5563 2010-07-10 11:46:00 -0700 Plugin management functions not authenticated 2010-08-10 13:34:20 -0700 1 1 1 Unclassified OJS Plug-ins 2.3.2 PC Mac OS X 10.4 RESOLVED FIXED P5 normal --- 1 mattcrider mattcrider alec pkp-support OCS 2.3.3 OHS 2.3.1 OJS 2.3.2 20007 mattcrider 2010-07-10 11:46:49 -0700 Perform audit of validation methods in plugin management handler. 20008 3137 mattcrider 2010-07-10 12:30:59 -0700 Created attachment 3137 Patch against Harvester 2.3.0 and above 20009 3138 mattcrider 2010-07-10 12:31:27 -0700 Created attachment 3138 Patch against OCS 2.3.0 and above 20010 3139 mattcrider 2010-07-10 12:31:49 -0700 Created attachment 3139 Patch against OJS 2.3.0 and above 20011 mattcrider 2010-07-10 12:32:14 -0700 All changes pushed to official. 20421 alec 2010-08-10 13:34:20 -0700 This bug should be considered a serious security risk. It affects the following releases: OJS 2.3.0 OJS 2.3.1 OCS 2.3.0 OCS 2.3.1 OCS 2.3.2 Harvester 2.3.0 It can be corrected by upgrading to OJS 2.3.2, OCS 2.3.3, and OHS (nee Harvester) 2.3.1, or by applying the patches attached to this entry using the GNU patch tool. See http://en.wikipedia.org/wiki/Patch_%28Unix%29 for details on the patch tool. 3137 2010-07-10 12:30:00 -0700 2010-07-13 09:54:37 -0700 Patch against Harvester 2.3.0 and above harvester_5563.patch text/plain 2409 mattcrider ZGlmZiAtLWdpdCBhL3BhZ2VzL2FkbWluL1BsdWdpbk1hbmFnZW1lbnRIYW5kbGVyLmluYy5waHAg Yi9wYWdlcy9hZG1pbi9QbHVnaW5NYW5hZ2VtZW50SGFuZGxlci5pbmMucGhwCmluZGV4IGNkYjVi MzIuLjY0OTdlNGUgMTAwNjQ0Ci0tLSBhL3BhZ2VzL2FkbWluL1BsdWdpbk1hbmFnZW1lbnRIYW5k bGVyLmluYy5waHAKKysrIGIvcGFnZXMvYWRtaW4vUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIuaW5j LnBocApAQCAtMzUsNiArMzUsNyBAQCBjbGFzcyBQbHVnaW5NYW5hZ2VtZW50SGFuZGxlciBleHRl bmRzIEFkbWluSGFuZGxlciB7CiAJICogRGlzcGxheSBhIGxpc3Qgb2YgcGx1Z2lucyBhbG9uZyB3 aXRoIG1hbmFnZW1lbnQgb3B0aW9ucy4KIAkgKi8KIAlmdW5jdGlvbiBtYW5hZ2VQbHVnaW5zKCRh cmdzKSB7CisJCSR0aGlzLT52YWxpZGF0ZSgpOwogCQkkcGF0aCA9IGlzc2V0KCRhcmdzWzBdKT8k YXJnc1swXTpudWxsOwogCQkkcGx1Z2luID0gaXNzZXQoJGFyZ3NbMV0pPyRhcmdzWzFdOm51bGw7 CiAKQEAgLTY4LDYgKzY5LDcgQEAgY2xhc3MgUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIgZXh0ZW5k cyBBZG1pbkhhbmRsZXIgewogCSAqIFNob3cgcGx1Z2luIGluc3RhbGxhdGlvbiBmb3JtLgogCSAq LwogCWZ1bmN0aW9uIHNob3dJbnN0YWxsRm9ybSgpIHsKKwkJJHRoaXMtPnZhbGlkYXRlKCk7CiAJ CSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFnZXIoKTsKIAkJJHRoaXMt PnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAKQEAgLTg1LDYgKzg3LDcgQEAgY2xhc3MgUGx1Z2luTWFu YWdlbWVudEhhbmRsZXIgZXh0ZW5kcyBBZG1pbkhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4g c3RyaW5nCiAJICovCiAJZnVuY3Rpb24gc2hvd1VwZ3JhZGVGb3JtKCRwbHVnaW4pIHsKKwkJJHRo aXMtPnZhbGlkYXRlKCk7CiAJCSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1h bmFnZXIoKTsKIAkJJHRoaXMtPnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAKQEAgLTEwMyw2ICsxMDYs NyBAQCBjbGFzcyBQbHVnaW5NYW5hZ2VtZW50SGFuZGxlciBleHRlbmRzIEFkbWluSGFuZGxlciB7 CiAJICogQHBhcmFtIHBsdWdpbiBzdHJpbmcKIAkgKi8KIAlmdW5jdGlvbiBzaG93RGVsZXRlRm9y bSgkcGx1Z2luKSB7CisJCSR0aGlzLT52YWxpZGF0ZSgpOwogCQkkdGVtcGxhdGVNZ3IgPSYgVGVt cGxhdGVNYW5hZ2VyOjpnZXRNYW5hZ2VyKCk7CiAJCSR0aGlzLT5zZXR1cFRlbXBsYXRlKHRydWUp OwogCkBAIC0xMjMsNiArMTI3LDcgQEAgY2xhc3MgUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIgZXh0 ZW5kcyBBZG1pbkhhbmRsZXIgewogCSAqICRwYXJhbSBmdW5jdGlvbiBzdHJpbmcgdHlwZSBvZiBv cGVyYXRpb24gdG8gcGVyZm9ybSBhZnRlciB1cGxvYWQgKCd1cGdyYWRlJyBvciAnaW5zdGFsbCcp CiAJICovCiAJZnVuY3Rpb24gdXBsb2FkUGx1Z2luKCRmdW5jdGlvbikgeworCQkkdGhpcy0+dmFs aWRhdGUoKTsKIAkJJHRlbXBsYXRlTWdyID0mIFRlbXBsYXRlTWFuYWdlcjo6Z2V0TWFuYWdlcigp OwogCQkkdGhpcy0+c2V0dXBUZW1wbGF0ZSh0cnVlKTsKIApAQCAtMTk3LDYgKzIwMiw3IEBAIGNs YXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVyIGV4dGVuZHMgQWRtaW5IYW5kbGVyIHsKIAkgKiBA cmV0dXJuIGJvb2xlYW4KIAkgKi8KIAlmdW5jdGlvbiBpbnN0YWxsUGx1Z2luKCRwYXRoLCAmJHRl bXBsYXRlTWdyKSB7CisJCSR0aGlzLT52YWxpZGF0ZSgpOwogCQkkdmVyc2lvbkZpbGUgPSAkcGF0 aCAuIFZFUlNJT05fRklMRTsKIAkJJHRlbXBsYXRlTWdyLT5hc3NpZ24oJ2Vycm9yJywgdHJ1ZSk7 CiAJCSR0ZW1wbGF0ZU1nci0+YXNzaWduKCdwYXRoJywgJ2luc3RhbGwnKTsKQEAgLTI1Niw2ICsy NjIsNyBAQCBjbGFzcyBQbHVnaW5NYW5hZ2VtZW50SGFuZGxlciBleHRlbmRzIEFkbWluSGFuZGxl ciB7CiAJICogQHJldHVybiBib29sZWFuCiAJICovCiAJZnVuY3Rpb24gdXBncmFkZVBsdWdpbigk cGF0aCwgJiR0ZW1wbGF0ZU1ncikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHZlcnNpb25G aWxlID0gJHBhdGggLiBWRVJTSU9OX0ZJTEU7CiAJCSR0ZW1wbGF0ZU1nci0+YXNzaWduKCdlcnJv cicsIHRydWUpOwogCQkkdGVtcGxhdGVNZ3ItPmFzc2lnbigncGF0aCcsICd1cGdyYWRlJyk7CkBA IC0zMTUsNiArMzIyLDcgQEAgY2xhc3MgUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIgZXh0ZW5kcyBB ZG1pbkhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4gc3RyaW5nCiAJICovCiAJZnVuY3Rpb24g ZGVsZXRlUGx1Z2luKCRwbHVnaW4pIHsKKwkJJHRoaXMtPnZhbGlkYXRlKCk7CiAJCSR0ZW1wbGF0 ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFnZXIoKTsKIAkJJHRoaXMtPnNldHVwVGVt cGxhdGUodHJ1ZSk7CiAK 3138 2010-07-10 12:31:00 -0700 2010-07-13 09:55:03 -0700 Patch against OCS 2.3.0 and above ocs_5563.patch text/plain 2433 mattcrider ZGlmZiAtLWdpdCBhL3BhZ2VzL21hbmFnZXIvUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIuaW5jLnBo cCBiL3BhZ2VzL21hbmFnZXIvUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIuaW5jLnBocAppbmRleCA4 Yzk2NTVmLi44MDY5YjI0IDEwMDY0NAotLS0gYS9wYWdlcy9tYW5hZ2VyL1BsdWdpbk1hbmFnZW1l bnRIYW5kbGVyLmluYy5waHAKKysrIGIvcGFnZXMvbWFuYWdlci9QbHVnaW5NYW5hZ2VtZW50SGFu ZGxlci5pbmMucGhwCkBAIC0zNSw2ICszNSw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5k bGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIERpc3BsYXkgYSBsaXN0IG9mIHBsdWdp bnMgYWxvbmcgd2l0aCBtYW5hZ2VtZW50IG9wdGlvbnMuCiAJICovCiAJZnVuY3Rpb24gbWFuYWdl UGx1Z2lucygkYXJncykgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHBhdGggPSBpc3NldCgk YXJnc1swXSk/JGFyZ3NbMF06bnVsbDsKIAkJJHBsdWdpbiA9IGlzc2V0KCRhcmdzWzFdKT8kYXJn c1sxXTpudWxsOwogCkBAIC02OCw2ICs2OSw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5k bGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIFNob3cgcGx1Z2luIGluc3RhbGxhdGlv biBmb3JtLgogCSAqLwogCWZ1bmN0aW9uIHNob3dJbnN0YWxsRm9ybSgpIHsKKwkJJHRoaXMtPnZh bGlkYXRlKCk7CiAJCSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFnZXIo KTsKIAkJJHRoaXMtPnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAKQEAgLTg1LDYgKzg3LDcgQEAgY2xh c3MgUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIgZXh0ZW5kcyBNYW5hZ2VySGFuZGxlciB7CiAJICog QHBhcmFtIHBsdWdpbiBzdHJpbmcKIAkgKi8KIAlmdW5jdGlvbiBzaG93VXBncmFkZUZvcm0oJHBs dWdpbikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRlbXBsYXRlTWdyID0mIFRlbXBsYXRl TWFuYWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0dXBUZW1wbGF0ZSh0cnVlKTsKIApA QCAtMTAzLDYgKzEwNiw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVyIGV4dGVuZHMg TWFuYWdlckhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4gc3RyaW5nCiAJICovCiAJZnVuY3Rp b24gc2hvd0RlbGV0ZUZvcm0oJHBsdWdpbikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRl bXBsYXRlTWdyID0mIFRlbXBsYXRlTWFuYWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0 dXBUZW1wbGF0ZSh0cnVlKTsKIApAQCAtMTIzLDYgKzEyNyw3IEBAIGNsYXNzIFBsdWdpbk1hbmFn ZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqICRwYXJhbSBmdW5jdGlv biBzdHJpbmcgdHlwZSBvZiBvcGVyYXRpb24gdG8gcGVyZm9ybSBhZnRlciB1cGxvYWQgKCd1cGdy YWRlJyBvciAnaW5zdGFsbCcpCiAJICovCiAJZnVuY3Rpb24gdXBsb2FkUGx1Z2luKCRmdW5jdGlv bikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRlbXBsYXRlTWdyID0mIFRlbXBsYXRlTWFu YWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0dXBUZW1wbGF0ZSh0cnVlKTsKIApAQCAt MTk1LDYgKzIwMCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFu YWdlckhhbmRsZXIgewogCSAqIEByZXR1cm4gYm9vbGVhbgogCSAqLwogCWZ1bmN0aW9uIGluc3Rh bGxQbHVnaW4oJHBhdGgsICYkdGVtcGxhdGVNZ3IpIHsKKwkJJHRoaXMtPnZhbGlkYXRlKCk7CiAJ CSR2ZXJzaW9uRmlsZSA9ICRwYXRoIC4gVkVSU0lPTl9GSUxFOwogCQkkdGVtcGxhdGVNZ3ItPmFz c2lnbignZXJyb3InLCB0cnVlKTsKIAkJJHRlbXBsYXRlTWdyLT5hc3NpZ24oJ3BhdGgnLCAnaW5z dGFsbCcpOwpAQCAtMjU0LDYgKzI2MCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVy IGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIEByZXR1cm4gYm9vbGVhbgogCSAqLwogCWZ1 bmN0aW9uIHVwZ3JhZGVQbHVnaW4oJHBhdGgsICYkdGVtcGxhdGVNZ3IpIHsKKwkJJHRoaXMtPnZh bGlkYXRlKCk7CiAJCSR2ZXJzaW9uRmlsZSA9ICRwYXRoIC4gVkVSU0lPTl9GSUxFOwogCQkkdGVt cGxhdGVNZ3ItPmFzc2lnbignZXJyb3InLCB0cnVlKTsKIAkJJHRlbXBsYXRlTWdyLT5hc3NpZ24o J3BhdGgnLCAndXBncmFkZScpOwpAQCAtMzEzLDYgKzMyMCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFn ZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4g c3RyaW5nCiAJICovCiAJZnVuY3Rpb24gZGVsZXRlUGx1Z2luKCRwbHVnaW4pIHsKKwkJJHRoaXMt PnZhbGlkYXRlKCk7CiAJCSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFn ZXIoKTsKIAkJJHRoaXMtPnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAK 3139 2010-07-10 12:31:00 -0700 2010-07-13 09:55:20 -0700 Patch against OJS 2.3.0 and above ojs_5563.patch text/plain 2433 mattcrider ZGlmZiAtLWdpdCBhL3BhZ2VzL21hbmFnZXIvUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIuaW5jLnBo cCBiL3BhZ2VzL21hbmFnZXIvUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIuaW5jLnBocAppbmRleCBj MDQyMDA5Li4wNDUwYmJlIDEwMDY0NAotLS0gYS9wYWdlcy9tYW5hZ2VyL1BsdWdpbk1hbmFnZW1l bnRIYW5kbGVyLmluYy5waHAKKysrIGIvcGFnZXMvbWFuYWdlci9QbHVnaW5NYW5hZ2VtZW50SGFu ZGxlci5pbmMucGhwCkBAIC0zNSw2ICszNSw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5k bGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIERpc3BsYXkgYSBsaXN0IG9mIHBsdWdp bnMgYWxvbmcgd2l0aCBtYW5hZ2VtZW50IG9wdGlvbnMuCiAJICovCiAJZnVuY3Rpb24gbWFuYWdl UGx1Z2lucygkYXJncykgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHBhdGggPSBpc3NldCgk YXJnc1swXSk/JGFyZ3NbMF06bnVsbDsKIAkJJHBsdWdpbiA9IGlzc2V0KCRhcmdzWzFdKT8kYXJn c1sxXTpudWxsOwogCkBAIC02OCw2ICs2OSw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5k bGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIFNob3cgcGx1Z2luIGluc3RhbGxhdGlv biBmb3JtLgogCSAqLwogCWZ1bmN0aW9uIHNob3dJbnN0YWxsRm9ybSgpIHsKKwkJJHRoaXMtPnZh bGlkYXRlKCk7CiAJCSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFnZXIo KTsKIAkJJHRoaXMtPnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAKQEAgLTg1LDYgKzg3LDcgQEAgY2xh c3MgUGx1Z2luTWFuYWdlbWVudEhhbmRsZXIgZXh0ZW5kcyBNYW5hZ2VySGFuZGxlciB7CiAJICog QHBhcmFtIHBsdWdpbiBzdHJpbmcKIAkgKi8KIAlmdW5jdGlvbiBzaG93VXBncmFkZUZvcm0oJHBs dWdpbikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRlbXBsYXRlTWdyID0mIFRlbXBsYXRl TWFuYWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0dXBUZW1wbGF0ZSh0cnVlKTsKIApA QCAtMTAzLDYgKzEwNiw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVyIGV4dGVuZHMg TWFuYWdlckhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4gc3RyaW5nCiAJICovCiAJZnVuY3Rp b24gc2hvd0RlbGV0ZUZvcm0oJHBsdWdpbikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRl bXBsYXRlTWdyID0mIFRlbXBsYXRlTWFuYWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0 dXBUZW1wbGF0ZSh0cnVlKTsKIApAQCAtMTIzLDYgKzEyNyw3IEBAIGNsYXNzIFBsdWdpbk1hbmFn ZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqICRwYXJhbSBmdW5jdGlv biBzdHJpbmcgdHlwZSBvZiBvcGVyYXRpb24gdG8gcGVyZm9ybSBhZnRlciB1cGxvYWQgKCd1cGdy YWRlJyBvciAnaW5zdGFsbCcpCiAJICovCiAJZnVuY3Rpb24gdXBsb2FkUGx1Z2luKCRmdW5jdGlv bikgeworCQkkdGhpcy0+dmFsaWRhdGUoKTsKIAkJJHRlbXBsYXRlTWdyID0mIFRlbXBsYXRlTWFu YWdlcjo6Z2V0TWFuYWdlcigpOwogCQkkdGhpcy0+c2V0dXBUZW1wbGF0ZSh0cnVlKTsKIApAQCAt MTk1LDYgKzIwMCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFu YWdlckhhbmRsZXIgewogCSAqIEByZXR1cm4gYm9vbGVhbgogCSAqLwogCWZ1bmN0aW9uIGluc3Rh bGxQbHVnaW4oJHBhdGgsICYkdGVtcGxhdGVNZ3IpIHsKKwkJJHRoaXMtPnZhbGlkYXRlKCk7CiAJ CSR2ZXJzaW9uRmlsZSA9ICRwYXRoIC4gVkVSU0lPTl9GSUxFOwogCQkkdGVtcGxhdGVNZ3ItPmFz c2lnbignZXJyb3InLCB0cnVlKTsKIAkJJHRlbXBsYXRlTWdyLT5hc3NpZ24oJ3BhdGgnLCAnaW5z dGFsbCcpOwpAQCAtMjU0LDYgKzI2MCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFnZW1lbnRIYW5kbGVy IGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIEByZXR1cm4gYm9vbGVhbgogCSAqLwogCWZ1 bmN0aW9uIHVwZ3JhZGVQbHVnaW4oJHBhdGgsICYkdGVtcGxhdGVNZ3IpIHsKKwkJJHRoaXMtPnZh bGlkYXRlKCk7CiAJCSR2ZXJzaW9uRmlsZSA9ICRwYXRoIC4gVkVSU0lPTl9GSUxFOwogCQkkdGVt cGxhdGVNZ3ItPmFzc2lnbignZXJyb3InLCB0cnVlKTsKIAkJJHRlbXBsYXRlTWdyLT5hc3NpZ24o J3BhdGgnLCAndXBncmFkZScpOwpAQCAtMzEzLDYgKzMyMCw3IEBAIGNsYXNzIFBsdWdpbk1hbmFn ZW1lbnRIYW5kbGVyIGV4dGVuZHMgTWFuYWdlckhhbmRsZXIgewogCSAqIEBwYXJhbSBwbHVnaW4g c3RyaW5nCiAJICovCiAJZnVuY3Rpb24gZGVsZXRlUGx1Z2luKCRwbHVnaW4pIHsKKwkJJHRoaXMt PnZhbGlkYXRlKCk7CiAJCSR0ZW1wbGF0ZU1nciA9JiBUZW1wbGF0ZU1hbmFnZXI6OmdldE1hbmFn ZXIoKTsKIAkJJHRoaXMtPnNldHVwVGVtcGxhdGUodHJ1ZSk7CiAK