58750 2011-04-17 13:50:32 -0700 [WIN] Share openTemporaryFile with WinCE 2012-02-20 08:40:18 -0800 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Other OS X 10.5 RESOLVED FIXED P2 Normal --- 1 paroga paroga abarth aroben eric sfalken webkit.review.bot oldest_to_newest 387408 0 paroga 2011-04-17 13:50:32 -0700 [WIN] Use GetTempFileNameW in openTemporaryFile 387410 1 89961 paroga 2011-04-17 13:54:38 -0700 Created attachment 89961 Patch 387429 2 89961 sfalken 2011-04-17 15:05:24 -0700 Comment on attachment 89961 Patch I believe we intentionally switched away from using GetTempFileName for additional hardening in http://trac.webkit.org/changeset/34746 so I'm not sure we want to do this. 387438 3 paroga 2011-04-17 15:44:13 -0700 (In reply to comment #2) > (From update of attachment 89961 [details]) > I believe we intentionally switched away from using GetTempFileName for additional hardening in http://trac.webkit.org/changeset/34746 so I'm not sure we want to do this. Before this revision there was _no_ crypto random involved. I still use the crypto api in this patch. Is there such a huge difference between 3 and 8 random characters? 387805 4 eric 2011-04-18 09:41:45 -0700 I'm not sure I understand the use of 3 bits of random here. 387808 5 sfalken 2011-04-18 09:46:07 -0700 Adding additional randomness instead of using a fixed prefix is preferable when using GetTempFileName, since otherwise it is possible to guess/iterate all combinations of the paths to temporary files. https://buildsecurityin.us-cert.gov/bsi/articles/knowledge/coding/757-BSI.html I'm not sure why we need to be calling GetTempFileName here though. Can we just stick with the previous larger number of random characters and change the function to generate those values assuming that CryptoAPI Win32 function isn't available on CE? 388082 6 paroga 2011-04-18 15:03:19 -0700 (In reply to comment #5) > Adding additional randomness instead of using a fixed prefix is preferable when using GetTempFileName, since otherwise it is possible to guess/iterate all combinations of the paths to temporary files. > > https://buildsecurityin.us-cert.gov/bsi/articles/knowledge/coding/757-BSI.html > > I'm not sure why we need to be calling GetTempFileName here though. Can we just stick with the previous larger number of random characters and change the function to generate those values assuming that CryptoAPI Win32 function isn't available on CE? The problem isn't the CryptoAPI. PathCombine isn't available on WinCE. 392955 7 89961 aroben 2011-04-26 16:14:18 -0700 Comment on attachment 89961 Patch It doesn't seem good to reduce the randomness just to work around not having PathCombine. Can't we just use pathByAppendingComponent from FileSystem.h instead? 560172 8 127806 paroga 2012-02-20 04:28:21 -0800 Created attachment 127806 Patch 560238 9 127806 webkit.review.bot 2012-02-20 08:40:12 -0800 Comment on attachment 127806 Patch Clearing flags on attachment: 127806 Committed r108243: <http://trac.webkit.org/changeset/108243> 560239 10 webkit.review.bot 2012-02-20 08:40:18 -0800 All reviewed patches have been landed. Closing bug. 89961 2011-04-17 13:54:38 -0700 2012-02-20 04:28:21 -0800 Patch bug-58750-20110417225435.patch text/plain 4334 paroga U3VidmVyc2lvbiBSZXZpc2lvbjogODQxMDgKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRleCA5MGY3MjBkZjYyYWE4MzM5 MWRkYjI5N2RlNzBkNTUyZDMxNDQyYjU5Li5hN2RmOGNjNzBlMDA2ZjVmMmEyZDlkMmRkYTFkZjc4 ODlmNjFmMDJjIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291 cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTUgQEAKKzIwMTEtMDQtMTcgIFBhdHJp Y2sgR2Fuc3RlcmVyICA8cGFyb2dhQHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkg Tk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgW1dJTl0gVXNlIEdldFRlbXBGaWxlTmFtZVcgaW4g b3BlblRlbXBvcmFyeUZpbGUKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTU4NzUwCisKKyAgICAgICAgVGhpcyBjaGFuZ2UgZW5hYmxlcyB1cyB0byBzaGFy ZSBtb3JlIGNvZGUgd2l0aCBXaW5DRSBsYXRlci4KKworICAgICAgICAqIHBsYXRmb3JtL3dpbi9G aWxlU3lzdGVtV2luLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6Om9wZW5UZW1wb3JhcnlGaWxlKToK KwogMjAxMS0wNC0xNyAgRGFuIEJlcm5zdGVpbiAgPG1pdHpAYXBwbGUuY29tPgogCiAgICAgICAg IFJldmlld2VkIGJ5IEpvc2VwaCBQZWNvcmFyby4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3Jl L3BsYXRmb3JtL3dpbi9GaWxlU3lzdGVtV2luLmNwcCBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3Jt L3dpbi9GaWxlU3lzdGVtV2luLmNwcAppbmRleCA3ZDFjOGYyNTNiZTgzOTRhZDc3NTM2NzNlMGI1 YzU2MTg0ZTY5YWFiLi45ZjBkNDBjNWRlMjEwNWUzMDAyOWRmYWQ3NmE5NzdmOTBiODAyMTUxIDEw MDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS93aW4vRmlsZVN5c3RlbVdpbi5jcHAK KysrIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vd2luL0ZpbGVTeXN0ZW1XaW4uY3BwCkBAIC0z Myw2ICszMyw3IEBACiAjaW5jbHVkZSAiTm90SW1wbGVtZW50ZWQuaCIKICNpbmNsdWRlICJQYXRo V2Fsa2VyLmgiCiAjaW5jbHVkZSAiUGxhdGZvcm1TdHJpbmcuaCIKKyNpbmNsdWRlIDx3dGYvQ3J5 cHRvZ3JhcGhpY2FsbHlSYW5kb21OdW1iZXIuaD4KICNpbmNsdWRlIDx3dGYvSGFzaE1hcC5oPgog I2luY2x1ZGUgPHd0Zi90ZXh0L0NTdHJpbmcuaD4KICNpbmNsdWRlIDx3dGYvdGV4dC9TdHJpbmdD b25jYXRlbmF0ZS5oPgpAQCAtMTk1LDQ3ICsxOTYsMzMgQEAgU3RyaW5nIG9wZW5UZW1wb3JhcnlG aWxlKGNvbnN0IFN0cmluZyYsIFBsYXRmb3JtRmlsZUhhbmRsZSYgaGFuZGxlKQogewogICAgIGhh bmRsZSA9IElOVkFMSURfSEFORExFX1ZBTFVFOwogCi0gICAgY2hhciB0ZW1wUGF0aFtNQVhfUEFU SF07Ci0gICAgaW50IHRlbXBQYXRoTGVuZ3RoID0gOjpHZXRUZW1wUGF0aEEoV1RGX0FSUkFZX0xF TkdUSCh0ZW1wUGF0aCksIHRlbXBQYXRoKTsKLSAgICBpZiAodGVtcFBhdGhMZW5ndGggPD0gMCB8 fCB0ZW1wUGF0aExlbmd0aCA+IFdURl9BUlJBWV9MRU5HVEgodGVtcFBhdGgpKQorICAgIFdDSEFS IHBhdGhOYW1lW01BWF9QQVRIXTsKKyAgICBpZiAoITo6R2V0VGVtcFBhdGhXKFdURl9BUlJBWV9M RU5HVEgocGF0aE5hbWUpLCBwYXRoTmFtZSkpCiAgICAgICAgIHJldHVybiBTdHJpbmcoKTsKIAot ICAgIEhDUllQVFBST1YgaENyeXB0UHJvdiA9IDA7Ci0gICAgaWYgKCFDcnlwdEFjcXVpcmVDb250 ZXh0KCZoQ3J5cHRQcm92LCAwLCAwLCBQUk9WX1JTQV9GVUxMLCBDUllQVF9WRVJJRllDT05URVhU KSkKKyAgICAvLyBHZXRUZW1wRmlsZU5hbWVXIHVzZXMgb25seSB0aGUgZmlyc3QgdGhyZWUgY2hh cmFjdGVycyBvZiBwcmVmaXguCisgICAgLy8gU2VlIGh0dHA6Ly9tc2RuLm1pY3Jvc29mdC5jb20v ZW4tdXMvbGlicmFyeS9hYTM2NDk5MSUyOHY9dnMuODUlMjkuYXNweAorICAgIFdDSEFSIHByZWZp eFs0XTsKKyAgICB1bnNpZ25lZCBjaGFyIHJhbmRvbVZhbHVlc1szXTsKKyAgICBjcnlwdG9ncmFw aGljYWxseVJhbmRvbVZhbHVlcyhyYW5kb21WYWx1ZXMsIHNpemVvZihyYW5kb21WYWx1ZXMpKTsK KworICAgIC8vIExpbWl0IHRvIHZhbGlkIGZpbGVzeXN0ZW0gY2hhcmFjdGVycywgYWxzbyBleGNs dWRpbmcgb3RoZXJzIHRoYXQgY291bGQgYmUgcHJvYmxlbWF0aWMsIGxpa2UgcHVuY3R1YXRpb24u CisgICAgLy8gRG9uJ3QgaW5jbHVkZSBib3RoIHVwcGVyIGFuZCBsb3dlcmNhc2Ugc2luY2UgV2lu ZG93cyBmaWxlIHN5c3RlbXMgYXJlIHR5cGljYWxseSBub3QgY2FzZSBzZW5zaXRpdmUuCisgICAg Y29uc3QgY2hhciB2YWxpZENoYXJzW10gPSAiMDEyMzQ1Njc4OWFiY2RlZmdoaWprbG1ub3BxcnN0 dXZ3eHl6IjsKKyAgICBmb3IgKGludCBpID0gMDsgaSA8IDM7ICsraSkKKyAgICAgICAgcHJlZml4 W2ldID0gdmFsaWRDaGFyc1tyYW5kb21WYWx1ZXNbaV0gJSAoc2l6ZW9mKHZhbGlkQ2hhcnMpIC0g MSldOworICAgIHByZWZpeFszXSA9ICdcMCc7CisKKyAgICBXQ0hBUiBmaWxlTmFtZVtNQVhfUEFU SF07CisgICAgVUlOVCBmaWxlTmFtZUxlbmd0aCA9IDo6R2V0VGVtcEZpbGVOYW1lVyhwYXRoTmFt ZSwgcHJlZml4LCAwLCBmaWxlTmFtZSk7CisgICAgaWYgKCFmaWxlTmFtZUxlbmd0aCkKICAgICAg ICAgcmV0dXJuIFN0cmluZygpOwogCi0gICAgY2hhciBwcm9wb3NlZFBhdGhbTUFYX1BBVEhdOwot ICAgIHdoaWxlICgxKSB7Ci0gICAgICAgIGNoYXIgdGVtcEZpbGVbXSA9ICJYWFhYWFhYWC50bXAi OyAvLyBVc2UgOC4zIHN0eWxlIG5hbWUgKG1vcmUgY2hhcmFjdGVycyBhcmVuJ3QgaGVscGZ1bCBk dWUgdG8gOC4zIHNob3J0IGZpbGUgbmFtZXMpCi0gICAgICAgIGNvbnN0IGludCByYW5kb21QYXJ0 TGVuZ3RoID0gODsKLSAgICAgICAgaWYgKCFDcnlwdEdlblJhbmRvbShoQ3J5cHRQcm92LCByYW5k b21QYXJ0TGVuZ3RoLCByZWludGVycHJldF9jYXN0PEJZVEUqPih0ZW1wRmlsZSkpKQotICAgICAg ICAgICAgYnJlYWs7Ci0KLSAgICAgICAgLy8gTGltaXQgdG8gdmFsaWQgZmlsZXN5c3RlbSBjaGFy YWN0ZXJzLCBhbHNvIGV4Y2x1ZGluZyBvdGhlcnMgdGhhdCBjb3VsZCBiZSBwcm9ibGVtYXRpYywg bGlrZSBwdW5jdHVhdGlvbi4KLSAgICAgICAgLy8gZG9uJ3QgaW5jbHVkZSBib3RoIHVwcGVyIGFu ZCBsb3dlcmNhc2Ugc2luY2UgV2luZG93cyBmaWxlIHN5c3RlbXMgYXJlIHR5cGljYWxseSBub3Qg Y2FzZSBzZW5zaXRpdmUuCi0gICAgICAgIGNvbnN0IGNoYXIgdmFsaWRDaGFyc1tdID0gIjAxMjM0 NTY3ODlhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eiI7Ci0gICAgICAgIGZvciAoaW50IGkgPSAw OyBpIDwgcmFuZG9tUGFydExlbmd0aDsgKytpKQotICAgICAgICAgICAgdGVtcEZpbGVbaV0gPSB2 YWxpZENoYXJzW3RlbXBGaWxlW2ldICUgKHNpemVvZih2YWxpZENoYXJzKSAtIDEpXTsKLQotICAg ICAgICBBU1NFUlQoc3RybGVuKHRlbXBGaWxlKSA9PSBzaXplb2YodGVtcEZpbGUpIC0gMSk7Ci0K LSAgICAgICAgaWYgKCFQYXRoQ29tYmluZUEocHJvcG9zZWRQYXRoLCB0ZW1wUGF0aCwgdGVtcEZp bGUpKQotICAgICAgICAgICAgYnJlYWs7Ci0gCi0gICAgICAgIC8vIHVzZSBDUkVBVEVfTkVXIHRv IGF2b2lkIG92ZXJ3cml0aW5nIGFuIGV4aXN0aW5nIGZpbGUgd2l0aCB0aGUgc2FtZSBuYW1lCi0g ICAgICAgIGhhbmRsZSA9IENyZWF0ZUZpbGVBKHByb3Bvc2VkUGF0aCwgR0VORVJJQ19SRUFEIHwg R0VORVJJQ19XUklURSwgMCwgMCwgQ1JFQVRFX05FVywgRklMRV9BVFRSSUJVVEVfTk9STUFMLCAw KTsKLSAgICAgICAgaWYgKCFpc0hhbmRsZVZhbGlkKGhhbmRsZSkgJiYgR2V0TGFzdEVycm9yKCkg PT0gRVJST1JfQUxSRUFEWV9FWElTVFMpCi0gICAgICAgICAgICBjb250aW51ZTsKLQotICAgICAg ICBicmVhazsKLSAgICB9Ci0KLSAgICBDcnlwdFJlbGVhc2VDb250ZXh0KGhDcnlwdFByb3YsIDAp OwotCisgICAgaGFuZGxlID0gOjpDcmVhdGVGaWxlVyhmaWxlTmFtZSwgR0VORVJJQ19SRUFEIHwg R0VORVJJQ19XUklURSwgMCwgMCwgQ1JFQVRFX05FVywgRklMRV9BVFRSSUJVVEVfVEVNUE9SQVJZ LCAwKTsKICAgICBpZiAoIWlzSGFuZGxlVmFsaWQoaGFuZGxlKSkKICAgICAgICAgcmV0dXJuIFN0 cmluZygpOwogCi0gICAgcmV0dXJuIFN0cmluZzo6ZnJvbVVURjgocHJvcG9zZWRQYXRoKTsKKyAg ICByZXR1cm4gU3RyaW5nKGZpbGVOYW1lLCBmaWxlTmFtZUxlbmd0aCk7CiB9CiAKIFBsYXRmb3Jt RmlsZUhhbmRsZSBvcGVuRmlsZShjb25zdCBTdHJpbmcmIHBhdGgsIEZpbGVPcGVuTW9kZSBtb2Rl KQo= 127806 2012-02-20 04:28:21 -0800 2012-02-20 08:40:12 -0800 Patch bug-58750b.patch text/plain 3788 paroga ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZwppbmRleCBlYjg0Mzg2Li45MjM4YjFjIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29y ZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTYg QEAKKzIwMTItMDItMjAgIFBhdHJpY2sgR2Fuc3RlcmVyICA8cGFyb2dhQHdlYmtpdC5vcmc+CisK KyAgICAgICAgW1dJTl0gU2hhcmUgb3BlblRlbXBvcmFyeUZpbGUgd2l0aCBXaW5DRQorICAgICAg ICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NTg3NTAKKworICAgICAg ICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBVc2UgcGF0aEJ5QXBwZW5k aW5nQ29tcG9uZW50IGluc3RlYWQgb2YgUGF0aENvbWJpbmUgdG8gc2hhcmUgdGhlCisgICAgICAg IGNvZGUgd2l0aCBXaW5DRS4gQWxzbyB1c2UgdGhlIHdpZGUgdmVyc2lvbiBvZiBXaW5kb3dzIGZ1 bmN0aW9ucy4KKworICAgICAgICAqIHBsYXRmb3JtL3dpbi9GaWxlU3lzdGVtV2luLmNwcDoKKyAg ICAgICAgKFdlYkNvcmU6Om9wZW5UZW1wb3JhcnlGaWxlKToKKwogMjAxMi0wMi0yMCAgU2hpbnlh IEthd2FuYWthICA8c2hpbnlha0BjaHJvbWl1bS5vcmc+CiAKICAgICAgICAgQXR0YWNoZWQvRGV0 YWNoZWQgc3RhdGUgbXVzdCBiZSB0ZXN0YWJsZQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUv cGxhdGZvcm0vd2luL0ZpbGVTeXN0ZW1XaW4uY3BwIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0v d2luL0ZpbGVTeXN0ZW1XaW4uY3BwCmluZGV4IGQ5YjBkYmMuLmM3NjhiMmQgMTAwNjQ0Ci0tLSBh L1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL3dpbi9GaWxlU3lzdGVtV2luLmNwcAorKysgYi9Tb3Vy Y2UvV2ViQ29yZS9wbGF0Zm9ybS93aW4vRmlsZVN5c3RlbVdpbi5jcHAKQEAgLTE5NCw4ICsxOTQs OCBAQCBTdHJpbmcgb3BlblRlbXBvcmFyeUZpbGUoY29uc3QgU3RyaW5nJiwgUGxhdGZvcm1GaWxl SGFuZGxlJiBoYW5kbGUpCiB7CiAgICAgaGFuZGxlID0gSU5WQUxJRF9IQU5ETEVfVkFMVUU7CiAK LSAgICBjaGFyIHRlbXBQYXRoW01BWF9QQVRIXTsKLSAgICBpbnQgdGVtcFBhdGhMZW5ndGggPSA6 OkdldFRlbXBQYXRoQShXVEZfQVJSQVlfTEVOR1RIKHRlbXBQYXRoKSwgdGVtcFBhdGgpOworICAg IHdjaGFyX3QgdGVtcFBhdGhbTUFYX1BBVEhdOworICAgIGludCB0ZW1wUGF0aExlbmd0aCA9IDo6 R2V0VGVtcFBhdGhXKFdURl9BUlJBWV9MRU5HVEgodGVtcFBhdGgpLCB0ZW1wUGF0aCk7CiAgICAg aWYgKHRlbXBQYXRoTGVuZ3RoIDw9IDAgfHwgdGVtcFBhdGhMZW5ndGggPiBXVEZfQVJSQVlfTEVO R1RIKHRlbXBQYXRoKSkKICAgICAgICAgcmV0dXJuIFN0cmluZygpOwogCkBAIC0yMDMsMTEgKzIw MywxMSBAQCBTdHJpbmcgb3BlblRlbXBvcmFyeUZpbGUoY29uc3QgU3RyaW5nJiwgUGxhdGZvcm1G aWxlSGFuZGxlJiBoYW5kbGUpCiAgICAgaWYgKCFDcnlwdEFjcXVpcmVDb250ZXh0KCZoQ3J5cHRQ cm92LCAwLCAwLCBQUk9WX1JTQV9GVUxMLCBDUllQVF9WRVJJRllDT05URVhUKSkKICAgICAgICAg cmV0dXJuIFN0cmluZygpOwogCi0gICAgY2hhciBwcm9wb3NlZFBhdGhbTUFYX1BBVEhdOwotICAg IHdoaWxlICgxKSB7Ci0gICAgICAgIGNoYXIgdGVtcEZpbGVbXSA9ICJYWFhYWFhYWC50bXAiOyAv LyBVc2UgOC4zIHN0eWxlIG5hbWUgKG1vcmUgY2hhcmFjdGVycyBhcmVuJ3QgaGVscGZ1bCBkdWUg dG8gOC4zIHNob3J0IGZpbGUgbmFtZXMpCisgICAgU3RyaW5nIHByb3Bvc2VkUGF0aDsKKyAgICBk byB7CisgICAgICAgIHdjaGFyX3QgdGVtcEZpbGVbXSA9IEwiWFhYWFhYWFgudG1wIjsgLy8gVXNl IDguMyBzdHlsZSBuYW1lIChtb3JlIGNoYXJhY3RlcnMgYXJlbid0IGhlbHBmdWwgZHVlIHRvIDgu MyBzaG9ydCBmaWxlIG5hbWVzKQogICAgICAgICBjb25zdCBpbnQgcmFuZG9tUGFydExlbmd0aCA9 IDg7Ci0gICAgICAgIGlmICghQ3J5cHRHZW5SYW5kb20oaENyeXB0UHJvdiwgcmFuZG9tUGFydExl bmd0aCwgcmVpbnRlcnByZXRfY2FzdDxCWVRFKj4odGVtcEZpbGUpKSkKKyAgICAgICAgaWYgKCFD cnlwdEdlblJhbmRvbShoQ3J5cHRQcm92LCByYW5kb21QYXJ0TGVuZ3RoICogc2l6ZW9mKHdjaGFy X3QpLCByZWludGVycHJldF9jYXN0PEJZVEUqPih0ZW1wRmlsZSkpKQogICAgICAgICAgICAgYnJl YWs7CiAKICAgICAgICAgLy8gTGltaXQgdG8gdmFsaWQgZmlsZXN5c3RlbSBjaGFyYWN0ZXJzLCBh bHNvIGV4Y2x1ZGluZyBvdGhlcnMgdGhhdCBjb3VsZCBiZSBwcm9ibGVtYXRpYywgbGlrZSBwdW5j dHVhdGlvbi4KQEAgLTIxNiwyNSArMjE2LDIyIEBAIFN0cmluZyBvcGVuVGVtcG9yYXJ5RmlsZShj b25zdCBTdHJpbmcmLCBQbGF0Zm9ybUZpbGVIYW5kbGUmIGhhbmRsZSkKICAgICAgICAgZm9yIChp bnQgaSA9IDA7IGkgPCByYW5kb21QYXJ0TGVuZ3RoOyArK2kpCiAgICAgICAgICAgICB0ZW1wRmls ZVtpXSA9IHZhbGlkQ2hhcnNbdGVtcEZpbGVbaV0gJSAoc2l6ZW9mKHZhbGlkQ2hhcnMpIC0gMSld OwogCi0gICAgICAgIEFTU0VSVChzdHJsZW4odGVtcEZpbGUpID09IHNpemVvZih0ZW1wRmlsZSkg LSAxKTsKKyAgICAgICAgQVNTRVJUKHdjc2xlbih0ZW1wRmlsZSkgPT0gV1RGX0FSUkFZX0xFTkdU SCh0ZW1wRmlsZSkgLSAxKTsKIAotICAgICAgICBpZiAoIVBhdGhDb21iaW5lQShwcm9wb3NlZFBh dGgsIHRlbXBQYXRoLCB0ZW1wRmlsZSkpCisgICAgICAgIHByb3Bvc2VkUGF0aCA9IHBhdGhCeUFw cGVuZGluZ0NvbXBvbmVudCh0ZW1wUGF0aCwgdGVtcEZpbGUpOworICAgICAgICBpZiAocHJvcG9z ZWRQYXRoLmlzRW1wdHkoKSkKICAgICAgICAgICAgIGJyZWFrOwotIAotICAgICAgICAvLyB1c2Ug Q1JFQVRFX05FVyB0byBhdm9pZCBvdmVyd3JpdGluZyBhbiBleGlzdGluZyBmaWxlIHdpdGggdGhl IHNhbWUgbmFtZQotICAgICAgICBoYW5kbGUgPSBDcmVhdGVGaWxlQShwcm9wb3NlZFBhdGgsIEdF TkVSSUNfUkVBRCB8IEdFTkVSSUNfV1JJVEUsIDAsIDAsIENSRUFURV9ORVcsIEZJTEVfQVRUUklC VVRFX05PUk1BTCwgMCk7Ci0gICAgICAgIGlmICghaXNIYW5kbGVWYWxpZChoYW5kbGUpICYmIEdl dExhc3RFcnJvcigpID09IEVSUk9SX0FMUkVBRFlfRVhJU1RTKQotICAgICAgICAgICAgY29udGlu dWU7CiAKLSAgICAgICAgYnJlYWs7Ci0gICAgfQorICAgICAgICAvLyB1c2UgQ1JFQVRFX05FVyB0 byBhdm9pZCBvdmVyd3JpdGluZyBhbiBleGlzdGluZyBmaWxlIHdpdGggdGhlIHNhbWUgbmFtZQor ICAgICAgICBoYW5kbGUgPSA6OkNyZWF0ZUZpbGVXKHByb3Bvc2VkUGF0aC5jaGFyYWN0ZXJzV2l0 aE51bGxUZXJtaW5hdGlvbigpLCBHRU5FUklDX1JFQUQgfCBHRU5FUklDX1dSSVRFLCAwLCAwLCBD UkVBVEVfTkVXLCBGSUxFX0FUVFJJQlVURV9OT1JNQUwsIDApOworICAgIH0gd2hpbGUgKCFpc0hh bmRsZVZhbGlkKGhhbmRsZSkgJiYgR2V0TGFzdEVycm9yKCkgPT0gRVJST1JfQUxSRUFEWV9FWElT VFMpOwogCiAgICAgQ3J5cHRSZWxlYXNlQ29udGV4dChoQ3J5cHRQcm92LCAwKTsKIAogICAgIGlm ICghaXNIYW5kbGVWYWxpZChoYW5kbGUpKQogICAgICAgICByZXR1cm4gU3RyaW5nKCk7CiAKLSAg ICByZXR1cm4gU3RyaW5nOjpmcm9tVVRGOChwcm9wb3NlZFBhdGgpOworICAgIHJldHVybiBwcm9w b3NlZFBhdGg7CiB9CiAKIFBsYXRmb3JtRmlsZUhhbmRsZSBvcGVuRmlsZShjb25zdCBTdHJpbmcm IHBhdGgsIEZpbGVPcGVuTW9kZSBtb2RlKQo=