PDA

Bekijk Volledige Versie : Linux vsyscalls may be used as attack vectors



Clad Strife
20/04/05, 23:25
------=_Part_6119_21558147.1114027460647
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

I send (again !) this e-mail including in attachment an advisory
explaining how vsyscalls may be used as powerful attack vectors on
Linux 2.6.x kernels.

I received many mailer daemon replies for delivery failures in
multiple boxes with my last e-mail. I hope this one will be okay.
Please, confirm.

Regards,

Clad.

(attachment : ret-onto-ret_en.txt)

------=_Part_6119_21558147.1114027460647
Content-Type: text/plain; name="ret-onto-ret_en.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ret-onto-ret_en.txt"

QWR2aXNvcnkgLSBMaW51eCAyLjYueCB2c3lzY2FsbHMgbWF5IG JlIHVzZWQgYXMgcG93ZXJmdWwg
YXR0YWNrIHZlY3RvcnMuCltBcHJpbCAxMyAyMDA1XSBLZXl3b3 JkczogUk9SSVYgKHJldC1vbnRv
LXJldC1pbnRvLXZzeXNjYWxscykKCSAJIAkgIFJPSklWIChyZX Qtb250by1qbXAtaW50by12c3lz
Y2FsbHMpCk9yaWdpbmFsIHBhcGVyIG1heSBiZSBmb3VuZCBhdD oKaHR0cDovL3d3dy5zeXNkcmVh
bS5jb20vCmh0dHA6Ly93d3cubHNlLmVwaXRhLmZyL3B1YmxpY2 F0aW9ucy5waHAKLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0KClN5bm9wc2lzOiBUd28gb3JpZ2luYW wgYnVmZmVyIG92ZXJmbG93cyBl
eHBsb2l0IG1ldGhvZHMKLS0tLS0tLS0KCSArIHJldC1vbnRvLX JldAoJICsgcmV0LW9udG8tam1w
CgkgKyAyLjYueCB2c3lzY2FsbHMgdXNlZCBhcyBleHBsb2l0IH ZlY3RvcnMKCSArIGV4ZWN1dGFi
bGUgc3RhY2sgcmVxdWlyZWQKClByb3MKLS0tLQoJKyBubyBicn V0ZSBmb3JjZSBuZWNlc3Nhcnkg
aW4gb25lLCBhIGZldyBtb3JlIGluIHNlY29uZAoJKyBhZGRyZX NzZXMgYXJlIGVhc2lseSBwcmVk
aWN0YWJsZQoJKyBubyBOT1AgbmVjZXNzYXJ5CgkrIGF0dGFjay Bjb250ZXh0cyBvZnRlbiBmb3Vu
ZAoKQ29ucwotLS0tCgkrIGV4ZWN1dGFibGUgc3RhY2sgcmVxdW lyZWQKCSsgc3BlY2lmaWMgc3Rh
Y2sgZnJhbWUgb3JnYW5pemF0aW9uIG5lZWRlZAoKU3VtbWFyeQ otLS0tLS0tCgktLiBJbnRyb2R1
Y3Rpb24gCgkxLiBTdGFydGluZyB3aXRoIGEgc2FtcGxlIHByb2 JsZW0KCTIuIFNvbHV0aW9uOiBy
ZXQtb250by1yZXQJKEZpcnN0IG1ldGhvZCkKCTMuIEEgbmV3IH Byb2JsZW0KCTQuIFNvbHV0aW9u
OiByZXQtb250by1qbXAJKFNlY29uZCBtZXRob2QpCgk1LiBDb2 5jbHVzaW9uCgktLiBDcmVkaXRz
Cgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT 09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PQoKCkludHJvZHVjdG lvbgotLS0tLS0tLS0tLS0KClRo
aXMgcGFwZXIgd2lsbCBhdHRlbXB0IHRvIGV4cGxhaW4gdXN1YW wgcHJvYmxlbXMgZW5jb3VudGVy
ZWQgd2hlbiB0cnlpbmcgdG8KZXhwbG9pdCBidWZmZXIgb3Zlcm Zsb3dzIGluIHBhcnRpY3VsYXIg
Y29udGV4dHMgb2YgdGhlIHN0YWNrLCBhbmQgcHJvcG9zZSBhCm 1ldGhvZCB0byBlYXNpbHkgc29s
dmUgdGhvc2UgcHJvYmxlbXMuCgpXaGF0IGRvIHlvdSBoYXZlIH RvIGtub3cgYmVmb3JlIHJlYWRp
bmcgPwpZb3UgaGF2ZSB0byBrbm93IGFzc2VtYmx5IGxhbmd1YW dlLCBDIGxhbmd1YWdlIGFuZCBM
aW51eC9Vbml4LiBPZiBjb3Vyc2UsIHlvdSAKaGF2ZSB0byBrbm 93IHdoYXQgYSBidWZmZXIgb3Zl
cmZsb3cgaXMgKHdlIGhpZ2hseSByZWNvbW1lbmQgcmVhZGluZy BbMV0pLgoKCjEuIFN0YXJ0aW5n
IHdpdGggYSBzYW1wbGUgcHJvYmxlbQotLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0K
CkxldCdzIGhhdmUgYSBsb29rIGF0IHRoZSBmb2xsb3dpbmcgc2 hvcnQgcHJvZ3JhbToKCi0tLSU8
LS0tLS0tLS0tLS0tLS0lPC0tLS0tLS0tLS0tLSU8LS0tLS0tLS 0tLS0tLS0tLS0tLS0tJTwtLS0t
LS0tLSU8LS0tLS0tLS0tLS0tCgkKI2luY2x1ZGUgPHN0ZGlvLm g+CiNpbmNsdWRlIDxzdHJpbmcu
aD4KI2luY2x1ZGUgPHVuaXN0ZC5oPgoKdm9pZCAgICBjb3B5KG NoYXIgKnN0cikKewogIAljaGFy
CWJ1ZlsyNTZdOwogIAlpbnQJaTsKCiAgCW1lbXNldChidWYsID AsIDI1Nik7CiAgCWZvciAoaSA9
IDA7IHN0cltpXTsgaSsrKSB7CgkJYnVmW2ldID0gc3RyW2ldOw ogIAl9Cn0KCmludCAgICAgbWFp
bihpbnQgYWMsIGNoYXIgKiphdikKewogIAlpZiAoYWMgPCAyKS B7CgkJZnByaW50ZihzdGRlcnIs
ICJJIHRha2UgYXQgbGVhc3Qgb25lIGFyZ3VtZW50LlxuIik7Cg kJcmV0dXJuICgwKTsKICAJfQoJ
Y29weShhdlsxXSk7CglyZXR1cm4gKDApOwp9CgotLS0tLS0tLS 0tLSU8LS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLSU8LS0tLS0tLS0tLS0lPC0tLS0tLS0tJT wtLS0tLS0tLSU8LS0tLQoKVGhp
cyBwcm9ncmFtIGRvZXMgbm90aGluZyBvZiBpbnRlcmVzdCBieS BpdHNlbGYgLSBjb3B5KCkgY29w
aWVzIGl0cyBvbmx5IAphcmd1bWVudCB0byBhIGZpeGVkIHNpem UgKDI1NiBieXRlcykgYnVmZmVy
LiBOb3RpY2UgdGhhdCB0aGVyZSBpcyBubyBhZGRlZCBudWxsIA pieXRlIGF0IGVuZCBvZiBjb3B5
LgoKSXQgaXMgb2J2aW91cyB0aGF0IHRoZSB2dWxuZXJhYmlsaX R5IGxpZXMgaW4gY29weSgpOiB3
aGVuIGFyZ3VtZW50IHBvaW50ZWQgdG8gYnkKYHN0cicgaXMgdG 9vIGxvbmcsIHdlIHNtYXNoLCBv
dXRzaWRlIG9mIHRoZSBidWZmZXIsIEVCUCAobm90IGFsd2F5cy BzdG9yZWQpLCAKdGhlbiBFSVAu
CgpMZXQncyBzdXBwb3NlIHdlIGFyZSBwcmV2ZW50ZWQgYnkgdG hlIGhvc3Rpbmcgb3BlcmF0aW5n
IHN5c3RlbSBmcm9tIHVzaW5nIGJydXRlCmZvcmNlIHRvIGNoYW 5nZSB0aGUgcmV0dXJuIGFkZHJl
c3Mgb24gYSBzaGVsbGNvZGUgdGhhdCB3ZSB3b3VsZCBoYXZlIH Bhc3NlZCBpbiAKcGFyYW1ldGVy
LiBUaGUgZ29hbCBpcyBub3cgdG8gdXNlIGEgbWV0aG9kIHdoZX JlIGFkZHJlc3MgcHJlZGljdGlv
biB3b3VsZCBoZWxwLCAKbGlrZSBpbiBhIHJldHVybi1pbnRvLW xpYmMgKFsyXSkuIEluZGVlZCB1
c2luZyBhIHJldHVybi1pbnRvLWxpYmMgaW1wbGllcyB0aGF0IA p5b3UgZ3Vlc3MgdGhlIGFkZHJl
c3NlcyB5b3UgbmVlZCwgc28gaXQncyBmYXIgbGVzcyByYW5kb2 0uCgpXZSdsbCBoYXZlIHRvIGFw
cHJvcHJpYXRlbHkgcHJlcGFyZSB0aGUgc3RhY2sgaW4gb3JkZX IgZm9yIG91ciByZXR1cm4taW50
by1saWJjIAp0cmljayB0byBzdWNjZWVkLiBMZXQncyB0YWtlIG EgY2xvc2VyIGxvb2sgdG8gdGhl
IGNvcHkoKSBmdW5jdGlvbi4gVGhlIHBvaW50ZXIgCnRvIHRoZS BzdHJpbmcgdG8gY29weSBpcyB0
aGUgb25lIGFuZCBvbmx5IHBhcmFtZXRlciBwYXNzZWQgdG8gdG hlIGZ1bmN0aW9uLCBpdCAKaXMg
bG9jYXRlZCBqdXN0IGFmdGVyIEVJUCBvbiB0aGUgc3RhY2suCg pUaGlzIGZhY3QgaXMgaW1wb3J0
YW50LCBpdCBpcyBvdXIgcHJvYmxlbToKCklmIHRoZSBhcmd1bW VudCB3aGljaCBwb3RlbnRpYWxs
eSBjcmVhdGVzIHRoZSBvdmVyZmxvdyAtIGEgc3RyaW5nIHRvby Bsb25nIC0gaXMKb25lIG9mIHRo
ZSBmaXJzdCBwYXNzZWQgdG8gdGhlIGZ1bmN0aW9uLCBpdCBpcy BpbXBvc3NpYmxlIGZvciB1cyB0
byBzZXQgaW4gdGhlIApzdGFjayBhcmJpdHJhcnkgdmFsdWVzIH dlIG5lZWQgdG8gcGVyZm9ybSBh
IGNvbW1vbiByZXR1cm4taW50by1saWJjOiBzbWFzaGluZyAKdG hlIHBvaW50ZXIgdXNlZCBmb3Ig
dGhlIGNvcHkgaXMgZ29pbmcgdG8gY2hhbmdlIHRoZSBzb3VyY2 Ugb2YgdGhlIGNvcHkgdG8gCmFu
b3RoZXIgbG9jYXRpb24gYW5kIGZpbGwgdGhlIHBvaW50ZXIgd2 l0aCByYW5kb20gZGF0YSEgRm9y
IGVhY2ggYnl0ZSBjb3BpZWQgCm9udG8gdGhlIHBvaW50ZXIsIH RoZSByZWZlcmVuY2UgdG8geW91
ciBkYXRhIHdpbGwgY2hhbmdlLCBhbmQgdGhlIGNvcHkgd2lsbC BlbmQgCm9uIGEgbnVsbCBieXRl
IG9yIGEgU0lHU0VHVi4gQW4gdXN1YWwgcmV0dXJuLWludG8tbG liYyB3aWxsIG5ldmVyIHN1Y2Nl
ZWQgaGVyZS4KCgoyLiBTb2x1dGlvbjogcmV0LW9udG8tcmV0Ci 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0KCkxldCdzIGxvb2sgYXQgd2hhdCB0aGUgc3RhY2sgbG 9va3MgbGlrZSBiZWZvcmUgd2Ug
Y2FsbCBjb3B5KCk6CgotLS0lPC0tLS0tLS0tLS0tLS0tJTwtLS 0tLS0tLS0tLS0lPC0tLS0tLS0t
LS0tLS0tLS0tLS0tLSU8LS0tLS0tLS0lPC0tLS0tLS0tLS0tLQ oKdG9wCnwgICAgLi4uICAgIHwK
Ky0tLS0tLS0tLS0tKwp8ICAgIHN0ciAgICB8CistLS0tLS0tLS 0tLSsKfCAgICBFSVAgICAgfAor
LS0tLS0tLS0tLS0rCnwJICAgIHwKfCAgYnVmWzI1Nl0gfAp8CS AgICB8CistLS0tLS0tLS0tLSsK
fCAgICAuLi4gICAgfApib3R0b20KCi0tLS0tLS0tLS0tJTwtLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tJTwtLS0tLS0tLS0tLSU8LS0tLS0tLS0lPC0tLS0tLS 0tJTwtLS0tCgpJZiB3ZSBzbWFz
aCBFSVAgd2l0aCB0aGUgYWRkcmVzcyBvZiBhIFJFVCBpbnN0cn VjdGlvbiwgYW5vdGhlciByZXR1
cm4gd2lsbCBiZSAKcGVyZm9ybWVkLiBUaGlzIHNlY29uZCByZX R1cm4gd2lsbCB1c2UgdGhlIGFk
ZHJlc3MgaW4gRVNQIChzdHIpLCBhbmQgcHV0IGl0IAppbnRvIE VJUC4gVGhlIGV4ZWN1dGlvbiBv
ZiB0aGUgcHJvZ3JhbSBnb2VzIG9uLCB1c2luZyB0aGUgY29udG VudCBvZiBvdXIgc3RyaW5nLAp3
aGljaCBjb3VsZCBjb250YWluIGEgc2hlbGxjb2RlLgoKQmVjYX VzZSB0aGUgcHJvZ3JhbSBleGVj
dXRpb24gY29udGludWVzIGF0IHRoZSBiZWdpbm5pbmcgb2Ygb3 VyIHN0cmluZywgd2UgY2FuIAp1
c2UgdGhlIDI1NiBieXRlcyBpbiB0aGUgYnVmZmVyIGZvciBvdX Igc2hlbGxjb2RlLCB3aXRob3V0
IGhhdmluZyB0byB1c2UgZHVtbXkgCmluc3RydWN0aW9ucyBzdW NoIGFzIE5PUCwgYnV0IHdlIGNh
biBvbmx5IGRvIHRoYXQgaWYgdGhlIHN0YWNrIGlzIGV4ZWN1dG FibGUuCgpXZSBvbmx5IG5lZWQg
b25lIFJFVCBoZXJlIGJlY2F1c2Ugb3VyIGFyZ3VtZW50IGlzIH RoZSBmaXJzdCBvbiB0aGUgc3Rh
Y2suIElmIAp0aGVyZSBhcmUgc2V2ZXJhbCBhcmd1bWVudHMsIH dlIGNhbiB3cml0ZSBzZXZlcmFs
IFJFVCBpbnN0cnVjdGlvbidzIGFkZHJlc3NlcyBpbgphIHJvdy BvbiB0aGUgc3RhY2sgaW4gb3Jk
ZXIgdG8gZXF1YWxpemUgRUlQIGFuZCBzdHIgIQoKVGhlIG1haW 4gZGlmZmljdWx0eSBpcyB0byBm
aW5kIHRoZSBhZGRyZXNzIG9mIGEgUkVUIGluc3RydWN0aW9uLC B3aGljaCBpcyBub3QgCnRoYXQg
bXVjaCBvZiBhIGNoYWxsZW5nZSwgZ2l2ZW4gdGhlIG51bWJlci BvZiBmdW5jdGlvbnMgaW4gdGhl
IGxpYmMuIFdlJ2xsIGFwcGx5CmNsYXNzaWMgcHJlZGljdGlvbi BtZXRob2RzIGlmIHdlIGNhbid0
IHVzZSB0aGUgbG9jYWwgc3lzdGVtJ3MgcHJvY2ZzLi4uCgpLZX JuZWwgZGV2ZWxvcGVycyBoYXZl
IGJlZW4ga2luZCBlbm91Z2ggdG8gYWRkIHN1cHBvcnQgZm9yIH ZpcnR1YWwgc3lzdGVtIGNhbGxz
IAppbiBMaW51eCAyLjYuIFRoYXQgbWVhbnMgdGhhdCB1c2VybG FuZCByb3V0aW5lcyBub3cgaGF2
ZSB0aGUgYWJpbGl0eSB0byBkaXJlY3RseQp1c2UgY29kZSBtYX BwZWQgaW50byBrZXJuZWwgc3Bh
Y2UsIHdpdGhvdXQgdGhlIGV4cGVuc2Ugb2YgdXNpbmcgYSBzeX N0ZW0gY2FsbCAKKGFuZCB0aGUg
YXNzb2NpYXRlZCBpbnRlcnJ1cHQgYW5kIENQVSBjeWNsZXMpLi BGb3IgaW5zdGFuY2UgZ2V0dGlt
ZW9mZGF5KDIpIG5vdyAKaGFzIGl0cyB2c3lzY2FsbCBlcXVpdm FsZW50LgoKVnN5c2NhbGxzIGNv
ZGVzIGFyZSB3cml0dGVuIGluIGFzc2VtYmxlciBhbmQgYXJlIH N0b3JlZCBpbiBhcmNoL2kzODYv
a2VybmVsCihsb29rIGF0IGFyY2gveDg2XzY0L2tlcm5lbCBmb3 IgeDg2IDY0Yml0cyBwcm9jZXNz
b3JzKS4gQXMgY29kZSBpcyB3cml0dGVuIGluIAphc3NlbWJsZX IsIGl0IGdpdmVzIGEgcmVhbCBs
b3cgcHJvYmFiaWxpdHkgZm9yIGNvZGUgdG8gdmFyeSBmcm9tIG Egc3lzdGVtIHRvIAphbm90aGVy
LiBDb2RlIGlzIGxvYWRlZCBpbnRvIG1lbW9yeSBhcyBhIGxpYn JhcnkgKHNoYXJlZCBvYmplY3Qp
LiBBdCBzdGFydCBvZiAKdnN5c2NhbGxzIHBhZ2VzIHlvdSBjYW 4gZmluZCB0aGUgRUxGIHNpZ25h
dHVyZSBhbmQgb3RoZXIgRUxGIHNlZ21lbnRzIGFyZSAKbG9hZG VkIGludG8gdGhlIGFkZHJlc3Mg
c3BhY2UuIEhlcmUgaXMgYSBtZW1vcnkgbWFwIGZpbGUgZnJvbS BhIGNhdCBwcm9jZXNzIDoKCi0t
LSU8LS0tLS0tLS0tLS0tLS0lPC0tLS0tLS0tLS0tLSU8LS0tLS 0tLS0tLS0tLS0tLS0tLS0tJTwt
LS0tLS0tLSU8LS0tLS0tLS0tLS0tCgotLT4gY2F0IC9wcm9jL3 NlbGYvbWFwcwowODA0ODAwMC0w
ODA0YzAwMCByLXhwIDAwMDAwMDAwIDAzOjAxIDU4OTg4OCAgIC AgL2Jpbi9jYXQKMDgwNGMwMDAt
MDgwNGQwMDAgcnctcCAwMDAwMzAwMCAwMzowMSA1ODk4ODggIC AgIC9iaW4vY2F0CjA4MDRkMDAw
LTA4MDZlMDAwIHJ3LXAgMDgwNGQwMDAgMDA6MDAgMAo0MDAwMD AwMC00MDAxNjAwMCByLXhwIDAw
MDAwMDAwIDAzOjAxIDY3MTc3NiAgICAgL2xpYi9sZC0yLjMuMi 5zbwo0MDAxNjAwMC00MDAxNzAw
MCBydy1wIDAwMDE1MDAwIDAzOjAxIDY3MTc3NiAgICAgL2xpYi 9sZC0yLjMuMi5zbwo0MDAxNzAw
MC00MDAxODAwMCBydy1wIDQwMDE3MDAwIDAwOjAwIDAKNDAwMj IwMDAtNDAxNGIwMDAgci14cCAw
MDAwMDAwMCAwMzowMSAyMDQ4MDQ5ICAgIC9saWIvdGxzL2xpYm MtMi4zLjIuc28KNDAxNGIwMDAt
NDAxNTMwMDAgcnctcCAwMDEyOTAwMCAwMzowMSAyMDQ4MDQ5IC AgIC9saWIvdGxzL2xpYmMtMi4z
LjIuc28KNDAxNTMwMDAtNDAxNTcwMDAgcnctcCA0MDE1MzAwMC AwMDowMCAwCmJmZmZmMDAwLWMw
MDAwMDAwIHJ3LXAgYmZmZmYwMDAgMDA6MDAgMApmZmZmZTAwMC 1mZmZmZjAwMCAtLS1wIDAwMDAw
MDAwIDAwOjAwIDAKCi0tLS0tLS0tLS0tJTwtLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tJTwt
LS0tLS0tLS0tLSU8LS0tLS0tLS0lPC0tLS0tLS0tJTwtLS0tCg pUaGUgdnN5c2NhbGxzIChhbmQg
YSBwb3RlbnRpYWwgUkVUIGluc3RydWN0aW9uKSB3ZSdyZSBsb2 9raW5nIGZvciBhcmUgbWFwcGVk
IGF0IAoweGZmZmZlMDAwLiBJZiB3ZSBhdHRhY2ggZ2RiIHRvIH RoZSBydW5uaW5nIHByb2Nlc3Mg
d2UgY2FuIGRpc2Fzc2VtYmxlIHRoZSAKbWVtb3J5IHJlZ2lvbj oKCgkoZ2RiKSB4L2kgMHhmZmZm
ZTQxMwoJMHhmZmZmZTQxMyA8X19rZXJuZWxfdnN5c2NhbGwrMT k+OiAgICAgIHJldAoKV2UndmUg
dGVzdGVkIHRoaXMgb24gbnVtZXJvdXMgMi42Lngga2VybmVsIH ZlcnNpb25zIGFuZCBmb3VuZCB0
aGF0IHRoZXJlIGlzIGEKUkVUIGF0IHRoaXMgYWRkcmVzcyBldm VyeSB0aW1lLiBBbiBleHBsb2l0
IGNvdWxkIGJlIGEgbG90IG1vcmUgZWZmZWN0aXZlIHVzaW5nCn N1Y2gga2luZCBvZiB0cmljay4g
VGhpcyBpcyB3aHkgd2UgYXJlIGFib3V0IHRvIHN0dWR5Li4uCg oKMy4gQSBuZXcgcHJvYmxlbQot
LS0tLS0tLS0tLS0tLS0tCgpBcyBzZWVuIHByZXZpb3VzbHkgaW 4gb3VyIGV4YW1wbGUsIG91ciBj
b2RlIGRvZXNuJ3QgYWRkIGFueSBudWxsIGJ5dGUgYXQgdGhlIG VuZApvZiB0aGUgY29weS4gSW4g
dGhlIGNhc2UgaXQgZG9lcywgd2Ugd291bGQgaGFyZGx5IGJlIG FibGUgdG8gbWFrZSBhIHF1aWNr
IGNvbW1vbgpyZXR1cm4taW50by1zdGFjayA6IGl0IHdvdWxkIH Rha2UgdXMgYSBsb3Qgb2YgdHJp
ZXMgdG8gc3VjY2VlZC4gV2UgY291bGQgdXNlIAp2c3lzY2FsbH MgdG8gZGVjcmVhc2UgZHJhc3Rp
Y2FsbHkgdGhlIG51bWJlciBvZiBmYWlsdXJlcy4KCkFzIHRoaW 5ncyBtYXkgYmVjb21lIGEgYml0
IGNvbmZ1c2luZyBub3cgd2Ugd2lsbCBzbG93bHkgZ28gZGVlcG VyIGludG8gdGhlIApwcm9ibGVt
LiBJbiBvcmRlciB0byB1bmRlcnN0YW5kIGxldCdzIGxvb2sgYX QgYSBjb21tb24gc3RhY2sgZnJh
bWUgYWdhaW4uCgotLS0lPC0tLS0tLS0tLS0tLS0tJTwtLS0tLS 0tLS0tLS0lPC0tLS0tLS0tLS0t
LS0tLS0tLS0tLSU8LS0tLS0tLS0lPC0tLS0tLS0tLS0tLQoKaG lnaCBhZGRyZXNzZXMKfCAgICAu
Li4gICAgfAorLS0tLS0tLS0tLS0rCnwgICAqc3RyICAgIHwKKy 0tLS0tLS0tLS0tKwp8ICAgIEVJ
UCAgICB8CistLS0tLS0tLS0tLSsKfCAgICBFQlAgICAgfAorLS 0tLS0tLS0tLS0rCnwJICAgIHwK
fCAgYnVmWzI1Nl0gfAp8CSAgICB8CistLS0tLS0tLS0tLSsKfC AgICAuLi4gICAgfApsb3cgYWRk
cmVzc2VzCgotLS0tLS0tLS0tLSU8LS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLSU8LS0tLS0t
LS0tLS0lPC0tLS0tLS0tJTwtLS0tLS0tLSU8LS0tLQoKUmVtZW 1iZXIgaG93IGl0IGdvZXMgb24u
IEZpcnN0IHRoZXJlIGlzIHRoZSBjb3B5IG9mIHN0ciB0byBidW YuIE5vdyB3ZSBjb25zaWRlcgp0
aGF0IGEgbnVsbCBieXRlIHdyaXRlIG9jY3VycyBhdCBlbmQgb2 YgY29weTogaG93IGNvdWxkIGFu
IGVmZmVjdGl2ZSBhdHRhY2sgCm9jY3VyID8gV2l0aCBhbiB1c3 VhbCBicnV0ZSBmb3JjZSA/CgoK
NC4gU29sdXRpb246IHJldC1vbnRvLWptcAotLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tCgpXZSBr
bm93IHRoYXQgYW55IGZ1bmN0aW9uLCBlc3BlY2lhbGx5IG91ci B2dWxuZXJhYmxlIGZ1bmN0aW9u
LCBpcyBmaXJzdCBjYWxsZWQKYnkgYSBjYWxsaW5nIGZ1bmN0aW 9uIChlLmcuIG1haW4oKSkuIFNv
IG91ciBzdGFjayBmcmFtZSBsb29rcyBsaWtlIHRoaXM6CgotLS 0lPC0tLS0tLS0tLS0tLS0tJTwt
LS0tLS0tLS0tLS0lPC0tLS0tLS0tLS0tLS0tLS0tLS0tLSU8LS 0tLS0tLS0lPC0tLS0tLS0tLS0t
LQoKaGlnaCBhZGRyZXNzZXMKfCAgICAuLi4gICAgfAorLS0tLS 0tLS0tLS0rCnwgICAgRUlQICAg
IHwKKy0tLS0tLS0tLS0tKwp8ICAgIEVCUCAgICB8IDwtLSBIZX JlIGlzIEVCUCBmcm9tIGNhbGxp
bmcgZnVuY3Rpb24KKy0tLS0tLS0tLS0tKyAweGJmZmZlZWQwCn wJICAgIHwKfCAgICAuLi4gICAg
fAp8CSAgICB8CistLS0tLS0tLS0tLSsKfCAgICBFSVAgICAgfC AKKy0tLS0tLS0tLS0tKwp8ICAg
IEVCUCAgICB8IDwtLSBIZXJlIGlzIEVCUCBmcm9tIG91ciB2dW xuZXJhYmxlIGZ1bmN0aW9uICg9
IDB4YmZmZmVlZDApCistLS0tLS0tLS0tLSsgMHhiZmZmZWU5MA p8CSAgICB8CnwgIGJ1ZlsyNTZd
IHwKfAkgICAgfAorLS0tLS0tLS0tLS0rCnwgICAgLi4uICAgIH wKbG93IGFkZHJlc3NlcwoKLS0t
LS0tLS0tLS0lPC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0lPC0tLS0tLS0tLS0tJTwtLS0t
LS0tLSU8LS0tLS0tLS0lPC0tLS0KCkVCUCBmcm9tIG91ciB2dW xuZXJhYmxlIGZ1bmN0aW9uIGlz
IGEgc3RhY2sgYWRkcmVzcy4gVGhpcyBhZGRyZXNzIGlzIHBvaW 50aW5nIHRvCnRoZSBiYXNlIG9m
IHRoZSBjYWxsaW5nIGZ1bmN0aW9uJ3Mgc3RhY2stZnJhbWUgKG l0IHBvaW50cyBvbiBFQlAgaW4g
dGhhdCBzdGFjay0KZnJhbWUpLiBUaGF0IG1lYW5zLCBhcyB0aG Ugc3RhY2sgaXMgZ3Jvd2luZyB0
byBsb3cgYWRkcmVzc2VzLCB0aGF0IHRoaXMgcG9pbnRlciAKdG 8gcHJldmlvdXMgc3RhY2sgZnJh
bWUgaGFzIGEgdmFsdWUgd2hpY2ggaXMgZ3JlYXRlciB0aGFuIH RoZSBhZGRyZXNzIG9mIApidWZb
MjU2XS4KCkluIG90aGVyIHdvcmRzIGlmIHlvdSBvdmVyd3JpdG UgdGhlIHN0b3JlZCBFQlAgdmFs
dWUgaW4gdnVsbmVyYWJsZSBmdW5jdGlvbgpzdGFjay1mcmFtZS B3aXRoIGEgbnVsbCBieXRlIHlv
dSB3b3VsZCBkZWNyZWFzZSBpdCBhbmQgdGhlbiBpdCBtYXkgcH JvYmFibHkgCnBvaW50IGludG8g
dGhlIGJ1ZmZlci4KCkluZGVlZCwgaW4gb3VyIGV4YW1wbGUsID B4YmZmZmVlZDAgaXMgdGhlIHNh
dmVkIEVCUCB2YWx1ZSBpbiBvdXIgdnVsbmVyYWJsZQpmdW5jdG lvbiBzdGFjay1mcmFtZS4gQXMg
dGhlIGNvcHkgd2lsbCBvdmVyd3JpdGUgdGhlIGFkZHJlc3Mgd2 l0aCBhIG51bGwgYnl0ZSwKYW5k
IGNvbnNpZGVyaW5nIHdlIGFyZSBvbiBsaXR0bGUtZW5kaWFuIG hhcmR3YXJlLCBzYXZlZCBFQlAg
YmVjb21lcyAweGJmZmZlZTAwLgoKTm93IGxvb2sgYXQgYSBmdW 5jdGlvbidzIGNvbW1vbiBlcGls
b2c6Cgltb3YJJWVicCwgJWVzcAoJcG9wCSVlYnAKCXJldAoKV2 hlbiBpdCB3aWxsIGJlIGZpcnN0
IGV4ZWN1dGVkIGluIG91ciB2dWxuZXJhYmxlIGZ1bmN0aW9uIG 9ubHkgRUJQIHJlZ2lzdGVyIHdp
bGwKYmUgYWZmZWN0ZWQgYnkgb3VyIHBvaXNvbmluZy4gQXQgdG hlIG5leHQgZXBpbG9nIChyZXR1
cm4gZnJvbSBjYWxsaW5nIGZ1bmN0aW9uKQpFU1Agd2lsbCBiZS BlcXVhbCB0byB0aGUgZXJyb25l
b3VzIEVCUCByZWdpc3Rlci4gSW4gb3RoZXIgd29yZHMgdGhlIE VCUCB2YWx1ZSAKd2UgbW9kaWZp
ZWQgaW4gc3RhY2sgaGFzIGJlZW4gdHJhbnNmZXJlZCwgZHVlIH RvIHR3byBzdWNjZXNzaXZlIGVw
aWxvZ3MsIGluIHRoZSAKcmVnaXN0ZXIgRVNQLiBFU1Agbm93IH BvaW50cyB0byBzb21ld2hlcmUg
b24gb3VyIGJ1ZmZlci4uLiBGaW5hbGx5IGEgUE9QIG9jY3Vycy wKZm9sbG93ZWQgYnkgYSBSRVQu
CgpXZSBjb3VsZCBoYXZlIGEgbGluZWFyIHJlcHJlc2VudGF0aW 9uIG9mIG91ciBidWZbMjU2XSBl
eGFtcGxlOgoKMCAgICAgICAgICAgICAgMTI4ICAgICAgICAgIC AxMzIgICAgICAgICAgICAyNTYK
IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX1 9fX19fX19fCnwgICAgICAgICAg
ICAgICB8ICAgICAgICAgICAgIHwJICAgICAgICAgICAgIHwKfC BBQUEgLi4uLi4gQUFBQXwgYWRk
ciB0byBqbXAgfCBTaGVsbGNvZGUuLi4gfAp8X19fX19fX19fX1 9fX19ffF9fX19fX19fX19fX198
X19fX19fX19fX19fX198CiA8LS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tPgoJICAgIAkyNTYgYnl0ZXMKCkFzIG91ciBidWZmZXIgaX MgbGFyZ2UgZW5vdWdoLCB3ZSBh
cmUgc3VyZSBFQlAgaXMgbm93IHBvaW50aW5nIHRvIGl0LCBidX Qgd2UKZG9uJ3Qga25vdyBleGFj
dGx5IHdoZXJlLiBBbnl3YXkgd2hhdCB3ZSBtdXN0IGRvIGlzIH RvIGhhdmUgZm91ciBkdW1teSBi
eXRlcyAKZm9sbG93ZWQgYnkgYW4gYWRkcmVzcyBwb2ludGluZy B0byBhLi4uICdqbXAgKiVlc3An
IGluc3RydWN0aW9uICEgVGFrZSBhIGxvb2sKYXQ6CgooZ2RiKS B4L2kgMHhmZmZmZTZjYgoweGZm
ZmZlNmNiOiAgICAgam1wICAgIColZXNwCgpDb25zaWRlcmluZy B0aGUgbGluZWFyIHNjaGVtYSBv
ZiBvdXIgYnVmZmVyLCBpZiB3ZSBudWxsaWZ5IHRoZSBmaXJzdC BieXRlIG9mIEVCUAphbmQgaWYg
dGhlbiBpdCBwcmVjaXNlbHkgcG9pbnRzIHRvIG9mZnNldCAxMj Qgb2Ygb3VyIGJ1ZmZlciwgc28g
b24gYW5vdGhlciAKc3VjY2Vzc2l2ZSBlcGlsb2cgaXQgd2lsbC B0YWtlIHRoZSBmb3VyIGR1bW15
IGJ5dGVzICJBQUFBIiwgd2lsbCBzdG9yZSB0aGVtIGluIApFQl AsIGFuZCB3aWxsIHJldHVybiB3
aXRoIG91ciBhZGRyZXNzIHRvICdqbXAgKiVlc3AnLiBUaGVuIG V4ZWN1dGlvbiBzaG91bGQgCmNv
bnRpbnVlIG9uIG91ciBzaGVsbGNvZGUgYW5kIHRoZSBnYW1lIG lzIG92ZXIuCgpUaGUgd2Vha25l
c3Mgb2Ygc3VjaCBhIG1ldGhvZCBpcyB0aGF0IGl0IG5lZWRzIG EgZmV3IHRyaWVzIHRvIG9idGFp
biBhIGJ1ZmZlciAKd2hpY2ggbWF0Y2hlcyB0aGUgc3RhY2sgcm VxdWlyZW1lbnRzLiBCdXQgZWFj
aCBjbG91ZCBoYXMgYSBzaWx2ZXIgbGluaW5nOiB5b3UgCmNhbi B0cnkgdG8gaW5qZWN0IGR1bW15
IGJ5dGVzIGZvdXIgYnkgZm91ciBpbiB5b3VyIGJ1ZmZlci4gSW 5kZWVkIGZpcnN0IGJ5dGUgb2YK
cmVnaXN0ZXIgRUJQIGlzIG92ZXJ3cml0dGVuIHdpdGggYSBudW xsIGJ5dGUsIGFuZCBidWZmZXIn
cyBhZGRyZXNzIHNob3VsZCBiZSAKZm91ciBieXRlcyBhbGlnbm VkLiBTb2x1dGlvbiBhcmlzZXMg
aW4gYSBmZXcgY3ljbGVzLgoKCjUuIENvbmNsdXNpb246Ci0tLS 0tLS0tLS0tLS0tCgpUaGVzZSBz
aG9ydCBleGFtcGxlcyBwcm92ZSB0aGF0IExpbnV4IDIuNiB2c3 lzY2FsbHMgbWF5IGJlIHVzZWQg
YXMgcG93ZXJmdWwgCmF0dGFjayB2ZWN0b3JzIGluIGJ1ZmZlci BvdmVyZmxvd3MgZXhwbG9pdGF0
aW9ucy4KCkluIG91ciBzZWNvbmQgZXhhbXBsZSAnam1wIColZX NwJyBpcyBub3QgYSByZWFsIGlu
c3RydWN0aW9uIHdyaXR0ZW4gYnkga2VybmVsCmRldmVsb3Blcn MuIEluIGZhY3Qgd2UganVzdCB1
c2UgZHVtbXkgYnl0ZXMgaW4gc2VjdGlvbidzIGRhdGEgd2hpY2 ggYXJlIAppbnRlcnByZXRlZCBi
eSB0aGUgcHJvY2Vzc29yIGFzICdqbXAgKiVlc3AnLiBUaGlzIG 9uZSB3YXMgZm91bmQgZnJvbSBh
IHN0YW5kYXJkCmRpc2Fzc2VtYmx5IG9mIHZzeXNjYWxscyBwYW dlcyB3aXRoIGdkYi4gT3RoZXIg
Ynl0ZXMgaW4gdnN5c2NhbGxzIG1heSBiZSAKY29uc2lkZXJlZC BhcyBpbnRlcmVzdGluZyBleHBs
b2l0YWJsZSBpbnN0cnVjdGlvbnMuLi4gVGhlcmUgbWF5IGJlIG EgbG90IG9mCnZhcmlvdXMgd2F5
cyB0byBkbyB0aGUgam9iLgoKU29sdXRpb25zIDogZGlzYWJsaW 5nIHZzeXNjYWxscywgcmFuZG9t
aXphdGlvbi4uLgoKCkNyZWRpdHM6Ci0tLS0tLS0tCgpBdXRob3 JzOiBDbGFkIFN0cmlmZSAoUk9S
SVYpLCBYZHJlYW0gQmx1ZSAoUk9KSVYpLgoKTFNFIC0gRVBJVE EvRVBJVEVDSCBTeXN0ZW1zIExh
Ym9yYXRvcnkuClNZU0RSRUFNIGNvcnBvcmF0aW9uJ3MgZW5naW 5lZXJpbmcgZGVwYXJ0bWVudC4K
ClRoYW5rcyB0byA6IFBpcGFjcyAoUGFYIFRlYW0pICwgWnV6dX IgJiBUcmV2b3IgS2VuZGFsbCAo
Z3JhbW1hciBleHBlcnRzKSAKCSAgICBhbmQgKipjKiogKGV4cG VydCBvZiBzb21ldGhpbmcgeW91
IGRvbid0IHdhbnQgdG8ga25vdykKCi0tCkdyZWV0cyB0byBhbG wgZGV2ZWxvcGVycyB3aG8gY2xh
aW1lZCB0aGF0IHZzeXNjYWxsIHRhYmxlICJoYXMgbm90aGluZy B0byBkbyB3aXRoCnNlY3VyaXR5
IiEKLS0KClJlZmVyZW5jZXMgOgpbMV0gOiBQaHJhY2sgNDktMT Q6ICJTbWFzaGluZyB0aGUgc3Rh
Y2sgZm9yIGZ1biBhbmQgcHJvZml0IgpbMl0gOiBQaHJhY2sgNT gtMTA6ICJUaGUgYWR2YW5jZWQg
cmV0dXJuLWludG8tbGliKGMpIGV4cGxvaXRzOiBQYXggY2FzZS BzdHVkeSIKCkhpc3RvcnkgOiBS
T1JJViBtZXRob2Qgd2FzIGZpcnN0IGRpc2NvdmVyZWQgaW4gTW FyY2ggMjAwNSwgUk9KSVYgbWV0
aG9kIHdhcyAKaW50cm9kdWNlZCBpbiBBcHJpbC4gVGhlc2UgdH dvIGF0dGFja3Mgc2VlbSBoaXN0
b3JpY2FsbHkgdG8gYmUgdGhlIGZpcnN0IGtub3duCnB1YmxpYy BhdHRhY2tzIGludm9sdmluZyB2
c3lzY2FsbHMuIElmIHRoaXMgaXMgZXJyb25lb3VzLCBpZiB5b3 Uga25vdyBhbnkgCm90aGVyIG9y
IHdhbnQgdG8gc2hhcmUgb3BpbmlvbnMsIGZlZWwgZnJlZSB0by Bjb250YWN0IHVzLgoK
------=_Part_6119_21558147.1114027460647--