272835 2023-07-31 07:49:21 +0000 kinit(8) segmentation fault with openssl-3.0 in CURRENT 2024-04-03 19:25:25 +0000 1 1 1 Unclassified Base System bin CURRENT Any Any Closed FIXED https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277650 --- Affects Some People --- 275215 1 Joerg.Pulz cy bsd emaste ivy netchild pierre security-officer oldest_to_newest 1268315 0 Joerg.Pulz 2023-07-31 07:49:21 +0000 kinit(8) segfaults after my recent upgrade to CURRENT with OpenSSL-3.0 - FreeBSD 14.0-CURRENT amd64 1400093 #0 main-n264294-09e5d91069d1 Looking at the core dump it happens here: frame #1: 0x000032ea670715c8 libkrb5.so.11`ARCFOUR_string_to_key(context=0x000051189c638000, enctype=KRB5_ENCTYPE_ARCFOUR_HMAC_MD5, password=<unavailable>, salt=krb5_salt @ 0x000032ea64595c30, opaque=<unavailable>, key=0x000051189c6b7fc0) at salt-arcfour.c:84:2 Looking at crypto/heimdal/lib/krb5/salt-arcfour.c it happens when calling openssl's EVP_DigestUpdate(): /* LE encoding */ for (i = 0; i < len; i++) { unsigned char p; p = (s[i] & 0xff); -> EVP_DigestUpdate (m, &p, 1); p = (s[i] >> 8) & 0xff; EVP_DigestUpdate (m, &p, 1); } Running from lldb(1) it seems that I end in crypto/openssl/crypto/evp/digest.c in EVP_DigestUpdate() in line 412: 410 /* Code below to be removed when legacy support is dropped. */ 411 legacy: 412 return ctx->update(ctx, data, count); Here ctx->update() is causing the segmentation fault. I'm not an openssl expert and have no clue what ctx->update should be and where it is coming from, so I'm at the end of the road here. 1284363 1 246375 Joerg.Pulz 2023-11-17 17:13:06 +0000 Created attachment 246375 patch to fix base heimdal with openssl-3.x Found some time to do further research. rc4 and other weak crypto is covered by the OpenSSL legacy provider which is not loaded by default. Adding the missing parts to explicitly load the legacy provider at the right places fixes this PR. Changes in crypto/heimdal/lib/krb5/salt.c make kinit(8) work. Changes in crypto/heimdal/lib/krb5/crypto.c make using the TGT and obtaining service tickets work. Would be nice to see this in the tree and MFC'd to 14. 1284435 2 Joerg.Pulz 2023-11-18 06:34:24 +0000 There is an easier solution without changing the code at all. Just modify /etc/ssl/openssl.cnf to make the specific section look like this: ##### [provider_sect] default = default_sect legacy = legacy_sect [default_sect] activate = 1 [legacy_sect] activate = 1 ##### This will (re)enable the default disabled legacy provider in OpenSSL 3.x. One could argue to either make this default or at least add a hint in UPDATING. 1284945 3 246458 Joerg.Pulz 2023-11-21 09:24:54 +0000 Created attachment 246458 patch to fix base heimdal and weak enctypes with base openssl-3.0.x v2 After thinking some more about this I propose we should fix this. If we ship heimdal with weak enctypes enabled (what we do) it should work out of the box. This can be achieved in two ways: 1) Modify the code so heimdal is loading the required OpenSSL legacy providers by itself - see the attached patch. 2) Modify the default OpenSSL configuration (/etc/ssl/openssl.cnf) we ship as mentioned in my previous comment. New versions of heimdal make use of heimdal's own md4/rc4 implementations in lib/hcrypto. As this is not in our tree (see crypto/heimdal/FREEBSD-Xlist) it's not an option. 1284946 4 Joerg.Pulz 2023-11-21 09:27:02 +0000 Re-open 1287100 5 netchild 2023-12-06 08:22:30 +0000 Cy, I can confirm this bug (and have the same backtrace on kadmin -l add). I will try the patch for src (which looks more sensible than enabling the legacy provider in openssl.cnf) and report back. We have this issue in 14 and -current. It may justify an EN... 1287103 6 netchild 2023-12-06 08:49:09 +0000 The patch is not enough to make kadmin work. A quick try with patching kadmin.c didn't help: modified: crypto/heimdal/kadmin/kadmin.c modified: crypto/heimdal/lib/krb5/crypto.c modified: crypto/heimdal/lib/krb5/salt.c modified: kerberos5/include/crypto-headers.h A quick check with a change to openssl.cnf makes kadmin -l add work. So this is the right track, but the patch is not a complete fix. 1287106 7 netchild 2023-12-06 09:44:44 +0000 I didn't check if all the necessary includes are available in kadmin.c, adding the call without the #ifdef makes kadmin work. I didn't check other programs (like kpasswd). 1287107 8 Joerg.Pulz 2023-12-06 09:56:29 +0000 (In reply to Alexander Leidinger from comment #6) You're completely right here. The patch is far from complete and only tested for kinit(8). A fix for kadmin(8) probably has to be made somewhere in crypto/heimdal/lib/kadm5/ - I didn't looked deep into it. Additionally, the patch definitely misses OSSL_PROVIDER_unload(). Without it we at least leak the providers reference counter. Further modifications to our "ancient" base heimdal does not seem reasonable as the time spent with it could better be used to start updating base heimdal to a recent version. As already mentioned in comment #3, heimdal itself switched to it's builtin hcrypto functions for 1DES/RC2/RC4 in the OpenSSL-3.x case. This should be taken into account for a future MFV as the whole hcrypto/ directory is currently excluded. For now, the easiest way to solve our problem would be the modification of openssl.cnf. 1287139 9 cy 2023-12-06 15:32:46 +0000 (In reply to Joerg Pulz from comment #2) We should avoid this as it adds technical debt by encouraging the use of other old software. 1287148 10 cy 2023-12-06 17:39:01 +0000 I think more than kadmin and kpasswd need to be looked at. I suspect kdc will also segfault with a KDC DB encoded using weak ciphers. I will the jail used to fix the various bugs reported by rtm@mit. 1287150 11 cy 2023-12-06 17:56:43 +0000 Just set up a clean jail previously used for rtm@mit bugs. kadmin segfaults. rm -rf /var/heimdal/* kstash --random-key kadmin -l kadmin> init EXAMPLE.ORG I have a good dump. Will analyze. 1287152 12 Joerg.Pulz 2023-12-06 18:14:21 +0000 Cy, thanks for taking care and looking into it. If you want to fix this without touching openssl.cnf I think it has to be done on library level in heimdal and keeping track of the provider reference count and OSSL_PROVIDER_unload() in the right place for every OSSL_PROVIDER_load() - see OSSL_LIB_CTX(3ossl). Let me know if I can be of any help. 1287157 13 cy 2023-12-06 18:34:03 +0000 (In reply to Joerg Pulz from comment #12) The best approach would be to add a function to libroken which can keep count of providers, loading them as needed. I don't think an unload function is needed. 1287388 14 246893 cy 2023-12-08 07:17:07 +0000 Created attachment 246893 Enable legacy provider Can you give this patch a spin? I've tested this a little here but need to get some sleep. Give it a good workout and let me know if it resolves all issues. 1287416 15 netchild 2023-12-08 09:56:49 +0000 (In reply to Cy Schubert from comment #14) "make clean obj depend all" in /usr/src/kerberos5/ results in: ---snip--- Building /space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libkadm5srv/libkadm5srv.so.11.full building shared library libkadm5srv.so.11 ld: error: undefined symbol: fbsd_ossl_provider_load >>> referenced by create_s.c:172 (/space/system/usr_src/crypto/heimdal/lib/kadm5/create_s.c:172) >>> create_s.pico:(kadm5_s_create_principal) cc: error: linker command failed with exit code 1 (use -v to see invocation) *** Error code 1 Stop. make[2]: stopped in /space/system/usr_src/kerberos5/lib/libkadm5srv .ERROR_TARGET='libkadm5srv.so.11.full' .ERROR_META_FILE='/space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libkadm5srv/libkadm5srv.so.11.full.meta' .MAKE.LEVEL='2' MAKEFILE='' .MAKE.MODE='meta missing-filemon=yes missing-meta=yes silent=yes verbose' _ERROR_CMD='@echo building shared library libkadm5srv.so.11; @rm -f libkadm5srv.so.11 libkadm5srv.so; cc -Wl,--no-undefined -Wl,-zrelro -Wl,-zretpolineplt -Wl,--version-script=/space/system/usr_src/crypto/heimdal/lib/kadm5/version-script.map -Wl,--undefined-version -fstack-protector-strong -shared -Wl,-x -Wl,--fatal-warnings -Wl,--warn-shared-textrel -o libkadm5srv.so.11.full -Wl,-soname,libkadm5srv.so.11 acl.pico bump_pw_expire.pico chpass_s.pico common_glue.pico context_s.pico create_s.pico delete_s.pico destroy_s.pico ent_setup.pico error.pico flush_s.pico free.pico get_princs_s.pico get_s.pico init_s.pico kadm5_err.pico keys.pico log.pico marshall.pico modify_s.pico password_quality.pico privs_s.pico randkey_s.pico rename_s.pico server_glue.pico set_keys.pico set_modifier.pico -L/space/system/usr_obj/space/system/usr_src/amd64.amd64/lib/libcom_err -lcom_err -L/space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libhdb -lhdb -L/space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libkrb5 -lkrb5 -L/space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libroken -lroken ;' .CURDIR='/space/system/usr_src/kerberos5/lib/libkadm5srv' .MAKE='make' .OBJDIR='/space/system/usr_obj/space/system/usr_src/amd64.amd64/kerberos5/lib/libkadm5srv' .TARGETS='all' CPUTYPE='' DESTDIR='' LD_LIBRARY_PATH='' MACHINE='amd64' MACHINE_ARCH='amd64' MACHINE_CPUARCH='amd64' MAKEOBJDIRPREFIX='' MAKESYSPATH='/space/system/usr_src/share/mk' MAKE_VERSION='20230909' PATH='/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin:/root/bin' SRCTOP='/space/system/usr_src' OBJTOP='/space/system/usr_obj/space/system/usr_src/amd64.amd64' .MAKE.MAKEFILES='/space/system/usr_src/share/mk/sys.mk /space/system/usr_src/share/mk/local.sys.env.mk /space/system/usr_src/share/mk/src.sys.env.mk /etc/src-env.conf /space/system/usr_src/share/mk/bsd.mkopt.mk /space/system/usr_src/share/mk/src.sys.obj.mk /space/system/usr_src/share/mk/local.sys.machine.mk /space/system/usr_src/share/mk/meta.sys.mk /space/system/usr_src/share/mk/local.meta.sys.env.mk /space/system/usr_src/share/mk/auto.obj.mk /space/system/usr_src/share/mk/bsd.suffixes.mk /etc/make.conf /space/system/usr_src/share/mk/local.sys.mk /space/system/usr_src/share/mk/src.sys.mk /etc/src.conf /space/system/usr_src/kerberos5/lib/libkadm5srv/Makefile /space/system/usr_src/share/mk/bsd.lib.mk /space/system/usr_src/share/mk/bsd.init.mk /space/system/usr_src/share/mk/bsd.opts.mk /space/system/usr_src/share/mk/bsd.cpu.mk /space/system/usr_src/share/mk/local.init.mk /space/system/usr_src/share/mk/src.init.mk /space/system/usr_src/kerberos5/lib/libkadm5srv/../Makefile.inc /space/system/usr_src/kerberos5/lib/libkadm5srv/../../Makefile.inc /space/system/usr_src/share/mk/src.opts.mk /space/system/usr_src/share/mk/bsd.own.mk /space/system/usr_src/share/mk/bsd.compiler.mk /space/system/usr_src/share/mk/bsd.endian.mk /space/system/usr_src/share/mk/bsd.linker.mk /space/system/usr_src/share/mk/bsd.compat.pre.mk /space/system/usr_src/share/mk/bsd.sanitizer.mk /space/system/usr_src/share/mk/bsd.libnames.mk /space/system/usr_src/share/mk/src.libnames.mk /space/system/usr_src/share/mk/bsd.symver.mk /space/system/usr_src/share/mk/bsd.nls.mk /space/system/usr_src/share/mk/bsd.confs.mk /space/system/usr_src/share/mk/bsd.files.mk /space/system/usr_src/share/mk/bsd.dirs.mk /space/system/usr_src/share/mk/bsd.incs.mk /space/system/usr_src/share/mk/bsd.links.mk /space/system/usr_src/share/mk/bsd.man.mk /space/system/usr_src/share/mk/bsd.dep.mk /space/system/usr_src/share/mk/bs d.clang-analyze.mk /space/system/usr_src/share/mk/bsd.obj.mk /space/system/usr_src/share/mk/bsd.subdir.mk /space/system/usr_src/share/mk/bsd.sys.mk /dev/null' .PATH='. /space/system/usr_src/kerberos5/lib/libkadm5srv /space/system/usr_src/crypto/heimdal/lib/kadm5' *** Error code 1 Stop. make[1]: stopped in /space/system/usr_src/kerberos5/lib *** Error code 1 ---snip--- To validate that I got all changes: ---snip--- # LC_ALL=C git status On branch localchanges Changes not staged for commit: (use "git add <file>..." to update what will be committed) (use "git restore <file>..." to discard changes in working directory) modified: crypto/heimdal/lib/kadm5/create_s.c modified: crypto/heimdal/lib/kadm5/kadm5_locl.h modified: crypto/heimdal/lib/krb5/context.c modified: crypto/heimdal/lib/krb5/crypto.c modified: crypto/heimdal/lib/krb5/salt.c modified: crypto/heimdal/lib/roken/version-script.map modified: kerberos5/include/crypto-headers.h modified: kerberos5/lib/libroken/Makefile modified: kerberos5/libexec/kdc/Makefile modified: share/mk/src.libnames.mk Untracked files: (use "git add <file>..." to include in what will be committed) buildkernel.log buildworld.log installkernel.log installworld.log kerberos5/include/fbsd_ossl_provider.h kerberos5/lib/libroken/fbsd_ossl_provider_load.c krb5.diff ---snip--- 1287419 16 netchild 2023-12-08 10:15:59 +0000 Manually compiling libroken before the other libs makes the build work. Quick check: I can kinit and kadmin -l add. I also tried GSS auth via ssh, but this fails. I never tried that before, so not sure if this is a PEBKAC problem or not (enabling GSSAPIAuthentication for the client and the daemon + restart of sshd). When sshing to the remote, the client system get's the machine ticket, but the gssapi-with-mic authentication of ssh fails silently. 1287447 17 246909 cy 2023-12-08 14:25:07 +0000 Created attachment 246909 Enable weak encrypton for heimdal (In reply to Alexander Leidinger from comment #16) Then we will need to adjust /etc/ssl/openssl.cnf to enable weak encryption globally. 1287450 18 netchild 2023-12-08 14:32:31 +0000 (In reply to Cy Schubert from comment #17) Enabling the legacy (and default) provider on the remote system and the client system and restarting sshd on the target didn't help. Would be good if someone could test this somewhere where it is known to work before... 1287451 19 cy 2023-12-08 14:47:09 +0000 (In reply to Alexander Leidinger from comment #18) This is certainly a bigger problem because one would probably need to downgrade those (including Linux) as well. Which machine is your KDC? Is the KDC FreeBSD Heimdal 1.5? 1287452 20 cy 2023-12-08 14:56:08 +0000 (In reply to Alexander Leidinger from comment #15) This build failure could be due to meta mode. It built fine on my sandbox machine. I will a) build again here and b) build on one of the universe15 machines to verify. 1287456 21 Joerg.Pulz 2023-12-08 15:06:21 +0000 I've KDC's running on releng/13.2 and clients running releng/14.0. The 14 clients run with sshd's GSSAPIAuthentication yes GSSAPICleanupCredentials yes With my patch or legacy provider enabled in openssl.cnf those clients worked. I will test your patch later. 1287457 22 Joerg.Pulz 2023-12-08 15:06:32 +0000 I've KDC's running on releng/13.2 and clients running releng/14.0. The 14 clients run with sshd's GSSAPIAuthentication yes GSSAPICleanupCredentials yes With my patch or legacy provider enabled in openssl.cnf those clients worked. I will test your patch later. 1287458 23 cy 2023-12-08 15:29:10 +0000 Without getting into a long explanation, I suspect that Heimdal 1.5.2 KDC (the Heimdal in FreeBSD is 1.5.2) keyed with legacy ciphers is likely the cause of the problem. Just a hunch ATM. Can both of you tell me what your KDC is? Is it a FreeBSD base KDC, Heimdal from ports KDC, or MIT KDC? 1287464 24 Joerg.Pulz 2023-12-08 16:23:21 +0000 Ok, here are my results. Besides from kdc/kpasswdd/kadmind (did not test those) everything seems to work with you patch. KDC - base Heimdal (1.5.2) on releng/13.2 SSH server - base Heimdal (1.5.2) on releng/14.0 other servers - base Heimdal (1.5.2) on releng/13.2 client - base Heimdal (1.5.2) on releng/14.0 - kinit on client works - ssh from client to SSH server works #### debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive debug3: start over, passed a different list publickey,gssapi-with-mic,keyboard-interactive debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password debug3: authmethod_lookup gssapi-with-mic debug3: remaining preferred: publickey,keyboard-interactive,password debug3: authmethod_is_enabled gssapi-with-mic debug1: Next authentication method: gssapi-with-mic debug3: send packet: type 50 debug2: we sent a gssapi-with-mic packet, wait for reply debug3: receive packet: type 60 debug1: Delegating credentials debug3: send packet: type 61 debug3: receive packet: type 61 debug1: Delegating credentials debug3: send packet: type 66 debug3: receive packet: type 52 Authenticated to ...... ([.....]:22) using "gssapi-with-mic". #### - ticket gets forwarded to SSH server - client has ticket for SSH server in credentials cache - on client and SSH server tried to use different kerberized services - all working - ldapwhoami to kerberized OpenLDAP works - reading (imap) and sending (smtp) email using a slightly modified version of mail/alpine (linked against base Heimdal on releng/14.0) works % klist Credentials cache: FILE:/tmp/krb5cc_xxxxxx Principal: xxxxxx@XXXXXX.DE Issued Expires Principal Dec 8 16:59:54 2023 Dec 9 02:59:54 2023 krbtgt/XXXXXX.DE@XXXXXX.DE Dec 8 17:02:35 2023 Dec 9 02:59:54 2023 ldap/server01.xxxxxx.de@XXXXXX.DE Dec 8 17:02:40 2023 Dec 9 02:59:54 2023 imap/imap.xxxxxx.de@XXXXXX.DE Dec 8 17:03:02 2023 Dec 9 02:59:54 2023 smtp/smtp.xxxxxx.de@XXXXXX.DE 1287465 25 Joerg.Pulz 2023-12-08 16:26:17 +0000 (In reply to Joerg Pulz from comment #24) Forgot to mention: - kadmin from client (releng/14.0) to remote kadmind (releng/13.2) works too 1287467 26 cy 2023-12-08 16:59:56 +0000 (In reply to Joerg Pulz from comment #22) This is the correct sshd setup. I use that same setup here with my FreeBSD base clients pointing to my MIT KDC. (FreeBSD Heimdal 1.5.2 works well with MIT and has for the last 20-25 years.) 1287518 27 cy 2023-12-09 01:25:31 +0000 This will still need a little work in Makefile.inc1 to set up bootstrap. Now that libroken needs libcrypto, libcrypto also needs to be bootstrapped. We're now into phabricator review territory. I will submit the patch for review once we, here, are happy with it. 1287577 28 netchild 2023-12-09 13:15:31 +0000 In my case: krb from basesystem, -current as of 2-3 days ago. I checked that my sshd has the options as specified by Jörg: OK. I tried: ---snip--- debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive debug1: Next authentication method: gssapi-with-mic debug1: Miscellaneous failure (see text) Ticket expired debug1: Next authentication method: publickey ---snip--- Ok, klist agrees -> kinit to get a new ticket. klist: ---snip--- % klist Credentials cache: FILE:/tmp/krb5cc_<uid> Principal: netchild@LEIDINGER.NET Issued Expires Principal Dec 9 14:10:27 2023 Dec 10 00:10:27 2023 krbtgt/LEIDINGER.NET@LEIDINGER.NET Dec 9 14:10:51 2023 Dec 10 00:10:27 2023 host/commit.leidinger.net@LEIDINGER.NET ---snip--- Second try: ---snip--- debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive debug1: Next authentication method: gssapi-with-mic debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive debug1: Next authentication method: publickey ---snip--- No chance. Something is wrong... 1287582 29 cy 2023-12-09 14:31:59 +0000 (In reply to Alexander Leidinger from comment #28) Did you add host principals for your servers to your kdc? Did you save the principals' tickets in keytabs on each machine? 1287583 30 246930 cy 2023-12-09 14:33:16 +0000 Created attachment 246930 Enable Legacy Provider This patch includes the Makefile.inc1 bits to build from start to finish. 1287586 31 netchild 2023-12-09 14:43:12 +0000 (In reply to Cy Schubert from comment #29) All hosts have this as /ertc/krb5.keytab: kadmin -l add --random-key host/hostname.fqdn kadmin -l ext_keytab --keytab=... host/hostname.fqdn 1287595 32 cy 2023-12-09 15:23:36 +0000 (In reply to Alexander Leidinger from comment #31) Unless Heimdal is different than MIT, your principals must be host/hostname.fqdn@REALM.FQDN, i.e. host/foobar.example.com@EXAMPLE.ORG. If your the uname is the short name, you will need to do some /etc/hosts gymnastics or create principals with the short name. Been there done that at $((JOB-1)). 1287598 33 Joerg.Pulz 2023-12-09 15:30:27 +0000 (In reply to Cy Schubert from comment #30) Hmm, tried to build with the latest patch on the KDCs to make sure this part is working correctly too. KDCs currently at releng/13.2. Fresh checkout of releng/14.0 and clean world directory with latest patch applied results in this: cc -O2 -pipe -fno-common -I/usr/src/crypto/heimdal/lib/roken -I/usr/src/kerberos5/include -I/usr/src/crypto/heimdal/lib/krb5 -I. -DHAVE_CONFIG_H -I/usr/src/kerberos5/include -g -gz=zlib -MD -MF.depend.fbsd_ossl_provider_load.o -MTfbsd_ossl_provider_load.o -std=gnu99 -Wno-format-zero-length -Wsystem-headers -Wno-pointer-sign -Wdate-time -Wno-absolute-value -Wno-empty-body -Wno-string-plus-int -Wno-unused-const-variable -Wno-tautological-compare -Wno-unused-value -Wno-parentheses-equality -Wno-unused-function -Wno-enum-conversion -Wno-unused-local-typedef -Wno-address-of-packed-member -Wno-switch -Wno-switch-enum -Wno-knr-promoted-parameter -Wno-parentheses -Qunused-arguments -I/usr/obj/usr/src/amd64.amd64/tmp/legacy/usr/include -c /usr/src/kerberos5/lib/libroken/fbsd_ossl_provider_load.c -o fbsd_ossl_provider_load.o /usr/src/kerberos5/lib/libroken/fbsd_ossl_provider_load.c:5:8: error: unknown type name 'OSSL_PROVIDER' static OSSL_PROVIDER *legacy; ^ /usr/src/kerberos5/lib/libroken/fbsd_ossl_provider_load.c:6:8: error: unknown type name 'OSSL_PROVIDER' static OSSL_PROVIDER *deflt; ^ 2 errors generated. *** Error code 1 Stop. make[3]: stopped in /usr/src/kerberos5/lib/libroken Missing #include ? 1287604 34 cy 2023-12-09 15:48:47 +0000 (In reply to Joerg Pulz from comment #33) I can try building it on releng/14.0. make universe built properly on universe15b; it builds on all architectures supported by FreeBSD. So, unless releng/14.0 is that much different from 15-CURRENT, there is probably something amiss with your build. I'll try to MFC this to stable/14 locally and MFS it to releng/14.0 (locally) over the weekend and post patches here. 1287619 35 Joerg.Pulz 2023-12-09 17:41:03 +0000 (In reply to Cy Schubert from comment #34) Seems like it is related to the fact that I'm building on releng/13.2 and the wrong OpenSSL includes (those installed in /usr/include) are used - maybe due to building it early in the bootstrap phase? Due to this, the OpenSSL version covered area in kerberos5/include/crypto-headers.h is never entered and openssl/provider.h not used. After modifying CFLAGS in kerberos5/lib/libroken/Makefile to look like this: CFLAGS+=-I${KRB5DIR}/lib/roken \ -I${SRCTOP}/crypto/openssl/include \ -I${SRCTOP}/kerberos5/include \ -I${KRB5DIR}/lib/krb5 -I. it builds just fine. This didn't came up earlier as I was testing on a client that was already at releng/14.0 but now I'm building on my KDCs running releng/13.2. Unrelated to this, there is another build error for the probably uncommon case building base Heimdal using WITH_OPENLDAP=yes - I use the LDAP hdb backend. The following patch is required in this scenario: diff --git a/crypto/heimdal/lib/hdb/hdb-ldap.c b/crypto/heimdal/lib/hdb/hdb-ldap.c index 1b4024aa5..f92522a2f 100644 --- a/crypto/heimdal/lib/hdb/hdb-ldap.c +++ b/crypto/heimdal/lib/hdb/hdb-ldap.c @@ -816,7 +816,7 @@ escape_value(krb5_context context, const unsigned char *unquoted, char **quoted) } for (i = 0; unquoted[0] ; unquoted++) { - if (need_quote((unsigned char *)unquoted[0])) { + if (need_quote((unsigned char)unquoted[0])) { (*quoted)[i++] = '\\'; (*quoted)[i++] = hexchar[(unquoted[0] >> 4) & 0xf]; (*quoted)[i++] = hexchar[(unquoted[0] ) & 0xf]; Would be nice if this would hit the tree too. 1287659 36 cy 2023-12-10 03:16:43 +0000 (In reply to Joerg Pulz from comment #35) Why apply this patch to 13.2? It doesn't need it. It's got OpenSSL 1.1.1.You do not need to patch 13.2 or anything 13 (or 12). 1287661 37 Joerg.Pulz 2023-12-10 04:54:10 +0000 (In reply to Cy Schubert from comment #36) Misunderstanding here. I want to update my KDCs currently running 13.2-RELEASE-p7 to releng/14.0. So on the KDCs I did a fresh checkout of releng/14.0 to /usr/src and applied your patch to the releng/14.0 sources. Started a make buildworld buildkernel that ended in the error mentioned in comment #33. So the build error occurs on a system currently running 13 while building 14. 1287668 38 netchild 2023-12-10 09:26:45 +0000 (In reply to Cy Schubert from comment #32) The destination system: # kadmin -l list -l \*commit\* Principal: host/commit.leidinger.net@LEIDINGER.NET Principal expires: never Password expires: never In the destination system: % uname -n commit.leidinger.net The source system is similar. 1287881 39 cy 2023-12-11 21:42:30 +0000 (In reply to Alexander Leidinger from comment #38) What I did here in my Heimdal jail (I run MIT here) is, kadmin -l ank -r host/bob71@EXAMPLE.org # I used short hostname in this jail ext host/bob71@EXAMPLE.org ank cy ^D I logged in as myself in the jail, kinit ssh -K bob71 It used my TGT from the kinit. Without the -K it will use ssh keys and keyboard prompts. You can add GSSAPIAuthentication yes to your .ssh/config to default to GSSAPI thereby negating the need for -K It works. 1287883 40 246994 cy 2023-12-11 21:49:53 +0000 Created attachment 246994 Heimdal - enable weak encryption, builds on 13 when building to upgrade to 14 or 15 This patch builds on stable/13 when upgrading to 14. This is the version that was ssh tested as well. 1287884 41 cy 2023-12-11 21:52:46 +0000 (In reply to Cy Schubert from comment #40) BTW, if people are satisfied with this patch I will submit it for phabricator review. 1287902 42 246998 cy 2023-12-12 01:10:03 +0000 Created attachment 246998 Heimdal - enable weak encryption, builds on 13 when building to upgrade to 14 or 15 Fix a minor bug that flags the providers are loaded when they are not due to error. 1287941 43 netchild 2023-12-12 10:03:03 +0000 (In reply to Cy Schubert from comment #39) I believe you that it works. :) The question for me is why it doesn't work for me. I rebuild inside src/kerberos5 everything with your latest patch. And I've rebuild sshd and ssh in the same way. All involved systems have the same binaries. While I have the GSS setting for ssh, I also tried with -K. No success. The sshd debug log shows this ("unknown mech-code 0"): Dec 12 10:12:31 commit sshd[37533]: debug1: userauth-request for user netchild service ssh-connection method gssapi-with-mic [preauth] Dec 12 10:12:31 commit sshd[37533]: debug1: No credentials were supplied, or the credentials were unavailable or inaccessible.\nunknown mech-code 0 for mech { 1 2 840 113554 1 2 2 }\n\n After a bit of debugging and searching, adding this to the sshd_config makes it work: GSSAPIStrictAcceptorCheck no The reason seems to be that my hostnames in DNS are differently cased as in the kerberos realm and libgssapi seems to be not case insensitive for the hostname. Attention: the setting does more than case insensitivity, it doesn't check the hostname at all but takes any kredential in the keytab as OK (at least to my reading). It comes down to gss_import_name() from libgssapi in the end. A theoretical solution would be to lowercase all kerberos principals by default (and automatically on creation and/or on any lookup) and do the same in gss_import_name(). No idea if this is a feasible solution. 1287948 44 Joerg.Pulz 2023-12-12 12:35:55 +0000 (In reply to Cy Schubert from comment #42) Cy, I've updated my KDCs from 13.2 to releng/14.0 successfully using your latest patch. Everything is working as expected and before. Time to move on to phabricator, at least from my point of view. Would you please take a look at the end of comment #35. I ran into an build error using WITH_OPENLDAP=yes when building base Heimdal. It's a very small change and it's the same change the Heimdal people have done in the Heimdal git repo - I already verified this. It would be really helpful to get this fixed too. If required I can open a separate PR for it. 1288006 45 cy 2023-12-12 20:55:42 +0000 The patch is currently running on all my gear here. It's been submitted for Phabricator review here: https://reviews.freebsd.org/D43009 1291720 46 commit-hook 2024-01-11 13:32:09 +0000 A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=cb350ba7bf7ca7c4cb97ed2c20ab45af60382cfb commit cb350ba7bf7ca7c4cb97ed2c20ab45af60382cfb Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2023-12-06 15:30:05 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2024-01-11 13:26:42 +0000 kerberos: Fix numerous segfaults when using weak crypto Weak crypto is provided by the openssl legacy provider which is not load by default. Load the legacy providers as needed. When the legacy provider is loaded into the default context the default provider will no longer be automatically loaded. Without the default provider the various kerberos applicaions and functions will abort(). PR: 272835 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D43009 Tested by: netchild, Joerg Pulz <Joerg.Pulz@frm2.tum.de> Makefile.inc1 | 7 ++-- crypto/heimdal/lib/kadm5/create_s.c | 4 +++ crypto/heimdal/lib/kadm5/kadm5_locl.h | 1 + crypto/heimdal/lib/krb5/context.c | 4 +++ crypto/heimdal/lib/krb5/crypto.c | 3 ++ crypto/heimdal/lib/krb5/salt.c | 5 +++ crypto/heimdal/lib/roken/version-script.map | 1 + kerberos5/include/crypto-headers.h | 4 +++ kerberos5/include/fbsd_ossl_provider.h (new) | 4 +++ kerberos5/lib/libroken/Makefile | 11 ++++-- .../lib/libroken/fbsd_ossl_provider_load.c (new) | 41 ++++++++++++++++++++++ kerberos5/libexec/kdc/Makefile | 2 +- share/mk/src.libnames.mk | 2 +- 13 files changed, 81 insertions(+), 8 deletions(-) 1291974 47 cy 2024-01-13 14:23:14 +0000 (In reply to Joerg Pulz from comment #2) This may be our only solution, because the source patch fails to cross build on Linux and MacOS. On those platforms security/libcrypto/Makefile.inc includes bsd.endian.mk which requires CPU type to be defined. CPU type is not defined on Linux and MacOS cross builds during pre-build phase (whereas it is on native FreeBSD builds of our sources). I think so@ should weigh in on this decision. 1292393 48 247680 cy 2024-01-15 17:09:12 +0000 Created attachment 247680 Also circumvent Linux and MacOS cross-build errors so@ doesn't want us to globally enable weak crypto and the previous patch does not cross-build on Linux or MacOS, though this patch has not been tested with cross-builds yet, it should builds since it doesn't touch Makefile.inc1 nor src.libnames.mk. This patch dynamically loads/links using dlopen()/dlsym() OpenSSL's libcrypto.so at runtime rather than at link (build) time. Can everyone please test this patch? I won't commit it unless it's tested by at least someone here. 1292394 49 247680 cy 2024-01-15 17:16:48 +0000 Comment on attachment 247680 Also circumvent Linux and MacOS cross-build errors Hold off on applying the patch. It causes a different segfault now. 1292600 50 247710 cy 2024-01-16 19:08:12 +0000 Created attachment 247710 Fix numerous Heimdal segfaults when using weak crypto Can people try this? I can't commit this without testing and sign-off here. 1292611 51 netchild 2024-01-16 20:35:07 +0000 I tried this with kinit and the ticket got renewed instead of a segfault. 1292712 52 247730 cy 2024-01-17 18:47:00 +0000 Created attachment 247730 Final version of patch before commit. I removed the include of krb5_locl.h, replacing it with stdlib.h. This fixes the last of the Linux/MacOS build errors. It works well here. Please test and I will commit. 1292768 53 Joerg.Pulz 2024-01-18 05:56:23 +0000 (In reply to Cy Schubert from comment #52) Tested on my KDCs and on several clients - everything is working. Please go ahead and commit. 1292777 54 commit-hook 2024-01-18 07:49:55 +0000 A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=476d63e091c2e663b51d18acf6acb282e1f22bbc commit 476d63e091c2e663b51d18acf6acb282e1f22bbc Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2023-12-06 15:30:05 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2024-01-18 07:46:57 +0000 kerberos: Fix numerous segfaults when using weak crypto Weak crypto is provided by the openssl legacy provider which is not load by default. Load the legacy providers as needed. When the legacy provider is loaded into the default context the default provider will no longer be automatically loaded. Without the default provider the various kerberos applicaions and functions will abort(). This is the second attempt at this patch. Instead of linking secure/lib/libcrypto at build time we now link it at runtime, avoiding buildworld failures under Linux and MacOS. This is because TARGET_ENDIANNESS is undefined at pre-build time. PR: 272835 MFC after: 3 days X-MFC: only to stable/14 Tested by: netchild Joerg Pulz <Joerg.Pulz@frm2.tum.de> (previous version) crypto/heimdal/lib/kadm5/create_s.c | 4 ++ crypto/heimdal/lib/kadm5/kadm5_locl.h | 1 + crypto/heimdal/lib/krb5/context.c | 4 ++ crypto/heimdal/lib/krb5/crypto.c | 3 + crypto/heimdal/lib/krb5/salt.c | 5 ++ crypto/heimdal/lib/roken/version-script.map | 1 + kerberos5/include/crypto-headers.h | 4 ++ kerberos5/include/fbsd_ossl_provider.h (new) | 4 ++ kerberos5/lib/libroken/Makefile | 8 ++- .../lib/libroken/fbsd_ossl_provider_load.c (new) | 77 ++++++++++++++++++++++ 10 files changed, 109 insertions(+), 2 deletions(-) 1293524 55 commit-hook 2024-01-22 15:50:23 +0000 A commit in branch stable/14 references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=c7db2e15e4045e1daba939bb151fc5878f791c7b commit c7db2e15e4045e1daba939bb151fc5878f791c7b Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2023-12-06 15:30:05 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2024-01-22 15:48:51 +0000 kerberos: Fix numerous segfaults when using weak crypto Weak crypto is provided by the openssl legacy provider which is not load by default. Load the legacy providers as needed. When the legacy provider is loaded into the default context the default provider will no longer be automatically loaded. Without the default provider the various kerberos applicaions and functions will abort(). This is the second attempt at this patch. Instead of linking secure/lib/libcrypto at build time we now link it at runtime, avoiding buildworld failures under Linux and MacOS. This is because TARGET_ENDIANNESS is undefined at pre-build time. PR: 272835 Tested by: netchild Joerg Pulz <Joerg.Pulz@frm2.tum.de> (previous version) (cherry picked from commit 476d63e091c2e663b51d18acf6acb282e1f22bbc) crypto/heimdal/lib/kadm5/create_s.c | 4 ++ crypto/heimdal/lib/kadm5/kadm5_locl.h | 1 + crypto/heimdal/lib/krb5/context.c | 4 ++ crypto/heimdal/lib/krb5/crypto.c | 3 + crypto/heimdal/lib/krb5/salt.c | 5 ++ crypto/heimdal/lib/roken/version-script.map | 1 + kerberos5/include/crypto-headers.h | 4 ++ kerberos5/include/fbsd_ossl_provider.h (new) | 4 ++ kerberos5/lib/libroken/Makefile | 8 ++- .../lib/libroken/fbsd_ossl_provider_load.c (new) | 77 ++++++++++++++++++++++ 10 files changed, 109 insertions(+), 2 deletions(-) 1294722 56 cy 2024-01-30 05:00:06 +0000 *** Bug 275915 has been marked as a duplicate of this bug. *** 1294724 57 cy 2024-01-30 05:00:38 +0000 *** Bug 276257 has been marked as a duplicate of this bug. *** 1302711 58 commit-hook 2024-03-28 05:07:31 +0000 A commit in branch releng/14.0 references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=aaf2c7fdb81a1dd9de9fc77c9313f4e60e68fa76 commit aaf2c7fdb81a1dd9de9fc77c9313f4e60e68fa76 Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2023-12-06 15:30:05 +0000 Commit: Gordon Tetlow <gordon@FreeBSD.org> CommitDate: 2024-03-28 03:14:44 +0000 kerberos: Fix numerous segfaults when using weak crypto Weak crypto is provided by the openssl legacy provider which is not load by default. Load the legacy providers as needed. When the legacy provider is loaded into the default context the default provider will no longer be automatically loaded. Without the default provider the various kerberos applicaions and functions will abort(). This is the second attempt at this patch. Instead of linking secure/lib/libcrypto at build time we now link it at runtime, avoiding buildworld failures under Linux and MacOS. This is because TARGET_ENDIANNESS is undefined at pre-build time. PR: 272835 Tested by: netchild Joerg Pulz <Joerg.Pulz@frm2.tum.de> (previous version) Approved by: so Security: FreeBSD-EN-24:08.kerberos (cherry picked from commit 476d63e091c2e663b51d18acf6acb282e1f22bbc) (cherry picked from commit c7db2e15e4045e1daba939bb151fc5878f791c7b) crypto/heimdal/lib/kadm5/create_s.c | 4 ++ crypto/heimdal/lib/kadm5/kadm5_locl.h | 1 + crypto/heimdal/lib/krb5/context.c | 4 ++ crypto/heimdal/lib/krb5/crypto.c | 3 + crypto/heimdal/lib/krb5/salt.c | 5 ++ crypto/heimdal/lib/roken/version-script.map | 1 + kerberos5/include/crypto-headers.h | 4 ++ kerberos5/include/fbsd_ossl_provider.h (new) | 4 ++ kerberos5/lib/libroken/Makefile | 8 ++- .../lib/libroken/fbsd_ossl_provider_load.c (new) | 77 ++++++++++++++++++++++ 10 files changed, 109 insertions(+), 2 deletions(-) 246375 2023-11-17 17:13:06 +0000 2023-11-21 09:24:54 +0000 patch to fix base heimdal with openssl-3.x heimdal.patch text/plain 2431 Joerg.Pulz ZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jIGIvY3J5cHRvL2hl aW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKaW5kZXggNjdlY2VmNjJlODc1Li40OGFmMTc3YTQ3OGQg MTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCisrKyBiL2NyeXB0 by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCkBAIC0zMiw2ICszMiw5IEBACiAgKi8KIAogI2lu Y2x1ZGUgImtyYjVfbG9jbC5oIgorI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAm JiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCisjaW5jbHVkZSA8b3BlbnNzbC9wcm92aWRl ci5oPgorI2VuZGlmCiAKIHN0cnVjdCBfa3JiNV9rZXlfdXNhZ2UgewogICAgIHVuc2lnbmVkIHVz YWdlOwpAQCAtMjA1NCw2ICsyMDU3LDExIEBAIGtyYjVfY3J5cHRvX2luaXQoa3JiNV9jb250ZXh0 IGNvbnRleHQsCiAJKmNyeXB0byA9IE5VTEw7CiAJcmV0dXJuIHJldDsKICAgICB9CisjaWYgZGVm aW5lZChPUEVOU1NMX1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0g MykKKyAgICBpZiAoT1NTTF9QUk9WSURFUl9sb2FkKE5VTEwsICJsZWdhY3kiKSA9PSBOVUxMKQor CXJldHVybiBFSU5WQUw7CisjZW5kaWYKKwogICAgICgqY3J5cHRvKS0+a2V5LnNjaGVkdWxlID0g TlVMTDsKICAgICAoKmNyeXB0byktPm51bV9rZXlfdXNhZ2UgPSAwOwogICAgICgqY3J5cHRvKS0+ a2V5X3VzYWdlID0gTlVMTDsKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3Nh bHQuYyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwppbmRleCA1ZTRjOGExYzg1NzIu LmJhZWY0OTg2YzkwYyAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5j CisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwpAQCAtMzIsNiArMzIsOSBAQAog ICovCiAKICNpbmNsdWRlICJrcmI1X2xvY2wuaCIKKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lP Tl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorI2luY2x1ZGUgPG9wZW5z c2wvcHJvdmlkZXIuaD4KKyNlbmRpZgogCiAvKiBjb3Zlcml0eVsrYWxsb2MgOiBhcmctKjNdICov CiBLUkI1X0xJQl9GVU5DVElPTiBrcmI1X2Vycm9yX2NvZGUgS1JCNV9MSUJfQ0FMTApAQCAtNDMs NiArNDYsMTEgQEAga3JiNV9zYWx0dHlwZV90b19zdHJpbmcgKGtyYjVfY29udGV4dCBjb250ZXh0 LAogICAgIHN0cnVjdCBfa3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3RydWN0IHNhbHRf dHlwZSAqc3Q7CiAKKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5T U0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorICAgIGlmIChPU1NMX1BST1ZJREVSX2xvYWQoTlVMTCwg ImxlZ2FjeSIpID09IE5VTEwpCisJcmV0dXJuIEVJTlZBTDsKKyNlbmRpZgorCiAgICAgZSA9IF9r cmI1X2ZpbmRfZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09IE5VTEwpIHsKIAlrcmI1X3Nl dF9lcnJvcl9tZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQRV9OT1NVUFAsCkBAIC03NSw2 ICs4MywxMSBAQCBrcmI1X3N0cmluZ190b19zYWx0dHlwZSAoa3JiNV9jb250ZXh0IGNvbnRleHQs CiAgICAgc3RydWN0IF9rcmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBzdHJ1Y3Qgc2FsdF90 eXBlICpzdDsKIAorI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNT TF9WRVJTSU9OX01BSk9SID49IDMpCisgICAgaWYgKE9TU0xfUFJPVklERVJfbG9hZChOVUxMLCAi bGVnYWN5IikgPT0gTlVMTCkKKwlyZXR1cm4gRUlOVkFMOworI2VuZGlmCisKICAgICBlID0gX2ty YjVfZmluZF9lbmN0eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0gTlVMTCkgewogCWtyYjVfc2V0 X2Vycm9yX21lc3NhZ2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBFX05PU1VQUCwKQEAgLTE5Niw2 ICsyMDksMTAgQEAga3JiNV9zdHJpbmdfdG9fa2V5X2RhdGFfc2FsdF9vcGFxdWUgKGtyYjVfY29u dGV4dCBjb250ZXh0LAogCQkJICAgICAgIGVuY3R5cGUpOwogCXJldHVybiBLUkI1X1BST0dfRVRZ UEVfTk9TVVBQOwogICAgIH0KKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYg KE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorICAgIGlmIChPU1NMX1BST1ZJREVSX2xvYWQo TlVMTCwgImxlZ2FjeSIpID09IE5VTEwpCisJcmV0dXJuIEVJTlZBTDsKKyNlbmRpZgogICAgIGZv cihzdCA9IGV0LT5rZXl0eXBlLT5zdHJpbmdfdG9fa2V5OyBzdCAmJiBzdC0+dHlwZTsgc3QrKykK IAlpZihzdC0+dHlwZSA9PSBzYWx0LnNhbHR0eXBlKQogCSAgICByZXR1cm4gKCpzdC0+c3RyaW5n X3RvX2tleSkoY29udGV4dCwgZW5jdHlwZSwgcGFzc3dvcmQsCg== 246458 2023-11-21 09:24:54 +0000 2023-12-08 07:17:07 +0000 patch to fix base heimdal and weak enctypes with base openssl-3.0.x v2 heimdal.patch text/plain 2433 Joerg.Pulz ZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jIGIvY3J5cHRvL2hl aW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKaW5kZXggNjdlY2VmNjJlODc1Li5mNWNkYzVhN2VkZmMg MTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCisrKyBiL2NyeXB0 by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCkBAIC0yMDU0LDYgKzIwNTQsMTAgQEAga3JiNV9j cnlwdG9faW5pdChrcmI1X2NvbnRleHQgY29udGV4dCwKIAkqY3J5cHRvID0gTlVMTDsKIAlyZXR1 cm4gcmV0OwogICAgIH0KKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9Q RU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorICAgIGlmIChPU1NMX1BST1ZJREVSX2xvYWQoTlVM TCwgImxlZ2FjeSIpID09IE5VTEwpCisJcmV0dXJuIEVJTlZBTDsKKyNlbmRpZgogICAgICgqY3J5 cHRvKS0+a2V5LnNjaGVkdWxlID0gTlVMTDsKICAgICAoKmNyeXB0byktPm51bV9rZXlfdXNhZ2Ug PSAwOwogICAgICgqY3J5cHRvKS0+a2V5X3VzYWdlID0gTlVMTDsKZGlmZiAtLWdpdCBhL2NyeXB0 by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQu YwppbmRleCA1ZTRjOGExYzg1NzIuLjNjNDBlZTc0NTUzNyAxMDA2NDQKLS0tIGEvY3J5cHRvL2hl aW1kYWwvbGliL2tyYjUvc2FsdC5jCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQu YwpAQCAtNDMsNiArNDMsMTEgQEAga3JiNV9zYWx0dHlwZV90b19zdHJpbmcgKGtyYjVfY29udGV4 dCBjb250ZXh0LAogICAgIHN0cnVjdCBfa3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3Ry dWN0IHNhbHRfdHlwZSAqc3Q7CiAKKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikg JiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorICAgIGlmIChPU1NMX1BST1ZJREVSX2xv YWQoTlVMTCwgImxlZ2FjeSIpID09IE5VTEwpCisJcmV0dXJuIEVJTlZBTDsKKyNlbmRpZgorCiAg ICAgZSA9IF9rcmI1X2ZpbmRfZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09IE5VTEwpIHsK IAlrcmI1X3NldF9lcnJvcl9tZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQRV9OT1NVUFAs CkBAIC03NSw2ICs4MCwxMSBAQCBrcmI1X3N0cmluZ190b19zYWx0dHlwZSAoa3JiNV9jb250ZXh0 IGNvbnRleHQsCiAgICAgc3RydWN0IF9rcmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBzdHJ1 Y3Qgc2FsdF90eXBlICpzdDsKIAorI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAm JiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCisgICAgaWYgKE9TU0xfUFJPVklERVJfbG9h ZChOVUxMLCAibGVnYWN5IikgPT0gTlVMTCkKKwlyZXR1cm4gRUlOVkFMOworI2VuZGlmCisKICAg ICBlID0gX2tyYjVfZmluZF9lbmN0eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0gTlVMTCkgewog CWtyYjVfc2V0X2Vycm9yX21lc3NhZ2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBFX05PU1VQUCwK QEAgLTE5Niw2ICsyMDYsMTAgQEAga3JiNV9zdHJpbmdfdG9fa2V5X2RhdGFfc2FsdF9vcGFxdWUg KGtyYjVfY29udGV4dCBjb250ZXh0LAogCQkJICAgICAgIGVuY3R5cGUpOwogCXJldHVybiBLUkI1 X1BST0dfRVRZUEVfTk9TVVBQOwogICAgIH0KKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9N QUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorICAgIGlmIChPU1NMX1BST1ZJ REVSX2xvYWQoTlVMTCwgImxlZ2FjeSIpID09IE5VTEwpCisJcmV0dXJuIEVJTlZBTDsKKyNlbmRp ZgogICAgIGZvcihzdCA9IGV0LT5rZXl0eXBlLT5zdHJpbmdfdG9fa2V5OyBzdCAmJiBzdC0+dHlw ZTsgc3QrKykKIAlpZihzdC0+dHlwZSA9PSBzYWx0LnNhbHR0eXBlKQogCSAgICByZXR1cm4gKCpz dC0+c3RyaW5nX3RvX2tleSkoY29udGV4dCwgZW5jdHlwZSwgcGFzc3dvcmQsCmRpZmYgLS1naXQg YS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oIGIva2VyYmVyb3M1L2luY2x1ZGUv Y3J5cHRvLWhlYWRlcnMuaAppbmRleCAzYWUwZDk2MjRmZmQuLmE1ZGFhMzZjYmY1NSAxMDA2NDQK LS0tIGEva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaAorKysgYi9rZXJiZXJvczUv aW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCkBAIC0xNyw1ICsxNyw4IEBACiAjaW5jbHVkZSA8b3Bl bnNzbC9lYy5oPgogI2luY2x1ZGUgPG9wZW5zc2wvZWNkc2EuaD4KICNpbmNsdWRlIDxvcGVuc3Ns L2VjZGguaD4KKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xf VkVSU0lPTl9NQUpPUiA+PSAzKQorI2luY2x1ZGUgPG9wZW5zc2wvcHJvdmlkZXIuaD4KKyNlbmRp ZgogCiAjZW5kaWYgLyogX19jcnlwdG9faGVhZGVyc19oX18gKi8K 246893 2023-12-08 07:17:07 +0000 2023-12-09 14:33:16 +0000 Enable legacy provider 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 8366 cy RnJvbSAyYzBkZjYyNTk5MWQ1MjQ2YThmYTgwOWM0NzEwZDlkMzU2NDViZGM5IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKTUZDIGFmdGVyOgkJMyBkYXlz Ci0tLQogY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMgICAgICAgICAgIHwgIDQg KysKIGNyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2NsLmggICAgICAgICB8ICAxICsK IGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYyAgICAgICAgICAgICB8ICAyICsKIGNy eXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jICAgICAgICAgICAgICB8ICAxICsKIGNyeXB0 by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyAgICAgICAgICAgICAgICB8ICA1ICsrKwogY3J5cHRv L2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcCAgIHwgIDEgKwoga2VyYmVyb3M1 L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCAgICAgICAgICAgIHwgIDQgKysKIGtlcmJlcm9zNS9p bmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oICAgICAgICB8ICA0ICsrCiBrZXJiZXJvczUvbGli L2xpYnJva2VuL01ha2VmaWxlICAgICAgICAgICAgICAgfCAxMCArKystLQogLi4uL2xpYi9saWJy b2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jICAgIHwgNDAgKysrKysrKysrKysrKysrKysr Kwoga2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlICAgICAgICAgICAgICAgIHwgIDIgKy0K IHNoYXJlL21rL3NyYy5saWJuYW1lcy5tayAgICAgICAgICAgICAgICAgICAgICB8ICAyICstCiAx MiBmaWxlcyBjaGFuZ2VkLCA3MSBpbnNlcnRpb25zKCspLCA1IGRlbGV0aW9ucygtKQogY3JlYXRl IG1vZGUgMTAwNjQ0IGtlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oCiBjcmVh dGUgbW9kZSAxMDA2NDQga2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJf bG9hZC5jCgpkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMg Yi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYwppbmRleCAxMDMzY2ExMDMyMzku LjI2N2U5YmJkYTJhMCAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0 ZV9zLmMKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMKQEAgLTE2OSw2 ICsxNjksMTAgQEAga2FkbTVfc19jcmVhdGVfcHJpbmNpcGFsKHZvaWQgKnNlcnZlcl9oYW5kbGUs CiAgICAgZW50LmVudHJ5LmtleXMubGVuID0gMDsKICAgICBlbnQuZW50cnkua2V5cy52YWwgPSBO VUxMOwogCisgICAgcmV0ID0gZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKKyAgICBpZiAocmV0 KQorCWdvdG8gb3V0OworCiAgICAgcmV0ID0gX2thZG01X3NldF9rZXlzKGNvbnRleHQsICZlbnQu ZW50cnksIHBhc3N3b3JkKTsKICAgICBpZiAocmV0KQogCWdvdG8gb3V0OwpkaWZmIC0tZ2l0IGEv Y3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaCBiL2NyeXB0by9oZWltZGFsL2xp Yi9rYWRtNS9rYWRtNV9sb2NsLmgKaW5kZXggNjhiNmE1ZWJmMDI0Li42M2IzNjdhYjdlMjEgMTAw NjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2NsLmgKKysrIGIvY3J5 cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaApAQCAtNzksNSArNzksNiBAQAogI2lu Y2x1ZGUgPGRlci5oPgogI2luY2x1ZGUgPHBhcnNlX3VuaXRzLmg+CiAjaW5jbHVkZSAicHJpdmF0 ZS5oIgorI2luY2x1ZGUgImZic2Rfb3NzbF9wcm92aWRlci5oIgogCiAjZW5kaWYgLyogX19LQURN NV9MT0NMX0hfXyAqLwpkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4 dC5jIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jCmluZGV4IDg2YmZlNTM5Yjk3 NC4uYjAwMmNlNjUxYTdmIDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250 ZXh0LmMKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jCkBAIC0zOTIsNiAr MzkyLDggQEAga3JiNV9pbml0X2NvbnRleHQoa3JiNV9jb250ZXh0ICpjb250ZXh0KQogICAgIH0K ICAgICBIRUlNREFMX01VVEVYX2luaXQocC0+bXV0ZXgpOwogCisgICAgZmJzZF9vc3NsX3Byb3Zp ZGVyX2xvYWQoKTsKKwogICAgIHAtPmZsYWdzIHw9IEtSQjVfQ1RYX0ZfSE9NRURJUl9BQ0NFU1M7 CiAKICAgICByZXQgPSBrcmI1X2dldF9kZWZhdWx0X2NvbmZpZ19maWxlcygmZmlsZXMpOwpkaWZm IC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRvLmMgYi9jcnlwdG8vaGVpbWRh bC9saWIva3JiNS9jcnlwdG8uYwppbmRleCA2N2VjZWY2MmU4NzUuLjE5MTgyYjVjNmNhMyAxMDA2 NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKKysrIGIvY3J5cHRvL2hl aW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKQEAgLTIwNTQsNiArMjA1NCw3IEBAIGtyYjVfY3J5cHRv X2luaXQoa3JiNV9jb250ZXh0IGNvbnRleHQsCiAJKmNyeXB0byA9IE5VTEw7CiAJcmV0dXJuIHJl dDsKICAgICB9CisgICAgKHZvaWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CiAgICAgKCpj cnlwdG8pLT5rZXkuc2NoZWR1bGUgPSBOVUxMOwogICAgICgqY3J5cHRvKS0+bnVtX2tleV91c2Fn ZSA9IDA7CiAgICAgKCpjcnlwdG8pLT5rZXlfdXNhZ2UgPSBOVUxMOwpkaWZmIC0tZ2l0IGEvY3J5 cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2Fs dC5jCmluZGV4IDVlNGM4YTFjODU3Mi4uMmIxZmJlZTgwYWI2IDEwMDY0NAotLS0gYS9jcnlwdG8v aGVpbWRhbC9saWIva3JiNS9zYWx0LmMKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2Fs dC5jCkBAIC00Myw2ICs0Myw4IEBAIGtyYjVfc2FsdHR5cGVfdG9fc3RyaW5nIChrcmI1X2NvbnRl eHQgY29udGV4dCwKICAgICBzdHJ1Y3QgX2tyYjVfZW5jcnlwdGlvbl90eXBlICplOwogICAgIHN0 cnVjdCBzYWx0X3R5cGUgKnN0OwogCisgICAgKHZvaWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2Fk KCk7CisKICAgICBlID0gX2tyYjVfZmluZF9lbmN0eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0g TlVMTCkgewogCWtyYjVfc2V0X2Vycm9yX21lc3NhZ2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBF X05PU1VQUCwKQEAgLTc1LDYgKzc3LDggQEAga3JiNV9zdHJpbmdfdG9fc2FsdHR5cGUgKGtyYjVf Y29udGV4dCBjb250ZXh0LAogICAgIHN0cnVjdCBfa3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAg ICAgc3RydWN0IHNhbHRfdHlwZSAqc3Q7CiAKKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVy X2xvYWQoKTsKKwogICAgIGUgPSBfa3JiNV9maW5kX2VuY3R5cGUgKGV0eXBlKTsKICAgICBpZiAo ZSA9PSBOVUxMKSB7CiAJa3JiNV9zZXRfZXJyb3JfbWVzc2FnZShjb250ZXh0LCBLUkI1X1BST0df RVRZUEVfTk9TVVBQLApAQCAtMTk2LDYgKzIwMCw3IEBAIGtyYjVfc3RyaW5nX3RvX2tleV9kYXRh X3NhbHRfb3BhcXVlIChrcmI1X2NvbnRleHQgY29udGV4dCwKIAkJCSAgICAgICBlbmN0eXBlKTsK IAlyZXR1cm4gS1JCNV9QUk9HX0VUWVBFX05PU1VQUDsKICAgICB9CisgICAgKHZvaWQpIGZic2Rf b3NzbF9wcm92aWRlcl9sb2FkKCk7CiAgICAgZm9yKHN0ID0gZXQtPmtleXR5cGUtPnN0cmluZ190 b19rZXk7IHN0ICYmIHN0LT50eXBlOyBzdCsrKQogCWlmKHN0LT50eXBlID09IHNhbHQuc2FsdHR5 cGUpCiAJICAgIHJldHVybiAoKnN0LT5zdHJpbmdfdG9fa2V5KShjb250ZXh0LCBlbmN0eXBlLCBw YXNzd29yZCwKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNj cmlwdC5tYXAgYi9jcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwCmlu ZGV4IDcyZDJlYTdlNGY3Yy4uYmIyMTM5ZWQ3NGNjIDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRh bC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9y b2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKQEAgLTEzLDYgKzEzLDcgQEAgSEVJTURBTF9ST0tFTl8x LjAgewogCQljdF9tZW1jbXA7CiAJCWVycjsKIAkJZXJyeDsKKwkJZmJzZF9vc3NsX3Byb3ZpZGVy X2xvYWQ7CiAJCWZyZWVfZ2V0YXJnX3N0cmluZ3M7CiAJCWdldF9kZWZhdWx0X3VzZXJuYW1lOwog CQlnZXRfd2luZG93X3NpemU7CmRpZmYgLS1naXQgYS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8t aGVhZGVycy5oIGIva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaAppbmRleCAzYWUw ZDk2MjRmZmQuLjJjYzg3MDY0Mjk2NCAxMDA2NDQKLS0tIGEva2VyYmVyb3M1L2luY2x1ZGUvY3J5 cHRvLWhlYWRlcnMuaAorKysgYi9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCkBA IC0xNyw1ICsxNyw5IEBACiAjaW5jbHVkZSA8b3BlbnNzbC9lYy5oPgogI2luY2x1ZGUgPG9wZW5z c2wvZWNkc2EuaD4KICNpbmNsdWRlIDxvcGVuc3NsL2VjZGguaD4KKyNpZiBkZWZpbmVkKE9QRU5T U0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorI2luY2x1 ZGUgPG9wZW5zc2wvcHJvdmlkZXIuaD4KKyNpbmNsdWRlICJmYnNkX29zc2xfcHJvdmlkZXIuaCIK KyNlbmRpZgogCiAjZW5kaWYgLyogX19jcnlwdG9faGVhZGVyc19oX18gKi8KZGlmZiAtLWdpdCBh L2tlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oIGIva2VyYmVyb3M1L2luY2x1 ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmgKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MDAwMDAwLi4wMTM5ODNjYTlmODMKLS0tIC9kZXYvbnVsbAorKysgYi9rZXJiZXJvczUvaW5jbHVk ZS9mYnNkX29zc2xfcHJvdmlkZXIuaApAQCAtMCwwICsxLDQgQEAKKyNpZm5kZWYgX19mYnNkX29z c2xfcHJvdmlkZXJfaAorI2RlZmluZSBfX2Zic2Rfb3NzbF9wcm92aWRlcl9oCitpbnQgIGZic2Rf b3NzbF9wcm92aWRlcl9sb2FkKHZvaWQpOworI2VuZGlmCmRpZmYgLS1naXQgYS9rZXJiZXJvczUv bGliL2xpYnJva2VuL01ha2VmaWxlIGIva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZQpp bmRleCAwYzQ2YmE2YzRjYjUuLjE1MDY3N2Y0ODc5YyAxMDA2NDQKLS0tIGEva2VyYmVyb3M1L2xp Yi9saWJyb2tlbi9NYWtlZmlsZQorKysgYi9rZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxl CkBAIC0yLDcgKzIsNyBAQAogUEFDS0FHRT0Ja2VyYmVyb3MtbGliCiAKIExJQj0Jcm9rZW4KLUxJ QkFERD0JY3J5cHQKK0xJQkFERD0JY3J5cHQgY3J5cHRvCiBWRVJTSU9OX01BUD0JJHtLUkI1RElS fS9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwCiBJTkNTPQlyb2tlbi5oIFwKIAlyb2tlbi1j b21tb24uaCBcCkBAIC03NCwxNSArNzQsMTkgQEAgU1JDUz0JYmFzZTY0LmMgXAogCXZpcy5jIFwK IAl3YXJuZXJyLmMgXAogCXdyaXRlX3BpZC5jIFwKLQl4ZnJlZS5jCisJeGZyZWUuYyBcCisJZmJz ZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYwogCi1DRkxBR1MrPS1JJHtLUkI1RElSfS9saWIvcm9rZW4g LUkuCitDRkxBR1MrPS1JJHtLUkI1RElSfS9saWIvcm9rZW4gXAorCS1JJHtTUkNUT1B9L2tlcmJl cm9zNS9pbmNsdWRlIFwKKwktSSR7S1JCNURJUn0vbGliL2tyYjUgLUkuCiAKIENMRUFORklMRVM9 IHJva2VuLmgKIAogcm9rZW4uaDoKIAkke01BS0VfUk9LRU59ID4gJHsuVEFSR0VUfQogCisKIC5p bmNsdWRlIDxic2QubGliLm1rPgogCiAuUEFUSDogJHtLUkI1RElSfS9saWIvcm9rZW4KZGlmZiAt LWdpdCBhL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYyBi L2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYwpuZXcgZmls ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAuLjA2YWQ2ZjAxYjhiOAotLS0gL2Rldi9u dWxsCisrKyBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQu YwpAQCAtMCwwICsxLDQwIEBACisjaW5jbHVkZSA8a3JiNV9sb2NsLmg+CisKK3N0YXRpYyB2b2lk IGZic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQodm9pZCk7CisKK3N0YXRpYyBPU1NMX1BST1ZJREVS ICpsZWdhY3k7CitzdGF0aWMgT1NTTF9QUk9WSURFUiAqZGVmbHQ7CitzdGF0aWMgaW50IHByb3Zp ZGVyc19sb2FkZWQgPSAwOworCitpbnQKK2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkKHZvaWQpCit7 CisjaWYgZGVmaW5lZChPUEVOU1NMX1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05f TUFKT1IgPj0gMykKKwlpZiAocHJvdmlkZXJzX2xvYWRlZCA9PSAwKSB7CisJCWlmICgobGVnYWN5 ID0gT1NTTF9QUk9WSURFUl9sb2FkKE5VTEwsICJsZWdhY3kiKSkgPT0gTlVMTCkKKwkJCXJldHVy biAoRUlOVkFMKTsKKwkJaWYgKChkZWZsdCA9IE9TU0xfUFJPVklERVJfbG9hZChOVUxMLCAiZGVm YXVsdCIpKSA9PSBOVUxMKSB7CisJCQlPU1NMX1BST1ZJREVSX3VubG9hZChsZWdhY3kpOworCQkJ cmV0dXJuIChFSU5WQUwpOworCQl9CisJCXByb3ZpZGVyc19sb2FkZWQgPSAxOworCQlpZiAoYXRl eGl0KGZic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQpKSB7CisJCQlmYnNkX29zc2xfcHJvdmlkZXJf dW5sb2FkKCk7CisJCQlyZXR1cm4gKEVOT01FTSk7CisJCX0KKwl9CisjZW5kaWYKKwlyZXR1cm4g KDApOworfQorCitzdGF0aWMgdm9pZAorZmJzZF9vc3NsX3Byb3ZpZGVyX3VubG9hZCh2b2lkKQor eworI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9O X01BSk9SID49IDMpCisJaWYgKHByb3ZpZGVyc19sb2FkZWQgPT0gMSkgeworCQlPU1NMX1BST1ZJ REVSX3VubG9hZChsZWdhY3kpOworCQlPU1NMX1BST1ZJREVSX3VubG9hZChkZWZsdCk7CisJCXBy b3ZpZGVyc19sb2FkZWQgPSAwOworCX0KKyNlbmRpZgorfQpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1 L2xpYmV4ZWMva2RjL01ha2VmaWxlIGIva2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlCmlu ZGV4IDQxZmRlOTExNWMwMC4uMjExZjRmMzc5MDU0IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvbGli ZXhlYy9rZGMvTWFrZWZpbGUKKysrIGIva2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlCkBA IC0xMSw3ICsxMSw3IEBAIFNSQ1M9CWNvbmZpZy5jIFwKIAogQ0ZMQUdTKz0tSSR7S1JCNURJUn0v bGliL2tyYjUgLUkke0tSQjVESVJ9L2xpYi9hc24xIC1JJHtLUkI1RElSfS9saWIvcm9rZW4gXAog CS1JJHtLUkI1RElSfS9rZGMgLUkke1NSQ1RPUH0vY29udHJpYi9jb21fZXJyICR7TERBUENGTEFH U30KLUxJQkFERD0Ja2RjIGhkYiBrcmI1IHJva2VuIGNyeXB0IHZlcnMKK0xJQkFERD0Ja2RjIGhk YiBrcmI1IHJva2VuIGNyeXB0IHZlcnMgY3J5cHRvCiBMREZMQUdTPSR7TERBUExERkxBR1N9CiAK IC5pbmNsdWRlIDxic2QucHJvZy5taz4KZGlmZiAtLWdpdCBhL3NoYXJlL21rL3NyYy5saWJuYW1l cy5tayBiL3NoYXJlL21rL3NyYy5saWJuYW1lcy5tawppbmRleCAzMzE3MzUwYTg4YTMuLmYzMTI3 NTYyYmQ4ZiAxMDA2NDQKLS0tIGEvc2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rCisrKyBiL3NoYXJl L21rL3NyYy5saWJuYW1lcy5tawpAQCAtMzY3LDcgKzM2Nyw3IEBAIF9EUF9wYW0rPQlzc2gKIC5p ZiAke01LX05JU30gIT0gIm5vIgogX0RQX3BhbSs9CXlwY2xudAogLmVuZGlmCi1fRFBfcm9rZW49 CWNyeXB0CitfRFBfcm9rZW49CWNyeXB0IGNyeXB0bwogX0RQX2thZG01Y2xudD0JY29tX2VyciBr cmI1IHJva2VuCiBfRFBfa2FkbTVzcnY9CWNvbV9lcnIgaGRiIGtyYjUgcm9rZW4KIF9EUF9oZWlt bnRsbT0JY3J5cHRvIGNvbV9lcnIga3JiNSByb2tlbgotLSAKMi40My4wCgo= 246909 2023-12-08 14:25:07 +0000 2023-12-11 21:49:53 +0000 Enable weak encrypton for heimdal openssl.cnf.diff text/plain 774 cy ZGlmZiAtLWdpdCBhL2NyeXB0by9vcGVuc3NsL2FwcHMvb3BlbnNzbC5jbmYgYi9jcnlwdG8vb3Bl bnNzbC9hcHBzL29wZW5zc2wuY25mCmluZGV4IDc5OTYxMjBjYzY3ZS4uYjVlN2RhMGEzOGNiIDEw MDY0NAotLS0gYS9jcnlwdG8vb3BlbnNzbC9hcHBzL29wZW5zc2wuY25mCisrKyBiL2NyeXB0by9v cGVuc3NsL2FwcHMvb3BlbnNzbC5jbmYKQEAgLTU3LDYgKzU3LDcgQEAgcHJvdmlkZXJzID0gcHJv dmlkZXJfc2VjdAogIyBMaXN0IG9mIHByb3ZpZGVycyB0byBsb2FkCiBbcHJvdmlkZXJfc2VjdF0K IGRlZmF1bHQgPSBkZWZhdWx0X3NlY3QKK2xlZ2FjeSA9IGxlZ2FjeV9zZWN0CiAjIFRoZSBmaXBz IHNlY3Rpb24gbmFtZSBzaG91bGQgbWF0Y2ggdGhlIHNlY3Rpb24gbmFtZSBpbnNpZGUgdGhlCiAj IGluY2x1ZGVkIGZpcHNtb2R1bGUuY25mLgogIyBmaXBzID0gZmlwc19zZWN0CkBAIC03MCw3ICs3 MSwxMCBAQCBkZWZhdWx0ID0gZGVmYXVsdF9zZWN0CiAjIE9wZW5TU0wgbWF5IG5vdCB3b3JrIGNv cnJlY3RseSB3aGljaCBjb3VsZCBsZWFkIHRvIHNpZ25pZmljYW50IHN5c3RlbQogIyBwcm9ibGVt cyBpbmNsdWRpbmcgaW5hYmlsaXR5IHRvIHJlbW90ZWx5IGFjY2VzcyB0aGUgc3lzdGVtLgogW2Rl ZmF1bHRfc2VjdF0KLSMgYWN0aXZhdGUgPSAxCithY3RpdmF0ZSA9IDEKKworW2xhZ2FjeV9zZWN0 XQorYWN0aXZhdGUgPSAxCiAKIAogIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMK 246930 2023-12-09 14:33:16 +0000 2024-01-15 17:09:12 +0000 Enable Legacy Provider 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 9603 cy RnJvbSBlZDAyN2I1MDc5ZTMxZDY4M2YzODk2OWE4ZGNhMGFlOGJhOGY1ODU4IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKTUZDIGFmdGVyOgkJMyBkYXlz Ci0tLQogTWFrZWZpbGUuaW5jMSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgIDUg KystCiBjcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYyAgICAgICAgICAgfCAgNCAr KwogY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaCAgICAgICAgIHwgIDEgKwog Y3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jICAgICAgICAgICAgIHwgIDIgKwogY3J5 cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRvLmMgICAgICAgICAgICAgIHwgIDEgKwogY3J5cHRv L2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jICAgICAgICAgICAgICAgIHwgIDUgKysrCiBjcnlwdG8v aGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwICAgfCAgMSArCiBrZXJiZXJvczUv aW5jbHVkZS9jcnlwdG8taGVhZGVycy5oICAgICAgICAgICAgfCAgNCArKwoga2VyYmVyb3M1L2lu Y2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmggICAgICAgIHwgIDQgKysKIGtlcmJlcm9zNS9saWIv bGlicm9rZW4vTWFrZWZpbGUgICAgICAgICAgICAgICB8IDEwICsrKy0tCiAuLi4vbGliL2xpYnJv a2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMgICAgfCA0MCArKysrKysrKysrKysrKysrKysr CiBrZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUgICAgICAgICAgICAgICAgfCAgMiArLQog c2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rICAgICAgICAgICAgICAgICAgICAgIHwgIDIgKy0KIDEz IGZpbGVzIGNoYW5nZWQsIDc0IGluc2VydGlvbnMoKyksIDcgZGVsZXRpb25zKC0pCiBjcmVhdGUg bW9kZSAxMDA2NDQga2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmgKIGNyZWF0 ZSBtb2RlIDEwMDY0NCBrZXJiZXJvczUvbGliL2xpYnJva2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9s b2FkLmMKCmRpZmYgLS1naXQgYS9NYWtlZmlsZS5pbmMxIGIvTWFrZWZpbGUuaW5jMQppbmRleCA0 NWQ1YzVkMzg3NmIuLjYyMmNjNDAzMTc3MyAxMDA2NDQKLS0tIGEvTWFrZWZpbGUuaW5jMQorKysg Yi9NYWtlZmlsZS5pbmMxCkBAIC0yNjIyLDcgKzI2MjIsOCBAQCAke19idH0tbGliL2xpYmR3YXJm OiAke19idH0tbGliL2xpYnoKIAogIyBsaWJyb2tlbiBkZXBlbmRzIG9uIGxpYmNyeXB0CiBfb3Ro ZXJfYm9vdHN0cmFwX3Rvb2xzKz1saWIvbGliY3J5cHQKLSR7X2J0fS1saWIvbGlicm9rZW46ICR7 X2J0fS1saWIvbGliY3J5cHQKK19vdGhlcl9ib290c3RyYXBfdG9vbHMrPXNlY3VyZS9saWIvbGli Y3J5cHRvCiske19idH0tbGliL2xpYnJva2VuOiAke19idH0tbGliL2xpYmNyeXB0ICR7X2J0fS1s aWIvbGliY3J5cHRvCiAuZWxzZQogIyBBbGwgdG9vbHMgaW4gX2Jhc2ljX2Jvb3RzdHJhcF90b29s cyBoYXZlIHRoZSBzYW1lIG5hbWUgYXMgdGhlIHN1YmRpcmVjdG9yeQogIyBzbyB3ZSBjYW4gdXNl IDpUIHRvIGdldCB0aGUgbmFtZSBvZiB0aGUgc3ltbGlua3MgdGhhdCB3ZSBuZWVkIHRvIGNyZWF0 ZS4KQEAgLTMyNjQsNyArMzI2NSw3IEBAIGtlcmJlcm9zNS9saWIvbGlia3JiNV9fTDoga2VyYmVy b3M1L2xpYi9saWJhc24xX19MIGxpYi9saWJjb21fZXJyX19MIFwKICAgICBsaWIvbGliY3J5cHRf X0wgc2VjdXJlL2xpYi9saWJjcnlwdG9fX0wga2VyYmVyb3M1L2xpYi9saWJoeDUwOV9fTCBcCiAg ICAga2VyYmVyb3M1L2xpYi9saWJyb2tlbl9fTCBrZXJiZXJvczUvbGliL2xpYndpbmRfX0wgXAog ICAgIGtlcmJlcm9zNS9saWIvbGliaGVpbWJhc2VfX0wga2VyYmVyb3M1L2xpYi9saWJoZWltaXBj Y19fTAota2VyYmVyb3M1L2xpYi9saWJyb2tlbl9fTDogbGliL2xpYmNyeXB0X19MCitrZXJiZXJv czUvbGliL2xpYnJva2VuX19MOiBsaWIvbGliY3J5cHRfX0wgc2VjdXJlL2xpYi9saWJjcnlwdG9f X0wKIGtlcmJlcm9zNS9saWIvbGlid2luZF9fTDoga2VyYmVyb3M1L2xpYi9saWJyb2tlbl9fTCBs aWIvbGliY29tX2Vycl9fTAoga2VyYmVyb3M1L2xpYi9saWJoZWltYmFzZV9fTDogbGliL2xpYnRo cl9fTAoga2VyYmVyb3M1L2xpYi9saWJoZWltaXBjY19fTDoga2VyYmVyb3M1L2xpYi9saWJyb2tl bl9fTCBrZXJiZXJvczUvbGliL2xpYmhlaW1iYXNlX19MIGxpYi9saWJ0aHJfX0wKZGlmZiAtLWdp dCBhL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jIGIvY3J5cHRvL2hlaW1kYWwv bGliL2thZG01L2NyZWF0ZV9zLmMKaW5kZXggMTAzM2NhMTAzMjM5Li4yNjdlOWJiZGEyYTAgMTAw NjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jCisrKyBiL2NyeXB0 by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jCkBAIC0xNjksNiArMTY5LDEwIEBAIGthZG01 X3NfY3JlYXRlX3ByaW5jaXBhbCh2b2lkICpzZXJ2ZXJfaGFuZGxlLAogICAgIGVudC5lbnRyeS5r ZXlzLmxlbiA9IDA7CiAgICAgZW50LmVudHJ5LmtleXMudmFsID0gTlVMTDsKIAorICAgIHJldCA9 IGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisgICAgaWYgKHJldCkKKwlnb3RvIG91dDsKKwog ICAgIHJldCA9IF9rYWRtNV9zZXRfa2V5cyhjb250ZXh0LCAmZW50LmVudHJ5LCBwYXNzd29yZCk7 CiAgICAgaWYgKHJldCkKIAlnb3RvIG91dDsKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xp Yi9rYWRtNS9rYWRtNV9sb2NsLmggYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9j bC5oCmluZGV4IDY4YjZhNWViZjAyNC4uNjNiMzY3YWI3ZTIxIDEwMDY0NAotLS0gYS9jcnlwdG8v aGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9r YWRtNS9rYWRtNV9sb2NsLmgKQEAgLTc5LDUgKzc5LDYgQEAKICNpbmNsdWRlIDxkZXIuaD4KICNp bmNsdWRlIDxwYXJzZV91bml0cy5oPgogI2luY2x1ZGUgInByaXZhdGUuaCIKKyNpbmNsdWRlICJm YnNkX29zc2xfcHJvdmlkZXIuaCIKIAogI2VuZGlmIC8qIF9fS0FETTVfTE9DTF9IX18gKi8KZGlm ZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYyBiL2NyeXB0by9oZWlt ZGFsL2xpYi9rcmI1L2NvbnRleHQuYwppbmRleCA4NmJmZTUzOWI5NzQuLmIwMDJjZTY1MWE3ZiAx MDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jCisrKyBiL2NyeXB0 by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYwpAQCAtMzkyLDYgKzM5Miw4IEBAIGtyYjVfaW5p dF9jb250ZXh0KGtyYjVfY29udGV4dCAqY29udGV4dCkKICAgICB9CiAgICAgSEVJTURBTF9NVVRF WF9pbml0KHAtPm11dGV4KTsKIAorICAgIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisKICAg ICBwLT5mbGFncyB8PSBLUkI1X0NUWF9GX0hPTUVESVJfQUNDRVNTOwogCiAgICAgcmV0ID0ga3Ji NV9nZXRfZGVmYXVsdF9jb25maWdfZmlsZXMoJmZpbGVzKTsKZGlmZiAtLWdpdCBhL2NyeXB0by9o ZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRv LmMKaW5kZXggNjdlY2VmNjJlODc1Li4xOTE4MmI1YzZjYTMgMTAwNjQ0Ci0tLSBhL2NyeXB0by9o ZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2Ny eXB0by5jCkBAIC0yMDU0LDYgKzIwNTQsNyBAQCBrcmI1X2NyeXB0b19pbml0KGtyYjVfY29udGV4 dCBjb250ZXh0LAogCSpjcnlwdG8gPSBOVUxMOwogCXJldHVybiByZXQ7CiAgICAgfQorICAgICh2 b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOwogICAgICgqY3J5cHRvKS0+a2V5LnNjaGVk dWxlID0gTlVMTDsKICAgICAoKmNyeXB0byktPm51bV9rZXlfdXNhZ2UgPSAwOwogICAgICgqY3J5 cHRvKS0+a2V5X3VzYWdlID0gTlVMTDsKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9r cmI1L3NhbHQuYyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwppbmRleCA1ZTRjOGEx Yzg1NzIuLjJiMWZiZWU4MGFiNiAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUv c2FsdC5jCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwpAQCAtNDMsNiArNDMs OCBAQCBrcmI1X3NhbHR0eXBlX3RvX3N0cmluZyAoa3JiNV9jb250ZXh0IGNvbnRleHQsCiAgICAg c3RydWN0IF9rcmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBzdHJ1Y3Qgc2FsdF90eXBlICpz dDsKIAorICAgICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworCiAgICAgZSA9IF9r cmI1X2ZpbmRfZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09IE5VTEwpIHsKIAlrcmI1X3Nl dF9lcnJvcl9tZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQRV9OT1NVUFAsCkBAIC03NSw2 ICs3Nyw4IEBAIGtyYjVfc3RyaW5nX3RvX3NhbHR0eXBlIChrcmI1X2NvbnRleHQgY29udGV4dCwK ICAgICBzdHJ1Y3QgX2tyYjVfZW5jcnlwdGlvbl90eXBlICplOwogICAgIHN0cnVjdCBzYWx0X3R5 cGUgKnN0OwogCisgICAgKHZvaWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisKICAgICBl ID0gX2tyYjVfZmluZF9lbmN0eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0gTlVMTCkgewogCWty YjVfc2V0X2Vycm9yX21lc3NhZ2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBFX05PU1VQUCwKQEAg LTE5Niw2ICsyMDAsNyBAQCBrcmI1X3N0cmluZ190b19rZXlfZGF0YV9zYWx0X29wYXF1ZSAoa3Ji NV9jb250ZXh0IGNvbnRleHQsCiAJCQkgICAgICAgZW5jdHlwZSk7CiAJcmV0dXJuIEtSQjVfUFJP R19FVFlQRV9OT1NVUFA7CiAgICAgfQorICAgICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZCgpOwogICAgIGZvcihzdCA9IGV0LT5rZXl0eXBlLT5zdHJpbmdfdG9fa2V5OyBzdCAmJiBzdC0+ dHlwZTsgc3QrKykKIAlpZihzdC0+dHlwZSA9PSBzYWx0LnNhbHR0eXBlKQogCSAgICByZXR1cm4g KCpzdC0+c3RyaW5nX3RvX2tleSkoY29udGV4dCwgZW5jdHlwZSwgcGFzc3dvcmQsCmRpZmYgLS1n aXQgYS9jcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwIGIvY3J5cHRv L2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcAppbmRleCA3MmQyZWE3ZTRmN2Mu LmJiMjEzOWVkNzRjYyAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNp b24tc2NyaXB0Lm1hcAorKysgYi9jcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3Jp cHQubWFwCkBAIC0xMyw2ICsxMyw3IEBAIEhFSU1EQUxfUk9LRU5fMS4wIHsKIAkJY3RfbWVtY21w OwogCQllcnI7CiAJCWVycng7CisJCWZic2Rfb3NzbF9wcm92aWRlcl9sb2FkOwogCQlmcmVlX2dl dGFyZ19zdHJpbmdzOwogCQlnZXRfZGVmYXVsdF91c2VybmFtZTsKIAkJZ2V0X3dpbmRvd19zaXpl OwpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCBiL2tlcmJl cm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKaW5kZXggM2FlMGQ5NjI0ZmZkLi4yY2M4NzA2 NDI5NjQgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKKysr IGIva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaApAQCAtMTcsNSArMTcsOSBAQAog I2luY2x1ZGUgPG9wZW5zc2wvZWMuaD4KICNpbmNsdWRlIDxvcGVuc3NsL2VjZHNhLmg+CiAjaW5j bHVkZSA8b3BlbnNzbC9lY2RoLmg+CisjaWYgZGVmaW5lZChPUEVOU1NMX1ZFUlNJT05fTUFKT1Ip ICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0gMykKKyNpbmNsdWRlIDxvcGVuc3NsL3Byb3Zp ZGVyLmg+CisjaW5jbHVkZSAiZmJzZF9vc3NsX3Byb3ZpZGVyLmgiCisjZW5kaWYKIAogI2VuZGlm IC8qIF9fY3J5cHRvX2hlYWRlcnNfaF9fICovCmRpZmYgLS1naXQgYS9rZXJiZXJvczUvaW5jbHVk ZS9mYnNkX29zc2xfcHJvdmlkZXIuaCBiL2tlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92 aWRlci5oCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMC4uMDEzOTgzY2E5 ZjgzCi0tLSAvZGV2L251bGwKKysrIGIva2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3Zp ZGVyLmgKQEAgLTAsMCArMSw0IEBACisjaWZuZGVmIF9fZmJzZF9vc3NsX3Byb3ZpZGVyX2gKKyNk ZWZpbmUgX19mYnNkX29zc2xfcHJvdmlkZXJfaAoraW50ICBmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZCh2b2lkKTsKKyNlbmRpZgpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtl ZmlsZSBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKaW5kZXggMGM0NmJhNmM0Y2I1 Li4xNTA2NzdmNDg3OWMgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZp bGUKKysrIGIva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZQpAQCAtMiw3ICsyLDcgQEAK IFBBQ0tBR0U9CWtlcmJlcm9zLWxpYgogCiBMSUI9CXJva2VuCi1MSUJBREQ9CWNyeXB0CitMSUJB REQ9CWNyeXB0IGNyeXB0bwogVkVSU0lPTl9NQVA9CSR7S1JCNURJUn0vbGliL3Jva2VuL3ZlcnNp b24tc2NyaXB0Lm1hcAogSU5DUz0Jcm9rZW4uaCBcCiAJcm9rZW4tY29tbW9uLmggXApAQCAtNzQs MTUgKzc0LDE5IEBAIFNSQ1M9CWJhc2U2NC5jIFwKIAl2aXMuYyBcCiAJd2FybmVyci5jIFwKIAl3 cml0ZV9waWQuYyBcCi0JeGZyZWUuYworCXhmcmVlLmMgXAorCWZic2Rfb3NzbF9wcm92aWRlcl9s b2FkLmMKIAotQ0ZMQUdTKz0tSSR7S1JCNURJUn0vbGliL3Jva2VuIC1JLgorQ0ZMQUdTKz0tSSR7 S1JCNURJUn0vbGliL3Jva2VuIFwKKwktSSR7U1JDVE9QfS9rZXJiZXJvczUvaW5jbHVkZSBcCisJ LUkke0tSQjVESVJ9L2xpYi9rcmI1IC1JLgogCiBDTEVBTkZJTEVTPSByb2tlbi5oCiAKIHJva2Vu Lmg6CiAJJHtNQUtFX1JPS0VOfSA+ICR7LlRBUkdFVH0KIAorCiAuaW5jbHVkZSA8YnNkLmxpYi5t az4KIAogLlBBVEg6ICR7S1JCNURJUn0vbGliL3Jva2VuCmRpZmYgLS1naXQgYS9rZXJiZXJvczUv bGliL2xpYnJva2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMgYi9rZXJiZXJvczUvbGliL2xp YnJva2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5k ZXggMDAwMDAwMDAwMDAwLi4wNmFkNmYwMWI4YjgKLS0tIC9kZXYvbnVsbAorKysgYi9rZXJiZXJv czUvbGliL2xpYnJva2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMKQEAgLTAsMCArMSw0MCBA QAorI2luY2x1ZGUgPGtyYjVfbG9jbC5oPgorCitzdGF0aWMgdm9pZCBmYnNkX29zc2xfcHJvdmlk ZXJfdW5sb2FkKHZvaWQpOworCitzdGF0aWMgT1NTTF9QUk9WSURFUiAqbGVnYWN5Oworc3RhdGlj IE9TU0xfUFJPVklERVIgKmRlZmx0Oworc3RhdGljIGludCBwcm92aWRlcnNfbG9hZGVkID0gMDsK KworaW50CitmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCh2b2lkKQoreworI2lmIGRlZmluZWQoT1BF TlNTTF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCisJaWYg KHByb3ZpZGVyc19sb2FkZWQgPT0gMCkgeworCQlpZiAoKGxlZ2FjeSA9IE9TU0xfUFJPVklERVJf bG9hZChOVUxMLCAibGVnYWN5IikpID09IE5VTEwpCisJCQlyZXR1cm4gKEVJTlZBTCk7CisJCWlm ICgoZGVmbHQgPSBPU1NMX1BST1ZJREVSX2xvYWQoTlVMTCwgImRlZmF1bHQiKSkgPT0gTlVMTCkg eworCQkJT1NTTF9QUk9WSURFUl91bmxvYWQobGVnYWN5KTsKKwkJCXJldHVybiAoRUlOVkFMKTsK KwkJfQorCQlwcm92aWRlcnNfbG9hZGVkID0gMTsKKwkJaWYgKGF0ZXhpdChmYnNkX29zc2xfcHJv dmlkZXJfdW5sb2FkKSkgeworCQkJZmJzZF9vc3NsX3Byb3ZpZGVyX3VubG9hZCgpOworCQkJcmV0 dXJuIChFTk9NRU0pOworCQl9CisJfQorI2VuZGlmCisJcmV0dXJuICgwKTsKK30KKworc3RhdGlj IHZvaWQKK2Zic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQodm9pZCkKK3sKKyNpZiBkZWZpbmVkKE9Q RU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorCWlm IChwcm92aWRlcnNfbG9hZGVkID09IDEpIHsKKwkJT1NTTF9QUk9WSURFUl91bmxvYWQobGVnYWN5 KTsKKwkJT1NTTF9QUk9WSURFUl91bmxvYWQoZGVmbHQpOworCQlwcm92aWRlcnNfbG9hZGVkID0g MDsKKwl9CisjZW5kaWYKK30KZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtl ZmlsZSBiL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZQppbmRleCA0MWZkZTkxMTVjMDAu LjIxMWY0ZjM3OTA1NCAxMDA2NDQKLS0tIGEva2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxl CisrKyBiL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZQpAQCAtMTEsNyArMTEsNyBAQCBT UkNTPQljb25maWcuYyBcCiAKIENGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9rcmI1IC1JJHtLUkI1 RElSfS9saWIvYXNuMSAtSSR7S1JCNURJUn0vbGliL3Jva2VuIFwKIAktSSR7S1JCNURJUn0va2Rj IC1JJHtTUkNUT1B9L2NvbnRyaWIvY29tX2VyciAke0xEQVBDRkxBR1N9Ci1MSUJBREQ9CWtkYyBo ZGIga3JiNSByb2tlbiBjcnlwdCB2ZXJzCitMSUJBREQ9CWtkYyBoZGIga3JiNSByb2tlbiBjcnlw dCB2ZXJzIGNyeXB0bwogTERGTEFHUz0ke0xEQVBMREZMQUdTfQogCiAuaW5jbHVkZSA8YnNkLnBy b2cubWs+CmRpZmYgLS1naXQgYS9zaGFyZS9tay9zcmMubGlibmFtZXMubWsgYi9zaGFyZS9tay9z cmMubGlibmFtZXMubWsKaW5kZXggMzMxNzM1MGE4OGEzLi5mMzEyNzU2MmJkOGYgMTAwNjQ0Ci0t LSBhL3NoYXJlL21rL3NyYy5saWJuYW1lcy5taworKysgYi9zaGFyZS9tay9zcmMubGlibmFtZXMu bWsKQEAgLTM2Nyw3ICszNjcsNyBAQCBfRFBfcGFtKz0Jc3NoCiAuaWYgJHtNS19OSVN9ICE9ICJu byIKIF9EUF9wYW0rPQl5cGNsbnQKIC5lbmRpZgotX0RQX3Jva2VuPQljcnlwdAorX0RQX3Jva2Vu PQljcnlwdCBjcnlwdG8KIF9EUF9rYWRtNWNsbnQ9CWNvbV9lcnIga3JiNSByb2tlbgogX0RQX2th ZG01c3J2PQljb21fZXJyIGhkYiBrcmI1IHJva2VuCiBfRFBfaGVpbW50bG09CWNyeXB0byBjb21f ZXJyIGtyYjUgcm9rZW4KLS0gCjIuNDMuMAoK 246994 2023-12-11 21:49:53 +0000 2023-12-12 01:10:03 +0000 Heimdal - enable weak encryption, builds on 13 when building to upgrade to 14 or 15 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 9655 cy RnJvbSAwYTEzOGM2ZTc5NDkzNTBlNzJlMTIwYzdiZGJhZmExNDIxZDk5MjdmIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKUFI6CQkJMjcyODM1Ck1GQyBh ZnRlcjoJCTMgZGF5cwotLS0KIE1ha2VmaWxlLmluYzEgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICA1ICsrLQogY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMgICAg ICAgICAgIHwgIDQgKysKIGNyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2NsLmggICAg ICAgICB8ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYyAgICAgICAgICAg ICB8ICAyICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jICAgICAgICAgICAgICB8 ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyAgICAgICAgICAgICAgICB8ICA1 ICsrKwogY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcCAgIHwgIDEg Kwoga2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCAgICAgICAgICAgIHwgIDQgKysK IGtlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oICAgICAgICB8ICA0ICsrCiBr ZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlICAgICAgICAgICAgICAgfCAxMSArKystLQog Li4uL2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jICAgIHwgNDAgKysrKysr KysrKysrKysrKysrKwoga2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlICAgICAgICAgICAg ICAgIHwgIDIgKy0KIHNoYXJlL21rL3NyYy5saWJuYW1lcy5tayAgICAgICAgICAgICAgICAgICAg ICB8ICAyICstCiAxMyBmaWxlcyBjaGFuZ2VkLCA3NSBpbnNlcnRpb25zKCspLCA3IGRlbGV0aW9u cygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IGtlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92 aWRlci5oCiBjcmVhdGUgbW9kZSAxMDA2NDQga2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29z c2xfcHJvdmlkZXJfbG9hZC5jCgpkaWZmIC0tZ2l0IGEvTWFrZWZpbGUuaW5jMSBiL01ha2VmaWxl LmluYzEKaW5kZXggYjUwOWI2MDM4MjFiLi5hNzRlNzRlOGU4OTAgMTAwNjQ0Ci0tLSBhL01ha2Vm aWxlLmluYzEKKysrIGIvTWFrZWZpbGUuaW5jMQpAQCAtMjYyNCw3ICsyNjI0LDggQEAgJHtfYnR9 LWxpYi9saWJkd2FyZjogJHtfYnR9LWxpYi9saWJ6CiAKICMgbGlicm9rZW4gZGVwZW5kcyBvbiBs aWJjcnlwdAogX290aGVyX2Jvb3RzdHJhcF90b29scys9bGliL2xpYmNyeXB0Ci0ke19idH0tbGli L2xpYnJva2VuOiAke19idH0tbGliL2xpYmNyeXB0Citfb3RoZXJfYm9vdHN0cmFwX3Rvb2xzKz1z ZWN1cmUvbGliL2xpYmNyeXB0bworJHtfYnR9LWxpYi9saWJyb2tlbjogJHtfYnR9LWxpYi9saWJj cnlwdCAke19idH0tbGliL2xpYmNyeXB0bwogLmVsc2UKICMgQWxsIHRvb2xzIGluIF9iYXNpY19i b290c3RyYXBfdG9vbHMgaGF2ZSB0aGUgc2FtZSBuYW1lIGFzIHRoZSBzdWJkaXJlY3RvcnkKICMg c28gd2UgY2FuIHVzZSA6VCB0byBnZXQgdGhlIG5hbWUgb2YgdGhlIHN5bWxpbmtzIHRoYXQgd2Ug bmVlZCB0byBjcmVhdGUuCkBAIC0zMjY2LDcgKzMyNjcsNyBAQCBrZXJiZXJvczUvbGliL2xpYmty YjVfX0w6IGtlcmJlcm9zNS9saWIvbGliYXNuMV9fTCBsaWIvbGliY29tX2Vycl9fTCBcCiAgICAg bGliL2xpYmNyeXB0X19MIHNlY3VyZS9saWIvbGliY3J5cHRvX19MIGtlcmJlcm9zNS9saWIvbGli aHg1MDlfX0wgXAogICAgIGtlcmJlcm9zNS9saWIvbGlicm9rZW5fX0wga2VyYmVyb3M1L2xpYi9s aWJ3aW5kX19MIFwKICAgICBrZXJiZXJvczUvbGliL2xpYmhlaW1iYXNlX19MIGtlcmJlcm9zNS9s aWIvbGliaGVpbWlwY2NfX0wKLWtlcmJlcm9zNS9saWIvbGlicm9rZW5fX0w6IGxpYi9saWJjcnlw dF9fTAora2VyYmVyb3M1L2xpYi9saWJyb2tlbl9fTDogbGliL2xpYmNyeXB0X19MIHNlY3VyZS9s aWIvbGliY3J5cHRvX19MCiBrZXJiZXJvczUvbGliL2xpYndpbmRfX0w6IGtlcmJlcm9zNS9saWIv bGlicm9rZW5fX0wgbGliL2xpYmNvbV9lcnJfX0wKIGtlcmJlcm9zNS9saWIvbGliaGVpbWJhc2Vf X0w6IGxpYi9saWJ0aHJfX0wKIGtlcmJlcm9zNS9saWIvbGliaGVpbWlwY2NfX0w6IGtlcmJlcm9z NS9saWIvbGlicm9rZW5fX0wga2VyYmVyb3M1L2xpYi9saWJoZWltYmFzZV9fTCBsaWIvbGlidGhy X19MCmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYyBiL2Ny eXB0by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jCmluZGV4IDEwMzNjYTEwMzIzOS4uMjY3 ZTliYmRhMmEwIDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3Mu YworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYwpAQCAtMTY5LDYgKzE2 OSwxMCBAQCBrYWRtNV9zX2NyZWF0ZV9wcmluY2lwYWwodm9pZCAqc2VydmVyX2hhbmRsZSwKICAg ICBlbnQuZW50cnkua2V5cy5sZW4gPSAwOwogICAgIGVudC5lbnRyeS5rZXlzLnZhbCA9IE5VTEw7 CiAKKyAgICByZXQgPSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworICAgIGlmIChyZXQpCisJ Z290byBvdXQ7CisKICAgICByZXQgPSBfa2FkbTVfc2V0X2tleXMoY29udGV4dCwgJmVudC5lbnRy eSwgcGFzc3dvcmQpOwogICAgIGlmIChyZXQpCiAJZ290byBvdXQ7CmRpZmYgLS1naXQgYS9jcnlw dG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oIGIvY3J5cHRvL2hlaW1kYWwvbGliL2th ZG01L2thZG01X2xvY2wuaAppbmRleCA2OGI2YTVlYmYwMjQuLjYzYjM2N2FiN2UyMSAxMDA2NDQK LS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaAorKysgYi9jcnlwdG8v aGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oCkBAIC03OSw1ICs3OSw2IEBACiAjaW5jbHVk ZSA8ZGVyLmg+CiAjaW5jbHVkZSA8cGFyc2VfdW5pdHMuaD4KICNpbmNsdWRlICJwcml2YXRlLmgi CisjaW5jbHVkZSAiZmJzZF9vc3NsX3Byb3ZpZGVyLmgiCiAKICNlbmRpZiAvKiBfX0tBRE01X0xP Q0xfSF9fICovCmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMg Yi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMKaW5kZXggODZiZmU1MzliOTc0Li5i MDAyY2U2NTFhN2YgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQu YworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMKQEAgLTM5Miw2ICszOTIs OCBAQCBrcmI1X2luaXRfY29udGV4dChrcmI1X2NvbnRleHQgKmNvbnRleHQpCiAgICAgfQogICAg IEhFSU1EQUxfTVVURVhfaW5pdChwLT5tdXRleCk7CiAKKyAgICBmYnNkX29zc2xfcHJvdmlkZXJf bG9hZCgpOworCiAgICAgcC0+ZmxhZ3MgfD0gS1JCNV9DVFhfRl9IT01FRElSX0FDQ0VTUzsKIAog ICAgIHJldCA9IGtyYjVfZ2V0X2RlZmF1bHRfY29uZmlnX2ZpbGVzKCZmaWxlcyk7CmRpZmYgLS1n aXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYyBiL2NyeXB0by9oZWltZGFsL2xp Yi9rcmI1L2NyeXB0by5jCmluZGV4IDY3ZWNlZjYyZTg3NS4uMTkxODJiNWM2Y2EzIDEwMDY0NAot LS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYworKysgYi9jcnlwdG8vaGVpbWRh bC9saWIva3JiNS9jcnlwdG8uYwpAQCAtMjA1NCw2ICsyMDU0LDcgQEAga3JiNV9jcnlwdG9faW5p dChrcmI1X2NvbnRleHQgY29udGV4dCwKIAkqY3J5cHRvID0gTlVMTDsKIAlyZXR1cm4gcmV0Owog ICAgIH0KKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKICAgICAoKmNyeXB0 byktPmtleS5zY2hlZHVsZSA9IE5VTEw7CiAgICAgKCpjcnlwdG8pLT5udW1fa2V5X3VzYWdlID0g MDsKICAgICAoKmNyeXB0byktPmtleV91c2FnZSA9IE5VTEw7CmRpZmYgLS1naXQgYS9jcnlwdG8v aGVpbWRhbC9saWIva3JiNS9zYWx0LmMgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMK aW5kZXggNWU0YzhhMWM4NTcyLi4yYjFmYmVlODBhYjYgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWlt ZGFsL2xpYi9rcmI1L3NhbHQuYworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMK QEAgLTQzLDYgKzQzLDggQEAga3JiNV9zYWx0dHlwZV90b19zdHJpbmcgKGtyYjVfY29udGV4dCBj b250ZXh0LAogICAgIHN0cnVjdCBfa3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3RydWN0 IHNhbHRfdHlwZSAqc3Q7CiAKKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsK KwogICAgIGUgPSBfa3JiNV9maW5kX2VuY3R5cGUgKGV0eXBlKTsKICAgICBpZiAoZSA9PSBOVUxM KSB7CiAJa3JiNV9zZXRfZXJyb3JfbWVzc2FnZShjb250ZXh0LCBLUkI1X1BST0dfRVRZUEVfTk9T VVBQLApAQCAtNzUsNiArNzcsOCBAQCBrcmI1X3N0cmluZ190b19zYWx0dHlwZSAoa3JiNV9jb250 ZXh0IGNvbnRleHQsCiAgICAgc3RydWN0IF9rcmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBz dHJ1Y3Qgc2FsdF90eXBlICpzdDsKIAorICAgICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZCgpOworCiAgICAgZSA9IF9rcmI1X2ZpbmRfZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09 IE5VTEwpIHsKIAlrcmI1X3NldF9lcnJvcl9tZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQ RV9OT1NVUFAsCkBAIC0xOTYsNiArMjAwLDcgQEAga3JiNV9zdHJpbmdfdG9fa2V5X2RhdGFfc2Fs dF9vcGFxdWUgKGtyYjVfY29udGV4dCBjb250ZXh0LAogCQkJICAgICAgIGVuY3R5cGUpOwogCXJl dHVybiBLUkI1X1BST0dfRVRZUEVfTk9TVVBQOwogICAgIH0KKyAgICAodm9pZCkgZmJzZF9vc3Ns X3Byb3ZpZGVyX2xvYWQoKTsKICAgICBmb3Ioc3QgPSBldC0+a2V5dHlwZS0+c3RyaW5nX3RvX2tl eTsgc3QgJiYgc3QtPnR5cGU7IHN0KyspCiAJaWYoc3QtPnR5cGUgPT0gc2FsdC5zYWx0dHlwZSkK IAkgICAgcmV0dXJuICgqc3QtPnN0cmluZ190b19rZXkpKGNvbnRleHQsIGVuY3R5cGUsIHBhc3N3 b3JkLApkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0 Lm1hcCBiL2NyeXB0by9oZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKaW5kZXgg NzJkMmVhN2U0ZjdjLi5iYjIxMzllZDc0Y2MgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xp Yi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2Vu L3ZlcnNpb24tc2NyaXB0Lm1hcApAQCAtMTMsNiArMTMsNyBAQCBIRUlNREFMX1JPS0VOXzEuMCB7 CiAJCWN0X21lbWNtcDsKIAkJZXJyOwogCQllcnJ4OworCQlmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZDsKIAkJZnJlZV9nZXRhcmdfc3RyaW5nczsKIAkJZ2V0X2RlZmF1bHRfdXNlcm5hbWU7CiAJCWdl dF93aW5kb3dfc2l6ZTsKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFk ZXJzLmggYi9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCmluZGV4IDNhZTBkOTYy NGZmZC4uMmNjODcwNjQyOTY0IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8t aGVhZGVycy5oCisrKyBiL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKQEAgLTE3 LDUgKzE3LDkgQEAKICNpbmNsdWRlIDxvcGVuc3NsL2VjLmg+CiAjaW5jbHVkZSA8b3BlbnNzbC9l Y2RzYS5oPgogI2luY2x1ZGUgPG9wZW5zc2wvZWNkaC5oPgorI2lmIGRlZmluZWQoT1BFTlNTTF9W RVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCisjaW5jbHVkZSA8 b3BlbnNzbC9wcm92aWRlci5oPgorI2luY2x1ZGUgImZic2Rfb3NzbF9wcm92aWRlci5oIgorI2Vu ZGlmCiAKICNlbmRpZiAvKiBfX2NyeXB0b19oZWFkZXJzX2hfXyAqLwpkaWZmIC0tZ2l0IGEva2Vy YmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmggYi9rZXJiZXJvczUvaW5jbHVkZS9m YnNkX29zc2xfcHJvdmlkZXIuaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw MDAuLjAxMzk4M2NhOWY4MwotLS0gL2Rldi9udWxsCisrKyBiL2tlcmJlcm9zNS9pbmNsdWRlL2Zi c2Rfb3NzbF9wcm92aWRlci5oCkBAIC0wLDAgKzEsNCBAQAorI2lmbmRlZiBfX2Zic2Rfb3NzbF9w cm92aWRlcl9oCisjZGVmaW5lIF9fZmJzZF9vc3NsX3Byb3ZpZGVyX2gKK2ludCAgZmJzZF9vc3Ns X3Byb3ZpZGVyX2xvYWQodm9pZCk7CisjZW5kaWYKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9saWIv bGlicm9rZW4vTWFrZWZpbGUgYi9rZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlCmluZGV4 IDBjNDZiYTZjNGNiNS4uMjRkYzNhNWIyYzQ1IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvbGliL2xp YnJva2VuL01ha2VmaWxlCisrKyBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKQEAg LTIsNyArMiw3IEBACiBQQUNLQUdFPQlrZXJiZXJvcy1saWIKIAogTElCPQlyb2tlbgotTElCQURE PQljcnlwdAorTElCQUREPQljcnlwdCBjcnlwdG8KIFZFUlNJT05fTUFQPQkke0tSQjVESVJ9L2xp Yi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKIElOQ1M9CXJva2VuLmggXAogCXJva2VuLWNvbW1v bi5oIFwKQEAgLTc0LDE1ICs3NCwyMCBAQCBTUkNTPQliYXNlNjQuYyBcCiAJdmlzLmMgXAogCXdh cm5lcnIuYyBcCiAJd3JpdGVfcGlkLmMgXAotCXhmcmVlLmMKKwl4ZnJlZS5jIFwKKwlmYnNkX29z c2xfcHJvdmlkZXJfbG9hZC5jCiAKLUNGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9yb2tlbiAtSS4K K0NGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCisJLUkke1NSQ1RPUH0va2VyYmVyb3M1 L2luY2x1ZGUgXAorCS1JJHtLUkI1RElSfS9saWIva3JiNSBcCisJLUkke1NSQ1RPUH0vY3J5cHRv L29wZW5zc2wvaW5jbHVkZSAtSS4KIAogQ0xFQU5GSUxFUz0gcm9rZW4uaAogCiByb2tlbi5oOgog CSR7TUFLRV9ST0tFTn0gPiAkey5UQVJHRVR9CiAKKwogLmluY2x1ZGUgPGJzZC5saWIubWs+CiAK IC5QQVRIOiAke0tSQjVESVJ9L2xpYi9yb2tlbgpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2xpYi9s aWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jIGIva2VyYmVyb3M1L2xpYi9saWJyb2tl bi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAwMDAwMC4uMDZhZDZmMDFiOGI4Ci0tLSAvZGV2L251bGwKKysrIGIva2VyYmVyb3M1L2xp Yi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCkBAIC0wLDAgKzEsNDAgQEAKKyNp bmNsdWRlIDxrcmI1X2xvY2wuaD4KKworc3RhdGljIHZvaWQgZmJzZF9vc3NsX3Byb3ZpZGVyX3Vu bG9hZCh2b2lkKTsKKworc3RhdGljIE9TU0xfUFJPVklERVIgKmxlZ2FjeTsKK3N0YXRpYyBPU1NM X1BST1ZJREVSICpkZWZsdDsKK3N0YXRpYyBpbnQgcHJvdmlkZXJzX2xvYWRlZCA9IDA7CisKK2lu dAorZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQodm9pZCkKK3sKKyNpZiBkZWZpbmVkKE9QRU5TU0xf VkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorCWlmIChwcm92 aWRlcnNfbG9hZGVkID09IDApIHsKKwkJaWYgKChsZWdhY3kgPSBPU1NMX1BST1ZJREVSX2xvYWQo TlVMTCwgImxlZ2FjeSIpKSA9PSBOVUxMKQorCQkJcmV0dXJuIChFSU5WQUwpOworCQlpZiAoKGRl Zmx0ID0gT1NTTF9QUk9WSURFUl9sb2FkKE5VTEwsICJkZWZhdWx0IikpID09IE5VTEwpIHsKKwkJ CU9TU0xfUFJPVklERVJfdW5sb2FkKGxlZ2FjeSk7CisJCQlyZXR1cm4gKEVJTlZBTCk7CisJCX0K KwkJcHJvdmlkZXJzX2xvYWRlZCA9IDE7CisJCWlmIChhdGV4aXQoZmJzZF9vc3NsX3Byb3ZpZGVy X3VubG9hZCkpIHsKKwkJCWZic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQoKTsKKwkJCXJldHVybiAo RU5PTUVNKTsKKwkJfQorCX0KKyNlbmRpZgorCXJldHVybiAoMCk7Cit9CisKK3N0YXRpYyB2b2lk CitmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKHZvaWQpCit7CisjaWYgZGVmaW5lZChPUEVOU1NM X1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0gMykKKwlpZiAocHJv dmlkZXJzX2xvYWRlZCA9PSAxKSB7CisJCU9TU0xfUFJPVklERVJfdW5sb2FkKGxlZ2FjeSk7CisJ CU9TU0xfUFJPVklERVJfdW5sb2FkKGRlZmx0KTsKKwkJcHJvdmlkZXJzX2xvYWRlZCA9IDA7CisJ fQorI2VuZGlmCit9CmRpZmYgLS1naXQgYS9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUg Yi9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKaW5kZXggNDFmZGU5MTE1YzAwLi4yMTFm NGYzNzkwNTQgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZQorKysg Yi9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKQEAgLTExLDcgKzExLDcgQEAgU1JDUz0J Y29uZmlnLmMgXAogCiBDRkxBR1MrPS1JJHtLUkI1RElSfS9saWIva3JiNSAtSSR7S1JCNURJUn0v bGliL2FzbjEgLUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCiAJLUkke0tSQjVESVJ9L2tkYyAtSSR7 U1JDVE9QfS9jb250cmliL2NvbV9lcnIgJHtMREFQQ0ZMQUdTfQotTElCQUREPQlrZGMgaGRiIGty YjUgcm9rZW4gY3J5cHQgdmVycworTElCQUREPQlrZGMgaGRiIGtyYjUgcm9rZW4gY3J5cHQgdmVy cyBjcnlwdG8KIExERkxBR1M9JHtMREFQTERGTEFHU30KIAogLmluY2x1ZGUgPGJzZC5wcm9nLm1r PgpkaWZmIC0tZ2l0IGEvc2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rIGIvc2hhcmUvbWsvc3JjLmxp Ym5hbWVzLm1rCmluZGV4IDMzMTczNTBhODhhMy4uZjMxMjc1NjJiZDhmIDEwMDY0NAotLS0gYS9z aGFyZS9tay9zcmMubGlibmFtZXMubWsKKysrIGIvc2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rCkBA IC0zNjcsNyArMzY3LDcgQEAgX0RQX3BhbSs9CXNzaAogLmlmICR7TUtfTklTfSAhPSAibm8iCiBf RFBfcGFtKz0JeXBjbG50CiAuZW5kaWYKLV9EUF9yb2tlbj0JY3J5cHQKK19EUF9yb2tlbj0JY3J5 cHQgY3J5cHRvCiBfRFBfa2FkbTVjbG50PQljb21fZXJyIGtyYjUgcm9rZW4KIF9EUF9rYWRtNXNy dj0JY29tX2VyciBoZGIga3JiNSByb2tlbgogX0RQX2hlaW1udGxtPQljcnlwdG8gY29tX2VyciBr cmI1IHJva2VuCi0tIAoyLjQzLjAKCg== 246998 2023-12-12 01:10:03 +0000 2024-01-15 17:09:12 +0000 Heimdal - enable weak encryption, builds on 13 when building to upgrade to 14 or 15 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 9655 cy RnJvbSAxZWRkMjM1NDNkOTAxNmNmMzBiM2VjODcxMTEzY2Q5MmY2ZjM0NmVhIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKUFI6CQkJMjcyODM1Ck1GQyBh ZnRlcjoJCTMgZGF5cwotLS0KIE1ha2VmaWxlLmluYzEgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICA1ICsrLQogY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMgICAg ICAgICAgIHwgIDQgKysKIGNyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2NsLmggICAg ICAgICB8ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYyAgICAgICAgICAg ICB8ICAyICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jICAgICAgICAgICAgICB8 ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyAgICAgICAgICAgICAgICB8ICA1 ICsrKwogY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcCAgIHwgIDEg Kwoga2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCAgICAgICAgICAgIHwgIDQgKysK IGtlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oICAgICAgICB8ICA0ICsrCiBr ZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlICAgICAgICAgICAgICAgfCAxMSArKystLQog Li4uL2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jICAgIHwgNDAgKysrKysr KysrKysrKysrKysrKwoga2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlICAgICAgICAgICAg ICAgIHwgIDIgKy0KIHNoYXJlL21rL3NyYy5saWJuYW1lcy5tayAgICAgICAgICAgICAgICAgICAg ICB8ICAyICstCiAxMyBmaWxlcyBjaGFuZ2VkLCA3NSBpbnNlcnRpb25zKCspLCA3IGRlbGV0aW9u cygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IGtlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92 aWRlci5oCiBjcmVhdGUgbW9kZSAxMDA2NDQga2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29z c2xfcHJvdmlkZXJfbG9hZC5jCgpkaWZmIC0tZ2l0IGEvTWFrZWZpbGUuaW5jMSBiL01ha2VmaWxl LmluYzEKaW5kZXggYjUwOWI2MDM4MjFiLi5hNzRlNzRlOGU4OTAgMTAwNjQ0Ci0tLSBhL01ha2Vm aWxlLmluYzEKKysrIGIvTWFrZWZpbGUuaW5jMQpAQCAtMjYyNCw3ICsyNjI0LDggQEAgJHtfYnR9 LWxpYi9saWJkd2FyZjogJHtfYnR9LWxpYi9saWJ6CiAKICMgbGlicm9rZW4gZGVwZW5kcyBvbiBs aWJjcnlwdAogX290aGVyX2Jvb3RzdHJhcF90b29scys9bGliL2xpYmNyeXB0Ci0ke19idH0tbGli L2xpYnJva2VuOiAke19idH0tbGliL2xpYmNyeXB0Citfb3RoZXJfYm9vdHN0cmFwX3Rvb2xzKz1z ZWN1cmUvbGliL2xpYmNyeXB0bworJHtfYnR9LWxpYi9saWJyb2tlbjogJHtfYnR9LWxpYi9saWJj cnlwdCAke19idH0tbGliL2xpYmNyeXB0bwogLmVsc2UKICMgQWxsIHRvb2xzIGluIF9iYXNpY19i b290c3RyYXBfdG9vbHMgaGF2ZSB0aGUgc2FtZSBuYW1lIGFzIHRoZSBzdWJkaXJlY3RvcnkKICMg c28gd2UgY2FuIHVzZSA6VCB0byBnZXQgdGhlIG5hbWUgb2YgdGhlIHN5bWxpbmtzIHRoYXQgd2Ug bmVlZCB0byBjcmVhdGUuCkBAIC0zMjY2LDcgKzMyNjcsNyBAQCBrZXJiZXJvczUvbGliL2xpYmty YjVfX0w6IGtlcmJlcm9zNS9saWIvbGliYXNuMV9fTCBsaWIvbGliY29tX2Vycl9fTCBcCiAgICAg bGliL2xpYmNyeXB0X19MIHNlY3VyZS9saWIvbGliY3J5cHRvX19MIGtlcmJlcm9zNS9saWIvbGli aHg1MDlfX0wgXAogICAgIGtlcmJlcm9zNS9saWIvbGlicm9rZW5fX0wga2VyYmVyb3M1L2xpYi9s aWJ3aW5kX19MIFwKICAgICBrZXJiZXJvczUvbGliL2xpYmhlaW1iYXNlX19MIGtlcmJlcm9zNS9s aWIvbGliaGVpbWlwY2NfX0wKLWtlcmJlcm9zNS9saWIvbGlicm9rZW5fX0w6IGxpYi9saWJjcnlw dF9fTAora2VyYmVyb3M1L2xpYi9saWJyb2tlbl9fTDogbGliL2xpYmNyeXB0X19MIHNlY3VyZS9s aWIvbGliY3J5cHRvX19MCiBrZXJiZXJvczUvbGliL2xpYndpbmRfX0w6IGtlcmJlcm9zNS9saWIv bGlicm9rZW5fX0wgbGliL2xpYmNvbV9lcnJfX0wKIGtlcmJlcm9zNS9saWIvbGliaGVpbWJhc2Vf X0w6IGxpYi9saWJ0aHJfX0wKIGtlcmJlcm9zNS9saWIvbGliaGVpbWlwY2NfX0w6IGtlcmJlcm9z NS9saWIvbGlicm9rZW5fX0wga2VyYmVyb3M1L2xpYi9saWJoZWltYmFzZV9fTCBsaWIvbGlidGhy X19MCmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYyBiL2Ny eXB0by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jCmluZGV4IDEwMzNjYTEwMzIzOS4uMjY3 ZTliYmRhMmEwIDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3Mu YworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYwpAQCAtMTY5LDYgKzE2 OSwxMCBAQCBrYWRtNV9zX2NyZWF0ZV9wcmluY2lwYWwodm9pZCAqc2VydmVyX2hhbmRsZSwKICAg ICBlbnQuZW50cnkua2V5cy5sZW4gPSAwOwogICAgIGVudC5lbnRyeS5rZXlzLnZhbCA9IE5VTEw7 CiAKKyAgICByZXQgPSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworICAgIGlmIChyZXQpCisJ Z290byBvdXQ7CisKICAgICByZXQgPSBfa2FkbTVfc2V0X2tleXMoY29udGV4dCwgJmVudC5lbnRy eSwgcGFzc3dvcmQpOwogICAgIGlmIChyZXQpCiAJZ290byBvdXQ7CmRpZmYgLS1naXQgYS9jcnlw dG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oIGIvY3J5cHRvL2hlaW1kYWwvbGliL2th ZG01L2thZG01X2xvY2wuaAppbmRleCA2OGI2YTVlYmYwMjQuLjYzYjM2N2FiN2UyMSAxMDA2NDQK LS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaAorKysgYi9jcnlwdG8v aGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oCkBAIC03OSw1ICs3OSw2IEBACiAjaW5jbHVk ZSA8ZGVyLmg+CiAjaW5jbHVkZSA8cGFyc2VfdW5pdHMuaD4KICNpbmNsdWRlICJwcml2YXRlLmgi CisjaW5jbHVkZSAiZmJzZF9vc3NsX3Byb3ZpZGVyLmgiCiAKICNlbmRpZiAvKiBfX0tBRE01X0xP Q0xfSF9fICovCmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMg Yi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMKaW5kZXggODZiZmU1MzliOTc0Li5i MDAyY2U2NTFhN2YgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQu YworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMKQEAgLTM5Miw2ICszOTIs OCBAQCBrcmI1X2luaXRfY29udGV4dChrcmI1X2NvbnRleHQgKmNvbnRleHQpCiAgICAgfQogICAg IEhFSU1EQUxfTVVURVhfaW5pdChwLT5tdXRleCk7CiAKKyAgICBmYnNkX29zc2xfcHJvdmlkZXJf bG9hZCgpOworCiAgICAgcC0+ZmxhZ3MgfD0gS1JCNV9DVFhfRl9IT01FRElSX0FDQ0VTUzsKIAog ICAgIHJldCA9IGtyYjVfZ2V0X2RlZmF1bHRfY29uZmlnX2ZpbGVzKCZmaWxlcyk7CmRpZmYgLS1n aXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYyBiL2NyeXB0by9oZWltZGFsL2xp Yi9rcmI1L2NyeXB0by5jCmluZGV4IDY3ZWNlZjYyZTg3NS4uMTkxODJiNWM2Y2EzIDEwMDY0NAot LS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYworKysgYi9jcnlwdG8vaGVpbWRh bC9saWIva3JiNS9jcnlwdG8uYwpAQCAtMjA1NCw2ICsyMDU0LDcgQEAga3JiNV9jcnlwdG9faW5p dChrcmI1X2NvbnRleHQgY29udGV4dCwKIAkqY3J5cHRvID0gTlVMTDsKIAlyZXR1cm4gcmV0Owog ICAgIH0KKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKICAgICAoKmNyeXB0 byktPmtleS5zY2hlZHVsZSA9IE5VTEw7CiAgICAgKCpjcnlwdG8pLT5udW1fa2V5X3VzYWdlID0g MDsKICAgICAoKmNyeXB0byktPmtleV91c2FnZSA9IE5VTEw7CmRpZmYgLS1naXQgYS9jcnlwdG8v aGVpbWRhbC9saWIva3JiNS9zYWx0LmMgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMK aW5kZXggNWU0YzhhMWM4NTcyLi4yYjFmYmVlODBhYjYgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWlt ZGFsL2xpYi9rcmI1L3NhbHQuYworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMK QEAgLTQzLDYgKzQzLDggQEAga3JiNV9zYWx0dHlwZV90b19zdHJpbmcgKGtyYjVfY29udGV4dCBj b250ZXh0LAogICAgIHN0cnVjdCBfa3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3RydWN0 IHNhbHRfdHlwZSAqc3Q7CiAKKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsK KwogICAgIGUgPSBfa3JiNV9maW5kX2VuY3R5cGUgKGV0eXBlKTsKICAgICBpZiAoZSA9PSBOVUxM KSB7CiAJa3JiNV9zZXRfZXJyb3JfbWVzc2FnZShjb250ZXh0LCBLUkI1X1BST0dfRVRZUEVfTk9T VVBQLApAQCAtNzUsNiArNzcsOCBAQCBrcmI1X3N0cmluZ190b19zYWx0dHlwZSAoa3JiNV9jb250 ZXh0IGNvbnRleHQsCiAgICAgc3RydWN0IF9rcmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBz dHJ1Y3Qgc2FsdF90eXBlICpzdDsKIAorICAgICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZCgpOworCiAgICAgZSA9IF9rcmI1X2ZpbmRfZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09 IE5VTEwpIHsKIAlrcmI1X3NldF9lcnJvcl9tZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQ RV9OT1NVUFAsCkBAIC0xOTYsNiArMjAwLDcgQEAga3JiNV9zdHJpbmdfdG9fa2V5X2RhdGFfc2Fs dF9vcGFxdWUgKGtyYjVfY29udGV4dCBjb250ZXh0LAogCQkJICAgICAgIGVuY3R5cGUpOwogCXJl dHVybiBLUkI1X1BST0dfRVRZUEVfTk9TVVBQOwogICAgIH0KKyAgICAodm9pZCkgZmJzZF9vc3Ns X3Byb3ZpZGVyX2xvYWQoKTsKICAgICBmb3Ioc3QgPSBldC0+a2V5dHlwZS0+c3RyaW5nX3RvX2tl eTsgc3QgJiYgc3QtPnR5cGU7IHN0KyspCiAJaWYoc3QtPnR5cGUgPT0gc2FsdC5zYWx0dHlwZSkK IAkgICAgcmV0dXJuICgqc3QtPnN0cmluZ190b19rZXkpKGNvbnRleHQsIGVuY3R5cGUsIHBhc3N3 b3JkLApkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0 Lm1hcCBiL2NyeXB0by9oZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKaW5kZXgg NzJkMmVhN2U0ZjdjLi5iYjIxMzllZDc0Y2MgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xp Yi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2Vu L3ZlcnNpb24tc2NyaXB0Lm1hcApAQCAtMTMsNiArMTMsNyBAQCBIRUlNREFMX1JPS0VOXzEuMCB7 CiAJCWN0X21lbWNtcDsKIAkJZXJyOwogCQllcnJ4OworCQlmYnNkX29zc2xfcHJvdmlkZXJfbG9h ZDsKIAkJZnJlZV9nZXRhcmdfc3RyaW5nczsKIAkJZ2V0X2RlZmF1bHRfdXNlcm5hbWU7CiAJCWdl dF93aW5kb3dfc2l6ZTsKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFk ZXJzLmggYi9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCmluZGV4IDNhZTBkOTYy NGZmZC4uMmNjODcwNjQyOTY0IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8t aGVhZGVycy5oCisrKyBiL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKQEAgLTE3 LDUgKzE3LDkgQEAKICNpbmNsdWRlIDxvcGVuc3NsL2VjLmg+CiAjaW5jbHVkZSA8b3BlbnNzbC9l Y2RzYS5oPgogI2luY2x1ZGUgPG9wZW5zc2wvZWNkaC5oPgorI2lmIGRlZmluZWQoT1BFTlNTTF9W RVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCisjaW5jbHVkZSA8 b3BlbnNzbC9wcm92aWRlci5oPgorI2luY2x1ZGUgImZic2Rfb3NzbF9wcm92aWRlci5oIgorI2Vu ZGlmCiAKICNlbmRpZiAvKiBfX2NyeXB0b19oZWFkZXJzX2hfXyAqLwpkaWZmIC0tZ2l0IGEva2Vy YmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmggYi9rZXJiZXJvczUvaW5jbHVkZS9m YnNkX29zc2xfcHJvdmlkZXIuaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAw MDAuLjAxMzk4M2NhOWY4MwotLS0gL2Rldi9udWxsCisrKyBiL2tlcmJlcm9zNS9pbmNsdWRlL2Zi c2Rfb3NzbF9wcm92aWRlci5oCkBAIC0wLDAgKzEsNCBAQAorI2lmbmRlZiBfX2Zic2Rfb3NzbF9w cm92aWRlcl9oCisjZGVmaW5lIF9fZmJzZF9vc3NsX3Byb3ZpZGVyX2gKK2ludCAgZmJzZF9vc3Ns X3Byb3ZpZGVyX2xvYWQodm9pZCk7CisjZW5kaWYKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9saWIv bGlicm9rZW4vTWFrZWZpbGUgYi9rZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlCmluZGV4 IDBjNDZiYTZjNGNiNS4uMjRkYzNhNWIyYzQ1IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvbGliL2xp YnJva2VuL01ha2VmaWxlCisrKyBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKQEAg LTIsNyArMiw3IEBACiBQQUNLQUdFPQlrZXJiZXJvcy1saWIKIAogTElCPQlyb2tlbgotTElCQURE PQljcnlwdAorTElCQUREPQljcnlwdCBjcnlwdG8KIFZFUlNJT05fTUFQPQkke0tSQjVESVJ9L2xp Yi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKIElOQ1M9CXJva2VuLmggXAogCXJva2VuLWNvbW1v bi5oIFwKQEAgLTc0LDE1ICs3NCwyMCBAQCBTUkNTPQliYXNlNjQuYyBcCiAJdmlzLmMgXAogCXdh cm5lcnIuYyBcCiAJd3JpdGVfcGlkLmMgXAotCXhmcmVlLmMKKwl4ZnJlZS5jIFwKKwlmYnNkX29z c2xfcHJvdmlkZXJfbG9hZC5jCiAKLUNGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9yb2tlbiAtSS4K K0NGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCisJLUkke1NSQ1RPUH0va2VyYmVyb3M1 L2luY2x1ZGUgXAorCS1JJHtLUkI1RElSfS9saWIva3JiNSBcCisJLUkke1NSQ1RPUH0vY3J5cHRv L29wZW5zc2wvaW5jbHVkZSAtSS4KIAogQ0xFQU5GSUxFUz0gcm9rZW4uaAogCiByb2tlbi5oOgog CSR7TUFLRV9ST0tFTn0gPiAkey5UQVJHRVR9CiAKKwogLmluY2x1ZGUgPGJzZC5saWIubWs+CiAK IC5QQVRIOiAke0tSQjVESVJ9L2xpYi9yb2tlbgpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2xpYi9s aWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jIGIva2VyYmVyb3M1L2xpYi9saWJyb2tl bi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAwMDAwMC4uMTYwODUxNTc1NGQ4Ci0tLSAvZGV2L251bGwKKysrIGIva2VyYmVyb3M1L2xp Yi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCkBAIC0wLDAgKzEsNDAgQEAKKyNp bmNsdWRlIDxrcmI1X2xvY2wuaD4KKworc3RhdGljIHZvaWQgZmJzZF9vc3NsX3Byb3ZpZGVyX3Vu bG9hZCh2b2lkKTsKKworc3RhdGljIE9TU0xfUFJPVklERVIgKmxlZ2FjeTsKK3N0YXRpYyBPU1NM X1BST1ZJREVSICpkZWZsdDsKK3N0YXRpYyBpbnQgcHJvdmlkZXJzX2xvYWRlZCA9IDA7CisKK2lu dAorZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQodm9pZCkKK3sKKyNpZiBkZWZpbmVkKE9QRU5TU0xf VkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorCWlmIChwcm92 aWRlcnNfbG9hZGVkID09IDApIHsKKwkJaWYgKChsZWdhY3kgPSBPU1NMX1BST1ZJREVSX2xvYWQo TlVMTCwgImxlZ2FjeSIpKSA9PSBOVUxMKQorCQkJcmV0dXJuIChFSU5WQUwpOworCQlpZiAoKGRl Zmx0ID0gT1NTTF9QUk9WSURFUl9sb2FkKE5VTEwsICJkZWZhdWx0IikpID09IE5VTEwpIHsKKwkJ CU9TU0xfUFJPVklERVJfdW5sb2FkKGxlZ2FjeSk7CisJCQlyZXR1cm4gKEVJTlZBTCk7CisJCX0K KwkJaWYgKGF0ZXhpdChmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKSkgeworCQkJZmJzZF9vc3Ns X3Byb3ZpZGVyX3VubG9hZCgpOworCQkJcmV0dXJuIChFTk9NRU0pOworCQl9CisJCXByb3ZpZGVy c19sb2FkZWQgPSAxOworCX0KKyNlbmRpZgorCXJldHVybiAoMCk7Cit9CisKK3N0YXRpYyB2b2lk CitmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKHZvaWQpCit7CisjaWYgZGVmaW5lZChPUEVOU1NM X1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0gMykKKwlpZiAocHJv dmlkZXJzX2xvYWRlZCA9PSAxKSB7CisJCU9TU0xfUFJPVklERVJfdW5sb2FkKGxlZ2FjeSk7CisJ CU9TU0xfUFJPVklERVJfdW5sb2FkKGRlZmx0KTsKKwkJcHJvdmlkZXJzX2xvYWRlZCA9IDA7CisJ fQorI2VuZGlmCit9CmRpZmYgLS1naXQgYS9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUg Yi9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKaW5kZXggNDFmZGU5MTE1YzAwLi4yMTFm NGYzNzkwNTQgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZQorKysg Yi9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKQEAgLTExLDcgKzExLDcgQEAgU1JDUz0J Y29uZmlnLmMgXAogCiBDRkxBR1MrPS1JJHtLUkI1RElSfS9saWIva3JiNSAtSSR7S1JCNURJUn0v bGliL2FzbjEgLUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCiAJLUkke0tSQjVESVJ9L2tkYyAtSSR7 U1JDVE9QfS9jb250cmliL2NvbV9lcnIgJHtMREFQQ0ZMQUdTfQotTElCQUREPQlrZGMgaGRiIGty YjUgcm9rZW4gY3J5cHQgdmVycworTElCQUREPQlrZGMgaGRiIGtyYjUgcm9rZW4gY3J5cHQgdmVy cyBjcnlwdG8KIExERkxBR1M9JHtMREFQTERGTEFHU30KIAogLmluY2x1ZGUgPGJzZC5wcm9nLm1r PgpkaWZmIC0tZ2l0IGEvc2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rIGIvc2hhcmUvbWsvc3JjLmxp Ym5hbWVzLm1rCmluZGV4IDMzMTczNTBhODhhMy4uZjMxMjc1NjJiZDhmIDEwMDY0NAotLS0gYS9z aGFyZS9tay9zcmMubGlibmFtZXMubWsKKysrIGIvc2hhcmUvbWsvc3JjLmxpYm5hbWVzLm1rCkBA IC0zNjcsNyArMzY3LDcgQEAgX0RQX3BhbSs9CXNzaAogLmlmICR7TUtfTklTfSAhPSAibm8iCiBf RFBfcGFtKz0JeXBjbG50CiAuZW5kaWYKLV9EUF9yb2tlbj0JY3J5cHQKK19EUF9yb2tlbj0JY3J5 cHQgY3J5cHRvCiBfRFBfa2FkbTVjbG50PQljb21fZXJyIGtyYjUgcm9rZW4KIF9EUF9rYWRtNXNy dj0JY29tX2VyciBoZGIga3JiNSByb2tlbgogX0RQX2hlaW1udGxtPQljcnlwdG8gY29tX2VyciBr cmI1IHJva2VuCi0tIAoyLjQzLjAKCg== 247680 2024-01-15 17:09:12 +0000 2024-01-15 17:16:48 +0000 Also circumvent Linux and MacOS cross-build errors 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 9226 cy RnJvbSA5ZjA5YTEzMTdjZTM5NDZmZmE1YzY5ODQ2MDc1Nzg2ZjZlMDdjYzgyIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKVGhpcyBpcyB0aGUgc2Vjb25k IGF0dGVtcHQgYXQgdGhpcyBwYXRjaC4gSW5zdGVhZCBvZiBsaW5raW5nCnNlY3VyZS9saWIvbGli Y3J5cHRvIGF0IGJ1aWxkIHRpbWUgd2Ugbm93IGxpbmsgaXQgYXQgcnVudGltZSwgYXZvaWRpbmcK YnVpbGR3b3JsZCBmYWlsdXJlcyB1bmRlciBMaW51eCBhbmQgTWFjT1MuIFRoaXMgaXMgYmVjYXVz ZQpUQVJHRVRfRU5ESUFOTkVTUyBpcyB1bmRlZmluZWQgYXQgcHJlLWJ1aWxkIHRpbWUuCgpQUjoJ CQkyNzI4MzUKTUZDIGFmdGVyOgkJMyBkYXlzCkRpZmZlcmVudGlhbCBSZXZpc2lvbjoJaHR0cHM6 Ly9yZXZpZXdzLmZyZWVic2Qub3JnL0Q0MzAwOQpUZXN0ZWQgYnk6CQluZXRjaGlsZCwgSm9lcmcg UHVseiA8Sm9lcmcuUHVsekBmcm0yLnR1bS5kZT4KLS0tCiBjcnlwdG8vaGVpbWRhbC9saWIva2Fk bTUvY3JlYXRlX3MuYyAgICAgICAgICAgfCAgNCArCiBjcnlwdG8vaGVpbWRhbC9saWIva2FkbTUv a2FkbTVfbG9jbC5oICAgICAgICAgfCAgMSArCiBjcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jb250 ZXh0LmMgICAgICAgICAgICAgfCAgNCArCiBjcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8u YyAgICAgICAgICAgICAgfCAgMyArCiBjcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMgICAg ICAgICAgICAgICAgfCAgNSArKwogY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2Ny aXB0Lm1hcCAgIHwgIDEgKwoga2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCAgICAg ICAgICAgIHwgIDQgKwoga2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmggICAg ICAgIHwgIDQgKwoga2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZSAgICAgICAgICAgICAg IHwgIDggKy0KIC4uLi9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYyAgICB8 IDc3ICsrKysrKysrKysrKysrKysrKysKIGtlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZSAg ICAgICAgICAgICAgICB8ICAyICstCiAxMSBmaWxlcyBjaGFuZ2VkLCAxMTAgaW5zZXJ0aW9ucygr KSwgMyBkZWxldGlvbnMoLSkKIGNyZWF0ZSBtb2RlIDEwMDY0NCBrZXJiZXJvczUvaW5jbHVkZS9m YnNkX29zc2xfcHJvdmlkZXIuaAogY3JlYXRlIG1vZGUgMTAwNjQ0IGtlcmJlcm9zNS9saWIvbGli cm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYwoKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWlt ZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jIGIvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2NyZWF0 ZV9zLmMKaW5kZXggMTAzM2NhMTAzMjM5Li4yNjdlOWJiZGEyYTAgMTAwNjQ0Ci0tLSBhL2NyeXB0 by9oZWltZGFsL2xpYi9rYWRtNS9jcmVhdGVfcy5jCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9r YWRtNS9jcmVhdGVfcy5jCkBAIC0xNjksNiArMTY5LDEwIEBAIGthZG01X3NfY3JlYXRlX3ByaW5j aXBhbCh2b2lkICpzZXJ2ZXJfaGFuZGxlLAogICAgIGVudC5lbnRyeS5rZXlzLmxlbiA9IDA7CiAg ICAgZW50LmVudHJ5LmtleXMudmFsID0gTlVMTDsKIAorICAgIHJldCA9IGZic2Rfb3NzbF9wcm92 aWRlcl9sb2FkKCk7CisgICAgaWYgKHJldCkKKwlnb3RvIG91dDsKKwogICAgIHJldCA9IF9rYWRt NV9zZXRfa2V5cyhjb250ZXh0LCAmZW50LmVudHJ5LCBwYXNzd29yZCk7CiAgICAgaWYgKHJldCkK IAlnb3RvIG91dDsKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9s b2NsLmggYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9jbC5oCmluZGV4IDY4YjZh NWViZjAyNC4uNjNiMzY3YWI3ZTIxIDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva2Fk bTUva2FkbTVfbG9jbC5oCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2Ns LmgKQEAgLTc5LDUgKzc5LDYgQEAKICNpbmNsdWRlIDxkZXIuaD4KICNpbmNsdWRlIDxwYXJzZV91 bml0cy5oPgogI2luY2x1ZGUgInByaXZhdGUuaCIKKyNpbmNsdWRlICJmYnNkX29zc2xfcHJvdmlk ZXIuaCIKIAogI2VuZGlmIC8qIF9fS0FETTVfTE9DTF9IX18gKi8KZGlmZiAtLWdpdCBhL2NyeXB0 by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYyBiL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2Nv bnRleHQuYwppbmRleCA4NmJmZTUzOWI5NzQuLjY4MWJjOWEwOTgyZiAxMDA2NDQKLS0tIGEvY3J5 cHRvL2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jCisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9r cmI1L2NvbnRleHQuYwpAQCAtMzkyLDYgKzM5MiwxMCBAQCBrcmI1X2luaXRfY29udGV4dChrcmI1 X2NvbnRleHQgKmNvbnRleHQpCiAgICAgfQogICAgIEhFSU1EQUxfTVVURVhfaW5pdChwLT5tdXRl eCk7CiAKKyAgICByZXQgPSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworICAgIGlmKHJldCkK Kwlnb3RvIG91dDsKKwogICAgIHAtPmZsYWdzIHw9IEtSQjVfQ1RYX0ZfSE9NRURJUl9BQ0NFU1M7 CiAKICAgICByZXQgPSBrcmI1X2dldF9kZWZhdWx0X2NvbmZpZ19maWxlcygmZmlsZXMpOwpkaWZm IC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRvLmMgYi9jcnlwdG8vaGVpbWRh bC9saWIva3JiNS9jcnlwdG8uYwppbmRleCA2N2VjZWY2MmU4NzUuLjZlZTIyNjA5YTRkNSAxMDA2 NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKKysrIGIvY3J5cHRvL2hl aW1kYWwvbGliL2tyYjUvY3J5cHRvLmMKQEAgLTIwNTQsNiArMjA1NCw5IEBAIGtyYjVfY3J5cHRv X2luaXQoa3JiNV9jb250ZXh0IGNvbnRleHQsCiAJKmNyeXB0byA9IE5VTEw7CiAJcmV0dXJuIHJl dDsKICAgICB9CisgICAgcmV0ID0gZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKKyAgICBpZiAo cmV0KQorCXJldHVybiByZXQ7CiAgICAgKCpjcnlwdG8pLT5rZXkuc2NoZWR1bGUgPSBOVUxMOwog ICAgICgqY3J5cHRvKS0+bnVtX2tleV91c2FnZSA9IDA7CiAgICAgKCpjcnlwdG8pLT5rZXlfdXNh Z2UgPSBOVUxMOwpkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jIGIv Y3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jCmluZGV4IDVlNGM4YTFjODU3Mi4uMmIxZmJl ZTgwYWI2IDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMKKysrIGIv Y3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jCkBAIC00Myw2ICs0Myw4IEBAIGtyYjVfc2Fs dHR5cGVfdG9fc3RyaW5nIChrcmI1X2NvbnRleHQgY29udGV4dCwKICAgICBzdHJ1Y3QgX2tyYjVf ZW5jcnlwdGlvbl90eXBlICplOwogICAgIHN0cnVjdCBzYWx0X3R5cGUgKnN0OwogCisgICAgKHZv aWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisKICAgICBlID0gX2tyYjVfZmluZF9lbmN0 eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0gTlVMTCkgewogCWtyYjVfc2V0X2Vycm9yX21lc3Nh Z2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBFX05PU1VQUCwKQEAgLTc1LDYgKzc3LDggQEAga3Ji NV9zdHJpbmdfdG9fc2FsdHR5cGUgKGtyYjVfY29udGV4dCBjb250ZXh0LAogICAgIHN0cnVjdCBf a3JiNV9lbmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3RydWN0IHNhbHRfdHlwZSAqc3Q7CiAKKyAg ICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKKwogICAgIGUgPSBfa3JiNV9maW5k X2VuY3R5cGUgKGV0eXBlKTsKICAgICBpZiAoZSA9PSBOVUxMKSB7CiAJa3JiNV9zZXRfZXJyb3Jf bWVzc2FnZShjb250ZXh0LCBLUkI1X1BST0dfRVRZUEVfTk9TVVBQLApAQCAtMTk2LDYgKzIwMCw3 IEBAIGtyYjVfc3RyaW5nX3RvX2tleV9kYXRhX3NhbHRfb3BhcXVlIChrcmI1X2NvbnRleHQgY29u dGV4dCwKIAkJCSAgICAgICBlbmN0eXBlKTsKIAlyZXR1cm4gS1JCNV9QUk9HX0VUWVBFX05PU1VQ UDsKICAgICB9CisgICAgKHZvaWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CiAgICAgZm9y KHN0ID0gZXQtPmtleXR5cGUtPnN0cmluZ190b19rZXk7IHN0ICYmIHN0LT50eXBlOyBzdCsrKQog CWlmKHN0LT50eXBlID09IHNhbHQuc2FsdHR5cGUpCiAJICAgIHJldHVybiAoKnN0LT5zdHJpbmdf dG9fa2V5KShjb250ZXh0LCBlbmN0eXBlLCBwYXNzd29yZCwKZGlmZiAtLWdpdCBhL2NyeXB0by9o ZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAgYi9jcnlwdG8vaGVpbWRhbC9saWIv cm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwCmluZGV4IDcyZDJlYTdlNGY3Yy4uYmIyMTM5ZWQ3NGNj IDEwMDY0NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFw CisrKyBiL2NyeXB0by9oZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKQEAgLTEz LDYgKzEzLDcgQEAgSEVJTURBTF9ST0tFTl8xLjAgewogCQljdF9tZW1jbXA7CiAJCWVycjsKIAkJ ZXJyeDsKKwkJZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQ7CiAJCWZyZWVfZ2V0YXJnX3N0cmluZ3M7 CiAJCWdldF9kZWZhdWx0X3VzZXJuYW1lOwogCQlnZXRfd2luZG93X3NpemU7CmRpZmYgLS1naXQg YS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oIGIva2VyYmVyb3M1L2luY2x1ZGUv Y3J5cHRvLWhlYWRlcnMuaAppbmRleCAzYWUwZDk2MjRmZmQuLjJjYzg3MDY0Mjk2NCAxMDA2NDQK LS0tIGEva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaAorKysgYi9rZXJiZXJvczUv aW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCkBAIC0xNyw1ICsxNyw5IEBACiAjaW5jbHVkZSA8b3Bl bnNzbC9lYy5oPgogI2luY2x1ZGUgPG9wZW5zc2wvZWNkc2EuaD4KICNpbmNsdWRlIDxvcGVuc3Ns L2VjZGguaD4KKyNpZiBkZWZpbmVkKE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xf VkVSU0lPTl9NQUpPUiA+PSAzKQorI2luY2x1ZGUgPG9wZW5zc2wvcHJvdmlkZXIuaD4KKyNpbmNs dWRlICJmYnNkX29zc2xfcHJvdmlkZXIuaCIKKyNlbmRpZgogCiAjZW5kaWYgLyogX19jcnlwdG9f aGVhZGVyc19oX18gKi8KZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9w cm92aWRlci5oIGIva2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmgKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwLi4wMTM5ODNjYTlmODMKLS0tIC9kZXYv bnVsbAorKysgYi9rZXJiZXJvczUvaW5jbHVkZS9mYnNkX29zc2xfcHJvdmlkZXIuaApAQCAtMCww ICsxLDQgQEAKKyNpZm5kZWYgX19mYnNkX29zc2xfcHJvdmlkZXJfaAorI2RlZmluZSBfX2Zic2Rf b3NzbF9wcm92aWRlcl9oCitpbnQgIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKHZvaWQpOworI2Vu ZGlmCmRpZmYgLS1naXQgYS9rZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlIGIva2VyYmVy b3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZQppbmRleCAwYzQ2YmE2YzRjYjUuLmNhNmQwOTBlNjRm MCAxMDA2NDQKLS0tIGEva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZQorKysgYi9rZXJi ZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlCkBAIC03NCw5ICs3NCwxMyBAQCBTUkNTPQliYXNl NjQuYyBcCiAJdmlzLmMgXAogCXdhcm5lcnIuYyBcCiAJd3JpdGVfcGlkLmMgXAotCXhmcmVlLmMK Kwl4ZnJlZS5jIFwKKwlmYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCiAKLUNGTEFHUys9LUkke0tS QjVESVJ9L2xpYi9yb2tlbiAtSS4KK0NGTEFHUys9LUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCisJ LUkke1NSQ1RPUH0va2VyYmVyb3M1L2luY2x1ZGUgXAorCS1JJHtLUkI1RElSfS9saWIva3JiNSBc CisJLUkke1NSQ1RPUH0vY3J5cHRvL29wZW5zc2wvaW5jbHVkZSAtSS4KIAogQ0xFQU5GSUxFUz0g cm9rZW4uaAogCmRpZmYgLS1naXQgYS9rZXJiZXJvczUvbGliL2xpYnJva2VuL2Zic2Rfb3NzbF9w cm92aWRlcl9sb2FkLmMgYi9rZXJiZXJvczUvbGliL2xpYnJva2VuL2Zic2Rfb3NzbF9wcm92aWRl cl9sb2FkLmMKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwLi4yZjhkNDQ1 OTEyMDIKLS0tIC9kZXYvbnVsbAorKysgYi9rZXJiZXJvczUvbGliL2xpYnJva2VuL2Zic2Rfb3Nz bF9wcm92aWRlcl9sb2FkLmMKQEAgLTAsMCArMSw3NyBAQAorI2luY2x1ZGUgPGRsZmNuLmg+Cisj aW5jbHVkZSA8ZXJybm8uaD4KKyNpbmNsdWRlIDxrcmI1X2xvY2wuaD4KKyNpbmNsdWRlIDxzdGRp by5oPgorI2luY2x1ZGUgPG9wZW5zc2wvcHJvdmlkZXIuaD4KKworI2lmIGRlZmluZWQoT1BFTlNT TF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9OX01BSk9SID49IDMpCitzdGF0aWMg dm9pZCBmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKHZvaWQpOworc3RhdGljIHZvaWQgcHJpbnRf ZGxlcnJvcihjaGFyICopOworc3RhdGljIE9TU0xfUFJPVklERVIgKmxlZ2FjeTsKK3N0YXRpYyBP U1NMX1BST1ZJREVSICpkZWZsdDsKK3N0YXRpYyBpbnQgcHJvdmlkZXJzX2xvYWRlZCA9IDA7Citz dGF0aWMgT1NTTF9QUk9WSURFUiAqICgqb3NzbF9wcm92aWRlcl9sb2FkKShPU1NMX0xJQl9DVFgg KiwgY29uc3QgY2hhciopID0gTlVMTDsKK3N0YXRpYyBpbnQgKCpvc3NsX3Byb3ZpZGVyX3VubG9h ZCkoT1NTTF9QUk9WSURFUiAqKSA9IE5VTEw7CitzdGF0aWMgdm9pZCAqbGliX2hhbmRsZSA9IE5V TEw7CisKK3N0YXRpYyB2b2lkCitmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKHZvaWQpCit7CisJ aWYgKG9zc2xfcHJvdmlkZXJfdW5sb2FkID09IE5VTEwpIHsKKwkJaWYgKCEob3NzbF9wcm92aWRl cl91bmxvYWQgPSAoaW50ICgqKShPU1NMX1BST1ZJREVSKikpIGRsc3ltKGxpYl9oYW5kbGUsICJP U1NMX1BST1ZJREVSX2xvYWQiKSkpIHsKKwkJCXByaW50X2RsZXJyb3IoIlVuYWJsZSB0byBsaW5r IE9TU0xfUFJPVklERVJfdW5sb2FkIik7CisJCQlyZXR1cm47CisJCX0KKwl9CisJaWYgKHByb3Zp ZGVyc19sb2FkZWQgPT0gMSkgeworCQkoKm9zc2xfcHJvdmlkZXJfdW5sb2FkKShsZWdhY3kpOwor CQkoKm9zc2xfcHJvdmlkZXJfdW5sb2FkKShkZWZsdCk7CisJCXByb3ZpZGVyc19sb2FkZWQgPSAw OworCX0KK30KKworc3RhdGljIHZvaWQKK3ByaW50X2RsZXJyb3IoY2hhciAqbWVzc2FnZSkKK3sK KwljaGFyICplcnJzdHI7CisKKwlpZiAoKGVycnN0ciA9IGRsZXJyb3IoKSkgIT0gTlVMTCkKKwkJ ZnByaW50ZihzdGRlcnIsICIlczogJXNcbiIsCisJCQltZXNzYWdlLCBlcnJzdHIpOworfQorI2Vu ZGlmCisKK2ludAorZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQodm9pZCkKK3sKKyNpZiBkZWZpbmVk KE9QRU5TU0xfVkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQor CWlmIChsaWJfaGFuZGxlID09IE5VTEwpIHsKKwkJaWYgKCEobGliX2hhbmRsZSA9IGRsb3Blbigi L3Vzci9saWIvbGliY3J5cHRvLnNvIiwKKwkJICAgIFJUTERfTEFaWXxSVExEX0dMT0JBTCkpKSB7 CisJCQlwcmludF9kbGVycm9yKCJVbmFibGUgdG8gbG9hZCBsaWJjcnlwdG8uc28iKTsKKwkJCXJl dHVybiAoRUlOVkFMKTsKKwkJfQorCX0KKwlpZiAob3NzbF9wcm92aWRlcl9sb2FkID09IE5VTEwp IHsKKwkJaWYgKCEob3NzbF9wcm92aWRlcl9sb2FkID0gKE9TU0xfUFJPVklERVIgKiAoKikoT1NT TF9MSUJfQ1RYKiwgY29uc3QgY2hhciAqKSkgZGxzeW0obGliX2hhbmRsZSwgIk9TU0xfUFJPVklE RVJfbG9hZCIpKSkgeworCQkJcHJpbnRfZGxlcnJvcigiVW5hYmxlIHRvIGxpbmsgT1NTTF9QUk9W SURFUl9sb2FkIik7CisJCQlyZXR1cm4oRU5PRU5UKTsKKwkJfQorCX0KKworCWlmIChwcm92aWRl cnNfbG9hZGVkID09IDApIHsKKwkJaWYgKChsZWdhY3kgPSAoKm9zc2xfcHJvdmlkZXJfbG9hZCko TlVMTCwgImxlZ2FjeSIpKSA9PSBOVUxMKQorCQkJcmV0dXJuIChFSU5WQUwpOworCQlpZiAoKGRl Zmx0ID0gKCpvc3NsX3Byb3ZpZGVyX2xvYWQpKE5VTEwsICJkZWZhdWx0IikpID09IE5VTEwpIHsK KwkJCSgqb3NzbF9wcm92aWRlcl91bmxvYWQpKGxlZ2FjeSk7CisJCQlyZXR1cm4gKEVJTlZBTCk7 CisJCX0KKwkJaWYgKGF0ZXhpdChmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2FkKSkgeworCQkJZmJz ZF9vc3NsX3Byb3ZpZGVyX3VubG9hZCgpOworCQkJcmV0dXJuIChlcnJubyk7CisJCX0KKwkJcHJv dmlkZXJzX2xvYWRlZCA9IDE7CisJfQorI2VuZGlmCisJcmV0dXJuICgwKTsKK30KZGlmZiAtLWdp dCBhL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZSBiL2tlcmJlcm9zNS9saWJleGVjL2tk Yy9NYWtlZmlsZQppbmRleCA0MWZkZTkxMTVjMDAuLjIxMWY0ZjM3OTA1NCAxMDA2NDQKLS0tIGEv a2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlCisrKyBiL2tlcmJlcm9zNS9saWJleGVjL2tk Yy9NYWtlZmlsZQpAQCAtMTEsNyArMTEsNyBAQCBTUkNTPQljb25maWcuYyBcCiAKIENGTEFHUys9 LUkke0tSQjVESVJ9L2xpYi9rcmI1IC1JJHtLUkI1RElSfS9saWIvYXNuMSAtSSR7S1JCNURJUn0v bGliL3Jva2VuIFwKIAktSSR7S1JCNURJUn0va2RjIC1JJHtTUkNUT1B9L2NvbnRyaWIvY29tX2Vy ciAke0xEQVBDRkxBR1N9Ci1MSUJBREQ9CWtkYyBoZGIga3JiNSByb2tlbiBjcnlwdCB2ZXJzCitM SUJBREQ9CWtkYyBoZGIga3JiNSByb2tlbiBjcnlwdCB2ZXJzIGNyeXB0bwogTERGTEFHUz0ke0xE QVBMREZMQUdTfQogCiAuaW5jbHVkZSA8YnNkLnByb2cubWs+Ci0tIAoyLjQzLjAKCg== 247710 2024-01-16 19:08:12 +0000 2024-01-17 18:47:00 +0000 Fix numerous Heimdal segfaults when using weak crypto 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 9242 cy RnJvbSAyZjI2YTVlYzc4NGQ1NTZjNmIwNmEyNjY1OWMzOGYyODk5MWVhNjZmIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKVGhpcyBpcyB0aGUgc2Vjb25k IGF0dGVtcHQgYXQgdGhpcyBwYXRjaC4gSW5zdGVhZCBvZiBsaW5raW5nCnNlY3VyZS9saWIvbGli Y3J5cHRvIGF0IGJ1aWxkIHRpbWUgd2Ugbm93IGxpbmsgaXQgYXQgcnVudGltZSwgYXZvaWRpbmcK YnVpbGR3b3JsZCBmYWlsdXJlcyB1bmRlciBMaW51eCBhbmQgTWFjT1MuIFRoaXMgaXMgYmVjYXVz ZQpUQVJHRVRfRU5ESUFOTkVTUyBpcyB1bmRlZmluZWQgYXQgcHJlLWJ1aWxkIHRpbWUuCgpQUjoJ CQkyNzI4MzUKTUZDIGFmdGVyOgkJMyBkYXlzClRlc3RlZCBieToJCW5ldGNoaWxkLCBKb2VyZyBQ dWx6IDxKb2VyZy5QdWx6QGZybTIudHVtLmRlPgotLS0KIGNyeXB0by9oZWltZGFsL2xpYi9rYWRt NS9jcmVhdGVfcy5jICAgICAgICAgICB8ICA0ICsKIGNyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9r YWRtNV9sb2NsLmggICAgICAgICB8ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRl eHQuYyAgICAgICAgICAgICB8ICA0ICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5j ICAgICAgICAgICAgICB8ICAzICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyAgICAg ICAgICAgICAgICB8ICA1ICsrCiBjcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3Jp cHQubWFwICAgfCAgMSArCiBrZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oICAgICAg ICAgICAgfCAgNCArCiBrZXJiZXJvczUvaW5jbHVkZS9mYnNkX29zc2xfcHJvdmlkZXIuaCAgICAg ICAgfCAgNCArCiBrZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlICAgICAgICAgICAgICAg fCAgOCArLQogLi4uL2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jICAgIHwg NzggKysrKysrKysrKysrKysrKysrKwoga2VyYmVyb3M1L2xpYmV4ZWMva2RjL01ha2VmaWxlICAg ICAgICAgICAgICAgIHwgIDIgKy0KIDExIGZpbGVzIGNoYW5nZWQsIDExMSBpbnNlcnRpb25zKCsp LCAzIGRlbGV0aW9ucygtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IGtlcmJlcm9zNS9pbmNsdWRlL2Zi c2Rfb3NzbF9wcm92aWRlci5oCiBjcmVhdGUgbW9kZSAxMDA2NDQga2VyYmVyb3M1L2xpYi9saWJy b2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jCgpkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1k YWwvbGliL2thZG01L2NyZWF0ZV9zLmMgYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRl X3MuYwppbmRleCAxMDMzY2ExMDMyMzkuLjI2N2U5YmJkYTJhMCAxMDA2NDQKLS0tIGEvY3J5cHRv L2hlaW1kYWwvbGliL2thZG01L2NyZWF0ZV9zLmMKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2th ZG01L2NyZWF0ZV9zLmMKQEAgLTE2OSw2ICsxNjksMTAgQEAga2FkbTVfc19jcmVhdGVfcHJpbmNp cGFsKHZvaWQgKnNlcnZlcl9oYW5kbGUsCiAgICAgZW50LmVudHJ5LmtleXMubGVuID0gMDsKICAg ICBlbnQuZW50cnkua2V5cy52YWwgPSBOVUxMOwogCisgICAgcmV0ID0gZmJzZF9vc3NsX3Byb3Zp ZGVyX2xvYWQoKTsKKyAgICBpZiAocmV0KQorCWdvdG8gb3V0OworCiAgICAgcmV0ID0gX2thZG01 X3NldF9rZXlzKGNvbnRleHQsICZlbnQuZW50cnksIHBhc3N3b3JkKTsKICAgICBpZiAocmV0KQog CWdvdG8gb3V0OwpkaWZmIC0tZ2l0IGEvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xv Y2wuaCBiL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9rYWRtNV9sb2NsLmgKaW5kZXggNjhiNmE1 ZWJmMDI0Li42M2IzNjdhYjdlMjEgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rYWRt NS9rYWRtNV9sb2NsLmgKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wu aApAQCAtNzksNSArNzksNiBAQAogI2luY2x1ZGUgPGRlci5oPgogI2luY2x1ZGUgPHBhcnNlX3Vu aXRzLmg+CiAjaW5jbHVkZSAicHJpdmF0ZS5oIgorI2luY2x1ZGUgImZic2Rfb3NzbF9wcm92aWRl ci5oIgogCiAjZW5kaWYgLyogX19LQURNNV9MT0NMX0hfXyAqLwpkaWZmIC0tZ2l0IGEvY3J5cHRv L2hlaW1kYWwvbGliL2tyYjUvY29udGV4dC5jIGIvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvY29u dGV4dC5jCmluZGV4IDg2YmZlNTM5Yjk3NC4uNjgxYmM5YTA5ODJmIDEwMDY0NAotLS0gYS9jcnlw dG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMKKysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL2ty YjUvY29udGV4dC5jCkBAIC0zOTIsNiArMzkyLDEwIEBAIGtyYjVfaW5pdF9jb250ZXh0KGtyYjVf Y29udGV4dCAqY29udGV4dCkKICAgICB9CiAgICAgSEVJTURBTF9NVVRFWF9pbml0KHAtPm11dGV4 KTsKIAorICAgIHJldCA9IGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisgICAgaWYocmV0KQor CWdvdG8gb3V0OworCiAgICAgcC0+ZmxhZ3MgfD0gS1JCNV9DVFhfRl9IT01FRElSX0FDQ0VTUzsK IAogICAgIHJldCA9IGtyYjVfZ2V0X2RlZmF1bHRfY29uZmlnX2ZpbGVzKCZmaWxlcyk7CmRpZmYg LS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYyBiL2NyeXB0by9oZWltZGFs L2xpYi9rcmI1L2NyeXB0by5jCmluZGV4IDY3ZWNlZjYyZTg3NS4uNmVlMjI2MDlhNGQ1IDEwMDY0 NAotLS0gYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9jcnlwdG8uYworKysgYi9jcnlwdG8vaGVp bWRhbC9saWIva3JiNS9jcnlwdG8uYwpAQCAtMjA1NCw2ICsyMDU0LDkgQEAga3JiNV9jcnlwdG9f aW5pdChrcmI1X2NvbnRleHQgY29udGV4dCwKIAkqY3J5cHRvID0gTlVMTDsKIAlyZXR1cm4gcmV0 OwogICAgIH0KKyAgICByZXQgPSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworICAgIGlmIChy ZXQpCisJcmV0dXJuIHJldDsKICAgICAoKmNyeXB0byktPmtleS5zY2hlZHVsZSA9IE5VTEw7CiAg ICAgKCpjcnlwdG8pLT5udW1fa2V5X3VzYWdlID0gMDsKICAgICAoKmNyeXB0byktPmtleV91c2Fn ZSA9IE5VTEw7CmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMgYi9j cnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMKaW5kZXggNWU0YzhhMWM4NTcyLi4yYjFmYmVl ODBhYjYgMTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYworKysgYi9j cnlwdG8vaGVpbWRhbC9saWIva3JiNS9zYWx0LmMKQEAgLTQzLDYgKzQzLDggQEAga3JiNV9zYWx0 dHlwZV90b19zdHJpbmcgKGtyYjVfY29udGV4dCBjb250ZXh0LAogICAgIHN0cnVjdCBfa3JiNV9l bmNyeXB0aW9uX3R5cGUgKmU7CiAgICAgc3RydWN0IHNhbHRfdHlwZSAqc3Q7CiAKKyAgICAodm9p ZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKKwogICAgIGUgPSBfa3JiNV9maW5kX2VuY3R5 cGUgKGV0eXBlKTsKICAgICBpZiAoZSA9PSBOVUxMKSB7CiAJa3JiNV9zZXRfZXJyb3JfbWVzc2Fn ZShjb250ZXh0LCBLUkI1X1BST0dfRVRZUEVfTk9TVVBQLApAQCAtNzUsNiArNzcsOCBAQCBrcmI1 X3N0cmluZ190b19zYWx0dHlwZSAoa3JiNV9jb250ZXh0IGNvbnRleHQsCiAgICAgc3RydWN0IF9r cmI1X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBzdHJ1Y3Qgc2FsdF90eXBlICpzdDsKIAorICAg ICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworCiAgICAgZSA9IF9rcmI1X2ZpbmRf ZW5jdHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09IE5VTEwpIHsKIAlrcmI1X3NldF9lcnJvcl9t ZXNzYWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQRV9OT1NVUFAsCkBAIC0xOTYsNiArMjAwLDcg QEAga3JiNV9zdHJpbmdfdG9fa2V5X2RhdGFfc2FsdF9vcGFxdWUgKGtyYjVfY29udGV4dCBjb250 ZXh0LAogCQkJICAgICAgIGVuY3R5cGUpOwogCXJldHVybiBLUkI1X1BST0dfRVRZUEVfTk9TVVBQ OwogICAgIH0KKyAgICAodm9pZCkgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKICAgICBmb3Io c3QgPSBldC0+a2V5dHlwZS0+c3RyaW5nX3RvX2tleTsgc3QgJiYgc3QtPnR5cGU7IHN0KyspCiAJ aWYoc3QtPnR5cGUgPT0gc2FsdC5zYWx0dHlwZSkKIAkgICAgcmV0dXJuICgqc3QtPnN0cmluZ190 b19rZXkpKGNvbnRleHQsIGVuY3R5cGUsIHBhc3N3b3JkLApkaWZmIC0tZ2l0IGEvY3J5cHRvL2hl aW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcCBiL2NyeXB0by9oZWltZGFsL2xpYi9y b2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAKaW5kZXggNzJkMmVhN2U0ZjdjLi5iYjIxMzllZDc0Y2Mg MTAwNjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9yb2tlbi92ZXJzaW9uLXNjcmlwdC5tYXAK KysrIGIvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcApAQCAtMTMs NiArMTMsNyBAQCBIRUlNREFMX1JPS0VOXzEuMCB7CiAJCWN0X21lbWNtcDsKIAkJZXJyOwogCQll cnJ4OworCQlmYnNkX29zc2xfcHJvdmlkZXJfbG9hZDsKIAkJZnJlZV9nZXRhcmdfc3RyaW5nczsK IAkJZ2V0X2RlZmF1bHRfdXNlcm5hbWU7CiAJCWdldF93aW5kb3dfc2l6ZTsKZGlmZiAtLWdpdCBh L2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmggYi9rZXJiZXJvczUvaW5jbHVkZS9j cnlwdG8taGVhZGVycy5oCmluZGV4IDNhZTBkOTYyNGZmZC4uMmNjODcwNjQyOTY0IDEwMDY0NAot LS0gYS9rZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oCisrKyBiL2tlcmJlcm9zNS9p bmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKQEAgLTE3LDUgKzE3LDkgQEAKICNpbmNsdWRlIDxvcGVu c3NsL2VjLmg+CiAjaW5jbHVkZSA8b3BlbnNzbC9lY2RzYS5oPgogI2luY2x1ZGUgPG9wZW5zc2wv ZWNkaC5oPgorI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9W RVJTSU9OX01BSk9SID49IDMpCisjaW5jbHVkZSA8b3BlbnNzbC9wcm92aWRlci5oPgorI2luY2x1 ZGUgImZic2Rfb3NzbF9wcm92aWRlci5oIgorI2VuZGlmCiAKICNlbmRpZiAvKiBfX2NyeXB0b19o ZWFkZXJzX2hfXyAqLwpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3By b3ZpZGVyLmggYi9rZXJiZXJvczUvaW5jbHVkZS9mYnNkX29zc2xfcHJvdmlkZXIuaApuZXcgZmls ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAuLjAxMzk4M2NhOWY4MwotLS0gL2Rldi9u dWxsCisrKyBiL2tlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oCkBAIC0wLDAg KzEsNCBAQAorI2lmbmRlZiBfX2Zic2Rfb3NzbF9wcm92aWRlcl9oCisjZGVmaW5lIF9fZmJzZF9v c3NsX3Byb3ZpZGVyX2gKK2ludCAgZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQodm9pZCk7CisjZW5k aWYKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUgYi9rZXJiZXJv czUvbGliL2xpYnJva2VuL01ha2VmaWxlCmluZGV4IDBjNDZiYTZjNGNiNS4uY2E2ZDA5MGU2NGYw IDEwMDY0NAotLS0gYS9rZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlCisrKyBiL2tlcmJl cm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKQEAgLTc0LDkgKzc0LDEzIEBAIFNSQ1M9CWJhc2U2 NC5jIFwKIAl2aXMuYyBcCiAJd2FybmVyci5jIFwKIAl3cml0ZV9waWQuYyBcCi0JeGZyZWUuYwor CXhmcmVlLmMgXAorCWZic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMKIAotQ0ZMQUdTKz0tSSR7S1JC NURJUn0vbGliL3Jva2VuIC1JLgorQ0ZMQUdTKz0tSSR7S1JCNURJUn0vbGliL3Jva2VuIFwKKwkt SSR7U1JDVE9QfS9rZXJiZXJvczUvaW5jbHVkZSBcCisJLUkke0tSQjVESVJ9L2xpYi9rcmI1IFwK KwktSSR7U1JDVE9QfS9jcnlwdG8vb3BlbnNzbC9pbmNsdWRlIC1JLgogCiBDTEVBTkZJTEVTPSBy b2tlbi5oCiAKZGlmZiAtLWdpdCBhL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3By b3ZpZGVyX2xvYWQuYyBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3NsX3Byb3ZpZGVy X2xvYWQuYwpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAuLmFiYzIyNDVi MmZkNwotLS0gL2Rldi9udWxsCisrKyBiL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vZmJzZF9vc3Ns X3Byb3ZpZGVyX2xvYWQuYwpAQCAtMCwwICsxLDc4IEBACisjaW5jbHVkZSA8ZGxmY24uaD4KKyNp bmNsdWRlIDxlcnJuby5oPgorI2luY2x1ZGUgPGtyYjVfbG9jbC5oPgorI2luY2x1ZGUgPHN0ZGlv Lmg+CisjaW5jbHVkZSA8b3BlbnNzbC9wcm92aWRlci5oPgorCisjaWYgZGVmaW5lZChPUEVOU1NM X1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0gMykKK3N0YXRpYyB2 b2lkIGZic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQodm9pZCk7CitzdGF0aWMgdm9pZCBwcmludF9k bGVycm9yKGNoYXIgKik7CitzdGF0aWMgT1NTTF9QUk9WSURFUiAqbGVnYWN5Oworc3RhdGljIE9T U0xfUFJPVklERVIgKmRlZmx0Oworc3RhdGljIGludCBwcm92aWRlcnNfbG9hZGVkID0gMDsKK3N0 YXRpYyBPU1NMX1BST1ZJREVSICogKCpvc3NsX3Byb3ZpZGVyX2xvYWQpKE9TU0xfTElCX0NUWCAq LCBjb25zdCBjaGFyKikgPSBOVUxMOworc3RhdGljIGludCAoKm9zc2xfcHJvdmlkZXJfdW5sb2Fk KShPU1NMX1BST1ZJREVSICopID0gTlVMTDsKK3N0YXRpYyB2b2lkICpjcnlwdG9fbGliX2hhbmRs ZSA9IE5VTEw7CitzdGF0aWMgdm9pZCAqdGhyX2xpYl9oYW5kbGUgPSBOVUxMOworCitzdGF0aWMg dm9pZAorZmJzZF9vc3NsX3Byb3ZpZGVyX3VubG9hZCh2b2lkKQoreworCWlmIChvc3NsX3Byb3Zp ZGVyX3VubG9hZCA9PSBOVUxMKSB7CisJCWlmICghKG9zc2xfcHJvdmlkZXJfdW5sb2FkID0gKGlu dCAoKikoT1NTTF9QUk9WSURFUiopKSBkbHN5bShjcnlwdG9fbGliX2hhbmRsZSwgIk9TU0xfUFJP VklERVJfdW5sb2FkIikpKSB7CisJCQlwcmludF9kbGVycm9yKCJVbmFibGUgdG8gbGluayBPU1NM X1BST1ZJREVSX3VubG9hZCIpOworCQkJcmV0dXJuOworCQl9CisJfQorCWlmIChwcm92aWRlcnNf bG9hZGVkID09IDEpIHsKKwkJKCpvc3NsX3Byb3ZpZGVyX3VubG9hZCkobGVnYWN5KTsKKwkJKCpv c3NsX3Byb3ZpZGVyX3VubG9hZCkoZGVmbHQpOworCQlwcm92aWRlcnNfbG9hZGVkID0gMDsKKwl9 Cit9CisKK3N0YXRpYyB2b2lkCitwcmludF9kbGVycm9yKGNoYXIgKm1lc3NhZ2UpCit7CisJY2hh ciAqZXJyc3RyOworCisJaWYgKChlcnJzdHIgPSBkbGVycm9yKCkpICE9IE5VTEwpCisJCWZwcmlu dGYoc3RkZXJyLCAiJXM6ICVzXG4iLAorCQkJbWVzc2FnZSwgZXJyc3RyKTsKK30KKyNlbmRpZgor CitpbnQKK2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkKHZvaWQpCit7CisjaWYgZGVmaW5lZChPUEVO U1NMX1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NMX1ZFUlNJT05fTUFKT1IgPj0gMykKKwlpZiAo Y3J5cHRvX2xpYl9oYW5kbGUgPT0gTlVMTCkgeworCQlpZiAoIShjcnlwdG9fbGliX2hhbmRsZSA9 IGRsb3BlbigiL3Vzci9saWIvbGliY3J5cHRvLnNvIiwKKwkJICAgIFJUTERfTEFaWXxSVExEX0dM T0JBTCkpKSB7CisJCQlwcmludF9kbGVycm9yKCJVbmFibGUgdG8gbG9hZCBsaWJjcnlwdG8uc28i KTsKKwkJCXJldHVybiAoRUlOVkFMKTsKKwkJfQorCX0KKwlpZiAob3NzbF9wcm92aWRlcl9sb2Fk ID09IE5VTEwpIHsKKwkJaWYgKCEob3NzbF9wcm92aWRlcl9sb2FkID0gKE9TU0xfUFJPVklERVIg KiAoKikoT1NTTF9MSUJfQ1RYKiwgY29uc3QgY2hhciAqKSkgZGxzeW0oY3J5cHRvX2xpYl9oYW5k bGUsICJPU1NMX1BST1ZJREVSX2xvYWQiKSkpIHsKKwkJCXByaW50X2RsZXJyb3IoIlVuYWJsZSB0 byBsaW5rIE9TU0xfUFJPVklERVJfbG9hZCIpOworCQkJcmV0dXJuKEVOT0VOVCk7CisJCX0KKwl9 CisKKwlpZiAocHJvdmlkZXJzX2xvYWRlZCA9PSAwKSB7CisJCWlmICgobGVnYWN5ID0gKCpvc3Ns X3Byb3ZpZGVyX2xvYWQpKE5VTEwsICJsZWdhY3kiKSkgPT0gTlVMTCkKKwkJCXJldHVybiAoRUlO VkFMKTsKKwkJaWYgKChkZWZsdCA9ICgqb3NzbF9wcm92aWRlcl9sb2FkKShOVUxMLCAiZGVmYXVs dCIpKSA9PSBOVUxMKSB7CisJCQkoKm9zc2xfcHJvdmlkZXJfdW5sb2FkKShsZWdhY3kpOworCQkJ cmV0dXJuIChFSU5WQUwpOworCQl9CisJCWlmIChhdGV4aXQoZmJzZF9vc3NsX3Byb3ZpZGVyX3Vu bG9hZCkpIHsKKwkJCWZic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQoKTsKKwkJCXJldHVybiAoZXJy bm8pOworCQl9CisJCXByb3ZpZGVyc19sb2FkZWQgPSAxOworCX0KKyNlbmRpZgorCXJldHVybiAo MCk7Cit9CmRpZmYgLS1naXQgYS9rZXJiZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUgYi9rZXJi ZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKaW5kZXggNDFmZGU5MTE1YzAwLi4yMTFmNGYzNzkw NTQgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9saWJleGVjL2tkYy9NYWtlZmlsZQorKysgYi9rZXJi ZXJvczUvbGliZXhlYy9rZGMvTWFrZWZpbGUKQEAgLTExLDcgKzExLDcgQEAgU1JDUz0JY29uZmln LmMgXAogCiBDRkxBR1MrPS1JJHtLUkI1RElSfS9saWIva3JiNSAtSSR7S1JCNURJUn0vbGliL2Fz bjEgLUkke0tSQjVESVJ9L2xpYi9yb2tlbiBcCiAJLUkke0tSQjVESVJ9L2tkYyAtSSR7U1JDVE9Q fS9jb250cmliL2NvbV9lcnIgJHtMREFQQ0ZMQUdTfQotTElCQUREPQlrZGMgaGRiIGtyYjUgcm9r ZW4gY3J5cHQgdmVycworTElCQUREPQlrZGMgaGRiIGtyYjUgcm9rZW4gY3J5cHQgdmVycyBjcnlw dG8KIExERkxBR1M9JHtMREFQTERGTEFHU30KIAogLmluY2x1ZGUgPGJzZC5wcm9nLm1rPgotLSAK Mi40My4wCgo= 247730 2024-01-17 18:47:00 +0000 2024-01-17 18:47:00 +0000 Final version of patch before commit. 0001-kerberos-Fix-numerous-segfaults-when-using-weak-cryp.patch text/plain 8645 cy RnJvbSA4NGI1MTUzNjNmNWM1OGQzNmM4N2FiZWZkMDJmNzc4ZWJhZDM4NzFmIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDeSBTY2h1YmVydCA8Y3lARnJlZUJTRC5vcmc+CkRhdGU6IFdl ZCwgNiBEZWMgMjAyMyAwNzozMDowNSAtMDgwMApTdWJqZWN0OiBbUEFUQ0hdIGtlcmJlcm9zOiBG aXggbnVtZXJvdXMgc2VnZmF1bHRzIHdoZW4gdXNpbmcgd2VhayBjcnlwdG8KCldlYWsgY3J5cHRv IGlzIHByb3ZpZGVkIGJ5IHRoZSBvcGVuc3NsIGxlZ2FjeSBwcm92aWRlciB3aGljaCBpcwpub3Qg bG9hZCBieSBkZWZhdWx0LiBMb2FkIHRoZSBsZWdhY3kgcHJvdmlkZXJzIGFzIG5lZWRlZC4KCldo ZW4gdGhlIGxlZ2FjeSBwcm92aWRlciBpcyBsb2FkZWQgaW50byB0aGUgZGVmYXVsdCBjb250ZXh0 IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHdpbGwgbm8gbG9uZ2VyIGJlIGF1dG9tYXRpY2FsbHkgbG9h ZGVkLiBXaXRob3V0IHRoZSBkZWZhdWx0CnByb3ZpZGVyIHRoZSB2YXJpb3VzIGtlcmJlcm9zIGFw cGxpY2Fpb25zIGFuZCBmdW5jdGlvbnMgd2lsbCBhYm9ydCgpLgoKVGhpcyBpcyB0aGUgc2Vjb25k IGF0dGVtcHQgYXQgdGhpcyBwYXRjaC4gSW5zdGVhZCBvZiBsaW5raW5nCnNlY3VyZS9saWIvbGli Y3J5cHRvIGF0IGJ1aWxkIHRpbWUgd2Ugbm93IGxpbmsgaXQgYXQgcnVudGltZSwgYXZvaWRpbmcK YnVpbGR3b3JsZCBmYWlsdXJlcyB1bmRlciBMaW51eCBhbmQgTWFjT1MuIFRoaXMgaXMgYmVjYXVz ZQpUQVJHRVRfRU5ESUFOTkVTUyBpcyB1bmRlZmluZWQgYXQgcHJlLWJ1aWxkIHRpbWUuCgpQUjoJ CQkyNzI4MzUKTUZDIGFmdGVyOgkJMyBkYXlzClRlc3RlZCBieToJCW5ldGNoaWxkLCBKb2VyZyBQ dWx6IDxKb2VyZy5QdWx6QGZybTIudHVtLmRlPgotLS0KIGNyeXB0by9oZWltZGFsL2xpYi9rYWRt NS9jcmVhdGVfcy5jICAgICAgICAgICB8ICA0ICsKIGNyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9r YWRtNV9sb2NsLmggICAgICAgICB8ICAxICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRl eHQuYyAgICAgICAgICAgICB8ICA0ICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5j ICAgICAgICAgICAgICB8ICAzICsKIGNyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyAgICAg ICAgICAgICAgICB8ICA1ICsrCiBjcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3Jp cHQubWFwICAgfCAgMSArCiBrZXJiZXJvczUvaW5jbHVkZS9jcnlwdG8taGVhZGVycy5oICAgICAg ICAgICAgfCAgNCArCiBrZXJiZXJvczUvaW5jbHVkZS9mYnNkX29zc2xfcHJvdmlkZXIuaCAgICAg ICAgfCAgNCArCiBrZXJiZXJvczUvbGliL2xpYnJva2VuL01ha2VmaWxlICAgICAgICAgICAgICAg fCAgOCArLQogLi4uL2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlkZXJfbG9hZC5jICAgIHwg NzcgKysrKysrKysrKysrKysrKysrKwogMTAgZmlsZXMgY2hhbmdlZCwgMTA5IGluc2VydGlvbnMo KyksIDIgZGVsZXRpb25zKC0pCiBjcmVhdGUgbW9kZSAxMDA2NDQga2VyYmVyb3M1L2luY2x1ZGUv ZmJzZF9vc3NsX3Byb3ZpZGVyLmgKIGNyZWF0ZSBtb2RlIDEwMDY0NCBrZXJiZXJvczUvbGliL2xp YnJva2VuL2Zic2Rfb3NzbF9wcm92aWRlcl9sb2FkLmMKCmRpZmYgLS1naXQgYS9jcnlwdG8vaGVp bWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYyBiL2NyeXB0by9oZWltZGFsL2xpYi9rYWRtNS9jcmVh dGVfcy5jCmluZGV4IDEwMzNjYTEwMzIzOS4uMjY3ZTliYmRhMmEwIDEwMDY0NAotLS0gYS9jcnlw dG8vaGVpbWRhbC9saWIva2FkbTUvY3JlYXRlX3MuYworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIv a2FkbTUvY3JlYXRlX3MuYwpAQCAtMTY5LDYgKzE2OSwxMCBAQCBrYWRtNV9zX2NyZWF0ZV9wcmlu Y2lwYWwodm9pZCAqc2VydmVyX2hhbmRsZSwKICAgICBlbnQuZW50cnkua2V5cy5sZW4gPSAwOwog ICAgIGVudC5lbnRyeS5rZXlzLnZhbCA9IE5VTEw7CiAKKyAgICByZXQgPSBmYnNkX29zc2xfcHJv dmlkZXJfbG9hZCgpOworICAgIGlmIChyZXQpCisJZ290byBvdXQ7CisKICAgICByZXQgPSBfa2Fk bTVfc2V0X2tleXMoY29udGV4dCwgJmVudC5lbnRyeSwgcGFzc3dvcmQpOwogICAgIGlmIChyZXQp CiAJZ290byBvdXQ7CmRpZmYgLS1naXQgYS9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVf bG9jbC5oIGIvY3J5cHRvL2hlaW1kYWwvbGliL2thZG01L2thZG01X2xvY2wuaAppbmRleCA2OGI2 YTVlYmYwMjQuLjYzYjM2N2FiN2UyMSAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2th ZG01L2thZG01X2xvY2wuaAorKysgYi9jcnlwdG8vaGVpbWRhbC9saWIva2FkbTUva2FkbTVfbG9j bC5oCkBAIC03OSw1ICs3OSw2IEBACiAjaW5jbHVkZSA8ZGVyLmg+CiAjaW5jbHVkZSA8cGFyc2Vf dW5pdHMuaD4KICNpbmNsdWRlICJwcml2YXRlLmgiCisjaW5jbHVkZSAiZmJzZF9vc3NsX3Byb3Zp ZGVyLmgiCiAKICNlbmRpZiAvKiBfX0tBRE01X0xPQ0xfSF9fICovCmRpZmYgLS1naXQgYS9jcnlw dG8vaGVpbWRhbC9saWIva3JiNS9jb250ZXh0LmMgYi9jcnlwdG8vaGVpbWRhbC9saWIva3JiNS9j b250ZXh0LmMKaW5kZXggODZiZmU1MzliOTc0Li42ODFiYzlhMDk4MmYgMTAwNjQ0Ci0tLSBhL2Ny eXB0by9oZWltZGFsL2xpYi9rcmI1L2NvbnRleHQuYworKysgYi9jcnlwdG8vaGVpbWRhbC9saWIv a3JiNS9jb250ZXh0LmMKQEAgLTM5Miw2ICszOTIsMTAgQEAga3JiNV9pbml0X2NvbnRleHQoa3Ji NV9jb250ZXh0ICpjb250ZXh0KQogICAgIH0KICAgICBIRUlNREFMX01VVEVYX2luaXQocC0+bXV0 ZXgpOwogCisgICAgcmV0ID0gZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQoKTsKKyAgICBpZihyZXQp CisJZ290byBvdXQ7CisKICAgICBwLT5mbGFncyB8PSBLUkI1X0NUWF9GX0hPTUVESVJfQUNDRVNT OwogCiAgICAgcmV0ID0ga3JiNV9nZXRfZGVmYXVsdF9jb25maWdfZmlsZXMoJmZpbGVzKTsKZGlm ZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jIGIvY3J5cHRvL2hlaW1k YWwvbGliL2tyYjUvY3J5cHRvLmMKaW5kZXggNjdlY2VmNjJlODc1Li42ZWUyMjYwOWE0ZDUgMTAw NjQ0Ci0tLSBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCisrKyBiL2NyeXB0by9o ZWltZGFsL2xpYi9rcmI1L2NyeXB0by5jCkBAIC0yMDU0LDYgKzIwNTQsOSBAQCBrcmI1X2NyeXB0 b19pbml0KGtyYjVfY29udGV4dCBjb250ZXh0LAogCSpjcnlwdG8gPSBOVUxMOwogCXJldHVybiBy ZXQ7CiAgICAgfQorICAgIHJldCA9IGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisgICAgaWYg KHJldCkKKwlyZXR1cm4gcmV0OwogICAgICgqY3J5cHRvKS0+a2V5LnNjaGVkdWxlID0gTlVMTDsK ICAgICAoKmNyeXB0byktPm51bV9rZXlfdXNhZ2UgPSAwOwogICAgICgqY3J5cHRvKS0+a2V5X3Vz YWdlID0gTlVMTDsKZGlmZiAtLWdpdCBhL2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYyBi L2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwppbmRleCA1ZTRjOGExYzg1NzIuLjJiMWZi ZWU4MGFiNiAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL2tyYjUvc2FsdC5jCisrKyBi L2NyeXB0by9oZWltZGFsL2xpYi9rcmI1L3NhbHQuYwpAQCAtNDMsNiArNDMsOCBAQCBrcmI1X3Nh bHR0eXBlX3RvX3N0cmluZyAoa3JiNV9jb250ZXh0IGNvbnRleHQsCiAgICAgc3RydWN0IF9rcmI1 X2VuY3J5cHRpb25fdHlwZSAqZTsKICAgICBzdHJ1Y3Qgc2FsdF90eXBlICpzdDsKIAorICAgICh2 b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOworCiAgICAgZSA9IF9rcmI1X2ZpbmRfZW5j dHlwZSAoZXR5cGUpOwogICAgIGlmIChlID09IE5VTEwpIHsKIAlrcmI1X3NldF9lcnJvcl9tZXNz YWdlKGNvbnRleHQsIEtSQjVfUFJPR19FVFlQRV9OT1NVUFAsCkBAIC03NSw2ICs3Nyw4IEBAIGty YjVfc3RyaW5nX3RvX3NhbHR0eXBlIChrcmI1X2NvbnRleHQgY29udGV4dCwKICAgICBzdHJ1Y3Qg X2tyYjVfZW5jcnlwdGlvbl90eXBlICplOwogICAgIHN0cnVjdCBzYWx0X3R5cGUgKnN0OwogCisg ICAgKHZvaWQpIGZic2Rfb3NzbF9wcm92aWRlcl9sb2FkKCk7CisKICAgICBlID0gX2tyYjVfZmlu ZF9lbmN0eXBlIChldHlwZSk7CiAgICAgaWYgKGUgPT0gTlVMTCkgewogCWtyYjVfc2V0X2Vycm9y X21lc3NhZ2UoY29udGV4dCwgS1JCNV9QUk9HX0VUWVBFX05PU1VQUCwKQEAgLTE5Niw2ICsyMDAs NyBAQCBrcmI1X3N0cmluZ190b19rZXlfZGF0YV9zYWx0X29wYXF1ZSAoa3JiNV9jb250ZXh0IGNv bnRleHQsCiAJCQkgICAgICAgZW5jdHlwZSk7CiAJcmV0dXJuIEtSQjVfUFJPR19FVFlQRV9OT1NV UFA7CiAgICAgfQorICAgICh2b2lkKSBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCgpOwogICAgIGZv cihzdCA9IGV0LT5rZXl0eXBlLT5zdHJpbmdfdG9fa2V5OyBzdCAmJiBzdC0+dHlwZTsgc3QrKykK IAlpZihzdC0+dHlwZSA9PSBzYWx0LnNhbHR0eXBlKQogCSAgICByZXR1cm4gKCpzdC0+c3RyaW5n X3RvX2tleSkoY29udGV4dCwgZW5jdHlwZSwgcGFzc3dvcmQsCmRpZmYgLS1naXQgYS9jcnlwdG8v aGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwIGIvY3J5cHRvL2hlaW1kYWwvbGli L3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1hcAppbmRleCA3MmQyZWE3ZTRmN2MuLmJiMjEzOWVkNzRj YyAxMDA2NDQKLS0tIGEvY3J5cHRvL2hlaW1kYWwvbGliL3Jva2VuL3ZlcnNpb24tc2NyaXB0Lm1h cAorKysgYi9jcnlwdG8vaGVpbWRhbC9saWIvcm9rZW4vdmVyc2lvbi1zY3JpcHQubWFwCkBAIC0x Myw2ICsxMyw3IEBAIEhFSU1EQUxfUk9LRU5fMS4wIHsKIAkJY3RfbWVtY21wOwogCQllcnI7CiAJ CWVycng7CisJCWZic2Rfb3NzbF9wcm92aWRlcl9sb2FkOwogCQlmcmVlX2dldGFyZ19zdHJpbmdz OwogCQlnZXRfZGVmYXVsdF91c2VybmFtZTsKIAkJZ2V0X3dpbmRvd19zaXplOwpkaWZmIC0tZ2l0 IGEva2VyYmVyb3M1L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaCBiL2tlcmJlcm9zNS9pbmNsdWRl L2NyeXB0by1oZWFkZXJzLmgKaW5kZXggM2FlMGQ5NjI0ZmZkLi4yY2M4NzA2NDI5NjQgMTAwNjQ0 Ci0tLSBhL2tlcmJlcm9zNS9pbmNsdWRlL2NyeXB0by1oZWFkZXJzLmgKKysrIGIva2VyYmVyb3M1 L2luY2x1ZGUvY3J5cHRvLWhlYWRlcnMuaApAQCAtMTcsNSArMTcsOSBAQAogI2luY2x1ZGUgPG9w ZW5zc2wvZWMuaD4KICNpbmNsdWRlIDxvcGVuc3NsL2VjZHNhLmg+CiAjaW5jbHVkZSA8b3BlbnNz bC9lY2RoLmg+CisjaWYgZGVmaW5lZChPUEVOU1NMX1ZFUlNJT05fTUFKT1IpICYmIChPUEVOU1NM X1ZFUlNJT05fTUFKT1IgPj0gMykKKyNpbmNsdWRlIDxvcGVuc3NsL3Byb3ZpZGVyLmg+CisjaW5j bHVkZSAiZmJzZF9vc3NsX3Byb3ZpZGVyLmgiCisjZW5kaWYKIAogI2VuZGlmIC8qIF9fY3J5cHRv X2hlYWRlcnNfaF9fICovCmRpZmYgLS1naXQgYS9rZXJiZXJvczUvaW5jbHVkZS9mYnNkX29zc2xf cHJvdmlkZXIuaCBiL2tlcmJlcm9zNS9pbmNsdWRlL2Zic2Rfb3NzbF9wcm92aWRlci5oCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMC4uMDEzOTgzY2E5ZjgzCi0tLSAvZGV2 L251bGwKKysrIGIva2VyYmVyb3M1L2luY2x1ZGUvZmJzZF9vc3NsX3Byb3ZpZGVyLmgKQEAgLTAs MCArMSw0IEBACisjaWZuZGVmIF9fZmJzZF9vc3NsX3Byb3ZpZGVyX2gKKyNkZWZpbmUgX19mYnNk X29zc2xfcHJvdmlkZXJfaAoraW50ICBmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCh2b2lkKTsKKyNl bmRpZgpkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZSBiL2tlcmJl cm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKaW5kZXggMGM0NmJhNmM0Y2I1Li5jYTZkMDkwZTY0 ZjAgMTAwNjQ0Ci0tLSBhL2tlcmJlcm9zNS9saWIvbGlicm9rZW4vTWFrZWZpbGUKKysrIGIva2Vy YmVyb3M1L2xpYi9saWJyb2tlbi9NYWtlZmlsZQpAQCAtNzQsOSArNzQsMTMgQEAgU1JDUz0JYmFz ZTY0LmMgXAogCXZpcy5jIFwKIAl3YXJuZXJyLmMgXAogCXdyaXRlX3BpZC5jIFwKLQl4ZnJlZS5j CisJeGZyZWUuYyBcCisJZmJzZF9vc3NsX3Byb3ZpZGVyX2xvYWQuYwogCi1DRkxBR1MrPS1JJHtL UkI1RElSfS9saWIvcm9rZW4gLUkuCitDRkxBR1MrPS1JJHtLUkI1RElSfS9saWIvcm9rZW4gXAor CS1JJHtTUkNUT1B9L2tlcmJlcm9zNS9pbmNsdWRlIFwKKwktSSR7S1JCNURJUn0vbGliL2tyYjUg XAorCS1JJHtTUkNUT1B9L2NyeXB0by9vcGVuc3NsL2luY2x1ZGUgLUkuCiAKIENMRUFORklMRVM9 IHJva2VuLmgKIApkaWZmIC0tZ2l0IGEva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29zc2xf cHJvdmlkZXJfbG9hZC5jIGIva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29zc2xfcHJvdmlk ZXJfbG9hZC5jCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMC4uNDk3YjMy MTI0Zjk2Ci0tLSAvZGV2L251bGwKKysrIGIva2VyYmVyb3M1L2xpYi9saWJyb2tlbi9mYnNkX29z c2xfcHJvdmlkZXJfbG9hZC5jCkBAIC0wLDAgKzEsNzcgQEAKKyNpbmNsdWRlIDxkbGZjbi5oPgor I2luY2x1ZGUgPGVycm5vLmg+CisjaW5jbHVkZSA8c3RkaW8uaD4KKyNpbmNsdWRlIDxzdGRsaWIu aD4KKyNpbmNsdWRlIDxvcGVuc3NsL3Byb3ZpZGVyLmg+CisKKyNpZiBkZWZpbmVkKE9QRU5TU0xf VkVSU0lPTl9NQUpPUikgJiYgKE9QRU5TU0xfVkVSU0lPTl9NQUpPUiA+PSAzKQorc3RhdGljIHZv aWQgZmJzZF9vc3NsX3Byb3ZpZGVyX3VubG9hZCh2b2lkKTsKK3N0YXRpYyB2b2lkIHByaW50X2Rs ZXJyb3IoY2hhciAqKTsKK3N0YXRpYyBPU1NMX1BST1ZJREVSICpsZWdhY3k7CitzdGF0aWMgT1NT TF9QUk9WSURFUiAqZGVmbHQ7CitzdGF0aWMgaW50IHByb3ZpZGVyc19sb2FkZWQgPSAwOworc3Rh dGljIE9TU0xfUFJPVklERVIgKiAoKm9zc2xfcHJvdmlkZXJfbG9hZCkoT1NTTF9MSUJfQ1RYICos IGNvbnN0IGNoYXIqKSA9IE5VTEw7CitzdGF0aWMgaW50ICgqb3NzbF9wcm92aWRlcl91bmxvYWQp KE9TU0xfUFJPVklERVIgKikgPSBOVUxMOworc3RhdGljIHZvaWQgKmNyeXB0b19saWJfaGFuZGxl ID0gTlVMTDsKKworc3RhdGljIHZvaWQKK2Zic2Rfb3NzbF9wcm92aWRlcl91bmxvYWQodm9pZCkK K3sKKwlpZiAob3NzbF9wcm92aWRlcl91bmxvYWQgPT0gTlVMTCkgeworCQlpZiAoIShvc3NsX3By b3ZpZGVyX3VubG9hZCA9IChpbnQgKCopKE9TU0xfUFJPVklERVIqKSkgZGxzeW0oY3J5cHRvX2xp Yl9oYW5kbGUsICJPU1NMX1BST1ZJREVSX3VubG9hZCIpKSkgeworCQkJcHJpbnRfZGxlcnJvcigi VW5hYmxlIHRvIGxpbmsgT1NTTF9QUk9WSURFUl91bmxvYWQiKTsKKwkJCXJldHVybjsKKwkJfQor CX0KKwlpZiAocHJvdmlkZXJzX2xvYWRlZCA9PSAxKSB7CisJCSgqb3NzbF9wcm92aWRlcl91bmxv YWQpKGxlZ2FjeSk7CisJCSgqb3NzbF9wcm92aWRlcl91bmxvYWQpKGRlZmx0KTsKKwkJcHJvdmlk ZXJzX2xvYWRlZCA9IDA7CisJfQorfQorCitzdGF0aWMgdm9pZAorcHJpbnRfZGxlcnJvcihjaGFy ICptZXNzYWdlKQoreworCWNoYXIgKmVycnN0cjsKKworCWlmICgoZXJyc3RyID0gZGxlcnJvcigp KSAhPSBOVUxMKQorCQlmcHJpbnRmKHN0ZGVyciwgIiVzOiAlc1xuIiwKKwkJCW1lc3NhZ2UsIGVy cnN0cik7Cit9CisjZW5kaWYKKworaW50CitmYnNkX29zc2xfcHJvdmlkZXJfbG9hZCh2b2lkKQor eworI2lmIGRlZmluZWQoT1BFTlNTTF9WRVJTSU9OX01BSk9SKSAmJiAoT1BFTlNTTF9WRVJTSU9O X01BSk9SID49IDMpCisJaWYgKGNyeXB0b19saWJfaGFuZGxlID09IE5VTEwpIHsKKwkJaWYgKCEo Y3J5cHRvX2xpYl9oYW5kbGUgPSBkbG9wZW4oIi91c3IvbGliL2xpYmNyeXB0by5zbyIsCisJCSAg ICBSVExEX0xBWll8UlRMRF9HTE9CQUwpKSkgeworCQkJcHJpbnRfZGxlcnJvcigiVW5hYmxlIHRv IGxvYWQgbGliY3J5cHRvLnNvIik7CisJCQlyZXR1cm4gKEVJTlZBTCk7CisJCX0KKwl9CisJaWYg KG9zc2xfcHJvdmlkZXJfbG9hZCA9PSBOVUxMKSB7CisJCWlmICghKG9zc2xfcHJvdmlkZXJfbG9h ZCA9IChPU1NMX1BST1ZJREVSICogKCopKE9TU0xfTElCX0NUWCosIGNvbnN0IGNoYXIgKikpIGRs c3ltKGNyeXB0b19saWJfaGFuZGxlLCAiT1NTTF9QUk9WSURFUl9sb2FkIikpKSB7CisJCQlwcmlu dF9kbGVycm9yKCJVbmFibGUgdG8gbGluayBPU1NMX1BST1ZJREVSX2xvYWQiKTsKKwkJCXJldHVy bihFTk9FTlQpOworCQl9CisJfQorCisJaWYgKHByb3ZpZGVyc19sb2FkZWQgPT0gMCkgeworCQlp ZiAoKGxlZ2FjeSA9ICgqb3NzbF9wcm92aWRlcl9sb2FkKShOVUxMLCAibGVnYWN5IikpID09IE5V TEwpCisJCQlyZXR1cm4gKEVJTlZBTCk7CisJCWlmICgoZGVmbHQgPSAoKm9zc2xfcHJvdmlkZXJf bG9hZCkoTlVMTCwgImRlZmF1bHQiKSkgPT0gTlVMTCkgeworCQkJKCpvc3NsX3Byb3ZpZGVyX3Vu bG9hZCkobGVnYWN5KTsKKwkJCXJldHVybiAoRUlOVkFMKTsKKwkJfQorCQlpZiAoYXRleGl0KGZi c2Rfb3NzbF9wcm92aWRlcl91bmxvYWQpKSB7CisJCQlmYnNkX29zc2xfcHJvdmlkZXJfdW5sb2Fk KCk7CisJCQlyZXR1cm4gKGVycm5vKTsKKwkJfQorCQlwcm92aWRlcnNfbG9hZGVkID0gMTsKKwl9 CisjZW5kaWYKKwlyZXR1cm4gKDApOworfQotLSAKMi40My4wCgo=