From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8E434C35240 for ; Fri, 31 Jan 2020 18:25:14 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 7112D206F0 for ; Fri, 31 Jan 2020 18:25:14 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726104AbgAaSZO (ORCPT ); Fri, 31 Jan 2020 13:25:14 -0500 Received: from foss.arm.com ([217.140.110.172]:38206 "EHLO foss.arm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725268AbgAaSZN (ORCPT ); Fri, 31 Jan 2020 13:25:13 -0500 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id A0E97FEC; Fri, 31 Jan 2020 10:25:12 -0800 (PST) Received: from [10.1.196.37] (e121345-lin.cambridge.arm.com [10.1.196.37]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 5BB963F68E; Fri, 31 Jan 2020 10:25:10 -0800 (PST) Subject: Re: [PATCH v2 0/7] Introduce bus firewall controller framework To: Benjamin GAIGNARD , Sudeep Holla Cc: "broonie@kernel.org" , "robh@kernel.org" , "arnd@arndb.de" , "shawnguo@kernel.org" , "s.hauer@pengutronix.de" , "fabio.estevam@nxp.com" , "lkml@metux.net" , Loic PALLARDY , "gregkh@linuxfoundation.org" , "linux-kernel@vger.kernel.org" , "linux-imx@nxp.com" , "kernel@pengutronix.de" , "linux-arm-kernel@lists.infradead.org" , "devicetree@vger.kernel.org" , "system-dt@lists.openampproject.org" , "stefano.stabellini@xilinx.com" , Mark Rutland References: <20200128153806.7780-1-benjamin.gaignard@st.com> <20200128163628.GB30489@bogus> <7f54ec36-8022-a57a-c634-45257f4c6984@st.com> <20200128171639.GA36496@bogus> <26eb1fde-5408-43f0-ccba-f0c81e791f54@st.com> <6a6ba7ff-7ed9-e573-63ca-66fca609075b@arm.com> From: Robin Murphy Message-ID: <3624ec3e-b06a-907d-ebfa-8516b14cb306@arm.com> Date: Fri, 31 Jan 2020 18:25:09 +0000 User-Agent: Mozilla/5.0 (X11; Linux aarch64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 29/01/2020 1:40 pm, Benjamin GAIGNARD wrote: > > On 1/28/20 11:06 PM, Robin Murphy wrote: >> On 2020-01-28 8:06 pm, Benjamin GAIGNARD wrote: >>> >>> On 1/28/20 6:17 PM, Sudeep Holla wrote: >>>> On Tue, Jan 28, 2020 at 04:46:41PM +0000, Benjamin GAIGNARD wrote: >>>>> On 1/28/20 5:36 PM, Sudeep Holla wrote: >>>>>> On Tue, Jan 28, 2020 at 04:37:59PM +0100, Benjamin Gaignard wrote: >>>>>>> Bus firewall framework aims to provide a kernel API to set the >>>>>>> configuration >>>>>>> of the harware blocks in charge of busses access control. >>>>>>> >>>>>>> Framework architecture is inspirated by pinctrl framework: >>>>>>> - a default configuration could be applied before bind the driver. >>>>>>>      If a configuration could not be applied the driver is not bind >>>>>>>      to avoid doing accesses on prohibited regions. >>>>>>> - configurations could be apllied dynamically by drivers. >>>>>>> - device node provides the bus firewall configurations. >>>>>>> >>>>>>> An example of bus firewall controller is STM32 ETZPC hardware block >>>>>>> which got 3 possible configurations: >>>>>>> - trust: hardware blocks are only accessible by software running >>>>>>> on trust >>>>>>>      zone (i.e op-tee firmware). >>>>>>> - non-secure: hardware blocks are accessible by non-secure >>>>>>> software (i.e. >>>>>>>      linux kernel). >>>>>>> - coprocessor: hardware blocks are only accessible by the >>>>>>> coprocessor. >>>>>>> Up to 94 hardware blocks of the soc could be managed by ETZPC. >>>>>>> >>>>>> /me confused. Is ETZPC accessible from the non-secure kernel space to >>>>>> begin with ? If so, is it allowed to configure hardware blocks as >>>>>> secure >>>>>> or trusted ? I am failing to understand the overall design of a >>>>>> system >>>>>> with ETZPC controller. >>>>> Non-secure kernel could read the values set in ETZPC, if it doesn't >>>>> match >>>>> with what is required by the device node the driver won't be probed. >>>>> >>>> OK, but I was under the impression that it was made clear that Linux is >>>> not firmware validation suite. The firmware need to ensure all the >>>> devices >>>> that are not accessible in the Linux kernel are marked as disabled and >>>> this needs to happen before entering the kernel. So if this is what >>>> this >>>> patch series achieves, then there is no need for it. Please stop >>>> pursuing >>>> this any further or provide any other reasons(if any) to have it. Until >>>> you have other reasons, NACK for this series. >>> >>> No it doesn't disable the nodes. >>> >>> When the firmware disable a node before the kernel that means it change >>> >>> the DTB and that is a problem when you want to sign it. With my proposal >>> >>> the DTB remains the same. >> >> ??? >> >> :/ >> >> The DTB is used to pass the kernel command line, memory reservations, >> random seeds, and all manner of other things dynamically generated by >> firmware at boot-time. Apologies for being blunt but if "changing the >> DTB" is considered a problem then I can't help but think you're doing >> it wrong. > > Yes but I would like to limit the number of cases where a firmware has > to change the DTB. Sure, but unless you can limit that number to strictly zero, then presumably the firmware must have the general capability to verify, modify, and re-sign a DTB. At that point having it also tweak the status of nodes that it wants for itself doesn't seem like a particularly big ask. > With this proposal nodes remain the same and embedded the firewall > configuration(s). > > Until now firewall configuration is "static", the firmware disable (or > remove) the nodes not accessible from Linux. > > If Linux can rely on node's firewall information it could allow switch > dynamically an hardware block from Linux to a coprocessor. > > For example Linux could manage the display pipe configuration and when > going to suspend handover the display hardware block to a coprocessor in > charge a refreshing only some pixels. And like I'm sure I said before, the interface between Linux and the Secure environment to ultimately achieve that will almost certainly make inspecting a passive status bit in a register redundant anyway. In the interest of being productive, though, there is another way of looking at this. If we drop the pretence that it's in any way generic or ever going to be relevant beyond certain configurations of certain STMicro SoCs, then in plain terms it's just some block of MMIO registers that have *something* to do with various other devices. At that point, the answer is just to treat it as a syscon and make the relevant drivers for those SoCs aware of it. I'm most familiar with the "General Register File" on Rockchip SoCs as a prime example of "bunch of registers that relate to the integration of various IP blocks", which manages to be supported just fine without invasive hooks in the driver core. Robin. From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=0.2 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED,URIBL_DBL_ABUSE_MALW,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 85820C2D0DB for ; Fri, 31 Jan 2020 18:25:21 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 58570206F0 for ; Fri, 31 Jan 2020 18:25:21 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="JxFGWphQ" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 58570206F0 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=arm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender:Content-Type: Content-Transfer-Encoding:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:Date:Message-ID:From: References:To:Subject:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=H9JVM4F2uZLPHaIrKx9ufnskj/DZnuoKY4zwvEDQ6Dk=; b=JxFGWphQcMPcuTmogPlTTbs7P DxpQeO4afNiw2jt02MSrzoCMxg2FyyvlB7cXbNjiGvjOGq2mOcexsaYZSi/mPrzRXgj0MhPpXP9rI 7SNHmZjX7yQKR0caQJPcFU+DaaKUBOkcTejMpgYCWwAop37rgxFVUKDjsA8kkCZCI/iThS+4Wl0w/ IIEc9+oP2QKEkDr1t/E13xmUDbrgWxVdXYZs+tq6tcOK2o6ZJul/8zz3iPu6Qi1/dC/sPnlONjgSp jl1Rg/ylsh7h7LEi40oZAKzLVeLWf+QajlNRYekM9LSsk9vukFh+ZTeIYYrIB8h20ajGwMCdruQdZ 5Ax/UiMWw==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1ixayk-0004ES-Lu; Fri, 31 Jan 2020 18:25:18 +0000 Received: from foss.arm.com ([217.140.110.172]) by bombadil.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1ixayh-0004Df-Mg for linux-arm-kernel@lists.infradead.org; Fri, 31 Jan 2020 18:25:17 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id A0E97FEC; Fri, 31 Jan 2020 10:25:12 -0800 (PST) Received: from [10.1.196.37] (e121345-lin.cambridge.arm.com [10.1.196.37]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 5BB963F68E; Fri, 31 Jan 2020 10:25:10 -0800 (PST) Subject: Re: [PATCH v2 0/7] Introduce bus firewall controller framework To: Benjamin GAIGNARD , Sudeep Holla References: <20200128153806.7780-1-benjamin.gaignard@st.com> <20200128163628.GB30489@bogus> <7f54ec36-8022-a57a-c634-45257f4c6984@st.com> <20200128171639.GA36496@bogus> <26eb1fde-5408-43f0-ccba-f0c81e791f54@st.com> <6a6ba7ff-7ed9-e573-63ca-66fca609075b@arm.com> From: Robin Murphy Message-ID: <3624ec3e-b06a-907d-ebfa-8516b14cb306@arm.com> Date: Fri, 31 Jan 2020 18:25:09 +0000 User-Agent: Mozilla/5.0 (X11; Linux aarch64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Language: en-GB X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20200131_102515_830251_0147B6E6 X-CRM114-Status: GOOD ( 28.77 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Mark Rutland , "robh@kernel.org" , Loic PALLARDY , "arnd@arndb.de" , "devicetree@vger.kernel.org" , "gregkh@linuxfoundation.org" , "s.hauer@pengutronix.de" , "linux-kernel@vger.kernel.org" , "system-dt@lists.openampproject.org" , "broonie@kernel.org" , "lkml@metux.net" , "linux-imx@nxp.com" , "kernel@pengutronix.de" , "fabio.estevam@nxp.com" , "stefano.stabellini@xilinx.com" , "shawnguo@kernel.org" , "linux-arm-kernel@lists.infradead.org" Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gMjkvMDEvMjAyMCAxOjQwIHBtLCBCZW5qYW1pbiBHQUlHTkFSRCB3cm90ZToKPiAKPiBPbiAx LzI4LzIwIDExOjA2IFBNLCBSb2JpbiBNdXJwaHkgd3JvdGU6Cj4+IE9uIDIwMjAtMDEtMjggODow NiBwbSwgQmVuamFtaW4gR0FJR05BUkQgd3JvdGU6Cj4+Pgo+Pj4gT24gMS8yOC8yMCA2OjE3IFBN LCBTdWRlZXAgSG9sbGEgd3JvdGU6Cj4+Pj4gT24gVHVlLCBKYW4gMjgsIDIwMjAgYXQgMDQ6NDY6 NDFQTSArMDAwMCwgQmVuamFtaW4gR0FJR05BUkQgd3JvdGU6Cj4+Pj4+IE9uIDEvMjgvMjAgNToz NiBQTSwgU3VkZWVwIEhvbGxhIHdyb3RlOgo+Pj4+Pj4gT24gVHVlLCBKYW4gMjgsIDIwMjAgYXQg MDQ6Mzc6NTlQTSArMDEwMCwgQmVuamFtaW4gR2FpZ25hcmQgd3JvdGU6Cj4+Pj4+Pj4gQnVzIGZp cmV3YWxsIGZyYW1ld29yayBhaW1zIHRvIHByb3ZpZGUgYSBrZXJuZWwgQVBJIHRvIHNldCB0aGUK Pj4+Pj4+PiBjb25maWd1cmF0aW9uCj4+Pj4+Pj4gb2YgdGhlIGhhcndhcmUgYmxvY2tzIGluIGNo YXJnZSBvZiBidXNzZXMgYWNjZXNzIGNvbnRyb2wuCj4+Pj4+Pj4KPj4+Pj4+PiBGcmFtZXdvcmsg YXJjaGl0ZWN0dXJlIGlzIGluc3BpcmF0ZWQgYnkgcGluY3RybCBmcmFtZXdvcms6Cj4+Pj4+Pj4g LSBhIGRlZmF1bHQgY29uZmlndXJhdGlvbiBjb3VsZCBiZSBhcHBsaWVkIGJlZm9yZSBiaW5kIHRo ZSBkcml2ZXIuCj4+Pj4+Pj4gIMKgwqDCoMKgIElmIGEgY29uZmlndXJhdGlvbiBjb3VsZCBub3Qg YmUgYXBwbGllZCB0aGUgZHJpdmVyIGlzIG5vdCBiaW5kCj4+Pj4+Pj4gIMKgwqDCoMKgIHRvIGF2 b2lkIGRvaW5nIGFjY2Vzc2VzIG9uIHByb2hpYml0ZWQgcmVnaW9ucy4KPj4+Pj4+PiAtIGNvbmZp Z3VyYXRpb25zIGNvdWxkIGJlIGFwbGxpZWQgZHluYW1pY2FsbHkgYnkgZHJpdmVycy4KPj4+Pj4+ PiAtIGRldmljZSBub2RlIHByb3ZpZGVzIHRoZSBidXMgZmlyZXdhbGwgY29uZmlndXJhdGlvbnMu Cj4+Pj4+Pj4KPj4+Pj4+PiBBbiBleGFtcGxlIG9mIGJ1cyBmaXJld2FsbCBjb250cm9sbGVyIGlz IFNUTTMyIEVUWlBDIGhhcmR3YXJlIGJsb2NrCj4+Pj4+Pj4gd2hpY2ggZ290IDMgcG9zc2libGUg Y29uZmlndXJhdGlvbnM6Cj4+Pj4+Pj4gLSB0cnVzdDogaGFyZHdhcmUgYmxvY2tzIGFyZSBvbmx5 IGFjY2Vzc2libGUgYnkgc29mdHdhcmUgcnVubmluZwo+Pj4+Pj4+IG9uIHRydXN0Cj4+Pj4+Pj4g IMKgwqDCoMKgIHpvbmUgKGkuZSBvcC10ZWUgZmlybXdhcmUpLgo+Pj4+Pj4+IC0gbm9uLXNlY3Vy ZTogaGFyZHdhcmUgYmxvY2tzIGFyZSBhY2Nlc3NpYmxlIGJ5IG5vbi1zZWN1cmUKPj4+Pj4+PiBz b2Z0d2FyZSAoaS5lLgo+Pj4+Pj4+ICDCoMKgwqDCoCBsaW51eCBrZXJuZWwpLgo+Pj4+Pj4+IC0g Y29wcm9jZXNzb3I6IGhhcmR3YXJlIGJsb2NrcyBhcmUgb25seSBhY2Nlc3NpYmxlIGJ5IHRoZQo+ Pj4+Pj4+IGNvcHJvY2Vzc29yLgo+Pj4+Pj4+IFVwIHRvIDk0IGhhcmR3YXJlIGJsb2NrcyBvZiB0 aGUgc29jIGNvdWxkIGJlIG1hbmFnZWQgYnkgRVRaUEMuCj4+Pj4+Pj4KPj4+Pj4+IC9tZSBjb25m dXNlZC4gSXMgRVRaUEMgYWNjZXNzaWJsZSBmcm9tIHRoZSBub24tc2VjdXJlIGtlcm5lbCBzcGFj ZSB0bwo+Pj4+Pj4gYmVnaW4gd2l0aCA/IElmIHNvLCBpcyBpdCBhbGxvd2VkIHRvIGNvbmZpZ3Vy ZSBoYXJkd2FyZSBibG9ja3MgYXMKPj4+Pj4+IHNlY3VyZQo+Pj4+Pj4gb3IgdHJ1c3RlZCA/IEkg YW0gZmFpbGluZyB0byB1bmRlcnN0YW5kIHRoZSBvdmVyYWxsIGRlc2lnbiBvZiBhCj4+Pj4+PiBz eXN0ZW0KPj4+Pj4+IHdpdGggRVRaUEMgY29udHJvbGxlci4KPj4+Pj4gTm9uLXNlY3VyZSBrZXJu ZWwgY291bGQgcmVhZCB0aGUgdmFsdWVzIHNldCBpbiBFVFpQQywgaWYgaXQgZG9lc24ndAo+Pj4+ PiBtYXRjaAo+Pj4+PiB3aXRoIHdoYXQgaXMgcmVxdWlyZWQgYnkgdGhlIGRldmljZSBub2RlIHRo ZSBkcml2ZXIgd29uJ3QgYmUgcHJvYmVkLgo+Pj4+Pgo+Pj4+IE9LLCBidXQgSSB3YXMgdW5kZXIg dGhlIGltcHJlc3Npb24gdGhhdCBpdCB3YXMgbWFkZSBjbGVhciB0aGF0IExpbnV4IGlzCj4+Pj4g bm90IGZpcm13YXJlIHZhbGlkYXRpb24gc3VpdGUuIFRoZSBmaXJtd2FyZSBuZWVkIHRvIGVuc3Vy ZSBhbGwgdGhlCj4+Pj4gZGV2aWNlcwo+Pj4+IHRoYXQgYXJlIG5vdCBhY2Nlc3NpYmxlIGluIHRo ZSBMaW51eCBrZXJuZWwgYXJlIG1hcmtlZCBhcyBkaXNhYmxlZCBhbmQKPj4+PiB0aGlzIG5lZWRz IHRvIGhhcHBlbiBiZWZvcmUgZW50ZXJpbmcgdGhlIGtlcm5lbC4gU28gaWYgdGhpcyBpcyB3aGF0 Cj4+Pj4gdGhpcwo+Pj4+IHBhdGNoIHNlcmllcyBhY2hpZXZlcywgdGhlbiB0aGVyZSBpcyBubyBu ZWVkIGZvciBpdC4gUGxlYXNlIHN0b3AKPj4+PiBwdXJzdWluZwo+Pj4+IHRoaXMgYW55IGZ1cnRo ZXIgb3IgcHJvdmlkZSBhbnkgb3RoZXIgcmVhc29ucyhpZiBhbnkpIHRvIGhhdmUgaXQuIFVudGls Cj4+Pj4geW91IGhhdmUgb3RoZXIgcmVhc29ucywgTkFDSyBmb3IgdGhpcyBzZXJpZXMuCj4+Pgo+ Pj4gTm8gaXQgZG9lc24ndCBkaXNhYmxlIHRoZSBub2Rlcy4KPj4+Cj4+PiBXaGVuIHRoZSBmaXJt d2FyZSBkaXNhYmxlIGEgbm9kZSBiZWZvcmUgdGhlIGtlcm5lbCB0aGF0IG1lYW5zIGl0IGNoYW5n ZQo+Pj4KPj4+IHRoZSBEVEIgYW5kIHRoYXQgaXMgYSBwcm9ibGVtIHdoZW4geW91IHdhbnQgdG8g c2lnbiBpdC4gV2l0aCBteSBwcm9wb3NhbAo+Pj4KPj4+IHRoZSBEVEIgcmVtYWlucyB0aGUgc2Ft ZS4KPj4KPj4gPz8/Cj4+Cj4+IDovCj4+Cj4+IFRoZSBEVEIgaXMgdXNlZCB0byBwYXNzIHRoZSBr ZXJuZWwgY29tbWFuZCBsaW5lLCBtZW1vcnkgcmVzZXJ2YXRpb25zLAo+PiByYW5kb20gc2VlZHMs IGFuZCBhbGwgbWFubmVyIG9mIG90aGVyIHRoaW5ncyBkeW5hbWljYWxseSBnZW5lcmF0ZWQgYnkK Pj4gZmlybXdhcmUgYXQgYm9vdC10aW1lLiBBcG9sb2dpZXMgZm9yIGJlaW5nIGJsdW50IGJ1dCBp ZiAiY2hhbmdpbmcgdGhlCj4+IERUQiIgaXMgY29uc2lkZXJlZCBhIHByb2JsZW0gdGhlbiBJIGNh bid0IGhlbHAgYnV0IHRoaW5rIHlvdSdyZSBkb2luZwo+PiBpdCB3cm9uZy4KPiAKPiBZZXMgYnV0 IEkgd291bGQgbGlrZSB0byBsaW1pdCB0aGUgbnVtYmVyIG9mIGNhc2VzIHdoZXJlIGEgZmlybXdh cmUgaGFzCj4gdG8gY2hhbmdlIHRoZSBEVEIuCgpTdXJlLCBidXQgdW5sZXNzIHlvdSBjYW4gbGlt aXQgdGhhdCBudW1iZXIgdG8gc3RyaWN0bHkgemVybywgdGhlbiAKcHJlc3VtYWJseSB0aGUgZmly bXdhcmUgbXVzdCBoYXZlIHRoZSBnZW5lcmFsIGNhcGFiaWxpdHkgdG8gdmVyaWZ5LCAKbW9kaWZ5 LCBhbmQgcmUtc2lnbiBhIERUQi4gQXQgdGhhdCBwb2ludCBoYXZpbmcgaXQgYWxzbyB0d2VhayB0 aGUgc3RhdHVzIApvZiBub2RlcyB0aGF0IGl0IHdhbnRzIGZvciBpdHNlbGYgZG9lc24ndCBzZWVt IGxpa2UgYSBwYXJ0aWN1bGFybHkgYmlnIGFzay4KCj4gV2l0aCB0aGlzIHByb3Bvc2FsIG5vZGVz IHJlbWFpbiB0aGUgc2FtZSBhbmQgZW1iZWRkZWQgdGhlIGZpcmV3YWxsCj4gY29uZmlndXJhdGlv bihzKS4KPiAKPiBVbnRpbCBub3cgZmlyZXdhbGwgY29uZmlndXJhdGlvbiBpcyAic3RhdGljIiwg dGhlIGZpcm13YXJlIGRpc2FibGUgKG9yCj4gcmVtb3ZlKSB0aGUgbm9kZXMgbm90IGFjY2Vzc2li bGUgZnJvbSBMaW51eC4KPiAKPiBJZiBMaW51eCBjYW4gcmVseSBvbiBub2RlJ3MgZmlyZXdhbGwg aW5mb3JtYXRpb24gaXQgY291bGQgYWxsb3cgc3dpdGNoCj4gZHluYW1pY2FsbHkgYW4gaGFyZHdh cmUgYmxvY2sgZnJvbSBMaW51eCB0byBhIGNvcHJvY2Vzc29yLgo+IAo+IEZvciBleGFtcGxlIExp bnV4IGNvdWxkIG1hbmFnZSB0aGUgZGlzcGxheSBwaXBlIGNvbmZpZ3VyYXRpb24gYW5kIHdoZW4K PiBnb2luZyB0byBzdXNwZW5kIGhhbmRvdmVyIHRoZSBkaXNwbGF5IGhhcmR3YXJlIGJsb2NrIHRv IGEgY29wcm9jZXNzb3IgaW4KPiBjaGFyZ2UgYSByZWZyZXNoaW5nIG9ubHkgc29tZSBwaXhlbHMu CgpBbmQgbGlrZSBJJ20gc3VyZSBJIHNhaWQgYmVmb3JlLCB0aGUgaW50ZXJmYWNlIGJldHdlZW4g TGludXggYW5kIHRoZSAKU2VjdXJlIGVudmlyb25tZW50IHRvIHVsdGltYXRlbHkgYWNoaWV2ZSB0 aGF0IHdpbGwgYWxtb3N0IGNlcnRhaW5seSBtYWtlIAppbnNwZWN0aW5nIGEgcGFzc2l2ZSBzdGF0 dXMgYml0IGluIGEgcmVnaXN0ZXIgcmVkdW5kYW50IGFueXdheS4KCkluIHRoZSBpbnRlcmVzdCBv ZiBiZWluZyBwcm9kdWN0aXZlLCB0aG91Z2gsIHRoZXJlIGlzIGFub3RoZXIgd2F5IG9mIApsb29r aW5nIGF0IHRoaXMuIElmIHdlIGRyb3AgdGhlIHByZXRlbmNlIHRoYXQgaXQncyBpbiBhbnkgd2F5 IGdlbmVyaWMgb3IgCmV2ZXIgZ29pbmcgdG8gYmUgcmVsZXZhbnQgYmV5b25kIGNlcnRhaW4gY29u ZmlndXJhdGlvbnMgb2YgY2VydGFpbiAKU1RNaWNybyBTb0NzLCB0aGVuIGluIHBsYWluIHRlcm1z IGl0J3MganVzdCBzb21lIGJsb2NrIG9mIE1NSU8gcmVnaXN0ZXJzIAp0aGF0IGhhdmUgKnNvbWV0 aGluZyogdG8gZG8gd2l0aCB2YXJpb3VzIG90aGVyIGRldmljZXMuIEF0IHRoYXQgcG9pbnQsIAp0 aGUgYW5zd2VyIGlzIGp1c3QgdG8gdHJlYXQgaXQgYXMgYSBzeXNjb24gYW5kIG1ha2UgdGhlIHJl bGV2YW50IGRyaXZlcnMgCmZvciB0aG9zZSBTb0NzIGF3YXJlIG9mIGl0LiBJJ20gbW9zdCBmYW1p bGlhciB3aXRoIHRoZSAiR2VuZXJhbCBSZWdpc3RlciAKRmlsZSIgb24gUm9ja2NoaXAgU29DcyBh cyBhIHByaW1lIGV4YW1wbGUgb2YgImJ1bmNoIG9mIHJlZ2lzdGVycyB0aGF0IApyZWxhdGUgdG8g dGhlIGludGVncmF0aW9uIG9mIHZhcmlvdXMgSVAgYmxvY2tzIiwgd2hpY2ggbWFuYWdlcyB0byBi ZSAKc3VwcG9ydGVkIGp1c3QgZmluZSB3aXRob3V0IGludmFzaXZlIGhvb2tzIGluIHRoZSBkcml2 ZXIgY29yZS4KClJvYmluLgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KbGludXgtYXJtLWtlcm5lbCBtYWlsaW5nIGxpc3QKbGludXgtYXJtLWtlcm5lbEBs aXN0cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3JnL21haWxtYW4vbGlz dGluZm8vbGludXgtYXJtLWtlcm5lbAo=