From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: bug#30414: Libreoffice CVE-2018-6871 [remote read of any local files] Date: Sun, 11 Feb 2018 14:29:02 +0000 Message-ID: <1518359342.2320488.1266983880.27284CC4@webmail.messagingengine.com> References: <20180210185246.GA18573@jasmine.lan> <20180210214952.GA19621@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="_----------=_151835934223204882" Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50704) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eksdq-0003gM-7E for bug-guix@gnu.org; Sun, 11 Feb 2018 09:30:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eksdm-00050J-Mn for bug-guix@gnu.org; Sun, 11 Feb 2018 09:30:06 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:58036) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1eksdm-00050A-G8 for bug-guix@gnu.org; Sun, 11 Feb 2018 09:30:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1eksdm-0006fU-9l for bug-guix@gnu.org; Sun, 11 Feb 2018 09:30:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Leo Famulari , 30414@debbugs.gnu.org This is a multi-part message in MIME format. --_----------=_151835934223204882 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" [the caf=C3=A9 I'm at is blocking outgoing email, so resending through a br= owser] On Sun, Feb 11, 2018, at 1:27 AM, Marius Bakke wrote: >=20 >=20 > On February 10, 2018 10:49:52 PM GMT+01:00, Leo Famulari=20 > wrote: > >I'm trying to update LibreOffice to 5.4.5.1. > > > >This version of LibreOffice requires cppunit to be updated to 1.14.0. > > > >However, this new version of cppunit requires C++11. > > > >This is not the default C++ standard in GCC 5, so this update requires > >sprinkling "CXXFLAGS=3D-std=3Dc++11" across several packages, AFAICT. >=20 > Could we package the newer version separately and override CXXFLAGS for=20 > libreoffice only? I gave this a go, and there were (of course) a lot more changes necessary to make this newer libreoffice build. In particular, it now works with an external xmlsec (albeit NSS only), and it wants to build PDFium(!) in the same fashion as xmlsec was previously. However PDFium fails to build due to requiring newer C++ features, and my attempts at patching "external/pdfium/Library_pdfium.mk" to add CXXFLAGS were unsuccessful. So in the end I disabled PDFium support. It also required libjpeg-turbo instead of libjpeg, although this is supposedly fixed in 6.0.1: . Then there were some other problems related to not finding GPGME headers, as well as an upstream regression when GTK2 support is disabled. Without further ado, here is the patch. I'm still building it, but plan to push shortly if there are no further issues.=20 --_----------=_151835934223204882 Content-Disposition: attachment; filename="0001-gnu-libreoffice-Update-to-5.4.5.1-CVE-2018-6871.patch" Content-Id: <1518359274.2320374.8834046416eb3884aca6bc52e87e3fa97ecb9df6.144F0BB5@content.messagingengine.com> Content-Transfer-Encoding: base64 Content-Type: text/x-patch; name="0001-gnu-libreoffice-Update-to-5.4.5.1-CVE-2018-6871.patch" RnJvbSBhMjhlODJlMWUzZDQ4MGQ1ZWRmMzc0Y2VhMDYyNTM2ZDRjOGQ2ZDgy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBNYXJpdXMgQmFra2Ug PG1iYWtrZUBmYXN0bWFpbC5jb20+CkRhdGU6IFN1biwgMTEgRmViIDIwMTgg MTE6NDY6MjcgKzAxMDAKU3ViamVjdDogW1BBVENIXSBnbnU6IGxpYnJlb2Zm aWNlOiBVcGRhdGUgdG8gNS40LjUuMSBbQ1ZFLTIwMTgtNjg3MV0uCgoqIGdu dS9wYWNrYWdlcy9jaGVjay5zY20gKGNwcHVuaXQtMS4xNCk6IE5ldyBwdWJs aWMgdmFyaWFibGUuCiogZ251L3BhY2thZ2VzL2xpYnJlb2ZmaWNlLnNjbSAo eG1sc2VjLXNyYy1saWJyZW9mZmljZSk6IFJlbW92ZSB2YXJpYWJsZS4KKGxp YnJlb2ZmaWNlKTogVXBkYXRlIHRvIDUuNC41LjEuCltuYXRpdmUtaW5wdXRz XTogQ2hhbmdlIENQUFVOSVQgdG8gQ1BQVU5JVC0xLjE0LgpbaW5wdXRzXTog QWRkIEdQR01FIGFuZCBYTUxTRUMtTlNTLiAgUmVtb3ZlIFhNTFNFQy1TUkMt TElCUkVPRkZJQ0UuICBSZXBsYWNlCkxJQkpQRUcgd2l0aCBMSUJKUEVHLVRV UkJPLgpbYXJndW1lbnRzXTogUmVtb3ZlIHhtbHNlYyBjb2RlIGZyb20gUFJF UEFSRS1TUkMtUEhBU0UuICBNYWtlIHN1cmUgR1BHTUUrKwpoZWFkZXJzIGFy ZSBmb3VuZC4gIEFkZCB3b3JrYXJvdW5kIGZvciA8aHR0cHM6Ly9idWdzLmdl bnRvby5vcmcvNjQxODEyPi4gIEFkZAoiLS1kaXNhYmxlLXBkZml1bSIgdG8g Izpjb25maWd1cmUtZmxhZ3MuCiogZ251L3BhY2thZ2VzL3htbC5zY20gKHht bHNlYy1uc3MpOiBOZXcgcHVibGljIHZhcmlhYmxlLgotLS0KIGdudS9wYWNr YWdlcy9jaGVjay5zY20gICAgICAgfCAxNyArKysrKysrKysrKysKIGdudS9w YWNrYWdlcy9saWJyZW9mZmljZS5zY20gfCA2MSArKysrKysrKysrKysrKysr KysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogZ251L3BhY2thZ2VzL3ht bC5zY20gICAgICAgICB8IDEyICsrKysrKysrLQogMyBmaWxlcyBjaGFuZ2Vk LCA1NiBpbnNlcnRpb25zKCspLCAzNCBkZWxldGlvbnMoLSkKCmRpZmYgLS1n aXQgYS9nbnUvcGFja2FnZXMvY2hlY2suc2NtIGIvZ251L3BhY2thZ2VzL2No ZWNrLnNjbQppbmRleCAxMjc2YzBmZGEuLjhmMjFiYWEwOSAxMDA2NDQKLS0t IGEvZ251L3BhY2thZ2VzL2NoZWNrLnNjbQorKysgYi9nbnUvcGFja2FnZXMv Y2hlY2suc2NtCkBAIC0xNTcsNiArMTU3LDIzIEBAIHVuaXQgdGVzdGluZy4g IFRlc3Qgb3V0cHV0IGlzIGluIFhNTCBmb3IgYXV0b21hdGljIHRlc3Rpbmcg YW5kIEdVSSBiYXNlZCBmb3IKIHN1cGVydmlzZWQgdGVzdHMuIikKICAgICAo bGljZW5zZSBsaWNlbnNlOmxncGwyLjEpKSkgOyBubyBjb3B5cmlnaHQgbm90 aWNlcy4gTEdQTDIuMSBpcyBpbiB0aGUgdGFyYmFsbAogCis7OyBTb21lIHBh Y2thZ2VzIHJlcXVpcmUgdGhpcyBuZXdlciB2ZXJzaW9uIG9mIGNwcHVuaXQu ICBIb3dldmVyLCBpdCBuZWVkcworOzsgQysrMTEgc3VwcG9ydCwgd2hpY2gg aXMgbm90IGVuYWJsZWQgYnkgZGVmYXVsdCBpbiBvdXIgY3VycmVudCBHQ0Ms IGFuZAorOzsgdXBkYXRpbmcgaW4tcGxhY2Ugd291bGQgcmVxdWlyZSBhZGRp bmcgQ1hYRkxBR1MgdG8gbWFueSBkZXBlbmRlbnQgcGFja2FnZXMuCis7OyBU aHVzLCBrZWVwIGFzIGEgc2VwYXJhdGUgdmFyaWFibGUgZm9yIG5vdy4KKzs7 IFRPRE86IFJlbW92ZSB0aGlzIHdoZW4gb3VyIGRlZmF1bHQgR0NDIGlzIHVw ZGF0ZWQgdG8gNiBvciBoaWdoZXIuCisoZGVmaW5lLXB1YmxpYyBjcHB1bml0 LTEuMTQKKyAgKHBhY2thZ2UKKyAgICAoaW5oZXJpdCBjcHB1bml0KQorICAg ICh2ZXJzaW9uICIxLjE0LjAiKQorICAgIChzb3VyY2UgKG9yaWdpbgorICAg ICAgICAgICAgICAobWV0aG9kIHVybC1mZXRjaCkKKyAgICAgICAgICAgICAg KHVyaSAoc3RyaW5nLWFwcGVuZCAiaHR0cDovL2Rldi13d3cubGlicmVvZmZp Y2Uub3JnL3NyYy8iCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgImNwcHVuaXQtIiB2ZXJzaW9uICIudGFyLmd6IikpCisgICAgICAgICAg ICAgIChzaGEyNTYKKyAgICAgICAgICAgICAgIChiYXNlMzIKKyAgICAgICAg ICAgICAgICAiMTAyN2N5Zng1Z3Nqa2RrYWY2YzJ3bmpoNjg4ODJncnc4bjY3 MjAxOGNqM3ZzOWxyaG1peCIpKSkpKSkKKwogKGRlZmluZS1wdWJsaWMgY2F0 Y2gtZnJhbWV3b3JrCiAgIChwYWNrYWdlCiAgICAgKG5hbWUgImNhdGNoIikK ZGlmZiAtLWdpdCBhL2dudS9wYWNrYWdlcy9saWJyZW9mZmljZS5zY20gYi9n bnUvcGFja2FnZXMvbGlicmVvZmZpY2Uuc2NtCmluZGV4IDc5OWIwNjI0My4u YjI1NDZlMTQ2IDEwMDY0NAotLS0gYS9nbnUvcGFja2FnZXMvbGlicmVvZmZp Y2Uuc2NtCisrKyBiL2dudS9wYWNrYWdlcy9saWJyZW9mZmljZS5zY20KQEAg LTcsNyArNyw3IEBACiA7OzsgQ29weXJpZ2h0IMKpIDIwMTcgVG9iaWFzIEdl ZXJpbmNreC1SaWNlIDxtZUB0b2JpYXMuZ3I+CiA7OzsgQ29weXJpZ2h0IMKp IDIwMTcgQW5keSBXaW5nbyA8d2luZ29AaWdhbGlhLmNvbT4KIDs7OyBDb3B5 cmlnaHQgwqkgMjAxNyBMdWRvdmljIENvdXJ0w6hzIDxsdWRvQGdudS5vcmc+ Ci07OzsgQ29weXJpZ2h0IMKpIDIwMTcgTWFyaXVzIEJha2tlIDxtYmFra2VA ZmFzdG1haWwuY29tPgorOzs7IENvcHlyaWdodCDCqSAyMDE3LCAyMDE4IE1h cml1cyBCYWtrZSA8bWJha2tlQGZhc3RtYWlsLmNvbT4KIDs7OyBDb3B5cmln aHQgwqkgMjAxNyBSdXRnZXIgSGVsbGluZyA8cmhlbGxpbmdAbXlrb2xhYi5j b20+CiA7OzsKIDs7OyBUaGlzIGZpbGUgaXMgcGFydCBvZiBHTlUgR3VpeC4K QEAgLTU0LDYgKzU0LDcgQEAKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2Fn ZXMgZ2xpYikKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgZ25vbWUp CiAgICM6dXNlLW1vZHVsZSAoZ251IHBhY2thZ2VzIGdwZXJmKQorICAjOnVz ZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBnbnVwZykKICAgIzp1c2UtbW9kdWxl IChnbnUgcGFja2FnZXMgZ251emlsbGEpCiAgICM6dXNlLW1vZHVsZSAoZ251 IHBhY2thZ2VzIGdzdHJlYW1lcikKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFj a2FnZXMgZ3RrKQpAQCAtODM5LDIyICs4NDAsMTAgQEAgYW5kIHRvIHJldHVy biBpbmZvcm1hdGlvbiBvbiBwcm9udW5jaWF0aW9ucywgbWVhbmluZ3MgYW5k IHN5bm9ueW1zLiIpCiAgICAgKGxpY2Vuc2UgKG5vbi1jb3B5bGVmdCAiZmls ZTovL0NPUFlJTkciCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAiU2Vl IENPUFlJTkcgaW4gdGhlIGRpc3RyaWJ1dGlvbi4iKSkpKQogCi07OyBMaWJy ZU9mZmljZSByZXF1aXJlcyBhbiB4bWxzZWMgc291cmNlIHRhcmJhbGw7IGl0 IGRvZXMgbm90IGV2ZW4gY2hlY2sKLTs7IGZvciB0aGUgcHJlc2VuY2Ugb2Yg YW4gZXh0ZXJuYWxseSBjb21waWxlZCBsaWJyYXJ5LgotKGRlZmluZSB4bWxz ZWMtc3JjLWxpYnJlb2ZmaWNlCi0gIChvcmlnaW4KLSAgICAobWV0aG9kIHVy bC1mZXRjaCkKLSAgICAodXJpCi0gICAgICAoc3RyaW5nLWFwcGVuZAotICAg ICAgICJodHRwOi8vZGV2LXd3dy5saWJyZW9mZmljZS5vcmcvc3JjLyIKLSAg ICAgICAiODZiMWRhYWE0MzhmNWE3YmVhOWE1MmQ3Yjk3OTlhYzAteG1sc2Vj MS0xLjIuMjMudGFyLmd6IikpCi0gICAgKHNoYTI1NiAoYmFzZTMyCi0gICAg ICAgICAgICAgIjE3cWZ3NWNya3FuNHY2eGJranhyanZjY2NmYzAwZHkwNTM4 OTJ3cnd2NTRxZGs4bjdtMjEiKSkpKQotCiAoZGVmaW5lLXB1YmxpYyBsaWJy ZW9mZmljZQogICAocGFja2FnZQogICAgIChuYW1lICJsaWJyZW9mZmljZSIp Ci0gICAgKHZlcnNpb24gIjUuMy43LjIiKQorICAgICh2ZXJzaW9uICI1LjQu NS4xIikKICAgICAoc291cmNlCiAgICAgIChvcmlnaW4KICAgICAgIChtZXRo b2QgdXJsLWZldGNoKQpAQCAtODYzLDcgKzg1Miw3IEBAIGFuZCB0byByZXR1 cm4gaW5mb3JtYXRpb24gb24gcHJvbnVuY2lhdGlvbnMsIG1lYW5pbmdzIGFu ZCBzeW5vbnltcy4iKQogICAgICAgICAgICJodHRwczovL2Rvd25sb2FkLmRv Y3VtZW50Zm91bmRhdGlvbi5vcmcvbGlicmVvZmZpY2Uvc3JjLyIKICAgICAg ICAgICAodmVyc2lvbi1wcmVmaXggdmVyc2lvbiAzKSAiL2xpYnJlb2ZmaWNl LSIgdmVyc2lvbiAiLnRhci54eiIpKQogICAgICAgKHNoYTI1NiAoYmFzZTMy Ci0gICAgICAgICAgICAgICAiMHo3ZnNzcDBqY2owOXd4YWQxd21oeTY5bjcx YTJtd2w5MzNseHA5ZHo1c2R2em5jeG15MyIpKSkpCisgICAgICAgICAgICAg ICAiMTY3Ymg2amd5aGZjdm4zZzd4Z2hrZzRuYjk5aDkxZGl5cGRscnk1ZGYy MXhzOGJpczVnYiIpKSkpCiAgICAgKGJ1aWxkLXN5c3RlbSBnbnUtYnVpbGQt c3lzdGVtKQogICAgIChuYXRpdmUtaW5wdXRzCiAgICAgIGAoOzsgYXV0b3Jl Y29uZiBpcyBydW4gYnkgdGhlIExpYnJlT2ZmaWNlIGJ1aWxkIHN5c3RlbSwg c2luY2UgYWZ0ZXIKQEAgLTg3Miw3ICs4NjEsNyBAQCBhbmQgdG8gcmV0dXJu IGluZm9ybWF0aW9uIG9uIHByb251bmNpYXRpb25zLCBtZWFuaW5ncyBhbmQg c3lub255bXMuIikKICAgICAgICAoImF1dG9jb25mIiAsYXV0b2NvbmYpCiAg ICAgICAgKCJhdXRvbWFrZSIgLGF1dG9tYWtlKQogICAgICAgICgiYmlzb24i ICxiaXNvbikKLSAgICAgICAoImNwcHVuaXQiICxjcHB1bml0KQorICAgICAg ICgiY3BwdW5pdCIgLGNwcHVuaXQtMS4xNCkKICAgICAgICAoImZsZXgiICxm bGV4KQogICAgICAgICgicGtnLWNvbmZpZyIgLHBrZy1jb25maWcpCiAgICAg ICAgKCJweXRob24iICxweXRob24td3JhcHBlcikKQEAgLTg4OCw2ICs4Nzcs NyBAQCBhbmQgdG8gcmV0dXJuIGluZm9ybWF0aW9uIG9uIHByb251bmNpYXRp b25zLCBtZWFuaW5ncyBhbmQgc3lub255bXMuIikKICAgICAgICAoImdsZXci ICxnbGV3KQogICAgICAgICgiZ2xtIiAsZ2xtKQogICAgICAgICgiZ3BlcmYi ICxncGVyZikKKyAgICAgICAoImdwZ21lIiAsZ3BnbWUpCiAgICAgICAgKCJn cmFwaGl0ZTIiICxncmFwaGl0ZTIpCiAgICAgICAgKCJnc3QtcGx1Z2lucy1i YXNlIiAsZ3N0LXBsdWdpbnMtYmFzZSkKICAgICAgICAoImd0aysiICxndGsr KQpAQCAtODk3LDcgKzg4Nyw3IEBAIGFuZCB0byByZXR1cm4gaW5mb3JtYXRp b24gb24gcHJvbnVuY2lhdGlvbnMsIG1lYW5pbmdzIGFuZCBzeW5vbnltcy4i KQogICAgICAgICgibGliYWJ3IiAsbGliYWJ3KQogICAgICAgICgibGliY2Ry IiAsbGliY2RyKQogICAgICAgICgibGliY21pcyIgLGxpYmNtaXMpCi0gICAg ICAgKCJsaWJqcGVnIiAsbGlianBlZykKKyAgICAgICAoImxpYmpwZWctdHVy Ym8iICxsaWJqcGVnLXR1cmJvKQogICAgICAgICgibGliZS1ib29rIiAsbGli ZS1ib29rKQogICAgICAgICgibGliZXRvbnllayIgLGxpYmV0b255ZWspCiAg ICAgICAgKCJsaWJleHR0ZXh0Y2F0IiAsbGliZXh0dGV4dGNhdCkKQEAgLTkz NSw3ICs5MjUsNyBAQCBhbmQgdG8gcmV0dXJuIGluZm9ybWF0aW9uIG9uIHBy b251bmNpYXRpb25zLCBtZWFuaW5ncyBhbmQgc3lub255bXMuIikKICAgICAg ICAoInVuaXhvZGJjIiAsdW5peG9kYmMpCiAgICAgICAgKCJ1bnppcCIgLHVu emlwKQogICAgICAgICgidmlncmEiICx2aWdyYSkKLSAgICAgICAoInhtbHNl Yy1zcmMiICx4bWxzZWMtc3JjLWxpYnJlb2ZmaWNlKQorICAgICAgICgieG1s c2VjIiAseG1sc2VjLW5zcykKICAgICAgICAoInppcCIgLHppcCkpKQogICAg IChhcmd1bWVudHMKICAgICAgYCgjOnRlc3RzPyAjZiA7IEJ1aWxkaW5nIHRo ZSB0ZXN0cyBhbHJlYWR5IGZhaWxzLgpAQCAtOTQ0LDI2ICs5MzQsMjcgQEAg YW5kIHRvIHJldHVybiBpbmZvcm1hdGlvbiBvbiBwcm9udW5jaWF0aW9ucywg bWVhbmluZ3MgYW5kIHN5bm9ueW1zLiIpCiAgICAgICAgICAobW9kaWZ5LXBo YXNlcyAlc3RhbmRhcmQtcGhhc2VzCiAgICAgICAgICAgIChhZGQtYmVmb3Jl ICdjb25maWd1cmUgJ3ByZXBhcmUtc3JjCiAgICAgICAgICAgICAgKGxhbWJk YSogKCM6a2V5IGlucHV0cyAjOmFsbG93LW90aGVyLWtleXMpCi0gICAgICAg ICAgICAgICAobGV0ICgoeG1sc2VjIChhc3NvYy1yZWYgaW5wdXRzICJ4bWxz ZWMtc3JjIikpKQorICAgICAgICAgICAgICAgKGxldCAoKGdwZ21lIChhc3Nv Yy1yZWYgaW5wdXRzICJncGdtZSIpKSkKICAgICAgICAgICAgICAgICAgKHN1 YnN0aXR1dGUqCiAgICAgICAgICAgICAgICAgICAgKGxpc3QgInN5c3VpL0N1 c3RvbVRhcmdldF9zaGFyZS5tayIKICAgICAgICAgICAgICAgICAgICAgICAg ICAic29sZW52L2didWlsZC9nYnVpbGQubWsiCiAgICAgICAgICAgICAgICAg ICAgICAgICAgInNvbGVudi9nYnVpbGQvcGxhdGZvcm0vdW54Z2NjLm1rIikK ICAgICAgICAgICAgICAgICAgICAoKCIvYmluL3NoIikgKHdoaWNoICJzaCIp KSkKLSAgICAgICAgICAgICAgICAgKG1rZGlyICJleHRlcm5hbC90YXJiYWxs cyIpCi0gICAgICAgICAgICAgICAgIChzeW1saW5rCi0gICAgICAgICAgICAg ICAgICAgeG1sc2VjCi0gICAgICAgICAgICAgICAgICAgKHN0cmluZy1hcHBl bmQgImV4dGVybmFsL3RhcmJhbGxzLyIKLSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAiODZiMWRhYWE0MzhmNWE3YmVhOWE1MmQ3Yjk3OTlh YzAtIgotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJ4bWxz ZWMxLTEuMi4yMy50YXIuZ3oiKSkKLSAgICAgICAgICAgICAgICAgOzsgVGhl IGZvbGxvd2luZyBpcyByZXF1aXJlZCBmb3IgYnVpbGRpbmcgeG1sc2VjIGZy b20gdGhlCi0gICAgICAgICAgICAgICAgIDs7IHVucGF0Y2hlZCBleHRlcm5h bCB0YXJiYWxsOyBzaW5jZSAiY29uZmlndXJlIiBzdGFydHMgd2l0aAotICAg ICAgICAgICAgICAgICA7OyAiL2Jpbi9zaCIsIGl0IG5lZWRzIHRvIGJlIGV4 ZWN1dGVkIGJ5IGEgY29tbWFuZCBpbnZva2luZwotICAgICAgICAgICAgICAg ICA7OyB0aGUgc2hlbGwuCi0gICAgICAgICAgICAgICAgIChzZXRlbnYgIlNI RUxMIiAod2hpY2ggImJhc2giKSkKLSAgICAgICAgICAgICAgICAgKHNldGVu diAiQ09ORklHX1NIRUxMIiAod2hpY2ggImJhc2giKSkKLSAgICAgICAgICAg ICAgICAgKHN1YnN0aXR1dGUqICJleHRlcm5hbC9saWJ4bWxzZWMvRXh0ZXJu YWxQcm9qZWN0X3htbHNlYy5tayIKLSAgICAgICAgICAgICAgICAgICAoKCIu L2NvbmZpZ3VyZSIpICIkKENPTkZJR19TSEVMTCkgLi9jb25maWd1cmUiICkp CisKKyAgICAgICAgICAgICAgICAgOzsgR1BHTUUrKyBoZWFkZXJzIGFyZSBp bnN0YWxsZWQgaW4gYSBncGdtZSsrIHN1YmRpcmVjdG9yeSwKKyAgICAgICAg ICAgICAgICAgOzsgYnV0IGZpbGVzIGluICJ4bWxzZWN1cml0eS9zb3VyY2Uv Z3BnLyIgZXhwZWN0IHRvIGZpbmQgdGhlbQorICAgICAgICAgICAgICAgICA7 OyBvbiB0aGUgaW5jbHVkZSBwYXRoIHdpdGhvdXQgYSBwcmVmaXguCisgICAg ICAgICAgICAgICAgIChzdWJzdGl0dXRlKiAieG1sc2VjdXJpdHkvTGlicmFy eV94c2VjX3htbHNlYy5tayIKKyAgICAgICAgICAgICAgICAgICAoKCJcXCRc XCRcXChJTkNMVURFXFwpIikKKyAgICAgICAgICAgICAgICAgICAgKHN0cmlu Zy1hcHBlbmQgIiQkKElOQ0xVREUpIC1JIiBncGdtZSAiL2luY2x1ZGUvZ3Bn bWUrKyIpKSkKKworICAgICAgICAgICAgICAgICA7OyBYWFg6IFdoZW4gR1RL MiBpcyBkaXNhYmxlZCwgb25lIGhlYWRlciBmaWxlIGlzIG5vdCBpbmNsdWRl ZC4KKyAgICAgICAgICAgICAgICAgOzsgVGhpcyBpcyBsaWtlbHkgZml4ZWQg aW4gbGF0ZXIgdmVyc2lvbnMuICBTZWUgYWxzbworICAgICAgICAgICAgICAg ICA7OyA8aHR0cHM6Ly9idWdzLmdlbnRvby5vcmcvNjQxODEyPi4KKyAgICAg ICAgICAgICAgICAgKHN1YnN0aXR1dGUqICJ2Y2wvdW54L2d0azMvZ3RrM2d0 a2ZyYW1lLmN4eCIKKyAgICAgICAgICAgICAgICAgICAoKCIjaW5jbHVkZSA8 dW54L2d0ay9ndGtnZGkuaHh4PiIpCisgICAgICAgICAgICAgICAgICAgICIj aW5jbHVkZSA8dW54L2d0ay9ndGtnZGkuaHh4PlxuI2luY2x1ZGUgPHVueC9n dGsvZ3Rrc2FsbWVudS5oeHg+IikpCisKICAgICAgICAgICAgICAgICAgI3Qp KSkKICAgICAgICAgICAgKGFkZC1hZnRlciAnaW5zdGFsbCAnYmluLWFuZC1k ZXNrdG9wLWluc3RhbGwKICAgICAgICAgICAgICA7OyBDcmVhdGUgJ3NvZmZp Y2UnIGFuZCAnbGlicmVvZmZpY2UnIHN5bWxpbmtzIHRvIHRoZSBleGVjdXRh YmxlCkBAIC0xMDM3LDYgKzEwMjgsMTAgQEAgYW5kIHRvIHJldHVybiBpbmZv cm1hdGlvbiBvbiBwcm9udW5jaWF0aW9ucywgbWVhbmluZ3MgYW5kIHN5bm9u eW1zLiIpCiAgICAgICAgICAgIi0tZGlzYWJsZS1jb2lubXAiCiAgICAgICAg ICAgIi0tZGlzYWJsZS1maXJlYmlyZC1zZGJjIiA7IGVtYmVkZGVkIGZpcmVi aXJkCiAgICAgICAgICAgIi0tZGlzYWJsZS1nbHRmIgorICAgICAgICAgIDs7 IFhYWDogUERGaXVtIHN1cHBvcnQgcmVxdWlyZXMgZmV0Y2hpbmcgYW4gZXh0 ZXJuYWwgdGFyYmFsbCBhbmQKKyAgICAgICAgICA7OyBwYXRjaGluZyB0aGUg YnVpbGQgc2NyaXB0cyB0byB3b3JrIHdpdGggR0NDNS4gIFRyeSBlbmFibGlu ZyB0aGlzCisgICAgICAgICAgOzsgd2hlbiBvdXIgZGVmYXVsdCBjb21waWxl ciBpcyA+PUdDQyA2LgorICAgICAgICAgICItLWRpc2FibGUtcGRmaXVtIgog ICAgICAgICAgICItLWRpc2FibGUtZ3RrIiA7IGRpc2FibGUgdXNlIG9mIEdU SysgMgogICAgICAgICAgICItLXdpdGhvdXQtZG94eWdlbiIpKSkKICAgICAo aG9tZS1wYWdlICJodHRwczovL3d3dy5saWJyZW9mZmljZS5vcmcvIikKZGlm ZiAtLWdpdCBhL2dudS9wYWNrYWdlcy94bWwuc2NtIGIvZ251L3BhY2thZ2Vz L3htbC5zY20KaW5kZXggYTA5Mzc1ODJmLi4zOWNmYzQ1MzAgMTAwNjQ0Ci0t LSBhL2dudS9wYWNrYWdlcy94bWwuc2NtCisrKyBiL2dudS9wYWNrYWdlcy94 bWwuc2NtCkBAIC0xMyw3ICsxMyw3IEBACiA7OzsgQ29weXJpZ2h0IMKpIDIw MTYgSmFuIE5pZXV3ZW5odWl6ZW4gPGphbm5la2VAZ251Lm9yZz4KIDs7OyBD b3B5cmlnaHQgwqkgMjAxNiwgMjAxNyBuZzAgPGNvbnRhY3QubmcwQGNyeXB0 b2xhYi5uZXQ+CiA7OzsgQ29weXJpZ2h0IMKpIDIwMTYsIDIwMTcsIDIwMTgg VG9iaWFzIEdlZXJpbmNreC1SaWNlIDxtZUB0b2JpYXMuZ3I+Ci07OzsgQ29w eXJpZ2h0IMKpIDIwMTYsIDIwMTcgTWFyaXVzIEJha2tlIDxtYmFra2VAZmFz dG1haWwuY29tPgorOzs7IENvcHlyaWdodCDCqSAyMDE2LCAyMDE3LCAyMDE4 IE1hcml1cyBCYWtrZSA8bWJha2tlQGZhc3RtYWlsLmNvbT4KIDs7OyBDb3B5 cmlnaHQgwqkgMjAxNyBBZHJpYW5vIFBlbHVzbyA8Y2F0b25hbm9AZ21haWwu Y29tPgogOzs7IENvcHlyaWdodCDCqSAyMDE3IEdyZWdvciBHaWVzZW4gPGdp ZXNlbkB6YWVobHdlcmsubmV0PgogOzs7IENvcHlyaWdodCDCqSAyMDE3IEFs ZXggVm9uZyA8YWxleHZvbmcxOTk1QGdtYWlsLmNvbT4KQEAgLTQwLDYgKzQw LDcgQEAKICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgYXV0b3Rvb2xz KQogICAjOnVzZS1tb2R1bGUgKGdudSBwYWNrYWdlcyBjb21wcmVzc2lvbikK ICAgIzp1c2UtbW9kdWxlIChnbnUgcGFja2FnZXMgZ251cGcpCisgICM6dXNl LW1vZHVsZSAoZ251IHBhY2thZ2VzIGdudXppbGxhKQogICAjOnVzZS1tb2R1 bGUgKGdudSBwYWNrYWdlcyBwZXJsKQogICAjOnVzZS1tb2R1bGUgKGdudSBw YWNrYWdlcyBwZXJsLWNoZWNrKQogICAjOnVzZS1tb2R1bGUgKGdudSBwYWNr YWdlcyBweXRob24pCkBAIC05NzAsNiArOTcxLDE1IEBAIExpYnhtbDIpLiIp CiAgICAgKGxpY2Vuc2UgKGxpY2Vuc2U6eDExLXN0eWxlICJmaWxlOi8vQ09Q WUlORyIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlNlZSAn Q09QWUlORycgaW4gdGhlIGRpc3RyaWJ1dGlvbi4iKSkpKQogCisoZGVmaW5l LXB1YmxpYyB4bWxzZWMtbnNzCisgIChwYWNrYWdlCisgICAgKGluaGVyaXQg eG1sc2VjKQorICAgIChuYW1lICJ4bWxzZWMtbnNzIikKKyAgICAoaW5wdXRz CisgICAgIGAoKCJuc3MiICxuc3MpCisgICAgICAgKCJsaWJsdGRsIiAsbGli bHRkbCkpKQorICAgIChzeW5vcHNpcyAiWE1MIFNlY3VyaXR5IExpYnJhcnkg KHVzaW5nIE5TUyBpbnN0ZWFkIG9mIEdudVRMUykiKSkpCisKIChkZWZpbmUt cHVibGljIG1pbml4bWwKICAgKHBhY2thZ2UKICAgICAobmFtZSAibWluaXht bCIpCi0tIAoyLjE2LjEKCg== --_----------=_151835934223204882--