From mboxrd@z Thu Jan 1 00:00:00 1970 From: Xen.org security team Subject: Xen Security Advisory 216 (CVE-2017-10911) - blkif responses leak backend stack data Date: Fri, 07 Jul 2017 13:54:00 +0000 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com Cc: "Xen.org security team" List-Id: xen-devel@lists.xenproject.org --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2017-10911 / XSA-216 version 5 blkif responses leak backend stack data UPDATES IN VERSION 5 ==================== CVE assigned. ISSUE DESCRIPTION ================= The block interface response structure has some discontiguous fields. Certain backends populate the structure fields of an otherwise uninitialized instance of this structure on their stacks, leaking data through the (internal or trailing) padding field. IMPACT ====== A malicious unprivileged guest may be able to obtain sensitive information from the host or other guests. VULNERABLE SYSTEMS ================== All Linux versions supporting the xen-blkback, blkback, or blktap drivers are vulnerable. FreeBSD, NetBSD and Windows (with or without PV drivers) are not vulnerable (either because they do not have backends at all, or because they use a different implementation technique which does not suffer from this problem). All qemu versions supporting the Xen block backend are vulnerable. The qemu-xen-traditional code base does not include such code, so is not vulnerable. Note that an instance of qemu will be spawned to provide the backend for most non-raw-format disks; so you may need to apply the patch to qemu even if you use only PV guests. MITIGATION ========== There's no mitigation available for x86 PV and ARM guests. For x86 HVM guests it may be possible to change the guest configuaration such that a fully virtualized disk is being made available instead. However, this would normally entail changes inside the guest itself. CREDITS ======= This issue was discovered by Anthony Perard of Citrix. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa216-linux-4.11.patch Linux 4.5 ... 4.11 xsa216-linux-4.4.patch Linux 3.3 ... 4.4 xsa216-qemuu.patch qemu-upstream master, 4.8 xsa216-qemuu-4.7.patch qemu-upstream 4.7, 4.6 xsa216-qemuu-4.5.patch qemu-upstream 4.5 xsa216-linux-2.6.18-xen.patch linux-2.6.18-xen.hg $ sha256sum xsa216* d316e16f8da2078966e9d7d516dd0a9ed5a29c3bc479974374c8fa778859913d xsa216-linux-2.6.18-xen.patch 4440fe324b61baf0f3f5a73352c4d9ac6f94917e216d8421263a5e67445852db xsa216-linux-4.4.patch eb24bfc0303e13e08fd3710463aea139a92a3f83db7f35119c4d3831154a6453 xsa216-linux-4.11.patch b4b8f68fa05d718c5be7023c84d942e43725bcc563ea15556ee9646f6f9bf7e7 xsa216-qemuu.patch 4fc3665ff07ec79fb31ac66a3fd360a45b7ec546c549c04284f0128ad0c5beba xsa216-qemuu-4.5.patch a0e0dfd5ea2643ae14c220124194388017a3656db3e6ce430913cda800c43aad xsa216-qemuu-4.7.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. However, deployment of the mitigation is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because this produces a guest-visible change which will indicate which component contains the vulnerability. Additionally, distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJZX5IiAAoJEIP+FMlX6CvZdK8IALydeCfUgLpTzeVaRidXkO9M dlChA1fXn5ZRlQxvGGIzatkl2Em99+JfIyW21AoVqFAyIYbYkbV7zmp82HpHAZfB Ib5tFUS4ki1paXXcBtQSvgsz7Sxh5obZnCzyguOcSthZ0/Ude5mh9ImsnKepNxQi GbMBY9xsBv+tclRLiaGUIBgKwtNc0AXpQhWAkbAEWjdYSN2CGsS37Z9Hi0GOoID/ Z49g7/shKDyrHxR1ph0uFqZOkCW8Um3qpORzwHIwpsqleY7Y5E9Ib/QXDOV7wJ1m IDhkSmYf6kXjJ1yhwjRw4UgsGWj/TDyi9d6HxYU9DVHY1b5lWuNjbbyeMuVpR8A= =18b8 -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa216-linux-2.6.18-xen.patch" Content-Disposition: attachment; filename="xsa216-linux-2.6.18-xen.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiBibGtiYWNrL2Jsa3RhcDogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSBy ZXNwb25zZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2Nh bCBzdHJ1Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBm aWVsZHMgZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ug b3RoZXIgYmFja2VuZHMgZG8uCkJ1aWxkIG9uIHRoZSBmYWN0IHRoYXQgYWxs IHJlc3BvbnNlIHN0cnVjdHVyZSBmbGF2b3JzIGFyZSBhY3R1YWxseQppZGVu dGljYWwgKHRoZSBvbGQgY29kZSBkaWQgbWFrZSB0aGlzIGFzc3VtcHRpb24g dG9vKS4KClRoaXMgaXMgWFNBLTIxNi4KClJlcG9ydGVkLWJ5OiBBbnRob255 IFBlcmFyZCA8YW50aG9ueS5wZXJhcmRAY2l0cml4LmNvbT4KU2lnbmVkLW9m Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdl ZC1ieTogS29ucmFkIFJ6ZXN6dXRlayBXaWxrIDxrb25yYWQud2lsa0BvcmFj bGUuY29tPgoKLS0tIGEvZHJpdmVycy94ZW4vYmxrYmFjay9ibGtiYWNrLmMK KysrIGIvZHJpdmVycy94ZW4vYmxrYmFjay9ibGtiYWNrLmMKQEAgLTYwNiwz MyArNjA2LDM0IEBAIHN0YXRpYyB2b2lkIF9kaXNwYXRjaF9yd19ibG9ja19p byhibGtpZl8KIHN0YXRpYyB2b2lkIG1ha2VfcmVzcG9uc2UoYmxraWZfdCAq YmxraWYsIHU2NCBpZCwKIAkJCSAgdW5zaWduZWQgc2hvcnQgb3AsIGludCBz dCkKIHsKLQlibGtpZl9yZXNwb25zZV90ICByZXNwOworCWJsa2lmX3Jlc3Bv bnNlX3QgICpyZXNwOwogCXVuc2lnbmVkIGxvbmcgICAgIGZsYWdzOwogCWJs a2lmX2JhY2tfcmluZ3NfdCAqYmxrX3JpbmdzID0gJmJsa2lmLT5ibGtfcmlu Z3M7CiAJaW50IG5vdGlmeTsKIAotCXJlc3AuaWQgICAgICAgID0gaWQ7Ci0J cmVzcC5vcGVyYXRpb24gPSBvcDsKLQlyZXNwLnN0YXR1cyAgICA9IHN0Owot CiAJc3Bpbl9sb2NrX2lycXNhdmUoJmJsa2lmLT5ibGtfcmluZ19sb2NrLCBm bGFncyk7CiAJLyogUGxhY2Ugb24gdGhlIHJlc3BvbnNlIHJpbmcgZm9yIHRo ZSByZWxldmFudCBkb21haW4uICovCiAJc3dpdGNoIChibGtpZi0+YmxrX3By b3RvY29sKSB7CiAJY2FzZSBCTEtJRl9QUk9UT0NPTF9OQVRJVkU6Ci0JCW1l bWNweShSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT5uYXRpdmUsIGJs a19yaW5ncy0+bmF0aXZlLnJzcF9wcm9kX3B2dCksCi0JCSAgICAgICAmcmVz cCwgc2l6ZW9mKHJlc3ApKTsKKwkJcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNF KCZibGtfcmluZ3MtPm5hdGl2ZSwKKwkJCQkJIGJsa19yaW5ncy0+bmF0aXZl LnJzcF9wcm9kX3B2dCk7CiAJCWJyZWFrOwogCWNhc2UgQkxLSUZfUFJPVE9D T0xfWDg2XzMyOgotCQltZW1jcHkoUklOR19HRVRfUkVTUE9OU0UoJmJsa19y aW5ncy0+eDg2XzMyLCBibGtfcmluZ3MtPng4Nl8zMi5yc3BfcHJvZF9wdnQp LAotCQkgICAgICAgJnJlc3AsIHNpemVvZihyZXNwKSk7CisJCXJlc3AgPSBS SU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT54ODZfMzIsCisJCQkJCSBi bGtfcmluZ3MtPng4Nl8zMi5yc3BfcHJvZF9wdnQpOwogCQlicmVhazsKIAlj YXNlIEJMS0lGX1BST1RPQ09MX1g4Nl82NDoKLQkJbWVtY3B5KFJJTkdfR0VU X1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl82NCwgYmxrX3JpbmdzLT54ODZf NjQucnNwX3Byb2RfcHZ0KSwKLQkJICAgICAgICZyZXNwLCBzaXplb2YocmVz cCkpOworCQlyZXNwID0gUklOR19HRVRfUkVTUE9OU0UoJmJsa19yaW5ncy0+ eDg2XzY0LAorCQkJCQkgYmxrX3JpbmdzLT54ODZfNjQucnNwX3Byb2RfcHZ0 KTsKIAkJYnJlYWs7CiAJZGVmYXVsdDoKIAkJQlVHKCk7CiAJfQorCisJcmVz cC0+aWQgICAgICAgID0gaWQ7CisJcmVzcC0+b3BlcmF0aW9uID0gb3A7CisJ cmVzcC0+c3RhdHVzICAgID0gc3Q7CisKIAlibGtfcmluZ3MtPmNvbW1vbi5y c3BfcHJvZF9wdnQrKzsKIAlSSU5HX1BVU0hfUkVTUE9OU0VTX0FORF9DSEVD S19OT1RJRlkoJmJsa19yaW5ncy0+Y29tbW9uLCBub3RpZnkpOwogCXNwaW5f dW5sb2NrX2lycXJlc3RvcmUoJmJsa2lmLT5ibGtfcmluZ19sb2NrLCBmbGFn cyk7Ci0tLSBhL2RyaXZlcnMveGVuL2Jsa3RhcC9ibGt0YXAuYworKysgYi9k cml2ZXJzL3hlbi9ibGt0YXAvYmxrdGFwLmMKQEAgLTE2NzgsMzYgKzE2Nzgs MzQgQEAgc3RhdGljIHZvaWQgZGlzcGF0Y2hfcndfYmxvY2tfaW8oYmxraWZf dAogc3RhdGljIHZvaWQgbWFrZV9yZXNwb25zZShibGtpZl90ICpibGtpZiwg dTY0IGlkLAogICAgICAgICAgICAgICAgICAgICAgICAgICB1bnNpZ25lZCBz aG9ydCBvcCwgaW50IHN0KQogewotCWJsa2lmX3Jlc3BvbnNlX3QgIHJlc3A7 CisJYmxraWZfcmVzcG9uc2VfdCAgKnJlc3A7CiAJdW5zaWduZWQgbG9uZyAg ICAgZmxhZ3M7CiAJYmxraWZfYmFja19yaW5nc190ICpibGtfcmluZ3MgPSAm YmxraWYtPmJsa19yaW5nczsKIAlpbnQgbm90aWZ5OwogCi0JcmVzcC5pZCAg ICAgICAgPSBpZDsKLQlyZXNwLm9wZXJhdGlvbiA9IG9wOwotCXJlc3Auc3Rh dHVzICAgID0gc3Q7Ci0KIAlzcGluX2xvY2tfaXJxc2F2ZSgmYmxraWYtPmJs a19yaW5nX2xvY2ssIGZsYWdzKTsKIAkvKiBQbGFjZSBvbiB0aGUgcmVzcG9u c2UgcmluZyBmb3IgdGhlIHJlbGV2YW50IGRvbWFpbi4gKi8KIAlzd2l0Y2gg KGJsa2lmLT5ibGtfcHJvdG9jb2wpIHsKIAljYXNlIEJMS0lGX1BST1RPQ09M X05BVElWRToKLQkJbWVtY3B5KFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmlu Z3MtPm5hdGl2ZSwKLQkJCQkJIGJsa19yaW5ncy0+bmF0aXZlLnJzcF9wcm9k X3B2dCksCi0JCSAgICAgICAmcmVzcCwgc2l6ZW9mKHJlc3ApKTsKKwkJcmVz cCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPm5hdGl2ZSwKKwkJ CQkJIGJsa19yaW5ncy0+bmF0aXZlLnJzcF9wcm9kX3B2dCk7CiAJCWJyZWFr OwogCWNhc2UgQkxLSUZfUFJPVE9DT0xfWDg2XzMyOgotCQltZW1jcHkoUklO R19HRVRfUkVTUE9OU0UoJmJsa19yaW5ncy0+eDg2XzMyLAotCQkJCQkgYmxr X3JpbmdzLT54ODZfMzIucnNwX3Byb2RfcHZ0KSwKLQkJICAgICAgICZyZXNw LCBzaXplb2YocmVzcCkpOworCQlyZXNwID0gUklOR19HRVRfUkVTUE9OU0Uo JmJsa19yaW5ncy0+eDg2XzMyLAorCQkJCQkgYmxrX3JpbmdzLT54ODZfMzIu cnNwX3Byb2RfcHZ0KTsKIAkJYnJlYWs7CiAJY2FzZSBCTEtJRl9QUk9UT0NP TF9YODZfNjQ6Ci0JCW1lbWNweShSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3Jp bmdzLT54ODZfNjQsCi0JCQkJCSBibGtfcmluZ3MtPng4Nl82NC5yc3BfcHJv ZF9wdnQpLAotCQkgICAgICAgJnJlc3AsIHNpemVvZihyZXNwKSk7CisJCXJl c3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT54ODZfNjQsCisJ CQkJCSBibGtfcmluZ3MtPng4Nl82NC5yc3BfcHJvZF9wdnQpOwogCQlicmVh azsKIAlkZWZhdWx0OgogCQlCVUcoKTsKIAl9CisKKwlyZXNwLT5pZCAgICAg ICAgPSBpZDsKKwlyZXNwLT5vcGVyYXRpb24gPSBvcDsKKwlyZXNwLT5zdGF0 dXMgICAgPSBzdDsKKwogCWJsa19yaW5ncy0+Y29tbW9uLnJzcF9wcm9kX3B2 dCsrOwogCVJJTkdfUFVTSF9SRVNQT05TRVNfQU5EX0NIRUNLX05PVElGWSgm YmxrX3JpbmdzLT5jb21tb24sIG5vdGlmeSk7CiAKLS0tIGEvaW5jbHVkZS94 ZW4vYmxraWYuaAorKysgYi9pbmNsdWRlL3hlbi9ibGtpZi5oCkBAIC0zMiw5 ICszMiw2IEBACiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QgewogCWNo YXIgZHVtbXk7CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNwb25zZSB7 Ci0JY2hhciBkdW1teTsKLX07CiAKIC8qIGkzODYgcHJvdG9jb2wgdmVyc2lv biAqLwogI3ByYWdtYSBwYWNrKHB1c2gsIDQpCkBAIC00NiwxMyArNDMsNyBA QCB1bmlvbiBibGtpZl94ODZfMzJfdW5pb24gewogCWJsa2lmX3NlY3Rvcl90 IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChy L3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBz ZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1 Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAg aWQ7ICAgICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0J dWludDhfdCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZy b20gcmVxdWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAg ICAgIC8qIEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07CiB0eXBlZGVmIHN0 cnVjdCBibGtpZl94ODZfMzJfcmVxdWVzdCBibGtpZl94ODZfMzJfcmVxdWVz dF90OwotdHlwZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIGJs a2lmX3g4Nl8zMl9yZXNwb25zZV90OwogI3ByYWdtYSBwYWNrKHBvcCkKIAog LyogeDg2XzY0IHByb3RvY29sIHZlcnNpb24gKi8KQEAgLTY0LDE4ICs1NSwx NSBAQCB1bmlvbiBibGtpZl94ODZfNjRfdW5pb24gewogCWJsa2lmX3NlY3Rv cl90IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNr IChyL3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVu dCBzZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1z dHJ1Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAg ICBfX2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwotCXVpbnQ4 X3QgICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJl cXVlc3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAv KiBCTEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlwZWRlZiBzdHJ1Y3Qg YmxraWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0X3JlcXVlc3RfdDsK LXR5cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNwb25zZSBibGtpZl94 ODZfNjRfcmVzcG9uc2VfdDsKIAogI2RlZmluZSBibGtpZl9uYXRpdmVfc3Jp bmcgYmxraWZfc3JpbmcKLURFRklORV9SSU5HX1RZUEVTKGJsa2lmX2NvbW1v biwgc3RydWN0IGJsa2lmX2NvbW1vbl9yZXF1ZXN0LCBzdHJ1Y3QgYmxraWZf Y29tbW9uX3Jlc3BvbnNlKTsKLURFRklORV9SSU5HX1RZUEVTKGJsa2lmX3g4 Nl8zMiwgc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXF1ZXN0LCBzdHJ1Y3QgYmxr aWZfeDg2XzMyX3Jlc3BvbnNlKTsKLURFRklORV9SSU5HX1RZUEVTKGJsa2lm X3g4Nl82NCwgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXF1ZXN0LCBzdHJ1Y3Qg YmxraWZfeDg2XzY0X3Jlc3BvbnNlKTsKK0RFRklORV9SSU5HX1RZUEVTKGJs a2lmX2NvbW1vbiwgc3RydWN0IGJsa2lmX2NvbW1vbl9yZXF1ZXN0LAorCQkg IHN0cnVjdCBibGtpZl9yZXNwb25zZSk7CitERUZJTkVfUklOR19UWVBFUyhi bGtpZl94ODZfMzIsIHN0cnVjdCBibGtpZl94ODZfMzJfcmVxdWVzdCwKKwkJ ICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UgX19hdHRyaWJ1dGVfXygoX19wYWNr ZWRfXykpKTsKK0RFRklORV9SSU5HX1RZUEVTKGJsa2lmX3g4Nl82NCwgc3Ry dWN0IGJsa2lmX3g4Nl82NF9yZXF1ZXN0LAorCQkgIHN0cnVjdCBibGtpZl9y ZXNwb25zZSk7CiAKIHVuaW9uIGJsa2lmX2JhY2tfcmluZ3MgewogCWJsa2lm X2JhY2tfcmluZ190ICAgICAgICBuYXRpdmU7Cg== --=separator Content-Type: application/octet-stream; name="xsa216-linux-4.4.patch" Content-Disposition: attachment; filename="xsa216-linux-4.4.patch" Content-Transfer-Encoding: base64 eGVuLWJsa2JhY2s6IGRvbid0IGxlYWsgc3RhY2sgZGF0YSB2aWEgcmVzcG9u c2UgcmluZwoKUmF0aGVyIHRoYW4gY29uc3RydWN0aW5nIGEgbG9jYWwgc3Ry dWN0dXJlIGluc3RhbmNlIG9uIHRoZSBzdGFjaywgZmlsbAp0aGUgZmllbGRz IGRpcmVjdGx5IG9uIHRoZSBzaGFyZWQgcmluZywganVzdCBsaWtlIG90aGVy IGJhY2tlbmRzIGRvLgpCdWlsZCBvbiB0aGUgZmFjdCB0aGF0IGFsbCByZXNw b25zZSBzdHJ1Y3R1cmUgZmxhdm9ycyBhcmUgYWN0dWFsbHkKaWRlbnRpY2Fs ICh0aGUgb2xkIGNvZGUgZGlkIG1ha2UgdGhpcyBhc3N1bXB0aW9uIHRvbyku CgpUaGlzIGlzIFhTQS0yMTYuCgpSZXBvcnRlZC1ieTogQW50aG9ueSBQZXJh cmQgPGFudGhvbnkucGVyYXJkQGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6 IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6 IEtvbnJhZCBSemVzenV0ZWsgV2lsayA8a29ucmFkLndpbGtAb3JhY2xlLmNv bT4KCi0tLSBhL2RyaXZlcnMvYmxvY2sveGVuLWJsa2JhY2svYmxrYmFjay5j CisrKyBiL2RyaXZlcnMvYmxvY2sveGVuLWJsa2JhY2svYmxrYmFjay5jCkBA IC0xNDEwLDMzICsxNDEwLDM0IEBAIHN0YXRpYyBpbnQgZGlzcGF0Y2hfcndf YmxvY2tfaW8oc3RydWN0IHgKIHN0YXRpYyB2b2lkIG1ha2VfcmVzcG9uc2Uo c3RydWN0IHhlbl9ibGtpZiAqYmxraWYsIHU2NCBpZCwKIAkJCSAgdW5zaWdu ZWQgc2hvcnQgb3AsIGludCBzdCkKIHsKLQlzdHJ1Y3QgYmxraWZfcmVzcG9u c2UgIHJlc3A7CisJc3RydWN0IGJsa2lmX3Jlc3BvbnNlICpyZXNwOwogCXVu c2lnbmVkIGxvbmcgICAgIGZsYWdzOwogCXVuaW9uIGJsa2lmX2JhY2tfcmlu Z3MgKmJsa19yaW5ncyA9ICZibGtpZi0+YmxrX3JpbmdzOwogCWludCBub3Rp Znk7CiAKLQlyZXNwLmlkICAgICAgICA9IGlkOwotCXJlc3Aub3BlcmF0aW9u ID0gb3A7Ci0JcmVzcC5zdGF0dXMgICAgPSBzdDsKLQogCXNwaW5fbG9ja19p cnFzYXZlKCZibGtpZi0+YmxrX3JpbmdfbG9jaywgZmxhZ3MpOwogCS8qIFBs YWNlIG9uIHRoZSByZXNwb25zZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9t YWluLiAqLwogCXN3aXRjaCAoYmxraWYtPmJsa19wcm90b2NvbCkgewogCWNh c2UgQkxLSUZfUFJPVE9DT0xfTkFUSVZFOgotCQltZW1jcHkoUklOR19HRVRf UkVTUE9OU0UoJmJsa19yaW5ncy0+bmF0aXZlLCBibGtfcmluZ3MtPm5hdGl2 ZS5yc3BfcHJvZF9wdnQpLAotCQkgICAgICAgJnJlc3AsIHNpemVvZihyZXNw KSk7CisJCXJlc3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT5u YXRpdmUsCisJCQkJCSBibGtfcmluZ3MtPm5hdGl2ZS5yc3BfcHJvZF9wdnQp OwogCQlicmVhazsKIAljYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl8zMjoKLQkJ bWVtY3B5KFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl8zMiwg YmxrX3JpbmdzLT54ODZfMzIucnNwX3Byb2RfcHZ0KSwKLQkJICAgICAgICZy ZXNwLCBzaXplb2YocmVzcCkpOworCQlyZXNwID0gUklOR19HRVRfUkVTUE9O U0UoJmJsa19yaW5ncy0+eDg2XzMyLAorCQkJCQkgYmxrX3JpbmdzLT54ODZf MzIucnNwX3Byb2RfcHZ0KTsKIAkJYnJlYWs7CiAJY2FzZSBCTEtJRl9QUk9U T0NPTF9YODZfNjQ6Ci0JCW1lbWNweShSSU5HX0dFVF9SRVNQT05TRSgmYmxr X3JpbmdzLT54ODZfNjQsIGJsa19yaW5ncy0+eDg2XzY0LnJzcF9wcm9kX3B2 dCksCi0JCSAgICAgICAmcmVzcCwgc2l6ZW9mKHJlc3ApKTsKKwkJcmVzcCA9 IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl82NCwKKwkJCQkJ IGJsa19yaW5ncy0+eDg2XzY0LnJzcF9wcm9kX3B2dCk7CiAJCWJyZWFrOwog CWRlZmF1bHQ6CiAJCUJVRygpOwogCX0KKworCXJlc3AtPmlkICAgICAgICA9 IGlkOworCXJlc3AtPm9wZXJhdGlvbiA9IG9wOworCXJlc3AtPnN0YXR1cyAg ICA9IHN0OworCiAJYmxrX3JpbmdzLT5jb21tb24ucnNwX3Byb2RfcHZ0Kys7 CiAJUklOR19QVVNIX1JFU1BPTlNFU19BTkRfQ0hFQ0tfTk9USUZZKCZibGtf cmluZ3MtPmNvbW1vbiwgbm90aWZ5KTsKIAlzcGluX3VubG9ja19pcnFyZXN0 b3JlKCZibGtpZi0+YmxrX3JpbmdfbG9jaywgZmxhZ3MpOwotLS0gYS9kcml2 ZXJzL2Jsb2NrL3hlbi1ibGtiYWNrL2NvbW1vbi5oCisrKyBiL2RyaXZlcnMv YmxvY2sveGVuLWJsa2JhY2svY29tbW9uLmgKQEAgLTc0LDkgKzc0LDggQEAg ZXh0ZXJuIHVuc2lnbmVkIGludCB4ZW5fYmxraWZfbWF4X3Jpbmdfbwogc3Ry dWN0IGJsa2lmX2NvbW1vbl9yZXF1ZXN0IHsKIAljaGFyIGR1bW15OwogfTsK LXN0cnVjdCBibGtpZl9jb21tb25fcmVzcG9uc2UgewotCWNoYXIgZHVtbXk7 Ci19OworCisvKiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KIAogc3RydWN0 IGJsa2lmX3g4Nl8zMl9yZXF1ZXN0X3J3IHsKIAl1aW50OF90ICAgICAgICBu cl9zZWdtZW50czsgIC8qIG51bWJlciBvZiBzZWdtZW50cyAgICAgICAgICAg ICAgICAgICAqLwpAQCAtMTI4LDE0ICsxMjcsNiBAQCBzdHJ1Y3QgYmxraWZf eDg2XzMyX3JlcXVlc3QgewogCX0gdTsKIH0gX19hdHRyaWJ1dGVfXygoX19w YWNrZWRfXykpOwogCi0vKiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KLSNw cmFnbWEgcGFjayhwdXNoLCA0KQotc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXNw b25zZSB7Ci0JdWludDY0X3QgICAgICAgIGlkOyAgICAgICAgICAgICAgLyog Y29waWVkIGZyb20gcmVxdWVzdCAqLwotCXVpbnQ4X3QgICAgICAgICBvcGVy YXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVlc3QgKi8KLQlpbnQx Nl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/ ICAgICAgICovCi19OwotI3ByYWdtYSBwYWNrKHBvcCkKIC8qIHg4Nl82NCBw cm90b2NvbCB2ZXJzaW9uICovCiAKIHN0cnVjdCBibGtpZl94ODZfNjRfcmVx dWVzdF9ydyB7CkBAIC0xOTIsMTggKzE4MywxMiBAQCBzdHJ1Y3QgYmxraWZf eDg2XzY0X3JlcXVlc3QgewogCX0gdTsKIH0gX19hdHRyaWJ1dGVfXygoX19w YWNrZWRfXykpOwogCi1zdHJ1Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsK LQl1aW50NjRfdCAgICAgICBfX2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4 KSkpIGlkOwotCXVpbnQ4X3QgICAgICAgICBvcGVyYXRpb247ICAgICAgIC8q IGNvcGllZCBmcm9tIHJlcXVlc3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3Rh dHVzOyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/ICAgICAgICovCi19Owot CiBERUZJTkVfUklOR19UWVBFUyhibGtpZl9jb21tb24sIHN0cnVjdCBibGtp Zl9jb21tb25fcmVxdWVzdCwKLQkJICBzdHJ1Y3QgYmxraWZfY29tbW9uX3Jl c3BvbnNlKTsKKwkJICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogREVGSU5F X1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMy X3JlcXVlc3QsCi0JCSAgc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXNwb25zZSk7 CisJCSAgc3RydWN0IGJsa2lmX3Jlc3BvbnNlIF9fcGFja2VkKTsKIERFRklO RV9SSU5HX1RZUEVTKGJsa2lmX3g4Nl82NCwgc3RydWN0IGJsa2lmX3g4Nl82 NF9yZXF1ZXN0LAotCQkgIHN0cnVjdCBibGtpZl94ODZfNjRfcmVzcG9uc2Up OworCQkgIHN0cnVjdCBibGtpZl9yZXNwb25zZSk7CiAKIHVuaW9uIGJsa2lm X2JhY2tfcmluZ3MgewogCXN0cnVjdCBibGtpZl9iYWNrX3JpbmcgICAgICAg IG5hdGl2ZTsK --=separator Content-Type: application/octet-stream; name="xsa216-linux-4.11.patch" Content-Disposition: attachment; filename="xsa216-linux-4.11.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ZW4tYmxrYmFjazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNw b25zZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBz dHJ1Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVs ZHMgZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3Ro ZXIgYmFja2VuZHMgZG8uCkJ1aWxkIG9uIHRoZSBmYWN0IHRoYXQgYWxsIHJl c3BvbnNlIHN0cnVjdHVyZSBmbGF2b3JzIGFyZSBhY3R1YWxseQppZGVudGlj YWwgKHRoZSBvbGQgY29kZSBkaWQgbWFrZSB0aGlzIGFzc3VtcHRpb24gdG9v KS4KClRoaXMgaXMgWFNBLTIxNi4KClJlcG9ydGVkLWJ5OiBBbnRob255IFBl cmFyZCA8YW50aG9ueS5wZXJhcmRAY2l0cml4LmNvbT4KU2lnbmVkLW9mZi1i eTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1i eTogS29ucmFkIFJ6ZXN6dXRlayBXaWxrIDxrb25yYWQud2lsa0BvcmFjbGUu Y29tPgoKLS0tIGEvZHJpdmVycy9ibG9jay94ZW4tYmxrYmFjay9ibGtiYWNr LmMKKysrIGIvZHJpdmVycy9ibG9jay94ZW4tYmxrYmFjay9ibGtiYWNrLmMK QEAgLTE0MzYsMzQgKzE0MzYsMzUgQEAgc3RhdGljIGludCBkaXNwYXRjaF9y d19ibG9ja19pbyhzdHJ1Y3QgeAogc3RhdGljIHZvaWQgbWFrZV9yZXNwb25z ZShzdHJ1Y3QgeGVuX2Jsa2lmX3JpbmcgKnJpbmcsIHU2NCBpZCwKIAkJCSAg dW5zaWduZWQgc2hvcnQgb3AsIGludCBzdCkKIHsKLQlzdHJ1Y3QgYmxraWZf cmVzcG9uc2UgIHJlc3A7CisJc3RydWN0IGJsa2lmX3Jlc3BvbnNlICpyZXNw OwogCXVuc2lnbmVkIGxvbmcgICAgIGZsYWdzOwogCXVuaW9uIGJsa2lmX2Jh Y2tfcmluZ3MgKmJsa19yaW5nczsKIAlpbnQgbm90aWZ5OwogCi0JcmVzcC5p ZCAgICAgICAgPSBpZDsKLQlyZXNwLm9wZXJhdGlvbiA9IG9wOwotCXJlc3Au c3RhdHVzICAgID0gc3Q7Ci0KIAlzcGluX2xvY2tfaXJxc2F2ZSgmcmluZy0+ YmxrX3JpbmdfbG9jaywgZmxhZ3MpOwogCWJsa19yaW5ncyA9ICZyaW5nLT5i bGtfcmluZ3M7CiAJLyogUGxhY2Ugb24gdGhlIHJlc3BvbnNlIHJpbmcgZm9y IHRoZSByZWxldmFudCBkb21haW4uICovCiAJc3dpdGNoIChyaW5nLT5ibGtp Zi0+YmxrX3Byb3RvY29sKSB7CiAJY2FzZSBCTEtJRl9QUk9UT0NPTF9OQVRJ VkU6Ci0JCW1lbWNweShSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT5u YXRpdmUsIGJsa19yaW5ncy0+bmF0aXZlLnJzcF9wcm9kX3B2dCksCi0JCSAg ICAgICAmcmVzcCwgc2l6ZW9mKHJlc3ApKTsKKwkJcmVzcCA9IFJJTkdfR0VU X1JFU1BPTlNFKCZibGtfcmluZ3MtPm5hdGl2ZSwKKwkJCQkJIGJsa19yaW5n cy0+bmF0aXZlLnJzcF9wcm9kX3B2dCk7CiAJCWJyZWFrOwogCWNhc2UgQkxL SUZfUFJPVE9DT0xfWDg2XzMyOgotCQltZW1jcHkoUklOR19HRVRfUkVTUE9O U0UoJmJsa19yaW5ncy0+eDg2XzMyLCBibGtfcmluZ3MtPng4Nl8zMi5yc3Bf cHJvZF9wdnQpLAotCQkgICAgICAgJnJlc3AsIHNpemVvZihyZXNwKSk7CisJ CXJlc3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT54ODZfMzIs CisJCQkJCSBibGtfcmluZ3MtPng4Nl8zMi5yc3BfcHJvZF9wdnQpOwogCQli cmVhazsKIAljYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl82NDoKLQkJbWVtY3B5 KFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl82NCwgYmxrX3Jp bmdzLT54ODZfNjQucnNwX3Byb2RfcHZ0KSwKLQkJICAgICAgICZyZXNwLCBz aXplb2YocmVzcCkpOworCQlyZXNwID0gUklOR19HRVRfUkVTUE9OU0UoJmJs a19yaW5ncy0+eDg2XzY0LAorCQkJCQkgYmxrX3JpbmdzLT54ODZfNjQucnNw X3Byb2RfcHZ0KTsKIAkJYnJlYWs7CiAJZGVmYXVsdDoKIAkJQlVHKCk7CiAJ fQorCisJcmVzcC0+aWQgICAgICAgID0gaWQ7CisJcmVzcC0+b3BlcmF0aW9u ID0gb3A7CisJcmVzcC0+c3RhdHVzICAgID0gc3Q7CisKIAlibGtfcmluZ3Mt PmNvbW1vbi5yc3BfcHJvZF9wdnQrKzsKIAlSSU5HX1BVU0hfUkVTUE9OU0VT X0FORF9DSEVDS19OT1RJRlkoJmJsa19yaW5ncy0+Y29tbW9uLCBub3RpZnkp OwogCXNwaW5fdW5sb2NrX2lycXJlc3RvcmUoJnJpbmctPmJsa19yaW5nX2xv Y2ssIGZsYWdzKTsKLS0tIGEvZHJpdmVycy9ibG9jay94ZW4tYmxrYmFjay9j b21tb24uaAorKysgYi9kcml2ZXJzL2Jsb2NrL3hlbi1ibGtiYWNrL2NvbW1v bi5oCkBAIC03NSw5ICs3NSw4IEBAIGV4dGVybiB1bnNpZ25lZCBpbnQgeGVu YmxrX21heF9xdWV1ZXM7CiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3Qg ewogCWNoYXIgZHVtbXk7CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNw b25zZSB7Ci0JY2hhciBkdW1teTsKLX07CisKKy8qIGkzODYgcHJvdG9jb2wg dmVyc2lvbiAqLwogCiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3JlcXVlc3Rfcncg ewogCXVpbnQ4X3QgICAgICAgIG5yX3NlZ21lbnRzOyAgLyogbnVtYmVyIG9m IHNlZ21lbnRzICAgICAgICAgICAgICAgICAgICovCkBAIC0xMjksMTQgKzEy OCw2IEBAIHN0cnVjdCBibGtpZl94ODZfMzJfcmVxdWVzdCB7CiAJfSB1Owog fSBfX2F0dHJpYnV0ZV9fKChfX3BhY2tlZF9fKSk7CiAKLS8qIGkzODYgcHJv dG9jb2wgdmVyc2lvbiAqLwotI3ByYWdtYSBwYWNrKHB1c2gsIDQpCi1zdHJ1 Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAg aWQ7ICAgICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0J dWludDhfdCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZy b20gcmVxdWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAg ICAgIC8qIEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07Ci0jcHJhZ21hIHBh Y2socG9wKQogLyogeDg2XzY0IHByb3RvY29sIHZlcnNpb24gKi8KIAogc3Ry dWN0IGJsa2lmX3g4Nl82NF9yZXF1ZXN0X3J3IHsKQEAgLTE5MywxOCArMTg0 LDEyIEBAIHN0cnVjdCBibGtpZl94ODZfNjRfcmVxdWVzdCB7CiAJfSB1Owog fSBfX2F0dHJpYnV0ZV9fKChfX3BhY2tlZF9fKSk7CiAKLXN0cnVjdCBibGtp Zl94ODZfNjRfcmVzcG9uc2UgewotCXVpbnQ2NF90ICAgICAgIF9fYXR0cmli dXRlX18oKF9fYWxpZ25lZF9fKDgpKSkgaWQ7Ci0JdWludDhfdCAgICAgICAg IG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZyb20gcmVxdWVzdCAqLwot CWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAgICAgIC8qIEJMS0lGX1JT UF8/Pz8gICAgICAgKi8KLX07Ci0KIERFRklORV9SSU5HX1RZUEVTKGJsa2lm X2NvbW1vbiwgc3RydWN0IGJsa2lmX2NvbW1vbl9yZXF1ZXN0LAotCQkgIHN0 cnVjdCBibGtpZl9jb21tb25fcmVzcG9uc2UpOworCQkgIHN0cnVjdCBibGtp Zl9yZXNwb25zZSk7CiBERUZJTkVfUklOR19UWVBFUyhibGtpZl94ODZfMzIs IHN0cnVjdCBibGtpZl94ODZfMzJfcmVxdWVzdCwKLQkJICBzdHJ1Y3QgYmxr aWZfeDg2XzMyX3Jlc3BvbnNlKTsKKwkJICBzdHJ1Y3QgYmxraWZfcmVzcG9u c2UgX19wYWNrZWQpOwogREVGSU5FX1JJTkdfVFlQRVMoYmxraWZfeDg2XzY0 LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsCi0JCSAgc3RydWN0IGJs a2lmX3g4Nl82NF9yZXNwb25zZSk7CisJCSAgc3RydWN0IGJsa2lmX3Jlc3Bv bnNlKTsKIAogdW5pb24gYmxraWZfYmFja19yaW5ncyB7CiAJc3RydWN0IGJs a2lmX2JhY2tfcmluZyAgICAgICAgbmF0aXZlOwo= --=separator Content-Type: application/octet-stream; name="xsa216-qemuu.patch" Content-Disposition: attachment; filename="xsa216-qemuu.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1 Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w ZXJhcmRAY2l0cml4LmNvbT4KLS0tCnYyOiBBZGQgUUVNVV9QQUNLRUQgdG8g Zml4IGhhbmRsaW5nIDMyLWJpdCBndWVzdHMgYnkgNjQtYml0IHFlbXUuCgot LS0gYS9ody9ibG9jay94ZW5fYmxraWYuaAorKysgYi9ody9ibG9jay94ZW5f YmxraWYuaApAQCAtMTQsOSArMTQsNiBAQAogc3RydWN0IGJsa2lmX2NvbW1v bl9yZXF1ZXN0IHsKICAgICBjaGFyIGR1bW15OwogfTsKLXN0cnVjdCBibGtp Zl9jb21tb25fcmVzcG9uc2UgewotICAgIGNoYXIgZHVtbXk7Ci19OwogCiAv KiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KICNwcmFnbWEgcGFjayhwdXNo LCA0KQpAQCAtMzYsMTMgKzMzLDcgQEAgc3RydWN0IGJsa2lmX3g4Nl8zMl9y ZXF1ZXN0X2Rpc2NhcmQgewogICAgIGJsa2lmX3NlY3Rvcl90IHNlY3Rvcl9u dW1iZXI7ICAgIC8qIHN0YXJ0IHNlY3RvciBpZHggb24gZGlzayAoci93IG9u bHkpICAqLwogICAgIHVpbnQ2NF90ICAgICAgIG5yX3NlY3RvcnM7ICAgICAg IC8qICMgb2YgY29udGlndW91cyBzZWN0b3JzIHRvIGRpc2NhcmQgICAqLwog fTsKLXN0cnVjdCBibGtpZl94ODZfMzJfcmVzcG9uc2UgewotICAgIHVpbnQ2 NF90ICAgICAgICBpZDsgICAgICAgICAgICAgIC8qIGNvcGllZCBmcm9tIHJl cXVlc3QgKi8KLSAgICB1aW50OF90ICAgICAgICAgb3BlcmF0aW9uOyAgICAg ICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0gICAgaW50MTZfdCAgICAg ICAgIHN0YXR1czsgICAgICAgICAgLyogQkxLSUZfUlNQXz8/PyAgICAgICAq LwotfTsKIHR5cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXF1ZXN0IGJs a2lmX3g4Nl8zMl9yZXF1ZXN0X3Q7Ci10eXBlZGVmIHN0cnVjdCBibGtpZl94 ODZfMzJfcmVzcG9uc2UgYmxraWZfeDg2XzMyX3Jlc3BvbnNlX3Q7CiAjcHJh Z21hIHBhY2socG9wKQogCiAvKiB4ODZfNjQgcHJvdG9jb2wgdmVyc2lvbiAq LwpAQCAtNjIsMjAgKzUzLDE0IEBAIHN0cnVjdCBibGtpZl94ODZfNjRfcmVx dWVzdF9kaXNjYXJkIHsKICAgICBibGtpZl9zZWN0b3JfdCBzZWN0b3JfbnVt YmVyOyAgICAvKiBzdGFydCBzZWN0b3IgaWR4IG9uIGRpc2sgKHIvdyBvbmx5 KSAgKi8KICAgICB1aW50NjRfdCAgICAgICBucl9zZWN0b3JzOyAgICAgICAv KiAjIG9mIGNvbnRpZ3VvdXMgc2VjdG9ycyB0byBkaXNjYXJkICAgKi8KIH07 Ci1zdHJ1Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLSAgICB1aW50NjRf dCAgICAgICBfX2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwot ICAgIHVpbnQ4X3QgICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGll ZCBmcm9tIHJlcXVlc3QgKi8KLSAgICBpbnQxNl90ICAgICAgICAgc3RhdHVz OyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlw ZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0 X3JlcXVlc3RfdDsKLXR5cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNw b25zZSBibGtpZl94ODZfNjRfcmVzcG9uc2VfdDsKIAogREVGSU5FX1JJTkdf VFlQRVMoYmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVl c3QsCi0gICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfY29tbW9uX3Jl c3BvbnNlKTsKKyAgICAgICAgICAgICAgICAgIHN0cnVjdCBibGtpZl9yZXNw b25zZSk7CiBERUZJTkVfUklOR19UWVBFUyhibGtpZl94ODZfMzIsIHN0cnVj dCBibGtpZl94ODZfMzJfcmVxdWVzdCwKLSAgICAgICAgICAgICAgICAgIHN0 cnVjdCBibGtpZl94ODZfMzJfcmVzcG9uc2UpOworICAgICAgICAgICAgICAg ICAgc3RydWN0IGJsa2lmX3Jlc3BvbnNlIFFFTVVfUEFDS0VEKTsKIERFRklO RV9SSU5HX1RZUEVTKGJsa2lmX3g4Nl82NCwgc3RydWN0IGJsa2lmX3g4Nl82 NF9yZXF1ZXN0LAotICAgICAgICAgICAgICAgICAgc3RydWN0IGJsa2lmX3g4 Nl82NF9yZXNwb25zZSk7CisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxr aWZfcmVzcG9uc2UpOwogCiB1bmlvbiBibGtpZl9iYWNrX3JpbmdzIHsKICAg ICBibGtpZl9iYWNrX3JpbmdfdCAgICAgICAgbmF0aXZlOwotLS0gYS9ody9i bG9jay94ZW5fZGlzay5jCisrKyBiL2h3L2Jsb2NrL3hlbl9kaXNrLmMKQEAg LTc2OSwzMSArNzY5LDMwIEBAIHN0YXRpYyBpbnQgYmxrX3NlbmRfcmVzcG9u c2Vfb25lKHN0cnVjdAogICAgIHN0cnVjdCBYZW5CbGtEZXYgICpibGtkZXYg PSBpb3JlcS0+YmxrZGV2OwogICAgIGludCAgICAgICAgICAgICAgIHNlbmRf bm90aWZ5ICAgPSAwOwogICAgIGludCAgICAgICAgICAgICAgIGhhdmVfcmVx dWVzdHMgPSAwOwotICAgIGJsa2lmX3Jlc3BvbnNlX3QgIHJlc3A7Ci0gICAg dm9pZCAgICAgICAgICAgICAgKmRzdDsKLQotICAgIHJlc3AuaWQgICAgICAg ID0gaW9yZXEtPnJlcS5pZDsKLSAgICByZXNwLm9wZXJhdGlvbiA9IGlvcmVx LT5yZXEub3BlcmF0aW9uOwotICAgIHJlc3Auc3RhdHVzICAgID0gaW9yZXEt PnN0YXR1czsKKyAgICBibGtpZl9yZXNwb25zZV90ICAqcmVzcDsKIAogICAg IC8qIFBsYWNlIG9uIHRoZSByZXNwb25zZSByaW5nIGZvciB0aGUgcmVsZXZh bnQgZG9tYWluLiAqLwogICAgIHN3aXRjaCAoYmxrZGV2LT5wcm90b2NvbCkg ewogICAgIGNhc2UgQkxLSUZfUFJPVE9DT0xfTkFUSVZFOgotICAgICAgICBk c3QgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUs IGJsa2Rldi0+cmluZ3MubmF0aXZlLnJzcF9wcm9kX3B2dCk7CisgICAgICAg IHJlc3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrZGV2LT5yaW5ncy5uYXRp dmUsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBibGtkZXYt PnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsK ICAgICBjYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl8zMjoKLSAgICAgICAgZHN0 ID0gUklOR19HRVRfUkVTUE9OU0UoJmJsa2Rldi0+cmluZ3MueDg2XzMyX3Bh cnQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+ cmluZ3MueDg2XzMyX3BhcnQucnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVz cCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtkZXYtPnJpbmdzLng4Nl8zMl9w YXJ0LAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYmxrZGV2 LT5yaW5ncy54ODZfMzJfcGFydC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBi cmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl82NDoKLSAgICAg ICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJsa2Rldi0+cmluZ3MueDg2 XzY0X3BhcnQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJs a2Rldi0+cmluZ3MueDg2XzY0X3BhcnQucnNwX3Byb2RfcHZ0KTsKKyAgICAg ICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtkZXYtPnJpbmdzLng4 Nl82NF9wYXJ0LAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg YmxrZGV2LT5yaW5ncy54ODZfNjRfcGFydC5yc3BfcHJvZF9wdnQpOwogICAg ICAgICBicmVhazsKICAgICBkZWZhdWx0OgotICAgICAgICBkc3QgPSBOVUxM OwogICAgICAgICByZXR1cm4gMDsKICAgICB9Ci0gICAgbWVtY3B5KGRzdCwg JnJlc3AsIHNpemVvZihyZXNwKSk7CisKKyAgICByZXNwLT5pZCAgICAgICAg PSBpb3JlcS0+cmVxLmlkOworICAgIHJlc3AtPm9wZXJhdGlvbiA9IGlvcmVx LT5yZXEub3BlcmF0aW9uOworICAgIHJlc3AtPnN0YXR1cyAgICA9IGlvcmVx LT5zdGF0dXM7CisKICAgICBibGtkZXYtPnJpbmdzLmNvbW1vbi5yc3BfcHJv ZF9wdnQrKzsKIAogICAgIFJJTkdfUFVTSF9SRVNQT05TRVNfQU5EX0NIRUNL X05PVElGWSgmYmxrZGV2LT5yaW5ncy5jb21tb24sIHNlbmRfbm90aWZ5KTsK --=separator Content-Type: application/octet-stream; name="xsa216-qemuu-4.5.patch" Content-Disposition: attachment; filename="xsa216-qemuu-4.5.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1 Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w ZXJhcmRAY2l0cml4LmNvbT4KCi0tLSBhL2h3L2Jsb2NrL3hlbl9ibGtpZi5o CisrKyBiL2h3L2Jsb2NrL3hlbl9ibGtpZi5oCkBAIC0xMiw5ICsxMiw2IEBA CiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QgewogCWNoYXIgZHVtbXk7 CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNwb25zZSB7Ci0JY2hhciBk dW1teTsKLX07CiAKIC8qIGkzODYgcHJvdG9jb2wgdmVyc2lvbiAqLwogI3By YWdtYSBwYWNrKHB1c2gsIDQpCkBAIC0yNiwxMyArMjMsNyBAQCBzdHJ1Y3Qg YmxraWZfeDg2XzMyX3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90IHNlY3Rv cl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChyL3cgb25s eSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBzZWdbQkxL SUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1Y3QgYmxr aWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAgaWQ7ICAg ICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0JdWludDhf dCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZyb20gcmVx dWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAgICAgIC8q IEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07CiB0eXBlZGVmIHN0cnVjdCBi bGtpZl94ODZfMzJfcmVxdWVzdCBibGtpZl94ODZfMzJfcmVxdWVzdF90Owot dHlwZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIGJsa2lmX3g4 Nl8zMl9yZXNwb25zZV90OwogI3ByYWdtYSBwYWNrKHBvcCkKIAogLyogeDg2 XzY0IHByb3RvY29sIHZlcnNpb24gKi8KQEAgLTQ0LDE3ICszNSwxNCBAQCBz dHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90 IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChy L3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBz ZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1 Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICBf X2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwotCXVpbnQ4X3Qg ICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVl c3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBC TEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlwZWRlZiBzdHJ1Y3QgYmxr aWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0X3JlcXVlc3RfdDsKLXR5 cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNwb25zZSBibGtpZl94ODZf NjRfcmVzcG9uc2VfdDsKIAotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZfY29t bW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsIHN0cnVjdCBibGtp Zl9jb21tb25fcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZf eDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMyX3JlcXVlc3QsIHN0cnVjdCBi bGtpZl94ODZfMzJfcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxr aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsIHN0cnVj dCBibGtpZl94ODZfNjRfcmVzcG9uc2UpOworREVGSU5FX1JJTkdfVFlQRVMo YmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsCisg ICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOworREVG SU5FX1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2 XzMyX3JlcXVlc3QsCisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZf cmVzcG9uc2UgUUVNVV9QQUNLRUQpOworREVGSU5FX1JJTkdfVFlQRVMoYmxr aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsCisgICAg ICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogCiB1bmlv biBibGtpZl9iYWNrX3JpbmdzIHsKIAlibGtpZl9iYWNrX3JpbmdfdCAgICAg ICAgbmF0aXZlOwotLS0gYS9ody9ibG9jay94ZW5fZGlzay5jCisrKyBiL2h3 L2Jsb2NrL3hlbl9kaXNrLmMKQEAgLTYwOSwzMCArNjA5LDMwIEBAIHN0YXRp YyBpbnQgYmxrX3NlbmRfcmVzcG9uc2Vfb25lKHN0cnVjdAogICAgIHN0cnVj dCBYZW5CbGtEZXYgICpibGtkZXYgPSBpb3JlcS0+YmxrZGV2OwogICAgIGlu dCAgICAgICAgICAgICAgIHNlbmRfbm90aWZ5ICAgPSAwOwogICAgIGludCAg ICAgICAgICAgICAgIGhhdmVfcmVxdWVzdHMgPSAwOwotICAgIGJsa2lmX3Jl c3BvbnNlX3QgIHJlc3A7Ci0gICAgdm9pZCAgICAgICAgICAgICAgKmRzdDsK LQotICAgIHJlc3AuaWQgICAgICAgID0gaW9yZXEtPnJlcS5pZDsKLSAgICBy ZXNwLm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOwotICAgIHJl c3Auc3RhdHVzICAgID0gaW9yZXEtPnN0YXR1czsKKyAgICBibGtpZl9yZXNw b25zZV90ICAqcmVzcDsKIAogICAgIC8qIFBsYWNlIG9uIHRoZSByZXNwb25z ZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9tYWluLiAqLwogICAgIHN3aXRj aCAoYmxrZGV2LT5wcm90b2NvbCkgewogICAgIGNhc2UgQkxLSUZfUFJPVE9D T0xfTkFUSVZFOgotICAgICAgICBkc3QgPSBSSU5HX0dFVF9SRVNQT05TRSgm YmxrZGV2LT5yaW5ncy5uYXRpdmUsIGJsa2Rldi0+cmluZ3MubmF0aXZlLnJz cF9wcm9kX3B2dCk7CisgICAgICAgIHJlc3AgPSBSSU5HX0dFVF9SRVNQT05T RSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBibGtkZXYtPnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9w dnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09M X1g4Nl8zMjoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJs a2Rldi0+cmluZ3MueDg2XzMyX3BhcnQsCi0gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzMyX3BhcnQucnNwX3By b2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZi bGtkZXYtPnJpbmdzLng4Nl8zMl9wYXJ0LAorICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfMzJfcGFydC5yc3Bf cHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BS T1RPQ09MX1g4Nl82NDoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9O U0UoJmJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQsCi0gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQu cnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BP TlNFKCZibGtkZXYtPnJpbmdzLng4Nl82NF9wYXJ0LAorICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfNjRfcGFy dC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBkZWZhdWx0 OgotICAgICAgICBkc3QgPSBOVUxMOworICAgICAgICByZXR1cm4gMDsKICAg ICB9Ci0gICAgbWVtY3B5KGRzdCwgJnJlc3AsIHNpemVvZihyZXNwKSk7CisK KyAgICByZXNwLT5pZCAgICAgICAgPSBpb3JlcS0+cmVxLmlkOworICAgIHJl c3AtPm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOworICAgIHJl c3AtPnN0YXR1cyAgICA9IGlvcmVxLT5zdGF0dXM7CisKICAgICBibGtkZXYt PnJpbmdzLmNvbW1vbi5yc3BfcHJvZF9wdnQrKzsKIAogICAgIFJJTkdfUFVT SF9SRVNQT05TRVNfQU5EX0NIRUNLX05PVElGWSgmYmxrZGV2LT5yaW5ncy5j b21tb24sIHNlbmRfbm90aWZ5KTsK --=separator Content-Type: application/octet-stream; name="xsa216-qemuu-4.7.patch" Content-Disposition: attachment; filename="xsa216-qemuu-4.7.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1 Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w ZXJhcmRAY2l0cml4LmNvbT4KCi0tLSBhL2h3L2Jsb2NrL3hlbl9ibGtpZi5o CisrKyBiL2h3L2Jsb2NrL3hlbl9ibGtpZi5oCkBAIC0xMiw5ICsxMiw2IEBA CiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QgewogCWNoYXIgZHVtbXk7 CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNwb25zZSB7Ci0JY2hhciBk dW1teTsKLX07CiAKIC8qIGkzODYgcHJvdG9jb2wgdmVyc2lvbiAqLwogI3By YWdtYSBwYWNrKHB1c2gsIDQpCkBAIC0yNiwxMyArMjMsNyBAQCBzdHJ1Y3Qg YmxraWZfeDg2XzMyX3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90IHNlY3Rv cl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChyL3cgb25s eSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBzZWdbQkxL SUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1Y3QgYmxr aWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAgaWQ7ICAg ICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0JdWludDhf dCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZyb20gcmVx dWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAgICAgIC8q IEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07CiB0eXBlZGVmIHN0cnVjdCBi bGtpZl94ODZfMzJfcmVxdWVzdCBibGtpZl94ODZfMzJfcmVxdWVzdF90Owot dHlwZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIGJsa2lmX3g4 Nl8zMl9yZXNwb25zZV90OwogI3ByYWdtYSBwYWNrKHBvcCkKIAogLyogeDg2 XzY0IHByb3RvY29sIHZlcnNpb24gKi8KQEAgLTQ0LDE3ICszNSwxNCBAQCBz dHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90 IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChy L3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBz ZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1 Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICBf X2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwotCXVpbnQ4X3Qg ICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVl c3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBC TEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlwZWRlZiBzdHJ1Y3QgYmxr aWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0X3JlcXVlc3RfdDsKLXR5 cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNwb25zZSBibGtpZl94ODZf NjRfcmVzcG9uc2VfdDsKIAotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZfY29t bW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsIHN0cnVjdCBibGtp Zl9jb21tb25fcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZf eDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMyX3JlcXVlc3QsIHN0cnVjdCBi bGtpZl94ODZfMzJfcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxr aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsIHN0cnVj dCBibGtpZl94ODZfNjRfcmVzcG9uc2UpOworREVGSU5FX1JJTkdfVFlQRVMo YmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsCisg ICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOworREVG SU5FX1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2 XzMyX3JlcXVlc3QsCisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZf cmVzcG9uc2UgUUVNVV9QQUNLRUQpOworREVGSU5FX1JJTkdfVFlQRVMoYmxr aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsCisgICAg ICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogCiB1bmlv biBibGtpZl9iYWNrX3JpbmdzIHsKIAlibGtpZl9iYWNrX3JpbmdfdCAgICAg ICAgbmF0aXZlOwotLS0gYS9ody9ibG9jay94ZW5fZGlzay5jCisrKyBiL2h3 L2Jsb2NrL3hlbl9kaXNrLmMKQEAgLTYxNCwzMSArNjE0LDMwIEBAIHN0YXRp YyBpbnQgYmxrX3NlbmRfcmVzcG9uc2Vfb25lKHN0cnVjdAogICAgIHN0cnVj dCBYZW5CbGtEZXYgICpibGtkZXYgPSBpb3JlcS0+YmxrZGV2OwogICAgIGlu dCAgICAgICAgICAgICAgIHNlbmRfbm90aWZ5ICAgPSAwOwogICAgIGludCAg ICAgICAgICAgICAgIGhhdmVfcmVxdWVzdHMgPSAwOwotICAgIGJsa2lmX3Jl c3BvbnNlX3QgIHJlc3A7Ci0gICAgdm9pZCAgICAgICAgICAgICAgKmRzdDsK LQotICAgIHJlc3AuaWQgICAgICAgID0gaW9yZXEtPnJlcS5pZDsKLSAgICBy ZXNwLm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOwotICAgIHJl c3Auc3RhdHVzICAgID0gaW9yZXEtPnN0YXR1czsKKyAgICBibGtpZl9yZXNw b25zZV90ICAqcmVzcDsKIAogICAgIC8qIFBsYWNlIG9uIHRoZSByZXNwb25z ZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9tYWluLiAqLwogICAgIHN3aXRj aCAoYmxrZGV2LT5wcm90b2NvbCkgewogICAgIGNhc2UgQkxLSUZfUFJPVE9D T0xfTkFUSVZFOgotICAgICAgICBkc3QgPSBSSU5HX0dFVF9SRVNQT05TRSgm YmxrZGV2LT5yaW5ncy5uYXRpdmUsIGJsa2Rldi0+cmluZ3MubmF0aXZlLnJz cF9wcm9kX3B2dCk7CisgICAgICAgIHJlc3AgPSBSSU5HX0dFVF9SRVNQT05T RSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBibGtkZXYtPnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9w dnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09M X1g4Nl8zMjoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJs a2Rldi0+cmluZ3MueDg2XzMyX3BhcnQsCi0gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzMyX3BhcnQucnNwX3By b2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZi bGtkZXYtPnJpbmdzLng4Nl8zMl9wYXJ0LAorICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfMzJfcGFydC5yc3Bf cHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BS T1RPQ09MX1g4Nl82NDoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9O U0UoJmJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQsCi0gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQu cnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BP TlNFKCZibGtkZXYtPnJpbmdzLng4Nl82NF9wYXJ0LAorICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfNjRfcGFy dC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBkZWZhdWx0 OgotICAgICAgICBkc3QgPSBOVUxMOwogICAgICAgICByZXR1cm4gMDsKICAg ICB9Ci0gICAgbWVtY3B5KGRzdCwgJnJlc3AsIHNpemVvZihyZXNwKSk7CisK KyAgICByZXNwLT5pZCAgICAgICAgPSBpb3JlcS0+cmVxLmlkOworICAgIHJl c3AtPm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOworICAgIHJl c3AtPnN0YXR1cyAgICA9IGlvcmVxLT5zdGF0dXM7CisKICAgICBibGtkZXYt PnJpbmdzLmNvbW1vbi5yc3BfcHJvZF9wdnQrKzsKIAogICAgIFJJTkdfUFVT SF9SRVNQT05TRVNfQU5EX0NIRUNLX05PVElGWSgmYmxrZGV2LT5yaW5ncy5j b21tb24sIHNlbmRfbm90aWZ5KTsK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3RzLnhlbi5v cmcveGVuLWRldmVsCg== --=separator--