220350 2021-01-05 22:32:44 -0800 null ptr deref with large background and -webkit-filter 2021-01-13 19:43:52 -0800 1 1 1 Unclassified WebKit CSS WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 rniwa rbuis bfulgham cgarcia dino ews-feeder gpoo product-security rbuis sabouhallawa simon.fraser svillar thorton webkit-bug-importer youennf oldest_to_newest 1717591 0 417068 rniwa 2021-01-05 22:32:44 -0800 Created attachment 417068 Test ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000754461963 bp 0x7ffeed8d3bb0 sp 0x7ffeed8d39c0 T0) #0 0x754461963 in WebCore::CSSFilterImageValue::image(WebCore::RenderElement&, WebCore::FloatSize const&)+0x413 (WebCore.framework/Versions/A/WebCore:x86_64+0x341b963) #1 0x7544e2c21 in WebCore::CSSImageGeneratorValue::image(WebCore::RenderElement&, WebCore::FloatSize const&)+0x71 (WebCore.framework/Versions/A/WebCore:x86_64+0x349cc21) #2 0x7568d655c in WebCore::StyleGeneratedImage::image(WebCore::RenderElement*, WebCore::FloatSize const&) const+0x2c (WebCore.framework/Versions/A/WebCore:x86_64+0x589055c) #3 0x7564f0956 in WebCore::RenderBoxModelObject::paintFillLayerExtended(WebCore::PaintInfo const&, WebCore::Color const&, WebCore::FillLayer const&, WebCore::LayoutRect const&, WebCore::BackgroundBleedAvoidance, WebCore::InlineFlowBox*, WebCore::LayoutSize const&, WebCore::CompositeOperator, WebCore::RenderElement*, WebCore::BaseBackgroundColorUsage)+0x2896 (WebCore.framework/Versions/A/WebCore:x86_64+0x54aa956) #4 0x75648e6b3 in WebCore::RenderBox::paintFillLayer(WebCore::PaintInfo const&, WebCore::Color const&, WebCore::FillLayer const&, WebCore::LayoutRect const&, WebCore::BackgroundBleedAvoidance, WebCore::CompositeOperator, WebCore::RenderElement*, WebCore::BaseBackgroundColorUsage)+0xf3 (WebCore.framework/Versions/A/WebCore:x86_64+0x54486b3) #5 0x75648afeb in WebCore::RenderBox::paintFillLayers(WebCore::PaintInfo const&, WebCore::Color const&, WebCore::FillLayer const&, WebCore::LayoutRect const&, WebCore::BackgroundBleedAvoidance, WebCore::CompositeOperator, WebCore::RenderElement*)+0x55b (WebCore.framework/Versions/A/WebCore:x86_64+0x5444feb) #6 0x75648a9d1 in WebCore::RenderBox::paintRootBoxFillLayers(WebCore::PaintInfo const&)+0x1e1 (WebCore.framework/Versions/A/WebCore:x86_64+0x54449d1) #7 0x75648bee7 in WebCore::RenderBox::paintBackground(WebCore::PaintInfo const&, WebCore::LayoutRect const&, WebCore::BackgroundBleedAvoidance)+0xd7 (WebCore.framework/Versions/A/WebCore:x86_64+0x5445ee7) #8 0x75648ba8a in WebCore::RenderBox::paintBoxDecorations(WebCore::PaintInfo&, WebCore::LayoutPoint const&)+0x41a (WebCore.framework/Versions/A/WebCore:x86_64+0x5445a8a) #9 0x756428667 in WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&)+0x1a7 (WebCore.framework/Versions/A/WebCore:x86_64+0x53e2667) #10 0x756425dd5 in WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&)+0x255 (WebCore.framework/Versions/A/WebCore:x86_64+0x53dfdd5) #11 0x75660e6d2 in WebCore::RenderLayer::paintBackgroundForFragments(WTF::Vector<WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc> const&, WebCore::GraphicsContext&, WebCore::GraphicsContext&, WebCore::LayoutRect const&, bool, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*)+0x412 (WebCore.framework/Versions/A/WebCore:x86_64+0x55c86d2) #12 0x756607614 in WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0xdd4 (WebCore.framework/Versions/A/WebCore:x86_64+0x55c1614) #13 0x7566066fe in WebCore::RenderLayer::paintLayerContentsAndReflection(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x23e (WebCore.framework/Versions/A/WebCore:x86_64+0x55c06fe) #14 0x756604422 in WebCore::RenderLayer::paintLayerWithEffects(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x452 (WebCore.framework/Versions/A/WebCore:x86_64+0x55be422) #15 0x756602e9f in WebCore::RenderLayer::paintLayer(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x1ff (WebCore.framework/Versions/A/WebCore:x86_64+0x55bce9f) #16 0x75660e98b in WebCore::RenderLayer::paintList(WebCore::RenderLayer::LayerList, WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x13b (WebCore.framework/Versions/A/WebCore:x86_64+0x55c898b) #17 0x7566077d5 in WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0xf95 (WebCore.framework/Versions/A/WebCore:x86_64+0x55c17d5) #18 0x7566066fe in WebCore::RenderLayer::paintLayerContentsAndReflection(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x23e (WebCore.framework/Versions/A/WebCore:x86_64+0x55c06fe) #19 0x756604422 in WebCore::RenderLayer::paintLayerWithEffects(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x452 (WebCore.framework/Versions/A/WebCore:x86_64+0x55be422) #20 0x756602e9f in WebCore::RenderLayer::paintLayer(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>)+0x1ff (WebCore.framework/Versions/A/WebCore:x86_64+0x55bce9f) #21 0x756602a35 in WebCore::RenderLayer::paint(WebCore::GraphicsContext&, WebCore::LayoutRect const&, WebCore::LayoutSize const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>, WebCore::RenderLayer::SecurityOriginPaintPolicy, WebCore::EventRegionContext*)+0x2a5 (WebCore.framework/Versions/A/WebCore:x86_64+0x55bca35) #22 0x7559e55b3 in WebCore::FrameView::paintContents(WebCore::GraphicsContext&, WebCore::IntRect const&, WebCore::Widget::SecurityOriginPaintPolicy, WebCore::EventRegionContext*)+0x573 (WebCore.framework/Versions/A/WebCore:x86_64+0x499f5b3) #23 0x755c8c546 in WebCore::ScrollView::paint(WebCore::GraphicsContext&, WebCore::IntRect const&, WebCore::Widget::SecurityOriginPaintPolicy, WebCore::EventRegionContext*)+0x526 (WebCore.framework/Versions/A/WebCore:x86_64+0x4c46546) #24 0x75637df21 in WebCore::ContentfulPaintChecker::qualifiesForContentfulPaint(WebCore::FrameView&)+0x201 (WebCore.framework/Versions/A/WebCore:x86_64+0x5337f21) #25 0x754818059 in WebCore::Document::enqueuePaintTimingEntryIfNeeded()+0x99 (WebCore.framework/Versions/A/WebCore:x86_64+0x37d2059) #26 0x755a99d88 in WebCore::Page::doAfterUpdateRendering()::$_28::operator()(WebCore::Document&) const+0x8 (WebCore.framework/Versions/A/WebCore:x86_64+0x4a53d88) #27 0x755a99d63 in WTF::Detail::CallableWrapper<WebCore::Page::doAfterUpdateRendering()::$_28, void, WebCore::Document&>::call(WebCore::Document&)+0x13 (WebCore.framework/Versions/A/WebCore:x86_64+0x4a53d63) #28 0x755a61213 in WTF::Function<void (WebCore::Document&)>::operator()(WebCore::Document&) const+0x53 (WebCore.framework/Versions/A/WebCore:x86_64+0x4a1b213) #29 0x755a48f32 in WebCore::Page::forEachDocument(WTF::Function<void (WebCore::Document&)> const&) const+0x212 (WebCore.framework/Versions/A/WebCore:x86_64+0x4a02f32) #30 0x755a5535b in WebCore::Page::doAfterUpdateRendering()+0x1bb (WebCore.framework/Versions/A/WebCore:x86_64+0x4a0f35b) #31 0x755a54b40 in WebCore::Page::updateRendering()+0x7c0 (WebCore.framework/Versions/A/WebCore:x86_64+0x4a0eb40) #32 0x1047f8dd4 in WebKit::WebPage::updateRendering()+0x14 (WebKit.framework/Versions/A/WebKit:x86_64+0x24b6dd4) #33 0x103ff9e61 in WebKit::TiledCoreAnimationDrawingArea::updateRendering(WebKit::TiledCoreAnimationDrawingArea::UpdateRenderingType)+0x151 (WebKit.framework/Versions/A/WebKit:x86_64+0x1cb7e61) #34 0x104003065 in WebKit::TiledCoreAnimationDrawingArea::updateRenderingRunLoopCallback()+0x25 (WebKit.framework/Versions/A/WebKit:x86_64+0x1cc1065) #35 0x104017844 in WebKit::TiledCoreAnimationDrawingArea::TiledCoreAnimationDrawingArea(WebKit::WebPage&, WebKit::WebPageCreationParameters const&)::$_0::operator()() const+0x24 (WebKit.framework/Versions/A/WebKit:x86_64+0x1cd5844) #36 0x10401780c in WTF::Detail::CallableWrapper<WebKit::TiledCoreAnimationDrawingArea::TiledCoreAnimationDrawingArea(WebKit::WebPage&, WebKit::WebPageCreationParameters const&)::$_0, void>::call()+0xc (WebKit.framework/Versions/A/WebKit:x86_64+0x1cd580c) <rdar://problem/72095621> 1718556 1 rbuis 2021-01-09 01:57:32 -0800 This is easy to fix, will make a complete patch later: --- a/Source/WebCore/css/CSSFilterImageValue.cpp +++ b/Source/WebCore/css/CSSFilterImageValue.cpp @@ -131,7 +131,10 @@ RefPtr<Image> CSSFilterImageValue::image(RenderElement& renderer, const FloatSiz return &Image::nullImage(); cssFilter->apply(); - return cssFilter->output()->copyImage(); + if (auto* output = cssFilter->output()) + return output->copyImage(); + + return &Image::nullImage(); } It does not seem like a security problem to me. 1718611 2 417354 rbuis 2021-01-10 12:22:22 -0800 Created attachment 417354 Patch 1718829 3 417354 rniwa 2021-01-11 15:15:49 -0800 Comment on attachment 417354 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=417354&action=review > Source/WebCore/css/CSSFilterImageValue.cpp:137 > + if (auto* output = cssFilter->output()) > + return output->copyImage(); > + > + return &Image::nullImage(); Please flip the condition so that returning nullImage when output is null will be an early exist and the normal flow of control when it's not null continues forward (i.e. output->copyImage() will be the last line of code). 1718911 4 417437 rbuis 2021-01-12 00:24:09 -0800 Created attachment 417437 Patch 1718924 5 ews-feeder 2021-01-12 01:35:03 -0800 Committed r271392: <https://trac.webkit.org/changeset/271392> All reviewed patches have been landed. Closing bug and clearing flags on attachment 417437. 417068 2021-01-05 22:32:44 -0800 2021-01-05 22:32:44 -0800 Test repro_448.html text/html 134 rniwa PHN0eWxlPgogICAgKiB7CiAgICAgICAgYmFja2dyb3VuZC1zaXplOiAxcHggMTY3NzcyMTg7CiAg ICAgICAgYmFja2dyb3VuZC1pbWFnZTogLXdlYmtpdC1maWx0ZXIodXJsKCcnKSwgY29udHJhc3Qo MCkpOwogICAgfQo8L3N0eWxlPgo= 417354 2021-01-10 12:22:22 -0800 2021-01-12 00:24:04 -0800 Patch bug-220350-20210110212220.patch text/plain 3310 rbuis U3VidmVyc2lvbiBSZXZpc2lvbjogMjcxMzUxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOGYyMWM2MzAxMWJkYjNh NmIwNzdhZWU5YWEyMzdiZGRiZDk0OTM4ZS4uYWQzMTUwN2EwMzI5ODk2YzE2MzViODM3MGU0YWRi MGYwNTk2NWZiOCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDIxLTAxLTEwICBSb2Ig QnVpcyAgPHJidWlzQGlnYWxpYS5jb20+CisKKyAgICAgICAgTnVsbCBjaGVjayBDU1NGaWx0ZXI6 Om91dHB1dCgpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD0yMjAzNTAKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAg ICBOdWxsIGNoZWNrIENTU0ZpbHRlcjo6b3V0cHV0KCkgc2luY2UgdGhpcyBpcyBub3QKKyAgICAg ICAgZ3VhcmFudGVlZCB0byBiZSBub24tbnVsbC4KKworICAgICAgICBUZXN0OiBjc3MzL2ZpbHRl cnMvbGFyZ2UtYmFja2dyb3VuZC1zaXplLWNyYXNoLmh0bWwKKworICAgICAgICAqIGNzcy9DU1NG aWx0ZXJJbWFnZVZhbHVlLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkNTU0ZpbHRlckltYWdlVmFs dWU6OmltYWdlKToKKwogMjAyMS0wMS0xMCAgWmFsYW4gQnVqdGFzICA8emFsYW5AYXBwbGUuY29t PgogCiAgICAgICAgIFtMRkNdW0lGQ10gTWFrZSAiaW5saW5lIGxldmVsIGJveCBhZmZlY3RzIGxp bmUgYm94IGdlb21ldHJ5IiBsb2dpYyBtb3JlIGV4cGxpY2l0CmRpZmYgLS1naXQgYS9Tb3VyY2Uv V2ViQ29yZS9jc3MvQ1NTRmlsdGVySW1hZ2VWYWx1ZS5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9jc3Mv Q1NTRmlsdGVySW1hZ2VWYWx1ZS5jcHAKaW5kZXggMmZhNTNhYTM4YzFmY2MxMTczNTZhZjlmMTU1 ZDAxNWQ0NDM3ZjBjZS4uOWE1YzgxN2Q5NzIwYTVkZjE1ZTdhZmJmZDAxNjY1ZTkyODU4Y2ZiMSAx MDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvY3NzL0NTU0ZpbHRlckltYWdlVmFsdWUuY3BwCisr KyBiL1NvdXJjZS9XZWJDb3JlL2Nzcy9DU1NGaWx0ZXJJbWFnZVZhbHVlLmNwcApAQCAtMTMxLDcg KzEzMSwxMCBAQCBSZWZQdHI8SW1hZ2U+IENTU0ZpbHRlckltYWdlVmFsdWU6OmltYWdlKFJlbmRl ckVsZW1lbnQmIHJlbmRlcmVyLCBjb25zdCBGbG9hdFNpegogICAgICAgICByZXR1cm4gJkltYWdl OjpudWxsSW1hZ2UoKTsKICAgICBjc3NGaWx0ZXItPmFwcGx5KCk7CiAKLSAgICByZXR1cm4gY3Nz RmlsdGVyLT5vdXRwdXQoKS0+Y29weUltYWdlKCk7CisgICAgaWYgKGF1dG8qIG91dHB1dCA9IGNz c0ZpbHRlci0+b3V0cHV0KCkpCisgICAgICAgIHJldHVybiBvdXRwdXQtPmNvcHlJbWFnZSgpOwor CisgICAgcmV0dXJuICZJbWFnZTo6bnVsbEltYWdlKCk7CiB9CiAKIHZvaWQgQ1NTRmlsdGVySW1h Z2VWYWx1ZTo6ZmlsdGVySW1hZ2VDaGFuZ2VkKGNvbnN0IEludFJlY3QmKQpkaWZmIC0tZ2l0IGEv TGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4IDcyZDA5 NDdjZDY4ZWRkYzI1NmExZGU3YzE1NWEzYzI4NmU3ZGUwZjQuLjFlY2M5ZTY5YzVmYjczMDhmOWVm MGQyZTEyMDRkMTIyZTY1ZTIxNmEgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5nZUxvZwor KysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxNSBAQAorMjAyMS0wMS0xMCAg Um9iIEJ1aXMgIDxyYnVpc0BpZ2FsaWEuY29tPgorCisgICAgICAgIE51bGwgY2hlY2sgQ1NTRmls dGVyOjpvdXRwdXQoKQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j Z2k/aWQ9MjIwMzUwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg ICAgICAgQWRkIHRlc3QgZm9yIHRoaXMuCisKKyAgICAgICAgKiBjc3MzL2ZpbHRlcnMvbGFyZ2Ut YmFja2dyb3VuZC1zaXplLWNyYXNoLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogY3Nz My9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6ZS1jcmFzaC5odG1sOiBBZGRlZC4KKwogMjAy MS0wMS0xMCAgQW50dGkgS29pdmlzdG8gIDxhbnR0aUBhcHBsZS5jb20+CiAKICAgICAgICAgW0xG Q11bSW50ZWdyYXRpb25dIEZhY3RvciBtYXJrZWQgdGV4dCBzdHlsZSBjb2xsZWN0aW9uIGNvZGUg b3V0IG9mIElubGluZVRleHRCb3gKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2NzczMvZmlsdGVy cy9sYXJnZS1iYWNrZ3JvdW5kLXNpemUtY3Jhc2gtZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMv Y3NzMy9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6ZS1jcmFzaC1leHBlY3RlZC50eHQKbmV3 IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMC4uMjU0YWUwMmI4NDAzZDVhZTQ0MTFkYzEwZjYxNmViNzEwOGM1YTgxYwotLS0gL2Rl di9udWxsCisrKyBiL0xheW91dFRlc3RzL2NzczMvZmlsdGVycy9sYXJnZS1iYWNrZ3JvdW5kLXNp emUtY3Jhc2gtZXhwZWN0ZWQudHh0CkBAIC0wLDAgKzEgQEAKK1BBU1MgaWYgdGVzdCBkb2VzIG5v dCBjcmFzaCBvciBjYXVzZSBhbiBBU1NFUlQgZmFpbHVyZS4KZGlmZiAtLWdpdCBhL0xheW91dFRl c3RzL2NzczMvZmlsdGVycy9sYXJnZS1iYWNrZ3JvdW5kLXNpemUtY3Jhc2guaHRtbCBiL0xheW91 dFRlc3RzL2NzczMvZmlsdGVycy9sYXJnZS1iYWNrZ3JvdW5kLXNpemUtY3Jhc2guaHRtbApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwLi5jZjAxY2U0YzMyYzI2M2JhNzRjNGYyOGFjZGY4ZWRmN2ZiNWZjMGNmCi0tLSAvZGV2 L251bGwKKysrIGIvTGF5b3V0VGVzdHMvY3NzMy9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6 ZS1jcmFzaC5odG1sCkBAIC0wLDAgKzEsMTIgQEAKKzwhLS0gVGVzdCBwYXNzZXMgaWYgZG9lc24n dCBjcmFzaC4gLS0+Cis8c3R5bGU+CisqIHsKKyAgICBiYWNrZ3JvdW5kLXNpemU6IDFweCAxNjc3 NzIxODsKKyAgICBiYWNrZ3JvdW5kLWltYWdlOiAtd2Via2l0LWZpbHRlcih1cmwoJycpLCBjb250 cmFzdCgwKSk7Cit9Cis8L3N0eWxlPgorUEFTUyBpZiB0ZXN0IGRvZXMgbm90IGNyYXNoIG9yIGNh dXNlIGFuIEFTU0VSVCBmYWlsdXJlLgorPHNjcmlwdD4KKyAgICBpZiAod2luZG93LnRlc3RSdW5u ZXIpCisgICAgICAgIHdpbmRvdy50ZXN0UnVubmVyLmR1bXBBc1RleHQoZmFsc2UpOworPC9zY3Jp cHQ+Cg== 417437 2021-01-12 00:24:09 -0800 2021-01-12 01:35:04 -0800 Patch bug-220350-20210112092408.patch text/plain 3267 rbuis U3VidmVyc2lvbiBSZXZpc2lvbjogMjcxMzkwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOGI1MGJhNjA1YTY0OTUw N2JlYWIyOTA0ZDM5ZjAyMzk2OWVhMzkyZS4uMWVmMmFlYTNlMjJiZGY5YmQ1YTc2NTFjMWNlZDk2 ZDFjNzk2NjM0NiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDIxLTAxLTEyICBSb2Ig QnVpcyAgPHJidWlzQGlnYWxpYS5jb20+CisKKyAgICAgICAgTnVsbCBjaGVjayBDU1NGaWx0ZXI6 Om91dHB1dCgpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD0yMjAzNTAKKworICAgICAgICBSZXZpZXdlZCBieSBZb3Vlbm4gRmFibGV0LgorCisgICAgICAg IE51bGwgY2hlY2sgQ1NTRmlsdGVyOjpvdXRwdXQoKSBzaW5jZSB0aGlzIGlzIG5vdAorICAgICAg ICBndWFyYW50ZWVkIHRvIGJlIG5vbi1udWxsLgorCisgICAgICAgIFRlc3Q6IGNzczMvZmlsdGVy cy9sYXJnZS1iYWNrZ3JvdW5kLXNpemUtY3Jhc2guaHRtbAorCisgICAgICAgICogY3NzL0NTU0Zp bHRlckltYWdlVmFsdWUuY3BwOgorICAgICAgICAoV2ViQ29yZTo6Q1NTRmlsdGVySW1hZ2VWYWx1 ZTo6aW1hZ2UpOgorCiAyMDIxLTAxLTExICBTaW1vbiBGcmFzZXIgIDxzaW1vbi5mcmFzZXJAYXBw bGUuY29tPgogCiAgICAgICAgIFNhZmFyaSAxNCBvbiAyeCBkaXNwbGF5IHJlbmRlcnMgTllTIERN ViBwYWdlIGFzIGJsdXJyeQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvY3NzL0NTU0ZpbHRl ckltYWdlVmFsdWUuY3BwIGIvU291cmNlL1dlYkNvcmUvY3NzL0NTU0ZpbHRlckltYWdlVmFsdWUu Y3BwCmluZGV4IDJmYTUzYWEzOGMxZmNjMTE3MzU2YWY5ZjE1NWQwMTVkNDQzN2YwY2UuLmU2NTJk MjUyZmI4OTI2OWViMTc3NTg2MDk4MzY2Yzk5ZDVkNzZmZGIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9X ZWJDb3JlL2Nzcy9DU1NGaWx0ZXJJbWFnZVZhbHVlLmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9j c3MvQ1NTRmlsdGVySW1hZ2VWYWx1ZS5jcHAKQEAgLTEzMSw3ICsxMzEsMTEgQEAgUmVmUHRyPElt YWdlPiBDU1NGaWx0ZXJJbWFnZVZhbHVlOjppbWFnZShSZW5kZXJFbGVtZW50JiByZW5kZXJlciwg Y29uc3QgRmxvYXRTaXoKICAgICAgICAgcmV0dXJuICZJbWFnZTo6bnVsbEltYWdlKCk7CiAgICAg Y3NzRmlsdGVyLT5hcHBseSgpOwogCi0gICAgcmV0dXJuIGNzc0ZpbHRlci0+b3V0cHV0KCktPmNv cHlJbWFnZSgpOworICAgIGF1dG8qIG91dHB1dCA9IGNzc0ZpbHRlci0+b3V0cHV0KCk7CisgICAg aWYgKCFvdXRwdXQpCisgICAgICAgIHJldHVybiAmSW1hZ2U6Om51bGxJbWFnZSgpOworCisgICAg cmV0dXJuIG91dHB1dC0+Y29weUltYWdlKCk7CiB9CiAKIHZvaWQgQ1NTRmlsdGVySW1hZ2VWYWx1 ZTo6ZmlsdGVySW1hZ2VDaGFuZ2VkKGNvbnN0IEludFJlY3QmKQpkaWZmIC0tZ2l0IGEvTGF5b3V0 VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4IDc2NDYyNzQzYjAx MWM2N2JlMzViN2EzNzdhMWNjZjhhNzU0MmU1N2UuLjI3ZGFiODY3OGIwYTczMGIwMjZhY2UwYWFk NTFhZmExYzg3MDg4Y2EgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5nZUxvZworKysgYi9M YXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxNSBAQAorMjAyMS0wMS0xMiAgUm9iIEJ1 aXMgIDxyYnVpc0BpZ2FsaWEuY29tPgorCisgICAgICAgIE51bGwgY2hlY2sgQ1NTRmlsdGVyOjpv dXRwdXQoKQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MjIwMzUwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgWW91ZW5uIEZhYmxldC4KKworICAgICAgICBB ZGQgdGVzdCBmb3IgdGhpcy4KKworICAgICAgICAqIGNzczMvZmlsdGVycy9sYXJnZS1iYWNrZ3Jv dW5kLXNpemUtY3Jhc2gtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBjc3MzL2ZpbHRl cnMvbGFyZ2UtYmFja2dyb3VuZC1zaXplLWNyYXNoLmh0bWw6IEFkZGVkLgorCiAyMDIxLTAxLTEx ICBGdWppaSBIaXJvbm9yaSAgPEhpcm9ub3JpLkZ1amlpQHNvbnkuY29tPgogCiAgICAgICAgIFtX aW5DYWlyb10gVW5yZXZpZXdlZCB0ZXN0IGdhcmRlbmluZwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVz dHMvY3NzMy9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6ZS1jcmFzaC1leHBlY3RlZC50eHQg Yi9MYXlvdXRUZXN0cy9jc3MzL2ZpbHRlcnMvbGFyZ2UtYmFja2dyb3VuZC1zaXplLWNyYXNoLWV4 cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwLi4yNTRhZTAyYjg0MDNkNWFlNDQxMWRjMTBmNjE2ZWI3MTA4 YzVhODFjCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvY3NzMy9maWx0ZXJzL2xhcmdl LWJhY2tncm91bmQtc2l6ZS1jcmFzaC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSBAQAorUEFTUyBp ZiB0ZXN0IGRvZXMgbm90IGNyYXNoIG9yIGNhdXNlIGFuIEFTU0VSVCBmYWlsdXJlLgpkaWZmIC0t Z2l0IGEvTGF5b3V0VGVzdHMvY3NzMy9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6ZS1jcmFz aC5odG1sIGIvTGF5b3V0VGVzdHMvY3NzMy9maWx0ZXJzL2xhcmdlLWJhY2tncm91bmQtc2l6ZS1j cmFzaC5odG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAuLmNmMDFjZTRjMzJjMjYzYmE3NGM0ZjI4YWNkZjhlZGY3ZmI1 ZmMwY2YKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9jc3MzL2ZpbHRlcnMvbGFyZ2Ut YmFja2dyb3VuZC1zaXplLWNyYXNoLmh0bWwKQEAgLTAsMCArMSwxMiBAQAorPCEtLSBUZXN0IHBh c3NlcyBpZiBkb2Vzbid0IGNyYXNoLiAtLT4KKzxzdHlsZT4KKyogeworICAgIGJhY2tncm91bmQt c2l6ZTogMXB4IDE2Nzc3MjE4OworICAgIGJhY2tncm91bmQtaW1hZ2U6IC13ZWJraXQtZmlsdGVy KHVybCgnJyksIGNvbnRyYXN0KDApKTsKK30KKzwvc3R5bGU+CitQQVNTIGlmIHRlc3QgZG9lcyBu b3QgY3Jhc2ggb3IgY2F1c2UgYW4gQVNTRVJUIGZhaWx1cmUuCis8c2NyaXB0PgorICAgIGlmICh3 aW5kb3cudGVzdFJ1bm5lcikKKyAgICAgICAgd2luZG93LnRlc3RSdW5uZXIuZHVtcEFzVGV4dChm YWxzZSk7Cis8L3NjcmlwdD4K