18870 2008-05-03 01:40:13 -0700 SQUIRRELFISH: security check is wrong (global object issues?) 2008-05-07 23:15:44 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Mac OS X 10.5 RESOLVED FIXED P2 Normal --- 18631 1 mjs ggaren oldest_to_newest 79561 0 mjs 2008-05-03 01:40:13 -0700 We seem to be doing global object comparison security checks wrong, leading the following layout tests to fail: http/tests/security/cross-frame-access-callback-explicit-domain-ALLOW.htm http/tests/security/listener/xss-JSTargetNode-onclick-shortcut.html http/tests/security/listener/xss-XMLHttpRequest-addEventListener.html http/tests/security/listener/xss-XMLHttpRequest-shortcut.html http/tests/security/listener/xss-window-onclick-addEventListener.html http/tests/security/listener/xss-window-onclick-shortcut.html 79590 1 20953 ggaren 2008-05-03 13:25:22 -0700 Created attachment 20953 patch to fix much of the underlying problem, but not all 79592 2 ggaren 2008-05-03 13:39:25 -0700 Committed revision 32840. We still need to figure out why the exception messages in these tests have changed. 79852 3 ggaren 2008-05-07 21:24:25 -0700 Looks like two issues: - "-CONSOLE MESSAGE: line 6: Value undefined (result of expression alert) is not object." The difference here is a difference of exception message style. - "+CONSOLE MESSAGE: line 1: Unsafe JavaScript attempt to access frame..." The difference here seems to be that squirrelfish looks up a global value an extra time. (Seems like a real bug.) 79863 4 ggaren 2008-05-07 23:15:44 -0700 Committed revision 32971. 20953 2008-05-03 13:25:22 -0700 2008-05-03 13:34:08 -0700 patch to fix much of the underlying problem, but not all patch-scope-chain-update.txt text/plain 11010 ggaren SW5kZXg6IENoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBDaGFuZ2VMb2cJKHJldmlzaW9uIDMyODM5 KQorKysgQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMjggQEAKKzIwMDgtMDUt MDMgIEdlb2ZmcmV5IEdhcmVuICA8Z2dhcmVuQGFwcGxlLmNvbT4KKworICAgICAgICBSZXZpZXdl ZCBieSBOT0JPRFkgKE9PUFMhKS4KKyAgICAgICAgCisgICAgICAgIFVwZGF0ZSBFeGVjU3RhdGU6 Om1fc2NvcGVDaGFpbiB3aGVuIHN3aXRjaGluZyBzY29wZSBjaGFpbnMgaW5zaWRlIHRoZQorICAg ICAgICBtYWNoaW5lLgorICAgICAgICAKKyAgICAgICAgVGhpcyBmaXhlcyB1c2VzIG9mIGxleGlj YWxHbG9iYWxPYmplY3QsIHN1Y2ggYXMsIGluIGEgc3ViZnJhbWUKKworICAgICAgICAgICAgYWxl cnQodG9wLm1ha2VBcnJheSgpIGluc3RhbmNlb2YgQXJyYXkgPyAiRkFJTCIgOiAiUEFTUyIpOwor ICAgICAgICAKKyAgICAgICAgYW5kIGEgYnVuY2ggb2YgdGhlIHNlY3VyaXR5IGZhaWx1cmVzIGxp c3RlZCBpbgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MTg4NzAuIChUaG9zZSB0ZXN0cyBzdGlsbCBmYWlsLAorICAgICAgICBzZWVtaW5nbHkgYmVjYXVz ZSBvZiByZWdyZXNzaW9ucyBpbiBleGNlcHRpb24gbWVzc2FnZXMpLgorICAgICAgICAKKyAgICAg ICAgU3VuU3BpZGVyIHJlcG9ydHMgbm8gY2hhbmdlLgorCisgICAgICAgICogVk0vTWFjaGluZS5j cHA6IEZhY3RvcmVkIG91dCBzY29wZSBjaGFpbiB1cGRhdGluZyBpbnRvIGEgY29tbW9uCisgICAg ICAgIGZ1bmN0aW9uIHRoYXQgdGFrZXMgY2FyZSB0byB1cGRhdGUgRXhlY1N0YXRlOjptX3Njb3Bl Q2hhaW4sIHRvby4KKworICAgICAgICAqIGtqcy9KU0dsb2JhbE9iamVjdC5oOgorICAgICAgICAo S0pTOjpKU0dsb2JhbE9iamVjdDo6SlNHbG9iYWxPYmplY3REYXRhOjpKU0dsb2JhbE9iamVjdERh dGEpOiBDaGFuZ2VkCisgICAgICAgIHRoaXMgY2xpZW50IHRvIGJlIGEgbGl0dGxlIGZyaWVuZGxp ZXIgdG8gRXhlY1N0YXRlJ3MgaW50ZXJuYWwKKyAgICAgICAgc3RvcmFnZSB0eXBlIGZvciBzY29w ZSBjaGFpbiBkYXRhLgorCiAyMDA4LTA1LTAzICBHZW9mZnJleSBHYXJlbiAgPGdnYXJlbkBhcHBs ZS5jb20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgU2FtIFdlaW5pZy4KSW5kZXg6IEphdmFTY3Jp cHRDb3JlLmV4cAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09Ci0tLSBKYXZhU2NyaXB0Q29yZS5leHAJKHJldmlzaW9uIDMy ODM5KQorKysgSmF2YVNjcmlwdENvcmUuZXhwCSh3b3JraW5nIGNvcHkpCkBAIC0yMDksNyArMjA5 LDcgQEAgX19aTjNLSlM5Q29sbGVjdG9yNHNpemVFdgogX19aTjNLSlM5Q29sbGVjdG9yN2NvbGxl Y3RFdgogX19aTjNLSlM5Q29sbGVjdG9yN3Byb3RlY3RFUE5TXzdKU1ZhbHVlRQogX19aTjNLSlM5 Q29sbGVjdG9yOXVucHJvdGVjdEVQTlNfN0pTVmFsdWVFCi1fX1pOM0tKUzlFeGVjU3RhdGVDMUVQ TlNfMTRKU0dsb2JhbE9iamVjdEVQTlNfOEpTT2JqZWN0RVJOU18xMFNjb3BlQ2hhaW5FCitfX1pO M0tKUzlFeGVjU3RhdGVDMUVQTlNfMTRKU0dsb2JhbE9iamVjdEVQTlNfOEpTT2JqZWN0RVBOU18x NFNjb3BlQ2hhaW5Ob2RlRQogX19aTjNLSlNlcUVSS05TXzdVU3RyaW5nRVBLYwogX19aTjNXVEYx MGZhc3RDYWxsb2NFbW0KIF9fWk4zV1RGMTBmYXN0TWFsbG9jRW0KSW5kZXg6IFZNL01hY2hpbmUu Y3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIFZNL01hY2hpbmUuY3BwCShyZXZpc2lvbiAzMjgzOSkKKysrIFZN L01hY2hpbmUuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC00OTgsNyArNDk4LDcgQEAgTkVWRVJfSU5M SU5FIEluc3RydWN0aW9uKiBNYWNoaW5lOjp0aHJvdwogICAgIEFTU0VSVChzY29wZURlbHRhID49 IDApOwogICAgIHdoaWxlIChzY29wZURlbHRhLS0pCiAgICAgICAgIHNjLnBvcCgpOwotICAgIHNj b3BlQ2hhaW4gPSBzYy5ub2RlKCk7CisgICAgc2V0U2NvcGVDaGFpbihleGVjLCBzY29wZUNoYWlu LCBzYy5ub2RlKCkpOwogCiAgICAgcmV0dXJuIGhhbmRsZXJWUEM7CiB9CkBAIC01NjIsOSArNTYy LDExIEBAIEpTVmFsdWUqIE1hY2hpbmU6OmV4ZWN1dGUoUHJvZ3JhbU5vZGUqIHAKICAgICAKICAg ICBpZiAoY29kZUJsb2NrLT5uZWVkc0Z1bGxTY29wZUNoYWluKQogICAgICAgICBzY29wZUNoYWlu ID0gc2NvcGVDaGFpbi0+Y29weSgpOworICAgIAorICAgIEV4ZWNTdGF0ZSBuZXdFeGVjKGV4ZWMs IHNjb3BlQ2hhaW4pOwogCiAgICAgbV9yZWVudHJ5RGVwdGgrKzsKLSAgICBKU1ZhbHVlKiByZXN1 bHQgPSBwcml2YXRlRXhlY3V0ZShOb3JtYWwsIGV4ZWMsIHJlZ2lzdGVyRmlsZSwgciwgc2NvcGVD aGFpbiwgY29kZUJsb2NrLCBleGNlcHRpb24pOworICAgIEpTVmFsdWUqIHJlc3VsdCA9IHByaXZh dGVFeGVjdXRlKE5vcm1hbCwgJm5ld0V4ZWMsIHJlZ2lzdGVyRmlsZSwgciwgc2NvcGVDaGFpbiwg Y29kZUJsb2NrLCBleGNlcHRpb24pOwogICAgIG1fcmVlbnRyeURlcHRoLS07CiAKICAgICByZWdp c3RlckZpbGVTdGFjay0+cG9wR2xvYmFsUmVnaXN0ZXJGaWxlKCk7CkBAIC02MTUsOCArNjE3LDEw IEBAIEpTVmFsdWUqIE1hY2hpbmU6OmV4ZWN1dGUoRnVuY3Rpb25Cb2R5Tm8KICAgICBjYWxsRnJh bWUgPSAoKnJlZ2lzdGVyQmFzZSkgKyBjYWxsRnJhbWVPZmZzZXQ7IC8vIHJlZ2lzdGVyQmFzZSBt YXkgaGF2ZSBtb3ZlZCwgcmVjb21wdXRlIGNhbGxGcmFtZQogICAgIHNjb3BlQ2hhaW4gPSBzY29w ZUNoYWluRm9yQ2FsbChmdW5jdGlvbkJvZHlOb2RlLCBuZXdDb2RlQmxvY2ssIHNjb3BlQ2hhaW4s IGNhbGxGcmFtZSwgcmVnaXN0ZXJCYXNlLCByKTsgICAgICAgICAgICAKIAorICAgIEV4ZWNTdGF0 ZSBuZXdFeGVjKGV4ZWMsIHNjb3BlQ2hhaW4pOworCiAgICAgbV9yZWVudHJ5RGVwdGgrKzsKLSAg ICBKU1ZhbHVlKiByZXN1bHQgPSBwcml2YXRlRXhlY3V0ZShOb3JtYWwsIGV4ZWMsIHJlZ2lzdGVy RmlsZSwgciwgc2NvcGVDaGFpbiwgbmV3Q29kZUJsb2NrLCBleGNlcHRpb24pOworICAgIEpTVmFs dWUqIHJlc3VsdCA9IHByaXZhdGVFeGVjdXRlKE5vcm1hbCwgJm5ld0V4ZWMsIHJlZ2lzdGVyRmls ZSwgciwgc2NvcGVDaGFpbiwgbmV3Q29kZUJsb2NrLCBleGNlcHRpb24pOwogICAgIG1fcmVlbnRy eURlcHRoLS07CiAKICAgICByZWdpc3RlckZpbGUtPnNocmluayhvbGRTaXplKTsKQEAgLTY2Niw4 ICs2NzAsMTAgQEAgSlNWYWx1ZSogTWFjaGluZTo6ZXhlY3V0ZShFdmFsTm9kZSogZXZhbAogICAg IGlmIChjb2RlQmxvY2stPm5lZWRzRnVsbFNjb3BlQ2hhaW4pCiAgICAgICAgIHNjb3BlQ2hhaW4g PSBzY29wZUNoYWluLT5jb3B5KCk7CiAKKyAgICBFeGVjU3RhdGUgbmV3RXhlYyhleGVjLCBzY29w ZUNoYWluKTsKKwogICAgIG1fcmVlbnRyeURlcHRoKys7Ci0gICAgSlNWYWx1ZSogcmVzdWx0ID0g cHJpdmF0ZUV4ZWN1dGUoTm9ybWFsLCBleGVjLCByZWdpc3RlckZpbGUsIHIsIHNjb3BlQ2hhaW4s IGNvZGVCbG9jaywgZXhjZXB0aW9uKTsKKyAgICBKU1ZhbHVlKiByZXN1bHQgPSBwcml2YXRlRXhl Y3V0ZShOb3JtYWwsICZuZXdFeGVjLCByZWdpc3RlckZpbGUsIHIsIHNjb3BlQ2hhaW4sIGNvZGVC bG9jaywgZXhjZXB0aW9uKTsKICAgICBtX3JlZW50cnlEZXB0aC0tOwogCiAgICAgcmVnaXN0ZXJG aWxlLT5zaHJpbmsob2xkU2l6ZSk7CkBAIC02ODAsNiArNjg2LDEyIEBAIEpTVmFsdWUqIE1hY2hp bmU6OmV4ZWN1dGUoRXZhbE5vZGUqIGV2YWwKICAgICByZXR1cm4gTWFjaGluZTo6ZXhlY3V0ZShl dmFsTm9kZSwgZXhlYywgdGhpc09iaiwgcmVnaXN0ZXJGaWxlLCByZWdpc3RlckZpbGUtPnNpemUo KSwgc2NvcGVDaGFpbiwgZXhjZXB0aW9uKTsKIH0KIAorQUxXQVlTX0lOTElORSB2b2lkIE1hY2hp bmU6OnNldFNjb3BlQ2hhaW4oRXhlY1N0YXRlKiBleGVjLCBTY29wZUNoYWluTm9kZSomIHNjb3Bl Q2hhaW4sIFNjb3BlQ2hhaW5Ob2RlKiBuZXdTY29wZUNoYWluKQoreworICAgIHNjb3BlQ2hhaW4g PSBuZXdTY29wZUNoYWluOworICAgIGV4ZWMtPm1fc2NvcGVDaGFpbiA9IG5ld1Njb3BlQ2hhaW47 Cit9CisKIEpTVmFsdWUqIE1hY2hpbmU6OnByaXZhdGVFeGVjdXRlKEV4ZWN1dGlvbkZsYWcgZmxh ZywgRXhlY1N0YXRlKiBleGVjLCBSZWdpc3RlckZpbGUqIHJlZ2lzdGVyRmlsZSwgUmVnaXN0ZXIq IHIsIFNjb3BlQ2hhaW5Ob2RlKiBzY29wZUNoYWluLCBDb2RlQmxvY2sqIGNvZGVCbG9jaywgSlNW YWx1ZSoqIGV4Y2VwdGlvbikKIHsKICAgICAvLyBPbmUtdGltZSBpbml0aWFsaXphdGlvbiBvZiBv dXIgYWRkcmVzcyB0YWJsZXMuIFdlIGhhdmUgdG8gcHV0IHRoaXMgY29kZQpAQCAtMTQ3NSw3ICsx NDg3LDcgQEAgSlNWYWx1ZSogTWFjaGluZTo6cHJpdmF0ZUV4ZWN1dGUoRXhlY3V0aQogCiAgICAg ICAgICAgICBjb2RlQmxvY2sgPSBuZXdDb2RlQmxvY2s7CiAgICAgICAgICAgICBjYWxsRnJhbWUg PSAoKnJlZ2lzdGVyQmFzZSkgKyBjYWxsRnJhbWVPZmZzZXQ7IC8vIHJlZ2lzdGVyQmFzZSBtYXkg aGF2ZSBtb3ZlZCwgcmVjb21wdXRlIGNhbGxGcmFtZQotICAgICAgICAgICAgc2NvcGVDaGFpbiA9 IHNjb3BlQ2hhaW5Gb3JDYWxsKGZ1bmN0aW9uQm9keU5vZGUsIGNvZGVCbG9jaywgY2FsbERhdGFT Y29wZUNoYWluLCBjYWxsRnJhbWUsIHJlZ2lzdGVyQmFzZSwgcik7ICAgICAgICAgICAgCisgICAg ICAgICAgICBzZXRTY29wZUNoYWluKGV4ZWMsIHNjb3BlQ2hhaW4sIHNjb3BlQ2hhaW5Gb3JDYWxs KGZ1bmN0aW9uQm9keU5vZGUsIGNvZGVCbG9jaywgY2FsbERhdGFTY29wZUNoYWluLCBjYWxsRnJh bWUsIHJlZ2lzdGVyQmFzZSwgcikpOwogICAgICAgICAgICAgayA9IGNvZGVCbG9jay0+anNWYWx1 ZXMuZGF0YSgpOwogICAgICAgICAgICAgdlBDID0gY29kZUJsb2NrLT5pbnN0cnVjdGlvbnMuYmVn aW4oKTsKIApAQCAtMTUzNCw3ICsxNTQ2LDcgQEAgSlNWYWx1ZSogTWFjaGluZTo6cHJpdmF0ZUV4 ZWN1dGUoRXhlY3V0aQogICAgICAgICAKICAgICAgICAgayA9IGNvZGVCbG9jay0+anNWYWx1ZXMu ZGF0YSgpOwogICAgICAgICB2UEMgPSBjYWxsRnJhbWVbUmV0dXJuVlBDXS51LnZQQzsKLSAgICAg ICAgc2NvcGVDaGFpbiA9IGNhbGxGcmFtZVtDYWxsZXJTY29wZUNoYWluXS51LnNjb3BlQ2hhaW47 CisgICAgICAgIHNldFNjb3BlQ2hhaW4oZXhlYywgc2NvcGVDaGFpbiwgY2FsbEZyYW1lW0NhbGxl clNjb3BlQ2hhaW5dLnUuc2NvcGVDaGFpbik7CiAgICAgICAgIHIgPSAoKnJlZ2lzdGVyQmFzZSkg KyBjYWxsRnJhbWVbQ2FsbGVyUmVnaXN0ZXJPZmZzZXRdLnUuaTsKICAgICAgICAgaW50IHIwID0g Y2FsbEZyYW1lW1JldHVyblZhbHVlUmVnaXN0ZXJdLnUuaTsKICAgICAgICAgcltyMF0udS5qc1Zh bHVlID0gcmV0dXJuVmFsdWU7CkBAIC0xNTgxLDcgKzE1OTMsNyBAQCBKU1ZhbHVlKiBNYWNoaW5l Ojpwcml2YXRlRXhlY3V0ZShFeGVjdXRpCiAKICAgICAgICAgICAgIGNvZGVCbG9jayA9IG5ld0Nv ZGVCbG9jazsKICAgICAgICAgICAgIGNhbGxGcmFtZSA9ICgqcmVnaXN0ZXJCYXNlKSArIGNhbGxG cmFtZU9mZnNldDsgLy8gcmVnaXN0ZXJCYXNlIG1heSBoYXZlIG1vdmVkLCByZWNvbXB1dGUgY2Fs bEZyYW1lCi0gICAgICAgICAgICBzY29wZUNoYWluID0gc2NvcGVDaGFpbkZvckNhbGwoZnVuY3Rp b25Cb2R5Tm9kZSwgY29kZUJsb2NrLCBjYWxsRGF0YVNjb3BlQ2hhaW4sIGNhbGxGcmFtZSwgcmVn aXN0ZXJCYXNlLCByKTsgICAgICAgICAgICAKKyAgICAgICAgICAgIHNldFNjb3BlQ2hhaW4oZXhl Yywgc2NvcGVDaGFpbiwgc2NvcGVDaGFpbkZvckNhbGwoZnVuY3Rpb25Cb2R5Tm9kZSwgY29kZUJs b2NrLCBjYWxsRGF0YVNjb3BlQ2hhaW4sIGNhbGxGcmFtZSwgcmVnaXN0ZXJCYXNlLCByKSk7CiAg ICAgICAgICAgICBrID0gY29kZUJsb2NrLT5qc1ZhbHVlcy5kYXRhKCk7CiAgICAgICAgICAgICB2 UEMgPSBjb2RlQmxvY2stPmluc3RydWN0aW9ucy5iZWdpbigpOwogCkBAIC0xNjEzLDEzICsxNjI1 LDEzIEBAIEpTVmFsdWUqIE1hY2hpbmU6OnByaXZhdGVFeGVjdXRlKEV4ZWN1dGkKICAgICAgICAg SlNPYmplY3QqIG8gPSB2LT50b09iamVjdChleGVjKTsKICAgICAgICAgVk1fQ0hFQ0tfRVhDRVBU SU9OKCk7CiAgICAgICAgIAotICAgICAgICBzY29wZUNoYWluID0gc2NvcGVDaGFpbi0+cHVzaChv KTsKKyAgICAgICAgc2V0U2NvcGVDaGFpbihleGVjLCBzY29wZUNoYWluLCBzY29wZUNoYWluLT5w dXNoKG8pKTsKIAogICAgICAgICArK3ZQQzsKICAgICAgICAgTkVYVF9PUENPREU7CiAgICAgfQog ICAgIEJFR0lOX09QQ09ERShvcF9wb3Bfc2NvcGUpIHsKLSAgICAgICAgc2NvcGVDaGFpbiA9IHNj b3BlQ2hhaW4tPnBvcCgpOworICAgICAgICBzZXRTY29wZUNoYWluKGV4ZWMsIHNjb3BlQ2hhaW4s IHNjb3BlQ2hhaW4tPnBvcCgpKTsKIAogICAgICAgICArK3ZQQzsKICAgICAgICAgTkVYVF9PUENP REU7CkBAIC0xNjUwLDggKzE2NjIsMTIgQEAgSlNWYWx1ZSogTWFjaGluZTo6cHJpdmF0ZUV4ZWN1 dGUoRXhlY3V0aQogICAgIEJFR0lOX09QQ09ERShvcF9qbXBfc2NvcGVzKSB7CiAgICAgICAgIGlu dCBzY29wZURlbHRhID0gKCsrdlBDKS0+dS5vcGVyYW5kOwogICAgICAgICBpbnQgb2Zmc2V0ID0g KCsrdlBDKS0+dS5vcGVyYW5kOworICAgICAgICAKKyAgICAgICAgU2NvcGVDaGFpbk5vZGUqIHRt cCA9IHNjb3BlQ2hhaW47CiAgICAgICAgIHdoaWxlIChzY29wZURlbHRhLS0pCi0gICAgICAgICAg ICBzY29wZUNoYWluID0gc2NvcGVDaGFpbi0+cG9wKCk7CisgICAgICAgICAgICB0bXAgPSB0bXAt PnBvcCgpOworICAgICAgICBzZXRTY29wZUNoYWluKGV4ZWMsIHNjb3BlQ2hhaW4sIHRtcCk7Cisg ICAgICAgICAgICAKICAgICAgICAgdlBDICs9IG9mZnNldDsKICAgICAgICAgTkVYVF9PUENPREU7 CiAgICAgfQpJbmRleDogVk0vTWFjaGluZS5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFZNL01hY2hpbmUuaAko cmV2aXNpb24gMzI4MzkpCisrKyBWTS9NYWNoaW5lLmgJKHdvcmtpbmcgY29weSkKQEAgLTg5LDYg Kzg5LDggQEAgbmFtZXNwYWNlIEtKUyB7CiAgICAgICAgIGVudW0geyBNYXhSZWVudHJ5RGVwdGgg PSAxMjggfTsKICAgICAgICAgdHlwZWRlZiBlbnVtIHsgTm9ybWFsLCBJbml0aWFsaXplQW5kUmV0 dXJuIH0gRXhlY3V0aW9uRmxhZzsKIAorICAgICAgICBBTFdBWVNfSU5MSU5FIHZvaWQgc2V0U2Nv cGVDaGFpbihFeGVjU3RhdGUqIGV4ZWMsIFNjb3BlQ2hhaW5Ob2RlKiYsIFNjb3BlQ2hhaW5Ob2Rl Kik7CisKICAgICAgICAgTkVWRVJfSU5MSU5FIGJvb2wgdW53aW5kQ2FsbEZyYW1lKFJlZ2lzdGVy KiosIGNvbnN0IEluc3RydWN0aW9uKiYsIENvZGVCbG9jayomLCBKU1ZhbHVlKiomLCBTY29wZUNo YWluTm9kZSomLCBSZWdpc3RlciomKTsKICAgICAgICAgTkVWRVJfSU5MSU5FIEluc3RydWN0aW9u KiB0aHJvd0V4Y2VwdGlvbihFeGVjU3RhdGUqLCBKU1ZhbHVlKiwgUmVnaXN0ZXIqKiwgY29uc3Qg SW5zdHJ1Y3Rpb24qLCBDb2RlQmxvY2sqJiwgSlNWYWx1ZSoqJiwgU2NvcGVDaGFpbk5vZGUqJiwg UmVnaXN0ZXIqJik7CiAKSW5kZXg6IGtqcy9FeGVjU3RhdGUuY3BwCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIGtq cy9FeGVjU3RhdGUuY3BwCShyZXZpc2lvbiAzMjgzOSkKKysrIGtqcy9FeGVjU3RhdGUuY3BwCSh3 b3JraW5nIGNvcHkpCkBAIC0zNywxNyArMzcsMzIgQEAgc3RhdGljIGlubGluZSBMaXN0KiBnbG9i YWxFbXB0eUxpc3QoKQogICAgIHJldHVybiAmc3RhdGljRW1wdHlMaXN0OwogfQogCi1FeGVjU3Rh dGU6OkV4ZWNTdGF0ZShKU0dsb2JhbE9iamVjdCogZ2xvYmFsT2JqZWN0LCBKU09iamVjdCogZ2xv YmFsVGhpc1ZhbHVlLCBTY29wZUNoYWluJiBnbG9iYWxTY29wZUNoYWluKQotICAgIDogbV9nbG9i YWxPYmplY3QoZ2xvYmFsT2JqZWN0KQorRXhlY1N0YXRlOjpFeGVjU3RhdGUoSlNHbG9iYWxPYmpl Y3QqIGdsb2JhbE9iamVjdCwgSlNPYmplY3QqIGdsb2JhbFRoaXNWYWx1ZSwgU2NvcGVDaGFpbk5v ZGUqIGdsb2JhbFNjb3BlQ2hhaW4pCisgICAgOiBtX3ByZXYoMCkKKyAgICAsIG1fZ2xvYmFsT2Jq ZWN0KGdsb2JhbE9iamVjdCkKICAgICAsIG1fZ2xvYmFsVGhpc1ZhbHVlKGdsb2JhbFRoaXNWYWx1 ZSkKICAgICAsIG1fZXhjZXB0aW9uKDApCiAgICAgLCBtX2V4Y2VwdGlvblNvdXJjZSgwKQogICAg ICwgbV9wcm9wZXJ0eU5hbWVzKENvbW1vbklkZW50aWZpZXJzOjpzaGFyZWQoKSkKICAgICAsIG1f ZW1wdHlMaXN0KGdsb2JhbEVtcHR5TGlzdCgpKQotICAgICwgbV9zY29wZUNoYWluKGdsb2JhbFNj b3BlQ2hhaW4ubm9kZSgpKQorICAgICwgbV9zY29wZUNoYWluKGdsb2JhbFNjb3BlQ2hhaW4pCiB7 CiB9CiAKK0V4ZWNTdGF0ZTo6RXhlY1N0YXRlKEV4ZWNTdGF0ZSogZXhlYywgU2NvcGVDaGFpbk5v ZGUqIHNjb3BlQ2hhaW4pCisgICAgOiBtX3ByZXYoZXhlYykKKyAgICAsIG1fZ2xvYmFsT2JqZWN0 KGV4ZWMtPm1fZ2xvYmFsT2JqZWN0KQorICAgICwgbV9nbG9iYWxUaGlzVmFsdWUoZXhlYy0+bV9n bG9iYWxUaGlzVmFsdWUpCisgICAgLCBtX2V4Y2VwdGlvbigwKQorICAgICwgbV9leGNlcHRpb25T b3VyY2UoMCkKKyAgICAsIG1fcHJvcGVydHlOYW1lcyhleGVjLT5tX3Byb3BlcnR5TmFtZXMpCisg ICAgLCBtX2VtcHR5TGlzdChleGVjLT5tX2VtcHR5TGlzdCkKKyAgICAsIG1fc2NvcGVDaGFpbihz Y29wZUNoYWluKQoreworICAgIEFTU0VSVCghZXhlYy0+bV9leGNlcHRpb24pOworICAgIEFTU0VS VCghZXhlYy0+bV9leGNlcHRpb25Tb3VyY2UpOworfQorCiBib29sIEV4ZWNTdGF0ZTo6aXNHbG9i YWxPYmplY3QoSlNPYmplY3QqIG8pIGNvbnN0CiB7CiAgICAgcmV0dXJuIG8tPmlzR2xvYmFsT2Jq ZWN0KCk7CkluZGV4OiBranMvRXhlY1N0YXRlLmgKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0ga2pzL0V4ZWNTdGF0 ZS5oCShyZXZpc2lvbiAzMjgzOSkKKysrIGtqcy9FeGVjU3RhdGUuaAkod29ya2luZyBjb3B5KQpA QCAtNDcsOCArNDcsMTAgQEAgbmFtZXNwYWNlIEtKUyAgewogICAgIAogICAgIC8vIFBhc3NlZCBh cyB0aGUgZmlyc3QgYXJndW1lbnQgdG8gbW9zdCBmdW5jdGlvbnMuCiAgICAgY2xhc3MgRXhlY1N0 YXRlIDogTm9uY29weWFibGUgeworICAgICAgICBmcmllbmQgY2xhc3MgTWFjaGluZTsKKwogICAg IHB1YmxpYzoKLSAgICAgICAgRXhlY1N0YXRlKEpTR2xvYmFsT2JqZWN0KiwgSlNPYmplY3QqIGds b2JhbFRoaXNWYWx1ZSwgU2NvcGVDaGFpbiYgZ2xvYmFsU2NvcGVDaGFpbik7CisgICAgICAgIEV4 ZWNTdGF0ZShKU0dsb2JhbE9iamVjdCosIEpTT2JqZWN0KiBnbG9iYWxUaGlzVmFsdWUsIFNjb3Bl Q2hhaW5Ob2RlKiBnbG9iYWxTY29wZUNoYWluKTsKIAogICAgICAgICAvLyBHbG9iYWwgb2JqZWN0 IGluIHdoaWNoIGV4ZWN1dGlvbiBiZWdhbi4KICAgICAgICAgSlNHbG9iYWxPYmplY3QqIGR5bmFt aWNHbG9iYWxPYmplY3QoKSBjb25zdCB7IHJldHVybiBtX2dsb2JhbE9iamVjdDsgfQpAQCAtNzcs NyArNzksMTEgQEAgbmFtZXNwYWNlIEtKUyAgewogICAgICAgICBjb25zdCBMaXN0JiBlbXB0eUxp c3QoKSBjb25zdCB7IHJldHVybiAqbV9lbXB0eUxpc3Q7IH0KIAogICAgIHByaXZhdGU6CisgICAg ICAgIEV4ZWNTdGF0ZShFeGVjU3RhdGUqLCBTY29wZUNoYWluTm9kZSopOworCiAgICAgICAgIGJv b2wgaXNHbG9iYWxPYmplY3QoSlNPYmplY3QqKSBjb25zdDsKKyAgICAgICAgCisgICAgICAgIEV4 ZWNTdGF0ZSogbV9wcmV2OwogICAgIAogICAgICAgICBKU0dsb2JhbE9iamVjdCogbV9nbG9iYWxP YmplY3Q7CiAgICAgICAgIEpTT2JqZWN0KiBtX2dsb2JhbFRoaXNWYWx1ZTsKQEAgLTg4LDcgKzk0 LDcgQEAgbmFtZXNwYWNlIEtKUyAgewogICAgICAgICBjb25zdCBDb21tb25JZGVudGlmaWVycyog bV9wcm9wZXJ0eU5hbWVzOwogICAgICAgICBjb25zdCBMaXN0KiBtX2VtcHR5TGlzdDsKIAotICAg ICAgICBjb25zdCBTY29wZUNoYWluTm9kZSogbV9zY29wZUNoYWluOworICAgICAgICBTY29wZUNo YWluTm9kZSogbV9zY29wZUNoYWluOwogICAgIH07CiAKICAgICAvLyBUaGlzIGNvZGUgaXMgbm93 IGRlZnVuY3Q6CkluZGV4OiBranMvSlNHbG9iYWxPYmplY3QuaAo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBranMv SlNHbG9iYWxPYmplY3QuaAkocmV2aXNpb24gMzI4MzkpCisrKyBranMvSlNHbG9iYWxPYmplY3Qu aAkod29ya2luZyBjb3B5KQpAQCAtODEsNyArODEsNyBAQCBuYW1lc3BhY2UgS0pTIHsKICAgICAg ICAgICAgIEpTR2xvYmFsT2JqZWN0RGF0YShKU0dsb2JhbE9iamVjdCogZ2xvYmFsT2JqZWN0LCBK U09iamVjdCogdGhpc1ZhbHVlKQogICAgICAgICAgICAgICAgIDogSlNWYXJpYWJsZU9iamVjdERh dGEoJnN5bWJvbFRhYmxlLCByZWdpc3RlckZpbGVTdGFjay5nbG9iYWxCYXNlUG9pbnRlcigpLCAw KQogICAgICAgICAgICAgICAgICwgZ2xvYmFsU2NvcGVDaGFpbihnbG9iYWxPYmplY3QpCi0gICAg ICAgICAgICAgICAgLCBnbG9iYWxFeGVjKGdsb2JhbE9iamVjdCwgdGhpc1ZhbHVlLCBnbG9iYWxT Y29wZUNoYWluKQorICAgICAgICAgICAgICAgICwgZ2xvYmFsRXhlYyhnbG9iYWxPYmplY3QsIHRo aXNWYWx1ZSwgZ2xvYmFsU2NvcGVDaGFpbi5ub2RlKCkpCiAgICAgICAgICAgICB7CiAgICAgICAg ICAgICB9CiAK