HP Full Disclosure Story

[full-disclosure () lists netsys com (Tamer Sahin)]

--------------Boundary-00=_452BES6RD91SM3WCPK8M
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

Hello Folks, 
 
In January, have found a security hole in HP AdvanceStack switches. This 
vulnerability affected 8 different swicth models. There had been an 
interesting mail traffic between HP Security Response Team and me. I compiled 
it from my mail archive lastly and I thought that it would take your 
attention. 
 
Best Regards; 
 
Tamer Sahin 
http://www.securityoffice.net
--------------Boundary-00=_452BES6RD91SM3WCPK8M
Content-Type: text/plain;
  charset="iso-8859-1";
  name="hp.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="hp.txt"

KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioKSSBhIHNlbmRpbmcgbXkgZmlyc3Qg
c2VjdXJpdHkgYW5vdW5jZW1lbnQgdG8gc2VjdXJpdHktYWxlcnRAaHAuY29tIGFuZCBpIGFtIHNw
ZWNpZnlpbmcKdGhhdCBpbiBhdCBsZWFzdCA0IGRheXMsIGlmIHRoZXJlIGlzIG5vIHJlc3BvbnNl
LCBpIHdpbGwgcHVibGlzaCB0aGlzIHZ1bG5lcmViaWxpdHkgd2l0aG91dAphbnkgcGF0Y2guICh0
aGlzIHRpbWUgaXMgbGlrZSBhIGxhdyB0aGF0IGlzIG5vdCBydWxlZC4gaW4gInZ1bG5lcmFiaWxp
dHkgZGlzY2xvc3VyZSIgcHJvY2VkdXJlKQoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKgoKPT09PT09PT09PT09PT09PT09PT09PT1TTklQPT09PT09PT09PT09PT09PT09PT09PT09
PT0KRnJvbTogdHNAc2VjdXJpdHlvZmZpY2UubmV0ClRvOiBzZWN1cml0eS1hbGVydEBocC5jb20K
Ckhld2xldHQgUGFja2FyZCBBZHZhbmNlU3RhY2sgU3dpdGNoIE1hbmFnbWVudCBBdXRoZW50aWNh
dGlvbiBCeXBhc3MgVnVsbmVyYWJpbGl0eQoKVHlwZToKQWNjZXNzIFZhbGlkYXRpb24gRXJyb3IK
ClJlbGVhc2UgRGF0ZToKSmFudWFyeSAyOSwgMjAwMgoKUHJvZHVjdCAvIFZlbmRvcjoKSFAgQWR2
YW5jZVN0YWNrIDEwQmFzZS1UIFN3aXRjaGluZyBIdWJzIGNvbWJpbmUgZWNvbm9taWNhbCAxMEJh
c2UtVApmdW5jdGlvbmFsaXR5IHdpdGggdGhlIHBlcmZvcm1hbmNlIG9mIHN3aXRjaGluZy4gRWFj
aCBzd2l0Y2hpbmcgaHViCnN0YXJ0cyBvdXQgYXMgYSBzaW1wbGUsIHNpbmdsZS1zZWdtZW50LCBz
aGFyZWQgMTBCYXNlLVQgaHViLgoKaHR0cDovL3d3dy5ocC5jb20KClN1bW1hcnk6CkEgcHJvYmxl
bSB3aXRoIHRoZSBIUCBzd2l0Y2ggYWxsb3dzIHNvbWUgdXNlcnMgdG8gY2hhbmdlCmNvbmZpZ3Vy
YXRpb24gb2YgdGhlIHN3aXRjaC4gQSBidWcgaW50cm9kdWNlZCBpbiB0aGUgSFAgQWR2YW5jZVN0
YWNrCkozMjEwQSB0aGF0IGNvdWxkIGFsbG93IHVzZXJzIGZ1bGwgYWNjZXNzIG9uIHRoZSBzd2l0
Y2guIFVwb24gdGFraW5nCmFkdmFudGFnZSBvZiB0aGlzIHZ1bG5lcmFiaWxpdHksIHRoZSB1c2Vy
IGNvdWxkIGNoYW5nZSB0aGUKY29uZmlndXJhdGlvbiBvZiB0aGUgc3dpdGNoIGFuZCBjb3VsZCBj
aGFuZ2UgYWRtaW4gcGFzc3dvcmQuCgpUaGVyZWZvcmUsIGl0IGlzIHBvc3NpYmxlIGZvciBhIHN1
cGVydXNlciBwYXNzd29yZCBjaGFuZ2luZyB3aXRoCnVucHJpdmlsZWdlZCBhY2Nlc3Mgb24gdGhl
IHN3aXRjaCB0byBnYWluIGVsZXZhdGVkIHByaXZpbGVnZXMsIGFuZApwb3RlbnRpYWxseSBjaGFu
Z2UgY29uZmlndXJhdGlvbiBvZiB0aGUgc3dpdGNoLgoKQW4gYXR0YWNrZXIgY2FuIGdldCB1bmF1
dGhvcml6ZWQgYWNjZXNzIHRvIHRoZSBzd2l0Y2ggcmVhZC93cml0ZQpwYXNzd29yZCBjaGFuZ2Ug
cGFnZSB0aGlzIHBhZ2UgaHR0cDovL2hvc3Qvc2VjdXJpdHkvd2ViX2FjY2Vzcy5odG1sCmFuZCBj
aGFuZ2Ugc3VwZXJ1c2VyIHBhc3N3b3JkLiBDb25uZWN0IHN1cGVydXNlciBwcml2aWxlZ2VkIHZp
YSBXZWIKb3IgVGVsbmV0LgoKVGVzdGVkOgpIUCBKMzIxMEEgQWR2YW5jZVN0YWNrCgpWdWxuZXJh
YmxlOgpIUCBKMzIxMEEgQWR2YW5jZVN0YWNrCgpQb2xpY3k6ClRoaXMgdnVsbmVyYWJpbGl0eSBp
cyBleHBsYWluZWQgdG8gdGhlIEhQIDxzZWN1cml0eS1hbGVydEBocC5jb20+Cm1haWwgYWRyZXNz
IHZpYSBlbWFpbCBhdCBKYW51YXJ5IDI5LCAyMDAyLiBJdCB3b24ndCBiZSBwdWJsaXNoZWQgdG8K
dGhlIHB1YmxpYyBleWUgYmVmb3JlIEkgcmVjZWl2ZSBhIG1haWwgYWJvdXQgY29ycmVjdGluZyB0
aGlzCnZ1bG5lcmFiaWxpdHkuIEJ1dCBpZiBJIGRvbid0IGdldCBhIHJlcGx5IHdpdGhpbiA0IGRh
eXMsIHRoaXMKc2VjdXJpdHkgbm90aWZpY2F0aW9uIHdpbGwgYmUgYW5ub3VuY2VkIHdpdGhvdXQg
YW55IGluZm9ybWF0aW9uIHRvCkhQLgoKRGlzY2xhaW1lcjoKaHR0cDovL3d3dy5zZWN1cml0eW9m
ZmljZS5uZXQgaXMgbm90IHJlc3BvbnNpYmxlIGZvciB0aGUgbWlzdXNlIG9yCmlsbGVnYWwgdXNl
IG9mIGFueSBvZiB0aGUgaW5mb3JtYXRpb24gYW5kL29yIHRoZSBzb2Z0d2FyZSBsaXN0ZWQgb24K
dGhpcyBzZWN1cml0eSBhZHZpc29yeS4KCkF1dGhvcjoKVGFtZXIgU2FoaW4KdHNAc2VjdXJpdHlv
ZmZpY2UubmV0Cmh0dHA6Ly93d3cuc2VjdXJpdHlvZmZpY2UubmV0CgpUYW1lciBTYWhpbgpodHRw
Oi8vd3d3LnNlY3VyaXR5b2ZmaWNlLm5ldApQR1AgS2V5IElEOiAweDJCNUVEQ0IwIEZpbmdlcnBy
aW50OgpCOTZBIDVERkMgRTBEOSBENjE1IDhEMjggN0ExQiBCQjhCIEE0NTMgMkI1RSBEQ0IwCgo9
PT09PT09PT09PT09PT09PT09PT09PVNOSVA9PT09PT09PT09PT09PT09PT09PT09PT09PQoKKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKgpUaGVpciByZXNwb25z
ZTogdGhleSB3YW50ZWQgdGltZSBvdmVyIDQgZGF5cwoqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqCgo9PT09PT09PT09PT09PT09PT09PT09PVNOSVA9PT09PT09
PT09PT09PT09PT09PT09PT09PQpGcm9tOiBzZWN1cml0eS1hbGVydEBocC5jb20KVG86IHRzQHNl
Y3VyaXR5b2ZmaWNlLm5ldAoKSGVsbG8gVGFtZXIsCgpUaGFua3MgZm9yIHRoZSBub3RpZmljYXRp
b24uICBXZSBhcmUgaW52ZXN0aWdhdGluZyB0aGUgaXNzdWUgbm93LgpIb3BlZnVsbHkgdGhpcyBt
ZXNzYWdlIGlzIHRoZSByZXNwb25zZSB5b3Ugd2VyZSBsb29raW5nIGZvciBieQp0aGUgZm91ciBk
YXkgZGVhZGxpbmUuCgpJZiB5b3UgbmVlZCB0byBlLW1haWwgbW9yZSBkZXRhaWxzIHBsZWFzZSB1
c2UgdGhlCnNlY3VyaXR5LWFsZXJ0IFBHUCBrZXksIGF2YWlsYWJsZSBmcm9tIHlvdXIgbG9jYWwg
a2V5CnNlcnZlciwgb3IgYnkgc2VuZGluZyBhIG1lc3NhZ2Ugd2l0aCBhIC1zdWJqZWN0LSAobm90
IGJvZHkpCm9mICdnZXQga2V5JyAobm8gcXVvdGVzKSB0byBzZWN1cml0eS1hbGVydEBocC5jb20u
CgoKWW91cnMgdHJ1bHksCkpvaG4KKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioKKiBKb2huIE1vcnJpcyAgSFAgU2VjdXJpdHkgVGVhbSAt
IFgxMSBhbmQgR3JhcGhpY3MgICAgICAgICoKKiBBdGxhbnRhICg0MDQpIDY0OC0yMTg1ICAgICAg
ZS1tYWlsOiBqb2huX21vcnJpc0BocC5jb20gKgoqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKgo9PT09PT09PT09PT09PT09PT09PT09PVNO
SVA9PT09PT09PT09PT09PT09PT09PT09PT09PQoKKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqCkFuZCBhIHdlZWsgcGFz
c2VzIGFuZCB0aGVyZSBpcyBubyByZXNwb25zZSBmcm9tIEhQIFNFQ1VSSVRZIFJFU1BPTlNFIFRF
QU0uCkkgc2VuZCBhIG1haWwgYW5kIGkgc2F5IHRoZW0gdGhhdCB0aGUgdGltZSBwYXNzZXMgb3Zl
ciBhbmQKaWYgdGhleSBkbyBub3QgcHVibGlzaCBhIHBhdGNoIGkgd2lsbCBwdWJsaXNoIHRoZSBo
b2xlIGluIHRoZSBzZWN1cml0eQptYWlsaW5nIGxpc3RzLiBVcG9uIHRoaXMsIHRoZSBvcHBvc2l0
ZSBzaXRlIHVuZGVyc3RhbmRzIHRoaXMgbWFpbCBhcyBhCnRocmVhdCB3aXRoIG5vIG1lYW5pbmcu
QW5kIHJlc3BvbmRzIG1lIHdpdGggbm9uc2Vuc2Ugc3R5bGUuIHdpdGggd29yZHMgc3VjaDsKd2Ug
YXJlIDUwIGJpbGxpb24gZG9sbGFyZWQgY29tcGFueS4uLmV0Yy4uLiAoSSBjb3VsZCBub3QgZmlu
ZCB0aGUgbWFpbCB0aGF0CmkgaGF2ZSB3cml0dGVuIGFib3V0ICI0IGRheSB0aW1lIiBpbiBteSBt
YWlsIGFyY2hpZXZlLHNvIGkgY291bGQgbm90IHBhc3RlIGl0IGhlcmUpCioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioK
Cj09PT09PT09PT09PT09PT09PT09PT09U05JUD09PT09PT09PT09PT09PT09PT09PT09PT09CkZy
b206IHNlY3VyaXR5LWFsZXJ0QGhwLmNvbQpUbzogdHNAc2VjdXJpdHlvZmZpY2UubmV0CgpJTVBP
UlRBTlQgLSBQTEVBU0UgUkVBRDoKVGhpcyBlLW1haWwgbWVzc2FnZSBhbmQgYW55IGZpbGVzIHRy
YW5zbWl0dGVkIHdpdGgKaXQgYXJlIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZSBh
bmQgYXJlCmNvbmZpZGVudGlhbC4gQ29weXJpZ2h0IGluIHRoZW0gaXMgcmVzZXJ2ZWQgYnkKZGFu
X2dyb3ZlQGhwLmNvbSwgYW5kIHlvdSBtYXkgbm90IGNvcHksIHB1Ymxpc2gKb3IgdXNlIHRoZW0g
aW4gYW55IHdheSB3aXRob3V0IHBncCBzaWduZWQgcGVybWlzc2lvbgpmcm9tIGRhbl9ncm92ZUBo
cC5jb20uCgpIaSBUYW1lciwKCkknbSBzb3JyeSB0byBzZWUgdGhlIHRocmVhdGVuaW5nIHRvbmUg
aW4geW91ciBtZXNzYWdlLgoKV2UgZGlkIHJlcGx5LCBhbmQgeW91IGFyZSBtYWtpbmcgdGhlIGFz
c3VtcHRpb24gdGhhdCB5b3VyCmlzc3VlIGlzIHRoZSBvbmx5IG9uZSB3ZSBoYXZlIHRvIHdvcmsg
b24sIGFuZCB0aGF0IGl0IGlzCnRoZSBtb3N0IGltcG9ydGFudC4KClJlZ2FyZGxlc3MsIHdlIGRv
IG5vdCByZXNwb25kIHRvIHRocmVhdHMgb2YgcHVibGlzaGluZwpleHBsb2l0cywgYW5kIHdlIGRv
IG5vdCBnaXZlIG91dCBhZHZhbmNlIHBhdGNoIGNvZGUgdW5sZXNzCndlIG5lZWQgaXQgdG8gYmUg
YmV0YSB0ZXN0ZWQsIHdoaWNoIGlzIHJhcmUuIFdlIHdvcmsgb24gdGhlCmlzc3VlcyBiYXNlZCBv
biB0aGVpciBzZXZlcml0eSBpbiByZWxhdGlvbiB0byB0aGUgb3RoZXIgaXNzdWVzLAphbmQgaW4g
bW9zdCBjYXNlcyBwdWJsaXNoIGFuIEhQIFNlY3VyaXR5IEJ1bGxldGluIHdoZW4gdGhlCnRlc3Rl
ZCBzb2x1dGlvbiBpcyByZWFkeSBmb3IgY3VzdG9tZXJzIHRvIHVzZS4KCkxldCBtZSBiZSB2ZXJ5
IGNhbmRpZCBoZXJlLCB5b3UgYXJlIG5vdCB0aGUgZmlyc3QgdG8gYXNzdW1lCnRoYXQgYSAkNTAg
YmlsbGlvbiBjb3Jwb3JhdGlvbiB3aWxsIGRyb3AgYWxsIHRoZSBvdGhlciBzZWN1cml0eQppc3N1
ZXMgd2UgYXJlIHdvcmtpbmcgb24gaW4gb3JkZXIgdG8gd29yayBvbiB5b3VycyBiZWNhdXNlCnlv
dSB0aHJlYXRlbiB0byBwdWJsaXNoLiBJdCBoYXMgbmV2ZXIgY2hhbmdlZCB0aGUgY291cnNlIG9m
Cm91ciB3b3JrIGludGVybmFsbHk7IHdlIHdpbGwgY29udGludWUgdG8gd29yayBvbiB0aGUgaXNz
dWUKdW50aWwgaXQgaXMgdGVzdGVkIGFuZCBmaW5pc2hlZC4KCklmIHlvdSBkZWNpZGUgbm90IHRv
IHB1Ymxpc2gsIHdlIHdvdWxkIGFwcHJlY2lhdGUgaXQuIElmIHlvdSBkbwpwdWJsaXNoIHRoZW4s
IHdvcnN0IGNhc2UsIGFsbCB0aGF0IHdpbGwgYmUgYWNjb21wbGlzaGVkIGlzCnRoYXQgeW91IG1h
eSBjYXVzZSBhIGJ1c2luZXNzIHNvbWV3aGVyZSB0byBiZSBjb21wcm9taXNlZCwKYW5kIHRoZXkg
bWF5IHR1cm4gdG8geW91IG9yIHlvdXIgY29tcGFueSBmb3IgY29tcGVuc2F0aW9uIGZvcgp0aGVp
ciBmaW5hbmNpYWwgbG9zc2VzLiBJbiB0aGUgYmVzdCBjYXNlLCBkdWUgdG8gU2VwdGVtYmVyIDEx
LCAyMDAxLAp5b3UgbWF5IGVuZCB1cCBvbiB2YXJpb3VzIGdvdmVybm1lbnQgYWdlbmNpZXMnICJ3
YXRjaCBsaXN0cywiCmFuZCB5b3VyIHBvdGVudGlhbCBjYXJlZXIgaW4gdGhlIGNvbXB1dGVyIGJ1
c2luZXNzIG1heSBiZQphbHRlcmVkIGluIHdheXMgeW91IGRpZCBub3QgaW50ZW5kLgoKVGhlIGNo
b2ljZSBpcyB5b3Vycy4gV2UgYXJlIGRvaW5nIG91ciBqb2IgZXRoaWNhbGx5IGluIHNvbHZpbmcg
dGhlCmlzc3VlLiBBcmUgeW91IGRvaW5nIHlvdXJzIHRvIHByb3RlY3QgYnVzaW5lc3NlcyB3b3Js
ZHdpZGU/CgpfX19fX19fX19fX19fX19EYW4gR3JvdmVfX19fX19fX19fX19fXwpfX19IUCBTL1cg
U2VjdXJpdHkgVGVhbSBDb29yZGluYXRvcl9fXwpfX1dvcmxkd2lkZSBUZWNobm9sb2d5IEV4cGVy
dCBDZW50ZXJfXwpfX19fX19fSGV3bGV0dC1QYWNrYXJkIENvbXBhbnlfX19fX19fXwpfX19fX19f
X19fX2Rhbl9ncm92ZUBocC5jb21fX19fX19fX19fXwpfX19fX19JbiBDeWJlcnNwYWNlLCBiZSBh
ZnJhaWQsX19fX19fXwpfX19fX19fX19fIGJlIHZlcnkgYWZyYWlkISJfX19fX19fX19fXwpfX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpfX1JlYWNoIHVzIGF0OgogPG1haWx0
bzpzZWN1cml0eS1hbGVydEBocC5jb20+Cj09PT09PT09PT09PT09PT09PT09PT09U05JUD09PT09
PT09PT09PT09PT09PT09PT09PT09CgoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioKTGF0ZXIsIGhlcmUgaXMgbXkgYW5zd2VyIHRvIHRoZSBTZWN1cml0
eSBDaGllZiB3aG8KZm91bmQgbXkgbWFpbCBzbyB0aHJlYXRlbmluZy4uCioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKgoKPT09PT09PT09PT09PT09PT09
PT09PT1TTklQPT09PT09PT09PT09PT09PT09PT09PT09PT0KRnJvbTogIHRzQHNlY3VyaXR5b2Zm
aWNlLm5ldApUbzogc2VjdXJpdHktYWxlcnRAaHAuY29tCgpIaSBEYW4sCgpGaXJzdCBvZiBhbGwg
SSBjb3VsZG4ndCB1bmRlcnN0YW5kIHlvdXIgdGhyZWF0ZW5pbmcgYXR0aXR1ZGUuIFRoZQpyZWFz
b24gZm9yIG15IGVhcmxpZXIgbWFpbCB3YXMgdGFraW5nIGluZm9ybWF0aW9uIGFib3V0IGEgc3Vi
amVjdC4KQW5kIHlvdSBhcmUgaW4gYSBjb21wbGV0ZWx5IHRocmVhdGVuaW5nIG1hbm5lci4gSSB3
b3VsZCBoYXZlCnB1Ymxpc2hlZCB0aGlzIGFub3VuY2VtZW50IHdpdGhvdXQgd2FpdGluZyBmb3Ig
eW91ciBwYXRjaCB0byBiZQpyZWxlYXNlZCwgaWYgSSB3aXNoZWQuLi4gQnV0IGlmIHlvdSBhcmUg
aGlkaW5nIGJlaGluZCB5b3VyIGJpZwpjb3Jwb3JhdGlvbiBhbmQgdGhyZWF0ZW5pbmcgbWUsIHRo
aXMgaXMgcmVhbGx5IHJpZGljdWxvdXMgYW5kIHRob3VnaHQKcHJvdm9raW5nLi4uCgpJIHdvbid0
IHB1Ymxpc2ggdGhpcyBhbm91bmNlbWVudCBhbmQgd2FpdGluZyByZXBseSBmb3IgeW91ciBzb2x1
dGlvbgpvciBhIHBhdGNoLgoKV2UgaGF2ZSBwdWJsaXNoZWQgc2V2ZXJhbCBhbm91bmNlbWVudHMg
YmVmb3JlIGZvciBjb21wYW5pZXMgbGlrZQpNaWNyb3NvZnQgYW5kIEFPTC4gQnV0IGFzIGJpZyBh
cyB5b3VyIGNvbXBhbnkncywgSFAsIHJlcGx5IHRvIHRoaXMKY2FzZSB0YXVnaHQgbWUgaG93IEhQ
IGFwcHJvYWNoZXMgZGVmb3JtZWQuLi4KClRhbWVyIFNhaGluCmh0dHA6Ly93d3cuc2VjdXJpdHlv
ZmZpY2UubmV0ClBHUCBLZXkgSUQ6IDB4MkI1RURDQjAgRmluZ2VycHJpbnQ6CkI5NkEgNURGQyBF
MEQ5IEQ2MTUgOEQyOCA3QTFCIEJCOEIgQTQ1MyAyQjVFIERDQjAKPT09PT09PT09PT09PT09PT09
PT09PT1TTklQPT09PT09PT09PT09PT09PT09PT09PT09PT0KCioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioKTGF0ZXIsIHRoZSBtYW4gZ2V0cyBtb3Jl
IGFnZ3Jlc3NpdmUgYW5kICB0cmllcyB0byBmcmlnaHRlbgptZSBtZWFuaW5nIHRoYXQgaSBjb3Vs
ZCBiZSBpbiB0aGUgYmxhY2tsaXN0IG9mIFVTQSBhZnRlciAxMQpTZXB0ZW1iZXIganVzdCBiZWNh
dXNlIHRvIGtlZXAgbWUgYXdheSBmcm9tIHB1Ymxpc2hpbmcgdGhlCnNlY3VyaXR5IGFub3VuY2Vt
ZW50IGFib3V0IEhQLgoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqCgo9PT09PT09PT09PT09PT09PT09PT09PVNOSVA9PT09PT09PT09PT09PT09PT09
PT09PT09PQpGcm9tOiBzZWN1cml0eS1hbGVydEBocC5jb20KVG86IHRzQHNlY3VyaXR5b2ZmaWNl
Lm5ldAoKSGkgVGFtZXIsCgpJJ20gc29ycnkgeW91IHBlcmNlaXZlZCBteSBwcmV2aW91cyBtZXNz
YWdlIGFzIHRocmVhdGVuaW5nLgpUaGF0IGlzIG5vdCB0aGUgY2FzZSAtIHdlIGFyZSBub3QgdGhy
ZWF0ZW5pbmcsIGJ1dCBzaW1wbHkKc2V0dGluZyBleHBlY3RhdGlvbnMgdGhhdCB3ZSBkb24ndCBy
ZXNwb25kIHRvIHRocmVhdHMgb2YKcHVibGlzaGluZywgYW5kIGJlY2F1c2UgdGhlIGNsaW1hdGUg
Zm9yIHNlY3VyaXR5IGluIGdlbmVyYWwKaGFzIGNoYW5nZWQgaW4gdGhlIFVTQSBhZnRlciBTZXB0
ZW1iZXIgMTEsIDIwMDEsIHdlIGFyZQpzZXR0aW5nIGV4cGVjdGF0aW9ucyBmb3IgdGhlIHBvc3Np
YmxlIHJlc3VsdHMgZm9yIHlvdSBpZgp5b3UgZG8gcHVibGlzaC4gV2hlbiB3ZSBkZWFsIHdpdGgg
cmVzcG9uc2libGUgc2VjdXJpdHkgdGVhbXMsCnRoZXkgZG8gbm90IHNlbmQgZGF0ZWQgZHJhZnQg
Y29waWVzIG9mIHdoYXQgdGhleSBhcmUgZ29pbmcgdG8KcHVibGlzaCwgd2hpY2ggd291bGQgc2Vl
bSB0byBpbmRpY2F0ZSB0aGF0IHRoZXkgaW50ZW5kIHRvCnB1Ymxpc2ggb24gdGhhdCBkYXRlLgoK
SSBhbSBnbGFkIHlvdSBhcmUgbm90IHB1Ymxpc2hpbmcsIGJ1dCB0byBmdXJ0aGVyIHNldCBleHBl
Y3RhdGlvbnMsCndlIGRvIG5vdCBkaXNjdXNzIGFueXRoaW5nIHdpdGggdGhlIHN1Ym1pdHRlciAo
ZGF0ZXMgZm9yCnBhdGNoZXMsIHRpbWVsaW5lcywgb3VyIHNvbHV0aW9uLCBldGMuLi4pIGV4Y2Vw
dCBpZiB3ZSBoYXZlCmZ1cnRoZXIgdGVjaG5pY2FsIHF1ZXN0aW9ucyB0byBoZWxwIHVzIHVuZGVy
c3RhbmQgdGhlIHByb2JsZW0uCgpXZSBhcHByZWNpYXRlIHlvdSByYWlzaW5nIHRoZSBpc3N1ZSwg
YW5kIHdpbGwgYmUgaGFwcHkgdG8gd29yawp3aXRoIHlvdSBpZiBuZWVkZWQgb24gdGhpcyBpc3N1
ZSwgYnV0IHdlIHdpbGwgbm90IHJlc3BvbmQgdG8KcHVibGlzaGluZyB0aHJlYXRzIHRoYXQgcHV0
IG91ciBjdXN0b21lciBiYXNlIGF0IHJpc2suCgpJIGFtIGN1cnJlbnRseSBvdXQgb2YgbXkgb2Zm
aWNlIHVudGlsIEZlYnJ1YXJ5IDExdGgsIGFuZCBjYW4Kb25seSBnZXQgb24gbGluZSByYW5kb21s
eSBhcyBJJ20gdHJhdmVsaW5nIGluIHRoZSB3ZXN0ZXJuIFVTQS4KU28gcGxlYXNlIHNlbmQgYWxs
IGNvbW11bmljYXRpb24gdG8gc2VjdXJ0aXktYWxlcnRAaHAuY29tCnNvIHRoYXQgdGhlIHRlYW0g
aW4gdGhlIG9mZmljZSBzZWVzIHRoZSBlbWFpbHMgYW5kIGNhbiByZXNwb25kLgoKX19fX19fX19f
X19fX19fRGFuIEdyb3ZlX19fX19fX19fX19fX18KX19fTWVtYmVyIEJvYXJkIG9mIERpcmVjdG9y
cyBGSVJTVF9fX18KX19fTWVtYmVyIFN0ZWVyaW5nIENvbW1pdHRlZSBGSVJTVF9fX18KX19fX0No
aWVmIEZpbmFuY2lhbCBPZmZpY2VyIEZJUlNUX19fX18KX19fX19fXyBodHRwOi8vd3d3LmZpcnN0
Lm9yZyBfX19fX19fX18KX19fSFAgUy9XIFNlY3VyaXR5IFRlYW0gQ29vcmRpbmF0b3JfX18KX19X
b3JsZHdpZGUgVGVjaG5vbG9neSBFeHBlcnQgQ2VudGVyX18KX19fX19fX0hld2xldHQtUGFja2Fy
ZCBDb21wYW55X19fX19fX18KX19fX19fX19fX19kYW5fZ3JvdmVAaHAuY29tX19fX19fX19fX18K
X19fX19fNjUwLTY5MS04NjExICh0ZWxlY29tbXV0ZXIpX19fX18KX19fX19fSW4gQ3liZXJzcGFj
ZSwgYmUgYWZyYWlkLF9fX19fX18KX19fX19fX19fXyBiZSB2ZXJ5IGFmcmFpZCEiX19fX19fX19f
X18KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KX19SZWFjaCB1cyBhdCBz
ZWN1cml0eS1hbGVydEBocC5jb21fX18KPT09PT09PT09PT09PT09PT09PT09PT1TTklQPT09PT09
PT09PT09PT09PT09PT09PT09PT0KCioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioqKioqKioqKioqKioqKioqCkp1c3QgYWZ0ZXIgdGhpcyBtYWlsIGkgcHVibGlzaGVkIHRoZSBz
ZWN1cml0eSBhbGVydCBvbgpteSBzaXRlIGFuZCBvdGhlciBzZWN1aXR5IHNpdGVzLiBhbmQgaW5z
dGFudGFuZW91c2x5LAphZnRlciAyIGRheXMsIHRoZXkgcHVzbGlzaGVkIHRoZSBzZWN1cml0eSBh
bm91bmNlbWVudC4KVGhhdCBpcyB0byBzYXksIHRoZXkgY2FuIGJlIHNvIGZhc3QgaWYgdGhleSB3
YW50ISEKKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq
KioKCj09PT09PT09PT09PT09PT09PT09PT09U05JUD09PT09PT09PT09PT09PT09PT09PT09PT09
CkZyb206IHNlY3VyaXR5LWFsZXJ0QGhwLmNvbQpUbzogdHNAc2VjdXJpdHlvZmZpY2UubmV0CgpI
UFNCVVgwMjAyLTE4NTogU2VjLiBWdWxuZXJhYmlsaXR5IHdpdGggSFAgQWR2YW5jZVN0YWNrIGh1
YnMKUHVibGlzaGVkOiBGZWIgMTIsIDIwMDIKVXBkYXRlZDogRmViIDEyLCAyMDAyCgpEb2N1bWVu
dCBJRDogIEhQU0JVWDAyMDItMTg1CkRhdGUgTG9hZGVkOiAgMjAwMjAyMTIKVGl0bGU6ICBTZWMu
IFZ1bG5lcmFiaWxpdHkgd2l0aCBIUCBBZHZhbmNlU3RhY2sgaHVicwoKLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KSEVXTEVU
VC1QQUNLQVJEIENPTVBBTlkgU0VDVVJJVFkgQURWSVNPUlk6ICMwMTg1LApPcmlnaW5hbGx5IGlz
c3VlZDogMTIgRmViLiAyMDAyCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCgpUaGUgaW5mb3JtYXRpb24gaW4gdGhlIGZvbGxv
d2luZyBTZWN1cml0eSBBZHZpc29yeSBzaG91bGQgYmUgYWN0ZWQKdXBvbiBhcyBzb29uIGFzIHBv
c3NpYmxlLiAgSGV3bGV0dC1QYWNrYXJkIENvbXBhbnkgd2lsbCBub3QgYmUKbGlhYmxlIGZvciBh
bnkgY29uc2VxdWVuY2VzIHRvIGFueSBjdXN0b21lciByZXN1bHRpbmcgZnJvbSBjdXN0b21lcidz
CmZhaWx1cmUgdG8gZnVsbHkgaW1wbGVtZW50IGluc3RydWN0aW9ucyBpbiB0aGlzIFNlY3VyaXR5
IEFkdmlzb3J5IGFzCnNvb24gYXMgcG9zc2libGUuCgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KUFJPQkxFTTogIFNlY3Vy
aXR5IHZ1bG5lcmFiaWxpdHkgd2hlbiBtYW5hZ2luZyBIUCBTd2l0Y2hpbmcKSHVicyB3aXRoIGEg
d2ViIGJyb3dzZXIuCgpQTEFURk9STTogSFAgQWR2YW5jZVN0YWNrIEozMjAwQSwgSjMyMDFBLCBK
MzIwMkEsIEozMjAzQSwgSjMyMDRBLApKMzIwNUEsIEozMjEwQSB3aXRoIGZpcm13YXJlIHZlcnNp
b24gQS4wMy4wMi4KCkRBTUFHRTogICBHYWluIGVsZXZhdGVkIHByaXZpbGVnZXMKClNPTFVUSU9O
OiBVbnRpbCBhIGZpeCBpcyBhdmFpbGFibGUsIHdvcmsgYXJvdW5kIHRoZSBwcm9ibGVtIGFzCmRv
Y3VtZW50ZWQgYmVsb3cuCgpNQU5VQUwgQUNUSU9OUzogRGlzYWJsZSB3ZWIgYWNjZXNzIG9yIHJl
bW92ZSB0aGUgbWFuYWdlbWVudCBJUAphZGRyZXNzLgoKQVZBSUxBQklMSVRZOiAgVGhpcyBhZHZp
c29yeSB3aWxsIGJlIHVwZGF0ZWQgd2hlbiBhIGZpeCBpcwphdmFpbGFibGUuCgogLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
CkEuIEJhY2tncm91bmQKVGhlIGZvbGxvd2luZyBhcmUgdnVsbmVyYWJsZToKCkozMjEwQSAtLSBI
UCBBZHZhbmNlU3RhY2sgMTBCVCBNYW5hZ2VtZW50IFBhY2sgTW9kdWxlIGZvciB1c2UKd2l0aCBI
UCBBZHZhbmNlU3RhY2sgU3dpdGNoaW5nIEh1YnMKSjMyMDBBIC0tIEhQIEFkdmFuY2VzdGFjayAx
MEJhc2UtVCBTIEh1Yi0xMlIqCkozMjAxQSAtLSBIUCBBZHZhbmNlU3RhY2sgMTBCVC1TIEh1Yi0x
MlIgdy9NZ210CkozMjAyQSAtLSBIUCBBZHZhbmNlU3RhY2sgMTBCYXNlLVQgUyBIdWItMjRSKgpK
MzIwM0EgLS0gSFAgQWR2YW5jZVN0YWNrIDEwQlQtUyBIdWItMjRSIHcvTWdtdApKMzIwNEEgLS0g
SFAgQWR2YW5jZVN0YWNrIDEwQmFzZS1UIFMgSHViLTI0VCoKSjMyMDVBIC0tIEhQIEFkdmFuY2VT
dGFjayAxMEJULVMgSHViLTI0VCB3L01nbXQKKiBUaGlzIHByb2R1Y3QgaXMgbm90IGFmZmVjdGVk
IHVubGVzcyBKMzIxMEEgaXMgaW5zdGFsbGVkIHdpdGhpbi4KClRoZSB2dWxuZXJhYmxlIGZpcm13
YXJlIHZlcnNpb24gaXMgQS4wMy4wMi4KCkIuIEZpeGluZyB0aGUgcHJvYmxlbQpUaGVyZSBhcmUg
dHdvIHdheXMgdG8gd29yayBhcm91bmQgdGhlIHByb2JsZW06CgoxLiBEaXNhYmxlIHdlYiBhY2Nl
c3MgdXNpbmcgdGVsbmV0IG9yIFJTLTIzMiBpbnRlcmZhY2UKYS4gVGVsbmV0IG9yIGNvbnNvbGUg
aW50byBzd2l0Y2gKYi4gVHlwZSAibWUiIGZvciBtZW51CmMuIEhpdCAiMiIgZm9yIE1hbmFnZW1l
bnQgQWNjZXNzIENvbmZpZ3VyYXRpb24KZC4gSGl0ICI2IiBmb3IgV2ViIGVuYWJsZS9kaXNhYmxl
ICh2ZXJpZnkgaXQgaXMgZGlzYWJsZWQpCgoyLiBSZW1vdmUgdGhlIG1hbmFnZW1lbnQgSVAgYWRk
cmVzcwphLiBUZWxuZXQgb3IgY29uc29sZSBpbnRvIHN3aXRjaApiLiBUeXBlICJtZSIgZm9yIG1l
bnUKYy4gSGl0ICIyIiBmb3IgTWFuYWdlbWVudCBBY2Nlc3MgQ29uZmlndXJhdGlvbgpkLiBIaXQg
IjEiIGZvciBJUCBDb25maWd1cmF0aW9uCmUuIEhpdCAiWSIgdG8gQ2hhbmdlIHRoZSBJUCBjb25m
aWd1cmF0aW9uCmYuIENob29zZSAiRCIgdG8gZGlzYWJsZSBzZWdtZW50CmcuIENob29zZSAiRCIg
dG8gRGlzYWJsZSAoYW5kIHZlcmlmeSBpdCBpcyBkaXNhYmxlZCkKKFJlcGVhdCBGICYgRyBmb3Ig
ZWFjaCBJUCBhc3NpZ25lZC1zZWdtZW50IGFzIG5lY2Vzc2FyeS4pCgpOT1RFISBEaXNhYmxpbmcg
SVAgd2hpbGUgY29ubmVjdGVkIHZpYSB0ZWxuZXQgd2lsbCBkaXNjb25uZWN0CnlvdXIgc2Vzc2lv
bi4KCkMuIFJlY29tbWVuZGVkIHNvbHV0aW9uClVudGlsIGEgZml4IGlzIGF2YWlsYWJsZSB3b3Jr
IGFyb3VuZCB0aGUgcHJvYmxlbSBieSBlaXRoZXIKZGlzYWJsaW5nIHdlYiBhY2Nlc3Mgb3IgcmVt
b3ZpbmcgdGhlIG1hbmFnZW1lbnQgSVAgYWRkcmVzcy4KCgpELiBUbyBzdWJzY3JpYmUgdG8gYXV0
b21hdGljYWxseSByZWNlaXZlIGZ1dHVyZSBORVcgSFAgU2VjdXJpdHkKQnVsbGV0aW5zIGZyb20g
dGhlIEhQIElUIFJlc291cmNlIENlbnRlciB2aWEgZWxlY3Ryb25pYwptYWlsLCBkbyB0aGUgZm9s
bG93aW5nOgoKVXNlIHlvdXIgYnJvd3NlciB0byBnZXQgdG8gdGhlIEhQIElUIFJlc291cmNlIENl
bnRlciBwYWdlIGF0OgoKaHR0cDovL2l0cmMuaHAuY29tCgpVc2UgdGhlICdMb2dpbicgdGFiIGF0
IHRoZSBsZWZ0IHNpZGUgb2YgdGhlIHNjcmVlbiB0byBsb2dpbgp1c2luZyB5b3VyIElEIGFuZCBw
YXNzd29yZC4gIFVzZSB5b3VyIGV4aXN0aW5nIGxvZ2luIG9yIHRoZQoiUmVnaXN0ZXIiIGJ1dHRv
biBhdCB0aGUgbGVmdCB0byBjcmVhdGUgYSBsb2dpbiwgaW4gb3JkZXIgdG8KZ2FpbiBhY2Nlc3Mg
dG8gbWFueSBhcmVhcyBvZiB0aGUgSVRSQy4gIFJlbWVtYmVyIHRvIHNhdmUgdGhlClVzZXIgSUQg
YXNzaWduZWQgdG8geW91LCBhbmQgeW91ciBwYXNzd29yZC4KCkluIHRoZSBsZWZ0IG1vc3QgZnJh
bWUgc2VsZWN0ICJNYWludGVuYW5jZSBhbmQgU3VwcG9ydCIuCgpVbmRlciB0aGUgIk5vdGlmaWNh
dGlvbnMiIHNlY3Rpb24gKG5lYXIgdGhlIGJvdHRvbSBvZgp0aGUgcGFnZSksIHNlbGVjdCAiU3Vw
cG9ydCBJbmZvcm1hdGlvbiBEaWdlc3RzIi4KClRvIC1zdWJzY3JpYmUtIHRvIGZ1dHVyZSBIUCBT
ZWN1cml0eSBCdWxsZXRpbnMgb3Igb3RoZXIKVGVjaG5pY2FsIERpZ2VzdHMsIGNsaWNrIHRoZSBj
aGVjayBib3ggKGluIHRoZSBsZWZ0IGNvbHVtbikKZm9yIHRoZSBhcHByb3ByaWF0ZSBkaWdlc3Qg
YW5kIHRoZW4gY2xpY2sgdGhlICJVcGRhdGUKU3Vic2NyaXB0aW9ucyIgYnV0dG9uIGF0IHRoZSBi
b3R0b20gb2YgdGhlIHBhZ2UuCgpvcgoKVG8gLXJldmlldy0gYnVsbGV0aW5zIGFscmVhZHkgcmVs
ZWFzZWQsIHNlbGVjdCB0aGUgbGluawooaW4gdGhlIG1pZGRsZSBjb2x1bW4pIGZvciB0aGUgYXBw
cm9wcmlhdGUgZGlnZXN0LgoKVG8gLWdhaW4gYWNjZXNzLSB0byB0aGUgU2VjdXJpdHkgUGF0Y2gg
TWF0cml4LCBzZWxlY3QKdGhlIGxpbmsgZm9yICJUaGUgU2VjdXJpdHkgQnVsbGV0aW5zIEFyY2hp
dmUiLiAgKG5lYXIgdGhlCmJvdHRvbSBvZiB0aGUgcGFnZSkgIE9uY2UgaW4gdGhlIGFyY2hpdmUg
dGhlIHRoaXJkIGxpbmsgaXMKdG8gdGhlIGN1cnJlbnQgU2VjdXJpdHkgUGF0Y2ggTWF0cml4LiBV
cGRhdGVkIGRhaWx5LCB0aGlzCm1hdHJpeCBjYXRlZ29yaXplcyBzZWN1cml0eSBwYXRjaGVzIGJ5
IHBsYXRmb3JtL09TIHJlbGVhc2UsCmFuZCBieSBidWxsZXRpbiB0b3BpYy4gIFNlY3VyaXR5IFBh
dGNoIENoZWNrIGNvbXBsZXRlbHkKYXV0b21hdGVzIHRoZSBwcm9jZXNzIG9mIHJldmlld2luZyB0
aGUgcGF0Y2ggbWF0cml4IGZvcgoxMS5YWCBzeXN0ZW1zLgoKRm9yIGluZm9ybWF0aW9uIG9uIHRo
ZSBTZWN1cml0eSBQYXRjaCBDaGVjayB0b29sLCBzZWU6Cmh0dHA6Ly93d3cuc29mdHdhcmUuaHAu
Y29tL2NnaS1iaW4vc3dkZXBvdF9wYXJzZXIuY2dpL2NnaS8KZGlzcGxheVByb2R1Y3RJbmZvLnBs
P3Byb2R1Y3ROdW1iZXI9QjY4MzRBQSIKClRoZSBzZWN1cml0eSBwYXRjaCBtYXRyaXggaXMgYWxz
byBhdmFpbGFibGUgdmlhIGFub255bW91cyBmdHA6CgpmdHAuaXRyYy5ocC5jb206fmZ0cC9leHBv
cnQvcGF0Y2hlcy9ocC11eF9wYXRjaF9tYXRyaXgKCk9uIHRoZSAiU3VwcG9ydCBJbmZvcm1hdGlv
biBEaWdlc3QgTWFpbiIgcGFnZToKY2xpY2sgb24gdGhlICJIUCBTZWN1cml0eSBCdWxsZXRpbiBB
cmNoaXZlIi4KCgpUbyByZXBvcnQgbmV3IHNlY3VyaXR5IHZ1bG5lcmFiaWxpdGllcywgc2VuZCBl
bWFpbCB0bwoKc2VjdXJpdHktYWxlcnRAaHAuY29tCgpQbGVhc2UgZW5jcnlwdCBhbnkgZXhwbG9p
dCBpbmZvcm1hdGlvbiB1c2luZyB0aGUKc2VjdXJpdHktYWxlcnQgUEdQIGtleSwgYXZhaWxhYmxl
IGZyb20geW91ciBsb2NhbCBrZXkKc2VydmVyLCBvciBieSBzZW5kaW5nIGEgbWVzc2FnZSB3aXRo
IGEgLXN1YmplY3QtIChub3QgYm9keSkKb2YgJ2dldCBrZXknIChubyBxdW90ZXMpIHRvIHNlY3Vy
aXR5LWFsZXJ0QGhwLmNvbS4KUGVybWlzc2lvbiBpcyBncmFudGVkIGZvciBjb3B5aW5nIGFuZCBj
aXJjdWxhdGluZyB0aGlzCkFkdmlzb3J5IHRvIEhld2xldHQtUGFja2FyZCAoSFApIGN1c3RvbWVy
cyAob3IgdGhlIEludGVybmV0CmNvbW11bml0eSkgZm9yIHRoZSBwdXJwb3NlIG9mIGFsZXJ0aW5n
IHRoZW0gdG8gcHJvYmxlbXMsCmlmIGFuZCBvbmx5IGlmLCB0aGUgQWR2aXNvcnkgaXMgbm90IGVk
aXRlZCBvciBjaGFuZ2VkIGluCmFueSB3YXksIGlzIGF0dHJpYnV0ZWQgdG8gSFAsIGFuZCBwcm92
aWRlZCBzdWNoIHJlcHJvZHVjdGlvbgphbmQvb3IgZGlzdHJpYnV0aW9uIGlzIHBlcmZvcm1lZCBm
b3Igbm9uLWNvbW1lcmNpYWwgcHVycG9zZXMuCgpBbnkgb3RoZXIgdXNlIG9mIHRoaXMgaW5mb3Jt
YXRpb24gaXMgcHJvaGliaXRlZC4gSFAgaXMgbm90CmxpYWJsZSBmb3IgYW55IG1pc3VzZSBvZiB0
aGlzIGluZm9ybWF0aW9uIGJ5IGFueSB0aGlyZCBwYXJ0eS4KX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KLS0tLS1FbmQgb2YgRG9jdW1lbnQgSUQ6IEhQ
U0JVWDAyMDItMTg1LS0tLS0KPT09PT09PT09PT09PT09PT09PT09PT1TTklQPT09PT09PT09PT09
PT09PT09PT09PT09PT0K

--------------Boundary-00=_452BES6RD91SM3WCPK8M--