26807 2009-06-29 10:37:08 -0700 Crashes on 3 layout tests when XSS auditor is enabled 2009-07-01 13:40:26 -0700 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) PC Linux RESOLVED FIXED P2 Normal --- 26784 1 gustavo webkit-unassigned abarth dbates jmalonzo oldest_to_newest 128836 0 gustavo 2009-06-29 10:37:08 -0700 The following tests crash when the XSS auditor is enabled: fast/loader/javascript-url-encoding-2.html fast/loader/opaque-base-url.html http/tests/security/postMessage/javascript-page-still-sends-origin.html I'll attach the full backtrace. 128837 1 32014 gustavo 2009-06-29 10:37:48 -0700 Created attachment 32014 back trace 128848 2 abarth 2009-06-29 11:25:39 -0700 From the test names, it looks like we might be handling the encoding of documents created by JavaScript URLs correctly. Dan would you like to look into this, or would you like me to? 128850 3 dbates 2009-06-29 11:39:37 -0700 I'll take a look. (In reply to comment #2) > From the test names, it looks like we might be handling the encoding of > documents created by JavaScript URLs correctly. Dan would you like to look > into this, or would you like me to? > 128906 4 32023 dbates 2009-06-29 15:43:58 -0700 Created attachment 32023 temporary workaround Temporary workaround. I have not been able to reproduce the crash for the test: http/tests/security/postMessage/javascript-page-still-sends-origin.html With respect to the other cases: fast/loader/javascript-url-encoding-2.html and fast/loader/opaque-base-url.html, these eventually cause the FrameLoader::m_decoder to be nullified and never set again before the XSSAuditor is called. So, frame->document()->decoder() is a null pointer and we were dereferencing it; hence the crashes. Both of these tests call FrameLoader::executeIfJavaScriptURL, which calls FrameLoader::write(const String& str). Unlike in FrameLoader::write(const char* str, int len, bool flush), the field FrameLoader::m_decoder is never set in FrameLoader::write(const String& str). Moreover, it looks like FrameLoader::executeIfJavaScriptURL is only method that calls FrameLoader::write(const String& str). I am unclear of the purpose of FrameLoader::write(const String& str). Why doesn't it just call FrameLoader::write(const char* str, int len, bool flush) with the appropriate arguments? I take it that it has something to do with parsing a strict document? I was not sure if I should set m_decoder (in a similar fashion) as in FrameLoader::write(const char* str, int len, bool flush), it seems kinda weird that someone left this out. Any suggestions? 129109 5 32023 abarth 2009-06-30 11:24:04 -0700 Comment on attachment 32023 temporary workaround > + if (!resultDecoded.isEmpty()) { > + if (!allowControlCharacters) > + resultDecoded.removeCharacters(&isControlCharacter); > + result = resultDecoded; > + } This should just be an && instead of a nested if. I think the patch is probably the right approach for the moment. I'm surprised that JavaScript URLs don't inherit the charset of their creator. We should file another bug to investigate this. The easiest test is probably to have a UTF-7 encoded parent create an <iframe> with a javascript URL an some UTF-7 encoded tags and see what happens. 129350 6 32138 dbates 2009-07-01 13:33:55 -0700 Created attachment 32138 Patch Fixes the issue by checking whether frame->document()->decoder() is null. 129351 7 32138 abarth 2009-07-01 13:35:41 -0700 Comment on attachment 32138 Patch Thanks! 129355 8 abarth 2009-07-01 13:40:26 -0700 Sending WebCore/ChangeLog Sending WebCore/page/XSSAuditor.cpp Transmitting file data .. Committed revision 45445. 32014 2009-06-29 10:37:48 -0700 2009-06-29 10:37:48 -0700 back trace gdb.txt text/plain 19021 gustavo U3RhcnRpbmcgcHJvZ3JhbTogL2hvbWUva292L3NyYy9XZWJLaXQvV2ViS2l0QnVpbGQvRGVidWcv UHJvZ3JhbXMvRHVtcFJlbmRlclRyZWUgLQpbVGhyZWFkIGRlYnVnZ2luZyB1c2luZyBsaWJ0aHJl YWRfZGIgZW5hYmxlZF0Kd2FybmluZzogTG93ZXN0IHNlY3Rpb24gaW4gL3Vzci9saWIvbGliaWN1 ZGF0YS5zby40MCBpcyAuaGFzaCBhdCAwMDAwMDBiNApbTmV3IFRocmVhZCAweGI0ZTEwNzUwIChM V1AgMTI1MjcpXQpbTmV3IFRocmVhZCAweGIxYTZlYjkwIChMV1AgMTI2NDYpXQpbTmV3IFRocmVh ZCAweGIxMjZkYjkwIChMV1AgMTI2NDcpXQpbVGhyZWFkIDB4YjEyNmRiOTAgKExXUCAxMjY0Nykg ZXhpdGVkXQoKUHJvZ3JhbSByZWNlaXZlZCBzaWduYWwgU0lHU0VHViwgU2VnbWVudGF0aW9uIGZh dWx0LgpbU3dpdGNoaW5nIHRvIFRocmVhZCAweGI0ZTEwNzUwIChMV1AgMTI1MjcpXQoweGI3N2Ix ZWRmIGluIFdlYkNvcmU6OlRleHRFbmNvZGluZzo6ZGVjb2RlICh0aGlzPTB4YywgCiAgICBkYXRh PTB4OTVhMjkwOCAiYWJvdXQ6YmxhbmsiLCBsZW5ndGg9MTEsIHN0b3BPbkVycm9yPWZhbHNlLCAK ICAgIHNhd0Vycm9yPUAweGJmY2Y3MDhmKSBhdCAuLi8uLi9XZWJDb3JlL3BsYXRmb3JtL3RleHQv VGV4dEVuY29kaW5nLmNwcDo3Mgo3MgkgICAgaWYgKCFtX25hbWUpCiMwICAweGI3N2IxZWRmIGlu IFdlYkNvcmU6OlRleHRFbmNvZGluZzo6ZGVjb2RlICh0aGlzPTB4YywgCiAgICBkYXRhPTB4OTVh MjkwOCAiYWJvdXQ6YmxhbmsiLCBsZW5ndGg9MTEsIHN0b3BPbkVycm9yPWZhbHNlLCAKICAgIHNh d0Vycm9yPUAweGJmY2Y3MDhmKSBhdCAuLi8uLi9XZWJDb3JlL3BsYXRmb3JtL3RleHQvVGV4dEVu Y29kaW5nLmNwcDo3MgpObyBsb2NhbHMuCiMxICAweGI3NGZiMjdlIGluIFdlYkNvcmU6OlRleHRF bmNvZGluZzo6ZGVjb2RlICh0aGlzPTB4YywgCiAgICBzdHI9MHg5NWEyOTA4ICJhYm91dDpibGFu ayIsIGxlbmd0aD0xMSkKICAgIGF0IC4uLy4uL1dlYkNvcmUvcGxhdGZvcm0vdGV4dC9UZXh0RW5j b2RpbmcuaDo3MQoJaWdub3JlZCA9IDkKIzIgIDB4Yjc3MTViMTEgaW4gV2ViQ29yZTo6WFNTQXVk aXRvcjo6ZGVjb2RlVVJMIChzdHI9QDB4YmZjZjcxMjgsIAogICAgZW5jb2Rpbmc9QDB4YywgYWxs b3dDb250cm9sQ2hhcmFjdGVycz1mYWxzZSkKICAgIGF0IC4uLy4uL1dlYkNvcmUvcGFnZS9YU1NB dWRpdG9yLmNwcDoxMTgKCXJlc3VsdCA9IHttX2ltcGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4g PSB7PE5vIGRhdGEgZmllbGRzPn0sIAogICAgbV9wdHIgPSAweGJmY2Y3MTI0fX0KCXJlc3VsdCA9 IHttX2ltcGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIAog ICAgbV9wdHIgPSAweDk1OTQ1Nzh9fQoJdXJsID0ge21faW1wbCA9IHs8V1RGOjpGYXN0QWxsb2NC YXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgCiAgICBtX3B0ciA9IDB4OTI4OWIyOH19CiMzICAw eGI3NzE1Y2I3IGluIFdlYkNvcmU6OlhTU0F1ZGl0b3I6OmZpbmRJblJlcXVlc3QgKHRoaXM9MHg5 NTg3NDk4LCAKICAgIGZyYW1lPTB4OTU5NGE0OCwgc3RyaW5nPUAweDk1OWE3MjApCiAgICBhdCAu Li8uLi9XZWJDb3JlL3BhZ2UvWFNTQXVkaXRvci5jcHA6MTQ4CglkZWNvZGVkUGFnZVVSTCA9IHtt X2ltcGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIAogICAg bV9wdHIgPSAweDk1YTBiNTB9fQoJcGFnZVVSTCA9IHttX2ltcGwgPSB7PFdURjo6RmFzdEFsbG9j QmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIAogICAgbV9wdHIgPSAweDkyODliMjh9fQoJZm9y bURhdGFPYmogPSAoV2ViQ29yZTo6Rm9ybURhdGEgKikgMHgwCglfX1BSRVRUWV9GVU5DVElPTl9f ID0gImJvb2wgV2ViQ29yZTo6WFNTQXVkaXRvcjo6ZmluZEluUmVxdWVzdChXZWJDb3JlOjpGcmFt ZSosIGNvbnN0IFdlYkNvcmU6OlN0cmluZyYpIGNvbnN0IgojNCAgMHhiNzcxNWYyZSBpbiBXZWJD b3JlOjpYU1NBdWRpdG9yOjpmaW5kSW5SZXF1ZXN0ICh0aGlzPTB4OTU4NzQ5OCwgCiAgICBzdHJp bmc9QDB4OTU5YTcyMCkgYXQgLi4vLi4vV2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuY3BwOjEzMQoJ cmVzdWx0ID0gZmFsc2UKCXBhcmVudEZyYW1lID0gKGNsYXNzIFdlYkNvcmU6OkZyYW1lICopIDB4 OTI4MDI2MAojNSAgMHhiNzcxNjBmMCBpbiBXZWJDb3JlOjpYU1NBdWRpdG9yOjpjYW5Mb2FkRXh0 ZXJuYWxTY3JpcHRGcm9tU3JjICgKICAgIHRoaXM9MHg5NTg3NDk4LCB1cmw9QDB4OTU5YTcyMCkg YXQgLi4vLi4vV2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuY3BwOjg4Cgljb25zb2xlTWVzc2FnZSA9 IChXZWJDb3JlOjpTdHJpbmcgJikgQDB4MDogPGVycm9yIHJlYWRpbmcgdmFyaWFibGU+CiM2ICAw eGI3NjA4YmZlIGluIFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OnBhcnNlVGFnICh0aGlzPTB4OTVh ZDkwOCwgCiAgICBzcmM9QDB4OTVhZTI2NCwgc3RhdGU9e3N0YXRpYyBFbnRpdHlTaGlmdCA9IDQs IG1fYml0cyA9IDB9KQogICAgYXQgLi4vLi4vV2ViQ29yZS9odG1sL0hUTUxUb2tlbml6ZXIuY3Bw OjE0NzgKCWEgPSAoY2xhc3MgV2ViQ29yZTo6QXR0cmlidXRlICopIDB4OTU5YTcxMAoJdGFnTmFt ZSA9IHttX3N0cmluZyA9IHsKICAgIG1faW1wbCA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8 Tm8gZGF0YSBmaWVsZHM+fSwgbV9wdHIgPSAweDkyODI5MDB9fX0KCWlzU2VsZkNsb3NpbmdTY3Jp cHQgPSBmYWxzZQoJYmVnaW5UYWcgPSB0cnVlCgluID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0g ezxObyBkYXRhIGZpZWxkcz59LCBtX3B0ciA9IDB4MH0KCWNCdWZmZXJQb3MgPSAwCglsYXN0SXNT bGFzaCA9IGZhbHNlCglfX1BSRVRUWV9GVU5DVElPTl9fID0gIldlYkNvcmU6OkhUTUxUb2tlbml6 ZXI6OlN0YXRlIFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OnBhcnNlVGFnKFdlYkNvcmU6OlNlZ21l bnRlZFN0cmluZyYsIFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OlN0YXRlKSIKIzcgIDB4Yjc2MDlh OTUgaW4gV2ViQ29yZTo6SFRNTFRva2VuaXplcjo6d3JpdGUgKHRoaXM9MHg5NWFkOTA4LCAKICAg IHN0cj1AMHhiZmNmNzNjYywgYXBwZW5kRGF0YT10cnVlKQogICAgYXQgLi4vLi4vV2ViQ29yZS9o dG1sL0hUTUxUb2tlbml6ZXIuY3BwOjE3MzEKCWNjID0gMTE1Cgl3YXNTa2lwTEYgPSBmYWxzZQoJ c291cmNlID0ge21fcHVzaGVkQ2hhcjEgPSAwLCBtX3B1c2hlZENoYXIyID0gMCwgbV9jdXJyZW50 U3RyaW5nID0gewogICAgbV9sZW5ndGggPSAzMywgbV9jdXJyZW50ID0gMHg5NWExNGUwLCBtX3N0 cmluZyA9IHsKICAgICAgbV9pbXBsID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0gezxObyBkYXRh IGZpZWxkcz59LCAKICAgICAgICBtX3B0ciA9IDB4OTU5ZTk1MH19LCBtX2RvTm90RXhjbHVkZUxp bmVOdW1iZXJzID0gdHJ1ZX0sIAogIG1fY3VycmVudENoYXIgPSAweDk1YTE0ZTAsIAogIG1fc3Vi c3RyaW5ncyA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgbV9z dGFydCA9IDAsIAogICAgbV9lbmQgPSAwLCAKICAgIG1fYnVmZmVyID0gezxXVEY6OlZlY3RvckJ1 ZmZlckJhc2U8V2ViQ29yZTo6U2VnbWVudGVkU3Vic3RyaW5nPj4gPSB7PFdURk5vbmNvcHlhYmxl OjpOb25jb3B5YWJsZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIG1fYnVmZmVyID0gMHg5NWEyMzEw LCAKICAgICAgICBtX2NhcGFjaXR5ID0gMH0sIDxObyBkYXRhIGZpZWxkcz59LCBtX2l0ZXJhdG9y cyA9IDB4MH0sIAogIG1fY29tcG9zaXRlID0gZmFsc2V9Cgl3YXNJbldyaXRlID0gZmFsc2UKCXBy b2Nlc3NlZENvdW50ID0gMgoJc3RhcnRUaW1lID0gMTI0NjI5NjY5MC40OTAyNTMKCWZyYW1lID0g KGNsYXNzIFdlYkNvcmU6OkZyYW1lICopIDB4OTU5NGE0OAoJc3RhdGUgPSB7c3RhdGljIEVudGl0 eVNoaWZ0ID0gNCwgbV9iaXRzID0gMX0KIzggIDB4Yjc2ODk5OWQgaW4gV2ViQ29yZTo6RnJhbWVM b2FkZXI6OndyaXRlICh0aGlzPTB4OTU5NGE3NCwgc3RyPUAweGJmY2Y3NDNjKQogICAgYXQgLi4v Li4vV2ViQ29yZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwOjEwNDgKCXRva2VuaXplciA9IChXZWJD b3JlOjpUb2tlbml6ZXIgKikgMHg5NWFkOTA4CiM5ICAweGI3NjhiMTM0IGluIFdlYkNvcmU6OkZy YW1lTG9hZGVyOjpleGVjdXRlSWZKYXZhU2NyaXB0VVJMICgKICAgIHRoaXM9MHg5NTk0YTc0LCB1 cmw9QDB4YmZjZjc0YzgsIHVzZXJHZXN0dXJlPWZhbHNlLCByZXBsYWNlRG9jdW1lbnQ9dHJ1ZSkK ICAgIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcDo3NjAKCXNjcmlwdCA9 IHttX2ltcGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIAog ICAgbV9wdHIgPSAweDk1OWFiNTB9fQoJcmVzdWx0ID0ge192cHRyLlNjcmlwdFZhbHVlID0gMHhi N2Y4MGFmMCwgbV92YWx1ZSA9IHttX3ZhbHVlID0gewogICAgICBtX3B0ciA9IDB4YjFiMjlhODB9 fX0KCXNjcmlwdFJlc3VsdCA9IHttX2ltcGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5v IGRhdGEgZmllbGRzPn0sIAogICAgbV9wdHIgPSAweDk1OWU5NTB9fQoJY3VycmVudFNlY3VyaXR5 T3JpZ2luID0gKGNsYXNzIFdlYkNvcmU6OlNlY3VyaXR5T3JpZ2luICopIDB4OTUwMTY5OAojMTAg MHhiNzY5MjEzZSBpbiBXZWJDb3JlOjpGcmFtZUxvYWRlcjo6cmVxdWVzdEZyYW1lICh0aGlzPTB4 OTI4MDI4YywgCiAgICBvd25lckVsZW1lbnQ9MHg5NTk0NTc4LCB1cmxTdHJpbmc9QDB4OTU5NDVi OCwgZnJhbWVOYW1lPUAweDk1OTQ1YmMpCiAgICBhdCAuLi8uLi9XZWJDb3JlL2xvYWRlci9GcmFt ZUxvYWRlci5jcHA6NDM1CglzY3JpcHRVUkwgPSB7bV9zdHJpbmcgPSB7CiAgICBtX2ltcGwgPSB7 PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIG1fcHRyID0gMHg5NTk0 OGQ4fX0sIAogIG1faXNWYWxpZCA9IHRydWUsIG1fcHJvdG9jb2xJbkhUVFBGYW1pbHkgPSBmYWxz ZSwgbV9zY2hlbWVFbmQgPSAxMCwgCiAgbV91c2VyU3RhcnQgPSAxMSwgbV91c2VyRW5kID0gMTEs IG1fcGFzc3dvcmRFbmQgPSAxMSwgbV9ob3N0RW5kID0gMTEsIAogIG1fcG9ydEVuZCA9IDExLCBt X3BhdGhBZnRlckxhc3RTbGFzaCA9IDU4LCBtX3BhdGhFbmQgPSA2OCwgbV9xdWVyeUVuZCA9IDY4 LCAKICBtX2ZyYWdtZW50RW5kID0gNjh9Cgl1cmwgPSB7bV9zdHJpbmcgPSB7CiAgICBtX2ltcGwg PSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIG1fcHRyID0gMHg5 Mjg5YjI4fX0sIAogIG1faXNWYWxpZCA9IHRydWUsIG1fcHJvdG9jb2xJbkhUVFBGYW1pbHkgPSBm YWxzZSwgbV9zY2hlbWVFbmQgPSA1LCAKICBtX3VzZXJTdGFydCA9IDYsIG1fdXNlckVuZCA9IDYs IG1fcGFzc3dvcmRFbmQgPSA2LCBtX2hvc3RFbmQgPSA2LCAKICBtX3BvcnRFbmQgPSA2LCBtX3Bh dGhBZnRlckxhc3RTbGFzaCA9IDYsIG1fcGF0aEVuZCA9IDExLCBtX3F1ZXJ5RW5kID0gMTEsIAog IG1fZnJhZ21lbnRFbmQgPSAxMX0KCWZyYW1lID0gKGNsYXNzIFdlYkNvcmU6OkZyYW1lICopIDB4 OTU5NGE0OAojMTEgMHhiNzVjYTJkNiBpbiBXZWJDb3JlOjpIVE1MRnJhbWVFbGVtZW50QmFzZTo6 b3BlblVSTCAodGhpcz0weDk1OTQ1NzgpCiAgICBhdCAuLi8uLi9XZWJDb3JlL2h0bWwvSFRNTEZy YW1lRWxlbWVudEJhc2UuY3BwOjEwNgoJcGFyZW50RnJhbWUgPSAoY2xhc3MgV2ViQ29yZTo6RnJh bWUgKikgMHg5MjgwMjYwCglfX1BSRVRUWV9GVU5DVElPTl9fID0gInZvaWQgV2ViQ29yZTo6SFRN TEZyYW1lRWxlbWVudEJhc2U6Om9wZW5VUkwoKSIKIzEyIDB4Yjc1Y2E5NDEgaW4gV2ViQ29yZTo6 SFRNTEZyYW1lRWxlbWVudEJhc2U6OnNldE5hbWVBbmRPcGVuVVJMICgKICAgIHRoaXM9MHg5NTk0 NTc4KSBhdCAuLi8uLi9XZWJDb3JlL2h0bWwvSFRNTEZyYW1lRWxlbWVudEJhc2UuY3BwOjE2MgpO byBsb2NhbHMuCiMxMyAweGI3NWNhOTZiIGluIFdlYkNvcmU6OkhUTUxGcmFtZUVsZW1lbnRCYXNl OjpzZXROYW1lQW5kT3BlblVSTENhbGxiYWNrICgKICAgIG49MHg5NTk0NTc4KSBhdCAuLi8uLi9X ZWJDb3JlL2h0bWwvSFRNTEZyYW1lRWxlbWVudEJhc2UuY3BwOjE2NwpObyBsb2NhbHMuCiMxNCAw eGI3NDVhNmYzIGluIFdlYkNvcmU6OkNvbnRhaW5lck5vZGU6OmRpc3BhdGNoUG9zdEF0dGFjaENh bGxiYWNrcyAoKQogICAgYXQgLi4vLi4vV2ViQ29yZS9kb20vQ29udGFpbmVyTm9kZS5jcHA6NTcy CglwYWlyID0gKAogICAgY2xhc3Mgc3RkOjpwYWlyPHZvaWQgKCopKFdlYkNvcmU6Ok5vZGUqKSwg V1RGOjpSZWZQdHI8V2ViQ29yZTo6Tm9kZT4gPgogICAgICYpIEAweDk1OTQ1ZDg6IHsKICBmaXJz dCA9IDB4Yjc1Y2E5NDggPFdlYkNvcmU6OkhUTUxGcmFtZUVsZW1lbnRCYXNlOjpzZXROYW1lQW5k T3BlblVSTENhbGxiYWNrKFdlYkNvcmU6Ok5vZGUqKT4sIHNlY29uZCA9IHs8V1RGOjpGYXN0QWxs b2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgCiAgICBtX3B0ciA9IDB4OTU5NDU3OH19Cglj YWxsYmFjayA9ICgKICAgIE5vZGVDYWxsYmFjaykgMHhiNzVjYTk0OCA8V2ViQ29yZTo6SFRNTEZy YW1lRWxlbWVudEJhc2U6OnNldE5hbWVBbmRPcGVuVVJMQ2FsbGJhY2soV2ViQ29yZTo6Tm9kZSop PgoJbm9kZSA9IChjbGFzcyBXZWJDb3JlOjpOb2RlICopIDB4OTU5NDU3OAoJaSA9IDAKIzE1IDB4 Yjc0NWE3ZjIgaW4gV2ViQ29yZTo6Q29udGFpbmVyTm9kZTo6cmVzdW1lUG9zdEF0dGFjaENhbGxi YWNrcyAoCiAgICB0aGlzPTB4OTU5NDU3OCkgYXQgLi4vLi4vV2ViQ29yZS9kb20vQ29udGFpbmVy Tm9kZS5jcHA6NTQ0Ck5vIGxvY2Fscy4KIzE2IDB4Yjc0YTFlYzkgaW4gV2ViQ29yZTo6RWxlbWVu dDo6YXR0YWNoICh0aGlzPTB4OTU5NDU3OCkKICAgIGF0IC4uLy4uL1dlYkNvcmUvZG9tL0VsZW1l bnQuY3BwOjc1MwpObyBsb2NhbHMuCiMxNyAweGI3NWM5ZmJiIGluIFdlYkNvcmU6OkhUTUxGcmFt ZUVsZW1lbnRCYXNlOjphdHRhY2ggKHRoaXM9MHg5NTk0NTc4KQogICAgYXQgLi4vLi4vV2ViQ29y ZS9odG1sL0hUTUxGcmFtZUVsZW1lbnRCYXNlLmNwcDoxOTQKTm8gbG9jYWxzLgojMTggMHhiNzVj ZTYwZiBpbiBXZWJDb3JlOjpIVE1MSUZyYW1lRWxlbWVudDo6YXR0YWNoICh0aGlzPTB4OTU5NDU3 OCkKICAgIGF0IC4uLy4uL1dlYkNvcmUvaHRtbC9IVE1MSUZyYW1lRWxlbWVudC5jcHA6MTE4Ck5v IGxvY2Fscy4KIzE5IDB4Yjc1ZWJhYzIgaW4gV2ViQ29yZTo6SFRNTFBhcnNlcjo6aW5zZXJ0Tm9k ZSAodGhpcz0weDk0ZjA0ZTgsIAogICAgbj0weDk1OTQ1NzgsIGZsYXQ9ZmFsc2UpIGF0IC4uLy4u L1dlYkNvcmUvaHRtbC9IVE1MUGFyc2VyLmNwcDozNzUKCXByb3RlY3ROb2RlID0gezxXVEY6OkZh c3RBbGxvY0Jhc2U+ID0gezxObyBkYXRhIGZpZWxkcz59LCAKICBtX3B0ciA9IDB4OTU5NDU3OH0K CWxvY2FsTmFtZSA9IChjb25zdCBXZWJDb3JlOjpBdG9taWNTdHJpbmcgJikgQDB4OTI4MWQ5NDog e21fc3RyaW5nID0gewogICAgbV9pbXBsID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0gezxObyBk YXRhIGZpZWxkcz59LCBtX3B0ciA9IDB4OTI4MWQ1OH19fQoJdGFnUHJpb3JpdHkgPSAxCgluZXdO b2RlID0gKGNsYXNzIFdlYkNvcmU6Ok5vZGUgKikgMHg5NTk0NTc4CglwYXJlbnRBdHRhY2hlZCA9 IHRydWUKCV9fUFJFVFRZX0ZVTkNUSU9OX18gPSAiYm9vbCBXZWJDb3JlOjpIVE1MUGFyc2VyOjpp bnNlcnROb2RlKFdlYkNvcmU6Ok5vZGUqLCBib29sKSIKIzIwIDB4Yjc1ZWUzYWUgaW4gV2ViQ29y ZTo6SFRNTFBhcnNlcjo6cGFyc2VUb2tlbiAodGhpcz0weDk0ZjA0ZTgsIHQ9MHg5Mjk0ZGRjKQog ICAgYXQgLi4vLi4vV2ViQ29yZS9odG1sL0hUTUxQYXJzZXIuY3BwOjI3NAoJbiA9IHs8V1RGOjpG YXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgbV9wdHIgPSAweDk1OTQ1Nzh9CiMy MSAweGI3NjAyZDk3IGluIFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OnByb2Nlc3NUb2tlbiAodGhp cz0weDkyOTRkYzApCiAgICBhdCAuLi8uLi9XZWJDb3JlL2h0bWwvSFRNTFRva2VuaXplci5jcHA6 MTkwMAoJc2NyaXB0Q29udHJvbGxlciA9IChXZWJDb3JlOjpTY3JpcHRDb250cm9sbGVyICopIDB4 OTI4MDU0YwoJbiA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwg bV9wdHIgPSAweDB9CiMyMiAweGI3NjA4YzYzIGluIFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OnBh cnNlVGFnICh0aGlzPTB4OTI5NGRjMCwgCiAgICBzcmM9QDB4OTI5NTcxYywgc3RhdGU9e3N0YXRp YyBFbnRpdHlTaGlmdCA9IDQsIG1fYml0cyA9IDB9KQogICAgYXQgLi4vLi4vV2ViQ29yZS9odG1s L0hUTUxUb2tlbml6ZXIuY3BwOjE0ODUKCXRhZ05hbWUgPSB7bV9zdHJpbmcgPSB7CiAgICBtX2lt cGwgPSB7PFdURjo6RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIG1fcHRyID0g MHg5MjgxZDU4fX19Cglpc1NlbGZDbG9zaW5nU2NyaXB0ID0gZmFsc2UKCWJlZ2luVGFnID0gdHJ1 ZQoJbiA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgbV9wdHIg PSAweGJmY2Y3ODljfQoJY0J1ZmZlclBvcyA9IDAKCWxhc3RJc1NsYXNoID0gZmFsc2UKCV9fUFJF VFRZX0ZVTkNUSU9OX18gPSAiV2ViQ29yZTo6SFRNTFRva2VuaXplcjo6U3RhdGUgV2ViQ29yZTo6 SFRNTFRva2VuaXplcjo6cGFyc2VUYWcoV2ViQ29yZTo6U2VnbWVudGVkU3RyaW5nJiwgV2ViQ29y ZTo6SFRNTFRva2VuaXplcjo6U3RhdGUpIgojMjMgMHhiNzYwOWE5NSBpbiBXZWJDb3JlOjpIVE1M VG9rZW5pemVyOjp3cml0ZSAodGhpcz0weDkyOTRkYzAsIAogICAgc3RyPUAweGJmY2Y3YTUwLCBh cHBlbmREYXRhPXRydWUpCiAgICBhdCAuLi8uLi9XZWJDb3JlL2h0bWwvSFRNTFRva2VuaXplci5j cHA6MTczMQoJY2MgPSAxMDUKCXdhc1NraXBMRiA9IGZhbHNlCglzb3VyY2UgPSB7bV9wdXNoZWRD aGFyMSA9IDAsIG1fcHVzaGVkQ2hhcjIgPSAwLCBtX2N1cnJlbnRTdHJpbmcgPSB7CiAgICBtX2xl bmd0aCA9IDE1NzYsIG1fY3VycmVudCA9IDB4OTI5NWZhYywgbV9zdHJpbmcgPSB7CiAgICAgIG1f aW1wbCA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgCiAgICAg ICAgbV9wdHIgPSAweDkyOTVmOTB9fSwgbV9kb05vdEV4Y2x1ZGVMaW5lTnVtYmVycyA9IHRydWV9 LCAKICBtX2N1cnJlbnRDaGFyID0gMHg5Mjk1ZmFjLCAKICBtX3N1YnN0cmluZ3MgPSB7PFdURjo6 RmFzdEFsbG9jQmFzZT4gPSB7PE5vIGRhdGEgZmllbGRzPn0sIG1fc3RhcnQgPSAwLCAKICAgIG1f ZW5kID0gMCwgCiAgICBtX2J1ZmZlciA9IHs8V1RGOjpWZWN0b3JCdWZmZXJCYXNlPFdlYkNvcmU6 OlNlZ21lbnRlZFN1YnN0cmluZz4+ID0gezxXVEZOb25jb3B5YWJsZTo6Tm9uY29weWFibGU+ID0g ezxObyBkYXRhIGZpZWxkcz59LCBtX2J1ZmZlciA9IDB4OTJhODc3OCwgCiAgICAgICAgbV9jYXBh Y2l0eSA9IDB9LCA8Tm8gZGF0YSBmaWVsZHM+fSwgbV9pdGVyYXRvcnMgPSAweDB9LCAKICBtX2Nv bXBvc2l0ZSA9IGZhbHNlfQoJd2FzSW5Xcml0ZSA9IGZhbHNlCglwcm9jZXNzZWRDb3VudCA9IDEy MgoJc3RhcnRUaW1lID0gMTI0NjI5NjY4OS43ODQ5OTc5CglmcmFtZSA9IChjbGFzcyBXZWJDb3Jl OjpGcmFtZSAqKSAweDkyODAyNjAKCXN0YXRlID0ge3N0YXRpYyBFbnRpdHlTaGlmdCA9IDQsIG1f Yml0cyA9IDF9CiMyNCAweGI3Njg5ZjFjIGluIFdlYkNvcmU6OkZyYW1lTG9hZGVyOjp3cml0ZSAo dGhpcz0weDkyODAyOGMsIAogICAgc3RyPTB4OTRmZWM1MCAiPHA+VGVzdCBob3cgb3BhcXVlIGJh c2UgVVJMcyB3b3JrIGZvciBmZXRjaGluZyBzdWJyZXNvdXJjZXMuPC9wPlxuXG48c2NyaXB0Plxu aWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcilcbiAgbGF5b3V0VGVzdENvbnRyb2xsZXIu ZHVtcEFzVGV4dCgpO1xuPC9zY3JpcHQ+XG5cbjxvbD5cbjxsaSBpZD0xPlNVQ0NFU1M8L2xpPlxu PGxpIGlkPTI+U1VDQ0VTUzwiLi4uLCAKICAgIGxlbj0xNTc2LCBmbHVzaD1mYWxzZSkgYXQgLi4v Li4vV2ViQ29yZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwOjEwMzMKCXRva2VuaXplciA9IChXZWJD b3JlOjpUb2tlbml6ZXIgKikgMHg5Mjk0ZGMwCglkZWNvZGVkID0ge21faW1wbCA9IHs8V1RGOjpG YXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgCiAgICBtX3B0ciA9IDB4OTI5NWY5 MH19CglfX1BSRVRUWV9GVU5DVElPTl9fID0gInZvaWQgV2ViQ29yZTo6RnJhbWVMb2FkZXI6Ondy aXRlKGNvbnN0IGNoYXIqLCBpbnQsIGJvb2wpIgojMjUgMHhiNzY4YTA4NCBpbiBXZWJDb3JlOjpG cmFtZUxvYWRlcjo6YWRkRGF0YSAodGhpcz0weDkyODAyOGMsIAogICAgYnl0ZXM9MHg5NGZlYzUw ICI8cD5UZXN0IGhvdyBvcGFxdWUgYmFzZSBVUkxzIHdvcmsgZm9yIGZldGNoaW5nIHN1YnJlc291 cmNlcy48L3A+XG5cbjxzY3JpcHQ+XG5pZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKVxu ICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7XG48L3NjcmlwdD5cblxuPG9sPlxu PGxpIGlkPTE+U1VDQ0VTUzwvbGk+XG48bGkgaWQ9Mj5TVUNDRVNTPCIuLi4sIAogICAgbGVuZ3Ro PTE1NzYpIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcDoxNzk3CglfX1BS RVRUWV9GVU5DVElPTl9fID0gInZvaWQgV2ViQ29yZTo6RnJhbWVMb2FkZXI6OmFkZERhdGEoY29u c3QgY2hhciosIGludCkiCiMyNiAweGI3MTMwMmY1IGluIFdlYktpdDo6RnJhbWVMb2FkZXJDbGll bnQ6OmNvbW1pdHRlZExvYWQgKHRoaXM9MHg5MjgwMTk4LCAKICAgIGxvYWRlcj0weDk0ZjA1Yzgs IAogICAgZGF0YT0weDk0ZmVjNTAgIjxwPlRlc3QgaG93IG9wYXF1ZSBiYXNlIFVSTHMgd29yayBm b3IgZmV0Y2hpbmcgc3VicmVzb3VyY2VzLjwvcD5cblxuPHNjcmlwdD5cbmlmICh3aW5kb3cubGF5 b3V0VGVzdENvbnRyb2xsZXIpXG4gIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTtc bjwvc2NyaXB0PlxuXG48b2w+XG48bGkgaWQ9MT5TVUNDRVNTPC9saT5cbjxsaSBpZD0yPlNVQ0NF U1M8Ii4uLiwgCiAgICBsZW5ndGg9MTU3NikKICAgIGF0IC4uLy4uL1dlYktpdC9ndGsvV2ViQ29y ZVN1cHBvcnQvRnJhbWVMb2FkZXJDbGllbnRHdGsuY3BwOjIyMQoJZW5jb2RpbmcgPSB7bV9pbXBs ID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0gezxObyBkYXRhIGZpZWxkcz59LCAKICAgIG1fcHRy ID0gMHgwfX0KCXVzZXJDaG9zZW4gPSBmYWxzZQoJZnJhbWVMb2FkZXIgPSAoV2ViQ29yZTo6RnJh bWVMb2FkZXIgKikgMHg5MjgwMjhjCglfX1BSRVRUWV9GVU5DVElPTl9fID0gInZpcnR1YWwgdm9p ZCBXZWJLaXQ6OkZyYW1lTG9hZGVyQ2xpZW50Ojpjb21taXR0ZWRMb2FkKFdlYkNvcmU6OkRvY3Vt ZW50TG9hZGVyKiwgY29uc3QgY2hhciosIGludCkiCiMyNyAweGI3NjgwZTA0IGluIFdlYkNvcmU6 OkZyYW1lTG9hZGVyOjpjb21taXR0ZWRMb2FkICh0aGlzPTB4OTI4MDI4YywgCiAgICBsb2FkZXI9 MHg5NGYwNWM4LCAKICAgIGRhdGE9MHg5NGZlYzUwICI8cD5UZXN0IGhvdyBvcGFxdWUgYmFzZSBV UkxzIHdvcmsgZm9yIGZldGNoaW5nIHN1YnJlc291cmNlcy48L3A+XG5cbjxzY3JpcHQ+XG5pZiAo d2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKVxuICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1w QXNUZXh0KCk7XG48L3NjcmlwdD5cblxuPG9sPlxuPGxpIGlkPTE+U1VDQ0VTUzwvbGk+XG48bGkg aWQ9Mj5TVUNDRVNTPCIuLi4sIAogICAgbGVuZ3RoPTE1NzYpIGF0IC4uLy4uL1dlYkNvcmUvbG9h ZGVyL0ZyYW1lTG9hZGVyLmNwcDozNjE4Ck5vIGxvY2Fscy4KIzI4IDB4Yjc2Njk5NTMgaW4gV2Vi Q29yZTo6RG9jdW1lbnRMb2FkZXI6OmNvbW1pdExvYWQgKHRoaXM9MHg5NGYwNWM4LCAKICAgIGRh dGE9MHg5NGZlYzUwICI8cD5UZXN0IGhvdyBvcGFxdWUgYmFzZSBVUkxzIHdvcmsgZm9yIGZldGNo aW5nIHN1YnJlc291cmNlcy48L3A+XG5cbjxzY3JpcHQ+XG5pZiAod2luZG93LmxheW91dFRlc3RD b250cm9sbGVyKVxuICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7XG48L3Njcmlw dD5cblxuPG9sPlxuPGxpIGlkPTE+U1VDQ0VTUzwvbGk+XG48bGkgaWQ9Mj5TVUNDRVNTPCIuLi4s IAogICAgbGVuZ3RoPTE1NzYpIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL0RvY3VtZW50TG9hZGVy LmNwcDozNjEKCWZyYW1lTG9hZGVyID0gKFdlYkNvcmU6OkZyYW1lTG9hZGVyICopIDB4OTI4MDI4 YwoJcHJvdGVjdCA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwg CiAgbV9wdHIgPSAweDk0ZjA1Yzh9CiMyOSAweGI3NjY5OWMyIGluIFdlYkNvcmU6OkRvY3VtZW50 TG9hZGVyOjpyZWNlaXZlZERhdGEgKHRoaXM9MHg5NGYwNWM4LCAKICAgIGRhdGE9MHg5NGZlYzUw ICI8cD5UZXN0IGhvdyBvcGFxdWUgYmFzZSBVUkxzIHdvcmsgZm9yIGZldGNoaW5nIHN1YnJlc291 cmNlcy48L3A+XG5cbjxzY3JpcHQ+XG5pZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKVxu ICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7XG48L3NjcmlwdD5cblxuPG9sPlxu PGxpIGlkPTE+U1VDQ0VTUzwvbGk+XG48bGkgaWQ9Mj5TVUNDRVNTPCIuLi4sIAogICAgbGVuZ3Ro PTE1NzYpIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL0RvY3VtZW50TG9hZGVyLmNwcDozNzMKTm8g bG9jYWxzLgojMzAgMHhiNzY4NDkzZCBpbiBXZWJDb3JlOjpGcmFtZUxvYWRlcjo6cmVjZWl2ZWRE YXRhICh0aGlzPTB4OTI4MDI4YywgCiAgICBkYXRhPTB4OTRmZWM1MCAiPHA+VGVzdCBob3cgb3Bh cXVlIGJhc2UgVVJMcyB3b3JrIGZvciBmZXRjaGluZyBzdWJyZXNvdXJjZXMuPC9wPlxuXG48c2Ny aXB0PlxuaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcilcbiAgbGF5b3V0VGVzdENvbnRy b2xsZXIuZHVtcEFzVGV4dCgpO1xuPC9zY3JpcHQ+XG5cbjxvbD5cbjxsaSBpZD0xPlNVQ0NFU1M8 L2xpPlxuPGxpIGlkPTI+U1VDQ0VTUzwiLi4uLCAKICAgIGxlbmd0aD0xNTc2KSBhdCAuLi8uLi9X ZWJDb3JlL2xvYWRlci9GcmFtZUxvYWRlci5jcHA6MjQzNQpObyBsb2NhbHMuCiMzMSAweGI3Njlj NWRjIGluIFdlYkNvcmU6Ok1haW5SZXNvdXJjZUxvYWRlcjo6YWRkRGF0YSAodGhpcz0weDk0ZjIy NTgsIAogICAgZGF0YT0weDk0ZmVjNTAgIjxwPlRlc3QgaG93IG9wYXF1ZSBiYXNlIFVSTHMgd29y ayBmb3IgZmV0Y2hpbmcgc3VicmVzb3VyY2VzLjwvcD5cblxuPHNjcmlwdD5cbmlmICh3aW5kb3cu bGF5b3V0VGVzdENvbnRyb2xsZXIpXG4gIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQo KTtcbjwvc2NyaXB0PlxuXG48b2w+XG48bGkgaWQ9MT5TVUNDRVNTPC9saT5cbjxsaSBpZD0yPlNV Q0NFU1M8Ii4uLiwgCiAgICBsZW5ndGg9MTU3NiwgYWxsQXRPbmNlPWZhbHNlKQogICAgYXQgLi4v Li4vV2ViQ29yZS9sb2FkZXIvTWFpblJlc291cmNlTG9hZGVyLmNwcDoxNDgKTm8gbG9jYWxzLgoj MzIgMHhiNzZhNGI0MyBpbiBXZWJDb3JlOjpSZXNvdXJjZUxvYWRlcjo6ZGlkUmVjZWl2ZURhdGEg KHRoaXM9MHg5NGYyMjU4LCAKICAgIGRhdGE9MHg5NGZlYzUwICI8cD5UZXN0IGhvdyBvcGFxdWUg YmFzZSBVUkxzIHdvcmsgZm9yIGZldGNoaW5nIHN1YnJlc291cmNlcy48L3A+XG5cbjxzY3JpcHQ+ XG5pZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKVxuICBsYXlvdXRUZXN0Q29udHJvbGxl ci5kdW1wQXNUZXh0KCk7XG48L3NjcmlwdD5cblxuPG9sPlxuPGxpIGlkPTE+U1VDQ0VTUzwvbGk+ XG48bGkgaWQ9Mj5TVUNDRVNTPCIuLi4sIAogICAgbGVuZ3RoPTE1NzYsIGxlbmd0aFJlY2VpdmVk PTE1NzYsIGFsbEF0T25jZT1mYWxzZSkKICAgIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL1Jlc291 cmNlTG9hZGVyLmNwcDoyNTcKCXByb3RlY3RvciA9IHs8V1RGOjpGYXN0QWxsb2NCYXNlPiA9IHs8 Tm8gZGF0YSBmaWVsZHM+fSwgCiAgbV9wdHIgPSAweDk0ZjIyNTh9CiMzMyAweGI3NjliNmNhIGlu IFdlYkNvcmU6Ok1haW5SZXNvdXJjZUxvYWRlcjo6ZGlkUmVjZWl2ZURhdGEgKHRoaXM9MHg5NGYy MjU4LCAKICAgIGRhdGE9MHg5NGZlYzUwICI8cD5UZXN0IGhvdyBvcGFxdWUgYmFzZSBVUkxzIHdv cmsgZm9yIGZldGNoaW5nIHN1YnJlc291cmNlcy48L3A+XG5cbjxzY3JpcHQ+XG5pZiAod2luZG93 LmxheW91dFRlc3RDb250cm9sbGVyKVxuICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0 KCk7XG48L3NjcmlwdD5cblxuPG9sPlxuPGxpIGlkPTE+U1VDQ0VTUzwvbGk+XG48bGkgaWQ9Mj5T VUNDRVNTPCIuLi4sIAogICAgbGVuZ3RoPTE1NzYsIGxlbmd0aFJlY2VpdmVkPTE1NzYsIGFsbEF0 T25jZT1mYWxzZSkKICAgIGF0IC4uLy4uL1dlYkNvcmUvbG9hZGVyL01haW5SZXNvdXJjZUxvYWRl ci5jcHA6MzYwCglwcm90ZWN0ID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0gezxObyBkYXRhIGZp ZWxkcz59LCAKICBtX3B0ciA9IDB4OTRmMjI1OH0KCV9fUFJFVFRZX0ZVTkNUSU9OX18gPSAidmly dHVhbCB2b2lkIFdlYkNvcmU6Ok1haW5SZXNvdXJjZUxvYWRlcjo6ZGlkUmVjZWl2ZURhdGEoY29u c3QgY2hhciosIGludCwgbG9uZyBsb25nIGludCwgYm9vbCkiCiMzNCAweGI3NmEzY2Y2IGluIFdl YkNvcmU6OlJlc291cmNlTG9hZGVyOjpkaWRSZWNlaXZlRGF0YSAodGhpcz0weDk0ZjIyNTgsIAog ICAgZGF0YT0weDk0ZmVjNTAgIjxwPlRlc3QgaG93IG9wYXF1ZSBiYXNlIFVSTHMgd29yayBmb3Ig ZmV0Y2hpbmcgc3VicmVzb3VyY2VzLjwvcD5cblxuPHNjcmlwdD5cbmlmICh3aW5kb3cubGF5b3V0 VGVzdENvbnRyb2xsZXIpXG4gIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTtcbjwv c2NyaXB0PlxuXG48b2w+XG48bGkgaWQ9MT5TVUNDRVNTPC9saT5cbjxsaSBpZD0yPlNVQ0NFU1M8 Ii4uLiwgCiAgICBsZW5ndGg9MTU3NiwgbGVuZ3RoUmVjZWl2ZWQ9MTU3NikKICAgIGF0IC4uLy4u L1dlYkNvcmUvbG9hZGVyL1Jlc291cmNlTG9hZGVyLmNwcDo0MTEKTm8gbG9jYWxzLgojMzUgMHhi NzlmOTg5MyBpbiByZWFkQ2FsbGJhY2sgKHNvdXJjZT0weDk0ZTE1MjAsIHJlcz0weDk0ZTEzMjAp CiAgICBhdCAuLi8uLi9XZWJDb3JlL3BsYXRmb3JtL25ldHdvcmsvc291cC9SZXNvdXJjZUhhbmRs ZVNvdXAuY3BwOjcxNwoJaGFuZGxlID0gezxXVEY6OkZhc3RBbGxvY0Jhc2U+ID0gezxObyBkYXRh IGZpZWxkcz59LCBtX3B0ciA9IDB4OTRmMjE2OH0KCWQgPSAoY2xhc3MgV2ViQ29yZTo6UmVzb3Vy Y2VIYW5kbGVJbnRlcm5hbCAqKSAweDk0ZjJlYjgKCWNsaWVudCA9IChjbGFzcyBXZWJDb3JlOjpS ZXNvdXJjZUhhbmRsZUNsaWVudCAqKSAweDk0ZjIyNTgKCWVycm9yID0gKEdFcnJvciAqKSAweDAK CWJ5dGVzUmVhZCA9IDE1NzYKIzM2IDB4YjY5YmRhZGYgaW4gYXN5bmNfcmVhZHlfY2FsbGJhY2tf d3JhcHBlciAoc291cmNlX29iamVjdD0weDk0ZTE1MjAsIAogICAgcmVzPTB4OTRlMTMyMCwgdXNl cl9kYXRhPTB4MCkKICAgIGF0IC9idWlsZC9idWlsZGQtZ2xpYjIuMF8yLjIwLjQtMS1pMzg2LTZL Zk0xTy9nbGliMi4wLTIuMjAuNC9naW8vZ2lucHV0c3RyZWFtLmM6NDgwCk5vIGxvY2Fscy4KIzM3 IDB4YjY5Yzc5YTIgaW4gSUFfX2dfc2ltcGxlX2FzeW5jX3Jlc3VsdF9jb21wbGV0ZSAoc2ltcGxl PTB4OTRlMTMyMCkKICAgIGF0IC9idWlsZC9idWlsZGQtZ2xpYjIuMF8yLjIwLjQtMS1pMzg2LTZL Zk0xTy9nbGliMi4wLTIuMjAuNC9naW8vZ3NpbXBsZWFzeW5jcmVzdWx0LmM6NTY3CglfX1BSRVRU WV9GVU5DVElPTl9fID0gIklBX19nX3NpbXBsZV9hc3luY19yZXN1bHRfY29tcGxldGUiCiMzOCAw eGI2OWM3YzllIGluIGNvbXBsZXRlX2luX2lkbGVfY2JfZm9yX3RocmVhZCAoX2RhdGE9MHg5NGZl YjQwKQogICAgYXQgL2J1aWxkL2J1aWxkZC1nbGliMi4wXzIuMjAuNC0xLWkzODYtNktmTTFPL2ds aWIyLjAtMi4yMC40L2dpby9nc2ltcGxlYXN5bmNyZXN1bHQuYzo2MjkKCXNpbXBsZSA9IChHU2lt cGxlQXN5bmNSZXN1bHQgKikgMHg5NGUxMzIwCiMzOSAweGI2OGNlNTgxIGluIGdfaWRsZV9kaXNw YXRjaCAoc291cmNlPTB4OTRmZWMwMCwgY2FsbGJhY2s9MHhjLCAKICAgIHVzZXJfZGF0YT0weDk0 ZmViNDApCiAgICBhdCAvYnVpbGQvYnVpbGRkLWdsaWIyLjBfMi4yMC40LTEtaTM4Ni02S2ZNMU8v Z2xpYjIuMC0yLjIwLjQvZ2xpYi9nbWFpbi5jOjM5MjkKTm8gbG9jYWxzLgojNDAgMHhiNjhkMDM2 OCBpbiBJQV9fZ19tYWluX2NvbnRleHRfZGlzcGF0Y2ggKGNvbnRleHQ9MHg5MjQ2MmYwKQogICAg YXQgL2J1aWxkL2J1aWxkZC1nbGliMi4wXzIuMjAuNC0xLWkzODYtNktmTTFPL2dsaWIyLjAtMi4y MC40L2dsaWIvZ21haW4uYzoxODI0Ck5vIGxvY2Fscy4KIzQxIDB4YjY4ZDM4YzMgaW4gZ19tYWlu X2NvbnRleHRfaXRlcmF0ZSAoY29udGV4dD0weDkyNDYyZjAsIGJsb2NrPTEsIAogICAgZGlzcGF0 Y2g9MSwgc2VsZj0weDkyMWQ4NTgpCiAgICBhdCAvYnVpbGQvYnVpbGRkLWdsaWIyLjBfMi4yMC40 LTEtaTM4Ni02S2ZNMU8vZ2xpYjIuMC0yLjIwLjQvZ2xpYi9nbWFpbi5jOjI0NTUKCW1heF9wcmlv cml0eSA9IDIxNDc0ODM2NDcKCXRpbWVvdXQgPSAtMQoJc29tZV9yZWFkeSA9IDEKCW5mZHMgPSAz CglhbGxvY2F0ZWRfbmZkcyA9IDx2YWx1ZSBvcHRpbWl6ZWQgb3V0PgoJZmRzID0gKEdQb2xsRkQg KikgMHg5MmE4MTI4CglfX1BSRVRUWV9GVU5DVElPTl9fID0gImdfbWFpbl9jb250ZXh0X2l0ZXJh dGUiCiM0MiAweGI2OGQzYTQ4IGluIElBX19nX21haW5fY29udGV4dF9pdGVyYXRpb24gKGNvbnRl eHQ9MHg5MjQ2MmYwLCBtYXlfYmxvY2s9MSkKICAgIGF0IC9idWlsZC9idWlsZGQtZ2xpYjIuMF8y LjIwLjQtMS1pMzg2LTZLZk0xTy9nbGliMi4wLTIuMjAuNC9nbGliL2dtYWluLmM6MjUxOAoJcmV0 dmFsID0gPHZhbHVlIG9wdGltaXplZCBvdXQ+CiM0MyAweDA4MDRmNjE5IGluIHJ1blRlc3QgKHRl c3RQYXRoT3JVUkw9QDB4YmZjZjg3NTApCiAgICBhdCAuLi8uLi9XZWJLaXRUb29scy9EdW1wUmVu ZGVyVHJlZS9ndGsvRHVtcFJlbmRlclRyZWUuY3BwOjM5MgoJcGF0aE9yVVJMID0ge3N0YXRpYyBu cG9zID0gNDI5NDk2NzI5NSwgCiAgX01fZGF0YXBsdXMgPSB7PHN0ZDo6YWxsb2NhdG9yPGNoYXI+ PiA9IHs8X19nbnVfY3h4OjpuZXdfYWxsb2NhdG9yPGNoYXI+PiA9IHs8Tm8gZGF0YSBmaWVsZHM+ fSwgPE5vIGRhdGEgZmllbGRzPn0sIAogICAgX01fcCA9IDB4OTJhOGVkNCAiL2hvbWUva292L3Ny Yy9XZWJLaXQvTGF5b3V0VGVzdHMvZmFzdC9sb2FkZXIvb3BhcXVlLWJhc2UtdXJsLmh0bWwifX0K CWV4cGVjdGVkUGl4ZWxIYXNoID0ge3N0YXRpYyBucG9zID0gNDI5NDk2NzI5NSwgCiAgX01fZGF0 YXBsdXMgPSB7PHN0ZDo6YWxsb2NhdG9yPGNoYXI+PiA9IHs8X19nbnVfY3h4OjpuZXdfYWxsb2Nh dG9yPGNoYXI+PiA9IHs8Tm8gZGF0YSBmaWVsZHM+fSwgPE5vIGRhdGEgZmllbGRzPn0sIF9NX3Ag PSAweGI2ODkwNzNjICIifX0KCXNlcGFyYXRvclBvcyA9IDQyOTQ5NjcyOTUKCXVybCA9IChnY2hh ciAqKSAweDAKCXRlc3RVUkwgPSB7c3RhdGljIG5wb3MgPSA0Mjk0OTY3Mjk1LCAKICBfTV9kYXRh cGx1cyA9IHs8c3RkOjphbGxvY2F0b3I8Y2hhcj4+ID0gezxfX2dudV9jeHg6Om5ld19hbGxvY2F0 b3I8Y2hhcj4+ID0gezxObyBkYXRhIGZpZWxkcz59LCA8Tm8gZGF0YSBmaWVsZHM+fSwgCiAgICBf TV9wID0gMHg5NGViYmU0ICJmaWxlOi8vL2hvbWUva292L3NyYy9XZWJLaXQvTGF5b3V0VGVzdHMv ZmFzdC9sb2FkZXIvb3BhcXVlLWJhc2UtdXJsLmh0bWwifX0KCWlzU1ZHVzNDVGVzdCA9IGZhbHNl CglzaXplID0ge3ggPSAxNTM3ODQwMjAsIHkgPSA4MSwgd2lkdGggPSA4MDAsIGhlaWdodCA9IDYw MH0KCWJmTGlzdCA9IChXZWJLaXRXZWJCYWNrRm9yd2FyZExpc3QgKikgMHg5MjFlYWM4CglfX1BS RVRUWV9GVU5DVElPTl9fID0gInZvaWQgcnVuVGVzdChjb25zdCBzdGQ6OnN0cmluZyYpIgojNDQg MHgwODA0ZmM0NiBpbiBtYWluIChhcmdjPTIsIGFyZ3Y9MHhiZmNmODgxNCkKICAgIGF0IC4uLy4u L1dlYktpdFRvb2xzL0R1bXBSZW5kZXJUcmVlL2d0ay9EdW1wUmVuZGVyVHJlZS5jcHA6NTg5Cglu ZXdMaW5lQ2hhcmFjdGVyID0gMHhiZmNmN2Y1MSAiIgoJZmlsZW5hbWVCdWZmZXIgPSAiL2hvbWUv a292L3NyYy9XZWJLaXQvTGF5b3V0VGVzdHMvZmFzdC9sb2FkZXIvb3BhcXVlLWJhc2UtdXJsLmh0 bWxcMDAwXDAwML9ZXDIxNv639FwxNzf/tydcMDAwXDAwMFwwMDAmXDAwMFwwMDBcMDAweFwxNzfP v8X+/rdcYlwwMDBcMDAwXDAwMFwyMzRcMDAwXDAwMFwwMDBcMjMwXDIzMv614FwyMDXPv1wwMzN3 /rc4XDIzM/61XDIzMFwyMzL+tVwyMzRcMDAwXDAwMFwwMDD0XDE3N/+3XDAwMVwwMDBcMDAwXDAw MFwwMjBcMjMw/rXAfs+/c7BktlwwMTfaIVx0XDIyNDHmtFwiXDAwMFwwMDBcMDAwXDAxN9ohXHRc MDAxXDAwMFwwMDBcMDAwuFwyMDbPv1wwMDNcMDAwXDAwMFwwMDBcZlwwMDBcMDAwXDAwMFwiXDAw MFwwMDBcMDAwXGZcMDAwXDAwMFwwMDDk0SFcdNAu5rT0XDE3N3O2XDAwMFwwMDBcMDAwXDAwMCIu Li4KCW9wdGlvbnMgPSB7e25hbWUgPSAweDgwNTI3YmYgIm5vdHJlZSIsIGhhc19hcmcgPSAwLCBm bGFnID0gMHg4MDUzN2QwLCAKICAgIHZhbCA9IDB9LCB7bmFtZSA9IDB4ODA1MjdjNiAicGl4ZWwt dGVzdHMiLCBoYXNfYXJnID0gMCwgZmxhZyA9IDB4ODA1NDg2YywgCiAgICB2YWwgPSAxfSwge25h bWUgPSAweDgwNTI3ZDIgInRyZWUiLCBoYXNfYXJnID0gMCwgZmxhZyA9IDB4ODA1MzdkMCwgCiAg ICB2YWwgPSAxfSwge25hbWUgPSAweDAsIGhhc19hcmcgPSAwLCBmbGFnID0gMHgwLCB2YWwgPSAw fX0KCW9wdGlvbiA9IC0xCgl3aW5kb3cgPSAoR3RrV2lkZ2V0ICopIDB4OTI2OTgzMApUaGUgcHJv Z3JhbSBpcyBydW5uaW5nLiAgRXhpdCBhbnl3YXk/ICh5IG9yIG4pIA== 32023 2009-06-29 15:43:58 -0700 2009-07-01 13:33:55 -0700 temporary workaround XSSAuditor_tempWorkaround.patch text/plain 1335 dbates SW5kZXg6IFdlYkNvcmUvcGFnZS9YU1NBdWRpdG9yLmNwcAo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3Jl L3BhZ2UvWFNTQXVkaXRvci5jcHAJKHJldmlzaW9uIDQ1MzQyKQorKysgV2ViQ29yZS9wYWdlL1hT U0F1ZGl0b3IuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0xMTUsOSArMTE1LDEyIEBAIFN0cmluZyBY U1NBdWRpdG9yOjpkZWNvZGVVUkwoY29uc3QgU3RyaW4KICAgICByZXN1bHQgPSBkZWNvZGVVUkxF c2NhcGVTZXF1ZW5jZXModXJsKTsKICAgICBpZiAoIWFsbG93Q29udHJvbENoYXJhY3RlcnMpCiAg ICAgICAgIHJlc3VsdC5yZW1vdmVDaGFyYWN0ZXJzKCZpc0NvbnRyb2xDaGFyYWN0ZXIpOwotICAg IHJlc3VsdCA9IGVuY29kaW5nLmRlY29kZShyZXN1bHQudXRmOCgpLmRhdGEoKSwgcmVzdWx0Lmxl bmd0aCgpKTsKLSAgICBpZiAoIWFsbG93Q29udHJvbENoYXJhY3RlcnMpCi0gICAgICAgIHJlc3Vs dC5yZW1vdmVDaGFyYWN0ZXJzKCZpc0NvbnRyb2xDaGFyYWN0ZXIpOworICAgIFN0cmluZyByZXN1 bHREZWNvZGVkID0gZW5jb2RpbmcuZGVjb2RlKHJlc3VsdC51dGY4KCkuZGF0YSgpLCByZXN1bHQu bGVuZ3RoKCkpOworICAgIGlmICghcmVzdWx0RGVjb2RlZC5pc0VtcHR5KCkpIHsKKyAgICAgICAg aWYgKCFhbGxvd0NvbnRyb2xDaGFyYWN0ZXJzKQorICAgICAgICAgICAgcmVzdWx0RGVjb2RlZC5y ZW1vdmVDaGFyYWN0ZXJzKCZpc0NvbnRyb2xDaGFyYWN0ZXIpOworICAgICAgICByZXN1bHQgPSBy ZXN1bHREZWNvZGVkOworICAgIH0KICAgICByZXR1cm4gcmVzdWx0OwogfQogCkBAIC0xMzYsNiAr MTM5LDEyIEBAIGJvb2wgWFNTQXVkaXRvcjo6ZmluZEluUmVxdWVzdChGcmFtZSogZnIKIHsKICAg ICBBU1NFUlQoZnJhbWUtPmRvY3VtZW50KCkpOwogICAgIFN0cmluZyBwYWdlVVJMID0gZnJhbWUt PmRvY3VtZW50KCktPnVybCgpLnN0cmluZygpOworICAgIAorICAgIGlmICghZnJhbWUtPmRvY3Vt ZW50KCktPmRlY29kZXIoKSkgeworICAgICAgICAvLyBGSVhNRTogVGhpcyBpcyBhIHRlbXBvcmFy eSB3b3JrYXJvdW5kLCBzaW5jZSBGcmFtZUxvYWRlcjo6d3JpdGUoY29uc3QgU3RyaW5nJiBzdHIp IGRvZXMgbm90IHNldCBtX2RlY29kZXIuCisgICAgICAgIC8vIEhlbmNlLCBEb2N1bWVudCBoYXMg YW4gaW52YWxpZCBkZWNvZGVyOyA9PiBpbnZhbGlkIFRleHRFbmNvZGluZy4KKyAgICAgICAgcmV0 dXJuIGZhbHNlOworICAgIH0KIAogICAgIGlmIChwcm90b2NvbElzKHBhZ2VVUkwsICJkYXRhIikp CiAgICAgICAgIHJldHVybiBmYWxzZTsK 32138 2009-07-01 13:33:55 -0700 2009-07-01 13:35:41 -0700 Patch Bug26807.patch text/plain 1170 dbates SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0NTQ0NCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTQgQEAKKzIwMDktMDctMDEgIERhbmllbCBCYXRlcyAgPGRiYXRlc0BpbnR1ZGF0 YS5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTI2ODA3CisgICAgICAgIAor ICAgICAgICBGaXhlcyB0aGlzIGFkZHJlc3MgYnkgY2hlY2tpbmcgd2hldGhlciBmcmFtZS0+ZG9j dW1lbnQoKS0+ZGVjb2RlcigpIGlzIG51bGwuIAorCisgICAgICAgICogcGFnZS9YU1NBdWRpdG9y LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlhTU0F1ZGl0b3I6OmZpbmRJblJlcXVlc3QpOgorCiAy MDA5LTA3LTAxICBOaWtvbGFzIFppbW1lcm1hbm4gIDxuaWtvbGFzLnppbW1lcm1hbm5AdG9yY2ht b2JpbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IEdlb3JnZSBTdGFpa29zLgpJbmRleDog V2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcGFnZS9Y U1NBdWRpdG9yLmNwcAkocmV2aXNpb24gNDUzNDIpCisrKyBXZWJDb3JlL3BhZ2UvWFNTQXVkaXRv ci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTEzNyw2ICsxMzcsMTEgQEAgYm9vbCBYU1NBdWRpdG9y OjpmaW5kSW5SZXF1ZXN0KEZyYW1lKiBmcgogICAgIEFTU0VSVChmcmFtZS0+ZG9jdW1lbnQoKSk7 CiAgICAgU3RyaW5nIHBhZ2VVUkwgPSBmcmFtZS0+ZG9jdW1lbnQoKS0+dXJsKCkuc3RyaW5nKCk7 CiAKKyAgICBpZiAoIWZyYW1lLT5kb2N1bWVudCgpLT5kZWNvZGVyKCkpIHsKKyAgICAgICAgLy8g Tm90ZSwgSmF2YVNjcmlwdCBVUkxzIGRvIG5vdCBoYXZlIGEgY2hhcnNldC4KKyAgICAgICAgcmV0 dXJuIGZhbHNlOworICAgIH0KKyAgICAKICAgICBpZiAocHJvdG9jb2xJcyhwYWdlVVJMLCAiZGF0 YSIpKQogICAgICAgICByZXR1cm4gZmFsc2U7CiAK