29980 2009-10-01 13:58:38 -0700 Loading invalid image crashes in RenderImage::setImageSizeForAltText 2009-10-14 08:49:50 -0700 1 1 1 Unclassified WebKit Images 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 yong.li.webkit yong.li.webkit darin eric staikos oldest_to_newest 151686 0 yong.li.webkit 2009-10-01 13:58:38 -0700 Loading an invalid image will result crash in RenderImage::setImageSizeForAltText() When there's no image decoder found for the image, CachedImage::error() deletes the BitmapImage object. The following code crashes in this case: if (newImage) { // imageSize() returns 0 for the error image. We need the true size of the // error image, so we have to get it by grabbing image() directly. imageWidth += newImage->image()->width() * style()->effectiveZoom(); the fix should be: if (newImage && newImage->image()) { patch is following 151687 1 40475 yong.li.webkit 2009-10-01 14:02:37 -0700 Created attachment 40475 the patch the patch 151689 2 darin 2009-10-01 14:07:54 -0700 Can we construct a test case for this? 151707 3 yong.li.webkit 2009-10-01 15:00:59 -0700 (In reply to comment #2) > Can we construct a test case for this? I met the crash because I used a html file as .jpg. This is exactly my test case <html> <body> <img src=test.jpg></img> </body> </html> where test.jpg is actually a html file. 151708 4 darin 2009-10-01 15:02:56 -0700 (In reply to comment #3) > I met the crash because I used a html file as .jpg. > > This is exactly my test case > <html> > <body> > <img src=test.jpg></img> > </body> > </html> > > where test.jpg is actually a html file. Great! That sounds like something that can be turned into an automated regression test. And we should. 151741 5 ddkilzer 2009-10-01 17:33:09 -0700 <rdar://problem/7269951> 151742 6 darin 2009-10-01 17:35:18 -0700 Since this patch fixes a null dereference, I don't think this is actually a security bug. Null dereferences are rarely exploitable, so this is just another crash -- we don't consider all crashes that a website can trigger to be security bugs. 151748 7 yong.li.webkit 2009-10-01 18:53:02 -0700 (In reply to comment #6) > Since this patch fixes a null dereference, I don't think this is actually a > security bug. Null dereferences are rarely exploitable, so this is just another > crash -- we don't consider all crashes that a website can trigger to be > security bugs. Ha, good to know 151950 8 40475 eric 2009-10-02 12:48:30 -0700 Comment on attachment 40475 the patch This change needs a LayoutTest. 151952 9 eric 2009-10-02 12:50:32 -0700 Removing security flag based on Darin's comment above. I agree, this is just a null dereference and not exploitable. 151995 10 yong.li.webkit 2009-10-02 15:28:01 -0700 (In reply to comment #8) > (From update of attachment 40475 [details]) > This change needs a LayoutTest. Which folder should I upload the test case to? 151998 11 eric 2009-10-02 15:35:09 -0700 I'd probably put it in fast/images. But you can put it whereever you like really. So long as you think the location makes sense or can justify it. :) 151999 12 yong.li.webkit 2009-10-02 15:35:56 -0700 (In reply to comment #11) > I'd probably put it in fast/images. But you can put it whereever you like > really. So long as you think the location makes sense or can justify it. :) fast/images is good 152008 13 40555 yong.li.webkit 2009-10-02 15:54:20 -0700 Created attachment 40555 the test case 152009 14 40555 eric 2009-10-02 15:57:05 -0700 Comment on attachment 40555 the test case These patches should all be one. invalid.jpg should be simpler (no need to be a full html page, or?) You don't actually need all this extra HTML boilerplate: +<html> +<head> + <title></title> You just need a little text to describe and the <img>, you file does not need to be valid HTML, it's better to be concise than valid. 152030 15 yong.li.webkit 2009-10-02 17:37:25 -0700 (In reply to comment #14) > (From update of attachment 40555 [details]) > These patches should all be one. invalid.jpg should be simpler (no need to be > a full html page, or?) > > You don't actually need all this extra HTML boilerplate: > +<html> > +<head> > + <title></title> > > You just need a little text to describe and the <img>, you file does not need > to be valid HTML, it's better to be concise than valid. but does it matter? 152031 16 40559 yong.li.webkit 2009-10-02 17:47:42 -0700 Created attachment 40559 patch with test case 152059 17 eric 2009-10-03 01:05:04 -0700 (In reply to comment #15) > (In reply to comment #14) > > (From update of attachment 40555 [details] [details]) > > These patches should all be one. invalid.jpg should be simpler (no need to be > > a full html page, or?) > > > > You don't actually need all this extra HTML boilerplate: > > +<html> > > +<head> > > + <title></title> > > > > You just need a little text to describe and the <img>, you file does not need > > to be valid HTML, it's better to be concise than valid. > > but does it matter? Sure it matters! Needless verbosity infringes on communication. Being concise means being clear. 154496 18 40559 adele 2009-10-13 17:06:52 -0700 Comment on attachment 40559 patch with test case r=me. Please remove the empty <title> before committing though. 154585 19 yong.li.webkit 2009-10-14 08:49:50 -0700 Landed @ r49562 40475 2009-10-01 14:02:37 -0700 2009-10-02 17:47:42 -0700 the patch 29980.patch text/plain 1162 yong.li.webkit ZGlmZiAtLWdpdCBhL1dlYkNvcmUvQ2hhbmdlTG9nIGIvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXgg MmJmNmM2OS4uYzljYzkyZCAxMDA2NDQKLS0tIGEvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvV2Vi Q29yZS9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxMyBAQAorMjAwOS0xMC0wMSAgWW9uZyBMaSAgPHlv bmcubGlAdG9yY2htb2JpbGUuY29tPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09Q UyEpLgorCisgICAgICAgIEZpeCBjcmFzaCB3aGVuIGxvYWRpbmcgaW52YWxpZCBpbWFnZSBkYXRh CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yOTk4MAor CisgICAgICAgICogcmVuZGVyaW5nL1JlbmRlckltYWdlLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6 OlJlbmRlckltYWdlOjpzZXRJbWFnZVNpemVGb3JBbHRUZXh0KToKKwogMjAwOS0wOS0yOSAgWW9u ZyBMaSAgPHlvbmcubGlAdG9yY2htb2JpbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IERh cmluIEFkbGVyLgpkaWZmIC0tZ2l0IGEvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3Bw IGIvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3BwCmluZGV4IDUxYzMwNzMuLjQyMDZi MWMgMTAwNjQ0Ci0tLSBhL1dlYkNvcmUvcmVuZGVyaW5nL1JlbmRlckltYWdlLmNwcAorKysgYi9X ZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJJbWFnZS5jcHAKQEAgLTIyNyw3ICsyMjcsNyBAQCBib29s IFJlbmRlckltYWdlOjpzZXRJbWFnZVNpemVGb3JBbHRUZXh0KENhY2hlZEltYWdlKiBuZXdJbWFn ZSAvKiA9IDAgKi8pCiAgICAgICAgIGltYWdlSGVpZ2h0ID0gcGFkZGluZ0hlaWdodDsKICAgICB9 CiAgIAotICAgIGlmIChuZXdJbWFnZSkgeworICAgIGlmIChuZXdJbWFnZSAmJiBuZXdJbWFnZS0+ aW1hZ2UoKSkgewogICAgICAgICAvLyBpbWFnZVNpemUoKSByZXR1cm5zIDAgZm9yIHRoZSBlcnJv ciBpbWFnZS4gIFdlIG5lZWQgdGhlIHRydWUgc2l6ZSBvZiB0aGUKICAgICAgICAgLy8gZXJyb3Ig aW1hZ2UsIHNvIHdlIGhhdmUgdG8gZ2V0IGl0IGJ5IGdyYWJiaW5nIGltYWdlKCkgZGlyZWN0bHku CiAgICAgICAgIGltYWdlV2lkdGggKz0gbmV3SW1hZ2UtPmltYWdlKCktPndpZHRoKCkgKiBzdHls ZSgpLT5lZmZlY3RpdmVab29tKCk7Cg== 40555 2009-10-02 15:54:20 -0700 2009-10-02 17:47:42 -0700 the test case 29980_testcase.patch text/plain 2235 yong.li.webkit ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCAyZGVlMDc0Li43NGExMWQyIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMDktMTAt MDIgIFlvbmcgTGkgIDx5b25nLmxpQHRvcmNobW9iaWxlLmNvbT4KKworICAgICAgICBSZXZpZXdl ZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBZGRlZCBhIHRlc3QgY2FzZSB0aGF0IGxv YWRzIGFuIGludmFsaWQgaW1hZ2UgdG8gbWFrZSBzdXJlCisgICAgICAgIHdlIGRvbid0IGNyYXNo IGluIHRoaXMgc2l0dWF0aW9uLgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93 X2J1Zy5jZ2k/aWQ9Mjk5ODAKKworICAgICAgICAqIGZhc3QvaW1hZ2VzL2ltYWdlLWludmFsaWQt ZGF0YS1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvaW1hZ2VzL2ltYWdlLWlu dmFsaWQtZGF0YS5odG1sOiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2ltYWdlcy9yZXNvdXJjZXMv aW52YWxpZC5qcGc6IEFkZGVkLgorCiAyMDA5LTEwLTAxICBCcmlhbiBXZWluc3RlaW4gIDxid2Vp bnN0ZWluQGFwcGxlLmNvbT4KIAogICAgICAgICBSdWJiZXItc3RhbXBlZCBieSBBZGFtIFJvYmVu LgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRh LWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2ltYWdlLWludmFsaWQtZGF0 YS1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uYTRlMjRj YwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2ltYWdlLWludmFs aWQtZGF0YS1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwzIEBACitUaGlzIGlzIHRlc3QgZm9yIGFu IGltYWdlIHdpdGggaW52YWxpZCBkYXRhLiBObyBjcmFzaCBtZWFucyB0ZXN0IFBBU1MuCisKKwpk aWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRhLmh0 bWwgYi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9pbWFnZS1pbnZhbGlkLWRhdGEuaHRtbApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5kOGU3MzkxCi0tLSAvZGV2L251bGwKKysr IGIvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRhLmh0bWwKQEAgLTAs MCArMSwxNiBAQAorPGh0bWw+Cis8aGVhZD4KKyAgICA8dGl0bGU+PC90aXRsZT4KKyAgICA8c2Ny aXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+CisgICAgICAgIGlmICh3aW5kb3cubGF5b3V0VGVz dENvbnRyb2xsZXIpCisgICAgICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0 KCk7CisgICAgPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKyAgICA8cD4KKyAgICAgICAgVGhp cyBpcyB0ZXN0IGZvciBhbiBpbWFnZSB3aXRoIGludmFsaWQgZGF0YS4gTm8gY3Jhc2ggbWVhbnMg dGVzdCBQQVNTLgorICAgIDwvcD4KKyAgICA8aHI+CisgICAgPGltZyBzcmM9InJlc291cmNlcy9p bnZhbGlkLmpwZyI+PC9pbWc+Cis8L2JvZHk+Cis8L2h0bWw+CmRpZmYgLS1naXQgYS9MYXlvdXRU ZXN0cy9mYXN0L2ltYWdlcy9yZXNvdXJjZXMvaW52YWxpZC5qcGcgYi9MYXlvdXRUZXN0cy9mYXN0 L2ltYWdlcy9yZXNvdXJjZXMvaW52YWxpZC5qcGcKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uZDhlNzM5MQotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1h Z2VzL3Jlc291cmNlcy9pbnZhbGlkLmpwZwpAQCAtMCwwICsxLDE2IEBACis8aHRtbD4KKzxoZWFk PgorICAgIDx0aXRsZT48L3RpdGxlPgorICAgIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0 Ij4KKyAgICAgICAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICAgICAgICAg IGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgICA8L3NjcmlwdD4KKzwvaGVh ZD4KKzxib2R5PgorICAgIDxwPgorICAgICAgICBUaGlzIGlzIHRlc3QgZm9yIGFuIGltYWdlIHdp dGggaW52YWxpZCBkYXRhLiBObyBjcmFzaCBtZWFucyB0ZXN0IFBBU1MuCisgICAgPC9wPgorICAg IDxocj4KKyAgICA8aW1nIHNyYz0icmVzb3VyY2VzL2ludmFsaWQuanBnIj48L2ltZz4KKzwvYm9k eT4KKzwvaHRtbD4K 40559 2009-10-02 17:47:42 -0700 2009-10-14 08:50:34 -0700 patch with test case 29980all.patch text/plain 3115 yong.li.webkit ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCAyZGVlMDc0Li43NGExMWQyIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMDktMTAt MDIgIFlvbmcgTGkgIDx5b25nLmxpQHRvcmNobW9iaWxlLmNvbT4KKworICAgICAgICBSZXZpZXdl ZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBZGRlZCBhIHRlc3QgY2FzZSB0aGF0IGxv YWRzIGFuIGludmFsaWQgaW1hZ2UgdG8gbWFrZSBzdXJlCisgICAgICAgIHdlIGRvbid0IGNyYXNo IGluIHRoaXMgc2l0dWF0aW9uLgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93 X2J1Zy5jZ2k/aWQ9Mjk5ODAKKworICAgICAgICAqIGZhc3QvaW1hZ2VzL2ltYWdlLWludmFsaWQt ZGF0YS1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvaW1hZ2VzL2ltYWdlLWlu dmFsaWQtZGF0YS5odG1sOiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2ltYWdlcy9yZXNvdXJjZXMv aW52YWxpZC5qcGc6IEFkZGVkLgorCiAyMDA5LTEwLTAxICBCcmlhbiBXZWluc3RlaW4gIDxid2Vp bnN0ZWluQGFwcGxlLmNvbT4KIAogICAgICAgICBSdWJiZXItc3RhbXBlZCBieSBBZGFtIFJvYmVu LgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRh LWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2ltYWdlLWludmFsaWQtZGF0 YS1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uYTRlMjRj YwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL2ltYWdlLWludmFs aWQtZGF0YS1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwzIEBACitUaGlzIGlzIHRlc3QgZm9yIGFu IGltYWdlIHdpdGggaW52YWxpZCBkYXRhLiBObyBjcmFzaCBtZWFucyB0ZXN0IFBBU1MuCisKKwpk aWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRhLmh0 bWwgYi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9pbWFnZS1pbnZhbGlkLWRhdGEuaHRtbApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5kOGU3MzkxCi0tLSAvZGV2L251bGwKKysr IGIvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvaW1hZ2UtaW52YWxpZC1kYXRhLmh0bWwKQEAgLTAs MCArMSwxNiBAQAorPGh0bWw+Cis8aGVhZD4KKyAgICA8dGl0bGU+PC90aXRsZT4KKyAgICA8c2Ny aXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+CisgICAgICAgIGlmICh3aW5kb3cubGF5b3V0VGVz dENvbnRyb2xsZXIpCisgICAgICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0 KCk7CisgICAgPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKyAgICA8cD4KKyAgICAgICAgVGhp cyBpcyB0ZXN0IGZvciBhbiBpbWFnZSB3aXRoIGludmFsaWQgZGF0YS4gTm8gY3Jhc2ggbWVhbnMg dGVzdCBQQVNTLgorICAgIDwvcD4KKyAgICA8aHI+CisgICAgPGltZyBzcmM9InJlc291cmNlcy9p bnZhbGlkLmpwZyI+PC9pbWc+Cis8L2JvZHk+Cis8L2h0bWw+CmRpZmYgLS1naXQgYS9MYXlvdXRU ZXN0cy9mYXN0L2ltYWdlcy9yZXNvdXJjZXMvaW52YWxpZC5qcGcgYi9MYXlvdXRUZXN0cy9mYXN0 L2ltYWdlcy9yZXNvdXJjZXMvaW52YWxpZC5qcGcKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uZTViNTU4OAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1h Z2VzL3Jlc291cmNlcy9pbnZhbGlkLmpwZwpAQCAtMCwwICsxIEBACis/Pz8/Pz8/Pz8/Pz8/Pz8/ Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/ClwgTm8gbmV3bGluZSBh dCBlbmQgb2YgZmlsZQpkaWZmIC0tZ2l0IGEvV2ViQ29yZS9DaGFuZ2VMb2cgYi9XZWJDb3JlL0No YW5nZUxvZwppbmRleCA0MjIyZjUxLi5iYzNiZmI2IDEwMDY0NAotLS0gYS9XZWJDb3JlL0NoYW5n ZUxvZworKysgYi9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDEzIEBACisyMDA5LTEwLTAx ICBZb25nIExpICA8eW9uZy5saUB0b3JjaG1vYmlsZS5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQg YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgRml4IGNyYXNoIHdoZW4gbG9hZGluZyBpbnZh bGlkIGltYWdlIGRhdGEKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu Y2dpP2lkPTI5OTgwCisKKyAgICAgICAgKiByZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3BwOgorICAg ICAgICAoV2ViQ29yZTo6UmVuZGVySW1hZ2U6OnNldEltYWdlU2l6ZUZvckFsdFRleHQpOgorCiAy MDA5LTEwLTAxICBCZXRoIERha2luICA8YmRha2luQGFwcGxlLmNvbT4KIAogICAgICAgICBSdWJi ZXItc3RhbXBlZCBieSBTYW0gV2VpbmlnLgpkaWZmIC0tZ2l0IGEvV2ViQ29yZS9yZW5kZXJpbmcv UmVuZGVySW1hZ2UuY3BwIGIvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3BwCmluZGV4 IDUxYzMwNzMuLjQyMDZiMWMgMTAwNjQ0Ci0tLSBhL1dlYkNvcmUvcmVuZGVyaW5nL1JlbmRlcklt YWdlLmNwcAorKysgYi9XZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJJbWFnZS5jcHAKQEAgLTIyNyw3 ICsyMjcsNyBAQCBib29sIFJlbmRlckltYWdlOjpzZXRJbWFnZVNpemVGb3JBbHRUZXh0KENhY2hl ZEltYWdlKiBuZXdJbWFnZSAvKiA9IDAgKi8pCiAgICAgICAgIGltYWdlSGVpZ2h0ID0gcGFkZGlu Z0hlaWdodDsKICAgICB9CiAgIAotICAgIGlmIChuZXdJbWFnZSkgeworICAgIGlmIChuZXdJbWFn ZSAmJiBuZXdJbWFnZS0+aW1hZ2UoKSkgewogICAgICAgICAvLyBpbWFnZVNpemUoKSByZXR1cm5z IDAgZm9yIHRoZSBlcnJvciBpbWFnZS4gIFdlIG5lZWQgdGhlIHRydWUgc2l6ZSBvZiB0aGUKICAg ICAgICAgLy8gZXJyb3IgaW1hZ2UsIHNvIHdlIGhhdmUgdG8gZ2V0IGl0IGJ5IGdyYWJiaW5nIGlt YWdlKCkgZGlyZWN0bHkuCiAgICAgICAgIGltYWdlV2lkdGggKz0gbmV3SW1hZ2UtPmltYWdlKCkt PndpZHRoKCkgKiBzdHlsZSgpLT5lZmZlY3RpdmVab29tKCk7Cg==