9176 2006-05-30 15:11:08 -0700 REGRESSION: repro crash in WebCore::StringImpl::hash() const + 28 (StringImpl.h:67) 2006-06-04 21:10:19 -0700 1 1 1 Unclassified WebKit WebKit Misc. 420+ Mac OS X 10.4 RESOLVED FIXED http://www.move.com/?poe=move EasyFix, HasReduction, InRadar, Regression P1 Major --- 1 alice.barraclough darin jonathanjohnsson oldest_to_newest 44056 0 alice.barraclough 2006-05-30 15:11:08 -0700 This bug is also in Radar as <rdar://4567325> * SUMMARY Safari TOT crashes immediately upon loading http://www.move.com/?poe=move I looked for a dup of this in bugzilla and didn't find one. Then again, i'm not that great at searching the bugzilla database. * STEPS TO REPRODUCE load http://www.move.com/?poe=move * REGRESSION not crashing on shipping versions of Safari * NOTES Command: Safari Path: /Build/symroots/Debug/Safari.app/Contents/MacOS/Safari Parent: WindowServer [6799] Version: 2.0.1 (420+) PID: 7166 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x0000000c Thread 0 Crashed: 0 com.apple.WebCore 0x020f8fe8 WebCore::StringImpl::hash() const + 28 (StringImpl.h:67) 1 com.apple.WebCore 0x02108878 WTF::StrHash<WebCore::String>::hash(WebCore::String const&) + 44 (xml_tokenizer.cpp:182) 2 com.apple.WebCore 0x021749ac WTF::HashMapTranslator<(bool)0, std::pair<WebCore::String, WebCore::CachedObject*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::StrHash<WebCore::String> >::hash(WebCore::String const&) + 32 (HashMap.h:140) 3 com.apple.WebCore 0x0217541c std::pair<std::pair<std::pair<WebCore::StringImpl*, int>*, bool>, unsigned> WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::lookup<WebCore::String, WTF::HashMapTranslator<(bool)0, std::pair<WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::lookup, WebCore::CachedObject*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::StrHash<WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::lookup> > >(WebCore::String const&) + 108 (HashTable.h:385) 4 com.apple.WebCore 0x02175b28 std::pair<WTF::HashTableIterator<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >, bool> WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::add<WebCore::String, WebCore::CachedObject*, WTF::HashMapTranslator<(bool)0, std::pair<WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::add, WebCore::CachedObject>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::StrHash<WTF::HashTable<WebCore::StringImpl*, std::pair<WebCore::StringImpl*, int>, WTF::PairFirstExtractor<std::pair<WebCore::StringImpl*, int> >, WTF::StrHash<WebCore::StringImpl*>, WTF::PairHashTraits<WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<int> >, WTF::HashTraits<WebCore::StringImpl*> >::add> > >(WebCore::String const&, WebCore::CachedObject* const&) + 92 (HashTable.h:427) 5 com.apple.WebCore 0x02175d00 WTF::HashMap<WebCore::String, WebCore::CachedObject*, WTF::StrHash<WebCore::String>, WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedObject*> >::inlineAdd(WebCore::String const&, WebCore::CachedObject* const&) + 76 (HashMap.h:255) 6 com.apple.WebCore 0x02175d70 WTF::HashMap<WebCore::String, WebCore::CachedObject*, WTF::StrHash<WebCore::String>, WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedObject*> >::set(WebCore::String const&, WebCore::CachedObject* const&) + 60 (HashMap.h:263) 7 com.apple.WebCore 0x01e30920 WebCore::Cache::updateCacheStatus(WebCore::DocLoader*, WebCore::String const&, WebCore::CachedObject*) + 140 (Cache.cpp:119) 8 com.apple.WebCore 0x01e313e4 WebCore::Cache::requestStyleSheet(WebCore::DocLoader*, WebCore::String const&, bool, long, DeprecatedString const&) + 880 (Cache.cpp:227) 9 com.apple.WebCore 0x01e35058 WebCore::DocLoader::requestStyleSheet(WebCore::String const&, DeprecatedString const&) + 212 (DocLoader.cpp:113) 10 com.apple.WebCore 0x0203da2c WebCore::HTMLLinkElement::process() + 1128 (HTMLLinkElement.cpp:183) 11 com.apple.WebCore 0x0203db90 WebCore::HTMLLinkElement::insertedIntoDocument() + 44 (HTMLLinkElement.cpp:198) 12 com.apple.WebCore 0x01e196d0 WebCore::ContainerNode::addChild(WTF::PassRefPtr<WebCore::Node>) + 436 (ContainerNode.cpp:565) 13 com.apple.WebCore 0x01cf5c14 WebCore::HTMLParser::insertNode(WebCore::Node*, bool) + 264 (HTMLParser.cpp:262) 14 com.apple.WebCore 0x01cf7814 WebCore::HTMLParser::parseToken(WebCore::Token*) + 1388 (HTMLParser.cpp:215) 15 com.apple.WebCore 0x01cfb1b4 WebCore::HTMLTokenizer::processToken() + 564 (HTMLTokenizer.cpp:1581) 16 com.apple.WebCore 0x01cfe794 WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString&, WebCore::HTMLTokenizer::State) + 7124 (HTMLTokenizer.cpp:1160) 17 com.apple.WebCore 0x01cff3a8 WebCore::HTMLTokenizer::write(WebCore::SegmentedString const&, bool) + 1720 (HTMLTokenizer.cpp:1386) 18 com.apple.WebCore 0x01de802c WebCore::Frame::write(char const*, int) + 1192 (Frame.cpp:685) 19 com.apple.WebCore 0x01dda7d4 WebCore::Frame::addData(char const*, int) + 340 (Frame.cpp:2646) 20 com.apple.WebCore 0x01e1ffa0 -[WebCoreFrameBridge addData:] + 224 (WebCoreFrameBridge.mm:557) 21 com.apple.WebKit 0x01235890 -[WebFrameBridge receivedData:textEncodingName:] + 236 (WebFrameBridge.m:490) 22 com.apple.WebKit 0x0125daec -[WebHTMLRepresentation receivedData:withDataSource:] + 248 (WebHTMLRepresentation.m:138) 23 com.apple.WebKit 0x012468a0 -[WebDataSource(WebPrivate) _commitLoadWithData:] + 164 (WebDataSource.m:766) 24 com.apple.WebKit 0x01246aec -[WebDataSource(WebPrivate) _receivedData:] + 196 (WebDataSource.m:781) 25 com.apple.WebKit 0x01280c50 -[WebMainResourceLoader addData:] + 136 (WebMainResourceLoader.m:162) 26 com.apple.WebKit 0x012411d0 -[WebLoader didReceiveData:lengthReceived:] + 108 (WebLoader.m:461) 27 com.apple.WebKit 0x012821cc -[WebMainResourceLoader didReceiveData:lengthReceived:] + 680 (WebMainResourceLoader.m:371) 28 com.apple.WebKit 0x01241b18 -[WebLoader connection:didReceiveData:lengthReceived:] + 188 (WebLoader.m:561) 29 com.apple.Foundation 0x929715d4 -[NSURLConnection(NSURLConnectionInternal) _sendDidReceiveDataCallback] + 564 30 com.apple.Foundation 0x9296fa74 -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 488 31 com.apple.Foundation 0x9296f810 _sendCallbacks + 156 32 com.apple.CoreFoundation 0x907dc4cc __CFRunLoopDoSources0 + 384 33 com.apple.CoreFoundation 0x907db9fc __CFRunLoopRun + 452 34 com.apple.CoreFoundation 0x907db47c CFRunLoopRunSpecific + 268 35 com.apple.HIToolbox 0x931e5740 RunCurrentEventLoopInMode + 264 36 com.apple.HIToolbox 0x931e4dd4 ReceiveNextEventCommon + 380 37 com.apple.HIToolbox 0x931e4c40 BlockUntilNextEventMatchingListInMode + 96 38 com.apple.AppKit 0x936e8ae4 _DPSNextEvent + 384 39 com.apple.AppKit 0x936e87a8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116 40 com.apple.Safari 0x00032ca4 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 292 (BrowserApplication.m:155) 41 com.apple.AppKit 0x936e4cec -[NSApplication run] + 472 42 com.apple.AppKit 0x937d587c NSApplicationMain + 452 43 com.apple.Safari 0x00102c2c main + 420 (main.m:36) 44 com.apple.Safari 0x00002f9c _start + 340 (crt.c:272) 45 com.apple.Safari 0x00002e44 start + 60 ------------------------------------------- <GMT30-May-2006 22:08:51GMT> Alice Liu: migrating to bugzilla. 44206 1 8635 jonathanjohnsson 2006-06-01 01:11:19 -0700 Created attachment 8635 Test case reduction The original link tag had the form <link id="ctl00_ctl00_ChannelStyleLink" rel="stylesheet" type="text/css">. 44207 2 jonathanjohnsson 2006-06-01 01:18:46 -0700 If you replace the link tag in the reduction with <link rel="stylesheet">, WebKit crashes as well. In short, the following tags crash WebKit: <link type="text/css"> <link rel="stylesheet"> 44580 3 darin 2006-06-03 21:02:19 -0700 I believe this occurs when m_url is null and requestStyleSheet is called with it. That's inside HTMLLinkElement::process. I believe this can be fixed by setting m_cachedSheet to 0 when m_url is null or by changing the DocLoader functions to fail when the URL string is null. 44725 4 8706 darin 2006-06-04 17:39:11 -0700 Created attachment 8706 patch 44727 5 8706 mjs 2006-06-04 18:16:50 -0700 Comment on attachment 8706 patch r=me 44737 6 darin 2006-06-04 21:10:19 -0700 Committed revision 14732. 8635 2006-06-01 01:11:19 -0700 2006-06-01 01:11:19 -0700 Test case reduction testcase_bug_9176.html text/html 95 jonathanjohnsson PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5CdWcgOTE3NjwvdGl0bGU+CjxsaW5rIHR5cGU9InRleHQv Y3NzIj4KPC9oZWFkPg0KPGJvZHk+CjwvYm9keT4NCjwvaHRtbD4= 8706 2006-06-04 17:39:11 -0700 2006-06-04 18:16:50 -0700 patch NullStringHashCrashPatch.txt text/plain 4997 darin SW5kZXg6IENoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBDaGFuZ2VMb2cJKHJldmlzaW9uIDE0NzMw KQorKysgQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDUgKzEsMjUgQEAKIDIwMDYtMDYt MDQgIERhcmluIEFkbGVyICA8ZGFyaW5AYXBwbGUuY29tPgogCisgICAgICAgIFJldmlld2VkIGJ5 IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIC0gZml4IGh0dHA6Ly9idWd6aWxsYS5vcGVuZGFy d2luLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9OTE3NgorICAgICAgICAgIFJFR1JFU1NJT046IHJlcHJv IGNyYXNoIGluIFdlYkNvcmU6OlN0cmluZ0ltcGw6Omhhc2goKSBjb25zdCArIDI4IChTdHJpbmdJ bXBsLmg6NjcpCisKKyAgICAgICAgKiBsb2FkZXIvQ2FjaGUuaDoKKyAgICAgICAgKiBsb2FkZXIv Q2FjaGUuY3BwOgorICAgICAgICAoV2ViQ29yZTo6Q2FjaGU6OnVwZGF0ZUNhY2hlU3RhdHVzKTog UmVtb3ZlZCB0aGUgVVJMIHBhcmFtZXRlci4gSW5zdGVhZCBnZXQgdGhlIFVSTAorICAgICAgICBm cm9tIHRoZSBjYWNoZWQgb2JqZWN0IGl0c2VsZi4gQ2FsbGVycyB3ZXJlIHBhc3NpbmcgaW4gdGhl IHdyb25nIFVSTC4gV2hlbiBpdCB3YXMgYQorICAgICAgICBudWxsIHN0cmluZywgaXQgY2F1c2Vk IHRoZSBjcmFzaCBtZW50aW9uZWQgYWJvdmUuIEJ1dCBpbiBvdGhlciBjYXNlcyBpdCBtYXkgaGF2 ZQorICAgICAgICBjYXVzZWQgc29tZSBvdGhlciBtaW5vciBwcm9ibGVtcyBhcyB3ZWxsLiBBZGRl ZCBhbiBhc3NlcnQgdG8gY2F0Y2ggY2FzZXMgd2hlcmUgdGhlCisgICAgICAgIFVSTCBpcyBudWxs IChzaG91bGQgbmV2ZXIgaGFwcGVuKS4KKyAgICAgICAgKFdlYkNvcmU6OkNhY2hlOjpyZXF1ZXN0 SW1hZ2UpOiBDaGFuZ2VkIGNhbGwgc2l0ZSB0byBub3QgcGFzcyBVUkwuCisgICAgICAgIChXZWJD b3JlOjpDYWNoZTo6cmVxdWVzdFN0eWxlU2hlZXQpOiBEaXR0by4KKyAgICAgICAgKFdlYkNvcmU6 OkNhY2hlOjpyZXF1ZXN0U2NyaXB0KTogRGl0dG8uCisgICAgICAgIChXZWJDb3JlOjpDYWNoZTo6 cmVxdWVzdFhTTFN0eWxlU2hlZXQpOiBEaXR0by4KKyAgICAgICAgKFdlYkNvcmU6OkNhY2hlOjpy ZXF1ZXN0WEJMRG9jdW1lbnQpOiBEaXR0by4KKworMjAwNi0wNi0wNCAgRGFyaW4gQWRsZXIgIDxk YXJpbkBhcHBsZS5jb20+CisKICAgICAgICAgUmV2aWV3ZWQgYnkgQWRlbGUuCiAKICAgICAgICAg LSBmaXggaHR0cDovL2J1Z3ppbGxhLm9wZW5kYXJ3aW4ub3JnL3Nob3dfYnVnLmNnaT9pZD03Mjkx CkluZGV4OiBsb2FkZXIvQ2FjaGUuaAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBsb2FkZXIvQ2FjaGUuaAkocmV2 aXNpb24gMTQ3MTcpCisrKyBsb2FkZXIvQ2FjaGUuaAkod29ya2luZyBjb3B5KQpAQCAtMTUzLDcg KzE1Myw3IEBACiAgICAgICAgIHN0YXRpYyBMb2FkZXIqIG1fbG9hZGVyOwogICAgIAogICAgICAg ICBzdGF0aWMgdm9pZCBtb3ZlVG9IZWFkT2ZMUlVMaXN0KENhY2hlZE9iamVjdCopOwotICAgICAg ICBzdGF0aWMgdm9pZCB1cGRhdGVDYWNoZVN0YXR1cyhEb2NMb2FkZXIqLCBjb25zdCBTdHJpbmcm IHVybCwgQ2FjaGVkT2JqZWN0Kik7CisgICAgICAgIHN0YXRpYyB2b2lkIHVwZGF0ZUNhY2hlU3Rh dHVzKERvY0xvYWRlciosIENhY2hlZE9iamVjdCopOwogICAgIAogICAgICAgICBzdGF0aWMgTFJV TGlzdCogbV9MUlVMaXN0czsKICAgICAgICAgc3RhdGljIGludCBtX3RvdGFsU2l6ZU9mTFJVTGlz dHM7CkluZGV4OiBsb2FkZXIvQ2FjaGUuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIGxvYWRlci9DYWNoZS5j cHAJKHJldmlzaW9uIDE0NzE3KQorKysgbG9hZGVyL0NhY2hlLmNwcAkod29ya2luZyBjb3B5KQpA QCAtMTA5LDE4ICsxMDksMTkgQEAKICAgICBkZWxldGUgZG9jbG9hZGVyczsgZG9jbG9hZGVycyA9 IDA7CiB9CiAKLXZvaWQgQ2FjaGU6OnVwZGF0ZUNhY2hlU3RhdHVzKERvY0xvYWRlciogZGwsIGNv bnN0IFN0cmluZyYgdXJsLCBDYWNoZWRPYmplY3QqIG8pCit2b2lkIENhY2hlOjp1cGRhdGVDYWNo ZVN0YXR1cyhEb2NMb2FkZXIqIGRsLCBDYWNoZWRPYmplY3QqIG8pCiB7CiAgICAgbW92ZVRvSGVh ZE9mTFJVTGlzdChvKTsKICAgICBpZiAoZGwpIHsKKyAgICAgICAgQVNTRVJUKCFvLT51cmwoKS5p c051bGwoKSk7CiAgICAgICAgIGlmIChjYWNoZURpc2FibGVkKQotICAgICAgICAgICAgZGwtPm1f ZG9jT2JqZWN0cy5yZW1vdmUodXJsKTsKKyAgICAgICAgICAgIGRsLT5tX2RvY09iamVjdHMucmVt b3ZlKG8tPnVybCgpKTsKICAgICAgICAgZWxzZQotICAgICAgICAgICAgZGwtPm1fZG9jT2JqZWN0 cy5zZXQodXJsLCBvKTsKKyAgICAgICAgICAgIGRsLT5tX2RvY09iamVjdHMuc2V0KG8tPnVybCgp LCBvKTsKICAgICB9CiB9CiAKLUNhY2hlZEltYWdlICpDYWNoZTo6cmVxdWVzdEltYWdlKERvY0xv YWRlciogZGwsIGNvbnN0IFN0cmluZyYgdXJsLCBib29sIHJlbG9hZCwgdGltZV90IGV4cGlyZURh dGUpCitDYWNoZWRJbWFnZSogQ2FjaGU6OnJlcXVlc3RJbWFnZShEb2NMb2FkZXIqIGRsLCBjb25z dCBTdHJpbmcmIHVybCwgYm9vbCByZWxvYWQsIHRpbWVfdCBleHBpcmVEYXRlKQogewogICAgIC8v IHRoaXMgYnJpbmdzIHRoZSBfdXJsIHRvIGEgc3RhbmRhcmQgZm9ybS4uLgogICAgIEtVUkwga3Vy bDsKQEAgLTEzMSw3ICsxMzIsNyBAQAogICAgIHJldHVybiByZXF1ZXN0SW1hZ2UoZGwsIGt1cmws IHJlbG9hZCwgZXhwaXJlRGF0ZSk7CiB9CiAKLUNhY2hlZEltYWdlICpDYWNoZTo6cmVxdWVzdElt YWdlKERvY0xvYWRlciogZGwsIGNvbnN0IEtVUkwmIHVybCwgYm9vbCByZWxvYWQsIHRpbWVfdCBl eHBpcmVEYXRlKQorQ2FjaGVkSW1hZ2UqIENhY2hlOjpyZXF1ZXN0SW1hZ2UoRG9jTG9hZGVyKiBk bCwgY29uc3QgS1VSTCYgdXJsLCBib29sIHJlbG9hZCwgdGltZV90IGV4cGlyZURhdGUpCiB7CiAg ICAgS0lPOjpDYWNoZUNvbnRyb2wgY2FjaGVQb2xpY3k7CiAgICAgaWYgKGRsKQpAQCAtMTczLDEx ICsxNzQsMTEgQEAKICAgICAgICAga2REZWJ1Zyg2MDYwKSA8PCAiQ2FjaGU6IHVzaW5nIGNhY2hl ZDogIiA8PCBrdXJsLnVybCgpIDw8ICIsIHN0YXR1cyAiIDw8IG8tPnN0YXR1cygpIDw8IGVuZGw7 CiAjZW5kaWYKIAotICAgIHVwZGF0ZUNhY2hlU3RhdHVzKGRsLCBvLT51cmwoKSwgbyk7CisgICAg dXBkYXRlQ2FjaGVTdGF0dXMoZGwsIG8pOwogICAgIHJldHVybiBzdGF0aWNfY2FzdDxDYWNoZWRJ bWFnZSAqPihvKTsKIH0KIAotQ2FjaGVkQ1NTU3R5bGVTaGVldCAqQ2FjaGU6OnJlcXVlc3RTdHls ZVNoZWV0KERvY0xvYWRlciogZGwsIGNvbnN0IFN0cmluZyYgdXJsLCBib29sIHJlbG9hZCwgdGlt ZV90IGV4cGlyZURhdGUsIGNvbnN0IERlcHJlY2F0ZWRTdHJpbmcmIGNoYXJzZXQpCitDYWNoZWRD U1NTdHlsZVNoZWV0KiBDYWNoZTo6cmVxdWVzdFN0eWxlU2hlZXQoRG9jTG9hZGVyKiBkbCwgY29u c3QgU3RyaW5nJiB1cmwsIGJvb2wgcmVsb2FkLCB0aW1lX3QgZXhwaXJlRGF0ZSwgY29uc3QgRGVw cmVjYXRlZFN0cmluZyYgY2hhcnNldCkKIHsKICAgICAvLyB0aGlzIGJyaW5ncyB0aGUgX3VybCB0 byBhIHN0YW5kYXJkIGZvcm0uLi4KICAgICBLVVJMIGt1cmw7CkBAIC0yMjMsMTEgKzIyNCwxMSBA QAogICAgICAgICBrZERlYnVnKDYwNjApIDw8ICJDYWNoZTogdXNpbmcgY2FjaGVkOiAiIDw8IGt1 cmwudXJsKCkgPDwgZW5kbDsKICNlbmRpZgogCi0gICAgdXBkYXRlQ2FjaGVTdGF0dXMoZGwsIHVy bCwgbyk7CisgICAgdXBkYXRlQ2FjaGVTdGF0dXMoZGwsIG8pOwogICAgIHJldHVybiBzdGF0aWNf Y2FzdDxDYWNoZWRDU1NTdHlsZVNoZWV0ICo+KG8pOwogfQogCi1DYWNoZWRTY3JpcHQgKkNhY2hl OjpyZXF1ZXN0U2NyaXB0KERvY0xvYWRlciogZGwsIGNvbnN0IFN0cmluZyYgdXJsLCBib29sIHJl bG9hZCwgdGltZV90IGV4cGlyZURhdGUsIGNvbnN0IERlcHJlY2F0ZWRTdHJpbmcmIGNoYXJzZXQp CitDYWNoZWRTY3JpcHQqIENhY2hlOjpyZXF1ZXN0U2NyaXB0KERvY0xvYWRlciogZGwsIGNvbnN0 IFN0cmluZyYgdXJsLCBib29sIHJlbG9hZCwgdGltZV90IGV4cGlyZURhdGUsIGNvbnN0IERlcHJl Y2F0ZWRTdHJpbmcmIGNoYXJzZXQpCiB7CiAgICAgLy8gdGhpcyBicmluZ3MgdGhlIF91cmwgdG8g YSBzdGFuZGFyZCBmb3JtLi4uCiAgICAgS1VSTCBrdXJsOwpAQCAtMjc0LDcgKzI3NSw3IEBACiAg ICAgICAgIGtkRGVidWcoNjA2MCkgPDwgIkNhY2hlOiB1c2luZyBjYWNoZWQ6ICIgPDwga3VybC51 cmwoKSA8PCBlbmRsOwogI2VuZGlmCiAKLSAgICB1cGRhdGVDYWNoZVN0YXR1cyhkbCwgdXJsLCBv KTsKKyAgICB1cGRhdGVDYWNoZVN0YXR1cyhkbCwgbyk7CiAgICAgcmV0dXJuIHN0YXRpY19jYXN0 PENhY2hlZFNjcmlwdCAqPihvKTsKIH0KIApAQCAtMzI1LDcgKzMyNiw3IEBACiAgICAgICAgIGtk RGVidWcoNjA2MCkgPDwgIkNhY2hlOiB1c2luZyBjYWNoZWQ6ICIgPDwga3VybC51cmwoKSA8PCBl bmRsOwogI2VuZGlmCiAgICAgCi0gICAgdXBkYXRlQ2FjaGVTdGF0dXMoZGwsIHVybCwgbyk7Cisg ICAgdXBkYXRlQ2FjaGVTdGF0dXMoZGwsIG8pOwogICAgIHJldHVybiBzdGF0aWNfY2FzdDxDYWNo ZWRYU0xTdHlsZVNoZWV0Kj4obyk7CiB9CiAjZW5kaWYKQEAgLTM3Nyw3ICszNzgsNyBAQAogICAg ICAgICBrZERlYnVnKDYwNjApIDw8ICJDYWNoZTogdXNpbmcgY2FjaGVkOiAiIDw8IGt1cmwudXJs KCkgPDwgZW5kbDsKICNlbmRpZgogICAgIAotICAgIHVwZGF0ZUNhY2hlU3RhdHVzKGRsLCB1cmws IG8pOworICAgIHVwZGF0ZUNhY2hlU3RhdHVzKGRsLCBvKTsKICAgICByZXR1cm4gc3RhdGljX2Nh c3Q8Q2FjaGVkWEJMRG9jdW1lbnQqPihvKTsKIH0KICNlbmRpZgo=