From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-7168 - cross-proxy Digest auth state leak Date: Fri, 31 Jul 2026 10:22:18 GMT Message-ID: <178549333842.1.10624317815224460889.rpms-curl-fb462c45bf87@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: fb462c45bf871d945b3418b6bbc02f8e43391ce3 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogZmI0NjJjNDViZjg3MWQ5NDViMzQxOGI2YmJjMDJmOGU0MzM5MWNlMwpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wNy0z MFQxMjozNzoyMCswMjowMApTdGF0cyAgOiArMzc2Ly0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9mYjQ2MmM0NWJmODcxZDk0 NWIzNDE4YjZiYmMwMmY4ZTQzMzkxY2UzP2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTcxNjggLSBjcm9zcy1wcm94eSBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrCgotLS0KZGlmZiAt LWdpdCBhLzAwMTEtY3VybC04LjE4LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaCBiLzAwMTEtY3VybC04 LjE4LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwLi5mYWFlOTVlCi0tLSAvZGV2L251bGwKKysrIGIvMDAxMS1jdXJsLTguMTguMC1DVkUtMjAy Ni03MTY4LnBhdGNoCkBAIC0wLDAgKzEsMzcyIEBACitGcm9tIDQ0ZTc1YjQ5ZTViOWUzMTNkZjkw ODI3MGQxNDM2N2YzZTRhYjQ0ODggTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBEYW5p ZWwgU3RlbmJlcmcgPGRhbmllbEBoYXh4LnNlPgorRGF0ZTogTW9uLCAyNyBBcHIgMjAyNiAwOTox NDo1MSArMDIwMAorU3ViamVjdDogW1BBVENIXSBzZXRvcHQ6IGNsZWFyIHByb3h5IGF1dGggcHJv cGVydGllcyB3aGVuIHN3aXRjaGluZworCitWZXJpZnkgd2l0aCB0ZXN0IDE1ODgKKworQ2xvc2Vz ICMyMTQ1MworCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCBjMWNmZGY1OWFjYmFmOTUwNGM0 NTc4ZDRjZjU2Y2RkN2M4NTk0NTA3KQorLS0tCisgbGliL3NldG9wdC5jICAgICAgICAgICAgICAg fCAgMTggKysrKy0KKyBsaWIvdmF1dGgvdmF1dGguaCAgICAgICAgICB8ICAgMSArCisgdGVzdHMv ZGF0YS9NYWtlZmlsZS5hbSAgICAgfCAgIDEgKworIHRlc3RzL2RhdGEvdGVzdDE1ODggICAgICAg IHwgMTA2ICsrKysrKysrKysrKysrKysrKysrKysrKysrCisgdGVzdHMvbGlidGVzdC9NYWtlZmls ZS5pbmMgfCAgIDIgKy0KKyB0ZXN0cy9saWJ0ZXN0L2xpYjE1ODguYyAgICB8IDE1MCArKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCisgNiBmaWxlcyBjaGFuZ2VkLCAyNzYgaW5z ZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKKyBjcmVhdGUgbW9kZSAxMDA2NDQgdGVzdHMvZGF0 YS90ZXN0MTU4OAorIGNyZWF0ZSBtb2RlIDEwMDY0NCB0ZXN0cy9saWJ0ZXN0L2xpYjE1ODguYwor CitkaWZmIC0tZ2l0IGEvbGliL3NldG9wdC5jIGIvbGliL3NldG9wdC5jCitpbmRleCAwYzFkYTVi YzEyLi42NWM1NzNjYjlkIDEwMDY0NAorLS0tIGEvbGliL3NldG9wdC5jCisrKysgYi9saWIvc2V0 b3B0LmMKK0BAIC00OSw2ICs0OSw3IEBACisgI2luY2x1ZGUgInN0cmR1cC5oIgorICNpbmNsdWRl ICJlc2NhcGUuaCIKKyAjaW5jbHVkZSAiYnVmcmVmLmgiCisrI2luY2x1ZGUgInZhdXRoL3ZhdXRo LmgiCisgCisgc3RhdGljIENVUkxjb2RlIHNldG9wdF9zZXRfdGltZW91dF9zZWModGltZWRpZmZf dCAqcHRpbWVvdXRfbXMsIGxvbmcgc2VjcykKKyB7CitAQCAtMTYxNCw2ICsxNjE1LDIxIEBAIHN0 YXRpYyBDVVJMY29kZSBjb29raWVmaWxlKHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEsIGNvbnN0IGNo YXIgKnB0cikKKyB9CisgI2VuZGlmCisgCisrI2lmbmRlZiBDVVJMX0RJU0FCTEVfUFJPWFkKKysK KytzdGF0aWMgQ1VSTGNvZGUgc2V0cHJveHkoc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwgY29uc3Qg Y2hhciAqcHJveHkpCisreworKyAgaWYoKGRhdGEtPnNldC5zdHJbU1RSSU5HX1BST1hZXSAmJiBw cm94eSkgJiYKKysgICAgICFzdHJjbXAoZGF0YS0+c2V0LnN0cltTVFJJTkdfUFJPWFldLCBwcm94 eSkpCisrICAgIHJldHVybiBDVVJMRV9PSzsKKysKKysgIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51 cCgmZGF0YS0+c3RhdGUucHJveHlkaWdlc3QpOworKyAgbWVtc2V0KCZkYXRhLT5zdGF0ZS5hdXRo cHJveHksIDAsIHNpemVvZihkYXRhLT5zdGF0ZS5hdXRocHJveHkpKTsKKysgIHJldHVybiBDdXJs X3NldHN0cm9wdCgmZGF0YS0+c2V0LnN0cltTVFJJTkdfUFJPWFldLCBwcm94eSk7CisrfQorKwor KyNlbmRpZgorKworIHN0YXRpYyBDVVJMY29kZSBzZXRvcHRfY3B0cihzdHJ1Y3QgQ3VybF9lYXN5 ICpkYXRhLCBDVVJMb3B0aW9uIG9wdGlvbiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Y2hhciAqcHRyKQorIHsKK0BAIC0xODIxLDcgKzE4MzcsNyBAQCBzdGF0aWMgQ1VSTGNvZGUgc2V0 b3B0X2NwdHIoc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwgQ1VSTG9wdGlvbiBvcHRpb24sCisgICAg ICAqIFNldHRpbmcgaXQgdG8gTlVMTCwgbWVhbnMgbm8gcHJveHkgYnV0IGFsbG93cyB0aGUgZW52 aXJvbm1lbnQgdmFyaWFibGVzCisgICAgICAqIHRvIGRlY2lkZSBmb3IgdXMgKGlmIENVUkxPUFRf U09DS1NfUFJPWFkgc2V0dGluZyBpdCB0byBOVUxMKS4KKyAgICAgICovCistICAgIHJldHVybiBD dXJsX3NldHN0cm9wdCgmcy0+c3RyW1NUUklOR19QUk9YWV0sIHB0cik7CisrICAgIHJldHVybiBz ZXRwcm94eShkYXRhLCBwdHIpOworIAorICAgY2FzZSBDVVJMT1BUX1BSRV9QUk9YWToKKyAgICAg LyoKK2RpZmYgLS1naXQgYS9saWIvdmF1dGgvdmF1dGguaCBiL2xpYi92YXV0aC92YXV0aC5oCitp bmRleCAzMTJiZDhkYTVhLi4xNWRhNjI2NzhjIDEwMDY0NAorLS0tIGEvbGliL3ZhdXRoL3ZhdXRo LmgKKysrKyBiL2xpYi92YXV0aC92YXV0aC5oCitAQCAtMTE3LDYgKzExNyw3IEBAIENVUkxjb2Rl IEN1cmxfYXV0aF9jcmVhdGVfZGlnZXN0X2h0dHBfbWVzc2FnZShzdHJ1Y3QgQ3VybF9lYXN5ICpk YXRhLAorIC8qIFRoaXMgaXMgdXNlZCB0byBjbGVhbiB1cCB0aGUgZGlnZXN0IHNwZWNpZmljIGRh dGEgKi8KKyB2b2lkIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51cChzdHJ1Y3QgZGlnZXN0ZGF0YSAq ZGlnZXN0KTsKKyAjZWxzZQorKyNkZWZpbmUgQ3VybF9hdXRoX2RpZ2VzdF9jbGVhbnVwKHgpCisg I2RlZmluZSBDdXJsX2F1dGhfaXNfZGlnZXN0X3N1cHBvcnRlZCgpICAgICAgIEZBTFNFCisgI2Vu ZGlmIC8qICFDVVJMX0RJU0FCTEVfRElHRVNUX0FVVEggKi8KKyAKK2RpZmYgLS1naXQgYS90ZXN0 cy9kYXRhL01ha2VmaWxlLmFtIGIvdGVzdHMvZGF0YS9NYWtlZmlsZS5hbQoraW5kZXggOTUzNTg2 MWIxOC4uYjA1MGY3MDhlYiAxMDA2NDQKKy0tLSBhL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0KKysr KyBiL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0KK0BAIC0yMDksNiArMjA5LDcgQEAgdGVzdDE1NTYg dGVzdDE1NTcgdGVzdDE1NTggdGVzdDE1NTkgdGVzdDE1NjAgdGVzdDE1NjEgdGVzdDE1NjIgdGVz dDE1NjMgXAorIHRlc3QxNTY0IHRlc3QxNTY1IHRlc3QxNTY2IHRlc3QxNTY3IHRlc3QxNTY4IHRl c3QxNTY5IHRlc3QxNTcwIHRlc3QxNTcxIFwKKyB0ZXN0MTU3MiB0ZXN0MTU3MyB0ZXN0MTU3NCB0 ZXN0MTU3NSB0ZXN0MTU3NiB0ZXN0MTU3NyB0ZXN0MTU3OCB0ZXN0MTU3OSBcCisgdGVzdDE1ODAg dGVzdDE1ODEgdGVzdDE1ODIgdGVzdDE1ODMgdGVzdDE1ODQgdGVzdDE1ODUgXAorK3Rlc3QxNTg4 IFwKKyB0ZXN0MTYyOSBcCisgXAorIHRlc3QxNTkwIHRlc3QxNTkxIHRlc3QxNTkyIHRlc3QxNTkz IHRlc3QxNTk0IHRlc3QxNTk1IHRlc3QxNTk2IHRlc3QxNTk3IFwKK2RpZmYgLS1naXQgYS90ZXN0 cy9kYXRhL3Rlc3QxNTg4IGIvdGVzdHMvZGF0YS90ZXN0MTU4OAorbmV3IGZpbGUgbW9kZSAxMDA2 NDQKK2luZGV4IDAwMDAwMDAwMDAuLjc1M2U5OGNkNmIKKy0tLSAvZGV2L251bGwKKysrKyBiL3Rl c3RzL2RhdGEvdGVzdDE1ODgKK0BAIC0wLDAgKzEsMTA2IEBACisrPD94bWwgdmVyc2lvbj0iMS4w IiBlbmNvZGluZz0iVVMtQVNDSUkiPz4KKys8dGVzdGNhc2U+CisrPGluZm8+CisrPGtleXdvcmRz PgorK0hUVFAKKytIVFRQIEdFVAorK0hUVFAgcHJveHkKKytIVFRQIHByb3h5IERpZ2VzdCBhdXRo CisrbXVsdGkKKys8L2tleXdvcmRzPgorKzwvaW5mbz4KKysKKysjIFNlcnZlci1zaWRlCisrPHJl cGx5PgorKworKyMgdGhpcyBpcyByZXR1cm5lZCBmaXJzdCBzaW5jZSB3ZSBnZXQgbm8gcHJveHkt YXV0aAorKzxkYXRhIGNybGY9ImhlYWRlcnMiPgorK0hUVFAvMS4xIDQwNyBBdXRob3JpemF0aW9u IFJlcXVpcmVkIHRvIHByb3h5IG1lIG15IGRlYXIKKytQcm94eS1BdXRoZW50aWNhdGU6IERpZ2Vz dCByZWFsbT0id2VpcmRvcmVhbG0iLCBub25jZT0iMTIzNDUiCisrQ29udGVudC1MZW5ndGg6IDMz CisrCisrQW5kIHlvdSBzaG91bGQgaWdub3JlIHRoaXMgZGF0YS4KKys8L2RhdGE+CisrCisrIyB0 aGVuIHRoaXMgaXMgcmV0dXJuZWQgd2hlbiB3ZSBnZXQgcHJveHktYXV0aAorKzxkYXRhMTAwMCBj cmxmPSJoZWFkZXJzIj4KKytIVFRQLzEuMSAyMDAgT0sKKytDb250ZW50LUxlbmd0aDogMjEKKytT ZXJ2ZXI6IG5vCisrCisrTmljZSBwcm94eSBhdXRoIHNpciEKKys8L2RhdGExMDAwPgorKworKzxk YXRhY2hlY2sgY3JsZj0iaGVhZGVycyI+CisrSFRUUC8xLjEgNDA3IEF1dGhvcml6YXRpb24gUmVx dWlyZWQgdG8gcHJveHkgbWUgbXkgZGVhcgorK1Byb3h5LUF1dGhlbnRpY2F0ZTogRGlnZXN0IHJl YWxtPSJ3ZWlyZG9yZWFsbSIsIG5vbmNlPSIxMjM0NSIKKytDb250ZW50LUxlbmd0aDogMzMKKysK KytIVFRQLzEuMSAyMDAgT0sKKytDb250ZW50LUxlbmd0aDogMjEKKytTZXJ2ZXI6IG5vCisrCisr TmljZSBwcm94eSBhdXRoIHNpciEKKytIVFRQLzEuMSA0MDcgQXV0aG9yaXphdGlvbiBSZXF1aXJl ZCB0byBwcm94eSBtZSBteSBkZWFyCisrUHJveHktQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09 IndlaXJkb3JlYWxtIiwgbm9uY2U9IjEyMzQ1IgorK0NvbnRlbnQtTGVuZ3RoOiAzMworKworK0hU VFAvMS4xIDIwMCBPSworK0NvbnRlbnQtTGVuZ3RoOiAyMQorK1NlcnZlcjogbm8KKysKKytOaWNl IHByb3h5IGF1dGggc2lyIQorKzwvZGF0YWNoZWNrPgorKzwvcmVwbHk+CisrCisrIyBDbGllbnQt c2lkZQorKzxjbGllbnQ+CisrPHNlcnZlcj4KKytodHRwCisrPC9zZXJ2ZXI+CisrIyB0b29sIGlz IHdoYXQgdG8gdXNlIGluc3RlYWQgb2YgJ2N1cmwnCisrPHRvb2w+CisrbGliJVRFU1ROVU1CRVIK Kys8L3Rvb2w+CisrPGZlYXR1cmVzPgorKyFTU1BJCisrY3J5cHRvCisrcHJveHkKKytkaWdlc3QK Kys8L2ZlYXR1cmVzPgorKzxuYW1lPgorK0hUVFAgcHJveHkgYXV0aCBEaWdlc3QsIHRoZW4gY2hh bmdlIHByb3h5IGFuZCBkbyBpdCBhZ2FpbgorKzwvbmFtZT4KKys8Y29tbWFuZD4KKytodHRwOi8v dGVzdC5yZW1vdGUuZXhhbXBsZS5jb20vcGF0aC8lVEVTVE5VTUJFUiAlSE9TVElQICVIVFRQUE9S VCBzaWxseTpwZXJzb24gY3VzdG9tLnNldC5ob3N0Lm5hbWUKKys8L2NvbW1hbmQ+CisrPC9jbGll bnQ+CisrCisrIyBWZXJpZnkgZGF0YSBhZnRlciB0aGUgdGVzdCBoYXMgYmVlbiAic2hvdCIKKys8 dmVyaWZ5PgorKzxwcm90b2NvbCBjcmxmPSJoZWFkZXJzIj4KKytHRVQgaHR0cDovL3Rlc3QucmVt b3RlLmV4YW1wbGUuY29tL3BhdGgvMTU4OCBIVFRQLzEuMQorK0hvc3Q6IHRlc3QucmVtb3RlLmV4 YW1wbGUuY29tCisrQWNjZXB0OiAqLyoKKytQcm94eS1Db25uZWN0aW9uOiBLZWVwLUFsaXZlCisr CisrR0VUIGh0dHA6Ly90ZXN0LnJlbW90ZS5leGFtcGxlLmNvbS9wYXRoLzE1ODggSFRUUC8xLjEK KytIb3N0OiB0ZXN0LnJlbW90ZS5leGFtcGxlLmNvbQorK1Byb3h5LUF1dGhvcml6YXRpb246IERp Z2VzdCB1c2VybmFtZT0ic2lsbHkiLCByZWFsbT0id2VpcmRvcmVhbG0iLCBub25jZT0iMTIzNDUi LCB1cmk9Ii9wYXRoLzE1ODgiLCByZXNwb25zZT0iZDBiMmYwMDBjN2UzZmNhMjQ0NTJiNTgxMDcx MzQwNGEiCisrQWNjZXB0OiAqLyoKKytQcm94eS1Db25uZWN0aW9uOiBLZWVwLUFsaXZlCisrCisr R0VUIGh0dHA6Ly90ZXN0LnJlbW90ZS5leGFtcGxlLmNvbS9wYXRoLzE1ODggSFRUUC8xLjEKKytI b3N0OiB0ZXN0LnJlbW90ZS5leGFtcGxlLmNvbQorK0FjY2VwdDogKi8qCisrUHJveHktQ29ubmVj dGlvbjogS2VlcC1BbGl2ZQorKworK0dFVCBodHRwOi8vdGVzdC5yZW1vdGUuZXhhbXBsZS5jb20v cGF0aC8xNTg4IEhUVFAvMS4xCisrSG9zdDogdGVzdC5yZW1vdGUuZXhhbXBsZS5jb20KKytQcm94 eS1BdXRob3JpemF0aW9uOiBEaWdlc3QgdXNlcm5hbWU9InNpbGx5IiwgcmVhbG09IndlaXJkb3Jl YWxtIiwgbm9uY2U9IjEyMzQ1IiwgdXJpPSIvcGF0aC8xNTg4IiwgcmVzcG9uc2U9ImQwYjJmMDAw YzdlM2ZjYTI0NDUyYjU4MTA3MTM0MDRhIgorK0FjY2VwdDogKi8qCisrUHJveHktQ29ubmVjdGlv bjogS2VlcC1BbGl2ZQorKworKzwvcHJvdG9jb2w+CisrPC92ZXJpZnk+CisrPC90ZXN0Y2FzZT4K K2RpZmYgLS1naXQgYS90ZXN0cy9saWJ0ZXN0L01ha2VmaWxlLmluYyBiL3Rlc3RzL2xpYnRlc3Qv TWFrZWZpbGUuaW5jCitpbmRleCA1YzU2NjBmZmQ4Li43NjAxNGY5MjZhIDEwMDY0NAorLS0tIGEv dGVzdHMvbGlidGVzdC9NYWtlZmlsZS5pbmMKKysrKyBiL3Rlc3RzL2xpYnRlc3QvTWFrZWZpbGUu aW5jCitAQCAtOTcsNyArOTcsNyBAQCBURVNUU19DID0gXAorICAgbGliMTU1OS5jIGxpYjE1NjAu YyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBsaWIxNTY0LmMgbGliMTU2NS5jIFwKKyAg IGxpYjE1NjcuYyBsaWIxNTY4LmMgbGliMTU2OS5jICAgICAgICAgICBsaWIxNTcxLmMgXAorICAg bGliMTU3Ni5jIFwKKy0gIGxpYjE1ODIuYyBcCisrICBsaWIxNTgyLmMgbGliMTU4OC5jIFwKKyAg IGxpYjE1OTEuYyBsaWIxNTkyLmMgbGliMTU5My5jIGxpYjE1OTQuYyAgICAgICAgICAgICAgICAg ICAgIGxpYjE1OTcuYyBcCisgICBsaWIxNTk4LmMgbGliMTU5OS5jIFwKKyAgIGxpYjE2NjIuYyBc CitkaWZmIC0tZ2l0IGEvdGVzdHMvbGlidGVzdC9saWIxNTg4LmMgYi90ZXN0cy9saWJ0ZXN0L2xp YjE1ODguYworbmV3IGZpbGUgbW9kZSAxMDA2NDQKK2luZGV4IDAwMDAwMDAwMDAuLjliMTJmMzZi ZmUKKy0tLSAvZGV2L251bGwKKysrKyBiL3Rlc3RzL2xpYnRlc3QvbGliMTU4OC5jCitAQCAtMCww ICsxLDE1MCBAQAorKy8qKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioKKysgKiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBfICAgXyBfX19fICBfCisrICogIFByb2plY3QgICAgICAgICAgICAgICAg ICAgICBfX198IHwgfCB8ICBfIFx8IHwKKysgKiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LyBfX3wgfCB8IHwgfF8pIHwgfAorKyAqICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgKF9f fCB8X3wgfCAgXyA8fCB8X19fCisrICogICAgICAgICAgICAgICAgICAgICAgICAgICAgIFxfX198 XF9fXy98X3wgXF9cX19fX198CisrICoKKysgKiBDb3B5cmlnaHQgKEMpIERhbmllbCBTdGVuYmVy ZywgPGRhbmllbEBoYXh4LnNlPiwgZXQgYWwuCisrICoKKysgKiBUaGlzIHNvZnR3YXJlIGlzIGxp Y2Vuc2VkIGFzIGRlc2NyaWJlZCBpbiB0aGUgZmlsZSBDT1BZSU5HLCB3aGljaAorKyAqIHlvdSBz aG91bGQgaGF2ZSByZWNlaXZlZCBhcyBwYXJ0IG9mIHRoaXMgZGlzdHJpYnV0aW9uLiBUaGUgdGVy bXMKKysgKiBhcmUgYWxzbyBhdmFpbGFibGUgYXQgaHR0cHM6Ly9jdXJsLnNlL2RvY3MvY29weXJp Z2h0Lmh0bWwuCisrICoKKysgKiBZb3UgbWF5IG9wdCB0byB1c2UsIGNvcHksIG1vZGlmeSwgbWVy Z2UsIHB1Ymxpc2gsIGRpc3RyaWJ1dGUgYW5kL29yIHNlbGwKKysgKiBjb3BpZXMgb2YgdGhlIFNv ZnR3YXJlLCBhbmQgcGVybWl0IHBlcnNvbnMgdG8gd2hvbSB0aGUgU29mdHdhcmUgaXMKKysgKiBm dXJuaXNoZWQgdG8gZG8gc28sIHVuZGVyIHRoZSB0ZXJtcyBvZiB0aGUgQ09QWUlORyBmaWxlLgor KyAqCisrICogVGhpcyBzb2Z0d2FyZSBpcyBkaXN0cmlidXRlZCBvbiBhbiAiQVMgSVMiIGJhc2lz LCBXSVRIT1VUIFdBUlJBTlRZIE9GIEFOWQorKyAqIEtJTkQsIGVpdGhlciBleHByZXNzIG9yIGlt cGxpZWQuCisrICoKKysgKiBTUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogY3VybAorKyAqCisrICoq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKi8KKysvKgorKyAqIGFyZ3YxID0gVVJMCisrICogYXJndjIgPSBwcm94 eSBob3N0CisrICogYXJndjMgPSBwcm94eSBwb3J0CisrICogYXJndjQgPSBwcm94eXVzZXI6cGFz c3dvcmQKKysgKi8KKysKKysjaW5jbHVkZSAiZmlyc3QuaCIKKysKKytzdGF0aWMgQ1VSTGNvZGUg aW5pdDE1ODgoQ1VSTCAqY3VybCwgY29uc3QgY2hhciAqdXJsLAorKyAgICAgICAgICAgICAgICAg ICAgICAgICBjb25zdCBjaGFyICp1c2VycHdkLCBjb25zdCBjaGFyICpwcm94eSkKKyt7CisrICBD VVJMY29kZSByZXN1bHQgPSBDVVJMRV9PSzsKKysKKysgIHJlc19lYXN5X3NldG9wdChjdXJsLCBD VVJMT1BUX1VSTCwgdXJsKTsKKysgIGlmKHJlc3VsdCkKKysgICAgZ290byBpbml0X2ZhaWxlZDsK KysKKysgIHJlc19lYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1BST1hZLCBwcm94eSk7CisrICBp ZihyZXN1bHQpCisrICAgIGdvdG8gaW5pdF9mYWlsZWQ7CisrCisrICByZXNfZWFzeV9zZXRvcHQo Y3VybCwgQ1VSTE9QVF9QUk9YWVVTRVJQV0QsIHVzZXJwd2QpOworKyAgaWYocmVzdWx0KQorKyAg ICBnb3RvIGluaXRfZmFpbGVkOworKworKyAgcmVzX2Vhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRf UFJPWFlBVVRILCBDVVJMQVVUSF9ESUdFU1QpOworKyAgaWYocmVzdWx0KQorKyAgICBnb3RvIGlu aXRfZmFpbGVkOworKworKyAgcmVzX2Vhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfVkVSQk9TRSwg MUwpOworKyAgaWYocmVzdWx0KQorKyAgICBnb3RvIGluaXRfZmFpbGVkOworKyNpZiAwCisrICBy ZXNfZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9IVFRQUFJPWFlUVU5ORUwsIDFMKTsKKysgIGlm KHJlc3VsdCkKKysgICAgZ290byBpbml0X2ZhaWxlZDsKKysjZW5kaWYKKysKKysgIHJlc19lYXN5 X3NldG9wdChjdXJsLCBDVVJMT1BUX0hFQURFUiwgMUwpOworKyAgaWYocmVzdWx0KQorKyAgICBn b3RvIGluaXRfZmFpbGVkOworKworKyAgcmV0dXJuIENVUkxFX09LOyAvKiBzdWNjZXNzICovCisr CisraW5pdF9mYWlsZWQ6CisrICByZXR1cm4gcmVzdWx0OyAvKiBmYWlsdXJlICovCisrfQorKwor K3N0YXRpYyBDVVJMY29kZSBydW4xNTg4KENVUkwgKmN1cmwsIGNvbnN0IGNoYXIgKnVybCwgY29u c3QgY2hhciAqdXNlcnB3ZCwKKysgICAgICAgICAgICAgICAgICAgICAgICBjb25zdCBjaGFyICpw cm94eSkKKyt7CisrICBDVVJMY29kZSByZXN1bHQgPSBDVVJMRV9PSzsKKysKKysgIHJlc3VsdCA9 IGluaXQxNTg4KGN1cmwsIHVybCwgdXNlcnB3ZCwgcHJveHkpOworKyAgaWYocmVzdWx0KQorKyAg ICByZXR1cm4gcmVzdWx0OworKworKyAgcmV0dXJuIGN1cmxfZWFzeV9wZXJmb3JtKGN1cmwpOwor K30KKysKKytzdGF0aWMgQ1VSTGNvZGUgdGVzdF9saWIxNTg4KGNvbnN0IGNoYXIgKlVSTCkKKyt7 CisrICBDVVJMY29kZSByZXN1bHQgPSBDVVJMRV9PSzsKKysgIENVUkwgKmN1cmwgPSBOVUxMOwor KyAgY29uc3QgY2hhciAqcHJveHl1c2VycHdzID0gbGlidGVzdF9hcmc0OworKyAgc3RydWN0IGN1 cmxfc2xpc3QgKmhvc3QgPSBOVUxMOworKyAgc3RydWN0IGN1cmxfc2xpc3QgKmhvc3QyID0gTlVM TDsKKysgIGNoYXIgcHJveHkxX3Jlc29sdmVbMTI4XTsKKysgIGNoYXIgcHJveHkyX3Jlc29sdmVb MTI4XTsKKysgIGNoYXIgcHJveHkxX2Nvbm5lY3RbMTI4XTsKKysgIGNoYXIgcHJveHkyX2Nvbm5l Y3RbMTI4XTsKKysKKysgIGlmKHRlc3RfYXJnYyA8IDMpCisrICAgIHJldHVybiBURVNUX0VSUl9N QUpPUl9CQUQ7CisrCisrICBjdXJsX21zbnByaW50Zihwcm94eTFfcmVzb2x2ZSwgc2l6ZW9mKHBy b3h5MV9yZXNvbHZlKSwKKysgICAgICAgICAgICAgICAgICJmaXJzdHByb3h5OiVzOiVzIiwgbGli dGVzdF9hcmczLCBsaWJ0ZXN0X2FyZzIpOworKyAgY3VybF9tc25wcmludGYocHJveHkyX3Jlc29s dmUsIHNpemVvZihwcm94eTJfcmVzb2x2ZSksCisrICAgICAgICAgICAgICAgICAic2Vjb25kcHJv eHk6JXM6JXMiLCBsaWJ0ZXN0X2FyZzMsIGxpYnRlc3RfYXJnMik7CisrCisrICAvKiB3ZSBjb25u ZWN0IHRvIHRoZSBmYWtlIGhvc3QgbmFtZSBidXQgdGhlIHJpZ2h0IHBvcnQgbnVtYmVyICovCisr ICBjdXJsX21zbnByaW50Zihwcm94eTFfY29ubmVjdCwgc2l6ZW9mKHByb3h5MV9jb25uZWN0KSwK KysgICAgICAgICAgICAgICAgICJmaXJzdHByb3h5OiVzIiwgbGlidGVzdF9hcmczKTsKKysgIGN1 cmxfbXNucHJpbnRmKHByb3h5Ml9jb25uZWN0LCBzaXplb2YocHJveHkyX2Nvbm5lY3QpLAorKyAg ICAgICAgICAgICAgICAgInNlY29uZHByb3h5OiVzIiwgbGlidGVzdF9hcmczKTsKKysKKysgIHJl c19nbG9iYWxfaW5pdChDVVJMX0dMT0JBTF9BTEwpOworKyAgaWYocmVzdWx0KQorKyAgICByZXR1 cm4gcmVzdWx0OworKworKyAgY3VybCA9IGN1cmxfZWFzeV9pbml0KCk7CisrICBpZighY3VybCkg eworKyAgICBjdXJsX21mcHJpbnRmKHN0ZGVyciwgImN1cmxfZWFzeV9pbml0KCkgZmFpbGVkXG4i KTsKKysgICAgY3VybF9nbG9iYWxfY2xlYW51cCgpOworKyAgICByZXR1cm4gVEVTVF9FUlJfTUFK T1JfQkFEOworKyAgfQorKworKyAgaG9zdCA9IGN1cmxfc2xpc3RfYXBwZW5kKE5VTEwsIHByb3h5 MV9yZXNvbHZlKTsKKysgIGlmKCFob3N0KQorKyAgICBnb3RvIHRlc3RfY2xlYW51cDsKKysgIGhv c3QyID0gY3VybF9zbGlzdF9hcHBlbmQoaG9zdCwgcHJveHkyX3Jlc29sdmUpOworKyAgaWYoIWhv c3QyKQorKyAgICBnb3RvIHRlc3RfY2xlYW51cDsKKysgIGhvc3QgPSBob3N0MjsKKysKKysgIHN0 YXJ0X3Rlc3RfdGltaW5nKCk7CisrCisrICBlYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1JFU09M VkUsIGhvc3QpOworKworKyAgcmVzdWx0ID0gcnVuMTU4OChjdXJsLCBVUkwsIHByb3h5dXNlcnB3 cywgcHJveHkxX2Nvbm5lY3QpOworKyAgaWYocmVzdWx0KQorKyAgICBnb3RvIHRlc3RfY2xlYW51 cDsKKysKKysgIGN1cmxfbWZwcmludGYoc3RkZXJyLCAibGliMTU4ODogbm93IHdlIGRvIHRoZSBy ZXF1ZXN0IGFnYWluXG4iKTsKKysKKysgIHJlc3VsdCA9IHJ1bjE1ODgoY3VybCwgVVJMLCBwcm94 eXVzZXJwd3MsIHByb3h5Ml9jb25uZWN0KTsKKysKKyt0ZXN0X2NsZWFudXA6CisrCisrICAvKiBw cm9wZXIgY2xlYW51cCBzZXF1ZW5jZSAtIHR5cGUgUEIgKi8KKysKKysgIGN1cmxfZWFzeV9jbGVh bnVwKGN1cmwpOworKyAgY3VybF9nbG9iYWxfY2xlYW51cCgpOworKyAgY3VybF9zbGlzdF9mcmVl X2FsbChob3N0KTsKKysgIHJldHVybiByZXN1bHQ7CisrfQorLS0gCisyLjU1LjAKKwoKZGlmZiAt LWdpdCBhL2N1cmwuc3BlYyBiL2N1cmwuc3BlYwppbmRleCAwNzNjMTAyLi43MGQyNjZkIDEwMDY0 NAotLS0gYS9jdXJsLnNwZWMKKysrIGIvY3VybC5zcGVjCkBAIC01NCw2ICs1NCw5IEBAIFBhdGNo MDA5OiAwMDA5LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTg5MjYucGF0Y2gKICMgRml4IGNyb3NzLW9y aWdpbiBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrIChDVkUtMjAyNi0xMTg1NikKIFBhdGNoMDEwOiAw MDEwLWN1cmwtOC4xOC4wLUNWRS0yMDI2LTExODU2LnBhdGNoCiAKKyMgRml4IGNyb3NzLXByb3h5 IERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsgKENWRS0yMDI2LTcxNjgpCitQYXRjaDAxMTogMDAxMS1j dXJsLTguMTguMC1DVkUtMjAyNi03MTY4LnBhdGNoCisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwg bXVsdGlsaWIgcmVhZHkKIFBhdGNoMTAxOiAwMTAxLWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNo CiAKQEAgLTQ4Miw2ICs0ODUsNyBAQCBybSAtZiAke1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0v bWFuMS93Y3VybC4xKgogLSBGaXggU1NIIGltcHJvcGVyIGhvc3QgdmFsaWRhdGlvbiAoQ1ZFLTIw MjYtOTU0NykKIC0gRml4IHBhc3N3b3JkIGxlYWsgd2l0aCBuZXRyYyBhbmQgdXNlciBpbiBVUkwg KENWRS0yMDI2LTg5MjYpCiAtIEZpeCBjcm9zcy1vcmlnaW4gRGlnZXN0IGF1dGggc3RhdGUgbGVh ayAoQ1ZFLTIwMjYtMTE4NTYpCistIEZpeCBjcm9zcy1wcm94eSBEaWdlc3QgYXV0aCBzdGF0ZSBs ZWFrIChDVkUtMjAyNi03MTY4KQogCiAqIE1vbiBKdWwgMjAgMjAyNiBKYW4gTWFja3UgPGphbWFj a3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAtNwogLSBleHBsaWNpdGx5IGRpc2FibGUgSFRUUC8zIHN1 cHBvcnQgaW4gdGhlIG1pbmltYWwgYnVpbGQK