207296 2020-02-05 14:30:06 -0800 Nullptr crash in RenderStyle::isFlippedBlocksWritingMode when fragment flow gains a new in-flow descendant 2020-03-07 19:57:37 -0800 1 1 1 Unclassified WebKit Layout and Rendering WebKit Nightly Build All All RESOLVED FIXED InRadar P2 Normal --- 1 shihchieh_lee webkit-unassigned aakash_jain ajuma bfulgham ews-feeder koivisto product-security rniwa simon.fraser webkit-bug-importer zalan oldest_to_newest 1615282 0 shihchieh_lee 2020-02-05 14:30:06 -0800 <rdar://56967115> #0 0x4b1c42ab1 in WebCore::RenderStyle::writingMode() const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x1c40ab1) #1 0x4b405e128 in WebCore::RenderStyle::isFlippedBlocksWritingMode() const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x405c128) #2 0x4b495d0fa in WebCore::RenderBox::flipForWritingMode(WebCore::LayoutPoint const&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x495b0fa) #3 0x4b4bd811f in WebCore::RenderMultiColumnFlow::physicalTranslationFromFragmentToFlow(WebCore::RenderMultiColumnSet const*, WebCore::LayoutPoint const&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4bd611f) #4 0x4b4bd7df6 in WebCore::RenderMultiColumnFlow::mapAbsoluteToLocalPoint(unsigned int, WebCore::TransformState&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4bd5df6) #5 0x4b49c5521 in WebCore::RenderBoxModelObject::mapAbsoluteToLocalPoint(unsigned int, WebCore::TransformState&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x49c3521) #6 0x4b49c5521 in WebCore::RenderBoxModelObject::mapAbsoluteToLocalPoint(unsigned int, WebCore::TransformState&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x49c3521) #7 0x4b49c5521 in WebCore::RenderBoxModelObject::mapAbsoluteToLocalPoint(unsigned int, WebCore::TransformState&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x49c3521) #8 0x4b4bfda9a in WebCore::RenderObject::absoluteToLocal(WebCore::FloatPoint const&, unsigned int) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4bfba9a) #9 0x4b40670ea in WebCore::FrameView::convertFromContainingViewToRenderer(WebCore::RenderElement const*, WebCore::IntRect const&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x40650ea) #10 0x4b4067ee8 in WebCore::FrameView::convertFromContainingView(WebCore::IntRect const&) const (Safari_ASAN_252152_93985f3693290f9e1b9273fb7bc493e9eb44c361.app/Contents/ 1615284 1 shihchieh_lee 2020-02-05 14:33:38 -0800 Root cause analysis from Alan: Without the [outer.style.transition = "1s”] this is what we end up with: before [range.extractContents] call B-----L- -- DIV RenderBlock at (0,0) size 1222x0 renderer->(0x1360f9420) node->(0x12f59afc0) B---YGL- RenderMultiColumnFlowThread at (0,0) size 603x0 renderer->(0x1360f97b0) [Rs:0x0 Re:0x0] BA----L- -- DIV RenderBlock at (8,8) size 304x154 renderer->(0x1360f9550) node->(0x12f59b050) N------- -- IFRAME RenderIFrame at (0,0) size 304x154 renderer->(0x1360f9680) node->(0x12f59b0e0) after [range.extractContents] call B------- -+ DIV RenderBlock at (0,0) size 1222x0 renderer->(0x1360f9420) node->(0x12f59afc0) layout->[self][normal child] B------- -+ DIV RenderBlock at (8,8) size 304x154 renderer->(0x1360f9550) node->(0x12f59b050) layout->[self][normal child] N------- -+ IFRAME RenderIFrame at (0,0) size 304x154 renderer->(0x1360f9680) node->(0x12f59b0e0) layout->[self] ^^Note that missing RenderMultiColumnFlowThread and the inner <div> is no longer absolutely positioned. and when the [outer.style.transition = "1s”] is added back the after state is this -> B-----L- -+ DIV RenderBlock at (0,0) size 1222x0 renderer->(0x1360f9420) node->(0x1360fbd60) layout->[self][normal child] B---YGL- RenderMultiColumnFlowThread at (0,0) size 603x0 renderer->(0x1360f97b0) [Rs:0x0 Re:0x0] layout->[self][normal child] B------- -+ DIV RenderBlock at (8,8) size 304x154 renderer->(0x1360f9550) node->(0x1360fbdf0) [Rs:0x0 Re:0x0] layout->[self][normal child] N------- -+ IFRAME RenderIFrame at (0,0) size 304x154 renderer->(0x1360f9680) node->(0x1360fa2a0) layout->[self] ^^the inner <div> is no longer absolutely positioned but we’ve still have a fragmented flow. It looks like when the inner <div> goes from out-of-flow to in-flow, we don’t check if the enclosing fragmented flow needs a new set. 1615363 2 389894 shihchieh_lee 2020-02-05 15:57:54 -0800 Created attachment 389894 Patch 1615705 3 shihchieh_lee 2020-02-06 10:55:30 -0800 EWS test "Mac-debug-wk1" fails because of <rdar://46103517>. Pending on investigation. 1615752 4 389894 rniwa 2020-02-06 13:11:00 -0800 Comment on attachment 389894 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=389894&action=review > Source/WebCore/ChangeLog:10 > + Reviewed by NOBODY (OOPS!). This line should appear below URL but before the description (surrounded by blank lines as you did here). 1620272 5 391076 shihchieh_lee 2020-02-18 12:29:11 -0800 Created attachment 391076 Patch 1620289 6 shihchieh_lee 2020-02-18 13:13:42 -0800 Submit the change with expected crash in layout test due to bug 202805. 1621018 7 rniwa 2020-02-19 18:59:39 -0800 <rdar://problem/49687828> 1621211 8 391076 aakash_jain 2020-02-20 07:42:18 -0800 Comment on attachment 391076 Patch commit-queue still doesn't support security bugs. Please land manually. See: https://bugs.webkit.org/show_bug.cgi?id=201939 1621587 9 rniwa 2020-02-21 00:22:26 -0800 This is not a security bug. 1621589 10 rniwa 2020-02-21 00:26:19 -0800 Committed r257129: <https://trac.webkit.org/changeset/257129> 1627433 11 rniwa 2020-03-07 19:57:37 -0800 *** Bug 208317 has been marked as a duplicate of this bug. *** 389894 2020-02-05 15:57:54 -0800 2020-02-18 12:29:10 -0800 Patch bug-207296-20200205155754.patch text/plain 4686 shihchieh_lee U3VidmVyc2lvbiBSZXZpc2lvbjogMjU1ODQzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOWUwNjYwNGNlODY5MDcz ZjQwODY2NTgyZGZjNTM0ZjA2MmU4MTBmYS4uZTU0OTYyMDA4ZjczYTE5OWRmNzM3MjE4MTk5ZTkx ZjA2ZTRkZmRjYyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE5IEBACisyMDIwLTAyLTA1ICBKYWNr IExlZSAgPHNoaWhjaGllaF9sZWVAYXBwbGUuY29tPgorCisgICAgICAgIE51bGxwdHIgY3Jhc2gg aW4gUmVuZGVyU3R5bGU6OmlzRmxpcHBlZEJsb2Nrc1dyaXRpbmdNb2RlIHdoZW4gZnJhZ21lbnQg ZmxvdyBnYWlucyBhIG5ldyBpbi1mbG93IGRlc2NlbmRhbnQKKyAgICAgICAgaHR0cHM6Ly9idWdz LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIwNzI5NgorCisgICAgICAgIFdoZW4gYSBtdWx0 aS1jb2x1bW4gZnJhZ21lbnQgZmxvdyBnYWlucyBhIG5ldyBpbi1mbG93IGRlc2NlbmRhbnQsIHdl IG5lZWQgdG8gY2FsbAorICAgICAgICBtdWx0aUNvbHVtbkRlc2NlbmRhbnRJbnNlcnRlZCBzbyBS ZW5kZXJNdWx0aUNvbHVtblNldCB3b3VsZCBiZSBjcmVhdGVkIGZvciB0aGUgbmV3CisgICAgICAg IGRlc2NlbmRhbnQuCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg ICAgICAgVGVzdDogZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNj ZW5kYW50LWNyYXNoLmh0bWwKKworICAgICAgICAqIHJlbmRlcmluZy91cGRhdGluZy9SZW5kZXJU cmVlQnVpbGRlci5jcHA6CisgICAgICAgIChXZWJDb3JlOjpSZW5kZXJUcmVlQnVpbGRlcjo6Y2hp bGRGbG93U3RhdGVDaGFuZ2VzQW5kQWZmZWN0c1BhcmVudEJsb2NrKToKKwogMjAyMC0wMi0wNSAg Q2hyaXMgRmxlaXphY2ggIDxjZmxlaXphY2hAYXBwbGUuY29tPgogCiAgICAgICAgIEFYOiByZXBs YWNlVGV4dEluUmFuZ2Ugc2hvdWxkIGhhbmRsZSB3aGVuIGNhbGxlZCBvbiB0aGUgV2ViQXJlYSBl bGVtZW50CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvdXBkYXRpbmcvUmVu ZGVyVHJlZUJ1aWxkZXIuY3BwIGIvU291cmNlL1dlYkNvcmUvcmVuZGVyaW5nL3VwZGF0aW5nL1Jl bmRlclRyZWVCdWlsZGVyLmNwcAppbmRleCAxODcxODA4MWM2ZTI2YmY4YTE1YzcxZDQ4NDNlZWUx ZTViYTE4MjNkLi40ZDZlZjUwMWUyZTE2ODBjNTE4YjA2ZDEwMGNkYWM2NGFhOWIxN2JlIDEwMDY0 NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvdXBkYXRpbmcvUmVuZGVyVHJlZUJ1aWxk ZXIuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3JlbmRlcmluZy91cGRhdGluZy9SZW5kZXJUcmVl QnVpbGRlci5jcHAKQEAgLTY3OSw2ICs2NzksMTIgQEAgdm9pZCBSZW5kZXJUcmVlQnVpbGRlcjo6 Y2hpbGRGbG93U3RhdGVDaGFuZ2VzQW5kQWZmZWN0c1BhcmVudEJsb2NrKFJlbmRlckVsZW1lbnQK ICAgICAgICAgICAgIC8vIFdlIG5lZWQgdG8gcmUtcnVuIHRoZSBncmlkIGl0ZW1zIHBsYWNlbWVu dCBpZiBpdCBoYWQgZ2FpbmVkIGEgbmV3IGl0ZW0uCiAgICAgICAgICAgICBpZiAobmV3UGFyZW50 ICE9IHBhcmVudCAmJiBpczxSZW5kZXJHcmlkPigqbmV3UGFyZW50KSkKICAgICAgICAgICAgICAg ICBkb3duY2FzdDxSZW5kZXJHcmlkPigqbmV3UGFyZW50KS5kaXJ0eUdyaWQoKTsKKyAgICAgICAg ICAgIGVsc2UgaWYgKGF1dG8qIGVuY2xvc2luZ0ZyYWdtZW50ZWRGbG93ID0gbmV3UGFyZW50LT5l bmNsb3NpbmdGcmFnbWVudGVkRmxvdygpKSB7CisgICAgICAgICAgICAgICAgaWYgKGlzPFJlbmRl ck11bHRpQ29sdW1uRmxvdz4oKmVuY2xvc2luZ0ZyYWdtZW50ZWRGbG93KSkgeworICAgICAgICAg ICAgICAgICAgICAvLyBMZXQgdGhlIGZyYWdtZW50ZWQgZmxvdyBrbm93IHRoYXQgaXQgaGFzIGEg bmV3IGluLWZsb3cgZGVzY2VuZGFudC4KKyAgICAgICAgICAgICAgICAgICAgbXVsdGlDb2x1bW5C dWlsZGVyKCkubXVsdGlDb2x1bW5EZXNjZW5kYW50SW5zZXJ0ZWQoZG93bmNhc3Q8UmVuZGVyTXVs dGlDb2x1bW5GbG93PigqZW5jbG9zaW5nRnJhZ21lbnRlZEZsb3cpLCBjaGlsZCk7CisgICAgICAg ICAgICAgICAgfQorICAgICAgICAgICAgfQogICAgICAgICB9CiAgICAgfSBlbHNlIHsKICAgICAg ICAgLy8gQW4gYW5vbnltb3VzIGJsb2NrIG11c3QgYmUgbWFkZSB0byB3cmFwIHRoaXMgaW5saW5l LgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdl TG9nCmluZGV4IDdjMjZiZTg1N2Y1ZDQ1YTE2NjlhNTYyMGY0MjRkOGZlOWZlYTY4MTEuLmQ5Y2I1 MjUwZTNlYzY1YzBlOTQ3ZjBlNWI0ZjJhNmE0MDZkYzQ0MWIgMTAwNjQ0Ci0tLSBhL0xheW91dFRl c3RzL0NoYW5nZUxvZworKysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxNyBA QAorMjAyMC0wMi0wNSAgSmFjayBMZWUgIDxzaGloY2hpZWhfbGVlQGFwcGxlLmNvbT4KKworICAg ICAgICBOdWxscHRyIGNyYXNoIGluIFJlbmRlclN0eWxlOjppc0ZsaXBwZWRCbG9ja3NXcml0aW5n TW9kZSB3aGVuIGZyYWdtZW50IGZsb3cgZ2FpbnMgYSBuZXcgaW4tZmxvdyBkZXNjZW5kYW50Cisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMDcyOTYKKwor ICAgICAgICBXaGVuIGEgbXVsdGktY29sdW1uIGZyYWdtZW50IGZsb3cgZ2FpbnMgYSBuZXcgaW4t ZmxvdyBkZXNjZW5kYW50LCB3ZSBuZWVkIHRvIGNhbGwKKyAgICAgICAgbXVsdGlDb2x1bW5EZXNj ZW5kYW50SW5zZXJ0ZWQgc28gUmVuZGVyTXVsdGlDb2x1bW5TZXQgd291bGQgYmUgY3JlYXRlZCBm b3IgdGhlIG5ldworICAgICAgICBkZXNjZW5kYW50LgorCisgICAgICAgIFJldmlld2VkIGJ5IE5P Qk9EWSAoT09QUyEpLgorCisgICAgICAgICogZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1u ZXctaW4tZmxvdy1kZXNjZW5kYW50LWNyYXNoLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAg ICogZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50LWNy YXNoLmh0bWw6IEFkZGVkLgorCiAyMDIwLTAyLTA1ICBKYXNvbiBMYXdyZW5jZSAgPGxhd3JlbmNl LmpAYXBwbGUuY29tPgogCiAgICAgICAgIFJlZ3Jlc3Npb246IFsgTWFjIERlYnVnIHdrMiBdIGh0 dHAvdGVzdHMvd2Vic29ja2V0L3Rlc3RzL2h5Ymkvc2VydmVyLWNsb3NlLmh0bWwgaXMgZmxha3kg Y3Jhc2hpbmcuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9mYXN0L211bHRpY29sL2ZyYWdmbG93 LWdhaW5zLW5ldy1pbi1mbG93LWRlc2NlbmRhbnQtY3Jhc2gtZXhwZWN0ZWQudHh0IGIvTGF5b3V0 VGVzdHMvZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50 LWNyYXNoLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi4yMTRlZjA4ZjcyMGExODUzMjU3Y2E2ZGJh NDU1NDRkZWNiNzhiOTkzCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9tdWx0 aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50LWNyYXNoLWV4cGVjdGVk LnR4dApAQCAtMCwwICsxIEBACitUZXN0cyBtdWx0aWNvbCB3aGVuIGEgZnJhZ21lbnQgZmxvdyBn YWlucyBhIG5ldyBpbi1mbG93IGRlc2NlbmRhbnQuIFRoZSB0ZXN0IHBhc3NlcyBpZiBXZWJLaXQg ZG9lc24ndCBjcmFzaCBvciBoaXQgYW4gYXNzZXJ0aW9uLgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVz dHMvZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50LWNy YXNoLmh0bWwgYi9MYXlvdXRUZXN0cy9mYXN0L211bHRpY29sL2ZyYWdmbG93LWdhaW5zLW5ldy1p bi1mbG93LWRlc2NlbmRhbnQtY3Jhc2guaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi4yNmNhZWJkM2VkNjkwMDA1 NjVhNTU4YzlmOTc0NmM3ODUwN2Y1YzMzCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMv ZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50LWNyYXNo Lmh0bWwKQEAgLTAsMCArMSwxMyBAQAorPHN0eWxlPgorI291dGVyIHsKKyAgICAtd2Via2l0LWNv bHVtbnM6IDI7Cit9CisjaW5uZXIgeworICAgIHBvc2l0aW9uOiBhYnNvbHV0ZTsKK30KKzwvc3R5 bGU+PGRpdiBpZD1vdXRlcj48ZGl2IGlkPWlubmVyPjxzcGFuPlRlc3RzIG11bHRpY29sIHdoZW4g YSBmcmFnbWVudCBmbG93IGdhaW5zIGEgbmV3IGluLWZsb3cgZGVzY2VuZGFudC4gVGhlIHRlc3Qg cGFzc2VzIGlmIFdlYktpdCBkb2Vzbid0IGNyYXNoIG9yIGhpdCBhbiBhc3NlcnRpb24uPC9zcGFu PjxpZnJhbWU+PC9pZnJhbWU+PC9kaXY+PC9kaXY+PHNjcmlwdD4KKyAgICBpZiAod2luZG93LnRl c3RSdW5uZXIpCisgICAgICAgIHRlc3RSdW5uZXIuZHVtcEFzVGV4dCgpOworICAgIGRvY3VtZW50 LmJvZHkub2Zmc2V0SGVpZ2h0OworICAgIGlubmVyLnN0eWxlLnBvc2l0aW9uID0gInN0YXRpYyI7 Cis8L3NjcmlwdD4K 391076 2020-02-18 12:29:11 -0800 2020-02-20 07:42:18 -0800 Patch bug-207296-20200218122911.patch text/plain 5515 shihchieh_lee U3VidmVyc2lvbiBSZXZpc2lvbjogMjU2MjE3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNWJhODU1YzBhMDRmZDhk MWM2ZjU4YzNlZDcwZWI3OTQzMWMwYjdlNS4uYzI0MmQ4MDk5NzY4MjNhNWU3YjMxYzMzNTM5OTMx NTM0OTQyZTZhMCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIwIEBACisyMDIwLTAyLTE4ICBKYWNr IExlZSAgPHNoaWhjaGllaF9sZWVAYXBwbGUuY29tPgorCisgICAgICAgIE51bGxwdHIgY3Jhc2gg aW4gUmVuZGVyU3R5bGU6OmlzRmxpcHBlZEJsb2Nrc1dyaXRpbmdNb2RlIHdoZW4gZnJhZ21lbnQg ZmxvdyBnYWlucyBhIG5ldyBpbi1mbG93IGRlc2NlbmRhbnQKKyAgICAgICAgaHR0cHM6Ly9idWdz LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIwNzI5NgorICAgICAgICA8cmRhcjovL3Byb2Js ZW0vNTY5NjcxMTU+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg ICAgICAgV2hlbiBhIG11bHRpLWNvbHVtbiBmcmFnbWVudCBmbG93IGdhaW5zIGEgbmV3IGluLWZs b3cgZGVzY2VuZGFudCwgd2UgbmVlZCB0byBjYWxsCisgICAgICAgIG11bHRpQ29sdW1uRGVzY2Vu ZGFudEluc2VydGVkIHNvIFJlbmRlck11bHRpQ29sdW1uU2V0IHdvdWxkIGJlIGNyZWF0ZWQgZm9y IHRoZSBuZXcKKyAgICAgICAgZGVzY2VuZGFudC4KKworICAgICAgICBUZXN0OiBmYXN0L211bHRp Y29sL2ZyYWdmbG93LWdhaW5zLW5ldy1pbi1mbG93LWRlc2NlbmRhbnQtY3Jhc2guaHRtbAorCisg ICAgICAgICogcmVuZGVyaW5nL3VwZGF0aW5nL1JlbmRlclRyZWVCdWlsZGVyLmNwcDoKKyAgICAg ICAgKFdlYkNvcmU6OlJlbmRlclRyZWVCdWlsZGVyOjpjaGlsZEZsb3dTdGF0ZUNoYW5nZXNBbmRB ZmZlY3RzUGFyZW50QmxvY2spOgorCiAyMDIwLTAyLTEwICBUaW1vdGh5IEhhdGNoZXIgIDx0aW1v dGh5QGFwcGxlLmNvbT4KIAogICAgICAgICBSRUdSRVNTSU9OIChyMjQ2MDU1KTogRGF0YSBkZXRl Y3RlZCBVUkxzIGFyZSBubyBsb25nZXIgYmx1ZQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUv cmVuZGVyaW5nL3VwZGF0aW5nL1JlbmRlclRyZWVCdWlsZGVyLmNwcCBiL1NvdXJjZS9XZWJDb3Jl L3JlbmRlcmluZy91cGRhdGluZy9SZW5kZXJUcmVlQnVpbGRlci5jcHAKaW5kZXggNmZlZDUwYjdi YTUzOTkyMDY5NDEyNmU3OGJhMDRhODViYjM1NGNlZS4uOGE1ZmZiNDYzNmI0YjJmMjA0Njg2OWQy ZGY4NTAyYTcyZGZiYjQxZiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcmVuZGVyaW5nL3Vw ZGF0aW5nL1JlbmRlclRyZWVCdWlsZGVyLmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9yZW5kZXJp bmcvdXBkYXRpbmcvUmVuZGVyVHJlZUJ1aWxkZXIuY3BwCkBAIC02OTQsNiArNjk0LDEyIEBAIHZv aWQgUmVuZGVyVHJlZUJ1aWxkZXI6OmNoaWxkRmxvd1N0YXRlQ2hhbmdlc0FuZEFmZmVjdHNQYXJl bnRCbG9jayhSZW5kZXJFbGVtZW50CiAgICAgICAgICAgICAvLyBXZSBuZWVkIHRvIHJlLXJ1biB0 aGUgZ3JpZCBpdGVtcyBwbGFjZW1lbnQgaWYgaXQgaGFkIGdhaW5lZCBhIG5ldyBpdGVtLgogICAg ICAgICAgICAgaWYgKG5ld1BhcmVudCAhPSBwYXJlbnQgJiYgaXM8UmVuZGVyR3JpZD4oKm5ld1Bh cmVudCkpCiAgICAgICAgICAgICAgICAgZG93bmNhc3Q8UmVuZGVyR3JpZD4oKm5ld1BhcmVudCku ZGlydHlHcmlkKCk7CisgICAgICAgICAgICBlbHNlIGlmIChhdXRvKiBlbmNsb3NpbmdGcmFnbWVu dGVkRmxvdyA9IG5ld1BhcmVudC0+ZW5jbG9zaW5nRnJhZ21lbnRlZEZsb3coKSkgeworICAgICAg ICAgICAgICAgIGlmIChpczxSZW5kZXJNdWx0aUNvbHVtbkZsb3c+KCplbmNsb3NpbmdGcmFnbWVu dGVkRmxvdykpIHsKKyAgICAgICAgICAgICAgICAgICAgLy8gTGV0IHRoZSBmcmFnbWVudGVkIGZs b3cga25vdyB0aGF0IGl0IGhhcyBhIG5ldyBpbi1mbG93IGRlc2NlbmRhbnQuCisgICAgICAgICAg ICAgICAgICAgIG11bHRpQ29sdW1uQnVpbGRlcigpLm11bHRpQ29sdW1uRGVzY2VuZGFudEluc2Vy dGVkKGRvd25jYXN0PFJlbmRlck11bHRpQ29sdW1uRmxvdz4oKmVuY2xvc2luZ0ZyYWdtZW50ZWRG bG93KSwgY2hpbGQpOworICAgICAgICAgICAgICAgIH0KKyAgICAgICAgICAgIH0KICAgICAgICAg fQogICAgIH0gZWxzZSB7CiAgICAgICAgIC8vIEFuIGFub255bW91cyBibG9jayBtdXN0IGJlIG1h ZGUgdG8gd3JhcCB0aGlzIGlubGluZS4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxv ZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwppbmRleCA5ZWY2YWE0OTkxOGZiMzEwMGUwMWVkYmQ5 MjdmZWRhM2RiNjYzODdkLi5kNDM0ZWZhMWI5ZGQ3YjkzMzk5NGM1ZmJkODA4OWYyYzEzYmNjMWU3 IDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hh bmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIwMjAtMDItMTggIEphY2sgTGVlICA8c2hpaGNoaWVo X2xlZUBhcHBsZS5jb20+CisKKyAgICAgICAgTnVsbHB0ciBjcmFzaCBpbiBSZW5kZXJTdHlsZTo6 aXNGbGlwcGVkQmxvY2tzV3JpdGluZ01vZGUgd2hlbiBmcmFnbWVudCBmbG93IGdhaW5zIGEgbmV3 IGluLWZsb3cgZGVzY2VuZGFudAorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93 X2J1Zy5jZ2k/aWQ9MjA3Mjk2CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81Njk2NzExNT4KKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBXaGVuIGEgbXVs dGktY29sdW1uIGZyYWdtZW50IGZsb3cgZ2FpbnMgYSBuZXcgaW4tZmxvdyBkZXNjZW5kYW50LCB3 ZSBuZWVkIHRvIGNhbGwKKyAgICAgICAgbXVsdGlDb2x1bW5EZXNjZW5kYW50SW5zZXJ0ZWQgc28g UmVuZGVyTXVsdGlDb2x1bW5TZXQgd291bGQgYmUgY3JlYXRlZCBmb3IgdGhlIG5ldworICAgICAg ICBkZXNjZW5kYW50LgorCisgICAgICAgICogVGVzdEV4cGVjdGF0aW9uczoKKyAgICAgICAgKiBm YXN0L211bHRpY29sL2ZyYWdmbG93LWdhaW5zLW5ldy1pbi1mbG93LWRlc2NlbmRhbnQtY3Jhc2gt ZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L211bHRpY29sL2ZyYWdmbG93LWdh aW5zLW5ldy1pbi1mbG93LWRlc2NlbmRhbnQtY3Jhc2guaHRtbDogQWRkZWQuCisKIDIwMjAtMDIt MTAgIEphbWVzIEhvd2FyZCAgPGphbWVzaG93YXJkQG1hYy5jb20+CiAKICAgICAgICAgU3RhbmRh cmQgZ2FtZXBhZCBtYXBwaW5nIGZvciBHYW1lQ29udHJvbGxlckdhbWVwYWRzCmRpZmYgLS1naXQg YS9MYXlvdXRUZXN0cy9UZXN0RXhwZWN0YXRpb25zIGIvTGF5b3V0VGVzdHMvVGVzdEV4cGVjdGF0 aW9ucwppbmRleCAwMzU0MWEyNjcxYmRiYzhlYmI2ODMyYTk5YjhjZTljM2FmNmFhYzA1Li4zZDY5 OTBiNzBhNzU3MGM1YTBlZGUyYjdiOTVhMTkzMWIyOGIyZjA0IDEwMDY0NAotLS0gYS9MYXlvdXRU ZXN0cy9UZXN0RXhwZWN0YXRpb25zCisrKyBiL0xheW91dFRlc3RzL1Rlc3RFeHBlY3RhdGlvbnMK QEAgLTI4ODMsNiArMjg4Myw5IEBAIHdlYmtpdC5vcmcvYi8xODcxODMgaHR0cC90ZXN0cy9zZWN1 cml0eS9wYXN0ZWJvYXJkLWZpbGUtdXJsLmh0bWwgWyBTa2lwIF0KIAogWyBEZWJ1ZyBdIGZhc3Qv bXVsdGljb2wvY3Jhc2gtaW4tdmVydGljYWwtd3JpdGluZy1tb2RlLmh0bWwgWyBTa2lwIF0KIAor IyBUaGlzIHRlc3QgY2FzZSB0cmlnZ2VycyB3ZWJraXQub3JnL2IvMjAyODA1IGluIGRlYnVnIGJ1 aWxkLgorWyBEZWJ1ZyBdIGZhc3QvbXVsdGljb2wvZnJhZ2Zsb3ctZ2FpbnMtbmV3LWluLWZsb3ct ZGVzY2VuZGFudC1jcmFzaC5odG1sIFsgQ3Jhc2ggXQorCiB3ZWJraXQub3JnL2IvMTg3MjY5IFsg RGVidWcgXSBpbXBvcnRlZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3RzL0ZpbGVBUEkvcmVhZGluZy1k YXRhLXNlY3Rpb24vZmlsZXJlYWRlcl9hYm9ydC5odG1sIFsgU2tpcCBdCiAKIHdlYmtpdC5vcmcv Yi8xODUzMDggbGVnYWN5LWFuaW1hdGlvbi1lbmdpbmUvYW5pbWF0aW9ucy9jb21iby10cmFuc2Zv cm0tdHJhbnNsYXRlK3NjYWxlLmh0bWwgWyBQYXNzIEZhaWx1cmUgXQpkaWZmIC0tZ2l0IGEvTGF5 b3V0VGVzdHMvZmFzdC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5k YW50LWNyYXNoLWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvZnJhZ2Zs b3ctZ2FpbnMtbmV3LWluLWZsb3ctZGVzY2VuZGFudC1jcmFzaC1leHBlY3RlZC50eHQKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMC4uMjE0ZWYwOGY3MjBhMTg1MzI1N2NhNmRiYTQ1NTQ0ZGVjYjc4Yjk5MwotLS0gL2Rldi9u dWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvZnJhZ2Zsb3ctZ2FpbnMtbmV3LWlu LWZsb3ctZGVzY2VuZGFudC1jcmFzaC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSBAQAorVGVzdHMg bXVsdGljb2wgd2hlbiBhIGZyYWdtZW50IGZsb3cgZ2FpbnMgYSBuZXcgaW4tZmxvdyBkZXNjZW5k YW50LiBUaGUgdGVzdCBwYXNzZXMgaWYgV2ViS2l0IGRvZXNuJ3QgY3Jhc2ggb3IgaGl0IGFuIGFz c2VydGlvbi4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvZnJhZ2Zsb3ct Z2FpbnMtbmV3LWluLWZsb3ctZGVzY2VuZGFudC1jcmFzaC5odG1sIGIvTGF5b3V0VGVzdHMvZmFz dC9tdWx0aWNvbC9mcmFnZmxvdy1nYWlucy1uZXctaW4tZmxvdy1kZXNjZW5kYW50LWNyYXNoLmh0 bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMC4uMjZjYWViZDNlZDY5MDAwNTY1YTU1OGM5Zjk3NDZjNzg1MDdmNWMzMwot LS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvZnJhZ2Zsb3ctZ2Fp bnMtbmV3LWluLWZsb3ctZGVzY2VuZGFudC1jcmFzaC5odG1sCkBAIC0wLDAgKzEsMTMgQEAKKzxz dHlsZT4KKyNvdXRlciB7CisgICAgLXdlYmtpdC1jb2x1bW5zOiAyOworfQorI2lubmVyIHsKKyAg ICBwb3NpdGlvbjogYWJzb2x1dGU7Cit9Cis8L3N0eWxlPjxkaXYgaWQ9b3V0ZXI+PGRpdiBpZD1p bm5lcj48c3Bhbj5UZXN0cyBtdWx0aWNvbCB3aGVuIGEgZnJhZ21lbnQgZmxvdyBnYWlucyBhIG5l dyBpbi1mbG93IGRlc2NlbmRhbnQuIFRoZSB0ZXN0IHBhc3NlcyBpZiBXZWJLaXQgZG9lc24ndCBj cmFzaCBvciBoaXQgYW4gYXNzZXJ0aW9uLjwvc3Bhbj48aWZyYW1lPjwvaWZyYW1lPjwvZGl2Pjwv ZGl2PjxzY3JpcHQ+CisgICAgaWYgKHdpbmRvdy50ZXN0UnVubmVyKQorICAgICAgICB0ZXN0UnVu bmVyLmR1bXBBc1RleHQoKTsKKyAgICBkb2N1bWVudC5ib2R5Lm9mZnNldEhlaWdodDsKKyAgICBp bm5lci5zdHlsZS5wb3NpdGlvbiA9ICJzdGF0aWMiOworPC9zY3JpcHQ+Cg==