122092 2013-09-30 02:22:33 -0700 ASSERTION FAILED: isHTMLTitleElement(m_titleElement.get()) in WebCore::Document::setTitle 2013-11-05 19:46:10 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 116980 1 rhodovan.u-szeged rhodovan.u-szeged cdumez commit-queue darin d-r esprehn+autocc fmalita ggaren gyuyoung.kim gyuyoung.kim kangil.han kling pdr rniwa schenney oldest_to_newest 934501 0 rhodovan.u-szeged 2013-09-30 02:22:33 -0700 The failing test: <html> <svg> <title>title</title> </svg> <script> document.write("<title>"); document.title = "Property"; document.write("Written</title>");</script> </html> The backtrace: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff56134c6 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 342 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007ffff56134c6 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 #1 0x00007ffff4095653 in WebCore::Document::setTitle (this=0x89da80, title=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:1560 #2 0x00007ffff4dc9c4f in WebCore::setJSDocumentTitle (exec=0x7fff967c1fa0, thisObject=0x7fff8df1feb0, value=...) at generated/JSDocument.cpp:1653 #3 0x00007ffff4dd3c70 in JSC::putEntry<WebCore::JSDocument> (exec=0x7fff967c1fa0, entry=0x8ff750, propertyName=..., value=..., thisObj=0x7fff8df1feb0, shouldThrow=false) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Lookup.h:301 #4 0x00007ffff4dd3980 in JSC::lookupPut<WebCore::JSDocument> (exec=0x7fff967c1fa0, propertyName=..., value=..., table=..., thisObj=0x7fff8df1feb0, shouldThrow=false) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Lookup.h:319 #5 0x00007ffff4dd31ba in JSC::lookupPut<WebCore::JSDocument, WebCore::JSNode> (exec=0x7fff967c1fa0, propertyName=..., value=..., table=..., thisObj=0x7fff8df1feb0, slot=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Lookup.h:332 #6 0x00007ffff4dc9aa5 in WebCore::JSDocument::put (cell=0x7fff8df1feb0, exec=0x7fff967c1fa0, propertyName=..., value=..., slot=...) at generated/JSDocument.cpp:1614 #7 0x00007ffff4ebbcd6 in JSC::lookupPut<WebCore::JSHTMLDocument, WebCore::JSDocument> (exec=0x7fff967c1fa0, propertyName=..., value=..., table=..., thisObj=0x7fff8df1feb0, slot=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Lookup.h:333 #8 0x00007ffff4ebaa35 in WebCore::JSHTMLDocument::put (cell=0x7fff8df1feb0, exec=0x7fff967c1fa0, propertyName=..., value=..., slot=...) at generated/JSHTMLDocument.cpp:320 #9 0x00007ffff536e48d in JSC::JSValue::put (this=0x7fffffffaf70, exec=0x7fff967c1fa0, propertyName=..., value=..., slot=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/JSCJSValueInlines.h:703 #10 0x00007ffff5473aa6 in JSC::LLInt::llint_slow_path_put_by_id (exec=0x7fff967c1fa0, pc=0x8fd550) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:583 #11 0x00007ffff67453f1 in llint_op_put_by_id () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5 #12 0x00007fff967c1fa0 in ?? () #13 0x0000000000761f28 in ?? () #14 0x00007fffffffb080 in ?? () #15 0x00007ffff541de2f in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:214 #16 0x00007ffff54311e2 in JSC::JITCode::execute (this=0x8d0f60, stack=0x761f28, callFrame=0x7fff967c1fa0, vm=0x80f5c0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46 #17 0x00007ffff541a654 in JSC::Interpreter::execute (this=0x761f10, program=0x7fff8df5fef0, callFrame=0x7fff8e03f9b0, thisObj=0x7fff8e07ffd8) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:888 #18 0x00007ffff5513275 in JSC::evaluate (exec=0x7fff8e03f9b0, source=..., thisValue=..., returnedException=0x7fffffffc6a0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Completion.cpp:83 #19 0x00007ffff3e563ef in WebCore::JSMainThreadExecState::evaluate (exec=0x7fff8e03f9b0, source=..., thisValue=..., exception=0x7fffffffc6a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:62 #20 0x00007ffff3e75d0a in WebCore::ScriptController::evaluateInWorld (this=0x769180, sourceCode=..., world=0x7a5480) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/ScriptController.cpp:142 #21 0x00007ffff3e75e18 in WebCore::ScriptController::evaluate (this=0x769180, sourceCode=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/ScriptController.cpp:158 #22 0x00007ffff415e2d1 in WebCore::ScriptElement::executeScript (this=0x8d92b8, sourceCode=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ScriptElement.cpp:315 #23 0x00007ffff415dafa in WebCore::ScriptElement::prepareScript (this=0x8d92b8, scriptStartPosition=..., supportLegacyTypes=WebCore::ScriptElement::DisallowLegacyTypeInTypeAttribute) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ScriptElement.cpp:246 #24 0x00007ffff431777e in WebCore::HTMLScriptRunner::runScript (this=0x7605a0, script=0x8d9250, scriptStartPosition=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLScriptRunner.cpp:312 #25 0x00007ffff4316ef4 in WebCore::HTMLScriptRunner::execute (this=0x7605a0, scriptElement=..., scriptStartPosition=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLScriptRunner.cpp:181 #26 0x00007ffff43036cb in WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder (this=0x76d8f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:272 #27 0x00007ffff43037b6 in WebCore::HTMLDocumentParser::canTakeNextToken (this=0x76d8f0, mode=WebCore::HTMLDocumentParser::AllowYield, session=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:291 #28 0x00007ffff4303da9 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x76d8f0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:536 ---Type <return> to continue, or q <return> to quit--- #29 0x00007ffff4303539 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x76d8f0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:236 #30 0x00007ffff430461f in WebCore::HTMLDocumentParser::append (this=0x76d8f0, inputSource=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:742 #31 0x00007ffff408be6a in WebCore::DecodedDataDocumentParser::flush (this=0x76d8f0, writer=0x6e1fb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60 #32 0x00007ffff44a075f in WebCore::DocumentWriter::end (this=0x6e1fb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:242 #33 0x00007ffff4492d46 in WebCore::DocumentLoader::finishedLoading (this=0x6e1f10, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408 #34 0x00007ffff4492ab4 in WebCore::DocumentLoader::notifyFinished (this=0x6e1f10, resource=0x7422a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:345 #35 0x00007ffff4479bcc in WebCore::CachedResource::checkNotify (this=0x7422a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #36 0x00007ffff4479ca6 in WebCore::CachedResource::finishLoading (this=0x7422a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385 #37 0x00007ffff4476360 in WebCore::CachedRawResource::finishLoading (this=0x7422a0, data=0x791110) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #38 0x00007ffff44dcc2d in WebCore::SubresourceLoader::didFinishLoading (this=0x774690, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:283 #39 0x00007ffff44d34e7 in WebCore::ResourceLoader::didFinishLoading (this=0x774690, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:489 #40 0x00007ffff49954b5 in WebCore::QNetworkReplyHandler::finish (this=0x777fe0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516 #41 0x00007ffff49940dd in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x778018) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250 #42 0x00007ffff4993ddb in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x778018, method= (void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff49952fa <WebCore::QNetworkReplyHandler::finish()>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216 #43 0x00007ffff4994da8 in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x756d40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409 #44 0x00007ffff4997728 in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x756d40, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffd240) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:175 #45 0x00007ffff1d9ed71 in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #46 0x00007ffff1da033e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #47 0x00007ffff2c6ea24 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #48 0x00007ffff2c71eb6 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #49 0x00007ffff1d778f4 in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #50 0x00007ffff1d7a1a9 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #51 0x00007ffff1dc19c3 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #52 0x00007fffeeb88d53 in g_main_dispatch (context=0x656e00) at /build/buildd/glib2.0-2.32.3/./glib/gmain.c:2539 #53 g_main_context_dispatch (context=0x656e00) at /build/buildd/glib2.0-2.32.3/./glib/gmain.c:3075 #54 0x00007fffeeb890a0 in g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x656e00, self=<optimized out>) at /build/buildd/glib2.0-2.32.3/./glib/gmain.c:3146 #55 g_main_context_iterate (context=0x656e00, block=<optimized out>, dispatch=1, self=<optimized out>) at /build/buildd/glib2.0-2.32.3/./glib/gmain.c:3083 #56 0x00007fffeeb89164 in g_main_context_iteration (context=0x656e00, may_block=1) at /build/buildd/glib2.0-2.32.3/./glib/gmain.c:3207 #57 0x00007ffff1dc1e04 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #58 0x00007ffff1d7668b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #59 0x00007ffff1d7a6de in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #60 0x0000000000420da0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:50 #61 0x0000000000422880 in main (argc=2, argv=0x7fffffffdf18) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:319 934502 1 212964 rhodovan.u-szeged 2013-09-30 02:24:19 -0700 Created attachment 212964 Test case 937918 2 213778 rhodovan.u-szeged 2013-10-09 07:57:36 -0700 Created attachment 213778 Proposed patch The problem was that m_titleElement element could be both HTMLTitleElement and SVGTitleElement. This way the assertion was wrong. The patch is backported from Blink: https://src.chromium.org/viewvc/blink?revision=158620&view=revision 938174 3 213778 darin 2013-10-09 19:15:53 -0700 Comment on attachment 213778 Proposed patch View in context: https://bugs.webkit.org/attachment.cgi?id=213778&action=review > Source/WebCore/ChangeLog:8 > + Remove a bogus assert in Document::setTitle(). This is an incorrect description of what this patch does. The patch removes a bad cast. > Source/WebCore/svg/SVGTitleElement.cpp:46 > + // FIXME: It's possible to register SVGTitleElement to an HTMLDocument. Sorry, I don’t understand what “register to an HTMLDocument” means, nor do I understand what we need to fix. 947132 4 213778 rhodovan.u-szeged 2013-11-05 05:25:16 -0800 Comment on attachment 213778 Proposed patch View in context: https://bugs.webkit.org/attachment.cgi?id=213778&action=review >> Source/WebCore/ChangeLog:8 >> + Remove a bogus assert in Document::setTitle(). > > This is an incorrect description of what this patch does. The patch removes a bad cast. What? I don't really understand this thing about casting... I only removed the assert check (since m_titleElement could be SVGTitleElement too) and I combined the two conditions. >> Source/WebCore/svg/SVGTitleElement.cpp:46 >> + // FIXME: It's possible to register SVGTitleElement to an HTMLDocument. > > Sorry, I don’t understand what “register to an HTMLDocument” means, nor do I understand what we need to fix. I guess document() can return with an HTMLDocument, not just SVGDocument and perhaps we should handle it differently. But I just backported the patch, so I'm not sure. 947265 5 213778 commit-queue 2013-11-05 11:14:43 -0800 Comment on attachment 213778 Proposed patch Clearing flags on attachment: 213778 Committed r158682: <http://trac.webkit.org/changeset/158682> 947266 6 commit-queue 2013-11-05 11:14:47 -0800 All reviewed patches have been landed. Closing bug. 947478 7 rniwa 2013-11-05 19:46:10 -0800 *** Bug 123856 has been marked as a duplicate of this bug. *** 212964 2013-09-30 02:24:19 -0700 2013-09-30 02:24:19 -0700 Test case lastCrash.html text/html 163 rhodovan.u-szeged PGh0bWw+Cgk8c3ZnPgoJCTx0aXRsZT50aXRsZTwvdGl0bGU+Cgk8L3N2Zz4KCTxzY3JpcHQ+IGRv Y3VtZW50LndyaXRlKCI8dGl0bGU+Iik7IGRvY3VtZW50LnRpdGxlID0gIlByb3BlcnR5IjsgZG9j dW1lbnQud3JpdGUoIldyaXR0ZW48L3RpdGxlPiIpOzwvc2NyaXB0Pgo8L2h0bWw+Cg== 213778 2013-10-09 07:57:36 -0700 2013-11-05 11:14:43 -0800 Proposed patch 0001-title-fix.patch text/plain 5106 rhodovan.u-szeged RnJvbSBmNjdmMmFjMzg1YjM3ZWM4ZWEyNjAwOGQwZWM1OTMxYWQ4MGI5Yzc1IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBSZW5hdGEgSG9kb3ZhbiA8cmVuaUB3ZWJraXQub3JnPgpEYXRl OiBXZWQsIDkgT2N0IDIwMTMgMTY6NTA6MTIgKzAyMDAKU3ViamVjdDogW1BBVENIXSB0aXRsZSBm aXgKCi0tLQogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgfCAgIDEwICsrKysrKysrKysKIC4uLi9zdmcvY3VzdG9tL3RpdGxlLWFzc2VydGlvbi1leHBl Y3RlZC50eHQgICAgICAgIHwgICAxMCArKysrKysrKysrCiBMYXlvdXRUZXN0cy9zdmcvY3VzdG9t L3RpdGxlLWFzc2VydGlvbi5odG1sICAgICAgICB8ICAgMTUgKysrKysrKysrKysrKysrCiBTb3Vy Y2UvV2ViQ29yZS9DaGFuZ2VMb2cgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgMjAgKysr KysrKysrKysrKysrKysrKysKIFNvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAgICAgICAg ICAgICAgICAgICAgIHwgICAgNyArKy0tLS0tCiBTb3VyY2UvV2ViQ29yZS9zdmcvU1ZHVGl0bGVF bGVtZW50LmNwcCAgICAgICAgICAgICB8ICAgIDEgKwogNiBmaWxlcyBjaGFuZ2VkLCA1OCBpbnNl cnRpb25zKCspLCA1IGRlbGV0aW9ucygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IExheW91dFRlc3Rz L3N2Zy9jdXN0b20vdGl0bGUtYXNzZXJ0aW9uLWV4cGVjdGVkLnR4dAogY3JlYXRlIG1vZGUgMTAw NjQ0IExheW91dFRlc3RzL3N2Zy9jdXN0b20vdGl0bGUtYXNzZXJ0aW9uLmh0bWwKCmRpZmYgLS1n aXQgYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXgg ZWE3OGRkZC4uMzYwYzRjZCAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBi L0xheW91dFRlc3RzL0NoYW5nZUxvZwpAQCAtMSwzICsxLDEzIEBACisyMDEzLTEwLTA5ICBSZW5h dGEgSG9kb3ZhbiAgPHJlbmlAd2Via2l0Lm9yZz4KKworICAgICAgICBBU1NFUlRJT04gRkFJTEVE OiBpc0hUTUxUaXRsZUVsZW1lbnQobV90aXRsZUVsZW1lbnQuZ2V0KCkpIGluIFdlYkNvcmU6OkRv Y3VtZW50OjpzZXRUaXRsZQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1 Zy5jZ2k/aWQ9MTIyMDkyCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgKiBzdmcvY3VzdG9tL3RpdGxlLWFzc2VydGlvbi1leHBlY3RlZC50eHQ6IEFkZGVk LgorICAgICAgICAqIHN2Zy9jdXN0b20vdGl0bGUtYXNzZXJ0aW9uLmh0bWw6IEFkZGVkLgorCiAy MDEzLTEwLTA4ICBHdXN0YXZvIE5vcm9uaGEgU2lsdmEgIDxnbnNAZ25vbWUub3JnPgogCiAgICAg ICAgIEZpeCBleHBlY3RhdGlvbiBmb3IgZ2VvbG9jYXRpb24gdGVzdCB0aGF0IGhhcyBiZWVuIHRp bWluZyBvdXQuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3RpdGxlLWFzc2Vy dGlvbi1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3RpdGxlLWFzc2VydGlv bi1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uNWRmZjJl OQotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL3N2Zy9jdXN0b20vdGl0bGUtYXNzZXJ0 aW9uLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDEwIEBACitXZSBoYWQgYSBidWcgdGhhdCB1cGRh dGluZyBkb2N1bWVudC50aXRsZSBjYXVzZWQgYW4gYXNzZXJ0aW9uIGZhaWx1cmUuCisKK09uIHN1 Y2Nlc3MsIHlvdSB3aWxsIHNlZSBhIHNlcmllcyBvZiAiUEFTUyIgbWVzc2FnZXMsIGZvbGxvd2Vk IGJ5ICJURVNUIENPTVBMRVRFIi4KKworCitQQVNTIGlmIGFueSBhc3NlcnRpb24gZG9lcyBub3Qg ZmFpbC4KK1BBU1Mgc3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQor CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3RpdGxlLWFzc2VydGlvbi5odG1s IGIvTGF5b3V0VGVzdHMvc3ZnL2N1c3RvbS90aXRsZS1hc3NlcnRpb24uaHRtbApuZXcgZmlsZSBt b2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5kZmQ2YWQxCi0tLSAvZGV2L251bGwKKysrIGIvTGF5 b3V0VGVzdHMvc3ZnL2N1c3RvbS90aXRsZS1hc3NlcnRpb24uaHRtbApAQCAtMCwwICsxLDE1IEBA Cis8IURPQ1RZUEUgaHRtbD4KKzxodG1sPgorCTxzY3JpcHQgc3JjPSIuLi8uLi9yZXNvdXJjZXMv anMtdGVzdC1wcmUuanMiPjwvc2NyaXB0PgorCTxzdmc+CisJCTx0aXRsZT50aXRsZTwvdGl0bGU+ CisJPC9zdmc+CisKKwk8c2NyaXB0PgorCQlkb2N1bWVudC50aXRsZSA9ICdOZXcgdGl0bGUnOwor CQlkZXNjcmlwdGlvbignV2UgaGFkIGEgYnVnIHRoYXQgdXBkYXRpbmcgZG9jdW1lbnQudGl0bGUg Y2F1c2VkIGFuIGFzc2VydGlvbiBmYWlsdXJlLicpOworCQl0ZXN0UGFzc2VkKCdpZiBhbnkgYXNz ZXJ0aW9uIGRvZXMgbm90IGZhaWwuJyk7CisJPC9zY3JpcHQ+CisJCisJPHNjcmlwdCBzcmM9Ii4u Ly4uL3Jlc291cmNlcy9qcy10ZXN0LXBvc3QuanMiPjwvc2NyaXB0PgorPC9odG1sPgpcIE5vIG5l d2xpbmUgYXQgZW5kIG9mIGZpbGUKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxv ZyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRleCAyYzBjZWU0Li4zZmYyYjkzIDEwMDY0 NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hh bmdlTG9nCkBAIC0xLDMgKzEsMjMgQEAKKzIwMTMtMTAtMDkgIFJlbmF0YSBIb2RvdmFuICA8cmVu aUB3ZWJraXQub3JnPgorCisgICAgICAgIEFTU0VSVElPTiBGQUlMRUQ6IGlzSFRNTFRpdGxlRWxl bWVudChtX3RpdGxlRWxlbWVudC5nZXQoKSkgaW4gV2ViQ29yZTo6RG9jdW1lbnQ6OnNldFRpdGxl CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMjIwOTIK KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBSZW1vdmUg YSBib2d1cyBhc3NlcnQgaW4gRG9jdW1lbnQ6OnNldFRpdGxlKCkuCisgICAgICAgIG1fdGl0bGVF bGVtZW50IGNhbiBiZSBlaXRoZXIgb2YgSFRNTFRpdGxlRWxlbWVudCBvciBTVkdUaXRsZUVsZW1l bnQuIFRoZSBhc3NlcnRpb24gd2FzIHdyb25nLgorICAgICAgICAKKyAgICAgICAgQmFja3BvcnRl ZCBmcm9tIEJsaW5rOgorICAgICAgICBodHRwczovL3NyYy5jaHJvbWl1bS5vcmcvdmlld3ZjL2Js aW5rP3JldmlzaW9uPTE1ODYyMCZ2aWV3PXJldmlzaW9uCisKKyAgICAgICAgVGVzdDogc3ZnL2N1 c3RvbS90aXRsZS1hc3NlcnRpb24uaHRtbAorCisgICAgICAgICogZG9tL0RvY3VtZW50LmNwcDoK KyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50OjpzZXRUaXRsZSk6CisgICAgICAgICogc3ZnL1NW R1RpdGxlRWxlbWVudC5jcHA6CisgICAgICAgIChXZWJDb3JlOjpTVkdUaXRsZUVsZW1lbnQ6Omlu c2VydGVkSW50byk6CisKIDIwMTMtMTAtMDggIEd5dXlvdW5nIEtpbSAgPGd5dXlvdW5nLmtpbUBz YW1zdW5nLmNvbT4KIAogICAgICAgICBVbnJldmlld2VkLiBGaXggRUZMIGJ1aWxkYnJlYWsgc2lu Y2UgcjE1NzE1Mi4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAg Yi9Tb3VyY2UvV2ViQ29yZS9kb20vRG9jdW1lbnQuY3BwCmluZGV4IGVmNWQ1ZWIuLjZiMmJiN2Qg MTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAKKysrIGIvU291cmNl L1dlYkNvcmUvZG9tL0RvY3VtZW50LmNwcApAQCAtMTU3MCwxMSArMTU3MCw4IEBAIHZvaWQgRG9j dW1lbnQ6OnNldFRpdGxlKGNvbnN0IFN0cmluZyYgdGl0bGUpCiAgICAgLy8gVGhlIERPTSBBUEkg aGFzIG5vIG1ldGhvZCBvZiBzcGVjaWZ5aW5nIGRpcmVjdGlvbiwgc28gYXNzdW1lIExUUi4KICAg ICB1cGRhdGVUaXRsZShTdHJpbmdXaXRoRGlyZWN0aW9uKHRpdGxlLCBMVFIpKTsKIAotICAgIGlm IChtX3RpdGxlRWxlbWVudCkgewotICAgICAgICBBU1NFUlQoaXNIVE1MVGl0bGVFbGVtZW50KG1f dGl0bGVFbGVtZW50LmdldCgpKSk7Ci0gICAgICAgIGlmIChpc0hUTUxUaXRsZUVsZW1lbnQobV90 aXRsZUVsZW1lbnQuZ2V0KCkpKQotICAgICAgICAgICAgdG9IVE1MVGl0bGVFbGVtZW50KG1fdGl0 bGVFbGVtZW50LmdldCgpKS0+c2V0VGV4dCh0aXRsZSk7Ci0gICAgfQorICAgIGlmIChtX3RpdGxl RWxlbWVudCAmJiBpc0hUTUxUaXRsZUVsZW1lbnQobV90aXRsZUVsZW1lbnQuZ2V0KCkpKQorICAg ICAgICB0b0hUTUxUaXRsZUVsZW1lbnQobV90aXRsZUVsZW1lbnQuZ2V0KCkpLT5zZXRUZXh0KHRp dGxlKTsKIH0KIAogdm9pZCBEb2N1bWVudDo6c2V0VGl0bGVFbGVtZW50KGNvbnN0IFN0cmluZ1dp dGhEaXJlY3Rpb24mIHRpdGxlLCBFbGVtZW50KiB0aXRsZUVsZW1lbnQpCmRpZmYgLS1naXQgYS9T b3VyY2UvV2ViQ29yZS9zdmcvU1ZHVGl0bGVFbGVtZW50LmNwcCBiL1NvdXJjZS9XZWJDb3JlL3N2 Zy9TVkdUaXRsZUVsZW1lbnQuY3BwCmluZGV4IDYyYzYzNDkuLmQ4MDViODUgMTAwNjQ0Ci0tLSBh L1NvdXJjZS9XZWJDb3JlL3N2Zy9TVkdUaXRsZUVsZW1lbnQuY3BwCisrKyBiL1NvdXJjZS9XZWJD b3JlL3N2Zy9TVkdUaXRsZUVsZW1lbnQuY3BwCkBAIC00Myw2ICs0Myw3IEBAIE5vZGU6Okluc2Vy dGlvbk5vdGlmaWNhdGlvblJlcXVlc3QgU1ZHVGl0bGVFbGVtZW50OjppbnNlcnRlZEludG8oQ29u dGFpbmVyTm9kZSYKICAgICBTVkdFbGVtZW50OjppbnNlcnRlZEludG8ocm9vdFBhcmVudCk7CiAg ICAgaWYgKCFyb290UGFyZW50LmluRG9jdW1lbnQoKSkKICAgICAgICAgcmV0dXJuIEluc2VydGlv bkRvbmU7CisgICAgLy8gRklYTUU6IEl0J3MgcG9zc2libGUgdG8gcmVnaXN0ZXIgU1ZHVGl0bGVF bGVtZW50IHRvIGFuIEhUTUxEb2N1bWVudC4KICAgICBpZiAoZmlyc3RDaGlsZCgpKQogICAgICAg ICAvLyBGSVhNRTogZG9lcyBTVkcgaGF2ZSBhIHRpdGxlIHRleHQgZGlyZWN0aW9uPwogICAgICAg ICBkb2N1bWVudCgpLnNldFRpdGxlRWxlbWVudChTdHJpbmdXaXRoRGlyZWN0aW9uKHRleHRDb250 ZW50KCksIExUUiksIHRoaXMpOwotLSAKMS43LjkuNQoK