8954 2016-01-20 11:06:05 +0000 unpacking tar with xattrs: broken file 2016-02-24 13:20:36 +0000 1 1 6 Yocto Project Subprojects Pseudo pseudo unspecified x86 Multiple VERIFIED FIXED Medium+ major 2.1 M2 1 patrick.ohly seebs bogdanx.a.voiculescu joshuagloe mark.hatle richard.purdie ross.burton seebs yp.pseudo.watcher yp.watcher bogdanx.a.voiculescu --- --- No (bug/feature does not impact docs) oldest_to_newest 57981 0 2936 patrick.ohly 2016-01-20 11:06:05 +0000 Created attachment 2936 GNU tar archve with attributes that do not unpack correctly under pseudo Environment: Debian Stable, with GNU tar 1.27.1, pseudo from current OE-core master (4fd33ca846ba9f61e72a176a6462443c9fb5ddc2). Problem: when unpacking the attached tar archive under pseudo the resulting file ends up in a weird state and mkfs.ext4 fails to copy it into a partition image. Steps to reproduce: 0. bitbake e2fsprogs-native 1. bitbake -c devshell <some image> 2. tar --xattrs --xattrs-include=* -xf testrootfs.tar 3. ls -l testrootfs/foobar ?rwxr-xr-x 1 root root 1 Jan 20 12:27 testrootfs/foobar Besides the question mark, "testrootfs/foobar" is also printed in red text on black background. 4. dd if=/dev/zero of=rootfs.ext4 bs=512 count=100000 5. mkfs.ext4 -d testrootfs rootfs.ext4 mke2fs 1.43-WIP (18-May-2014) Discarding device blocks: done Creating filesystem with 50000 1k blocks and 12544 inodes Filesystem UUID: 35a5c602-78ac-491e-9bf2-e096d1cfaaa6 Superblock backups stored on blocks: 8193, 24577, 40961 Allocating group tables: done Writing inode tables: done Creating journal (4096 blocks): done Copying files into the device: __populate_fs: ignoring entry "foobar" foobar: File not found by ext2_lookup mkfs.ext4: File not found by ext2_lookup Error while populating file system Expected behavior should be the same as when running outside of pseudo: $ sudo tar --xattrs --xattrs-include=* -xf /tmp/testrootfs.tar $ ls -l testrootfs/ total 8 -rwxr-xr-x 1 root root 1 Jan 20 12:27 foobar $ getfattr -d -m . testrootfs/foobar # file: testrootfs/foobar security.SMACK64="_" security.ima=0sAwIC2C1O/QCAKE3nkQA9MB2DFaZOveb+E6kTTq4FQrmCugFE5vnX4vGJQ3NK7jNJkcJXuxhQnG1rf68Z31mkGvncxKz93RS9RjjZML7X8I0H5j3+QsU3Y8ZXsxhTg+UOIWiZV0XeVgKIvwaTlvrEXcvNjHH/SrFa1+PDlu9Cdr6L3uOzkkVjoEs= Background: the actual "foobar" file is lib/systemd/systemd in our custom distro. In the ext4 partition generated from that rootfs, security.ima is not stored correctly by mkfs.ext4. When trying to simplify the problem, I noticed that mkfs.ext4 always worked on a "testrootfs" directory where I created the files with xattrs manually. It failed once I did "cp -a" from the image's rootfs directory. The tar archive was created under pseudo with: cp -a tmp-glibc/work/qemux86-iotos-linux/iot-os-image/1.0-r0/rootfs/lib/systemd/systemd testrootfs/ echo "" >testrootfs/systemd mv testrootfs/systemd testrootfs/foobar tar --xattrs --xattrs-include=* -cf testrootfs.tar testrootfs After each of these steps, creating an ext4 from testroofs with mkfs.ext4 -d testrootfs rootfs.ext4 results in a rootfs.ext4 where (when loop-mounted on my host) testrootfs/foobar does not contain valid xattrs: $ strace getfattr -d -m . mnt/* listxattr("mnt/foobar", NULL, 0) = 30 listxattr("mnt/foobar", "security.SMACK64\0security.ima\0", 256) = 30 getxattr("mnt/foobar", "security.SMACK64", 0x0, 0) = 1 getxattr("mnt/foobar", "security.SMACK64", "_", 256) = 1 ... getxattr("mnt/foobar", "security.ima", 0x0, 0) = -1 ENODATA (No data available) I don't know what's special about unpacking with tar or "cp -a". Creating foobar with "echo" and setting the special xattrs with setfattr works. It's almost as if lib/systemd/systemd is "contaminated" and breaks almost anything that tries to work with it, but I for sure don't see how that could be. I'm starting to believe in ghosts! Please help me before I loose my sanity. The closest I could get to a reproducer is the tar archive, hence this bug report. 58022 1 seebs 2016-01-20 20:59:37 +0000 Huh, that's fascinating. How did the file initially get its extended attributes? Also, does the underlying file actually have those attributes, or were they created under pseudo? My concern is that the kernel may be doing things specially for security.* values, so if they got created in some way that pseudo didn't intercept, the result could be a file which has special attributes magical to the kernel, which pseudo can't necessarily interact with. 58035 2 patrick.ohly 2016-01-21 07:08:19 +0000 The initial systemd file was installed and its meta data updated as part of image creation, i.e. everything happened under sudo. security.ima was computed by "evmctl ima_sign" in https://github.com/01org/meta-intel-iot-security/blob/master/meta-integrity/classes/ima-evm-rootfs.bbclass. evmctl uses lsetxattr(). security.SMACK64 was set by a Python script which iterates over all files in the rootfs. Because the the "python-xattr" cannot be assumed to be present, some tricks with "ctypes" are needed to call the setxattr() method provided by pseudo. That code is here: https://github.com/pohly/meta-intel-iot-security/blob/smack-fixes/meta-security-framework/classes/xattr-images.bbclass However, the initial systemd file and also the simplified foobar look perfectly normal when viewed with "ls" under pseudo. It's only after unpacking the tar archive that it gets weird. Unpacking the archive with "sudo strace tar" on the host looks normal to me: mknodat(AT_FDCWD, "testrootfs/foobar", 0755) = 0 open("/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=26258, ...}) = 0 mmap(NULL, 26258, PROT_READ, MAP_SHARED, 4, 0) = 0x7fb8fed6f000 close(4) = 0 futex(0x7fb8fe7258f8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 setxattr("testrootfs/foobar", "security.ima", "\x03\x02\x02\xd8-N\xfd\x00\x80(M\xe7\x91\x00=0\x1d\x83\x15\xa6N\xbd\xe6\xfe\x13\xa9\x13N\xae\x05B\xb9\x82\xba\x01D\xe6\xf9\xd7\xe2\xf1\x89CsJ\xee3I\x91\xc2W\xbb\x18P\x9cmk\x7f\xaf\x19\xdfY\xa4\x1a\xf9\xdc\xc4\xac\xfd\xdd\x14\xbdF8\xd90\xbe\xd7\xf0\x8d\x07\xe6=\xfeB\xc57c\xc6W\xb3\x18S\x83\xe5\x0e!h\x99WE\xdeV\x02\x88\xbf\x06\x93\x96\xfa\xc4]\xcb\xcd\x8cq\xffJ\xb1Z\xd7\xe3\xc3\x96\xefBv\xbe\x8b\xde\xe3\xb3\x92Ec\xa0K", 137, 0) = 0 setxattr("testrootfs/foobar", "security.SMACK64", "_", 1, 0) = 0 openat(AT_FDCWD, "testrootfs/foobar", O_WRONLY|O_CREAT|O_NOCTTY|O_NONBLOCK|O_CLOEXEC, 0700) = 4 write(4, "\n", 1) = 1 fstat(4, {st_mode=S_IFREG|0755, st_size=1, ...}) = 0 utimensat(4, NULL, {{1453363581, 885600320}, {1453289247, 186050717}}, 0) = 0 fchown(4, 0, 0) = 0 fchmod(4, 0755) = 0 close(4) = 0 close(3) = 0 newfstatat(AT_FDCWD, "testrootfs", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 utimensat(AT_FDCWD, "testrootfs", {{1453363581, 877600281}, {1453289286, 402245179}}, AT_SYMLINK_NOFOLLOW) = 0 fchownat(AT_FDCWD, "testrootfs", 1000, 1000, AT_SYMLINK_NOFOLLOW) = 0 fchmodat(AT_FDCWD, "testrootfs", 0755) = 0 My hope was that this unpacking step is something that you might be able to reproduce and (if it leads to the same unexpected result) use to debug the problem. 58076 3 mark.hatle 2016-01-21 16:22:28 +0000 Just want to get clarification. The image was generated with xattr items in the image creation scripts with 'pseudo'. This appears to have worked properly. You then took the tarball and extracted it with 'sudo' (i.e. to get root permissions and extract the tarball to the filesystem with those same permissions) on the host system and that is when the failure occurred? This sounds a lot like the host system is preventing you from setting specific attributes. Perhaps the system is running some type of IMA, Smack or SE Linux code that won't permit you to set these attributes? A simple check is to use -pseudo- with the tar extraction and in that environment see if the xattrs are what is expected -- if so it's most likely some kind of a host system issue. 58078 4 patrick.ohly 2016-01-21 16:31:55 +0000 (In reply to comment #3) > The image was generated with xattr items in the image creation scripts with > 'pseudo'. This appears to have worked properly. > > You then took the tarball and extracted it with 'sudo' (i.e. to get root > permissions and extract the tarball to the filesystem with those same > permissions) on the host system and that is when the failure occurred? No, that works fine. > A simple check is to use -pseudo- with the tar extraction and in that > environment see if the xattrs are what is expected This is exactly what is failing ;-) The instructions are not entirely clear, but it was implied that after entering devshell in step 2, you continue with the following commands under pseudo. That should be easy to reproduce. The real problem for me is that image creation of an entire rootfs also does not work, but that is harder to reproduce. It might be possible with meta-intel-iot-security, poky and a hand-craft local.conf. Let me know if you want me to try and reproduce it like that. 58091 5 seebs 2016-01-21 19:34:48 +0000 Huh, this is fascinating. tar 1.23 doesn't have --xattrs-include. Using actual root, if I extract that file, and then do getfattrs -d on it, I get: # getfattr -d -m - testrootfs/foobar # file: testrootfs/foobar security.SMACK64="_" I don't see the .ima value. So something magic is happening when setting that value, it seems? ohhh. Hmm. I think that may be a red herring, but I'm not sure yet. Because I notice that the failure seems to be that the file's ending up with no file type bits set in its database mode. Hmm. I'm not totally sure the security bits are really what's doing this. It could be an interaction of some sort with the file mode settings. Anyway, I can reproduce that SOMETHING is going weird here. 58118 6 patrick.ohly 2016-01-22 06:58:01 +0000 Yes, --xattrs is a recent GNU tar feature. You can add ASSUME_PROVIDED_remove = "tar-native" to your local.conf and then "bitbake tar-native" to build it. 58154 7 seebs 2016-01-22 21:17:36 +0000 Okay, so, it turns out this has nothing at all to do with xattrs, inexplicably enough. Or at least, not directly. When invoked on that archive with --xattrs --xattrs-include=*, GNU tar uses mknod to create the file instead of open with O_CREAT. And it uses mknod with no file type bits. The pseudo implementation of mknod doesn't check for that, while real mknod masks in S_IFREG if there's no file type bits. So the file gets created with no file type bits, which causes strange behaviors. I've got a patch to fix this, and I've pushed it to master. I don't know whether that's enough to solve things for now, or whether I should be looking at a new release to put in tree. 58170 8 patrick.ohly 2016-01-25 08:07:26 +0000 Confirmed, http://git.yoctoproject.org/cgit/cgit.cgi/pseudo/commit/?id=735ac1b9ff7471b100f6758f9072bfd45e0e3f40 fixes the tar unpack issue. The original problem (copying the xattrs from that test rootfs into an ext4 partition) however remains, and it is something that I can only reproduce when running under pseudo. I've file bug 8992 for that. 58926 9 richard.purdie 2016-02-11 21:08:49 +0000 The pseudo commit which fixes this is present in the upgraded version: http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=7cd835177ae0208859f790c0c638cde908386d5c 59429 10 bogdanx.a.voiculescu 2016-02-24 13:20:36 +0000 Verified on master 36b43b233c841b3c09fc17e04686b4b758780963" Not reproducible. 2936 2016-01-20 11:06:05 +0000 2016-01-20 11:06:05 +0000 GNU tar archve with attributes that do not unpack correctly under pseudo testrootfs.tar application/tar 10240 patrick.ohly Li9QYXhIZWFkZXJzLjE1MzEwL3Rlc3Ryb290ZnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwMDA2NDQAMDAwMDAw MAAwMDAwMDAwADAwMDAwMDAwMTMyADEyNjQ3NjY3NTA2ADAxMzEyMwAgeAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1c3RhcgAwMAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz MCBtdGltZT0xNDUzMjg5Mjg2LjQwMjI0NTE3OQozMCBhdGltZT0xNDUzMjg5MjkxLjY5NDI3MTQy MQozMCBjdGltZT0xNDUzMjg5Mjg2LjQwMjI0NTE3OQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRl c3Ryb290ZnMvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMDAwNzU1ADAwMDE3NTAA MDAwMTc1MAAwMDAwMDAwMDAwMAAxMjY0NzY2NzUwNgAwMTE1MzUAIDUAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdXN0YXIAMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAwMDAwMAAwMDAwMDAw AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdGVz dHJvb3Rmcy9QYXhIZWFkZXJzLjE1MzEwL2Zvb2JhcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwMDA2NDQAMDAwMDAwMAAw MDAwMDAwADAwMDAwMDAwNDQ1ADEyNjQ3NjY3NDM3ADAxNDI1MAAgeAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1c3RhcgAwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzMCBt dGltZT0xNDUzMjg5MjQ3LjE4NjA1MDcxNwozMCBhdGltZT0xNDUzMjg5MjkxLjY5NDI3MTQyMQoz MCBjdGltZT0xNDUzMjg5Mjg2LjQwMjI0NTE3OQoxNjggU0NISUxZLnhhdHRyLnNlY3VyaXR5Lmlt YT0DAgLYLU79AIAoTeeRAD0wHYMVpk695v4TqRNOrgVCuYK6AUTm+dfi8YlDc0ruM0mRwle7GFCc bWt/rxnfWaQa+dzErP3dFL1GONkwvtfwjQfmPf5CxTdjxlezGFOD5Q4haJlXRd5WAoi/BpOW+sRd y82Mcf9KsVrX48OW70J2vove47OSRWOgSwozNSBTQ0hJTFkueGF0dHIuc2VjdXJpdHkuU01BQ0s2 ND1fCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRlc3Ry b290ZnMvZm9vYmFyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMDAwNzU1ADAwMDAwMDAAMDAw MDAwMAAwMDAwMDAwMDAwMQAxMjY0NzY2NzQzNwAwMTQ1MDMAIDAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdXN0YXIAMDByb290AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAHJvb3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAwMDAwMAAwMDAwMDAwAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==