From mboxrd@z Thu Jan 1 00:00:00 1970 From: Xen.org security team Subject: Xen Security Advisory 201 (CVE-2016-9815, CVE-2016-9816, CVE-2016-9817, CVE-2016-9818) - ARM guests may induce host asynchronous abort Date: Wed, 07 Dec 2016 10:32:41 +0000 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com Cc: "Xen.org security team" List-Id: xen-devel@lists.xenproject.org --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-9815,CVE-2016-9816,CVE-2016-9817,CVE-2016-9818 / XSA-201 version 2 ARM guests may induce host asynchronous abort UPDATES IN VERSION 2 ==================== CVEs assigned. ISSUE DESCRIPTION ================= Depending on how the hardware and firmware have been integrated, guest-triggered asynchronous aborts (SError on ARMv8) may be received by the hypervisor. The current action is to crash the host. A guest might trigger an asynchronous abort when accessing memory mapped hardware in a non-conventional way. Even if device pass-through has not been configured, the hypervisor may give the guest access to memory mapped hardware in order to take advantage of hardware virtualization. The CVEs are as follows: xsa201-1.patch CVE-2016-9815 xsa201-2.patch CVE-2016-9816 xsa201-3-*.patch CVE-2016-9817 xsa201-4.patch CVE-2016-9818 IMPACT ====== A malicious guest may be able to crash the host. VULNERABLE SYSTEMS ================== All Xen versions which support ARM are potentially affected. Whether a particular ARM systems is affected depends on technical details of the hardware and/or firmware. x86 systems are not affected. MITIGATION ========== On systems where the guest kernel is controlled by the host rather than guest administrator, running only kernels which do not expose MMIO to userspace will prevent untrusted guest users from exploiting this issue. However untrusted guest administrators can still trigger it unless further steps are taken to prevent them from loading code into the kernel (e.g by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. NOTE REGARDING LACK OF EMBARGO ============================== The issue was discussed publicly (and has been fixed already in KVM in public trees). CREDITS ======= This issue was discovered by ARM engineering personnel. RESOLUTION ========== Applying the appropriate set of attached patched resolves this issue. xsa201-[1234].patch Xen-unstable xsa201-[12].patch } xsa201-3-4.7.patch } Xen 4.7.x, Xen 4.6.x xsa201-4.patch } $ sha256sum xsa201* 163aeb9ae3ffce28e0bc95bdfff490d2df6f6f0b85ac1d4f447bea921f0a0dda xsa201-1.patch 0ba570ed7df172475bc745e02b89670608251634895e5279edcf534619d6d81b xsa201-2.patch 4045e046473f069c51e5fd579f63563862aa497d945b183c768481ef11885744 xsa201-3.patch a9cf56564d020675c0f2f1ea15009a712f172be3d53ea8ddf2f48adaac392e76 xsa201-3-4.7.patch 388d548cd4e30883ae100863d33e792869e7dbd86054299a91b64db6d6599919 xsa201-4.patch $ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJYR+VFAAoJEIP+FMlX6CvZVZkIAKygymoB/4TYWHSQCDaekqe7 oqs0SrOZwAiaXDDtNEq5oUmWzw852p6ewHzeHkuFrpXSTg9NZqE3ve/Ygy4z2lwQ jlrQblTl1wopoJDKFfvVqnGX4sEQvDqsOKAYpX0LbtjiIOAisKNT5f40J9X3L2Oz dzEdMuKDNvCDO6hPbDXprDDP9qETO4+Wopsj14F6rraYICrMl1P1LKabwr12936s XuegVU25S777YJ3CXpJVSCGns6zZzJm345l1VdgQ5M+KmMQkb4P+v5do7rMHMZFU LvYqxT9M+V6EDylByNp1HuYJWFQU7jgH/oK4k0M3EHAuovN5GZKp7SdGywVEEwY= =t4pk -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa201-1.patch" Content-Disposition: attachment; filename="xsa201-1.patch" Content-Transfer-Encoding: base64 RnJvbTogV2VpIENoZW4gPFdlaS5DaGVuQGFybS5jb20+ClN1YmplY3Q6IGFy bTY0OiBoYW5kbGUgZ3Vlc3QtZ2VuZXJhdGVkIEVMMSBhc3luY2hyb25vdXMg YWJvcnQKCkluIGN1cnJlbnQgY29kZSwgd2hlbiB0aGUgaHlwZXJ2aXNvciBy ZWNlaXZlcyBhbiBhc3luY2hyb25vdXMgYWJvcnQKZnJvbSBhIGd1ZXN0LCB0 aGUgaHlwZXJ2aXNvciB3aWxsIGRvIHBhbmljLCB0aGUgaG9zdCB3aWxsIGJl IGRvd24uCldlIGhhdmUgdG8gcHJldmVudCBzdWNoIHNlY3VyaXR5IGlzc3Vl LCBzbywgaW4gdGhpcyBwYXRjaCB3ZSBjcmFzaAp0aGUgZ3Vlc3QsIHdoZW4g dGhlIGh5cGVydmlzb3IgcmVjZWl2ZXMgYW4gYXN5bmNocm9ub3VzIGFib3J0 IGZyb20KdGhlIGd1ZXN0LgoKVGhpcyBpcyBDVkUtMjAxNi05ODE1LCBwYXJ0 IG9mIFhTQS0yMDEuCgpTaWduZWQtb2ZmLWJ5OiBXZWkgQ2hlbiA8V2VpLkNo ZW5AYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8 c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KUmV2aWV3ZWQtYnk6IFN0ZXZlIENh cHBlciA8c3RldmUuY2FwcGVyQGFybS5jb20+ClJldmlld2VkLWJ5OiBKdWxp ZW4gR3JhbGwgPEp1bGllbi5HcmFsbEBhcm0uY29tPgoKLS0tIGEveGVuL2Fy Y2gvYXJtL2FybTY0L2VudHJ5LlMKKysrIGIveGVuL2FyY2gvYXJtL2FybTY0 L2VudHJ5LlMKQEAgLTIwNCw5ICsyMDQsMTIgQEAgZ3Vlc3RfZmlxX2ludmFs aWQ6CiAgICAgICAgIGVudHJ5ICAgaHlwPTAsIGNvbXBhdD0wCiAgICAgICAg IGludmFsaWQgQkFEX0ZJUQoKLWd1ZXN0X2Vycm9yX2ludmFsaWQ6CitndWVz dF9lcnJvcjoKICAgICAgICAgZW50cnkgICBoeXA9MCwgY29tcGF0PTAKLSAg ICAgICAgaW52YWxpZCBCQURfRVJST1IKKyAgICAgICAgbXNyICAgICBkYWlm Y2xyLCAjMgorICAgICAgICBtb3YgICAgIHgwLCBzcAorICAgICAgICBibCAg ICAgIGRvX3RyYXBfZ3Vlc3RfZXJyb3IKKyAgICAgICAgZXhpdCAgICBoeXA9 MCwgY29tcGF0PTAKCiBndWVzdF9zeW5jX2NvbXBhdDoKICAgICAgICAgZW50 cnkgICBoeXA9MCwgY29tcGF0PTEKQEAgLTIyNSw5ICsyMjgsMTIgQEAgZ3Vl c3RfZmlxX2ludmFsaWRfY29tcGF0OgogICAgICAgICBlbnRyeSAgIGh5cD0w LCBjb21wYXQ9MQogICAgICAgICBpbnZhbGlkIEJBRF9GSVEKCi1ndWVzdF9l cnJvcl9pbnZhbGlkX2NvbXBhdDoKK2d1ZXN0X2Vycm9yX2NvbXBhdDoKICAg ICAgICAgZW50cnkgICBoeXA9MCwgY29tcGF0PTEKLSAgICAgICAgaW52YWxp ZCBCQURfRVJST1IKKyAgICAgICAgbXNyICAgICBkYWlmY2xyLCAjMgorICAg ICAgICBtb3YgICAgIHgwLCBzcAorICAgICAgICBibCAgICAgIGRvX3RyYXBf Z3Vlc3RfZXJyb3IKKyAgICAgICAgZXhpdCAgICBoeXA9MCwgY29tcGF0PTEK CiBFTlRSWShyZXR1cm5fdG9fbmV3X3ZjcHUzMikKICAgICAgICAgZXhpdCAg ICBoeXA9MCwgY29tcGF0PTEKQEAgLTI4NiwxMiArMjkyLDEyIEBAIEVOVFJZ KGh5cF90cmFwc192ZWN0b3IpCiAgICAgICAgIHZlbnRyeSAgZ3Vlc3Rfc3lu YyAgICAgICAgICAgICAgICAgICAgICAvLyBTeW5jaHJvbm91cyA2NC1iaXQg RUwwL0VMMQogICAgICAgICB2ZW50cnkgIGd1ZXN0X2lycSAgICAgICAgICAg ICAgICAgICAgICAgLy8gSVJRIDY0LWJpdCBFTDAvRUwxCiAgICAgICAgIHZl bnRyeSAgZ3Vlc3RfZmlxX2ludmFsaWQgICAgICAgICAgICAgICAvLyBGSVEg NjQtYml0IEVMMC9FTDEKLSAgICAgICAgdmVudHJ5ICBndWVzdF9lcnJvcl9p bnZhbGlkICAgICAgICAgICAgIC8vIEVycm9yIDY0LWJpdCBFTDAvRUwxCisg ICAgICAgIHZlbnRyeSAgZ3Vlc3RfZXJyb3IgICAgICAgICAgICAgICAgICAg ICAvLyBFcnJvciA2NC1iaXQgRUwwL0VMMQoKICAgICAgICAgdmVudHJ5ICBn dWVzdF9zeW5jX2NvbXBhdCAgICAgICAgICAgICAgIC8vIFN5bmNocm9ub3Vz IDMyLWJpdCBFTDAvRUwxCiAgICAgICAgIHZlbnRyeSAgZ3Vlc3RfaXJxX2Nv bXBhdCAgICAgICAgICAgICAgICAvLyBJUlEgMzItYml0IEVMMC9FTDEKICAg ICAgICAgdmVudHJ5ICBndWVzdF9maXFfaW52YWxpZF9jb21wYXQgICAgICAg IC8vIEZJUSAzMi1iaXQgRUwwL0VMMQotICAgICAgICB2ZW50cnkgIGd1ZXN0 X2Vycm9yX2ludmFsaWRfY29tcGF0ICAgICAgLy8gRXJyb3IgMzItYml0IEVM MC9FTDEKKyAgICAgICAgdmVudHJ5ICBndWVzdF9lcnJvcl9jb21wYXQgICAg ICAgICAgICAgIC8vIEVycm9yIDMyLWJpdCBFTDAvRUwxCgogLyoKICAqIHN0 cnVjdCB2Y3B1ICpfX2NvbnRleHRfc3dpdGNoKHN0cnVjdCB2Y3B1ICpwcmV2 LCBzdHJ1Y3QgdmNwdSAqbmV4dCkKLS0tIGEveGVuL2FyY2gvYXJtL3RyYXBz LmMKKysrIGIveGVuL2FyY2gvYXJtL3RyYXBzLmMKQEAgLTI3MjMsNiArMjcy MywyMSBAQCBhc21saW5rYWdlIHZvaWQgZG9fdHJhcF9oeXBlcnZpc29yKHN0 cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQogICAgIH0KIH0KCithc21saW5r YWdlIHZvaWQgZG9fdHJhcF9ndWVzdF9lcnJvcihzdHJ1Y3QgY3B1X3VzZXJf cmVncyAqcmVncykKK3sKKyAgICBlbnRlcl9oeXBlcnZpc29yX2hlYWQocmVn cyk7CisKKyAgICAvKgorICAgICAqIEN1cnJlbnRseSwgdG8gZW5zdXJlIGh5 cGVydmlzb3Igc2FmZXR5LCB3aGVuIHdlIHJlY2VpdmVkIGEKKyAgICAgKiBn dWVzdC1nZW5lcmF0ZWQgdlNlcnJvci92QWJvcnQsIHdlIGp1c3QgY3Jhc2gg dGhlIGd1ZXN0IHRvIHByb3RlY3QKKyAgICAgKiB0aGUgaHlwZXJ2aXNvci4g SW4gZnV0dXJlIHdlIGNhbiBiZXR0ZXIgaGFuZGxlIHRoaXMgYnkgaW5qZWN0 aW5nCisgICAgICogYSB2U2Vycm9yL3ZBYm9ydCB0byB0aGUgZ3Vlc3QuCisg ICAgICovCisgICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJHdWVzdChE b20tJXUpIHdpbGwgYmUgY3Jhc2hlZCBieSB2U0Vycm9yXG4iLAorICAgICAg ICAgICAgIGN1cnJlbnQtPmRvbWFpbi0+ZG9tYWluX2lkKTsKKyAgICBkb21h aW5fY3Jhc2hfc3luY2hyb25vdXMoKTsKK30KKwogYXNtbGlua2FnZSB2b2lk IGRvX3RyYXBfaXJxKHN0cnVjdCBjcHVfdXNlcl9yZWdzICpyZWdzKQogewog ICAgIGVudGVyX2h5cGVydmlzb3JfaGVhZChyZWdzKTsK --=separator Content-Type: application/octet-stream; name="xsa201-2.patch" Content-Disposition: attachment; filename="xsa201-2.patch" Content-Transfer-Encoding: base64 RnJvbTogV2VpIENoZW4gPFdlaS5DaGVuQGFybS5jb20+ClN1YmplY3Q6IGFy bTY0OiBoYW5kbGUgYXN5bmMgYWJvcnRzIGRlbGl2ZXJlZCB3aGlsZSBhdCBF TDIKCklmIEVMMSBnZW5lcmF0ZXMgYW4gYXN5bmNocm9ub3VzIGFib3J0IGFu ZCB0aGVuIHRyYXBzIGludG8gRUwyCihieSBIVkMgb3IgSVJRKSBiZWZvcmUg dGhlIGFib3J0IGhhcyBiZWVuIGRlbGl2ZXJlZCwgdGhlIGh5cGVydmlzb3IK Y291bGQgbm90IGNhdGNoIGl0LCBiZWNhdXNlIHRoZSBQU1RBVEUuQSBiaXQg aXMgbWFza2VkIGFsbCB0aGUgdGltZQppbiBoeXBlcnZpc29yLiBTbyB0aGlz IGFzeW5jaHJvbm91cyBhYm9ydCBtYXkgYmUgc2xpcHBlZCB0byBuZXh0CnJ1 bm5pbmcgZ3Vlc3Qgd2l0aCBQU1RBVEUuQSBiaXQgdW5tYXNrZWQuCgpJbiBv cmRlciB0byBhdm9pZCB0aGlzLCBpdCBpcyBuZWNlc3NhcnkgdG8gdGFrZSB0 aGUgYWJvcnQgYXQgRUwyLCBieQpjbGVhcmluZyB0aGUgUFNUQVRFLkEgYml0 LiBJbiB0aGlzIHBhdGNoLCB3ZSB1bm1hc2sgdGhlIFBTVEFURS5BIGJpdAp0 byBvcGVuIGEgd2luZG93IHRvIGNhdGNoIGd1ZXN0LWdlbmVyYXRlZCBhc3lu Y2hyb25vdXMgYWJvcnQgaW4gYWxsCkVMMSAtPiBFTDIgc3dpY2ggcGF0aHMu IElmIHdlIGNhdGNoZWQgc3VjaCBhc3luY2hyb25vdXMgYWJvcnQgaW4KY2hl Y2tpbmcgd2luZG93LCB0aGUgaHlwX2Vycm9yIGV4Y2VwdGlvbiB3aWxsIGJl IHRyaWdnZXJlZCBhbmQgdGhlCmFib3J0IHNvdXJjZSBndWVzdCB3aWxsIGJl IGNyYXNoZWQuCgpUaGlzIGlzIENWRS0yMDE2LTk4MTYsIHBhcnQgb2YgWFNB LTIwMS4KClNpZ25lZC1vZmYtYnk6IFdlaSBDaGVuIDxXZWkuQ2hlbkBhcm0u Y29tPgpSZXZpZXdlZC1ieTogSnVsaWVuIEdyYWxsIDxqdWxpZW4uZ3JhbGxA YXJtLmNvbT4KCi0tLSBhL3hlbi9hcmNoL2FybS9hcm02NC9lbnRyeS5TCisr KyBiL3hlbi9hcmNoL2FybS9hcm02NC9lbnRyeS5TCkBAIC0xNzMsNiArMTcz LDQzIEBAIGh5cF9lcnJvcl9pbnZhbGlkOgogICAgICAgICBlbnRyeSAgIGh5 cD0xCiAgICAgICAgIGludmFsaWQgQkFEX0VSUk9SCgoraHlwX2Vycm9yOgor ICAgICAgICAvKgorICAgICAgICAgKiBPbmx5IHR3byBwb3NzaWJpbGl0aWVz OgorICAgICAgICAgKiAxKSBFaXRoZXIgd2UgY29tZSBmcm9tIHRoZSBleGl0 IHBhdGgsIGhhdmluZyBqdXN0IHVubWFza2VkCisgICAgICAgICAqICAgIFBT VEFURS5BOiBjaGFuZ2UgdGhlIHJldHVybiBjb2RlIHRvIGFuIEVMMiBmYXVs dCwgYW5kCisgICAgICAgICAqICAgIGNhcnJ5IG9uLCBhcyB3ZSdyZSBhbHJl YWR5IGluIGEgc2FuZSBzdGF0ZSB0byBoYW5kbGUgaXQuCisgICAgICAgICAq IDIpIE9yIHdlIGNvbWUgZnJvbSBhbnl3aGVyZSBlbHNlLCBhbmQgdGhhdCdz IGEgYnVnOiB3ZSBwYW5pYy4KKyAgICAgICAgICovCisgICAgICAgIGVudHJ5 ICAgaHlwPTEKKyAgICAgICAgbXNyICAgICBkYWlmY2xyLCAjMgorCisgICAg ICAgIC8qCisgICAgICAgICAqIFRoZSBFTFJfRUwyIG1heSBiZSBtb2RpZmll ZCBieSBhbiBpbnRlcnJ1cHQsIHNvIHdlIGhhdmUgdG8gdXNlIHRoZQorICAg ICAgICAgKiBzYXZlZCB2YWx1ZSBpbiBjcHVfdXNlcl9yZWdzIHRvIGNoZWNr IHdoZXRoZXIgd2UgY29tZSBmcm9tIDEpIG9yCisgICAgICAgICAqIG5vdC4K KyAgICAgICAgICovCisgICAgICAgIGxkciAgICAgeDAsIFtzcCwgI1VSRUdT X1BDXQorICAgICAgICBhZHIgICAgIHgxLCBhYm9ydF9ndWVzdF9leGl0X3N0 YXJ0CisgICAgICAgIGNtcCAgICAgeDAsIHgxCisgICAgICAgIGFkciAgICAg eDEsIGFib3J0X2d1ZXN0X2V4aXRfZW5kCisgICAgICAgIGNjbXAgICAgeDAs IHgxLCAjNCwgbmUKKyAgICAgICAgbW92ICAgICB4MCwgc3AKKyAgICAgICAg bW92ICAgICB4MSwgI0JBRF9FUlJPUgorCisgICAgICAgIC8qCisgICAgICAg ICAqIE5vdCBlcXVhbCwgdGhlIGV4Y2VwdGlvbiBjb21lIGZyb20gMikuIEl0 J3MgYSBidWcsIHdlIGhhdmUgdG8KKyAgICAgICAgICogcGFuaWMgdGhlIGh5 cGVydmlzb3IuCisgICAgICAgICAqLworICAgICAgICBiLm5lICAgIGRvX2Jh ZF9tb2RlCisKKyAgICAgICAgLyoKKyAgICAgICAgICogT3RoZXJ3aXNlLCB0 aGUgZXhjZXB0aW9uIGNvbWUgZnJvbSAxKS4gSXQgaGFwcGVuZWQgYmVjYXVz ZSBvZgorICAgICAgICAgKiB0aGUgZ3Vlc3QuIENyYXNoIHRoaXMgZ3Vlc3Qu CisgICAgICAgICAqLworICAgICAgICBibCAgICAgIGRvX3RyYXBfZ3Vlc3Rf ZXJyb3IKKyAgICAgICAgZXhpdCAgICBoeXA9MQorCiAvKiBUcmFwcyB0YWtl biBpbiBDdXJyZW50IEVMIHdpdGggU1BfRUx4ICovCiBoeXBfc3luYzoKICAg ICAgICAgZW50cnkgICBoeXA9MQpAQCAtMTg5LDE1ICsyMjYsMjkgQEAgaHlw X2lycToKCiBndWVzdF9zeW5jOgogICAgICAgICBlbnRyeSAgIGh5cD0wLCBj b21wYXQ9MAorICAgICAgICBibCAgICAgIGNoZWNrX3BlbmRpbmdfdnNlcnJv cgorICAgICAgICAvKgorICAgICAgICAgKiBJZiB4MCBpcyBOb24temVybywg YSB2U0Vycm9yIHRvb2sgcGxhY2UsIHRoZSBpbml0aWFsIGV4Y2VwdGlvbgor ICAgICAgICAgKiBkb2Vzbid0IGhhdmUgYW55IHNpZ25pZmljYW5jZSB0byBi ZSBoYW5kbGVkLiBFeGl0IEFTQVAKKyAgICAgICAgICovCisgICAgICAgIGNi bnogICAgeDAsIDFmCiAgICAgICAgIG1zciAgICAgZGFpZmNsciwgIzIKICAg ICAgICAgbW92ICAgICB4MCwgc3AKICAgICAgICAgYmwgICAgICBkb190cmFw X2h5cGVydmlzb3IKKzE6CiAgICAgICAgIGV4aXQgICAgaHlwPTAsIGNvbXBh dD0wCgogZ3Vlc3RfaXJxOgogICAgICAgICBlbnRyeSAgIGh5cD0wLCBjb21w YXQ9MAorICAgICAgICBibCAgICAgIGNoZWNrX3BlbmRpbmdfdnNlcnJvcgor ICAgICAgICAvKgorICAgICAgICAgKiBJZiB4MCBpcyBOb24temVybywgYSB2 U0Vycm9yIHRvb2sgcGxhY2UsIHRoZSBpbml0aWFsIGV4Y2VwdGlvbgorICAg ICAgICAgKiBkb2Vzbid0IGhhdmUgYW55IHNpZ25pZmljYW5jZSB0byBiZSBo YW5kbGVkLiBFeGl0IEFTQVAKKyAgICAgICAgICovCisgICAgICAgIGNibnog ICAgeDAsIDFmCiAgICAgICAgIG1vdiAgICAgeDAsIHNwCiAgICAgICAgIGJs ICAgICAgZG9fdHJhcF9pcnEKKzE6CiAgICAgICAgIGV4aXQgICAgaHlwPTAs IGNvbXBhdD0wCgogZ3Vlc3RfZmlxX2ludmFsaWQ6CkBAIC0yMTMsMTUgKzI2 NCwyOSBAQCBndWVzdF9lcnJvcjoKCiBndWVzdF9zeW5jX2NvbXBhdDoKICAg ICAgICAgZW50cnkgICBoeXA9MCwgY29tcGF0PTEKKyAgICAgICAgYmwgICAg ICBjaGVja19wZW5kaW5nX3ZzZXJyb3IKKyAgICAgICAgLyoKKyAgICAgICAg ICogSWYgeDAgaXMgTm9uLXplcm8sIGEgdlNFcnJvciB0b29rIHBsYWNlLCB0 aGUgaW5pdGlhbCBleGNlcHRpb24KKyAgICAgICAgICogZG9lc24ndCBoYXZl IGFueSBzaWduaWZpY2FuY2UgdG8gYmUgaGFuZGxlZC4gRXhpdCBBU0FQCisg ICAgICAgICAqLworICAgICAgICBjYm56ICAgIHgwLCAxZgogICAgICAgICBt c3IgICAgIGRhaWZjbHIsICMyCiAgICAgICAgIG1vdiAgICAgeDAsIHNwCiAg ICAgICAgIGJsICAgICAgZG9fdHJhcF9oeXBlcnZpc29yCisxOgogICAgICAg ICBleGl0ICAgIGh5cD0wLCBjb21wYXQ9MQoKIGd1ZXN0X2lycV9jb21wYXQ6 CiAgICAgICAgIGVudHJ5ICAgaHlwPTAsIGNvbXBhdD0xCisgICAgICAgIGJs ICAgICAgY2hlY2tfcGVuZGluZ192c2Vycm9yCisgICAgICAgIC8qCisgICAg ICAgICAqIElmIHgwIGlzIE5vbi16ZXJvLCBhIHZTRXJyb3IgdG9vayBwbGFj ZSwgdGhlIGluaXRpYWwgZXhjZXB0aW9uCisgICAgICAgICAqIGRvZXNuJ3Qg aGF2ZSBhbnkgc2lnbmlmaWNhbmNlIHRvIGJlIGhhbmRsZWQuIEV4aXQgQVNB UAorICAgICAgICAgKi8KKyAgICAgICAgY2JueiAgICB4MCwgMWYKICAgICAg ICAgbW92ICAgICB4MCwgc3AKICAgICAgICAgYmwgICAgICBkb190cmFwX2ly cQorMToKICAgICAgICAgZXhpdCAgICBoeXA9MCwgY29tcGF0PTEKCiBndWVz dF9maXFfaW52YWxpZF9jb21wYXQ6CkBAIC0yNzAsNiArMzM1LDYyIEBAIHJl dHVybl9mcm9tX3RyYXA6CiAgICAgICAgIGVyZXQKCiAvKgorICogVGhpcyBm dW5jdGlvbiBpcyB1c2VkIHRvIGNoZWNrIHBlbmRpbmcgdmlydHVhbCBTRXJy b3IgaW4gdGhlIGdhcCBvZgorICogRUwxIC0+IEVMMiB3b3JsZCBzd2l0Y2gu CisgKiBUaGUgeDAgcmVnaXN0ZXIgd2lsbCBiZSB1c2VkIHRvIGluZGljYXRl IHRoZSByZXN1bHRzIG9mIGRldGVjdGlvbi4KKyAqIHgwIC0tIE5vbi16ZXJv IGluZGljYXRlcyBhIHBlbmRpbmcgdmlydHVhbCBTRXJyb3IgdG9vayBwbGFj ZS4KKyAqIHgwIC0tIFplcm8gaW5kaWNhdGVzIG5vIHBlbmRpbmcgdmlydHVh bCBTRXJyb3IgdG9vayBwbGFjZS4KKyAqLworY2hlY2tfcGVuZGluZ192c2Vy cm9yOgorICAgICAgICAvKgorICAgICAgICAgKiBTYXZlIGVscl9lbDIgdG8g Y2hlY2sgd2hldGhlciB0aGUgcGVuZGluZyBTRXJyb3IgZXhjZXB0aW9uIHRh a2VzCisgICAgICAgICAqIHBsYWNlIHdoaWxlIHdlIGFyZSBkb2luZyB0aGlz IHN5bmMgZXhjZXB0aW9uLgorICAgICAgICAgKi8KKyAgICAgICAgbXJzICAg ICB4MCwgZWxyX2VsMgorCisgICAgICAgIC8qIFN5bmNocm9uaXplIGFnYWlu c3QgaW4tZmxpZ2h0IGxkL3N0ICovCisgICAgICAgIGRzYiAgICAgc3kKKwor ICAgICAgICAvKgorICAgICAgICAgKiBVbm1hc2sgUFNUQVRFIGFzeW5jaHJv bm91cyBhYm9ydCBiaXQuIElmIHRoZXJlIGlzIGEgcGVuZGluZworICAgICAg ICAgKiBTRXJyb3IsIHRoZSBFTDIgZXJyb3IgZXhjZXB0aW9uIHdpbGwgaGFw cGVuIGFmdGVyIFBTVEFURS5BCisgICAgICAgICAqIGlzIGNsZWFyZWQuCisg ICAgICAgICAqLworICAgICAgICBtc3IgICAgIGRhaWZjbHIsICM0CisKKyAg ICAgICAgLyoKKyAgICAgICAgICogVGhpcyBpcyBvdXIgc2luZ2xlIGluc3Ry dWN0aW9uIGV4Y2VwdGlvbiB3aW5kb3cuIEEgcGVuZGluZworICAgICAgICAg KiBTRXJyb3IgaXMgZ3VhcmFudGVlZCB0byBvY2N1ciBhdCB0aGUgZWFybGll c3Qgd2hlbiB3ZSB1bm1hc2sKKyAgICAgICAgICogaXQsIGFuZCBhdCB0aGUg bGF0ZXN0IGp1c3QgYWZ0ZXIgdGhlIElTQi4KKyAgICAgICAgICoKKyAgICAg ICAgICogSWYgYSBwZW5kaW5nIFNFcnJvciBvY2N1cnMsIHRoZSBwcm9ncmFt IHdpbGwganVtcCB0byBFTDIgZXJyb3IKKyAgICAgICAgICogZXhjZXB0aW9u IGhhbmRsZXIsIGFuZCB0aGUgZWxyX2VsMiB3aWxsIGJlIHNldCB0bworICAg ICAgICAgKiBhYm9ydF9ndWVzdF9leGl0X3N0YXJ0IG9yIGFib3J0X2d1ZXN0 X2V4aXRfZW5kLgorICAgICAgICAgKi8KK2Fib3J0X2d1ZXN0X2V4aXRfc3Rh cnQ6CisKKyAgICAgICAgaXNiCisKK2Fib3J0X2d1ZXN0X2V4aXRfZW5kOgor ICAgICAgICAvKiBNYXNrIFBTVEFURSBhc3luY2hyb25vdXMgYWJvcnQgYml0 LCBjbG9zZSB0aGUgY2hlY2tpbmcgd2luZG93LiAqLworICAgICAgICBtc3Ig ICAgIGRhaWZzZXQsICM0CisKKyAgICAgICAgLyoKKyAgICAgICAgICogQ29t cGFyZSBlbHJfZWwyIGFuZCB0aGUgc2F2ZWQgdmFsdWUgdG8gY2hlY2sgd2hl dGhlciB3ZSBhcmUKKyAgICAgICAgICogcmV0dXJuaW5nIGZyb20gYSB2YWxp ZCBleGNlcHRpb24gY2F1c2VkIGJ5IHBlbmRpbmcgU0Vycm9yLgorICAgICAg ICAgKi8KKyAgICAgICAgbXJzICAgICB4MSwgZWxyX2VsMgorICAgICAgICBj bXAgICAgIHgwLCB4MQorCisgICAgICAgIC8qCisgICAgICAgICAqIE5vdCBl cXVhbCwgdGhlIHBlbmRpbmcgU0Vycm9yIGV4Y2VwdGlvbiB0b29rIHBsYWNl LCBzZXQKKyAgICAgICAgICogeDAgdG8gbm9uLXplcm8uCisgICAgICAgICAq LworICAgICAgICBjc2V0ICAgIHgwLCBuZQorCisgICAgICAgIHJldAorCisv KgogICogRXhjZXB0aW9uIHZlY3RvcnMuCiAgKi8KICAgICAgICAgLm1hY3Jv ICB2ZW50cnkgIGxhYmVsCkBAIC0yODcsNyArNDA4LDcgQEAgRU5UUlkoaHlw X3RyYXBzX3ZlY3RvcikKICAgICAgICAgdmVudHJ5ICBoeXBfc3luYyAgICAg ICAgICAgICAgICAgICAgICAgIC8vIFN5bmNocm9ub3VzIEVMMmgKICAgICAg ICAgdmVudHJ5ICBoeXBfaXJxICAgICAgICAgICAgICAgICAgICAgICAgIC8v IElSUSBFTDJoCiAgICAgICAgIHZlbnRyeSAgaHlwX2ZpcV9pbnZhbGlkICAg ICAgICAgICAgICAgICAvLyBGSVEgRUwyaAotICAgICAgICB2ZW50cnkgIGh5 cF9lcnJvcl9pbnZhbGlkICAgICAgICAgICAgICAgLy8gRXJyb3IgRUwyaAor ICAgICAgICB2ZW50cnkgIGh5cF9lcnJvciAgICAgICAgICAgICAgICAgICAg ICAgLy8gRXJyb3IgRUwyaAoKICAgICAgICAgdmVudHJ5ICBndWVzdF9zeW5j ICAgICAgICAgICAgICAgICAgICAgIC8vIFN5bmNocm9ub3VzIDY0LWJpdCBF TDAvRUwxCiAgICAgICAgIHZlbnRyeSAgZ3Vlc3RfaXJxICAgICAgICAgICAg ICAgICAgICAgICAvLyBJUlEgNjQtYml0IEVMMC9FTDEK --=separator Content-Type: application/octet-stream; name="xsa201-3.patch" Content-Disposition: attachment; filename="xsa201-3.patch" Content-Transfer-Encoding: base64 RnJvbTogV2VpIENoZW4gPFdlaS5DaGVuQGFybS5jb20+ClN1YmplY3Q6IGFy bTogY3Jhc2ggdGhlIGd1ZXN0IHdoZW4gaXQgdHJhcHMgb24gZXh0ZXJuYWwg YWJvcnQKCklmIHdlIHNwb3QgYSBkYXRhIG9yIHByZWZldGNoIGFib3J0IGJl YXJpbmcgdGhlIEVTUl9FTDIuRUEgYml0IHNldCwgd2UKa25vdyB0aGF0IHRo aXMgaXMgYW4gZXh0ZXJuYWwgYWJvcnQsIGFuZCB0aGF0IHNob3VsZCBjcmFz aCB0aGUgZ3Vlc3QuCgpUaGlzIGlzIENWRS0yMDE2LTk4MTcsIHBhcnQgb2Yg WFNBLTIwMS4KClNpZ25lZC1vZmYtYnk6IFdlaSBDaGVuIDxXZWkuQ2hlbkBh cm0uY29tPgpSZXZpZXdlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3Rh YmVsbGluaUBrZXJuZWwub3JnPgpSZXZpZXdlZC1ieTogU3RldmUgQ2FwcGVy IDxzdGV2ZS5jYXBwZXJAYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IEp1bGllbiBH cmFsbCA8SnVsaWVuLkdyYWxsQGFybS5jb20+CgotLS0gYS94ZW4vYXJjaC9h cm0vdHJhcHMuYworKysgYi94ZW4vYXJjaC9hcm0vdHJhcHMuYwpAQCAtMjQw OSw2ICsyNDA5LDE1IEBAIHN0YXRpYyB2b2lkIGRvX3RyYXBfaW5zdHJfYWJv cnRfZ3Vlc3Qoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MsCiAgICAgcGFk ZHJfdCBncGE7CiAgICAgbWZuX3QgbWZuOwoKKyAgICAvKgorICAgICAqIElm IHRoaXMgYml0IGhhcyBiZWVuIHNldCwgaXQgbWVhbnMgdGhhdCB0aGlzIGlu c3RydWN0aW9uIGFib3J0IGlzIGNhdXNlZAorICAgICAqIGJ5IGEgZ3Vlc3Qg ZXh0ZXJuYWwgYWJvcnQuIEN1cnJlbnRseSB3ZSBjcmFzaCB0aGUgZ3Vlc3Qg dG8gcHJvdGVjdCB0aGUKKyAgICAgKiBoeXBlcnZpc29yLiBJbiBmdXR1cmUg b25lIGNhbiBiZXR0ZXIgaGFuZGxlIHRoaXMgYnkgaW5qZWN0aW5nIGEgdmly dHVhbAorICAgICAqIGFib3J0IHRvIHRoZSBndWVzdC4KKyAgICAgKi8KKyAg ICBpZiAoIGhzci5pYWJ0LmVhdCApCisgICAgICAgIGRvbWFpbl9jcmFzaF9z eW5jaHJvbm91cygpOworCiAgICAgaWYgKCBocGZhcl9pc192YWxpZChoc3Iu aWFidC5zMXB0dywgZnNjKSApCiAgICAgICAgIGdwYSA9IGdldF9mYXVsdGlu Z19pcGEoZ3ZhKTsKICAgICBlbHNlCkBAIC0yNTAzLDYgKzI1MTIsMTUgQEAg c3RhdGljIHZvaWQgZG9fdHJhcF9kYXRhX2Fib3J0X2d1ZXN0KHN0cnVjdCBj cHVfdXNlcl9yZWdzICpyZWdzLAogICAgIHVpbnQ4X3QgZnNjID0gaHNyLmRh YnQuZGZzYyAmIH5GU0NfTExfTUFTSzsKICAgICBtZm5fdCBtZm47CgorICAg IC8qCisgICAgICogSWYgdGhpcyBiaXQgaGFzIGJlZW4gc2V0LCBpdCBtZWFu cyB0aGF0IHRoaXMgZGF0YSBhYm9ydCBpcyBjYXVzZWQKKyAgICAgKiBieSBh IGd1ZXN0IGV4dGVybmFsIGFib3J0LiBDdXJyZW50bHkgd2UgY3Jhc2ggdGhl IGd1ZXN0IHRvIHByb3RlY3QgdGhlCisgICAgICogaHlwZXJ2aXNvci4gSW4g ZnV0dXJlIG9uZSBjYW4gYmV0dGVyIGhhbmRsZSB0aGlzIGJ5IGluamVjdGlu ZyBhIHZpcnR1YWwKKyAgICAgKiBhYm9ydCB0byB0aGUgZ3Vlc3QuCisgICAg ICovCisgICAgaWYgKCBkYWJ0LmVhdCApCisgICAgICAgIGRvbWFpbl9jcmFz aF9zeW5jaHJvbm91cygpOworCiAgICAgaW5mby5kYWJ0ID0gZGFidDsKICNp ZmRlZiBDT05GSUdfQVJNXzMyCiAgICAgaW5mby5ndmEgPSBSRUFEX0NQMzIo SERGQVIpOwo= --=separator Content-Type: application/octet-stream; name="xsa201-3-4.7.patch" Content-Disposition: attachment; filename="xsa201-3-4.7.patch" Content-Transfer-Encoding: base64 RnJvbTogV2VpIENoZW4gPFdlaS5DaGVuQGFybS5jb20+ClN1YmplY3Q6IGFy bTogY3Jhc2ggdGhlIGd1ZXN0IHdoZW4gaXQgdHJhcHMgb24gZXh0ZXJuYWwg YWJvcnQKCklmIHdlIHNwb3QgYSBkYXRhIG9yIHByZWZldGNoIGFib3J0IGJl YXJpbmcgdGhlIEVTUl9FTDIuRUEgYml0IHNldCwgd2UKa25vdyB0aGF0IHRo aXMgaXMgYW4gZXh0ZXJuYWwgYWJvcnQsIGFuZCB0aGF0IHNob3VsZCBjcmFz aCB0aGUgZ3Vlc3QuCgpUaGlzIGlzIENWRS0yMDE2LTk4MTcsIHBhcnQgb2Yg WFNBLTIwMS4KClNpZ25lZC1vZmYtYnk6IFdlaSBDaGVuIDxXZWkuQ2hlbkBh cm0uY29tPgpSZXZpZXdlZC1ieTogU3RlZmFubyBTdGFiZWxsaW5pIDxzc3Rh YmVsbGluaUBrZXJuZWwub3JnPgpSZXZpZXdlZC1ieTogU3RldmUgQ2FwcGVy IDxzdGV2ZS5jYXBwZXJAYXJtLmNvbT4KUmV2aWV3ZWQtYnk6IEp1bGllbiBH cmFsbCA8SnVsaWVuLkdyYWxsQGFybS5jb20+CgotLS0gYS94ZW4vYXJjaC9h cm0vdHJhcHMuYworKysgYi94ZW4vYXJjaC9hcm0vdHJhcHMuYwpAQCAtMjM4 Myw2ICsyMzgzLDE1IEBAIHN0YXRpYyB2b2lkIGRvX3RyYXBfaW5zdHJfYWJv cnRfZ3Vlc3Qoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MsCiAgICAgaW50 IHJjOwogICAgIHJlZ2lzdGVyX3QgZ3ZhID0gUkVBRF9TWVNSRUcoRkFSX0VM Mik7CiAKKyAgICAvKgorICAgICAqIElmIHRoaXMgYml0IGhhcyBiZWVuIHNl dCwgaXQgbWVhbnMgdGhhdCB0aGlzIGluc3RydWN0aW9uIGFib3J0IGlzIGNh dXNlZAorICAgICAqIGJ5IGEgZ3Vlc3QgZXh0ZXJuYWwgYWJvcnQuIEN1cnJl bnRseSB3ZSBjcmFzaCB0aGUgZ3Vlc3QgdG8gcHJvdGVjdCB0aGUKKyAgICAg KiBoeXBlcnZpc29yLiBJbiBmdXR1cmUgb25lIGNhbiBiZXR0ZXIgaGFuZGxl IHRoaXMgYnkgaW5qZWN0aW5nIGEgdmlydHVhbAorICAgICAqIGFib3J0IHRv IHRoZSBndWVzdC4KKyAgICAgKi8KKyAgICBpZiAoIGhzci5pYWJ0LmVhdCAp CisgICAgICAgIGRvbWFpbl9jcmFzaF9zeW5jaHJvbm91cygpOworCiAgICAg c3dpdGNoICggaHNyLmlhYnQuaWZzYyAmIDB4M2YgKQogICAgIHsKICAgICBj YXNlIEZTQ19GTFRfUEVSTSAuLi4gRlNDX0ZMVF9QRVJNICsgMzoKQEAgLTI0 MzcsNiArMjQ0NiwxNSBAQCBzdGF0aWMgdm9pZCBkb190cmFwX2RhdGFfYWJv cnRfZ3Vlc3Qoc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJlZ3MsCiAgICAgICAg IHJldHVybjsKICAgICB9CiAKKyAgICAvKgorICAgICAqIElmIHRoaXMgYml0 IGhhcyBiZWVuIHNldCwgaXQgbWVhbnMgdGhhdCB0aGlzIGRhdGEgYWJvcnQg aXMgY2F1c2VkCisgICAgICogYnkgYSBndWVzdCBleHRlcm5hbCBhYm9ydC4g Q3VycmVudGx5IHdlIGNyYXNoIHRoZSBndWVzdCB0byBwcm90ZWN0IHRoZQor ICAgICAqIGh5cGVydmlzb3IuIEluIGZ1dHVyZSBvbmUgY2FuIGJldHRlciBo YW5kbGUgdGhpcyBieSBpbmplY3RpbmcgYSB2aXJ0dWFsCisgICAgICogYWJv cnQgdG8gdGhlIGd1ZXN0LgorICAgICAqLworICAgIGlmICggZGFidC5lYXQg KQorICAgICAgICBkb21haW5fY3Jhc2hfc3luY2hyb25vdXMoKTsKKwogICAg IGluZm8uZGFidCA9IGRhYnQ7CiAjaWZkZWYgQ09ORklHX0FSTV8zMgogICAg IGluZm8uZ3ZhID0gUkVBRF9DUDMyKEhERkFSKTsK --=separator Content-Type: application/octet-stream; name="xsa201-4.patch" Content-Disposition: attachment; filename="xsa201-4.patch" Content-Transfer-Encoding: base64 RnJvbTogV2VpIENoZW4gPFdlaS5DaGVuQGFybS5jb20+ClN1YmplY3Q6IGFy bTMyOiBoYW5kbGUgYXN5bmMgYWJvcnRzIGRlbGl2ZXJlZCB3aGlsZSBhdCBI WVAKCklmIGd1ZXN0IGdlbmVyYXRlcyBhbiBhc3luY2hyb25vdXMgYWJvcnQg YW5kIHRoZW4gdHJhcHMgaW50byBIWVAKKGJ5IEhWQyBvciBJUlEpIGJlZm9y ZSB0aGUgYWJvcnQgaGFzIGJlZW4gZGVsaXZlcmVkLCB0aGUgaHlwZXJ2aXNv cgpjb3VsZCBub3QgY2F0Y2ggaXQsIGJlY2F1c2UgdGhlIFBTVEFURS5BIGJp dCBpcyBtYXNrZWQgYWxsIHRoZSB0aW1lCmluIGh5cGVydmlzb3IuIFNvIHRo aXMgYXN5bmNocm9ub3VzIGFib3J0IG1heSBiZSBzbGlwcGVkIHRvIG5leHQK cnVubmluZyBndWVzdCB3aXRoIFBTVEFURS5BIGJpdCB1bm1hc2tlZC4KCklu IG9yZGVyIHRvIGF2b2lkIHRoaXMsIGl0IGlzIG5lY2Vzc2FyeSB0byB0YWtl IHRoZSBhYm9ydCBhdCBIWVAsIGJ5CmNsZWFyaW5nIHRoZSBQU1RBVEUuQSBi aXQuIEluIHRoaXMgcGF0Y2gsIHdlIHVubWFzayB0aGUgUFNUQVRFLkEgYml0 CnRvIG9wZW4gYSB3aW5kb3cgdG8gY2F0Y2ggZ3Vlc3QtZ2VuZXJhdGVkIGFz eW5jaHJvbm91cyBhYm9ydCBpbiBhbGwKR3Vlc3QgLT4gSFlQIHN3aXRjaCBw YXRocy4gSWYgd2UgY2F1Z2h0IHN1Y2ggYXN5bmNocm9ub3VzIGFib3J0IGlu CmNoZWNraW5nIHdpbmRvdywgdGhlIEhZUCBkYXRhIGFib3J0IGV4Y2VwdGlv biB3aWxsIGJlIHRyaWdnZXJlZCBhbmQKdGhlIGFib3J0IHNvdXJjZSBndWVz dCB3aWxsIGJlIGNyYXNoZWQuCgpUaGlzIGlzIENWRS0yMDE2LTk4MTgsIHBh cnQgb2YgWFNBLTIwMS4KClNpZ25lZC1vZmYtYnk6IFdlaSBDaGVuIDxXZWku Q2hlbkBhcm0uY29tPgpSZXZpZXdlZC1ieTogSnVsaWVuIEdyYWxsIDxqdWxp ZW4uZ3JhbGxAYXJtLmNvbT4KCi0tLSBhL3hlbi9hcmNoL2FybS9hcm0zMi9l bnRyeS5TCisrKyBiL3hlbi9hcmNoL2FybS9hcm0zMi9lbnRyeS5TCkBAIC00 Miw2ICs0Miw2MSBAQCBzYXZlX2d1ZXN0X3JlZ3M6CiAgICAgICAgIFNBVkVf QkFOS0VEKGZpcSkKICAgICAgICAgU0FWRV9PTkVfQkFOS0VEKFI4X2ZpcSk7 IFNBVkVfT05FX0JBTktFRChSOV9maXEpOyBTQVZFX09ORV9CQU5LRUQoUjEw X2ZpcSkKICAgICAgICAgU0FWRV9PTkVfQkFOS0VEKFIxMV9maXEpOyBTQVZF X09ORV9CQU5LRUQoUjEyX2ZpcSk7CisgICAgICAgIC8qCisgICAgICAgICAq IFN0YXJ0IHRvIGNoZWNrIHBlbmRpbmcgdmlydHVhbCBhYm9ydCBpbiB0aGUg Z2FwIG9mIEd1ZXN0IC0+IEhZUAorICAgICAgICAgKiB3b3JsZCBzd2l0Y2gu CisgICAgICAgICAqCisgICAgICAgICAqIFNhdmUgRUxSX2h5cCB0byBjaGVj ayB3aGV0aGVyIHRoZSBwZW5kaW5nIHZpcnR1YWwgYWJvcnQgZXhjZXB0aW9u CisgICAgICAgICAqIHRha2VzIHBsYWNlIHdoaWxlIHdlIGFyZSBkb2luZyB0 aGlzIHRyYXAgZXhjZXB0aW9uLgorICAgICAgICAgKi8KKyAgICAgICAgbXJz IHIxLCBFTFJfaHlwCisKKyAgICAgICAgLyoKKyAgICAgICAgICogRm9yY2Ug bG9hZHMgYW5kIHN0b3JlcyB0byBjb21wbGV0ZSBiZWZvcmUgdW5tYXNraW5n IGFzeW5jaHJvbm91cworICAgICAgICAgKiBhYm9ydHMgYW5kIGZvcmNpbmcg dGhlIGRlbGl2ZXJ5IG9mIHRoZSBleGNlcHRpb24uCisgICAgICAgICAqLwor ICAgICAgICBkc2Igc3kKKworICAgICAgICAvKgorICAgICAgICAgKiBVbm1h c2sgYXN5bmNocm9ub3VzIGFib3J0IGJpdC4gSWYgdGhlcmUgaXMgYSBwZW5k aW5nIGFzeW5jaHJvbm91cworICAgICAgICAgKiBhYm9ydCwgdGhlIGRhdGFf YWJvcnQgZXhjZXB0aW9uIHdpbGwgaGFwcGVuIGFmdGVyIEEgYml0IGlzIGNs ZWFyZWQuCisgICAgICAgICAqLworICAgICAgICBjcHNpZSBhCisKKyAgICAg ICAgLyoKKyAgICAgICAgICogVGhpcyBpcyBvdXIgc2luZ2xlIGluc3RydWN0 aW9uIGV4Y2VwdGlvbiB3aW5kb3cuIEEgcGVuZGluZworICAgICAgICAgKiBh c3luY2hyb25vdXMgYWJvcnQgaXMgZ3VhcmFudGVlZCB0byBvY2N1ciBhdCB0 aGUgZWFybGllc3Qgd2hlbiB3ZQorICAgICAgICAgKiB1bm1hc2sgaXQsIGFu ZCBhdCB0aGUgbGF0ZXN0IGp1c3QgYWZ0ZXIgdGhlIElTQi4KKyAgICAgICAg ICoKKyAgICAgICAgICogSWYgYSBwZW5kaW5nIGFib3J0IG9jY3VycywgdGhl IHByb2dyYW0gd2lsbCBqdW1wIHRvIGRhdGFfYWJvcnQKKyAgICAgICAgICog ZXhjZXB0aW9uIGhhbmRsZXIsIGFuZCB0aGUgRUxSX2h5cCB3aWxsIGJlIHNl dCB0bworICAgICAgICAgKiBhYm9ydF9ndWVzdF9leGl0X3N0YXJ0IG9yIGFi b3J0X2d1ZXN0X2V4aXRfZW5kLgorICAgICAgICAgKi8KKyAgICAgICAgLmds b2JhbCBhYm9ydF9ndWVzdF9leGl0X3N0YXJ0CithYm9ydF9ndWVzdF9leGl0 X3N0YXJ0OgorCisgICAgICAgIGlzYgorCisgICAgICAgIC5nbG9iYWwgYWJv cnRfZ3Vlc3RfZXhpdF9lbmQKK2Fib3J0X2d1ZXN0X2V4aXRfZW5kOgorICAg ICAgICAvKiBNYXNrIENQU1IgYXN5bmNocm9ub3VzIGFib3J0IGJpdCwgY2xv c2UgdGhlIGNoZWNraW5nIHdpbmRvdy4gKi8KKyAgICAgICAgY3BzaWQgYQor CisgICAgICAgIC8qCisgICAgICAgICAqIENvbXBhcmUgRUxSX2h5cCBhbmQg dGhlIHNhdmVkIHZhbHVlIHRvIGNoZWNrIHdoZXRoZXIgd2UgYXJlCisgICAg ICAgICAqIHJldHVybmluZyBmcm9tIGEgdmFsaWQgZXhjZXB0aW9uIGNhdXNl ZCBieSBwZW5kaW5nIHZpcnR1YWwKKyAgICAgICAgICogYWJvcnQuCisgICAg ICAgICAqLworICAgICAgICBtcnMgcjIsIEVMUl9oeXAKKyAgICAgICAgY21w IHIxLCByMgorCisgICAgICAgIC8qCisgICAgICAgICAqIE5vdCBlcXVhbCwg dGhlIHBlbmRpbmcgdmlydHVhbCBhYm9ydCBleGNlcHRpb24gdG9vayBwbGFj ZSwgdGhlCisgICAgICAgICAqIGluaXRpYWwgZXhjZXB0aW9uIGRvZXMgbm90 IGhhdmUgYW55IHNpZ25pZmljYW5jZSB0byBiZSBoYW5kbGVkLgorICAgICAg ICAgKiBFeGl0IEFTQVAuCisgICAgICAgICAqLworICAgICAgICBibmUgcmV0 dXJuX2Zyb21fdHJhcAorCiAgICAgICAgIG1vdiBwYywgbHIKCiAjZGVmaW5l IERFRklORV9UUkFQX0VOVFJZKHRyYXApICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBcCi0tLSBhL3hlbi9hcmNoL2FybS9hcm0z Mi90cmFwcy5jCisrKyBiL3hlbi9hcmNoL2FybS9hcm0zMi90cmFwcy5jCkBA IC02Myw3ICs2MywxMCBAQCBhc21saW5rYWdlIHZvaWQgZG9fdHJhcF9wcmVm ZXRjaF9hYm9ydChzdHJ1Y3QgY3B1X3VzZXJfcmVncyAqcmVncykKCiBhc21s aW5rYWdlIHZvaWQgZG9fdHJhcF9kYXRhX2Fib3J0KHN0cnVjdCBjcHVfdXNl cl9yZWdzICpyZWdzKQogewotICAgIGRvX3VuZXhwZWN0ZWRfdHJhcCgiRGF0 YSBBYm9ydCIsIHJlZ3MpOworICAgIGlmICggVkFCT1JUX0dFTl9CWV9HVUVT VChyZWdzKSApCisgICAgICAgIGRvX3RyYXBfZ3Vlc3RfZXJyb3IocmVncyk7 CisgICAgZWxzZQorICAgICAgICBkb191bmV4cGVjdGVkX3RyYXAoIkRhdGEg QWJvcnQiLCByZWdzKTsKIH0KCiAvKgotLS0gYS94ZW4vaW5jbHVkZS9hc20t YXJtL2FybTMyL3Byb2Nlc3Nvci5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS1h cm0vYXJtMzIvcHJvY2Vzc29yLmgKQEAgLTU1LDYgKzU1LDE3IEBAIHN0cnVj dCBjcHVfdXNlcl9yZWdzCgogICAgIHVpbnQzMl90IHBhZDE7IC8qIERvdWJs ZXdvcmQtYWxpZ24gdGhlIHVzZXIgaGFsZiBvZiB0aGUgZnJhbWUgKi8KIH07 CisKKy8qIEZ1bmN0aW9ucyBmb3IgcGVuZGluZyB2aXJ0dWFsIGFib3J0IGNo ZWNraW5nIHdpbmRvdy4gKi8KK3ZvaWQgYWJvcnRfZ3Vlc3RfZXhpdF9zdGFy dCh2b2lkKTsKK3ZvaWQgYWJvcnRfZ3Vlc3RfZXhpdF9lbmQodm9pZCk7CisK KyNkZWZpbmUgVkFCT1JUX0dFTl9CWV9HVUVTVChyKSAgXAorKCBcCisgICAg KCAodW5zaWduZWQgbG9uZylhYm9ydF9ndWVzdF9leGl0X3N0YXJ0ID09IChy KS0+cGMgKSB8fCBcCisgICAgKCAodW5zaWduZWQgbG9uZylhYm9ydF9ndWVz dF9leGl0X2VuZCA9PSAociktPnBjICkgXAorKQorCiAjZW5kaWYKCiAvKiBM YXlvdXQgYXMgdXNlZCBpbiBhc3NlbWJseSwgd2l0aCBzcmMvZGVzdCByZWdp c3RlcnMgbWl4ZWQgaW4gKi8KLS0tIGEveGVuL2luY2x1ZGUvYXNtLWFybS9w cm9jZXNzb3IuaAorKysgYi94ZW4vaW5jbHVkZS9hc20tYXJtL3Byb2Nlc3Nv ci5oCkBAIC02OTAsNiArNjkwLDggQEAgdm9pZCB2Y3B1X3JlZ3NfdXNlcl90 b19oeXAoc3RydWN0IHZjcHUgKnZjcHUsCiBpbnQgY2FsbF9zbWMocmVnaXN0 ZXJfdCBmdW5jdGlvbl9pZCwgcmVnaXN0ZXJfdCBhcmcwLCByZWdpc3Rlcl90 IGFyZzEsCiAgICAgICAgICAgICAgcmVnaXN0ZXJfdCBhcmcyKTsKCit2b2lk IGRvX3RyYXBfZ3Vlc3RfZXJyb3Ioc3RydWN0IGNwdV91c2VyX3JlZ3MgKnJl Z3MpOworCiAjZW5kaWYgLyogX19BU1NFTUJMWV9fICovCiAjZW5kaWYgLyog X19BU01fQVJNX1BST0NFU1NPUl9IICovCiAvKgo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3RzLnhlbi5v cmcveGVuLWRldmVsCg== --=separator--