DELTA 517921 0 267525 SVN$#f-w? V@$@IiX$x^SMo0 =v6Xl0KL,Ė\N?ʊ:$||GY5OF$ ~LxNf쮼 VuI}c!` _7gX=yk2baݎx{{*oo -E"shgp9MC a :/ Yƪ[o@iǻ[ftJD)n=UG˯od<_JLÁ\K&T#_Ig|^qv7E1c>.rEUuȚMӯ~h%:XC>Pi>u Ai#^d@nlse!󲪋8*eQ A!. hPD:3?@3+Ww@7 # "BcFS3[a~AA:Dh{n -*o0b11`%Gܑ*!b4`Şѭ& x{-K1dռ.9⮎q@` 07;ü%IN9o N¶8+a7AHm8Uqhl9|qsNYfϤ~#}x!pg`$DBLעVO'/-z p@ڞI|1'Q\hu<:?c7.J+65jNX\US:*pxx7͕Ǚce,MS$#L+v/^2SzU֙GMM3 M@~@@x@~A:x^Rn0<_ȹ%r@-EQ4Sʇ }V- p!nam96zx-r>M*(/Mnt`EYqrƉ@;T'LTp+ŲȧwlزbRY3޾j_%^NW/Љ*ʁtξ#kT/!zrS]_QY.>cx;a]C=V?:7x@m҆uW|H\z r;ڀ U۷s<3O"d(f=S7R77;Ulv{5TIؒ+qG9N?̀k_ }l[4ױu+a£VdIzLYLϔ1 _hdQҳ$P Kth1SI:C[tbH&Q2kPsό,/v)1`gN (M"Jr3y.Y2I'#VP QN. +0]]C/À$jKg@ei Ҁhmj%ec+Y=ϞS.UP#WQ>hbQ᫼bgyC!~0i'YBPf9qZAy@nnlgx?pZG U҄W'Gߵ.?>j#{q'tsv ;Ժ (ϚOz/Z+m; }b]i8*ރeӫ:v-ViNڬIx/"@kɌAB`;$GSt 4=xD`}Ɩ[!}!H%?:L59OvM[6#rWE,Y]@]JVa8J}r@JA"x^?o0gS2@EeVCg>Q'M*$߾' qR[PO-`"i+oFg<2z! x;dς&IɧYcD5|@D_N|jC[bȆq"aD94|~ftۙHTF=Ũ\Z֩IA\"gROӢ;35i/޺"7U- 0B0J)^'و c*EF:BSAdWA{sp} -9ם5_]s?n>}eX7́7yv0r:9#+vc]q T/A.c>C&'9#j"`Z^bkv@%Y?A8x^}R0=obԻdnU6@jѪձ'Ӓ%ZixlHDj3u.֩Ρ jn}fS*DvBD.7űIǐRN&"[Pddg]wl<}-Y+1ί9'^DB`1R9lPxṬi>kFo⽮?CKA[ K|AW0);To]ELAW^o7/@.pN* (O vп`kkڽaU5m-Q/#6b^ګ%]$_~w]/fJ8vRACx^}RMo0 =9&Ndm,tő4N?n͆'=>RԄyVP4G?}N,N+Np\ q0a+:dzhuPc݇v_7۲J.UVjqsxaQ]vJ"iL%U\jx":yKsCͧH4[&bk1VwU?װfk4~qzMd`ihDd"+EQ)H<8 nͪ痗18kBp&^i"@BP^;: oBo$7ӂ઩g%x t$m HfveԕDRЃb0=tg)K/W@ZT/[׽}=ʖEuuo\˩XR:y`mQo93$N?[XtA,x^_K0S{inԂ 7}O fIII& .w% y@Ok::\|j1{lv$_lŦ'VS:4Q3fFrnk= >_c3ӨMs$"VݦYa1,I--v]6 vPiE?w ȱe _ >$̗踑pEd^Ep±,V=I T$V#Mx-`s=MeހÞκ=Jؽ<&2#@4^LqKXQc i}L23ʇNs?!eUs?#H}̹B˃ =(3q$tc%?&χ),(F@L<\G=xvP~sA x^ώ0٧J5,ʋTU}J37`S۰O!q*4||o,ۤ+Vp' >jaBZ[|in./4eA͇&=*1*4v|Z%IׯH[,sNI`N6L敬ɟud;hUN[` ieD5:pҜ]($MtzR;NawIX_Ϊy2%Uu'QN7t }G=zʯ9neOӥ!VS=J φA+OT/} k[U ˛2Qٔ rfi7mUBl˽Oϔn˲oVu/۾B4W>v?Arx^0SC aҪz7f+vlÊ)ɮvF<#0d^A ??v$Cv s5]͚tc\σ4n#<LCGd tCqI<آ(/]bEvYc<9;3(bя/pMSeGJ=0%1J6M7NܟɄ!'Aqx^M0IӯE&Rz "מ$V;K=deJxM/ mG4C ūjpV`ӏ v [a v&St%'zQ <8䂳Jr>T{p8jk@'- P Pᘩ)OK,h*'D4{l5Gbʮ'=y0p$td_?=^:zNZ.աԖ zC 0 GMgL2/YYή9M7OYt]Ն0 º :Y^6ksgۼɶ-^8sXCCQtUI#vs櫬XrkJΦuJ -T-5gؙjig>jWj.+ fMQdy~zY+AJ+4{%doo UH2#q| M!ex I4t3>^?8!dwIT U(7 0ZSn3g^72+<0Y3ZѠ%'$Rn.wN?kRnAVx^R =_1S{ @;-1p}hWZ o7z Gy1^F[,GQ·ֻ")jA RЀ=5kv_&jwpi2HRaSՒtEα"՜0u^>\%nQQG y&-L3Co9 62&K*_ɍX̾+#3FԲm+}< gN\B&ׇ!%)}1iV#n'Zʋ:ڟguw@ H8JkqS KnC^fzH€҃;Aa)ikpL.F7)ʠL 2\@LhJй5%Gr`%'PkYjؚˆ\t;.+ `JvADCAzx^[o0_1S"݊(U+u:yMv wOmrd^s\NE%Qz=E=pU8#.nu`p"z\S>C˸hV!0Rvj G'ʩ!QZi8A_ĆپG^P'C552LC*wqhz9A/F)Zq+$يl8|%oCs `[GSzG_x^n0 S=Yq0`n蝖i[l9o?IڵXODG8t!6:hJ{uVu< f ޥPqb<zA\x^}Sk0>DZYZk(lPAΉ~!ɼ~'m3Χӽw Ƴ??aC #0z 1"4!21P磤 Y;YA--cD1s\_ծe<#pk"nMQHgfqYl%VT#)hChC G56}WCKD( Z)I2p^0 1*d5™ ob):$rFɱh=f0>uZ1~չti):c#Alﳲ+y୔0ÏlQUv(n|JrU-?UVʥ`x+eѮ?MIiR!)%Fi;w ,^ٜYһuJuVif m]~sۂ~&PFG=s #A c?pdą-,Hɺ˜n&#|Q1}1a4:|uZ _EYeE x|r8^gmm2WuzUjb{Udek)H$o`'5&2m  9!V55s^ F!NKXkItgG`7|iVґ~#,]e!կɇ*H&9epQKKmlt*n]r"(k|*-D_gW*vAIx^Q= }{ q9֍NE2WH,ƈ}@#?U]o&O8`^{Y-}[/ `e0 $7^xi]xel@JRxfΓd 7" 3⌞ ;hfنyѣ%mO:H:?p7EozáM2rmi2}ۼVoTuw;Up/EWoeOm{U+Ӳ5A"Eh ) ۰ B})]'QRfθv|xa}cbK^ 3 АC#k\&us uķu+5$ht,-{es%sli{m ˟SFx(0Ja-!~2jǔ̘ Y4Faݓ@dt!$@E9 a N"d!O>*]w{0$3x^ SX=B4I'.{v&Ĵ#Iڷi~ӤiHH?sAX uSIYNYM]>*܄^7,(7DJ߰m֡ߡJAt,xIouKtPQ; ʻ>1&]1" /1+0*Jw?elG9N@cUo+qkVx^QN0<_ & H&ĭΚFuv{8j<3֜WzQoVR1BxaB謼 YPtB5̣ gԀ]jٻ,_ yX9)\F%`;1f9M8_m= NުSĢDZ;!cM:az4IW$-hrE<gBN].4zy,cC<-YU44ŜT< Ϫ3ЦM?{q;ߴ, TŞXY|?@÷$` }4zܲ$4 &-`Xt1EE&`]v;oA dC;4~1ӉՈb4**hp>J1z:Ցս9:PMz_LQ|єj2dɝ>/aӋ)k·s@tY!@4I'1[]T;@ 96x*DWoR LaRG*A iti Ot;d/ V!3wCUYlZmƧlVp)'J0`-e;V*L񨲺{\jL4,2j"j/wٓȕ鸬i鮼#RۘZ_G7V_$1o$ &Cfb._QAAx^Qo0ǟ٧8RۄN*EaD$PMUsI۲~{NG3L&a^8mDs~:O,i/W/2mn,:n-XZj)k0hkm;4Q <IQ1/P\P 2X^Xp^59 HXG@ft<]b 걩*t=T jrByV",Kcz^#,V)3ǵ$\Oԃp{$8G9 Ri`-ҫ?l)m d 75HIN`SZ!ֻyY@=%ѝ9x 5mi>MDPU!,j649,zD]Ԣd::-7Сou^.,{TOVUƮ%x2KοUy$a_<, @ UwVt>ϒJ8)unҷyvZaevvSAIx^Mo0 ݯK{6 n\ Zdʓ8c H)z^}Z+OyIi+j!(qX_(*V W L N.Ko|w|FjĴfI=C>0`a,# B߷$U{U:CͲ#&p%k/Yadf13+͜njmP5YY69^)$Bu ;{Vr xWED)[|Bj7Azx^RQ@ ~vEا;muO ܁xiwp:Sݿ7{+' ZH&_/&c>`=2uze jjfGR'S=U@}d=C J~YK7RO{WY p$qt3qb5:4O$(RuE͒l[k\22eN,M#K~ŗTfJN*YeyEW=,1qAf`t2º(ah8{nVf9;׺N P1B<7;I=v@ VAJ?d-]eyhb$5s and missing buffer size tests9Christos Zoulas reports:

A specially crafted file can cause a segmentation fault://mx.gw.com/pipermail/file/2014/0015536-09 2014-08-21 djangopy2727-django1527-django14 1.41.4.14 n RumAmfc28df92-b233-11e3-99ca-f0def16c5c1b"> nginx -- SPDY heap buffer overflow N`@v@\N@Ax^Sv <;_#&V"YvmuѲ;,Bz.FMu0>{dzN>;-親`~챾Ka==2BXp`>"on%Z-Lo,@xt*-q^᳝ B[vM Fp*9O3.C6oh\^Ғ9M.ov*)kڨ#k +9otk]k$oyA*jo>%13^=t;WM镜LdPkrH-//Jc4s/JR?EQ/G`C$w!!}X0?/C71 L$;|Q1 [۟G%P)MH}#E JG Y +g׮q 3ꀨHs6=>=(:'Jv<NYRJviAx^=R]o@|n~Om8Ib"Ժ䇨R-U}]K8b vng. ѾPyXB4NPSֲdzS( ?NC~:[^ Sڴd#2cil% zL>?H. ~ 3T;Ի`X!#wȷsSZœ,i`A~Yݟh(6ofSM^񔙠ݙ[9C$w&M!qKΫ,JSZG%*|%%w4vѥZ c-Բ‡mzBk2< 9<Z_ ERm0J D6ĢP-(fjML;2A> P]ݺe;b J'.tn;09F҃ Abv٠:10|x_?hIȀ4?3X|>I@I@I@I@I@I@. x^QK0W.]C@CEq knLP&}%|ܓC=PxtL+P:H:ͬLE^:h ^DzZΈJdGYbnvpPr =94^fOET|sx]®1P]^?Q&j7Z trj& 4Y""A*˸xN+0D0JG1b5c;Gmu᜾#miDY29"¤H ReR9]|PΠ ?A?x^mMo0 r$ e;CѥAh[,7~?lX(%|Qt &mȖ3tΧ6+acA)777K;:\هñE|Cp鑵!bn_9S9O=em3Ni5ch" M]9 4uI:eBG嘓l7n)ehQ&7Sq'uA'zqـlM0nNу YN)pTԽsp#YLpb0)0V"Bhf:RwpQCaO Tj[F \řcF 4ɭAϽ(l <1'>V1H;KHm>2-\;F4rV%)B"!chN6 a3%(V\5 ޺aܴQQ.myKr1kH:7:N@WفDCGsD|e[|a>~IHyB;aBcEW9޽3Cb"[a#L0)Jih&lH0c2۞QHOEuAʖC59Gh^8Pt^iAT祪E?kI9k\EDx"WB7]Fmu S7HyB}%;Te I9nVkK=85I` (Igr$R⬐%ڰr,{PV¡BrYQi+_Σ Rz$}Աuv|Zjʤycύp7;k*'9:|ۏ??īIJՑ#P>>CҍVJP|gRVm 1thj=ȼɺNSen WnvDFMjq[g|'+&_ywv'#_M= AGx^][0_1-Kk(tC )]>-hq,*KB#쿯>y<HZC Hh%6E_wwܟtH# pF+c p 73c 9s 3F$H/Gb5(g#O !M}3jȘ%iF<4F[л9d(0&[ܟU‡M1" o+J7h*HimNMr^aAOFa'a>ֻjVLjˀ=^9-?M%sTuSTۢk˷mO;K+-/݊KMբ7kݧf[TU}#wbZvAB? <{~mĐTN[f 䪁 H>tAwx^eMo0 rj+p=^2Z(-ߏ$| Њ=C5POdЧ(*k$  X.Z@"G`pL% &'H#hgb.;Xj+)jI#7z1~6"DAƵ$#tNoXcN>,a|ߝ-r3ix>h\Zf]ˮz@)z4q~9͎%L]7ao<-Z ~6EPZ.7@}pYBJvk4<8‰1';d,g#F;ox\*s41a4.:sK4*fr7ท?_e&%F8M{QjByE$Eqߦ;Ӫ2;(%ƤdEyUlsFOڇ,Q$SH!5^taeBwYDhBj-{;ю9Vcyߖ9:3ESFT1eE\{uzVqW|CB}:u :_`Rr\-ZXuFVNHE$nڑ{;;|TńvvJS<}R>4vA$x^n0 S2v֤i(ֻ,SY$*^z0`2')R';jྣ$]ДytAjO?&]8XnjWծӹ"i=hVh|hK)$0pJbW j1d,ZRy=$ C7ji;Vܱb*~Wz,UŸ䴗kCMcE\`[D/>ڠ].N gl`iyUye8p6zr3N=!(Mxz3ZLZ$Axaӫɨ>/Feו2YY6SPˋ2RZ-\=mYuqIwԎ2?B 75.9[O+Ձ Oa8ﰢY9Eh6o"D Q,%bfXlD.Yn2;쭫 UI4FYP˦h%UQDPKo쯵(1Tcn9teԕآ WnReoӂ}Lzb~}[x :8`6/~ơSXΏ/0$v:MevT:s IGñ osex_Xxhץbr-qo(TMΠ!6T5F^3?7EIaeSxZ|MAFx^mRKO1>_CB}EPR׉wºx=Njd3so:GWxg&ڐa( #DY N\\`V7s&h>ŏk{>8kcޟ7#ܳzc9$K^E!r6N:*Yң9Qğ-pw6GC*5Ħ-;mܩR8T1?3 Y@$t\:7LwdP%Q7>Ǵ)3:>-BPV|3~v{L}L^H_ ĩ<=ַj9fW_h_hwa'{kXߑZoKcH&k9ﱎjuUֹ{ ]ClR|m(tO;SëQ ʷ7 W%w$w]qTzv@NyAJx^mn ٴ݈ZU*Z5/0ci޾oUnlfΜ @ Xbt-${g݃xTf Y`# -:V3c(L!Df<)=%f98dxt+"i,ЃrGl 㜳ڎ,tQl4+jcڃj% upZ2TkêcMA\\|RլW udjǓp,Z" moXԔUq1o̤`)VQx NVǮTM[RFuo58m jaGffTct^n2^CU7pm*3bKnB~=\<3yjbd9'Mc[ %_o~\gW쟈 WI7N' TkSj|G #q(Y'sEOm'8Q.׽OT޺n![|2}J_ճfsv@k\> 6x^mR0;[1ré}5Ȓ黊 }*eYVoϧj "(6 珻vq~{WW^Hq2TuYS8v/SvFzȓUN'[ȟ5*ʪ:nnm䒌ms+Xt;teשCwx}_þevWݪcll$sE%kf-U%bÕ38_5'jq~>?uŗ\zE*y?J<dygzyM.(q=ta3(d{Îw :@PޅP΄G$6:R06!C49C@C*_4FS^(!. O0Fy _qd0BL;=bEz&!;@ ɆfR12&[Ho1k ;d&4ƝVņȑp{Tt،6jQ; >wgj6)!O G@?R@0>HO>lAx^Ko0ίXQ 8@^$ARRKNڦ='>vΚUI+8jpCĜCb8IXll]iiyIGSrS7FU8jɑ/7>f$w<+ق5جE62cL l%[Ya~c%P{y ˠh *38(Md991+E=rYu\:gC*j/՞e3KdB#AC5.D@:HT8bAzԀ*1HaRwz%W}u@E$C;vċN9LadRX1-}xFxK#ĹT)Π=^oV!bQcsRڬA&#9"lN~W2JZ9vAJx^RMo0 =VRx>,-ckEUO衘N$!o޵$f җ a3`o}{><'wdK<٩pfY6YU7e>Iob/v_$PEa':<CZE@1NlL߭&xyAb2`^ˆ` >N|ۃ#ӌ>acIL3e>h?կmunSwg xmbģ=Hkt]ySU\v `y8vmezotz|1&Iyr =+޲%?Xot?O٧ehkEpS͹[zEV-{^p7 s+/dH(voe]جY%:;Z2fgwQ_>ґ}C!Yr߶?\v?H`Tx++x^n0 SlM ͗ދtE<ᷟi4@&@"%mKC}%TS}EZ쩞С?Hq/L|$+,|WLmR]䛼,Hnùk/)l#L*J|vaA3x^mRn0<_H/-`:qK"-9SZ"B IIw%[v_:p8Km+RG; zX#{m Ahe !bH9kq9֠nyJ=hq>Bp{$0aRa4ZlE` :@Py;B^:XCb+$E՚6{LtNJߌ Vf:NQW i! ѷ2Ʀ{֔ )p/r^޵V]F?õE'rÙЊ=3?ePAۇ$[ԑ g3;z"Vb8!JĩV:Hס?,['ن9S:$'WGdڧLNdnI3xr>5 PAu(ܢ%yDeru+>iEhY7TK1+&t.5g,5 :lxF?=pwUi|}k]D:ucsXiR5JWlaC0LZ.u!T C^JyvGrAux^R0<b;J:,Ax^}Sn0<7_Х@QAr(rm/L*IN8AXrfvvHNȳ8bbik='L<:ԋ*({CvYPARBȘ-j og~\,20ڠ i o@=*P=BВd]B(Z8d@&OltѠ2FAPcgtoifRi3[q0ZͬI$ pBѡ顛` 1S+ hj[Upaxt=ǥp( lX y֫傳w\ 3Cb0E^ww/3th$b.K;{\Ւ;Mq6u)7QҫRzvͲ ܻNa slkwoaY!_}M1 2,x#l\r,X .<4aGę}\ H4R f}ZLkWr\zSvi)EKWfibr{zۑ*M>.σN# e._>f$EA?Py$v>A8x^n0g)dFfh ͠ț$2%o_N "i%[2A젺AG<m Dَs@5ڪ/by)6; fo.; 0Bil&- MF߯H'ƜkwL3XΊm++XgT@z1p@j@*.emZN I"?l+q5;=WA/ "pd{Zˠ=J2xtb0_cgY}NOd3#o &ێ)1ۣ5q% c^Of3&dnzyS p0W?b%!P9" )K҄!_%c= 'iŀ!v p?zN?`qvx 8Px^Mo0 ˯ rڀڲi@1^}*KtT\Iv?NfDޗ#z=g P^3 g]5k["m݆锇 H= !nbwY w€.D {}7rjmtBh@ APh(E^@6~dlinux-mozilla-devel 1.7.6 1.8.*06 C6l2뚽6Ԯ\XOh)F&yxt&[M%ҭXg@ +:DDy$q/+A,8{XLC z7S qZe؋pIiJե&|z,lK_kXg "еEI70IyA=gO^[cAϒg7r hܷGDV\{czGݎyRiU"Ycx8BAgeK9XMW*e)0^5q*gS3Z׿ҿ Q:lm>aWv ڴm"iͲ60NJS;\r@A,x^]Sn0 }NP[vvm(núaʼnPYtIe'6Æh:"l4|bAUw v#7 їg (#!yX{0VBgxQASB6n XJ;}u!1^N (:\k h, '$3%gr;9nxn]ÚE-s0i.fT暳BȜSNx(LG(=Jm'] ROhy=5gl]wVb֨sRvY-WBيiuݮ=hdqUOT = OJ\PKp6SBL'Fo&|} | &_nYVn7E"O[eto g:Cw%^L9ʹ uLJjvԛ4XRm1}8*)ѡ!VƁ:>B $3>1F@is[F3F'xހ["H9UAwx^Ko0ͧ@=/I:TU{{6Xlن4~ CmE33I?.D (4G4g{N&Iv75){OwZ`iZ"ԠqVPCa.omtM,_Dk78QFXl ԍ'DXWL ظ#wH&?==8 3)f4 ԶGz4]fOn=* Fsqʋ[{K3\9B\CGc3Ϟ%k )Ή" TnFs!6mv,c@U~T R} jY3DvdΙE] +s.77|Fw <7܉.r %iiN0]T"2]oZ8RKv?zZwx^uS]0| xK$\@ !t ޤV;/l&ٝXtRD!m'5xi41 ;$z[eYQQ~@ 32]`UC8)L #>妣 BVcƜSc[z8F"SF;# u+5nIf,K4^A׿ ɟtR dZk~~V~׭2XyYy9/= GCkJu;3n[Զb/26V\фVbugDM:nhu7r)D5FF8yHW˵tE,1"^4EQ,ˤs0396p򦗼ف -