164597 2016-11-10 09:30:52 -0800 ASSERTION FAILED: length > offset encountered with wasm.yaml/wasm/js-api/test_Module.js.default-wasm 2016-11-10 15:10:25 -0800 1 1 1 Unclassified WebKit New Bugs Other Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 ryanhaddad jfbastien benjamin cdumez cmarcelo commit-queue dbates jfbastien keith_miller mark.lam msaboff saam oldest_to_newest 1249826 0 ryanhaddad 2016-11-10 09:30:52 -0800 https://build.webkit.org/builders/Apple%20El%20Capitan%20Debug%20JSC%20%28Tests%29/builds/4461/steps/jscore-test/logs/stdio wasm.yaml/wasm/js-api/test_Module.js.default-wasm: ASSERTION FAILED: length > offset wasm.yaml/wasm/js-api/test_Module.js.default-wasm: /Volumes/Data/slave/elcapitan-debug/build/WebKitBuild/Debug/usr/local/include/wtf/LEBDecoder.h(40) : bool WTF::LEBDecoder::decodeUInt(const uint8_t *, size_t, size_t &, T &) [maxByteLength = 5, T = unsigned int] wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 1 0x10380d060 WTFCrash wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 2 0x103604230 bool WTF::LEBDecoder::decodeUInt<5ul, unsigned int>(unsigned char const*, unsigned long, unsigned long&, unsigned int&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 3 0x1036041cd WTF::LEBDecoder::decodeUInt32(unsigned char const*, unsigned long, unsigned long&, unsigned int&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 4 0x103604000 JSC::Wasm::Parser::parseVarUInt32(unsigned int&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 5 0x1037b9142 JSC::Wasm::ModuleParser::parse() wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 6 0x10303a07f JSC::Wasm::Plan::Plan(JSC::VM&, unsigned char const*, unsigned long) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 7 0x10303aa7d JSC::Wasm::Plan::Plan(JSC::VM&, unsigned char const*, unsigned long) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 8 0x1031e9628 JSC::constructJSWebAssemblyModule(JSC::ExecState*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 9 0x1033a293a JSC::LLInt::handleHostCall(JSC::ExecState*, JSC::Instruction*, JSC::JSValue, JSC::CodeSpecializationKind) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 10 0x1033a37fc JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 11 0x1033a33f6 JSC::LLInt::genericCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 12 0x10339fcdc llint_slow_path_construct wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 13 0x1033adfff llint_entry wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 14 0x1033adca0 llint_entry wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 15 0x1033a660e vmEntryToJavaScript wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 16 0x10317644c JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 17 0x1030f2e52 JSC::Interpreter::execute(JSC::ModuleProgramExecutable*, JSC::ExecState*, JSC::JSModuleEnvironment*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 18 0x103295d2f JSC::JSModuleRecord::evaluate(JSC::ExecState*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 19 0x10380c2f8 JSC::JSModuleLoader::evaluate(JSC::ExecState*, JSC::JSValue, JSC::JSValue, JSC::JSValue) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 20 0x1033e1058 JSC::moduleLoaderPrototypeEvaluate(JSC::ExecState*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 21 0x4674dae01028 wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 22 0x1033adc26 llint_entry wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 23 0x1033adca0 llint_entry wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 24 0x4674dae099b9 wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 25 0x1033a660e vmEntryToJavaScript wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 26 0x10317644c JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 27 0x1030f1daf JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 28 0x1028fa75e JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 29 0x1028fa9ab JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 30 0x10327c056 JSC::JSJobMicrotask::run(JSC::ExecState*) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: 31 0x1036abc55 JSC::QueuedTask::run() wasm.yaml/wasm/js-api/test_Module.js.default-wasm: test_script_31118: line 2: 51572 Segmentation fault: 11 ( "$@" ../../../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --maxPerThreadStackUsage\=1572864 -m --useWebAssembly\=1 test_Module.js ) wasm.yaml/wasm/js-api/test_Module.js.default-wasm: ERROR: Unexpected exit code: 139 FAIL: wasm.yaml/wasm/js-api/test_Module.js.default-wasm 1249872 1 keith_miller 2016-11-10 11:16:18 -0800 My guess is that https://trac.webkit.org/changeset/208401 is the source. 1249985 2 294415 jfbastien 2016-11-10 14:28:37 -0800 Created attachment 294415 patch I have no idea how anything ever worked before! 1249990 3 294415 keith_miller 2016-11-10 14:44:26 -0800 Comment on attachment 294415 patch r=me. 1249991 4 294415 keith_miller 2016-11-10 14:45:11 -0800 Comment on attachment 294415 patch View in context: https://bugs.webkit.org/attachment.cgi?id=294415&action=review Actually, one comment. > JSTests/wasm/LowLevelBinary.js:79 > + trim() { this._buf = this._buf.slice(0, this._used); } You don't use this. 1249992 5 294415 keith_miller 2016-11-10 14:45:43 -0800 Comment on attachment 294415 patch View in context: https://bugs.webkit.org/attachment.cgi?id=294415&action=review >> JSTests/wasm/LowLevelBinary.js:79 >> + trim() { this._buf = this._buf.slice(0, this._used); } > > You don't use this. I'm an idiot. Ignore this comment. 1249996 6 294415 commit-queue 2016-11-10 15:10:20 -0800 Comment on attachment 294415 patch Clearing flags on attachment: 294415 Committed r208567: <http://trac.webkit.org/changeset/208567> 1249997 7 commit-queue 2016-11-10 15:10:25 -0800 All reviewed patches have been landed. Closing bug. 294415 2016-11-10 14:28:37 -0800 2016-11-10 15:10:20 -0800 patch 0001-Prevent-reading-off-the-end-of-wasm-binaries.patch text/plain 7063 jfbastien RnJvbSBlZDhmM2VmMWIwN2IzNjg5Njk1MTQ2Y2E0ZDA1MzI4NmNkZWY0ODE2IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBKRiBCYXN0aWVuIDxqZmJhc3RpZW5AYXBwbGUuY29tPgpEYXRl OiBUaHUsIDEwIE5vdiAyMDE2IDE0OjIzOjQ2IC0wODAwClN1YmplY3Q6IFtQQVRDSF0gUHJldmVu dCByZWFkaW5nIG9mZiB0aGUgZW5kIG9mIHdhc20gYmluYXJpZXMKCi0tLQogSlNUZXN0cy9DaGFu Z2VMb2cgICAgICAgICAgICAgICAgICAgICAgICAgfCAxNiArKysrKysrKysrKysrKysrCiBKU1Rl c3RzL3dhc20vQnVpbGRlcl9XZWJBc3NlbWJseUJpbmFyeS5qcyB8ICAxICsKIEpTVGVzdHMvd2Fz bS9Mb3dMZXZlbEJpbmFyeS5qcyAgICAgICAgICAgIHwgIDEgKwogU291cmNlL0phdmFTY3JpcHRD b3JlL0NoYW5nZUxvZyAgICAgICAgICAgfCAxMSArKysrKysrKysrKwogU291cmNlL0phdmFTY3Jp cHRDb3JlL3dhc20vV2FzbVBhcnNlci5oICAgfCAyNiArKysrKysrKysrKysrKysrKystLS0tLS0t LQogU291cmNlL1dURi9DaGFuZ2VMb2cgICAgICAgICAgICAgICAgICAgICAgfCAxMyArKysrKysr KysrKysrCiBTb3VyY2UvV1RGL3d0Zi9MRUJEZWNvZGVyLmggICAgICAgICAgICAgICB8ICA2ICsr KystLQogNyBmaWxlcyBjaGFuZ2VkLCA2NCBpbnNlcnRpb25zKCspLCAxMCBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS9KU1Rlc3RzL0NoYW5nZUxvZyBiL0pTVGVzdHMvQ2hhbmdlTG9nCmluZGV4 IGIyYTE5YjIuLmI5Y2FiNGUgMTAwNjQ0Ci0tLSBhL0pTVGVzdHMvQ2hhbmdlTG9nCisrKyBiL0pT VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIwMTYtMTEtMTAgIEpGIEJhc3RpZW4g IDxqZmJhc3RpZW5AYXBwbGUuY29tPgorCisgICAgICAgIEFTU0VSVElPTiBGQUlMRUQ6IGxlbmd0 aCA+IG9mZnNldCBlbmNvdW50ZXJlZCB3aXRoIHdhc20ueWFtbC93YXNtL2pzLWFwaS90ZXN0X01v ZHVsZS5qcy5kZWZhdWx0LXdhc20KKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTE2NDU5NworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEp LgorCisgICAgICAgIFRyaW0gdGhlIGFycmF5IGJ1ZmZlciBiZWZvcmUgcmV0dXJuaW5nIGl0OiBp dCdzIG9wdGltaXN0aWNhbGx5CisgICAgICAgIG92ZXItYWxsb2NhdGVkIHRvIGF2b2lkIGdyb3dp bmcgYWxsIHRoZSB0aW1lLCBidXQgd2hlbiBwYXJzZWQgaXQKKyAgICAgICAgY2FuJ3QgaGF2ZSBl eHRyYSBjb250ZW50LgorCisgICAgICAgICogd2FzbS9CdWlsZGVyX1dlYkFzc2VtYmx5QmluYXJ5 LmpzOgorICAgICAgICAoZXhwb3J0LmNvbnN0LkJpbmFyeSk6CisgICAgICAgICogd2FzbS9Mb3dM ZXZlbEJpbmFyeS5qczoKKyAgICAgICAgKGV4cG9ydC5kZWZhdWx0Lkxvd0xldmVsQmluYXJ5LnBy b3RvdHlwZS5nZXQgcmV0dXJuKToKKwogMjAxNi0xMS0wOCAgWXVzdWtlIFN1enVraSAgPHV0YXRh bmUudGVhQGdtYWlsLmNvbT4KIAogICAgICAgICBbSlNDXSBBdm9pZCBjbG9uZWQgYXJndW1lbnRz IGFsbG9jYXRpb24gaW4gQXJyYXlQcm90b3R5cGUgbWV0aG9kcwpkaWZmIC0tZ2l0IGEvSlNUZXN0 cy93YXNtL0J1aWxkZXJfV2ViQXNzZW1ibHlCaW5hcnkuanMgYi9KU1Rlc3RzL3dhc20vQnVpbGRl cl9XZWJBc3NlbWJseUJpbmFyeS5qcwppbmRleCBmMmIwYTUyLi44ZDc3Yzc4IDEwMDY0NAotLS0g YS9KU1Rlc3RzL3dhc20vQnVpbGRlcl9XZWJBc3NlbWJseUJpbmFyeS5qcworKysgYi9KU1Rlc3Rz L3dhc20vQnVpbGRlcl9XZWJBc3NlbWJseUJpbmFyeS5qcwpAQCAtMTAzLDUgKzEwMyw2IEBAIGV4 cG9ydCBjb25zdCBCaW5hcnkgPSAocHJlYW1ibGUsIHNlY3Rpb25zKSA9PiB7CiAgICAgICAgIH0K ICAgICAgICAgc2VjdGlvbkJpbi5hcHBseSgpOwogICAgIH0KKyAgICB3YXNtQmluLnRyaW0oKTsK ICAgICByZXR1cm4gd2FzbUJpbjsKIH07CmRpZmYgLS1naXQgYS9KU1Rlc3RzL3dhc20vTG93TGV2 ZWxCaW5hcnkuanMgYi9KU1Rlc3RzL3dhc20vTG93TGV2ZWxCaW5hcnkuanMKaW5kZXggNzIwMDk3 Ni4uNzU5MmY3MSAxMDA2NDQKLS0tIGEvSlNUZXN0cy93YXNtL0xvd0xldmVsQmluYXJ5LmpzCisr KyBiL0pTVGVzdHMvd2FzbS9Mb3dMZXZlbEJpbmFyeS5qcwpAQCAtNzYsNiArNzYsNyBAQCBleHBv cnQgZGVmYXVsdCBjbGFzcyBMb3dMZXZlbEJpbmFyeSB7CiAgICAgLy8gVXRpbGl0aWVzLgogICAg IGdldCgpIHsgcmV0dXJuIHRoaXMuX2J1ZjsgfQogICAgIGhleGR1bXAoKSB7IHJldHVybiBfaGV4 ZHVtcCh0aGlzLl9idWYsIHRoaXMuX3VzZWQpOyB9CisgICAgdHJpbSgpIHsgdGhpcy5fYnVmID0g dGhpcy5fYnVmLnNsaWNlKDAsIHRoaXMuX3VzZWQpOyB9CiAgICAgX21heWJlR3JvdyhieXRlcykg ewogICAgICAgICBjb25zdCBhbGxvY2F0ZWQgPSB0aGlzLl9idWYubGVuZ3RoOwogICAgICAgICBp ZiAoYWxsb2NhdGVkIC0gdGhpcy5fdXNlZCA8IGJ5dGVzKSB7CmRpZmYgLS1naXQgYS9Tb3VyY2Uv SmF2YVNjcmlwdENvcmUvQ2hhbmdlTG9nIGIvU291cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxv ZwppbmRleCBhZmIwN2M2Li5jMWUxZWJiIDEwMDY0NAotLS0gYS9Tb3VyY2UvSmF2YVNjcmlwdENv cmUvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKQEAgLTEs MyArMSwxNCBAQAorMjAxNi0xMS0xMCAgSkYgQmFzdGllbiAgPGpmYmFzdGllbkBhcHBsZS5jb20+ CisKKyAgICAgICAgQVNTRVJUSU9OIEZBSUxFRDogbGVuZ3RoID4gb2Zmc2V0IGVuY291bnRlcmVk IHdpdGggd2FzbS55YW1sL3dhc20vanMtYXBpL3Rlc3RfTW9kdWxlLmpzLmRlZmF1bHQtd2FzbQor ICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTY0NTk3CisK KyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgKiB3YXNtL1dh c21QYXJzZXIuaDoKKyAgICAgICAgKEpTQzo6V2FzbTo6UGFyc2VyOjpwYXJzZVZhclVJbnQzMik6 IG1vdmUgY2xvc2VyIHRvIG90aGVyIHBhcnNlcnMKKyAgICAgICAgKEpTQzo6V2FzbTo6UGFyc2Vy OjpwYXJzZVZhclVJbnQ2NCk6IG1vdmUgY2xvc2VyIHRvIG90aGVyIHBhcnNlcnMKKwogMjAxNi0x MS0xMCAgQWFyb24gQ2h1ICA8YWFyb25fY2h1QGFwcGxlLmNvbT4KIAogICAgICAgICBXZWIgSW5z cGVjdG9yOiBBWEk6IGNsYXJpZnkgYnV0dG9uIHJvbGVzIChlLmcuIHRvZ2dsZSBvciBwb3B1cCBi dXR0b24pCmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlwdENvcmUvd2FzbS9XYXNtUGFyc2Vy LmggYi9Tb3VyY2UvSmF2YVNjcmlwdENvcmUvd2FzbS9XYXNtUGFyc2VyLmgKaW5kZXggNTkwODc3 Ny4uZTJjM2ZlMSAxMDA2NDQKLS0tIGEvU291cmNlL0phdmFTY3JpcHRDb3JlL3dhc20vV2FzbVBh cnNlci5oCisrKyBiL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS93YXNtL1dhc21QYXJzZXIuaApAQCAt NDYsMTUgKzQ2LDE1IEBAIHByb3RlY3RlZDoKICAgICBib29sIFdBUk5fVU5VU0VEX1JFVFVSTiBj b25zdW1lU3RyaW5nKGNvbnN0IGNoYXIqKTsKICAgICBib29sIFdBUk5fVU5VU0VEX1JFVFVSTiBj b25zdW1lVVRGOFN0cmluZyhTdHJpbmcmLCBzaXplX3QpOwogCi0gICAgYm9vbCBXQVJOX1VOVVNF RF9SRVRVUk4gcGFyc2VWYXJVSW50MSh1aW50OF90JiByZXN1bHQpOwotICAgIGJvb2wgV0FSTl9V TlVTRURfUkVUVVJOIHBhcnNlSW50NyhpbnQ4X3QmIHJlc3VsdCk7Ci0gICAgYm9vbCBXQVJOX1VO VVNFRF9SRVRVUk4gcGFyc2VVSW50Nyh1aW50OF90JiByZXN1bHQpOwotICAgIGJvb2wgV0FSTl9V TlVTRURfUkVUVVJOIHBhcnNlVUludDMyKHVpbnQzMl90JiByZXN1bHQpOwotICAgIGJvb2wgV0FS Tl9VTlVTRURfUkVUVVJOIHBhcnNlVmFyVUludDMyKHVpbnQzMl90JiByZXN1bHQpIHsgcmV0dXJu IFdURjo6TEVCRGVjb2Rlcjo6ZGVjb2RlVUludDMyKG1fc291cmNlLCBtX3NvdXJjZUxlbmd0aCwg bV9vZmZzZXQsIHJlc3VsdCk7IH0KLSAgICBib29sIFdBUk5fVU5VU0VEX1JFVFVSTiBwYXJzZVZh clVJbnQ2NCh1aW50NjRfdCYgcmVzdWx0KSB7IHJldHVybiBXVEY6OkxFQkRlY29kZXI6OmRlY29k ZVVJbnQ2NChtX3NvdXJjZSwgbV9zb3VyY2VMZW5ndGgsIG1fb2Zmc2V0LCByZXN1bHQpOyB9Cisg ICAgYm9vbCBXQVJOX1VOVVNFRF9SRVRVUk4gcGFyc2VWYXJVSW50MSh1aW50OF90Jik7CisgICAg Ym9vbCBXQVJOX1VOVVNFRF9SRVRVUk4gcGFyc2VJbnQ3KGludDhfdCYpOworICAgIGJvb2wgV0FS Tl9VTlVTRURfUkVUVVJOIHBhcnNlVUludDcodWludDhfdCYpOworICAgIGJvb2wgV0FSTl9VTlVT RURfUkVUVVJOIHBhcnNlVUludDMyKHVpbnQzMl90Jik7CisgICAgYm9vbCBXQVJOX1VOVVNFRF9S RVRVUk4gcGFyc2VWYXJVSW50MzIodWludDMyX3QmKTsKKyAgICBib29sIFdBUk5fVU5VU0VEX1JF VFVSTiBwYXJzZVZhclVJbnQ2NCh1aW50NjRfdCYpOwogCi0gICAgYm9vbCBXQVJOX1VOVVNFRF9S RVRVUk4gcGFyc2VWYWx1ZVR5cGUoVHlwZSYgcmVzdWx0KTsKLSAgICBib29sIFdBUk5fVU5VU0VE X1JFVFVSTiBwYXJzZUV4dGVybmFsS2luZChFeHRlcm5hbDo6S2luZCYgcmVzdWx0KTsKKyAgICBi b29sIFdBUk5fVU5VU0VEX1JFVFVSTiBwYXJzZVZhbHVlVHlwZShUeXBlJik7CisgICAgYm9vbCBX QVJOX1VOVVNFRF9SRVRVUk4gcGFyc2VFeHRlcm5hbEtpbmQoRXh0ZXJuYWw6OktpbmQmKTsKIAog ICAgIGNvbnN0IHVpbnQ4X3QqIHNvdXJjZSgpIGNvbnN0IHsgcmV0dXJuIG1fc291cmNlOyB9CiAg ICAgc2l6ZV90IGxlbmd0aCgpIGNvbnN0IHsgcmV0dXJuIG1fc291cmNlTGVuZ3RoOyB9CkBAIC0x MTIsNiArMTEyLDE2IEBAIEFMV0FZU19JTkxJTkUgYm9vbCBQYXJzZXI6OmNvbnN1bWVVVEY4U3Ry aW5nKFN0cmluZyYgcmVzdWx0LCBzaXplX3Qgc3RyaW5nTGVuZ3RoCiAgICAgcmV0dXJuIHRydWU7 CiB9CiAKK0FMV0FZU19JTkxJTkUgYm9vbCBQYXJzZXI6OnBhcnNlVmFyVUludDMyKHVpbnQzMl90 JiByZXN1bHQpCit7CisgICAgcmV0dXJuIFdURjo6TEVCRGVjb2Rlcjo6ZGVjb2RlVUludDMyKG1f c291cmNlLCBtX3NvdXJjZUxlbmd0aCwgbV9vZmZzZXQsIHJlc3VsdCk7Cit9CisKK0FMV0FZU19J TkxJTkUgYm9vbCBQYXJzZXI6OnBhcnNlVmFyVUludDY0KHVpbnQ2NF90JiByZXN1bHQpCit7Cisg ICAgcmV0dXJuIFdURjo6TEVCRGVjb2Rlcjo6ZGVjb2RlVUludDY0KG1fc291cmNlLCBtX3NvdXJj ZUxlbmd0aCwgbV9vZmZzZXQsIHJlc3VsdCk7Cit9CisKIEFMV0FZU19JTkxJTkUgYm9vbCBQYXJz ZXI6OnBhcnNlVUludDMyKHVpbnQzMl90JiByZXN1bHQpCiB7CiAgICAgaWYgKGxlbmd0aCgpIDwg NCB8fCBtX29mZnNldCA+IGxlbmd0aCgpIC0gNCkKZGlmZiAtLWdpdCBhL1NvdXJjZS9XVEYvQ2hh bmdlTG9nIGIvU291cmNlL1dURi9DaGFuZ2VMb2cKaW5kZXggMzJjNTM3OS4uZjA0YjMzYyAxMDA2 NDQKLS0tIGEvU291cmNlL1dURi9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dURi9DaGFuZ2VMb2cK QEAgLTEsMyArMSwxNiBAQAorMjAxNi0xMS0xMCAgSkYgQmFzdGllbiAgPGpmYmFzdGllbkBhcHBs ZS5jb20+CisKKyAgICAgICAgQVNTRVJUSU9OIEZBSUxFRDogbGVuZ3RoID4gb2Zmc2V0IGVuY291 bnRlcmVkIHdpdGggd2FzbS55YW1sL3dhc20vanMtYXBpL3Rlc3RfTW9kdWxlLmpzLmRlZmF1bHQt d2FzbQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTY0 NTk3CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgRGVj b2RpbmcgYXQgZW5kIG9mIGZpbGUgc2hvdWxkIGZhaWwsIG5vdCBhc3NlcnQuCisKKyAgICAgICAg KiB3dGYvTEVCRGVjb2Rlci5oOgorICAgICAgICAoV1RGOjpMRUJEZWNvZGVyOjpkZWNvZGVVSW50 KToKKyAgICAgICAgKFdURjo6TEVCRGVjb2Rlcjo6ZGVjb2RlSW50MzIpOgorCiAyMDE2LTExLTEw ICBBbGV4IENocmlzdGVuc2VuICA8YWNocmlzdGVuc2VuQHdlYmtpdC5vcmc+CiAKICAgICAgICAg UmVtb3ZlIHVudXNlZCBDRlVSTENBQ0hFIGNvZGUKZGlmZiAtLWdpdCBhL1NvdXJjZS9XVEYvd3Rm L0xFQkRlY29kZXIuaCBiL1NvdXJjZS9XVEYvd3RmL0xFQkRlY29kZXIuaAppbmRleCAxNjUwYTIz Li5lNjJkNmYxIDEwMDY0NAotLS0gYS9Tb3VyY2UvV1RGL3d0Zi9MRUJEZWNvZGVyLmgKKysrIGIv U291cmNlL1dURi93dGYvTEVCRGVjb2Rlci5oCkBAIC0zNyw3ICszNyw4IEBAIG5hbWVzcGFjZSBX VEYgeyBuYW1lc3BhY2UgTEVCRGVjb2RlciB7CiB0ZW1wbGF0ZTxzaXplX3QgbWF4Qnl0ZUxlbmd0 aCwgdHlwZW5hbWUgVD4KIGlubGluZSBib29sIFdBUk5fVU5VU0VEX1JFVFVSTiBkZWNvZGVVSW50 KGNvbnN0IHVpbnQ4X3QqIGJ5dGVzLCBzaXplX3QgbGVuZ3RoLCBzaXplX3QmIG9mZnNldCwgVCYg cmVzdWx0KQogewotICAgIEFTU0VSVChsZW5ndGggPiBvZmZzZXQpOworICAgIGlmIChsZW5ndGgg PD0gb2Zmc2V0KQorICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgcmVzdWx0ID0gMDsKICAgICB1 bnNpZ25lZCBzaGlmdCA9IDA7CiAgICAgc2l6ZV90IGxhc3QgPSBzdGQ6Om1pbihtYXhCeXRlTGVu Z3RoLCBsZW5ndGggLSBvZmZzZXQgLSAxKTsKQEAgLTY5LDcgKzcwLDggQEAgaW5saW5lIGJvb2wg V0FSTl9VTlVTRURfUkVUVVJOIGRlY29kZVVJbnQ2NChjb25zdCB1aW50OF90KiBieXRlcywgc2l6 ZV90IGxlbmd0aCwKIAogaW5saW5lIGJvb2wgV0FSTl9VTlVTRURfUkVUVVJOIGRlY29kZUludDMy KGNvbnN0IHVpbnQ4X3QqIGJ5dGVzLCBzaXplX3QgbGVuZ3RoLCBzaXplX3QmIG9mZnNldCwgaW50 MzJfdCYgcmVzdWx0KQogewotICAgIEFTU0VSVChsZW5ndGggPiBvZmZzZXQpOworICAgIGlmIChs ZW5ndGggPD0gb2Zmc2V0KQorICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgcmVzdWx0ID0gMDsK ICAgICB1bnNpZ25lZCBzaGlmdCA9IDA7CiAgICAgc2l6ZV90IGxhc3QgPSBzdGQ6Om1pbihtYXgz MkJpdExFQkJ5dGVMZW5ndGgsIGxlbmd0aCAtIG9mZnNldCAtIDEpOwotLSAKMi45LjMKCg==