB0AAAAAAAAAFoEBQB3NrvGUgAAAFIA AAD///////8AIcy0gjNDBQAPMgK4Xn1PACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAAB AQAIAAAAZAAAABQGAQAEAAAAAAMBAAACAQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAJHNvMZSAAAA UgAAAP///////6yGdAHTIEMFAA8xBLhefU8AIcy0gjMAIcy0gjMA4QAsBAEADAEEAAG41L60AAAg AAEBAAgAAABkAAAAFAYBAAQAAAAAAwEAAAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUApRLBxkIA AABCAAAA////////rIZ0AdMgQwUADzICkYmwhKyGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaA AAvvgIu7DQAAM8ACAQAAAABkAAAABgAAAGQAAAAAAAAAWgQFAKqowsZCAAAAQgAAAP///////wAh zLSCM0MFAA8xBJGJsISshnQB0yCshnQB0yAA8AAcBAEAFAEDAAL35jaGgAAL74CLuw0AADPAAgEA AAAAZAAAAAYAAAB0AAAAAAAAAFoEBQAYmMrGUgAAAFIAAAD///////8AIcy0gjNDBQAPMgK4Xn1Q ACHMtIIzACHMtIIzAP8ALAQBAAwBBAABuNS+tAAAIAABAQAIAAAAZAAAABQGAQAEAAAAAAMBAAAC AQAAAAB0AAAABgAAAHQAAAAAAAAAWgQFAD42zMZSAAAAUgAAAP///////6yGdAHTIEMFAA8xBLhe fVAAIcy0gjMAIcy0gjMA4QAsBAEADAEEAAG41L60AAAgAAEBAAgAAABkAAAAFAYBAAQAAAAAAwEA AAIBAAAAAHQAAAAGAAAAZAAAAAAAAABaBAUAsy3QxkIAAABCAAAA////////rIZ0AdMgQwUADzIC kYmwhayGdAHTIKyGdAHTIAD/ABwEAQAUAQMAAvfmNoaAAAAAgIu7DQAAVVgCAQAAAABkAAAABgAA AGQAAAAAAAAAWgQFAHCs0cZCAAAAQgAAAP///////wAhzLSCM0MFAA8xBJGJsIWshnQB0yCshnQB 0yAA8AAcBAEAFAEDAAL35jaGgAAAAICLuw0AAFVYAgEAAAAAZAAAAA== --nextPart1699829.ZP4a2DlUfM--