218601 2020-11-04 23:26:35 -0800 [RELEASE ASSERT][WK2][WebGL2] WebCore::WebGLTransformFeedback::getBoundIndexedTransformFeedbackBuffer triggers std::vector CrashOnOverflow 2020-11-22 00:30:41 -0800 1 1 1 Unclassified WebKit WebGL WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 rniwa webkit-unassigned bfulgham cgarcia dino ews-feeder product-security rbuis svillar webkit-bug-importer oldest_to_newest 1704742 0 rniwa 2020-11-04 23:26:35 -0800 e.g. Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00000006eda964e9 WTF::CrashOnOverflow::crash() + 9 (CheckedArithmetic.h:127) 1 com.apple.WebCore 0x00000006eda964ae WTF::CrashOnOverflow::overflowed() + 14 (CheckedArithmetic.h:120) 2 com.apple.WebCore 0x00000006f191c212 WTF::Vector<WTF::RefPtr<WebCore::WebGLBuffer, WTF::DumbPtrTraits<WebCore::WebGLBuffer>, WTF::DefaultRefDerefTraits<WebCore::WebGLBuffer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::at(unsigned long) + 50 (Vector.h:701) 3 com.apple.WebCore 0x00000006f18f2f29 WTF::Vector<WTF::RefPtr<WebCore::WebGLBuffer, WTF::DumbPtrTraits<WebCore::WebGLBuffer>, WTF::DefaultRefDerefTraits<WebCore::WebGLBuffer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::operator[](unsigned long) + 9 (Vector.h:721) 4 com.apple.WebCore 0x00000006f19ab1a3 WebCore::WebGLTransformFeedback::getBoundIndexedTransformFeedbackBuffer(unsigned int, WebCore::WebGLBuffer**) + 51 (WebGLTransformFeedback.cpp:81) 5 com.apple.WebCore 0x00000006f18f3339 WebCore::WebGL2RenderingContext::getIndexedParameter(unsigned int, unsigned int) + 585 (WebGL2RenderingContext.cpp:2438) 6 com.apple.WebCore 0x00000006ef5d80f6 WebCore::jsWebGL2RenderingContextPrototypeFunctionGetIndexedParameterBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGL2RenderingContext*) + 854 (JSWebGL2RenderingContext.cpp:7880) 7 com.apple.WebCore 0x00000006ef4c3d5c long long WebCore::IDLOperation<WebCore::JSWebGL2RenderingContext>::call<&(WebCore::jsWebGL2RenderingContextPrototypeFunctionGetIndexedParameterBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGL2RenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 252 (JSDOMOperation.h:53) 8 com.apple.WebCore 0x00000006ef4c3c59 WebCore::jsWebGL2RenderingContextPrototypeFunctionGetIndexedParameter(JSC::JSGlobalObject*, JSC::CallFrame*) + 9 (JSWebGL2RenderingContext.cpp:7885) 9 ??? 0x00004c2f12001178 0 + 83765049168248 10 com.apple.JavaScriptCore 0x000000070c47fc59 llint_entry + 114363 (LowLevelInterpreter.asm:1054) 11 com.apple.JavaScriptCore 0x000000070c47fc59 llint_entry + 114363 (LowLevelInterpreter.asm:1054) 12 com.apple.JavaScriptCore 0x000000070c463ba9 vmEntryToJavaScript + 216 (LowLevelInterpreter64.asm:310) 13 com.apple.JavaScriptCore 0x000000070dbcc612 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 258 (JITCodeInlines.h:42) [inlined] 14 com.apple.JavaScriptCore 0x000000070dbcc612 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1554 (Interpreter.cpp:904) 15 com.apple.JavaScriptCore 0x000000070e26d265 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 101 (CallData.cpp:57) 16 com.apple.JavaScriptCore 0x000000070e26d360 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 224 (CallData.cpp:64) <rdar://problem/69646216> 1704743 1 413256 rniwa 2020-11-04 23:28:42 -0800 Created attachment 413256 Reduced test case 1708602 2 414450 rbuis 2020-11-18 07:40:29 -0800 Created attachment 414450 Patch 1708925 3 414450 rniwa 2020-11-18 17:58:31 -0800 Comment on attachment 414450 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=414450&action=review > Source/WebCore/html/canvas/WebGLTransformFeedback.cpp:81 > *outBuffer = m_boundIndexedTransformFeedbackBuffers[index].get(); Is this a release assert crash because of the bounds check? If so, we can add the test? 1709121 4 414584 rbuis 2020-11-19 08:39:26 -0800 Created attachment 414584 Patch 1709123 5 rbuis 2020-11-19 08:42:39 -0800 (In reply to Ryosuke Niwa from comment #3) > Comment on attachment 414450 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=414450&action=review > > > Source/WebCore/html/canvas/WebGLTransformFeedback.cpp:81 > > *outBuffer = m_boundIndexedTransformFeedbackBuffers[index].get(); > > Is this a release assert crash because of the bounds check? > If so, we can add the test? Yes, it is a release assert crash, I now added the test. 1709805 6 rniwa 2020-11-21 18:14:13 -0800 (In reply to Rob Buis from comment #5) > (In reply to Ryosuke Niwa from comment #3) > > Comment on attachment 414450 [details] > > Patch > > > > View in context: > > https://bugs.webkit.org/attachment.cgi?id=414450&action=review > > > > > Source/WebCore/html/canvas/WebGLTransformFeedback.cpp:81 > > > *outBuffer = m_boundIndexedTransformFeedbackBuffers[index].get(); > > > > Is this a release assert crash because of the bounds check? > > If so, we can add the test? > > Yes, it is a release assert crash, I now added the test. Great. Thanks for verifying! 1709827 7 ews-feeder 2020-11-22 00:30:39 -0800 Committed r270160: <https://trac.webkit.org/changeset/270160> All reviewed patches have been landed. Closing bug and clearing flags on attachment 414584. 413256 2020-11-04 23:28:42 -0800 2020-11-04 23:28:42 -0800 Reduced test case bug218601.html text/html 368 rniwa 77u/PCFET0NUWVBFIGh0bWw+CjxoZWFkPgogICAgPG1ldGEgY2hhcnNldD0iVVRGLTgiPgogICAg PHNjcmlwdD4KICAgICAgICBmdW5jdGlvbiB0cmlnZ2VyKCkgewogICAgICAgICAgICB2YXIgY2Fu dmFzID0gZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiY2FudmFzIik7CiAgICAgICAgICAgIHZhciB3 ZWJnbF9jdHggPSBjYW52YXMuZ2V0Q29udGV4dCgid2ViZ2wyIik7CgoJCQl3ZWJnbF9jdHguZ2V0 SW5kZXhlZFBhcmFtZXRlcih3ZWJnbF9jdHguVFJBTlNGT1JNX0ZFRURCQUNLX0JVRkZFUl9CSU5E SU5HLCA0KTsKCiAgICAgICAgfQogICAgPC9zY3JpcHQ+CjwvaGVhZD4KPGJvZHkgb25sb2FkPSJ0 cmlnZ2VyKCkiPgo8L2JvZHk+CjwvaHRtbD4= 414450 2020-11-18 07:40:29 -0800 2020-11-19 08:39:19 -0800 Patch bug-218601-20201118164027.patch text/plain 1672 rbuis U3VidmVyc2lvbiBSZXZpc2lvbjogMjY5OTUwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOTAzZTVmZjAxNTQ4MTcy ZTI4NzUyODI1ZjRlOTU3MTJhNTJmZGI5ZS4uZDA5Yjk5ZGNiMzkzMTA2ZTMyNTlmYTcwZDVkYzg1 NGQ4ODM0NTgwNyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDIwLTExLTE4ICBSb2Ig QnVpcyAgPHJidWlzQGlnYWxpYS5jb20+CisKKyAgICAgICAgRml4IGluZGV4aW5nIGVycm9yCisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMTg2MDEKKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBMaWtlIGluIHNl dEJvdW5kSW5kZXhlZFRyYW5zZm9ybUZlZWRiYWNrQnVmZmVyIEFTU0VSVCwgdGhlIGluZGV4IHNo b3VsZAorICAgICAgICBhbHdheXMgYmUgc21hbGxlciB0aGFuIHNpemUgZm9yIGluZGV4aW5nIHRv IGJlIHNhZmUsIHNvIGJhaWwgaWYgdGhlIGluZGV4CisgICAgICAgIGlzIGdyZWF0ZXIgdGhhbiBv ciBlcXVhbCB0byBzaXplLgorCisgICAgICAgICogaHRtbC9jYW52YXMvV2ViR0xUcmFuc2Zvcm1G ZWVkYmFjay5jcHA6CisgICAgICAgIChXZWJDb3JlOjpXZWJHTFRyYW5zZm9ybUZlZWRiYWNrOjpn ZXRCb3VuZEluZGV4ZWRUcmFuc2Zvcm1GZWVkYmFja0J1ZmZlcik6CisKIDIwMjAtMTEtMTggIENv bW1pdCBRdWV1ZSAgPGNvbW1pdC1xdWV1ZUB3ZWJraXQub3JnPgogCiAgICAgICAgIFVucmV2aWV3 ZWQsIHJldmVydGluZyByMjY5OTQwLgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvaHRtbC9j YW52YXMvV2ViR0xUcmFuc2Zvcm1GZWVkYmFjay5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL2Nh bnZhcy9XZWJHTFRyYW5zZm9ybUZlZWRiYWNrLmNwcAppbmRleCBhNDU0OWJkOTU4OGMzZDM5ZWZl MTNiZTE0OTRlYjI2ZDdiMGU5OGMyLi5iZTRkNjU2ZDYxMGU2Yzg0ZDM3NWQ5YTI5Y2RmZWRjMTgy MjcwMWJlIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL2NhbnZhcy9XZWJHTFRyYW5z Zm9ybUZlZWRiYWNrLmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL2NhbnZhcy9XZWJHTFRy YW5zZm9ybUZlZWRiYWNrLmNwcApAQCAtNzYsNyArNzYsNyBAQCB2b2lkIFdlYkdMVHJhbnNmb3Jt RmVlZGJhY2s6OnNldEJvdW5kSW5kZXhlZFRyYW5zZm9ybUZlZWRiYWNrQnVmZmVyKGNvbnN0IEFi c3RyYQogCiBib29sIFdlYkdMVHJhbnNmb3JtRmVlZGJhY2s6OmdldEJvdW5kSW5kZXhlZFRyYW5z Zm9ybUZlZWRiYWNrQnVmZmVyKEdDR0x1aW50IGluZGV4LCBXZWJHTEJ1ZmZlcioqIG91dEJ1ZmZl cikKIHsKLSAgICBpZiAoaW5kZXggPiBtX2JvdW5kSW5kZXhlZFRyYW5zZm9ybUZlZWRiYWNrQnVm ZmVycy5zaXplKCkpCisgICAgaWYgKGluZGV4ID49IG1fYm91bmRJbmRleGVkVHJhbnNmb3JtRmVl ZGJhY2tCdWZmZXJzLnNpemUoKSkKICAgICAgICAgcmV0dXJuIGZhbHNlOwogICAgICpvdXRCdWZm ZXIgPSBtX2JvdW5kSW5kZXhlZFRyYW5zZm9ybUZlZWRiYWNrQnVmZmVyc1tpbmRleF0uZ2V0KCk7 CiAgICAgcmV0dXJuIHRydWU7Cg== 414584 2020-11-19 08:39:26 -0800 2020-11-22 00:30:40 -0800 Patch bug-218601-20201119173923.patch text/plain 3747 rbuis U3VidmVyc2lvbiBSZXZpc2lvbjogMjY5OTUwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOTAzZTVmZjAxNTQ4MTcy ZTI4NzUyODI1ZjRlOTU3MTJhNTJmZGI5ZS4uZmEzMDA5YzMwZGRkMDZlMGViZTUyNDllODBjZTdl OGZhYmI3NTQzNCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDIwLTExLTE4ICBSb2Ig QnVpcyAgPHJidWlzQGlnYWxpYS5jb20+CisKKyAgICAgICAgRml4IGdldEluZGV4ZWRQYXJhbWV0 ZXIgaW5kZXhpbmcgY3Jhc2gKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTIxODYwMQorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgIExpa2UgaW4gc2V0Qm91bmRJbmRleGVkVHJhbnNmb3JtRmVlZGJhY2tCdWZmZXIg QVNTRVJULCB0aGUgaW5kZXggc2hvdWxkCisgICAgICAgIGFsd2F5cyBiZSBzbWFsbGVyIHRoYW4g c2l6ZSBmb3IgaW5kZXhpbmcgdG8gYmUgc2FmZSwgc28gYmFpbCBpZiB0aGUgaW5kZXgKKyAgICAg ICAgaXMgZ3JlYXRlciB0aGFuIG9yIGVxdWFsIHRvIHNpemUuCisKKyAgICAgICAgKiBodG1sL2Nh bnZhcy9XZWJHTFRyYW5zZm9ybUZlZWRiYWNrLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OldlYkdM VHJhbnNmb3JtRmVlZGJhY2s6OmdldEJvdW5kSW5kZXhlZFRyYW5zZm9ybUZlZWRiYWNrQnVmZmVy KToKKwogMjAyMC0xMS0xOCAgQ29tbWl0IFF1ZXVlICA8Y29tbWl0LXF1ZXVlQHdlYmtpdC5vcmc+ CiAKICAgICAgICAgVW5yZXZpZXdlZCwgcmV2ZXJ0aW5nIHIyNjk5NDAuCmRpZmYgLS1naXQgYS9T b3VyY2UvV2ViQ29yZS9odG1sL2NhbnZhcy9XZWJHTFRyYW5zZm9ybUZlZWRiYWNrLmNwcCBiL1Nv dXJjZS9XZWJDb3JlL2h0bWwvY2FudmFzL1dlYkdMVHJhbnNmb3JtRmVlZGJhY2suY3BwCmluZGV4 IGE0NTQ5YmQ5NTg4YzNkMzllZmUxM2JlMTQ5NGViMjZkN2IwZTk4YzIuLmJlNGQ2NTZkNjEwZTZj ODRkMzc1ZDlhMjljZGZlZGMxODIyNzAxYmUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2h0 bWwvY2FudmFzL1dlYkdMVHJhbnNmb3JtRmVlZGJhY2suY3BwCisrKyBiL1NvdXJjZS9XZWJDb3Jl L2h0bWwvY2FudmFzL1dlYkdMVHJhbnNmb3JtRmVlZGJhY2suY3BwCkBAIC03Niw3ICs3Niw3IEBA IHZvaWQgV2ViR0xUcmFuc2Zvcm1GZWVkYmFjazo6c2V0Qm91bmRJbmRleGVkVHJhbnNmb3JtRmVl ZGJhY2tCdWZmZXIoY29uc3QgQWJzdHJhCiAKIGJvb2wgV2ViR0xUcmFuc2Zvcm1GZWVkYmFjazo6 Z2V0Qm91bmRJbmRleGVkVHJhbnNmb3JtRmVlZGJhY2tCdWZmZXIoR0NHTHVpbnQgaW5kZXgsIFdl YkdMQnVmZmVyKiogb3V0QnVmZmVyKQogewotICAgIGlmIChpbmRleCA+IG1fYm91bmRJbmRleGVk VHJhbnNmb3JtRmVlZGJhY2tCdWZmZXJzLnNpemUoKSkKKyAgICBpZiAoaW5kZXggPj0gbV9ib3Vu ZEluZGV4ZWRUcmFuc2Zvcm1GZWVkYmFja0J1ZmZlcnMuc2l6ZSgpKQogICAgICAgICByZXR1cm4g ZmFsc2U7CiAgICAgKm91dEJ1ZmZlciA9IG1fYm91bmRJbmRleGVkVHJhbnNmb3JtRmVlZGJhY2tC dWZmZXJzW2luZGV4XS5nZXQoKTsKICAgICByZXR1cm4gdHJ1ZTsKZGlmZiAtLWdpdCBhL0xheW91 dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwppbmRleCBiNjU3ZDc2ZGM4 ZTU2YTg2ZDE1OWMxYTFhODVkMWNkZDNlYTVmZjQyLi41ZjE2YWNmOGIwYzljYzY5NGE2ODhlYTBl NDA4ZWJhZDViYmEyYjIyIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKKysrIGIv TGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMjAtMTEtMTkgIFJvYiBC dWlzICA8cmJ1aXNAaWdhbGlhLmNvbT4KKworICAgICAgICBGaXggZ2V0SW5kZXhlZFBhcmFtZXRl ciBpbmRleGluZyBjcmFzaAorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1 Zy5jZ2k/aWQ9MjE4NjAxCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgQWRkIHRlc3RjYXNlLgorCisgICAgICAgICogZmFzdC9jYW52YXMvd2ViZ2wvZ2V0 SW5kZXhlZFBhcmFtZXRlci1jcmFzaC1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZh c3QvY2FudmFzL3dlYmdsL2dldEluZGV4ZWRQYXJhbWV0ZXItY3Jhc2guaHRtbDogQWRkZWQuCisK IDIwMjAtMTEtMTggIENvbW1pdCBRdWV1ZSAgPGNvbW1pdC1xdWV1ZUB3ZWJraXQub3JnPgogCiAg ICAgICAgIFVucmV2aWV3ZWQsIHJldmVydGluZyByMjY5OTQwLgpkaWZmIC0tZ2l0IGEvTGF5b3V0 VGVzdHMvZmFzdC9jYW52YXMvd2ViZ2wvZ2V0SW5kZXhlZFBhcmFtZXRlci1jcmFzaC1leHBlY3Rl ZC50eHQgYi9MYXlvdXRUZXN0cy9mYXN0L2NhbnZhcy93ZWJnbC9nZXRJbmRleGVkUGFyYW1ldGVy LWNyYXNoLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5hNDcxMzAzMGY1NzYwYjgyZjMxZmRkYjcx ZDRkZWZkMDNkMTU4YWIxCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9jYW52 YXMvd2ViZ2wvZ2V0SW5kZXhlZFBhcmFtZXRlci1jcmFzaC1leHBlY3RlZC50eHQKQEAgLTAsMCAr MSw2IEBACitDT05TT0xFIE1FU1NBR0U6IFdlYkdMOiBJTlZBTElEX1ZBTFVFOiBnZXRJbmRleGVk UGFyYW1ldGVyOiBpbmRleCBvdXQgb2YgcmFuZ2UKK1BBU1MgV2ViR0wgY2FsbCBkaWQgbm90IGNy YXNoLgorUEFTUyBzdWNjZXNzZnVsbHlQYXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisK ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2Zhc3QvY2FudmFzL3dlYmdsL2dldEluZGV4ZWRQYXJh bWV0ZXItY3Jhc2guaHRtbCBiL0xheW91dFRlc3RzL2Zhc3QvY2FudmFzL3dlYmdsL2dldEluZGV4 ZWRQYXJhbWV0ZXItY3Jhc2guaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5iOWM0Mjg1MjQ3YjM1NDYxNzk5NzBk ZmRlYzU1M2ExMjM3NTAwZDliCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9j YW52YXMvd2ViZ2wvZ2V0SW5kZXhlZFBhcmFtZXRlci1jcmFzaC5odG1sCkBAIC0wLDAgKzEsMTkg QEAKKzwhRE9DVFlQRSBodG1sPgorPGhlYWQ+Cis8bWV0YSBjaGFyc2V0PSJVVEYtOCI+Cis8c2Ny aXB0IHNyYz0iLi4vLi4vLi4vcmVzb3VyY2VzL2pzLXRlc3QuanMiPjwvc2NyaXB0PgorPHNjcmlw dCBzcmM9InJlc291cmNlcy93ZWJnbC10ZXN0LXV0aWxzLmpzIj48L3NjcmlwdD4KKzxzY3JpcHQ+ CitmdW5jdGlvbiBydW5UZXN0KCkgeworICAgIHZhciBjYW52YXMgPSBkb2N1bWVudC5jcmVhdGVF bGVtZW50KCJjYW52YXMiKTsKKyAgICB2YXIgd2ViZ2xfY3R4ID0gY2FudmFzLmdldENvbnRleHQo IndlYmdsMiIpOworCisgICAgd2ViZ2xfY3R4LmdldEluZGV4ZWRQYXJhbWV0ZXIod2ViZ2xfY3R4 LlRSQU5TRk9STV9GRUVEQkFDS19CVUZGRVJfQklORElORywgNCk7CisKKyAgICB0ZXN0UGFzc2Vk KCJXZWJHTCBjYWxsIGRpZCBub3QgY3Jhc2guIik7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxi b2R5IG9ubG9hZD0icnVuVGVzdCgpIj4KKzwvYm9keT4KKzwvaHRtbD4K