From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 23910 invoked from network); 26 Feb 2021 00:15:39 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 26 Feb 2021 00:15:39 -0000 Content-Type: multipart/mixed; boundary="===============6198215303607220898==" MIME-Version: 1.0 Subject: =?utf8?q?=5BPR_PATCH=5D_screen=3A_fix_CVE-2021-26937?= To: ml@inbox.vuxu.org From: abenson Reply-to: ml@inbox.vuxu.org Message-ID: Date: Fri, 26 Feb 2021 01:15:37 +0100 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============6198215303607220898== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYSBuZXcgcHVsbCByZXF1ZXN0IGJ5IGFiZW5zb24gYWdhaW5zdCBtYXN0ZXIgb24g dGhlIHZvaWQtcGFja2FnZXMgcmVwb3NpdG9yeQoKaHR0cHM6Ly9naXRodWIuY29tL2FiZW5zb24v dm9pZC1wYWNrYWdlcyBzY3JlZW5fY3ZlMjAyMTI2OTM3Cmh0dHBzOi8vZ2l0aHViLmNvbS92b2lk LWxpbnV4L3ZvaWQtcGFja2FnZXMvcHVsbC8yOTA2NwoKc2NyZWVuOiBmaXggQ1ZFLTIwMjEtMjY5 MzcKPCEtLSBNYXJrIGl0ZW1zIHdpdGggW3hdIHdoZXJlIGFwcGxpY2FibGUgLS0+DQoNCiMjIyMg R2VuZXJhbA0KLSBbIF0gVGhpcyBpcyBhIG5ldyBwYWNrYWdlIGFuZCBpdCBjb25mb3JtcyB0byB0 aGUgW3F1YWxpdHkgcmVxdWlyZW1lbnRzXShodHRwczovL2dpdGh1Yi5jb20vdm9pZC1saW51eC92 b2lkLXBhY2thZ2VzL2Jsb2IvbWFzdGVyL01hbnVhbC5tZCNxdWFsaXR5LXJlcXVpcmVtZW50cykN Cg0KIyMjIyBIYXZlIHRoZSByZXN1bHRzIG9mIHRoZSBwcm9wb3NlZCBjaGFuZ2VzIGJlZW4gdGVz dGVkPw0KLSBbWF0gSSB1c2UgdGhlIHBhY2thZ2VzIGFmZmVjdGVkIGJ5IHRoZSBwcm9wb3NlZCBj aGFuZ2VzIG9uIGEgcmVndWxhciBiYXNpcyBhbmQgY29uZmlybSB0aGlzIFBSIHdvcmtzIGZvciBt ZQ0KLSBbIF0gSSBnZW5lcmFsbHkgZG9uJ3QgdXNlIHRoZSBhZmZlY3RlZCBwYWNrYWdlcyBidXQg YnJpZWZseSB0ZXN0ZWQgdGhpcyBQUg0KDQo8IS0tDQpJZiBHaXRIdWIgQ0kgY2Fubm90IGJlIHVz ZWQgdG8gdmFsaWRhdGUgdGhlIGJ1aWxkIHJlc3VsdCAoZm9yIGV4YW1wbGUsIGlmIHRoZQ0KYnVp bGQgaXMgbGlrZWx5IHRvIHRha2Ugc2V2ZXJhbCBob3VycyksIG1ha2Ugc3VyZSB0bw0KW3NraXAg Q0ldKGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvYmxvYi9tYXN0 ZXIvQ09OVFJJQlVUSU5HLm1kI2NvbnRpbnVvdXMtaW50ZWdyYXRpb24pLg0KV2hlbiBza2lwcGlu ZyBDSSwgdW5jb21tZW50IGFuZCBmaWxsIG91dCB0aGUgZm9sbG93aW5nIHNlY3Rpb24uDQpOb3Rl OiBmb3IgYnVpbGRzIHRoYXQgYXJlIGxpa2VseSB0byBjb21wbGV0ZSBpbiBsZXNzIHRoYW4gMiBo b3VycywgaXQgaXMgbm90DQphY2NlcHRhYmxlIHRvIHNraXAgQ0kuDQotLT4NCjwhLS0gDQojIyMj IERvZXMgaXQgYnVpbGQgYW5kIHJ1biBzdWNjZXNzZnVsbHk/IA0KKFBsZWFzZSBjaG9vc2UgYXQg bGVhc3Qgb25lIG5hdGl2ZSBidWlsZCBhbmQsIGlmIHN1cHBvcnRlZCwgYXQgbGVhc3Qgb25lIGNy b3NzIGJ1aWxkLiBNb3JlIGFyZSBiZXR0ZXIuKQ0KLSBbIF0gSSBidWlsdCB0aGlzIFBSIGxvY2Fs bHkgZm9yIG15IG5hdGl2ZSBhcmNoaXRlY3R1cmUsIChBUkNILUxJQkMpDQotIFsgXSBJIGJ1aWx0 IHRoaXMgUFIgbG9jYWxseSBmb3IgdGhlc2UgYXJjaGl0ZWN0dXJlcyAoaWYgc3VwcG9ydGVkLiBt YXJrIGNyb3NzYnVpbGRzKToNCiAgLSBbIF0gYWFyY2g2NC1tdXNsDQogIC0gWyBdIGFybXY3bA0K ICAtIFsgXSBhcm12NmwtbXVzbA0KLS0+DQoKCkEgcGF0Y2ggZmlsZSBmcm9tIGh0dHBzOi8vZ2l0 aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvcHVsbC8yOTA2Ny5wYXRjaCBpcyBhdHRh Y2hlZA== --===============6198215303607220898== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-screen_cve202126937-29067.patch" RnJvbSAxYmQwYjFhYTBlZWZhNzc5YWRhZWRhYWFmNDAwZGVlMjAyZGEyZWE3IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyZXcgQmVuc29uIDxhYmVuc29uQGdtYWlsLmNvbT4KRGF0 ZTogVGh1LCAyNSBGZWIgMjAyMSAxODowMzowOSAtMDYwMApTdWJqZWN0OiBbUEFUQ0hdIHNjcmVl bjogZml4IENWRS0yMDIxLTI2OTM3CgotLS0KIHNyY3BrZ3Mvc2NyZWVuL3BhdGNoZXMvY3ZlLTIw MjEtMjY5MzcucGF0Y2ggfCA2NCArKysrKysrKysrKysrKysrKysrKysKIHNyY3BrZ3Mvc2NyZWVu L3BhdGNoZXMvdXRmOF9uZmQucGF0Y2ggICAgICAgfCAzOSArKysrKysrKysrKysrCiBzcmNwa2dz L3NjcmVlbi90ZW1wbGF0ZSAgICAgICAgICAgICAgICAgICAgIHwgIDIgKy0KIDMgZmlsZXMgY2hh bmdlZCwgMTA0IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKIGNyZWF0ZSBtb2RlIDEwMDY0 NCBzcmNwa2dzL3NjcmVlbi9wYXRjaGVzL2N2ZS0yMDIxLTI2OTM3LnBhdGNoCiBjcmVhdGUgbW9k ZSAxMDA2NDQgc3JjcGtncy9zY3JlZW4vcGF0Y2hlcy91dGY4X25mZC5wYXRjaAoKZGlmZiAtLWdp dCBhL3NyY3BrZ3Mvc2NyZWVuL3BhdGNoZXMvY3ZlLTIwMjEtMjY5MzcucGF0Y2ggYi9zcmNwa2dz L3NjcmVlbi9wYXRjaGVzL2N2ZS0yMDIxLTI2OTM3LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0 CmluZGV4IDAwMDAwMDAwMDAwLi43MDdlNTEzZTc0NwotLS0gL2Rldi9udWxsCisrKyBiL3NyY3Br Z3Mvc2NyZWVuL3BhdGNoZXMvY3ZlLTIwMjEtMjY5MzcucGF0Y2gKQEAgLTAsMCArMSw2NCBAQAor RGVzY3JpcHRpb246IFtDVkUtMjAyMS0yNjkzN10gRml4IG91dCBvZiBib3VuZHMgYXJyYXkgYWNj ZXNzCitBdXRob3I6IE1pY2hhZWwgU2NocsO2ZGVyIDxtbHNAc3VzZS5kZT4KK0J1Zy1EZWJpYW46 IGh0dHBzOi8vYnVncy5kZWJpYW4ub3JnLzk4MjQzNQorQnVnOiBodHRwczovL3NhdmFubmFoLmdu dS5vcmcvYnVncy8/NjAwMzAKK0J1ZzogaHR0cHM6Ly9saXN0cy5nbnUub3JnL2FyY2hpdmUvaHRt bC9zY3JlZW4tZGV2ZWwvMjAyMS0wMi9tc2cwMDAwMC5odG1sCitCdWctT1NTLVNlY3VyaXR5OiBo dHRwczovL3d3dy5vcGVud2FsbC5jb20vbGlzdHMvb3NzLXNlY3VyaXR5LzIwMjEvMDIvMDkvMwor T3JpZ2luOiBodHRwczovL2xpc3RzLmdudS5vcmcvYXJjaGl2ZS9odG1sL3NjcmVlbi1kZXZlbC8y MDIxLTAyL21zZzAwMDEwLmh0bWwKKworLS0tIGVuY29kaW5nLmMub3JpZworKysrIGVuY29kaW5n LmMKK0BAIC00Myw3ICs0Myw3IEBACisgIyBpZmRlZiBVVEY4Cisgc3RhdGljIGludCAgIHJlY29k ZV9jaGFyIF9fUCgoaW50LCBpbnQsIGludCkpOworIHN0YXRpYyBpbnQgICByZWNvZGVfY2hhcl90 b19lbmNvZGluZyBfX1AoKGludCwgaW50KSk7Cistc3RhdGljIHZvaWQgIGNvbWJfdG9mcm9udCBf X1AoKGludCwgaW50KSk7Cisrc3RhdGljIHZvaWQgIGNvbWJfdG9mcm9udCBfX1AoKGludCkpOwor ICMgIGlmZGVmIERXX0NIQVJTCisgc3RhdGljIGludCAgIHJlY29kZV9jaGFyX2R3IF9fUCgoaW50 LCBpbnQgKiwgaW50LCBpbnQpKTsKKyBzdGF0aWMgaW50ICAgcmVjb2RlX2NoYXJfZHdfdG9fZW5j b2RpbmcgX19QKChpbnQsIGludCAqLCBpbnQpKTsKK0BAIC0xMjYzLDYgKzEyNjMsOCBAQAorICAg ICB7MHgzMDAwMCwgMHgzRkZGRH0sCisgICB9OworIAorKyAgaWYgKGMgPj0gMHhkZjAwICYmIGMg PD0gMHhkZmZmKQorKyAgICByZXR1cm4gMTsgICAgICAgICAgLyogZHcgY29tYmluaW5nIHNlcXVl bmNlICovCisgICByZXR1cm4gKChiaXNlYXJjaChjLCB3aWRlLCBzaXplb2Yod2lkZSkgLyBzaXpl b2Yoc3RydWN0IGludGVydmFsKSAtIDEpKSB8fAorICAgICAgICAgICAoY2prd2lkdGggJiYKKyAg ICAgICAgICAgIGJpc2VhcmNoKGMsIGFtYmlndW91cywKK0BAIC0xMzMwLDExICsxMzMyLDEyIEBA CisgfQorIAorIHN0YXRpYyB2b2lkCistY29tYl90b2Zyb250KHJvb3QsIGkpCistaW50IHJvb3Qs IGk7CisrY29tYl90b2Zyb250KGkpCisraW50IGk7CisgeworICAgZm9yICg7OykKKyAgICAgewor KyAgICAgIGludCByb290ID0gaSA+PSAweDcwMCA/IDB4ODAxIDogMHg4MDA7CisgICAgICAgZGVi dWcxKCJicmluZyB0byBmcm9udDogJXhcbiIsIGkpOworICAgICAgIGNvbWJjaGFyc1tjb21iY2hh cnNbaV0tPnByZXZdLT5uZXh0ID0gY29tYmNoYXJzW2ldLT5uZXh0OworICAgICAgIGNvbWJjaGFy c1tjb21iY2hhcnNbaV0tPm5leHRdLT5wcmV2ID0gY29tYmNoYXJzW2ldLT5wcmV2OworQEAgLTEz OTYsOSArMTM5OSw5IEBACisgICAgIHsKKyAgICAgICAvKiBmdWxsLCByZWN5Y2xlIG9sZCBlbnRy eSAqLworICAgICAgIGlmIChjMSA+PSAweGQ4MDAgJiYgYzEgPCAweGUwMDApCistICAgICAgICBj b21iX3RvZnJvbnQocm9vdCwgYzEgLSAweGQ4MDApOworKyAgICAgICAgY29tYl90b2Zyb250KGMx IC0gMHhkODAwKTsKKyAgICAgICBpID0gY29tYmNoYXJzW3Jvb3RdLT5wcmV2OworLSAgICAgIGlm IChjMSA9PSBpICsgMHhkODAwKQorKyAgICAgIGlmIChpID09IDB4ODAwIHx8IGkgPT0gMHg4MDEg fHwgYzEgPT0gaSArIDB4ZDgwMCkKKyAJeworIAkgIC8qIGNvbXBsZXRlbHkgZnVsbCwgY2FuJ3Qg cmVjeWNsZSAqLworIAkgIGRlYnVnKCJ1dGY4X2hhbmRsZV9jb21wOiBjb21wbGV0ZWx5IGZ1bGwh XG4iKTsKK0BAIC0xNDIyLDcgKzE0MjUsNyBAQAorICAgbWMtPmZvbnQgID0gKGkgPj4gOCkgKyAw eGQ4OworICAgbWMtPmZvbnR4ID0gMDsKKyAgIGRlYnVnMygiY29tYmluaWcgY2hhciAleCAleCAt PiAleFxuIiwgYzEsIGMsIGkgKyAweGQ4MDApOworLSAgY29tYl90b2Zyb250KHJvb3QsIGkpOwor KyAgY29tYl90b2Zyb250KGkpOworIH0KKyAKKyAjZWxzZSAvKiAhVVRGOCAqLwpkaWZmIC0tZ2l0 IGEvc3JjcGtncy9zY3JlZW4vcGF0Y2hlcy91dGY4X25mZC5wYXRjaCBiL3NyY3BrZ3Mvc2NyZWVu L3BhdGNoZXMvdXRmOF9uZmQucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MDAwMDAuLjY3NjBhYmI5NDE0Ci0tLSAvZGV2L251bGwKKysrIGIvc3JjcGtncy9zY3JlZW4vcGF0 Y2hlcy91dGY4X25mZC5wYXRjaApAQCAtMCwwICsxLDM5IEBACitBdXRob3I6IE1pY2hhZWwgU2No csO2ZGVyIDxtbHNAc3VzZS5kZT4KK1Jldmlld2VkLUJ5OiBBeGVsIEJlY2tlcnQgPGFiZUBkZWJp YW4ub3JnPgorRGVzY3JpcHRpb246IHNjcmVlbiBvdXRwdXRzIHNjcmVlbiAiw78iIGFmdGVyIGEg Y29ubmVjdGVkIGNoYXJhY3Rlci4KKyBUaGlzIGlzIGEgY2hhcmFjdGVyIHdpdGhvdXQgdGhlIG5l ZWQuIAorIFRoaXMgaGFwcGVucyBpbiBVVEYtOCBlbnZpcm9ubWVudC4gCisgQmVmb3JlIDogc2Ny ZWVuJCBydWJ5MS45LjEgLWUgJ3B1dHMgIlx1MzA0Ylx1MzA5OS4uIicKKyAgICAgICAgICDjgYvj gpnDvy4uLgorIHBhdGNoIGFwcGxpZWQgOiAgc2NyZWVuICQgcnVieTEuOS4xIC1lICdwdXRzICJc dTMwNGJcdTMwOTkuLiInCisgICAgICAgICAg44GL44KZLi4KK09yaWdpbjogaHR0cHM6Ly9saXN0 cy5nbnUub3JnL2FyY2hpdmUvaHRtbC9zY3JlZW4tZGV2ZWwvMjAyMS0wMi9tc2cwMDAxMi5odG1s CitCdWdzLURlYmlhbjogaHR0cHM6Ly9idWdzLmRlYmlhbi5vcmcvNjAwMjQ2CitCdWdzLURlYmlh bjogaHR0cHM6Ly9idWdzLmRlYmlhbi5vcmcvNjc3NTEyCisKK2RpZmYgLS1naXQgYS9hbnNpLmMg Yi9hbnNpLmMKK2luZGV4IDJhNTJlZGQuLjgzYjI2NmQgMTAwNjQ0CistLS0gYW5zaS5jLm9yaWcK KysrKyBhbnNpLmMKK0BAIC02OTIsMTAgKzY5Miw2IEBAIHJlZ2lzdGVyIGludCBsZW47CisgCQkg ICAgfQorIAkJICBjdXJyLT53X3JlbmQuZm9udCA9IDA7CisgCQl9CistIyAgaWZkZWYgRFdfQ0hB UlMKKy0JICAgICAgaWYgKGN1cnItPndfZW5jb2RpbmcgPT0gVVRGOCAmJiB1dGY4X2lzZG91Ymxl KGMpKQorLQkJY3Vyci0+d19tYmNzID0gMHhmZjsKKy0jICBlbmRpZgorIAkgICAgICBpZiAoY3Vy ci0+d19lbmNvZGluZyA9PSBVVEY4ICYmIGMgPj0gMHgwMzAwICYmIHV0ZjhfaXNjb21iKGMpKQor IAkJeworIAkJICBpbnQgb3gsIG95OworQEAgLTczMCw2ICs3MjYsMTAgQEAgcmVnaXN0ZXIgaW50 IGxlbjsKKyAJCSAgICB9CisgCQkgIGJyZWFrOworIAkJfQorKyMgIGlmZGVmIERXX0NIQVJTCisr CSAgICAgIGlmIChjdXJyLT53X2VuY29kaW5nID09IFVURjggJiYgdXRmOF9pc2RvdWJsZShjKSkK KysJCWN1cnItPndfbWJjcyA9IDB4ZmY7CisrIyAgZW5kaWYKKyAJICAgICAgZm9udCA9IGN1cnIt PndfcmVuZC5mb250OworICMgZW5kaWYKKyAjIGlmZGVmIERXX0NIQVJTCmRpZmYgLS1naXQgYS9z cmNwa2dzL3NjcmVlbi90ZW1wbGF0ZSBiL3NyY3BrZ3Mvc2NyZWVuL3RlbXBsYXRlCmluZGV4IGNh YzJmOTI0ZWFkLi42MTM2OTZkOWYzNyAxMDA2NDQKLS0tIGEvc3JjcGtncy9zY3JlZW4vdGVtcGxh dGUKKysrIGIvc3JjcGtncy9zY3JlZW4vdGVtcGxhdGUKQEAgLTEsNyArMSw3IEBACiAjIFRlbXBs YXRlIGZpbGUgZm9yICdzY3JlZW4nCiBwa2duYW1lPXNjcmVlbgogdmVyc2lvbj00LjguMAotcmV2 aXNpb249MQorcmV2aXNpb249MgogYnVpbGRfc3R5bGU9Z251LWNvbmZpZ3VyZQogY29uZmlndXJl X2FyZ3M9Ii0td2l0aC1zeXMtc2NyZWVucmM9L2V0Yy9zY3JlZW5yYyAtLWVuYWJsZS1wYW0KICAt LWVuYWJsZS1jb2xvcnMyNTYgLS1lbmFibGUtcnh2dF9vc2MgLS1lbmFibGUtdGVsbmV0Cg== --===============6198215303607220898==--