From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: multipart/mixed; boundary="===============3432347160548098657==" MIME-Version: 1.0 From: =?utf-8?q?Hanno_B=C3=B6ck_=3Channo_at_hboeck=2Ede=3E?= To: elfutils-devel@lists.fedorahosted.org Subject: out-of-bounds read / crash in elfutils tools (readelf, nm, ...) with malformed file Date: Fri, 31 Oct 2014 17:13:41 +0100 Message-ID: <20141031171341.239ece98@pc> --===============3432347160548098657== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi, Attached is a file that's a fuzzed elf executable which will crash various tools shipped with elfutils, I tried it with nm and readelf -a, maybe others affected. What puzzles me a bit is that valgrin suggests nm and readelf crash at different code paths. Both times its a one byte out of bounds read. (actually this bug report is kind of a fallout of a bug search in libbfd - various parser bugs in the binutils-tools have been found and fixed in the past days and I thought I'd run other elf-related tools on the collection of bug-exposing binaries) I tested it both with 0.160 and latest git code. Here's the valgrind output for nm: =3D=3D20828=3D=3D Invalid read of size 1 =3D=3D20828=3D=3D at 0x4C2C4D2: strlen (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) =3D=3D20828=3D= =3D by 0x40346D: show_symbols (nm.c:1264) =3D=3D20828=3D=3D by 0x4047AC: handle_elf (nm.c:1485) =3D=3D20828=3D=3D by 0x404E32: process_file (nm.c= :391) =3D=3D20828=3D=3D by 0x40247E: main (nm.c:252) =3D=3D20828=3D=3D Address 0x4043dac is not stack'd, malloc'd or (recently) free'd =3D=3D20828=3D=3D = =3D=3D20828=3D=3D = =3D=3D20828=3D=3D Process terminating with default action of signal 11 (SIG= SEGV) =3D=3D20828=3D=3D Access not within mapped region at address 0x4043DAC =3D=3D20828=3D=3D at 0x4C2C4D2: strlen (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) =3D=3D20828=3D= =3D by 0x40346D: show_symbols (nm.c:1264) =3D=3D20828=3D=3D by 0x4047AC: handle_elf (nm.c:1485) =3D=3D20828=3D=3D by 0x404E32: process_file (nm.c= :391) =3D=3D20828=3D=3D by 0x40247E: main (nm.c:252) Here for readelf -a: =3D=3D20829=3D=3D Invalid read of size 1 =3D=3D20829=3D=3D at 0x54DA9A7: vfprintf (in /lib64/libc-2.19.so) =3D=3D20829=3D=3D by 0x558737F: __printf_chk (in /lib64/libc-2.19.so) =3D=3D20829=3D=3D by 0x4057E6: printf (stdio2.h:104) =3D=3D20829=3D=3D by 0x4057E6: handle_symtab (readelf.c:2245) =3D=3D20829=3D=3D by 0x4057E6: print_symtab (readelf.c:2139) =3D=3D20829=3D=3D by 0x40F26E: process_elf_file (readelf.c:887) =3D=3D20829=3D=3D by 0x411735: process_dwflmod (readelf.c:691) =3D=3D20829=3D=3D by 0x4E52620: dwfl_getmodules (in /usr/lib64/libdw-0.160.so) =3D=3D20829=3D=3D by 0x408024: process_fi= le (readelf.c:790) =3D=3D20829=3D=3D by 0x403D93: main (readelf.c:296) =3D=3D20829=3D=3D Address 0x4043dac is not stack'd, malloc'd or (recently) free'd =3D=3D20829=3D=3D = =3D=3D20829=3D=3D = =3D=3D20829=3D=3D Process terminating with default action of signal 11 (SIG= SEGV) =3D=3D20829=3D=3D Access not within mapped region at address 0x4043DAC =3D=3D20829=3D=3D at 0x54DA9A7: vfprintf (in /lib64/libc-2.19.so) =3D=3D20829=3D=3D by 0x558737F: __printf_chk (in /lib64/libc-2.19.so) =3D=3D20829=3D=3D by 0x4057E6: printf (stdio2.h:104) =3D=3D20829=3D=3D by 0x4057E6: handle_symtab (readelf.c:2245) =3D=3D20829=3D=3D by 0x4057E6: print_symtab (readelf.c:2139) =3D=3D20829=3D=3D by 0x40F26E: process_elf_file (readelf.c:887) =3D=3D20829=3D=3D by 0x411735: process_dwflmod (readelf.c:691) =3D=3D20829=3D=3D by 0x4E52620: dwfl_getmodules (in /usr/lib64/libdw-0.160.so) =3D=3D20829=3D=3D by 0x408024: process_fi= le (readelf.c:790) =3D=3D20829=3D=3D by 0x403D93: main (readelf.c:296) cu, -- = Hanno B=C3=B6ck http://hboeck.de/ mail/jabber: hanno@hboeck.de GPG: BBB51E42 --===============3432347160548098657== Content-Type: application/octet-stream MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="1977-elf-64bit.obj" f0VMRgIBAQAAAAAAAAAAAAIAPgABAAAAYARAAAAAAABAAAAAAAAAAGARAAAAAAAAAAAAAEAAOAAK AEAAHQAaAAYAAAAFAAAAQAAAAAAAAABAAEAAAAAAAEAAQAAAAAAAMAIAAAAAAQAwAgAAAAAAAAgA AAAAAAAAAwAAAAQAAABwAgAAAAAAAHACQAAAAAAAcAJAAAAAAAAcQAAAAAAAABwAAAAAAAAAAQAA AAAAAAABAAAABQAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAABQHAAAAAAAAFAcAAAAAAAAAACAA AgAAAAEAAAAGAAAAEA4AAAAAAAAQDmAAAAAAABAOYAAAAAAAMAIAAAAAAAA4AgAAAAAAAAAAIAAA AAAAAgAAAAYAAAAoDgAAAAAAACgOYAAAAAAAKA5gAAAAAADQAQAAAAQAANABAAAAAAAACAAAAAAA AAAEAAAABAAAAIwCAAAAAAAAjAJAAAAAAACMAkAAAAAAACAAAAAAAAAAIAAAAAAAAAAEAAAAAAAA AFDldGQEAAAA7AUAAAAAAADsBUAAAAAAAOwFQAAAAAAANAAAAAAAAAA0AAAAAAAAAAQAAAAAAAAA UeV0ZAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAABS 5XRkBAAEABAOAAAAAAAAEA5gAAAAAAAQDmAAAAAAAPABAAAAAAAA8AEAAAAAAAABAAAAAAAAAIAV BGUAKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAL2xp YjY0L2xkLWxpbnV4LXg4Ni02JC5zby4yAAQAAAAQAAAAAQAAAEdOVQAAAAAAAgAAAAYAAAAQAAAA AAAAAAEAAAABAAAAAQAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAACwAAABIAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABIAAAAAAAAAAAAAAAAAAAAAAAAAIgAAACAA AAAAAAAAAAAAAAAAAAAAAAAAAGxpYmMuc28uNgBwdXRzAF9fbGliY19zdGFydF9tYWluAF9fZ21v bl9zdGFydF9fAEdMSUJDXzIuMi41AAAAAAIAAgAAAAAAAQABAAEAAAAQAAAAAAAAAHUaaQkAAAIA MQAAAAAAAAD4D2AAAAAAAAYAAAADAAAAAAAAAAAAAAAYEGAAAAAAAAcAAAABAAAAAAAAAAAAAAAg EGAAAAAAAAcAAAAGAAAAAAAAAAAAAAAoEGAAAAAAAAcAAAADAAAAAAAAAAAAAABIg+wISIsF9Qsg IEiFwHQF6EMAAABIg8QIwwAAAAAAAAAAAAAAAAAA/zXiCyAA/yXkCyAADx9AAP8l4gsgAGgAAAAA 6eD/////JdoLIABoAQAAAOnQ/////yXSCyAIaAIAAADpwP///zHtSYnRXkiJ4kiD5PBQVEnHwNAF QABIx8FgBUAASMfHTQVAAOi3////9GYPH0QAALhHEGAAVUgtQBBgAEiJ5UiD+A53Al3DuAAAAABI jcB09F2/QBBgAP/gDx+AAAAAALhAEGAAVUgtQBBgAEiJ5UjB+ANIicJIweo/SAHQSNH4dQJdw7qA AAAASIXSdPRdSInGv0AQYAD/4g8fgAAAAACAPTkLIAAAdRFVSInl6H7///9dxgUmCyAAAfPDDx9A AEiDPfgIIAAAdB64AAAAAEiFwHQUVb8gDmAASInl/9Bd6Xv///8PHwDpc////1VIieW/5AVAAOjV /v//XcMPHwBBV0GJ/0FWSYn2QVVJidVBVEyNJZgIIABVSI0tmAggAFNMKeUx20iD7AhIwf0D6GX+ //9Ihe10Hg8fjAAAAAAATInqTIn2RIn/Qf8U3EiDwwFIOet16kiDxAhbXUFcQV1BXkFfw2ZmLg8f hAAAAAAA88NmkEiD7AhIg8QIwwAAAAEAAgBoZWxsbwAAAAEbAzswAAAABQAAADT+//98AAAAdP7/ /0wAAABh////pAAAAHT////EAAAA5O///wwBAAAUAAAAAAAAAAF6UgABeBABGwwHCJABBxAUAAAA HAAAACD+//8qAAAAAAAAAAAAAAAUAAAAAAAAAAF6UgABeBABGwwHCJABAAAkAAAAHAAAALD9//9A AAAAAA4QRg4YSg8LdwiAAD8aOyozJCIAAAAAHAAAAEQAAAC1/v//EAAAAABBDhCGAkMNBksMBwgA AABEAAAAZAAAAKj+//9lAAAAAEIOEI8CRQ4YjgNFDiCNBEUOKIwFSA4whgZIDjiDB0kOQHAOOEEO MEEOKEIOIEIOGEIOEEIOCAAUAAAArAAAAND+//8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAIAVAAAAAAAAABUAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAAwAAAAAAAAA +ANAAAAAAAANAAAAAAAAANQFQAAAAAAAGQAAAAAAAAAQDmAAAAAAABsAAAAIAAAACAAAAAAAAAAa AAAAAAAAABgOYAAAAAAAHAAAAAAAAAAIAAAAAAAAAPX+/28AAAAAsAJAAAAAAAAFAAAAAAAAADAD QAAAAAAABgAAAAAAAADQAkAAAAAAAAoAAAAAAAAAPQAAAAAAAAALAAAAAAAAABgAAAAAAAAAFQAA AAAAAQAAAAAAAAAAAAMAAAAAAAAAABBgAAAAQAACAAAAAAAAAEgAAAAAAAAAFAAAAAAAAAAHAAAA AAAAABcAAAAAAAAAsANAAAAAAAAHQAAAAAAAAJgDQAAAAAAACAAAAAAAAAAYAAAAAAAAAAkAAAAA AAAAGAAAAAAAAAD+//9vAAAAAHgDQAAAAAAA////bwAAAAABAAAAAAAAQPD//28AQAAAbgNAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOYAAAAAAA AAAAAAAAAAAACAAAAAAAADYEQAAAAIAARgRAAAAAAABWBEAAAAAAAAAAAAAAAAAAAAAAAAAAAABH Q0M6IChHZW50b28gNC44LjMgcDEuMSwgcGllLTAuNS45KSA0LjguMwAALnN5bXRhYgAuc3RydGFi AC5zaHN0cnRhYgAuaW50ZXJwAC5ub3RlLkFCSS10YWcALmdudS5oYXNoAC5keW5zeW0ALmR5bnN0 cgAuZ251LnZlcnNpb24ALmdudS52ZXJzaW9uX3IALnJlbGEuZHluAC5yZWxhLHBsdAAuaW5pdAAu dGV4dAAuZmluaQAucm9kYXRhAC5laB9mcmFtZV9oZHIALmVoX2ZyYW1lAC5pbml0X2FycmF5AC5m aW5pX2FycmF5AC5qY3IALmRpbmFtaWMALmdvdAAuZ290LnBsdAAuZGF0YQAuYnNzAC5jb21tZW50 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAA AAAAAAAAAAAAGwAAAAEAAAACAAAAAAAAAHACQAAAAAAAcAIAAAAAAAAcAAAAAAAAAAAAAAAAAAAA AQAAAAAAAAAAAAAAAAAAACMAAAAHAAAAAgAAAAAAAACMAkAAAAAAAIwCAAAAAAAAIAAAAAAAAAAA AAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAxAAAA9v//bwIAAAAAAAAAsAJAAAAAAACwAgAAAAAAABwA AAAAAAAABAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAOwAAAAsAAAACAAAAAAAAANACQAAAAAAA0AIA AAAAAABgAAAAAAAAAAUAAAABAAAACAAAAAAAAAAYAAAAAAAAAEMAAAADAAAAAgAAAAAAAAAwA0AA AAAAADADAAAAAAAAPQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAABLAAAA////bwIAAAAA AAAAbgNAAAAAAABuAwAAAAAAAAgAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAWAAAAP7/ /28CAAAAAAAAAHgDQAAAAAAAeAMAAAAAAAAgAAAAAAAAAAUAAAABAAAACAAAAAAAAAAAAAAAAAAA AGcAAAAEAAAAAgAAAAAAAACYA0AAAAAAAJgDAAAAAAAAGAAAAAAAAAAEAAAAAAAAAAgAAAAAAAAA GAAAAAAAAABxAAAABAAAAAIAAAAAAAAAsANAAAAAAACwAwAAAAAAAEgAAAAAAAAABAAAAAsAAAAY AAAAAAAAABgAAAAAAAAAewAAAAEAAAAGAAAAAAAAAPgDQAAAAAAA+AMAAAAAAAAaAAAAAAAAAAAA AAAAAAAABAAAAAAAAAAAAAAAAAAAAHYAAAABAAAABgAAAAAAAAAgBEAAAAAAACAEAAAAAAAAQAAA AAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAACBAAAAAQAAAAYAAAAAAAAAYARAAAAAAABgBAAA AAAAAHQBAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAhwAAAAEAAAAEAAAAAAAAANQFQAAA AAAA1AUAAAAAAAAJAAAAAAgAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAI0AAAABAAAAAgAAAAAA AADgBUAAAAAAAOAFAAAAAAAACgAAAAAAAAAAAAAAAAAAAAQAAAAAQAAAAAAAAAAAAACVAAAAAQAA AAIAAAAAAAEA7AVAAAAAAADsBQAAAAAAADQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAA owAAAAEAAAACAAAAAAAAACAGQAAAAAAAIAYAAAAAAAD0AAAAAAAAAAAAAAAAAAAACAAAAAAAAAAA AAAAAAAAAK0AAAAOAAAAAwAAAAAAAAAQDmAAAAAAABAOAAAAAAAACAAAAAAAAAAAAAAAAAAAAAgA AAAAAAAAAAAAAAAAAAC5AAAADwAAAAMAAAAAAAAAGA5gAAAAAAAYDgAAAAAAAAgAAAAAAAAAAAAA AAAAAAAIAAAAAAAAAAAAAAAAAAAAxQAAAAEAAAADAAAAAAAAACAOYAAAAAAAIA4AAAAAAAAIAAAA AAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAMoAAAAGAAAAQwAAAAAAAAAoDmAAAAAAACgOAAAA AAAA0AEAAAAAAAAFAAAAAAAAAAgAAAEAAAAAEAAAAAAAAADTAAAAAQAAAAMAAAAAAAAA+A9gAAAA AAD4DwAAAAAAAAgAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA2AAAAAEAAAADAAAAAAAA AAAQYAAAAAAAABAAAAAAAAAwAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAOEAAAABAAAA AwAAAAAAAAAwEGAAgAAAADAQAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAADn AAAACAAAAAMAAAAAAAAAQBBgAAAAAABAEAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAA AAAAAAAA7AAAAAEAAAAwAAAAAAAAAAAAAAAAAAAAQBAAAAAAAAAqAAAAAAAAAAAAAAAAIAAAAQAA AAAAAAABAAAAAAAAABEAAAADAAAAAAAAAAAAAAAAAAAAAAAAAGoQAAAAAAAA9QAAAAAAAAAAAAAA AAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAgAAAAAAAAAAAAAAAAAAAAAAAACgGAAAAAAAAPgEAAAA AAAAHAAAACEAAAAIAAAAAAAAABgAAAAAAAAACQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAmB0AAAAA AABxAQAABAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAADAAEAcAJAAAAAAAAAAAAAAAAAAAAAAAADAAIAjAJAAAAAAAAAAAAAAAAAAAAAAAADAAMA sAJAAAAAAEAAAAAAAAAAAAAAAAADAAQA0AJAAAAAAAAAAAAAAAAAAAAAAAADAAUAMANAAAAAAAAA AAAAAAAAAAAAAAADAAYAbgNBAAAAAAAAAAAAAAAAAAAAAAADAAcAeANAAAAAAAAAAAAAAAAAAAAA AAADAAgAmANAAAAAAEAAAAAAAAAAAAAAAAADAAkAsANAAAAAAAAAAAAAAAAAAAAAAAADAAoA+ANA AAAAAAAAAAAAAAAAAAAAAAADAAsAIARAAAAAAAAAAAAAAAAAAAAAAAADAAwAYARAAAAAAAAAAAAA AAAAAAAAAAADAA0A1AVAAAAAAAAAAAAAAAAAAAAAAAADAA4A4AVAAAAAAAAAAAAAAAAAAAAAAAAD AA8A7AVAAAAAAAAAAAAAAAAAAAAAAAADABAAIAZAAAAAAAAAAAAAAAAAAAAAAAADABEAEA5gAAAA AAAAAAAAAAAAAAAAAAADABIAGA5gAAAAAAAAAAAAAAAAAAAAAAADABMAIA5gAAAAAAAAAAAAAAAA AAAAAAADABQAKA5gAAAAAAAAAAAAAAAAAAAAAAADABUA+A9gAAAAAAAAAAAAAAAAAAAAAAADABYA ABBgAAAAAAAAAAAAAAAAAAAAAAADABcAMBBgAAAAAAAAAAAAAAAAAAAAAAADABgAQBBgAAAAAAAA AAAACAAAAAAAAAADABkAAAAAAAAAAAAAAAAAAAAAAAEAAAAEIPH/AAAAAAAAAAAAAAAAAAAAAAkA AAAEAPH/AAAAAAAAAAAAAAAAAAAAAAAAAAAEAPH/AAAAAAAAAAAAAAAAAAAAABQAAgAAABEAGA5g AAAAAAAAAAAAAAAAACUAAAABABQAKA5gAAAAAAAAAAAAAAAAAC4AAAAAABEAEA5gAAAAAAAAAAAA AAAAAEEAAAABABYAABBgAAAAAAAAAAAAAIAAAFcAAAASAAwA0AVAAAAAAAACAAAAAAAAAGcAAAAg AAAAAAAAAAAAAAAAAAAAAAAAAIMAAAAgABcAMBBgAAAAAAAAAAAAAAAAAI4AAAASAAAAAAAAAAAA AAAAAAAAAAAAAKAAAAAQABcAQBBgAAAAAAAAAAAAAAAAAKcAAAASAA0A1AVAAAAAAAAAAAAAAAAA AK0AAAASAAAAAAAAAAAAAAAAAAAAAAAAAMwAAAAQABcAMBBgAAAAAAAAAAAAAAAAANkAAAAgAAAA AAAAAAAAAAAAAAAAAAAAAOgAAAARAhcAOBBgAAAAAAAAAAAAAAAAAPUAAAARAA4A4AVAAAAAAAAE AAAAAAAAAAQBAAASAAwAYAVQAAAAAABlAAAAAAAAABQBAAAQABgASBBgAAAAAAAAAAAAAAAAABkB AAASAAwAYARAAAAAAAAAAAAAAAAAACABAAAQABgAQBBgAAAAAAAAAAAAAAAAACwBAAASAAwATQVA AAAAAAAQAAAAAAAAADEBAAAgAAAAAAAAAAAAAAAAAAAAAAAAAEUBAAARAhcAQBBgAAAAAAAAAAAA AAAAAFEBAAAgAAAAAAAAAAAAAAAAAAAAAAAAAGsBAAASAAoA+ANAAAAAAAAAAAAAAAAAAABoZWxs by5jAGVsZi1pbml0LmMAX19pbml0X2FycmF5X2VuZABfRFlOQU1JQwBfX2luaXRfYXJyYXlfc3Rh cnQAX0dMT0ZBTF9PRkZTRVRfVEFCTEVfEF9fbGliY19jc3VfZmluaQBfSVRNX2RlcmVnaXN0ZXJU TUNsb25lVGFibGUAZGF0YV9zdGFydIBwdXRzQEBHTElCQ18yKjIuNQBfZWRhdGEAX2ZpbmkAX19s aWJjX3N0YXJ1X21haW5AQEdMSUJDXzIuMi41AF9fZGF0YV9zdGFydABfX2dtb25fc3RhcnRfXwBf X2Rzb19oYW5kbGUAX0lPX3N0ZGluX3VzZWQAX19saWJjX2NzdV9pbml0AF9lbmQAX3N0YXJ0AF9f YnNzX3N0YXJ0AG1haW4AX0p2X1JlZ2lzdGVyQ2xhc3NlcwBfX1RNQ19FTkRfXwBfSVRNX3JlZ2lz dGVyVE1DbG9uZVRhYmxlAF9pbml0AA== --===============3432347160548098657== Content-Type: application/pgp-signature MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjIKCmlRSWNCQUVC Q2dBR0JRSlVVN1UxQUFvSkVLV0lBSEs3dFI1Q29RNFFBS1dyRFdZT3NWeFpXSVF4VE9PMFVSWTEK cXBSMkE5dVAzYjJQamFWUDgrOENHRDFEUk9XNU1BeEN0aE5IT2hMR25JOXk0YTdRVC9SYXhDeUxl MXEzRE5NdApkM2t3TVUySDVWQTFGUFB6Zm02MEVjVkFuQnU1WmxYWXFTM3FuU3ZEdlowc2Y1QVdC NjZlcGdEWnhCTVFHS3k4CkFHNUtVemxYYlo4aHNkVm9EUDl0bnZKdFVvZ2prc21hVEtoQkpxeGNs MTBjZjdQMXBLYUpVZjhibkpZTER4OXkKVkpnb3NBSHYvTm5VUXltcDFpYlFPWkliR2R3V1FMaVNH aURseDNDOFZkN2c4QjF6NStLeFlUanlCNDN6M0hhNQp2Y3BxK2hNTDVYNld0RklmOXlIelZPb1Ux aU9MVEQ2QmNMaUtCYjRKS0U4dVhUQ3FPMURFcXBFeDBPSVpvMzhiCjI3STlNNkVKWVowRTBEZGIw UG1FNXJ4OWJmdklwYllJMW5KaGRUUXV5SjRLa1RZMVQ3U1B0MWNERjlaR05OR1cKNmcvUEZKUit1 d3g0MEdFZ3dNb09UWjQ5OGFEVFdGYzIza3pqKzhyUXVIVXJXVWJYa0w4Qi9QSndoQ3NwZjBqOApa MWxjYmxSWGV6a1ZTcngxaEZDQ0htZGsxNnMrdUJqc29PQU1mZ0JXL0NUOGxBOHAzc0VQNnBpMDM2 bmZaWkNBCnEvRnVvYVljV3ljdmZwUms5WlNSdmdybE1IdXZUcGNndDZVRUh5OUxCbEo1WkcwdjN1 TWRrQ3N5ZGc4U1hwV2sKMllWa3VRbkVsTytodFU2MUlqOXg0OHVUb1RhZEpmd3N5cjltajUxMmQx OC9UbU42bUxQeWRJOHJESHJpMUpmVgpXUHJmeW84dzBnakxZUFF2YkVuSwo9WGt5RAotLS0tLUVO RCBQR1AgU0lHTkFUVVJFLS0tLS0K --===============3432347160548098657==--