154270 2016-02-15 17:14:43 -0800 Do security checks early in JSDOMWindow::put*() 2016-02-16 00:11:51 -0800 1 1 1 Unclassified WebKit Bindings WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 154120 1 cdumez cdumez barraclough commit-queue ggaren mkwst sam oldest_to_newest 1164978 0 cdumez 2016-02-15 17:14:43 -0800 Do security checks early in JSDOMWindow::put*() to make it less error-prone. Also lock-down further to return early when trying to set cross-origin any other property than "location" instead of relying only on individual setters to do the security checks. 1165008 1 271404 cdumez 2016-02-15 18:54:10 -0800 Created attachment 271404 Patch 1165072 2 271404 commit-queue 2016-02-16 00:11:46 -0800 Comment on attachment 271404 Patch Clearing flags on attachment: 271404 Committed r196628: <http://trac.webkit.org/changeset/196628> 1165073 3 commit-queue 2016-02-16 00:11:51 -0800 All reviewed patches have been landed. Closing bug. 271404 2016-02-15 18:54:10 -0800 2016-02-16 00:11:46 -0800 Patch bug-154270-20160215185350.patch text/plain 13579 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMTk2NjEwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggYjdiMzlmYzVkNmI2MWE4 NDk5NjBiNDcyZDFlMGI3YTdmYTQxOGY5Zi4uNGViMDE2MzY5Nzg5NDQyNDk5NjYwOWRhZDg5YTAx ZDQ2NWY4MzlmNyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDMzIEBACisyMDE2LTAyLTE1ICBDaHJp cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgRG8gc2VjdXJpdHkgY2hlY2tz IGVhcmx5IGluIEpTRE9NV2luZG93OjpwdXQqKCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtp dC5vcmcvc2hvd19idWcuY2dpP2lkPTE1NDI3MAorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIERvIHNlY3VyaXR5IGNoZWNrcyBlYXJseSBpbiBKU0RPTVdp bmRvdzo6cHV0KCkgLyBKU0RPTVdpbmRvdzo6cHV0QnlJbmRleCgpCisgICAgICAgIGFuZCByZXR1 cm4gYXMgc29vbiBhcyBwb3NzaWJsZS4gVGhpcyBtYWtlcyBpdCBsZXNzIGVycm9yLXByb25lIGFz IHdlIG5lZWQKKyAgICAgICAgdG8gZG8gdGhlIHNlY3VyaXR5IGNoZWNrIG9ubHkgb25jZSwgYXQg dGhlIHRvcCBvZiB0aGUgZnVuY3Rpb24uCisKKyAgICAgICAgQWxzbyBsb2NrIGRvd24gdGhlIHNl Y3VyaXR5IGZ1cnRoZXIgYnkgY2FsbGluZyBsb29rdXBQdXQoKSBvbmx5IGlmIHRoZQorICAgICAg ICBwcm9wZXJ0eSBuYW1lIGlzICJsb2NhdGlvbiIuIFRoZSAibG9jYXRpb24iIHByb3BlcnR5IGlz IHRoZSBvbmx5IG9uZSB0aGF0CisgICAgICAgIGNhbiBiZSBzZXQgY3Jvc3Mtb3JpZ2luLiBQcmV2 aW91c2x5LCB0cnlpbmcgdG8gc2V0IGEgcHJvcGVydHkgc3VjaCBhcworICAgICAgICAibmFtZSIg KHdoaWNoIGNhbm5vdCBiZSBzZXQgY3Jvc3Mtb3JpZ2luKSByZWxpZWQgb24gdGhlIGF0dHJpYnV0 ZSBzZXR0ZXIKKyAgICAgICAgZG9pbmcgdGhlIHNlY3VyaXR5IGNoZWNrIHdoZW4gZ2V0dGluZyBj YWxsZWQuIFRoZSBuZXcgY2hlY2sgaXMgbGVzcyBlcnJvcgorICAgICAgICBwcm9uZSBhbmQgd2ls bCBjb3JyZWN0bHkgcHJldmVudCBvdmVycmlkaW5nIHdpbmRvdydzIG1ldGhvZCBjcm9zcy1vcmln aW4KKyAgICAgICAgb25jZSB0aGVzZSBtb3ZlIGRvd24gZnJvbSB0aGUgcHJvdG90eXBlIChCdWcg MTU0MTIwKS4KKworICAgICAgICBGaW5hbGx5LCB0aGUgcHJldmlvdXMgY29kZSB3YXMgZmFpbGlu ZyB0byBzZXQgdGhlICJsb2NhdGlvbiIgcHJvcGVydHkKKyAgICAgICAgY3Jvc3Mtb3JpZ2luIGFm dGVyIHRoZSB3aW5kb3cgaGFzIGJlZW4gcmVpZmllZC4gVGhpcyBwYXRjaCBmaXhlcyB0aGUKKyAg ICAgICAgaXNzdWUgYnkgYWx3YXlzIGNhbGxpbmcgdGhlIG9yaWdpbmFsICJsb2NhdGlvbiIgcHJv cGVydHkgc2V0dGVyIGZyb20gdGhlCisgICAgICAgIHN0YXRpYyB0YWJsZSBpbiB0aGUgY3Jvc3Mt b3JpZ2luIGNhc2UuCisKKyAgICAgICAgVGVzdDogaHR0cC90ZXN0cy9zZWN1cml0eS9jcm9zcy1v cmlnaW4tcmVpZmllZC13aW5kb3ctbG9jYXRpb24tc2V0dGluZy5odG1sCisKKyAgICAgICAgKiBi aW5kaW5ncy9qcy9KU0RPTVdpbmRvd0N1c3RvbS5jcHA6CisgICAgICAgIChXZWJDb3JlOjpKU0RP TVdpbmRvdzo6cHV0KToKKyAgICAgICAgKFdlYkNvcmU6OkpTRE9NV2luZG93OjpwdXRCeUluZGV4 KToKKwogMjAxNi0wMi0xNSAgTXlsZXMgQy4gTWF4ZmllbGQgIDxtbWF4ZmllbGRAYXBwbGUuY29t PgogCiAgICAgICAgIFtGb250IExvYWRpbmddIEltcGxlbWVudCBGb250RmFjZSBKYXZhU2NyaXB0 IG9iamVjdApkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvYmluZGluZ3MvanMvSlNET01XaW5k b3dDdXN0b20uY3BwIGIvU291cmNlL1dlYkNvcmUvYmluZGluZ3MvanMvSlNET01XaW5kb3dDdXN0 b20uY3BwCmluZGV4IDU4MjU3MGEwZmNkNzJkMjNhNzFkZDgyYzI2ZDVhZWE5NGE1MTdjMzAuLjVl NmI0ZDBiZWU2ZDljYTAwNmIzMGNiMTk2NGIzZGJlNTMzOWFmYjUgMTAwNjQ0Ci0tLSBhL1NvdXJj ZS9XZWJDb3JlL2JpbmRpbmdzL2pzL0pTRE9NV2luZG93Q3VzdG9tLmNwcAorKysgYi9Tb3VyY2Uv V2ViQ29yZS9iaW5kaW5ncy9qcy9KU0RPTVdpbmRvd0N1c3RvbS5jcHAKQEAgLTM0NywxNCArMzQ3 LDIzIEBAIGJvb2wgSlNET01XaW5kb3c6OmdldE93blByb3BlcnR5U2xvdEJ5SW5kZXgoSlNPYmpl Y3QqIG9iamVjdCwgRXhlY1N0YXRlKiBleGVjLCB1CiAKIHZvaWQgSlNET01XaW5kb3c6OnB1dChK U0NlbGwqIGNlbGwsIEV4ZWNTdGF0ZSogZXhlYywgUHJvcGVydHlOYW1lIHByb3BlcnR5TmFtZSwg SlNWYWx1ZSB2YWx1ZSwgUHV0UHJvcGVydHlTbG90JiBzbG90KQogewotICAgIEpTRE9NV2luZG93 KiB0aGlzT2JqZWN0ID0ganNDYXN0PEpTRE9NV2luZG93Kj4oY2VsbCk7CisgICAgYXV0byogdGhp c09iamVjdCA9IGpzQ2FzdDxKU0RPTVdpbmRvdyo+KGNlbGwpOwogICAgIGlmICghdGhpc09iamVj dC0+d3JhcHBlZCgpLmZyYW1lKCkpCiAgICAgICAgIHJldHVybjsKIAorICAgIFN0cmluZyBlcnJv ck1lc3NhZ2U7CisgICAgaWYgKCFzaG91bGRBbGxvd0FjY2Vzc1RvRE9NV2luZG93KGV4ZWMsIHRo aXNPYmplY3QtPndyYXBwZWQoKSwgZXJyb3JNZXNzYWdlKSkgeworICAgICAgICAvLyBXZSBvbmx5 IGFsbG93IHNldHRpbmcgImxvY2F0aW9uIiBhdHRyaWJ1dGUgY3Jvc3Mtb3JpZ2luLgorICAgICAg ICBpZiAocHJvcGVydHlOYW1lID09IGV4ZWMtPnByb3BlcnR5TmFtZXMoKS5sb2NhdGlvbikKKyAg ICAgICAgICAgIGxvb2t1cFB1dChleGVjLCBwcm9wZXJ0eU5hbWUsIHRoaXNPYmplY3QsIHZhbHVl LCAqc19pbmZvLnN0YXRpY1Byb3BIYXNoVGFibGUsIHNsb3QpOworICAgICAgICBlbHNlCisgICAg ICAgICAgICB0aGlzT2JqZWN0LT5wcmludEVycm9yTWVzc2FnZShlcnJvck1lc3NhZ2UpOworICAg ICAgICByZXR1cm47CisgICAgfQorCiAgICAgLy8gT3B0aW1pemF0aW9uOiBhY2Nlc3MgSmF2YVNj cmlwdCBnbG9iYWwgdmFyaWFibGVzIGRpcmVjdGx5IGJlZm9yZSBpbnZvbHZpbmcgdGhlIERPTS4K ICAgICBpZiAodGhpc09iamVjdC0+SlNHbG9iYWxPYmplY3Q6Omhhc093blByb3BlcnR5Rm9yV3Jp dGUoZXhlYywgcHJvcGVydHlOYW1lKSkgewotICAgICAgICBpZiAoQmluZGluZ1NlY3VyaXR5Ojpz aG91bGRBbGxvd0FjY2Vzc1RvRE9NV2luZG93KGV4ZWMsIHRoaXNPYmplY3QtPndyYXBwZWQoKSkp Ci0gICAgICAgICAgICBKU0dsb2JhbE9iamVjdDo6cHV0KHRoaXNPYmplY3QsIGV4ZWMsIHByb3Bl cnR5TmFtZSwgdmFsdWUsIHNsb3QpOworICAgICAgICBKU0dsb2JhbE9iamVjdDo6cHV0KHRoaXNP YmplY3QsIGV4ZWMsIHByb3BlcnR5TmFtZSwgdmFsdWUsIHNsb3QpOwogICAgICAgICByZXR1cm47 CiAgICAgfQogCkBAIC0zNjMsMjcgKzM3MiwyMiBAQCB2b2lkIEpTRE9NV2luZG93OjpwdXQoSlND ZWxsKiBjZWxsLCBFeGVjU3RhdGUqIGV4ZWMsIFByb3BlcnR5TmFtZSBwcm9wZXJ0eU5hbWUsCiAg ICAgICAgICAgICByZXR1cm47CiAgICAgfQogCi0gICAgaWYgKEJpbmRpbmdTZWN1cml0eTo6c2hv dWxkQWxsb3dBY2Nlc3NUb0RPTVdpbmRvdyhleGVjLCB0aGlzT2JqZWN0LT53cmFwcGVkKCkpKQot ICAgICAgICBCYXNlOjpwdXQodGhpc09iamVjdCwgZXhlYywgcHJvcGVydHlOYW1lLCB2YWx1ZSwg c2xvdCk7CisgICAgQmFzZTo6cHV0KHRoaXNPYmplY3QsIGV4ZWMsIHByb3BlcnR5TmFtZSwgdmFs dWUsIHNsb3QpOwogfQogCiB2b2lkIEpTRE9NV2luZG93OjpwdXRCeUluZGV4KEpTQ2VsbCogY2Vs bCwgRXhlY1N0YXRlKiBleGVjLCB1bnNpZ25lZCBpbmRleCwgSlNWYWx1ZSB2YWx1ZSwgYm9vbCBz aG91bGRUaHJvdykKIHsKLSAgICBKU0RPTVdpbmRvdyogdGhpc09iamVjdCA9IGpzQ2FzdDxKU0RP TVdpbmRvdyo+KGNlbGwpOwotICAgIGlmICghdGhpc09iamVjdC0+d3JhcHBlZCgpLmZyYW1lKCkp CisgICAgYXV0byogdGhpc09iamVjdCA9IGpzQ2FzdDxKU0RPTVdpbmRvdyo+KGNlbGwpOworICAg IGlmICghdGhpc09iamVjdC0+d3JhcHBlZCgpLmZyYW1lKCkgfHwgIUJpbmRpbmdTZWN1cml0eTo6 c2hvdWxkQWxsb3dBY2Nlc3NUb0RPTVdpbmRvdyhleGVjLCB0aGlzT2JqZWN0LT53cmFwcGVkKCkp KQogICAgICAgICByZXR1cm47CiAgICAgCi0gICAgSWRlbnRpZmllciBwcm9wZXJ0eU5hbWUgPSBJ ZGVudGlmaWVyOjpmcm9tKGV4ZWMsIGluZGV4KTsKLQogICAgIC8vIE9wdGltaXphdGlvbjogYWNj ZXNzIEphdmFTY3JpcHQgZ2xvYmFsIHZhcmlhYmxlcyBkaXJlY3RseSBiZWZvcmUgaW52b2x2aW5n IHRoZSBET00uCi0gICAgaWYgKHRoaXNPYmplY3QtPkpTR2xvYmFsT2JqZWN0OjpoYXNPd25Qcm9w ZXJ0eUZvcldyaXRlKGV4ZWMsIHByb3BlcnR5TmFtZSkpIHsKLSAgICAgICAgaWYgKEJpbmRpbmdT ZWN1cml0eTo6c2hvdWxkQWxsb3dBY2Nlc3NUb0RPTVdpbmRvdyhleGVjLCB0aGlzT2JqZWN0LT53 cmFwcGVkKCkpKQotICAgICAgICAgICAgSlNHbG9iYWxPYmplY3Q6OnB1dEJ5SW5kZXgodGhpc09i amVjdCwgZXhlYywgaW5kZXgsIHZhbHVlLCBzaG91bGRUaHJvdyk7CisgICAgaWYgKHRoaXNPYmpl Y3QtPkpTR2xvYmFsT2JqZWN0OjpoYXNPd25Qcm9wZXJ0eUZvcldyaXRlKGV4ZWMsIElkZW50aWZp ZXI6OmZyb20oZXhlYywgaW5kZXgpKSkgeworICAgICAgICBKU0dsb2JhbE9iamVjdDo6cHV0QnlJ bmRleCh0aGlzT2JqZWN0LCBleGVjLCBpbmRleCwgdmFsdWUsIHNob3VsZFRocm93KTsKICAgICAg ICAgcmV0dXJuOwogICAgIH0KICAgICAKLSAgICBpZiAoQmluZGluZ1NlY3VyaXR5OjpzaG91bGRB bGxvd0FjY2Vzc1RvRE9NV2luZG93KGV4ZWMsIHRoaXNPYmplY3QtPndyYXBwZWQoKSkpCi0gICAg ICAgIEJhc2U6OnB1dEJ5SW5kZXgodGhpc09iamVjdCwgZXhlYywgaW5kZXgsIHZhbHVlLCBzaG91 bGRUaHJvdyk7CisgICAgQmFzZTo6cHV0QnlJbmRleCh0aGlzT2JqZWN0LCBleGVjLCBpbmRleCwg dmFsdWUsIHNob3VsZFRocm93KTsKIH0KIAogYm9vbCBKU0RPTVdpbmRvdzo6ZGVsZXRlUHJvcGVy dHkoSlNDZWxsKiBjZWxsLCBFeGVjU3RhdGUqIGV4ZWMsIFByb3BlcnR5TmFtZSBwcm9wZXJ0eU5h bWUpCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFu Z2VMb2cKaW5kZXggNDNhNTA5OGU0NzUzZWMyYjE1MTMxNmExNGRiODE2ZTM4OTBiZDBmNC4uMzVi MDQ4OTE2YzQ4NGExMjJhMjM5NTA5MDEzNDUwYzU0M2E0MmUzZSAxMDA2NDQKLS0tIGEvTGF5b3V0 VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI0 IEBACisyMDE2LTAyLTE1ICBDaHJpcyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAg ICAgRG8gc2VjdXJpdHkgY2hlY2tzIGVhcmx5IGluIEpTRE9NV2luZG93OjpwdXQqKCkKKyAgICAg ICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE1NDI3MAorCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogaHR0cC90ZXN0cy9z ZWN1cml0eS9jcm9zcy1mcmFtZS1hY2Nlc3MtcHV0LWV4cGVjdGVkLnR4dDoKKyAgICAgICAgUmVi YXNlbGluZS4gVGhlIGV4dHJhIHNlY3VyaXR5IHdhcm5pbmdzIGFyZSBmb3IgdGhlIGZvbGxvd2lu ZyBwcm9wZXJ0aWVzOgorICAgICAgICBjbG9zZWQsIGNyeXB0bywgZnJhbWVFbGVtZW50LCBwYWdl WE9mZnNldCBhbmQgcGFnZVlPZmZzZXQuCisgICAgICAgIEFsbCB0aGVzZSBwcm9wZXJ0aWVzIGFy ZSByZWFkLW9ubHkgYW5kIHRoZXJlZm9yZSBjYW5ub3QgYmUgc2V0IChjcm9zcy1vcmlnaW4KKyAg ICAgICAgb3Igbm90KS4gVGhlIHByZXZpb3VzIGNvZGUgd2FzIG5vdCBkb2luZyBhbiBleHBsaWNp dCBjaGVjayBhbmQgZW5kZWQgdXAKKyAgICAgICAgdHJ5aW5nIHRvIHNldCB0aGVzZSBwcm9wZXJ0 aWVzLiBIb3dldmVyLCBzaW5jZSB0aGV5IGFyZSByZWFkLW9ubHksIHdlIHdvdWxkCisgICAgICAg IHNpbGVudGx5IGZhaWwgdG8gc2V0IHRoZW0uIFRoZSBuZXcgY29kZSBkb2VzIHRoZSBleHBsaWNp dCBjaGVjayBhbmQgdGhlcmVmb3JlCisgICAgICAgIHdpbGwgd2FybiBhbmQgTk9UIGF0dGVtcHQg dG8gc2V0LgorCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS9jcm9zcy1vcmlnaW4tcmVp ZmllZC13aW5kb3ctbG9jYXRpb24tc2V0dGluZy1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAg ICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkvY3Jvc3Mtb3JpZ2luLXJlaWZpZWQtd2luZG93LWxvY2F0 aW9uLXNldHRpbmcuaHRtbDogQWRkZWQuCisgICAgICAgIEFkZCB0ZXN0IHRvIGNoZWNrIHRoYXQg c2V0dGluZyB3aW5kb3cubG9jYXRpb24gY3Jvc3Mtb3JpZ2luIHN0aWxsIHdvcmtzIGFmdGVyIHRo ZQorICAgICAgICB3aW5kb3cgb2JqZWN0IGhhcyBiZWVuIHJlaWZpZWQuCisKIDIwMTYtMDItMTUg IE15bGVzIEMuIE1heGZpZWxkICA8bW1heGZpZWxkQGFwcGxlLmNvbT4KIAogICAgICAgICBbRm9u dCBMb2FkaW5nXSBJbXBsZW1lbnQgRm9udEZhY2UgSmF2YVNjcmlwdCBvYmplY3QKZGlmZiAtLWdp dCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY3Jvc3MtZnJhbWUtYWNjZXNzLXB1 dC1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Nyb3NzLWZy YW1lLWFjY2Vzcy1wdXQtZXhwZWN0ZWQudHh0CmluZGV4IDk3YWVkNWYxYjYzNDhhZDc0NzVkMGVl MTM4Y2I4YWUwNDBjMmRhOTAuLjQ4NzY1MGFlNTZlYjk5ODFhMGUzYjM3NzVlOTU1NGVjZDc1MDhm ZDYgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY3Jvc3MtZnJh bWUtYWNjZXNzLXB1dC1leHBlY3RlZC50eHQKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS9jcm9zcy1mcmFtZS1hY2Nlc3MtcHV0LWV4cGVjdGVkLnR4dApAQCAtMjcxLDEzICsy NzEsMTYgQEAgQ09OU09MRSBNRVNTQUdFOiBsaW5lIDEyMDogQmxvY2tlZCBhIGZyYW1lIHdpdGgg b3JpZ2luICJodHRwOi8vMTI3LjAuMC4xOjgwMDAiIGYKIENPTlNPTEUgTUVTU0FHRTogbGluZSAx MjE6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiBm cm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0OjgwMDAi LiBQcm90b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09OU09MRSBNRVNT QUdFOiBsaW5lIDEyMjogQmxvY2tlZCBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vMTI3LjAu MC4xOjgwMDAiIGZyb20gYWNjZXNzaW5nIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly9sb2Nh bGhvc3Q6ODAwMCIuIFByb3RvY29scywgZG9tYWlucywgYW5kIHBvcnRzIG11c3QgbWF0Y2guCiBD T05TT0xFIE1FU1NBR0U6IGxpbmUgMTMxOiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0 dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJvbSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdpbiAi aHR0cDovL2xvY2FsaG9zdDo4MDAwIi4gUHJvdG9jb2xzLCBkb21haW5zLCBhbmQgcG9ydHMgbXVz dCBtYXRjaC4KK0NPTlNPTEUgTUVTU0FHRTogbGluZSAxMzI6IEJsb2NrZWQgYSBmcmFtZSB3aXRo IG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdp dGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0OjgwMDAiLiBQcm90b2NvbHMsIGRvbWFpbnMsIGFu ZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09OU09MRSBNRVNTQUdFOiBsaW5lIDEzMzogQmxvY2tlZCBh IGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vMTI3LjAuMC4xOjgwMDAiIGZyb20gYWNjZXNzaW5n IGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMCIuIFByb3RvY29scywg ZG9tYWlucywgYW5kIHBvcnRzIG11c3QgbWF0Y2guCitDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTM0 OiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJv bSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovL2xvY2FsaG9zdDo4MDAwIi4g UHJvdG9jb2xzLCBkb21haW5zLCBhbmQgcG9ydHMgbXVzdCBtYXRjaC4KIENPTlNPTEUgTUVTU0FH RTogbGluZSAxMzU6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAu MTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxo b3N0OjgwMDAiLiBQcm90b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09O U09MRSBNRVNTQUdFOiBsaW5lIDEzNjogQmxvY2tlZCBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRw Oi8vMTI3LjAuMC4xOjgwMDAiIGZyb20gYWNjZXNzaW5nIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0 dHA6Ly9sb2NhbGhvc3Q6ODAwMCIuIFByb3RvY29scywgZG9tYWlucywgYW5kIHBvcnRzIG11c3Qg bWF0Y2guCiBDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTM3OiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBv cmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJvbSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRo IG9yaWdpbiAiaHR0cDovL2xvY2FsaG9zdDo4MDAwIi4gUHJvdG9jb2xzLCBkb21haW5zLCBhbmQg cG9ydHMgbXVzdCBtYXRjaC4KIENPTlNPTEUgTUVTU0FHRTogbGluZSAxMzg6IEJsb2NrZWQgYSBm cmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBh IGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0OjgwMDAiLiBQcm90b2NvbHMsIGRv bWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09OU09MRSBNRVNTQUdFOiBsaW5lIDEzOTog QmxvY2tlZCBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vMTI3LjAuMC4xOjgwMDAiIGZyb20g YWNjZXNzaW5nIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMCIuIFBy b3RvY29scywgZG9tYWlucywgYW5kIHBvcnRzIG11c3QgbWF0Y2guCiBDT05TT0xFIE1FU1NBR0U6 IGxpbmUgMTQwOiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6 ODAwMCIgZnJvbSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovL2xvY2FsaG9z dDo4MDAwIi4gUHJvdG9jb2xzLCBkb21haW5zLCBhbmQgcG9ydHMgbXVzdCBtYXRjaC4KK0NPTlNP TEUgTUVTU0FHRTogbGluZSAxNDE6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDov LzEyNy4wLjAuMTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRw Oi8vbG9jYWxob3N0OjgwMDAiLiBQcm90b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1h dGNoLgogQ09OU09MRSBNRVNTQUdFOiBsaW5lIDE0MjogQmxvY2tlZCBhIGZyYW1lIHdpdGggb3Jp Z2luICJodHRwOi8vMTI3LjAuMC4xOjgwMDAiIGZyb20gYWNjZXNzaW5nIGEgZnJhbWUgd2l0aCBv cmlnaW4gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMCIuIFByb3RvY29scywgZG9tYWlucywgYW5kIHBv cnRzIG11c3QgbWF0Y2guCiBDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTQzOiBCbG9ja2VkIGEgZnJh bWUgd2l0aCBvcmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJvbSBhY2Nlc3NpbmcgYSBm cmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovL2xvY2FsaG9zdDo4MDAwIi4gUHJvdG9jb2xzLCBkb21h aW5zLCBhbmQgcG9ydHMgbXVzdCBtYXRjaC4KIENPTlNPTEUgTUVTU0FHRTogbGluZSAxNDQ6IEJs b2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiBmcm9tIGFj Y2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0OjgwMDAiLiBQcm90 b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgpAQCAtMzE3LDYgKzMyMCw4IEBA IENPTlNPTEUgTUVTU0FHRTogbGluZSAxNzc6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAi aHR0cDovLzEyNy4wLjAuMTo4MDAwIiBmCiBDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTc4OiBCbG9j a2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJvbSBhY2Nl c3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovL2xvY2FsaG9zdDo4MDAwIi4gUHJvdG9j b2xzLCBkb21haW5zLCBhbmQgcG9ydHMgbXVzdCBtYXRjaC4KIENPTlNPTEUgTUVTU0FHRTogbGlu ZSAxNzk6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAw IiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0Ojgw MDAiLiBQcm90b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09OU09MRSBN RVNTQUdFOiBsaW5lIDE4MDogQmxvY2tlZCBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vMTI3 LjAuMC4xOjgwMDAiIGZyb20gYWNjZXNzaW5nIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly9s b2NhbGhvc3Q6ODAwMCIuIFByb3RvY29scywgZG9tYWlucywgYW5kIHBvcnRzIG11c3QgbWF0Y2gu CitDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTgxOiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4g Imh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIgZnJvbSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdp biAiaHR0cDovL2xvY2FsaG9zdDo4MDAwIi4gUHJvdG9jb2xzLCBkb21haW5zLCBhbmQgcG9ydHMg bXVzdCBtYXRjaC4KK0NPTlNPTEUgTUVTU0FHRTogbGluZSAxODI6IEJsb2NrZWQgYSBmcmFtZSB3 aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4wLjAuMTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1l IHdpdGggb3JpZ2luICJodHRwOi8vbG9jYWxob3N0OjgwMDAiLiBQcm90b2NvbHMsIGRvbWFpbnMs IGFuZCBwb3J0cyBtdXN0IG1hdGNoLgogQ09OU09MRSBNRVNTQUdFOiBsaW5lIDE4MzogQmxvY2tl ZCBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vMTI3LjAuMC4xOjgwMDAiIGZyb20gYWNjZXNz aW5nIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMCIuIFByb3RvY29s cywgZG9tYWlucywgYW5kIHBvcnRzIG11c3QgbWF0Y2guCiBDT05TT0xFIE1FU1NBR0U6IGxpbmUg MTg0OiBCbG9ja2VkIGEgZnJhbWUgd2l0aCBvcmlnaW4gImh0dHA6Ly8xMjcuMC4wLjE6ODAwMCIg ZnJvbSBhY2Nlc3NpbmcgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovL2xvY2FsaG9zdDo4MDAw Ii4gUHJvdG9jb2xzLCBkb21haW5zLCBhbmQgcG9ydHMgbXVzdCBtYXRjaC4KIENPTlNPTEUgTUVT U0FHRTogbGluZSAxODU6IEJsb2NrZWQgYSBmcmFtZSB3aXRoIG9yaWdpbiAiaHR0cDovLzEyNy4w LjAuMTo4MDAwIiBmcm9tIGFjY2Vzc2luZyBhIGZyYW1lIHdpdGggb3JpZ2luICJodHRwOi8vbG9j YWxob3N0OjgwMDAiLiBQcm90b2NvbHMsIGRvbWFpbnMsIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgpk aWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9jcm9zcy1vcmlnaW4t cmVpZmllZC13aW5kb3ctbG9jYXRpb24tc2V0dGluZy1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Nyb3NzLW9yaWdpbi1yZWlmaWVkLXdpbmRvdy1sb2NhdGlv bi1zZXR0aW5nLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5iNmJhNjhjYTYyMTAwNzVjODMzMDhh ZDY5MDEyOWRhMzNhMzE2NWQ5Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS9jcm9zcy1vcmlnaW4tcmVpZmllZC13aW5kb3ctbG9jYXRpb24tc2V0dGlu Zy1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwxMSBAQAorVGVzdHMgdGhhdCB3aW5kb3cubG9jYXRp b24gY2FuIGJlIHNldCBjcm9zcy1vcmlnaW4gZXZlbiBpZiB0aGUgd2luZG93IG9iamVjdCBpcyBy ZWlmaWVkLgorCitPbiBzdWNjZXNzLCB5b3Ugd2lsbCBzZWUgYSBzZXJpZXMgb2YgIlBBU1MiIG1l c3NhZ2VzLCBmb2xsb3dlZCBieSAiVEVTVCBDT01QTEVURSIuCisKKworUEFTUyBjcm9zc09yaWdp bldpbmRvdy5sb2NhdGlvbiA9ICdhYm91dDpibGFuaycgZGlkIG5vdCB0aHJvdyBleGNlcHRpb24u CitQQVNTIGNyb3NzT3JpZ2luV2luZG93LmxvY2F0aW9uLmhyZWYgaXMgImFib3V0OmJsYW5rIgor UEFTUyBzdWNjZXNzZnVsbHlQYXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisKZGlmZiAt LWdpdCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY3Jvc3Mtb3JpZ2luLXJlaWZp ZWQtd2luZG93LWxvY2F0aW9uLXNldHRpbmcuaHRtbCBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkvY3Jvc3Mtb3JpZ2luLXJlaWZpZWQtd2luZG93LWxvY2F0aW9uLXNldHRpbmcuaHRt bApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwLi5kYjI4MGY5OTdkZmI5ZThlOGFjMzE3NGQxZTBhNjY5YjQ5OGY0ODY5Ci0t LSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9jcm9zcy1v cmlnaW4tcmVpZmllZC13aW5kb3ctbG9jYXRpb24tc2V0dGluZy5odG1sCkBAIC0wLDAgKzEsMjUg QEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQgc3JjPSIuLi8uLi9y ZXNvdXJjZXMvanMtdGVzdC1wcmUuanMiPjwvc2NyaXB0PgorPC9oZWFkPgorPGJvZHkgb25sb2Fk PSJydW5UZXN0KCkiPgorPGlmcmFtZSBpZD0iY3Jvc3NPcmlnaW5GcmFtZSIgc3JjPSJodHRwOi8v bG9jYWxob3N0OjgwMDAvc2VjdXJpdHkvcmVzb3VyY2VzL3JlaWZ5LXdpbmRvdy5odG1sIj48L2lm cmFtZT4KKzxzY3JpcHQ+CitkZXNjcmlwdGlvbigiVGVzdHMgdGhhdCB3aW5kb3cubG9jYXRpb24g Y2FuIGJlIHNldCBjcm9zcy1vcmlnaW4gZXZlbiBpZiB0aGUgd2luZG93IG9iamVjdCBpcyByZWlm aWVkLiIpOworanNUZXN0SXNBc3luYyA9IHRydWU7CisKK2Z1bmN0aW9uIHJ1blRlc3QoKQorewor ICAgIGNyb3NzT3JpZ2luV2luZG93ID0gY3Jvc3NPcmlnaW5GcmFtZS53aW5kb3c7CisgICAgc2hv dWxkTm90VGhyb3coImNyb3NzT3JpZ2luV2luZG93LmxvY2F0aW9uID0gJ2Fib3V0OmJsYW5rJyIp OworCisgICAgc2V0VGltZW91dChmdW5jdGlvbigpIHsKKyAgICAgICAgc2hvdWxkQmVFcXVhbFRv U3RyaW5nKCJjcm9zc09yaWdpbldpbmRvdy5sb2NhdGlvbi5ocmVmIiwgImFib3V0OmJsYW5rIik7 CisgICAgICAgIGZpbmlzaEpTVGVzdCgpOworICAgIH0sIDApOworfQorPC9zY3JpcHQ+Cis8L2Jv ZHk+Cis8c2NyaXB0IHNyYz0iLi4vLi4vcmVzb3VyY2VzL2pzLXRlc3QtcG9zdC5qcyI+PC9zY3Jp cHQ+Cis8L2h0bWw+Cg==