From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: lux Newsgroups: gmane.emacs.bugs Subject: bug#61709: [PATCH] Security hardening: safely invoke `shell-command*' function. Date: Thu, 23 Feb 2023 21:17:12 +0800 Message-ID: References: <83y1opra5o.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-f1v5vPZinDNwDyN0VQHQ" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="33356"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Evolution 3.46.4 (3.46.4-1.fc37) Cc: 61709@debbugs.gnu.org To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Thu Feb 23 14:19:31 2023 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pVBVS-0008SJ-0l for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 23 Feb 2023 14:19:30 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pVBV9-0007XK-8v; Thu, 23 Feb 2023 08:19:11 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pVBV0-0007S5-4Q for bug-gnu-emacs@gnu.org; Thu, 23 Feb 2023 08:19:02 -0500 Original-Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pVBUz-00077P-SO for bug-gnu-emacs@gnu.org; Thu, 23 Feb 2023 08:19:01 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pVBUz-0004nZ-OP for bug-gnu-emacs@gnu.org; Thu, 23 Feb 2023 08:19:01 -0500 X-Loop: help-debbugs@gnu.org Resent-From: lux Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 23 Feb 2023 13:19:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 61709 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 61709-submit@debbugs.gnu.org id=B61709.167715832118415 (code B ref 61709); Thu, 23 Feb 2023 13:19:01 +0000 Original-Received: (at 61709) by debbugs.gnu.org; 23 Feb 2023 13:18:41 +0000 Original-Received: from localhost ([127.0.0.1]:33380 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pVBUe-0004mx-EL for submit@debbugs.gnu.org; Thu, 23 Feb 2023 08:18:41 -0500 Original-Received: from out203-205-221-190.mail.qq.com ([203.205.221.190]:48615) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pVBUc-0004mh-GD for 61709@debbugs.gnu.org; Thu, 23 Feb 2023 08:18:39 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1677158304; bh=Pbmyic4lP+txhIN/wfxMlMN22ZeloX4VbxEYXMy82g8=; h=Subject:From:To:Cc:Date:In-Reply-To:References; b=uRYJcgyMiQGEWJmbkizt/S3CKCH6MUe29TUhItcaZi5kmUvN7bz8iUjiObzzmtV3F WqEhwBJLEBgTs5TKi8AEEiE4UGQsNVvW5GZyA25dFFdf8GF6yrhKx693iWfugl0Izv IY7JqnGSEa68Mj+XdIzn32J/hHjFQTXeq/h73VC4= Original-Received: from [IPv6:240e:399:e6f:ee32:f815:4044:ba50:97f9] ([240e:399:e6f:ee32:f815:4044:ba50:97f9]) by newxmesmtplogicsvrszb1-0.qq.com (NewEsmtp) with SMTP id 44D3141A; Thu, 23 Feb 2023 21:17:13 +0800 X-QQ-mid: xmsmtpt1677158233tkpaseh01 X-QQ-XMAILINFO: NiDupExshEc7yP5D8gCvf34E2gmdql2rxDXfutWgLC2IF9wcvk3nzn+oFnGX3F uxXHS446JM9IObVQgbxJMYcnXucJwMaByDXMsqXQM0YS4ZaUpix7x8JBjfNHfQeW+UVaa+9eECGd 0okcXhS1dX88FM6UuRPhjMCOioWR3Toovb8fWsAEY2uKws7AdyqFs2jZhbClKvwC6Dq8jfQJ/Ya+ nWE2tjoNhcCQ855wjd4m9eZy0I5Vnagi/L0i/LwKSuZ58DuyKVKCjq1+b4qVSqc56zrNhpwhlqJw Jg9NqYqmcmUFKQf0vCCIJXho6sfjbfxSUpOwctoJOluKPYY1BmVGnpFOtwU7b9FrvQytIZT+LEK3 3hd66DOBrieG8P7ENGApYzS+QYsiNHbfdkNUMxP8K/SEyH8IExa+YE4K183DlfHWmcGlOA6nrkyB 9QLe4dyW6zzLloQV7gmJVqEz9eyNvd+w1imS5Z04VMM+gIaY8UXz/DHUfaSi/G/JKnAWWviJfx99 sMwOF+ZNZepjJvwq4UZyRH0iAkFymzJBjIiDF5WcYuH7S+tj7SCu+bQlawvvHUUBzncP/kZqAV5A PHAnF19zq4Jq0fuuS6Q3mEg5Xm9g0oCMx3nRaq4laUkksnHEj/KMJrIfKBLuU5AMepRUA+4lA4Xx fXj6fkBxA/0SnMSpi7WB3U9JNO9nan2mhRGmPIrJYC/3bm9hy6Or0NQRTH5dpWXoEXXfzZvYZea1 ireAK8MJce+0CY1NGdr1lt4MOqnUGpGz2P0giKyh/goee++DoDEOYayGBYppiPi9e94kayPUboU7 q9Moh1eNPngrNc58dhuFrssAwGpExsa/9pDaotmI X-OQ-MSGID: <10bf7130a4259ee2328f13e389190e99b78ade8b.camel@shellcodes.org> In-Reply-To: <83y1opra5o.fsf@gnu.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:256461 Archived-At: --=-f1v5vPZinDNwDyN0VQHQ Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 T24gV2VkLCAyMDIzLTAyLTIyIGF0IDE3OjI5ICswMjAwLCBFbGkgWmFyZXRza2lpIHdyb3RlOgo+ ID4gQ2M6IFhpIEx1IDxseEBzaGVsbGNvZGVzLm9yZz4KPiA+IEZyb206IFhpIEx1IDxseEBzaGVs bGNvZGVzLm9yZz4KPiA+IERhdGU6IFdlZCwgMjIgRmViIDIwMjMgMjI6MzU6NTQgKzA4MDAKPiA+ IAo+ID4gwqAoZGVmdW4gZmlsZXNldHMtd2hpY2gtY29tbWFuZC1wIChjbWQpCj4gPiDCoMKgICJD YWxsIFwid2hpY2ggQ01EXCIgYW5kIHJldHVybiBub24tbmlsIGlmIHRoZSBjb21tYW5kIHdhcwo+ ID4gZm91bmQuIgo+ID4gQEAgLTEyNjQsOSArMTI2NSwxMSBAQCBmaWxlc2V0cy1zcGF3bi1leHRl cm5hbC12aWV3ZXIKPiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKGZ1bmNh bGwgdndyIGZpbGUpCj4gPiDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIG5pbCkK PiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIChjby1mbGFnCj4gPiAtwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKHNoZWxsLWNvbW1hbmQtdG8tc3RyaW5nIChmb3Jt YXQgIiVzICVzIiB2d3IKPiA+IGFyZ3MpKSkKPiA+ICvCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoCAoc2hlbGwtY29tbWFuZC10by1zdHJpbmcgKHNoZWxsLXF1b3RlLWFyZ3VtZW50Cj4g PiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKGZvcm1hdCAiJXMgJXMiIHZ3cgo+ID4g YXJncykpKSkKPiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgICh0Cj4gPiAtwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKHNoZWxsLWNvbW1hbmQgKGZvcm1hdCAiJXMg JXMmIiB2d3IgYXJncykpCj4gPiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKHNo ZWxsLWNvbW1hbmQgKHNoZWxsLXF1b3RlLWFyZ3VtZW50Cj4gPiArwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIChmb3JtYXQg IiVzICVzJiIgdndyIGFyZ3MpKSkKPiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqAgbmlsKSkpKQo+IAo+IFRoZXNlIHR3byBjYW5ub3QgYmUgcmlnaHQ6IHlvdSBhcmUgcXVvdGlu ZyBzZXZlcmFsIHNlcGFyYXRlCj4gY29tbWFuZC1saW5lIGFyZ3VtZW50cy4KPiAKPiA+IMKgwqDC oMKgwqDCoMKgwqDCoCAoaWYgY28tZmxhZwo+ID4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAg KHByb2duCj4gPiBAQCAtMTU3OCw3ICsxNTgxLDcgQEAgZmlsZXNldHMtcnVuLWNtZAo+ID4gwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgIiAiKSkKPiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKGNtZCAoY29uY2F0IGZuICIgIiBhcmdzKSkpCj4g PiDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAg KGZpbGVzZXRzLWNtZC1zaG93LXJlc3VsdAo+ID4gLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBjbWQgKHNoZWxsLWNvbW1hbmQtdG8tc3RyaW5n IGNtZCkpKSkKPiA+ICvCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqAgY21kIChzaGVsbC1jb21tYW5kLXRvLXN0cmluZyAoc2hlbGwtCj4gPiBxdW90 ZS1hcmd1bWVudCBjbWQpKSkpKQo+ID4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgICgoc3ltYm9scCBmbikKPiA+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIChhcHBseSBmbgo+ID4gwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCAobWFwY2Fu IChsYW1iZGEgKHRoaXMpCj4gCj4gSSB0aGluayB0aGlzIGlzIGFsc28gd3Jvbmc6IGNtZCBpcyBu b3QgYSBzaW5nbGUgd29yZC4KPiAKPiBJbiBnZW5lcmFsLCB5b3UgY2Fubm90IHF1b3RlIGFyYml0 cmFyeSBwYXJ0cyBvZiBhIHNoZWxsIGNvbW1hbmQsIHlvdQo+IGNhbiBvbmx5IHF1b3RlIGVhY2gg Y29tbWFuZC1saW5lIGFyZ3VtZW50IHNlcGFyYXRlbHkuCj4gCj4gCj4gCgpZb3UncmUgcmlnaHQs IHRoYW5rIHlvdS4gSSByZXdyaXRlZCB0aGlzIHBhdGNoLgoKTGV0IG1lIGJyaWVmbHkgZXhwbGFp biB0aGlzIHBhdGNoOgoKMS4gSSB0aGluayBgZmlsZXNldHMtc2VsZWN0LWNvbW1hbmQnIG5vdCBu ZWVkIGZpeGVkLCBiZWNhdXNlIGl0IG5vdAp1c2VkLCBhbmQgSSBjbGVhbmVkIHVwIHJlbGV2YW50 IG9sZCBjb21tZW50cyBpbiBgZmlsZXNldHMtZXh0ZXJuYWwtCnZpZXdlcnMnLgoKMi4gVXNpbmcg YHNoZWxsLXF1b3RlLWFyZ3VtZW50JyB0byByZXBsYWNlIGBmaWxlc2V0cy1xdW90ZScgYW5kCmAo Zm9ybWF0ICIlUyIgLi4uKScuIEJlY2F1c2UgaW4gdGhlIHNoZWxsLCBkb3VibGUgcXVvdGF0aW9u IG1hcmtzIGNhbgpzdGlsbCBleGVjdXRlIHVuZXhwZWN0ZWQgY29kZSwgc3VjaCBhcyAkKCksIGBj b21tYW5kYCBhbmQgJHZhci4KCgoK --=-f1v5vPZinDNwDyN0VQHQ Content-Disposition: attachment; filename*0=0001-Security-hardening-safely-invoke-shell-command-funct.pat; filename*1=ch Content-Type: text/x-patch; name="0001-Security-hardening-safely-invoke-shell-command-funct.patch"; charset="UTF-8" Content-Transfer-Encoding: base64 RnJvbSA2Yjg1YWJiMmRlNTQ1MDk0YTM3MjVkMDAzYTRkZGI3NDRiMWUxZWVjIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBYaSBMdSA8bHhAc2hlbGxjb2Rlcy5vcmc+CkRhdGU6IFRodSwg MjMgRmViIDIwMjMgMjA6NTg6MDAgKzA4MDAKU3ViamVjdDogW1BBVENIXSBTZWN1cml0eSBoYXJk ZW5pbmc6IHNhZmVseSBpbnZva2UgYHNoZWxsLWNvbW1hbmQqJyBmdW5jdGlvbi4KCiogbGlzcC9m aWxlc2V0cy5lbDoKKGZpbGVzZXRzLXNlbGVjdC1jb21tYW5kLCBmaWxlc2V0cy1xdW90ZSk6IFJl bW92ZSB1bnVzZWQgZnVuY3Rpb24uCihmaWxlc2V0cy1leHRlcm5hbC12aWV3ZXJzKTogUmVtb3Zl IG9sZCBjb21tZW50cy4KKGZpbGVzZXRzLXdoaWNoLWNvbW1hbmQsIGZpbGVzZXRzLWdldC1xdW90 ZWQtc2VsZWN0aW9uLApmaWxlc2V0cy1zcGF3bi1leHRlcm5hbC12aWV3ZXIpOiBBZGQgYHNoZWxs LXF1b3RlLWFyZ3VtZW50Jy4KLS0tCiBsaXNwL2ZpbGVzZXRzLmVsIHwgNDAgKysrKysrKysrLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9u cygrKSwgMzEgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvbGlzcC9maWxlc2V0cy5lbCBiL2xp c3AvZmlsZXNldHMuZWwKaW5kZXggMWI3ZTZmZmE4MWYuLmM0ZDUxY2NhZjRhIDEwMDY0NAotLS0g YS9saXNwL2ZpbGVzZXRzLmVsCisrKyBiL2xpc3AvZmlsZXNldHMuZWwKQEAgLTE2MSwxOCArMTYx LDkgQEAgJ2ZpbGVzZXRzLXNvbWUKIChkZWZpbmUtb2Jzb2xldGUtZnVuY3Rpb24tYWxpYXMgJ2Zp bGVzZXRzLW1lbWJlciAjJ2NsLW1lbWJlciAiMjguMSIpCiAoZGVmaW5lLW9ic29sZXRlLWZ1bmN0 aW9uLWFsaWFzICdmaWxlc2V0cy1zdWJsaXN0ICMnc2VxLXN1YnNlcSAiMjguMSIpCiAKLShkZWZ1 biBmaWxlc2V0cy1zZWxlY3QtY29tbWFuZCAoY21kLWxpc3QpCi0gICJTZWxlY3Qgb25lIGNvbW1h bmQgZnJvbSBDTUQtTElTVCAtLSBhIHN0cmluZyB3aXRoIHNwYWNlIHNlcGFyYXRlZCBuYW1lcy4i Ci0gIChsZXQgKCh0aGlzIChzaGVsbC1jb21tYW5kLXRvLXN0cmluZwotCSAgICAgICAoZm9ybWF0 ICJ3aGljaCAtLXNraXAtYWxpYXMgJXMgMj4gJXMgfCBoZWFkIC1uIDEiCi0JCSAgICAgICBjbWQt bGlzdCBudWxsLWRldmljZSkpKSkKLSAgICAoaWYgKGVxdWFsIHRoaXMgIiIpCi0JbmlsCi0gICAg ICAoZmlsZS1uYW1lLW5vbmRpcmVjdG9yeSAoc3Vic3RyaW5nIHRoaXMgMCAoLSAobGVuZ3RoIHRo aXMpIDEpKSkpKSkKLQogKGRlZnVuIGZpbGVzZXRzLXdoaWNoLWNvbW1hbmQgKGNtZCkKICAgIkNh bGwgXCJ3aGljaCBDTURcIi4iCi0gIChzaGVsbC1jb21tYW5kLXRvLXN0cmluZyAoZm9ybWF0ICJ3 aGljaCAlcyIgY21kKSkpCisgIChzaGVsbC1jb21tYW5kLXRvLXN0cmluZyAoZm9ybWF0ICJ3aGlj aCAlcyIgKHNoZWxsLXF1b3RlLWFyZ3VtZW50IGNtZCkpKSkKIAogKGRlZnVuIGZpbGVzZXRzLXdo aWNoLWNvbW1hbmQtcCAoY21kKQogICAiQ2FsbCBcIndoaWNoIENNRFwiIGFuZCByZXR1cm4gbm9u LW5pbCBpZiB0aGUgY29tbWFuZCB3YXMgZm91bmQuIgpAQCAtNTUxLDE2ICs1NDIsNiBAQCBmaWxl c2V0cy1jb21tYW5kcwogCiAoZGVmY3VzdG9tIGZpbGVzZXRzLWV4dGVybmFsLXZpZXdlcnMKICAg KGxldAotICAgICAgOzsgKChwcy1jbWQgIChvciAoYW5kIChib3VuZHAgJ215LXBzLXZpZXdlcikg bXktcHMtdmlld2VyKQotICAgICAgOzsgICAgCSAgICAoZmlsZXNldHMtc2VsZWN0LWNvbW1hbmQg ImdndiBndiIpKSkKLSAgICAgIDs7ICAocGRmLWNtZCAob3IgKGFuZCAoYm91bmRwICdteS1wcy12 aWV3ZXIpIG15LXBkZi12aWV3ZXIpCi0gICAgICA7OyAgICAJICAgIChmaWxlc2V0cy1zZWxlY3Qt Y29tbWFuZCAieHBkZiBhY3JvcmVhZCIpKSkKLSAgICAgIDs7ICAoZHZpLWNtZCAob3IgKGFuZCAo Ym91bmRwICdteS1wcy12aWV3ZXIpIG15LWR2aS12aWV3ZXIpCi0gICAgICA7OyAgICAJICAgIChm aWxlc2V0cy1zZWxlY3QtY29tbWFuZCAieGR2aSB0a2R2aSIpKSkKLSAgICAgIDs7ICAoZG9jLWNt ZCAob3IgKGFuZCAoYm91bmRwICdteS1wcy12aWV3ZXIpIG15LWRvYy12aWV3ZXIpCi0gICAgICA7 OyAgICAJICAgIChmaWxlc2V0cy1zZWxlY3QtY29tbWFuZCAiYW50aXdvcmQiKSkpCi0gICAgICA7 OyAgKHBpYy1jbWQgKG9yIChhbmQgKGJvdW5kcCAnbXktcHMtdmlld2VyKSBteS1waWMtdmlld2Vy KQotICAgICAgOzsgICAgCSAgICAoZmlsZXNldHMtc2VsZWN0LWNvbW1hbmQgImdxdmlldyBlZSBk aXNwbGF5IikpKSkKICAgICAgICgocHMtY21kICAiZ2d2IikKICAgICAgICAocGRmLWNtZCAieHBk ZiIpCiAgICAgICAgKGR2aS1jbWQgInhkdmkiKQpAQCAtMTA4OSwxMCArMTA3MCw2IEBAIGZpbGVz ZXRzLWRpcmVjdG9yeS1maWxlcwogICAgKHQKICAgICAoZXJyb3IgIkZpbGVzZXRzOiAlcyBkb2Vz IG5vdCBleGlzdCIgZGlyKSkpKQogCi0oZGVmdW4gZmlsZXNldHMtcXVvdGUgKHR4dCkKLSAgIlJl dHVybiBUWFQgaW4gcXVvdGVzLiIKLSAgKGNvbmNhdCAiXCIiIHR4dCAiXCIiKSkKLQogKGRlZnVu IGZpbGVzZXRzLWdldC1zZWxlY3Rpb24gKCkKICAgIkdldCB0aGUgdGV4dCBiZXR3ZWVuIG1hcmsg YW5kIHBvaW50IC0tIGkuZS4gdGhlIHNlbGVjdGlvbiBvciByZWdpb24uIgogICAobGV0ICgobSAo bWFyaykpCkBAIC0xMTAzLDcgKzEwODAsNyBAQCBmaWxlc2V0cy1nZXQtc2VsZWN0aW9uCiAKIChk ZWZ1biBmaWxlc2V0cy1nZXQtcXVvdGVkLXNlbGVjdGlvbiAoKQogICAiUmV0dXJuIHRoZSBjdXJy ZW50bHkgc2VsZWN0ZWQgdGV4dCBpbiBxdW90ZXMuIgotICAoZmlsZXNldHMtcXVvdGUgKGZpbGVz ZXRzLWdldC1zZWxlY3Rpb24pKSkKKyAgKHNoZWxsLXF1b3RlLWFyZ3VtZW50IChmaWxlc2V0cy1n ZXQtc2VsZWN0aW9uKSkpCiAKIChkZWZ1biBmaWxlc2V0cy1nZXQtc2hvcnRjdXQgKG4pCiAgICJD cmVhdGUgbWVudSBzaG9ydGN1dHMgYmFzZWQgb24gbnVtYmVyIE4uIgpAQCAtMTI1MCwxMiArMTIy NywxMyBAQCBmaWxlc2V0cy1zcGF3bi1leHRlcm5hbC12aWV3ZXIKIAkJICAgICAgIChpZiBmbXQK IAkJCSAgIChtYXBjb25jYXQKIAkJCSAgICAobGFtYmRhICh0aGlzKQotCQkJICAgICAgKGlmIChz dHJpbmdwIHRoaXMpIChmb3JtYXQgdGhpcyBmaWxlKQotCQkJCShmb3JtYXQgIiVTIiAoaWYgKGZ1 bmN0aW9ucCB0aGlzKQotCQkJCSAgICAgICAgICAgICAgICAgKGZ1bmNhbGwgdGhpcykKLQkJCQkg ICAgICAgICAgICAgICB0aGlzKSkpKQorCQkJICAgICAgKGlmIChzdHJpbmdwIHRoaXMpCisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKGZvcm1hdCB0aGlzIChzaGVsbC1xdW90ZS1h cmd1bWVudCBmaWxlKSkKKwkJCQkoc2hlbGwtcXVvdGUtYXJndW1lbnQgKGlmIChmdW5jdGlvbnAg dGhpcykKKwkJCQkgICAgICAgICAgICAgICAgICAgICAgICAgIChmdW5jYWxsIHRoaXMpCisJCQkJ ICAgICAgICAgICAgICAgICAgICAgICAgdGhpcykpKSkKIAkJCSAgICBmbXQgIiIpCi0JCQkgKGZv cm1hdCAiJVMiIGZpbGUpKSkpCisJCQkgKHNoZWxsLXF1b3RlLWFyZ3VtZW50IGZpbGUpKSkpCiAJ ICAgICAgIChvdXRwdXQKIAkJKGNvbmQKIAkJICgoYW5kIChmdW5jdGlvbnAgdndyKSBjby1mbGFn KQpAQCAtMTI2NCw3ICsxMjQyLDcgQEAgZmlsZXNldHMtc3Bhd24tZXh0ZXJuYWwtdmlld2VyCiAJ CSAgKGZ1bmNhbGwgdndyIGZpbGUpCiAJCSAgbmlsKQogCQkgKGNvLWZsYWcKLQkJICAoc2hlbGwt Y29tbWFuZC10by1zdHJpbmcgKGZvcm1hdCAiJXMgJXMiIHZ3ciBhcmdzKSkpCisgICAgICAgICAg ICAgICAgICAoc2hlbGwtY29tbWFuZC10by1zdHJpbmcgKGZvcm1hdCAiJXMgJXMiIHZ3ciBhcmdz KSkpCiAJCSAodAogCQkgIChzaGVsbC1jb21tYW5kIChmb3JtYXQgIiVzICVzJiIgdndyIGFyZ3Mp KQogCQkgIG5pbCkpKSkKLS0gCjIuMzkuMgoK --=-f1v5vPZinDNwDyN0VQHQ--