From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.6 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY, SPF_HELO_NONE,SPF_PASS,USER_AGENT_GIT autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9FFEAC282DD for ; Wed, 8 Jan 2020 15:28:32 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 6451820673 for ; Wed, 8 Jan 2020 15:28:32 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=citrix.com header.i=@citrix.com header.b="dY/DWHhY" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728901AbgAHP2b (ORCPT ); Wed, 8 Jan 2020 10:28:31 -0500 Received: from esa5.hc3370-68.iphmx.com ([216.71.155.168]:3495 "EHLO esa5.hc3370-68.iphmx.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728375AbgAHP2T (ORCPT ); Wed, 8 Jan 2020 10:28:19 -0500 X-Greylist: delayed 426 seconds by postgrey-1.27 at vger.kernel.org; Wed, 08 Jan 2020 10:28:18 EST DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1578497299; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version; bh=ZJuSUJ02rylweO0QTHeZK87XYdE2eEfNMSYEfZ4ISFU=; b=dY/DWHhYkkxgjmkULTxYvRMfaZA3Jglr4+ai0bo1e0ndy2jdRPGmS5bg iOeukYOWlrd6a4uWoBMP4u2in+AZ5ypO9e7xX5WMpXE9E81o0KOk9nU79 rVHRlIrjMpTOMRsJ8/MqQiEqC0kPcz23sPGnEuwMqNpWS0eCFFfmDBxA/ I=; Authentication-Results: esa5.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none; spf=None smtp.pra=sergey.dyasli@citrix.com; spf=Pass smtp.mailfrom=sergey.dyasli@citrix.com; spf=None smtp.helo=postmaster@mail.citrix.com Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of sergey.dyasli@citrix.com) identity=pra; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="sergey.dyasli@citrix.com"; x-conformance=sidf_compatible Received-SPF: Pass (esa5.hc3370-68.iphmx.com: domain of sergey.dyasli@citrix.com designates 162.221.158.21 as permitted sender) identity=mailfrom; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="sergey.dyasli@citrix.com"; x-conformance=sidf_compatible; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:209.167.231.154 ip4:178.63.86.133 ip4:195.66.111.40/30 ip4:85.115.9.32/28 ip4:199.102.83.4 ip4:192.28.146.160 ip4:192.28.146.107 ip4:216.52.6.88 ip4:216.52.6.188 ip4:162.221.158.21 ip4:162.221.156.83 ip4:168.245.78.127 ~all" Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of postmaster@mail.citrix.com) identity=helo; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="postmaster@mail.citrix.com"; x-conformance=sidf_compatible IronPort-SDR: DX+ggOVcUV+qjAM+GH2sUSi46yljxph9UiDZ5OvdtBvqC5kMO1PziVlbeWDiErFsikLJupbr6j e1GJp5zCy/6F3zEoqeeNBUnp1jCorCX2Lv0Aiur8r6exMyKmwDqJuw2jGva+/nJJXFvTQ2Ugl7 MsXEecRWjr/VWKfr79oqpWhGuobCwHKJmBbBKn4tqnGTrqWdR7mqh2Qt3c/YNqtAyzHNee9e/R zXaizezM7fqVpwm8zpKNd8k535daqotbAfc1B7wEgWYPCbpvlXlweSc7xS8pQwblpvCKKTD4np 1yI= X-SBRS: 2.7 X-MesageID: 11004137 X-Ironport-Server: esa5.hc3370-68.iphmx.com X-Remote-IP: 162.221.158.21 X-Policy: $RELAYED X-IronPort-AV: E=Sophos;i="5.69,410,1571716800"; d="scan'208";a="11004137" From: Sergey Dyasli To: , , , CC: Andrey Ryabinin , Alexander Potapenko , Dmitry Vyukov , Boris Ostrovsky , Juergen Gross , "Stefano Stabellini" , George Dunlap , Ross Lagerwall , Andrew Morton , Sergey Dyasli Subject: [PATCH v1 2/4] x86/xen: add basic KASAN support for PV kernel Date: Wed, 8 Jan 2020 15:20:58 +0000 Message-ID: <20200108152100.7630-3-sergey.dyasli@citrix.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20200108152100.7630-1-sergey.dyasli@citrix.com> References: <20200108152100.7630-1-sergey.dyasli@citrix.com> MIME-Version: 1.0 Content-Type: text/plain Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This enables to use Outline instrumentation for Xen PV kernels. KASAN_INLINE and KASAN_VMALLOC options currently lead to boot crashes and hence disabled. Signed-off-by: Sergey Dyasli --- RFC --> v1: - New functions with declarations in xen/xen-ops.h - Fixed the issue with free_kernel_image_pages() with the help of xen_pv_kasan_unpin_pgd() --- arch/x86/mm/kasan_init_64.c | 12 ++++++++++++ arch/x86/xen/Makefile | 7 +++++++ arch/x86/xen/enlighten_pv.c | 3 +++ arch/x86/xen/mmu_pv.c | 39 +++++++++++++++++++++++++++++++++++++ drivers/xen/Makefile | 2 ++ include/xen/xen-ops.h | 4 ++++ kernel/Makefile | 2 ++ lib/Kconfig.kasan | 3 ++- 8 files changed, 71 insertions(+), 1 deletion(-) diff --git a/arch/x86/mm/kasan_init_64.c b/arch/x86/mm/kasan_init_64.c index cf5bc37c90ac..902a6a152d33 100644 --- a/arch/x86/mm/kasan_init_64.c +++ b/arch/x86/mm/kasan_init_64.c @@ -13,6 +13,9 @@ #include #include +#include +#include + #include #include #include @@ -332,6 +335,11 @@ void __init kasan_early_init(void) for (i = 0; pgtable_l5_enabled() && i < PTRS_PER_P4D; i++) kasan_early_shadow_p4d[i] = __p4d(p4d_val); + if (xen_pv_domain()) { + pgd_t *pv_top_pgt = xen_pv_kasan_early_init(); + kasan_map_early_shadow(pv_top_pgt); + } + kasan_map_early_shadow(early_top_pgt); kasan_map_early_shadow(init_top_pgt); } @@ -369,6 +377,8 @@ void __init kasan_init(void) __pgd(__pa(tmp_p4d_table) | _KERNPG_TABLE)); } + xen_pv_kasan_pin_pgd(early_top_pgt); + load_cr3(early_top_pgt); __flush_tlb_all(); @@ -433,6 +443,8 @@ void __init kasan_init(void) load_cr3(init_top_pgt); __flush_tlb_all(); + xen_pv_kasan_unpin_pgd(early_top_pgt); + /* * kasan_early_shadow_page has been used as early shadow memory, thus * it may contain some garbage. Now we can clear and write protect it, diff --git a/arch/x86/xen/Makefile b/arch/x86/xen/Makefile index 084de77a109e..102fad0b0bca 100644 --- a/arch/x86/xen/Makefile +++ b/arch/x86/xen/Makefile @@ -1,3 +1,10 @@ +KASAN_SANITIZE_enlighten_pv.o := n +KASAN_SANITIZE_enlighten.o := n +KASAN_SANITIZE_irq.o := n +KASAN_SANITIZE_mmu_pv.o := n +KASAN_SANITIZE_p2m.o := n +KASAN_SANITIZE_multicalls.o := n + # SPDX-License-Identifier: GPL-2.0 OBJECT_FILES_NON_STANDARD_xen-asm_$(BITS).o := y diff --git a/arch/x86/xen/enlighten_pv.c b/arch/x86/xen/enlighten_pv.c index ae4a41ca19f6..27de55699f24 100644 --- a/arch/x86/xen/enlighten_pv.c +++ b/arch/x86/xen/enlighten_pv.c @@ -72,6 +72,7 @@ #include #include #include +#include #ifdef CONFIG_ACPI #include @@ -1231,6 +1232,8 @@ asmlinkage __visible void __init xen_start_kernel(void) /* Get mfn list */ xen_build_dynamic_phys_to_machine(); + kasan_early_init(); + /* * Set up kernel GDT and segment registers, mainly so that * -fstack-protector code can be executed. diff --git a/arch/x86/xen/mmu_pv.c b/arch/x86/xen/mmu_pv.c index c8dbee62ec2a..cf6ff214d9ea 100644 --- a/arch/x86/xen/mmu_pv.c +++ b/arch/x86/xen/mmu_pv.c @@ -1771,6 +1771,36 @@ static void __init set_page_prot(void *addr, pgprot_t prot) { return set_page_prot_flags(addr, prot, UVMF_NONE); } + +pgd_t * __init xen_pv_kasan_early_init(void) +{ + /* PV page tables must be read-only */ + set_page_prot(kasan_early_shadow_pud, PAGE_KERNEL_RO); + set_page_prot(kasan_early_shadow_pmd, PAGE_KERNEL_RO); + set_page_prot(kasan_early_shadow_pte, PAGE_KERNEL_RO); + + /* Return a pointer to the initial PV page tables */ + return (pgd_t *)xen_start_info->pt_base; +} + +void __init xen_pv_kasan_pin_pgd(pgd_t *pgd) +{ + if (!xen_pv_domain()) + return; + + set_page_prot(pgd, PAGE_KERNEL_RO); + pin_pagetable_pfn(MMUEXT_PIN_L4_TABLE, PFN_DOWN(__pa_symbol(pgd))); +} + +void __init xen_pv_kasan_unpin_pgd(pgd_t *pgd) +{ + if (!xen_pv_domain()) + return; + + pin_pagetable_pfn(MMUEXT_UNPIN_TABLE, PFN_DOWN(__pa_symbol(pgd))); + set_page_prot(pgd, PAGE_KERNEL); +} + #ifdef CONFIG_X86_32 static void __init xen_map_identity_early(pmd_t *pmd, unsigned long max_pfn) { @@ -1943,6 +1973,15 @@ void __init xen_setup_kernel_pagetable(pgd_t *pgd, unsigned long max_pfn) if (i && i < pgd_index(__START_KERNEL_map)) init_top_pgt[i] = ((pgd_t *)xen_start_info->pt_base)[i]; +#ifdef CONFIG_KASAN + /* + * Copy KASAN mappings + * ffffec0000000000 - fffffbffffffffff (=44 bits) kasan shadow memory (16TB) + */ + for (i = 0xec0 >> 3; i < 0xfc0 >> 3; i++) + init_top_pgt[i] = ((pgd_t *)xen_start_info->pt_base)[i]; +#endif + /* Make pagetable pieces RO */ set_page_prot(init_top_pgt, PAGE_KERNEL_RO); set_page_prot(level3_ident_pgt, PAGE_KERNEL_RO); diff --git a/drivers/xen/Makefile b/drivers/xen/Makefile index 0c4efa6fe450..1e9e1e41c0a8 100644 --- a/drivers/xen/Makefile +++ b/drivers/xen/Makefile @@ -1,4 +1,6 @@ # SPDX-License-Identifier: GPL-2.0 +KASAN_SANITIZE_features.o := n + obj-$(CONFIG_HOTPLUG_CPU) += cpu_hotplug.o obj-y += grant-table.o features.o balloon.o manage.o preempt.o time.o obj-y += mem-reservation.o diff --git a/include/xen/xen-ops.h b/include/xen/xen-ops.h index d89969aa9942..91d66520f0a3 100644 --- a/include/xen/xen-ops.h +++ b/include/xen/xen-ops.h @@ -241,4 +241,8 @@ static inline void xen_preemptible_hcall_end(void) #endif /* CONFIG_PREEMPT */ +pgd_t *xen_pv_kasan_early_init(void); +void xen_pv_kasan_pin_pgd(pgd_t *pgd); +void xen_pv_kasan_unpin_pgd(pgd_t *pgd); + #endif /* INCLUDE_XEN_OPS_H */ diff --git a/kernel/Makefile b/kernel/Makefile index f2cc0d118a0b..1da6fd93c00c 100644 --- a/kernel/Makefile +++ b/kernel/Makefile @@ -12,6 +12,8 @@ obj-y = fork.o exec_domain.o panic.o \ notifier.o ksysfs.o cred.o reboot.o \ async.o range.o smpboot.o ucount.o +KASAN_SANITIZE_cpu.o := n + obj-$(CONFIG_MODULES) += kmod.o obj-$(CONFIG_MULTIUSER) += groups.o diff --git a/lib/Kconfig.kasan b/lib/Kconfig.kasan index 81f5464ea9e1..429a638625ea 100644 --- a/lib/Kconfig.kasan +++ b/lib/Kconfig.kasan @@ -98,6 +98,7 @@ config KASAN_OUTLINE config KASAN_INLINE bool "Inline instrumentation" + depends on !XEN_PV help Compiler directly inserts code checking shadow memory before memory accesses. This is faster than outline (in some workloads @@ -147,7 +148,7 @@ config KASAN_SW_TAGS_IDENTIFY config KASAN_VMALLOC bool "Back mappings in vmalloc space with real shadow memory" - depends on KASAN && HAVE_ARCH_KASAN_VMALLOC + depends on KASAN && HAVE_ARCH_KASAN_VMALLOC && !XEN_PV help By default, the shadow region for vmalloc space is the read-only zero page. This means that KASAN cannot detect errors involving -- 2.17.1 From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.6 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY, SPF_HELO_NONE,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 129DDC282DD for ; Wed, 8 Jan 2020 15:21:36 +0000 (UTC) Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id CE64720673 for ; Wed, 8 Jan 2020 15:21:35 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=citrix.com header.i=@citrix.com header.b="a+kQydgx" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org CE64720673 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=citrix.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=xen-devel-bounces@lists.xenproject.org Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1ipD9B-0003oK-1I; Wed, 08 Jan 2020 15:21:25 +0000 Received: from all-amaz-eas1.inumbo.com ([34.197.232.57] helo=us1-amaz-eas2.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1ipD9A-0003nx-8V for xen-devel@lists.xen.org; Wed, 08 Jan 2020 15:21:24 +0000 X-Inumbo-ID: 8227be69-322a-11ea-b82c-12813bfff9fa Received: from esa5.hc3370-68.iphmx.com (unknown [216.71.155.168]) by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS id 8227be69-322a-11ea-b82c-12813bfff9fa; Wed, 08 Jan 2020 15:21:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1578496874; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version; bh=ZJuSUJ02rylweO0QTHeZK87XYdE2eEfNMSYEfZ4ISFU=; b=a+kQydgxFvlyDSw0YNezEjXH3qmAA0fqpWNlXazO+Ar21k+MvXGyGXRT IqDF2FFg5oyDbPabMLBNxJKVz6PfK0wUgj9J7nFXOB7TCxQxOeYfqgBlp tQwCdg8INza5hzv7VABI7AJz17uTZh7iNSMWd3Akfir9pZU9Sx5YkPHDD A=; Authentication-Results: esa5.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none; spf=None smtp.pra=sergey.dyasli@citrix.com; spf=Pass smtp.mailfrom=sergey.dyasli@citrix.com; spf=None smtp.helo=postmaster@mail.citrix.com Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of sergey.dyasli@citrix.com) identity=pra; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="sergey.dyasli@citrix.com"; x-conformance=sidf_compatible Received-SPF: Pass (esa5.hc3370-68.iphmx.com: domain of sergey.dyasli@citrix.com designates 162.221.158.21 as permitted sender) identity=mailfrom; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="sergey.dyasli@citrix.com"; x-conformance=sidf_compatible; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:209.167.231.154 ip4:178.63.86.133 ip4:195.66.111.40/30 ip4:85.115.9.32/28 ip4:199.102.83.4 ip4:192.28.146.160 ip4:192.28.146.107 ip4:216.52.6.88 ip4:216.52.6.188 ip4:162.221.158.21 ip4:162.221.156.83 ip4:168.245.78.127 ~all" Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of postmaster@mail.citrix.com) identity=helo; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="sergey.dyasli@citrix.com"; x-sender="postmaster@mail.citrix.com"; x-conformance=sidf_compatible IronPort-SDR: DX+ggOVcUV+qjAM+GH2sUSi46yljxph9UiDZ5OvdtBvqC5kMO1PziVlbeWDiErFsikLJupbr6j e1GJp5zCy/6F3zEoqeeNBUnp1jCorCX2Lv0Aiur8r6exMyKmwDqJuw2jGva+/nJJXFvTQ2Ugl7 MsXEecRWjr/VWKfr79oqpWhGuobCwHKJmBbBKn4tqnGTrqWdR7mqh2Qt3c/YNqtAyzHNee9e/R zXaizezM7fqVpwm8zpKNd8k535daqotbAfc1B7wEgWYPCbpvlXlweSc7xS8pQwblpvCKKTD4np 1yI= X-SBRS: 2.7 X-MesageID: 11004137 X-Ironport-Server: esa5.hc3370-68.iphmx.com X-Remote-IP: 162.221.158.21 X-Policy: $RELAYED X-IronPort-AV: E=Sophos;i="5.69,410,1571716800"; d="scan'208";a="11004137" From: Sergey Dyasli To: , , , Date: Wed, 8 Jan 2020 15:20:58 +0000 Message-ID: <20200108152100.7630-3-sergey.dyasli@citrix.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20200108152100.7630-1-sergey.dyasli@citrix.com> References: <20200108152100.7630-1-sergey.dyasli@citrix.com> MIME-Version: 1.0 Subject: [Xen-devel] [PATCH v1 2/4] x86/xen: add basic KASAN support for PV kernel X-BeenThere: xen-devel@lists.xenproject.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Cc: Juergen Gross , Sergey Dyasli , Stefano Stabellini , George Dunlap , Ross Lagerwall , Alexander Potapenko , Andrey Ryabinin , Boris Ostrovsky , Andrew Morton , Dmitry Vyukov Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" VGhpcyBlbmFibGVzIHRvIHVzZSBPdXRsaW5lIGluc3RydW1lbnRhdGlvbiBmb3IgWGVuIFBWIGtl cm5lbHMuCgpLQVNBTl9JTkxJTkUgYW5kIEtBU0FOX1ZNQUxMT0Mgb3B0aW9ucyBjdXJyZW50bHkg bGVhZCB0byBib290IGNyYXNoZXMKYW5kIGhlbmNlIGRpc2FibGVkLgoKU2lnbmVkLW9mZi1ieTog U2VyZ2V5IER5YXNsaSA8c2VyZ2V5LmR5YXNsaUBjaXRyaXguY29tPgotLS0KUkZDIC0tPiB2MToK LSBOZXcgZnVuY3Rpb25zIHdpdGggZGVjbGFyYXRpb25zIGluIHhlbi94ZW4tb3BzLmgKLSBGaXhl ZCB0aGUgaXNzdWUgd2l0aCBmcmVlX2tlcm5lbF9pbWFnZV9wYWdlcygpIHdpdGggdGhlIGhlbHAg b2YKICB4ZW5fcHZfa2FzYW5fdW5waW5fcGdkKCkKLS0tCiBhcmNoL3g4Ni9tbS9rYXNhbl9pbml0 XzY0LmMgfCAxMiArKysrKysrKysrKysKIGFyY2gveDg2L3hlbi9NYWtlZmlsZSAgICAgICB8ICA3 ICsrKysrKysKIGFyY2gveDg2L3hlbi9lbmxpZ2h0ZW5fcHYuYyB8ICAzICsrKwogYXJjaC94ODYv eGVuL21tdV9wdi5jICAgICAgIHwgMzkgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKwogZHJpdmVycy94ZW4vTWFrZWZpbGUgICAgICAgIHwgIDIgKysKIGluY2x1ZGUveGVuL3hl bi1vcHMuaCAgICAgICB8ICA0ICsrKysKIGtlcm5lbC9NYWtlZmlsZSAgICAgICAgICAgICB8ICAy ICsrCiBsaWIvS2NvbmZpZy5rYXNhbiAgICAgICAgICAgfCAgMyArKy0KIDggZmlsZXMgY2hhbmdl ZCwgNzEgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQoKZGlmZiAtLWdpdCBhL2FyY2gveDg2 L21tL2thc2FuX2luaXRfNjQuYyBiL2FyY2gveDg2L21tL2thc2FuX2luaXRfNjQuYwppbmRleCBj ZjViYzM3YzkwYWMuLjkwMmE2YTE1MmQzMyAxMDA2NDQKLS0tIGEvYXJjaC94ODYvbW0va2FzYW5f aW5pdF82NC5jCisrKyBiL2FyY2gveDg2L21tL2thc2FuX2luaXRfNjQuYwpAQCAtMTMsNiArMTMs OSBAQAogI2luY2x1ZGUgPGxpbnV4L3NjaGVkL3Rhc2suaD4KICNpbmNsdWRlIDxsaW51eC92bWFs bG9jLmg+CiAKKyNpbmNsdWRlIDx4ZW4veGVuLmg+CisjaW5jbHVkZSA8eGVuL3hlbi1vcHMuaD4K KwogI2luY2x1ZGUgPGFzbS9lODIwL3R5cGVzLmg+CiAjaW5jbHVkZSA8YXNtL3BnYWxsb2MuaD4K ICNpbmNsdWRlIDxhc20vdGxiZmx1c2guaD4KQEAgLTMzMiw2ICszMzUsMTEgQEAgdm9pZCBfX2lu aXQga2FzYW5fZWFybHlfaW5pdCh2b2lkKQogCWZvciAoaSA9IDA7IHBndGFibGVfbDVfZW5hYmxl ZCgpICYmIGkgPCBQVFJTX1BFUl9QNEQ7IGkrKykKIAkJa2FzYW5fZWFybHlfc2hhZG93X3A0ZFtp XSA9IF9fcDRkKHA0ZF92YWwpOwogCisJaWYgKHhlbl9wdl9kb21haW4oKSkgeworCQlwZ2RfdCAq cHZfdG9wX3BndCA9IHhlbl9wdl9rYXNhbl9lYXJseV9pbml0KCk7CisJCWthc2FuX21hcF9lYXJs eV9zaGFkb3cocHZfdG9wX3BndCk7CisJfQorCiAJa2FzYW5fbWFwX2Vhcmx5X3NoYWRvdyhlYXJs eV90b3BfcGd0KTsKIAlrYXNhbl9tYXBfZWFybHlfc2hhZG93KGluaXRfdG9wX3BndCk7CiB9CkBA IC0zNjksNiArMzc3LDggQEAgdm9pZCBfX2luaXQga2FzYW5faW5pdCh2b2lkKQogCQkJCV9fcGdk KF9fcGEodG1wX3A0ZF90YWJsZSkgfCBfS0VSTlBHX1RBQkxFKSk7CiAJfQogCisJeGVuX3B2X2th c2FuX3Bpbl9wZ2QoZWFybHlfdG9wX3BndCk7CisKIAlsb2FkX2NyMyhlYXJseV90b3BfcGd0KTsK IAlfX2ZsdXNoX3RsYl9hbGwoKTsKIApAQCAtNDMzLDYgKzQ0Myw4IEBAIHZvaWQgX19pbml0IGth c2FuX2luaXQodm9pZCkKIAlsb2FkX2NyMyhpbml0X3RvcF9wZ3QpOwogCV9fZmx1c2hfdGxiX2Fs bCgpOwogCisJeGVuX3B2X2thc2FuX3VucGluX3BnZChlYXJseV90b3BfcGd0KTsKKwogCS8qCiAJ ICoga2FzYW5fZWFybHlfc2hhZG93X3BhZ2UgaGFzIGJlZW4gdXNlZCBhcyBlYXJseSBzaGFkb3cg bWVtb3J5LCB0aHVzCiAJICogaXQgbWF5IGNvbnRhaW4gc29tZSBnYXJiYWdlLiBOb3cgd2UgY2Fu IGNsZWFyIGFuZCB3cml0ZSBwcm90ZWN0IGl0LApkaWZmIC0tZ2l0IGEvYXJjaC94ODYveGVuL01h a2VmaWxlIGIvYXJjaC94ODYveGVuL01ha2VmaWxlCmluZGV4IDA4NGRlNzdhMTA5ZS4uMTAyZmFk MGIwYmNhIDEwMDY0NAotLS0gYS9hcmNoL3g4Ni94ZW4vTWFrZWZpbGUKKysrIGIvYXJjaC94ODYv eGVuL01ha2VmaWxlCkBAIC0xLDMgKzEsMTAgQEAKK0tBU0FOX1NBTklUSVpFX2VubGlnaHRlbl9w di5vIDo9IG4KK0tBU0FOX1NBTklUSVpFX2VubGlnaHRlbi5vIDo9IG4KK0tBU0FOX1NBTklUSVpF X2lycS5vIDo9IG4KK0tBU0FOX1NBTklUSVpFX21tdV9wdi5vIDo9IG4KK0tBU0FOX1NBTklUSVpF X3AybS5vIDo9IG4KK0tBU0FOX1NBTklUSVpFX211bHRpY2FsbHMubyA6PSBuCisKICMgU1BEWC1M aWNlbnNlLUlkZW50aWZpZXI6IEdQTC0yLjAKIE9CSkVDVF9GSUxFU19OT05fU1RBTkRBUkRfeGVu LWFzbV8kKEJJVFMpLm8gOj0geQogCmRpZmYgLS1naXQgYS9hcmNoL3g4Ni94ZW4vZW5saWdodGVu X3B2LmMgYi9hcmNoL3g4Ni94ZW4vZW5saWdodGVuX3B2LmMKaW5kZXggYWU0YTQxY2ExOWY2Li4y N2RlNTU2OTlmMjQgMTAwNjQ0Ci0tLSBhL2FyY2gveDg2L3hlbi9lbmxpZ2h0ZW5fcHYuYworKysg Yi9hcmNoL3g4Ni94ZW4vZW5saWdodGVuX3B2LmMKQEAgLTcyLDYgKzcyLDcgQEAKICNpbmNsdWRl IDxhc20vbXdhaXQuaD4KICNpbmNsdWRlIDxhc20vcGNpX3g4Ni5oPgogI2luY2x1ZGUgPGFzbS9j cHUuaD4KKyNpbmNsdWRlIDxhc20va2FzYW4uaD4KIAogI2lmZGVmIENPTkZJR19BQ1BJCiAjaW5j bHVkZSA8bGludXgvYWNwaS5oPgpAQCAtMTIzMSw2ICsxMjMyLDggQEAgYXNtbGlua2FnZSBfX3Zp c2libGUgdm9pZCBfX2luaXQgeGVuX3N0YXJ0X2tlcm5lbCh2b2lkKQogCS8qIEdldCBtZm4gbGlz dCAqLwogCXhlbl9idWlsZF9keW5hbWljX3BoeXNfdG9fbWFjaGluZSgpOwogCisJa2FzYW5fZWFy bHlfaW5pdCgpOworCiAJLyoKIAkgKiBTZXQgdXAga2VybmVsIEdEVCBhbmQgc2VnbWVudCByZWdp c3RlcnMsIG1haW5seSBzbyB0aGF0CiAJICogLWZzdGFjay1wcm90ZWN0b3IgY29kZSBjYW4gYmUg ZXhlY3V0ZWQuCmRpZmYgLS1naXQgYS9hcmNoL3g4Ni94ZW4vbW11X3B2LmMgYi9hcmNoL3g4Ni94 ZW4vbW11X3B2LmMKaW5kZXggYzhkYmVlNjJlYzJhLi5jZjZmZjIxNGQ5ZWEgMTAwNjQ0Ci0tLSBh L2FyY2gveDg2L3hlbi9tbXVfcHYuYworKysgYi9hcmNoL3g4Ni94ZW4vbW11X3B2LmMKQEAgLTE3 NzEsNiArMTc3MSwzNiBAQCBzdGF0aWMgdm9pZCBfX2luaXQgc2V0X3BhZ2VfcHJvdCh2b2lkICph ZGRyLCBwZ3Byb3RfdCBwcm90KQogewogCXJldHVybiBzZXRfcGFnZV9wcm90X2ZsYWdzKGFkZHIs IHByb3QsIFVWTUZfTk9ORSk7CiB9CisKK3BnZF90ICogX19pbml0IHhlbl9wdl9rYXNhbl9lYXJs eV9pbml0KHZvaWQpCit7CisJLyogUFYgcGFnZSB0YWJsZXMgbXVzdCBiZSByZWFkLW9ubHkgKi8K KwlzZXRfcGFnZV9wcm90KGthc2FuX2Vhcmx5X3NoYWRvd19wdWQsIFBBR0VfS0VSTkVMX1JPKTsK KwlzZXRfcGFnZV9wcm90KGthc2FuX2Vhcmx5X3NoYWRvd19wbWQsIFBBR0VfS0VSTkVMX1JPKTsK KwlzZXRfcGFnZV9wcm90KGthc2FuX2Vhcmx5X3NoYWRvd19wdGUsIFBBR0VfS0VSTkVMX1JPKTsK KworCS8qIFJldHVybiBhIHBvaW50ZXIgdG8gdGhlIGluaXRpYWwgUFYgcGFnZSB0YWJsZXMgKi8K KwlyZXR1cm4gKHBnZF90ICopeGVuX3N0YXJ0X2luZm8tPnB0X2Jhc2U7Cit9CisKK3ZvaWQgX19p bml0IHhlbl9wdl9rYXNhbl9waW5fcGdkKHBnZF90ICpwZ2QpCit7CisJaWYgKCF4ZW5fcHZfZG9t YWluKCkpCisJCXJldHVybjsKKworCXNldF9wYWdlX3Byb3QocGdkLCBQQUdFX0tFUk5FTF9STyk7 CisJcGluX3BhZ2V0YWJsZV9wZm4oTU1VRVhUX1BJTl9MNF9UQUJMRSwgUEZOX0RPV04oX19wYV9z eW1ib2wocGdkKSkpOworfQorCit2b2lkIF9faW5pdCB4ZW5fcHZfa2FzYW5fdW5waW5fcGdkKHBn ZF90ICpwZ2QpCit7CisJaWYgKCF4ZW5fcHZfZG9tYWluKCkpCisJCXJldHVybjsKKworCXBpbl9w YWdldGFibGVfcGZuKE1NVUVYVF9VTlBJTl9UQUJMRSwgUEZOX0RPV04oX19wYV9zeW1ib2wocGdk KSkpOworCXNldF9wYWdlX3Byb3QocGdkLCBQQUdFX0tFUk5FTCk7Cit9CisKICNpZmRlZiBDT05G SUdfWDg2XzMyCiBzdGF0aWMgdm9pZCBfX2luaXQgeGVuX21hcF9pZGVudGl0eV9lYXJseShwbWRf dCAqcG1kLCB1bnNpZ25lZCBsb25nIG1heF9wZm4pCiB7CkBAIC0xOTQzLDYgKzE5NzMsMTUgQEAg dm9pZCBfX2luaXQgeGVuX3NldHVwX2tlcm5lbF9wYWdldGFibGUocGdkX3QgKnBnZCwgdW5zaWdu ZWQgbG9uZyBtYXhfcGZuKQogCWlmIChpICYmIGkgPCBwZ2RfaW5kZXgoX19TVEFSVF9LRVJORUxf bWFwKSkKIAkJaW5pdF90b3BfcGd0W2ldID0gKChwZ2RfdCAqKXhlbl9zdGFydF9pbmZvLT5wdF9i YXNlKVtpXTsKIAorI2lmZGVmIENPTkZJR19LQVNBTgorCS8qCisJICogQ29weSBLQVNBTiBtYXBw aW5ncworCSAqIGZmZmZlYzAwMDAwMDAwMDAgLSBmZmZmZmJmZmZmZmZmZmZmICg9NDQgYml0cykg a2FzYW4gc2hhZG93IG1lbW9yeSAoMTZUQikKKwkgKi8KKwlmb3IgKGkgPSAweGVjMCA+PiAzOyBp IDwgMHhmYzAgPj4gMzsgaSsrKQorCQlpbml0X3RvcF9wZ3RbaV0gPSAoKHBnZF90ICopeGVuX3N0 YXJ0X2luZm8tPnB0X2Jhc2UpW2ldOworI2VuZGlmCisKIAkvKiBNYWtlIHBhZ2V0YWJsZSBwaWVj ZXMgUk8gKi8KIAlzZXRfcGFnZV9wcm90KGluaXRfdG9wX3BndCwgUEFHRV9LRVJORUxfUk8pOwog CXNldF9wYWdlX3Byb3QobGV2ZWwzX2lkZW50X3BndCwgUEFHRV9LRVJORUxfUk8pOwpkaWZmIC0t Z2l0IGEvZHJpdmVycy94ZW4vTWFrZWZpbGUgYi9kcml2ZXJzL3hlbi9NYWtlZmlsZQppbmRleCAw YzRlZmE2ZmU0NTAuLjFlOWUxZTQxYzBhOCAxMDA2NDQKLS0tIGEvZHJpdmVycy94ZW4vTWFrZWZp bGUKKysrIGIvZHJpdmVycy94ZW4vTWFrZWZpbGUKQEAgLTEsNCArMSw2IEBACiAjIFNQRFgtTGlj ZW5zZS1JZGVudGlmaWVyOiBHUEwtMi4wCitLQVNBTl9TQU5JVElaRV9mZWF0dXJlcy5vIDo9IG4K Kwogb2JqLSQoQ09ORklHX0hPVFBMVUdfQ1BVKQkJKz0gY3B1X2hvdHBsdWcubwogb2JqLXkJKz0g Z3JhbnQtdGFibGUubyBmZWF0dXJlcy5vIGJhbGxvb24ubyBtYW5hZ2UubyBwcmVlbXB0Lm8gdGlt ZS5vCiBvYmoteQkrPSBtZW0tcmVzZXJ2YXRpb24ubwpkaWZmIC0tZ2l0IGEvaW5jbHVkZS94ZW4v eGVuLW9wcy5oIGIvaW5jbHVkZS94ZW4veGVuLW9wcy5oCmluZGV4IGQ4OTk2OWFhOTk0Mi4uOTFk NjY1MjBmMGEzIDEwMDY0NAotLS0gYS9pbmNsdWRlL3hlbi94ZW4tb3BzLmgKKysrIGIvaW5jbHVk ZS94ZW4veGVuLW9wcy5oCkBAIC0yNDEsNCArMjQxLDggQEAgc3RhdGljIGlubGluZSB2b2lkIHhl bl9wcmVlbXB0aWJsZV9oY2FsbF9lbmQodm9pZCkKIAogI2VuZGlmIC8qIENPTkZJR19QUkVFTVBU ICovCiAKK3BnZF90ICp4ZW5fcHZfa2FzYW5fZWFybHlfaW5pdCh2b2lkKTsKK3ZvaWQgeGVuX3B2 X2thc2FuX3Bpbl9wZ2QocGdkX3QgKnBnZCk7Cit2b2lkIHhlbl9wdl9rYXNhbl91bnBpbl9wZ2Qo cGdkX3QgKnBnZCk7CisKICNlbmRpZiAvKiBJTkNMVURFX1hFTl9PUFNfSCAqLwpkaWZmIC0tZ2l0 IGEva2VybmVsL01ha2VmaWxlIGIva2VybmVsL01ha2VmaWxlCmluZGV4IGYyY2MwZDExOGEwYi4u MWRhNmZkOTNjMDBjIDEwMDY0NAotLS0gYS9rZXJuZWwvTWFrZWZpbGUKKysrIGIva2VybmVsL01h a2VmaWxlCkBAIC0xMiw2ICsxMiw4IEBAIG9iai15ICAgICA9IGZvcmsubyBleGVjX2RvbWFpbi5v IHBhbmljLm8gXAogCSAgICBub3RpZmllci5vIGtzeXNmcy5vIGNyZWQubyByZWJvb3QubyBcCiAJ ICAgIGFzeW5jLm8gcmFuZ2UubyBzbXBib290Lm8gdWNvdW50Lm8KIAorS0FTQU5fU0FOSVRJWkVf Y3B1Lm8gOj0gbgorCiBvYmotJChDT05GSUdfTU9EVUxFUykgKz0ga21vZC5vCiBvYmotJChDT05G SUdfTVVMVElVU0VSKSArPSBncm91cHMubwogCmRpZmYgLS1naXQgYS9saWIvS2NvbmZpZy5rYXNh biBiL2xpYi9LY29uZmlnLmthc2FuCmluZGV4IDgxZjU0NjRlYTllMS4uNDI5YTYzODYyNWVhIDEw MDY0NAotLS0gYS9saWIvS2NvbmZpZy5rYXNhbgorKysgYi9saWIvS2NvbmZpZy5rYXNhbgpAQCAt OTgsNiArOTgsNyBAQCBjb25maWcgS0FTQU5fT1VUTElORQogCiBjb25maWcgS0FTQU5fSU5MSU5F CiAJYm9vbCAiSW5saW5lIGluc3RydW1lbnRhdGlvbiIKKwlkZXBlbmRzIG9uICFYRU5fUFYKIAlo ZWxwCiAJICBDb21waWxlciBkaXJlY3RseSBpbnNlcnRzIGNvZGUgY2hlY2tpbmcgc2hhZG93IG1l bW9yeSBiZWZvcmUKIAkgIG1lbW9yeSBhY2Nlc3Nlcy4gVGhpcyBpcyBmYXN0ZXIgdGhhbiBvdXRs aW5lIChpbiBzb21lIHdvcmtsb2FkcwpAQCAtMTQ3LDcgKzE0OCw3IEBAIGNvbmZpZyBLQVNBTl9T V19UQUdTX0lERU5USUZZCiAKIGNvbmZpZyBLQVNBTl9WTUFMTE9DCiAJYm9vbCAiQmFjayBtYXBw aW5ncyBpbiB2bWFsbG9jIHNwYWNlIHdpdGggcmVhbCBzaGFkb3cgbWVtb3J5IgotCWRlcGVuZHMg b24gS0FTQU4gJiYgSEFWRV9BUkNIX0tBU0FOX1ZNQUxMT0MKKwlkZXBlbmRzIG9uIEtBU0FOICYm IEhBVkVfQVJDSF9LQVNBTl9WTUFMTE9DICYmICFYRU5fUFYKIAloZWxwCiAJICBCeSBkZWZhdWx0 LCB0aGUgc2hhZG93IHJlZ2lvbiBmb3Igdm1hbGxvYyBzcGFjZSBpcyB0aGUgcmVhZC1vbmx5CiAJ ICB6ZXJvIHBhZ2UuIFRoaXMgbWVhbnMgdGhhdCBLQVNBTiBjYW5ub3QgZGV0ZWN0IGVycm9ycyBp bnZvbHZpbmcKLS0gCjIuMTcuMQoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fClhlbi1kZXZlbCBtYWlsaW5nIGxpc3QKWGVuLWRldmVsQGxpc3RzLnhlbnBy b2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1hbi9saXN0aW5mby94 ZW4tZGV2ZWw=