From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f43: Resolves: CVE-2026-7168 - cross-proxy Digest auth state leak Date: Tue, 04 Aug 2026 07:09:03 GMT Message-ID: <178582734349.1.4263462027608653143.rpms-curl-d8e941a2e07d@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f43 X-Git-Rev: d8e941a2e07d1f6b0d6a5df6639043888359dde8 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDMKQ29tbWl0IDogZDhlOTQxYTJlMDdkMWY2YjBkNmE1ZGY2NjM5MDQzODg4MzU5ZGRlOApB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0w M1QxNDoyNzo1OSswMjowMApTdGF0cyAgOiArMzc4Ly0xIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9kOGU5NDFhMmUwN2QxZjZi MGQ2YTVkZjY2MzkwNDM4ODgzNTlkZGU4P2JyYW5jaD1mNDMKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTcxNjggLSBjcm9zcy1wcm94eSBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrCgotLS0KZGlmZiAt LWdpdCBhLzAwMDgtY3VybC04LjE1LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaCBiLzAwMDgtY3VybC04 LjE1LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwLi4yOTQ3YzFkCi0tLSAvZGV2L251bGwKKysrIGIvMDAwOC1jdXJsLTguMTUuMC1DVkUtMjAy Ni03MTY4LnBhdGNoCkBAIC0wLDAgKzEsMzcxIEBACitGcm9tIDljY2U2MTk0ZmYxZDFmMTEzNTE4 YmVlMzA2ZTk5MDdmMmNkNmNkNWEgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBEYW5p ZWwgU3RlbmJlcmcgPGRhbmllbEBoYXh4LnNlPgorRGF0ZTogTW9uLCAyNyBBcHIgMjAyNiAwOTox NDo1MSArMDIwMAorU3ViamVjdDogW1BBVENIIDEvNV0gc2V0b3B0OiBjbGVhciBwcm94eSBhdXRo IHByb3BlcnRpZXMgd2hlbiBzd2l0Y2hpbmcKKworVmVyaWZ5IHdpdGggdGVzdCAxNTg4CisKK0Ns b3NlcyAjMjE0NTMKKworKGNoZXJyeSBwaWNrZWQgZnJvbSBjb21taXQgYzFjZmRmNTlhY2JhZjk1 MDRjNDU3OGQ0Y2Y1NmNkZDdjODU5NDUwNykKKy0tLQorIGxpYi9zZXRvcHQuYyAgICAgICAgICAg ICAgIHwgIDE3ICsrKystCisgbGliL3ZhdXRoL3ZhdXRoLmggICAgICAgICAgfCAgIDEgKworIHRl c3RzL2RhdGEvTWFrZWZpbGUuYW0gICAgIHwgICAxICsKKyB0ZXN0cy9kYXRhL3Rlc3QxNTg4ICAg ICAgICB8IDEwNiArKysrKysrKysrKysrKysrKysrKysrKysrKworIHRlc3RzL2xpYnRlc3QvTWFr ZWZpbGUuaW5jIHwgICAyICstCisgdGVzdHMvbGlidGVzdC9saWIxNTg4LmMgICAgfCAxNTAgKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKworIDYgZmlsZXMgY2hhbmdlZCwgMjc1 IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCisgY3JlYXRlIG1vZGUgMTAwNjQ0IHRlc3Rz L2RhdGEvdGVzdDE1ODgKKyBjcmVhdGUgbW9kZSAxMDA2NDQgdGVzdHMvbGlidGVzdC9saWIxNTg4 LmMKKworZGlmZiAtLWdpdCBhL2xpYi9zZXRvcHQuYyBiL2xpYi9zZXRvcHQuYworaW5kZXggMTM4 MGMzM2RiNi4uMGVjMzE5MDhhMSAxMDA2NDQKKy0tLSBhL2xpYi9zZXRvcHQuYworKysrIGIvbGli L3NldG9wdC5jCitAQCAtNTQsNiArNTQsNyBAQAorICNpbmNsdWRlICJ0ZnRwLmgiCisgI2luY2x1 ZGUgInN0cmR1cC5oIgorICNpbmNsdWRlICJlc2NhcGUuaCIKKysjaW5jbHVkZSAidmF1dGgvdmF1 dGguaCIKKyAKKyAvKiBUaGUgbGFzdCAzICNpbmNsdWRlIGZpbGVzIHNob3VsZCBiZSBpbiB0aGlz IG9yZGVyICovCisgI2luY2x1ZGUgImN1cmxfcHJpbnRmLmgiCitAQCAtMTY2MSw2ICsxNjYyLDIw IEBAIHN0YXRpYyBDVVJMY29kZSBzZXRvcHRfcG9pbnRlcnMoc3RydWN0IEN1cmxfZWFzeSAqZGF0 YSwgQ1VSTG9wdGlvbiBvcHRpb24sCisgICByZXR1cm4gcmVzdWx0OworIH0KKyAKKysjaWZuZGVm IENVUkxfRElTQUJMRV9QUk9YWQorK3N0YXRpYyBDVVJMY29kZSBzZXRwcm94eShzdHJ1Y3QgQ3Vy bF9lYXN5ICpkYXRhLCBjb25zdCBjaGFyICpwcm94eSkKKyt7CisrICBpZigoZGF0YS0+c2V0LnN0 cltTVFJJTkdfUFJPWFldICYmIHByb3h5KSAmJgorKyAgICAgLyogdGhlcmUgd2FzIG9uZSBzZXQs IGlzIHRoaXMgYSBuZXcgb25lPyAqLworKyAgICAgIXN0cmNtcChkYXRhLT5zZXQuc3RyW1NUUklO R19QUk9YWV0sIHByb3h5KSkKKysgICAgcmV0dXJuIENVUkxFX09LOyAvKiBzYW1lIG9uZSBhcyBi ZWZvcmUgKi8KKysKKysgIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51cCgmZGF0YS0+c3RhdGUucHJv eHlkaWdlc3QpOworKyAgbWVtc2V0KCZkYXRhLT5zdGF0ZS5hdXRocHJveHksIDAsIHNpemVvZihk YXRhLT5zdGF0ZS5hdXRocHJveHkpKTsKKysgIHJldHVybiBDdXJsX3NldHN0cm9wdCgmZGF0YS0+ c2V0LnN0cltTVFJJTkdfUFJPWFldLCBwcm94eSk7CisrfQorKyNlbmRpZgorKworIHN0YXRpYyBD VVJMY29kZSBzZXRvcHRfY3B0cihzdHJ1Y3QgQ3VybF9lYXN5ICpkYXRhLCBDVVJMb3B0aW9uIG9w dGlvbiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgY2hhciAqcHRyKQorIHsKK0BAIC0x OTQ4LDcgKzE5NjMsNyBAQCBzdGF0aWMgQ1VSTGNvZGUgc2V0b3B0X2NwdHIoc3RydWN0IEN1cmxf ZWFzeSAqZGF0YSwgQ1VSTG9wdGlvbiBvcHRpb24sCisgICAgICAqIFNldHRpbmcgaXQgdG8gTlVM TCwgbWVhbnMgbm8gcHJveHkgYnV0IGFsbG93cyB0aGUgZW52aXJvbm1lbnQgdmFyaWFibGVzCisg ICAgICAqIHRvIGRlY2lkZSBmb3IgdXMgKGlmIENVUkxPUFRfU09DS1NfUFJPWFkgc2V0dGluZyBp dCB0byBOVUxMKS4KKyAgICAgICovCistICAgIHJldHVybiBDdXJsX3NldHN0cm9wdCgmZGF0YS0+ c2V0LnN0cltTVFJJTkdfUFJPWFldLCBwdHIpOworKyAgICByZXR1cm4gc2V0cHJveHkoZGF0YSwg cHRyKTsKKyAKKyAgIGNhc2UgQ1VSTE9QVF9QUkVfUFJPWFk6CisgICAgIC8qCitkaWZmIC0tZ2l0 IGEvbGliL3ZhdXRoL3ZhdXRoLmggYi9saWIvdmF1dGgvdmF1dGguaAoraW5kZXggN2QwODVlMzNm ZC4uZGRlYWZlMzllYSAxMDA2NDQKKy0tLSBhL2xpYi92YXV0aC92YXV0aC5oCisrKysgYi9saWIv dmF1dGgvdmF1dGguaAorQEAgLTExNyw2ICsxMTcsNyBAQCBDVVJMY29kZSBDdXJsX2F1dGhfY3Jl YXRlX2RpZ2VzdF9odHRwX21lc3NhZ2Uoc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwKKyAvKiBUaGlz IGlzIHVzZWQgdG8gY2xlYW4gdXAgdGhlIGRpZ2VzdCBzcGVjaWZpYyBkYXRhICovCisgdm9pZCBD dXJsX2F1dGhfZGlnZXN0X2NsZWFudXAoc3RydWN0IGRpZ2VzdGRhdGEgKmRpZ2VzdCk7CisgI2Vs c2UKKysjZGVmaW5lIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51cCh4KQorICNkZWZpbmUgQ3VybF9h dXRoX2lzX2RpZ2VzdF9zdXBwb3J0ZWQoKSAgICAgICBGQUxTRQorICNlbmRpZiAvKiAhQ1VSTF9E SVNBQkxFX0RJR0VTVF9BVVRIICovCisgCitkaWZmIC0tZ2l0IGEvdGVzdHMvZGF0YS9NYWtlZmls ZS5hbSBiL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0KK2luZGV4IGNhMWEwYzUyZjguLjM2OWY2ODdl Y2QgMTAwNjQ0CistLS0gYS90ZXN0cy9kYXRhL01ha2VmaWxlLmFtCisrKysgYi90ZXN0cy9kYXRh L01ha2VmaWxlLmFtCitAQCAtMjA4LDYgKzIwOCw3IEBAIHRlc3QxNTUwIHRlc3QxNTUxIHRlc3Qx NTUyIHRlc3QxNTUzIHRlc3QxNTU0IHRlc3QxNTU1IHRlc3QxNTU2IHRlc3QxNTU3IFwKKyB0ZXN0 MTU1OCB0ZXN0MTU1OSB0ZXN0MTU2MCB0ZXN0MTU2MSB0ZXN0MTU2MiB0ZXN0MTU2MyB0ZXN0MTU2 NCB0ZXN0MTU2NSBcCisgdGVzdDE1NjYgdGVzdDE1NjcgdGVzdDE1NjggdGVzdDE1NjkgdGVzdDE1 NzAgdGVzdDE1NzEgdGVzdDE1NzIgdGVzdDE1NzMgXAorIHRlc3QxNTc0IHRlc3QxNTc1IHRlc3Qx NTc2IHRlc3QxNTc3IHRlc3QxNTc4IHRlc3QxNTc5IHRlc3QxNTgwIHRlc3QxNTgxIFwKKyt0ZXN0 MTU4OCBcCisgXAorIHRlc3QxNTkwIHRlc3QxNTkxIHRlc3QxNTkyIHRlc3QxNTkzIHRlc3QxNTk0 IHRlc3QxNTk1IHRlc3QxNTk2IHRlc3QxNTk3IFwKKyB0ZXN0MTU5OCB0ZXN0MTU5OSB0ZXN0MTYw MCB0ZXN0MTYwMSB0ZXN0MTYwMiB0ZXN0MTYwMyB0ZXN0MTYwNCB0ZXN0MTYwNSBcCitkaWZmIC0t Z2l0IGEvdGVzdHMvZGF0YS90ZXN0MTU4OCBiL3Rlc3RzL2RhdGEvdGVzdDE1ODgKK25ldyBmaWxl IG1vZGUgMTAwNjQ0CitpbmRleCAwMDAwMDAwMDAwLi43NTNlOThjZDZiCistLS0gL2Rldi9udWxs CisrKysgYi90ZXN0cy9kYXRhL3Rlc3QxNTg4CitAQCAtMCwwICsxLDEwNiBAQAorKzw/eG1sIHZl cnNpb249IjEuMCIgZW5jb2Rpbmc9IlVTLUFTQ0lJIj8+CisrPHRlc3RjYXNlPgorKzxpbmZvPgor KzxrZXl3b3Jkcz4KKytIVFRQCisrSFRUUCBHRVQKKytIVFRQIHByb3h5CisrSFRUUCBwcm94eSBE aWdlc3QgYXV0aAorK211bHRpCisrPC9rZXl3b3Jkcz4KKys8L2luZm8+CisrCisrIyBTZXJ2ZXIt c2lkZQorKzxyZXBseT4KKysKKysjIHRoaXMgaXMgcmV0dXJuZWQgZmlyc3Qgc2luY2Ugd2UgZ2V0 IG5vIHByb3h5LWF1dGgKKys8ZGF0YSBjcmxmPSJoZWFkZXJzIj4KKytIVFRQLzEuMSA0MDcgQXV0 aG9yaXphdGlvbiBSZXF1aXJlZCB0byBwcm94eSBtZSBteSBkZWFyCisrUHJveHktQXV0aGVudGlj YXRlOiBEaWdlc3QgcmVhbG09IndlaXJkb3JlYWxtIiwgbm9uY2U9IjEyMzQ1IgorK0NvbnRlbnQt TGVuZ3RoOiAzMworKworK0FuZCB5b3Ugc2hvdWxkIGlnbm9yZSB0aGlzIGRhdGEuCisrPC9kYXRh PgorKworKyMgdGhlbiB0aGlzIGlzIHJldHVybmVkIHdoZW4gd2UgZ2V0IHByb3h5LWF1dGgKKys8 ZGF0YTEwMDAgY3JsZj0iaGVhZGVycyI+CisrSFRUUC8xLjEgMjAwIE9LCisrQ29udGVudC1MZW5n dGg6IDIxCisrU2VydmVyOiBubworKworK05pY2UgcHJveHkgYXV0aCBzaXIhCisrPC9kYXRhMTAw MD4KKysKKys8ZGF0YWNoZWNrPgorK0hUVFAvMS4xIDQwNyBBdXRob3JpemF0aW9uIFJlcXVpcmVk IHRvIHByb3h5IG1lIG15IGRlYXIKKytQcm94eS1BdXRoZW50aWNhdGU6IERpZ2VzdCByZWFsbT0i d2VpcmRvcmVhbG0iLCBub25jZT0iMTIzNDUiCisrQ29udGVudC1MZW5ndGg6IDMzCisrCisrSFRU UC8xLjEgMjAwIE9LCisrQ29udGVudC1MZW5ndGg6IDIxCisrU2VydmVyOiBubworKworK05pY2Ug cHJveHkgYXV0aCBzaXIhCisrSFRUUC8xLjEgNDA3IEF1dGhvcml6YXRpb24gUmVxdWlyZWQgdG8g cHJveHkgbWUgbXkgZGVhcgorK1Byb3h5LUF1dGhlbnRpY2F0ZTogRGlnZXN0IHJlYWxtPSJ3ZWly ZG9yZWFsbSIsIG5vbmNlPSIxMjM0NSIKKytDb250ZW50LUxlbmd0aDogMzMKKysKKytIVFRQLzEu MSAyMDAgT0sKKytDb250ZW50LUxlbmd0aDogMjEKKytTZXJ2ZXI6IG5vCisrCisrTmljZSBwcm94 eSBhdXRoIHNpciEKKys8L2RhdGFjaGVjaz4KKys8L3JlcGx5PgorKworKyMgQ2xpZW50LXNpZGUK Kys8Y2xpZW50PgorKzxzZXJ2ZXI+CisraHR0cAorKzwvc2VydmVyPgorKyMgdG9vbCBpcyB3aGF0 IHRvIHVzZSBpbnN0ZWFkIG9mICdjdXJsJworKzx0b29sPgorK2xpYiVURVNUTlVNQkVSCisrPC90 b29sPgorKzxmZWF0dXJlcz4KKyshU1NQSQorK2NyeXB0bworK3Byb3h5CisrZGlnZXN0CisrPC9m ZWF0dXJlcz4KKys8bmFtZT4KKytIVFRQIHByb3h5IGF1dGggRGlnZXN0LCB0aGVuIGNoYW5nZSBw cm94eSBhbmQgZG8gaXQgYWdhaW4KKys8L25hbWU+CisrPGNvbW1hbmQ+CisraHR0cDovL3Rlc3Qu cmVtb3RlLmV4YW1wbGUuY29tL3BhdGgvJVRFU1ROVU1CRVIgJUhPU1RJUCAlSFRUUFBPUlQgc2ls bHk6cGVyc29uIGN1c3RvbS5zZXQuaG9zdC5uYW1lCisrPC9jb21tYW5kPgorKzwvY2xpZW50Pgor KworKyMgVmVyaWZ5IGRhdGEgYWZ0ZXIgdGhlIHRlc3QgaGFzIGJlZW4gInNob3QiCisrPHZlcmlm eT4KKys8cHJvdG9jb2wgY3JsZj0iaGVhZGVycyI+CisrR0VUIGh0dHA6Ly90ZXN0LnJlbW90ZS5l eGFtcGxlLmNvbS9wYXRoLzE1ODggSFRUUC8xLjEKKytIb3N0OiB0ZXN0LnJlbW90ZS5leGFtcGxl LmNvbQorK0FjY2VwdDogKi8qCisrUHJveHktQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQorKworK0dF VCBodHRwOi8vdGVzdC5yZW1vdGUuZXhhbXBsZS5jb20vcGF0aC8xNTg4IEhUVFAvMS4xCisrSG9z dDogdGVzdC5yZW1vdGUuZXhhbXBsZS5jb20KKytQcm94eS1BdXRob3JpemF0aW9uOiBEaWdlc3Qg dXNlcm5hbWU9InNpbGx5IiwgcmVhbG09IndlaXJkb3JlYWxtIiwgbm9uY2U9IjEyMzQ1IiwgdXJp PSIvcGF0aC8xNTg4IiwgcmVzcG9uc2U9ImQwYjJmMDAwYzdlM2ZjYTI0NDUyYjU4MTA3MTM0MDRh IgorK0FjY2VwdDogKi8qCisrUHJveHktQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQorKworK0dFVCBo dHRwOi8vdGVzdC5yZW1vdGUuZXhhbXBsZS5jb20vcGF0aC8xNTg4IEhUVFAvMS4xCisrSG9zdDog dGVzdC5yZW1vdGUuZXhhbXBsZS5jb20KKytBY2NlcHQ6ICovKgorK1Byb3h5LUNvbm5lY3Rpb246 IEtlZXAtQWxpdmUKKysKKytHRVQgaHR0cDovL3Rlc3QucmVtb3RlLmV4YW1wbGUuY29tL3BhdGgv MTU4OCBIVFRQLzEuMQorK0hvc3Q6IHRlc3QucmVtb3RlLmV4YW1wbGUuY29tCisrUHJveHktQXV0 aG9yaXphdGlvbjogRGlnZXN0IHVzZXJuYW1lPSJzaWxseSIsIHJlYWxtPSJ3ZWlyZG9yZWFsbSIs IG5vbmNlPSIxMjM0NSIsIHVyaT0iL3BhdGgvMTU4OCIsIHJlc3BvbnNlPSJkMGIyZjAwMGM3ZTNm Y2EyNDQ1MmI1ODEwNzEzNDA0YSIKKytBY2NlcHQ6ICovKgorK1Byb3h5LUNvbm5lY3Rpb246IEtl ZXAtQWxpdmUKKysKKys8L3Byb3RvY29sPgorKzwvdmVyaWZ5PgorKzwvdGVzdGNhc2U+CitkaWZm IC0tZ2l0IGEvdGVzdHMvbGlidGVzdC9NYWtlZmlsZS5pbmMgYi90ZXN0cy9saWJ0ZXN0L01ha2Vm aWxlLmluYworaW5kZXggODg3OGFlODVmYS4uYzk5YWY2MzdkZCAxMDA2NDQKKy0tLSBhL3Rlc3Rz L2xpYnRlc3QvTWFrZWZpbGUuaW5jCisrKysgYi90ZXN0cy9saWJ0ZXN0L01ha2VmaWxlLmluYwor QEAgLTc1LDcgKzc1LDcgQEAgVEVTVFNfQyA9IFwKKyAgIGxpYjE1NTIuYyBsaWIxNTUzLmMgbGli MTU1NC5jIGxpYjE1NTUuYyBsaWIxNTU2LmMgbGliMTU1Ny5jIGxpYjE1NTguYyBcCisgICBsaWIx NTU5LmMgbGliMTU2MC5jICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGxpYjE1NjQuYyBs aWIxNTY1LmMgXAorICAgbGliMTU2Ny5jIGxpYjE1NjguYyBsaWIxNTY5LmMgICAgICAgICAgIGxp YjE1NzEuYyBcCistICBsaWIxNTc2LmMgXAorKyAgbGliMTU3Ni5jIGxpYjE1ODguYyBcCisgICBs aWIxNTkxLmMgbGliMTU5Mi5jIGxpYjE1OTMuYyBsaWIxNTk0LmMgICAgICAgICAgICAgICAgICAg ICBsaWIxNTk3LmMgXAorICAgbGliMTU5OC5jIGxpYjE1OTkuYyBcCisgICBsaWIxNjYyLmMgXAor ZGlmZiAtLWdpdCBhL3Rlc3RzL2xpYnRlc3QvbGliMTU4OC5jIGIvdGVzdHMvbGlidGVzdC9saWIx NTg4LmMKK25ldyBmaWxlIG1vZGUgMTAwNjQ0CitpbmRleCAwMDAwMDAwMDAwLi45YjEyZjM2YmZl CistLS0gL2Rldi9udWxsCisrKysgYi90ZXN0cy9saWJ0ZXN0L2xpYjE1ODguYworQEAgLTAsMCAr MSwxNTAgQEAKKysvKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqCisrICogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXyAgIF8gX19fXyAgXworKyAqICBQcm9qZWN0ICAgICAgICAgICAgICAgICAg ICAgX19ffCB8IHwgfCAgXyBcfCB8CisrICogICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8g X198IHwgfCB8IHxfKSB8IHwKKysgKiAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IChfX3wg fF98IHwgIF8gPHwgfF9fXworKyAqICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcX19ffFxf X18vfF98IFxfXF9fX19ffAorKyAqCisrICogQ29weXJpZ2h0IChDKSBEYW5pZWwgU3RlbmJlcmcs IDxkYW5pZWxAaGF4eC5zZT4sIGV0IGFsLgorKyAqCisrICogVGhpcyBzb2Z0d2FyZSBpcyBsaWNl bnNlZCBhcyBkZXNjcmliZWQgaW4gdGhlIGZpbGUgQ09QWUlORywgd2hpY2gKKysgKiB5b3Ugc2hv dWxkIGhhdmUgcmVjZWl2ZWQgYXMgcGFydCBvZiB0aGlzIGRpc3RyaWJ1dGlvbi4gVGhlIHRlcm1z CisrICogYXJlIGFsc28gYXZhaWxhYmxlIGF0IGh0dHBzOi8vY3VybC5zZS9kb2NzL2NvcHlyaWdo dC5odG1sLgorKyAqCisrICogWW91IG1heSBvcHQgdG8gdXNlLCBjb3B5LCBtb2RpZnksIG1lcmdl LCBwdWJsaXNoLCBkaXN0cmlidXRlIGFuZC9vciBzZWxsCisrICogY29waWVzIG9mIHRoZSBTb2Z0 d2FyZSwgYW5kIHBlcm1pdCBwZXJzb25zIHRvIHdob20gdGhlIFNvZnR3YXJlIGlzCisrICogZnVy bmlzaGVkIHRvIGRvIHNvLCB1bmRlciB0aGUgdGVybXMgb2YgdGhlIENPUFlJTkcgZmlsZS4KKysg KgorKyAqIFRoaXMgc29mdHdhcmUgaXMgZGlzdHJpYnV0ZWQgb24gYW4gIkFTIElTIiBiYXNpcywg V0lUSE9VVCBXQVJSQU5UWSBPRiBBTlkKKysgKiBLSU5ELCBlaXRoZXIgZXhwcmVzcyBvciBpbXBs aWVkLgorKyAqCisrICogU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IGN1cmwKKysgKgorKyAqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKiovCisrLyoKKysgKiBhcmd2MSA9IFVSTAorKyAqIGFyZ3YyID0gcHJveHkg aG9zdAorKyAqIGFyZ3YzID0gcHJveHkgcG9ydAorKyAqIGFyZ3Y0ID0gcHJveHl1c2VyOnBhc3N3 b3JkCisrICovCisrCisrI2luY2x1ZGUgImZpcnN0LmgiCisrCisrc3RhdGljIENVUkxjb2RlIGlu aXQxNTg4KENVUkwgKmN1cmwsIGNvbnN0IGNoYXIgKnVybCwKKysgICAgICAgICAgICAgICAgICAg ICAgICAgY29uc3QgY2hhciAqdXNlcnB3ZCwgY29uc3QgY2hhciAqcHJveHkpCisreworKyAgQ1VS TGNvZGUgcmVzID0gQ1VSTEVfT0s7CisrCisrICByZXNfZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9Q VF9VUkwsIHVybCk7CisrICBpZihyZXMpCisrICAgIGdvdG8gaW5pdF9mYWlsZWQ7CisrCisrICBy ZXNfZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9QUk9YWSwgcHJveHkpOworKyAgaWYocmVzKQor KyAgICBnb3RvIGluaXRfZmFpbGVkOworKworKyAgcmVzX2Vhc3lfc2V0b3B0KGN1cmwsIENVUkxP UFRfUFJPWFlVU0VSUFdELCB1c2VycHdkKTsKKysgIGlmKHJlcykKKysgICAgZ290byBpbml0X2Zh aWxlZDsKKysKKysgIHJlc19lYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1BST1hZQVVUSCwgQ1VS TEFVVEhfRElHRVNUKTsKKysgIGlmKHJlcykKKysgICAgZ290byBpbml0X2ZhaWxlZDsKKysKKysg IHJlc19lYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1ZFUkJPU0UsIDFMKTsKKysgIGlmKHJlcykK KysgICAgZ290byBpbml0X2ZhaWxlZDsKKysjaWYgMAorKyAgcmVzX2Vhc3lfc2V0b3B0KGN1cmws IENVUkxPUFRfSFRUUFBST1hZVFVOTkVMLCAxTCk7CisrICBpZihyZXMpCisrICAgIGdvdG8gaW5p dF9mYWlsZWQ7CisrI2VuZGlmCisrCisrICByZXNfZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9I RUFERVIsIDFMKTsKKysgIGlmKHJlcykKKysgICAgZ290byBpbml0X2ZhaWxlZDsKKysKKysgIHJl dHVybiBDVVJMRV9PSzsgLyogc3VjY2VzcyAqLworKworK2luaXRfZmFpbGVkOgorKyAgcmV0dXJu IHJlczsgLyogZmFpbHVyZSAqLworK30KKysKKytzdGF0aWMgQ1VSTGNvZGUgcnVuMTU4OChDVVJM ICpjdXJsLCBjb25zdCBjaGFyICp1cmwsIGNvbnN0IGNoYXIgKnVzZXJwd2QsCisrICAgICAgICAg ICAgICAgICAgICAgICAgY29uc3QgY2hhciAqcHJveHkpCisreworKyAgQ1VSTGNvZGUgcmVzID0g Q1VSTEVfT0s7CisrCisrICByZXMgPSBpbml0MTU4OChjdXJsLCB1cmwsIHVzZXJwd2QsIHByb3h5 KTsKKysgIGlmKHJlcykKKysgICAgcmV0dXJuIHJlczsKKysKKysgIHJldHVybiBjdXJsX2Vhc3lf cGVyZm9ybShjdXJsKTsKKyt9CisrCisrc3RhdGljIENVUkxjb2RlIHRlc3RfbGliMTU4OChjaGFy ICpVUkwpCisreworKyAgQ1VSTGNvZGUgcmVzID0gQ1VSTEVfT0s7CisrICBDVVJMICpjdXJsID0g TlVMTDsKKysgIGNvbnN0IGNoYXIgKnByb3h5dXNlcnB3cyA9IGxpYnRlc3RfYXJnNDsKKysgIHN0 cnVjdCBjdXJsX3NsaXN0ICpob3N0ID0gTlVMTDsKKysgIHN0cnVjdCBjdXJsX3NsaXN0ICpob3N0 MiA9IE5VTEw7CisrICBjaGFyIHByb3h5MV9yZXNvbHZlWzEyOF07CisrICBjaGFyIHByb3h5Ml9y ZXNvbHZlWzEyOF07CisrICBjaGFyIHByb3h5MV9jb25uZWN0WzEyOF07CisrICBjaGFyIHByb3h5 Ml9jb25uZWN0WzEyOF07CisrCisrICBpZih0ZXN0X2FyZ2MgPCAzKQorKyAgICByZXR1cm4gVEVT VF9FUlJfTUFKT1JfQkFEOworKworKyAgY3VybF9tc25wcmludGYocHJveHkxX3Jlc29sdmUsIHNp emVvZihwcm94eTFfcmVzb2x2ZSksCisrICAgICAgICAgICAgICAgICAiZmlyc3Rwcm94eTolczol cyIsIGxpYnRlc3RfYXJnMywgbGlidGVzdF9hcmcyKTsKKysgIGN1cmxfbXNucHJpbnRmKHByb3h5 Ml9yZXNvbHZlLCBzaXplb2YocHJveHkyX3Jlc29sdmUpLAorKyAgICAgICAgICAgICAgICAgInNl Y29uZHByb3h5OiVzOiVzIiwgbGlidGVzdF9hcmczLCBsaWJ0ZXN0X2FyZzIpOworKworKyAgLyog d2UgY29ubmVjdCB0byB0aGUgZmFrZSBob3N0IG5hbWUgYnV0IHRoZSByaWdodCBwb3J0IG51bWJl ciAqLworKyAgY3VybF9tc25wcmludGYocHJveHkxX2Nvbm5lY3QsIHNpemVvZihwcm94eTFfY29u bmVjdCksCisrICAgICAgICAgICAgICAgICAiZmlyc3Rwcm94eTolcyIsIGxpYnRlc3RfYXJnMyk7 CisrICBjdXJsX21zbnByaW50Zihwcm94eTJfY29ubmVjdCwgc2l6ZW9mKHByb3h5Ml9jb25uZWN0 KSwKKysgICAgICAgICAgICAgICAgICJzZWNvbmRwcm94eTolcyIsIGxpYnRlc3RfYXJnMyk7Cisr CisrICByZXNfZ2xvYmFsX2luaXQoQ1VSTF9HTE9CQUxfQUxMKTsKKysgIGlmKHJlcykKKysgICAg cmV0dXJuIHJlczsKKysKKysgIGN1cmwgPSBjdXJsX2Vhc3lfaW5pdCgpOworKyAgaWYoIWN1cmwp IHsKKysgICAgY3VybF9tZnByaW50ZihzdGRlcnIsICJjdXJsX2Vhc3lfaW5pdCgpIGZhaWxlZFxu Iik7CisrICAgIGN1cmxfZ2xvYmFsX2NsZWFudXAoKTsKKysgICAgcmV0dXJuIFRFU1RfRVJSX01B Sk9SX0JBRDsKKysgIH0KKysKKysgIGhvc3QgPSBjdXJsX3NsaXN0X2FwcGVuZChOVUxMLCBwcm94 eTFfcmVzb2x2ZSk7CisrICBpZighaG9zdCkKKysgICAgZ290byB0ZXN0X2NsZWFudXA7CisrICBo b3N0MiA9IGN1cmxfc2xpc3RfYXBwZW5kKGhvc3QsIHByb3h5Ml9yZXNvbHZlKTsKKysgIGlmKCFo b3N0MikKKysgICAgZ290byB0ZXN0X2NsZWFudXA7CisrICBob3N0ID0gaG9zdDI7CisrCisrICBz dGFydF90ZXN0X3RpbWluZygpOworKworKyAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9SRVNP TFZFLCBob3N0KTsKKysKKysgIHJlcyA9IHJ1bjE1ODgoY3VybCwgVVJMLCBwcm94eXVzZXJwd3Ms IHByb3h5MV9jb25uZWN0KTsKKysgIGlmKHJlcykKKysgICAgZ290byB0ZXN0X2NsZWFudXA7Cisr CisrICBjdXJsX21mcHJpbnRmKHN0ZGVyciwgImxpYjE1ODg6IG5vdyB3ZSBkbyB0aGUgcmVxdWVz dCBhZ2FpblxuIik7CisrCisrICByZXMgPSBydW4xNTg4KGN1cmwsIFVSTCwgcHJveHl1c2VycHdz LCBwcm94eTJfY29ubmVjdCk7CisrCisrdGVzdF9jbGVhbnVwOgorKworKyAgLyogcHJvcGVyIGNs ZWFudXAgc2VxdWVuY2UgLSB0eXBlIFBCICovCisrCisrICBjdXJsX2Vhc3lfY2xlYW51cChjdXJs KTsKKysgIGN1cmxfZ2xvYmFsX2NsZWFudXAoKTsKKysgIGN1cmxfc2xpc3RfZnJlZV9hbGwoaG9z dCk7CisrICByZXR1cm4gcmVzOworK30KKy0tIAorMi41NS4wCisKCmRpZmYgLS1naXQgYS9jdXJs LnNwZWMgYi9jdXJsLnNwZWMKaW5kZXggN2U2MzhkMy4uNmE0YmMwNCAxMDA2NDQKLS0tIGEvY3Vy bC5zcGVjCisrKyBiL2N1cmwuc3BlYwpAQCAtNyw3ICs3LDcgQEAKIFN1bW1hcnk6IEEgdXRpbGl0 eSBmb3IgZ2V0dGluZyBmaWxlcyBmcm9tIHJlbW90ZSBzZXJ2ZXJzIChGVFAsIEhUVFAsIGFuZCBv dGhlcnMpCiBOYW1lOiBjdXJsCiBWZXJzaW9uOiA4LjE1LjAKLVJlbGVhc2U6IDclez9kaXN0fQor UmVsZWFzZTogOCV7P2Rpc3R9CiBMaWNlbnNlOiBjdXJsCiBTb3VyY2UwOiBodHRwczovL2N1cmwu c2UvZG93bmxvYWQvJXtuYW1lfS0le3ZlcnNpb25fbm9fdGlsZGV9LnRhci54egogU291cmNlMTog aHR0cHM6Ly9jdXJsLnNlL2Rvd25sb2FkLyV7bmFtZX0tJXt2ZXJzaW9uX25vX3RpbGRlfS50YXIu eHouYXNjCkBAIC0zNyw2ICszNyw5IEBAIFBhdGNoMDA2OiAwMDA2LWN1cmwtOC4xNS4wLUNWRS0y MDI2LTM4MDUucGF0Y2gKICMgZml4IE91dCBvZiBib3VuZHMgcmVhZCBmb3IgY29va2llIHBhdGgg KENWRS0yMDI1LTkwODYpCiBQYXRjaDAwNzogMDAwNy1jdXJsLTguMTUuMC1DVkUtMjAyNS05MDg2 LnBhdGNoCiAKKyMgZml4IGNyb3NzLXByb3h5IERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsgKENWRS0y MDI2LTcxNjgpCitQYXRjaDAwODogMDAwOC1jdXJsLTguMTUuMC1DVkUtMjAyNi03MTY4LnBhdGNo CisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVhZHkKIFBhdGNoMTAxOiAwMTAx LWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTQzNiw2ICs0MzksOSBAQCBybSAtZiAk e1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4xKgogJXtfbGliZGlyfS9saWJj dXJsLnNvLjQuWzAtOV0uWzAtOV0ubWluaW1hbAogCiAlY2hhbmdlbG9nCisqIE1vbiBBdWcgMDMg MjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE1LjAtOAorLSBmaXggY3Jv c3MtcHJveHkgRGlnZXN0IGF1dGggc3RhdGUgbGVhayAoQ1ZFLTIwMjYtNzE2OCkKKwogKiBNb24g TWF5IDExIDIwMjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+IC0gOC4xNS4wLTcKIC0g Zml4IE91dCBvZiBib3VuZHMgcmVhZCBmb3IgY29va2llIHBhdGggKENWRS0yMDI1LTkwODYpCiAK