6902 2005-05-19 15:00:45 +0400 Version information leak in imapd/pop3d/*d 2005-07-15 10:52:52 +0400 1 1 4 Development Sisyphus cyrus-imapd unstable all Linux CLOSED FIXED P2 normal --- 1 raorn taf admsasha algor asy qa-sisyphus oldest_to_newest 24788 0 raorn 2005-05-19 15:00:47 +0400 В баннере любого демона гврздями прибит номер версии. Это не есть хорошо, должна быть возможность версию оттуда убрать. 24804 1 895 algor 2005-05-19 17:36:51 +0400 Created attachment 895 patch 24805 2 algor 2005-05-19 17:37:26 +0400 патч, который эту неприятность вроде как лечит. 24811 3 taf 2005-05-19 19:31:41 +0400 А в чем, собственно, состоит нехорошесть объявления версии? Нет, я патч, конечно, добавлю, но мне просто интересно, ибо все виденные мной эксплойты в cyrus-imapd чихать хотели на баннер. 24825 4 algor 2005-05-20 10:57:26 +0400 в том, что искать exploit для известной версии значительно проще, чем для неизвестной, я полагаю. 24826 5 896 algor 2005-05-20 10:58:47 +0400 Created attachment 896 fixed patch. 24827 6 raorn 2005-05-20 11:09:42 +0400 > А в чем, собственно, состоит нехорошесть объявления версии? А зачем её лишний раз показывать? Например всяческим поинЭрам или поделиям типа X-Spider'а... 24864 7 taf 2005-05-21 11:33:30 +0400 На самом деле для цирроза эксплоитов не так уж и много, а работающих и того меньше :) В общем, 2.2.12-alt3 895 2005-05-19 17:36:51 +0400 2005-05-19 17:36:51 +0400 patch cyrus-imapd-2.2.12-alt-serverversion-print-disable.patch text/plain 1836 algor LS0tIGN5cnVzLWltYXBkLTIuMi4xMi5vcmlnL2xpYi9pbWFwb3B0aW9ucwkyMDA1LTA1LTE5IDE2 OjA1OjMyICswNDAwCisrKyBjeXJ1cy1pbWFwZC0yLjIuMTIvbGliL2ltYXBvcHRpb25zCTIwMDUt MDUtMTkgMTY6MjM6NTQgKzA0MDAKQEAgLTc3MSw2ICs3NzEsOSBAQCBhcmUgbGlzdGVkIHdpdGgg YGA8bm9uZT4nJy4KICAgIElNQVAgYW5kIExNVFAgZGFlbW9ucy4gSWYgaXQgaXMgdW5zZXQsIHRo ZW4gdGhlIHJlc3VsdCByZXR1cm5lZAogICAgZnJvbSBnZXRob3N0bmFtZSgyKSBpcyB1c2VkLiAq LwogICAgCit7ICJzaG93c2VydmVydmVyIiwgMSwgU1dJVENIIH0KKy8qIFNob3cgb3IgZG9uJ3Qg c2hvdyBzZXJ2ZXIgdmVyc2lvbiBpbiBQT1AzIGJhbm5lci4gKi8KKwogeyAic2hhcmVkcHJlZml4 IiwgIlNoYXJlZCBGb2xkZXJzIiwgU1RSSU5HIH0KIC8qIElmIHVzaW5nIHRoZSBhbHRlcm5hdGUg SU1BUCBuYW1lc3BhY2UsIHRoZSBwcmVmaXggZm9yIHRoZSBzaGFyZWQKICAgIG5hbWVzcGFjZS4g IFRoZSBoaWVyYXJjaHkgZGVsaW1pdGVyIHdpbGwgYmUgYXV0b21hdGljYWxseSBhcHBlbmRlZC4g Ki8KCi0tLSBjeXJ1cy1pbWFwZC0yLjIuMTIub3JpZy9pbWFwL3BvcDNkLmMJMjAwNS0wNS0xOSAx NjowNTozMiArMDQwMAorKysgY3lydXMtaW1hcGQtMi4yLjEyL2ltYXAvcG9wM2QuYwkyMDA1LTA1 LTE5IDE2OjU0OjE4ICswNDAwCkBAIC00MjUsOSArNDI1LDE2IEBAIGludCBzZXJ2aWNlX21haW4o aW50IGFyZ2MgX19hdHRyaWJ1dGVfXygKIAlzeXNsb2coTE9HX1dBUk5JTkcsICJBUE9QIGRpc2Fi bGVkOiBjYW4ndCBjcmVhdGUgY2hhbGxlbmdlIik7CiAgICAgfQogCisgICAgaWYgKGNvbmZpZ19n ZXRzd2l0Y2goSU1BUE9QVF9TSE9XU0VSVkVSVkVSKSkgewogICAgIHByb3RfcHJpbnRmKHBvcGRf b3V0LCAiK09LICVzIEN5cnVzIFBPUDMlcyAlcyBzZXJ2ZXIgcmVhZHkgJXNcclxuIiwKIAkJY29u ZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIgTXVyZGVyIiA6ICIiLAog CQlDWVJVU19WRVJTSU9OLCBwb3BkX2Fwb3BfY2hhbCk7CisgICAgfQorICAgIGVsc2UgeworICAg IHByb3RfcHJpbnRmKHBvcGRfb3V0LCAiK09LICVzIEN5cnVzIFBPUDMlcyBzZXJ2ZXIgcmVhZHkg JXNcclxuIiwKKwkJY29uZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIg TXVyZGVyIiA6ICIiLAorCQlwb3BkX2Fwb3BfY2hhbCk7CisgICAgfQogICAgIGNtZGxvb3AoKTsK IAogICAgIC8qIFFVSVQgZXhlY3V0ZWQgKi8KQEAgLTEyMDUsMTEgKzEyMTIsMTggQEAgdm9pZCBj bWRfY2FwYSgpCiAJIHx8IGNvbmZpZ19nZXRzd2l0Y2goSU1BUE9QVF9BTExPV1BMQUlOVEVYVCkp KSB7CiAJcHJvdF9wcmludGYocG9wZF9vdXQsICJVU0VSXHJcbiIpOwogICAgIH0KLSAgICAKKyAg IAorICAgIGlmIChjb25maWdfZ2V0c3dpdGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikpIHsKICAg ICBwcm90X3ByaW50Zihwb3BkX291dCwKIAkJIklNUExFTUVOVEFUSU9OIEN5cnVzIFBPUDMlcyBz ZXJ2ZXIgJXNcclxuIiwKIAkJY29uZmlnX211cGRhdGVfc2VydmVyID8gIiBNdXJkZXIiIDogIiIs IENZUlVTX1ZFUlNJT04pOwotCisgICAgfQorICAgIGVsc2UgewkgICAgCisgICAgcHJvdF9wcmlu dGYocG9wZF9vdXQsCisJCSJJTVBMRU1FTlRBVElPTiBDeXJ1cyBQT1AzJXMgc2VydmVyIFxyXG4i LAorCQljb25maWdfbXVwZGF0ZV9zZXJ2ZXIgPyAiIE11cmRlciIgOiAiIik7CisgICAgfQorICAg IAogICAgIHByb3RfcHJpbnRmKHBvcGRfb3V0LCAiLlxyXG4iKTsKICAgICBwcm90X2ZsdXNoKHBv cGRfb3V0KTsKIH0K 896 2005-05-20 10:58:47 +0400 2005-05-20 10:58:47 +0400 fixed patch. cyrus-imapd-2.2.12-alt-serverversion-print-disable.patch text/plain 11096 algor LS0tIGN5cnVzLWltYXBkLTIuMi4xMi5vcmlnL2xpYi9pbWFwb3B0aW9ucwkyMDA1LTA1LTE5IDE2 OjA1OjMyICswNDAwCisrKyBjeXJ1cy1pbWFwZC0yLjIuMTIvbGliL2ltYXBvcHRpb25zCTIwMDUt MDUtMTkgMTY6MjM6NTQgKzA0MDAKQEAgLTc3MSw2ICs3NzEsOSBAQCBhcmUgbGlzdGVkIHdpdGgg YGA8bm9uZT4nJy4KICAgIElNQVAgYW5kIExNVFAgZGFlbW9ucy4gSWYgaXQgaXMgdW5zZXQsIHRo ZW4gdGhlIHJlc3VsdCByZXR1cm5lZAogICAgZnJvbSBnZXRob3N0bmFtZSgyKSBpcyB1c2VkLiAq LwogICAgCit7ICJzaG93c2VydmVydmVyIiwgMSwgU1dJVENIIH0KKy8qIFNob3cgb3IgZG9uJ3Qg c2hvdyBzZXJ2ZXIgdmVyc2lvbiBpbiBQT1AzIGJhbm5lci4gKi8KKwogeyAic2hhcmVkcHJlZml4 IiwgIlNoYXJlZCBGb2xkZXJzIiwgU1RSSU5HIH0KIC8qIElmIHVzaW5nIHRoZSBhbHRlcm5hdGUg SU1BUCBuYW1lc3BhY2UsIHRoZSBwcmVmaXggZm9yIHRoZSBzaGFyZWQKICAgIG5hbWVzcGFjZS4g IFRoZSBoaWVyYXJjaHkgZGVsaW1pdGVyIHdpbGwgYmUgYXV0b21hdGljYWxseSBhcHBlbmRlZC4g Ki8KCi0tLSBjeXJ1cy1pbWFwZC0yLjIuMTIub3JpZy9pbWFwL3BvcDNkLmMJMjAwNS0wNS0xOSAx NjowNTozMiArMDQwMAorKysgY3lydXMtaW1hcGQtMi4yLjEyL2ltYXAvcG9wM2QuYwkyMDA1LTA1 LTE5IDE2OjU0OjE4ICswNDAwCkBAIC00MjUsOSArNDI1LDE2IEBAIGludCBzZXJ2aWNlX21haW4o aW50IGFyZ2MgX19hdHRyaWJ1dGVfXygKIAlzeXNsb2coTE9HX1dBUk5JTkcsICJBUE9QIGRpc2Fi bGVkOiBjYW4ndCBjcmVhdGUgY2hhbGxlbmdlIik7CiAgICAgfQogCisgICAgaWYgKGNvbmZpZ19n ZXRzd2l0Y2goSU1BUE9QVF9TSE9XU0VSVkVSVkVSKSkgewogICAgIHByb3RfcHJpbnRmKHBvcGRf b3V0LCAiK09LICVzIEN5cnVzIFBPUDMlcyAlcyBzZXJ2ZXIgcmVhZHkgJXNcclxuIiwKIAkJY29u ZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIgTXVyZGVyIiA6ICIiLAog CQlDWVJVU19WRVJTSU9OLCBwb3BkX2Fwb3BfY2hhbCk7CisgICAgfQorICAgIGVsc2UgeworICAg IHByb3RfcHJpbnRmKHBvcGRfb3V0LCAiK09LICVzIEN5cnVzIFBPUDMlcyBzZXJ2ZXIgcmVhZHkg JXNcclxuIiwKKwkJY29uZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIg TXVyZGVyIiA6ICIiLAorCQlwb3BkX2Fwb3BfY2hhbCk7CisgICAgfQogICAgIGNtZGxvb3AoKTsK IAogICAgIC8qIFFVSVQgZXhlY3V0ZWQgKi8KQEAgLTEyMDUsMTEgKzEyMTIsMTggQEAgdm9pZCBj bWRfY2FwYSgpCiAJIHx8IGNvbmZpZ19nZXRzd2l0Y2goSU1BUE9QVF9BTExPV1BMQUlOVEVYVCkp KSB7CiAJcHJvdF9wcmludGYocG9wZF9vdXQsICJVU0VSXHJcbiIpOwogICAgIH0KLSAgICAKKyAg IAorICAgIGlmIChjb25maWdfZ2V0c3dpdGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikpIHsKICAg ICBwcm90X3ByaW50Zihwb3BkX291dCwKIAkJIklNUExFTUVOVEFUSU9OIEN5cnVzIFBPUDMlcyBz ZXJ2ZXIgJXNcclxuIiwKIAkJY29uZmlnX211cGRhdGVfc2VydmVyID8gIiBNdXJkZXIiIDogIiIs IENZUlVTX1ZFUlNJT04pOwotCisgICAgfQorICAgIGVsc2UgewkgICAgCisgICAgcHJvdF9wcmlu dGYocG9wZF9vdXQsCisJCSJJTVBMRU1FTlRBVElPTiBDeXJ1cyBQT1AzJXMgc2VydmVyIFxyXG4i LAorCQljb25maWdfbXVwZGF0ZV9zZXJ2ZXIgPyAiIE11cmRlciIgOiAiIik7CisgICAgfQorICAg IAogICAgIHByb3RfcHJpbnRmKHBvcGRfb3V0LCAiLlxyXG4iKTsKICAgICBwcm90X2ZsdXNoKHBv cGRfb3V0KTsKIH0KLS0tIGN5cnVzLWltYXBkLTIuMi4xMi5vcmlnL2ltYXAvaW1hcGQuYwkyMDA1 LTA1LTE5IDE2OjA1OjMyICswNDAwCisrKyBjeXJ1cy1pbWFwZC0yLjIuMTIvaW1hcC9pbWFwZC5j CTIwMDUtMDUtMjAgMDk6MjU6MzEgKzA0MDAKQEAgLTgyMCw5ICs4MjAsMTYgQEAgdm9pZCBjbWRs b29wKCkKICAgICBjaGFyICpwLCBzaHV0WzEwMjRdOwogICAgIGNvbnN0IGNoYXIgKmVycjsKIAor ICAgIGlmIChjb25maWdfZ2V0c3dpdGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikpIHsKICAgICBw cm90X3ByaW50ZihpbWFwZF9vdXQsCiAJCSIqIE9LICVzIEN5cnVzIElNQVA0ICVzIHNlcnZlciBy ZWFkeVxyXG4iLCBjb25maWdfc2VydmVybmFtZSwKIAkJQ1lSVVNfVkVSU0lPTik7CisgICAgfQor ICAgIGVsc2UgeworICAgIHByb3RfcHJpbnRmKGltYXBkX291dCwKKwkJIiogT0sgJXMgQ3lydXMg SU1BUDQgc2VydmVyIHJlYWR5XHJcbiIsIGNvbmZpZ19zZXJ2ZXJuYW1lKTsKKyAgICB9CisJICAg IAogCiAgICAgcmV0ID0gc25wcmludGYobW90ZGZpbGVuYW1lLCBzaXplb2YobW90ZGZpbGVuYW1l KSwgIiVzL21zZy9tb3RkIiwKIAkJICAgY29uZmlnX2Rpcik7CkBAIC01MDYwLDEwICs1MDY3LDE2 IEBAIHZvaWQgY21kX25ldHNjcmFwZShjaGFyICp0YWcpCiAgICAgdXJsID0gY29uZmlnX2dldHN0 cmluZyhJTUFQT1BUX05FVFNDQVBFVVJMKTsKIAogICAgIC8qIEkgb25seSBrbm93IG9mIHRocmVl IHRoaW5ncyB0byByZXBseSB3aXRoOiAqLworICAgIGlmIChjb25maWdfZ2V0c3dpdGNoKElNQVBP UFRfU0hPV1NFUlZFUlZFUikpIHsKICAgICBwcm90X3ByaW50ZihpbWFwZF9vdXQsCiAJCSIqIE9L IFtORVRTQ0FQRV0gQ2FybmVnaWUgTWVsbG9uIEN5cnVzIElNQVBcclxuIgogCQkiKiBWRVJTSU9O ICVzXHJcbiIsCiAJCUNZUlVTX1ZFUlNJT04pOworICAgIH0KKyAgICBlbHNlIHsKKyAgICBwcm90 X3ByaW50ZihpbWFwZF9vdXQsCisJCSIqIE9LIFtORVRTQ0FQRV0gQ2FybmVnaWUgTWVsbG9uIEN5 cnVzIElNQVBcclxuIik7CisgICAgfQogICAgIGlmICh1cmwpIHByb3RfcHJpbnRmKGltYXBkX291 dCwgIiogQUNDT1VOVC1VUkwgJXNcclxuIiwgdXJsKTsKICAgICBwcm90X3ByaW50ZihpbWFwZF9v dXQsICIlcyBPSyAlc1xyXG4iLAogCQl0YWcsIGVycm9yX21lc3NhZ2UoSU1BUF9PS19DT01QTEVU RUQpKTsKLS0tIGN5cnVzLWltYXBkLTIuMi4xMi5vcmlnL2ltYXAvbG10cF9zaWV2ZS5jCTIwMDQt MDYtMDEgMTc6NDc6MTYgKzA0MDAKKysrIGN5cnVzLWltYXBkLTIuMi4xMi9pbWFwL2xtdHBfc2ll dmUuYwkyMDA1LTA1LTIwIDA5OjI3OjE4ICswNDAwCkBAIC0yMjgsOCArMjI4LDE0IEBAIHN0YXRp YyBpbnQgc2VuZF9yZWplY3Rpb24oY29uc3QgY2hhciAqb3IKICAgICBmcHJpbnRmKHNtLCAiLS0l ZC8lc1xyXG4iCiAJICAgICJDb250ZW50LVR5cGU6IG1lc3NhZ2UvZGlzcG9zaXRpb24tbm90aWZp Y2F0aW9uXHJcblxyXG4iLAogCSAgICAoaW50KSBwLCBjb25maWdfc2VydmVybmFtZSk7CisgICAg aWYgKGNvbmZpZ19nZXRzd2l0Y2goSU1BUE9QVF9TSE9XU0VSVkVSVkVSKSkgewogICAgIGZwcmlu dGYoc20sICJSZXBvcnRpbmctVUE6ICVzOyBDeXJ1cyAlcy8lc1xyXG4iLAogCSAgICBjb25maWdf c2VydmVybmFtZSwgQ1lSVVNfVkVSU0lPTiwgU0lFVkVfVkVSU0lPTik7CisgICAgfQorICAgIGVs c2UgeworICAgIGZwcmludGYoc20sICJSZXBvcnRpbmctVUE6ICVzOyBDeXJ1cyAlc1xyXG4iLAor CSAgICBjb25maWdfc2VydmVybmFtZSwgU0lFVkVfVkVSU0lPTik7CisgICAgfQogICAgIGlmIChv cmlncmVjZWlwKQogCWZwcmludGYoc20sICJPcmlnaW5hbC1SZWNpcGllbnQ6IHJmYzgyMjsgJXNc clxuIiwgb3JpZ3JlY2VpcCk7CiAgICAgZnByaW50ZihzbSwgIkZpbmFsLVJlY2lwaWVudDogcmZj ODIyOyAlc1xyXG4iLCBtYWlscmVjZWlwKTsKLS0tIGN5cnVzLWltYXBkLTIuMi4xMi5vcmlnL2lt YXAvbG10cGVuZ2luZS5jCTIwMDQtMDgtMTAgMjE6MTg6MzggKzA0MDAKKysrIGN5cnVzLWltYXBk LTIuMi4xMi9pbWFwL2xtdHBlbmdpbmUuYwkyMDA1LTA1LTIwIDA5OjMwOjM4ICswNDAwCkBAIC0x MTE4LDEwICsxMTE4LDE2IEBAIHZvaWQgbG10cG1vZGUoc3RydWN0IGxtdHBfZnVuYyAqZnVuYywK IAlpZihoYXZlbG9jYWwpIHNhc2xfc2V0cHJvcChjZC5jb25uLCBTQVNMX0lQTE9DQUxQT1JULCAg JmxvY2FsaXAgKTsKIAlpZihoYXZlcmVtb3RlKSBzYXNsX3NldHByb3AoY2QuY29ubiwgU0FTTF9J UFJFTU9URVBPUlQsICZyZW1vdGVpcCk7ICAKICAgICB9Ci0KKyAgICAKKyAgICBpZiAoY29uZmln X2dldHN3aXRjaChJTUFQT1BUX1NIT1dTRVJWRVJWRVIpKSB7CiAgICAgcHJvdF9wcmludGYocG91 dCwgIjIyMCAlcyBMTVRQIEN5cnVzICVzIHJlYWR5XHJcbiIsIAogCQljb25maWdfc2VydmVybmFt ZSwKIAkJQ1lSVVNfVkVSU0lPTik7CisgICAgfSAKKyAgICBlbHNlIHsKKyAgICBwcm90X3ByaW50 Zihwb3V0LCAiMjIwICVzIExNVFAgQ3lydXMgcmVhZHlcclxuIiwgCisJCWNvbmZpZ19zZXJ2ZXJu YW1lKTsKKyAgICB9CiAKICAgICBmb3IgKDs7KSB7CiAgICAgbmV4dGNtZDoKLS0tIGN5cnVzLWlt YXBkLTIuMi4xMi5vcmlnL2ltYXAvbG10cHByb3h5ZC5jCTIwMDQtMTItMTcgMTk6MzI6MTYgKzAz MDAKKysrIGN5cnVzLWltYXBkLTIuMi4xMi9pbWFwL2xtdHBwcm94eWQuYwkyMDA1LTA1LTIwIDA5 OjMyOjI3ICswNDAwCkBAIC0yNjAsOCArMjYwLDE0IEBAIGludCBzZXJ2aWNlX21haW4oaW50IGFy Z2MgX19hdHRyaWJ1dGVfXygKIAltaGFuZGxlID0gTlVMTDsKIAlzeXNsb2coTE9HX0VSUiwgImNv dWxkbid0IGNvbm5lY3QgdG8gJXM6ICVzIiwgY29uZmlnX211cGRhdGVfc2VydmVyLAogCSAgICAg ICBlcnJvcl9tZXNzYWdlKHIpKTsKKwlpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQT1BUX1NIT1dT RVJWRVJWRVIpKSB7CiAJcHJvdF9wcmludGYoZGVsaXZlcl9vdXQsICI0NTEgJXMgTE1UUCBDeXJ1 cyAlcyAlc1xyXG4iLAogCQkgICAgY29uZmlnX3NlcnZlcm5hbWUsIENZUlVTX1ZFUlNJT04sIGVy cm9yX21lc3NhZ2UocikpOworCX0KKwllbHNlIHsKKwlwcm90X3ByaW50ZihkZWxpdmVyX291dCwg IjQ1MSAlcyBMTVRQIEN5cnVzICVzXHJcbiIsCisJCSAgICBjb25maWdfc2VydmVybmFtZSwgZXJy b3JfbWVzc2FnZShyKSk7CisJfQogICAgIH0KIAogICAgIC8qIGZyZWUgc2Vzc2lvbiBzdGF0ZSAq LwotLS0gY3lydXMtaW1hcGQtMi4yLjEyLm9yaWcvaW1hcC9tdXBkYXRlLmMJMjAwNC0xMi0xNyAx OTozMjoxNiArMDMwMAorKysgY3lydXMtaW1hcGQtMi4yLjEyL2ltYXAvbXVwZGF0ZS5jCTIwMDUt MDUtMjAgMDk6MzQ6MzMgKzA0MDAKQEAgLTk5NSwxMCArOTk1LDE4IEBAIHN0YXRpYyB2b2lkIGRv YmFubmVyKHN0cnVjdCBjb25uICpjKQogCiAgICAgcHJvdF9wcmludGYoYy0+cG91dCwgIiogUEFS VElBTC1VUERBVEVcclxuIik7CiAKKyAgICBpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQT1BUX1NI T1dTRVJWRVJWRVIpKSB7CiAgICAgcHJvdF9wcmludGYoYy0+cG91dCwKIAkJIiogT0sgTVVQREFU RSBcIiVzXCIgXCJDeXJ1cyBNdXJkZXJcIiBcIiVzXCIgXCIlc1wiXHJcbiIsCiAJCWNvbmZpZ19z ZXJ2ZXJuYW1lLAogCQlDWVJVU19WRVJTSU9OLCBtYXN0ZXJwID8gIihtYXN0ZXIpIiA6IHNsYXZl YnVmKTsKKyAgICB9CisgICAgZWxzZSB7CisgICAgcHJvdF9wcmludGYoYy0+cG91dCwKKwkJIiog T0sgTVVQREFURSBcIiVzXCIgXCJDeXJ1cyBNdXJkZXJcIiBcIiVzXCJcclxuIiwKKwkJY29uZmln X3NlcnZlcm5hbWUsCisJCW1hc3RlcnAgPyAiKG1hc3RlcikiIDogc2xhdmVidWYpOworICAgIH0K IAogICAgIHByb3RfZmx1c2goYy0+cG91dCk7CiB9Ci0tLSBjeXJ1cy1pbWFwZC0yLjIuMTIub3Jp Zy9pbWFwL25udHBkLmMJMjAwNS0wMS0wNyAyMzo1OTowNCArMDMwMAorKysgY3lydXMtaW1hcGQt Mi4yLjEyL2ltYXAvbm50cGQuYwkyMDA1LTA1LTIwIDA5OjQ2OjMzICswNDAwCkBAIC02NjQsMjAg KzY2NCwzNiBAQCBpbnQgc2VydmljZV9tYWluKGludCBhcmdjIF9fYXR0cmlidXRlX18oCiAgICAg aWYgKG5udHBzID09IDEpIGNtZF9zdGFydHRscygxKTsKIAogICAgIGlmIChzaHV0ZG93bl9maWxl KHVuYXZhaWwsIHNpemVvZih1bmF2YWlsKSkpIHsKKwlpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQ T1BUX1NIT1dTRVJWRVJWRVIpKSB7CiAJcHJvdF9wcmludGYobm50cF9vdXQsCiAJCSAgICAiNDAw ICVzIEN5cnVzIE5OVFAlcyAlcyBzZXJ2ZXIgdW5hdmFpbGFibGUsICVzXHJcbiIsCiAJCSAgICBj b25maWdfc2VydmVybmFtZSwgY29uZmlnX211cGRhdGVfc2VydmVyID8gIiBNdXJkZXIiIDogIiIs CiAJCSAgICBDWVJVU19WRVJTSU9OLCB1bmF2YWlsKTsKKwl9CisJZWxzZSB7CisJcHJvdF9wcmlu dGYobm50cF9vdXQsCisJCSAgICAiNDAwICVzIEN5cnVzIE5OVFAlcyBzZXJ2ZXIgdW5hdmFpbGFi bGUsICVzXHJcbiIsCisJCSAgICBjb25maWdfc2VydmVybmFtZSwgY29uZmlnX211cGRhdGVfc2Vy dmVyID8gIiBNdXJkZXIiIDogIiIsIHVuYXZhaWwpOworCX0KIAogCXNodXRfZG93bigwKTsKICAg ICB9CiAKKyAgICBpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQT1BUX1NIT1dTRVJWRVJWRVIpKSB7 CiAgICAgcHJvdF9wcmludGYobm50cF9vdXQsCiAJCSIldSAlcyBDeXJ1cyBOTlRQJXMgJXMgc2Vy dmVyIHJlYWR5LCBwb3N0aW5nICVzXHJcbiIsCiAJCShubnRwX2NhcGEgJiBNT0RFX1JFQUQpID8g MjAwIDogMjAxLAogCQljb25maWdfc2VydmVybmFtZSwgY29uZmlnX211cGRhdGVfc2VydmVyID8g IiBNdXJkZXIiIDogIiIsCiAJCUNZUlVTX1ZFUlNJT04sCiAJCShubnRwX2NhcGEgJiBNT0RFX1JF QUQpID8gImFsbG93ZWQiIDogInByb2hpYml0ZWQiKTsKKyAgICB9IAorICAgIGVsc2UgeworICAg IHByb3RfcHJpbnRmKG5udHBfb3V0LAorCQkiJXUgJXMgQ3lydXMgTk5UUCVzIHNlcnZlciByZWFk eSwgcG9zdGluZyAlc1xyXG4iLAorCQkobm50cF9jYXBhICYgTU9ERV9SRUFEKSA/IDIwMCA6IDIw MSwKKwkJY29uZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIgTXVyZGVy IiA6ICIiLAorCQkobm50cF9jYXBhICYgTU9ERV9SRUFEKSA/ICJhbGxvd2VkIiA6ICJwcm9oaWJp dGVkIik7CisgICAgfQogCiAgICAgY21kbG9vcCgpOwogCkBAIC0xODA2LDkgKzE4MjIsMTYgQEAg c3RhdGljIHZvaWQgY21kX2NhcGFiaWxpdGllcyhjaGFyICprZXl3bwogCiAgICAgcHJvdF9wcmlu dGYobm50cF9vdXQsICIxMDEgQ2FwYWJpbGl0eSBsaXN0IGZvbGxvd3M6XHJcbiIpOwogICAgIHBy b3RfcHJpbnRmKG5udHBfb3V0LCAiVkVSU0lPTiAyXHJcbiIpOworICAgIGlmIChjb25maWdfZ2V0 c3dpdGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikpIHsKICAgICBwcm90X3ByaW50ZihubnRwX291 dCwKIAkJIklNUExFTUVOVEFUSU9OIEN5cnVzIE5OVFAlcyBzZXJ2ZXIgJXNcclxuIiwKIAkJY29u ZmlnX211cGRhdGVfc2VydmVyID8gIiBNdXJkZXIiIDogIiIsIENZUlVTX1ZFUlNJT04pOworICAg IH0KKyAgICBlbHNlIHsKKyAgICBwcm90X3ByaW50ZihubnRwX291dCwKKwkJIklNUExFTUVOVEFU SU9OIEN5cnVzIE5OVFAlcyBzZXJ2ZXJcclxuIiwKKwkJY29uZmlnX211cGRhdGVfc2VydmVyID8g IiBNdXJkZXIiIDogIiIpOworICAgIH0KIAogICAgIC8qIGFkZCBTVEFSVFRMUyAqLwogICAgIGlm ICh0bHNfZW5hYmxlZCgpICYmICFubnRwX3N0YXJ0dGxzX2RvbmUgJiYgIW5udHBfYXV0aHN0YXRl KQpAQCAtMjY2NCwxMiArMjY4NywyMSBAQCBzdGF0aWMgdm9pZCBjbWRfbW9kZShjaGFyICphcmcp CiAgICAgbGNhc2UoYXJnKTsKIAogICAgIGlmICghc3RyY21wKGFyZywgInJlYWRlciIpKSB7CisJ aWYgKGNvbmZpZ19nZXRzd2l0Y2goSU1BUE9QVF9TSE9XU0VSVkVSVkVSKSkgewogCXByb3RfcHJp bnRmKG5udHBfb3V0LAogCQkgICAgIiV1ICVzIEN5cnVzIE5OVFAlcyAlcyBzZXJ2ZXIgcmVhZHks IHBvc3RpbmcgJXNcclxuIiwKIAkJICAgIChubnRwX2NhcGEgJiBNT0RFX1JFQUQpID8gMjAwIDog MjAxLAogCQkgICAgY29uZmlnX3NlcnZlcm5hbWUsIGNvbmZpZ19tdXBkYXRlX3NlcnZlciA/ICIg TXVyZGVyIiA6ICIiLAogCQkgICAgQ1lSVVNfVkVSU0lPTiwKIAkJICAgIChubnRwX2NhcGEgJiBN T0RFX1JFQUQpID8gImFsbG93ZWQiIDogInByb2hpYml0ZWQiKTsKKwl9CisJZWxzZSB7CisJcHJv dF9wcmludGYobm50cF9vdXQsCisJCSAgICAiJXUgJXMgQ3lydXMgTk5UUCVzIHNlcnZlciByZWFk eSwgcG9zdGluZyAlc1xyXG4iLAorCQkgICAgKG5udHBfY2FwYSAmIE1PREVfUkVBRCkgPyAyMDAg OiAyMDEsCisJCSAgICBjb25maWdfc2VydmVybmFtZSwgY29uZmlnX211cGRhdGVfc2VydmVyID8g IiBNdXJkZXIiIDogIiIsCisJCSAgICAobm50cF9jYXBhICYgTU9ERV9SRUFEKSA/ICJhbGxvd2Vk IiA6ICJwcm9oaWJpdGVkIik7CisJfQogICAgIH0KICAgICBlbHNlIGlmICghc3RyY21wKGFyZywg InN0cmVhbSIpKSB7CiAJaWYgKG5udHBfY2FwYSAmIE1PREVfRkVFRCkgewotLS0gY3lydXMtaW1h cGQtMi4yLjEyLm9yaWcvaW1hcC9wcm94eWQuYwkyMDA0LTEyLTE3IDE5OjMyOjIwICswMzAwCisr KyBjeXJ1cy1pbWFwZC0yLjIuMTIvaW1hcC9wcm94eWQuYwkyMDA1LTA1LTIwIDA5OjQ5OjQ4ICsw NDAwCkBAIC0xNDgyLDkgKzE0ODIsMTUgQEAgdm9pZCBjbWRsb29wKCkKIAkgICAgICIlcy9tc2cv c2h1dGRvd24iLCBjb25maWdfZGlyKTsKIAogICAgIGdldGhvc3RuYW1lKGhvc3RuYW1lLCBzaXpl b2YoaG9zdG5hbWUpKTsKKyAgICBpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQT1BUX1NIT1dTRVJW RVJWRVIpKSB7CiAgICAgcHJvdF9wcmludGYocHJveHlkX291dCwKIAkJIiogT0sgJXMgQ3lydXMg SU1BUDQgTXVyZGVyICVzIHNlcnZlciByZWFkeVxyXG4iLCBob3N0bmFtZSwKIAkJQ1lSVVNfVkVS U0lPTik7CisgICAgfQorICAgIGVsc2UgeworICAgIHByb3RfcHJpbnRmKHByb3h5ZF9vdXQsCisJ CSIqIE9LICVzIEN5cnVzIElNQVA0IE11cmRlciBzZXJ2ZXIgcmVhZHlcclxuIiwgaG9zdG5hbWUp OworICAgIH0KIAogICAgIHNucHJpbnRmKG1vdGRmaWxlbmFtZSwgc2l6ZW9mKG1vdGRmaWxlbmFt ZSksICIlcy9tc2cvbW90ZCIsIGNvbmZpZ19kaXIpOwogICAgIGlmICgoZmQgPSBvcGVuKG1vdGRm aWxlbmFtZSwgT19SRE9OTFksIDApKSAhPSAtMSkgewpAQCAtNDU1Miw5ICs0NTU4LDE1IEBAIGNt ZF9uZXRzY2FwZSh0YWcpCiAgICAgdXJsID0gY29uZmlnX2dldHN0cmluZyhJTUFQT1BUX05FVFND QVBFVVJMKTsKIAogICAgIC8qIEkgb25seSBrbm93IG9mIHRocmVlIHRoaW5ncyB0byByZXBseSB3 aXRoOiAqLworICAgIGlmIChjb25maWdfZ2V0c3dpdGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikp IHsKICAgICBwcm90X3ByaW50Zihwcm94eWRfb3V0LAogIiogT0sgW05FVFNDQVBFXSBDYXJuZWdp ZSBNZWxsb24gQ3lydXMgSU1BUCBwcm94eVxyXG4qIFZFUlNJT04gJXNcclxuIiwKIAkJQ1lSVVNf VkVSU0lPTik7CisgICAgfQorICAgIGVsc2UgeworICAgIHByb3RfcHJpbnRmKHByb3h5ZF9vdXQs CisiKiBPSyBbTkVUU0NBUEVdIENhcm5lZ2llIE1lbGxvbiBDeXJ1cyBJTUFQIHByb3h5XHJcbioi KTsKKyAgICB9CiAgICAgcHJvdF9wcmludGYocHJveHlkX291dCwKIAkJIiogQUNDT1VOVC1VUkwg JXNcclxuJXMgT0sgJXNcclxuIiwKIAkJdXJsLCB0YWcsIGVycm9yX21lc3NhZ2UoSU1BUF9PS19D T01QTEVURUQpKTsKCi0tLSBjeXJ1cy1pbWFwZC0yLjIuMTIub3JpZy9pbWFwL3ZlcnNpb24uYwky MDA0LTA2LTIxIDE5OjMxOjEzICswNDAwCisrKyBjeXJ1cy1pbWFwZC0yLjIuMTIvaW1hcC92ZXJz aW9uLmMJMjAwNS0wNS0yMCAxMDoyNzoyNyArMDQwMApAQCAtNjMsNiArNjMsNyBAQAogI2luY2x1 ZGUgImxvY2suaCIKICNpbmNsdWRlICJub25ibG9jay5oIgogI2luY2x1ZGUgImlkbGUuaCIKKyNp bmNsdWRlICJnbG9iYWwuaCIKIAogI2lmZGVmIFVTRV9TSUVWRQogI2luY2x1ZGUgInNpZXZlX2lu dGVyZmFjZS5oIgpAQCAtOTUsMTIgKzk2LDIwIEBAIHZvaWQgaWRfcmVzcG9uc2Uoc3RydWN0IHBy b3RzdHJlYW0gKnBvdXQKICAgICBpbnQgc2FzbF92ZXI7CiAgICAgY2hhciBlbnZfYnVmW01BWElE VkFMVUVMRU4rMV07CiAKKyAgICBpZiAoY29uZmlnX2dldHN3aXRjaChJTUFQT1BUX1NIT1dTRVJW RVJWRVIpKSB7CiAgICAgcHJvdF9wcmludGYocG91dCwgIiogSUQgKCIKIAkJIlwibmFtZVwiIFwi Q3lydXMgSU1BUERcIiIKIAkJIiBcInZlcnNpb25cIiBcIiVzICVzXCIiCiAJCSIgXCJ2ZW5kb3Jc IiBcIlByb2plY3QgQ3lydXNcIiIKIAkJIiBcInN1cHBvcnQtdXJsXCIgXCJodHRwOi8vYXNnLndl Yi5jbXUuZWR1L2N5cnVzXCIiLAogCQlDWVJVU19WRVJTSU9OLCBDWVJVU19DVlNEQVRFKTsKKyAg ICB9CisgICAgZWxzZSB7CisgICAgcHJvdF9wcmludGYocG91dCwgIiogSUQgKCIKKwkJIlwibmFt ZVwiIFwiQ3lydXMgSU1BUERcIiIKKwkJIiBcInZlbmRvclwiIFwiUHJvamVjdCBDeXJ1c1wiIgor CQkiIFwic3VwcG9ydC11cmxcIiBcImh0dHA6Ly9hc2cud2ViLmNtdS5lZHUvY3lydXNcIiIpOwor ICAgIH0KIAogICAgIC8qIGFkZCB0aGUgb3MgaW5mbyAqLwogICAgIGlmICh1bmFtZSgmb3MpICE9 IC0xKQotLS0gY3lydXMtaW1hcGQtMi4yLjEyLm9yaWcvdGltc2lldmVkL2FjdGlvbnMuYwkyMDAz LTEwLTIyIDIyOjUwOjMxICswNDAwCisrKyBjeXJ1cy1pbWFwZC0yLjIuMTIvdGltc2lldmVkL2Fj dGlvbnMuYwkyMDA1LTA1LTIwIDEwOjQyOjI1ICswNDAwCkBAIC0xNjYsOCArMTY2LDEzIEBAIGlu dCBjYXBhYmlsaXRpZXMoc3RydWN0IHByb3RzdHJlYW0gKmNvbm4KICAgICB1bnNpZ25lZCBtZWNo Y291bnQ7CiAKICAgICAvKiBpbXBsZW1lbnRhdGlvbiAqLworICAgIGlmIChjb25maWdfZ2V0c3dp dGNoKElNQVBPUFRfU0hPV1NFUlZFUlZFUikpIHsKICAgICBwcm90X3ByaW50Zihjb25uLCAiXCJJ TVBMRU1FTlRBVElPTlwiIFwiQ3lydXMgdGltc2lldmVkICVzXCJcclxuIiwKIAkJQ1lSVVNfVkVS U0lPTik7CisgICAgfQorICAgIGVsc2UgeworICAgIHByb3RfcHJpbnRmKGNvbm4sICJcIklNUExF TUVOVEFUSU9OXCIgXCJDeXJ1cyB0aW1zaWV2ZWRcIlxyXG4iKTsKKyAgICB9CiAgICAgCiAgICAg LyogU0FTTCAqLwogICAgIGlmICghYXV0aGVudGljYXRlZCAmJgo=