From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-10536 - HTTP/2 stream-dependency tree UAF Date: Tue, 08 Sep 2026 13:41:13 GMT Message-ID: <178887487356.1.367443847427193512.rpms-curl-252bf4722c52@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: 252bf4722c528c3e230bef5f37e6603871018a30 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogMjUyYmY0NzIyYzUyOGMzZTIzMGJlZjVmMzdlNjYwMzg3MTAxOGEzMApB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0y N1QxNTo0MDo1MiswMjowMApTdGF0cyAgOiArMzgyLy0xIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy8yNTJiZjQ3MjJjNTI4YzNl MjMwYmVmNWYzN2U2NjAzODcxMDE4YTMwP2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTEwNTM2IC0gSFRUUC8yIHN0cmVhbS1kZXBlbmRlbmN5IHRyZWUgVUFGCgotLS0KZGlmZiAt LWdpdCBhLzAwMjItY3VybC04LjE4LjAtQ1ZFLTIwMjYtMTA1MzYucGF0Y2ggYi8wMDIyLWN1cmwt OC4xOC4wLUNWRS0yMDI2LTEwNTM2LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLmMwNGU3MjgKLS0tIC9kZXYvbnVsbAorKysgYi8wMDIyLWN1cmwtOC4xOC4wLUNWRS0y MDI2LTEwNTM2LnBhdGNoCkBAIC0wLDAgKzEsMzc1IEBACitGcm9tIGE4M2NjMzBjYTdkMTE4MzNh MzRiYjNjYTczNjZkYmY3NjJlMTg5ZjYgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBT dGVmYW4gRWlzc2luZyA8c3RlZmFuQGVpc3Npbmcub3JnPgorRGF0ZTogRnJpLCAyMiBNYXkgMjAy NiAwOToxMTo0MSArMDIwMAorU3ViamVjdDogW1BBVENIXSBodHRwMjogcmVtb3ZlIHN0cmVhbSBk ZXBlbmRlbmN5IHRyYWNraW5nCisKK1RoZSBIVFRQLzIgZmVhdHVyZSBpcyBkZXByZWNhdGVkLCBm ZXcgc2VydmVycyBpbXBsZW1lbnQgaXQgYW5kIG91cgoraW1wbGVtZW50YXRpb24gaXMgY29tcGxp Y2F0ZWQgYnkgaXRzIHN0YXRlIG1hbmFnZW1lbnQuIE1ha2UgdGhlIHR3bworQ1VSTE9QVF8qIGlu dm9sdmVkIGEgbm9wIGFuZCBkZXByZWNhdGUgdGhlbS4KKworQ2xvc2VzICMyMTcyMworCisoY2hl cnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCBiZmJmZjc4NTJmMDUwMjMyZWRkM2U1Y2E1YzZiZjIwMjFj MzQwZjVhKQorLS0tCisgZG9jcy9saWJjdXJsL2N1cmxfZWFzeV9zZXRvcHQubWQgICAgICAgICAg ICAgIHwgIDUgKy0KKyBkb2NzL2xpYmN1cmwvb3B0cy9DVVJMT1BUX1NUUkVBTV9ERVBFTkRTLm1k ICAgfCAgOCArKworIGRvY3MvbGliY3VybC9vcHRzL0NVUkxPUFRfU1RSRUFNX0RFUEVORFNfRS5t ZCB8ICA4ICsrCisgZG9jcy9saWJjdXJsL3N5bWJvbHMtaW4tdmVyc2lvbnMgICAgICAgICAgICAg IHwgIDQgKy0KKyBpbmNsdWRlL2N1cmwvY3VybC5oICAgICAgICAgICAgICAgICAgICAgICAgICAg fCAgNiArLQorIGxpYi9odHRwMi5jICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8 IDE4ICsrLS0KKyBsaWIvc2V0b3B0LmMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fCAgOSArLQorIGxpYi91cmwuYyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8 IDk4IC0tLS0tLS0tLS0tLS0tLS0tLS0KKyBsaWIvdXJsLmggICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgOCAtLQorIGxpYi91cmxkYXRhLmggICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB8IDE1IC0tLQorIDEwIGZpbGVzIGNoYW5nZWQsIDM0IGluc2VydGlvbnMo KyksIDE0NSBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL2RvY3MvbGliY3VybC9jdXJsX2Vh c3lfc2V0b3B0Lm1kIGIvZG9jcy9saWJjdXJsL2N1cmxfZWFzeV9zZXRvcHQubWQKK2luZGV4IDc3 MTQ0MmIxODUuLjcxZWE5YTUyNTEgMTAwNjQ0CistLS0gYS9kb2NzL2xpYmN1cmwvY3VybF9lYXN5 X3NldG9wdC5tZAorKysrIGIvZG9jcy9saWJjdXJsL2N1cmxfZWFzeV9zZXRvcHQubWQKK0BAIC0x MTYyLDExICsxMTYyLDEyIEBAIFJlZGlyZWN0IHN0ZGVyciB0byBhbm90aGVyIHN0cmVhbS4gU2Vl IENVUkxPUFRfU1RERVJSKDMpCisgCisgIyMgQ1VSTE9QVF9TVFJFQU1fREVQRU5EUworIAorLVRo aXMgSFRUUC8yIHN0cmVhbSBkZXBlbmRzIG9uIGFub3RoZXIuIFNlZSBDVVJMT1BUX1NUUkVBTV9E RVBFTkRTKDMpCisrKipEZXByZWNhdGVkIG9wdGlvbioqIFRoaXMgSFRUUC8yIHN0cmVhbSBkZXBl bmRzIG9uIGFub3RoZXIuIFNlZQorK0NVUkxPUFRfU1RSRUFNX0RFUEVORFMoMykKKyAKKyAjIyBD VVJMT1BUX1NUUkVBTV9ERVBFTkRTX0UKKyAKKy1UaGlzIEhUVFAvMiBzdHJlYW0gZGVwZW5kcyBv biBhbm90aGVyIGV4Y2x1c2l2ZWx5LiBTZWUKKysqKkRlcHJlY2F0ZWQgb3B0aW9uKiogVGhpcyBI VFRQLzIgc3RyZWFtIGRlcGVuZHMgb24gYW5vdGhlciBleGNsdXNpdmVseS4gU2VlCisgQ1VSTE9Q VF9TVFJFQU1fREVQRU5EU19FKDMpCisgCisgIyMgQ1VSTE9QVF9TVFJFQU1fV0VJR0hUCitkaWZm IC0tZ2l0IGEvZG9jcy9saWJjdXJsL29wdHMvQ1VSTE9QVF9TVFJFQU1fREVQRU5EUy5tZCBiL2Rv Y3MvbGliY3VybC9vcHRzL0NVUkxPUFRfU1RSRUFNX0RFUEVORFMubWQKK2luZGV4IDVlM2UxNzdk Y2UuLmUwZThlZjBjNTMgMTAwNjQ0CistLS0gYS9kb2NzL2xpYmN1cmwvb3B0cy9DVVJMT1BUX1NU UkVBTV9ERVBFTkRTLm1kCisrKysgYi9kb2NzL2xpYmN1cmwvb3B0cy9DVVJMT1BUX1NUUkVBTV9E RVBFTkRTLm1kCitAQCAtNDQsNiArNDQsMTAgQEAgYW4gZXJyb3IuIEl0IG11c3QgYmUgYW5vdGhl ciBlYXN5IGhhbmRsZSwgYW5kIGl0IGFsc28gbmVlZHMgdG8gYmUgYSBoYW5kbGUgb2YKKyBhIHRy YW5zZmVyIHRoYXQgaXMgYWJvdXQgdG8gYmUgc2VudCBvdmVyIHRoZSBzYW1lIEhUVFAvMiBjb25u ZWN0aW9uIGZvciB0aGlzCisgb3B0aW9uIHRvIGhhdmUgYW4gYWN0dWFsIGVmZmVjdC4KKyAKKytT aW5jZSB2ZXJzaW9uIDguMjEuMCBzZXR0aW5nIHRoaXMgb3B0aW9uIG5vIGxvbmdlciBoYXMgYW4g ZWZmZWN0LiBIVFRQLzIKKytzdHJlYW0gZGVwZW5kZW5jaWVzIHdlcmUgaW50cm9kdWNlZCBpbiBS RkMgNzU0MCBhbmQgdGhlbiBsYXRlciBkZXByZWNhdGVkCisraW4gUkZDIDkxMTMuCisrCisgIyBE RUZBVUxUCisgCisgTlVMTAorQEAgLTY5LDYgKzczLDEwIEBAIGludCBtYWluKHZvaWQpCisgfQor IH5+fgorIAorKyMgREVQUkVDQVRFRAorKworK0RlcHJlY2F0ZWQgc2luY2UgOC4yMS4wLgorKwor ICMgJUFWQUlMQUJJTElUWSUKKyAKKyAjIFJFVFVSTiBWQUxVRQorZGlmZiAtLWdpdCBhL2RvY3Mv bGliY3VybC9vcHRzL0NVUkxPUFRfU1RSRUFNX0RFUEVORFNfRS5tZCBiL2RvY3MvbGliY3VybC9v cHRzL0NVUkxPUFRfU1RSRUFNX0RFUEVORFNfRS5tZAoraW5kZXggZmU5NWFlOGQ3MS4uZmU4Zjk3 Zjk1MCAxMDA2NDQKKy0tLSBhL2RvY3MvbGliY3VybC9vcHRzL0NVUkxPUFRfU1RSRUFNX0RFUEVO RFNfRS5tZAorKysrIGIvZG9jcy9saWJjdXJsL29wdHMvQ1VSTE9QVF9TVFJFQU1fREVQRU5EU19F Lm1kCitAQCAtNDcsNiArNDcsMTAgQEAgYW4gZXJyb3IuIEl0IG11c3QgYmUgYW5vdGhlciBlYXN5 IGhhbmRsZSwgYW5kIGl0IGFsc28gbmVlZHMgdG8gYmUgYSBoYW5kbGUgb2YKKyBhIHRyYW5zZmVy IHRoYXQgaXMgYWJvdXQgdG8gYmUgc2VudCBvdmVyIHRoZSBzYW1lIEhUVFAvMiBjb25uZWN0aW9u IGZvciB0aGlzCisgb3B0aW9uIHRvIGhhdmUgYW4gYWN0dWFsIGVmZmVjdC4KKyAKKytTaW5jZSB2 ZXJzaW9uIDguMjEuMCBzZXR0aW5nIHRoaXMgb3B0aW9uIG5vIGxvbmdlciBoYXMgYW4gZWZmZWN0 LiBIVFRQLzIKKytzdHJlYW0gZGVwZW5kZW5jaWVzIHdlcmUgaW50cm9kdWNlZCBpbiBSRkMgNzU0 MCBhbmQgdGhlbiBsYXRlciBkZXByZWNhdGVkCisraW4gUkZDIDkxMTMuCisrCisgIyBERUZBVUxU CisgCisgTlVMTAorQEAgLTcyLDYgKzc2LDEwIEBAIGludCBtYWluKHZvaWQpCisgfQorIH5+fgor IAorKyMgREVQUkVDQVRFRAorKworK0RlcHJlY2F0ZWQgc2luY2UgOC4yMS4wLgorKworICMgJUFW QUlMQUJJTElUWSUKKyAKKyAjIFJFVFVSTiBWQUxVRQorZGlmZiAtLWdpdCBhL2RvY3MvbGliY3Vy bC9zeW1ib2xzLWluLXZlcnNpb25zIGIvZG9jcy9saWJjdXJsL3N5bWJvbHMtaW4tdmVyc2lvbnMK K2luZGV4IGUwZTBhOGU2M2EuLjJhMDQ1YTgyZWQgMTAwNjQ0CistLS0gYS9kb2NzL2xpYmN1cmwv c3ltYm9scy1pbi12ZXJzaW9ucworKysrIGIvZG9jcy9saWJjdXJsL3N5bWJvbHMtaW4tdmVyc2lv bnMKK0BAIC04NzgsOCArODc4LDggQEAgQ1VSTE9QVF9TU0xLRVlQQVNTV0QgICAgICAgICAgICA3 LjkuMyAgICAgICAgIDcuMTcuMAorIENVUkxPUFRfU1NMS0VZVFlQRSAgICAgICAgICAgICAgNy45 LjMKKyBDVVJMT1BUX1NTTFZFUlNJT04gICAgICAgICAgICAgIDcuMQorIENVUkxPUFRfU1RERVJS ICAgICAgICAgICAgICAgICAgNy4xCistQ1VSTE9QVF9TVFJFQU1fREVQRU5EUyAgICAgICAgICA3 LjQ2LjAKKy1DVVJMT1BUX1NUUkVBTV9ERVBFTkRTX0UgICAgICAgIDcuNDYuMAorK0NVUkxPUFRf U1RSRUFNX0RFUEVORFMgICAgICAgICAgNy40Ni4wICAgICAgICA4LjIxLjAKKytDVVJMT1BUX1NU UkVBTV9ERVBFTkRTX0UgICAgICAgIDcuNDYuMCAgICAgICAgOC4yMS4wCisgQ1VSTE9QVF9TVFJF QU1fV0VJR0hUICAgICAgICAgICA3LjQ2LjAKKyBDVVJMT1BUX1NVUFBSRVNTX0NPTk5FQ1RfSEVB REVSUyA3LjU0LjAKKyBDVVJMT1BUX1RDUF9GQVNUT1BFTiAgICAgICAgICAgIDcuNDkuMAorZGlm ZiAtLWdpdCBhL2luY2x1ZGUvY3VybC9jdXJsLmggYi9pbmNsdWRlL2N1cmwvY3VybC5oCitpbmRl eCBlNzU1ZjA5OGYyLi5kOWNlNzMwN2UyIDEwMDY0NAorLS0tIGEvaW5jbHVkZS9jdXJsL2N1cmwu aAorKysrIGIvaW5jbHVkZS9jdXJsL2N1cmwuaAorQEAgLTE5ODAsMTAgKzE5ODAsMTIgQEAgdHlw ZWRlZiBlbnVtIHsKKyAgIENVUkxPUFQoQ1VSTE9QVF9TVFJFQU1fV0VJR0hULCBDVVJMT1BUVFlQ RV9MT05HLCAyMzkpLAorIAorICAgLyogU2V0IHN0cmVhbSBkZXBlbmRlbmN5IG9uIGFub3RoZXIg Y3VybCBoYW5kbGUgKi8KKy0gIENVUkxPUFQoQ1VSTE9QVF9TVFJFQU1fREVQRU5EUywgQ1VSTE9Q VFRZUEVfT0JKRUNUUE9JTlQsIDI0MCksCisrICBDVVJMT1BUREVQUkVDQVRFRChDVVJMT1BUX1NU UkVBTV9ERVBFTkRTLCBDVVJMT1BUVFlQRV9PQkpFQ1RQT0lOVCwgMjQwLAorKyAgICAgICAgICAg ICAgICAgICAgOC4yMS4wLCAiSGFzIG5vIGZ1bmN0aW9uIiksCisgCisgICAvKiBTZXQgRS14Y2x1 c2l2ZSBzdHJlYW0gZGVwZW5kZW5jeSBvbiBhbm90aGVyIGN1cmwgaGFuZGxlICovCistICBDVVJM T1BUKENVUkxPUFRfU1RSRUFNX0RFUEVORFNfRSwgQ1VSTE9QVFRZUEVfT0JKRUNUUE9JTlQsIDI0 MSksCisrICBDVVJMT1BUREVQUkVDQVRFRChDVVJMT1BUX1NUUkVBTV9ERVBFTkRTX0UsIENVUkxP UFRUWVBFX09CSkVDVFBPSU5ULCAyNDEsCisrICAgICAgICAgICAgICAgICAgICA4LjIxLjAsICJI YXMgbm8gZnVuY3Rpb24iKSwKKyAKKyAgIC8qIERvIG5vdCBzZW5kIGFueSB0ZnRwIG9wdGlvbiBy ZXF1ZXN0cyB0byB0aGUgc2VydmVyICovCisgICBDVVJMT1BUKENVUkxPUFRfVEZUUF9OT19PUFRJ T05TLCBDVVJMT1BUVFlQRV9MT05HLCAyNDIpLAorZGlmZiAtLWdpdCBhL2xpYi9odHRwMi5jIGIv bGliL2h0dHAyLmMKK2luZGV4IGE4YjhkNWM1MmYuLmMzMTc3YjkyOTQgMTAwNjQ0CistLS0gYS9s aWIvaHR0cDIuYworKysrIGIvbGliL2h0dHAyLmMKK0BAIC0xOTMzLDE2ICsxOTMzLDEyIEBAIHN0 YXRpYyBpbnQgc3dlaWdodF9pbl9lZmZlY3QoY29uc3Qgc3RydWN0IEN1cmxfZWFzeSAqZGF0YSkK KyAgKiBzdHJ1Y3QuCisgICovCisgCistc3RhdGljIHZvaWQgaDJfcHJpX3NwZWMoc3RydWN0IGNm X2gyX2N0eCAqY3R4LAorLSAgICAgICAgICAgICAgICAgICAgICAgIHN0cnVjdCBDdXJsX2Vhc3kg KmRhdGEsCisrc3RhdGljIHZvaWQgaDJfcHJpX3NwZWMoc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwK KyAgICAgICAgICAgICAgICAgICAgICAgICBuZ2h0dHAyX3ByaW9yaXR5X3NwZWMgKnByaV9zcGVj KQorIHsKKyAgIHN0cnVjdCBDdXJsX2RhdGFfcHJpb3JpdHkgKnByaW8gPSAmZGF0YS0+c2V0LnBy aW9yaXR5OworLSAgc3RydWN0IGgyX3N0cmVhbV9jdHggKmRlcHN0cmVhbSA9IEgyX1NUUkVBTV9D VFgoY3R4LCBwcmlvLT5wYXJlbnQpOworLSAgaW50MzJfdCBkZXBzdHJlYW1faWQgPSBkZXBzdHJl YW0gPyBkZXBzdHJlYW0tPmlkIDogMDsKKy0gIG5naHR0cDJfcHJpb3JpdHlfc3BlY19pbml0KHBy aV9zcGVjLCBkZXBzdHJlYW1faWQsCistICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzd2Vp Z2h0X3dhbnRlZChkYXRhKSwKKy0gICAgICAgICAgICAgICAgICAgICAgICAgICAgIGRhdGEtPnNl dC5wcmlvcml0eS5leGNsdXNpdmUpOworKyAgbmdodHRwMl9wcmlvcml0eV9zcGVjX2luaXQocHJp X3NwZWMsIDAsCisrICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzd2VpZ2h0X3dhbnRlZChk YXRhKSwgRkFMU0UpOworICAgZGF0YS0+c3RhdGUucHJpb3JpdHkgPSAqcHJpbzsKKyB9CisgCitA QCAtMTk2MCwxMyArMTk1NiwxMSBAQCBzdGF0aWMgQ1VSTGNvZGUgaDJfcHJvZ3Jlc3NfZWdyZXNz KHN0cnVjdCBDdXJsX2NmaWx0ZXIgKmNmLAorICAgaW50IHJ2ID0gMDsKKyAKKyAgIGlmKHN0cmVh bSAmJiBzdHJlYW0tPmlkID4gMCAmJgorLSAgICAgKChzd2VpZ2h0X3dhbnRlZChkYXRhKSAhPSBz d2VpZ2h0X2luX2VmZmVjdChkYXRhKSkgfHwKKy0gICAgICAoZGF0YS0+c2V0LnByaW9yaXR5LmV4 Y2x1c2l2ZSAhPSBkYXRhLT5zdGF0ZS5wcmlvcml0eS5leGNsdXNpdmUpIHx8CistICAgICAgKGRh dGEtPnNldC5wcmlvcml0eS5wYXJlbnQgIT0gZGF0YS0+c3RhdGUucHJpb3JpdHkucGFyZW50KSkp IHsKKysgICAgIChzd2VpZ2h0X3dhbnRlZChkYXRhKSAhPSBzd2VpZ2h0X2luX2VmZmVjdChkYXRh KSkpIHsKKyAgICAgLyogc2VuZCBuZXcgd2VpZ2h0IGFuZC9vciBkZXBlbmRlbmN5ICovCisgICAg IG5naHR0cDJfcHJpb3JpdHlfc3BlYyBwcmlfc3BlYzsKKyAKKy0gICAgaDJfcHJpX3NwZWMoY3R4 LCBkYXRhLCAmcHJpX3NwZWMpOworKyAgICBoMl9wcmlfc3BlYyhkYXRhLCAmcHJpX3NwZWMpOwor ICAgICBDVVJMX1RSQ19DRihkYXRhLCBjZiwgIlslZF0gUXVldWluZyBQUklPUklUWSIsIHN0cmVh bS0+aWQpOworICAgICBERUJVR0FTU0VSVChzdHJlYW0tPmlkICE9IC0xKTsKKyAgICAgcnYgPSBu Z2h0dHAyX3N1Ym1pdF9wcmlvcml0eShjdHgtPmgyLCBOR0hUVFAyX0ZMQUdfTk9ORSwKK0BAIC0y Mjc0LDcgKzIyNjgsNyBAQCBzdGF0aWMgQ1VSTGNvZGUgaDJfc3VibWl0KHN0cnVjdCBoMl9zdHJl YW1fY3R4ICoqcHN0cmVhbSwKKyAgICAgZ290byBvdXQ7CisgICB9CisgCistICBoMl9wcmlfc3Bl YyhjdHgsIGRhdGEsICZwcmlfc3BlYyk7CisrICBoMl9wcmlfc3BlYyhkYXRhLCAmcHJpX3NwZWMp OworICAgaWYoIW5naHR0cDJfc2Vzc2lvbl9jaGVja19yZXF1ZXN0X2FsbG93ZWQoY3R4LT5oMikp CisgICAgIENVUkxfVFJDX0NGKGRhdGEsIGNmLCAic2VuZCByZXF1ZXN0IE5PVCBhbGxvd2VkICh2 aWEgbmdodHRwMikiKTsKKyAKK2RpZmYgLS1naXQgYS9saWIvc2V0b3B0LmMgYi9saWIvc2V0b3B0 LmMKK2luZGV4IGE3NGNhNWU4ZjMuLjM1NWE1OWMwYTEgMTAwNjQ0CistLS0gYS9saWIvc2V0b3B0 LmMKKysrKyBiL2xpYi9zZXRvcHQuYworQEAgLTE1MDgsMTMgKzE1MDgsMTAgQEAgc3RhdGljIENV Ukxjb2RlIHNldG9wdF9wb2ludGVycyhzdHJ1Y3QgQ3VybF9lYXN5ICpkYXRhLCBDVVJMb3B0aW9u IG9wdGlvbiwKKyAKKyAjaWZkZWYgVVNFX0hUVFAyCisgICBjYXNlIENVUkxPUFRfU1RSRUFNX0RF UEVORFM6CistICBjYXNlIENVUkxPUFRfU1RSRUFNX0RFUEVORFNfRTogeworLSAgICBzdHJ1Y3Qg Q3VybF9lYXN5ICpkZXAgPSB2YV9hcmcocGFyYW0sIHN0cnVjdCBDdXJsX2Vhc3kgKik7CistICAg IGlmKCFkZXAgfHwgR09PRF9FQVNZX0hBTkRMRShkZXApKQorLSAgICAgIHJldHVybiBDdXJsX2Rh dGFfcHJpb3JpdHlfYWRkX2NoaWxkKGRlcCwgZGF0YSwKKy0gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBvcHRpb24gPT0gQ1VSTE9QVF9TVFJFQU1fREVQRU5EU19FKTsK KysgIGNhc2UgQ1VSTE9QVF9TVFJFQU1fREVQRU5EU19FOgorKyAgICAvKiBub3QgZG9pbmcgc3Ry ZWFtIGRlcGVuZGVuY2llcyBhbnkgbG9uZ2VyLCBidXQgYWNjZXB0IG9wdGlvbnMKKysgICAgICog Zm9yIGJhY2t3YXJkIGNvbXBhdGliaWxpdHkgKi8KKyAgICAgYnJlYWs7CistICB9CisgI2VuZGlm CisgCisgICBkZWZhdWx0OgorZGlmZiAtLWdpdCBhL2xpYi91cmwuYyBiL2xpYi91cmwuYworaW5k ZXggZmVmYzFhMDUxOC4uOTAwYjBmNzM1MiAxMDA2NDQKKy0tLSBhL2xpYi91cmwuYworKysrIGIv bGliL3VybC5jCitAQCAtMTIwLDEyICsxMjAsNiBAQAorICNpbmNsdWRlICJzbXRwLmgiCisgI2lu Y2x1ZGUgIndzLmgiCisgCistI2lmZGVmIFVTRV9OR0hUVFAyCistc3RhdGljIHZvaWQgZGF0YV9w cmlvcml0eV9jbGVhbnVwKHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEpOworLSNlbHNlCistI2RlZmlu ZSBkYXRhX3ByaW9yaXR5X2NsZWFudXAoeCkKKy0jZW5kaWYKKy0KKyAvKiBTb21lIHBhcnRzIG9m IHRoZSBjb2RlIChlLmcuIGNodW5rZWQgZW5jb2RpbmcpIGFzc3VtZSB0aGlzIGJ1ZmZlciBoYXMg YXQKKyAgKiBtb3JlIHRoYW4ganVzdCBhIGZldyBieXRlcyB0byBwbGF5IHdpdGguIERvIG5vdCBs ZXQgaXQgYmVjb21lIHRvbyBzbWFsbCBvcgorICAqIGJhZCB0aGluZ3Mgd2lsbCBoYXBwZW4uCitA QCAtMjgyLDggKzI3Niw2IEBAIENVUkxjb2RlIEN1cmxfY2xvc2Uoc3RydWN0IEN1cmxfZWFzeSAq KmRhdGFwKQorICAgQ3VybF9zYWZlZnJlZShkYXRhLT5pbmZvLmNvbnRlbnR0eXBlKTsKKyAgIEN1 cmxfc2FmZWZyZWUoZGF0YS0+aW5mby53b3VsZHJlZGlyZWN0KTsKKyAKKy0gIGRhdGFfcHJpb3Jp dHlfY2xlYW51cChkYXRhKTsKKy0KKyAgIC8qIE5vIGxvbmdlciBhIGRpcnR5IHNoYXJlLCBpZiBp dCBleGlzdHMgKi8KKyAgIGlmKGRhdGEtPnNoYXJlKSB7CisgICAgIEN1cmxfc2hhcmVfbG9jayhk YXRhLCBDVVJMX0xPQ0tfREFUQV9TSEFSRSwgQ1VSTF9MT0NLX0FDQ0VTU19TSU5HTEUpOworQEAg LTM5NzAsOTYgKzM5NjIsNiBAQCBDVVJMY29kZSBDdXJsX2luaXRfZG8oc3RydWN0IEN1cmxfZWFz eSAqZGF0YSwgc3RydWN0IGNvbm5lY3RkYXRhICpjb25uKQorIAorICNpZiBkZWZpbmVkKFVTRV9I VFRQMikgfHwgZGVmaW5lZChVU0VfSFRUUDMpCisgCistI2lmZGVmIFVTRV9OR0hUVFAyCistCist c3RhdGljIHZvaWQgcHJpb3JpdHlfcmVtb3ZlX2NoaWxkKHN0cnVjdCBDdXJsX2Vhc3kgKnBhcmVu dCwKKy0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgc3RydWN0IEN1cmxfZWFzeSAq Y2hpbGQpCisteworLSAgc3RydWN0IEN1cmxfZGF0YV9wcmlvX25vZGUgKipwbmV4dCA9ICZwYXJl bnQtPnNldC5wcmlvcml0eS5jaGlsZHJlbjsKKy0gIHN0cnVjdCBDdXJsX2RhdGFfcHJpb19ub2Rl ICpwbm9kZSA9IHBhcmVudC0+c2V0LnByaW9yaXR5LmNoaWxkcmVuOworLQorLSAgREVCVUdBU1NF UlQoY2hpbGQtPnNldC5wcmlvcml0eS5wYXJlbnQgPT0gcGFyZW50KTsKKy0gIHdoaWxlKHBub2Rl ICYmIHBub2RlLT5kYXRhICE9IGNoaWxkKSB7CistICAgIHBuZXh0ID0gJnBub2RlLT5uZXh0Owor LSAgICBwbm9kZSA9IHBub2RlLT5uZXh0OworLSAgfQorLQorLSAgREVCVUdBU1NFUlQocG5vZGUp OworLSAgaWYocG5vZGUpIHsKKy0gICAgKnBuZXh0ID0gcG5vZGUtPm5leHQ7CistICAgIGN1cmx4 X2ZyZWUocG5vZGUpOworLSAgfQorLQorLSAgY2hpbGQtPnNldC5wcmlvcml0eS5wYXJlbnQgPSAw OworLSAgY2hpbGQtPnNldC5wcmlvcml0eS5leGNsdXNpdmUgPSBGQUxTRTsKKy19CistCistQ1VS TGNvZGUgQ3VybF9kYXRhX3ByaW9yaXR5X2FkZF9jaGlsZChzdHJ1Y3QgQ3VybF9lYXN5ICpwYXJl bnQsCistICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzdHJ1Y3QgQ3VybF9l YXN5ICpjaGlsZCwKKy0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJvb2wg ZXhjbHVzaXZlKQorLXsKKy0gIGlmKGNoaWxkLT5zZXQucHJpb3JpdHkucGFyZW50KSB7CistICAg IHByaW9yaXR5X3JlbW92ZV9jaGlsZChjaGlsZC0+c2V0LnByaW9yaXR5LnBhcmVudCwgY2hpbGQp OworLSAgfQorLQorLSAgaWYocGFyZW50KSB7CistICAgIHN0cnVjdCBDdXJsX2RhdGFfcHJpb19u b2RlICoqdGFpbDsKKy0gICAgc3RydWN0IEN1cmxfZGF0YV9wcmlvX25vZGUgKnBub2RlOworLQor LSAgICBwbm9kZSA9IGN1cmx4X2NhbGxvYygxLCBzaXplb2YoKnBub2RlKSk7CistICAgIGlmKCFw bm9kZSkKKy0gICAgICByZXR1cm4gQ1VSTEVfT1VUX09GX01FTU9SWTsKKy0gICAgcG5vZGUtPmRh dGEgPSBjaGlsZDsKKy0KKy0gICAgaWYocGFyZW50LT5zZXQucHJpb3JpdHkuY2hpbGRyZW4gJiYg ZXhjbHVzaXZlKSB7CistICAgICAgLyogZXhjbHVzaXZlOiBtb3ZlIGFsbCBleGlzdGluZyBjaGls ZHJlbiB1bmRlcm5lYXRoIHRoZSBuZXcgY2hpbGQgKi8KKy0gICAgICBzdHJ1Y3QgQ3VybF9kYXRh X3ByaW9fbm9kZSAqbm9kZSA9IHBhcmVudC0+c2V0LnByaW9yaXR5LmNoaWxkcmVuOworLSAgICAg IHdoaWxlKG5vZGUpIHsKKy0gICAgICAgIG5vZGUtPmRhdGEtPnNldC5wcmlvcml0eS5wYXJlbnQg PSBjaGlsZDsKKy0gICAgICAgIG5vZGUgPSBub2RlLT5uZXh0OworLSAgICAgIH0KKy0KKy0gICAg ICB0YWlsID0gJmNoaWxkLT5zZXQucHJpb3JpdHkuY2hpbGRyZW47CistICAgICAgd2hpbGUoKnRh aWwpCistICAgICAgICB0YWlsID0gJigqdGFpbCktPm5leHQ7CistCistICAgICAgREVCVUdBU1NF UlQoISp0YWlsKTsKKy0gICAgICAqdGFpbCA9IHBhcmVudC0+c2V0LnByaW9yaXR5LmNoaWxkcmVu OworLSAgICAgIHBhcmVudC0+c2V0LnByaW9yaXR5LmNoaWxkcmVuID0gMDsKKy0gICAgfQorLQor LSAgICB0YWlsID0gJnBhcmVudC0+c2V0LnByaW9yaXR5LmNoaWxkcmVuOworLSAgICB3aGlsZSgq dGFpbCkgeworLSAgICAgICgqdGFpbCktPmRhdGEtPnNldC5wcmlvcml0eS5leGNsdXNpdmUgPSBG QUxTRTsKKy0gICAgICB0YWlsID0gJigqdGFpbCktPm5leHQ7CistICAgIH0KKy0KKy0gICAgREVC VUdBU1NFUlQoISp0YWlsKTsKKy0gICAgKnRhaWwgPSBwbm9kZTsKKy0gIH0KKy0KKy0gIGNoaWxk LT5zZXQucHJpb3JpdHkucGFyZW50ID0gcGFyZW50OworLSAgY2hpbGQtPnNldC5wcmlvcml0eS5l eGNsdXNpdmUgPSBleGNsdXNpdmU7CistICByZXR1cm4gQ1VSTEVfT0s7CistfQorLQorLSNlbmRp ZiAvKiBVU0VfTkdIVFRQMiAqLworLQorLSNpZmRlZiBVU0VfTkdIVFRQMgorLXN0YXRpYyB2b2lk IGRhdGFfcHJpb3JpdHlfY2xlYW51cChzdHJ1Y3QgQ3VybF9lYXN5ICpkYXRhKQorLXsKKy0gIHdo aWxlKGRhdGEtPnNldC5wcmlvcml0eS5jaGlsZHJlbikgeworLSAgICBzdHJ1Y3QgQ3VybF9lYXN5 ICp0bXAgPSBkYXRhLT5zZXQucHJpb3JpdHkuY2hpbGRyZW4tPmRhdGE7CistICAgIHByaW9yaXR5 X3JlbW92ZV9jaGlsZChkYXRhLCB0bXApOworLSAgICBpZihkYXRhLT5zZXQucHJpb3JpdHkucGFy ZW50KQorLSAgICAgIEN1cmxfZGF0YV9wcmlvcml0eV9hZGRfY2hpbGQoZGF0YS0+c2V0LnByaW9y aXR5LnBhcmVudCwgdG1wLCBGQUxTRSk7CistICB9CistCistICBpZihkYXRhLT5zZXQucHJpb3Jp dHkucGFyZW50KQorLSAgICBwcmlvcml0eV9yZW1vdmVfY2hpbGQoZGF0YS0+c2V0LnByaW9yaXR5 LnBhcmVudCwgZGF0YSk7CistfQorLSNlbmRpZgorLQorIHZvaWQgQ3VybF9kYXRhX3ByaW9yaXR5 X2NsZWFyX3N0YXRlKHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEpCisgeworICAgbWVtc2V0KCZkYXRh LT5zdGF0ZS5wcmlvcml0eSwgMCwgc2l6ZW9mKGRhdGEtPnN0YXRlLnByaW9yaXR5KSk7CitkaWZm IC0tZ2l0IGEvbGliL3VybC5oIGIvbGliL3VybC5oCitpbmRleCAzYThkNTdjMzc3Li5kZGFjNzg0 ZTc1IDEwMDY0NAorLS0tIGEvbGliL3VybC5oCisrKysgYi9saWIvdXJsLmgKK0BAIC0xMTEsMTIg KzExMSw0IEBAIHZvaWQgQ3VybF9kYXRhX3ByaW9yaXR5X2NsZWFyX3N0YXRlKHN0cnVjdCBDdXJs X2Vhc3kgKmRhdGEpOworICNkZWZpbmUgQ3VybF9kYXRhX3ByaW9yaXR5X2NsZWFyX3N0YXRlKHgp CisgI2VuZGlmIC8qIFVTRV9IVFRQMiB8fCBVU0VfSFRUUDMgKi8KKyAKKy0jaWZkZWYgVVNFX05H SFRUUDIKKy1DVVJMY29kZSBDdXJsX2RhdGFfcHJpb3JpdHlfYWRkX2NoaWxkKHN0cnVjdCBDdXJs X2Vhc3kgKnBhcmVudCwKKy0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN0 cnVjdCBDdXJsX2Vhc3kgKmNoaWxkLAorLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgYm9vbCBleGNsdXNpdmUpOworLSNlbHNlCistI2RlZmluZSBDdXJsX2RhdGFfcHJpb3Jp dHlfYWRkX2NoaWxkKHgsIHksIHopIENVUkxFX05PVF9CVUlMVF9JTgorLSNlbmRpZgorLQorICNl bmRpZiAvKiBIRUFERVJfQ1VSTF9VUkxfSCAqLworZGlmZiAtLWdpdCBhL2xpYi91cmxkYXRhLmgg Yi9saWIvdXJsZGF0YS5oCitpbmRleCAxZGU4YzRiZmIxLi43ZTM2Y2MyMzM2IDEwMDY0NAorLS0t IGEvbGliL3VybGRhdGEuaAorKysrIGIvbGliL3VybGRhdGEuaAorQEAgLTg2NCwyNyArODY0LDEy IEBAIHN0cnVjdCBhdXRoIHsKKyAgICAgICAgICAgICAgICAgICAgc2hvdWxkIGJlIFJGQyBjb21w bGlhbnQgKi8KKyB9OworIAorLSNpZmRlZiBVU0VfTkdIVFRQMgorLXN0cnVjdCBDdXJsX2RhdGFf cHJpb19ub2RlIHsKKy0gIHN0cnVjdCBDdXJsX2RhdGFfcHJpb19ub2RlICpuZXh0OworLSAgc3Ry dWN0IEN1cmxfZWFzeSAqZGF0YTsKKy19OworLSNlbmRpZgorLQorIC8qKgorICAqIFByaW9yaXR5 IGluZm9ybWF0aW9uIGZvciBhbiBlYXN5IGhhbmRsZSBpbiByZWxhdGlvbiB0byBvdGhlcnMKKyAg KiBvbiB0aGUgc2FtZSBjb25uZWN0aW9uLgorICAqLworIHN0cnVjdCBDdXJsX2RhdGFfcHJpb3Jp dHkgeworLSNpZmRlZiBVU0VfTkdIVFRQMgorLSAgLyogdHJlZSBsaWtlIGRlcGVuZGVuY2llcyBv bmx5IGltcGxlbWVudGVkIGluIG5naHR0cDIgKi8KKy0gIHN0cnVjdCBDdXJsX2Vhc3kgKnBhcmVu dDsKKy0gIHN0cnVjdCBDdXJsX2RhdGFfcHJpb19ub2RlICpjaGlsZHJlbjsKKy0jZW5kaWYKKyAg IGludCB3ZWlnaHQ7CistI2lmZGVmIFVTRV9OR0hUVFAyCistICBCSVQoZXhjbHVzaXZlKTsKKy0j ZW5kaWYKKyB9OworIAorIC8qIFRpbWVycyAqLworLS0gCisyLjU1LjAKKwoKZGlmZiAtLWdpdCBh L2N1cmwuc3BlYyBiL2N1cmwuc3BlYwppbmRleCAyZGZmNDY2Li4xOTZmNTA1IDEwMDY0NAotLS0g YS9jdXJsLnNwZWMKKysrIGIvY3VybC5zcGVjCkBAIC0xMiw3ICsxMiw3IEBACiBTdW1tYXJ5OiBB IHV0aWxpdHkgZm9yIGdldHRpbmcgZmlsZXMgZnJvbSByZW1vdGUgc2VydmVycyAoRlRQLCBIVFRQ LCBhbmQgb3RoZXJzKQogTmFtZTogY3VybAogVmVyc2lvbjogOC4xOC4wCi1SZWxlYXNlOiA5JXs/ ZGlzdH0KK1JlbGVhc2U6IDEwJXs/ZGlzdH0KIExpY2Vuc2U6IGN1cmwKIFNvdXJjZTA6IGh0dHBz Oi8vY3VybC5zZS9kb3dubG9hZC8le25hbWV9LSV7dmVyc2lvbl9ub190aWxkZX0udGFyLnh6CiBT b3VyY2UxOiBodHRwczovL2N1cmwuc2UvZG93bmxvYWQvJXtuYW1lfS0le3ZlcnNpb25fbm9fdGls ZGV9LnRhci54ei5hc2MKQEAgLTg3LDYgKzg3LDkgQEAgUGF0Y2gwMjA6IDAwMjAtY3VybC04LjE4 LjAtQ1ZFLTIwMjYtOTU0NS5wYXRjaAogIyBGaXggVUFGIGFmdGVyIHBhdXNlIGluIHNvY2tldCBj YWxsYmFjayAoQ1ZFLTIwMjYtOTA4MCkKIFBhdGNoMDIxOiAwMDIxLWN1cmwtOC4xOC4wLUNWRS0y MDI2LTkwODAucGF0Y2gKIAorIyBGaXggSFRUUC8yIHN0cmVhbS1kZXBlbmRlbmN5IHRyZWUgVUFG IChDVkUtMjAyNi0xMDUzNikKK1BhdGNoMDIyOiAwMDIyLWN1cmwtOC4xOC4wLUNWRS0yMDI2LTEw NTM2LnBhdGNoCisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVhZHkKIFBhdGNo MTAxOiAwMTAxLWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTUxMyw2ICs1MTYsOSBA QCBybSAtZiAke1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4xKgogJXtfbGli ZGlyfS9saWJjdXJsLnNvLjQuWzAtOV0uWzAtOV0ubWluaW1hbAogCiAlY2hhbmdlbG9nCisqIFR1 ZSBTZXAgMDggMjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAtMTAK Ky0gRml4IEhUVFAvMiBzdHJlYW0tZGVwZW5kZW5jeSB0cmVlIFVBRiAoQ1ZFLTIwMjYtMTA1MzYp CisKICogTW9uIEF1ZyAyNCAyMDI2IEphbiBNYWNrdSA8amFtYWNrdUByZWRoYXQuY29tPiAtIDgu MTguMC05CiAtIEZpeCBRVUlDIHplcm8tbGVuZ3RoIFVEUCBkYXRhZ3JhbXMgYnVzeS1sb29wIChD VkUtMjAyNi0xMTM1MikKIC0gRml4IFdTIEF1dG8tUE9ORyBtZW1vcnkgZXhoYXVzdGlvbiAoQ1ZF LTIwMjYtMTE1ODYpCg==