From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-15.5 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,NICE_REPLY_A,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D1740C2B9F4 for ; Thu, 17 Jun 2021 08:09:56 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id AF29861209 for ; Thu, 17 Jun 2021 08:09:56 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230197AbhFQILp (ORCPT ); Thu, 17 Jun 2021 04:11:45 -0400 Received: from relay7-d.mail.gandi.net ([217.70.183.200]:52489 "EHLO relay7-d.mail.gandi.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229716AbhFQILn (ORCPT ); Thu, 17 Jun 2021 04:11:43 -0400 Received: (Authenticated sender: alex@ghiti.fr) by relay7-d.mail.gandi.net (Postfix) with ESMTPSA id 4B98A20017; Thu, 17 Jun 2021 08:09:23 +0000 (UTC) Subject: Re: [PATCH] riscv: Ensure BPF_JIT_REGION_START aligned with PMD size To: Palmer Dabbelt , jszhang3@mail.ustc.edu.cn Cc: schwab@linux-m68k.org, Paul Walmsley , aou@eecs.berkeley.edu, ryabinin.a.a@gmail.com, glider@google.com, andreyknvl@gmail.com, dvyukov@google.com, bjorn@kernel.org, ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, kafai@fb.com, songliubraving@fb.com, yhs@fb.com, john.fastabend@gmail.com, kpsingh@kernel.org, luke.r.nels@gmail.com, xi.wang@gmail.com, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, kasan-dev@googlegroups.com, netdev@vger.kernel.org, bpf@vger.kernel.org References: From: Alex Ghiti Message-ID: Date: Thu, 17 Jun 2021 10:09:22 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Le 17/06/2021 à 09:30, Palmer Dabbelt a écrit : > On Tue, 15 Jun 2021 17:03:28 PDT (-0700), jszhang3@mail.ustc.edu.cn wrote: >> On Tue, 15 Jun 2021 20:54:19 +0200 >> Alex Ghiti wrote: >> >>> Hi Jisheng, >> >> Hi Alex, >> >>> >>> Le 14/06/2021 à 18:49, Jisheng Zhang a écrit : >>> > From: Jisheng Zhang >>> > > Andreas reported commit fc8504765ec5 ("riscv: bpf: Avoid breaking >>> W^X") >>> > breaks booting with one kind of config file, I reproduced a kernel >>> panic >>> > with the config: >>> > > [    0.138553] Unable to handle kernel paging request at virtual >>> address ffffffff81201220 >>> > [    0.139159] Oops [#1] >>> > [    0.139303] Modules linked in: >>> > [    0.139601] CPU: 0 PID: 1 Comm: swapper/0 Not tainted >>> 5.13.0-rc5-default+ #1 >>> > [    0.139934] Hardware name: riscv-virtio,qemu (DT) >>> > [    0.140193] epc : __memset+0xc4/0xfc >>> > [    0.140416]  ra : skb_flow_dissector_init+0x1e/0x82 >>> > [    0.140609] epc : ffffffff8029806c ra : ffffffff8033be78 sp : >>> ffffffe001647da0 >>> > [    0.140878]  gp : ffffffff81134b08 tp : ffffffe001654380 t0 : >>> ffffffff81201158 >>> > [    0.141156]  t1 : 0000000000000002 t2 : 0000000000000154 s0 : >>> ffffffe001647dd0 >>> > [    0.141424]  s1 : ffffffff80a43250 a0 : ffffffff81201220 a1 : >>> 0000000000000000 >>> > [    0.141654]  a2 : 000000000000003c a3 : ffffffff81201258 a4 : >>> 0000000000000064 >>> > [    0.141893]  a5 : ffffffff8029806c a6 : 0000000000000040 a7 : >>> ffffffffffffffff >>> > [    0.142126]  s2 : ffffffff81201220 s3 : 0000000000000009 s4 : >>> ffffffff81135088 >>> > [    0.142353]  s5 : ffffffff81135038 s6 : ffffffff8080ce80 s7 : >>> ffffffff80800438 >>> > [    0.142584]  s8 : ffffffff80bc6578 s9 : 0000000000000008 s10: >>> ffffffff806000ac >>> > [    0.142810]  s11: 0000000000000000 t3 : fffffffffffffffc t4 : >>> 0000000000000000 >>> > [    0.143042]  t5 : 0000000000000155 t6 : 00000000000003ff >>> > [    0.143220] status: 0000000000000120 badaddr: ffffffff81201220 >>> cause: 000000000000000f >>> > [    0.143560] [] __memset+0xc4/0xfc >>> > [    0.143859] [] >>> init_default_flow_dissectors+0x22/0x60 >>> > [    0.144092] [] do_one_initcall+0x3e/0x168 >>> > [    0.144278] [] kernel_init_freeable+0x1c8/0x224 >>> > [    0.144479] [] kernel_init+0x12/0x110 >>> > [    0.144658] [] ret_from_exception+0x0/0xc >>> > [    0.145124] ---[ end trace f1e9643daa46d591 ]--- >>> > > After some investigation, I think I found the root cause: commit >>> > 2bfc6cd81bd ("move kernel mapping outside of linear mapping") moves >>> > BPF JIT region after the kernel: >>> > > The &_end is unlikely aligned with PMD size, so the front bpf jit >>> > region sits with part of kernel .data section in one PMD size mapping. >>> > But kernel is mapped in PMD SIZE, when bpf_jit_binary_lock_ro() is >>> > called to make the first bpf jit prog ROX, we will make part of kernel >>> > .data section RO too, so when we write to, for example memset the >>> > .data section, MMU will trigger a store page fault. >>> Good catch, we make sure no physical allocation happens between _end >>> and the next PMD aligned address, but I missed this one. >>> >>> > > To fix the issue, we need to ensure the BPF JIT region is PMD size >>> > aligned. This patch acchieve this goal by restoring the BPF JIT region >>> > to original position, I.E the 128MB before kernel .text section. >>> But I disagree with your solution: I made sure modules and BPF >>> programs get their own virtual regions to avoid worst case scenario >>> where one could allocate all the space and leave nothing to the other >>> (we are limited to +- 2GB offset). Why don't just align >>> BPF_JIT_REGION_START to the next PMD aligned address? >> >> Originally, I planed to fix the issue by aligning >> BPF_JIT_REGION_START, but >> IIRC, BPF experts are adding (or have added) "Calling kernel functions >> from BPF" >> feature, there's a risk that BPF JIT region is beyond the 2GB of >> module region: >> >> ------ >> module >> ------ >> kernel >> ------ >> BPF_JIT >> >> So I made this patch finally. In this patch, we let BPF JIT region sit >> between module and kernel. >> >> To address "make sure modules and BPF programs get their own virtual >> regions", >> what about something as below (applied against this patch)? >> >> diff --git a/arch/riscv/include/asm/pgtable.h >> b/arch/riscv/include/asm/pgtable.h >> index 380cd3a7e548..da1158f10b09 100644 >> --- a/arch/riscv/include/asm/pgtable.h >> +++ b/arch/riscv/include/asm/pgtable.h >> @@ -31,7 +31,7 @@ >>  #define BPF_JIT_REGION_SIZE    (SZ_128M) >>  #ifdef CONFIG_64BIT >>  #define BPF_JIT_REGION_START    (BPF_JIT_REGION_END - >> BPF_JIT_REGION_SIZE) >> -#define BPF_JIT_REGION_END    (MODULES_END) >> +#define BPF_JIT_REGION_END    (PFN_ALIGN((unsigned long)&_start)) >>  #else >>  #define BPF_JIT_REGION_START    (PAGE_OFFSET - BPF_JIT_REGION_SIZE) >>  #define BPF_JIT_REGION_END    (VMALLOC_END) >> @@ -40,7 +40,7 @@ >>  /* Modules always live before the kernel */ >>  #ifdef CONFIG_64BIT >>  #define MODULES_VADDR    (PFN_ALIGN((unsigned long)&_end) - SZ_2G) >> -#define MODULES_END    (PFN_ALIGN((unsigned long)&_start)) >> +#define MODULES_END    (BPF_JIT_REGION_END) >>  #endif >> >> >> >>> >>> Again, good catch, thanks, >>> >>> Alex >>> >>> > > Reported-by: Andreas Schwab >>> > Signed-off-by: Jisheng Zhang >>> > --- >>> >   arch/riscv/include/asm/pgtable.h | 5 ++--- >>> >   1 file changed, 2 insertions(+), 3 deletions(-) >>> > > diff --git a/arch/riscv/include/asm/pgtable.h >>> b/arch/riscv/include/asm/pgtable.h >>> > index 9469f464e71a..380cd3a7e548 100644 >>> > --- a/arch/riscv/include/asm/pgtable.h >>> > +++ b/arch/riscv/include/asm/pgtable.h >>> > @@ -30,9 +30,8 @@ >>> > >   #define BPF_JIT_REGION_SIZE    (SZ_128M) >>> >   #ifdef CONFIG_64BIT >>> > -/* KASLR should leave at least 128MB for BPF after the kernel */ >>> > -#define BPF_JIT_REGION_START    PFN_ALIGN((unsigned long)&_end) >>> > -#define BPF_JIT_REGION_END    (BPF_JIT_REGION_START + >>> BPF_JIT_REGION_SIZE) >>> > +#define BPF_JIT_REGION_START    (BPF_JIT_REGION_END - >>> BPF_JIT_REGION_SIZE) >>> > +#define BPF_JIT_REGION_END    (MODULES_END) >>> >   #else >>> >   #define BPF_JIT_REGION_START    (PAGE_OFFSET - BPF_JIT_REGION_SIZE) >>> >   #define BPF_JIT_REGION_END    (VMALLOC_END) >>> > > > This, when applied onto fixes, is breaking early boot on KASAN > configurations for me. Not surprising, I took a shortcut when initializing KASAN for modules, kernel and BPF: kasan_populate(kasan_mem_to_shadow((const void *)MODULES_VADDR), kasan_mem_to_shadow((const void *)BPF_JIT_REGION_END)); The kernel is then not covered, I'm taking a look at how to fix that properly. > > _______________________________________________ > linux-riscv mailing list > linux-riscv@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/linux-riscv From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-15.7 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER, INCLUDES_PATCH,MAILING_LIST_MULTI,NICE_REPLY_A,SPF_HELO_NONE,SPF_PASS, USER_AGENT_SANE_1 autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id CF1A3C49361 for ; Thu, 17 Jun 2021 08:09:57 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 8856E6117A for ; Thu, 17 Jun 2021 08:09:57 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 8856E6117A Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=ghiti.fr Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:Content-Type: Content-Transfer-Encoding:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:Date:Message-ID:From: References:Cc:To:Subject:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=5tiHxojK8JfRHzXNMipjUN0imRjfQa3Hj+0TH99x6zg=; b=t+vGBE5YbwHcbBtcJw2oec93Al Ug6ak6MY6XgNdU6j2jY5qgK2/CMbn/llo7Bmzu5ljBkO3y5ZJsNNcN+0RtB6CMIWKCjC5vgMU/oTn zVYfUu1yEBqVTqnP4rKlMC2FZLyUxv9FmCZZdgFKLWoRjX1CGuOwhwW3xn8NKP5w6Uec9OklwittB KRry4B6ifJKBp5kpybfFb1MqC68JP/PN+yXNJtsUEU93v1Q6jqxogN8p9ilkDl/E8/xCoElpDrYM4 Np8IMYF5f7XaLJ5ONsESTgWIgaCGOsvPaZT04zF2V/ISoYVCwp6QJJSwvrpIVzYYsG5mnjOrbtl30 AXpI/ASg==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.94.2 #2 (Red Hat Linux)) id 1ltn5q-009R2K-1L; Thu, 17 Jun 2021 08:09:42 +0000 Received: from relay7-d.mail.gandi.net ([217.70.183.200]) by bombadil.infradead.org with esmtps (Exim 4.94.2 #2 (Red Hat Linux)) id 1ltn5k-009R0j-Pr for linux-riscv@lists.infradead.org; Thu, 17 Jun 2021 08:09:40 +0000 Received: (Authenticated sender: alex@ghiti.fr) by relay7-d.mail.gandi.net (Postfix) with ESMTPSA id 4B98A20017; Thu, 17 Jun 2021 08:09:23 +0000 (UTC) Subject: Re: [PATCH] riscv: Ensure BPF_JIT_REGION_START aligned with PMD size To: Palmer Dabbelt , jszhang3@mail.ustc.edu.cn Cc: schwab@linux-m68k.org, Paul Walmsley , aou@eecs.berkeley.edu, ryabinin.a.a@gmail.com, glider@google.com, andreyknvl@gmail.com, dvyukov@google.com, bjorn@kernel.org, ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, kafai@fb.com, songliubraving@fb.com, yhs@fb.com, john.fastabend@gmail.com, kpsingh@kernel.org, luke.r.nels@gmail.com, xi.wang@gmail.com, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, kasan-dev@googlegroups.com, netdev@vger.kernel.org, bpf@vger.kernel.org References: From: Alex Ghiti Message-ID: Date: Thu, 17 Jun 2021 10:09:22 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: Content-Language: fr X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210617_010937_161013_1DB87D05 X-CRM114-Status: GOOD ( 30.13 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org TGUgMTcvMDYvMjAyMSDDoCAwOTozMCwgUGFsbWVyIERhYmJlbHQgYSDDqWNyaXTCoDoKPiBPbiBU dWUsIDE1IEp1biAyMDIxIDE3OjAzOjI4IFBEVCAoLTA3MDApLCBqc3poYW5nM0BtYWlsLnVzdGMu ZWR1LmNuIHdyb3RlOgo+PiBPbiBUdWUsIDE1IEp1biAyMDIxIDIwOjU0OjE5ICswMjAwCj4+IEFs ZXggR2hpdGkgPGFsZXhAZ2hpdGkuZnI+IHdyb3RlOgo+Pgo+Pj4gSGkgSmlzaGVuZywKPj4KPj4g SGkgQWxleCwKPj4KPj4+Cj4+PiBMZSAxNC8wNi8yMDIxIMOgIDE4OjQ5LCBKaXNoZW5nIFpoYW5n IGEgw6ljcml0wqA6Cj4+PiA+IEZyb206IEppc2hlbmcgWmhhbmcgPGpzemhhbmdAa2VybmVsLm9y Zz4KPj4+ID4gPiBBbmRyZWFzIHJlcG9ydGVkIGNvbW1pdCBmYzg1MDQ3NjVlYzUgKCJyaXNjdjog YnBmOiBBdm9pZCBicmVha2luZyAKPj4+IFdeWCIpCj4+PiA+IGJyZWFrcyBib290aW5nIHdpdGgg b25lIGtpbmQgb2YgY29uZmlnIGZpbGUsIEkgcmVwcm9kdWNlZCBhIGtlcm5lbCAKPj4+IHBhbmlj Cj4+PiA+IHdpdGggdGhlIGNvbmZpZzoKPj4+ID4gPiBbwqDCoMKgIDAuMTM4NTUzXSBVbmFibGUg dG8gaGFuZGxlIGtlcm5lbCBwYWdpbmcgcmVxdWVzdCBhdCB2aXJ0dWFsIAo+Pj4gYWRkcmVzcyBm ZmZmZmZmZjgxMjAxMjIwCj4+PiA+IFvCoMKgwqAgMC4xMzkxNTldIE9vcHMgWyMxXQo+Pj4gPiBb wqDCoMKgIDAuMTM5MzAzXSBNb2R1bGVzIGxpbmtlZCBpbjoKPj4+ID4gW8KgwqDCoCAwLjEzOTYw MV0gQ1BVOiAwIFBJRDogMSBDb21tOiBzd2FwcGVyLzAgTm90IHRhaW50ZWQgCj4+PiA1LjEzLjAt cmM1LWRlZmF1bHQrICMxCj4+PiA+IFvCoMKgwqAgMC4xMzk5MzRdIEhhcmR3YXJlIG5hbWU6IHJp c2N2LXZpcnRpbyxxZW11IChEVCkKPj4+ID4gW8KgwqDCoCAwLjE0MDE5M10gZXBjIDogX19tZW1z ZXQrMHhjNC8weGZjCj4+PiA+IFvCoMKgwqAgMC4xNDA0MTZdwqAgcmEgOiBza2JfZmxvd19kaXNz ZWN0b3JfaW5pdCsweDFlLzB4ODIKPj4+ID4gW8KgwqDCoCAwLjE0MDYwOV0gZXBjIDogZmZmZmZm ZmY4MDI5ODA2YyByYSA6IGZmZmZmZmZmODAzM2JlNzggc3AgOiAKPj4+IGZmZmZmZmUwMDE2NDdk YTAKPj4+ID4gW8KgwqDCoCAwLjE0MDg3OF3CoCBncCA6IGZmZmZmZmZmODExMzRiMDggdHAgOiBm ZmZmZmZlMDAxNjU0MzgwIHQwIDogCj4+PiBmZmZmZmZmZjgxMjAxMTU4Cj4+PiA+IFvCoMKgwqAg MC4xNDExNTZdwqAgdDEgOiAwMDAwMDAwMDAwMDAwMDAyIHQyIDogMDAwMDAwMDAwMDAwMDE1NCBz MCA6IAo+Pj4gZmZmZmZmZTAwMTY0N2RkMAo+Pj4gPiBbwqDCoMKgIDAuMTQxNDI0XcKgIHMxIDog ZmZmZmZmZmY4MGE0MzI1MCBhMCA6IGZmZmZmZmZmODEyMDEyMjAgYTEgOiAKPj4+IDAwMDAwMDAw MDAwMDAwMDAKPj4+ID4gW8KgwqDCoCAwLjE0MTY1NF3CoCBhMiA6IDAwMDAwMDAwMDAwMDAwM2Mg YTMgOiBmZmZmZmZmZjgxMjAxMjU4IGE0IDogCj4+PiAwMDAwMDAwMDAwMDAwMDY0Cj4+PiA+IFvC oMKgwqAgMC4xNDE4OTNdwqAgYTUgOiBmZmZmZmZmZjgwMjk4MDZjIGE2IDogMDAwMDAwMDAwMDAw MDA0MCBhNyA6IAo+Pj4gZmZmZmZmZmZmZmZmZmZmZgo+Pj4gPiBbwqDCoMKgIDAuMTQyMTI2XcKg IHMyIDogZmZmZmZmZmY4MTIwMTIyMCBzMyA6IDAwMDAwMDAwMDAwMDAwMDkgczQgOiAKPj4+IGZm ZmZmZmZmODExMzUwODgKPj4+ID4gW8KgwqDCoCAwLjE0MjM1M13CoCBzNSA6IGZmZmZmZmZmODEx MzUwMzggczYgOiBmZmZmZmZmZjgwODBjZTgwIHM3IDogCj4+PiBmZmZmZmZmZjgwODAwNDM4Cj4+ PiA+IFvCoMKgwqAgMC4xNDI1ODRdwqAgczggOiBmZmZmZmZmZjgwYmM2NTc4IHM5IDogMDAwMDAw MDAwMDAwMDAwOCBzMTA6IAo+Pj4gZmZmZmZmZmY4MDYwMDBhYwo+Pj4gPiBbwqDCoMKgIDAuMTQy ODEwXcKgIHMxMTogMDAwMDAwMDAwMDAwMDAwMCB0MyA6IGZmZmZmZmZmZmZmZmZmZmMgdDQgOiAK Pj4+IDAwMDAwMDAwMDAwMDAwMDAKPj4+ID4gW8KgwqDCoCAwLjE0MzA0Ml3CoCB0NSA6IDAwMDAw MDAwMDAwMDAxNTUgdDYgOiAwMDAwMDAwMDAwMDAwM2ZmCj4+PiA+IFvCoMKgwqAgMC4xNDMyMjBd IHN0YXR1czogMDAwMDAwMDAwMDAwMDEyMCBiYWRhZGRyOiBmZmZmZmZmZjgxMjAxMjIwIAo+Pj4g Y2F1c2U6IDAwMDAwMDAwMDAwMDAwMGYKPj4+ID4gW8KgwqDCoCAwLjE0MzU2MF0gWzxmZmZmZmZm ZjgwMjk4MDZjPl0gX19tZW1zZXQrMHhjNC8weGZjCj4+PiA+IFvCoMKgwqAgMC4xNDM4NTldIFs8 ZmZmZmZmZmY4MDYxZTk4ND5dIAo+Pj4gaW5pdF9kZWZhdWx0X2Zsb3dfZGlzc2VjdG9ycysweDIy LzB4NjAKPj4+ID4gW8KgwqDCoCAwLjE0NDA5Ml0gWzxmZmZmZmZmZjgwMDAxMGZjPl0gZG9fb25l X2luaXRjYWxsKzB4M2UvMHgxNjgKPj4+ID4gW8KgwqDCoCAwLjE0NDI3OF0gWzxmZmZmZmZmZjgw NjAwZGYwPl0ga2VybmVsX2luaXRfZnJlZWFibGUrMHgxYzgvMHgyMjQKPj4+ID4gW8KgwqDCoCAw LjE0NDQ3OV0gWzxmZmZmZmZmZjgwNDg2OGE4Pl0ga2VybmVsX2luaXQrMHgxMi8weDExMAo+Pj4g PiBbwqDCoMKgIDAuMTQ0NjU4XSBbPGZmZmZmZmZmODAwMDIyZGU+XSByZXRfZnJvbV9leGNlcHRp b24rMHgwLzB4Ywo+Pj4gPiBbwqDCoMKgIDAuMTQ1MTI0XSAtLS1bIGVuZCB0cmFjZSBmMWU5NjQz ZGFhNDZkNTkxIF0tLS0KPj4+ID4gPiBBZnRlciBzb21lIGludmVzdGlnYXRpb24sIEkgdGhpbmsg SSBmb3VuZCB0aGUgcm9vdCBjYXVzZTogY29tbWl0Cj4+PiA+IDJiZmM2Y2Q4MWJkICgibW92ZSBr ZXJuZWwgbWFwcGluZyBvdXRzaWRlIG9mIGxpbmVhciBtYXBwaW5nIikgbW92ZXMKPj4+ID4gQlBG IEpJVCByZWdpb24gYWZ0ZXIgdGhlIGtlcm5lbDoKPj4+ID4gPiBUaGUgJl9lbmQgaXMgdW5saWtl bHkgYWxpZ25lZCB3aXRoIFBNRCBzaXplLCBzbyB0aGUgZnJvbnQgYnBmIGppdAo+Pj4gPiByZWdp b24gc2l0cyB3aXRoIHBhcnQgb2Yga2VybmVsIC5kYXRhIHNlY3Rpb24gaW4gb25lIFBNRCBzaXpl IG1hcHBpbmcuCj4+PiA+IEJ1dCBrZXJuZWwgaXMgbWFwcGVkIGluIFBNRCBTSVpFLCB3aGVuIGJw Zl9qaXRfYmluYXJ5X2xvY2tfcm8oKSBpcwo+Pj4gPiBjYWxsZWQgdG8gbWFrZSB0aGUgZmlyc3Qg YnBmIGppdCBwcm9nIFJPWCwgd2Ugd2lsbCBtYWtlIHBhcnQgb2Yga2VybmVsCj4+PiA+IC5kYXRh IHNlY3Rpb24gUk8gdG9vLCBzbyB3aGVuIHdlIHdyaXRlIHRvLCBmb3IgZXhhbXBsZSBtZW1zZXQg dGhlCj4+PiA+IC5kYXRhIHNlY3Rpb24sIE1NVSB3aWxsIHRyaWdnZXIgYSBzdG9yZSBwYWdlIGZh dWx0Lgo+Pj4gR29vZCBjYXRjaCwgd2UgbWFrZSBzdXJlIG5vIHBoeXNpY2FsIGFsbG9jYXRpb24g aGFwcGVucyBiZXR3ZWVuIF9lbmQgCj4+PiBhbmQgdGhlIG5leHQgUE1EIGFsaWduZWQgYWRkcmVz cywgYnV0IEkgbWlzc2VkIHRoaXMgb25lLgo+Pj4KPj4+ID4gPiBUbyBmaXggdGhlIGlzc3VlLCB3 ZSBuZWVkIHRvIGVuc3VyZSB0aGUgQlBGIEpJVCByZWdpb24gaXMgUE1EIHNpemUKPj4+ID4gYWxp Z25lZC4gVGhpcyBwYXRjaCBhY2NoaWV2ZSB0aGlzIGdvYWwgYnkgcmVzdG9yaW5nIHRoZSBCUEYg SklUIHJlZ2lvbgo+Pj4gPiB0byBvcmlnaW5hbCBwb3NpdGlvbiwgSS5FIHRoZSAxMjhNQiBiZWZv cmUga2VybmVsIC50ZXh0IHNlY3Rpb24uCj4+PiBCdXQgSSBkaXNhZ3JlZSB3aXRoIHlvdXIgc29s dXRpb246IEkgbWFkZSBzdXJlIG1vZHVsZXMgYW5kIEJQRiAKPj4+IHByb2dyYW1zIGdldCB0aGVp ciBvd24gdmlydHVhbCByZWdpb25zIHRvIGF2b2lkIHdvcnN0IGNhc2Ugc2NlbmFyaW8gCj4+PiB3 aGVyZSBvbmUgY291bGQgYWxsb2NhdGUgYWxsIHRoZSBzcGFjZSBhbmQgbGVhdmUgbm90aGluZyB0 byB0aGUgb3RoZXIgCj4+PiAod2UgYXJlIGxpbWl0ZWQgdG8gKy0gMkdCIG9mZnNldCkuIFdoeSBk b24ndCBqdXN0IGFsaWduIAo+Pj4gQlBGX0pJVF9SRUdJT05fU1RBUlQgdG8gdGhlIG5leHQgUE1E IGFsaWduZWQgYWRkcmVzcz8KPj4KPj4gT3JpZ2luYWxseSwgSSBwbGFuZWQgdG8gZml4IHRoZSBp c3N1ZSBieSBhbGlnbmluZyAKPj4gQlBGX0pJVF9SRUdJT05fU1RBUlQsIGJ1dAo+PiBJSVJDLCBC UEYgZXhwZXJ0cyBhcmUgYWRkaW5nIChvciBoYXZlIGFkZGVkKSAiQ2FsbGluZyBrZXJuZWwgZnVu Y3Rpb25zIAo+PiBmcm9tIEJQRiIKPj4gZmVhdHVyZSwgdGhlcmUncyBhIHJpc2sgdGhhdCBCUEYg SklUIHJlZ2lvbiBpcyBiZXlvbmQgdGhlIDJHQiBvZiAKPj4gbW9kdWxlIHJlZ2lvbjoKPj4KPj4g LS0tLS0tCj4+IG1vZHVsZQo+PiAtLS0tLS0KPj4ga2VybmVsCj4+IC0tLS0tLQo+PiBCUEZfSklU Cj4+Cj4+IFNvIEkgbWFkZSB0aGlzIHBhdGNoIGZpbmFsbHkuIEluIHRoaXMgcGF0Y2gsIHdlIGxl dCBCUEYgSklUIHJlZ2lvbiBzaXQKPj4gYmV0d2VlbiBtb2R1bGUgYW5kIGtlcm5lbC4KPj4KPj4g VG8gYWRkcmVzcyAibWFrZSBzdXJlIG1vZHVsZXMgYW5kIEJQRiBwcm9ncmFtcyBnZXQgdGhlaXIg b3duIHZpcnR1YWwgCj4+IHJlZ2lvbnMiLAo+PiB3aGF0IGFib3V0IHNvbWV0aGluZyBhcyBiZWxv dyAoYXBwbGllZCBhZ2FpbnN0IHRoaXMgcGF0Y2gpPwo+Pgo+PiBkaWZmIC0tZ2l0IGEvYXJjaC9y aXNjdi9pbmNsdWRlL2FzbS9wZ3RhYmxlLmggCj4+IGIvYXJjaC9yaXNjdi9pbmNsdWRlL2FzbS9w Z3RhYmxlLmgKPj4gaW5kZXggMzgwY2QzYTdlNTQ4Li5kYTExNThmMTBiMDkgMTAwNjQ0Cj4+IC0t LSBhL2FyY2gvcmlzY3YvaW5jbHVkZS9hc20vcGd0YWJsZS5oCj4+ICsrKyBiL2FyY2gvcmlzY3Yv aW5jbHVkZS9hc20vcGd0YWJsZS5oCj4+IEBAIC0zMSw3ICszMSw3IEBACj4+IMKgI2RlZmluZSBC UEZfSklUX1JFR0lPTl9TSVpFwqDCoMKgIChTWl8xMjhNKQo+PiDCoCNpZmRlZiBDT05GSUdfNjRC SVQKPj4gwqAjZGVmaW5lIEJQRl9KSVRfUkVHSU9OX1NUQVJUwqDCoMKgIChCUEZfSklUX1JFR0lP Tl9FTkQgLSAKPj4gQlBGX0pJVF9SRUdJT05fU0laRSkKPj4gLSNkZWZpbmUgQlBGX0pJVF9SRUdJ T05fRU5EwqDCoMKgIChNT0RVTEVTX0VORCkKPj4gKyNkZWZpbmUgQlBGX0pJVF9SRUdJT05fRU5E wqDCoMKgIChQRk5fQUxJR04oKHVuc2lnbmVkIGxvbmcpJl9zdGFydCkpCj4+IMKgI2Vsc2UKPj4g wqAjZGVmaW5lIEJQRl9KSVRfUkVHSU9OX1NUQVJUwqDCoMKgIChQQUdFX09GRlNFVCAtIEJQRl9K SVRfUkVHSU9OX1NJWkUpCj4+IMKgI2RlZmluZSBCUEZfSklUX1JFR0lPTl9FTkTCoMKgwqAgKFZN QUxMT0NfRU5EKQo+PiBAQCAtNDAsNyArNDAsNyBAQAo+PiDCoC8qIE1vZHVsZXMgYWx3YXlzIGxp dmUgYmVmb3JlIHRoZSBrZXJuZWwgKi8KPj4gwqAjaWZkZWYgQ09ORklHXzY0QklUCj4+IMKgI2Rl ZmluZSBNT0RVTEVTX1ZBRERSwqDCoMKgIChQRk5fQUxJR04oKHVuc2lnbmVkIGxvbmcpJl9lbmQp IC0gU1pfMkcpCj4+IC0jZGVmaW5lIE1PRFVMRVNfRU5EwqDCoMKgIChQRk5fQUxJR04oKHVuc2ln bmVkIGxvbmcpJl9zdGFydCkpCj4+ICsjZGVmaW5lIE1PRFVMRVNfRU5EwqDCoMKgIChCUEZfSklU X1JFR0lPTl9FTkQpCj4+IMKgI2VuZGlmCj4+Cj4+Cj4+Cj4+Pgo+Pj4gQWdhaW4sIGdvb2QgY2F0 Y2gsIHRoYW5rcywKPj4+Cj4+PiBBbGV4Cj4+Pgo+Pj4gPiA+IFJlcG9ydGVkLWJ5OiBBbmRyZWFz IFNjaHdhYiA8c2Nod2FiQGxpbnV4LW02OGsub3JnPgo+Pj4gPiBTaWduZWQtb2ZmLWJ5OiBKaXNo ZW5nIFpoYW5nIDxqc3poYW5nQGtlcm5lbC5vcmc+Cj4+PiA+IC0tLQo+Pj4gPsKgwqAgYXJjaC9y aXNjdi9pbmNsdWRlL2FzbS9wZ3RhYmxlLmggfCA1ICsrLS0tCj4+PiA+wqDCoCAxIGZpbGUgY2hh bmdlZCwgMiBpbnNlcnRpb25zKCspLCAzIGRlbGV0aW9ucygtKQo+Pj4gPiA+IGRpZmYgLS1naXQg YS9hcmNoL3Jpc2N2L2luY2x1ZGUvYXNtL3BndGFibGUuaCAKPj4+IGIvYXJjaC9yaXNjdi9pbmNs dWRlL2FzbS9wZ3RhYmxlLmgKPj4+ID4gaW5kZXggOTQ2OWY0NjRlNzFhLi4zODBjZDNhN2U1NDgg MTAwNjQ0Cj4+PiA+IC0tLSBhL2FyY2gvcmlzY3YvaW5jbHVkZS9hc20vcGd0YWJsZS5oCj4+PiA+ ICsrKyBiL2FyY2gvcmlzY3YvaW5jbHVkZS9hc20vcGd0YWJsZS5oCj4+PiA+IEBAIC0zMCw5ICsz MCw4IEBACj4+PiA+ID7CoMKgICNkZWZpbmUgQlBGX0pJVF9SRUdJT05fU0laRcKgwqDCoCAoU1pf MTI4TSkKPj4+ID7CoMKgICNpZmRlZiBDT05GSUdfNjRCSVQKPj4+ID4gLS8qIEtBU0xSIHNob3Vs ZCBsZWF2ZSBhdCBsZWFzdCAxMjhNQiBmb3IgQlBGIGFmdGVyIHRoZSBrZXJuZWwgKi8KPj4+ID4g LSNkZWZpbmUgQlBGX0pJVF9SRUdJT05fU1RBUlTCoMKgwqAgUEZOX0FMSUdOKCh1bnNpZ25lZCBs b25nKSZfZW5kKQo+Pj4gPiAtI2RlZmluZSBCUEZfSklUX1JFR0lPTl9FTkTCoMKgwqAgKEJQRl9K SVRfUkVHSU9OX1NUQVJUICsgCj4+PiBCUEZfSklUX1JFR0lPTl9TSVpFKQo+Pj4gPiArI2RlZmlu ZSBCUEZfSklUX1JFR0lPTl9TVEFSVMKgwqDCoCAoQlBGX0pJVF9SRUdJT05fRU5EIC0gCj4+PiBC UEZfSklUX1JFR0lPTl9TSVpFKQo+Pj4gPiArI2RlZmluZSBCUEZfSklUX1JFR0lPTl9FTkTCoMKg wqAgKE1PRFVMRVNfRU5EKQo+Pj4gPsKgwqAgI2Vsc2UKPj4+ID7CoMKgICNkZWZpbmUgQlBGX0pJ VF9SRUdJT05fU1RBUlTCoMKgwqAgKFBBR0VfT0ZGU0VUIC0gQlBGX0pJVF9SRUdJT05fU0laRSkK Pj4+ID7CoMKgICNkZWZpbmUgQlBGX0pJVF9SRUdJT05fRU5EwqDCoMKgIChWTUFMTE9DX0VORCkK Pj4+ID4gCj4gCj4gVGhpcywgd2hlbiBhcHBsaWVkIG9udG8gZml4ZXMsIGlzIGJyZWFraW5nIGVh cmx5IGJvb3Qgb24gS0FTQU4gCj4gY29uZmlndXJhdGlvbnMgZm9yIG1lLgoKTm90IHN1cnByaXNp bmcsIEkgdG9vayBhIHNob3J0Y3V0IHdoZW4gaW5pdGlhbGl6aW5nIEtBU0FOIGZvciBtb2R1bGVz LCAKa2VybmVsIGFuZCBCUEY6CgogICAgICAgICBrYXNhbl9wb3B1bGF0ZShrYXNhbl9tZW1fdG9f c2hhZG93KChjb25zdCB2b2lkICopTU9EVUxFU19WQUREUiksCiAgICAgICAgICAgICAgICAgICAg ICAgIGthc2FuX21lbV90b19zaGFkb3coKGNvbnN0IHZvaWQgCiopQlBGX0pJVF9SRUdJT05fRU5E KSk7CgpUaGUga2VybmVsIGlzIHRoZW4gbm90IGNvdmVyZWQsIEknbSB0YWtpbmcgYSBsb29rIGF0 IGhvdyB0byBmaXggdGhhdCAKcHJvcGVybHkuCgo+IAo+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fCj4gbGludXgtcmlzY3YgbWFpbGluZyBsaXN0Cj4gbGlu dXgtcmlzY3ZAbGlzdHMuaW5mcmFkZWFkLm9yZwo+IGh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3Jn L21haWxtYW4vbGlzdGluZm8vbGludXgtcmlzY3YKCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fCmxpbnV4LXJpc2N2IG1haWxpbmcgbGlzdApsaW51eC1yaXNj dkBsaXN0cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3JnL21haWxtYW4v bGlzdGluZm8vbGludXgtcmlzY3YK