@@ -6282,6 +6282,45 @@ fi
$as_echo "$libc_cv_has_glob_dat" >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker sets p_align following sh_addralign" >&5
+$as_echo_n "checking whether the linker sets p_align following sh_addralign... " >&6; }
+if ${libc_cv_p_align_follow_sh_addralign+:} false; then :
+ $as_echo_n "(cached) " >&6
+else
+ cat > conftest.c <<EOF
+void
+bar (void)
+{
+}
+int foo __attribute__ ((aligned (0x4000))) = 1;
+EOF
+if { ac_try='${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS
+ -fPIC -shared -o conftest.so conftest.c
+ -Wl,-z,max-page-size=0x1000
+ -nostdlib -nostartfiles $no_ssp
+ 1>&5'
+ { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5
+ (eval $ac_try) 2>&5
+ ac_status=$?
+ $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+ test $ac_status = 0; }; }
+then
+ if $READELF -lW conftest.so | egrep 'LOAD.*0x1000$' > /dev/null &&
+ $READELF -lW conftest.so | egrep 'LOAD.*0x4000$' > /dev/null; then
+ libc_cv_p_align_follow_sh_addralign=yes
+ else
+ libc_cv_p_align_follow_sh_addralign=no
+ fi
+else
+ libc_cv_p_align_follow_sh_addralign=no
+fi
+rm -f conftest*
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $libc_cv_p_align_follow_sh_addralign" >&5
+$as_echo "$libc_cv_p_align_follow_sh_addralign" >&6; }
+config_vars="$config_vars
+have-p_align-follow-sh_addralign = $libc_cv_p_align_follow_sh_addralign"
+
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for -fno-toplevel-reorder -fno-section-anchors" >&5
$as_echo_n "checking for -fno-toplevel-reorder -fno-section-anchors... " >&6; }
if ${libc_cv_fno_toplevel_reorder+:} false; then :
@@ -1472,6 +1472,35 @@ fi
rm -f conftest*])
AC_SUBST(libc_cv_has_glob_dat)
+AC_CACHE_CHECK(whether the linker sets p_align following sh_addralign,
+ libc_cv_p_align_follow_sh_addralign, [dnl
+cat > conftest.c <<EOF
+void
+bar (void)
+{
+}
+int foo __attribute__ ((aligned (0x4000))) = 1;
+EOF
+if AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS
+ -fPIC -shared -o conftest.so conftest.c
+ -Wl,-z,max-page-size=0x1000
+ -nostdlib -nostartfiles $no_ssp
+ 1>&AS_MESSAGE_LOG_FD])
+then
+dnl Look for 0x1000 and 0x4000 p_align.
+ if $READELF -lW conftest.so | egrep 'LOAD.*0x1000$' > /dev/null &&
+ $READELF -lW conftest.so | egrep 'LOAD.*0x4000$' > /dev/null; then
+ libc_cv_p_align_follow_sh_addralign=yes
+ else
+ libc_cv_p_align_follow_sh_addralign=no
+ fi
+else
+ libc_cv_p_align_follow_sh_addralign=no
+fi
+rm -f conftest*])
+LIBC_CONFIG_VAR([have-p_align-follow-sh_addralign],
+ [$libc_cv_p_align_follow_sh_addralign])
+
AC_CACHE_CHECK(for -fno-toplevel-reorder -fno-section-anchors, libc_cv_fno_toplevel_reorder, [dnl
cat > conftest.c <<EOF
int foo;
@@ -378,6 +378,15 @@ modules-names = testobj1 testobj2 testobj3 testobj4 testobj5 testobj6 \
tst-auditmod18 \
tst-audit18mod \
+ifeq (yes,$(have-p_align-follow-sh_addralign))
+tests += \
+ tst-p_align1 \
+
+modules-names += \
+ tst-p_alignmod1 \
+
+endif
+
# Most modules build with _ISOMAC defined, but those filtered out
# depend on internal headers.
modules-names-tests = $(filter-out ifuncmod% tst-tlsmod%,\
@@ -1995,3 +2004,6 @@ $(objpfx)tst-ro-dynamic-mod.so: $(objpfx)tst-ro-dynamic-mod.os \
$(objpfx)tst-ro-dynamic-mod.os
$(objpfx)tst-rtld-run-static.out: $(objpfx)/ldconfig
+
+$(objpfx)tst-p_align1: $(objpfx)tst-p_alignmod1.so
+$(objpfx)tst-p_alignmod1.so: $(libsupport)
@@ -1101,6 +1101,7 @@ _dl_map_object_from_fd (const char *name, const char *origname, int fd,
size_t nloadcmds = 0;
bool has_holes = false;
bool empty_dynamic = false;
+ ElfW(Addr) p_align_max = 0;
/* The struct is initialized to zero so this is not necessary:
l->l_ld = 0;
@@ -1151,7 +1152,9 @@ _dl_map_object_from_fd (const char *name, const char *origname, int fd,
c->mapend = ALIGN_UP (ph->p_vaddr + ph->p_filesz, GLRO(dl_pagesize));
c->dataend = ph->p_vaddr + ph->p_filesz;
c->allocend = ph->p_vaddr + ph->p_memsz;
- c->mapalign = ph->p_align;
+ /* Remember the maximum p_align. */
+ if (ph->p_align > p_align_max)
+ p_align_max = ph->p_align;
c->mapoff = ALIGN_DOWN (ph->p_offset, GLRO(dl_pagesize));
/* Determine whether there is a gap between the last segment
@@ -1226,6 +1229,10 @@ _dl_map_object_from_fd (const char *name, const char *origname, int fd,
goto lose;
}
+ /* Align all PT_LOAD segments to the maximum p_align. */
+ for (size_t i = 0; i < nloadcmds; i++)
+ loadcmds[i].mapalign = p_align_max;
+
/* dlopen of an executable is not valid because it is not possible
to perform proper relocations, handle static TLS, or run the
ELF constructors. For PIE, the check needs the dynamic
new file mode 100644
@@ -0,0 +1,27 @@
+/* Check different alignments of PT_LOAD segments in a shared library.
+ Copyright (C) 2021 Free Software Foundation, Inc.
+ This file is part of the GNU C Library.
+
+ The GNU C Library is free software; you can redistribute it and/or
+ modify it under the terms of the GNU Lesser General Public
+ License as published by the Free Software Foundation; either
+ version 2.1 of the License, or (at your option) any later version.
+
+ The GNU C Library is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ Lesser General Public License for more details.
+
+ You should have received a copy of the GNU Lesser General Public
+ License along with the GNU C Library; if not, see
+ <https://www.gnu.org/licenses/>. */
+
+extern int do_load_test (void);
+
+static int
+do_test (void)
+{
+ return do_load_test ();
+}
+
+#include <support/test-driver.c>
new file mode 100644
@@ -0,0 +1 @@
+#include "tst-alignmod3.c"
new file mode 100644
@@ -0,0 +1,12 @@
+ifeq ($(subdir),elf)
+ifneq (yes,$(have-p_align-follow-sh_addralign))
+# Test alignments for all PT_LOAD segments with a tst-p_alignmod1.so
+# binary if linker doesn't set p_align according to sh_addralign.
+tests += \
+ tst-p_align1 \
+
+$(objpfx)tst-p_alignmod1.so: $(..)sysdeps/x86_64/64/tst-p_alignmod1.so.xz
+ cp -f $< $(objpfx)
+ unxz -f $(objpfx)tst-p_alignmod1.so.xz
+endif
+endif
new file mode 100755
Changes in v2: 1. Enable tst-p_align1 test if linker sets p_align according to sh_addralign. 2. Use the x86-64 tst-p_alignmod1.so binary only as a fallback. ---- Linker may set p_align of a PT_LOAD segment larger than p_align of the first PT_LOAD segment to satisfy a section alignment: Elf file type is DYN (Shared object file) Entry point 0x0 There are 10 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flags Align LOAD 0x0000000000000000 0x0000000000000000 0x0000000000000000 0x0000000000000834 0x0000000000000834 R E 0x1000 LOAD 0x0000000000000e00 0x0000000000001e00 0x0000000000001e00 0x0000000000000230 0x0000000000000230 RW 0x1000 LOAD 0x0000000000400000 0x0000000000400000 0x0000000000400000 0x0000000000000004 0x0000000000000008 RW 0x400000 ... Section to Segment mapping: Segment Sections... 00 .note.gnu.property .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .plt.got .text .fini .rodata .eh_frame_hdr .eh_frame 01 .init_array .fini_array .data.rel.ro .dynamic .got .got.plt 02 .data .bss We should align the first PT_LOAD segment to the maximum p_align of all PT_LOAD segments, similar to the kernel commit: commit ce81bb256a224259ab686742a6284930cbe4f1fa Author: Chris Kennelly <ckennelly@google.com> Date: Thu Oct 15 20:12:32 2020 -0700 fs/binfmt_elf: use PT_LOAD p_align values for suitable start address This patch includes an x86-64 binary of tst-p_alignmod1.so to verify that shared libraries with such PT_LOAD segments are mapped properly, in case that linker doesn't set p_align according to sh_addralign. --- configure | 39 ++++++++++++++++++++++++ configure.ac | 29 ++++++++++++++++++ elf/Makefile | 12 ++++++++ elf/dl-load.c | 9 +++++- elf/tst-p_align1.c | 27 ++++++++++++++++ elf/tst-p_alignmod1.c | 1 + sysdeps/x86_64/64/Makefile | 12 ++++++++ sysdeps/x86_64/64/tst-p_alignmod1.so.xz | Bin 0 -> 7476 bytes 8 files changed, 128 insertions(+), 1 deletion(-) create mode 100644 elf/tst-p_align1.c create mode 100644 elf/tst-p_alignmod1.c create mode 100644 sysdeps/x86_64/64/Makefile create mode 100755 sysdeps/x86_64/64/tst-p_alignmod1.so.xz GIT binary patch literal 7476 zcmcK9b6Xvb!+`OVwQR3CnaiDO*~W6q_=a_A)iRfD+pcAwbh7PEw$?J9-<x<|!Ts;& zy6!gtFFgYQ0P%3CNfsVJ14je^09-i_iatL4P&bVMVhJ+8ZABwW*CJuT+^RPhS2iR9 zC=GX-@MYU5NA5q69QBanCtOl;oSC}%b0<{(vZK4y4EzcPH{oIgP#e74Bi6NqXl@vu zp(oXpcT)!81$<nDsc8-kchh|8D1J7#0gXEu`p@=jwy?sMG%~>R)x4!N6`jFH%WV59 zNcijB90~aHiXx37Zdj^YmL2%)mmEixo`hph&FR9b0Ah+H!*!NhKbMOz5_oANN=L?C zkr@K<8%WnMtsTeI>}3nXmd6&QEHU88g}{PH@e+W2Ai&F>oDz2X^;|M+ydU$?Z11ge z9JW9g^))9C(ykQczc4``jWK#a=-W4@5~9M|IelkhbQ`M@W|(7Ffr$;K2TM-(Q@X44 zG3hkjfD(B`8@^vq-e@mIcHPF3(?JLU(ovYCz*?EkESwZCxrZ&L)jwoe0ytVuihW>g zjI;Y7#uUH4z69=-!U4h^<)UV%6?p6ueC=4~UaWXl>JpAp+FAe)b<Vx`uZ^J|e?cxk zAp6(WJ$t;aym~@;v+l~f533duhkE?d&l)h&p2{zs-GgQA@LJ3&A8k#lYuop3oXYqV z)^AgRt1uFrbeWnav}_9X+h1J&$=;z$AF=h8x)Tv1wf})e7IcSPg6MmT9m8*&|NU0e zvrdvU3mqWP;SP<^UU2803y3!by%EFm$i$i<CxSXp+qU@bSDcpSqG~v=zzDIi7#_M- zjqG&HSU4j$BhDmAu^BFv^N<0K+E@MxiLDJE<Z!9?i~yF7Sp+wJem8c3f}#TKemhaj z);FdSC8|aBW7^Ak2?VHViH~%y+VexgxU@WQ!KL$kKLhM~MbsYFr2AQ})`apvY^H({ zZndk7KLw5^m;$5S(Gb0SY7@8oQVP0sWZUhK220j+Ij%((@GGV0Mos))xr+scW;xVL zS}?6BVK6J~ymLqOBWp6SFMAuE7M=v)8RX;ay7UAu#dYI_!mnMa^~%3%wVg=n42zV0 z$oa~K7MB)AA0ttHj(zWs@)(iSv@yzy5x$#%YwWCToXZ6x1V}D)Y`xa_^1G@A8j&LY zPHll>`~<Te^dS-?*@-1~QJG;dPbs>pwLtFw4ri>!Mj?vCXXzB)vE28q9+lbHm_n6G zLsjzdOiJ58+)CE(QFkyTUEX#$;!go`;<OCMVsLy<o-8#zN5#>F<>LbN44TwL0#$!c zOch4!Hia?6k0Bd(P)}@JI*EKTcifd|Xsz&pM@T6r?HMY@2(*}0I3|YxIWAjHHnE-b zD=r^%Vzl2Bq62c`&oK56@Acpgp!KhMPYwFgVD85N<dpJ2v5e~!iGTc}+H2~9G{=Mn zl{(=90LcwUy4uekRI$)cc$#XNE1??zu&SiIKO(iVGO;^fs17I808j6r3kA5CIX_l{ zU#A2!`mLe1+Tqj|PpZ2l&Vdk-=`Gg?!yQ-}ij<Z`PR9XqMhDL3>dR!+ZiQYF@Na;4 zmq`#U9cuipII~FICX(+VSh47HCr-v<(e_R}9RI4A$DLL@G1O{kBq*w1^1S}c-W$q8 zy;^(jlZGO$!M^#bZYPv%VH@?@MaIz)vfoE&%B7m}!`gj@)g?BwZkks%JU*IN?;j#} zqo$jz|E<^|7@8ilQ*~`=-4+WPgLkc{ZOTSxaN=XeZTz*|n=@?0e<<3KOY{C+DafVm zj0gX-h}ST7q8C@jz$mP*T_#SnqP6T|S8SLH&;4v2!irH;t@18vjpF5sljR;6Kfh5K z7%q;>Hq!!J_3ZdYajGxw=8^N)IG`D)Vabq!xAUK<RJjwjRRf2O4H-K2K$%a%DdXRy ztlx0e2r{3BE&?7@H&@g&UdB5QR*MsF;p@fV+(D~#N3q082U+rnbf&v_`{+{)A4l86 z#t~;UGJ{Rddz#)25WeV5&El9pl8!v;o_z{91kA%qdL(<K%nPf1=mBEa?m-(=Ue z4%O(^Ku?oo6`L}xiG@{;5;u1Rre!hwkc(6sIV(Q!#{FPyX*xsU!OnmDav#$DaWZCE z%q^^WnGvJ%y(TCtK_p5K{<`S}<<n}7U*LQ=K)_tyewKJa)JS_wAw~#MZQ6FJCv`1@ zxxZg3_NjWAdpv?2PyOfCuPhCAb|=Nf!6}4q%oK2Fnda=t)|60O9(NQ*g8JTfTE7i# zq@d=?_t`*)^zEXhuSi>&9`)lFFPA<qtd6Moar?6^+6gNFN3lN*WT+=E({(PZhGBt? z&0`@qX(Q>j-()$efhxSXNz%LJsBRz3&9}H}4NP;X?xD<*5;OAs2thXu+E#@)nrFYO zczrcJVYY&J>5T+;(@)9DJ+w+&NIfRgYj6qjgA0%c<U@~~2q>m0Xw{kI`RZ_OcxCMH z=b>)r*oZxk;OM&q*xP_=iOuTLbm@DFaP|F;dc%&1OZqvm*G(lWn`62+gF|+pHyl}^ zt||Q;6<{IvDMR`M-k_APoy8A*F`66;F7f*-o?sU2(nwjTKV8}wRN^!VRx=*@eAU2Q z{j^D0mxRU;u&eQ&Zh8bhDt_gf!2sqtZoL#n&zA|IQG$`knVGI+p7@2~O(P&I<=At4 zUzyUFp>l`Al0XaUVQ$#`AF_+QiByk}Vh3UOLQ7@U2C!-Dr6#>?PxJRUGl#NJOx<o% zmMIj(%e<`;$?<S8BS74YY8?YpvNN@491sT1Eu%9zXBrQgO-YaRV@bGWbbBC$Ag8OO zzpd0Q#$ylCYd!u;;QxYDQh({x2Ud~$G@F21Sz}7sG1b6GVx%8>Vy&sybK+jDzkgte zg!(kRR`dFz$?7^uW%yb0X;Vw|k=YVWIAEN`VY^xQda#?rq!Rn9lC@+!KGp|L(xbD7 z{v*cZM+%cHcEzjD)=MTAhYlnz<Zo~w#OnVgEx(Vv5g?pTfD0g;SaF24C2L=$PAr4e znutqBICPpr<B;t!cwpG}^x@&)br;UBK23!m2fqZqf9y|JTn@|a%<EY0&cW9RqT!Dk z4sC@a+4r@?Pt;nh32LLcV_{b>dwoyK(=72BQ!(mX?ZDyap5Phq!d(|G8!^a5PaM|z zEh^R(Z|w==11Vo6=aO}yRP<z$|pgagju>HL(*c?BDFy;iBwq*RtZ#WcI(Z6R`^ z&x}@oETmZW?$tD10I4Xx(eil(bhT2v5Bz9E1nPw6<YQ4$3Q5(r3m8LI9}onwxagoc z7}9iSFct=rRUDqW?OZ|%bvXOAgzm1d^Mq0!F~+KYz$I@^3n#L6a<YWj=^SUPU50&k z{a;<fvwY!?dlquP5EFLTB)2uZ3iF?G<$>*rS;7`e+2#Qvzsm%efh07h$EBAQPuR+Z z)%E^vgXz1O6Gc?l=PH~G0N^Mtob5uo!Ax$K1A3GhsMpbZMDJo;@*=#a^Rm?3$Z3g& z$~LfC_-m3t3p`p~EpxG!$ToGffP_1_Z$;0})12?A;w?M9TRVPMMBbGQnt#kFJP%yE z3ia(z(KzUxcmRhJT3@pQ@CI7>N@n`Od9{dcH<A#93wfQdq*xd#a=iuBrELQduZNFy zXK!x%mn(j-z!_r_Q$znl=f!Ti#p=Kt;#R%4by15_x$alm(e4Pa+@uQf{OE<o8{||h zQTXg33OPvK9O&FY!|K{Jd2GeT__wcCbqKTX9@wr-AEM)OhD~yN<9U#^@B_>@)vD|J zzEtw}y5)4>DHNfGYbdNGHU`<j4fFrX3{8#OTlg~cH|RbMt}B$~!&=xFxV0QgV8DZr zZLl}~hcM(ZcUZnKg$H@|$MK^sYg9J9Qn9-ummw5?hCDyx?+2|a_KcZ)ok?soReV=^ z4}CLZZv5fTn_00a$!O*n+P9k#EupJ20*Srg$*b6Euf^FSpS1Q*Q98KGN)C+=mHVlF zU)T(fK$-xz2lQoL2y*V-*hsr>w^}3r_lCi^ADhAvPI2`@@dK<Ls@)f7YC;A*UJ2jX z;`9rf`v-?#Wqlwh38sF*^q7q7c(2kQb>N+fe5jLPg$4WRuKu$EJPO2-2W2b@nE>$) z&cZ&d1E(OUMdp)a3r)*4?=(Y#{vFCc$$Sn)qUFNc-t37uF$giQuvAA!EY6x&R>dRN zG*zx@<m(GA@9?f%*4ht#c?^?xj&BBYDx{~<b6t&GVM7c6sv~!A#qe6DobM|u+*64U zcsP3|_#Q7NWW)LfEzekcc}9DF)*|65V2Ga8x^iM2OJ=-%Zk@sT_mH7s(mZDgyQPN( z!Q21F{(9(lJ+6QGQo)Npp+Fx+117vr?8@3@yW}j^)f5e1{D@EQ@vYg3BvEc_kgm^5 z`#9(gr!{`04?SLpKC})QFz<xi9-`2dHRyS?r#us(N_f?_h4x4N=r3f9NvZD-aQ*gN zlMuE)lZ+FJ8dg0XX08|qGv?ov;Xr8+_OTOqsR|%KR@V<gHQ>1TuOQGI+?G@r^h=n7 zo}WGERHt<7zjB@>XkWN<>V+n=eCN7%>c&8fg8-fBfdr?xZSsU_0{$XCtFhe?CzBU= zG$eEGaBO{B6jf#(9*;V9^rf7$Z>$v2fbzG`JC|rIv-F{ekJh6ij=vF3J{Ki&{n{%B z)&|Rk=C#?uc3RC${Q`B`pS=kgC~L}&%rm3}DL>uW&^0uSA!vnZ-uh5|)NwZSi_cWV z#s;=cRrI#1kb1N6a#xyW<_Zp}`cDhhG<q)(+fS^FEB6X<W2fgl={l`BwvzenlPAS_ zd(9US%^x%Vf~B7E@8%B0Mx~KJT|3u{ZNL9wufiB7)oX>m09TW)$VC%Ws}N~GbEop; z&lVFEUs<LbG{wRd_n6Oiz7@6j{TE<YVD8vwx*8IZgAoeY8H8E7jTTQ{-6)J=RH)K^ zib*=C%`^27yM7eSp};IYR`I>8sas=19X5I&VE1cx9m1u2wB%@aA<s9b2A{9ppPyhx znd@TzrS}#lC89T&S3ekhJo@X_iyvUww{7pem6%D}61h$nvN`}Uq>pO}FXpS-8IFyH z*r53%!S61cyAELs4m5`97I@Ge;NVj>F0Afhx>h_R;;O+_Kgw7^^lOEf7B**R2^A1T zt0m9@d<nKDs0@_BaYH2ObNCo?^NuVn4Rwv5lq(`YgIv|ZD!yW3O-_86IPjY5tG!t8 zUINC3&4rpR18_bt-_OMeFRnwWM3IpVg4R_Zc?yU*S*)*w0&?#?zW+eQxrDMez;>08 zVqD+FiOD6{A|>&ScWGIH2#!7G)vI+VSC2R|?U^#ZUX(~k5=$6NYuv>U5%i4PFC-2} z)8$TOH3;r*w|!EP&A{wH4%EWcZ(53Y?n`Ez%*pjeu_LX$YF0mfxCIj&h><5cEe%8v zxUz6TlJ+q*pw2Rktg_q-$UgV~nJCPFi>525vH#1zb|m)Q`hAW<dGebG|Luk`<ac$t z*r-pvfM>=P;l6IML!d^<VN`s?Z?mdWs9ufqMaOhS=sMWrogUNV^6Ihlvx6RE(PT18 zy*^<aOQ&5#-&2>dYjvtJ{g_KHf)G`Swr)0E=qXz*z=h(grj!l^gCAAc5!A*Pdg8vc z1aD$*)z@ZAdP#n%lMs3|(P2{2uPpT?kb@M1&;KjK+N;&?(*Xd2ZeEYqZIL#(W&0J= z_cG#q{?+2O-&2R`_D8A^+el!iFCq{p&c7VjaCEPh`vRPjV{0bY_0Ld0{2SBI^exLo zc#Q<d?A$5s!sczX($k;#bXC+WtG$ihmK*pmE!l-BWRYK2CZFmGkNtXes2xQ4*Ju{Q zc7x@e8V=@4$GK<MYP{#m!inW(yAg1p^{qQsdQsFubBN!%cMdJMAWOE4cJyxsrbkB< z!kUD0$#i?zO`Yn!1aX1iQJ)jJ1$>oF>`{TSp;RSIs>HyCFb6;%Sx>A-uyw(>;f5-K z3mzd6C6)KZIZvqn$(o`Tuu+$r(6T;&$<DI?JiKT;JPD!2^6<GH5!rOs#s2}jT>N<< zL-y*@ZULXQxQ|%Yq{^`uo4q|%_05lup7)xQge2~LRHnoF$S=WK;YF<Ccl4`qj;6rQ zt2D+<Tr<-$a-J*yaa4DV#$oF!=O$3T;oxbL<cRcvK_I1P>AY1Tzx+JXXu6c@3v$Up zT!Fxr!6T*Kq~NXwV|hj(-&i^d;E#yz$2R87jZLt8q0u0&F`1%tB%eTap=9CbBm-<# z3zmlscAQyxrR?mM#fsklK-v*?<6c2<Cf237hXVrnOn0xWtW4Dfhf6;3F`qrK`#Oy& zmwx)Nkk@jo1e%MxO(yoNGJ=&3)xMQF0K|;5|JX8<h)g!$Cz8jg2Y(;-B^x(-7|-j# zNWQR7{)RlpGEUMHs^9$9S{K)f=C)Z8%-3WbU{ZGeJQ*Eq1P!)?#*XA{(vbO-y{lN= zX2T;JinT>V^MN$`a@=S?y<g8?bLdiMefT*I`H2f@)N=_DMw(QyXO<J6#!z3JE}@(H zMT%gSA}?wf>TAi^2q;$PQ1s00$Hp`<?mGHqyKwLvvP|-zNMYyu@(9(rBvt}z|Mp># zFDS6^FwJ|7_3e|}-}i)_Mc}p9EgKs3$*;0R`-czJ+<N8$i<Z)y{?y=N@TDT=^-T-$ zRXL*0)vhe`t>_c)Wu`~*3yJM0$TagOsWF!=?_>N!T$lIURI0Xg&}|XY+fhiK{O>qZ zxA7CO%(6(pIZ}3ca2HUY8fu6sSmrOL`1haWt~p}{1^5Yn=>%U~`Df$>k-Ue>eHvMa z<sj@g#jj@Bo)A?;uea-~%KpmOb^8i7bg^IRaYpxZG^=V#aJL|3Jss!h^hLQ%lZ9QZ z9N~g#EmuFqEA0DR)|cZRh|*dT0F>Z=EV>$>c~pX3pZM&)7SqQ-kCIn*plEOSj?|m~ zh>+EE@whE5cHHc_PVbO1M?!AS0)5o@pa;q9v%7(rwTbTLaiAAMklR2Cz<`53u3CJ* z{cnpi*`29~?=F^$Y>=N#@F9l@tO0g(^Zx~f@Q*FJoC)OqZc>RcjH0EuAP*4gCi!Qr zL^e!trRBIBQ$>cBhgxOIL`o~^I0CyT@KOqZqzu5~2^uKO?l1oqEE4UoXL`L{4d-ng z0*!BrYNO@0MXEI01sJX~tm1Pu%=o__w*rs>5wYp~m`5y?mDpGOmA2DUlr!A>Bz|#d zj&Dds!VF@{8kyq>788xe3S{lr43I@T+c&pQim&&%uNFw<1oCd63j3|r>nam{GftD2 zoW}lc93NyaE8RXB96a(2AtPXZ+dt_}j}=Q*wIo&xt>al;!(R{1(k`@;N`FP>!+2wG z0Fj^xf&;hNLC}XwBQ?)};=0}V*ATdaI@1uJ*|wUeLPMdG;@42UD91mpr8Zh?1wl*d zVPU6xu=}xgWc;e+A~~ctoy~8M3mO_!6_^wh^!dUsg|bTu3&VT3yv(|;oCAoNnKdv3 zAsL3dt^!jVt)>um{28$ey`UoE8(#l#tJ&Q>mn(y|dF9C0JGG%93PaRZMsKLzj;Er8 z>yuUU76qAG_xf~eWTbyN360L)7+SN5|2X@OCrG(h|3j&`bGTA1GaE1iG&}dX^LS88 zS}v0_h(7mBg>qV6r7!aE#^FMJ#d7qon4Jmj7GnOEFn{h+G8$0kBy#w<Z{?6OoBq~Z zS<mkVKQ@!-yQwC^<wiy9KwCe428~bXCo^3NQzN9~yP&^yTl@XMWRI+tvnZKXeR9g@ zg^CvsZi5bQD8k&W;er|R^$ib5pIy4bZxVjkfgVo2_TPP;E2=N7`+9h2p}xc*0b3=u z>*VaMf_X%q1h|j4BR-JU`_8AuzIW{Y2rfr1lvZo`m`Ta84(TLk=3+uCipWSUW&_XG zuU<K4jTT_5F-OTNRlnq(Eiq?J*5P{bFBr%?wWfMVl0in#<ZPq$jwv^<#rO!IbF()K z(`x!j&gONXi4DJXhSrMR0`1$)q)R_DwS>EMDM_>c{v3E=+YsQowVMx1K`Pr(i?faG z(yFJUCDnb<f7D486R^Z&%DR#YN$)PwGeko&8jZG5XcJTjrH+jX^w$aS+vBK8Guake zxvO@kEV5#Gq)+`CQW9KwkZ7Oi{&5aqCPRrh0_0VKx=92oZA~pkDN}FDoq^#Y*GM2r zyMCv-x%=j3$d(MvLg08~fEImp)ApCrpb`ZnwTY?LjXlAbn>|>_I?OfMJeTwD`_Epq zF<U|EwD*QFW|odTUJ{?L4B=su(NV99oMX?Y2rr^r>?^7jU(9pqRtM~Kg>?&ArHFw2 zOipjSt#C9Lz>mCSt4tj7pH`bvaX-VD-mWs9%$g-K(K6n)BnJ<3Kfo6Q=!b5H7Sr*9 z-08N7xkktPMjYCSpT$*FDw&$J%R{w<f74fT@$(z%m9|v-C}IaKN>rUIVpusC4=CDh zf|^pb1m;P-)OGHb**_YcCo(ndyCj!rgmf{qFc(l@EG2P9mo&UbM5|l{=AiV!bsFCD zTKE%$mL1P<?E^yD7;^=R7e{GwX6|@Zc;`>!s3Zx(-vkW;5~8!sQ@qaU{Ko=@4W!+* zW|tbbZPG<vw(mtRP92X53AR9>*9bu)H%kYXOS72Gr;3{_w5(sog@q?vWx}f!Xat`_ zbjZQ6iY$HX$;Tk)^D~KNOX>Zo-P5D{$^9Hvc8@_>8zVN4Xrv-EK?<b7mUJ4@sD_a% zr<@Bmy=$+tDF#PV&(RgrnbOy%=(^5g^-n%6kd*mJnqr_v@5K7Lb4RyA={LX+-MiKa zm4-2RatghlCx~Cf#w>V>Q_yQ;Xj+{AYAbQeAab|BadrQBK}AGXWVj^saceHg^2g2> zsWDi&Svr2-84lr0Bw$2q_8P^49r}1T%URl=6<Y2oob6Sc9DHSQ3bFU5z73X5v&OaQ zDTVKE!*++``x)@6JFveVniGIJL~0VT!3BE?FJDB;IWvz5Vc^{P`_%S$)^n>AsRjS- z7y0y9`#hUdCCwB#mx3ca)m!KrafYN#&YcA4u87!@%;)XYJ`T(68oe;~^m#^avx(|R z2DrNo<u`02mKA7sZCe(7a!&TjUcJ5fDHkIC4{U`_A;S4yMQGq#fGyCK^>*Df=B1Rp zqQT~YGD4Q5NxN&f;3CzsWek0y6UFmwnvhHSvs#s9Xxr~y3W?HBLZGxBhND$@xo#W~ z@>tj)MpBb|E?VLgVFcT&deIkYUE^ty%)1?@elJmodd7=$50PBO!hr*dCM^f_#zgu_ z9*Z}Tt)l%?LVu^F5!0eP9Ake}{2~*Op*RGSimXo@p#`G6pth#4ioGX(v1PGP|DTD- zdoT4UW;E!q<9}^$?xccF8J{Uz$E=MY?8&7L61cm9(8^P($fVuBkJ3PcYV-^DlWz=% z&F*5R^s~`s`56wMX`aOWrt<r3A^sB%5;CfKW)X^*g(Nn2t+sLq4x-%y@h3S_zT-=g zSYjR<wafXILv`U;zgp<#h-76t0(rYxwEoZ{jtkL;@+No3ZLJ%U=>|B34adeIIM@Cw zi=%*(O!`?nPlJSmzi>K)JxwmrWT<qS=J-AFES*#PqRyhK5#T*#BrbiFVMm6@sy?DL ztvS^aSW73?E#T=1KLk6x?C|2vh@_gzkXt~MaVnfiFfPgB;#!kYiLanEgbO&oMM)Ph z-L|m7FOe|v4_LW>^IAJ>1F_~20Y~WnIS2r=eLJI859K6U{GVZmFqn+zsHr*^rv?hG zofR83jLeXe(6J3_k2V>Ph8r9q>ud)$%?1GY+>KeO=p`osaPgr0`v5qE4aAU!L7Nx& M|GiNFqQ1fZ0T@Mr`Tzg` literal 0 HcmV?d00001