From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from gabe.freedesktop.org (gabe.freedesktop.org [131.252.210.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id DE27ECD4851 for ; Fri, 15 May 2026 05:49:39 +0000 (UTC) Received: from gabe.freedesktop.org (localhost [127.0.0.1]) by gabe.freedesktop.org (Postfix) with ESMTP id 4355410F3E2; Fri, 15 May 2026 05:49:39 +0000 (UTC) Authentication-Results: gabe.freedesktop.org; dkim=pass (1024-bit key; unprotected) header.d=broadcom.com header.i=@broadcom.com header.b="O+v2Njsw"; dkim-atps=neutral Received: from mail-pl1-f228.google.com (mail-pl1-f228.google.com [209.85.214.228]) by gabe.freedesktop.org (Postfix) with ESMTPS id 6633C10F3E2 for ; Fri, 15 May 2026 05:49:37 +0000 (UTC) Received: by mail-pl1-f228.google.com with SMTP id d9443c01a7336-2babfd18435so44554405ad.1 for ; Thu, 14 May 2026 22:49:37 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778824177; x=1779428977; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=DMhIQI8pdW1pgo0SF0gVknDzNGpV1tCn3SzvqriIPfk=; b=cs1vJVQDKKPLbX5+lCLoPmFI07zOTcGCGH5xeOYByViNs+19vpuypOYMm8GtGYIH7Z J2nkIghAvcZALGWalve+78wmlleP89x2QSrJd/KbJWoH4Knb8HBxqiu1FkBd9gcVP2Zh of5CpPjt8vO51Vs4+YfKRzqxqxFmaCR16QOuvn2mmeB6ZuUgR1IPHGc6W4kT3FxJE+4f YydBLl72PDlEjT5jzmYypr0YN7oIfGCmjIwrU2Xd68s/AajEY0PBXEMl+cJYNsjvKc/e n35+p+VhzfuxCU18yx0ybYL2EW8AS2ZqzewtIrkTAkuPh4IkZAiWN0Yjn60RMFxnVYeV 93Ow== X-Gm-Message-State: AOJu0Yziw4u62r9thvQy+HIoo/aggLNJKQnUpjsM7hjGhdBvA3GBM2An zJlLJuVYUtFL33rSrdaScrRBOHGk/xqaZ0rWFI8WNSy7fnlzpTFsixR3uA+VdsIrho9sOMhBlrH nnCoxYEiSGMJhSeXCystUCgChaWSO9HIz3ujOnMUgxUBmkCpRcvrLwsf9dT5oRqj3hRx2WvrxHs NGcFv8Auyf0zCxdeU5f4pfyhOeszOyNYSe8hLlPaYGfnGpFPJn9qAqnnvZEYexGqqft9o8PK94l LTPp8uWgr5bXZvlaIR6 X-Gm-Gg: Acq92OHLUHtcDSOHPkAE6/xcqinrFaR+BgjLXG3ddShltZgCuoUsII7xqY0b8AG3HJY /Jh0TW6TpL7lkjPhU0y6jdOUQqyQPPHIhwYoHkDoIbxw/p3RyP9v2gPRQzUTTOZmQdH9uuhN34x G9LIhO/GtJJ+Px97JTBPeIgFucgNoOYMkITPQDVZyDjuEjBOJrF9+GE//zHu9QCgiVEZrkmPBMV nb025ZDdehD+XC0KZdybbqhtfZJNAto9ddgZt75Me4aVFvMlI+qU2jtV5zU5YOaK3NJyPh4T/Oi a8oKFQDUC+Hee3BtXVqqPtAwqXAfUAksmf8A+/K3t/9Dwx/tjCactp/U4YAQRxKhXjvbyY5/ejs tJ3iTg+GuQhSGwzXm0fp4YAybPaCwOUqTf05u5jWwVEMCH+Q90WBTdH1RZRnHIlS9ITLdUFKG6m mjxQnhNjrUgIiZAhKeHq8GvuDdy4JRsq8rNAtFrPHq5x7RyWWe0F/PT6bHGcXOZGGU X-Received: by 2002:a17:902:f788:b0:2b0:61c2:8e83 with SMTP id d9443c01a7336-2bd7e88f4a9mr28354365ad.20.1778824176480; Thu, 14 May 2026 22:49:36 -0700 (PDT) Received: from smtp-us-east1-p01-i01-si01.dlp.protect.broadcom.com (address-144-49-247-21.dlp.protect.broadcom.com. [144.49.247.21]) by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2bd5bd6967bsm3681705ad.3.2026.05.14.22.49.35 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 May 2026 22:49:36 -0700 (PDT) X-Relaying-Domain: broadcom.com X-CFilter-Loop: Reflected Received: by mail-lf1-f69.google.com with SMTP id 2adb3069b0e04-5a526442aedso4912338e87.2 for ; Thu, 14 May 2026 22:49:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=broadcom.com; s=google; t=1778824174; x=1779428974; darn=lists.freedesktop.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=DMhIQI8pdW1pgo0SF0gVknDzNGpV1tCn3SzvqriIPfk=; b=O+v2NjswCL4TpDq5DmLe19a3aNZUx/B4IerdZBLaACR6wfHLbspJzP00kBMwEOaLn1 VOQCGoM/idISMMxbfP1L++MDfkk90fdSwpei6OR8PizBVZc9b2tXEk74ReXzX5Lmw83R zEaDtCYxBw4UXOb/U1sMvVK5KXF0J5FLmn0cI= X-Received: by 2002:a05:6512:6d6:b0:5a8:64c7:9592 with SMTP id 2adb3069b0e04-5aa0e7419bfmr534314e87.37.1778824173985; Thu, 14 May 2026 22:49:33 -0700 (PDT) X-Received: by 2002:a05:6512:6d6:b0:5a8:64c7:9592 with SMTP id 2adb3069b0e04-5aa0e7419bfmr534306e87.37.1778824173391; Thu, 14 May 2026 22:49:33 -0700 (PDT) MIME-Version: 1.0 References: <20260514224819.3631763-1-maaz.mombasawala@broadcom.com> <20260514224819.3631763-5-maaz.mombasawala@broadcom.com> In-Reply-To: <20260514224819.3631763-5-maaz.mombasawala@broadcom.com> From: Zack Rusin Date: Fri, 15 May 2026 01:49:20 -0400 X-Gm-Features: AVHnY4JNb01ZQH8DV5G86Tb_7wiQG1yGR9e64j4pQ8UGfHR8QbE97tvwRqyLzl4 Message-ID: Subject: Re: [PATCH v3 4/5] drm/vmwgfx: Change ttm refs for dumb buffers. To: Maaz Mombasawala Cc: dri-devel@lists.freedesktop.org, bcm-kernel-feedback-list@broadcom.com, ian.forbes@broadcom.com X-DetectorID-Processed: b00c1d49-9d2e-4205-b15f-d015386d3d5e Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="0000000000000839a60651d4c7a0" X-BeenThere: dri-devel@lists.freedesktop.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Direct Rendering Infrastructure - Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" --0000000000000839a60651d4c7a0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, May 14, 2026 at 6:46=E2=80=AFPM Maaz Mombasawala wrote: > > Preserve a ttm reference during dumb buffer creation. This keeps the dumb > buffer valid for framebuffer usage and fixes all igt tests that use dumb > buffers. > Also fix ttm_prime_fd_to_handle(), which in the error case was leaking a > dma_buf reference. During vmw_prime_fd_to_handle() this function > is expected to fail for dumb buffers since the fd is for a gem object, > the dma_buf would in turn hold a reference to the dumb buffer gem object > and cause a memory leak. > > Signed-off-by: Maaz Mombasawala > --- > drivers/gpu/drm/vmwgfx/ttm_object.c | 7 +++++-- > drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 5 +++-- > 2 files changed, 8 insertions(+), 4 deletions(-) > > diff --git a/drivers/gpu/drm/vmwgfx/ttm_object.c b/drivers/gpu/drm/vmwgfx= /ttm_object.c > index 2421b0dd057c..f9042bafdc93 100644 > --- a/drivers/gpu/drm/vmwgfx/ttm_object.c > +++ b/drivers/gpu/drm/vmwgfx/ttm_object.c > @@ -547,14 +547,17 @@ int ttm_prime_fd_to_handle(struct ttm_object_file *= tfile, > if (IS_ERR(dma_buf)) > return PTR_ERR(dma_buf); > > - if (dma_buf->ops !=3D &tdev->ops) > - return -ENOSYS; > + if (dma_buf->ops !=3D &tdev->ops) { > + ret =3D -ENOSYS; > + goto out; > + } > > prime =3D (struct ttm_prime_object *) dma_buf->priv; > base =3D &prime->base; > *handle =3D base->handle; > ret =3D ttm_ref_object_add(tfile, base, NULL, false); > > +out: > dma_buf_put(dma_buf); > > return ret; > diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vm= wgfx/vmwgfx_surface.c > index b2d3927b5567..256e7b89daea 100644 > --- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c > +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c > @@ -2328,11 +2328,12 @@ int vmw_dumb_create(struct drm_file *file_priv, > struct vmw_user_surface *usurf =3D container_of(vbo->dumb_surface= , > struct vmw_user_surface, = srf); > usurf->prime.base.refcount_release =3D NULL; > + > err: > if (res) > vmw_resource_unreference(&res); > - > - ttm_ref_object_base_unref(tfile, arg.rep.handle); > + if (ret) > + ttm_ref_object_base_unref(tfile, arg.rep.handle); That still doesn't look correct. dumb buffers own the resource and should drop it themselves. What you did is made arg.rep.handle stay in tdev->idr and now both the tfile and dumb_buffer own the surface. Whichever one is destroyed first will make the other UAF on that surface. For all the commits in that series that are fixes please find a proper Fixes commit. And if you want to land this through drm-misc-fixes then you'll need to remove the last one from the series because I don't think we should land general cleanups through fixes. z --0000000000000839a60651d4c7a0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIVIgYJKoZIhvcNAQcCoIIVEzCCFQ8CAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0BBwGg ghKPMIIGqDCCBJCgAwIBAgIQfofDCS7XZu8vIeKo0KeY9DANBgkqhkiG9w0BAQwFADBMMSAwHgYD VQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UE AxMKR2xvYmFsU2lnbjAeFw0yMzA0MTkwMzUzNTNaFw0yOTA0MTkwMDAwMDBaMFIxCzAJBgNVBAYT AkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSgwJgYDVQQDEx9HbG9iYWxTaWduIEdDQyBS NiBTTUlNRSBDQSAyMDIzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwjAEbSkPcSyn 26Zn9VtoE/xBvzYmNW29bW1pJZ7jrzKwPJm/GakCvy0IIgObMsx9bpFaq30X1kEJZnLUzuE1/hlc hatYqyORVBeHlv5V0QRSXY4faR0dCkIhXhoGknZ2O0bUJithcN1IsEADNizZ1AJIaWsWbQ4tYEYj ytEdvfkxz1WtX3SjtecZR+9wLJLt6HNa4sC//QKdjyfr/NhDCzYrdIzAssoXFnp4t+HcMyQTrj0r pD8KkPj96sy9axzegLbzte7wgTHbWBeJGp0sKg7BAu+G0Rk6teO1yPd75arbCvfY/NaRRQHk6tmG 71gpLdB1ZhP9IcNYyeTKXIgfMh2tVK9DnXGaksYCyi6WisJa1Oa+poUroX2ESXO6o03lVxiA1xyf G8lUzpUNZonGVrUjhG5+MdY16/6b0uKejZCLbgu6HLPvIyqdTb9XqF4XWWKu+OMDs/rWyQ64v3mv Sa0te5Q5tchm4m9K0Pe9LlIKBk/gsgfaOHJDp4hYx4wocDr8DeCZe5d5wCFkxoGc1ckM8ZoMgpUc 4pgkQE5ShxYMmKbPvNRPa5YFzbFtcFn5RMr1Mju8gt8J0c+dxYco2hi7dEW391KKxGhv7MJBcc+0 x3FFTnmhU+5t6+CnkKMlrmzyaoeVryRTvOiH4FnTNHtVKUYDsCM0CLDdMNgoxgkCAwEAAaOCAX4w ggF6MA4GA1UdDwEB/wQEAwIBhjBMBgNVHSUERTBDBggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQB gjcUAgIGCisGAQQBgjcKAwwGCisGAQQBgjcKAwQGCSsGAQQBgjcVBjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBQAKTaeXHq6D68tUC3boCOFGLCgkjAfBgNVHSMEGDAWgBSubAWjkxPioufi 1xzWx/B/yGdToDB7BggrBgEFBQcBAQRvMG0wLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwMi5nbG9i YWxzaWduLmNvbS9yb290cjYwOwYIKwYBBQUHMAKGL2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5j b20vY2FjZXJ0L3Jvb3QtcjYuY3J0MDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwuZ2xvYmFs c2lnbi5jb20vcm9vdC1yNi5jcmwwEQYDVR0gBAowCDAGBgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IC AQCRkUdr1aIDRmkNI5jx5ggapGUThq0KcM2dzpMu314mJne8yKVXwzfKBtqbBjbUNMODnBkhvZcn bHUStur2/nt1tP3ee8KyNhYxzv4DkI0NbV93JChXipfsan7YjdfEk5vI2Fq+wpbGALyyWBgfy79Y IgbYWATB158tvEh5UO8kpGpjY95xv+070X3FYuGyeZyIvao26mN872FuxRxYhNLwGHIy38N9ASa1 Q3BTNKSrHrZngadofHglG5W3TMFR11JOEOAUHhUgpbVVvgCYgGA6dSX0y5z7k3rXVyjFOs7KBSXr dJPKadpl4vqYphH7+P40nzBRcxJHrv5FeXlTrb+drjyXNjZSCmzfkOuCqPspBuJ7vab0/9oeNERg nz6SLCjLKcDXbMbKcRXgNhFBlzN4OUBqieSBXk80w2Nzx12KvNj758WavxOsXIbX0Zxwo1h3uw75 AI2v8qwFWXNclO8qW2VXoq6kihWpeiuvDmFfSAwRLxwwIjgUuzG9SaQ+pOomuaC7QTKWMI0hL0b4 mEPq9GsPPQq1UmwkcYFJ/Z4I93DZuKcXmKMmuANTS6wxwIEw8Q5MQ6y9fbJxGEOgOgYL4QIqNULb 5CYPnt2LeiIiEnh8Uuh8tawqSjnR0h7Bv5q4mgo3L1Z9QQuexUntWD96t4o0q1jXWLyrpgP7Zcnu CzCCBYMwggNroAMCAQICDkXmuwODM8OFZUjm/0VRMA0GCSqGSIb3DQEBDAUAMEwxIDAeBgNVBAsT F0dsb2JhbFNpZ24gUm9vdCBDQSAtIFI2MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpH bG9iYWxTaWduMB4XDTE0MTIxMDAwMDAwMFoXDTM0MTIxMDAwMDAwMFowTDEgMB4GA1UECxMXR2xv YmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh bFNpZ24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCVB+hzymb57BTKezz3DQjxtEUL LIK0SMbrWzyug7hBkjMUpG9/6SrMxrCIa8W2idHGsv8UzlEUIexK3RtaxtaH7k06FQbtZGYLkoDK RN5zlE7zp4l/T3hjCMgSUG1CZi9NuXkoTVIaihqAtxmBDn7EirxkTCEcQ2jXPTyKxbJm1ZCatzEG xb7ibTIGph75ueuqo7i/voJjUNDwGInf5A959eqiHyrScC5757yTu21T4kh8jBAHOP9msndhfuDq jDyqtKT285VKEgdt/Yyyic/QoGF3yFh0sNQjOvddOsqi250J3l1ELZDxgc1Xkvp+vFAEYzTfa5MY vms2sjnkrCQ2t/DvthwTV5O23rL44oW3c6K4NapF8uCdNqFvVIrxclZuLojFUUJEFZTuo8U4lptO TloLR/MGNkl3MLxxN+Wm7CEIdfzmYRY/d9XZkZeECmzUAk10wBTt/Tn7g/JeFKEEsAvp/u6P4W4L sgizYWYJarEGOmWWWcDwNf3J2iiNGhGHcIEKqJp1HZ46hgUAntuA1iX53AWeJ1lMdjlb6vmlodiD D9H/3zAR+YXPM0j1ym1kFCx6WE/TSwhJxZVkGmMOeT31s4zKWK2cQkV5bg6HGVxUsWW2v4yb3BPp DW+4LtxnbsmLEbWEFIoAGXCDeZGXkdQaJ783HjIH2BRjPChMrwIDAQABo2MwYTAOBgNVHQ8BAf8E BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUrmwFo5MT4qLn4tcc1sfwf8hnU6AwHwYD VR0jBBgwFoAUrmwFo5MT4qLn4tcc1sfwf8hnU6AwDQYJKoZIhvcNAQEMBQADggIBAIMl7ejR/ZVS zZ7ABKCRaeZc0ITe3K2iT+hHeNZlmKlbqDyHfAKK0W63FnPmX8BUmNV0vsHN4hGRrSMYPd3hckSW tJVewHuOmXgWQxNWV7Oiszu1d9xAcqyj65s1PrEIIaHnxEM3eTK+teecLEy8QymZjjDTrCHg4x36 2AczdlQAIiq5TSAucGja5VP8g1zTnfL/RAxEZvLS471GABptArolXY2hMVHdVEYcTduZlu8aHARc phXveOB5/l3bPqpMVf2aFalv4ab733Aw6cPuQkbtwpMFifp9Y3s/0HGBfADomK4OeDTDJfuvCp8g a907E48SjOJBGkh6c6B3ace2XH+CyB7+WBsoK6hsrV5twAXSe7frgP4lN/4Cm2isQl3D7vXM3PBQ ddI2aZzmewTfbgZptt4KCUhZh+t7FGB6ZKppQ++Rx0zsGN1s71MtjJnhXvJyPs9UyL1n7KQPTEX/ 07kwIwdMjxC/hpbZmVq0mVccpMy7FYlTuiwFD+TEnhmxGDTVTJ267fcfrySVBHioA7vugeXaX3yL SqGQdCWnsz5LyCxWvcfI7zjiXJLwefechLp0LWEBIH5+0fJPB1lfiy1DUutGDJTh9WZHeXfVVFsf rSQ3y0VaTqBESMjYsJnFFYQJ9tZJScBluOYacW6gqPGC6EU+bNYC1wpngwVayaQQMIIGWDCCBECg AwIBAgIMYT8cPnonh1geNIT5MA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNVBAYTAkJFMRkwFwYDVQQK ExBHbG9iYWxTaWduIG52LXNhMSgwJgYDVQQDEx9HbG9iYWxTaWduIEdDQyBSNiBTTUlNRSBDQSAy MDIzMB4XDTI0MTEyODA2NTUwOVoXDTI2MTEyOTA2NTUwOVowgaUxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHEwhTYW4gSm9zZTEZMBcGA1UEYRMQTlRSVVMrREUtNjYx MDExNzEWMBQGA1UEChMNQlJPQURDT00gSU5DLjETMBEGA1UEAxMKWmFjayBSdXNpbjEmMCQGCSqG SIb3DQEJARYXemFjay5ydXNpbkBicm9hZGNvbS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCwQ8KpnuEwUOX0rOrLRj3vS0VImknKwshcmcfA9VtdEQhJHGDQoNjaBEFQHqLqn4Lf hqEGUo+nKhz2uqGl2MtQFb8oG+yJPCFPgeSvbiRxmeOwSP0jrNADVKpYpy4UApPqS+UfVQXKbwbM 6U6qgI8F5eiKsQyE0HgYrQJx/sDs9LLVZlaNiA3U8M8CgEnb8VhuH3BN/yXphhEQdJXb1TyaJA60 SmHcZdEQZbl4EjwUcs3UIowmI/Mhi7ADQB7VNsO/BaOVBEQk53xH+4djY/cg7jvqTTeliY05j2Yx uwwXcDC4mWjGzxAT5DVqC8fKQvon1uc2heorHb555+sLdwYxAgMBAAGjggHYMIIB1DAOBgNVHQ8B Af8EBAMCBaAwgZMGCCsGAQUFBwEBBIGGMIGDMEYGCCsGAQUFBzAChjpodHRwOi8vc2VjdXJlLmds b2JhbHNpZ24uY29tL2NhY2VydC9nc2djY3I2c21pbWVjYTIwMjMuY3J0MDkGCCsGAQUFBzABhi1o dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3I2c21pbWVjYTIwMjMwZQYDVR0gBF4wXDAJ BgdngQwBBQMBMAsGCSsGAQQBoDIBKDBCBgorBgEEAaAyCgMCMDQwMgYIKwYBBQUHAgEWJmh0dHBz Oi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAkGA1UdEwQCMAAwQQYDVR0fBDowODA2 oDSgMoYwaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2djY3I2c21pbWVjYTIwMjMuY3JsMCIG A1UdEQQbMBmBF3phY2sucnVzaW5AYnJvYWRjb20uY29tMBMGA1UdJQQMMAoGCCsGAQUFBwMEMB8G A1UdIwQYMBaAFAApNp5ceroPry1QLdugI4UYsKCSMB0GA1UdDgQWBBQNDn2m/OLuDx9YjEqPLCDB s/VKNTANBgkqhkiG9w0BAQsFAAOCAgEAF463syOLTQkWZmEyyR60W1sM3J1cbnMRrBFUBt3S2NTY SJ2NAvkTAxbPoOhK6IQdaTyrWi8xdg2tftr5FC1bOSUdxudY6dipq2txe7mEoUE6VlpJid/56Mo4 QJRb6YiykQeIfoJiYMKsyuXWsTB1rhQxlxfnaFxi8Xy3+xKAeX68DcsHG3ZU0h1beBURA44tXcz6 fFDNPQ2k6rWDFz+XNN2YOPqfse2wEm3DXpqNT79ycU7Uva7e51b8XdbmJ6XVzUFmWzhjXy5hvV8z iF+DvP+KT1/bjO6aNL2/3PWiy1u6xjnWvobHuAYVrXxQ5wzk8aPOnED9Q8pt2nqk/UIzw2f67Cn9 3CxrVqXUKm93J+rupyKVTGgKO9T1ODVPo665aIbM72RxSI9Wsofatm2fo8DWOkrfs29pYfy6eECl 91qfFMl+IzIVfDgIrEX6gSngJ2ZLaG6L+/iNrUxHxxsaUmyDwBbTfjYwr10H6NKES3JaxVRslnpF 06HTTciJNx2wowbYF1c+BFY4r/19LHygijIVa+hZEgNuMrVLyAamaAKZ1AWxTdv8Q/eeNN3Myq61 b1ykTSPCXjBq/03CMF/wT1wly16jYjLDXZ6II/HYyJt34QeqnBENU9zXTc9RopqcuHD2g+ROT7lI VLi5ffzC8rVliltTltbYPc7F0lAvGKAxggJXMIICUwIBATBiMFIxCzAJBgNVBAYTAkJFMRkwFwYD VQQKExBHbG9iYWxTaWduIG52LXNhMSgwJgYDVQQDEx9HbG9iYWxTaWduIEdDQyBSNiBTTUlNRSBD QSAyMDIzAgxhPxw+eieHWB40hPkwDQYJYIZIAWUDBAIBBQCggccwLwYJKoZIhvcNAQkEMSIEIFR2 Ab0THORq8I+6SFmJEFD2wd76fCMV40zni//sN7cBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw HAYJKoZIhvcNAQkFMQ8XDTI2MDUxNTA1NDkzNFowXAYJKoZIhvcNAQkPMU8wTTALBglghkgBZQME ASowCwYJYIZIAWUDBAEWMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzALBgkqhkiG9w0BAQcwCwYJ YIZIAWUDBAIBMA0GCSqGSIb3DQEBAQUABIIBAAafNDr3OQMGH0m2T9X4tLtJLywR9eATZ0bAgimH qScIWgM/Rad+pudkk2cPQdExyT07KU5reEljWDQNiuXNqU49knlCoZyiwZ6dwcr4YeGGJxQ0uIqK O4WYVxmix9ygAoewWxjGwgFOpnUaQ6H0GMQHrZmr3sarSDhd3JqXTlejdpHt9IeW4e1YdmdBT5Hg 9DNQ0vG4BScmOnARm2FHHLo0sBHxOLzOltHS5m3hP7kK3/geoNYyBWtLb7KoQ+GleyYyC1MLYC9U SbwT4suc6pr6kiJnsAqH1FpcRTrQxUyVgG/i4WHzKGLmiH6laMlQa4UPUxEV+4O37/FPU2moe5o= --0000000000000839a60651d4c7a0--