From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f43: Resolves: CVE-2026-11856 - cross-origin Digest auth state leak Date: Tue, 04 Aug 2026 07:09:03 GMT Message-ID: <178582734394.1.1814964636631227761.rpms-curl-dfba07e10351@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f43 X-Git-Rev: dfba07e10351884a56b388f605c82242ff7d9f00 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDMKQ29tbWl0IDogZGZiYTA3ZTEwMzUxODg0YTU2YjM4OGY2MDVjODIyNDJmZjdkOWYwMApB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0w M1QxNDoyNzo1OSswMjowMApTdGF0cyAgOiArMzQxLy0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9kZmJhMDdlMTAzNTE4ODRh NTZiMzg4ZjYwNWM4MjI0MmZmN2Q5ZjAwP2JyYW5jaD1mNDMKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTExODU2IC0gY3Jvc3Mtb3JpZ2luIERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsKCi0tLQpkaWZm IC0tZ2l0IGEvMDAwOS1jdXJsLTguMTUuMC1DVkUtMjAyNi0xMTg1Ni5wYXRjaCBiLzAwMDktY3Vy bC04LjE1LjAtQ1ZFLTIwMjYtMTE4NTYucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uMTNiMGI3NwotLS0gL2Rldi9udWxsCisrKyBiLzAwMDktY3VybC04LjE1LjAtQ1ZF LTIwMjYtMTE4NTYucGF0Y2gKQEAgLTAsMCArMSwzMzcgQEAKK0Zyb20gNDQ5MzM2MjkxZjViY2Fi NGNiMjRlMjc1YWRiYzM0ZTYwMmE5ZTM2YyBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206 IEphbiBNYWNrdSA8amFtYWNrdUByZWRoYXQuY29tPgorRGF0ZTogTW9uLCAzIEF1ZyAyMDI2IDEy OjUwOjM2ICswMjAwCitTdWJqZWN0OiBbUEFUQ0ggMi81XSBkaWdlc3Q6IGZsdXNoIHN0YXRlIG9u IG9yaWdpbiBvciBjcmVkZW50aWFsIGNoYW5nZQorCitWZXJpZmllZCBieSB0ZXN0IDE2ODYKKwor Q2xvc2VzICMyMTk0NAorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA1YzZiNDg4MDM1N2Fi M2U3Mjk2N2MxYzQ1Y2FlMGY5NmZmYWJjNTM1KQorLS0tCisgbGliL2h0dHBfZGlnZXN0LmMgICAg ICAgICAgfCAzMSArKysrKysrKysrKysKKyBsaWIvdXJsZGF0YS5oICAgICAgICAgICAgICB8ICA4 ICsrLS0KKyBsaWIvdmF1dGgvZGlnZXN0LmMgICAgICAgICB8ICA0ICsrCisgbGliL3ZhdXRoL2Rp Z2VzdF9zc3BpLmMgICAgfCAgMiArCisgdGVzdHMvZGF0YS9NYWtlZmlsZS5hbSAgICAgfCAgMiAr LQorIHRlc3RzL2RhdGEvdGVzdDE2ODYgICAgICAgIHwgODQgKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrCisgdGVzdHMvbGlidGVzdC9NYWtlZmlsZS5pbmMgfCAgMSArCisgdGVzdHMv bGlidGVzdC9saWIxNjg2LmMgICAgfCA5NiArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKworIDggZmlsZXMgY2hhbmdlZCwgMjIzIGluc2VydGlvbnMoKyksIDUgZGVsZXRpb25z KC0pCisgY3JlYXRlIG1vZGUgMTAwNjQ0IHRlc3RzL2RhdGEvdGVzdDE2ODYKKyBjcmVhdGUgbW9k ZSAxMDA2NDQgdGVzdHMvbGlidGVzdC9saWIxNjg2LmMKKworZGlmZiAtLWdpdCBhL2xpYi9odHRw X2RpZ2VzdC5jIGIvbGliL2h0dHBfZGlnZXN0LmMKK2luZGV4IDY1MWJiODM0MDMuLmY4MmM4ZDAw MTQgMTAwNjQ0CistLS0gYS9saWIvaHR0cF9kaWdlc3QuYworKysrIGIvbGliL2h0dHBfZGlnZXN0 LmMKK0BAIC0xMDQsNyArMTA0LDM4IEBAIENVUkxjb2RlIEN1cmxfb3V0cHV0X2RpZ2VzdChzdHJ1 Y3QgQ3VybF9lYXN5ICpkYXRhLAorICNlbmRpZgorICAgfQorICAgZWxzZSB7CisrICAgIGJvb2wg Zmx1c2ggPSBGQUxTRTsKKyAgICAgZGlnZXN0ID0gJmRhdGEtPnN0YXRlLmRpZ2VzdDsKKysKKysg ICAgaWYoZGlnZXN0LT5vcmlnaW5faG9zdCAmJgorKyAgICAgICAoIWN1cmxfc3RyZXF1YWwoZGF0 YS0+Y29ubi0+aG9zdC5uYW1lLCBkaWdlc3QtPm9yaWdpbl9ob3N0KSB8fAorKyAgICAgICAgZGF0 YS0+Y29ubi0+cmVtb3RlX3BvcnQgIT0gZGlnZXN0LT5vcmlnaW5fcG9ydCkpCisrICAgICAgZmx1 c2ggPSBUUlVFOworKyAgICBlbHNlIGlmKGRpZ2VzdC0+dXNlciAmJgorKyAgICAgICAgICAgIEN1 cmxfdGltZXN0cmNtcChkYXRhLT5zdGF0ZS5hcHRyLnVzZXIgPworKyAgICAgICAgICAgICAgICAg ICAgICAgICAgICBkYXRhLT5zdGF0ZS5hcHRyLnVzZXIgOiAiIiwKKysgICAgICAgICAgICAgICAg ICAgICAgICAgICAgZGlnZXN0LT51c2VyKSkKKysgICAgICBmbHVzaCA9IFRSVUU7CisrICAgIGVs c2UgaWYoZGlnZXN0LT5wYXNzd2QgJiYKKysgICAgICAgICAgICBDdXJsX3RpbWVzdHJjbXAoZGF0 YS0+c3RhdGUuYXB0ci5wYXNzd2QgPworKyAgICAgICAgICAgICAgICAgICAgICAgICAgICBkYXRh LT5zdGF0ZS5hcHRyLnBhc3N3ZCA6ICIiLAorKyAgICAgICAgICAgICAgICAgICAgICAgICAgICBk aWdlc3QtPnBhc3N3ZCkpCisrICAgICAgZmx1c2ggPSBUUlVFOworKworKyAgICBpZihmbHVzaCkK KysgICAgICAvKiBmbHVzaCBob3N0IERpZ2VzdCBzdGF0ZSAqLworKyAgICAgIEN1cmxfYXV0aF9k aWdlc3RfY2xlYW51cChkaWdlc3QpOworKworKyAgICBDdXJsX3NhZmVmcmVlKGRpZ2VzdC0+b3Jp Z2luX2hvc3QpOworKyAgICBkaWdlc3QtPm9yaWdpbl9ob3N0ID0gc3RyZHVwKGRhdGEtPmNvbm4t Pmhvc3QubmFtZSk7CisrICAgIGRpZ2VzdC0+b3JpZ2luX3BvcnQgPSBkYXRhLT5jb25uLT5yZW1v dGVfcG9ydDsKKysgICAgQ3VybF9zYWZlZnJlZShkaWdlc3QtPnVzZXIpOworKyAgICBkaWdlc3Qt PnVzZXIgPSBzdHJkdXAoZGF0YS0+c3RhdGUuYXB0ci51c2VyID8KKysgICAgICAgICAgICAgICAg ICAgICAgICAgIGRhdGEtPnN0YXRlLmFwdHIudXNlciA6ICIiKTsKKysgICAgQ3VybF9zYWZlZnJl ZShkaWdlc3QtPnBhc3N3ZCk7CisrICAgIGRpZ2VzdC0+cGFzc3dkID0gc3RyZHVwKGRhdGEtPnN0 YXRlLmFwdHIucGFzc3dkID8KKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgZGF0YS0+c3Rh dGUuYXB0ci5wYXNzd2QgOiAiIik7CisrCisgICAgIGFsbG9jdXNlcnB3ZCA9ICZkYXRhLT5zdGF0 ZS5hcHRyLnVzZXJwd2Q7CisgICAgIHVzZXJwID0gZGF0YS0+c3RhdGUuYXB0ci51c2VyOworICAg ICBwYXNzd2RwID0gZGF0YS0+c3RhdGUuYXB0ci5wYXNzd2Q7CitkaWZmIC0tZ2l0IGEvbGliL3Vy bGRhdGEuaCBiL2xpYi91cmxkYXRhLmgKK2luZGV4IGU1NDcyMWRkOTguLjE4NzNlMmRjNWQgMTAw NjQ0CistLS0gYS9saWIvdXJsZGF0YS5oCisrKysgYi9saWIvdXJsZGF0YS5oCitAQCAtMzE3LDE0 ICszMTcsMTQgQEAgc3RydWN0IHNzbF9nZW5lcmFsX2NvbmZpZyB7CisgI2lmbmRlZiBDVVJMX0RJ U0FCTEVfRElHRVNUX0FVVEgKKyAvKiBTdHJ1Y3QgdXNlZCBmb3IgRGlnZXN0IGNoYWxsZW5nZS1y ZXNwb25zZSBhdXRoZW50aWNhdGlvbiAqLworIHN0cnVjdCBkaWdlc3RkYXRhIHsKKysgIGNoYXIg Km9yaWdpbl9ob3N0OworKyAgaW50IG9yaWdpbl9wb3J0OworKyAgY2hhciAqdXNlcjsKKysgIGNo YXIgKnBhc3N3ZDsKKyAjaWYgZGVmaW5lZChVU0VfV0lORE9XU19TU1BJKQorICAgQllURSAqaW5w dXRfdG9rZW47CisgICBzaXplX3QgaW5wdXRfdG9rZW5fbGVuOworICAgQ3R4dEhhbmRsZSAqaHR0 cF9jb250ZXh0OworLSAgLyogY29weSBvZiB1c2VyL3Bhc3N3ZCB1c2VkIHRvIG1ha2UgdGhlIGlk ZW50aXR5IGZvciBodHRwX2NvbnRleHQuCistICAgICBlaXRoZXIgbWF5IGJlIE5VTEwuICovCist ICBjaGFyICp1c2VyOworLSAgY2hhciAqcGFzc3dkOworICNlbHNlCisgICBjaGFyICpub25jZTsK KyAgIGNoYXIgKmNub25jZTsKK2RpZmYgLS1naXQgYS9saWIvdmF1dGgvZGlnZXN0LmMgYi9saWIv dmF1dGgvZGlnZXN0LmMKK2luZGV4IDg5ODYyOWE5NTguLjEwZTNjZDZjNjkgMTAwNjQ0CistLS0g YS9saWIvdmF1dGgvZGlnZXN0LmMKKysrKyBiL2xpYi92YXV0aC9kaWdlc3QuYworQEAgLTk5Nyw2 ICs5OTcsMTAgQEAgQ1VSTGNvZGUgQ3VybF9hdXRoX2NyZWF0ZV9kaWdlc3RfaHR0cF9tZXNzYWdl KHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEsCisgICovCisgdm9pZCBDdXJsX2F1dGhfZGlnZXN0X2Ns ZWFudXAoc3RydWN0IGRpZ2VzdGRhdGEgKmRpZ2VzdCkKKyB7CisrICBDdXJsX3NhZmVmcmVlKGRp Z2VzdC0+b3JpZ2luX2hvc3QpOworKyAgZGlnZXN0LT5vcmlnaW5fcG9ydCA9IDA7CisrICBDdXJs X3NhZmVmcmVlKGRpZ2VzdC0+dXNlcik7CisrICBDdXJsX3NhZmVmcmVlKGRpZ2VzdC0+cGFzc3dk KTsKKyAgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT5ub25jZSk7CisgICBDdXJsX3NhZmVmcmVlKGRp Z2VzdC0+Y25vbmNlKTsKKyAgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT5yZWFsbSk7CitkaWZmIC0t Z2l0IGEvbGliL3ZhdXRoL2RpZ2VzdF9zc3BpLmMgYi9saWIvdmF1dGgvZGlnZXN0X3NzcGkuYwor aW5kZXggMjhkMGIzNTk5Yy4uZGNhYWFmMjYxNiAxMDA2NDQKKy0tLSBhL2xpYi92YXV0aC9kaWdl c3Rfc3NwaS5jCisrKysgYi9saWIvdmF1dGgvZGlnZXN0X3NzcGkuYworQEAgLTY3OCw2ICs2Nzgs OCBAQCB2b2lkIEN1cmxfYXV0aF9kaWdlc3RfY2xlYW51cChzdHJ1Y3QgZGlnZXN0ZGF0YSAqZGln ZXN0KQorICAgLyogRnJlZSB0aGUgY29weSBvZiB1c2VyL3Bhc3N3ZCB1c2VkIHRvIG1ha2UgdGhl IGlkZW50aXR5IGZvciBodHRwX2NvbnRleHQgKi8KKyAgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT51 c2VyKTsKKyAgIEN1cmxfc2FmZWZyZWUoZGlnZXN0LT5wYXNzd2QpOworKyAgQ3VybF9zYWZlZnJl ZShkaWdlc3QtPm9yaWdpbl9ob3N0KTsKKysgIGRpZ2VzdC0+b3JpZ2luX3BvcnQgPSAwOworIH0K KyAKKyAjZW5kaWYgLyogVVNFX1dJTkRPV1NfU1NQSSAmJiAhQ1VSTF9ESVNBQkxFX0RJR0VTVF9B VVRIICovCitkaWZmIC0tZ2l0IGEvdGVzdHMvZGF0YS9NYWtlZmlsZS5hbSBiL3Rlc3RzL2RhdGEv TWFrZWZpbGUuYW0KK2luZGV4IDM2OWY2ODdlY2QuLjQ5Njg0ZmI3MzUgMTAwNjQ0CistLS0gYS90 ZXN0cy9kYXRhL01ha2VmaWxlLmFtCisrKysgYi90ZXN0cy9kYXRhL01ha2VmaWxlLmFtCitAQCAt MjI0LDcgKzIyNCw3IEBAIHRlc3QxNjYwIHRlc3QxNjYxIHRlc3QxNjYyIHRlc3QxNjYzIHRlc3Qx NjY0IFwKKyBcCisgdGVzdDE2NzAgdGVzdDE2NzEgXAorIFwKKy10ZXN0MTY4MCB0ZXN0MTY4MSB0 ZXN0MTY4MiB0ZXN0MTY4MyBcCisrdGVzdDE2ODAgdGVzdDE2ODEgdGVzdDE2ODIgdGVzdDE2ODMg dGVzdDE2ODYgXAorIFwKKyB0ZXN0MTcwMCB0ZXN0MTcwMSB0ZXN0MTcwMiB0ZXN0MTcwMyB0ZXN0 MTcwNCB0ZXN0MTcwNSB0ZXN0MTcwNiB0ZXN0MTcwNyBcCisgdGVzdDE3MDggdGVzdDE3MDkgdGVz dDE3MTAgXAorZGlmZiAtLWdpdCBhL3Rlc3RzL2RhdGEvdGVzdDE2ODYgYi90ZXN0cy9kYXRhL3Rl c3QxNjg2CituZXcgZmlsZSBtb2RlIDEwMDY0NAoraW5kZXggMDAwMDAwMDAwMC4uMmQ0MTlhZDYw OAorLS0tIC9kZXYvbnVsbAorKysrIGIvdGVzdHMvZGF0YS90ZXN0MTY4NgorQEAgLTAsMCArMSw4 NCBAQAorKzw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVTLUFTQ0lJIj8+CisrPHRlc3Rj YXNlPgorKzxpbmZvPgorKzxrZXl3b3Jkcz4KKytIVFRQCisrRGlnZXN0CisrPC9rZXl3b3Jkcz4K Kys8L2luZm8+CisrCisrPHJlcGx5PgorKzxkYXRhIGNybGY9ImhlYWRlcnMiIG5vY2hlY2s9Inll cyI+CisrSFRUUC8xLjEgNDAxIEF1dGhvcml6YXRpb24gUmVxdWlyZWQKKytTZXJ2ZXI6IEFwYWNo ZS8xLjMuMjcgKERhcndpbikgUEhQLzQuMS4yCisrV1dXLUF1dGhlbnRpY2F0ZTogRGlnZXN0IHJl YWxtPSJteS1iYWNreWFyZCIsIG5vbmNlPSIzMTQxNTYyOTUiCisrQ29udGVudC1MZW5ndGg6IDI2 CisrCisrVGhpcyBpcyBub3QgdGhlIHJlYWwgcGFnZQorKzwvZGF0YT4KKysKKysjIFRoaXMgaXMg c3VwcG9zZWQgdG8gYmUgcmV0dXJuZWQgd2hlbiB0aGUgc2VydmVyIGdldHMgYQorKyMgQXV0aG9y aXphdGlvbjogRGlnZXN0IGxpbmUgcGFzc2VkLWluIGZyb20gdGhlIGNsaWVudAorKzxkYXRhMTAw MCBjcmxmPSJoZWFkZXJzIj4KKytIVFRQLzEuMSAyMDAgT0sKKytTZXJ2ZXI6IEFwYWNoZS8xLjMu MjcgKERhcndpbikgUEhQLzQuMS4yCisrQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9 aXNvLTg4NTktMQorK0NvbnRlbnQtTGVuZ3RoOiAyMworKworK1RoaXMgSVMgdGhlIHJlYWwgcGFn ZSEKKys8L2RhdGExMDAwPgorKworKzwvcmVwbHk+CisrCisrPGNsaWVudD4KKys8ZmVhdHVyZXM+ CisrIVNTUEkKKytjcnlwdG8KKytkaWdlc3QKKys8L2ZlYXR1cmVzPgorKzxzZXJ2ZXI+CisraHR0 cAorKzwvc2VydmVyPgorKzxuYW1lPgorK0hUVFAgRGlnZXN0IHRvIGRpZmZlcmVudCBvcmlnaW5z IGFuZCBzd2l0Y2hpbmcgY3JlZGVudGlhbHMKKys8L25hbWU+CisrPHRvb2w+CisrbGliJVRFU1RO VU1CRVIKKys8L3Rvb2w+CisrPGNvbW1hbmQ+CisrJUhPU1RJUCAlSFRUUFBPUlQKKys8L2NvbW1h bmQ+CisrPC9jbGllbnQ+CisrCisrPHZlcmlmeT4KKys8cHJvdG9jb2wgY3JsZj0iaGVhZGVycyI+ CisrR0VUIC9hcGkgSFRUUC8xLjEKKytIb3N0OiBmaXJzdC50ZXN0OiVIVFRQUE9SVAorK0FjY2Vw dDogKi8qCisrCisrR0VUIC9hcGkgSFRUUC8xLjEKKytIb3N0OiBmaXJzdC50ZXN0OiVIVFRQUE9S VAorK0F1dGhvcml6YXRpb246IERpZ2VzdCB1c2VybmFtZT0iYWxpY2UiLCByZWFsbT0ibXktYmFj a3lhcmQiLCBub25jZT0iMzE0MTU2Mjk1IiwgdXJpPSIvYXBpIiwgcmVzcG9uc2U9IjRlY2MwMGU1 NjdjMzdhOWQ1Mzc3Mjc4OTBjMmU1YjMyIgorK0FjY2VwdDogKi8qCisrCisrR0VUIC9ob29rIEhU VFAvMS4xCisrSG9zdDogc2Vjb25kLnRlc3Q6JUhUVFBQT1JUCisrQWNjZXB0OiAqLyoKKysKKytH RVQgL2hvb2sgSFRUUC8xLjEKKytIb3N0OiBzZWNvbmQudGVzdDolSFRUUFBPUlQKKytBdXRob3Jp emF0aW9uOiBEaWdlc3QgdXNlcm5hbWU9ImFsaWNlIiwgcmVhbG09Im15LWJhY2t5YXJkIiwgbm9u Y2U9IjMxNDE1NjI5NSIsIHVyaT0iL2hvb2siLCByZXNwb25zZT0iZDNhNzczOGZiNmEyM2Y1NTQz ZmI4ZGFjYzBmMGYyNTMiCisrQWNjZXB0OiAqLyoKKysKKytHRVQgL2hvb2sgSFRUUC8xLjEKKytI b3N0OiBzZWNvbmQudGVzdDolSFRUUFBPUlQKKytBY2NlcHQ6ICovKgorKworK0dFVCAvaG9vayBI VFRQLzEuMQorK0hvc3Q6IHNlY29uZC50ZXN0OiVIVFRQUE9SVAorK0F1dGhvcml6YXRpb246IERp Z2VzdCB1c2VybmFtZT0iYm9iIiwgcmVhbG09Im15LWJhY2t5YXJkIiwgbm9uY2U9IjMxNDE1NjI5 NSIsIHVyaT0iL2hvb2siLCByZXNwb25zZT0iNzc3ZTY4ZWRkYjc3Mjk0ZDljYmQ2MTM0OTczY2Ji YWIiCisrQWNjZXB0OiAqLyoKKysKKys8L3Byb3RvY29sPgorKzwvdmVyaWZ5PgorKzwvdGVzdGNh c2U+CitkaWZmIC0tZ2l0IGEvdGVzdHMvbGlidGVzdC9NYWtlZmlsZS5pbmMgYi90ZXN0cy9saWJ0 ZXN0L01ha2VmaWxlLmluYworaW5kZXggYzk5YWY2MzdkZC4uYjU3NjBhNjliMCAxMDA2NDQKKy0t LSBhL3Rlc3RzL2xpYnRlc3QvTWFrZWZpbGUuaW5jCisrKysgYi90ZXN0cy9saWJ0ZXN0L01ha2Vm aWxlLmluYworQEAgLTc5LDYgKzc5LDcgQEAgVEVTVFNfQyA9IFwKKyAgIGxpYjE1OTEuYyBsaWIx NTkyLmMgbGliMTU5My5jIGxpYjE1OTQuYyAgICAgICAgICAgICAgICAgICAgIGxpYjE1OTcuYyBc CisgICBsaWIxNTk4LmMgbGliMTU5OS5jIFwKKyAgIGxpYjE2NjIuYyBcCisrICBsaWIxNjg2LmMg XAorICAgbGliMTkwMC5jIGxpYjE5MDEuYyAgICAgICAgICAgbGliMTkwMy5jIGxpYjE5MDUuYyBs aWIxOTA2LmMgbGliMTkwNy5jIFwKKyAgIGxpYjE5MDguYyAgICAgICAgICAgbGliMTkxMC5jIGxp YjE5MTEuYyBsaWIxOTEyLmMgbGliMTkxMy5jIFwKKyAgIGxpYjE5MTUuYyBsaWIxOTE2LmMgICAg ICAgICAgIGxpYjE5MTguYyBsaWIxOTE5LmMgXAorZGlmZiAtLWdpdCBhL3Rlc3RzL2xpYnRlc3Qv bGliMTY4Ni5jIGIvdGVzdHMvbGlidGVzdC9saWIxNjg2LmMKK25ldyBmaWxlIG1vZGUgMTAwNjQ0 CitpbmRleCAwMDAwMDAwMDAwLi5lNDU3MDEyYmI5CistLS0gL2Rldi9udWxsCisrKysgYi90ZXN0 cy9saWJ0ZXN0L2xpYjE2ODYuYworQEAgLTAsMCArMSw5NiBAQAorKy8qKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioKKysgKiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBfICAgXyBfX19fICBfCisr ICogIFByb2plY3QgICAgICAgICAgICAgICAgICAgICBfX198IHwgfCB8ICBfIFx8IHwKKysgKiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgLyBfX3wgfCB8IHwgfF8pIHwgfAorKyAqICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwgKF9ffCB8X3wgfCAgXyA8fCB8X19fCisrICogICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFxfX198XF9fXy98X3wgXF9cX19fX198CisrICoKKysgKiBD b3B5cmlnaHQgKEMpIERhbmllbCBTdGVuYmVyZywgPGRhbmllbEBoYXh4LnNlPiwgZXQgYWwuCisr ICoKKysgKiBUaGlzIHNvZnR3YXJlIGlzIGxpY2Vuc2VkIGFzIGRlc2NyaWJlZCBpbiB0aGUgZmls ZSBDT1BZSU5HLCB3aGljaAorKyAqIHlvdSBzaG91bGQgaGF2ZSByZWNlaXZlZCBhcyBwYXJ0IG9m IHRoaXMgZGlzdHJpYnV0aW9uLiBUaGUgdGVybXMKKysgKiBhcmUgYWxzbyBhdmFpbGFibGUgYXQg aHR0cHM6Ly9jdXJsLnNlL2RvY3MvY29weXJpZ2h0Lmh0bWwuCisrICoKKysgKiBZb3UgbWF5IG9w dCB0byB1c2UsIGNvcHksIG1vZGlmeSwgbWVyZ2UsIHB1Ymxpc2gsIGRpc3RyaWJ1dGUgYW5kL29y IHNlbGwKKysgKiBjb3BpZXMgb2YgdGhlIFNvZnR3YXJlLCBhbmQgcGVybWl0IHBlcnNvbnMgdG8g d2hvbSB0aGUgU29mdHdhcmUgaXMKKysgKiBmdXJuaXNoZWQgdG8gZG8gc28sIHVuZGVyIHRoZSB0 ZXJtcyBvZiB0aGUgQ09QWUlORyBmaWxlLgorKyAqCisrICogVGhpcyBzb2Z0d2FyZSBpcyBkaXN0 cmlidXRlZCBvbiBhbiAiQVMgSVMiIGJhc2lzLCBXSVRIT1VUIFdBUlJBTlRZIE9GIEFOWQorKyAq IEtJTkQsIGVpdGhlciBleHByZXNzIG9yIGltcGxpZWQuCisrICoKKysgKiBTUERYLUxpY2Vuc2Ut SWRlbnRpZmllcjogY3VybAorKyAqCisrICoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKi8KKysjaW5jbHVkZSAi Zmlyc3QuaCIKKysKKytzdGF0aWMgc2l6ZV90IGRldm51bGxfMTY4NihjaGFyICpwLCBzaXplX3Qg cywgc2l6ZV90IG4sIHZvaWQgKnUpCisreworKyAgKHZvaWQpcDsKKysgICh2b2lkKXU7CisrICBy ZXR1cm4gcyAqIG47CisrfQorKworKyNkZWZpbmUgRklSU1RIT1NUICJmaXJzdC50ZXN0IgorKyNk ZWZpbmUgU0VDT05ESE9TVCAic2Vjb25kLnRlc3QiCisrCisrc3RhdGljIENVUkxjb2RlIHRlc3Rf bGliMTY4NihjaGFyICpob3N0aXApCisreworKyAgQ1VSTCAqY3VybCA9IE5VTEw7CisrICBDVVJM Y29kZSByZXMgPSBDVVJMRV9PSzsKKysgIGNvbnN0IGNoYXIgKmh0dHBwb3J0ID0gbGlidGVzdF9h cmcyOworKyAgY2hhciBmaXJzdHVybFsxMDBdOworKyAgY2hhciBzZWNvbmR1cmxbMTAwXTsKKysg IGNoYXIgZmlyc3RyZXNbMTAwXTsKKysgIGNoYXIgc2Vjb25kcmVzWzEwMF07CisrICBzdHJ1Y3Qg Y3VybF9zbGlzdCAqaG9zdCA9IE5VTEw7CisrICBzdHJ1Y3QgY3VybF9zbGlzdCAqaG9zdDIgPSBO VUxMOworKworKyAgaWYoY3VybF9nbG9iYWxfaW5pdChDVVJMX0dMT0JBTF9BTEwpICE9IENVUkxF X09LKSB7CisrICAgIGN1cmxfbWZwcmludGYoc3RkZXJyLCAiY3VybF9nbG9iYWxfaW5pdCgpIGZh aWxlZFxuIik7CisrICAgIHJldHVybiBURVNUX0VSUl9NQUpPUl9CQUQ7CisrICB9CisrCisrICAv KiBjcmVhdGUgc3RyaW5ncyBmb3IgQ1VSTE9QVF9SRVNPTFZFICovCisrICBjdXJsX21zbnByaW50 ZihmaXJzdHJlcywgc2l6ZW9mKGZpcnN0cmVzKSwgIiVzOiVzOiVzIiwKKysgICAgICAgICAgICAg ICAgIEZJUlNUSE9TVCwgaHR0cHBvcnQsIGhvc3RpcCk7CisrICBjdXJsX21zbnByaW50ZihzZWNv bmRyZXMsIHNpemVvZihzZWNvbmRyZXMpLCAiJXM6JXM6JXMiLAorKyAgICAgICAgICAgICAgICAg U0VDT05ESE9TVCwgaHR0cHBvcnQsIGhvc3RpcCk7CisrCisrICAvKiBjcmVhdGUgVVJMcyAqLwor KyAgY3VybF9tc25wcmludGYoZmlyc3R1cmwsIHNpemVvZihmaXJzdHVybCksICJodHRwOi8vJXM6 JXMvYXBpIiwKKysgICAgICAgICAgICAgICAgIEZJUlNUSE9TVCwgaHR0cHBvcnQpOworKyAgY3Vy bF9tc25wcmludGYoc2Vjb25kdXJsLCBzaXplb2Yoc2Vjb25kdXJsKSwgImh0dHA6Ly8lczolcy9o b29rIiwKKysgICAgICAgICAgICAgICAgIFNFQ09OREhPU1QsIGh0dHBwb3J0KTsKKysKKysgIGhv c3QgPSBjdXJsX3NsaXN0X2FwcGVuZChOVUxMLCBmaXJzdHJlcyk7CisrICBpZighaG9zdCkKKysg ICAgZ290byB0ZXN0X2NsZWFudXA7CisrICBob3N0MiA9IGN1cmxfc2xpc3RfYXBwZW5kKGhvc3Qs IHNlY29uZHJlcyk7CisrICBpZighaG9zdDIpCisrICAgIGdvdG8gdGVzdF9jbGVhbnVwOworKyAg aG9zdCA9IGhvc3QyOworKworKyAgY3VybCA9IGN1cmxfZWFzeV9pbml0KCk7CisrICBpZihjdXJs KSB7CisrICAgIGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfUkVTT0xWRSwgaG9zdCk7CisrICAg IGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfSFRUUEFVVEgsIENVUkxBVVRIX0RJR0VTVCk7Cisr ICAgIGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfVVNFUlBXRCwgImFsaWNlOmJvbmQiKTsKKysg ICAgZWFzeV9zZXRvcHQoY3VybCwgQ1VSTE9QVF9XUklURUZVTkNUSU9OLCBkZXZudWxsXzE2ODYp OworKworKyAgICBlYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1VSTCwgZmlyc3R1cmwpOworKyAg ICByZXMgPSBjdXJsX2Vhc3lfcGVyZm9ybShjdXJsKTsKKysKKysgICAgZWFzeV9zZXRvcHQoY3Vy bCwgQ1VSTE9QVF9VUkwsIHNlY29uZHVybCk7CisrICAgIHJlcyA9IGN1cmxfZWFzeV9wZXJmb3Jt KGN1cmwpOworKworKyAgICBlYXN5X3NldG9wdChjdXJsLCBDVVJMT1BUX1VTRVJQV0QsICJib2I6 c2VjcmV0Iik7CisrICAgIGVhc3lfc2V0b3B0KGN1cmwsIENVUkxPUFRfVVJMLCBzZWNvbmR1cmwp OworKyAgICByZXMgPSBjdXJsX2Vhc3lfcGVyZm9ybShjdXJsKTsKKysgIH0KKysKKyt0ZXN0X2Ns ZWFudXA6CisrICBjdXJsX2Vhc3lfY2xlYW51cChjdXJsKTsKKysgIGN1cmxfZ2xvYmFsX2NsZWFu dXAoKTsKKysgIGN1cmxfc2xpc3RfZnJlZV9hbGwoaG9zdCk7CisrICByZXR1cm4gcmVzOworK30K Ky0tIAorMi41NS4wCisKCmRpZmYgLS1naXQgYS9jdXJsLnNwZWMgYi9jdXJsLnNwZWMKaW5kZXgg NmE0YmMwNC4uNDc3ODVjNiAxMDA2NDQKLS0tIGEvY3VybC5zcGVjCisrKyBiL2N1cmwuc3BlYwpA QCAtNDAsNiArNDAsOSBAQCBQYXRjaDAwNzogMDAwNy1jdXJsLTguMTUuMC1DVkUtMjAyNS05MDg2 LnBhdGNoCiAjIGZpeCBjcm9zcy1wcm94eSBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrIChDVkUtMjAy Ni03MTY4KQogUGF0Y2gwMDg6IDAwMDgtY3VybC04LjE1LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaAog CisjIGZpeCBjcm9zcy1vcmlnaW4gRGlnZXN0IGF1dGggc3RhdGUgbGVhayAoQ1ZFLTIwMjYtMTE4 NTYpCitQYXRjaDAwOTogMDAwOS1jdXJsLTguMTUuMC1DVkUtMjAyNi0xMTg1Ni5wYXRjaAorCiAj IHBhdGNoIG1ha2luZyBsaWJjdXJsIG11bHRpbGliIHJlYWR5CiBQYXRjaDEwMTogMDEwMS1jdXJs LTcuMzIuMC1tdWx0aWxpYi5wYXRjaAogCkBAIC00NDEsNiArNDQ0LDcgQEAgcm0gLWYgJHtSUE1f QlVJTERfUk9PVH0le19tYW5kaXJ9L21hbjEvd2N1cmwuMSoKICVjaGFuZ2Vsb2cKICogTW9uIEF1 ZyAwMyAyMDI2IEphbiBNYWNrdSA8amFtYWNrdUByZWRoYXQuY29tPiAtIDguMTUuMC04CiAtIGZp eCBjcm9zcy1wcm94eSBEaWdlc3QgYXV0aCBzdGF0ZSBsZWFrIChDVkUtMjAyNi03MTY4KQorLSBm aXggY3Jvc3Mtb3JpZ2luIERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsgKENWRS0yMDI2LTExODU2KQog CiAqIE1vbiBNYXkgMTEgMjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE1 LjAtNwogLSBmaXggT3V0IG9mIGJvdW5kcyByZWFkIGZvciBjb29raWUgcGF0aCAoQ1ZFLTIwMjUt OTA4NikK