From full-disclosure Fri May 22 16:11:59 2015 From: CORE Advisories Team Date: Fri, 22 May 2015 16:11:59 +0000 To: full-disclosure Subject: [FD] [CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability Message-Id: <555F554F.4000306 () coresecurity ! com> X-MARC-Message: https://marc.info/?l=full-disclosure&m=143231137021623 MS4gQWR2aXNvcnkgSW5mb3JtYXRpb24KClRpdGxlOiBTZW5kaW8gRVNQIEluZm9ybWF0aW9uIERp c2Nsb3N1cmUgVnVsbmVyYWJpbGl0eQpBZHZpc29yeSBJRDogQ09SRS0yMDE1LTAwMTAKQWR2aXNv cnkgVVJMOiBodHRwOi8vd3d3LmNvcmVzZWN1cml0eS5jb20vYWR2aXNvcmllcy9zZW5kaW8tZXNw LWluZm9ybWF0aW9uLWRpc2Nsb3N1cmUtdnVsbmVyYWJpbGl0eQpEYXRlIHB1Ymxpc2hlZDogMjAx NS0wNS0yMgpEYXRlIG9mIGxhc3QgdXBkYXRlOiAyMDE1LTA1LTIyClZlbmRvcnMgY29udGFjdGVk OiBTZW5kaW8KUmVsZWFzZSBtb2RlOiBDb29yZGluYXRlZCByZWxlYXNlCgoKMi4gVnVsbmVyYWJp bGl0eSBJbmZvcm1hdGlvbgoKQ2xhc3M6IE9XQVNQIFRvcCBUZW4gMjAxMyBDYXRlZ29yeSBBMiAt IEJyb2tlbiBBdXRoZW50aWNhdGlvbiBhbmQgU2Vzc2lvbiBNYW5hZ2VtZW50IFtDV0UtOTMwXSwg SW5mb3JtYXRpb24gRXhwb3N1cmUgW0NXRS0yMDBdCkltcGFjdDogU2VjdXJpdHkgYnlwYXNzClJl bW90ZWx5IEV4cGxvaXRhYmxlOiBZZXMKTG9jYWxseSBFeHBsb2l0YWJsZTogTm8KQ1ZFIE5hbWU6 IENWRS0yMDE0LTA5OTksIENWRS0yMDE0LTgzOTEKCgoKMy4gVnVsbmVyYWJpbGl0eSBEZXNjcmlw dGlvbgoKU2VuZGlvIFsxXSBFU1AgKEUtbWFpbCBTZWN1cml0eSBQbGF0Zm9ybSkgaXMgYSBuZXR3 b3JrIGFwcGxpYW5jZSB3aGljaCBwcm92aWRlcyBhbnRpLXNwYW0gYW5kIGFudGktdmlydXMgc29s dXRpb25zIGZvciBlbnRlcnByaXNlcy4gVHdvIGluZm9ybWF0aW9uIGRpc2Nsb3N1cmUgaXNzdWVz IHdlcmUgZm91bmQgYWZmZWN0aW5nIHNvbWUgdmVyc2lvbnMgb2YgdGhpcyBzb2Z0d2FyZSwgYW5k IGNhbiBsZWFkIHRvIGxlYWthZ2Ugb2Ygc2Vuc2l0aXZlIGluZm9ybWF0aW9uIHN1Y2ggYXMgdXNl cidzIHNlc3Npb24gaWRlbnRpZmllcnMgYW5kL29yIHVzZXIncyBlbWFpbCBtZXNzYWdlcy4KCgo0 LiBWdWxuZXJhYmxlIFBhY2thZ2VzCgpTZW5kaW8gNiAoMTQuMTEyMC4wKQpPdGhlciBwcm9kdWN0 cyBhbmQgdmVyc2lvbnMgbWlnaHQgYmUgYWZmZWN0ZWQgdG9vLCBidXQgdGhleSB3ZXJlIG5vdCB0 ZXN0ZWQuCgoKNS4gVmVuZG9yIEluZm9ybWF0aW9uLCBTb2x1dGlvbnMgYW5kIFdvcmthcm91bmRz CgpTZW5kaW8gaW5mb3JtcyB1cyB0aGF0IFtDVkUtMjAxNC0wOTk5XSBhbmQgW0NWRS0yMDE0LTgz OTFdIGFyZSBmaXhlZCBvbiBTZW5kaW8gc29mdHdhcmUgVmVyc2lvbiA3LjIuNC4KCkZvciBbQ1ZF LTIwMTQtMDk5OV0sIHRoZSB2dWxuZXJhYmlsaXR5IG9ubHkgZXhpc3RzIGZvciBIVFRQIHdlYiBz ZXNzaW9ucyBhbmQgbm90IEhUVFBTIHdlYiBzZXNzaW9ucy4gU2VuZGlvIHJlY29tbWVuZHMgdGhh dCBjdXN0b21lcnMgd2hvIGhhdmUgbm90IHVwZ3JhZGVkIHRvIFZlcnNpb24gNy4yLjQgc2hvdWxk IGRpc2FsbG93IEhUVFAgb24gdGhlaXIgU2VuZGlvIHByb2R1Y3QgYW5kIG9ubHkgdXNlIEhUVFBT LgoKCjYuIENyZWRpdHMKClRoaXMgdnVsbmVyYWJpbGl0eSB3YXMgZGlzY292ZXJlZCBhbmQgcmVz ZWFyY2hlZCBieSBNYXJ0aW4gR2FsbG8gZnJvbSBDb3JlIFNlY3VyaXR5J3MgQ29uc3VsdGluZyBT ZXJ2aWNlcyBUZWFtLiBUaGUgcHVibGljYXRpb24gb2YgdGhpcyBhZHZpc29yeSB3YXMgY29vcmRp bmF0ZWQgYnkgSm9hcXXDrW4gUm9kcsOtZ3VleiBWYXJlbGEgZnJvbSBDb3JlIFNlY3VyaXR5J3Mg QWR2aXNvcmllcyBUZWFtLgoKCjcuIFRlY2huaWNhbCBEZXNjcmlwdGlvbiAvIFByb29mIG9mIENv bmNlcHQgQ29kZQoKNy4xLiBEaXNjbG9zdXJlIG9mIHNlc3Npb24gY29va2llIGluIFdlYiBpbnRl cmZhY2UgVVJMcwoKVGhlIFNlbmRpbyBbMV0gRVNQIFdlYiBpbnRlcmZhY2UgYXV0aGVudGljYXRl cyB1c2VycyB3aXRoIGEgc2Vzc2lvbiBjb29raWUgbmFtZWQgImpzZXNzaW9uaWQiLiBUaGUgdnVs bmVyYWJpbGl0eSBbQ1ZFLTIwMTQtMDk5OV0gaXMgY2F1c2VkIGR1ZSB0aGUgd2F5IHRoZSBTZW5k aW8gRVNQIFdlYiBpbnRlcmZhY2UgaGFuZGxlcyB0aGlzIGF1dGhlbnRpY2F0aW9uIGNvb2tpZSwg YXMgdGhlICJqc2Vzc2lvbmlkIiBjb29raWUgdmFsdWUgaXMgaW5jbHVkZWQgaW4gVVJMcyB3aGVu IG9idGFpbmluZyB0aGUgY29udGVudCBvZiBlbWFpbHMuIFRoZSBVUkxzIHVzZWQgYnkgdGhlIGFw cGxpY2F0aW9uIGZvbGxvdyB0aGlzIGZvcm1hdDoKCiAKICAgICAgaHR0cDovLzxFU1Atd2ViLWlu dGVyZmFjZS1kb21haW4+OjxFU1Atd2ViLWludGVyZmFjZS1wb3J0Pi9zZW5kaW8vaWNlL2NtZC9t c2cvYm9keTtqc2Vzc2lvbmlkPTxzZXNzaW9uLWlkZW50aWZpZXItdmFsdWU+P2lkPTxtZXNzYWdl LWlkPgogICAgICAgICAKVGhpcyBjYXVzZXMgdGhlIGFwcGxpY2F0aW9uIHRvIGRpc2Nsb3NlIHRo ZSBzZXNzaW9uIGlkZW50aWZpZXIgdmFsdWUsIGFsbG93aW5nIGF0dGFja2VycyB0byBwZXJmb3Jt IHNlc3Npb24gaGlqYWNraW5nLiBBbiBhdHRhY2tlciBtaWdodCBwZXJmb3JtIHRoaXMga2luZCBv ZiBhdHRhY2sgYnkgc2VuZGluZyBhbiBlbWFpbCBtZXNzYWdlIGNvbnRhaW5pbmcgbGlua3Mgb3Ig ZW1iZWRkZWQgaW1hZ2UgSFRNTCB0YWdzIHBvaW50aW5nIHRvIGEgY29udHJvbGxlZCB3ZWIgc2l0 ZSwgYW5kIHRoZW4gYWNjZXNzaW5nIHRoZSB2aWN0aW0ncyBzZXNzaW9uIGNvb2tpZXMgdGhyb3Vn aCB0aGUgIlJlZmVycmVyIiBIVFRQIGhlYWRlci4gQWNjZXNzaW5nIHRoaXMgYXV0aGVudGljYXRp b24gY29va2llIG1pZ2h0IGFsbG93IGFuIGF0dGFja2VyIHRvIGhpamFjayBhIHZpY3RpbSdzIHNl c3Npb24gYW5kIG9idGFpbiBhY2Nlc3MgdG8gZW1haWwgbWVzc2FnZXMgb3IgcGVyZm9ybSBhY3Rp b25zIG9uIGJlaGFsZiBvZiB0aGUgdmljdGltLgoKNy4yLiBSZXNwb25zZSBtaXh1cCBpbiBXZWIg aW50ZXJmYWNlCgpUaGUgdnVsbmVyYWJpbGl0eSBbQ1ZFLTIwMTQtODM5MV0gaXMgY2F1c2VkIGJ5 IGFuIGltcHJvcGVyIGhhbmRsaW5nIG9mIHVzZXJzJyBzZXNzaW9ucyBieSB0aGUgV2ViIGludGVy ZmFjZS4gVW5kZXIgY2VydGFpbiBjb25kaXRpb25zLCB0aGlzIGNvdWxkIGxlYWQgdG8gdGhlIHNl cnZlciBkaXNjbG9zaW5nIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiB0aGF0IHdhcyBpbnRlbmRlZCBm b3IgYSBkaWZmZXJlbnQgdXNlci4gVGhpcyBpbmZvcm1hdGlvbiBpbmNsdWRlcywgZm9yIGluc3Rh bmNlLCBvdGhlciB1c2Vycycgc2Vzc2lvbiBpZGVudGlmaWVycywgZW1haWwgbWVzc2FnZSBpZGVu dGlmaWVycyBvciBlbWFpbCBtZXNzYWdlIHN1YmplY3RzLiBJbiBvcmRlciB0byB0cmlnZ2VyIHRo aXMgdnVsbmVyYWJpbGl0eSwgcmVxdWVzdHMgc2hvdWxkIGJlIGF1dGhlbnRpY2F0ZWQuCgpUaGUg Zm9sbG93aW5nIFB5dGhvbiBzY3JpcHQgY2FuIGJlIHVzZWQgdG8gdHJpZ2dlciB0aGlzIHZ1bG5l cmFiaWxpdHkgdW5kZXIgY2VydGFpbiBjaXJjdW1zdGFuY2VzOgoKIAppbXBvcnQgcmVxdWVzdHMK CmRvbWFpbiA9ICJ0YXJnZXQuZG9tYWluLmNvbSIgICAgICAgICAgICAgICAgICAgICAjIFRoZSB0 YXJnZXQgZG9tYWluCnBvcnQgPSA4ODg4ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAjIFRoZSB0YXJnZXQgcG9ydApqc2Vzc2lvbmlkID0gIlhYWFhYWFhYWFhYWFhYWFhYWFhY WFhYWFhYWFhYWFhYIiAgIyBBIHZhbGlkIGpzZXNzaW9uaWQKbnVtID0gMTAwMDAwICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICMgTm8gb2YgcmVxdWVzdCB0byBtYWtlCm1zZ2lk ID0gOTk5OTk5OSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjIEEgdmFsaWQgbWVz c2FnZSBpZCB0byBiYXNlbGluZSB0aGUgcmVxdWVzdHMKCnVybCA9ICJodHRwOi8vJXM6JWQvc2Vu ZGlvL2ljZS9jbWQvbXNnL2JvZHk7anNlc3Npb25pZD0lcyIgJSAoZG9tYWluLCBwb3J0LCBqc2Vz c2lvbmlkKQoKCmRlZiBtYWtlX3JlcXVlc3QoaWQpOgogICAgcGFyYW1zID0geyJpZCI6IHN0cihp ZCl9CiAgICBoZWFkZXJzID0geyJDb29raWUiOiAiSlNFU1NJT05JRD0lcyIgJSBqc2Vzc2lvbmlk fQogICAgcmV0dXJuIHJlcXVlc3RzLmdldCh1cmwsIHBhcmFtcz1wYXJhbXMsIGhlYWRlcnM9aGVh ZGVycykKCgpwcmludCAiWypdIFJlYWNoaW5nIHRoZSB0YXJnZXQgdG8gZGVmaW5lIGJhc2VsaW5l IgpyID0gbWFrZV9yZXF1ZXN0KG1zZ2lkKQpiYXNlbGluZV9sZW5ndGggPSByLmhlYWRlcnNbImNv bnRlbnQtbGVuZ3RoIl0KcHJpbnQgIlsqXSBEZWZpbmVkIGJhc2VsaW5lOiAlZCBieXRlcyIgJSBi YXNlbGluZV9sZW5ndGgKCmZvciBpZCBpbiByYW5nZSgwLCBudW0pOgogICAgciA9IG1ha2VfcmVx dWVzdChtc2dpZCkKICAgIHJsZW5ndGggPSBpbnQoci5oZWFkZXJzWyJjb250ZW50LWxlbmd0aCJd KQogICAgaWYgci5zdGF0dXNfY29kZSA9PSAyMDAgYW5kIHJsZW5ndGggIT0gYmFzZWxpbmVfbGVu Z3RoOgogICAgICAgIHByaW50ICJcdCIsIHIuc3RhdHVzX2NvZGUsIHJsZW5ndGgsIHIudGV4dAog ICAgZWxzZToKICAgICAgICBwcmludCAiXHQiLCByLnN0YXR1c19jb2RlLCBybGVuZ3RoCiAKCgo4 LiBSZXBvcnQgVGltZWxpbmUKCjIwMTUtMDMtMjY6IENvcmUgU2VjdXJpdHkgc2VudCBhbiBpbml0 aWFsIG5vdGlmaWNhdGlvbiB0byBTZW5kaW8gaW5mb3JtaW5nIHRoZW0gdGhhdCBtdWx0aXBsZSB2 dWxuZXJhYmlsaXRpZXMgd2VyZSBmb3VuZCBpbiBvbmUgb2YgdGhlaXIgcHJvZHVjdHMsIGFuZCBy ZXF1ZXN0ZWQgdGhlaXIgUEdQIGtleXMgaW4gb3JkZXIgdG8gc3RhcnQgYW4gZW5jcnlwdGVkIGNv bW11bmljYXRpb24uCjIwMTUtMDMtMjc6IFNlbmRpbyByZXBsaWVkIHRoYXQgdGhleSB3b3VsZCBu b3QgYmUgYWJsZSB0byB1c2UgUEdQIGtleXMsIGJ1dCBzdGF0ZWQgdGhhdCB0aGVpciBJbi9vdXQg U01UUCBnYXRld2F5IHVzZXMgVExTLCBzbyB0aGF0IHNob3VsZCBzdWZmaWNlLiBUaGV5IGRldGFp bGVkIHRoYXQgdGhleSB3ZXJlIHdvcmtpbmcgb24gYSBmaXggZm9yIHRoZSAiQ1NfU0VORElPX0pT RVNTSU9OSURfRElTQ0xPU1VSRSIgdnVsbmVyYWJpbGl0eSBhbmQgZXN0aW1hdGVkIGl0IHdvdWxk IGJlIHJlbGVhc2VkIGJ5IHRoZSBlbmQgb2YgQXByaWwsIDIwMTUuIFRoZXkgcmVxdWVzdGVkIGFk ZGl0aW9uYWwgdGVjaG5pY2FsIGRldGFpbHMgZm9yIHRoZSAiQ1NfU0VORElPX0lORk9fTEVBSyIg dnVsbmVyYWJpbGl0eS4KMjAxNS0wMy0zMDogQ29yZSBTZWN1cml0eSBpbmZvcm1lZCB0aGF0IHVu ZGVyc3Rvb2QgdGhhdCBTZW5kaW8gbWF5IG5vdCBiZSBhYmxlIHRvIHVzZSBQR1Aga2V5cywgYnV0 IENvcmUgZG9lc24ndCBjb25zaWRlciB0aGUgdXNlIG9mIFRMUyBhcyBhIHJlcGxhY2VtZW50IGZv ciBQR1AuIENvcmUgU2VjdXJpdHkgcmVxdWVzdGVkIHRvIHJlY2VpdmUgY29uZmlybWF0aW9uIGZy b20gU2VuZGlvIGluIGNhc2UgdGhleSB3YW50ZWQgdG8ga2VlcCB0aGUgY29tbXVuaWNhdGlvbnMg dW5lbmNyeXB0ZWQgd2l0aCBQR1AgaW4gb3JkZXIgdG8gc2VuZCB0aGVtIGEgZHJhZnQgdmVyc2lv biBvZiB0aGUgYWR2aXNvcnkuCjIwMTUtMDMtMzA6IFNlbmRpbyBjb25maXJtZWQgdGhhdCB0aGUg Y29tbXVuaWNhdGlvbiBjYW4gcmVtYWluICJhcyBpcyIgd2l0aG91dCBQR1AuIFRoZXkgd2lsbCBp bmZvcm0gQ29yZSBvbmNlIHRoZXkgaGF2ZSBhIHNwZWNpZmljIGRhdGUgZm9yIHB1Ymxpc2hpbmcg dGhlIGZpeC4gU2VuZGlvIHJlcXVlc3RlZCBhIFBvQyBmb3IgdGhlICJDU19TRU5ESU9fSU5GT19M RUFLIHZ1bG5lcmFiaWxpdHkiLgoyMDE1LTAzLTMxOiBDb3JlIFNlY3VyaXR5IHNlbnQgYSBkcmFm dCB2ZXJzaW9uIG9mIHRoZSBhZHZpc29yeSBhbmQgUG9DIHRvIFNlbmRpby4KMjAxNS0wMy0zMTog U2VuZGlvIGNvbmZpcm1lZCByZWNlcHRpb24gb2YgdGhlIGFkdmlzb3J5IGFuZCBQb0MgYW5kIGlu Zm9ybWVkIENvcmUgdGhhdCB0aGV5IHdvdWxkIHByb3ZpZGUgYW4gdXBkYXRlIG9uIHRoZWlyIHRl c3Qgb24gQXByaWwgNi4KMjAxNS0wNC0wNjogU2VuZGlvIGluZm9ybWVkIENvcmUgdGhhdCB0aGV5 IHdlcmUgYWJsZSB0byByZXByb2R1Y2UgdGhlICJDU19TRU5ESU9fSU5GT19MRUFLIiBpc3N1ZSBh bmQgdGhhdCB3ZXJlIHN0aWxsIGFuYWx5emluZyBpdCBpbiBvcmRlciB0byBjcmVhdGUgYSBmaXgu CjIwMTUtMDQtMDc6IENvcmUgU2VjdXJpdHkgcmVxdWVzdGVkIGFuIGVzdGltYXRlZCBkYXRlIGZv ciB0aGUgcmVsZWFzZSBvZiBhIGZpeC91cGRhdGUuCjIwMTUtMDQtMTM6IENvcmUgU2VjdXJpdHkg YWdhaW4gcmVxdWVzdGVkIGFuIGFuc3dlciBmcm9tIFNlbmRpbyByZWdhcmRpbmcgdGhlIHJlbGVh c2Ugb2YgYSBmaXgvdXBkYXRlLgoyMDE1LTA0LTEzOiBTZW5kaW8gaW5mb3JtZWQgQ29yZSB0aGV5 IHdlcmUgc3RpbGwgd29ya2luZyBvbiBhIGZpeCBmb3IgdGhlIEpTZXNzaW9uIGlzc3VlIHRoYXQg Y292ZXJzIGFsbCB1c2UgY2FzZXMgYWNyb3NzIE1pY3Jvc29mdCBPdXRsb29rIGFuZCB0aGUgdmFy aW91cyBzdXBwb3J0ZWQgd2ViIGJyb3dzZXJzLiBGb3IgdGhlICJDU19TRU5ESU9fSU5GT19MRUFL IiB0aGV5IGhhZCBjb2RlZCBhIGZpeCB0aGF0IHdhcyB1bmRlcmdvaW5nIGEgU3lzdGVtIFRlc3Qu IFNlbmRpbyBlc3RpbWF0ZWQgdGhlIHJlbGVhc2Ugd291bGQgdGFrZSBwbGFjZSBvbiBNYXkgMTUs IDIwMTUuCjIwMTUtMDQtMjA6IFNlbmRpbyBpbmZvcm1lZCBDb3JlIHRoZXkgd2VyZSBzdGlsbCBw bGFubmluZyB0byByZWxlYXNlIHRoZSBmaXhlcyBieSBNYXkgMTUsIDIwMTUuCjIwMTUtMDQtMjA6 IENvcmUgU2VjdXJpdHkgdGhhbmtlZCBTZW5kaW8gZm9yIHRoZSB1cGRhdGUgYW5kIGluZm9ybWVk IHRoZW0gdGhleSB3b3VsZCBzY2hlZHVsZSB0aGVpciBzZWN1cml0eSBhZHZpc29yeSBhY2NvcmRp bmdseS4KMjAxNS0wNC0yNDogQ29yZSBTZWN1cml0eSByZXF1ZXN0ZWQgdGhhdCBTZW5kaW8gZGVs YXkgdGhlIHJlbGVhc2UgZGF0ZSBvZiB0aGUgZml4ZXMgdW50aWwgTW9uZGF5LCBNYXkgMTggaW4g b3JkZXIgdG8gYXZvaWQgcHVibGlzaGluZyB0aGVtIG9uIGEgRnJpZGF5LgoyMDE1LTA0LTI3OiBT ZW5kaW8gaW5mb3JtZWQgQ29yZSB0aGF0IG1hbnkgb2YgdGhlaXIgY3VzdG9tZXJzIGhhdmUgdGhl aXIgU2VuZGlvIHN5c3RlbXMgc2V0IHRvICJhdXRvbWF0aWNhbGx5IHVwZGF0ZSIgb24gd2Vla2Vu ZHMuIFNlbmRpbyByZXF1ZXN0ZWQgQ29yZSBwdWJsaXNoIHRoZWlyIGFkdmlzb3J5IGEgd2VlayBh ZnRlciB0aGUgZml4IGlzIHB1Ymxpc2hlZC4gU2VuZGlvIGFsc28gcmVxdWVzdGVkIHRoZSBhYmls aXR5IHRvIGFkZCBzb21lIHdvcmthcm91bmRzIGludG8gQ29yZSdzIGFkdmlzb3J5LgoyMDE1LTA0 LTI4OiBDb3JlIFNlY3VyaXR5IGluZm9ybWVkIFNlbmRpbyB0aGF0IHRoZXkgdW5kZXJzdG9vZCB0 aGVpciB1cGRhdGUgcG9saWN5IGFuZCBsZXQgdGhlbSBrbm93IHRoYXQgaXQgaXMgQ29yZSdzIHBv bGljeSB0byBwdWJsaXNoIHRoZWlyIGFkdmlzb3J5IHRoZSBzYW1lIGRheSB0aGUgZml4IGlzIHJl bGVhc2VkIGluIG9yZGVyIHRvIGluZm9ybSB0aGUgYWZmZWN0ZWQgdXNlcnMgb2YgaXRzIGF2YWls YWJpbGl0eS4gQ29yZSBhbHNvIHN0YXRlZCB0aGF0IHRoZXkgd2VyZSB3aWxsaW5nIHRvIGFkZCBh bnkgd29ya2Fyb3VuZHMgU2VuZGlvIHByb3Bvc2VkLgoyMDE1LTA1LTA1OiBTZW5kaW8gaW5mb3Jt ZWQgQ29yZSB0aGF0IHRoZXkgd2VyZSBzdGlsbCBoYXZpbmcgcHJvYmxlbXMgZGV2ZWxvcGluZyBh IGZpeCBmb3IgdGhlIEpTZXNzaW9uIHZ1bG5lcmFiaWxpdHksIHRoZXJlZm9yZSB0aGV5IG1heSBo YXZlIHRvIHBvc3Rwb25lIHRoZSByZWxlYXNlIGRhdGUgZnJvbSBNYXkgMTUgdG8gTWF5IDIyLgoy MDE1LTA1LTA3OiBDb3JlIFNlY3VyaXR5IHRoYW5rZWQgU2VuZGlvIGZvciB0aGUgdXBkYXRlIGFu ZCByZXF1ZXN0ZWQgdG8gYmUga2VwdCBpbmZvcm1lZCBpbiBvcmRlciB0byBoYXZlIGVub3VnaCB0 aW1lIHRvIHNjaGVkdWxlIHRoZWlyIGFkdmlzb3J5LgoyMDE1LTA1LTEyOiBTZW5kaW8gY29uZmly bWVkIHRoYXQgdGhleSBuZWVkZWQgdG8gZGVsYXkgdGhlIHB1YmxpY2F0aW9uIG9mIHRoZSBmaXhl cyB1bnRpbCBNYXkgMjEuIEFkZGl0aW9uYWxseSwgU2VuZGlvIHNlbnQgQ29yZSB0aGUgcHJvcG9z ZWQgd29ya2Fyb3VuZHMgdG8gYmUgYWRkZWQgaW4gQ29yZSdzIGFkdmlzb3J5IGFuZCByZXF1ZXN0 ZWQgYSBkcmFmdCBjb3B5IG9mIGl0LgoyMDE1LTA1LTE1OiBDb3JlIFNlY3VyaXR5IGluZm9ybWVk IFNlbmRpbyBpdCB3b3VsZCByZXNjaGVkdWxlIHRoZSBwdWJsaWNhdGlvbiBvZiB0aGVpciBhZHZp c29yeSBhbmQgd291bGQgc2VuZCB0aGVtIGEgZHJhZnQgY29weSBvZiBpdCBvbmNlIHRoZXkgcHJv ZHVjZWQgdGhlIGZpbmFsIHZlcnNpb24uCjIwMTUtMDUtMjA6IFNlbmRpbyBpbmZvcm1lZCBDb3Jl IHRoYXQgdGhleSB3b3VsZCBwdWJsaXNoIHRoZSBmaXhlcyBhdCAxMCBQTSwgTWF5IDIxLgoyMDE1 LTA1LTIwOiBDb3JlIFNlY3VyaXR5IGluZm9ybWVkIFNlbmRpbyB0aGF0IGJhc2VkIG9uIHRoZWly IHB1YmxpY2F0aW9uIHRpbWUgdGhleSB3b3VsZCBoYXZlIHRvIGRlbGF5IHRoZSByZWxlYXNlIG9m IHRoZSBhZHZpc29yeSB1bnRpbCBGcmlkYXkgMjIuCjIwMTUtMDUtMjI6IEFkdmlzb3J5IENPUkUt MjAxNS0wMDEwIHB1Ymxpc2hlZC4KCgo5LiBSZWZlcmVuY2VzCgpbMV0gaHR0cDovL3d3dy5zZW5k aW8uY29tLy4gCgoKMTAuIEFib3V0IENvcmVMYWJzCgpDb3JlTGFicywgdGhlIHJlc2VhcmNoIGNl bnRlciBvZiBDb3JlIFNlY3VyaXR5LCBpcyBjaGFyZ2VkIHdpdGggYW50aWNpcGF0aW5nIHRoZSBm dXR1cmUgbmVlZHMgYW5kIHJlcXVpcmVtZW50cyBmb3IgaW5mb3JtYXRpb24gc2VjdXJpdHkgdGVj aG5vbG9naWVzLiBXZSBjb25kdWN0IG91ciByZXNlYXJjaCBpbiBzZXZlcmFsIGltcG9ydGFudCBh cmVhcyBvZiBjb21wdXRlciBzZWN1cml0eSBpbmNsdWRpbmcgc3lzdGVtIHZ1bG5lcmFiaWxpdGll cywgY3liZXIgYXR0YWNrIHBsYW5uaW5nIGFuZCBzaW11bGF0aW9uLCBzb3VyY2UgY29kZSBhdWRp dGluZywgYW5kIGNyeXB0b2dyYXBoeS4gT3VyIHJlc3VsdHMgaW5jbHVkZSBwcm9ibGVtIGZvcm1h bGl6YXRpb24sIGlkZW50aWZpY2F0aW9uIG9mIHZ1bG5lcmFiaWxpdGllcywgbm92ZWwgc29sdXRp b25zIGFuZCBwcm90b3R5cGVzIGZvciBuZXcgdGVjaG5vbG9naWVzLiBDb3JlTGFicyByZWd1bGFy bHkgcHVibGlzaGVzIHNlY3VyaXR5IGFkdmlzb3JpZXMsIHRlY2huaWNhbCBwYXBlcnMsIHByb2pl Y3QgaW5mb3JtYXRpb24gYW5kIHNoYXJlZCBzb2Z0d2FyZSB0b29scyBmb3IgcHVibGljIHVzZSBh dDogaHR0cDovL2NvcmVsYWJzLmNvcmVzZWN1cml0eS5jb20uCgoKMTEuIEFib3V0IENvcmUgU2Vj dXJpdHkgVGVjaG5vbG9naWVzCgpDb3JlIFNlY3VyaXR5IFRlY2hub2xvZ2llcyBlbmFibGVzIG9y Z2FuaXphdGlvbnMgdG8gZ2V0IGFoZWFkIG9mIHRocmVhdHMgd2l0aCBzZWN1cml0eSB0ZXN0IGFu ZCBtZWFzdXJlbWVudCBzb2x1dGlvbnMgdGhhdCBjb250aW51b3VzbHkgaWRlbnRpZnkgYW5kIGRl bW9uc3RyYXRlIHJlYWwtd29ybGQgZXhwb3N1cmVzIHRvIHRoZWlyIG1vc3QgY3JpdGljYWwgYXNz ZXRzLiBPdXIgY3VzdG9tZXJzIGNhbiBnYWluIHJlYWwgdmlzaWJpbGl0eSBpbnRvIHRoZWlyIHNl Y3VyaXR5IHN0YW5kaW5nLCByZWFsIHZhbGlkYXRpb24gb2YgdGhlaXIgc2VjdXJpdHkgY29udHJv bHMsIGFuZCByZWFsIG1ldHJpY3MgdG8gbW9yZSBlZmZlY3RpdmVseSBzZWN1cmUgdGhlaXIgb3Jn YW5pemF0aW9ucy4KCkNvcmUgU2VjdXJpdHkncyBzb2Z0d2FyZSBzb2x1dGlvbnMgYnVpbGQgb24g b3ZlciBhIGRlY2FkZSBvZiB0cnVzdGVkIHJlc2VhcmNoIGFuZCBsZWFkaW5nLWVkZ2UgdGhyZWF0 IGV4cGVydGlzZSBmcm9tIHRoZSBjb21wYW55J3MgU2VjdXJpdHkgQ29uc3VsdGluZyBTZXJ2aWNl cywgQ29yZUxhYnMgYW5kIEVuZ2luZWVyaW5nIGdyb3Vwcy4gQ29yZSBTZWN1cml0eSBUZWNobm9s b2dpZXMgY2FuIGJlIHJlYWNoZWQgYXQgKzEgKDYxNykgMzk5LTY5ODAgb3Igb24gdGhlIFdlYiBh dDogaHR0cDovL3d3dy5jb3Jlc2VjdXJpdHkuY29tLgoKCjEyLiBEaXNjbGFpbWVyCgpUaGUgY29u dGVudHMgb2YgdGhpcyBhZHZpc29yeSBhcmUgY29weXJpZ2h0IChjKSAyMDE1IENvcmUgU2VjdXJp dHkgYW5kIChjKSAyMDE1IENvcmVMYWJzLCBhbmQgYXJlIGxpY2Vuc2VkIHVuZGVyIGEgQ3JlYXRp dmUgQ29tbW9ucyBBdHRyaWJ1dGlvbiBOb24tQ29tbWVyY2lhbCBTaGFyZS1BbGlrZSAzLjAgKFVu aXRlZCBTdGF0ZXMpIExpY2Vuc2U6IGh0dHA6Ly9jcmVhdGl2ZWNvbW1vbnMub3JnL2xpY2Vuc2Vz L2J5LW5jLXNhLzMuMC91cy8KCgoxMy4gUEdQL0dQRyBLZXlzCgpUaGlzIGFkdmlzb3J5IGhhcyBi ZWVuIHNpZ25lZCB3aXRoIHRoZSBHUEcga2V5IG9mIENvcmUgU2VjdXJpdHkgYWR2aXNvcmllcyB0 ZWFtLCB3aGljaCBpcyBhdmFpbGFibGUgZm9yIGRvd25sb2FkIGF0IGh0dHA6Ly93d3cuY29yZXNl Y3VyaXR5LmNvbS9maWxlcy9hdHRhY2htZW50cy9jb3JlX3NlY3VyaXR5X2Fkdmlzb3JpZXMuYXNj LgoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpTZW50 IHRocm91Z2ggdGhlIEZ1bGwgRGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QKaHR0cHM6Ly9ubWFwLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxkaXNjbG9zdXJlCldlYiBBcmNoaXZlcyAmIFJTUzogaHR0 cDovL3NlY2xpc3RzLm9yZy9mdWxsZGlzY2xvc3VyZS8=