<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>112694</bug_id>
          
          <creation_ts>2013-03-19 06:46:41 -0700</creation_ts>
          <short_desc>Crash when loading http://www.jqchart.com/jquery/gauges/RadialGauge/LiveData</short_desc>
          <delta_ts>2013-03-21 05:39:19 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://www.jqchart.com/jquery/gauges/RadialGauge/LiveData</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P1</priority>
          <bug_severity>Critical</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>79668</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="János Badics">jbadics</reporter>
          <assigned_to name="Michael Saboff">msaboff</assigned_to>
          <cc>abecsi</cc>
    
    <cc>allan.jensen</cc>
    
    <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>msaboff</cc>
    
    <cc>oliver</cc>
    
    <cc>ossy</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>858229</commentid>
    <comment_count>0</comment_count>
    <who name="János Badics">jbadics</who>
    <bug_when>2013-03-19 06:46:41 -0700</bug_when>
    <thetext>When loading http://www.jqchart.com/jquery/gauges/RadialGauge/LiveData Minibrowser crashes with QNetworkReplyImplPrivate::error.
A detailed description can be found at https://bugreports.qt-project.org/browse/QTBUG-30239?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

It can be reproduced on Qt and Nix as well.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858233</commentid>
    <comment_count>1</comment_count>
    <who name="Andras Becsi">abecsi</who>
    <bug_when>2013-03-19 06:50:56 -0700</bug_when>
    <thetext>The stacktrace points to DFG JIT:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe1803700 (LWP 7200)]
0x00007ffff1e6e7a4 in JSC::DFG::Node::hasResult (this=0x1) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGNode.h:622
622 return m_flags &amp; NodeResultMask;
(gdb) bt
#0 0x00007ffff1e6e7a4 in JSC::DFG::Node::hasResult (this=0x1) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGNode.h:622
#1 0x00007ffff1f25412 in JSC::DFG::ScoreBoard::useIfHasResult (this=0x7fffffffb200, child=...) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGScoreBoard.h:136
#2 0x00007ffff1f25678 in JSC::DFG::VirtualRegisterAllocationPhase::run (this=0x7fffffffb4f0) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGVirtualRegisterAllocationPhase.cpp:94
#3 0x00007ffff1f26327 in JSC::DFG::runAndLog&lt;JSC::DFG::VirtualRegisterAllocationPhase&gt; (phase=...) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGPhase.h:75
#4 0x00007ffff1f25d8e in JSC::DFG::runPhase&lt;JSC::DFG::VirtualRegisterAllocationPhase&gt; (graph=...) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGPhase.h:85
#5 0x00007ffff1f24d1b in JSC::DFG::performVirtualRegisterAllocation (graph=...) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGVirtualRegisterAllocationPhase.cpp:146
#6 0x00007ffff1e8056a in JSC::DFG::compile (compileMode=JSC::DFG::CompileFunction, exec=0x7fff833ff558, codeBlock=0x13d85e0, jitCode=..., jitCodeWithArityCheck=0x7fff830f12c0, osrEntryBytecodeIndex=0)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGDriver.cpp:145
#7 0x00007ffff1e7fe28 in JSC::DFG::tryCompileFunction (exec=0x7fff833ff558, codeBlock=0x13d85e0, jitCode=..., jitCodeWithArityCheck=..., bytecodeIndex=0) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/dfg/DFGDriver.cpp:179
#8 0x00007ffff201a49d in JSC::jitCompileFunctionIfAppropriate (exec=0x7fff833ff558, codeBlock=..., jitCode=..., jitCodeWithArityCheck=..., jitType=JSC::JITCode::DFGJIT, bytecodeIndex=0, effort=JSC::JITCompilationCanFail)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/jit/JITDriver.h:95
#9 0x00007ffff201a78f in JSC::prepareFunctionForExecution (exec=0x7fff833ff558, codeBlock=..., jitCode=..., jitCodeWithArityCheck=..., jitType=JSC::JITCode::DFGJIT, bytecodeIndex=0, kind=JSC::CodeForCall)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/runtime/ExecutionHarness.h:68
#10 0x00007ffff20189de in JSC::FunctionExecutable::compileForCallInternal (this=0x7fff830f1270, exec=0x7fff833ff558, scope=0x7fff9809ec70, jitType=JSC::JITCode::DFGJIT, bytecodeIndex=0)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/runtime/Executable.cpp:538
#11 0x00007ffff201815b in JSC::FunctionExecutable::compileOptimizedForCall (this=0x7fff830f1270, exec=0x7fff833ff558, scope=0x7fff9809ec70, bytecodeIndex=0)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/runtime/Executable.cpp:463
#12 0x00007ffff1d65aaf in JSC::FunctionExecutable::compileOptimizedFor (this=0x7fff830f1270, exec=0x7fff833ff558, scope=0x7fff9809ec70, bytecodeIndex=0, kind=JSC::CodeForCall)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/runtime/Executable.h:678
#13 0x00007ffff1d6045e in JSC::FunctionCodeBlock::compileOptimized (this=0xc1c520, exec=0x7fff833ff558, scope=0x7fff9809ec70, bytecodeIndex=0) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/bytecode/CodeBlock.cpp:2879
#14 0x00007ffff1f610ae in JSC::cti_optimize (args=0x7fffffffcf50) at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/jit/JITStubs.cpp:1899
#15 0x00007ffff1f5e0cd in JSC::tryCacheGetByID (callFrame=0x7fff833ff558, codeBlock=0x7fff9809ec70, returnAddress=..., baseValue=..., propertyName=..., slot=..., stubInfo=0x7fff00000000)
at /home/abecsi/devel/git/webkit-git-svn/Source/JavaScriptCore/jit/JITStubs.cpp:996
#16 0x00007fff833ff058 in ?? ()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858234</commentid>
    <comment_count>2</comment_count>
    <who name="Andras Becsi">abecsi</who>
    <bug_when>2013-03-19 06:52:23 -0700</bug_when>
    <thetext>Note that the QNetworkReplyImplPrivate::error is unrelated to the crash.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858362</commentid>
    <comment_count>3</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-03-19 09:44:25 -0700</bug_when>
    <thetext>I can reproduce this in a WebKit nightly as well.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858363</commentid>
    <comment_count>4</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-03-19 09:44:52 -0700</bug_when>
    <thetext>&lt;rdar://problem/13452460&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858675</commentid>
    <comment_count>5</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-19 13:24:42 -0700</bug_when>
    <thetext>Have reduced this down to one function that we are crashing while compiling in the DFG.  The source is:
function (c, u, f) {
    if (c == null || c.visible != true) return [];
    var n = [],
        t = a.fitInRange(c.offset, 0, 1),
        v = c.length,
        e = this.cx,
        g = this.cy,
        x = e,
        r = g - t * this.radius,
        y = e,
        z = r - v;
    if (!Array.prototype.filter) Array.prototype.filter = function (c) {
            &quot;use strict&quot;;
            if (this === void 0 || this === null) throw new TypeError;
            var b = Object(this),
                g = b.length &gt;&gt;&gt; 0;
            if (typeof c !== &quot;function&quot;) throw new TypeError;
            for (var d = [], f = arguments[1], a = 0; a &lt; g; a++) if (a in b) {
                    var e = b[a];
                    c.call(f, e, a, b) &amp;&amp; d.push(e)
                }
            return d
    };
    if (u === false) {
        var s = this._getMarkInterval(c, false),
            l = this._getIntervals(s, c, false);
        if (f.visible === true) {
            var m = this._getMarkInterval(f, true),
                j = this._getIntervals(m, f, true),
                i = [];                      &lt;=====  Appears we are dying after eliminating the NewArray node here
            i = l.filter(function (a) {
                return b.inArray(a, j) === -1
            });
            intrs = i
        } else intrs = l
    } else {
        var m = this._getMarkInterval(c, true),
            j = this._getIntervals(m, c, true);
        intrs = j
    }
    for (var h = 0; h &lt; intrs.length; h++) {
        var w = intrs[h],
            o = this._getAngle(w),
            p = a.rotatePointAt(x, r, o, e, g),
            q = a.rotatePointAt(y, z, o, e, g),
            d = new k(p.x, p.y, q.x, q.y);
        d.strokeStyle = c.strokeStyle;
        d.lineWidth = c.lineWidth;
        d.strokeDashArray = c.strokeDashArray;
        d.zIndex = c.zIndex;
        d.dontRound = true;
        n.push(d)
    }
    return n
}

It looks like we are eliminating at least the NewArray node depicted above.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858781</commentid>
    <comment_count>6</comment_count>
      <attachid>193931</attachid>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-19 15:03:43 -0700</bug_when>
    <thetext>Created attachment 193931
Patch

Reviewed in person.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>858806</commentid>
    <comment_count>7</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-19 15:24:33 -0700</bug_when>
    <thetext>Committed r146268: &lt;http://trac.webkit.org/changeset/146268&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859224</commentid>
    <comment_count>8</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-03-20 03:42:55 -0700</bug_when>
    <thetext>Thanks for the fast fix! 

The fix however seems to be very specific to the new improvements in DFG, so before I try myself to backport it to something that fits december/january DFG, I would like to ask if you plan to backport it to the safari-536.30-branch because that might also be useable as a backported fix to Qt?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859501</commentid>
    <comment_count>9</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-03-20 09:46:54 -0700</bug_when>
    <thetext>Do we have a layout test for this?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859505</commentid>
    <comment_count>10</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-20 09:48:56 -0700</bug_when>
    <thetext>(In reply to comment #9)
&gt; Do we have a layout test for this?

Working on one.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859520</commentid>
    <comment_count>11</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-20 10:01:25 -0700</bug_when>
    <thetext>(In reply to comment #8)
&gt; Thanks for the fast fix! 
&gt; 
&gt; The fix however seems to be very specific to the new improvements in DFG, so before I try myself to backport it to something that fits december/january DFG, I would like to ask if you plan to backport it to the safari-536.30-branch because that might also be useable as a backported fix to Qt?

You are likely referring to the Node* improvements made in http://trac.webkit.org/changeset/141069.  I don&apos;t have plans to back port.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859594</commentid>
    <comment_count>12</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-03-20 12:03:27 -0700</bug_when>
    <thetext>(In reply to comment #11)
&gt; (In reply to comment #8)
&gt; &gt; Thanks for the fast fix! 
&gt; &gt; 
&gt; &gt; The fix however seems to be very specific to the new improvements in DFG, so before I try myself to backport it to something that fits december/january DFG, I would like to ask if you plan to backport it to the safari-536.30-branch because that might also be useable as a backported fix to Qt?
&gt; 
&gt; You are likely referring to the Node* improvements made in http://trac.webkit.org/changeset/141069.  I don&apos;t have plans to back port.

No, I was just naively observing the files and methods you modified are relatively recent additions. Are you sure this is not a potential security issue that would need to be backported?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>859643</commentid>
    <comment_count>13</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2013-03-20 13:20:34 -0700</bug_when>
    <thetext>(In reply to comment #12)
&gt; (In reply to comment #11)
&gt; &gt; (In reply to comment #8)
&gt; &gt; &gt; Thanks for the fast fix! 
&gt; &gt; &gt; 
&gt; &gt; &gt; The fix however seems to be very specific to the new improvements in DFG, so before I try myself to backport it to something that fits december/january DFG, I would like to ask if you plan to backport it to the safari-536.30-branch because that might also be useable as a backported fix to Qt?
&gt; &gt; 
&gt; &gt; You are likely referring to the Node* improvements made in http://trac.webkit.org/changeset/141069.  I don&apos;t have plans to back port.
&gt; 
&gt; No, I was just naively observing the files and methods you modified are relatively recent additions. Are you sure this is not a potential security issue that would need to be backported?

The underlying bug fixed here was introduced in http://trac.webkit.org/changeset/144862.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>860244</commentid>
    <comment_count>14</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-03-21 05:39:19 -0700</bug_when>
    <thetext>(In reply to comment #13)
&gt; (In reply to comment #12)
&gt; &gt; (In reply to comment #11)
&gt; &gt; &gt; (In reply to comment #8)
&gt; &gt; &gt; &gt; Thanks for the fast fix! 
&gt; &gt; &gt; &gt; 
&gt; &gt; &gt; &gt; The fix however seems to be very specific to the new improvements in DFG, so before I try myself to backport it to something that fits december/january DFG, I would like to ask if you plan to backport it to the safari-536.30-branch because that might also be useable as a backported fix to Qt?
&gt; &gt; &gt; 
&gt; &gt; &gt; You are likely referring to the Node* improvements made in http://trac.webkit.org/changeset/141069.  I don&apos;t have plans to back port.
&gt; &gt; 
&gt; &gt; No, I was just naively observing the files and methods you modified are relatively recent additions. Are you sure this is not a potential security issue that would need to be backported?
&gt; 
&gt; The underlying bug fixed here was introduced in http://trac.webkit.org/changeset/144862.

Ah, then there is/was a second issue. The original crash that opened this bug happens in Qt 5.0.1 which was branched from WebKit trunk in December.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>193931</attachid>
            <date>2013-03-19 15:03:43 -0700</date>
            <delta_ts>2013-03-19 15:03:43 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>112694.patch</filename>
            <type>text/plain</type>
            <size>4346</size>
            <attacher name="Michael Saboff">msaboff</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTQ2MjYwKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDI0IEBA
CisyMDEzLTAzLTE5ICBNaWNoYWVsIFNhYm9mZiAgPG1zYWJvZmZAYXBwbGUuY29tPgorCisgICAg
ICAgIENyYXNoIHdoZW4gbG9hZGluZyBodHRwOi8vd3d3LmpxY2hhcnQuY29tL2pxdWVyeS9nYXVn
ZXMvUmFkaWFsR2F1Z2UvTGl2ZURhdGEKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcv
c2hvd19idWcuY2dpP2lkPTExMjY5NAorCisgICAgICAgIFJldmlld2VkIGJ5IEZpbGlwIFBpemxv
LgorCisgICAgICAgIFdlIHdlcmUgdHJ5aW5nIHRvIGNvbnZlcnQgYW4gTmV3QXJyYXkgdG8gYSBQ
aGFudG9tLCBidXQgY29udmVydFRvUGhhbnRvbSBkb2Vzbid0IGhhbmRsZQorICAgICAgICBub2Rl
cyB3aXRoIHZhcmlhYmxlIGFyZ3VtZW50cy4gIEFkZGVkIGNvZGUgdG8gaW5zZXJ0IGEgUGhhbnRv
bSBub2RlIGluIGZyb250IG9mIGFsbCB0aGUKKyAgICAgICAgbGl2ZSBjaGlsZHJlbiBvZiBhIHZh
ciBhcmdzIG5vZGUuICBBZGRlZCBBU1NFUlQgbm90IHZhciBhcmdzIGZvciBjb252ZXJ0VG9QaGFu
dG9tIHRvCisgICAgICAgIGNhdGNoIGFueSBvdGhlciBzaW1pbGFyIGNhc2VzLiAgQWRkZWQgYSBu
ZXcgY29udmVydFRvUGhhbnRvbVVuY2hlY2tlZCgpIGZvciBjb252ZXJ0aW5nIAorICAgICAgICB2
YXIgYXJnIG5vZGVzLgorCisgICAgICAgICogZGZnL0RGR0RDRVBoYXNlLmNwcDoKKyAgICAgICAg
KEpTQzo6REZHOjpEQ0VQaGFzZTo6cnVuKToKKyAgICAgICAgKiBkZmcvREZHTm9kZS5oOgorICAg
ICAgICAoTm9kZSk6CisgICAgICAgIChKU0M6OkRGRzo6Tm9kZTo6c2V0T3BBbmREZWZhdWx0Tm9u
RXhpdEZsYWdzKTogQWRkZWQgQVNTRVJUKCEobV9mbGFncyAmIE5vZGVIYXNWYXJBcmdzKSkKKyAg
ICAgICAgKEpTQzo6REZHOjpOb2RlOjpzZXRPcEFuZERlZmF1bHROb25FeGl0RmxhZ3NVbmNoZWNr
ZWQpOgorICAgICAgICAoSlNDOjpERkc6Ok5vZGU6OmNvbnZlcnRUb1BoYW50b21VbmNoZWNrZWQp
OgorCiAyMDEzLTAzLTE5ICBPbGl2ZXIgSHVudCAgPG9saXZlckBhcHBsZS5jb20+CiAKICAgICAg
ICAgUkVMRUFTRV9BU1NFUlQgZmlyZXMgaW4gZXhjZXB0aW9uIGhhbmRsZXIgbG9va3VwCkluZGV4
OiBTb3VyY2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR0RDRVBoYXNlLmNwcAo9PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0t
LSBTb3VyY2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR0RDRVBoYXNlLmNwcAkocmV2aXNpb24gMTQ2
MjA1KQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdEQ0VQaGFzZS5jcHAJKHdvcmtp
bmcgY29weSkKQEAgLTMwLDYgKzMwLDcgQEAKIAogI2luY2x1ZGUgIkRGR0Jhc2ljQmxvY2tJbmxp
bmVzLmgiCiAjaW5jbHVkZSAiREZHR3JhcGguaCIKKyNpbmNsdWRlICJERkdJbnNlcnRpb25TZXQu
aCIKICNpbmNsdWRlICJERkdQaGFzZS5oIgogI2luY2x1ZGUgIk9wZXJhdGlvbnMuaCIKIApAQCAt
ODQsNiArODUsOSBAQCBwdWJsaWM6CiAgICAgICAgICAgICBCYXNpY0Jsb2NrKiBibG9jayA9IG1f
Z3JhcGgubV9ibG9ja3NbYmxvY2tJbmRleF0uZ2V0KCk7CiAgICAgICAgICAgICBpZiAoIWJsb2Nr
KQogICAgICAgICAgICAgICAgIGNvbnRpbnVlOworCisgICAgICAgICAgICBJbnNlcnRpb25TZXQg
aW5zZXJ0aW9uU2V0KG1fZ3JhcGgpOworCiAgICAgICAgICAgICBmb3IgKHVuc2lnbmVkIGluZGV4
SW5CbG9jayA9IGJsb2NrLT5zaXplKCk7IGluZGV4SW5CbG9jay0tOykgewogICAgICAgICAgICAg
ICAgIE5vZGUqIG5vZGUgPSBibG9jay0+YXQoaW5kZXhJbkJsb2NrKTsKICAgICAgICAgICAgICAg
ICBpZiAobm9kZS0+c2hvdWxkR2VuZXJhdGUoKSkKQEAgLTExNiwxNCArMTIwLDMyIEBAIHB1Ymxp
YzoKICAgICAgICAgICAgICAgICAgICAgLy8gTGVhdmUgdGhlbSBhcyBub3Qgc2hvdWxkR2VuZXJh
dGUuCiAgICAgICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgICAgIH0KLSAgICAg
ICAgICAgICAgICAgICAgCisKICAgICAgICAgICAgICAgICBkZWZhdWx0OiB7CisgICAgICAgICAg
ICAgICAgICAgIGlmIChub2RlLT5mbGFncygpICYgTm9kZUhhc1ZhckFyZ3MpIHsKKyAgICAgICAg
ICAgICAgICAgICAgICAgIGZvciAodW5zaWduZWQgY2hpbGRJZHggPSBub2RlLT5maXJzdENoaWxk
KCk7IGNoaWxkSWR4IDwgbm9kZS0+Zmlyc3RDaGlsZCgpICsgbm9kZS0+bnVtQ2hpbGRyZW4oKTsg
Y2hpbGRJZHgrKykgeworICAgICAgICAgICAgICAgICAgICAgICAgICAgIEVkZ2UgZWRnZSA9IG1f
Z3JhcGgubV92YXJBcmdDaGlsZHJlbltjaGlsZElkeF07CisKKyAgICAgICAgICAgICAgICAgICAg
ICAgICAgICBpZiAoIWVkZ2UgfHwgZWRnZS5pc1Byb3ZlZCgpIHx8IGVkZ2UudXNlS2luZCgpID09
IFVudHlwZWRVc2UpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNvbnRpbnVlOwor
CisgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW5zZXJ0aW9uU2V0Lmluc2VydE5vZGUoaW5k
ZXhJbkJsb2NrLCBTcGVjTm9uZSwgUGhhbnRvbSwgbm9kZS0+Y29kZU9yaWdpbiwgZWRnZSk7Cisg
ICAgICAgICAgICAgICAgICAgICAgICB9CisKKyAgICAgICAgICAgICAgICAgICAgICAgIG5vZGUt
PmNvbnZlcnRUb1BoYW50b21VbmNoZWNrZWQoKTsKKyAgICAgICAgICAgICAgICAgICAgICAgIG5v
ZGUtPmNoaWxkcmVuLnJlc2V0KCk7CisgICAgICAgICAgICAgICAgICAgICAgICBub2RlLT5zZXRS
ZWZDb3VudCgxKTsKKyAgICAgICAgICAgICAgICAgICAgICAgIGJyZWFrOworICAgICAgICAgICAg
ICAgICAgICB9CisKICAgICAgICAgICAgICAgICAgICAgbm9kZS0+Y29udmVydFRvUGhhbnRvbSgp
OwogICAgICAgICAgICAgICAgICAgICBlbGltaW5hdGVJcnJlbGV2YW50UGhhbnRvbUNoaWxkcmVu
KG5vZGUpOwogICAgICAgICAgICAgICAgICAgICBub2RlLT5zZXRSZWZDb3VudCgxKTsKICAgICAg
ICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgICAgICAgfSB9CiAgICAgICAgICAgICB9
CisKKyAgICAgICAgICAgIGluc2VydGlvblNldC5leGVjdXRlKGJsb2NrKTsKICAgICAgICAgfQog
ICAgICAgICAKICAgICAgICAgbV9ncmFwaC5tX3JlZkNvdW50U3RhdGUgPSBFeGFjdFJlZkNvdW50
OwpJbmRleDogU291cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdOb2RlLmgKPT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot
LS0gU291cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdOb2RlLmgJKHJldmlzaW9uIDE0NjIwNSkK
KysrIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9kZmcvREZHTm9kZS5oCSh3b3JraW5nIGNvcHkpCkBA
IC0xOTYsMTggKzE5NiwyOSBAQCBzdHJ1Y3QgTm9kZSB7CiAgICAgICAgIG1fb3AgPSBvcDsKICAg
ICAgICAgbV9mbGFncyA9IGRlZmF1bHRGbGFncyhvcCk7CiAgICAgfQotICAgIAorCiAgICAgdm9p
ZCBzZXRPcEFuZERlZmF1bHROb25FeGl0RmxhZ3MoTm9kZVR5cGUgb3ApCiAgICAgeworICAgICAg
ICBBU1NFUlQoIShtX2ZsYWdzICYgTm9kZUhhc1ZhckFyZ3MpKTsKKyAgICAgICAgc2V0T3BBbmRE
ZWZhdWx0Tm9uRXhpdEZsYWdzVW5jaGVja2VkKG9wKTsKKyAgICB9CisKKyAgICB2b2lkIHNldE9w
QW5kRGVmYXVsdE5vbkV4aXRGbGFnc1VuY2hlY2tlZChOb2RlVHlwZSBvcCkKKyAgICB7CiAgICAg
ICAgIG1fb3AgPSBvcDsKICAgICAgICAgbV9mbGFncyA9IChkZWZhdWx0RmxhZ3Mob3ApICYgfk5v
ZGVFeGl0c0ZvcndhcmQpIHwgKG1fZmxhZ3MgJiBOb2RlRXhpdHNGb3J3YXJkKTsKICAgICB9Ci0g
ICAgCisKICAgICB2b2lkIGNvbnZlcnRUb1BoYW50b20oKQogICAgIHsKICAgICAgICAgc2V0T3BB
bmREZWZhdWx0Tm9uRXhpdEZsYWdzKFBoYW50b20pOwogICAgIH0KLSAgICAKKworICAgIHZvaWQg
Y29udmVydFRvUGhhbnRvbVVuY2hlY2tlZCgpCisgICAgeworICAgICAgICBzZXRPcEFuZERlZmF1
bHROb25FeGl0RmxhZ3NVbmNoZWNrZWQoUGhhbnRvbSk7CisgICAgfQorCiAgICAgdm9pZCBjb252
ZXJ0VG9JZGVudGl0eSgpCiAgICAgewogICAgICAgICBzZXRPcEFuZERlZmF1bHROb25FeGl0Rmxh
Z3MoSWRlbnRpdHkpOwo=
</data>

          </attachment>
      

    </bug>

</bugzilla>