From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.6 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 17CA3C6778A for ; Thu, 5 Jul 2018 16:38:34 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id ADCD7223B2 for ; Thu, 5 Jul 2018 16:38:33 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="mJH9Hjw/" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org ADCD7223B2 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753590AbeGEQia (ORCPT ); Thu, 5 Jul 2018 12:38:30 -0400 Received: from mail-wm0-f68.google.com ([74.125.82.68]:52950 "EHLO mail-wm0-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753250AbeGEQi3 (ORCPT ); Thu, 5 Jul 2018 12:38:29 -0400 Received: by mail-wm0-f68.google.com with SMTP id w16-v6so12206433wmc.2 for ; Thu, 05 Jul 2018 09:38:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=6j92ZXOcYbTp25vTlOB0fwRUYdznpbI/yfO+OZLDO2A=; b=mJH9Hjw/3upq0Wqnbgw1yr+FxDXlcTvuJI7xH1Ss6t3KNxzDREajHBNH74YX1xQoMO NrqEQkvqcZaDKv5epO0TzUazp0diaZlraC0HS7WBD5Ob/GtqoW5yWuiB1Tjh98M2DwwE 4HZaf+nb8rPVg1cajbFszixeDqhBGpHlbajN4HmRDSzw0HOnInhqEng+aOxQJ3nIA25l xPHIxwo3YFN60cOoEhPF3Q3KhgO36QOd/bM9df9LWhNa0QbPXRcdMgRYiALB90DY/4KO 2qLjr0J6FrdH34K69IF1CFt0Mlge4m+vjaNbN81crO4dlxbH/BTDsVpxDaNZ19R9rK2N sIJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=6j92ZXOcYbTp25vTlOB0fwRUYdznpbI/yfO+OZLDO2A=; b=AeucTSiXXgbfsqjbpw79jUeKwNWlYZourDcAH9PykMFzafXRPtRUwVSs3VkMouVV2O kYHxICb6+nWQrMw6rFOkIAGHAcuFbIlRsOrWfVWVAo7sopyKO5NGR6kp8apnnYCN1mKp f/7lwZAQfNujoh0y5o4BwDrgmVaptjD/BocnPaM9oRFT1nfWEDKdGuFLv5Pq7j6RVCc8 6jAeXltulmMRXReKoGG6c96jwBnsymk/Z+sqVyfYda28/POMhyE+3dEKTSTZ/QIDew6k Ka1Is4rkh3RZRxJ0oZfHKOeXI/R4Gr1mTfLnmdJsC2BErdQSfdmeuz4zwcJ7M3C8cQMm ENTQ== X-Gm-Message-State: APt69E1eq2fR7GN78hfq5FLpbHKFIxzqAPlZ6mAmowIcnWXtLPkmCT7/ hu7gYhMva6DgSr05UHrDazSrHUXgHSbMmGSCN3c= X-Google-Smtp-Source: AAOMgpckqcU7Msj2LCoCW9yB+cXIIDXAF4ayAuvnOV6R/eIAJfi0UIpamkXPBkSB1COGsx/uJS+dcXuv7XtMmTqaiyI= X-Received: by 2002:a1c:8587:: with SMTP id h129-v6mr1664748wmd.105.1530808707854; Thu, 05 Jul 2018 09:38:27 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:adf:8e6b:0:0:0:0:0 with HTTP; Thu, 5 Jul 2018 09:38:27 -0700 (PDT) In-Reply-To: <4444b8ea-ba99-902d-cb5b-5cf3f05b4803@amd.com> References: <20180413161601.109431-1-djkurtz@chromium.org> <6e46904a-d721-d583-8ab5-82cb07df7934@amd.com> <4444b8ea-ba99-902d-cb5b-5cf3f05b4803@amd.com> From: Alex Deucher Date: Thu, 5 Jul 2018 12:38:27 -0400 Message-ID: Subject: Re: [PATCH] drm/amdgpu/acp: Fix slab-out-of-bounds in mfd_add_device in acp_hw_init To: "Mukunda,Vijendar" Cc: Daniel Kurtz , "Deucher, Alexander" , David Airlie , LKML , amd-gfx list , Akshu Agrawal , jclinton@chromium.org, dri-devel , Christian Koenig Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jul 4, 2018 at 4:48 AM, Mukunda,Vijendar wrote: > > > On Tuesday 03 July 2018 09:50 PM, Alex Deucher wrote: >> >> On Mon, Jul 2, 2018 at 5:48 PM, Daniel Kurtz wrote: >>> >>> Hi Alex, >>> >>> On Sun, Apr 15, 2018 at 9:48 PM Agrawal, Akshu >>> wrote: >>>> >>>> >>>> >>>> >>>> On 4/13/2018 9:45 PM, Daniel Kurtz wrote: >>>>> >>>>> Commit 51f7415039d4 ("drm/amd/amdgpu: creating two I2S instances for >>>>> stoney/cz") added support for the "BT_I2S" ACP i2s channel. As part of >>>>> this change, one additional acp resource was added, but the >>>>> "num_resource" >>>>> count was accidentally incremented by 2. >>>>> >>>>> This incorrect count eventually causes mfd_add_device() to try to >>>>> access >>>>> an invalid memory address (the location of non-existent resource 5. >>>>> >>>>> This fault was detected by running a KASAN enabled kernel, which >>>>> produced >>>>> the following splat at boot: >>>>> >>>>> [ 6.612987] >>>>> ================================================================== >>>>> [ 6.613509] BUG: KASAN: slab-out-of-bounds in >>>>> mfd_add_device+0x4bc/0x7a7 >>>>> [ 6.613509] Read of size 8 at addr ffff880107d4dc58 by task >>>>> swapper/0/1 >>>>> [ 6.613509] >>>>> [ 6.613509] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.14.33 #349 >>>>> [ 6.613509] Hardware name: Google Grunt/Grunt, BIOS >>>>> Google_Grunt.10543.0.2018_04_03_1812 04/02/2018 >>>>> [ 6.613509] Call Trace: >>>>> [ 6.613509] dump_stack+0x4d/0x63 >>>>> [ 6.613509] print_address_description+0x80/0x2d6 >>>>> [ 6.613509] ? mfd_add_device+0x4bc/0x7a7 >>>>> [ 6.613509] kasan_report+0x255/0x295 >>>>> [ 6.613509] mfd_add_device+0x4bc/0x7a7 >>>>> [ 6.613509] ? kasan_kmalloc+0x99/0xa8 >>>>> [ 6.613509] ? mfd_add_devices+0x58/0xe4 >>>>> [ 6.613509] ? __kmalloc+0x154/0x178 >>>>> [ 6.613509] mfd_add_devices+0xa5/0xe4 >>>>> [ 6.613509] acp_hw_init+0x92e/0xc4a >>>>> [ 6.613509] amdgpu_device_init+0x1dfb/0x22a2 >>>>> [ 6.613509] ? kmalloc_order+0x53/0x5d >>>>> [ 6.613509] ? kmalloc_order_trace+0x23/0xb3 >>>>> [ 6.613509] amdgpu_driver_load_kms+0xce/0x267 >>>>> [ 6.613509] drm_dev_register+0x169/0x2fb >>>>> [ 6.613509] amdgpu_pci_probe+0x217/0x242 >>>>> [ 6.613509] pci_device_probe+0x101/0x18e >>>>> [ 6.613509] driver_probe_device+0x1dd/0x419 >>>>> [ 6.613509] ? ___might_sleep+0x80/0x1b6 >>>>> [ 6.613509] __driver_attach+0x9f/0xc9 >>>>> [ 6.613509] ? driver_probe_device+0x419/0x419 >>>>> [ 6.613509] bus_for_each_dev+0xbc/0xe1 >>>>> [ 6.613509] bus_add_driver+0x189/0x2c0 >>>>> [ 6.613509] driver_register+0x108/0x156 >>>>> [ 6.613509] ? ttm_init+0x67/0x67 >>>>> [ 6.613509] do_one_initcall+0xb2/0x161 >>>>> [ 6.613509] kernel_init_freeable+0x25a/0x308 >>>>> [ 6.613509] ? rest_init+0xcc/0xcc >>>>> [ 6.613509] kernel_init+0x11/0x10d >>>>> [ 6.613509] ? rest_init+0xcc/0xcc >>>>> [ 6.613509] ret_from_fork+0x22/0x40 >>>>> [ 6.613509] >>>>> [ 6.613509] Allocated by task 1: >>>>> [ 6.613509] save_stack+0x46/0xce >>>>> [ 6.613509] kasan_kmalloc+0x99/0xa8 >>>>> [ 6.613509] kmem_cache_alloc_trace+0x11a/0x13e >>>>> [ 6.613509] acp_hw_init+0x210/0xc4a >>>>> [ 6.613509] amdgpu_device_init+0x1dfb/0x22a2 >>>>> [ 6.613509] amdgpu_driver_load_kms+0xce/0x267 >>>>> [ 6.613509] drm_dev_register+0x169/0x2fb >>>>> [ 6.613509] amdgpu_pci_probe+0x217/0x242 >>>>> [ 6.613509] pci_device_probe+0x101/0x18e >>>>> [ 6.613509] driver_probe_device+0x1dd/0x419 >>>>> [ 6.613509] __driver_attach+0x9f/0xc9 >>>>> [ 6.613509] bus_for_each_dev+0xbc/0xe1 >>>>> [ 6.613509] bus_add_driver+0x189/0x2c0 >>>>> [ 6.613509] driver_register+0x108/0x156 >>>>> [ 6.613509] do_one_initcall+0xb2/0x161 >>>>> [ 6.613509] kernel_init_freeable+0x25a/0x308 >>>>> [ 6.613509] kernel_init+0x11/0x10d >>>>> [ 6.613509] ret_from_fork+0x22/0x40 >>>>> [ 6.613509] >>>>> [ 6.613509] Freed by task 0: >>>>> [ 6.613509] (stack is not available) >>>>> [ 6.613509] >>>>> [ 6.613509] The buggy address belongs to the object at >>>>> ffff880107d4db08 >>>>> [ 6.613509] which belongs to the cache kmalloc-512 of size 512 >>>>> [ 6.613509] The buggy address is located 336 bytes inside of >>>>> [ 6.613509] 512-byte region [ffff880107d4db08, ffff880107d4dd08) >>>>> [ 6.613509] The buggy address belongs to the page: >>>>> [ 6.613509] page:ffffea00041f5300 count:1 mapcount:0 mapping: >>>>> (null) index:0x0 compound_mapcount: 0 >>>>> [ 6.613509] flags: 0x8000000000008100(slab|head) >>>>> [ 6.613509] raw: 8000000000008100 0000000000000000 0000000000000000 >>>>> 0000000100120012 >>>>> [ 6.613509] raw: ffffea0004208520 ffff88010b001680 ffff88010b002cc0 >>>>> 0000000000000000 >>>>> [ 6.613509] page dumped because: kasan: bad access detected >>>>> [ 6.613509] >>>>> [ 6.613509] Memory state around the buggy address: >>>>> [ 6.613509] ffff880107d4db00: fc 00 00 00 00 00 00 00 00 00 00 00 >>>>> 00 00 00 00 >>>>> [ 6.613509] ffff880107d4db80: 00 00 00 00 00 00 00 00 00 00 00 00 >>>>> 00 00 00 00 >>>>> [ 6.613509] >ffff880107d4dc00: 00 00 00 00 00 00 00 00 00 fc fc fc >>>>> fc fc fc fc >>>>> [ 6.613509] ^ >>>>> [ 6.613509] ffff880107d4dc80: fc fc fc fc fc fc fc fc fc fc fc fc >>>>> fc fc fc fc >>>>> [ 6.613509] ffff880107d4dd00: fc fc fc fc fc fc fc fc fc fc fc fc >>>>> fc fc fc fc >>>>> [ 6.613509] >>>>> ================================================================== >>>>> >>>>> Fixes: 51f7415039d4 ("drm/amd/amdgpu: creating two I2S instances for >>>>> stoney/cz") >>>>> Signed-off-by: Daniel Kurtz >>>> >>>> Acked-by: Akshu Agrawal >>> >>> >>> >>> Was this patch ever picked up? I can't find it in agd5f/linux. >> >> >> It wasn't applied. I don't see 51f7415039d4 ("drm/amd/amdgpu: >> creating two I2S instances for stoney/cz") upstream yet either. >> Daniel, Vijendar, which ones do you want applied? Can you send me the >> patches? >> >> Alex > > > Hi Alex, > > "drm/amd/amdgpu: creating two I2S instances for stoney/cz" patch exists in > drm-next branch. Please pick the patch . So just that one? I seem to recall there being later revisions of that patch that you reworked after applying the original version. Also that patch was originally part of a larger series. Are those changes required too? Alex > > Thanks, > Vijendar > > >> >>> >>> Thanks, >>> -Dan >>> _______________________________________________ >>> dri-devel mailing list >>> dri-devel@lists.freedesktop.org >>> https://lists.freedesktop.org/mailman/listinfo/dri-devel From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alex Deucher Subject: Re: [PATCH] drm/amdgpu/acp: Fix slab-out-of-bounds in mfd_add_device in acp_hw_init Date: Thu, 5 Jul 2018 12:38:27 -0400 Message-ID: References: <20180413161601.109431-1-djkurtz@chromium.org> <6e46904a-d721-d583-8ab5-82cb07df7934@amd.com> <4444b8ea-ba99-902d-cb5b-5cf3f05b4803@amd.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <4444b8ea-ba99-902d-cb5b-5cf3f05b4803-5C7GfCeVMHo@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: amd-gfx-bounces-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org Sender: "amd-gfx" To: "Mukunda,Vijendar" Cc: David Airlie , dri-devel , LKML , amd-gfx list , Akshu Agrawal , jclinton-F7+t8E8rja9g9hUCZPvPmw@public.gmane.org, Daniel Kurtz , "Deucher, Alexander" , Christian Koenig List-Id: dri-devel@lists.freedesktop.org T24gV2VkLCBKdWwgNCwgMjAxOCBhdCA0OjQ4IEFNLCBNdWt1bmRhLFZpamVuZGFyCjx2aWplbmRh ci5tdWt1bmRhQGFtZC5jb20+IHdyb3RlOgo+Cj4KPiBPbiBUdWVzZGF5IDAzIEp1bHkgMjAxOCAw OTo1MCBQTSwgQWxleCBEZXVjaGVyIHdyb3RlOgo+Pgo+PiBPbiBNb24sIEp1bCAyLCAyMDE4IGF0 IDU6NDggUE0sIERhbmllbCBLdXJ0eiA8ZGprdXJ0ekBjaHJvbWl1bS5vcmc+IHdyb3RlOgo+Pj4K Pj4+IEhpIEFsZXgsCj4+Pgo+Pj4gT24gU3VuLCBBcHIgMTUsIDIwMTggYXQgOTo0OCBQTSBBZ3Jh d2FsLCBBa3NodSA8QWtzaHUuQWdyYXdhbEBhbWQuY29tPgo+Pj4gd3JvdGU6Cj4+Pj4KPj4+Pgo+ Pj4+Cj4+Pj4KPj4+PiBPbiA0LzEzLzIwMTggOTo0NSBQTSwgRGFuaWVsIEt1cnR6IHdyb3RlOgo+ Pj4+Pgo+Pj4+PiBDb21taXQgNTFmNzQxNTAzOWQ0ICgiZHJtL2FtZC9hbWRncHU6IGNyZWF0aW5n IHR3byBJMlMgaW5zdGFuY2VzIGZvcgo+Pj4+PiBzdG9uZXkvY3oiKSBhZGRlZCBzdXBwb3J0IGZv ciB0aGUgIkJUX0kyUyIgQUNQIGkycyBjaGFubmVsLiAgQXMgcGFydCBvZgo+Pj4+PiB0aGlzIGNo YW5nZSwgb25lIGFkZGl0aW9uYWwgYWNwIHJlc291cmNlIHdhcyBhZGRlZCwgYnV0IHRoZQo+Pj4+ PiAibnVtX3Jlc291cmNlIgo+Pj4+PiBjb3VudCB3YXMgYWNjaWRlbnRhbGx5IGluY3JlbWVudGVk IGJ5IDIuCj4+Pj4+Cj4+Pj4+IFRoaXMgaW5jb3JyZWN0IGNvdW50IGV2ZW50dWFsbHkgY2F1c2Vz IG1mZF9hZGRfZGV2aWNlKCkgdG8gdHJ5IHRvCj4+Pj4+IGFjY2Vzcwo+Pj4+PiBhbiBpbnZhbGlk IG1lbW9yeSBhZGRyZXNzICh0aGUgbG9jYXRpb24gb2Ygbm9uLWV4aXN0ZW50IHJlc291cmNlIDUu Cj4+Pj4+Cj4+Pj4+IFRoaXMgZmF1bHQgd2FzIGRldGVjdGVkIGJ5IHJ1bm5pbmcgYSBLQVNBTiBl bmFibGVkIGtlcm5lbCwgd2hpY2gKPj4+Pj4gcHJvZHVjZWQKPj4+Pj4gdGhlIGZvbGxvd2luZyBz cGxhdCBhdCBib290Ogo+Pj4+Pgo+Pj4+PiBbICAgIDYuNjEyOTg3XQo+Pj4+PiA9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K Pj4+Pj4gWyAgICA2LjYxMzUwOV0gQlVHOiBLQVNBTjogc2xhYi1vdXQtb2YtYm91bmRzIGluCj4+ Pj4+IG1mZF9hZGRfZGV2aWNlKzB4NGJjLzB4N2E3Cj4+Pj4+IFsgICAgNi42MTM1MDldIFJlYWQg b2Ygc2l6ZSA4IGF0IGFkZHIgZmZmZjg4MDEwN2Q0ZGM1OCBieSB0YXNrCj4+Pj4+IHN3YXBwZXIv MC8xCj4+Pj4+IFsgICAgNi42MTM1MDldCj4+Pj4+IFsgICAgNi42MTM1MDldIENQVTogMCBQSUQ6 IDEgQ29tbTogc3dhcHBlci8wIE5vdCB0YWludGVkIDQuMTQuMzMgIzM0OQo+Pj4+PiBbICAgIDYu NjEzNTA5XSBIYXJkd2FyZSBuYW1lOiBHb29nbGUgR3J1bnQvR3J1bnQsIEJJT1MKPj4+Pj4gR29v Z2xlX0dydW50LjEwNTQzLjAuMjAxOF8wNF8wM18xODEyIDA0LzAyLzIwMTgKPj4+Pj4gWyAgICA2 LjYxMzUwOV0gQ2FsbCBUcmFjZToKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGR1bXBfc3RhY2srMHg0 ZC8weDYzCj4+Pj4+IFsgICAgNi42MTM1MDldICBwcmludF9hZGRyZXNzX2Rlc2NyaXB0aW9uKzB4 ODAvMHgyZDYKPj4+Pj4gWyAgICA2LjYxMzUwOV0gID8gbWZkX2FkZF9kZXZpY2UrMHg0YmMvMHg3 YTcKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGthc2FuX3JlcG9ydCsweDI1NS8weDI5NQo+Pj4+PiBb ICAgIDYuNjEzNTA5XSAgbWZkX2FkZF9kZXZpY2UrMHg0YmMvMHg3YTcKPj4+Pj4gWyAgICA2LjYx MzUwOV0gID8ga2FzYW5fa21hbGxvYysweDk5LzB4YTgKPj4+Pj4gWyAgICA2LjYxMzUwOV0gID8g bWZkX2FkZF9kZXZpY2VzKzB4NTgvMHhlNAo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgPyBfX2ttYWxs b2MrMHgxNTQvMHgxNzgKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIG1mZF9hZGRfZGV2aWNlcysweGE1 LzB4ZTQKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGFjcF9od19pbml0KzB4OTJlLzB4YzRhCj4+Pj4+ IFsgICAgNi42MTM1MDldICBhbWRncHVfZGV2aWNlX2luaXQrMHgxZGZiLzB4MjJhMgo+Pj4+PiBb ICAgIDYuNjEzNTA5XSAgPyBrbWFsbG9jX29yZGVyKzB4NTMvMHg1ZAo+Pj4+PiBbICAgIDYuNjEz NTA5XSAgPyBrbWFsbG9jX29yZGVyX3RyYWNlKzB4MjMvMHhiMwo+Pj4+PiBbICAgIDYuNjEzNTA5 XSAgYW1kZ3B1X2RyaXZlcl9sb2FkX2ttcysweGNlLzB4MjY3Cj4+Pj4+IFsgICAgNi42MTM1MDld ICBkcm1fZGV2X3JlZ2lzdGVyKzB4MTY5LzB4MmZiCj4+Pj4+IFsgICAgNi42MTM1MDldICBhbWRn cHVfcGNpX3Byb2JlKzB4MjE3LzB4MjQyCj4+Pj4+IFsgICAgNi42MTM1MDldICBwY2lfZGV2aWNl X3Byb2JlKzB4MTAxLzB4MThlCj4+Pj4+IFsgICAgNi42MTM1MDldICBkcml2ZXJfcHJvYmVfZGV2 aWNlKzB4MWRkLzB4NDE5Cj4+Pj4+IFsgICAgNi42MTM1MDldICA/IF9fX21pZ2h0X3NsZWVwKzB4 ODAvMHgxYjYKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIF9fZHJpdmVyX2F0dGFjaCsweDlmLzB4YzkK Pj4+Pj4gWyAgICA2LjYxMzUwOV0gID8gZHJpdmVyX3Byb2JlX2RldmljZSsweDQxOS8weDQxOQo+ Pj4+PiBbICAgIDYuNjEzNTA5XSAgYnVzX2Zvcl9lYWNoX2RldisweGJjLzB4ZTEKPj4+Pj4gWyAg ICA2LjYxMzUwOV0gIGJ1c19hZGRfZHJpdmVyKzB4MTg5LzB4MmMwCj4+Pj4+IFsgICAgNi42MTM1 MDldICBkcml2ZXJfcmVnaXN0ZXIrMHgxMDgvMHgxNTYKPj4+Pj4gWyAgICA2LjYxMzUwOV0gID8g dHRtX2luaXQrMHg2Ny8weDY3Cj4+Pj4+IFsgICAgNi42MTM1MDldICBkb19vbmVfaW5pdGNhbGwr MHhiMi8weDE2MQo+Pj4+PiBbICAgIDYuNjEzNTA5XSAga2VybmVsX2luaXRfZnJlZWFibGUrMHgy NWEvMHgzMDgKPj4+Pj4gWyAgICA2LjYxMzUwOV0gID8gcmVzdF9pbml0KzB4Y2MvMHhjYwo+Pj4+ PiBbICAgIDYuNjEzNTA5XSAga2VybmVsX2luaXQrMHgxMS8weDEwZAo+Pj4+PiBbICAgIDYuNjEz NTA5XSAgPyByZXN0X2luaXQrMHhjYy8weGNjCj4+Pj4+IFsgICAgNi42MTM1MDldICByZXRfZnJv bV9mb3JrKzB4MjIvMHg0MAo+Pj4+PiBbICAgIDYuNjEzNTA5XQo+Pj4+PiBbICAgIDYuNjEzNTA5 XSBBbGxvY2F0ZWQgYnkgdGFzayAxOgo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgc2F2ZV9zdGFjaysw eDQ2LzB4Y2UKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGthc2FuX2ttYWxsb2MrMHg5OS8weGE4Cj4+ Pj4+IFsgICAgNi42MTM1MDldICBrbWVtX2NhY2hlX2FsbG9jX3RyYWNlKzB4MTFhLzB4MTNlCj4+ Pj4+IFsgICAgNi42MTM1MDldICBhY3BfaHdfaW5pdCsweDIxMC8weGM0YQo+Pj4+PiBbICAgIDYu NjEzNTA5XSAgYW1kZ3B1X2RldmljZV9pbml0KzB4MWRmYi8weDIyYTIKPj4+Pj4gWyAgICA2LjYx MzUwOV0gIGFtZGdwdV9kcml2ZXJfbG9hZF9rbXMrMHhjZS8weDI2Nwo+Pj4+PiBbICAgIDYuNjEz NTA5XSAgZHJtX2Rldl9yZWdpc3RlcisweDE2OS8weDJmYgo+Pj4+PiBbICAgIDYuNjEzNTA5XSAg YW1kZ3B1X3BjaV9wcm9iZSsweDIxNy8weDI0Mgo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgcGNpX2Rl dmljZV9wcm9iZSsweDEwMS8weDE4ZQo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgZHJpdmVyX3Byb2Jl X2RldmljZSsweDFkZC8weDQxOQo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgX19kcml2ZXJfYXR0YWNo KzB4OWYvMHhjOQo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgYnVzX2Zvcl9lYWNoX2RldisweGJjLzB4 ZTEKPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGJ1c19hZGRfZHJpdmVyKzB4MTg5LzB4MmMwCj4+Pj4+ IFsgICAgNi42MTM1MDldICBkcml2ZXJfcmVnaXN0ZXIrMHgxMDgvMHgxNTYKPj4+Pj4gWyAgICA2 LjYxMzUwOV0gIGRvX29uZV9pbml0Y2FsbCsweGIyLzB4MTYxCj4+Pj4+IFsgICAgNi42MTM1MDld ICBrZXJuZWxfaW5pdF9mcmVlYWJsZSsweDI1YS8weDMwOAo+Pj4+PiBbICAgIDYuNjEzNTA5XSAg a2VybmVsX2luaXQrMHgxMS8weDEwZAo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgcmV0X2Zyb21fZm9y aysweDIyLzB4NDAKPj4+Pj4gWyAgICA2LjYxMzUwOV0KPj4+Pj4gWyAgICA2LjYxMzUwOV0gRnJl ZWQgYnkgdGFzayAwOgo+Pj4+PiBbICAgIDYuNjEzNTA5XSAoc3RhY2sgaXMgbm90IGF2YWlsYWJs ZSkKPj4+Pj4gWyAgICA2LjYxMzUwOV0KPj4+Pj4gWyAgICA2LjYxMzUwOV0gVGhlIGJ1Z2d5IGFk ZHJlc3MgYmVsb25ncyB0byB0aGUgb2JqZWN0IGF0Cj4+Pj4+IGZmZmY4ODAxMDdkNGRiMDgKPj4+ Pj4gWyAgICA2LjYxMzUwOV0gIHdoaWNoIGJlbG9uZ3MgdG8gdGhlIGNhY2hlIGttYWxsb2MtNTEy IG9mIHNpemUgNTEyCj4+Pj4+IFsgICAgNi42MTM1MDldIFRoZSBidWdneSBhZGRyZXNzIGlzIGxv Y2F0ZWQgMzM2IGJ5dGVzIGluc2lkZSBvZgo+Pj4+PiBbICAgIDYuNjEzNTA5XSAgNTEyLWJ5dGUg cmVnaW9uIFtmZmZmODgwMTA3ZDRkYjA4LCBmZmZmODgwMTA3ZDRkZDA4KQo+Pj4+PiBbICAgIDYu NjEzNTA5XSBUaGUgYnVnZ3kgYWRkcmVzcyBiZWxvbmdzIHRvIHRoZSBwYWdlOgo+Pj4+PiBbICAg IDYuNjEzNTA5XSBwYWdlOmZmZmZlYTAwMDQxZjUzMDAgY291bnQ6MSBtYXBjb3VudDowIG1hcHBp bmc6Cj4+Pj4+IChudWxsKSBpbmRleDoweDAgY29tcG91bmRfbWFwY291bnQ6IDAKPj4+Pj4gWyAg ICA2LjYxMzUwOV0gZmxhZ3M6IDB4ODAwMDAwMDAwMDAwODEwMChzbGFifGhlYWQpCj4+Pj4+IFsg ICAgNi42MTM1MDldIHJhdzogODAwMDAwMDAwMDAwODEwMCAwMDAwMDAwMDAwMDAwMDAwIDAwMDAw MDAwMDAwMDAwMDAKPj4+Pj4gMDAwMDAwMDEwMDEyMDAxMgo+Pj4+PiBbICAgIDYuNjEzNTA5XSBy YXc6IGZmZmZlYTAwMDQyMDg1MjAgZmZmZjg4MDEwYjAwMTY4MCBmZmZmODgwMTBiMDAyY2MwCj4+ Pj4+IDAwMDAwMDAwMDAwMDAwMDAKPj4+Pj4gWyAgICA2LjYxMzUwOV0gcGFnZSBkdW1wZWQgYmVj YXVzZToga2FzYW46IGJhZCBhY2Nlc3MgZGV0ZWN0ZWQKPj4+Pj4gWyAgICA2LjYxMzUwOV0KPj4+ Pj4gWyAgICA2LjYxMzUwOV0gTWVtb3J5IHN0YXRlIGFyb3VuZCB0aGUgYnVnZ3kgYWRkcmVzczoK Pj4+Pj4gWyAgICA2LjYxMzUwOV0gIGZmZmY4ODAxMDdkNGRiMDA6IGZjIDAwIDAwIDAwIDAwIDAw IDAwIDAwIDAwIDAwIDAwIDAwCj4+Pj4+IDAwIDAwIDAwIDAwCj4+Pj4+IFsgICAgNi42MTM1MDld ICBmZmZmODgwMTA3ZDRkYjgwOiAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMAo+ Pj4+PiAwMCAwMCAwMCAwMAo+Pj4+PiBbICAgIDYuNjEzNTA5XSA+ZmZmZjg4MDEwN2Q0ZGMwMDog MDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgZmMgZmMgZmMKPj4+Pj4gZmMgZmMgZmMgZmMKPj4+ Pj4gWyAgICA2LjYxMzUwOV0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIF4KPj4+Pj4gWyAgICA2LjYxMzUwOV0gIGZmZmY4ODAxMDdkNGRjODA6IGZj IGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjCj4+Pj4+IGZjIGZjIGZjIGZjCj4+Pj4+ IFsgICAgNi42MTM1MDldICBmZmZmODgwMTA3ZDRkZDAwOiBmYyBmYyBmYyBmYyBmYyBmYyBmYyBm YyBmYyBmYyBmYyBmYwo+Pj4+PiBmYyBmYyBmYyBmYwo+Pj4+PiBbICAgIDYuNjEzNTA5XQo+Pj4+ PiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KPj4+Pj4KPj4+Pj4gRml4ZXM6IDUxZjc0MTUwMzlkNCAoImRybS9hbWQvYW1k Z3B1OiBjcmVhdGluZyB0d28gSTJTIGluc3RhbmNlcyBmb3IKPj4+Pj4gc3RvbmV5L2N6IikKPj4+ Pj4gU2lnbmVkLW9mZi1ieTogRGFuaWVsIEt1cnR6IDxkamt1cnR6QGNocm9taXVtLm9yZz4KPj4+ Pgo+Pj4+IEFja2VkLWJ5OiBBa3NodSBBZ3Jhd2FsIDxha3NodS5hZ3Jhd2FsQGFtZC5jb20+Cj4+ Pgo+Pj4KPj4+Cj4+PiBXYXMgdGhpcyBwYXRjaCBldmVyIHBpY2tlZCB1cD8gIEkgY2FuJ3QgZmlu ZCBpdCBpbiBhZ2Q1Zi9saW51eC4KPj4KPj4KPj4gSXQgd2Fzbid0IGFwcGxpZWQuICBJIGRvbid0 IHNlZSA1MWY3NDE1MDM5ZDQgKCJkcm0vYW1kL2FtZGdwdToKPj4gY3JlYXRpbmcgdHdvIEkyUyBp bnN0YW5jZXMgZm9yIHN0b25leS9jeiIpIHVwc3RyZWFtIHlldCBlaXRoZXIuCj4+IERhbmllbCwg VmlqZW5kYXIsIHdoaWNoIG9uZXMgZG8geW91IHdhbnQgYXBwbGllZD8gIENhbiB5b3Ugc2VuZCBt ZSB0aGUKPj4gcGF0Y2hlcz8KPj4KPj4gQWxleAo+Cj4KPiBIaSBBbGV4LAo+Cj4gImRybS9hbWQv YW1kZ3B1OiBjcmVhdGluZyB0d28gSTJTIGluc3RhbmNlcyBmb3Igc3RvbmV5L2N6IiBwYXRjaCBl eGlzdHMgaW4KPiBkcm0tbmV4dCBicmFuY2guIFBsZWFzZSBwaWNrIHRoZSBwYXRjaCAuCgpTbyBq dXN0IHRoYXQgb25lPyAgSSBzZWVtIHRvIHJlY2FsbCB0aGVyZSBiZWluZyBsYXRlciByZXZpc2lv bnMgb2YKdGhhdCBwYXRjaCB0aGF0IHlvdSByZXdvcmtlZCBhZnRlciBhcHBseWluZyB0aGUgb3Jp Z2luYWwgdmVyc2lvbi4KQWxzbyB0aGF0IHBhdGNoIHdhcyBvcmlnaW5hbGx5IHBhcnQgb2YgYSBs YXJnZXIgc2VyaWVzLiAgQXJlIHRob3NlCmNoYW5nZXMgcmVxdWlyZWQgdG9vPwoKQWxleAoKPgo+ IFRoYW5rcywKPiBWaWplbmRhcgo+Cj4KPj4KPj4+Cj4+PiBUaGFua3MsCj4+PiAtRGFuCj4+PiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+Pj4gZHJpLWRl dmVsIG1haWxpbmcgbGlzdAo+Pj4gZHJpLWRldmVsQGxpc3RzLmZyZWVkZXNrdG9wLm9yZwo+Pj4g aHR0cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9kcmktZGV2ZWwK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KYW1kLWdmeCBt YWlsaW5nIGxpc3QKYW1kLWdmeEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0cHM6Ly9saXN0cy5m cmVlZGVza3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9hbWQtZ2Z4Cg==