220358 2021-01-06 04:50:33 -0800 [macOS] Reset user directory suffix before getting sandbox directory 2021-02-22 09:32:50 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=222233 InRadar P2 Normal --- 220487 1 pvollan pvollan ap bfulgham commit-queue ddkilzer webkit-bug-importer oldest_to_newest 1717620 0 pvollan 2021-01-06 04:50:33 -0800 Reset user directory suffix before getting sandbox data vault directory. We do not want to include the user directory suffix, since the compiled sandbox should be shared by all WebKit processes of the same type. Also, creating the data vault directory can fail under some circumstances if the user directory suffix is not empty. 1717621 1 pvollan 2021-01-06 04:51:00 -0800 <rdar://problem/57616019> 1717622 2 417079 pvollan 2021-01-06 05:00:35 -0800 Created attachment 417079 Patch 1717680 3 417079 ap 2021-01-06 09:36:45 -0800 Comment on attachment 417079 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=417079&action=review > Source/WebKit/ChangeLog:11 > + Reset user directory suffix before getting sandbox data vault directory. We do not want to include the user directory suffix, > + since the compiled sandbox should be shared by all WebKit processes of the same type. Also, creating the data vault directory > + can fail under some circumstances if the user directory suffix is not empty. I do not understand what "all WebKit processes of the same type" means. Surely WebKit processes for different applications have different sandbox profiles? Also, I do not see how this can help <rdar://problem/57616019>, which is about trying to use an incorrect cache directory path, with a '/' instead of a '+'. How do we end up trying to use the slash? 1717709 4 pvollan 2021-01-06 11:16:28 -0800 (In reply to Alexey Proskuryakov from comment #3) > Comment on attachment 417079 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=417079&action=review > > > Source/WebKit/ChangeLog:11 > > + Reset user directory suffix before getting sandbox data vault directory. We do not want to include the user directory suffix, > > + since the compiled sandbox should be shared by all WebKit processes of the same type. Also, creating the data vault directory > > + can fail under some circumstances if the user directory suffix is not empty. > > I do not understand what "all WebKit processes of the same type" means. > Surely WebKit processes for different applications have different sandbox > profiles? > The different WebKit process types I am thinking of is GPU, WebContent, and Networking. I believe each WebKit process type can share the same cached sandbox profile, which this patch ensures by having each type store their profile at the same location. This should be a performance optimization. > Also, I do not see how this can help <rdar://problem/57616019>, which is > about trying to use an incorrect cache directory path, with a '/' instead of > a '+'. How do we end up trying to use the slash? I believe we end up trying to use the slash, because the slash is present in the user directory suffix. This patch fixes this and the crash by resetting the suffix, making sure confstr returns the expected result. Thanks for reviewing! 1717816 5 ap 2021-01-06 17:37:40 -0800 > I believe each WebKit process type can share the same cached sandbox profile, which this patch ensures by having each type store their profile at the same location. This cannot work today because they all have different variables applied when compiling. Are you talking about a future goal? > I believe we end up trying to use the slash, because the slash is present in the user directory suffix. This patch fixes this and the crash by resetting the suffix, making sure confstr returns the expected result. Where does the unusual suffix come from? The crash happens in Networking process, so I don't understand what could possibly set it. Also, the suffix for networking process always has a '+' in it, which I don't see in the crash log. This is very mysterious. 1717891 6 pvollan 2021-01-07 00:19:47 -0800 (In reply to Alexey Proskuryakov from comment #5) > > I believe each WebKit process type can share the same cached sandbox profile, which this patch ensures by having each type store their profile at the same location. > > This cannot work today because they all have different variables applied > when compiling. Are you talking about a future goal? > That is a good point. Can the sandbox parameters be different for different apps hosting WebKit, though? Is there any way the embedding application can have any influence on the sandbox parameters? If not, I think we should be able to share the cached sandboxes between various embedding apps. > > I believe we end up trying to use the slash, because the slash is present in the user directory suffix. This patch fixes this and the crash by resetting the suffix, making sure confstr returns the expected result. > > Where does the unusual suffix come from? The crash happens in Networking > process, so I don't understand what could possibly set it. Also, the suffix > for networking process always has a '+' in it, which I don't see in the > crash log. This is very mysterious. Yes, this is very strange. I am currently looking into why we see the unusual user directory suffix. Thanks for reviewing! 1717978 7 ap 2021-01-07 09:29:42 -0800 > Can the sandbox parameters be different for different > apps hosting WebKit, though? They are expected to be different, e.g. each one has its own DARWIN_USER_CACHE_DIR; ENABLE_SANDBOX_MESSAGE_FILTER can be on or off. > Is there any way the embedding application can > have any influence on the sandbox parameters? The bundle ID of the embedding application definitely does. It is OK for it to have other kinds of influence as long as we understand that the input can be malicious, and handle it defensively before enabling the sandbox. 1718015 8 pvollan 2021-01-07 11:29:53 -0800 (In reply to Alexey Proskuryakov from comment #7) > > Can the sandbox parameters be different for different > > apps hosting WebKit, though? > > They are expected to be different, e.g. each one has its own > DARWIN_USER_CACHE_DIR; ENABLE_SANDBOX_MESSAGE_FILTER can be on or off. > > > Is there any way the embedding application can > > have any influence on the sandbox parameters? > > The bundle ID of the embedding application definitely does. It is OK for it > to have other kinds of influence as long as we understand that the input can > be malicious, and handle it defensively before enabling the sandbox. On second thought, I think the current patch is correct, since it does not cause WebKit processes to share profiles. It only makes them end up in the same folder for various apps, e.g. in the subfolder com.apple.WebKit.WebContent.Sandbox for the WebContent process. This is already usually the case, but this patch makes this consistent, also when the WebKit process has a user directory suffix set. What do you think? 1718304 9 pvollan 2021-01-08 08:38:09 -0800 I have verified locally that confstr correctly handles multiple updates of the user directory suffix with the function _set_user_dir_suffix(). 1718472 10 417079 bfulgham 2021-01-08 15:41:33 -0800 Comment on attachment 417079 Patch R=me, based on Per Arne's latest testing. 1718475 11 417079 ap 2021-01-08 15:49:03 -0800 Comment on attachment 417079 Patch This wasn't even up for review... 1718476 12 ews-feeder 2021-01-08 15:49:12 -0800 Committed r271331: <https://trac.webkit.org/changeset/271331> All reviewed patches have been landed. Closing bug and clearing flags on attachment 417079. 1718481 13 commit-queue 2021-01-08 16:02:30 -0800 Re-opened since this is blocked by bug 220487 1718566 14 417079 ddkilzer 2021-01-09 06:19:41 -0800 Comment on attachment 417079 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=417079&action=review > Source/WebCore/PAL/pal/spi/cocoa/CoreServicesSPI.h:28 > +extern "C" { FYI, there are BEGIN_EXTERN_C and END_EXTERN_C macros in one of the WTF compiler headers, so I think we should be using those going forward. 1718961 15 pvollan 2021-01-12 04:46:15 -0800 (In reply to David Kilzer (:ddkilzer) from comment #14) > Comment on attachment 417079 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=417079&action=review > > > Source/WebCore/PAL/pal/spi/cocoa/CoreServicesSPI.h:28 > > +extern "C" { > > FYI, there are BEGIN_EXTERN_C and END_EXTERN_C macros in one of the WTF > compiler headers, so I think we should be using those going forward. Will fix! Thanks for reviewing! 1718969 16 417446 pvollan 2021-01-12 05:23:35 -0800 Created attachment 417446 Patch 1718970 17 417447 pvollan 2021-01-12 05:26:29 -0800 Created attachment 417447 Patch 1719080 18 417447 ap 2021-01-12 12:02:36 -0800 Comment on attachment 417447 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=417447&action=review > Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:658 > + _set_user_dir_suffix(FileSystem::fileSystemRepresentation(sandboxParameters.userDirectorySuffix()).data()); Does this put cache and temporary directories under the original suffix? Wouldn't that just crash for the same reason? Also, I'm beginning to think that WebKit auxiliary processes should completely ignore the UI process suffix, not just for data vault. We never put cache and temporary files under UI process control, or otherwise implicitly inherit anything from UI process, and I don't see why we'd do that for processes that set the suffix. Perhaps we should talk to owners of this one to see what they are trying to achieve. 1719084 19 pvollan 2021-01-12 12:20:02 -0800 (In reply to Alexey Proskuryakov from comment #18) > Comment on attachment 417447 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=417447&action=review > > > Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:658 > > + _set_user_dir_suffix(FileSystem::fileSystemRepresentation(sandboxParameters.userDirectorySuffix()).data()); > > Does this put cache and temporary directories under the original suffix? > Wouldn't that just crash for the same reason? > This puts cache and temporary directory directly under the top level cache or temporary directory. For example, for the Networking process running under MiniBrowser, this will set the suffix to 'com.apple.WebKit.Networking+org.webkit.MiniBrowser', and the cache folder will be at '/var/folders/dd/wjn_0cz5593389p25ybpbml00000gn/C/com.apple.WebKit.Networking+org.webkit.MiniBrowser'. This will not crash, since 'com.apple.WebKit.Networking+org.webkit.MiniBrowser' is a valid user directory suffix, which the system handles successfully. This change does actually not change behavior, it just replaces a setenv with _set_user_dir_suffix. > Also, I'm beginning to think that WebKit auxiliary processes should > completely ignore the UI process suffix, not just for data vault. We never > put cache and temporary files under UI process control, or otherwise > implicitly inherit anything from UI process, and I don't see why we'd do > that for processes that set the suffix. Perhaps we should talk to owners of > this one to see what they are trying to achieve. I think this patch makes us completely ignore the user directory suffix we inherit from the UI process, unless confstr is called before we reset the user directory suffix. Currently, there is no confstr call before the reset. This path is always taken on macOS, and makes sure we have an empty user directory suffix until we choose to set it ourselves with the above call to '_set_user_dir_suffix(FileSystem::fileSystemRepresentation(sandboxParameters.userDirectorySuffix()).data())', which will be the user directory suffix for the rest of the process lifetime. We could consider resetting the user directory suffix even earlier to guard against confstr calls being added before we reset the user directory suffix. What do you think? 1719093 20 417447 ap 2021-01-12 12:31:59 -0800 Comment on attachment 417447 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=417447&action=review > Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:705 > + _set_user_dir_suffix(nullptr); I'm still not sure from looking at the code if we can set this twice. This function itself support that, but dirhelper does not, as _dirhelper_init is only executed once, and sets state based forever. 1719135 21 pvollan 2021-01-12 14:24:59 -0800 (In reply to Alexey Proskuryakov from comment #20) > Comment on attachment 417447 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=417447&action=review > > > Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:705 > > + _set_user_dir_suffix(nullptr); > > I'm still not sure from looking at the code if we can set this twice. This > function itself support that, but dirhelper does not, as _dirhelper_init is > only executed once, and sets state based forever. In the debugger, I have verified that results from confstr are correct after multiple updates of the suffix with _set_user_dir_suffix. Thanks for reviewing! 1719138 22 ews-feeder 2021-01-12 14:47:19 -0800 Committed r271417: <https://trac.webkit.org/changeset/271417> All reviewed patches have been landed. Closing bug and clearing flags on attachment 417447. 417079 2021-01-06 05:00:35 -0800 2021-01-12 05:23:33 -0800 Patch bug-220358-20210106140033.patch text/plain 3339 pvollan SW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNl L1dlYkNvcmUvUEFML0NoYW5nZUxvZwkocmV2aXNpb24gMjcxMTk4KQorKysgU291cmNlL1dlYkNv cmUvUEFML0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAx LTA2ICBQZXIgQXJuZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFj T1NdIFJlc2V0IHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWZvcmUgZ2V0dGluZyBzYW5kYm94IGRp cmVjdG9yeQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MjIwMzU4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81NzYxNjAxOT4KKworICAgICAgICBSZXZp ZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBEZWNsYXJlIGZ1bmN0aW9ucyB0byBn ZXQgYW5kIHNldCB1c2VyIGRpcmVjdG9yeSBzdWZmaXguCisKKyAgICAgICAgKiBwYWwvc3BpL2Nv Y29hL0NvcmVTZXJ2aWNlc1NQSS5oOgorCiAyMDIwLTEyLTE1ICBKZXIgTm9ibGUgIDxqZXIubm9i bGVAYXBwbGUuY29tPgogCiAgICAgICAgIFtDb2NvYV0gQWRvcHQgLWV4dGVybmFsQ29udGVudFBy b3RlY3Rpb25TdGF0dXMKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3BpL2NvY29hL0Nv cmVTZXJ2aWNlc1NQSS5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3Bp L2NvY29hL0NvcmVTZXJ2aWNlc1NQSS5oCShyZXZpc2lvbiAyNzExOTQpCisrKyBTb3VyY2UvV2Vi Q29yZS9QQUwvcGFsL3NwaS9jb2NvYS9Db3JlU2VydmljZXNTUEkuaAkod29ya2luZyBjb3B5KQpA QCAtMjUsNiArMjUsMTIgQEAKIAogI3ByYWdtYSBvbmNlCiAKLWV4dGVybiAiQyIgdm9pZCBfQ1ND aGVja0ZpeERpc2FibGUoKTsKLWV4dGVybiAiQyIgQ0ZBcnJheVJlZiBfVVRDb3B5RGVjbGFyZWRU eXBlSWRlbnRpZmllcnModm9pZCk7CitleHRlcm4gIkMiIHsKIAordm9pZCBfQ1NDaGVja0ZpeERp c2FibGUoKTsKK0NGQXJyYXlSZWYgX1VUQ29weURlY2xhcmVkVHlwZUlkZW50aWZpZXJzKHZvaWQp OworCitjaGFyICpfZ2V0X3VzZXJfZGlyX3N1ZmZpeCgpOworYm9vbCBfc2V0X3VzZXJfZGlyX3N1 ZmZpeChjb25zdCBjaGFyICp1c2VyX2Rpcl9zdWZmaXgpOworCit9CkluZGV4OiBTb3VyY2UvV2Vi S2l0L0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L0NoYW5nZUxvZwkocmV2 aXNpb24gMjcxMTk0KQorKysgU291cmNlL1dlYktpdC9DaGFuZ2VMb2cJKHdvcmtpbmcgY29weSkK QEAgLTEsMyArMSwxOCBAQAorMjAyMS0wMS0wNiAgUGVyIEFybmUgVm9sbGFuICA8cHZvbGxhbkBh cHBsZS5jb20+CisKKyAgICAgICAgW21hY09TXSBSZXNldCB1c2VyIGRpcmVjdG9yeSBzdWZmaXgg YmVmb3JlIGdldHRpbmcgc2FuZGJveCBkaXJlY3RvcnkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndl YmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMDM1OAorICAgICAgICA8cmRhcjovL3Byb2JsZW0v NTc2MTYwMTk+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAg ICAgUmVzZXQgdXNlciBkaXJlY3Rvcnkgc3VmZml4IGJlZm9yZSBnZXR0aW5nIHNhbmRib3ggZGF0 YSB2YXVsdCBkaXJlY3RvcnkuIFdlIGRvIG5vdCB3YW50IHRvIGluY2x1ZGUgdGhlIHVzZXIgZGly ZWN0b3J5IHN1ZmZpeCwKKyAgICAgICAgc2luY2UgdGhlIGNvbXBpbGVkIHNhbmRib3ggc2hvdWxk IGJlIHNoYXJlZCBieSBhbGwgV2ViS2l0IHByb2Nlc3NlcyBvZiB0aGUgc2FtZSB0eXBlLiBBbHNv LCBjcmVhdGluZyB0aGUgZGF0YSB2YXVsdCBkaXJlY3RvcnkKKyAgICAgICAgY2FuIGZhaWwgdW5k ZXIgc29tZSBjaXJjdW1zdGFuY2VzIGlmIHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggaXMgbm90 IGVtcHR5LgorCisgICAgICAgICogU2hhcmVkL21hYy9BdXhpbGlhcnlQcm9jZXNzTWFjLm1tOgor ICAgICAgICAoV2ViS2l0OjpBdXhpbGlhcnlQcm9jZXNzOjppbml0aWFsaXplU2FuZGJveCk6CisK IDIwMjEtMDEtMDUgIEVyaWMgQ2FybHNvbiAgPGVyaWMuY2FybHNvbkBhcHBsZS5jb20+CiAKICAg ICAgICAgW0NvY29hXSBXZWJNIGZvcm1hdCByZWFkZXIgZG9lc24ndCB3b3JrIHdpdGggYSB1cmwg aW4gYSA8c291cmNlPiBlbGVtZW50CkluZGV4OiBTb3VyY2UvV2ViS2l0L1NoYXJlZC9tYWMvQXV4 aWxpYXJ5UHJvY2Vzc01hYy5tbQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L1NoYXJlZC9t YWMvQXV4aWxpYXJ5UHJvY2Vzc01hYy5tbQkocmV2aXNpb24gMjcxMTk0KQorKysgU291cmNlL1dl YktpdC9TaGFyZWQvbWFjL0F1eGlsaWFyeVByb2Nlc3NNYWMubW0JKHdvcmtpbmcgY29weSkKQEAg LTY5OSw3ICs2OTksMTMgQEAgdm9pZCBBdXhpbGlhcnlQcm9jZXNzOjppbml0aWFsaXplU2FuZGJv eAogI2lmIFVTRShDQUNIRV9DT01QSUxFRF9TQU5EQk9YKQogICAgIC8vIFRoaXMgbXVzdCBiZSBj YWxsZWQgYmVmb3JlIGluaXRpYWxpemVTYW5kYm94UGFyYW1ldGVycyBzbyB0aGF0IHRoZSBwYXRo IGRvZXMgbm90IGluY2x1ZGUgdGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeC4KICAgICAvLyBXZSBk b24ndCB3YW50IHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggYmVjYXVzZSB3ZSB3YW50IGFsbCBw cm9jZXNzZXMgb2YgdGhlIHNhbWUgdHlwZSB0byB1c2UgdGhlIHNhbWUgY2FjaGUgZGlyZWN0b3J5 LgorICAgIC8vIElmIHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggaXMgbm90IGVtcHR5LCByZXNl dCBpdCBhbmQgcmVzdG9yZSB3aGVuIGZpbmlzaGVkLgorICAgIGNoYXIqIHN1ZmZpeCA9IF9nZXRf dXNlcl9kaXJfc3VmZml4KCk7CisgICAgaWYgKHN1ZmZpeCkKKyAgICAgICAgX3NldF91c2VyX2Rp cl9zdWZmaXgobnVsbHB0cik7CiAgICAgU3RyaW5nIGRhdGFWYXVsdFBhcmVudERpcmVjdG9yeSB7 IHNhbmRib3hEYXRhVmF1bHRQYXJlbnREaXJlY3RvcnkoKSB9OworICAgIGlmIChzdWZmaXgpCisg ICAgICAgIF9zZXRfdXNlcl9kaXJfc3VmZml4KHN1ZmZpeCk7CiAjZWxzZQogICAgIFN0cmluZyBk YXRhVmF1bHRQYXJlbnREaXJlY3Rvcnk7CiAjZW5kaWYK 417446 2021-01-12 05:23:35 -0800 2021-01-12 05:26:27 -0800 Patch bug-220358-20210112052334.patch text/plain 4468 pvollan SW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNl L1dlYkNvcmUvUEFML0NoYW5nZUxvZwkocmV2aXNpb24gMjcxMzU4KQorKysgU291cmNlL1dlYkNv cmUvUEFML0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAx LTEyICBQZXIgQXJuZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFj T1NdIFJlc2V0IHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWZvcmUgZ2V0dGluZyBzYW5kYm94IGRp cmVjdG9yeQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MjIwMzU4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81NzYxNjAxOT4KKworICAgICAgICBSZXZp ZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBEZWNsYXJlIGZ1bmN0aW9ucyB0byBn ZXQgYW5kIHNldCB1c2VyIGRpcmVjdG9yeSBzdWZmaXguCisKKyAgICAgICAgKiBwYWwvc3BpL2Nv Y29hL0NvcmVTZXJ2aWNlc1NQSS5oOgorCiAyMDIxLTAxLTA4ICBDb21taXQgUXVldWUgIDxjb21t aXQtcXVldWVAd2Via2l0Lm9yZz4KIAogICAgICAgICBVbnJldmlld2VkLCByZXZlcnRpbmcgcjI3 MTMzMS4KSW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3BpL2NvY29hL0NvcmVTZXJ2aWNl c1NQSS5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3BpL2NvY29hL0Nv cmVTZXJ2aWNlc1NQSS5oCShyZXZpc2lvbiAyNzEzNTgpCisrKyBTb3VyY2UvV2ViQ29yZS9QQUwv cGFsL3NwaS9jb2NvYS9Db3JlU2VydmljZXNTUEkuaAkod29ya2luZyBjb3B5KQpAQCAtMjUsNiAr MjUsMTIgQEAKIAogI3ByYWdtYSBvbmNlCiAKLWV4dGVybiAiQyIgdm9pZCBfQ1NDaGVja0ZpeERp c2FibGUoKTsKLWV4dGVybiAiQyIgQ0ZBcnJheVJlZiBfVVRDb3B5RGVjbGFyZWRUeXBlSWRlbnRp ZmllcnModm9pZCk7CitXVEZfRVhURVJOX0NfQkVHSU4KIAordm9pZCBfQ1NDaGVja0ZpeERpc2Fi bGUoKTsKK0NGQXJyYXlSZWYgX1VUQ29weURlY2xhcmVkVHlwZUlkZW50aWZpZXJzKHZvaWQpOwor CitjaGFyICpfZ2V0X3VzZXJfZGlyX3N1ZmZpeCgpOworYm9vbCBfc2V0X3VzZXJfZGlyX3N1ZmZp eChjb25zdCBjaGFyICp1c2VyX2Rpcl9zdWZmaXgpOworCitXVEZfRVhURVJOX0NfRU5ECkluZGV4 OiBTb3VyY2UvV2ViS2l0L0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L0No YW5nZUxvZwkocmV2aXNpb24gMjcxMzgyKQorKysgU291cmNlL1dlYktpdC9DaGFuZ2VMb2cJKHdv cmtpbmcgY29weSkKQEAgLTEsMyArMSwyMSBAQAorMjAyMS0wMS0xMiAgUGVyIEFybmUgVm9sbGFu ICA8cHZvbGxhbkBhcHBsZS5jb20+CisKKyAgICAgICAgW21hY09TXSBSZXNldCB1c2VyIGRpcmVj dG9yeSBzdWZmaXggYmVmb3JlIGdldHRpbmcgc2FuZGJveCBkaXJlY3RvcnkKKyAgICAgICAgaHR0 cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMDM1OAorICAgICAgICA8cmRh cjovL3Byb2JsZW0vNTc2MTYwMTk+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgUmVzZXQgdGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWZvcmUgZ2V0 dGluZyB0aGUgc2FuZGJveCBkYXRhIHZhdWx0IGRpcmVjdG9yeSB3aXRoIGNvbmZzdHIuIFdlIGRv IG5vdCB3YW50IHRvIGluY2x1ZGUgdGhlIHVzZXIKKyAgICAgICAgZGlyZWN0b3J5IHN1ZmZpeCwg c2luY2UgdGhlIHNhbmRib3ggZGF0YSB2YXVsdCB3aWxsIHRoZW4gZW5kIHVwIGluc2lkZSB0aGUg aG9zdCBwcm9jZXNzJyBjYWNoZSBmb2xkZXIsIHdoaWNoIGlzIHVuZGVzaXJhYmxlLgorICAgICAg ICBBbHNvLCBjcmVhdGluZyB0aGUgZGF0YSB2YXVsdCBkaXJlY3Rvcnkgd2l0aCBjb25mc3RyIGNh biBmYWlsIHVuZGVyIHNvbWUgY2lyY3Vtc3RhbmNlcyBpZiB0aGUgdXNlciBkaXJlY3Rvcnkgc3Vm Zml4IGlzIG5vdCBlbXB0eS4KKyAgICAgICAgVGhpcyBwYXRjaCBhbHNvIGNoYW5nZXMgaG93IHdl IG5leHQgc2V0IHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggZm9yIHRoZSBwcm9jZXNzLiBJbnN0 ZWFkIG9mIHNldHRpbmcgdGhlIGVudmlyb25tZW50IHZhcmlhYmxlCisgICAgICAgIERJUkhFTFBF Ul9VU0VSX0RJUl9TVUZGSVgsIHdlIGNhbiB1c2UgdGhlIFNQSSBfc2V0X3VzZXJfZGlyX3N1ZmZp eC4gVGhlIGJlaGF2aW9yIHNob3VsZCBiZSBpZGVudGljYWwsIGJ1dCBJIGJlbGlldmUgaXQgaXMg YmV0dGVyCisgICAgICAgIHRvIHVzZSBTUEkgZm9yIHRoaXMuCisKKyAgICAgICAgKiBTaGFyZWQv bWFjL0F1eGlsaWFyeVByb2Nlc3NNYWMubW06CisgICAgICAgIChXZWJLaXQ6OkF1eGlsaWFyeVBy b2Nlc3M6OmluaXRpYWxpemVTYW5kYm94KToKKwogMjAyMS0wMS0xMSAgU2lodWkgTGl1ICA8c2lo dWlfbGl1QGFwcGUuY29tPgogCiAgICAgICAgIE1ha2UgU3BlZWNoUmVjb2duaXRpb24gcGVybWlz c2lvbiBlcnJvciBtb3JlIGluZm9ybWF0aXZlCkluZGV4OiBTb3VyY2UvV2ViS2l0L1NoYXJlZC9t YWMvQXV4aWxpYXJ5UHJvY2Vzc01hYy5tbQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L1No YXJlZC9tYWMvQXV4aWxpYXJ5UHJvY2Vzc01hYy5tbQkocmV2aXNpb24gMjcxMzU4KQorKysgU291 cmNlL1dlYktpdC9TaGFyZWQvbWFjL0F1eGlsaWFyeVByb2Nlc3NNYWMubW0JKHdvcmtpbmcgY29w eSkKQEAgLTY1NSw3ICs2NTUsNyBAQCBzdGF0aWMgdm9pZCBpbml0aWFsaXplU2FuZGJveFBhcmFt ZXRlcnMoCiAgICAgc2FuZGJveFBhcmFtZXRlcnMuYWRkUGFyYW1ldGVyKCJfT1NfVkVSU0lPTiIs IG9zVmVyc2lvbi51dGY4KCkuZGF0YSgpKTsKIAogICAgIC8vIFVzZSBwcml2YXRlIHRlbXBvcmFy eSBhbmQgY2FjaGUgZGlyZWN0b3JpZXMuCi0gICAgc2V0ZW52KCJESVJIRUxQRVJfVVNFUl9ESVJf U1VGRklYIiwgRmlsZVN5c3RlbTo6ZmlsZVN5c3RlbVJlcHJlc2VudGF0aW9uKHNhbmRib3hQYXJh bWV0ZXJzLnVzZXJEaXJlY3RvcnlTdWZmaXgoKSkuZGF0YSgpLCAxKTsKKyAgICBfc2V0X3VzZXJf ZGlyX3N1ZmZpeChGaWxlU3lzdGVtOjpmaWxlU3lzdGVtUmVwcmVzZW50YXRpb24oc2FuZGJveFBh cmFtZXRlcnMudXNlckRpcmVjdG9yeVN1ZmZpeCgpKS5kYXRhKCkpOwogICAgIGNoYXIgdGVtcG9y YXJ5RGlyZWN0b3J5W1BBVEhfTUFYXTsKICAgICBpZiAoIWNvbmZzdHIoX0NTX0RBUldJTl9VU0VS X1RFTVBfRElSLCB0ZW1wb3JhcnlEaXJlY3RvcnksIHNpemVvZih0ZW1wb3JhcnlEaXJlY3Rvcnkp KSkgewogICAgICAgICBXVEZMb2dBbHdheXMoIiVzOiBjb3VsZG4ndCByZXRyaWV2ZSBwcml2YXRl IHRlbXBvcmFyeSBkaXJlY3RvcnkgcGF0aDogJWRcbiIsIGdldHByb2duYW1lKCksIGVycm5vKTsK QEAgLTY5OSw2ICs2OTksMTAgQEAgdm9pZCBBdXhpbGlhcnlQcm9jZXNzOjppbml0aWFsaXplU2Fu ZGJveAogI2lmIFVTRShDQUNIRV9DT01QSUxFRF9TQU5EQk9YKQogICAgIC8vIFRoaXMgbXVzdCBi ZSBjYWxsZWQgYmVmb3JlIGluaXRpYWxpemVTYW5kYm94UGFyYW1ldGVycyBzbyB0aGF0IHRoZSBw YXRoIGRvZXMgbm90IGluY2x1ZGUgdGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeC4KICAgICAvLyBX ZSBkb24ndCB3YW50IHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggYmVjYXVzZSB3ZSB3YW50IGFs bCBwcm9jZXNzZXMgb2YgdGhlIHNhbWUgdHlwZSB0byB1c2UgdGhlIHNhbWUgY2FjaGUgZGlyZWN0 b3J5LgorICAgIC8vIEZpcnN0LCBtYWtlIHN1cmUgdGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBp cyBlbXB0eSBhdCB0aGlzIHBvaW50LiBUaGlzIGlzIG5vcm1hbGx5IGFscmVhZHkgdGhlIGNhc2Us IGJ1dCBzb21lIGhvc3QKKyAgICAvLyBwcm9jZXNzZXMgYXJlIHNldHRpbmcgdGhlIHVzZXIgZGly ZWN0b3J5IHN1ZmZpeCwgd2hpY2ggd2Ugd2lsbCBpbmhlcml0LCBhbmQgb3VyIHNhbmRib3ggZGF0 YXZhdWx0IHdpbGwgdGhlbiBlbmQgdXAKKyAgICAvLyBpbnNpZGUgdGhlIGhvc3QgcHJvY2Vzcycg Y2FjaGUgZm9sZGVyLCB3aGljaCBpcyB1bmRlc2lyYWJsZS4KKyAgICBfc2V0X3VzZXJfZGlyX3N1 ZmZpeChudWxscHRyKTsKICAgICBTdHJpbmcgZGF0YVZhdWx0UGFyZW50RGlyZWN0b3J5IHsgc2Fu ZGJveERhdGFWYXVsdFBhcmVudERpcmVjdG9yeSgpIH07CiAjZWxzZQogICAgIFN0cmluZyBkYXRh VmF1bHRQYXJlbnREaXJlY3Rvcnk7Cg== 417447 2021-01-12 05:26:29 -0800 2021-01-12 14:47:20 -0800 Patch bug-220358-20210112052628.patch text/plain 4512 pvollan SW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNl L1dlYkNvcmUvUEFML0NoYW5nZUxvZwkocmV2aXNpb24gMjcxMzU4KQorKysgU291cmNlL1dlYkNv cmUvUEFML0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTAx LTEyICBQZXIgQXJuZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFj T1NdIFJlc2V0IHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWZvcmUgZ2V0dGluZyBzYW5kYm94IGRp cmVjdG9yeQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MjIwMzU4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81NzYxNjAxOT4KKworICAgICAgICBSZXZp ZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBEZWNsYXJlIGZ1bmN0aW9ucyB0byBn ZXQgYW5kIHNldCB1c2VyIGRpcmVjdG9yeSBzdWZmaXguCisKKyAgICAgICAgKiBwYWwvc3BpL2Nv Y29hL0NvcmVTZXJ2aWNlc1NQSS5oOgorCiAyMDIxLTAxLTA4ICBDb21taXQgUXVldWUgIDxjb21t aXQtcXVldWVAd2Via2l0Lm9yZz4KIAogICAgICAgICBVbnJldmlld2VkLCByZXZlcnRpbmcgcjI3 MTMzMS4KSW5kZXg6IFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3BpL2NvY29hL0NvcmVTZXJ2aWNl c1NQSS5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJDb3JlL1BBTC9wYWwvc3BpL2NvY29hL0Nv cmVTZXJ2aWNlc1NQSS5oCShyZXZpc2lvbiAyNzEzNTgpCisrKyBTb3VyY2UvV2ViQ29yZS9QQUwv cGFsL3NwaS9jb2NvYS9Db3JlU2VydmljZXNTUEkuaAkod29ya2luZyBjb3B5KQpAQCAtMjUsNiAr MjUsMTIgQEAKIAogI3ByYWdtYSBvbmNlCiAKLWV4dGVybiAiQyIgdm9pZCBfQ1NDaGVja0ZpeERp c2FibGUoKTsKLWV4dGVybiAiQyIgQ0ZBcnJheVJlZiBfVVRDb3B5RGVjbGFyZWRUeXBlSWRlbnRp ZmllcnModm9pZCk7CitXVEZfRVhURVJOX0NfQkVHSU4KIAordm9pZCBfQ1NDaGVja0ZpeERpc2Fi bGUoKTsKK0NGQXJyYXlSZWYgX1VUQ29weURlY2xhcmVkVHlwZUlkZW50aWZpZXJzKHZvaWQpOwor CitjaGFyICpfZ2V0X3VzZXJfZGlyX3N1ZmZpeCgpOworYm9vbCBfc2V0X3VzZXJfZGlyX3N1ZmZp eChjb25zdCBjaGFyICp1c2VyX2Rpcl9zdWZmaXgpOworCitXVEZfRVhURVJOX0NfRU5ECkluZGV4 OiBTb3VyY2UvV2ViS2l0L0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L0No YW5nZUxvZwkocmV2aXNpb24gMjcxNDAwKQorKysgU291cmNlL1dlYktpdC9DaGFuZ2VMb2cJKHdv cmtpbmcgY29weSkKQEAgLTEsMyArMSwyMiBAQAorMjAyMS0wMS0xMiAgUGVyIEFybmUgVm9sbGFu ICA8cHZvbGxhbkBhcHBsZS5jb20+CisKKyAgICAgICAgW21hY09TXSBSZXNldCB1c2VyIGRpcmVj dG9yeSBzdWZmaXggYmVmb3JlIGdldHRpbmcgc2FuZGJveCBkaXJlY3RvcnkKKyAgICAgICAgaHR0 cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMDM1OAorICAgICAgICA8cmRh cjovL3Byb2JsZW0vNTc2MTYwMTk+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgUmVzZXQgdGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWZvcmUgZ2V0 dGluZyB0aGUgc2FuZGJveCBkYXRhIHZhdWx0IGRpcmVjdG9yeSB3aXRoIGNvbmZzdHIuIFdlIGRv IG5vdCB3YW50IHRvIGluY2x1ZGUgdGhlIHVzZXIgCisgICAgICAgIGRpcmVjdG9yeSBzdWZmaXgs IHNpbmNlIHRoZSBzYW5kYm94IGRhdGEgdmF1bHQgd2lsbCB0aGVuIGVuZCB1cCBpbnNpZGUgdGhl IGhvc3QgcHJvY2VzcycgY2FjaGUgZm9sZGVyLCB3aGljaCBpcyB1bmRlc2lyYWJsZS4gCisgICAg ICAgIEFsc28sIGNyZWF0aW5nIHRoZSBkYXRhIHZhdWx0IGRpcmVjdG9yeSB3aXRoIGNvbmZzdHIg Y2FuIGZhaWwgdW5kZXIgc29tZSBjaXJjdW1zdGFuY2VzIGlmIHRoZSB1c2VyIGRpcmVjdG9yeSBz dWZmaXggaXMgbm90IGVtcHR5LiAKKyAgICAgICAgVGhpcyBwYXRjaCBhbHNvIGNoYW5nZXMgaG93 IHdlIG5leHQgc2V0IHRoZSB1c2VyIGRpcmVjdG9yeSBzdWZmaXggZm9yIHRoZSBwcm9jZXNzLiBJ bnN0ZWFkIG9mIHNldHRpbmcgdGhlIGVudmlyb25tZW50IHZhcmlhYmxlIAorICAgICAgICBESVJI RUxQRVJfVVNFUl9ESVJfU1VGRklYLCB3ZSBjYW4gdXNlIHRoZSBTUEkgX3NldF91c2VyX2Rpcl9z dWZmaXguIFRoZSBiZWhhdmlvciBzaG91bGQgYmUgaWRlbnRpY2FsLCBidXQgSSBiZWxpZXZlIGl0 IGlzIGJldHRlciAKKyAgICAgICAgdG8gdXNlIFNQSSBmb3IgdGhpcy4KKworICAgICAgICAqIFNo YXJlZC9tYWMvQXV4aWxpYXJ5UHJvY2Vzc01hYy5tbToKKyAgICAgICAgKFdlYktpdDo6aW5pdGlh bGl6ZVNhbmRib3hQYXJhbWV0ZXJzKToKKyAgICAgICAgKFdlYktpdDo6QXV4aWxpYXJ5UHJvY2Vz czo6aW5pdGlhbGl6ZVNhbmRib3gpOgorCiAyMDIxLTAxLTEyICBQaGlsaXBwZSBOb3JtYW5kICA8 cG5vcm1hbmRAaWdhbGlhLmNvbT4KIAogICAgICAgICBbR1N0cmVhbWVyXSBMYXp5IGluaXRpYWxp emF0aW9uIHN1cHBvcnQKSW5kZXg6IFNvdXJjZS9XZWJLaXQvU2hhcmVkL21hYy9BdXhpbGlhcnlQ cm9jZXNzTWFjLm1tCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvU2hhcmVkL21hYy9BdXhp bGlhcnlQcm9jZXNzTWFjLm1tCShyZXZpc2lvbiAyNzEzNTgpCisrKyBTb3VyY2UvV2ViS2l0L1No YXJlZC9tYWMvQXV4aWxpYXJ5UHJvY2Vzc01hYy5tbQkod29ya2luZyBjb3B5KQpAQCAtNjU1LDcg KzY1NSw3IEBAIHN0YXRpYyB2b2lkIGluaXRpYWxpemVTYW5kYm94UGFyYW1ldGVycygKICAgICBz YW5kYm94UGFyYW1ldGVycy5hZGRQYXJhbWV0ZXIoIl9PU19WRVJTSU9OIiwgb3NWZXJzaW9uLnV0 ZjgoKS5kYXRhKCkpOwogCiAgICAgLy8gVXNlIHByaXZhdGUgdGVtcG9yYXJ5IGFuZCBjYWNoZSBk aXJlY3Rvcmllcy4KLSAgICBzZXRlbnYoIkRJUkhFTFBFUl9VU0VSX0RJUl9TVUZGSVgiLCBGaWxl U3lzdGVtOjpmaWxlU3lzdGVtUmVwcmVzZW50YXRpb24oc2FuZGJveFBhcmFtZXRlcnMudXNlckRp cmVjdG9yeVN1ZmZpeCgpKS5kYXRhKCksIDEpOworICAgIF9zZXRfdXNlcl9kaXJfc3VmZml4KEZp bGVTeXN0ZW06OmZpbGVTeXN0ZW1SZXByZXNlbnRhdGlvbihzYW5kYm94UGFyYW1ldGVycy51c2Vy RGlyZWN0b3J5U3VmZml4KCkpLmRhdGEoKSk7CiAgICAgY2hhciB0ZW1wb3JhcnlEaXJlY3Rvcnlb UEFUSF9NQVhdOwogICAgIGlmICghY29uZnN0cihfQ1NfREFSV0lOX1VTRVJfVEVNUF9ESVIsIHRl bXBvcmFyeURpcmVjdG9yeSwgc2l6ZW9mKHRlbXBvcmFyeURpcmVjdG9yeSkpKSB7CiAgICAgICAg IFdURkxvZ0Fsd2F5cygiJXM6IGNvdWxkbid0IHJldHJpZXZlIHByaXZhdGUgdGVtcG9yYXJ5IGRp cmVjdG9yeSBwYXRoOiAlZFxuIiwgZ2V0cHJvZ25hbWUoKSwgZXJybm8pOwpAQCAtNjk5LDYgKzY5 OSwxMCBAQCB2b2lkIEF1eGlsaWFyeVByb2Nlc3M6OmluaXRpYWxpemVTYW5kYm94CiAjaWYgVVNF KENBQ0hFX0NPTVBJTEVEX1NBTkRCT1gpCiAgICAgLy8gVGhpcyBtdXN0IGJlIGNhbGxlZCBiZWZv cmUgaW5pdGlhbGl6ZVNhbmRib3hQYXJhbWV0ZXJzIHNvIHRoYXQgdGhlIHBhdGggZG9lcyBub3Qg aW5jbHVkZSB0aGUgdXNlciBkaXJlY3Rvcnkgc3VmZml4LgogICAgIC8vIFdlIGRvbid0IHdhbnQg dGhlIHVzZXIgZGlyZWN0b3J5IHN1ZmZpeCBiZWNhdXNlIHdlIHdhbnQgYWxsIHByb2Nlc3NlcyBv ZiB0aGUgc2FtZSB0eXBlIHRvIHVzZSB0aGUgc2FtZSBjYWNoZSBkaXJlY3RvcnkuCisgICAgLy8g Rmlyc3QsIG1ha2Ugc3VyZSB0aGUgdXNlciBkaXJlY3Rvcnkgc3VmZml4IGlzIGVtcHR5IGF0IHRo aXMgcG9pbnQuIFRoaXMgaXMgbm9ybWFsbHkgYWxyZWFkeSB0aGUgY2FzZSwgYnV0IHNvbWUgaG9z dAorICAgIC8vIHByb2Nlc3NlcyBhcmUgc2V0dGluZyB0aGUgdXNlciBkaXJlY3Rvcnkgc3VmZml4 LCB3aGljaCB3ZSB3aWxsIGluaGVyaXQsIGFuZCBvdXIgc2FuZGJveCBkYXRhdmF1bHQgd2lsbCB0 aGVuIGVuZCB1cAorICAgIC8vIGluc2lkZSB0aGUgaG9zdCBwcm9jZXNzJyBjYWNoZSBmb2xkZXIs IHdoaWNoIGlzIHVuZGVzaXJhYmxlLgorICAgIF9zZXRfdXNlcl9kaXJfc3VmZml4KG51bGxwdHIp OwogICAgIFN0cmluZyBkYXRhVmF1bHRQYXJlbnREaXJlY3RvcnkgeyBzYW5kYm94RGF0YVZhdWx0 UGFyZW50RGlyZWN0b3J5KCkgfTsKICNlbHNlCiAgICAgU3RyaW5nIGRhdGFWYXVsdFBhcmVudERp cmVjdG9yeTsK