220584 2021-01-13 03:21:45 -0800 createImageBitmap() causes null pointer dereference using Cairo lib 2021-04-22 07:37:56 -0700 1 1 1 Unclassified WebKit DOM WebKit Nightly Build PC Linux RESOLVED FIXED InRadar P2 Normal --- 1 wz906234737 fujii cdumez cgarcia changseok don.olmstead esprehn+autocc ews-watchlist fujii gyuyoung.kim kbr sabouhallawa webkit-bug-importer zyscoder oldest_to_newest 1719240 0 417519 wz906234737 2021-01-13 03:21:45 -0800 Created attachment 417519 the script caused crash 1. Reproduce of crash: (1) open inspector window and run the script below in the console; (2) the script is: // ========================================== (function () { const _1 = 32769; const _0 = new ImageData(1, _1); const _3 = {resizeHeight: 1}; return createImageBitmap(_0, _3); })(); // ========================================== change `_1` less than 32768 will be safe. the critical point `32768` would cause crash on `debug` version, but OK on `release` version. 2. Analysis I found the crash was caused by a null pointer dereference in `Source/WebCore/html/ImageBitmap.cpp:823`. Because the `Cairo` library limit image width and height less than 32768, and will return nullptr if larger than the limit. The limit `cairoMaxImageSize` defined in `Source/WebCore/platform/graphics/ImageBackingStore.h:39` The function `create` defined in `Source/WebCore/platform/graphics/cairo/ImageBufferCairoImageSurfaceBackend.cpp:44` part of the code that returns nullptr ``` // ========== Source/WebCore/platform/graphics/cairo/ImageBufferCairoImageSurfaceBackend.cpp:50 ========== IntSize backendSize = calculateBackendSize(parameters.logicalSize, parameters.resolutionScale); if (backendSize.isEmpty() || backendSize.width() > cairoMaxImageSize || backendSize.height() > cairoMaxImageSize) return nullptr; ``` 1719241 1 wz906234737 2021-01-13 03:25:54 -0800 The code that dereference nullptr ``` // ============== Source/WebCore/html/ImageBitmap.cpp:822 =============== auto tempBitmapData = createImageBuffer(scriptExecutionContext, imageData->size(), bufferRenderingMode); // `tempBitmapData` createImageBuffer(...) fail and return a nullptr ==== tempBitmapData->putImageData(AlphaPremultiplication::Unpremultiplied, *imageData, IntRect(0, 0, imageData->width(), imageData->height()), { }, alphaPremultiplication); // ====================================================================== 1719793 2 417678 fujii 2021-01-14 23:35:56 -0800 Created attachment 417678 WIP patch 1720226 3 417792 fujii 2021-01-17 21:32:17 -0800 Created attachment 417792 Patch 1720380 4 417792 fujii 2021-01-18 12:13:17 -0800 Comment on attachment 417792 Patch Clearing flags on attachment: 417792 Committed r271583: <https://trac.webkit.org/changeset/271583> 1720381 5 fujii 2021-01-18 12:13:21 -0800 All reviewed patches have been landed. Closing bug. 1720382 6 webkit-bug-importer 2021-01-18 12:14:15 -0800 <rdar://problem/73327997> 417519 2021-01-13 03:21:45 -0800 2021-01-13 03:21:45 -0800 the script caused crash file_220584.txt text/plain 156 wz906234737 KGZ1bmN0aW9uICgpIHsNCiAgICBjb25zdCBfMSA9IDMyNzY5Ow0KICAgIGNvbnN0IF8wID0gbmV3 IEltYWdlRGF0YSgxLCBfMSk7DQogICAgY29uc3QgXzMgPSB7cmVzaXplSGVpZ2h0OiAxfTsNCiAg ICByZXR1cm4gY3JlYXRlSW1hZ2VCaXRtYXAoXzAsIF8zKTsNCn0pKCk7 417678 2021-01-14 23:35:56 -0800 2021-01-17 21:32:11 -0800 WIP patch a.diff text/plain 1144 fujii ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2h0bWwvSW1hZ2VCaXRtYXAuY3BwIGIvU291cmNl L1dlYkNvcmUvaHRtbC9JbWFnZUJpdG1hcC5jcHAKaW5kZXggYjQ2NjE2ODA0MzA3Li5mZTc5NDY1 MzY5MTQgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2h0bWwvSW1hZ2VCaXRtYXAuY3BwCisr KyBiL1NvdXJjZS9XZWJDb3JlL2h0bWwvSW1hZ2VCaXRtYXAuY3BwCkBAIC04MjAsNiArODIwLDEw IEBAIHZvaWQgSW1hZ2VCaXRtYXA6OmNyZWF0ZVByb21pc2UoU2NyaXB0RXhlY3V0aW9uQ29udGV4 dCYgc2NyaXB0RXhlY3V0aW9uQ29udGV4dCwKICAgICAvLyA2LjMuIFNldCBpbWFnZUJpdG1hcCdz IGJpdG1hcCBkYXRhIHRvIGltYWdlJ3MgaW1hZ2UgZGF0YSwgY3JvcHBlZCB0byB0aGUKICAgICAv LyAgICAgIHNvdXJjZSByZWN0YW5nbGUgd2l0aCBmb3JtYXR0aW5nLgogICAgIGF1dG8gdGVtcEJp dG1hcERhdGEgPSBjcmVhdGVJbWFnZUJ1ZmZlcihzY3JpcHRFeGVjdXRpb25Db250ZXh0LCBpbWFn ZURhdGEtPnNpemUoKSwgYnVmZmVyUmVuZGVyaW5nTW9kZSk7CisgICAgaWYgKCF0ZW1wQml0bWFw RGF0YSkgeworICAgICAgICByZXNvbHZlV2l0aEJsYW5rSW1hZ2VCdWZmZXIoc2NyaXB0RXhlY3V0 aW9uQ29udGV4dCwgdHJ1ZSwgV1RGTW92ZShwcm9taXNlKSk7CisgICAgICAgIHJldHVybjsKKyAg ICB9CiAgICAgdGVtcEJpdG1hcERhdGEtPnB1dEltYWdlRGF0YShBbHBoYVByZW11bHRpcGxpY2F0 aW9uOjpVbnByZW11bHRpcGxpZWQsICppbWFnZURhdGEsIEludFJlY3QoMCwgMCwgaW1hZ2VEYXRh LT53aWR0aCgpLCBpbWFnZURhdGEtPmhlaWdodCgpKSwgeyB9LCBhbHBoYVByZW11bHRpcGxpY2F0 aW9uKTsKICAgICBGbG9hdFJlY3QgZGVzdFJlY3QoRmxvYXRQb2ludCgpLCBvdXRwdXRTaXplKTsK ICAgICBiaXRtYXBEYXRhLT5jb250ZXh0KCkuZHJhd0ltYWdlQnVmZmVyKCp0ZW1wQml0bWFwRGF0 YSwgZGVzdFJlY3QsIHNvdXJjZVJlY3RhbmdsZS5yZWxlYXNlUmV0dXJuVmFsdWUoKSwgeyBpbnRl cnBvbGF0aW9uUXVhbGl0eUZvclJlc2l6ZVF1YWxpdHkob3B0aW9ucy5yZXNpemVRdWFsaXR5KSwg aW1hZ2VPcmllbnRhdGlvbkZvck9yaWVudGF0aW9uKG9wdGlvbnMuaW1hZ2VPcmllbnRhdGlvbikg fSk7Cg== 417792 2021-01-17 21:32:17 -0800 2021-01-18 12:13:17 -0800 Patch bug-220584-20210118143216.patch text/plain 6450 fujii U3VidmVyc2lvbiBSZXZpc2lvbjogMjcxNTA5CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOTA1MmNmNzNkOGVlZjk0 Y2VjMDhkMzhhNWYwOGJhYjg4OGZlYjdhMC4uNWE5OTZhOTVlNjBhN2M3ZTY2MmMxNmRmZWI0ZmJl MjY5ZTEzZjhkNyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI2IEBACisyMDIxLTAxLTE3ICBGdWpp aSBIaXJvbm9yaSAgPEhpcm9ub3JpLkZ1amlpQHNvbnkuY29tPgorCisgICAgICAgIGNyZWF0ZUlt YWdlQml0bWFwKCkgY2F1c2VzIG51bGwgcG9pbnRlciBkZXJlZmVyZW5jZSB1c2luZyBDYWlybyBs aWIKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMDU4 NAorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIGNyZWF0 ZUltYWdlQml0bWFwKEltYWdlRGF0YSkgY3JlYXRlcyBhbiBpbnRlcm5hbCBJbWFnZUJ1ZmZlciB3 aXRoCisgICAgICAgIHRoZSBzYW1lIHNpemUgb2YgdGhlIGdpdmVuIEltYWdlRGF0YS4gQ2Fpcm8g cG9ydCBoYXMgdGhlCisgICAgICAgIGxpbWl0YXRpb24gdG8gbWF4aW11bSB3aWR0aC9oZWlnaHQg b2YgSW1hZ2VCdWZmZXIgYXMgMzI3NjguIEl0CisgICAgICAgIGZhaWxzIHRvIGNyZWF0ZSB0aGUg aW50ZXJuYWwgSW1hZ2VCdWZmZXIgaWYgdGhlIEltYWdlRGF0YSBzaXplIGlzCisgICAgICAgIGdy ZWF0ZXIgdGhhbiAzMjc2OC4gQWRkZWQgYSBudWxsLWNoZWNraW5nIGZvciB0aGUgY2FzZS4KKwor ICAgICAgICBUZXN0OiBmYXN0L2ltYWdlcy9jcmVhdGVJbWFnZUJpdG1hcC13aXRoLUltYWdlRGF0 YS5odG1sCisKKyAgICAgICAgKiBodG1sL0ltYWdlQml0bWFwLmNwcDoKKyAgICAgICAgKFdlYkNv cmU6OkltYWdlQml0bWFwOjpjcmVhdGVQcm9taXNlKTogQWRkZWQgYSBudWxsLWNoZWNraW5nIGZv cgorICAgICAgICB0ZW1wQml0bWFwRGF0YS4gQ2FsbCByZXNvbHZlV2l0aEJsYW5rSW1hZ2VCdWZm ZXIgaW4gdGhlIGNhc2UuCisgICAgICAgICogcGxhdGZvcm0vZ3JhcGhpY3MvY2Fpcm8vSW1hZ2VC dWZmZXJDYWlyb0ltYWdlU3VyZmFjZUJhY2tlbmQuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SW1h Z2VCdWZmZXJDYWlyb0ltYWdlU3VyZmFjZUJhY2tlbmQ6OmNyZWF0ZSk6IENoZWNrIHRoZQorICAg ICAgICBjYWlyb19zdXJmYWNlX3N0YXR1cyBvZiAnc3VyZmFjZScgdG8gYXZvaWQgdGhlIGFzc2Vy dGlvbiBmYWlsdXJlCisgICAgICAgIGluIEltYWdlQnVmZmVyQ2Fpcm9JbWFnZVN1cmZhY2VCYWNr ZW5kIGN0b3IuCisKIDIwMjEtMDEtMTQgIFNpbW9uIEZyYXNlciAgPHNpbW9uLmZyYXNlckBhcHBs ZS5jb20+CiAKICAgICAgICAgW0FzeW5jIHNjcm9sbGluZ10gU2xvdy1zY3JvbGxpbmcgcmVhc29u cyBzaG91bGQgbm90IHByb3BhZ2F0ZSBhY3Jvc3MgZnJhbWUgYm91bmRhcmllcwpkaWZmIC0tZ2l0 IGEvU291cmNlL1dlYkNvcmUvaHRtbC9JbWFnZUJpdG1hcC5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9o dG1sL0ltYWdlQml0bWFwLmNwcAppbmRleCBiNDY2MTY4MDQzMDdiNDVhZDNjNzc2MTJlMjdhZTQ5 YjRhYzZjMmI2Li5mZTc5NDY1MzY5MTQ1MjhiM2MwYzcyYjQzMDlkN2M5MzEwZGQyMzQ2IDEwMDY0 NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL0ltYWdlQml0bWFwLmNwcAorKysgYi9Tb3VyY2Uv V2ViQ29yZS9odG1sL0ltYWdlQml0bWFwLmNwcApAQCAtODIwLDYgKzgyMCwxMCBAQCB2b2lkIElt YWdlQml0bWFwOjpjcmVhdGVQcm9taXNlKFNjcmlwdEV4ZWN1dGlvbkNvbnRleHQmIHNjcmlwdEV4 ZWN1dGlvbkNvbnRleHQsCiAgICAgLy8gNi4zLiBTZXQgaW1hZ2VCaXRtYXAncyBiaXRtYXAgZGF0 YSB0byBpbWFnZSdzIGltYWdlIGRhdGEsIGNyb3BwZWQgdG8gdGhlCiAgICAgLy8gICAgICBzb3Vy Y2UgcmVjdGFuZ2xlIHdpdGggZm9ybWF0dGluZy4KICAgICBhdXRvIHRlbXBCaXRtYXBEYXRhID0g Y3JlYXRlSW1hZ2VCdWZmZXIoc2NyaXB0RXhlY3V0aW9uQ29udGV4dCwgaW1hZ2VEYXRhLT5zaXpl KCksIGJ1ZmZlclJlbmRlcmluZ01vZGUpOworICAgIGlmICghdGVtcEJpdG1hcERhdGEpIHsKKyAg ICAgICAgcmVzb2x2ZVdpdGhCbGFua0ltYWdlQnVmZmVyKHNjcmlwdEV4ZWN1dGlvbkNvbnRleHQs IHRydWUsIFdURk1vdmUocHJvbWlzZSkpOworICAgICAgICByZXR1cm47CisgICAgfQogICAgIHRl bXBCaXRtYXBEYXRhLT5wdXRJbWFnZURhdGEoQWxwaGFQcmVtdWx0aXBsaWNhdGlvbjo6VW5wcmVt dWx0aXBsaWVkLCAqaW1hZ2VEYXRhLCBJbnRSZWN0KDAsIDAsIGltYWdlRGF0YS0+d2lkdGgoKSwg aW1hZ2VEYXRhLT5oZWlnaHQoKSksIHsgfSwgYWxwaGFQcmVtdWx0aXBsaWNhdGlvbik7CiAgICAg RmxvYXRSZWN0IGRlc3RSZWN0KEZsb2F0UG9pbnQoKSwgb3V0cHV0U2l6ZSk7CiAgICAgYml0bWFw RGF0YS0+Y29udGV4dCgpLmRyYXdJbWFnZUJ1ZmZlcigqdGVtcEJpdG1hcERhdGEsIGRlc3RSZWN0 LCBzb3VyY2VSZWN0YW5nbGUucmVsZWFzZVJldHVyblZhbHVlKCksIHsgaW50ZXJwb2xhdGlvblF1 YWxpdHlGb3JSZXNpemVRdWFsaXR5KG9wdGlvbnMucmVzaXplUXVhbGl0eSksIGltYWdlT3JpZW50 YXRpb25Gb3JPcmllbnRhdGlvbihvcHRpb25zLmltYWdlT3JpZW50YXRpb24pIH0pOwpkaWZmIC0t Z2l0IGEvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3JhcGhpY3MvY2Fpcm8vSW1hZ2VCdWZmZXJD YWlyb0ltYWdlU3VyZmFjZUJhY2tlbmQuY3BwIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3Jh cGhpY3MvY2Fpcm8vSW1hZ2VCdWZmZXJDYWlyb0ltYWdlU3VyZmFjZUJhY2tlbmQuY3BwCmluZGV4 IDNkYTE0NTVlYmEwNmQ2Nzk0ZTMzMjcwMTdkYWFmZDc5YmM1NDcyZGMuLjQ3YTQ1ZGNjMmU4MmRk NmQwY2FjYjUxMjY2MDZhYmY3MTk1YzEwNDEgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3Bs YXRmb3JtL2dyYXBoaWNzL2NhaXJvL0ltYWdlQnVmZmVyQ2Fpcm9JbWFnZVN1cmZhY2VCYWNrZW5k LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy9jYWlyby9JbWFnZUJ1 ZmZlckNhaXJvSW1hZ2VTdXJmYWNlQmFja2VuZC5jcHAKQEAgLTYwLDYgKzYwLDggQEAgc3RkOjp1 bmlxdWVfcHRyPEltYWdlQnVmZmVyQ2Fpcm9JbWFnZVN1cmZhY2VCYWNrZW5kPiBJbWFnZUJ1ZmZl ckNhaXJvSW1hZ2VTdXJmYWMKICAgICBjYWlyb19zdXJmYWNlX3NldF91c2VyX2RhdGEoc3VyZmFj ZS5nZXQoKSwgJnNfc3VyZmFjZURhdGFLZXksIHN1cmZhY2VEYXRhLCBbXSh2b2lkKiBkYXRhKSB7 CiAgICAgICAgIGZhc3RGcmVlKGRhdGEpOwogICAgIH0pOworICAgIGlmIChjYWlyb19zdXJmYWNl X3N0YXR1cyhzdXJmYWNlLmdldCgpKSAhPSBDQUlST19TVEFUVVNfU1VDQ0VTUykKKyAgICAgICAg cmV0dXJuIG51bGxwdHI7CiAKICAgICByZXR1cm4gc3RkOjp1bmlxdWVfcHRyPEltYWdlQnVmZmVy Q2Fpcm9JbWFnZVN1cmZhY2VCYWNrZW5kPihuZXcgSW1hZ2VCdWZmZXJDYWlyb0ltYWdlU3VyZmFj ZUJhY2tlbmQocGFyYW1ldGVycywgV1RGTW92ZShzdXJmYWNlKSkpOwogfQpkaWZmIC0tZ2l0IGEv TGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4IDI5YjVj NDRiMmQ0NDk2NGQ0ODhkNmJkNmQyYmVhNzVlNjc3MGY0YTcuLmU0Yjk1MTEzMzhhZDY1ZWE0YzNh NDAxYjI5NDNjNmE4Y2YwODMyZDcgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5nZUxvZwor KysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxMyBAQAorMjAyMS0wMS0xNyAg RnVqaWkgSGlyb25vcmkgIDxIaXJvbm9yaS5GdWppaUBzb255LmNvbT4KKworICAgICAgICBjcmVh dGVJbWFnZUJpdG1hcCgpIGNhdXNlcyBudWxsIHBvaW50ZXIgZGVyZWZlcmVuY2UgdXNpbmcgQ2Fp cm8gbGliCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0y MjA1ODQKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAq IGZhc3QvaW1hZ2VzL2NyZWF0ZUltYWdlQml0bWFwLXdpdGgtSW1hZ2VEYXRhLWV4cGVjdGVkLnR4 dDogQWRkZWQuCisgICAgICAgICogZmFzdC9pbWFnZXMvY3JlYXRlSW1hZ2VCaXRtYXAtd2l0aC1J bWFnZURhdGEuaHRtbDogQWRkZWQuCisKIDIwMjEtMDEtMTQgIFNpbW9uIEZyYXNlciAgPHNpbW9u LmZyYXNlckBhcHBsZS5jb20+CiAKICAgICAgICAgW0FzeW5jIHNjcm9sbGluZ10gU2xvdy1zY3Jv bGxpbmcgcmVhc29ucyBzaG91bGQgbm90IHByb3BhZ2F0ZSBhY3Jvc3MgZnJhbWUgYm91bmRhcmll cwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvY3JlYXRlSW1hZ2VCaXRtYXAt d2l0aC1JbWFnZURhdGEtZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvY3Jl YXRlSW1hZ2VCaXRtYXAtd2l0aC1JbWFnZURhdGEtZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUg MTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjc3 NjM2ZmM3NGZmYjQ3MzkxZDc2MmIxNmNiMThjNzMxZjBiMmIzM2UKLS0tIC9kZXYvbnVsbAorKysg Yi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9jcmVhdGVJbWFnZUJpdG1hcC13aXRoLUltYWdlRGF0 YS1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwxMyBAQAorVGVzdCB0aGUgbWF4aW11bSBJbWFnZUJp dG1hcCBzaXplcyBvZiBDYWlybyBwb3J0CisKK09uIHN1Y2Nlc3MsIHlvdSB3aWxsIHNlZSBhIHNl cmllcyBvZiAiUEFTUyIgbWVzc2FnZXMsIGZvbGxvd2VkIGJ5ICJURVNUIENPTVBMRVRFIi4KKwor CitQQVNTIGltYWdlQml0bWFwLndpZHRoIGlzIDEKK1BBU1MgaW1hZ2VCaXRtYXAud2lkdGggaXMg MQorUEFTUyBpbWFnZUJpdG1hcC5oZWlnaHQgaXMgMQorUEFTUyBpbWFnZUJpdG1hcC5oZWlnaHQg aXMgMQorUEFTUyBzdWNjZXNzZnVsbHlQYXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisK ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2NyZWF0ZUltYWdlQml0bWFwLXdp dGgtSW1hZ2VEYXRhLmh0bWwgYi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9jcmVhdGVJbWFnZUJp dG1hcC13aXRoLUltYWdlRGF0YS5odG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjhkNDg1ZTNjZmEzNjE0OTIzZTJi Y2I3YjBmMmU0MmI0MzY0YTE1NDQKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9mYXN0 L2ltYWdlcy9jcmVhdGVJbWFnZUJpdG1hcC13aXRoLUltYWdlRGF0YS5odG1sCkBAIC0wLDAgKzEs MjMgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+CisgICAgPGhlYWQ+CisgICAgICAgIDxzY3Jp cHQgc3JjPSIuLi8uLi9yZXNvdXJjZXMvanMtdGVzdC5qcyI+PC9zY3JpcHQ+CisgICAgICAgIDxz Y3JpcHQ+CisgICAgICAgICAgICBkZXNjcmlwdGlvbigiVGVzdCB0aGUgbWF4aW11bSBJbWFnZUJp dG1hcCBzaXplcyBvZiBDYWlybyBwb3J0Iik7CisgICAgICAgICAgICBvbmxvYWQgPSBhc3luYyAo KSA9PiB7CisgICAgICAgICAgICAgICAgdmFyIGRhdGEgPSBuZXcgSW1hZ2VEYXRhKDMyNzY4LCAx KTsKKyAgICAgICAgICAgICAgICBpbWFnZUJpdG1hcCA9IGF3YWl0IGNyZWF0ZUltYWdlQml0bWFw KGRhdGEsIHsgcmVzaXplV2lkdGg6IDEgfSk7CisgICAgICAgICAgICAgICAgc2hvdWxkQmUoImlt YWdlQml0bWFwLndpZHRoIiwgIjEiKTsKKyAgICAgICAgICAgICAgICBkYXRhID0gbmV3IEltYWdl RGF0YSgxLCAzMjc2OSk7CisgICAgICAgICAgICAgICAgaW1hZ2VCaXRtYXAgPSBhd2FpdCBjcmVh dGVJbWFnZUJpdG1hcChkYXRhLCB7IHJlc2l6ZVdpZHRoOiAxIH0pOworICAgICAgICAgICAgICAg IHNob3VsZEJlKCJpbWFnZUJpdG1hcC53aWR0aCIsICIxIik7CisgICAgICAgICAgICAgICAgZGF0 YSA9IG5ldyBJbWFnZURhdGEoMSwgMzI3NjgpOworICAgICAgICAgICAgICAgIGltYWdlQml0bWFw ID0gYXdhaXQgY3JlYXRlSW1hZ2VCaXRtYXAoZGF0YSwgeyByZXNpemVIZWlnaHQ6IDEgfSk7Cisg ICAgICAgICAgICAgICAgc2hvdWxkQmUoImltYWdlQml0bWFwLmhlaWdodCIsICIxIik7CisgICAg ICAgICAgICAgICAgZGF0YSA9IG5ldyBJbWFnZURhdGEoMSwgMzI3NjkpOworICAgICAgICAgICAg ICAgIGltYWdlQml0bWFwID0gYXdhaXQgY3JlYXRlSW1hZ2VCaXRtYXAoZGF0YSwgeyByZXNpemVI ZWlnaHQ6IDEgfSk7CisgICAgICAgICAgICAgICAgc2hvdWxkQmUoImltYWdlQml0bWFwLmhlaWdo dCIsICIxIik7CisgICAgICAgICAgICB9CisgICAgICAgIDwvc2NyaXB0PgorICAgIDwvaGVhZD4K KzwvaHRtbD4K