152872 2016-01-07 17:03:07 -0800 [XSS Auditor] Partial bypass when web server collapses path components 2016-01-19 22:51:08 -0800 1 1 1 Unclassified WebKit WebCore Misc. WebKit Local Build All All RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=153250 BlinkMergeCandidate, XSSAuditor P2 Normal --- 1 dbates dbates ap ryanhaddad oldest_to_newest 1153687 0 dbates 2016-01-07 17:03:07 -0800 Blink Issue: <https://code.google.com/p/chromium/issues/detail?id=344146> 1153688 1 268510 dbates 2016-01-07 17:04:27 -0800 Created attachment 268510 Patch 1155189 2 268510 bfulgham 2016-01-13 13:00:50 -0800 Comment on attachment 268510 Patch r=me. Please land manually, as the patch does not seem to apply cleanly. 1155557 3 dbates 2016-01-14 13:38:05 -0800 Committed r195073: <http://trac.webkit.org/changeset/195073> 1156902 4 ap 2016-01-19 22:51:08 -0800 The test landed here asserts very frequently: http://webkit-test-results.webkit.org/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=http%2Ftests%2Fsecurity%2FxssAuditor%2Fembed-tag-in-path-unterminated.html 268510 2016-01-07 17:04:27 -0800 2016-01-13 13:00:50 -0800 Patch bug-152872-20160107170354.patch text/plain 9732 dbates U3VidmVyc2lvbiBSZXZpc2lvbjogMTk0NzQwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMGIzZDkxMDJhY2U2MWVl MmI0ZjRmN2NmY2FkMWVkMWQyYWYxZWE2Mi4uZDRjM2QyNjQ5ODkyMjNhZjM3OWFiYzg1MWQ4YmQx NTk3OGVkMGZlMCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDI1IEBACiAyMDE2LTAxLTA3ICBEYW5p ZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KIAorICAgICAgICBbWFNTIEF1ZGl0b3JdIFBh cnRpYWwgYnlwYXNzIHdoZW4gd2ViIHNlcnZlciBjb2xsYXBzZXMgcGF0aCBjb21wb25lbnRzCisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNTI4NzIKKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBNZXJnZWQgZnJv bSBCbGluayAocGF0Y2ggYnkgVG9tIFNlcGV6IDx0c2VwZXpAY2hyb21pdW0ub3JnPik6CisgICAg ICAgIDxodHRwczovL3NyYy5jaHJvbWl1bS5vcmcvdmlld3ZjL2JsaW5rP3JldmlzaW9uPTE2NzYx MCZ2aWV3PXJldmlzaW9uPgorCisgICAgICAgIFRlc3Q6IGh0dHAvdGVzdHMvc2VjdXJpdHkveHNz QXVkaXRvci9lbWJlZC10YWctaW4tcGF0aC11bnRlcm1pbmF0ZWQuaHRtbAorCisgICAgICAgICog aHRtbC9wYXJzZXIvWFNTQXVkaXRvci5jcHA6CisgICAgICAgIChXZWJDb3JlOjppc05vbkNhbm9u aWNhbENoYXJhY3Rlcik6CisgICAgICAgIChXZWJDb3JlOjpYU1NBdWRpdG9yOjppbml0KToKKyAg ICAgICAgKFdlYkNvcmU6OlhTU0F1ZGl0b3I6OmRlY29kZWRTbmlwcGV0Rm9yTmFtZSk6CisgICAg ICAgIChXZWJDb3JlOjpYU1NBdWRpdG9yOjpkZWNvZGVkU25pcHBldEZvckF0dHJpYnV0ZSk6Cisg ICAgICAgIChXZWJDb3JlOjpYU1NBdWRpdG9yOjpkZWNvZGVkU25pcHBldEZvckphdmFTY3JpcHQp OgorICAgICAgICAoV2ViQ29yZTo6ZnVsbHlEZWNvZGVTdHJpbmcpOiBEZWxldGVkLgorCisyMDE2 LTAxLTA3ICBEYW5pZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KKwogICAgICAgICBDbGVh bnVwOiBYU1MgQXVkaXRvciBzaG91bGQgYXZvaWQgcmUtZXZhbHVhdGluZyB0aGUgcGFyc2VkIHNj cmlwdCB0YWcKICAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lk PTE1Mjg3MAogCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9YU1NBdWRp dG9yLmNwcCBiL1NvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL1hTU0F1ZGl0b3IuY3BwCmluZGV4 IDUwOTllZGI4ZDkyNDFlNjE0MjhlYTk0OWY2YzkxYzRlNDkwYzY3YTguLmRhODc5ZWIyZGQzMGYx M2RhZmQ0ODM3MWM5MTAxMzc1ZDE0NjZjZmUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2h0 bWwvcGFyc2VyL1hTU0F1ZGl0b3IuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2Vy L1hTU0F1ZGl0b3IuY3BwCkBAIC01NSw5ICs1NSwxMSBAQCBzdGF0aWMgYm9vbCBpc05vbkNhbm9u aWNhbENoYXJhY3RlcihVQ2hhciBjKQogICAgIC8vIE5vdGUsIHdlIGRvbid0IHJlbW92ZSBiYWNr c2xhc2hlcyBsaWtlIFBIUCBzdHJpcHNsYXNoZXMoKSwgd2hpY2ggYW1vbmcgb3RoZXIgdGhpbmdz IGNvbnZlcnRzICJcXDAiIHRvIHRoZSBcMCBjaGFyYWN0ZXIuCiAgICAgLy8gSW5zdGVhZCwgd2Ug cmVtb3ZlIGJhY2tzbGFzaGVzIGFuZCB6ZXJvcyAoc2luY2UgdGhlIHN0cmluZyAiXFwwIiA9KHJl bW92ZSBiYWNrc2xhc2hlcyk9PiAiMCIpLiBIb3dldmVyLCB0aGlzIGhhcyB0aGUKICAgICAvLyBh ZHZlcnNlIGVmZmVjdCB0aGF0IHdlIHJlbW92ZSBhbnkgbGVnaXRpbWF0ZSB6ZXJvcyBmcm9tIGEg c3RyaW5nLgorICAgIC8vIFdlIGFsc28gcmVtb3ZlIGZvcndhcmQtc2xhc2gsIGJlY2F1c2UgaXQg aXMgY29tbW9uIGZvciBzb21lIHNlcnZlcnMgdG8gY29sbGFwc2Ugc3VjY2Vzc2l2ZSBwYXRoIGNv bXBvbmVudHMsIGVnLAorICAgIC8vIGEvL2IgYmVjb21lcyBhL2IuCiAgICAgLy8KLSAgICAvLyBG b3IgaW5zdGFuY2U6IG5ldyBTdHJpbmcoImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMCIpID0+IG5ldyBT dHJpbmcoImh0dHA6Ly9sb2NhbGhvc3Q6OCIpLgotICAgIHJldHVybiAoYyA9PSAnXFwnIHx8IGMg PT0gJzAnIHx8IGMgPT0gJ1wwJyB8fCBjID49IDEyNyk7CisgICAgLy8gRm9yIGluc3RhbmNlOiBu ZXcgU3RyaW5nKCJodHRwOi8vbG9jYWxob3N0OjgwMDAiKSA9PiBuZXcgU3RyaW5nKCJodHRwOmxv Y2FsaG9zdDo4IikuCisgICAgcmV0dXJuIChjID09ICdcXCcgfHwgYyA9PSAnMCcgfHwgYyA9PSAn XDAnIHx8IGMgPT0gJy8nIHx8IGMgPj0gMTI3KTsKIH0KIAogc3RhdGljIFN0cmluZyBjYW5vbmlj YWxpemUoY29uc3QgU3RyaW5nJiBzdHJpbmcpCkBAIC0xNzQsNyArMTc2LDYgQEAgc3RhdGljIFN0 cmluZyBmdWxseURlY29kZVN0cmluZyhjb25zdCBTdHJpbmcmIHN0cmluZywgY29uc3QgVGV4dEVu Y29kaW5nJiBlbmNvZGkKICAgICAgICAgd29ya2luZ1N0cmluZyA9IGRlY29kZTE2Qml0VW5pY29k ZUVzY2FwZVNlcXVlbmNlcyhkZWNvZGVTdGFuZGFyZFVSTEVzY2FwZVNlcXVlbmNlcyh3b3JraW5n U3RyaW5nLCBlbmNvZGluZykpOwogICAgIH0gd2hpbGUgKHdvcmtpbmdTdHJpbmcubGVuZ3RoKCkg PCBvbGRXb3JraW5nU3RyaW5nTGVuZ3RoKTsKICAgICB3b3JraW5nU3RyaW5nLnJlcGxhY2UoJysn LCAnICcpOwotICAgIHdvcmtpbmdTdHJpbmcgPSBjYW5vbmljYWxpemUod29ya2luZ1N0cmluZyk7 CiAgICAgcmV0dXJuIHdvcmtpbmdTdHJpbmc7CiB9CiAKQEAgLTI2Nyw3ICsyNjgsNyBAQCB2b2lk IFhTU0F1ZGl0b3I6OmluaXQoRG9jdW1lbnQqIGRvY3VtZW50LCBYU1NBdWRpdG9yRGVsZWdhdGUq IGF1ZGl0b3JEZWxlZ2F0ZSkKICAgICBpZiAoZG9jdW1lbnQtPmRlY29kZXIoKSkKICAgICAgICAg bV9lbmNvZGluZyA9IGRvY3VtZW50LT5kZWNvZGVyKCktPmVuY29kaW5nKCk7CiAKLSAgICBtX2Rl Y29kZWRVUkwgPSBmdWxseURlY29kZVN0cmluZyhtX2RvY3VtZW50VVJMLnN0cmluZygpLCBtX2Vu Y29kaW5nKTsKKyAgICBtX2RlY29kZWRVUkwgPSBjYW5vbmljYWxpemUoZnVsbHlEZWNvZGVTdHJp bmcobV9kb2N1bWVudFVSTC5zdHJpbmcoKSwgbV9lbmNvZGluZykpOwogICAgIGlmIChtX2RlY29k ZWRVUkwuZmluZChpc1JlcXVpcmVkRm9ySW5qZWN0aW9uKSA9PSBub3RGb3VuZCkKICAgICAgICAg bV9kZWNvZGVkVVJMID0gU3RyaW5nKCk7CiAKQEAgLTMwNSw3ICszMDYsNyBAQCB2b2lkIFhTU0F1 ZGl0b3I6OmluaXQoRG9jdW1lbnQqIGRvY3VtZW50LCBYU1NBdWRpdG9yRGVsZWdhdGUqIGF1ZGl0 b3JEZWxlZ2F0ZSkKICAgICAgICAgaWYgKGh0dHBCb2R5ICYmICFodHRwQm9keS0+aXNFbXB0eSgp KSB7CiAgICAgICAgICAgICBodHRwQm9keUFzU3RyaW5nID0gaHR0cEJvZHktPmZsYXR0ZW5Ub1N0 cmluZygpOwogICAgICAgICAgICAgaWYgKCFodHRwQm9keUFzU3RyaW5nLmlzRW1wdHkoKSkgewot ICAgICAgICAgICAgICAgIG1fZGVjb2RlZEhUVFBCb2R5ID0gZnVsbHlEZWNvZGVTdHJpbmcoaHR0 cEJvZHlBc1N0cmluZywgbV9lbmNvZGluZyk7CisgICAgICAgICAgICAgICAgbV9kZWNvZGVkSFRU UEJvZHkgPSBjYW5vbmljYWxpemUoZnVsbHlEZWNvZGVTdHJpbmcoaHR0cEJvZHlBc1N0cmluZywg bV9lbmNvZGluZykpOwogICAgICAgICAgICAgICAgIGlmIChtX2RlY29kZWRIVFRQQm9keS5maW5k KGlzUmVxdWlyZWRGb3JJbmplY3Rpb24pID09IG5vdEZvdW5kKQogICAgICAgICAgICAgICAgICAg ICBtX2RlY29kZWRIVFRQQm9keSA9IFN0cmluZygpOwogICAgICAgICAgICAgICAgIGlmIChtX2Rl Y29kZWRIVFRQQm9keS5sZW5ndGgoKSA+PSBtaW5pbXVtTGVuZ3RoRm9yU3VmZml4VHJlZSkKQEAg LTU2Niw3ICs1NjcsNyBAQCBib29sIFhTU0F1ZGl0b3I6OmVyYXNlQXR0cmlidXRlSWZJbmplY3Rl ZChjb25zdCBGaWx0ZXJUb2tlblJlcXVlc3QmIHJlcXVlc3QsIGNvbgogU3RyaW5nIFhTU0F1ZGl0 b3I6OmRlY29kZWRTbmlwcGV0Rm9yTmFtZShjb25zdCBGaWx0ZXJUb2tlblJlcXVlc3QmIHJlcXVl c3QpCiB7CiAgICAgLy8gR3JhYiBhIGZpeGVkIG51bWJlciBvZiBjaGFyYWN0ZXJzIGVxdWFsIHRv IHRoZSBsZW5ndGggb2YgdGhlIHRva2VuJ3MgbmFtZSBwbHVzIG9uZSAodG8gYWNjb3VudCBmb3Ig dGhlICI8IikuCi0gICAgcmV0dXJuIGZ1bGx5RGVjb2RlU3RyaW5nKHJlcXVlc3Quc291cmNlVHJh Y2tlci5zb3VyY2UocmVxdWVzdC50b2tlbiksIG1fZW5jb2RpbmcpLnN1YnN0cmluZygwLCByZXF1 ZXN0LnRva2VuLm5hbWUoKS5zaXplKCkgKyAxKTsKKyAgICByZXR1cm4gY2Fub25pY2FsaXplKGZ1 bGx5RGVjb2RlU3RyaW5nKHJlcXVlc3Quc291cmNlVHJhY2tlci5zb3VyY2UocmVxdWVzdC50b2tl biksIG1fZW5jb2RpbmcpLnN1YnN0cmluZygwLCByZXF1ZXN0LnRva2VuLm5hbWUoKS5zaXplKCkg KyAxKSk7CiB9CiAKIFN0cmluZyBYU1NBdWRpdG9yOjpkZWNvZGVkU25pcHBldEZvckF0dHJpYnV0 ZShjb25zdCBGaWx0ZXJUb2tlblJlcXVlc3QmIHJlcXVlc3QsIGNvbnN0IEhUTUxUb2tlbjo6QXR0 cmlidXRlJiBhdHRyaWJ1dGUsIEF0dHJpYnV0ZUtpbmQgdHJlYXRtZW50KQpAQCAtNTc3LDYgKzU3 OCw5IEBAIFN0cmluZyBYU1NBdWRpdG9yOjpkZWNvZGVkU25pcHBldEZvckF0dHJpYnV0ZShjb25z dCBGaWx0ZXJUb2tlblJlcXVlc3QmIHJlcXVlc3QsCiAgICAgLy8gRklYTUU6IFdlIHNob3VsZCBn cmFiIG9uZSBjaGFyYWN0ZXIgYmVmb3JlIHRoZSBuYW1lIGFsc28uCiAgICAgdW5zaWduZWQgc3Rh cnQgPSBhdHRyaWJ1dGUuc3RhcnRPZmZzZXQ7CiAgICAgdW5zaWduZWQgZW5kID0gYXR0cmlidXRl LmVuZE9mZnNldDsKKworICAgIC8vIFdlIGRlZmVyIGNhbm9uaWNhbGl6aW5nIHRoZSBkZWNvZGVk IHN0cmluZyBoZXJlIHRvIHByZXNlcnZlIGVtYmVkZGVkIHNsYXNoZXMgKGlmIGFueSkgdGhhdAor ICAgIC8vIG1heSBsZWFkIHVzIHRvIHRydW5jYXRlIHRoZSBzdHJpbmcuCiAgICAgU3RyaW5nIGRl Y29kZWRTbmlwcGV0ID0gZnVsbHlEZWNvZGVTdHJpbmcocmVxdWVzdC5zb3VyY2VUcmFja2VyLnNv dXJjZShyZXF1ZXN0LnRva2VuLCBzdGFydCwgZW5kKSwgbV9lbmNvZGluZyk7CiAgICAgZGVjb2Rl ZFNuaXBwZXQudHJ1bmNhdGUoa01heGltdW1GcmFnbWVudExlbmd0aFRhcmdldCk7CiAgICAgaWYg KHRyZWF0bWVudCA9PSBTcmNMaWtlQXR0cmlidXRlKSB7CkBAIC02MjUsNyArNjI5LDcgQEAgU3Ry aW5nIFhTU0F1ZGl0b3I6OmRlY29kZWRTbmlwcGV0Rm9yQXR0cmlidXRlKGNvbnN0IEZpbHRlclRv a2VuUmVxdWVzdCYgcmVxdWVzdCwKICAgICAgICAgICAgIGRlY29kZWRTbmlwcGV0LnRydW5jYXRl KHBvc2l0aW9uKTsKICAgICAgICAgfQogICAgIH0KLSAgICByZXR1cm4gZGVjb2RlZFNuaXBwZXQ7 CisgICAgcmV0dXJuIGNhbm9uaWNhbGl6ZShkZWNvZGVkU25pcHBldCk7CiB9CiAKIFN0cmluZyBY U1NBdWRpdG9yOjpkZWNvZGVkU25pcHBldEZvckphdmFTY3JpcHQoY29uc3QgRmlsdGVyVG9rZW5S ZXF1ZXN0JiByZXF1ZXN0KQpAQCAtNjk5LDcgKzcwMyw3IEBAIFN0cmluZyBYU1NBdWRpdG9yOjpk ZWNvZGVkU25pcHBldEZvckphdmFTY3JpcHQoY29uc3QgRmlsdGVyVG9rZW5SZXF1ZXN0JiByZXF1 ZXN0CiAgICAgICAgICAgICAgICAgbGFzdE5vblNwYWNlUG9zaXRpb24gPSBmb3VuZFBvc2l0aW9u OwogICAgICAgICB9CiAKLSAgICAgICAgcmVzdWx0ID0gZnVsbHlEZWNvZGVTdHJpbmcoc3RyaW5n LnN1YnN0cmluZyhzdGFydFBvc2l0aW9uLCBmb3VuZFBvc2l0aW9uIC0gc3RhcnRQb3NpdGlvbiks IG1fZW5jb2RpbmcpOworICAgICAgICByZXN1bHQgPSBjYW5vbmljYWxpemUoZnVsbHlEZWNvZGVT dHJpbmcoc3RyaW5nLnN1YnN0cmluZyhzdGFydFBvc2l0aW9uLCBmb3VuZFBvc2l0aW9uIC0gc3Rh cnRQb3NpdGlvbiksIG1fZW5jb2RpbmcpKTsKICAgICAgICAgc3RhcnRQb3NpdGlvbiA9IGZvdW5k UG9zaXRpb24gKyAxOwogICAgIH0KICAgICByZXR1cm4gcmVzdWx0OwpkaWZmIC0tZ2l0IGEvTGF5 b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4IDE2Y2JiODZh ZGNlMmY1MTUxZWI2MzgzMmU4NDBjNmE0MGRlYzQ5ZjcuLjdmYzc5M2E1NTczYzViMTgyNzE3OTQw ZTc1MDQyOWUwZWRkNzQzNjMgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5nZUxvZworKysg Yi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsNSArMSwxOSBAQAogMjAxNi0wMS0wNyAgRGFu aWVsIEJhdGVzICA8ZGFiYXRlc0BhcHBsZS5jb20+CiAKKyAgICAgICAgW1hTUyBBdWRpdG9yXSBQ YXJ0aWFsIGJ5cGFzcyB3aGVuIHdlYiBzZXJ2ZXIgY29sbGFwc2VzIHBhdGggY29tcG9uZW50cwor ICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTUyODcyCisK KyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgTWVyZ2VkIGZy b20gQmxpbmsgKHBhdGNoIGJ5IFRvbSBTZXBleiA8dHNlcGV6QGNocm9taXVtLm9yZz4pOgorICAg ICAgICA8aHR0cHM6Ly9zcmMuY2hyb21pdW0ub3JnL3ZpZXd2Yy9ibGluaz9yZXZpc2lvbj0xNjc2 MTAmdmlldz1yZXZpc2lvbj4KKworICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVk aXRvci9lbWJlZC10YWctaW4tcGF0aC11bnRlcm1pbmF0ZWQtZXhwZWN0ZWQudHh0OiBBZGRlZC4K KyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWluLXBh dGgtdW50ZXJtaW5hdGVkLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJp dHkveHNzQXVkaXRvci9pbnRlcmNlcHQvLmh0YWNjZXNzOgorCisyMDE2LTAxLTA3ICBEYW5pZWwg QmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KKwogICAgICAgICBbWFNTIEF1ZGl0b3JdIEFkZCB0 ZXN0IHdoZW4gWFNTIHBheWxvYWQgaXMgaW4gdGhlIHBhdGggcG9ydGlvbiBvZiB0aGUgVVJMCiAg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNTI4NzEKIApk aWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2Vt YmVkLXRhZy1pbi1wYXRoLXVudGVybWluYXRlZC1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9o dHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWluLXBhdGgtdW50ZXJtaW5h dGVkLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi42ZGZhMzM4MWFjZjA2YWU3NzA0NTRhZjNjY2Iw YmQ1NzgzMTcyMjM1Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS94c3NBdWRpdG9yL2VtYmVkLXRhZy1pbi1wYXRoLXVudGVybWluYXRlZC1leHBlY3Rl ZC50eHQKQEAgLTAsMCArMSw0IEBACitDT05TT0xFIE1FU1NBR0U6IGxpbmUgNDogVGhlIFhTUyBB dWRpdG9yIHJlZnVzZWQgdG8gZXhlY3V0ZSBhIHNjcmlwdCBpbiAnaHR0cDovL2xvY2FsaG9zdDo4 MDAwL3NlY3VyaXR5L3hzc0F1ZGl0b3IvaW50ZXJjZXB0L2VjaG8taW50ZXJ0YWcucGwvJTNDZW1i ZWQlMjBoZWlnaHQ9JTIyNTAwJTIyc3JjPSUyMmh0dHBzOi8vMTI3LjAuMC4xOjg0NDMvc2VjdXJp dHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZHVtbXkuc3dmJTIyLnhtbCZjbHV0dGVyPSUzQ3AlM0Un IGJlY2F1c2UgaXRzIHNvdXJjZSBjb2RlIHdhcyBmb3VuZCB3aXRoaW4gdGhlIHJlcXVlc3QuIFRo ZSBhdWRpdG9yIHdhcyBlbmFibGVkIGFzIHRoZSBzZXJ2ZXIgc2VudCBuZWl0aGVyIGFuICdYLVhT Uy1Qcm90ZWN0aW9uJyBub3IgJ0NvbnRlbnQtU2VjdXJpdHktUG9saWN5JyBoZWFkZXIuCitDaGVj ayB0aGF0IHRoZSBYU1NBdWRpdG9yIGNhdGNoZXMgcmVmbGVjdGVkIHRhZ3MgaW4gcGF0aCBjb21w b25lbnRzCisKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94 c3NBdWRpdG9yL2VtYmVkLXRhZy1pbi1wYXRoLXVudGVybWluYXRlZC5odG1sIGIvTGF5b3V0VGVz dHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2VtYmVkLXRhZy1pbi1wYXRoLXVudGVy bWluYXRlZC5odG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjlmNDA0ZmU5YjhmMGUyZTNjOTJkYzFmYzNhMDY0NTg3 MjVlZTMwYWYKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3Vy aXR5L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWluLXBhdGgtdW50ZXJtaW5hdGVkLmh0bWwKQEAgLTAs MCArMSwxNSBAQAorPCFET0NUWVBFIGh0bWw+Cis8aHRtbD4KKzxoZWFkPgorPHNjcmlwdD4KK2lm ICh3aW5kb3cudGVzdFJ1bm5lcikgeworICB0ZXN0UnVubmVyLmR1bXBBc1RleHQoKTsKKyAgdGVz dFJ1bm5lci5zZXRYU1NBdWRpdG9yRW5hYmxlZCh0cnVlKTsKK30KKzwvc2NyaXB0PgorPC9oZWFk PgorPGJvZHk+Cis8cD5DaGVjayB0aGF0IHRoZSBYU1NBdWRpdG9yIGNhdGNoZXMgcmVmbGVjdGVk IHRhZ3MgaW4gcGF0aCBjb21wb25lbnRzPC9wPgorPGlmcmFtZSBzcmM9Imh0dHA6Ly9sb2NhbGhv c3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9yL2ludGVyY2VwdC9lY2hvLWludGVydGFnLnBsLzxl bWJlZCBoZWlnaHQ9JTIyNTAwJTIyc3JjPSUyMmh0dHBzOi8vMTI3LjAuMC4xOjg0NDMvc2VjdXJp dHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZHVtbXkuc3dmJTIyLnhtbCZjbHV0dGVyPTxwPiI+PC9p ZnJhbWU+Cis8L2JvZHk+Cis8L2h0bWw+CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rl c3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvaW50ZXJjZXB0Ly5odGFjY2VzcyBiL0xheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9pbnRlcmNlcHQvLmh0YWNjZXNzCmluZGV4 IDg3NzA2MzA3OGQ1NDlhMTA1OTYyOTRjNmEyN2Y4MzUyZjJmM2I5YzIuLmJhYmEzZDgxMDgyOGNl NWM0NjIzMWY0YTg5MGJhYWNmZmZkMjVhOTEgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL2h0dHAv dGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9pbnRlcmNlcHQvLmh0YWNjZXNzCisrKyBiL0xheW91 dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9pbnRlcmNlcHQvLmh0YWNjZXNz CkBAIC0xLDIgKzEsNSBAQAorIyBGb3IgZWFzZSBpbiB0ZXN0aW5nIHBhdGggcmVmbGVjdGlvbnMs IHBhc3MgYW55IHBhdGggY29tcG9uZW50IGNvbnRhaW5pbmcgPCciCisjIChhbmQgc3Vic2VxdWVu dCBjaGFyYWN0ZXJzKSBhcyB0aGUgInEiIHF1ZXJ5IHBhcmFtZXRlciB0byB0aGUgc2NyaXB0IGlk ZW50aWZpZWQKKyMgYnkgdGhlIHBhdGggY29tcG9uZW50cyBwcmVjZWVkaW5nIGl0LgogUmV3cml0 ZUVuZ2luZSBvbgotUmV3cml0ZVJ1bGUgXiguKikvKC4qKSAvc2VjdXJpdHkveHNzQXVkaXRvci9y ZXNvdXJjZXMvJDE/cT0kMiBbTCxOU10KK1Jld3JpdGVSdWxlIF4oW148IiddKikvKC4qKSAvc2Vj dXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvJDE/cT0kMiBbTCxOU10K