From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-11856 - cross-origin Digest auth state leak Date: Fri, 31 Jul 2026 10:22:17 GMT Message-ID: <178549333793.1.15295318038298215609.rpms-curl-dbd1914113b0@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: dbd1914113b04b5f0a9270656b575a47c76c88d9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogZGJkMTkxNDExM2IwNGI1ZjBhOTI3MDY1NmI1NzVhNDdjNzZjODhkOQpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wNy0z MFQxMjozNzoyMCswMjowMApTdGF0cyAgOiArMzQxLy0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9kYmQxOTE0MTEzYjA0YjVm MGE5MjcwNjU2YjU3NWE0N2M3NmM4OGQ5P2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTExODU2IC0gY3Jvc3Mtb3JpZ2luIERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsKCi0tLQpkaWZm IC0tZ2l0IGEvMDAxMC1jdXJsLTguMTguMC1DVkUtMjAyNi0xMTg1Ni5wYXRjaCBiLzAwMTAtY3Vy bC04LjE4LjAtQ1ZFLTIwMjYtMTE4NTYucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uYzBlNzk4NQotLS0gL2Rldi9udWxsCisrKyBiLzAwMTAtY3VybC04LjE4LjAtQ1ZF LTIwMjYtMTE4NTYucGF0Y2gKQEAgLTAsMCArMSwzMzcgQEAKK0Zyb20gOTBlOWJiZGE3NTFlZGMw NTJiMDRhNTNiNzA0NGFkN2YwMzdmZmM1ZCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206 IERhbmllbCBTdGVuYmVyZyA8ZGFuaWVsQGhheHguc2U+CitEYXRlOiBXZWQsIDEwIEp1biAyMDI2 IDEwOjI3OjUwICswMjAwCitTdWJqZWN0OiBbUEFUQ0hdIGRpZ2VzdDogZmx1c2ggc3RhdGUgb24g b3JpZ2luIG9yIGNyZWRlbnRpYWwgY2hhbmdlCisKK1ZlcmlmaWVkIGJ5IHRlc3QgMTY4NgorCitD bG9zZXMgIzIxOTQ0CisKKyhjaGVycnkgcGlja2VkIGZyb20gY29tbWl0IDVjNmI0ODgwMzU3YWIz ZTcyOTY3YzFjNDVjYWUwZjk2ZmZhYmM1MzUpCistLS0KKyBsaWIvaHR0cF9kaWdlc3QuYyAgICAg ICAgICB8IDMxICsrKysrKysrKysrKworIGxpYi91cmxkYXRhLmggICAgICAgICAgICAgIHwgIDgg KystLQorIGxpYi92YXV0aC9kaWdlc3QuYyAgICAgICAgIHwgIDQgKysKKyBsaWIvdmF1dGgvZGln ZXN0X3NzcGkuYyAgICB8ICAyICsKKyB0ZXN0cy9kYXRhL01ha2VmaWxlLmFtICAgICB8ICAyICst CisgdGVzdHMvZGF0YS90ZXN0MTY4NiAgICAgICAgfCA4NCArKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysKKyB0ZXN0cy9saWJ0ZXN0L01ha2VmaWxlLmluYyB8ICAxICsKKyB0ZXN0cy9s aWJ0ZXN0L2xpYjE2ODYuYyAgICB8IDk2ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrCisgOCBmaWxlcyBjaGFuZ2VkLCAyMjMgaW5zZXJ0aW9ucygrKSwgNSBkZWxldGlvbnMo LSkKKyBjcmVhdGUgbW9kZSAxMDA2NDQgdGVzdHMvZGF0YS90ZXN0MTY4NgorIGNyZWF0ZSBtb2Rl IDEwMDY0NCB0ZXN0cy9saWJ0ZXN0L2xpYjE2ODYuYworCitkaWZmIC0tZ2l0IGEvbGliL2h0dHBf ZGlnZXN0LmMgYi9saWIvaHR0cF9kaWdlc3QuYworaW5kZXggY2NjNjdmNWVmYy4uMTI5YzBkMzNm NyAxMDA2NDQKKy0tLSBhL2xpYi9odHRwX2RpZ2VzdC5jCisrKysgYi9saWIvaHR0cF9kaWdlc3Qu YworQEAgLTk4LDcgKzk4LDM4IEBAIENVUkxjb2RlIEN1cmxfb3V0cHV0X2RpZ2VzdChzdHJ1Y3Qg Q3VybF9lYXN5ICpkYXRhLAorICNlbmRpZgorICAgfQorICAgZWxzZSB7CisrICAgIGJvb2wgZmx1 c2ggPSBGQUxTRTsKKyAgICAgZGlnZXN0ID0gJmRhdGEtPnN0YXRlLmRpZ2VzdDsKKysKKysgICAg aWYoZGlnZXN0LT5vcmlnaW5faG9zdCAmJgorKyAgICAgICAoIWN1cmxfc3RyZXF1YWwoZGF0YS0+ Y29ubi0+aG9zdC5uYW1lLCBkaWdlc3QtPm9yaWdpbl9ob3N0KSB8fAorKyAgICAgICAgZGF0YS0+ Y29ubi0+cmVtb3RlX3BvcnQgIT0gZGlnZXN0LT5vcmlnaW5fcG9ydCkpCisrICAgICAgZmx1c2gg PSBUUlVFOworKyAgICBlbHNlIGlmKGRpZ2VzdC0+dXNlciAmJgorKyAgICAgICAgICAgIEN1cmxf dGltZXN0cmNtcChkYXRhLT5zdGF0ZS5hcHRyLnVzZXIgPworKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICBkYXRhLT5zdGF0ZS5hcHRyLnVzZXIgOiAiIiwKKysgICAgICAgICAgICAgICAgICAg ICAgICAgICAgZGlnZXN0LT51c2VyKSkKKysgICAgICBmbHVzaCA9IFRSVUU7CisrICAgIGVsc2Ug aWYoZGlnZXN0LT5wYXNzd2QgJiYKKysgICAgICAgICAgICBDdXJsX3RpbWVzdHJjbXAoZGF0YS0+ c3RhdGUuYXB0ci5wYXNzd2QgPworKyAgICAgICAgICAgICAgICAgICAgICAgICAgICBkYXRhLT5z dGF0ZS5hcHRyLnBhc3N3ZCA6ICIiLAorKyAgICAgICAgICAgICAgICAgICAgICAgICAgICBkaWdl c3QtPnBhc3N3ZCkpCisrICAgICAgZmx1c2ggPSBUUlVFOworKworKyAgICBpZihmbHVzaCkKKysg ICAgICAvKiBmbHVzaCBob3N0IERpZ2VzdCBzdGF0ZSAqLworKyAgICAgIEN1cmxfYXV0aF9kaWdl c3RfY2xlYW51cChkaWdlc3QpOworKworKyAgICBDdXJsX3NhZmVmcmVlKGRpZ2VzdC0+b3JpZ2lu X2hvc3QpOworKyAgICBkaWdlc3QtPm9yaWdpbl9ob3N0ID0gY3VybHhfc3RyZHVwKGRhdGEtPmNv bm4tPmhvc3QubmFtZSk7CisrICAgIGRpZ2VzdC0+b3JpZ2luX3BvcnQgPSBkYXRhLT5jb25uLT5y ZW1vdGVfcG9ydDsKKysgICAgQ3VybF9zYWZlZnJlZShkaWdlc3QtPnVzZXIpOworKyAgICBkaWdl c3QtPnVzZXIgPSBjdXJseF9zdHJkdXAoZGF0YS0+c3RhdGUuYXB0ci51c2VyID8KKysgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGRhdGEtPnN0YXRlLmFwdHIudXNlciA6ICIiKTsKKysg ICAgQ3VybF9zYWZlZnJlZShkaWdlc3QtPnBhc3N3ZCk7CisrICAgIGRpZ2VzdC0+cGFzc3dkID0g Y3VybHhfc3RyZHVwKGRhdGEtPnN0YXRlLmFwdHIucGFzc3dkID8KKysgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgZGF0YS0+c3RhdGUuYXB0ci5wYXNzd2QgOiAiIik7CisrCisgICAg IGFsbG9jdXNlcnB3ZCA9ICZkYXRhLT5zdGF0ZS5hcHRyLnVzZXJwd2Q7CisgICAgIHVzZXJwID0g ZGF0YS0+c3RhdGUuYXB0ci51c2VyOworICAgICBwYXNzd2RwID0gZGF0YS0+c3RhdGUuYXB0ci5w YXNzd2Q7CitkaWZmIC0tZ2l0IGEvbGliL3VybGRhdGEuaCBiL2xpYi91cmxkYXRhLmgKK2luZGV4 IGFiYTE2OTNjYTcuLjIyMTMxN2U0N2UgMTAwNjQ0CistLS0gYS9saWIvdXJsZGF0YS5oCisrKysg Yi9saWIvdXJsZGF0YS5oCitAQCAtMjkxLDE0ICsyOTEsMTQgQEAgc3RydWN0IHNzbF9nZW5lcmFs X2NvbmZpZyB7CisgI2lmbmRlZiBDVVJMX0RJU0FCTEVfRElHRVNUX0FVVEgKKyAvKiBTdHJ1Y3Qg dXNlZCBmb3IgRGlnZXN0IGNoYWxsZW5nZS1yZXNwb25zZSBhdXRoZW50aWNhdGlvbiAqLworIHN0 cnVjdCBkaWdlc3RkYXRhIHsKKysgIGNoYXIgKm9yaWdpbl9ob3N0OworKyAgaW50IG9yaWdpbl9w b3J0OworKyAgY2hhciAqdXNlcjsKKysgIGNoYXIgKnBhc3N3ZDsKKyAjaWZkZWYgVVNFX1dJTkRP V1NfU1NQSQorICAgQllURSAqaW5wdXRfdG9rZW47CisgICBzaXplX3QgaW5wdXRfdG9rZW5fbGVu OworICAgQ3R4dEhhbmRsZSAqaHR0cF9jb250ZXh0OworLSAgLyogY29weSBvZiB1c2VyL3Bhc3N3 ZCB1c2VkIHRvIG1ha2UgdGhlIGlkZW50aXR5IGZvciBodHRwX2NvbnRleHQuCistICAgICBlaXRo ZXIgbWF5IGJlIE5VTEwuICovCistICBjaGFyICp1c2VyOworLSAgY2hhciAqcGFzc3dkOworICNl bHNlCisgICBjaGFyICpub25jZTsKKyAgIGNoYXIgKmNub25jZTsKK2RpZmYgLS1naXQgYS9saWIv dmF1dGgvZGlnZXN0LmMgYi9saWIvdmF1dGgvZGlnZXN0LmMKK2luZGV4IGExZmQyNDg2MTcuLjFj ZDg2N2NlYWQgMTAwNjQ0CistLS0gYS9saWIvdmF1dGgvZGlnZXN0LmMKKysrKyBiL2xpYi92YXV0 aC9kaWdlc3QuYworQEAgLTEwMTMsNiArMTAxMywxMCBAQCBDVVJMY29kZSBDdXJsX2F1dGhfY3Jl YXRlX2RpZ2VzdF9odHRwX21lc3NhZ2Uoc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwKKyAgKi8KKyB2 b2lkIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51cChzdHJ1Y3QgZGlnZXN0ZGF0YSAqZGlnZXN0KQor IHsKKysgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT5vcmlnaW5faG9zdCk7CisrICBkaWdlc3QtPm9y aWdpbl9wb3J0ID0gMDsKKysgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT51c2VyKTsKKysgIEN1cmxf c2FmZWZyZWUoZGlnZXN0LT5wYXNzd2QpOworICAgQ3VybF9zYWZlZnJlZShkaWdlc3QtPm5vbmNl KTsKKyAgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT5jbm9uY2UpOworICAgQ3VybF9zYWZlZnJlZShk aWdlc3QtPnJlYWxtKTsKK2RpZmYgLS1naXQgYS9saWIvdmF1dGgvZGlnZXN0X3NzcGkuYyBiL2xp Yi92YXV0aC9kaWdlc3Rfc3NwaS5jCitpbmRleCA2MTViNGJjODI3Li4zZmM3NTM3MWIyIDEwMDY0 NAorLS0tIGEvbGliL3ZhdXRoL2RpZ2VzdF9zc3BpLmMKKysrKyBiL2xpYi92YXV0aC9kaWdlc3Rf c3NwaS5jCitAQCAtNjYxLDYgKzY2MSw4IEBAIHZvaWQgQ3VybF9hdXRoX2RpZ2VzdF9jbGVhbnVw KHN0cnVjdCBkaWdlc3RkYXRhICpkaWdlc3QpCisgICAvKiBGcmVlIHRoZSBjb3B5IG9mIHVzZXIv cGFzc3dkIHVzZWQgdG8gbWFrZSB0aGUgaWRlbnRpdHkgZm9yIGh0dHBfY29udGV4dCAqLworICAg Q3VybF9zYWZlZnJlZShkaWdlc3QtPnVzZXIpOworICAgQ3VybF9zYWZlZnJlZShkaWdlc3QtPnBh c3N3ZCk7CisrICBDdXJsX3NhZmVmcmVlKGRpZ2VzdC0+b3JpZ2luX2hvc3QpOworKyAgZGlnZXN0 LT5vcmlnaW5fcG9ydCA9IDA7CisgfQorIAorICNlbmRpZiAvKiBVU0VfV0lORE9XU19TU1BJICYm ICFDVVJMX0RJU0FCTEVfRElHRVNUX0FVVEggKi8KK2RpZmYgLS1naXQgYS90ZXN0cy9kYXRhL01h a2VmaWxlLmFtIGIvdGVzdHMvZGF0YS9NYWtlZmlsZS5hbQoraW5kZXggYmZmMTE4MjQwYy4uOTUz NTg2MWIxOCAxMDA2NDQKKy0tLSBhL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0KKysrKyBiL3Rlc3Rz L2RhdGEvTWFrZWZpbGUuYW0KK0BAIC0yMjUsNyArMjI1LDcgQEAgdGVzdDE2NjAgdGVzdDE2NjEg dGVzdDE2NjIgdGVzdDE2NjMgdGVzdDE2NjQgdGVzdDE2NjUgXAorIFwKKyB0ZXN0MTY3MCB0ZXN0 MTY3MSBcCisgXAorLXRlc3QxNjgwIHRlc3QxNjgxIHRlc3QxNjgyIHRlc3QxNjgzIFwKKyt0ZXN0 MTY4MCB0ZXN0MTY4MSB0ZXN0MTY4MiB0ZXN0MTY4MyB0ZXN0MTY4NiBcCisgXAorIHRlc3QxNzAw IHRlc3QxNzAxIHRlc3QxNzAyIHRlc3QxNzAzIHRlc3QxNzA0IHRlc3QxNzA1IHRlc3QxNzA2IHRl c3QxNzA3IFwKKyB0ZXN0MTcwOCB0ZXN0MTcwOSB0ZXN0MTcxMCB0ZXN0MTcxMSBcCitkaWZmIC0t Z2l0IGEvdGVzdHMvZGF0YS90ZXN0MTY4NiBiL3Rlc3RzL2RhdGEvdGVzdDE2ODYKK25ldyBmaWxl IG1vZGUgMTAwNjQ0CitpbmRleCAwMDAwMDAwMDAwLi4yZDQxOWFkNjA4CistLS0gL2Rldi9udWxs CisrKysgYi90ZXN0cy9kYXRhL3Rlc3QxNjg2CitAQCAtMCwwICsxLDg0IEBACisrPD94bWwgdmVy c2lvbj0iMS4wIiBlbmNvZGluZz0iVVMtQVNDSUkiPz4KKys8dGVzdGNhc2U+CisrPGluZm8+Cisr PGtleXdvcmRzPgorK0hUVFAKKytEaWdlc3QKKys8L2tleXdvcmRzPgorKzwvaW5mbz4KKysKKys8 cmVwbHk+CisrPGRhdGEgY3JsZj0iaGVhZGVycyIgbm9jaGVjaz0ieWVzIj4KKytIVFRQLzEuMSA0 MDEgQXV0aG9yaXphdGlvbiBSZXF1aXJlZAorK1NlcnZlcjogQXBhY2hlLzEuMy4yNyAoRGFyd2lu KSBQSFAvNC4xLjIKKytXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09Im15LWJhY2t5YXJk Iiwgbm9uY2U9IjMxNDE1NjI5NSIKKytDb250ZW50LUxlbmd0aDogMjYKKysKKytUaGlzIGlzIG5v dCB0aGUgcmVhbCBwYWdlCisrPC9kYXRhPgorKworKyMgVGhpcyBpcyBzdXBwb3NlZCB0byBiZSBy ZXR1cm5lZCB3aGVuIHRoZSBzZXJ2ZXIgZ2V0cyBhCisrIyBBdXRob3JpemF0aW9uOiBEaWdlc3Qg bGluZSBwYXNzZWQtaW4gZnJvbSB0aGUgY2xpZW50CisrPGRhdGExMDAwIGNybGY9ImhlYWRlcnMi PgorK0hUVFAvMS4xIDIwMCBPSworK1NlcnZlcjogQXBhY2hlLzEuMy4yNyAoRGFyd2luKSBQSFAv NC4xLjIKKytDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD1pc28tODg1OS0xCisrQ29u dGVudC1MZW5ndGg6IDIzCisrCisrVGhpcyBJUyB0aGUgcmVhbCBwYWdlIQorKzwvZGF0YTEwMDA+ CisrCisrPC9yZXBseT4KKysKKys8Y2xpZW50PgorKzxmZWF0dXJlcz4KKyshU1NQSQorK2NyeXB0 bworK2RpZ2VzdAorKzwvZmVhdHVyZXM+CisrPHNlcnZlcj4KKytodHRwCisrPC9zZXJ2ZXI+Cisr PG5hbWU+CisrSFRUUCBEaWdlc3QgdG8gZGlmZmVyZW50IG9yaWdpbnMgYW5kIHN3aXRjaGluZyBj cmVkZW50aWFscworKzwvbmFtZT4KKys8dG9vbD4KKytsaWIlVEVTVE5VTUJFUgorKzwvdG9vbD4K Kys8Y29tbWFuZD4KKyslSE9TVElQICVIVFRQUE9SVAorKzwvY29tbWFuZD4KKys8L2NsaWVudD4K KysKKys8dmVyaWZ5PgorKzxwcm90b2NvbCBjcmxmPSJoZWFkZXJzIj4KKytHRVQgL2FwaSBIVFRQ LzEuMQorK0hvc3Q6IGZpcnN0LnRlc3Q6JUhUVFBQT1JUCisrQWNjZXB0OiAqLyoKKysKKytHRVQg L2FwaSBIVFRQLzEuMQorK0hvc3Q6IGZpcnN0LnRlc3Q6JUhUVFBQT1JUCisrQXV0aG9yaXphdGlv bjogRGlnZXN0IHVzZXJuYW1lPSJhbGljZSIsIHJlYWxtPSJteS1iYWNreWFyZCIsIG5vbmNlPSIz MTQxNTYyOTUiLCB1cmk9Ii9hcGkiLCByZXNwb25zZT0iNGVjYzAwZTU2N2MzN2E5ZDUzNzcyNzg5 MGMyZTViMzIiCisrQWNjZXB0OiAqLyoKKysKKytHRVQgL2hvb2sgSFRUUC8xLjEKKytIb3N0OiBz ZWNvbmQudGVzdDolSFRUUFBPUlQKKytBY2NlcHQ6ICovKgorKworK0dFVCAvaG9vayBIVFRQLzEu MQorK0hvc3Q6IHNlY29uZC50ZXN0OiVIVFRQUE9SVAorK0F1dGhvcml6YXRpb246IERpZ2VzdCB1 c2VybmFtZT0iYWxpY2UiLCByZWFsbT0ibXktYmFja3lhcmQiLCBub25jZT0iMzE0MTU2Mjk1Iiwg dXJpPSIvaG9vayIsIHJlc3BvbnNlPSJkM2E3NzM4ZmI2YTIzZjU1NDNmYjhkYWNjMGYwZjI1MyIK KytBY2NlcHQ6ICovKgorKworK0dFVCAvaG9vayBIVFRQLzEuMQorK0hvc3Q6IHNlY29uZC50ZXN0 OiVIVFRQUE9SVAorK0FjY2VwdDogKi8qCisrCisrR0VUIC9ob29rIEhUVFAvMS4xCisrSG9zdDog c2Vjb25kLnRlc3Q6JUhUVFBQT1JUCisrQXV0aG9yaXphdGlvbjogRGlnZXN0IHVzZXJuYW1lPSJi b2IiLCByZWFsbT0ibXktYmFja3lhcmQiLCBub25jZT0iMzE0MTU2Mjk1IiwgdXJpPSIvaG9vayIs IHJlc3BvbnNlPSI3NzdlNjhlZGRiNzcyOTRkOWNiZDYxMzQ5NzNjYmJhYiIKKytBY2NlcHQ6ICov KgorKworKzwvcHJvdG9jb2w+CisrPC92ZXJpZnk+CisrPC90ZXN0Y2FzZT4KK2RpZmYgLS1naXQg YS90ZXN0cy9saWJ0ZXN0L01ha2VmaWxlLmluYyBiL3Rlc3RzL2xpYnRlc3QvTWFrZWZpbGUuaW5j CitpbmRleCBlMzIwMjgwNGE5Li41YzU2NjBmZmQ4IDEwMDY0NAorLS0tIGEvdGVzdHMvbGlidGVz dC9NYWtlZmlsZS5pbmMKKysrKyBiL3Rlc3RzL2xpYnRlc3QvTWFrZWZpbGUuaW5jCitAQCAtMTAx LDYgKzEwMSw3IEBAIFRFU1RTX0MgPSBcCisgICBsaWIxNTkxLmMgbGliMTU5Mi5jIGxpYjE1OTMu YyBsaWIxNTk0LmMgICAgICAgICAgICAgICAgICAgICBsaWIxNTk3LmMgXAorICAgbGliMTU5OC5j IGxpYjE1OTkuYyBcCisgICBsaWIxNjYyLmMgXAorKyAgbGliMTY4Ni5jIFwKKyAgIGxpYjE5MDAu YyBsaWIxOTAxLmMgbGliMTkwMi5jIGxpYjE5MDMuYyBsaWIxOTA1LmMgbGliMTkwNi5jIGxpYjE5 MDcuYyBcCisgICBsaWIxOTA4LmMgICAgICAgICAgIGxpYjE5MTAuYyBsaWIxOTExLmMgbGliMTkx Mi5jIGxpYjE5MTMuYyBcCisgICBsaWIxOTE1LmMgbGliMTkxNi5jICAgICAgICAgICBsaWIxOTE4 LmMgbGliMTkxOS5jIGxpYjE5MjAuYyBcCitkaWZmIC0tZ2l0IGEvdGVzdHMvbGlidGVzdC9saWIx Njg2LmMgYi90ZXN0cy9saWJ0ZXN0L2xpYjE2ODYuYworbmV3IGZpbGUgbW9kZSAxMDA2NDQKK2lu ZGV4IDAwMDAwMDAwMDAuLmU0NTcwMTJiYjkKKy0tLSAvZGV2L251bGwKKysrKyBiL3Rlc3RzL2xp YnRlc3QvbGliMTY4Ni5jCitAQCAtMCwwICsxLDk2IEBACisrLyoqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKgor KyAqICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF8gICBfIF9fX18gIF8KKysgKiAg UHJvamVjdCAgICAgICAgICAgICAgICAgICAgIF9fX3wgfCB8IHwgIF8gXHwgfAorKyAqICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAvIF9ffCB8IHwgfCB8XykgfCB8CisrICogICAgICAgICAg ICAgICAgICAgICAgICAgICAgfCAoX198IHxffCB8ICBfIDx8IHxfX18KKysgKiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXF9fX3xcX19fL3xffCBcX1xfX19fX3wKKysgKgorKyAqIENvcHly aWdodCAoQykgRGFuaWVsIFN0ZW5iZXJnLCA8ZGFuaWVsQGhheHguc2U+LCBldCBhbC4KKysgKgor KyAqIFRoaXMgc29mdHdhcmUgaXMgbGljZW5zZWQgYXMgZGVzY3JpYmVkIGluIHRoZSBmaWxlIENP UFlJTkcsIHdoaWNoCisrICogeW91IHNob3VsZCBoYXZlIHJlY2VpdmVkIGFzIHBhcnQgb2YgdGhp cyBkaXN0cmlidXRpb24uIFRoZSB0ZXJtcworKyAqIGFyZSBhbHNvIGF2YWlsYWJsZSBhdCBodHRw czovL2N1cmwuc2UvZG9jcy9jb3B5cmlnaHQuaHRtbC4KKysgKgorKyAqIFlvdSBtYXkgb3B0IHRv IHVzZSwgY29weSwgbW9kaWZ5LCBtZXJnZSwgcHVibGlzaCwgZGlzdHJpYnV0ZSBhbmQvb3Igc2Vs bAorKyAqIGNvcGllcyBvZiB0aGUgU29mdHdhcmUsIGFuZCBwZXJtaXQgcGVyc29ucyB0byB3aG9t IHRoZSBTb2Z0d2FyZSBpcworKyAqIGZ1cm5pc2hlZCB0byBkbyBzbywgdW5kZXIgdGhlIHRlcm1z IG9mIHRoZSBDT1BZSU5HIGZpbGUuCisrICoKKysgKiBUaGlzIHNvZnR3YXJlIGlzIGRpc3RyaWJ1 dGVkIG9uIGFuICJBUyBJUyIgYmFzaXMsIFdJVEhPVVQgV0FSUkFOVFkgT0YgQU5ZCisrICogS0lO RCwgZWl0aGVyIGV4cHJlc3Mgb3IgaW1wbGllZC4KKysgKgorKyAqIFNQRFgtTGljZW5zZS1JZGVu dGlmaWVyOiBjdXJsCisrICoKKysgKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqLworKyNpbmNsdWRlICJmaXJz dC5oIgorKworK3N0YXRpYyBzaXplX3QgZGV2bnVsbF8xNjg2KGNoYXIgKnAsIHNpemVfdCBzLCBz aXplX3Qgbiwgdm9pZCAqdSkKKyt7CisrICAodm9pZClwOworKyAgKHZvaWQpdTsKKysgIHJldHVy biBzICogbjsKKyt9CisrCisrI2RlZmluZSBGSVJTVEhPU1QgImZpcnN0LnRlc3QiCisrI2RlZmlu ZSBTRUNPTkRIT1NUICJzZWNvbmQudGVzdCIKKysKKytzdGF0aWMgQ1VSTGNvZGUgdGVzdF9saWIx Njg2KGNvbnN0IGNoYXIgKmhvc3RpcCkKKyt7CisrICBDVVJMICpjdXJsID0gTlVMTDsKKysgIENV Ukxjb2RlIHJlc3VsdCA9IENVUkxFX09LOworKyAgY29uc3QgY2hhciAqaHR0cHBvcnQgPSBsaWJ0 ZXN0X2FyZzI7CisrICBjaGFyIGZpcnN0dXJsWzEwMF07CisrICBjaGFyIHNlY29uZHVybFsxMDBd OworKyAgY2hhciBmaXJzdHJlc1sxMDBdOworKyAgY2hhciBzZWNvbmRyZXNbMTAwXTsKKysgIHN0 cnVjdCBjdXJsX3NsaXN0ICpob3N0ID0gTlVMTDsKKysgIHN0cnVjdCBjdXJsX3NsaXN0ICpob3N0 MiA9IE5VTEw7CisrCisrICBpZihjdXJsX2dsb2JhbF9pbml0KENVUkxfR0xPQkFMX0FMTCkgIT0g Q1VSTEVfT0spIHsKKysgICAgY3VybF9tZnByaW50ZihzdGRlcnIsICJjdXJsX2dsb2JhbF9pbml0 KCkgZmFpbGVkXG4iKTsKKysgICAgcmV0dXJuIFRFU1RfRVJSX01BSk9SX0JBRDsKKysgIH0KKysK KysgIC8qIGNyZWF0ZSBzdHJpbmdzIGZvciBDVVJMT1BUX1JFU09MVkUgKi8KKysgIGN1cmxfbXNu cHJpbnRmKGZpcnN0cmVzLCBzaXplb2YoZmlyc3RyZXMpLCAiJXM6JXM6JXMiLAorKyAgICAgICAg ICAgICAgICAgRklSU1RIT1NULCBodHRwcG9ydCwgaG9zdGlwKTsKKysgIGN1cmxfbXNucHJpbnRm KHNlY29uZHJlcywgc2l6ZW9mKHNlY29uZHJlcyksICIlczolczolcyIsCisrICAgICAgICAgICAg ICAgICBTRUNPTkRIT1NULCBodHRwcG9ydCwgaG9zdGlwKTsKKysKKysgIC8qIGNyZWF0ZSBVUkxz ICovCisrICBjdXJsX21zbnByaW50ZihmaXJzdHVybCwgc2l6ZW9mKGZpcnN0dXJsKSwgImh0dHA6 Ly8lczolcy9hcGkiLAorKyAgICAgICAgICAgICAgICAgRklSU1RIT1NULCBodHRwcG9ydCk7Cisr ICBjdXJsX21zbnByaW50ZihzZWNvbmR1cmwsIHNpemVvZihzZWNvbmR1cmwpLCAiaHR0cDovLyVz OiVzL2hvb2siLAorKyAgICAgICAgICAgICAgICAgU0VDT05ESE9TVCwgaHR0cHBvcnQpOworKwor KyAgaG9zdCA9IGN1cmxfc2xpc3RfYXBwZW5kKE5VTEwsIGZpcnN0cmVzKTsKKysgIGlmKCFob3N0 KQorKyAgICBnb3RvIHRlc3RfY2xlYW51cDsKKysgIGhvc3QyID0gY3VybF9zbGlzdF9hcHBlbmQo aG9zdCwgc2Vjb25kcmVzKTsKKysgIGlmKCFob3N0MikKKysgICAgZ290byB0ZXN0X2NsZWFudXA7 CisrICBob3N0ID0gaG9zdDI7CisrCisrICBjdXJsID0gY3VybF9lYXN5X2luaXQoKTsKKysgIGlm KGN1cmwpIHsKKysgICAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9SRVNPTFZFLCBob3N0KTsK KysgICAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9IVFRQQVVUSCwgQ1VSTEFVVEhfRElHRVNU KTsKKysgICAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9VU0VSUFdELCAiYWxpY2U6Ym9uZCIp OworKyAgICBlYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1dSSVRFRlVOQ1RJT04sIGRldm51bGxf MTY4Nik7CisrCisrICAgIGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfVVJMLCBmaXJzdHVybCk7 CisrICAgIHJlc3VsdCA9IGN1cmxfZWFzeV9wZXJmb3JtKGN1cmwpOworKworKyAgICBlYXN5X3Nl dG9wdChjdXJsLCBDVVJMT1BUX1VSTCwgc2Vjb25kdXJsKTsKKysgICAgcmVzdWx0ID0gY3VybF9l YXN5X3BlcmZvcm0oY3VybCk7CisrCisrICAgIGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfVVNF UlBXRCwgImJvYjpzZWNyZXQiKTsKKysgICAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9VUkws IHNlY29uZHVybCk7CisrICAgIHJlc3VsdCA9IGN1cmxfZWFzeV9wZXJmb3JtKGN1cmwpOworKyAg fQorKworK3Rlc3RfY2xlYW51cDoKKysgIGN1cmxfZWFzeV9jbGVhbnVwKGN1cmwpOworKyAgY3Vy bF9nbG9iYWxfY2xlYW51cCgpOworKyAgY3VybF9zbGlzdF9mcmVlX2FsbChob3N0KTsKKysgIHJl dHVybiByZXN1bHQ7CisrfQorLS0gCisyLjU1LjAKKwoKZGlmZiAtLWdpdCBhL2N1cmwuc3BlYyBi L2N1cmwuc3BlYwppbmRleCBhOWZhMzg1Li4wNzNjMTAyIDEwMDY0NAotLS0gYS9jdXJsLnNwZWMK KysrIGIvY3VybC5zcGVjCkBAIC01MSw2ICs1MSw5IEBAIFBhdGNoMDA4OiAwMDA4LWN1cmwtOC4x OC4wLUNWRS0yMDI2LTk1NDcucGF0Y2gKICMgRml4IHBhc3N3b3JkIGxlYWsgd2l0aCBuZXRyYyBh bmQgdXNlciBpbiBVUkwgKENWRS0yMDI2LTg5MjYpCiBQYXRjaDAwOTogMDAwOS1jdXJsLTguMTgu MC1DVkUtMjAyNi04OTI2LnBhdGNoCiAKKyMgRml4IGNyb3NzLW9yaWdpbiBEaWdlc3QgYXV0aCBz dGF0ZSBsZWFrIChDVkUtMjAyNi0xMTg1NikKK1BhdGNoMDEwOiAwMDEwLWN1cmwtOC4xOC4wLUNW RS0yMDI2LTExODU2LnBhdGNoCisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVh ZHkKIFBhdGNoMTAxOiAwMTAxLWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTQ3OCw2 ICs0ODEsNyBAQCBybSAtZiAke1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4x KgogLSBGaXggdHJhaWxpbmcgZG90IGRvbWFpbiBzdXBlciBjb29raWUgKENWRS0yMDI2LTg5MjQp CiAtIEZpeCBTU0ggaW1wcm9wZXIgaG9zdCB2YWxpZGF0aW9uIChDVkUtMjAyNi05NTQ3KQogLSBG aXggcGFzc3dvcmQgbGVhayB3aXRoIG5ldHJjIGFuZCB1c2VyIGluIFVSTCAoQ1ZFLTIwMjYtODky NikKKy0gRml4IGNyb3NzLW9yaWdpbiBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrIChDVkUtMjAyNi0x MTg1NikKIAogKiBNb24gSnVsIDIwIDIwMjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+ IC0gOC4xOC4wLTcKIC0gZXhwbGljaXRseSBkaXNhYmxlIEhUVFAvMyBzdXBwb3J0IGluIHRoZSBt aW5pbWFsIGJ1aWxkCg==