tpm2-pkcs11-1.7.0/0000775000175000017500000000000014124415534010507 500000000000000tpm2-pkcs11-1.7.0/test/0000775000175000017500000000000014124415534011466 500000000000000tpm2-pkcs11-1.7.0/test/integration/0000775000175000017500000000000014124415534014011 500000000000000tpm2-pkcs11-1.7.0/test/integration/scripts/0000755000175000017500000000000014114240163015467 500000000000000tpm2-pkcs11-1.7.0/test/integration/scripts/create_pkcs_store.sh0000775000175000017500000002244714114240163021460 00000000000000# SPDX-License-Identifier: BSD-2-Clause #!/usr/bin/env bash set -e if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi if [ -z "$TEST_FIXTURES" ]; then export TEST_FIXTURES="$T/test/integration/fixtures" fi if [ -z "$TPM2_PKCS11_MODULE" ]; then export TPM2_PKCS11_MODULE="$T/src/.libs/libtpm2_pkcs11.so" fi echo source "$T/test/integration/scripts/helpers.sh" source "$T/test/integration/scripts/helpers.sh" echo "SETUP SCRIPT - DBUS_SESSION_BUS_ADDRESS: $DBUS_SESSION_BUS_ADDRESS" echo "SETUP SCRIPT - TPM2TOOLS_TCTI: $TPM2TOOLS_TCTI" echo "SETUP SCRIPT - PYTHONPATH: $PYTHONPATH" usage_error () { echo "$0: $*" >&1 print_usage >&1 exit 2 } print_usage () { cat < /dev/null if [ $? -ne 0 ]; then echo "TPM2 TOOLS NOT ON PATH, ADD TO PATH" exit 1 fi # check that tpm2_ptool is on path which tpm2_ptool > /dev/null if [ $? -ne 0 ]; then echo "tpm2_ptool NOT ON PATH, ADD TO PATH" exit 1 fi set -e # init tpm2_ptool init --primary-auth=mypobjpin --path=$TPM2_PKCS11_STORE echo one # Test the existing primary object init functionality using a raw handle tpm2_createprimary -p foopass -c $TPM2_PKCS11_STORE/primary.ctx -g sha256 -G rsa handle=`tpm2_evictcontrol -C o -c $TPM2_PKCS11_STORE/primary.ctx | grep -Po '(?<=persistent-handle: )\S+'` echo 2 echo "tpm2_ptool init --primary-auth=anotherpobjpin --primary-handle=$handle --primary-auth=foopass --path=$TPM2_PKCS11_STORE" tpm2_ptool init --primary-auth=anotherpobjpin --primary-handle=$handle --primary-auth=foopass --path=$TPM2_PKCS11_STORE echo 3 # Test the existing primary object init functionality using an esys_tr tpm2_createprimary -c $TPM2_PKCS11_STORE/primary.ctx -g sha256 -G rsa esys_tr_file="$TPM2_PKCS11_STORE/primary3.handle" tpm2_evictcontrol -C o -c $TPM2_PKCS11_STORE/primary.ctx -o "$esys_tr_file" echo "tpm2_ptool init --primary-handle="$esys_tr_file" --path=$TPM2_PKCS11_STORE" tpm2_ptool init --primary-handle="$esys_tr_file" --path=$TPM2_PKCS11_STORE # add 3 tokens tpm2_ptool addtoken --pid=1 --sopin=myBADsopin --userpin=myBADuserpin --label=label --path $TPM2_PKCS11_STORE tpm2_ptool addtoken --pid=2 --sopin=anothersopin --userpin=anotheruserpin --label=import-keys --path $TPM2_PKCS11_STORE tpm2_ptool addtoken --pid=3 --sopin=sopin3 --userpin=userpin3 --label=esys-tr --path $TPM2_PKCS11_STORE # Change the bad pins to something good (test tpm2_ptool changepin commandlet) tpm2_ptool changepin --label=label --user=user --old=myBADuserpin --new=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool changepin --label=label --user=so --old=myBADsopin --new=mysopin --path=$TPM2_PKCS11_STORE # verify the token w/o objects tpm2_ptool verify --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE # Use initpin to change the user pin tpm2_ptool initpin --label=label --sopin=mysopin --userpin=myverynewuserpin --path=$TPM2_PKCS11_STORE # verify the pin change tpm2_ptool verify --label=label --sopin=mysopin --userpin=myverynewuserpin --path=$TPM2_PKCS11_STORE # change it back tpm2_ptool initpin --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE # Create a token with an empty user PIN tpm2_ptool addtoken --pid=1 --sopin=sopin4 --userpin= --label=empty-pin --path $TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' # Define a PIN. The verify command should fail because a PIN is required tpm2_ptool changepin --label=empty-pin --user=user --new=myuserpin --path $TPM2_PKCS11_STORE ! tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE ! tpm2_ptool config --label=empty-pin --path=$TPM2_PKCS11_STORE | grep '^empty-user-pin:' tpm2_ptool changepin --label=empty-pin --user=user --old=myuserpin --new= --path $TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' # Define and clear the PIN using the SO PIN tpm2_ptool initpin --label=empty-pin --sopin=sopin4 --userpin=myuserpin --path=$TPM2_PKCS11_STORE ! tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE ! tpm2_ptool config --label=empty-pin --path=$TPM2_PKCS11_STORE | grep '^empty-user-pin:' tpm2_ptool initpin --label=empty-pin --sopin=sopin4 --userpin= --path=$TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' echo "Adding 3 AES 256 keys under token \"label\"" tpm2_ptool addkey --algorithm=aes256 --label="label" --userpin=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=aes256 --label="label" --key-label=mykeylabel --userpin=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=aes256 --label="label" --userpin=myuserpin --attr-always-authenticate --path=$TPM2_PKCS11_STORE echo "Added AES Keys" echo "Adding 3 RSA 2048 keys under token \"label\"" for i in `seq 0 1`; do tpm2_ptool addkey --algorithm=rsa2048 --label="label" --key-label="rsa$i" --userpin=myuserpin --path=$TPM2_PKCS11_STORE done; tpm2_ptool addkey --algorithm=rsa2048 --label="label" --userpin=myuserpin --attr-always-authenticate --path=$TPM2_PKCS11_STORE echo "Added RSA Keys" echo "Adding 2 EC p256 keys under token \"label\"" for i in `seq 0 1`; do tpm2_ptool addkey --algorithm=ecc256 --label="label" --key-label="ec$i" --userpin=myuserpin --path=$TPM2_PKCS11_STORE done; echo "Added EC Keys" echo "Adding 1 HMAC:SHA256 key under token \"label\"" tpm2_ptool addkey --algorithm=hmac:sha256 --label="label" --key-label="hmac0" --userpin=myuserpin --path=$TPM2_PKCS11_STORE echo "Added HMAC Key" export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" # # generate cert # cert="$TPM2_PKCS11_STORE/cert.pem" # since we use the shared lib in a non-asan executable via dlopen() we need to set up # asan so we have defined symbols and we don't worry about leaks (since the tools are # often silly and leak. setup_asan TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_ec1 -out "$cert.ec1" TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_rsa1 -out "$cert.rsa1" clear_asan # # insert cert to token # echo "Adding EC Certificate" tpm2_ptool addcert --label=label --key-label=ec1 --path=$TPM2_PKCS11_STORE "$cert.ec1" echo "added x509 Certificate" echo "Adding RSA Certificate" tpm2_ptool addcert --label=label --key-label=rsa1 --path=$TPM2_PKCS11_STORE "$cert.rsa1" echo "added x509 Certificate" # add 1 aes key under label "import-keys" tpm2_ptool addkey --algorithm=aes128 --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import 1 rsa2048 key under label "import-keys" echo "importing rsa2048 key under token 'import-keys'" openssl genrsa -out "$TPM2_PKCS11_STORE/private.pem" 2048 tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/private.pem" --algorithm=rsa --key-label="imported_key" --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import 1 ECCP256 key under label "import-keys" echo "importing ECCp256 key under token 'import-keys'" openssl ecparam -name prime256v1 -genkey -noout -out "$TPM2_PKCS11_STORE/private.ecc.pem" tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/private.ecc.pem" --algorithm=ecc --key-label="imported_ecc_key" --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import an ECC and RSA key in the ssh-keygen format ssh-keygen -t rsa -b 2048 -f "$TPM2_PKCS11_STORE/id_rsa_pass" -N 'secret' ssh-keygen -t ecdsa -b 256 -f "$TPM2_PKCS11_STORE/id_ec_nopass" -N '' tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/id_rsa_pass" --key-label="imported_ssh_rsa_key" --id='imported_ssh_rsa_key' --label="import-keys" --userpin=anotheruserpin --passin 'pass:secret' --path=$TPM2_PKCS11_STORE tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/id_ec_nopass" --key-label="imported_ssh_ecc_key" --id='imported_ssh_ecc_key' --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # add an ECC and RSA key under label "empty-pin" tpm2_ptool addkey --algorithm=rsa2048 --label="empty-pin" --key-label="rsa_key" --id='rsa_key' --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=ecc256 --label="empty-pin" --key-label="ecc_key" --id='ecc_key' --path=$TPM2_PKCS11_STORE # Import an HMAC key under "label" so its easy to get at in C code test tpm2_ptool import --algorithm="hmac" --privkey="$TEST_FIXTURES/hmac.hex.key" --key-label="imported_hmac_key" --label="label" --userpin=myuserpin --path=$TPM2_PKCS11_STORE # verify the token and all the objects echo "Adding 1 x509 Certificate under token \"label\"" tpm2_ptool verify --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE echo "RUN COMMAND BELOW BEFORE make check" echo "export TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" exit 0 tpm2-pkcs11-1.7.0/test/integration/scripts/int-test-setup.sh0000755000175000017500000001572513754763565020716 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -u set +o nounset # default int-test-funcs script, overridden in TEST_FUNCTIONS env variable TEST_FUNC_LIB=${TEST_FUNC_LIB:-int-test-funcs.sh} if [ -e ${TEST_FUNC_LIB} ]; then . ${TEST_FUNC_LIB} else echo "Error: Unable to locate support test function library: " \ "${TEST_FUNC_LIB}" exit 1 fi usage_error () { echo "$0: $*" >&3 print_usage >&3 exit 2 } print_usage () { cat < /dev/null | grep "${PID}" | grep -q "${SIM_PORT_DATA}" ret_data=$? ss -lt4pn 2> /dev/null | grep "${PID}" | grep -q "${SIM_PORT_CMD}" ret_cmd=$? if [ \( $ret_data -eq 0 \) -a \( $ret_cmd -eq 0 \) ]; then echo "Simulator with PID ${PID} bound to port ${SIM_PORT_DATA} and " \ "${SIM_PORT_CMD} successfully."; break fi echo "Port conflict? Cleaning up PID: ${PID}" kill "${PID}" BACKOFF=$((${BACKOFF}*${BACKOFF_FACTOR})) echo "Failed to start simulator: port ${SIM_PORT_DATA} or " \ "${SIM_PORT_CMD} probably in use. Retrying in ${BACKOFF}." sleep ${BACKOFF} if [ $i -eq 10 ]; then echo "Failed to start simulator after $i tries. Giving up."; exit 1 fi done TABRMD_NAME="com.intel.tss2.Tabrmd${SIM_PORT_DATA}" TABRMD_OPTS="${TABRMD_OPTS} --dbus-name=${TABRMD_NAME}" TABRMD_OPTS="${TABRMD_OPTS} --tcti=${TABRMD_TCTI}:port=${SIM_PORT_DATA}" # if the user is root, the daemon won't start without --allow-root option if [ $UID -eq 0 ]; then TABRMD_OPTS="--allow-root ${TABRMD_OPTS}" fi TABRMD_TEST_TCTI_CONF="${TABRMD_TEST_TCTI_CONF},bus_name=${TABRMD_NAME}" ;; "device") TABRMD_OPTS="--allow-root --tcti=device:/dev/tpm0" SIM_PORT_DATA=$(od -A n -N 2 -t u2 /dev/urandom | \ awk -v min=${PORT_MIN} -v max=${PORT_MAX} \ '{print ($1 % (max - min)) + min}') ;; *) echo "whoops" exit 1 ;; esac # start tpm2-abrmd daemon TABRMD_LOG_FILE="$SIM_TMP_DIR/tabrmd.log" TABRMD_PID_FILE="$SIM_TMP_DIR/tabrmd.pid" tabrmd_start ${TABRMD_BIN} ${TABRMD_LOG_FILE} ${TABRMD_PID_FILE} "${TABRMD_OPTS}" if [ $? -ne 0 ]; then echo "failed to start tabrmd with name ${TABRMD_NAME}" fi export TPM2TOOLS_TCTI="tabrmd:${TABRMD_TEST_TCTI_CONF}" echo ${TPM2TOOLS_TCTI} export TPM2_PKCS11_TCTI="tabrmd:${TABRMD_TEST_TCTI_CONF}" echo ${TPM2_PKCS11_TCTI} if [ "$FAPI_ENABLED" == "true" ]; then setup_fapi ${SIM_TMP_DIR} tss2_provision fi # if provided, run the test script if [ -z "${TSETUP_SCRIPT}" ]; then echo "No setup script provided" # execute the test script and capture exit code echo $@ env $@ ret_test=$? else echo "Run setup script ${TSETUP_SCRIPT}" bash ${TSETUP_SCRIPT} --tmpdir=${SIM_TMP_DIR} ret_test=$? if [ $ret_test -ne 0 ]; then echo "Failed to run the setup script" else echo "Successfully ran ${TSETUP_SCRIPT}" export TPM2_PKCS11_STORE="${SIM_TMP_DIR}" echo "export TPM2_PKCS11_STORE=${SIM_TMP_DIR}" # execute the test script and capture exit code echo $@ env $@ ret_test=$? fi fi if [ "$FAPI_ENABLED" == "true" ]; then tss2_list fi # This sleep is sadly necessary: If we kill the tabrmd w/o sleeping for a # second after the test finishes the simulator will die too. Bug in the # simulator? sleep 1 # teardown tabrmd daemon_stop ${TABRMD_PID_FILE} ret_tabrmd=$? rm -rf ${TABRMD_PID_FILE} # do configuration specific tear-down case "${TABRMD_TCTI}" in # when testing against the simulator we must shut it down "swtpm"|"mssim") # ignore exit code (it's always 143 AFAIK) daemon_stop ${SIM_PID_FILE} rm -rf ${SIM_TMP_DIR} ${SIM_PID_FILE} ;; esac # handle exit codes if [ $ret_test -ne 0 ]; then echo "Execution of $@ failed: $ret_test" exit $ret_test fi if [ $ret_tabrmd -ne 0 ]; then echo "Execution of tabrmd failed: $ret_tabrmd" exit $ret_tabrmd fi exit 0 tpm2-pkcs11-1.7.0/test/integration/scripts/int-test-funcs.sh0000755000175000017500000001330413754763565020663 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause # This file contains a collection of support functions used by the automake # test harness to execute our integration tests. # This function takes a PID as a parameter and determines whether or not the # process is currently running. If the daemon is running 0 is returned. Any # other value indicates that the daemon isn't running. daemon_status () { local pid=$1 if [ $(kill -0 "${pid}" 2> /dev/null) ]; then echo "failed to detect running daemon with PID: ${pid}"; return 1 fi return 0 } # This is a generic function to start a daemon, setup the environment # variables, redirect output to a log file, store the PID of the daemon # in a file and disconnect the daemon from the parent shell. daemon_start () { local daemon_bin="$1" local daemon_opts="$2" local daemon_log_file="$3" local daemon_pid_file="$4" local daemon_env="$5" printf "starting daemon: %s\n environment: %s\n options: %s\n" "${daemon_bin}" "${daemon_env}" "${daemon_opts}" env ${daemon_env} ${daemon_bin} ${daemon_opts} > ${daemon_log_file} 2>&1 & local ret=$? local pid=$! if [ ${ret} -ne 0 ]; then echo "failed to start daemon: \"${daemon_bin}\" with env: \"${daemon_env}\"" exit ${ret} fi sleep 1 daemon_status "${pid}" if [ $? -ne 0 ]; then echo "daemon died after successfully starting in background, check " \ "log file: ${daemon_log_file}" return 1 fi echo ${pid} > ${daemon_pid_file} echo "successfully started daemon: ${daemon_bin} with PID: ${pid}" return 0 } # function to start the simulator # This also that we have a private place to store the NVChip file. Since we # can't tell the simulator what to name this file we must generate a random # directory under /tmp, move to this directory, start the simulator, then # return to the old pwd. simulator_start () { local sim_bin="$1" local sim_port="$2" local sim_log_file="$3" local sim_pid_file="$4" local sim_tmp_dir="$5" # simulator port is a random port between 1024 and 65535 cd ${sim_tmp_dir} case "$sim_bin" in *swtpm) daemon_start "$sim_bin" "socket --tpm2 --server port=$sim_port \ --ctrl type=tcp,port=$((sim_port + 1)) \ --flags not-need-init --tpmstate dir=$PWD" \ "$sim_log_file" "$sim_pid_file";; *tpm_server) daemon_start "$sim_bin" "-port $sim_port" \ "$sim_log_file" "$sim_pid_file";; *) echo "Unknown TPM simulator $sim_bin"; return 1;; esac local ret=$? cd - return $ret } # function to start the tabrmd # This is little more than a call to the daemon_start function with special # command line options and an environment string. tabrmd_start () { local tabrmd_bin=$1 local tabrmd_log_file=$2 local tabrmd_pid_file=$3 local tabrmd_opts="$4" local tabrmd_env="G_MESSAGES_DEBUG=all" daemon_start "${tabrmd_bin}" "${tabrmd_opts}" "${tabrmd_log_file}" \ "${tabrmd_pid_file}" "${tabrmd_env}" "${VALGRIND}" "${LOG_FLAGS}" } # function to stop a running daemon # This function takes a single parameter: a file containing the PID of the # process to be killed. The PID is extracted and the daemon killed. daemon_stop () { local pid_file=$1 local pid=0 local ret=0 if [ ! -f ${pid_file} ]; then echo "failed to stop daemon, no pid file: ${pid_file}" return 1 fi pid=$(cat ${pid_file}) daemon_status "${pid}" if [ $? -ne 0 ]; then echo "failed to detect running daemon with PID: ${pid}"; return ${ret} fi kill ${pid} ret=$? if [ ${ret} -eq 0 ]; then wait ${pid} ret=$? else echo "failed to kill daemon process with PID: ${pid}" fi return ${ret} } function setup_fapi() { tempdir=${1:-$(mktemp -d tpm2-pkcs11-test-fapistore.XXXXXX)} KEYSTORE_USER=keystore_user KEYSTORE_SYSTEM=keystore_system LOG_DIR=log PROFILE_NAME=P_RSA mkdir -p $tempdir/$KEYSTORE_USER/policy $tempdir/$KEYSTORE_SYSTEM/policy \ $tempdir/$LOG_DIR cat > $tempdir/fapi_config.json < $tempdir/${PROFILE_NAME}.json <> "$CA_DIR"/serial } cleanup_ca() { test -n "$CA_DIR" || return 0 rm -rf "$CA_DIR" } tpm2-pkcs11-1.7.0/test/integration/pkcs-find-objects.int.c0000664000175000017500000001334314114236775020206 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" struct test_info { CK_SESSION_HANDLE session; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE session; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); /* assign to state */ info->session = session; user_login(session); *state = info; /* success */ return 0; } static int test_setup_by_label(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); unsigned i; CK_SLOT_ID slot = ~0; for (i=0; i < count; i++) { CK_TOKEN_INFO info; rv = C_GetTokenInfo(slots[i], &info); assert_int_equal(rv, CKR_OK); int eq = !memcmp((char *)info.label, "import-keys ", sizeof(info.label)); if (eq) { slot = slots[i]; break; } } assert_in_range(i, 0, count - 1); /* open a session on found slot */ CK_SESSION_HANDLE session; rv = C_OpenSession(slot, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); unsigned char upin[] = IMPORT_LABEL_USERPIN; rv = C_Login(session, CKU_USER, upin, sizeof(upin)-1); assert_int_equal(rv, CKR_OK); /* assign to state */ info->session = session; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_Logout(ti->session); assert_int_equal(rv, CKR_OK); rv = C_CloseSession(ti->session); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_find_objects_aes_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_AES; CK_ATTRIBUTE tmpl[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* * We know there are 3 secret key objects in the first item, so break up the calls * so we test state tracking across C_FindObject(). You can think of * C_FindObject like read, where it keeps moving the file pointer ahead, * and eventually returns EOF, in our case, count == 0. */ unsigned i = 0; CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; for (i=0; i < 3; i++) { rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, ARRAY_LEN(objhandles)); } rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void do_test_find_objects_by_label(void **state, const char *key_label, unsigned expected) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_ATTRIBUTE tmpl[] = { {CKA_LABEL, (void *)key_label, strlen(key_label)}, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* * There is only one key in the test db with the label "mykeylabel" */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1024]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, expected); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void test_find_objects_by_label(void **state) { do_test_find_objects_by_label(state, "mykeylabel", 1); } static void test_find_imported_objects_by_label(void **state) { /* imported key has a label duplicated on public and private portions */ do_test_find_objects_by_label(state, "imported_key", 2); } static void test_find_objects_via_empty_template(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_RV rv = C_FindObjectsInit(session, NULL, 0); assert_int_equal(rv, CKR_OK); /* * There are 4 keys in the test db with */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[6]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, ARRAY_LEN(objhandles)); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_find_objects_aes_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_objects_by_label, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_objects_via_empty_template, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_imported_objects_by_label, test_setup_by_label, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs11-tool.sh0000775000175000017500000001541514114240163016344 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -eo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } echo "Finding cert" id=$(pkcs11_tool --label label --list-objects --type cert | grep 'ID:' | cut -d':' -f2- | sed s/' '//g) echo "Found cert: $id" # a public key with a cert label should exist echo "Looking for public key with id: $id" pkcs11_tool --slot=1 --list-objects --type pubkey | grep "$id" echo "Found pubkey" # a private key with a cert label should exist echo "Looking for private key with id: $id" pkcs11_tool --slot=1 --list-objects --type privkey --login --pin myuserpin | grep "$id" echo "Found privkey" # test pin change echo "Attempting pin change" pkcs11-tool --module "$modpath" --slot=1 --login --pin myuserpin --change-pin --new-pin mynewpin echo "Pin changed" # change userpin from sopin echo "Resetting pin" pkcs11_tool --slot=1 --init-pin --login --so-pin=mysopin --pin=myuserpin echo "Pin Reset" # test getting random data w/o login if [[ "${DOCKER_IMAGE:-nodocker}" != "ubuntu-16.04" && "${DOCKER_IMAGE:-nodocker}" != "ubuntu-18.04" ]]; then echo "Getting random" pkcs11_tool --slot=1 --generate-random 4 | xxd echo "Random got" else echo "Skipping pkcs11-tool --generate-random, not supported on ${DOCKER_IMAGE}" fi # test generating RSA key pair echo "Generating RSA key pair" pkcs11_tool --slot=1 --label="myrsakey" --login --pin=myuserpin --keypairgen echo "RSA Key pair generated" # test generating EC key pair echo "Generating EC key pair" pkcs11_tool --slot=1 --label="myecckey" --login --pin=myuserpin --keypairgen --usage-sign --key-type EC:prime256v1 echo "EC Key pair generated" echo "Deleting privkey" pkcs11_tool --slot=1 --pin=myuserpin --login --delete-object --type=privkey --label=myecckey echo "Privkey deleted" echo "Deleting pubkey" pkcs11_tool --slot=1 --pin=myuserpin --login --delete-object --type=pubkey --label=myecckey echo "Pubkey deleted" # Verify we can add a certificate, since this is a setup a test, the store should contain a cert to use. echo "Writing certificate" # Not all versions of pkcs11-tool handle PEM to DER conversions, 0.15 doesn't, 0.19 does. So always # convert to DER openssl x509 -inform PEM -outform DER -in "$TPM2_PKCS11_STORE/cert.pem.rsa1" -out "$TPM2_PKCS11_STORE/cert.der.rsa1" pkcs11_tool --slot=1 -l --pin=myuserpin --write-object="$TPM2_PKCS11_STORE/cert.der.rsa1" \ --type=cert --id=01 --label=device-cert echo "Certificate wrote" # Run the --test and ensure nothing breaks # Note that pkcs11-tools 0.15 have invalid OAEP params size of things like # mechanism->ulParameterLen: 4225. if [[ "${DOCKER_IMAGE:-nodocker}" != "ubuntu-16.04" && "${DOCKER_IMAGE:-nodocker}" != "ubuntu-18.04" ]]; then pkcs11_tool --test --login --pin=myuserpin 2>&1 | tee logz # this command doesn't ALWAYS return rc's for status, so we have to peek into the logz # pkcs11-tool is inconsistent in outputs, older ones don't provide any success # output of 'No errors', se we search that the last line *isn't* ' errors' where # N is a base10 digit. tail -n1 logz | grep -vE '[0-9]+ errors' else echo "Skipping pkcs11-tool --test due to errors on ${DOCKER_IMAGE}" fi # verify that RSA3072 keys work if supported, turn off set -e so we can check the rc if ! tpm2_testparms rsa3072 ; then echo "TPM Does not support RSA3072, skipping" else # # pkcs11-tool is always fun, it seems to be ignoring --label, so things like --label="fake" will still work. # set an id as it seems to respect that. # tpm2_ptool addkey --label="label" --id="myrsa3072key" --key-label="myrsa3072key" --userpin="myuserpin" --algorithm="rsa3072" --path="$TPM2_PKCS11_STORE" # Since the PKCS11 Store gets automagically cleaned up, use that as our tempdir scratch space tempdir=$TPM2_PKCS11_STORE # pkcs11-tool --id is hex encoded input, so encode "myrsa3072key" as hex: 6d79727361333037326b6579 # python -c 'print("6d79727361333037326b6579".decode("hex"))' # myrsa3072key echo "testdata">${tempdir}/data pkcs11_tool --sign --login --slot=1 --id="6d79727361333037326b6579" --pin="myuserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "384" # Test that we can generate a RSA3072 key via the CAPI pkcs11_tool --slot=1 --login --pin=myuserpin --keypairgen --id="11223344556677889900" --label="myrsa3072CKey" --key-type rsa:3072 # validate key is 384 bytes and usable rm ${tempdir}/sig echo "testdata">${tempdir}/data pkcs11_tool --sign --login --slot=1 --id="6d79727361333037326b6579" --pin="myuserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "384" fi # # Test that the imported SSH keys are useable # pkcs11_tool --token-label="import-keys" --login --pin=anotheruserpin --list-objects # pkcs11-tool --label doesn't always work, so use id's which are hex encoded. echo "testdata">${tempdir}/data pkcs11_tool --sign --login --token-label="import-keys" --id="696d706f727465645f7373685f7273615f6b6579" --pin="anotheruserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "256" echo "testdata">${tempdir}/data pkcs11_tool --sign --login --token-label="import-keys" --id="696d706f727465645f7373685f6563635f6b6579" --pin="anotheruserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism ECDSA-SHA1 size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "64" # # Test that the keys with empty PIN are useable # pkcs11_tool --token-label="empty-pin" --list-objects # The Private Key Objects are enumerated without login pkcs11_tool --token-label="empty-pin" --list-objects | grep 'Private Key Object' echo "testdata">${tempdir}/data pkcs11_tool --sign --token-label="empty-pin" --id="7273615f6b6579" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "256" echo "testdata">${tempdir}/data pkcs11_tool --sign --token-label="empty-pin" --id="6563635f6b6579" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism ECDSA-SHA1 size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "64" exit 0 tpm2-pkcs11-1.7.0/test/integration/pkcs-initialize-finalize.int.c0000644000175000017500000001356513754763565021616 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include "pkcs11.h" #include "test.h" /** * This program contains integration test for C_Initialize and C_Finalize. * C_Initialize initializes the Cryptoki library. * C_Finalize is called to indicate that an application is finished with the Cryptoki library. */ static CK_RV create(void **mutex) { (void) mutex; return CKR_OK; } static CK_RV lock(void *mutex) { (void) mutex; return CKR_OK; } static CK_RV unlock(void *mutex) { (void) mutex; return CKR_OK; } static CK_RV destroy(void *mutex) { (void) mutex; return CKR_OK; } static void state_setup(void **state) { bool *do_teardown = malloc(sizeof(bool)); assert_non_null(do_teardown); *do_teardown = true; *state = do_teardown; } static int test_setup(void **state) { state_setup(state); return group_setup(NULL); } static int test_teardown(void **state) { bool *p_do_teardown = (bool *)(*state); bool do_teardown = *p_do_teardown; free(p_do_teardown); if (do_teardown) { return group_teardown(NULL); } return 0; } // Test the 4 states and additional error case of: // http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/os/pkcs11-base-v2.40-os.html // Section 5.4 void test_c_init_args(void **state) { /* No setup routine called */ state_setup(state); bool *do_teardown = (bool *)(*state); // Case 1 - flags and fn ptr's clear. No threaded access. CK_C_INITIALIZE_ARGS args = { .flags = 0, .CreateMutex = NULL, .DestroyMutex = NULL, .LockMutex = NULL, .pReserved = NULL, }; CK_RV rv = C_Initialize(&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 2 locking flag specified but no fn pointers. Threaded access and use // library lock defaults. args.flags = CKF_OS_LOCKING_OK; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 3, no locking flag set, and set fn pointers. Threaded access and // use my call backs args.flags = 0; args.CreateMutex = create; args.DestroyMutex = destroy; args.LockMutex = lock; args.UnlockMutex = unlock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 4, locking flag set, and set fn pointers. Threaded access and // optionally use my callbacks args.flags = CKF_OS_LOCKING_OK; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); /* State is finalized, all other checks are negative tests below this */ *do_teardown = false; // Clear args for negative test // Case 5: If some, but not all, of the supplied function pointers to C_Initialize are non-NULL_PTR, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD. memset(&args, 0, sizeof(args)); args.CreateMutex = create; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.DestroyMutex = destroy; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.LockMutex = lock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); memset(&args, 0, sizeof(args)); // Case 6: flag is set but only some function pointers are provided, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD args.flags = CKF_OS_LOCKING_OK; args.DestroyMutex = destroy; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.LockMutex = lock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.UnlockMutex = unlock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // Case 7: the value of pReserved MUST be NULL_PTR; if it’s not, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD. memset(&args, 0, sizeof(args)); args.pReserved = (void *)0xDEADBEEF; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // If negative test cases, successfully run C_Initialize rv = C_Finalize(NULL); assert_int_equal(rv, CKR_CRYPTOKI_NOT_INITIALIZED); } void test_c_double_init(void **state) { UNUSED(state); CK_RV rv = C_Initialize (NULL); assert_int_equal(rv, CKR_CRYPTOKI_ALREADY_INITIALIZED); } static void test_c_finalize_bad(void **state) { UNUSED(state); // Give it a pointer and make sure we don't try and dereference it. CK_RV rv = C_Finalize((void *)0xDEADBEEF); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_double_calls(void **state) { bool *do_teardown = (bool *)(*state); /* already initialized by test setup */ CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_CRYPTOKI_ALREADY_INITIALIZED); CK_TOKEN_INFO info = { 0 }; rv = C_GetTokenInfo(1, &info); assert_int_equal(rv, CKR_OK); rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = true; } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_double_calls, test_setup, test_teardown), cmocka_unit_test_teardown(test_c_init_args, test_teardown), cmocka_unit_test_setup_teardown(test_c_double_init, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_c_finalize_bad, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/integration/pkcs-misc.int.c0000664000175000017500000003133614114240163016556 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" /* * config *MUST* go after test.h or cmocka includes cause some * odd memory issues. */ #include "config.h" struct test_info { CK_SESSION_HANDLE handles[6]; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots and verify that count is updated * when buffer is null or count is too small */ CK_SLOT_ID slots[TOKEN_COUNT]; CK_ULONG count = 0; CK_RV rv = C_GetSlotList(true, NULL, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); CK_ULONG count2 = count - 1; rv = C_GetSlotList(true, slots, &count2); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(count2, count); rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION, NULL, NULL, &ti->handles[0]); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_c_getfunctionlist_good(void **state) { UNUSED(state); //Case 1: Successfully obtain function list CK_FUNCTION_LIST_PTR pFunctionList; CK_RV rv = C_GetFunctionList(&pFunctionList); assert_int_equal(rv, CKR_OK); } static void test_c_getfunctionlist_bad(void **state) { UNUSED(state); //Case 2: Null PTR fails CK_RV rv = C_GetFunctionList(NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_get_slot_list(void **state) { UNUSED(state); CK_SLOT_ID slots[6]; CK_ULONG count; // Case 1: Good test to get the count of slots CK_RV rv = C_GetSlotList(true, NULL, &count); assert_int_equal(rv, CKR_OK); // Case 2: Good test to get the slots in buffer rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); CK_SLOT_INFO sinfo; rv = C_GetSlotInfo(slots[0], &sinfo); assert_int_equal(rv, CKR_OK); assert_true(sinfo.flags & CKF_TOKEN_PRESENT); assert_true(sinfo.flags & CKF_HW_SLOT); CK_TOKEN_INFO tinfo; rv = C_GetTokenInfo(slots[0], &tinfo); assert_int_equal(rv, CKR_OK); assert_true(tinfo.flags & CKF_RNG); assert_true(tinfo.flags & CKF_TOKEN_INITIALIZED); } static void test_get_info(void **state) { UNUSED(state); CK_INFO info; CK_RV rv; // check if null pointer is handled correctly rv = C_GetInfo(NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // check for successful invocation rv = C_GetInfo(&info); assert_int_equal(rv, CKR_OK); // check whether cryptoki version is correct assert_int_equal(info.cryptokiVersion.major, 2); assert_int_equal(info.cryptokiVersion.minor, 40); CK_BYTE major; CK_BYTE minor; parse_lib_version(PACKAGE_VERSION, &major, &minor); assert_int_equal(info.libraryVersion.major, major); assert_int_equal(info.libraryVersion.minor, minor); } static void test_random_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(ti->handles[0]); CK_BYTE buf[4]; // Case 1: Good test CK_RV rv = C_GenerateRandom(handle++, buf, sizeof(buf)); assert_int_equal(rv, CKR_OK); } static void test_random_bad_session_handle(void **state) { test_info *ti = test_info_from_state(state); /* make the handle bad */ CK_SESSION_HANDLE handle = ~ti->handles[0]; CK_BYTE buf[4]; // Case 2: Test bad session CK_RV rv = C_GenerateRandom(handle, buf, sizeof(buf)); assert_int_equal(rv, CKR_SESSION_HANDLE_INVALID); } static void test_seed(void **state) { static CK_BYTE buf[]="ksadjfhjkhfsiudgfkjewsdjbkfcoidugshbvfewug"; test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(ti->handles[0]); CK_RV rv = C_SeedRandom(handle, buf, sizeof(buf)); assert_int_equal(rv, CKR_OK); } static void test_get_session_info (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(handle, &info); assert_int_equal(rv, CKR_OK); } static void test_digest_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM smech = { .mechanism = CKM_SHA256, .pParameter = NULL, .ulParameterLen = 0 }; CK_RV rv = C_DigestInit(handle, &smech); assert_int_equal(rv, CKR_OK); // sizeof a sha256 hash CK_BYTE data[] = "Hello World This is My First Digest Message"; CK_BYTE hash[32]; CK_ULONG hashlen = sizeof(hash); rv = C_DigestUpdate(handle, data, sizeof(data) - 1); assert_int_equal(rv, CKR_OK); rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_OK); CK_BYTE hash2[32]; CK_ULONG hash2len = sizeof(hash); rv = C_DigestInit(handle, &smech); assert_int_equal(rv, CKR_OK); rv = C_Digest(handle, data, sizeof(data) - 1, hash2, &hash2len); assert_int_equal(rv, CKR_OK); rv = C_Logout(handle); assert_int_equal(rv, CKR_OK); assert_int_equal(hash2len, hashlen); assert_memory_equal(hash, hash2, hash2len); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_digest_5_2_returns_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM hash_mechanism = { CKM_SHA256, NULL_PTR, 0 }; /* digest create */ CK_RV rv = C_DigestInit(handle, &hash_mechanism); assert_int_equal(rv, CKR_OK); CK_BYTE data[] = "Hello World This is My First Digest Message"; CK_BYTE hash[32]; CK_ULONG hashlen = 2; /* CKR_BUFFER_TOO_SMALL - buffer supplied but too small */ rv = C_Digest(handle, data, sizeof(data) - 1, hash, &hashlen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(hashlen, 32); /* CKR_OK NULL buffer */ hashlen = 0; rv = C_Digest(handle, data, sizeof(data) - 1, NULL, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* finish the operation */ rv = C_Digest(handle, data, sizeof(data) - 1, hash, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_digest_5_2_returns_multipart(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM hash_mechanism = { CKM_SHA256, NULL_PTR, 0 }; /* digest create */ CK_RV rv = C_DigestInit(handle, &hash_mechanism); assert_int_equal(rv, CKR_OK); CK_BYTE data[] = "Hello World This is My First Digest Message"; rv = C_DigestUpdate(handle, data, sizeof(data) - 1); assert_int_equal(rv, CKR_OK); /* finish the operation CKR_BUFFER_TOO_SMALL */ CK_BYTE hash[32]; CK_ULONG hashlen = 2; rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(hashlen, 32); hashlen = 64; /* CKR_OK - NULL output buffer */ rv = C_DigestFinal(handle, NULL, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_session_cnt(void **state) { /* we populate state in this test */ assert_null(*state); test_info *ti = test_info_new(); *state = ti; CK_SESSION_HANDLE slot = ti->slot_id; size_t i; CK_RV rv; CK_TOKEN_INFO info; CK_ULONG cnt = 0; CK_ULONG rw_cnt = 0; /* * Test incrementing */ for (i=0; i < ARRAY_LEN(ti->handles); i++) { CK_SESSION_HANDLE_PTR handle = &ti->handles[i]; /* * Every odd open up a RW session, every even open up a RO session */ CK_FLAGS flags = CKF_SERIAL_SESSION; flags |= (i & 1) ? CKF_RW_SESSION : 0; rv = C_OpenSession(slot, flags, NULL , NULL, handle); assert_int_equal(rv, CKR_OK); /* * For clarity, just track the sessions here rather than * doing computing it off of i. */ if (i & 1) { rw_cnt++; } cnt++; rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, cnt); assert_int_equal(info.ulRwSessionCount, rw_cnt); } /* * Test decrementing, but only decrement all but 2, so we can test * closeall. * * rw_cnt and cnt are properly in the state of current open handles, so * just use them from above. */ for (i=0; i < (ARRAY_LEN(ti->handles) - 2); i++) { CK_SESSION_HANDLE handle = ti->handles[i]; rv = C_CloseSession(handle); assert_int_equal(rv, CKR_OK); /* * For clarity, just track the sessions here rather than * doing computing it off of i. Remember that odd indexed * handles are R/W. */ if (i & 1) { rw_cnt--; } cnt--; rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, cnt); assert_int_equal(info.ulRwSessionCount, rw_cnt); } /* * test closeall brings it 0 */ rv = C_CloseAllSessions(slot); assert_int_equal(rv, CKR_OK); rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, 0); assert_int_equal(info.ulRwSessionCount, 0); } int main() { const struct CMUnitTest tests[] = { /* * No Session tests */ cmocka_unit_test_setup_teardown(test_c_getfunctionlist_good, NULL, NULL), cmocka_unit_test_setup_teardown(test_c_getfunctionlist_bad, NULL, NULL), cmocka_unit_test_setup_teardown(test_get_slot_list, NULL, NULL), cmocka_unit_test_setup_teardown(test_get_info, NULL, NULL), /* * R/O Session Tests */ cmocka_unit_test_setup_teardown(test_seed, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_random_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_random_bad_session_handle, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_session_info, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_5_2_returns_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_5_2_returns_multipart, test_setup, test_teardown), /* * manages it's own sessions */ cmocka_unit_test_setup_teardown(test_session_cnt, NULL, test_teardown), }; return cmocka_run_group_tests(tests, group_setup_locking, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/p11-tool.sh.nosetup0000775000175000017500000001406214114240163017334 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi #WARNING: If your system hangs on this test, then the reason is typically that #you are running clang on a fedora-30 or similar system that has a buggy combination #of p11-tool p11-kit and libasan (clang). Consider using gcc or exporting #ASAN_ENABLED=false if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04 with clang is dysfunctional even without asan" ASAN_ENABLED=false #Even without ASAN the dlopen does not work on p11-tool/p11-kit at this moment fi set -x source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi function setup_spy() { export PKCS11SPY="$modpath" export PKCS11SPY_OUTPUT=${0}_pkcs11spy.log modpath=${PKCS11SPY_LIB:-/usr/lib/x86_64-linux-gnu/pkcs11-spy.so} } if [ "${USE_PKCS11SPY:-no}" != "no" ]; then setup_spy fi echo "modpath=$modpath" function p11_tool() { p11tool -d 9999 $@ } export HOME=${tempdir} mkdir -p $HOME/.config/pkcs11/modules echo "module: $modpath" >$HOME/.config/pkcs11/modules/tpm2-pkcs11.module export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Test p11-kit for modules" p11-kit list-modules || true echo "Done" echo "Should have uninitialized token" p11tool --list-tokens if ! p11_tool --list-tokens | grep -q "Model: SW TPM"; then echo "p11tool did not find this token." echo "If you are running a recent version of p11tool then you need to configure the module system-wide:" echo "echo \"module: $T/src/.libs/libtpm2_pkcs11.so\" >/etc/pkcs11/modules/tpm2_pkcs11.module" if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04 with clang is dysfunctional even without asan" exit 77 #TEST SKIP else exit 99 #TEST ERROR fi fi echo "Found uninitialized token" echo "Getting token url" p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "SW%20%20%20TPM") echo "Got token url: ${TOKENURL}" echo "Testing mech and random function" p11_tool --list-mechanisms ${TOKENURL} test "$(p11tool -d 0 --generate-random=4096 ${TOKENURL} \ | wc -c)" == "4096" echo "Random function works" echo "Testing p11tool version >= 3.5.0" #Older version of p11tool segfault during --initialize if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -lt "3" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -eq "3" ]; then if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 2)" -lt "5" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi fi echo "p11tool version >= 3.5.0" echo "Initializing token" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken ${TOKENURL} p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "mynewtoken") echo "Token initialized" echo "Initializing user pin" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL} echo "Userpin initialized" echo "Initializing token2" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken2 $(p11_tool --list-token-urls | grep "SW%20%20%20TPM" | tail -n 1) TOKENURL2=$(p11_tool --list-token-urls | grep "mynewtoken2") echo "Token2 initialized" echo "Initializing user pin2" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL2} echo "Userpin2 initialized" echo "Generating RSA key pair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="myrsakey" --outfile="${tempdir}/pubkey.pem" ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} echo "RSA Key pair generated" echo "Generating RSA keypair2" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="my2rsakey" --outfile="${tempdir}/pubkey2.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "RSA Keypair2 generated" echo "Generating EC keypair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-ecc --curve secp384r1 --login --label="myecckey" --outfile="${tempdir}/eccpubkey.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "EC Keypair generated" echo "Change the key pair label" GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey2" "${TOKENURL};object=myrsakey;object-type=private" GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey" "${TOKENURL};object=myrsakey2;object-type=private" echo "RSA Key pair generated" echo "Testing signing via openssl" osslconf="$tempdir/ossl.cnf" cat << EOF > "$osslconf" openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = $modpath init = 0 EOF export OPENSSL_CONF="$osslconf" openssl dgst -engine pkcs11 -keyform engine \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TOKENURL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl pkeyutl -sign -engine pkcs11 -keyform engine \ -inkey ${TOKENURL} -passin pass:mynewuserpin \ -in ${tempdir}/data -out ${tempdir}/sig echo "RSA Signing tested" echo "Test ECC Signing" ECC_KEY_URL="${TOKENURL2};object=myecckey;type=private" openssl dgst -engine pkcs11 -keyform engine -sha1 -sign "$ECC_KEY_URL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data echo "ECC Signing tested" exit 0 tpm2-pkcs11-1.7.0/test/integration/pkcs11-javarunner.sh.java0000755000175000017500000000050513754763565020503 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -e if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi export CLASSPATH="$CLASSPATH:$TEST_JAVA_ROOT" echo "CLASSPATH=$CLASSPATH" #dont use -cp here, it causes env CLASSPATH not to be used java PKCS11JavaTests exit 0 tpm2-pkcs11-1.7.0/test/integration/pkcs-keygen.int.c0000664000175000017500000012045014114236775017117 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "test.h" struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->handle); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_rsa_keygen_missing_attributes(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; /* * keep a dead space in the array so we can add CKA_CLASS * and CKA_KEY_TYPE */ CK_ATTRIBUTE pub[7] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), /* empty */ /* empty */ }; CK_ATTRIBUTE priv[7] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), /* empty */ /* empty */ }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub) - 2, priv, ARRAY_LEN(priv) - 2, &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via an operation */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ CK_OBJECT_CLASS class_pub = CKO_PUBLIC_KEY; pub[ARRAY_LEN(pub)-2].type = CKA_CLASS; pub[ARRAY_LEN(pub)-2].ulValueLen = sizeof(class_pub); pub[ARRAY_LEN(pub)-2].pValue = &class_pub; CK_OBJECT_CLASS class_priv = CKO_PRIVATE_KEY; priv[ARRAY_LEN(priv)-2].type = CKA_CLASS; priv[ARRAY_LEN(priv)-2].ulValueLen = sizeof(class_pub); priv[ARRAY_LEN(priv)-2].pValue = &class_priv; CK_KEY_TYPE keytype = CKK_RSA; pub[ARRAY_LEN(pub)-1].type = CKA_KEY_TYPE; pub[ARRAY_LEN(pub)-1].ulValueLen = sizeof(keytype); pub[ARRAY_LEN(pub)-1].pValue = &keytype; priv[ARRAY_LEN(priv)-1].type = CKA_KEY_TYPE; priv[ARRAY_LEN(priv)-1].ulValueLen = sizeof(keytype); priv[ARRAY_LEN(priv)-1].pValue = &keytype; rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_RSA, pub_handle_dup); verify_missing_pub_attrs_rsa(session, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_RSA, priv_handle_dup, CK_FALSE); verify_missing_priv_attrs_rsa(session, priv_handle_dup); } static void test_rsa_keygen_p11tool_templ(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-rsa"; CK_ULONG bits = 2048; CK_BYTE exp[] = { 0x00, 0x01, 0x00, 0x01 }; //65537 in BN CK_UTF8CHAR label[] = "p11-templ-key-label-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_BASE(CKA_MODULUS_BITS, bits), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, exp), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via an operation */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_RSA, pub_handle_dup); verify_missing_pub_attrs_rsa(session, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_RSA, priv_handle_dup, CK_TRUE); verify_missing_priv_attrs_rsa(session, priv_handle_dup); } static void test_ecc_keygen_p11tool_templ(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via a sign operation */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* * Skip checking the siglen. This comes back as a DER encoded R + S portions of the signature. * R + S is 2 times the curve size in bytes (so 64 for P256) but we're not returning that, were * returning the DER encoded format that tools expect, in DER format which may cause leading * bytes to be dropped from, R + S, so the output size isn't stable. But it's definitely not 0. */ assert_int_not_equal(siglen, 0); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_EC, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_EC, priv_handle_dup, CK_TRUE); verify_missing_pub_attrs_ecc(session, pub_handle_dup); verify_missing_priv_attrs_ecc(session, priv_handle_dup); } static void test_ecc_keygen_CKA_DERIVE_CK_TRUE(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false), ADD_ATTR_BASE(CKA_DERIVE, ck_true) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via a sign operation */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); } static void test_destroy(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc-destroy"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc-destroy"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); /* create 2 keys so we remove the one in the middle * creating a gap in the internal linked list */ CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); CK_BYTE id2[] = "p11-templ-key-id-ecc-destroy2"; CK_UTF8CHAR label2[] = "p11-templ-key-label-ecc-destroy2"; CK_ATTRIBUTE pub2[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_ID, id2), ADD_ATTR_STR(CKA_LABEL, label2), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params) }; CK_ATTRIBUTE priv2[] = { ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_ARRAY(CKA_ID, id2), ADD_ATTR_STR(CKA_LABEL, label2), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_OBJECT_HANDLE pubkey2; CK_OBJECT_HANDLE privkey2; rv = C_GenerateKeyPair (session, &mech, pub2, ARRAY_LEN(pub2), priv2, ARRAY_LEN(priv2), &pubkey2, &privkey2); assert_int_equal(rv, CKR_OK); /* verify that if it's held by sign operation, it can't be deleted */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = sizeof(sig); /* finish sign to release the private key */ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_OBJECT_HANDLE tmp; rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * PUBLIC BLOCK DESTROY AND CHECKS */ /* * try the public key verification to lock the public portion of the object. * active count == 1 */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); /* release verify active count == 1*/ rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* now that we have created some gaps, create an object in the gap */ mech.mechanism = CKM_EC_KEY_PAIR_GEN; rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* delete that objects */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, privkey); // Heap Use After Free assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void test_destroy_rsa_pkcs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that if it's held by sign operation, it can't be deleted */ mech.mechanism = CKM_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); CK_BYTE sha256_msg_hash[] = { 0x30, 0x31, /* SĂˆQUENCE */ 0x30, 0x0D, /* SEQUENCE */ 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, /* sha 256 */ 0x05, 0x00, /* NULL */ 0x04, 0x20, /* OCTET STRING, 32 bytes */ 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, /* hash */ 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; CK_BYTE sig[1024]; CK_ULONG siglen = 0; /* call for size*/ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), NULL, &siglen); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); /* finish sign to release the private key */ siglen = sizeof(sig); rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); } static void test_keygen_keytype(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "keytype_template_id"; CK_ULONG bits = 2048; CK_BYTE exp[] = { 0x00, 0x01, 0x00, 0x01 }; //65537 in BN CK_UTF8CHAR label[] = "keytype_template_label"; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE pub_rsa[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_BASE(CKA_MODULUS_BITS, bits), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, exp), ADD_ATTR_STR(CKA_LABEL, label), /* deliberately wrong to CKK_EC */ ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), }; CK_ATTRIBUTE priv_rsa[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech_rsa = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech_rsa, pub_rsa, ARRAY_LEN(pub_rsa), priv_rsa, ARRAY_LEN(priv_rsa), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); /* Test ECC Template */ /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; keytype = CKK_RSA; CK_ATTRIBUTE pub_ecc[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label), /* deliberately wrong to CKK_RSA */ ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), }; CK_ATTRIBUTE priv_ecc[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech_ecc = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; rv = C_GenerateKeyPair (session, &mech_ecc, pub_ecc, ARRAY_LEN(pub_ecc), priv_ecc, ARRAY_LEN(priv_ecc), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); /* Fixup Keytype to correct value CKK_EC */ keytype = CKK_EC; rv = C_GenerateKeyPair (session, &mech_ecc, pub_ecc, ARRAY_LEN(pub_ecc), priv_ecc, ARRAY_LEN(priv_ecc), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); } static CK_RV create_rsa_keypair(CK_SESSION_HANDLE session, CK_UTF8CHAR *label, CK_OBJECT_HANDLE *pubkey, CK_OBJECT_HANDLE *privkey) { CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), { .type = CKA_LABEL, .pValue = label, .ulValueLen = strlen((char *)label) }, ADD_ATTR_BASE(CKA_VERIFY_RECOVER, ck_false), ADD_ATTR_BASE(CKA_WRAP, ck_false), ADD_ATTR_BASE(CKA_TRUSTED, ck_false), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), { .type = CKA_LABEL, .pValue = label, .ulValueLen = strlen((char *)label) }, ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), ADD_ATTR_BASE(CKA_SIGN_RECOVER, ck_false), ADD_ATTR_BASE(CKA_UNWRAP, ck_false), ADD_ATTR_BASE(CKA_WRAP_WITH_TRUSTED, ck_false), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; return C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), pubkey, privkey); } static void test_non_common_template_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_UTF8CHAR label[] = "test_non_common_template_attrs"; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = create_rsa_keypair(session, label, &pubkey, &privkey); assert_int_equal(rv, CKR_OK); } static void test_extract_and_private(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_wrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "wrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_WRAP, ck_true), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_unwrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "unwrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), ADD_ATTR_BASE(CKA_UNWRAP, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_wrap_unwrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "wrap-unwrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_WRAP, ck_true), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), ADD_ATTR_BASE(CKA_UNWRAP, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_create_obj_rsa_public_key(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_UTF8CHAR label[] = "test_external_pubkey"; CK_OBJECT_HANDLE tmppubkey; CK_OBJECT_HANDLE privkey; user_login(session); /* create a private public RSA keyapir */ CK_RV rv = create_rsa_keypair(session, label, &tmppubkey, &privkey); assert_int_equal(rv, CKR_OK); BYTE _buf[2][2048] = { 0 }; CK_ATTRIBUTE gettempl[] = { { .type = CKA_MODULUS, .pValue = _buf[0], .ulValueLen = sizeof(_buf[0]) }, { .type = CKA_PUBLIC_EXPONENT, .pValue = _buf[1], .ulValueLen = sizeof(_buf[1]) } }; /* get the modulus and exponent */ rv = C_GetAttributeValue(session, tmppubkey, gettempl, ARRAY_LEN(gettempl)); assert_int_equal(rv, CKR_OK); assert_int_equal(gettempl[0].type, CKA_MODULUS); assert_int_equal(gettempl[1].type, CKA_PUBLIC_EXPONENT); /* * create a new public key object using the C_CreateObject interface * Using the public key information from the keypairgen. */ CK_OBJECT_CLASS clazz = CKO_PUBLIC_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE template[] = { {CKA_CLASS, &clazz, sizeof(clazz)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_MODULUS, gettempl[0].pValue, gettempl[0].ulValueLen}, {CKA_PUBLIC_EXPONENT, gettempl[1].pValue, gettempl[1].ulValueLen} }; CK_OBJECT_HANDLE pubkey = 0; rv = C_CreateObject(session, template, ARRAY_LEN(template), &pubkey); assert_int_equal(rv, CKR_OK); /* https://stackoverflow.com/questions/22663457/pkcs11-key-wrapping-using-openssl */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS, .ulParameterLen = 0, .pParameter = NULL }; /* * Encrypt with pub key and decrypt with privkey */ rv = C_EncryptInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); BYTE plaintext[] = {'m', 'y', 's', 'e', 'c', 'r', 'e', 't', 'd', 'a', 't', 'a' }; CK_BYTE ciphertext[256] = { 0 }; CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); rv = C_DecryptInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)] = { 0 }; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt(session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext)); } /* * Place this test here so we don't have to take the test time hit of another * test setup. */ static void test_create_data_object_private (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BBOOL _false = CK_FALSE; CK_BBOOL _true = CK_TRUE; char label[] = "data object"; char application[] = "my application"; CK_OBJECT_CLASS object_class = CKO_DATA; CK_BYTE id[] = { '1', '2', '3' }; CK_BYTE value[] = "my data object"; CK_ATTRIBUTE data_template[] = { { CKA_CLASS, &object_class, sizeof(object_class) }, { CKA_TOKEN, &_true, sizeof(_true) }, { CKA_PRIVATE, &_true, sizeof(_true) }, { CKA_LABEL, label, sizeof(label) - 1 }, { CKA_MODIFIABLE, &_false, sizeof(_false) }, { CKA_APPLICATION, &application, sizeof(application) - 1 }, { CKA_OBJECT_ID, &id, sizeof(id) }, { CKA_VALUE, value, sizeof(value) } }; CK_OBJECT_HANDLE obj = 0; CK_RV rv = C_CreateObject(session, data_template, ARRAY_LEN(data_template), &obj); assert_int_equal(rv, CKR_OK); CK_BYTE buf[64]; CK_ATTRIBUTE data_template2[] = { { CKA_VALUE, buf, sizeof(buf) }, }; rv = C_GetAttributeValue (session, obj, data_template2, ARRAY_LEN(data_template2)); assert_int_equal(rv, CKR_OK); assert_int_equal(sizeof(value), data_template2[0].ulValueLen); assert_memory_equal(value, buf, sizeof(value)); logout(session); CK_BYTE buf2[64] = { 0 }; CK_ATTRIBUTE data_template3[] = { { CKA_VALUE, buf2, sizeof(buf2) }, }; rv = C_GetAttributeValue (session, obj, data_template3, ARRAY_LEN(data_template3)); assert_int_equal(rv, CKR_OK); assert_int_equal(data_template3[0].ulValueLen, 0); } static void test_create_data_object_public (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BBOOL _false = CK_FALSE; CK_BBOOL _true = CK_TRUE; char label[] = "public data object"; char application[] = "my application"; CK_OBJECT_CLASS object_class = CKO_DATA; CK_BYTE id[] = { '1', '2', '3', '4' }; CK_BYTE value[] = "my public data object"; CK_ATTRIBUTE data_template[] = { { CKA_CLASS, &object_class, sizeof(object_class) }, { CKA_TOKEN, &_true, sizeof(_true) }, { CKA_PRIVATE, &_false, sizeof(_false) }, { CKA_LABEL, label, sizeof(label) - 1 }, { CKA_MODIFIABLE, &_false, sizeof(_false) }, { CKA_APPLICATION, &application, sizeof(application) - 1 }, { CKA_OBJECT_ID, &id, sizeof(id) }, { CKA_VALUE, value, sizeof(value) } }; CK_OBJECT_HANDLE obj = 0; CK_RV rv = C_CreateObject(session, data_template, ARRAY_LEN(data_template), &obj); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_extract_and_private, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_data_object_public, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_data_object_private, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_obj_rsa_public_key, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keygen_missing_attributes, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_destroy, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_destroy_rsa_pkcs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_ecc_keygen_p11tool_templ, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keygen_p11tool_templ, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_keygen_keytype, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_non_common_template_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_wrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_unwrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_wrap_unwrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_ecc_keygen_CKA_DERIVE_CK_TRUE, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/test.h0000664000175000017500000000622514114240163015057 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TEST_INTEGRATION_TEST_H_ #define TEST_INTEGRATION_TEST_H_ #include "config.h" /* Set up ALL the headers needed so tests can just use #include "test.h" */ #include #include #include #include #include #include #include #include #include #include #include "ssl_util.h" #include "pkcs11.h" #include "ssl_util.h" #include "utils.h" /* 4 in db tokens + 1 uninitialized token */ #define TOKEN_COUNT (4 + 1) #define GOOD_USERPIN "myuserpin" #define GOOD_SOPIN "mysopin" #define BAD_USERPIN "myBADuserpin" #define BAD_SOPIN "myBADsopin" #define IMPORT_LABEL_USERPIN "anotheruserpin" typedef struct test_info test_info; #define ADD_ATTR_BASE(t, x) { .type = t, .ulValueLen = sizeof(x), .pValue = &x } #define ADD_ATTR_ARRAY(t, x) { .type = t, .ulValueLen = ARRAY_LEN(x), .pValue = x } #define ADD_ATTR_STR(t, x) { .type = t, .ulValueLen = sizeof(x) - 1, .pValue = x } /* * If UNIT_TESTING is defined, cmocka will hijack allocation routines to look for memory leaks. * It checks at the end of the test via fail_if_blocks_allocated, and if true will free * the blocks causing any de-allocation/teardown routines defined after the test to access * and free memory already free'd. To remedy this, define some always safe alloc routines. */ #if defined(calloc) #undef calloc #endif #if defined(free) #undef free #endif #if defined(malloc) #undef malloc #endif #if defined(realloc) #undef realloc #endif test_info *test_info_from_state(void **state); int group_setup(void **state); int group_setup_locking(void **state); int group_teardown(void **state); void logout_expects(CK_SESSION_HANDLE handle, CK_RV expected); void logout(CK_SESSION_HANDLE handle); void login_expects(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_RV expected, unsigned char *pin, CK_ULONG len); void user_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void user_login_bad_pin(CK_SESSION_HANDLE handle); void user_login(CK_SESSION_HANDLE handle); void context_login(CK_SESSION_HANDLE handle); void context_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void context_login_bad_pin(CK_SESSION_HANDLE handle); void so_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void so_login(CK_SESSION_HANDLE handle); void so_login_bad_pin(CK_SESSION_HANDLE handle); void get_keypair(CK_SESSION_HANDLE session, CK_KEY_TYPE key_type, CK_OBJECT_HANDLE_PTR pub_handle, CK_OBJECT_HANDLE_PTR priv_handle); void verify_missing_pub_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h, CK_BBOOL extractable); void verify_missing_pub_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_pub_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); #endif /* TEST_INTEGRATION_TEST_H_ */ tpm2-pkcs11-1.7.0/test/integration/test.c0000644000175000017500000003362213754763565015102 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "attrs.h" #include "test.h" test_info *test_info_from_state(void **state) { return (test_info *)*state; } int group_setup(void **state) { UNUSED(state); /* Initialize the library */ CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); return 0; } int group_setup_locking(void **state) { UNUSED(state); /* * Run these tests with locking enabled */ CK_C_INITIALIZE_ARGS args = { .CreateMutex = NULL, .DestroyMutex = NULL, .LockMutex = NULL, .UnlockMutex = NULL, .flags = CKF_OS_LOCKING_OK }; CK_RV rv = C_Initialize(&args); assert_int_equal(rv, CKR_OK); return 0; } int group_teardown(void **state) { UNUSED(state); /* Finalize the library */ CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } void logout_expects(CK_SESSION_HANDLE handle, CK_RV expected) { CK_RV rv = C_Logout(handle); assert_int_equal(rv, expected); } void logout(CK_SESSION_HANDLE handle) { logout_expects(handle, CKR_OK); } void login_expects(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_RV expected, unsigned char *pin, CK_ULONG len) { CK_RV rv = C_Login(handle, user_type, pin, len); assert_int_equal(rv, expected); } void user_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_USER, expected, upin, sizeof(upin) - 1); } void user_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char upin[] = BAD_USERPIN; login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, upin, sizeof(upin) - 1); } void user_login(CK_SESSION_HANDLE handle) { user_login_expects(handle, CKR_OK); } void context_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, expected, upin, sizeof(upin) - 1); } void context_login(CK_SESSION_HANDLE handle) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, CKR_OK, upin, sizeof(upin) - 1); } void context_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char upin[] = BAD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, CKR_PIN_INCORRECT, upin, sizeof(upin) - 1); } void so_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char sopin[] = GOOD_SOPIN; login_expects(handle, CKU_SO, expected, sopin, sizeof(sopin) - 1); } void so_login(CK_SESSION_HANDLE handle) { so_login_expects(handle, CKR_OK); } void so_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char sopin[] = BAD_SOPIN; login_expects(handle, CKU_SO, CKR_PIN_INCORRECT, sopin, sizeof(sopin) - 1); } void get_keypair(CK_SESSION_HANDLE session, CK_KEY_TYPE key_type, CK_OBJECT_HANDLE_PTR pub_handle, CK_OBJECT_HANDLE_PTR priv_handle) { assert_non_null(pub_handle); assert_non_null(priv_handle); CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_ATTRIBUTE priv_tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, priv_tmpl, ARRAY_LEN(priv_tmpl)); assert_int_equal(rv, CKR_OK); /* Find an RSA key priv at index 0 pub at index 1 */ CK_ULONG count; rv = C_FindObjects(session, priv_handle, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* got private now fnd public based on CKA_ID */ key_class = CKO_PUBLIC_KEY; CK_BYTE _tmp_buf[1024]; CK_ATTRIBUTE pub_tmpl[] = { { .type = CKA_ID, .ulValueLen = sizeof(_tmp_buf), .pValue = _tmp_buf }, { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* populate the CKA_ID field for the public object template */ rv = C_GetAttributeValue(session, *priv_handle, pub_tmpl, 1); assert_int_equal(rv, CKR_OK); /* use public template + CKA_ID to find proper public object */ rv = C_FindObjectsInit(session, pub_tmpl, ARRAY_LEN(pub_tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, pub_handle, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void verify_missing_common_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[3][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_MODULUS, tmp[0]), ADD_ATTR_ARRAY(CKA_MODULUS_BITS, tmp[1]), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, tmp[2]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_MODULUS: { assert_int_not_equal(0, a->ulValueLen); assert_non_null(a->pValue); count++; } break; case CKA_MODULUS_BITS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, 2048); count++; } break; case CKA_PUBLIC_EXPONENT: assert_int_not_equal(0, a->ulValueLen); assert_non_null(a->pValue); count++; break; default: assert_true(0); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { verify_missing_common_attrs_rsa(session, h); } void verify_missing_pub_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { verify_missing_common_attrs_rsa(session, h); } static void test_ec_params(CK_ATTRIBUTE_PTR ecparams) { const unsigned char *p = ecparams->pValue; ASN1_OBJECT *a = d2i_ASN1_OBJECT(NULL, &p, ecparams->ulValueLen); assert_non_null(a); int nid = OBJ_obj2nid(a); ASN1_OBJECT_free(a); switch (nid) { case NID_X9_62_prime192v1: case NID_secp224r1: case NID_X9_62_prime256v1: case NID_secp384r1: case NID_secp521r1: break; default: fail_msg("Unsupported nid to tpm EC algorithm mapping, got nid: %d", nid); } } static void test_ec_point(CK_ATTRIBUTE_PTR ecpoint) { assert_int_not_equal(0, ecpoint->ulValueLen); assert_non_null(ecpoint->pValue); const unsigned char *pp = ecpoint->pValue; CK_ULONG len = ecpoint->ulValueLen; ASN1_OCTET_STRING *a = NULL; a = d2i_ASN1_OCTET_STRING(&a, &pp, len); assert_non_null(a); const unsigned char *d = ASN1_STRING_get0_data(a); /* first byte should be 04 for "uncompressed format" */ assert_int_equal(d[0], 0x4); /* TODO look at curve id and map to expected X and Y sizes */ ASN1_STRING_free(a); } void verify_missing_pub_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[2][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_EC_PARAMS, tmp[0]), ADD_ATTR_ARRAY(CKA_EC_POINT, tmp[1]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { /* TODO more robust checking here: * - They match what was expected in generation. */ case CKA_EC_PARAMS: test_ec_params(a); count++; break; case CKA_EC_POINT: // DER-encoding of ANSI X9.62 ECPoint value Q test_ec_point(a); count++; break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[1][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_EC_PARAMS, tmp[0]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { /* TODO more robust checking here: * - They match what was expected in generation. */ case CKA_EC_PARAMS: test_ec_params(a); count++; break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h, CK_BBOOL extractable) { CK_BYTE tmp[10][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_KEY_TYPE, tmp[0]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[1]), ADD_ATTR_ARRAY(CKA_ALWAYS_SENSITIVE, tmp[2]), ADD_ATTR_ARRAY(CKA_EXTRACTABLE, tmp[3]), ADD_ATTR_ARRAY(CKA_NEVER_EXTRACTABLE, tmp[4]), ADD_ATTR_ARRAY(CKA_SIGN, tmp[5]), ADD_ATTR_ARRAY(CKA_DECRYPT, tmp[6]), ADD_ATTR_ARRAY(CKA_SIGN_RECOVER, tmp[7]), ADD_ATTR_ARRAY(CKA_UNWRAP, tmp[8]), ADD_ATTR_ARRAY(CKA_WRAP_WITH_TRUSTED, tmp[8]), ADD_ATTR_ARRAY(CKA_DERIVE, tmp[9]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_KEY_TYPE: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, keytype); count++; } break; case CKA_CLASS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CKO_PRIVATE_KEY); count++; } break; case CKA_ALWAYS_SENSITIVE: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, !extractable); count++; } break; case CKA_EXTRACTABLE: { CK_BBOOL v = CK_TRUE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, extractable); count++; } break; case CKA_NEVER_EXTRACTABLE: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, !extractable); count++; } break; case CKA_SIGN: /* fall-thru */ case CKA_DECRYPT: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_TRUE); count++; } break; case CKA_SIGN_RECOVER: /* fall-thru */ case CKA_WRAP_WITH_TRUSTED: /* fall-thru */ case CKA_DERIVE: /* fall-thru */ case CKA_UNWRAP: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_FALSE); count++; } break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_pub_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h) { CK_BYTE tmp[9][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_KEY_TYPE, tmp[0]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[1]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[2]), ADD_ATTR_ARRAY(CKA_VERIFY, tmp[3]), ADD_ATTR_ARRAY(CKA_ENCRYPT, tmp[4]), ADD_ATTR_ARRAY(CKA_VERIFY_RECOVER, tmp[5]), ADD_ATTR_ARRAY(CKA_WRAP, tmp[6]), ADD_ATTR_ARRAY(CKA_TRUSTED, tmp[7]), ADD_ATTR_ARRAY(CKA_DERIVE, tmp[8]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_KEY_TYPE: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, keytype); count++; } break; case CKA_CLASS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CKO_PUBLIC_KEY); count++; } break; case CKA_ENCRYPT: /* fall-thru */ case CKA_VERIFY: { CK_BBOOL v = 0; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); /* is dependent on key type (no ecc keys yes rsa)*/ count++; } break; case CKA_TRUSTED: /* fall-thru */ case CKA_WRAP: /* fall-thru */ case CKA_DERIVE: /* fall-thru */ case CKA_VERIFY_RECOVER: { CK_BBOOL v = 0; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_FALSE); count++; } break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } tpm2-pkcs11-1.7.0/test/integration/openssl.sh0000775000175000017500000000722614114240163015753 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -exo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" PIN="myuserpin" token_label="label" key_label="rsa1" function cleanup() { rm -f objlist.yaml key.attrs.yaml certificate.der.hex certificate.der certificate.pem \ pubkey.pem data.txt } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR cleanup setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" function yaml_get_id() { "${PYTHON_INTERPRETER:-python3}" << pyscript from __future__ import print_function import sys import yaml with open("$1") as f: try: y = yaml.load(f, Loader=yaml.BaseLoader) for x in y: if x['CKA_LABEL'] == "$2" and x['CKA_CLASS'] == "$3": print(x['id']) except yaml.YAMLError as exc: sys.exit(exc) pyscript } function yaml_get_kv() { third_arg="" if [ $# -eq 3 ]; then third_arg=$3 fi "${PYTHON_INTERPRETER:-python3}" << pyscript from __future__ import print_function import sys import yaml with open("$1") as f: try: y = yaml.load(f, Loader=yaml.BaseLoader) if $# == 3: print(y["$2"]["$third_arg"]) else: print(y["$2"]) except yaml.YAMLError as exc: sys.exit(exc) pyscript } pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } # step 1 is to get the id by listing the objects tpm2_ptool listobjects --label="$token_label" > "objlist.yaml" cert_db_id=$(yaml_get_id objlist.yaml "$key_label" CKO_CERTIFICATE) echo "cert db id: $cert_db_id" tpm2_ptool objmod --id="$cert_db_id" > "key.attrs.yaml" # 17 is the raw attribute value for CKA_VALUE which contains the certificate yaml_get_kv "key.attrs.yaml" 17 > "certificate.der.hex" # 258 is CKA_ID, get the key id cka_id_hex=$(yaml_get_kv "key.attrs.yaml" 258) # convert the hex to binary cat "certificate.der.hex" | xxd -p -r > "certificate.der" # convert to a pem, which helps verify the der openssl x509 -inform DER -in "certificate.der" -outform PEM -out "certificate.pem" # extract the pubkey openssl x509 -pubkey -noout -in "certificate.pem" > "pubkey.pem" # do an rsa-pss signature on data echo "sig data" > "data.txt" export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" PKCS11_KEY="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=$token_label;object=$key_label;type=private" openssl dgst -engine pkcs11 -keyform engine -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -sign "$PKCS11_KEY" -out data.sig data.txt openssl dgst -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature data.sig -verify pubkey.pem data.txt rm data.sig # The above for me always takes the raw signing path, either via C_Sign or C_Encrypt interfaces. So we will use pkcs11tool to force it # pkcs11tool is dumb, even though --label should be the object label, it only really is coded to know --id. # A bug in older OpenSC versions (like 0.15.0), map the _PSS identifiers wrong except for SHA1. This bug was fixed in OpenSC in: # https://github.com/OpenSC/OpenSC/pull/1146 # # Their is no generic way to really figure out the OpenSC version AFAICT to we code this to the common denominator of SHA1 pkcs11_tool --pin "$PIN" --token-label "$token_label" --id "$cka_id_hex" --sign --mechanism SHA1-RSA-PKCS-PSS -i data.txt -o data.sig openssl dgst -sha1 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature data.sig -verify pubkey.pem data.txt rm data.sig exit 0 tpm2-pkcs11-1.7.0/test/integration/python-pkcs11.sh0000775000175000017500000000264514114240163016711 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -exo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" setup_asan "${PYTHON_INTERPRETER:-python3}" - <<'_SCRIPT_' import os import unittest import pkcs11 class TestPKCS11(unittest.TestCase): @classmethod def setUpClass(cls): path = os.getenv('TPM2_PKCS11_MODULE', os.path.join(os.getcwd(), 'src/.libs/libtpm2_pkcs11.so')) lib = pkcs11.lib(path) cls._token = lib.get_token(token_label='label') def test_CKM_PKCS11(self): with self._token.open(rw=False, user_pin='myuserpin') as session: public = session.get_key(label='rsa0',object_class=pkcs11.constants.ObjectClass.PUBLIC_KEY) private = session.get_key(label='rsa0',object_class=pkcs11.constants.ObjectClass.PRIVATE_KEY) original = plaintext = b'1234567890123456' ciphertext = public.encrypt(plaintext, mechanism=pkcs11.mechanisms.Mechanism.RSA_PKCS) self.assertNotEqual(plaintext, ciphertext) plaintext = 'notdecrypted' plaintext = private.decrypt(ciphertext, mechanism=pkcs11.mechanisms.Mechanism.RSA_PKCS) # strip padding p2 = plaintext[-len(original):] self.assertEqual(p2, original) if __name__ == '__main__': unittest.main() _SCRIPT_ exit $? tpm2-pkcs11-1.7.0/test/integration/pkcs-sign-verify.int.c0000664000175000017500000015750414116451527020105 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include "largebin.h" #include "test.h" /* * This HMAC key is static in the fixtures folder. */ static const unsigned char hmac_key[] = { 0x30, 0x33, 0x33, 0x36, 0x61, 0x61, 0x37, 0x39, 0x34, 0x35, 0x61, 0x33, 0x63, 0x61, 0x64, 0x65, 0x63, 0x33, 0x63, 0x62, 0x64, 0x63, 0x36, 0x65, 0x37, 0x39, 0x30, 0x34, 0x33, 0x62, 0x35, 0x62 }; struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION, NULL, NULL, &ti->handle); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } /* * Test that we can do a CKM_RSA_PKCS mechanism signature. * * This signature type will require an ASN1 digestinfo structure * to be populated, and then passed to the C_Sign(). * * More information on the Digest Info structure can be found: * - https://tools.ietf.org/html/rfc3447 * * In short, its; * DigestInfo ::= SEQUENCE { * digestAlgorithm AlgorithmIdentifier, * digest OCTET STRING * } * * The nice part is the note specification has the ASN1 header you can just * append the hash too, so we do this: * * SHA-256: (0x)30 31 30 0d 06 09 60 86 48 01 65 03 04 02 01 05 00 * 04 20 || H. * * We'll use SHA256 since the simulator supports it, we can then use * the CKM_SHA256_RSA_PKCS mechanism (which should go to tpm_sign * and the results should match. */ /* * The message to sign. */ static const CK_BYTE _data[] = { 'F', 'O', 'O', ' ', 'B', 'A', 'R' }; /* * The hash of the message to sign computed externally. */ static const CK_BYTE _data_hash_sha256[] = { 0x8d, 0x35, 0xc9, 0x7b, 0xcd, 0x90, 0x2b, 0x96, 0xd1, 0xb5, 0x51, 0x74, 0x1b, 0xbe, 0x8a, 0x7f, 0x50, 0xbb, 0x5a, 0x69, 0x0b, 0x4d, 0x02, 0x25, 0x48, 0x2e, 0xaa, 0x63, 0xdb, 0xfb, 0x9d, 0xed }; static const CK_BYTE _data_hash_sha512[] = { 0xcf, 0x4a, 0xca, 0x20, 0x77, 0xda, 0x02, 0xe6, 0x56, 0xc5, 0xe5, 0xed, 0x26, 0xd7, 0x81, 0x6b, 0xfc, 0x20, 0x2f, 0x7d, 0x40, 0xfe, 0x01, 0x27, 0x5f, 0x62, 0xd4, 0x91, 0x18, 0xa3, 0xbc, 0x5b, 0x20, 0xef, 0x94, 0x27, 0x24, 0xfc, 0x35, 0xb6, 0x67, 0x37, 0xbd, 0xec, 0x26, 0x28, 0x33, 0xc7, 0x49, 0xfd, 0xa9, 0x95, 0x54, 0x63, 0xc7, 0x55, 0xe9, 0x1a, 0x27, 0xc3, 0x8d, 0xda, 0x9e, 0xfb }; static void test_sign_verify_CKM_RSA_PKCS_sha256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha256 32 byte size */ CK_BYTE digest_info[19 + sizeof(_data_hash_sha256)] = { /* 19 byte ASN1 structure from the IETF rfc3447 for SHA256*/ 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, /* the hash bytes, 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, }; memcpy(&digest_info[19], _data_hash_sha256, sizeof(_data_hash_sha256)); CK_BYTE ckm_rsa_pkcs_sig[4096]; CK_ULONG ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha256_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha256_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha256_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_RSA_PKCS_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha256 32 byte size */ unsigned char digest_info[19 + sizeof(_data_hash_sha256)] = { /* 19 byte ASN1 structure from the IETF rfc3447 for SHA256*/ 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, /* the hash bytes, 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, }; memcpy(&digest_info[19], _data_hash_sha256, sizeof(_data_hash_sha256)); unsigned char ckm_rsa_pkcs_sig[4096]; unsigned long ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); /* NULL size */ CK_ULONG tmp = 42; rv = C_Sign(session, digest_info, sizeof(digest_info), NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, 256); /* CKR_BUFFER_TOO_SMALL */ tmp = 42; rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, 256); /* OK */ rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); unsigned char ckm_sha256_rsa_pkcs_sig[4096]; unsigned long ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (unsigned char *) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha256_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha256_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (unsigned char *) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } /* * Verify that using a non-tpm supported SHA algorithm works. The Simulator * by default only goes to SHA384, so use SHA512. * * It uses CKM_RSA_PKCS and CKM_SHA512_RSA_PKCS to verify that * they match. * * This uses CKM_RSA_PKCS which means that the host application * builds out the RSA_PKCS v1.5 signing structure as defined in * https://www.ietf.org/rfc/rfc3447.txt */ static void test_sign_verify_CKM_RSA_PKCS_sha512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha512 64 byte size */ CK_BYTE digest_info[19 + sizeof(_data_hash_sha512)] = { /* https://www.ietf.org/rfc/rfc3447.txt * Page 42 * 19 byte ASN1 structure from the IETF rfc3447 for SHA512 */ 0x30, 0x51, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03, 0x05, 0x00, 0x04, 0x40, /* the hash bytes (64 of them), 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 16 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 32 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 48 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 64 */ }; memcpy(&digest_info[19], _data_hash_sha512, sizeof(_data_hash_sha512)); CK_BYTE ckm_rsa_pkcs_sig[4096]; CK_ULONG ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA512_RSA_PKCS */ mech.mechanism = CKM_SHA512_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha512_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha512_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha512_rsa_pkcs_sig, &ckm_sha512_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha512_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha512_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha512_rsa_pkcs_siglen); } static void test_sign_verify_CKM_ECDSA(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); get_keypair(session, CKK_EC, &pubkey, &privkey); /* verify that we can use it via a sign operation */ CK_MECHANISM mech = { .mechanism = CKM_ECDSA }; CK_RV rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = 0; /* Call C_Sign for size */ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), NULL, &siglen); assert_int_equal(rv, CKR_OK); /* The signature comes back as DER encoded R + S parts of the signature. * R + S is 2 times the curve size in bytes (so 64 for P256) but we're not * returning that, but the DER encoded format that tools expect. * Since the length of DER encoding is dependent on the encoded value * (e.g. leading zero if negative), the output size is not stable. * Thus calling C_Sign for size must return the maximum length of the DER * encoded value, which is (2+1+keylength) * 2 + 2. So for P256 = 72 * the actual signature size may be smaller. */ assert_int_equal(siglen, 72); CK_ULONG tmp_len = siglen; rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* the actual siglength may be smaller than the previously reported siglen */ assert_in_range(siglen, 1, tmp_len); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA1(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA1 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha1_sig[4096]; CK_ULONG ckm_ecdsa_sha1_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha1_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha1_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha1_sig, &ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha1_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha1_sig, ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha256_sig[4096]; CK_ULONG ckm_ecdsa_sha256_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha256_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha256_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha256_sig, &ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha256_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha256_sig, ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA384(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha384_sig[4096]; CK_ULONG ckm_ecdsa_sha384_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha384_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha384_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha384_sig, &ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha384_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha384_sig, ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha512_sig[4096]; CK_ULONG ckm_ecdsa_sha512_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha512_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha512_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha512_sig, &ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha512_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha512_sig, ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); } static void test_pss(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key[2], CK_MECHANISM_TYPE halg) { CK_RSA_PKCS_PSS_PARAMS params = { .hashAlg = halg, }; switch (halg) { case CKM_SHA_1: params.mgf = CKG_MGF1_SHA1; params.sLen = 20; break; case CKM_SHA256: params.mgf = CKG_MGF1_SHA256; params.sLen = 32; break; case CKM_SHA384: params.mgf = CKG_MGF1_SHA384; params.sLen = 48; break; case CKM_SHA512: params.mgf = CKG_MGF1_SHA512; params.sLen = 64; break; default: assert_true(0); } CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_PSS, .pParameter = ¶ms, .ulParameterLen = sizeof(params) }; CK_BYTE msg_digest[64]; memset(msg_digest, 0xAA, params.sLen); CK_RV rv = C_SignInit(session, &mech, key[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, msg_digest, params.sLen, NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(siglen, 0); CK_ULONG tmp_len = siglen; rv = C_Sign(session, msg_digest, params.sLen, sig, &siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, key[1]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg_digest, params.sLen, sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_pss2(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key[2], CK_MECHANISM_TYPE halg) { CK_MECHANISM mech = { .pParameter = NULL, .ulParameterLen = 0 }; switch (halg) { case CKM_SHA_1: mech.mechanism = CKM_SHA1_RSA_PKCS_PSS; break; case CKM_SHA256: mech.mechanism = CKM_SHA256_RSA_PKCS_PSS; break; case CKM_SHA384: mech.mechanism = CKM_SHA384_RSA_PKCS_PSS; break; case CKM_SHA512: mech.mechanism = CKM_SHA512_RSA_PKCS_PSS; break; default: assert_true(0); } CK_BYTE msg[] = "my message"; CK_RV rv = C_SignInit(session, &mech, key[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, msg, sizeof(msg) - 1, NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(siglen, 0); CK_ULONG tmp_len = siglen; rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, key[1]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_RSA_PKCS_PSS(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BYTE _label[] = "rsa1"; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, _label, sizeof(_label) - 1 }, }; user_login(session); /* Find an RSA Private key */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[2]; rv = C_FindObjects(session, &objhandles[0], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* Find matching RSA Public key */ key_class = CKO_PUBLIC_KEY; rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &objhandles[1], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); test_pss(session, objhandles, CKM_SHA_1); test_pss2(session, objhandles, CKM_SHA_1); test_pss(session, objhandles, CKM_SHA256); test_pss2(session, objhandles, CKM_SHA256); test_pss(session, objhandles, CKM_SHA384); test_pss2(session, objhandles, CKM_SHA384); test_pss(session, objhandles, CKM_SHA512); test_pss2(session, objhandles, CKM_SHA512); } static void test_double_sign_call_for_size_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; /* get the size of the buffer for a sign */ rv = C_Sign(session, msg, sizeof(msg), NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_true(siglen > 0); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_Sign(session, msg, sizeof(msg), sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_Sign(session, msg, sizeof(msg), sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_call_for_size_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA512_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; /* get the size of the buffer for a sign */ rv = C_Sign(session, msg, sizeof(msg), NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_true(siglen > 0); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_Sign(session, msg, sizeof(msg), sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_Sign(session, msg, sizeof(msg), sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_final_call_for_size_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; rv = C_SignUpdate(session, msg, sizeof(msg)); assert_int_equal(rv, CKR_OK); /* get the size of the buffer for a sign */ CK_ULONG siglen = 0; rv = C_SignFinal(session, NULL, &siglen); assert_int_equal(rv, CKR_OK); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_SignFinal(session, sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_SignFinal(session, sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_final_call_for_size_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA512_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; rv = C_SignUpdate(session, msg, sizeof(msg)); assert_int_equal(rv, CKR_OK); /* get the size of the buffer for a sign */ CK_ULONG siglen = 0; rv = C_SignFinal(session, NULL, &siglen); assert_int_equal(rv, CKR_OK); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_SignFinal(session, sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_SignFinal(session, sig, &siglen); assert_int_equal(rv, CKR_OK); } static CK_ATTRIBUTE_PTR get_attr(CK_ATTRIBUTE_TYPE type, CK_ATTRIBUTE_PTR attrs, CK_ULONG attr_len) { CK_ULONG i; for (i=0; i < attr_len; i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; if (a->type == type) { return a; } } return NULL; } #if (OPENSSL_VERSION_NUMBER < 0x1010000fL && !defined(LIBRESSL_VERSION_NUMBER)) || (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L) /* OpenSSL 1.1.0 */ #define LIB_TPM2_OPENSSL_OPENSSL_PRE11 #endif RSA *template_to_rsa_pub_key(CK_ATTRIBUTE_PTR attrs, CK_ULONG attr_len) { RSA *ssl_rsa_key = NULL; BIGNUM *e = NULL, *n = NULL; /* get the exponent */ CK_ATTRIBUTE_PTR a = get_attr(CKA_PUBLIC_EXPONENT, attrs, attr_len); assert_non_null(a); e = BN_bin2bn((void*)a->pValue, a->ulValueLen, NULL); assert_non_null(e); /* get the modulus */ a = get_attr(CKA_MODULUS, attrs, attr_len); assert_non_null(a); n = BN_bin2bn(a->pValue, a->ulValueLen, NULL); assert_non_null(n); ssl_rsa_key = RSA_new(); assert_non_null(ssl_rsa_key); #if defined(LIB_TPM2_OPENSSL_OPENSSL_PRE11) ssl_rsa_key->e = e; ssl_rsa_key->n = n; #else int rc = RSA_set0_key(ssl_rsa_key, n, e, NULL); assert_int_equal(rc, 1); #endif return ssl_rsa_key; } static void verify(RSA *pub, CK_BYTE_PTR msg, CK_ULONG msg_len, CK_BYTE_PTR sig, CK_ULONG sig_len) { EVP_PKEY *pkey = EVP_PKEY_new(); assert_non_null(pkey); int rc = EVP_PKEY_set1_RSA(pkey, pub); assert_int_equal(rc, 1); EVP_MD_CTX *ctx = EVP_MD_CTX_create(); const EVP_MD* md = EVP_get_digestbyname("SHA256"); assert_non_null(md); rc = EVP_DigestInit_ex(ctx, md, NULL); assert_int_equal(rc, 1); rc = EVP_DigestVerifyInit(ctx, NULL, md, NULL, pkey); assert_int_equal(rc, 1); rc = EVP_DigestVerifyUpdate(ctx, msg, msg_len); assert_int_equal(rc, 1); rc = EVP_DigestVerifyFinal(ctx, sig, sig_len); assert_int_equal(rc, 1); EVP_PKEY_free(pkey); EVP_MD_CTX_destroy(ctx); } static void test_sign_verify_public(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_HANDLE priv_handle; CK_OBJECT_HANDLE pub_handle; user_login(session); get_keypair(session, CKK_RSA, &pub_handle, &priv_handle); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; CK_RV rv = C_SignInit(session, &mech, priv_handle); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* build an OSSL RSA key from parts */ CK_BYTE _tmp_bufs[2][1024]; CK_ATTRIBUTE attrs[] = { { .type = CKA_PUBLIC_EXPONENT, .ulValueLen = sizeof(_tmp_bufs[0]), .pValue = &_tmp_bufs[0] }, { .type = CKA_MODULUS, .ulValueLen = sizeof(_tmp_bufs[1]), .pValue = &_tmp_bufs[1] }, }; rv = C_GetAttributeValue(session, pub_handle, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); RSA *r = template_to_rsa_pub_key(attrs, ARRAY_LEN(attrs)); assert_non_null(r); verify(r, msg, sizeof(msg) - 1, sig, siglen); RSA_free(r); } static void test_sign_verify_context_specific_good(void **state) { static CK_BBOOL _true = CK_TRUE; test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_ALWAYS_AUTHENTICATE, &_true, sizeof(_true) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key w/CKA_ALWAYS_AUTHENTICATE set */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* context specific require C_Login(USER) before */ context_login_expects(session, CKR_USER_NOT_LOGGED_IN); user_login(session); CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha256_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_sha256_rsa_pkcs_sig); /* this should fail with CKR_USER_NOT_LOGGED_IN */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); /* bad pin should fail */ context_login_bad_pin(session); /* finally logged in, should work */ context_login(session); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* this should fail */ rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); context_login(session); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } static void test_cert_no_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* Find a cert */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* you cant do a sign without logging in */ user_login(session); CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA256_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "hmac0"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_SHA256_HMAC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = (typeof(msg))"Hello World This is my message to HMAC"; CK_ULONG msg_len = strlen((const char *)msg); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void ossl_verify_hmac_sig(const unsigned char *hmac_key, size_t hmac_key_len, const EVP_MD *md, const CK_BYTE_PTR msg, CK_ULONG msg_len, CK_BYTE_PTR sig, CK_ULONG sig_len) { EVP_PKEY *ekey = EVP_PKEY_new_mac_key(EVP_PKEY_HMAC, NULL, hmac_key, hmac_key_len); assert_non_null(ekey); EVP_MD_CTX *mdctx = EVP_MD_CTX_new(); assert_non_null(mdctx); int rc = EVP_DigestSignInit(mdctx, NULL, md, NULL, ekey); assert_int_equal(rc, 1); rc = EVP_DigestSignUpdate(mdctx, msg, msg_len); assert_int_equal(rc, 1); unsigned char sig2[32] = { 0 }; size_t sig2_len = sizeof(sig2); rc = EVP_DigestSignFinal(mdctx, sig2, &sig2_len); assert_int_equal(rc, 1); EVP_MD_CTX_free(mdctx); EVP_PKEY_free(ekey); assert_int_equal(sig2_len, sig_len); assert_memory_equal(sig2, sig, sig2_len); } static void test_sign_verify_CKM_SHA256_HMAC_imported(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "imported_hmac_key"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = (typeof(msg))"Hello World This is my message to HMAC"; CK_ULONG msg_len = strlen((const char *)msg); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); /* * verify with OpenSSL. We do this here instead of in a script because sign via command line tools * like pkcs11-tool is not supported at the moment. However support was added here: * - https://github.com/OpenSC/OpenSC/pull/2385 */ ossl_verify_hmac_sig(hmac_key, sizeof(hmac_key), EVP_sha256(), msg, msg_len, sig, sig_len); } static void test_sign_verify_CKM_SHA256_HMAC_large(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "hmac0"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_SHA256_HMAC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = _large_rand_bin; CK_ULONG msg_len = sizeof(_large_rand_bin); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); /* Try 5.2 style returns */ rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_SignUpdate(session, (CK_BYTE_PTR)msg, msg_len); assert_int_equal(rv, CKR_OK); sig_len = 0; rv = C_SignFinal(session, NULL, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_SignFinal(session, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); sig_len = 0; rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, NULL, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA256_HMAC_imported_large(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "imported_hmac_key"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = _large_rand_bin; CK_ULONG msg_len = sizeof(_large_rand_bin); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); ossl_verify_hmac_sig(hmac_key, sizeof(hmac_key), EVP_sha256(), msg, msg_len, sig, sig_len); } static void test_sign_verify_CKM_SHA_1_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA_1_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[20] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 20); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA384_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA384_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[48] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 48); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA512_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA512_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[64] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 64); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_PSS, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_context_specific_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_public, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_call_for_size_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_final_call_for_size_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_call_for_size_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_final_call_for_size_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_sha256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_sha512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA1, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA384, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_cert_no_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA_1_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA384_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_imported, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_large, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_imported_large, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA512_HMAC, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs-get-attribute-value.int.c0000644000175000017500000004546013754763565021547 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include "test.h" struct test_info { CK_SESSION_HANDLE hSession; CK_OBJECT_HANDLE hObject; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE hSession; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &hSession); assert_int_equal(rv, CKR_OK); /* assign to state */ info->hSession = hSession; /* find a suitable object to work with */ const char *key_label = "mykeylabel"; CK_ATTRIBUTE tmpl[] = { {CKA_LABEL, (void *)key_label, strlen(key_label)}, }; rv = C_FindObjectsInit(hSession, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(hSession); CK_OBJECT_HANDLE objhandles[1024]; rv = C_FindObjects(hSession, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_true(count >= 1); rv = C_FindObjectsFinal(hSession); assert_int_equal(rv, CKR_OK); /* store handle for tests*/ info->hObject = objhandles[0]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseSession(ti->hSession); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_get_attribute_value_single_okay(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_LONG exactsize = 0; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); exactsize = template[0].ulValueLen; //for comparison template[0].pValue = pLabel; template[0].ulValueLen++; //must be reset to 'exactsize' rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); assert_int_equal(template[0].ulValueLen, exactsize); assert_string_equal(template[0].pValue, "mykeylabel"); free(pLabel); } static void test_get_attribute_value_multiple_okay(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_BYTE_PTR *pId = NULL; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, {CKA_ID, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); template[0].pValue = pLabel; pId = malloc(template[1].ulValueLen); template[1].pValue = pId; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); assert_string_equal(template[0].pValue, "mykeylabel"); free(pLabel); free(pId); } static void test_get_attribute_value_buffer_too_small(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); template[0].pValue = pLabel; //make buffer length too small template[0].ulValueLen--; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); free(pLabel); } static void test_get_attribute_value_invalid_attribute(void **state) { test_info *ti = test_info_from_state(state); CK_ATTRIBUTE template[] = { {0x0000FFFFUL, NULL_PTR, 0}, //Invalid }; CK_RV rv; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_ATTRIBUTE_TYPE_INVALID); assert_int_equal(template[0].ulValueLen, CK_UNAVAILABLE_INFORMATION); assert_null(template[0].pValue); } /* * C_GetAttributeValue must process every attribute in the template, * even if CKR_ATTRIBUTE_TYPE_INVALID or CKR_BUFFER_TOO_SMALL is returned. * The return value can be any one of the failures. * */ static void test_get_attribute_value_multiple_fail(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_BYTE_PTR *pId = NULL; CK_BYTE_PTR *pInvalid = NULL; CK_ATTRIBUTE template[] = { {CKA_ID, NULL_PTR, 0}, {CKA_LABEL, NULL_PTR, 0}, {0x0000FFFFUL, NULL_PTR, 0}, //Invalid }; LargestIntegralType expected_returns[] = {CKR_BUFFER_TOO_SMALL, CKR_ATTRIBUTE_TYPE_INVALID}; test_info *ti = test_info_from_state(state); // Call for Size, without invalid rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); // too small pId = malloc(template[0].ulValueLen); template[0].pValue = pId; template[0].ulValueLen--; // make buffer too small // this one will be okay pLabel = malloc(template[1].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[1].ulValueLen+1); template[1].pValue = pLabel; // invalid pInvalid = malloc(10); template[2].pValue = pInvalid; template[2].ulValueLen = 10; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 3); // Return should be CKR_ATTRIBUTE_TYPE_INVALID or CKR_BUFFER_TOO_SMALL assert_in_set(rv, expected_returns, 2); assert_int_equal(template[0].ulValueLen, CK_UNAVAILABLE_INFORMATION); assert_string_equal(template[1].pValue, "mykeylabel"); assert_int_equal(template[2].ulValueLen, CK_UNAVAILABLE_INFORMATION); free(pLabel); free(pId); free(pInvalid); } static void test_all_pub_ecc_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PUBLIC_KEY; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_pub_attrs_common(session, keytype, h); verify_missing_pub_attrs_ecc(session, h); } } static void test_all_priv_ecc_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PRIVATE_KEY; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_priv_attrs_common(session, keytype, h, CK_FALSE); verify_missing_priv_attrs_ecc(session, h); } } static void test_all_pub_rsa_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PUBLIC_KEY; CK_KEY_TYPE keytype = CKK_RSA; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_pub_attrs_common(session, keytype, h); verify_missing_pub_attrs_rsa(session, h); } } static void test_all_priv_rsa_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PRIVATE_KEY; CK_KEY_TYPE keytype = CKK_RSA; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_priv_attrs_common(session, keytype, h, CK_FALSE); verify_missing_priv_attrs_rsa(session, h); } } #define ADD_ATTR_HANDLER(a, b, index) .type = a, .ulValueLen = sizeof(b[0]), .pValue= b[index] static void verify_cert_attrs(CK_SESSION_HANDLE s, CK_OBJECT_HANDLE h) { CK_BYTE _buf[256][1024] = { 0 }; CK_ATTRIBUTE attrs[] = { { ADD_ATTR_HANDLER(CKA_CLASS, _buf, 0) }, { ADD_ATTR_HANDLER(CKA_CERTIFICATE_TYPE, _buf, 1) }, { ADD_ATTR_HANDLER(CKA_TRUSTED, _buf, 2) }, { ADD_ATTR_HANDLER(CKA_CERTIFICATE_CATEGORY, _buf, 3) }, { ADD_ATTR_HANDLER(CKA_CHECK_VALUE, _buf, 4) }, { ADD_ATTR_HANDLER(CKA_START_DATE, _buf, 5) }, { ADD_ATTR_HANDLER(CKA_END_DATE, _buf, 6) }, { ADD_ATTR_HANDLER(CKA_PUBLIC_KEY_INFO, _buf, 7) }, { ADD_ATTR_HANDLER(CKA_SUBJECT, _buf, 8) }, { ADD_ATTR_HANDLER(CKA_LABEL, _buf, 9) }, { ADD_ATTR_HANDLER(CKA_ISSUER, _buf, 10) }, { ADD_ATTR_HANDLER(CKA_SERIAL_NUMBER, _buf, 11) }, { ADD_ATTR_HANDLER(CKA_VALUE, _buf, 12) }, { ADD_ATTR_HANDLER(CKA_URL, _buf, 13) }, { ADD_ATTR_HANDLER(CKA_HASH_OF_SUBJECT_PUBLIC_KEY, _buf, 14) }, { ADD_ATTR_HANDLER(CKA_HASH_OF_ISSUER_PUBLIC_KEY, _buf, 15) }, { ADD_ATTR_HANDLER(CKA_JAVA_MIDP_SECURITY_DOMAIN, _buf, 16) }, { ADD_ATTR_HANDLER(CKA_NAME_HASH_ALGORITHM, _buf, 17) }, }; assert_true(ARRAY_LEN(attrs) <= ARRAY_LEN(_buf)); CK_RV rv = C_GetAttributeValue(s, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ATTRIBUTE_PTR value = NULL; CK_ATTRIBUTE_PTR checkvalue = NULL; CK_ATTRIBUTE_PTR subject = NULL; CK_ATTRIBUTE_PTR issuer = NULL; CK_ATTRIBUTE_PTR serial_number = NULL; CK_ULONG i = 0; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch (a->type) { case CKA_CLASS: { assert_int_equal(a->ulValueLen, sizeof(CK_OBJECT_CLASS)); CK_OBJECT_CLASS *v = (CK_OBJECT_CLASS *)a->pValue; assert_int_equal(*v, CKO_CERTIFICATE); } break; case CKA_CERTIFICATE_TYPE: { assert_int_equal(a->ulValueLen, sizeof(CK_CERTIFICATE_TYPE)); CK_CERTIFICATE_TYPE *v = (CK_CERTIFICATE_TYPE *)a->pValue; assert_int_equal(*v, CKC_X_509); } break; case CKA_TRUSTED: { assert_int_equal(a->ulValueLen, sizeof(CK_BBOOL)); CK_BBOOL *v = (CK_BBOOL *)a->pValue; assert_int_equal(*v, CK_FALSE); } break; case CKA_CERTIFICATE_CATEGORY: { assert_int_equal(a->ulValueLen, sizeof(CK_ULONG)); CK_ULONG *v = (CK_ULONG *)a->pValue; assert_int_equal(*v, CK_CERTIFICATE_CATEGORY_UNSPECIFIED); } break; case CKA_CHECK_VALUE: { // check value is first three bytes of sha1 hash assert_int_equal(a->ulValueLen, 3); checkvalue = a; } break; case CKA_SUBJECT: subject = a; break; case CKA_ISSUER: issuer = a; break; case CKA_SERIAL_NUMBER: serial_number = a; break; case CKA_LABEL: /* a label should be set ? */ assert_true(a->ulValueLen > 0); break; case CKA_VALUE: value = a; break; case CKA_JAVA_MIDP_SECURITY_DOMAIN: { assert_int_equal(a->ulValueLen, sizeof(CK_JAVA_MIDP_SECURITY_DOMAIN)); CK_JAVA_MIDP_SECURITY_DOMAIN *v = (CK_ULONG *)a->pValue; assert_int_equal(*v, CK_SECURITY_DOMAIN_UNSPECIFIED); } break; case CKA_NAME_HASH_ALGORITHM: { assert_int_equal(a->ulValueLen, sizeof(CK_MECHANISM_TYPE)); CK_MECHANISM_TYPE *v = (CK_MECHANISM_TYPE *)a->pValue; assert_int_equal(*v, CKM_SHA_1); } break; /* expected empty */ case CKA_URL: // falls-thru case CKA_HASH_OF_SUBJECT_PUBLIC_KEY: // falls-thru case CKA_HASH_OF_ISSUER_PUBLIC_KEY: // falls-thru case CKA_PUBLIC_KEY_INFO: // falls-thru case CKA_START_DATE: // falls-thru case CKA_END_DATE: assert_int_equal(a->ulValueLen, 0); break; default: assert_true(0); } } assert_non_null(subject); assert_non_null(issuer); assert_non_null(serial_number); assert_non_null(value); assert_non_null(checkvalue); /* verify subject is an ASN1 encoded string */ const unsigned char *tmp = subject->pValue; X509_NAME *ss = d2i_X509_NAME(NULL, &tmp, subject->ulValueLen); assert_non_null(ss); X509_NAME_free(ss); /* verify check value */ EVP_MD_CTX *mdctx = EVP_MD_CTX_create(); assert_non_null(mdctx); int rc = EVP_DigestInit_ex(mdctx, EVP_sha1(), NULL); assert_int_equal(rc, 1); rc = EVP_DigestUpdate(mdctx, value->pValue, value->ulValueLen); assert_int_equal(rc, 1); unsigned char md[SHA_DIGEST_LENGTH]; unsigned int len = sizeof(md); rc = EVP_DigestFinal_ex(mdctx, md, &len); assert_int_equal(rc, 1); EVP_MD_CTX_destroy(mdctx); assert_memory_equal(md, checkvalue->pValue, checkvalue->ulValueLen); } static void test_all_cert_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE attrs[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); assert_true(count > 0); /* make sure we got all of them */ CK_ULONG left = 1; CK_OBJECT_HANDLE dummy; rv = C_FindObjects(session, &dummy, 1, &left); assert_int_equal(rv, CKR_OK); assert_int_equal(left, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_cert_attrs(session, h); } } static void test_set_attribute_value_multiple_okay(void **state) { test_info *ti = test_info_from_state(state); CK_UTF8CHAR url [] = "http://fakeurl.com"; CK_UTF8CHAR label[] = "mynewkeylabel"; CK_ATTRIBUTE template[] = { {CKA_LABEL, label, sizeof(label) - 1}, {CKA_URL, url, sizeof(url) - 1}, }; CK_RV rv = C_SetAttributeValue(ti->hSession, ti->hObject, template, ARRAY_LEN(template)); assert_int_equal(rv, CKR_OK); memset(label, 0, sizeof(label)); memset(url, 0, sizeof(label)); rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, ARRAY_LEN(template)); assert_int_equal(rv, CKR_OK); assert_memory_equal(template[0].pValue, "mynewkeylabel", template[0].ulValueLen); assert_memory_equal(template[1].pValue, "http://fakeurl.com", template[1].ulValueLen); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_all_cert_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_pub_ecc_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_priv_ecc_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_pub_rsa_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_priv_rsa_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_single_okay, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_multiple_okay, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_buffer_too_small, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_invalid_attribute, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_multiple_fail, test_setup, test_teardown), /* this must go last as it modifies the key label */ cmocka_unit_test_setup_teardown(test_set_attribute_value_multiple_okay, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs-crypt.int.c0000664000175000017500000015715514114236775017012 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot; struct { CK_OBJECT_HANDLE aes; CK_OBJECT_HANDLE aes_always_auth; struct { CK_OBJECT_HANDLE priv; CK_OBJECT_HANDLE pub; } rsa; } objects; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE handle; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &handle); assert_int_equal(rv, CKR_OK); CK_BBOOL _false = FALSE; CK_BBOOL _true = TRUE; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_AES; CK_ATTRIBUTE tmpl[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_ALWAYS_AUTHENTICATE, &_false, sizeof(_false)}, }; user_login(handle); rv = C_FindObjectsInit(handle, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* get a AES key without always auth*/ CK_OBJECT_HANDLE objhandles[4]; rv = C_FindObjects(handle, &objhandles[0], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an aes key with always auth */ tmpl[2].pValue = &_true; rv = C_FindObjectsInit(handle, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[1], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an rsa key */ key_class = CKO_PRIVATE_KEY; key_type = CKK_RSA; char _label[] = "rsa0"; CK_ATTRIBUTE tmpl_rsapriv[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_ALWAYS_AUTHENTICATE, &_false, sizeof(_false)}, {CKA_LABEL, _label, sizeof(_label) - 1}, }; rv = C_FindObjectsInit(handle, tmpl_rsapriv, ARRAY_LEN(tmpl_rsapriv)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[2], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an rsa public key */ key_class = CKO_PUBLIC_KEY; key_type = CKK_RSA; CK_ATTRIBUTE tmpl_rsapub[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_LABEL, _label, sizeof(_label) - 1}, }; rv = C_FindObjectsInit(handle, tmpl_rsapub, ARRAY_LEN(tmpl_rsapub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[3], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* assign to state */ info->handle = handle; info->slot = slots[1]; info->objects.aes = objhandles[0]; info->objects.aes_always_auth = objhandles[1]; info->objects.rsa.priv = objhandles[2]; info->objects.rsa.pub = objhandles[3]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_Logout(ti->handle); assert_int_equal(rv, CKR_OK); rv = C_CloseSession(ti->handle); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_aes_encrypt_decrypt_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* part 2 */ ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, &ciphertext[16], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* final, shouldn't have anything left over */ CK_BYTE final = 0; CK_ULONG final_len = 0; rv = C_EncryptFinal(session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = ciphertext_len = 16; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptUpdate (session, &ciphertext[ciphertext_len], ciphertext_len, &plaintext2[plaintext2_len], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptFinal (session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); assert_int_equal(plaintext2_len, 16); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* get buffer size on NULL case */ CK_ULONG tmp = 42; // something not 16 to help verify it's ignored rv = C_EncryptUpdate(session, plaintext, 16, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, 16); /* get buffer size on CKR_BUFFER_TOO_SMALL case */ tmp--; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, 16); /* part 1 */ unsigned long ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* part 2 */ ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, &ciphertext[16], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* final, shouldn't have anything left over */ CK_BYTE final; CK_ULONG final_len = 0; rv = C_EncryptFinal(session, &final, &final_len); assert_int_equal(rv, CKR_OK); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = ciphertext_len = 16; /* figure out buffer size via NULL*/ tmp = 42; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, plaintext2_len); /* figure out buffer size via CKR_BUFFER_TOO_SMALL*/ tmp--; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); /* do decrypt */ assert_int_equal(tmp, plaintext2_len); rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptUpdate (session, &ciphertext[ciphertext_len], ciphertext_len, &plaintext2[plaintext2_len], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptFinal (session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_oneshot_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG plaintext_len = sizeof(plaintext); /* NULL size */ CK_ULONG tmp = 42; rv = C_Encrypt(session, plaintext, plaintext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext)); /* CKR_BUFFER_TOO_SMALL */ tmp--; rv = C_Encrypt(session, plaintext, plaintext_len, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext)); /* part 1 */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = sizeof(plaintext2); /* NULL size */ tmp = 42; rv = C_Decrypt (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext2)); /* CKR_BUFFER_TOO_SMALL size */ tmp--; rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext2)); /* good size */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } #define MGF1_LABEL "mylabel" static void test_rsa_oaep_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_RSA_PKCS_OAEP_PARAMS params = { .hashAlg = CKM_SHA256, .pSourceData = MGF1_LABEL, .ulSourceDataLen = sizeof(MGF1_LABEL), // include NULL byte .source = CKZ_DATA_SPECIFIED, .mgf = CKG_MGF1_SHA256 }; CK_MECHANISM mechanism = { CKM_RSA_PKCS_OAEP, ¶ms, sizeof(params) }; CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext)); /* retry with SHA1 */ params.hashAlg = CKM_SHA_1; params.mgf = CKG_MGF1_SHA1; rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* part 1 */ rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext)); } static void test_aes_always_authenticate(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_OK); /* context specific require C_Login(USER) before */ context_login_expects(session, CKR_USER_NOT_LOGGED_IN); user_login(session); /* should be able to initialize operation */ /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ rv = C_EncryptInit(session, &mechanism, ti->objects.aes_always_auth); assert_int_equal(rv, CKR_OK); /* shouldn't be able to perform actual operation */ CK_ULONG ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); /* bad pin should fail */ context_login_bad_pin(session); /* ok log in and go */ context_login(session); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes_always_auth); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); /* shouldn't work */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); context_login(session); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_cert_no_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* Find a cert */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; rv = C_EncryptInit(session, &mechanism, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); rv = C_DecryptInit(session, &mechanism, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); } static void test_rsa_x509_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_MECHANISM mechanism = { CKM_RSA_X_509, NULL, 0 }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; CK_BYTE plaintext[256] = { 0 }; const char *secret= "my secret is cool"; /* * PKCS11 guidance for ra wRSA is to prepend message with 0's */ size_t len = strlen(secret); memcpy(&plaintext[sizeof(plaintext) - len], secret, len); /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); /* after decrypt we need to undo the padding */ assert_memory_equal(&plaintext2[plaintext2_len - len], secret, len); } static void test_rsa_pkcs_encrypt_decrypt_public_5_2_returns_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_MECHANISM mechanism = { CKM_RSA_PKCS, NULL, 0 }; CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* get size */ CK_ULONG ciphertext_len = 42; rv = C_Encrypt(session, plaintext, sizeof(plaintext), NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ciphertext_len, 42); /* do encryption */ rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); /* plaintext should not match ciphertext */ assert_true(sizeof(plaintext) < ciphertext_len); assert_memory_not_equal(plaintext, ciphertext, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext)); } static void test_aes_big_blockboundry_buffer_encrypt_decrypt_oneshot_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[1048576] = { 0 }; size_t i; /* * for each block memset it to a value so we get each block separated * makes looking at it easier. * */ uint8_t value = 0; for(i=0; i < sizeof(plaintext)/16; i++) { memset(&plaintext[i*16], value, 16); /* intentionally wanting rollover */ value++; } CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG plaintext_len = sizeof(plaintext); /* NULL size */ CK_ULONG tmp = 42; rv = C_Encrypt(session, plaintext, plaintext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext)); /* CKR_BUFFER_TOO_SMALL */ tmp--; rv = C_Encrypt(session, plaintext, plaintext_len, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext)); /* part 1 */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = sizeof(plaintext2); /* NULL size */ tmp = 42; rv = C_Decrypt (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext2)); /* CKR_BUFFER_TOO_SMALL size */ tmp--; rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext2)); /* good size */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } /* * This tests that 3 blocks of plaintext encrypted and decrypted * via C_EncryptUpdate and C_DecryptUpdate calls work as expected. */ static void test_aes_cbc_non_block_boundry_plaintext(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* * call final to get the last remaining block, * which in AES CBC mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call it again with a buffer to finish the operation * This shouldn't change the contents of ciphertext buffer, * so pass it in so we can detect bugs where we mutate the * contents. */ static const CK_BYTE all_zeros[sizeof(ciphertext)] = { 0 }; CK_BYTE tmp[sizeof(ciphertext)] = { 0 }; rv = C_EncryptFinal(session, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); assert_memory_equal(tmp, all_zeros, sizeof(all_zeros)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundry */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* 15 bytes on internal buffer, add remaining byte, we should get a block back */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 1; rv = C_DecryptFinal(session, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_cbc_non_block_boundry_plaintext_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; CK_BYTE plaintext[36] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_DATA_LEN_RANGE); } static void test_aes_0_bytes(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext = 0; CK_BYTE ciphertext = 0; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG ciphertext_len = 0; rv = C_EncryptUpdate(session, &plaintext, 0, &ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call final to get the last remaining block, * which in AES CBC mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); rv = C_EncryptFinal(session, &ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); } static void test_aes_cbc_pad_small_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[15] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 }; CK_BYTE ciphertext[sizeof(plaintext) + 1] = { 0 }; /* encrypt init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); /* decrypt init */ rv = C_DecryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)] = { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); rv = C_Decrypt(session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext2)); } static void test_aes_cbc_pad_multiple_blocks(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; /* +16 for the all padding block of AES CBC mode */ CK_BYTE ciphertext[sizeof(plaintext) + 16] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* * Do a 5.2 Style call for size * call final to get the last remaining block, * which in AES CBC PAD mode should have one. */ CK_ULONG tmp_len = 12; rv = C_EncryptFinal(session, NULL, &tmp_len); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp_len, 16); /* finish the operation, should have 16 bytes left in cipher text buffer */ ciphertext_len = sizeof(ciphertext) - counter; assert_int_equal(ciphertext_len, 16); rv = C_EncryptFinal(session, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundry */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* * 15 bytes on internal buffer, add remaining byte, CBC PAD mode needs to retain 1 block * during decrypt if their is no extra data (ie on block boundary) as it may need to strip * padding off the last block */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 1; /* * Add half of the remaining block of padding, this should cause * a block to be returned */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 8, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 8; /* * add the remaining 1/2 block. Its holding back a block on Decrypt, * so nothing will be returned as their is only 1 block in the internal * state buffer. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 8, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 8; /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* * Get the remaining block, since this is a block boundary, the final block * should get stripped as padding. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptFinal(session, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_cbc_pad_multiple_blocks_with_extra(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[38] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38 }; /* +10 for the padding on the final block of AES CBC mode */ CK_BYTE ciphertext[sizeof(plaintext) + 10] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; // is 15 /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; // is 31 /* * add remaining 7 bytes with 15 bytes in the internal state buffer should 22 * Since their is extra data, we should get a block back */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 7, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 7; // is 38 /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* * Do a 5.2 Style call for size * call final to get the last remaining block, * which in AES CBC PAD mode should have one. */ CK_ULONG tmp_len = 12; rv = C_EncryptFinal(session, NULL, &tmp_len); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp_len, 16); /* finish the operation, should have 16 bytes left in cipher text buffer */ ciphertext_len = sizeof(ciphertext) - counter; assert_int_equal(ciphertext_len, 16); rv = C_EncryptFinal(session, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundry */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; //17 /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; // 31 /* * 15 bytes on internal buffer, add remaining 17 bytes. * We should get one block back since their will now * be an extra block of extra data on internal buffer since * it gets held to final on decrypt. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 17, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; // 48 /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* * Get the remaining block, since this is a block boundary, the final block * should get 10 bytes stripped as padding. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptFinal(session, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 6); counter += plaintext2_len; /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_multiple_blocks(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = sizeof(params.cb) * 8, /* initialize the counter to something other than 0 */ .cb = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* cipher text should be fully acquired at this point (AES CTR mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* * call final to get the last remaining block, * which in AES CTR mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call it again with a buffer to finish the operation * This shouldn't change the contents of ciphertext buffer, * so pass it in so we can detect bugs where we mutate the * contents. */ static const CK_BYTE all_zeros[sizeof(ciphertext)] = { 0 }; CK_BYTE tmp[sizeof(ciphertext)] = { 0 }; rv = C_EncryptFinal(session, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); assert_memory_equal(tmp, all_zeros, sizeof(all_zeros)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundry */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* 15 bytes on internal buffer, add remaining byte, we should get a block back */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 1; rv = C_DecryptFinal(session, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_one_block_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = sizeof(params.cb) * 8, /* initialize the counter to something other than 0 */ .cb = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; CK_BYTE plaintext[16] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_Decrypt (session, ciphertext, sizeof(ciphertext), plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_bad_counter_size(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = 12, /* initialize the counter to something other than 0 */ .cb = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 0, 0, 0, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_MECHANISM_PARAM_INVALID); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_MECHANISM_PARAM_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_aes_always_authenticate, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_oaep_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_cert_no_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_x509_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_pkcs_encrypt_decrypt_public_5_2_returns_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_big_blockboundry_buffer_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_big_blockboundry_buffer_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_non_block_boundry_plaintext, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_0_bytes, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_non_block_boundry_plaintext_bad, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_small_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_multiple_blocks, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_multiple_blocks_with_extra, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_multiple_blocks, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_one_block_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_bad_counter_size, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/largebin.h0000664000175000017500000003461314114240163015665 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TEST_INTEGRATION_LARGEBIN_H_ #define TEST_INTEGRATION_LARGEBIN_H_ unsigned char _large_rand_bin[] = { 0xb8, 0xe5, 0x5c, 0x93, 0xf2, 0x1c, 0xa5, 0x76, 0x2f, 0x6b, 0x10, 0x42, 0x02, 0x69, 0x95, 0x4f, 0x1a, 0xed, 0x82, 0x81, 0x82, 0x5a, 0xfc, 0xd4, 0x66, 0x59, 0xf4, 0xed, 0x5b, 0x7a, 0x3a, 0x7a, 0x04, 0x91, 0xfe, 0x19, 0xb8, 0x27, 0xa6, 0xb9, 0xae, 0x42, 0xf4, 0x3a, 0x2f, 0x92, 0x1e, 0xe1, 0xfa, 0xf4, 0x9e, 0x98, 0xd5, 0xfe, 0x01, 0x3b, 0x6d, 0x32, 0x23, 0xcf, 0x6a, 0xad, 0xaf, 0x6b, 0x8c, 0xe3, 0x66, 0xd5, 0x47, 0x39, 0x90, 0xdb, 0x46, 0xe3, 0xae, 0x5c, 0xb0, 0xf9, 0xb0, 0xa7, 0x35, 0xf6, 0x72, 0x50, 0xfa, 0xea, 0x95, 0x4d, 0x2a, 0x2e, 0x0e, 0x4c, 0xfa, 0x91, 0x28, 0x4a, 0x84, 0xd9, 0x54, 0x6c, 0x85, 0x2c, 0xe3, 0xa9, 0xf9, 0xc0, 0x9c, 0xa5, 0xb9, 0xf8, 0xfb, 0x1f, 0xe7, 0xf2, 0x09, 0x9d, 0x91, 0x47, 0x7a, 0x9a, 0x0c, 0x72, 0x42, 0x08, 0x29, 0x82, 0x47, 0xd5, 0xdc, 0xd1, 0x67, 0x5e, 0x17, 0x19, 0xfd, 0x54, 0x2f, 0xff, 0xf8, 0x63, 0xb8, 0x61, 0x36, 0xfa, 0xa8, 0x32, 0x0e, 0xd1, 0x76, 0xaf, 0x2c, 0xf3, 0xd9, 0x23, 0x8f, 0x6a, 0xae, 0x14, 0x77, 0xd0, 0xa2, 0x8f, 0x62, 0xee, 0x33, 0x97, 0x92, 0xd8, 0x37, 0xaa, 0x46, 0x03, 0x45, 0x0f, 0xb7, 0x79, 0x3e, 0x50, 0xfb, 0x8d, 0x3d, 0x3f, 0xfb, 0xc4, 0x3f, 0x6d, 0xb2, 0xeb, 0xc3, 0xb0, 0x45, 0x77, 0xd2, 0xdc, 0x5a, 0xa6, 0xbe, 0x60, 0xad, 0xe0, 0x68, 0x4e, 0xf3, 0x30, 0xe8, 0xae, 0x11, 0x78, 0x83, 0x25, 0xf0, 0x52, 0x17, 0x56, 0x4c, 0x24, 0x01, 0x59, 0xde, 0x58, 0x45, 0x47, 0x28, 0x0f, 0x2d, 0xc7, 0x2c, 0xbb, 0x2f, 0x4d, 0x48, 0x87, 0xa8, 0x9b, 0x6d, 0x2b, 0x68, 0x82, 0x21, 0x30, 0xb6, 0x02, 0x06, 0xe4, 0x11, 0xa9, 0x95, 0xd1, 0x7a, 0x47, 0xcd, 0xcd, 0xcb, 0xf9, 0x63, 0x8e, 0x8c, 0xb0, 0xe4, 0x01, 0x38, 0xf1, 0xa5, 0x67, 0xcc, 0x69, 0xcd, 0xae, 0x31, 0xaf, 0xdc, 0xda, 0x17, 0x6f, 0x4f, 0xc2, 0xac, 0x15, 0xf1, 0x6c, 0x36, 0x68, 0xad, 0x45, 0xf0, 0x0c, 0xe0, 0x2d, 0x51, 0x32, 0xfa, 0xba, 0x3b, 0xaa, 0x3e, 0x18, 0x43, 0x58, 0x02, 0x65, 0xb8, 0x84, 0xcf, 0x50, 0xa7, 0xec, 0xb2, 0xe0, 0xe9, 0x5a, 0x14, 0x48, 0xc8, 0xd3, 0xd3, 0x1d, 0xa7, 0xa8, 0x38, 0xb6, 0x61, 0xaa, 0x72, 0xb9, 0xc5, 0x3c, 0x1b, 0x90, 0x65, 0x4f, 0x17, 0x9d, 0x0b, 0xc7, 0xd8, 0xcf, 0x63, 0x4d, 0x85, 0xc8, 0xdb, 0x26, 0x68, 0xca, 0x5b, 0xa1, 0x3a, 0xdd, 0x10, 0x0a, 0x4f, 0xc8, 0x15, 0xf1, 0x09, 0x12, 0x97, 0xa2, 0x46, 0x76, 0xd5, 0xa8, 0xa5, 0x26, 0xf5, 0xc7, 0x03, 0x69, 0x74, 0xa5, 0x62, 0x8b, 0x34, 0xa3, 0xa6, 0xb9, 0x8a, 0xae, 0x7b, 0x57, 0x11, 0x6c, 0x8f, 0x0c, 0xfc, 0x40, 0x23, 0xc2, 0xfc, 0xc0, 0x0a, 0x20, 0xb0, 0xa1, 0x7b, 0xe6, 0x55, 0x66, 0x52, 0x71, 0xfc, 0x98, 0x89, 0x87, 0x08, 0x8b, 0xb6, 0x45, 0xc9, 0x93, 0x2b, 0x80, 0xee, 0x6d, 0x0a, 0x81, 0x0a, 0x1d, 0xb9, 0x3f, 0x37, 0x3c, 0x47, 0x6e, 0x5f, 0xb8, 0xff, 0x2e, 0xd0, 0xee, 0x90, 0x5c, 0xe3, 0xc9, 0xd3, 0xba, 0xfc, 0x23, 0xfb, 0x53, 0xd5, 0x9e, 0x0d, 0x88, 0x50, 0xfb, 0x13, 0xb2, 0xe3, 0x2a, 0xdc, 0x98, 0xc5, 0x9c, 0xd3, 0xeb, 0x89, 0xf3, 0xf7, 0x44, 0x54, 0x8b, 0x09, 0xd2, 0x0e, 0x94, 0x14, 0x53, 0x76, 0x11, 0x5e, 0xfb, 0xce, 0xb0, 0x8d, 0x9d, 0x55, 0xfa, 0x5f, 0x40, 0xbd, 0xc1, 0x01, 0x9d, 0x6a, 0x52, 0x44, 0x7f, 0x28, 0xc8, 0x84, 0x79, 0x36, 0xf8, 0x7c, 0x6f, 0x63, 0x94, 0x2a, 0x78, 0xab, 0xa5, 0xc5, 0xef, 0x54, 0x2b, 0x1d, 0xf7, 0xba, 0x9f, 0x9c, 0xf4, 0xb7, 0xb2, 0x82, 0x92, 0x23, 0xab, 0x66, 0xb6, 0xbe, 0xd3, 0xd4, 0x4b, 0x17, 0xe0, 0xa9, 0xf1, 0xb3, 0x2d, 0xcd, 0x48, 0x8e, 0xba, 0xb5, 0x78, 0x52, 0xf2, 0xc2, 0x2f, 0x0c, 0x46, 0x08, 0x23, 0x34, 0xdc, 0xc1, 0xcb, 0xd2, 0x6a, 0x99, 0x6c, 0xf7, 0x5d, 0x4c, 0xff, 0x95, 0xde, 0x01, 0x7f, 0x46, 0x1d, 0xf0, 0xdc, 0x51, 0xd5, 0xa0, 0xb6, 0x8d, 0xd8, 0xde, 0x65, 0xf5, 0x1b, 0x5b, 0xd3, 0xa4, 0xfd, 0xac, 0xa0, 0xc6, 0x85, 0x12, 0xaf, 0x1d, 0xdc, 0x5f, 0x52, 0xd1, 0x57, 0xa8, 0x67, 0xb8, 0x42, 0x91, 0x6b, 0x07, 0xd8, 0xe9, 0x30, 0x35, 0xe3, 0x0a, 0xb0, 0x73, 0x8e, 0xe0, 0x60, 0xe3, 0xf7, 0x2c, 0x24, 0xfe, 0x95, 0xc5, 0x00, 0xad, 0x56, 0xb1, 0x2c, 0xb5, 0xd4, 0x5d, 0x24, 0x40, 0x27, 0x8e, 0x56, 0xf2, 0x60, 0x53, 0xef, 0x31, 0x48, 0xed, 0x45, 0x07, 0x62, 0x28, 0x53, 0x26, 0xde, 0x7e, 0x56, 0x3a, 0xfd, 0xc7, 0xc3, 0xb6, 0x5b, 0x35, 0xf7, 0xe4, 0x81, 0xa3, 0xde, 0xe9, 0xbd, 0x98, 0xe0, 0x68, 0x77, 0x20, 0x52, 0x5c, 0x9c, 0xb3, 0xf3, 0x48, 0x22, 0x32, 0x4d, 0x5a, 0xa8, 0xc8, 0xbc, 0xcc, 0x69, 0xde, 0x39, 0x36, 0x82, 0x94, 0xa0, 0x3e, 0xee, 0xf8, 0xe3, 0xe7, 0xf9, 0x4a, 0xa4, 0xdd, 0xa3, 0x0c, 0xd6, 0x9d, 0xe2, 0x88, 0xd1, 0xa3, 0xc0, 0x31, 0x63, 0x7c, 0x8d, 0xbb, 0xdf, 0xfa, 0xdb, 0x73, 0xf6, 0x39, 0xa2, 0x99, 0x73, 0x96, 0xfc, 0xcc, 0x88, 0xca, 0x44, 0x77, 0x59, 0x73, 0xad, 0x97, 0x03, 0x63, 0x5b, 0x3d, 0xbd, 0x38, 0x65, 0xad, 0xd1, 0x08, 0xaa, 0xfe, 0x29, 0x43, 0x7f, 0x1e, 0xb6, 0xa7, 0x22, 0x51, 0xc7, 0x09, 0xca, 0xfd, 0x7e, 0x81, 0xda, 0x41, 0xd7, 0xdf, 0xa7, 0x8b, 0x09, 0xde, 0x4d, 0x6c, 0x7e, 0xb7, 0xe2, 0x31, 0x53, 0x3f, 0xed, 0x64, 0x9d, 0x7a, 0xdb, 0x06, 0x9c, 0x19, 0x27, 0x2b, 0xec, 0xac, 0x83, 0x9c, 0x26, 0x2a, 0xf3, 0x69, 0x0b, 0x75, 0xd1, 0x31, 0xe6, 0x9d, 0x0b, 0x10, 0xa8, 0x8b, 0x2d, 0x7b, 0x61, 0xa0, 0x95, 0x31, 0xe1, 0x4e, 0x9f, 0x0e, 0x9e, 0xcc, 0x14, 0x81, 0x21, 0x9f, 0xca, 0x7a, 0xc9, 0x58, 0x59, 0xc5, 0xdd, 0x5b, 0xfc, 0xfc, 0x6e, 0xbb, 0x8f, 0x80, 0x9b, 0x3d, 0x5e, 0xa9, 0x7a, 0xf3, 0xd2, 0xfc, 0xbb, 0x8e, 0x79, 0x8d, 0x22, 0xe3, 0xf2, 0x3f, 0xab, 0xcb, 0x9a, 0x31, 0x9e, 0x5f, 0x02, 0x4b, 0xb1, 0x94, 0x24, 0xbd, 0xc0, 0xb3, 0x26, 0xbe, 0x8b, 0x41, 0x08, 0x9d, 0x19, 0xa6, 0x8a, 0xc5, 0xe8, 0x7a, 0xcd, 0xec, 0x31, 0xbb, 0x6c, 0xe3, 0xa6, 0xfe, 0x8f, 0xd7, 0x5e, 0x27, 0x85, 0xb6, 0xb6, 0x9e, 0xb3, 0x3e, 0x1d, 0xd2, 0x61, 0x2c, 0x9d, 0xd0, 0xe6, 0x54, 0xfb, 0x27, 0xf9, 0x52, 0x7a, 0xe3, 0xdc, 0x78, 0x69, 0x80, 0xad, 0x51, 0x31, 0x4e, 0xc2, 0xb4, 0x43, 0x8d, 0xb5, 0xc5, 0x95, 0x65, 0xb7, 0x70, 0x6f, 0x01, 0x3a, 0xa4, 0xe0, 0x7b, 0xb8, 0xaa, 0xc7, 0x2b, 0x3b, 0xcd, 0xaa, 0x9e, 0x3a, 0xa0, 0x03, 0xa0, 0x5d, 0xfc, 0x64, 0xb4, 0x38, 0xd7, 0xad, 0x12, 0xd8, 0x68, 0x75, 0x3f, 0x06, 0x07, 0x8b, 0x23, 0x1b, 0x47, 0x43, 0x93, 0x61, 0x87, 0xa9, 0x2d, 0xad, 0x1e, 0x6a, 0x53, 0xa4, 0x09, 0xc6, 0xab, 0xc7, 0x91, 0xe1, 0xb2, 0x77, 0x2d, 0xb5, 0x88, 0x39, 0xe2, 0xce, 0xd6, 0xb1, 0x3f, 0x2f, 0xbb, 0x95, 0xd9, 0xcf, 0x58, 0x7d, 0x27, 0xe7, 0xb5, 0xc2, 0x0b, 0xe3, 0x95, 0x65, 0xe3, 0xf6, 0x08, 0xee, 0x8b, 0x0d, 0xeb, 0xb3, 0xe0, 0x48, 0xff, 0x26, 0x6a, 0x3a, 0x84, 0xca, 0x86, 0x03, 0x26, 0xb9, 0xbb, 0xe6, 0x88, 0x5f, 0x05, 0x06, 0x26, 0x33, 0x1d, 0xb2, 0xe9, 0xba, 0x11, 0x4c, 0x43, 0x2d, 0x33, 0x59, 0x7d, 0x02, 0x7c, 0xb4, 0x52, 0xd5, 0x46, 0x12, 0xaa, 0x00, 0xdc, 0xdd, 0x68, 0xc4, 0x75, 0xdc, 0x91, 0x26, 0x72, 0x87, 0xa4, 0x65, 0xb1, 0x62, 0x58, 0x25, 0xee, 0x25, 0x66, 0x12, 0x30, 0x5f, 0x70, 0x7d, 0x07, 0xc5, 0x73, 0x7f, 0xbe, 0x8a, 0x56, 0x2f, 0xba, 0x3c, 0xdf, 0x0f, 0xd6, 0xfb, 0x10, 0x1f, 0x1a, 0xa7, 0xae, 0x15, 0xaf, 0xd4, 0xf6, 0xcf, 0x0e, 0x65, 0xaa, 0xde, 0x69, 0xcc, 0x83, 0x1f, 0xe5, 0x3b, 0xf5, 0xfe, 0x27, 0xc4, 0xcb, 0xd9, 0x36, 0x9d, 0x82, 0x4d, 0x0c, 0x5c, 0xbb, 0x50, 0xb4, 0x42, 0xbd, 0x6c, 0x2b, 0xe1, 0xad, 0xa8, 0xde, 0x11, 0x0d, 0x48, 0x15, 0x2a, 0x9e, 0x60, 0x84, 0x1f, 0xd6, 0xa1, 0xb3, 0x16, 0x01, 0xb3, 0x58, 0x8d, 0x35, 0xee, 0x25, 0x1f, 0x2e, 0x8a, 0x3d, 0x63, 0xe5, 0x69, 0x76, 0x06, 0xa0, 0xbf, 0x53, 0xe6, 0xa6, 0x85, 0x91, 0x17, 0x74, 0xde, 0x63, 0x36, 0x32, 0x3f, 0xfe, 0x0c, 0xdb, 0x80, 0xbd, 0x15, 0x48, 0x4e, 0x41, 0xe3, 0x38, 0xce, 0xc1, 0x18, 0x65, 0x18, 0x1e, 0x2b, 0x6d, 0x35, 0x02, 0x4d, 0xb5, 0xe7, 0x16, 0x21, 0x85, 0x8b, 0x7c, 0x00, 0x8d, 0x1c, 0x52, 0x57, 0xa7, 0x1e, 0x9b, 0x92, 0x7c, 0x31, 0xb9, 0x7a, 0x0f, 0x07, 0x90, 0x78, 0xcc, 0xc9, 0x56, 0xd7, 0xa5, 0x76, 0x4b, 0x8e, 0x88, 0x04, 0xb0, 0x92, 0x86, 0x78, 0x96, 0x92, 0x47, 0xa4, 0x08, 0xbf, 0x37, 0x74, 0x1b, 0x92, 0x32, 0xae, 0x72, 0xdf, 0x91, 0x8d, 0x8e, 0x5c, 0xe1, 0x0a, 0x5d, 0x64, 0x6d, 0x73, 0x2e, 0x7e, 0xa8, 0x69, 0xa1, 0xe7, 0x7d, 0x68, 0x73, 0x3c, 0x80, 0x86, 0xd6, 0x0c, 0x8f, 0x19, 0x62, 0xa5, 0x85, 0x2f, 0x49, 0xe2, 0x87, 0xf4, 0x80, 0xb7, 0x11, 0xa2, 0x73, 0x9a, 0x40, 0xb3, 0xfd, 0xc8, 0x58, 0xa1, 0x81, 0xd6, 0x20, 0xe1, 0x78, 0x4c, 0xe4, 0x7e, 0x5a, 0x3f, 0x62, 0xfc, 0xcb, 0x8f, 0x13, 0x94, 0x82, 0xe7, 0xe9, 0xa7, 0x8c, 0xf7, 0x6e, 0x2e, 0x23, 0x49, 0x75, 0x3d, 0x4d, 0x6b, 0xe2, 0x8d, 0xac, 0x6c, 0x76, 0x43, 0x6b, 0x76, 0xcc, 0x61, 0x62, 0x69, 0xca, 0xb8, 0xf3, 0x95, 0xbb, 0x5b, 0xf7, 0x7d, 0x9a, 0x95, 0x3f, 0xca, 0x4e, 0xfc, 0xc5, 0xa5, 0xfd, 0x8f, 0xcd, 0x92, 0x04, 0x9a, 0x74, 0x8a, 0xd3, 0xdd, 0x02, 0x95, 0x7e, 0x06, 0x03, 0xf0, 0xd4, 0x7a, 0x6e, 0x1b, 0xcb, 0xc1, 0x8d, 0xad, 0xc1, 0xf3, 0x07, 0x23, 0x08, 0x2c, 0xa2, 0x6a, 0xfa, 0x86, 0xc9, 0xc0, 0x03, 0x1f, 0xc7, 0x6d, 0xc5, 0x8f, 0x51, 0x50, 0x22, 0x1b, 0xad, 0x22, 0x89, 0x52, 0xd9, 0xf4, 0xef, 0x04, 0xec, 0x25, 0x38, 0x32, 0x02, 0x98, 0xd5, 0x0c, 0x06, 0x43, 0xd1, 0xc5, 0x64, 0x00, 0xd2, 0xa7, 0x6b, 0xc1, 0xd6, 0xa7, 0x83, 0xab, 0x47, 0xf6, 0xca, 0x39, 0x0f, 0x39, 0x19, 0xf3, 0x7a, 0x57, 0xb9, 0x23, 0x26, 0x47, 0x9e, 0x1b, 0x49, 0xe2, 0x9d, 0x21, 0x8b, 0xce, 0xd2, 0xc3, 0xc8, 0xbe, 0x66, 0x56, 0x19, 0x0f, 0x8d, 0xf5, 0x6a, 0xd7, 0x61, 0xcf, 0x3a, 0x44, 0x3e, 0x68, 0xd5, 0x60, 0x1f, 0x59, 0xd4, 0xdc, 0x5b, 0xd5, 0x00, 0xea, 0x24, 0x1d, 0x02, 0x77, 0x35, 0xce, 0x37, 0xe4, 0x2e, 0x6f, 0x7b, 0x1d, 0x2d, 0x3e, 0xa5, 0x71, 0x97, 0xb6, 0x69, 0x24, 0xdd, 0x26, 0x1b, 0x86, 0x6d, 0x83, 0x24, 0x19, 0x61, 0x5c, 0x94, 0x67, 0xb8, 0xf5, 0xe8, 0x6b, 0x8d, 0x71, 0xed, 0x3b, 0xfd, 0x92, 0x80, 0x48, 0x4a, 0xb9, 0x58, 0x82, 0x7e, 0xcf, 0x4c, 0xfa, 0xf7, 0x3d, 0xc0, 0xd3, 0xbc, 0xfd, 0x00, 0xb7, 0xa5, 0xd1, 0x29, 0xbf, 0xd1, 0x70, 0x1c, 0xda, 0xf0, 0x19, 0xfa, 0x52, 0x3a, 0xd1, 0x53, 0xfa, 0x0b, 0xaf, 0x17, 0x09, 0x5d, 0x6e, 0xad, 0xb4, 0x69, 0xfa, 0xaa, 0xf0, 0x0d, 0xc7, 0x55, 0xd7, 0xb7, 0xb9, 0x33, 0x41, 0xcf, 0x3e, 0x47, 0x91, 0x05, 0x90, 0x8d, 0x6b, 0x2f, 0x06, 0xea, 0x6a, 0xfd, 0xb2, 0x86, 0x31, 0x28, 0x13, 0x10, 0xa8, 0xcd, 0xe4, 0x65, 0xb1, 0xd3, 0xc6, 0x8f, 0x3e, 0xbe, 0xd9, 0x32, 0xfa, 0x14, 0xa1, 0x53, 0xfc, 0x86, 0x63, 0x42, 0xf7, 0x29, 0x7c, 0x59, 0xe0, 0x19, 0x9a, 0xc1, 0x6b, 0x83, 0xc9, 0x23, 0x6c, 0xc7, 0xb5, 0x44, 0xaa, 0xe8, 0x42, 0xcf, 0x9d, 0x0a, 0x6e, 0x45, 0x2a, 0xbc, 0xd3, 0x84, 0xad, 0x21, 0x57, 0x70, 0xc6, 0xe3, 0x7b, 0x87, 0x32, 0xe4, 0x8a, 0x48, 0x2f, 0x95, 0x31, 0x2c, 0x89, 0x1a, 0x30, 0xf1, 0x3f, 0x79, 0x55, 0xd8, 0xda, 0x33, 0x6f, 0xa8, 0x85, 0x16, 0xcb, 0x99, 0x17, 0x3d, 0xbc, 0x32, 0xcc, 0xf5, 0xdb, 0x62, 0x69, 0xba, 0x73, 0xd6, 0xe0, 0xef, 0x83, 0x09, 0x26, 0xba, 0x6e, 0xbe, 0x72, 0xce, 0x28, 0xc1, 0xd5, 0x88, 0xf9, 0xd9, 0x4f, 0x1c, 0x36, 0x94, 0xc7, 0xac, 0x4b, 0x06, 0x79, 0x1c, 0xe9, 0x2b, 0x62, 0xb2, 0xd9, 0xa7, 0x58, 0x49, 0xb3, 0x69, 0x37, 0x89, 0x38, 0xeb, 0xbb, 0x6f, 0x91, 0x79, 0xd3, 0x6e, 0x76, 0x71, 0x0e, 0xdb, 0xbc, 0xc5, 0x04, 0x6d, 0xae, 0xae, 0xa1, 0x06, 0x91, 0xcf, 0x40, 0x01, 0x2d, 0xe7, 0x1a, 0x01, 0x96, 0x8e, 0xcb, 0x5e, 0x4d, 0xb2, 0xe1, 0x23, 0xe8, 0x43, 0x93, 0x32, 0xb5, 0x99, 0x55, 0x39, 0x75, 0xce, 0x0f, 0x13, 0x88, 0x0c, 0x46, 0x87, 0x7a, 0x46, 0x0e, 0x5f, 0xed, 0x6b, 0xe3, 0x23, 0x76, 0x5b, 0xa1, 0xee, 0x89, 0xf7, 0x74, 0x77, 0x64, 0x76, 0x01, 0xd7, 0x0e, 0x48, 0x73, 0xd4, 0xb5, 0x83, 0x9c, 0x7f, 0xf2, 0x7a, 0x3a, 0xdb, 0x66, 0xde, 0x45, 0xb4, 0x21, 0xa1, 0xd9, 0x81, 0x91, 0x79, 0xb0, 0x34, 0x00, 0x0e, 0x10, 0x2f, 0x4c, 0x9f, 0x7a, 0x6f, 0xf5, 0x97, 0xaa, 0x2d, 0x13, 0xf2, 0xe9, 0x87, 0x90, 0x14, 0x24, 0x3c, 0x0c, 0xca, 0xcb, 0x24, 0x62, 0xa5, 0xd0, 0x92, 0xeb, 0x89, 0x37, 0x78, 0x6d, 0x21, 0x16, 0x14, 0x6d, 0x67, 0xdc, 0x2f, 0x63, 0x50, 0x1b, 0xb4, 0x78, 0x9e, 0x74, 0xa5, 0x3b, 0xea, 0x21, 0x0c, 0xda, 0x8a, 0x25, 0x08, 0x68, 0x46, 0xed, 0xad, 0x3b, 0x73, 0x39, 0xc3, 0xef, 0x3e, 0x00, 0x83, 0xc0, 0x83, 0x6c, 0xa4, 0x32, 0x69, 0xeb, 0x02, 0x35, 0xb5, 0x24, 0x29, 0x75, 0x3e, 0x2b, 0x80, 0x7c, 0xe9, 0x34, 0xff, 0x86, 0x26, 0x5c, 0x14, 0x94, 0x33, 0x41, 0xd3, 0x6f, 0x8e, 0x65, 0x63, 0xd9, 0xab, 0x6c, 0xca, 0xe9, 0xef, 0xd5, 0x11, 0x9f, 0x42, 0x66, 0x02, 0x8d, 0x89, 0xa9, 0xb8, 0xb6, 0x33, 0xb2, 0x5c, 0x75, 0x62, 0x14, 0xd8, 0x4c, 0x8c, 0xce, 0x61, 0x9e, 0x21, 0x20, 0x3d, 0x34, 0x60, 0xa1, 0x48, 0x5f, 0x68, 0x34, 0xd9, 0x42, 0xce, 0x27, 0x17, 0xf4, 0x97, 0xce, 0x8b, 0x4e, 0x94, 0x84, 0x64, 0xe6, 0x6a, 0x2e, 0x8b, 0x57, 0x31, 0x86, 0x83, 0xed, 0xa9, 0x68, 0x24, 0xb1, 0x86, 0xcd, 0xe7, 0xb3, 0x16, 0x7e, 0x46, 0x8a, 0x45, 0xb3, 0xed, 0xee, 0xf0, 0xde, 0x04, 0xa1, 0x29, 0x83, 0x0b, 0x6d, 0x07, 0x2d, 0xbd, 0x66, 0x9c, 0xa5, 0x08, 0x53, 0x69, 0x29, 0xba, 0xa1, 0x51, 0x93, 0x7a, 0x91, 0x03, 0xbb, 0x7c, 0xbf, 0x3f, 0x28, 0x2f, 0x39, 0xac, 0x52, 0x7f, 0x2f, 0x63, 0x95, 0xbf, 0xe4, 0xc7, 0x64, 0x6f, 0x96, 0x86, 0x03, 0x08, 0x70, 0x12, 0x13, 0x20, 0x55, 0x69, 0x59, 0x2a, 0x3b, 0x27, 0xcd, 0xa3, 0x1e, 0x8d, 0x8a, 0xc0, 0xa0, 0x56, 0x74, 0xf7, 0xb5, 0x3b, 0x89, 0x7c, 0x2b, 0x83, 0x9a, 0x0a, 0x89, 0x80, 0xa8, 0x5d, 0x3c, 0x89, 0xe9, 0xaa, 0xde, 0x2e, 0x20, 0xa2, 0xd2, 0xa0, 0xf5, 0x69, 0x85, 0xc0, 0xd8, 0xab, 0x9c, 0x1e, 0xe5, 0x9f, 0x46, 0x49, 0x1c, 0x00, 0x43, 0xf4, 0x92, 0x0c, 0xf3, 0xf1, 0x19, 0x24, 0x79, 0xd1, 0xe6, 0x19, 0xec, 0x41, 0x4b, 0x39, 0xfc, 0x9d, 0xe5, 0x49, 0x6a, 0xa5, 0x35, 0x1b, 0x40, 0x3f, 0x39, 0x50, 0x8e, 0x05, 0xe3, 0x26, 0x3d, 0x83, 0x39, 0xf5, 0xc1, 0x1d, 0x8e, 0x76, 0xb8, 0xd6, 0x27, 0x75, 0xa4, 0x03, 0xec, 0x42, 0x8b, 0x0e, 0xf2, 0x47, 0x0b, 0x2e, 0xf0, 0x3b, 0xdc, 0x66, 0xcd, 0xfd, 0x58, 0xa3, 0x2f, 0x6b, 0xd9, 0xca, 0x43, 0x84, 0x52, 0xd1, 0x87, 0x69, 0xe3, 0xd1, 0x3f, 0x45, 0x5b, 0x65, 0x3b, 0xe6, 0x33, 0x25, 0xdf, 0xc1, 0x02, 0x13, 0x7d, 0x4b, 0x0f, 0x50, 0x38, 0x85, 0xb5, 0xf4, 0x61, 0xed, 0x84, 0xd2, 0x8f, 0x5e, 0x62, 0x66, 0x54, 0xcb, 0xfc, 0x03, 0xba, 0x05, 0x4e, 0x95, 0xad, 0xf0, 0x18, 0xd6, 0x43, 0x41, 0xff, 0x75, 0x6c, 0x14, 0xc0, 0x1c, 0x22, 0x36, 0x6e, 0x50, 0x2b, 0xe9, 0xed, 0xc7, 0x1b, 0x46, 0x70, 0x89, 0x2f, 0x34, 0x88, 0x86, 0x69, 0xac, 0xe0, 0xa0, 0xc5, 0x7a, 0x79, 0x12, 0x2f, 0xf5, 0xd1, 0x22, 0x2e, 0x1c, 0x82, 0xd7, 0x15, 0x9d, 0x6d, 0x3b, 0xcd, 0x50, 0x77, 0x14, 0xba, 0x2f, 0xe1, 0xae, 0x84, 0x6a, 0x3d, 0xaf, 0x08, 0x62, 0xdc, 0x3c, 0x72, 0x85, 0x4d, 0x8b, 0xe0, 0xad, 0xc4, 0x87, 0xf6, 0xc6, 0xee, 0xe0, 0x3a, 0xc9, 0x4a, 0xb9, 0x72, 0x57, 0xd8, 0x87, 0xc3, 0x59, 0x7c, 0xdc, 0x57, 0x12, 0x6d, 0x84, 0x8e, 0xfb, 0x19, 0xe9, 0x01, 0xef, 0x99, 0x92, 0x61, 0x1e, 0xce, 0x42, 0xfd, 0x01, 0xc2, 0x89, 0x15, 0xd8, 0xd0, 0x83, 0xa7, 0x43, 0x2c, 0x3b, 0x3d, 0x94, 0x26, 0x15, 0xf4, 0x46, 0x48, 0xa2, 0x56, 0x90, 0x19, 0x96, 0xb4, 0x09, 0xf3, 0x76, 0xb5, 0x99, 0xe4, 0x08, 0x59, 0xb2, 0x6c, 0x90, 0xb6, 0xe9, 0xc7, 0x6e, 0x2d, 0xfb, 0x5b, 0x02, 0x21, 0xd5, 0x3d }; #endif /* TEST_INTEGRATION_LARGEBIN_H_ */ tpm2-pkcs11-1.7.0/test/integration/p11-tool-fapi.sh.fapi0000775000175000017500000001406214114240163017473 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi #WARNING: If your system hangs on this test, then the reason is typically that #you are running clang on a fedora-30 or similar system that has a buggy combination #of p11-tool p11-kit and libasan (clang). Consider using gcc or exporting #ASAN_ENABLED=false if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04 with clang is dysfunctional even without asan" ASAN_ENABLED=false #Even without ASAN the dlopen does not work on p11-tool/p11-kit at this moment fi set -x source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi function setup_spy() { export PKCS11SPY="$modpath" export PKCS11SPY_OUTPUT=${0}_pkcs11spy.log modpath=${PKCS11SPY_LIB:-/usr/lib/x86_64-linux-gnu/pkcs11-spy.so} } if [ "${USE_PKCS11SPY:-no}" != "no" ]; then setup_spy fi echo "modpath=$modpath" function p11_tool() { p11tool -d 9999 $@ } export HOME=${tempdir} mkdir -p $HOME/.config/pkcs11/modules echo "module: $modpath" >$HOME/.config/pkcs11/modules/tpm2-pkcs11.module export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Test p11-kit for modules" p11-kit list-modules || true echo "Done" echo "Should have uninitialized token" p11tool --list-tokens if ! p11_tool --list-tokens | grep -q "Model: SW TPM"; then echo "p11tool did not find this token." echo "If you are running a recent version of p11tool then you need to configure the module system-wide:" echo "echo \"module: $T/src/.libs/libtpm2_pkcs11.so\" >/etc/pkcs11/modules/tpm2_pkcs11.module" if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04 with clang is dysfunctional even without asan" exit 77 #TEST SKIP else exit 99 #TEST ERROR fi fi echo "Found uninitialized token" echo "Getting token url" p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "SW%20%20%20TPM") echo "Got token url: ${TOKENURL}" echo "Testing mech and random function" p11_tool --list-mechanisms ${TOKENURL} test "$(p11tool -d 0 --generate-random=4096 ${TOKENURL} \ | wc -c)" == "4096" echo "Random function works" echo "Testing p11tool version >= 3.5.0" #Older version of p11tool segfault during --initialize if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -lt "3" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -eq "3" ]; then if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 2)" -lt "5" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi fi echo "p11tool version >= 3.5.0" echo "Initializing token" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken ${TOKENURL} p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "mynewtoken") echo "Token initialized" echo "Initializing user pin" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL} echo "Userpin initialized" echo "Initializing token2" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken2 $(p11_tool --list-token-urls | grep "SW%20%20%20TPM" | tail -n 1) TOKENURL2=$(p11_tool --list-token-urls | grep "mynewtoken2") echo "Token2 initialized" echo "Initializing user pin2" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL2} echo "Userpin2 initialized" echo "Generating RSA key pair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="myrsakey" --outfile="${tempdir}/pubkey.pem" ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} echo "RSA Key pair generated" echo "Generating RSA keypair2" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="my2rsakey" --outfile="${tempdir}/pubkey2.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "RSA Keypair2 generated" echo "Generating EC keypair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-ecc --curve secp384r1 --login --label="myecckey" --outfile="${tempdir}/eccpubkey.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "EC Keypair generated" echo "Change the key pair label" GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey2" "${TOKENURL};object=myrsakey;object-type=private" GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey" "${TOKENURL};object=myrsakey2;object-type=private" echo "RSA Key pair generated" echo "Testing signing via openssl" osslconf="$tempdir/ossl.cnf" cat << EOF > "$osslconf" openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = $modpath init = 0 EOF export OPENSSL_CONF="$osslconf" openssl dgst -engine pkcs11 -keyform engine \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TOKENURL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl pkeyutl -sign -engine pkcs11 -keyform engine \ -inkey ${TOKENURL} -passin pass:mynewuserpin \ -in ${tempdir}/data -out ${tempdir}/sig echo "RSA Signing tested" echo "Test ECC Signing" ECC_KEY_URL="${TOKENURL2};object=myecckey;type=private" openssl dgst -engine pkcs11 -keyform engine -sha1 -sign "$ECC_KEY_URL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data echo "ECC Signing tested" exit 0 tpm2-pkcs11-1.7.0/test/integration/fixtures/0000755000175000017500000000000014114240163015651 500000000000000tpm2-pkcs11-1.7.0/test/integration/fixtures/xpextensions0000644000175000017500000000130413754763565020312 00000000000000# # File containing the OIDs required for Windows. # # http://support.microsoft.com/kb/814394/en-us # [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 crlDistributionPoints = URI:http://www.example.com/example_ca.crl [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 crlDistributionPoints = URI:http://www.example.com/example_ca.crl # # Add this to the PKCS#7 keybag attributes holding the client's private key # for machine authentication. # # the presence of this OID tells Windows XP that the cert is intended # for use by the computer itself, and not by an end-user. # # The other solution is to use Microsoft's web certificate server # to generate these certs. # # 1.3.6.1.4.1.311.17.2 tpm2-pkcs11-1.7.0/test/integration/fixtures/tss2engine.cnf0000644000175000017500000000025013754763565020370 00000000000000openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] tpm2tss = tpm2tss_section [tpm2tss_section] SET_TCTI = ${ENV::TPM2_PKCS11_TCTI} tpm2-pkcs11-1.7.0/test/integration/fixtures/ossl.cnf0000644000175000017500000000050413754763565017271 00000000000000openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = ${ENV::TPM2_PKCS11_MODULE} PIN=myuserpin init = 0 [ req ] distinguished_name = req_dn string_mask = utf8only utf8 = yes [ req_dn ] commonName = Mr Test Harness tpm2-pkcs11-1.7.0/test/integration/fixtures/hmac.hex.key0000664000175000017500000000004014114240163017772 000000000000000336aa7945a3cadec3cbdc6e79043b5btpm2-pkcs11-1.7.0/test/integration/fixtures/smimeextensions0000644000175000017500000000035313754763565021000 00000000000000[smime] basicConstraints = critical,CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectKeyIdentifier = hash authorityKeyIdentifier = keyid,issuer subjectAltName = email:move extendedKeyUsage = emailProtection tpm2-pkcs11-1.7.0/test/integration/fixtures/client.cnf0000644000175000017500000000214413754763565017571 00000000000000[ ca ] default_ca = CA_default [ CA_default ] fixtures = $ENV::TEST_FIXTURES dir = $ENV::CA_DIR certs = $dir crl_dir = $dir/crl database = $dir/index.txt new_certs_dir = $dir certificate = $dir/ca.pem serial = $dir/serial crl = $dir/crl.pem private_key = $dir/ca.key name_opt = ca_default cert_opt = ca_default default_days = 60 default_crl_days = 30 default_md = sha256 preserve = no policy = policy_match [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional [ req ] prompt = no distinguished_name = client default_bits = 2048 input_password = whatever output_password = whatever [client] countryName = US stateOrProvinceName = Radius localityName = Somewhere organizationName = Example Inc. emailAddress = user@example.org commonName = user@example.org tpm2-pkcs11-1.7.0/test/integration/PKCS11JavaTests.java0000664000175000017500000001106414114240163017316 00000000000000import java.io.ByteArrayInputStream; import java.io.InputStream; /* Introspection to support Java < 9 */ import java.lang.reflect.Constructor; import java.lang.reflect.Method; import java.nio.file.Path; import java.nio.file.Paths; import java.security.Key; import java.security.KeyStore; import java.security.PrivateKey; import java.security.Provider; import java.security.PublicKey; import java.security.Security; import java.security.Signature; import java.security.cert.X509Certificate; import javax.crypto.Cipher; import org.junit.Assert; import org.junit.BeforeClass; import org.junit.Test; import org.junit.runner.JUnitCore; import org.junit.runner.Result; import org.junit.runner.notification.Failure; public class PKCS11JavaTests { static final String PIN = "myuserpin"; static final String KEY_ALIAS = "rsa1"; static KeyStore KEY_STORE; static Provider PROV; @BeforeClass public static void beforeAllTestMethods() throws Exception { /* * Generate a new provider to use the SUNPKCS11 module * */ String cwd = System.getProperty("user.dir"); Path libPath = Paths.get(cwd, "src/.libs/libtpm2_pkcs11.so.0.0.0"); String version = System.getProperty("java.version"); /* Parse for example "11.0.11" or "17-ea" */ String [] chunks = version.split("[\\.-]"); int major = Integer.parseInt(chunks[0]); if (major >= 9) { /* Java >= 9 */ Method configure = Provider.class.getMethod("configure", String.class); String pkcs11Config = "--name = TPM2\nlibrary = " + libPath; PROV = Security.getProvider("SunPKCS11"); PROV = (Provider) configure.invoke(PROV, pkcs11Config); } else { /* Java <= 8 */ Constructor SunPKCS11 = Class.forName("sun.security.pkcs11.SunPKCS11").getConstructor(InputStream.class); String pkcs11Config = "name = TPM2\nlibrary = " + libPath; ByteArrayInputStream confStream = new ByteArrayInputStream(pkcs11Config.getBytes()); PROV = (Provider) SunPKCS11.newInstance(confStream); } /* add the provider */ Security.addProvider(PROV); /* Generate a keystore from the provider */ KEY_STORE = KeyStore.getInstance("PKCS11-TPM2"); KeyStore.PasswordProtection pp = new KeyStore.PasswordProtection(PIN.toCharArray()); KEY_STORE.load(null, pp.getPassword()); } @Test public void test_rsa_crypto() throws Exception { /* Get the key/cert pair */ Key rsaKey = KEY_STORE.getKey(KEY_ALIAS, null); Assert.assertEquals("RSA", rsaKey.getAlgorithm()); X509Certificate certificate = (X509Certificate) KEY_STORE.getCertificate(KEY_ALIAS); /* get the public key from the cert */ Key rsaPublicKey = certificate.getPublicKey(); /* Encrypt public decrypt private */ Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding", PROV); String plaintext = "mysecretdata"; byte[] plainData = plaintext.getBytes("UTF-8"); cipher.init(Cipher.ENCRYPT_MODE, rsaPublicKey); byte[] encryptedData = cipher.doFinal(plainData); cipher.init(Cipher.DECRYPT_MODE, rsaKey); int output = cipher.getOutputSize(encryptedData.length); byte[] decryptedData = cipher.doFinal(encryptedData); Assert.assertArrayEquals(plainData, decryptedData); /* Encrypt private decrypt public */ cipher.init(Cipher.ENCRYPT_MODE, rsaKey); encryptedData = cipher.doFinal(plainData); cipher.init(Cipher.DECRYPT_MODE, rsaPublicKey); output = cipher.getOutputSize(encryptedData.length); decryptedData = cipher.doFinal(encryptedData); } @Test public void test_signverify_signature() throws Exception { /* Get the key/cert pair */ Key rsaKey = KEY_STORE.getKey(KEY_ALIAS, null); Assert.assertEquals("RSA", rsaKey.getAlgorithm()); X509Certificate certificate = (X509Certificate) KEY_STORE.getCertificate(KEY_ALIAS); /* get the public key from the cert */ Key rsaPublicKey = certificate.getPublicKey(); /* Sign private Verify public */ Signature signature = Signature.getInstance("SHA256withRSA", PROV); String plaintext = "mysecretdata"; byte[] plainData = plaintext.getBytes("UTF-8"); signature.initSign((PrivateKey) rsaKey); signature.update(plainData); byte[] signedData = signature.sign(); signature.initVerify((PublicKey) rsaPublicKey); signature.update(plainData); boolean retSignature = signature.verify(signedData); Assert.assertTrue(retSignature); } public static void main(String[] args) { int rc = 1; Result result = JUnitCore.runClasses(PKCS11JavaTests.class); if (result.wasSuccessful()) { rc = 0; System.out.println("Success"); } else { System.out.println("Failed"); } for (Failure failure : result.getFailures()) { System.out.println(failure.toString()); } System.exit(rc); } } tpm2-pkcs11-1.7.0/test/integration/pkcs-lockout.int.c0000664000175000017500000001445414114236775017323 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "tpm.h" #include "test.h" /* we need to manage lockout counter for testing bad auths */ #include #include #include typedef struct test_session_handle test_session_handle; struct test_session_handle { CK_SESSION_HANDLE handle; /* the session handle */ bool is_rw; /* true if the session is R/W false if R/O */ }; /* * The maximum number of sessions any test expects to use * Note: The test_setup() routine only populates 2 session * handles as most tests ONLY need 2. The one test that * needs more than 2 is test_user_login_logout_time_two(), * and it manages the sessions itself. */ #define MAX_TEST_SESSIONS 3 #define C(x) ((CK_UTF8CHAR_PTR)x) typedef struct test_slot test_slot; struct test_slot { CK_SLOT_ID slot_id; /* slot id */ test_session_handle sessions[MAX_TEST_SESSIONS]; /* session on that slot */ }; struct test_info { test_slot slots[2]; /* slots with sessions for use */ }; ESYS_CONTEXT *_g_ectx = NULL; TSS2_TCTI_CONTEXT *_g_tcti = NULL; //TPM2_PT_MAX_AUTH_FAIL static void get_prop(TPM2_PT needle, UINT32 *value) { TPMS_CAPABILITY_DATA *cap_data = NULL; TPMI_YES_NO more_data = TPM2_NO; TSS2_RC rc = Esys_GetCapability(_g_ectx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, TPM2_CAP_TPM_PROPERTIES, TPM2_PT_VAR, TPM2_MAX_TPM_PROPERTIES, &more_data, &cap_data); assert_int_equal(rc, TSS2_RC_SUCCESS); UINT32 count = cap_data->data.tpmProperties.count; TPMS_TAGGED_PROPERTY *props = cap_data->data.tpmProperties.tpmProperty; UINT32 i; for(i=0; i < count; i++) { TPM2_PT p = props[i].property; UINT32 v =props[i].value; if (p == needle) { *value = v; Esys_Free(cap_data); return; } } Esys_Free(cap_data); fail_msg("No property: %" PRIu32, needle); } static int _group_setup_locking(void **state) { const char *config = getenv(TPM2_PKCS11_TCTI); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &_g_tcti); assert_int_equal(rc, TSS2_RC_SUCCESS); rc = Esys_Initialize(&_g_ectx, _g_tcti, NULL); assert_int_equal(rc, TSS2_RC_SUCCESS); return group_setup_locking(state); } static int _group_teardown(void **state) { Esys_Finalize(&_g_ectx); Tss2_TctiLdr_Finalize(&_g_tcti); free(_g_tcti); return group_teardown(state); } /** * Opens a session on a slot * @param slot * The slot id to open the session on * @param is_rw * True if it should open the session as R/W via CKF_RW_SESSION, else it's just R/O. * @param tsh * The test_session_handle to populate */ static void open_session(CK_SLOT_ID slot, bool is_rw, test_session_handle *tsh) { CK_FLAGS flags = CKF_SERIAL_SESSION; if (is_rw) { flags |= CKF_RW_SESSION; } CK_RV rv = C_OpenSession(slot, CKF_SERIAL_SESSION | flags, NULL, NULL, &tsh->handle); assert_int_equal(rv, CKR_OK); tsh->is_rw = is_rw; } /** * Creates and populates a test_info structure but * DOES NOT open ANY sessions. * @return * test_info *, asserts on ENOMEM. */ static test_info *_test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slots[0].slot_id = slots[0]; ti->slots[1].slot_id = slots[1]; return ti; } /** * Creates a new test_info structure populating: * slot[0]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * - session[1] --> a valid session * slot[1]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * * @param is_rw * True if the sessions should be R/W false for R/O * @return * test_info on success. */ static test_info *test_info_new(bool is_rw) { test_info *ti = _test_info_new(); CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh = &ti->slots[0].sessions[0]; /* open two RO sessions on slot 0, and one on slot 1 */ open_session(slot_id, is_rw, tsh); tsh = &ti->slots[0].sessions[1]; open_session(slot_id, is_rw, tsh); slot_id = ti->slots[1].slot_id; tsh = &ti->slots[1].sessions[0]; open_session(slot_id, is_rw, tsh); return ti; } /** * Sets up a test run with read-only sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_ro(void **state) { *state = test_info_new(false); return 0; } /** * Closes all sessions for slots and frees the test_info * structure. * @param state * Expects *state to be a valid test_info pointer. * @return */ static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); unsigned i; for (i=0; i < ARRAY_LEN(ti->slots); i++) { CK_SLOT_ID slot_id = ti->slots[i].slot_id; CK_RV rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } free(ti); return 0; } static void test_user_lockout(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; /* tpm's are generally configured for 3 attempts you can check * tpm2_getcap properties-variable * - TPM2_PT_MAX_AUTH_FAIL: 0x3 */ UINT32 max_fail = 0; get_prop(TPM2_PT_MAX_AUTH_FAIL, &max_fail); UINT32 count = 0; get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, 0); UINT32 i; for(i=0; i < max_fail; i++) { login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, C(BAD_USERPIN), sizeof(BAD_USERPIN) - 1); get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, i + 1); } get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, max_fail); login_expects(handle, CKU_USER, CKR_PIN_LOCKED, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_user_lockout, test_setup_ro, test_teardown), }; return cmocka_run_group_tests(tests, _group_setup_locking, _group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs11-tool-init.sh.nosetup0000775000175000017500000000634214114240163021000 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -x if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Should have uninitialized token" pkcs11_tool -T | grep -q uninitialized echo "Found uninitialized token" pkcs11_tool -I pkcs11_tool -T echo "Initializing token" pkcs11_tool --slot-index=0 --init-token --label=mynewtoken --so-pin=mynewsopin echo "Token initialized" pkcs11_tool -T echo "Initializing user pin" pkcs11_tool --slot-index=0 --login --login-type="so" --init-pin --so-pin=mynewsopin --pin=mynewuserpin echo "Userpin initialized" echo "Generating RSA key pair" pkcs11_tool --slot-index=0 --label="myrsakey" --login --pin=mynewuserpin --keypairgen echo "RSA Key pair generated" echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin mynewuserpin pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin mynewuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --slot-index=0 --label="myrsakey" \ --type pubkey --output-file ${tempdir}/pubkey.der \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify ${tempdir}/pubkey.der -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" echo "Change PIN test" pkcs11_tool --change-pin --slot-index=0 --pin=mynewuserpin --login --new-pin=temppin pkcs11_tool --change-pin --slot-index=0 --pin=temppin --login --new-pin=mynewuserpin echo "PIN change tested" # # Regression test for https://github.com/tpm2-software/tpm2-pkcs11/issues/399 # Delete Private Key then Public Key. pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=privkey pkcs11_tool --list-objects --slot-index=0 pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=pubkey pkcs11_tool --list-objects --slot-index=0 # # Test creating data objects # echo "hello world" > objdata pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --write-object objdata --type data --label dataobj1 --private # whitebox test to make sure secret is not in store if [ "$TPM2_PKCS11_BACKEND" != "fapi" ]; then sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(cat objdata)" # and check for the hex encoded version too sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(xxd -p objdata)" fi pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --read-object --type data --label dataobj1 -o objdata2 cmp objdata objdata2 exit 0 tpm2-pkcs11-1.7.0/test/integration/pkcs-get-mechanism.int.c0000664000175000017500000001735514114236775020367 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" /* * C_GetMechanismList is used to obtain a list of mechanism types supported by a token. * SlotID is the ID of the token’s slot; pulCount points to the location that receives the number of mechanisms. * There are two ways for an application to call C_GetMechanismList: * 1. If pMechanismList is NULL_PTR, then all that C_GetMechanismList does is return (in *pulCount) the number of mechanisms, * without actually returning a list of mechanisms. The contents of *pulCount on entry to C_GetMechanismList has no meaning * in this case, and the call returns the value CKR_OK. * 2. If pMechanismList is not NULL_PTR, then *pulCount MUST contain the size (in terms of CK_MECHANISM_TYPE elements) of the * buffer pointed to by pMechanismList. If that buffer is large enough to hold the list of mechanisms, then the list is returned in it, * and CKR_OK is returned. If not, then the call to C_GetMechanismList returns the value CKR_BUFFER_TOO_SMALL. * In either case, the value *pulCount is set to hold the number of mechanisms. * Because C_GetMechanismList does not allocate any space of its own, an application will often call C_GetMechanismList twice. * However, this behavior is by no means required. */ struct test_info { CK_SLOT_ID slot; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[32]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); /* assign to state */ info->slot = slots[0]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); free(ti); return 0; } void test_get_mechanism_list_good(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_ULONG mech_cnt; CK_MECHANISM_TYPE mechs[256]; // Only return the number of mechanisms CK_RV rv = C_GetMechanismList(slot_id, NULL, &mech_cnt); assert_int_equal(rv, CKR_OK); assert_in_range(mech_cnt, 1, ARRAY_LEN(mechs)); // Return List of mechanisms rv = C_GetMechanismList(slot_id, mechs, &mech_cnt); assert_int_equal(rv, CKR_OK); } void test_get_mechanism_list_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_ULONG mech_cnt; // Invalid Slot CK_RV rv = C_GetMechanismList((CK_ULONG)-10, NULL, &mech_cnt); assert_int_equal(rv, CKR_SLOT_ID_INVALID); rv = C_GetMechanismList(slot_id, NULL, NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); CK_MECHANISM_TYPE mechs[1]; rv = C_GetMechanismList(slot_id, NULL, &mech_cnt); assert_int_equal(rv, CKR_OK); assert_int_not_equal(mech_cnt, ARRAY_LEN(mechs)); CK_ULONG value = 0; rv = C_GetMechanismList(slot_id, mechs, &value); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); // Low count but buffer present value = ARRAY_LEN(mechs); rv = C_GetMechanismList(slot_id, mechs, &value); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); } /** * C_GetMechanismInfo obtains information about a particular mechanism possibly supported by a token. * slotID is the ID of the token’s slot; type is the type of mechanism; pInfo points to the location that receives the mechanism * information. */ void test_get_mechanism_info_good(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_MECHANISM_INFO mech_info; CK_RV rv = C_GetMechanismInfo(slot_id, CKM_AES_KEY_GEN, &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMaxKeySize, 256/8); assert_int_equal(mech_info.ulMinKeySize, 128/8); assert_int_equal(mech_info.flags, CKF_GENERATE|CKF_HW); /* Test all other mechanisms */ CK_ULONG aes_mechs[] = { CKM_AES_CBC, CKM_AES_CFB128, CKM_AES_ECB, CKM_AES_CBC_PAD, CKM_AES_CTR, }; for (size_t i = 0; i < ARRAY_LEN(aes_mechs); i++) { rv = C_GetMechanismInfo(slot_id, aes_mechs[i], &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 128/8); assert_int_equal(mech_info.ulMaxKeySize, 256/8); assert_int_equal(mech_info.flags, CKF_ENCRYPT|CKF_DECRYPT|CKF_HW); } struct { CK_ULONG mech; CK_FLAGS flags; } rsa_mechs[] = { { CKM_RSA_PKCS_KEY_PAIR_GEN, CKF_HW | CKF_GENERATE_KEY_PAIR }, { CKM_RSA_PKCS, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT | CKF_SIGN | CKF_VERIFY }, { CKM_RSA_X_509, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT | CKF_SIGN | CKF_VERIFY }, { CKM_RSA_PKCS_OAEP, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT }, { CKM_SHA1_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_SHA256_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_SHA384_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, }; for (size_t i = 0; i < ARRAY_LEN(rsa_mechs); i++) { rv = C_GetMechanismInfo(slot_id, rsa_mechs[i].mech, &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 1024); assert_in_range(mech_info.ulMaxKeySize, 2048, 3072); assert_int_equal(mech_info.flags, rsa_mechs[i].flags); } struct { CK_ULONG mech; CK_FLAGS flags; } ecc_mechs[] = { { CKM_EC_KEY_PAIR_GEN, CKF_HW | CKF_GENERATE_KEY_PAIR }, { CKM_ECDSA, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_ECDSA_SHA1, CKF_HW | CKF_SIGN | CKF_VERIFY }, }; for (size_t i = 0; i < ARRAY_LEN(ecc_mechs); i++) { rv = C_GetMechanismInfo(slot_id, ecc_mechs[i].mech, &mech_info); assert_int_equal(rv, CKR_OK); assert_in_range(mech_info.ulMinKeySize, 192, 256); assert_in_range(mech_info.ulMaxKeySize, 384, 638); assert_int_equal(mech_info.flags, ecc_mechs[i].flags); } CK_ULONG hash_mechs[] = { CKM_SHA_1, CKM_SHA256, }; for (size_t i = 0; i < ARRAY_LEN(hash_mechs); i++) { rv = C_GetMechanismInfo(slot_id, hash_mechs[i], &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 0); assert_int_equal(mech_info.ulMaxKeySize, 0); assert_int_equal(mech_info.flags, CKF_DIGEST); } } void test_get_mechanism_info_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_MECHANISM_INFO mech_info; // Invalid mechanism CK_RV rv = C_GetMechanismInfo(slot_id, (CK_ULONG)-10, &mech_info); assert_int_equal(rv, CKR_MECHANISM_INVALID); // NULL Arguments rv = C_GetMechanismInfo(slot_id, CKM_AES_KEY_GEN, NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // Invalid slot ID rv = C_GetMechanismInfo((CK_ULONG)-10, CKM_AES_KEY_GEN, &mech_info); assert_int_equal(rv, CKR_SLOT_ID_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_get_mechanism_list_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_list_bad, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_info_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_info_bad, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs11-dbup.sh.nosetup0000775000175000017500000000510614114240163020011 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -eo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR # # Before we setup and possibly LD_PRELOAD the asan library, # we need to download and build v1.0 and test HEAD (current build) # against it in the tempdir. # pushd "$tempdir" oldver=1.0.3 if ! wget "$PACKAGE_URL/releases/download/$oldver/tpm2-pkcs11-$oldver.tar.gz"; then echo "Could not download old version tpm2-pkcs11-$oldver.tar.gz" exit 77 fi if ! sha256sum "tpm2-pkcs11-$oldver.tar.gz" | grep -q ^6542049c0cc217b4372da52ea207fcb22e15afb2e76b9dc2f3d126b3147780c7; then echo "Integrity check of tpm2-pkcs11-$oldver.tar.gz failed" exit 99 fi tar xzf "tpm2-pkcs11-$oldver.tar.gz" pushd "tpm2-pkcs11-$oldver" ./configure --enable-debug --disable-hardening make -j$(nproc) popd popd echo "PWD: $(pwd)" # modpath will be to the HEAD version library if [ -z "$modpath" ]; then modpath="$(pwd)/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" setup_asan pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" # # Since OLD is on 1.0, it won't automagically populate a store. # So we need to use the 1.0 tpm2_ptool # XXX should we prepend the current? # PYTHONPATH=$tempdir/tpm2-pkcs11-$oldver/tools echo $PYTHONPATH tpm2_ptool init tpm2_ptool addtoken --pid=1 --sopin=mysopin --userpin=myuserpin --label=label # at this point we can verify the db schema version echo "Checking schema version as 1" v=$(sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select schema_version from schema;') echo "Got schema version as $v" test 1 -eq $v # do an upgrade echo "Generating RSA key pair" pkcs11_tool --slot=1 --label="myrsakey" --login --pin=myuserpin --keypairgen echo "RSA Key pair generated" echo "Checking schema version as > 1" v=$(sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select schema_version from schema;') echo "Got schema version as $v" test $v -ge 1 echo "testdata">${tempdir}/data echo "Using key to ensure it still wotks" pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin myuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS echo "Successfully used key post schema upgrade" exit 0 tpm2-pkcs11-1.7.0/test/integration/pkcs11-tool-init-fapi.sh.fapi0000775000175000017500000000634214114240163021137 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -x if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Should have uninitialized token" pkcs11_tool -T | grep -q uninitialized echo "Found uninitialized token" pkcs11_tool -I pkcs11_tool -T echo "Initializing token" pkcs11_tool --slot-index=0 --init-token --label=mynewtoken --so-pin=mynewsopin echo "Token initialized" pkcs11_tool -T echo "Initializing user pin" pkcs11_tool --slot-index=0 --login --login-type="so" --init-pin --so-pin=mynewsopin --pin=mynewuserpin echo "Userpin initialized" echo "Generating RSA key pair" pkcs11_tool --slot-index=0 --label="myrsakey" --login --pin=mynewuserpin --keypairgen echo "RSA Key pair generated" echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin mynewuserpin pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin mynewuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --slot-index=0 --label="myrsakey" \ --type pubkey --output-file ${tempdir}/pubkey.der \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify ${tempdir}/pubkey.der -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" echo "Change PIN test" pkcs11_tool --change-pin --slot-index=0 --pin=mynewuserpin --login --new-pin=temppin pkcs11_tool --change-pin --slot-index=0 --pin=temppin --login --new-pin=mynewuserpin echo "PIN change tested" # # Regression test for https://github.com/tpm2-software/tpm2-pkcs11/issues/399 # Delete Private Key then Public Key. pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=privkey pkcs11_tool --list-objects --slot-index=0 pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=pubkey pkcs11_tool --list-objects --slot-index=0 # # Test creating data objects # echo "hello world" > objdata pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --write-object objdata --type data --label dataobj1 --private # whitebox test to make sure secret is not in store if [ "$TPM2_PKCS11_BACKEND" != "fapi" ]; then sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(cat objdata)" # and check for the hex encoded version too sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(xxd -p objdata)" fi pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --read-object --type data --label dataobj1 -o objdata2 cmp objdata objdata2 exit 0 tpm2-pkcs11-1.7.0/test/integration/nss-tests.sh0000775000175000017500000000656614114240163016241 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -xo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi EXT_FILE="$TEST_FIXTURES/smimeextensions" CLIENT_CNF="$TEST_FIXTURES/client.cnf" source "$T/test/integration/scripts/helpers.sh" export NSS_DEFAULT_DB_TYPE=sql if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi function pinentry() { expect <session[0]); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->session[1]); assert_int_equal(rv, CKR_OK); ti->slot = slots[0]; user_login(ti->session[0]); CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; rv = C_FindObjectsInit(ti->session[0], tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); count = 1; rv = C_FindObjects(ti->session[0], &ti->key, count, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(ti->session[0]); assert_int_equal(rv, CKR_OK); return ti; } static int test_setup(void **state) { /* get the slots */ test_info *ti = test_info_new(); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_session_operation_state(void **state) { test_info *ti = test_info_from_state(state); CK_MECHANISM dmech = { .mechanism = CKM_SHA256, .pParameter = NULL, .ulParameterLen = 0 }; CK_MECHANISM smech = { .mechanism = CKM_SHA256_RSA_PKCS, .pParameter = NULL, .ulParameterLen = 0 }; CK_BYTE iv[16] = {0}; CK_MECHANISM emech = { .mechanism = CKM_AES_CBC, .pParameter = &iv, .ulParameterLen = sizeof(iv) }; CK_RV rv = C_DigestInit(ti->session[0], &dmech); assert_int_equal(rv, CKR_OK); rv = C_DigestInit(ti->session[0], &dmech); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_SignInit(ti->session[0], &smech, ti->key); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_SignInit(ti->session[1], &smech, ti->key); assert_int_equal(rv, CKR_OK); rv = C_DigestInit(ti->session[1], &dmech); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_EncryptInit(ti->session[1], &emech, ti->key); assert_int_equal(rv, CKR_OPERATION_ACTIVE); } static void test_session_exhastion(void **state) { UNUSED(state); CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); CK_SESSION_HANDLE session; while ((rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL_PTR, NULL_PTR, &session)) != CKR_SESSION_COUNT) { assert_int_equal(rv, CKR_OK); } rv = C_CloseAllSessions(slots[0]); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_session_operation_state, test_setup, test_teardown), /* this must go last to get C_Finalize from group_teardown called */ cmocka_unit_test(test_session_exhastion), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.7.0/test/integration/pkcs-login-logout.int.c0000664000175000017500000005563214114236775020265 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "tpm.h" #include "test.h" /* we need to manage lockout counter for testing bad auths */ #include #include #include typedef struct test_session_handle test_session_handle; struct test_session_handle { CK_SESSION_HANDLE handle; /* the session handle */ bool is_rw; /* true if the session is R/W false if R/O */ }; /* * The maximum number of sessions any test expects to use * Note: The test_setup() routine only populates 2 session * handles as most tests ONLY need 2. The one test that * needs more than 2 is test_user_login_logout_time_two(), * and it manages the sessions itself. */ #define MAX_TEST_SESSIONS 3 #define C(x) ((CK_UTF8CHAR_PTR)x) typedef struct test_slot test_slot; struct test_slot { CK_SLOT_ID slot_id; /* slot id */ test_session_handle sessions[MAX_TEST_SESSIONS]; /* session on that slot */ }; struct test_info { test_slot slots[2]; /* slots with sessions for use */ }; ESYS_CONTEXT *_g_ectx = NULL; TSS2_TCTI_CONTEXT *_g_tcti = NULL; static int _group_setup_locking(void **state) { const char *config = getenv(TPM2_PKCS11_TCTI); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &_g_tcti); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } rc = Esys_Initialize(&_g_ectx, _g_tcti, NULL); assert_int_equal(rc, TSS2_RC_SUCCESS); return group_setup_locking(state); } static int _group_teardown(void **state) { Esys_Finalize(&_g_ectx); Tss2_TctiLdr_Finalize(&_g_tcti); free(_g_tcti); return group_teardown(state); } /** * Opens a session on a slot * @param slot * The slot id to open the session on * @param is_rw * True if it should open the session as R/W via CKF_RW_SESSION, else it's just R/O. * @param tsh * The test_session_handle to populate */ static void open_session(CK_SLOT_ID slot, bool is_rw, test_session_handle *tsh) { CK_FLAGS flags = CKF_SERIAL_SESSION; if (is_rw) { flags |= CKF_RW_SESSION; } CK_RV rv = C_OpenSession(slot, CKF_SERIAL_SESSION | flags, NULL, NULL, &tsh->handle); assert_int_equal(rv, CKR_OK); tsh->is_rw = is_rw; } /** * Creates and populates a test_info structure but * DOES NOT open ANY sessions. * @return * test_info *, asserts on ENOMEM. */ static test_info *_test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slots[0].slot_id = slots[0]; ti->slots[1].slot_id = slots[1]; return ti; } /** * Creates a new test_info structure populating: * slot[0]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * - session[1] --> a valid session * slot[1]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * * @param is_rw * True if the sessions should be R/W false for R/O * @return * test_info on success. */ static test_info *test_info_new(bool is_rw) { test_info *ti = _test_info_new(); CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh = &ti->slots[0].sessions[0]; /* open two RO sessions on slot 0, and one on slot 1 */ open_session(slot_id, is_rw, tsh); tsh = &ti->slots[0].sessions[1]; open_session(slot_id, is_rw, tsh); slot_id = ti->slots[1].slot_id; tsh = &ti->slots[1].sessions[0]; open_session(slot_id, is_rw, tsh); return ti; } static void test_setup_teardown_common(void) { /* * Reset the DA counter as login tests can affect * the count */ TPM2B_AUTH auth = { .size = 0 }; TSS2_RC rc = Esys_TR_SetAuth(_g_ectx, ESYS_TR_RH_LOCKOUT, &auth); assert_int_equal(rc, TSS2_RC_SUCCESS); rc = Esys_DictionaryAttackLockReset(_g_ectx, ESYS_TR_RH_LOCKOUT, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE); assert_int_equal(rc, TSS2_RC_SUCCESS); } /** * Sets up a test run with read/write sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_rw(void **state) { test_setup_teardown_common(); *state = test_info_new(true); return 0; } /** * Sets up a test run with read-only sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_ro(void **state) { test_setup_teardown_common(); *state = test_info_new(false); return 0; } /** * Closes all sessions for slots and frees the test_info * structure. * @param state * Expects *state to be a valid test_info pointer. * @return */ static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); test_setup_teardown_common(); unsigned i; for (i=0; i < ARRAY_LEN(ti->slots); i++) { CK_SLOT_ID slot_id = ti->slots[i].slot_id; CK_RV rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } free(ti); return 0; } /** * Performs an SO login test * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); logout(handle); } /** * Performs a USER login test * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; user_login(session); logout(session); } /** * Performs a USER login test with a bad pin * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_incorrect_pin(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; CK_BYTE upin[] = BAD_USERPIN; CK_RV rv = C_Login(session, CKU_USER, upin, sizeof(upin) - 1); assert_int_equal(rv, CKR_PIN_INCORRECT); } /** * Performs a SO login test with a bad pin * @param state * Cmocka state where *state is a valid test_info *. */ void test_so_login_incorrect_pin(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login_bad_pin(session); } /** * Tests C_Logout without C_Login fails with CKR_USER_NOT_LOGGED_IN * @param state * Cmocka state where *state is a valid test_info *. */ static void test_logout_bad_not_logged_in(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; // Logout without Login CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); } /** * Tests C_Logout with an invalid session handle fails with CKR_SESSION_HANDLE_INVALID * @param state * Cmocka state where *state is a valid test_info *. */ static void test_logout_bad_invalid_session_handle(void **state) { UNUSED(state); // Logout with an Invalid Session CK_RV rv = C_Logout((CK_ULONG)-10); assert_int_equal(rv, CKR_SESSION_HANDLE_INVALID); } /** * Tests C_Login with an R/O session for a SO user fails with CKR_SESSION_READ_ONLY_EXISTS * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_on_ro_session(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login_expects(session, CKR_SESSION_READ_ONLY_EXISTS); } /** * Tests C_Login when SO is already logged in fails with CKR_USER_ALREADY_LOGGED_IN * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_login_already_logged_in(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login(session); so_login_expects(session, CKR_USER_ALREADY_LOGGED_IN); CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } /** * Validates that *EXISTING* session state changes on SO logins. Ie all sessions * are logged in. * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_global_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE slot0_session0 = ti->slots[0].sessions[0].handle; CK_SESSION_HANDLE slot0_session1 = ti->slots[0].sessions[1].handle; CK_SESSION_HANDLE slot1_session0 = ti->slots[1].sessions[0].handle; so_login(slot0_session0); so_login_expects(slot0_session1, CKR_USER_ALREADY_LOGGED_IN); logout(slot0_session1); logout_expects(slot1_session0, CKR_USER_NOT_LOGGED_IN); } /** * Validates that *EXISTING* session state changes on USER logins. Ie all sessions * are logged in. * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_global_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE slot0_session0 = ti->slots[0].sessions[0].handle; CK_SESSION_HANDLE slot0_session1 = ti->slots[0].sessions[1].handle; CK_SESSION_HANDLE slot1_session0 = ti->slots[1].sessions[0].handle;; /* * login on slot 0 session 0, and verify that it is logged in on the other session */ user_login(slot0_session0); user_login_expects(slot0_session1, CKR_USER_ALREADY_LOGGED_IN); /* * logging out of slot 1 session 0 should yield not logged in (different slot) */ logout_expects(slot1_session0, CKR_USER_NOT_LOGGED_IN); /* * logging out of slot 0 should yield a logout and no other sessions should * be logged in. Try cross session login/logout. Ie DONT login and logout from * the same session */ logout(slot0_session1); logout_expects(slot0_session0, CKR_USER_NOT_LOGGED_IN); } /** * Replicate issue https://github.com/tpm2-software/tpm2-pkcs11/issues/81 * * Where a C_OpenSession, C_Login, C_OpenSession, C_Login fails * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_logout_time_two(void **state) { /* * We don't use the common init as this needs to manage session * state on it's own */ test_info *ti = _test_info_new(); *state = ti; CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh[3] = { &ti->slots[0].sessions[0], &ti->slots[0].sessions[1], &ti->slots[0].sessions[2] }; /* * Open an R/O session, state should be initially at * CKS_RO_PUBLIC_SESSION */ open_session(slot_id, false, tsh[0]); CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_PUBLIC_SESSION); /* * Login should cause state to change from: * CKS_RO_PUBLIC_SESSION * to * CKS_RO_USER_FUNCTIONS */ user_login(tsh[0]->handle); rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Now that we're logged in, new R/0 sessions should start in the * state: CKS_RO_USER_FUNCTIONS */ open_session(slot_id, false, tsh[1]); rv = C_GetSessionInfo(tsh[1]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Start another session but R/W, and state should be CKS_RW_USER_FUNCTIONS */ open_session(slot_id, true, tsh[2]); rv = C_GetSessionInfo(tsh[2]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RW_USER_FUNCTIONS); /* * C_Logout, ALL states should return to CKS_RO_PUBLIC_SESSION or CKS_RW_PUBLIC_SESSION * depending on flags */ logout(tsh[1]->handle); unsigned i; for (i=0; i < ARRAY_LEN(tsh); i++) { test_session_handle *t = tsh[i]; rv = C_GetSessionInfo(t->handle, &info); assert_int_equal(rv, CKR_OK); CK_STATE expected = t->is_rw ? CKS_RW_PUBLIC_SESSION : CKS_RO_PUBLIC_SESSION; assert_int_equal(info.state, expected); } rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } static void test_user_login_implicit_close_all_logout(void **state) { /* * We don't use the common init as this needs to manage session * state on it's own */ test_info *ti = _test_info_new(); *state = ti; CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh[3] = { &ti->slots[0].sessions[0], &ti->slots[0].sessions[1], &ti->slots[0].sessions[2] }; /* * Open an R/O session, state should be initially at * CKS_RO_PUBLIC_SESSION */ open_session(slot_id, false, tsh[0]); CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_PUBLIC_SESSION); /* * Login should cause state to change from: * CKS_RO_PUBLIC_SESSION * to * CKS_RO_USER_FUNCTIONS */ user_login(tsh[0]->handle); rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Now that we're logged in, new R/0 sessions should start in the * state: CKS_RO_USER_FUNCTIONS */ open_session(slot_id, false, tsh[1]); rv = C_GetSessionInfo(tsh[1]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Start another session but R/W, and state should be CKS_RW_USER_FUNCTIONS */ open_session(slot_id, true, tsh[2]); rv = C_GetSessionInfo(tsh[2]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RW_USER_FUNCTIONS); /* * C_CloseAllSessions: should cause a logout. */ rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); /* no login should cause a CKR_USER_NOT_LOGGED_IN error */ open_session(slot_id, false, tsh[0]); logout_expects(tsh[0]->handle, CKR_USER_NOT_LOGGED_IN); } static void _swap_pin(CK_SESSION_HANDLE handle, bool do_logout, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { CK_UTF8CHAR_PTR newpin = user_type == CKU_SO ? C("newsopin") : C("newuserpin"); CK_ULONG newpinlen = user_type == CKU_SO ? (sizeof("newsopin") - 1): (sizeof("newuserpin") - 1); // Set the new pin CK_RV rv = C_SetPIN(handle, oldpin, oldpinlen, newpin, newpinlen); assert_int_equal(rv, CKR_OK); if (do_logout) { logout(handle); } // new pin should work for login login_expects(handle, user_type, CKR_OK, newpin, newpinlen); // swap the pin back rv = C_SetPIN(handle, newpin, newpinlen, oldpin, oldpinlen); assert_int_equal(rv, CKR_OK); } static void swap_pin(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { _swap_pin(handle, true, user_type, oldpin, oldpinlen); } static void swap_pin_nologout(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { _swap_pin(handle, false, user_type, oldpin, oldpinlen);} static void test_user_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; user_login(handle); swap_pin(handle, CKU_USER, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); logout(handle); } static void test_nologin_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; swap_pin_nologout(handle, CKU_USER, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); logout(handle); } static void test_so_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); swap_pin(handle, CKU_SO, C(GOOD_SOPIN), sizeof(GOOD_SOPIN) - 1); logout(handle); } static void test_ro_function_state_pin_change_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; /* * NO LOGIN - should leave us in R/O Functions state */ CK_UTF8CHAR_PTR oldpin = C("doesntmatter"); CK_ULONG oldpinlen = sizeof("doesntmatter") - 1; CK_UTF8CHAR_PTR newpin = C("whocares"); CK_ULONG newpinlen = sizeof("whocares") - 1; // Set the new pin CK_RV rv = C_SetPIN(handle, oldpin, oldpinlen, newpin, newpinlen); assert_int_equal(rv, CKR_SESSION_READ_ONLY); } static void test_so_state_pin_init_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); const char newpin[] = "mynewuserpin"; CK_RV rv = C_InitPIN(handle, C(newpin), sizeof(newpin) - 1); assert_int_equal(rv, CKR_OK); /* * logging in as user with the old pin should fail */ logout(handle); login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); /* * log back in as so and change it back */ so_login(handle); rv = C_InitPIN(handle, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); assert_int_equal(rv, CKR_OK); logout(handle); } static void test_double_init_token(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot = ti->slots[0].slot_id; unsigned char sopin[] = GOOD_SOPIN; CK_BYTE label[32 + 1] = "doubleinittoken "; CK_RV rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_init_token(void **state) { UNUSED(state); CK_SLOT_ID slots[10]; CK_ULONG slot_cnt = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList (CK_TRUE, slots, &slot_cnt); assert_int_equal(rv, CKR_OK); bool found = false; CK_SLOT_ID slot = 0; CK_ULONG i; for (i=0; i < slot_cnt; i++) { CK_SLOT_ID s = slots[i]; CK_TOKEN_INFO info = { 0 }; rv = C_GetTokenInfo (s, &info); assert_int_equal(rv, CKR_OK); if (!(info.flags & CKF_TOKEN_INITIALIZED)) { found = true; slot = s; break; } /* keep looking */ } /* We better find an empty slot, or something is broken */ assert_int_equal(found, true); /* Initialize a token */ unsigned char sopin[] = GOOD_SOPIN; CK_BYTE label[32 + 1] = "mynewtoken42 "; CK_BYTE bad_label[32 + 1] = "myne\0wtoken42 "; rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, bad_label); assert_int_equal(rv, CKR_ARGUMENTS_BAD); rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_OK); /* * Verify that we cannot do a USER login until pin is initialized * Bug: https://github.com/tpm2-software/tpm2-pkcs11/issues/563 */ CK_SESSION_HANDLE session = 0; rv = C_OpenSession(slot, CKF_SERIAL_SESSION|CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); rv = C_Login(session, CKU_USER, C("anypin"), 6); assert_int_equal(rv, CKR_USER_PIN_NOT_INITIALIZED); /* establish R/W SO Functions login state */ rv = C_Login(session, CKU_SO, sopin, sizeof(sopin) - 1); assert_int_equal(rv, CKR_OK); /* Initialize the Pin */ const char userpin[] = GOOD_USERPIN; rv = C_InitPIN(session, C(userpin), sizeof(userpin) - 1); assert_int_equal(rv, CKR_OK); /* logout of the SO session */ rv = C_Logout(session); assert_int_equal(rv, CKR_OK); user_login(session); logout(session); /* * Try to initialize a token of the same name to verify DB UNIQUE constraint error path * We know that slot + 1 brings us to the next uninitialized slot... */ rv = C_InitToken(slot + 1, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_GENERAL_ERROR); } int main() { const struct CMUnitTest tests[] = { /* * No Session tests */ cmocka_unit_test_setup_teardown(test_logout_bad_invalid_session_handle, NULL, NULL), /* * R/O Session Tests */ cmocka_unit_test_setup_teardown(test_user_login_logout_good, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_incorrect_pin, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_logout_bad_not_logged_in, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_so_on_ro_session, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_global_login_logout_good, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_logout_time_two, NULL, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_implicit_close_all_logout, NULL, test_teardown), /* * R/W Session Tests */ cmocka_unit_test_setup_teardown(test_so_login_already_logged_in, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_login_logout_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_login_incorrect_pin, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_global_login_logout_good, test_setup_rw, test_teardown), /* * Changepin tests, These should stay last, if they fail they could leave the token * in a weird state causing subsequent test failures. */ cmocka_unit_test_setup_teardown(test_user_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_nologin_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_ro_function_state_pin_change_bad, test_setup_ro, test_teardown), /* * C_InitPIN tests should also stay last as if they fail they can leave the token * in a weird state */ cmocka_unit_test_setup_teardown(test_so_state_pin_init_good, test_setup_rw, test_teardown), /* These work on new tokens via slots and thus don't matter the order */ cmocka_unit_test_setup_teardown(test_double_init_token, test_setup_ro, test_teardown), cmocka_unit_test(test_init_token), }; return cmocka_run_group_tests(tests, _group_setup_locking, _group_teardown); } tpm2-pkcs11-1.7.0/test/integration/tls-tests.sh0000775000175000017500000000450014114240163016222 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -xo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" EXT_FILE="$TEST_FIXTURES/xpextensions" CLIENT_CNF="$TEST_FIXTURES/client.cnf" # details on the PKCS11 URI can be found here: https://tools.ietf.org/html/rfc7512 PKCS11_KEY="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;object=rsa0;type=private" if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi function cleanup() { if [ "$1" != "no-kill" ]; then pkill -P $$ || true fi cleanup_ca rm -f server.csr server.crt server.key server.pem client.csr client.crt client_tpm.pem } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR cleanup "no-kill" # setup the CA BEFORE EXPORTING THE CA CONF for the clients setup_ca export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" # create and sign standard file-based cert for server openssl genrsa -out server.key 2048 openssl req -new -key server.key -out server.csr -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=server.example.com" openssl ca -batch -keyfile "$CA_KEY" -cert "$CA_PEM" -in server.csr -out server.crt -config "$CLIENT_CNF" openssl x509 -in server.crt -out server.pem -outform pem # create and sign PKCS#11 cert for client openssl req -new -engine pkcs11 -keyform engine -key "$PKCS11_KEY" -out client.csr -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=testing/emailAddress=testing@123.com" openssl ca -batch -keyfile "$CA_KEY" -cert "$CA_PEM" -in client.csr -out client.crt -extensions xpclient_ext -extfile "$EXT_FILE" -config "$CLIENT_CNF" openssl x509 -in client.crt -out client_tpm.pem -outform pem # OpenSSL version 1.0.2g ends up in a state where it tries to read from stdin instead of the ssl connection. # Feeding it one byte as stdin avoids this condition which is described in more detail here: # https://github.com/tpm2-software/tpm2-pkcs11/pull/366 openssl s_server -debug -CAfile "$CA_PEM" -cert server.pem -key server.key -Verify 1 <<< '1' & sleep 1 # default connects to 127.0.0.1:443 openssl s_client -engine pkcs11 -keyform engine -key "$PKCS11_KEY" -CAfile "$CA_PEM" -cert client_tpm.pem <<< 'Q' exit 0 tpm2-pkcs11-1.7.0/test/integration/ptool-link.sh.nosetup0000775000175000017500000002076114114240163020053 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -xe if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } tpm2tss_genkey() { export OPENSSL_CONF="$TEST_FIXTURES/tss2engine.cnf" export TPM2TSSENGINE_TCTI="$TPM2_PKCS11_TCTI" # Generate a TSS2 Engine RSA key tpm2tss-genkey "$@" unset OPENSSL_CONF unset OPENSSL_ENGINES } rsa_verify() { echo "testdata">${tempdir}/data echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin myuserpin pkcs11_tool -v --sign --login --token-label="$1" --label="$2" --pin myuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --token-label="$1" --label="$2" \ --type pubkey --output-file "${tempdir}/$2.der" \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify "${tempdir}/$2.der" -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "TPM2_PKCS11_TCTI=$TPM2_PKCS11_TCTI" export TPM2_PKCS11_TCTI # Create a primary key at "$handle" tpm2_createprimary -c primary.ctx handle=$(tpm2_evictcontrol -c primary.ctx | grep persistent-handle | cut -d' ' -f2-2) # Create a primary object in the store referencing it pid=$(tpm2_ptool init --primary-handle="$handle" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) # Create a token using that pid tpm2_ptool addtoken --pid="$pid" --label=linktoken --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE # Set up the engine for the tpm2tss-genkey tool both for future and older ways of doing it engdir="$(pkg-config --variable=enginesdir libcrypto)" if [ -z "$engdir" ]; then export OPENSSL_ENGINES=/usr/local/lib/engines fi tpm2tss_genkey -P"$handle" -a rsa -s 2048 "$tempdir/tss2-rsa-2048.pem" # Link that key into the token tpm2_ptool link --label=linktoken --userpin=myuserpin --key-label=tss2rsa2048 \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048.pem" rsa_verify "linktoken" "tss2rsa2048" # # Test transient primary keys that the TSS Engine uses # pid=$(tpm2_ptool init --transient-parent="tss2-engine-key" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=linktokentransient --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE tpm2tss_genkey "$tempdir/tss2-rsa-2048-transient.pem" # Link that key into the token tpm2_ptool link --label=linktokentransient --userpin=myuserpin --key-label=tss2rsa2048transient \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048-transient.pem" rsa_verify "linktokentransient" "tss2rsa2048transient" # Now test with owner auth and primary object passwords set to something rm -rf "$tempdir"/* tpm2_changeauth -c o "newpass" pid=$(tpm2_ptool init --transient-parent="tss2-engine-key" --hierarchy-auth=newpass --primary-auth=1234 \ --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --hierarchy-auth=newpass --pid="$pid" --label=linktokentransient --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE tpm2tss_genkey -o newpass "$tempdir/tss2-rsa-2048-transient.pem" # Link that key into the token tpm2_ptool link --hierarchy-auth=newpass --label=linktokentransient --userpin=myuserpin --key-label=tss2rsa2048transient \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048-transient.pem" export TPM2_PKCS11_OWNER_AUTH=newpass rsa_verify "linktokentransient" "tss2rsa2048transient" # Drop the ownerauth password tpm2_changeauth -c o -p "newpass" unset TPM2_PKCS11_OWNER_AUTH # # Test transient primary keys that the tpm2-tools tpm2_createprimary produces # # Create a key under the default primary key for the tools tpm2_createprimary -c "$tempdir/primary.ctx" tpm2_create -C "$tempdir/primary.ctx" -u "$tempdir/key.pub" -r "$tempdir/key.priv" # Create a token suitable to use this key pid=$(tpm2_ptool init --transient-parent="tpm2-tools-default" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=linktokentpmtoolsdefault --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE # Link that key into the token tpm2_ptool link --label=linktokentpmtoolsdefault --userpin=myuserpin --key-label=tpm2toolkey \ --path=$TPM2_PKCS11_STORE "$tempdir/key.pub" "$tempdir/key.priv" rsa_verify "linktokentpmtoolsdefault" "tpm2toolkey" # Create an ECC key just to make sure that works too tpm2_create -C "$tempdir/primary.ctx" -Gecc -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" # Also swap public and private to make sure order doesn't matter tpm2_ptool link --label=linktokentpmtoolsdefault --userpin=myuserpin --id=12345678 --key-label=tpm2toolecckey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Perform a signature using ECDSA w/SHA1 # Note: you must hex encode the id for it to work pkcs11_tool --token-label=linktokentpmtoolsdefault --login --pin myuserpin --sign --id=3132333435363738 \ --input-file ${tempdir}/data --mechanism ECDSA-SHA1 \ --signature-format=openssl --output-file ${tempdir}/sig # Verify signature against public key in PEM format, so load it and get a PEM format tpm2_load -C "$tempdir/primary.ctx" -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" \ -c "$tempdir/ecc-key.ctx" tpm2_readpublic -c "$tempdir/ecc-key.ctx" -f pem -o "$tempdir/ecc-key.pem" openssl dgst -sha1 -verify "$tempdir/ecc-key.pem" -signature "$tempdir/sig" "$tempdir/data" # # Test tpm2_createprimary -Gecc transient primary keys # # Create a key under the default primary key for the tools tpm2_createprimary -Gecc -c "$tempdir/primary.ctx" tpm2_create -C "$tempdir/primary.ctx" -u "$tempdir/key.pub" -r "$tempdir/key.priv" # Create a token suitable to use this key pid=$(tpm2_ptool init --transient-parent="tpm2-tools-ecc-default" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=eccdefault --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE # Link that key into the token tpm2_ptool link --label=eccdefault --userpin=myuserpin --key-label=tpm2toolkey \ --path=$TPM2_PKCS11_STORE "$tempdir/key.pub" "$tempdir/key.priv" rsa_verify "eccdefault" "tpm2toolkey" # Create an ECC key just to make sure that works too tpm2_create -C "$tempdir/primary.ctx" -Gecc -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" # Also swap public and private to make sure order doesn't matter tpm2_ptool link --label=eccdefault --userpin=myuserpin --id=12345678 --key-label=tpm2toolecckey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Perform a signature using ECDSA w/SHA1 # Note: you must hex encode the id for it to work pkcs11_tool --token-label=eccdefault --login --pin myuserpin --sign --id=3132333435363738 \ --input-file ${tempdir}/data --mechanism ECDSA-SHA1 \ --signature-format=openssl --output-file ${tempdir}/sig # Verify signature against public key in PEM format, so load it and get a PEM format tpm2_load -C "$tempdir/primary.ctx" -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" \ -c "$tempdir/ecc-key.ctx" tpm2_readpublic -c "$tempdir/ecc-key.ctx" -f pem -o "$tempdir/ecc-key.pem" openssl dgst -sha1 -verify "$tempdir/ecc-key.pem" -signature "$tempdir/sig" "$tempdir/data" # Add an HMAC SHA1 key and test it. We use SHA1 do to limited support in pkcs11-tool not supporting SHA256+ tpm2_create -C "$tempdir/primary.ctx" -Ghmac:sha1 -u "$tempdir/key-hmac.pub" -r "$tempdir/key-hmac.priv" tpm2_ptool link --label=eccdefault --userpin=myuserpin --id=987654321 --key-label=tpm2toolhmackey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Well, pkcs11-tool is broken, it requires all sign operations to be conducted with a CKO_PRIVATE_KEY and HMAC keys # are CKO_SECRET_KEY. # tpm2_pkcs11-tool --token-label=label --login --pin=myuserpin --sign --id='393837363534333231' --input-file=data.msg \ # -mechanism=SHA-1-HMAC --output-file=data.sig exit 0 tpm2-pkcs11-1.7.0/test/fuzz/0000775000175000017500000000000014124415534012464 500000000000000tpm2-pkcs11-1.7.0/test/fuzz/init-token-label.fuzz32.c0000644000175000017500000000425113754763565017072 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static CK_BYTE _label[32]; static void test(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); will_return_maybe(__wrap_backend_fapi_init, CKR_GENERAL_ERROR); will_return_maybe(__wrap_Esys_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_FromTPMPublic, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_Serialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_SetAuth, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_StartAuthSession, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TRSess_SetAttributes, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Create, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_FlushContext, TSS2_RC_SUCCESS); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); /* FUZZ TARGET C_InitToken LABEL */ rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, _label); /* some may work some may fail do not check RV */ rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (size > sizeof(_label)) { LOGE("Size is not valid, expected less than %zu got: %zu", sizeof(_label), size); abort(); } /* lets just throw random 32 byte buffers at it and see what blows up */ memcpy(_label, data, size); const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/utils-ctx-unwrap-objauth.c0000664000175000017500000000414014114236775017456 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include "token.h" #include "twist.h" #include "utils.h" static const uint8_t *_data = NULL; static size_t _size = 0; /* * We want to target malicious DB injection. If someone points us to a store, * where data is malformed, we want to tolerate that. * * Generally 3 things come from the db in wild formats: * 1. attributes in yaml * 2. wrapped object auths (immediately handed to twistbin_new()) * 3. Public and Private TPM blobs * * This test aims to check issue 2. * * Sample Good Corpus with key below: * 05271d7286bfb46667a6ed2c:aa1f228f9925ac9694663d0b20dc5526:a8b8b5487e1abe7585458e88c8c7e82dc8c1f40d7bb0c6776a3895ecf75d240b * * Define CORPUS_TEST to test it. */ static void test(void **state) { UNUSED(state); #ifdef CORPUS_TEST char *e = "05271d7286bfb46667a6ed2c:aa1f228f9925ac9694663d0b20dc5526:a8b8b5487e1abe7585458e88c8c7e82dc8c1f40d7bb0c6776a3895ecf75d240b"; _data = (uint8_t *)e; _size = strlen(e); #endif /* we just need an AES key, any key will work */ twist wrappingkey = twistbin_unhexlify("6ef4c48c59793d6f004dbf4de399e643b627031a4bfd352b660fadaced95c9b4"); assert_non_null(wrappingkey); twist wrapped = twistbin_new(_data, _size); assert_non_null(wrapped); twist unwrapped = NULL; /* * under the hood this expects very specifically formatted hex data, make sure that code * doesn't blow up */ CK_RV rv = utils_ctx_unwrap_objauth(wrappingkey, wrapped, &unwrapped); #ifdef CORPUS_TEST assert_int_equal(rv, CKR_OK); #else UNUSED(rv); #endif twist_free(wrappingkey); twist_free(wrapped); twist_free(unwrapped); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _data = data; _size = size; const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/init-token-sopin.fuzz.c0000644000175000017500000000452313754763565017000 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data = NULL; static size_t _size = 0; static void test(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); will_return_always(__wrap_backend_fapi_init, CKR_GENERAL_ERROR); will_return_always(__wrap_Esys_Initialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Tss2_TctiLdr_Initialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Tss2_TctiLdr_Finalize, TSS2_RC_SUCCESS); //will_return_always(__wrap_Esys_GetCapability, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_Finalize, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_FromTPMPublic, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_Serialize, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_TR_Deserialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_SetAuth, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_StartAuthSession, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_TRSess_GetAttributes, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TRSess_SetAttributes, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_CreateLoaded, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_Create, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_FlushContext, TSS2_RC_SUCCESS); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; /* FUZZ TARGET C_InitToken SOPIN */ rv = C_InitToken(slot_list, (CK_BYTE_PTR)_data, _size, label); /* any pin should work */ assert_int_equal(rv, CKR_OK); rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _data = data; _size = size; const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/db-token-label.fuzz32.c0000644000175000017500000000562313754763565016520 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "db.h" #include "token.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static sqlite3 *_db; static token _token; /* hidden api */ extern CK_RV db_init_new(sqlite3 *db); extern void db_debug_set_db(sqlite3 *db); /* overriding weak symbol, like wrap */ CK_RV db_new(sqlite3 **db) { *db = _db; return CKR_OK; } /* overriding weak symbol, like wrap */ void db_get_label(token *t, sqlite3_stmt *stmt, int iCol) { UNUSED(stmt); UNUSED(iCol); /* FUZZ DATA */ memcpy(t->label, _data, _size); } static int setup(void **state) { UNUSED(state); set_default_tpm(); int rc = sqlite3_open(":memory:", &_db); assert_int_equal(rc, SQLITE_OK); CK_RV rv = db_init_new(_db); assert_int_equal(rv, CKR_OK); db_debug_set_db(_db); unsigned int pid = 0; pobject pobj = { 0 }; pobj.config.blob = twist_new("aabbccdd"); assert_non_null(pobj.config.blob); rv = db_add_primary(&pobj, &pid); twist_free(pobj.config.blob); assert_int_equal(rv, CKR_OK); /* create and add a dummy token */ memcpy(_token.label, "foo", 3); _token.pid = pid; _token.config.is_initialized = true; _token.esysdb.sealobject.sopriv = twist_new("sopriv"); assert_non_null(_token.esysdb.sealobject.sopriv); _token.esysdb.sealobject.soauthsalt = twist_new("soauthsalt"); assert_non_null(_token.esysdb.sealobject.soauthsalt); _token.esysdb.sealobject.sopub = twist_new("sopub"); assert_non_null(_token.esysdb.sealobject.sopub); _token.esysdb.sealobject.userauthsalt = twist_new("userauthsalt"); assert_non_null(_token.esysdb.sealobject.userauthsalt); rv = db_add_token(&_token); assert_int_equal(rv, CKR_OK); setenv("TPM2_PKCS11_STORE", ":memory:", 1); rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); token_free(&_token); return 0; } static void test(void **state) { UNUSED(state); /* nothing to do, setup and teardown do it */ CK_SLOT_ID slot_ids[2]; CK_ULONG cnt = ARRAY_LEN(slot_ids); CK_RV rv = C_GetSlotList(true, slot_ids, &cnt); assert_int_equal(rv, CKR_OK); CK_TOKEN_INFO info; /* FUZZ TARGET */ rv = C_GetTokenInfo(slot_ids[0], &info); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (size > 32) { LOGE("SIZE BIGGER THAN 32"); return 0; } _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/init-pin.fuzz.c0000644000175000017500000000356513754763565015325 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static CK_SESSION_HANDLE _session; static int setup(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); set_default_tpm(); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, label); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slot_list, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &_session); assert_int_equal(rv, CKR_OK); rv = C_Login(_session, CKU_SO, (CK_BYTE_PTR)"mysopin", 7); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static void test(void **state) { UNUSED(state); set_default_tpm(); /* FUZZ TARGET C_InitPIN pin */ CK_RV rv = C_InitPIN(_session, (CK_BYTE_PTR)_data, _size); /* it should never fail, all pins are ok */ assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/set-pin.fuzz.c0000644000175000017500000000377113754763565015154 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static CK_SESSION_HANDLE _session; static int setup(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); set_default_tpm(); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, label); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slot_list, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &_session); assert_int_equal(rv, CKR_OK); rv = C_Login(_session, CKU_SO, (CK_BYTE_PTR)"mysopin", 7); assert_int_equal(rv, CKR_OK); rv = C_InitPIN(_session, (CK_BYTE_PTR)"myuserpin", 9); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static void test(void **state) { UNUSED(state); set_default_tpm(); /* FUZZ TARGET C_InitPIN pin */ CK_RV rv = C_SetPIN(_session, (CK_BYTE_PTR)"mysopin", 7, (CK_BYTE_PTR)_data, _size); /* it should never fail, all pins are ok */ assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.7.0/test/fuzz/yaml-parser.fuzz.c0000644000175000017500000000130613754763565016021 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "debug.h" /* * Drop WEAK or the parse_attributes_from_string is NULL * This command below will be empty without this. I am not * 100% sure why its not getting resolved properly, but this * fixes it for now. * nm --defined ./test/fuzz/yaml-parser.fuzz | grep parse 00000000005558d0 T parse_attributes_from_string */ #undef WEAK #define WEAK #include #include #include "attrs.h" #include "parser.h" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { attr_list *attrs = NULL; parse_attributes_from_string(data, size, &attrs); attr_list_free(attrs); return 0; } tpm2-pkcs11-1.7.0/test/unit/0000775000175000017500000000000014124415534012445 500000000000000tpm2-pkcs11-1.7.0/test/unit/test_attr.c0000644000175000017500000000335514056167437014560 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "attrs.h" static void test_config_parser_empty_seq(void **state) { (void) state; attr_list *attrs = attr_list_new(); assert_non_null(attrs); bool r = attr_list_add_int(attrs, CKA_CLASS, CKO_CERTIFICATE); assert_true(r); r = attr_list_add_buf(attrs, CKA_ID, (CK_BYTE_PTR)"2132333435", 10); assert_true(r); r = attr_list_add_bool(attrs, CKA_DECRYPT, CK_TRUE); assert_true(r); /* test class */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_CLASS); assert_non_null(a); CK_OBJECT_CLASS got_class = CKO_DATA; CK_RV rv = attr_CK_OBJECT_CLASS(a, &got_class); assert_int_equal(rv, CKR_OK); assert_int_equal(got_class, CKO_CERTIFICATE); /* test id */ a = attr_get_attribute_by_type(attrs, CKA_ID); assert_non_null(a); assert_int_equal(a->ulValueLen, 10); assert_memory_equal(a->pValue, "2132333435", 10); /* test decrypt */ a = attr_get_attribute_by_type(attrs, CKA_DECRYPT); assert_non_null(a); CK_BBOOL got_bool = CK_FALSE; rv = attr_CK_BBOOL(a, &got_bool); assert_int_equal(rv, CKR_OK); assert_int_equal(got_bool, CK_TRUE); /* test shouldn't be there */ a = attr_get_attribute_by_type(attrs, CKA_SIGN); assert_null(a); attr_list_free(attrs); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_config_parser_empty_seq), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/unit/test_db.c0000664000175000017500000031632614114236775014177 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include #include "db.h" #include "debug.h" #include "object.h" #include "twist.h" #include "utils.h" #define BAD_PTR ((void *)0xDEADBEEF) typedef struct will_return_data will_return_data; struct will_return_data { bool call_real; token t; union { int rc; void *data; bool rcb; CK_RV rv; sqlite3_int64 u64; }; }; static int tobject_setup(void **state) { will_return_data d = { .call_real = true }; will_return(__wrap_calloc, &d); tobject *t = __real_tobject_new(); assert_non_null(t); t->id = 42; *state = t; return 0; } int __wrap_sqlite3_column_bytes(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->rc; } void *__wrap_sqlite3_column_blob(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } int __wrap_sqlite3_data_count(sqlite3 *stmt) { UNUSED(stmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } const char *__wrap_sqlite3_column_name(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } const unsigned char *__wrap_sqlite3_column_text(sqlite3_stmt *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } int __wrap_sqlite3_column_int(sqlite3_stmt *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_finalize(sqlite3_stmt *pStmt) { UNUSED(pStmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_prepare_v2(sqlite3 *db, const char *zSql, int nByte, sqlite3_stmt **ppStmt, const char **pzTail ) { UNUSED(db); UNUSED(zSql); UNUSED(nByte); UNUSED(ppStmt); UNUSED(pzTail); will_return_data *d = mock_type(will_return_data *); if (d->rc == SQLITE_OK) { *ppStmt = (sqlite3_stmt *)0xBADCC0DE; } return d->rc; } int __wrap_sqlite3_bind_int(sqlite3_stmt *pStmt, int iCol, int value) { UNUSED(pStmt); UNUSED(iCol); UNUSED(value); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_bind_text(sqlite3_stmt *pStmt, int iCol, const char *text, int len, void(*fnp)(void *data)) { UNUSED(pStmt); UNUSED(iCol); UNUSED(text); UNUSED(len); UNUSED(fnp); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_bind_blob(sqlite3_stmt *pStmt, int iCol, const void *data, int len, void(*fnp)(void *data)) { UNUSED(pStmt); UNUSED(iCol); UNUSED(data); UNUSED(len); UNUSED(fnp); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_step(sqlite3_stmt *pStmt) { UNUSED(pStmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } const char *__wrap_sqlite3_errmsg(sqlite3 *db) { UNUSED(db); return "FAKE ERROR MESSAGE"; } char *__real_strdup(const char *s); char *__wrap_strdup(const char *s) { UNUSED(s); will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_strdup(s); } return d->data; } void *__real_calloc(size_t nmemb, size_t size); void *__wrap_calloc(size_t nmemb, size_t size) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_calloc(nmemb, size); } return d->data; } int __real_sqlite3_exec( sqlite3 *db, /* An open database */ const char *sql, /* SQL to be evaluated */ int (*callback)(void*,int,char**,char**), /* Callback function */ void *, /* 1st argument to callback */ char **errmsg /* Error msg written here */ ); int __wrap_sqlite3_exec( sqlite3 *db, const char *sql, int (*callback)(void*,int,char**,char**), void *arg, char **errmsg ) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_sqlite3_exec(db, sql, callback, arg, errmsg); } return d->rc; } sqlite3_int64 __wrap_sqlite3_last_insert_rowid(sqlite3 *db) { UNUSED(db); will_return_data *d = mock_type(will_return_data *); return d->u64; } /* Override WEAK symbol */ twist __real_twistbin_new(const void *data, size_t size); twist twistbin_new(const void *data, size_t len) { UNUSED(data); UNUSED(len); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ tobject *tobject_new(void) { will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ tobject *db_tobject_new(sqlite3_stmt *stmt) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_db_tobject_new(stmt); } return d->data; } /* weak override */ bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs) { UNUSED(yaml); UNUSED(size); UNUSED(attrs); will_return_data *d = mock_type(will_return_data *); return d->rcb; } /* weak override */ WEAK CK_RV object_init_from_attrs(tobject *tobj) { UNUSED(tobj); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ char *emit_pobject_to_conf_string(pobject_config *config) { UNUSED(config); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { UNUSED(ctx); UNUSED(handle_blob); UNUSED(handle); will_return_data *d = mock_type(will_return_data *); return d->rcb; } /* weak override */ CK_RV token_add_tobject_last(token *tok, tobject *t) { UNUSED(tok); UNUSED(t); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, twist pobj_auth, uint32_t *primary_handle) { UNUSED(tpm); UNUSED(template_name); UNUSED(pobj_auth); UNUSED(primary_handle); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ CK_RV token_min_init(token *t) { will_return_data *d = mock_type(will_return_data *); *t = d->t; return d->rv; } /* weak override */ int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_pobject(pid, pobj, tpm); } return d->rc; } /* weak override */ int init_sealobjects(unsigned tokid, sealobject *sealobj) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_sealobjects(tokid, sealobj); } return d->rc; } /* weak override */ int init_tobjects(token *tok) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_tobjects(tok); } return d->rc; } /* weak override */ char *emit_attributes_to_string(attr_list *attrs) { UNUSED(attrs); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ char *emit_config_to_string(token *tok) { UNUSED(tok); will_return_data *d = mock_type(will_return_data *); return d->data; } static int test_db_get_tokens_setup(void **state) { *state = __real_calloc(MAX_TOKEN_CNT, sizeof(token)); return !(*state != NULL); } static void test_db_get_blob_col_bytes_0(void **state) { (void) state; will_return_data d = { .rc = 0 }; will_return(__wrap_sqlite3_column_bytes, &d); twist blob = NULL; int rc = get_blob(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_ERROR); } static void test_db_get_blob_null_col_bytes_0(void **state) { (void) state; will_return_data d = { .rc = 0 }; will_return(__wrap_sqlite3_column_bytes, &d); twist blob = NULL; int rc = get_blob_null(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_OK); } static void test_db_get_blob_alloc_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 32 }, { .data = "This is 32 bytes, that's cool!!" }, { .data = NULL }, }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_blob, &d[1]); will_return(twistbin_new, &d[2]); twist blob = NULL; int rc = get_blob(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_ERROR); } static void db_tobject_new_tobject_alloc_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = NULL } /* tobject_new fail */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_column_unknown_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "unknown" }, /* sqlite3_column_name */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_column_text_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 0 }, /* sqlite3_column_bytes */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_attrs_text_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 4 }, /* sqlite3_column_bytes */ { .data = "bad" }, /* sqlite3_column_text */ { .rcb = false }, /* parse_attributes_from_string */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(parse_attributes_from_string, &d[6]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_object_init_from_attrs_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 3 }, /* sqlite3_column_bytes */ { .data = "good" }, /* sqlite3_column_text */ { .rcb = true }, /* parse_attributes_from_string */ { .rv = CKR_GENERAL_ERROR } /* object_init_from_attrs */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(parse_attributes_from_string, &d[6]); will_return(object_init_from_attrs, &d[7]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void init_pobject_v3_from_stmt_sqlite3_column_text_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_strdup_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = NULL }, /* strdup */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt__get_blob_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = NULL }, /* twistbin_new */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_sqlite3_column_text2_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); twist t = __real_twistbin_new("data", 4); assert_non_null(t); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = (void *)t }, /* twistbin_new */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); will_return(__wrap_sqlite3_column_text, &d[6]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_strdup2_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); twist t = __real_twistbin_new("data", 4); assert_non_null(t); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = (void *)t }, /* twistbin_new */ { .data = "foo:bar:baz" }, /* sqlite3_column_text */ { .data = NULL }, /* strdup */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); will_return(__wrap_sqlite3_column_text, &d[6]); will_return(__wrap_strdup, &d[7]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_tobjects_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_tobjects((token *)0xDEADBEEF); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_sqlite3_bind_int(void **state) { UNUSED(state); token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int , &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_db_tobject_new_fail(void **state) { UNUSED(state); token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = NULL }, /* db_tobject_new */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(db_tobject_new, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_token_add_tobject_last_fail(void **state) { token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = *state }, /* db_tobject_new call real */ { .rv = CKR_HOST_MEMORY }, /* token_add_tobject_last */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(db_tobject_new, &d[3]); will_return(token_add_tobject_last, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void test_convert_pobject_v3_to_v4_emit_pobject_to_conf_string_fail(void **state) { UNUSED(state); pobject_v4 new_pobj = { 0 }; pobject_v3 old_pobj = { .id = 42, .hierarchy = "o", .objauth = "foobarauth" }; will_return_data d[] = { { .data = NULL }, /* emit_pobject_to_conf_string */ }; will_return(emit_pobject_to_conf_string, &d[0]); CK_RV rv = convert_pobject_v3_to_v4(&old_pobj, &new_pobj); assert_int_equal(rv, CKR_HOST_MEMORY); } static void test_db_add_pobject_v4_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR } /* sqlite3_finalize (error for warning) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_finalize, &d[1]); pobject_v4 new_pobj = { .id = 1234, .config = "YAML CONFIG YEAH", .hierarchy = "o", .objauth = "foobarauth" }; CK_RV rv = db_add_pobject_v4((sqlite3 *)0xDEADBEEF, &new_pobj); assert_int_not_equal(rv, CKR_OK); } static void test_db_add_pobject_v4_sqlite3_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); pobject_v4 new_pobj = { .id = 1234, .config = "YAML CONFIG YEAH", .hierarchy = "o", .objauth = "foobarauth" }; CK_RV rv = db_add_pobject_v4((sqlite3 *)0xDEADBEEF, &new_pobj); assert_int_not_equal(rv, CKR_OK); } static void test_init_pobject_from_stmt_parse_pobject_config_from_string_fail(void **state) { UNUSED(state); pobject pobj = {0}; const char *yaml_config = "really bad yaml"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_not_transient_no_blob_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}\n"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_tpm_deserialize_handle_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"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\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = false }, /* tpm_deserialize_handle */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_tpm_create_transient_primary_from_template_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"template-name\"\n" " : !!str \"tpm2-tools-default\",\n" " ? !!str \"transient\"\n" " : !!bool \"true\",\n" "}\n"; will_return_data d[] = { { .call_real = true }, /* strdup */ { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .data = "fakeauth" }, /* sqlite3_column_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rv = CKR_GENERAL_ERROR }, /* tpm_create_transient_primary_from_template */ }; will_return_always(__wrap_strdup, &d[0]); will_return(__wrap_sqlite3_column_bytes, &d[1]); will_return(__wrap_sqlite3_column_text, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); will_return(tpm_create_transient_primary_from_template, &d[5]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_missing_template_name_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"transient\"\n" " : !!bool \"true\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_twist_new_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"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\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = true }, /* tpm_deserialize_handle */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_sqlite_step_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"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\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = true }, /* tpm_deserialize_handle */ { .data = "fake auth data" }, /* sqlite3_column_text */ { .rc = SQLITE_ERROR } /* sqlite3_step */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_bind_int_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_bind_int_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_step_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_bad_col_name_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "bad col name" }, /* sqlite3_column_name */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_data_count, &d[3]); will_return(__wrap_sqlite3_column_name, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_db_get_tokens_sqlite3_prepare_v2_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_token_overcount_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return_always(__wrap_sqlite3_prepare_v2, &d[0]); will_return_always(__wrap_sqlite3_step, &d[1]); will_return_always(__wrap_sqlite3_data_count, &d[2]); will_return_always(token_min_init, &d[3]); will_return_always(init_pobject, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_seal_objects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_ERROR }, /* init_sealobjects */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(init_sealobjects, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_token_min_init_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_GENERAL_ERROR }, /* token_min_init */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_pobjects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_ERROR }, /* init_pobject */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_tobjects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_OK }, /* init_sealobjects */ { .rc = SQLITE_ERROR }, /* init_tobjects */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(init_sealobjects, &d[5]); will_return(init_tobjects, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_config_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = "config" }, /* sqlite3_column_name*/ { .rc = 1 }, /* sqlite3_data_count */ { .rc = 0 }, /* sqlite3_column_bytes */ { .data = NULL }, /* sqlite3_column_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_column_name, &d[2]); will_return(__wrap_sqlite3_data_count, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_parse_token_config_from_string_fail(void **state) { size_t len = 42; token *tok = (token *)*state; const char *yaml_data = "bad yaml"; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "config" }, /* sqlite3_column_name*/ { .rc = strlen(yaml_data) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_data }, /* sqlite3_column_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_parse_token_unknown_key_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "unknown" }, /* sqlite3_column_name*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_start_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_text_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_private_blob_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_public_blob_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_int_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_step_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_finalize_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); /* Finalize is just a warning */ assert_int_equal(rv, CKR_OK); } static void test_db_update_for_pinchange_commit_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_ERROR }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_emit_attributes_to_string_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_attributes_to_string */ }; will_return(emit_attributes_to_string, &d[0]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite_step_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_prepare_v2, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 0 }, /* sqlite3_last_insert_rowid */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_prepare_v2, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_last_insert_rowid, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_bind_int_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_int, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_step_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_int, &d[2]); will_return(__wrap_sqlite3_step, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_emit_pobject_to_conf_string_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_pobject_to_conf_string */ }; will_return(emit_pobject_to_conf_string, &d[0]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_2_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_3_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_step_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 0 }, /* sqlite3_last_insert_rowid */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_exec, &d[9]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_config_emit_config_to_string_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_config_to_string */ }; will_return(emit_config_to_string, &d[0]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_bind_text_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_bind_int_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_emit_attributes_to_string_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = NULL }, /* emit_attributes_to_string */ }; will_return(emit_attributes_to_string, &d[0]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_bind_text_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_bind_int_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_emit_config_to_string_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = NULL }, /* emit_config_to_string */ }; will_return(emit_config_to_string, &d[0]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_exec_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_int_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_1_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_step_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_last_insert_rowid (zero is bad) */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); will_return(__wrap_sqlite3_finalize, &d[9]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_finalize_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_ERROR }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_exec, &d[9]); will_return(__wrap_sqlite3_finalize, &d[10]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_prepare_v2_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_exec, &d[10]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_int_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_exec, &d[11]); will_return(__wrap_sqlite3_finalize, &d[12]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_3_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_exec, &d[12]); will_return(__wrap_sqlite3_finalize, &d[13]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_blob_1_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_exec, &d[13]); will_return(__wrap_sqlite3_finalize, &d[14]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_blob_2_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_bind_blob, &d[13]); will_return(__wrap_sqlite3_exec, &d[14]); will_return(__wrap_sqlite3_finalize, &d[15]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_step_2_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_bind_blob, &d[13]); will_return(__wrap_sqlite3_step, &d[14]); will_return(__wrap_sqlite3_exec, &d[15]); will_return(__wrap_sqlite3_finalize, &d[16]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_db_get_blob_col_bytes_0), cmocka_unit_test(test_db_get_blob_null_col_bytes_0), cmocka_unit_test(test_db_get_blob_alloc_fail), cmocka_unit_test(db_tobject_new_tobject_alloc_fail), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_column_unknown_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_column_text_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_attrs_text_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_object_init_from_attrs_fail, tobject_setup), cmocka_unit_test(init_tobjects_db_tobject_new_fail), cmocka_unit_test(init_pobject_v3_from_stmt_sqlite3_column_text_fail), cmocka_unit_test(init_pobject_v3_from_stmt_strdup_fail), cmocka_unit_test(init_pobject_v3_from_stmt__get_blob_fail), cmocka_unit_test(init_pobject_v3_from_stmt_sqlite3_column_text2_fail), cmocka_unit_test(init_pobject_v3_from_stmt_strdup2_fail), cmocka_unit_test(init_tobjects_sqlite3_prepare_v2_fail), cmocka_unit_test(init_tobjects_sqlite3_bind_int), cmocka_unit_test_setup(init_tobjects_token_add_tobject_last_fail, tobject_setup), cmocka_unit_test(test_convert_pobject_v3_to_v4_emit_pobject_to_conf_string_fail), cmocka_unit_test(test_db_add_pobject_v4_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_pobject_v4_sqlite3_step_fail), cmocka_unit_test(test_init_pobject_from_stmt_parse_pobject_config_from_string_fail), cmocka_unit_test(test_init_pobject_from_stmt_not_transient_no_blob_fail), cmocka_unit_test(test_init_pobject_from_stmt_tpm_deserialize_handle_fail), cmocka_unit_test(test_init_pobject_from_stmt_tpm_create_transient_primary_from_template_fail), cmocka_unit_test(test_init_pobject_from_stmt_missing_template_name_fail), cmocka_unit_test(test_init_pobject_from_stmt_twist_new_fail), cmocka_unit_test(test_init_pobject_from_stmt_sqlite_step_fail), cmocka_unit_test(test_init_pobject_sqlite_prepare_v2_fail), cmocka_unit_test(test_init_pobject_sqlite_bind_int_fail), cmocka_unit_test(test_init_pobject_sqlite_step_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_prepare_v2_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_bind_int_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_step_fail), cmocka_unit_test(test_init_sealobjects_bad_col_name_fail), cmocka_unit_test_setup(test_db_get_tokens_sqlite3_prepare_v2_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_token_overcount_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_token_min_init_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_pobjects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_seal_objects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_tobjects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_config_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_parse_token_config_from_string_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_parse_token_unknown_key_fail, test_db_get_tokens_setup), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_for_pinchange_start_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_private_blob_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_public_blob_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_step_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_finalize_fail), cmocka_unit_test(test_db_update_for_pinchange_commit_fail), cmocka_unit_test(test_db_add_new_object_emit_attributes_to_string_fail), cmocka_unit_test(test_db_add_new_object_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_new_object_sqlite_step_fail), cmocka_unit_test(test_db_add_new_object_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_delete_object_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_delete_object_sqlite3_bind_int_fail), cmocka_unit_test(test_db_delete_object_sqlite3_step_fail), cmocka_unit_test(test_db_db_add_primary_emit_pobject_to_conf_string_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_2_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_3_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_step_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_update_token_config_emit_config_to_string_fail), cmocka_unit_test(test_db_update_token_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_token_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_token_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_tobject_attrs_emit_attributes_to_string_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_step_fail), cmocka_unit_test(test_db_add_token_emit_config_to_string_fail), cmocka_unit_test(test_db_add_token_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_token_sqlite3_exec_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_int_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_1_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_step_fail), cmocka_unit_test(test_db_add_token_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_add_token_sqlite3_finalize_fail), cmocka_unit_test(test_db_add_token_sqlite3_prepare_v2_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_int_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_3_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_blob_1_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_blob_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_step_2_fail) }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/unit/test_utils.c0000664000175000017500000000314514114240163014724 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "utils.h" static void test_parse_lib_version(void **state) { (void) state; CK_BYTE major = 0xFF; CK_BYTE minor = 0xFF; parse_lib_version("1", &major, &minor); assert_int_equal(major, 1); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("5.2", &major, &minor); assert_int_equal(major, 5); assert_int_equal(minor, 2); major = 0xFF; minor = 0xFF; parse_lib_version("9.8.7", &major, &minor); assert_int_equal(major, 9); assert_int_equal(minor, 8); major = 0xFF; minor = 0xFF; parse_lib_version("1.6.0-42-gb462a23778ea-dirty", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("1.6.0-", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version(NULL, &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_parse_lib_version), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/unit/test_log.c0000644000175000017500000000144013754763565014370 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "log.h" #include "utils.h" void test_log_levels(void **state) { (void) state; char *levels[] = {"abc", "-1", "0", "1", "2", "3", "4"}; for (int i = 0; i < 7; i++) { setenv("TPM2_PKCS11_LOG_LEVEL", levels[i], 1); LOGV("Test %i", i); LOGW("Test %i", i); LOGE("Test %i", i); } } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_log_levels), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/unit/test_twist.c0000664000175000017500000006777714114236775015001 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "twist.h" #include "utils.h" extern void twist_next_alloc_fails(void); void test_twist_new(void **state) { (void) state; char *expected = "Hello World"; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); twist_free(actual); } void test_twist_new_0_len(void **state) { (void) state; char *expected = ""; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); assert_int_equal(actual[twist_len(actual)], '\0'); twist_free(actual); } void test_twist_new_bad_alloc(void **state) { (void) state; twist_next_alloc_fails(); twist actual = twist_new("I should be null"); assert_null(actual); } void test_twist_new_empty(void **state) { (void) state; char *expected = ""; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); twist_free(actual); } void test_twist_new_null(void **state) { (void) state; twist actual = twist_new(NULL ); assert_null(actual); } void test_twist_calloc_zero(void **state) { UNUSED(state); assert_null(twist_calloc(0)); } void test_twist_calloc_many(void **state) { UNUSED(state); twist t = twist_calloc(42); assert_non_null(t); assert_int_equal(42, twist_len(t)); twist_free(t); } void test_twist_create(void **state) { (void) state; const char *expected = "onetwothreefourfive"; const char *data[] = { "one", "two", "three", "four", "five" }; twist actual = twist_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, (char * )actual); twist_free(actual); } void test_twist_create_null(void **state) { (void) state; twist actual = twist_create(NULL, 42); assert_null(actual); } void test_twist_create_embedded_null(void **state) { (void) state; const char *expected = "onetwothreefourfive"; const char *data[] = { NULL, "one", NULL, "two", "three", "four", NULL, "five", NULL }; twist actual = twist_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_dup(void **state) { (void) state; twist actual = twist_new("Hello World"); assert_non_null(actual); twist expected = twist_dup(actual); assert_non_null(expected); assert_true(twist_eq(actual, expected)); twist_free(actual); twist_free(expected); } void test_twist_dup_empty(void **state) { (void) state; twist actual = twist_new(""); assert_non_null(actual); twist expected = twist_dup(actual); assert_non_null(expected); assert_true(twist_eq(actual, expected)); twist_free(actual); twist_free(expected); } void test_twist_dup_null(void **state) { (void) state; twist actual = twist_dup(NULL ); assert_null(actual); } void test_twist_end(void **state) { (void) state; twist x = twist_new("OMG Its a string!"); assert_non_null(x); char *end = twist_end(x); assert_non_null(x); assert_ptr_equal((void * )x + twist_len(x) - 1, (void * )end); assert_int_equal(*end, '!'); twist_free(x); } void test_twist_end_null(void **state) { (void) state; char *end = twist_end(NULL ); assert_null(end); } void test_twist_free_null(void **state) { UNUSED(state); twist_free(NULL); } void test_twist_concat(void **state) { (void) state; const char *expected = "Original String - Concatenated part"; twist original = twist_new("Original String"); assert_non_null(original); twist actual = twist_concat(original, " - Concatenated part"); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(original); twist_free(actual); } void test_twist_concat_empty(void **state) { (void) state; const char *expected = "Original String"; twist original = twist_new(expected); assert_non_null(original); twist actual = twist_concat(original, ""); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(original); twist_free(actual); } void test_twistbin_create(void **state) { (void) state; const char ex[] = { 0xAA, 0x00, 0xBB, 0xCC, 0x00, 0xDD, 0xDD, 0x00, 0xEE, 0xEE, 0x00, 0xFF }; const binarybuffer data[] = { { .data = ex, .size = 3 }, { .data = &ex[3], .size = 3 }, { .data = &ex[6], .size = 3 }, { .data = &ex[9], .size = 3 } }; twist expected = twistbin_new(ex, ARRAY_LEN(ex)); assert_non_null(expected); twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_true(twist_eq(expected, actual)); twist_free(expected); twist_free(actual); } void test_twistbin_new_overflow_1(void **state) { (void) state; #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" twist actual = twistbin_new((void *) 0xDEADBEEF, ~0); assert_null(actual); #pragma GCC diagnostic pop } void test_twistbin_new_overflow_2(void **state) { (void) state; #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" twist actual = twistbin_new((void *) 0xDEADBEEF, ~0 - sizeof(void *)); assert_null(actual); #pragma GCC diagnostic pop } void test_twistbin_new_overflow_3(void **state) { (void) state; twist old = twist_new("hahahahahahahahahahahahaha"); assert_non_null(old); twist actual = twistbin_append(old, (void *) 0xDEADBEEF, ~0 - sizeof(void *) - 4); assert_null(actual); twist_free(old); } void test_twistbin_new_overflow_4(void **state) { (void) state; binarybuffer data[] = { { .data = (void *) 0xDEADBEEF, .size = ~0 }, { .data = (void *) 0xBADCC0DE, .size = 1 }, }; twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_null(actual); } void test_twistbin_aappend(void **state) { (void) state; const char *expected = "No one likes youOMGtests are fun"; twist old = twist_new("No one likes you"); assert_non_null(old); binarybuffer data[] = { { .data = "OMG", .size = 3 }, { .data = "tests are fun", .size = 13 } }; twist actual = twistbin_aappend(old, data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_aappend_null_array(void **state) { (void) state; const char *expected = "OMGtests are fun"; binarybuffer data[] = { { .data = "OMG", .size = 3 }, { .data = NULL, .size = 0 }, { .data = "tests are fun", .size = 13 } }; twist actual = twistbin_aappend(NULL, data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_aappend_twist_null(void **state) { (void) state; twist expected = twist_new("foo"); twist actual = twistbin_aappend(expected, NULL, 42); assert_ptr_equal((void * )actual, (void * )expected); #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" actual = twistbin_aappend(expected, (binarybuffer *) 0xDEADBEEF, 0); assert_ptr_equal((void * )actual, (void * )expected); #pragma GCC diagnostic pop twist_free(actual); } void test_twistbin_create_null(void **state) { (void) state; twist actual = twistbin_create(NULL, 010101); assert_null(actual); } void test_twistbin_create_embedded_null(void **state) { (void) state; const char ex[] = { 0xAA, 0x00, 0xBB, 0xDD, 0x00, 0xEE, 0xEE, 0x00, 0xFF }; const binarybuffer data[] = { { .data = ex, .size = 3 }, { .data = NULL, .size = 0 }, { .data = &ex[3], .size = 3 }, { .data = &ex[6], .size = 3 }, }; twist expected = twistbin_new(ex, ARRAY_LEN(ex)); assert_non_null(expected); twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_true(twist_eq(expected, actual)); twist_free(expected); twist_free(actual); } void test_twistbin_concat(void **state) { (void) state; const char old_str[] = { 0xAA, 0xBB, 0x00, 0xCC }; const char new_str[] = { 0x11, 0x00, 0x22, 0x33 }; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC, 0x11, 0x00, 0x22, 0x33 }; twist original = twistbin_new(old_str, ARRAY_LEN(old_str)); assert_non_null(original); twist actual = twistbin_concat(original, new_str, ARRAY_LEN(new_str)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(original); twist_free(actual); } void test_twistbin_concat_twist_null(void **state) { (void) state; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC }; twist original = twistbin_new(expected, ARRAY_LEN(expected)); assert_non_null(original); twist actual = twistbin_concat(original, NULL, 0); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(original); twist_free(actual); } void test_twistbin_concat_null_data(void **state) { (void) state; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC }; twist actual = twistbin_concat(NULL, expected, ARRAY_LEN(expected)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); } void test_twist_concat_twist_null(void **state) { (void) state; twist expected = twist_new("Original String"); assert_non_null(expected); twist actual = twist_concat(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(expected); } void test_twist_concat_null_null(void **state) { (void) state; assert_null(twist_concat(NULL, NULL)); } void test_twist_concat_empty_null(void **state) { (void) state; twist expected = twist_new(""); assert_non_null(expected); twist actual = twist_concat(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(expected); } void test_twist_concat_null_empty(void **state) { (void) state; const char *expected = ""; twist actual = twist_concat(NULL, expected); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_concat_twist(void **state) { (void) state; const char *expected = "Original String - Concatenated part"; twist original = twist_new("Original String"); assert_non_null(original); twist part_to_add = twist_new(" - Concatenated part"); twist actual = twist_concat_twist(original, part_to_add); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(original); twist_free(part_to_add); } void test_twist_concat_twist_null_null(void **state) { (void) state; assert_null(twist_concat_twist(NULL, NULL)); } void test_twist_concat_twist_twist_null(void **state) { (void) state; const char *expected = "Original String"; twist original = twist_new("Original String"); assert_non_null(original); twist actual = twist_concat_twist(original, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(original); } void test_twist_concat_twist_null_twist(void **state) { (void) state; const char *expected = " - Concatenated part"; twist part_to_add = twist_new(expected); assert_non_null(part_to_add); twist actual = twist_concat_twist(NULL, part_to_add); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(part_to_add); } void test_twist_eq_equality(void **state) { (void) state; const char *expected = "im equal"; twist actual1 = twist_new(expected); assert_non_null(actual1); twist actual2 = twist_new(expected); assert_non_null(actual2); assert_string_equal(expected, actual1); assert_string_equal(expected, actual2); assert_true(twist_eq(actual1, actual2)); twist_free(actual1); twist_free(actual2); } void test_twist_eq_equality_null_null(void **state) { (void) state; assert_true(twist_eq(NULL, NULL)); } void test_twist_eq_equality_twist_null(void **state) { (void) state; twist x = twist_new("A twist string"); assert_non_null(x); assert_false(twist_eq(x, NULL)); twist_free(x); } void test_twist_eq_equality_null_twist(void **state) { (void) state; twist x = twist_new("A twist string"); assert_non_null(x); assert_false(twist_eq(NULL, x)); twist_free(x); } void test_twist_eq_not_equality(void **state) { (void) state; twist different1 = twist_new("I'm something"); assert_non_null(different1); twist different2 = twist_new("I'm something different"); assert_non_null(different2); assert_false(twist_eq(different1, different2)); twist_free(different1); twist_free(different2); } void test_twistbin_new_bin_dup_eq(void **state) { (void) state; uint8_t expected[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; twist original = twistbin_new(expected, ARRAY_LEN(expected)); assert_non_null(original); assert_int_equal(twist_len(original), ARRAY_LEN(expected)); twist actual = twist_dup(original); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); assert_true(twist_eq(original, actual)); twist_free(original); twist_free(actual); } void test_twistbin_new_null(void **state) { (void) state; assert_null(twistbin_new(NULL, 0)); } void test_twistbin_new_not_eq(void **state) { (void) state; uint8_t data1[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; uint8_t data2[] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0xAA, 0xBB, 0xCC, 0xDD, 0xEE }; twist x = twistbin_new(data1, ARRAY_LEN(data1)); assert_non_null(x); twist y = twistbin_new(data2, ARRAY_LEN(data2)); assert_non_null(y); assert_int_equal(twist_len(x), ARRAY_LEN(data1)); assert_int_equal(twist_len(y), ARRAY_LEN(data2)); assert_memory_not_equal(x, y, twist_len(x)); assert_false(twist_eq(x, y)); twist_free(x); twist_free(y); } void test_twistbin_new_not_eq_diff_lengths(void **state) { (void) state; uint8_t data1[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; uint8_t data2[] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0xAA, 0xBB }; twist x = twistbin_new(data1, ARRAY_LEN(data1)); assert_non_null(x); twist y = twistbin_new(data2, ARRAY_LEN(data2)); assert_non_null(y); assert_int_equal(twist_len(x), ARRAY_LEN(data1)); assert_int_equal(twist_len(y), ARRAY_LEN(data2)); assert_memory_not_equal(x, y, twist_len(x)); assert_false(twist_eq(x, y)); twist_free(x); twist_free(y); } void test_twist_append(void **state) { (void) state; const char *expected = "My Original String - cool"; twist original = twist_new("My Original String"); assert_non_null(original); twist actual = twist_append(original, " - cool"); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_append_bad_alloc(void **state) { (void) state; twist original = twist_new("I'm Good"); assert_non_null(original); twist_next_alloc_fails(); twist actual = twist_append(original, "I fail"); assert_null(actual); twist_free(original); } void test_twistbin_append(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; const char second[] = { 0x00, 'x', 0x00 }; const char expected[] = { 0x01, 0x55, 'A', 'B', 0x00, 'x', 0x00 }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twistbin_append(tfirst, second, ARRAY_LEN(second)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); } void test_twist_append_twist(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; const char second[] = { 0x00, 'x', 0x00 }; const char expected[] = { 0x01, 0x55, 'A', 'B', 0x00, 'x', 0x00 }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist tsecond = twistbin_new(second, ARRAY_LEN(second)); assert_non_null(tsecond); twist actual = twist_append_twist(tfirst, tsecond); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); twist_free(tsecond); } void test_twist_append_twist_null(void **state) { (void) state; twist expected = twist_new("My Original String"); assert_non_null(expected); twist actual = twist_append(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); assert_true(twist_eq(actual, expected)); twist_free(actual); } void test_twistbin_append_twist_null(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twistbin_append(tfirst, NULL, 0); assert_non_null(actual); assert_ptr_equal((void * )tfirst, (void * )actual); assert_memory_equal(first, actual, ARRAY_LEN(first)); twist_free(actual); } void test_twist_append_twist_twist_null(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twist_append_twist(tfirst, NULL ); assert_non_null(actual); assert_ptr_equal((void * )tfirst, (void * )actual); assert_memory_equal(first, actual, ARRAY_LEN(first)); twist_free(actual); } void test_twist_append_null_string(void **state) { (void) state; const char *expected = "this is some string"; twist actual = twist_append(NULL, expected); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_append_null_string(void **state) { (void) state; const char second[] = { 0x01, 0x00, 'A', 'B' }; twist actual = twistbin_append(NULL, second, ARRAY_LEN(second)); assert_non_null(actual); assert_memory_equal(second, actual, ARRAY_LEN(second)); twist_free(actual); } void test_twist_append_twist_null_string(void **state) { (void) state; const char second[] = { 0x01, 0x00, 'A', 'B' }; twist tsecond = twistbin_new(second, ARRAY_LEN(second)); assert_non_null(tsecond); twist actual = twist_append_twist(NULL, tsecond); assert_non_null(actual); assert_memory_equal(second, actual, ARRAY_LEN(second)); twist_free(actual); } void test_twist_append_null_null(void **state) { (void) state; assert_null(twist_append(NULL, NULL)); } void test_twistbin_append_null_null(void **state) { (void) state; assert_null(twistbin_append(NULL, NULL, 0)); } void test_twist_append_twist_null_null(void **state) { (void) state; assert_null(twist_append_twist(NULL, NULL)); } void test_twist_truncate_smaller(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len - 4); assert_non_null(actual); assert_int_equal(orig_len - 4, twist_len(actual)); twist_free(actual); } void test_twist_truncate_bigger(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len + 104); assert_non_null(actual); assert_int_equal(orig_len + 104, twist_len(actual)); twist_free(actual); } void test_twist_truncate_bigger_bad_alloc(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist_next_alloc_fails(); twist actual = twist_truncate(original, orig_len + 104); assert_null(actual); twist_free(original); } void test_twist_truncate_same(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len); assert_non_null(actual); assert_int_equal(orig_len, twist_len(actual)); assert_ptr_equal((void * )original, (void * )actual); twist_free(actual); } void test_twist_truncate_zero(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); twist actual = twist_truncate(original, 0); assert_non_null(actual); assert_int_equal(0, twist_len(actual)); twist_free(actual); } void test_twist_truncate_null(void **state) { (void) state; assert_null(twist_truncate(NULL, 0)); } void test_twist_unhexlify_null(void **state) { (void) state; twist null = twistbin_unhexlify(NULL); assert_null(null); } void test_twist_unhexlify_0_len(void **state) { (void) state; twist zero_len = twistbin_unhexlify(""); assert_int_equal(twist_len(zero_len), 0); assert_int_equal(zero_len[0], '\0'); twist_free(zero_len); } void test_twist_unhexlify_odd_len(void **state) { (void) state; twist odd = twistbin_unhexlify("a"); assert_null(odd); odd = twistbin_unhexlify("abc"); assert_null(odd); odd = twistbin_unhexlify("defab"); assert_null(odd); } void test_twist_unhexlify_even_len(void **state) { (void) state; /* Test all the characters */ char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0xab, 0xcd, 0xef }; twist even = twistbin_unhexlify("0123456789ABCDEFabcdef"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); assert_int_equal(sizeof(raw), twist_len(even)); assert_memory_equal(even, raw, sizeof(raw)); twist_free(even); /* test smallest valid */ even = twistbin_unhexlify("01"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); twist_free(even); even = twistbin_unhexlify("01a2b3c4"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); twist_free(even); } void test_twist_unhexlify_bad_chars(void **state) { (void) state; /* Test all bad characters */ twist bad = twistbin_unhexlify("-(*&"); assert_null(bad); /* Test start good end bad */ bad = twistbin_unhexlify("abcdef0123-(*&"); assert_null(bad); /* Test start bad end good*/ bad = twistbin_unhexlify("-+=~`abcdef"); assert_null(bad); /* test upper nibble good lower bad */ bad = twistbin_unhexlify("a-"); assert_null(bad); } void test_twist_unhexlify_failed_alloc(void **state) { (void) state; /* Test all bad characters */ twist_next_alloc_fails(); twist bad = twistbin_unhexlify("abcd"); assert_null(bad); } void test_twist_hexlify_null(void **state) { (void) state; twist null = twist_hexlify(NULL); assert_null(null); } void test_twist_hexlify_0_len(void **state) { (void) state; twist zero_len = twist_new(""); twist hex_zero_len = twist_hexlify(zero_len); assert_int_equal(twist_len(hex_zero_len), 0); assert_int_equal(hex_zero_len[0], '\0'); twist_free(hex_zero_len); twist_free(zero_len); } void test_twist_hexlify_good(void **state) { (void) state; char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw_data = twistbin_new(raw, sizeof(raw)); twist hex_data = twist_hexlify(raw_data); assert_int_equal(twist_len(hex_data), sizeof(raw) * 2); assert_int_equal(hex_data[twist_len(hex_data)], '\0'); assert_true(!strcasecmp("0123456789ABCDEF", hex_data)); twist_free(hex_data); twist_free(raw_data); } void test_twist_hexlify_alloc_fail(void **state) { (void) state; char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw_data = twistbin_new(raw, sizeof(raw)); twist_next_alloc_fails(); twist hex_data = twist_hexlify(raw_data); assert_null(hex_data); twist_free(raw_data); } void test_twist_hexlify_unhelify(void **state) { (void) state; char *raw_hex = "0123456789ABCDEF"; char raw_data[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw = twistbin_new(raw_data, sizeof(raw_data)); twist hex = twist_hexlify(raw); assert_int_equal(sizeof(raw_data), twist_len(raw)); assert_int_equal(strlen(raw_hex), twist_len(hex)); assert_true(!strcasecmp(raw_hex, hex)); assert_memory_equal(raw_data, raw, sizeof(raw_data)); twist_free(raw); twist_free(hex); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_twist_new), cmocka_unit_test(test_twist_new_0_len), cmocka_unit_test(test_twist_new_bad_alloc), cmocka_unit_test(test_twist_new_empty), cmocka_unit_test(test_twist_new_null), cmocka_unit_test(test_twist_create), cmocka_unit_test(test_twist_create_null), cmocka_unit_test(test_twist_create_embedded_null), cmocka_unit_test(test_twist_dup), cmocka_unit_test(test_twist_dup_empty), cmocka_unit_test(test_twist_dup_null), cmocka_unit_test(test_twist_end), cmocka_unit_test(test_twist_end_null), cmocka_unit_test(test_twist_free_null), cmocka_unit_test(test_twist_concat), cmocka_unit_test(test_twist_concat_empty), cmocka_unit_test(test_twistbin_create), cmocka_unit_test(test_twistbin_new_overflow_1), cmocka_unit_test(test_twistbin_new_overflow_2), cmocka_unit_test(test_twistbin_new_overflow_3), cmocka_unit_test(test_twistbin_new_overflow_4), cmocka_unit_test(test_twistbin_aappend), cmocka_unit_test(test_twistbin_aappend_null_array), cmocka_unit_test(test_twistbin_aappend_twist_null), cmocka_unit_test(test_twistbin_create_null), cmocka_unit_test(test_twistbin_create_embedded_null), cmocka_unit_test(test_twistbin_concat), cmocka_unit_test(test_twistbin_concat_twist_null), cmocka_unit_test(test_twistbin_concat_null_data), cmocka_unit_test(test_twist_concat_twist_null), cmocka_unit_test(test_twist_concat_null_null), cmocka_unit_test(test_twist_concat_empty_null), cmocka_unit_test(test_twist_concat_null_empty), cmocka_unit_test(test_twist_concat_twist), cmocka_unit_test(test_twist_concat_twist_null_null), cmocka_unit_test(test_twist_concat_twist_twist_null), cmocka_unit_test(test_twist_concat_twist_null_twist), cmocka_unit_test(test_twist_eq_equality), cmocka_unit_test(test_twist_eq_equality_null_null), cmocka_unit_test(test_twist_eq_equality_twist_null), cmocka_unit_test(test_twist_eq_equality_null_twist), cmocka_unit_test(test_twist_eq_not_equality), cmocka_unit_test(test_twistbin_new_bin_dup_eq), cmocka_unit_test(test_twistbin_new_null), cmocka_unit_test(test_twistbin_new_not_eq), cmocka_unit_test(test_twistbin_new_not_eq_diff_lengths), cmocka_unit_test(test_twist_append), cmocka_unit_test(test_twist_append_bad_alloc), cmocka_unit_test(test_twistbin_append), cmocka_unit_test(test_twist_append_twist), cmocka_unit_test(test_twist_append_twist_null), cmocka_unit_test(test_twistbin_append_twist_null), cmocka_unit_test(test_twist_append_twist_twist_null), cmocka_unit_test(test_twist_append_null_string), cmocka_unit_test(test_twistbin_append_null_string), cmocka_unit_test(test_twist_append_twist_null_string), cmocka_unit_test(test_twist_append_null_null), cmocka_unit_test(test_twistbin_append_null_null), cmocka_unit_test(test_twist_append_twist_null_null), cmocka_unit_test(test_twist_truncate_smaller), cmocka_unit_test(test_twist_truncate_bigger), cmocka_unit_test(test_twist_truncate_bigger_bad_alloc), cmocka_unit_test(test_twist_truncate_same), cmocka_unit_test(test_twist_truncate_zero), cmocka_unit_test(test_twist_truncate_null), cmocka_unit_test(test_twist_unhexlify_null), cmocka_unit_test(test_twist_unhexlify_0_len), cmocka_unit_test(test_twist_unhexlify_odd_len), cmocka_unit_test(test_twist_unhexlify_even_len), cmocka_unit_test(test_twist_unhexlify_bad_chars), cmocka_unit_test(test_twist_unhexlify_failed_alloc), cmocka_unit_test(test_twist_hexlify_null), cmocka_unit_test(test_twist_hexlify_0_len), cmocka_unit_test(test_twist_hexlify_good), cmocka_unit_test(test_twist_hexlify_alloc_fail), cmocka_unit_test(test_twist_hexlify_unhelify), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/test/unit/test_parser.c0000644000175000017500000003545213754763565015115 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "attrs.h" #include "parser.h" /* yaml file processed with xxd -i */ static unsigned char _attrs_yaml[] = { 0x2d, 0x2d, 0x2d, 0x0a, 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x33, 0x39, 0x33, 0x31, 0x33, 0x32, 0x33, 0x37, 0x33, 0x32, 0x36, 0x35, 0x33, 0x33, 0x33, 0x39, 0x33, 0x35, 0x33, 0x39, 0x33, 0x39, 0x36, 0x32, 0x36, 0x36, 0x33, 0x39, 0x36, 0x35, 0x33, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x39, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x30, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x31, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x32, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x33, 0x33, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x32, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x7d, 0x0a }; static unsigned int _attrs_yaml_len = 774; static void test_attr_parser_good(void **state) { (void) state; attr_list *attrs = NULL; bool res = parse_attributes_from_string(_attrs_yaml, _attrs_yaml_len, &attrs); assert_true(res); assert_non_null(attrs); assert_int_equal(attr_list_get_count(attrs), 20); attr_list_free(attrs); } static unsigned char _config_yaml[] = { 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x2d, 0x69, 0x6e, 0x69, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x7d, 0x0a, 0x0a }; static unsigned int _config_yaml_len = 53; static void test_config_parser_good(void **state) { (void) state; token_config config = { 0 }; bool res = parse_token_config_from_string(_config_yaml, _config_yaml_len, &config); assert_true(res); assert_true(config.is_initialized); assert_null(config.tcti); } unsigned char _home_wcrobert_empty_seq_yaml[] = { 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x33, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x36, 0x35, 0x36, 0x36, 0x36, 0x35, 0x33, 0x30, 0x36, 0x32, 0x33, 0x32, 0x36, 0x36, 0x36, 0x31, 0x33, 0x30, 0x33, 0x30, 0x36, 0x31, 0x36, 0x31, 0x36, 0x31, 0x36, 0x32, 0x33, 0x39, 0x33, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x39, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x32, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x32, 0x32, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x36, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x36, 0x39, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x37, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x31, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x32, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x33, 0x33, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x32, 0x32, 0x36, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x7d, 0x0a, 0x22, 0x0a }; unsigned int _home_wcrobert_empty_seq_yaml_len = 1155; static void test_config_parser_empty_seq(void **state) { (void) state; attr_list *attrs = NULL; bool res = parse_attributes_from_string(_attrs_yaml, _attrs_yaml_len, &attrs); assert_true(res); assert_non_null(attrs); assert_int_equal(attr_list_get_count(attrs), 20); attr_list_free(attrs); } static void test_token_config_parser_no_tags(void **state) { (void) state; token_config conf = {0}; const char *yaml_config = "{\n" " pss-sigs-good: true\n" " token-init: true\n" "}"; bool res = parse_token_config_from_string((const unsigned char *)yaml_config, strlen(yaml_config), &conf); assert_false(res); } static void test_token_config_parser_missing_tags(void **state) { (void) state; token_config conf = {0}; const char *yaml_config = "---\n" "!!map {\n" "? !!str \"pss-sigs-good\"\n" ": !!bool \"true\",\n" "\"token-init\"\n" ": !!bool \"true\",\n" "}\n"; bool res = parse_token_config_from_string((const unsigned char *)yaml_config, strlen(yaml_config), &conf); assert_false(res); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_config_parser_empty_seq), cmocka_unit_test(test_attr_parser_good), cmocka_unit_test(test_config_parser_good), cmocka_unit_test(test_token_config_parser_no_tags), cmocka_unit_test(test_token_config_parser_missing_tags), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.7.0/misc/0000775000175000017500000000000014124415534011442 500000000000000tpm2-pkcs11-1.7.0/misc/p11-kit/0000755000175000017500000000000014104753271012627 500000000000000tpm2-pkcs11-1.7.0/misc/p11-kit/tpm2_pkcs11.module0000644000175000017500000000005013754763565016036 00000000000000module: libtpm2_pkcs11.so critical: no tpm2-pkcs11-1.7.0/Makefile-integration.am0000664000175000017500000001251314114240163014777 00000000000000TEST_EXTENSIONS = .sh .int .nosetup .java .fapi integration_scripts = \ test/integration/pkcs11-tool.sh \ test/integration/pkcs11-tool-init.sh.nosetup \ test/integration/p11-tool.sh.nosetup \ test/integration/pkcs11-dbup.sh.nosetup \ test/integration/tls-tests.sh \ test/integration/openssl.sh \ test/integration/pkcs11-javarunner.sh.java \ test/integration/nss-tests.sh \ test/integration/ptool-link.sh.nosetup \ test/integration/python-pkcs11.sh # Note that -fapi.sh.fapi is symlinked to .sh.nosetup # If we'd use the .fapi extension then .nosetup and .fapi overwrite each others .log # thus we use -fapi.sh.fapi as suffix. if HAVE_FAPI integration_scripts += \ test/integration/p11-tool-fapi.sh.fapi \ test/integration/pkcs11-tool-init-fapi.sh.fapi endif EXTRA_DIST += \ $(integration_scripts) \ test/integration/test.h \ test/integration/largebin.h \ test/integration/fixtures ### Integration Tests ### if ENABLE_INTEGRATION check_PROGRAMS += \ test/integration/pkcs-find-objects.int \ test/integration/pkcs-get-mechanism.int \ test/integration/pkcs-get-attribute-value.int \ test/integration/pkcs-login-logout.int \ test/integration/pkcs-sign-verify.int \ test/integration/pkcs-initialize-finalize.int \ test/integration/pkcs-misc.int \ test/integration/pkcs-crypt.int \ test/integration/pkcs-keygen.int \ test/integration/pkcs-session-state.int \ test/integration/pkcs-lockout.int # add test scripts check_SCRIPTS += $(integration_scripts) AM_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) LOG_COMPILER = $(srcdir)/test/integration/scripts/int-test-setup.sh AM_INT_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh INT_LOG_COMPILER=$(LOG_COMPILER) AM_SH_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh SH_LOG_COMPILER=$(LOG_COMPILER) AM_NOSETUP_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) NOSETUP_LOG_COMPILER=$(LOG_COMPILER) AM_FAPI_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) FAPI_LOG_COMPILER=env TPM2_PKCS11_BACKEND=fapi $(LOG_COMPILER) test_integration_pkcs_find_objects_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_find_objects_int_LDADD = $(TESTS_LDADD) test_integration_pkcs_find_objects_int_SOURCES = test/integration/pkcs-find-objects.int.c test/integration/test.c test_integration_pkcs_get_mechanism_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_get_mechanism_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_get_mechanism_int_SOURCES = test/integration/pkcs-get-mechanism.int.c test/integration/test.c test_integration_pkcs_get_attribute_value_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_get_attribute_value_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_get_attribute_value_int_SOURCES = test/integration/pkcs-get-attribute-value.int.c test/integration/test.c test_integration_pkcs_login_logout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_login_logout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_login_logout_int_SOURCES = test/integration/pkcs-login-logout.int.c test/integration/test.c test_integration_pkcs_sign_verify_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_sign_verify_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_sign_verify_int_SOURCES = test/integration/pkcs-sign-verify.int.c test/integration/test.c test_integration_pkcs_initialize_finalize_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_initialize_finalize_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_initialize_finalize_int_SOURCES = test/integration/pkcs-initialize-finalize.int.c test/integration/test.c test_integration_pkcs_misc_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_misc_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_misc_int_SOURCES = test/integration/pkcs-misc.int.c test/integration/test.c test_integration_pkcs_crypt_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_crypt_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_crypt_int_SOURCES = test/integration/pkcs-crypt.int.c test/integration/test.c test_integration_pkcs_keygen_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_keygen_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_keygen_int_SOURCES = test/integration/pkcs-keygen.int.c test/integration/test.c test_integration_pkcs_session_state_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_session_state_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_session_state_int_SOURCES = test/integration/pkcs-session-state.c test/integration/test.c test_integration_pkcs_lockout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_lockout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_lockout_int_SOURCES = test/integration/pkcs-lockout.int.c test/integration/test.c # # Java Tests # AM_JAVA_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh JAVA_LOG_COMPILER=$(LOG_COMPILER) dist_noinst_JAVA = test/integration/PKCS11JavaTests.java CLEANFILES += test/integration/PKCS11JavaTests.class endif # END INTEGRATION tpm2-pkcs11-1.7.0/Makefile-unit.am0000664000175000017500000000462614114240163013441 00000000000000### Unit Tests ### if UNIT ## End of test libraries, start tests ## check_PROGRAMS += \ test/unit/test_twist\ test/unit/test_log \ test/unit/test_parser \ test/unit/test_attr \ test/unit/test_db \ test/unit/test_utils test_unit_test_twist_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_twist_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_log_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_log_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_parser_CFLAGS = $(AM_CFLAGS) $(YAML_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_parser_LDADD = $(CMOCKA_LIBS) $(YAML_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_attr_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_attr_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_db_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(SQLITE3_CFLAGS) test_unit_test_db_LDADD = $(CMOCKA_LIBS) $(SQLITE3_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_db_LDFLAGS = -Wl,--wrap=sqlite3_column_bytes \ -Wl,--wrap=sqlite3_column_blob \ -Wl,--wrap=sqlite3_data_count \ -Wl,--wrap=sqlite3_column_name \ -Wl,--wrap=sqlite3_column_bytes \ -Wl,--wrap=sqlite3_column_text \ -Wl,--wrap=sqlite3_column_int \ -Wl,--wrap=sqlite3_prepare_v2 \ -Wl,--wrap=sqlite3_finalize \ -Wl,--wrap=sqlite3_bind_blob \ -Wl,--wrap=sqlite3_bind_int \ -Wl,--wrap=sqlite3_bind_text \ -Wl,--wrap=sqlite3_errmsg \ -Wl,--wrap=sqlite3_step \ -Wl,--wrap=sqlite3_exec \ -Wl,--wrap=sqlite3_last_insert_rowid \ -Wl,--wrap=strdup \ -Wl,--wrap=calloc test_unit_test_utils_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_utils_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) endif # END UNIT tpm2-pkcs11-1.7.0/Makefile.am0000664000175000017500000001054714002334134012461 00000000000000# SPDX-License-Identifier: BSD-2-Clause INCLUDE_DIRS = -I$(srcdir)/src -I$(top_srcdir)/src/lib ACLOCAL_AMFLAGS = -I m4 --install AM_CFLAGS = $(INCLUDE_DIRS) $(EXTRA_CFLAGS) $(CODE_COVERAGE_CFLAGS) \ $(TSS2_ESYS_CFLAGS) $(TSS2_MU_CFLAGS) $(TSS2_TCTILDR_CFLAGS) \ $(TSS2_RC_CFLAGS) $(SQLITE3_CFLAGS) $(PTHREAD_CFLAGS) \ $(CRYPTO_CFLAGS) $(YAML_CFLAGS) $(TSS2_FAPI_CFLAGS) AM_LDFLAGS = $(EXTRA_LDFLAGS) $(CODE_COVERAGE_LIBS) $(TSS2_ESYS_LIBS) \ $(TSS2_MU_LIBS) $(TSS2_TCTILDR_LIBS) $(TSS2_RC_LIBS) \ $(SQLITE3_LIBS) $(PTHREAD_LIBS) $(CRYPTO_LIBS) $(YAML_LIBS) $(TSS2_FAPI_LIBS) check-programs: $(check_PROGRAMS) JAVAROOT=$(top_builddir)/test/integration # ax_code_coverage if AUTOCONF_CODE_COVERAGE_2019_01_06 include $(top_srcdir)/aminclude_static.am clean-local: code-coverage-clean distclean-local: code-coverage-dist-clean else @CODE_COVERAGE_RULES@ endif # Add source code files from bootstrap include src_vars.mk EXTRA_DIST = \ LICENSE \ docs \ test/integration/scripts \ misc/p11-kit \ tools # Generate the AUTHORS file from git log AUTHORS : $(AM_V_GEN)git log --format='%aN <%aE>' | grep -v 'users.noreply.github.com' | sort | \ uniq -c | sort -nr | sed 's/^\s*//' | cut -d" " -f2- > $@ EXTRA_DIST += AUTHORS CLEANFILES = AUTHORS # pkg-config setup. pc-file declarations happen in the corresponding modules pkgconfig_DATA = DISTCLEANFILES = $(pkgconfig_DATA) ### PKCS#11 Library Definition ### libtpm2_pkcs11 = src/libtpm2_pkcs11.la pkgconfig_DATA += lib/tpm2-pkcs11.pc EXTRA_DIST += lib/tpm2-pkcs11.map if HAVE_LD_VERSION_SCRIPT src_libtpm2_pkcs11_la_LDFLAGS = -Wl,--version-script=$(srcdir)/lib/tpm2-pkcs11.map endif # HAVE_LD_VERSION_SCRIPT src_libtpm2_pkcs11_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) $(LIB_PKCS11_INTERNAL_LIB_SRC) if HAVE_P11KIT # Use P11 kit library module install location p11libdir=$(P11_MODULE_PATH) p11lib_LTLIBRARIES = $(libtpm2_pkcs11) # Use P11 kit module config file install location p11configdir=$(P11_CONFIGS_PATH) p11config_DATA = $(top_srcdir)/misc/p11-kit/tpm2_pkcs11.module else # Use standard install location when P11Kit is not found lib_LTLIBRARIES = $(libtpm2_pkcs11) endif AM_DISTCHECK_CONFIGURE_FLAGS = --with-p11kitconfigdir='$$(datarootdir)/p11kitconfigdir' --with-p11kitmoduledir='$$(libdir)' # # Due to limitations in how cmocka works, we build a separate library here so we # can have a PKCS11 shared object with undefined calls into the rest of the lib # code. This allows us to deploy a single library, but be able to intercept calls # during linking with ld wrap to mock out various functions. # # UNIT, INTEGRATION and/or FUZZ can use this library. # # src/lib stuff as a separate archive libtpm2_test_pkcs11 = src/libtpm2_test_pkcs11.la src_libtpm2_test_pkcs11_la_LIBADD = $(AM_LDFLAGS) $(libtpm2_test_internal) src_libtpm2_test_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) # Internal Testing Unit libtpm2_test_internal = src/libtpm2_test_internal.la src_libtpm2_test_internal_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_test_internal_la_SOURCES = $(LIB_PKCS11_INTERNAL_LIB_SRC) noinst_LTLIBRARIES = $(libtpm2_test_pkcs11) $(libtpm2_test_internal) if ENABLE_ASAN ASAN_ENABLED="true" else ASAN_ENABLED="" endif if HAVE_FAPI FAPI_ENABLED="true" else FAPI_ENABLED="" endif # test harness configuration AM_TESTS_ENVIRONMENT = \ ASAN_ENABLED=$(ASAN_ENABLED) \ FAPI_ENABLED=$(FAPI_ENABLED) \ T=$(abs_top_srcdir) \ PYTHON_INTERPRETER=@PYTHON_INTERPRETER@ \ TEST_FUNC_LIB=$(srcdir)/test/integration/scripts/int-test-funcs.sh \ TEST_FIXTURES=$(abs_top_srcdir)/test/integration/fixtures \ PATH=$(abs_top_srcdir)/tools:./src:$(PATH) \ PYTHONPATH=$(abs_top_srcdir)/tools \ TPM2_PKCS11_MODULE=$(abs_builddir)/src/.libs/libtpm2_pkcs11.so \ TEST_JAVA_ROOT=$(JAVAROOT) \ PACKAGE_URL=$(PACKAGE_URL) \ CC=$(CC) \ dbus-run-session TESTS_LDADD = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) $(p11lib_LTLIBRARIES) $(AM_LDFLAGS) $(CMOCKA_LIBS) $(CRYPTO_LIBS) TESTS_CFLAGS = $(CMOCKA_CFLAGS) # Intentionally empty so INTEGRATION and UNIT tests can append to it. check_PROGRAMS = check_SCRIPTS = # include integration tests include Makefile-integration.am # include unit tests include Makefile-unit.am # Include fuzz tests include Makefile-fuzz.am TESTS= \ $(check_PROGRAMS) \ $(check_SCRIPTS) tpm2-pkcs11-1.7.0/lib/0000775000175000017500000000000014124415534011255 500000000000000tpm2-pkcs11-1.7.0/lib/tpm2-pkcs11.pc.in0000644000175000017500000000046113754763565014131 00000000000000p11_module_path=@P11_MODULE_PATH@ Name: tpm2-pkcs11 Description: TPM2 PKCS#11 library URL: https://github.com/tpm2-software/tpm2-pkcs11 Version: @VERSION@ Requires.private: tss2-esys tss2-mu sqlite3 libcrypto Cflags: @PTHREAD_CFLAGS@ Libs: -L${p11_module_path} -ltpm2_pkcs11 Libs.private: @PTHREAD_LIBS@ tpm2-pkcs11-1.7.0/lib/tpm2-pkcs11.map0000644000175000017500000000254513754763565013704 00000000000000{ global: C_Initialize; C_Finalize; C_GetInfo; C_GetFunctionList; C_GetSlotList; C_GetSlotInfo; C_GetTokenInfo; C_GetMechanismList; C_GetMechanismInfo; C_InitToken; C_InitPIN; C_SetPIN; C_OpenSession; C_CloseSession; C_CloseAllSessions; C_GetSessionInfo; C_GetOperationState; C_SetOperationState; C_Login; C_Logout; C_CreateObject; C_CopyObject; C_DestroyObject; C_GetObjectSize; C_GetAttributeValue; C_SetAttributeValue; C_FindObjectsInit; C_FindObjects; C_FindObjectsFinal; C_EncryptInit; C_Encrypt; C_EncryptUpdate; C_EncryptFinal; C_DecryptInit; C_Decrypt; C_DecryptUpdate; C_DecryptFinal; C_DigestInit; C_Digest; C_DigestUpdate; C_DigestKey; C_DigestFinal; C_SignInit; C_Sign; C_SignUpdate; C_SignFinal; C_SignRecoverInit; C_SignRecover; C_VerifyInit; C_Verify; C_VerifyUpdate; C_VerifyFinal; C_VerifyRecoverInit; C_VerifyRecover; C_DigestEncryptUpdate; C_DecryptDigestUpdate; C_SignEncryptUpdate; C_DecryptVerifyUpdate; C_GenerateKey; C_GenerateKeyPair; C_WrapKey; C_UnwrapKey; C_DeriveKey; C_SeedRandom; C_GenerateRandom; C_GetFunctionStatus; C_CancelFunction; C_WaitForSlotEvent; local: *; }; tpm2-pkcs11-1.7.0/src/0000775000175000017500000000000014124415534011276 500000000000000tpm2-pkcs11-1.7.0/src/pkcs11.h0000644000175000017500000015656313754763565012531 00000000000000/* pkcs11.h Copyright 2006, 2007 g10 Code GmbH Copyright 2006 Andreas Jellinghaus Copyright 2017 Red Hat, Inc. This file is free software; as a special exception the author gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved. This file is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. */ /* Please submit any changes back to the p11-kit project at https://github.com/p11-glue/p11-kit/, so that they can be picked up by other projects from there as well. */ /* This file is a modified implementation of the PKCS #11 standard by OASIS group. It is mostly a drop-in replacement, with the following change: This header file does not require any macro definitions by the user (like CK_DEFINE_FUNCTION etc). In fact, it defines those macros for you (if useful, some are missing, let me know if you need more). There is an additional API available that does comply better to the GNU coding standard. It can be switched on by defining CRYPTOKI_GNU before including this header file. For this, the following changes are made to the specification: All structure types are changed to a "struct ck_foo" where CK_FOO is the type name in PKCS #11. All non-structure types are changed to ck_foo_t where CK_FOO is the lowercase version of the type name in PKCS #11. The basic types (CK_ULONG et al.) are removed without substitute. All members of structures are modified in the following way: Type indication prefixes are removed, and underscore characters are inserted before words. Then the result is lowercased. Note that function names are still in the original case, as they need for ABI compatibility. CK_FALSE, CK_TRUE and NULL_PTR are removed without substitute. Use . If CRYPTOKI_COMPAT is defined before including this header file, then none of the API changes above take place, and the API is the one defined by the PKCS #11 standard. */ #ifndef PKCS11_H #define PKCS11_H 1 #if defined(__cplusplus) extern "C" { #endif /* The version of cryptoki we implement. The revision is changed with each modification of this file. */ #define CRYPTOKI_VERSION_MAJOR 2 #define CRYPTOKI_VERSION_MINOR 40 #define P11_KIT_CRYPTOKI_VERSION_REVISION 0 /* Compatibility interface is default, unless CRYPTOKI_GNU is given. */ #ifndef CRYPTOKI_GNU #ifndef CRYPTOKI_COMPAT #define CRYPTOKI_COMPAT 1 #endif #endif /* System dependencies. */ #if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32) /* There is a matching pop below. */ #pragma pack(push, cryptoki, 1) #ifdef CRYPTOKI_EXPORTS #define CK_SPEC __declspec(dllexport) #else #define CK_SPEC __declspec(dllimport) #endif #else #define CK_SPEC #endif #ifdef CRYPTOKI_COMPAT /* If we are in compatibility mode, switch all exposed names to the PKCS #11 variant. There are corresponding #undefs below. */ #define ck_flags_t CK_FLAGS #define ck_version _CK_VERSION #define ck_info _CK_INFO #define cryptoki_version cryptokiVersion #define manufacturer_id manufacturerID #define library_description libraryDescription #define library_version libraryVersion #define ck_notification_t CK_NOTIFICATION #define ck_slot_id_t CK_SLOT_ID #define ck_slot_info _CK_SLOT_INFO #define slot_description slotDescription #define hardware_version hardwareVersion #define firmware_version firmwareVersion #define ck_token_info _CK_TOKEN_INFO #define serial_number serialNumber #define max_session_count ulMaxSessionCount #define session_count ulSessionCount #define max_rw_session_count ulMaxRwSessionCount #define rw_session_count ulRwSessionCount #define max_pin_len ulMaxPinLen #define min_pin_len ulMinPinLen #define total_public_memory ulTotalPublicMemory #define free_public_memory ulFreePublicMemory #define total_private_memory ulTotalPrivateMemory #define free_private_memory ulFreePrivateMemory #define utc_time utcTime #define ck_session_handle_t CK_SESSION_HANDLE #define ck_user_type_t CK_USER_TYPE #define ck_state_t CK_STATE #define ck_session_info _CK_SESSION_INFO #define slot_id slotID #define device_error ulDeviceError #define ck_object_handle_t CK_OBJECT_HANDLE #define ck_object_class_t CK_OBJECT_CLASS #define ck_hw_feature_type_t CK_HW_FEATURE_TYPE #define ck_key_type_t CK_KEY_TYPE #define ck_certificate_type_t CK_CERTIFICATE_TYPE #define ck_attribute_type_t CK_ATTRIBUTE_TYPE #define ck_attribute _CK_ATTRIBUTE #define value pValue #define value_len ulValueLen #define count ulCount #define ck_date _CK_DATE #define ck_mechanism_type_t CK_MECHANISM_TYPE #define ck_mechanism _CK_MECHANISM #define parameter pParameter #define parameter_len ulParameterLen #define params pParams #define ck_mechanism_info _CK_MECHANISM_INFO #define min_key_size ulMinKeySize #define max_key_size ulMaxKeySize #define ck_param_type CK_PARAM_TYPE #define ck_otp_param CK_OTP_PARAM #define ck_otp_params CK_OTP_PARAMS #define ck_otp_signature_info CK_OTP_SIGNATURE_INFO #define ck_rv_t CK_RV #define ck_notify_t CK_NOTIFY #define ck_function_list _CK_FUNCTION_LIST #define ck_createmutex_t CK_CREATEMUTEX #define ck_destroymutex_t CK_DESTROYMUTEX #define ck_lockmutex_t CK_LOCKMUTEX #define ck_unlockmutex_t CK_UNLOCKMUTEX #define ck_c_initialize_args _CK_C_INITIALIZE_ARGS #define create_mutex CreateMutex #define destroy_mutex DestroyMutex #define lock_mutex LockMutex #define unlock_mutex UnlockMutex #define reserved pReserved #define ck_rsa_pkcs_mgf_type_t CK_RSA_PKCS_MGF_TYPE #define ck_rsa_pkcs_oaep_source_type_t CK_RSA_PKCS_OAEP_SOURCE_TYPE #define hash_alg hashAlg #define s_len sLen #define source_data pSourceData #define source_data_len ulSourceDataLen #define counter_bits ulCounterBits #define iv_ptr pIv #define iv_len ulIvLen #define iv_bits ulIvBits #define aad_ptr pAAD #define aad_len ulAADLen #define tag_bits ulTagBits #define shared_data_len ulSharedDataLen #define shared_data pSharedData #define public_data_len ulPublicDataLen #define public_data pPublicData #define string_data pData #define string_data_len ulLen #define data_params pData #endif /* CRYPTOKI_COMPAT */ typedef unsigned long ck_flags_t; struct ck_version { unsigned char major; unsigned char minor; }; struct ck_info { struct ck_version cryptoki_version; unsigned char manufacturer_id[32]; ck_flags_t flags; unsigned char library_description[32]; struct ck_version library_version; }; typedef unsigned long ck_notification_t; #define CKN_SURRENDER (0UL) typedef unsigned long ck_slot_id_t; struct ck_slot_info { unsigned char slot_description[64]; unsigned char manufacturer_id[32]; ck_flags_t flags; struct ck_version hardware_version; struct ck_version firmware_version; }; #define CKF_TOKEN_PRESENT (1UL << 0) #define CKF_REMOVABLE_DEVICE (1UL << 1) #define CKF_HW_SLOT (1UL << 2) #define CKF_ARRAY_ATTRIBUTE (1UL << 30) struct ck_token_info { unsigned char label[32]; unsigned char manufacturer_id[32]; unsigned char model[16]; unsigned char serial_number[16]; ck_flags_t flags; unsigned long max_session_count; unsigned long session_count; unsigned long max_rw_session_count; unsigned long rw_session_count; unsigned long max_pin_len; unsigned long min_pin_len; unsigned long total_public_memory; unsigned long free_public_memory; unsigned long total_private_memory; unsigned long free_private_memory; struct ck_version hardware_version; struct ck_version firmware_version; unsigned char utc_time[16]; }; #define CKF_RNG (1UL << 0) #define CKF_WRITE_PROTECTED (1UL << 1) #define CKF_LOGIN_REQUIRED (1UL << 2) #define CKF_USER_PIN_INITIALIZED (1UL << 3) #define CKF_RESTORE_KEY_NOT_NEEDED (1UL << 5) #define CKF_CLOCK_ON_TOKEN (1UL << 6) #define CKF_PROTECTED_AUTHENTICATION_PATH (1UL << 8) #define CKF_DUAL_CRYPTO_OPERATIONS (1UL << 9) #define CKF_TOKEN_INITIALIZED (1UL << 10) #define CKF_SECONDARY_AUTHENTICATION (1UL << 11) #define CKF_USER_PIN_COUNT_LOW (1UL << 16) #define CKF_USER_PIN_FINAL_TRY (1UL << 17) #define CKF_USER_PIN_LOCKED (1UL << 18) #define CKF_USER_PIN_TO_BE_CHANGED (1UL << 19) #define CKF_SO_PIN_COUNT_LOW (1UL << 20) #define CKF_SO_PIN_FINAL_TRY (1UL << 21) #define CKF_SO_PIN_LOCKED (1UL << 22) #define CKF_SO_PIN_TO_BE_CHANGED (1UL << 23) #define CK_UNAVAILABLE_INFORMATION ((unsigned long)-1L) #define CK_EFFECTIVELY_INFINITE (0UL) typedef unsigned long ck_session_handle_t; #define CK_INVALID_HANDLE (0UL) typedef unsigned long ck_user_type_t; #define CKU_SO (0UL) #define CKU_USER (1UL) #define CKU_CONTEXT_SPECIFIC (2UL) typedef unsigned long ck_state_t; #define CKS_RO_PUBLIC_SESSION (0UL) #define CKS_RO_USER_FUNCTIONS (1UL) #define CKS_RW_PUBLIC_SESSION (2UL) #define CKS_RW_USER_FUNCTIONS (3UL) #define CKS_RW_SO_FUNCTIONS (4UL) struct ck_session_info { ck_slot_id_t slot_id; ck_state_t state; ck_flags_t flags; unsigned long device_error; }; #define CKF_RW_SESSION (1UL << 1) #define CKF_SERIAL_SESSION (1UL << 2) typedef unsigned long ck_object_handle_t; typedef unsigned long ck_object_class_t; #define CKO_DATA (0UL) #define CKO_CERTIFICATE (1UL) #define CKO_PUBLIC_KEY (2UL) #define CKO_PRIVATE_KEY (3UL) #define CKO_SECRET_KEY (4UL) #define CKO_HW_FEATURE (5UL) #define CKO_DOMAIN_PARAMETERS (6UL) #define CKO_MECHANISM (7UL) #define CKO_OTP_KEY (8UL) #define CKO_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_hw_feature_type_t; #define CKH_MONOTONIC_COUNTER (1UL) #define CKH_CLOCK (2UL) #define CKH_USER_INTERFACE (3UL) #define CKH_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_key_type_t; #define CKK_RSA (0UL) #define CKK_DSA (1UL) #define CKK_DH (2UL) #define CKK_ECDSA (3UL) #define CKK_EC (3UL) #define CKK_X9_42_DH (4UL) #define CKK_KEA (5UL) #define CKK_GENERIC_SECRET (0x10UL) #define CKK_RC2 (0x11UL) #define CKK_RC4 (0x12UL) #define CKK_DES (0x13UL) #define CKK_DES2 (0x14UL) #define CKK_DES3 (0x15UL) #define CKK_CAST (0x16UL) #define CKK_CAST3 (0x17UL) #define CKK_CAST128 (0x18UL) #define CKK_RC5 (0x19UL) #define CKK_IDEA (0x1aUL) #define CKK_SKIPJACK (0x1bUL) #define CKK_BATON (0x1cUL) #define CKK_JUNIPER (0x1dUL) #define CKK_CDMF (0x1eUL) #define CKK_AES (0x1fUL) #define CKK_BLOWFISH (0x20UL) #define CKK_TWOFISH (0x21UL) #define CKK_SECURID (0x22UL) #define CKK_HOTP (0x23UL) #define CKK_ACTI (0x24UL) #define CKK_CAMELLIA (0x25UL) #define CKK_ARIA (0x26UL) #define CKK_MD5_HMAC (0x27UL) #define CKK_SHA_1_HMAC (0x28UL) #define CKK_RIPEMD128_HMAC (0x29UL) #define CKK_RIPEMD160_HMAC (0x2aUL) #define CKK_SHA256_HMAC (0x2bUL) #define CKK_SHA384_HMAC (0x2cUL) #define CKK_SHA512_HMAC (0x2dUL) #define CKK_SHA224_HMAC (0x2eUL) #define CKK_SEED (0x2fUL) #define CKK_GOSTR3410 (0x30UL) #define CKK_GOSTR3411 (0x31UL) #define CKK_GOST28147 (0x32UL) #define CKK_EC_EDWARDS (0x40UL) #define CKK_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_certificate_type_t; #define CKC_X_509 (0UL) #define CKC_X_509_ATTR_CERT (1UL) #define CKC_WTLS (2UL) #define CKC_VENDOR_DEFINED ((unsigned long) (1UL << 31)) #define CKC_OPENPGP (CKC_VENDOR_DEFINED|0x504750UL) typedef unsigned long ck_attribute_type_t; #define CKA_CLASS (0UL) #define CKA_TOKEN (1UL) #define CKA_PRIVATE (2UL) #define CKA_LABEL (3UL) #define CKA_APPLICATION (0x10UL) #define CKA_VALUE (0x11UL) #define CKA_OBJECT_ID (0x12UL) #define CKA_CERTIFICATE_TYPE (0x80UL) #define CKA_ISSUER (0x81UL) #define CKA_SERIAL_NUMBER (0x82UL) #define CKA_AC_ISSUER (0x83UL) #define CKA_OWNER (0x84UL) #define CKA_ATTR_TYPES (0x85UL) #define CKA_TRUSTED (0x86UL) #define CKA_CERTIFICATE_CATEGORY (0x87UL) #define CKA_JAVA_MIDP_SECURITY_DOMAIN (0x88UL) #define CKA_URL (0x89UL) #define CKA_HASH_OF_SUBJECT_PUBLIC_KEY (0x8aUL) #define CKA_HASH_OF_ISSUER_PUBLIC_KEY (0x8bUL) #define CKA_NAME_HASH_ALGORITHM (0x8cUL) #define CKA_CHECK_VALUE (0x90UL) #define CKA_KEY_TYPE (0x100UL) #define CKA_SUBJECT (0x101UL) #define CKA_ID (0x102UL) #define CKA_SENSITIVE (0x103UL) #define CKA_ENCRYPT (0x104UL) #define CKA_DECRYPT (0x105UL) #define CKA_WRAP (0x106UL) #define CKA_UNWRAP (0x107UL) #define CKA_SIGN (0x108UL) #define CKA_SIGN_RECOVER (0x109UL) #define CKA_VERIFY (0x10aUL) #define CKA_VERIFY_RECOVER (0x10bUL) #define CKA_DERIVE (0x10cUL) #define CKA_START_DATE (0x110UL) #define CKA_END_DATE (0x111UL) #define CKA_MODULUS (0x120UL) #define CKA_MODULUS_BITS (0x121UL) #define CKA_PUBLIC_EXPONENT (0x122UL) #define CKA_PRIVATE_EXPONENT (0x123UL) #define CKA_PRIME_1 (0x124UL) #define CKA_PRIME_2 (0x125UL) #define CKA_EXPONENT_1 (0x126UL) #define CKA_EXPONENT_2 (0x127UL) #define CKA_COEFFICIENT (0x128UL) #define CKA_PUBLIC_KEY_INFO (0x129UL) #define CKA_PRIME (0x130UL) #define CKA_SUBPRIME (0x131UL) #define CKA_BASE (0x132UL) #define CKA_PRIME_BITS (0x133UL) #define CKA_SUB_PRIME_BITS (0x134UL) #define CKA_VALUE_BITS (0x160UL) #define CKA_VALUE_LEN (0x161UL) #define CKA_EXTRACTABLE (0x162UL) #define CKA_LOCAL (0x163UL) #define CKA_NEVER_EXTRACTABLE (0x164UL) #define CKA_ALWAYS_SENSITIVE (0x165UL) #define CKA_KEY_GEN_MECHANISM (0x166UL) #define CKA_MODIFIABLE (0x170UL) #define CKA_COPYABLE (0x171UL) #define CKA_DESTROYABLE (0x172UL) #define CKA_ECDSA_PARAMS (0x180UL) #define CKA_EC_PARAMS (0x180UL) #define CKA_EC_POINT (0x181UL) #define CKA_SECONDARY_AUTH (0x200UL) #define CKA_AUTH_PIN_FLAGS (0x201UL) #define CKA_ALWAYS_AUTHENTICATE (0x202UL) #define CKA_WRAP_WITH_TRUSTED (0x210UL) #define CKA_OTP_FORMAT (0x220UL) #define CKA_OTP_LENGTH (0x221UL) #define CKA_OTP_TIME_INTERVAL (0x222UL) #define CKA_OTP_USER_FRIENDLY_MODE (0x223UL) #define CKA_OTP_CHALLENGE_REQUIREMENT (0x224UL) #define CKA_OTP_TIME_REQUIREMENT (0x225UL) #define CKA_OTP_COUNTER_REQUIREMENT (0x226UL) #define CKA_OTP_PIN_REQUIREMENT (0x227UL) #define CKA_OTP_USER_IDENTIFIER (0x22AUL) #define CKA_OTP_SERVICE_IDENTIFIER (0x22BUL) #define CKA_OTP_SERVICE_LOGO (0x22CUL) #define CKA_OTP_SERVICE_LOGO_TYPE (0x22DUL) #define CKA_OTP_COUNTER (0x22EUL) #define CKA_OTP_TIME (0x22FUL) #define CKA_GOSTR3410_PARAMS (0x250UL) #define CKA_GOSTR3411_PARAMS (0x251UL) #define CKA_GOST28147_PARAMS (0x252UL) #define CKA_HW_FEATURE_TYPE (0x300UL) #define CKA_RESET_ON_INIT (0x301UL) #define CKA_HAS_RESET (0x302UL) #define CKA_PIXEL_X (0x400UL) #define CKA_PIXEL_Y (0x401UL) #define CKA_RESOLUTION (0x402UL) #define CKA_CHAR_ROWS (0x403UL) #define CKA_CHAR_COLUMNS (0x404UL) #define CKA_COLOR (0x405UL) #define CKA_BITS_PER_PIXEL (0x406UL) #define CKA_CHAR_SETS (0x480UL) #define CKA_ENCODING_METHODS (0x481UL) #define CKA_MIME_TYPES (0x482UL) #define CKA_MECHANISM_TYPE (0x500UL) #define CKA_REQUIRED_CMS_ATTRIBUTES (0x501UL) #define CKA_DEFAULT_CMS_ATTRIBUTES (0x502UL) #define CKA_SUPPORTED_CMS_ATTRIBUTES (0x503UL) #define CKA_WRAP_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x211UL) #define CKA_UNWRAP_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x212UL) #define CKA_DERIVE_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x213UL) #define CKA_ALLOWED_MECHANISMS (CKF_ARRAY_ATTRIBUTE | 0x600UL) #define CKA_VENDOR_DEFINED ((unsigned long) (1UL << 31)) struct ck_attribute { ck_attribute_type_t type; void *value; unsigned long value_len; }; struct ck_date { unsigned char year[4]; unsigned char month[2]; unsigned char day[2]; }; typedef unsigned long ck_mechanism_type_t; #define CKM_RSA_PKCS_KEY_PAIR_GEN (0UL) #define CKM_RSA_PKCS (1UL) #define CKM_RSA_9796 (2UL) #define CKM_RSA_X_509 (3UL) #define CKM_MD2_RSA_PKCS (4UL) #define CKM_MD5_RSA_PKCS (5UL) #define CKM_SHA1_RSA_PKCS (6UL) #define CKM_RIPEMD128_RSA_PKCS (7UL) #define CKM_RIPEMD160_RSA_PKCS (8UL) #define CKM_RSA_PKCS_OAEP (9UL) #define CKM_RSA_X9_31_KEY_PAIR_GEN (0xaUL) #define CKM_RSA_X9_31 (0xbUL) #define CKM_SHA1_RSA_X9_31 (0xcUL) #define CKM_RSA_PKCS_PSS (0xdUL) #define CKM_SHA1_RSA_PKCS_PSS (0xeUL) #define CKM_DSA_KEY_PAIR_GEN (0x10UL) #define CKM_DSA (0x11UL) #define CKM_DSA_SHA1 (0x12UL) #define CKM_DSA_SHA224 (0x13UL) #define CKM_DSA_SHA256 (0x14UL) #define CKM_DSA_SHA384 (0x15UL) #define CKM_DSA_SHA512 (0x16UL) #define CKM_DH_PKCS_KEY_PAIR_GEN (0x20UL) #define CKM_DH_PKCS_DERIVE (0x21UL) #define CKM_X9_42_DH_KEY_PAIR_GEN (0x30UL) #define CKM_X9_42_DH_DERIVE (0x31UL) #define CKM_X9_42_DH_HYBRID_DERIVE (0x32UL) #define CKM_X9_42_MQV_DERIVE (0x33UL) #define CKM_SHA256_RSA_PKCS (0x40UL) #define CKM_SHA384_RSA_PKCS (0x41UL) #define CKM_SHA512_RSA_PKCS (0x42UL) #define CKM_SHA256_RSA_PKCS_PSS (0x43UL) #define CKM_SHA384_RSA_PKCS_PSS (0x44UL) #define CKM_SHA512_RSA_PKCS_PSS (0x45UL) #define CKM_SHA512_224 (0x48UL) #define CKM_SHA512_224_HMAC (0x49UL) #define CKM_SHA512_224_HMAC_GENERAL (0x4aUL) #define CKM_SHA512_224_KEY_DERIVATION (0x4bUL) #define CKM_SHA512_256 (0x4cUL) #define CKM_SHA512_256_HMAC (0x4dUL) #define CKM_SHA512_256_HMAC_GENERAL (0x4eUL) #define CKM_SHA512_256_KEY_DERIVATION (0x4fUL) #define CKM_SHA512_T (0x50UL) #define CKM_SHA512_T_HMAC (0x51UL) #define CKM_SHA512_T_HMAC_GENERAL (0x52UL) #define CKM_SHA512_T_KEY_DERIVATION (0x53UL) #define CKM_RC2_KEY_GEN (0x100UL) #define CKM_RC2_ECB (0x101UL) #define CKM_RC2_CBC (0x102UL) #define CKM_RC2_MAC (0x103UL) #define CKM_RC2_MAC_GENERAL (0x104UL) #define CKM_RC2_CBC_PAD (0x105UL) #define CKM_RC4_KEY_GEN (0x110UL) #define CKM_RC4 (0x111UL) #define CKM_DES_KEY_GEN (0x120UL) #define CKM_DES_ECB (0x121UL) #define CKM_DES_CBC (0x122UL) #define CKM_DES_MAC (0x123UL) #define CKM_DES_MAC_GENERAL (0x124UL) #define CKM_DES_CBC_PAD (0x125UL) #define CKM_DES2_KEY_GEN (0x130UL) #define CKM_DES3_KEY_GEN (0x131UL) #define CKM_DES3_ECB (0x132UL) #define CKM_DES3_CBC (0x133UL) #define CKM_DES3_MAC (0x134UL) #define CKM_DES3_MAC_GENERAL (0x135UL) #define CKM_DES3_CBC_PAD (0x136UL) #define CKM_DES3_CMAC_GENERAL (0x137UL) #define CKM_DES3_CMAC (0x138UL) #define CKM_CDMF_KEY_GEN (0x140UL) #define CKM_CDMF_ECB (0x141UL) #define CKM_CDMF_CBC (0x142UL) #define CKM_CDMF_MAC (0x143UL) #define CKM_CDMF_MAC_GENERAL (0x144UL) #define CKM_CDMF_CBC_PAD (0x145UL) #define CKM_DES_OFB64 (0x150UL) #define CKM_DES_OFB8 (0x151UL) #define CKM_DES_CFB64 (0x152UL) #define CKM_DES_CFB8 (0x153UL) #define CKM_MD2 (0x200UL) #define CKM_MD2_HMAC (0x201UL) #define CKM_MD2_HMAC_GENERAL (0x202UL) #define CKM_MD5 (0x210UL) #define CKM_MD5_HMAC (0x211UL) #define CKM_MD5_HMAC_GENERAL (0x212UL) #define CKM_SHA_1 (0x220UL) #define CKM_SHA_1_HMAC (0x221UL) #define CKM_SHA_1_HMAC_GENERAL (0x222UL) #define CKM_RIPEMD128 (0x230UL) #define CKM_RIPEMD128_HMAC (0x231UL) #define CKM_RIPEMD128_HMAC_GENERAL (0x232UL) #define CKM_RIPEMD160 (0x240UL) #define CKM_RIPEMD160_HMAC (0x241UL) #define CKM_RIPEMD160_HMAC_GENERAL (0x242UL) #define CKM_SHA256 (0x250UL) #define CKM_SHA256_HMAC (0x251UL) #define CKM_SHA256_HMAC_GENERAL (0x252UL) #define CKM_SHA384 (0x260UL) #define CKM_SHA384_HMAC (0x261UL) #define CKM_SHA384_HMAC_GENERAL (0x262UL) #define CKM_SHA512 (0x270UL) #define CKM_SHA512_HMAC (0x271UL) #define CKM_SHA512_HMAC_GENERAL (0x272UL) #define CKM_SECURID_KEY_GEN (0x280UL) #define CKM_SECURID (0x282UL) #define CKM_HOTP_KEY_GEN (0x290UL) #define CKM_HOTP (0x291UL) #define CKM_ACTI (0x2a0UL) #define CKM_ACTI_KEY_GEN (0x2a1UL) #define CKM_CAST_KEY_GEN (0x300UL) #define CKM_CAST_ECB (0x301UL) #define CKM_CAST_CBC (0x302UL) #define CKM_CAST_MAC (0x303UL) #define CKM_CAST_MAC_GENERAL (0x304UL) #define CKM_CAST_CBC_PAD (0x305UL) #define CKM_CAST3_KEY_GEN (0x310UL) #define CKM_CAST3_ECB (0x311UL) #define CKM_CAST3_CBC (0x312UL) #define CKM_CAST3_MAC (0x313UL) #define CKM_CAST3_MAC_GENERAL (0x314UL) #define CKM_CAST3_CBC_PAD (0x315UL) #define CKM_CAST5_KEY_GEN (0x320UL) #define CKM_CAST128_KEY_GEN (0x320UL) #define CKM_CAST5_ECB (0x321UL) #define CKM_CAST128_ECB (0x321UL) #define CKM_CAST5_CBC (0x322UL) #define CKM_CAST128_CBC (0x322UL) #define CKM_CAST5_MAC (0x323UL) #define CKM_CAST128_MAC (0x323UL) #define CKM_CAST5_MAC_GENERAL (0x324UL) #define CKM_CAST128_MAC_GENERAL (0x324UL) #define CKM_CAST5_CBC_PAD (0x325UL) #define CKM_CAST128_CBC_PAD (0x325UL) #define CKM_RC5_KEY_GEN (0x330UL) #define CKM_RC5_ECB (0x331UL) #define CKM_RC5_CBC (0x332UL) #define CKM_RC5_MAC (0x333UL) #define CKM_RC5_MAC_GENERAL (0x334UL) #define CKM_RC5_CBC_PAD (0x335UL) #define CKM_IDEA_KEY_GEN (0x340UL) #define CKM_IDEA_ECB (0x341UL) #define CKM_IDEA_CBC (0x342UL) #define CKM_IDEA_MAC (0x343UL) #define CKM_IDEA_MAC_GENERAL (0x344UL) #define CKM_IDEA_CBC_PAD (0x345UL) #define CKM_GENERIC_SECRET_KEY_GEN (0x350UL) #define CKM_CONCATENATE_BASE_AND_KEY (0x360UL) #define CKM_CONCATENATE_BASE_AND_DATA (0x362UL) #define CKM_CONCATENATE_DATA_AND_BASE (0x363UL) #define CKM_XOR_BASE_AND_DATA (0x364UL) #define CKM_EXTRACT_KEY_FROM_KEY (0x365UL) #define CKM_SSL3_PRE_MASTER_KEY_GEN (0x370UL) #define CKM_SSL3_MASTER_KEY_DERIVE (0x371UL) #define CKM_SSL3_KEY_AND_MAC_DERIVE (0x372UL) #define CKM_SSL3_MASTER_KEY_DERIVE_DH (0x373UL) #define CKM_TLS_PRE_MASTER_KEY_GEN (0x374UL) #define CKM_TLS_MASTER_KEY_DERIVE (0x375UL) #define CKM_TLS_KEY_AND_MAC_DERIVE (0x376UL) #define CKM_TLS_MASTER_KEY_DERIVE_DH (0x377UL) #define CKM_TLS_PRF (0x378UL) #define CKM_SSL3_MD5_MAC (0x380UL) #define CKM_SSL3_SHA1_MAC (0x381UL) #define CKM_MD5_KEY_DERIVATION (0x390UL) #define CKM_MD2_KEY_DERIVATION (0x391UL) #define CKM_SHA1_KEY_DERIVATION (0x392UL) #define CKM_SHA256_KEY_DERIVATION (0x393UL) #define CKM_SHA384_KEY_DERIVATION (0x394UL) #define CKM_SHA512_KEY_DERIVATION (0x395UL) #define CKM_PBE_MD2_DES_CBC (0x3a0UL) #define CKM_PBE_MD5_DES_CBC (0x3a1UL) #define CKM_PBE_MD5_CAST_CBC (0x3a2UL) #define CKM_PBE_MD5_CAST3_CBC (0x3a3UL) #define CKM_PBE_MD5_CAST5_CBC (0x3a4UL) #define CKM_PBE_MD5_CAST128_CBC (0x3a4UL) #define CKM_PBE_SHA1_CAST5_CBC (0x3a5UL) #define CKM_PBE_SHA1_CAST128_CBC (0x3a5UL) #define CKM_PBE_SHA1_RC4_128 (0x3a6UL) #define CKM_PBE_SHA1_RC4_40 (0x3a7UL) #define CKM_PBE_SHA1_DES3_EDE_CBC (0x3a8UL) #define CKM_PBE_SHA1_DES2_EDE_CBC (0x3a9UL) #define CKM_PBE_SHA1_RC2_128_CBC (0x3aaUL) #define CKM_PBE_SHA1_RC2_40_CBC (0x3abUL) #define CKM_PKCS5_PBKD2 (0x3b0UL) #define CKM_PBA_SHA1_WITH_SHA1_HMAC (0x3c0UL) #define CKM_WTLS_PRE_MASTER_KEY_GEN (0x3d0UL) #define CKM_WTLS_MASTER_KEY_DERIVE (0x3d1UL) #define CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC (0x3d2UL) #define CKM_WTLS_PRF (0x3d3UL) #define CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE (0x3d4UL) #define CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE (0x3d5UL) #define CKM_TLS10_MAC_SERVER (0x3d6UL) #define CKM_TLS10_MAC_CLIENT (0x3d7UL) #define CKM_TLS12_MAC (0x3d8UL) #define CKM_TLS12_KDF (0x3d9UL) #define CKM_TLS12_MASTER_KEY_DERIVE (0x3e0UL) #define CKM_TLS12_KEY_AND_MAC_DERIVE (0x3e1UL) #define CKM_TLS12_MASTER_KEY_DERIVE_DH (0x3e2UL) #define CKM_TLS12_KEY_SAFE_DERIVE (0x3e3UL) #define CKM_TLS_MAC (0x3e4UL) #define CKM_TLS_KDF (0x3e5UL) #define CKM_KEY_WRAP_LYNKS (0x400UL) #define CKM_KEY_WRAP_SET_OAEP (0x401UL) #define CKM_CMS_SIG (0x500UL) #define CKM_KIP_DERIVE (0x510UL) #define CKM_KIP_WRAP (0x511UL) #define CKM_KIP_MAC (0x512UL) #define CKM_ARIA_KEY_GEN (0x560UL) #define CKM_ARIA_ECB (0x561UL) #define CKM_ARIA_CBC (0x562UL) #define CKM_ARIA_MAC (0x563UL) #define CKM_ARIA_MAC_GENERAL (0x564UL) #define CKM_ARIA_CBC_PAD (0x565UL) #define CKM_ARIA_ECB_ENCRYPT_DATA (0x566UL) #define CKM_ARIA_CBC_ENCRYPT_DATA (0x567UL) #define CKM_SEED_KEY_GEN (0x650UL) #define CKM_SEED_ECB (0x651UL) #define CKM_SEED_CBC (0x652UL) #define CKM_SEED_MAC (0x653UL) #define CKM_SEED_MAC_GENERAL (0x654UL) #define CKM_SEED_CBC_PAD (0x655UL) #define CKM_SEED_ECB_ENCRYPT_DATA (0x656UL) #define CKM_SEED_CBC_ENCRYPT_DATA (0x657UL) #define CKM_SKIPJACK_KEY_GEN (0x1000UL) #define CKM_SKIPJACK_ECB64 (0x1001UL) #define CKM_SKIPJACK_CBC64 (0x1002UL) #define CKM_SKIPJACK_OFB64 (0x1003UL) #define CKM_SKIPJACK_CFB64 (0x1004UL) #define CKM_SKIPJACK_CFB32 (0x1005UL) #define CKM_SKIPJACK_CFB16 (0x1006UL) #define CKM_SKIPJACK_CFB8 (0x1007UL) #define CKM_SKIPJACK_WRAP (0x1008UL) #define CKM_SKIPJACK_PRIVATE_WRAP (0x1009UL) #define CKM_SKIPJACK_RELAYX (0x100aUL) #define CKM_KEA_KEY_PAIR_GEN (0x1010UL) #define CKM_KEA_KEY_DERIVE (0x1011UL) #define CKM_FORTEZZA_TIMESTAMP (0x1020UL) #define CKM_BATON_KEY_GEN (0x1030UL) #define CKM_BATON_ECB128 (0x1031UL) #define CKM_BATON_ECB96 (0x1032UL) #define CKM_BATON_CBC128 (0x1033UL) #define CKM_BATON_COUNTER (0x1034UL) #define CKM_BATON_SHUFFLE (0x1035UL) #define CKM_BATON_WRAP (0x1036UL) #define CKM_ECDSA_KEY_PAIR_GEN (0x1040UL) #define CKM_EC_KEY_PAIR_GEN (0x1040UL) #define CKM_ECDSA (0x1041UL) #define CKM_ECDSA_SHA1 (0x1042UL) #define CKM_ECDSA_SHA224 (0x1043UL) #define CKM_ECDSA_SHA256 (0x1044UL) #define CKM_ECDSA_SHA384 (0x1045UL) #define CKM_ECDSA_SHA512 (0x1046UL) #define CKM_ECDH1_DERIVE (0x1050UL) #define CKM_ECDH1_COFACTOR_DERIVE (0x1051UL) #define CKM_ECMQV_DERIVE (0x1052UL) #define CKM_ECDH_AES_KEY_WRAP (0x1053UL) #define CKM_RSA_AES_KEY_WRAP (0x1054UL) #define CKM_JUNIPER_KEY_GEN (0x1060UL) #define CKM_JUNIPER_ECB128 (0x1061UL) #define CKM_JUNIPER_CBC128 (0x1062UL) #define CKM_JUNIPER_COUNTER (0x1063UL) #define CKM_JUNIPER_SHUFFLE (0x1064UL) #define CKM_JUNIPER_WRAP (0x1065UL) #define CKM_FASTHASH (0x1070UL) #define CKM_AES_KEY_GEN (0x1080UL) #define CKM_AES_ECB (0x1081UL) #define CKM_AES_CBC (0x1082UL) #define CKM_AES_MAC (0x1083UL) #define CKM_AES_MAC_GENERAL (0x1084UL) #define CKM_AES_CBC_PAD (0x1085UL) #define CKM_AES_CTR (0x1086UL) #define CKM_AES_GCM (0x1087UL) #define CKM_AES_CCM (0x1088UL) #define CKM_AES_CTS (0x1089UL) #define CKM_AES_CMAC (0x108aUL) #define CKM_AES_CMAC_GENERAL (0x108bUL) #define CKM_AES_XCBC_MAC (0x108cUL) #define CKM_AES_XCBC_MAC_96 (0x108dUL) #define CKM_AES_GMAC (0x108eUL) #define CKM_BLOWFISH_KEY_GEN (0x1090UL) #define CKM_BLOWFISH_CBC (0x1091UL) #define CKM_TWOFISH_KEY_GEN (0x1092UL) #define CKM_TWOFISH_CBC (0x1093UL) #define CKM_BLOWFISH_CBC_PAD (0x1094UL) #define CKM_TWOFISH_CBC_PAD (0x1095UL) #define CKM_DES_ECB_ENCRYPT_DATA (0x1100UL) #define CKM_DES_CBC_ENCRYPT_DATA (0x1101UL) #define CKM_DES3_ECB_ENCRYPT_DATA (0x1102UL) #define CKM_DES3_CBC_ENCRYPT_DATA (0x1103UL) #define CKM_AES_ECB_ENCRYPT_DATA (0x1104UL) #define CKM_AES_CBC_ENCRYPT_DATA (0x1105UL) #define CKM_GOSTR3410_KEY_PAIR_GEN (0x1200UL) #define CKM_GOSTR3410 (0x1201UL) #define CKM_GOSTR3410_WITH_GOSTR3411 (0x1202UL) #define CKM_GOSTR3410_KEY_WRAP (0x1203UL) #define CKM_GOSTR3410_DERIVE (0x1204UL) #define CKM_GOSTR3411 (0x1210UL) #define CKM_GOSTR3411_HMAC (0x1211UL) #define CKM_GOST28147_KEY_GEN (0x1220UL) #define CKM_GOST28147_ECB (0x1221UL) #define CKM_GOST28147 (0x1222UL) #define CKM_GOST28147_MAC (0x1223UL) #define CKM_GOST28147_KEY_WRAP (0x1224UL) #define CKM_DSA_PARAMETER_GEN (0x2000UL) #define CKM_DH_PKCS_PARAMETER_GEN (0x2001UL) #define CKM_X9_42_DH_PARAMETER_GEN (0x2002UL) #define CKM_DSA_PROBABLISTIC_PARAMETER_GEN (0x2003UL) #define CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN (0x2004UL) #define CKM_AES_OFB (0x2104UL) #define CKM_AES_CFB64 (0x2105UL) #define CKM_AES_CFB8 (0x2106UL) #define CKM_AES_CFB128 (0x2107UL) #define CKM_AES_CFB1 (0x2108UL) #define CKM_VENDOR_DEFINED ((unsigned long) (1UL << 31)) /* Amendments */ #define CKM_SHA224 (0x255UL) #define CKM_SHA224_HMAC (0x256UL) #define CKM_SHA224_HMAC_GENERAL (0x257UL) #define CKM_SHA224_RSA_PKCS (0x46UL) #define CKM_SHA224_RSA_PKCS_PSS (0x47UL) #define CKM_SHA224_KEY_DERIVATION (0x396UL) #define CKM_CAMELLIA_KEY_GEN (0x550UL) #define CKM_CAMELLIA_ECB (0x551UL) #define CKM_CAMELLIA_CBC (0x552UL) #define CKM_CAMELLIA_MAC (0x553UL) #define CKM_CAMELLIA_MAC_GENERAL (0x554UL) #define CKM_CAMELLIA_CBC_PAD (0x555UL) #define CKM_CAMELLIA_ECB_ENCRYPT_DATA (0x556UL) #define CKM_CAMELLIA_CBC_ENCRYPT_DATA (0x557UL) #define CKM_CAMELLIA_CTR (0x558UL) #define CKM_AES_KEY_WRAP (0x2109UL) #define CKM_AES_KEY_WRAP_PAD (0x210aUL) #define CKM_RSA_PKCS_TPM_1_1 (0x4001UL) #define CKM_RSA_PKCS_OAEP_TPM_1_1 (0x4002UL) /* From version 3.0 */ #define CKM_EC_EDWARDS_KEY_PAIR_GEN (0x1055UL) #define CKM_EDDSA (0x1057UL) /* Attribute and other constants related to OTP */ #define CK_OTP_FORMAT_DECIMAL (0UL) #define CK_OTP_FORMAT_HEXADECIMAL (1UL) #define CK_OTP_FORMAT_ALPHANUMERIC (2UL) #define CK_OTP_FORMAT_BINARY (3UL) #define CK_OTP_PARAM_IGNORED (0UL) #define CK_OTP_PARAM_OPTIONAL (1UL) #define CK_OTP_PARAM_MANDATORY (2UL) #define CK_OTP_VALUE (0UL) #define CK_OTP_PIN (1UL) #define CK_OTP_CHALLENGE (2UL) #define CK_OTP_TIME (3UL) #define CK_OTP_COUNTER (4UL) #define CK_OTP_FLAGS (5UL) #define CK_OTP_OUTPUT_LENGTH (6UL) #define CK_OTP_FORMAT (7UL) /* OTP mechanism flags */ #define CKF_NEXT_OTP (0x01UL) #define CKF_EXCLUDE_TIME (0x02UL) #define CKF_EXCLUDE_COUNTER (0x04UL) #define CKF_EXCLUDE_CHALLENGE (0x08UL) #define CKF_EXCLUDE_PIN (0x10UL) #define CKF_USER_FRIENDLY_OTP (0x20UL) #define CKN_OTP_CHANGED (0x01UL) /* Attribute and other constants related to security domain */ #define CK_SECURITY_DOMAIN_UNSPECIFIED (0UL) #define CK_SECURITY_DOMAIN_MANUFACTURER (1UL) #define CK_SECURITY_DOMAIN_OPERATOR (2UL) #define CK_SECURITY_DOMAIN_THIRD_PARTY (3UL) /* Attribute and other constants related to ceritificate category */ #define CK_CERTIFICATE_CATEGORY_UNSPECIFIED (0UL) #define CK_CERTIFICATE_CATEGORY_TOKEN_USER (1UL) #define CK_CERTIFICATE_CATEGORY_AUTHORITY (2UL) #define CK_CERTIFICATE_CATEGORY_OTHER_ENTITY (3UL) typedef unsigned long int CK_JAVA_MIDP_SECURITY_DOMAIN; struct ck_mechanism { ck_mechanism_type_t mechanism; void *parameter; unsigned long parameter_len; }; struct ck_mechanism_info { unsigned long min_key_size; unsigned long max_key_size; ck_flags_t flags; }; typedef unsigned long ck_param_type; typedef struct ck_otp_param { ck_param_type type; void *value; unsigned long value_len; } ck_otp_param; typedef struct ck_otp_params { struct ck_otp_param *params; unsigned long count; } ck_otp_params; typedef struct ck_otp_signature_info { struct ck_otp_param *params; unsigned long count; } ck_otp_signature_info; #define CKG_MGF1_SHA1 0x00000001UL #define CKG_MGF1_SHA224 0x00000005UL #define CKG_MGF1_SHA256 0x00000002UL #define CKG_MGF1_SHA384 0x00000003UL #define CKG_MGF1_SHA512 0x00000004UL typedef unsigned long ck_rsa_pkcs_mgf_type_t; typedef ck_rsa_pkcs_mgf_type_t * CK_RSA_PKCS_MGF_TYPE_PTR; struct ck_rsa_pkcs_pss_params { ck_mechanism_type_t hash_alg; ck_rsa_pkcs_mgf_type_t mgf; unsigned long s_len; }; typedef unsigned long ck_rsa_pkcs_oaep_source_type_t; struct ck_rsa_pkcs_oaep_params { ck_mechanism_type_t hash_alg; ck_rsa_pkcs_mgf_type_t mgf; ck_rsa_pkcs_oaep_source_type_t source; void *source_data; unsigned long source_data_len; }; struct ck_aes_ctr_params { unsigned long counter_bits; unsigned char cb[16]; }; struct ck_gcm_params { unsigned char *iv_ptr; unsigned long iv_len; unsigned long iv_bits; unsigned char *aad_ptr; unsigned long aad_len; unsigned long tag_bits; }; /* The following EC Key Derivation Functions are defined */ #define CKD_NULL (0x01UL) #define CKD_SHA1_KDF (0x02UL) /* The following X9.42 DH key derivation functions are defined */ #define CKD_SHA1_KDF_ASN1 (0x03UL) #define CKD_SHA1_KDF_CONCATENATE (0x04UL) #define CKD_SHA224_KDF (0x05UL) #define CKD_SHA256_KDF (0x06UL) #define CKD_SHA384_KDF (0x07UL) #define CKD_SHA512_KDF (0x08UL) #define CKD_CPDIVERSIFY_KDF (0x09UL) typedef unsigned long ck_ec_kdf_t; struct ck_ecdh1_derive_params { ck_ec_kdf_t kdf; unsigned long shared_data_len; unsigned char *shared_data; unsigned long public_data_len; unsigned char *public_data; }; struct ck_key_derivation_string_data { unsigned char *string_data; unsigned long string_data_len; }; struct ck_des_cbc_encrypt_data_params { unsigned char iv[8]; unsigned char *data_params; unsigned long length; }; struct ck_aes_cbc_encrypt_data_params { unsigned char iv[16]; unsigned char *data_params; unsigned long length; }; #define CKF_HW (1UL << 0) #define CKF_ENCRYPT (1UL << 8) #define CKF_DECRYPT (1UL << 9) #define CKF_DIGEST (1UL << 10) #define CKF_SIGN (1UL << 11) #define CKF_SIGN_RECOVER (1UL << 12) #define CKF_VERIFY (1UL << 13) #define CKF_VERIFY_RECOVER (1UL << 14) #define CKF_GENERATE (1UL << 15) #define CKF_GENERATE_KEY_PAIR (1UL << 16) #define CKF_WRAP (1UL << 17) #define CKF_UNWRAP (1UL << 18) #define CKF_DERIVE (1UL << 19) #define CKF_EXTENSION ((unsigned long) (1UL << 31)) #define CKF_EC_F_P (1UL << 20) #define CKF_EC_NAMEDCURVE (1UL << 23) #define CKF_EC_UNCOMPRESS (1UL << 24) #define CKF_EC_COMPRESS (1UL << 25) /* Flags for C_WaitForSlotEvent. */ #define CKF_DONT_BLOCK (1UL) typedef unsigned long ck_rv_t; typedef ck_rv_t (*ck_notify_t) (ck_session_handle_t session, ck_notification_t event, void *application); /* Forward reference. */ struct ck_function_list; #define _CK_DECLARE_FUNCTION(name, args) \ typedef ck_rv_t (*CK_ ## name) args; \ ck_rv_t CK_SPEC name args _CK_DECLARE_FUNCTION (C_Initialize, (void *init_args)); _CK_DECLARE_FUNCTION (C_Finalize, (void *reserved)); _CK_DECLARE_FUNCTION (C_GetInfo, (struct ck_info *info)); _CK_DECLARE_FUNCTION (C_GetFunctionList, (struct ck_function_list **function_list)); _CK_DECLARE_FUNCTION (C_GetSlotList, (unsigned char token_present, ck_slot_id_t *slot_list, unsigned long *count)); _CK_DECLARE_FUNCTION (C_GetSlotInfo, (ck_slot_id_t slot_id, struct ck_slot_info *info)); _CK_DECLARE_FUNCTION (C_GetTokenInfo, (ck_slot_id_t slot_id, struct ck_token_info *info)); _CK_DECLARE_FUNCTION (C_WaitForSlotEvent, (ck_flags_t flags, ck_slot_id_t *slot, void *reserved)); _CK_DECLARE_FUNCTION (C_GetMechanismList, (ck_slot_id_t slot_id, ck_mechanism_type_t *mechanism_list, unsigned long *count)); _CK_DECLARE_FUNCTION (C_GetMechanismInfo, (ck_slot_id_t slot_id, ck_mechanism_type_t type, struct ck_mechanism_info *info)); _CK_DECLARE_FUNCTION (C_InitToken, (ck_slot_id_t slot_id, unsigned char *pin, unsigned long pin_len, unsigned char *label)); _CK_DECLARE_FUNCTION (C_InitPIN, (ck_session_handle_t session, unsigned char *pin, unsigned long pin_len)); _CK_DECLARE_FUNCTION (C_SetPIN, (ck_session_handle_t session, unsigned char *old_pin, unsigned long old_len, unsigned char *new_pin, unsigned long new_len)); _CK_DECLARE_FUNCTION (C_OpenSession, (ck_slot_id_t slot_id, ck_flags_t flags, void *application, ck_notify_t notify, ck_session_handle_t *session)); _CK_DECLARE_FUNCTION (C_CloseSession, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CloseAllSessions, (ck_slot_id_t slot_id)); _CK_DECLARE_FUNCTION (C_GetSessionInfo, (ck_session_handle_t session, struct ck_session_info *info)); _CK_DECLARE_FUNCTION (C_GetOperationState, (ck_session_handle_t session, unsigned char *operation_state, unsigned long *operation_state_len)); _CK_DECLARE_FUNCTION (C_SetOperationState, (ck_session_handle_t session, unsigned char *operation_state, unsigned long operation_state_len, ck_object_handle_t encryption_key, ck_object_handle_t authentiation_key)); _CK_DECLARE_FUNCTION (C_Login, (ck_session_handle_t session, ck_user_type_t user_type, unsigned char *pin, unsigned long pin_len)); _CK_DECLARE_FUNCTION (C_Logout, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CreateObject, (ck_session_handle_t session, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *object)); _CK_DECLARE_FUNCTION (C_CopyObject, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *new_object)); _CK_DECLARE_FUNCTION (C_DestroyObject, (ck_session_handle_t session, ck_object_handle_t object)); _CK_DECLARE_FUNCTION (C_GetObjectSize, (ck_session_handle_t session, ck_object_handle_t object, unsigned long *size)); _CK_DECLARE_FUNCTION (C_GetAttributeValue, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_SetAttributeValue, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_FindObjectsInit, (ck_session_handle_t session, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_FindObjects, (ck_session_handle_t session, ck_object_handle_t *object, unsigned long max_object_count, unsigned long *object_count)); _CK_DECLARE_FUNCTION (C_FindObjectsFinal, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_EncryptInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Encrypt, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len)); _CK_DECLARE_FUNCTION (C_EncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_EncryptFinal, (ck_session_handle_t session, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Decrypt, (ck_session_handle_t session, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len)); _CK_DECLARE_FUNCTION (C_DecryptUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_DecryptFinal, (ck_session_handle_t session, unsigned char *last_part, unsigned long *last_part_len)); _CK_DECLARE_FUNCTION (C_DigestInit, (ck_session_handle_t session, struct ck_mechanism *mechanism)); _CK_DECLARE_FUNCTION (C_Digest, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *digest, unsigned long *digest_len)); _CK_DECLARE_FUNCTION (C_DigestUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_DigestKey, (ck_session_handle_t session, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_DigestFinal, (ck_session_handle_t session, unsigned char *digest, unsigned long *digest_len)); _CK_DECLARE_FUNCTION (C_SignInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Sign, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_SignUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_SignFinal, (ck_session_handle_t session, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_SignRecoverInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_SignRecover, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_VerifyInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Verify, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long signature_len)); _CK_DECLARE_FUNCTION (C_VerifyUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_VerifyFinal, (ck_session_handle_t session, unsigned char *signature, unsigned long signature_len)); _CK_DECLARE_FUNCTION (C_VerifyRecoverInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_VerifyRecover, (ck_session_handle_t session, unsigned char *signature, unsigned long signature_len, unsigned char *data, unsigned long *data_len)); _CK_DECLARE_FUNCTION (C_DigestEncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptDigestUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_SignEncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptVerifyUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_GenerateKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_GenerateKeyPair, (ck_session_handle_t session, struct ck_mechanism *mechanism, struct ck_attribute *public_key_template, unsigned long public_key_attribute_count, struct ck_attribute *private_key_template, unsigned long private_key_attribute_count, ck_object_handle_t *public_key, ck_object_handle_t *private_key)); _CK_DECLARE_FUNCTION (C_WrapKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t wrapping_key, ck_object_handle_t key, unsigned char *wrapped_key, unsigned long *wrapped_key_len)); _CK_DECLARE_FUNCTION (C_UnwrapKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t unwrapping_key, unsigned char *wrapped_key, unsigned long wrapped_key_len, struct ck_attribute *templ, unsigned long attribute_count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_DeriveKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t base_key, struct ck_attribute *templ, unsigned long attribute_count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_SeedRandom, (ck_session_handle_t session, unsigned char *seed, unsigned long seed_len)); _CK_DECLARE_FUNCTION (C_GenerateRandom, (ck_session_handle_t session, unsigned char *random_data, unsigned long random_len)); _CK_DECLARE_FUNCTION (C_GetFunctionStatus, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CancelFunction, (ck_session_handle_t session)); struct ck_function_list { struct ck_version version; CK_C_Initialize C_Initialize; CK_C_Finalize C_Finalize; CK_C_GetInfo C_GetInfo; CK_C_GetFunctionList C_GetFunctionList; CK_C_GetSlotList C_GetSlotList; CK_C_GetSlotInfo C_GetSlotInfo; CK_C_GetTokenInfo C_GetTokenInfo; CK_C_GetMechanismList C_GetMechanismList; CK_C_GetMechanismInfo C_GetMechanismInfo; CK_C_InitToken C_InitToken; CK_C_InitPIN C_InitPIN; CK_C_SetPIN C_SetPIN; CK_C_OpenSession C_OpenSession; CK_C_CloseSession C_CloseSession; CK_C_CloseAllSessions C_CloseAllSessions; CK_C_GetSessionInfo C_GetSessionInfo; CK_C_GetOperationState C_GetOperationState; CK_C_SetOperationState C_SetOperationState; CK_C_Login C_Login; CK_C_Logout C_Logout; CK_C_CreateObject C_CreateObject; CK_C_CopyObject C_CopyObject; CK_C_DestroyObject C_DestroyObject; CK_C_GetObjectSize C_GetObjectSize; CK_C_GetAttributeValue C_GetAttributeValue; CK_C_SetAttributeValue C_SetAttributeValue; CK_C_FindObjectsInit C_FindObjectsInit; CK_C_FindObjects C_FindObjects; CK_C_FindObjectsFinal C_FindObjectsFinal; CK_C_EncryptInit C_EncryptInit; CK_C_Encrypt C_Encrypt; CK_C_EncryptUpdate C_EncryptUpdate; CK_C_EncryptFinal C_EncryptFinal; CK_C_DecryptInit C_DecryptInit; CK_C_Decrypt C_Decrypt; CK_C_DecryptUpdate C_DecryptUpdate; CK_C_DecryptFinal C_DecryptFinal; CK_C_DigestInit C_DigestInit; CK_C_Digest C_Digest; CK_C_DigestUpdate C_DigestUpdate; CK_C_DigestKey C_DigestKey; CK_C_DigestFinal C_DigestFinal; CK_C_SignInit C_SignInit; CK_C_Sign C_Sign; CK_C_SignUpdate C_SignUpdate; CK_C_SignFinal C_SignFinal; CK_C_SignRecoverInit C_SignRecoverInit; CK_C_SignRecover C_SignRecover; CK_C_VerifyInit C_VerifyInit; CK_C_Verify C_Verify; CK_C_VerifyUpdate C_VerifyUpdate; CK_C_VerifyFinal C_VerifyFinal; CK_C_VerifyRecoverInit C_VerifyRecoverInit; CK_C_VerifyRecover C_VerifyRecover; CK_C_DigestEncryptUpdate C_DigestEncryptUpdate; CK_C_DecryptDigestUpdate C_DecryptDigestUpdate; CK_C_SignEncryptUpdate C_SignEncryptUpdate; CK_C_DecryptVerifyUpdate C_DecryptVerifyUpdate; CK_C_GenerateKey C_GenerateKey; CK_C_GenerateKeyPair C_GenerateKeyPair; CK_C_WrapKey C_WrapKey; CK_C_UnwrapKey C_UnwrapKey; CK_C_DeriveKey C_DeriveKey; CK_C_SeedRandom C_SeedRandom; CK_C_GenerateRandom C_GenerateRandom; CK_C_GetFunctionStatus C_GetFunctionStatus; CK_C_CancelFunction C_CancelFunction; CK_C_WaitForSlotEvent C_WaitForSlotEvent; }; typedef ck_rv_t (*ck_createmutex_t) (void **mutex); typedef ck_rv_t (*ck_destroymutex_t) (void *mutex); typedef ck_rv_t (*ck_lockmutex_t) (void *mutex); typedef ck_rv_t (*ck_unlockmutex_t) (void *mutex); struct ck_c_initialize_args { ck_createmutex_t create_mutex; ck_destroymutex_t destroy_mutex; ck_lockmutex_t lock_mutex; ck_unlockmutex_t unlock_mutex; ck_flags_t flags; void *reserved; }; #define CKF_LIBRARY_CANT_CREATE_OS_THREADS (1UL << 0) #define CKF_OS_LOCKING_OK (1UL << 1) #define CKR_OK (0UL) #define CKR_CANCEL (1UL) #define CKR_HOST_MEMORY (2UL) #define CKR_SLOT_ID_INVALID (3UL) #define CKR_GENERAL_ERROR (5UL) #define CKR_FUNCTION_FAILED (6UL) #define CKR_ARGUMENTS_BAD (7UL) #define CKR_NO_EVENT (8UL) #define CKR_NEED_TO_CREATE_THREADS (9UL) #define CKR_CANT_LOCK (0xaUL) #define CKR_ATTRIBUTE_READ_ONLY (0x10UL) #define CKR_ATTRIBUTE_SENSITIVE (0x11UL) #define CKR_ATTRIBUTE_TYPE_INVALID (0x12UL) #define CKR_ATTRIBUTE_VALUE_INVALID (0x13UL) #define CKR_ACTION_PROHIBITED (0x1BUL) #define CKR_DATA_INVALID (0x20UL) #define CKR_DATA_LEN_RANGE (0x21UL) #define CKR_DEVICE_ERROR (0x30UL) #define CKR_DEVICE_MEMORY (0x31UL) #define CKR_DEVICE_REMOVED (0x32UL) #define CKR_ENCRYPTED_DATA_INVALID (0x40UL) #define CKR_ENCRYPTED_DATA_LEN_RANGE (0x41UL) #define CKR_FUNCTION_CANCELED (0x50UL) #define CKR_FUNCTION_NOT_PARALLEL (0x51UL) #define CKR_FUNCTION_NOT_SUPPORTED (0x54UL) #define CKR_KEY_HANDLE_INVALID (0x60UL) #define CKR_KEY_SIZE_RANGE (0x62UL) #define CKR_KEY_TYPE_INCONSISTENT (0x63UL) #define CKR_KEY_NOT_NEEDED (0x64UL) #define CKR_KEY_CHANGED (0x65UL) #define CKR_KEY_NEEDED (0x66UL) #define CKR_KEY_INDIGESTIBLE (0x67UL) #define CKR_KEY_FUNCTION_NOT_PERMITTED (0x68UL) #define CKR_KEY_NOT_WRAPPABLE (0x69UL) #define CKR_KEY_UNEXTRACTABLE (0x6aUL) #define CKR_MECHANISM_INVALID (0x70UL) #define CKR_MECHANISM_PARAM_INVALID (0x71UL) #define CKR_OBJECT_HANDLE_INVALID (0x82UL) #define CKR_OPERATION_ACTIVE (0x90UL) #define CKR_OPERATION_NOT_INITIALIZED (0x91UL) #define CKR_PIN_INCORRECT (0xa0UL) #define CKR_PIN_INVALID (0xa1UL) #define CKR_PIN_LEN_RANGE (0xa2UL) #define CKR_PIN_EXPIRED (0xa3UL) #define CKR_PIN_LOCKED (0xa4UL) #define CKR_SESSION_CLOSED (0xb0UL) #define CKR_SESSION_COUNT (0xb1UL) #define CKR_SESSION_HANDLE_INVALID (0xb3UL) #define CKR_SESSION_PARALLEL_NOT_SUPPORTED (0xb4UL) #define CKR_SESSION_READ_ONLY (0xb5UL) #define CKR_SESSION_EXISTS (0xb6UL) #define CKR_SESSION_READ_ONLY_EXISTS (0xb7UL) #define CKR_SESSION_READ_WRITE_SO_EXISTS (0xb8UL) #define CKR_SIGNATURE_INVALID (0xc0UL) #define CKR_SIGNATURE_LEN_RANGE (0xc1UL) #define CKR_TEMPLATE_INCOMPLETE (0xd0UL) #define CKR_TEMPLATE_INCONSISTENT (0xd1UL) #define CKR_TOKEN_NOT_PRESENT (0xe0UL) #define CKR_TOKEN_NOT_RECOGNIZED (0xe1UL) #define CKR_TOKEN_WRITE_PROTECTED (0xe2UL) #define CKR_UNWRAPPING_KEY_HANDLE_INVALID (0xf0UL) #define CKR_UNWRAPPING_KEY_SIZE_RANGE (0xf1UL) #define CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT (0xf2UL) #define CKR_USER_ALREADY_LOGGED_IN (0x100UL) #define CKR_USER_NOT_LOGGED_IN (0x101UL) #define CKR_USER_PIN_NOT_INITIALIZED (0x102UL) #define CKR_USER_TYPE_INVALID (0x103UL) #define CKR_USER_ANOTHER_ALREADY_LOGGED_IN (0x104UL) #define CKR_USER_TOO_MANY_TYPES (0x105UL) #define CKR_WRAPPED_KEY_INVALID (0x110UL) #define CKR_WRAPPED_KEY_LEN_RANGE (0x112UL) #define CKR_WRAPPING_KEY_HANDLE_INVALID (0x113UL) #define CKR_WRAPPING_KEY_SIZE_RANGE (0x114UL) #define CKR_WRAPPING_KEY_TYPE_INCONSISTENT (0x115UL) #define CKR_RANDOM_SEED_NOT_SUPPORTED (0x120UL) #define CKR_RANDOM_NO_RNG (0x121UL) #define CKR_DOMAIN_PARAMS_INVALID (0x130UL) #define CKR_CURVE_NOT_SUPPORTED (0x140UL) #define CKR_BUFFER_TOO_SMALL (0x150UL) #define CKR_SAVED_STATE_INVALID (0x160UL) #define CKR_INFORMATION_SENSITIVE (0x170UL) #define CKR_STATE_UNSAVEABLE (0x180UL) #define CKR_CRYPTOKI_NOT_INITIALIZED (0x190UL) #define CKR_CRYPTOKI_ALREADY_INITIALIZED (0x191UL) #define CKR_MUTEX_BAD (0x1a0UL) #define CKR_MUTEX_NOT_LOCKED (0x1a1UL) #define CKR_NEW_PIN_MODE (0x1b0UL) #define CKR_NEXT_OTP (0x1b1UL) #define CKR_EXCEEDED_MAX_ITERATIONS (0x1c0UL) #define CKR_FIPS_SELF_TEST_FAILED (0x1c1UL) #define CKR_LIBRARY_LOAD_FAILED (0x1c2UL) #define CKR_PIN_TOO_WEAK (0x1c3UL) #define CKR_PUBLIC_KEY_INVALID (0x1c4UL) #define CKR_FUNCTION_REJECTED (0x200UL) #define CKR_VENDOR_DEFINED ((unsigned long) (1UL << 31)) #define CKZ_DATA_SPECIFIED (0x01UL) /* Compatibility layer. */ #ifdef CRYPTOKI_COMPAT #undef CK_DEFINE_FUNCTION #define CK_DEFINE_FUNCTION(retval, name) retval CK_SPEC name /* For NULL. */ #include typedef unsigned char CK_BYTE; typedef unsigned char CK_CHAR; typedef unsigned char CK_UTF8CHAR; typedef unsigned char CK_BBOOL; typedef unsigned long int CK_ULONG; typedef long int CK_LONG; typedef CK_BYTE *CK_BYTE_PTR; typedef CK_CHAR *CK_CHAR_PTR; typedef CK_UTF8CHAR *CK_UTF8CHAR_PTR; typedef CK_ULONG *CK_ULONG_PTR; typedef void *CK_VOID_PTR; typedef void **CK_VOID_PTR_PTR; #define CK_FALSE 0 #define CK_TRUE 1 #ifndef CK_DISABLE_TRUE_FALSE #ifndef FALSE #define FALSE 0 #endif #ifndef TRUE #define TRUE 1 #endif #endif typedef struct ck_version CK_VERSION; typedef struct ck_version *CK_VERSION_PTR; typedef struct ck_info CK_INFO; typedef struct ck_info *CK_INFO_PTR; typedef ck_slot_id_t *CK_SLOT_ID_PTR; typedef struct ck_slot_info CK_SLOT_INFO; typedef struct ck_slot_info *CK_SLOT_INFO_PTR; typedef struct ck_token_info CK_TOKEN_INFO; typedef struct ck_token_info *CK_TOKEN_INFO_PTR; typedef ck_session_handle_t *CK_SESSION_HANDLE_PTR; typedef struct ck_session_info CK_SESSION_INFO; typedef struct ck_session_info *CK_SESSION_INFO_PTR; typedef ck_object_handle_t *CK_OBJECT_HANDLE_PTR; typedef ck_object_class_t *CK_OBJECT_CLASS_PTR; typedef struct ck_attribute CK_ATTRIBUTE; typedef struct ck_attribute *CK_ATTRIBUTE_PTR; typedef struct ck_date CK_DATE; typedef struct ck_date *CK_DATE_PTR; typedef ck_mechanism_type_t *CK_MECHANISM_TYPE_PTR; typedef struct ck_mechanism CK_MECHANISM; typedef struct ck_mechanism *CK_MECHANISM_PTR; typedef struct ck_mechanism_info CK_MECHANISM_INFO; typedef struct ck_mechanism_info *CK_MECHANISM_INFO_PTR; typedef struct ck_otp_mechanism_info CK_OTP_MECHANISM_INFO; typedef struct ck_otp_mechanism_info *CK_OTP_MECHANISM_INFO_PTR; typedef struct ck_function_list CK_FUNCTION_LIST; typedef struct ck_function_list *CK_FUNCTION_LIST_PTR; typedef struct ck_function_list **CK_FUNCTION_LIST_PTR_PTR; typedef struct ck_c_initialize_args CK_C_INITIALIZE_ARGS; typedef struct ck_c_initialize_args *CK_C_INITIALIZE_ARGS_PTR; typedef struct ck_rsa_pkcs_pss_params CK_RSA_PKCS_PSS_PARAMS; typedef struct ck_rsa_pkcs_pss_params *CK_RSA_PKCS_PSS_PARAMS_PTR; typedef struct ck_rsa_pkcs_oaep_params CK_RSA_PKCS_OAEP_PARAMS; typedef struct ck_rsa_pkcs_oaep_params *CK_RSA_PKCS_OAEP_PARAMS_PTR; typedef struct ck_aes_ctr_params CK_AES_CTR_PARAMS; typedef struct ck_aes_ctr_params *CK_AES_CTR_PARAMS_PTR; typedef struct ck_gcm_params CK_GCM_PARAMS; typedef struct ck_gcm_params *CK_GCM_PARAMS_PTR; typedef struct ck_ecdh1_derive_params CK_ECDH1_DERIVE_PARAMS; typedef struct ck_ecdh1_derive_params *CK_ECDH1_DERIVE_PARAMS_PTR; typedef struct ck_key_derivation_string_data CK_KEY_DERIVATION_STRING_DATA; typedef struct ck_key_derivation_string_data *CK_KEY_DERIVATION_STRING_DATA_PTR; typedef struct ck_des_cbc_encrypt_data_params CK_DES_CBC_ENCRYPT_DATA_PARAMS; typedef struct ck_des_cbc_encrypt_data_params *CK_DES_CBC_ENCRYPT_DATA_PARAMS_PTR; typedef struct ck_aes_cbc_encrypt_data_params CK_AES_CBC_ENCRYPT_DATA_PARAMS; typedef struct ck_aes_cbc_encrypt_data_params *CK_AES_CBC_ENCRYPT_DATA_PARAMS_PTR; #ifndef NULL_PTR #define NULL_PTR NULL #endif /* Delete the helper macros defined at the top of the file. */ #undef ck_flags_t #undef ck_version #undef ck_info #undef cryptoki_version #undef manufacturer_id #undef library_description #undef library_version #undef ck_notification_t #undef ck_slot_id_t #undef ck_slot_info #undef slot_description #undef hardware_version #undef firmware_version #undef ck_token_info #undef serial_number #undef max_session_count #undef session_count #undef max_rw_session_count #undef rw_session_count #undef max_pin_len #undef min_pin_len #undef total_public_memory #undef free_public_memory #undef total_private_memory #undef free_private_memory #undef utc_time #undef ck_session_handle_t #undef ck_user_type_t #undef ck_state_t #undef ck_session_info #undef slot_id #undef device_error #undef ck_object_handle_t #undef ck_object_class_t #undef ck_hw_feature_type_t #undef ck_key_type_t #undef ck_certificate_type_t #undef ck_attribute_type_t #undef ck_attribute #undef value #undef value_len #undef params #undef count #undef ck_date #undef ck_mechanism_type_t #undef ck_mechanism #undef parameter #undef parameter_len #undef ck_mechanism_info #undef ck_param_type #undef ck_otp_param #undef ck_otp_params #undef ck_otp_signature_info #undef min_key_size #undef max_key_size #undef ck_rv_t #undef ck_notify_t #undef ck_function_list #undef ck_createmutex_t #undef ck_destroymutex_t #undef ck_lockmutex_t #undef ck_unlockmutex_t #undef ck_c_initialize_args #undef create_mutex #undef destroy_mutex #undef lock_mutex #undef unlock_mutex #undef reserved #endif /* CRYPTOKI_COMPAT */ /* System dependencies. */ #if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32) #pragma pack(pop, cryptoki) #endif #if defined(__cplusplus) } #endif #endif /* PKCS11_H */ tpm2-pkcs11-1.7.0/src/pkcs11.c0000664000175000017500000005372214114240163012466 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "pkcs11.h" #include "digest.h" #include "encrypt.h" #include "key.h" #include "log.h" #include "general.h" #include "object.h" #include "random.h" #include "session.h" #include "sign.h" #include "slot.h" #include "token.h" // TODO REMOVE ME #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wunused-parameter" /** * Logs an "enter" function stub via LOGV */ #define _TRACE_CALL LOGV("enter \"%s\"", __func__) /** * Logs an "return" function stub with return value. It expects rv to be declared * as a CK_RV and contain the actual return value */ #define _TRACE_RET(rv) LOGV("return \"%s\" value: %lu", __func__, rv); /** * Calls a user supplied function with arguments logging the function entry and * exit. * * It ensures that the library has been initialized. * * IT PERFORMS NO STATE checks and has NO access to the token, thus it's useful * for routines like C_Init(). * @param fn * The user function to run. * @param varargs * The arguments to pass to fn * @return * The rv value of running fn. */ #define TOKEN_CALL_INIT(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ _CHECK_INIT(out); \ rv = fn(__VA_ARGS__); \ out: \ _TRACE_RET(rv); \ return rv; #define TOKEN_CALL(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ rv = fn(__VA_ARGS__); \ _TRACE_RET(rv); \ return rv; #define TOKEN_CALL_NO_INIT(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ _CHECK_NO_INIT(out); \ rv = fn(__VA_ARGS__); \ out: \ _TRACE_RET(rv); \ return rv; /** * Returns CKR_FUNCTION_NOT_SUPPORTED and if NDEBUG is 0, will cause an * assert(0) failure. * @return * CKR_FUNCTION_NOT_SUPPORTED */ #define TOKEN_UNSUPPORTED \ _TRACE_CALL; \ assert(0); \ _TRACE_RET(CKR_FUNCTION_NOT_SUPPORTED); \ return CKR_FUNCTION_NOT_SUPPORTED; /** * Checks that the library is initialized, if not goes to a user specified * label. Requires rv to be defined as a CK_RV type. * @param label * The label to go to on failure. * @return * Sets rv to CKR_CRYPTOKI_NOT_INITIALIZED. */ #define _CHECK_INIT(label) \ if (!general_is_init()) { \ rv = CKR_CRYPTOKI_NOT_INITIALIZED; \ goto label; \ } /** * Checks that the library is NOT initialized, if not goes to a user specified * label. Requires rv to be defined as a CK_RV type. * @param label * The label to go to on failure. * @return * Sets rv to CKR_CRYPTOKI_ALREADY_INITIALIZED. */ #define _CHECK_NO_INIT(label) \ if (general_is_init()) { \ rv = CKR_CRYPTOKI_ALREADY_INITIALIZED; \ goto label; \ } /** * Interface to calling into the internal interface from a cryptoki * routine that takes slot id. Performs all locking on token. * * @note * - Requires a CK_RV rv to be declared. * - Performs **NO** auth checking. The slot routines implemented * do not need a particular state AFAIK. * - manages token locking * * @param userfun * The userfunction to call, ie the internal API. * @param ... * The arguments to the internal API call from cryptoki. * @return * The internal API's result as rv. */ #define TOKEN_WITH_LOCK_BY_SLOT(userfunc, slot, ...) \ do { \ \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ _CHECK_INIT(out); \ \ token *t = slot_get_token(slot); \ if (!t) { \ rv = CKR_SLOT_ID_INVALID; \ goto out; \ } \ \ token_lock(t); \ rv = userfunc(t, ##__VA_ARGS__); \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /** * Raw interface (DO NOT USE DIRECTLY) for calling into the internal interface from a cryptoki * routine that takes a session handle. Performs all locking on token. * * @note * - Requires a CK_RV rv to be declared. * - do not use directly, use the ones with auth model. * - manages token locking * * @param userfun * The userfunction to call, ie the internal API. * @param ... * The arguments to the internal API call from cryptoki. * @return * The internal API's result as rv. */ #define __TOKEN_WITH_LOCK_BY_SESSION(authfn, userfunc, session, ...) \ do { \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(ctx, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) #define __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(authfn, userfunc, session, ...) \ do { \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(t, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /* * Same as: __TOKEN_WITH_LOCK_BY_SESSION but hands the session_ctx to the internal routine. */ #define __TOKEN_WITH_LOCK_BY_SESSION_KEEP_CTX(authfn, userfunc, session, ...) \ do { \ \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(t, ctx, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /* * Below you'll find the auth routines that validate session * context. Because session context is required to be in a * certain state for things, these auth plugins check a vary * specific condition. Add more if you need different checks. */ static inline CK_RV auth_min_ro_pub(session_ctx *ctx) { UNUSED(ctx); return CKR_OK; } static inline CK_RV auth_min_ro_user(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: /* falls-thru */ case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } /* If the token does not require a PIN, allow calling the function */ token *t = session_ctx_get_token(ctx); if (t && t->config.empty_user_pin) { LOGV("No user PIN is needed for token %u\n", t->id); return CKR_OK; } return CKR_USER_NOT_LOGGED_IN; } static inline CK_RV auth_min_rw_user(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: return CKR_SESSION_READ_ONLY; case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_USER_NOT_LOGGED_IN; } static inline CK_RV auth_any_logged_in(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: case CKS_RW_USER_FUNCTIONS: case CKS_RW_SO_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_USER_NOT_LOGGED_IN; } /* * C_SetPIN can only be called in the: * - “R/W Public Session†state * - “R/W SO Functions†state * - “R/W User Functions†state * * An attempt to call it from a session in any other state fails with * error CKR_SESSION_READ_ONLY. */ static inline CK_RV auth_set_pin_state(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RW_PUBLIC_SESSION: case CKS_RW_SO_FUNCTIONS: case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_SESSION_READ_ONLY; } static inline CK_RV auth_init_pin_state(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RW_SO_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_SESSION_READ_ONLY; } /* * The macros below are used to call into the cryptoki API and perform a myriad of checking using certain * auth models. Not using these is dangerous. */ /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO Public Ie any session would work. */ #define TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_ro_pub, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RW Public. Ie no one logged in and R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_PUB_RW(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_rw_pub, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user logged in and R/O or R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_USER_RO(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_ro_user, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user logged in and R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_USER_RW(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_rw_user, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user or so logged in and R/O or R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_LOGGED_IN(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_any_logged_in, userfunc, session, ##__VA_ARGS__) #define TOKEN_WITH_LOCK_BY_SESSION_SET_PIN_STATE(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(auth_set_pin_state, userfunc, session, ##__VA_ARGS__) #define TOKEN_WITH_LOCK_BY_SESSION_INIT_PIN_STATE(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(auth_init_pin_state, userfunc, session, ##__VA_ARGS__) CK_RV C_Initialize (void *init_args) { TOKEN_CALL_NO_INIT(general_init, init_args); } CK_RV C_Finalize (void *pReserved) { TOKEN_CALL_INIT(general_finalize, pReserved); } CK_RV C_GetInfo (CK_INFO *info) { TOKEN_CALL_INIT(general_get_info, info); } CK_RV C_GetFunctionList (CK_FUNCTION_LIST **function_list) { TOKEN_CALL(general_get_func_list, function_list); } CK_RV C_GetSlotList (CK_BYTE token_present, CK_SLOT_ID *slot_list, CK_ULONG_PTR count) { TOKEN_CALL_INIT(slot_get_list, token_present, slot_list, count); } CK_RV C_GetSlotInfo (CK_SLOT_ID slotID, CK_SLOT_INFO *info) { TOKEN_CALL_INIT(slot_get_info, slotID, info); } CK_RV C_GetTokenInfo (CK_SLOT_ID slotID, CK_TOKEN_INFO *info) { TOKEN_WITH_LOCK_BY_SLOT(token_get_info, slotID, info); } CK_RV C_WaitForSlotEvent (CK_FLAGS flags, CK_SLOT_ID *slot, void *pReserved) { TOKEN_UNSUPPORTED; } CK_RV C_GetMechanismList (CK_SLOT_ID slotID, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count) { TOKEN_CALL_INIT(slot_mechanism_list_get, slotID, mechanism_list, count); } CK_RV C_GetMechanismInfo (CK_SLOT_ID slotID, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info) { TOKEN_CALL_INIT(slot_mechanism_info_get, slotID, type, info); } CK_RV C_InitToken (CK_SLOT_ID slotID, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label) { TOKEN_WITH_LOCK_BY_SLOT(token_init, slotID, pin, pin_len, label); } CK_RV C_InitPIN (CK_SESSION_HANDLE session, CK_UTF8CHAR_PTR pin, CK_ULONG pin_len) { TOKEN_WITH_LOCK_BY_SESSION_INIT_PIN_STATE(token_initpin, session, pin, pin_len); } CK_RV C_SetPIN (CK_SESSION_HANDLE session, CK_UTF8CHAR_PTR old_pin, CK_ULONG old_len, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len) { TOKEN_WITH_LOCK_BY_SESSION_SET_PIN_STATE(token_setpin, session, old_pin, old_len, new_pin, new_len); } CK_RV C_OpenSession (CK_SLOT_ID slotID, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session) { TOKEN_CALL_INIT(session_open, slotID, flags, application, notify, session); } CK_RV C_CloseSession (CK_SESSION_HANDLE session) { TOKEN_CALL_INIT(session_close, session); } CK_RV C_CloseAllSessions (CK_SLOT_ID slotID) { TOKEN_CALL_INIT(session_closeall, slotID); } CK_RV C_GetSessionInfo (CK_SESSION_HANDLE session, CK_SESSION_INFO *info) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(session_ctx_get_info, session, info); } CK_RV C_GetOperationState (CK_SESSION_HANDLE session, CK_BYTE_PTR operation_state, CK_ULONG_PTR operation_state_len) { TOKEN_UNSUPPORTED; } CK_RV C_SetOperationState (CK_SESSION_HANDLE session, CK_BYTE_PTR operation_state, CK_ULONG operation_state_len, CK_OBJECT_HANDLE encryption_key, CK_OBJECT_HANDLE authentiation_key) { TOKEN_UNSUPPORTED; } CK_RV C_Login (CK_SESSION_HANDLE session, CK_USER_TYPE user_type, CK_BYTE_PTR pin, CK_ULONG pin_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(session_ctx_login, session, user_type, pin, pin_len); } CK_RV C_Logout (CK_SESSION_HANDLE session) { TOKEN_WITH_LOCK_BY_SESSION_LOGGED_IN(session_ctx_logout, session); } CK_RV C_CreateObject (CK_SESSION_HANDLE session, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_create, session, templ, count, object); } CK_RV C_CopyObject (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *new_object) { TOKEN_UNSUPPORTED; } CK_RV C_DestroyObject (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(object_destroy, session, object); } CK_RV C_GetObjectSize (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ULONG_PTR size) { TOKEN_UNSUPPORTED; } CK_RV C_GetAttributeValue (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_get_attributes, session, object, templ, count); } CK_RV C_SetAttributeValue (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(object_set_attributes, session, object, templ, count); } CK_RV C_FindObjectsInit (CK_SESSION_HANDLE session, CK_ATTRIBUTE *templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find_init, session, templ, count); } CK_RV C_FindObjects (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE *object, CK_ULONG max_object_count, CK_ULONG_PTR object_count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find, session, object, max_object_count, object_count); } CK_RV C_FindObjectsFinal (CK_SESSION_HANDLE session) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find_final, session); } CK_RV C_EncryptInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_init, session, mechanism, key); } CK_RV C_Encrypt (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR encrypted_data, CK_ULONG_PTR encrypted_data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_oneshot, session, data, data_len, encrypted_data, encrypted_data_len); } CK_RV C_EncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_update, session, part, part_len, encrypted_part, encrypted_part_len); } CK_RV C_EncryptFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR last_encrypted_part, CK_ULONG_PTR last_encrypted_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_final, session, last_encrypted_part, last_encrypted_part_len); } CK_RV C_DecryptInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_init, session, mechanism, key); } CK_RV C_Decrypt (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_data, CK_ULONG encrypted_data_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_oneshot, session, encrypted_data, encrypted_data_len, data, data_len); } CK_RV C_DecryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_update, session, encrypted_part, encrypted_part_len, part, part_len); } CK_RV C_DecryptFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_final, session, last_part, last_part_len); } CK_RV C_DigestInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_init, session, mechanism); } CK_RV C_Digest (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_oneshot, session, data, data_len, digest, digest_len); } CK_RV C_DigestUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_update, session, part, part_len); } CK_RV C_DigestKey (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key) { TOKEN_UNSUPPORTED; } CK_RV C_DigestFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_final, session, digest, digest_len); } CK_RV C_SignInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_init, session, mechanism, key); } CK_RV C_Sign (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign, session, data, data_len, signature, signature_len); } CK_RV C_SignUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_update, session, part, part_len); } CK_RV C_SignFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_final, session, signature, signature_len); } CK_RV C_SignRecoverInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_UNSUPPORTED; } CK_RV C_SignRecover (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_UNSUPPORTED; } CK_RV C_VerifyInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_init, session, mechanism, key); } CK_RV C_Verify (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify, session, data, data_len, signature, signature_len); } CK_RV C_VerifyUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_update, session, part, part_len); } CK_RV C_VerifyFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_final, session, signature, signature_len); } CK_RV C_VerifyRecoverInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_recover_init, session, mechanism, key); } CK_RV C_VerifyRecover (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_recover, session, signature, signature_len, data, data_len); } CK_RV C_DigestEncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_UNSUPPORTED; } CK_RV C_DecryptDigestUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_UNSUPPORTED; } CK_RV C_SignEncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_UNSUPPORTED; } CK_RV C_DecryptVerifyUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_UNSUPPORTED; } CK_RV C_GenerateKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *key) { TOKEN_UNSUPPORTED; } CK_RV C_GenerateKeyPair (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_ATTRIBUTE *public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE *private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE *public_key, CK_OBJECT_HANDLE *private_key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(key_gen, session, mechanism, public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count, public_key, private_key); } CK_RV C_WrapKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE wrapping_key, CK_OBJECT_HANDLE key, CK_BYTE_PTR wrapped_key, CK_ULONG_PTR wrapped_key_len) { TOKEN_UNSUPPORTED; } CK_RV C_UnwrapKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE unwrapping_key, CK_BYTE_PTR wrapped_key, CK_ULONG wrapped_key_len, CK_ATTRIBUTE *templ, CK_ULONG attribute_count, CK_OBJECT_HANDLE *key) { TOKEN_UNSUPPORTED; } CK_RV C_DeriveKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE base_key, CK_ATTRIBUTE *templ, CK_ULONG attribute_count, CK_OBJECT_HANDLE *key) { TOKEN_UNSUPPORTED; } CK_RV C_SeedRandom (CK_SESSION_HANDLE session, CK_BYTE_PTR seed, CK_ULONG seed_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(seed_random, session, seed, seed_len); } CK_RV C_GenerateRandom (CK_SESSION_HANDLE session, CK_BYTE_PTR random_data, CK_ULONG random_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(random_get, session, random_data, random_len); } CK_RV C_GetFunctionStatus (CK_SESSION_HANDLE session) { TOKEN_UNSUPPORTED; } CK_RV C_CancelFunction (CK_SESSION_HANDLE session) { TOKEN_UNSUPPORTED; } // TODO REMOVE ME #pragma GCC diagnostic pop tpm2-pkcs11-1.7.0/src/lib/0000775000175000017500000000000014124415534012044 500000000000000tpm2-pkcs11-1.7.0/src/lib/session_table.h0000664000175000017500000000266114114236775015003 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_TABLE_H_ #define SRC_PKCS11_SESSION_TABLE_H_ #include "session.h" #include "session_ctx.h" #include "session_table.h" typedef struct token token; typedef struct session_table session_table; CK_RV session_table_new(session_table **t); void session_table_free(session_table *t); void session_table_get_cnt(session_table *t, unsigned long *all, unsigned long *rw, unsigned long *ro); CK_RV session_table_new_entry(session_table *t, CK_SESSION_HANDLE *handle, token *tok, CK_FLAGS flags); session_ctx *session_table_lookup(session_table *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx_by_handle(token *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx(token *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx_all(token *t); /** * performs a session_ctx_login_event() call for each item in the table * with the session table lock held. * @param s_table * The session table * @param user * The user triggering the login event. */ void session_table_login_event(session_table *s_table, CK_USER_TYPE user); /** * performs a session_ctx_logout_event() call for each item in the table * with the session table lock held. * @param s_table * The session table * @param called_session * The session context that the logout event occurred on. */ void token_logout_all_sessions(token *tok); #endif /* SRC_PKCS11_SESSION_TABLE_H_ */ tpm2-pkcs11-1.7.0/src/lib/attrs.h0000664000175000017500000002235014114240163013265 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_ATTRS_H_ #define SRC_LIB_ATTRS_H_ #include #include #include "pkcs11.h" /* * We will allow these to be accessed, but the values are not stable */ #define CKA_VENDOR_TPM2_DEFINED 0x0F000000UL #define CKA_TPM2_OBJAUTH_ENC (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x1UL) #define CKA_TPM2_PUB_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x2UL) #define CKA_TPM2_PRIV_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x3UL) #define CKA_TPM2_ENC_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x4UL) /* Invalid values for error detection */ #define CK_OBJECT_CLASS_BAD (~(CK_OBJECT_CLASS)0) #define CKA_KEY_TYPE_BAD (~(CK_KEY_TYPE)0) /** * The heart of any PKCS11 object is it's attribute list. This list * attempts to make dealing with list attributes simple. It allows you * to easily add scalar and buffer types (deep copy) and maintains metadata * about the type stored in the attribute. Thus, de-serialization can occur * much more simply. */ typedef struct attr_list attr_list; typedef struct attr_handler attr_handler; struct attr_handler { /** Attribute type to invoke the handler for */ CK_ULONG type; /** handler to invoke for the attribute type */ CK_RV (*handler)(const CK_ATTRIBUTE_PTR attr, void *userdat); }; /** * Creates a new attribute list * @return * attribute list or NULL on error. */ attr_list *attr_list_new(void); /** * Duplicates an attribute list. * @param old * The attribute list to duplicate. * @param new * The new attribute list, that's a duplicate of old. * @return * CKR_OK on success. */ CK_RV attr_list_dup(attr_list *old, attr_list **new); /** * Adds a buffer to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The buffer, can be NULL. * @param len * The length of the buffer. 0 is treated as NULL value. * @return * true on success, false otherwise. */ bool attr_list_add_buf(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len); /** * Adds a CK_BOOL to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The Attributes CK_BBOOL value to add. * @return * true on success, false otherwise. * @note * Some PKCS11 types are just typedefs of CK_BYTE, like CK_BOOL. * However, CK_BOOL is more common, so for now this interface * can serve both use cases: adding any CK_BYTE typedef type. */ bool attr_list_add_bool(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BBOOL value); /** * Adds a CK_ULONG to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The Attributes CK_ULONG value to add. * @return * true on success, false otherwise. * @note * Most PKCS11 types are just typedefs of CK_ULONG, so this works * for most types. However, don't use this for CK_BYTE typedefs * as the storage size will be bigger than expected by clients. */ bool attr_list_add_int(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG value); /** * Returns the count items in the attribute list. * * @param l * The list to query the length of. MUST not be NULL. * @return * The count in items. */ CK_ULONG attr_list_get_count(attr_list *l); /** * The pointer to the internal pkcs11 formatted attribute list. * @param l * The list to access. * @return * The attribute ptr, may be NULL. */ CK_ATTRIBUTE_PTR attr_list_get_ptr(attr_list *l); /** * Frees all storage of the attribute list. * @param attrs * The attribute list to free. */ void attr_list_free(attr_list *attrs); /** * Scrubs the memory pointed to by the pValue pointer and frees it. * The attribute pointer is expected to be contained within in attr_list. * The attribute is NOT REMOVED from the list and type remains unchanged. * Sets ulValueLen to 0. * @param attr * The attr to free. */ void attr_pfree_cleanse(CK_ATTRIBUTE_PTR attr); /** * Given a raw attribute list, perhaps from a client caller, * creates an attr_list which contains the caller supplied data, * deep copied with type metadata. * * @param attrs * The attributes to deep copy and add type metadata from. * @param cnt * The number of attributes. * @param copy * The allocated attr_list. * @return * true on success, false otherwise. * @note * Internally this function has registered converters for known attributes, * however, if an unknown attribute is converted, the default conversion is * to figure out type from the value length (ulValueLen). It will print a * warning message to add a specific handler. */ bool attr_typify(CK_ATTRIBUTE_PTR attrs, CK_ULONG cnt, attr_list **copy); /** * Appends one attr_list to another. * @param old_attrs * The list to append to. * @param new_attrs * The list to append. Resource is de-allocated on success and * the new_attrs pointer is NULL. * @return * The new list which should be passed to attr_list_free(). */ attr_list *attr_list_append_attrs( attr_list *old_attrs, attr_list **new_attrs); /** * Given an object created of type mech, and a list of starting attributes, * populate the public and private attribute lists for the object(s). * @param public_attrs * The public attribute list to allocate and populate. * @param private_attrs * The private attribute list to allocate and populate. * @param attrs * The initial attribute list to start with. * @param mech * The mechanism used to generate the object. * @return * CKR_OK on success, false otherwise. */ CK_RV attr_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs, attr_list *attrs, CK_MECHANISM_TYPE mech); /** * Invokes a list of handlers on a raw pkcs11 list. Handlers using this interface must not * expect typed_memory.h interface on pValue pointers. * * @param attrs * The attribute list. * @param count * The number of items in the attribute list. * @param handlers * The handlers to invoke. * @param len * The number of handlers to invoke. * @param udata * User data to pass to the handlers. * @return */ CK_RV attr_list_raw_invoke_handlers(const CK_ATTRIBUTE_PTR attrs, CK_ULONG count, const attr_handler *handlers, size_t len, void *udata); /** * Invokes a list of handlers on an attr_list. Handlers using this interface may * expect typed_memory.h interface on pValue pointers. * * @param attrs * The attribute list. * @param handlers * The handlers to invoke. * @param len * The number of handlers to invoke. * @param udata * User data to pass to the handlers. * @return */ CK_RV attr_list_invoke_handlers(attr_list *l, const attr_handler *handlers, size_t len, void *udata); /** * Given an attribute pointer, retrieves the CK_BBOOL value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_BBOOL value. * @return * CKR_OK on success. */ CK_RV attr_CK_BBOOL(CK_ATTRIBUTE_PTR attr, CK_BBOOL *x); /** * Given an attribute pointer, retrieves the CK_ULONG value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_ULONG value. * @return * CKR_OK on success. */ CK_RV attr_CK_ULONG(CK_ATTRIBUTE_PTR attr, CK_ULONG *x); /** * Given an attribute pointer, retrieves the CK_CLASS value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_CLASS value. * @return * CKR_OK on success. */ CK_RV attr_CK_OBJECT_CLASS(CK_ATTRIBUTE_PTR attr, CK_OBJECT_CLASS *x); CK_RV attr_CK_KEY_TYPE(CK_ATTRIBUTE_PTR attr, CK_KEY_TYPE *x); CK_BBOOL attr_list_get_CKA_PRIVATE(attr_list *attrs, CK_BBOOL defvalue); CK_BBOOL attr_list_get_CKA_TOKEN(attr_list *attrs, CK_BBOOL defvalue); CK_KEY_TYPE attr_list_get_CKA_KEY_TYPE(attr_list *attrs, CK_KEY_TYPE defvalue); CK_OBJECT_CLASS attr_list_get_CKA_CLASS(attr_list *attrs, CK_OBJECT_CLASS defvalue); /** * Searches an attr_list for an attribute specified by type. * @param haystack * The attr_list to search. * @param needle * The attribute type to search for. * @return * The attribute or NULL if not found. */ CK_ATTRIBUTE_PTR attr_get_attribute_by_type(attr_list *haystack, CK_ATTRIBUTE_TYPE needle); /** * Searches a raw attribute list for an attribute specified by type. * @param haystack * The raw attribute list to search. * @ param haystack_count * The raw attribute list count. * @param needle * The attribute type to search for. * @return * The attribute or NULL if not found. */ CK_ATTRIBUTE_PTR attr_get_attribute_by_type_raw(CK_ATTRIBUTE_PTR haystack, CK_ULONG haystack_count, CK_ATTRIBUTE_TYPE needle); CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_common_add_RSA_publickey(attr_list **public_attrs); CK_RV attr_common_add_storage(attr_list **public_attrs); CK_RV attr_common_add_data(attr_list **storage_attrs); CK_RV rsa_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs); CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr); const char *attr_get_name(CK_ATTRIBUTE_TYPE t); #endif /* SRC_LIB_ATTRS_H_ */ tpm2-pkcs11-1.7.0/src/lib/mech.c0000664000175000017500000013564314116451527013063 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include "attrs.h" #include "checks.h" #include "log.h" #include "mech.h" #include "object.h" #include "ssl_util.h" #include "pkcs11.h" #include "tpm.h" #include "utils.h" #define MAX_MECHS 128 typedef enum mechanism_flags mechanism_flags; enum mechanism_flags { mf_tpm_supported = 1 << 0, mf_is_keygen = 1 << 1, mf_is_synthetic = 1 << 3, mf_is_digester = 1 << 4, mf_sign = 1 << 5, mf_verify = 1 << 6, mf_encrypt = 1 << 7, mf_decrypt = 1 << 8, mf_rsa = 1 << 9, mf_ecc = 1 << 10, mf_aes = 1 << 11, mf_force_synthetic = 1 << 12, mf_hmac = 1 << 13, }; typedef struct mdetail_entry mdetail_entry; typedef struct nid_detail nid_detail; typedef struct rsa_detail rsa_detail; struct rsa_detail { CK_ULONG bits; bool supported; }; struct nid_detail { int nid; bool supported; }; /* * Validates that the mechanism parameters are sane and supported */ typedef CK_RV (*fn_validator)(mdetail *details, CK_MECHANISM_PTR mech, attr_list *attrs); /* * Some crypto operations can be synthesized (padding done off hw and raw crypto performed) * This routine would do all those steps. */ typedef CK_RV (*fn_synthesizer)(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); typedef CK_RV (*fn_get_halg)(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *halg); typedef CK_RV (*fn_get_digester)(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); typedef CK_RV (*fn_get_tpm_opdata)(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **encdata); struct mdetail_entry { CK_MECHANISM_TYPE type; fn_validator validator; fn_synthesizer synthesizer; fn_synthesizer unsynthesizer; fn_get_tpm_opdata get_tpm_opdata; fn_get_halg get_halg; fn_get_digester get_digester; int padding; mechanism_flags flags; }; struct mdetail { size_t mdetail_len; mdetail_entry *mech_entries; size_t rsa_detail_len; rsa_detail *rsa_entries; size_t nid_detail_len; nid_detail *nid_entries; }; static CK_RV rsa_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pss_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_oaep_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pss_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV ecc_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV ecdsa_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV hmac_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pkcs_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pss_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pkcs_hash_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV aes_cbc_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV aes_cbc_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pss_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV rsa_oaep_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha1_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha256_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha384_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha512_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV rsa_pss_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV rsa_oaep_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha1_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha256_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha384_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha512_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static const mdetail_entry _g_mechs_templ[] = { /* RSA */ { .type = CKM_RSA_PKCS_KEY_PAIR_GEN, .validator = rsa_keygen_validator, .flags = mf_is_keygen|mf_rsa }, { .type = CKM_RSA_X_509, .flags = mf_is_synthetic|mf_sign|mf_verify|mf_encrypt|mf_decrypt|mf_rsa, .get_tpm_opdata = tpm_rsa_pkcs_get_opdata, .padding = RSA_NO_PADDING }, { .type = CKM_RSA_PKCS, .flags = mf_force_synthetic|mf_sign|mf_verify|mf_encrypt|mf_decrypt|mf_rsa, .validator = rsa_pkcs_validator, .synthesizer = rsa_pkcs_synthesizer, .unsynthesizer = rsa_pkcs_unsynthesizer, .get_tpm_opdata = tpm_rsa_pkcs_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_validator, .synthesizer = rsa_pss_synthesizer, .get_digester = rsa_pss_get_digester, .get_tpm_opdata = tpm_rsa_pss_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_RSA_PKCS_OAEP, . flags = mf_encrypt|mf_decrypt|mf_rsa, .validator = rsa_oaep_validator, .get_halg = rsa_oaep_get_halg, .get_digester = rsa_oaep_get_digester, .get_tpm_opdata = tpm_rsa_oaep_get_opdata, .padding = RSA_PKCS1_OAEP_PADDING }, { .type = CKM_SHA1_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha1_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA256_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha256_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA384_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha384_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA512_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha512_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA1_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha1_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA256_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha256_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA384_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha384_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA512_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha512_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, /* EC */ { .type = CKM_EC_KEY_PAIR_GEN, .flags = mf_is_keygen|mf_ecc, .validator = ecc_keygen_validator }, { .type = CKM_ECDSA, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_tpm_opdata = tpm_ec_ecdsa_get_opdata }, { .type = CKM_ECDSA_SHA1, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha1_get_opdata }, { .type = CKM_ECDSA_SHA256, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha256_get_opdata }, { .type = CKM_ECDSA_SHA384, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha384_get_opdata }, { .type = CKM_ECDSA_SHA512, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha512_get_opdata }, /* AES */ { .type = CKM_AES_KEY_GEN, .flags = mf_is_keygen|mf_aes }, { .type = CKM_AES_CBC, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_cbc_get_opdata }, { .type = CKM_AES_CBC_PAD, .flags = mf_encrypt|mf_decrypt|mf_aes|mf_force_synthetic, .get_tpm_opdata = tpm_aes_cbc_get_opdata, .synthesizer = aes_cbc_synthesizer, .unsynthesizer = aes_cbc_unsynthesizer }, { .type = CKM_AES_CFB128, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_cfb_get_opdata }, { .type = CKM_AES_ECB, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_ecb_get_opdata }, { .type = CKM_AES_CTR, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_ctr_get_opdata }, /* hashing */ { .type = CKM_SHA_1, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha1_get_digester }, { .type = CKM_SHA256, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha256_get_digester }, { .type = CKM_SHA384, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha384_get_digester }, { .type = CKM_SHA512, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha512_get_digester }, /* hmac */ { .type = CKM_SHA_1_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha1_get_opdata }, { .type = CKM_SHA256_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha256_get_opdata }, { .type = CKM_SHA384_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha384_get_opdata }, { .type = CKM_SHA512_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha512_get_opdata }, }; const rsa_detail _g_rsa_keysizes_templ [] = { { .bits = 1024 }, { .bits = 2048 }, { .bits = 3072 }, { .bits = 4096 }, }; const nid_detail _g_ecc_curve_nids_templ [] = { { .nid = NID_X9_62_prime192v1 }, { .nid = NID_secp224r1 }, { .nid = NID_X9_62_prime256v1 }, { .nid = NID_secp384r1, }, { .nid = NID_secp521r1, }, }; static mdetail_entry *mlookup(mdetail *details, CK_MECHANISM_TYPE t) { CK_ULONG i; for (i=0; i < details->mdetail_len; i++) { mdetail_entry *m = &details->mech_entries[i]; if (m->type == t) { return m; } } return NULL; } static CK_RV mech_init(tpm_ctx *tctx, mdetail *m) { /* * Get the mechanisms */ CK_MECHANISM_TYPE tpm_mechs[MAX_MECHS]; CK_ULONG tpm_mechs_len = ARRAY_LEN(tpm_mechs); CK_RV rv = tpm2_getmechanisms(tctx, tpm_mechs, &tpm_mechs_len); if (rv != CKR_OK) { return rv; } assert(tpm_mechs_len <= m->mdetail_len); /* * Update whether or not the TPM supports it or not * and any other metadata */ CK_ULONG i; for (i=0; i < tpm_mechs_len; i++) { CK_MECHANISM_TYPE t = tpm_mechs[i]; mdetail_entry *d = NULL; CK_ULONG j; for (j=0; j < m->mdetail_len; j++) { d = &m->mech_entries[j]; if (d->type == t) { d->flags |= mf_tpm_supported; break; } } } mdetail_entry *d = mlookup(m, CKM_RSA_PKCS_KEY_PAIR_GEN); if (d) { /* get supported RSA key bit sizes */ for (i=0; i < m->rsa_detail_len; i++) { rv = tpm_is_rsa_keysize_supported(tctx, m->rsa_entries[i].bits); if (rv == CKR_MECHANISM_INVALID) { continue; } if(rv == CKR_OK) { m->rsa_entries[i].supported = true; continue; } return rv; } } else { LOGV("RSA Keygen not detected"); } d = mlookup(m, CKM_EC_KEY_PAIR_GEN); if (d) { /* get supported ECC curves */ for (i=0; i < m->nid_detail_len; i++) { rv = tpm_is_ecc_curve_supported(tctx, m->nid_entries[i].nid); if (rv == CKR_MECHANISM_INVALID) { continue; } if(rv == CKR_OK) { m->nid_entries[i].supported = true; continue; } return rv; } } else { LOGV("EC Keygen not detected"); } return CKR_OK; } void mdetail_free(mdetail **mdtl) { if (!mdtl || !*mdtl) { return; } mdetail *m = *mdtl; free(m->mech_entries); free(m->nid_entries); free(m->rsa_entries); free(m); *mdtl = NULL; } void mdetail_set_pss_status(mdetail *m, bool pss_sigs_good) { CK_MECHANISM_TYPE mtypes[] = { CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, CKM_SHA384_RSA_PKCS_PSS, CKM_SHA512_RSA_PKCS_PSS, }; size_t i = 0; for (i=0; i < ARRAY_LEN(mtypes); i++) { CK_MECHANISM_TYPE t = mtypes[i]; mdetail_entry *d = mlookup(m, t); assert(d); if (pss_sigs_good) { d->flags |= mf_tpm_supported; } else { d->flags &= ~mf_tpm_supported; } } } CK_RV mdetail_new(tpm_ctx *ctx, mdetail **mout, pss_config_state pss_sig_state) { assert(mout); mdetail_entry *d = calloc(1, sizeof(_g_mechs_templ)); if (!d) { LOGE("oom"); return CKR_HOST_MEMORY; } nid_detail *n = calloc(1, sizeof(_g_ecc_curve_nids_templ)); if (!n) { LOGE("oom"); free(d); return CKR_HOST_MEMORY; } rsa_detail *r = calloc(1, sizeof(_g_rsa_keysizes_templ)); if (!r) { LOGE("oom"); free(d); free(n); return CKR_HOST_MEMORY; } mdetail *m = calloc(1, sizeof(mdetail)); if (!m) { LOGE("oom"); free(d); free(n); free(r); return CKR_HOST_MEMORY; } memcpy(d, _g_mechs_templ, sizeof(_g_mechs_templ)); m->mdetail_len = ARRAY_LEN(_g_mechs_templ); m->mech_entries = d; memcpy(n, _g_ecc_curve_nids_templ, sizeof(_g_ecc_curve_nids_templ)); m->nid_detail_len = ARRAY_LEN(_g_ecc_curve_nids_templ); m->nid_entries = n; memcpy(r, _g_rsa_keysizes_templ, sizeof(_g_rsa_keysizes_templ)); m->rsa_detail_len = ARRAY_LEN(_g_rsa_keysizes_templ); m->rsa_entries = r; /* * TODO * make mech_init smarter by caching the various RSA and EC curve * information in the YAML token config. Thus reduce TPM round trips. * See https://github.com/tpm2-software/tpm2-pkcs11/issues/455 */ CK_RV rv = mech_init(ctx, m); if (rv != CKR_OK) { LOGE("mech_init failed: 0x%lx", rv); free(m); free(d); free(n); free(r); return rv; } /* * Some tokens know their PSS state, always use it. The TPM backend code * might get it wrong, as it *ONLY* checks TPMA_MODES in the properties. * Else we will figure it out when we need to sign, which is when it really * matters. */ if (pss_sig_state != pss_config_state_unk) { bool pss_sigs_good = (pss_sig_state == pss_config_state_good) ? true : false; LOGV("Updating mech detail table that PSS signatures are: %s", pss_sigs_good ? "good" : "bad"); mdetail_set_pss_status(m, pss_sigs_good); } *mout = m; return CKR_OK; }; #define _L(a) (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) #define _P(a) ((CK_MECHANISM_TYPE_PTR)a->pValue) static CK_RV has_raw_rsa(attr_list *attrs) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } /* If the TPM doesn't support it, it needs to support raw sign */ bool supported = false; CK_ULONG i; for (i=0; i < _L(a); i++) { CK_MECHANISM_TYPE t = _P(a)[i]; if (t == CKM_RSA_X_509) { supported = true; break; } } return supported ? CKR_OK : CKR_MECHANISM_INVALID; } CK_RV hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* hashers don't take params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } /* all known hashing digests are supported in software */ return CKR_OK; } CK_RV hmac_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* The non general HMAC routines don't take params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } /* Is the mechanism in the list of allowed mechs? */ bool supported = false; CK_ULONG i; for (i=0; i < _L(a); i++) { CK_MECHANISM_TYPE t = _P(a)[i]; if (t == mech->mechanism) { supported = true; break; } } return supported ? CKR_OK : CKR_MECHANISM_INVALID; } CK_RV rsa_pkcs_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(m); /* * CKM_RSA_PKCS has the PKCS v1.5 signing structure computed by the client * and requires only padding, so no parameters should be set */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } return has_raw_rsa(attrs); } CK_RV rsa_pkcs_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* CKM__RSA_PKCS takes no params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } /* if the TPM supports it natively, we're done */ if (d->flags & mf_tpm_supported) { return CKR_OK; } return has_raw_rsa(attrs); } CK_RV rsa_pss_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); /* no SHA224 support AFAIK */ if (params->mgf == CKG_MGF1_SHA224) { return CKR_MECHANISM_PARAM_INVALID; } /* * The TPM fixes the MGF to the hash algorithm and the salt to the hashlen. */ CK_MECHANISM test_type = { 0 }; if (params->hashAlg == CKM_SHA_1) { if ((params->mgf != CKG_MGF1_SHA1) ||(params->sLen != 20)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA1_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA256) { if ((params->mgf != CKG_MGF1_SHA256) ||(params->sLen != 32)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA256_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA384) { if ((params->mgf != CKG_MGF1_SHA384) ||(params->sLen != 48)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA384_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA512) { if ((params->mgf != CKG_MGF1_SHA512) ||(params->sLen != 64)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA512_RSA_PKCS_PSS; } else { LOGE("Unknown hash algorithm: 0x%lx", params->hashAlg); return CKR_MECHANISM_PARAM_INVALID; } /* Is it synthetic or native TPM supported ?*/ bool is_synthetic = true; CK_RV rv = mech_is_synthetic(m, &test_type, &is_synthetic); if (rv != CKR_OK) { return rv; } /* * For synthetic operations we need raw RSA do we have it? Else we're * fine */ return is_synthetic ? has_raw_rsa(attrs) : CKR_OK; } CK_RV rsa_oaep_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); /* no SHA224 support AFAIK */ if (params->mgf == CKG_MGF1_SHA224) { return CKR_MECHANISM_PARAM_INVALID; } CK_MECHANISM_TYPE halg = 0; CK_RV rv = d->get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } if (halg != params->hashAlg) { return CKR_MECHANISM_PARAM_INVALID; } if (!params->source) { if (params->pSourceData || params->ulSourceDataLen) { return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } if (params->source != CKZ_DATA_SPECIFIED) { return CKR_MECHANISM_PARAM_INVALID; } /* * now that the OAEP portion IS supported AND the mechanism params check out, * is supported natively? */ if (d->flags & mf_tpm_supported) { return CKR_OK; } return CKR_MECHANISM_INVALID; } CK_RV rsa_pss_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this may have an argument */ if (mech->pParameter || mech->ulParameterLen) { return rsa_pss_validator(m, mech, attrs); } /* * now that the PSS portion IS supported AND the mechanism params check out, * we need raw RSA, do we have it? */ return has_raw_rsa(attrs); } CK_RV rsa_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this requires no argument */ if (!mech->pParameter || !mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!a) { return CKR_TEMPLATE_INCOMPLETE; } CK_ULONG bits = 0; safe_mul(bits, a->ulValueLen, 8); CK_ULONG i; for (i=0; i < m->mdetail_len; i++) { if (m->rsa_entries[i].bits == bits) { return m->rsa_entries[i].supported ? CKR_OK : CKR_ATTRIBUTE_VALUE_INVALID; } } return CKR_ATTRIBUTE_VALUE_INVALID; } CK_RV ecc_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this requires no argument */ if (!mech->pParameter || !mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_EC_PARAMS); if (!a) { return CKR_TEMPLATE_INCOMPLETE; } int nid = 0; CK_RV rv = ec_params_to_nid(a, &nid); if (rv != CKR_OK) { return rv; } CK_ULONG i; for (i=0; i < m->nid_detail_len; i++) { if (m->nid_entries[i].nid == nid) { return m->nid_entries[i].supported ? CKR_OK : CKR_MECHANISM_INVALID; } } return CKR_MECHANISM_INVALID; } CK_RV ecdsa_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* ECDSA and ECDSA SHA1 are always supported */ /* this does not require an argument */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } CK_RV sha1_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA_1; return CKR_OK; } CK_RV sha256_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA256; return CKR_OK; } CK_RV sha384_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA384; return CKR_OK; } CK_RV sha512_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA512; return CKR_OK; } static CK_RV rsa_pss_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); *halg = params->hashAlg; return CKR_OK; } static CK_RV rsa_oaep_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); *halg = params->hashAlg; return CKR_OK; } CK_RV rsa_pss_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { CK_MECHANISM_TYPE halg = 0; CK_RV rv = rsa_pss_get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } mdetail_entry *d = mlookup(m, halg); if (!d) { return CKR_MECHANISM_INVALID; } return d->get_digester(m, mech, md); } CK_RV rsa_oaep_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { CK_MECHANISM_TYPE halg = 0; CK_RV rv = rsa_oaep_get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } mdetail_entry *d = mlookup(m, halg); if (!d) { return CKR_MECHANISM_INVALID; } return d->get_digester(m, mech, md); } CK_RV sha1_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha1(); return CKR_OK; } CK_RV sha256_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha256(); return CKR_OK; } CK_RV sha384_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha384(); return CKR_OK; } CK_RV sha512_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha512(); return CKR_OK; } CK_RV rsa_pkcs_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mech); UNUSED(mdtl); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS_BITS); if (!a) { LOGE("Signing key has no CKA_MODULUS_BITS"); return CKR_GENERAL_ERROR; } if (a->ulValueLen != sizeof(CK_ULONG)) { LOGE("Modulus bit pointer data not size of CK_ULONG, got %lu, expected %zu", a->ulValueLen, sizeof(CK_ULONG)); return CKR_GENERAL_ERROR; } CK_ULONG_PTR keybits = (CK_ULONG_PTR)a->pValue; size_t padded_len = *keybits / 8; if (*outlen < padded_len) { LOGE("Internal buffer is too small, got: %lu, required %lu", *outlen, padded_len); return CKR_GENERAL_ERROR; } /* Apply the PKCS1.5 padding */ int rc = RSA_padding_add_PKCS1_type_1(outbuf, padded_len, inbuf, inlen); if (!rc) { LOGE("Applying RSA padding failed"); return CKR_GENERAL_ERROR; } *outlen = padded_len; return CKR_OK; } CK_RV rsa_pkcs_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mech); UNUSED(mdtl); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS_BITS); if (!a) { LOGE("Signing key has no CKA_MODULUS_BITS"); return CKR_GENERAL_ERROR; } if (a->ulValueLen != sizeof(CK_ULONG)) { LOGE("Modulus bit pointer data not size of CK_ULONG, got %lu, expected %zu", a->ulValueLen, sizeof(CK_ULONG)); return CKR_GENERAL_ERROR; } CK_ULONG_PTR keybits = (CK_ULONG_PTR)a->pValue; size_t key_bytes = *keybits / 8; unsigned char buf[4096]; int rc = RSA_padding_check_PKCS1_type_2(buf, sizeof(buf), inbuf, inlen, key_bytes); if (rc < 0) { LOGE("Could not recover CKM_RSA_PKCS Padding"); return CKR_GENERAL_ERROR; } /* cannot be < 0 because of check above */ if (!outbuf || (unsigned)rc > *outlen) { *outlen = rc; return outbuf ? CKR_BUFFER_TOO_SMALL : CKR_OK; } *outlen = rc; memcpy(outbuf, buf, rc); return CKR_OK; } CK_RV rsa_pss_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { const EVP_MD *md = NULL; CK_RV rv = mech_get_digester(mdtl, mech, &md); if (rv != CKR_OK) { LOGE("Could not get digester for mech: 0x%lx", mech->mechanism); return rv; } int expected_len = EVP_MD_size(md); if (expected_len <= 0) { LOGE("Hash size cannot be 0 or negative, got: %d", expected_len); return CKR_GENERAL_ERROR; } if (inlen != (unsigned)expected_len) { LOGE("Expected input size to be hash size, %lu != %d", inlen, expected_len); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR modulus_attr = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!modulus_attr) { LOGE("Signing key has no CKA_MODULUS"); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR exp_attr = attr_get_attribute_by_type(attrs, CKA_PUBLIC_EXPONENT); if (!exp_attr) { LOGE("Signing key has no CKA_PUBLIC_EXPONENT"); return CKR_GENERAL_ERROR; } if (modulus_attr->ulValueLen > *outlen) { LOGE("Output buffer is too small, got: %lu, required at least %lu", *outlen, modulus_attr->ulValueLen); return CKR_GENERAL_ERROR; } BIGNUM *e = BN_bin2bn(exp_attr->pValue, exp_attr->ulValueLen, NULL); if (!e) { LOGE("Could not convert exponent to bignum"); return CKR_GENERAL_ERROR; } BIGNUM *n = BN_bin2bn(modulus_attr->pValue, modulus_attr->ulValueLen, NULL); if (!n) { LOGE("Could not convert modulus to bignum"); BN_free(e); return CKR_GENERAL_ERROR; } RSA *rsa = RSA_new(); if (!rsa) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = RSA_set0_key(rsa, n, e, NULL); if (!rc) { LOGE("Could not set modulus and exponent to OSSL RSA key"); BN_free(n); BN_free(e); RSA_free(rsa); return CKR_GENERAL_ERROR; } rc = RSA_padding_add_PKCS1_PSS(rsa, outbuf, inbuf, md, -1); RSA_free(rsa); if (!rc) { LOGE("Applying RSA padding failed"); return CKR_GENERAL_ERROR; } *outlen = modulus_attr->ulValueLen; return CKR_OK; } CK_RV rsa_pkcs_hash_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { assert(mech); assert(outlen); /* These headers are defined in the following RFC * - https://www.ietf.org/rfc/rfc3447.txt * - Page 42 */ static const CK_BYTE pkcs1_5_hdr_sha1[15] = { 0x30, 0x21, 0x30, 0x09, 0x06, 0x05, 0x2b, 0x0e, 0x03, 0x02, 0x1a, 0x05, 0x00, 0x04, 0x14, }; static const CK_BYTE pkcs1_5_hdr_sha256[19] = { 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, }; static const CK_BYTE pkcs1_5_hdr_sha384[19] = { 0x30, 0x41, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x02, 0x05, 0x00, 0x04, 0x30, }; static const CK_BYTE pkcs1_5_hdr_sha512[19] = { 0x30, 0x51, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03, 0x05, 0x00, 0x04, 0x40, }; const CK_BYTE *hdr; size_t hdr_size; switch(mech->mechanism) { case CKM_SHA1_RSA_PKCS: hdr = pkcs1_5_hdr_sha1; hdr_size = sizeof(pkcs1_5_hdr_sha1); break; case CKM_SHA256_RSA_PKCS: hdr = pkcs1_5_hdr_sha256; hdr_size = sizeof(pkcs1_5_hdr_sha256); break; case CKM_SHA384_RSA_PKCS: hdr = pkcs1_5_hdr_sha384; hdr_size = sizeof(pkcs1_5_hdr_sha384); break; case CKM_SHA512_RSA_PKCS: hdr = pkcs1_5_hdr_sha512; hdr_size = sizeof(pkcs1_5_hdr_sha512); break; default: return CKR_MECHANISM_INVALID; } size_t hash_len = utils_get_halg_size(mech->mechanism); if (!hash_len) { LOGE("Unknown hash size, got 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (inlen != hash_len) { LOGE("Expected input hash length to match expected hash length," "got: %lu, expected: %lu", inlen, hash_len); } size_t total_size = 0; safe_add(total_size, hdr_size, hash_len); CK_BYTE hdr_buf[4096]; if (total_size > sizeof(hdr_buf)) { LOGE("Internal buffer is too small, got: %lu, required %lu", total_size, sizeof(hdr_buf)); return CKR_GENERAL_ERROR; } /* * Build and populate a buffer with hdr + hash */ memcpy(hdr_buf, hdr, hdr_size); memcpy(&hdr_buf[hdr_size], inbuf, hash_len); return rsa_pkcs_synthesizer(mdtl, mech, attrs, hdr_buf, total_size, outbuf, outlen); } static CK_RV aes_cbc_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mdtl); UNUSED(mech); UNUSED(attrs); return apply_pkcs7_pad(inbuf, inlen, outbuf, outlen); } static CK_RV aes_cbc_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mdtl); UNUSED(mech); UNUSED(attrs); return remove_pkcs7_pad(inbuf, inlen, outbuf, outlen); } static CK_RV get_rsa_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG min = 0; CK_ULONG max = 0; CK_RV rv = tpm_find_max_rsa_keysize(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static CK_RV get_ecc_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG max = 0; CK_ULONG min = 0; CK_RV rv = tpm_find_ecc_keysizes(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static CK_RV get_aes_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG max = 0; CK_ULONG min = 0; CK_RV rv = tpm_find_aes_keysizes(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static bool is_mech_supported(mdetail_entry *d) { mechanism_flags f = d->flags; return (f & mf_tpm_supported) || (f & mf_is_keygen) || (f & mf_is_digester); } CK_RV mech_get_supported(mdetail *m, CK_MECHANISM_TYPE_PTR mechlist, CK_ULONG_PTR count) { CK_RV rv = CKR_GENERAL_ERROR; check_pointer(count); CK_ULONG supported = 0; CK_MECHANISM_TYPE tmp[MAX_MECHS]; CK_ULONG i; for (i=0; i < m->mdetail_len; i++) { mdetail_entry *d = &m->mech_entries[i]; /* is it supported ? */ bool is_supported = is_mech_supported(d); if (!is_supported) { continue; } assert(supported <= ARRAY_LEN(tmp)); tmp[supported] = d->type; supported++; } if (mechlist) { if (supported > *count) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (supported) { size_t bytes = 0; safe_mul(bytes, supported, sizeof(mechlist[0])); memcpy(mechlist, tmp, bytes); } } rv = CKR_OK; out: *count = supported; return rv; } CK_RV mech_validate(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { check_pointer(mech); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGV("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if their is no validator, don't do anything but a look up */ if (!d->validator) { return CKR_OK; } /* if it's not a keygen template, make sure the object supports it */ if (!(d->flags & mf_is_keygen)) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have: CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } CK_ULONG count = a->ulValueLen/sizeof(CK_MECHANISM_TYPE); CK_MECHANISM_TYPE_PTR mt = (CK_MECHANISM_TYPE_PTR)a->pValue; bool found = false; CK_ULONG i; for(i=0; i < count; i++) { CK_MECHANISM_TYPE t = mt[i]; if (t == mech->mechanism) { found = true; break; } } if (!found) { return CKR_MECHANISM_INVALID; } } return d->validator(m, mech, attrs); } CK_RV mech_synthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { check_pointer(mech); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if it's supported by the tpm we don't need to call * the synthesizer, just memcpy in to out. */ if ((d->flags & mf_tpm_supported) && !(d->flags & mf_force_synthetic)) { if (outbuf) { if (*outlen < inlen) { return CKR_BUFFER_TOO_SMALL; } memcpy(outbuf, inbuf, inlen); } *outlen = inlen; return CKR_OK; } if (!d->synthesizer) { LOGE("Cannot synthesize mechanism: 0x%lx", d->type); return CKR_MECHANISM_INVALID; } return d->synthesizer(mdtl, mech, attrs, inbuf, inlen, outbuf, outlen); } CK_RV mech_unsynthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { check_pointer(mech); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if it's supported by the tpm we don't need to call * the synthesizer, just memcpy in to out. */ if ((d->flags & mf_tpm_supported) && !(d->flags & mf_force_synthetic)) { if (outbuf) { if (*outlen < inlen) { return CKR_BUFFER_TOO_SMALL; } memcpy(outbuf, inbuf, inlen); } *outlen = inlen; return CKR_OK; } if (!d->unsynthesizer) { LOGE("Cannot unsynthesize mechanism: 0x%lx", d->type); return CKR_MECHANISM_INVALID; } return d->unsynthesizer(mdtl, mech, attrs, inbuf, inlen, outbuf, outlen); } CK_RV mech_is_synthetic(mdetail *m, CK_MECHANISM_PTR mech, bool *is_synthetic) { check_pointer(m); check_pointer(mech); check_pointer(is_synthetic); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_synthetic = (!(d->flags & mf_tpm_supported)) || (d->flags & mf_is_synthetic) || (d->flags & mf_force_synthetic); return CKR_OK; } CK_RV mech_is_hashing_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_needed) { check_pointer(m); check_pointer(mech); check_pointer(is_hashing_needed); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_halg) { *is_hashing_needed = false; return CKR_OK; } CK_MECHANISM_TYPE halg; CK_RV rv = d->get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } *is_hashing_needed = halg != 0; return CKR_OK; } CK_RV mech_is_HMAC(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hmac) { check_pointer(m); check_pointer(mech); check_pointer(is_hmac); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_hmac = !!(d->flags & mf_hmac); return CKR_OK; } CK_RV mech_is_hashing_knowledge_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_knowledge_needed) { check_pointer(m); check_pointer(mech); check_pointer(is_hashing_knowledge_needed); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_hashing_knowledge_needed = d->get_digester; return CKR_OK; } CK_RV mech_get_digest_alg(mdetail *m, CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *mech_type) { check_pointer(m); check_pointer(mech); check_pointer(mech_type); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_halg) { LOGE("Mechanism 0x%lx has no get_halg()", mech->mechanism); return CKR_MECHANISM_INVALID; } return d->get_halg(mech, mech_type); } CK_RV mech_get_digester( mdetail *mdtl, CK_MECHANISM_PTR mech, const EVP_MD **md) { check_pointer(mech); check_pointer(md); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGV("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_digester) { LOGE("Mechanism 0x%lx has no get_digester()", mech->mechanism); return CKR_MECHANISM_INVALID; } return d->get_digester(mdtl, mech, md); } CK_RV mech_get_tpm_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata) { check_pointer(mdtl); check_pointer(tctx); check_pointer(opdata); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_tpm_opdata) { return CKR_MECHANISM_INVALID; } return d->get_tpm_opdata(mdtl, tctx, mech, tobj, opdata); } CK_RV mech_get_padding(mdetail *m, CK_MECHANISM_PTR mech, int *padding) { check_pointer(mech); check_pointer(padding); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *padding = d->padding; return CKR_OK; } CK_RV mech_get_label(CK_MECHANISM_PTR mech, twist *label) { check_pointer(mech); check_pointer(label); if (mech->mechanism != CKM_RSA_PKCS_OAEP) { *label = NULL; return CKR_OK; } CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); /* empty label ? */ if (!params->ulSourceDataLen) { *label = NULL; return CKR_OK; } /* non empty label */ twist t = twistbin_new(params->pSourceData, params->ulSourceDataLen); if (!t) { LOGE("oom"); return CKR_HOST_MEMORY; } *label = t; return CKR_OK; } CK_RV mech_get_info(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_TYPE mech_type, CK_MECHANISM_INFO_PTR info) { check_pointer(m); check_pointer(tctx); check_pointer(info); memset(info, 0, sizeof(*info)); mdetail_entry *d = mlookup(m, mech_type); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } if (d->flags & mf_is_keygen) { info->flags |= (d->flags & mf_aes) ? CKF_GENERATE : CKF_GENERATE_KEY_PAIR; } if (d->flags & mf_tpm_supported) { info->flags |= CKF_HW; } if (d->flags & mf_sign) { info->flags |= CKF_SIGN; } if (d->flags & mf_verify) { info->flags |= CKF_VERIFY; } if (d->flags & mf_encrypt) { info->flags |= CKF_ENCRYPT; } if (d->flags & mf_decrypt) { info->flags |= CKF_DECRYPT; } /* functions below here return */ if (d->flags & mf_is_digester) { info->flags |= CKF_DIGEST; return CKR_OK; } if (d->flags & mf_rsa) { return get_rsa_mechinfo(tctx, info); } if (d->flags & mf_aes) { return get_aes_mechinfo(tctx, info); } if (d->flags & mf_ecc) { return get_ecc_mechinfo(tctx, info); } if (d->flags & mf_hmac) { /* * peering into TPM internals, the code seems to make the key the length * of the hash alg, however, I could nto find this in the spec. */ size_t len = utils_get_halg_size(mech_type); info->ulMinKeySize = info->ulMaxKeySize = len; return CKR_OK; } LOGE("Unknown mechanism, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } CK_RV mech_is_ecc(mdetail *m, CK_MECHANISM_TYPE mech_type, bool *is_ecc) { *is_ecc = false; mdetail_entry *d = mlookup(m, mech_type); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } *is_ecc = !!(d->flags & mf_ecc); return CKR_OK; } tpm2-pkcs11-1.7.0/src/lib/config.h.in0000664000175000017500000000606414124412614014011 00000000000000/* src/lib/config.h.in. Generated from configure.ac by autoheader. */ /* Define if building universal (internal helper macro) */ #undef AC_APPLE_UNIVERSAL_BUILD /* Define to disable built in overflow math */ #undef DISABLE_OVERFLOW_BUILTINS /* ESAPI versions below 2.2.1 are known to require manual session flag management. */ #undef ESAPI_MANAGE_FLAGS /* Esys3 */ #undef ESYS_3 /* Defined when building fuzzing tests */ #undef FUZZING /* Define to 1 if you have the header file. */ #undef HAVE_DLFCN_H /* Enabled if FAPI >= 3.0 is found */ #undef HAVE_FAPI /* Define to 1 if the system has the `weak' function attribute */ #undef HAVE_FUNC_ATTRIBUTE_WEAK /* Define to 1 if you have the header file. */ #undef HAVE_INTTYPES_H /* Define to 1 if you have the header file. */ #undef HAVE_MEMORY_H /* Define if you have POSIX threads libraries and header files. */ #undef HAVE_PTHREAD /* Have PTHREAD_PRIO_INHERIT. */ #undef HAVE_PTHREAD_PRIO_INHERIT /* Define to 1 if you have the header file. */ #undef HAVE_STDINT_H /* Define to 1 if you have the header file. */ #undef HAVE_STDLIB_H /* Define to 1 if you have the header file. */ #undef HAVE_STRINGS_H /* Define to 1 if you have the header file. */ #undef HAVE_STRING_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_STAT_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_TYPES_H /* Define to 1 if you have the header file. */ #undef HAVE_UNISTD_H /* Define to the sub-directory where libtool stores uninstalled libraries. */ #undef LT_OBJDIR /* Define if debugging is disabled */ #undef NDEBUG /* Name of package */ #undef PACKAGE /* Define to the address where bug reports for this package should be sent. */ #undef PACKAGE_BUGREPORT /* Define to the full name of this package. */ #undef PACKAGE_NAME /* Define to the full name and version of this package. */ #undef PACKAGE_STRING /* Define to the one symbol short name of this package. */ #undef PACKAGE_TARNAME /* Define to the home page for this package. */ #undef PACKAGE_URL /* Define to the version of this package. */ #undef PACKAGE_VERSION /* Define to enable 1 byte structure packing. Default for Windows builds. */ #undef PKCS11_PACK /* Define to necessary symbol if this constant uses a non-standard name on your system. */ #undef PTHREAD_CREATE_JOINABLE /* Define to 1 if you have the ANSI C header files. */ #undef STDC_HEADERS /* Changes the store directory to search. Defaults to /etc/tpm2_pkcs11 */ #undef TPM2_PKCS11_STORE_DIR /* Define when unit testing. libtwist uses this to define a debug interface for alloc failures */ #undef UNIT_TESTING /* Version number of package */ #undef VERSION /* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most significant byte first (like Motorola and SPARC, unlike Intel). */ #if defined AC_APPLE_UNIVERSAL_BUILD # if defined __BIG_ENDIAN__ # define WORDS_BIGENDIAN 1 # endif #else # ifndef WORDS_BIGENDIAN # undef WORDS_BIGENDIAN # endif #endif tpm2-pkcs11-1.7.0/src/lib/digest.h0000644000175000017500000000262013754763565013434 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_DIGEST_H_ #define SRC_LIB_DIGEST_H_ #include #include #include #include "object.h" #include "pkcs11.h" #include "session_ctx.h" typedef struct digest_op_data digest_op_data; struct digest_op_data { tobject *tobj; CK_MECHANISM mechanism; EVP_MD_CTX *mdctx; }; digest_op_data *digest_op_data_new(void); void digest_op_data_free(digest_op_data **opdata); CK_RV digest_init_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_MECHANISM_PTR mechanism); static inline CK_RV digest_init(session_ctx *ctx, CK_MECHANISM_PTR mechanism) { return digest_init_op(ctx, NULL, mechanism); } CK_RV digest_update_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len); static inline CK_RV digest_update(session_ctx *ctx, unsigned char *part, unsigned long part_len) { return digest_update_op(ctx, NULL, part, part_len); } CK_RV digest_final_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len); static inline CK_RV digest_final(session_ctx *ctx, unsigned char *digest, unsigned long *digest_len) { return digest_final_op(ctx, NULL, digest, digest_len); } CK_RV digest_oneshot(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *digest, unsigned long *digest_len); #endif /* SRC_LIB_DIGEST_H_ */ tpm2-pkcs11-1.7.0/src/lib/session.h0000644000175000017500000000133313754763565013640 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_H_ #define SRC_PKCS11_SESSION_H_ #include #include "pkcs11.h" #include "tpm.h" typedef struct session_ctx session_ctx; typedef struct token token; /* * This max value CANNOT extend into the upper byte of a CK_SESSION_HANDLE, * as that is reserved for the tokid. */ #define MAX_NUM_OF_SESSIONS 1024 CK_RV session_open(CK_SLOT_ID slot_id, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session); CK_RV session_close(CK_SESSION_HANDLE session); CK_RV session_closeall(CK_SLOT_ID slot_id); CK_RV session_lookup(CK_SESSION_HANDLE session, token **tok, session_ctx **ctx); #endif /* SRC_PKCS11_SESSION_H_ */ tpm2-pkcs11-1.7.0/src/lib/session.c0000644000175000017500000000570213754763565013637 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "checks.h" #include "general.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session.h" #include "session_table.h" #include "token.h" #include "tpm.h" #include "utils.h" static CK_RV check_max_sessions(session_table *s_table) { CK_ULONG all; session_table_get_cnt(s_table, &all, NULL, NULL); return (all > MAX_NUM_OF_SESSIONS) ? CKR_SESSION_COUNT : CKR_OK; } #define TOKID_SESSION_SHIFT ((sizeof(CK_SESSION_HANDLE) * 8) - 8) static inline void add_tokid_to_session_handle(unsigned tokid, CK_SESSION_HANDLE *handle) { /* * Plop the token id in the high byte */ *handle |= ((typeof(*handle))tokid << TOKID_SESSION_SHIFT); } static inline unsigned get_tokid_from_session_handle_and_cleanse( CK_SESSION_HANDLE *handle) { /* * Get the token id from the high byte */ unsigned tokid = (*handle >> TOKID_SESSION_SHIFT); /* * drop the top byte, this is a simple way to deal * with CK_SESSION_HANDLE being architecture dependent * in size. */ CK_SESSION_HANDLE tmp = *handle; tmp = tmp << 8; tmp = tmp >> 8; *handle = tmp; return tokid; } CK_RV session_open(CK_SLOT_ID slot_id, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session) { (void) notify; (void) application; /* can be null */ if (!(flags & CKF_SERIAL_SESSION)) { return CKR_SESSION_PARALLEL_NOT_SUPPORTED; } CK_RV rv = CKR_GENERAL_ERROR; check_pointer(session); token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } rv = check_max_sessions(t->s_table); if (rv != CKR_OK) { return rv; } /* * Cannot open an R/O session when the SO is logged in */ if ((!(flags & CKF_RW_SESSION)) && (t->login_state == token_so_logged_in)) { return CKR_SESSION_READ_WRITE_SO_EXISTS; } rv = session_table_new_entry(t->s_table, session, t, flags); if (rv != CKR_OK) { return rv; } add_tokid_to_session_handle(t->id, session); return CKR_OK; } CK_RV session_close(CK_SESSION_HANDLE session) { token *t = NULL; unsigned tokid = get_tokid_from_session_handle_and_cleanse(&session); check_slot_id(tokid, t, CKR_SESSION_HANDLE_INVALID); return session_table_free_ctx(t, session); } CK_RV session_closeall(CK_SLOT_ID slot_id) { token *t; check_slot_id(slot_id, t, CKR_SLOT_ID_INVALID); return session_table_free_ctx_all(t); } CK_RV session_lookup(CK_SESSION_HANDLE session, token **tok, session_ctx **ctx) { token *tmp = NULL; unsigned tokid = get_tokid_from_session_handle_and_cleanse(&session); check_slot_id(tokid, tmp, CKR_SESSION_HANDLE_INVALID); *ctx = session_table_lookup(tmp->s_table, session); if (!*ctx) { return CKR_SESSION_HANDLE_INVALID; } token_lock(tmp); *tok = tmp; return CKR_OK; } tpm2-pkcs11-1.7.0/src/lib/parser.c0000664000175000017500000003666114114240163013431 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "parser.h" #include "pkcs11.h" #include "token.h" #include "twist.h" #include "typed_memory.h" #include "utils.h" #define MAX_DEPTH 2 typedef struct handler_state handler_state; struct handler_state { bool is_value; size_t cnt; CK_ATTRIBUTE_TYPE key; size_t seqbytes; void *seqbuf; }; typedef bool (*handler)(yaml_event_t *e, handler_state *state, attr_list *l); typedef struct handler_stack handler_stack; struct handler_stack { handler h[MAX_DEPTH]; handler cur; size_t depth; handler_state state[MAX_DEPTH]; handler_state *s; }; bool push_handler(handler_stack *state, handler h) { if (state->depth >= MAX_DEPTH) { return false; } state->cur = h; state->h[state->depth] = h; state->s = &state->state[state->depth]; state->depth++; return true; } #ifdef __clang_analyzer__ static inline void analyzer_free(void *p ) { assert(0); free(p); } #else #define analyzer_free(x) UNUSED(x) #endif bool pop_handler(handler_stack *state) { if (state->depth == 0) { return false; } state->depth--; memset(&state->state[state->depth], 0, sizeof(state->state[state->depth])); /* * scan-build reports this as a leak of h, which is * invalid... you can't free fn pointers */ analyzer_free(state->h[state->depth]); if (state->depth == 0) { state->cur = NULL; state->s = NULL; state->h[state->depth] = NULL; } else { state->cur = state->h[state->depth - 1]; state->s = &state->state[state->depth - 1]; state->cur = state->h[state->depth - 1]; /* * state transitions only occur on sequences and thus the value portion * is complete */ state->s->is_value = false; } return true; } static bool is_yaml_int(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_INT_TAG); } static bool is_yaml_bool(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_BOOL_TAG); } static bool is_yaml_str(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_STR_TAG); } typedef bool (*pfn_yaml_convert)(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value); static bool yaml_convert_ulong(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { size_t val; int rc = str_to_ul((const char *)value, &val); if (rc) { return false; } return attr_list_add_int(l, type, val); } static bool yaml_convert_bbool(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { CK_BBOOL val = !strcmp((const char *)value, "true") ? CK_TRUE : CK_FALSE; return attr_list_add_bool(l, type, val); } static bool yaml_convert_hex_str(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { size_t len = 0; twist t = NULL; if (!value || strlen((const char *)value)) { t = twistbin_unhexlify((const char *)value); if (!t) { LOGE("Could not unhexlify, got: \"%s\"", value); return false; } len = twist_len(t); } bool r = attr_list_add_buf(l, type, (CK_BYTE_PTR)t, len); twist_free(t); return r; } bool on_map_scalar_event(yaml_event_t *e, handler_state *state, attr_list *l) { if (!e->data.scalar.tag) { LOGE("e->data.scalar.tag is NULL"); return false; } if (!state->is_value) { if (!is_yaml_int(e->data.scalar.tag)) { LOGE("key should always be int, got: \"%s\"", e->data.scalar.tag); return false; } size_t val; int rc = str_to_ul((const char *)e->data.scalar.value, &val); if (rc) { return false; } state->key = val; } else { pfn_yaml_convert pfn = NULL; if (is_yaml_int(e->data.scalar.tag)) { pfn = yaml_convert_ulong; } else if (is_yaml_bool(e->data.scalar.tag)) { pfn = yaml_convert_bbool; } else if (is_yaml_str(e->data.scalar.tag)) { pfn = yaml_convert_hex_str; } else { LOGE("unknown data type: %s", e->data.scalar.tag); return false; } bool res = pfn(l, state->key, e->data.scalar.value); if (!res) { return false; } } state->is_value = !state->is_value; return true; } bool on_seq_scalar_event(yaml_event_t *e, handler_state *state, attr_list *l) { UNUSED(l); if (!e->data.scalar.tag) { LOGE("Scalara tag is null"); return false; } if (strcmp((const char *)e->data.scalar.tag, YAML_INT_TAG)) { LOGE("Attribute type key should always be int, got: \"%s\"", e->data.scalar.tag); return false; } state->cnt++; if (state->cnt == 0) { LOGE("add overflow"); return false; } size_t bytes = 0; safe_mul(bytes, state->cnt, sizeof(CK_ULONG)); void *tmp = realloc(state->seqbuf, bytes); if (!tmp) { LOGE("oom"); return false; } state->seqbytes = bytes; CK_ULONG_PTR p = state->seqbuf = tmp; size_t val; int rc = str_to_ul((const char *)e->data.scalar.value, &val); if (rc) { return false; } p[state->cnt - 1] = val; return true; } bool handle_attr_event(yaml_event_t *event, attr_list *l, handler_stack *state) { bool res; switch(event->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_SEQUENCE_START_EVENT: return push_handler(state, on_seq_scalar_event); case YAML_SEQUENCE_END_EVENT: /* XXX we know that sequences never come first so the previous state (map) has the key */ assert(state->s); res = attr_list_add_buf(l, state->state[0].key, state->s->seqbuf, state->s->seqbytes); free(state->s->seqbuf); state->s->seqbuf = NULL; if (!res) { LOGE("Cannot add sequence to attr list: 0x%lx", state->s->key); return res; } return pop_handler(state); case YAML_MAPPING_START_EVENT: return push_handler(state, on_map_scalar_event); case YAML_MAPPING_END_EVENT: return pop_handler(state); /* Data */ case YAML_SCALAR_EVENT: if (!state->cur) { return false; } return state->cur(event, state->s, l); default: LOGE("Unhandled YAML event type: %u\n", event->type); return false; } return false; } #define ALLOC_SIZE 16 bool parse_attributes(yaml_parser_t *parser, attr_list **attrs) { bool res = false; attr_list *a = attr_list_new(); if (!a) { LOGE("oom"); return false; } yaml_event_t event; handler_stack state = { 0 }; /* while events */ do { int rc = yaml_parser_parse(parser, &event); if (!rc) { LOGE("Parser error %d\n", parser->error); goto error; } /* handle events */ bool tmp_res = handle_attr_event(&event, a, &state); if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } if (!tmp_res) { goto error; } } while(event.type != YAML_STREAM_END_EVENT); *attrs = a; res = true; error: /* make sure sequf is always freed */ free(state.state[0].seqbuf); free(state.state[1].seqbuf); if (!res) { attr_list_free(a); } yaml_event_delete(&event); return res; } bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs) { yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); bool ret = parse_attributes(&parser, attrs); yaml_parser_delete(&parser); if (!ret) { attr_list_free(*attrs); *attrs = NULL; } return ret; } typedef struct config_state config_state; struct config_state { bool map_start; char key[64]; }; bool handle_token_config_event(yaml_event_t *e, config_state *state, token_config *config) { switch(e->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_MAPPING_START_EVENT: if (state->map_start) { return false; } state->map_start = true; return true; case YAML_MAPPING_END_EVENT: if (!state->map_start) { return false; } state->map_start = false; return true; /* Data */ case YAML_SCALAR_EVENT: if (!state->map_start) { return false; } /* key */ if (!strlen(state->key)) { if (!is_yaml_str(e->data.scalar.tag)) { LOGE("Cannot handle non-str config keys, got: \"%s\"\n", e->data.scalar.value); return false; } if (e->data.scalar.length > sizeof(state->key) - 1) { LOGE("Key is too big for storage class, got key \"%s\"," " expected less than %zu", e->data.scalar.value, sizeof(state->key) - 1); return false; } snprintf(state->key, sizeof(state->key), "%s", e->data.scalar.value); } else { if (!strcmp(state->key, "tcti")) { config->tcti = strdup((const char *)e->data.scalar.value); if (!config->tcti) { LOGE("oom"); return false; } } else if(!strcmp(state->key, "token-init")) { config->is_initialized = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else if(!strcmp(state->key, "pss-sigs-good")) { config->pss_sigs_good = !strcmp((const char *)e->data.scalar.value, "true") ? pss_config_state_good : pss_config_state_bad; } else if(!strcmp(state->key, "empty-user-pin")) { config->empty_user_pin = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else { LOGE("Unknown key, got: \"%s\"\n", state->key); return false; } state->key[0] = '\0'; } return true; default: LOGE("Unhandled YAML event type: %u\n", e->type); } return false; } bool parse_token_config_from_string(const unsigned char *yaml, size_t size, token_config *config) { bool ret = false; yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); config_state state = { 0 }; yaml_event_t event; do { int rc = yaml_parser_parse(&parser, &event); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } /* handle events */ rc = handle_token_config_event(&event, &state, config); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } } while(event.type != YAML_STREAM_END_EVENT); ret = true; error: yaml_event_delete(&event); yaml_parser_delete(&parser); if (!ret) { token_config_free(config); } return ret; } static bool handle_pobject_config_event(yaml_event_t *e, config_state *state, pobject_config *config) { switch(e->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_MAPPING_START_EVENT: if (state->map_start) { return false; } state->map_start = true; return true; case YAML_MAPPING_END_EVENT: if (!state->map_start) { return false; } state->map_start = false; return true; /* Data */ case YAML_SCALAR_EVENT: if (!state->map_start) { return false; } /* key */ if (!strlen(state->key)) { if (!is_yaml_str(e->data.scalar.tag)) { LOGE("Cannot handle non-str config keys, got: \"%s\"\n", e->data.scalar.value); return false; } if (e->data.scalar.length > sizeof(state->key) - 1) { LOGE("Key is too big for storage class, got key \"%s\"," " expected less than %zu", e->data.scalar.value, sizeof(state->key) - 1); return false; } snprintf(state->key, sizeof(state->key), "%s", e->data.scalar.value); } else { if (!strcmp(state->key, "transient")) { config->is_transient = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else if(!strcmp(state->key, "esys-tr")) { config->blob = twistbin_unhexlify((const char *)e->data.scalar.value); if (!config->blob) { LOGE("oom"); return false; } } else if(!strcmp(state->key, "template-name")) { config->template_name = strdup((const char *)e->data.scalar.value); if (!config->template_name) { LOGE("oom"); return false; } } else { LOGE("Unknown key, got: \"%s\"\n", state->key); return false; } state->key[0] = '\0'; } return true; default: LOGE("Unhandled YAML event type: %u\n", e->type); } return false; } bool parse_pobject_config_from_string(const unsigned char *yaml, size_t size, pobject_config *config) { bool ret = false; yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); config_state state = { 0 }; yaml_event_t event; do { int rc = yaml_parser_parse(&parser, &event); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } /* handle events */ rc = handle_pobject_config_event(&event, &state, config); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } } while(event.type != YAML_STREAM_END_EVENT); ret = true; error: if (!ret) { pobject_config_free(config); } yaml_event_delete(&event); yaml_parser_delete(&parser); return ret; } tpm2-pkcs11-1.7.0/src/lib/key.c0000664000175000017500000002156414114240163012721 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "key.h" #include "list.h" #include "pkcs11.h" #include "session.h" #include "session_ctx.h" #include "utils.h" typedef struct sanity_check_data sanity_check_data; struct sanity_check_data { bool is_extractable; bool is_sensitive; }; static CK_RV handle_extractable_common(CK_ATTRIBUTE_PTR attr, bool is_extractable, void *udata) { sanity_check_data *scd = (sanity_check_data *)udata; assert(scd); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != CK_TRUE && value != CK_FALSE) { return CKR_ATTRIBUTE_VALUE_INVALID; } if (is_extractable) { scd->is_extractable = !!value; } else { scd->is_sensitive = !!value; } return CKR_OK; } static CK_RV handle_sensitive(CK_ATTRIBUTE_PTR attr,void *udata) { return handle_extractable_common(attr, false, udata); } static CK_RV handle_extractable(CK_ATTRIBUTE_PTR attr,void *udata) { return handle_extractable_common(attr, true, udata); } static CK_RV handle_expect_false(CK_ATTRIBUTE_PTR attr,void *udata) { UNUSED(udata); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value) { LOGE("%s=true not supported", attr_get_name(attr->type)); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } CK_RV check_common_attrs( CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { static const attr_handler common_attr_check_handlers[] = { { CKA_PRIVATE, handle_sensitive }, { CKA_EXTRACTABLE, handle_extractable }, { CKA_SIGN_RECOVER, handle_expect_false }, { CKA_VERIFY_RECOVER, handle_expect_false }, { CKA_TRUSTED, handle_expect_false }, }; sanity_check_data udata = { 0 }; CK_RV rv = attr_list_raw_invoke_handlers( private_key_template, private_key_attribute_count, common_attr_check_handlers, ARRAY_LEN(common_attr_check_handlers), &udata); if (rv != CKR_OK) { return rv; } if (udata.is_extractable && udata.is_sensitive) { LOGE("Cannot mark object both extractable AND sensitive"); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV ecc_check_attrs( CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type_raw(public_key_template, public_key_attribute_count, CKA_EC_PARAMS); if (!a) { LOGE("EC keygen requires CKA_EC_PARAMS in public template"); return CKR_TEMPLATE_INCONSISTENT; } CK_ATTRIBUTE_PTR b = attr_get_attribute_by_type_raw(private_key_template, private_key_attribute_count, CKA_EC_PARAMS); if (b) { LOGW("EC keygen CKA_EC_PARAMS should not be in private template"); return CKR_TEMPLATE_INCONSISTENT; } return CKR_OK; } static CK_RV check_specific_attrs(CK_MECHANISM_TYPE mech, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: return CKR_OK; case CKM_EC_KEY_PAIR_GEN: return ecc_check_attrs(public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count); default: LOGE("Unsupported keygen mechanism: 0x%lx", mech); return CKR_MECHANISM_INVALID; } } CK_RV key_gen ( session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE_PTR public_key_handle, CK_OBJECT_HANDLE_PTR private_key_handle) { CK_RV rv = CKR_GENERAL_ERROR; twist newauthhex = NULL; twist newwrapped_auth = NULL; attr_list *pubkey_templ_w_types = NULL; attr_list *privkey_templ_w_types = NULL; tobject *new_private_tobj = NULL; tobject *new_public_tobj = NULL; tpm_object_data objdata = { 0 }; token *tok = session_ctx_get_token(ctx); assert(tok); /* * Attribute arrays specified by the user don't have the type * information, but are safe for basic sanity checks (for now). */ rv = check_common_attrs( private_key_template, private_key_attribute_count); if (rv != CKR_OK) { LOGE("Failed checking private attrs"); goto out; } rv = check_common_attrs( public_key_template, public_key_attribute_count); if (rv != CKR_OK) { LOGE("Failed checking public attrs"); goto out; } check_specific_attrs(mechanism->mechanism, public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count); /* * Following functions demand to know about the type tagging, * so "typeify" the user supplied attrs. */ bool res = attr_typify(public_key_template, public_key_attribute_count, &pubkey_templ_w_types); if (!res) { LOGE("Failed typifying public attrs"); goto out; } res = attr_typify(private_key_template, private_key_attribute_count, &privkey_templ_w_types); if (!res) { LOGE("Failed typifying private attrs"); goto out; } /* re-seat pointers to type safe ones */ public_key_template = NULL; private_key_template = NULL; new_private_tobj = tobject_new(); if (!new_private_tobj) { rv = CKR_HOST_MEMORY; goto out; } new_public_tobj = tobject_new(); if (!new_public_tobj) { rv = CKR_HOST_MEMORY; goto out; } rv = utils_new_random_object_auth(&newauthhex); if (rv != CKR_OK) { LOGE("Failed to create new object auth"); goto out; } rv = utils_ctx_wrap_objauth(tok->wrappingkey, newauthhex, &newwrapped_auth); if (rv != CKR_OK) { LOGE("Failed to wrap new object auth"); goto out; } rv = tpm2_generate_key( tok->tctx, tok->pobject.handle, tok->pobject.objauth, newauthhex, mechanism, pubkey_templ_w_types, privkey_templ_w_types, &objdata); if (rv != CKR_OK) { LOGE("Failed to generate key"); goto out; } /* set the tpm object handles */ tobject_set_handle(new_private_tobj, objdata.privhandle); tobject_set_handle(new_public_tobj, objdata.pubhandle); new_public_tobj->attrs = pubkey_templ_w_types; new_private_tobj->attrs = privkey_templ_w_types; /* make it clear that tobj now owns these */ pubkey_templ_w_types = privkey_templ_w_types = NULL; /* * objects have default required attributes, add them if not present. */ rv = attr_add_missing_attrs(&new_public_tobj->attrs, &new_private_tobj->attrs, objdata.attrs, mechanism->mechanism); if (rv != CKR_OK) { LOGE("Failed to add missing rsa attrs"); goto out; } /* populate blob data */ rv = tobject_set_blob_data(new_private_tobj, objdata.pubblob, objdata.privblob); if (rv != CKR_OK) { goto out; } rv = tobject_set_blob_data(new_public_tobj, objdata.pubblob, NULL); if (rv != CKR_OK) { goto out; } /* populate auth data, public objects do not need an auth */ rv = tobject_set_auth(new_private_tobj, newauthhex, newwrapped_auth); if (rv != CKR_OK) { goto out; } rv = backend_add_object(tok, new_public_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to db"); goto out; } rv = backend_add_object(tok, new_private_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to db"); goto out; } rv = token_add_tobject(tok, new_public_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to token"); goto out; } rv = token_add_tobject(tok, new_private_tobj); if (rv != CKR_OK) { LOGE("Failed to add private object to token"); goto out; } *public_key_handle = new_public_tobj->obj_handle; *private_key_handle = new_private_tobj->obj_handle; out: tpm_objdata_free(&objdata); twist_free(newauthhex); twist_free(newwrapped_auth); attr_list_free(pubkey_templ_w_types); attr_list_free(privkey_templ_w_types); if (rv != CKR_OK) { tobject_free(new_private_tobj); tobject_free(new_public_tobj); } return rv; } tpm2-pkcs11-1.7.0/src/lib/twist.h0000664000175000017500000002110514114236775013315 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TWIST_H_ #define TWIST_H_ #include #include #include /** * Standard twist tstrings are safe to pass to C string routines. twist tstrings * created from twistbin_new() are safe to pass as well, since twist guarantees * all buffers are NULL terminated. however, they may contain NULL bytes in * between the start and end, so the C string routines might not give you what * you expect. */ typedef const char* twist; /** * Binary buffers are used to create a binary safe string * from many sources. */ typedef struct binarybuffer binarybuffer; struct binarybuffer { const void *data; /* data to store */ size_t size; /* length of that data */ }; /** * Creates a new twist tstring from a C string. * @param tstring * The C string to convert to a twist tstring. * @return * A new twist tstring on success, NULL on error or if string is NULL. * Call twist_free() on the return when done. */ extern twist twist_new(const char *string); /** * Creates a twist string of size bytes filled with zeroes. * @param size * The size of the string to allocate. * @return * A new twiest string on success or NULL on error. Like twist_new(), the * allocated string should be freed by twist_free(). */ extern twist twist_calloc(size_t size); /** * Creates a new, binary safe string. This string, like all * twist tstrings, is NULL terminated. However, this twist tstring * can have NULL bytes within its bounds. It is safe to pass to * C string routines and all twist routines, but note the * C routines are not binary safe, so one should always use * twist routines. * * @param data * The data to create the new twist tstring from. * @param len * The length of the data. * @return * A new twist tstring to pass to twist_free() when done. On error, it * returns NULL or if NULL is passed for data. */ extern twist twistbin_new(const void *data, size_t len); /** * Creates a new twist string from an array of strings, concatenating * them as it goes. The resulting string is like so: * data[0] + data[1] + .. + data[n] * @param data * The array of string to initialize and concatenate the twist string from. * @param len * The length of the array given by data. * @return * A new twist string or NULL on error. Should be passed to twist_free() */ extern twist twist_create(const char *data[], size_t len); /** * Creates a new, binary safe twist string, similair to twist_create(). * @param data * An array of data pointers with lengths. * @param len * The length of the data array. * @return * A new twist string or NULL on error. Should be passed to twist_free() */ extern twist twistbin_create(const binarybuffer data[], size_t len); /** * Returns the length of a twist tstring in O(1) time. * @param tstring * The twist tstring to check the length of. * @return * The length of the string. */ extern size_t twist_len(twist tstring); /** * Duplicates a twist tstring. * Note that assigning to the parameter results in a memory leak. * @param tstring * The twist tstring to duplicate. * @return * A new twist tstring or NULL on error or if string is NULL. Call twist_free() * on the return when done. */ extern twist twist_dup(twist tstring); /** * Frees a twist tstring. It is safe to pass NULL. * @param tstring * The twist tstring to free. */ extern void twist_free(twist tstring); /** * Concatenates a new string onto old string * @param old_str * The old string to concatenate to. * @param new_str * The new string to append to the old string. * @return * A new string to be passed to twist_free() or NULL on error. * Note: If you wish to reuse the same memory, see twist_append(). * It reurns NULL on error or if old_str and new_str are NULL. */ extern twist twist_concat(twist old_str, const char *new_str); /** * Like twist_concat() but allows appending binary safe data. * @param old_str * The twist tstring to append to. * @param data * The data to append. * @param len * The length of that data. * @return */ extern twist twistbin_concat(twist old_str, const void *data, size_t len); /** * Concatenates two twist tstrings together. Never assign back to a specified * parameter or a memory leak will ensue (orphaned pointer). * @param old_str * The first part of the string. * @param new_str * The second part of the string. * @return * A new twist tstring of new_str appended to old_str, that should be * be passed to twist_free() when done. It returns NULL on error * or if both old_str and new_str are NULL. */ extern twist twist_concat_twist(twist old_str, twist new_str); /** * Tests for equivalence and avoids a comparison if the * lengths alter. Thus tests like strcmp('fool', 'foo') * are performed in O(1). If the lengths are equal, * a O(N) (worst case) comparison is done (memcmp) * @param x * A twist tstring to test. * @param y * A twist tstring to test. * @return * true on equivalence, false otherwise. */ extern bool twist_eq(twist x, twist y); /** * Appends a new string to a twist tstring preserving the already allocated * memory space. Use this if a new string (aka heap allocation) is not required. * Do not assign old_str to the return value without checking for NULL, or a * memory leak will ensue. * @param old_str * The string to append to. * @param new_str * The new string data to append. * @return * A re-allocated version of old_str with new_str appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and new_str are NULL. */ extern twist twist_append(twist old_str, const char *new_str); /** * Like twist_append() but works with binary safe data. * @param old_str * The string data to append to. * @param data * The data to append. * @param len * The length of the data. * @return * A re-allocated version of old_str with data appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and data are NULL. */ extern twist twistbin_append(twist old_str, const void *data, size_t len); /** * like twistbin_append but takes an array of binarybuffer's. * @param old_str * The old string to reallocate and append to. * @param data * The data to add, in order from index 0 to N. * @param num_of_args * The number of items in the data array. * @return * NULLon failure or a reallocated twist string. */ extern twist twistbin_aappend(twist old_str, binarybuffer data[], size_t num_of_args); /** * Like twistbin_append() but the data to append is another twist tstring. * @param old_str * The twist tstring to append to. * @param new_str * The new string to append. * @return * A re-allocated version of old_str with new_str appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and new_str are NULL. */ extern twist twist_append_twist(twist old_str, twist new_str); /** * Truncates a string to the giben length, preserving the trailing NULL byte. * If the new length is larger than the original length, the new memory is 0 * allocated. * @param tstring * The twist tstring to truncate to a given size. * @param len * The length to truncate it to. * @return */ extern twist twist_truncate(twist tstring, size_t len); /** * Returns a pointer to the right hand end of the string, * before the terminating null byte. * @param tstring * The twist tstring to get the right hand pointer of. * @return * The pointer to the end of the string on the first valid * byte before the guaranteed NULL byte. */ extern char *twist_end(twist tstring); /** * Given a C style string encoded in base 16, without the trailing 0x, * return a raw data representation of it. * @param hexdata * The data to convert to raw bytes from ASCII encoded hex. * @return * A binary twist, this could contain interleaved NULL bytes, but * is guaranteed to end in a NULL byte. */ twist twistbin_unhexlify(const char *hexdata); /** * The opposite of unhexlify. Converts a binary twist to a hex string without * a leading 0x. * @param data * The binary data to base 16 encode. * @return * A twist on success, NULL on failure. */ twist twist_hexlify(const twist data); /** * Given a binary data string, converts it to a hex encoded string without a leaded 0x * and is guaranteed to be NULL terminated. * * @param data * The data to encode as hex. * @param len * The length of the data. * @return * A twist on success, NULL on failure. */ twist twist_hex_new(const char *data, size_t len); #endif /* TWIST_H_ */ tpm2-pkcs11-1.7.0/src/lib/general.c0000664000175000017500000001554514114240163013550 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "checks.h" #include "config.h" #include "backend.h" #include "general.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session.h" #include "utils.h" #ifndef VERSION #warning "VERSION Not known at compile time, not embedding..." #define VERSION "UNKNOWN" #endif static const CK_UTF8CHAR LIBRARY_DESCRIPTION[] = "TPM2.0 Cryptoki"; static const CK_UTF8CHAR LIBRARY_MANUFACTURER[] = "tpm2-software.github.io"; #define CRYPTOKI_VERSION { \ .major = CRYPTOKI_VERSION_MAJOR, \ .minor = CRYPTOKI_VERSION_MINOR \ } CK_RV general_get_info(CK_INFO *info) { check_pointer(info); /* we only need one copy and we only need to initialize it on first call */ static CK_INFO _info_ = { .cryptokiVersion = CRYPTOKI_VERSION, }; static CK_INFO *_info = NULL; if (!_info) { str_padded_copy(_info_.manufacturerID, LIBRARY_MANUFACTURER); str_padded_copy(_info_.libraryDescription, LIBRARY_DESCRIPTION); parse_lib_version(PACKAGE_VERSION, &_info_.libraryVersion.major, &_info_.libraryVersion.minor); _info = &_info_; } *info = *_info; return CKR_OK; } CK_RV general_get_func_list(CK_FUNCTION_LIST **function_list) { if (function_list == NULL_PTR) { return CKR_ARGUMENTS_BAD; } static CK_FUNCTION_LIST list = { .version = CRYPTOKI_VERSION, .C_Initialize = C_Initialize, .C_Finalize = C_Finalize, .C_GetInfo = C_GetInfo, .C_GetFunctionList = C_GetFunctionList, .C_GetSlotList = C_GetSlotList, .C_GetSlotInfo = C_GetSlotInfo, .C_GetTokenInfo = C_GetTokenInfo, .C_GetMechanismList = C_GetMechanismList, .C_GetMechanismInfo = C_GetMechanismInfo, .C_InitToken = C_InitToken, .C_InitPIN = C_InitPIN, .C_SetPIN = C_SetPIN, .C_OpenSession = C_OpenSession, .C_CloseSession = C_CloseSession, .C_CloseAllSessions = C_CloseAllSessions, .C_GetSessionInfo = C_GetSessionInfo, .C_GetOperationState = C_GetOperationState, .C_SetOperationState = C_SetOperationState, .C_Login = C_Login, .C_Logout = C_Logout, .C_CreateObject = C_CreateObject, .C_CopyObject = C_CopyObject, .C_DestroyObject = C_DestroyObject, .C_GetObjectSize = C_GetObjectSize, .C_GetAttributeValue = C_GetAttributeValue, .C_SetAttributeValue = C_SetAttributeValue, .C_FindObjectsInit = C_FindObjectsInit, .C_FindObjects = C_FindObjects, .C_FindObjectsFinal = C_FindObjectsFinal, .C_EncryptInit = C_EncryptInit, .C_Encrypt = C_Encrypt, .C_EncryptUpdate = C_EncryptUpdate, .C_EncryptFinal = C_EncryptFinal, .C_DecryptInit = C_DecryptInit, .C_Decrypt = C_Decrypt, .C_DecryptUpdate = C_DecryptUpdate, .C_DecryptFinal = C_DecryptFinal, .C_DigestInit = C_DigestInit, .C_Digest = C_Digest, .C_DigestUpdate = C_DigestUpdate, .C_DigestKey = C_DigestKey, .C_DigestFinal = C_DigestFinal, .C_SignInit = C_SignInit, .C_Sign = C_Sign, .C_SignUpdate = C_SignUpdate, .C_SignFinal = C_SignFinal, .C_SignRecoverInit = C_SignRecoverInit, .C_SignRecover = C_SignRecover, .C_VerifyInit = C_VerifyInit, .C_Verify = C_Verify, .C_VerifyUpdate = C_VerifyUpdate, .C_VerifyFinal = C_VerifyFinal, .C_VerifyRecoverInit = C_VerifyRecoverInit, .C_VerifyRecover = C_VerifyRecover, .C_DigestEncryptUpdate = C_DigestEncryptUpdate, .C_DecryptDigestUpdate = C_DecryptDigestUpdate, .C_SignEncryptUpdate = C_SignEncryptUpdate, .C_DecryptVerifyUpdate = C_DecryptVerifyUpdate, .C_GenerateKey = C_GenerateKey, .C_GenerateKeyPair = C_GenerateKeyPair, .C_WrapKey = C_WrapKey, .C_UnwrapKey = C_UnwrapKey, .C_DeriveKey = C_DeriveKey, .C_SeedRandom = C_SeedRandom, .C_GenerateRandom = C_GenerateRandom, .C_GetFunctionStatus = C_GetFunctionStatus, .C_CancelFunction = C_CancelFunction, .C_WaitForSlotEvent = C_WaitForSlotEvent, }; *function_list = &list; return CKR_OK; } static bool _g_is_init; bool general_is_init(void) { return _g_is_init; } CK_RV general_init(void *init_args) { CK_RV rv = CKR_GENERAL_ERROR; if (init_args) { CK_C_INITIALIZE_ARGS *args = (CK_C_INITIALIZE_ARGS *)init_args; if(args->pReserved) { return CKR_ARGUMENTS_BAD; } /* * If their is CKF_OS_LOCKING_OK flag: * 1. No function pointers, Use native OS support (default in mutex.h). * 2. Supplied function pointers, optional use them (we won't). * 3. Partial supplied function pointers is CKR_ARGUMENTS_BAD * * If their is no CKF_OS_LOCKING_OK flag: * A. No callbacks means no need for locks * B. All callbacks means use theirs * C. A mix is CKR_ARGUMENTS_BAD */ if (!args->CreateMutex && !args->DestroyMutex && !args->LockMutex && !args->UnlockMutex) { /* no function pointers, options 1 and A */ if(args->flags & CKF_OS_LOCKING_OK) { /* pass as it's default */ } else { /* no need for locks */ mutex_set_handlers(NULL, NULL, NULL, NULL); } } else if (args->CreateMutex && args->DestroyMutex && args->LockMutex && args->UnlockMutex) { /* all function pointers, options 2 and B */ if(args->flags & CKF_OS_LOCKING_OK) { /* optional, we won't use theirs, use default */ } else { mutex_set_handlers(args->CreateMutex, args->DestroyMutex, args->LockMutex, args->UnlockMutex); } } else { /* mixed function pointers, bad */ return CKR_ARGUMENTS_BAD; } } else { /* No init arguments means no multi-thread access */ mutex_set_handlers(NULL, NULL, NULL, NULL); } /* * Initialize the various sub-systems. * * THESE MUST GO AFTER MUTEX INIT above!! */ rv = backend_init(); if (rv != CKR_OK) { goto err; } rv = slot_init(); if (rv != CKR_OK) { (void)backend_destroy(); goto err; } _g_is_init = true; return CKR_OK; err: return rv; } CK_RV general_finalize(void *reserved) { if (reserved) { return CKR_ARGUMENTS_BAD; } _g_is_init = false; slot_destroy(); backend_destroy(); return CKR_OK; } tpm2-pkcs11-1.7.0/src/lib/backend_fapi.c0000664000175000017500000006727014116451527014535 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #ifdef HAVE_FAPI #include #endif #include #include #include "backend_fapi.h" #include "emitter.h" #include "parser.h" #include "utils.h" #ifdef HAVE_FAPI FAPI_CONTEXT *fctx = NULL; unsigned maxobjectid = 0; static void fail_fapi_msg(TSS2_RC rc) { bool is_release = false; const char *split = strchr(VERSION, '-'); if (split) { /* Something like: * 1.6.0-20-gb57b05742878-dirty * 1.6.0-rc0 */ is_release = !strncmp(split, "rc", 2); } else { /* something like 1.2.3 */ is_release = true; } const char *version = is_release ? VERSION : "master"; LOGW("Listing FAPI token objects failed: \"%s\"\n" "Please see https://github.com/tpm2-software/tpm2-pkcs11/blob/%s/docs/FAPI.md " "for more details", Tss2_RC_Decode(rc), version); } static CK_RV get_key(FAPI_CONTEXT *fapictx, tpm_ctx *tctx, const char *path, uint32_t *esysHandle, uint32_t *pid) { bool ret; TSS2_RC rc; uint8_t type; uint8_t *data; size_t length; twist name = NULL; rc = Fapi_GetEsysBlob(fapictx, path, &type, &data, &length); if (rc != TSS2_RC_SUCCESS) { LOGE("Cannot get Esys blob for key %s", path); return CKR_GENERAL_ERROR; } twist twistdata = twistbin_new(data, length); Fapi_Free(data); if (!twistdata) { return CKR_HOST_MEMORY; } switch(type) { case FAPI_ESYSBLOB_CONTEXTLOAD: ret = tpm_contextload_handle(tctx, twistdata, esysHandle); if (!ret) { LOGE("Error on contextload"); return CKR_GENERAL_ERROR; } break; case FAPI_ESYSBLOB_DESERIALIZE: ret = tpm_deserialize_handle(tctx, twistdata, esysHandle); if (!ret) { LOGE("Error on deserialize"); return CKR_GENERAL_ERROR; } break; default: LOGE("Unknown FAPI type for ESYS blob."); twist_free(twistdata); return CKR_GENERAL_ERROR; } /* * For debugging multiple tokens, populate pid with something. * That something will be the LAST four octets of name. To avoid * the name algorithm identifier bits that are common to all Names. * This way its likely to be unique, but ultimately it doesn't * matter. */ ret = tpm_get_name(tctx, *esysHandle, &name); if (ret) { length = twist_len(name); if (length >= sizeof(*pid)) { memcpy(pid, &name[length - sizeof(*pid)], sizeof(*pid)); LOGV("pid set to: 0x%"PRIX32, *pid); } else { LOGW("Name length smaller than sizeof(uint32_t), got: %zu" "Not populating pid", length); *pid = 0; } } else { LOGW("Could not get name to populate pid"); *pid = 0; } twist_free(name); return CKR_OK; } CK_RV backend_fapi_init(void) { if (fctx) { LOGW("Backend FAPI already initialized."); return CKR_OK; } LOGV("Calling Fapi_Initialize"); TSS2_RC rc = Fapi_Initialize(&fctx, NULL); if (rc) { fail_fapi_msg(rc); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV backend_fapi_destroy(void) { LOGV("Calling Fapi_Finalize"); Fapi_Finalize(&fctx); return CKR_OK; } CK_RV backend_fapi_ctx_new(token *t) { TSS2_TCTI_CONTEXT *tcti; TSS2_RC rc = Fapi_GetTcti(fctx, &tcti); if (rc) { LOGE("Getting FAPI's tcti context"); return CKR_GENERAL_ERROR; } t->type = token_type_fapi; t->fapi.ctx = fctx; return tpm_ctx_new_fromtcti(tcti, &t->tctx); } void backend_fapi_ctx_free(token *t) { UNUSED(t); } #define PREFIX "/HS/SRK/tpm2-pkcs11-token-" static char *tss_path_from_id(unsigned id, const char *type) { /* Allocate for PREFIX + type + "-" + id + '\0' */ size_t size = 0; safe_add(size, strlen(PREFIX), strlen(type)); safe_adde(size, strlen(PREFIX)); safe_adde(size, 1 + 8 + 1); char *path = malloc(size); if (!path) { return NULL; } sprintf(&path[0], PREFIX "%s-%08x", type, id); return path; } static char *path_get_parent(const char *path) { char *end = rindex(path, '/'); if (!end) { return NULL; } return strndup(path, end - path); } /** Create a new token in fapi backend. * * See backend_create_token_seal() */ CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } rc = Fapi_CreateSeal(t->fapi.ctx, path, NULL /*type*/, twist_len(hexwrappingkey), NULL /*policy*/, newauth, (uint8_t*)hexwrappingkey); if (rc) { LOGE("Creation of a FAPI seal failed."); free(path); return CKR_GENERAL_ERROR; } /* Turn trailing whitespaces into trailing \0; cause some software is weird */ for (size_t i = sizeof(t->label); i > 0; i--) { if (t->label[i-1] != ' ') { break; } t->label[i-1] = '\0'; } char label[sizeof(t->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(t->label)] = '\0'; memcpy(&label[0], &t->label[0], sizeof(t->label)); rc = Fapi_SetDescription(t->fapi.ctx, path, &label[0]); if (rc) { LOGE("Setting FAPI seal description failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } size_t appdata_len = 0; safe_add(appdata_len, twist_len(newsalthex), 1); uint8_t *appdata = malloc(appdata_len); if (!appdata) { LOGE("oom"); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } memcpy(appdata, newsalthex, appdata_len - 1); appdata[appdata_len - 1] = '\0'; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); free(appdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } t->fapi.soauthsalt = newsalthex; t->type = token_type_fapi; t->config.is_initialized = true; assert(t->id); char *parentpath = path_get_parent(path); free(path); if (!parentpath) { return CKR_HOST_MEMORY; } CK_RV rv = get_key(t->fapi.ctx, t->tctx, parentpath, &t->pobject.handle, &t->pid); free(parentpath); if (rv != CKR_OK) { LOGE("Error getting parent key"); return rv; } return CKR_OK; } /** Retrieve all fapi tokens available. * * See backend_get_tokens() */ CK_RV backend_fapi_add_tokens(token *tok, size_t *len) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *pathlist; rc = Fapi_List(fctx, "/HS/SRK", &pathlist); if (rc == TSS2_FAPI_RC_IO_ERROR) { /* If no token seals were found, we're done here. */ LOGV("No FAPI token seals found."); } else if (rc != TSS2_RC_SUCCESS) { fail_fapi_msg(rc); return CKR_GENERAL_ERROR; } char *strtokr_save = NULL; for (char *path = strtok_r(pathlist, ":", &strtokr_save); path != NULL; path = strtok_r(NULL, ":", &strtokr_save)) { /* Skip over potential profile nodes that don't interest us. */ char *subpath = path; if (!strncmp(path, "/P_", strlen("/P_"))) { subpath = index(path + 1, '/'); if (!subpath) { LOGE("Malformed path received"); goto error; } } unsigned id; if (sscanf(subpath, PREFIX "so-%08x", &id) != 1) { LOGV("%s aka %s is not a token, ignoring", path, subpath); continue; } LOGV("Found a token at %s", path); token *t = &tok[*len]; memset(t, 0, sizeof(*t)); *len += 1; t->type = token_type_fapi; t->id = id; rv = token_min_init(t); if (rv) { LOGE("token min init failed"); goto error; } //FIXME t->fapi.ctx = fctx; char *parentpath = path_get_parent(path); if (!parentpath) { rv = CKR_HOST_MEMORY; goto error; } rv = get_key(t->fapi.ctx, t->tctx, parentpath, &t->pobject.handle, &t->pid); free(parentpath); if (rv != CKR_OK) { return rv; } char *label; rc = Fapi_GetDescription(t->fapi.ctx, path, &label); if (rc) { LOGE("Getting FAPI seal description failed."); goto error; } memcpy(&t->label[0], label, strlen(label)); Fapi_Free(label); LOGV("Parsing objects for token %i:%s", t->id, &t->label[0]); uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } t->fapi.soauthsalt = twistbin_new(appdata, strlen((char *)appdata)); if (!t->fapi.soauthsalt) { LOGE("OOM"); Fapi_Free(appdata); goto error; } size_t offset = 0; safe_add(offset, strlen((char *)appdata), 1); uint8_t *yaml = &appdata[offset]; while ((size_t)(yaml - appdata) < appdata_len) { LOGV("Current tobj at offset %zi / %zi is: %s", yaml - appdata, appdata_len, yaml); if (((size_t)(yaml - appdata) > appdata_len - 9) || (strlen((char*)yaml) < 10)) { LOGE("Incomplete tobj in appdata"); Fapi_Free(appdata); goto error; } tobject *tobj = tobject_new(); if (!tobj) { LOGE("oom"); Fapi_Free(appdata); goto error; } if (sscanf((char*)yaml, "%08x:", &tobj->id) != 1) { LOGE("Could not scan tobj id"); free(tobj); Fapi_Free(appdata); goto error; } maxobjectid = (maxobjectid > tobj->id)? maxobjectid : tobj->id; if (!parse_attributes_from_string(&yaml[9], strlen((char*)&yaml[9]), &tobj->attrs)) { LOGE("Could not parse FAPI attrs, got: \"%s\"", yaml); free(tobj); Fapi_Free(appdata); goto error; } rv = object_init_from_attrs(tobj); if (rv != CKR_OK) { LOGE("Object initialization failed"); free(tobj); Fapi_Free(appdata); goto error; } rv = token_add_tobject_last(t, tobj); if (rv != CKR_OK) { LOGE("Failed to initialize tobject from FAPI"); free(tobj); Fapi_Free(appdata); goto error; } size_t offset = 0; safe_add(offset, strlen((char *)yaml), 1); yaml += offset; LOGV("\nCurrent next is: %zi / %zi", yaml - appdata, appdata_len); } Fapi_Free(appdata); t->config.is_initialized = true; /* Initialize the User PIN area. */ /*********************************/ path = tss_path_from_id(t->id, "usr"); if (!path) { LOGE("No path constructed."); goto error; } rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, NULL); free(path); if (rc == TSS2_FAPI_RC_KEY_NOT_FOUND) { LOGV("No user pin found for token %08x.", t->id); continue; } if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } t->fapi.userauthsalt = twistbin_new(appdata, strlen((char *)appdata)); Fapi_Free(appdata); if (!t->fapi.userauthsalt) { LOGE("OOM"); goto error; } } rv = CKR_OK; out: Fapi_Free(pathlist); return rv; error: if (rv == CKR_OK) { rv = CKR_GENERAL_ERROR; } goto out; } /** Initialize the user PIN data for a given token. * * See backend_init_user() */ CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "usr"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } rc = Fapi_CreateSeal(t->fapi.ctx, path, NULL /*type*/, twist_len(sealdata), NULL /*policy*/, newauthhex, (uint8_t*)sealdata); if (rc) { LOGE("Creation of a FAPI seal failed."); free(path); return CKR_GENERAL_ERROR; } char label[sizeof(t->label) + 1]; /* token-label length plus \0, no overflow possible */ label[sizeof(t->label)] = '\0'; memcpy(&label[0], &t->label[0], sizeof(t->label)); rc = Fapi_SetDescription(t->fapi.ctx, path, &label[0]); if (rc) { LOGE("Setting FAPI seal description failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } size_t appdata_len = 0; safe_add(appdata_len, twist_len(newsalthex), 1); uint8_t *appdata = malloc(appdata_len); if (!appdata) { LOGE("oom"); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } memcpy(appdata, newsalthex, appdata_len - 1); appdata[appdata_len - 1] = '\0'; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); free(appdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } free(path); twist_free(t->fapi.userauthsalt); t->fapi.userauthsalt = newsalthex; return CKR_OK; } /** Store a new object for a given token in the backend. * * See backend_add_object() * * The object is added to the AppData of the token object * in the FAPI keystore. The different objects are separated * by a \0 delimiter. The first element of the AppData is the * salthex, so the first object starts after the first \0. */ CK_RV backend_fapi_add_object(token *t, tobject *tobj) { TSS2_RC rc; LOGV("Adding object to fapi token %i", t->id); char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } safe_adde(maxobjectid, 1); tobj->id = maxobjectid; char *attrs = emit_attributes_to_string(tobj->attrs); if (!attrs) { LOGE("OOM"); free(path); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } size_t newappdata_len = appdata_len; safe_adde(newappdata_len, 9); /* id as 8byte hex and ':' */ safe_adde(newappdata_len, strlen(attrs)); safe_adde(newappdata_len, 1); /* terminating '\0' */ uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { LOGE("OOM"); Fapi_Free(appdata); goto error; } memcpy(&newappdata[0], &appdata[0], appdata_len); sprintf((char*)&newappdata[appdata_len], "%08x:", tobj->id); memcpy(&newappdata[appdata_len + 9], attrs, strlen(attrs)); newappdata[newappdata_len - 1] = '\0'; Fapi_Free(appdata); rc = Fapi_SetAppData(t->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); free(attrs); return CKR_OK; error: free(path); free(attrs); return CKR_GENERAL_ERROR; } /** Given a token and tobject, will persist the new attributes in fapi backend. * * see backend_update_tobject_attrs(). */ CK_RV backend_fapi_update_tobject_attrs(token *t, tobject *tobj, attr_list *attrlist) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } /* Skip over soauthvalue (the first element of appData) */ size_t tobj_start = strlen((char*)appdata) + 1; /* Find the offset of the tobj to delete */ while (1) { if (tobj_start + 9 >= appdata_len) { LOGE("tobj not found in appdata."); goto error; } unsigned id; if (sscanf((char*)&appdata[tobj_start], "%08x:", &id) != 1) { LOGE("bad tobject."); goto error; } if (id == tobj->id) { LOGV("Object found at offset %zi.", tobj_start); break; } safe_adde(tobj_start, strlen((char*)&appdata[tobj_start])); safe_adde(tobj_start, 1); } size_t tobj_len = strlen((char*)&appdata[tobj_start]); char *attrs = emit_attributes_to_string(attrlist); if (!attrs) { LOGE("OOM"); free(path); return CKR_GENERAL_ERROR; } size_t newappdata_len = appdata_len - tobj_len; safe_adde(newappdata_len, 9); /* id as 8byte hex and ':' */ safe_adde(newappdata_len, strlen(attrs)); uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { LOGE("OOM"); Fapi_Free(appdata); goto error; } memcpy(&newappdata[0], &appdata[0], tobj_start); sprintf((char*)&newappdata[tobj_start], "%08x:%s", tobj->id, attrs); memcpy(&newappdata[tobj_start + 9 + strlen(attrs) + 1], &appdata[tobj_start + tobj_len], appdata_len - tobj_start - tobj_len - 1); newappdata[newappdata_len - 1] = '\0'; Fapi_Free(appdata); rc = Fapi_SetAppData(t->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); return CKR_OK; error: free(path); return CKR_GENERAL_ERROR; } /** Removes a tobject from the fapi backend. * * See backend_rm_tobject(). */ CK_RV backend_fapi_rm_tobject(token *t, tobject *tobj) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } /* Skip over soauthvalue (the first element of appData) */ size_t tobj_start = strlen((char*)appdata) + 1; /* Find the offset of the tobj to delete */ while (1) { if (tobj_start + 9 >= appdata_len) { LOGE("tobj not found in appdata."); goto error; } unsigned id; if (sscanf((char*)&appdata[tobj_start], "%08x:", &id) != 1) { LOGE("bad tobject."); goto error; } if (id == tobj->id) { LOGV("Object found at offset %zi.", tobj_start); break; } safe_adde(tobj_start, strlen((char*)&appdata[tobj_start])); safe_adde(tobj_start, 1); } size_t tobj_len = strlen((char*)&appdata[tobj_start]); memmove(&appdata[tobj_start - 1], &appdata[tobj_start + tobj_len], appdata_len - tobj_start - tobj_len); appdata_len -= tobj_len + 1; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); Fapi_Free(appdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); return CKR_OK; error: free(path); return CKR_GENERAL_ERROR; } struct authtable { const char *path; const char *auth; }; static TSS2_RC auth_cb(const char *path, char const *description, const char **auth, void *userData) { LOGV("Searching auth value for %s", description); struct authtable *at = (struct authtable *) userData; for (; at->path != NULL; at = &at[1]) { /* Using strstr because description may be prefixed with a crypto profile */ if (strstr(path, at->path)) { *auth = at->auth; if (!*auth) { return TSS2_FAPI_RC_MEMORY; } return TSS2_RC_SUCCESS; } } return TSS2_FAPI_RC_AUTHORIZATION_UNKNOWN; } /** Unseal a token's wrapping key. * * see backend_token_unseal_wrapping_key() */ CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *path = tss_path_from_id(tok->id, user ? "usr":"so"); if (!path) { LOGE("No path constructed."); return CKR_HOST_MEMORY; } twist sealsalt = user ? tok->fapi.userauthsalt : tok->fapi.soauthsalt; twist sealobjauth = utils_hash_pass(tpin, sealsalt); if (!sealobjauth) { rv = CKR_HOST_MEMORY; goto error; } char label[sizeof(tok->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(tok->label)] = '\0'; memcpy(&label[0], &tok->label[0], sizeof(tok->label)); /* FAPI may return the description (which is the label) or the path. Thus we register our auth value for either. */ struct authtable authtable[] = { { path, (char *)sealobjauth }, { &label[0], (char *)sealobjauth }, { NULL, NULL } }; rc = Fapi_SetAuthCB(tok->fapi.ctx, auth_cb, &authtable[0]); if (rc) { twist_free(sealobjauth); LOGE("Fapi_SetAuthCB failed."); goto error; } uint8_t *data; size_t size; rc = Fapi_Unseal(tok->fapi.ctx, path, &data, &size); Fapi_SetAuthCB(tok->fapi.ctx, NULL, NULL); twist_free(sealobjauth); if (user && rc == TSS2_FAPI_RC_PATH_NOT_FOUND) { rv = CKR_USER_PIN_NOT_INITIALIZED; goto error; } if (rc) { LOGE("Fapi_Unseal failed."); goto error; } twist wrappingkeyhex = twistbin_new(data, size); Fapi_Free(data); if (!wrappingkeyhex) { rv = CKR_HOST_MEMORY; goto error; } if (tok->wrappingkey) { twist_free(wrappingkeyhex); } else { tok->wrappingkey = twistbin_unhexlify(wrappingkeyhex); twist_free(wrappingkeyhex); if (!tok->wrappingkey) { LOGE("Expected internal wrapping key in base 16 format"); goto error; } } free(path); /* Since tobject are esysdb backed, they need an active session. */ if (!tpm_session_active(tok->tctx)) { LOGV("token parent object handle is 0x%08x", tok->pobject.handle); CK_RV tmp = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (tmp != CKR_OK) { LOGE("Could not start Auth Session with the TPM."); return tmp; } } return CKR_OK; error: free(path); return rv; } CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *path = tss_path_from_id(tok->id, user ? "usr":"so"); if (!path) { LOGE("No path constructed."); return CKR_HOST_MEMORY; } twist newsalthex = NULL; twist newauthhex = NULL; twist oldauth = NULL; rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } rv = CKR_GENERAL_ERROR; oldauth = utils_hash_pass(toldpin, user ? tok->fapi.userauthsalt : tok->fapi.soauthsalt); if (!oldauth) { goto out; } char label[sizeof(tok->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(tok->label)] = '\0'; memcpy(&label[0], &tok->label[0], sizeof(tok->label)); /* FAPI may return the description (which is the label) or the path. Thus we register our auth value for either. */ struct authtable authtable[] = { { path, (char *)oldauth }, { &label[0], (char *)oldauth }, { NULL, NULL } }; rc = Fapi_SetAuthCB(tok->fapi.ctx, auth_cb, &authtable[0]); if (rc) { LOGE("Fapi_SetAuthCB failed."); goto out; } LOGV("Attempting to change auth value for %s", path); rc = Fapi_ChangeAuth(tok->fapi.ctx, path, newauthhex); Fapi_SetAuthCB(tok->fapi.ctx, NULL, NULL); if (rc) { LOGE("Fapi_ChangeAuth failed."); goto out; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(tok->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto out; } size_t newappdata_len = appdata_len - strlen((char*)appdata); safe_adde(newappdata_len, twist_len(newsalthex)); uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { Fapi_Free(appdata); rv = CKR_HOST_MEMORY; goto out; } memcpy(newappdata, newsalthex, twist_len(newsalthex)); memcpy(&newappdata[twist_len(newsalthex)], &appdata[strlen((char*)appdata)], appdata_len - strlen((char*)appdata)); Fapi_Free(appdata); rc = Fapi_SetAppData(tok->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); goto out; } if (user) { twist_free(tok->fapi.userauthsalt); tok->fapi.userauthsalt = newsalthex; } else { twist_free(tok->fapi.soauthsalt); tok->fapi.soauthsalt = newsalthex; } rv = CKR_OK; out: free(path); if (rv != CKR_OK) { twist_free(newsalthex); } twist_free(oldauth); twist_free(newauthhex); return rv; } #else CK_RV backend_fapi_init(void) { return CKR_OK; } CK_RV backend_fapi_destroy(void) { return CKR_OK; } CK_RV backend_fapi_ctx_new(token *t) { UNUSED(t); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } void backend_fapi_ctx_free(token *t) { UNUSED(t); LOGV("FAPI NOT ENABLED"); } CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { UNUSED(t); UNUSED(hexwrappingkey); UNUSED(newauth); UNUSED(newsalthex); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_add_tokens(token *tok, size_t *len) { UNUSED(tok); UNUSED(len); LOGV("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { UNUSED(t); UNUSED(sealdata); UNUSED(newauthhex); UNUSED(newsalthex); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_add_object(token *t, tobject *tobj) { UNUSED(t); UNUSED(tobj); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrlist) { UNUSED(tok); UNUSED(tobj); UNUSED(attrlist); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_rm_tobject(token *tok, tobject *tobj) { UNUSED(tok); UNUSED(tobj); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { UNUSED(tok); UNUSED(user); UNUSED(tpin); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { UNUSED(tok); UNUSED(user); UNUSED(toldpin); UNUSED(tnewpin); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } #endif tpm2-pkcs11-1.7.0/src/lib/emitter.c0000664000175000017500000003447014114240163013602 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "attrs.h" #include "emitter.h" #include "log.h" #include "pkcs11.h" #include "twist.h" #include "token.h" #include "typed_memory.h" typedef struct yaml_emitter_state yaml_emitter_state; struct yaml_emitter_state { char *buf; size_t size; }; static int output_handler(void *data, unsigned char *buffer, size_t size) { yaml_emitter_state *s = (yaml_emitter_state *)data; size_t newsize = 0; safe_add(newsize, s->size, size); size_t newsize_1 = 0; safe_add(newsize_1, newsize, 1); void *ptr = realloc(s->buf, newsize_1); if (!ptr) { free(s->buf); return 0; } s->buf = ptr; size_t size_1 = 0; safe_add(size_1, size, 1); memset(&s->buf[s->size], 0, size_1); memcpy(&s->buf[s->size], buffer, size); s->size = newsize; return 1; } WEAK char *emit_attributes_to_string(attr_list *attrs) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } CK_ULONG count = attr_list_get_count(attrs); const CK_ATTRIBUTE_PTR _attrs = attr_list_get_ptr(attrs); CK_ULONG i; for (i=0; i < count; i++) { /* handle the key */ const CK_ATTRIBUTE_PTR a = &_attrs[i]; char strkey[64] = { 0 }; CK_ATTRIBUTE_TYPE k = a->type; snprintf(strkey, sizeof(strkey), "%lu", k); int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_INT_TAG, (yaml_char_t *)strkey, -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } /* what type of value is it */ CK_BYTE type = type_from_ptr(a->pValue, a->ulValueLen); assert(type); yaml_char_t *yamltag = NULL; switch(type) { case TYPE_BYTE_INT: yamltag = (yaml_char_t *)YAML_INT_TAG; break; case TYPE_BYTE_BOOL: yamltag = (yaml_char_t *)YAML_BOOL_TAG; break; case TYPE_BYTE_INT_SEQ: yamltag = (yaml_char_t *)YAML_SEQ_TAG; break; case TYPE_BYTE_HEX_STR: yamltag = (yaml_char_t *)YAML_STR_TAG; break; default: LOGE("unknown type, perhaps memory corruption issue?"); goto doc_delete; } int node; /* * handle the value */ if (type != TYPE_BYTE_INT_SEQ) { char keyvaluebuf[64] = { 0 }; const char *keyvalue = NULL; if (type == TYPE_BYTE_INT) { CK_ULONG_PTR v = (CK_ULONG_PTR)a->pValue; snprintf(keyvaluebuf, sizeof(keyvaluebuf), "%lu", *v); keyvalue = keyvaluebuf; } else if (type == TYPE_BYTE_BOOL) { CK_BBOOL *v = (CK_BBOOL *)a->pValue; snprintf(keyvaluebuf, sizeof(keyvaluebuf), "%s", *v == CK_TRUE ? "true" : "false"); keyvalue = keyvaluebuf; } else if (type == TYPE_BYTE_HEX_STR) { /* string*/ keyvalue = a->pValue ? twist_hex_new(a->pValue, a->ulValueLen) : ""; if (!keyvalue) { LOGE("oom"); goto doc_delete; } } else { /* impossible */ LOGE("barn fire"); assert(0); goto doc_delete; } node = yaml_document_add_scalar(&doc, yamltag, (yaml_char_t *)keyvalue, -1, YAML_ANY_SCALAR_STYLE); if (type == TYPE_BYTE_HEX_STR && strcmp(keyvalue, "")) { twist_free(keyvalue); } if (!node) { LOGE("yaml_document_add_scalar for value failed"); goto doc_delete; } } else { /* start a sequence */ node = yaml_document_add_sequence(&doc, yamltag, YAML_ANY_SEQUENCE_STYLE); if (!node) { LOGE("yaml_document_add_sequence for value failed"); goto doc_delete; } /* add scalar int's to sequence */ CK_ULONG len = a->ulValueLen/sizeof(CK_ULONG); CK_ULONG j; for (j=0; j < len; j++) { CK_ULONG v = ((CK_ULONG_PTR)a->pValue)[j]; char keyvalue[64] = { 0 }; snprintf(keyvalue, sizeof(keyvalue), "%lu", v); /* create a scalar */ int seqscalar = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_INT_TAG, (yaml_char_t *)keyvalue, -1, YAML_ANY_SCALAR_STYLE); if (!seqscalar) { LOGE("yaml_document_add_scalar for value failed"); goto doc_delete; } /* add scalar to sequence */ rc = yaml_document_append_sequence_item(&doc, node, seqscalar); if (!rc) { LOGE("yaml_document_append_sequence_item for value failed"); goto doc_delete; } } } /* add either scalar value or sequence of values */ rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } WEAK char *emit_config_to_string(token *t) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } /* add config value is initialized */ int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"token-init", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } const char *value = t->config.is_initialized ? "true" : "false"; int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } /* add the tcti config value */ if (t->config.tcti) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"tcti", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)t->config.tcti, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } /* add the pss signature state if known */ if (t->config.pss_sigs_good != pss_config_state_unk) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"pss-sigs-good", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } value = (t->config.pss_sigs_good == pss_config_state_good) ? "true" : "false"; node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } /* add config value empty user PIN, if set */ if (t->config.empty_user_pin) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"empty-user-pin", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)"true", -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } WEAK char *emit_pobject_to_conf_string(pobject_config *config) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } /* add config value is transient */ int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"transient", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } const char *value = config->is_transient ? "true" : "false"; int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } /* add the template-name config value if is transient */ if (config->is_transient) { assert(config->template_name); key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"template-name", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)config->template_name, -1, YAML_ANY_SCALAR_STYLE); } else { /* it is persistent add the esys tr */ assert(config->blob); key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"esys-tr", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } twist hexblob = twist_hexlify(config->blob); if (!hexblob) { goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)hexblob, -1, YAML_ANY_SCALAR_STYLE); twist_free(hexblob); } /* add either template-name or esys-tr */ rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } tpm2-pkcs11-1.7.0/src/lib/backend.h0000644000175000017500000000210613754763565013543 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_H_ #define SRC_LIB_BACKEND_H_ #include "pkcs11.h" #include "twist.h" #include "token.h" #define MAX_TOKEN_CNT 255 CK_RV backend_init(void); CK_RV backend_destroy(void); CK_RV backend_ctx_new(token *t); void backend_ctx_free(token *t); void backend_ctx_reset(token *t); CK_RV backend_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_get_tokens(token **tok, size_t *len); CK_RV backend_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_add_object(token *t, tobject *tobj); CK_RV backend_update_token_config(token *t); CK_RV backend_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrs); CK_RV backend_rm_tobject(token *tok, tobject *tobj); CK_RV backend_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_H_ */ tpm2-pkcs11-1.7.0/src/lib/backend.c0000664000175000017500000002462014116451727013530 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "backend.h" #include "backend_esysdb.h" #include "backend_fapi.h" enum backend { backend_error, backend_esysdb, backend_fapi }; static enum backend get_backend(void) { const char *env = getenv("TPM2_PKCS11_BACKEND"); if (!env || !strcasecmp(env, "esysdb")) { return backend_esysdb; } if (!strcasecmp(env, "fapi")) { return backend_fapi; } return backend_error; } /* This file includes the logic for selecting, aggregating and * distributing calls to different backends. * For now this will only be the esysdb backend that uses tss2-esys * and sqlite3 for operations. * In the future, logic will be added to also include the tss2-fapi * library for storage and TPM interaction. */ static bool fapi_init = false; static bool esysdb_init = false; CK_RV backend_init(void) { LOGV("Initializing backends"); enum backend backend = get_backend(); if (backend == backend_error) { return CKR_GENERAL_ERROR; } CK_RV rv = backend_fapi_init(); if (rv) { static const char *msg = "FAPI backend was not initialized."; if (backend == backend_fapi) { LOGE(msg); return rv; } LOGW(msg); } else { fapi_init = true; } rv = backend_esysdb_init(); if (rv) { LOGW("ESYSDB backend was not initialized."); } else { esysdb_init = true; } if (!fapi_init && !esysdb_init) { LOGE("Neither FAPI nor ESYSDB backends could be initialized."); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV backend_destroy(void) { LOGV("Destroying backends"); CK_RV rv = CKR_OK; enum backend backend = get_backend(); if (fapi_init) { rv = backend_fapi_destroy(); if (backend != backend_fapi) { rv = CKR_OK; } } if (esysdb_init) { CK_RV rv2 = backend_esysdb_destroy(); if (rv2 != CKR_OK) { rv = rv2; } } fapi_init = false; esysdb_init = false; return rv; } CK_RV backend_ctx_new(token *t) { enum backend backend = get_backend(); if (backend == backend_fapi) { return backend_fapi_ctx_new(t); } else { return backend_esysdb_ctx_new(t); } } void backend_ctx_free(token *t) { if (t->type == token_type_esysdb) { backend_esysdb_ctx_free(t); } else { backend_fapi_ctx_free(t); } tpm_ctx_free(t->tctx); } void backend_ctx_reset(token *t) { backend_esysdb_ctx_reset(t); /* fapi doesn't appear to need anything */ } /** Create a new token * * Create a new sealed object and store it in the data store. * * @param[in,out] t The token information on input and generated token * on output. * @param[in] hexwrappingkey TODO * @param[in] newauth The authorization value for the security operator * of the newly created token. * @param[in] newsalthex TODO * @returns TODO */ CK_RV backend_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { enum backend backend = get_backend(); if (backend == backend_fapi) { if (!fapi_init) { LOGE("FAPI backend not initialized."); return CKR_GENERAL_ERROR; } LOGV("Creating token under FAPI"); return backend_fapi_create_token_seal(t, hexwrappingkey, newauth, newsalthex); } else { if (!esysdb_init) { LOGE("FAPI backend not initialized."); return CKR_GENERAL_ERROR; } LOGV("Creating token under ESYSDB"); return backend_esysdb_create_token_seal(t, hexwrappingkey, newauth, newsalthex); } } /** Retrieve all tokens available. * * The returned list is a set of all stored tokens with all * objects inside the token structure. * @param[out] tok The list of tokens. * @param[out] len The number of entries in tok. * @returns TODO */ CK_RV backend_get_tokens(token **tok, size_t *len) { CK_RV rv = CKR_GENERAL_ERROR; enum backend backend = get_backend(); /* make sure tmp has a path to be populated */ if (!esysdb_init && !fapi_init) { LOGE("No backend initialized"); return CKR_GENERAL_ERROR; } token *tmp = calloc(MAX_TOKEN_CNT, sizeof(token)); if (!tmp) { LOGE("oom"); return CKR_HOST_MEMORY; } if (esysdb_init) { rv = backend_esysdb_get_tokens(tmp, len); if (rv) { LOGE("Getting tokens from esysdb backend failed."); return rv; } LOGV("Esysdb returned %zi token", *len); } if (fapi_init) { rv = backend_fapi_add_tokens(tmp, len); if (rv) { static const char *msg = "Getting tokens from fapi backend failed."; if (backend == backend_fapi) { LOGE(msg); token_free_list(&tmp, len); return rv; } else { LOGW(msg); } } LOGV("FAPI + Esysdb returned %zi token", *len); } /* -1 for starting at id 1 and -1 for the empty token */ if (*len >= MAX_TOKEN_CNT - 2) { LOGW("Too many tokens, must have less than %d to show empty tokens", MAX_TOKEN_CNT - 1); token_free_list(&tmp, len); return CKR_GENERAL_ERROR; } token *t = &tmp[*len]; for (t->id = 1; t->id < MAX_TOKEN_CNT && *len; t->id += 1) { size_t i = 0; for (; i < *len; i++) { if ((tmp[i]).id == t->id) { break; } } if (i == *len) { break; } } *len += 1; rv = token_min_init(t); if (rv != CKR_OK) { token_free_list(&tmp, len); return rv; } *tok = tmp; LOGV("Esysdb + FAPI returned %zi token", *len); return rv; } /** Initialize the user PIN data for a given token. * * @param[in,out] t The token to initialize user pin for. * @param[in] sealdata The data to be stored inside the created seal. * @param[in] newauthhex The auth value to be set of the created seal. * @param[in] newsalthex The salt value to be stored for this auth. * returns TODO */ CK_RV backend_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { switch (t->type) { case token_type_esysdb: return backend_esysdb_init_user(t, sealdata, newauthhex, newsalthex); case token_type_fapi: return backend_fapi_init_user(t, sealdata, newauthhex, newsalthex); default: assert(1); return CKR_GENERAL_ERROR; } } /** Store a new object for a given token in the backend. * * Note: Adding the object to the ring buffer in the token * struct is done independently. * * @param[in,out] t The token to add the object to. * @param[in] tobj The object to store. * @returns TODO */ CK_RV backend_add_object(token *t, tobject *tobj) { switch (t->type) { case token_type_esysdb: LOGV("Adding object to token using esysdb backend."); return backend_esysdb_add_object(t, tobj); case token_type_fapi: LOGV("Adding object to token using fapi backend."); return backend_fapi_add_object(t, tobj); default: assert(1); return CKR_GENERAL_ERROR; } } /** Given a token with a config, persist it. * * @param t * The token whose config to propagate to persistent storage. * * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_update_token_config(token *t) { switch (t->type) { case token_type_esysdb: LOGV("Adding object to token using esysdb backend."); return backend_esysdb_update_token_config(t); case token_type_fapi: LOGE("Not supported on FAPI"); return CKR_FUNCTION_NOT_SUPPORTED; default: assert(1); return CKR_GENERAL_ERROR; } } /** Given a token and tobject, will persist the new attributes. * * @param tok * The token to persist to. * @param tobj * The tobject to persist. * @param attrs * The new attributes to persist. * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrs) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_update_tobject_attrs(tobj, attrs); case token_type_fapi: return backend_fapi_update_tobject_attrs(tok, tobj, attrs); default: assert(1); return CKR_GENERAL_ERROR; } } /** * Removes a tobject from the backend. * @param tok * The token to remove from. * @param tobj * The tobject to remove. * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_rm_tobject(token *tok, tobject *tobj) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_rm_tobject(tobj); case token_type_fapi: return backend_fapi_rm_tobject(tok, tobj); default: assert(1); return CKR_GENERAL_ERROR; } } /** Unseal a token's wrapping key. * * Unseal a token's wrapping key as part of the Login process. * The wrapping key is then used to decrypt the individual tobjects' * auth values. * * @param[in,out] tok The token to remove from. * @param[in] user Whether to unseal from the user or so seal. * @param[in] tpin The pin value to use for unsealing. * @return CKR_OK on success, anything else is an error. */ CK_RV backend_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_token_unseal_wrapping_key(tok, user, tpin); case token_type_fapi: return backend_fapi_token_unseal_wrapping_key(tok, user, tpin); default: assert(1); return CKR_GENERAL_ERROR; } } /** Change the authValue of a token's seal blob. * * @param[in,out] tok The token to remove from. * @param[in] user Whether to unseal from the user or so seal. * @param[in] tpin The pin value to use for unsealing. * @return CKR_OK on success, anything else is an error. */ CK_RV backend_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_token_changeauth(tok, user, toldpin, tnewpin); case token_type_fapi: return backend_fapi_token_changeauth(tok, user, toldpin, tnewpin); default: assert(1); return CKR_GENERAL_ERROR; } } tpm2-pkcs11-1.7.0/src/lib/attrs.c0000664000175000017500000011204314114240163013257 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "attrs.h" #include "log.h" #include "pkcs11.h" #include "typed_memory.h" #include "utils.h" struct attr_list { CK_ULONG max; CK_ULONG count; CK_ATTRIBUTE_PTR attrs; }; #define ADD_ATTR_HANDLER(t, m) { .type = t, .name = #t, .memtype = m } typedef struct attr_handler2 attr_handler2; struct attr_handler2 { CK_ATTRIBUTE_TYPE type; CK_BYTE memtype; const char *name; }; #define ALLOC_LEN 16 static bool _attr_list_add(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG len, CK_BYTE_PTR buf, int memtype) { /* do we need space in the attribute list? if so realloc */ if (l->count == l->max) { bool res = __builtin_add_overflow(l->max, ALLOC_LEN, &l->max); if (res) { LOGE("add overflow\n"); return false; } size_t bytes = 0; safe_mul(bytes, l->max, sizeof(*l->attrs)); void *tmp = realloc(l->attrs, bytes); if (!tmp) { LOGE("oom"); return false; } l->attrs = (CK_ATTRIBUTE_PTR)tmp; /* * clear the newly allocated region * If the mul operation didn't overflow above, then * mul cannot overflow here, so use regular mul */ safe_mul(bytes, ALLOC_LEN, sizeof(*l->attrs)); memset(&l->attrs[l->count], 0, bytes); } /* only hex strings and sequences can be empty */ if (!len && (memtype != TYPE_BYTE_HEX_STR) && (memtype != TYPE_BYTE_INT_SEQ)) { LOGE("type cannot be empty, got: %d", memtype); return false; } if (!len) { l->attrs[l->count].type = type; assert(!l->attrs[l->count].pValue); assert(!l->attrs[l->count].ulValueLen); l->count++; return true; } void *newnode = type_calloc(1, len, memtype); if (!newnode) { LOGE("oom"); return false; } memcpy(newnode, buf, len); l->attrs[l->count].type = type; l->attrs[l->count].ulValueLen = len; l->attrs[l->count++].pValue = newnode; return true; } static bool add_type_copy(CK_ATTRIBUTE_PTR a, CK_BYTE memtype, attr_list *l) { if (!a->pValue || !a->ulValueLen) { return attr_list_add_buf(l, a->type, NULL, 0); } if (!memtype) { LOGW("Guessing type for attribute, consider adding type info: 0x%lx", a->type); /* guess based on length */ switch(a->ulValueLen) { case sizeof(CK_BBOOL): memtype = TYPE_BYTE_BOOL; break; case sizeof(CK_ULONG): memtype = TYPE_BYTE_INT; break; default: memtype = TYPE_BYTE_HEX_STR; } } return _attr_list_add(l, a->type, a->ulValueLen, a->pValue, memtype); } static attr_handler2 attr_handlers[] = { ADD_ATTR_HANDLER(CKA_CLASS, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_TOKEN, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_PRIVATE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_LABEL, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_APPLICATION, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_VALUE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_OBJECT_ID, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_CERTIFICATE_TYPE, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_ISSUER, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_SERIAL_NUMBER, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TRUSTED, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_CERTIFICATE_CATEGORY, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_JAVA_MIDP_SECURITY_DOMAIN, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_URL, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_CHECK_VALUE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_HASH_OF_SUBJECT_PUBLIC_KEY, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_HASH_OF_ISSUER_PUBLIC_KEY, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_NAME_HASH_ALGORITHM, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_KEY_TYPE, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_SUBJECT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_ID, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_SENSITIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_ENCRYPT, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DECRYPT, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_UNWRAP, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_SIGN, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_SIGN_RECOVER, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_VERIFY, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_VERIFY_RECOVER, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DERIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_START_DATE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_END_DATE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_MODULUS, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_MODULUS_BITS, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_PUBLIC_EXPONENT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_PUBLIC_KEY_INFO, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_VALUE_LEN, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_EXTRACTABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_LOCAL, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_NEVER_EXTRACTABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_ALWAYS_SENSITIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_KEY_GEN_MECHANISM, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_MODIFIABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_COPYABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DESTROYABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_EC_PARAMS, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_EC_POINT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_ALWAYS_AUTHENTICATE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP_WITH_TRUSTED, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP_TEMPLATE, TYPE_BYTE_TEMP_SEQ), ADD_ATTR_HANDLER(CKA_UNWRAP_TEMPLATE, TYPE_BYTE_TEMP_SEQ), ADD_ATTR_HANDLER(CKA_ALLOWED_MECHANISMS, TYPE_BYTE_INT_SEQ), ADD_ATTR_HANDLER(CKA_TPM2_OBJAUTH_ENC, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_PUB_BLOB, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_PRIV_BLOB, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_ENC_BLOB, TYPE_BYTE_HEX_STR), }; static attr_handler2 default_handler = { .memtype = 0, .name="UNKNOWN" }; static attr_handler2 *attr_lookup(CK_ATTRIBUTE_TYPE t) { size_t i; for (i=0; i < ARRAY_LEN(attr_handlers); i++) { attr_handler2 *h = &attr_handlers[i]; if (h->type == t) { return h; } } LOGW("Using default attribute handler for %lu," " consider registering a handler", t); /* attempt using the default */ return &default_handler; } attr_list *attr_list_new(void) { return calloc(1, sizeof(attr_list)); } bool attr_list_add_int(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG value) { return _attr_list_add(l, type, sizeof(value), (CK_BYTE_PTR)&value, TYPE_BYTE_INT); } bool attr_list_add_bool(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BBOOL value) { return _attr_list_add(l, type, sizeof(value), &value, TYPE_BYTE_BOOL); } bool attr_list_add_buf(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len) { return _attr_list_add(l, type, len, value, TYPE_BYTE_HEX_STR); } CK_ULONG attr_list_get_count(attr_list *l) { assert(l); return l->count; } CK_ATTRIBUTE_PTR attr_list_get_ptr(attr_list *l) { assert(l); return l->attrs; } void attr_pfree_cleanse(CK_ATTRIBUTE_PTR attr) { if (attr && attr->pValue) { /* Don't use clear_free because OSSL is not used for alloc */ OPENSSL_cleanse(attr->pValue, attr->ulValueLen); free(attr->pValue); attr->pValue = NULL; attr->ulValueLen = 0; } } void attr_list_free(attr_list *attrs) { if (!attrs) { return; } CK_ULONG i; for (i=0; i < attrs->count; i++) { const CK_ATTRIBUTE_PTR a = &attrs->attrs[i]; attr_pfree_cleanse(a); } free(attrs->attrs); free(attrs); } CK_RV attr_list_raw_invoke_handlers(const CK_ATTRIBUTE_PTR attrs, CK_ULONG count, const attr_handler *handlers, size_t len, void *udata) { size_t i; if (!attrs || !count) { return CKR_OK; } for(i=0; i < count; i++) { const CK_ATTRIBUTE_PTR a = &attrs[i]; size_t j; for(j=0; j < len; j++) { const attr_handler *h = &handlers[j]; if (h->type == a->type) { CK_RV rv = h->handler(a, udata); if (rv != CKR_OK) { return rv; } } } LOGV("ignoring attribute: 0x%lx", a->type); } return CKR_OK; } CK_RV attr_list_invoke_handlers(attr_list *l, const attr_handler *handlers, size_t len, void *udata) { if (!l) { return CKR_OK; } return attr_list_raw_invoke_handlers(attr_list_get_ptr(l), attr_list_get_count(l), handlers, len, udata); } bool attr_typify(CK_ATTRIBUTE_PTR attrs, CK_ULONG cnt, attr_list **copy) { attr_list *c = attr_list_new(); if (!c) { return CKR_HOST_MEMORY; } CK_ULONG i; for (i=0; i < cnt; i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; attr_handler2 *h = attr_lookup(a->type); bool res = add_type_copy(a, h->memtype, c); if (!res) { attr_list_free(c); return res; } } *copy = c; return true; } CK_RV attr_list_dup(attr_list *old, attr_list **new) { assert(old); assert(new); CK_RV rv = CKR_GENERAL_ERROR; /* create the container */ attr_list *tmp = calloc(1, sizeof(attr_list)); if (!tmp) { LOGE("oom"); return CKR_HOST_MEMORY; } /* create the attribute list */ tmp->attrs = calloc(old->max, sizeof(CK_ATTRIBUTE)); if (!tmp->attrs) { LOGE("oom"); free(tmp); return CKR_HOST_MEMORY; } tmp->max = old->max; /* deep copy the attrs */ size_t i; for (i=0; i < old->count; i++) { CK_ATTRIBUTE_PTR o = &old->attrs[i]; CK_ATTRIBUTE_PTR n = &tmp->attrs[i]; n->type = o->type; if (o->pValue && o->ulValueLen) { rv = type_mem_dup(o->pValue, o->ulValueLen, &n->pValue); if (rv != CKR_OK) { goto error; } n->ulValueLen = o->ulValueLen; } tmp->count++; } *new = tmp; return CKR_OK; error: attr_list_free(tmp); return rv; } CK_ATTRIBUTE_PTR attr_get_attribute_by_type_raw(CK_ATTRIBUTE_PTR haystack, CK_ULONG haystack_count, CK_ATTRIBUTE_TYPE needle) { assert(haystack); CK_ULONG i; for (i=0; i < haystack_count; i++) { CK_ATTRIBUTE_PTR a = &haystack[i]; if (a->type == needle) { return a; } } return NULL; } CK_ATTRIBUTE_PTR attr_get_attribute_by_type(attr_list *haystack, CK_ATTRIBUTE_TYPE needle) { assert(haystack); return attr_get_attribute_by_type_raw(haystack->attrs, haystack->count, needle); } attr_list *attr_list_append_attrs( attr_list *old_attrs, attr_list **new_attrs) { if (!(*new_attrs)) { return old_attrs; } if (!old_attrs) { return *new_attrs; } /* todo safe addition */ CK_ULONG old_len = attr_list_get_count(old_attrs); CK_ULONG new_len = attr_list_get_count(*new_attrs); CK_ULONG total_len = 0; safe_add(total_len, new_len, old_len); if (!new_len) { attr_list_free(*new_attrs); *new_attrs = NULL; return old_attrs; } // need to fit 500 have space for 16 if (total_len > old_attrs->max) { size_t blocks = total_len / ALLOC_LEN; safe_adde(blocks, total_len % ALLOC_LEN ? 1 : 0); CK_ULONG alloc_items = 0; safe_mul(alloc_items, blocks, ALLOC_LEN); size_t bytes = 0; safe_mul(bytes, alloc_items, sizeof(CK_ATTRIBUTE)); void *tmp = realloc(old_attrs->attrs, bytes); if (!tmp) { return NULL; } old_attrs->attrs = tmp; CK_ATTRIBUTE_PTR clear_point = &old_attrs->attrs[old_attrs->max]; /* clear the delta */ size_t delta = alloc_items - old_attrs->max; safe_mul(bytes, delta, sizeof(CK_ATTRIBUTE)); memset(clear_point, 0, bytes); old_attrs->max = alloc_items; } CK_ATTRIBUTE_PTR cpy_point = &old_attrs->attrs[old_len]; size_t bytes = 0; safe_mul(bytes, new_len, sizeof(CK_ATTRIBUTE)); memcpy(cpy_point, (*new_attrs)->attrs, bytes); old_attrs->count = total_len; free((*new_attrs)->attrs); free(*new_attrs); *new_attrs = NULL; return old_attrs; } CK_RV attr_common_add_storage(attr_list **storage_attrs) { CK_RV rv = CKR_GENERAL_ERROR; CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(*storage_attrs, CK_OBJECT_CLASS_BAD); if (cka_class == CK_OBJECT_CLASS_BAD) { LOGE("Expected object to have CKA_CLASS"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* currently immutable */ bool r = attr_list_add_bool(new_attrs, CKA_TOKEN, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_MODIFIABLE, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_COPYABLE, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_DESTROYABLE, CK_TRUE); goto_error_false(r); /* defaults */ CK_BBOOL defpriv = ((cka_class == CKO_PRIVATE_KEY) || (cka_class == CKO_SECRET_KEY) || (cka_class == CKO_DATA)) ? CK_TRUE : CK_FALSE; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*storage_attrs, CKA_PRIVATE); if (!a) { r = attr_list_add_bool(new_attrs, CKA_PRIVATE, defpriv); goto_error_false(r); } a = attr_get_attribute_by_type(*storage_attrs, CKA_LABEL); if (!a) { r = attr_list_add_buf(new_attrs, CKA_LABEL, NULL, 0); goto_error_false(r); } *storage_attrs = attr_list_append_attrs(*storage_attrs, &new_attrs); goto_error_false(*storage_attrs); return CKR_OK; error: attr_list_free(new_attrs); return rv; } CK_RV attr_common_add_data(attr_list **data_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*data_attrs, CKA_VALUE); if (!a) { LOGE("Expected object to have CKA_VALUE"); return CKR_TEMPLATE_INCOMPLETE; } else if (!a->ulValueLen || !a->pValue) { LOGE("CKA_VALUE bad, got len: %lu, pValue: %s", a->ulValueLen, a->pValue ? "(set)" : "(null)"); return CKR_ATTRIBUTE_VALUE_INVALID; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } a = attr_get_attribute_by_type(*data_attrs, CKA_OBJECT_ID); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_APPLICATION, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*data_attrs, CKA_APPLICATION); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_APPLICATION, NULL, 0); goto_error_false(r); } *data_attrs = attr_list_append_attrs(*data_attrs, &new_attrs); goto_error_false(*data_attrs); return attr_common_add_storage(data_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_key(attr_list **key_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*key_attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected object to have CKA_KEY_TYPE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*key_attrs, CKA_LOCAL); if (!a) { LOGE("Expected object to have CKA_LOCAL"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*key_attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*key_attrs, CKA_ID); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_ID, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*key_attrs, CKA_START_DATE); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_START_DATE, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*key_attrs, CKA_END_DATE); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_END_DATE, NULL, 0); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_DERIVE, CK_FALSE); goto_error_false(r); *key_attrs = attr_list_append_attrs(*key_attrs, &new_attrs); goto_error_false(*key_attrs); return attr_common_add_storage(key_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_publickey(attr_list **public_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_ENCRYPT); if (!a) { LOGE("Expected object to have CKA_ENCRYPT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*public_attrs, CKA_VERIFY); if (!a) { LOGE("Expected object to have CKA_VERIFY"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*public_attrs, CKA_SUBJECT); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_SUBJECT, NULL, 0); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_SUBJECT, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_TRUSTED, CK_FALSE); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_WRAP_TEMPLATE, NULL, 0); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_PUBLIC_KEY_INFO, NULL, 0); goto_error_false(r); r = attr_list_add_int(new_attrs, CKA_CLASS, CKO_PUBLIC_KEY); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_WRAP, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_VERIFY_RECOVER, CK_FALSE); goto_error_false(r); *public_attrs = attr_list_append_attrs(*public_attrs, &new_attrs); goto_error_false(*public_attrs); return attr_common_add_key(public_attrs); error: attr_list_free(new_attrs); return rv; } CK_RV attr_common_add_RSA_publickey(attr_list **public_attrs) { CK_RV rv = CKR_GENERAL_ERROR; attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* default if not set */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_MODULUS_BITS); if (!a) { a = attr_get_attribute_by_type(*public_attrs, CKA_MODULUS); if (!a) { LOGE("Expected object to have CKA_MODULUS"); goto error; } CK_ULONG modulus_bits = 0; safe_mul(modulus_bits, a->ulValueLen, 8); bool r = attr_list_add_int(new_attrs, CKA_MODULUS_BITS, modulus_bits); goto_error_false(r); } *public_attrs = attr_list_append_attrs(*public_attrs, &new_attrs); goto_error_false(*public_attrs); return attr_common_add_publickey(public_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_EC_publickey(attr_list **public_attrs) { /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_EC_POINT); if (!a) { LOGE("Expected object to have CKA_EC_POINT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("Expected object to have CKA_EC_PARAMS"); return CKR_GENERAL_ERROR; } return attr_common_add_publickey(public_attrs); } static CK_RV attr_common_add_privatekey(attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_DECRYPT); if (!a) { LOGE("Expected object to have CKA_DECRYPT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_SIGN); if (!a) { LOGE("Expected object to have CKA_SIGN"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_EXTRACTABLE); if (!a) { LOGE("Expected object to have CKA_EXTRACTABLE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_ALWAYS_SENSITIVE); if (!a) { LOGE("Expected object to have CKA_ALWAYS_SENSITIVE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_NEVER_EXTRACTABLE); if (!a) { LOGE("Expected object to have CKA_NEVER_EXTRACTABLE"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*private_attrs, CKA_SUBJECT); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_SUBJECT, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*private_attrs, CKA_ALWAYS_AUTHENTICATE); if (!a) { bool r = attr_list_add_bool(new_attrs, CKA_ALWAYS_AUTHENTICATE, CK_FALSE); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_SIGN_RECOVER, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_SENSITIVE, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_UNWRAP, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_WRAP_WITH_TRUSTED, CK_FALSE); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_UNWRAP_TEMPLATE, NULL, 0); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_PUBLIC_KEY_INFO, NULL, 0); goto_error_false(r); r = attr_list_add_int(new_attrs, CKA_CLASS, CKO_PRIVATE_KEY); goto_error_false(r); *private_attrs = attr_list_append_attrs(*private_attrs, &new_attrs); goto_error_false(*private_attrs); return attr_common_add_key(private_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_RSA_privatekey(attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS); if (!a) { LOGE("Expected object to have CKA_MODULUS"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_PUBLIC_EXPONENT); if (!a) { LOGE("Expected object to have CKA_PUBLIC_EXPONENT"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = NULL; a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS_BITS); if (!a) { new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS); /* we checked above this cant fail */ assert(a); CK_ULONG modulus_bits = 0; safe_mul(modulus_bits, a->ulValueLen, 8); bool r = attr_list_add_int(new_attrs, CKA_MODULUS_BITS, modulus_bits); goto_error_false(r); } *private_attrs = attr_list_append_attrs(*private_attrs, &new_attrs); goto_error_false(*private_attrs); return attr_common_add_privatekey(private_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_EC_privatekey(attr_list **private_attrs) { /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_EC_POINT); if (!a) { LOGE("Expected object to have CKA_EC_POINT"); return CKR_GENERAL_ERROR; } return attr_common_add_privatekey(private_attrs); } CK_RV rsa_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs) { /* XXX These are hardcoded for now */ CK_MECHANISM_TYPE t[] = { CKM_RSA_X_509, CKM_RSA_PKCS_OAEP, CKM_RSA_PKCS, CKM_SHA1_RSA_PKCS, CKM_SHA256_RSA_PKCS, CKM_SHA384_RSA_PKCS, CKM_SHA512_RSA_PKCS, CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, CKM_SHA384_RSA_PKCS_PSS, CKM_SHA512_RSA_PKCS_PSS, }; if (new_pub_attrs) { bool r = attr_list_add_buf(new_pub_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); } if (new_priv_attrs) { bool r = attr_list_add_buf(new_priv_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); } return CKR_OK; error: return CKR_GENERAL_ERROR; } /* * Add required attributes to the RSA objects based on: * - http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/errata01/os/pkcs11-curr-v2.40-errata01-os-complete.html#_Toc441850406 * - 2.1.2 and 2.1.3 */ static CK_RV rsa_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; attr_list *new_pub_attrs = attr_list_new(); if (!new_pub_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } attr_list *new_priv_attrs = attr_list_new(); if (!new_priv_attrs) { attr_list_free(new_pub_attrs); LOGE("oom"); return CKR_HOST_MEMORY; } rv = rsa_gen_mechs(new_pub_attrs, new_priv_attrs); if (rv != CKR_OK) { goto error; } bool r = attr_list_add_int(new_pub_attrs, CKA_KEY_TYPE, CKK_RSA); goto_error_false(r); r = attr_list_add_int(new_priv_attrs, CKA_KEY_TYPE, CKK_RSA); goto_error_false(r); *public_attrs = attr_list_append_attrs(*public_attrs, &new_pub_attrs); goto_error_false(*public_attrs); *private_attrs = attr_list_append_attrs(*private_attrs, &new_priv_attrs); goto_error_false(*private_attrs); rv = attr_common_add_RSA_privatekey(private_attrs); if (rv != CKR_OK) { goto error; } rv = attr_common_add_RSA_publickey(public_attrs); if (rv != CKR_OK) { goto error; } return CKR_OK; error: attr_list_free(new_priv_attrs); attr_list_free(new_pub_attrs); return rv; } static CK_RV ecc_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs) { /* XXX These are hardcoded for now */ CK_MECHANISM_TYPE t[] = { CKM_ECDSA, CKM_ECDSA_SHA1, CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512, }; bool r = attr_list_add_buf(new_pub_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); r = attr_list_add_buf(new_priv_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); return CKR_OK; error: return CKR_GENERAL_ERROR; } static CK_RV ecc_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("CKA_EC_PARAMS missing"); return CKR_GENERAL_ERROR; } attr_list *new_pub_attrs = attr_list_new(); if (!new_pub_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } attr_list *new_priv_attrs = attr_list_new(); if (!new_priv_attrs) { attr_list_free(new_pub_attrs); LOGE("oom"); return CKR_HOST_MEMORY; } bool r = attr_list_add_buf(new_pub_attrs, CKA_EC_PARAMS, a->pValue, a->ulValueLen); goto_error_false(r); rv = ecc_gen_mechs(new_pub_attrs, new_priv_attrs); if (rv != CKR_OK) { goto error; } /* clients behave better when EC_PRIVATE objects have CKA_EC_PARAMS */ a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("Expected object to have CKA_EC_PARAMS"); goto error; } r = attr_list_add_buf(new_priv_attrs, CKA_EC_PARAMS, a->pValue, a->ulValueLen); goto_error_false(r); r = attr_list_add_int(new_pub_attrs, CKA_KEY_TYPE, CKK_EC); goto_error_false(r); r = attr_list_add_int(new_priv_attrs, CKA_KEY_TYPE, CKK_EC); goto_error_false(r); *private_attrs = attr_list_append_attrs(*private_attrs, &new_priv_attrs); goto_error_false(*private_attrs); *public_attrs = attr_list_append_attrs(*public_attrs, &new_pub_attrs); goto_error_false(*public_attrs); rv = attr_common_add_EC_privatekey(private_attrs); if (rv != CKR_OK) { goto error; } return attr_common_add_EC_publickey(public_attrs); error: attr_list_free(new_priv_attrs); attr_list_free(new_pub_attrs); return rv; } static CK_RV attr_conditional_add( attr_list *search_attrs, /* look in this list */ CK_ULONG conds[], size_t conds_len, /* if not set add them */ attr_list *ext_attrs, /* from this list of attributes */ attr_list **filtered_attrs) { /* and return them to me */ assert(filtered_attrs); attr_handler2 *h; attr_list *d = attr_list_new(); if (!d) { return CKR_HOST_MEMORY; } bool r; CK_ULONG c; /* for each of the new attrs ADD TO PRIVATE */ for (c = 0; c < ext_attrs->count; c++) { /* current extra attribute we're examining */ CK_ATTRIBUTE_PTR cur = &ext_attrs->attrs[c]; /* actual filtered list to save it to, shallow copy ok */ CK_ULONG i; /* is it a conditional attr */ for (i = 0; i < conds_len; i++) { /* yes it's conditional */ if (cur->type == conds[i]) { /* * is it in the externally supplied attribute present in the user specified * template */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(search_attrs, cur->type); if (!a) { /* * we just treat it like a regular attribute to add so break out of the inner loop */ goto add_item; } else if (a->ulValueLen != cur->ulValueLen || memcmp(a->pValue, cur->pValue, cur->ulValueLen)) { /* yes - better match */ LOGE("User specified and TPM specified attr mismatch: 0x%lx", cur->type); attr_list_free(d); return CKR_GENERAL_ERROR; } break; } } /* not conditional and specified, skip */ if (i != conds_len) { continue; } add_item: /* no - add it, shallow copy ok */ h = attr_lookup(cur->type); assert(h); r = add_type_copy(cur, h->memtype, d); if (!r) { attr_list_free(d); return CKR_GENERAL_ERROR; } } if (!d->count) { attr_list_free(d); *filtered_attrs = NULL; } else { *filtered_attrs = d; } return CKR_OK; } CK_RV attr_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs, attr_list *ext_attrs, CK_MECHANISM_TYPE mech) { switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: break; case CKM_EC_KEY_PAIR_GEN: break; default: LOGE("Unsupported keygen mechanism: 0x%lx", mech); return CKR_MECHANISM_INVALID; } CK_RV rv = CKR_GENERAL_ERROR; attr_list *filtered_pub_attrs = NULL; attr_list *filtered_priv_attrs = NULL; bool r = attr_list_add_int(*public_attrs, CKA_KEY_GEN_MECHANISM, mech); goto_error_false(r); r = attr_list_add_int(*private_attrs, CKA_KEY_GEN_MECHANISM, mech); goto_error_false(r); /* * We can't just blindly add the extra attributes, as we don't want the tpm specifying * attributes already in the template. * * Conditionally add them for public and private */ /* add only if not set, sanity check that values match */ CK_ULONG conds[] = { CKA_DECRYPT, CKA_VERIFY, CKA_SIGN, CKA_ENCRYPT, }; rv = attr_conditional_add( *private_attrs, conds, ARRAY_LEN(conds), ext_attrs, &filtered_priv_attrs); if (rv != CKR_OK) { goto error; } rv = attr_conditional_add( *public_attrs, conds, ARRAY_LEN(conds), ext_attrs, &filtered_pub_attrs); if (rv != CKR_OK) { goto error; } *private_attrs = attr_list_append_attrs(*private_attrs, &filtered_priv_attrs); goto_error_false(*private_attrs); *public_attrs = attr_list_append_attrs(*public_attrs, &filtered_pub_attrs); goto_error_false(*public_attrs); /* key type specific stuff */ switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: return rsa_add_missing_attrs(public_attrs, private_attrs); break; case CKM_EC_KEY_PAIR_GEN: return ecc_add_missing_attrs(public_attrs, private_attrs); } assert(0); LOGE("barn fire"); return CKR_GENERAL_ERROR; error: attr_list_free(filtered_priv_attrs); attr_list_free(filtered_pub_attrs); return rv; } static CK_RV check_attr(CK_ATTRIBUTE_PTR a, CK_BYTE memtype) { CK_BBOOL bbool; CK_RV rv = CKR_GENERAL_ERROR; /* validate sizes */ CK_ULONG ulValueLen = a->ulValueLen; switch (memtype) { case TYPE_BYTE_INT: if (ulValueLen != sizeof(CK_ULONG)) { LOGE("ulValueLen(%lu) != sizeof(CK_ULONG)", ulValueLen); return CKR_MECHANISM_PARAM_INVALID; } break; case TYPE_BYTE_BOOL: rv = attr_CK_BBOOL(a, &bbool); if (rv != CKR_OK) { return rv; } break; case TYPE_BYTE_INT_SEQ: if (ulValueLen % sizeof(CK_ULONG)) { LOGE("ulValueLen(%lu) %% sizeof(CK_ULONG)", ulValueLen % sizeof(CK_ULONG)); return CKR_MECHANISM_PARAM_INVALID; } break; case TYPE_BYTE_HEX_STR: /* nothing to do */ break; default: LOGE("Unknown data type representation, got: %u", memtype); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr) { assert(attrs); assert(untrusted_attr); CK_ATTRIBUTE_TYPE t = untrusted_attr->type; attr_handler2 *handler = attr_lookup(t); assert(handler); CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(attrs, t); if (!found) { LOGE("Attribute entry not found"); return CKR_GENERAL_ERROR; } void *pValue = untrusted_attr->pValue; CK_ULONG ulValueLen = untrusted_attr->ulValueLen; if (ulValueLen != found->ulValueLen) { void *new_pValue = type_zrealloc(found->pValue, ulValueLen, handler->memtype); if (!new_pValue) { LOGE("oom"); return CKR_HOST_MEMORY; } /* update the found node with the new resized memory */ found->ulValueLen = ulValueLen; found->pValue = new_pValue; } /* update the contents of memory with what was provided */ memcpy(found->pValue, pValue, ulValueLen); return CKR_OK; } CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr) { assert(attrs); assert(*attrs); assert(untrusted_attr); CK_ATTRIBUTE_TYPE t = untrusted_attr->type; attr_handler2 *handler = attr_lookup(t); assert(handler); CK_RV rv = check_attr(untrusted_attr, handler->memtype); if (rv != CKR_OK) { return rv; } attr_list *new_item = NULL; bool res = attr_typify(untrusted_attr, 1, &new_item); if (!res) { LOGE("Could not typify attr: %lu", untrusted_attr->type); return CKR_GENERAL_ERROR; } attr_list *x = attr_list_append_attrs( *attrs, &new_item); if (!x) { return CKR_GENERAL_ERROR; } *attrs = x; return CKR_OK; } const char *attr_get_name(CK_ATTRIBUTE_TYPE t) { attr_handler2 *attr = attr_lookup(t); assert(attr); assert(attr->name); return attr->name; } #define UTILS_GENERIC_ATTR_TYPE_CONVERT(T) \ CK_RV attr_##T(CK_ATTRIBUTE_PTR attr, T *x) { \ assert(attr); \ assert(x); \ \ if (attr->ulValueLen != sizeof(*x)) { \ return CKR_ATTRIBUTE_VALUE_INVALID; \ } \ \ *x = *(T *)attr->pValue; \ \ return CKR_OK; \ } UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_ULONG); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_BBOOL); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_OBJECT_CLASS); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_KEY_TYPE); #define UTILS_GENERIC_EXTRACTOR(type, T) \ T attr_list_get_##type(attr_list *attrs, T defvalue) { \ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, type); \ if (!a) { \ return defvalue; \ } \ T x = defvalue; \ CK_RV rv = attr_##T(a, &x); \ return rv != CKR_OK ? defvalue : x; \ } UTILS_GENERIC_EXTRACTOR(CKA_PRIVATE, CK_BBOOL); UTILS_GENERIC_EXTRACTOR(CKA_CLASS, CK_OBJECT_CLASS); UTILS_GENERIC_EXTRACTOR(CKA_KEY_TYPE, CK_KEY_TYPE); UTILS_GENERIC_EXTRACTOR(CKA_TOKEN, CK_BBOOL); tpm2-pkcs11-1.7.0/src/lib/utils.h0000664000175000017500000001503014116455002013267 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_UTILS_H_ #define SRC_PKCS11_UTILS_H_ #include #include #include #include #include "config.h" #include "log.h" #include "pkcs11.h" #include "twist.h" #define SALT_HEX_STR_SIZE 64 #define AUTH_HEX_STR_SIZE 32 #define xstr(s) str(s) #define str(s) #s #define ARRAY_LEN(x) (sizeof(x)/sizeof(x[0])) #define ARRAY_BYTES(l, t) (l * sizeof(t[0])) #define UNUSED(x) (void)x #define SAFE_FREE(x) do { free(x); x = NULL; } while (0) #define SAFE_CAST(m, r) \ do { \ if (!m->pParameter || m->ulParameterLen != sizeof(typeof(*r))) { \ return CKR_MECHANISM_PARAM_INVALID; \ } \ \ r = (typeof(r))m->pParameter; \ } while (0) #define goto_error_false(r) if(!r) { goto error; } int str_to_ul(const char *val, size_t *res); #define str_padded_copy(dst, src) _str_padded_copy(dst, sizeof(dst), (const CK_UTF8CHAR_PTR)src, strnlen((const char *)src, sizeof(src))) static inline void _str_padded_copy(CK_UTF8CHAR_PTR dst, size_t dst_len, const CK_UTF8CHAR_PTR src, size_t src_len) { memset(dst, ' ', dst_len); memcpy(dst, src, src_len); } twist utils_hash_pass(const twist pin, const twist salt); twist aes256_gcm_decrypt(const twist key, const twist objauth); twist aes256_gcm_encrypt(twist keybin, twist plaintextbin); /** * Retrieves the size in bytes of a hash algorithm * @param mttype * The mechanism type. * @return * The size in bytes or 0 if unknown. */ size_t utils_get_halg_size(CK_MECHANISM_TYPE mttype); /** * * @param size * @return */ twist utils_get_rand_hex_str(size_t size); CK_RV utils_setup_new_object_auth(twist newpin, twist *newauthhex, twist *newsalthex); static inline CK_RV utils_new_random_object_auth(twist *newauthhex) { return utils_setup_new_object_auth(NULL, newauthhex, NULL); } CK_RV utils_ctx_unwrap_objauth(twist wrappingkey, twist objauth, twist *unwrapped_auth); CK_RV utils_ctx_wrap_objauth(twist wrappingkey, twist objauth, twist *wrapped_auth); /** * Given an attribute of CKA_EC_PARAMS returns the nid value. * @param ecparams * The DER X9.62 parameters value * @param nid * The nid to set * @return * CKR_OK on success. */ CK_RV ec_params_to_nid(CK_ATTRIBUTE_PTR ecparams, int *nid); /** * Removes a PKCS7 padding on a 16 byte block. * @param in * The PKCS5 padded input. * @param inlen * The length of the input, should be multiples of block size. Set on successful * calls to the size of the data with the padding stripped. * @param out * The unpadded output. * @param outlen * Input: The length of the output buffer. * Output: The length of the unpadded buffer. * @return * CKR_OK on success. */ CK_RV remove_pkcs7_pad(CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); /** * Applies a PKCS7 padding to a blocksize of 16. * @param in * The buffer to pad to AES blocksize of 16. * @param inlen * The length of the input buffer. * @param out * The padded output. * @param outlen * Input: The length of the output buffer. * Output: The length of the padded buffer. * @return * Returns CKR_OK on success. */ CK_RV apply_pkcs7_pad(const CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); /** * Given a git describe string returns a major and minor package version or 0's for both * if its a development build. The patch level is ignored. * * Example strings and returns: * "1" --> (1, 0) * "1.1" --> (1, 1) * "1.2.1" --> (1, 2) * "1.6.0-42-gb462a23778ea-dirty: --> (0, 0) * * @param buf * The string to parse. * @param major * The major version of the library. * @param minor * The minor version of the library. */ void parse_lib_version(const char *buf, CK_BYTE *major, CK_BYTE *minor); /* * Work around bugs in clang not including the builtins, and when asan is enabled * ending up in a nightmare of having both the ASAN and BUILTINS defined and linked * properly. * See: * - https://bugs.llvm.org/show_bug.cgi?id=16404 * - https://lists.gnu.org/archive/html/bug-gnulib/2019-08/msg00076.html */ #ifdef DISABLE_OVERFLOW_BUILTINS #include #include #if defined(NDEBUG) #error "Emulated overflow support is not evaluated for non-debug release use." \ "Fix toolchain and use overflow builtins. To compile configure with --debug" #endif #ifndef WORDS_BIGENDIAN static void be_to_host(unsigned char *from, unsigned char *to, size_t len) { #ifndef WORDS_BIGENDIAN size_t i; for (i=0; i < len; i++) { to[len -i -1] = from[i]; } #else memcpy(from, to, len); #endif } #endif typedef int (*arithmetic_fn)(BIGNUM *a, BN_ULONG w); static bool _do_safe_arithmetic(void *r, BN_ULONG a, BN_ULONG b, size_t size_of_r, arithmetic_fn fn) { unsigned char bufr[sizeof(size_t)] = { 0 }; assert(sizeof(bufr) >= size_of_r); BIGNUM *bna = BN_new(); assert(bna); int rc = BN_add_word(bna, a); assert(rc); rc = fn(bna, b); assert(rc); int num_of_bytes = BN_num_bytes(bna); if (num_of_bytes > size_of_r) { BN_free(bna); return true; } if (!num_of_bytes) { BN_free(bna); memset(r, 0, size_of_r); return false; } /* BN_bn2binpad would be nice, but OSSL 1.0.2 is lacking this */ assert(num_of_bytes <= size_of_r); off_t offset = size_of_r - num_of_bytes; rc = BN_bn2bin(bna, &bufr[offset]); BN_free(bna); assert(rc); be_to_host(bufr, r, size_of_r); return false; } #define _safe_add(r, a, b) _do_safe_arithmetic(&r, a, b, \ sizeof(r), BN_add_word) #define _safe_adde(r, a) _do_safe_arithmetic(&r, r, a, \ sizeof(r), BN_add_word) #define _safe_mul(r, a, b) _do_safe_arithmetic(&r, a, b, \ sizeof(r), BN_mul_word) #define _safe_mule(r, a) _do_safe_arithmetic(&r, r, a, \ sizeof(r), BN_mul_word) #else #define set_safe_rc(x) /* NOP */ #define _safe_add(r, a, b) __builtin_add_overflow(a, b, &r) #define _safe_adde(r, a) __builtin_add_overflow(a, r, &r) #define _safe_mul(r, a, b) __builtin_mul_overflow(a, b, &r) #define _safe_mule(r, a) __builtin_mul_overflow(a, r, &r) #endif #define safe_add(r, a, b) do { if (_safe_add(r, a, b)) { LOGE("overflow"); abort(); } } while(0) #define safe_adde(r, a) do { if (_safe_adde(r, a)) { LOGE("overflow"); abort(); } } while(0) #define safe_mul(r, a, b) do { if (_safe_mul(r, a, b)) { LOGE("overflow"); abort(); } } while(0) #define safe_mule(r, a) do { if (_safe_mule(r, a)) { LOGE("overflow"); abort(); } } while(0) #endif /* SRC_PKCS11_UTILS_H_ */ tpm2-pkcs11-1.7.0/src/lib/object.h0000664000175000017500000001035514114240163013400 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_OBJECT_H_ #define SRC_PKCS11_OBJECT_H_ #include #include #include "attrs.h" #include "debug.h" #include "list.h" #include "pkcs11.h" #include "twist.h" typedef struct session_ctx session_ctx; typedef struct pobject pobject; typedef struct tobject tobject; struct tobject { unsigned active; /** number of active users */ unsigned id; /** external handle */ CK_OBJECT_HANDLE obj_handle; /** application visible handle */ /* * these all exist in the attribute array, but we'll keep some * twist copies of them handy for convenience. */ twist pub; /** public tpm data */ twist priv; /** private tpm data */ twist objauth; /** wrapped object auth value */ attr_list *attrs; /** object attributes */ list l; /** list pointer for "listifying" tobjects */ twist unsealed_auth; /** unwrapped auth value */ uint32_t tpm_handle; /** loaded tpm handle */ bool is_authenticated; /** true if a context specific login has authenticated use of the object */ }; tobject *tobject_new(void); /** * Sets the internal private and public TPM data blob fields via deep copy. * Thus the caller is still responsible to free the priv and pub parameters. * @param tobj * The tobject to set. * @param pub * The public portion, cannot be NULL. * @param priv * The private portion, may be NULL. * @return * CKR_OK on success or CKR_HOST_MEMORY. */ CK_RV tobject_set_blob_data(tobject *tobj, twist pub, twist priv); /** * Sets the internal TPm auth fields via deep copy. * Thus the caller is still responsible to free the authbin and pub wrappedauthhex. * @param tobj * The tobject to set. * @param authbin * The auth in plaintext binary form. * @param wrappedauthhex * The wrapping key wrapped auth. * @return * CKR_OK on success or CKR_HOST_MEMORY. */ CK_RV tobject_set_auth(tobject *tobj, twist authbin, twist wrappedauthhex); void tobject_set_handle(tobject *tobj, uint32_t handle); void tobject_set_id(tobject *tobj, unsigned id); void tobject_free(tobject *tobj); CK_RV object_find_init(session_ctx *ctx, CK_ATTRIBUTE_PTR templ, unsigned long count); CK_RV object_find(session_ctx *ctx, CK_OBJECT_HANDLE *object, unsigned long max_object_count, unsigned long *object_count); CK_RV object_find_final(session_ctx *ctx); CK_RV object_get_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, unsigned long count); CK_RV object_set_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, unsigned long count); CK_ATTRIBUTE_PTR tobject_get_attribute_full(tobject *tobj, CK_ATTRIBUTE_PTR attr); CK_RV tobject_get_min_buf_size(tobject *tobj, CK_MECHANISM_PTR mech, size_t *maxsize); CK_RV object_mech_is_supported(tobject *tobj, CK_MECHANISM_PTR mech); /** * Gets the attributes for a tobject. If it's a link to a tobject, follows it * and retrieves the public attributes, as the link object is the public portion. * Else, it's not the link object and retrieves the private attributes. * @param tobj * The tobject to fetch the attributes from. * @return * The attribute array. */ attr_list *tobject_get_attrs(tobject *tobj); CK_RV _tobject_user_decrement(tobject *tobj, const char *filename, int lineno); CK_RV _tobject_user_increment(tobject *tobj, const char *filename, int lineno); /** * Marks a tobject no longer being used by an operation. * * @param tobj * The tobject to retire. * @return * CKR_OK on success, CKR_GENERAL_ERROR if not active. */ #define tobject_user_decrement(tobj) _tobject_user_decrement(tobj, __FILE__, __LINE__) /** * Marks a tobject as in use by an operation. * * @param tobj * The tobject to mark as in use. * @return * CKR_OK on success, CKR_GENERAL_ERROR if not active. */ #define tobject_user_increment(tobj) _tobject_user_increment(tobj, __FILE__, __LINE__) CK_RV object_destroy(session_ctx *ctx, CK_OBJECT_HANDLE object); CK_RV object_create(session_ctx *ctx, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object); WEAK CK_RV object_init_from_attrs(tobject *tobj); #ifdef TESTING tobject *__real_tobject_new(void); void pobject_free(pobject *pobj); #endif #endif /* SRC_PKCS11_OBJECT_H_ */ tpm2-pkcs11-1.7.0/src/lib/token.c0000664000175000017500000003713014114240163013245 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "list.h" #include "mech.h" #include "object.h" #include "pkcs11.h" #include "session.h" #include "session_table.h" #include "slot.h" #include "token.h" #include "utils.h" static const CK_UTF8CHAR TPM2_TOKEN_SERIAL_NUMBER[] = "0000000000000000"; void pobject_config_free(pobject_config *c) { if (c->is_transient) { free(c->template_name); } else { twist_free(c->blob); } memset(c, 0, sizeof(*c)); } DEBUG_VISIBILITY void pobject_free(pobject *pobj) { twist_free(pobj->objauth); pobject_config_free(&pobj->config); memset(pobj, 0, sizeof(*pobj)); } WEAK CK_RV token_min_init(token *t) { /* * Initialize the per-token session table */ CK_RV rv = session_table_new(&t->s_table); if (rv != CKR_OK) { LOGE("Could not initialize session table"); return rv; } /* * Initialize the per-token tpm context */ rv = backend_ctx_new(t); if (rv != CKR_OK) { LOGE("Could not initialize tpm ctx: 0x%lx", rv); return rv; } /* * Initialize the per-token mechanism details table */ rv = mdetail_new(t->tctx, &t->mdtl, t->config.pss_sigs_good); if (rv != CKR_OK) { LOGE("Could not initialize tpm mdetails: 0x%lx", rv); return rv; } rv = mutex_create(&t->mutex); if (rv != CKR_OK) { LOGE("Could not initialize mutex: 0x%lx", rv); } return rv; } void token_reset(token *t) { /* forget the primary object so it can be reinitialized as needed */ pobject_free(&t->pobject); backend_ctx_reset(t); /* * the rest of the state can live so we don't need to free/realloc it * Beware of who holds the mutex! */ } void token_free_list(token **tok_ptr, size_t *ptr_len) { size_t len = *ptr_len; token *t = *tok_ptr; *tok_ptr = NULL; *ptr_len = 0; if (!t) { return; } size_t i; for (i=0; i < len; i++) { token_free(&t[i]); } memset(t, 0, sizeof(*t) * len); free(t); } WEAK CK_RV token_add_tobject_last(token *tok, tobject *t) { if (!tok->tobjects.tail) { t->l.prev = t->l.next = NULL; tok->tobjects.tail = tok->tobjects.head = t; t->obj_handle = 1; return CKR_OK; } CK_OBJECT_HANDLE handle = tok->tobjects.tail->obj_handle; if (handle == ~((CK_OBJECT_HANDLE)0)) { LOGE("Too many objects for token, id: %u, label: %*s", tok->id, (int)sizeof(tok->label), tok->label); return CKR_OK; } handle++; t->obj_handle = handle; tok->tobjects.tail->l.next = &t->l; t->l.prev = &tok->tobjects.tail->l; tok->tobjects.tail = t; return CKR_OK; } CK_RV token_add_tobject(token *tok, tobject *t) { if (!tok->tobjects.head) { t->l.prev = t->l.next = NULL; tok->tobjects.tail = tok->tobjects.head = t; t->obj_handle = 1; return CKR_OK; } /* minimum potential handle to add */ CK_OBJECT_HANDLE index = 2; list *cur = &tok->tobjects.head->l; while(cur) { if (index == 0) { LOGE("Rollover, too many objects for token, id: %u, label: %*s", tok->id, (int)sizeof(tok->label), tok->label); return CKR_OK; } tobject *c = list_entry(cur, tobject, l); /* end of list, just add it updating the tail pointer */ if (!c->l.next) { t->obj_handle = index; t->l.prev = cur; cur->next = &t->l; tok->tobjects.tail = t; return CKR_OK; } tobject *n = list_entry(c->l.next, tobject, l); /* gap */ if (n->obj_handle - c->obj_handle > 1) { assert(index < n->obj_handle && index > c->obj_handle); t->obj_handle = index; /* new object should point to next and previous */ t->l.next = &n->l; t->l.prev = cur; /* existing object ahead should point back at new object */ n->l.prev = &t->l; /* existing object behind should point forward at new object */ c->l.next = &t->l; return CKR_OK; } index++; cur = cur->next; } LOGE("Could not insert tobject into token"); return CKR_GENERAL_ERROR; } CK_RV token_find_tobject(token *tok, CK_OBJECT_HANDLE handle, tobject **tobj) { assert(tok); assert(tobj); if (!tok->tobjects.head) { return CKR_KEY_HANDLE_INVALID; } list *cur = &tok->tobjects.head->l; while(cur) { tobject *c = list_entry(cur, tobject, l); if (c->obj_handle == handle) { *tobj = c; return CKR_OK; } cur = cur->next; } return CKR_KEY_HANDLE_INVALID; } void token_rm_tobject(token *tok, tobject *t) { assert(tok->tobjects.head); assert(tok->tobjects.tail); /* only item in the list */ if (t == tok->tobjects.tail && t == tok->tobjects.head) { /* just empty the list */ tok->tobjects.head = tok->tobjects.tail = NULL; } else if (t == tok->tobjects.head) { tok->tobjects.head = tok->tobjects.head->l.next ? list_entry(tok->tobjects.head->l.next, tobject, l) : NULL; } else if (t == tok->tobjects.tail) { /* * remove the tail by setting the tail equal to the previous list object * and setting the new tails next pointer to null as it's pointing to the * old tail location. */ tok->tobjects.tail = list_entry(tok->tobjects.tail->l.prev, tobject, l); tok->tobjects.tail->l.next = NULL; } else { /* * the previous objects next pointer should point past * the removed object by pointing to it's next */ t->l.prev->next = t->l.next; t->l.next->prev = t->l.prev; } t->l.next = t->l.prev = NULL; } void token_config_free(token_config *c) { if (!c) { return; } free(c->tcti); memset(c, 0, sizeof(*c)); } void token_free(token *t) { /* * for each session remove them */ session_table_free_ctx_all(t); session_table_free(t->s_table); t->s_table = NULL; if (t->pobject.config.is_transient) { tpm_flushcontext(t->tctx, t->pobject.handle); } pobject_free(&t->pobject); if (t->tobjects.head) { list *cur = &t->tobjects.head->l; while(cur) { tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; tobject_free(tobj); } } t->tobjects.head = t->tobjects.tail = NULL; backend_ctx_free(t); t->tctx = NULL; mutex_destroy(t->mutex); t->mutex = NULL; token_config_free(&t->config); mdetail_free(&t->mdtl); } CK_RV token_get_info (token *t, CK_TOKEN_INFO *info) { check_pointer(t); check_pointer(info); int rval; time_t rawtime; struct tm tminfo; memset(info, 0, sizeof(*info)); rval = tpm_get_token_info(t->tctx, info); if (rval != CKR_OK) { return CKR_GENERAL_ERROR; } // Support Flags info->flags = CKF_RNG; if (!t->config.empty_user_pin) { info->flags |= CKF_LOGIN_REQUIRED; } if (t->config.is_initialized) { info->flags |= CKF_TOKEN_INITIALIZED; info->flags |= CKF_USER_PIN_INITIALIZED; } // Identification str_padded_copy(info->label, t->label); str_padded_copy(info->serialNumber, TPM2_TOKEN_SERIAL_NUMBER); // Memory: TODO not sure what memory values should go here, the platform? info->ulFreePrivateMemory = ~0; info->ulFreePublicMemory = ~0; info->ulTotalPrivateMemory = ~0; info->ulTotalPublicMemory = ~0; // Maximums and Minimums info->ulMaxPinLen = 128; info->ulMinPinLen = 0; info->ulMaxSessionCount = MAX_NUM_OF_SESSIONS; info->ulMaxRwSessionCount = MAX_NUM_OF_SESSIONS; // Session session_table_get_cnt(t->s_table, &info->ulSessionCount, &info->ulRwSessionCount, NULL); // Time time (&rawtime); gmtime_r(&rawtime, &tminfo); strftime ((char *)info->utcTime, sizeof(info->utcTime), "%Y%m%d%H%M%S", &tminfo); // The last two bytes must be '0', not NULL/'\0' terminated. info->utcTime[14] = '0'; info->utcTime[15] = '0'; return CKR_OK; } CK_RV token_init(token *t, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label) { check_pointer(pin); check_pointer(label); CK_RV rv = CKR_GENERAL_ERROR; twist newauth = NULL; twist newsalthex = NULL; /* * validate that label doesn't have embedded NULL bytes */ void *found = memchr(label, '\0', sizeof(t->label)); if (found) { LOGE("Label has embedded 0 bytes"); return CKR_ARGUMENTS_BAD; } if (t->config.is_initialized) { LOGE("Token already initialized"); return CKR_ARGUMENTS_BAD; } twist sopin = twistbin_new(pin, pin_len); if (!sopin) { LOGE("oom"); return CKR_HOST_MEMORY; } twist hexwrappingkey = utils_get_rand_hex_str(32); if (!sopin) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } rv = utils_setup_new_object_auth(sopin, &newauth, &newsalthex); if (rv != CKR_OK) { goto error; } memcpy(t->label, label, sizeof(t->label)); rv = backend_create_token_seal(t, hexwrappingkey, newauth, newsalthex); if (rv != CKR_OK) { LOGE("Could not create new token"); goto error; } /* Ownership of newsalthex is transferred in the previous call */ newsalthex = NULL; rv = slot_add_uninit_token(); if (rv != CKR_OK) { LOGW("Could not add uninitialized token"); } rv = CKR_OK; out: twist_free(sopin); twist_free(newauth); twist_free(newsalthex); twist_free(hexwrappingkey); return rv; error: token_reset(t); goto out; } bool token_is_any_user_logged_in(token *tok) { return tok->login_state != token_no_one_logged_in; } bool token_is_user_logged_in(token *tok) { return tok->login_state & token_user_logged_in; } bool token_is_so_logged_in(token *tok) { return tok->login_state & token_so_logged_in; } void token_lock(token *t) { mutex_lock_fatal(t->mutex); } void token_unlock(token *t) { mutex_unlock_fatal(t->mutex); } CK_RV token_setpin(token *tok, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldlen, CK_UTF8CHAR_PTR newpin, CK_ULONG newlen) { CK_RV rv = CKR_GENERAL_ERROR; /* pin data */ twist toldpin = NULL; twist tnewpin = NULL; bool is_so = token_is_so_logged_in(tok); toldpin = twistbin_new(oldpin, oldlen); if (!toldpin) { rv = CKR_HOST_MEMORY; goto out; } tnewpin = twistbin_new(newpin, newlen); if (!tnewpin) { rv = CKR_HOST_MEMORY; goto out; } /* Clear empty-user-pin if a new user PIN is being set */ if (!is_so && newlen && tok->config.empty_user_pin) { tok->config.empty_user_pin = false; rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGE("Clearing empty user PIN state"); goto out; } } rv = backend_token_changeauth(tok, !is_so, toldpin, tnewpin); if (rv != CKR_OK) { LOGE("Changing token auth"); goto out; } if (!is_so && !newlen && !tok->config.empty_user_pin) { tok->config.empty_user_pin = true; rv = backend_update_token_config(tok); if (rv != CKR_OK) { /* Failing to set empty-user-pin is not fatal, as the PIN changed */ LOGW("Setting empty user PIN state failed"); } } out: twist_free(toldpin); twist_free(tnewpin); return rv; } CK_RV token_initpin(token *tok, CK_UTF8CHAR_PTR newpin, CK_ULONG newlen) { CK_RV rv = CKR_GENERAL_ERROR; twist tnewpin = NULL; twist newkeysalthex = NULL; twist newsalthex = NULL; twist newauthhex = NULL; twist sealdata = NULL; tnewpin = twistbin_new(newpin, newlen); if (!tnewpin) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } /* generate a new auth */ rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } /* we store the seal data in hex form, but it's in binary form in memory, so convert it */ sealdata = twist_hexlify(tok->wrappingkey); if (!sealdata) { LOGE("oom"); goto out; } /* Clear empty-user-pin if a new user PIN is being set */ if (newlen && tok->config.empty_user_pin) { tok->config.empty_user_pin = false; rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGE("Clearing empty user PIN state"); goto out; } } rv = backend_init_user(tok, sealdata, newauthhex, newsalthex); if (rv != CKR_OK) { goto out; } if (!newlen && !tok->config.empty_user_pin) { tok->config.empty_user_pin = true; rv = backend_update_token_config(tok); if (rv != CKR_OK) { /* Failing to set empty-user-pin is not fatal, as the user was initialized */ LOGW("Setting empty user PIN state failed"); } } rv = CKR_OK; out: /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newkeysalthex); twist_free(newsalthex); } twist_free(sealdata); twist_free(newauthhex); twist_free(tnewpin); return rv; } CK_RV token_load_object(token *tok, CK_OBJECT_HANDLE key, tobject **loaded_tobj) { CK_RV rv; tpm_ctx *tpm = tok->tctx; /* Unseal the wrapping key, if the user PIN is empty */ if (!tok->wrappingkey && tok->config.empty_user_pin) { twist tpin = twistbin_new("", 0); if (!tpin) { return CKR_HOST_MEMORY; } rv = backend_token_unseal_wrapping_key(tok, true, tpin); twist_free(tpin); if (rv != CKR_OK) { LOGE("Error unsealing wrapping key"); return rv; } } rv = token_find_tobject(tok, key, loaded_tobj); if (rv != CKR_OK) { return rv; } tobject *tobj = *loaded_tobj; rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } /* this might not be the best place for this check */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("All objects expected to have CKA_CLASS, missing" " for tobj id: %u", tobj->id); return CKR_GENERAL_ERROR; } CK_OBJECT_CLASS v; rv = attr_CK_OBJECT_CLASS(a, &v); if (rv != CKR_OK) { return rv; } if (v != CKO_PRIVATE_KEY && v != CKO_PUBLIC_KEY && v != CKO_SECRET_KEY) { LOGE("Cannot use tobj id %u in a crypto operation", tobj->id); return CKR_KEY_HANDLE_INVALID; } /* * The object may already be loaded by the TPM or may just be * a public key object not-resident in the TPM. */ if (tobj->tpm_handle || !tobj->pub) { *loaded_tobj = tobj; return CKR_OK; } rv = tpm_loadobj( tpm, tok->pobject.handle, tok->pobject.objauth, tobj->pub, tobj->priv, &tobj->tpm_handle); if (rv != CKR_OK) { return rv; } rv = utils_ctx_unwrap_objauth(tok->wrappingkey, tobj->objauth, &tobj->unsealed_auth); if (rv != CKR_OK) { LOGE("Error unwrapping tertiary object auth"); return rv; } *loaded_tobj = tobj; return CKR_OK; } tpm2-pkcs11-1.7.0/src/lib/encrypt.h0000644000175000017500000000757313754763565013655 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_ENCRYPT_H_ #define SRC_LIB_ENCRYPT_H_ #include #include "mech.h" #include "pkcs11.h" #include "tpm.h" #include "twist.h" typedef struct token token; typedef struct sw_encrypt_data sw_encrypt_data; typedef struct encrypt_op_data encrypt_op_data; typedef union crypto_op_data crypto_op_data; union crypto_op_data{ tpm_op_data *tpm_opdata; sw_encrypt_data *sw_enc_data; }; struct encrypt_op_data { bool use_sw; crypto_op_data cryptopdata; }; struct sw_encrypt_data { int padding; twist label; const EVP_MD *md; EVP_PKEY *key; }; encrypt_op_data *encrypt_op_data_new(void); void encrypt_op_data_free(encrypt_op_data **opdata); CK_RV sw_encrypt_data_init(mdetail *mdtl, CK_MECHANISM *mechanism, tobject *tobj, sw_encrypt_data **enc_data); CK_RV encrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); static inline CK_RV encrypt_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return encrypt_init_op(ctx, NULL, mechanism, key); } CK_RV encrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len); static inline CK_RV encrypt_update (session_ctx *ctx, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len) { return encrypt_update_op (ctx, NULL, part, part_len, encrypted_part, encrypted_part_len); } CK_RV encrypt_final_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len); static inline CK_RV encrypt_final (session_ctx *ctx, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len) { return encrypt_final_op (ctx, NULL, last_encrypted_part, last_encrypted_part_len); } CK_RV decrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); static inline CK_RV decrypt_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return decrypt_init_op (ctx, NULL, mechanism, key); } CK_RV decrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len); static inline CK_RV decrypt_update (session_ctx *ctx, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len) { return decrypt_update_op (ctx, NULL, part, part_len, encrypted_part, encrypted_part_len); } CK_RV decrypt_final_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *last_part, unsigned long *last_part_len); static inline CK_RV decrypt_final (session_ctx *ctx, unsigned char *last_part, unsigned long *last_part_len) { return decrypt_final_op (ctx, NULL, last_part, last_part_len); } CK_RV decrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len); static inline CK_RV decrypt_oneshot (session_ctx *ctx, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len) { return decrypt_oneshot_op (ctx, NULL, encrypted_data, encrypted_data_len, data, data_len); } CK_RV encrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len); static inline CK_RV encrypt_oneshot (session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len) { return encrypt_oneshot_op (ctx, NULL, data, data_len, encrypted_data, encrypted_data_len); } #endif /* SRC_LIB_ENCRYPT_H_ */ tpm2-pkcs11-1.7.0/src/lib/ssl_util.h0000664000175000017500000000475314116451527014007 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_SSL_UTIL_H_ #define SRC_LIB_SSL_UTIL_H_ #include #include #include #include #include #include #include "pkcs11.h" #include "log.h" #include "object.h" #include "twist.h" #if (OPENSSL_VERSION_NUMBER < 0x1010000fL && !defined(LIBRESSL_VERSION_NUMBER)) || (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L) /* OpenSSL 1.1.0 */ #define LIB_TPM2_OPENSSL_OPENSSL_PRE11 /* LibreSSL does not appear to have evperr.h, so their is no need to define this otherwise */ #elif (OPENSSL_VERSION_NUMBER >= 0x1010100fL) /* OpenSSL 1.1.1 */ #define LIB_TPM2_OPENSSL_OPENSSL_POST111 0x1010100f #endif /* OpenSSL Backwards Compat APIs */ #if defined(LIB_TPM2_OPENSSL_OPENSSL_PRE11) #include size_t EC_POINT_point2buf(const EC_GROUP *group, const EC_POINT *point, point_conversion_form_t form, unsigned char **pbuf, BN_CTX *ctx); const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x); int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d); int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s); EC_KEY *EVP_PKEY_get0_EC_KEY(EVP_PKEY *pkey); static inline void *OPENSSL_memdup(const void *dup, size_t l) { void *p = OPENSSL_malloc(l); if (!p) { return NULL; } memcpy(p, dup, l); return p; } #endif #ifndef RSA_PSS_SALTLEN_DIGEST #define RSA_PSS_SALTLEN_DIGEST -1 #endif /* Utility APIs */ #define SSL_UTIL_LOGE(m) LOGE("%s: %s", m, ERR_error_string(ERR_get_error(), NULL)); CK_RV ssl_util_tobject_to_evp(EVP_PKEY **outpkey, tobject *obj); CK_RV ssl_util_encrypt(EVP_PKEY *pkey, int padding, twist label, const EVP_MD *md, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen); CK_RV ssl_util_sig_verify(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len); CK_RV ssl_util_verify_recover(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len); typedef int (*fn_EVP_PKEY_init)(EVP_PKEY_CTX *ctx); CK_RV ssl_util_setup_evp_pkey_ctx(EVP_PKEY *pkey, int padding, const EVP_MD *md, fn_EVP_PKEY_init init_fn, EVP_PKEY_CTX **outpkey_ctx); #endif /* SRC_LIB_SSL_UTIL_H_ */ tpm2-pkcs11-1.7.0/src/lib/backend_fapi.h0000644000175000017500000000215013754763565014541 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_FAPI_H_ #define SRC_LIB_BACKEND_FAPI_H_ #include "config.h" #include "pkcs11.h" #include "twist.h" #include "token.h" #ifndef NDEBUG __attribute__((weak)) #endif CK_RV backend_fapi_init(void); CK_RV backend_fapi_destroy(void); CK_RV backend_fapi_ctx_new(token *t); void backend_fapi_ctx_free(token *t); CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_fapi_add_tokens(token *tok, size_t *len); CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_fapi_add_object(token *t, tobject *tobj); CK_RV backend_fapi_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrlist); CK_RV backend_fapi_rm_tobject(token *tok, tobject *tobj); CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_FAPI_H_ */ tpm2-pkcs11-1.7.0/src/lib/parser.h0000644000175000017500000000105413754763565013451 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_PARSER_H_ #define SRC_LIB_PARSER_H_ #include #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" WEAK bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs); bool parse_token_config_from_string(const unsigned char *yaml, size_t size, token_config *config); bool parse_pobject_config_from_string(const unsigned char *yaml, size_t size, pobject_config *config); #endif /* SRC_LIB_PARSER_H_ */ tpm2-pkcs11-1.7.0/src/lib/checks.h0000644000175000017500000000076313754763565013423 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_CHECKS_H_ #define SRC_PKCS11_CHECKS_H_ #include "pkcs11.h" #include "general.h" #include "slot.h" #define check_num(ptr) if (!ptr) { return CKR_ARGUMENTS_BAD; } #define check_pointer(ptr) if (!ptr) { return CKR_ARGUMENTS_BAD; } #define check_slot_id(slot_id, tok, rv) \ do { \ tok = slot_get_token(slot_id); \ if (!tok) { \ return rv; \ }\ } while (0) #endif /* SRC_PKCS11_CHECKS_H_ */ tpm2-pkcs11-1.7.0/src/lib/backend_esysdb.h0000664000175000017500000000221414114236775015103 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_ESYSDB_H_ #define SRC_LIB_BACKEND_ESYSDB_H_ #include "pkcs11.h" #include "twist.h" #include "token.h" CK_RV backend_esysdb_init(void); CK_RV backend_esysdb_destroy(void); CK_RV backend_esysdb_ctx_new(token *t); void backend_esysdb_ctx_free(token *t); void backend_esysdb_ctx_reset(token *t); CK_RV backend_esysdb_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_esysdb_get_tokens(token *tok, size_t *len); CK_RV backend_esysdb_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_esysdb_add_object(token *t, tobject *tobj); CK_RV backend_esysdb_update_token_config (token *tok); CK_RV backend_esysdb_update_tobject_attrs(tobject *tobj, attr_list *attrs); CK_RV backend_esysdb_rm_tobject(tobject *tobj); CK_RV backend_esysdb_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_esysdb_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_ESYSDB_H_ */ tpm2-pkcs11-1.7.0/src/lib/tpm.c0000664000175000017500000036571414116465107012752 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ /* config can control how other headers behave, include first */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "attrs.h" #include "checks.h" #include "digest.h" #include "encrypt.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "ssl_util.h" #include "tpm.h" #ifndef ESAPI_MANAGE_FLAGS #define ESAPI_MANAGE_FLAGS 0 #endif #define DEFAULT_SEAL_TEMPLATE { \ .size = 0, \ .publicArea = { \ .type = TPM2_ALG_KEYEDHASH, \ .nameAlg = TPM2_ALG_SHA256, \ .objectAttributes = ( \ TPMA_OBJECT_USERWITHAUTH | \ TPMA_OBJECT_FIXEDTPM | \ TPMA_OBJECT_FIXEDPARENT \ ), \ .authPolicy = { \ .size = 0, \ }, \ .parameters.keyedHashDetail = { \ .scheme = { \ .scheme = TPM2_ALG_NULL, \ .details = { \ .hmac = { \ .hashAlg = TPM2_ALG_SHA256 \ } \ } \ } \ }, \ .unique.keyedHash = { \ .size = 0, \ .buffer = {}, \ }, \ } \ } /* * The provisioning guidance states that this 0x81000001 should be the SRK * See: * - https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf */ #define DEFAULT_SRK_HANDLE 0x81000001 /* Return code when TPM is in DA Lockout mode */ static const TPM2B_PUBLIC rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_DECRYPT | TPMA_OBJECT_SIGN_ENCRYPT, .authPolicy = { .size = 0, }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_NULL, }, .scheme = { .scheme = TPM2_ALG_NULL }, .keyBits = 2048, .exponent = 0, }, .unique.rsa = { .size = 0, }, }, }; static const TPM2B_PUBLIC ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_SIGN_ENCRYPT, .authPolicy = { .size = 0, }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_NULL, .keyBits.aes = 0, .mode.aes = 0, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = { // {.hashAlg = TPM2_ALG_SHA1} } }, .curveID = TPM2_ECC_NIST_P256, .kdf = {.scheme = TPM2_ALG_NULL,.details = {} } }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}} }, }, }; /** * Maps 4-byte manufacturer identifier to manufacturer name. */ static const char *TPM2_MANUFACTURER_MAP[][2] = { {"ATML", "Atmel"}, {"INTC", "Intel"}, {"IFX ", "Infineon"}, {"IBM ", "IBM"}, {"NTC ", "Nuvoton"}, {"STM ", "STMicro"} }; struct tpm_ctx { TSS2_TCTI_CONTEXT *tcti_ctx; ESYS_CONTEXT *esys_ctx; bool esapi_manage_session_flags; ESYS_TR hmac_session; TPMA_SESSION old_flags; TPMA_SESSION original_flags; TPMS_CAPABILITY_DATA *tpms_fixed_property_cache; TPMS_CAPABILITY_DATA *tpms_alg_cache; TPMS_CAPABILITY_DATA *tpms_cc_cache; bool did_check_for_createloaded; bool use_createloaded; bool did_check_for_encdec2; bool use_encdec2; }; #define TPM2B_INIT(xsize) { .size = xsize, } #define TPM2B_EMPTY_INIT TPM2B_INIT(0) struct tpm_op_data { tpm_ctx *ctx; tobject *tobj; CK_KEY_TYPE op_type; mdetail *mdtl; CK_MECHANISM mech; union { struct { TPMT_SIG_SCHEME sig; TPMT_RSA_DECRYPT raw; TPM2B_DATA label; } rsa; struct { TPMT_SIG_SCHEME sig; } hmac; struct { TPMI_ALG_SYM_MODE mode; TPM2B_IV iv; struct { BIGNUM *counter; } ctr; struct { CK_ULONG len; CK_BYTE data[16]; } prev; } sym; struct { TPMT_SIG_SCHEME sig; } ecc; }; }; static inline tpm_op_data *tpm_opdata_new(mdetail *mdtl, CK_MECHANISM_PTR mech) { tpm_op_data *opdata = (tpm_op_data *)calloc(1, sizeof(tpm_op_data)); if (opdata) { opdata->mdtl = mdtl; opdata->mech = *mech; } return opdata; } static ESYS_CONTEXT* esys_ctx_init(TSS2_TCTI_CONTEXT *tcti_ctx) { ESYS_CONTEXT *esys_ctx = NULL; TSS2_RC rval = Esys_Initialize(&esys_ctx, tcti_ctx, NULL); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Initialize: 0x%x", rval); return NULL; } return esys_ctx; } static void flags_turndown(tpm_ctx *ctx, TPMA_SESSION flags) { if (ctx->esapi_manage_session_flags) { return; } TSS2_RC rc = Esys_TRSess_GetAttributes(ctx->esys_ctx, ctx->hmac_session, &ctx->old_flags); assert(rc == TPM2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); return; } assert(ctx->old_flags == ctx->original_flags); TPMA_SESSION new_flags = (ctx->old_flags & (~flags)); rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, ctx->hmac_session, new_flags, 0xff); assert(rc == TSS2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); } } static void flags_restore(tpm_ctx *ctx) { if (ctx->esapi_manage_session_flags) { return; } assert(ctx->old_flags == ctx->original_flags); TSS2_RC rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, ctx->hmac_session, ctx->old_flags, 0xff); assert(rc == TSS2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); } } #define SAFE_ESYS_FREE(ptr) do { Esys_Free(ptr); ctx->tpms_alg_cache = NULL; } while (0) void tpm_ctx_free(tpm_ctx *ctx) { if (!ctx) { return; } /* free the per-tpm caches of properties */ SAFE_ESYS_FREE(ctx->tpms_alg_cache); SAFE_ESYS_FREE(ctx->tpms_cc_cache); SAFE_ESYS_FREE(ctx->tpms_fixed_property_cache); Esys_Finalize(&ctx->esys_ctx); Tss2_TctiLdr_Finalize(&ctx->tcti_ctx); free(ctx); } static bool set_esys_auth(ESYS_CONTEXT *esys_ctx, ESYS_TR handle, twist auth) { TPM2B_AUTH tpm_auth = TPM2B_EMPTY_INIT; if (auth) { size_t auth_len = twist_len(auth); if (auth_len > sizeof(tpm_auth.buffer)) { LOGE("Auth value too large, got %zu expected < %zu", auth_len, sizeof(tpm_auth.buffer)); return false; } tpm_auth.size = auth_len; memcpy(tpm_auth.buffer, auth, auth_len); } TSS2_RC rval = Esys_TR_SetAuth(esys_ctx, handle, &tpm_auth); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_SetAuth: 0x%x:", rval); return false; } return true; } bool tpm_session_active(tpm_ctx *ctx) { return (!!ctx->hmac_session); } CK_RV tpm_session_start(tpm_ctx *ctx, twist auth, uint32_t handle) { assert(!ctx->hmac_session); bool res = set_esys_auth(ctx->esys_ctx, handle, auth); if (!res) { return CKR_GENERAL_ERROR; } TPMT_SYM_DEF symmetric = { .algorithm = TPM2_ALG_AES, .keyBits = { .aes = 128 }, .mode = { .aes = TPM2_ALG_CFB } }; TPMA_SESSION session_attrs = TPMA_SESSION_CONTINUESESSION | TPMA_SESSION_DECRYPT | TPMA_SESSION_ENCRYPT; ESYS_TR session = ESYS_TR_NONE; TSS2_RC rc = Esys_StartAuthSession(ctx->esys_ctx, handle, //tpmkey handle, //bind ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA256, &session); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_StartAuthSession: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, session, session_attrs, 0xff); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_TRSess_SetAttributes: %s", Tss2_RC_Decode(rc)); rc = Esys_FlushContext(ctx->esys_ctx, session); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_FlushContext: %s", Tss2_RC_Decode(rc)); } return CKR_GENERAL_ERROR; } ctx->original_flags = session_attrs; ctx->hmac_session = session; return CKR_OK; } CK_RV tpm_session_stop(tpm_ctx *ctx) { TSS2_RC rc = Esys_FlushContext(ctx->esys_ctx, ctx->hmac_session); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_FlushContext: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } ctx->hmac_session = 0; return CKR_OK; } CK_RV tpm_ctx_new_fromtcti(void *tcti, tpm_ctx **tctx) { ESYS_CONTEXT *esys = NULL; tpm_ctx *t = calloc(1, sizeof(*t)); if (!t) { return CKR_HOST_MEMORY; } esys = esys_ctx_init(tcti); if (!esys) { goto error; } /* populate */ t->esys_ctx = esys; t->tcti_ctx = tcti; /* * allow TPM2_PKCS11_ESAPI_MANAGE_FLAGS to override the configure time default on whether or * not ESAPI should manage the flags or if the TPM code should do it. */ const char *c = getenv("TPM2_PKCS11_ESAPI_MANAGE_FLAGS"); t->esapi_manage_session_flags = c ? true : !!ESAPI_MANAGE_FLAGS; /* assign back (return via pointer) */ *tctx = t; return CKR_OK; error: tpm_ctx_free(t); return CKR_GENERAL_ERROR; } CK_RV tpm_ctx_new(const char *config, tpm_ctx **tctx) { TSS2_TCTI_CONTEXT *tcti = NULL; /* no specific config, try environment */ if (!config) { config = getenv(TPM2_PKCS11_TCTI); } LOGV("tcti=%s", config ? config : "(null)"); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &tcti); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } return tpm_ctx_new_fromtcti(tcti, tctx); } static CK_RV tpm_get_properties(tpm_ctx *ctx, TPMS_CAPABILITY_DATA **d) { if (ctx->tpms_fixed_property_cache) { *d = ctx->tpms_fixed_property_cache; return CKR_OK; } assert(!ctx->tpms_fixed_property_cache); TPM2_CAP capability = TPM2_CAP_TPM_PROPERTIES; UINT32 property = TPM2_PT_FIXED; UINT32 propertyCount = TPM2_MAX_TPM_PROPERTIES; TPMS_CAPABILITY_DATA *capabilityData; TPMI_YES_NO moreData; TSS2_RC rval = Esys_GetCapability(ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, &capabilityData); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } /* this cannot overflow */ if (!capabilityData || capabilityData->data.tpmProperties.count < TPM2_PT_VENDOR_STRING_4 - TPM2_PT_FIXED + 1) { LOGE("TPM did not reply with correct amount of capabilities"); Esys_Free(capabilityData); return CKR_GENERAL_ERROR; } *d = ctx->tpms_fixed_property_cache = capabilityData; return CKR_OK; } static CK_RV find_fixed_cap(TPMS_CAPABILITY_DATA *d, TPM2_PT property, CK_ULONG_PTR value) { TPML_TAGGED_TPM_PROPERTY *t = &d->data.tpmProperties; TPMS_TAGGED_PROPERTY *p = t->tpmProperty; CK_ULONG i; for (i=0; i < t->count; i++) { if (property == p[i].property) { *value = p[i].value; return CKR_OK; } } return CKR_MECHANISM_INVALID; } CK_RV tpm_find_max_rsa_keysize(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_RSA; input.parameters.rsaDetail.exponent = 0; input.parameters.rsaDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.rsaDetail.symmetric.algorithm = TPM2_ALG_NULL; static CK_ULONG max_found = 0; if (max_found) { *min = 1024; *max = max_found; return CKR_OK; } TPM2_KEY_BITS i; for(i=2; i < 5; i++) { input.parameters.rsaDetail.keyBits = 1024 * i; /* 2048, 3072, 4096... (cannot overflow)*/ TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_KEY_SIZE || rval == TPM2_RC_VALUE) { continue; } else { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } /* key size was good */ if (max_found < input.parameters.rsaDetail.keyBits) { max_found = input.parameters.rsaDetail.keyBits; } } *min = 1024; *max = max_found; return CKR_OK; } static TPM2_ALGORITHM_ID nid_to_tpm2alg(int nid) { switch (nid) { case NID_X9_62_prime192v1: return TPM2_ECC_NIST_P192; case NID_secp224r1: return TPM2_ECC_NIST_P224; case NID_X9_62_prime256v1: return TPM2_ECC_NIST_P256; case NID_secp384r1: return TPM2_ECC_NIST_P384; case NID_secp521r1: return TPM2_ECC_NIST_P521; default: LOGE("Unsupported nid to tpm EC algorithm mapping, got nid: %d", nid); return TPM2_ALG_ERROR; } } CK_RV tpm_is_rsa_keysize_supported(tpm_ctx *tctx, CK_ULONG test_size) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_RSA; input.parameters.rsaDetail.exponent = 0; input.parameters.rsaDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.rsaDetail.symmetric.algorithm = TPM2_ALG_NULL; input.parameters.rsaDetail.keyBits = test_size; TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_KEY_SIZE || rval == TPM2_RC_VALUE) { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV tpm_is_ecc_curve_supported(tpm_ctx *tctx, int nid) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_ECC; input.parameters.eccDetail.kdf.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.symmetric.algorithm = TPM2_ALG_NULL; input.parameters.eccDetail.curveID = nid_to_tpm2alg(nid); if (input.parameters.eccDetail.curveID == TPM2_ALG_ERROR) { return CKR_MECHANISM_INVALID; } TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_CURVE || rval == TPM2_RC_VALUE) { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV tpm_find_ecc_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { static bool cached = false; static CK_ULONG found_max = 0; static CK_ULONG found_min = ~0; if (cached) { *min = found_min/8; *max = found_max/8; return CKR_OK; } TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_ECC; input.parameters.eccDetail.kdf.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.symmetric.algorithm = TPM2_ALG_NULL; struct { TPM2_ALG_ID alg; unsigned size; } tests[] = { { TPM2_ECC_NIST_P192, 192 * 8 }, { TPM2_ECC_NIST_P224, 224 * 8 }, { TPM2_ECC_NIST_P256, 256 * 8 }, { TPM2_ECC_NIST_P384, 384 * 8 }, { TPM2_ECC_NIST_P521, 521 * 8 }, { TPM2_ECC_BN_P256, 256 * 8 }, { TPM2_ECC_BN_P638, 638 * 8 }, { TPM2_ECC_SM2_P256, 256 * 8 }, }; TPM2_ALG_ID i; for(i=0; i < ARRAY_LEN(tests); i++) { input.parameters.eccDetail.curveID = tests[i].alg; TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_CURVE) { continue; } else { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } if (tests[i].size > found_max) { found_max = tests[i].size; } if (tests[i].size < found_min) { found_min = tests[i].size; } } *max = found_max/8; *min = found_min/8; cached = true; return CKR_OK; } CK_RV tpm_find_aes_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { /* ok it's supported, what are the key sizes? */ static CK_ULONG _max = 0; static const CK_ULONG _min = 128; if (_max) { *min = _min/8; *max = _max/8; return CKR_OK; } TPMS_CAPABILITY_DATA *fixed_property_data = NULL; CK_RV rv = tpm_get_properties(tctx, &fixed_property_data); if (rv != CKR_OK) { return rv; } rv = find_fixed_cap(fixed_property_data, TPM2_PT_CONTEXT_SYM_SIZE, &_max); if (rv != CKR_OK) { return rv; } /* if it's supported 128bits is min by spec IIUC */ /* convert to bytes for return values */ *min = _min/8; *max = _max/8; return CKR_OK; } CK_RV tpm_get_token_info (tpm_ctx *ctx, CK_TOKEN_INFO *info) { check_pointer(ctx); check_pointer(info); TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rv = tpm_get_properties(ctx, &capabilityData); if (rv !=CKR_OK) { return rv; } TPMS_TAGGED_PROPERTY *tpmProperties = capabilityData->data.tpmProperties.tpmProperty; // Use Spec revision as HW Version UINT32 revision = tpmProperties[TPM2_PT_REVISION - TPM2_PT_FIXED].value; info->hardwareVersion.major = revision / 100; info->hardwareVersion.minor = revision % 100; // Use Firmware Version as FW Version UINT32 version = tpmProperties[TPM2_PT_FIRMWARE_VERSION_1 - TPM2_PT_FIXED].value; // Most vendors seem to use 00MM.00mm as format for TPM2_PT_FIRMWARE_VERSION_1 // Unfortunately we only have 1 byte for major and minor each. info->firmwareVersion.major = (version >> 16) & 0xFF; info->firmwareVersion.minor = version & 0xFF; // Use Vendor ID as Manufacturer ID unsigned char manufacturerID[sizeof(UINT32)+1] = {0}; // 4 bytes + '\0' as temp storage UINT32 manufacturer = ntohl(tpmProperties[TPM2_PT_MANUFACTURER - TPM2_PT_FIXED].value); memcpy(manufacturerID, (unsigned char*) &manufacturer, sizeof(uint32_t)); str_padded_copy(info->manufacturerID, manufacturerID); // Map human readable Manufacturer String, if available, // otherwise 4 byte ID was already padded and will be used. for (unsigned int i=0; i < ARRAY_LEN(TPM2_MANUFACTURER_MAP); i++){ if (!strncasecmp((char *)info->manufacturerID, TPM2_MANUFACTURER_MAP[i][0], 4)) { _str_padded_copy(info->manufacturerID, sizeof(info->manufacturerID), (const CK_UTF8CHAR_PTR)TPM2_MANUFACTURER_MAP[i][1], strlen(TPM2_MANUFACTURER_MAP[i][1])); } } // Use Vendor String as Model description UINT32 vendor[4]; vendor[0] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_1 - TPM2_PT_FIXED].value); vendor[1] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_2 - TPM2_PT_FIXED].value); vendor[2] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_3 - TPM2_PT_FIXED].value); vendor[3] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_4 - TPM2_PT_FIXED].value); _str_padded_copy(info->model, sizeof(info->model), (unsigned char*) &vendor, sizeof(vendor)); return CKR_OK; } bool tpm_getrandom(tpm_ctx *ctx, BYTE *data, size_t size) { size_t offset = 0; bool result = false; /* * This will get re-used once allocated by esys */ TPM2B_DIGEST *rand_bytes = NULL; while (size) { UINT16 request_size = size > sizeof(rand_bytes->buffer) ? sizeof(rand_bytes->buffer) : size; TSS2_RC rval = Esys_GetRandom( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, request_size, &rand_bytes); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetRandom: %s:", Tss2_RC_Decode(rval)); goto out; } memcpy(&data[offset], rand_bytes->buffer, rand_bytes->size); offset += rand_bytes->size; size -= rand_bytes->size; } result = true; out: free(rand_bytes); return result; } CK_RV tpm_stirrandom(tpm_ctx *ctx, CK_BYTE_PTR seed, CK_ULONG seed_len) { TSS2_RC rc = TSS2_TCTI_RC_GENERAL_FAILURE;; size_t offset = 0; while(offset < seed_len) { TPM2B_SENSITIVE_DATA stir; size_t left = seed_len - offset; size_t chunk = left > sizeof(stir.buffer) ? sizeof(stir.buffer) : left; stir.size = chunk; memcpy(stir.buffer, &seed[offset], chunk); rc = Esys_StirRandom( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &stir); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_StirRandom: %s:", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } offset += seed_len; } return CKR_OK; } bool tpm_get_name(tpm_ctx *ctx, uint32_t handle, twist *name) { TPM2B_NAME *tname = NULL; TSS2_RC rval = Esys_TR_GetName(ctx->esys_ctx, handle, &tname); if (rval != TSS2_RC_SUCCESS) { return false; } twist t = twistbin_new(tname->name, tname->size); Esys_Free(tname); if (!t) { LOGE("OOM"); return false; } *name = t; return true; } bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { TSS2_RC rval = Esys_TR_Deserialize(ctx->esys_ctx, (uint8_t *)handle_blob, twist_len(handle_blob), handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_Deserialize: %s:", Tss2_RC_Decode(rval)); return false; } return true; } bool tpm_contextload_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { TPMS_CONTEXT blob; TSS2_RC rval = Tss2_MU_TPMS_CONTEXT_Unmarshal((uint8_t *)handle_blob, twist_len(handle_blob), NULL, &blob); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPMS_CONTEXT_Unmarshal: %s:", Tss2_RC_Decode(rval)); return false; } rval = Esys_ContextLoad(ctx->esys_ctx, &blob, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_ContextLoad: %s:", Tss2_RC_Decode(rval)); return false; } return true; } static CK_RV tpm_load(tpm_ctx *ctx, uint32_t phandle, TPM2B_PUBLIC *pub, twist priv_data, uint32_t *handle) { TPM2B_PRIVATE priv = { .size = 0 }; size_t len = twist_len(priv_data); size_t offset = 0; TSS2_RC rval = Tss2_MU_TPM2B_PRIVATE_Unmarshal((uint8_t *)priv_data, len, &offset, &priv); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Unmarshal: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } rval = Esys_Load( ctx->esys_ctx, phandle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &priv, pub, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_Load: %s:", Tss2_RC_Decode(rval)); return rval == TPM2_RC_LOCKOUT ? CKR_PIN_LOCKED : CKR_GENERAL_ERROR; } return CKR_OK; } static bool tpm_loadexternal(tpm_ctx *ctx, TPM2B_PUBLIC *pub, uint32_t *handle) { TSS2_RC rval; #ifdef ESYS_3 rval = Esys_LoadExternal( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, pub, ESYS_TR_RH_NULL, handle); #else /* ESYS_3 */ rval = Esys_LoadExternal( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, pub, TPM2_RH_NULL, handle); #endif /* ESYS_3 */ if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_LoadExternal: %s:", Tss2_RC_Decode(rval)); return false; } return true; } CK_RV tpm_loadobj( tpm_ctx *ctx, uint32_t phandle, twist auth, twist pub_data, twist priv_data, uint32_t *handle) { TPM2B_PUBLIC pub = { .size = 0 }; size_t len = twist_len(pub_data); size_t offset = 0; TSS2_RC rval = Tss2_MU_TPM2B_PUBLIC_Unmarshal((uint8_t *)pub_data, len, &offset, &pub); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Unmarshal: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } bool tmp_rc = set_esys_auth(ctx->esys_ctx, phandle, auth); if (!tmp_rc) { return CKR_GENERAL_ERROR; } if (priv_data) { return tpm_load(ctx, phandle, &pub, priv_data, handle); } return tpm_loadexternal(ctx, &pub, handle) ? CKR_OK : CKR_GENERAL_ERROR; } bool tpm_flushcontext(tpm_ctx *ctx, uint32_t handle) { TSS2_RC rval = Esys_FlushContext( ctx->esys_ctx, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_FlushContext: %s", Tss2_RC_Decode(rval)); return false; } return true; } twist tpm_unseal(tpm_ctx *ctx, uint32_t handle, twist objauth) { twist t = NULL; bool result = set_esys_auth(ctx->esys_ctx, handle, objauth); if (!result) { return false; } TPM2B_SENSITIVE_DATA *unsealed_data = NULL; flags_turndown(ctx, TPMA_SESSION_DECRYPT); TSS2_RC rc = Esys_Unseal( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &unsealed_data); if (rc != TPM2_RC_SUCCESS) { LOGE("Esys_Unseal: %s", Tss2_RC_Decode(rc)); goto out; } t = twistbin_new(unsealed_data->buffer, unsealed_data->size); free(unsealed_data); out: flags_restore(ctx); return t; } static CK_RV flatten_rsassa(TPMS_SIGNATURE_RSASSA *rsassa, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { if (sig && *siglen < rsassa->sig.size) { *siglen = rsassa->sig.size; return CKR_BUFFER_TOO_SMALL; } *siglen = rsassa->sig.size; if (sig) { memcpy(sig, rsassa->sig.buffer, *siglen); } return CKR_OK; } static CK_RV flatten_rsapss(TPMS_SIGNATURE_RSAPSS *rsapss, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { if (sig && *siglen < rsapss->sig.size) { *siglen = rsapss->sig.size; return CKR_BUFFER_TOO_SMALL; } *siglen = rsapss->sig.size; if (sig) { memcpy(sig, rsapss->sig.buffer, *siglen); } return CKR_OK; } static CK_RV flatten_ecdsa(TPMS_SIGNATURE_ECDSA *ecdsa, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { TPM2B_ECC_PARAMETER *R = &ecdsa->signatureR; TPM2B_ECC_PARAMETER *S = &ecdsa->signatureS; /* * From PKCS#11 Current Mechanisms Specification: * * "For the purposes of these mechanisms, an ECDSA signature is an * octet string of even length which is at most two times nLen * octets, where nLen is the length in octets of the base point * order n. The signature octets correspond to the concatenation * of the ECDSA values r and s, both represented as an octet * string of equal length of at most nLen with the most * significant byte first." */ /* * From TCG TPM 2.0, Part 1: Architecture, Appendix C.8: * * "When ECC parameters are returned by the TPM as output * parameters in a response, they must be padded with zeros to the * length of the respective curve (e.g., 32 bytes for NIST * P-256)." */ if (R->size != S->size) { LOGE("TPM returned ECC signature with inconsistent padding"); return CKR_DEVICE_ERROR; } /* this can't overflow, but it doesn't hurt */ CK_ULONG rs = 0; safe_add(rs, R->size, S->size); *siglen = rs; if (!sig) { return CKR_OK; } if (rs > *siglen) { return CKR_BUFFER_TOO_SMALL; } memcpy(sig, R->buffer, R->size); memcpy(sig + R->size, S->buffer, S->size); return CKR_OK; } static CK_RV flatten_hmac(TPMT_HA *hmac, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_ULONG buffer_len = 0; switch(hmac->hashAlg) { case TPM2_ALG_SHA1: buffer_len = 20; break; case TPM2_ALG_SHA256: buffer_len = 32; break; case TPM2_ALG_SHA384: buffer_len = 48; break; case TPM2_ALG_SHA512: buffer_len = 64; break; default: LOGE("Could not flatten HMAC signature"); return CKR_GENERAL_ERROR; } if (buffer_len > *siglen) { return CKR_BUFFER_TOO_SMALL; } /* copy N bytes (digest length) from the biggest buffer union */ memcpy(sig, hmac->digest.sha512, buffer_len); *siglen = buffer_len; return CKR_OK; } static CK_RV sig_flatten(TPMT_SIGNATURE *signature, TPMT_SIG_SCHEME *scheme, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { switch(scheme->scheme) { case TPM2_ALG_RSASSA: return flatten_rsassa(&signature->signature.rsassa, sig, siglen); case TPM2_ALG_RSAPSS: return flatten_rsapss(&signature->signature.rsapss, sig, siglen); case TPM2_ALG_ECDSA: return flatten_ecdsa(&signature->signature.ecdsa, sig, siglen); case TPM2_ALG_HMAC: return flatten_hmac(&signature->signature.hmac, sig, siglen); /* no default */ } return CKR_GENERAL_ERROR; } static TPMI_ALG_HASH guess_hash_by_size(CK_ULONG len) { switch(len) { case 20: return TPM2_ALG_SHA1; case 32: return TPM2_ALG_SHA256; case 48: return TPM2_ALG_SHA384; case 64: return TPM2_ALG_SHA512; /* no default */ } return TPM2_ALG_ERROR; } static CK_RV ecc_fixup_halg(TPMT_SIG_SCHEME *sig, CK_ULONG datalen) { if (sig->details.any.hashAlg == TPM2_ALG_ERROR) { TPMI_ALG_HASH halg = guess_hash_by_size(datalen); if (halg == TPM2_ALG_ERROR) { LOGE("Cannot figure out hashing algorithm for signature of len: %lu", datalen); return CKR_GENERAL_ERROR; } sig->details.any.hashAlg = halg; } return CKR_OK; } static CK_RV tpm_hmac_large(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_RV rv = CKR_GENERAL_ERROR; tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_TR session = tctx->hmac_session; TPMI_ALG_HASH halg = opdata->hmac.sig.details.hmac.hashAlg; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_AUTH seq_auth = { .size = 32 }; int rc = RAND_bytes(seq_auth.buffer, seq_auth.size); if (rc != 1) { LOGE("Could not generate random sequence auth value for HMAC"); return CKR_GENERAL_ERROR; } ESYS_TR seq_handle = ESYS_TR_NONE; TSS2_RC rval = Esys_HMAC_Start(tctx->esys_ctx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &seq_auth, halg, &seq_handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_HMAC_Start: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2B_MAX_BUFFER buffer = { 0 }; CK_ULONG bytes_remaining = datalen; while (bytes_remaining > sizeof(buffer.buffer)) { off_t offset = datalen - bytes_remaining; memcpy(buffer.buffer, &data[offset], sizeof(buffer.buffer)); buffer.size = sizeof(buffer.buffer); rval = Esys_SequenceUpdate(tctx->esys_ctx, seq_handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_SequenceUpdate: %s", Tss2_RC_Decode(rval)); /* XXX what to do with a sequence handle? */ return CKR_GENERAL_ERROR; } bytes_remaining -= sizeof(buffer.buffer); } assert(bytes_remaining <= sizeof(buffer.buffer)); off_t offset = datalen - bytes_remaining; memcpy(buffer.buffer, &data[offset], bytes_remaining); buffer.size = bytes_remaining; TPM2B_DIGEST *hmac = NULL; TPMT_TK_HASHCHECK *ticket = NULL; rval = Esys_SequenceComplete(tctx->esys_ctx, seq_handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer, ESYS_TR_RH_NULL, &hmac, &ticket ); if (rval != TSS2_RC_SUCCESS) { /* XXX what to do with a sequence handle? */ LOGE("Esys_SequenceComplete: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } Esys_Free(ticket); *siglen = hmac->size; if (sig && *siglen < hmac->size) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (sig) { memcpy(sig, hmac->buffer, hmac->size); } rv = CKR_OK; out: Esys_Free(hmac); return rv; } static CK_RV tpm_hmac(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_RV rv = CKR_GENERAL_ERROR; TPM2B_MAX_BUFFER buffer = { 0 }; if (sizeof(buffer.buffer) < datalen) { /* doesn't fit in a oneshot call, do it in a multiple call */ return tpm_hmac_large(opdata, data, datalen, sig, siglen); } /* one shot call */ tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_TR session = tctx->hmac_session; TPMI_ALG_HASH halg = opdata->hmac.sig.details.hmac.hashAlg; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } /* size checked in entry to determine if one shot or not */ memcpy(buffer.buffer, data, datalen); buffer.size = datalen; TPM2B_DIGEST *hmac = NULL; TSS2_RC rval = Esys_HMAC(tctx->esys_ctx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer, halg, &hmac); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *siglen = hmac->size; if (sig && *siglen < hmac->size) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (sig) { memcpy(sig, hmac->buffer, hmac->size); } rv = CKR_OK; out: Esys_Free(hmac); return rv; } CK_RV tpm_sign(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { assert(opdata); tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_CONTEXT *ectx = tctx->esys_ctx; ESYS_TR session = tctx->hmac_session; TPMT_SIG_SCHEME *scheme = NULL; switch(opdata->op_type) { case CKK_RSA: scheme = &opdata->rsa.sig; break; case CKK_EC: scheme = &opdata->ecc.sig; break; case CKK_GENERIC_SECRET: return tpm_hmac(opdata, data, datalen, sig, siglen); default: LOGE("Unknown opdata op_type selector for sign, got: 0x%lx", opdata->op_type); return CKR_GENERAL_ERROR; } TPM2B_DIGEST tdigest; if (sizeof(tdigest.buffer) < datalen) { return CKR_DATA_LEN_RANGE; } memcpy(tdigest.buffer, data, datalen); tdigest.size = datalen; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPMT_TK_HASHCHECK validation = { .tag = TPM2_ST_HASHCHECK, .hierarchy = TPM2_RH_NULL, .digest = TPM2B_EMPTY_INIT }; if (opdata->op_type == CKK_EC) { CK_RV rv = ecc_fixup_halg(&opdata->ecc.sig, datalen); if (rv != CKR_OK) { return rv; } } flags_turndown(opdata->ctx, TPMA_SESSION_ENCRYPT); TPMT_SIGNATURE *signature = NULL; TSS2_RC rval = Esys_Sign( ectx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &tdigest, scheme, &validation, &signature); flags_restore(opdata->ctx); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = sig_flatten(signature, scheme, sig, siglen); Esys_Free(signature); return rv; } CK_RV tpm_verify(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG siglen) { assert(opdata); /* * Only HMAC should be going the way of verify to the TPM, asym ciphers should use SW for both ease of * integration with certificate objects but performance as well. */ assert(opdata->op_type == CKK_GENERIC_SECRET); CK_BYTE cmp_sig[sizeof(((TPM2B_MAX_BUFFER *)NULL)->buffer)]; CK_ULONG cmp_sig_len = sizeof(cmp_sig); CK_RV rv = tpm_hmac(opdata, data, datalen, cmp_sig, &cmp_sig_len); if (rv != CKR_OK) { return rv; } if (cmp_sig_len != siglen) { return CKR_SIGNATURE_INVALID; } return CRYPTO_memcmp(sig, cmp_sig, cmp_sig_len) == 0 ? CKR_OK : CKR_SIGNATURE_INVALID; } CK_RV tpm_readpub(tpm_ctx *ctx, uint32_t handle, TPM2B_PUBLIC **public, TPM2B_NAME **name, TPM2B_NAME **qualified_name) { TSS2_RC rval = Esys_ReadPublic(ctx->esys_ctx, handle, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, public, name, qualified_name); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_ReadPublic: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV get_oaep_mgf1_alg(tpm_ctx *tpm, uint32_t handle, CK_RSA_PKCS_MGF_TYPE_PTR mgf) { TPM2B_PUBLIC *public = NULL; TPM2B_NAME *name = NULL; TPM2B_NAME *qualified_name = NULL; CK_RV rv = tpm_readpub(tpm, handle, &public, &name, &qualified_name); if (rv != CKR_OK) { return rv; } switch(public->publicArea.nameAlg) { case TPM2_ALG_SHA1: *mgf = CKG_MGF1_SHA1; break; case TPM2_ALG_SHA256: *mgf = CKG_MGF1_SHA256; break; case TPM2_ALG_SHA384: *mgf = CKG_MGF1_SHA384; break; case TPM2_ALG_SHA512: *mgf = CKG_MGF1_SHA512; break; default: rv = CKR_GENERAL_ERROR; } free(public); free(name); free(qualified_name); return rv; } static TPMI_ALG_HASH mech_to_hash_alg(CK_MECHANISM_TYPE t) { switch(t) { case CKM_SHA_1: return TPM2_ALG_SHA1; case CKM_SHA256: return TPM2_ALG_SHA256; case CKM_SHA384: return TPM2_ALG_SHA384; case CKM_SHA512: return TPM2_ALG_SHA512; /* no default */ } return TPM2_ALG_ERROR; } static void set_common_opdata(tpm_op_data *opdata, tpm_ctx *tctx, tobject *tobj, CK_KEY_TYPE key_type) { opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = key_type; } CK_RV tpm_rsa_oaep_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { assert(outdata); assert(mech); UNUSED(m); /* * At the current moment, this is the only thing that cannot be flattened and requires PARAMS * and a TPM ctx for verifying the hash alg. Others just pass along the tctx via the opdata */ CK_RSA_PKCS_OAEP_PARAMS_PTR params = NULL; SAFE_CAST(mech, params); if (mech->ulParameterLen != sizeof(CK_RSA_PKCS_OAEP_PARAMS)) { return CKR_MECHANISM_PARAM_INVALID; } if (params->source != CKZ_DATA_SPECIFIED && params->pSourceData != NULL && params->ulSourceDataLen != 0) { return CKR_MECHANISM_PARAM_INVALID; } /* * TPM is hardcoded to MGF1 + in the TPM, make sure what is requested is supported */ CK_RSA_PKCS_MGF_TYPE supported_mgf; CK_RV rv = get_oaep_mgf1_alg(tctx, tobj->tpm_handle, &supported_mgf); if (rv != CKR_OK) { return rv; } /* TODO revisit - why does it return not supported here. It works though if (params->mgf != supported_mgf) { return CKR_MECHANISM_PARAM_INVALID; } */ tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.raw.scheme = TPM2_ALG_OAEP; opdata->rsa.raw.details.anySig.hashAlg = mech_to_hash_alg(params->hashAlg); if (opdata->rsa.raw.details.anySig.hashAlg == TPM2_ALG_ERROR) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } if (params->ulSourceDataLen > sizeof(opdata->rsa.label.buffer)) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } opdata->rsa.label.size = params->ulSourceDataLen; if (params->ulSourceDataLen) { if (!params->pSourceData) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } memcpy(opdata->rsa.label.buffer, params->pSourceData, params->ulSourceDataLen); } set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(m); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.raw.scheme = TPM2_ALG_NULL; opdata->rsa.label.size = 0; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(m); check_pointer(mech); check_pointer(outdata); CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; switch (params->hashAlg) { case CKM_SHA_1: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; break; case CKM_SHA256: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; break; case CKM_SHA384: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; break; case CKM_SHA512: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; break; default: tpm_opdata_free(&opdata); return CKR_MECHANISM_INVALID; } set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_ec_ecdsa_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->ecc.sig.scheme = TPM2_ALG_ECDSA; /* * we don't know the proper algorithm to set until ESys_Sign() is called, * So we need to detect this case and guess the algorithm based on hash size. */ opdata->ecc.sig.details.any.hashAlg = TPM2_ALG_ERROR; set_common_opdata(opdata, tctx, tobj, CKK_EC); *outdata = opdata; return CKR_OK; } static CK_RV tpm_ec_ecdsa_get_opdata_common(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, TPMI_ALG_HASH halg, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->ecc.sig.scheme = TPM2_ALG_ECDSA; opdata->ecc.sig.details.any.hashAlg = halg; set_common_opdata(opdata, tctx, tobj, CKK_EC); *outdata = opdata; return CKR_OK; } #define TPM_EC_ECDSA_GET_OPDATA(name, halg) \ CK_RV tpm_ec_ecdsa_##name##_get_opdata(mdetail *mdtl, \ tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, \ tpm_op_data **outdata) { \ return tpm_ec_ecdsa_get_opdata_common(mdtl, tctx, mech, tobj, \ halg, outdata); \ } TPM_EC_ECDSA_GET_OPDATA(sha1, TPM2_ALG_SHA1) TPM_EC_ECDSA_GET_OPDATA(sha256, TPM2_ALG_SHA256) TPM_EC_ECDSA_GET_OPDATA(sha384, TPM2_ALG_SHA384) TPM_EC_ECDSA_GET_OPDATA(sha512, TPM2_ALG_SHA512) static CK_RV aes_common_opdata(tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data *opdata) { if (mech->ulParameterLen > sizeof(opdata->sym.iv.buffer) || mech->ulParameterLen % 8) { return CKR_MECHANISM_PARAM_INVALID; } opdata->sym.iv.size = mech->ulParameterLen; memcpy(opdata->sym.iv.buffer, mech->pParameter, mech->ulParameterLen); opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = CKK_AES; return CKR_OK; } CK_RV tpm_aes_cbc_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CBC; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_cfb_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CFB; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_ecb_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_ECB; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_ctr_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); CK_AES_CTR_PARAMS *params = NULL; SAFE_CAST(mech, params); /* * The TPM has the counter bits equal to block size, * so it should be set to use the FULL cb value which is * 16 bytes. */ if (params->ulCounterBits != (8 * sizeof(params->cb))) { LOGE("TPM Requires ulCounterBits to be %zu, got %lu", sizeof(params->cb), params->ulCounterBits); return CKR_MECHANISM_PARAM_INVALID; } tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CTR; opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = CKK_AES; /* to detect overflow, start a counter at 0 and detect when it overflows 16 bytes */ opdata->sym.ctr.counter = BN_new(); if (!opdata->sym.ctr.counter) { free(opdata); return CKR_HOST_MEMORY; } /* the counter buffer and the iv buffer should be big enough */ assert(sizeof(params->cb) <= sizeof(opdata->sym.iv.buffer)); /* The counter value for the TPM IS THE WHOLE IV, SO USE IV */ opdata->sym.iv.size = sizeof(params->cb); memcpy(opdata->sym.iv.buffer, params->cb, sizeof(params->cb)); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } void tpm_opdata_free(tpm_op_data **opdata) { if (opdata) { if (*opdata && (*opdata)->mech.mechanism == CKM_AES_CTR) { BN_free((*opdata)->sym.ctr.counter); (*opdata)->sym.ctr.counter = NULL; } free(*opdata); *opdata = NULL; } } CK_RV tpm_rsa_decrypt(tpm_op_data *tpm_enc_data, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen) { LOGV("Performing TPM RSA Decrypt"); CK_RV rv = CKR_GENERAL_ERROR; tpm_ctx *ctx = tpm_enc_data->ctx; TPMT_RSA_DECRYPT *scheme = &tpm_enc_data->rsa.raw; TPM2B_DATA *label = &tpm_enc_data->rsa.label; /* * Validate that the data to perform the operation on, typically * ciphertext on RSA decrypt, fits in the buffer for the TPM and * populate it. */ TPM2B_PUBLIC_KEY_RSA tpm_ctext = { .size = ctextlen }; if (ctextlen > sizeof(tpm_ctext.buffer)) { return CKR_ARGUMENTS_BAD; } memcpy(tpm_ctext.buffer, ctext, ctextlen); twist auth = tpm_enc_data->tobj->unsealed_auth; ESYS_TR handle = tpm_enc_data->tobj->tpm_handle; bool result = set_esys_auth(ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_PUBLIC_KEY_RSA *tpm_ptext; TSS2_RC rc = Esys_RSA_Decrypt( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &tpm_ctext, scheme, label, &tpm_ptext); if (rc != TPM2_RC_SUCCESS) { LOGE("Esys_RSA_Decrypt: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } if (!ptext) { *ptextlen = tpm_ctext.size; rv = CKR_OK; goto out; } if (*ptextlen < tpm_ctext.size) { *ptextlen = tpm_ctext.size; rv = CKR_BUFFER_TOO_SMALL; goto out; } *ptextlen = tpm_ptext->size; memcpy(ptext, tpm_ptext->buffer, tpm_ptext->size); rv = CKR_OK; out: free(tpm_ptext); return rv; } static TSS2_RC tpm_get_cc(tpm_ctx *tpm, TPMS_CAPABILITY_DATA **capabilityData) { assert(tpm); assert(tpm->esys_ctx); assert(capabilityData); if (tpm->tpms_cc_cache) { *capabilityData = tpm->tpms_cc_cache; return CKR_OK; } TPM2_CAP capability = TPM2_CAP_COMMANDS; UINT32 property = TPM2_CC_FIRST; UINT32 propertyCount = TPM2_MAX_CAP_CC; TPMI_YES_NO moreData; TSS2_RC rval = Esys_GetCapability(tpm->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, capabilityData); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s", Tss2_RC_Decode(rval)); return rval; } tpm->tpms_cc_cache = *capabilityData; return TSS2_RC_SUCCESS; } static TSS2_RC tpm_supports_cc(tpm_ctx *tpm, TPMA_CC check_cc, bool *is_supported) { /* do not free, value is cached */ TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rval = tpm_get_cc(tpm, &capabilityData); if (rval != TSS2_RC_SUCCESS) { return rval; } size_t i; for (i=0; i < capabilityData->data.command.count; i++) { TPMA_CC cca = capabilityData->data.command.commandAttributes[i]; TPM2_CC cc = cca & TPMA_CC_COMMANDINDEX_MASK; if (cc == check_cc) { *is_supported = true; return TSS2_RC_SUCCESS; } } *is_supported = false; return TSS2_RC_SUCCESS; } static TSS2_RC do_part_encrypt_decrypt( tpm_ctx *ctx, uint32_t handle, TPMI_ALG_SYM_MODE mode, TPMI_YES_NO is_decrypt, const TPM2B_MAX_BUFFER *data_in, const TPM2B_IV *iv_in, TPM2B_MAX_BUFFER **data_out, TPM2B_IV **iv_out) { TSS2_RC rval = TSS2_RC_SUCCESS; /* figure out what command to use */ if (!ctx->did_check_for_encdec2) { /* do not free, value is cached */ rval = tpm_supports_cc(ctx, TPM2_CC_EncryptDecrypt2, &ctx->use_encdec2); if (rval != TSS2_RC_SUCCESS) { return rval; } } /* setup the output structures */ unsigned version = 2; if (ctx->use_encdec2) { rval = Esys_EncryptDecrypt2( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, data_in, is_decrypt, mode, iv_in, data_out, iv_out); } else { version = 1; flags_turndown(ctx, TPMA_SESSION_DECRYPT); rval = Esys_EncryptDecrypt( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, is_decrypt, mode, iv_in, data_in, data_out, iv_out); flags_restore(ctx); } if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_EncryptDecrypt%u: %s", version, Tss2_RC_Decode(rval)); } return rval; } static CK_RV encrypt_decrypt(tpm_ctx *ctx, uint32_t handle, twist objauth, TPMI_ALG_SYM_MODE mode, TPMI_YES_NO is_decrypt, TPM2B_IV *iv, CK_BYTE_PTR data_in, CK_ULONG data_in_len, CK_BYTE_PTR data_out, CK_ULONG_PTR data_out_len) { /* * Handle 5.2 style queries for output buffer size * * XXX This might not be the best spot, and logic may need to be extended * for different modes to include padding sizes, not sure yet. */ if (!data_out) { *data_out_len = data_in_len; return CKR_OK; } else if(data_in_len > *data_out_len) { *data_out_len = data_in_len; return CKR_BUFFER_TOO_SMALL; } bool result = set_esys_auth(ctx->esys_ctx, handle, objauth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_IV empty_iv = { .size = sizeof(empty_iv.buffer), .buffer = { 0 } }; /* * Copy the data into TPM structures */ TPM2B_IV current_iv = iv ? *iv : empty_iv; CK_ULONG offset = 0; while (offset < data_in_len) { TPM2B_MAX_BUFFER tpm_data_in = { 0 }; assert(offset <= data_in_len); CK_ULONG data_left = data_in_len - offset; assert(data_left != 0); /* How much can we encrypt in this part, bounded by TPM data structure sizes */ CK_ULONG part_len = data_left > sizeof(tpm_data_in.buffer) ? sizeof(tpm_data_in.buffer) : data_left; /* copy it into the structure and set size */ tpm_data_in.size = part_len; memcpy(tpm_data_in.buffer, &data_in[offset], part_len); /* send to TPM */ TPM2B_MAX_BUFFER *tpm_data_out = NULL; TPM2B_IV *tpm_iv_out = NULL; TSS2_RC rc = do_part_encrypt_decrypt(ctx, handle, mode, is_decrypt, &tpm_data_in, ¤t_iv, &tpm_data_out, &tpm_iv_out); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } /* shuffle IVs */ current_iv = *tpm_iv_out; Esys_Free(tpm_iv_out); tpm_iv_out = NULL; /* shuffle to output buffer */ assert(tpm_data_out->size == part_len); memcpy(&data_out[offset], tpm_data_out->buffer, part_len); Esys_Free(tpm_data_out); tpm_data_out = NULL; /* update the offset for the next go around */ offset += part_len; } assert(offset == data_in_len); /* update the operations IV */ *iv = current_iv; /* set the output size */ *data_out_len = data_in_len; return CKR_OK; } /* * These align with the specifications TPMI_YES_NO values as understood for encryptdecrypt routines. */ #define ENCRYPT 0 #define DECRYPT 1 static CK_RV do_buffered_encdec(tpm_op_data *tpm_enc_data, int encdec, CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { CK_RV rv = CKR_GENERAL_ERROR; tpm_ctx *ctx = tpm_enc_data->ctx; TPMI_ALG_SYM_MODE mode = tpm_enc_data->sym.mode; TPM2B_IV *iv = &tpm_enc_data->sym.iv; twist auth = tpm_enc_data->tobj->unsealed_auth; ESYS_TR handle = tpm_enc_data->tobj->tpm_handle; /* final calls don't have input data, they just exhaust the internal buffer if present */ bool is_final = !in; /* * if the application doesn't ask for a block boundary, * buffer the extra till later when you can make a block. * Manipulate the input to the TPM to be on a boundary. */ binarybuffer data[] = { { .data = tpm_enc_data->sym.prev.data, .size = tpm_enc_data->sym.prev.len }, { .data = in, .size = inlen }, }; twist full_buffer = twistbin_create(data, ARRAY_LEN(data)); if (!full_buffer) { LOGE("oom"); return CKR_HOST_MEMORY; } /* pass only the "good blocks here */ size_t full_buffer_len = twist_len(full_buffer); CK_ULONG extralen = full_buffer_len % 16; CK_ULONG blocks = full_buffer_len / 16; CK_ULONG modified_full_buffer_len = full_buffer_len - extralen; /* * Hold a block back on the following conditions: * 1. Decrypt, as one block will have padding. Encrypt can just fire off blocks like * normal. Decrypt will need a final block to strip padding from. * 2. Its not the final round, the final round better be right or error. * 3. There are blocks to hold back * 4. There is NO extra data, just send the blocks we have. * the blocks we have. * 5. We have a padding mechanism, so we need to hold it back for possible final pad. */ bool hold_block_back = encdec == DECRYPT && !is_final && blocks > 0 && extralen == 0 && tpm_enc_data->mech.mechanism == CKM_AES_CBC_PAD; if (hold_block_back) { blocks--; extralen = blocks == 0 ? 16 : blocks * 16; modified_full_buffer_len = blocks * 16; } if (blocks) { if (tpm_enc_data->mech.mechanism == CKM_AES_CTR) { /* Detect CTR wrapping, ie CTR should never repeat iteself */ int rc = BN_add_word(tpm_enc_data->sym.ctr.counter, blocks); if (!rc) { SSL_UTIL_LOGE("BN_add_word"); rv = CKR_GENERAL_ERROR; goto error; } /* it shouldn't be over 16 bytes */ int bytes = BN_num_bytes(tpm_enc_data->sym.ctr.counter); assert(bytes >= 0); if ((unsigned)bytes > sizeof(((CK_AES_CTR_PARAMS *)NULL)->cb)) { LOGE("CTR counter wrapped"); rv = CKR_DATA_LEN_RANGE; goto error; } } rv = encrypt_decrypt(ctx, handle, auth, mode, encdec, iv, (CK_BYTE_PTR)full_buffer, modified_full_buffer_len, out, outlen); if (rv != CKR_OK) { goto error; } } else { /* no blocks to encrypt, nothing to output */ *outlen = 0; } /* if we have extra data, save it for next round */ /* make sure we don't exceed the space of the internal static buffer */ if (extralen > sizeof(tpm_enc_data->sym.prev.data)) { LOGE("Internal buffer too small"); rv = CKR_GENERAL_ERROR; goto error; } tpm_enc_data->sym.prev.len = extralen; if (extralen) { memcpy(tpm_enc_data->sym.prev.data, &full_buffer[modified_full_buffer_len], extralen); } rv = CKR_OK; error: twist_free(full_buffer); return rv; } CK_RV tpm_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; if (tpm_enc_data->op_type == CKK_RSA) { return tpm_rsa_decrypt(tpm_enc_data, ptext, ptextlen, ctext, ctextlen); } return do_buffered_encdec(tpm_enc_data, ENCRYPT, ptext, ptextlen, ctext, ctextlen); } static CK_RV common_final_encrypt_decrypt(int encdec, crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; CK_RV rv = CKR_GENERAL_ERROR; /* non-aes things don't matter */ if (opdata->tpm_opdata->op_type != CKK_AES) { if (last_part_len) { *last_part_len = 0; } return CKR_OK; } /* * For padding modes, this is where you would apply the pad or error * for non-padding modes */ if (opdata->tpm_opdata->mech.mechanism == CKM_AES_CBC_PAD) { /* if it's a padding mode, apply the pad */ if (encdec == ENCRYPT) { /* * pad the data preserving the extra data * This call might be for buffer size, so we don't want to attempt to apply padding * twice, so we only copy the padded data into the internal buffer as needed. */ CK_BYTE out[sizeof(opdata->tpm_opdata->sym.prev.data)]; CK_ULONG outlen = sizeof(out); rv = mech_synthesize(tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, opdata->tpm_opdata->sym.prev.data, opdata->tpm_opdata->sym.prev.len, out, &outlen); if (rv != CKR_OK) { return rv; } /* just asking for size as in 5.2 style returns */ if (!last_part) { *last_part_len = outlen; return CKR_OK; } if (outlen > *last_part_len) { *last_part_len = outlen; return CKR_BUFFER_TOO_SMALL; } /* swap the internal buffer with the padded variant for the last call */ opdata->tpm_opdata->sym.prev.len = outlen; memcpy(opdata->tpm_opdata->sym.prev.data, out, outlen); rv = do_buffered_encdec(tpm_enc_data, encdec, NULL, 0, last_part, last_part_len); } else { /* remove the pad */ /* decrypt into the padded buffer */ CK_BYTE padded[16]; CK_ULONG padded_len = sizeof(padded); rv = do_buffered_encdec(tpm_enc_data, encdec, NULL, 0, padded, &padded_len); if (rv != CKR_OK) { return rv; } /* remove the pad */ CK_BYTE out[sizeof(padded)]; CK_ULONG outlen = sizeof(out); rv = mech_unsynthesize(tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, padded, padded_len, out, &outlen); if (rv != CKR_OK) { return rv; } /* just asking for size as in 5.2 style returns */ if (!last_part) { *last_part_len = outlen; return CKR_OK; } if (outlen > *last_part_len) { *last_part_len = outlen; return CKR_BUFFER_TOO_SMALL; } *last_part_len = outlen; memcpy(last_part, out, outlen); } /* no extra data, nothing to do */ } else if (opdata->tpm_opdata->sym.prev.len) { /* mode should be one of the non padding modes */ assert( (opdata->tpm_opdata->mech.mechanism == CKM_AES_CBC) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_CFB128) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_ECB) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_CTR)); rv = CKR_DATA_LEN_RANGE; } else { /* everything ended on a block boundary */ assert(opdata->tpm_opdata->sym.prev.len == 0); *last_part_len = opdata->tpm_opdata->sym.prev.len; rv = CKR_OK; } return rv; } CK_RV tpm_final_encrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { return common_final_encrypt_decrypt(ENCRYPT, opdata, last_part, last_part_len); } CK_RV tpm_decrypt(crypto_op_data *opdata, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; if (tpm_enc_data->op_type == CKK_RSA) { CK_BYTE buf[4096]; CK_ULONG buf_len = sizeof(buf); CK_RV rv = tpm_rsa_decrypt(tpm_enc_data, ctext, ctextlen, buf, &buf_len); if (rv != CKR_OK) { return rv; } return mech_unsynthesize( tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, buf, buf_len, ptext, ptextlen); } return do_buffered_encdec(tpm_enc_data, DECRYPT, ctext, ctextlen, ptext, ptextlen); } CK_RV tpm_final_decrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { return common_final_encrypt_decrypt(DECRYPT, opdata, last_part, last_part_len); } CK_RV tpm_changeauth(tpm_ctx *ctx, uint32_t parent_handle, uint32_t object_handle, twist oldauth, twist newauth, twist *newblob) { /* Set up the new auth value */ TPM2B_AUTH new_tpm_auth; size_t newauthlen = twist_len(newauth); if (newauthlen > sizeof(new_tpm_auth.buffer)) { return CKR_PIN_LEN_RANGE; } new_tpm_auth.size = newauthlen; memcpy(new_tpm_auth.buffer, newauth, newauthlen); /* set the old auth value */ bool result = set_esys_auth(ctx->esys_ctx, object_handle, oldauth); if (!result) { return CKR_GENERAL_ERROR; } /* call changeauth */ TPM2B_PRIVATE *newprivate = NULL; TSS2_RC rval = Esys_ObjectChangeAuth(ctx->esys_ctx, object_handle, parent_handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &new_tpm_auth, &newprivate); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_ObjectChangeAuth: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } uint8_t serialized[sizeof(*newprivate)]; /* serialize the new blob private */ size_t offset = 0; rval = Tss2_MU_TPM2B_PRIVATE_Marshal(newprivate, serialized, sizeof(*newprivate), &offset); if (rval != TSS2_RC_SUCCESS) { free(newprivate); LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *newblob = twistbin_new(serialized, offset); free(newprivate); return *newblob ? CKR_OK : CKR_HOST_MEMORY; } static TSS2_RC create_loaded( tpm_ctx *tpm, ESYS_TR parent, ESYS_TR session, TPM2B_SENSITIVE_CREATE *in_sens, const TPM2B_PUBLIC *in_pub, ESYS_TR *out_handle, TPM2B_PUBLIC **out_pub, TPM2B_PRIVATE **out_priv ) { TSS2_RC rval; if (!tpm->did_check_for_createloaded) { /* do not free, value is cached */ rval = tpm_supports_cc(tpm, TPM2_CC_CreateLoaded, &tpm->did_check_for_createloaded); if (rval != TSS2_RC_SUCCESS) { return rval; } } if (out_handle && tpm->use_createloaded) { size_t offset = 0; TPM2B_TEMPLATE template = { .size = 0 }; rval = Tss2_MU_TPMT_PUBLIC_Marshal(&in_pub->publicArea, &template.buffer[0], sizeof(TPMT_PUBLIC), &offset); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPMT_PUBLIC_Marshal: %s", Tss2_RC_Decode(rval)); return rval; } template.size = offset; rval = Esys_CreateLoaded( tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, in_sens, &template, out_handle, out_priv, out_pub); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_CreateLoaded: %s", Tss2_RC_Decode(rval)); return rval; } } else { TPM2B_DATA outside_info = TPM2B_EMPTY_INIT; TPML_PCR_SELECTION creation_pcr = { .count = 0 }; TPM2B_CREATION_DATA *creation_data = NULL; TPM2B_DIGEST *creation_hash = NULL; TPMT_TK_CREATION *creation_ticket = NULL; rval = Esys_Create(tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, in_sens, in_pub, &outside_info, &creation_pcr, out_priv, out_pub, &creation_data, &creation_hash, &creation_ticket); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_Create: %s", Tss2_RC_Decode(rval)); return rval; } Esys_Free(creation_data); Esys_Free(creation_hash); Esys_Free(creation_ticket); assert(*out_priv); assert(*out_pub); if (!out_handle) return TSS2_RC_SUCCESS; rval = Esys_Load(tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, *out_priv, *out_pub, out_handle); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_Load: %s", Tss2_RC_Decode(rval)); return rval; } } return TSS2_RC_SUCCESS; } CK_RV tpm2_create_seal_obj(tpm_ctx *ctx, twist parentauth, uint32_t parent_handle, twist objauth, twist oldpubblob, twist sealdata, twist *newpubblob, twist *newprivblob) { bool started_session = false; CK_RV rv = CKR_GENERAL_ERROR; CK_RV tmp_rv = CKR_GENERAL_ERROR; /* * clone the public portion from the existing object by unmarshaling (aka unserializing) it from the * pub blob and converting it to a TPM2B_TEMPLATE */ TPM2B_PUBLIC pub = DEFAULT_SEAL_TEMPLATE; if (oldpubblob) { pub.size = 0; size_t len = twist_len(oldpubblob); size_t offset = 0; TSS2_RC rc = Tss2_MU_TPM2B_PUBLIC_Unmarshal((uint8_t *)oldpubblob, len, &offset, &pub); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PUBLIC_Unmarshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } } /* * Set the seal data and auth value in the sensitive portion */ TPM2B_SENSITIVE_CREATE sensitive = { .size = 0 }; size_t len = twist_len(sealdata); if (len > sizeof(sensitive.sensitive.data.buffer)) { LOGE("Seal data too big"); return CKR_GENERAL_ERROR; } memcpy(sensitive.sensitive.data.buffer, sealdata, len); sensitive.sensitive.data.size = len; len = twist_len(objauth); if (len > sizeof(sensitive.sensitive.userAuth.buffer)) { LOGE("Auth value too big"); return CKR_GENERAL_ERROR; } memcpy(sensitive.sensitive.userAuth.buffer, objauth, len); sensitive.sensitive.userAuth.size = len; /* * Set the parent object auth */ if (!ctx->hmac_session) { rv = tpm_session_start(ctx, parentauth, parent_handle); if (rv != CKR_OK) { return rv; } started_session = true; } else { bool res = set_esys_auth(ctx->esys_ctx, parent_handle, parentauth); if (!res) { return CKR_GENERAL_ERROR; } } TPM2B_PRIVATE *newpriv = NULL; TPM2B_PUBLIC *newpub = NULL; TSS2_RC rc = create_loaded( ctx, parent_handle, ctx->hmac_session, &sensitive, &pub, NULL, &newpub, &newpriv ); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } uint8_t serialized[sizeof(*newpriv) > sizeof(*newpub) ? sizeof(*newpriv) : sizeof(*newpub)]; /* serialize the new blob private */ size_t offset = 0; rc = Tss2_MU_TPM2B_PRIVATE_Marshal(newpriv, serialized, sizeof(*newpriv), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rc)); goto out; } *newprivblob = twistbin_new(serialized, offset); if (!*newprivblob) { goto out; } /* serialize the new blob public */ offset = 0; rc = Tss2_MU_TPM2B_PUBLIC_Marshal(newpub, serialized, sizeof(*newpub), &offset); if (rc != TSS2_RC_SUCCESS) { twist_free(*newprivblob); *newprivblob = NULL; LOGE("Tss2_MU_TPM2B_PUBLIC_Marshal: %s", Tss2_RC_Decode(rc)); goto out; } *newpubblob = twistbin_new(serialized, offset); if (!*newpubblob) { twist_free(*newprivblob); *newprivblob = NULL; goto out; } rv = CKR_OK; out: if (started_session) { tmp_rv = tpm_session_stop(ctx); if (tmp_rv != CKR_OK) { rv = tmp_rv; } } free(newpriv); free(newpub); return rv; } typedef struct tpm_key_data tpm_key_data; struct tpm_key_data { tpm_ctx *ctx; TPM2B_PUBLIC pub; TPM2B_SENSITIVE_CREATE priv; }; static CK_RV generic_bbool_check(CK_ATTRIBUTE_PTR attr, CK_BBOOL check) { CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != check) { LOGE("Expected attr 0x%lx to be %u, got %u", attr->type, value, check); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV generic_bbool_true(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); return generic_bbool_check(attr, CK_TRUE); } static CK_RV generic_bbool_false(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); return generic_bbool_check(attr, CK_FALSE); } static CK_RV generic_bbool_any(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != CK_TRUE && value != CK_FALSE) { return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV handle_modulus(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_ULONG value; CK_RV rv = attr_CK_ULONG(attr, &value); if (rv != CKR_OK) { return rv; } CK_ULONG min = 0; CK_ULONG max = 0; rv = tpm_find_max_rsa_keysize(keydat->ctx, &min, &max); if (rv != CKR_OK) { return rv; } if (value < min || value > max) { LOGE("Keysize %lu not supported.", value); return CKR_ATTRIBUTE_VALUE_INVALID; } keydat->pub.publicArea.parameters.rsaDetail.keyBits = value; return CKR_OK; } static CK_RV handle_ecparams(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; int nid = 0; CK_RV rv = ec_params_to_nid(attr, &nid); if (rv != CKR_OK) { return rv; } TPMS_ECC_PARMS *ec = &keydat->pub.publicArea.parameters.eccDetail; TPMI_ECC_CURVE curve = nid_to_tpm2alg(nid); if (curve == TPM2_ALG_ERROR) { return CKR_CURVE_NOT_SUPPORTED; } ec->curveID = curve; return CKR_OK; } static CK_RV handle_encrypt(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == CK_TRUE) { keydat->pub.publicArea.objectAttributes |= TPMA_OBJECT_SIGN_ENCRYPT; } else { keydat->pub.publicArea.objectAttributes &= ~TPMA_OBJECT_SIGN_ENCRYPT; } return CKR_OK; } static CK_RV handle_decrypt(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == CK_TRUE) { keydat->pub.publicArea.objectAttributes |= TPMA_OBJECT_DECRYPT; } else { keydat->pub.publicArea.objectAttributes &= ~TPMA_OBJECT_DECRYPT; } return CKR_OK; } static CK_RV handle_exp(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; UINT32 *e = &keydat->pub.publicArea.parameters.rsaDetail.exponent; if (attr->ulValueLen > sizeof(*e)) { return CKR_ATTRIBUTE_VALUE_INVALID; } BIGNUM *bn = NULL; bn = BN_bin2bn(attr->pValue, attr->ulValueLen, NULL); if (!bn) { return CKR_HOST_MEMORY; } BN_ULONG value = BN_get_word(bn); *e = value; BN_free(bn); return CKR_OK; } static CK_RV handle_ckobject_class(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); CK_OBJECT_CLASS class[2] = { CKA_PRIVATE, /* p11tool */ CKO_PRIVATE_KEY /* pkcs11-tool */ }; if (attr->ulValueLen != sizeof(class[0])) { LOGE("Expected CK_OBJECT_CLASS length to be %zu got %lu", sizeof(class), attr->ulValueLen); return CKR_ATTRIBUTE_VALUE_INVALID; } CK_OBJECT_CLASS_PTR class_ptr = (CK_OBJECT_CLASS_PTR)attr->pValue; size_t i; bool found = false; for (i=0; i < ARRAY_LEN(class); i++) { if (*class_ptr == class[i]) { found = true; break; } } if (!found) { LOGE("Unexpected CK_OBJECT_CLASS got %lu", *class_ptr); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV handle_extractable_common(CK_ATTRIBUTE_PTR attr, bool is_extractable, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == is_extractable ? true : false) { keydat->pub.publicArea.objectAttributes &= ~(TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT); } else { keydat->pub.publicArea.objectAttributes |= (TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT); } return CKR_OK; } static CK_RV handle_extractable(CK_ATTRIBUTE_PTR attr, void *udata) { return handle_extractable_common(attr, true, udata); } static CK_RV handle_sensitive(CK_ATTRIBUTE_PTR attr, void *udata) { return handle_extractable_common(attr, false, udata); } static CK_RV handle_key_type(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_ULONG value; CK_RV rv = attr_CK_ULONG(attr, &value); if (rv != CKR_OK) { return rv; } if ((value == CKK_RSA && keydat->pub.publicArea.type == TPM2_ALG_RSA) || (value == CKK_EC && keydat->pub.publicArea.type == TPM2_ALG_ECC)) { return CKR_OK; } return CKR_ATTRIBUTE_VALUE_INVALID; } static CK_RV sanity_check_mech(CK_MECHANISM_PTR mechanism) { switch (mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: /* falls-thru */ case CKM_EC_KEY_PAIR_GEN: break; default: LOGE("Only supports mechanism \"CKM_RSA_PKCS_KEY_PAIR_GEN\" or" "\"CKM_EC_KEY_PAIR_GEN\", got: 0x%lx", mechanism->mechanism); return CKR_MECHANISM_INVALID; } if (mechanism->ulParameterLen) { LOGE("Expected mechanism with an empty parameter, got length: %lu", mechanism->ulParameterLen); return CKR_MECHANISM_PARAM_INVALID; } if (mechanism->pParameter) { LOGE("Expected mechanism with an empty parameter, got a parameter pointer"); return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } static const attr_handler tpm_handlers[] = { { CKA_TOKEN, generic_bbool_true }, { CKA_PRIVATE, generic_bbool_any }, { CKA_VERIFY, handle_decrypt }, // Verify is same as decrypt { CKA_ENCRYPT, handle_encrypt }, { CKA_DECRYPT, handle_decrypt }, { CKA_SIGN, handle_encrypt }, // SIGN_ENCRYPT are same in TPM, depends on SCHEME { CKA_MODULUS_BITS, handle_modulus }, { CKA_PUBLIC_EXPONENT, handle_exp }, { CKA_SENSITIVE, handle_sensitive }, { CKA_CLASS, handle_ckobject_class }, { CKA_EXTRACTABLE, handle_extractable }, { CKA_EC_PARAMS, handle_ecparams }, { CKA_KEY_TYPE, handle_key_type }, { CKA_TRUSTED, generic_bbool_false }, { CKA_SIGN_RECOVER, generic_bbool_false }, { CKA_VERIFY_RECOVER, generic_bbool_false }, { CKA_DERIVE, generic_bbool_any }, }; static CK_RV tpm_data_init( CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_key_data *tpmdat) { memset(&tpmdat->priv, 0, sizeof(tpmdat->priv)); memset(&tpmdat->pub, 0, sizeof(tpmdat->pub)); switch(mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: tpmdat->pub = rsa_template; break; case CKM_EC_KEY_PAIR_GEN: tpmdat->pub = ecc_template; break; default: /* should never happen checked at entry */ LOGE("Unsupported key pair mechanism: 0x%lx", mechanism->mechanism); assert(0); return CKR_MECHANISM_INVALID; } CK_RV rv = attr_list_invoke_handlers(pubattrs, tpm_handlers, ARRAY_LEN(tpm_handlers), tpmdat); if (rv != CKR_OK) { return rv; } rv = attr_list_invoke_handlers(privattrs, tpm_handlers, ARRAY_LEN(tpm_handlers), tpmdat); if (rv != CKR_OK) { return rv; } return CKR_OK; } static CK_RV uint32_to_BN(uint32_t value, void **bytes, CK_ULONG_PTR len) { CK_RV rv = CKR_GENERAL_ERROR; BIGNUM *b = BN_new(); if (!b) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = BN_set_word(b, value); if (!rc) { LOGE("BN_set_word failed: %d", rc); goto out; } int l = BN_num_bytes(b); if (!l) { LOGE("Expected bignum to not be 0"); return CKR_GENERAL_ERROR; } void *x = malloc(l); if (!x) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } rc = BN_bn2bin(b, x); if (!rc) { free(x); LOGE("BN_bn2bin failed: %d", rc); goto out; } *bytes = x; *len = l; rv = CKR_OK; out: BN_free(b); return rv; } static CK_RV tpm_object_data_populate_rsa(TPM2B_PUBLIC *out_pub, tpm_object_data *objdata) { assert(out_pub); assert(objdata); /* MODULUS */ bool r = attr_list_add_buf(objdata->attrs, CKA_MODULUS, out_pub->publicArea.unique.rsa.buffer, out_pub->publicArea.unique.rsa.size); if (!r) { return CKR_GENERAL_ERROR; } UINT32 exp = out_pub->publicArea.parameters.rsaDetail.exponent; if (!exp) { exp = 65537; } void *buf = NULL; CK_ULONG len = 0; CK_RV rv = uint32_to_BN(exp, &buf, &len); if (rv != CKR_OK) { return rv; } r = attr_list_add_buf(objdata->attrs, CKA_PUBLIC_EXPONENT, buf, len); free(buf); if (!r) { return CKR_GENERAL_ERROR; } return CKR_OK; } static EC_POINT *tpm_pub_to_ossl_pub(EC_GROUP *group, TPM2B_PUBLIC *key) { BIGNUM *bn_x = NULL; BIGNUM *bn_y = NULL; EC_POINT *pub_key_point_tmp = NULL; EC_POINT *r = NULL; /* Create the big numbers for the coordinates of the point */ bn_x = BN_bin2bn(&key->publicArea.unique.ecc.x.buffer[0], key->publicArea.unique.ecc.x.size, NULL); if (!bn_x) { LOGE("Create big num from byte buffer."); goto out; } bn_y = BN_bin2bn(&key->publicArea.unique.ecc.y.buffer[0], key->publicArea.unique.ecc.y.size, NULL); if (!bn_y) { LOGE("Create big num from byte buffer."); goto out; } /* Create the ec point with the affine coordinates of the TPM point */ pub_key_point_tmp = EC_POINT_new(group); if (!pub_key_point_tmp) { LOGE("Could not create new affine point from X and Y coordinates"); goto out; } int rc = EC_POINT_set_affine_coordinates_GFp(group, pub_key_point_tmp, bn_x, bn_y, NULL); if (!rc) { EC_POINT_free(pub_key_point_tmp); LOGE("Could not set affine coordinate points"); goto out; } /* sanity check that the point created in the group is on the curve */ rc = EC_POINT_is_on_curve(group, pub_key_point_tmp, NULL); if (!rc) { EC_POINT_free(pub_key_point_tmp); LOGE("The TPM point is not on the curve"); goto out; } r = pub_key_point_tmp; out: BN_free(bn_x); BN_free(bn_y); return r; } static CK_RV tpm_object_data_populate_ecc(TPM2B_PUBLIC *out_pub, tpm_object_data *objdata) { CK_RV rv = CKR_GENERAL_ERROR; EC_GROUP *group = NULL; /* Group defines the used curve */ EC_POINT *tpm_pub_key = NULL; /* Public part of TPM key */ int curveId; unsigned char *mydata = NULL; /* Set ossl constant for curve type and create group for curve */ switch (out_pub->publicArea.parameters.eccDetail.curveID) { case TPM2_ECC_NIST_P192: curveId = NID_X9_62_prime192v1; break; case TPM2_ECC_NIST_P224: curveId = NID_secp224r1; break; case TPM2_ECC_NIST_P256: curveId = NID_X9_62_prime256v1; break; case TPM2_ECC_NIST_P384: curveId = NID_secp384r1; break; case TPM2_ECC_NIST_P521: curveId = NID_secp521r1; break; default: LOGE("ECC Curve not implemented"); return CKR_GENERAL_ERROR; } group = EC_GROUP_new_by_curve_name(curveId); if (!group) { LOGE("EC_GROUP_new failed"); goto out; } tpm_pub_key = tpm_pub_to_ossl_pub(group, out_pub); if (!tpm_pub_key){ goto out; } ssize_t len = EC_POINT_point2buf(group, tpm_pub_key, POINT_CONVERSION_UNCOMPRESSED, &mydata, NULL); if (len <= 0) { LOGE("EC_POINT_point2buf failed: %zd", len); goto out; } if (len > 255) { LOGE("Length must fit within a byte, got %zd", len); goto out; } /* * Build a DER encoded uncompressed representation of the points * per X9.62. * * TODO get better link to documentation around this or build * with OSSL. */ size_t tmp = 0; safe_add(tmp, len, 2); char *padded_data = malloc(tmp); if (!padded_data) { LOGE("oom"); goto out; } padded_data[0] = 4; padded_data[1] = len; memcpy(&padded_data[2], mydata, len); safe_adde(len, 2); bool r = attr_list_add_buf(objdata->attrs, CKA_EC_POINT, (CK_BYTE_PTR)padded_data, len); free(padded_data); if (!r) { goto out; } rv = CKR_OK; out: EC_POINT_free(tpm_pub_key); EC_GROUP_free(group); OPENSSL_free(mydata); return rv; } static CK_RV serialize_pub_priv_blobs(TPM2B_PUBLIC *pub, TPM2B_PRIVATE *priv, twist *pubblob, twist *privblob) { twist tmppub = NULL; twist tmppriv = NULL; BYTE pubb[sizeof(*pub)]; size_t pubb_size = 0; BYTE privb[sizeof(*priv)]; size_t privb_size = 0; size_t offset = 0; TSS2_RC rc = Tss2_MU_TPM2B_PUBLIC_Marshal(pub, pubb, sizeof(pubb), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PUBLIC_Marshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } pubb_size = offset; offset = 0; rc = Tss2_MU_TPM2B_PRIVATE_Marshal(priv, privb, sizeof(privb), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } privb_size = offset; tmppub = twistbin_new(pubb, pubb_size); if (!tmppub) { LOGE("oom"); return CKR_HOST_MEMORY; } tmppriv = twistbin_new(privb, privb_size); if (!tmppriv) { twist_free(tmppub); return CKR_HOST_MEMORY; } *pubblob = tmppub; *privblob = tmppriv; return CKR_OK; } CK_RV tpm2_generate_key( tpm_ctx *tpm, uint32_t parent, twist parentauth, twist newauthbin, CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_object_data *objdata) { twist tmppub = NULL; twist tmppriv = NULL; TPM2B_PUBLIC *out_pub = NULL; TPM2B_PRIVATE *out_priv = NULL; ESYS_TR out_handle = 0; CK_RV rv = CKR_GENERAL_ERROR; assert(objdata); rv = sanity_check_mech(mechanism); if (rv != CKR_OK) { goto error; } tpm_key_data tpmdat = { .ctx = tpm }; rv = tpm_data_init( mechanism, pubattrs, privattrs, &tpmdat); if (rv != CKR_OK) { goto error; } bool res = set_esys_auth(tpm->esys_ctx, parent, parentauth); if (!res) { rv = CKR_GENERAL_ERROR; goto error; } /* * Guaranteed to fit but throw an assert in just in case * utils_setup_new_object_auth() changes. */ TPM2B_AUTH *auth = &tpmdat.priv.sensitive.userAuth; size_t len = twist_len(newauthbin); assert(len < sizeof(auth->buffer)); auth->size = len; memcpy(auth->buffer, newauthbin, auth->size); TSS2_RC rc = create_loaded( tpm, parent, tpm->hmac_session, &tpmdat.priv, &tpmdat.pub, &out_handle, &out_pub, &out_priv ); if (rc != TSS2_RC_SUCCESS) { rv = CKR_GENERAL_ERROR; LOGE("create_loaded %s", Tss2_RC_Decode(rc)); goto error; } assert(out_pub); assert(out_priv); /* load the public only object portion */ res = tpm_loadexternal(tpm, out_pub, &objdata->pubhandle); if (!res) { rv = CKR_GENERAL_ERROR; goto error; } /* serialize the tpm public private object portions */ rv = serialize_pub_priv_blobs(out_pub, out_priv, &tmppub, &tmppriv); if (rv != CKR_OK) { goto error; } objdata->attrs = attr_list_new(); if (!objdata->attrs) { twist_free(tmppub); twist_free(tmppriv); LOGE("oom"); rv = CKR_HOST_MEMORY; goto error; } switch(mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: rv = tpm_object_data_populate_rsa(out_pub, objdata); break; case CKM_EC_KEY_PAIR_GEN: rv = tpm_object_data_populate_ecc(out_pub, objdata); break; default: LOGE("Impossible keygen type, got: 0x%lx", mechanism->mechanism); rv = CKR_MECHANISM_INVALID; assert(rv == CKR_OK); goto error; } if (rv != CKR_OK) { goto error; } /* everything common*/ TPMA_OBJECT objattrs = out_pub->publicArea.objectAttributes; CK_BBOOL extractable = !!!(objattrs & (TPMA_OBJECT_FIXEDTPM|TPMA_OBJECT_FIXEDPARENT)); bool r = attr_list_add_bool(objdata->attrs, CKA_EXTRACTABLE, extractable); goto_error_false(r); CK_BBOOL sensitive = !extractable; r = attr_list_add_bool(objdata->attrs, CKA_ALWAYS_SENSITIVE, sensitive); goto_error_false(r); CK_BBOOL never_extractable = !extractable; r = attr_list_add_bool(objdata->attrs, CKA_NEVER_EXTRACTABLE, never_extractable); goto_error_false(r); CK_BBOOL local = !!(objattrs & TPMA_OBJECT_SENSITIVEDATAORIGIN); r = attr_list_add_bool(objdata->attrs, CKA_LOCAL, local); goto_error_false(r); /* conditional block */ CK_BBOOL decrypt = !!(objattrs & TPMA_OBJECT_DECRYPT); r = attr_list_add_bool(objdata->attrs, CKA_DECRYPT, decrypt); goto_error_false(r); /* decrypt and verify are the same */ r = attr_list_add_bool(objdata->attrs, CKA_VERIFY, decrypt); goto_error_false(r); CK_BBOOL sign = !!(objattrs & TPMA_OBJECT_SIGN_ENCRYPT); r = attr_list_add_bool(objdata->attrs, CKA_SIGN, sign); goto_error_false(r); /* sign and encrypt are same */ r = attr_list_add_bool(objdata->attrs, CKA_ENCRYPT, sign); goto_error_false(r); objdata->privblob = tmppriv; objdata->pubblob = tmppub; objdata->privhandle = out_handle; rv = CKR_OK; error: Esys_Free(out_pub); Esys_Free(out_priv); if (rv != CKR_OK) { tpm_objdata_free(objdata); } return rv; } void tpm_objdata_free(tpm_object_data *objdata) { if (!objdata) { return; } attr_list_free(objdata->attrs); twist_free(objdata->privblob); twist_free(objdata->pubblob); } CK_RV tpm_get_algorithms(tpm_ctx *ctx, TPMS_CAPABILITY_DATA **capabilityData) { if (ctx->tpms_alg_cache) { *capabilityData = ctx->tpms_alg_cache; return CKR_OK; } TPM2_CAP capability = TPM2_CAP_ALGS; UINT32 property = TPM2_ALG_FIRST; UINT32 propertyCount = TPM2_MAX_CAP_ALGS; TPMI_YES_NO moreData; check_pointer(ctx); check_pointer(capabilityData); TPMS_CAPABILITY_DATA *capdata = NULL; TSS2_RC rval = Esys_GetCapability(ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, &capdata); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *capabilityData = ctx->tpms_alg_cache = capdata; return CKR_OK; } static CK_BBOOL is_algorithm_supported(TPMU_CAPABILITIES *capabilities, TPM2_ALG_ID algorithm){ for (unsigned int i = 0 ; i < capabilities->algorithms.count ; i++){ if (capabilities->algorithms.algProperties[i].alg == algorithm){ return CK_TRUE; } } return CK_FALSE; } #define add_mech(mech) \ if (mechanism_list) { /* Only update if not called for size*/ \ if (*count <= supported) { \ rv = CKR_BUFFER_TOO_SMALL; \ goto out; \ } \ mechanism_list[supported] = mech; \ } \ supported++; #define if_add_mech(list, test, mech) \ if (is_algorithm_supported(list, test)) { \ add_mech(mech); \ } static CK_RV tpm2_get_modes(tpm_ctx *ctx, TPMA_MODES *modes) { /* get the TPMA_MODES field from fixed properties */ TPMS_CAPABILITY_DATA *fixed_props = NULL; CK_RV rv = tpm_get_properties(ctx, &fixed_props); if (rv != CKR_OK) { LOGE("Could not get fixed properties from TPM"); return rv; } TPML_TAGGED_TPM_PROPERTY *plist = &fixed_props->data.tpmProperties; UINT32 i; for (i = 0; i < plist->count; i++) { TPM2_PT property = plist->tpmProperty[i].property; if (property == TPM2_PT_MODES) { *modes = plist->tpmProperty[i].value; return CKR_OK; } } /* if we don't find it, we just say modes is implicitly empty */ *modes = 0; return CKR_OK; } CK_RV tpm2_getmechanisms(tpm_ctx *ctx, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count){ check_pointer(count); check_pointer(ctx); CK_ULONG supported = 0; TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rv = tpm_get_algorithms(ctx, &capabilityData); if (rv != CKR_OK) { LOGE("Retrieving supported algorithms from TPM failed"); return rv; } TPMU_CAPABILITIES *algs= &capabilityData->data; /* get the TPMA_MODES field from fixed properties */ TPMA_MODES modes = 0; rv = tpm2_get_modes(ctx, &modes); if (rv != CKR_OK) { return rv; } /* RSA */ if (is_algorithm_supported(algs, TPM2_ALG_RSA)) { /* if RSA is supported, these modes MUST be supported */ add_mech(CKM_RSA_PKCS); add_mech(CKM_RSA_PKCS_OAEP); add_mech(CKM_RSA_PKCS_KEY_PAIR_GEN); add_mech(CKM_RSA_X_509); if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA1_RSA_PKCS) if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_RSA_PKCS); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_RSA_PKCS); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_RSA_PKCS); /* * RSA PSS signatures, per Anex B7 of: * - https://trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-1-Architecture-01.38.pdf * * States that the saltlen is the maximum permitted. However, most things, and the TLS spec * call out that saltlen should equal hashlength. However, in FIPS-140-2 mode, the saltlen * does equal hash length, so: * - if fips mode is on, we can support it nativeley * - if fips mode is off, we can synthesize it by applying the padding * and using raw RSA. */ if (modes & TPMA_MODES_FIPS_140_2) { add_mech(CKM_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA1_RSA_PKCS_PSS) if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_RSA_PKCS_PSS); } } /* ECC */ if (is_algorithm_supported(algs, TPM2_ALG_ECC)) { add_mech(CKM_EC_KEY_PAIR_GEN); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA1); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA256); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA384); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA512); } /* AES */ if (is_algorithm_supported(algs, TPM2_ALG_AES)) { add_mech(CKM_AES_KEY_GEN); if_add_mech(algs, TPM2_ALG_CBC, CKM_AES_CBC); if_add_mech(algs, TPM2_ALG_CBC, CKM_AES_CBC_PAD); if_add_mech(algs, TPM2_ALG_CFB, CKM_AES_CFB128); if_add_mech(algs, TPM2_ALG_ECB, CKM_AES_ECB); if_add_mech(algs, TPM2_ALG_CTR, CKM_AES_CTR); } /* HMAC */ if (is_algorithm_supported(algs, TPM2_ALG_KEYEDHASH)) { if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA_1_HMAC); if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_HMAC); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_HMAC); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_HMAC); } out: *count = supported; return rv; } void tpm_init(void) { /* pass nothing to do */ } void tpm_destroy(void) { /* pass nothing to do */ } CK_RV tpm_serialize_handle(ESYS_CONTEXT *esys, ESYS_TR handle, twist *buf) { assert(buf); uint8_t *buffer = NULL; size_t size = 0; TSS2_RC rval = Esys_TR_Serialize(esys, handle, &buffer, &size); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_Serialize: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } twist t = twistbin_new(buffer, size); Esys_Free(buffer); if (!t) { LOGE("oom"); return CKR_HOST_MEMORY; } *buf = t; return CKR_OK; } #define PARAM_1_HANDLE_IS_INVALID 0x0000018b CK_RV tpm_get_existing_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob) { assert(tpm); assert(tpm->esys_ctx); assert(primary_blob); ESYS_TR handle = ESYS_TR_NONE; TPMI_YES_NO more_data = TPM2_NO; TPMS_CAPABILITY_DATA *capdata = NULL; /* Check for the handle here to avoid causing TPM2_ReadPublic to fail loudly */ TSS2_RC rval = Esys_GetCapability( tpm->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, TPM2_CAP_HANDLES, TPM2_PERSISTENT_FIRST, TPM2_MAX_CAP_HANDLES, &more_data, &capdata); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2_HANDLE find_handle = DEFAULT_SRK_HANDLE; bool found = false; UINT32 i; TPM2_HANDLE *found_handles = capdata->data.handles.handle; for (i=0; i < capdata->data.handles.count; i++) { if (find_handle == found_handles[i]) { found = true; break; } } Esys_Free(capdata); if (!found) { *primary_handle = 0; LOGV("No Provisioning Guide Spec Key Handle"); return CKR_OK; } rval = Esys_TR_FromTPMPublic( tpm->esys_ctx, find_handle, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_FromTPMPublic: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = tpm_serialize_handle(tpm->esys_ctx, handle, primary_blob); if (rv != CKR_OK) { return rv; } *primary_handle = handle; return CKR_OK; } typedef CK_RV (*pfn_populate)(tpm_ctx *tpm, TPM2B_PUBLIC *pub); typedef struct key_template key_template; struct key_template { const char *template_name; pfn_populate fn; }; static CK_RV tss2_engine_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { assert(tpm); static const TPM2B_PUBLIC primary_ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH |TPMA_OBJECT_RESTRICTED |TPMA_OBJECT_DECRYPT |TPMA_OBJECT_NODA |TPMA_OBJECT_FIXEDTPM |TPMA_OBJECT_FIXEDPARENT |TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { 0 }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, } /* end TPMT */ }; static const TPM2B_PUBLIC primary_rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH |TPMA_OBJECT_RESTRICTED |TPMA_OBJECT_DECRYPT |TPMA_OBJECT_NODA |TPMA_OBJECT_FIXEDTPM |TPMA_OBJECT_FIXEDPARENT |TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { 0 }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = {} }, .keyBits = 2048, .exponent = 0, } }, /* end TPMT */ }; TPMS_CAPABILITY_DATA *cap_data = NULL; CK_RV rv = tpm_get_algorithms(tpm, &cap_data); if (rv != CKR_OK) { return rv; } bool supports_ecc = false; bool supports_rsa = false; TPML_ALG_PROPERTY *algs = &cap_data->data.algorithms; UINT32 i; for (i=0; i < algs->count; i++) { TPMS_ALG_PROPERTY *p = &algs->algProperties[i]; if (p->alg == TPM2_ALG_ECC) { supports_ecc = true; } else if (p->alg == TPM2_ALG_RSA) { supports_rsa = true; } /* nothing left to examine, exit loop */ if (supports_ecc && supports_rsa) { break; } } if (!supports_rsa && !supports_ecc) { LOGE("TPM Supports niether ECC nor RSA?"); return CKR_GENERAL_ERROR; } *pub = supports_ecc ? primary_ecc_template : primary_rsa_template; return CKR_OK; } static CK_RV tpm2_tools_default_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { UNUSED(tpm); /* fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt */ static const TPM2B_PUBLIC primary_rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT , .authPolicy = { 0 }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = {} }, .keyBits = 2048, .exponent = 0, } }, /* end TPMT */ }; *pub = primary_rsa_template; return CKR_OK; } static CK_RV tpm2_tools_default_ecc_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { UNUSED(tpm); /* fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt */ static const TPM2B_PUBLIC primary_ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT , .authPolicy = { 0 }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, }, /* end TPMT */ }; *pub = primary_ecc_template; return CKR_OK; } /* * Mapping friendly string names to primary objects templates */ static const key_template TEMPLATES[] = { { .template_name = "tss2-engine-key", .fn = tss2_engine_pub_populator, }, { .template_name= "tpm2-tools-default", .fn = tpm2_tools_default_pub_populator, }, { .template_name= "tpm2-tools-ecc-default", .fn = tpm2_tools_default_ecc_pub_populator, } }; WEAK CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, twist pobj_auth, uint32_t *primary_handle) { const key_template *templ = NULL; size_t i; for(i=0; i < ARRAY_LEN(TEMPLATES); i++) { const key_template *t = &TEMPLATES[i]; if (!strcmp(template_name, t->template_name)) { templ = t; break; } } if (!templ) { LOGE("No match for template with name: \"%s\"", template_name); return CKR_GENERAL_ERROR; } /* TODO make configurable ? */ ESYS_TR hierarchy = ESYS_TR_RH_OWNER; TPM2B_AUTH hieararchy_auth = { 0 }; /* * Hierarchy is currently fixed to owner auth, but eventually * this could be: * TPM2_PKCS11__AUTH where is one of: * OWNER * PLATFORM * ENDORSEMENT * NULL */ const char *auth = getenv("TPM2_PKCS11_OWNER_AUTH"); if (auth && auth[0]) { size_t len = strlen(auth); if (len > sizeof(hieararchy_auth.buffer)) { LOGE("TPM2_PKCS11_HIERARCHY_AUTH is too big. Max size is: %zu", sizeof(hieararchy_auth.buffer)); return CKR_GENERAL_ERROR; } hieararchy_auth.size = (typeof(hieararchy_auth.size))len; memcpy(hieararchy_auth.buffer, auth, len); } TPM2B_DATA outside_info = { 0 }; TPML_PCR_SELECTION pcrs = { 0 }; TPM2B_SENSITIVE_CREATE in_sens = { 0 }; if (pobj_auth) { size_t len = twist_len(pobj_auth); TPM2B_AUTH *a = &in_sens.sensitive.userAuth; if (len > sizeof(a->buffer)) { LOGE("pobject auth too large"); return CKR_GENERAL_ERROR; } a->size = (UINT16)len; memcpy(a->buffer, pobj_auth, len); } TSS2_RC rval = Esys_TR_SetAuth(tpm->esys_ctx, hierarchy, &hieararchy_auth); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_SetAuth: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2B_PUBLIC in_pub = { 0 }; CK_RV rv = templ->fn(tpm, &in_pub); if (rv != CKR_OK) { LOGE("Template population routine failed: 0x%lx", rv); return rv; } TPM2B_PUBLIC *out_pub = NULL; TPM2B_CREATION_DATA *data = NULL; TPM2B_DIGEST *hash = NULL; TPMT_TK_CREATION *ticket = NULL; ESYS_TR handle = ESYS_TR_NONE; rval = Esys_CreatePrimary(tpm->esys_ctx, hierarchy, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &in_sens, &in_pub, &outside_info, &pcrs, &handle, &out_pub, &data, &hash, &ticket); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_CreatePrimary: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *primary_handle = handle; return CKR_OK; } CK_RV tpm_create_persistent_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob) { assert(tpm); assert(primary_blob); assert(tpm->esys_ctx); /* TODO make configurable ? */ ESYS_TR hierarchy = ESYS_TR_RH_OWNER; TPM2B_AUTH hieararchy_auth = { 0 }; TPM2B_SENSITIVE_CREATE sens = { 0 }; /* TODO use proper template ? */ // https://trustedcomputinggroup.org/wp-content/uploads/Credential_Profile_EK_V2.0_R14_published.pdf // https://trustedcomputinggroup.org/wp-content/uploads/TCG_PC_Client_Platform_TPM_Profile_PTP_2.0_r1.03_v22.pdf TPM2B_PUBLIC pub_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT | TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { .size = 0, }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, }, }; TPM2B_DATA outside_info = { 0 }; TPML_PCR_SELECTION pcrs = { 0 }; TSS2_RC rval = Esys_TR_SetAuth(tpm->esys_ctx, hierarchy, &hieararchy_auth); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_SetAuth: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2B_PUBLIC *out_pub = NULL; TPM2B_CREATION_DATA *data = NULL; TPM2B_DIGEST *hash = NULL; TPMT_TK_CREATION *ticket = NULL; ESYS_TR handle = ESYS_TR_NONE; rval = Esys_CreatePrimary(tpm->esys_ctx, hierarchy, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &sens, &pub_template, &outside_info, &pcrs, &handle, &out_pub, &data, &hash, &ticket); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_CreatePrimary: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } Esys_Free(data); Esys_Free(hash); Esys_Free(ticket); Esys_Free(out_pub); // XXX should we be creating this here, if so it should probably // match provisioning spec ESYS_TR new_handle = ESYS_TR_NONE; rval = Esys_EvictControl(tpm->esys_ctx, ESYS_TR_RH_OWNER, handle, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, DEFAULT_SRK_HANDLE, &new_handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_EvictControl: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = tpm_serialize_handle(tpm->esys_ctx, new_handle, primary_blob); if (rv != CKR_OK) { return rv; } *primary_handle = new_handle; return CKR_OK; } CK_RV tpm_get_pss_sig_state(tpm_ctx *tctx, tobject *tobj, bool *pss_sigs_good) { CK_RV rv = CKR_GENERAL_ERROR; TPM2B_PRIVATE *out_priv = NULL; TPM2B_PUBLIC *out_pub = NULL; TPMT_SIGNATURE *signature = NULL; EVP_PKEY *pkey = NULL; EVP_PKEY_CTX *pkey_ctx = NULL; /* * do the fastest operation to figure this out front by checking, * the hopefully cached, FIPS_140_2 mode bit */ TPMA_MODES modes = 0; rv = tpm2_get_modes(tctx, &modes); if (rv != CKR_OK) { return rv; } if (modes & TPMA_MODES_FIPS_140_2) { *pss_sigs_good = true; return CKR_OK; } /* Sign something using RSA PSS SHA256 */ static const TPM2B_DIGEST dgst = { .size = 32, .buffer = { 0xb5, 0xbb, 0x9d, 0x80, 0x14, 0xa0, 0xf9, 0xb1, 0xd6, 0x1e, 0x21, 0xe7, 0x96, 0xd7, 0x8d, 0xcc, 0xdf, 0x13, 0x52, 0xf2, 0x3c, 0xd3, 0x28, 0x12, 0xf4, 0x85, 0x0b, 0x87, 0x8a, 0xe4, 0x94, 0x4c } }; TPMT_SIG_SCHEME scheme = { 0 }; scheme.scheme = TPM2_ALG_RSAPSS; scheme.details.rsapss.hashAlg = TPM2_ALG_SHA256; TPMT_TK_HASHCHECK validation = { .tag = TPM2_ST_HASHCHECK, .hierarchy = TPM2_RH_NULL, .digest = { 0 } }; bool res = set_esys_auth(tctx->esys_ctx, tobj->tpm_handle, tobj->unsealed_auth); if (!res) { return CKR_GENERAL_ERROR; } TSS2_RC rval = Esys_Sign( tctx->esys_ctx, tobj->tpm_handle, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &dgst, &scheme, &validation, &signature); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); goto out; } rv = ssl_util_tobject_to_evp(&pkey, tobj); if (rv != CKR_OK) { goto out; } rv = ssl_util_setup_evp_pkey_ctx(pkey, RSA_PKCS1_PSS_PADDING, EVP_sha256(), EVP_PKEY_verify_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_CTX_set_rsa_pss_saltlen(pkey_ctx, RSA_PSS_SALTLEN_DIGEST); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen" " RSA_PSS_SALTLEN_DIGEST failed"); goto out; } TPM2B_PUBLIC_KEY_RSA *sig = &signature->signature.rsapss.sig; rc = EVP_PKEY_verify(pkey_ctx, sig->buffer, sig->size, dgst.buffer, dgst.size); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify failed"); goto out; } if (rc == 1) { *pss_sigs_good = true; } else { *pss_sigs_good = false; } rv = CKR_OK; out: EVP_PKEY_CTX_free(pkey_ctx); EVP_PKEY_free(pkey); Esys_Free(out_priv); Esys_Free(out_pub); Esys_Free(signature); return rv; } tpm2-pkcs11-1.7.0/src/lib/random.h0000644000175000017500000000065313754763565013441 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_RANDOM_H_ #define SRC_PKCS11_RANDOM_H_ #include "pkcs11.h" #include "session_ctx.h" typedef struct token token; typedef struct session_ctx session_ctx; CK_RV random_get(session_ctx *ctx, unsigned char *random_data, unsigned long random_len); CK_RV seed_random(session_ctx *ctx, unsigned char *seed, unsigned long seed_len); #endif /* SRC_PKCS11_RANDOM_H_ */ tpm2-pkcs11-1.7.0/src/lib/token.h0000664000175000017500000001162314114240163013251 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_TOKEN_H_ #define SRC_TOKEN_H_ #include "checks.h" #include "pkcs11.h" #include "session_ctx.h" #include "tpm.h" #include "twist.h" #include "utils.h" typedef enum pss_config_state pss_config_state; enum pss_config_state { pss_config_state_unk = 0, pss_config_state_bad, pss_config_state_good, }; typedef struct token_config token_config; struct token_config { bool is_initialized; /* token initialization state */ char *tcti; /* token specific tcti config */ pss_config_state pss_sigs_good; bool empty_user_pin; /* user PIN of the token is empty */ }; typedef struct session_table session_table; typedef struct session_ctx session_ctx; typedef enum token_login_state token_login_state; enum token_login_state { token_no_one_logged_in = 0, token_user_logged_in = 1 << 0, token_so_logged_in = 1 << 1, }; typedef struct tobject tobject; typedef struct pobject_config pobject_config; struct pobject_config { bool is_transient; union { char *template_name; twist blob; }; }; typedef struct pobject pobject; struct pobject { twist objauth; uint32_t handle; pobject_config config; }; typedef struct sealobject sealobject; struct sealobject { twist userpub; twist userpriv; twist userauthsalt; twist sopub; twist sopriv; twist soauthsalt; }; enum token_type { token_type_esysdb = 0, token_type_fapi }; typedef struct mdetail mdetail; typedef struct token token; struct token { unsigned id; unsigned pid; unsigned char label[32]; enum token_type type; token_config config; pobject pobject; union { /* anon union for backend data */ struct { sealobject sealobject; } esysdb; /* esysdb */ struct { void *ctx; twist userauthsalt; twist soauthsalt; } fapi; }; /* This context will be filled by fapi for use with esys-only commands. */ tpm_ctx *tctx; twist wrappingkey; struct { tobject *head; tobject *tail; } tobjects; session_table *s_table; token_login_state login_state; mdetail *mdtl; void *mutex; }; /** * Frees a token * @param t * The token to free */ void token_free(token *t); /** * Free's a token_config * @param c * The token config to free. */ void token_config_free(token_config *c); /** * Free's a list of tokens * @param t * The token list to free * @param len * The number of elements to free * @note * Sets the token pointer to NULL and len to 0. */ void token_free_list(token **t, size_t *len); /** * Adds a tobject into the token tobject list filling in * gaps along the way and using the gap index as the object * handle index. * @param tok * The token to insert into. * @param t * The tobject to insert. * @return * CKR_OK on success. */ CK_RV token_add_tobject(token *tok, tobject *t); CK_RV token_find_tobject(token *tok, CK_OBJECT_HANDLE handle, tobject **tobj); /** * Adds a tobject to the END of the tobject list incrementing the * previous tobject index number and using that. This DOES NOT gap * fill, and thus is really best for use only in the DB initialization * logic to prevent multiple iterations of the linked list during initialization. * @param tok * The token to insert into. * @param t * The tobject to insert. * @return * CKR_OK on success. */ CK_RV token_add_tobject_last(token *tok, tobject *t); void token_rm_tobject(token *tok, tobject *t); CK_RV token_get_info(token *t, CK_TOKEN_INFO *info); /** * Checks if anyone is logged into the token. * @param tok * The token to check * @return * True if logged in, false otherwise. */ bool token_is_any_user_logged_in(token *tok); bool token_is_user_logged_in(token *tok); bool token_is_so_logged_in(token *tok); /** * TODO * @param tok * @param old_pin * @param old_len * @param new_pin * @param new_len * @return */ CK_RV token_setpin(token *tok, CK_UTF8CHAR_PTR old_pin, CK_ULONG old_len, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len); CK_RV token_initpin(token *tok, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len); void token_lock(token *t); void token_unlock(token *t); /** * Look up and possibly load an unloaded tobject. * @param tok * The token to look up the object on. * @param key * The object handle to look for. * @param loaded_tobj * The pointer to the backing tobject * @return * CKR_OK - everything is good. * CKR_INVALID_KEY_HANDLE - not found * CKR_KEY_HANDLE_INVALID - invalid key handle * Others like: CKR_GENERAL_ERROR and CKR_HOST_MEMORY */ CK_RV token_load_object(token *tok, CK_OBJECT_HANDLE key, tobject **loaded_tobj); CK_RV token_min_init(token *t); void token_reset(token *t); CK_RV token_init(token *t, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label); void pobject_config_free(pobject_config *c); #endif /* SRC_TOKEN_H_ */ tpm2-pkcs11-1.7.0/src/lib/session_ctx.c0000664000175000017500000002333114114236775014502 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "attrs.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session_ctx.h" #include "session_table.h" #include "token.h" #include "twist.h" #include "utils.h" #include "backend.h" struct session_ctx { CK_FLAGS flags; CK_STATE state; token *tok; generic_opdata opdata; opdata_free_fn free; }; void session_ctx_free(session_ctx *ctx) { if (!ctx) { return; } session_ctx_opdata_clear(ctx); free(ctx); } /** * Sets the initial state of the a session context based on the tokens login state * and the flags present. Does no error checking. * @param ctx * The session ctx to set * @param tok * The token state to check * @param flags * The session flags. */ static void session_set_initial_state(session_ctx *ctx, token_login_state state, CK_FLAGS flags) { switch(state) { case token_no_one_logged_in: ctx->state = flags & CKF_RW_SESSION ? CKS_RW_PUBLIC_SESSION : CKS_RO_PUBLIC_SESSION; break; case token_user_logged_in: ctx->state = flags & CKF_RW_SESSION ? CKS_RW_USER_FUNCTIONS : CKS_RO_USER_FUNCTIONS; break; case token_so_logged_in: assert(flags & CKF_RW_SESSION); ctx->state = CKS_RW_SO_FUNCTIONS; break; /* no default */ } } CK_RV session_ctx_new(session_ctx **ctx, token *tok, CK_FLAGS flags) { session_ctx *s = calloc(1, sizeof(session_ctx)); if (!s) { return CKR_HOST_MEMORY; } session_set_initial_state(s, tok->login_state, flags); s->flags = flags; s->tok = tok; *ctx = s; return CKR_OK; } CK_STATE session_ctx_state_get(session_ctx *ctx) { return ctx->state; } CK_FLAGS session_ctx_flags_get(session_ctx *ctx) { return ctx->flags; } token *session_ctx_get_token(session_ctx *ctx) { return ctx->tok; } void session_ctx_login_event(session_ctx *ctx, CK_USER_TYPE usertype) { /* * S/O REQUIRES a R/W start state and transitions * to CKS_RW_SO_FUNCTIONS * * Users can start in a RO or RW PUBLIC Session and transition * on that to either RO or RW USER FUNCTION state * * See Section 5 of: * - https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf */ if (usertype == CKU_SO) { assert(ctx->state == CKS_RW_PUBLIC_SESSION); ctx->state = CKS_RW_SO_FUNCTIONS; } else { assert(ctx->state == CKS_RO_PUBLIC_SESSION || ctx->state == CKS_RW_PUBLIC_SESSION); if (ctx->state == CKS_RO_PUBLIC_SESSION) { ctx->state = CKS_RO_USER_FUNCTIONS; } else { ctx->state = CKS_RW_USER_FUNCTIONS; } } } void session_ctx_logout_event(session_ctx *ctx) { /* * Returns a session back to it's initial state. * See the comment block insession_ctx_login() for details */ if (ctx->state == CKS_RW_SO_FUNCTIONS || ctx->state == CKS_RW_USER_FUNCTIONS) { ctx->state = CKS_RW_PUBLIC_SESSION; } else { ctx->state = CKS_RO_PUBLIC_SESSION; } } CK_RV _session_ctx_opdata_get(session_ctx *ctx, operation op, void **data) { if (op != ctx->opdata.op) { return CKR_OPERATION_NOT_INITIALIZED; } *data = ctx->opdata.data; return CKR_OK; } bool session_ctx_opdata_is_active(session_ctx *ctx) { return ctx->opdata.op != operation_none; } void session_ctx_opdata_set(session_ctx *ctx, operation op, tobject *tobj, void *data, opdata_free_fn fn) { ctx->opdata.op = op; ctx->opdata.tobj = tobj; ctx->opdata.data = data; ctx->free = fn; } void session_ctx_opdata_clear(session_ctx *ctx) { if (ctx->free && ctx->opdata.data) { ctx->free(&ctx->opdata.data); } session_ctx_opdata_set(ctx, operation_none, NULL, NULL, NULL); } static bool is_user(CK_USER_TYPE user) { return user == CKU_USER || user == CKU_CONTEXT_SPECIFIC; } tobject *session_ctx_opdata_get_tobject(session_ctx *ctx) { return ctx->opdata.tobj; } CK_RV session_ctx_login(session_ctx *ctx, CK_USER_TYPE user, CK_BYTE_PTR pin, CK_ULONG pinlen) { if (user != CKU_SO && user != CKU_USER && user != CKU_CONTEXT_SPECIFIC) { return CKR_USER_TYPE_INVALID; } CK_RV rv = CKR_GENERAL_ERROR; token *tok = session_ctx_get_token(ctx); assert(tok); bool is_anyone_logged_in = token_is_any_user_logged_in(tok); if (is_anyone_logged_in) { /* context specific user login's require USER logged in */ if (user != CKU_CONTEXT_SPECIFIC || tok->login_state != token_user_logged_in) { return CKR_USER_ALREADY_LOGGED_IN; } } else if (user == CKU_CONTEXT_SPECIFIC) { /* * is this a valid assertion? Most flows I see have a C_Login(user) before * the context specific login... */ return CKR_USER_NOT_LOGGED_IN; } CK_ULONG ro; session_table_get_cnt(tok->s_table, NULL, NULL, &ro); if (user == CKU_SO && ro) { return CKR_SESSION_READ_ONLY_EXISTS; } /* so pin will NOT be set */ if (!tok->config.is_initialized) { return CKR_OPERATION_NOT_INITIALIZED; } /* * context specific logins require an active object * also the session state DOESN'T change, so we set * a flag that its a context specific login in the * session state for tracking so we can logout when * done and check state when an operation is occurring. */ if (user == CKU_CONTEXT_SPECIFIC) { /* an object must be active */ bool is_active = session_ctx_opdata_is_active(ctx); if (!is_active || !ctx->opdata.tobj) { return CKR_OPERATION_NOT_INITIALIZED; } } twist tpin = twistbin_new(pin, pinlen); if (!tpin) { return CKR_HOST_MEMORY; } rv = backend_token_unseal_wrapping_key(tok, is_user(user), tpin); twist_free(tpin); if (rv != CKR_OK) { LOGE("Error unsealing wrapping key"); return rv; } /* * Indicate that the token has been logged in. For CKU_CONTEXT_SPECIFIC the spec * states that on both cases (appears to be fail or success of C_Login) session * state does not change. This is because C_Login(USER) should have already occurred * and is validated above. */ if (user == CKU_CONTEXT_SPECIFIC) { /* object use verified */ ctx->opdata.tobj->is_authenticated = true; } else { tok->login_state = user == CKU_USER ? token_user_logged_in : token_so_logged_in; /* * State transition all *EXISTING* sessions in the table */ session_table_login_event(tok->s_table, user); } return CKR_OK; } CK_RV session_ctx_logout(session_ctx *ctx) { token *tok = session_ctx_get_token(ctx); assert(tok); bool is_anyone_logged_in = token_is_any_user_logged_in(tok); if (!is_anyone_logged_in) { return CKR_USER_NOT_LOGGED_IN; } /* clear the wrapping key */ assert(tok->wrappingkey); /* cleanse the wrapping key */ if (tok->wrappingkey) { OPENSSL_cleanse((void *)tok->wrappingkey, twist_len(tok->wrappingkey)); twist_free(tok->wrappingkey); tok->wrappingkey = NULL; } /* * Ok now start evicting TPM objects from the right * context */ tpm_ctx *tpm = tok->tctx; /* * For each object: * - Evict the TPM Handles * - Cleanse CKA_VALUE fields for private values. */ if (tok->tobjects.head) { list *cur = &tok->tobjects.head->l; while(cur) { tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; /* if it's CKA_PRIVATE == CK_TRUE and it has a CKA_VALUE field, clear it */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_VALUE); if (cka_private && a && a->pValue && a->ulValueLen) { attr_pfree_cleanse(a); } if (tobj->tpm_handle) { bool result = tpm_flushcontext(tpm, tobj->tpm_handle); assert(result); UNUSED(result); tobj->tpm_handle = 0; /* Clear the unwrapped auth value for tertiary objects */ twist_free(tobj->unsealed_auth); tobj->unsealed_auth = NULL; } } } /* * State transition all sessions in the table */ token_logout_all_sessions(tok); /* * mark no one logged in */ tok->login_state = token_no_one_logged_in; tpm_session_stop(tok->tctx); return CKR_OK; } CK_RV session_ctx_get_info(session_ctx *ctx, CK_SESSION_INFO *info) { check_pointer(info); token *tok = session_ctx_get_token(ctx); assert(tok); info->flags = session_ctx_flags_get(ctx); info->slotID = tok->id; info->state = session_ctx_state_get(ctx); // We'll need to set this state error at some point, perhaps TSS2_RC's info->ulDeviceError = 0; return CKR_OK; } CK_RV session_ctx_tobject_authenticated(session_ctx *ctx) { tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); CK_ATTRIBUTE_PTR p = attr_get_attribute_by_type(tobj->attrs, CKA_ALWAYS_AUTHENTICATE); bool has_always_auth = false; if (p) { assert(p->ulValueLen == sizeof(CK_BBOOL)); CK_BBOOL *b = (CK_BBOOL *)p->pValue; assert(*b == CK_TRUE || *b == CK_FALSE); has_always_auth = *b == CK_TRUE; } if(has_always_auth && !tobj->is_authenticated) { return CKR_USER_NOT_LOGGED_IN; } return CKR_OK; } tpm2-pkcs11-1.7.0/src/lib/db.c0000664000175000017500000020441014114240163012507 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "db.h" #include "debug.h" #include "emitter.h" #include "log.h" #include "mutex.h" #include "object.h" #include "parser.h" #include "session_table.h" #include "token.h" #include "tpm.h" #include "twist.h" #include "utils.h" #include #ifndef TPM2_PKCS11_STORE_DIR #define TPM2_PKCS11_STORE_DIR "/etc/tpm2_pkcs11" #endif #define DB_VERSION 7 #define goto_oom(x, l) if (!x) { LOGE("oom"); goto l; } #define goto_error(x, l) if (x) { goto l; } #define gotobinderror(rc, msg) do { if (rc) { LOGE("cannot bind "msg); goto error; } } while(0) #define TRANSACTION_START \ do { \ bool _transaction_active = false; \ if (start() != SQLITE_OK) { \ goto error; \ } \ \ _transaction_active = true; #define TRANSACTION_END(rx) \ error: \ if (_transaction_active) { \ if (rv == CKR_OK) { \ if(commit() != SQLITE_OK) { \ rollback(); \ rx = CKR_GENERAL_ERROR; \ } \ } else { \ rollback(); \ } \ } \ } while (0); #define CKR_VENDOR_SKIP (CKR_VENDOR_DEFINED | 0x01) static struct { sqlite3 *db; } global; static inline void _sqlite3_finalize_warn(sqlite3 *db, sqlite3_stmt *stmt) { int rc = sqlite3_finalize(stmt); if (rc != SQLITE_OK) { LOGW("sqlite3_finalize: %s", sqlite3_errmsg(db)); } } static inline void sqlite3_finalize_warn(sqlite3_stmt *stmt) { if (stmt) { _sqlite3_finalize_warn(global.db, stmt); } } static int _get_blob(sqlite3_stmt *stmt, int i, bool can_be_null, twist *blob) { /* This cannot return < 0 */ int size = sqlite3_column_bytes(stmt, i); assert(size >= 0); if (size == 0) { return can_be_null ? SQLITE_OK : SQLITE_ERROR; } /* 0 length is the only way it will return NULL */ const void *data = sqlite3_column_blob(stmt, i); assert(data); *blob = twistbin_new(data, size); if (!*blob) { LOGE("oom"); return SQLITE_ERROR; } return SQLITE_OK; } DEBUG_VISIBILITY int get_blob_null(sqlite3_stmt *stmt, int i, twist *blob) { return _get_blob(stmt, i, true, blob); } DEBUG_VISIBILITY int get_blob(sqlite3_stmt *stmt, int i, twist *blob) { return _get_blob(stmt, i, false, blob); } typedef struct token_get_cb_ud token_get_cb_ud; struct token_get_cb_ud { size_t offset; size_t len; token *tokens; }; DEBUG_VISIBILITY tobject *__real_db_tobject_new(sqlite3_stmt *stmt) { tobject *tobj = tobject_new(); if (!tobj) { LOGE("oom"); return NULL; } int i; int col_count = sqlite3_data_count(stmt); for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { tobj->id = sqlite3_column_int(stmt, i); } else if (!strcmp(name, "tokid")) { // Ignore sid we don't need it as token has that data. } else if (!strcmp(name, "attrs")) { int bytes = sqlite3_column_bytes(stmt, i); const unsigned char *attrs = sqlite3_column_text(stmt, i); if (!attrs || !bytes) { LOGE("tobject does not have attributes"); goto error; } bool res = parse_attributes_from_string(attrs, bytes, &tobj->attrs); if (!res) { LOGE("Could not parse DB attrs, got: \"%s\"", attrs); goto error; } } else { LOGE("Unknown row, got: %s", name); goto error; } } assert(tobj->id); CK_RV rv = object_init_from_attrs(tobj); if (rv != CKR_OK) { LOGE("Object initialization failed"); goto error; } return tobj; error: tobject_free(tobj); return NULL; } WEAK DEBUG_VISIBILITY tobject *db_tobject_new(sqlite3_stmt *stmt) { return __real_db_tobject_new(stmt); } DEBUG_VISIBILITY int __real_init_tobjects(token *tok) { const char *sql = "SELECT * FROM tobjects WHERE tokid=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare tobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, tok->id); if (rc != SQLITE_OK) { LOGE("Cannot bind tobject tokid: %s\n", sqlite3_errmsg(global.db)); goto error; } while ((rc = sqlite3_step(stmt)) == SQLITE_ROW) { tobject *insert = db_tobject_new(stmt); if (!insert) { LOGE("Failed to initialize tobject from db"); goto error; } CK_RV rv = token_add_tobject_last(tok, insert); if (rv != CKR_OK) { tobject_free(insert); goto error; } } rc = SQLITE_OK; error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_tobjects(token *tok) { return __real_init_tobjects(tok); } static void pobject_v3_free(pobject_v3 *old_pobj) { twist_free(old_pobj->handle); free(old_pobj->hierarchy); free(old_pobj->objauth); } static void pobject_v4_free(pobject_v4 *new_pobj) { free(new_pobj->config); free(new_pobj->hierarchy); free(new_pobj->objauth); } DEBUG_VISIBILITY int init_pobject_v3_from_stmt(sqlite3_stmt *stmt, pobject_v3 *old_pobj) { old_pobj->id = sqlite3_column_int(stmt, 0); char *tmp = (char *)sqlite3_column_text(stmt, 1); if (!tmp) { LOGE("Hierarchy is NULL"); goto error; } old_pobj->hierarchy = strdup(tmp); if (!old_pobj->hierarchy) { LOGE("oom"); goto error; } int rc = _get_blob(stmt, 2, false, &old_pobj->handle); if (rc != SQLITE_OK) { goto error; } tmp = (char *)sqlite3_column_text(stmt, 3); if (!tmp) { LOGE("objauth is NULL"); goto error; } old_pobj->objauth = strdup(tmp); if (!old_pobj->objauth) { LOGE("oom"); goto error; } return SQLITE_OK; error: pobject_v3_free(old_pobj); return SQLITE_ERROR; } DEBUG_VISIBILITY CK_RV convert_pobject_v3_to_v4(pobject_v3 *old_pobj, pobject_v4 *new_pobj) { new_pobj->id = old_pobj->id; /* take and steal ownership of these pointers so we don't have oom issues */ new_pobj->hierarchy = old_pobj->hierarchy; old_pobj->hierarchy = NULL; new_pobj->objauth = old_pobj->objauth; old_pobj->objauth = NULL; pobject_config pobj_conf = { .is_transient = false, .blob = old_pobj->handle, }; char *config = emit_pobject_to_conf_string(&pobj_conf); if (!config) { LOGE("oom"); return CKR_HOST_MEMORY; } new_pobj->config = config; return CKR_OK; } static int start2(sqlite3 *db) { int rc = sqlite3_exec(db, "BEGIN TRANSACTION", NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(db)); } return rc; } static int start(void) { return start2(global.db); } static int commit2(sqlite3 *db) { return sqlite3_exec(db, "COMMIT", NULL, NULL, NULL); } static int commit(void) { return commit2(global.db); } static int rollback2(sqlite3 *db) { return sqlite3_exec(db, "ROLLBACK", NULL, NULL, NULL); } static int rollback(void) { return rollback2(global.db); } DEBUG_VISIBILITY CK_RV db_add_pobject_v4(sqlite3 *updb, pobject_v4 *new_pobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; const char *sql = "INSERT INTO pobjects2 (" "id," // index: 1 type: INT "hierarchy, " // index: 2 type: TEXT "config," // index: 3 type: TEXT "objauth" // index: 4 type: TEXT ") VALUES (" "?,?,?,?" ");"; int rc = sqlite3_prepare_v2(updb, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_bind_int(stmt, 1, new_pobj->id); gotobinderror(rc, "id"); rc = sqlite3_bind_text(stmt, 2, new_pobj->hierarchy, -1, SQLITE_STATIC); gotobinderror(rc, "hierarchy"); rc = sqlite3_bind_text(stmt, 3, new_pobj->config, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 4, new_pobj->objauth, -1, SQLITE_STATIC); gotobinderror(rc, "objauth"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(updb)); goto error; } rv = CKR_OK; error: rc = sqlite3_finalize(stmt); if (rc != SQLITE_OK) { LOGW("Could not finalize stmt: %d", rc); } return rv; } DEBUG_VISIBILITY int init_pobject_from_stmt(sqlite3_stmt *stmt, tpm_ctx *tpm, pobject *pobj) { /* Get the YAML config and: * - parse it to the config structure * - if persistent deserializes the ESYS_TR into the handle * - if transient, verify that the template_name is set */ size_t yaml_size = sqlite3_column_bytes(stmt, 0); const unsigned char *pobj_yaml_conf = sqlite3_column_text(stmt, 0); bool res = parse_pobject_config_from_string(pobj_yaml_conf, yaml_size, &pobj->config); if (!res) { LOGE("Could not parse pobject config"); return SQLITE_ERROR; } if (!pobj->config.is_transient) { if (!pobj->config.blob) { LOGE("Expected persistent pobject config to have ESYS_TR blob"); return SQLITE_ERROR; } res = tpm_deserialize_handle(tpm, pobj->config.blob, &pobj->handle); if (!res) { /* just set a general error as rc could be success right now */ return SQLITE_ERROR; } } else if (!pobj->config.template_name) { LOGE("Expected transient pobject config to have a template name"); return SQLITE_ERROR; } pobj->objauth = twist_new((char *)sqlite3_column_text(stmt, 1)); if (!pobj->objauth) { LOGE("oom"); return SQLITE_ERROR; } int rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("stepping in pobjects, got: %s\n", sqlite3_errstr(rc)); return SQLITE_ERROR; } /* if it's a transient primary object create it */ if (tpm && pobj->config.is_transient) { CK_RV rv = tpm_create_transient_primary_from_template(tpm, pobj->config.template_name, pobj->objauth, &pobj->handle); if (rv != CKR_OK) { return SQLITE_ERROR; } } return SQLITE_OK; } DEBUG_VISIBILITY int __real_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { const char *sql = "SELECT config,objauth FROM pobjects WHERE id=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare sobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, pid); if (rc != SQLITE_OK) { LOGE("Cannot bind pobject id: %s\n", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW) { LOGE("stepping in pobjects, got: %s\n", sqlite3_errstr(rc)); goto error; } rc = init_pobject_from_stmt(stmt, tpm, pobj); error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { return __real_init_pobject(pid, pobj, tpm); } CK_RV db_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { int rc = init_pobject(pid, pobj, tpm); return rc == SQLITE_OK ? CKR_OK : CKR_GENERAL_ERROR; } DEBUG_VISIBILITY int __real_init_sealobjects(unsigned tokid, sealobject *sealobj) { const char *sql = "SELECT * FROM sealobjects WHERE tokid=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare sealobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, tokid); if (rc != SQLITE_OK) { LOGE("Cannot bind tokid: %s\n", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW) { LOGE("stepping in sealobjects, got: %s\n", sqlite3_errstr(rc)); goto error; } int i; int col_count = sqlite3_data_count(stmt); for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { // pass } else if (!strcmp(name, "userauthsalt")) { const char *x = (const char *)sqlite3_column_text(stmt, i); if (x) { sealobj->userauthsalt = twist_new(x); goto_oom(sealobj->userauthsalt, error); } } else if (!strcmp(name, "userpriv")) { goto_error(get_blob_null(stmt, i, &sealobj->userpriv), error); } else if (!strcmp(name, "userpub")) { goto_error(get_blob_null(stmt, i, &sealobj->userpub), error); } else if (!strcmp(name, "soauthsalt")) { sealobj->soauthsalt = twist_new((char *)sqlite3_column_text(stmt, i)); goto_oom(sealobj->soauthsalt, error); } else if (!strcmp(name, "sopriv")) { goto_error(get_blob(stmt, i, &sealobj->sopriv), error); } else if (!strcmp(name, "sopub")) { goto_error(get_blob(stmt, i, &sealobj->sopub), error); } else if (!strcmp(name, "tokid")) { // pass } else { LOGE("Unknown token: %s", name); goto error; } } rc = SQLITE_OK; error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_sealobjects(unsigned tokid, sealobject *sealobj) { return __real_init_sealobjects(tokid, sealobj); } DEBUG_VISIBILITY WEAK void db_get_label(token *t, sqlite3_stmt *stmt, int iCol) { snprintf((char *)t->label, sizeof(t->label), "%s", sqlite3_column_text(stmt, iCol)); } CK_RV db_get_tokens(token *tok, size_t *len) { size_t cnt = 0; const char *sql = "SELECT * FROM tokens"; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare tobject query: %s\n", sqlite3_errmsg(global.db)); goto error; } size_t row = 0; while (sqlite3_step(stmt) == SQLITE_ROW) { if (cnt >= MAX_TOKEN_CNT) { LOGE("Too many tokens, must have less than %d", MAX_TOKEN_CNT); goto error; } token *t = &tok[row++]; int col_count = sqlite3_data_count(stmt); int i; for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { t->id = sqlite3_column_int(stmt, i); } else if(!strcmp(name, "pid")) { t->pid = sqlite3_column_int(stmt, i); } else if (!strcmp(name, "label")) { db_get_label(t, stmt, i); } else if (!strcmp(name, "config")) { int bytes = sqlite3_column_bytes(stmt, i); const unsigned char *config = sqlite3_column_text(stmt, i); if (!config || !bytes) { LOGE("Expected token config to contain config data"); goto error; } bool result = parse_token_config_from_string(config, bytes, &t->config); if (!result) { LOGE("Could not parse token config, got: \"%s\"", config); goto error; } } else { LOGE("Unknown key: %s", name); goto error; } } /* done with sql key value search */ CK_RV rv = token_min_init(t); if (rv != CKR_OK) { goto error; } /* tokens in the DB store already have an associated primary object */ rc = init_pobject(t->pid, &t->pobject, t->tctx); if (rc != SQLITE_OK) { goto error; } if (!t->config.is_initialized) { LOGV("skipping further initialization of token tid: %u", t->id); /* token initialized, bump cnt */ cnt++; continue; } rc = init_sealobjects(t->id, &t->esysdb.sealobject); if (rc != SQLITE_OK) { goto error; } rc = init_tobjects(t); if (rc != SQLITE_OK) { goto error; } /* token initialized, bump cnt */ cnt++; } *len = cnt; sqlite3_finalize(stmt); return CKR_OK; error: token_free_list(&tok, &cnt); *len = 0; if (stmt) { sqlite3_finalize(stmt); } return CKR_GENERAL_ERROR; } CK_RV db_update_for_pinchange( token *tok, bool is_so, /* new seal object auth metadata */ twist newauthsalthex, /* private and public blobs */ twist newprivblob, twist newpubblob) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *sql = NULL; /* so update statements */ if (is_so) { if (newpubblob) { sql = "UPDATE sealobjects SET" " soauthsalt=?," /* index: 1 */ " sopriv=?," /* index: 2 */ " sopub=?" /* index: 3 */ " WHERE tokid=?"; /* index: 4 */ } else { sql = "UPDATE sealobjects SET" " soauthsalt=?," /* index: 1 */ " sopriv=?" /* index: 2 */ " WHERE tokid=?"; /* index: 3 */ } /* user */ } else { if (newpubblob) { sql = "UPDATE sealobjects SET" " userauthsalt=?," /* index: 1 */ " userpriv=?," /* index: 2 */ " userpub=?" /* index: 3 */ " WHERE tokid=?" ; /* index: 4 */ } else { sql = "UPDATE sealobjects SET" " userauthsalt=?," /* index: 1 */ " userpriv=?" /* index: 2 */ " WHERE tokid=?"; /* index: 3 */ } } /* * Prepare statements */ int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc) { LOGE("Could not prepare statement: \"%s\" error: \"%s\"", sql, sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; /* bind values */ /* sealobjects */ int index = 1; rc = sqlite3_bind_text(stmt, index++, newauthsalthex, -1, SQLITE_STATIC); gotobinderror(rc, "newauthsalthex"); rc = sqlite3_bind_blob(stmt, index++, newprivblob, twist_len(newprivblob), SQLITE_STATIC); gotobinderror(rc, "newprivblob"); if (newpubblob) { rc = sqlite3_bind_blob(stmt, index++, newpubblob, twist_len(newpubblob), SQLITE_STATIC); gotobinderror(rc, "newpubblob"); } rc = sqlite3_bind_int(stmt, index++, tok->id); gotobinderror(rc, "tokid"); /* * Everything is bound, fire off the sql statements */ rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("Could not execute stmt"); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); return rv; } CK_RV db_add_new_object(token *tok, tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *attrs = emit_attributes_to_string(tobj->attrs); if (!attrs) { return CKR_GENERAL_ERROR; } const char *sql = "INSERT INTO tobjects (" "tokid, " // index: 1 type: INT "attrs" // index: 2 type: TEXT (JSON) ") VALUES (" "?,?" ");"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { free(attrs); LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tok->id); gotobinderror(rc, "tokid"); rc = sqlite3_bind_text(stmt, 2, attrs, -1, SQLITE_STATIC); gotobinderror(rc, "attrs"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } tobject_set_id(tobj, (unsigned)id); rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(attrs); return rv; } CK_RV db_delete_object(tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; static const char *sql = "DELETE FROM tobjects WHERE id=?;"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tobj->id); gotobinderror(rc, "id"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); return rv; } CK_RV db_add_primary(pobject *pobj, unsigned *pid) { assert(pid); CK_RV rv = CKR_GENERAL_ERROR; char *yaml_conf = NULL; sqlite3_stmt *stmt = NULL; const char *sql = "INSERT INTO pobjects (" "hierarchy, " // index: 1 type: TEXT "config," // index: 2 type: BLOB "objauth" // index: 3 type: TEXT ") VALUES (" "?,?,?" ");"; yaml_conf = emit_pobject_to_conf_string(&pobj->config); if (!yaml_conf) { return CKR_GENERAL_ERROR; } int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { free(yaml_conf); LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_text(stmt, 1, "o", -1, SQLITE_STATIC); gotobinderror(rc, "hierarchy"); rc = sqlite3_bind_text(stmt, 2, yaml_conf, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 3, "", -1, SQLITE_STATIC); gotobinderror(rc, "objauth"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } *pid = (unsigned)id; rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(yaml_conf); return rv; } CK_RV db_update_token_config(token *tok) { assert(tok); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *config = emit_config_to_string(tok); if (!config) { LOGE("Could not get token config"); return CKR_GENERAL_ERROR; } const char *sql = "UPDATE tokens SET" " config=?" // index: 1 type: TEXT (JSON) " WHERE id=?;"; // Index 2 type: int int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_bind_text(stmt, 1, config, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_int(stmt, 2, tok->id); gotobinderror(rc, "id"); rv = CKR_OK; error: sqlite3_finalize_warn(stmt); free(config); return rv; } CK_RV _db_update_tobject_attrs(sqlite3 *db, unsigned id, attr_list *attrs) { assert(attrs); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *attr_str = emit_attributes_to_string(attrs); if (!attr_str) { LOGE("Could not emit tobject attributes"); return CKR_GENERAL_ERROR; } const char *sql = "UPDATE tobjects SET" " attrs=?" // index: 1 type: TEXT (JSON) " WHERE id=?;"; // Index 2 type: int int rc = sqlite3_prepare_v2(db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(db)); goto error; } rc = sqlite3_bind_text(stmt, 1, attr_str, -1, SQLITE_STATIC); gotobinderror(rc, "attrs"); rc = sqlite3_bind_int(stmt, 2, id); gotobinderror(rc, "id"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("Could not execute stmt"); goto error; } rv = CKR_OK; error: sqlite3_finalize_warn(stmt); free(attr_str); return rv; } CK_RV db_update_tobject_attrs(unsigned id, attr_list *attrs) { assert(attrs); return _db_update_tobject_attrs(global.db, id, attrs); } CK_RV db_add_token(token *tok) { assert(tok); /* This function is only called from token_initialize, hence... */ assert(tok->config.is_initialized); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *config = emit_config_to_string(tok); if (!config) { LOGE("Could not get token config"); return CKR_GENERAL_ERROR; } /* strip trailing spaces */ char label_buf[sizeof(tok->label) + 1] = { 0 }; memcpy(label_buf, tok->label, sizeof(tok->label)); size_t i; for (i=sizeof(tok->label); i > 0; i--) { char *p = &label_buf[i-1]; if (*p != ' ') { break; } *p = '\0'; } const char *sql = "INSERT INTO tokens (" "pid, " // index: 1 type: INT "label," // index: 2 type: TEXT "config" // index: 3 type: TEXT (JSON) ") VALUES (" "?,?,?" ");"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); free(config); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tok->pid); gotobinderror(rc, "pid"); rc = sqlite3_bind_text(stmt, 2, label_buf, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 3, config, -1, SQLITE_STATIC); gotobinderror(rc, "label"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } tok->id = id; rc = sqlite3_finalize(stmt); gotobinderror(rc, "finalize"); stmt = NULL; /* add the sealobjects WITHIN the transaction */ sql = "INSERT INTO sealobjects" "(tokid, soauthsalt, sopriv, sopub)" "VALUES(?,?,?,?)"; rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_bind_int(stmt, 1, tok->id); gotobinderror(rc, "tokid"); rc = sqlite3_bind_text(stmt, 2, tok->esysdb.sealobject.soauthsalt, -1, SQLITE_STATIC); gotobinderror(rc, "soauthsalt"); rc = sqlite3_bind_blob(stmt, 3, tok->esysdb.sealobject.sopriv, twist_len(tok->esysdb.sealobject.sopriv), SQLITE_STATIC); gotobinderror(rc, "sopriv"); rc = sqlite3_bind_blob(stmt, 4, tok->esysdb.sealobject.sopub, twist_len(tok->esysdb.sealobject.sopub), SQLITE_STATIC); gotobinderror(rc, "sopub"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(config); return rv; } CK_RV db_get_first_pid(unsigned *id) { assert(id); CK_RV rv = CKR_GENERAL_ERROR; const char *sql = "SELECT id FROM pobjects ORDER BY id ASC LIMIT 1"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare first pid query: %s\n", sqlite3_errmsg(global.db)); return rv; } rc = sqlite3_step(stmt); if (rc == SQLITE_ROW) { *id = sqlite3_column_int(stmt, 0); } else if (rc == SQLITE_DONE) { *id = 0; } else { LOGE("Cannot step query: %s\n", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } #define DB_NAME "tpm2_pkcs11.sqlite3" #define PKCS11_STORE_ENV_VAR "TPM2_PKCS11_STORE" static CK_RV handle_env_var(char *path, size_t len, bool *skip) { *skip = false; char *env_path = getenv(PKCS11_STORE_ENV_VAR); if (!env_path) { *skip = true; return CKR_OK; } /* * It's an in memory db, use it: * - https://www.sqlite.org/inmemorydb.html */ if (!strncmp(env_path, "file::memory", 12) || !strcmp(env_path, ":memory:")) { unsigned l = snprintf(path, len, "%s", env_path); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } unsigned l = snprintf(path, len, "%s/%s", env_path, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_home(char *path, size_t len, bool *skip) { *skip = false; char *env_home = getenv("HOME"); if (!env_home) { *skip = true; return CKR_OK; } unsigned l = snprintf(path, len, "%s/.tpm2_pkcs11/%s", env_home, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_cwd(char *path, size_t len, bool *skip) { *skip = false; char *cwd_path = getcwd(NULL, 0); if (!cwd_path) { return errno == ENOMEM ? CKR_HOST_MEMORY : CKR_GENERAL_ERROR; } unsigned l = snprintf(path, len, "%s/%s", cwd_path, DB_NAME); free(cwd_path); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_path(char *path, size_t len, bool *skip) { *skip = false; unsigned l = snprintf(path, len, "%s/%s", TPM2_PKCS11_STORE_DIR, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } typedef enum handler_idx handler_idx; enum handler_idx { HANDLER_IDX_ENV, HANDLER_IDX_STORE_DIR, HANDLER_IDX_HOME, HANDLER_IDX_CWD, HANDLER_IDX_CNT, }; typedef CK_RV (*db_handler)(char *path, size_t len, handler_idx index); static CK_RV db_for_path(char *path, size_t len, db_handler h) { /* * Search in the following order: * 1. ENV variable * 2. TPM2_PKCS11_STORE_DIR * 2. $HOME/.tpm2_pkcs11 * 3. cwd */ handler_idx i; for (i=0; i < HANDLER_IDX_CNT; i++) { CK_RV rv = CKR_GENERAL_ERROR; bool skip = false; switch (i) { case HANDLER_IDX_ENV: rv = handle_env_var(path, len, &skip); break; case HANDLER_IDX_STORE_DIR: rv = handle_path(path, len, &skip); break; case HANDLER_IDX_HOME: rv = handle_home(path, len, &skip); break; case HANDLER_IDX_CWD: rv = handle_cwd(path, len, &skip); break; default: LOGE("Unknown handler_idx: %d", i); return CKR_GENERAL_ERROR; } /* handler had fatal error, exit with return code */ if (rv != CKR_OK) { return rv; } /* handler says skip, something must not be set */ if (skip) { continue; } rv = h(path, len, i); if (rv != CKR_TOKEN_NOT_PRESENT) { return rv; } } return CKR_TOKEN_NOT_PRESENT; } static CK_RV db_get_path_handler(char *path, size_t len, handler_idx index) { UNUSED(len); /* Always attempt to use ENV VAR */ if (index == HANDLER_IDX_ENV) { LOGV("using "PKCS11_STORE_ENV_VAR"=\"%s\"", path); return CKR_OK; } struct stat sb; int rc = stat(path, &sb); if (rc) { LOGV("Could not stat db at path \"%s\", error: %s", path, strerror(errno)); /* no db, keep looking */ return CKR_TOKEN_NOT_PRESENT; } /* * made it all the way through and found an existing store, * done searching. */ return CKR_OK; } static CK_RV db_get_existing(char *path, size_t len) { return db_for_path(path, len, db_get_path_handler); } static CK_RV db_create_handler(char *path, size_t len, handler_idx index) { UNUSED(len); CK_RV rv = CKR_TOKEN_NOT_PRESENT; /* nothing to do for index CWD */ if (index == HANDLER_IDX_CWD) { return CKR_OK; } char *pathdup = strdup(path); if (!pathdup) { LOGE("oom"); return CKR_HOST_MEMORY; } char *d = dirname(pathdup); if (index == HANDLER_IDX_ENV || index == HANDLER_IDX_HOME) { struct stat sb; int rc = stat(d, &sb); if (rc && errno != ENOENT) { LOGV("Could not stat db dir \"%s\", error: %s", d, strerror(errno)); /* no db dir, keep looking */ goto out; } if (rc == 0) { goto done; } rc = mkdir(d, S_IRWXU|S_IRWXG); if (rc) { LOGE("Could not mkdir \"%s\", error: %s", d, strerror(errno)); rv = HANDLER_IDX_ENV ? CKR_GENERAL_ERROR : CKR_TOKEN_NOT_PRESENT; goto out; } /* success */ goto done; } if (index == HANDLER_IDX_STORE_DIR) { /* tests if it exists AND we can use it */ const char *test_file_path = TPM2_PKCS11_STORE_DIR"/.test"; FILE *f = fopen(test_file_path, "w+"); if (!f) { /* * we don't care about errors, we just skip it, but if it's * an access issue, we will let the user know via LOGW. * */ if (errno != ENOENT) { const char *msg = (errno == EPERM || errno == EACCES) ? "Error checking access to \"%s\", skipping. error: %s" : "\"%s\" exists, but no access, skipping. error: %s"; LOGW(msg, TPM2_PKCS11_STORE_DIR, strerror(errno)); } goto out; } /* all is well, unlink and move on */ fclose(f); unlink(test_file_path); goto done; } /* I don't know what it is fatal error */ assert(0); LOGE("Unhandled search index: %d", index); rv = CKR_GENERAL_ERROR; goto out; /* * made it all the way through and found a dir I can use, * done searching. Now use it to create the db. */ done: rv = CKR_OK; out: free(pathdup); return rv; } #define DB_EMPTY 0 static CK_RV db_get_version(sqlite3 *db, unsigned *version) { CK_RV rv = CKR_GENERAL_ERROR; const char *sql = "SELECT schema_version FROM schema"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGW("Cannot prepare version query: %s\n", sqlite3_errmsg(global.db)); *version = DB_EMPTY; return CKR_OK; } rc = sqlite3_step(stmt); if (rc == SQLITE_ROW) { *version = sqlite3_column_int(stmt, 0); } else if (rc == SQLITE_DONE) { *version = DB_EMPTY; } else { LOGE("Cannot step query: %s\n", sqlite3_errmsg(global.db)); *version = DB_EMPTY; goto error; } rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV run_sql_list(sqlite3 *db, const char **sql, size_t cnt) { size_t i; for (i=0; i < cnt; i++) { const char *s = sql[i]; int rc = sqlite3_exec(db, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("db creation failed: %s", sqlite3_errmsg(db)); return CKR_GENERAL_ERROR; } } return CKR_OK; } static CK_RV dbup_handler_from_1_to_2(sqlite3 *updb) { /* Between version 1 and 2 of the DB the following changes need to be made: * The existing rows: * - userpub BLOB NOT NULL, * - userpriv BLOB NOT NULL, * - userauthsalt TEXT NOT NULL, * All have the "NOT NULL" constarint removed, like so: * userpub BLOB, * userpriv BLOB, * userauthsalt TEXT * So we need to create a new table with this constraint removed, * copy the data and move the table back */ /* Create a new table to copy data to that has the constraints removed */ const char *s = "" "CREATE TABLE sealobjects_new2(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "userpub BLOB," "userpriv BLOB," "userauthsalt TEXT," "sopub BLOB NOT NULL," "sopriv BLOB NOT NULL," "soauthsalt TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* copy the data */ s = "INSERT INTO sealobjects_new2\n" "SELECT * FROM sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot copy data to the temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* Drop the old table */ s = "DROP TABLE sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop the temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* Rename the new table to the correct table name */ s = "ALTER TABLE sealobjects_new2 RENAME TO sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot rename the temp table back to the original table name: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } const char *sql[] = { "CREATE TRIGGER limit_tokens\n" "BEFORE INSERT ON tokens\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tokens) >= 255\n" " THEN\n" " RAISE(FAIL, \"Maximum token count of 255 reached.\")\n" " END;\n" "END;\n", "CREATE TRIGGER limit_tobjects\n" "BEFORE INSERT ON tobjects\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tobjects) >= 16777215\n" " THEN\n" " RAISE(FAIL, \"Maximum object count of 16777215 reached.\")\n" " END;\n" "END;\n" }; return run_sql_list(updb, sql, ARRAY_LEN(sql)); } static CK_RV dbup_handler_from_2_to_3(sqlite3 *updb) { /* Between version 2 and 3 of the DB the following changes need to be made: * - Drop the incorrect limit_tobjects TRIGGER. */ /* Create a new table to copy data to that has the constraints removed */ const char *s = "DROP TRIGGER limit_tobjects;"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV dbup_handler_from_3_to_4(sqlite3 *updb) { /* * Between version 3 and 1 of the DB the following changes need to be made: * Table pobjects: * - column handle of type blob was changes to config of type string * * The YAML config has the handle of the ESYS_TR blob as a hex string. * So to perform the upgrade, the code needs to create a new db and copy * everything over and generate the new config YAML as: * ---- * persistent: true * esys-tr: bytes.hex(handle) */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; /* Create a new table to copy data to */ const char *s = "CREATE TABLE pobjects2 (" "id INTEGER PRIMARY KEY," "hierarchy TEXT NOT NULL," "config TEXT NOT NULL," "objauth TEXT NOT NULL" ");"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } rc = sqlite3_prepare_v2(updb, "SELECT * from pobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { pobject_v3 old_pobj = { 0 }; rc = init_pobject_v3_from_stmt(stmt, &old_pobj); if (rc != SQLITE_OK) { LOGE("Could not process pobjectes for upgrade"); goto error; } pobject_v4 new_pobj = { 0 }; CK_RV tmp_rv = convert_pobject_v3_to_v4(&old_pobj, &new_pobj); if (tmp_rv != CKR_OK) { LOGE("Could not convert V3 Pobject to v4"); pobject_v3_free(&old_pobj); pobject_v4_free(&new_pobj); goto error; } /* insert into pobjects2 */ tmp_rv = db_add_pobject_v4(updb, &new_pobj); pobject_v3_free(&old_pobj); pobject_v4_free(&new_pobj); if (tmp_rv != CKR_OK) { LOGE("Could not store V4 Pobject to pobject2 table"); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } /* * done copying V3 pobjects, converting to config and storing as v4 pobject * in pobjects 2. * * Time to drop pobjects table */ s = "DROP TABLE pobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop pobjects table: %s", sqlite3_errmsg(updb)); goto error; } /* Rename pobjects2 to pobjects */ s = "ALTER TABLE pobjects2 RENAME TO pobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop pobjects table: %s", sqlite3_errmsg(updb)); goto error; } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } /* * A bug in the python code added CBC_PAD twice and missed CTR mode, filter out the CBC_PAD * and CTR mode and add them both back in properly, ie one of each in CKA_ALLOWED_MECHANISMS. */ static CK_RV handle_AES_add_cbc_ctr_modes(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_SECRET_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_AES) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; /* plus two: one for CBC_PAD one for CTR modes */ safe_adde(mech_num, 2); CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and add CBC_PAD and CTR */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == CKM_AES_CBC_PAD || old_mech == CKM_AES_CTR) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } /* append the missing mechanisms */ new_mechs[pos++] = CKM_AES_CBC_PAD; new_mechs[pos++] = CKM_AES_CTR; CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_4_to_5(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { CK_MECHANISM_TYPE *new_mechs = NULL; tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } /* * Due to a bug in Python side of adding AES objects, we need to run the * CKA_ALLOWED_MECHANISM updates to add modes CTR and CBC on both the 4->5 * and 5->6 updates in the C code. Since the logic is the same for AES, * we just call the routine. It was handled properly in the C code in 4->5 * but the Python code added CTR twice and missed CBC, so the 5->6 update * gets that one. */ rv = handle_AES_add_cbc_ctr_modes(tobj); if (rv == CKR_VENDOR_SKIP) { goto next; } else if (rv != CKR_OK) { tobject_free(tobj); goto error; } /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); if (rv != CKR_OK) { SAFE_FREE(new_mechs); tobject_free(tobj); goto error; } next: tobject_free(tobj); SAFE_FREE(new_mechs); rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV handle_ECDSA_5_to_6(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_PRIVATE_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_EC) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; /* plus three: SHA256 SHA384 and SHA512 */ safe_adde(mech_num, 3); CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and add CBC_PAD and CTR */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == CKM_ECDSA_SHA256 || old_mech == CKM_ECDSA_SHA384 || old_mech == CKM_ECDSA_SHA512) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } /* append the missing mechanisms */ new_mechs[pos++] = CKM_ECDSA_SHA256; new_mechs[pos++] = CKM_ECDSA_SHA384; new_mechs[pos++] = CKM_ECDSA_SHA512; CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_5_to_6(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } rv = handle_ECDSA_5_to_6(tobj); if (rv == CKR_OK) { goto handled; } else if (rv != CKR_VENDOR_SKIP) { /* actual error */ tobject_free(tobj); goto error; } rv = handle_AES_add_cbc_ctr_modes(tobj); if (rv == CKR_OK) { goto handled; } else if (rv == CKR_VENDOR_SKIP) { goto next; } else { /* actual error */ tobject_free(tobj); goto error; } handled: /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); if (rv != CKR_OK) { tobject_free(tobj); goto error; } next: tobject_free(tobj); rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV handle_EC_AES_drop_0_allowed_mechs(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_PRIVATE_KEY && cka_class != CKO_SECRET_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_EC && cka_key_type != CKK_AES) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); /* * The new array will be at most the same size as the old array as theirs nothing * to filer out. */ CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and drop 0 mechanisms */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == 0) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_6_to_7(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } rv = handle_EC_AES_drop_0_allowed_mechs(tobj); if (rv != CKR_VENDOR_SKIP) { /* actual error */ tobject_free(tobj); goto error; } /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); tobject_free(tobj); if (rv != CKR_OK) { goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV db_backup(sqlite3 *db, const char *dbpath, sqlite3 **updb, char **copypath) { CK_RV rv = CKR_GENERAL_ERROR; char temp[PATH_MAX]; sqlite3 *copydb = NULL; const char *suffix = ".bak"; sqlite3_backup *backup_conn = NULL; unsigned l = snprintf(temp, sizeof(temp), "%s%s", dbpath, suffix); if (l >= sizeof(temp)) { LOGE("Backup DB path is longer than PATH_MAX"); goto out; } LOGV("Performing DB backup at: \"%s\"", temp); int rc = sqlite3_open(temp, ©db); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(copydb)); goto out; } backup_conn = sqlite3_backup_init(copydb, "main", db, "main"); if (!backup_conn) { LOGE("Cannot backup init db: %s\n", sqlite3_errmsg(copydb)); goto out; } rc = sqlite3_backup_step(backup_conn, -1); if (rc != SQLITE_DONE) { LOGE("Cannot step db backup: %s\n", sqlite3_errmsg(copydb)); goto out; } *copypath = strdup(temp); if (!(*copypath)) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } *updb = copydb; copydb = NULL; rv = CKR_OK; out: if (backup_conn) { sqlite3_backup_finish(backup_conn); } if (copydb) { sqlite3_close(copydb); } return rv; } typedef CK_RV (*db_update_handlers)(sqlite3 *db); static CK_RV db_update(sqlite3 **xdb, const char *dbpath, unsigned old_version, unsigned new_version) { sqlite3 *dbbak = NULL; char *dbbakpath = NULL; static const db_update_handlers updaters[] = { NULL, dbup_handler_from_1_to_2, dbup_handler_from_2_to_3, dbup_handler_from_3_to_4, dbup_handler_from_4_to_5, dbup_handler_from_5_to_6, dbup_handler_from_6_to_7 }; /* * Sanity checks, this is definite belts and suspenders code */ if (new_version > ARRAY_LEN(updaters)) { LOGE("db update code does not know how to update to version: %u", new_version); return CKR_GENERAL_ERROR; } if (old_version == 0) { LOGE("version 0 was never a valid db version"); return CKR_GENERAL_ERROR; } /* * Create a DB backup of whats there */ CK_RV rv = db_backup(*xdb, dbpath, &dbbak, &dbbakpath); if (rv != CKR_OK) { LOGE("Could not make DB copy"); return rv; } /* * run the update handlers on the backup */ size_t i; for(i=old_version; i < ARRAY_LEN(updaters) && i < new_version; i++) { rv = updaters[i](dbbak); if (rv != CKR_OK) { LOGE("Running updater index %zu failed", i); goto out; } } const char *sql[] = { "REPLACE INTO schema (id, schema_version) VALUES (1, "xstr(DB_VERSION) ");", }; rv = run_sql_list(dbbak, sql, ARRAY_LEN(sql)); if (rv != CKR_OK) { LOGE("Could not set new schema_version"); goto out; } /* * Swap the current db with the backup db, by: * 1. closing them * 2. renaming the current db as .old * 3. renaming the backup db as the old db * 4. unlinking the .old db * 5. opening the new db */ sqlite3_close(*xdb); *xdb = NULL; sqlite3_close(dbbak); dbbak = NULL; char buf[PATH_MAX]; unsigned l = snprintf(buf, sizeof(buf), "%s.old", dbpath); if (l >= sizeof(buf)) { LOGE("Old database path is longer than PATH_MAX"); rv = CKR_GENERAL_ERROR; goto out; } int rc = rename(dbpath, buf); if (rc != 0) { LOGE("Could not rename \"%s\" --> \"%s\", error: %s", dbpath, buf, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rc = rename(dbbakpath, dbpath); if (rc != 0) { LOGE("Could not rename \"%s\" --> \"%s\", error: %s", dbbakpath, dbpath, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rc = sqlite3_open(dbpath, xdb); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(*xdb)); rv = CKR_GENERAL_ERROR; goto out; } rc = unlink(buf); if (rc != 0) { LOGE("Could not unlink \"%s\", error: %s", buf, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rv = CKR_OK; out: if (dbbak) { sqlite3_close(dbbak); } free(dbbakpath); return rv; } static CK_RV db_create(char *path, size_t len) { return db_for_path(path, len, db_create_handler); } static FILE *take_lock(const char *path, char *lockpath) { unsigned l = snprintf(lockpath, PATH_MAX, "%s%s", path, ".lock"); if (l >= PATH_MAX) { LOGE("Lock file path is longer than PATH_MAX"); return NULL; } FILE *f = fopen(lockpath, "w+"); if (!f) { LOGE("Could not open lock file \"%s\", error: %s", lockpath, strerror(errno)); return NULL; } int rc = flock(fileno(f), LOCK_EX); if (rc < 0) { LOGE("Could not flock file \"%s\", error: %s", lockpath, strerror(errno)); fclose(f); unlink(lockpath); return NULL; } return f; } static void release_lock(FILE *f, char *lockpath) { int rc = flock(fileno(f), LOCK_UN); if (rc < 0) { LOGE("Could not unlock file \"%s\", error: %s", lockpath, strerror(errno)); } UNUSED(unlink(lockpath)); UNUSED(fclose(f)); } #ifndef NDBEBUG void db_debug_set_db(sqlite3 *db) { global.db = db; } #endif CK_RV db_init_new(sqlite3 *db) { const char *sql[] = { "CREATE TABLE tokens(" "id INTEGER PRIMARY KEY," "pid INTEGER NOT NULL," "label TEXT UNIQUE," "config TEXT NOT NULL," "FOREIGN KEY (pid) REFERENCES pobjects(id) ON DELETE CASCADE" ");", "CREATE TABLE sealobjects(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "userpub BLOB," "userpriv BLOB," "userauthsalt TEXT," "sopub BLOB NOT NULL," "sopriv BLOB NOT NULL," "soauthsalt TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");", "CREATE TABLE pobjects(" "id INTEGER PRIMARY KEY," "hierarchy TEXT NOT NULL," "config TEXT NOT NULL," "objauth TEXT NOT NULL" ");", "CREATE TABLE tobjects(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "attrs TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");", "CREATE TABLE schema(" "id INTEGER PRIMARY KEY," "schema_version INTEGER NOT NULL" ");", "CREATE TRIGGER limit_tokens\n" "BEFORE INSERT ON tokens\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tokens) >= 255\n" " THEN\n" " RAISE(FAIL, \"Maximum token count of 255 reached.\")\n" " END;\n" "END;\n", "REPLACE INTO schema (id, schema_version) VALUES (1, "xstr(DB_VERSION) ");", }; return run_sql_list(db, sql, ARRAY_LEN(sql)); } static CK_RV db_verify_update_ok(const char *dbpath) { char buf[PATH_MAX]; unsigned l = snprintf(buf, sizeof(buf), "%s.old", dbpath); if (l >= sizeof(buf)) { LOGE("Backup DB path is longer than PATH_MAX"); return CKR_GENERAL_ERROR; } struct stat sb; int rc = stat(buf, &sb); if (rc == 0) { LOGE("Backup DB exists at \"%s\" not overwriting. " "Refusing to run, see " "https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/DB_UPGRADE.md.", buf); return CKR_GENERAL_ERROR; } else if (rc < 0 && errno != ENOENT) { LOGE("Failed to stat path \"%s\", error: %s", buf, strerror(errno)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV db_setup(sqlite3 **xdb, const char *dbpath) { /* * take the version check lock and figure out what * to do: * - nothing * - init a new db * - upgrade an existing db */ const char *pname = sqlite3_db_filename(*xdb, NULL); bool is_in_mem_db = !pname || pname[0] == '\0'; char lockpath[PATH_MAX]; FILE *f = NULL; if (!is_in_mem_db) { f = take_lock(dbpath, lockpath); if (!f) { return CKR_GENERAL_ERROR; } } CK_RV rv = db_verify_update_ok(dbpath); if (rv != CKR_OK) { goto out; } unsigned old_version = 0; rv = db_get_version(*xdb, &old_version); if (rv != CKR_OK) { LOGE("Could not get DB version"); goto out; } if (old_version == DB_EMPTY) { rv = db_init_new(*xdb); goto out; } if (old_version == DB_VERSION) { LOGV("No DB upgrade needed"); rv = CKR_OK; goto out; } if (old_version > DB_VERSION) { LOGE("DB Version exceeds library version: %u > %u", old_version, DB_VERSION); rv = CKR_OK; goto out; } rv = db_update(xdb, dbpath, old_version, DB_VERSION); out: if (rv != CKR_OK) { LOGE("Error within db, leaving backup see: " "https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/DB_UPGRADE.md."); } if (!is_in_mem_db) { assert(f); release_lock(f, lockpath); } return rv; } DEBUG_VISIBILITY WEAK CK_RV db_new(sqlite3 **db) { char dbpath[PATH_MAX]; CK_RV rv = db_get_existing(dbpath, sizeof(dbpath)); if (rv == CKR_TOKEN_NOT_PRESENT) { rv = db_create(dbpath, sizeof(dbpath)); } if (rv != CKR_OK) { LOGE("Could not find or create a pkcs11 store"); LOGE("Consider exporting "PKCS11_STORE_ENV_VAR" to point to a valid store directory"); return rv; } LOGV("Using sqlite3 DB: \"%s\"", dbpath); int rc = sqlite3_open(dbpath, db); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(*db)); return CKR_GENERAL_ERROR; } return db_setup(db, dbpath); } static CK_RV db_free(sqlite3 **db) { int rc = sqlite3_close(*db); if (rc != SQLITE_OK) { LOGE("Cannot close database: %s\n", sqlite3_errmsg(*db)); return CKR_GENERAL_ERROR; } *db = NULL; return CKR_OK; } CK_RV db_init(void) { return db_new(&global.db); } CK_RV db_destroy(void) { return db_free(&global.db); } tpm2-pkcs11-1.7.0/src/lib/typed_memory.c0000664000175000017500000000403214114236775014653 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "pkcs11.h" #include "typed_memory.h" #include "utils.h" void *type_calloc(size_t nmemb, size_t size, CK_BYTE type) { assert(size != 0); size_t total = 0; safe_mul(total, nmemb, size); safe_adde(total, 1); CK_BYTE_PTR ptr = (CK_BYTE_PTR)calloc(1, total); if (!ptr) { return NULL; } ptr[total - 1] = type; return ptr; } void *type_zrealloc(void *old_ptr, size_t size, CK_BYTE type) { assert(size != 0); // overflow safety here... size_t total = size + 1; CK_BYTE_PTR new_ptr = realloc(old_ptr, total); if (!new_ptr) { return NULL; } memset(new_ptr, 0, total); new_ptr[total - 1] = type; return new_ptr; } CK_BYTE type_from_ptr(void *ptr, size_t len) { if (!len || !ptr) { return TYPE_BYTE_HEX_STR; } CK_BYTE_PTR b = (CK_BYTE_PTR)ptr; return b[len]; } CK_RV type_mem_dup(void *in, size_t len, void **dup) { CK_BYTE type = in ? type_from_ptr(in, len) : TYPE_BYTE_HEX_STR; assert(type != 0); void *buf = type_calloc(1, len, type); if (!buf) { return CKR_HOST_MEMORY; } if (in) { memcpy(buf, in, len); } *dup = buf; #ifndef NDEBUG CK_BYTE check = type_from_ptr(buf, len); assert(check == type); #endif return CKR_OK; } void type_mem_cpy(void *dest, void *in, size_t size) { assert(in); assert(dest); assert(size); safe_adde(size, 1); memcpy(dest, in, size); #ifndef NDEBUG CK_BYTE check = type_from_ptr(in, size - 1); CK_BYTE got = type_from_ptr(dest, size - 1); assert(check == got); #endif } const char *type_to_str(CK_BYTE type) { switch(type) { case TYPE_BYTE_INT: return "int"; case TYPE_BYTE_BOOL: return "bool"; case TYPE_BYTE_INT_SEQ: return "int-seq"; case TYPE_BYTE_HEX_STR: return "hex-str"; default: return "unknown"; } } tpm2-pkcs11-1.7.0/src/lib/mutex.c0000644000175000017500000000676713754763565013332 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "log.h" #include "mutex.h" #include "pkcs11.h" /* * Default handlers for mutex operations */ static CK_RV default_mutex_create(void **mutex); static CK_RV default_mutex_destroy(void *mutex); static CK_RV default_mutex_lock(void *mutex); static CK_RV default_mutex_unlock(void *mutex); /* * Function pointers for the actual registered * mutex operation. */ static CK_CREATEMUTEX _g_create = default_mutex_create; static CK_DESTROYMUTEX _g_destroy = default_mutex_destroy; static CK_LOCKMUTEX _g_lock = default_mutex_lock; static CK_UNLOCKMUTEX _g_unlock = default_mutex_unlock; void mutex_set_handlers(CK_CREATEMUTEX create, CK_DESTROYMUTEX destroy, CK_LOCKMUTEX lock, CK_UNLOCKMUTEX unlock) { /* * We assume the caller checked all of these are set to either * NULL or fn-ptrs and NOT a mix. */ _g_create = create; _g_destroy = destroy; _g_lock = lock; _g_unlock = unlock; } static CK_RV default_mutex_create(void **mutex) { int rc; pthread_mutex_t *p = calloc(1, sizeof(pthread_mutex_t)); if (!p) { LOGE("oom"); return CKR_HOST_MEMORY; } pthread_mutexattr_t *attr = NULL; /* * When NOT NOT DEBUGGING, ie when building in DEBUG mode * (autotools uses NDEBUG for this, hence the double * negative) enable error checking mutexes to prevent * double locks and have assert() cause an abort(). */ #ifndef NDEBUG pthread_mutexattr_t __attr; attr = &__attr; rc = pthread_mutexattr_init(attr); if (rc) { LOGE("Failed to initialize pthread attribute: %s\n", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } rc = pthread_mutexattr_settype(attr, PTHREAD_MUTEX_ERRORCHECK); if (rc) { LOGE("Could not set attribute type: %s", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } #endif rc = pthread_mutex_init(p, attr); if (rc) { LOGE("Could not initialize mutex: %s", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } *mutex = p; return CKR_OK; } static CK_RV default_mutex_destroy(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; if (!p) { return CKR_OK; } int rc = pthread_mutex_destroy(p); if (rc) { LOGE("Could not destroy mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } free(p); return CKR_OK; } static CK_RV default_mutex_lock(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; int rc = pthread_mutex_lock(p); if (rc) { LOGE("Could not lock mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } return CKR_OK; } static CK_RV default_mutex_unlock(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; int rc = pthread_mutex_unlock(p); if (rc) { LOGE("Could not unlock mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } return CKR_OK; } CK_RV mutex_create(void **mutex) { if (!_g_create) { return CKR_OK; } return _g_create(mutex); } CK_RV mutex_destroy(void *mutex) { if (!_g_destroy) { return CKR_OK; } return _g_destroy(mutex); } CK_RV mutex_lock(void *mutex) { if (!_g_lock) { return CKR_OK; } return _g_lock(mutex); } CK_RV mutex_unlock(void *mutex) { if (!_g_unlock) { return CKR_OK; } return _g_unlock(mutex); } tpm2-pkcs11-1.7.0/src/lib/list.h0000644000175000017500000000057613754763565013140 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef LIST_H_ #define LIST_H_ typedef struct list list; struct list { list *next; list *prev; }; #define list_entry(element, type, name) \ (type *)(((uint8_t *)(element)) - (uint8_t *)&(((type *)NULL)->name)) #define list_for_each(list, var) \ for(var = list; var != NULL; var = var->next) #endif /* LIST_H_ */ tpm2-pkcs11-1.7.0/src/lib/sign.c0000664000175000017500000004331214116451527013076 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "digest.h" #include "encrypt.h" #include "log.h" #include "mech.h" #include "ssl_util.h" #include "session.h" #include "session_ctx.h" #include "sign.h" #include "token.h" #include "tpm.h" typedef struct sign_opdata sign_opdata; struct sign_opdata { CK_MECHANISM mech; bool do_hash; twist buffer; digest_op_data *digest_opdata; encrypt_op_data *crypto_opdata; int padding; EVP_PKEY *pkey; const EVP_MD *md; }; static sign_opdata *sign_opdata_new(mdetail *mdtl, CK_MECHANISM_PTR mechanism, tobject *tobj) { int padding = 0; CK_RV rv = mech_get_padding(mdtl, mechanism, &padding); if (rv != CKR_OK) { return NULL; } const EVP_MD *md = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed(mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return NULL; } /* * Some algorithms we don't perform the hash, but we need knowledge of * the hashing algorithm for verify operations with OSSL */ bool is_hash_knowledge_needed = false; rv = mech_is_hashing_knowledge_needed(mdtl, mechanism, &is_hash_knowledge_needed); if (rv != CKR_OK) { return NULL; } if (is_hashing_needed || is_hash_knowledge_needed) { rv = mech_get_digester(mdtl, mechanism, &md); if (rv != CKR_OK) { return NULL; } } EVP_PKEY *pkey = NULL; rv = ssl_util_tobject_to_evp(&pkey, tobj); if (rv != CKR_OK) { return NULL; } sign_opdata *opdata = calloc(1, sizeof(sign_opdata)); if (!opdata) { LOGE("oom"); return NULL; } opdata->padding = padding; opdata->pkey = pkey; opdata->md = md; return opdata; } static void sign_opdata_free(sign_opdata **opdata) { digest_op_data_free(&(*opdata)->digest_opdata); if (*opdata && !(*opdata)->do_hash) { twist_free((*opdata)->buffer); } if ((*opdata)->pkey) { EVP_PKEY_free((*opdata)->pkey); } if ((*opdata)->crypto_opdata) { encrypt_op_data_free(&(*opdata)->crypto_opdata); } free(*opdata); *opdata = NULL; } static CK_RV update_pss_sig_state(token *tok, tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; /* * Only test for PSS signature state if it's an RSA object. This avoids printing superfluous errors */ CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKK_RSA) { return CKR_OK; } /* * Tokens added in previous versions may not have a known PSS signature * state, so check and populate here. */ bool pss_sigs_good = false; pss_config_state pss_cfg = tok->config.pss_sigs_good; if (pss_cfg == pss_config_state_unk) { rv = tpm_get_pss_sig_state(tok->tctx, tobj, &pss_sigs_good); if (rv != CKR_OK) { LOGW("Could not determine PSS signature format," "assuming maximized slen"); tok->config.pss_sigs_good = pss_sigs_good ? pss_config_state_good : pss_config_state_bad; } mdetail_set_pss_status(tok->mdtl, pss_sigs_good); rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGW("Could not update token config backend, moving on"); } } return rv; } static CK_RV common_init(operation op, session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_OBJECT_HANDLE key) { check_pointer(mechanism); LOGV("mechanism: 0x%lx\n\thas_params: %s\n\tlen: %lu", mechanism->mechanism, mechanism->pParameter ? "yes" : "no", mechanism->ulParameterLen); CK_RV rv = CKR_GENERAL_ERROR; bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; rv = token_load_object(tok, key, &tobj); if (rv != CKR_OK) { return rv; } rv = mech_validate(tok->mdtl, mechanism, tobj->attrs); if (rv != CKR_OK) { return rv; } digest_op_data *digest_opdata = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed(tok->mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return rv; } if (is_hashing_needed) { digest_opdata = digest_op_data_new(); if (!digest_opdata) { return CKR_HOST_MEMORY; } rv = digest_init_op(ctx, digest_opdata, mechanism); if (rv != CKR_OK) { digest_op_data_free(&digest_opdata); return rv; } } /* TPM is only used on sign operations, not verify. This is because * with asymmetric key pairs we can use the public key for verification in SW * without needing to involve the TPM. This with HMAC we need to use the TPM * verify since the key is only resident in the TPM. */ bool is_hmac = false; rv = mech_is_HMAC(tok->mdtl, mechanism, &is_hmac); if (rv != CKR_OK) { LOGE("Could not determine if algorithm is HMAC or not"); return rv; } tpm_op_data *tpm_opdata = NULL; if (op == operation_sign || is_hmac) { rv = update_pss_sig_state(tok, tobj); if (rv != CKR_OK) { return rv; } rv = mech_get_tpm_opdata(tok->mdtl, tok->tctx, mechanism, tobj, &tpm_opdata); if (rv != CKR_OK) { return rv; } } sign_opdata *opdata = sign_opdata_new(tok->mdtl, mechanism, tobj); if (!opdata) { tpm_opdata_free(&tpm_opdata); return CKR_HOST_MEMORY; } opdata->do_hash = is_hashing_needed; memcpy(&opdata->mech, mechanism, sizeof(opdata->mech)); opdata->digest_opdata = digest_opdata; opdata->crypto_opdata = encrypt_op_data_new(); if (!opdata->crypto_opdata) { sign_opdata_free(&opdata); return CKR_HOST_MEMORY; } /* Use SW Verify if it's an asymmetric key with pkey set */ if (op != operation_sign && opdata->pkey) { opdata->crypto_opdata->use_sw = true; rv = sw_encrypt_data_init(tok->mdtl, mechanism, tobj, &opdata->crypto_opdata->cryptopdata.sw_enc_data); if (rv != CKR_OK) { sign_opdata_free(&opdata); return rv; } } else { opdata->crypto_opdata->cryptopdata.tpm_opdata = tpm_opdata; } /* * Store everything for later */ session_ctx_opdata_set(ctx, op, tobj, opdata, (opdata_free_fn)sign_opdata_free); return CKR_OK; } static CK_RV common_update(operation op, session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { check_pointer(part); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } if (opdata->do_hash) { rv = digest_update_op(ctx, opdata->digest_opdata, part, part_len); if (rv != CKR_OK) { return rv; } } else { twist tmp = twistbin_append(opdata->buffer, part, part_len); if (!tmp) { return CKR_HOST_MEMORY; } opdata->buffer = tmp; } return CKR_OK; } CK_RV sign_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_sign, ctx, mechanism, key); } CK_RV sign_update(session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { return common_update(operation_sign, ctx, part, part_len); } CK_RV sign_final_ex(session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len, bool is_oneshot) { check_pointer(signature_len); bool reset_ctx = false; CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_sign, &opdata); if (rv != CKR_OK) { return rv; } assert(opdata); rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); twist digest_buf = NULL; size_t expected_sig_len = 0; rv = tobject_get_min_buf_size(tobj, &opdata->mech, &expected_sig_len); if (rv != CKR_OK) { return rv; } if (!signature) { *signature_len = expected_sig_len; goto out; } if (*signature_len < expected_sig_len) { *signature_len = expected_sig_len; rv = CKR_BUFFER_TOO_SMALL; goto out; } if (opdata->do_hash) { CK_MECHANISM_TYPE mech_halg; rv = mech_get_digest_alg(tok->mdtl, &opdata->mech, &mech_halg); if (rv != CKR_OK) { return rv; } CK_ULONG hash_len = utils_get_halg_size(mech_halg); if (!hash_len) { LOGE("Hash algorithm cannot have 0 size"); return CKR_GENERAL_ERROR; } digest_buf = twist_calloc(hash_len); if (!digest_buf) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto session_out; } rv = digest_final_op(ctx, opdata->digest_opdata, (CK_BYTE_PTR)digest_buf, &hash_len); if (rv != CKR_OK) { goto session_out; } } else { digest_buf = opdata->buffer; /* we take ownership of this buffer */ opdata->buffer = NULL; } CK_BYTE syn_buf[4096]; CK_ULONG syn_buf_len = sizeof(syn_buf); CK_ULONG digest_buf_len = twist_len(digest_buf); bool is_ecc = false; rv = mech_is_ecc(tok->mdtl, opdata->mech.mechanism, &is_ecc); if (rv != CKR_OK) { LOGE("COuld not determine if mechanism is ECC: %lu", rv); return rv; } if (is_ecc && (digest_buf_len > expected_sig_len)) { LOGV("Truncating hash for EC Signature from %lu to %lu", digest_buf_len, expected_sig_len); digest_buf_len = expected_sig_len; } rv = mech_synthesize( tok->mdtl, &opdata->mech, tobj->attrs, (CK_BYTE_PTR)digest_buf, digest_buf_len, syn_buf, &syn_buf_len); if (rv != CKR_OK) { goto session_out; } bool is_synthetic = false; rv = mech_is_synthetic(tok->mdtl, &opdata->mech, &is_synthetic); if (rv != CKR_OK) { goto session_out; } if (is_synthetic) { /* sign padded pkcs 1.5 structure */ encrypt_op_data *encrypt_opdata = encrypt_op_data_new(); if (!encrypt_opdata) { rv = CKR_HOST_MEMORY; goto session_out; } /* perform a RAW RSA encryption */ CK_MECHANISM mechanism = { CKM_RSA_X_509, NULL, 0 }; /* RSA Decrypt is the RSA operation with the private key, which is what we want */ rv = decrypt_init_op(ctx, encrypt_opdata, &mechanism, tobj->obj_handle); if (rv != CKR_OK) { encrypt_op_data_free(&encrypt_opdata); goto session_out; } rv = decrypt_oneshot_op(ctx, encrypt_opdata, syn_buf, syn_buf_len, signature, signature_len); encrypt_op_data_free(&encrypt_opdata); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { goto session_out; } /* WORKAROUND / TODO: decrypt_init_op above increments the usage counter by one, but never decremented. if called for size, decrypt_finalize is never called, thus no decrement. if not called for size, decrypt_finalize does not decrement as supplied data was set Without reworking the whole logic and breaking other valid use cases it is the easiest to decrement the usage counter here. */ CK_RV rv_tmp = tobject_user_decrement(tobj); if (rv_tmp != CKR_OK) { rv = rv_tmp; goto session_out; } } else { rv = tpm_sign(opdata->crypto_opdata->cryptopdata.tpm_opdata, syn_buf, syn_buf_len, signature, signature_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { goto session_out; } } out: /* * Detect 1 of 2 states: * - 1 - everything is ok from enc/sign and sig is set (continue normally) * - 2 - buffer too small from enc/sign and sig is set (reset hashing state and keep sign operation alive) * - 3 - everything is ok but sig is NULL, handle like state 2. * * Reset the hashing state IF we're actually doing the hash internally */ reset_ctx = (rv == CKR_BUFFER_TOO_SMALL || !signature); if (reset_ctx) { if (opdata->do_hash) { /* reset the hashing state */ digest_op_data *new_digest_state = digest_op_data_new(); if (!new_digest_state) { rv = CKR_HOST_MEMORY; reset_ctx = false; goto session_out; } assert(opdata->digest_opdata); CK_RV tmp = digest_init_op(ctx, new_digest_state, &opdata->digest_opdata->mechanism); if (tmp != CKR_OK) { digest_op_data_free(&new_digest_state); reset_ctx = false; goto session_out; } digest_op_data_free(&opdata->digest_opdata); opdata->digest_opdata = new_digest_state; } else if (is_oneshot) { twist_free(opdata->buffer); opdata->buffer = NULL; } } else { /* not resetting the state, and all is well */ rv = CKR_OK; } session_out: twist_free(digest_buf); assert(tobj); if (!reset_ctx) { tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); } return rv; } CK_RV sign(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG *signature_len) { CK_RV rv = sign_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return sign_final_ex(ctx, signature, signature_len, true); } CK_RV verify_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_verify, ctx, mechanism, key); } CK_RV verify_update (session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { return common_update(operation_verify, ctx, part, part_len); } CK_RV verify_final (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len) { check_pointer(signature); check_pointer(signature_len); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_verify, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); CK_ULONG data_len = 0; CK_BYTE_PTR data = NULL; /* buffer has to stay in scope for assignment to data pointer */ CK_BYTE _buffer[1024]; if (opdata->do_hash) { // TODO mode to buffer size CK_ULONG _buffer_len = sizeof(_buffer); rv = digest_final_op(ctx, opdata->digest_opdata, _buffer, &_buffer_len); if (rv != CKR_OK) { goto out; } data_len = _buffer_len; data = _buffer; } else { data_len = twist_len(opdata->buffer); data = (const CK_BYTE_PTR)opdata->buffer; } if (opdata->pkey) { rv = ssl_util_sig_verify(opdata->pkey, opdata->padding, opdata->md, data, data_len, signature, signature_len); } else { rv = tpm_verify(opdata->crypto_opdata->cryptopdata.tpm_opdata, data, data_len, signature, signature_len); } out: assert(tobj); tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); return rv; } CK_RV verify(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { CK_RV rv = verify_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return verify_final(ctx, signature, signature_len); } CK_RV verify_recover_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_verify_recover, ctx, mechanism, key); } CK_RV verify_recover (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { check_pointer(signature); check_pointer(signature_len); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_verify_recover, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); rv = ssl_util_verify_recover(opdata->pkey, opdata->padding, opdata->md, signature, signature_len, data, data_len); assert(tobj); tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); return rv; } tpm2-pkcs11-1.7.0/src/lib/random.c0000644000175000017500000000135713754763565013436 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "checks.h" #include "pkcs11.h" #include "random.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" CK_RV random_get(session_ctx *ctx, CK_BYTE_PTR random_data, CK_ULONG random_len) { check_pointer(random_data); token *tok = session_ctx_get_token(ctx); assert(tok); tpm_ctx *tpm = tok->tctx; bool res = tpm_getrandom(tpm, random_data, random_len); return res ? CKR_OK: CKR_GENERAL_ERROR; } CK_RV seed_random(session_ctx *ctx, CK_BYTE_PTR seed, CK_ULONG seed_len) { check_pointer(seed); token *tok = session_ctx_get_token(ctx); assert(tok); tpm_ctx *tpm = tok->tctx; CK_RV rv = tpm_stirrandom(tpm, seed, seed_len); return rv; } tpm2-pkcs11-1.7.0/src/lib/emitter.h0000644000175000017500000000055213754763565013630 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_EMITTER_H_ #define SRC_LIB_EMITTER_H_ #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" char *emit_attributes_to_string(attr_list *attrs); char *emit_config_to_string(token *tok); char *emit_pobject_to_conf_string(pobject_config *pobj); #endif /* SRC_LIB_EMITTER_H_ */ tpm2-pkcs11-1.7.0/src/lib/tpm.h0000664000175000017500000001776014114240163012741 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_TPM_H_ #define SRC_PKCS11_TPM_H_ #include #include #include #include "attrs.h" #include "debug.h" #include "object.h" #include "twist.h" #include "utils.h" /* config env var for TCTI context */ #define TPM2_PKCS11_TCTI "TPM2_PKCS11_TCTI" typedef struct tpm_ctx tpm_ctx; typedef struct tpm_op_data tpm_op_data; /* forward references */ typedef union crypto_op_data crypto_op_data; typedef struct mdetail mdetail; typedef struct pobject pobject; /** * Destroys the system API context, and when the refcnt * hits 0 for the tcti context, destroys it as well. * @param ctx * The tpm context * @note: NOT THREAD SAFE: Assumes session table lock held */ void tpm_ctx_free(tpm_ctx *ctx); /** * Creates a new tpm_ctx with it's own ESAPI * and TCTI contexts internally. * @param tcti * An optional (can be null) tcti config string. * @param tctx * The tpm_ctx to create. * @return * CJR_OK on success, anything else is a failure. */ CK_RV tpm_ctx_new(const char *tcti, tpm_ctx **tctx); CK_RV tpm_ctx_new_fromtcti(void *tcti, tpm_ctx **tctx); /** * Retrieves Spec Version, FW Version, Manufacturer and Model from TPM * and populates the provided CK_TOKEN_INFO structure. * * If the manufacturer id is specified in TPM2_MANUFACTURER_MAP it will be * extended with a human readable form of the manufacturer * @param ctx * The tpm api context. * @param info * The CK_TOKEN_INFO structure where the data is written to * @return * CKR_OK on success, CKR_ARGUMENTS_BAD, or CKR_GENERAL_ERROR otherwise */ CK_RV tpm_get_token_info (tpm_ctx *ctx, CK_TOKEN_INFO *info); CK_RV tpm_is_rsa_keysize_supported(tpm_ctx *tctx, CK_ULONG test_size); CK_RV tpm_find_max_rsa_keysize(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_find_ecc_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_find_aes_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_is_ecc_curve_supported(tpm_ctx *tctx, int nid); /** * Generates random bytes from the TPM * @param ctx * The tpm api context. * @param data * The date to write the random bytes into. * @param size * The number of random bytes to generate. * @return * true on success, false otherwise. */ bool tpm_getrandom(tpm_ctx *ctx, uint8_t *data, size_t size); CK_RV tpm_stirrandom(tpm_ctx *ctx, unsigned char *seed, unsigned long seed_len); CK_RV tpm_loadobj(tpm_ctx *ctx, uint32_t phandle, twist auth, twist pub_path, twist priv_path, uint32_t *handle); bool tpm_flushcontext(tpm_ctx *ctx, uint32_t handle); twist tpm_unseal(tpm_ctx *ctx, uint32_t handle, twist objauth); WEAK bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle); bool tpm_contextload_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle); CK_RV tpm_sign(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen); CK_RV tpm_verify(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG siglen); CK_RV tpm_rsa_pkcs_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_oaep_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_rsa_pss_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_cbc_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_cfb_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_ecb_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_ctr_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); void tpm_opdata_free(tpm_op_data **opdata); CK_RV tpm_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen); CK_RV tpm_final_encrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len); CK_RV tpm_decrypt(crypto_op_data *opdata, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen); CK_RV tpm_final_decrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len); CK_RV tpm_changeauth(tpm_ctx *ctx, uint32_t parent_handle, uint32_t object_handle, twist oldauth, twist newauth, twist *newblob); CK_RV tpm2_create_seal_obj(tpm_ctx *ctx, twist parentauth, uint32_t parent_handle, twist objauth, twist oldpubblob, twist sealdata, twist *newpubblob, twist *newprivblob); bool tpm_session_active(tpm_ctx *ctx); CK_RV tpm_session_start(tpm_ctx *ctx, twist auth, uint32_t handle); CK_RV tpm_session_stop(tpm_ctx *ctx); typedef struct tpm_object_data tpm_object_data; struct tpm_object_data { uint32_t privhandle; uint32_t pubhandle; attr_list *attrs; twist pubblob; twist privblob; }; void tpm_objdata_free(tpm_object_data *objdata); CK_RV tpm2_generate_key( tpm_ctx *tpm, uint32_t parent, twist parentauth, twist newauthbin, CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_object_data *objdata); CK_RV tpm2_getmechanisms(tpm_ctx *ctx, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count); CK_RV tpm_get_existing_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob); CK_RV tpm_create_persistent_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob); CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, const char *pobj_auth, uint32_t *primary_handle); CK_RV tpm_get_pss_sig_state(tpm_ctx *tctx, tobject *tobj, bool *pss_sigs_good); bool tpm_get_name(tpm_ctx *ctx, uint32_t handle, twist *name); void tpm_init(void); void tpm_destroy(void); #endif /* SRC_PKCS11_TPM_H_ */ tpm2-pkcs11-1.7.0/src/lib/key.h0000644000175000017500000000107213754763565012745 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_KEY_H_ #define SRC_PKCS11_KEY_H_ #include "pkcs11.h" typedef struct token token; typedef struct session_ctx session_ctx; CK_RV key_gen ( session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE_PTR public_key, CK_OBJECT_HANDLE_PTR private_key); #endif /* SRC_PKCS11_KEY_H_ */ tpm2-pkcs11-1.7.0/src/lib/encrypt.c0000664000175000017500000002740514116451527013627 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "checks.h" #include "encrypt.h" #include "mech.h" #include "ssl_util.h" #include "session.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" #include "twist.h" typedef CK_RV (*crypto_op)(crypto_op_data *enc_data, CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); static sw_encrypt_data *sw_encrypt_data_new(void) { return (sw_encrypt_data *)calloc(1, sizeof(sw_encrypt_data)); } static void sw_encrypt_data_free(sw_encrypt_data **enc_data) { if (!enc_data || !*enc_data) { return; } if ((*enc_data)->key) { EVP_PKEY_free((*enc_data)->key); } twist_free((*enc_data)->label); free(*enc_data); *enc_data = NULL; } encrypt_op_data *encrypt_op_data_new(void) { return (encrypt_op_data *)calloc(1, sizeof(encrypt_op_data)); } void encrypt_op_data_free(encrypt_op_data **opdata) { if (opdata) { (*opdata)->use_sw ? sw_encrypt_data_free(&(*opdata)->cryptopdata.sw_enc_data) : tpm_opdata_free(&(*opdata)->cryptopdata.tpm_opdata); free(*opdata); *opdata = NULL; } } CK_RV sw_encrypt_data_init(mdetail *mdtl, CK_MECHANISM *mechanism, tobject *tobj, sw_encrypt_data **enc_data) { EVP_PKEY *pkey = NULL; CK_RV rv = ssl_util_tobject_to_evp(&pkey, tobj); if (rv != CKR_OK) { return rv; } int padding = 0; rv = mech_get_padding(mdtl, mechanism, &padding); if (rv != CKR_OK) { return rv; } const EVP_MD *md = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed( mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return rv; } if (is_hashing_needed) { rv = mech_get_digester(mdtl, mechanism, &md); if (rv != CKR_OK) { return rv; } } twist label = NULL; rv = mech_get_label(mechanism, &label); if (rv != CKR_OK) { return rv; } sw_encrypt_data *d = sw_encrypt_data_new(); if (!d) { LOGE("oom"); twist_free(label); EVP_PKEY_free(pkey); return CKR_HOST_MEMORY; } d->key = pkey; d->padding = padding; d->label = label; d->md = md; *enc_data = d; return CKR_OK; } static CK_RV sw_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { assert(opdata); sw_encrypt_data *sw_enc_data = opdata->sw_enc_data; assert(sw_enc_data); assert(sw_enc_data->key); return ssl_util_encrypt(sw_enc_data->key, sw_enc_data->padding, sw_enc_data->label, sw_enc_data->md, ptext, ptextlen, ctext, ctextlen); } static CK_RV common_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_MECHANISM_PTR mechanism, CK_OBJECT_HANDLE key) { check_pointer(mechanism); LOGV("mechanism->mechanism: %lu\n" "mechanism->ulParameterLen: %lu\n" "mechanism->pParameter: %s", mechanism->mechanism, mechanism->ulParameterLen, mechanism->pParameter ? "set" : "(null)"); token *tok = session_ctx_get_token(ctx); assert(tok); if (!supplied_opdata) { bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } } tobject *tobj; CK_RV rv = token_load_object(tok, key, &tobj); if (rv != CKR_OK) { return rv; } rv = object_mech_is_supported(tobj, mechanism); if (rv != CKR_OK) { tobject_user_decrement(tobj); return rv; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("Expected tobject to have attribute CKA_CLASS"); return CKR_GENERAL_ERROR; } CK_OBJECT_CLASS obj_class = 0; rv = attr_CK_OBJECT_CLASS(a, &obj_class); if (rv != CKR_OK) { LOGE("Could not convert CKA_CLASS"); return rv; } encrypt_op_data *opdata; if (!supplied_opdata) { opdata = encrypt_op_data_new(); if (!opdata) { tobject_user_decrement(tobj); return CKR_HOST_MEMORY; } } else { opdata = supplied_opdata; } /* * Public Key Objects don't need to hit the TPM */ if (obj_class == CKO_PUBLIC_KEY) { opdata->use_sw = true; rv = sw_encrypt_data_init(tok->mdtl, mechanism, tobj, &opdata->cryptopdata.sw_enc_data); } else { rv = mech_get_tpm_opdata(tok->mdtl, tok->tctx, mechanism, tobj, &opdata->cryptopdata.tpm_opdata); } if (rv != CKR_OK) { tobject_user_decrement(tobj); if (!supplied_opdata) { encrypt_op_data_free(&opdata); } return rv; } if (!supplied_opdata) { session_ctx_opdata_set(ctx, op, tobj, opdata, (opdata_free_fn)encrypt_op_data_free); } return CKR_OK; } static CK_RV common_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { check_pointer(part); check_pointer(encrypted_part_len); CK_RV rv = CKR_GENERAL_ERROR; encrypt_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } /* * Public key crypto operations have the use_sw flag set. Currently, * they are restricted to working only with RSA AFAIK. Thus, * they only perform RSA Encrypt (RSA operation w/pub key). Thus, the * SW path will always call sw_encrypt. * * If we add proper EC support, we likely need a sw_decrypt interface * that does the right thing with respect to EC and RSA. For RSA it * should always call Encrypt and for EC, likely can do Encrypt. */ crypto_op fop; switch(op) { case operation_encrypt: fop = opdata->use_sw ? sw_encrypt : tpm_encrypt; break; case operation_decrypt: fop = opdata->use_sw ? sw_encrypt : tpm_decrypt; break; default: return CKR_GENERAL_ERROR; } return fop(&opdata->cryptopdata, part, part_len, encrypted_part, encrypted_part_len); } static CK_RV common_final_op(session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { check_pointer(last_part_len); CK_RV rv = CKR_GENERAL_ERROR; encrypt_op_data *opdata = supplied_opdata; if (!opdata) { rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } } assert(opdata); tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); /* we may have some TPM symmetric data to deal with */ if (!opdata->use_sw) { rv = (op == operation_encrypt) ? tpm_final_encrypt(&opdata->cryptopdata, last_part, last_part_len) : tpm_final_decrypt(&opdata->cryptopdata, last_part, last_part_len); if (rv != CKR_OK) { goto out; } } else if (!last_part) { /* For all other encrypt operations deal with 5.2 style returns */ if (last_part_len) { *last_part_len = 0; } } rv = CKR_OK; out: /* * we're only done if last_part is specified or the buffer isn't too small * * We also don't want to decrement the tobject unless we're using session ctx * not internal routines. */ if (rv != CKR_BUFFER_TOO_SMALL && last_part && !supplied_opdata) { tobj->is_authenticated = false; if (!supplied_opdata) { session_ctx_opdata_clear(ctx); } CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } } return rv; } CK_RV encrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init_op(ctx, supplied_opdata, operation_encrypt, mechanism, key); } CK_RV decrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init_op(ctx, supplied_opdata, operation_decrypt, mechanism, key); } CK_RV encrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { return common_update_op(ctx, supplied_opdata, operation_encrypt, part, part_len, encrypted_part, encrypted_part_len); } CK_RV decrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { return common_update_op(ctx, supplied_opdata, operation_decrypt, part, part_len, encrypted_part, encrypted_part_len); } CK_RV encrypt_final_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR last_encrypted_part, CK_ULONG_PTR last_encrypted_part_len) { return common_final_op(ctx, supplied_opdata, operation_encrypt, last_encrypted_part, last_encrypted_part_len); } CK_RV decrypt_final_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { return common_final_op(ctx, supplied_opdata, operation_decrypt, last_part, last_part_len); } CK_RV decrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR encrypted_data, CK_ULONG encrypted_data_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { check_pointer(data_len); bool is_buffer_too_small = false; CK_ULONG tmp_len = *data_len; CK_RV rv = decrypt_update_op(ctx, supplied_opdata, encrypted_data, encrypted_data_len, data, &tmp_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { return rv; } CK_ULONG update_len = tmp_len; if (rv == CKR_BUFFER_TOO_SMALL) { data = NULL; is_buffer_too_small = true; } else { if (data) { data = &data[update_len]; assert(tmp_len <= *data_len); } tmp_len = *data_len - tmp_len; } rv = decrypt_final_op(ctx, supplied_opdata, data, &tmp_len); *data_len = update_len + tmp_len; return !is_buffer_too_small ? rv : CKR_BUFFER_TOO_SMALL; } CK_RV encrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR encrypted_data, CK_ULONG_PTR encrypted_data_len) { check_pointer(encrypted_data_len); bool is_buffer_too_small = false; CK_ULONG tmp_len = *encrypted_data_len; CK_RV rv = encrypt_update_op (ctx, supplied_opdata, data, data_len, encrypted_data, &tmp_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { return rv; } CK_ULONG update_len = tmp_len; if (rv == CKR_BUFFER_TOO_SMALL) { encrypted_data = NULL; is_buffer_too_small = true; } else { if (encrypted_data) { encrypted_data = &encrypted_data[update_len]; assert(tmp_len <= *encrypted_data_len); } tmp_len = *encrypted_data_len - tmp_len; } rv = encrypt_final_op(ctx, supplied_opdata, encrypted_data, &tmp_len); *encrypted_data_len = update_len + tmp_len; return !is_buffer_too_small ? rv : CKR_BUFFER_TOO_SMALL; } tpm2-pkcs11-1.7.0/src/lib/utils.c0000664000175000017500000003022714116451527013277 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "log.h" #include "token.h" #include "utils.h" int str_to_ul(const char *val, size_t *res) { errno=0; *res = strtoul(val, NULL, 0); if (errno) { LOGE("Could not convert \"%s\" to integer", val); return 1; } return 0; } CK_RV utils_setup_new_object_auth(twist newpin, twist *newauthhex, twist *newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; bool allocated_pin_to_use = false; twist pin_to_use = NULL; twist salt_to_use = NULL; salt_to_use = utils_get_rand_hex_str(SALT_HEX_STR_SIZE); if (!salt_to_use) { goto out; } if (!newpin) { allocated_pin_to_use = true; pin_to_use = utils_get_rand_hex_str(AUTH_HEX_STR_SIZE); if (!pin_to_use) { goto out; } } else { pin_to_use = newpin; } *newauthhex = utils_hash_pass(pin_to_use, salt_to_use); if (!*newauthhex) { goto out; } if (newsalthex) { *newsalthex = salt_to_use; salt_to_use = NULL; } rv = CKR_OK; out: if (rv != CKR_OK) { twist_free(*newauthhex); twist_free(*newsalthex); *newsalthex = NULL; } if (allocated_pin_to_use) { twist_free(pin_to_use); } twist_free(salt_to_use); return rv; } static twist encrypt_parts_to_twist(CK_BYTE tag[16], CK_BYTE iv[12], CK_BYTE_PTR ctextbin, int ctextbinlen) { /* * Build the :: data format * and convert from binary formats to hex encoded. */ twist ivhex = NULL; twist taghex = NULL; twist ctexthex = NULL; twist constructed = NULL; taghex = twist_hex_new((char *)tag, 16); if (!taghex) { LOGE("oom"); goto out; } ivhex = twist_hex_new((char *)iv, 12); if (!ivhex) { LOGE("oom"); goto out; } ctexthex = twist_hex_new((char *)ctextbin, ctextbinlen); if (!ctexthex) { LOGE("oom"); goto out; } /* * create a buffer with enough space for hex encoded :: * (note + 3 is for 2 : delimiters and a NULL byte. */ size_t a = twist_len(taghex); size_t b = twist_len(ivhex); size_t c = twist_len(ctexthex); size_t constructed_len = 0; safe_add(constructed_len, a, b); safe_adde(constructed_len, c); safe_adde(constructed_len, 3); constructed = twist_calloc(constructed_len); if (!constructed) { LOGE("oom"); goto out; } /* impossible to have truncation */ snprintf((char *)constructed, constructed_len, "%s:%s:%s", ivhex, taghex, ctexthex); out: twist_free(ivhex); twist_free(taghex); twist_free(ctexthex); return constructed; } twist aes256_gcm_encrypt(twist keybin, twist plaintextbin) { twist constructed = NULL; CK_BYTE_PTR ctextbin = NULL; EVP_CIPHER_CTX *ctx = NULL; CK_BYTE ivbin[12]; int rc = RAND_bytes(ivbin, sizeof(ivbin)); if (rc != 1) { LOGE("Could not generate random bytes"); return NULL; } ctx = EVP_CIPHER_CTX_new(); if (!ctx) { LOGE("oom"); goto out; } int ret = EVP_EncryptInit(ctx, EVP_aes_256_gcm(), (const CK_BYTE_PTR )keybin, (const CK_BYTE_PTR )ivbin); if (!ret) { LOGE("EVP_DecryptInit failed"); goto out; } ctextbin = calloc(1, twist_len(plaintextbin)); if (!ctextbin) { LOGE("oom"); goto out; } int len = 0; ret = EVP_EncryptUpdate(ctx, ctextbin, &len, (CK_BYTE_PTR )plaintextbin, twist_len(plaintextbin)); if (!ret) { LOGE("EVP_EncryptUpdate failed"); goto out; } assert((size_t)len == twist_len(plaintextbin)); int left = 0; ret = EVP_EncryptFinal_ex(ctx, &ctextbin[len], &left); if (!ret) { LOGE("AES GCM verification failed!"); goto out; } assert(left == 0); CK_BYTE tagbin[16]; ret = EVP_CIPHER_CTX_ctrl (ctx, EVP_CTRL_GCM_GET_TAG, sizeof(tagbin), tagbin); if (!ret) { LOGE("EVP_CIPHER_CTX_ctrl failed"); goto out; } constructed = encrypt_parts_to_twist(tagbin, ivbin, ctextbin, len); out: EVP_CIPHER_CTX_free(ctx); free(ctextbin); return constructed; } twist aes256_gcm_decrypt(const twist key, const twist objauth) { int ok = 0; twist ivbin = NULL; twist tagbin = NULL; twist objcopy = NULL; twist ctextbin = NULL; twist plaintext = NULL; EVP_CIPHER_CTX *ctx = NULL; /* * Split apart the :: data * and convert to binary formats. */ objcopy = twist_dup(objauth); if (!objcopy) { LOGE("oom0"); return NULL; } char *iv = (char *)objcopy; char *tag = strchr(objcopy, ':'); if (!tag) { LOGE("Could not find : to split tag"); goto out; } *tag = '\0'; tag++; char *ctext = strchr(tag, ':'); if (!ctext) { LOGE("Could not find : to split ctext"); goto out; } *ctext = '\0'; ctext++; ivbin = twistbin_unhexlify(iv); if (!ivbin) { LOGE("oom"); goto out; } tagbin = twistbin_unhexlify(tag); if (!tagbin) { LOGE("oom"); goto out; } ctextbin = twistbin_unhexlify(ctext); if (!ctextbin) { LOGE("oom"); goto out; } size_t clen = twist_len(ctextbin); if (!clen) { plaintext = twist_new(""); if (!plaintext) { LOGE("oom"); } else { ok = 1; } goto out; } plaintext = twist_calloc(clen); if (!plaintext) { LOGE("oom"); goto out; } ctx = EVP_CIPHER_CTX_new(); if (!ctx) { LOGE("oom"); goto out; } int ret = EVP_DecryptInit (ctx, EVP_aes_256_gcm(), (const CK_BYTE_PTR )key, (const CK_BYTE_PTR )ivbin); if (!ret) { LOGE("EVP_DecryptInit failed"); goto out; } int len = 0; ret = EVP_DecryptUpdate(ctx, (CK_BYTE_PTR )plaintext, &len, (CK_BYTE_PTR )ctextbin, twist_len(ctextbin)); if (!ret) { LOGE("EVP_DecryptUpdate failed"); goto out; } ret = EVP_CIPHER_CTX_ctrl (ctx, EVP_CTRL_GCM_SET_TAG, 16, (void *)tagbin); if (!ret) { LOGE("EVP_CIPHER_CTX_ctrl failed"); goto out; } ret = EVP_DecryptFinal_ex(ctx, &((CK_BYTE_PTR )plaintext)[len], &len); if (!ret) { LOGE("AES GCM verification failed!"); goto out; } ok = 1; out: twist_free(objcopy); twist_free(ctextbin); twist_free(tagbin); twist_free(ivbin); EVP_CIPHER_CTX_free(ctx); if (!ok) { twist_free(plaintext); plaintext = NULL; } return plaintext; } twist utils_hash_pass(const twist pin, const twist salt) { unsigned char md[SHA256_DIGEST_LENGTH]; SHA256_CTX sha256; SHA256_Init(&sha256); SHA256_Update(&sha256, pin, twist_len(pin)); SHA256_Update(&sha256, salt, twist_len(salt)); SHA256_Final(md, &sha256); /* truncate the password to 32 characters */ return twist_hex_new((char *)md, sizeof(md)/2); } size_t utils_get_halg_size(CK_MECHANISM_TYPE mttype) { switch(mttype) { case CKM_ECDSA: case CKM_ECDSA_SHA1: /* falls-thru */ case CKM_SHA1_RSA_PKCS: /* falls-thru */ case CKM_SHA1_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA_1_HMAC: /* falls-thru */ case CKM_SHA_1: return 20; case CKM_SHA256_RSA_PKCS: /* falls-thru */ case CKM_SHA256_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA256_HMAC: /* falls-thru */ case CKM_SHA256: return 32; case CKM_SHA384_RSA_PKCS: /* falls-thru */ case CKM_SHA384_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA384_HMAC: /* falls-thru */ case CKM_SHA384: return 48; case CKM_SHA512_RSA_PKCS: /* falls-thru */ case CKM_SHA512_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA512_HMAC: /* falls-thru */ case CKM_SHA512: return 64; } return 0; } twist utils_get_rand_hex_str(size_t size) { if (size == 0) { return NULL; } if (size & 0x1) { return NULL; } twist salt = twist_calloc(size); if (!salt) { return NULL; } int rc = RAND_bytes((CK_BYTE_PTR )salt, size); if (rc != 1) { LOGE("Could not generate random bytes"); return NULL; } twist hex = twist_hex_new(salt, twist_len(salt)); twist_free(salt); return hex; } CK_RV utils_ctx_unwrap_objauth(twist wrappingkey, twist objauth, twist *unwrapped_auth) { assert(wrappingkey); assert(unwrapped_auth); if (!objauth) { *unwrapped_auth = NULL; return CKR_OK; } twist tmp = aes256_gcm_decrypt(wrappingkey, objauth); if (!tmp) { return CKR_GENERAL_ERROR; } *unwrapped_auth = tmp; return CKR_OK; } CK_RV utils_ctx_wrap_objauth(twist wrappingkey, twist data, twist *wrapped_auth) { assert(wrappingkey); assert(data); twist wrapped = aes256_gcm_encrypt(wrappingkey, data); if (!wrapped) { return CKR_GENERAL_ERROR; } *wrapped_auth = wrapped; return CKR_OK; } CK_RV ec_params_to_nid(CK_ATTRIBUTE_PTR ecparams, int *nid) { const unsigned char *p = ecparams->pValue; ASN1_OBJECT *a = d2i_ASN1_OBJECT(NULL, &p, ecparams->ulValueLen); if (!a) { LOGE("Unknown CKA_EC_PARAMS value"); return CKR_ATTRIBUTE_VALUE_INVALID; } *nid = OBJ_obj2nid(a); ASN1_OBJECT_free(a); return CKR_OK; } CK_RV apply_pkcs7_pad(const CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { size_t total_bytes = (inlen + 16) - (inlen % 16); if (*outlen < total_bytes) { return CKR_BUFFER_TOO_SMALL; } int pad_value = total_bytes - inlen; memcpy(out, in, inlen); memset(&out[inlen], pad_value, pad_value); *outlen = total_bytes; return CKR_OK; } CK_RV remove_pkcs7_pad(CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { if (inlen % 16) { LOGE("AES_CBC_PAD data should be block sized, got: %lu", inlen); return CKR_ENCRYPTED_DATA_LEN_RANGE; } CK_BYTE pad_value = in[inlen - 1]; if (pad_value < 1 || pad_value > 16) { LOGE("Nonesensical pad value, got: %u, expected 1-16", pad_value); return CKR_ENCRYPTED_DATA_INVALID; } CK_ULONG new_size = inlen - pad_value; if (new_size > *outlen) { return CKR_BUFFER_TOO_SMALL; } *outlen = new_size; memcpy(out, in, new_size); return CKR_OK; } void parse_lib_version(const char *userbuf, CK_BYTE *major, CK_BYTE *minor) { if (!userbuf || !userbuf[0]) { *major = *minor = 0; return; } bool is_release = strchr(userbuf, '-') == NULL; if (!is_release) { *major = *minor = 0; return; } /* don't modify the caller */ char *buf = strdup(userbuf); if (!buf) { LOGE("oom"); *major = *minor = 0; return; } char *minor_str = "0"; const char *major_str = &buf[0]; char *split = strchr(buf, '.'); if (split) { split[0] = '\0'; minor_str = &split[1]; split = strchr(minor_str, '.'); if (split) { split[0]='\0'; } } if (!major_str[0] || !minor_str[0]) { *major = *minor = 0; goto out; } char *endptr = NULL; unsigned long val; errno = 0; val = strtoul(major_str, &endptr, 10); if (errno != 0 || endptr[0] || val > UINT8_MAX) { LOGW("Could not strtoul(%s): %s", major_str, strerror(errno)); *major = *minor = 0; goto out; } *major = val; endptr = NULL; val = strtoul(minor_str, &endptr, 10); if (errno != 0 || endptr[0] || val > UINT8_MAX) { LOGW("Could not strtoul(%s): %s", minor_str, strerror(errno)); *major = *minor = 0; goto out; } *minor = val; out: free(buf); } tpm2-pkcs11-1.7.0/src/lib/mutex.h0000644000175000017500000000421113754763565013315 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_MUTEX_H_ #define SRC_PKCS11_MUTEX_H_ #include "config.h" #include #include "log.h" #include "pkcs11.h" #include "utils.h" /** * Set's the mutex handlers. The mutex handlers default to internal * pthread mutexes unless specifically set, or cleared by setting NULL. * @param create * The handler for creating a MUTEX. * @param destroy * The handler for destroying a MUTEX. * @param lock * The handler for locking a MUTEX. * @param unlock * The handler for unlocking a MUTEX. */ void mutex_set_handlers(CK_CREATEMUTEX create, CK_DESTROYMUTEX destroy, CK_LOCKMUTEX lock, CK_UNLOCKMUTEX unlock); /** * Allocates and initializes a mutex. * @param mutex * The pointer to store the mutext at. * @return * CKR_OK on success. */ CK_RV mutex_create(void **mutex); /** * Deallocates and destroys a mutex. * @param mutex * The mutex to deallocate. * @return * CKR_OK on success. */ CK_RV mutex_destroy(void *mutex); /** * locks a mutex. * @param mutex * The mutex to lock. * @return * CKR_OK on success. */ CK_RV mutex_lock(void *mutex); /** * unlocks a mutex. * @param mutex * The mutex to unlock. * @return * CKR_OK on success. */ CK_RV mutex_unlock(void *mutex); static inline void _mutex_lock_fatal(void *mutex) { CK_RV rv = mutex_lock(mutex); assert(rv == CKR_OK); UNUSED(rv); } static inline void _mutex_unlock_fatal(void *mutex) { CK_RV rv = mutex_unlock(mutex); assert(rv == CKR_OK); UNUSED(rv); } #ifndef NDEBUG /* * debugging lock macros, the LOGV is on the top line to report lineno correctly */ #define mutex_lock_fatal(mutex) do { LOGV("LOCK(%p)-attempt", mutex); \ _mutex_lock_fatal(mutex); \ LOGV("LOCK(%p)-aquired", mutex); \ } while (0) #define mutex_unlock_fatal(mutex) do { LOGV("UNLOCK(%p)-attempt", mutex); \ _mutex_unlock_fatal(mutex); \ LOGV("UNLOCK(%p)-released", mutex); \ } while (0) #else #define mutex_lock_fatal(mutex) _mutex_lock_fatal(mutex) #define mutex_unlock_fatal(mutex) _mutex_unlock_fatal(mutex) #endif #endif /* SRC_PKCS11_MUTEX_H_ */ tpm2-pkcs11-1.7.0/src/lib/mech.h0000664000175000017500000000410114114240163013036 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "attrs.h" #include "object.h" #include "pkcs11.h" #include "token.h" #include "tpm.h" #ifndef SRC_LIB_MECH_H_ #define SRC_LIB_MECH_H_ typedef struct mdetail mdetail; CK_RV mdetail_new(tpm_ctx *ctx, mdetail **mout, pss_config_state pss_sig_state); void mdetail_free(mdetail **mdtl); CK_RV mech_validate(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs); CK_RV mech_synthesize(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); CK_RV mech_unsynthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); CK_RV mech_is_synthetic(mdetail *mdtl, CK_MECHANISM_PTR mech, bool *is_synthetic); CK_RV mech_get_supported(mdetail *mdtl, CK_MECHANISM_TYPE_PTR mechlist, CK_ULONG_PTR count); CK_RV mech_is_hashing_needed( mdetail *mdtl, CK_MECHANISM_PTR mech, bool *is_hashing_needed); CK_RV mech_is_hashing_knowledge_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_knowledge_needed); CK_RV mech_get_digest_alg(mdetail *mdtl, CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *mech_type); CK_RV mech_get_digester(mdetail *mdtl, CK_MECHANISM_PTR mech, const EVP_MD **md); CK_RV mech_get_tpm_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV mech_get_info(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_TYPE mech_type, CK_MECHANISM_INFO_PTR info); CK_RV mech_get_padding(mdetail *mdtl, CK_MECHANISM_PTR mech, int *padding); CK_RV mech_get_label(CK_MECHANISM_PTR mech, twist *label); void mdetail_set_pss_status(mdetail *m, bool pss_sigs_good); CK_RV mech_is_HMAC(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hmac); CK_RV mech_is_ecc(mdetail *m, CK_MECHANISM_TYPE mech_type, bool *is_ecc); #endif /* SRC_LIB_MECH_H_ */ tpm2-pkcs11-1.7.0/src/lib/session_ctx.h0000664000175000017500000001340214114236775014505 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_CTX_H_ #define SRC_PKCS11_SESSION_CTX_H_ #include "mutex.h" #include "object.h" #include "pkcs11.h" #include "tpm.h" #include "utils.h" typedef enum token_login_state token_login_state; typedef struct session_ctx session_ctx; typedef enum operation operation; enum operation { operation_none = 0, operation_find, operation_sign, operation_verify, operation_verify_recover, operation_encrypt, operation_decrypt, operation_digest, operation_count }; typedef struct generic_opdata generic_opdata; struct generic_opdata { operation op; tobject *tobj; void *data; }; /** * Frees a session context * @param ctx * The session context to free */ void session_ctx_free(session_ctx *ctx); /** * Creates a new session context within a given token. * @param ctx * The new session context generated, * @param tok * The token the session is created on. * @param flags * The session flags * @return * CKR_OK on success. */ typedef struct token token; CK_RV session_ctx_new(session_ctx **ctx, token *tok, CK_FLAGS flags); /** * Internal locking routine, use the session_ctx_lock and session_ctx_unlock macros. * @param ctx * The session to lock */ void *_session_ctx_get_lock(session_ctx *ctx); /** * Get the state of the session * @param ctx * Session context to query * @return * The CK_STATE flags. */ CK_STATE session_ctx_state_get(session_ctx *ctx); /** * Get the CK_Fstate of the session * @param ctx * Session context to query * @return * The CK_STATE flags. */ CK_FLAGS session_ctx_flags_get(session_ctx *ctx); token *session_ctx_get_token(session_ctx *ctx); /** * Given a user, performs a login event, causing a transition to it's correct end state based * on current session state and user triggering the event. * * See Section 5 of: * https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf * * @param ctx * The session context to transition. * @param user * The user performing the login, ie state transition trigger. */ void session_ctx_login_event(session_ctx *ctx, CK_USER_TYPE user); /** * Given a user, performs a logout event, causing a transition to it's correct * initial state based on current session state and user triggering the event. * * See Section 5 of: * https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf * * @param ctx * The session context to transition. */ void session_ctx_logout_event(session_ctx *ctx); /** * Determines if the opdata is in use * @param ctx * The token * @return */ bool session_ctx_opdata_is_active(session_ctx *ctx); typedef void (*opdata_free_fn)(void **opdata); /** * Sets operational specific data. Callers should take care to ensure * no other users are using it by calling session_ctx_opdata_is_active() * before setting the data. * * @param tok * The session_ctx to set operational data on * @param op * The operation setting the data * @param tobj * The active object or NULL if no single active object (like find objects has a list) * @param data * The data to set */ void session_ctx_opdata_set(session_ctx *ctx, operation op, tobject *tobj, void *data, opdata_free_fn fn); /** * Returns the active object for the session, or NULL. * @param ctx * The session context * @returns * The tobject or NULL. */ tobject *session_ctx_opdata_get_tobject(session_ctx *ctx); /** * Clears the session_ctx opdata state. NOTE that callers * are required to perform memory management on what * is stored in the void pointer. * @param tok * The session_ctx to clear operational data from. */ void session_ctx_opdata_clear(session_ctx *ctx); /** * Sets the operation specific state data * @param tok * The token to set the operation state data * @param op * The operation setting it * @param data * The data to set * @return * CKR_OK on success. */ #define session_ctx_opdata_get(ctx, op, data) _session_ctx_opdata_get(ctx, op, (void **)data) CK_RV _session_ctx_opdata_get(session_ctx *ctx, operation op, void **data); /** * Causes a login event to be propagated through the token * associated with the session context if the user is not CKU_CONTEXT_SPECIFIC. A login event is * Propagated by: * 1. setting the token level who is logged in state with whom is logged in. * 2. updating all open session states in the session table * * If the user is CKU_CONTEXT_SPECIIFC the session state is marked that it's "logged in" and a * logout should occur at the end. If a login request for CKU_USER occurs after a CKU_CONTEXT_SPECIFIC * call, an error is thrown. * * @param ctx * The session context to update, and possibly the global state of the * associated token. * @param user * The user * @param pin * The pin * @param pinlen * The length of the pin in bytes. * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_login(session_ctx *ctx, CK_USER_TYPE user, CK_BYTE_PTR pin, CK_ULONG pinlen); /** * Generates a logout event to be propagated throughout the token. * A logout event is propagated by: * 1. setting the token level "who is logged in state" to no one is logged in. * 2. setting all existing sessions back to their original state. * * @param tok * The token to propagate the login event * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_logout(session_ctx *ctx); /** * Gets session info * @param ctx * session ctx * @param info * structure to populate * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_get_info(session_ctx *ctx, CK_SESSION_INFO *info); /** * True if the object has been authenticated for use. * @param ctx * @return */ CK_RV session_ctx_tobject_authenticated(session_ctx *ctx); #endif /* SRC_PKCS11_SESSION_CTX_H_ */ tpm2-pkcs11-1.7.0/src/lib/log.h0000664000175000017500000000540314114236775012727 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_LOG_H_ #define SRC_PKCS11_LOG_H_ #include #include #include #include #if defined (__GNUC__) #define COMPILER_ATTR(...) __attribute__((__VA_ARGS__)) #else #define COMPILER_ATTR(...) #endif typedef enum log_level log_level; enum log_level { log_level_error, log_level_warn, log_level_verbose, log_level_unknown, }; static const char *log_strings[] = { "ERROR", "WARNING", "INFO", "UNKNOWN", }; #define _LOGV(filename, lineno, fmt, ...) _log(log_level_verbose, filename, lineno, fmt, ##__VA_ARGS__) #define _LOGW(filename, lineno, fmt, ...) _log(log_level_warn, filename, lineno, fmt, ##__VA_ARGS__) #define _LOGE(filename, lineno, fmt, ...) _log(log_level_error, filename, lineno, fmt, ##__VA_ARGS__) #define LOGV(fmt, ...) _LOGV(__FILE__, __LINE__, fmt, ##__VA_ARGS__) #define LOGW(fmt, ...) _LOGW(__FILE__, __LINE__, fmt, ##__VA_ARGS__) #define LOGE(fmt, ...) _LOGE(__FILE__, __LINE__, fmt, ##__VA_ARGS__) static log_level _g_current_log_level = log_level_warn; static inline void log_set_level(const char *level_str) { if (!level_str) { return; } char *endptr; errno = 0; unsigned long value = strtoul(level_str, &endptr, 0); if (errno || *endptr != '\0') { fprintf(stderr, "Could not change log level, got: \"%s\"\n", level_str); return; } /* * Use a switch to check value, as enum may be signed or * unsigned and when unsigned checking less than can cause * the compiler to complain. */ switch(value) { case log_level_error: case log_level_warn: case log_level_verbose: _g_current_log_level = value; break; default: fprintf(stderr, "Could not change log level, got: \"%s\"\n", level_str); return; } } static inline void _log(log_level level, const char *file, unsigned lineno, const char *fmt,...) { /* override config with env var if set */ log_set_level(getenv("TPM2_PKCS11_LOG_LEVEL")); /* Skip printing messages outside of the log level */ if (level > _g_current_log_level) { return; } va_list argptr; va_start(argptr, fmt); /* Verbose output prints file and line on error */ if (_g_current_log_level >= log_level_verbose) { fprintf(stderr, "%s on line: \"%u\" in file: \"%s\": ", log_strings[level], lineno, file); } else { fprintf(stderr, "%s: ", log_strings[level]); } /* Print the user supplied message */ vfprintf(stderr, fmt, argptr); /* always add a new line so the user doesn't have to */ fprintf(stderr, "\n"); va_end(argptr); } #endif /* SRC_PKCS11_LOG_H_ */ tpm2-pkcs11-1.7.0/src/lib/typed_memory.h0000644000175000017500000000146413754763565014677 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_TYPED_MEMORY_H_ #define SRC_LIB_TYPED_MEMORY_H_ #define TYPE_BYTE_INT ((CK_BYTE)1) #define TYPE_BYTE_BOOL ((CK_BYTE)2) #define TYPE_BYTE_INT_SEQ ((CK_BYTE)3) #define TYPE_BYTE_HEX_STR ((CK_BYTE)4) /* * if we ever need wrap templates we will define a special type. * The parser would also need to be updated to recognize a seq * of attribute template pointers. */ #define TYPE_BYTE_TEMP_SEQ ((CK_BYTE)5) void *type_calloc(size_t nmemb, size_t size, CK_BYTE type); void *type_zrealloc(void *ptr, size_t size, CK_BYTE type); CK_BYTE type_from_ptr(void *ptr, size_t len); CK_RV type_mem_dup(void *in, size_t len, void **dup); void type_mem_cpy(void *dest, void *in, size_t size); const char *type_to_str(CK_BYTE type); #endif /* SRC_LIB_TYPED_MEMORY_H_ */ tpm2-pkcs11-1.7.0/src/lib/session_table.c0000644000175000017500000001105613754763565015005 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "mutex.h" #include "pkcs11.h" #include "session_ctx.h" #include "session_table.h" #include "token.h" #include "utils.h" struct session_table { CK_ULONG cnt; CK_ULONG rw_cnt; session_ctx *table[MAX_NUM_OF_SESSIONS]; }; CK_RV session_table_new(session_table **t) { session_table *x = calloc(1, sizeof(session_table)); if (!x) { return CKR_HOST_MEMORY; } *t = x; return CKR_OK; } void session_table_free(session_table *t) { if (!t) { return; } free(t); } void session_table_get_cnt(session_table *t, CK_ULONG_PTR all, CK_ULONG_PTR rw, CK_ULONG_PTR ro) { /* All counts should always be greater than or equal to rw count */ assert(t->cnt >= t->rw_cnt); if (all) { *all = t->cnt; } if (rw) { *rw = t->rw_cnt; } if (ro) { *ro = t->cnt - t->rw_cnt; } } CK_RV session_table_new_entry(session_table *t, CK_SESSION_HANDLE *handle, token *tok, CK_FLAGS flags) { CK_SESSION_HANDLE free_handle = 0; session_ctx **open_slot = NULL; size_t i; for (i=0; i < ARRAY_LEN(t->table); i++) { if (!t->table[i]) { /* 0 is not a good session handle, so offset by 1 */ free_handle = i + 1; open_slot = &t->table[i]; break; } } if (!open_slot) { LOGV("No available session slot found"); return CKR_SESSION_COUNT; } CK_RV rv = session_ctx_new(open_slot, tok, flags); if (rv != CKR_OK) { return rv; } *handle = free_handle; t->cnt++; if(flags & CKF_RW_SESSION) { t->rw_cnt++; } return CKR_OK; } static CK_RV do_logout_if_needed(session_ctx *ctx) { token *tok = session_ctx_get_token(ctx); assert(tok); if (tok->login_state == token_no_one_logged_in) { return CKR_OK; } return session_ctx_logout(ctx); } static CK_RV session_table_free_ctx_by_ctx(token *t, session_ctx **ctx) { session_table *stable = t->s_table; CK_RV rv = CKR_OK; CK_STATE state = session_ctx_state_get(*ctx); if(state == CKS_RW_PUBLIC_SESSION || state == CKS_RW_USER_FUNCTIONS || state == CKS_RW_SO_FUNCTIONS) { assert(stable->rw_cnt); stable->rw_cnt--; } stable->cnt--; /* Per the spec, when session count hits 0, logout */ if (!stable->cnt) { rv = do_logout_if_needed(*ctx); if (rv != CKR_OK) { LOGE("do_logout_if_needed failed: 0x%lx", rv); } } session_ctx_free(*ctx); *ctx = NULL; return rv; } static session_ctx **_session_table_lookup(session_table *t, CK_SESSION_HANDLE handle) { if (handle == 0 || handle > ARRAY_LEN(t->table)) { return NULL; } return &t->table[handle - 1]; } session_ctx *session_table_lookup(session_table *t, CK_SESSION_HANDLE handle) { return *_session_table_lookup(t, handle); } CK_RV session_table_free_ctx_by_handle(token *t, CK_SESSION_HANDLE handle) { session_ctx **ctx = _session_table_lookup(t->s_table, handle); if (!*ctx) { return CKR_SESSION_HANDLE_INVALID; } return session_table_free_ctx_by_ctx(t, ctx); } CK_RV session_table_free_ctx_all(token *t) { bool had_error = false; if (!t->s_table) { return CKR_OK; } unsigned i; for (i=0; i < ARRAY_LEN(t->s_table->table); i++) { CK_SESSION_HANDLE handle = i; /* * skip dead handles */ session_ctx **ctx = &t->s_table->table[handle]; if (!*ctx) { continue; } CK_RV rv = session_table_free_ctx_by_ctx(t, ctx); if (rv != CKR_OK) { LOGE("Failed to free session_ctx: 0x%lx", rv); had_error = true; } } return !had_error ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV session_table_free_ctx(token *t, CK_SESSION_HANDLE handle) { return session_table_free_ctx_by_handle(t, handle); } void session_table_login_event(session_table *s_table, CK_USER_TYPE user) { size_t i; for (i=0; i < ARRAY_LEN(s_table->table); i++) { session_ctx *ctx = s_table->table[i]; if (!ctx) { continue; } session_ctx_login_event(ctx, user); } } void token_logout_all_sessions(token *tok) { size_t i; for (i=0; i < ARRAY_LEN(tok->s_table->table); i++) { session_ctx *ctx = tok->s_table->table[i]; if (!ctx) { continue; } session_ctx_logout_event(ctx); } } tpm2-pkcs11-1.7.0/src/lib/db.h0000664000175000017500000000451014114236775012531 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_LIB_DB_H_ #define SRC_PKCS11_LIB_DB_H_ #include #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" #include "twist.h" #include "utils.h" /* * This HAS to be smaller than 1 byte, as this is embedded * in the top byte of the session handle. */ #define MAX_TOKEN_CNT 255 typedef struct pobject_v3 pobject_v3; struct pobject_v3 { int id; char *hierarchy; twist handle; char *objauth; }; typedef struct pobject_v4 pobject_v4; struct pobject_v4 { int id; char *hierarchy; char *config; char *objauth; }; CK_RV db_init(void); CK_RV db_destroy(void); CK_RV db_get_tokens(token *t, size_t *len); CK_RV db_update_for_pinchange( token *tok, bool is_so, /* new seal object auth metadata */ twist newauthsalthex, /* private and public blobs */ twist newprivblob, twist newpubblob); CK_RV db_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); CK_RV db_add_new_object(token *tok, tobject *tobj); /** * Delete a tobject from the DB. * @param tobj * The tobject to remove. * @return */ CK_RV db_delete_object(tobject *tobj); CK_RV db_get_first_pid(unsigned *id); CK_RV db_add_primary(pobject *pobj, unsigned *pid); CK_RV db_add_token(token *tok); CK_RV db_update_token_config(token *tok); CK_RV db_update_tobject_attrs(unsigned id, attr_list *attrs); /* Debug testing */ #ifdef TESTING #include "twist.h" int get_blob_null(sqlite3_stmt *stmt, int i, twist *blob); int get_blob(sqlite3_stmt *stmt, int i, twist *blob); tobject *db_tobject_new(sqlite3_stmt *stmt); tobject *__real_db_tobject_new(sqlite3_stmt *stmt); int init_pobject_v3_from_stmt(sqlite3_stmt *stmt, pobject_v3 *old_pobj); int init_tobjects(token *tok); int __real_init_tobjects(token *tok); CK_RV convert_pobject_v3_to_v4(pobject_v3 *old_pobj, pobject_v4 *new_pobj); CK_RV db_add_pobject_v4(sqlite3 *updb, pobject_v4 *new_pobj); int init_pobject_from_stmt(sqlite3_stmt *stmt, tpm_ctx *tpm, pobject *pobj); int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); int __real_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); int init_sealobjects(unsigned tokid, sealobject *sealobj); int __real_init_sealobjects(unsigned tokid, sealobject *sealobj); #endif #endif /* SRC_PKCS11_LIB_DB_H_ */ tpm2-pkcs11-1.7.0/src/lib/debug.h0000644000175000017500000000053513754763565013246 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_DEBUG_H_ #define SRC_LIB_DEBUG_H_ #include "config.h" #if defined(FUZZING) || defined(UNIT_TESTING) || !defined(NDEBUG) #define WEAK __attribute__((weak)) #define DEBUG_VISIBILITY #define TESTING 1 #else #define WEAK #define DEBUG_VISIBILITY static #endif #endif /* SRC_LIB_DEBUG_H_ */ tpm2-pkcs11-1.7.0/src/lib/sign.h0000644000175000017500000000252313754763565013117 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef _SRC_LIB_SIGN_H_ #define _SRC_LIB_SIGN_H_ #include "pkcs11.h" #include "session_ctx.h" CK_RV sign_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV sign_update(session_ctx *ctx, unsigned char *part, unsigned long part_len); CK_RV sign_final_ex(session_ctx *ctx, unsigned char *signature, unsigned long *signature_len, bool is_oneshot); static inline CK_RV sign_final(session_ctx *ctx, unsigned char *signature, unsigned long *signature_len) { return sign_final_ex(ctx, signature, signature_len, false); } CK_RV sign(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len); CK_RV verify_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV verify_update(session_ctx *ctx, unsigned char *part, unsigned long part_len); CK_RV verify_final(session_ctx *ctx, unsigned char *signature, unsigned long signature_len); CK_RV verify(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long signature_len); CK_RV verify_recover_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV verify_recover (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len); #endif tpm2-pkcs11-1.7.0/src/lib/ssl_util.c0000664000175000017500000003377614116451527014011 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include "log.h" #include "pkcs11.h" #include "ssl_util.h" #include "twist.h" #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST111) #include #endif #if defined(LIB_TPM2_OPENSSL_OPENSSL_PRE11) /* * Pre openssl 1.1 doesn't have EC_POINT_point2buf, so use EC_POINT_point2oct to * create an API compatible version of it. */ size_t EC_POINT_point2buf(const EC_GROUP *group, const EC_POINT *point, point_conversion_form_t form, unsigned char **pbuf, BN_CTX *ctx) { /* Get the required buffer length */ size_t len = EC_POINT_point2oct(group, point, form, NULL, 0, NULL); if (!len) { return 0; } /* allocate it */ unsigned char *buf = OPENSSL_malloc(len); if (!buf) { return 0; } /* convert it */ len = EC_POINT_point2oct(group, point, form, buf, len, ctx); if (!len) { OPENSSL_free(buf); return 0; } *pbuf = buf; return len; } size_t OBJ_length(const ASN1_OBJECT *obj) { if (!obj) { return 0; } return obj->length; } const unsigned char *OBJ_get0_data(const ASN1_OBJECT *obj) { if (!obj) { return NULL; } return obj->data; } const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x) { return ASN1_STRING_data((ASN1_STRING *)x); } int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d) { if ((r->n == NULL && n == NULL) || (r->e == NULL && e == NULL)) { return 0; } if (n != NULL) { BN_free(r->n); r->n = n; } if (e != NULL) { BN_free(r->e); r->e = e; } if (d != NULL) { BN_free(r->d); r->d = d; } return 1; } int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s) { if (!r || !s) { return 0; } BN_free(sig->r); BN_free(sig->s); sig->r = r; sig->s = s; return 1; } EC_KEY *EVP_PKEY_get0_EC_KEY(EVP_PKEY *pkey) { if (pkey->type != EVP_PKEY_EC) { return NULL; } return pkey->pkey.ec; } #endif static CK_RV convert_pubkey_RSA(RSA **outkey, attr_list *attrs) { RSA *rsa = NULL; BIGNUM *e = NULL, *n = NULL; CK_ATTRIBUTE_PTR exp = attr_get_attribute_by_type(attrs, CKA_PUBLIC_EXPONENT); if (!exp) { LOGE("RSA Object must have attribute CKA_PUBLIC_EXPONENT"); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR mod = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!mod) { LOGE("RSA Object must have attribute CKA_MODULUS"); return CKR_GENERAL_ERROR; } rsa = RSA_new(); if (!rsa) { SSL_UTIL_LOGE("Failed to allocate OpenSSL RSA structure"); goto error; } e = BN_bin2bn(exp->pValue, exp->ulValueLen, NULL); if (!e) { SSL_UTIL_LOGE("Failed to convert exponent to SSL internal format"); goto error; } n = BN_bin2bn(mod->pValue, mod->ulValueLen, NULL); if (!n) { SSL_UTIL_LOGE("Failed to convert modulus to SSL internal format"); goto error; } if (!RSA_set0_key(rsa, n, e, NULL)) { SSL_UTIL_LOGE("Failed to set RSA modulus and exponent components"); RSA_free(rsa); BN_free(e); BN_free(n); goto error; } *outkey = rsa; return CKR_OK; error: RSA_free(rsa); if (e) { BN_free(e); } if (n) { BN_free(n); } return CKR_GENERAL_ERROR; } static CK_RV convert_pubkey_ECC(EC_KEY **outkey, attr_list *attrs) { EC_KEY *key = EC_KEY_new(); if (!key) { LOGE("oom"); return CKR_HOST_MEMORY; } CK_ATTRIBUTE_PTR ecparams = attr_get_attribute_by_type(attrs, CKA_EC_PARAMS); if (!ecparams) { LOGE("ECC Key must have attribute CKA_EC_PARAMS"); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR ecpoint = attr_get_attribute_by_type(attrs, CKA_EC_POINT); if (!ecpoint) { LOGE("ECC Key must have attribute CKA_EC_POINT"); return CKR_GENERAL_ERROR; } /* set params */ const unsigned char *x = ecparams->pValue; EC_KEY *k = d2i_ECParameters(&key, &x, ecparams->ulValueLen); if (!k) { SSL_UTIL_LOGE("Could not update key with EC Parameters"); EC_KEY_free(key); return CKR_GENERAL_ERROR; } /* set point */ x = ecpoint->pValue; ASN1_OCTET_STRING *os = d2i_ASN1_OCTET_STRING(NULL, &x, ecpoint->ulValueLen); if (os) { x = os->data; k = o2i_ECPublicKey(&key, &x, os->length); ASN1_STRING_free(os); if (!k) { SSL_UTIL_LOGE("Could not update key with EC Points"); EC_KEY_free(key); return CKR_GENERAL_ERROR; } } *outkey = key; return CKR_OK; } CK_RV ssl_util_tobject_to_evp(EVP_PKEY **outpkey, tobject *obj) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(obj->attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected object to have attribute CKA_KEY_TYPE"); return CKR_KEY_TYPE_INCONSISTENT; } CK_KEY_TYPE key_type = CKK_RSA; CK_RV rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { LOGE("Could not convert CK_KEY_TYPE"); return rv; } else if (key_type == CKK_SHA_1_HMAC || key_type == CKK_SHA256_HMAC || key_type == CKK_SHA384_HMAC || key_type == CKK_SHA512_HMAC || key_type == CKK_GENERIC_SECRET) { /* Ignore HMAC keys no public operation possible */ *outpkey = NULL; return CKR_OK; } EVP_PKEY *pkey = EVP_PKEY_new(); if (!pkey) { LOGE("oom"); return CKR_HOST_MEMORY; } if (key_type == CKK_EC) { EC_KEY *e = NULL; rv = convert_pubkey_ECC(&e, obj->attrs); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_assign_EC_KEY(pkey, e); if (!rc) { SSL_UTIL_LOGE("Could not set pkey with ec key"); EC_KEY_free(e); EVP_PKEY_free(pkey); return CKR_GENERAL_ERROR; } } else if (key_type == CKK_RSA) { RSA *r = NULL; rv = convert_pubkey_RSA(&r, obj->attrs); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_assign_RSA(pkey, r); if (!rc) { SSL_UTIL_LOGE("Could not set pkey with rsa key"); RSA_free(r); EVP_PKEY_free(pkey); return CKR_GENERAL_ERROR; } } else { LOGE("Invalid CKA_KEY_TYPE, got: %lu", key_type); EVP_PKEY_free(pkey); return CKR_KEY_TYPE_INCONSISTENT; } *outpkey = pkey; return CKR_OK; } CK_RV ssl_util_encrypt(EVP_PKEY *pkey, int padding, twist label, const EVP_MD *md, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { assert(pkey); CK_RV rv = CKR_GENERAL_ERROR; if (!ctext) { *ctextlen = EVP_PKEY_size(pkey); return CKR_OK; } EVP_PKEY_CTX *pkey_ctx = EVP_PKEY_CTX_new(pkey, NULL); if (!pkey_ctx) { LOGE("OOM"); return CKR_HOST_MEMORY; } int rc = EVP_PKEY_encrypt_init(pkey_ctx); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_encrypt_init"); goto error; } if (padding) { rc = EVP_PKEY_CTX_set_rsa_padding(pkey_ctx, padding); if (rc <= 0) { SSL_UTIL_LOGE("Could not set padding"); goto error; } } if (label) { assert(padding == RSA_PKCS1_OAEP_PADDING); /* make a copy since OSSL calls OSSL_free on label */ size_t len = twist_len(label); char *label2 = OPENSSL_memdup(label, len); if (!label2) { LOGE("oom"); return CKR_HOST_MEMORY; } rc = EVP_PKEY_CTX_set0_rsa_oaep_label(pkey_ctx, label2, len); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set0_rsa_oaep_label"); goto error; } } if (md) { assert(padding == RSA_PKCS1_OAEP_PADDING); rc = EVP_PKEY_CTX_set_rsa_oaep_md(pkey_ctx, md); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_oaep_md"); goto error; } } size_t outlen = *ctextlen; rc = EVP_PKEY_encrypt(pkey_ctx, ctext, &outlen, ptext, ptextlen); if (rc <= 0) { unsigned long r = ERR_get_error(); int reason = ERR_GET_REASON(r); if (reason == EVP_R_BUFFER_TOO_SMALL) { *ctextlen = EVP_PKEY_size(pkey); rv = CKR_BUFFER_TOO_SMALL; } else { LOGE("Could not perform RSA public encrypt: %s", ERR_error_string(r, NULL)); } goto error; } *ctextlen = outlen; rv = CKR_OK; error: EVP_PKEY_CTX_free(pkey_ctx); return rv; } CK_RV ssl_util_setup_evp_pkey_ctx(EVP_PKEY *pkey, int padding, const EVP_MD *md, fn_EVP_PKEY_init init_fn, EVP_PKEY_CTX **outpkey_ctx) { EVP_PKEY_CTX *pkey_ctx = EVP_PKEY_CTX_new(pkey, NULL); if (!pkey_ctx) { SSL_UTIL_LOGE("EVP_PKEY_CTX_new failed"); return CKR_GENERAL_ERROR; } int rc = init_fn(pkey_ctx); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_verify_init failed"); goto error; } if (padding) { rc = EVP_PKEY_CTX_set_rsa_padding(pkey_ctx, padding); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_padding failed"); goto error; } } rc = EVP_PKEY_CTX_set_signature_md(pkey_ctx, md); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_signature_md failed"); goto error; } *outpkey_ctx = pkey_ctx; return CKR_OK; error: EVP_PKEY_CTX_free(pkey_ctx); return CKR_GENERAL_ERROR; } static CK_RV do_sig_verify_rsa(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { CK_RV rv = CKR_GENERAL_ERROR; EVP_PKEY_CTX *pkey_ctx = NULL; rv = ssl_util_setup_evp_pkey_ctx(pkey, padding, md, EVP_PKEY_verify_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_verify(pkey_ctx, signature, signature_len, digest, digest_len); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify failed"); } else if (rc == 1) { rv = CKR_OK; } else { rv = CKR_SIGNATURE_INVALID; } EVP_PKEY_CTX_free(pkey_ctx); return rv; } static CK_RV create_ecdsa_sig(CK_BYTE_PTR sig, CK_ULONG siglen, ECDSA_SIG **outsig) { if (siglen & 1) { LOGE("Expected ECDSA signature length to be even, got : %lu", siglen); return CKR_SIGNATURE_LEN_RANGE; } size_t len = siglen >> 1; unsigned char *rbuf = sig; unsigned char *sbuf = &sig[len]; BIGNUM *r = BN_bin2bn(rbuf, len, NULL); if (!r) { LOGE("Could not make bignum for r"); return CKR_GENERAL_ERROR; } BIGNUM *s = BN_bin2bn(sbuf, len, NULL); if (!s) { LOGE("Could not make bignum for s"); BN_free(r); return CKR_GENERAL_ERROR; } ECDSA_SIG *ossl_sig = ECDSA_SIG_new(); if (!ossl_sig) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = ECDSA_SIG_set0(ossl_sig, r, s); if (!rc) { LOGE("Could not call ECDSA_SIG_set0"); ECDSA_SIG_free(ossl_sig); return CKR_GENERAL_ERROR; } *outsig = ossl_sig; return CKR_OK; } static CK_RV do_sig_verify_ec(EVP_PKEY *pkey, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { EC_KEY *eckey = EVP_PKEY_get0_EC_KEY(pkey); if (!eckey) { LOGE("Expected EC Key"); return CKR_GENERAL_ERROR; } /* * OpenSSL expects ASN1 framed signatures, PKCS11 does flat * R + S signatures, so convert it to ASN1 framing. * See: * https://github.com/tpm2-software/tpm2-pkcs11/issues/277 * For details. */ ECDSA_SIG *ossl_sig = NULL; CK_RV rv = create_ecdsa_sig(signature, signature_len, &ossl_sig); if (rv != CKR_OK) { return rv; } int rc = ECDSA_do_verify(digest, digest_len, ossl_sig, eckey); if (rc < 0) { ECDSA_SIG_free(ossl_sig); SSL_UTIL_LOGE("ECDSA_do_verify failed"); return CKR_GENERAL_ERROR; } ECDSA_SIG_free(ossl_sig); return rc == 1 ? CKR_OK : CKR_SIGNATURE_INVALID; } CK_RV ssl_util_sig_verify(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { int type = EVP_PKEY_type(EVP_PKEY_id(pkey)); switch (type) { case EVP_PKEY_RSA: return do_sig_verify_rsa(pkey, padding, md, digest, digest_len, signature, signature_len); case EVP_PKEY_EC: return do_sig_verify_ec(pkey, digest, digest_len, signature, signature_len); default: LOGE("Unknown PKEY type, got: %d", type); return CKR_GENERAL_ERROR; } } CK_RV ssl_util_verify_recover(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { int type = EVP_PKEY_type(EVP_PKEY_id(pkey)); if (type != EVP_PKEY_RSA) { LOGE("Cannot perform verify recover on non RSA key types"); return CKR_GENERAL_ERROR; } EVP_PKEY_CTX *pkey_ctx = NULL; CK_RV rv = ssl_util_setup_evp_pkey_ctx(pkey, padding, md, EVP_PKEY_verify_recover_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_verify_recover(pkey_ctx, data, (size_t*) data_len, signature, signature_len); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify_recover failed"); } else if (rc == 1) { rv = CKR_OK; } else { rv = CKR_SIGNATURE_INVALID; } EVP_PKEY_CTX_free(pkey_ctx); return rv; } tpm2-pkcs11-1.7.0/src/lib/twist.c0000644000175000017500000002143113754763565013323 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include "debug.h" #include "twist.h" #include "utils.h" #ifdef UNIT_TESTING static int _next_alloc_fails = 0; void twist_next_alloc_fails(void) { _next_alloc_fails = 1; } static int alloc_fails(void) { int x = _next_alloc_fails; _next_alloc_fails = 0; return x; } #else static int alloc_fails(void) { return 0; } #endif #define LEN(x) (sizeof(x)/sizeof(*x)) typedef struct twist_hdr twist_hdr; struct twist_hdr { char *end; char data[]; }; static inline twist_hdr *from_twist_to_hdr(twist tstring) { return (twist_hdr *) (tstring - sizeof(char *)); } static inline twist from_hdr_to_twist(twist_hdr *str) { return (twist) str->data; } static void *twist_realloc(void *ptr, size_t size) { if (alloc_fails()) { return NULL; } return realloc(ptr, size); } static twist_hdr *internal_realloc(twist old, size_t size) { /* add header to size */ bool fail = _safe_add(size, size, sizeof(twist)); if (fail) { return NULL ; } /* add null byte space */ fail = _safe_add(size, size, 1); if (fail) { return NULL ; } twist_hdr *old_hdr = old ? from_twist_to_hdr(old) : NULL; return (twist_hdr *) twist_realloc(old_hdr, size); } static twist internal_append(twist orig, const binarybuffer data[], const size_t len) { size_t i; size_t size = 0; for (i = 0; i < len; i++) { const binarybuffer *b = &data[i]; if (!b->size) { continue; } bool fail = _safe_add(size, size, b->size); if (fail) { return NULL ; } } /* account for the space in the original string if specified */ size_t offset = 0; if (orig) { offset = twist_len(orig); bool fail = _safe_add(size, size, offset); if (fail) { return NULL ; } } twist_hdr *hdr = internal_realloc(orig, size); if (!hdr) { return NULL ; } for (i = 0; i < len; i++) { const binarybuffer *b = &data[i]; if (b->data) { memcpy(&hdr->data[offset], data[i].data, data[i].size); } else { memset(&hdr->data[offset], 0, data[i].size); } offset += data[i].size; } hdr->end = hdr->data + offset; *hdr->end = '\0'; return from_hdr_to_twist(hdr); } static inline twist internal_create(const binarybuffer data[], const size_t len) { return internal_append(NULL, data, len); } twist twist_new(const char *str) { if (!str) { return NULL ; } const binarybuffer things[1] = { { .size = strlen(str), .data = str } }; return internal_create(things, LEN(things)); } twist twist_calloc(size_t size) { if (!size) { return NULL; } const binarybuffer things[1] = { { .size = size, .data = NULL } }; return internal_create(things, LEN(things)); } size_t twist_len(twist tstring) { twist_hdr *str = from_twist_to_hdr(tstring); size_t len = str->end - str->data; return len; } twist twist_dup(twist tstring) { if (!tstring) { return NULL ; } const binarybuffer things[1] = { { .size = twist_len(tstring), .data = tstring } }; return internal_create(things, LEN(things)); } void twist_free(twist tstring) { if (!tstring) { return; } free(from_twist_to_hdr(tstring)); } extern char *twist_end(twist tstring) { if (!tstring) { return NULL ; } twist_hdr *hdr = from_twist_to_hdr(tstring); return hdr->end - 1; } twist twist_concat_twist(twist a, twist b) { if (!b) { return twist_dup(a); } if (!a) { return twist_dup(b); } binarybuffer things[2] = { { .size = twist_len(a), .data = a }, { .size = twist_len(b), .data = b } }; return internal_create(things, LEN(things)); } static twist twist_concat_internal(twist old_str, const void *data, size_t len) { const binarybuffer things[2] = { { .size = twist_len(old_str), .data = old_str }, { .size = len, .data = data }, }; return internal_create(things, LEN(things)); } twist twistbin_concat(twist old_str, const void *data, size_t len) { if (!data) { return twist_dup(old_str); } if (!old_str) { return twistbin_new(data, len); } return twist_concat_internal(old_str, data, len); } twist twist_concat(twist old_str, const char *new_str) { if (!new_str) { return twist_dup(old_str); } if (!old_str) { return twist_new(new_str); } size_t new_len = strlen(new_str); if (new_len == 0) { return twist_dup(old_str); } return twist_concat_internal(old_str, new_str, new_len); } bool twist_eq(twist x, twist y) { if (x == y) { return true; } if (!x || !y) { return false; } if (twist_len(x) != twist_len(y)) { return false; } return !memcmp(x, y, twist_len(x)); } DEBUG_VISIBILITY twist __real_twistbin_new(const void *data, size_t size) { if (!data) { return NULL ; } const struct binarybuffer things[1] = { { .size = size, .data = data } }; return internal_create(things, LEN(things)); } WEAK twist twistbin_new(const void *data, size_t size) { return __real_twistbin_new(data, size); } twist twist_append(twist old_str, const char *new_str) { if (!old_str) { return twist_new(new_str); } if (!new_str) { return old_str; } binarybuffer data[1] = { { .data = new_str, .size = strlen(new_str) } }; return internal_append(old_str, data, LEN(data)); } twist twistbin_append(twist old_str, const void *new_data, size_t len) { if (!old_str) { return twistbin_new(new_data, len); } if (!new_data) { return old_str; } binarybuffer data[1] = { { .data = new_data, .size = len } }; return internal_append(old_str, data, LEN(data)); } twist twistbin_aappend(twist old_str, binarybuffer data[], size_t num_of_args) { if (!data || !num_of_args) { return old_str; } return internal_append(old_str, data, num_of_args); } twist twist_append_twist(twist old_str, twist new_str) { if (!old_str) { return new_str; } if (!new_str) { return old_str; } return twistbin_append(old_str, new_str, twist_len(new_str)); } twist twist_truncate(twist tstring, size_t len) { if (!tstring) { return NULL ; } size_t old_len = twist_len(tstring); if (old_len == len) { return tstring; } twist_hdr *hdr = internal_realloc(tstring, len); if (!hdr) { return NULL ; } hdr->end = hdr->data + len; if (old_len < len) { memset(&hdr->data[old_len], 0, len - old_len); } else { *hdr->end = '\0'; } return from_hdr_to_twist(hdr); } twist twist_create(const char *data[], size_t len) { if (!data || !len) { return NULL ; } size_t i; size_t found = 0; binarybuffer *bindata = calloc(len, sizeof(bindata[0])); if (!bindata) { return NULL; } for (i = 0; i < len; i++) { const char *arg = data[i]; if (arg) { bindata[found].data = arg; bindata[found].size = strlen(arg); found++; } } twist tmp = internal_create(bindata, found); free(bindata); return tmp; } twist twistbin_create(const binarybuffer data[], size_t len) { if (!data || !len) { return NULL ; } return internal_create(data, len); } static twist hexlify(const char *data, size_t datalen) { size_t bytes = 0; bool fail = _safe_mul(bytes, datalen, 2); if (fail) { return NULL; } twist_hdr *hdr = internal_realloc(NULL, bytes); if (!hdr) { return NULL; } size_t i; for (i = 0; i < datalen; i++) { /* cannot overflow or alloc math on bytes would fail */ sprintf(hdr->data + (i * 2), "%02x", 255 & data[i]); } hdr->data[datalen *2] = '\0'; hdr->end = &hdr->data[datalen * 2]; return from_hdr_to_twist(hdr); } twist twist_hex_new(const char *data, size_t len) { if (!data) { return NULL; } return hexlify(data, len); } twist twist_hexlify(const twist data) { if (!data) { return NULL; } size_t datalen = twist_len(data); return hexlify(data, datalen); } static bool hex2bin(char hexchr, char *out) { char p = tolower(hexchr); if (p >= '0' && p <= '9') { *out = p - 0x30; return true; } else if(p >= 'a' && p <= 'f') { *out = p - 0x61 + 0xA; return true; } return false; } twist twistbin_unhexlify(const char *hexdata) { if (!hexdata) { return NULL; } size_t hexlen = strlen(hexdata); if (hexlen & 0x1) { return NULL; } size_t rawlen = hexlen/2; twist_hdr *hdr = internal_realloc(NULL, rawlen); if (!hdr) { return NULL; } char *raw = hdr->data; size_t i, j; for (i=0, j=0; i < rawlen; i++, j+=2) { char upper_nibble; bool result = hex2bin(hexdata[j], &upper_nibble); if (!result) { goto error; } upper_nibble <<= 4; char lower_nibble; result = hex2bin(hexdata[j + 1], &lower_nibble); if (!result) { goto error; } raw[i] = upper_nibble | lower_nibble; } raw[rawlen] = '\0'; hdr->end = &raw[rawlen]; return from_hdr_to_twist(hdr); error: twist_free(from_hdr_to_twist(hdr)); return NULL; } tpm2-pkcs11-1.7.0/src/lib/general.h0000664000175000017500000000060214114236775013557 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_GENERAL_H_ #define SRC_PKCS11_GENERAL_H_ #include #include "pkcs11.h" CK_RV general_init(void *init_args); CK_RV general_get_func_list(CK_FUNCTION_LIST **function_list); CK_RV general_get_info(CK_INFO *info); bool general_is_init(void); CK_RV general_finalize(void *reserved); #endif /* SRC_GENERAL_H_ */ tpm2-pkcs11-1.7.0/src/lib/slot.h0000644000175000017500000000127713754763565013145 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_SLOT_H_ #define SRC_SLOT_H_ #include #include "pkcs11.h" typedef struct token token; #define SLOT_ID 0x1234 CK_RV slot_init(void); void slot_destroy(void); token *slot_get_token(CK_SLOT_ID slot_id); CK_RV slot_get_list (unsigned char token_present, CK_SLOT_ID *slot_list, unsigned long *count); CK_RV slot_get_info (CK_SLOT_ID slot_id, CK_SLOT_INFO *info); CK_RV slot_mechanism_list_get (CK_SLOT_ID slotID, CK_MECHANISM_TYPE *mechanism_list, unsigned long *count); CK_RV slot_mechanism_info_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info); CK_RV slot_add_uninit_token(void); #endif /* SRC_SLOT_H_ */ tpm2-pkcs11-1.7.0/src/lib/backend_esysdb.c0000664000175000017500000002722114116451527015077 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "backend_esysdb.h" #include "db.h" #include "tpm.h" CK_RV backend_esysdb_init(void) { tpm_init(); return db_init(); } CK_RV backend_esysdb_destroy(void) { db_destroy(); tpm_destroy(); return CKR_OK; } CK_RV backend_esysdb_ctx_new(token *t) { return tpm_ctx_new(t->config.tcti, &t->tctx); } static void sealobject_free(sealobject *sealobj) { twist_free(sealobj->soauthsalt); twist_free(sealobj->sopriv); twist_free(sealobj->sopub); twist_free(sealobj->userauthsalt); twist_free(sealobj->userpub); twist_free(sealobj->userpriv); memset(sealobj, 0, sizeof(*sealobj)); } void backend_esysdb_ctx_reset(token *t) { sealobject_free(&t->esysdb.sealobject); /* * the rest of the state can live so we don't need to free/realloc it * Beware of who holds the mutex! */ } void backend_esysdb_ctx_free(token *t) { sealobject_free(&t->esysdb.sealobject); } static CK_RV get_or_create_primary(token *t) { /* if there is no primary object ... */ if (t->pid) { return CKR_OK; } /* is there one in the db to use ? */ CK_RV rv = db_get_first_pid(&t->pid); if (rv != CKR_OK) { return rv; } /* if so use it */ if (t->pid) { /* tokens in the DB store already have an associated primary object */ rv = db_init_pobject(t->pid, &t->pobject, t->tctx); if (rv != CKR_OK) { LOGE("Could not initialize pobject"); return rv; } /* if it's a transient primary we need to create it */ return t->pobject.config.is_transient ? tpm_create_transient_primary_from_template(t->tctx, t->pobject.config.template_name, NULL, &t->pobject.handle) : CKR_OK; } /* is their a PC client spec key ? */ uint32_t handle = 0; twist blob = NULL; rv = tpm_get_existing_primary(t->tctx, &handle, &blob); if (rv != CKR_OK) { return rv; } /* nothing, create one and persist it */ if (!handle) { rv = tpm_create_persistent_primary(t->tctx, &handle, &blob); if (rv != CKR_OK) { return rv; } } assert(handle); t->pobject.config.is_transient = false; t->pobject.handle = handle; t->pobject.config.blob = blob; rv = db_add_primary(&t->pobject, &t->pid); assert(t->pid); return rv; } /** Create a new token in esysdb backend. * * See backend_create_token_seal() */ CK_RV backend_esysdb_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; /* * find or create a primary object and get the serialized blob * for it. */ rv = get_or_create_primary(t); if (rv != CKR_OK) { LOGE("Could not find nor create a primary object"); goto error; } /* we have a primary object, create the seal object underneath it */ rv = tpm2_create_seal_obj(t->tctx, t->pobject.objauth, t->pobject.handle, newauth, NULL, hexwrappingkey, &t->esysdb.sealobject.sopub, &t->esysdb.sealobject.sopriv); if (rv != CKR_OK) { LOGE("Could not create SO seal object"); goto error; } t->esysdb.sealobject.soauthsalt = newsalthex; /* TODO get TCTI config from ENV var and use throughout this process */ t->config.is_initialized = true; rv = db_add_token(t); if (rv != CKR_OK) { /* do not take ownership on failure */ t->esysdb.sealobject.soauthsalt = NULL; /* reset the token to an initial state */ backend_esysdb_ctx_reset(t); LOGE("Could not add token to db"); goto error; } assert(t->id); error: return rv; } /** Retrieve all esys tokens available. * * See backend_get_tokens() */ CK_RV backend_esysdb_get_tokens(token *tok, size_t *len) { return db_get_tokens(tok, len); } static void change_token_mem_data(token *tok, bool is_so, twist newsalthex, twist newprivblob, twist newpubblob) { twist *authsalt; twist *priv; twist *pub; if (is_so) { authsalt = &tok->esysdb.sealobject.soauthsalt; priv = &tok->esysdb.sealobject.sopriv; pub = &tok->esysdb.sealobject.sopub; } else { authsalt = &tok->esysdb.sealobject.userauthsalt; priv = &tok->esysdb.sealobject.userpriv; pub = &tok->esysdb.sealobject.userpub; } twist_free(*authsalt); twist_free(*priv); *authsalt = newsalthex; *priv = newprivblob; if (newpubblob) { twist_free(*pub); *pub = newpubblob; } } /** Initialize the user PIN data for a given token. * * See backend_init_user() */ CK_RV backend_esysdb_init_user(token *tok, const twist sealdata, const twist newauthhex, const twist newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; twist newpubblob = NULL; twist newprivblob = NULL; /* create a new seal object and seal the data */ rv = tpm2_create_seal_obj(tok->tctx, tok->pobject.objauth, tok->pobject.handle, newauthhex, tok->esysdb.sealobject.userpub, sealdata, &newpubblob, &newprivblob); if (rv != CKR_OK) { goto out; } /* update the db data */ rv = db_update_for_pinchange( tok, false, /* new seal object auth metadata */ newsalthex, /* private and public blobs */ newprivblob, newpubblob); if (rv != CKR_OK) { goto out; } /* update in-memory metadata for seal object and primary object */ change_token_mem_data(tok, false, newsalthex, newprivblob, newpubblob); out: /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newprivblob); twist_free(newpubblob); } return rv; } /** Store a new object for a given token in the backend. * * See backend_add_object() */ CK_RV backend_esysdb_add_object(token *t, tobject *tobj) { LOGV("Adding object to esysdb backend"); return db_add_new_object(t, tobj); } /** Given a token with a config, persist it. * * See backend_update_token_config() */ CK_RV backend_esysdb_update_token_config (token *tok) { return db_update_token_config(tok); } CK_RV backend_esysdb_update_tobject_attrs(tobject *tobj, attr_list *attrs) { return db_update_tobject_attrs(tobj->id, attrs); } CK_RV backend_esysdb_rm_tobject(tobject *tobj) { return db_delete_object(tobj); } /** Unseal a token's wrapping key. * * see backend_token_unseal_wrapping_key() */ CK_RV backend_esysdb_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { CK_RV rv = CKR_GENERAL_ERROR; bool on_error_flush_session = false; sealobject *sealobj = &tok->esysdb.sealobject; twist sealpub = user ? sealobj->userpub : sealobj->sopub; twist sealpriv = user ? sealobj->userpriv : sealobj->sopriv; if (user && !sealpub && !sealpriv) { return CKR_USER_PIN_NOT_INITIALIZED; } assert(sealpub); assert(sealpriv); if (!tpm_session_active(tok->tctx)) { LOGV("token parent object handle is 0x%08x", tok->pobject.handle); CK_RV tmp = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (tmp != CKR_OK) { LOGE("Could not start Auth Session with the TPM."); return tmp; } on_error_flush_session = true; } uint32_t pobj_handle = tok->pobject.handle; twist pobjauth = tok->pobject.objauth; uint32_t sealhandle; rv = tpm_loadobj(tok->tctx, pobj_handle, pobjauth, sealpub, sealpriv, &sealhandle); if (rv != CKR_OK) { goto error; } twist sealsalt = user ? sealobj->userauthsalt : sealobj->soauthsalt; twist sealobjauth = utils_hash_pass(tpin, sealsalt); if (!sealobjauth) { rv = CKR_HOST_MEMORY; goto error; } twist wrappingkeyhex = tpm_unseal(tok->tctx, sealhandle, sealobjauth); twist_free(sealobjauth); tpm_flushcontext(tok->tctx, sealhandle); if (!wrappingkeyhex) { rv = CKR_PIN_INCORRECT; goto error; } if (tok->wrappingkey) { twist_free(wrappingkeyhex); } else { tok->wrappingkey = twistbin_unhexlify(wrappingkeyhex); twist_free(wrappingkeyhex); if (!tok->wrappingkey) { LOGE("Expected internal wrapping key in base 16 format"); goto error; } } return CKR_OK; error: if (on_error_flush_session) { tpm_session_stop(tok->tctx); } return rv; } CK_RV backend_esysdb_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { CK_RV rv = CKR_GENERAL_ERROR; bool is_anyone_logged_in = token_is_any_user_logged_in(tok); bool session_started = false; /* new seal auth data */ twist newsalthex = NULL; twist newauthhex = NULL; twist newprivblob = NULL; /* * Step 1 - Generate a new sealing auth value derived from pin and salt * * This will be used to update the sealobjects table, the columns: * - (so|user)authsalt --> newsalt */ rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } /* * Step 2 - Generate the current auth value from oldpin */ twist oldsalt = !user ? tok->esysdb.sealobject.soauthsalt : tok->esysdb.sealobject.userauthsalt; twist oldauth = utils_hash_pass(toldpin, oldsalt); if (!oldauth) { goto out; } /* if no one is logged in, we need to start a session with the TPM */ if (!is_anyone_logged_in) { rv = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (rv != CKR_OK) { LOGE("Could not start session with TPM"); goto out; } session_started = true; } sealobject *sealobj = &tok->esysdb.sealobject; twist sealpub = !user ? sealobj->sopub : sealobj->userpub; twist sealpriv = !user ? sealobj->sopriv : sealobj->userpriv; uint32_t sealhandle; rv = tpm_loadobj(tok->tctx, tok->pobject.handle, tok->pobject.objauth, sealpub, sealpriv, &sealhandle); if (rv != CKR_OK) { goto out; } /* * Step 3- Call tpm2_changeauth and get a new private object portion * * This private blob will update table sealobjects (user|so)priv */ rv = tpm_changeauth(tok->tctx, tok->pobject.handle, sealhandle, oldauth, newauthhex, &newprivblob); twist_free(oldauth); tpm_flushcontext(tok->tctx, sealhandle); if (rv != CKR_OK) { goto out; } /* * Step X - update the db data */ rv = db_update_for_pinchange( tok, !user, /* new seal object auth metadata */ newsalthex, /* private and public blobs */ newprivblob, NULL); if (rv != CKR_OK) { goto out; } /* TODO: consider calling unload on old seal object handle and WARN on failure */ /* * step 6 - update in-memory metadata for seal object and primary object */ change_token_mem_data(tok, !user, newsalthex, newprivblob, NULL); rv = CKR_OK; out: if (session_started) { rv = tpm_session_stop(tok->tctx); if (rv != CKR_OK) { LOGE("Could not stop session with TPM"); } } /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newsalthex); twist_free(newprivblob); } twist_free(newauthhex); return rv; } tpm2-pkcs11-1.7.0/src/lib/digest.c0000644000175000017500000001302413754763565013427 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "checks.h" #include "digest.h" #include "mech.h" #include "session.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" static inline const char *get_openssl_err(void) { return ERR_error_string(ERR_get_error(), NULL); } digest_op_data *digest_op_data_new(void) { return calloc(1, sizeof(digest_op_data)); } void digest_op_data_free(digest_op_data **opdata) { /* nothing to do if NULL or pointer to NULL */ if (!opdata || !*opdata) { return; } if ((*opdata)->mdctx) { EVP_MD_CTX_destroy((*opdata)->mdctx); } free(*opdata); *opdata = NULL; } static CK_RV digest_sw_init(mdetail *mdtl, digest_op_data *opdata) { const EVP_MD *md = NULL; CK_RV rv = mech_get_digester(mdtl, &opdata->mechanism, &md); if (rv != CKR_OK) { return rv; } EVP_MD_CTX *mdctx = EVP_MD_CTX_create(); if (!mdctx) { LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } int rc = EVP_DigestInit_ex(mdctx, md, NULL); if (!rc) { EVP_MD_CTX_destroy(mdctx); LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } opdata->mdctx = mdctx; return CKR_OK; } static CK_RV digest_sw_update(digest_op_data *opdata, const void *d, size_t cnt) { int rc = EVP_DigestUpdate(opdata->mdctx, d, cnt); if (!rc) { LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV digest_sw_final(digest_op_data *opdata, CK_BYTE_PTR md, CK_ULONG_PTR s) { CK_RV rv = CKR_GENERAL_ERROR; /* * Warn on truncation, this is likely not an issue unless digest message lengths overflow * int. */ if (*s > UINT_MAX) { LOGW("OSSL takes an int pointer, anything past %u is lost, got %lu", UINT_MAX, *s); } int rc = EVP_DigestFinal_ex(opdata->mdctx, md, (unsigned int *)s); if (!rc) { LOGE("%s", get_openssl_err()); goto out; } rv = CKR_OK; out: EVP_MD_CTX_destroy(opdata->mdctx); opdata->mdctx = NULL; return rv; } static CK_RV digest_get_min_size(session_ctx *ctx, digest_op_data *opdata, CK_ULONG_PTR digest_len) { if (!opdata) { CK_RV rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { LOGE("Could not get session data"); return rv; } } *digest_len = EVP_MD_CTX_size(opdata->mdctx); return CKR_OK; } CK_RV digest_init_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_MECHANISM_PTR mechanism) { CK_RV rv = CKR_GENERAL_ERROR; if (!supplied_opdata) { bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } } digest_op_data *opdata = NULL; if (!supplied_opdata) { opdata = digest_op_data_new(); if (!opdata) { return CKR_HOST_MEMORY; } } else { opdata = supplied_opdata; } opdata->mechanism = *mechanism; token *tok = session_ctx_get_token(ctx); rv = digest_sw_init(tok->mdtl, opdata); if (rv != CKR_OK) { if (!supplied_opdata) { digest_op_data_free(&opdata); } return rv; } if (!supplied_opdata) { /* Store everything for later */ session_ctx_opdata_set(ctx, operation_digest, NULL, opdata, (opdata_free_fn)digest_op_data_free); } return CKR_OK; } CK_RV digest_update_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len) { check_pointer(part); CK_RV rv = CKR_GENERAL_ERROR; digest_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } return digest_sw_update(opdata, part, part_len); } CK_RV digest_final_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { check_pointer(digest_len); CK_RV rv = CKR_GENERAL_ERROR; digest_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } CK_ULONG min_len = 0; rv = digest_get_min_size(ctx, opdata, &min_len); if (rv != CKR_OK) { goto error; } if (!digest) { *digest_len = min_len; return CKR_OK; } else if (*digest_len < min_len) { *digest_len = min_len; return CKR_BUFFER_TOO_SMALL; } rv = digest_sw_final(opdata, digest, digest_len); error: if (!supplied_opdata) { session_ctx_opdata_clear(ctx); } return rv; } CK_RV digest_oneshot(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { CK_ULONG min_len = 0; CK_RV rv = digest_get_min_size(ctx, NULL, &min_len); if (rv != CKR_OK) { /* fatal error ends digest sate */ session_ctx_opdata_clear(ctx); return rv; } if (!digest) { *digest_len = min_len; return CKR_OK; } else if (*digest_len < min_len) { *digest_len = min_len; return CKR_BUFFER_TOO_SMALL; } rv = digest_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return digest_final(ctx, digest, digest_len); } tpm2-pkcs11-1.7.0/src/lib/slot.c0000664000175000017500000001011314114236775013114 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "checks.h" #include "backend.h" #include "mech.h" #include "pkcs11.h" #include "slot.h" #include "token.h" #include "utils.h" static struct { size_t token_cnt; token *token; void *mutex; } global; CK_RV slot_init(void) { CK_RV rv = mutex_create(&global.mutex); if (rv != CKR_OK) { return rv; } return backend_get_tokens(&global.token, &global.token_cnt); } static void slot_lock(void) { mutex_lock_fatal(global.mutex); } static void slot_unlock(void) { mutex_unlock_fatal(global.mutex); } void slot_destroy(void) { token_free_list(&global.token, &global.token_cnt); CK_RV rv = mutex_destroy(global.mutex); global.mutex = NULL; if (rv != CKR_OK) { LOGW("Failed to destroy mutex"); } } token *slot_get_token(CK_SLOT_ID slot_id) { slot_lock(); size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; if (slot_id == t->id) { slot_unlock(); return t; } } slot_unlock(); return NULL; } CK_RV slot_get_list (CK_BYTE token_present, CK_SLOT_ID *slot_list, CK_ULONG_PTR count) { /* * True for token present only returns slots with tokens, False all slots. All * of our slots always have a token, so we can ignore this. */ UNUSED(token_present); check_pointer(count); slot_lock(); if (!slot_list) { slot_unlock(); *count = global.token_cnt; return CKR_OK; } if (*count < global.token_cnt) { *count = global.token_cnt; slot_unlock(); return CKR_BUFFER_TOO_SMALL; } size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; slot_list[i] = t->id; } *count = global.token_cnt; slot_unlock(); return CKR_OK; } CK_RV slot_get_info (CK_SLOT_ID slot_id, CK_SLOT_INFO *info) { token *token; check_pointer(info); token = slot_get_token(slot_id); if (!token) { return CKR_SLOT_ID_INVALID; } token_lock(token); CK_TOKEN_INFO token_info; if (token_get_info(token, &token_info)) { token_unlock(token); return CKR_GENERAL_ERROR; } str_padded_copy(info->manufacturerID, token_info.manufacturerID); str_padded_copy(info->slotDescription, token_info.label); info->hardwareVersion = token_info.hardwareVersion; info->firmwareVersion = token_info.firmwareVersion; info->flags = CKF_TOKEN_PRESENT | CKF_HW_SLOT; token_unlock(token); return CKR_OK; } CK_RV slot_mechanism_list_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count) { token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } token_lock(t); CK_RV rv = mech_get_supported(t->mdtl, mechanism_list, count); token_unlock(t); return rv; } CK_RV slot_mechanism_info_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info) { check_pointer(info); token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } token_lock(t); CK_RV rv = mech_get_info(t->mdtl, t->tctx, type, info); if (rv != CKR_OK) { token_unlock(t); return rv; } token_unlock(t); return CKR_OK; } CK_RV slot_add_uninit_token(void) { CK_RV rv = CKR_GENERAL_ERROR; slot_lock(); if (global.token_cnt < MAX_TOKEN_CNT) { size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; if (!t->config.is_initialized) { LOGV("Skipping adding uninitialized token, one found"); rv = CKR_OK; goto out; } } token *t = &global.token[global.token_cnt++]; t->id = global.token_cnt; rv = token_min_init(t); if (rv != CKR_OK) { goto out; } assert(t->id); } else { LOGW("Reached max tokens in store"); } rv = CKR_OK; out: slot_unlock(); return rv; } tpm2-pkcs11-1.7.0/src/lib/object.c0000664000175000017500000010303414116451527013402 00000000000000/* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "db.h" #include "emitter.h" #include "log.h" #include "object.h" #include "pkcs11.h" #include "session_ctx.h" #include "token.h" #include "utils.h" typedef struct tobject_match_list tobject_match_list; struct tobject_match_list { CK_OBJECT_HANDLE tobj_handle; CK_BBOOL cka_private; tobject_match_list *next; }; typedef struct object_find_data object_find_data; struct object_find_data { tobject_match_list *head; tobject_match_list *cur; }; void tobject_free(tobject *tobj) { if (!tobj) { return; } /* cleanse the ENCRYPTED objauth so it goes away */ if (tobj->objauth) { OPENSSL_cleanse((void *)tobj->objauth, twist_len(tobj->objauth)); twist_free(tobj->objauth); tobj->objauth = NULL; } twist_free(tobj->priv); twist_free(tobj->pub); /* cleanse the PLAINTEXT objauth so it goes away */ if (tobj->unsealed_auth) { OPENSSL_cleanse((void *)tobj->unsealed_auth, twist_len(tobj->unsealed_auth)); twist_free(tobj->unsealed_auth); tobj->unsealed_auth = NULL; } attr_list *a = tobject_get_attrs(tobj); attr_list_free(a); free(tobj); } CK_RV object_mech_is_supported(tobject *tobj, CK_MECHANISM_PTR mech) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have: CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } CK_ULONG count = a->ulValueLen/sizeof(CK_MECHANISM_TYPE); CK_MECHANISM_TYPE_PTR mt = (CK_MECHANISM_TYPE_PTR)a->pValue; CK_ULONG i; for(i=0; i < count; i++) { CK_MECHANISM_TYPE t = mt[i]; if (t == mech->mechanism) { return CKR_OK; } } /* TODO further sanity checking for CKR_MECHANISM_PARAM_INVALID */ return CKR_MECHANISM_INVALID; } CK_RV tobject_get_min_buf_size(tobject *tobj, CK_MECHANISM_PTR mech, size_t *maxsize) { assert(tobj); assert(mech); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected attribute CKA_KEY_TYPE"); return CKR_TEMPLATE_INCOMPLETE; } CK_KEY_TYPE key_type; CK_RV rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { return rv; } if (key_type == CKK_RSA) { a = attr_get_attribute_by_type(tobj->attrs, CKA_MODULUS); if (!a) { LOGE("RSA Keys should have a modulus"); return CKR_GENERAL_ERROR; } *maxsize = a->ulValueLen; return CKR_OK; } if (key_type == CKK_EC) { a = attr_get_attribute_by_type(tobj->attrs, CKA_EC_PARAMS); if (!a) { LOGE("EC Keys should have params"); return CKR_GENERAL_ERROR; } int nid = 0; CK_RV rv = ec_params_to_nid(a, &nid); if (rv != CKR_OK) { return rv; } /* * Math below is based off of ECDSA signature: * SEQUENCE (2 elem) * INTEGER R * INTEGER S * * Integers R and S are bounded by keysize in bytes, followed by their * respective headers(2bytes) followed by the SEQUENCE header(2 bytes) */ unsigned keysize; switch (nid) { case NID_X9_62_prime192v1: keysize = 24; break; case NID_secp224r1: keysize = 28; break; case NID_X9_62_prime256v1: keysize = 32; break; case NID_secp384r1: keysize = 48; break; case NID_secp521r1: keysize = 66; /* round up */ break; default: LOGE("Unsupported nid to tpm signature size maaping: %d", nid); return CKR_CURVE_NOT_SUPPORTED; } /* R and S are INTEGER objects with a header and len byte */ static const unsigned INT_HDR = 2U; /* R and S are combined in a SEQUENCE object with a header and len byte */ static const unsigned SEQ_HDR = 2U; /* an R or S with a high bit set needs an extra nul byte so it's not negative (twos comp)*/ static const unsigned EXTRA = 1U; unsigned tmp = 0; safe_add(tmp, keysize, INT_HDR); safe_adde(tmp, EXTRA); safe_mule(tmp, 2); tmp += SEQ_HDR; *maxsize = tmp; return CKR_OK; } if (key_type == CKK_SHA_1_HMAC) { *maxsize = 20; return CKR_OK; } if (key_type == CKK_SHA256_HMAC) { *maxsize = 32; return CKR_OK; } if (key_type == CKK_SHA384_HMAC) { *maxsize = 48; return CKR_OK; } /* Best guess on buffer size for CKK_GENERIC_SECRET */ if (key_type == CKK_SHA512_HMAC) { *maxsize = 64; return CKR_OK; } if (key_type == CKK_GENERIC_SECRET) { switch (mech->mechanism) { case CKM_SHA_1_HMAC: *maxsize = 20; return CKR_OK; case CKM_SHA256_HMAC: *maxsize = 32; return CKR_OK; case CKM_SHA384_HMAC: *maxsize = 48; return CKR_OK; case CKM_SHA512_HMAC: *maxsize = 64; return CKR_OK; default: LOGE("Cannot handle CKK_GENERIC_SECRET Mechanism: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } } LOGE("Unknown signing key type, got: 0x%lx", key_type); return CKR_GENERAL_ERROR; } static bool attr_filter(attr_list *attrs, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { CK_ULONG i; // If ulCount is set to 0 all items match automatically. if (count == 0) { return true; } for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR search = &templ[i]; CK_ATTRIBUTE_PTR compare = NULL; bool is_attr_match = false; CK_ULONG j; for(j=0; j < attr_list_get_count(attrs); j++) { const CK_ATTRIBUTE_PTR ptr = attr_list_get_ptr(attrs); compare = &ptr[j]; if (search->type != compare->type) { continue; } if (search->ulValueLen != compare->ulValueLen) { continue; } bool match = !memcmp(compare->pValue, search->pValue, search->ulValueLen); if (match) { is_attr_match = true; break; } } /* * If we didn't get an attribute match, then the searched for attribute wasn't * found and it's not a match. Ie search attribute set must be subset of compare * attribute set */ if (!is_attr_match) { return false; } } /* * Done with matching loops, we always found a match, thus we have a match * assign it. */ /* all the specified template attributes matched */ return true; } tobject *object_attr_filter(tobject *tobj, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { attr_list *attrs = tobject_get_attrs(tobj); bool res = attr_filter(attrs, templ, count); return res ? tobj : NULL; } void object_find_data_free(object_find_data **fd) { if (!*fd) { return; } tobject_match_list *cur = (*fd)->head; while (cur) { tobject_match_list *tmp = cur; cur = cur->next; free(tmp); } free(*fd); *fd = NULL; return; } static object_find_data *object_find_data_new(void) { return calloc(1, sizeof(object_find_data)); } static CK_RV do_match_set(tobject_match_list *match_cur, tobject *tobj) { match_cur->tobj_handle = tobj->obj_handle; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("Objects must have CK_OBJECT_CLASS"); assert(0); return CKR_GENERAL_ERROR; } match_cur->cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); return CKR_OK; } CK_RV object_find_init(session_ctx *ctx, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { // if count is 0 template is not used and all objects are requested so templ can be NULL. if (count > 0) { check_pointer(templ); } CK_RV rv = CKR_GENERAL_ERROR; object_find_data *fd = NULL; bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { rv = CKR_OPERATION_ACTIVE; goto out; } fd = object_find_data_new(); if (!fd) { rv = CKR_HOST_MEMORY; goto out; } token *tok = session_ctx_get_token(ctx); assert(tok); if (!tok->tobjects.head) { LOGV("Token %i contains no objects.", tok->id); goto empty; } tobject_match_list *match_cur = NULL; list *cur = &tok->tobjects.head->l; while(cur) { // Get the current object, and grab it's id for the object handle tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; tobject *match = object_attr_filter(tobj, templ, count); if (!match) { continue; } /* we have a match, build the list */ if (!fd->head) { /* set the head to point into the list */ fd->head = calloc(1, sizeof(*match_cur)); if (!fd->head) { rv = CKR_HOST_MEMORY; goto out; } match_cur = fd->head; } else { assert(match_cur); match_cur->next = calloc(1, sizeof(*match_cur)); if (!match_cur->next) { rv = CKR_HOST_MEMORY; goto out; } match_cur = match_cur->next; } rv = do_match_set(match_cur, tobj); if (rv != CKR_OK) { goto out; } } fd->cur = fd->head; empty: session_ctx_opdata_set(ctx, operation_find, NULL, fd, (opdata_free_fn)object_find_data_free); rv = CKR_OK; out: if (rv != CKR_OK) { object_find_data_free(&fd); } return rv; } CK_RV object_find(session_ctx *ctx, CK_OBJECT_HANDLE *object, CK_ULONG max_object_count, CK_ULONG_PTR object_count) { check_pointer(object); check_pointer(object_count); CK_RV rv = CKR_OK; object_find_data *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_find, &opdata); if (rv != CKR_OK) { return rv; } token *tok = session_ctx_get_token(ctx); assert(tok); CK_ULONG count = 0; while(opdata->cur && count < max_object_count) { // Get the current object, and grab it's id for the object handle CK_OBJECT_HANDLE handle = opdata->cur->tobj_handle; // filter out CKA_PRIVATE set to CK_TRUE if not logged in and PIN is needed if (opdata->cur->cka_private && !token_is_user_logged_in(tok) && !tok->config.empty_user_pin) { opdata->cur = opdata->cur->next; continue; } object[count] = handle; // Update our iterator opdata->cur = opdata->cur->next; count++; } *object_count = count; return CKR_OK; } CK_RV object_find_final(session_ctx *ctx) { CK_RV rv = CKR_GENERAL_ERROR; object_find_data *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_find, &opdata); if (rv != CKR_OK) { return rv; } session_ctx_opdata_clear(ctx); return CKR_OK; } /** * given an attribute list with CKA_TPM2_ENC_BLOB, will unwrap it with the token wrapping * key and store it in CKA_VALUE. * @param tok * The token * @param attrs * The attribute list to modify. * @return * CKR_OK on success. */ static CK_RV unwrap_protected_cka_value(token *tok, attr_list *attrs) { /* Caller wants CKA_VALUE in their template and it's not found, we need to fetch it, do we have * the wrapped value in the DB? */ assert(tok->wrappingkey); CK_ATTRIBUTE_PTR ciphertext_attr = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); if (ciphertext_attr) { twist plaintext = NULL; size_t len = 0; if (ciphertext_attr->ulValueLen) { twist ciphertext = twistbin_new(ciphertext_attr->pValue, ciphertext_attr->ulValueLen); if (!ciphertext) { LOGE("oom"); return CKR_HOST_MEMORY; } CK_RV rv = utils_ctx_unwrap_objauth(tok->wrappingkey, ciphertext, &plaintext); twist_free(ciphertext); if (rv != CKR_OK) { LOGE("Could not unwrap CKA_VALUE"); return rv; } len = twist_len(plaintext); } CK_ATTRIBUTE temp = { .type = CKA_VALUE, .pValue = (void *)plaintext, .ulValueLen = len }; /* * Add the unwrapped value back to CKA_VALUE * - Append if not in the list * - Update if it's in the list */ CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); CK_RV rv = found ? attr_list_update_entry(attrs, &temp) : attr_list_append_entry(&attrs, &temp); twist_free(plaintext); if (rv != CKR_OK) { return rv; } } else { // TODO: Fetch from TPM to support more object types? // TODO: set CKA_VALUE to 0? LOGW("Needed CKA_VALUE but didn't find encrypted blob"); } return CKR_OK; } /** * given an attribute list with CKA_VALUE, will wrap it with the token wrapping * key and store it in CKA_TPM2_ENC_BLOB. A zero length CKA_VALUE attribute will * clear the CKA_TPM2_ENC_BLOB attribute. * @param tok * The token * @param attrs * The attribute list to modify * @return * CKR_OK on success. */ static CK_RV wrap_protected_cka_value(token *tok, attr_list *attrs) { assert(tok->wrappingkey); /* this may or maynot exist */ CK_ATTRIBUTE_PTR enc_blob_attr = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); CK_ATTRIBUTE_PTR plaintext_attr = attr_get_attribute_by_type(attrs, CKA_VALUE); if (!plaintext_attr) { LOGE("Expected vendor attribute CKA_VALUE"); return CKR_GENERAL_ERROR; } twist ciphertext = NULL; size_t len = 0; if (plaintext_attr->ulValueLen) { twist plaintext = twistbin_new(plaintext_attr->pValue, plaintext_attr->ulValueLen); if (!plaintext) { LOGE("oom"); return CKR_HOST_MEMORY; } CK_RV rv = utils_ctx_wrap_objauth(tok->wrappingkey, plaintext, &ciphertext); twist_free(plaintext); if (rv != CKR_OK) { LOGE("Could not wrap CKA_VALUE"); return rv; } len = twist_len(ciphertext); } CK_ATTRIBUTE temp = { .type = CKA_TPM2_ENC_BLOB, .pValue = (void *)ciphertext, .ulValueLen = len }; /* add the wrapped value back to CKA_TPM2_ENC_BLOB */ CK_RV rv = enc_blob_attr ? attr_list_update_entry(attrs, &temp) : attr_list_append_entry(&attrs, &temp); twist_free(ciphertext); if (rv != CKR_OK) { return rv; } return CKR_OK; } CK_RV object_get_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } /* * If the object is SENSITIVE AND EXTRACTABLE we can reveal CKA_VALUE. We set the * defaults as extractable and not sensitive because only non-tpm objects have * the CKA_VALUE field (certs and public keys). However, we are adding secret * keys, that are created through C_CreateObject(). The user *must* be logged * in to do this or tok->wrappingkey is NULL. */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); bool is_user_logged_in = token_is_user_logged_in (tok); /* * For each item requested in the template, find if the request has a match * and copy the size and possibly data (if allocated). */ CK_ULONG i; for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR t = &templ[i]; CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(tobj->attrs, t->type); if (cka_private && t->type == CKA_VALUE && is_user_logged_in && (!found || !found->ulValueLen)) { rv = unwrap_protected_cka_value(tok, tobj->attrs); /* continue on processing */ } if (found) { if (!t->pValue) { /* only populate size if the buffer is null */ t->ulValueLen = found->ulValueLen; continue; } /* The found attribute should fit inside the one to copy to */ if (found->ulValueLen > t->ulValueLen) { t->ulValueLen = CK_UNAVAILABLE_INFORMATION; rv = CKR_BUFFER_TOO_SMALL; continue; } t->ulValueLen = found->ulValueLen; if (found->ulValueLen && found->pValue) { memcpy(t->pValue, found->pValue, found->ulValueLen); } } else { /* If it's not found it defaults to empty. */ t->pValue = NULL; t->ulValueLen = CK_UNAVAILABLE_INFORMATION; LOGV("Invalid Attribute for tid %u: type(%lu) ulValueLen(%lu), pData(%s)", tobj->id, t->type, t->ulValueLen, t->pValue ? "non-null" : "null"); rv = CKR_ATTRIBUTE_TYPE_INVALID; } } tobject_user_decrement(tobj); // if no error occurred rv is CKR_OK from previous call return rv; } CK_RV object_set_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } CK_OBJECT_CLASS clazz = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (clazz == CK_OBJECT_CLASS_BAD) { LOGE("Expect ALL objects to contain attribute CKA_CLASS"); rv = CKR_GENERAL_ERROR; goto out; } CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); /* create a temp copy to work on so we have transactional atomicity */ attr_list *tmp = NULL; rv = attr_list_dup(tobj->attrs, &tmp); if (rv != CKR_OK) { goto out; } /* * For each item: * 1. If it exists, update the contents * 2. If it is new, add it. * * XXX: Enforce whether or not attributes * are settable, etc. * We don't do this, because the TPM isn't really * enforcing anything but it might be useful just * to prevent oopsies. */ CK_ULONG i; for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR t = &templ[i]; /* CKA_VALUE fields are encrypted for CKO_DATA objects */ if (t->type == CKA_VALUE && clazz == CKO_DATA && cka_private) { rv = wrap_protected_cka_value(tok, tmp); if (rv != CKR_OK) { goto error; } } CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(tmp, t->type); rv = found ? attr_list_update_entry(tmp, t) : attr_list_append_entry(&tmp, t); if (rv != CKR_OK) { goto error; } } /* We don't want to emit CKA_VALUE for CKA_PRIVATE objects to the backend store */ bool is_backed_up = false; CK_ATTRIBUTE backup = { 0 }; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tmp, CKA_VALUE); if (cka_private && a && a->ulValueLen) { backup.pValue = a->pValue; backup.ulValueLen = a->ulValueLen; a->pValue = NULL; a->ulValueLen = 0; is_backed_up = true; } /* in memory is updated, so update the persistent store */ rv = backend_update_tobject_attrs(tok, tobj, tmp); if (rv != CKR_OK) { goto error; } if (is_backed_up) { a->pValue = backup.pValue; a->ulValueLen = backup.ulValueLen; } /* * everything completed successfully, swap the * attribute pointers. */ attr_list_free(tobj->attrs); tobj->attrs = tmp; rv = CKR_OK; out: tobject_user_decrement(tobj); return rv; error: attr_list_free(tmp); goto out; } DEBUG_VISIBILITY tobject *__real_tobject_new(void) { tobject *tobj = calloc(1, sizeof(tobject)); if (!tobj) { LOGE("oom"); return NULL; } return tobj; } WEAK tobject *tobject_new(void) { return __real_tobject_new(); } CK_RV tobject_set_blob_data(tobject *tobj, twist pub, twist priv) { assert(pub); assert(tobj); tobj->priv = twist_dup(priv); if (priv && !tobj->priv) { LOGE("oom"); return CKR_HOST_MEMORY; } tobj->pub = twist_dup(pub); if (!tobj->pub) { twist_free(tobj->priv); LOGE("oom"); return CKR_HOST_MEMORY; } if (priv) { bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_PRIV_BLOB, (CK_BYTE_PTR)priv, twist_len(priv)); if (!r) { return CKR_GENERAL_ERROR; } } bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_PUB_BLOB, (CK_BYTE_PTR)pub, pub ? twist_len(pub) : 0); return r ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV tobject_set_auth(tobject *tobj, twist authbin, twist wrappedauthhex) { assert(tobj); assert(authbin); assert(wrappedauthhex); tobj->unsealed_auth = twist_dup(authbin); if (!tobj->unsealed_auth) { LOGE("oom"); return CKR_HOST_MEMORY; } tobj->objauth = twist_dup(wrappedauthhex); if (!tobj->objauth) { LOGE("oom"); twist_free(tobj->unsealed_auth); return CKR_HOST_MEMORY; } bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_OBJAUTH_ENC, (CK_BYTE_PTR)wrappedauthhex, twist_len(wrappedauthhex)); return r ? CKR_OK : CKR_GENERAL_ERROR; } void tobject_set_handle(tobject *tobj, uint32_t handle) { assert(tobj); tobj->tpm_handle = handle; } void tobject_set_id(tobject *tobj, unsigned id) { assert(tobj); tobj->id = id; } attr_list *tobject_get_attrs(tobject *tobj) { return tobj->attrs; } CK_RV _tobject_user_increment(tobject *tobj, const char *filename, int lineno) { if (tobj->active == UINT_MAX) { LOGE("tobject active at max count, cannot issue. id: %u", tobj->id); return CKR_GENERAL_ERROR; } tobj->active++; _LOGV(filename, lineno, "Incremented tobject id: %u, value: %u", tobj->id, tobj->active); return CKR_OK; } CK_RV _tobject_user_decrement(tobject *tobj, const char *filename, int lineno) { if (!tobj->active) { LOGE("Returning a non-active tobject id: %u", tobj->id); return CKR_GENERAL_ERROR; } tobj->active--; _LOGV(filename, lineno, "Decremented tobject id: %u, value: %u", tobj->id, tobj->active); return CKR_OK; } static bool tobject_is_busy(tobject *tobj) { assert(tobj); return tobj->active > 0; } CK_RV object_destroy(session_ctx *ctx, CK_OBJECT_HANDLE object) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } bool is_busy = tobject_is_busy(tobj); if (is_busy) { return CKR_FUNCTION_FAILED; } rv = backend_rm_tobject(tok, tobj); if (rv != CKR_OK) { return rv; } token_rm_tobject(tok, tobj); tobject_free(tobj); rv = CKR_OK; return rv; } static CK_RV handle_rsa_public(CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* RSA Public keys should have a modulus and exponent, verify */ CK_ATTRIBUTE_PTR a_modulus = attr_get_attribute_by_type_raw(templ, count, CKA_MODULUS); if (!a_modulus) { return CKR_TEMPLATE_INCOMPLETE; } CK_ATTRIBUTE_PTR a_exponent = attr_get_attribute_by_type_raw(templ, count, CKA_PUBLIC_EXPONENT); if (!a_exponent) { return CKR_TEMPLATE_INCOMPLETE; } /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); /* Add attribute CKA_LOCAL if missing */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tmp_attrs, CKA_LOCAL); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_LOCAL, CK_FALSE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_ENCRYPT if missing */ a = attr_get_attribute_by_type(tmp_attrs, CKA_ENCRYPT); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_ENCRYPT, CK_TRUE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_VERIFY if missing */ a = attr_get_attribute_by_type(tmp_attrs, CKA_VERIFY); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_VERIFY, CK_TRUE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_KEY_GEN_MECHANISM as CK_UNAVAILABLE_INFORMATION */ a = attr_get_attribute_by_type(tmp_attrs, CKA_KEY_GEN_MECHANISM); if (!a) { bool result = attr_list_add_int(tmp_attrs, CKA_KEY_GEN_MECHANISM, CK_UNAVAILABLE_INFORMATION); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } else { CK_ULONG genmech = 0; rv = attr_CK_ULONG(a, &genmech); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_KEY_GEN_MECHANISM"); goto out; } if (genmech != CK_UNAVAILABLE_INFORMATION) { LOGE("CKA_KEY_GEN_MECHANISM cannot be anything but " "CKA_KEY_GEN_MECHANISM, got: %lu", genmech); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } } /* populate CKA_ALLOWED_MECHANISMS */ rv = rsa_gen_mechs(tmp_attrs, NULL); if (rv != CKR_OK) { LOGE("Could not add RSA public mechanisms"); goto out; } /* populate missing RSA public key attributes */ rv = attr_common_add_RSA_publickey(&tmp_attrs); if (rv != CKR_OK) { LOGE("Could not add RSA public missing attributes"); goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } static CK_RV handle_data_object(token *tok, CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tmp_attrs, CK_TRUE); if (!cka_private) { LOGE("CKA_PRIVATE cannot be CK_FALSE"); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } rv = wrap_protected_cka_value(tok, tmp_attrs); if (rv != CKR_OK) { goto out; } /* Set any defaults and do error checking */ rv = attr_common_add_data(&tmp_attrs); if (rv != CKR_OK) { goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } static CK_RV handle_cert_object(CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tmp_attrs, CK_FALSE); if (cka_private) { LOGE("CKA_PRIVATE cannot be CK_TRUE"); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } /* Set any defaults and do error checking */ rv = attr_common_add_storage(&tmp_attrs); if (rv != CKR_OK) { goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } CK_RV object_create(session_ctx *ctx, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object) { assert(ctx); check_pointer(templ); check_pointer(object); CK_RV rv = CKR_GENERAL_ERROR; CK_STATE state = session_ctx_state_get(ctx); LOGV("state: %lu", state); /* * Currently we only support RW user session state objects. */ if (state != CKS_RW_USER_FUNCTIONS) { if (state == CKS_RW_SO_FUNCTIONS) { return CKR_USER_NOT_LOGGED_IN; } else { return CKR_SESSION_READ_ONLY; } } /* * If CKA_LOCAL is specified, it can never be CK_TRUE * TODO: At somepoint these attr_get_attribute_by_type_raw() calls * could be done by general extractors and default error values ala * attr_list_get_CKA_PRIVATE() type calls for raw attr lists. */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type_raw(templ, count, CKA_LOCAL); if (a) { CK_BBOOL bbool = CK_FALSE; rv = attr_CK_BBOOL(a, &bbool); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_LOCAL"); return rv; } if (bbool == CK_TRUE) { LOGE("CKA_LOCAL cannot be true"); return CKR_ATTRIBUTE_VALUE_INVALID; } } /* * We only support: * - CKK_RSA - CKO_PUBLIC_KEY * - CKO_DATA * so verify it. */ a = attr_get_attribute_by_type_raw(templ, count, CKA_CLASS); if (!a) { LOGE("Expected attribute CKA_CLASS"); return CKR_TEMPLATE_INCOMPLETE; } CK_OBJECT_CLASS clazz; rv = attr_CK_OBJECT_CLASS(a, &clazz); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_CLASS"); return CKR_TEMPLATE_INCOMPLETE; } /* Not all objects have a key type, only KEY Objects do */ CK_KEY_TYPE key_type = CKA_KEY_TYPE_BAD; a = attr_get_attribute_by_type_raw(templ, count, CKA_KEY_TYPE); if (a) { rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_KEY_TYPE"); return rv; } } token *tok = session_ctx_get_token(ctx); assert(tok); attr_list *new_attrs = NULL; if (key_type == CKK_RSA || clazz == CKO_PUBLIC_KEY) { rv = handle_rsa_public(templ, count, &new_attrs); } else if (clazz == CKO_DATA) { rv = handle_data_object(tok, templ, count, &new_attrs); } else if (clazz == CKO_CERTIFICATE) { rv = handle_cert_object(templ, count, &new_attrs); } else { LOGE("Can only create RSA Public key objects or" " data objects, CKA_CLASS(%lu), CKA_KEY_TYPE(%lu)", clazz, key_type); return CKR_ATTRIBUTE_VALUE_INVALID; } if (rv != CKR_OK) { LOGE("Error creating object, " "CKA_CLASS(%lu), CKA_KEY_TYPE(%lu) rv: %lu", clazz, key_type, rv); return rv; } /* ok create the new tobject */ tobject *new_tobj = tobject_new(); if (!new_tobj) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } new_tobj->attrs = new_attrs; new_attrs = NULL; bool is_backed_up = false; CK_ATTRIBUTE backup = { 0 }; /* if it's a private object we can't expose the CKA_VALUE attribute */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(new_tobj->attrs, CK_FALSE); a = attr_get_attribute_by_type(new_tobj->attrs, CKA_VALUE); if (cka_private && a && a->ulValueLen) { backup.ulValueLen = a->ulValueLen; backup.pValue = a->pValue; a->ulValueLen = 0; a->pValue = NULL; is_backed_up = true; } /* add the object to the db */ rv = backend_add_object(tok, new_tobj); if (rv != CKR_OK) { goto out; } if (is_backed_up) { a->ulValueLen = backup.ulValueLen; a->pValue = backup.pValue; } /* add the object to the token */ rv = token_add_tobject(tok, new_tobj); if (rv != CKR_OK) { return rv; } /* assign temp tobject to callee provided pointer */ *object = new_tobj->obj_handle; new_tobj = NULL; rv = CKR_OK; out: attr_list_free(new_attrs); tobject_free(new_tobj); return rv; } CK_RV object_init_from_attrs(tobject *tobj) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_OBJAUTH_ENC); if (a && a->pValue && a->ulValueLen) { tobj->objauth = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->objauth) { LOGE("oom"); goto error; } } a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_PUB_BLOB); if (a && a->pValue && a->ulValueLen) { tobj->pub = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->pub) { LOGE("oom"); goto error; } } a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_PRIV_BLOB); if (a && a->pValue && a->ulValueLen) { if (!tobj->pub) { LOGE("objects with CKA_TPM2_PUB_BLOB should have CKA_TPM2_PRIV_BLOB"); goto error; } tobj->priv = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->priv) { LOGE("oom"); goto error; } } return CKR_OK; error: return CKR_GENERAL_ERROR; } tpm2-pkcs11-1.7.0/install-sh0000755000175000017500000003601013616550647012443 00000000000000#!/bin/sh # install - install a program, script, or datafile scriptversion=2018-03-11.20; # UTC # This originates from X11R5 (mit/util/scripts/install.sh), which was # later released in X11R6 (xc/config/util/install.sh) with the # following copyright and license. # # Copyright (C) 1994 X Consortium # # Permission is hereby granted, free of charge, to any person obtaining a copy # of this software and associated documentation files (the "Software"), to # deal in the Software without restriction, including without limitation the # rights to use, copy, modify, merge, publish, distribute, sublicense, and/or # sell copies of the Software, and to permit persons to whom the Software is # furnished to do so, subject to the following conditions: # # The above copyright notice and this permission notice shall be included in # all copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE # X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN # AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC- # TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. # # Except as contained in this notice, the name of the X Consortium shall not # be used in advertising or otherwise to promote the sale, use or other deal- # ings in this Software without prior written authorization from the X Consor- # tium. # # # FSF changes to this file are in the public domain. # # Calling this script install-sh is preferred over install.sh, to prevent # 'make' implicit rules from creating a file called install from it # when there is no Makefile. # # This script is compatible with the BSD install script, but was written # from scratch. tab=' ' nl=' ' IFS=" $tab$nl" # Set DOITPROG to "echo" to test this script. doit=${DOITPROG-} doit_exec=${doit:-exec} # Put in absolute file names if you don't have them in your path; # or use environment vars. chgrpprog=${CHGRPPROG-chgrp} chmodprog=${CHMODPROG-chmod} chownprog=${CHOWNPROG-chown} cmpprog=${CMPPROG-cmp} cpprog=${CPPROG-cp} mkdirprog=${MKDIRPROG-mkdir} mvprog=${MVPROG-mv} rmprog=${RMPROG-rm} stripprog=${STRIPPROG-strip} posix_mkdir= # Desired mode of installed file. mode=0755 chgrpcmd= chmodcmd=$chmodprog chowncmd= mvcmd=$mvprog rmcmd="$rmprog -f" stripcmd= src= dst= dir_arg= dst_arg= copy_on_change=false is_target_a_directory=possibly usage="\ Usage: $0 [OPTION]... [-T] SRCFILE DSTFILE or: $0 [OPTION]... SRCFILES... DIRECTORY or: $0 [OPTION]... -t DIRECTORY SRCFILES... or: $0 [OPTION]... -d DIRECTORIES... In the 1st form, copy SRCFILE to DSTFILE. In the 2nd and 3rd, copy all SRCFILES to DIRECTORY. In the 4th, create DIRECTORIES. Options: --help display this help and exit. --version display version info and exit. -c (ignored) -C install only if different (preserve the last data modification time) -d create directories instead of installing files. -g GROUP $chgrpprog installed files to GROUP. -m MODE $chmodprog installed files to MODE. -o USER $chownprog installed files to USER. -s $stripprog installed files. -t DIRECTORY install into DIRECTORY. -T report an error if DSTFILE is a directory. Environment variables override the default commands: CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG RMPROG STRIPPROG " while test $# -ne 0; do case $1 in -c) ;; -C) copy_on_change=true;; -d) dir_arg=true;; -g) chgrpcmd="$chgrpprog $2" shift;; --help) echo "$usage"; exit $?;; -m) mode=$2 case $mode in *' '* | *"$tab"* | *"$nl"* | *'*'* | *'?'* | *'['*) echo "$0: invalid mode: $mode" >&2 exit 1;; esac shift;; -o) chowncmd="$chownprog $2" shift;; -s) stripcmd=$stripprog;; -t) is_target_a_directory=always dst_arg=$2 # Protect names problematic for 'test' and other utilities. case $dst_arg in -* | [=\(\)!]) dst_arg=./$dst_arg;; esac shift;; -T) is_target_a_directory=never;; --version) echo "$0 $scriptversion"; exit $?;; --) shift break;; -*) echo "$0: invalid option: $1" >&2 exit 1;; *) break;; esac shift done # We allow the use of options -d and -T together, by making -d # take the precedence; this is for compatibility with GNU install. if test -n "$dir_arg"; then if test -n "$dst_arg"; then echo "$0: target directory not allowed when installing a directory." >&2 exit 1 fi fi if test $# -ne 0 && test -z "$dir_arg$dst_arg"; then # When -d is used, all remaining arguments are directories to create. # When -t is used, the destination is already specified. # Otherwise, the last argument is the destination. Remove it from $@. for arg do if test -n "$dst_arg"; then # $@ is not empty: it contains at least $arg. set fnord "$@" "$dst_arg" shift # fnord fi shift # arg dst_arg=$arg # Protect names problematic for 'test' and other utilities. case $dst_arg in -* | [=\(\)!]) dst_arg=./$dst_arg;; esac done fi if test $# -eq 0; then if test -z "$dir_arg"; then echo "$0: no input file specified." >&2 exit 1 fi # It's OK to call 'install-sh -d' without argument. # This can happen when creating conditional directories. exit 0 fi if test -z "$dir_arg"; then if test $# -gt 1 || test "$is_target_a_directory" = always; then if test ! -d "$dst_arg"; then echo "$0: $dst_arg: Is not a directory." >&2 exit 1 fi fi fi if test -z "$dir_arg"; then do_exit='(exit $ret); exit $ret' trap "ret=129; $do_exit" 1 trap "ret=130; $do_exit" 2 trap "ret=141; $do_exit" 13 trap "ret=143; $do_exit" 15 # Set umask so as not to create temps with too-generous modes. # However, 'strip' requires both read and write access to temps. case $mode in # Optimize common cases. *644) cp_umask=133;; *755) cp_umask=22;; *[0-7]) if test -z "$stripcmd"; then u_plus_rw= else u_plus_rw='% 200' fi cp_umask=`expr '(' 777 - $mode % 1000 ')' $u_plus_rw`;; *) if test -z "$stripcmd"; then u_plus_rw= else u_plus_rw=,u+rw fi cp_umask=$mode$u_plus_rw;; esac fi for src do # Protect names problematic for 'test' and other utilities. case $src in -* | [=\(\)!]) src=./$src;; esac if test -n "$dir_arg"; then dst=$src dstdir=$dst test -d "$dstdir" dstdir_status=$? else # Waiting for this to be detected by the "$cpprog $src $dsttmp" command # might cause directories to be created, which would be especially bad # if $src (and thus $dsttmp) contains '*'. if test ! -f "$src" && test ! -d "$src"; then echo "$0: $src does not exist." >&2 exit 1 fi if test -z "$dst_arg"; then echo "$0: no destination specified." >&2 exit 1 fi dst=$dst_arg # If destination is a directory, append the input filename. if test -d "$dst"; then if test "$is_target_a_directory" = never; then echo "$0: $dst_arg: Is a directory" >&2 exit 1 fi dstdir=$dst dstbase=`basename "$src"` case $dst in */) dst=$dst$dstbase;; *) dst=$dst/$dstbase;; esac dstdir_status=0 else dstdir=`dirname "$dst"` test -d "$dstdir" dstdir_status=$? fi fi case $dstdir in */) dstdirslash=$dstdir;; *) dstdirslash=$dstdir/;; esac obsolete_mkdir_used=false if test $dstdir_status != 0; then case $posix_mkdir in '') # Create intermediate dirs using mode 755 as modified by the umask. # This is like FreeBSD 'install' as of 1997-10-28. umask=`umask` case $stripcmd.$umask in # Optimize common cases. *[2367][2367]) mkdir_umask=$umask;; .*0[02][02] | .[02][02] | .[02]) mkdir_umask=22;; *[0-7]) mkdir_umask=`expr $umask + 22 \ - $umask % 100 % 40 + $umask % 20 \ - $umask % 10 % 4 + $umask % 2 `;; *) mkdir_umask=$umask,go-w;; esac # With -d, create the new directory with the user-specified mode. # Otherwise, rely on $mkdir_umask. if test -n "$dir_arg"; then mkdir_mode=-m$mode else mkdir_mode= fi posix_mkdir=false case $umask in *[123567][0-7][0-7]) # POSIX mkdir -p sets u+wx bits regardless of umask, which # is incompatible with FreeBSD 'install' when (umask & 300) != 0. ;; *) # Note that $RANDOM variable is not portable (e.g. dash); Use it # here however when possible just to lower collision chance. tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ trap 'ret=$?; rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null; exit $ret' 0 # Because "mkdir -p" follows existing symlinks and we likely work # directly in world-writeable /tmp, make sure that the '$tmpdir' # directory is successfully created first before we actually test # 'mkdir -p' feature. if (umask $mkdir_umask && $mkdirprog $mkdir_mode "$tmpdir" && exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1 then if test -z "$dir_arg" || { # Check for POSIX incompatibilities with -m. # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or # other-writable bit of parent directory when it shouldn't. # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. test_tmpdir="$tmpdir/a" ls_ld_tmpdir=`ls -ld "$test_tmpdir"` case $ls_ld_tmpdir in d????-?r-*) different_mode=700;; d????-?--*) different_mode=755;; *) false;; esac && $mkdirprog -m$different_mode -p -- "$test_tmpdir" && { ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"` test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" } } then posix_mkdir=: fi rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" else # Remove any dirs left behind by ancient mkdir implementations. rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null fi trap '' 0;; esac;; esac if $posix_mkdir && ( umask $mkdir_umask && $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir" ) then : else # The umask is ridiculous, or mkdir does not conform to POSIX, # or it failed possibly due to a race condition. Create the # directory the slow way, step by step, checking for races as we go. case $dstdir in /*) prefix='/';; [-=\(\)!]*) prefix='./';; *) prefix='';; esac oIFS=$IFS IFS=/ set -f set fnord $dstdir shift set +f IFS=$oIFS prefixes= for d do test X"$d" = X && continue prefix=$prefix$d if test -d "$prefix"; then prefixes= else if $posix_mkdir; then (umask=$mkdir_umask && $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break # Don't fail if two instances are running concurrently. test -d "$prefix" || exit 1 else case $prefix in *\'*) qprefix=`echo "$prefix" | sed "s/'/'\\\\\\\\''/g"`;; *) qprefix=$prefix;; esac prefixes="$prefixes '$qprefix'" fi fi prefix=$prefix/ done if test -n "$prefixes"; then # Don't fail if two instances are running concurrently. (umask $mkdir_umask && eval "\$doit_exec \$mkdirprog $prefixes") || test -d "$dstdir" || exit 1 obsolete_mkdir_used=true fi fi fi if test -n "$dir_arg"; then { test -z "$chowncmd" || $doit $chowncmd "$dst"; } && { test -z "$chgrpcmd" || $doit $chgrpcmd "$dst"; } && { test "$obsolete_mkdir_used$chowncmd$chgrpcmd" = false || test -z "$chmodcmd" || $doit $chmodcmd $mode "$dst"; } || exit 1 else # Make a couple of temp file names in the proper directory. dsttmp=${dstdirslash}_inst.$$_ rmtmp=${dstdirslash}_rm.$$_ # Trap to clean up those temp files at exit. trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0 # Copy the file name to the temp name. (umask $cp_umask && $doit_exec $cpprog "$src" "$dsttmp") && # and set any options; do chmod last to preserve setuid bits. # # If any of these fail, we abort the whole thing. If we want to # ignore errors from any of these, just make sure not to ignore # errors from the above "$doit $cpprog $src $dsttmp" command. # { test -z "$chowncmd" || $doit $chowncmd "$dsttmp"; } && { test -z "$chgrpcmd" || $doit $chgrpcmd "$dsttmp"; } && { test -z "$stripcmd" || $doit $stripcmd "$dsttmp"; } && { test -z "$chmodcmd" || $doit $chmodcmd $mode "$dsttmp"; } && # If -C, don't bother to copy if it wouldn't change the file. if $copy_on_change && old=`LC_ALL=C ls -dlL "$dst" 2>/dev/null` && new=`LC_ALL=C ls -dlL "$dsttmp" 2>/dev/null` && set -f && set X $old && old=:$2:$4:$5:$6 && set X $new && new=:$2:$4:$5:$6 && set +f && test "$old" = "$new" && $cmpprog "$dst" "$dsttmp" >/dev/null 2>&1 then rm -f "$dsttmp" else # Rename the file to the real destination. $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null || # The rename failed, perhaps because mv can't rename something else # to itself, or perhaps because mv is so ancient that it does not # support -f. { # Now remove or move aside any old file at destination location. # We try this two ways since rm can't unlink itself on some # systems and the destination file might be busy for other # reasons. In this case, the final cleanup might fail but the new # file should still install successfully. { test ! -f "$dst" || $doit $rmcmd -f "$dst" 2>/dev/null || { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null && { $doit $rmcmd -f "$rmtmp" 2>/dev/null; :; } } || { echo "$0: cannot unlink or rename $dst" >&2 (exit 1); exit 1 } } && # Now rename the file to the real destination. $doit $mvcmd "$dsttmp" "$dst" } fi || exit 1 trap '' 0 fi done # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.7.0/docs/0000755000175000017500000000000014116722107011433 500000000000000tpm2-pkcs11-1.7.0/docs/README.md0000664000175000017500000000423614114236775012652 00000000000000# tpm2-pkcs11 [![Build Status](https://github.com/tpm2-software/tpm2-pkcs11/workflows/CI/badge.svg)](https://github.com/tpm2-software/tpm2-pkcs11/actions) [![Coverage Status](https://codecov.io/gh/tpm2-software/tpm2-pkcs11/branch/master/graph/badge.svg)](https://codecov.io/gh/tpm2-software/tpm2-pkcs11) [![Language grade: C/C++](https://img.shields.io/lgtm/grade/cpp/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:cpp) [![Language grade: Python](https://img.shields.io/lgtm/grade/python/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:python) [![Coverity Scan](src="https://img.shields.io/coverity/scan/16909.svg")](https://scan.coverity.com/projects/tpm2-pkcs11) PKCS #11 is a Public-Key Cryptography Standard that defines a standard method to access cryptographic services from tokens/ devices such as hardware security modules (HSM), smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token. # Getting Started * [Building](/docs/BUILDING.md) - How to get it to build * [Initializing](/docs/INITIALIZING.md) - How to configure it * [Installing](/docs/INSTALL.md) - How to install it # Example Usages * [SSH](/docs/SSH.md) - How to configure and use it with SSH. * [P11](/docs/P11.md) - How to configure and use it with various P11 components. * [PKCS11-TOOL](/docs/PKCS11_TOOL.md) - How to configure and use it with OpenSC's pkcs11-tool. * [EAP-TLS](/docs/EAP-TLS.md) - How to configure and use it for Wi-Fi authentication using EAP-TLS. * [INTEROPERABILITY](/docs/INTEROPERABILITY.md) - Configuration details for interoperability with [tss2-engine](https://github.com/tpm2-software/tpm2-tss-engine) and [tpm2-tools](https://github.com/tpm2-software/tpm2-tools) projects. Note, the *tpm2-tools* interoperability could cover other projects that use raw *marshalled* TPM 2.0 structures. # Advanced Knowledge * [Architecture](/docs/ARCHITECTURE.md) - Internal Overview * [DB Upgrades](/docs/DB_UPGRADE.md) - What happens on a DB Version Upgrade * [Release Process](/docs/RELEASE.md) - How releases are conducted tpm2-pkcs11-1.7.0/docs/coding_standard_c.txt0000664000175000017500000002274114114236775015562 00000000000000# Coding Standard For tpm2-pkcs11 ## Golden rule Code should hold as close to the C99 standard as possible with the exception that GCC specific extensions are generally accepted. The code must compile without warnings (for the primary target compiler) if the compiler is instructed to report all warnings. If some warning is unavoidable, the offensive line must be documented as to why it can not be changed to remove the warning. [1] It may also be possible to suppress specific warnings dependent on compiler options and this is acceptable but could also be dangerous if the suppression has too large a scope. ## Commenting There are four acceptable commenting styles: block, critical-line, next-line, and line. Block comments indicate many lines of code below are being covered by the comment. These are useful as file, function, algorithmic, or multi-line equation level comments. Next-line comments apply only to the line of code immediately beneath them. Critical-line comments are equivalent to next-liners, but they are formatted like block comments to indicate the line of code following (or the comment itself) is more important than normal. Each of these three comments are formatted so that the initial "/*" is left with the code/scope to which it applies. Line comments apply to the line on which they appear, always to the right of all code on the line. Line comments are preferred over next-liners because they do not interrupt the vertical flow of code... use the next-line style if the line of code would exceed 80 characters when a line comment is added. Next-line and line comments should be used sparingly... since they are rarely complete sentences, it is often better in the long run to rewrite the line of code to be understandable alone or in the context of a block comment. ```c /* * This block comment could apply to some function and describe its inner * workings. Notice these sentences have traditional capitalization and * punctuation... that's because it has to be read in a way completely * unlike the Post-It style content of next-line and line comments. */ /* * This line or comment is important... at least more than usual */ /* the next line is regular, but needs a comment */ // This is also acceptable for a line comment. // This is not an acceptable block comment. // These read very imbalanced. // Don't do this. ``` The size of the comment should be proportional to the size of the code that it refers to. Consequently, properties of code that can fit within a single 24-line screen should not be commented unless they are not obvious. By contrast, even obvious global properties and invariants may need to be made explicit. This doesn't have to be through comments, though. The assert() macro is an excellent executable comment. [2] All source files and functions require leading block comments for consistency. ## Naming conventions Variable names should clearly imply what their values mean... do not rely on the types of variables to do this. Multiple word names are descriptive and most easily read if words are separated with the underscore character, **_**. DoNotUseCamelBackStyle because ItIsNotAs easy to read, especially when actual whitespace IsAddedFor syntactical purposes. It is common practice to keep variable and function names completely lowercase. Constants are usually lowercase as well, but some groups prefer the standard of all-caps so they have the eye feel of older `#define` macros. ```c unsigned int table_index = find_index(jacket_table, "color", COLOR_RED); ``` Boolean variables should be named to reflect the true condition... even if the variable is used to detect false conditions. Boolean variables should be declared as type bool using . ```c int last_item = 0; while(!last_item) { /* ... */ } int char_found = is_alpha(c); ``` Single letter variable names should be avoided. Exceptions are: "i","j", and "k" are loop counters or temporary array indexes "m" and "n" are row and column indexes for multidimensional arrays "c" and "s" are temporary/parameter characters or strings "r", "g", "b", and "a" are red, green, blue, and alpha levels, but only when they are used together "x", "y", and "z" are coordinate values Abbreviated words in variable names should be avoided. Exceptions are: "char" = character "col" = column. Typically there is also "row" so it is not confused with color "cnt" = count "pos" = position "rem" = remainder Function names should follow the naming conventions of variables and clearly imply not only what the function does, but also the nature of what it returns (if anything). Functions that return boolean integers should be named to reflect the true condition... even if they are created to detect false conditions. Functions should never be hidden in conditional statements, with the exception of loops where it makes the code simpler. ```c bool is_number_prime = is_prime(i); if(is_number_prime) { /* ... */ } while(!labeled_correctly(sample[i])) { /* ... */ } ``` A function that is exported for use in multiple source files should be prefixed with the source file (or object module) name it was defined in (not declared... infinite declarations are allowed, but only one definition). For example, the file list.c may contain the implementation of a dynamic list ADT including an exported method for creating a list instance and an internal (static) method for overflow checking. The first function might be named "list_create", and the second, "is_overflowed". A function used only within its definition source file should be declared static (as should all variables global to only one file's scope), have no prefix, and must not be declared in any header files. A function used externally from its definition source file should be declared extern in the source's associated header file. ## Files Typically, every header file has the same base filename as an associated source file. Each header file is bound by conditional compilation commands using an all caps and underscored variant of the complete filename. Header files should never define functions or variables. ```c /* * File: basic_file.h * Header file block comment */ #ifndef BASIC_FILE_H #define BASIC_FILE_H /* standard #includes */ /* project #includes */ /* type/constant definitions */ /* extern variable declarations */ /* extern function declarations */ #endif /* BASIC_FILE_H */ /* * File: basic_file.c * Source file block comment... */ /* standard #includes */ /* project #includes */ #include "basic_file.h" /* externalized variable definitions */ /* static variables (locally global) */ /* static function declarations */ /* externalized function definitions */ /* static function definitions */ ``` Header files should only `#include` what is necessary to allow a file that includes it to compile. Associated source files will always `#include` the header of the same name, but should `#include` files whose resources are used within the source even if they are already included in that header. This provides a complete context for readers of the source file... i.e., they don't have to search through headers to determine where a resource came from. For example, consider a header and source that use FILE pointers declared in stdio.h. The header must `#include ` to ensure files that include it will be able to compile. The corresponding source `#includes` the associated header and therefore receives the benefit of stdio.h automatically. The source would be unnerving if the `FILE` type was used and `stdio.h` was not `#included`. ## Variable Scope and types Variables should be declared and scoped to the smallest scope of use. ```c /* This should be avoided */ void foo() { unsigned i; do_something(); for(i=0; i < 100; i++) { do_more(i); } } /* Proper variable scope */ void foo() { do_something(); unsigned i; for(i=0; i < 100; i++) { do_more(i); } } ``` This promotes descriptive variable names as well as dissuading variable re-use when not proper. Also, it promotes a locality, where one can identify the variable and it's corresponding usage in code. Variables should only be of a signed type if something should ever be negative. A common, incorrect use, is to declare loop indices as int instead of unsigned. ## Formatting Always use space characters, 4 spaces per level of indentation. Block statements encapsulated with braces should place the opening brace on the same line after the end of the conditional statement or function parameter list, and the closing brace at the same column position as the beginning of the conditional statement or function return parameter, on the line immediately after the end of the block. ```c if(some_int > 0) { statement1; statement2; } void some_function(arg1, arg2) { statement1; statement2; } ``` Conditional statements (such as if, else, while, for, switch, etc) should always be followed by such block statements, even if they contain only one line statement. These formatting conditions are contrary to Kernighan and Ritchie's "one true brace style". [3] Line Length should not exceed 80 characters and should be split on the nearest whitespace or delimiter character. ## Formatters Code formatters can be found under misc/formatters References 1: Alan Bridger, Mick Brooks, and Jim Pisano, C Coding Standards, 2001, http://www.alma.nrao.edu/development/computing/docs/joint/0009/2001-02-28.pdf 2: Jim Larson, Standards and Style for Coding in ANSI C, 1996, http://www.jetcafe.org/jim/c-style.html 3: Brian Kernighan, Dennis Ritchie, The C Programming Language, 1988 tpm2-pkcs11-1.7.0/docs/OPENSSL.md0000664000175000017500000001206114114236775013033 00000000000000# Using TPM2 PKCS11 with OpenSSL ## Introduction OpenSSL has the ability to load dynamic engines to control where the underlying cryptographic operations occur. Additionally, [OpenSC LibP11](https://github.com/OpenSC/libp11) has an engine that can load arbitrary PKCS11 libraries. Thus, through a few layer of indirections, you can use OpenSSL with the tpm2-pkcs11 library. This is a less complete tutorial, and assumes you have been through the [pkcs11-tool](PKCS11_TOOL.md) tutorial. ## Setup Yubico has very complete instructions for configuring, see: - https://developers.yubico.com/YubiHSM2/Usage_Guides/OpenSSL_with_pkcs11_engine.html These instructions are mostly applicable, the only thing that needs to change is that the MODULE_PATH needs to point to the tpm2-pkcs11 library. A sample OSSL config file is provided at [openssl.conf](../misc/tpm2-pkcs11.openssl.sample.conf). Note: - The Yubico instructions use rand. Rand will not hit the tpm because the OpenSC engine does not support it. - Systems with PKCS11 kit installed may need additional tweaks to get it to work. For the examples below, I followed Yubico's advice and set up an alias in my `~/.bashrc` file called tpm2ssl, like so: ```bash alias tpm2ssl='OPENSSL_CONF=$HOME/tpm2-pkcs11.openssl.conf openssl' ``` You'll also need to set up a `TPM2_PKCS11_STORE` and have an asymmetric key pair generated. This is all shown in the [pkcs11-tool](PKCS11_TOOL.md) tutorial. Setting up an alias makes life easier, so lets do that: ```bash alias tpm2pkcs11-tool='pkcs11-tool --module /path/to/libtpm2_pkcs11.so ``` Note: You need to update `--module` option to point to the tpm2-pcks11 shared object. ## Generating a Certificate First thing first, identify the private key to use to generate the certificate or CSR from. With pkcs11-tool, one can do: ```bash pkcs11-tool --module /path/to/libtpm2_pkcs11.so --slot 1 --login -O ``` You should see output like so: ```bash Private Key Object; EC label: my-ecc-keypair ID: 61366566303531343635636138663035 Usage: decrypt, sign ``` Note: You need to login to see private key objects. If you don't have a key, we can create one: ```bash tpm2pkcs11-tool --label="my-ecc-keypair" --login --keypairgen --usage-sign --key-type EC:prime256v1 Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; EC label: my-ecc-keypair ID: 3436 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410436e7d2c84725234ec8d4b14bc31a50d382eb578cbc7315ae95561875314eb5a22a390bbfabef6269a35a18b1d95b2abc553071c419c3e866db0c3f13c0288ac6 EC_PARAMS: 06082a8648ce3d030107 label: my-ecc-keypair ID: 3437 Usage: verify ``` Your key could be RSA, that's fine. The imporant thing is to look at the label and pass it via the `-key` argument in openssl below. Note that this is key my-ecc-keypair in slot 1, even though the output says slot 0. In PKCS11, the slotid is what matters, which is the 0x1. A slot id of 0x0 is not valid. To generate a self signed certificate, one can simply use the `req` command with `openssl`. ``` bash tpm2ssl req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_my-ecc-keypair -out cert.pem engine "pkcs11" set. Enter PKCS#11 token PIN for label: ``` Note: OpenSSL can also find the key by using the `id` field. For example, update the key to: ``` -key slot_1-id_38316235653539316533633232383139 ``` ## Generating a CSR Most users will likely require certificates signed by a CA. To do this, we can generate a CSR that gets uploaded to a CA. The CA then returns the certificate. The steps to upload the CSR and retrieve it from the CA are CA dependent and will not be covered here. ```bash tpm2ssl req -new -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_my-ecc-keypair -out csr.pem ``` The next steps after generating the CSR would be to go to a CA, get a certificate generated and signed using it. Note: - OpenSSL config file can be used for specifying default values when using the req command. [See the man page](https://www.openssl.org/docs/man1.1.1/man1/openssl-req.html). ## Inserting a Certificate At this point, you have a certificate, either self signed or signed via a CA. The certificate may be in many forms, if you followed the steps above, it's in the PEM format. You need to convert any version you have to PEM, information on how to do this can be found at: - https://knowledge.digicert.com/solution/SO26449.html Once you obtain a PEM certificate, you can use the ptool command. ```bash tpm2_ptool addcert --label=label --key-id=38316235653539316533633232383139 --path=$TPM2_PKCS11_STORE ~/pem action: add cert: CKA_ID: '38316235653539316533633232383139' ``` ## Listing a Certificate After this, view your cert object, you can again just list the objects with pkcs11-tool. ```bash tpm2pkcs11-tool --slot 1 -O ``` You should see, amongst other output, output like: ```bash Certificate Object; type = X.509 cert label: 1 subject: DN: CN=my key ID: 38316235653539316533633232383139 ``` tpm2-pkcs11-1.7.0/docs/CHANGELOG.md0000644000175000017500000000000013754763565013176 00000000000000tpm2-pkcs11-1.7.0/docs/ARCHITECTURE.md0000664000175000017500000000437014114236775013576 00000000000000# tpm2-pkcs11 architecture design This document aims to describe the fundamental design of the TPM2.0 PKCS11 internals. ## Store In order to fulfill the PKCS11 interface, some additional metadata needs to be stored to disk. The data is stored in the "store", which is controllable via: - ENV Variable `TPM2_PKCS11_STORE` - Search Operation of: - `/etc/tpm2-pkcs11` - `$HOME/tpm2_pkcs11` - `$CWD` The store contains all the metadata required, and currently is stored in sqlite3 database. ## Primary Key Root Internally, all objects are stored under a **persistent** primary key in the owner hierarchy. The choice of a persistent object was done to prevent requirements of knowing the owner hierarchy auth to use the PKCS11 token. Additionally, most TPMs will have an *SRK* provisionined here as well. This authorization value is usually owned by an IT organization in enterprise environments. The auth value for this primary key is stored in the store on disk and is only protected with filesystem access controls. However, a typical Primary Key in the Owner Hierarchy has an empty password. Thus, use of the primary key should be considered a given and in most cases the auth value is empty or a known value. The primary key handle is stored as a serialized ESYS_TR in the store and is used for encrypted sessions with the TPM. ## Login Flow For each token in the store, a token maintains 2 objects under the primary key. One for each of the PKCS11 users, the SO and USER users. The authorization value for these objects is the SO or USER PIN respectively, mixed with a salt via sha256. This auth value is used to unseal an AES256 wrapping key. The wrapping key is used to encrypt all object auth values in the token, in mode GCM. ## Token Objects The actual keys and certificates that the token exposes for cryptographic operations. These keys all have an auth value that is wrapped with the token wide wrapping key. ## Expanding the Auth Model Currently, the wrapping model should make it easy to bring in existing keys into the model if needed. Most keys just use a simple password. However, in the fuure, we are looking to add policy support for internally created keys, see: - https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/tpm2-pkcs11_object_auth_model.md tpm2-pkcs11-1.7.0/docs/INTEROPERABILITY.md0000664000175000017500000001437014114236775014302 00000000000000# Interoperability with Existing TPM2 Objects A user may have existing TPM2 objects created with the [tpm2-tss-engine](https://github.com/tpm2-software/tpm2-tss-engine) project. In order to use these objects in a token one can use the tpm2_ptool link commandlet. Below is an example of doing so. ### Linking a TPM2 TSS Engine Key with a persistent primary object tpm2-tss-engine's *tpm2tss-genkey* command has the ability to create TPM2 objects using an existing primary key. The only requirement that the tpm2-pkcs11 project requires is that the handle be persistent. The example below creates a persistent primary key and creates a tpm2-tss-engine key under the persistent primary key to use. Many TPM's come provisioned with what is known as the storage root key (SRK). This is a key defined by the [provisioning guidance](https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf). This is a particularly useful key, and is set to an empty auth value. Thus owner authorization is not needed. Also in the examples below we use specific primary key handles, but if one has existing objects, just substitute the values. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key tpm2_createprimary -c primary.ctx # Persistent primary key at handle 0x81000001 tpm2_evictcontrol -c primary.ctx 0x81000001 # Create the tpm2-tss-engine key under the persistent primary key tpm2tss-genkey -P 0x81000001 tss2key-rsa2048.pem # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --primary-handle=0x81000001 --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" tss2key-rsa2048.pem ``` From there, one can use that key as they would in other tutorials. ## Linking a TPM2 TSS Engine Key with a transient primary object It may be desirable to use the transient primary key that *tpm2tss-genkey* utilizes by default. Either as a way to avoid using Non-Volatile memory with a persistent key, or for interoperability with existing *tpm2tss-genkey* generated keys using this default parent. Also in the examples below we create tpm2-tss-engine key, existing keys may also be used. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create the tpm2-tss-engine key under the default transient primary key or use existing similar key tpm2tss-genkey tss2key-rsa2048.pem # Create a token associated with a transient primary object that is compatible with tpm2-tss-engine pid="$(tpm2_ptool init --transient-parent=tss2-engine-key --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" tss2key-rsa2048.pem ``` From there, one can use that key as they would in other tutorials. ### Linking a TPM2 Tools Key with a persistent primary object [tpm2-tools](https://github.com/tpm2-software/tpm2-tools) has the ability to create primary keys via [tpm2\_createprimary](https://github.com/tpm2-software/tpm2-tools/blob/master/man/tpm2_createprimary.1.md) and persist them via [tpm2\_evictcontrol](https://github.com/tpm2-software/tpm2-tools/blob/master/man/tpm2_evictcontrol.1.md). You can create tokens and link keys generated with *tpm2-tools* as illustraded below. One crucial benefit of persistent objects, besides token speed as it doesn't need to invoke the TPM2_CreatePrimary command, is that any template can be used for the persistent object; one is not limited to the few pre-defined templates. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key tpm2_createprimary -c primary.ctx # Persistent primary key at handle 0x81000001 tpm2_evictcontrol -c primary.ctx 0x81000001 # Create the tpm2-tools key under the persistent primary key tpm2_create -C 0x81000001 -u key.pub -r key.priv # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --primary-handle=0x81000001 --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key # Note: order of key pair objects does not matter tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" key.pub key.priv ``` ### Linking a TPM2 Tools Key with a transient primary object Since transient primary objects need exacting templates each time, currently only two tpm2-tools primary object templates are supported: | Command | Template Name | |-------------------------------------|------------------------| | `tpm2_create -c primary.ctx` | tpm2-tools-default | | `tpm2_create -Gecc -c primary.ctx` | tpm2-tools-ecc-default | ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key according to the template table above tpm2_createprimary -c primary.ctx # Create the tpm2-tools key under the persistent primary key tpm2_create -C primary.ctx -u key.pub -r key.priv # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --transient-parent="tpm2-tools-default" --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key # Note: order of key pair objects does not matter tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" key.pub key.priv ``` From there, one can use that key as they would in other tutorials. tpm2-pkcs11-1.7.0/docs/RELEASE.md0000644000175000017500000001624213754763565013006 00000000000000# Release Information Releases shall be tagged following semantic version guidelines found at: - http://semver.org/ The general release process will be one of two models: - Tag releases off of branch master. - Tag releases off of a release specific branch. - Release specific branch names can be for long-running major versions, IE 3.1, 3.2, 3.3, etc. and *SHALL* be named `.X`. - Release specific branch names can be for long-running minor versions, IE 3.1.1, 3.1.2, etc. and *SHALL* be named `..X`. Release candidates will be announced on the [mailing list](https://lists.01.org/mailman/listinfo/tpm2). When a RC has gone 1 week without new substantive changes, a release will be conducted. Substantive changes are generally not editorial in nature and they do not contain changes to the CI system. Substantive changes are changes to the man-pages, code or tests. When a release is cut, the process is the same as a Release Candidate (RC), with the exception that it is not marked as "pre-release" on GitHub. The release notes should include everything from the last release to the latest release. ## Updating the CHANGELOG for release candidates and final releases When a first release candidate is cut, a new entry will be added to the CHANGELOG file. This entry will have the release candidate version and the date on which the release candidate was released. The entry will list all the changes that happened between the latest final release and the first release candidate. The commit that made the change will be tagged with a release version and a -rc0 suffix as an indication that is not a final release but a first release candidate. If after a week the -rc has no changes, then a final release can be made as explained above. But if changes are made, then a new releases candidate will be released and the -rc suffix will be incremented. For each release candidate, the changes that happened between the previous release candidate will be appended to the CHANGELOG entry, and both the release candidate version and the date of the release will be updated to reflect the latest release candidate. The commit that updated the CHANGELOG entry will be tagged as the latest release candidate. When a final version will be released, there will not be changes to append to the CHANGELOG entry since otherwise a new release candidate should be cut. So only the release version and date should be updated in the CHANGELOG. The commit that updated the CHANGELOG entry will be tagged as the final release. For a final release, change the version to the final release version (i.e: 3.0.5-rc3 -> 3.0.5) and update the date. The commit for this change will be tagged as $version. ## Testing The tools code **MUST** pass the Travis CI testing and have a clean Coverity scan result performed on every release. The CI testing not only tests for valid outputs, but also runs tests uses clang's ASAN feature to detect memory corruption issues. - BUG: Reconfigure Coverity: https://github.com/tpm2-software/tpm2-tools/issues/1727 ## Release Checklist The steps, in order, required to make a release. - Ensure current HEAD is pointing to the last commit in the release branch. - Ensure [Travis](https://travis-ci.org/tpm2-software/tpm2-tools) has conducted a passing build of HEAD. - Update version and date information in [CHANGELOG.md](CHANGELOG.md) **and** commit. - Create a signed tag for the release. Use the version number as the title line in the tag commit message and use the [CHANGELOG.md](CHANGELOG.md) contents for that release as the body. ```bash git tag -s ``` - Build a tarball for the release and check the dist tarball. **Note**: The file name of the tarball should include a match for the git tag name. ```bash make distcheck ``` - Generate a detached signature for the tarball. ```bash gpg --armor --detach-sign ``` - Push **both** the current git HEAD (should be the CHANGELOG edit) and tag to the release branch. ```bash git push origin HEAD: git push origin ``` - Verify that the Travis CI build passes. **Note**: Travis will have two builds, one for the push to master and one for the tag push. Both should succeed. - Create a release on [Github](https://github.com/tpm2-software/tpm2-tools/releases), using the `` uploaded. If it is a release candidate, ensure you check the "pre-release" box on the GitHub UI. Use the [CHANGELOG.md](CHANGELOG.md) contents for that release as the message for the GitHub release. **Add the dist tarball and signature file to the release**. - Update the version matrix in the wiki ensuring that the CI is building against a released version of: - [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd) - [tpm2-tss](https://github.com/tpm2-software/tpm2-tss) Configuration can be modified via [docker-prelude.sh](.ci/docker-prelude.sh). - After the release (not a release candidate) add a commit to master updating the News section of the [README](README.md) to point to the latest release. - Send announcement on [mailing list](https://lists.01.org/mailman/listinfo/tpm2). ## Historical Version Information Versions after v1.1.0 will no longer have the "v" prefix. Autoconf now sets the VERSION #define based on the output of git describe. See commit 2e8a07bc for the details. Version tags after v1.1.0 shall be signed. ## Verifying git signature Valid known public keys can be reached by referencing the annotated tags listed below: - william-roberts-pub - javier-martinez-pub - joshua-lock-pub - idesai-pub or via a PGP public keyring server like: - http://keyserver.pgp.com/vkd/GetWelcomeScreen.event Import the key into your keyring: ``` $ git show [annotated-tag-name] | gpg --import ``` **Example**: ``` $ git show william-roberts-pub | gpg --import ``` Verify the release tag: ``` $ git tag --verify [signed-tag-name] ``` # Local Release Configuration Below you will find information how to configure your machine locally to conduct releases. ## Signing Key Setup Signing keys should have these four properties going forward: - belong to a project maintainer. - be discoverable using a public GPG key server. - be [associated]((https://help.github.com/articles/adding-a-new-gpg-key-to-your-github-account/)) with the maintainers GitHub account. - be discoverable via an annotated tag within the repository itself. Ensure you have a key set up: ``` $ gpg --list-keys ``` If you don't generate one: ``` $ gpg --gen-key ``` Add that key to the gitconfig: ```bash git config user.signingkey [gpg-key-id] ``` Make sure that key is reachable as an object in the repository: ```bash gpg -a --export [gpg-key-id] | git hash-object -w --stdin [object SHA] git tag -a [your-name-here]-pub [object SHA] ``` Make sure you push the tag referencing your public key: ```bash git push origin [your-name-here]-pub ``` Make sure you publish your key by doing: - http://keyserver.pgp.com/vkd/GetWelcomeScreen.event - Select "Publish your key". - Select "Key block" - Copy and paste the output of `gpg --armor --export ` - Validate your email account. After that, you can sign tags: ```bash git tag --sign [signed-tag-name] ``` tpm2-pkcs11-1.7.0/docs/SSH.md0000664000175000017500000000730514114236775012352 00000000000000# SSH Configuration Below, will be examples and discussion on how to configure SSH with tpm2-pkcs11 to ssh to the local host. The example described here could be extended for remote ssh login as well. We assume a machine configured in such a state where a user can ssh locally and login with a password prompt, ala: ```sh ssh user@127.0.0.1 user@127.0.0.1's password: Last login: Thu Sep 6 12:23:07 2018 from 127.0.0.1 ``` works. **Thus we assume a working ssh server, client and ssh-keygen services and utilities are present.** # Step 1 - Initializing a Store Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. We start by creating a tpm2-pkcs11 *store* and set up an RSA2048 key that SSH can used. **Note**: Most SSH configurations allow RSA2048 keys to be used, but this can be turned off in the config, but this is quite rare. ```bash tpm2_ptool.py init --path=~/tmp tpm2_ptool.py addtoken --pid=1 --label=label --sopin=mysopin --userpin=myuserpin --path=~/tmp tpm2_ptool.py addkey --algorithm=rsa2048 --label=label --userpin=myuserpin --path=~/tmp ``` # Step 2 - Exporting the Store Since we didn't use the default store location by setting `--path` in the `tpm2-ptool` tool, we must export the store so the library can find it. We do this via: ```sh export TPM2_PKCS11_STORE=$HOME/tmp ``` **Note**: The tpm2-pkcs11.so library *WILL NOT EXPAND `~`* and thus you have to use something the shell will expand, like `$HOME`. # Step 3 - Generating the SSH key public portion The next step will use `ssh-keygen` command to generate the public portion of an ssh key. The command is slightly complicated as we use tee to redirect the output to both a file called `my.pub` and to *stdout* for viewing. Note: You may need to update the path to the tpm2-pkcs11 shared object below. ```bash ssh-keygen -D ./src/.libs/libtpm2_pkcs11.so | tee my.pub ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0CTmUAAB8jfNNHrw99m7K3U/+qbV1pAb7es3L+COqDh4eDqqekCm8gKHV4PFM9nW7z6CEfqzpUxYi5VvRFdYaU460bhye7NJbE0t9wjOirWtQbI6XMCKFiv/v8ThAtROT+KKYso7BK2A6spkCQwcHoaQU72C1vGouqtP5l/XRIYydp3P1wUdgQDZ8FoGhdH5dL3KnRpKR2d301GcbxMxKg5yhc/mTNkv1ZoLIcwMY7juAjzin/BhcYIDSz3sJ9C2VsX8FZXmbEo3olYU4ZfBZ+45KJ81MtWgrkXSzetwUfiH6eeTqNfqGT2IpSwDLFHTX2TsJyFDcM7Q+QR44lEU/ ``` # Step 4 - Configuring SSH to Accept the Key Now that the public portion of the key is in ssh format and located in file `my.pub` we can add this to the `authorized_keys2` file for the user: ```bash cat my.pub >> ~/.ssh/authorized_keys2 ``` SSH consults this file and trusts private keys corresponding with the public entries. # Step 5 - Ensuring the Library is in a Good Path Using the ssh client, we login. Note that ssh won't accept pkcs11 libraries outside of "trusted" locations. So we copy the PKCS\#11 library to a trusted location. Thus you can either do `sudo make install` to move the binary to a trusted location or just do it manually. Manual Method: ```sh sudo cp src/.libs/libtpm2_pkcs11.so /usr/local/lib/libtpm2_pkcs11.so ``` On Ubuntu 16.04 with no configuration options specified to alter installation locations, they end up in the same location for both the *manual method* and `sudo make install` method. # Step 6 - Logging In via SSH To log in, one used the `ssh` client application and specifies the path to the PKCS11 library via the `-I` option. It will prompt for the user PIN, which in the example is set to `myuserpin`. ```bash ssh -I /usr/local/lib/libtpm2_pkcs11.so 127.0.0.1 Enter PIN for 'label': myuserpin Last login: Fri Sep 21 13:28:31 2018 from 127.0.0.1 ``` You are now logged in with a key resident in the TPM being exported via the tpm2-pkcs11 library. tpm2-pkcs11-1.7.0/docs/P11.md0000664000175000017500000001606514114236775012261 00000000000000# P11 Kit Configuration Below, will be examples and discussion on how to use P11kit with tpm2-pkcs11. This will not be exhaustive, nor should it be. However, commands not explicitly listed will likely not work as they are work in progress. ## Prerequisites In order to use tpm2-pkcs11 with P11kit, one **MUST** have P11kit installed before running `./configure` and perform a `make install`. Often times, one must be root to do the install, i.e. `sudo make install`. During the configure step, tpm2-pkcs11 detects if P11kit is installed, and installs necessary configuration files and changes library installation paths so it works. To install p11kit, on Ubuntu, just do: ``` sudo apt-get install p11-kit ``` ## Listing Installed Modules ### Initial State This is the hello world of P11kit. This tests that the module can be seen. We assume a clean slate, if no `TPM2_PKCS11_STORE` is present. ``` p11-kit list-modules p11-kit: tpm2_pkcs11: module failed to initialize, skipping: The device is not present or unplugged ``` This will likely have more output than what is shown here, however, the error message indicates that P11kit sees the tpm2-pkcs11 library as a *slot* but that the *token* is not present. This state is analogous to a smart card reader that doesn't have a smart card in it. ### Initializing a Store Now that we have p11kit seeing the tpm2-pkcs11 library, lets initialize a *store*. This is the process of configuring the TPM to PKCS#11 bridge so it has tokens and objects for the PKCS#11 paradigm. Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. ```bash # initialize a store tpm2_ptool.py init --path=~/tmp action: Created id: 1 # add a token to the store tpm2_ptool.py addtoken --pid=1 --label=label --sopin=mysopin --userpin=myuserpin --path=~/tmp ``` No we have an initialized store and a token, i.e. we inserted a non-provisioned smart card into the reader. Now when we list the installed modules, it should be an in inserted and initialized state. ``` p11-kit list-modules tpm2_pkcs11: libtpm2_pkcs11.so library-description: TPM2.0 Cryptoki library-manufacturer: Intel library-version: 42.42 token: p11kit manufacturer: Intel model: TPM2 PKCS#11 serial-number: 0000000000000000 flags: rng login-required token-initialized ``` **Note**: The details of this output may change, as many of the values are still in development. ## P11tool The p11tool is used to interact with pkcs11 modules and its API. It can be installed on Ubuntu via: ``` sudo apt install gnutls-bin ``` **This tutorial assumes you completed the section P11 Kit Configuration** ## Listing Token URLS p11tool can work of of token URLs. To find our token URL so we can use only that token we run the command: ``` p11tool --list-token-urls pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label ``` Now we have a URL we can use for subsequent commands and ignore other tokens on your system. **Note**:I set the variable `token="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label"` in my bash shell before continuing. ## Listing Objects Let's probe the token and see what objects are on it: ```bash p11tool --list-all "$token" No matching objects found ``` In the subsequent sections, we'll add objects to the token. ### Generating a Random Number The next example will show how to generate a random number. We'll be piping it through xxd for display purposes. Be careful running this command without a redirect or pipe to something like xxd. Dumping raw bytes to the terminal can cause unexpected behaviors. ``` $ p11tool --generate-random=4 "$token" | xxd 00000000: 02b6 0c20 ``` ## Creating Objects Outside of using [tpm2_ptool.py](PKCS11_TOOL.md) to add objects, p11tool supports creating objects through the PKCS#11 interface. ### Generating RSA Key pair This will generate an RSA key pair using p11tool: ``` GNUTLS_PIN=myuserpin p11tool --login --generate-rsa --bits=2048 --label=p11kit "$token" ``` Successful runs should see the following output: ``` -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgP2yAABMnmDb+D6wZRp J4cqw8efa/Zk8AwHxJ2nAIUgaTIXzB3H0ps7++D0qfRVGJHpq0Qy1sGw+AfAbN4E kIMcl9SYw1xhGzFws4atcVwggH1hm+v32rezU4JrZ3wP+sZe+qVWHk1oBevSHYMG Yz7D/B5JEGSHmJTQLEtt0qlTj0lSbVo3w5e5MT6MsC1IiRjT2BlvWsZiOQ+OyKNE 1ziOhuVCXfZOzdVBDSDfT5Zg5PTvcJj+YIONFFrgdzmUF3Y/5xcqe+hgXx7gG3U0 0HhnbGkBA0P0nYGSDubo3D15IzUflCG7PDS4E2V5VtCkIJDyoJ/08bf106mratny 9QIDAQAB -----END PUBLIC KEY----- ``` ### Generating ECC Key pair This will generate an ECC key pair using p11tool: ```bash GNUTLS_PIN=myuserpin p11tool --login --generate-ecc --curve=secp256r1 --label=my-ecc-keypair "$token" ``` Successful runs should see the following output: ```bash -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEog3BTlQtVtMGnzJEHTK6xUE1PEKJ KLmYRAdS3Pj2pi2oAW6pTJo52F0SMTWwpdGSpsFGTqG+MKmXF3pC3JcnHQ== -----END PUBLIC KEY----- ``` ## Destroying Objects This will show how to delete an object. The first step is having an object to delete on the token and obtaining a URL to the object you want to delete. Look at the section on *Creating Objects*. The first step is getting a URL to what you want to delete, we can use the `p11tool --list-all` to find them: ```bash $ p11tool --list-all "$token" Object 0: URL: pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public Type: Public key Label: my-ecc-keypair Flags: CKA_NEVER_EXTRACTABLE; ID: 29:96:2f:de:18:d2:46:e0:16:4d:89:98:81:df:7f:c2:ea:d9:59:e9 ``` Note: You only see public objects when not logged in, to see private or secret objects you need to specify the `--login` option. Now that we know what object to delete, let's delete it. Ensure you provide the `--login` option and the password: ```bash url="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public" $ GNUTLS_PIN=myuserpin p11tool --login --delete "$url" ``` You will then be presented with output verifying the delete: ``` Object 0: URL: pkcs11:library-description=TPM2.0%20Cryptoki;library-manufacturer=tpm2-software.github.io;model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public Type: Public key Label: my-ecc-keypair Flags: CKA_NEVER_EXTRACTABLE; ID: 29:96:2f:de:18:d2:46:e0:16:4d:89:98:81:df:7f:c2:ea:d9:59:e9 Are you sure you want to delete those objects? (y/N): ``` Select Y and then hit enter. ``` Are you sure you want to delete those objects? (y/N): y Re-using cached PIN for token 'label' 1 objects deleted ``` And verify that it's gone: ``` $ p11tool --list-all "$token" No matching objects found ``` Your output could vary based on what objects are present in your token. tpm2-pkcs11-1.7.0/docs/BUILDING.md0000664000175000017500000001362314114240163013074 00000000000000# Building Instructions for building and configuring tpm2-pkcs11. ## Step 1 - Satisfy Dependencies The project depends on: 1. [Automake](https://www.gnu.org/software/automake) 2. [Make](https://www.gnu.org/software/make/) 3. A C compiler. Known working compilers are: 1. [gcc](https://www.gnu.org/software/gcc/) 2. [clang](https://clang.llvm.org/) 4. [SQLite3](https://www.sqlite.org/) 5. [tpm2-tss](https://github.com/tpm2-software/tpm2-tss): **Requires >= 2.0, recommended >= 2.3.0** 6. A Resource Manager, one of: - [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd): **Requires version >= 2.1.0** - Linux kernel version >= 4.12 for `/dev/tpmrm[0-9]+` nodes. - Note that the device TCTI must be configured for this. 7. [openssl](https://www.openssl.org/): **Requires version >= 1.0.2g** 8. [autoconf-archive](https://github.com/autoconf-archive/autoconf-archive): **Tested with release v2018.03.13** Others may not work, some distros package versions too old. Either install or just copy the contents of the autoconf-archive's m4 directory to the m4 subdirectory of the tpm2-pkcs11 project. If the m4 folder is not present, simply create it with mkdir. 9. [libyaml](https://github.com/yaml/libyaml) ### Optional Dependencies for tpm2_ptool 1. [tpm2-tools](https://github.com/tpm2-software/tpm2-tools): **Requires version >= 4.0.1** 2. [Python](https://www.python.org/): **Requires version >= 3.7** ### Notes The tpm2-tss and tpm2-tools projects must be obtained via source. Packaged versions existing in known package managers are likely too old. ### Optional Dependencies for Enabling Testing 1. [CMocka](https://cmocka.org/) 2. [swtpm](https://github.com/stefanberger/swtpm) or [tpm_server](https://sourceforge.net/projects/ibmswtpm2/) TPM 2.0 simulator 3. [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd) 4. Dependencies for [tpm2-ptool](# Optional Dependencies for tpm2_ptool) ## Step 2 - Bootstrapping Run the `bootstrap` command. ```sh ./bootstrap ``` ## Step 3 - Configuring For people wanting to just build the library, the command: ```sh ./configure ``` Should be sufficient. However, the following configure options will be useful for those wishing to do more, like testing, or those running into issues to work around. The following are known configure options that can be added that *are outside of normal autoconf/automake options*, which are documented [here](https://sourceware.org/autobook/autobook/autobook_14.html). ### Configure Options 1. `--enable-unit` - Enables the unit tests when running `make check` 2. `--enable-integration` - Enables the integration tests when running `make check` * Requires the following items to be found on `PATH`: * [tpm2-ptool](../tools/tpm2_ptool.py) * [tpm2-tools](#step-1---satisfy-dependencies) * Example: ```sh export PATH="/home/wcrobert/workspace/tpm2-tools/tools:/home/wcrobert/workspace/tpm2-pkcs11/tools:$HOME/workspace/ibmtpm974/src:$PATH" ``` **Normally** only tpm2-tools, swtpm/tpm_server and tpm2-ptool need to be added to `PATH`. Most other things, like CMocka and ss, are already installed and thus on `PATH`. Your results will very based on what you build from source and/or install in non-standard locations. 3. `--disable-hardening` - Compiler flag hardening options, this is enabled by default. Disabling hardening is **NOT RECOMMENDED FOR PRODUCTION BUILDS**, however, is often useful when adding in compiler flags for testing via `CFLAGS`. For example, one would need to disable this if configuring [clang](#step-1---satisfy-dependencies) with [ASAN](https://clang.llvm.org/docs/AddressSanitizer.html). 4. `--disable-esapi-session-manage-flags` - Disables ESAPI session flag management and causes the PKCS11 library to do it. This is autodetected and overriding it should only be done in specific conditions This can also be configured at run time by setting the environment variable `TPM2_PKCS11_ESAPI_MANAGE_FLAGS` to any value. **These options may go away in future versions**. ## Step 4 - Building The next step after [configuring](#step-3---configuring) is to compile the source code. ## Step 5 - Testing To enable testing, run `make check`. **Note:** If make check runs 0 tests, you likely need the configure options `--enable-unit` and `--enable-integration`. See [Configure Options](#configure-options) for more details. ## Running tests in a container Sometimes it is useful to be able to run tests in a fresh environment where everything is configured by default. Using a container is a light way to ensure the environment of the test is quite clean. There are several containers provided in [tpm2-software-container](https://github.com/tpm2-software/tpm2-software-container) project. For example here is a command which builds tpm2-pkcs11 and runs continuous integration tests in a Fedora 32 container with [Docker](https://www.docker.com/) or [Podman](https://podman.io/): ```sh sudo docker run --rm -v "$(pwd):/workspace/tpm2-pkcs11" --env-file .ci/docker.env \ --workdir /workspace/tpm2-pkcs11 -ti ghcr.io/tpm2-software/fedora-32 \ bash -c .ci/docker.run # NB. sudo can be omitted if the user is added to the "docker" group, but this # configuration impacts security in your system, as documented in # https://docs.docker.com/engine/install/linux-postinstall/#manage-docker-as-a-non-root-user podman run --rm -v "$(pwd):/workspace/tpm2-pkcs11" --env-file .ci/docker.env \ --workdir /workspace/tpm2-pkcs11 -ti ghcr.io/tpm2-software/fedora-32 \ bash -c .ci/docker.run ``` Building the project and running tests can be also done with specific shell commands inside a container: ```sh # Configure tpm2-pkcs11 to build unit and integration tests ./bootstrap ./configure --enable-fapi --enable-unit --enable-integration # Build the project and run tests make -j $(nproc) make check # Run a single test, for example to debug a failure make check TESTS=test/integration/pkcs-get-mechanism.int ``` tpm2-pkcs11-1.7.0/docs/CONTRIBUTING.md0000664000175000017500000000560114114236775013621 00000000000000## Guidelines for submitting bugs All non security bugs can be filed on the Issues tracker: Security sensitive bugs should be emailed to a maintainer or to Intel via the guidelines here: ## Guidelines for submitting changes All changes should be introduced via GitHub pull requests. This allows anyone to comment and provide feedback in lieu of having a mailing list. For pull requests opened by non-maintainers, any maintainer may review and merge that pull request. For maintainers, they either must have their pull request reviewed by another maintainer if possible, or leave the PR open for at least 24 hours, we consider this the window for comments. * All tests must pass on Travis CI for the merge to occur. * All changes must not introduce superfluous whitespace changes or whitespace errors. * All changes should adhere to the coding standard documented under misc. ## Testing The Travis CI setup uses a docker container, thus this docker container can be used to run the CI testing before submitting. The rationale for using a container versus Docker directly is that: 1. Debugging build failures on Travis can be frustrating 2. Travis doesn't have support for many distributions and versions. With a container we can trivially add additional distro testing. ### How To Run Docker Locally You need to have the docker tools installed and this is not meant to be a full docker tutorial. Docker installation and usage information can be found here: - https://www.docker.com/ You can either test with CC set to gcc or clang. It is not recommended to specify versions as the container may change compiler versions and reconfigure the default at any time. If CC is empty, it defaults to gcc. It is recommended to test with both as they perform different tests, such as `scan-build` and `asan` based unit testing. **Note**: We assume that all commands are run from the tpm2-pkcs11 repo checkout directory. To test with a compiler do: ```sh # either gcc or clang export CC=clang docker run --env-file .ci/docker.env -v `pwd`:/workspace/tpm2-pkcs11 tpm2software/tpm2-tss /bin/bash -c /workspace/tpm2-pkcs11/.ci/coverity.run ``` If one wishes to test multiple compilers, it's advantageous to enter the docker container and set CC before invoking the `coverity.run` script. It won't resync, build and install the tpm2-tss, tpm2-abrmd and tpm2-tools dependencies on multiple invocations, thus saving time, for example: ```sh docker run -it --env-file .ci/docker.env -v `pwd`:/workspace/tpm2-pkcs11 tpm2software/tpm2-tss export CC=gcc /workspace/tpm2-pkcs11/.ci/coverity.run export CC=clang /workspace/tpm2-pkcs11/.ci/coverity.run ``` ### Guideline for merging changes Changes should be merged with the "rebase" option on github to avoid merge commits. This provides for a clear linear history. tpm2-pkcs11-1.7.0/docs/PKCS11_TOOL.md0000664000175000017500000001223514114236775013452 00000000000000# pkcs11 tool Configuration Below, will be examples and discussion on how to use tpm2-pkcs11 with pkcs11-tool. pkcs11-tool is part of OpenSC and can be installed on ubuntu by issuing the command: ```sh sudo apt-get install opensc ``` # Step 1 - Initializing a Store Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. We start by creating a tpm2-pkcs11 *store* and set up an empty token. ```bash tpm2_ptool.py init --path=~/tmp tpm2_ptool.py addtoken --pid=1 --sopin=mysopin --userpin=myuserpin --label=label --path ~/tmp ``` # Step 2 - Exporting the Store Since we didn't use the default store location by setting `--path` in the `tpm2-ptool` tool, we must export the store so the library can find it. We do this via: ```bash export TPM2_PKCS11_STORE=$HOME/tmp ``` **Note**: The tpm2-pkcs11.so library *WILL NOT EXPAND `~`* and thus you have to use something the shell will expand, like `$HOME`. # Examples of pkcs11-tool This will not be exhaustive, as we do not wish to duplicate opensc's documentation of their tool. But we will show case a few commands for users wishing to use this tool with tpm2-pkcs11 project. **For each example below, --module is the path to the pkcs11.so library and will be machine dependent. Note that default builds will provide the library under src/.libs** It makes life simpler to set up an alias, so let's do that, making sure to update `--module`: ```bash alias tpm2pkcs11-tool='pkcs11-tool --module /path/to/libtpm2_pkcs11.so ``` ## Changing USER PIN How to change the user PIN from *myuserpin* to *mynewpin* ```sh tpm2pkcs11-tool --label="label" --login --pin myuserpin --change-pin --new-pin mynewpin Using slot 0 with a present token (0x1) PIN successfully changed ``` You can see [Checking USER PIN](#checking-user-pin) for example of checking the PIN. ## Checking USER PIN How to check that the PIN is valid. The PIN value shown is based off of section [Changing USER PIN](#changing-user-pin) ```sh tpm2pkcs11-tool --label="label" --test --pin mynewpin ``` ## Initializing USER PIN How to reset or initialize the user PIN given the SO PIN. ```sh tpm2pkcs11-tool --label="label" --init-pin --so-pin mysopin --pin mynewpin ``` ## Generating Random Data The below example will generate 4 bytes of random data and assumes the PIN has been changed as in section [Checking USER PIN](#checking-user-pin) for example of checking the PIN. ```bash tpm2pkcs11-tool --label="label" --pin mynewpin --generate-random 4 | xxd Using slot 0 with a present token (0x1) 00000000: 2e50 bc47 .P.G ``` ## Listing Objects To list objects, we simply use the `--list-objects` option: ```bash tpm2pkcs11-tool --list-objects Private Key Object; EC label: p11-templ-key-label-ecc ID: 7031312d74656d706c2d6b65792d69642d65636300 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410452526c163439c3c5e5a943466a606439fbc7284eafd12221c4473ecb2fba3c586816d54f9ff108489877c5cfa857ba05cfba33dfe3e9b739107f672f787838d6 EC_PARAMS: 06082a8648ce3d030107 label: p11-templ-key-label-ecc ID: 7031312d74656d706c2d6b65792d69642d65636300 Usage: verify ``` **Note**: Your output will likely differ, but the tool should output a list of objects and some attributes. ## Creating Objects Outside of using [tpm2_ptool.py](PKCS11_TOOL.md) to add objects, p11tool supports creating objects through the PKCS#11 interface. ### Generating RSA Key pair This will generate an RSA key pair using pkcs11-tool: ```bash tpm2pkcs11-tool --label="label" --login --pin=myuserpin --keypairgen Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; RSA label: label ID: 3332 Usage: none Public Key Object; RSA 2048 bits label: label ID: 3333 Usage: none ``` ### Generating ECC Key pair This will generate an EC key pair using pkcs11-tool: ```bash tpm2pkcs11-tool --label="my-ecc-keypair" --login --pin=myuserpin --keypairgen --usage-sign --key-type EC:prime256v1 Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; EC label: my-ecc-keypair ID: 3436 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410436e7d2c84725234ec8d4b14bc31a50d382eb578cbc7315ae95561875314eb5a22a390bbfabef6269a35a18b1d95b2abc553071c419c3e866db0c3f13c0288ac6 EC_PARAMS: 06082a8648ce3d030107 label: my-ecc-keypair ID: 3437 Usage: verify ``` ## Destroying Objects Let's destroy the key we created in the *Generating ECC Key pair* segment, IDs 3436 and 3437 for both the private and public portions respectively. ### Private Key ```bash tpm2pkcs11-tool --login --pin=myuserpin --delete-object --type=privkey --id 3436 Using slot 0 with a present token (0x1) ``` ### Public Key ```bash tpm2pkcs11-tool --login --pin=myuserpin --delete-object --type=pubkey --id 3437 Using slot 0 with a present token (0x1) ``` **Note**: The tool doesn't have any output about successful delete, only when it fails. However, you can run the command in *Listing Objects* to verify that it is indeed deleted. tpm2-pkcs11-1.7.0/docs/INITIALIZING.md0000664000175000017500000002244214114236775013606 00000000000000# Initialization In order to use the tpm2-pkcs11 library, you need to initialize a store. The store contains metadata for the library on what tokens and subordinate objects to expose. PKCS#11 was designed to work with smart cards, and has a few concepts that are pivital to understanding how to use it. The first concept is a *slot*. The slot, would be the physical smart card reader slot you would insert the smart card into. Then, for each slot, you can have a smart card inserted or not. So you could have N reader slots with X smart cards inserted where X <= N. For each smart card in X, it provides a *token*. The token is the actual device the PKCS#11 calls operate on. The token itself can be in one of two states, *initialized* or *not initialized*. The tpm2-pkcs11 library will always provide at least one *not-initialized* token that can be used to initialize the token. You can initialize the token with an external client via the PKCS#11 interface call C_Initialize, like [pkcs11-tool](https://linux.die.net/man/1/pkcs11-tool) or you can use the provided [tpm2_ptool](https://github.com/tpm2-software/tpm2-pkcs11/tree/master/tools) to perform an initialization through a side-channel mechanism. Note, that most initializations can be done through C_Initialize() calls via tools like pkcs11-tool. However, more complex initializations are better handled through tpm2_ptool. The tpm2-pkcs11 library requires some metadata to operate correctly. It stores this metadata in what is known as a *store*. The store is automatically searched for in the following locations: 1. env variable `TPM2_PKCS11_STORE` This is optional, and if not set is skipped. However, if you want a store in a custom path, this is how you set it: - Example: `export TPM2_PKCS11_STORE='path/to/where/i/want/the/store'` 2. `/etc/tpm2_pkcs11` or whatever was configured at build time with `--with-storedir`. 3. Users `$HOME/.tpm2_pkcs11` directory. 4. Current Working Directory. If no existing store is found, it will: 1. If env variable `TPM2_PKCS11_STORE` is set, attempt to use that path directory or create it if it doesn't exist. On failure, it continues to number 2. 2. `/etc/tpm2_pkcs11` or whatever was configured at build time with --with-storedir. 3. if `$HOME` is set, attempts to use that path directory. If the directory doesn't exist it will be created. This almost always exceeds for most users, so this ends up as the default store most of the time. If it fails, continues on to number 4. 4. Use the Current Working Directory. To facilitate creating this store, a tool called [tpm2-ptool](../tools/tpm2_ptool.py) exists. The store itself defaults to `$HOME/.tpm2_pkcs11` unless specified via the environment variable `TPM2_PKCS11_STORE`. **IMPORTANT** * For all the illustrations below, we create a store under `~/tmp`. * We assume some working TPM connection. Under the hood the `tpm2_ptool` command calls `tpm2-tools` binaries. Thus configuring the `TCTI` is important. The easiest way to do this for testing is to use a TPM Simulator and tpm2-abrmd as documented in [dependencies](BUILDING.md#step-1---satisfy-dependencies). Their is no requirement to use the simulator and abrmd, this is all configuration dependent. ## Example Setup With tpm2_ptool I use the simulator and tpm2-abrmd to set all of this up, like so: ```sh tpm_server & tpm2-abrmd --tcti=mssim & ``` See the respective projects for details on how to get them running. Note that `tpm2-abrmd` uses dbus, and dbus configuration is required. ### Step 1 - Initializing a Store and Creating a Slot Initializing a store creates a primary object under the owner hierarchy. Each primary object is mapped to a slot, and multiple initializations can occur for generating more than one slot. **Example**: ```sh mkdir ~/tmp tpm2_ptool.py init --path=~/tmp action: Created id: 1 ``` The output of the command to *stdout* is important. It describes the id of the primary object that one can associate subsequent commands to. Again, to create N > 1 slots, just run this command N times. ### Transient Primary Keys By default, and suitable for most users, primary keys are persistent objects in TPM non-volatile memory. However, under certain situations, one may wish to use a transient primary key. The upside is that this consumes no non-volatile memory in the TPM. So this would be suitable in situations where all NV space is consumed. The downside is that initialization of the token will be slower and that it requires authentication to the owner hierarchy. `tpm2_ptool` commands that need to leverage a transient primary object have been augmented to take the `--hierarchy-auth` option to supply this. However, token initialization will need this in tools consuming the PKCS#11 library. This can be supplied via the environment variable `TPM2_PKCS11_OWNER_AUTH`. ### Step 2 - Creating a Token After creating a slot or slots, now one needs to create a token. This is accomplished with the `addtoken` command for `tpm2-ptool`, using the primary object ID from [Step 1](#step-1---initializing-a-store-and-creating-a-slot). A token is created and a unique name called a *label* is provided. The *label* is used in subsequent commands to reference the token. **Example**: ```sh tpm2_ptool.py addtoken --pid=1 --hierarchy-auth=mypobjpin --sopin=mysopin --userpin=myuserpin --label=label --path ~/tmp ``` To create N tokens under a given `--pid` or primary object id, just run the command N times. Thus it is possible to have *S* number of slots, with *T* number of tokens under each slot. ### Step 3 - Creating Objects Under a Token To create objects, like keys, under a token, the `tpm2-ptool` command-let `add` is invoked. You can direct which token to create the object under by using the `--label` option. **Example**: ```sh action: add private: CKA_ID: '62663630653733656336316363386535' ``` This command can be run N times to create N objects within a token. Tokens can have an arbitrary number of tokens. The tool outputs to *stdout* the objects CKA_ID hex encoded. **Note**: To view all the types of objects one can create run command: ```sh tpm2_ptool.py addkey --help ``` And review the enumerated options allowed for `--algorithm`. ## Example Setup With pkcs11-tool We start the simulator and tpm2-abrmd as shown [here](#Example Setup With tpm2_ptool). I add an alias in my `~/.bashrc` file so that way pkcs11-tool is setup and running the tpm2-pkcs11 library. The alias is: ```bash alias tpm2pkcs11-tool="pkcs11-tool --module $HOME/workspace/tpm2-pkcs11/src/.libs/libtpm2_pkcs11.so.0.0.0" ``` Alter that alias as needed, so that `--module` points to the location of the tpm2-pkc11 shared library. ### Initialization Details This method of initialization does not provide the granularity of control over the primary key that `tpm2_ptool` does. The initialization will currently look to see if a *store* is already configured with a primary key, and if so uses the first one. If it is not, it attempts to use the *SRK* at address 0x81000001 as defined by various TCG specifications: - https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf - https://trustedcomputinggroup.org/wp-content/uploads/Credential_Profile_EK_V2.0_R14_published.pdf - https://trustedcomputinggroup.org/wp-content/uploads/TCG_PC_Client_Platform_TPM_Profile_PTP_2.0_r1.03_v22.pdf - https://trustedcomputinggroup.org/wp-content/uploads/RegistryOfReservedTPM2HandlesAndLocalities_v1p1_pub.pdf ### Step 1 - Creating a Token Optional, list the current tokens to figure out what slot to use: ```bash tpm2pkcs11-tool --list-token-slots Available slots: Slot 0 (0x1): IBM token state: uninitialized ``` Initialize a token at Slot Index 0. ```bash tpm2pkcs11-tool --slot-index=0 --init-token --label="my first token" --so-pin="mysopin" Token successfully initialized ``` Optional, list the tokens again: ```bash tpm2pkcs11-tool --list-token-slots Available slots: Slot 0 (0x1): my first token IBM token label : my first token token manufacturer : IBM token model : SW TPM token flags : login required, rng, token initialized, PIN initialized hardware version : 1.46 firmware version : 22.17 serial num : 0000000000000000 pin min/max : 0/128 Slot 1 (0x2): IBM token state: uninitialized ``` ### Step 3 - Setting a User PIN One must set the user PIN for the token after initializing, like so: ```bash tpm2pkcs11-tool --slot-index=0 --init-pin --so-pin="mysopin" --login --pin="myuserpin" Using slot with index 0 (0x1) User PIN successfully initialized ``` ### Step 4 - Creating Objects Under a Token Optional, list objects: ```bash tpm2pkcs11-tool --slot-index=0 --list-objects Using slot 0 with a present token (0x1) ``` Create an RSA Key pair: ```bash tpm2pkcs11-tool --slot-index=0 --login --pin="myuserpin" --label="myrsakey" --keypairgen Using slot with index 0 (0x1) Key pair generated: Private Key Object; RSA label: myrsakey Usage: decrypt, sign Public Key Object; RSA 2048 bits label: myrsakey Usage: encrypt, verify ``` Optional, list objects again: ```bash tpm2pkcs11-tool --slot-index=0 --list-objects Using slot with index 0 (0x1) Public Key Object; RSA 2048 bits label: myrsakey Usage: encrypt, verify ``` Note: You will only see the public objects when you login. tpm2-pkcs11-1.7.0/docs/SSH_HOSTKEYS.md0000664000175000017500000000300614114236775013675 00000000000000# SSH host keys configuration This example will go through using a TPM 2.0 for the OpenSSH sshd host keys. As the SSH daemon supports using the SSH agent protocol we will use tpm2-pkcs11 with an ssh-agent. # Create a store and key The PIN is currently needed as ssh-agent doesn't seem to support an empty string PIN (just no PIN at all) ``` # mkdir /tmp/teststore-pkcs11 # tpm2_ptool init --path=/tmp/teststore-pkcs11 # tpm2_ptool addtoken --pid=1 --label=hostkey --sopin="mysopin" --userpin="myuserpin" --path=/tmp/teststore-pkcs11 # tpm2_ptool addkey --algorithm=rsa2048 --label=hostkey --userpin="myuserpin" --path=/tmp/teststore-pkcs11 ``` # Run a ssh agent The ssh agent should have a specific path for its socket, lets use /tmp/hostagent.sock for this example. ``` # export TPM2_PKCS11_STORE=/tmp/teststore-pkcs11 # ssh-agent -a /tmp/hostagent.sock ``` # Add the token to the agent ``` # SSH_AUTH_SOCK=/tmp/hostagent.sock ssh-add -s /usr/lib/x86_64-linux-gnu/libtpm2_pkcs11.so ``` # Get the public key in SSH format ``` # SSH_AUTH_SOCK=/tmp/hostagent.sock ssh-add -L ssh-rsa .... ``` Where `....` is the public key in ssh key format. Store the whole output from ssh-add -L in `/etc/ssh/ssh_hostkey_rsa.pub` as sshd requires the public key outside the agent. # Configure sshd Add the following to /etc/ssh/sshd_config ``` HostKey /etc/ssh/ssh_hostkey_rsa.pub HostHostKeyAgent /tmp/hostagent.sock ``` (Re)start sshd and run: ``` # ssh-keyscan localhost ``` You should now be able to see the same key as you saw with `ssh-add -L`. tpm2-pkcs11-1.7.0/docs/FUZZING.md0000664000175000017500000000437614114236775013056 00000000000000# Fuzzing Tests under [test/fuzz](./test/fuzz) use libfuzzer to perform fuzzing tests on crafted targets. They are enabled by the configure time option `--enable-fuzzing` ## LibFuzzer LibFuzzer is guided evolutionary fuzzing framework. Information on libfuzzer can be found here: - https://llvm.org/docs/LibFuzzer.html ## Running the Fuzz Tests ### Step 1 - Configure Them As stated before, they are enabled by the configure time option `--enable-fuzzing`. Howevever, often times you need to also add the following options: - `--disable-hardning`: Various issues with clang not liking static initializers on complex structs, ie `struct foo x = { 0 };` - `--disable-overflow`: Clang issues with linking the runtime when __builtin's are used for overflow checking on math. With clang version 9, I was able to avoid the need for those additional configure options, however, you'll always likely want `--disable-hardening` to avoid some features that may make debugging harder. ### Step 2 - Running The Fuzz Tests Running them is as simple as make check. ```sh make check ``` You should see the normal summary from expected from a make check output. ## Internals Internally, the tests are organized under the [test/fuzz](./test/fuzz) directory and have a few subdirs: - [test/fuzz/scripts](./test/fuzz/scripts): Support scripts, like the LOG_COMPILER used as the test runner. - [test/fuzz](./test/fuzz/corpus): Contains subdirs of corpus bodies used to help guide the fuzzer and make it more efficient. ### LOG_COMPILER LOG_COMPILERS are an automake trick of saying before running the executable that is the test, run this first. It allows one to also pass options. More can be found [here](https://www.gnu.org/software/automake/manual/html_node/Parallel-Test-Harness.html). The issue with that, however, is that the granularity is per-file extension. So in this case, we define a `.fuzz` extension that all executable tests will have, and the [script](test/fuzz/scripts/fuzz-runner.sh) will wrap each execution. We define the options controlling the run duration and jobs in the script. Using something like `AM_FUZZ_LOG_FLAGS` could also be used, but we would have to then reorder the command line more to ensure that libfuzzer options appear in front of the fuzz target executable.tpm2-pkcs11-1.7.0/docs/OPENVPN.md0000664000175000017500000002242414114236775013041 00000000000000# OpenVPN OpenVPN is an Open source VPN daemon and client. In this tutorial, we will show an example of setting it up and using it with tpm2-pkcs11. **Note: This configuration has not been evaluated for production use.** If you use TLS-1.1, it should just work, if you want TLS-1.2, you may need to fiddle more with package versions. This write up stemmed from https://github.com/tpm2-software/tpm2-pkcs11/issues/67, so if you would like more details, please look through the conversation on the issue. ## Requirements In this tutorial, we will be using Fedora-32 as the example. Other distros should be similar but will require distro specific examples. - OS: [Fedora 32](https://getfedora.org/en/workstation/download/) - TPM2 Bits: - This is known to work with the following versions, however other previous versions may work too. - tpm2-pkcs11, 1.4 - tpm2-tools: 4.2 - tpm2-abrmd: 2.3.3 - tpm2-tss: 3.0 - Others: - EasyRSA on the **server** machine. ```bash wget https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.5/EasyRSA-nix-3.0.5.tgz \ -O EasyRSA-nix-3.0.5.tgz tar -zxvf EasyRSA-nix-3.0.5.tgz cd EasyRSA-3.0.5 # Don't forget to add EasyRSA to your path export PATH="$PATH:$(realpath EasyRSA-3.0.5)" ``` - OpenVPN ```bash dnf install openvpn ``` The major issue is that pkcs11-helper library has a bug (P11 PKCS11 URI handling) and a missing feature (RSA_NO_PADDING support). However, if you use the Fedora packaged version with certain patches applied, and re-install, it should work. To do this, I first got the upstream pkcs11-helper and checked out version 1.22, which is the packaged version, and applied the following patches: ```bash # clone pkcs11-helper git clone https://github.com/OpenSC/pkcs11-helper.git # Checkout the same version that Fedora Packaged at the time of this tutorial # Note this could change, so check pkg-config --modversion libpkcs11-helper-1 git checkout pkcs11-helper-1.22 # Get the Patches that RPM built with. Note that this PR could change, and do to # rebase conflicts do not apply cleanly anymore. wget https://github.com/OpenSC/pkcs11-helper/pull/4.patch # Apply the patches git am 4.patch Applying: Stop _pkcs11h_util_hexToBinary() checking for trailing NUL Applying: Accept RFC7512-compliant PKCS#11 URIs as serialized token/certificate IDs Applying: Serialize to RFC7512-compliant PKCS#11 URIs # Get PSS support. git cherry-pick c192bb4 ``` **Note**: The above does not apply cleanly, but the conflict is on: `both modified: ChangeLog` So one can just ignore it. **Note**: There are other ways to do this, and your mileage may vary. After you have pkcs11-helper patched, you need to build and optionally install it: - https://github.com/OpenSC/pkcs11-helper/wiki/How-to-compile-pkcs11-helper If you don't install it, you can set `LD_LIBRARY_PATH` or `LD_PRELOAD` variables to the location of the parent directory containing the library or the library path itself respectively. ## Configuring The major headaches are configuring OpenVPN. I configured the client and server on the same machine; however, the steps will generally be the same if they are running on different machines. ### Step 1 - Server Setup ```bash #!/bin/bash mkdir ~/openvpn-server cd ~/openvpn-server firewall-cmd --add-service=openvpn --permanent firewall-cmd --reload # Create PKI and Initial CA ./easyrsa init-pki ./easyrsa build-ca # Generate Server Certs and Artifacts ./easyrsa build-server-full server ./easyrsa gen-dh cd .. # Configure Server cp /usr/share/doc/openvpn/sample/sample-config-files/server.conf . cp ./EasyRSA-3.0.5/pki/private/server.key . cp ./EasyRSA-3.0.5/pki/issued/server.crt . cp ./EasyRSA-3.0.5/pki/dh.pem dh2048.pem cp ./EasyRSA-3.0.5/pki/ca.crt . openvpn --genkey --secret ta.key ``` ### Step 2 - Client CSR Setup ```shell #!/bin/bash mkdir ~/openvpn-client cd ~/openvpn-client # Create certificate Signing Request Configuration cat > client.cnf << EOF [ req ] default_bits = 2048 distinguished_name = req_distinguished_name prompt = no [ req_distinguished_name ] C = US ST = Foo L = Bar O = Widget Co OU = Internet of Widgets Group CN = $(hostname) EOF # Create the TPM2 PKCS11 Key # Note: you may need to configure the TCTI for your environment, I used ibmtpm1563 server # and tpm2-abrmd. #export TPM2TOOLS_TCTI="device:/dev/tpmrm0" #export TPM2_PKCS11_TCTI="device:/dev/tpmrm0" # Set up the store location export TPM2_PKCS11_STORE=/etc/tpm2_pkcs11 # Set the log-level for debugging so we get more info export TPM2_PKCS11_LOG_LEVEL=2 rm ${TPM2_PKCS11_STORE} -fr || true mkdir -p ${TPM2_PKCS11_STORE} || true tpm2_clear tpm2_ptool init tpm2_ptool addtoken --pid=1 --sopin=sopin --userpin=userpin --label=openvpn tpm2_ptool addkey --algorithm=rsa2048 --label=openvpn --userpin=userpin # Set the token TCTI if needed. # tpm2_ptool config --key tcti --value "device:/dev/tpmrm0" --label=openvpn # Create the Certificate Signing Request TOKEN=$(p11tool --list-token-urls | grep "token=openvpn") export GNUTLS_PIN=userpin export GNUTLS_SO_PIN=sopin p11tool --login --list-all "${TOKEN}" --outfile p11tool.out PRIVATE_KEY=$(cat p11tool.out | grep private | awk '{ print $2 }') openssl req -new -engine pkcs11 -keyform engine \ -key "${PRIVATE_KEY};pin-value=userpin" \ -config client.cnf -out client.csr ``` ### Step 3 - Generate Client Cert in the Server Copy the generated client.csr to the server, and sign it. ```bash cd openvpn-server/EasyRSA-3.0.5 ./easyrsa import-req ./client.csr client ./easyrsa sign-req client client cat ./pki/issued/client.crt ``` ### Step 4 - Configure OpenVPN Client ```bash cd ~/openvpn-client # Get certificates from server. Whatever works scp, cp, etc. # Since I did it on the same machine, cp will work just fine. cp ~/openssl-server/client.crt . cp ~/openssl-server/ca.crt . cp ~/openssl-server/ta.key . # Configure Client REPLACE IP ADDRESS remote_ip="192.168.0.43" cp /usr/share/doc/openvpn/sample/sample-config-files/client.conf . sed -i "s/remote my-server-1 1194/remote $remote_ip 1194/g" client.conf ``` ### Step 5 - Import the certificate into the PKCS11 Store ```bash #!/bin/bash cd ~/openvpn-client TOKEN=$(p11tool --list-token-urls | grep "token=openvpn") export GNUTLS_PIN=userpin export GNUTLS_SO_PIN=sopin KEY_ID=$(p11tool --login --list-all "${TOKEN}" | grep ID: | uniq | awk '{ print $2 }' | sed 's/://g') tpm2_ptool addcert --label=openvpn --key-id=${KEY_ID} ./client.crt SERIALIZED_ID=$(openvpn --show-pkcs11-ids /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 | grep "Serialized id:" | awk '{ print $3 }') cat << EOF # Comment the cert and key lines and add the following to the config: pkcs11-providers /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 pkcs11-id '${SERIALIZED_ID}' EOF ``` The following diff illustrates the changes needed to the client openvpn config file. One needs to comment out the config file lines for cert and key. Your specific values for pkcs11-id, pkcs11-providers and remote may vary on distro and local configurations. ```diff diff /usr/share/doc/openvpn/sample/sample-config-files/client.conf client.conf 42c42 < remote my-server-1 1194 --- > remote 192.168.0.43 1194 89,90c89,93 < cert client.crt < key client.key --- > #cert client.crt > #key client.key > # Comment the cert and key lines and add the following to the config: > pkcs11-providers /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 > pkcs11-id 'pkcs11:model=Intel;token=openvpn;manufacturer=Intel;serial=0000000000000000;id=e3dac3f1de50d109' ``` ## Step 6 - Start the Server On the **server machine**, do: ```bash cd ~/openvpn-server # note you need root openvpn --config server.conf --verb 11 ``` ## Step 7 - Start the Client: Note that since I did everything as local client, one might want to remove the `--no-bind` option. On the **client** machine do: ```bash cd ~/openvpn-client openvpn --config client.conf --verb 11 --nobind ``` You should see on the server, similar output on success: ``` Fri Aug 21 09:45:43 2020 Initialization Sequence Completed Fri Aug 21 09:45:53 2020 127.0.0.1:60283 TLS: Initial packet from [AF_INET]127.0.0.1:60283, sid=c0481798 843a43da Fri Aug 21 09:45:56 2020 127.0.0.1:60283 VERIFY OK: depth=1, CN=Easy-RSA CA Fri Aug 21 09:45:56 2020 127.0.0.1:60283 VERIFY OK: depth=0, C=US, ST=Oregon, L=Hillsboro, O=Intel Corp, OU=Internet of Things Group, CN=openvpn.mshome.net Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_VER=2.4.9 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_PLAT=linux Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_PROTO=2 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_NCP=2 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZ4=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZ4v2=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZO=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_COMP_STUB=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_COMP_STUBv2=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_TCPNL=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA Fri Aug 21 09:45:56 2020 127.0.0.1:60283 [openvpn.mshome.net] Peer Connection Initiated with [AF_INET]127.0.0.1:60283 ``` tpm2-pkcs11-1.7.0/docs/tpm2-pkcs11_object_auth_model.md0000664000175000017500000006431014114236775017425 00000000000000# tpm2-pkcs11 object & authorization model ## Introduction The objective of this document is to present an architectural overview of the tpm2-pkcs11 object and authorization model **TO BE IMPLEMENTED** in the design. The topics covered here in are: 1. [PKCS11 Objects](#pkcs11-objects) 2. [PKCS11 Roles](#pkcs11-roles) 3. [TPM2 Objects](#tpm2-objects) 4. [tpm2-pkcs11 Objects](#tpm2-pkcs11-objects) 5. [NV Object Diagram](#nv-object-diagram) 6. [NV Policy Diagram](#nv-policy-diagram) 7. [Transient Object Diagram](#transient-object-diagram) 8. [Transient Policy Diagram](#transient-policy-diagram) 9. [Sample tpm2-tools implementation](#sample-tpm2-tools-implementation) 10. [Important note on authorization](#important-note-on-authorization) ## PKCS11 System Design The PKCS11 system design components are illustrated in the following diagram.



* READER is a medium through which information is exchanged with TOKEN. * SLOT is integral with the READER for housing a TOKEN. * The TOKEN ultimately protects the PKCS11 objects defined in the specification. It provides an authorization model to distinguish the SO, USER, system or adversary role based actions. * Following is a broad classification of PKCS11 objects: 1. Hardware feature objects - Clock, Monotonic-Counters, USER-Interface. 2. Storage objects, Data objects - USER defined data with choice of attributes. 3. Certificate objects - X509, WTLS public key certificates and attributes. 4. Key type objects - Public key object, Private key object, Secret key object. 5. Mechanism objects - various mechanisms for operating on the token objects. 6. Domain objects - Extended algorithm parameter definition. 7. Profile objects - Info on subsets of functionalities grouped as profiles. ## PKCS11 Roles The PKCS11 design describes two specific roles: The security-officer or **SO** and the **USER**. Following are some relevant design considerations when comparing the roles: * The SO-PIN and USER-PIN info differentiate the role based accesses for the security officer and the user. Hence, PIN information should remain a secret to the specific role. * Either SO-PIN or USER-PIN can be used to modify USER-PIN. * SO-PIN alone must be used to modify SO-PIN. * The SO-PIN cannot be used to access mechanisms or modify objects requiring USER-PIN. * The SO-PIN cannot be used to restore or read a non default USER-PIN. This is intentional in the design to prevent the security officer from having explicit access to USER objects and also to bring traceability to security officer's action of changing USER-PIN. * PINs should not be easy to brute force. In the design **TO BE IMPLEMENTED** there are two protections in place to deter brute forcing of the PIN: 1. Use of PBKDF2 to enhance a weak PIN. The SALT used in this operation adds to the list of system or user secrets. 2. The SO-PIN and USER-PIN reference TPM2 objects are dictionary lockout protected, thus rate limiting the attack even further.
An attack would need to: Access SALT--> Guess PIN--> Run PBKDF2--> Attempt auth on a dictionary attack protected TPM2 object. * PIN changes should revoke accesses to mechanisms and objects created/ defined with the older PIN. NOTE: This is currently only possible with NV Indexes being used as SO-PIN and USER-PIN auth reference objects.
**Example** A token is initialized with default SO-PIN and default USER-PIN. The user changes the USER-PIN to a non default value that the security officer cannot know and thus cannot read/ restore. If the user forgets the USER-PIN, the SO-PIN can be used to reset USER-PIN to a default value. However, if the security officer uses the SO-PIN to reset the USER-PIN without user's knowledge or request, the user's original or non-default USER-PIN cannot be restored or used; thus revealing the security officer's action of changing the USER-PIN. ## TPM2 Objects The TPM2 standards defines various types of objects - permanent, transient, persistent, non-volatile or NV, etc. There are TPM entities that have a parent: child relationship and hence embody the intended hierarchical relationship defined by PKCS11. The hierarchical arrangement of objects is manifested by the protection of encryption keys derived from parent seed values. These encryption keys protect the sensitive portion of the child objects. The hierarchical arrangement can also be manifested simply as an access control to define or access non volatile objects. In general, parent authorization is required to be able to authorize creation or defining of the child object and or operate on them.
Generally, there are two types of actions that can be performed on TPM2 objects. (1) Administrative operations like changing the authorization etc. and (2) USER operations like unseal, encryption etc. These two roles can be restricted to two separate authorizations at object creation time with attributes - userwithauth/ adminwithpolicy.
Generally, there are two authorization methods: (1) Authorization password that can be sent as a plain text or an HMAC and (2) Policy based authorization that validate certain TPM metrics or parameters.
It is also possible to associate the authorization value of one object as the authorization of another object through an authorization policy. One caveat of changing authorization value of a derived objects is that it does not invalidate the old object's auth; instead new object is created that protects the same sensitive information. Also, while auth values can be altered the authorization policy cannot be changed. ### The TPM2 hierarchy authorization This is the parent node of all the possible child objects to be created. At the root of the node is a seed value called storage primary seed used to derive keys to protect the sensitive portion of primary objects. There are 4 hierarchies: Platform, Owner, Endorsement and NULL hierarchy. Only Platform and Owner hierarchies can authorize defining and managing of NV objects. Hierarchy authorization must be satisfied to create/ access primary objects and define/ access NV objects. ### The TPM2 primary object authorization Except for NULL hierarchy, the storage primary seeds remain persistent across TPM2 resets. Thus the primary objects under all other hierarchies can be recreated. Once the primary object is created it can be made persistent. A persistent and password-less primary object does not require any further authorization to use even after TPM2 reset. This is ideal since it addresses the need to have a password-less parent in a scenario where multiple child objects ought to be created without requiring the TPM2 hierarchy authorization. NOTE: (1) While NULL hierarchy does not need authorization, all objects created under it are lost after TPM2 reset since the NULL hierarchy seed is valid only until TPM2 reset. (2) Primary objects can also be defined with with a password which will need to be a well known value for the system.
In the design this object type is used simply as a necessary parent object to be able create the derived objects which define most of the design. ### The TPM2 derived object Primary objects are also derived objects created using TPM2_CreatePrimary. However this paragraph describes the objects protected with keys derived from the seed values of the primary objects. Such an object is created with the invocation of the TPM2_Create command. Every invocation results in creating a unique object. The uniqueness is a result of TPM generated data in the sensitive portion of the object. This object can be saved off the TPM or made persistent into the TPM NV memory to be reusable between boots.
In the design this object type is used to define the SO-PIN/ USER-PIN auth reference objects (transient object auth model), USER (keys) objects and the Wrapping-Key-Sealing object. ### The NV Index/ object There are two types of TPM NV objects - those that remain persistent after creating/ importing the objects under a TPM hierarchy OR those defined as NV indexes to hold user defined data. NV index of size 0 is a valid definition. An NV index can have an authorization password and or policy for administrative and or user operations. Unlike the derived objects, the NV index object authorization is not used in the encryption of sensitive data. The NV index object authorization simply protects read and write access to the object. Thus no new NV indexes need to be defined when changing the authorization.
In the design this object type is used to define the SO-PIN/ USER-PIN auth reference objects. ## tpm2-pkcs11 objects This section gives a general overview of the object and authorization model design with TPM2 objects. The SO and USER role separation is realized in the tpm2-pkcs11 design by two unique TPM2 objects, either transient objects or NV-indexes. The authorization values chosen for these objects are further utilized in creating specialized authorization policies that render the special properties of the SO-PIN object, USER-PIN object, Wrapping-Key-Sealing object and the USER(keys) objects. 1. SO-PIN authorization object: The auth value of this object authorizes auth value change of SO-PIN and USER-PIN objects. This is either an NV index or a transient derived object with the primary object as the parent. 2. USER-PIN authorization object: The auth value of this object is used as an auth value of USER-PIN, Wrapping-Key-Sealing, and USER(keys) objects. The USER-PIN object auth value OR SO-PIN object auth value can authorize change of USER-PIN object auth value. This is either an NV index or a transient derived object with the primary object as the parent. 3. Wrapping-Key sealing object: The authorization value of this object is referenced off the USER-PIN object with a policy. The object itself doesn't have an auth value of it's own and so the unsealing user operation would need the auth satisfied through a policy requiring USER PIN. It seals a wrapping key used to encrypt the auth value of existing TPM2 objects to be assumed into the tpm2-pkcs11 model. This is a transient derived object with the primary object as the parent. 4. USER(keys) object: The authorization model is same as the Wrapping-Key sealing object and thus requires the USER-PIN object auth value via a policy. These are user created keys and objects that are used in user operations like encryption, decryption, signing, verification, etc. These are transient derived objects with the primary object as the parent.
NOTE: * All derived objects with the primary object as parent are saved off the TPM. This involves saving two types of information about the derived objects to be able to load the objects back again to the TPM. Sensitive information which can be private portion of an asymmetric key or the symmetric encryption key. This information for convenience is called private. Sensitive information is encrypted with a key derived from the parent seed. The non-sensitive information like object attributes, auth policy, public portion of asymmetric key etc. which for convenience is called public. * If the auth value of the transient derived object is changed it encrypts the sensitive/ private portion with a new key that is derived from the parent seed and that does not invalidate the old one. * Tampering of the public and private files can result in a denial of service and so must be protected with appropriate methods like MAC, file/folder/disk encryption etc. * USER(keys) objects that are defined without using the tpm2-pkcs11 library can also be assumed into the tpm2-pkcs11 objects. These in the design are called **Existing TPM2 objects**. These are essentially derived objects with the primary object as the parent. The auth value of these objects are protected by encrypting/ wrapping with a wrapping-key that is sealed as the Wrapping-Key sealing object. It should also be noted that while the auth value of such objects is wrapped, the tpm2-pkcs11 design does not guarantee the protection of an already compromised key. The attacker can load the compromised key under the primary object and authorize with the compromised auth value. Also noteworthy is the fact that while auth values could be changed authorization policy cannot be changed. ## NV object diagram Overview of the use of the TPM2 NV indexes in the implementation.


The illustration above is the key/object diagram showing the relationship of the tpm2-pkcs11 objects. The SO-PIN and USER-PIN objects are NV index objects while the Wrapping-Key sealing object and the USER(keys) objects are transient derived objects with the primary object as the parent. ## NV policy diagram Overview of policies used to satisfy standards requirements with NV objects used as SO/ USER-PIN reference objects.


The illustration above is the policy diagram showing the relationship of the authorization model used by the tpm2-pkcs11 objects where the SO-PIN and the USER-PIN objects are NV indexes and the Wrapping-Key-Sealing object and the USER (keys) objects are transient derived objects with the primary object as the parent. ## Transient object diagram Overview of the use of TPM2 transient objects in the implementation.


The illustration above is the key/object diagram showing the relationship of the tpm2-pkcs11 objects. The SO-PIN and USER-PIN objects along with the Wrapping-Key-Sealing object and the USER(keys) objects are transient derived objects with the primary object as the parent. ## Transient policy diagram Overview of the policies used to satisfy standards requirements with TPM2 transient object used as SO/ USER-PIN reference objects.


The illustration above is the policy diagram showing the relationship of the authorization model used by the tpm2-pkcs11 objects where the SO-PIN and the USER-PIN objects along with the Wrapping-Key sealing object and the USER (keys) objects are transient derived objects with the primary object as the parent. ## Important note on authorization While both authorization models discussed resolve the issue of isolation of SO and USER roles there is a serious problem with the authorization model where the SO-PIN and USER-PIN reference objects are transient derived objects with the primary object as the parent. In that, when the authorization of the objects is changed it creates a new sensitive portion of the object while the old sensitive information cannot be invalidated. To that effect, anyone who has a cached copy of an older object whose PIN may have been compromised can still access the USER objects. This also violates the design consideration set out under "PKCS11 Roles". A malicious SO could create a second USER-PIN object for their own use, which the real USER would never know about and thus SO-PIN can be used to access USER objects.
The issue can be resolved by using NV indices as SO-PIN and USER-PIN reference objects instead. Although, we still need the sealing object to seal the wrapping secret for bringing the existing TPM objects into the PKCS11 fold as well as the USER(keys) objects. However their auth will be tied to USER-PIN NV index and so despite the fact that the sealing and USER(keys) objects are transient derived objects with the primary object as the parent, a new sensitive portion is not created when the auth ought to change since these object simply reference the authorization of the USER-PIN NV object.
The authorization model where SO-PIN and USER-PIN reference objects are transient objects should only be used as a fall-back in situations like if the NV indexes are unavailable or if the choice of hierarchy is the NULL hierarchy or if the owner hierarchy is disabled, etc. ## Sample tpm2-tools implementation Demonstration of an implementation with tpm2-tools. The tpm2-tools utilities and the arguments and command line options referenced are from the upcoming tpm2-tools 4.0 release. * ***Setting up the reader and slot*** ``` tpm2_changeauth -c o ownerauth tpm2_createprimary -C o -c prim.ctx -P ownerauth tpm2_evictcontrol -C o -c prim.ctx -P ownerauth 0x81010001 tpm2_flushcontext -t rm prim.ctx ``` ### TRANSIENT * ***Creating the SO-PIN-reference-object - Its a keyedhash that seals some random data that will not be used. The choice of creating the SO object as a keyedhash object is simply because it takes minimum object attributes required for this design.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -a "fixedtpm|fixedparent|userwithauth" -p sopin -i- ``` * ***Policy to enable USER to change USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx \ -L policy.pass_AND_ccobjch TPM2_CC_ObjectChangeAuth tpm2_flushcontext session.ctx rm session.ctx ``` * ***Policy to enable SO to change USER PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c so_pin_ref_obj.ctx sopin tpm2_policycommandcode -S session.ctx \ -L policy.secret.so_AND_ccobjch TPM2_CC_ObjectChangeAuth tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm so_pin_ref_obj.ctx ``` * ***Compounded policy: USER (OR) SO can change the USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER-PIN-reference-object - The auth of the USER object can be changed by either SO or USER. Its a keyedhash that seals wrapping secret. The wrapping secret is used as a software wrapping key or the auth to a wrapping object that then encrypts the auth of the existing TPM objects to be assumed into the PKCS11 token. NOTE: NEVER UNSEAL THE WRAPPING SECRET TO STDOUT.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -a "fixedtpm|fixedparent|adminwithpolicy|userwithauth" \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch -p userpin -i- ``` * ***Policy to use USER ref PIN as the auth for creating user objects*** ``` tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c user_pin_ref_obj.ctx \ -L policy.secret.user userpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx ``` * ***Create a sample user object*** ``` tpm2_create -C 0x81010001 -u user_object.pub -r user_object.priv \ -a "fixedtpm|fixedparent|sensitivedataorigin|adminwithpolicy|sign|decrypt" \ -L policy.secret.user -G aes ``` * ***Load the sample user object and use it in an operation*** ``` #load the user object tpm2_load -C 0x81010001 -c user_object.ctx -u user_object.pub \ -r user_object.priv #load the USER PIN ref object tpm2_load -C 0x81010001 -c user_pin_ref_obj.ctx -u user_pin_ref_obj.pub \ -r user_pin_ref_obj.priv #satisfy the policy of referred auth of the USER PIN ref object tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c user_pin_ref_obj.ctx userpin #perform an operation with the user object echo "plaintext" > test.txt tpm2_encryptdecrypt -c user_object.ctx test.txt -o test.enc \ -p session:session.ctx #close auth session and clean up tpm2_flushcontext session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx user_object.ctx session.ctx ``` * ***Change USER PIN with USER PIN*** ``` tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_ObjectChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_changeauth -C 0x81010001 -c user_pin_ref_obj.ctx \ -p session:session.ctx+userpin -r new_user_pin_ref_obj.priv newuserpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx ``` * ***Change USER PIN with SO PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c so_pin_ref_obj.ctx sopin tpm2_policycommandcode -S session.ctx TPM2_CC_ObjectChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_changeauth -C 0x81010001 -c user_pin_ref_obj.ctx -p session:session.ctx \ -r so_new_user_pin_ref_obj.priv sonewuserpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm so_pin_ref_obj.ctx rm user_pin_ref_obj.ctx ``` * ***Change SO PIN with SO PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_changeauth -C 0x81010001 -c so_pin_ref_obj.ctx -p sopin \ -r new_so_pin_ref_obj.priv newsopin tpm2_flushcontext -t rm so_pin_ref_obj.ctx ``` ### NV * ***Policy for SO-PIN ref NV object*** ``` tpm2_startauthsession -S session.ctx tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx \ -L policy.pass_AND_ccnvobjch TPM2_CC_NV_ChangeAuth tpm2_flushcontext session.ctx ``` * ***Create SO-PIN ref nv object*** ``` SO_NV_INDEX=0x1500015 tpm2_nvdefine -C o -P ownerauth -p defaultsonvpin $SO_NV_INDEX \ -a "authread|authwrite" -s 0 -L policy.pass_AND_ccnvobjch ``` * ***Policy for USER PIN change with USER PIN*** ``` Same as Policy for SO-PIN ref NV object --> policy.pass_AND_ccnvobjch ``` * ***Policy for USER PIN change with SO PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c $SO_NV_INDEX defaultsonvpin tpm2_policycommandcode -S session.ctx \ -L policy.secret.so.nv_AND_ccnvobjch TPM2_CC_NV_ChangeAuth tpm2_flushcontext session.ctx rm session.ctx ``` * ***Compounded policy: USER (OR) SO can change the USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch \ -L policy.pass_AND_ccnvobjch__OR__secret.so.nv_AND_ccnvobjch tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER PIN NV ref object*** ``` USER_NV_INDEX=0x1500016 tpm2_nvdefine -C o -P ownerauth -p usernvpin $USER_NV_INDEX \ -a "authread|authwrite" -s 0 \ -L policy.pass_AND_ccnvobjch__OR__secret.so.nv_AND_ccnvobjch ``` * ***Policy to use USER NV ref PIN as the auth for creating user objects*** ``` tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER PIN NV ref sealing object - Its a keyedhash that seals the wrapping secret. The auth of the USER object can be changed by either SO or USER. The wrapping secret is used as a software wrapping key or the auth to a wrapping object to encrypt the auth of the existing TPM objects to be assumed into the PKCS11 token. NEVER UNSEAL THE WRAPPING SECRET TO STDOUT.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u user_seal_obj_user_nv_auth.pub \ -r user_seal_obj_user_nv_auth.priv -a "fixedtpm|fixedparent|adminwithpolicy" \ -L policy.secret.user.nv -i- ``` * ***Unseal the wrapping secret from USER sealing object with NV PIN ref DO NOT UNSEAL TO STDOUT*** ``` tpm2_load -C 0x81010001 -u user_seal_obj_user_nv_auth.pub \ -r user_seal_obj_user_nv_auth.priv -c user_seal_obj_user_nv_auth.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin tpm2_unseal -c user_seal_obj_user_nv_auth.ctx -p session:session.ctx tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_seal_obj_user_nv_auth.ctx ``` * ***Create a sample user object with USER NV ref auth*** ``` tpm2_create -C 0x81010001 -u user_object_user_nv_auth.pub \ -r user_object_user_nv_auth.priv \ -a "fixedtpm|fixedparent|sensitivedataorigin|adminwithpolicy|sign|decrypt" \ -L policy.secret.user.nv -G aes ``` * ***Load the sample user object and use it in an operation*** ``` #load the user object tpm2_load -C 0x81010001 -c user_object_user_nv_auth.ctx \ -u user_object_user_nv_auth.pub -r user_object_user_nv_auth.priv #satisfy the policy of referred auth of the USER PIN ref object tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin #perform an operation with the user object echo "plaintext" > test.txt tpm2_encryptdecrypt -c user_object_user_nv_auth.ctx test.txt -o test.enc \ -p session:session.ctx #close auth session and clean up tpm2_flushcontext session.ctx tpm2_flushcontext -t rm user_object_user_nv_auth.ctx session.ctx ``` * ***Change USER PIN with SO PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $SO_NV_INDEX defaultsonvpin tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch tpm2_changeauth -c $USER_NV_INDEX -p session:session.ctx usernvpin_so tpm2_flushcontext session.ctx rm session.ctx ``` * ***USER-PIN change with USER PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch tpm2_changeauth -c $USER_NV_INDEX \ -p session:session.ctx+usernvpin_so usernv_pin_user tpm2_flushcontext session.ctx rm session.ctx ``` * ***SO-PIN change with SO PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_changeauth -c $SO_NV_INDEX -p session:session.ctx+defaultsonvpin sonvpin tpm2_flushcontext session.ctx rm session.ctx ``` tpm2-pkcs11-1.7.0/docs/INSTALL.md0000664000175000017500000000236314114236775013022 00000000000000# Installing Instructions on building installing from source. # Dependencies Step one is to satisfy the following dependencies: ## C Dependencies - LibYAML - libtpm2-esapi - libtpm2-mu - cmocka (optional for testing) ## Python Dependencies - cryptography - pyyaml - pyasn1 - pyasn1_modules ## Executable Dependencies - python2 or python3 - tpm2-tools >= 4.0 - bash (optional for testing) - pkcs11-tool (optional for testing) - openssl (optional for testing) - libp11 (optional for testing) - java (optional for testing) - junit (optional for testing) - hamcrest (optional for testing) Details on building can be found in [BUILDING.md](BUILDING.md). After satisfying the dependencies one invokes the regular autotools build process: ```bash ./bootstrap ./configure make make install ``` # Installing tpm2_ptool.py To install tpm2_ptool.py, one can use various python installation methodologies as a setup.py file is provided. Below are the common ways to install, but are not exhaustive. First cd to the tools folder: ```bash cd tools ``` Then perform one of: 1. ```bash # pip allows for easy user installs via option --user and thus doesn't require root pip install . ``` 2. ```bash easy_install setup.py ``` tpm2-pkcs11-1.7.0/docs/DB_UPGRADE.md0000664000175000017500000000545414114236775013354 00000000000000# DB Upgrade The tools and libraries for tpm2-pkcs11 are designed in a way where they can automatically detect and upgrade DBs (databases). This document describes the internals of this functionality and what to do when things go wrong. ## Design Summary The DB contains the table "schema", which contains a column "schema_version" that contains the current schema version of that DB. The C library itself is statically set at build time with the maximum DB version that it knows how to read. The C library and Python tools are both equipped to upgrade the DB version from schema_version 1 to the current max version they know of. When the DB is accessed, a cooperative file lock is taken to prevent races on DB schema_version checks and upgrading the DB, thus only one process accessing the `$TPM2_PKCS11_STORE` will perform the upgrade if needed. This lock is held during the schema_version check and upgrade period only, after this the normal sqlite3 read/write lock semantics are in effect. During the upgrade period, a backup copy of the DB is created in `$TPM2_PKCS11_STORE` with the ".bak" suffix, and this DB is used for the upgrade process leaving the original DB intact. If the upgrade runs correctly on the ".bak" suffix DB. The old version of the DB is renamed with the ".old" suffix, and the ".bak" file is renamed to the original DB name. As a final step, the ".old" DB is removed. Leaving you with a single, updated DB. If a DB version mismatch is detected between the library's DB version and the DB schema_version, one of two things can happen: 1. The tool or library is built for an older schema_version than the current `$TPM2_PKCS11_STORE` schema_version, the tool or library will cause an error. 2. The tool or library is built for a newer schema_version than the current `$TPM2_PKCS11_STORE` schema_version, the tool or library will cause a DB upgrade to occur. To rectify the first case, simply upgrade your tools to a version >= to the DB schema_version of the `$TPM2_PKCS11_STORE`. To rectify the second case, nothing should be required of the user, unless an unforeseen error occurs. ## Error Recovery on DB Upgrade The biggest thing to remember if you encounter an error, is that either the original DB will exist in the in the `$TPM2_PKCS11_STORE` directory, unmodified, or as a file with an extension of ".old" if something occurs during renaming. That is your original, unmodified DB. The original DB, slightly modified will exist, allowing you to manually correct it, or roll back to the original DB via a simple mv command of the ".old" suffixed file to the ".sqlite3" suffixed file. ```bash mv $TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3.old $TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3 ``` If you you roll back the DB, it would be best to also roll back the tpm2-pkcs11 version to the last version successfully used. tpm2-pkcs11-1.7.0/docs/EAP-TLS.md0000664000175000017500000002430414114236775012760 00000000000000# EAP-TLS Configuration The following instructions assist in connecting a Wi-Fi enabled device to a WPA2 Enterprise network using the EAP-TLS protocol, where the authentication credentials is secured using a TPM 2.0 generated key, and accessed using the PKCS#11 standard. WPA-Enterprise, also referred to as WPA-802.1X mode, is designed for enterprise networks and requires a RADIUS authentication server. The authentication of clients relies on a Extensible Authentication Protocol (EAP) that includes many types of authentication schemes. The one used in this setup is EAP Transport Layer Security (EAP-TLS), defined in RFC 5216. ## RADIUS Server Installation The RADIUS server implementation used in the example is FreeRADIUS from the FreeRADIUS Project, an open source implementation of RADIUS, an Internet Engineering Task Force (IETF) protocol for Authorization, Authentication, and Accounting (AAA). ### Installation on Fedora ```sh dnf install freeradius ``` Then enable the firewall rule for the RADIUS server: ```sh firewall-cmd --add-service=radius --permanent firewall-cmd --reload ``` ### Installation on Ubuntu ```sh cat >> /etc/apt/sources.list <> /etc/raddb/clients.conf <> /etc/freeradius/clients.conf < ## Configure Supplicant Access This step adds a Supplicant user to the RADIUS server. Add the following section to the `authorize` file describing a testing user: ### Configure Supplicant Access in Fedora ```sh cat >> /etc/raddb/mods-config/files/authorize <> /etc/freeradius/mods-config/files/authorize < wpa_supplicant.conf < NAK wlp1s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13 wlp1s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 13 (TLS) selected wlp1s0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=FR/ST=Radius/L=Somewhere/O=Example Inc./emailAddress=admin@example.org/CN=Example Certificate Authority' hash=4953d5815718f3e6c082969bd950d84c1b8dbba87cb45c4b15335387b34abdb8 wlp1s0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=FR/ST=Radius/O=Example Inc./CN=Example Server Certificate/emailAddress=admin@example.org' hash=677cee54ddad924c818909397a5b3d1a8ff64d45ab8796648d47aa5fdc2d3f8f wlp1s0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully wlp1s0: WPA: Key negotiation completed with 58:6d:8f:9d:2f:9e [PTK=CCMP GTK=TKIP] wlp1s0: CTRL-EVENT-CONNECTED - Connection to 58:6d:8f:9d:2f:9e completed [id=0 id_str=] ``` ### Network Manager Configuration Specify the PKCS11 Store location that `wpa_supplicant` should use: ```sh echo "TPM2_PKCS11_STORE=/etc/tpm2_pkcs11" >> /etc/sysconfig/wpa_supplicant ``` Restart the `wpa_supplicant.service` daemon with the new configuration: ```sh systemctl restart wpa_supplicant.service ``` Add the following Network Manager connection configuration: ```sh nmcli connection add type wifi ifname wlp1s0 con-name 'SSID' \ 802-11-wireless.ssid SSID \ 802-11-wireless-security.key-mgmt wpa-eap \ 802-1x.eap tls \ 802-1x.identity testing \ 802-1x.ca-cert /etc/pki/SSID/ca.pem \ 802-1x.client-cert /etc/pki/SSID/client.crt \ 802-1x.private-key 'pkcs11:model=Intel;manufacturer=Intel;serial=0000000000000000;token=label;id=%32%62%37%30%65%62%36%32%66%33%32%62%31%63%65%37;object=0;type=private;pin-value=userpin' \ 802-1x.private-key-password-flags not-required ``` For system that uses SELinux, like Fedora, we need to allow Network Manager to access to the TPM and the TPM Resource Manager. The `etc_t` write access is also provide to allow interaction with the PKCS#11 database in `/etc/tpm2_pkcs11`. ```sh cat > nm-selinux.te < 2 5 1 2 †̉®$@IDATx́˜$UƠ†É9縻äDp—$I’ ‚ˆd ˆ(₫ A1 A2‹I*¢ (+(’U¢Ä%.9çèÿ½³uvïƠ5ƯÓ©fú;ÏóÎuï¹_¥{«º{&›̀f¬€°VÀ X+`¬€è“gư Sx†ø„˜&Ës`¬€°VÀ X+`zIw4ØkÅîâÑ^x'Ç «Ôé́Ø}Y+`¬€°VÀ X*pµüÚ°¢¾ z·ḅ¶Fâ7ƒ~wzVÀ X+`¬€°-P€7!Ó¶ 7Q @,@₫WPæ,+`¬€°VÀ X+Đ« Ä<¹WÇ߶qOѶ–Ư°°VÀ X+`¬€°V §ÀT¹tôª/UĂq+`¬€°VÀ X¡ª€? ÔÁ=ë7 Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ĐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X6)° Ú!|Mo“ÀnÖ X+`Z¯ßüÏÓú^Ü¢°V z '—¸₫}#qm,ï–,/­³NV–¿f’̃B•óÏ^ÿ)V©}U ¶{]̀œDi/©|´˜>©·‹âO‹¨÷”â_aă¡láÈPxL–w€ÂS²ø ĂæQäÁv›E¦C+`¬ÀW ®£i8ćܽá•ư o÷¼rÏVÀ XÎ)?9!=§ñ4æ?§‚tâN½GE,$Tü\1¥ø¸`Qók±¼‹Å ÊØFœ•D?c”¾Ỳ$¶»ˆ‡Å÷Ä^âÁbáDÑ̃YâYñ'QôFÂVä³b#±­¸H#f— ›°VÀ X¶(®ö"̃–ܨ°V b /¸îí—øµf–wK–—Ö‰77$ơÓhQ9o èăM‹‹%³¼;²đ/ Ẳ₫"ÿhă1x5K¯¢0ŒEÄă"$¼aúû©"äñÛWf»M³8ol–6+`¬@¯(Àu0O¯Œ½ăăôKî­€¨¨ß–_é‰₫Üd‚~aRé5ÅwM̉¼ƠXNpƯ!Ë¿Q!78l§ñÁd?VøM1J,$X„- mđFb«,“…Ï¢‚·"ˆÛDo0 o¼©y7ˤÍÔx‹²‡ ŸË²‚Ÿ(¼?‹;°VÀ X+Đ̣+¾¸A¶¥37j¬€¨ñ¶¡è:xKægÔá-Ä:¢¨î‹YƯZåo©|ŬoAÆw‹ >RE›,‚°è/ß₫đöc” ́Ÿ¢̀â H¾̉ñ„í×Qç1Åg$Óf¬€è!☆=4üÎuÎvç̃¬€°•Uà`y6G߉èÏnU¾°,ÛàQ¥÷´{§˜V°€ÁX¤Œ|Ôéd±À>?>˜đ—7´q¬xY|TPw¬Àéu|¥%~ R[Y‰ÛIiAÿ«Â¿eñ#̣¥x›°VÀ X¶(0U[Zu£VÀ XÁ§Àr9̃b¼Z‡ûï©Î³%ơTeÂXHü[đ¦‹zͤøv}9ăÿ¬ `¥$=Fq¾³áßb}ÁGª|dk'ñKí#ø¸×i${Añob́¥,ó¹¢BçY+`¬€h•铳Vµév¬€°½ ß™¸>Ç–5~»̣Y°̀)øƯψ÷ÿ¿ƒ7# EÆŒ6>‡.~/n_ôsª°Y+`¬€¨¤^€Tr·Ø)+`:¨“ù¼EŸÆ"M<̣x{±fy“rE'Û<(øbúnbñW1Nđ=¸P`¼ÁHûëËÔŸøRø̣YÆh…´ơ¼Ø\¬*xẹ̈9q‹H-|Nọ́ñzêä·qÚ X+`¬@Ă LmQtă‰²†ơVÀ X+ĐQx“Âÿ÷à äE×ó:ăά€°ƒP¢k§çÂmÚ‘!¬Eo“ÀnÖ X+`¬€°V ̣ x.ÜÁ]ä`uPlwe¬€°VÀ X+`z]/@zưđø­€°VÀ X+`¬@đ¤ƒb»++`¬€°VÀ X+Đë x̉ëG€Ço¬€°VÀ X+`:¨€ Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ĐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X+`¬€°V ×đ¤×ß X+`¬€°VÀ tP/@:(¶»²VÀ X+`¬€°½®€ ½~xüVÀ X+`¬€°V ƒ x̉A±Ư•°VÀ X+`¬€èu¼éơ#Àă·VÀ X+`¬€°TÀ í®¬€°VÀ X+`¬@¯+àH¯¿°VÀ X+`¬€è ^€tPlwe¬€°VÀ X+`z]/@zưđø­€°VÀ X+`¬@đ¤ƒb»++`¬€°VÀ X+Đë x̉ëG€Ço¬€°VÀ X+`:¨€ Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ĐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X+`¬€°V ×đ¤×ß X+`¬€°VÀ tP©:ØW=] S¥3Ä'Ä4ơlà:VÀ X!¢À;ǵbwñhƒc̣µ³AÁ\Ư X!£@3×Î!#Â`Èä™Ăÿ+p<Ê Ú–u•Z̃ m­»a+`¬@ơ¸Z.nØ ›¾v6(˜«[+0äȵ3¡*sáÔ§!EFUD[JûÍÇ=Ü<0+`êP€§yÓÖQ/­âkgª†ăVÀ ô¢¹v¦:Ue.œú4dăU[€íü!+¾f¬€¨¡@\›k(Û×ÎIâ +`zPF¯©DE×ÑfÚKÛv<§€¿„ÄI+`¬€°VÀ X+`Ú§@Ơ¾„^4R¯>‹Tq°CE¢§n­›¯­PÑmX+PUÚuí¬êx‡”_~2¤v§c¬€°VÀ X+`ª­€ Ỡ?öÎ X+`¬€°VÀ )¼R»Óƒ±VÀ X+`¬€°ƠVÀ jï{g¬€°VÀ X+`†”^€ ©ƯéÁtHƠtËfVÇK‹é»å€ûµV !¦Sí¥ÿ±¾Ö}—ózI1~Fn Ck4ŸkHŒÆƒ°ƒP~I O7†‘÷Á¿pĐ½PŸÇå›·”¾Mlœ5‘/g¾$F‹˜×›GD\+£Í(OC®Uùë`”ÿ¢¤́ •aEÛÖºgD»­íĂ·₫Æ‹¶§ ´íÿ¡ø²+̣ƒzág_%ÿ麱ï̉°§̉v"̃L{̃¶D?i)ÇEư*?ó9F5os‹7C.äiùÍJÏ$¶»ˆ‡Å÷Dú40ê+{²ÏˆÑDd[‹´¬/3ûó…,œAá6â¬,‹‰sÅ”âăb q–`Rp8Zàï{âÇû?Á ,µ½”8Ap³?1+`¬g nf”…cg¼³ˆÏ‹CÅâÑŸ=§ ÔMíQ%˜(Ü(èëbq¿@Ë/‰©Å1‚qb£“8‰W„Í XÎ+°¡º¨ÏS/n0Ü°Hs£åæLüŸ"n>öÙ4úûª œ›}q̣¸ R'üOơ£|ê¬)̣Ʋ‘¢Èß´₫yYƯ&™,p!a,PhwûÈpXiØWyu8¿=i[÷ˆëƯïä 0üH Eç5×’»ûp+‘·ôI×+®iˆiEZו8>6U9×¾EÇ''ù›n\Giƒ7Ñ&yEVtŒzeeÔ)* ‹îÑn„á[ÙxYhPÆhv–"‹MD‘ʶULØÏiØŒ‹i;o¦=o[¢ÀT%e.²*0LÄ.…ñÔo9Á‚"n¨µn^ls›`rÏ‚§S<%\]¤¶S–ø±ÂoQ‚§uÜDÂx3Bßë¼±Àh‹‹Ë>â±»À¸ï-(K›ôL‚‰>¾…¿_,!xZF?ô9¿à†Ènơm]˜Tdq³«X1Ë» ){Eñ´ß¤ÈQ+`* À_åĂûb ñŒ ÍÓ÷C‹†¢ó‡/—e²rôײ)U°‘˜Np=x[Ù?•¹’`bù‡,Êú-¥œYÄ’‚ë×Ç›×(¬Öµj|éd“m¦H½¶¯UvJÖv­̣¢{F¾ươƠFøV6̃Um÷Ëú, jù~mă¼Î+?H7c­n¯_†ü¶S ùz€PàAụ7q¥8F¬%̃a—)²¿8V¼,>*6µ́>Ü)6» <5LÍñ¶àIX´÷yÅS{T ú>XĐæ´"½ñpS;0"¹đá,=\azΑ•ÍB‚ƒÄlbV1Z,-¾$6G‰¢Åˆ²û́Vư'aññÙ}‹-¢‹féû¯ÄÜ‘áĐ XÊ(À‚ëÙª‚ó$LÔ—Û‰G¶Èø`Âßx³™^W&f‘›₫MđÀá+âQf\›éFˆ₫́HUø–¸$«øu…Óeq‚Zת¨ÂDÿ \«ĂU$½Î±àJ­{÷‘´1i×ïĂY½Đ86ÛU®¥,Ăúó3ê9´V`€ üOÛå`SMm–÷´­º /×ØGé„>ơ¶¨üˆl›ŸdăiÛÂJGưm?4«Gû— >ZE<̃€œ¥É˳’̣X ƒ#Ÿ<%aS+ÛG^>d¡ñXVoç¤đ Ỹă ©₫§ź‘Ơù½BP̉×çv‡ ư1Q䯲'‹7ê₫Nж® ï1¹cBB₫ö‘á°̉ °¯̣4êp~{̉¶î+p©\`_¤çâaY×¢ókƯsYæä-½fæËH§åq]á¶H•Eûr'ư“n%,¢Ønum¦×Ö¨GXtŒ̣²²ZÛ–Ư3¢ƯĂ·²ñ¢)cy^ 5ƃ)®ăäo(úóSUlP =–#̃Œ[ÑF6Ó·-Q`ª’2Yv(ÀS3lÎñAÍ¿L¢ËJă \T^‘ψ÷O¹Yc?L₫wLÔóv»2̃ươßîe"Î,|>-°MÇ}eÔ £ÿUÄtâ“Yæ?rƒĂđsK±¼xKps_A`ˉëûbÿ­èQbw±…¸E<*¢ÿ“ç‚i³V Z üYîl%xÀ9Λá½vø·HÏë»”f̀5ê Áu£•ö5FÿŸh°Q®ÛKˆ¹Ä+Ù¶µ®UYqiđ5•̣ )µ̉D§o,Ư₫­̣̉·*7+}+/₫Il"¸–^#Ö¼M¹SüMpÅjùùêøbÿµV`  x2På¼ ¤“î"EÊïÏ*2ùN tÔ'äFÀÄ|1Áb‚'Tơ>%fW‰q"́BEö;nNycÛÅRb1V‡E8>ơá¿£³,qszFñÿgfeáÿÊJm>)N?ØÆbG1L¼)¸Á½$¢ÿ™_S¤6¯O ̣Ï«‰&3?ß©E[áOZ渰S€‡"•ÚĂJü[̀,Xˆđ+Ä›"µ‡³Äp…éü€øˆ¬ll$f³ ̃`,-ø®Ææâ(Á‚¥–Ưª‚yx»Eû‹ONø{²b¿,²lVÀ r̉ ̀ Ư·VÀ X+ĐÓ ŒÑè/ùÉ;¢ü–?²-Æ}_đ΢‚Ç{\đ&d§ ¹ă¿`Λ‰'Ä£I~DßV„ïy`K >u€àM ÆÂK<ï)ưlÂóTE;|¿$æ(ë*Ά78Ï ›°CDÿiyº1´¼¤mVÀ X¡¬@+®{­hc(k<”Ç_3Đ`™èsLÜ"ÂVR$ ³DA.äcPÔă»|t ˆ“·›À¢Ï)~®`ÑĂ÷4¨ĂÂcÇ,₫ˆB¾ËA>>ñ¶„Å éW‹¾£ÂB‡2êÜ&X8½“¥P˜ÚÅJPoû4ÓñQ€}Ÿ§™ÁçÛ"mk³U½*~´Yn7o¬€˜ @+®{­hc‚C *~.oÙÿŸN¼₫~–—ÿB8?UKƯË“ºEQ!O‰8®øŸ ±ø ~ôå(·#?| ÎäSç ±‡ÀÖ±]>üb_É&[^!?ÅÛ³9VL#RcáCÛ¥™÷Œùă‡t3Öêöñ¥g¶­èUñ£gv¼j¬@×hÅu¯mt];P9”G0P›K.)X Äøèß#É/<̉–·z ´úº×êö†â-ÑäY[ˆ·(Ëç·3]?Ú9F·m¬€HhÅu¯m¤>9n¬€¨º­¾îµº½ªë×Uÿâ ^]uÂ[+`¬€°VÀ X+Đ x̉ûÙ£´VÀ X+`¬€°•PÀ J́;a¬€°VÀ X+`zC/@zc?{”VÀ X+`¬€°V  xR‰Ư`'¬€°VÀ X+`¬@o(àHóg̉ X+`¬€°VÀ TB/@*±́„°VÀ X+`¬€è ¼éứQZ+`¬€°VÀ XJ(àH%vƒ°VÀ X+`¬€°½¡€ ½±Ÿ=J+`¬€°VÀ X+P ¼©Än°VÀ X+`¬€°V 7đ¤7ö³Gi¬€°VÀ X+`*¡€ •Ø v X+`¬€°VÀ ô†^€ôÆ~ö(­€°VÀ X+`¬@%đ¤»ÁNX+`¬€°VÀ X̃PÀ ̃ØÏ¥°VÀ X+`¬€¨„^€Tb7Ø +`¬€°VÀ X+Đ x̉ûÙ£´VÀ X+`¬€°•PÀ J́;a¬€°VÀ X+`zC/@zc?{”VÀ X+`¬€°V  LU /́„°VÀ X̃U`N }Gqª˜1‰¿¥ø@lKm4<ÙđuÅÿ(Ḷct19½8­†ó3+ ÁÜæây‘· •±¨ø§¸=_è´°Uàê.Og=ß[̃̉6+`¬ÀPV ×½V´1”5®úØVƒ́C"i| ~ÿY>#®Í ₫¾8I fû¬œºÆ¦T₫â)ñˆ`±…©}O‰·ÅÄb+a¼ ´úº×êö¯²ô¼*¢WÅJﮬ€èqZqƯkE=¾º:ütÑÁG£óçFcr~²m(˜|Ïä¶hÙ„·#œ«‹Y ŒMDj·)ñă,ă …g¦…:Z}Ưku{ƒNĐN:̀EÉf¬€°VÀ 4§À²Úü¿âhñ˜xQ\"æa{+rxCÜ"6y[\ÿ³‰ÉÅ₫â>ÁDZ˜@¯/–ôµÛH>R4]d$!“ñËÄ4bUA3QzWÜ-F lEq½`±̣‚ Ûa{±‚m»¹cZW`K|Û„lq—ø8 Y- ÖRÙubkAư/ ÚD'ÆNŸµlœ ^ÔÙFà#í¤ă\Z™ÿJ ·V ó TeƠW?:¿Ü£°½ª@+®{­h£WơoƠ¸™Ø³˜ä®—Á˜ÅÆdư=±¯`̣{¼àcQ+‰ô HßCeL¾¿"Vç‹×Oøï´v"g‰üaÊçiÿË‚ÅÇwÅ+âSbyAư¿ ŒôrbSÁ6,<æŒï;b)q¸Àÿ9Å­âgcá@½sHÈhă51½(Ó`c•¿#ucÇïƯ‹¢§E-c;úF£ *-©¼uF ¾+b¼ °ó43|[¤mmV *¢WÅ6Ëíæ­€°hÅu¯mLpÈ‘) µ“­yªÏ¾áÅb´›\̃Xœ ̉EG¿Ae§ˆ0̃́/ûˆg“h&÷¯ &ûØŸí73đáQÁÛl¤àM >  NØŸÄÅæbÁ‘EǺ‚· ,t+ Ú™Y$b{Êÿ XH`Ç‹úbå°ÁÏĂ³ØH ?̣̀|È>¯œ7o5^,6>#6Øbâ>q§xǴ%Ø/ôcœ p¼äif$ù¶H—Ù&*|Lmç¼₫uéÓ¶H¨2ÑÛUV?ß0m|•àIMÑxœg]| töà\äœäܬ¢úÙ6íÓơ'U€I9û y¿hE“ê§Ä×Ejg+q¹XAP· iœ 8å"c1„› 6m&üS ŒÇüê,"Xl„ñÖƒ~y»ñ°`b ,XĐđÆfŒ >¶µ¸QđæƒmO,D–ø¿°Àµ¾±¸G|N`el¬rÚ =́qm_lâŸíE“¼-  ̃–́-Đ€±Ư+o{°¿ˆ«ÅÔbwñ®ø“ø° N8^̣43’|[¤Ë̀‹ë_¤aãeʺl@ œ¡­6Ó hkod¬@«à\äœäÜ´Yv+°X̉Á"YœI3“ïHGê‹DAø¬̣˜Ô‡±èàí¼$~#vL̀)̃aÏ+ÂbxÓ’N¦ÎR7$ĂÅq’c¡₫%1»XÒ+N,x³°º˜C|C0‘ßCđÆäÁbi&qƒø‡ØE° áÖŸï¨ ́Ié<%¯ơ0XÓ_ 4ØA°xZBDßSœ… ®lj‹›ˆ d#o3©E«“Ikt&U?-O[‹Æá<ëâc »Ççf­è¸hÔÏV´ÑhŸ®?©ñdŒ²Y40q¿B< ¦ˆ×“̃Ä>‚ư¶¾Hßz¤ñ#TÆB‚7 ´w’¸WĤ|MÅß̀X\aØŸ9?á£Ê;Yđ6`%A›cị́Ö`´`!1£`Ï›êáﶂzLîY±XÁ¾/8Ç~OBö‚ôIdV¦ºP?l)EXDü@̀,Ö,ä o#”AƯ£>¯!øËX°ÄM‚ÖBâW‚rêÍ#lƒOö_fF‘o‹t™Ơw̃‡÷I-Mú´-*,½]eUñ£™ñÁyơÖÊZµóhæÜn׶Eăm´¯V´ÑhŸ®?©±¹DÙöÉ=â#ăMOƯyÂO“w>2„-/ÈăÍBg2}®à©=m^'Ö©Ư©Ä˜4Cñ₫ _S&ûôùœ8JĐ₫‘‚Ñă‚2xP06Œ₫SXl̀$0ÆI}̃Œ`,HïA"³2 X€°˜JísJ°£>̉u•(Z€(»ï‹̣/+¤îëâ炱¼#₫O ëí‚r|ÿ» ï.q£`1f\ °/ó43‚|[¤Ë,_¿¬®Ë&*ºơåD" 'Ví\,í?âë½5=…ß?|a°&Ö¤ÛÇ@kỊ̂Ö¶R¤I£=´¢FûtưIˆOëù¨ÔÜ“OHM¥Ø‚ḅ 9ưGøxÊm;å êH³¸Iư˜KiÚĂxñ€˜DΦSz¸˜%—ßH² Đ ?§¬£êŒ1¢MØ7Íø^Ô¦óº£@«¯{¶—¯ß_¯¡[Ÿç‘HĂn )í?âƯđ£™>Ăï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼Ñ6\¿9̉Hs-Ơ·ơªv¡xB°@±Y^S ®uiØŒi;/k/êDXV×eèÓ‹§6+`¬€°V 9øhб‚ütÂø¸}m.ø8•Í X+0hˆWÀ¬F̣eùüv¦«âG3c chfü̃Ö TEÁr.¶ÂÏV´Q•ưf?¬€°ơ(Đêë^£íåëwc̃\NU«Ó§›ß€Tm·Ø+`¬€°VÀ X+0„đdï\Í X+0Dà Øür_€NăÍo#5p¸8S$øyÖ¡d{k0|;µVy15¼gÚø ‰ï!?$¾6âæ'Ty³F6p]+Đmx’§>å}è{MÓ Gès°úRb˜èÄ‚”Ï-/+~ÑEÙu7Ô¢–¿üÊ’‚_£jV…±ơ§U4,çb+ülEUÙoE~¬ LÆÈu#Ơ­'/mŸ'øîÄ•Yü…üÄ,?Ư:Œë#̀Ó1Vm×úYܬÛJø¼}%=k̀©ETư1¿Vv¼â7ÖÄ ®Ưêë^£íåëj1;è|èÖ×e$̉°ƒ¾Lè*í?â I$üNĂn¸₫‚:Å~Z1Œ'}ä–eđO¡^áëĂo*°uDäçĂ-Tv\A9¿k?ZL/̣ÆÏ₫^đûëÑ̃_ '?%ùix¶̣ĂvQ„G”?¥øD?+yºà·ä©C_7 ~ë=,úùRd(ä)!ơÑ‹:Ñé߈áǽ¥©wI.?m#ÚyDuv|{E¤O'«4uÏykdl´L¦₫#è/o<é¥NLö'åüö~Ø.ỔŸßÜ~ó!7ÅnX̃̉U´VøÙ6ª¨Mø”.:˜X³iƾ¡9¶G%°¸ç|á<<ɬQt⸙  cö¤»GÇÙ>ûˆ ÍíF¯£ùúÍỡ;[‡n}#DvC´ÿˆwĂfú ¿Ó°™öºíËÚ̉ÈỸa 7̀âÿU¸— Œ§Ü”ùôX€<«ø99VV í_#~$~!ä*̣vª2(c"ÿeqi–₫BŒÅåä§ư}Qi )^œÁ‰ü&‚ Ă5‚:ÿøta–~Mᢋ~X Åïô]q¶‹HÔÁÚ¸/+G‹DØpEèŸmÑnm0n|ù•xO¼/–¿l‡اiÆ‹2Eû¬Ñ±Ñç1"úà Ỵ̃ ØŸ·¨bªÿ™Ù†{)Ä¿Zú!Ûîܬu‰ÓeƯ0|ÈÓ ?úë3ï#éF­m4Úg£ơ÷×,Ô9ç9ÎÇCå0Ü#¸q,n,°t²¤̉\·¸NqnĐ.ç( îÛÄúbAƠDØFÜ.¦\«¸äí#Ê8Zħ–?«ªÎÍ‚kç×3‚ëÈ·ÄăâUÁ¹cû»âøɵéuÁÆOüÅoÚZL`+ëÀÄ£ú¹U¼#ØniÍ#./çÄ‘‚ăb¤À3m¬+Ø/ø̀~:CđP"́«°/Ø¿ĂE³v8V\(h÷I±³À¸~²¿ÂfQä.±–@³óij‚ûá%0|Æw|府êÈñA׺wÅƯb”ÀÊ|¡|mq½`ß(~*Nج‚c?S ¬¿}ᶫ"Œ…ưúøŸx@  ×q+÷¤T+%‡œ1ö<Í 2ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZá‚‹s%›‘å¦p¿,Îd`F}IüH 붿AYLXi',Ú<'2’đŸÓ}0i Oúâ‚=%(_˜DΦQ:å«$eÛ*ÎÍ₫D±¥ œ›ơĂ~¨ù܈°è‡¼Ñ}9ăoè¤ó đ…›Äå‚:ÜPÂđ¼;²đËQ 0ú‰6(ºAP ±¨à&NßăF̣MÅóÖèآϹƠí£Q̃j-@̉ưÛÔ£ÔE+ú„˜|EY§Ăđ# ;íC=ư¥₫E¼í̉:±]¦åUˆ3QÄ¿3ÄGÅÅ›b_1±b2H…Àñâ}±’H i|•q}E¬.ÎL₫fœ—´Æ5àb1»ÀÎĂ2+ó‡Åm0Ñ[M&H3‘ƯX́œ¥G)Ęđ>#6ë |„=Åâaq¢À₫#₫*Ï(ñ¢`!„ÑÎKb1JÜ+3ö7ÁơoƯ ÚÁ§‘¢c¦vĐúLñQ±»`’‹OØâ±½ ürñ_‘¿L­¼åk0¯̣óÆ>d‡ Ú=[ Ưt‚ëƠó‚61| Í5ëJAÿöɃ‚‰;†Ïèº%R¿«4ăø”ÀÏ? ´ÅÊ|YPåÏ'‹U Nüf‰ưNÜ(Ö› ®ËG¬¿}¦aßTä6Á>ƯMĐÇçÄpQ柇œ1ö<Í 2ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZyYƠñ¡Öde•q³§óË‹ƒé¶ Œ‹ù… £ÇâB÷cÅ—k‹kÛ́%̣v¸2(ƒÇÄ©bCö”"”qÓJû[A饳²ûÖ²CTÀöqAzL^È¿3Ë ŸÄƠYˆß_Ô9@`áËÂă“}·Ơßđ/²¹¹qf¢@ÙßEX´ÁÍ}¶¯ &Tó ́û‚íÈ#ḍ7RE'X#c£ “ÆLúË"o )ƒ2nÄX́On„©₫L—Ô-Ó_Å}6¥₫R¦èËé̃Ÿđ# »çMíSÿ"^»vqIl—†Å5»—{´ºæÜç ;V‘87oT|t(œ\Ü.N\Ûœ¹ø JŸ"ÂfSd±€ØG0éŸJL/8ÿ6K Ú%ʬ̀ŸOhCÚ Œôæ$2c¡đ™,₫´B®3a\+΄ÂÓÄo²ô. L¢WăÄ÷F;ơÅÆÿ9XÁÍbQAÿë‹0&Áä­3×GúGÏ°*Bv½8],–±ªÂè_Ñ 6¿b÷ƠàĐ µ&F¸6ư{brÂơh„̣æïv©ø…&è›ëo×iîqX-)C/täø..\›±2_¾¥̣ÇEz|_©ôÄ‚>-B®ëŸØ.¢lŸ-@Øn A»´•ù7¾ÆĐúËØó43Â|[¤Ë,_¿¬®Ë&*Ч[z!™XäX/(À}+q¤àæÎÓà&ɤŸ¥¹Q¥¶¯hÀÍ*¤ủø³Yb®,ü˜Bnê7 #k &‰°«"’…ÜtÊâܼw gi´7‹§A£cÛD fÉÁ¯ÓDè˜e+*ÂĐ“ÉV¦ÿø₫kʸKÅéqÈcl“á •Å ¸Iq21«e”“r}úq–&ÿh±‘˜AđP† !‹|Úæ\#Ră\_F(|@¤Ç7×NQ´Áx¸å“+Î>™^| Êö¹ë¶Z₫ƠƯ€+ZN('\'úrU .r\¤Ăf̀"\́† .« ¢|[p±]Fl'ÂXP0‚,¼Lá₫âXÁ ₫£b‘ÚTJp>C̀/>!ÎØ̃"&ơ¤Ù>ú"#âFMé1‹¯LX~ Ø¢ăƒ ăÂÿđ„œñnÔ,nVøĐŸÈ*<–…_ÈḄ/¡íY~G*“1nfØ×EL(̃Püh2ecÄUD ¬Ñ±-§6f ˆÇÅçº~G&ẾP¦úCézô/kÓeV ÈŸŸĂUđtVÈÂœs<5ÎßqiF.₫¬̉ 'y÷§Úa1Â[ÎÉíÅ/×Å·Ä-b‘·­•A]úˆ?ùöM£ÏYâT1»àa“₫Ô₫—&Ÿ\0©ÇRửx+ÆĹ¯ôœöÁµæ`1M×¹ÍiR›U‰ŸƠ€7E–sZç—Jl%Øw\ŸoXzl¬¯ôQ}¹ăÿäÛœ<+;KႱ'‰ỘÛEÇ û/Ú!Ÿk1†6ز"ô¦øÆ‚{âY¢Ö>Ç—©EØ|©Ọ̈¯Fug[î(^Hºă{m—d ¯’tđñ,₫„Ÿ nl\đyjsŒ8N`éE›'?\̀ƒx£@=lŒø‰ø†8Q`\èS›J |̃-¦׉Ư³´‚I~{?ú‰ Ăc‚ ø¼b'¶";&̀×g™LÊâßûeñ(Ï’}Á!úË~n4eÆD€ña´ĂÍ€~0AÛ‰ĐŒÉ~j'+ÁÙmÄưbN±’{1‹<aø̃ÈØh†â=Y{K*ü’ø®`̀,°·Ç₫¾¦XhOø†¨Gÿ 8bJXBeƒk¯ˆXœÿZñ=“2̃Xp~sÍ:_Բߩ`O±–àúđC1JÄơïÅ·›Ñ" Ö牥ưm+lóºˆ?Ú¬)ăZÆö1¥ø¼XM̀(ÊŒkËm⧂ëÙ|"®çöY³c¾H­,(Đ(öß¾}-ÿs‚½ûbq 8Kä¯1LŸªןFí2mÀ$ë́ÙÙÆ÷)ü¯8Z ×Ücơú3öÁ‚c€í¾,¦Sˆ2CŸÄ÷Å"âëb]·ˆŸ êp¿ø•ØQô·ÏÇ©Îö‚{Ç‚ă=Œû#¶¼èïé«è?V j pAÈÓ ó>lV•1!áđåEÁE™i&”Ă7~̉Ï ê&˜p’·±X'‹¿ª pÊ–JŸ•Ç_ɾŠ۟E"gU2.ˆÓ7ƒgÄ´‚å·´¯Ÿ+í*(Wü^Üœ¤WUû£ m#¸!“æ¦ÆM£,½ í­4u¿°Ô—›”æI*åÜfŒŸô_Ä4 +N₫ÇD´Á&Œ å›E†ÂÏey&yEÑzÇFû—s₫‘F³%Åo³ô5 C?´Äb>¬xª?q&ơè¯j}“&ú„₫nØÔo§…iØÎ₫Úvê_Äm+¶KĂFÛhw}&ƒwgàç{â7‚s ă\b̉ü– œóó[^7G.>£̉ëăœ×׉ơDjw*1&ÍÈ✇‹ĐŒ6èŸÉ&VæÏÚ*§¿8ÆçRœv–a\Û>“%TÈ$2lŒ"ß‹„ÂZL-₫$§³|̉ùvöS̃-[Bpư¤.¾Åù>Rñ°fÆL\¯¸gĐÇâ*ñ´À¦' ”ß.>%5®M%,¤8í/ä¡c‘ä­¨8>P—ûدû +Óñk*1<§øQ‚¶ưù²ê<,¨ÿq¾¸X`́Ÿ›₫Đ₫‚Esûœû ÷0¶ă˜ẫûœc”ûưq,ô矪 )C“<Í 0ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZá&z¦x_„/(¾¹;B.̀Q₫²âßÎ ¹ÁF~>ü¢ÊXÏE/lEÈ‹‹cäÎ/₫(̉¶îV~°˜°§åįî+ÿ‡IpZoœ̉qƒ§ÆLâ4ñ†`[.Ê\đñ+ŒíÉ›J&(ÔÏ/@—ÇTÆ„'WØ…‚²=I$öÅÉG›đs¡¤üđ¬<4¦( $ơ¢ơ-|&ä&ÇMđÓYƒ‹+Dó¨s¿âËde±?£, gËêô§?Ơ¦±mLβÍ;„iØq'êè0ơ/âul6I•Ø. '©PÄṆ̃É5ÆyÁ5ªÈ8'“ÖÈc̣;gAmqØ© ,²æQdYAE6Úi$ŸfÏ6@‡ùظ^”Y3cÆöçz‘1¡¦ưªzL× 3,lÓc… ÇA™-¢BîèÇ̉5ÿL¤6«Eû§lŸÓ^ú0+m¯—ăéơ.âÍèm¤aY{i=â¶úƯújG" ëk¦µµ̉₫#̃ÚÚßZø†íïµv\x—,¸0æme,.FˆZ7µ̀¸ør³Ÿ»‰¹1 Eă¡YƱ¤˜™Ä³fÇÆ¢`†µ₫ôh»­̃.=#̃ê>ZÑ^ø–†¶›nñFÛhwưt̉î¾hÁĂ‚'DLµY¶(À¢úuq`Á{–xOđ&ÆÖâZ—†Íô”¶ñ²ö¢N„eu]6Q>½ú[ÑO¬îØ`Uà-9₫ßçßQÙ%å­.zY B3Æ„¢̀xës_Y…A\Ö́Øxû3¶Éñ÷§“Í{ó!ªÀß4®‡:8¶9Ô×·ÍomV  <®Æ×_Û ̉· ›h•<ÄåMÛÚb„xS<&₫"Îoˆ"ăáă‚crÁ[UM>Âw¥¸GtÅbơ–†Ưp$í?âƯđ£™>Ăï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼Ñ6\ß X+0˜ˆk]6ăÚNÄËÚ‹:–ƠmEÙ(5ÂÜè/>§²¼ñ©…¿|ưHó€f_QëS%*j©E¿}F" [Ú[¥ưG¼ÎM+S-üNĂÊ8gG¬@)ƒ¯âđĂ·4lÔÏtÛˆ7Ú†ë[+`“q­KĂfüOÛ‰xY{Q'²ºÍ–PéâƒOCđéÑ?!ß?W„P$_'­ŸÆOÚFŸ}ƯD" ÛÜaóiÿ/¬Xá̀đ; +́®]³CVôŒx¾¥a£~¦ÛF¼Ñ6\ß X+0˜ˆk]6ăÚNÄËÚ‹:–Ơm¶l/5ư<­8ßsÅxk±£xOD9é°‹‰|Âăä{´Û>z•–óÑ®v[ô××O$̉°ƯµŸöñ¢zUÎ ¿Ó°Ê₫Eßø“•Ÿ•́”ñys¾\Ï/®„qˆ‹Dä9́œé9ñÎơ^Oá[Ö¿ơøé¶o´ ×·VÀ &âZ—†ÍøŸ¶ñ²ö¢N„eu›-;S D?W4ÆG¬øΕ•³˜ˆmẸ̈Ó€_x{PD½›ÓÂ6Å£¯¾æ#‘†mê·´Ù´ÿˆ—nPÁÂđ; +èæv‰>ú3ù—ÅVˆ­&xùà3ëˆt_¥ñƒ³z¯(ä3”a¿U„zg‰YÄïíŶQœ/x(øleº­’¶)û# ;ÔuCƯ¤₫E¼¡T9¶KĂFÛ(ªÏOå?Üàî<}{W¤}9^[´B3´»F %¢­­5 đ‹‡ˆ1ÂÇiíă±Ö¹Ç)?K†h‰¦U₫5É¢±Èå[£íåë¸ă:6ïăT"Ôih…fË 4DK4}I 1ZWÍ₫'‡̣4ăc¾-̉e–¯_V·Ù²åÔ¿p•ï“¼?‹ïˆa"µß(ơ/I rñáI=êó­vZøÔ×G$̉°×j;í?âµêV5?üNĂªú:ưb€ö{dƒ‹ÈÆJ?“•í“•Ää†$/.ªÄ[‚6·eño*Ä₫)(ă§¹€ó„áGâ Ư'¸9Ú:¯@zF¼ó^ôßcø–†ưo5itÛˆOZ£¾Ôªvx^)f¶ö(€¶hŒÖhö¶úà̉‚ë;O†k=ÙU‘­IĐÑÍѾ*׺4lÆ·´ˆ—µu",«Û²-ÔH̀c¢Ï4|Gå\SÂnU$ÊùDF-›Jˆ¨»K­-Ê~ú‹D¶¨Ÿ†IûxC T rø†p«g\8U#E{^Mb\4I¿–…W)L- L.LTú¾â´ñ~̃­pj.(ƒÇưo(¸`S6Od8́˜±_̉°c7ĐQê_Äؼ¯jl—†¶Á93NđäsæF7vư+€Öhö|DÔV®ÀçUü¬ø˜¶¼ªK[¨Z£ù«‚‡qU°ôzñfü6̉°¬½´ñNØ,êä+âJQôF?X0b×đñŒ¾œâ?\ƒ¢áÖÅƠZ–}ơ5‰4lYO 4”öñ6¯DƠđ; +áX8ñ'í—ÉÆ tlh ´œ8›A‘GEÔI,DX pCŒrÂăv¦ ƯîWôe›TtD|̉ƠH…oiبgé¶o¤íU™vzl7²½ë6¯Àj‚}·góM ÙÖÈøHĐG†́«?°ÊÅ7oú»mq­KĂf|JÛ‰xY{Q'²ºí(cQÈ5›Å×ïđă^ű“EäƯĐ—Sü‡ùIÔ#\ª¸ZËr£¯¾#‘†-멆̉₫#̃À敨~§a%ë'bÅ?6̃X€œ§ôq‚ư2V̀$°uy·¾?̀©xj{)A½k’L^[.)Fâ´Å…€z0—øqßJ¡­³ Ä~HĂÎzP_o©¯oˉµb»4œXZÛCÅl·Xy5—v@EƠÇ#‚}b›T>Ẓ–È_›'­åT'àă‚ÿGt¢³’>̉ë]ÄKª÷[m¤aÙFi=âí2̃P°èăø‡µD̃öVFêçI>¯ÖÂư—ɶôĂ|¦~öơ‰4lgçµÚNûx­ºUÍ¿Ó°ª¾E¿~­A¡ưJÙàb—³fñ&#> ²§4ơ9A»|L+l:Eøå^ƒ̉vØ]PweqVçă-¶Î*ƒï¬ơơ¾¥a}[N¬•nñ‰¥µcÛ¨èa1_í*.é°́‹‡ûÆ6^¯+¸ULoA*£û‚}ÂDzZm|dy?±n? ǵ. ûÙ¤´8m'âeDËê6[ö°ˆ~X0ämeDù«O!féwFîSz„Hm%̉ïtâÍVøÙçG$̉0u°Sñ´ÿˆwªïVơ~§a«Úv;ư+ÀÇ¡Đ~ă¬j,@Î̉[dåœp#E,@8a¯Ï‘~εh¢ê}¿¶E·ˆÄ邶9é§W Êy²ië¬觳Ô×[̃G̉Ú@Ú˜A<"6h´3×o»́“‡ÅŒmï©ú̀+ùˆëƠwµç,ó1w‹´́I¥gí¶è³¯ŸH¤a»dỨ@IDAT(j?í?âEơªœ~§a•ưj¾m¯¡ư7²Åd¡d guP¸nO÷WÄ¿˜l ’<¢|Ôë"¶!ä¤^[L.x㸭³ ¤û$âơ ¾̃·4¬oˉµ̉m#>±´8öeŸQ\äÜ (À¾aơº](êu*<~öÍođoYm{Œˆ{u\¿wî§Ư´nÄûÙ¤´8ÚHĂ² ̉zÄÛi<0ºYäû̀§ŸVGxr”x_äë¦é±*_CtÂúúI‰¼EY>¿éªøÑ̀‡Â··N<"˜ø¯ÖAgfU_œô,6[G\+xrña묃å\l…Ÿ¶ÁyÂÓ.n₫„4̃,O:|]qñy?8§¨Ëyüàæ{©x[`ˉuÿK£ÈöQ&OúîI 7R|-Á‰Å/Åăb„àíèU"­¯dßĂ„U&̃$£CÆĂ f̣t³ï<$†‰W ̃cnCơ±ŒàÍ1—ŸŸÿ¬˜G0Éû•¸C„ñ¿]çÇôßÄ%‚7âsKÑ"ŒcUg‹—²L>2óÁq₫X–Ç,ÇÁ¿Äå⑬l…_ÎâĐ÷•‚ăË×á~@đÖ7ÿÍÚ̀j€¾/ÔÙجª‡–»‰ƠK¶¡<Ơ,_µÑë^~û|ºÑọ̈ơ'Ï7Øâ4Ço=¸¶q¼¥ö®gˆØ÷iù(%+ ‰0æ+¼1ÙO¼™m'ÑD6÷_Ø|̃‡Iœ,Ü¢z™Ca ƠSµ1Uuö7‚nÚéꜛØâƯt¢‡û,çb+ül´ n₫LRºaV§Ïç@œ§s'‰0÷ &zç &r/›‹Œ°]‘M¡L4Ù%+œVáyâmÁ¸‰Ó/ûơå÷ˆÛÄ”"lvE¨wvdt8ÄWöU6£* Åë̀W5®_ơ7ø:Êë9æØïLÜ8ṇï¬<,”¹®?”¥7WˆO‰ÿ_ˆëÅ{â—ÛMp¬ÎB"3ÆE_ÛE†ÂO úa‘3½àØ瘽JŒœ,V¢_&̣´q·à\‚mà–¯Ă1Î"…sk[Ñ c,́«2cr¾8G¼!đ»?Đ­̀¶/«ß_Y£íåë÷×~«Ê§RC‹‰ơÅ'ÅbQQÅôÆbÁz6hCĐ­¯éH¤aú́·É´ÿˆ÷»QÅ*„ßiX1‡¼;3h„Ë ̀tÓUç\$lƯQ =#̃OÊ{ ß̉°|‹—¦ÛFüõ&æ\ªh~’5±´½1&ƒL¬Â¦Pä@ÁD‹ ?• ĐÎ)ÂF(Â[ Öa,@¾¡úLzF‰0nâÿúü¸`’È“À°Sa’úeÙǴ«Z¶¶ ˜ü¡ 5»BÚ´ƒê úáa±Ë„?µ»•8-Éàx¹CÜå}Oá“‚{OØ¡p.‹dq̃f`lÏqơ¼8U„ư\}́»‚…Â(Æ1{®xÙ-bq±â©}S ‡yDQ7±à>Ơ¬m¦ØWE6\™h1V G#p̃Î'æL– 4!ÚZJùK‹e2˜ ¬ V+‹̃>­*V«‹5EQ{£”¿®`²¿ØP0égŸ¯¯,[ „n}U#‘†u´Ṇ̃*iÿoy'mn0üNĂ6wéæ­€(P =#^P­ëYá[6êTºmÄËÚ`rÏÍ·–Ÿ âüææ7v&yÛNÔcrÑÈä Ơ?AäÉÈÑbά€ àk‚ ưó$y{Ñ-c±¯Rc"ÆätœxE¼'ĐäE1Ốv ˆ‰c³Öß1Gû,<΃́w a,.Î,Â8>öÊÇ)äÂY`6ñ-Á„+~Đ?fÀû¡,à_â1¥xIüDämVe¼,ÄÙ÷ùÈ*Y>îZufRÙ‹âpѬ­¤ØWa,p>'®h‰½€†i«C¾cƠ´Í X+`zKaî£2¾0{E\'öωẼ₫e0á©×fWÅ“Đ¼ưKv "›‹SO^éIi·Œ}„>Øâ«"&—ḶRc̉ïL’kAưZeơäwz{Î?B§-¶ü17¯Úÿ”ØZüU<%v ́Dñ}öqŒ₫Rñ]ÅârÁq̀ä›ÅDí®%XäüC\*~*ç bEñ1\̀*.ycñAû+%øÓC̃z", fEÆB›cÉ¢ÂóØGø̀ÛtcÑÿ6+PS/@jJă+`¬ÀU`F́Å.7[fưO§É̉Aâ-1‡`’Udo(“'Çs êÖcLÈ°WÆ¥_WéÅU‚úLè»í#öv¬@›÷ÅÔ"oÜÏñ½́I3Û”•÷WÖéíéï₫´Àʹ}Ô>o®èË¢“Åa‚ô ÏQâë‚ăﻂưr«`"¿³XOüX0ñÿ`áÈquØAL#X€° ~XÜ/H?!̃,.–X­ó€ăbx_ñX ¥Æ~ü´èO;üâükÖè8.§h¶1oß[ ÄÁ“†ƯP í?âƯđ£™>Ăï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼¬ûTÈg¥»aL¼˜àóà©/OnĂ¾¬È›¢hb4LùŒo±§`rXdL‚¨·‹ &b»‰¼-¬Œ³Å¹‚)}Z.¯Iöû*Œ‰)^&ËLNẂïZ“UU´v‡<çøhÖú;æ₫«Đ‘E„®›)ÎBâ#"X³æø`›e>’ÆD|GÁbù,sA…Ô_W°¦MŒÅĂ…âGâ¯ă#Ôư ‰ăÍËh1« }ñ‘*XHđöe¬À¢N₫cZ”Ư%85ÆϾ ăœc±v¹xOàă@à˜æăoăÄă‚ ̃¸0¾¢6Ù—÷Æv§À¯ÛÅ¿çơm‚ăÍâ&–7ˆëEQ{×(Ÿư‚¦W %ªùúʲƠ¡@èÖW5iXG-¯’öñ–w̉æĂï4ls—ñ X̉s0âƠº¾¥a£N¥ÛF¼¬ n¤”Uhc7đóKÚg1đ®àăFy;ZL¾gơ.@hƒ‰Œ¼}MïˆsLNNÊåu#É>b_åmJel".oדڡfWh@Œ³Y+;æÖQăœ3Lö?–ÀäơRÁñHùÇEj#” sÁä¶h"ÏqÄ7́^E˜¼>-bѽ¥âÏ ê(ÂH_‰$\Uqúư¬¨µ¸ MềVRgTVg+…Íûˆ}Udó)s?ñOđƠ/³¢¶Êê÷WÖh{ùúưµị̈ñ „n}©H¤a7„Jûx7üh¦Ïđ; ›iÏÛZ+00̉s0âk©½[…oiØhé¶/kăH]V¡ee“Áèöçđô˜EÈ<‚7 L3™ÁX€^9Ç̣Jó´vØ'uÏK‹Ķâ%q¼È[U ́#öU™1 e¢vDY¥AZ¶ü>§¾—sg©}&Çyû–2X3æ):OÔ×S‰yÅi‚ÅßÜâPÁñº»à-Ä´bGÃn"́$E8.Ï …³ú!56J̣©»Œ ‹§‹i0µ œ´Ç´¨³¿âä¯!8‡^­0öûª?[I~*₫ơÇ^ªSfEÛ—ƠﯬÑọ̈ơûkßåăƯúR‘HĂn•öñnøÑLŸáw6Ó^l;§"<­›N¤ñ(Hømt”8SüP¬ lV`¨(ƒ¯âØ·4lÔÏtÛˆ—µ±¬ ñ¶¬n«ËÊ&ƒÑ~$1>Á/Œx”¥!ơḅ…¨¬p3ñ°ˆºLîÓ‹¼ñÆäù̀§Ñ€}ľêUă^÷²`RߌƠ:æh÷uñ‚ÆP̃û‚‰û"âJÇá½bq¼#h+êà÷÷DjÛ)Ayz\R₫wñ‚ Ôx;sˆ6i´˜Q`,J(ÛDb,XpUD´[•oÓˆf YÈÏƠ@CS©.çăâ-¾åĂ½UVfùú¤›±FÛË×o¦ï^Ú¶O7.pXÑN‹²ñ5:ó·*~43ÚvÅÁí‚“œ cĹAÄvÖF£ÅbœXOŒ[ËD'lur­à©ODlV • ´ë\l¥´Ơ ?mcJơûÁ ~Œ¨²qxG<Ñ"'y£ÂuôAÁêªÚºrŒO­™÷ª]ªÿSü῭&† &܉üy7­̣FˆÉÅXѪăkvµÅ›˜ûDƠ…o˧5E~¤¬º MY˜í,>Û‚‡®Çç̣̉d^ÊĐ~ Öh{ùúÍô]äó‚ÊürQ̣¸&²¾M< RÛI‰%³ ›¿Íâi₫£Ê;-ËOƒÍ•øX–ñ…̀[m“èF"O«;¬§½¼“8YO¨Ó®1°¡mñ”„°»[§'Îâ†fmpÛ%TŸ1q’5kh²¢`Bơq³+^\°‹ö‹ó>¬Ë̉ë¿ÄÄ·Åê¢OÊÔLG­hÿvÔ:;k…Ÿiccù÷ `̉d«–́ö û¨×m đ¬X®×…¨àøÙ'́öQ+lq5r¸+¸¦}]”Ù@®{­l/ßYÛ)[[åû(JŸ¬z3&đ…ù¨wv|ÊG&e=C‘Øö§‘Ùâ0Úïk6iØâ₫êj.í?âumX¡Jáw†{¼Jÿ¯8Z0É{Q\"x]ÆW®LoqJ ¬li‡'OxBÄ6‹ƒv¥ˆ8injL,7OóDºbg¢¹—ăơí}âñG1\`l³¿ ́-Á |}}_Đç±â1‡(jg¤̣èÄê}g1›G < `Qµƒà­Ê"b&a«_‘…ÅGÄâçâßâ9q”XH ăØÊSEßó>’nÔÚÆEêè°F;sư¶+À>aßØÆ+đM7é,He`_Ü$ökƒG̀1F æ6e6Đë^­6m/_¿V»ͯw‚,BÂê]€0×̀?\*.,zhkÁÂă+‚EËù‚vg¼/ .L__Eí°0ÙMàĂçÄpшq̉°Øy^ŒhbkŸ ©i.FèÍ>f_WƯ8¶̣TÑ缤µ¶Á~}T|¶Ñ]¿m ́¤–Ù'́ÛD~¬èÍbö‰YuIîß<đäaj7m ×½Z>7Ú^¾~­v¿¶6Lûø¤̉K æ;›‹ëE”3WŒO“\䟭xXÛ…YÈư=ʼɉSơd́¸4 ŸcÂA¶–"Ô]Fđ„g´ă)ÀíâÁG½9sq =-¦aÜÀF Æ÷Äc¡p‘̀xºp¬¸UPï5ÁâăÀ>],–¾Túq›M‘ư¯a9xyó1ƒÀÊÚYBåŒ)Nê×chv—¸T ‡­s °_OOˆí:×í€zâØÊ3 †Ú¼Q̃G̉Z3m,«Î¸†lÛh§®ßrX²/Ù'¶+ÀưêU±̣‡‹œÓ!VT?Ï‹ư:Ô_Y7Í\÷Úm´½|ư¢6›Éc®˜ö±h®±¹•æsÔÙ$+¿:Éëọ¦ê.mGàˆDA]E4üNĂp<&ñ3G†B>·GƯMÅSâë"5ËE­È *#jÙïTp– Ÿ×Å:‚₫yĂ2…›K‘Ó¾,#˜'á]Å?/(K?ª¥äăàưư„Ty;Y€đQ/ṭÛDä.D?¡>»u¡ïz»LÏÁˆ×»m'ë…oiØhÿé¶o¤ n@l7º‘\·¥ |W­1¹^¸¥­½ÆX(?'¸M3ô†WÙ¡5£ư.¢ ׺4lƯ´ˆ—µu",«;²₫ S«QæhÑ<ld¶W%Îul’N@“₫m³¼U[$‹0©gbé(§î¸H„Ï(/Ăú¶̣>“ƠåMŧvZ_'æ·‰5D•#²“‘ÇÅÁ‚‹L'6Ï´Õ€ĐOø₫²âaeíDzCz/6Ô»‘ëµEkƠêê‚‹Ç—mp+đ€Üçiç₫%bIaëŒh扥ÄcÂV[‹TôQ±µà!Èÿ‰„­=  -£5£ưYÂÖ]˜¿óEHؽ©#<^ũ̀êm pÇ:¶iK•X=¥a[:ê§Ñ´ÿˆ÷³IåĂï4 'ă Èe0ŸW\!¸ùO%¯‰'ư>‚vÖµ̃€¬¢2^Á±èàsù<z_đ†ă åÂñ’øÀ&wˆ»Ä‚¾ñ…7 LDhÑZbñ]1Ǹ$X¨}1!=G„•µ³¨*1>n¼3Æ5¹”OƯuk”;»; 0yâxă8¬¥ç`Ä«æ#₫„oiبŸé¶o´ êO)÷&îu¶ú@+4C;4Æ„§]ñ¹½{ÅÂ4'̃lÏ¢aoq̣“7G.®äd_Ô¥|¬8P¤v¨ï‰ù“̀E¿R°MÀ"bñkH'‹·å·‹O ŒÅ7Îwăà"µÀ8xÓ¾¬Æ{› ưD™ư^…ç”UpY×ø¼zfAË₫¬’Åq†Ụ/|Iư‹x”ƠÆviXï¶Eơø˜&בqâ>q¬àÁO?q£SÔÖĹĐ íĐ-ÑmhmkN4ÜP%ƈ;*îQé9áxm=Đ ÍĐnŒ@K4­̣ñY´?ạ̊€­Ñọ̈ơÜq ×V~¾¢ôª·J̉FºĐHçci> ©‹hóŽIQtPÝÈ4ŒÄ„z6Á›†"›J™ F̃Pw₫¢Æ”w¢¸¬F~¬(†‰¢₫8@çEÆâb΢‚‚¼²v ªO’µ‰R¬ø‹ü›¤b‹Ó¨½¯åØJéé úá-Îáâ4ñU1\¤¶¥Ô)²Å•I?S&…#;‹ăÅ/Än½±  SüËÛ®Êøt>³éߨ};ĐO#]¤ç`ÄÙ¾SuĂ·4l´ïtÛˆ7ÚFQ}É•å+ ØM¼i‡̃µB´B3´CC´DÓô|W̉ÖC p¬ØW èœk¦ƠFÛË×o¦ï¢mó 'Té‘ bđ`ö{b6‘ZºĐ([€°Í:"ˆ₫Wĸ~ªx;,Úïk;iØNûk3í?âưmSµ̣đ; ĂÇtyí WRăG·Åzí́¨ÍmÿRíwcr;«úe?̃-®7´|El!°éÅù‚ü«Ähq¿xIl.Â₫¬ớ³Ê¤ŸøÚ̉ß+¿W ÚçÉÔbuñ¾8X¤¶µ´“ö›–·3Î"ñ†vv0€¶Ñ"Ïiû&yI7j­h£Ñ>]ß X)0s|`= í­Z}Ưk´½|ưV«_€,Zg,@ḥt‘ i/@PgYÑN ÷Väg"dG~»ÂUÔđ…bÏvuĐD»Ëh[´BⵌIù ‚Ï&vÚb²M̉1₫üC\å}WáëbT–&à Q{UÄ[®F ×k»[Eúvi%¥ß?!Ơ[‚„ ¿µ9Ôi§M¡Æeû²ưµ]v.ƠïV^+ülEƯ¿ûµ½¦ç«­yZ}Ưk´½|ưæG4i k+™öÑ®6ŸÉơE¿^€H„ÁdéÁñÁä§|ư´:zEđdŸ <ß…á£KùW‰+*ïÑ +Z€àÇá‚7|„‚0N0¶}YåÔ»ù¸êsÜŒ̀¶Kƒ•øZ–1ƒÂÄ_²ô1 Ÿµ>.—Ukkp‘ZÿL[{h¬qt̀ÓX ©÷‘t£Ö6íÓơ­€˜9ÇÖÓĐ̃ªƠ×½FÛË×oµÚZ€à÷D~*̉KÆ„ẉ. ø]è³Ê]²˜̀ó¥ÔfÊ›(ÜHđ4}A1VtÓøß¹àç ßuø™ˆH±Ø(²•Ùè„|nmƒ.ơ3cTïT±¿à{"çˆnûiÉn:ྭ€°VÀ X~`N“·¯(ăvÁĂß“<ë<é(ïéVZ«Û+̣­Ưc(ês0æñ,>¾”êở|¯· ,B8 ¶¿Ư0̃nàßA‚/~ßă cBy­Ư¨²ÑYåz?‚ơù¬ÍY²í̉`%~f(¾¸À‡Oæ̣»‘ü‘:= ×è]̣Ô¨ÚỚ¼¤µV´ÑhŸ®o¬ÀÀÈ9>°†öV­¾î5Ú^¾₫ĐV»u£ëÓ§Đ6+Đ-X`¼#ø8ßù–˜O|JüIPV…ơđ³t,&à1ö¼"·ˆ¯FF®ª8׺"É«'úOUâÉÄî•ù˜Ơˆ\₫{Y:Â\qG“ĂƠûËf¬€°VÀ X~ȯâHwĂÚíG'ÆƠî1tc¿´£ÏeÔ(Zñ%'âµlvđQ¦éjUhc~¼áÍC-¥‚wŹ‚qđæbsÁwY®ñ‘?̃€đ1©•sđ³Ï ´à—¬°Sßaa3O:ñѵQ"µJ°ízif—âwª_^U±Ár.¶ÂÏV´Q•ưf?¬ÀPW€óƠÖ¼­¾î5Ú^¾~ó#êB·¾ÑF" »!CÚÄ[ém¶ÛÂï4lwŸC½}>‚µsÉb‚ư¸u?}¯£r̃àÄ>]ñÑ"NÆ$ÊÓ/•ç |Ïähß¡> D̃†+ƒ̣uóN¯¡₫xST%Kux•ü _·4Œ²zĂtۈ׻­ëY+ĐY8GmÍ+׺4l¦Ơ´ˆ—µu",«ë²‰ L¢W$̉pbƠÎÅ̉₫#̃Ễi³Ư~§a»ûêío¯̣ö êÆÛ̃‚đeơV‘\R ñ&¥í¶£ R‡´£á&ÚLÏÁˆ7Ñ\Û6 ß̉°ÑÎ̉m#̃h®o¬@gàµ5¯@\ë̉°™VÓv"^Ö^Ô‰°¬®Ë&*0‰^‘HÉU;Kûx+{§Ív[ø†íîs¨·ÏwExĂĐß›ˆ¡®CUÇ·¢{Vđ ^U²ôŒx•ü _·4Œ²zĂtۈ׻­ëY+ĐY~¨³ ̃âZ—†ÍŒ,m'âeíEËêºl¢“è‰4œXµs±´ÿˆ·²wÚl·…ßiØî>{¡}>æô¸˜¹;ˆÆÈ[EÑ—æ»=ŒôŒx·}*ê?|KĂ¢zeyé¶/«ï2+`º§ç¨­yâZ—†Í´¶ñ²ö¢N„eu]6QIôDN¬Ú¹XÚÄ[Ù;m¶ÛÂï4lwŸ½̉₫èÅ‚ïHت¡ÀåÆ_o©ªfé9ñªùˆ?á[6êgºmÄmĂơ­€èŒœ£¶æˆk]6ÓjÚNÄËÚ‹:–ƠuÙD&Ñ+i8±jçbiÿoeï´Ùn ¿Ó°Ư}öJû|·â"Áÿ ñ"¤û{}¬\àíÇLƯw¥ĐƒôŒxaÅ.g†oiبKé¶o´ ×·V 3 pÚW ®uiØL«i;/k/êDXV×e˜D¯H¤áĪ‹¥ưG¼•½Óf»-üNĂv÷ÙKí³đ¸F ïB½4đ •Ÿ'₫½àÿ´L]!¿̣®¤ç`Äóuªß̉°Q¿̉m#̃h®o¬@gàµ5¯@\ë̉°™VÓv"^Ö^Ô‰°¬®Ë&*ЧŸß¶YÁ¤ÿpŸœư¸Mđ?:|K„Úÿ[<*xóÁÿ@±Y+`¬€°V abơ–† 7̉‚ ̉₫#̃‚f'4A›í¶đ; ÛƯg¯¶Ï¿Ađÿ'>'ªü4^î Zc·à¿´ókd[ˆÁ`é9ñ*ú¾¥a£~¦ÛF¼Ñ6\ß XÎ(À9jk^¸Ö¥a3­¦íD¼¬½¨aY]—MT O¯øß$̣eùüv¦Ûíí·{\íC;ơŒm39%«‰1ârÁDùiÁ?đ{YØêS`U›_̀+F ̃x)øNÑ1®́ÊY‘Ÿí>ÿ"B+ü,jc ¾x+`¬À`V ™k|Ñu´¬½|ư²ºƒYÓVû̃§[ˆ•‘΢¬Ơ—µ×n?h¿Ưăj÷Êôëơ²9$“åÄ‚Iô|‚ÿHÎBÅÖ¿ü÷g‹7W₫ ä81Øl°œ‹­đ³¨Á¶¿́¯°V Y™ă]GËÚË×/«Û́¸†̉ö}º…Xyh”urĐíöƒöÛ=®v¡“ûĂ}YÁ¬À`9[áçÛÚQUü)äÁ|üØw+`—ü0Ê´M¸Üèµ8_¿ƯóË&†V©MûtóSáJí;c¬€×h+od¬€: ø:8ˆöe¬Ọ̈«8†eN»ư ưv«Ưcèä₫p_V`0+0XÎÅVø9L;Ôù á7!ƒù¨µïVÀ 4ªo>X|́.mtă¤~£×â¢úIs–)“ñ"£¬lûV—µÛÚo÷¸Ú=†Vkîö¬ÀPU`°œ‹ƒÅÏ¡zœx\V Ó tb.̉é1 …₫½Ơ :td St¤wb¬€°VÀ X+`†¡t~$^€t^s÷h¬€°VÀ X+0¸ø¢Ü÷"d€û0>Tô)ÊØô€6k·´ßîqµ{ ÖYT`°œ‹ƒÅÏ<„æÔđ¿&¦+aÁ¬¬Ưß™áÿlVĐ½Yüσ‘b[±x½¹°VÀ X+`¬@wà‹7yºáQ̃̉­´V·Wä[»ÇPÔç@óVІøËB»B́ÚÿÍ(›2K·*ØG ]4v¼â'éF¢3«̣Ä«â¿â}±¯°Y,çâ`ñÓG•°­Q€s̃V=|-îà>ñ]Á®î’Os‰ç3ßæS8[oW0‹·E³˜á?@/#–‡£ǺÂf¬€°VÀ X+Paª²êk·´ßn«g —%đÖá’,½§Â±â]ñˆ7N¶¸N¼.nÛl-A₫Ö‚EÅâ6o/˜¨ß#fØVâF±¤àÍ‹‰·Ä³âׂF1–}-¦Ø‚>ßÈøƒÂ9Vk|´Eûo úeÁĂÚ¹B¼-;‹źjUTdˆf>̉•4çè W€ă7O‡”÷‘´Í X¡«€Ïñjî[_‹;¸_ü¤ƒb']-¡xú”‰ûÁ›SÅ)byq®8]̀)æ7‰‹ Äùâ£bf±º`2^ÆG~L`[̃Œ$!ÛRŒÓ¥ •ưÅSâbq¬[S‘MÄ̃b'Á¶Ø9‚ẺºbSÁ"ès«5>|c¡Bß_/ lmăºJñ_ˆéÄḅ°pÂöÅÆÿ¡=K &yZ+`¬€°VÀ THx]!—zÚ•w4ú÷Ä ‚§ûG äï!xÛp’`•ÎB7»‰ËÄÔâ‹âûØHÜ">..,~/>)¾!R£&đ÷ ̃đ£Íûyû‰Eö3ñ7ñ„XIđVcnQfwªđÁ¢çÏIE|=$K3f:¼ù¡XYäEÆ‚ă½RcQ„6+`¬€°VÀ X *àHµvÊ‹rg;ñÁ„ÿ5qAgâ?¿¸[„M®Û„ư5" Y đQ¤+Å3âLq¨àmo\X¨,"ú³‡’ | ‹·%ØâRÁ[ ̃hđÆb –öñFÖư E™½­ÂrfTú­\“VÀ X+`¬€°QÀ î́&ïéSzöc|Ô§Ul#N·‹ÇÅb%ÆÛ̃ ËÂtâ}‰̣Ÿ׈1â7bGq•`qSñ¶%o,†Î{‹So!₫)Âj/ÊóaQÔÙW ÏWVúUqˆxDđ¶(Œº3 ̣mVÀ X+`¬€°T` úÔ .Ó ·,8Ö{ l!qØV0ɾ. ùXo–LÊgk‰¿‹…E‘Ư¥̀ûßµ M>¶Ä†Q±8)²÷•9B̀STøÿ́ Ütcưÿíkö%ûóX“H‰²3øq*ŸT́ë€O´fó³ÍÅóöɉ۶2cö{)eî+6ú?̉­ÁEÖRđ pu BP BP èc₫EleÆ#Ür –«´ªư5­9¼• }a_?ơ¸´/O2| ^d»àĐ\´xñív÷Â×@ÛüFÙü>…}—)!u1³pQ^ÔöT>ˆ¼í>ÍØ?_¤^HyđéÍéà¶âÇÅ|ºb₫µĐj~¯§ƯE‚}—†Ăáç̀Xmó)ËXææ8páä6j¢a¡€ ø(ÓÊ”c´ „Ă«@¼ÇûsßƱxöK¿ˆ^w½xÓ·;‡9ÙÏÍ^̀EÛ$˜¿ÉkÁï‚ä ƒ&Ưj¯öIÈBÅ(>Y"±Ơü²n•dçÆ‹‹c ’í¾SÿñJ%Îñ̉'Æ †Mßóaư§@‹{¸Ỏ[£7Cjëa8#w+ËăU‡ó¬̉_9VËư¢e£Ø¢.˜H Ê{qPâœH¯˜k(P§½¸©3₫aơÇâîÙ~¸‹̃ĂéÆP¡@( „¡@( „¡@(0 Äd<Ơ±CP BP B ¦@,@&Ø醡@( „¡@( „ă©@,@ÆSư;BP BP ˜` Ĥÿwøî„è/4ç₫Î`Ă‹7&5Ʊ₫©`ѽ£ÄÿKrV±E>~GN:́<™₫Áû:Ü.º÷ŸU¾ëœƯ ÄY§á;˜H øë?âXÜĂ}2[Ç¡z«Àz ÷d…Cæ₫–Àï‚únÇU>~;ư;íăÓ¢¯ÀHÿѽSÑ?BP BP` â#XcTCó«ñy¸8ß@úOä₫c?ÿ+¸wàï‡/B²µÉ\{ĂàPÿ$|î„ÇàHûô$̣o‡´Ư§ÉßOÀ àâs¸̉Ó‹“¿ímà9×’¿+ȯ ÿ?‚dÆú ä₫mûW‚ó½6dÆw.<7Ă`leKă[¯^–ư¯đÀ) vŸµÍ?ö-Ê₫·ơ±L?₫w÷}àá±:G{( „¡@( „¡@w ôËc§ºăĐƯ6Ö¼÷cEëÂTxü‡v\ o(°¯₫¦ÀÆE₫ ̉uà EÙEÉæđ₫¢<•T»vƒ´Ư4̣¹3èó°b‘_ŸTû=ضµ́XøñHîß₫6¥|+ úkåŸæ™ngàCđ:8…É°¸púØö¾¢́"D;ÎÉư{|‹g‚óÛ œûßÁEÈ+ÁøI› …íÀ¹®̃€U¨+ÛíTKØ`+àk¡L?Ψ£å°P ^â=̃Ÿû6Åă°_úEôºăèÅ›~¬9́Ä₫]æwĂ°¸­øÉÖ"cƯđ¢ÚüR ™Z̃ÊBã¹ß¶È{/@̣ í«iûlÑï/¤_€Ùá ø øÔ@» ̃5’›~à6>mĐR\ÍüßBŸoôư3+Ém°?||17$ÛŒOw´F å¨w̃.>’¹úpQ8—ôûE₫í¤ÀœđS¸¡RW¶X€”̀²¯“2ư8“rŒ–ĂBP`xˆ÷xîÛ8÷p¿̀Öñb¨Q^$ù%xG₫đ.½¶́h2Ó_‹ÔÄ' e»·¨x®Hơ‘́ù”ĩœƠ¹Đp! ư¶Ÿ*xá ́>-đ£N¿…v¬™·ÍçñeỴ̈LŸ~¸(x ’]Af1˜'U”̉ÉEùª¬₫"̣¢}Ÿ*½ü¨Ö3RdĂBP BP ÆKX€ôVyŸr^{—̃ĂŸAûÇh2̣t$-2|RR•¹²od~té àÓ‚³aø´`{đ#Y~7£kæßm]lå6‰‚‹’Ga9˜^M'-40Ÿ˜h.Ø\0i›ÂapAuø±+V¯mpܲ¹Ú¯\åP BP BzđÂ/¬w ,ÎP3ĂM࿾̀ 7ÂåđMđBy đBºn»†ûp6<Wçáhd>Ř ΧÛN›ÀËàSđJĐ·‹çù°ÍRí ?†fæ“ëá«à¶k¡0O“?Ôî:đăbóº§iAcŸ°P BP B)đ/Æ)Ó£¡§¦ƒå*­jbk5‡ÙÙàtH}."ïÓ˯…•á²¢́ơ©E~ é†`]Z4.Z´­F̀'Û/̉ư^Dy;›/„}̀v0©1,S”!}.Ê&ÉŸùƒÀvŸ̃ŒåÿúüÇ0ư${Ÿ₫ئOóƒvœ5’›~üWSw¸O0~ê‘̀mù8©­ô6:íØNÇèÓ× ø(Ó—c´ „Ă«@¼ÇûsßƱxöK¿ˆ^w½xÓ·3Ÿ,T́ç™I—(íóE(ûD`́&± ̀~l*- ÈNgKRsº± ê4WƒnS©{ lĐUGṽ‹ư Æ ÄÙZE ¡À0(à{>¬ÿˆcñ8́“~½î8zñ¦¯{ăđ̣èjÈ[ØÚH¯ḷ£WßíƠ€1Nß*0(ïÅA‰³owt ˜¾çĂúO8÷pŸ4»ƯĂb¨!Wàæç÷Lze¯` 3`¯^ ă„¡@( „¡@( ´¯€ÿÑ­ÆSÛh̃ü­;ư×=¯ºçĐ›=£„ƒ¯À ¼%ÎÁEÄ B₫P ×"ư1ÓÁ"Å=Ü_ñ3¼=;† BP &–ĂïÑ°1ø}«°P èo]́öwÄưƯ³„v.|nïß0#²\ô4 Ñ!µåưëÎׇ₫ëWƯs¨{„ÿP`X”÷bqúKs› Ë‹y„¡@(0 ümüŸ`3jU‹gt́ ·]ºïÑëCÿiÎuí́ºçPWÜá76å½XEœÏ°óâÉÇ°½‚c>¡@(Љ> éô×4sÿU‹s‘o¡@|«…865zQWè>\…¡ÀW üÓB¸ 3H¯ø¬AÚ[k( „¡@( „¡@(0à Äêw ăndơº†ÇP [|oN$«ûă¦I˘k(P¥~*"̃ŸƯ+Ÿ.é^ĂqóO@ª—̃_b B₫S ̃›ư·O"¢P B ¨@,@ªßé₫ œ¿Ä0Ñî¶V¯dx ªQÀ÷¢ïIß›a¡@( „¡@(0Î ¤G€c¥¶^†Xwñس—{3Æ Bv¨â¸W…vb>¡@(Đ½q-̉½†z¨ú¸Wµ¿jf9¤^â ÈîؘV( „¡@( „¡@(РĤ÷JÄ „¡@(0l ̀Å„^₫×ú8÷Æ̃ơ‡zVE#܈2<|́TfÅ\'ùLíyº5~Í÷[´%-mû0Û sƒV/m)¶±æ;/}OAÚ₫OäW­QöKqtjñǾaƯ+öMvă5÷“̣Ưø‹m[(?ĂÛBœh BP Z(0k“¶ü;”o¤ÏWÀEÉá°́ ?/̣©ïe”¯ƒdÏ™ô´ä(Ê^l»x|.„k ·¼¿ÚkÁ[a1ØR;Ù—́eä¾ o©¦y&mß,´åưdÎH…"½´Ù|Ë:E¿fZ¤m§Ñï0nç¶Ü @ÏE×ằEU²VóuŒßÀTø ü|rå8¿‡U!ÅÑ,Nº„…¡@; ¤•^¶³]Ơ}̣ñS¾Ê1ô „¡@?)uyÚi|ù¶)ß©èß¹obơ.?¹¡¨÷ ȧ‹ü¯H½³®}¾“ÀE‰>́×Èî¡̉öü …ëÖùD¡lå₫^,{'ß'sB̃èK̉S™VO@̣íÙdẠ̈x’OëY«ù¶jÓW£ö¤ï‰Å`âKq¤ØZÍ×…†í×ÂiC̉ăàNØÅAuÛ¦ÿ°îHû1O»ñûIùnüŶ-ˆ' -ĉ¦P BP K\œ¼.₫ –½Ă¾?¸0Hö~2맩wÛ}Ê‘̀»đóĂ*àÂÆÅÅĐÊ|Bă"i.xFög*×/¬/Ưá'ÛÔųr±…éϲ­}±sṼ’üBYù€,?–KÑW Ü₫mÅvåÏ‘Ôç‰:°èg̉j¾ê ưÉ₫Ù)˧…ÚXqf›D6)đ/*Ë4êWw]9ËUZƠ₫ªŒ-|…¡ÀÄT ă^>&¦úƯÍÚ‹{µ÷¢=·ü ˆơo« ßÕa_̉Ưô¼Íü÷@KwôËíû6ÿÇßfư¿VôLíËRNO~B~?p /ÔÿTäW -[Ú¾Y<Ég¹ư¡ÂQ³ùúfmI‹fí—²mzZÑ,¾Mé“bk5ß#èǵ>YifÍâHq6Û.Ơë?¬{ʯ±nu­Ú_÷3bñdˆwnL-BP V/¼—Ï¥óơ>¥X\¬]ä·!ưđJđ»Éö'óƯT }"Ë›=¼ˆ_̃Ÿ„¯ĂÓĐÈ.¡̉'÷Ă`¬‹c}í{Á0–5‹'mç÷#¶HRµÈÍ }ÉỈ±´ø5}οăS•×Áfđ[HfƯ©@ú ¼>+7›ï­EŸ³¾fçp²…ÂÆ3ơ‹4J ”¥æ(†¡@( „¡@n+ê]L̀ ~¤j2,̃M½?&ôø1xá;/xñêSˆd~Dé¾Thú‘¢tAí‚Æ8­ A#{•©£ör±»øpQ`ücY³x̉v.ÎZÍçfÚÏKKéXZL£ÿ7‹m\dưl ùı[ßl¾°¶|î„9á X…dcÅ™úE „%bR$¡@( „¡@› ÜB¿ëÀÈ%p%lÚ¹đü\€xÇ x>à[äfé¤ï,̣)ñ#^̀§ .@mÔØEƯOÙÖØ6îĐGϣŶ¯"MóÉƯWSfŒ´S-t·HÉç©”ó§*—P₫y©O£ù₫‰>§ĂàG»Î†M`qø+œ[ƒÖ,ÎÇF›ăo( 4S  Í”‰úP BP µ/Đ̣́£amđ¢[ó äÉ~¬Ê y±êzÍ‹ô½á đBW›T0R(₫̀₫•åo,̣wZVŸgó₫y}ÊÛú¤Ô6?Úå‚bÈë)Ngy[OZt¼Œ̃ëO·ÅL3½œrù£Xy—Ô6‰JÉM-R{^ŸÆ^=¯$¿V©́“’Ÿuýæû.ú} ¶÷¯æ‚̉}ú,¤8ÅI—°P hGߌeÚÙ®ê>å,WiUû«2¶đ „S*{Uø˜˜êW7ë…qµ*̀ßÄåÔ¯“!_XP ëSÜO«€¿¶U¥ÅµH5jV}Ü«Ú_5³R/3ójôfHm½œzƯqè<æƠK c¬P ,ª8îUác°T‹hCÁU ®EªÙwU÷ªöWÍ,‡Ô‹XĂBP BP BP 艱é‰̀1H( „¡@( „¡@( ¨@,@âu „¡@( „¡@( „=S  =“: BP J¥‰VÆËæc`¿Ø?÷xă†¡@½ øÅ›2ơØØ{9†F_j¼e{µUûkoÔè „¡@sª8îUá£y„Ñ̉Ï FpîÿÛy²¥ÈXçÿ±Ø¡ÈçíTüÿû¼ÑBÉv¢|/¤×Ơ?Éï É̉˜©ƯŸ#¾¾:”R×¾S`£"Ÿ¶ÍÓôÿ5üyá‹ÁŸ»µư98ü‡€B¾M¿‡¶A0cë^|ߧ|7^“<íÆ_lÛBÙZ´ES( „¡@( ô·é—7%LÿÛúJáúOơ\ Láađ©‚˜Ÿ¹}ŒÂwàAđŸ'jú=æÛ̉˜ÓÈ_₫ô° ưÁÿmr!Œe÷ÓÁ¾¹ƯNa¸ëp#¼> ³Ă×ᇠM…eÀÎÍđ(„…¡À)¯öR~<ÂOcçi•qè7,B~R ?̃¥|§ñ¥ị́´SÑ08œ°Ó~÷)„‹ü ˆ³:́³½l°|‚…̀æ ïñ¶m­¬̃¼uƒ}̉˜Ÿ&Ÿlû”ÿù í.l›é H³EÊIEß/“&sN‡›ÀEH2(úƯ.U Hj̀aƯ+ eºñZöû©5ÇØv–1Ú£9BP ú_?â’p`ƒPO-ê|’ m3̀tJ‘¦d2₫s/ô/O•Ẽ'>•X1«÷ÉÈÑđ[pañ;đ‰H;¶2~–ql±Ñ«‹ô'Ejâ“ Çơ9úq¬°P pâ#X¾#üP BP~‹ÁîàB ·_Q86‡åax΄Ü^^̀+‹ü¤.–ÈÚV/êæ"ơ†ær +cÙÂtxgÖɃí É¿ă……¡À*O@†tÇÆ´BP &”/0Û=`Vđ#R¹ƯJá/0¸ñ;gÀSÛ­Eai~}`~rÑvK‘|„À'«‚ßƠØ ¾.XÙe4,áÓ -ù_a´ø̉ß#É .²ÂBP`ÀÈ0>•?BP ˜Đ Lcö?‡̣Å»¢œêlëÑdä ̃Eö¥ärw‚OBv|©vô æ>™¸ nÏêSö2~ÏC[ü8Ö̃à“Í…–/x§|_ÆvÀ’¿_’®Q̃@̃…OpP ₫Å<ÊŒÇÔÊ1X®̉ªöWelá+&¦U÷ªđ11ƠüY§/„§3MfJ^èû¸’­I&½N\0̀ŸJ©ƒ²Ÿßµđ£[b̃º]@Kc^A₫‡à¢ÇïiØÇ…ÇöE₫6R¿Ëa½1ù´ÄʼnåÇÀÅFßQq¡c›}.NÏå/‘æö öÛ.¯€¼1‡u¯€:–éÆkÙẂ§nÔlsÛ~½î8âÅÔæ "º…¡@Ϩâ¸W…M8ªToăÍưÿö̀ëAE]ù á₫T­}OËú6ʺ¹̉ëÊÿ ’öOc¦ö©óéÈ×À€É‰`½}„‚¶!¤íÊé®#=fiuR7mïäP˜rsá£wå•7æ°î(¿~ºƠµjƯÏpxèÑë£Ûçx)ÄCP Ç TqÜ«ÂG§Ă €K£̀¨-ʆ«€ ’1?ºå÷HÊ ñƠOÛĵH5{£êă^Ơ₫ª™åz™¹˜W£7CjëåÔëCÿă1¯^jc…¡À`)PÅq¯ ƒ¥ZD ®q-R;«ú¸Wµ¿jf9¤^̉¼†tz1­P BP BP è'b̉O{#b BP BP †\X€ ùé…¡@( „¡@( „ư¤@,@úioD,¡@( „¡@( „¡À+ !ßÁ1½P BP BP ŸˆH?íˆ%BP BP rb2ä;8¦ „¡@( „¡@( ô“±é§½±„¡@( „¡@( „C®ÀlC>¿ñ̃r |4l Ăö\ÇKÓ7èFgÙø\øÜ̃£Ø6BP ºS ưWđ~ùïuÇ¡ÿ4çî”k½ơïĩ¬u—h BqPàŒùÆq·ƠU÷ªđÑ*Æh BêèƠµHu÷§§ª{UûëOƠú$ªt1̃/¢×‡₫ÓœëÜÏà<|Ô©pøfLŸ„̀9c›Ö¶Uǽ*|Ô6Áp „Ó)Đ«k‘éÂBƠǽªư ¡äƠM)¾R–¹§X|äjD>èâ½Ù?û"" BP ˜  Äd‚îø˜v( „¡@( „¡@(0 Ä—Đ{§z/>úƠ»ÙÄH¡À`(Đè‘ú`DQ†¡@( „Cª@<̉Ó BP BP úQx̉{%b BP †K˜Î•p7l߇§aFmQ6Ü Vƒ'à8^„~2uoø3\Ơ °WPçOö«ËéĐoñRX(PŸ~L¡L}£5÷\¡êOTí¯ÙLêG³q£>¦W`̃‹UÄX…é•‹R(P­×ăn7X|½.3j“ÙđĐçÿÂđ<½´3lç@›¿éÂË…ÅÛ@s₫ÚZà/óư‡“ ¬}ª>îUí¯ư™Làư"zƯqè¿V÷áu1®iâq¸›Å‡ xaÿ˜ÇBaû“ú>đXÚ+û }ªÅ`—Óö¢ƯÅÊ1Ẽ8µ}àVđ° <aí+Pơq¯jíÏd÷́ÑëCÿ½°ºçÑÍ6acă;?sâ?g³î#E¶½[s?låùxGçÏà¬Ü>JÁ¾>÷5YÙÇ 4ÜÁ¬Đn»w¹´ĂÀqŒ;ÙRd¬»4Uî÷‚ơr'l ­̀Çàö]¶è´é# {@9ÖäÛôp˜ÿ$óăÖyẦu±}¸’Ÿ'É’¥xR÷kç@IDAT{JOHH—€çÀ¶÷@niû4Ÿfmi^ó¾¾Nô»B±á«H/ơ°̃×·¡_?ΙôÊSÂí+ËcKùNLÛåi§>¢(ĐJ?êä"ÂăÓđø‘§—C²ƯÉ\Ç<oÉÜv7X̀/ÚúàùÄmƠ¶Ÿ€¼~çBXû äÇ»”oëÿ́™|äéöJÈÅNùJhÓY;OÛÜ´­núí…åñ§|/Æmg ïyÑèsüÆy2h-ÿ6*̣w“~ O¶ûØ8· )¤ùî”5”}NÛ­`ßü¢>Ѭ]ÿíiœ÷ŒỒ4Sỵ±¢Ï¤ß£Á‘駙ƯCƒ¾—…×ÀƒEÙ8µ4O:'–°ÿàö÷Ă"°ü¬Û ró¢]?îưÀ1̉bD?Zç—äóñviưó’¤Ço³z³i{çS¶¼-ÍK?^T$;ŸŒu.@äñ¢́kă›pcQ₫i?Z̉%Oû-Î<¶”ï4Æ´]vê#ú‡­X›F__×Â&^¤ÿ ´Áă«Ç±×‚Çé`MĐ̉d ̣úñø¸$x\>ÖƯÁ›×=&zN˜´·}çƒ×ÁcàñÙă¢ÇCOÉ'óx¾rü½À›4n×j̀ÍiwAàBèà¿ ™ŸMi»„u¡‘­BeºYs,yùóOv9Ëê“Ï!µGÚ\u+Ó¼÷Ø-e_–ĂjV _D¯;^½˜êG·/‡óp`ŒëC~áéAWs¡aûG!µ_H>Ù²dl |t¬y µîê"ư#i²F>̃J£ưO…NÛ/¶u{OPóC¾™ƒ²''Û½{•̀E‰ñybifé¢ÜÑ?AÏ:75kÑ#]´EƒOôá¢-iEvÄ–á¯mÀÊ#5£ûDư·*Ê)e‹r£ä/T>7€'YO¾ÉZmŸ·¥y¼¹pæâ‰ÑÏ'Ûöå¢ÍÄư~œc¡-Í'Oû-̀<¶”ï4Æ´]vê#ú‡­H ³N÷5÷J¸…dï<6xHk´ù ơ>˜Ư…íH:–4›öc8ÎLa.$ößÁ£`Oæ…OÁ]°¬Xà1øh5ææ´ë'ÿZù¡ÛL{íÓÈ×c̣_áYđü£N{ƒc̀S]DƯ 뾓 llÔ±̀Ø[5ïQöe9¬&|±‡M<ÎbÊD^sÓ?¿¨óBÓ“öGH³óøyhp̉Ô“†ö đ?–;¡l <Đk>)(ÛXí©¿́Íà@đ¢=™sxÜ̃]̉œÇ/ ·b û9íÆá‡7è»2u?Ëê'¿3¨‡ –Ká ylwHZY§©'åUáopœGÂÍ›uOfÎùjx5x‡ï4¸÷ Ÿ1ỎúsξṆE“ci?MFî8ï´/}m´£m±y$¡@(0€ \™Ǻ¸¶Ï€ÇZùÎxÛÓ´¥ Ŕ·€wy‚À~{Ö̀‡«ëuĐ~¡Î0/ơÿnđ§ïXYç…ÿÔ"ïI+Ùưdl—t̉܆¼ Ù ´{ ơKéf#-£ÍÅ[nߥ¶÷D¤5o2ơ§€Ú¥₫êŸÆlư6íë`ygX½È_B,m¿lªÈ̉¼-ÍËÅÅ~ O9*̣ˆï+̣ÉW>Gû»(ë73®2Ăcy–ĂB*Xg¾®^“9MÇœ×QçqơĐ¬Í¬Ç£ºëI=ήúY<Öüró¼±mQáqƯ§»À EI£±¬÷Øẃ ùB‰âHÜ«‘¶ssÚ=₫&kåÇ>Æñ©Ô¹”>Fù#YƯ!ä÷ÁEz4éỲc°çSE¤c* eÆܨE‡²/Ëa5+Đ/¢×G¯^LuÏ£Û—Ăœ8x €'álđ.q{đ3ơ ®yP´||>WƒuǶ1Xö€ëlºhơñ»–|x"™gƒß @k·ưÂÑî/-@̃Iy*8öß‹ôR̉IẼ ́Y@û*›}=ihçƒeq£¹å“à°" éË@K±:wًؘ™ơÉ÷¢E}y¼…¨_ÜvAx7\ n—NL)µ¨Kc™ÎZp7©ưÏç÷bQ^•TKÛ/;Zœîõ–楹áVp‘yèH±M!¯m ß÷«}V†~3ă*3Œ1–çh9,¨R´™†S'/‡3à&˜ ¼X6‡yàăàë0Ư,i´ñ¸æ1ËEÇđNx^ ÇoÏ=Ă>l2.>›=§mÖíWŸƒ=ÀvÏ5Æö&h5¦±ë#Y+?ö¹ ¾ ‹[(Ù…”=f.ËÀÉ 7é§I=ÿ¾æƒ]Á¹ËV6¶êYf́­÷(û²V³ư"zƯqôêÅT÷<ªx9ü')Î/ÿƠ½¿¨Û¨¨ó`lM2n{{Qñƒ¢œüå©}ù(6I:m?¼Ï“•ö3Hcº0đ¤uGQ÷~̉dŸ%c¿´™J^̣vĐîûx̉đÄå-ÚX±öưL³ÛI²©ḍñv lû/ Ùjd¬»±¨Hñ,›:d©'Ó4F9Mû´Ơöy[— í]û\̣¡EƯ¯HƠX[^ûz²î7Ëç̣Ăc[öÛ<#ÁV`mÂ÷ơå[ 毃´X˜ƒüaà Û\4́É\€|VÛÍ oûZw üä¶?…çaɬ̉ăÏ×á p;y€dÛ‘IOmï%ÿµÔ@Úl̀Íi{*ëg¶•Ÿƒhw¡óg;–̀y^Ʀ^̃€²î°ÎEÇÉàÜ,ß [Ă·àqđÜÖZu+Óz‹Ö­e_–ĂjV _D¯;^½˜êG/‡Ïá$ÅùæÂá Y]ºàM¦fƒÎL̃ƒ®ï–{à÷ º̀Qp©₫¿|Pư’uÚ^^€LÆ“' Ç»´Á²qzÁ|¤“fZ€Pơ–_”Ûè A?n;R¬‘¿ Ä[)'›ŒÛI3[†tUûÏ‚'2·9´Ïeäóñ¾Mù‡`ßƯ é₫ú¢îVR÷S³í×ÏÚ–%Ÿæ• Th–æ°å%Ày[w9¸đKeëV~³cŒùüR¾ßæñ ¶iâ…ó‚°X“é̀Fửàñ§]³o¾ÀÈ·;‚¯ó,?'ùWÀª`¾‘é×KÙZYîk¹™ŸF}ó:µ?¯ ï{4™zzî ë\t¬ËÓνü{‹ÜOÊÿ»5rµ(„ÎÓZĂi>~ʱIGÍú́…¥Øó´ăv2FºPơÂz¡bĂ“ó EÙdC°îB ™y7Ëúéï²6³ëơ~„§™ûi¶{ñíØé©…>¼eƯ% Û™4]€Ûv6œW@3Kư—É:ü‚¼Ûßo(̣–Ë́J]2O¶«o+Û‚Æ!ù²ÿ)àIKKñ¤ö”EÛàkQHæIơ6°Ÿº6Û̃qS›sµ¯Ûü’½†̀ `ựE¥wđ.ă´₫^đ΢ù• ß̀¸Ê cŒå9Z ªT _€Té·™/Ÿ ÏÀ&Í: h}¼?«ÙqU÷ªöWÍ,‡ÜK¿ˆ^wúï…Ơ=^̀a˜Æđn\?ßarÑ`|>A˜Á¼k·"4º³ØOñÂ{±«đÑOû-bé?|Rú-hö¤¡êˆ×¡OY?Tµă>đçû5¬{ª>îUí¯û±/|´Fo†Ô6Ú£7ëCÿ½˜WƯóèÍ̃ˆQBÁW`̃‹UÄX…ÁßÛ1ƒP`0đưÚ‹k‘ÁPcÆ£¬ú¸Wµ¿ŸÙزßï^N€]S BP BP &±™8û:f „¡@(Đ{v`È5`ø̀ƯÚ›pp Ÿ¿Ç5Læ£L-M¨ê9ï?;H¶1Án9H·«ûÁ÷F<jS°aêæc§2ă1¿r ‡uWƠ₫ÅR÷<ơ¡@(0½ƒđ^¬"Æ*|L¯\”ªRÀ́Ø \„¸Ÿ\ˆ̀¨ùư‹“À/fŸYäÿIú4l Ăb₫đÇwÉÔ1go¾º/¦cô:q́±ĂÙHmƯ–gwÀÅD\X©É¬E¹ƯÄmÊ´»m£~e_–ĂjRÀ_ê BP Bz¸÷₫bƯ] óQ¶Ư|0 4Ïă—OC&Ă°]4MÄ9³‡Ú|ÍúÔ®ÓÇP‹2Ñ&Áh{|Æçë£ÑåÀ_j{ƯxĐqûügcË®RŸùÊ CPvNÎß9‡%m[é?qŘ¡@?+°Áùă«à]Û‡ÀŸÊ~9$óă<₫S>ÿ³µÿ‹hs(ÛJTü ̉Ol¯O₫Ïà6w¾ ùd#å-ûÀŸ÷£7{‚ íy2;?¡₫¹ßÚäÏ…Çáf8̉qç|̣úѧ?å}*l —ƒORü)óA뤯-;\`=×ÂTĐôóIp¡ô,8ƪ ỵy¸|²ăO¥çÚ¶;çVû`q|₫Üw÷Ă!7që`ß—C«X–¦Ưs’º¯{‚Ûư´íÁưº8æip=̀­ö¹±₫’-GF¿¾Gv)̣ï%­â£¹©é¯LÓÎm4”}Y«Y~½î8zơbª{5¿¦sïûàØ<ɦÅÈäµ{À9ÿǸØ•ǜp6Ø~|N-Êw‘zà-÷ùu<ƯæqX´4û‹ÔŒ̃U³ß̃.ä×8

¶;fnŸ¡`½ü6o ŸÆù>yc9¼Àđ¢Â1<‘ºƯ;A;,;^ÙŒƯ9Ø₫sĐßåEy©sOqßM̃öo‚'K·ñ¤X¶OQaÛw†ïŒê¯ơ:ô{{Q¶nds>eúm>åø,wjUøèt̀‰̉m&ª¾f̃ ¨{%éEplÖæ{ú*HïO/Ö¼˜\ô³xü¹f‡d;’™ ^z¼Ù ´Ăqđ pû©ĐÊôí1pÇîeÇưdÖv>ù²̣QäZ”;é;…m6ç? ¼øô8¦éçs#¹Ñ?û’\R”/%ơâ7™Ûßê×îœ/¢ï±,ß+P©nÆ–̀ m릀ÇSÏE+Á&=ʦ.ÿÊ\XîH9]TçÇĐ«©ÿ,8öáĐ̃ Çg}}’-HfOX ‡¿@²UÉèk2, ;Ă,°|ls1̉*ă¹;Ù™d~S. ư$mÖ&¯ß)›’ª÷$È÷¹±ZN¶·ÓÏÊẼ׺Ö*¾Ñÿê¯LăíƠ–}Y«IÙj̣n‡G%˜Ê¢àEÿÀƒûmàÈíîÈ+È¿¦Âu°.< Úq°xRŸ¦B¹Ï—©Û‚í!™W/Ô=Ø6²¿S¹cÑàN¿Æ±¤…íÆr¼‡t‚&;b›æăÌøû đ-8„÷¾ö€²éc^ø ü¿¢Ñùz™Æơh·Ă^#¹™frß́íÚŒê¿{1Àv¤î/ ’~ES$¡À„WàÊLt¸5:GpZ'sn¶ÔFûëh2̣7ß—ê¹$\›µÏL̃9”í]å6Êù¼Ÿ ÿ¬Å6ÎùPp¡đN8 ^€å!-ïV¾憼ÅËëR,ês8v2_?Æ¡­ëĂû,æ~u;_ç­öyѽí¤Q|moKt¬¨#Ú^*à‘ëaaøxqº ¿†Ü¬ûYÆä×,:ü’ÔR²È,§C³>?¦MKíæ=9ữÂXvC[u4™éƠ¤úü=œ.Äße{¯‚môẺ‹Á…Á5àâ&ipù¡l¥ưd4ù«ê¡¥vóèO¤‚ ¢£ ]›QưÛơưB‰¬€ïÏdéấ^*¼đKåÔnß»S¡Aê{Û ¸Üö¢°mQñ=̉·Ă»ÁcØyđ4ø´àƒP6QÛcÏrŸßW ü¤ V²•Ûqxô9 &Ăw!7Ư¹Í\Œ¹¬Ÿñj̀¹́#탌ºnŒ¼¯ç¸«aŒuÈï eÛƒo5Àău3+Ï;ơû™ÙÁư¼9œÚ}¿6¤́ë!ÅǛß'èăkàÍ°ø([£m}½¨÷̀YgÏ{ÉÔg_Hú̀E~Kđ¼z4Ûçåü’-‘2-̉FñµèMƒ¬À,ƒ|Ä̃3\pxÁ́]µÁƒÑu°äæÏ;9‰ÅÉ¿¼èàƯ±ff?íÁÑ䥿i›ä#5xđ ÷¿àR{9ơ€®-:¼twßÀ©EƯE'.P₫ §ÀËà àÁZ<Øk¾‡<@ÉBk6·û‹¾ùAy!ễ[ ¾ù`-h×fTÿvưG¿P`"+p(“÷ÂĐă‘w¤ÿWÂàƒàEä<đqx=üÙohđ‚r/XShsÛK@sÚwÀ¶[‹tỏü…¤¹ư†‚}ßÆäṆ̃™àÁUŸ–W-ÍÇøà Ưöûa.H6Œơ»¥ỉjJ©-ÅïÜÅư6êơíIg2|\œhŸÛô¡¥xgTÿQ/£wÏôë|‡ÅœO™~›[9>ËZ>:s¢ô_›‰ªï)ב-hs€‘Oƒư/Ø’]OæĂàÅ–í ƒ¶+Ø׺[À »Üö§đ<,™W’ßn·“çÀñç†d+₫©ưÇä½xÔ¬ßn$7úgÉYÙcơO‹r'}?Á6^”:¦ÇJYêu0”ư|ºKA›~i[/Ư†Ă!ÙXsk¬Œ£ËÀØŒéÔ"?…TSûÀö{ákĐ­mˆÇÊ`R̃G› æ=Ï$›—̀ÁưêöçÁ& ©ÉÏGr£–!qûÀ××]EÙmƯ·ƒz¶…æ‘să­¤w%øzIç÷Ï‘öÏUäßZ«}¾íׂñ¹í·¼±º¿.Çóµ0V|tihú.Ó°c›•e_–ĂjV _D¯;^½˜êGÍ/‡éÜï@Éù¤ƒ‘«u7ZÀîû4ºc´AÑöé2 y@ó.Û¼ơ™…ú_}¾Mª9,maĐg̉ºÙÄ;‘ÏL&}¤mÊiºCÓh>7Û­K,ĶM ̉C©sçâœ4u¸¬wî íÎ×9Ø×;uÚ~`ùë°Fñ¶4Ö¶¬êëIX¿ù¾Nmƒ:Ÿ2ư6—r|–;µ*|t:æDéŸ ó1áa±&Ÿú¥aæ&íªí»d£ê¼€üu“6«½û́±Ø÷s3Ów«öfÛÍh½Ϲ‹RV—v̀8½hmecÍy¬}°Î_ÖbơJÇéƯºnjç=®ÆÛ‰yƒÍó°øÚ<# ₫,OƯ®àk1½VÎ&ï‚!·Ù)¨ÙZís}Ọ[̃¶ÛrƠǽªưu;¿ ±}¿ˆ^wúï…Ơ=^̀!±™'À9Ÿ…?å£Iµt|ù 2̉Âá·Ô¹½ư~̃a²|5¤ẽçDê½;bŸÇ!”Ü>-@ÈÜe´ä ·1+ÁŇí)ÖeŸZ8¶¤ ü[É{ÀLóñÀ™̀¸ơ³eª mgb́Û:'ç–üŸN^ÛlwAe|'ĂßÀºKÁæ3đ¸ư}`Û %Ư诟X€¨BïÍ}Y¦Ó(ÊÛ[«F|RÇÖ^Ö¤ù`đ=¿Ië®Ñ:  ôÓûÓbă=·xN9îUí¯ßơë‹øúEôºăĐ/¬îyôbù[P¸̉¼\œ̃ ỔpjOéF›G. "ÿ$¤¶sȯ\´›x‘÷qŒ‹a Hæ8ùÄ»]}ºÙ°È§1¼`w‘³?̀ ̃ ̣@kư¢̀EÇmàvúHóY†|²ÉؾWª ơ‰„uÛfu²«Sy»ưŸ‚£Á9kå¸íóüVí}`múù)¤»J)^Ûr₫@Y+kkŸ²₫ö‹ˆ*ộ̃}–̣F‘¶ËÓN}DÿÆ ,KµwƒÓû­q¯êj×ÂƠÏàCƠ¹ O}¦€ïÓ~2GÀ¯Ô×à X~¼KùnâN>̣´±m äb§|›Ũ%§U¢ß^XÊ÷bÜ:Çđ"})X¼Ÿsàö µØ8ơ™¯EŸAmrN+sœ››V…´péÔG̉¶•₫ú́÷₫éư—§ưs[ÊwcÚ.O;ơưCP 7 ø> ë^üx—̣ƯxM>̣´±m ¼¨Ô»l©­\_g¹î8ôß‹yƠ=:÷Aø†IAx/Vc>†i¿Ç\B~VÀ÷k/®EúYƒ*b«ú¸Wµ¿*æ8´>fÚ™ÅÄBP BP BP ïđ3ôa¡@( „¡@(0¶̃´ó#Œ~‡¬Œ¿̀ç÷â(R?rĩL7ơœ[å¿Wâïz BP` ˆÈ@í®6BP &æÀ¯?ú°, ₫Eú¸E฿₫:ƯÍEûạ̈x¿„g̃_¶ªẪ“ÏA,>ªP3|„¡@ÏHŸÁ—ϽƠ‡₫Óœë»îyÔ{ø†IAx/Vc>†i¿·‹‹5Á_á˱₫¸î‚;Kéí”…n<Ís˜¿îç/̣ùóåaƒ§€ï×^\‹ 2E\ơq¯jÍf‚ơ' l‡ÇtCP ˜@ ¬È\ÿ ^[đR—ĂMpœ7‚‹ ßÍŸư~bñÑï{*â B¦ ¤x¿¬úêCÿiÎME© ¡îyTb¸&„ƒđ^¬"Æ*| ú Âcû°l\¤.6·«à ø üƠf'p?vơA8{P'qụ̈h/®E†]êª{Uûvư+™Ÿ¢—©Äq‡NÊ14z1tèrºîUû›ÎyV¨{ÙP‘ B Â{±«đÑBƾṃăl Gÿó:ø¼–‡a³Ư™ĐéĂ6© 8߯aƯ+Pơq¯jƯÏpxèÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂÇ ́ï¹ô]đà»ÿ{€_ f›—ÉùôƧO߯aƯ+Pơq¯jƯÏpxèÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?îo×Sù¥ñk`/X &-΄€ImâC:_߯aƯ+Pơq¯jƯÏpxèÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?íoÿqßçÀ [ÀD¶C˜ü7'²C6w߯aƯ+Pơq¯jƯÏpxèÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?́oÿ[øÿÿ©ß±°Lt[ ‚%±u_÷ÿ6 ¸¿ÂºW êă^Ơ₫ºŸáđĐ/¢×‡₫{auÏ£sˆ1BaP`̃‹UÄX…ñÜß³2øÇà^8^a£ |™äÛ™óß.†§ 'ơăiaƒ¡€ï×°î¨ú¸Wµ¿îg8<ô‹èuÇ¡ÿ^XƯóèÅbŒP`„÷b1Vác¼ö·wîưÿgÁªăDŸëw`₫ ₫Çö ÁÅÙ“à?"̀÷ù³”c‚bî»°îÈß)ß×ä#O»ñÛ¶¡@.vÊ·±Yå]̉ØyZå úí…åñ§|/Æ1BP`z̉û/O§ï1₫¥<¶”ï4ª´]vê£×ư—`ÀáxW¯ñ̃Kœ₫â×Âà¾}®Hóưl̃ˆé‹MÚËư£<ư®×z¸ŸÂºW Ñ~ëÆkƠ₫º‰eÂlÛ/¢×‡₫{auÏ£sˆ1BaP`̃‹UÄX…^íïÙè3à¯: ₫‹°Æ øThk˜|rÄD P êă^Ơ₫b'µ¡@¿ˆ^wúï…Ơ=^̀!ƆAAx/Vc>z±¿7fká·°R/à1!öGÀ¼˜›ßÙ.‚ôøV®Pä'U÷ªö7QöCWó́ÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂGûÛŸƠ=î„­êhˆ|ï̀\~6Æ|–£}pÿǯ`!V4U÷ªö7t‚×1¡~½î8ôß «{½˜CŒ ƒƒđ^¬"Æ*|Ôµ¿ß„ăÛá°@]ƒ ¡ßÿcNñƯ˜!ܱ1¥Ê¨ú¸Wµ¿Ê&:̀úEôºăĐ/¬îyôb1F(0 Â{±«đQơ₫v±q4Ü ›Tí|Èưù³Ä₫̉•Ă BÆ T}Ü«Ú_ă¨£vD¿Ø „¡@( T©Àæ8û+<«ƒ_¦k_µéz#øEư°P †V~YơƠ‡₫{auÏ£sˆ1BaP`̃‹UÄX…*ö·O=‚[á 0L63“ñ$¾ ê¾y範a¡@(Đ\ª{Uûky´Ô~ ‰CP &†[0MŸzø‹L^¤Ÿ ½²ÓÈÿ—¡í^H,h¡›߇‡ázp~<ê‡à—ës»‡Bù"æ>ê…Ị́cä×£ưü1úDs( „¯@ù€iy<¬î8z5¯ºç1û&Æ QAx/Vc>ftÿÎφǀßơ¯§g0vZ€¼™üàÏƠvk₫'̣ËA}ƒMa |^$ù"ÄÿZîuÆ!äï‡çáµĐƯJ'ÿûyX( 4W êă^Ơ₫G-/)Đ/¢×‡₫{auÏ£sˆ1BaP`̃‹UÄX…Ùßoa£ÛÁŸØ}ÙŒ8¨h›|̉Ê¥£êÄ>DgµƯ¯ÁF»m{em.@NÉÊ)ûN2úÙ;U´H¥í¡íÑ „£ T}Ü«Ú_́§6èÑëCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG'ûÛ‹ä“á&ب“ K}·¥||ü…~iƯ'₫£½ÜV§àǬ„ûá×° $Ë ÛP©Ïôdb~̣~/åĐÿđĐNƒä₫ưg5²nŸ>Ræÿ.™ưßÍ/å\̀\w½T3ÓLÍ +ĐÇ}ÔÎħ,çd># „¨ú¸Wµ¿ÆQGíˆu‘.dBP è?ü¨Ôv°&̀Öaxnç÷ ¼đ^΃µÅØP‡ÀOÀ'.0N„íA[.ûÀ¾đ¸–‚²-D…>g ~4K_.B>OÀOaCĐÇ»ayHö^2y¼N…ç l^¬üŒañrcVö?™²(ÿ1«o–}5 .€ÂBP zúeƠWwúï…Ơ=^̀!ƆAAx/Vc§>́ÿ3p!áSFÛ7«»—₫gC£‹ª;²̉ÛqvͶráà¸O4ÿ—È“°œ…ÂV%uQđÍ¢œ?É¿„î?AÔÿÎE? À§`x\Ô$û;™ăaep[=Í̀“}Ö+:øÄÎ-~<í)Ë]^2ç´×K¥È„¡@3|_•iÖ·ú²/Ëa5)O@j6܆¡@(Đç lK|~´É;ô>)h—¥é; \$|ª0Ÿ$${̀)àÕÎ >í¸¼˜Ov=ÇëKƯ>áÑ~9Œüu‘đzøøñªÓ }äë¿È¯.ź§-24ü»XQ{OÖz+yŸ¶È‘ ¯§á=àâj,»”kƠ)ÚCP d:}ô>ÈsØCP ₫SNị̈ùÄàpÑp,l.Dn…5ŸfäfÙÑ0;< e³ÎöV6oÑè ™}!ë‚‹„à\Đî†ÍFrÿØöä‹£¿Q>¸ÔưÊ_8.µ•‹WRñùre”CP &f¦ÉÄ\BP z¦À5Œ´>œ~_ÂS¹h˜{ci£7Pö£^€Ạ̊Â}AH¶¿+qmªh’º˜Đ6MF₫úDăaØ·¨;ƒô6x?¼ d‡‘ñ ̀©"KßB̃8¿/fơ²ç•Ë4j,Ơ]Oy2¼¬TÅP †NI–c°\¥Uí¯YluÏ£Ù¸Q „Ó+0ïÅ*b́Ô‡ư«´Upæư³a2´k.ZŒå>x/¼¾Ö¥§.>¼À÷"~#x\ >%Y 4¿ÉMÿ}âSŒÛ`kp¡ókx…dŸ#ă˜útq“̀§]/À×a“‚ƒHíëÓ Ù?Éøñ±²M¢Bÿ{””/ ~J“¶¨BQ|O•éF›²/Ëa5+Đ/¢×G¯^LuÏ£æ—C¸†FAx/Vc§>́_µùDư3àEøGafË́g,GÀ³E₫IR+ÿˆ°‹?æ”æùẉùS“ßR>´À~óƒ¶&\Ö¹˜ï„Ü\tØvj^YäưÊ‘àS“4₫cäO€ù 7çîGÓÊ6OĂË MÊ~?eÏ&mQ „£ ¤÷cv£Mî'å»ñÛ¶¡@:OÛج̣.ùø)_å ú́…¥Øó´ăÆ¡@(0½ù{0å§ï1₫¥WvU¾mÊ·̣aŸºle·û4$-@|̉àGV„Y¡™½œ†üÉE³~ê}R±X£ê^ j̣–&íV» rn¯[uÚ¶8ÿU„ïP`HǺ<ífZ¹Ÿ”ïÆ_lÛ†IèIñÉÄß¡Ơâ‡æ™ ­û¡™n= $ úXt¬ËÓnÂÍư¤|7₫bÛ6HBçi›Ũ%?å«DŸ½°{öbÜ#¦W ¦üô=Æ¿”âÊÓN£Ê·MùV>́Ó ó»!~Ÿa¬eû~Ñ|rCÊë2ZC«_»êQ8Ó s5¥µ¦«‰B( ä ¤c]æíæs?)ß©èß¡Iè<íĐE%ƯóñS¾Ç…}öÂŔyÚ‹qcŒP ˜^ü=˜̣Ó÷ÿR+O;*ß6å[ù°O¯̀»ø~ùÚ;ú~G¤ß̀eÍ̃oA_z? ăB~Q ẹ̈´›Ør?)߿ض ’ĐyÚÆf•wÉÇOù*Ñg/,ŧ½7ÆBéÈ߃)?}ñ/¥¸̣´Ó¨̣mS¾•ûôÚ–gÀ³à"X»×ƒàx₫ıOAZÙr4~ÜŸ@X(0‘HǺ<íf₫¹Ÿ”ïÆ_lÛ†Iè́ßO¶ÁÜÇ ưXÄr>1øÔcC8 „G!ßç₫ǽ ¬ÿđFŸß… ë^ü=̣ƯxM>̣´±m ¼ˆ ë­̃Ѻ¾ wÀCp ø»ïÉv'sx¢¹6‡²ù¹à?Á‚àÂaO¸ü8–ÿơwSx%8–O’½‰ŒOQæ‚…`Hw |Ó}N„d%£_Ox¿…I 5Ó6?.àÇ*ïÚ- üL¡̃GÑÚ9đ₫‘ÜŒÿñÂeWø \7Ăăđ8· µê¤^ê¦~ê¨qAˆaµ*đc¼¿nKÀ#Ë@ØL3} ö"ÛƒOÀ=^ ï%lpđ£†qí58û+"­YFf5ÙĐ}Ưqè¿Öjk€í×Â&׺˜Đv³ï~?ăpđÂĐGđù<ï¢Á“Đn°.x2Ÿhè#™wĐ~Q>Oj,.vm`~HæÉÎ…Çvđ:8 ®­Æ<ö‡ÁäGà}ĐÈ “]À̃ “ Ss!e,ÎÁ‘úR‡àeÖ¾ê¥nêç₫WOuU_uVïA2_[eú-₫r|–;µN}̀ÈÆ4£ư½©̣E¸…Ơa"›7{|ÿyS©lËQ±?¸?7(7F¹/ؘ¨ÎíËÈ/(_÷eº™EÙ—å°èÑë£W/¦VóH §'óÄá6¯ï< É<ù\ß|Ñ‘ç/¤Í/q&ó¾',‡Âl07<o†dë“9.>Ă ]?€ ŔS(·ÓˆcÎZ+?+ÓîÜ—¶c‡¶+ư½8vaôú·î) ¾ế¯̣¨û ˜¯­2ư{9>ËZ§>fdŒNc궿7(₫øûøôv˜ˆæMœ³'âćpÎ1§ó†p^ă1¥N{cÅXµ¿±Æ‹vèÑëCÿ½°VóHñóeø‹VnăÂàø$äæ]h/₫̣EG¿—¶ådy#~”kKØî„YÁñ}Â’ŸĐ¥|‹‹!ư6ă9̣;@«1]€ü$kågF ^˜¨Çe`œa½S`U†ú œsönØ©Ơ{q†V¼a1vêĂ₫ƒb³¨Ç?åñë`X&’yœöéóO¤Ié\½áø§![¯§Ơéqo¬øªö7Öxº=¿øœĐBŒĂä}ªlù"ă…º TNíö½;¤÷Q·lVï¢Ă'"úy~ Ûƒ¥:^€%Àï¬ÉüÈĂ—ÂJ¤́÷…9 æ"u!s:´“æ™ñOa­ü¤>í¦‹Đñ¸ü˜Më^¹ˆ¾_'a¡@ xÓㇰøÄɹà]äOÁ 0́ö"ü<|qØ':æ羌k¯ °£cí)Đ/«¾ºăĐ/¬Ơ<̉iâ¢áåpܳÁ̃đ8l~„éă ¿Ma"ïExwÑàE¹wVô÷]ø¤ƒœ³zª ]0ÎLùj¸lwl·= ́»́.ˆôëwC<º̣{­Æ<ö!Y+?^<8?/,æM4I]PƯ‡4iễ*°+ĂƯîĂ~µVïÅ~‰¹;ơaÿA¶Y ~ ø>xŒú+xḶ† ”a4ÙWÀÛ†qrhNë2׋&Đ|ëœj§Ç½±b©ÚßXăE; ô‹èuÇ¡ÿ^X«y¤È)âû^~JóiĂađ4ØæŒƯAó˘Öù¤<ï…ûÁ;…ú<6ÜÅ<îù„d7øøÄơ ¸~.T>Ă¢Đïæêka–~4âk¨ÀZÔú ë^t¬ËÓn¼æ~R¾±m ¼3Ö[îe¸CÁ_–ê…ùÑÇ̣ ¥D{A÷8xï’zÇ4·Û)œOç•äß~ÜcIđsÚ§Áḿ­dÜæ̀T‘¥+‘3/ơ>!{;¸`ơóî̃1; ܇o„W€Ÿ/¿v¦Î8zeî÷OØ®́Ơ 1N(Ц¾gǜ½$›̀àûhUXvËsƒïó2·Rwx ¼@ûƒúxs)l°đuÓ蓃5‹ˆ6¨H´̉ËÓ\wä&?å;r0Fg}öÂŔyÚ‹qi /î?KŒ´ßÿ€UÆèWG³åpz·ñ\¸¼˜y¶Í‹•ƒơ¿‡cÁ;«^”»èKö;2ökdï¦̉qæ-½ úÜ?‚3Aÿ”̃Íu¡²/ä¶ ưäăæíuæƯ?î'÷W?™z”é§øŒ¥ŸåN­S32F§1 jÿ—øj°9́ _„àl¸\|<¾̃ÿ¾·O„¯Ăç`7đ=í“ ?îơ đ8ç±¢*ó†…‹ư¸­JÑ̃ùñIqܨ©FïN{cZµ¿±Æ‹vèÑëCÿ½°ºçÑ‹9Ô=ÆN à…¼O΂·A£'rëQŒ‡¥ˆw“¹Høø„Có—Áü8ÇTHæ<~ÁbEe' Øæ2X¤ØÖÄ“Öópˆ̀TíV¶€—wl›-ŕS·]̀î¯~²Ax/Vc§>́6ă øe)x-¼ |Jë •/Áwá'àßéfÂSä½qĐh_Íh‹›°ÁR` ½z°BîÛh½oº ¶jƯÄ2ôÛ6ºàöI{×øEđD`Ún¾Ư~úmd^˜u:f̃¿ñÛ¯u³˜̀ o€×v |®·€y’¿{$×\lü>̃íß„ì…ÂÇ`+ø(íÚëé¸>L… ™ẁ>.´}á­àØ›Â`0®ñ²»Øư »>ñ¸ÔOǦ^h¾ƒx,r̃ÛĂ÷ái˜{ýJæÅߟa¾ ½;óø%xL,›óô)Û‡Áù^e{ƒ:ŸÿĂB¡R`".@æ`záëÅcºn'ßÉ6^$‡ÎÀ˜y\cï£xlù¢%Ï·³€iƠ§U[>N³|yû•‰5ÿøÀü”5/Ø=0ßëÁ$¸ úÁÜ~'ă]đ06¿†²=BÅy°f¹aŒ²wÇsô;>«{’üá,ø:́»À?a¼̀ư¤&a¡@(0œ øÄ÷Ûp~‘D:£ o¶èË㤶(‡µÀ'äƒh'Ÿr4Z€ø=“ë|Zöv8’9÷ ᘠ¿{a¡ÀP)0 ûö`₫«Á^L×mø̣EKoƠ–÷k–¯z{‚é©G®‹ •™Á;Œ¦‹ñ´1¸1¨ïOß‚E@s±ÑÈ¢²Ó r?²ơ4z •Ç˜F…w } s&œăiă½ŸÆsî1v(0‘¸†Éº`ÈŸ̉ÎÈü=̃oœm¸ù«À‹̣ă`m*“̣ÜàÍ©3`kÈ ÿMÙ'̃ŒÚ\¤……C«€;eÆc²åÚ¹ë$Ϊư5»îy4wê½ûă]|µr±áE÷à¶å Ù;Èœ’ =N`<ăû¬[°,i2 ¶o›*J©ß]9¶¨ûi³ïg¼›6ừ ~ÄÁ|z"Dö%S‹̣Éh%ếïIk¼ÍưdŒưdjS¦Ÿâ3–r|–;µN}̀ÈÆưûO/đ¯‡¯Âà…°ïÛ—C2?>tx|öăP›C2·ơ₫*`~AĐüب'răû‚æ‘”·<'\[‡ ÑM ưzcEû Ü#₫ û67ĂSđ'pn~o·¹¼ˆ×~Î;ÙidM̉#áÀ¢ÜJƒËèóVøècqø9¨åưp0ø₫̀'Ƽ*Ü ‡Ü¶¦đ,¼́{.„5V@Ë4îÙ^mÙ—å°èÑë£W/¦ºçQóË¡'î?À(êô|ÖFöz*/jÔĐƒºĂ[]T_BûÙ bY»ØöƯE[» éÿ<|ªØ.OΣà )·ÉŒq“¼rœ̣3®"ưdjS¦Ÿâ3–r|–;µN}̀ÈÆưûOt\º–Đ`ÛËÁ1\|L×À9đ{°Í>ö}ÆoœÖ¹è̉û=³èï0–̉ÇÅÆÑàÇVÏ7\Iªockdo¤̉yÙçXpü²]N…íê½B¹1Ê/) Fe^jœLÙ—å°èÑë£W/¦ºçQóË¡gîßÄH¾y¶{—È ó^[; ©å¶Â+a~Ø î `fĐ\€œ ,s–¦́"Å׌O@´ïĂ3đQđî| öw1² < Ÿ„Ià"h]°ŸÇă“À¹ÎSÀÏÊàö¯‚·7¿”o5Oû„M<̉Ä ̣dw|=¼<ÎxQŸÛ N+*-@\œL+Ú%¿¢̣8p/µ7U\8ÈA:’Y<Nz'<—€qº™¾·u7ƒ‹Í㵋4€7t\ˆhWçá[đ5ø|<~ư´±4p²ăHÏÑE†ă¿¼(›̀ ÖM±P²?R>Œ÷àbét¸´€₫W‚à>ø5èo›^u)3}ÎJe_–ĂjV _D¯;^½˜êGÍ/‡¾sÿZ"̣$ä‚ Ÿm!‚ón–' *lœx̉Yf®ÂaM>Ü/î÷S¿Ù ¼«ˆ±Sö›x ¤ˆOa“yAïëáuđ8rû…£F ưhû{¾ù½`ۢ΅Ơ»À E‰  ÍL^€¿ºè° ©qïj$#êÇ“Ú¶*LmpLÇØ´/À™p9l»‚‹‚ aGĐÆ̉À¹l=̉sôǿ¸ëeÖM±P²Ç(ÿÜZÔBj߃‹̣Ѥgy“À'%7ZûÔ®̀tê ¢́ËrXÍ ô‹èuÇÑ«SƯó¨ùåĐ—î¿NT'ơed”ûÅưÓ6ïÅ*b́Ô‡ưĂ&i2©/ ̃¹?n‚Ù`ox6‡yàăàkeSĐ-@Ö¢₫EpÁàEÿ;áH7$¼‘ⓇaH6ÖÄ‹ó›aaX̉"c]̣_‚¿Ă ŸĂÆ`¼Æ`ưÊà¸ÍÅŒOüÔËÀÅ‚å§aAĐÆ̉ _€xcè2¸&Áđ[0†)P6:.pîT'ƒ}çâđix̃ó $µ”­ lzÔ®̀ô=:+•}Y«Y~½î8zơbª{5¿ú̉ư"DåAúí}ƯÄ Êưá~qÿô£ Â{±;ơaÿ°‰§ÀÚLÙ} ¼Xä¯#M‹…9È^ÛÏ‹÷ôô€́ÈÄ‹yŸBؾ0h^(Û׺[À»ü¹íOáyX2«ô#H^X73ÇđB]Ÿ.€ÛÁÅ’ăNۜǣđĐ¾Æo½ü¸ØHæÓ„?§©>}*’l, ¡czâ6+ƒ‹1Äq9VIDATË©E~ iٜӵúÕºkÀ¹è8ÔÊ>wƒcù‘±ÇaMû·jTæß­çʾ,‡Ơ¬@¿ˆ^w½z1Ơ=_}ë̃»UvéÛ'V`3]Oî—~µAx/Vc§>́6ñH /t„ÅH0ơKƒwøÛ5ûæ Œ|;¿Î+Ú̀ûqÖea¢¿Oeæ/̣& ÁrÚ­Óæ‚I÷µ¾ëToÂä fc©«ÇÍV±¹–jæ ê_R ÓẵK6ÉTí¯É0Q+Đ/¢×‡₫{auÏ£sè×1V!0ïnyBóÖ{ÔƯ\ù:ovÓû¨8ïÅ*b́Ô‡ưĂ&ù¤³÷ưÁàG6éÅ€0†‹´ @œƒb§Ç½±æTµ¿±Æ›Đí³LèÙÇäQÚ»^~dàpAÖ;ÔûOđjXP  î%̀CÁ/6÷Â|‚áG”v‡³z1àŒáÇÂâÚkvT„ØúeƠWwúï…Ơ=^̀aÆØ ½“ä£ươ!àQ}ƠY½?:@ó„÷b1vêĂ₫a¡@(Đ{ü²ù?{?́PØéqo,ªö7ÖxÑư"zƯqè¿V÷́ß‹cá ¾f"æP Nü¯ôK^u3|wzÜK“ªư5^´£€¢—aÊ14z1tWƠ₫ÅR÷<ơ¡@(0½ƒđ^¬"ÆN}Ø?¬zvÀåà/"}ü5¦níM88ÏÁ20Löf&3µ4¡ªḉwPüơ©~0¿ĂøPlLŸ-Ûè7h]ܾ7ª¸̉éqo,­ªö7ÖxÑư"zƯqè¿V÷ưv_L)Æïdx¤ §Ú º-Ïî€%‰¸°røƯ~Êtă³́Ër+Û‚FçÖh»¨CN3,BP ªSà\ùYÿºpùQ¶Ư|0 4ÏÙ—OC&ĂXHt(›s~‘=2‘>́kÖ§vU,8úíÅüưbnư×@Ä3‘̃±C"ÈP BqS`5Fö)ÆWÁ;›~Tæx9$óă<×Á“p)leóûh₫\µÿ́O[₫ ns'́ O6R̃²O®?z³'¸Đ˜É'³üü.¶6œ ĂÍp xѧúÑçàé̃.Ÿ¤\+‚ÖIßWÓÿ

̣Hñèç“àBéYpŒUAóăóp ødç4ȵ5ÖvæÜj,Ÿƒûî~ø"ä¶cWc|tkkăÀy~n}Ÿ³Á.àëļæ¢Ñư|ø1$ḉ|¸?Ü/›B2çr¨Ơ?àứƒdn‚çÀ'cûÖ*Û7„ À/‚o‘̀E ñ< ¿…I ùq£ÁEµc^ SAsŸ6’ư³$ÉơđNđ5®yüî—!×â@Ù2mŸë¢̀x„ZÁr•Vµ¿f±Ơ=făF}( L¯À ¼«ˆ±SöûO¼xS/®6)¸†ÔÅ„¶3<{€ÿ‹Èɼk‚æEWù#X^Œy‘u<¬^<¿ï/ï†Y@{ØwY0­¡•-Aăcđ3x¼¯(HªƯ ^œn^Øê[>ëÁ­phô½’₫gÁº0¼Øw^~/́§ÂßÀ“fŸ§Áñ÷Hpß…üXskx¡ë₫{C±:ÆXŒơpŸí^LKÙV¤bơ¬RîHycpŒi &ÆhY &Á‹đ&ĐŒẠ́à"B=v·S'÷Ïp8èĂ}i|'€m.V}ƸØ×Å\«Xü₫ÅS î.Äö·û hÛƒ íÀ1Oƒëap‘aÛ[À1j­ë/Fr£–#ѯï‘]ü{I'A«øhîÈ£LGJ˾,·²Fư£î?÷I3MF´mÔØJôºÚêCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b́Ô‡ưĂ₫S´Ù0kÚ€¼z½.‚c!Ù̀d®/ 5/Ö¼˜\Üfø Ü ³C²ÉL/]Đl ÇÁ+Àí§B+Ó÷}0wÖi?̣.:4ÇưäHnôÏù$'då£Èÿ´(w̉w'¶Yæ€uÀE”Ă~>7’ư³/‰O´KÁ‹ßdêw#¨_»s¾ˆ¾ÍöÁ ´©[₫Á më¦À§à.X \`ÈŸá(›ºø$ ̀…å”ÓEu¾8¹úÏ}ÿHzL‘?é‹0+èë{lA2{ÂRp8ü’¹èp“ÁêÎ0 ¸pû0Øæ U,Æs'8v²3Éü¦(\@úHÚ¬M^¿S 6%uŸM.ô4cm´ÑÏÊ _ëZ«øF{´ÿW¿eÚßú?{–}Yneå₫­úFÛ¿ÑÍoX( „¡@( ü[ï'KËS1 RÙvO¤–mkf¶]ÏeN$? ¼> v€ya+8n}{A]6/>O/́ŒÇ dïj'»‚̀b0OQá‚ ™‹[RÔrníöơú—đï\ÛÍYáỊéZc9̣×dmÎÑœÖÉœ›íµÑ₫:ŒüÍ÷¥z. ^8»OÄ‹́Fûï]Ô» (³uÍ,Ÿ÷tµèx<éÛ`vØÔïpÜ4²#O¾Az·,÷§>]tº°ºn‚BỤ̀mS,“édÇNæë'™ †@̉æ̣¾FÔƠ}ưixÎ5 k_7₫bÛS ,́7BP ¨M/Ä’¥‹S/ÎïTNíöMŒ©.O}‘.ŒSư^d¶- ̃;¼\œOƒO ]Xz»8¦ñ,ù¹Ü‹́G ]°’­Ôô|‚WĂß 7¹Í\Œ¹¬Ÿ₫´Næ\ö‘öÁ?F]M7F̃×»ÿ>™˜#c̣{BÙö â[ 8°Ü1+—ç~AÆŇûù¿!ơs!‘¿6¤́ë!ÅœúQ5}‚’¯7Ă"àk¢l¶ơơ¢̃3g_•åƠg_Hú¸°ÜN‡ăàE˜“á»đÿÛ;pIr _raÉಠT” ’vA® IXED ˆA¹ ¤½‚HºˆÄE@%‰ÙÉ’‘Œxßo¶·Nï¤>ÓÓ3sæûŸç;ºê¯ª·»kªºçœ¦¶4¾°e"̉$¬×¿&Å}h¬˜s¬ Èă100 |úZ.ôDúoè&t:̉¦`+¤7 ŸA¢3P#;ŸZPjÓ±(úú6̉“hÙ…èqt$: …@dtZ©=ƠƠX‹T=ƠÖÂV‹½CÑÂè-èK¨Y8Ü‘-Em-`Ơÿ¹ĐNH‹ø…P+û)ÄO‹pơW‹üµQX;cnvôu®ë‘Xj¡,6G¡0½µy=R»j#ô[”nHÖ́1~>XGÚ45«³ú"n±öú?â»!ơC×®‹ÉènỒTöi¤ Ăè[HÖê¨Ë¡o ]“ŸC›¡0Ÿ=‘úó*´?^@:ï÷!e-ôI´̉XîG“ĐúöMö¯,²a«₫E‡CD@;Ѽz1ü|”.ÓÊöרoƯG£vo&0’À Ü‹eô±¨•·ÍN`]²Ä椧½ß̃„dz2¬EäóHÇ@Z°…ƯFdw¤Å–/dŸ@*«¼éH »Ô$ñ2Z6Í$₫.4©ôRûZø…mKäǵùĐâQ¦üíj±™?¦œ¤!~f–n·́<”ÿ>]›ùPZœ̣~ö&ïH6:iA«̣ZŒëÄÑ(¬Ơ˜[ƒUpt’Ăó²ø$B™xüéøCèpÔ©mŒµ ù»í§Hf“ Ơæ² ¶ ?•PçUơơöks$“³j±™?V Pư•®/m”V]Ç{x¶êˇ(3©=mªu½h#+Óù9Åùùñw#ÙgQä?BüP$‡ eĐ-HưQ™ïfqơUçëz¤²ºZơ"m›ÚË«íÊu æ})Ự̀囕ơ±Y‚[-'i8«hu±´ưˆ—Ùº|VaÑ÷4¬¢]·a&0’@zF|d‰̃§¢_iX´WiƯˆ7ó¡2¶Ù Äd½-9{‘ZÎÜü\ÍÑàx½l•]¶̣̃´€üEƒcÊÖÓg=¹×±‘Éw³ăê6_}Z,«¬±iÚ®©Ÿ­Ê·s«s06n̉!ñ³Éñn·цx¨¿ELoŸôæF |Ù‚(6µŒ:?&’÷ ¤ó×ÊåĵaHM›LñÏ›̃`¤×½̃¾è<ÈäSư ¿Êë¶Å\—†´™ú‰x3Q&Âfe}l¼"‘†³VKÛx™­Ëg}OĂ*Úu&`# ¤÷`ÄG–è}*ú•†E{•Öx3*c›@º™ưhù9ú*‹ ë©ñæå»·Ç>%Đ«ûOoQA?FASÑËèh-æº4́d©Ÿˆ7óe"lVÖÇf¨ñêƠîV7300₫  ¯ä|½XQwô[_Ú]VQ›nfx ÜËĐßB@ÚŒ¬ôU+› TJ@¯̀dÚä-åó»™îv?ä¿qu{Ư<ömc‰À Ü‹eô±¨•¯b.K×’ÇbeđưWÉ¢ó^«V‹úË—÷œÚđ̀ă5n~̉,—20000(€7 %@´ 00000öx̉'—20000(€7 %@´ 00000öÄßon¯´K™€ ˜€ ˜€ ˜€ ˜€ Œ–À'©¨ÿ§"Ó?¬üe-6̣ÇN$W˲ô5ơ5SÓ?tœ‚VE‹#ưcÊ;Đ èF”₫ä²Êµc? ₫`«:ORF=M½OÊyÔ¦ßHÏkÔÎ:¨˜ïCí7å;đ—¯Z¶¿¼ÿHw{ÑC0æá^,£E}¨¼ÍL 7|ÿ•Ă½è¼×ªƠ¢₫̣å[ùă uơïëÙdF™“zq ÿ\Çê…'s<ư‹\—´(ŸúX“²²vëh³£?%^Äjíù+XE¹¬ ˜€ ˜€ ˜€ ˜€ ô†À4»M̉ôcÄïBé[ˆ)¤DU˜₫™êéHÿÓ¨ù+X…p¹° ˜€ ˜€ ˜€ ˜€ ô„ÀöI«ÚŒ| ư -~†6A²ÑAä́*̉Çạ̊"©7wF" N\íÈôfem¤º!’­ƒ”wí7 í’r9000~$° Z½ mŒ–@K¡qhÔ¦Å^?™ ?F }MèRô;¤ïûÛzO`<]X2éÆYĵùé÷6ôÖă×J`*»0ú§‰émÉ©Iº¨ÎÿmIÁ[‰Ï@º6Âô5,o@‚†C00Đ.½×¢p3¤'tZêt^dkMà<…´(”₫Œ´(¼=†Ư&`oôôW$6‡ - ÅK‹21´µG@÷¦îÑÅÑ$ôEô&t!:Ư€úmăD—†Æîg¤Ï¢³ŸAx$:Ưƒ4/T5·¾D[©in•é‚ÊkT:¬”ïƒ̉eZÙ₫ơ­ÛăhÔ®óMÀF„{±Œ>ơ¡̣Ư2=}>iøtz'z3ZùÍ; Øb”Ơ_ĂÑ×öBç#}ïûbôTø»×ÔtÓ› }ƯD›0m8ÄÈÖ àV×ƯßѨè/S¥kVt̃kƠ‘¢₫̣å[ùăüú)8É·«´₫ÖÑÖ(ÿûƯ—u4wh#YOû–Öù)™‹dzá$t ŸëơƠ¬v-êƠÊG" ÛuTf¹´ưˆ—í¿L|EßÓ°QY盀 t@zF¼{­Îsô+ ‹zJëF¼™•)ÛæÇá÷ĐăH„+"[whÓ±3º9S|»;­ơ—×ÿ¦;z| Z¨¿º6¦{£EO¢)¨,æº4́¤_©Ÿˆ7óe"lV6=ÖÉDÂsQ´Y/Ô×¥VOL7ơÊG̃¦„µ[çA*l•Ú £½ZñH¤a›~J-–¶ñ2Ï*,ú†U´ë6LÀFHïÁˆ,ÑûTô+ ‹ö*­ñf>T¦L{ÎnASÑRÈV­hJ_9úNuMö¬¥hYßy߬g=pĂZØêÍÓ ¨ÈSïn‹¹. ;i'ơñf₫¢L„ÍʦÇ:Ù€„Ÿ ˆèị́(ÚOCm̉ơ¦P–n&"­:ơ´¿ g–ÖIưæă×Q~ŨÔf>jÅ#‘†mú)µXÚ~ÄËl@>«°è{VÑnÑ6tq~Í_§ậÙ±nO0›̉λê´ßnÖ¼œ„>€^Ûn%—é=ñ~|ô+ ‹ö1­ñf>T¦,[G̣·KYí§0}wÿv4 é éX´O3(]gÆâàlL Ñ߫б=î·®‡¼:éR̃—̉Í,_¾YÙôØ5$¢n#†W'eK+׉O oO¤¯a…_…Û#Yº™ĐW¸Ú±´ÎµTĐư'ékZúúƠ (ÚRÙ"ơju"‘†Eœ•U6m?âeù–ù¬Â¢ïiXE»EÛX“ êć’ơ‹fÍœhc ce¿ø3øÔëĂ°£‰œ‰‚á"”¿ =ôÊQOÆ>l&̉{0âq¬_ÂèWí[Z7âÍ|¨L¦Wïºÿ6*Ă™}tD@ßû>]„æëÈSÿUÖ¦»P|Vơ_‡¯Gó0äih.}á¾c®KĂUNưD¼Y…(a³²é±ÓID_¥’ø}I™ư²üC ŸÏ¤ßË›&ëwu·ÖW²t31 H½:‡à7Úy…øbj¨M«ƠÓ„e^úÑ%Đ£‚e_Å»è˜ô×pÊ0mfƣסƠÑè0TäF ¸ÍL`Ö¡ÎÑúHOCm½% EÀNh̉ƒ˜±̣ù®Eèh7ŸUDm=&đíOAßD+£²Lë}¶_₫§,§}æGLẴNdƒHd¡6ÜË%y·fqƠÓĂisô”ÚË$O2´é–˜8Ö7e&$éBÑØŤa!%NÛxI®knä³ ‹¾§aÚîoIl™dè­Ă9YZ“́t¤›[O|âÑÚ_‘ù á3è:´-’éé£̣ß´©Đ…q= Ét3ë^T ́}H¯ÔVEº µé¸éÂư:mÔÿo£ÇÚÔ.xn${#R›Ïf̉n|q$k4>ù’ÿçÚ]i‡.?"½̉{í‚Ú1íêON jú~W’çèpĐ5œW¿É÷Oé¢VÔÇhÚHû¤œ+‘æ[Xˆîܶè¯nº7ߧæF]Û»M`w¸´ĂF´6™‚ôöN‹è˜Ï̉E.Ù³Y”KĂÙ ÈHưD¼Yơ(a³²é±5I¤_ảÚK_k̉†K¡Ö1áó^â±v›H\ë§8ö8ñ#Ö‰ŸC¿GqL>ÖC2­•"_kËéM맴Ö~yÓgÀ‹(üjCÔ®EZùH¤a»Ê,—¶ñ²ư—鯑¯è{¦e"±]’±qm–Fª³Z }ư CK¡¸ØÖ"₫E¤ i´̉…  u¤ A~̃d#¥ß«v2:é&P¾ü¿ Í@Ç¡· Ø€LË̉ºÀUv[$» ]†Tv2RßôDY£ñ­Á1µ} z̉룑üj¬Ë)H›[©N^Ú8Éäç€ZlÖGˆ~bV̉±!' k+¯~C’ïŸ̉E­¨Ñ´‘öI‹Ưÿú²ơÍßÓÑ|ư×µB=—̉ÓǪ5{á7ơÙDÚ8¯;{±ÿ̉Óh•S»y{‡¢“Đ·‘>?S›‹Ä‡‘6KZ8ïƒôPL¦‡„ú MM–ZmES\y¯Q"³- ơùx<úZ¥¶5‰üØ´đŒ{ScIë!çfhT†ÍƒưÖ‰é3₫èl¤x½9́X̣›Y½:ÍÊ·:VÔ_¾|+ÿéñ¯È×ϧ_¡ŒÎjºÆ”Ÿ/›O3©”n&̣ạ̊éeở:Z—Ơ³¿‘ơw©W A^Ô©D6¨×Ớ´ưˆ—Ù |VaÑ÷4LÛm´@_ŒB/¡Ó&GƯ “&½Đ}èµH séjt Ú ©­w¢°‰„49hA>ú.’É.2M ª7ÉTGíÈ6E:¶ª™ƯL¸oŸB¨ G“›&»ûÑÁHÖh|:¦›îwdv4¡Ú [ˆÚ€ÎD­£kÈ“é˜6k©=@âÓi†ăCM@×R^ư$ß?¥‹ZQ£i#íÓµ$̣ŒéñnÅÛ]H.JvF_@Û¡ùP˜æ--Ê4ŸÖ3Í¥ïÍX´æÇ“Đáh ÛƒH¾¼-ÔæÚªí*Œ§™U·]V{ïÇÑå%8Û ºæ¯̀¤‡WJ߉^…dÚ@Ü‹”¯E^j»Đ¢ïtº+K¿‡P6ú9zMEçdñ» —DCz˜mư¯Ÿ µ >åmƒÔÎRht̉“̣‹ÑÉèôv‰Ö̃„ÚpèóGŸ‰2w]ïP"3]‡ú̀̃MD:¾%’©₫ĂèQ¤Ïø0]OºÆd m&£0}ŸFÚØÈ.BºÎS[‰„Ʀq×»Ö ÿÇHăUÙNm=\ßÀ‰Æº!:é‡vơÊ6³z~•ou¬¨¿|ùV₫ÇơÑÛÑZHë³vlq ­ƒ̃T 4Vă–..¡Óc¥”æI³L×E¨Ê· MÛ"Mzú°»ƯŒtq†­MDzZ´+|…i=mƒ.GÓĐ™hG¤ÉơŸ¨Ó…’7MXSÑèGHƯƠ(¬Ñøâx>¬×†Ê|­˜/Lúiô5t7̉&*LeAÊ·™€ # \́~‚4Ơ³­ÉÔñü‚®^Ùnäi~Ù4q¬…¤æHÍuÿ‹NCzx³̉O6]EïAEl"…5Ïiq¸oRñ`â‡NG¢÷#•ÛiNÛm‡4?ª6£Ă‘>ç5G¢-O§ÿ̃¥kSq'ÚMEG?G'¢_#÷éH¶ZÍtn%•_Ét\¶Đ̀ öó/üü(ºÉÏ ´ ’o}/öCŸAaº®ơù<ú:MCa:ŸFº†?…t Ö³»Èœ4†z¦ÍôH ×)H×q'v/•—Ë9X“ôH÷À4Ó¢úËè%ôbFœ¬ÙLuâ¸ÂFñ^Í_³u˜ŒG3Ơ;Ö,ï1Ji˜lƠ¸Ÿ&uS^€VA»!M+ ËÑ‘6¿AZlëæ;}iQ~̉¦‰LnơL“ßè³H¥.̉›‘»£z¦rZª̃Á$OÇç@¼5Qj,ë¡«¬ÑøtLè8´2™ú<_Ïfyú°Đ‚B =‰úRß"› ˜@1ëS|^t:]†A¢ôĂzỷZPơ‹ƯBG4mˆD7@úP›AD ™Ÿ"mX´(l×4‡>ŒöÏUø6iÍó£çÑ®è ¤ùơd$vçd"¨ÜôÙñ z̉¼8ˆ6NßÓ…/ŒÏ­ÑjèKhi¤Å¸6‘ºîu} }Ét.¿̃Œ.@úŒ¹]‹d¿GzĂvR}}OC§¢¸w”¿1’½éóRŸëG"=ÔÓ9z#Ú­ˆE¿@y{’Œß ]ça*+²ÑûĐDôKÔÈộ´j£̣ÅK›0ñÜmÖ@Ú&8Xœ“Vu₫Mü¥^§Ø¥›åÙJ  ‘W n »È÷Aé2­lúÖj[SQ7¿ÊéƒíôG$û̉‡Ù+™´È^ɶCÿ@ª÷:ɶBz¢‘·CÈPÙ²ZTè¦Y2^“Ï̀̉ó®ˆ^Ơà¸>ỔAƒb]Ï^ËZÑ‘e’›/)VJt¼,Ô› ¤̉{0âéñ~ˆG¿̉°h¿̉ºoæC›‹(ø§“¼8¡mË´QÑb©Öj!y8º³IÇ´Àû j¶(Sơtréc”Ù†iC‹Ï]Û(ßí"z*¿N·é¢ÿKñ½E ₫uƯèK¦ơ Ba·Ñơ­ëCûă]ÄAÚ¤Ÿ¹K>©Îë>ËWA©­MâÏ™”¯Ï(•ß i#› ][?Cºv/C²qHe?¨DÓC¿“³|m@ÎBºö$}&©¾6?Í®ơ¿p\›ªNmih&>_@·#ơcXÄPmm¨]±Ûo£¼‹”L@O₫̃À§&@}ˆ5²¨8?ptA=˜´ßl|I±R¢ZƯW';1á .¦bÄÚX¼'„º§cSr2ñX„knZ ơÊÔ¯ÉYăkơL–¾‹P ==ÄÑ<Úxz0̉lƒ’–ø "+G"jѨ ÊiY₫? ˆöE'fy½ t}–ô²oí´}?…t>Ë0]+Z¸çm2VCB)«“Hé Åơh#ô;${} éøkÑh´"zÉnD§ ƒÑHŸQ̣µ̉}¥ă2m ÔÖ]è\${ư} is’6Ú@é-MX¼‘‰ôDBÚäÜêÙd2_¾Rï`Á¼å(¯s&>ßAêÇd´;z?± )|R½y²0˜¼¼ưŒ(aZ'âså+:Ưº1óêEỌ}PºL+Û_£¾u{Úu¾ ˜ÀHƒp/–ÑÇ2|ÄW°´ˆÖâư—è(ÿAưẹC½°Ưhô_M^…c/!-Ụ̈¦>?ô„¸ÙSaƠ;iü2m&äsJmZøí˜f×Óg-Àzm ̉-tçîuG:h{ê₫ªƒúQµÙu3•BÚDæ-Îû2¸ư½‰§øôđkI´zŒÆ£9ÑÚè”öÿX̉ºWOEaú¦ƒ®/寙„“‘̣UöuHå̃ƒô ïwH›™60gÔb#h³sk]o$Ô§ Đ̃èqt*ĂÇÉ!-‰Ó¾Hưª7_ƠË«w§ÍÔ«“o×9̉‰EĐ8¤ó\Ï߆äOFoGz#¦”6«;¡|y²lmnµ¢‘HĂ6|”^$m?âe6"ŸUXô= «h×m˜€ Œ$̃ƒY¢÷©èWíUZ7âE}h±2éC_‹ôF¶&îA±jT®ùÍ’Ñ̃÷‰h1¨q,…ôơ˜¯"=™ÖÂK–_”iaZˆxºQú^tŒDoD×¢;ÑÂ(µ~Ù€L¡Sç¥À¸̃di¡¼l‡}ß•úơ6®:wÏ ½êø_.«£…ûDôk÷–ÂÛÑ(́}Dô#Êèzû%̉Â;L Wß92²đ·„!-SÛ„Ä­(|ª¯'#]“a©·™F¾¤KÔW(סƒ‘̃tjz@q?̉[¤vLóÆæH}Ö}ö-×ự̃̀å•îÄúË—ï¤íaªÜjcDöFÚ~ÄË́‡|VaÑ÷4¬¢]·a&0’@zF|d‰̃§¢_iX´WiƯˆơQ¤ü\¤BIe-$S÷Zà|=‚ÅÄU7,¿(‹r 7B?CçGaÂĐ¥èeeµh\åM Öä3{¾œ6ơ´vĐíxĐ«7nyv¯&C›ÏñH×Ỹ”§kEemâóơZ¥åKoA´Øï7Û‰]êñhƠWmÎöẼ́̉ÂAÜ‹iØ¢JÓĂ©Ÿˆ7«e"lVÖÇfÁ+i8«hu±´ưˆ—Ùº|VaÑ÷4¬¢]·a&0’@zF|d‰̃§¢_iX´WiƯˆơQ¤¼ÿ¢H…•H»Ë—Øöø̉ 2—%vï?®Ö!vJŸ”ÿçà€E´è×vm mưE@o‰´Ñ}‡Ửæ¥̃[‘í[ø¹. [Tiz8ơñf¢L„ÍÊúØ,5^±cU"oq,ŸßÍt·û!ÿUŒ«́q́I¿ÏEú@)b;PXß]•Ê°F₫ô¿-:Ơ{'mëûªË"¿QûøoTw3ÜôJƯ6¸ê]ÙEˆ•ÑÇ2|é³Ä^ƒC'©è²]'0?-hÎßé÷zÆ‚í ¾ŒÖGO…1høú3̉×Ë2½™‚ôơ«ưÑY¨‘•=ïơ—/_ög‹ÖVŸl0øÉ¿]î̀•ùéU³<}Ưî¼,æßC̃ñY~¼‡„î3ÙUèÂZ¬Ü#¸)‘W¹Íµç-߇lÏEÓReûkÔX™ă˜“FäoR£ÆäßƱFo“j ¥₫tQ~4+¹)¡úØ×ĂßÀïeY;iûYVW‚ xƠ÷wîw;­’@™÷b·ú]FËđQt|o¥ÂChbÑ.ßUGâưÿĐÜ]m¥zç_¢I-¸–­¾i·˜# 7úZă)Hk”n˜ój§™•=ïơ—/߬¯£9¶1•̣mÔKG¹ômç%I=£°4_~&Å$Ô¥hCsI7¬æ¬MPƯ5È>7 óÏ–8€Ôß2øƠ«ñ*-m¿í꫇"Ư”éÍܶ́Ó€¾÷­× -ÑÈÖ[:/¡­Đ˽íJé­†G=ä̉×±´0ÓÓY[ơV¢É‹ÑIè¤Åd7L~Ÿë†ă1ès÷lL‹Øq^ émJåÖ­kå°ơ j¿AÚHúeÇÅ‘l)¤Wzÿú& [—Èư=Œ>‡ôK\÷¢§‘&…8¯§ßE½½‰ßAÚkº̉+†Rÿ:v: Ư„4̃?¢ÍQ˜úw%ú'º }©oy‹ñ(q¤ô?Đ“è$v{!±ƠÓ“°ï9:MBùùÚ=Ѥœ™€ ̀$p.Á§‘æ„ffùg,F›—¢¿¡-æà±h‡0(}vh¬úüiơ„œ"¶’̀‰ŸÑïÑ1è+¨[›\ÛêĐƒ×!­!ß‹®Fa»Y>m†ZÇi=ÙSÓE”W/:”ïCÙwÙ₫1j5›¨xz ŒG{"Ùè´Y&••¿IhÓ,~!ázè ,­M‰xí’¥'ÊnC{ ¨7¸Úü(’ÏmÑÊY\_§éɆé▌ΨÅfù{éH»gùkæŸĂµ?íù¡nuĐIèE4-ƒ´qú̉±³´6!²o Ëj±Yí+ùk¤ñéĂVcׯ6!º9ƠơI6?z m‡4Ö5ê(¾+É¡ÿØ=ÄÔÛ`еW¿(ß?¥‹Z>¶™–-‰ÇĐت# Ïû´̀]]³=miiZÿ9̉(}V,lƯ!0nơ`r:ºuú ç¸(ÍÊ÷úË—/m`™#½éKÛX)×À’¤_IÊüwvü’$ï”,OA~Ÿ#_ów؉DâØ‘‘Yr₫kn#‘†%·×–»´ưˆ·U±ÍḄY…EßÓ0mw ‰‰h^¤„^)Œtq©øao&¢¼IH‹jÅ—C2…Jë—†Âôä₫ƒYB ôt’.´oæؾY9}uâ 4zôa&ÓÛ‡j±‘ƠÙ+Ë~5̣?rßÏÊ*˜ ƯDû }ˆ,€Â¾FDowdơ6 ăÉ׸·P̀´Ú=‹_I¨…lô(̉$z&úkiRÍÛ=d́œÏtzàè:É«ß‘ïŸ̉E­ EÛ̀—_Œc‘æ cPѧqT±µI`NÊ퀮G·#mB†ÑVaĐqÍi?m̃ˆôpKœlíX’¢Ú`l‚öGZ°ê~> m€úgÙó^Qụ̀ *ƠZm@´f{E?b­–n4NIz”æG…zđVÙdX–Ø~ _¡#ç"=‘Ÿô”^ö™Aí¯JdѺÿ¡ơ¡́àKY(a/G¤NxW’§†6²³Ñ»̃*há:émf^€Ú±F₫UWorÂ₫EDoy& ½ưЦ@»đ°ˆh"Ô‚¦MÈ2ÿ”¼–¸$û!:é­̉öè4ô›“¨ÍL dÏâot̉SƯó ËæÅơ°áAÔlâ°-!°ñ¥Đ8´̉{c¤ùï«Hl‡•çŒ]×ÜP°9€øH̀ôù¥E­5}.?t>‚₫ˆ¾‡®BÊ·ơm÷Féơ}{.jôq´̉ĂÜ‘ÖJ•™7 •¡₫OC+›´8₫̉ÇƠH¦hÙDôP-Vî_˜ÑN·CæAht9†ÎDº /FúƯŒv¬‘ƠƠf+µIḥt3½‚dbô$̉‚¦i‚”iæ “́mèíh?¤ ƠQh;¤Ơ†Höy¤vó¦MĐ×̣™N›€ Œ€æ.-¿ÖB›£Ï¢¥‘,Hó"[k5Gj“nA?AZ8Äè4¤ ‰ß3’ü…éâR$‹0½è̉¸Ê(¯§ü¼©_F—g.#\¥íëPø¿€ø~h}´/JûEr6Ó¸ÏC‹ §‘̃í2ùH~^Fg£/"Y´7353­ÍχѩHoô†æ|t$ ;È^è¤È <%‰·¶O«ú>n&`&`&`eĐFCk$™P߆ô•ơï¢'PQ{‰ ŸDW 9ëo¥‹­4¬´Yciû/³̣Y…EßÓ0ß®v›‹e™:ñËä Œ#½p.oP“ÓéøÇĐ¼è5hNTÏ–%³̃ze#OœæDN&₫zu’çèđHïÁˆ÷…èWícZ7âE}¸¼ ˜@5tÚ:'s]vâ5ơñf₫¢L„ÍÊæØÆT ß WjÓÉ%I½ôÁkÿ¹Ä× Iù´½ô¡nR¼ăh­F Á½ÛAKSâñ¬”Nƃ¹’n÷w/rUû6©¯düåßjD‡ơ6C»ú"&NÏç*HúX4æ©Ơl&`&`&`&0æ è'•ÿN™7 c₫ºê‹êkPú=“ªl5ºÅ׸ªj×혀 ˜€ ˜€ ˜À xŒÎ~¡êûw@ª&>œíé/-Ti;TÙ˜Û2000& ¯jMA›U5¿©´Û10000̃ĐóÉ›₫Z©¾*_‰é—Ÿeú„¼Å±|~7ÓƯî‡üW1®n£›çÀ¾M`,„{±Œ>–ác,wÅú™€î×*Ö"ừ Œ¾•=ïơ—/ïsÚ̃Y­qóW°ÚƒUF©ü…Z†Oû00000"à È@.wÖLÀÚ&à‡m£rA¨œ€ïÏÊ‘»Á~"àßéÎÙ΅;tƯé¾½À˜%à{s̀Z̀LÀL`Px̉3uewÜÚ« ˜@‡Æê½éU‡†«›€ <σt ½éÎÉÚ·ú“¾ºĂ×^M (Ư‹º'uoE««±x®<&0îđ<Ø®]ñ¿±_ﻈq¬+ 7pÚí~È/ÆƠ`¸Î60R₫ áx8ˆ6Eó© ˜€ =`̉æC˜îé`ÜE× ụ̀^_¶¿Æ-`å!ÊEkÏ]9¥ºƯùïŸʡc/&`c‘@·ç½±È̀c2A&àµH½¢sq¾¼×—í×·9Û+ëR&`&`&`&`&`&Đ9o@:gh&`&`&`&`&`mđ¤MP.f&`&`&`&`&Đ9o@:gh&`&`&`&`&`mđBo”‹™€ ˜€ ˜€ ˜€ ˜@ù_JoP̀Ù"à7 ¾LÀLÀLÀLÀLÀ*#à He¨Ư ˜€ ˜€ ˜€ ˜À!pïGO†á HO°»Q0000&đ úîMÈ(O`üÓ”zß[‹c£t=ªjƯî‡ü÷b\£‚áJ&`CA Ûó̃P@ô M`€x-̉Ÿ'Ësq…çÅo@*„í¦LÀLÀLÀLÀL`Ø x2́W€Ço&`&`&`&`đ¤BØnÊLÀLÀLÀLÀ†€7 Ă~xü&`&`&`&`&P!o@*„í¦LÀLÀLÀLÀL`Ø ÛB×_8¨÷W†ư:đøMÀú‹€ç©₫:î ”IÀ÷w™4ík ÛÄo|̣2u§M`L¨·ñŸ ӧ܃30á&àùpŸ̃LÀLÀLÀLÀ*%à H¥¸Ư˜ ˜€ ˜€ ˜€ ˜€ 7o@†ûü{ô&`&`&`&`&P)o@*ÅíÆLÀLÀLÀLÀL`¸ x2Üçߣ70000J xR)n7f&`&`&`&`ĂMÀá>ÿ½ ˜€ ˜€ ˜€ ˜€ TJÀJq»10000ñ€ ÷ù÷èMÀLÀLÀLÀL R̃€TÛ™€ ˜€ ˜€ ˜€ ˜Àpđd¸Ï¿Go&`&`&`&`•đ¤RÜǹLÀLÀLÀLÀ†›€7 Ă}₫=z0000¨”€7 •âvc&`&`&`&`&0ܼîóïÑ›€ ˜€ ˜€ ˜€ ˜@¥¼©·30000á&à ÈpŸ̃LÀLÀLÀLÀ*%à H¥¸Ư˜ ˜€ ˜€ ˜€ ˜€ 7o@†ûü{ô&`&`&`&`&P)o@*ÅíÆLÀLÀLÀLÀL`¸ x2Üçߣ70000J xR)n7f&`&`&`&`ĂMÀá>ÿ½ ˜€ ˜€ ˜€ ˜€ TJÀJq»10000ñ€ ÷ù÷èMÀLÀLÀLÀL R̃€TÛ™€ ˜€ ˜€ ˜€ ˜Àpđd¸Ï¿Go&`&`&`&`•đ¤RÜǹLÀLÀLÀLÀ†›€7 Ă}₫=z0000¨”€7 •âvc&`&`&`&`&0ܼîóïÑ›€ ˜€ ˜€ ˜€ ˜@¥æ®´µÑ5öïÑUs-00000~#à7 ưvFÜ0000Ăúṃâfí¡™€ ˜@;<¶CÉeLÀLÀ–@¿m@®X’î¸ ˜€ ”CÀó`9íÅLÀL O ôÛdW8]‚ü°O/wËL k4ïi₫Óùº ˜€ ˜€ ˜€ ˜€ TMÀª‰»=0000b̃€ ñÉ÷ĐMÀLÀLÀLÀL j̃€TMÜ홀 ˜€ ˜€ ˜€ ˜À˜»ÉØÿƯ䘙€ ˜€ ˜€ ˜€ ˜€ ˜@a~R™+˜€ ˜€ ˜€ ˜€ ˜€ Œ–ÀÿDP2öǪIEND®B`‚tpm2-pkcs11-1.7.0/docs/illustrations/object_diagram_transient_objects.png0000644000175000017500000015243313754763565023563 00000000000000‰PNG  IHDR à] ơsRGB®Îé pHYs  œ iTXtXML:com.adobe.xmp 2 5 1 2 †̉®$@IDATx́¼c₫ÿA¤(‚Dï"jÔ$:Ë*«Gï½—]kºÅ_ï«—E,«¯aƠè½DK„ Hóÿ|31™ûœ{Ͻ÷”9缿¯×çÎ̀wÚó¼gîœçû”™i" €@ưøEÝXÿÙ$‡ N`¼̣?Cƒ3 û€@ ˜¦̉H!´—À¯í=ûC Fđ»^#dB ‘ LÛÈ™'ï€ @€@e t΅é8 ̀ ¦83—‚„´‘-{mÇn€@u ĐR]₫œ€ @ E€¤¡.7™… @€@u €T—?g‡ @€@C i¨ËMf!@€ P] ƠåÏÙ!@€ ĐP@êr“Y@€ T—Huùsv@€ 4†ºÜd€@³ºjíßHi+!@€ Đ<°-­æ÷h¬µư”Ư—¥ỈÏ̉w̉ ’+©“&ç§ä́2ư/u₫m1÷÷ưư‡´°äíO–’¶»|Û‘’·IëbùúüïÈwº4½„ưN }OóaÂßÙ0@€ªJ€‚Zaü‹jƠ8é$i6©ƒ4Hz_:OrkÈW̉nRlïif‚´Q̃ámFIÛK@̀Ûë—”bÛS3¯äÖô5i®”ºhÙ-0̃Ơüº¹5ưƒô­”Lƒ̃¸¯₫ @Y%@A­đ•ù—V=X½¾|né#Ư&])ÙzKc%/Ÿ)Ù–̀¸§ Wi₫’ƒ[:yñ7w“¿qâă$í-œ“t0ߤUÏ׃ y®é @ q ,£¬»KUÚ”8q+Æc̉~’m-i˜ä€À-¶Ơ¥7¤/¤Y$Ûñ̉̉̃̉¥RÚf—Ăë’vwbÁ­#îæß©₫̉̉ù@5N€¤Æ/ ɇ ĐN³jùH›Çg¸¥ĂÂPÉƯ±¼íÚ̉Ẳ£̉’}kHHIû^ ‡Hn)ñø´ơĂ­"I®…1y‡ƒ¤ùø÷$̀C€ @ «Ü5%­¬¦µ̉ézN'<>pR·d8 ¹•Çxl,”Üjb{EÚ\ú0?ƠdJ,&¶{¥[¤ÖvÁr«‡ƒ”̉v’¯ß@ û@úö2@ ó¦Í| I  ”“Àă:¸§vïé%É[w»ÚCrËù«’Í-!;IóIC¥ §«56Z%¹[×M̉›̉²@5N ưƒSăÙ!ù€ ĐJgjû^̉µ’[¦—₫(!¹ÛUÜ=Ë]¢6•Ü*®i÷üf’ƒ”¸ë”f§²´tªäc&­£|̃¤º%7HͬewĂ @€ ytUi₫ơƠj“%ü₫V:NJVRysLÛèªå‰’ƒ•Ø̉Œ·‹»`Ùï`ă-É]¶l¼º&WÉ¿@~ƯÂ&Íë̉ăB’ëq>Ä°9g@€ 9Ô»$(”<æË>îë́_#Rđ#€‚ ¨;.¨¥ç_˵F€ûºÖ®é…r’Íë  @€ PV eÅËÁ!@€ $$ æ!@ Züö­E¥äàơj¥…óB€ @ ]i°î‘"ơb€–}GåưjzJ~̃"ôÛ¯̉ Ÿ•ôOĐ²÷ƯVJÚ̀Z+=•tj¾˜ư;k»ë$¿}Ẹ̈µzP̣ëym-åÇë”ikáCi¦¤³ÎæÍ*­:Ë"Ùê‘- ơxUÉ ĐÈ =דƒî=/{zº”ü‡çLøXo$Ö¹…b¨ôOÉß ‰íO%­ -;5miŸû.i>i9iFi)i6éÉÖR~ÎÑ6ïJ—ză¼ơ×toi?i\̃Ç€2B Đƒ=#É#€ Pß럧4>̃ ÿwß‚¿÷Û®¹DzPÚEJZsû¯§ W“Kt\›ÿº´ô¨Ô܇ µ:g₫Éî̉ igÉ_j¿LºYºO @ cü Æ @ ¾ø‹ánH[ ÙJZ‘Ü₫-_ßØœ7?ïîRH₫Páđ¼o~M×vÄø£„ÇH“$[sûûXoKŸzĂ„ÙwTb¹¥ü<¯mÏÎk)M{IëH dH/ I‚ ĐN=´ÿ©c4€¬¨mçIlïăêụ̈ÈÏÇ+q ÉNLúLr·)·>l Ư#ÙÛ­ÿ.·UóÉÏq:Äæ̉’Óôµ„A€ @ *ܵ'­ª$¤'=Zç BI₫¸Ua¨æO•lnÉp‹EÈ|¬7$–Çj\%})¹ ï4’»e9ù&/s¾U²µ´¿Çh¤ƒï×YºXê#“m–3·¨Œ̀Ï7Â$}O{ƒ y´€d₫‘@@U%àîX_%Rp–æw‘zJ‹Hîîä–‡¸EăÉO”â—æöw×)wïZEzJm€fö’EN† EnËf€ P% UÏi!dˆ@¥ÅD̉F%óåçƯ}jé>)în¥Ùh˜ä•í½°̣>ïÿŒäí¯—¶”ÜJă Æă9n‘~0@¨3ÓÖY~È üÖƯ,Í!î®c²«çƯÍéÓ”Ö̉²-¹­—”x½ƒ†¥¤¹ÅĂcA<ĂVh\·m!½*=+ùØoI¯IîN[úöÛWÈïÇ€ @U!V“Óª$„“$ĐIk“<₫+@̣~ç‹Û“­ T‘€b€ê€ giăù—&Âr­ྮµ+Fz!º`q#@€ @#@R1Ôœ€ @ ဠ@€*F€¤b¨9 @€ @Â=@€ TŒHÅPs"@€ @€„{€ @¨;'‚ -¡o(d+…¤€ P‡h©Ă‹J– @€ U Y½2¤ (%ñ¥<Ç‚@F pŸgôÂ,@`j Só` ¨OĂê3[ä Sà>Ÿ  €@V L—Ơ„‘.@%$đ˜µ´4Äs¯„`9T&¸åăQiwé»L¤ˆD@€ @ ‚̉¹Î¨àù8 Ôº`ƠĐÅ"©€j„€[™&ƠHZI& T˜H…s:@ @À¿-“ Ÿd€Ú@€¤ ĐØ€%@̉,VBhl }ưÉ= r  V9¨rL@uB€¤N.$Ù€ !´€dèb@Y#@’µ+Bz Ô>Ú¿†ä€@Ù€” -† Đ°è‚Ơ°—ŒCh™Hˌ؀ZG€Öñbk@ E€¤¡.7™… P Á̀I Ô&Ú¼n¤€@– Đ+ËW‡´A¨2*_N@  ĐR‡•,A(R‘ä8€  ‰I0… &@ Á@í$@̉N€́@  €ÔóƠ%o€ªC€1 ƠáÎY!Ô¸L$€@M ¤¦.‰… PY •åÍÙ 4F¸Êä€@ €´»A€@AtÁ*ˆ†€ @Â=@¥&@ H©‰r<@uD€¤.&Y  ¹$€@ €dñª&@µM€.Xµ}ưH= ² )+^@ ! Đ̉—LC(HqœØ €'@R<+¶„ Đp@î’“a@e'@¬²#æ€j—Hí^;R@ «hÉê•!]€2@€$$@¨3 uvAÉ R )%M@&@,î@(H€¤ V@€@ Đ̉Fṕ@ €4ÂU&€*K€¤²¼9 "@RS—‹ÄB¨  5q™H$ ê ©wÎ @  0¤¯.yƒ ĐN íÈî€ Đ„- Mà€ ˜HL‚) ”H©Hr@uH€¤/*Y‚ PetÁª̣àô€²L€$ËW‡´A¨M´€Ôæu#Ơ€*B€¤"˜9  †"@̉P—›̀BhÖñbk@h™]°ZfÄ€–HĂ^z2@ lh)Z @ ö €Ô₫5$€²F€$kW„ô@Èi2”’@µK`%}+i¼Ô_zIúVzG:MúI @€ ”„À­:Ê$é×€f*É8 @€ <•’ÈD-_“_Ï€ @€@ɸKï×R2ù^Ë+•́ € @€@‚ÀéÿEƒ똅 @€ PR‹êh?J@<=\ @€ ”À›:²Ÿ¥ÙËv @€ @@’üÊƯû @èr⃠4C §Ö-œ×\vÎkM»K¤.̉µ̉’£{êAêïIïJŸH“% €Œ"l° Nv!´‚€#–”H«I‹I<p´×N‚Q³¶×Zœ0ÄÏ-J|°°Y|¬„ @h4»+Ă¡Â³kö÷o4m̀¯§úpáym<&»A€ @ îl¬ù æ¡äºËmy3´¾_¨%äẹ̀£C€ @ ûz+‰c¤Pđqzö“ŸÉú£Œ¡1!₫ÊÀL¦˜DA€ @ üa½§¤PđquÎ_ϧ8¼×Ï䟽3Ñ @€ Pˆ€¿ê >î•ßÁ Ö>gj÷ß{ägPzûز7 @€@XWé uúP₫®5–—¬&×ß ñ CAˆ_Ư‹A€ @ !tW.¿̉c^¹!T.“séT_I!ÖËT.œ € @Ơ#PècƒGU/Iu}æ •»PkÓ°ºÎ5™ƒ @€€¸Ö=ôÊƯûåg\Bùn‘ÿ§C§[A¼́b€ @¨[®uO„ÇÊç®BXùL¯C¿!¥Ùû­XËwZ @€ êpm{º́e¿2+?ut¿ ƒ @€@]è¨Ü|"¥ À®•wíÍop²¦ßJsK}¥ ̉¦R¥̀Qú9= ´À´m؇] @ í’…ÿø(n¨†¹+Ó₫’ ×C%[Gĩ¼×ôï’ ÛBv½œ;$Vl£ù§¤8xˆWy·$¼ Ư/í"%­«|̃ù$;ûII¶“¤Ï¥‹¥Ë¤;¤;¥JÙHh\êdN¯2 € @™%ĐY)Kפ»6¿C…R·€ü¨ó}'¹Eâ{é4Éætú¼¼—WÊB- }äÿJê/Ù”v—n–Αb{M3ûä¤|#Í_vp“>¯Ó7~½'«I#2FrkJ¥íe0FJ ´’- ­Ææ€ÚA`¡À¾Ê71à/§k_|si=É…ù?K±½©™9óê­éƠ’[ ư^8í·H÷áüơ“n“’¶¢–”Δx\!u—6•bsKK|̃¾%¯ÔÔo¢z\ºVúBª´…Z©B­Y•Nçƒ Ps*UëVs`H0 2đ@ï´H;*°́.R¡µOíñnшÍÁw‘¨¸µ&d×Ëy·ôtO~ªÉÛEsI§LñDÑ!÷`t/¶¤ø¼ú˜ëHIs‹U û8p̉Đơ l† €’@’4˜‡ P^‡w¨,ÛGùĹû•ÇB„́i9=NähiËÔîfµt ô`bƯŒ¿];áKκÀŸ¥~è:…®g2̀C€@€@¡&ơÀ¦¸ @ f ́*Ø6«˜Ëă’ö£Ü:±†¯‹§ÉínÔBÜ’ôo¢!8´ûµà¼ï …çnV J…­ª¨™AÚ@̉DX† @Ƚpa;)¿Ù Ë> O^7Ï_’ưd“B@Ù#@ Hö® )‚ê—@¨Æƒ V i%06‡ ĐYîÆă/Wă­SÓ뼋J³¶ƒk%v¥û\%(s@ !€4Äe&“€@F„Æ{„ ¶•Lî~:Ù(ÉßùRz_Z[í9Íø ä±\ëÿ°ÔCJ›ß”åíÜ5éÈü|¼_<Ư;ß×IÊ^–FK~Mo/i)̃>=ơG «a¡ëºƠHç„ PS@jêr‘X@ Æ „ ¬¡‚m¥²y˜Nt¼´‡äƠ₫:ùù̉ỬÉ6tºäÀ`iMÉ%<^JÛtrx{›_̃¼_R₫꺷¹KOZṆ7A–’f“üº̃›¥xŸ 5ÿLbùpÍWĂB×)t=«‘6Î @ ¦đ!º\$¨q¡k·*åÉ…₫¥C¥ø₫Êøỷ̉’ƒ₫’Í­Ÿçæ~ûáÍóû1!±_~÷Üd}ư]MZ@ú4牢×5ơ w—:Iñù|n§+^ÖlÙÁYÚœ6 €ZI ˜V’Í!@ Ï~«a ê¤X}oàäö9ˆmeÍ́-y¼†çW”NZ²Ùµ÷KÚƯZXRz[ƒx½}GÅ ›†®S¡/Ăg,é$€@¶€dëz@ ¾ |΅M’ÜU)6éÛoÂ;*4-1óÙç4¹•Ä¶‚ä.Q6—ïo_!ë¡{¦V×̣̉w)Ö$đƯ€ ´@`ÚÖ³€JGÀ]’>NÎă!Jù*±§£Oàdö}-ư”_w‘¦B¬>̉Å̉’[DœvOCö†œñ~ñôyù>‘<₫#mgác÷I¯¨̣²+ëBiz¯Êéâô€j’HM^6 Ô0P­y¨v½ÜY¡8Ù1p"ûøc×Ë™_ê#9?qÓÄ-$Í™ƒy¥URyàû^̉¨”¿Ú‹Î«ƒ¤yLÊIó€ Pôµ¸½Ø €ÚJÀöơS;/–Z®Ä¢ƒ„S$·88M7JüưWiMi%)¶®é•_è£é̉«’÷{Sr~>6—¾”&H¶R¼_Ρ??JÏHäë¥-¥—¤E¤³¥[¤¬́C×ÇyÇ @€ yû)…¿¦toS½ÎíîV~Ӕǧ¸[Ñ )¶ç4“Lï/Z₫Ÿ´T~ƒ4ưTúYr—­$ÛÑRr¿x₫ªÜÚß_¹ë`e\~Û!¦?Hè é1©vN§?^ZÍqn@€ K`mbăéXù’Ó‹=V)·ó7><8¼-6vZP­·ænuq ƒÇdƠTÂâkOC]ײ~̉@€ ĐÀ\XÿF ²ñt…f’å¬{\‹[‡âëOçËr¢I ,`z–¯iƒê‘€ °¡̃we€ÊOŸJÖÇZö ~ €Ú@€¤ ĐØ€@; xvÚÖJ;X婨ö˜”@’pA€ @ 0w·»̣ÄSîî^xÖT‰€åÇ×(î^¥´pZ@€ ´‰€ÇøÍQq6îѦ£±S¹øUÄñµ‰§図\'一]°á*“G@ k\˜½9¨í>\Ơ#°]àÔÊço`€ @¨)Ë+µq­z<ơw8殩\Ôob]A7R¯M<Ưµ~³LÎ @€êÀÛÊ`\°§₫€V}( ñ5‰§₫Ø¢¿ A€ @ & ¯TÇ…Ûxú™|k27ơ•èG×æöúÊ"¹ @h4ó+ĂÔñ”·,U÷NX1pM|m6®n²8; @€ÚOà&"<âé[̣ùMYXuܪÓÆ×"¾&פ:׃³B€ ”@?+.ä&§›—đªx kS¿ y-<¿sñ‡`K@€ d›À•¼t÷ù¦Ëv²ë2u¡©O”Óéë2·d € @ ! ¬­\§/Ø4ª—é®Ă¡ƠKg† @€@yüO‡M!c䛣<§ă¨)nmr«Sú|!_çÔ¶,B€ @ æ øĂ„¡±WÔ|Îj#nmJ^̃¹6’O*!@€ Đz—i—t!x²|ư[(öhÚÖ­MiöOÉÇ›¯Z’M!@€j‹À́Jî7Rº ü¾|]j++5“Úi•̉‡¤4s·F¹U ƒ @€@]Ø_¹K†½|s]çºz™;¦o·Fa€ @¨{ ư´ Bö¬ûÜW6ƒ«êt¬GÊ7[e“ÂÙ @€ P=óëÔßJé dœ|KV/YuuæîÊÍÇR±»^­UW9%3€ @(‚ÀVÚ&]8ọ̈‡̉\ÉÏ&… t̉ªÇ¤ß“ ïÆ@€ Ô7Đ[±\h~IêZßY/[î<èüv)|<.¿»Àa€ @hH3*ׯJ¡Ậ£̣ÏĐTÚ—éK đ-ÿ¼í;4{C€ @ ö ,¨,økÜ¡ ä6ù]£Gàxmâø‹üƒ;[A€ @ ₫ ,§,•B…ç!̣Ọ́̉=pJ~tîñ6 @€ °¶æ]S B†ÊϘA˜Çt\)…¸Ùw@`\€ @€€l+M–B…é—åçíX‚0¡¹K ñ²ïäĶ̀B€ @ûÈçnC¡Bơ‡̣/ا]=•é'¥'û.lD(ä€ @m!°v*Ôë'­s̉ȶ¾2ÿ¥T(ø8®‘áw@€ ´…€Ç„˜î‚÷­R·¶¸†÷™^i?]*ÔMm¢Öí]Ăù#é€ @¨*~:{¡Wô:ùPZ­ª)¬ÜÉ̉©–œïÜ2´¹„A€ @í °€öơôP¡Û>·\-Í)Ơ£Í¤Lù»?K…ŒÔºƠ% € @(N:ÆÅR¡¸ưßI‡I¤z±­•‘Rsù¾Oë稗 “@€ d‰ÀJ̀©¹ùZï‚»¿Q«æ¯–•Ëçx­?BF @€ 2è­ă₫Oj®pîuïKûJn=©›V‰ü“ô¬TL̃Vª…L‘F@€ ÔÖ÷’FI-ÖưºÚ¿I½¥,ÚlJÔ~̉;RKyñ@ó¥% € @¨0î:ßE’_?ÛRáƯƒƠƯr²¿ÔCª¦uÖÉKwKîJƠRÚ½₫i~ ƒ @€ªL ¯Î?T*¦ ïm°<$#ùíQ¥r[lúIKÿ–~”Më›Úv ƒ !À༹P$€@ ¬¡c-m$µæùïWÜún!yKzOzW-µÖfÑ₫fÇẨ"RÉANW©5æ± ₫è [>ÜzƒA€@hÍPd‰dB€@ –̉ú#¥í¤é[ض¹Ơc´̣ɯøư^ú!¯qzp»»RÅê¢ù̃RO©=v¿vvà1´=a_@€ @ ̣æÑ)ÿ,½"Ûå©Û}¬ô9èXR @€ : àÂư)’[4ªd¤Ïù•̉áôîEk½ `€ê…ơz¹’ä€@鸋Ö̉€ü´½Ư¦I™»q=! ““—&J Ô:» d€@‰ ø‹éJ›J~SU©›äß¿½ªµæ–ÿFrkË ̉éQÉ~ €êœH_`²@ üº]·~,—×̣.-},9Pp«„§/Jc¥A’»mơ’®–̃–<è|&égɯÓu+Ê–̉5̉̉‡̉̉ ù«å̃ö¹„†k₫[ ƒ :#@Rg”́@(’€ßRƠWƒ O—̃“dÄÇKwp4Ü_ß:?½DÓæºKͯơWJ³H»J¯Ii[@dPâô|!%ƒ§ÉoØ @€ ˜Yi[M:HºZzErÃ-—KûJ+KJ³éµ̣0i”tÔ]jí®½ï RK7t÷®%¤¥ ¥g$§Ùiw0ă4¯ 9M ÔZ@jèb‘T@EèªmÙuËóßH ”‘Hárh@E˜_Û8ÀH¿à ăùüÔóKå¶Íu·¦xLÅ̉»R¥¬³Ntä4¸ÅåN©Üæ±1q0â©Ç•|-9q°ç©¯»ta€ P" %Éa ´@ÀÏ[¼ƒ8àpá6nш‘-«Ô«—ƠÏ•<¦Ä­HƠ²ƠuâJ/IHîV)ó5ZTƒOûJIFb½¬ù_$ € @™ 0­R±„´£tô˜4Vú@ºM:Fr·£9¤jÚœ:¹_iû…´—ätgÁ:)—|˜a5­ƒNîmOé̉‹̉8ÉÁâ¥̉î̉2R9ÆÈè° @€¦&àªkÉw•.””~”̃‘n’”< º»”›A ù‹4Z:]ê"eÑú)Qn ¹O/C t€Ô_:PºVzṢ5÷ÛÇpn/-"¹Eƒ @€@› ¸àîqn-pí·»ä¸6üué:éiMi)«¶•ö±4DZ «‰L¤Ë[ŒFI’ƠB½¯ù é(éVÉoöúNzHrkÎ̉¼@ á dơÃđ€@Ơ ø­Sîz“³±¨–Ư²‘³áñB²nË+çI3KKäZ2³¿J,í&ù:dƯ<¦f%iÅ„œf®ñ ÷g5ïà ƒ @h •×5$·`¸KÍk’ƒ ư-Œ½%"gjÍæR‚¯–>—\pŸVªUs¥Ù̉hÉßøpëH­™[AÜrªô äV’$·¸ơÄ­(Yí§¤a€ÚO€ö3ä€@mè¦äÆ­nđ¼¿»ñô¼·n¸[•¿Q«æœ#¤C%ws÷©̀ăA.—æT½$Ơ²ùíhÉV·¼}*9åÁï?K @€@† ¸€º¾ä×®a₫@ú^&+ù KKJơö£í”§̉¿$ë¢^mgèoÊrpU‹­S…®‹ïÇ¥%W—Hî®ơ“ä ä’ßÈƠOªÅ %ƒ- ~Ôw5[4â [4­r?ÿO¥ÁH‚P„ơ×6oJ·K=‹Ø¾Q7™V_RÚEºHzFrđñt¥´ä ÅÿÏ @È NJ‰»z¸°â×…ºĂ¯}UºF:HZ]ê,aÅpM₫É’[‚₫OQÂZGÀo:IúZÚµu»6ôÖ6tøÿÙAˆƒ%N¤́"9hqđ‚A(5hE£bC@ EÀ Ư²w¡̣taÉ-îºa9yYúYÂZGÀÏgçÂă<”₫"}&am'°Œv½J̣˜=¤$¬uüïÿơä ÷¹µ́ÿơçú@ó @h3.Ús€t˜t½ô†ׄ^¢ù=%×”º¦k?5tpOJ.èa¥#0u¤4J:X¢ö^Úiî>¹ä ùvéÉÃ’[ï6•æ’0@9´€p#@i³ÊáNËA…§.<¸%õœ.[B&JXéôѡΔV”’₫%aå!àÖ:¿)ËAón’lj`¥#ĐC‡ZỊ½ly₫)n%ñ wÏ#a€ 46”₫* ‘>’¾“†JgḰ¼¸D-± ”ÑfѱO“\;F̣X¬ü\ çñ n 9V^ÂÊG ½•t†ôˆ4ṾÇo–—Ö”:K Pçh©ó Lö ĐKóq‹FÜÂá₫ÜÉV Ï»@đ«„•Ÿ€;×¾»›Ê½’ƒ/$¬²æÑé.“æ•v•ü€•Ÿ€Ë ‹Jq+‰§ËHJq ‰[I^’ÆK P'@êäB’ ¤ôÑr² •çmÉ`ă-d'VƒtÖs%·8y,‹V]ÛëôçH×H~ă/O„ [oi)9È}1-¿.ÅƯ·<}C$a€@  ©Á‹F’! àÿá…¤¸EĂ-Ö’ŒdÀÁ”$¶ ̉p¦ÔW:R"aÙ!0‡’r¾ä1 »JĂ$¬º:éôư¤rk•ƒödP̣®–1@€JHÀƯu–vΖ†Jc%wWp!Öă86\€Â²G «’äÀc´t´4ƒ„e—ÀÆJƒöK¥Y²›̀†M™¯É é(éVé#É­‰J§J[HîZ‡A€ P$wCp_h×À^ ưOúAzGºỴî:Rw Ë6¿öuéKéR « ]”L ùTúCm$¹¡S9»r¿‘tœt—äÿ¹/̣óîRçnx ¨2wßÀ êđk@—–ÜÊƯ§<]JúHz^rW*ËƯ ÜâƠ‰çñ•tˆô„ƠJ̣•̉Ó̉Ảh « ́ºå±%c¤áRÜ}ËóßK @ . ̀¨\ơ—ö“®Tü$½,]% ­*Í$aµK`%Ư5°ïI›Ön6Hy‚€ÿwÏ”\«¾mÂÏlmpÅ«ÿ?ă<¡ù%æZé@ÉÏèN@¨9•â5¤ƒ¥k¤W¥q’kÛÜÇƯr\3ÇXA¨ë¦|¸Åc”t¸äÖ-¬¾øö5é?’_mƠ>w“\FÚ]̣˜·<»bÈD~Vï)-+u0@€@ftUJIGH7JoI®U{JºḤ›ßâ2½„ƠL¾–.–èg.ul₫?ö8_oN±ú#àʃ•¤ư¥«¥×%?ÓŸ”Γv”“èÊ.ZK€œÖc{üV¸ô8 kùütNM][–³á&ưIVß6PöΖ>••\PÁƒÀ’ʦ»NºeÓ• ïKXưp«¶Ÿù+JKâé’[µŸKècÍc€ 6è©=ÿ ưMú·4BúVzD:SÚNZT"˜„³Å•ßû¤w¤,ïd÷w~=¶OLw·;wçÁ‡À¬Êêú̉±̉̉HÉ/¸W:Ạ³¡‡„A 0˜mxó@Ü¢·p¸>ÙªáùTcpĂ‹m¥“¥‹¤‰ÖØæWö¯”:K»I'‚5& [HÜJâ®\ßKÉV’áZ₫N @ , ¼n)ư]z@úZú\º[:QÚLO p¿ÿC¤Q̉’ i{ÈáçÉñ’+00˜À‚’+-Î’†I?Hn=½Ạse5ÉoZĂ ĐhiˆËÜĐ™ô=¾ˆ·hÄ-cåó·5’­@0„¸… îă˜ä— `(D`n­¸DZHÚUzV $0­ÜÓ-$±–Ö¼ƒ·”¸…ÄÓW¤ @%à¾×KI;IçJq-“ ·J‘Ö“f—0C`Imô ä x°9ÖØZû»!~Ißöi ¹ÆÜÖ­¬+HûJîÎçàcœôŒt¡´³´„äàƒ *đƒzYÉoqü§¤%×Lß(!­%ùơ¸ZKÀAªk°¿–ö—X,X›̀ª½®“‘®’#3jÙoÓë#a(†€ŸKëHnƠ¿]̣}ơt¿t’ôGi. ƒ " ¸¶gUééŸ̉Ë̉Ỏ‹’›¤÷“úK₫ÑÆ ĐV—kÇ_¥‰l¦ù÷¤ÿH 'ǜB TfÑÜb;Rr!Ѷ£ô‹ä¾ÿ®lÁ Đsj§M¤¥û¤Q̉g̉̉_¥ơ¤î@ á øÇx€ä¦ewQx]rËƳ̉¥̉^’»Vƒ@©¸ǺÉ…> ZFzDzUr­"rp—w¥qáp¬ä`Ø]HƯ‹A Túè@[IgHJîºåJ–›¤Ă¥5¥™% €@æ x́ÅiR—V¦Ô5/kKGI7K®íóîÿ¤ ¤]¥¾R ƒ@¹¬«û¾sÏrëÚ7̉>̉tJè¤9ùYïGß›n‰Ă PÓè ‹K;IçKOIqwæ«4ï+JÅVúùxÿ–üÛA(×Ú}(ùÇ̣fÎ2‡Öm # ‘¼kù“Ζv–x“‡ `#°¨Îä@ß¿±&k₫U ƒ@¥ lªº%.¾ă©ïÑù*Î×°\é×OrwM}IrPâ±–—H»IKK¡ Uä÷=́íÏ‘è- P:³éP7HÉă7̣‡Ÿ[S÷;=NºSúT#=$¹ÙwiaÉ5%ªEÀ-p#¥IR\Đ‹§.đm'a¨w?ơưç8¾ăéù^–h ¬*H8¸8Hr÷è·$K®Dôó̉¿ë^ïàĂ÷®Ë_JëIZ$@¡°EDuµßå×ơ-$-(Í%Ùg¹h<¨y?LüÀ™SZQrkẸÑÛŒÎûŸ×ô…¼<ÿ‘„A œ\çZbßǾŸ{K]¤ø~ïåéåó½¼l~½÷³¹à÷‹äûØ…Ák¥% •"°¼Nt€´–ÔKràáûƠ÷¨ïËO¤O¥¤øýgr¬Ï4ÿn^hêûƒ@¹øùº‚ạ̈€åy?;g•’æûØ÷¦ƒhßÏ.[̀$¹»«ïƯä½ü–}ï¾'½/9€Á„Hư^è9”µƠ¤5¤•$̉zJ¥2×xø!ăÀẳ̉pi¼„A ”ÜÙ…µƠ%ßÓî¾×G̣[©̀?|.̀=+ù^¶¾–0”€[áü<^Sê/-"ù9] s@í€åMÉ÷î0É÷2A‰ `%#°°äç°ïcWêx́‡+'KePˆ8x‰ŸĂn}qy«3 ơsA];±±äÚ4? Üß½̉ö³NàîƠü“J_…Ú?ŸŸK«JI¾—@{Àn¥ímĐ?‚JwIÇ„A XƯe}i€´´TÉß\?Ÿ‘“î”\Y„A 5zkc¿ÁA³ŸÅ=¤JÛ(Đ•œKwHP0@ Ê:ëüÛIÿ–ücăÂ~–ä9L[Eªä¯N‡Ơßư¥³%ß7YºÿùÇo{ÉÿwB|.•\pỂ}ü–̉sœä– …̀«‡IOKYºă´ Wº’æ—0@ ÂÖƠù†HîSÿSf}ú±̉z4Ÿ„A &à;ß¾?²~ÇéóÿÿÿüˆAÀzI¾³<Ç÷mrêBÜ~̉ŒNB°§ä–wçK̃+Yw‹ư%3ÁjŒ€kk°Ú ĐQÉtí«k&Ü”ßj›nºé¢={FsÏ=wNsÍ5W4ó̀3G3Î8ăuêÔ)4iRôÓO?E?ÿüsnêùo¿ư69rdô駟æ¦^n£MÔ~·I®é~®Ç`·Ú'àŒ‡K[JÚ˜¯´Ÿ›ăßËO=fĂ}ˆ­x £ï7ÿ8uNL»j¾´´`~¾­ixUû»•ïF‰₫ö‚Đ`¶¸̣{¤4X̣3ºµæ1sHd¾Ï+¾—}_Å÷°ïc«›ä{waÉ÷±ù¶üûæé"é k,îRµ¿´¯ÔÖñH~Öú9ËAx|ïÆÏbWÚ8ÈI>‡=?äû8~Û×£.“|/lËا̣Ụ́Àª|*ûŒ~Ă„kªüèY,i¦™&Z`¢¥—^:§Å[,sÎ9£ÚZÎú̀ăÆ‹FŒ½öÚkÑ«¯¾Ó7ß´ú÷ëqƠˆû'»–«o~̃üQ:\Z£•YưBÛ?‘דº;‰ j¥0ÿSô–V”VÏËA~kW:}.Ä],µúAû`µE ¿’ûgÉ÷sk~GßĐöäÇ$×̃~,M’Úk.Ü-"ù₫u}k.©Xs!̣ré,éÓbwb»%àÀÙÏá$¿e­Xs ñŒ?‹=XÜϾR™¢e¤ø9́ÿ3ßÅÚmx³äûØiĂ2L 5Î g£.“6½råÀă8©{19œuÖY£Dưû÷–\rɨsç¶V&s¶¦Û|öÙgÑË/¿ 6,>|x4qâĦ…=~ "=^·ø‡ä\iå"óâá¥Û%Ö\»VI뢓­*m$m)[˜sMÜ ’ÿbơE —²s¦´m‘ÙrÁ̃,¾x¸Å¡RæÖ‘µ¥­¥R1µ ˜—₫Ÿô³„Ơ9”“¤=¤é̀ ̣·JI/H•|®¹rhYÉ÷ñṾ̉R1æ Ík¥c$ZD!V…m@ª½ˆSn¬mü#×⛬ºwï­¹æÑ Aƒ¢e–Y&vÚb~cHA;7ù₫ûï£'x"zôÑG£çŸ>×­«ˆC̃¤m₫,(b[6© ó*™§IÛI-=oüĂæ¹[¤;¤o¥,˜ÿ©\#ç‚œƒ‘9¥–́màÆ»[Úơ5A £RéëùW©¥YÏH7Jÿ‘ÆIƠ¶¹•€m¤í¥HŒ»…*9ưXíđư{°t¬äÊ•–́Umàç°ågYVl%ÄÏa«_‰rÀé’ËS®± h©@¡¤6DR–P.]K¼nK¹íÛ·o´ơÖ[G«¬²Jf‚Bi₫î»ï¢»î`G=)@IDATº+ºưöÛ£"ºiù!áæÓS%… fßßIIÑÊ£¤››Ûˆu•%@RỸ…Îæëà‡¼#ơ‚ÿHD>pàÀ\à±è¢-6:WƠü&Lˆyä‘è–[n‰̃¿Å5.° –^ªZ‚9q[ ôƠ®ươDsæ9ÿ0úGÁ?~µfË)ÁD\×\AÎ]Yܲw¾ä®Xm˜AÉtW$?››³´̣,éŸ̉8©Vl%Ô­{I›IôZ·Ÿt]3Û°*{Ü̉áÀy§’6Zë]ùăÀÙ•AµfîV¶¯´¿Ô£…Äߦơ{Kß´°«+@€¤[8Å\Z•´~¡í< |£6ṽyç¨G–₫¿ %[₫ç{.ºổK[ D\(u—ÿ¸SpËÖ% ¥ÆÏwS9Er“!sàq”ôßBԘ߹ÿ“v—ÜBRÈœß]¤Zü‘/”§zơ/¢Œ90î×L¿Ôº¿H.˜Olf»¬¯ê®:®Mn.¾Vë]Ès@‚e›ÀjJïËù›Iæ·Zw’t©TKs¡,Í Ûr¼4»TÈ>Ó¥‡ m€¿2@*Ă¹ĐY6ÓË¥‚ÿ,ưúơ‹ößÿh¡…Zjư/t́ú'OƯ{ï½Ñ•W^3¦¹„>¢•~`|ÚÜF¬«*^:» (k5“ Ø•\S<¹™íjuƠ2J¸»/4ÇÀƯtö”î°lp—‹¥B­6\³|¼4Vª[T9O*X¦uïHḲ’„e@%É•!ÇHÓHïßH̃έơfƯ”¡¿IH…*Â\¡éÖws/aU @Rè:å´̉™̉¡…Nß«W¯hß}÷V_}ơB›Ô߯ô½á†r]³ÜM«€¹ÉôỎĐëqWÀ@zˆ4k$ü"¿ æ§JßئÜTfüÿ½p3™2#¤z ÄÉv¦W¹ÀæÀÂƯ9 ™kM’̃(´Aø7U|ª=÷ÿón̉–®Ètņ[? ™Çô.ƠóưçƯµ¶îB¹ÝLŸ—o‰Véœr»@ÊM¸éñg”ëió¦«~óüéOöÚk¯h†Ü¢Ø8öñÇG'tRỗ{ïÊ´k*v—®/´₫¬3₫S*TÓäRoÓ?xÊæó?ïỉÁR¡ḉ¿µÎlxÙ‚ TÙ<öÎêBÏeº0^(5‚ͬL^$¹å9d®AvAÖ V}.lß'y2·Ô¹EàºĐÊ:÷ưIùs‹O¡ ²Z÷é5 « BMtLBCʃ¥Ö åÚßñ8ñÄ£Í7ß¼d '«¾nƯºEn¸aäV×_=”L߯[H®5Ú_E «³¹@z¸€âV€í¥/¤F³IÊ°ÿן”üÿ>‹”¶ÅåđºÿH?¦W²\1î²q´A3¾_çëÔ(6Aumúû̉zRº‚ÁAµ»jÍ$¹U«Uuꇤy $á ù} ơ7óMåưz©¯´€”¶®r¸"è9éĂôJ–ËG Tp(ßÙûÈ‹*ûJK‡0¸«Ơgœ‘ûzyh}£øü¦¯VX!̣k†_xá…ÈƯ³6H¾̃̉½]X€Ếê ă_.¹4dŸÊédoă‚x#ÛÊüƠ’»c9àH› [Jî1:½’岘[gpz¥gºF₫M¥O ¬¯w÷+Êàm̉ể\̀®&ßü̉ƯÏâ 2»¶̉ñ(v œg¢|ÇI{HcëÉơ½2ë d¬4P̣oX̉ܺäÿs·Úc àZ ¬ü–̉)†J³…Nå±Ûlăq}X’Àرc£c=6zåÿí.y·ü Å*CÀîÛ%÷› ™kÙ||ZÙJ_wmßSr J=ü€:`;CVJ›y ”^M¯`¹l\ ₫ŸätÚ\˜>Xr EîRxäoÈ₫-§×5z…CˆM¹|»ëÀ®ä •ă\™±™ô„„MM`-º́àß–*繡øJK ôCXÚ3p´…àAi¶4;F'œpÁGL~¹K—.ÑYg­½öڶȂ¯ƠJîăB„Jë7gó.|ܤunêo.øXFë]¸K?ü’ÏMå6wë"}%¹YÜ?¦·H.Ù́ó1̉ ß‘)ÿ-»åq[©¥÷ùV:ŸKçwđ₫§äçŸ×ÔAÂôùeOºIN‹[9›³³´rké§ÀF³Ê÷_i¡À:\¥'ĐU‡¼_ ăå÷ưBđ!yûES3¹(v¤¦®t¸8åc±|́ưC ïË¿ªDđ!._éÀ:»Î–v+°w ¸@•@/ú!©gú]»vÎ9çœhÀ—™°B¦Ÿ~ú\+ÈàÁƒ mâfÓK ­Ä_R.`˜wÈN•ÓÉ•–̀?éΤï/Z¿˜Ô[ê"ùÇt#épÉæmO—üÿ•ÔSZö3Í?,±ßAÁPéŸR)dé}6ÑFsKĂbK¦ÍÛºEó(¯HX:?‰USÍÑ̉Z̉×Sy[đsâAiÀ:\¥#à@öNÉÁpÚÜEĂcAnM¯`9d Ç`±—ü'X‡»t6Ô¡nü,J›Ÿ«Hï¤W°<µ´äÊ¥´ùY₫iËô –KK t—ö {´9”u}̉üƯ‹/¾8ZrÉ%Ó«Xđ‡÷ÜsÏèˆ#ˆ¦6xËú‡ïŒÀ®¸JGÀ₫½‡s—‹=¥¿J¿Ö·Å5Ÿvú^r!Ư- OK[K,bóúÏSŸ_9!áÿ@óçH3J͵.$÷y\Û:`(ủv­ÇHÍ/½OrÙùq!áƯ¤3?ßGÓ%??°̉đäF)Tóă7ûC…¹±<·î!ù3mÿ'Ç>i'Ë%#°†äJŒd l|đÛ5³–ªÜˆ·aú;·t¯/]÷»kÊÜtsçʬLB?®e:UCvfåö~i±t®çœsÎ\ËG½|Ñ<¿r.o¼ñÆ‘©Ÿ~ºËÂḾHyFKÁ•M¶ÆÑ®íO×ø{>®̣B ízë>É]²ü£ú°ä`>04›4œ ˆỤ̈rµWÈ:Jóææ~û˜œkmưc3<ïki2Ÿ6ØAzLØø)ù|¾K¥uë‹q½¯\XxBêÚÁÏ$6~L­c±}Î×î7–6´.l¼”^ÁrÀ•̣v’BƯÔ.’ß•neÂJG ¯u·äÊ”´ưGm¤Đó*½-Ë¿pÅÓ.’í¥¤ùwÄÁŸñ~æc%&Đ¡ÄÇăp¿¸L“å̉0ºwïÓ@đ‘&Sü²_Óë7c]pÁ¡N•óÉ5ÈXiøáû÷‡̣`½R>•¯_?iicÉÁåHi°4T²­(Í“›û팫óËKh:"?OöÖŒï“,đ?—ßÀƯq¾ËÏwÑôCiÿürḥg9ß–v’üăßûT;™ïă’»_%Íùÿ‡ä’°öđ˜%†ưlJÛ#r¸…˜à#M¦¸åÉÚlgii“Ô.3iùVÉÏă¯SëXl'?(°̉ØG‡kRhèܹs.ø˜gd™©´'n”£ùC»îºk(»¾ŸƯlÚ+´_« ˜ăRè9qœüçµúˆ¿wÓríỉfĐ‚l}$·,9˜XPraÿj)6~VHÈùØÜr2g^6®–N’œ­¤‡ÿ!p¸j­$ùœ÷I…́­8R:K½ĐFEøßÓ6ëIcÛºFÎϬư|=]1”¶_åpé{k=cµ‹[C̉æóÍ̉ôé,·‰ÀƠÚË÷pÚ‘cSé—ô –[E`¢¶v÷h`¯æ~›ă*–@¨`Q́¾l×”Ạ̀r›vwêÔ‰o|¤¡´syçw¶ÚÊeÉ&6‡<·H¬ÁÑæ÷/É<Óv'¦E.ßnƯÔöƒ´üẼçÂ`2ˆÿ@ËgKóIéÀE®&æă¯̣¡©ƒ„’[œv#–msœG̣zNSL[2×̣:ØññÛc¯jç ¥ñóÄϬí\¾Y Ơ"¿ïs¬íܺxW`÷•å;9àÇƠ:GhóÍ»ÄÏëpµÀÏÚå̉³]ב︀W;€´^j×nZvSkr§2^b Wäb¥$àï§ø£…[U¾Ó~\Å8M›®ØüAùüƒØV£_’ö“H3JÛH@âZhŸĂ5«}%Û,̉̉k’$l.LöJ©Éÿ7”}”û¦̣«Ú4qâ|¸›X{í`ÏÀAœ§Û¤îu¸#à{9ô pë̃ùÅ‚­!0Iëvâ`>¹é‘ZX?é`¾UV×Ö́ñ­|Jü<ÅJGàÊ­à_éß$î嘶º@ÚJ®é~ñŸ?í̃tÓM£uÖqđŒ•€ßˆåÎ1G¨’>:LçÛ Ôçlăù!{x ¯n½p· Éu­q ÖƯHC¤ï¥›$²ă–8OK/H₫¡--,¹¿Íÿ£%§'©µ´lóú¤¹eÁ?,k$©ùô>ÉƠéuÉå×´aœîä>m™7‡‹;ö‘/Ô}(°)®ß‡¦|^|OÚ'àÇƠ6cµÛv̉„ÔîÓhÙ-…ƯR~[&0‹6ñ3¡CjS?v–B_jSÛ@`¤ö ưι¼|½4{É.~8`í'à‚î}éĂ,ºè¢Ñ…^ù[Xù¼₫úëÑAM丩̀襤Ÿ¦̣²ĐNZùº´@j#,JO¦üíYœN;/$}&9@H[g9ÜÊáÂÍçé•uºÜQùzBZ1¿äḳœ l‡ë7.¸½,-‘2^Ën%}>åg±ưĐ!₫_à0Êw`À«0sµêàÀjó=*àÇUZnñ8)pÈ«äÛ-àÇƠJ.`í#àÛ=̉T]$<èǘ³ÏüÁA¬¼üV±™f)zî9wƯŸÊâḳÈT^#pœVnØàHùÜÅ°”æ¼Ñ’ „!³ßëCÁIhûzđ9₫¯´“äîiI[E —K“Næ pám‡ÀZ’ÿđăj?§tˆ•$·X&my-Ü!}™t2_@?­¹Br­{ׂ̉Ÿ ““NæËBÀ¬C÷̣²̣»L1¢,gm ƒ¦oîÊzɲúWiôÑ9äh®¹æJ»Y.H_~yÿÆ51œmâÅ"`N¡µ‡ä?'´¾²øXG= pd?g øq5%0§\Ç7uçZ—\³Œ•‡€+v—ܵ2i®́¼ é`¾ —Ë.•̀,i?ja°DD’Jùæ}/ï,IÂ=‡.‘èÚ’ÓÚEÖ›zû`m¹å–cÜÇÔœ*²t衇†º»¹K‹XË.Ö&æ•´_´°̉Á|Eܤ³8đK›Dê4•¦Ë§Ë•~ë•[—èÔ”U©=Ÿë€'º¦|ñ8®Àj\y{iê÷´/Ç'i'Ëe%đµ₫çÀ–”ïĐ€W+€´V`ӳ䛪Àæñ.gƯ¾ÿ₫ûèă?<­„}ơƠWÑçŸMœX¾Êceûí·egœ[„Và›B`sÍ­5eé÷ä̃ù}±bs3èL‹HóHY«æ4ö‘<æ ”æ7l9LŸ7~î`… ¸‹„»©¤í29^J;Y. ótÔ·G>C>j`̣.ͧV¿*-w0p¹ÛëÓóüŸ|sü¸$@R$¨ÀfưäûCÚ¿ƯvÛEóÎ;oÚƯîẽØD~ËÖă? 4(zá¿4è7{ë­·¢µ×^;zâ‰'¢;î¸#<Ø-·z‡éÏ?GûÛߢÍ6Û,Ú{ï½£M6Ù$:₫øă£ñăÇG÷Ưw_“ăÇç<ăŒ3"w+»ürÿ/êk7Ü;₫;ïL]6=ꨣ¢k¯½6·ÿ<đÀÑæ›o™ËN;íù#‚wƯu×”ơ¥q>{ơê:́±!'¾)B|̃×Ú¿OÙ¢r3î»ÿ•4\rßR_ÉÖG·OÚÍZpwæ½ïB _<ëÂ~|3»Æk‚´\¼2?ơđ$'r¿>\Ø)í)•ỄƠN ̀ÏtÚ›5¬ëhå<´z,Ñß–Hå3îÿŸƒ§ơc°–(°m#ºüêʸ»í#MLù«µX̀óñ9%.ôœ̃1ï_,‘xW Œ—ü̉‘ØîĐ̀?â…*Oc₫₫=IÚ̀Z84é`¾u@ZÇ+¹ơ_“ ïٳ甂~z]{—ưƠÿQî­ZC† ‰b]uƠUÑk¬‘ @$üôÓOÑ/¿üz꩹aơƠW¼o¼¿‡#FDÿú׿¢{ï½7ºè¢‹¢§Ÿ~:ºå–[¢µÖZkÊq·Øb‹Ü·Kâó́·ß~Sátøx~ëÔ™g9ƠÛ§’o¢rđqÁDp@î\÷ßtàæ|Ï>û¬SrëرcîX;`Ü(àÇơÛGđBZwWù¹Â€hœ#m)¹6pÉûk$›ŸY.\®.ơJhiÍÇæđM¥÷¥c§¦ñ¾é©7±/~zêÖ ÿ&ûa'[8|œ'"9₫1̣üù̉úR©̀ˆœ´“v°œ#0¿₫n`ñ7ù¾ øq•Àƒ:ô‡w7ÂĐÿ``Ó†rͤÜÈñỢ=đWËÙóÑ××­çÉg´çÿ%’V•b[[3̃~ͼĂó~¾Í/gạ²á7¹¥m9º¥,G ₫Á-nk¶ ,®™-â…xºĂ;D3̀à#å³nƯºE³Í6ÛÍ:묹“¹u­—]vYND\ØOÛ—_~™{c”ăïh,¹ä’¹̃½{ç̉{ÆgŒ:tè0å<~«WÚ¼ï?₫˜ Z’ëâ`ç̉K/͵|¸%Æ\¦›nºÜØ·¼|óMùÊ+¯¼r¡?₫5™Næ§8vÊÜï3OiÖ5₫¥¶EtÀS›9è¼ùu姟iº—tƒ”|^}­åÏúRó±m«wYø»ä¤-…'µŸ‹ƒ¤¤ÅÇ:CNÿÀ̃,9HsíØ’kß{J¥2;ÄËÏŸ%Ju’::ÎáÊK2htÖ|Ÿ\é¬âN œÑ÷íÆ£»Üzî̉3Q¾3¦¥ç£“ü½”|F{~¼4LZM²ơ–zH×JkI6—¯f“ñB†̀¿'?¥̉ă߈¦­ÔF,† Lvăm€kă‚HnS oươ×oa·ö¯~øᇣÿüç?SôÊ+¯äÚ¥K—ÈƯŸÜƯêöÛo>úèh–YfirÂơÖ[/zûí·sƯ¡ ¸%Âor+JkÍ­ |Ü ăÀ&i£GÆŒ­²Ê*IwñƯ°6Ø`ƒ&₫R:ÜƯ+`®uđ7²k 2Ÿ¬YœÏ”xêÚ¢₫Íóq­ûPz^̣’ÿư?i²Û¶Ù;¡ä ¼«ü×K·KsKqÍf‹6üN”æKíƠSËsJ÷¤ü^<_º&àoË>IÀÏŸ¿¤|¾èÂÛnçÊ7>àÇU~ĂuG§q ưN £fü}qÊœ+^>²”™æq*=>ùŒ̃%¿â1Măßœµ4?Lz@$ÙÜúán·_x!CæBÎô,_ÓÚÀ†¸¦&0íÔ‹,A`^m³]z»m·Ư6ô¦ôfí^~ôÑG£»ï¾{âÄ^|ñÅ#·\̀<ó̀‘?‚²VX!ºâ+¢₫ưûGO>ùd.hqÚ_|ñÅĐæ-úV\qÅܱÎ=׿ñ¿[ÜÂáÀÈ–Ăjù}ïöÏ9 -êê|ÍlûOX»Gpwˆ´ùf®ÓÛ•cù;tyÉ5§®»LúT:^JÚ6Zpa¬8qíj?É->–ó±«Ôû¯ṿ₫¥v+¿<:?í£©ƒ£X¢Jit0·¸¤ÍÏ!?°ß́£ÉŒ)¾.MùX¬,Ó§s ¸ ¨Øok̉+ĂÏ“¿§|YZ,ô|ŒÓ¸¢fâ糧;äW ƠÔwßX[zXzTê+Ùçgy(h•»êæ°te†[kv¯zÊj0j0ÍƠN²ÿ‰¦K&¢{÷îÑÆW¦Eùä“Oü¶§]|ñÅ‘»dM˜0!ºä’KrÁEz;sÏ=÷”q#GŒkióCglÚÉrE ¸ ú’´lꬾ^Ϧ|º¸K ă·É÷vÀŸ%Wèù§Ï7¡ß’×äÿFZUr ˆ+W¾–̃H«K>nÍÏ₫k¥=R‰ÛEËç¥|,¶@€V7ù‘ó[Ê=ö#©\nÁpÁ₫ˆ#È`jƠ8́°Ă¢|pʾF¶̃zë\ àÁëm1»ï¾{t₫ùçG?üđCîcâ·ư÷¿₫íÑ{ơzâÅ[,§/¾¨LËêk®™ ¶r øưïùí_lè9s˜*˜Ọ̈’ƒ…RÛñ: kÁüƒäÀ!®K@Đº¤Ø|C$“‰¦₫#y}l?Z2ƒ×óNsJn“wWḍ½Îâüm™:›GW4²íÈ|%ĂÓíjéùèơ¾ÿ¬¤m¤…û¤¡yçĂù©'Ă$?k“>û³h¾>ưS ó½́ÿưø7"µÅ4j=Œ̉騅åé”È‘Rdb<̣ÈèøC̉Uónù5jTnÀº_½[nó—ĐưZßd0TîsÆÇwPôúëñoṕÍ/8jÊRă͸ “Îÿ“̣­–®™Ọ3j„4Aʪͫ„¹Ö—Hàn:Ç•©ó|¥å¹%ÿx7¢ P¦‡¦2îëÑSªFMê5:ï¢̉R|ߺàƠQr‹Ü×̉¡̉åR̉®ĐÂRRº`oăñÛ¥Sc‡¦‘”|,'ư ½#]--"­.¹@è ̃Û¹̣¥¶…N:$uâï´<§ä<4¢­ L»e+i.Àö‘>I:™Ï>—\´µµđH̉Á|a®Á#à¦í©‚¿†Öµüµh3Í4S®5¢Á‡ùôèÑ£*Á‡Ï] –kÙ6 d̃µ:Y±‰JÈ̉ûR\ˆËJÚ̉épA¡Á‡Ï{›ô“gæç’ jë2~¿|Ơ>œ”ë%,ß”ÎÖ—’î”f–î•̉fß̉igeæTJ>vÈ—ÓAü̃¡•UđƯ£s:àHZW-¬œt4Ø|èwè11đ3Ë.ÑJZè8t=³›‹*§Œ¤ø 0(½©¿ŸáW̃bÙ&0`€+H›˜kçhâm ḈʦóŸ4צk'“ë™Ï±Jƃ¤4y>¶©WWèÜ-Ơ2_WX¹À½±ä`èCi 77‡‚#ûf’f”ÜJ±Z^ËjÛqq!̃­OJî/ïÀ&dîötˆtÔ3´A…}nå0‹´­™v4ĐrèÿöÖÊ-gƠ•Ai ]Ïô6,ç €+4¹±–[®‘+‹Wí-ưF®ùçŸ?Œiä\̉ÛƠặ@eÊùOû¨}t0ŸY¡&₫&ϧ̀¦¾´ sa}ÅÀ! ø*å꣹åî`i É­oKWKK¶>¹¿Sÿ±ÏÿƒnáºLz8¯K4Í­+›K›H H¾î£¤BæJ*çÚ Â₫ĐuiÔçđ b¿j€ÿ£®́=‡]ñĐ5{IÍf@».îî₫¼S™ß8UËö믿F›ñÉ'Ÿ4y[V-ç+”ö×Ê?̃h¡|ó£W;wBèZ¹Ÿ¿ŸSfî¾Ó1•éOµüaÊWÉEƒ'ü@ó~QÁ|’»ê},í(¥Í¾ÇóÎU4í”—çc{_3.øXIÅØÚÈ-1Vµ-€8xïº ¯q̉>×Â[IG Î;°ZDG¦Ó_l’GjCµJÚtZX3é`¾0Fü§/L£đ÷çíœ\í/|/¸ +¶²gW]uUô /D\pÁT‰ó›±–]vÙh·Ưv˽.÷ä“OÎ}ÿc̉¤I¹Wđîµ×^‘_§ën·ƯvSíë…®]»Fw̃yg´÷̃{OơºƯÎ;羆¾Ă;D}úôi²_@ü:à” J-7ÊâÀ@FC…ÚÀf5ẹ́boiœô™ô«TËöªï>ÈqwçÅÏ'·<å…²¼† ¹ÍÊær¬c¥g¥—¥Y$¯InƯ8EºXzWºQr!ô¯’ .+I¥¶tÀS¥“$ß;Ơ´7ụQ’»Ææ~̀ËKÏÄ™†~†f8ïŒ.’.H¤qNÍ;hê+ù̃r«ß‰̉4’ï{ï³­äÿƒ#¥Ó¥´]*‡ÇJù>MÚ{Zø·äÿ¥ É÷旅­¤ùº̃•t0&@ H˜KÚÛ?íđëw“¯¡M¯¯æ̣äÉ“ƒ§·ß­¶“N:)̣7Aî¹çèî»ï{î¹Ñˆ#¦lsá…FC† ™"66cûí·Ÿâ÷÷Fü}‰=«æÀ+p½Wz­¹´‹̣́n!Ió SB›Â>¶å/÷t}é¹”oŒ–¯—̉é»Y¾IRo)iÏkÁ?zÉ7‘tÓ²¿¨dóâW̉péé ©¯dÛOk°üă˜L_<ï›záüº“5MÚîZđë.R¼}zz…Ö•Ú̀rhà MSmêÍ*°«r&ĐùŸ–^¾•,úrÀv¹t ä˜Çôxưæ̉º’÷)d¾î…,^çi<ŸÜö -¼tTĩi ]·d5…₫_Í0V̉\†Œ}~®#m)ùwfi¤tdó¶~₫öJéÏùu>Îêùũ÷PioÉÁ{V-t½B×5«é¯jºh)\˜™²ơK¤ËHSVe~ƈ_Áë/˜û å–[<ü5÷8@q&—’v©,´~‘¾–Z2ßW…̀­ ¾cKÎÛ7^Z,^Y婯Oüÿ'ÅZ£YèÿƠÿ×µjóæ₫Q~ú™¦{I¾Öñsv‚æÓÿ rMióÿA¼~¤æŸ‘––²j¡ëº®YMUÓER₫&?róÎÿ¯w€,måúƠ´—_~y4|øđh¥•VÊiË-]q¡*‹‘₫¿×ȇºwwùï7s÷ªe–ùÿ́œƠûÆmw ˜Ø¢₫D± ́Ńøabw'*v)`c+Jˆ ‚‚ ₫ŸïpÏ:;{î½{w÷Æî¾ïçóÜ™sâ9çμơ#ǬY³¢ư#,|™ư駟v¼¬”…6  Ü,­°’¶ }Y™çkd4nỒS>!É7ùûÇG„¾‚—î:a–ăVá\e$ÿ ^î×ÉÙ£ÂXï™:ú?éø”;ô@Œ_’îሂ î¶âeøSn_ꃲçƯ:Í‹|H5Ô¶huÆ‹çWë@m¾øĂ C$ÛkR1 Vä̉Ï5q78̀xîE§/ Èa“è¬üÏ*)ç¦:ro#­…‡„ÎÂp¡T…¼¤Bû¾Qª.•rÑÈ&™`¤¢œ¬¸â®qăøs¿\pÑË.»¬ûúë¯Ư¯¿₫ZV–ß~ûÍ;6úù„ ¢Mäø!,:tˆ̃dÅ+y+# .¸`´<‹%Z¼ ¬k×®Qú•¹¶Xq̀‰˜)mÅœé§R±Ä l LúH/?Ú˹vöx°Å…°Ó„«‚^8o*đ0́$à¾XøŸĐ^H8n¢÷‘›Ë ÿB;QÔÆ2­p¿ Ä©+^¡º¢Ü”6¿«x“El$w›„_]v®¨\1ïĂâTđú^>]¾Sî):öL¹9̀.hïP}å]A~’ÏÂÂĂÂç†B)KÈp =gK¹E)› Ùi_&e¹å–Kz•”›}wƯuWôJ]f;xƒ3¼¶uëÖ‘!ÂÛ«¼‚Q«{Û¶m[Vf6ØßáA:éd…Vp3f0à\º’¦Ư–.Ưç¥d¡úNÈKN•K”‡đ±0@àÓXè)đÛ/…Ưtdn!)÷Ƀ‡ƠƠ±€x Æ’+;=Ng»¤PæY„“P»U¸_¡\…Ê2Ô—'*óçÓLù¡Ä1%Ư Àyç#»ï‰†Ú3­Nx…êZê}w¨˜ï,$0ÔA8ZøH˜. º‡ ú)qF HS™Ú8– p+ơ{Z¨ƯJ½̀iè.¬7y“̀ đG+'́w(eiƠª•;çœs¢×ëö́ÙÓñỆ̀(–[]qÅn·Ưvs /¼°ûă?Ü6Ûlăºwï½!‹8|7$.̀z¼ổK‘q÷ç|©¥–6¯û·k%ĂKÁM=²hÀ¯.{…êû[ UØ?p¶W™x0]%ø%Pó¡·p/˜ü«óc†^x 23‘eSĉ?·‘;.₫á÷›w¤Î¿ƠñRăè“”_1¡v«p¿*FÁ ”g¨®³j8ï^Jï4iâϬƯƱpFa^è̀¨yÙK' }„k¼§ï ô»¿üˆ~Ϭ̃Z£«'  (tü™́.Đ×—¦ ”á¾™”ẹ́`Ô,S^äÿ~êḄá¿â…~¶¸wÔĐ‘4“jÏdœºâƯ‡ă÷¹R¬çU*åfÉ+}¿‘đ‰ĐC@¸ß"\.Ü ̀₫¸ÿ̉gwÖ& qé/÷̉0²e( „üBíjß*riÅ ́íP¡#•ºB•ºté·U1ËÁ²¬ø²±µÖZ+a–cæ̀™Ù_¯æÍ›»áǧe† ëIéر£:th̉»¤ÜP©O=ª_¡?Ë/¤ ¨ª– M\©!±¤?8« GÏ É›û#)ÿUtDâi|*÷ƠF’íØe~´²ßtÇKÊbüwr…Nưƒ÷?ßÂ…Ú-Ô¾…-Uár Ơ5ÄIuJD{%•ÀY:₫ŸĐ-åfiÉÁ+\x7O¹é‡;â‘’^:~-`<Ç †r¯+œ.ÄûF²p­€A>H`äø~á>™BÄÇ%-Î7Æ ^₫IdÊ E‘´‘ơêL̃Ó½NkLB†b}º‡êâ¤Æ¯„₫Rü@+áOaª—ëå¸YXY /Næ ÿN|?‡÷;Jô<Ôn¡ö-Ñâ¯Xf€dç¾ÂCÎ+êÙ/-~ ¾R̉ 3 >ß}óăÉ'ŸŒŒ”xuù>âg$nºé&ÇW̃½đ1C䩧rưû÷w§vZôµôÙ³g»¸óÎ;/2,xâ‰(̃·ß~Źûî»ƯK,}/„¯¯“îUW]å6Ùd“裆—^zidH¯’¦Ư*´o!ËT„¼¸1bpÄ…O1 5•ÿë·‹0CàAÆr•%„ %:äæÂ8{Wa đª0LˆK£˜ƒëxbTÄå'9Úä±C̃đ°½đ˜đ³p°ÀƒyCÀ็„đbJ}đ…̣!ṆÙFÿçíQ«  ô§…¸¼,÷)ÏxŸÊÿF‚Bvàûï<£.|!,# ñ4FÎ÷*û…'₫ăH<^2¯ù1ÊÇñ~5} µå¬/zîø6*$ô-ö&03Ḉooáyaá5!~ÿä%á~¡¯€!î»ÄA¸gºâˆ ÷Xâ<'g#ásamáÿ ÷ÿWä,áÿ„n8$×øµZ üßÚ üWN. )¡v µo!ËT+̣2${3UèH₫ëáÙ/­¹̀ 0Sq衇–%ÊWÍù¸àgœáöÙgŸÈŸMÖK/½tY¾÷‘é›eu‚Ñ¿–0Œ¾¨N¾[nÉ=a~=t½NnVPÜ& sdºà>ÜñsÜqiw¤Î“yáư‘)Ô¥Ơ:øúÇ©O}7T×Đÿ9ÎOMŸ3KÁ½÷dÁÉôÍë…ơŒ̃¿N–›>èû8áé„~º_n/ÿÍ…U„Ị™°¿€’³€à¯#oÊåƯ:₫ øó<øGxKØWh*ZBíjßB—«äó«L*ùJä¹€ß%Óÿ₫ûï“^yw3»°ë®»VȇY”øñăÇGa¼b–åRȤI“Ü!C¢eZ•Qô‰ë ®g6Ă7̃¯2ÁĐaéW6Yươ£Y•Ă?<2`6Úh#סC‡à’¯liU7H~ë¾|< ¦ (0» £„l̉^ŒE£ó₫i¿($層G ºi·¤T¸_%#Ô!wè¿»jª_¼*¿ßÆ=jùy¨BíYË«™¶ø¡ÿị¾œöâ   B÷?ü¸×zé îŸMÎ1¼/²É2¿ïŸÙî»_ É6Çït!› P„— O C„Á†J¡%Ôn¡ö-t¹J>¿Æ%_ÂâKÿO‹<”|¾¾Øb‹y¯¼Éoá…¹W” üư·-˜‘x₫y₫ß"Ó÷~ươ×h)3~IUù₫s 6̀5múßÂV[måü7OByÿweú3fIî¸ă¨Lo¾ùf´<Œ ́=zôp½{÷NaBXÆnxơI¨ïÖ‰ ¯‘pÚÉ̉Œ@¦ŒlÍxˆyÙW'ü m„O…e…l7|˜-/¿ê¤¿ÀµäQÛ,Î åŸ#Là¤È×z†Œ²@4ó*"L‡'—`1b̀ÀB}‘¯]3à—O¯¥S‰ÿÈ¿…fIM„ÑÙüû÷f}Ê;xXN¾‡'BFËÍ}7tÏODMëdpªp˜°‹pÀ̀̀Âp¡j·Pû²Lµ"/3@²7´o,ö2áNë¬SΫ,,'l&ç TIa_Æ 3,bÖ…ßË7ß|ă;́0·ơÖ[GË«5kæ]4´dQïv¼øbײe\Gs‘CZ¼½j™eÊë;Œ6¹wêÔÉgWሄñĂ&w@y{́1wï½÷FûIX"V(aF( ơíFªoè *o^X†¬åM ăd|,`O{Å“‡ă(á8ázá!ô0•w´„åRNB§X9ᇓN½p”P›U9¹_Ơñư ^ßƠäh ü÷´ó’b d$†Ú²¤ ]Ă… Ư‡×¨á<²%ç+Z+â˜Ddü¦ ÜS‘›…øư³¯Ü7 ¯ Ü»Ik®̉ÅxIJy„,Kă…t̉Zèe'¦"¬¢ă]B¡µPH µ[¨} Y¦Z‘£ˆ&Ù¨0JRHa)ÓàÁƒ+¼₫öƠW_f)̉½Q7N1«Á.̃<å7ŒcđjÜl³"́ Yn¹åÜĐ¡CËUwÎœ9ÑFt̃,•IØaă…7ctĐAC¨ĐÚ HÔ ¡cèꛬÇ‘Êä!y?ê!¿Y‡BHx8̣ß\WxB8A@P@1N*£„V¼½…FB\z˱AÜ£ÄÎCmjÛ+v)9ʨmóÍ%÷Äè”́²YóÜ“¨̣äqá^ª7I©oÈ÷"`v‚„Åå^>á—O'?=™àÇ}9|¤€6Bk¶ĂđGøÿ!ÙB̃Sœ•„M‰~¦ÇüB§Cäy`,à[_#`ỘG}ËÚÎ_6̀`I’ü,Ñëmp…»ßsQ(FxûƠôéÓob™¯Â}ươ×£×ị̂*^–:!,»6mZFü™ ÁĐ`¦ư"ï¿ÿ~t-Ë¡xKÆ…fPüµúé§(¨{÷îÑ›°x¥.iqƯ5×\í=ÙtÓäưç6ÿẸ̀̃|î¹ç"ă Ăç•W^q0k®Ä-}Mº&Là^[A*´m…uË£‚1­ê­]ä*^¥ü[÷ tH”¨Ư„+f6âJ&Ë7ˆËM¿»°³ÀÄW….Bca?D|”€ơ’\G3¹IŸ4É›e „ưŒŸ»…R•Đôk}ëË´Í×*Ü´jù̀™±{H`9ÑÇ©ăK:z¥²µÎQ̀<₫Öùt¡Ÿ’›äùL*€%&₫ºøñ–T8ưư¼?¸yèｄø5ñó»Vh Ưoê›ÂÆàH¨ï†₫×ùjúÁ%BáÅ} áJa+0/Gô%°¹À5ŸÔása{ûéÂTa®€4¸&̣x[! Ú Üw×0" ³„L2Hç ~ˆÿ^OáS!ó¨¨"Ô Đ—){\P4₫{Øy˜Ö&Ùø,åĂÓ Ê&cÖŒ›åO7ß|sôúÚ=÷ÜÓñ f60L˜Qđ‚’í߈…K³x}.K³¶Ûn;÷Î;ïDßíÀPaY3+S¦L‰.çU¾qaÿÇK/½äÈ™^§‹áÁæÍ›»‹.º¨Ü>˜Đl F¯æû$7̃x£ăÛ$”›2µjÅ̀maƒÑåø»ÎÇÅÜơát¼*I½Uvóà«ĐÏcq̣y:Y‰o&Ü'ü póæ!r•p‘Z^~ÑÉăÂƠ¸\<F û3RÀíe'  vî~₫x0Ÿ%<%Ä…t@)H§@!xøÖ7£ o’¨ôrNøåÛÙP¼"Đw7(Wk>üº°¾@œÂæÂ8çoa đª0Lˆ q½p-ivơ©ăl‰÷œ@̣₫\X[À yZØR lưúÿ„n8$Ü -´OR¨[}î·&*â?4á—OçJ¼‘p¹p[ꜾI?{_@₫NO7}|´pÉeÂ¥©#q¼Đ'yGêØ_Ç̃}Aw„¹Â‚“ÂqB6é£K ”£{!û_w¡̉)Y±£¢”¶WüWÚ%-néVRöăE`ó7›½YRThá»(Ó!¥?[yØÏẠ̀ª\„Ù ¾À¾À Tx]o¶t˜±ñ_Ag? oÑ*¤đ-“믿>™%JJ̣ŒSƯ(;Éz/¿›J ²Œ´-#|+đ0ËUZꌗé¹^¨ø付À}PªÂhßÏḄO´²ü¾+ƠBç©\‡)]”¨¸ —cë¸GÎ÷V„VÂÔX~Œ*OPđ0¾Ö¾¥âï(p?ËÍrĐŸwÎP®-NÊọ̈ÀYE˜ \Sç‡ (‡¿¦ü/Ñq !¤8¥¢äơ°°R§,ÖwưÛ± @IDATç+êw$Ø!w±Ú†¾6G˜–(Seœè’ô?“ÄÉEø´軳„\dEn!̀¦ära Å}^é́œH«Ü ™da yȽ̃óPçÁ±ªg€Y€>úÈe[‚äă×ä‘åV~ÉUỦ/»ÊåzŒ-ø¯ç.LÅ’>ø ”ơ°g=đ£̃I…í¦¨û •TUâ X®i`´TÅpÉ5ŸêÆßR $ïƯÜŸê›ñ(lIaV¡©đW2 îơ•6£±qăƒ́0†Ñ&Ù_ ̃’Ân7§QB6YFLDBbọ̈K!Ù÷ñc五d3&ÙwÇɯ>öƯĐ󧣸XPÈU‰×%Ơ–dÿÉ%Á™{PU„ÿÈU¹P×̀èçÅFÊ”{qRBíŒcn1ĐĐX¨4:U¥¶̉ ZÄÂ0À̀M%sÚ´0%*z.¡zwR©Å2)}0“jÓdœºè₫J•ú!Q1¸ö ¿|;™ÉHg8ÿ¢0Œ/ûêäpăZÂaY!›,§\Ç rsmº¼TR²U 4!#2­ÎyU’J?†3FIé3°±¸X¢˜ü×?Lø™3 f€¤!&à]áÿî»ï¢™W©1đå—_F¯*N”‹‘“úÚ€£Uwê—¥åØ$îaç%ËÀv’U¸?âÔU¯»M+;Qù±.$­å9>°§Îù¯m$4XÇ{œ€2³’NÆ(€ëâxOnfBy/"ÿ[„ÖB©È¶‚„Ú/­Nz…₫·Û×ÉÖ½J…îĂôåê^UóS£†ùI¶N¦ZáF1nܸèơ¶¥T[6”ó–ª| ³ ́éàUº¼Ñ á˜æ[ù.NÆôy}q@FÉo^À¿>xQï‘đ3¯̉b`]‡å}\×Ưú¤ züûï¿Ư!CBy>̣¬G~Oêʃ¯qÀß¼J‡ƒEyS~“₫ơÅëYUôßDeYÚ´aÂ/ŸNÚ`đ˜€‚̣´ºÀæđ±₫^P¨ØL‡’Ơ]ØYxKàz®i#03²•0Qđ̉T'\Çr¿-Œị́^S¸F(̀JA¨«W*}y>ÑÉ7̃QôƯ¹‰zÓ/:'üéä¹ĐOh-0º¿à¥£NXvtĐZ <‰åw0[XUˆ 3tăŒí⾘ñÛ@ /¿(4JE˜…l›( ÷ §~æ̀À@)5h†b–LĐÉ’ 4¨ÂÇ“q å¾ç{Ü6Ûlă_|ñèëằR ¿ưö›;ơÔS#¿ë®».zûap@dhđqB.]º¸<ĐƯu×]e_^Ç áơ»;́°ƒk×®]ôú]^¯û /Do#>é2û̉­[7wÛm·ªÊYó=ztôƯ”DÄ?å®ï <Äe99¶‹{ØyI1Àưú€@‰*Ü—qê²×$UnD ‚(N…”nÊ Cäu™ (ªÎJ™ÊJ™Q²n¸ñÖœO…G„…‰7đk/kë„ëâđáä2ÿ€¢÷…@zÇ ¥"¡¾ûp©®HåøIù¢\'¥g̉£HnöS].\,40 ½¹…ν^8IđáøÇäơ䦟~-Ä•ƒr)#`xgo¥ˆa ªÜ'¼&`¤(”„Úg¸ ÇÚ¤’ ĐaL*ÏÀ@Eư+ơ1;PlÁÈàµÀ{íµW¹¢̀œ9ÓrÊ)nÑEuW_}utôx…đ̉K/]|_ƒ‚Wåbt ̀¤0ƒr̀1ÇDÆDä»$Äå[!ûï¿4»‚Q³ë®»º÷̃{¯d–b¥™¡bÔ©¶lÚŒÚ ?3•&<$%tcMÆ1wqè¢ly°Ç…ûÑ£qzzRd»‹ ¯,‚–Yʤ‡€µ°¨°“đ£€|+P8–’ûPáw9XXQX#®APă×ùó̃Qèüî¡ṣÜ(uäađ³—säè÷(ĐùÚÊgư@^¡v D«Ó^¡Ún¡¨5F<ﻉ²l-7ËÏú q™&Ç”¦ê|@?ç:úxcávƒ›tVñѯsßëx„đ €z£pP BÙCƒ¡v,…̣–l ̉¤̣ p3A`a™ ø3#PLa/F³fÍܲË.[V ¾˜~̉I'E{5øˆ áqùüóÏƯ³Ï₫§ƒbṔ¸ă‘aqúé§Ǵß¿¿{衇ÜÙgŸ]f¼đAĂ;ï¼Ó1»Đ¾}û|Ư e`©VË– bOX’6räÈṔF1ŸxØ7AJ̀r‚WÁæ,"<“ÂèiRÉLÆ©nfPRÄ*»²Î·Çü qÊhí—ƠÈCTE₫ÔE_TåÂ<_sH ư7å7>à_ß¼W…–ˆUCú˜_1N×Q¦É₫ÔU~W üçn’B¹ăÏ1ró ~O¸&…uud0e[!|œ@œ§…!†É•̣¹€Q¿”ṔûÏÈÿ-9$ODgöSil¤̉T•EDi+'¯½ö›8qb9¿B;0@âÆù³¬²9üñǹW”—/¾ø"5Á€,'ó²öÚkG³) Ẃÿđ‚QsÁDK½yä‘h_ ~̀ |g„[í‡I”ƒÑ™—~ơƠ đ—ä(•‘¦x¹êûù"€QѤT¸%#Ô÷Oª'ËA’rz̉ĂÜg`qå2*xIJ3Ă9*ÖÀ@ÑΔ_±u4î;Iåæfù½-́+` $e?yĂ–±ÿÓ9DádÁ?X‘°±p‘ĐJ`vd’ĐW@(C¡ "ËÙüŸ‘ß̀€¿ye` Ø;CÑJ6ˆïă¥céÑ€â^?Ÿ:uª[rÉ%Ëå»̃zë¹k¯½ÖơîƯÛƯ{ï½̃صç{º; ~É•O„¥X{E¼`̀üđĂ®S§N®oß¾Íç—_~y”¶ç`©¥–r|­½˜‚1DÙˆÓÁ&óy¸;@Ä1̣+ß™‘̀«  œ¥Ü’÷kîCŒ̀gàÎ]å×.ào^…càheµh"»ßå~8áWŸ(ÜIY](ùÅ–Fy#Á—Ăh[á#á~¡±—=åØ$†Kc̀\/Lâƒ'ËÈƯT¸Rè$à¾XÀ`i/`´̀0f‹);+óĐư$Ô~Å,g­È;ù@«….r!YsÍŸ¤œđ¦%6aK^xa÷óÏåg&;tè-»Úo¿ưÜj«­æ.½ôR7o^åuo¾^ø#ç¼á ƒÄÏvđuṭéرcôJ^ầ˜1#ÚCÂy±äÉ'Ÿt¿ÿÎ3®œp󻦜9®đ”…âv^TZ+÷ù£å‹Á}ˆû‘É|Ơá‹gǜ«0 4S6'²bàƒY+“ù ¼¯3̉I9GŒüKƠ_>‘ù“rÿ-ôÖÎrîYqé#ǃ1Y:g6„‡ø†Gá;¡˜B{$å y Oz;;f€dç(ăyÆ×8:^÷Ê^‰bIóæÍ£½¡ü5jäÎ<ó̀Èx`I•6–O›6­xăU&iƯºµc†ƒ í̃Á(a#~Û¶óßJÇl̀J+1pRÁđ-9Siîʵ[qJXR¹Â¼$$9j™ŒcîÂ0€eœ&¿P»¦D¥™Ë¿*V…Á!ùí-¬RE®ó¥:X5\!QKFÁ®Nø™s₫ˆ’öJ́ô, ûåƠ*M~cäßW@)gù” –1¬è2+¬‹p¸€^Ñu° 0Z`?ÊÉ·B±„̣mÈœ™“*0@C›äÎÀº„‘ăṛâ‹/:>NX Yươ##ˆåQ3qÁpèƠ«Wd$ñÂ~øa·Ï>û”›Ç“O«iÓ¦î’K.‰Œ™ƯvÛÍí²Ë.îCqm´‘ë̃½{´ß¤M›6Éd æ~àÊŒ£X¦Ü¼BÊI,J½=…—¤å¹”üÙúG@±3‡ø?THÊ5̣¨0Å—ŒTƯTçɉz7’Û”„)p.¬<Î äó¨ü&üë»×ë"ൠưä×4à_¯!Êd­ ñ́@i¸_à†Œ&Åđ áy S„Ë…Ù3/¤A¬&£›ÿ!Ộ$…™«—’æ® *Íb`t˜›è’ñ0ö]ÜpĂ  €xœ|³Ä×ăqÄùÊ¢\º,ùâ5¿l:畾oƠ5j”»â+ÊÅ-”cüøñѦxf¤ÂhqaˆId\Kœw¨œǗă2W&ÇûÙy`oYüå±lƠy+‡´IEN“WèÔI₫#*F7Ÿ<1p‰̉=;ọ̈û8ào^ó÷V Á`|Zx°'tP¶ó-•³è¦A†ƒ ÷â(‚¯dX¬Íç,;ï¼ó̉)l=TMøçÛéơœ|ç“.}øø1]`ưwVú¡Ơ·ÉŸeË&Ơ`À j—ºt¼« ë§ÜÑá›o¾‰^Ek#ÇqṾsÎ’+F‹yW@La ’Æ‹ Zoƒú«¯¾r]»vu 6Ls©y×̀äƯwß}¡äư´·…˜ û}(ïĂ„±àuÎ{üYOnk cÄÔĐi ¥ó’À̃¸L”£»0/îiçixC!=…Å1¶“›Ù€Ÿ₫æ¬yØ‹Â:Ød_Æböƒ=“j0`H5È‹]ÊÍ‚Ư1?÷î»ïºÍ6Û,zmmÜßÎk–»ï¾»ÜWÜc©›Â#£’§ă‘¶r5oWă2oœœ‰®dª­R |ûí·îÜsÏ ícbÙ ËWfW*!‹“f@’¶üP„G&5ÇúÄ3Bré9*Ø̃˜¨œ°ÿ½û'¢ó]•ÎBÁŒ9‘'i¢t1¤y&å(y¼“ô4wî ˜’;g¡+P XŸXnÍ1#óï½÷Ûa‡¯¯5©ỹ|óÍèkï”iF)La “Åk”Â{‹Æăñ‚ör™ßÁøá[6Íñ́­»Â÷kN9å÷Ë/¿„*y´<_˜_FªĐ—å×I*02oR3 °́ªW )ößf’́÷j+¬›¸ly¹[ O'üÍYs \§¤º’{A~güÍ« 4¬Â5vI˜ÖLÜ“ ú₫ûïƯå—_noJSn¾<Ï«‡ÂR"¦û™*5Éxƒ?x,'đ ïù^hÀ=öØĂyä‘n×]wu}ûöuÙ>”™©\Ưºus}ôQ¦(Âxâ wúé§Wđ¯ĩ4Æ}b̉¤I¡¤¹¯ô˜_VXª‚̣O"&ƒo K'üÍY50èÎ \J‡>$ào^•càpEĂI Ëd 3©yX¶}| Ù ̣;(ào^UdÀ *—æ²ăä_AĂ1b„»é¦›̉\b̃Ua€Mç}úô }päÎ^«JºvM#tådÖ¬Yï¼d!Ỵ̈àƒº‰'ºG}ÔñÏ›o¾Ù½ơÖ[nàÀUÎ%ÿŸ’zhæä¯tÎ|AC©ßk¯¥í²ÜWLªÎÀ0]zIạ̀•äÇè<ûBLªÎK®’+*À8PÈïÍBÔaáe { ¿êx‹üv ø›WƠè¢KLN oÖă-?'̀]ù©:w¡+ÿ'7‹™É@FR﹇L“ê2À²Œf—̣œü®ø›Wî y„÷ Æ_î¹®˜:ujôÖ­%–X"Úø¾Î:ëD3 ­ZµbcuÖYÑë®™!a©#Bß8û́³Ư;îè¶ß~û´³&£Gv½{÷v»́²Kôƒ3fD×O<Ùt̉IÑơ|°3fLäŸÏŸ{ï½7ú~N2Ø[Ǹ¯˜T tùÈ@›ÉïQ!©<¢W€̣{YX*v¡üÈ0©Ÿêr–`&¥±<‘Ù:`î*1ĐAW=#„Öú*ÿwª”ª]”–3@̉RS倱º²wèêûï¿¿Z#¸¡4ë›ëäÏ8ă ÇfƯ€Œ—SÓÿẦ+w"WXa… W7.ZD{äCxíï—_~é:è wÛm·¹w̃y'Úï_m}Á¸Æ;><¹é¦›FFį¿₫ê ½ ¥b—\rI4ḳÁ”+"{J0R0>®¼̣JGúơëÅaÙûM®ºê*·ç{º|4o¼úy¹‚›£: 0€ÁdÙ^©™;»Kê’W„•——ßÅóª÷ë²;—. ?fñÚẦ«̣ ¬§¨/ ¼₫8) PÜ”ô4wơ0¤ú†R`:ú̀PÀ-·Üâ₫ùPùea€ï«đ† 4£̉ÓuùNBpo–¤-8́Mà#—IùüóÏÓ},/5g÷&›lâîºë.×±cG÷ÆoDÆN÷îƯÆû$>₫øcw衇ºe–Y&2$–[n9ÇRÇ6Ú(2.øæRK-m\Ç0‰ËàÁƒ£Íô:urË.»¬;äC"C…4y}öi§æ˜qaÿ ³(ùîÜBrøá‡;ÊgR£ °aOáÏ@ª‡È/´L+Ơ¼ÄÀ‚ï:6¾’ß>Bnë ™W9Xùj9Ÿù”f”g”h“ÜX]—À+uRFɃ{ƒI` Ï$? \®dÑÚÎJ&Ïè*JQ́4© đŨuăƒ%o;ŸW&-‹“,{ºâ+ÜÉ'ŸÍÄ¯Æ ÀŸ–KƠ”°Ñ½yóæî„Nˆ’die¸́²Ë¢å_xöêƠ+ ó?,ÛZ{íµƯwÜáxc×b‹-ú0¥#­O?ưÔí½7«%ÿŒ̃´ŸñYuƠU˵jZ˜©ÁÀ Éà<¥ó&y``„̉<@x\HÀ-?F”û6‹*̉K]7„ó† ¬öé0óªér h”å$÷,£ow† &•c £¢aH/ˆ₫¾üṿ3ÍÈ°¾y%oÀơ­₫ù®/´à'ÊË?ø¶‚Ifñ>öØcÓèj–P¼—9 ­k®¹f¤ü‡^'Qx̀1Ǥ{ƒS•²åu´ƒ *»cdß}÷u /¼p´/ä…^p¯¼̣J„;ï¼3Z2…!´ổKGKÙÀ̃¢E‹²4ü 3#,ạ̊ײÉưúë¯wmÛ¶ ö‘x™>½fơ(₫ï @¤3>vß}wwÄGǿí˜R²Ç¤Iúù? 4I^ß½[F…“ 0¼̀vÆ &ùae˜¯sH —…0óªÈÆÚP!d||!5éÓ&ybÀ <Kö8ˆ¹ËNQ ØH›¯uôeƠâF²QnÓl8Ÿ«ªí%0̣c’gÖ_}wÑEE{$’Y1«@;±Œ©&„%X<đ€;vl”ÿ‘W_}ƠµiÓ&Z>Å̉) Œ&MD}ƒ™’™3gºiÓ¦E†Ä¢‹.}tüøñ>êסC÷öÛoGË­¸₫™g‰ f;H—[b(L˜0!2Rj¢>¤Aø¿§[‚¹í¶ÛFàk*?K'#·+´oÊŸu²‹¤ ¯¯̃k«â|W…cRæÈcá£d€¹kœ”bf™¾ ¤ÜT~÷ çẦë?hxL`)aRÆË£«0-`îe AÍ&g©¥a€¥nŒªu…¯²Ê*î /t-[2¸dâx饗Ü5×\ăæÎÅΨ ÊçÑL“ü1đor#öÈ‘##C$ôMz–dí´Ûqª.(ë,¹âƠ´¼ ï‚`|°¨uëÖ‘¡ĂloĂ"|¯½ö6¬c<đ ßX ư`F³)l*?ÿüó]»ví"ăa–„7_m°ÁQ\Œ,–ü±ÿæ"‹,•¥êµqÑ́y§yy‚ë̉¥K´Äơqéܹ3N»OÇI©Ùó«•ÊHHFË“‰¡Àzæ·ê;PX*PoîÅû ÏẦ+  0 ڦɂÜÑẤ4áơÑ›%–× G¦©ü8ùc||“&ܼk{°Ơ ™Y’‚ë~¡x(L,3âƒkơ]XĂÛ’oŒ—Ÿt¾»đz̀ÏNóĂ@„lØCÁfBÂj^ƠËLDuC„eP,»biUR0026lX4{ö́hƒó|÷ƒo—')|ăƒ¾Ú»Âwf¸#¤ºÂŒßˆ É₫ûï-»jĐ âíØ c5îÇ=ù²4©₫"ÿC„§Ó„×uo₫́eüïOö_­ßMñŸ—%•ƒpé̃XÁ23zïơ]6 ¡'À ¡€ưˆĂ$ÿ T|âå?Ïú ¼ÙÔl6ß|óè-÷₫ûïG¯De)Mᆺ“đupó®Y‚Y°7‡W"§Y½¡%Go¼qÍ–¨–¤†qÄ~Q£FKŒÑÄ̀Ën»¡¿…Å 0/yđ=Xĩ%”Ÿ‚ú/£›tÊæt–ƠYI}XØûDư‹}X/mܺÀ«ƒ1>˜I É‚ .}$‘ư(™Ä ĹÔxÜ€J“̣‡̣gƒï§iÂë’÷>ª̀í#́!aÿÁö„P ù…‹”ë¹r~Ca‡ _dˆSׂVQ…îºd¨Øơ Ă@±×Fg )Af€äƒƠÊ¥Ét FÈé¢3r̀²,Ö¡×Ua‰ o#â-F锵TƯïƠñ!¼¥®Tüze4@(ßg¹îºë{v̉ Fơa‡ævØa‡rË¥̉ů­₫́ñ¸ùæ›Ë¾̀ª{½úöíëV[mµPp9?3@ÊÑQG{eÂ}¹ÙMf›M¾,?ªk²–*tƒ°m† VØ₫‚ e ©HAÈôÏàà¦ü}ÿ½@çáÑÔYLu8G8Qh–¦>̀v`xÜ–&ܼó̀€ y&8ḲŒ´]+‘.Ë4øb3K«k˲>úè£hmü×_®úøs“0È[³’¯ Ç+µs–ZQÇÁƒ§{MtY‘Û·omֽū,R3@̉S8o,äG„µ²dù¹Â¯Päjƒb³¬Êy¼p¬mDë Å9\`Ôܤv1°©û€°j–bOU8K·Àô,qK)˜ÙJVĐ—[d)Øw ï% ÍÏ‚ Ä€ ":‡lvW\d«g»†µí¼óÎnÓM7¾{-~1§L™â† â}öY÷ă¬ZÈ*ƒQŒñYcZ„B0³â ơĂ?¸Ûo¿Ư 6̀{¥=.·ÜrÑÛ ø_=/Eá5ºo¾ù¦ă¢£G3đYø¾ÈÑGó¬GI`Dy‘,¥ø^á7 "̀”´Wz¥°`–Â}£pêư|–x\Ú °âdálaÑ,Eeđo€đ€0J(Å¥vè­…ÂÁ³x™äw¢S]!pnR" ˜R" ‘(F¹±èyà-‘«àlÖ¬Yd„ ¬`Œà.¦`tđ P‰Ù_ÔwuÂṂuïaÇ’` Êˆ/=_³ç;•í ̀Đ—Á+®è“)Ê‘ öôe¸³ .́Ù³§ëÖ­›cƲ:»OW‡Ä»ËEæ€J$É̀-÷²‡…Ç„iB±„Ùʼ¿°j% ’v‰pµ½ĂW"A‹R ,¯R\,"4¬D‰¦(Îăƒ‚ôåb¯Fè 2́+đ†¶•„lByÎ&e‹lá…gÀl…ç<—Ù̉W8L¨”UÁ 7ÜpC·̃zëEhÛ¶­kÚ”¼ü ëàù0æ‡~è²l*Od‚<0´žÁ%Ëfnµ Êwu…eY¯¾új´Q{êTfû+'lZç å¾?ç{ÿKÆ0”èË́U¢?§û€`²,!cF²wï̃5öÂ3@’,—„{K•‚—‡Tö7l̃% Fo ù–WQÆNBa]¡2Âh7Êæi¤Ê\`qj%¨Ổ]s(ưdÅeéưŒ̣ư¼^Sy°iĐW*+üÏèÇïTö‹Wx̀)<çUÉ‘ư!Ç G Kç’#°!Œ*óúO–·°4dùå—ÏyÍ=›l'O}xÏMœ812<̉}ˆ.K9¹1°Çă ´Ii2P#ˆ¯ß 4pà@÷Å_xïJé»ë®»®[yå•£~Œ›>ÍKrÊ!Dßơ}̣€¹sçæ’Tô•ơƯwß=zADUöydỀ Ĺ= å¢ÛäX’¿ÿ]ámá+áka¬đ‹RÇÈ̉*Âê)´Ơqsam!a–ƒ%7(¥”Ǥ~0ĐNƠä5´û Mr¬̣Ïÿºđ±@ßư&udÖ$WY^¬&0;Çq=~Œ!‹ü­Èèèü·LJœ3@J¼Å[P*1:PeiÔ¨‘[vÙe#ÅY^ êñ÷ß»ßÿ=ùå€×ŒÎ˜1£Êù¥.d„í£(&¥Ï@ ñê2Ëđ裺×_=Ú¸Ëơœ·Lñj߇éÓ|ø~îû0Gf30¤y[ư¼:²̉J+¹½÷̃;ú¶I¾–=R*ص̀„œ.́%4ªF®¬¿ÇùM˜•çXǾ?ñ`inK¡:ùqC¿M¸^¨â¨ËLê-T‡ă…#„%«Y–ïM|ÿ:gÆ·Éù₫K^TḥÓ¡Ê2SW̃-ĐYQaRK0¤–4T¢˜´ÛÖë!» ¹è’‚ÊûÊ©ưG…ñ‚Iía oˆ§€ÍêC‡6«ç¸|Ï'Q°#†ÎV[må¶̃zk×®];× A~o¡f€¬ik"£ÖJäa¡²Ëµ ‚ƠÍR‡…Ç c0 x zÅB3¡Te® 6H@¯xR°~,j›ä÷éYÛبåe,nŒ,]"ƠøHåÀàxL`Ö¤v2w$N K¢xkûNÆ-n³Øb‹¹-·Ü²̀è`V¥PbH¡˜®ñ|XF‚!Z Åö<$ °M-va,ÿ’g`1•p7åYÛ M…bË<`°@~ZøE0©Å ˜R‹/Pt4£ơ…-b`3ߨkAYVå19ß™Zúa  H¼FÓ§O6ƒû á|{#ÓWÆă×Vçœ}~Ó;Jä{;…4:âe7$ÎF­=_S%gCøV©cË<ׄ}$ŸlÄ}-uüQGc * ,¤‹: ^¯àœåSù–sa8{âM³´Ë¤0`HiÈ Ơh£°öWVMWĐ1WùKŒ¾Ʀctä&aS "¡JÑ $—́K3fŒ?~|´q|̉¤IÑ‘%\l*ÏUx£–ßÄά½öÚEơo¼f€ÄÙ¨3çÜ“Qâüæq\*Çbh|/|Ăç:C°Ña‘`’èäMZí¯Oø#3'¹ º:E\¯øPî„ÜóºÈ¤v0`Híh§|”’ơ!ưÆ0¸ùÓ3̉à7qÎF¯)³&ơ‡’1@̉QÎf̣Ÿ~ú)zq‚ßh΃…0¿1£áÆîR3@J½…j´| Ëñû1#ÍÍ„ø½˜û1J÷c6÷¥ÂÀ̉*đ}ØëÜlÿè»ô韅i‚I=d q=¬³Uy>üùq01j5,âKê&Æ@-ge ˜µ•ŸTp`b de aÖÁ0ŒcÀ0ŒcÀ0ŒbÀ "̉’1ŒcÀ0ŒcÀ0Œ́ ˜’#‹a •dàCq÷Ưw_ÝÑ£G;ö1¼̣Ê+e~ƒ r»îºkµ?>X–`†“½öÚË}đ{«/S¦L‰êÂæw/Ÿ}ö™Ûe—]Ü7̃è½́h Æ€1` Y0$ Al •g€××~úé§e¼ÿ₫ûÑ+lăFÀḈ6Ø`ƒ¼ÄBœt̉I®uëÖeå©ÎÉ¿ỵ̈̉¡ÿ„zôéÓÇaäüñÿØ™1` Æ€1` ddÀ6¡g¤Çc 0,}¯£aÆd=öp#G,K†ïz0¬ÆÁ[oñgçÎ<óLׯ_¿hÆ‚ï}lºé¦î́³ÏvM›6uGuTôÜ7̃x#z»a'Ÿ|rôV«La>ú¨[vÙe£W÷>ñÄÑù!C\³fÍ"ă¡C‡Ñ›²n»í¶èˆ7v]ºtq_~ù¥»úê«ËÊœ<Á ¢l‡vXd€øpf|n¾ùf7mÚ´ÈÈ:ưôÓ£ÙfJ.¸à‚(oç¢̀}ûö¾1⯵£1` Æ€1P_°ú̉̉VOc  `€̀=;Røûí7÷Í7߸=z¸_~ùÅñ•ó™3gFam´‘ăCƒ(₫ 4p»ï¾»0`€›0a‚»ổKƯ%—\&~æ„eOC‡u'œp‚;÷Üs#ĂæöÛoj”)Œúè#·úê«»%—\̉­³Î:‘ÑẠ̀,Ü^ùnÙ²¥»øâ‹]ûöíF < ;ßé`–â×_-+0ûK6Ûl³(î‘Gé^}ơƠJ…ùH¤Ç’,>6¸ï¾û:öt ¤sàF3.¤¿ß~ûùK‚Çë®».JcØ°anܸqeq0bÖXc שS§h¦…̣2»Ă+‚[µjU6 ÄlжÛn[%he…³cÀ0Œc „°%X%ÔVc .0€¡±È"‹¸7̃8ªÆŇ~)æœ{aÆÄ ÆËwÜáX¢µØb‹¹9sæø è¸Ê*«”¹9g¦eÖ,¾iåÊ-eJ†ù‹H#Ⴤ,óB¦NM‘C?P™äˆ#ˆŒ”c=6­¹ơÖ[K·&OƠ{ï½÷.w9˱¶ß~{7|øđhv£ÄϾ”‹hcÀ0Œc 0`3 ơ¤¡­Æ@¡À¨`Ïû?¼±Á7·ÛµkWV”…æC¹ó…¥W t,‹jÑ¢…,Ụ̣̀óÏ?G›ÛZh¡¬a₫–z…dñÅw?₫øcY†D&Ùj«­¢¼Ù³2~üx÷ÀDÑ™µÙrË-£=¼ơëÅ_t×_}4ÛÓµk×È8aÖ¤yóæÑŒH¦<,̀0ŒcÀ¨Ë ˜R—[×êf f@Ø{"Ï̉+¤mÛ¶Ñ₫‹1cÆ”%É¢1S@¼E]Ô½ûrÿ÷ß—E{衇܌3¢t~øáhv…îH¦°²̉œt́ØÑ=₫øă‘‚AñØc¥‰Ỹ› ô½zơö®°i ío¿ưv´ï¥I“&î™g‰ ʸ̀2ËD†×M7Ưä0FLŒcÀ0Œú̀€-ÁªÏ­ou7̣ÀÊ6³+¬°Bô+²`‰¯èe“93!ámỲ°¹œë1d®½öZ·ÓN;EÑ™í`Ó7¯Ăe‰«™ÂByÅư=ôĐhcú¥ƒẠí·ßÆ£¤=ï̃½{´ÁœÙ›»ï¾ÛớÙ3ÚgÂÔ='̃HÚn»íÜ{ï½ç¶Ùf›´éY€1` Æ€1P¯I¨5·:Æ@eø—½ …öù›7ϱ,=́ñ`?o–âíÚï˜;wnîË”)̀ÇÉt|ươ×£ââ÷|Äưüy¦0'td? ¯ËåÛ$@́Ó¸â+BQ+å‡7>xå.F†ß₫01ŒcÀ0ê;6²Vß{€ƠßÈ̀@Ag@̉£€ÍëqÅ̃ÇÍæăd;̣æ-6ÈóZ`–`ù·ee»®2á̀ˆ°±ec¤‹Ø H.lY\cÀ0ŒÚ€ µ¥¥¬œÆ@q( ¤8U/~®f€¿ ¬Æ€1` 5Ï€½«æ9µcÀ0ŒcÀ0Œc f€¤!ƼcÀ0ŒcÀ0Œc æ0¤æ9µcÀ0ŒcÀ0Œc ¶$ 1æm ÿè×îÅë ÿ*k(*ÿ–³1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ@ưc ª¼²p·°•ĐT01ŒcÀ¨; ü¥ªŒ&Öj•LḾZ2Ma1Œg ́y„2HØ¶Ä lÅ3ŒcÀ¨ƒuy×ê%aW°gh€ó2Œc ƒ1@æ6ó‘% 2Œc 0ÀÈS³:PR«‚=CK­E¬<Æ€1Pê ü…̣o©—̉Êg Æ€1P# pÏ7©ÝZ³|ZjÆ€1PhXêhU4ŒcÀ0ŒcÀ0Œa q¨Çy›Ÿ1` Æ@-a sç夤u²˜6ÓT'›Ơ*e Ud ÂL±Í€T‘I»̀0ŒcÀ0ŒcÀ0rgÀ Ü9³+ŒcÀ0ŒcÀ0Œc  ˜REấ2cÀ0ŒcÀ0ŒcÀÈ3@rç̀®0ŒcÀ0ŒcÀ0Œ*2`H‰³ËŒcÀ0ŒcÀ0Œc ẁÉ3»Â0ŒcÀ0ŒcÀ0ªÈ€ U$Î.3ŒcÀ0ŒcÀ0ŒÜ0$wÎ́ cÀ0ŒcÀ0ŒcÀ¨"f€T‘8»̀0ŒcÀ0ŒcÀ0rgÀ Ü9³+ŒcÀ0ŒcÀ0Œc  ˜REấ2cÀ0ŒcÀ0ŒcÀÈ3@rç̀®0ŒcÀ0ŒcÀ0Œ*2`H‰³ËŒcÀ0ŒcÀ0Œc ẁÉ3»Â0ŒcÀ0ŒcÀ0ªÈ€ U$.ÓesçÎusæ̀ÉÅÂŒ´ ü₫ûïîŸ₫InÆ€1` Ôsª₫ Ôs¬úÆ@­f Æ ×^{ÍuîÜÙ 8°̉ļưöÛ o¼ñ†ëÑ£GÖk§OŸåsÜqÇUˆ;räÈ(́¦›nª–Íă‰'p§Ÿ~zÆhü±Ûc=‚qyä·Ûn»¹k¯½6/ϽöÚË}đÁ“ôÑGƯ”)S¢87Üpƒ»îºë2ƯlàYgñM»'ñÎ;ï¸#<²œÿèî¼óN÷矺|´ă5×\ăn¾ùæ`ñ«[ïx_ fP OŒ“O>Ùíºë®î­·̃ªFJ…¹4Ư%Óÿ#]ɦNêøïÔ¤0@{wï̃ƯpÀaW•úd«Ç?₫µsÈĐ|úé§Ưe—]–- ¯¿ ,¬ªÏ̃̀‚xù]'zG'(¿³ä¹¥Â§¦‰ÓG₫? ·¦ ÏæƯKá á.ùŸ–ûUîû…ơd”0Oh‰#& ê|†0)æW™Ómé»43ñæ’r̃+Ë_¥$§ª0­«P ‘º¦wàºä—«²—ü?’ÍÙ«­®xI@ÉzGØY¨T·ÍCỷWùÏ„t₫£åoè¢|û5®é ^~ùeײeK÷̉K/¹}÷Ư·RÉ£Ôưư÷ß®C‡Qüÿư7ëu₫Áư駟ºÉ“'»æÍ›—]óÊ+¯”çzB9*#éÊø̀3ϸSN9Åm»í¶•I¦Æâœt̉I®uëÖÓĂYc5Ü+®èvÜqÇ*)c¡ 0@˜ơA=öX·Ë.»Déă^tÑE\¡b$Í›7Ï}ơƠWị̂Ë/Ú́ÿ₫ïÿˆæj²ééÚ§ºơNöƠ¨đ5ô3v́؈‡ç{Î-¸ ϲ̉–tÿ••W^Ùơé“Û3äᇌ…ªơm·Ưæ>ùä×·o_Ǭ̉¥—^ê–\rɨæGº₫”k:&Lp¯¾úª2dˆûí·ßÊ]ÎÀÉ»ï¾Ư;7ƯtÓraæ0b ́¥óéÂ&ÂZÂçB6ÙIx̃¿œØ Ûy o¤´+“º8(LG U±Œè:¯$œ¥sBƯRia˜‘ö¡kÊo5ÿ'\%l/ ÄQ‡…Ë/ŒJ.&̣̀•; F™½đ ƯvÛmçöÙgŸ²Ùmü¸̃zëE×z¿™3gFeXwƯu½W4Ê’Œb̀è{|văåÅôàƒvcÆpß™/Ô‡ëṽyçhÿ½÷øϤ—c9&a¸ưöÛJ$£ûẹ́e–‡ÙĂ;̀=ÿ|ù¶G¾ç{Ü̃{ïíöÛo?׿ÿ(Ó{ï½×xâ‰eÊ>JüW\…a\ ÄÍ=Û{î¹n‡vˆêËL érÈ!î×_”0FXÉÛ²Ó6=öXÄ <ÄgFŒ] ẁ˜0ăoG2_l±ÅÜ̉K/¡Q£Fn¡…*s7mÚ4*Ÿ÷[~ùåƯ–[né6ÜpC7zôè(ŒŸÊ´cYd ü2¢‘»ûî»»‹.ºÈÍơß}âĉîè£Ú•vùöÛo£Ë©÷›o¾gjß×_ƯÁËöÛoµ=F³6ñ¾ëx99O¶u(ßÏ>û,j7 ´#8"jËP<̉»ñÆ£₫uÎ9ç8.3bô…믿>•‹ÿ—àïÖ[oúư₫˜‘BhêN›“₫Œ ê¹ÈĐO÷_‰"¤~~øá÷ĐCE.₫ ôåN8!ậøăw?ÿüsÉ,C2_/Đ¯ÖB̉Wự¥œ¤ÛD₫ O M…Ư„Ọ~GØH@¨e£oö¿…É ™#÷§Â „Áœ4~ FÄÚk¯²·oß̃1âåûï¿wưE{̀Üüñ‡ë̉¥K¤Œ®¿₫úe£Ÿ<Ô›5k)¼k­µ–»å–[üe)Œ(z:thT†e—¥Ò "”(v–cÜqÇÎ+çwCi¾êª«Ü{îYæÏ•(E7vW_}µcDe %> ä/¾ø⑲·ñÆG†X(_FS'M̀ú ŒÇ%îÎ<óL‡ÂöÔSOEJåCùđÁKƯ† )J\ëùDiBÙÆX ¼pè*Jø ,-CÁ¡^äZ®cÔåcdܸq‘ ´ÜaT2SoÇx¹+sNƯQÎPáÈKeÚÑÇåẸ̀xAQe„û믿ÚĐÇÁ̃|óÍ£¶Ă8:ăŒ3¢ÙêưË/Ü+Ó·/|Đ/0”èK-µTÔ’}5×¾ CmêWô N 6Œ¼%–X"mÿĂ°et¿Aƒ‘ñJẓÿ5jT¤¸£XÇÿK´1ƆÊ4íñÀ8Œ0>®¼̣ÊhæåÉô_‰"¤~èpˆ`Ñ_1ä˜ÀHf–0.«¬²JTwú§¯;ÿ₫˾| V`̀ ¤M¿æÿAº”£å’K.q묳ĂPG0ÔXˆ`\a¡à‡®>ÿüóè?Wµï}Äór¾`´]|ñÅ™*f91¸·`”đÿÀâG_dé×k®Ưk¶Ùf›è¿Î@ÀJ+­Ưg0L’̉±cÇ(Œv21̉0@F¹{(…:¢0"-„e¢³ù?œ¯ <* PQ,½l£”¼³„“…u„¤¬.Œ^Â})P†=„7…¾̣¸@~(‚W— ^ ByBÚN¸9æ¯Ó¨lsuÜVx^àæđßĂ[„œ/÷tá6a°.ß [C¸K@yM¨ª¬¬ {¤1/•È‹:6üĂ{ywBgÏ ({[ (©¯KÜ‘ÆέJÏV‚ªrŒp°Đ[8Q8N mx@Y…ÿ¯4]§óÙí»@Ûp¾¹€üo₫¡Ü/áäq‚p ĐY8Gh Ä9ưZnÚ ·0î̃…ÍÚ₫Àơ§ ”‡~€â–®NÜP¾·f ¡₫)o·œ@?Gè¯G Géúụÿ°°âvBü/"”~„:₫)ŒèSÛ ô^ÂWåøK@: ¤;G@V”m < ¦/ ´¡—F:Ç „£…•₫K€¼|»Açï (UđF› ßS.¸&¤ao' ån\“¡4£$#,Ab->¯åµêª«FK‚x¸c„0BñÁH+G̀yêà…IDATF¸yا”iFÂQjQ>PLÑơ£ëŒ„3«rÅĂŸ8Œf£|µjƠÊ}óÍ7ÑÚóVX! C AAEbíwÿ₫ưƯ"‹,)d(D̀´nƯ:XÊB™q¥>ẹ́íÔ‰¾©;¿f7ößÿ i½đ ‘¡àóaV‚Q^”-¸`´%:(ß-Z´(w=Æ#óÓ¦Ms(Q,;aæ‘%rIa&¦]»vPQDቺø=9äÍÈpU‡Öæctm±ÅeÆL¶vLæIûaLb ̀ zê©‘ÂŒ›ºør£¨̉/Q²½dj_”÷ƠW_=ù!>†Ù‹/¾ñÆ̣5ßW™á qíóˆ}[§Ë›Y;ÚE4]<úB¢ gÇH{ºÿư‰¾·ƠV<ăôt‘±a3xđàhÁ÷QŒjŒ`₫ é₫+Q~ȃÿ$¹߇ä/Áøâ‰BOƯ½÷f›m9ÙGD_¦ú>÷ ŒCfC˜½àÿ̀²& „ÿ-B½0R¹1›Bÿ£o{¡Mf'˜±äÿBy¨3÷₫w’d$wß}w”/÷úù“³xüLjK;2‚qrĐAEư~C&Æ@5@á|Mø^xZ¸]ØAxAH'ŒŒx̃¼œ­“á)œ¥cká3!)§Éƒë¦ g}„/„%Ü5…MSG₫Xo (B½0¨Ö°öỄê7 Ë_…;…ư„n×…d°<ÿ̃¨Oº|QÈ‘«”î\e}]0#uÑb:M¹9̀ÈËÂpB̉CÔéôTà‘:̉n{“ ´^ÂÂ[–iß/x9L'·¾îÑ9ư²½ĐF/¼.ü.̀Hë/áEÁ?ø×Ôùke¦’B— (ºåhÍÿñœ-çû‚çú|–¸~ €áđÆI3ö£l”k¬®N«( …úBăù‘È™ñç…O!Ô¯“ÿ‡m7ÿÏ*́áxa€Á° p©€ 0ÿ~®Â£Â ·¼·¼Đw‘¡B¿èl¾Á÷ƒÎ; 9 …»”E₫?S…Ă…„ÿ È‘Â!å™+¬$4.hßÆm_²BkDx?>ZÖÁR¶Œ*²”eë­·Î)F¬QœèŒ¦ô¤¢€"Ăè$Ê“7@PP<0>¼¬¶Új‘r’N>^0ˆ¸Ö+I½zợAÑ‘\o” H82åë£&g>¼?y3K¼xCn¹å–‹ f ’‚¢‡¢ˆrJ0Ă’É€ó×{% 7œÀ9Fëù½°Ï†Q÷ª#¾~Ô—¼|~đ„dkÇd\G[y¡MŸ^•î¿:÷mMÿg¿¤+7î/ç{~™†B¿A|̀XÆ…åv̀`HóŸ /Đâÿ  N à…<Ø@ü̉NŒS¸# ø¼‰ç`0”˜ 9üđĂ£û3*~¿ñLŒ*0ÀÍ÷`…æçÔơ éØKx!åÎå0.¥p₫Ÿ)æ™:ơ7N”Ä_çƯ<$P¾"0%(Œ[ ”•´'^>Ö JZ›”‡W¨}8éñ ÇLùúˆû“ÔñˆÔ5¿é8Zø7åö‡:AÑ<]àq­N(+ơö‚bH[ “̀ùCH>:FgÿưÀ×e)xß±:! ưñ‚—›S'´̣9N8SøŸ@yN’BzŸÆ<‡¦ÎéÈđè×9’› ߧÜ₫Đ\'‰ƒ…5̣M'éê4AÄûß—éIø‹¹×yº~‹–‘ ‹y©Èôùxú̃Ÿ`̣¡}0V.HëÍöă$%k§ñ₫0S~Ôî©ç̉Âö²~ôÖưÂË\’r'm₫0]¸MxU(ii\S¥cD¥(®¨ùẽ‰É ˜ñräªä¢Ø2rɈ'#¨~ä“41JXB~lˆFEÑ`™ £¡É0âÎh%{9¼RĂˆ'₫́É&™̣ơ×¢ …å¦sçÎQ0 ±W¼˜¡¼,1c ?£₫qAQb KN˜…bIJ¶MÁ!ΩËI¼ ¸1º[Á€̣Jnºë3µc̣ÊÆ̣/₫œ6E0.½`ˆÁ!{U¼dj_úm|Ÿ J'ohbP\ráÚ·u¦|½ñD™â1Â_™ôåµ+éó_€/́o¢_Ó÷XzƲ,îèñé₫+>tÇteHßûó?ơÂrAŒ öUV¨Óÿ₫÷¿èÅ^p`¹h\tàEưàỷÏüXÁ¨`I&ËÁà¥]lp÷åb³'đžŒ&̣b)36̀ô™Ud “®k!́) À"  (,Üœ ^đkàă?¿ªxñG]@Àz÷7ʉB͘Zǹ¿  *‚Rơ·°”0W@Ú ø¯#‹dÊ×_:ĂŸäxüMñ½âî̉‘  NÖPCBY“~8̣*8€C 9dá¿\ä-¹9N§ÏwF3 đÚTàƸˆ€!‚œ,¼ư÷ĂÍŒ:¡¨®+\,<"ø¾£ÓHhĂåRç¶h;qH<§?èœY’xJĐ'Û (å÷û p̉FøJ)¤ªSwùÓ·ăâûMÜ/t^•~]₫CyÅư®—c'¡£đa,àZƒ¤´Œy4̉9œû 'êO[Ư.Đwh—µ/'}₫ÿü¸?,.ĐW ôÏABÉJüfUåB¢àóVÖó€ơ`¹v ä̀† À¢Ô£¼yAAñï—Ë‘>FK|ü(»¿¾uëÖṆ̃#–C`D?† #œ(̣,© ¥Ó¿A‹ëcs7KCXwÎzôx¹}¡c¦|Cñă~̀Z°N^)k̉á• â¼ieEl^÷3=₫z ÖÂ#,Áb&%g”ỉ¬ŒÀË–E¦}üüÊ\[•8™Ú1™e£mè[(,Ăc”Û ”™%4ô7öĐK¦öÅP‚Wf¸î₫ûï6/3Úï«™¸öù$™̣Ç­éxñ´9§?₫xÔ®ô+^YÍ}7}1ăA¿§¢HÓ̉ưW’iWÅ ¯~ À¹üŸ™-AÉg™{†rYÂÄ "K8YBEÀ¿­-TF̣§­ù¿°jøđáe37̀&±{ܵiÓ&º¯ 0 º†>ƒ‘‚ĂK6Ø#„!ÉL%×ûÿa(oó3*Á@/ÅyIxA@±× (­Ó…mÑƠ„½/(eK 5-Ÿ)Á ÂåJ(ÊøåüD˜$\,ÖV8X@Æ„*0Â’;B@¬ŒdÊ·2×W7 ơĂÂÂ3‚W₫uZAࢋ€‚.PßWpHÎPD1ö^âBÛ#·‰Đ_Ø]øT íϸ¾«ĐO MhwâÓö<ßV¸æ)ø „¸ ‘ăDkP’éc!]‘̣́(.íw”p£°¼€’ñ€œ0ÿP¶¿2¡lS‡tuzQaÛÛ ”´WjJ(CüÿGç ™øÏ”÷* ¤Œüç0¶J!Ä›‚"ÙE¿[Ôï8ÿæH™-ü Đ« ' ´ m»™@Üs…Mâ¾,ÿÂ~üßJZ2‘S邳oƒ;kúă‚̀È #€́àA2Àr©ø>ÖN³Y–uƯUöœ0*Œb¿Q”Ù̃TĂr ”,–J0³ÁÆZ”{öY°ÎÜ/u"̀oâ¦̀|Ÿ5ó~Y S&É”¯¿.]Œ´cPñ­^]Ëh*#¯lP¥$̉f&¥4H¼¯fâ:ûñdÊåº2ñbÉf¬G<^̣œ=?¾ÑßP¦ysơc“ºăæ¿Êl}0Ư%™6n_d₫¡0–HRú-}á̃Aÿ§cˆøư„…̉À!ŒÿíÆ=‡zxdz¡ưYẩ̃,wôË}~,¤ï1«È`÷ö¾ÑÏØ#Â=C…Aúư‡¾Ä½}IIñéÆưs1²â×Ùyf…åæ¡D-QüîZŒœ¿! ̀ h!£”Ơ·qHPA6Éđ¿„ư…­…ß„Ë›„¹ÂÂnÂ,a´0V@ë!Pöß…¡Âå§B¶|%c¾„W& â…„k+# =êÁTdøöœ§¼¢üŸ) ¨+ơ#²Û(ï O(’q¹P_„©ÂdĂ“‘n€ÂÁiß)œ!L¾¸æg~A₫Ÿ , ”)Ỹsä7C@™#Đ÷ HœÓ×å¾D&PnÊp¼đ–đÀüWaA2Ü* C 7ʘ®Nô]ÂèÛÔéda’’xùăå Åơ~´ÇîÂÛ)úfˆ̉Ë&ÄAùm$¼'À…Gy¥X1[_¿ÿéü±x¨3aŸ× ĂøÜX8[@Nˆ‡ÿwÂËÂP!)¤”8É°¼ºÑ¢+ˆ‘¿|K₫¿½³Ç•°@t $~ ZÎ@踡¤£ åT¯æH\@0Ÿô,YŃƯÍÆN´ûdmÖǵ/NvÆṽc–1w{Ø©édö§gª”´Ư"í)ÏË©Çö¥AËnn§<Ɖb68mï(Ë[߱ɌvÚ+ß:·V†#È*[Z=â/$­ưăjöÉO³Úi{]^‡6Ç09züU+‚́$µëK}Æl¾u+ƠÉ?—²®ÙÍus¼öy¹~¶Á#m;JèÖ³ê5w¯¶î•TÿÜOwV₫ø™ÜH[¡ÎƠ[«ÏêöXÙ`;ÁPɤV—|‚~V;raüÏÄÈ’{8×µä8má,ệ̀WÖ%0ù ơ[qÆ z u®]‘ƯU†vœi£RGïß² ¾Sy©3Ô²;cn³¬ûaùY$‚ˆ¹ëõĂiÿ yés$̣“<ŒÆNs)è&ph ơyXÑ‚À<ÊƠN¸Ëg̀¡k›K̃—GQ€®Ô¯üÆQ§~KGR‰#{Œ0æÊàƒzy_9ĵöü =Çô {kH̃æ5ổAÿ˜,8E¨SÔ'Ë{Ÿ6œ$CW@Nj™'ï‚[›Ø‡°%%wèwÑÀÁËÔ¬Àñ®‰²oü¶,Ơ‚ µ[ÏJï ¥??¼¶₫-ô¹2Œúdf/,oµ2¬ÓêN€™ÿ7‘¾F:´ ѽ1l€ˆ·‘¾ ́ăë°Eàöm Í­MM“ [_íK@è@À¤Ôy•“Ö8Íd•¹Àu˜<'Ù¨H@€$  H@BÀdfH@€$  H@0qH@€$  H@Ă€ C­! H@€$  HÀÄ1  H@€$  #`2 µ†$  H@€$ Ç€$  H@€$0Œ€È0Ô’€$  H@€ @€$  H@À0 ĂPkH€$  H@0q H@€$  H@Ă€ C­! H@€$  HÀÄ1  H@€$  #p/,ưfMC€$°%ùʺü ]—§Ú$ + à È\d»( H@€$ ½ ¹ƯKcl‡$  t#à³¾Z¹öáªV Hàr Ü€Ü\nÿ́™$  ÜđYßg(ȵWµJ@—Kàæ?‹17ØxA…<IEND®B`‚tpm2-pkcs11-1.7.0/docs/illustrations/policy_model_transient_objects.png0000644000175000017500000015454013754763565023311 00000000000000‰PNG  IHDR ü?zDsRGB®Îé pHYs  œ iTXtXML:com.adobe.xmp 2 5 1 2 †̉®$@IDATx́¸$EơÅa—œ$‹¤]²d’–$*䌀P0!Á₫0 H`B@A%£$ ‘¸,HÎ9óÿ÷ú.µ½=ưf̃›éé™wî÷W·ªnƠ½uº»ºª{f̃4ÓX̀€0fÀ ˜3`̀€010mægQ̉ăÀZ`†¬̀‰0fÀ ˜3`̀€M ¼̀`/»‚I£iàU56 çátư*Û—0fÀ ˜3`̀€¨)ç×5­çĂ ÈKŒÄo>z₫pzfÀ ˜3`̀€0m`@oBflC?؀¼QPç"3`̀€0fÀ ˜30ZˆụhÇÆ=¦c=»c3`̀€0fÀ ˜3`̀@érù4ë]_ʆu3`̀€0fÀ ˜~eÀŸªđÈú H…dÛ•0fÀ ˜3`̀€í x2ÚÏß ˜3`̀€0fÀ TÈ€7 ’mWfÀ ˜3`̀€0f`´3à Èh?<~3`̀€0fÀ ˜3P!̃€TH¶]™3`:ÄÀBô;xNïÁîÖ ˜3`ÚÏ€¾ùŸGû½¸G3`̀@ư84ÿí„ö¾¬́¬,µY3«ËÏ™ÊoêơÏ^¯+‚T>EFí³'á/ơñ$ơ'€™»Đa÷ ú ä~Ơ-¤ßËÊö'ưY¦ŸK2?Êă@í6‰B§fÀ ˜>g æÑ4íó!woxe?ĂÛ½΅Ù ˜3Pñ“ă‘Êsª§ù´üQ*̉…»́&ØH<€~  ̃´©ù5X„Äfa ¶'fáçḅWƒÙÀæ`'0 > ~´Yø1¨¿Á#à/ èˆâ 9å`Cđ1đ{đ=0ø38X̀€0fÀ t„t·zG¹S3`̀@Í8x4ïí“ĵZVvMV–ÚÄ+ûT-ª×ùxÄæbé¬́¦,½€4$ơeO}œ fÏdùUHC´‰¸ĆDoDÔF₫C¾¢2½‘|(¯vgº̃Ø,,fÀ ˜Ñ€æÁœjă³8Đ[‘;Àu Do0„¼èMÍ+Y¡úLEoQṿsvVqéí™îÄ ˜3`̀@GÈïøâÙgîÔ ˜3P#âmCÑR¥>µ ’„¿¼Å£·€ê®eo@̣ư(o@Ô~]6÷¢ÏªB‹0f`1s`¢áW;Ô1Ơº³73`̀@m8€ÈæΠïD %×b /l–̀5˜D₫‹@ư₫̀´‘h“2è£NÇ€ơd»Áḍ_½‘P?OUlï’Å@:/K₫Wà[ •w‰±ư4­Èô I/ÉôïêKñ3`̀€0a`ºôêNÍ€0½ÇÀó„o1i"üW±y¤ÄîêôQ&‰6×½iÄG½fCßr dđÏ$+'ù‹Ñơ ‰âû*Xè#U÷}dk{đK ù,ĐǽU&‘ÇÑclzS$Of…Uº̀ ˜3`̀@»HŸœµ«O÷c̀€ è;—ç°yƒßH¹6,óưŒîÇÁk@ÿ¿CoF„ØhhCQ$ză"Q¯ƒo(ƒüœ®{ùù9°˜3`̀€¨%̃€Ộ°8(3`*d@‹ù¼D™> ,‰¼ô(ÓÛ‹ƠrxkR:YÔæN /¦ïæ‚û¾"œ$zƒ‘ú(äO|)|…¬àRơơؼ è­Ë6àJÄœ–åơfḷmœ7fÀ ˜3Đ2Óf-n’PNcÁûÁûÀ¯Áºà`Cđ1đ{đ= ŸÚüœRYœ̀U@›ÓÁ]@1îß: $|j~×flđ°/JÅ ƯÉ~Èû¿2q¹˜(vS2, ´ÁQœO‹0fÀ ˜©¨Ë®¯.qLE ̀€¨G‘æŒ}’È´VÙ¶ ¨^¶ª?Hôt^ùE@₫-ÀΔI´p—M`<ºDƒRÙMYziHôueʇ́ơæB›£/dùûH7Ît½%Y äåT ÔöФbô[²̣“ùütVÿ}̉¼½IăMí‹üÏÁà MHˆ6Hu«(pj̀€hÀ€æ<˜v¼8‡̣–10¦Cưº[3`̀@Ơ ,ĂwgNơ$?dA”å>&¤…º¤ÑB[u×ẹ́ñÁd 6 Úh¤²}–9œTu€ü§¢7#̣½2Đf@¢7º±ưÜ gÉ@ọo`~›T¼Œ~f–zeơFä8đ+px m~NKpBÖ(úOưë͆|- ^É́œ˜3`̀€hº́úêGÓÄÙĐ ˜®1p4‹æŒÿR®'̣ꯡNo$Eo@´È¾h¿ x h¡¿ñ@o0î²ÑǦªÛHÖE±½Hy,æe·nbw/ú¬*,‡(SÚd¥²7•ÿ„ÏWÑŸÏƠ=¶y)z’ù‰¬Ñ#¤ª[$ßIÃo@ Hq‘0… äçå»%u¥[Tæ×o@*£Ú̀€èw̉ï%à¯à{`u>‘×Û…/‚‚§Àª`}P&ZDks<Đ}̣‹¤>?oéăVÚ ¨<ư¨—ÊU¦MI* £̣øÈWZº6O²ù#ІH¢{é£f*צ«Èç[²ú×I5fÙn$7åßÚRl?˜Lơ÷FJôñ¨¡|OƠ½¹xlô†ăä,U_ç‚Ë@ˆ̃pœôfâŸYáu¤‚äP ™­^·åQ.ÏaṣyÿÚ4é“ä§À7ê*üÇ ˜3`aÀfX²0ud@Oơˤ¨₫ö¬ß©Ä“/•ÅbúồàŒÔ}=0ĐÆä~ 7$Âi@²5ˆ> ²?*»è‹ééG©l³&“½©Y hCñ zéíÆñ ̃œD?sS¶-P €?-Áo€6&‹dy}±₫³@›«h;ºü¤x+ù¼mJ$G‚ƒ´7ÿD_Eü¿ieÍ ˜3`F=ºaäÑ Ṛ1Ĭ±Ø§0f  ̀NPúnÆØa7/í–A{ù×[–€Å ˜30ê´î«S,#á´'ÚÆçv‹úQWå@êG•c¶/3`̀€0fÀ ŒFê´î«S,}.ø#X}ˆ=@3`̀€0fÀ ˜3P¼©Ï±p$fÀ ˜3`̀€0f ïđ¤ï±h̀€0fÀ ˜3`êĂ€7 ơ9Ä ˜3`̀€0fÀ ô=̃€ôư!öÍ€0fÀ ˜3`̀@}đ¤>Ç‘˜3`̀€0fÀ ˜¾gÀ¾?Ä 0fÀ ˜3`̀€¨̃€ÔçX83`̀€0fÀ ˜3Đ÷ x̉÷‡Ø4fÀ ˜3`̀€0ơaÀú Gb̀€0fÀ ˜3`úo@ú₫{€fÀ ˜3`̀€0f > xRŸcáH̀€0fÀ ˜3`̀@ß3à HßbĐ ˜3`̀€0fÀ Ô‡o@ês,‰0fÀ ˜3`̀€è{¦ëûV?ÀEqyX ̀P½{{4f x™1\ v“JÆăù¦„W™3ĐÍÎ7Muf#3Đ ÓfFoG]AUÇêÇHx×Ink̀€È8Ÿtƒ6<ß”ă*3`Zb`¨ù¦¥Î4®Óº¯N±4I_ïÅ&£.¤×%‘Ñ—h́7#aĐmÍ€ôdrÆȤo Hq‘0Ăb`¨ùfXѨNë¾:Å2m½_í HûaÑ Ü~/îÑ ˜ÑÂ@̀ÓEăơ|SÄË̀€.eóÍpû,kW4‡UCÄW§X"¦¾Mư%ô¾=´˜0fÀ ˜3`̀€¨₫z5Ǥ[»ùjFg/fÀ ´‹¢'p­öíù¦UÆloF'í˜oF'sơˆđSè̀€0fÀ ˜3`̀€h–o@eÊvfÀ ˜3`̀€0fÀ Œ˜o@FL¡;0fÀ ˜3`̀€0f Y¼i–)Û™3`̀€0fÀ ˜30b¼1…î „¹©[̀SbÓ®ª™èh ÿ =ÜózvÚ¾̀ ‰l–ưø 1.¡[̉ ÿƯÍ~û—fæ~¾îëzd=ÔơÈ8.3ĐFôKy´±û¦»ÊÇĐ‹¿ĐĐc(;`ÇfçÊ^‰ÑYÙÍYÙ¤g׳rqrXHîE”?ïBÿPÙ® d[•=̉¾¢~'”‡@ôù0úÎ $÷kTè¹ôṛêkmPoøi†ÿ5²¾¢M>H]¿I:¾ĐËÆ6iZfïº)(›;d9Ôu?eoSÏmcđ°pfsŸæˆ¸6Ê挬Ù@öé±k?æÆüµ¶Ïg5ªÿ ơê¢mÄ}j¾¼Ä\S_ØêZú¡Æ›ç™¬¢u²”Í“¥èÚ¹1®UÍ1ÿIÚh/iT¯køƯÓLÓ¨mÄ®±= t-n ~̉9 Ñµ>;v’²ñ.N}Êùíäóóq£1ÄåĂb̀@0îöBïFèá;M»ÇH|¦±‡>’₫êÖö¤q핶rVvKVvE–߃T7 -dÿ| HêC đ¼ÄS²ô†&;Ùë­CÜ|¢Ư>YƯIåG"¿̣7ơGñdÑ¢_}:¹dp}'ù;Àô ÈfÊ5^µƠæ*ü(/l $ÚT)¯«6H̉sˆ68*»7 H—ÎÊnỂ ’ºđSÆOøÔBA›!ơ¯c’çNcĐ"IơZ(…HW™6‡²)ûbÊe³ÈËå¨nmPoj_Ä­68w‚à?́OGQ¿[EA¦_eẰÛ*oi¡æ¢sS×CzƯç=åç6]s·^3‚´>®8†EsM&KØ—]ûE×êäPÊêËêÔG{ô©Xú†#/́”Füeă-âDîFÚë)åÜ QOP'‰̀₫}ˆRơ½h®vï¬\ˆđ£̀7²rm¨.Ët-ö=¹ÓÆ)ú׆ån  Z¨n? ?*K‘çç§I}ºđP!k£¨«¢ Iµ(RƯ: âÖ†N½/ƠưÄ¢u²½‘}Vøư$˜x3M9 ưÍZkC1P6w4sƯçûo4·ư_fơoâZ.›3̉₫Ă>s¤éµ×jÔEú³¬£Fơ3Sߨ.ÚF́Ñg¤d}7/®ơ¨/o3óñPq¦œY/g a–·hmê;ôö{i®ÇđŸ¦Íµ´UË Œi¹…Œv^ËHßÍ•é¢Uùbà8đ6°8Hô~̃mđϪ$ó'¸x°xàï$₫~₫ fû€¼hSpxĐbX uƯđ–[‚kQR_Kfwg©6©CæW@ŸƯ¾'«Đ¸R‰·ÑGÔ}EmËxP&âNœˆ×ûÁ`ª¡â ;§fÀ Ô˜7ˆ-n„›Aù^“~CçZ̀jŒ'$Fº©́\ Ñ+ày ÷„ÜŒ"›w€3}̉¼h.»+“•³2Ưxór&²ß*©8(+û6iQ‰é4?̀lÿHª…·d >Ó‚"}$êQ »ƠAøÑÓ=É–@uƯPăÉ]l¤Ô·nIJÑI¼avi*ÂÏPüLm´U¿E¢ñ̃ d·cb°CVv©ḷqËt7 vg=Ư•¾ Ü”(—âÉRÄmÿ0ÖbNư¦Ç:êú%Ơø̣([̃VyKs 5w›ùë>ï©ln“mZ×FÙœ‘ööe×~ѵöQV_V—=úÔĂsïEñ…̉¨/oçùù`¨8SŸÖ˨ĂüQ‡‚¥:Å1ơ}Z̉ëÇHx?Œ¡lü«PùĐ8ÿ₫´áP₫S@r!P₫ 'ZT¿ôQ#½Éˆ›°”éă:#Ñă&•̃dµP—ç@^ôtQ¾Úp*ÛDÏ ‡ŸH7§l :Ù_₫^Ị̂êO’·9™²ƒÆ/ ?qsUÙ%@ư éạ̈a"P¸Ù̀ ¯‚Á  •Ưá ü ÅO3ºøŒú¿Ú„ q­k£lÎH» û²k?®Ơ‰4Œy.̉Ù)‹úx’öuÚ¦±G»_£èüÛD|®ơ¨/oó¢ùx¨8#6§C3Ÿ;”¯ZêCŒ¹N±DL}ŸÖ…ôºÄ1’̃cjü»bOÿ5̃Áw–KôÑ«?ƒ”‹[ȯ$q#K륟d#=½É’æÖ¬|1er¢‚nzÑŸñûe6Ñ_Ô¥é'3›H¯Ú¨^=‰Ó $o£öq`¶̀ üü&¾¼Ô§â>2Ó#-â/ÉÇê₫¦L"ïCWùÿ@øŸé²6ÓP²3é1yˆ|l>Ô6·úT,zó16ƒ6eÁßóèzC"‰xc̀iÚ ÿêë÷@í·T¦O%å'ô²¡†M–Ù»nJÊæYuƯOÙÛ›×ÑÂù,×™êăÚ(›3̉n¾́ÚÏ_«éy¡Q_´‰º´Mèj›Æq‚"Í·_´IS]ëQ?Ôxóœççă¡âÄ•¥Ỉcz“MÛf~Ó´m·ØQCèe]|Ê{AØ:m‹n‹H+#½Suu‰c$ăë‡143~m6Ké4x åËùÔ·³X›…%Áx EñpDO5tă‘ïG6̣3\ù₫ê”_ˆ`„á¾Ë²4.7Íđ?ÜØz¥]«óG«ö½ÂC•q63wôóu_%×­ø̣|Đ [Ă³­ĂüQ‡‚½Vcñ棵 ÇüN›±®Â¼D]¾¼“ùºÄ1’1öĂF2~·5f`ø ´:´j?üÈÜ̉ ˜~c óGbˆăÚj,EöÑ—Ó!ĐSl‹0fÀ ˜3`̀€0f ô9q‹0fÀ ˜3`̀€0Ăg Ÿ~´Ưk9đæÈo@ºẃÙ ˜3`̀€0fÀ Œ:¼u‡Ü!ú…–q#́£•æ3a¼ Đ₫ăzƠ—fơ [ó‹0Í307¦úaŒyo2•¥~¨a<ˆëq* FúƒE}Ö¡LŸĐMè âƯ’føïVlök̀@‹ èuH-vÑó| Ê÷ôĂzóªâ] G:¾_Geú̃¤’ÙÀe@ơçƒÁưY>NœJùÿ²º]IC¶E‘í@7xưôç…'’×ÿ ѯL©ï‹€¥¿ÈŸ+Ê—I«öe}ơsƯ î,?-̃.ú¿’¸ó|ê'¥CvBÑOT‡~–vÊNdR›‡ÉÍ!úŸ?êó¬ 7¯̣¿ă²ú4¹ˆŒÚÆ%ºđ£ºÀ“è'Í!ê÷i Å|ÈPd{b$é¬è¿úùqÙ¨ưƠ@dB̉¸e£Ÿg¿¬Iº0ºlÄ•¤(^Ơ7ËÙOóêÿ†XÇy[v®4ï_ùnI«±äí»w¯ù ̃âLvc@©ÿĐ»ÇH|FÜi:’₫ܶ> èÿs¼´hÑMMÇx03¸(ËŸ—åI&ÿn¾₫ặÉ >‰¾PûGÆê'‹µñPÙN`ƒL¿•ôÓàÛà% ²~“ÿ0 ÛƠ¥Đ1Í£lty[å-S3đsẠ̈{]“ÊÿHâzÖ& ½V¨¼eÿøQ-àµÿ è:ÍÛÈ^eŸ’đ£²­Jÿé¨̣̣-ÑÆFyÅx¸-Ë?BªÍJÈ8ù—­æ†¹AHø¹ˆ‚ÿ?ñĐă@ô³€Ú‰ɇ€̣SlÊPDŸkW?ªÿPKùgÁâ@q‹ëïđq¯*s’߀D¼Ăåú×q;(.AºÊTg)f ¸JÓbËΕ¦¾C̣Ă–µHí¤[c x°L6×M{­Rÿ¡·×Cç{‹¸Ó´ó^í¡Ó è\èfÿ·̀QÜ0¿J₫\ ă­t&7äE¢ IuSÿP»cA<Á»]uûƠi4+́tóVª×SIKÿ0 cGÙẹ̀¶Ê[¦f@ו¸Ñ5¤ëK×”®¥¯I\Ϻị̂2ϵ_%©üú}àÇ ‘́ƠN uÙ„•ƯôfF› åó˜7ÆRwNfó}̉Å®v7eéQA~̉ñH—½åÚ4¼˜å7'½+Ó÷%Í‹êƠî 1„¢̣S³‚ü|§ÿÿ¤zq”—F4̃hÓˆÛ”ÿ°Ẉ)”}D.́G{\¥iƠœ¤¾C¯:†đ₫Ó4ểÔNº¥9‚·ëȤisƯ´×*ơz{=t¾·ˆ;M;ïƠ:ÍÀú8Đ1ưYæ(nđñ‘„W(ÏÿĂŸ!kñ '†³>̃Iªÿ”® }U Ñw<^̣ù8hñ¤·-}DKu—(cé̉y#ô²Á…M–ÙÖºCxpt/º̉ë-cH\Ï7Pש̉O‚·µ½4’2›Ûh¤öË‚đs^VöC̉¡6 ˜L£Å¶úĐ\r+̃|¼¨N4BÂÏá,Ö—Ù}H¾ ”×¼£TŒéA^¾Aê¿«ˆ‡ ÿÎÊc¾û-ùăÊƠnO—Fạ́ư{L4—êøäÑ\ËöYåư+ß-i5–¼}·âî5¿ÁÛ@Ü‘IÓn (ơz7â‰Ïˆ;MG̉ŸÛÖƒ]CÇôÀ,œ¸Á§Çù˜\¨qCNm¤¯—Øư=êµ(JE‹¸D½R-æ’gAÑÓÅJÿéỈczÙ@Â&MË́GkÖZp?R®tK®gÙéĂ ]oQÉÚTÈ檵SƯ: ü|ưz ‡ Ơ7zBƠ4ù₫ß“µù³*‘ÿơ±¸2HøQY ùˆ·³ OJêÓ Å“åGhêcßÉ%ƒJl"Ä©$滧џz¨¢v'm R‰¶e…âm–ÿè[~b¼c¢ĐiC‚«4mhÜ¡Ôwèr5d·á?MË¥v̉-Í10À›/ĐæȲ•˜5£à‰ºo tAéiéº /«R0‚‹=] ùj(¤‹=9}X ́ä[OQ·}¾ü­ÿ˜3Đˆé¨X ̃ÖÇÉgÀ¼ÚàŸỈkuọwgơê#½gêZüø˜$ă@j#}†.9 ¨^hôd.ê®ÏlŸæŒG³|´ô¿”KÂO:Ͳ;B™lCª2ÅÑHV§B6zà¡7å@åGIÑ|÷7Êe£MÈƯàU ă¡Í›Ê'IQ¼ƒ5¹Mù[mèÔ¯ -å WiZ̃¢ưµ©ïĐÛ凉Ă–µLí¤[c x°L6×M{­Rÿ¡·×Cç{‹¸Ó´ó^í¡Ó ¬„Óxr¿aj‘7`ƠI"-úå â†-›F½¨“?Ưôµp8<T¶?éêÛ̉? è˜æQ6º¼­̣–©¸"q£E₫₫ààuđ0˜Äơ<=½V¥Ïvj¯̀Yàê$¯·”’ÔæäÙ«Ư.@~b2²@Ć:żñỌOfơ÷“jµy–¿€t†³̣÷†ŸṭѬ₫D̉f6 ²ư3PŒÓN×eùgI’˜ïôđä ø‚³¥Ñÿå/" ₫Ä¥$âˆ.ÎS4Ë?Í̃(É§à ˆ)—à*MË[´¿6ơzû½4×cøOÓ²–©tKs oÖ‘IÓæºi¯Uê?ôözè|owṽ«=t}^úE £D›ăô¯·*ÓÂæư nÈé¹ ư|2J´‰²Hµñx&«—ÍS`? Y ΅§ÊXú†Ó<Ê—·Ũ25úèU,¢ƒ³[([#3ë9ểtÎ̀FŒô¾ŸüdzºḤ6Q›Ù„mB¾‰"Z”KR*×ۗ߀ä4 ̣Ư•Iät•ËGøI秳úxÓBvØ€üV™ÑÆçXđ<ÍqÚ©Ï|Ü/Qqˆ±.‰.ÎƠ^¸èMˆ$âº4m…¿ä³Ù¿)Ï¡7Û¶]vá7MÛƠw«ư¤1„^ÖGØDZfëº7˜‚¯È¤é›¦Ơi©ÿĐ«ó̃Ow¶§g÷̉môÔTÇuñ ™_ºqº¹†…¢XÖ§}Á@:o„^6°°IÓ2ûÑ^÷X̀7"¢í¢`Ú’>d#ô›hZè­ÄpDo%#á¦₫‡Ûhl“ΡWÍCøMÓªci ¡G]Q6‘Ù¸lj¦à+2i:u“Η¤₫Cï¼×özˆ¸Ó´½Ü[·XÇẓw`·Èüêc[€+AÙ"(3w̉C ¤óFèeá‡M–ٻΠ˜3 ¤óFèQWU~Ó´*ßy?i ¡çm̉|ØDÖYòÀ|E&M7í\Mê?ôÎyëLÏwvÆ“{íËàtán8N|j²˜7)³Ú ¤óFèe# ›4-³w0f HçĐ£®ª4ü¦iU¾ó~̉BÏÛ¤ù°‰4­³̃˜¾âé©2y‰º|y'óu‰c$ć‡1Œdünk̀Àđhu₫hƠ~ø‘¹¥0ưÆ@æ:ÄǵƠX̣öƯX7Ǵ½”đ¦ÏcZ̀€0fÀ ˜3`̀€0•0 _ౘ3`̀€0fÀ ˜3PoôCŸú¿ñ@?ă­_ÊÓÏ^ŸôKuE¢›÷€U€~>ûF ŸÔ₫+øèèuHƯ$ĂÀkn2Ÿư0† ßMÍ€­Î­Ú 475f Ï¨ĂüQ‡â°¶K̃>úéT:Ÿy¿‘”ºUA^ôËq‚°Ë§úÉ́/€ª>B₫qYÔ@EÅ"¨4­8„»Kc}ĺ3`F1g¤iÙÀS»ĐË́]g̀€bÎHÓ¨«*M}‡^•ï¼ŸđŸ¦y›4ŸÚI奈§ótóñù;€6iúRÿ¡çmê¸Ó´î1;>3`êÁ@:o„^Yؤi™½ë̀€0Á@:o„uU¥á7M«̣÷“Æz̃&͇M¤i]»ơOÓaøÑ?8Ơÿă‘è­Å¶àUơʇü%Ê• Vú_F[}ô*­×G»:-áoÀOd̉´ÓơŸú½È®Îew¶#̃yèäs`&ê#éû4> éµ%k1f b̉y#ô²Â&MË́]g̀€̉y#ô¨«* ¿iZ•ï¼Ÿ4†Đó6i>l"MëÚ­k~Î-è\±z9ƒÖum&¢̉ƒ@^ôs₫w‚°»:oĐ|øè:2iÚŸCv™ú}ÈF53ˆ¸Ó´!js >µùHơáö½# _zívW–ß”´*Y Gụ́”¾ e1fàÍ›@³óGjºy4fÀ 4Ă@̀iÚL»vÚ¤¾Cogÿ­ô₫Ó´¬}j'½“̣U:Oưé çëJœD]´y}Ö¶ŸÍd?g»vGLưE&MÛ娕~Rÿ¡·̉¾¶w¶#®tÓ¡_3ĐFd$r M:Đk¼›À•IY§Ơ¥p ô©‘~ÑM¿́°78\ îÏ}V2=Ö‹ùOâK¼‰?ñ(>W₫ÅU÷Mpø!x̀ úY›r½uOw€Ápäm4:<n?[-ÇF;~ª, ˆ/ñ&₫Ä£øü7¿âY|[:ÇÀtG™·¼­̣–̃e@óµl> .O×ÿuí–æ˜ S=è¯{_ƒIàz°+˜Œf©ĂüQ‡âh5–¼}ôÓ©t3:Öº*ï7̣z@ñĹ$FƯ“̣¼ªŒ¯'¶;å Úœ˜ºL¶Ù_SƯ¥₫CoªaŒ"î4đ̃…¢̣[€n*‚Í—ÉÎ@Om¾ôưŒ£J¯ ̉ HªïF6\µø xè ÚM@}„hĂqz–ù:©bÑfçđNÆú“6[UÁ9@1 ̀çqÔëæùO°'Øơ£É.@1lÆVdŒ?KKç¿âY|‹wñoi?º̣(ó’·Ũ̉{ è¡̉ßÁƯ@”|}ABEo—ÎmDF«Ôa₫¨C qü[%oưt2Ơ:M뽿‚çA>å¿ $—‚¨×Ú¬‘̀NEØ)Ơz°“¾|D&M;é¼Qß©ÿĐÙÖµ<âNÓˆ56 kDéê@¶zcq8„èMĂàG`E »yrú•äBæDÑ lAđYđ0Đîvfđ Ø„¬†¢Åäµ@ŸgÁ€ärđ  …§±¯^æS'¹|Æ ´¬=™̉˜ZưÖF´ÑÛ““@ºi"ké0â[¼‹K{ĐơG™‡¼­̣–̃a@sü!àQ ;c€¥:–ÄƠƠà|°Xunkă©óGbˆ̉j,yû觪tFm´îz D<ÿE—¢Lë¶F¢µ`Ø)]¦‘a›ÊĂ×@w‘IÓ6ùi©›Ôè-uPăˆ;M#¬XÄk·¢¼ÈVƒÁçA*ŹéíC£ ÈCÔ}:mèÚŒh‡¼ ø8¸Œ̣¯7,éÍn^̣ÇÅ¢Íú•®WzWĐ·e>u!œBÊúÎä£t|?H7RáËiu ˆKûHçĐËz›4-³w]}Đü«ùR‹ßqơ kÔE¢{â—À=@’Ñ$é¼zƠă¿iZu á/!ô¨+JĂ&̉"›v”iÍöЧ]=¸ÎK₫‹äzX/Óº¯H~IaŒA~¦+2jcYøè22iÚF_Mw•ú½éÆ51Œ¸Ó4B‹ È;¢€t ÛUÁơà‡ •ËÈhcĐḥoêKhÓ¡7"ñ4çDô_ÓÁ·$₫ï̀N₫;M±l ®_!ºY~è¤.ó©êÉ ¤¬Ÿˆc¡0"]‡zm̉FÛMbZºV­ă óeí®EĐÅge£̀Û*oé N!̀ A§oö½ÁF÷£Ü“tưè×)édßɹóGbîZ%oưt"H§áO†¼́DAÔ?ƒ®5›Öƒ'å·¡©|–̀ë Ú₫_ZÙ!=| t™4íß̉nSÿ¡—6¨aeĦfl@.¦`đVp.¸è&´?xlf:1ÔÏz`ÅL×–êÚT<´#V?zưo7ôjí… Z0J¦7›êå[mµÑ‘í|`? Å¾úƠÇn´ÑïÙ@™Ïü¤¬ŸÅéKăÛèMP™Œ£R¶«–¹®rtN¿ âܪ<€>s¨s<²!æm•·ÔŸ ñ`¦ú‡:ª"܇Ñ̃¦oă¨uoƯè«ÄÔIê0Ô!†8&­Æ’·~:‘êÜIư]B₫s`Gp$Đ›‘¨?=dw”(Wª5æùà—àÖ=@~vĐi Ÿ~"“¦ ¨ÿÔèEvu.‹¸Ó4â ÈÄó?èñZlô£@œHO¢ë$̃”̀Óµp?¼ÔçßÁº •“¹8-@_ ü¤qjă²>è³…:á_²Ñ¤ü! )ó© ÈIVƒÊúÑx¯{ŸAó¿ÓRz¨bg^€ KØ›Zw±é-5ve)éơzYƒ°IÓ2{×uŸ=xy,ÓưPAgQvHAy+EÚÀ|üè̃קî©u’ˆ+M«/ơzƠ1„¿đŸ¦QW”¦v̉;)z(}5Èû̀çơ±÷…’@t_> ¼̣¶i₫nêߪ¿ZØI”ÉKÔåË;™¯K#cÙ´Ñ ¤7 c&©G@^â„̃8ơ—·W^ }½ĐÛTÔ×$°?89­Èt½¢[h³s/ÈûSŒs‡A^ù̀Û)_ÖO‘}Z¶™Áziaº6H{æüˆËsÁ‹¹̣ ÉëmÑÛÀ¿À9à²9ÚhÓ——%)Øüh’è)ÄGÎ+×€S6„-^~ôưœTÄÓS@›Ü*åœN©̉iúÊ_bÙ\ܪ}RÖsC:ˆ/G ̣åi›Î‡:®'RÑ\±,8äçy)Û ,´!ºÄĂ1Ôyçc¤k‚™–t¯Đ\·4Đ5² Êà$ ‰î/;€3Á½@̉̀\9nĐtà¯Æv%ĐؤK4Ÿ†`i^¾¤s.Ùa‰b¾¬ îk±µÙ è%~ó¢9{|aóÁgBÙ|“ÚµK¯C 1–VcÉÛw;›ŸŸùóKƯăÁ·@Ñy;̣ï•€Ö6!Zƒê‰kíP…LÁ›2yTD̃G>†)‚̀×4_6†w³ê«xÅ%z¶ºÙừzU₫DàÛw!ø·àSÇK7^-tÔài°èÆü ̣óÀ àv đ¦ äo(²+’OP(?³f•o'ư/xüü¨ÿƒ¹Á{ÁkàÊGȨŸÔoZßI]7\mº,#c@Ç/²ó¶Ê[êË€æ~Ưäçaˆ»Ó^ÇZ󒥸}  ´‘æ˜TÆ“Ñür+ø ¸¼ ~ $ZHë‰àŒL¿‡t>° Đ¾P¾k(_[*“ÉGIµA˜´2WêWŒíŸẹ̀u7˜H4Ÿ†ÍeèůMƯ0R9™>×d'ZÊö: ñ—A:IQ¬UÇW‡b̀­Æ’·~:N‡ƒ%Àzà`)n*È6Ù½ljhƠÙàmÀKd̉´³î‹{Oư‡^lYß̉ˆ;M#ÚEP~ªÚ |_§‚U@ƯdUG‡]Hd*t£™©‘AËc²EâC›Ưđb±ưut==œB49œºYKZÙ€h1p-˜G 3Ñ“5Ư`Ẹ̀JơFEDqM¿Q¦ ¢ă£ă¤ăe>é¼zYoa“¦eö®ë.»ă^ṣHEưhQÊrd4Ǵ”nLú<8èáH*“ỳ’ˆ®óhQ°B¦kq²<6û‚Å€l7mXtư?̉Eö‘䯒‘̀•‹Ó^cÓ¸%Eó鶔˦كúi$«Sñ¯F•”kÿ8èáPzư•é)74ëºÅZuPuˆ!ÆÜj,yûèÇi9¼é"²TÇÀ½¸Ú»:wéùq…₫Zqµ*Æ/ññyp8ü<B–C¹h±]Ñfă ›ÜXđEp ¸„è&¨ÍߦàS@7ûfåư®&ỪCn@ÙhS$9lä{=p˜´ăæK7-‹Ï-`Yđ`Ë­ƯÀ Œt}\ס¡êú»h9́ôă8 ·¨Ú4Ü $s1@´I‘ ¤kq z‰l„h̃ü¨Ÿ‰`M ¾W›¾ > BÖBÑæg¤så]ô1h äT*6{£5Y®côv0-!Ú„í¶o­̃^Ô¯$Ÿ•…MY]36EíU–—²‚è3R‡̃(-³ªNơ!§£ä}¨._–Ï—Ù”ƠE?²ÉËIAØETY.ºẠ̀n_#i—Aù^“~Cœ'Z̀§|=M^›M>ZTkƒ¼38tCtCU|[dÎuĂ~¸œôTNơ@‘è£cgd#ưM‘eŸêG7û=€óÍLp°ÓÉïW€nƯ”_â|§nĐ¾Óë!ô²a…M–Ù»®» hnûXBØ>^Kú™ ]otèÁ„Ç/-ȵø¿|„èô<N5Ÿ…̀ˆ̣O Ú@|hc£¾BC¹8Ë|‰ôB0(ơ¥Ï««ư†Y^å@‘äçÊ¿`¤>½ù:P_«I£ùtOê4î4NÙG¦‘xÔfL’ÄGzY7ùs€SÄ̉¼i7E‹¶fxíâFd[̃d@üñä-jfÏƯ@? tăYLƯ”_ă\7?ƯÔtÍ\ ~æ’§“©₫>Aɸ©JË æ£Z ƒfΙ‹±û9Đ[=…ÔB¢›r7Î[o7ăµo3P5 ăpb›œj}!ëkR=¸ø-Đâưó@ßCÓ¼ ¹K?vå¯KƒÁºàp ù÷@=Z|l ößzĂ²5¸\”ẹ́½Ц`"¸(ÿ?đ ø;Đ›I³såFØ̃9ĐâÍ?§¢^öf¶PSÜ£s$2‘Æ«6?1×£Z̀€hÀF£hóÑ)ñÙ)_½Ú¯̣º¡ååY tưXüÜ´ 馌ó `M öûnàwÉ’ƒÉTuƒÏßD§2ÊL$?/˜#W®́àÈ\¹’ï&]ư«ă¤ăe1f ˜{)^¬¸ªå̉7h1!Ăj¤óƒ­€̃́ ô0#æÔ/ /´°—¬´98 |h½ø Ø,4×iÑ¿m¦¿“ô%p"h23Xh³̣W 9¬Ö—=hju®<6Ú sƒưâx(“%¨|(ΑÊx:ø5Pº3¸ˆs‹0m``º6ôá.̀ÀpĐù§Åëà¿àhpx„LBÙ:2]JoÅïU¾£LOơz^q§¢¥>®ƠêÆà ÚèÉzË’§è¯fùHsƠ•fµÑ Ûb̀@1Ït´C´.—ô d°%¸„²8œ.S$¯m6”_löÚ„h~–\Ôî`0-ø¸ |hÎV½DoBäë.p&´:Wj>Óæ)䔃€6As‹d6 wU¶X¦•6?ñ|b†ñ¤;ùY´*:^¿êS’O‹Ê¦¬®›¢ö¿PaN´Ù’DŸ‘•E]¤e6ệ÷NÙm¢ÏHU®{ă˜‚ºÔ&ô|ªöù²|^çn^ÖK ̣ö%uV‡É€HÍc˜]¨Y>å;!êW±V5†NđReŸ«f\}‡TO­‰&yƯè4éT-oÁ¡§&ĂF2 Ư¼OË‚9À¦àAp9ĐZ¢‰í¯à9,D₫@~f’Ÿm̀´±ÑSMA-&€TÆ“QÛuÓÂ.è:>:N‹wÁw?¹lu₫hƠ¾Ÿ¸êű́AĐ'µ!đƯéC‹±"9‘ *¾D™æªÀ@sŒthá>#بl°r¦Ÿ@º(Đơ­¹ë x…üEç æ¿Ị́£̣wG!é ̣fæÊß`——Û(øzV¨ùTPL«€mLô=Â%ÁHå}tpcI'×µÑ;ȧÆÚ d_')¹êøêCŒ¹ƠX̣öÑÓr‚·«È¤iyóÎÔ¦₫Cï„'ơƯ)‰¸Ó´S¾FK¿ÿ` êÂ`u#ƠqüȾu#úOf+ûçÀ 6¨7Ëôœư(ệé(û.ĐSÅ°Ó†fk—qÈf|EÅùMđwYÅ>ûÑ]ï4-gjz™½ëºËÀœ¸×‚UsËHD‡× :ĐfBóÏ̃u R¦6_ÚP|È6Λ§Đ!FÑ[Œ¨×sÀ| DoYT¿Cd©ǽÇü¤̉́\Y´¹˜‰6—̃–Üôöuh‡K'_j²£Y°Óæí< ~#®¢ô8êë$E1V_bˆ1·K̃>úqZÎ@đ6`™4-õ™ÚÔèđ¤¾;%wvÊ×hé÷3 ôW=0عˆQoAƶ)VƯ¼—zoRÚÔuÛ»ÑñÑq²ŒŒt̃½¬Ç°IÓ2{×uŸ³a§î‡1̃|,̃¤çEóÎÂ`% ù­]̉î¹²]q©ñđ§L‹²ö_ÿé5úñ-ö×ióˆ+M;í3ßê;ô¼MUùđŸ¦e¾S;é–æà-5EÄE]sƯµÇªª8ä§Să«j ía¼7zÑS=}cpio„<ª¢\‹Ñj¢ELú¹íQEB›ÛêüѪ}›Ât7#`àƯ´=èzyrư¸igĐwïôóo¢f@IDATñÛ]FØưj´ßè ·̃|IN#íw £6ư©ĂüQ‡‚ÎVcÉÛ·{]¹íÁå̉—Ék£{¸#W·=y=¼”\ ₫0  ~·+Ê'Q¦7}yÑGÈß“êS çæ ÚŸ‚7ẹhƒ–»ÈÇ0E-÷Ö¸A§ú•ÇªÆĐxtưY³Ẳköúsx=;*M‚›÷́êx«óG«öơíèæG ưg£wøµù;‰́!0O#œ‰¾´ ù3(ZđµÑUË]Ơa₫¨C A\«±äí£Ÿv¥kĐQ̃GQ₫́̉|ŸŸ´;) &-W?k'u¡êc‚áăûQØæ4úè62iÚfMu—ú½©†-©ïNIĦ̣5úƠÇκ8Úư”a4ñØαê8è#§ƒv}́¬ñơb_é¼zÙ8Â&MË́]Wô=;ÁơÇQÀÀüàv°cÙ¨Û´t̃½ƒĂ/́:ü¦i¡a…i ¡—¹ ›HËl‡S×́D₫µ I7e}w5NV¶Ñ:55gà5âÛŒ'oB ¡‹"₫Ÿ‹}4NÇÇb̀@s è;ëï€Ưkb«2đ6úÖ›½™úeưèc330\6¤¡¾gºЧB®!úe<}d«ÑÇ@÷o¥A'lc÷–¦đ3TŸ©ÿЇj3œzơƯ)‰¸Ó´S¾Fc¿33軀øMe4rÑ­1‹÷‹Áïß|@B%7B/ë>l̉´̀̃uơb`<áèØưøZ‚„.ˆ2?Făh¤óFèU‚đ›¦UÇ₫̉Bº¢4l"-²IY₫ Èâ¹Ît/~„ÿfơ;Q»À’Y;%~’aƠ ¤ èbY ®qÁ¡Z*``c|ˆ÷ËÁ'€ß|@‚Å “‰´›è'·µhXXªa@Ÿ™ßè#¤z»®·3ĐK Đ{p%xèiÖÎ@îR@7Kó è xâQ|Wñ+Å·¥s ¤óFèẽÂ&MË́]Woô4Rî?Úü¿, üZy±]L_ú¨›Ÿ–£]̉y#ôª9 ¿iZu á/!ô¨+JĂ&̉"›‘”é>}+½üü < ̉ºkÈkS"9D]£ Èç±ùJb÷ú\ ² ˆ'3ضô4ºÈÎÉ0?éÀF`7đÖ úOµqa¢Z0 Ï’¾Œîg‚½ÀĂÀb̀@gx‘îơQ }$B6ŸËÈ̉éI-C3 ‡>4Ÿi₫º|üèɯŠôË5ø~Ê5Oè̃ñv@ưjưt¨L¼©Œj;ª€ƯdNÉP;»0fÀ t„-oÍpdG<´·S=̣ÛÑörễ̀@m4^Í _"Ơ¡·!?z³×ª¼Bƒ=Á%@×ïî@ÿo­ñ¤íÄ ˜3`̀€0fÀ ›5iy×°[7ÔÇ»mB–•ˆ?–R Ívb̀€0fÀ ˜3`jÇÀ~D¤e¨T¼©”n;3fÀ ˜3`̀€0µaàq"ùbƠÑxR5ăög̀€0fÀ ˜3`êĂÀI„rQ•áxR%Ûöè€0fÀ ˜3`ºË€~è"/úÅË—ó…ÊǯVè,̣uụ̀Næ«£“¿ØQƠ:yÜ·0Ưa Ơù£UûîŒÊ^ûÑSû»n¯óGbˆcĐj,yûn¬›#ö^Jxó^:dƠ ˜3`̀€0fÀ ô8̃€ôøtøfÀ ˜3`̀€0f —𤗖c5fÀ ˜3`̀€0=΀7 =~¾0fÀ ˜.3đz—ưÛ½0=Æ€7 =vÀ®0fÀ ˜1àµD͈Ă1ugÀ“FƯă3fÀ ˜3`̀€0}Ä€7 }t0=3`̀€0fÀ ˜3Pw¼©ûr|fÀ ˜3`̀€0f đ¤¦‡b̀€0fÀ ˜3`ê΀7 u?BÏ ˜3`̀€0fÀ ỗ€ôÑÁôP̀€0fÀ ˜3`̀@Ưđ¤îGÈñ™3`̀€0fÀ ˜>bÀ>:˜0fÀ ˜3`̀€¨;̃€Ôư9>3`̀€0fÀ ˜3ĐG x̉GÓC1fÀ ˜3`̀€0ug`ººèø̀€0fÀ ˜3`̀@Íx£æñƠ*<¿©Ơáp0fÀ ˜3`̀€0f ¿đ¤¿¯Gg̀€0fÀ ˜3Đ~îk—£§Go@FϱöHÍ€0fÀ ˜3`ÚĂÀ'éÆ›r©Ï­å1Â.‡Ơ<C§>Oש~5èvá3ô¹P‹l΃ưçÀL-¶kd^ÖŸb“¯i5Aùv´]1k¿M¢ Ë¦®ƒƠâMYÚ¨*ºu¦ă[‹̀&iA‹ú د >–lжƠù£Uûn]lFÄ€ÎCKï1P‡ù£1Ä‘«S,Sߧu!½ª8ä§S̉Î1è •ú[»Å`µhW;-ÚÚ!ù₫Î¥Ó³µ(“¯±Y¾É­t¶WÖ¡ô=ÛÙyƒ¾ÆS₫Ø¡A½‹»Ă@7ÎÁÏ2Ô3“á~z’oEăÀ3@ç̣kà /º–̣ÈÛ¤ù¼­̣#•%è`÷atR¶IFwóW£)ưôàc~ÈÙ|̀9¢jЦç] †1êBèÄüÑ*‰uˆ!b®S,Sߧu!½ª8ä§S̉Î1 w¢víÚ|ˆ§|×S¶·*ª6 º1ë r§dE:>< t ½„I7ÎÁ¯1₫ËF²ù*ưhc»pÖß×I_seùHZ?Zµ?eé'¨|῭ A®!ÅÓ®¹'ío1ú½,$UÍ;~đ¡·­OíAđ0X ôè¸÷“”m¦;¹ùM9ÜL£7¥©]™®ƒú$æÏ"éÄüQ䧬¬1D|u%bêû´.¤W‡ütJ†ƒn.ÏgøéÜ@¢'a¿Z¨< ¾ÔßÚà]àj°?ĐÍJ7ªÏƒ/}ñp<ĐD³4ĐS‹öh·ú=à9p˜hbºh’’|ü¼EäĂà*ö÷/̣/‚GÀ¯A,E¤ư“æoà( §¿ó5`]¢ø.Ï‚»À!@±I4†x¢ÍÁV*DÄש@1<ÎâN›"q;-ùCÉ¢èănÂ``™f@† ;£‹o‰’ß ^:vª YEÇBçõ` Y¨ü#àfpèô9¸>ä³èk4>Ï:¿^::ÔϹ@›‡À 9£C]›¯ƒM’2©o g2E¶Uû)7È w2†₫æiĐçpÓ₫–¢U‹?ÉZ@ù±Ê´Yt¼c̃éôƒëñơ' qè#³o5×ơèXô“tcó«ûï™ ‰¡o•ä‡£jÖ±™¹AcƠåÑÀ´cÅyÿÊwKêK·8¨Üo]H¯*NàCA ñ Á{Á Å®½’KÀ-` ²Ukƒ¸ájñónpPƯƠ`#°c–Ÿ@NÑîbÊåS‹DµÓ‚p‰L_TrPƯfÊ '€ß€´¿ơÈOÇơWÖ?Ơ T-Ö4® /ƒñ`đ 8 ¨n‡,¯MˆäV TÿkV·>©Æ~'Đ¢xY ø“D7ô§ÁV@c]¡Ú\åeÅ2ø$\ü…́‹¢ Ă[¸₫2Xè˜écEómu^VûmRtŒu¼tüïz+°.P?<Ë®¹üM>ƧsEç¿®ÇKGŪ±j,'m°T7Ôù¥~ôÖ#•GÉ|2-@WÿyäL¦Èæm•/’²M˜æ›kÀ‹à?@›Bñ"‰û£ß Úñàăúù.Ñ‚û„ÈÄq<øĐ&í. ±ƯvºÆ•×Fñq ă ă1XÜ äC1ë\Ôü s6d8>t^:ÍG¡+?#øÈo.U—Ê\d4†&…»¡k,½&G?É3O6 ª6¿_Ăßå ‰º·J̣­¨Wt®¾tlfE¢º<́:Y–÷¯|·¤N±t‹ƒÊưÖ…ôªâèä >Ôvâè.fï÷ƒƒÁâ@m×!z¬²µAÜp̀*•ªnÓ,¯äIđqn¢Ử2Èä&̉/eºÀ¦ºñéiÜ€ä`Kö§rµÙ[ 2Tÿwcsä€åàŸ±$÷€Á¾àNß ¯ED‹ˆ½´7ơEÉkÜëgåJ̃ öẸ̀—’₫<Ó?JúĐ‚àwà¶\IY^&Q°C¾p”æó7A3m@´x̉¦âT ÅœákƒÙÎ ;K‚%2èføc°ĐñÛ„túÜ GEלü7Ÿệ ‚£)S¬!oGÑXƃ¡Î/{_©<@æÓiºúË#g2E6o«|‘Ü@á…@×Ê Eùg€®§Áñ`U°+x ˆÉZ@} ̃ Ê_ t,ẉ̀HÓy"Ú]L¹|î Ôn ʟÓex’TvÑŸæÆ]€́¶ă@Yÿ:e«Mߺn&½ ḤwX́å!•Ü ̣óÎÛ(ÓüøK ÄƯë`kđ  y| |ÈVׂÎÿ  ùxy 8—!WesFA¤y¤¢ă&îƒGơ÷[ sR²;¸h̃¹ èœ ù®1=pú3$ßÚ₫< t~„œƒrBdH:t|Ë&@¾4¾f6¿˜M³[f«8åS燤l|‡RÿxÈï@× h\¯‚«æœfDç‘ÎÑĂbŸ‰ệ(²ëdỸ¿̣Ư’:Å̉-*ó« ßR-¯ăîL ÓƯ`& Yd0™æßYªD‹†¼hR’hr“¨MRD“hˆnc³̀é¤dơO“åñà@ ›¦̀CI£₫Ơ.Çkäµ0´ĐäªI7DOç³DA.ŸåoLʯB$?GM¾ZhüØXÚÇ€°âôË@Ü? ~›é‹“¾ è8‡L‹¢6!†BÚésđu|]sIM«éy₫|ÖJ×̉Pç—ÎÁü9=+e/f}t:ù.Ú® tÍé:Ó5̣ø$Đüq-X́RQ^‹lµ×üp8Hêë1er¢~uëÙèÜĐñÖ‚ky°¸h₫{Đy2ø Đ)Q|Đ̃ø,_Ôÿ=IƯ?rú²ä7â} 4æñ@sÆ7@‘lC¡Îq-.5÷j1¨¸´‰¼¨Ưºà|°8 h~Ọ́ /zk³GV˜ÎÛ/geâ`´‰®e€Îg[o?_º–·¿gm„:n:7ÿ – ‚-Àm@ÇH÷´½À₫™®sAÇuw ѱÛ̀ËÀ·€£Ú_âÜ[ ưƒ@~7ÅùM sàCàPđ3P6¾S©_¼|< $:çtm©ƒ€bÔµ13ÈËËh¬fxé¾ÀbjÇÀtµ‹¨¿̉Í÷D &)Ưx®’“Å₫C‰©#ÑhĐƒ>pĐDw¸üh‚?hrnFơ¯¶,SÑ~x, Æ€×DéÆ‹;•¥̣H–Ñ‚åáL_tđe ÅÍQ@“ô&àư@¢I]~ó¢EÂ7̣…ÎOf@ÇeúɹÁ›¤²ó€'€n˜oºÉ n÷›€º!Z„éæ¨ă­ôẺÉs°́“ÿFă‹Ø̣i£ó|¨óK‹â“Ît.Îb±œTuDƠ8µpÓµx7H|ü—|ºÖµ™—˜“^É*ÔGHÚ6Ê"½+̉çÀXp;ø7Øè:¾(K×%ƠÂû¯ ÑơOƠRÔ¤ă¸>+\ŒTÜß^ÈÊ”ü h¡«Eb‘¨£1~Ùœ¬?™œCºĐ|¾)Đ¢XR¶1]vĐd Ÿ³eeéơ‘êDs†Î3]Cçƒï€ €Ê? tϺH̉×T‘Í sj)đm°|¦_Cªsđ=`Z óï/@׉D÷¢¿hÍm~ÿ‰í®à—@óâ@¢s«Lt=Ü–K G?=ËŸBºY¦Jª95/Úؾ/_輨#cêTÇ4?cÓ$§‰f,ؼ̀ tS¾|è¹ĐBºÓr3äûs@ M`Z<îÎẸ…ăÆÓŒ́…‘º¹î tăUßX5N=½R³ûƒß€Fr·‚ïµ]üh%yḥwZ0ÄÂCăz°PfìÀưTm´áxØH:_>ºI+ƠíL°øĐq]üèF_$<Ë®9Å̉h|ª{hÜK]¯e2Ôùu7 -,ÔF¼tZÇÁ‰àç`.°ЦC̣Đ|“̃ SE›äưèÚ߬ t 뀀3@³̉¨µ×q ‰1=DæEA:fq¤Åæó H¦0₫îGÙÇ3c=Ö±ưøĐơ Ñ5đƒBÙ½@ó–Ơ!̉µh}: œ0 N¶K‚«€ă¶@óó®@ó½p9еÇëJô8®·£Çæ7=÷Ö¥\çăH7¿ºŸ¬&;Àn`$’n°5†1Ygâbéh¶˜``ºˆ²‚¼–¡œ 4ÉIô´D7Û}Á©@ =-¾'ƯXÏ!ºQ©,n¸‘ª<$ô¨So¶iª¾.Ê /$]„ÿ´?™ü|¼| ¨>lP§û`v Eêg€Æ.јÔn§ƒư@HŒIyéÚüè& ĐâéYđ'đ}r,6:ÇGéI‰>”:Ôx†jßOơ‡0›Ư\̃nß:3‰ƒluL¶G-¾´xû Đy¿H)ÙéÔ98Ô5×h| J‹Èư IzÇ8T6Ôùu6ï§1@œhơ"è´̀ƒiÆ1è{7¸ ü  ă6ơºîµhî´èx ˆCñ¼ø1Đơ}6È‹Ê%ïÉmè??ÄDçáËàpp'Đy«óSc> hÜËgͽDçöA@sÓÏÀàPđ. 9h‘¬yHư†<2cd’ôytÅq!י歘wQG•Äµ¥uIo’y€ø}/x Øh¿Ü4×| Ht}­tí¯©è³!˜ˆûE€î)³ƒÍJěڌ®¯ơ€bÓ¼q/„}Ñø-¦₫m¢F×±D×è¸mÊ?ÏưÆ”EΙz3 “’÷¡È¿æ"Q]Ev,ËûW¾[R§XºÅAå~ëBzUqṭ¯j •Ÿ$Ătx7ívfÛá4;FZlüt8ƯÆ t™VçV́Ë6aÚ-̉EU—©¶ûØ€̀NZPêIw#ÑfaÆF•åâ©ÑCOÏÏ.hÓL‘«±ømƾn6:Û!?£“8§/A¿h"ù6Đ&A›Já,  „ß1à% ¶7‚‰6 ' hS₫¹¬ú™„̣×Ȯԗ6­l~ƠîY[mrtN¨ï;€¤l|zCú8_]‹€­@È>(×D¦Éô}Ø©?o@#L\åÑ\K[ ›<áÊwCª£“ă«j Ư8>Ăñyôô§*ù~´ø°˜^c Ơù£Uû^ăc8ñ¦á´oµÎh¼n«ûľ÷T-úơæ¡Hf¢pĐ›¼LO6ÙƯmâơÆXÉ, ·l| *üS‡ù£1åu%bêû´.¤W‡ütJªC§âw¿fÀ tVçVí»7²ễ€´ÿê¿îZ̀€0í``¨ùd¨úvÄà>̀€ x>ǹ£ô¤ư‡á̉öwéÍ€¥ 5Ÿ U?Jió°Í€O†A› 1ĂkæV% ́JƯùÀOJHr•0¥ h₫Đ<¢ù¤L<ß”±ă:3`a Ùù¦™¾lcb ₫FÑ—Ç¢®©ÚdTỤÓñµ‰&wc̀€0f 6 øZ›CÑsTµîk†˜:Å̉L¼=mă7 =}ø¼0fÀ ˜3`̀€è-¼é­ăåhÍ€0fÀ ˜3`̀@O3à HO>ò€0fÀ ˜3`z‹o@zëx9Z3`̀€0fÀ ˜3ĐÓ x̉Ó‡ÏÁ›3`̀€0fÀ ˜̃bÀ̃:^Ö ˜3`̀€0fÀ ô4̃€ôôásđfÀ ˜3`̀€0f ·đ¤·—£5fÀ ˜3`̀€0=Í€7 =}ø¼0fÀ ˜3`̀€è-¼é­ăåhÍ€0fÀ ˜3`̀@O3à HO>ò€0fÀ ˜3`z‹o@zëx9Z3`̀€0fÀ ˜3ĐÓ x̉Ó‡ÏÁ›3`̀€0fÀ ˜̃b`º̃ ·'¢]”(kz"bì€0f`d ¼1²ænƯE^Æ÷¥`W0©‹qØơ(b`Úl¬EGÔUIGUqÈO§Æw}¯_%iöè€0fÀ ˜2p>í7a­6¯jƯ×L\u¥™x{Ú&áu!½ª8ä'Æ̃îøúÍG»YufÀ ˜3`̀@'Đ›;é  ïªÖ}®§*ªS,S×o±¯ éUÅ!?1övÓ¢1´Û‡û3fÀ ˜3`̀@»èÔÚ¨QœEk¦ªcˆØêKÄÔ·©¿„̃·‡Ö3fÀ ˜3`̀€0ơcÀ_B¯æ˜tk7_Íè́Å ˜3`F3üTÁhæµÓc/zâßiŸîß 0à7 >̀€0fÀ ˜3`̀€¨Œo@*£Ú̀€0fÀ ˜3`̀€đÄç€0fÀ ˜3`̀€0•1à HeTÛ‘0fÀ ˜3`̀€0̃€ø0f —˜‰à—‹Ïg½q$ơă'KƒyÛîrô£ăo1fÀ ˜c@¿„G7†¡S¿ĐĐ©~ÅYUcèÆñ±O3PăH×RºH=$+;ˆT²?xÄ57}c YDy>ƯŒº£ ꟤́03ÈK̃₫E ®e†Q¿w–¿ŸT~÷Ẹ̀J>T¦¸óöëëÜvÍ ‡O£úGhߨN¾å"_ÄyR_Ô—wVl^Ñ₫2tm $CÅ9h5å߅ɾö²Ø¹Đñ´ôq¦iƠ£H}‡^u á/ü§iÔ9m3₫̃6êî̀€h c zIË6 ₫0đ_p4X|ü>ÓIäQ₫›é‘LB‰ŸÆ¾ưj0Ǿ&‚ƒA*©ư5T̀¶Z@G}¤ñ6æPêÎÚ¤ñ“BÂ₫XJµ̉ÂzKđsp%i4Ù3ƒ|ưSÑ4_§ªf¹ˆø4̃gƠ0“diÔ7¯xù˜®Ëq~x;igÔ§é6YæWi¡u3`̀€¨7̃€Ôûø8:3`X1+ÖäDđĐbz đr'Êö‘)HϦ́ûYù¤G€%³|Q’Úk₫ܬVd˜•ÍEú`ç›´ê›dîÍ '}/Đ˜ÈÊgÍ’ú²º¬Ù@’­ŸĂ2âKÛ†̃h¼zÓ2ühL/ɉ`}°ˆM£1b2•lOÉà©j\`̀€0µeÀÚf̀@ R÷ĐÂöa ¼°ôŸøNÀRè§-rÓÍÀ‚ä—Z8H̉7ƒ%SÿUÿïÎơľHô_qí+2((Ó[9À̉@q½₫ 4ÉPă‡61!§‡B:TÛf¸8†~Oú<ư¦,_6̃•3›3Icó¡¢ô'“5³t¨8Ă^}®´Á³˜3`̀@2 GƯF>å;!êW±V5†Nđâ>Í@]ĐG‡t-Í›ôí¬́ ¬́C¤7feqƯƯB~n Ål”¥i¼I8ºAư5”Ị̈̉È^o`¦Q¿OÖđARm´@~(Î/Ų?È‹́Ó8C? 3j<êw }£ºV¸hßzY|C÷ÇÙø‚Ÿ¬ÙÉPqNaLæ{@ÊỤ̀ÎW΀ÎWKï1óLV=ÔwèUÇ₫ÂFÓ63à7 m&ÔƯ™3Đ^Ëz›ô6k¦ka¿(¸ ¼+Ó?Bú°,Đw'n’kÁ´Á?j›ÊÙd. ½Yè#AEr'…÷} ]› =}4’S¡·ŸŸid””]}¬ë£àó@ í¡Æ£ ØaLª ’̃ªH†jÛ âç̃̃ÿ<èRwbf·D–F"Î7ú‡6’¡â”Í° È'Eu3`̀€è̉Ư^èƯ=|§i'âPÿ’4öĐ;åËư~eà_ L×OºyĐG‘T¶+83Ó·" 9EơzSOÓ¯D/’£)”múD>̃°QĐ È>5Ë×ÇÙ̀ ̣'”½Y„úm°d¯ïL 5²ú²:ùÊÇ®²<bIă“]ÈPă]CµÚ́IfÚ̀©\›¡âÄd²h“¨vN.±̉Mt,,½Ç€[U"ï¿›çRb©ú8TîoºÊ=Ú¡0f`hôâ@OÆÏ«‚倾ߡ_M̉Ǥô }´gE ·zË ùû`2đwy₫^ä¥~7—́µ™2O´)Ơ[‚ú­ˆâY ̀ Î6O₫MDf>Ẻ¨íFY¦zăđR̉àjt½¥I¥h¼—ađ  ¥>ævX̀ôÖDo¡´Ñ’4óƒƠ·ă¯6=ç'eVÍ€0f Gđ¤G”Ă4£Œo1̃·ÁöÙØ'‘êcLJ ô$ưsà«@¢Eú₫à\°èûú8S*o%“ÿ(–êoÏŒVÈ̉4)²o¥^ĂÚhq]&zñ¤ ̣Făy,¤Ñg£¶Ec ßy.VÉơÿ|.Ù¢ñnIåÀ¶ ̃\]¾x '&2 ·Ç‚×JüÇ ˜3`z’Müytc ùâ†ÔîX:Ơ¯â¬j íæÄư™:20A½h32mA€z²$ÆKưĐqZ̀5̀Pùß æf{7k?¼§¶?Z÷ Ôa½R‡êÄGÄ̉÷iÜĐ‹&¨«’„ªâŸN¯ª1Ty\́Ë ˜3`̀@#:yOmäÓå#g ë•:ÄLÖ)–ˆ©oÓ1};2̀ ˜3`̀€0fÀ ˜Ú1à Hí‰2fÀ ˜3`̀€0ưË€7 ư{l=23`̀€0fÀ ˜3P;¼©Ư!q@f ïXˆuôÅwưó¾Ek#¡M!­pªÿK¢Ÿ4ÉÏ 7ăO6B¿‰~=R_¢Ÿ½‹k†ÿ.†g×fÀ ˜æĐọh®e{­̣1}!¨;Ơ¯b«j íàÁ}tŸu³sæI(úß:ô³­ưưTê£ ₫Y[zéÿ2\V©|Œ́éb騬<úx‘üu`# i¶~ïAóiî'U_{dy%Ÿ*ÓÏâ†́„̣¿÷¡4’ëå‰ÁèjÿĐxó±FßúyØơx{¤ aư/ Ụ̀¢xŸÑÏDô¤̀× Åàß¡x̃̉6ù±v‚Ó9px'1¾ Đ’fÆ·vé1|ü •È¤6“ß91?éÿđXzÅtMfăW™âU₫w`ÈËEÈîŒ\EøQ]àIô€i«çƬ´ùx¨?µÿöÎ₫ÿ¦ ™ç1÷** %ÿ4̉ ”¡ Jü(B“FÑ€24RB“J‹I†ÊT¹æyVfú¿ßÏƯ‹e;ç<çœḉ}ösî÷ûz½Ÿ5¯ơ]Ÿ½Ï9kí½Ïy·ü§s¿­ăkëbđ\,Û dXG­´V₫ZÿÔñ¤smsư¿J™ơ[Ñëÿ ¡›̀1Ă&Ÿ­Î•ºgÑ̉œ›äḲidĂ¹Fvf1±P`r(p.nú?Ö…¹ —_Z„¦ưƠ¶é́&"ß̉Ộơá8ÈCÛ“Ö ₫ß„cAK¿7¸ ¾%á­àÂ|Mè¶<ƠKw2>K[nÊ?‰û^̣¾w‚ÿ

ØôÙEÔÙĐÎRÿ¦Âp;lƒäĂÄ/ƒdqûKx øÿ'ü?¯†×›Œ½!·Wø\.Ø–ÇüIï4U°ñtOư<Ñ ‹¤¹¦p~‘qÔâ8^ ¯‡#@M’_­´¤x́=æÇĐ<çz,x̀ åăLÖعu4áü`û4ÇĐóÎs li₫“ÂÚàfuÓ"îB_››ŒÅf›m+ÂÅÀsLKăL'~>,ÎsG¸z97́ËúÓà"8 V‚7‚¯áµà*H~‹ø=đPócàYĐÉ’¿ưêo;ß́g»b º¨r₫a¡@( 4Nß Ê Ăɲ¦«°ªúƠ׺æP….Ñçppñíy³¤+᦯íó`ú=Ê]ô$sac¹WfÓ"fµ"ÏEºe¿‡d.®ÍûPÊ táb —^ËƯ@ØVí`úcàÆê¾"ư"Âdï%¢û¤ŒR˜ÏƠºöw+?ç¥uß4Êm“C’O±MHYÇpÙlgÙ¦Æy q½çŒ Ëÿó7ư,…mBh^êߎé_v˜^Ù–Æ1/Ç1̉]Œnϯ}́E˜Û $́[Mµä÷½Äï_–{ÇÅ;¹¥¶·™íüơ\öÓIÇ̀q̉|ç(̣ª/ḷ)Γ<¬{ùØ)^·i¼4~¦²¬@]oNv;º FJn ¦ÁKá|84<.–¼Ûµ$\ä₫ó@Zغ˜ n\¯2koŸ<ñ÷ßÄçTøl@²ñÊS½ê‡ă=ÜL$›QDV"Lï9Gÿqª@¸0¸Ḱ”•¹ˆÛôgE8ʶ?Ké™U¸Ÿxj3xùªjßWºđlø(ÜkÀ›!Y»±6¢ÂTO÷ÔO7áD4ÍûŸ‹„ú«û²°1 Çj‰±Ø̀?­æ×êZ[m~^á¿´)³iăS`©ăÁÁ³Ç}<›ZT¸®·/Bóóéí0¿ ̣a8îu ½&º=7®¡¶̣̀à‰¿«±«ŸÈ™y.Á"°\¾öwoø$t²~ơïÔg”…¡@(ĐH₫‡We†áhÙÓUXUưêk]s¨B—èsx ü>;w\̀iÿ†t>í0–óä]t¥Ülÿ°̃µ&°oCjW­ëbÏü´a!úëµ<]­·“ÅàHăzĨ‹Fóv€d!b̃Eà&kxcÁ‹ 7ËÏÍ;¦‡i çë̀Z³Íö6"¶=!e´O.êl›•}²Èû4áxcMD÷4×t\¡i6Ùæ%áæ̉÷YÁ?ˆ«Ë  ÓüÚĂoí$lWÇ‚c¸·NÇc­yL,ïNhÎßô³L`̃Éó<1ÏóÖ»9·éÔ6…W¯¥q̣óÜăh½/Y¡°nÎ ©k;ÏívÎåg`₫W‹¼²ßfÿ¬ă&d< 7oæ_ Z+g–´×6×?ƠuCg¿¢u˜c…M>̉y’‡uÏ";Åëö!—ÆÏĂTaE äb§xECú6‡ôYhÿUYî{W5Vô;: ́ËT̉ùâă(Úw!奅Xy¡j½ÙÁťϜÏ^åu‘³¸°\öơEè´Đ¡¸çr]n ’½ḤÛ ˆ¶˜§Ÿ.ÚÎۘ粕µë÷©h›ƒÏ¤¹\Müœ ’NÖÍ"sw*Û·‹LªŸ„ÛÀ¼-¡ÓXKR̃­îWS7÷Ơc_kÎ8ÎÅE¾ÇåÛà1¸¼ƒÖi~j™ĂŸ“>́Ïcº.hy³Xn½w‚–ÆI©ä=É7¢Ol@. ₫g¸,¿€×éßz~'®.̣ƯÀ¦q̣ ÈÖEù±„ɺ97¬û+ĐÍ÷Àﶘ₫,eæ¹™ơ\Ơ?Ój°ü´HŸA˜ôSK-ù{5ñsJt«?ÍÆî(9¦ÄDEÂÚ)Γ¬–tt3́ "úä¢\ËÏó½ƒv<,Ú `₫.&2ûqó#“ŸçÏ/ÊƯ„%ëöÜpăó-¸Ăת›#ûLVöÛÇñ.†4×U‰«¹í埰hÉßT–‡é\.kÛJÿ¸2SÏø;¾ù9–âă·l4nv„î{Ë}Hñî[G;HBça_M°Q>~O°Ë–Íí»*K~çaUcE¿¡ÀdT`yœN É&ú?7N¹Pœ .æ&ƒơ¢éÂLhMp3ׯ9̃0{‡¬#£f«Á‚}Ǹ»+ÁD´éFÿ>Ưë«Y•Ÿ©}9ºR _§¤xW X)›‡́¾§®rR¼§¢r÷ ¤….[*+çW™®ËÇ©j~uÍ¡Êă}‡¡@( „Ư*Pågj·>D½̃hÂz¥ >$åäḲidĂºYcb¡@( „¡@( „¡@(Đ½±é^«¨ „¡@( „¡@( „T 6 0‡¡@( „¡@( „¡@÷ Ĥ{­¢f( „¡@( „¡@( LPØ€LPÀh „¡@( „¡@( „Ư+@( „¡@( „¡@(0Ab2A£y( „¡@( „¡@( t¯@l@º×*j†¡@( „¡@( „¡Àˆ ÈŒæ¡@( „¡@( „¡@(Đ½±é^«¨ „¡@( „¡@( „T 6 0‡¡@( „¡@( „¡@÷ Ĥ{­¢f( „¡@( „¡@( LPØ€LPÀh „¡@( „¡@( „Ư+@( „¡@( „¡@(0Ab2A£y( „¡@( „¡@( t¯@l@º×*j†¡@( „¡@( „¡Àˆ ÈŒæ¡@( „¡@( „¡@(Đ½su_5j†¡@( „S`}zZN†·Áß ú²%hµ#¬ ÿ…3á$xdÏÁ™áFø5”ư¯œ&a¡@( Œ†ÿce†1³²¦«°ªúƠ׺æP….Ñg( „u)p^ v9ánx*moûùœÂw N{?ƒ¹¡jg/¢àaø;ü~¹W×mR¼ÊÏÔ&ÍsÔ|iÂz¥ >¤ăÚ$_’O#6Eôºüpœª¬®9Tåô „¡@ äEpî zmo‚gf}́OÜ÷ă³¼ª£û2€›Ÿv¶7WẮđN¸r¯<¯Û¤x•Ÿ©Mç¨ù̉„ơJ|HǵI¾$ŸF6Œï€Œ́¡‰…¡@(P¹¿e„Cáb¸₫›A²u‰œ^í¿ „V₫z'`kĐÓ·Á=àcTKÁp6¸xOö"‡Á¢àçÙ¼́«D> iq¼0ñ£Á~¯…/Áœ µsCÊó đx7´ëç³”}^̃‰YÊv)ËÁ‹àup!ä6^y^7â¡@( Lz²ë«ËôTÅ«kUø}†¡@(Đ‹3¨ǘë€ |1 .À½ÂX¶}‘v¢åw@\°ï>–;Ûl§~9l ÿ7!k€ï¯ƒæfă^Ǿß±î„ï…•!·Ÿ‘86€­àzø4híÆt|çcƯ}`Uh×Ïó(;ÜDlùfˆäöWbÎĂ9–}´̉xåÖi9Ÿ°É§€Ç­LƯ³(?̀s©I¾Ô}†6^SD¯Ë*Ođºæ0´“%BP P`áW35¼£p ́{wæƒdû¹µH´Ú€¬H™ï¡n>’½„È®Eâ,Â#‹øÖ„wÀµ7Gí#Æ€¡@( „£¤€wr›Bâ¸V„üsÆ…÷=p?´2åÚ³fc7çïçô‰„.|́j+8´ïÂÇÇb3ÿ¸¹đnÂ%à‚ÿzĐÖ7/¢o[  µÓÍʃc5:÷ó@Q§]°~Gæ_pl ¯,̉WWN•°P FCüƒa4f³BP ¨SƯl3Xö„5à$p³° ¸y°̀G©>ÇC;s!~9 ¶]ÇAs#đđÎÇeph'ƒ~¼ ËDz¼â‘é0\ü–7?ëŒ7&U°NưXÉŸ₫]Ü”Í ¹ù%öơá° ¨“uÜ”ygh¼rª„…¡@(0Z xE©̀0fXöÁtVU¿úZתĐ%ú BP fPù4đÑ"ßû ß É¶!rXæ] 7 vœ>›¹éصˆ»i¸lsùăU.Ü-ËÇñbÚà¿E™å̃iqŒdÏ&̣g°̀G³~KƒÖnLï<0VăÉ?úy)ƠîÇX₫É&c±ùøë¦ÇMå7ÂkÁM‘¿öbèTîf¬©æ|Â&Ÿ·2uÏ¢<₫0Ï¥&ùR÷qÚxM½.?ª<ÁëĂĐN–8BB„Á» nZ™_÷®D/æ„y[4˜F›‚EZ”9Æs`uh7̃”y—¤•µ³UƯNư´ªỴ̈¼ûá]˜v6^y»vẰ¯̣3u˜óơ±›°^i‚é87É—äÓȇM½.?§*«kUùư†¡@(Đ­3¨è¤.ÛŸ|ôê›u ăt¥@•Ÿ©]9•úR  ë•&øÄk’/ɧ‘ Û]­Ù ÇÄBP ¦ÀÑôäwê2ïnøèÔGë0Æ BP ¼³]¶ºz‘Ê?jûẹ̈Ăqª_]sh¯b”„¡@( „ơ)Pågj}³˜ơFjÂz¥ >¤#ß$_’O#Æ‘=´1±P BP BP y ĤyÇ$< BɧÀÛqùù…ÛoË♉ù³¶>æôyØFÉ^Åd¦•&ôJ̉‚s̃V€‰Øûh\₫5ª‰ô×kÛ ià/]µ³A+íúÏóƠa¨êî>VƯñĐÿ÷ „“Lo;•ÆÊ>˜®ÂªêW_ëCºDŸ¡@(ĐŸ—Ó̀ÿC¡ßm,ÖÿŸiê/=ù.\Œ§Ÿ¥ư*ñQ±™È×Éø‹U?÷Ô"~+ჰ9ôc^`óưx“~¨ÍÁôóë} â\ù ưïÔaŒT´1ơ(ÿ’T>‘Đ~ë´÷3ØÉÙ€·ß6KG´;—̣™4ɗܯ‘ŒÏ5’³I…¡@(0<Ögèvÿ黯V¢̉‘àfă#YƒˆïÇÁ¹Y₫(DßĂ$̃̃™ŸO€°©0̀… ĂWb=Wtjhơ“Ä•8ÜNÂ¥âK¸ „}(`ơ!Z4 B‘S`Mft9xÅú:¸ N‚|‘ăă<—› ÿ«ö–Đʼ’¿uQ°áŸÀ6×Ă'@ó*›öÀ…°ø˜ŒWÿ÷Ü>KâÓ0o‘¹.áYà?±» |t)]Túñƒ}úÏù~ ^ÿ+<çĂ* ơR×±‚;ฦ¶/'€ÿđ&Ø4?k>3À»§@®­¾ºÑ˜Éü‡};Âñ°hæ¼å?Ưíđ)ÈíE$Îơpcă?I„ụÉ₫—„Ÿ8ÿư@=4ÿñàÖc±Ùfëä_»óÈă»:x®WôÓ®nQ<¦Ë$Ôá»Î™µˆ«çªüÍsä nƒçăæv‰{Àăø+x hæµ3åÿÏ%ÏyµÑÔÔ×c̉ɼÁ»À×Áá…`e@{\ 7­ü#;,¦€W–Ê ĂDz¦«°ªúƠ׺æP….Ñg(0«*à‚Ç×YÁ?ÿ¸¸°I ŸĂˆ?kƒæBh÷±Ø“ñeI»Èû¬n`‡·‚ ­!-°^Oܺ ÂïàûĐÉ\tƯ.ö×í‹ô„¤¸ s¸9Ø·́ëĂƠđuĐz©ûqêß ¯†çÁoáLĐÔD ơAŸ¾ é¦Å¹?oÙá`Ư¯Á¢Eüµ„l¼9ë‡ÇoÓ‚‹ cX ܘ| <6ăƠ¥JK³­ vÏÍ9áí°̀ă™ÇVÛ VW::ÍËט›ºëa ø4hé†UÛ<^{Ç5Ù£D‡U@ĂBP`’*à•ƒ2Ă˜JÙÓUXUưêk]s¨B—è3˜ˆóĐxyx>LƒmàƯ°7 ߆Ăoà¸\àßÿR­^?ưæGƯÚºTt†̃Q0~¼´¹Áíƒ`ÙƯđ>Hv9KZw₫ÖµÍ ØrÛŸ„‹©eóLâ+ÀïÁ2Û fçÉÔ÷&°́8ÍümÇb3ÿL'8 K¸ÇBë¥îÔóvø¨×gà0ø $sÖ[æoCjû/âÛ$s{5Ø&ÍIÍçƒdǽBÿ°­>ư´ˆoB¨©Çm`¹çÜçaÖÉ'ơ¹´Àq=êî¢Zó\Ù},ÖÙ¿NçÑA´÷øÿ©è§]Ư—Q®.is`ơsaoxüôQÎư4îk ||ˆ¼¿€67Xïx¾3à­ µÓưy”Ư¶ƠÏÉkÁsC;,“3Áùé«ææÿN°̀÷œN₫QÖF¤o¶©ZYv>vW6Ø8§ñópœ&Qܯ^ñĐ»l©¬œ_eº.?§ªùƠ5‡*Cô ”đê­ ¼)°,~đç¡‹˜»À…Á¦oâ÷fÜGü~póánĂA˜ ¬‹ÁÅÊ)]vèä|X¼¢ê\\¬–m.2¼r{#´z­—ë›ö½fp‘T6]+ÂkÊEÚÅ÷ªàUbµmeË’©Æ.îë°ùdH,AÜcëâz<›‡ ‹ÂÍ*z5̃>Ưœ¶›S§9/^´kw>ÙÖ ˆ‹ñAZ'ŸÇׯ‹LæƯ‘2Ûù×é<ÊE{©›·U{7köá¹̃éXQ<öC §úºóơá±s#± œÉZÍË×ï!‡á™`¾Oh‹~¨[Øàhơ¦̃uZ|Hóm’/ɧ‘½̀0&]ö¡ƠÉ0¿ªêWßêĂ tˆ>B\«Á›àđ]pq+¸A¸N‚¯Á>°¼Ö¤M±ípä=:³.ơ}í.Øc»~«¯MĂÏÀC°Y¿D»I­À—ñ₫1XoRÏâÉ_¯ú?æ±3\—€ï'aÍV  ë•&øR“|I>l蕆°P ˜ơđ*—@l/ÄÏ7̃=ø;œG‚DŒw”*0¯¨~̃Ơ£7^=¼ [‡éç³á} Îa³̃eđñ-ï¼Mf;çß?憟ĂW`Đw˜è2,FEt«Í]_ÙRY9¿Êt]~8NUó«kU‡è{ôđjäK`cØÜxøˆÑtđj¥›¹&³íó[«&ó$Â÷P`’)Pågê$“bR¹Û„ơJ|H­I¾$ŸF>Tô2Ă˜tÙ‡V'Ă üªª_}«kƒĐ!úmbzo¥̣;€Wù½êê³Ư£f 3!ïà|ØÑẹ̈Ăqª²ºæP•ÿÑïäV`^Ü œ̃Í0Ü£nŸe‚>2 „ơ*Pågj½3™µFkÂz¥ >¤£̃$_’O#6Eôºüpœª¬®9Tåô;9X·‚»áTđ‹ØnFfó†î„eg• Çlèuùá8UY]s¨Êÿè·ù xgăƒpü^ ³̣O^úkR₫•ÿŸ",êW ÊÏÔúg3ëŒØ„ơJ|HG¼I¾$ŸF>lèuùá8UY]s¨Êÿè·¹ ¸ñx?Ü'A|Ù°ïÁ>c±§₫ñÑkÀG̉îxjQ¤BP`€ Tù™:@7£«’MX¯4Á‡$K“|I>|ØÑẹ̈Ăqª²ºæP•ÿÑo3xn] ?ƒ4ÓÅ¡xµ£úËWÏ̀F÷ÿ›÷ø| ÂBP ªüL­ÆăèU°^i‚élh’/ɧ‘›"z]~8NUVת̣?úm–kâÿ¨ÎÿÑáÍĂª€¿|ơ%Xö€+á¿đ0ä¯EÓa¡@(PU~¦Văqôªù{d×­L7ëö!—ûâ©,ÂHBçaECú6?Å;6è³Đ¾«²äwV5Vô;º ,ÄÔüoÂ₫³À÷‚ÿ9;́© ø_—ưî‡ßñơv_毽´(ó¿3§¼C‹8sÄ=çeZ«ó¿îi4Á‡4ç&ù’|ù°)¢×å‡ăTeuÍ¡*ÿ£ßá*0;Ăï7Ă‘°„µVàudÿ®(̣ˆß¹âH!J¡@( tP  ë•&ø$j’/ɧ‘›"z]~8NUVת̣?úk0ôÁŸƠ]gxnL‘¿ƒ§ïká­ß9̣ï€<̉¢^d…¡@(0++Đ„ơJ|Hç@“|I>|ØÑẹ̈Ăqª²ºæP•ÿÑoư øxƠ¾p;¼¼ ÖYáê.X®C5ë¼¼K¿‚ƠA¨( BYR&¬WàC:øṂ%ù4̣aSD¯ËÇ©ÊêCU₫G¿ơ*à/Z]¿ÿ›wXw lJ5ï……¡@( ô§@Ö+Mđ!©×$_’O#6Eôºüpœª¬®9Tåô[Ï`˜À/™¿½!Gj”O3›øÏç#uHc2¡@(P³MX¯4Á‡${“|I>|ØÑẹ̈Ăqª²ºæP•ÿÑoơ ¬Å—ÀÏa™ê‡É₫À¬¦ä̀bR¡@( Ô£@Ö+Mđ!©Ư$_’O#6Eôºüpœª¬®9Tåô[鮇?;w=æc^ëB§ïe BƯyèÄ_ºÊÿùà ú>BP ˜•hÂz¥ >¤c̃$_’O#6Eôºüpœª¬®9Tåô[/¤Ût×c©j†hÛë;)ñ¼ô§j,â;ÊV§£sÀ_Jçÿ Äưÿ%¹ùßÉSy ư§ÂîàÆ¢{ •Îï¦bÔ BP h«@zÎö•+*ÈÇNñ†·Û4~Û(*ô§€¿ „Ơ)à?ËÛ̃‚ïĂ0í1?înü•)7„?Ă°+| æks̀ f{¡~h₫Ÿ“íáà“OÀx¶₫:^¥(BP Bf+ïöR|§±ó° ?́¿*Ë}OñªÆ~›­€ å¿ĂOa˜ßơÈï€tR¬ŸŸÿư-̃/*úÆë4xV-ʾNèk¢ü_Ư}tËGª₫ƯØ1Tr „¡@(Đ¿i’‡ư÷Ö_Ë|́ﯧ‰·JăçáÄ{:*‹âTT˜ÆÎĂ*†²ÿª,÷=Å«+úm¦.¨¿·À[&èâQ´ÿvÁM„₫s½_Ăs ÙD|¼é*x¼ ‘›o@ôÍGÁ̃ɼ;s1xă:8ü¾ÊÀºËCn₫dđW`Mđ÷NG+[›LË) Ûm@,¾  ¨Ú1đîÇ‹;ÖˆÂP BñHk”<¯Í Ëó±S|ĐctÛ_?»mơúT ;Åû́jBÍ̉Øy8¡Û4¶ÿª,÷=Å«+úm¦÷Àâpï ú°¿ËÀÇ̃~¿â.X4ê!øl~§Â6é{ù$}dʵƒu…úf‘vƒñÜ"₫ÂdiSñ62˶›¤ÂáåäYä·Û€¼r7?Ÿ/êu ¼{â&ËTX( „¡@ÿ ø₫]¦ÿ̃úkYßô°¬I¾ KƒÚÇmèuùQå ^×j?I: ø8e­æ=*y~_¡×¹Nûµ3èàX6ëèyÄƠü@x%è›w1’ÍAä/àƯ ­ƯÄżßñFnụ́Î&î]dŸ#b›ya_ṕU FẠ#m@®&oº‘²3`aÏôù~˜g¼Q „¡@(ĐQß{ËtlPAay|ÓĂ²&ù2, j×…JX(0QüîÀ(ă¢·—ù¹¶¾w-¼º?Qû#Ü”uâ÷J́Û_ÖíÇ3ƒ±¿nN~+Àc9­ÿ¬Hö¢pr©x7̉Éï#ˆ?Öç´-xwÇ»·‚¶Ø̀ å_Ç¿¹Tâ#eß‚#áđOX:md(37ƒW‚>……¡@( „¡À$T 6 “đ …ËWà^<Ü̃~7ă{Đi‘NqG{´E©ỹ˜«(ó¦ÜRÚ/ƒ·³ù‹7í́ î€wÀ0Ü@hÿ˜̀ö",Ë‘±&\Z*ø,éÏxeKđzuc~_%6 Ư(uBP B*”pid˜ÎL\({§À»¯…~̀» f —&¾:\—ù[a Lß 7¦Œá¿ÉóÂÆ¥2µë¢"ï!ÂïÀÛÀ Âà@ûø¨×Á»)¹y·ÄMÆ3ÀMX'»Âëa…N•²2¿„¾^–h( „¡@( LḄÜ[]~8NUVת̣¿Ÿ~«Ô³ØfCœú||́©[;ƒêk¸)l>’åÆa pïFÄMÎvđbø*ØÆ» Z»ï€Xö-x> ú¸?<ÛC²ƠˆØŸ́2‹đ¥„÷ÁM`™›¥7ÀÏÁúùæ#}ÄGÚÊög2Î)g¶I;æ¹mÊ";BP ;̉ûzv×rpµ̣±S|p½÷ÖS?{ë!j÷¬@.v÷Üɤ±ópƯ>­ û¯ÊrßS¼ª±̉o•z6eƒđĂ_nú xµ¿Û»!gP×ÿúí¦#O7 $›JätpSb7BZèïHÜü…À;)ÆwÍô±àóƯ$ùˆTz´‹è˜Mçïưà÷[ÊæƯ˜?ÀĂ`r¼rë´9‘ú°l̃ MÜǵ₫ ê „¡@(ĐŸéư:ûë©ÿVùØ)̃ok™ÆÏÉơ­ÇU ;ÅÇmTA…4vV0̀Ø©~í3÷=Å««)ư:Ï°îđ ¾ ưïÁxwCΠÎ/@[–‹µ₫óL²§‚?ơjÏ Á”|Ôë»Ê-rcđ"ĐϪÍÇ¿6ªzè?BV ­Q̣°îéæc§xƯ>¤ñ̉øy˜Ê"¬H\́¯h¨Ư¦±ó°cƒ> í¿*Ë}OñªÆjJ¿UêÙ”9Ú¯̃~GăƠ:?ƒ²´éP­²¢ÍèyđûxWŚ`ѯ°P B₫đ}½L=ơߪ<¾éaY“|–µÛÑẹ̈£Ê¼®9Ô~’t°J=; ;E/cW¡ƠOæ₫|‰jXv {|¿0,ÚŒ»ùÓÛ”Ev( „¡Àø 4a½̉’RṂ%ù4̣aSD¯ËÇ©ÊêCU₫÷Óo•zöăÏdkă£K.đo76̀y¿#âwGfóàĐƯ°dÓ BP ˜$ 4a½̉̉áj’/ɧ‘›"z]~8NUVת̣¿Ÿ~«Ô³&k›uqüop*¬6Y'Q£ßÇ3ÖÎÆó‹ô¯ơ¼£C½( BP`VT  ë•&ø}“|I>|ØÑẹ̈Ăqª²ºæP•ÿưô[¥ưø3™Û¸h̃nÊ/–‡µVàMdÿ²EÑóÈ; î)đüôÂÂBP T  ë•&øi’/ɧ‘›"z]~8NUVת̣¿Ÿ~«Ô³F¡¿$å¯d]M{,«)úº9»üe°E`đû4₫Do₫“ÀŸ¦ĂBP T  ë•&øi’/ɧ‘ ÓÏu*zÙRY9¿Êt]~8NUó«kU‡^û®RÏ^}µú~Iư›à÷Cv‡BØ“ |¨Úÿ •yÄÿ‹çj+u"/˜˜¾®æ˜XÑz 4a½̉’ôṂ%ù4̣¡¢—ƤË>´:áWUưê[]s„ƒê£J=åădîÇ…³W÷oÜËAØLÖ"¸ü*ï‡+ î€ BX(P£ñP£Øª ë•&ø$m’/ɧ‘›"z]~8NUVת̣¿Ÿ~«Ô³FµÍâĹóàcG₫GuÓa³Ív"́˜ áw@…ü; då BÁ*ŸƒƠ³®̃°^i‚Iï&ù’|ù°)¢×å‡ăTeuÍ¡*ÿûé·J=ûñgÔÛ,Íư'†₫²Ó‘°:̀Êæ?Kô?µ—«ô ư¯†ßAü "„…)Ÿ [q·MX¯4Á‡$s“|I>|ØÑẹ̈Ăqª²ºæP•ÿưô[¥ưø3«´Y‚‰î~âWà?ç›UŸĂ>—¹Ç—ơ!,‚ñ0Ñ0dÖ+Mđ!IÙ$_’O#6Eôºüpœª¬®9Tå?ưV©g?₫̀jmü§|ï„?ĂàÏ÷ÎjÿGä̀Ù» ³êŒ©‡…CS >†&ư„nÂz¥ >$›äḲiäæˆ^—S•Ơ5‡ªüï§ß*ớÇŸY¹ÍL̃ï‰Ü ‚ÿóf;‹I¾mV˜h̀1h˜ñĐ°̉¥;MX¯4Á‡$W“|I>|ØÑẹ̈Ăqª²ºæP•ÿưô[¥ưømf₫ä́æá?ä»®ïŒx§à™0¶1“º üƠ°°P ¨Oø ¨OëAÔ„ơJ|H6É—äÓȆéK›­̃ªÔsP>F?O*0Ñ—Ă§álđÿfx‡ä‡°l Ád4Ă3À]Xu DקƯ˜Åûqaùr)œ₫ ÀCà¦ØÅùd¶·à¼?ÑʼS÷7đqÉkà&ÈZ{¼rª7Æâ3 1‡¢'Gnå9¡éˆ›Óc̀Ä|´Ơ~½£æăS…ÍÁBđ˜¬É^IäX |É7 $ÇΫ»`kÁÙp+-Ú. ï₫³É«`'Đ¼Ó§ÿöñ¸¡Ỹú•ÎQÏïËÀM€öz8o,6Ûlăiđ ê·‚₫xîưœ»}·@+Ó¿»À>̃ ̃ơY’Wê5!ôø…M>Xl»7<„Ç`q°ünØ^g‚wÇVÛly¦_k;ô[뤺ÙÿŸa7đ°ÿ´y˜¸ ĂÇáp!¯ínzçï¢ÜÀ¢àyăff]˜ôoAx'Ø×` , n`´‹à“đ pñÿKø h7À›a< Ü€8Ÿg‚ö1p³áü’}–ˆy­̀;1÷Ă…p¬o‚­@¯|f­füơ¼›| xÜÊÔ=‹̣øĂ<—äKƯÇahă5Eôºü¨̣¯kC;YZ \¥-†‹¬P €ÓÇoJư¸hÿl¾®Ư8äæaÈ7yÜÅö{óYÜ͈ nØ.´¯‡9aap¬}Á ‚< rÛ„›7-—€V7 ÚàƒÄ¯Á:rè§ñ‚ÁñÄÇ¢œƒwD¦ƒờ¿ö‚dŸ!bÙ EÆ—ơÛvÉ:ià仩b¾Đ ˜ưú¸™wSZm@Èûơ.ï X÷¿đU؆ÿƒ] S9Å1ç6ù𸕩{åñ‡y.5É—ºĂĐÆkèuùQå ^׆v²´¸J=[ Y¡@(0Ü€¸°×\„Ï7{ú7ù¢üé5ăt§!/‹Äî:äe㎠³hQÉ»Ëd |4l èkÙl³"̀].è!Ư‹ú¶<̀ÙEÿÖ™ ểÊÆ+oƠfyñ0 Ơ'>fÖ+Mđ!)Ù$_’O#6Eôºüpœª¬®9Tå?ưV©g?₫D›P _|2~í‰×x+]œ7€”°ÑQ >&ç±lÂz¥ >¤£×$_’O#¶»ê2²‰…¡@( Œ)p&¯ªQ ï¢øxÑkÀïZ„…¡@( ̀¢ x«Xkuơ"•Í¬QÏߺüpœªæW×ê9"ƯR¥ƯyµBP †¥@| Kù‰Û„ơJ|H*6É—äÓȆsŒ́̀bb¡@( „¡@( „¡@(Đ8b̉¸C…¡@Cđ§RßPøæ¯=~úÓ­{ÂÑđyØFÉVa2₫Snƒó«è|Z>@Íñ ïµÆÔ¹̉aˆ§íLjƠ§äŒFbc¦±ƠhL%f „Io;•Ieu†eLWaUơ«¯uÍ¡ ]úí³J=ûơ)Ú…ƒVà :<½èôrBÿ¯ÄDlGû?1üßn@._K_…Q±·0‘üghw$=è9ŸHŸ_ƒaÙx_æḶ́~&wr—Tïm»¬;¨jU|”ç|Îz¬Ă§@Ö+Mđ!)Ú$_’O#Æ—ĐGöĐÆÄBP B¼âÿyè×V¢á‘àfă#Y'߃s³üQˆÎsö¸Mô\±xi#³Ís…oLuVW ÁƠÏ€˜(0k)đ[¦{(\ n ₫›A²u‰œÿ«à@hu¡æäo ¿îdú6¸NÿgÅp6ä?xñ̉^ÉƯn…} ·Ï’ø4ø-´EÀ»#7ĂàUđôóö% ß —ÁF𸮇í@륮cûOöî€GàR˜ư₫œ®c̃;@²M‰¨éƒ ?[@²nçÜé̀Ag‡à/iùÂ|ảê屸¾₫/‰Z§ă`ßKÂÏ@MôÍM¤¾j?„­Çb3ÿë{;ÿ£N«óÈsâƒđB¸–vu)³Wđ÷Jx·ƠA›È±ưí¯Ïqçđ+x $k7¯µ¨àëÀ×›üô_û¼r,6óÏN'A«9[c)ø x́ËçYa¡@­ ü?F»ZƯ9‰¼ñu;X­„ªơ(ƒƠå‡ăTeuÍ¡*ÿûé·J=ûñ'Ú„í˜A‹—]`pÑô0Lv.Ü]\[¶}‘>P;N‹Í\î^ÄO%taørØ₫ .¢Ö_ƒæâï^Ø~߇ñ̀ẼU`¿n..€¿ƒ‹êĂÀ₫Ưļ\ä™>^ öï&G륮 |ư|5<~ g‚–úQ5ú.ø_¼Ûđ  –½ ÔÚG‚´næ¼ ơîƒvÇà}”9F:~ÎƠ9»ÓÜœÀVp=|ʶέó—+“ît¦\Ü´9ïwĂà¦A»v‹uö¯Ưy¤ÇÀ¥à†N­ÛƠ¥hLï»·ipZ¿ÇvWÚ̃nÖuvÎ;€f¼îSv:¼¦¾yµ[`Û±Ø̀?{üZÍù0̣§Ơ¹GvX ¨g™>º™P“̣ø¦‡e½úr¶jyƯé2vœ[‰5Œ .?§*«kUùßO¿UêÙ?Ñ&h§À ¾º¿ö?·Á|l?"iqRZZT®HÜóßÍG2Z.Ø´³àȱØ̀«à̃U˜\”}½Èo¤¾ư’u²5ˆ8̃&à‚́́Dîû×\¬ZW륮}o³Ă8\üjösÑXlæŸƠ c*x…Üå\́³D̀Óº™óxÇà/ôă¦#™>₫Ü€,ú²5¬R?²°ˆ]Ùعw¦̣u0gÖèânµt®ṭ/Ñî<̣ÎÓ9c½ÍÜè9ÏvuƠÛúÉ>Aäü"± a?ÇÖö‡},ÀĐi^϶#¬sƒÚ̃€¦¯­6 –ås6Ưéܳ<¬w<ÊỗËÄZ”Ç7=,ëƠ—Vơ#ïéçTKṂađ7B:p!œ́1".®§Â}à¢Ô«×É.$²$<3e”©Eú’,ÿ<â¢.œ¼âûVø<WĂ*ĐÊ>O¦>^[æ ₫ËÈ{¦e.à’¹ tqgÿéܺ­ë&é`đ.W«†G!ÙU)BèUqÍÅ÷³à ÈëæZ_MÙxsBNÇÀ…úw ™lIûÔ÷ äy\µÙÁ:óA~\!-ƯØ”¢R§ăđê¤1­®O;ɬ“«ở\LWP=L-bê–ÑE›~­äzÙÏEŸæ¥îĂÉ`½àœ~­Å¼c¢¹øN¶9‘Ï ïü¼Ê» ÚÀzS!·H|¨ÈĐm¥™ÁØßåøëî¦,oĐÑcéĐE£ºL…oBnΧ•é“mrưrß»s§cà+ïS?»Á|0̃çÅO¨³< ÂđAHÖÍœÇ;?¢³a đÙÿ @›êåÆ‹ùÂvP¶ûÉpQƯJ•»9ϦÍÇ!Í{wâS¹ụo¼óèQ:̣±'7ÏúÓ霣¸­ơ{lƠư]à&z5đöó(÷㬧ŸÚÛà0ÏE¾Zßɺ™ó6Tnw æ¡́Ûüûñ¿~in₫ oßÀ̉0QëtÔGƯÅq…ƒ$ÍÍ‚­“Σ—̉öN°ÿå¡S]µsQŸ́CDܘiưÛ¹iû5đnàƒđ˜oM¿Zé₫ ̣]”[ç´²eÉt±Û‹-Nåy[4˜FWƠiQfÖ|đ|XÔD[ˆüÅÚ”U‘íjº^½ÖÜPÍ5ÿmlÛéªu7sît <6ËtpeaỂ Cµ‹Æ;+Đ£sËíß$vÍ3ˆẉ¯ƯyTêb,ÙKƯÔ¾Ÿcûr‹ÇÖM…Çæp“ ¥Ï€vóZ:éü¶üØy,}-†Ơ¯@¾NIñº½HăæaƯ>¤ñrR<•µ S¶ªyOWà)z¥D>½Iơ9ùø)^Ũö]•%¿ó°ª±̉o•z6eáÇh(0ƒi¸©Ëög Ëà›u ă4J/ăÍcàcG“ÙÜ@y§âÿ`g¸¼ë—6đñ€“Đ•IÅuµnÛ¸ÙyöX‹îÿŒ`u/XÔ BP BP †¥À—xëlđ;‰_ù]ˆIïuØÚ rôüHă¬:OŒ „¡@( „¡@( LL·fÍƯŒ| ƒ¥áØ´íà“FJöG̉‡—̣R̉;ÿJ‰,ü9qÇѼ³̣x¼´uÀ¼ Ltk±éV©¨ „¡@( „¡@( GvÉlèŸwó¡ù½ ïzœj³îđ™y·äûYº›¨ß÷¸<«xñ«áœ,ÏÇ°zÚ€Ä#X™z BP BÈ"=7¡@(Đ•7Rë₫¬æñÄ÷7Ú0wÁ<„åÍY³GJ=ư½”7w@Æ•(*„•(àó’Ï…M`¤+^Ư˜ââ"ŒcS₫ Ü·Ă50ụ̈̃? ]" L*ÇÛ àeEhz đ×nM4ßh’ùúwæ{ƒÏÉ{Ơöà#(—BX(0Ùđ{'Â; ǧ~µÀG§N‡_Á/ÀÏÇVöj2/lU@wF|¬«lnf,2}ë…É2ÛÏ`?sû2ß8ÊôƠÑ•}0]…UƠ¯¾Ö5‡*té·Ï*ớק¦¶s±7\WÀ‘đfX¦ÂüÖ½ê5ÖuTOuU_uVï°P`2(àE‰ipÜ §Á₫0 Ë@Ï_ô¤Í¬l‹0ùUÁ÷‡wĂwÁŸ*½̃nêfekÂz¥ >¤s W_ÊơS?ă…çS!µ=¬Me/¤¥:Geuæ#~rV–êä¡ç÷êY›ßS?µưrmn¦Í+³vƯDÓxcuS"»édĐụñS|ĐcØŸ}WeÉï<¬j¬¦ô[¥M™ăDưđ¶èAà•¸c` «NơUgơVwơ ªÀ‹ṕ"đ*â{À+aƠ)°]ûøÊ°̀ª»|’âÈQ«¥qó°V²ÁrR<+~Z4ƠIáÓ*´É˜È$u¹>‘CÁ;iü<¼‘|ïœjùä^̉¶iÅ>V.,o“÷[_@ư)©Q—aêc¬zJäa—ư ´Z>~t€¢3û®Ê’ßyXƠXMé·J=›2ljøá/E\?…%'̉Q´íYơVwơ÷8„…MR`.œù&Ü oj’c³ˆ/Ë1Ï߃‹¨çÏ"sΧ™¯SRî—?Âä] kúFzG!ơéª, ›ă •ƯEüK°|₫ ©̀>Ö-߀£›P ¼jxø…Q¿sĐ¯ùèE~wƠt¿´ú—R‡¯ ½^­̀Íḯ>’ø_8N7ڜ࣠₫bÔ|p)wÆ°É^DäeàbÅ:Ú"°=œ ×æ‚ÊöËÂ…p \É|ÿœ’„Îí\pnƵ¼₫^ C̃ɾ̀c£¯ƒ ¬nÍG¬^ ;« ÖWˆÖVOṢ7đ{¾FËv…‹J?"íƯ´ÿ_ße»œ 7~Ϥ{´‡F¾~W.êûº₫NmŸ¨ê‹º̀…5FÊ>¤7›A»PU¿úY×­ÉDú«Rωø5¬¶Ç3đîC|nÆÜ£ÄëIÏÛÂß,„oÁ{` äæ¼uZÙªd: ”d ÙƒoÀ;aĐ|“ôC]ÿʶ[—3kH{|H|yØ´µÀ‹Ÿƒ-À÷7ÿö‚gÁpóá&ĸ›‡‡àXĐοS¶!¼ Ní4x9l 瀛”«@[ufđ´¿«‘óï,×»Ê ,Fø1Đu¡“©íM Ÿ5ûrÓ³&¸i<P €s  è"˜Uđơâ›WØ®€Ăàp̀+…¯O‰!…0îï±o$¼®ˆ»ÈĐ\\8{ê^íëÅ®¦²›–…À«¨¹mCÂEȲ̀/w3÷å,oXQUnĂBº¸–VĐ`ÿ£ŸóZôµyÏ7ƒïGÉ&²3œß…éàÆD{Ül˜öưáàw)|ø~§]¶óưev¸®„½Á÷@Ë5ïN8ÖUp2hw€w̃¾gææ¦âÅ¿'×í_|HsîƠ—rưÔO„HºƠJ‰<ܼ́̉|ü¯b$û®Ê’ßyXƠXÑo3đJà´!¸ÖÍD¿º]œJ]?às–'o@H=VåÂÅ«›Kx5óq˜¹M%ákc³–„d̃e±|û”Q„ ôîă䶉|ÁîøÇ€3’¹±huñc:ù¢Y'ùå+á8˜ƒ°ÑÉ»{èh}êwC̣«Uxd}ÖQµ•uŒ›Ñ’?½úR®Ÿú‰°³I·±Z)‘‡›WSŸâUŒdßUỴ;«+úm¦­o Á5¯(z̃½aœ±»]äçpJßå È\ä >†‘êyUó­P¶)dXgÓrAÍiÇ),¨[Ê{Ô=h›ñ¼óñXŒ—Í»+ÀZ°h¹piụ̂.Èœ裪¦¾úȘwzµyiàûoǗ¥÷ĂÆQJ–´ÉĂR•Ú’¹)̃iđT'…êFÙ“ Œé囋f¢l©¬œ_eº.?§ªùƠ5‡*Cô=1¼Bøđá‹'ÖU¥­]ø!ëƠC?,'j^íôñ‡á:hơZ {èæă%§_Ư6toÂYM_#ç‹z¿GÖ,¾;×ẴtËÛ;`GX 4/|ôrge¬Q…Z½GWµ6j7&ø|ëƠ—rưAk·<í–œ+…“¾₫ ÿ*•ỹ¥sîâ?-ÊóükÉó|,›Eú,íđ›±Ø`ÿç£/—°P`Ø ,>₫¸ï°‰ñÇWñ3»Ơ÷ÖFY|’âuÏ7›‡uûÆË}HñTÖ*LuRتÎḌÊ-èlux>[c­{ÊIDATø¨Ô9Æ~Œ¸liƯn@lû‰±O₫‰ Z$QŸ”ep1û®Ê’ßyXƠXÑoóđ—©|VÓóÁ/7†Ơ¯€ºÿ…̣Ơú½‰C'pâ{ƒ‘87ŸÔ¥ÎØV æ¯q½¡ÎA2V¾NIñº]KăæaƯ>¤ñrR<•µ S¶ª3‘¼̣dåRg~ßÔ_§Kăÿ¿¢¼— È´ñ{iÉjÛ€ÄóéỊCj¸‡nç…oÀß`c«OơVw¿ïsƯnĂB¦(p;ø₫àăX€ơ!¬üƒÀGWüÁ“!,˜L ø³Ï^XKÖÏƯ}ß¾™:F˜vOy8Ê~8Ϫ,×0Å«+ú\ ¼w½̉y.l q*0uU_uVou ®ÀÎ8x5ø®ëBX5 ,F·Ÿ‚;à{`zVµ´FÉĂºµÈÇNñº}Hă¥ñó0•µ ózÆmî€ø9÷1È}đµnî€J½û!µßΆXmw@f÷¤É‘*„Lcu óñS¼Sư~˪œ_̣;ûơ3Ú³3¥mà¸~ ;À†àmĐ~®`Đl–5ơR7ơSGơTWơUgơ &‹₫x…‘ÂÍp4øhĐK` ̀M´Uè>ùˆÊóa3ؼ(áUă#@=guû”©[“̣ø¦‡e½úR®?h¿Ë¿Çøg¸¼{ï]ÔtQ³› ȨÿY·÷®`m¦¾™¡AX(0’ ø†qbÁ²„~©Lv…¥ æ#Lo$DĂÚ(೯€oœ2NßXo‚°P`²)đÜxL…WÁN°L†›”°ñxŒ*n6ÜÈù₫đWØ₫ñ(&"„M:Ölăñä¿üĹžHå·ƒư.ŸƒÚ-ßE¥xíN0`;«đĂ₫«²Ü÷¯j¬è7BP ¶U~¦{n£<~Z£äaƯóÍÇNñº}Hă¥ñó0•µ ózÆmå; 70À5>^́«‹@nỮ±ÍFàÆEÿ //⦿ Uؘnq¤ i£ÏP BP BP`p ¸Y¸jpƯơt6†wÁ́đ¨Åâ1ZdABP BP BÆ)đQ<º­n¯bR·â1^( „¡@( „¡@(Đ üá–×íJl@êV<Æ BP BP £ÀwqåŒ:Ư‰ HjÇX¡@( „¡@( „¡ÀpđWâʶ;µưBœ_8ÑüFzÙRY9¿Êt]~8NUó«kU‡è;BP èV*?S»ơ!êơ®@Ö+Mđ!)׫/åúU­+“£éw@FåpÆú\¾~ßF›ç÷Ñ®]“vưéÛ0{»†È_Ÿ¶o(Ú·Ư·mº)%+·-‚P BQV`q&ççÚ¼-&Yåg^>ÜÎ$VÍ3úˆÏI›·C¬ơú/Ô£Àÿ¦L=#?u”²¦«°ªúƠ×AÎÁ7 ûÛÄ{´Ë©¿[m:UÏûû w**oL¨¾Ñ Ú¢ĂÓ‹Nóñ=ÑßTwÁöyfÄCP Ú*àgÀ(™‘•à:X´ª>ó̃Oß'0óÏ-Ûfé~¢»ĐÈỳצ±eeÚT­,»<¾éaY¯¾´ªyO?§Zj2×°rŒ[¹ë3Âư%ïÏ7âEØw7]åăwS¿×:~à|6ù{mơCP FF0“%àX V€*.²Ñí¶±¥ŸHM,̣n{‘đ%ë&Z‡Ơ)·åªÓ¶]ÏkQp6¸9_‚opÚRđđ üíđ)H¶.‘óácàƠ˜[áđ¸!ÓßR»¿₫ ß7Ÿ̃ư+¤7V¯À\ ƒöz8o,6Ûl©¿ I¯ûÀqE™¾̃ yÿæÿ…‹Áù₫6ƒdúwü®‚AßÊ–Æ7_½Lß÷ÀI v{‚ÚÎɾBä°”èÚϯao¸»C½( BP ¼~\sd]ÿˆø»ô.„3àđ³Âv²÷¹î…_ÁĐ‚OÀ!àgæá`Hv ‘cR‚đpđ3hUø#l§‚v&́0›ù§Ưg̃Îÿ ôÓ1÷­Óü>Kùᅠˀö p^‚Ÿÿ~övcïgä—»©uúVàú¾[FĂ'ø±2OÖ)û`º «ª_}oSçtđÊÄ4¸ ü‡æÜ¥°iuíoظˆÿ†p=ød‘öMiKØ¡HO#Ô|ÛR»éÄÓ7mûÜV)âj§e¯5ÇǺos̉WĂá`ú§x́ă!B?<Ö£áa˜ ¾Éºq:,Û¾Hû ùáqúX́ÉñMúàü^Îưßà&d Đ}̉æ?¶çú¼¬F^Ù®%C_ÂBP ÆWÀ÷Ư‰ïÛö3gÖѹÄ÷†¥Á2ăÏ?#ƒÅa;Hïó~¸©đóa8 ¼ ôgØ öë@óB–}ú4Wu·ïˆ[¶2¼³ˆ¿p $?§/¦®Ñăpøy£¿ö£ÿ©]«ùY÷đó đ³ëp} ?Óà 8´n?ÏÖ§®ăÏg£fY™Ơ*Í*ozXÖ«/ÿG=ŸZµ‹¼ñu;έ„Æ P—S•7‡x%˜ÜHܾYùFgÛÍ!Ù‹ˆ˜· ¤7¯åBCË^S¤ |ó|S‘ö xwHị́…ößÈÿHQï"ÂOÂ3à¿đKđ®v¼y,öÔ €mö,̣Çëơ¾ZÔ5đÍ÷Øö‚Û sÜ´W´ƒàô±Ø“ă¯HÚy»ùHæ‡À®Eâ,Â#‹øÖ„̃BŸ¼̣ue Î%¯l×’±}93̉¡@( „-đ=y¢¶1ØŸÉ|v¿(xGÁ«ú̃Ip¾ ,çÀ·a•ËíÇr7 ~<´gƒeυ׃đn†—†p?X7m@'Ú,O\K~¶úL}å;Á Ï~.9ŒÔ®Ơü(m_p.Én!b^²OÑ_­Ûϳ؀̀Ô«Û¿«2Ư¶z=*à®?¬^g¸“Á7Ëà©æ—ö÷™ÁØß‹³xú¦¤=23룈Ư¦MñrxU–áF#½ H|+đ®‚oÔGĂ₫à¦Wˆ~ƯX»₫m›Ïă1̉^å™ ÷›‚ Ù…D–„ô‘̣S8µˆ\’2Ï+0ë8 ̃o?°‚´‘" „¡@(0‰đN€ïánF|¿ÿü¨ˆûYºlÉ|d)}¦º‰¹¿(ø'¡Ÿ±¯ËÏ(ÂÍç†S!Ơ%ÚÑZ}æƯF /óA^‡dÏ–·×/76Z„…“ZØ€Ô{øVf¸cÁűWé}“üh7Í ÆîÜ’Å‹è„wơ­̀G—> ̃-đÍx:xue;8 |£ïÆÚơo[? r›BÂMɽ°"ø¦ú8hjt´ûđ ^óĂĂ “¶9¼üprCu(l n¬¼²¥}·ln‚ö+gF:BP V̉gˆë/TiË̀ ƵrâƯî…aø\׃>Ÿ'/‡ `Sđó$7?#Ü€x¡k_đ³ä-0?|ºµäo^~öø™¤o+Àuÿ¿½» •äªâÎĉF ¢Iđ‘!ˆäc!×îTp¡³Á•T܈HB\²K\(ѺÑ…‚A1.D $ÀAăÊ…. QÏ̉Ï—¶ǵ¾ï̃º¿ çu÷«êºç₫Τ«N× ©ÈXö߶¾—öxùÏå=Ë–s›'Îg‹ˆÇạªÑNà 5U>@­xEÅ'*̃S‘¾g*¬x¨âæ|đæBúØă5AæÎçÏ+₫Zñûû*¾_±määđ¶¬gŸqoíô¡ë+>Sñ;'‚¬óÁlËÉåóß­¸ÜÈ“§+¾Z‘÷̃^ñpÅ̉À¼PÏ¿U»§*~[‘‘uưeK, Mö1 @àl₫¼™öz̀ùà³9fäB>ç§Vü½â—›ÇÖă÷*̣¥̃]¯­øbÅc¹ó½mäÜ“óÑ»*rœŸU¼¿âUœK3ôîÚsơ®ñÆÚ˜ü̉ƯTqEF̃·k}Ùç_7VÜR‘ëƒ]Ăùl—mC \¬lOÇY,àty}Œq¬ă&×]k¸¶¶ÿøÄ>¿®ç¹Û÷ÜYqkE¾µÉë\Pÿ`óüơø¾Íï–¦1nÙïËÈm^ä"=ä§ß—͹%ư…<ÙŒê1Çʇ|Æ×*̣Á~C^lÆr¼¼üJE¶ÿªâÿBíóÓ¿Ud<~ºb©'ÏWd[™æ#'‘Œ/Wääqr₫Ûêơï*̣|ا"ËHƒ“m'çY¶íóø\íôÉ}v´\ú¼=Ă×ë ù́Nü¢"ç˜å\•‹ù*rnLü°"Ê«*­HĂ‘÷åÜđáŒoT|û̉³ÿ₫ñL½̀±—ñÇz’¿~µŒ49Ö ¯¬x²"s̃W±ëœ—÷ư©"ïÍù,wTŕg+2v­/wëÓXä½o©x¾âăËÈÜ¿Y^́ùø̃Ú/Ç{ơeö϶Óq™]öëÓóçơYr9+ƒæóö‚̃*c₫ßg ¹sđúM•ÏƠă›NU<ß‚\êw£¾¼P‰ª"âo­¸¦bÛxsư2'’+qºnË>X¿ûGÅë¶ló+8¬À!Ï©¹èÏgû¶‘Ïû›+–/©Nî“/øö½+̣}‡~»9×圗ñ“ùîZߥ74ü±ÏơʱÓé!‡e=å²ä´úÇ^Đ[å‘y5Z­áXùú¸ê€i@Z/ƠDù«W´Đ<˜\à˜çÔÉiºü®WzÈaAî)—%§Ơ>^îÛèƠ.Ø |³f̀¿3i5̃^ư¤âs­&4 @€À₫ùë?Û¾½X¶½´G›Ÿ­̣È<ÇZ_«5´©ˆY @€ÀncSwÏlëÿ#ĐĂơJ9,†=å²ä´ÚGw@V[Z #@€ ĐŸ€¤¿Èˆ @€Àj̣?Ä1/°í¶̃ñg5h#à<×ÆÙ,V!àÈ*Êh @€ÆĐ€¾N/₫H€8ª€ë—£̣:øI ÈIĂ<â0‡q @€@3×/ͨM¤9üŸ»ëWø&áđ¶H€V ×+¹nÉơ‹A ‰Ạ̀ÿÂØöÇ–mMÙL̉*̀sëkii. ĐBÀ9µ…̣:çhuƯ·^O¹́“ïĐû¸2tù$O€ @`, ÈXơ’- @€¡4 C—Ọ @€ÆĐ€ŒU/Ù @€Z@2tù$O€ @`, ÈXơ’- @€¡4 C—Ọ @€ÆĐ€ŒU/Ù @€Z@2tù$O€ @`, ÈXơ’- @€¡4 C—Ọ @€ÆĐ€ŒU/Ù @€Z@2tù$O€ @`, ÈXơ’- @€¡4 C—Ọ @€ÆĐ€ŒU/Ù @€Z@2tù$O€ @`, ÈXơ’- @€¡4 C—Ọ @€ÆĐ€ŒU/Ù @€Z@2tù$O€ @`, ÈXơ’- @€¡ÎưƠ'±̃0X§À¿kY¾`Ygm­ª?çÓ₫j"#] ̀Ú€¸0éú¥ä @€Ö*àB|­•µ. @€ h@:,” @€¬U@²ÖÊZ @€4 EJ @€Ö* Yke­‹ @€@‡‹"% @€kĐ€¬µ²ÖE€ @ C H‡E‘ @€µ h@ÖZYë"@€ Đ¡€¤Ă¢H‰ @€ÀZ4 k­¬u @€èP@̉aQ¤D€ @`­µVÖº @€t( é°(R"@€ °V ÈZ+k] @€:Đ€tX) @€X«€d­•µ. @€ h@:,” @€¬Uàü »8@R$@€ @`w@ö@²  @€‡è­yñ0Ër @€Á\V°«M··䉫]ˆ÷ @€ -à:pẹ̀íŸ|o ÈƯ•úă:àưkhO @€ÀȹîËơ_® ÎmÖ¸íz/Û&`°D @€‰\ 7,~ow@.ƯT @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´Đ€´7 @€‰4 ß̉  @€´8¿c‹;¶ÙD€ @€+päɼ @€«ø·$â¾Ü—üIEND®B`‚tpm2-pkcs11-1.7.0/docs/illustrations/reader-slot-token-obj.png0000644000175000017500000003245513754763565021141 00000000000000‰PNG  IHDRîF“Í`sRGB®Îé pHYs  œ iTXtXML:com.adobe.xmp 2 5 1 2 †̉®$2»IDATxí} ˜]Åufu·ö}ÚĐ¾€Ø6B1ˆÀ,6́á›{â„x>Ï÷Å/3“Y2ù˜$æ‹ÁÁàƒ c ıï»ZĐ¾tkßƠjµz›ÿ?Uç̃zO¯¥–Ôï½Ûô)©ï­[·ÖSç?çÔrë9gÎ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(ĐF Th¼›{¬ªû̉æ;úơéùµÆ¦¦±--®JßÙƯ(Ш¨pM]ªª68T÷È?ÿ·[ZQQÑ̉ù·G^†‡ö ¢åÑ ÚB%‹ÓY(Đađ°öRO³—: _–«…đ †{KKKÅí?zôåQĂŸδ±½ûơíå*ÛÁzwñ]kN3+1ùC`Á0Koô‹ø(°Jss‹;pè°{ưĂUơû~»~VƠ o¹¥IÙ«ÜwĂzÀđ\@ÆG]øy/Ñ9Åé¼oå—₫†ĂƒØM&„…đĐ…o¾öĂ_ÜÙ¯WÏ‹gMƯ½©©ÙíƯwÈ́`­0fDp̣™~̀’J¦Ÿ[(ñđ_œ¼·ôF¿ˆOàùç̉9“»¿¿lƯÛ–î¿>¸_ï=j¿.ÊŒánx2ÀđœÊ¶É3Ăƒ7VL¿À`'Ä£áÁđÛ ̃4-€Éçr—¯xĂưhCĂ„Úº#îp]½˜4Ï…XAPx2á!Op0œq½IŸú-}J/£_>ø‡|Óp´a¼0RF.†Ăs¹ä™á!(åD£¤:…âAué—Ρ_ †¢y³7=h/‰áQ»́̃[ë—%Eèv?á$Ët2«,+OG¿}›A hÇ̉{å"Û‰Œ~d›„7û&üC₫ÓWY¸¢>3<—φƠ)¢ZL¿Ä2´âÑđ`xđ6¦É^ˆ‡`¸7»{êÀÆÛNÁ8W#KC˜~¯ê#âzœ¸É;F¶ôA áÆP×Éé×Üܬ”ÈĽßyĐÊ—́ơë= 3yĐ¾x6<´/=Ç»É;ăçăYĂ³áÁđ`ö”wăÎtbR”.Üd:T'¦h®„_fägæ™,M'O>¾¥÷Ä0úˆ”ëó”ưfxĐIîô„Ñ&½&¼6-À©±…pÎÊË ›’ï,½Ñl̀Î_NÀ? _1nYƯđàûÍđ\r<‚¢1ưbú•¶F`‡,¨©ƒéß'Ôë¦Ê¢’wÙ#Á³KêơÆ<û)èb„¡ĂB§ÑSÑBNF˜&²ô )Œ~÷ñù12ç èĂ³'B‰åYæÀ@*$˜¢Äô0ư‹†PÀ́-$˜½IFˆ¶ÊT`ß”, ‹€à6˜`¡‹°đ‘+ÄÓđpg.‘@ñÆ̉ư”OÈ 'àFɘ3<Ô0Đ Ï`LÊÆRÊĂŒaƠ1<Ê&  Ù[^Q‰Dê¼ú Í—wΦW&_́*ƒäßUp© w™mJxå§ÓgKïŸÑÏA)ÿøÍY}2p3<S6Tù•/<3<Ö©|À¨!í@s/^Xù奿áÁđ`̣ •‡ÄCîV†Œ@§`Ơ;ƒÔïxIfa4H̉(ƒYz£Ÿ2†̃ÛÂ?ÂD™¸ÈÖĂúÂägHåc½#´ẹ̀0PJHÓo商‡Ä,R?–—ËGÿ<Ă=RJFdÅ<ï•äQ$ñæE ¯-}¤ăMŒ~…y%Ÿ£Êớû§pŸŸ›½¨x.÷[®á41yp,g„ y¤)~+Tzy ¤{^§‡®0ưX|ư˜g¸{Ês‘v &æeUèyƒÔ\è¡Ü¸–È¥‰ÑïDü£œ•¥{¬x¬?M”Rf ZĂƒRÂä{©åaJù́ø i_”RÝëĐÙÊg«½áJ¤#Èp¢LÚ/0D¹«†äRC=Æ»†ûè>Nx›ä`éS:y&3ú s(ÿä3LÂ9ẹ >†̉c̣ Ÿ=‹.Ị̈ , ’b †‡²ÈĂƒç?Ơ—25È ăDzđc¹énOfÜ9ƒîñQ)æ¹øÆYu+ăp$0Œúøœú-=‡7F?²I[ù‡B(cÎđpox.=3†VÇđ`x¶,‡<0<Đ@Mm,³·RZ”ƒËMÿÈpç©2-b¤Ă8‡V¿?4Æ`B,cÁP¯ ¢LF=QKoô;9₫É`6<¤Đ !-Œ~măÆÊ–3<ï̉X0y@4—φÓ/¦_½Nˆç™³£#L?˜~€Œ*“~¤~(°U†Á´̀e— opT\é³€  £€Qpù¸ÅO?wæH×µkU¨ç#¼cùuË×írơMÜå“Ôÿ̉Y£\×.~đÇgJ}̃¼ư [[³—­•„L?iÔ7jX_Égó¼¯̃çÛµÄ̃ṇ˜A‡y)Z\Í΃n3₫›“ú^—Îíºuơ-Ÿéâô›PŸu5ûÜÈ!}Ư”1“wqüææ·u®̃Y›”×ß×%[ư—Ï?́ƒb»;ï¼s\CCĂu]ºtYôÀ¬:aýß©£Ñódđ8|`/wñŒ‘nøÀ̃®G·*·çà·iû÷ọ̈×ØØ,`ûçü444»7—U·I0ïÉàÛ #¸}º»ê]‡ÜÆmûƯ »]ƯÑFÁC¯n]Ü…3F„r<Ác₫ñp¨®Á}°r"e›ŸO†₫óhe$O<{íLx __Ï—¯Ê[ñư0x́½•[“₫è•è©ă»ñ#ú»±Ăú¹#àÛÛˆ̀Ư°ơ@G î“ÈéU›ö¸m{ “#ư8ù ÔK̉l ºä̉™ĐKĐqƯX:•?ÄăÚưnÂưƯ¸ư$| tÊê-ûB_~ß^ƯÜy“‡Ëjù;+¶ºú†¦œ̣5?â™ÿcưH]®Ïụ̀ùtùùtÓ{j÷úyÄĂĐ½ÜTØ%äƯ₫¿[wr¶R₫îr‡ëÁ¤ä•ï ‹ñÀçjđù¯ ósœ™ơÿK₫CÏ6ïq5»jƯ¨!}Ü$è:ó7ư-°ã‚¾i€¾ñq*`«U¸©c‡@wôs£a5Á–Ú±÷°Ô}̣fnª;â|éϯ?Ÿk©;Vm“úØÓ]2c”è¼î {¡ó6ï8à̃Z¦:Ïă)ËxĂ­$rùŸkÁpll%½üĂƒxig?ĂÔ4¥JÓ¼)Bª5wkéºî‘>uµG¤Î7]6ù¸i˜;đ{÷½&Ùjû¿~Ơ 7™Œÿ_| Í̀mÿ”1ƒƯmWL“8….4®_úh£ûåk«ưLÓ¼6Öç'¯É àxùkƯ~û̃z÷Îr(8­¿T5cư—O?OM©vÑ.0Úƒ̀§5666}ăßøÇ={₫è̃{ïƯQ¨@Ö§#ááz ³ï›…øáÚ¹Ư‚¹gú¶æâË—å₫áW‹!èÈÅÏ₫Úz²¤‘₫ h¡̣¯<œ»á²I®*ùa7çfN*yg÷?ư‰[»uŸëíéy¥~¬áÿágÛ3' µ_Zpú·J¿ÂÍo×Đ΄‡¾½ºŸ}° <7¤O÷ï¾|¶;¼_í/>R_ûx³{́••08(ÓŒöA‰xøù0Ü FˆÁó¦ ww.˜:dLç{w½[c¨ÍzziÖYCƯµ—œ)éiˆüđ7ưÆ\i¨Ư°Ô«G7÷”Qưlx(¿½ô»äï¬̣WơƒÊwa®—ºúF·xơv÷sđ5mqỵm&”ÿ^Y¼É=ú̉Ê6Ù.̀‹Y¾¹´Z7´_aÜ1̃5OtŸnÜíî{j tGדÆơñt̃us½Î[ä­Êç6ê×¢¥ü”/<~k{°ƒp‘_R¥Ÿÿx§a/–ü>x¦qĂ’&ï}1Ó£"‰kjnvú§Ư0̃”3ÜïiÔÏ×]߶~¡Ê6…ös¤ªF;SqFeÂÈǶ?Ê’£RÖ'v̀÷óÇ»oßtnBßø}k~¦ N¢h₫,ƒ~u¬Ûb1#\­¿ô s`›̣ú‡ïÊƠÇđ6¢¸wYUaÿư7ëêêÖÜ~ûíÿù;ßùNÏBÅæÓ«˜ü| = ôW{—?cÂwŒs €5”îØ[›¢_ïîî[×Ïq=ºwơü¼! ŸŸ¾:ûÊåS£ư0Ï`đ7aƠ‰n`ßî?₫₫ù"Ô1‘’*‚¨Œ‚^ÀÏèsRưW°ñíØiđp̉<¹;°_÷·_œíüfçVsÉÇê.;gŒûöçFxĐ7¸ƒWU¾=i˜û£³£ư¥6¹§̃\+º JѪWôx*v½{vu_ÆÁCˆDŒjù”ơZÅ /ÿsƒ‡›OB₫ o€ßc§öTlÇố̃ÅÍÅêĐåàùăñ“æ“đ›œà^YÅà 7º!w\¹¢~R7 +Wß¼₫lè“Ó3 è¼ít^Oê<Á°Cúà<ÉV™ ÎŒA8± ịÎ0 ¬t!ơÇŒ̉l“ i4¼$éQ7:Î₫ưù}¯‹ŸåWÀ—Ÿ3Ú}³Ùt́`!¸´F‚ÜAßÿ₫Đ;¾HĂúÓ1}38£íÿ¶³ä»/̀%K¥qûY†ºG_\é^ÿ¤Úơ£Ú×ÍÅ6€K°LK7}ü`™u\±~—F—­=¬ËWZjùR3„ mCG_\å̃ødKRÿa0:½n6¶ÓôCiêØA~¦ñ3Ûyü“£„Đº/û»wï₫fàÿâg?ûÙ?ƒÎíÈç%áçèåû&(«/ ïxItüƒ0HÏƠyeKăizB/®³†—O¬—7ܽI8“@öƯæ+ë+̀éù¢sªÄ”Î P²ô¬ypqùT́/~´Y:¨7:±f%¸¯=LôI ÎRÄ2cLpôˆg"Üég;»`—7évî;́ª ô9$ó,|ù3Ù¥í—N”˜¼pdV‰=¼M²{â¹ï₫ª ÆKŒ+Î+{|å̉»ö÷ûzÁë™9—₫¬S“:zúïÜWç̃XZăn™ï+úộ3ƯQư·}́zl_6 ³ß$gI\Ÿ>}ª:4*64ÿ'ïvÇw|÷Á|I˜/KÆÏ=b~.fùĂ°¬®nïÁzÁ1;€₫W—T»›.;K^ÆàóÓ{5ªÜ9v-(®p$Vè^[²Å½đᦄ¹çöÇXâüf2¹ a¶ ̀œ0Ø-[¿ÛUàËonJæd_£Çj.2'Ú¹ÿ*ê ạ̀C{ááäqE¿3j‘™:d-{gaE(–»´^4ƯwÁ}·÷ụ̈c·Æ¿âqÙºƯb|ßö¥©’Ç‚K&¸¥˜Œ‰ kêÉ£Ê@•º7°à_ ;¨T>Ë \¨—jë ¤ƠÔ"¾ư"ùÁ_t¹zF‚ÜmXU₫Ÿ0¾¸%´̣ÁIÜö¢é£íÓ€P§băÑđĐv{‹Æi¾ü¥ư@¤ü½̣÷û±ü8Ä-_Ï=ă©‹åû®ưG°7|{b¸“—>(`/&¹°L™àIBđ}H“́5g}oz·“ïĂ€ÎÁƯwZÿVïpS0)úųư„*'f7â;À |wÅô4ÎƠ×ùxâ$§:Ñy¡₫{…ÎÛ7I^ÖÇ­Àvœ„ÏưÚSÔp§ÈAåèx?öñHjK¢h8…“ 9¾ñq™P’'ñ\Óû’By >ª‘”Ïâh´ÓqôØǛ¥Ê'Ư‚¢íâkn[¢1¢íäGœ™¡{åvpß.G­Ü†óî ~$è¢Gi&K+QûŸ£›fcÚ±Ăñ¡k 5ó–úà™åË3ü|ߢiƠs̃³´ü‰Ø̉£n÷#Ç”¯í”¶!]¹û/.ÿèå¬Qh½¶¢xw¦{î¹çé… N|饗.9räg̃éæ455½ˆÄ3G몴„f́¯¨?³LO©7y&Ỵ̈ëÏYHuô1¸·ûxÍN|˜zĐ½‚~€JǪ…ŸCdí(¥K¾<˜x‘†È"íOËojrîåÅ›ƯÍ—ûæDl=[¾aªËœ'â9rùé«;bÿb~jkû5ßL¦÷Ĉ¨P.j½?&‚wé(_øpsbdkz7đÊâ-ØfåÔ‰88`E41£l¦ư<N=C̣äeƠæôđ>k<á‡Hv 'ƒ?cyΪ˖̣L(Hy¦ܬ¸{‡́«=zLưŸŸ¯®̃/<ÇÄặ9 ˆơÿ©~8Vçơ‚ÎÛ%:ïå«ñíVP·()Í7NŸ< MÉô–E±#P=t:ï‚V́àx͇3ŒïH ΈµË™úK“µ ë½́W]0Î? ¾Cû÷r³0ƒ§n :•—úk÷î₫¿»~Gsî?_´̉½ûé6i·¸¨û`Ơǯi¸ÓñăÅí׸́pº˜~ơ -ø°µ_H÷Ç®X¤Ö²>÷Ü5_“çÜY.-i|9cü YI ŸJaÊØ2sÉg~”»À¢‹ËÏZÿÅüƒOÊ¥¾¥¸€sçÎ]^pë­·îZ°`Á£÷ßÿØ%K–̀Ă6©¡×vß³¸¡r̀¤’ñsLRáéu¬̉pv£;0ÄoB¸Ä?±«DK1«H§@%ÖcÇú’]ªªđœŸƠ؃$g2¼\É•'k xƠ1¨7̣J剆ËEJŸe~n—₫Ë!BñÚ‡¦£ I?ÄüT¨?r( Ëçg~/¤î³-§äĂ<ưFĂh=NH:Ûfh@Ÿ1(MĂ´MO>/Æ 8-'Â_Âơ§øÓù₫!ïúóEŸ‹ÛU¨ËÛG°%ó¶/ùïH®¾h¼ûhơN„£¢‘ŚªGÑ̉Q›éíèx`óÄ:Êß=X=¥ËÇĂêjo#đOÄ‹ư¸û[—%A<‘IíêNb—Ÿ4¥0X.?r…JW©4ï¬ë|Ûˆ0´n{~ε7÷Ă˜ç̀;ëD{Sy<áçqúœ¦?VçƒÎ—è¼OÖî–¥0ÙKL3ÿ,Ø»ùưÇZ%†»ïÖc ßjÜE@"¡aæQg„5̃K‘ŒCÇ=³×ádŒÖܯ±oWNkq ¯ăƒ{{éxäN,ÑmÇqDœÑ?ïø5·©°Ư¹́IúÑ%"úq™J¿†n‹czÖ?.a6ÿ ¹_áƒ'K…Êgü¬ôÛ¥üS¨¥ ĂÑ-UUU(/×2•Á);¯cà!¦§âPï­áqÛ:÷wØ·{Í…ăƯ vù}W…øÿæ=Êưß_.q‡±•+u©|Èç§̃”ê)2‡q ̣¿¯K‡:E¦Gˆy!éËW̃åû‚|ôơ5›ü¬t×{kôgḲé'­ m¥¿Ô®5<ú§×*Oæ’ ú·.OS Ó×V<´Tuû\á!WÁËÏ»„'=åÉ«){æT~$«ăï ³¶ßnŒÚÇ DœQÿúSƯOÁÖ@dËgÆW½¤iă8©HÁAÙô›÷6¹98"’{̣gàcó{±©)8¾÷̣«<úYñ,úñ´ímUqï1(Œå/©¥:,î~§̣WđX‹ÇŒ₫øée"î¹Ûgcü¥3GÈJÿM—é>^Ëï9hÂH y~ÎåOy•¹·±½ø³°#@Ëç]Îo¿Æ¸ˆCẹ̀ëߧgYåâ;·ÊóåS¬D…1\~ú́|P7:oè<ü¾BX)u^ẹ̈¹ôönÜl—̀¸³¹~_6ƒ¼“AX°IUÈ(B¯ Áxazé@íE<3½v?êüû'ñåpT₫çv×ác!ºY»7–mÍ’üQ™¸…FëÄqz2ă…Ó†Kz^(t/Î[ödø…S‡»gßÙàø“ ]μxÛÏZG†%).ơ4*A“ơYŒúäÓO+Åúx KÆî%̀²¼Åươ¡₫ưûtszălùØuƒ+XϽ_ä-ÄI™~_;Í[ËĐqù=F̀vu5K°#{2|#‹xÅ–˜ª»îºkÁÆæ³ «ÿ §Ë7₫Œ¾̣cJÈÁÇ›w^3]NcÙù₫·/~âî€ØqÀ›ǽd/9m¯ÂüXá¶ĂWw¤o-Ƕº¨₫31ˆ¸u¾ßŸÿV˜Ö…ß!?+}">‡ú =OùKt~„ê‰××É¡ Ö#K₫4˜%†¾ ••4iªQ¦(¿̣È@În+ch¤ÉÄ<‡Ë:œåX†ëbGú©!ª‘anŸ—ưéFư/®@h‚ Ñ?4ÑWù3 $?PÛ€‘́v VÆË{Ö±Û{²Ư¨j¨ÏѸ}nXơcơc¤EºÄ§ÖÄF;è½ #ë\{íµ̃rË-É¥q¡₫ÈRz*ù„¼dT6ÏTø₫øĐ áơç̃ß,3~–‹ªáν¼ÂÏÚa,J À{!=ó̉{~N3Ïçç Û (»ù‹ƠÓq¤£|À•Oy«+ŸnÂaV"Zª—ï8¶®æ€{¾©Q}ưÜ 2K¸[]îüÈôê 9ÙªÔe#éøÜ‚$̉í0‹đUöûŸ…YĐÎËÎén¼t‚¤àHË1b‹f"~¢—Q{cIg8¶±pû24ë¶è#₫\¼–_­‹d/—ç?䙩aäȤ•ô ÓPøG`₫l`T>Ë•ç@£S*_2)Ư4äđ₫î¡C‡₫ơƯwß] C)§đ…‡“́,P½óœpD~ùc̀>^ß±ïˆĐ»«»æ‚t1bưVlK°¢ü:´R^ơ¸!~øa4¿Î¿xúpp¶₫¯Ÿ)ÛƠxBÀh¬:]¼U ¼·r‡«Á¾Ă˜Ÿclh¹§ÄOäÏÓáÇr§ÏáÆâ?t:<’’·b¬Ăcë~ûÁæDÎßù{ÓƯ mÁñ¾ûE\8e˜¬æ2 ºôôÛ…‡S©àÍ÷Ùw7á· Ê 04öoÿƯ©2KÉ™zu¢—.àX-Å“çq&z@#3WbÉ£ø{̣Í N9{“£̣%ă" ßÛQñđ̣’T₫ô«=Ü.¼|£‡B₫ï'5ÙzÊ_n—'%Ä ÊÄJïü¡¯ÙÉQŒDc¿ƒÎ}øđ•çŸS–ßpéDØA{Ü®øĐ&a®±í2ù¤ûØùVuˆ“•Ï0ˆÈÁƯ5ÓÜñˆË«Pw¢DÇc*©›è¤₫0‘̣u‡´*Ø«¢óđËÛ\ Nt0¾“³°ká± %;ÔÅo™–§,Ø»ô»7ÜÑBßxxܨ̣̉à×¥hH¢'áˆÇ‘[)̉{úÊU…#[ åëÇd*î]ầ¹:î¿¥ñĐ£ ¦ă,áRœoê™m íüË™×c¶…£¿éăº¾Ø3₫ùêüËw<ñå_^áÇ£`èÈ?Q}^ü˪Qfôûô)ưy>ªº±Ăû¤ï%!/iư%”Ÿ¦Oú¬Tư—_~Ü@mHûß?C–“n ¨[~†RđÀÔ,ơéPxȧ§bđ8ư¹đơơîOn˜!'‚A}ÇUS!ÏPsÙ¶üZx2˜?‹½iG­ûÅKk`œL–ư‘ăpüé^鿉 àù»Ï¼³ÑóvTÁsÑ ăÀĂÂ'ÁŸÈD̉+Ncy ~b £¤—zFD(·Óâ!–¿$­;ŸÈ÷±=à́3‡È‡Û4ÿ"G]ñpäàÍƯÀ<5_Îà=üâ÷g_ñ?ÚÄÉ!μs¹^][ô€¨Ñå®Øà¾ä§¥[æùím|—_vù̃y”▕ϳ/r›-m/Âås‡†Æ–¶Ë_ (•‡”üƯzùYúx̀ưÅÅƠXjroºĂ-¸ÈÛQó0™É?u´u>^Û‰ƒG Ä}V®øWȽˆñê- o¶Ÿwü¶ñáWcË1XE0ÁR̉ï4ÿOŸ¾ºÎưÉ3Swuw:o)t^<(«½[aÆ ÷ÿÅ@å¨ Ÿ‹IXzFPC@Fï¾)$ Ăåñ£ÁÅN4̀T‚À*T₫vêÜ“E7 ³~i lå¢vđơr,ùÓö²’¥àíçx̃IKoù̃Ă›ÇŒ?“¿ éƒØNúÑ`½S@$G,$̃¬–̃è',u’ü³yĂÚ-ư¯¯çNgyÎ*˵³á{öë.KˆµøIt9«̉xÆ/÷àÇz9UÆeIYB¥Ü0ỷª<5¥€Ñ¯mü“R,;>Ư«×Èú³mưIe«rÂè—R ­ü“¦ÈÏđà'bâikNOÄ4Ïßđ`xàÄd́J%X¦7ÜĂl{!fä+ùĐ4ª¤~xÊ èW%méưÑJ¤‹:£ß‰ù ¤äÊÆ=ÔÇøÙø9_8—φ‡T˜~1ưjx0<¨a`̣@ ̣t; B†~U\₫=…—mt₫=ïÈHKoôƒ(ßè]ù ÜUø>kÎó»átĐ~Ô;ûÊÓ§pR>ø÷F?̉Aé¦÷Ñ/kXHëkưy*ưix8=y`x0{ ’l`ö&å]´U¦JüŒB…ƒ>¡›_H¹“»Ï4®ÏĐ̉“J£_›øÇ3M¦®••†‡´CŒŸK*SÂgÆgx0ư–2c‰åAZpf|†ĂCÊŒ¥ÇCb¸'çÑJmäܘ´^âcåRCƯákbïhàûË̀‚Zz¥N nF¿Öø'¥Qv|†¿ÚæùØđ\JcĂCçåÇră‘PĂ³I**#!Á ‡-–8aØ`Đ³2Å âP¨YúTÈ’hF¿óđPÂaå÷°>†Ăs¹ä™á! M¿˜~¥,.¿JÈ©éẮ½²Ù»ä¿0ă/ t1Ă*B^ ³î´Üư{úèWư’KO:‚8F¿ÀmăŸLfĂƒá™`. ¦_L¿¦ö…áÁđ`xÈŃ7Ü1Ì_SC?‡ sί6é»°Ë=„‹J;ñS¿¥7úy µ‘ü"…đQ&.†Ăs9å™áÁô ø/ŒE$vjưjx0<Ry<${ÜưŒ»ß¹ăÜXpø·%GÁ§q,½Ñ¯íüă9)cW™q7<øÁ¼á¹”xÎ|u ‘®3<üNg“)'´f¶nöâ©Ù¤xb¸ËÜ((ÙÏ´'óđ\œyçö‡P _iØÏœá,½§—§†.wựùGé“¥»áA,X×~1<—ÏJï,Ư †‡D×Æ,•<È´.†ĂC9ñị̂+‘a³L HøÄ ¦ụ̈±¥ï3>ÀÇ>œF½øÑ"ï·ôF?a\ÀÇáaœ ] áxnx.3©áÁđPNưnx̀̃̀̃$ĂƯâÅ åpzv»DPC]ï‘đÇ™dKŸ0–ĐÄè×6₫!襟 ÏåÁsÆ°ÀêL”M¿Ty[Ë́­ÎmoF†»Î¤·à‡•d`'†§ƯÄ̀ éO8{‘ïÉL¼¥7ú,ÿdP,?ûNÖŸO–ŸOW0 $D7ưBåtù©£§7<LPzyH<ÈŒ;ˆ̉Ä@Ç+)œqƒẹ̀}¸ŸS"úṕ|÷ëÇ×̉ Å‚°5úˆßÿ²ă °SHà*7“̃ø)> ©‘bú…´èÜúƠđ`x0{Ó픇ÑD-MÍ5ơơGDQ{eŸQªôJÊó4èư³OèưŒ£DơwŸăZz£Ÿç%柣他–„ù2à1<ø>Ó®0<—NR]cúÅô«áÁđ ¶§ÉƒJ§x÷}{·>µ½zà9ă'Mëé'ă½eïÏvÇ™ä0Ä%/ÁFªÏÅh—Y‘J†̣¥ë?bÁa<Óoé~­ñÏÆu«îƯ¹å©„©2à1<Ë%Ï ¦_Tr2¬³ëWĂƒáÁđà)@y x¨bPơÚ÷7ö…yöïÚ»o¿ª®]»%æ9G;:›.#$¦«àŒ<ü|G.½ë́*£Xz£_àđy†ÊèH}Û²aMƯÁ}»?y₫¿ûưÆÆÆÂD¸ Ï¥”g†‡\ù@Ú›~é¼úƠđ`x́…Î. áÁsˆsưºwï>́‹·}ÿÆ}_ƠµÛh×R!F=‰fÎ(Đ®¨hijj8º¥îà^⯟ª?xp̣ÏŒáºÚµĂ-³ăRÀđp\̣ØËNFĂC'ëpkîq)Pj¸3ƯhüơÀ_:]ÎPsFâQ Yóă-Å+â”s6<œ2é,á)RÀđp„³dŸK >—Ưj:E $xˆ wæƠ½đǽïùïdÎ(Đ.à–÷FüÆßÁvɱ8™CWË5—†‡\zØS禀á¡s÷¿µ>—¹µ¶'£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 dÿ(µÄŸ!RY#IEND®B`‚tpm2-pkcs11-1.7.0/docs/illustrations/pkcs11_api_classification.png0000644000175000017500000157440713754763565022051 00000000000000‰PNG  IHDR>Đå7R (iCCPICC ProfileH‰•—XSÉ€ç–TZ )¡7Qté5‚€TÁFH %†„ bGX *¬èªˆm-€,*bWÁ̃P”u±`CåM@W¿÷̃÷Î÷ͽÎœ9sιs'wP‹æˆÅY¨:Ù¢\ILhkbR2‹ô`@ ¨=`ÏáJÅ₫ÑÑÊĐưỴ̈î@ä÷«ör_?÷ÿWÑàñ¥\hÈ©<)7̣apW®X’ ¡êÍfä!a”@K„l.çt%»Ë9UÉ ›¸˜@È)i$Uy\¬̀Ê\BJÅYœ™ÿg9₫·dgɆæ0ƒ&„ÅÈs–×-sz¸œiÏ‹R#£ kB¾&ä)́åÜ%…ÅÚàJaÍ”Æă…C6€l*ÊŒÔû¤ CØaíÑ8a.;N9åI¦Ç úGóù̉àØ!æHsÉmJd™ñ₫ƒ>7 ǿ!Ÿ ‚¸Deœh[0!²*ä{̉̀ØđA›ç‚ÀÈ!‰,F3|æH“„Ä(m0óléP^˜§@Èäˆ\A\˜r,6•ËQĦ 9ƒ/1'¬̀ +ä‹âăÇÊŹ1ƒöÛÅYуöX#?+T®7…Ü*Í‹Û› ›2_ˆs£ă”±áZœqÑÊp[A`l©`:ÈÂÖºøKÙ8@̉Øj†F$*zDđ À_ø@:<.@ÑËyPÿeX«¼Úƒ4EobD&è‚œ ÂAü-SŒ Ï–@đ§Ù¹0Ö,Øä}?éXjC:b01ˆF !Úàú¸î…GÀ«lN¸;î1×7{B¡đˆpĐA¸=MX(ù!r:`Œ!ƒÙ¥~Ÿn ½ºà¸7ô}ăL\ØăcàL₫¸/œÛj¿U6œñ·Zú¢8PPÅbưcª¶ª.Ă^ä•ú¾ʸR‡«8ÜócßƠïá?Zb‹±CØ9́$vkÄê ;Ơc-Ø19¯'µ14[Œ"LèGøÓ|œÁ9åU“:Ô8t;|́¹üü\ùË8]UÈÆd'r9™,"’+È»ÉÇÉWÈOÉưuÅ“EáQfR–Q¶S(—)”~ªƠêM£fPP×R÷QÏPïQߨ¨¨˜ªx¨LPª̀WY«r@å¼ÊC•4M--6™&£-¥í¤5ÑnÓ̃ĐétKº=™K_J¯¦Ÿ¢? Pe¨Re«̣Tç©VªÖª^Q}©FQ³PóW›ªV V¡vHí²Z:EƯR=P£>W½Rư¨úMơ> ††£F”F¶F™Æn Ï4I–Á<Í"Ím§430†#Áe,dlgœatjµ¬´ØZZ¥Z{µZµzµ5µÇh'hçkWjÓî`bLK&›™Å\Æ<ȼÁü¤c¨ă¯Ă×Y¢³OçÎ{Ưº~º|ƯƯưº×u?é±ô‚ơ2ơVèƠéƯ×Çơmơ'èÏĐߤF¿g„Ö¯Ü%#¸c€ØÄ̀2ØfĐbĐghdj(6\gxʰLjiäg”a´Êè¸Q·1ĂØÇXh¼Êø„ñs–6ËŸ•ÅZË:Íê510 3‘™l5i5é7µ27-4Ưozߌjæn–f¶Ê¬Ù¬×ÜØ|¼ùlóó; w Å‹sï-­,-YÖY>³̉µb[XƠXƯ³¦[ûZçXWY_³!Ú¸ÛdÚl´i³Em]l¶•¶—íP;W;¡ƯF»ö‘„‘#E#«F̃´§ÙûÛçÙ×Ø?Å1ªpTƯ¨—£ÍG'^1úÜè¯.YÛî:j:s,tlp|ídëÄuªtºæLwqç\ïüjŒƯ₫˜Mcn¹0\Æ»,rivùâêæ*qƯçÚífî–â¶Áí¦»–{´{™ûy‚G€Çx}đƒÓỗP—ĐY¡Ma„°đ°a7Ù†l.»Ư;ÎmÜœq§Ăiá±áëĂEØFH"Æ£ăÇ_9₫^¤E¤(². D±£VFƯ¶Î‰₫cqBô„Ê ]11³cÎÅ2b§Åî}·,în¼u¼,¾9A-arBuÂûÄ Ạ̈ĉ£'Ιx)I?I˜TŸLJNH̃‘Ü7)x̉êI“]&O¾1ÅjJ₫” Sơ§fM=6MmgÚ¡BJbÊî”Ïœ(N§/•º!µ—È]Ă}Áóă­âuó½ùåü§ĩiåiÏ̉½ÓW¦w |‚a p½đUFXÆæŒ÷™Q™;3²³ög“³S²4E™¢ÓÓ¦çOoÛ‰‹Å99«sz%á’RD:EZŸ«?²[dÖ²_dó|̣*ó>̀H˜q(_#_”ß2Óvæ’™O B ~›…ÏâÎjm2{Á́‡süçl‹̀MÛ<Ïl^ѼÎù¡ów- .È\đg¡CayáÛ…‰  ‹æ=₫%ô—bƠbIñÍE^‹6/Æ ·.q^²nÉ×^ÉÅR‡̉̉Ïeܲ‹¿:₫ºö×¥iK[—¹.Û´œ¸\´üÆ ß»Ê5Ê Ê¯¿²vkUɪ·«§­¾P1¦bóêÙµkë×™¯[¾îózÁúë••û7lX²áưF̃Æ+›ü6íÛl¸¹tó§-Â-·¶†n­­²¬ªØFÜ–·­k{Âös¿¹ÿV½CGé/;E;;vǺ:]íV]½Û`÷²´FVÓ½g̣¶½A{ë÷ÙïÛºŸ¹¿ô8 ;đü÷”ßo ?Ø|ÈưĐ¾Ă‡7a)©EjgÖöÖ ê:ê“êÛ;ÚÜàƠpäQ́l4i¬<¦}lÙqêñ¢ă' Nô5‰›zN¦Ÿ|Ü<­ù§®pºơLø™ógCÎ:çîÄyïóºû˜ûøÅé“ÏE]ô®§ÆO«Ÿ9=ḱén{>éyç ñ‹₫â¿4₫Úđ̉úåá¿ư₫néØÛùJ̣jàuÙ½7;ßyÛÜƯ÷à]ö»₫÷%ô>́úè₫ñܧÄOOûg|&}^ûÅæKĂ×đ¯÷²Ä Gñ)€Á†¦¥đz'ô$øíĐu’̣l¦DyTøO¬<¿)Ä€~ÄÏ ~£l‚Í2 ̃åŸàq~uvnƒ"MsvRú¢Á áĂÀÀCH |‘ ôoø²{€¦å™P.̣3è]9µÜT?Ê¿, pBô‘Q% pHYs%%IR$điTXtXML:com.adobe.xmp 1488 1598 1 «3@IDATx́¼åƠÿŸÄ×D£1l¨Ä®Q́b bïÆ®‰B°$h”ׂ4€{¬ØkTÄ̃°`ÁJT+jÔ{â_cÊ₫Ÿïóæt#ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€t2|t™K©‰ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€Èđ¡{@D@D@D@D@D@D@D@D@D@D@D Ëá£Ë\JMDD@D@D@D@D@D@D@D@D@D@D@†Ư" " " " " " " " " " " ]†€ ]æRj"" " " " " " " " " " " 2|èè2døè2—RáC÷€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@—! ĂG—¹”ˆˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ ºD@D@D@D@D@D@D@D@D@D@D@º >º̀¥ÔDD@D@D@D@D@D@D@D@D@D@D@døĐ= " " " " " " " " " " "ĐeÈđÑe.¥&"" " " " " " " " " " " Çî.C@†.s)5>tˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€t2|t™K©‰ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€Èđ¡{@D@D@D@D@D@D@D@D@D@D@D Ëá£Ë\JMDD@D@D@D@D@D@D@D@D@D@D@†Ư" " " " " " " " " " " ]†€ ]æRj"" " " " " " " " " " " 2|èè2døè2—Rø!ö&0eÊ7jÔ(÷â‹/º~ưú¹—_~Ù-±Änçwßÿ₫÷Û{¹íÿ¿ÿ÷ÿܧŸ~ÎơêƠ+·L½Ÿxâ wûí·»¹ç;̀ñG?úQ½M©ˆ€ˆ€ˆ€ˆ€ˆ@+|«ä¥åUTD@D@D@D@D@j&đÚk¯¹å–[®jùUW]Ơ=ưôÓî»ßưnƠ²­-đïÿ;Tùö·[:¼Ÿ~úénØ°aáü[o½åeüèÛ·¯›6mZêˆ#ÜÈ‘#ăg툀ˆ€ˆ€ˆ€ˆ€´–¿üÛ¯/µ," " " " "Đ\xá…5=@‚‘`9æpưë_J誫®r³Í6[ø{ûí·[´=×\sµ8ÖÖï¿ÿ~™ÑƒöÖXc¶6«ú" " " " " 5á£FP*&" " " " "P;qăƹƒ:¨¬ÂäÉ“çö÷Å_¸Ă?¼¬̀b‹-Vö¹­mH©e<Ï=÷\,vÁ„ùn·Ưvñ˜vD@D@D@D@D@Ú—€ íËW­‹€ˆ€ˆ€ˆ€ˆ@·#đÏ₫Óí¾ûîq̃„±ÂرækÆć×ăŒ3Îpï½÷^<₫ç?ÿÙMŸ>=~nëÎ÷¾÷½ØÄ́³Ï÷ÛsçƯwßÍï°Ăq_;" " " " " C@ÉÍ;†³znCà́³Ï.›ëÔ©SË>g?àåqÀ¸K.¹$œ:ÿüóƯÅ_œ->c@yöÙgƯ3Ï<ă–]vY÷ÙgŸ¹₫ưû»\°¬üßÿ₫w÷¯ưË=đÀñøŒ3Ü<ó̀’ë[ßÇóvè# 2ß|ó…-¡²&NœÂqơèÑ£E¿Ô¡O’›7„²]²9FH¬~íµ×º™3g†â$Aßk¯½Â¼¬¾¶" " " " " ­' äæ­g¦" " " " " P₫§ ₫ÇÜm°Á¥ÿ{øă?v -´PH.₫Ă₫Đ=úè£ÿ=ùŸ½)S¦¸µÖZ«Åq̀;ï¼DêfI“–g+¼úê«Ñ¸@ É•&7OëS¾(AûFmÇa¤wï̃ÙîÂçlró#8Ây晹e9øÑGŹ̉ \ u•‹EE@D@D@D@D@ê!đÉ'Ÿ”U«ÅèA M0>ä=È’5z`́0Á;Ă ”jRKBó´L‘у~{́1‡ñ¤¬¸â±Hß¾}ËŒ̀# ™ †‰ˆ€ˆ€ˆ€ˆ€ˆ@ë ÈđÑzfª!" " " " "P@à›o¾‰gzơê÷Û²óù矗å Á{‚Rÿꫯʌ ’¦S†²&w̃yg8VouŒ2ÿ₫÷¿Cxz˜ ><́2ߢ>wÛm·PδiÓ¬ª#á;óàï믿vi»• .±툀ˆ€ˆ€ˆ€ˆ€´  -耈€ˆ€ˆ€ˆ€ˆ@½0D˜ôë×Ïv˶$/¿å–[\êU‘ÀûcàÀñĐ>û́÷/¸à7dÈø™äå ÈĂa99đú°Wf¡Âꫯ^†+6RĂ áE~¼R,Oưbá<•úL“¾¿đ îG?úQ́ư»ßưnh7Ë]wƯå¶Ûn»XF;" " " " " Ơ ÈđQ‘Jˆ€ˆ€ˆ€ˆ€ˆ€ÔHà;îˆ%Ĩ'÷ƯwŸ5jT̃©x cFÂ_Ư}÷Ưá8á R£G,́w&L˜CaƯtÓM¹å₫ñ¤Uj̃¿ñÆ£Ñ#­´êª«–yo¤çl?íóư÷ß·Ă!—Ijôˆ'üăßl³Í¡W^yE†öE@D@D@D@D 2|ÔIED@D@D@D@D@j#°å–[ºaÆU,\ä ’Wɼ88Ç>Y™sÎ9Ư9眧^'ñ`vÖ_ư6ÔίZdÀ¡ôk¬+‘CäÈ#ŒŸµ#" " " " "P€ Ơ©„ˆ€ˆ€ˆ€ˆ€ˆ@æŸ₫X̣Å_Œûé ÏñäÈ…Jÿơ¯M?ºí·ß¾́sG|H½6Ú̉ß“O>«c *B]™1´óÚ€ˆ€ˆ€ˆ€ˆ€´$ ĂGK&:"" " " " "Đo¿ưv̀}QKsµ„¢̀_₫̣—Âæđ éß¿áùYyâ“O>‰ƯÿûßûÙ4DØ~đƒ́i}¨B@†*€tZD@D@D@D@D v={ö,+üđĂ»M7Ư´́X̃<;¦M›–w*Ăè1uêÔø¹³íl½ơÖqÈăÇÏÍCB>ø –;à€â¾vD@D@D@D@D@j#đíÚ©”ˆ€ˆ€ˆ€ˆ€ˆ€T'@¸ªTYO’î¼°VÙ–vß}÷́¡đyÑEÇ1Œµ5}útGˆ(₫>₫øăX§YwN?ưô¡yæ™…çtBD@D@D@D@D :>ª3R V8û́³ËJ/µÔR… qÄîî»ï.«c¾ưío»^½zÙG7f̀˜¸Ÿîl´ÑF!ù9¡®’›Ï>û́i•ß_rÉ%cŸ„›2eJül;x¾\rÉ%öÑ <8îkGD@D@D@D@D 62|ÔÆI¥D@D@D@D@D@j$đ½ï}Ï]pÁ±4J~ x9°O ¼2®ºê*‡‡H5‡ûï¿?¶uĐA¹‘#G†Ü!¤=ÚÀà`$áÏ$5‚`¡ü?ÿùO;Ư¡[Æ™rYk­µÜ¸qă‚Qèßÿ₫wÛ\sÍÇ´ç{ºï~÷»ñ³vD@D@D@D@D@j# ĂGmœTJD@D@D@D@D † âN;í´²Æ s½{÷vó̀3[h¡…Ü AƒâyŒ&LˆŸÓe—]Ö1"5j”›m¶Ù‚ÁƒöRyå•W̉e‰Î1°P~æ̀™ee:̣\RĂ !¾0 1Ÿt.óÎ;¯»îºë:rhêKD@D@D@D@º >º̀¥ÔDD@D@D@º V«Oœ8Ñ 8Đ-½ổn›m¶q}úôq„ú9ùä“Ư[o½U1¬PgæD Ë.»̀‘7bµƠVs}ûö ó>öØcĂjùÎ<7<ø{ÿư÷;ó4ÊÆ~ä‘Gº>úÈ‘”¼’` á¾0`@a1¼< #Tâ₫ÿúë¯[xH¬±Æ-úÿÎw¾ûÁ;%Ozôè‘w¸́X´o<ùÁ~Đâ0sM 9Ùxz<ÿüóîw̃ ÷„ƯÙ­ƠĂƒ†s¯½öÚ,óf±±üå/ ă₫ăÿh‡‚wăc>éñX@;" " " " "Đ`ß̣ÉK nS͉€ˆ€ˆ€ˆ€´Ñ£G‡0?ÿûß«ö@₫Œ¬&ï RËÜY%Â8]QßæN˜#Vü#̀áóÏ?ï ĂnƠ1Z½ụ̈Ë1$Ơs̀á–[n9·à‚ ¶ª £àÿĂ₫àhÏrgT Åwæ_ÿú—Ăèñ?ÿó?­î³=*0¦É“'»¿ưíonóÍ7ou„̓„bxÓ ¯¾úªĂCfVóÁˆơ›ßü&xờ˜1ĂớÙ3ÜÏóÏ?đĐYb‰%‚dVŒO}€ˆ€ˆ€ˆ€tÍñ‹¿ûđÖLE@D@D@D n«¬²{饗bnƒj ­¹æî†np»́²KÓ(z«¹èü{́án¹å–²Ớ¬¤ÇHđî»ïF&äy \ЬT₫Í¡̉ñ"oJu:Û9<+¸'!(ö[«Ü¯fiĸZÛcÚ`ƒ êöĐ›Ió‚´v ,Ï}l4¬¯³\*Ưá₫n$Gµ%" " " "Đv2|´¡Zv'€âŸƠÓx˜<̣È#Aij«×YmṂfB±2ç‡?ü¡[wƯu;­çÆñăÇG%êñÇï;́°΅EÁzß}÷¹­·̃ÚĐO‚ÎæØlá N8á„8ítOxMà­UIđùÑ~àEÁưƒ1đwÍ&x1¾9çœ3xƒ4Ûø4®G@¡®º̃5ƠŒD@D@D@ºB7‘¿àË/¿ 3Ăƒăꫯ+«³Ó%ĐÊ+¯́ˆûo‚'D^®;ß̀Û¡C‡º1cƸo¾ùÆqÆîW¿úUW”3ᡧcB…Ị̂ÊÆ®m÷"€‘. I×ÙŒvvµøw̃yîˆ#pßÿ₫÷Ư‹/¾ ¯v^[è(̣øè(̉êGD@D@D@ê$°ï¾û:̣# ¬đ¾â+ ”ÁĂă¹çs«¯¾z4~à5a^xƒë€ü([I6Œ÷I‰<'È™P-< Æ”{î¹ÇÍ=÷ÜÁ(AV©Ï>û́¡ô¹´Ï–đT´æ±Çs_|ñ…[`‚qg‘EiÑï³Ï>½=œkô ¯ùæ›/x¸̃«’0Ú|æ™gB¸¤Ï>û̀ơïß¿j® ’ßqÇ!Y7í^ˆó•rT´¦aP“ë£(,y[Ƨ·öÚk»vØ!·<óä!°AH0=qâÄp?‘¼»–y‡ú§C àÙ•BjéÜxUØw·Q÷ÀôéÓƯă?†ñƠW_…ïùzë­Wñ9”s̃ư/[>ừ|˜Wö{Aư?₫8x|ñ\áûÓ§OŸà]̉Z~iÚèüE‰ˆ€ˆ€ˆ€ˆ@“đF’÷Ô(ùŸáÏ+®K^)ZÓh½£ä•è¡7˜”hË+âKó̀3O8¶å–[–¶ƯvÛ’•Û·~Ö_ưP>¯#úß}÷ƯsëQÿè£.ù0¼W˜—7h”µĂŸH:·_úöÓ’Ï™Đ¢Î?₫ñ’ÓSX†Yim˜{Æ‘Æeçó¶#FŒÈV)ùpI±Ïy÷³ơ½7Q‹º:б̉ëÏơñ†ÉV À'9×—km̉Ö{àÆoŒífï>ó½à^7ñFƠ’÷Ê uø¿óÎ;á”÷Æ Ç¼£ä ³á˜7R”®¼̣Êí[Ÿ̃àQ:å”S¬›°å9Á3̀ʤۼ̣e•ơAD@D@D@D Ëø¶ÿ(hRwƯuWXÅ̀đđö ”“­æ®6ḍX¢aóæHëăî»ï̃é¹'Ÿ|̉yIô°s^A¼¼B4·åFívÚi'ÇÊpÆaă&Áu†ËÊ°¥ß‹/¾8ΙcŒĂêº oÆ‘'$¾₫úëǛËÁÊ7έµÖZö1lY%n‚wÄB -VÛ1¶xtL›6-b i=öíÛ7¯·5€çL*¯½öZWzŒ1¤2jÔ¨cH^/·Üriñ²}¼n.¼đ²cú0k Øư^Ï(¾óïÄjm¹đ̣đÎØ;ÙûïE%§²Ê₫óÂ# Áë̀iÂ~µ¨gÏ2ÊÖPZ<Ặ¯¶ă;ΑI"" " " "Đ= ÈđÑ=¯»f-" " "ĐIXø†KÈ«l¨—JÓ@Ùmá^+E¨™TÈùB‘0WœóK~‚QĐU&—_~y™b»í¶‹¹F(ọ́Ë/#uo½ơÖ¨œD!Ih”›Ẹ /„~)Cx-BoÀ€á¹x™`…ßB]y/’p1ỏ¤IVT[nD@†nt±5UÎGà“O>‰ NŒ (÷j3$•G‰á`Ă 7ŒFrtà`Æ’›ñ…±<ñÄјAnŒVX!zcàåqóÍ7‡Üôyâ‰':̣*·{êâÁÂ1ÎX® 3®Ô`̉¯_?w衇¶0ú\uƠUAgœ7̃8xzä1ÚgŸ}â8|X 7räÈhb%9†ŒÔøÃdüøñ±̃µ×^ë|X°ø¹—÷ºđ¡³âgŒ"H=ub#™ÔA>úh7EñpI›m¶Y¦…ÿ~„)mÀ æ´e‚̣º^Eºµ¡mă¬²Ê*nñÅ/üëƯ»·{ă7ZƯakî&>|•í†í²Ë.ëø™`¸¨GxÎàá´Øb‹Å¿E]Ôñ¬1!·ÇE]äVZi¥đüûđĂƒgç1̣̃ƯíÙ³g(ä§?ư©³ºß5׌E@D@D@:Â6™BEªxoë4P’=k Áø‘†Ôb5rûí·Ç±Ü{ï½!Uv [mµUHTr°Uy+ÁY‘m†•´>†óPI³̣ræ̀™îç?ÿyṇtÊ ¨Ư~ûíChL0„ Á¸1dÈ;U¶0aBü|ÓM7…ư4¼f±‚xŸœ¯Œ H=uBÅœ0<™Üyç¶[¶Åø‘JƒĐdylñb‘tNiH«ZfĐÚ{cß ¼<̣$ưå¯÷ØÿøGÇ÷ Á±×^{…?>ó,ä9„đ á9”½¯yFâAÆó CÏ¡{+̃‹Ä'XƨÖ̃=7ß|óàIƠđÁä4Èw¸oß¾ñ EŒ-©đüá9„àÍñÀ„¿´ŒöE@D@D@D@D2|è>&&°À DĂö¼\EĂ¿ä’KÊ“•«÷8Æ”JÊxBÍ´ÆØ’7Œ cÆŒq(a y³ổKçö‰’”<;î¸cÈYB[ï¼óN^“CEº<[ˆ>û÷ïcàAiḶö“O>9#¬Æ r.¬p]H=u¬=ÛæyËع́° á$› ₫Jß­öư“|<+àđ:#äaØ̀0—-×ÚÏxorÈ!îøC¨JÂrr˜TcÀyC•„\)ƠÚ©T_çD@D@D@D@:'>:çuÓ¨E@D@D@º M7Ư4æ´@Yÿúë¯;rpTS䡸<ÿüóƒÁT_|qÈ=Áªj“J̃$o¿ưvôîÈ+÷̣Ë/‡04mñÚ°qTÚ’_cĂ—_~æ2bĈ\…¬µ‘æ»À€‘Í1‚Ñ#»ÜêVÚbÀa>$ÈC@ˆ­aÆÅjx…¤ùê©ó;\cÆ‹rÙ®GÑuŸ4iR¬Jrh‰´…À5×\SVûÚ<́ÄĐ¡CƯ Aƒ́cƯ[Œ„öÂs !wÇ}÷ƯÂë…ÿ`™1cFLl^PL‡E@D@D@D@º)%7ï¦^Óèđd 6¿åơ éoj¼(Åa‡V÷~Ưu×mXsÏ=7F́˜mS£‰ýºë®ÎÂ^Mœ81&:·:¶%Äù ȃÁJî¶È /=äÆ T•%1?đÀƒ7GÖ cùÈ-đơ×_[wq[OX9³“z¦ØjøL‘p 1Œ˜´·1ÊúѶëHï§É“'·0z0ó[n¹¥Íø¾â)e¼LN:é¤àU’×8ÏCCy‚¡t£6rË,³ŒĂ@#è~døè~×\3èd.½ôR7×\sÅQ¯²Ê*$ÀEB2à4̀Ơ•W^YVßê¡H'Q1±̣SI "„n2£Ë€¢÷É!Cœ%O뢈|ôÑGƒçIˆ³iÙZöÍèBYŒĂ‡Ï56X[$eÏ ^AL0 ä R¼Dø³¹B %đƯwßk$ÊK_O¼ñp “4ü–cKˆ ÖËđa4*o1t¡ —´$đÁă|²B²s¾m•?üĐàE0j`4Lïçlû„qă9„`Tå9”;9Î3硇r?₫¸›9s¦{øá‡9,èfdøèf\Óè|zö́é9ægJv óÏ?X%ưÔSO#ÊyV`Sö€ˆ[n¹eX!—÷›l²‰»öÚkc(©c=6„o2O†‹.º(MVZi¥`@°pKŒP3xP l=z´£?3#5ØÔC9“»cÎ9ç ƠñDY{íµCBc<_èǺøñăƒ·“ûï¿ßv]ºĐA¹‘#GF…)́0˜‚# Hjx`5:eM0>m¼ñÆö1$‚æC=ub#™}öÙ'¡or‰0o˜“÷„y¤sNûµÓ‚À3Ï<ă0 ¶Gñu„X3Ùl³ÍBBqî9î=î¹å–[ÎN‡í{ï½×j#'†LW©pOŸ~úé-₫xZgÆXËëAxhzÁuÜqÇ…\?|æùĂsH"" " " "Đư(ÇG÷»æ±ˆ€ˆ€ˆ@'$pôÑGeß~ûíÄÄ·¸øySÂqóÍ7,Œaf,ÔLÚÎ.»́âúöíCMqî÷¿ÿ}PVZƯW\1­÷/†3’Äú0g¼G0́`è`¥₫[lQ±% Ë.»l,Ă>ÇF±µưXè?;¯¼̣J<´ï¾û–±ÁđP$\pA8UO¢đ[đ#Jză¹ ̣äÎ;ït„F“T'`¹Xl[½Fû–(º₫íÛkqë„©Ă@hB‚đJ²á††ç9ˆ̣$o~YO ÂØah;§ó"oW< ó„ç̃m·Ưæ0ÀJD@D@D@D@º'où¬¥î9uÍZD@D@D`V œ á•È]Á aozf…Va?“*ŸÓq¢øG9"Úm§ç;Ó₫_ÿú×¾%"Æ~–±}úD%~%ŒáÅ_ ơµÄK„1 Đä:±¢c‰À[«ä¬Ô/¬¸_ØrŸ x™ñ¡R}Α£€12n¸-¹ä’…÷œµEÂów̃yÇ‘ÿ€üô»Á„P;V&»­§N¶ô3\+ä³Ï> 9©gKZVûÅøÎí±ÇáûB¸6I1î9Œ‰|Wø,¸à‚e…¹Çù̃a˜(z^•UhĐ/|‡y}úé§a f ƒU‹Á'ox²aPÁ³ŒwL-ÏÏ8 ·Ùđ]yưT:fíeÇ`ÇƠO¥1蜈€ˆ€ˆ€t2|t…«¨9ˆ€ˆ€ˆ@'"@âm’×¢8®$x j)U<¡ø!¯Ê)”[(Ư;kḥaŒôEâO<á'Ơ(…bjø8₫øăC>"#SѸªO¯s@9Y©Z[:/íA@†ö Ú±mb à}€!£+FɶÏâÓN;Íưæ7¿ ï•ç{®E˜,môÇŸI£Çaíñ̀'¼¡î;̃¨ùÚøµ®J@¡®ºê•Ơ¼D@D@D  l³Í6î¿øE £FŒ¬bÏ=÷tûï¿YÙTÙÔ„Ó«yH¬4'ojôÀ@Àjê”Â=ÿüó1wÍ̀‚]å:ÍB„êZD  {ΰµdçUªTd,ÔăY·Î:ë&goÑP:ªŸ:†¦*" " " "Đ”₫/cSMƒè*Pö?₫øăÑ€Qb‰¸́„v:t¨3fŒûæ›oÜV[mŒxDt!¯‰yzX4W 5æLL}<@ÈÅ`$"́IêR +–â#¶_O[Eu˜×["" …̃ä—â¯5B¿©S§¶¦J]e;ªŸº§J" " " "Đ„døh‹¢!‰€ˆ€ˆ@W#@x«¯¾ú*LkË-·t‡vXÅD̉gu–ĂÛĂBëZsDè–øư$¯&ûÜsÏr…TË“Aî‹{î¹'$®¦!Oö̃{喝Rˆ<5¨G?ŒcÅj«­’܆Ág₫!!9ÆdđàÁ… Úçw^·ë®»ºk®¹ÆưăÿÈ´̣ß.Pº‘́»wï̃!ÿ ·Yd‘²8ôVƒƠÊxѼûî»îå—_v§zj0~Ô2ßÖ0bđ˜m¶Ù ¯5!¼Æç·Æk¸í¶Û.°´ñÚ–y²ª›-l¸&ƒ{́±`Z`Ü&›l̉"ñ²Ơ×VD ûà}ĂssÎ9ç Ï>?ùä“î7̃ù;V^yå॑gHÆ ŒP!·Æûï¿öù‡çïÄrLU{̃ÑÏ* Úä·âù¼îºë¶È!­đO^?<yU™Æ#-K}¼-ï»ï¾đlå¹Ư§OŸB>i]í‹€ˆ€ˆ€ˆ@Sđ?t$" " " "Đn¼B¥ä%ÿƒ(üùpN%oX¨Úß)§œRZf™eJóÍ7_iÆŒ¡ơ¼çGhÇ+đK̃¢¬áÇ—|¢îØ—ơi[¯ôjÑ·W•¼¡ ä`¹ơ¼¡¦äCQ•ơĂƲûî»—ü*áÜzG}tÉ+¸ZÔKûªÆ⩧* 8°ä%¯0k1vŸ|·ä .¹ưĂéÍ7ßlQ§ù¶¶Nz‡W–qÈ̃v}l›ÇîœsÎ)Í1Ça®S¦L)y…cî¼7Úh£²¾ôẠŒ;6Ü?Ë/¿|̃ië¼1!\CƯ>´^±ç]0jÔ¨’÷¬Ë}Vđ yươ×c=ï‰ËÚ¹Ï>û,·®7"”x!Ö_z̀åYÇǾÙ–Ưú†%ÚЇ­µW4¯´o¤(]yå•…í§ưÁƒ÷j*̃€Sâ—–³ư¼̣i]í‹€ˆ€ˆ€ˆ@³PÿËN"" " "Đ~̉pJ„«̣†Œ\O„́¼̣;xmxÅ“óÊɪuˆÉî•:1Œ}™g€µ½ổK;o,(KÎÊVV{e}(†GD:FVÁöë×/®đ¥e)ƒg‰yoX¶=z´Ûi§¢§‹Çs…•·H/Ÿ$7;+Ç–~½RËƯyçn±Å‹ơ8wÛm·9<;ÈbÂœ­mV%3·™3g–…³ªg¾ơÔ±1ÁÓÆÄ1V\;ßBxqŒ2éÊkØ­½öÚèñH±v*å=ă<ï$Ó&x¢Z ï·Z%í‡ÜX¯¾újMU©—&o÷–à±Â;.OàwÜqǹ=öØ#ï´‰€ˆ€ˆ€ˆ@Óá£é/‘(" " ›À<¿üå/ C;µe–RÂ#<â>ưôÓ¢„°"[o½u¹D©̉œPI(üJ•l# ‰ÖÙ’hܘ ¸"D åÂ1¥BF¡<ăü­·̃•K(”̉Ü&Ô=öØcc>3ÂA 4È=üđĂ5…,!¬‰÷q’# 43®ÔØ€âÍŒ ờ·:̀ËL*)Ùs̃’Û{—æ æđ(2,Ñæ /¼Σüă›xÏÛƠVD ›đ Á(₫ơ×_‡çïÓ¦M³-¶¸©Gh@ ̣̣Ùówá£́3õ!¼oxNs|—]v M’ë₫ûï·ækÚZ»̃ Îñ¼ă}EûéÇR™}öÙƯ€Â!̃¼ÇLá¼7¡®0¸#< å8ỉ$+ª­ˆ€ˆ€ˆ€t2|tK¥€ˆ€ˆ@ç'®Úoäl0˜ï î(:Pz¡¸I=&î½÷̃ ĐI2]tQÙJ\Œä w‚¥ùFHÀ ÁH²Â +Do¼øđâ8ôĐC[ä½ § J)ó6Á›ă¦›nù/¬>[r¦Ø|IîĂ¹Dc Œ1$,±ÄqLŒ™±×3ßzê¤cM÷'Nœ8r ¾\n&°¡?c¾ă;¶đ˜±²p÷!dÂuÆ[„kl‚b±h·•ÑVD ë §ÅùçŸï0ó.ÀÈŒÁ5Úç0R2Ô³gÏ;$B¯$¼&O`@Ǩ۳gÏX…ç̃e—]>cø¸₫úëă¹Öî06rKñ³¿E]4¼«¬-8đ[i¥•Â»àĂ? œÇƒAÆƇä§?ư©»á†Buđ“ˆ€ˆ€ˆ€ˆ@g# ĂGg»b¯ˆ€ˆ€ˆ@n£ÔGP¦£”JĂ&Y᫯¾:|\÷`¸HĂ~à1đ¶_!kmQ$å´7…µ{ûí·GcDVqo}mµƠVdÛ„Á“ơZ@‰DªŸÿüç…IĐ©G­à9b†ÆÇgÚDaµÿ₫ûçzÑ0N3¾Ø˜ë™o=uŒCvKØ”hJ5_ZăÊI“<JKSDZ9¶«®ºjúQû" ƯœÏÏưöÛ¯ŒF‹uÖY§́Xk>˜·E¥:ô±óÎ;» &„P…+®¸bYqăhM̉đWv¬-[̃[x×!2öÚk¯đÇg -¼£¼Ç²ïLÆÏ;‘qñîá}”¾Ceư#" " " MN ̣R•&¼†'" " "Đ¹ DÇĐ^‚‚«(.{ß¾}£BƠ·Ṕ B2‹\(zöÙg·ï¾ûc‡…»²1?øàƒÑđĂER툀ˆ€ˆ€äH=đ¨È[ÁŸWc _YmJèª"ƒÆÓO?ä´A¨(”My’&:·œ;v¬Ûu×]cH%=çw^ø£<=đN0E=qĐm¬‚Mă¤çơ[Ë1Æ¿«|È+’îzê©0VÄ’Gvß}÷°êÖB\Y»{íVƯÖ3ßzêä ¥>Øá™SÉp±ưöÛ‡Ủ•0|˜¡ÇÚ5c“”pFD[<©â>ï|{ă9EØĂÖ<£Û:̃ùM0ÜchI…g0ï1„÷+áù“ˆ€ˆ€ˆ€ˆ@W# PW]íj>" " "Đd~üăGc±ÖM‘_m˜¬Beåÿf›mŒ$\Í“Ô³"ë‘–G!d’†Á›# IÉñ$Èz! ¬_yå•Ưïÿûhđ°vØ¢ÄïƠ«Wáá—LÉO?§œrJXaûÚk¯å¶G›̀o’đZH'’Œg ”Å0S©r†`8²1Ô3ßzê0¶ṬÆO÷Ó¤æŒ[”öE@ï«K/½´̀èÁsl₫ùçw›l²‰;á„b¸©FÍïC9Äñ®@È#̣Æo´x§eûăWéÂ9 ơ˜­«Ï" " " "Đ̀äñÑ̀WGc.@`‘E)S\¿ổKnƯu×­ªŒÁóÁŒn)Çæ›o•ú¬Z]n¹år½CHæj„±"a­ Êu’’ó‡‚₫ƒ>‰ÅIˆká¢XµK¨’T,üT­ù·̃zË|̣ÉîË/¿  #F¸9æ˜#m²l?ÍwÁÊål,”QxT2ø”5øŸ­™¯µƯ:f¬Iû¶°3„ôB1Çjè"yæ™gbN“́ưSTGÇE@D Yà™7dÈ0̃5#½!Ø°aeï½Fz£đn¸ñÆƒÇ ̣ &T=*"Á82cÆŒ˜Ø¼baNF@́‚i¸" " "ĐÙ đ̃e—]¢×Çúë¯B9UñÈÍèA9̣aÔb\8÷Üs =J̣¼M†ê–Yf·Í6ÛÄPWôC‡zhđI½C a±,́Öĉ[#(ƒĐæRK-åc§/¼đÂQñ5f̀˜²9₫_­̣ÍPĂQ±PL©"o K¾MC 0°ê!.;áVZi%G̀s3<³P!P¡€'7‰DÈ2×\s…6Pú§cÅ eíµ×‰eÉAB}úųØb‹9r§üñ ăÄÓv]tQœ3FJ¡Àè‚äç(ú9æ˜B¡èˆ@‰ơ¼Q£¦z̃hP̣FœXÏvvß}÷’7¢Tk:¼vjeéW[·¥zæ[OJ×ÉçI)yCXƠ¹ßpĂ %¿̉<Ư' .yeb¨çĂº”è™6 HŒ;6Ü+Ë/¿|rT»FÀ¯ô|f›m¶’W„Ûá¦Ú~₫ùçaŒ<÷y₫›|öÙg¹Çí<Ï!}úE¹íơc}Wk›óYÑĐQu|¼¯y×HD@D@D@D 3LJÿ(èxZ ÏV ¡‹eV.Í÷ BŒsâ[(%«cÛ†¤åi=Úc•+«_‹ÆĂ¹?ưéO0U&„ị́†àâƒv¸lë÷Á£%ÏcÁ+]Ưc=Öb~e øpzơƠWCBôl;°$y­y“äƠeŒxÖ˜Ô3ßzëXŸx´¤Œđ˜áÀ+¥H¦L™âvÛm·˜´ri˜°´B¬¤^vÙeƯf›mO¥÷J<¨âYgu Ÿ155ÔA…²ÏuºÅCO½¬đ¬·¤ß́.á™aÏyöÓgï¢Gy$6ÅyëÓ5<çx̃!<¯ñÄ#\_V(‡7!^÷̃{oÙiBUY{œ°>Ø·ăi?vŒóµHÚ̃¢‹.ê¼ñ(¼g̣ện¹í¶Û‚§`̃yf'đ-¬5Í>HOD@D@:;‘«âw¿û]ăC£>øÀm¸á†nŸ}öq«­¶Z¡â½£æN2́3Ï<³L!¿ÜrË4‰º³÷¶‹ĐL(ơưỠƒĐG„œj­2' a>{î¹ú‰>9‚‚%0Ø絑€đKBµ…e½ơÖ+T¸[Ÿ\[ïẠ̊À%Ɔ¼>¬ư ¬g®(¿yæ™`H¡OÆ‹ŸÄè(Áj‘7̃x#†¶".;Ê<”v‡rHáu«g¾ơÔ©4~80vX €ăúsÏ¡̣Ú"_‘ŒwƯuW^n¼ñFGè5ïñ¡PN-è8Ç3Ÿ{„›S₫œÿâ¿Î¼0>dÿ-U¾Ç;‚wï̃K/½t™wyTh/Í…ŨJû~"Ä"ï1„1ËŒCíÛ³Zö# ĂGû±UË" " " :Ô3&æ-(‚a„d§$m´ XFé’§ŒG™Ư§OŸ+¡R¿x°‚µÑJ}6âs'q̀Yí²=]ÉÛˆ>ZÓF{çùçŸwm´Q̀I˜0*»½+ ß™qăƹC=4äOéȹ¢Đ$'Éu×]ºÅèơî»ïºM7ƯÔí»ï¾Á“¨#Çc}1®O?ưÔ>Ö´e¥;¹xºrU`DÄè™JG>øÎcàC±Íóăk­̣öÛo‡¢­­WkûEå0̃~üñÇcâ¶Ûn[TLÇE@D@D@D@D i ”ÿ i‡©‰€ˆ€ˆ@ç#€ç+úQ¸×"ƒ «Bi\`u*ï"¥?«<óŒ¬öDqÈyseƠ/‰QYÚ™¤yÆZ®G{•IÇçôs[úDÑn έÖxNXζµPWË,³L‡„ê—\rIYŸ$=FØâ=… `'lW{H‘Ac̀°aĂZƯ¥µ×ê³°cF²÷zÊ€ƠöxQÍ*ÁØ'2ï¼óï¦ZÆÂÜz÷îƯêz•Ú.â•Ö™>}z0zp̀B7¥çµ/" " " " @qpíÎ0zQD@D@”Æ‚¬Ñc Ï1wçøó VCH¦4ôÆ…‰>·ç-yJöÔCo^ô퓺o &l°AT*¢À»ç{Ü?ÿùÏF¯]Û#OǪ«®Ơ³*”H̃k5åƠÍăÚ˜R¯î±4{¶|Wø̀m̃¦XnïyaĐÄX•5zơëÙ»‘#G®ë8óf „ÛÁ›)+Ey_²å²Ÿi·3ÉUW]ÀÁ<#lüơ2°úܦ^|K.¹dÍM7Ê(jVâeeØ>ñÄá#ùx̉Aií‹€ˆ€ˆ€ˆ€ˆ@³ÇG³_!OD@D S8ơÔSƯ×_ÇNRṬy  3a…2¹=̃{ï½k₫–[n âΣ̀mïpLx˜̉˜1½ơÖ[-Â"áÙA’Û4\×É'Ÿâ¿w¯”‡–¨×Øwµmª°ÆÈÓƠ vưđö ̃>̉«W¯°mÏàœ ơvÀ¸³Ï>;ÆæÇøD­ă1…‡„đW-µ(̉¹ÿÓçQ̃à˜ơÈ+×LDzNéØ;†±“ï9EZḱdÈ 'œĐæ)Tâ•6n†ö¸_Ó~´/" " " " íI@†ö¤«¶E@D@º%¼!đÜ`e8rûí·…gjôÈ‚¹â+Ü}÷ƯBR¡#Ùi‘áe*^sÏ=wÈ‚âJºª˜ö)G[æÀ>á«ŒxŸØ¹ă?>*nC̀?;X-L¼üJ»ZÇ–6Ï{́±°Ê˜øÄ•0`@øËÎ)­Gr8$6đä ßCÏ=[„â0v® ijBYØ$Øî²Ë.nÅẀU£‡[B×`\ÁˆÄ<¾øâ‹oEY¤ÅX²}§ŸQL2N”ëüqM4ɽ̣Ê+áó +¬àV_}ơ×|fü`\Ôc®ỹ-ä!'Ét‘5ÖXĂm·Ưvá~JÇ̉ö_ươà¡Ä5Ïó|hô0`¤2ỵd·æk¦‡ÂưÂ1’µĂơî»ïçÙçXG ¹ƒºª;½¿³Ï xó×™…çÊÔ©S6…J¼̉N~úéđc½DD@D@D@D@:+>:ë•Ó¸E@D@–Je”×&?Ă6@IDAT₫ñ[$Öµs¶E!…¢ư;îI‰1J*+]b{Ï=÷tæbum›&ÇÀ øÔHb°Z¬€fŸd¿J婧 ̃&yFÚ·ñ1E]´…â½5c³ñ²½÷̃{Ư®»î =éñ3Î8#|œ2eJ0ê¤0bôïßß1f3ÜXƯ£:Êm¹å–îæ›ovꆱơèÑ#°°¹§F¥c=6$Å6C•µeJn’“ÙXq₫¼óÎsôÅ*zÆÈx̀¨dơÙ®¿₫úÁ …!¥0Nø\3®%×< æÑÖO¹ œLYpm\pÁP¹¸ÈßPɰ؈9pßÙ=A{&LhaôÈöƒ1ÍîCŒ‚¶RåsZ£ß’Œs͹ç0r¥÷>å)—~¯Ù·{/Ï CbkÅ 4<#̣Ú¤=ú„‰₫8Æ=̀<r !„ "|sç{ÈwÅîÏP ç<0›đ̃d“M" ¾«„ä{ଈ›1cF0ó]³ïªy8̀9çœñX¬đŸ>úÈqÄáù,vØa‡\ă(h¾¹†<+ÙÇ›ƒ)ÇV^yåÜköŸ®êÚT3Ú¾ÿ₫ûá¾a÷Û@V1e\+/êóüxóÍ7Ùí²³09ư#" " " "Đơ øÿ HD@D@D@HÀÇô/y…!Ạ́K^yẈ+ëÛܺẈ•¼̉>´I»E^AXụ́Ë/K•ÊûPH%ï•P̣ Ñ’7Ķ¼â»ä•–­k¥¾̉qÚج¨ä•”±Êú<$%¯è-;ö /„ùX=ÊxÅf,Ăg¯d-;fs¤WŒGvéqÎù•đeưÁØ+rËÚb\̃ĐP6†K/½´ä•©q é<³û̃ˆṢGº ’‡±s-ôx¶¼Ï̃¨êey¤e½;”ñ%¯À./ơ²¬³|Bå&₫Ç'/ù•₫%nªä•̉í:Rï9QƯÖμ±2ÜS\N®E5®û¶Ûn[Övz GŒëđ]KÏ¥ûÜ·&\pA,wÚi§Ùá¶ii›ie/¶ïOñ}Ù˜8nûÙ­÷†ủød˦Ÿ½!)OûIϳoăIØ1ëË *ö“2·:\'ë‹óiûvܶÙ₫R^̃ mMVƯ¦}f¯ï+Éú¶-÷”I-¼¬́u×]Úô¹=́¶" " " " "Đ) (¹¹ÿßDD@D@I€¸^adƠvvÅv=}²Å4bƠ—_~9ôá}¸[o½5®"'\+9₫ᇆ°Kx9˜°êßÂ*nV_ÛÊhÎË+×Ü*«¬ràéz®XÙmkÇæ«¡‰}÷Ư7¬ æ¬l&©:!˜†W]¾Đ_«‘YÎü¼’>$`·D́¬,·Ơé$i'w åRIWÊßvÛm!ƒ]+̣°2öYq¿ơÖ[G/BÙªú´½t®̀ù¥u‰Í_-¿BÚNº+è™y#RÏ‘iÓ¦…¾Xͼ²×™qp=‘tüx¡Pn”Á[ÄÚ…ÛĂ?æ‘£Y÷-4Ù2Ë,¯U{O+¼=j•ë¯¿>̃³xa¥Â½ÇóÁÂa¥çl/“ZB6åú0k¯Ú6}&µ™¶Ax:“´¯JÉæ wá…Zµ°å̃ëƯ»wÙ1»í ‰â)WỈ1X¹tŒÜ3Ù„ƯÙëó¾}ûZơ[ÎtĐA-ÛænÏ;ÖÖmöZàÑÁ3À„9¤¼¸§*ÍÁêeyY~q Åâa‡æP&ÓÊ´C9ÄÍœ93‰rH½cC)ˆƒ- ûơÖ[/*®Q3K"̣$´ Æ䢋.*Sö{÷è£Æ9S.køÿóÏ Aƒ¢áåÉ'Ÿtää°pÌ›ü!„›2ÎfœIÛ°}® |©Ïø- ç¿];+_Ë–p_Ü fĐ Ë5×\\¸˜#áˆ̣®³Ü3d̀`Ä<̉k̃¯_¿2ÈÚØqÇ£¡©–qÎÊ2Ü¿ÜC(m¾í5wß}76Ư¨dÙ„}JÅŒuÜ·„É2A‰Í3€9bD#L* ‹rA 'ÜÙ¢¿¢pXéw/í¯5û̃‹#\#¾|ÇL0n0_ ®&̃[!̀#$să³ m~øáá;å=/́°»óÎ;Ă1¾³•$kY~ùåcd |§LàöàƒÚÇÜ-ưs=¨K¾—T0T6R̉kÁ}o!ÅH~#æ/¶&̀k̃^føèªyaŒ¶" " " " ]Ÿ€r|tưk¬€ˆ€t T¡O·(­MqnĂ@I†á#UdÙ9Û¢LC©†̣ŸX÷(¶¬̉ÚÊoµƠV!71èQ⛢ÛγÍë£ ´n¸!(Çđa|©Pœüá-À̀³¢̃±¥LhÿœsÎ ù,08˜0”¥00¥v¯ ”‹¬·ö0ô(û1~XRïÍ6Û,>'²mùPWnÈ!ñ0^U«đJAđ ăX{Èøñăc³×^{mÙơÇó#̀Zk­Êđî°ûª/¼ ñ&DŒAø D@D@D@D@D (ÿŸ{'œ€†," " ÍDô—^z)(ơP̀f”᫶Mù ~Sô¡¬3Ăy (HM L[Eífûá3ứµ×^á¶YM̀ sBô<û́³eJpŒ*Y©…²¿̃±Ñ'F”ûï¿?7~ó›ß8₫HbLh«-¶Ø"$B66nŒ>§CP䣈îÓ§O`¹Ï>û8Bgal0£ŒƠ©¶Í30XBŘA#|Ră åj1FX{µn‹ 1µÖ/*‡§)A³e`O8'æȽ‰:Ë?[gV~6C†±EY¤]Ç‚ï… l²b†́ñ́ç‘#G†C7ƯtS<…²=ïºâ¾0`$¡́5I 2±ÁVîäͧ•M´( oNj̉MT´äấ?ưôÓlZ†Œ?Œ5¯]{F¶¨˜Hû9̣È#ƒ±59v³fœÉ–KvgZGHjƆđ]i2s .|‡Spv\y¼0La¬Âx·â+f«è³ˆ€ˆ€ˆ€ˆ€t*2|tªË¥Á€ˆ€téjp<0̣”•äWÈÇXÂÊûl.‰4g†‡Zâư×ˉUÔ„ñ:thøcŒ¿ÿưïƯ®»î½$aÓ–±±Ă‚‰3₫L?₫ø2O”cÇ ă±¼(~Í#…z đl¨¤äG¹‚0`@0¦„™èÏÍ–W%S$¢¬\ö|=Ÿ¡̀¦_®¡ËP̃b«ä€gá‚̀đ‘½?ë™G{Öñ ¤Ă¼VZi¥ójÄP´³’̃Œ„xKÍôAî A”×oê ‚ç” ưÔ3ÇcĐLÛ«÷À*ËúÀ»̀¼́X#¶ơÈ‹”'̣Œ yek9¶øâ‹#´–å]á»8ß|ó••Åx3+e‡vˆƯsàÉÁ½7xđà`æÙ×Z0 Z˜+Œ)•±s툀ˆ€ˆ€ˆ€ˆ@ᣉ/†&" "Đ9 ¤y=ÈIALù44Í*«(¯UQ…;oųµ‹á¥¥̣‰YOÚcŒcÈ=@ ~3R%lVZ36æ@Bp’¨_qÅÎrÿûßËÄ ä²Ë.s/¾øbTäáq‚²ĂÉ©§º Ø7AÑ¿̣Ê+‡_ë®»n4\Øy¶©wL%î©*5h¥m5ó~̃5*oÔœû'{Ơ›UÇÍăcÙe—­ø}hÔø̉ëÑ-kø û^¤́¸Óü64g̃„Uj!Œ:Ẓ< Æz€Tz¶Ơ¯å8ßë#V¥~ṽyç†F&kw^ 1)- ex&yæ™áÏgEÈ\k3|d½^j­¯r" " " " "ĐL”ܼ™®†Æ"" "Đ%lÜ „VùÛß₫VÓ¼đn`ơu%Áë€Uç$°-ú#Éq%e¾µÏêi ÷‚gJ59ú裣q£Ă7ß|SV¥̃±áaṛÉ'‡¹£P&¤ÆSL’9§Æ ópÆ5|¤9²m¤FÎỢ]¤ êJ(²í;AùZ%›Ç¢Öz•ÊáơƠHI“7²Ư´­Öy&˜Z¯Ï?ŒK„Ëó@ÁÈC₫# oµÏKÈ.ĂG-ÄTFD@D@D@D Ù ÈđÑ́WHăètÈ—a†Ûm·ÅE“aµ.1ÿóVIfÊÚ›8qbnÚƯf›mabwR‹±ÅâÔ1cFTđó9OPœ›¥cªwl̀ïV.ăÍaí»£ƳÏ>»̀Á˜ÁE"kæj¡®P4÷́Ù3$¦ƯTA7́±sÏ=·…§‰•9ÿüó ÏY™fߦ«ÓñÜ1Öé¸ñ´I¯oVyŸ–m–ưöø°¤Ờÿ ƒªĂ¯ưëªe¹.E†L;A³Y„P_î½j‚7Í”)SB>‹jeóÎc42AÖ-?ỉ¤xhÑEûͶƒx·ƯvsÜ|¯¹N;í´²a¦^!e'20"cLj¸ÆkdÎ꣈€ˆ€ˆ€ˆ€t>2|t¾k¦‹€ˆ€49”÷ŒÆAƒ¹‡z(®¦ÏŸpSK.¹da ₫4^¦đOÛÁ BbZ”¤$Ï[ÙŸ5`<°ỜÄăgE¹SN9%l{½c#ßF ₫Ï’ qÅ8–Xb‰+Ü Ç4sæLÇû<µzd¤m£t%‰;I}SA xƠUWEÏ–Ÿứgñ¦åÚ{ÿÀ ^úÓŸêê*ơÔ!wA·£:*Ë>ø৺:nÇJxFÁƒUüÂ:Âăƒït*ăÆK?æ'ßĹ½÷̃ñđ„ â~vgă7+÷¹:Z²Ï ë?ÍObǵ%œ^ôïß?ä"!t`̃ó"¯NöXj$Ü]Đ6†“f4r/àÍ‘æ{bœ‹-¶Xđâ«æ9hsK·æjuÖ ÉÍÓsÚ/'€‘ÉB*&R"" " " "ĐœdøhÎë¢Q‰€ˆ€trä« 1± y)V[mµ—‚Ở(₫Qđ±Z·’уú$o&…¹™₫ùƒ‡J_ £Gv[n¹eThßzë­Qq•†wAQĂ«‚9>lØ°27Æ€N8!OPœ¡$ÿ+Öñ$±äÈxjØxê[jxÀ¸ÀX,ÜJ%«́X=ÂüS%₫ /wĂ #ÊÖ[oí¾ụ̈K>ºM6Ù$†³ ’PqÆñ¡T½öÚkƒ‘ƒ₫1†îÉ¥»́²‹›{:n÷‘G ÷ ^0y­j#Ùc=¢Á†y‘ÿÄr»p¹.ºè¢hàÁ2ÇsTkv–ç» ®cµ¼2(Í8 6‡ˆ)‹ăÁd‡đk|W‹„ï¬ ÆQ`Ä$ÿø4üRZ®È8‘–iÍ~ú̀ \Rv\Ù¹fyÙ½¬0WYR-?ó~9r¤#Ü‹ $" " " " ÍI@†æ¼.•ˆ€ˆ@''€‘‚äÅ©’ …!aGH̀qĐ„·2e6IˆYmkaH̀Ë‚ă+®¸b(‡̣ê˜c‰Ê/ #¬ ÛZ[xvĐ/I»9Grñ´]’‰cäÀhƒ̣›Ơô©§ídÇ’ư\ËØPX3_”É!¥æk® ddơ> óL`N„ÄBÈÛaa¿øL̉hÊÓe0˜˜ç†6RE.uLöÛo?G~c„̣…!íaŒ²Äæ\+¬ÛX­~£·Eăäú0?ÆC(´¢rEăa~äd°ëŒñƒ•áç§÷̃ |]^{íµ ç₫lïë’²3fLúÑm¸á†®oß¾ÁË ï®ßsVâ/¾øâee³5×+I<Í}‡±ᙀb5Mx~ÿư÷Ç&̉{ƒ}ZƯX¨Îî‹yç7Ö^`†ævá…æ&j…ëÜÁÉ&̃ ô‡Ñ…üB -d§ËB9Ù3‚“„ÆĂ`ÏÓX!ÙÙgŸ}â'Ë}BđÄ€óK.¹$–I %ñ`w¸^xñTúăª4t\|‡™· ÷!m›ÏȤ/rü 2|­ü-÷ ;î¸#¼/¿(hN2|4çuѨD@D aPl³rÀ;ï¼³[{íµ̃(°,TLĂ:kCCŒ…G[l±…[}ơƠƒB‘í@^ƒ­âoC^E3J¼K/½4zä è+¯¼âH2å;Ê\”Ư&|ÆSƒ ̉©·|k›ỢŸ}öYÈ ’]œíC+]³1ïkIÔ‡^66’“WcĂ}:jÔ¨Xqă­æ'É“sÜO(l›+ûÜÿ)?¾'tRî rÊsÿ}đÁe,ÓvÚ.Dz‚̣ј•M ci™Ô[eyæ }¡¦_3Ô¤^3ißÙ9rc!Âh«HÈŸ€y]̉üéơlïqẴ<Ÿ¬/Ù(đî€/ƸÔ#¢(ù4ơ³a0–ppßpß› èænb÷€}¦O  ²&<Ă0<0·Öä6±úµl™sºrE>ưqm1.™`áYb‚§– ï &ÜçE7¾ó©`Dă8ÏÍ”ùw̃…”OMiưt?/GSz̃öñâ©ôÇ=Å<úä]‘ ó†!܇´mrÁØ®+âE%3ñüàxâ‰'†üF!Ü£DD@D@D@D I øÔ.HàÍ7ß,ùUƯ%ÿú©øçWç—¼‚¥]ø•÷%₫*‰W*—ƒWçWd—|’ç₫|BÚ’åT8æ"~>ymÉ+é/©ä %¿ µ°Np̃¯ö-y¥MaY¯´+=÷Üs¥k®¹¦4v́Ø’WØ–|̃À¼Zû^iṾʪ×Đ{o”|âơ²±2O¯x+ye]ɹJ>wBéùçŸ/ùÏeå²èÓçæ(Ưu×]¡u9–kÇ´=¸øPR%Z¨äáúø0Wi‘Y¶ï½J̃Q:ùä“Ăơkë@̃yç’Ï9æë—_~¹ê÷´­}6º>Ïo(vØa-î§F÷UÔW(W¼ß}"í’+ª[Y¶Yá{çĂ;¶Åư˜'“'O.«Ó«W¯XŒï®=û‹êÇÂ;6fkǶ>ÜWé£>í{ƒEl!í7= ø>*ÖÍ~W½¶äñ¼ơÉÖ̉fÂ>ơ᜖³~Ó±Đn*éøÓº¶ïWô§Åc_vyÂ3ÖÊĐ¿Iµ₫¬NºèÏyo7k.lé‹knç³[¸P&•"^̃“)´Ă»XRL€w ïHo+yÅđ¾(.­3" " " " ³À·€ÿ¡,èBÈU@øṾ×*3f̀p$eÅh#äæ›ov¿øÅ/ d UB§́JrṼçơ­¯r^áÓ*®́ơ×_¼?¼‘ ¬PNĂWv‰8ôœc•>¹C²+À;r¬ÏËS‚7 ^ œOnpœÆz‰±Vo[æ̉^í¶eL­­KlVà“oÀ+£÷KkÛéJåY•NBz¯œ¯É[©=çNˆ)Ÿ&äÁ;£–< V‡-ßVú#xđ",^%á{ÅsÏBÀ5êùm}̉>f^á‘’}[ÙFnñ>Àk †„ÀĂˬ̉30U^)Ô:>o˜pä¿Ásê+®ïKBL¥5œS{µ+ò ïQî®ÊÂæơ›åÅ3†g%IÓÉ÷#É'@Î)!¯y ºªXRï¼ù1o¿7„Ă!ÇA%…`^ưFăúX(2B7aè²<ô…B—]$çö+Câđ{î¹Ç‘0Ü””•æÛ–ñ¶W»mSkẹ̈ɆXjm;]¥<Ị̈”p/a¬Ơ÷?ßÇF<‹0¶6¿ÏÉö̀qBû_ª`}oµ¶ÏÖ™̉ñbXÙtÓMÓCj¿µ¬˜\–—›W¿ä‡={–•%Ѷă~ơ«_…•¿ÔçóĉC¾ k¯«mSef–9Z&MV›R|VÍĂ‚)¡̃8äH•Ñ(tüñp í>ôa›ÂJuw¥ùZ™z¶íƠn=c©·üø₫`@ªdL¬·ưÎVüfĐÂó+½×:Û\4^˜Ơ>üđĂđ g­5¼Íê±wdÿÙÜÙXÖ‘ÜÔ—ˆ€ˆ€ˆ€̀J̣ø˜•ôƠ·ˆ€4˜Àå—_^¶*|üøñÁPÔÍ"‹,Â6œw̃yažÏíàÖ\s͘:­‡ÂuúôéÎÇ•mú/V:§GBh°2̉熈†‰7̃xĂơéÓ'$]¥,^x¤P) …•öî¹ç:Úñ9‚qfÈ!ÁĶx<Ÿ–%±7‰|½÷FH Ê9¯üÏí3;>ÛX­Mî*$Àf̀ŒŸă (ùZ%oh1ú"x´fÔOyŸp %½äCÄ>½Á%tC̉l¿¶ḅön¸!p¡Â9眗Ûøne¿‹M>t Oa‘jx ˆ÷Dêí1bĈêYƯˆ€ˆ€ˆ€ˆ€´•€r|´• ê‹€ˆ@“đQ)J̃KƯ–á¡œ'¤ÔÇ:t¨ûôÓOƒ¢ĂGËa5Ö ~”₫è́³ÏÊo”Ư”'´S6Ô¡²Z3VŒ0(‚‘ &”)Ă9†̉e(Æ¡(ö̃°8&¿ûƯïBè)>×3Gk'»¥ï;î¸Ă͘1#̀„P2e59T>ÿüóđG8%ïưC)Ưÿư!„9Z0 rÊ)Ñpå=BÂ\7•5|¤c¸í¶ÛÜsÏ=<̣H¸^ôI²yŒ „Ă*Œ6vÚ$” < O…`´JÇ„¡ăÔ*«¬î“1×"©e¾Ă† ‹×™̣̀…aŒ%¸Ư\K¾H-í’û†û̉„냒‹ëå=LbØ. :(mÎV¾£¶føPÿ#náÛ0|ØưÜQ×Bưˆ@W"Àóç¢üùW6ÍíÁ"åöÈ礣" " " "ĐŒdøhÆ«¢1‰€ˆ@Rï‡ƠW_=*ÍÓ¦È×pú駻SO=5lÙOÿ®¸â2Eđa‡Œ´áĂ99r8°B!·«́WZi¥¸ê£‚áï SJb !O’U›Q œ¬áŸ´Ư¼â¬¿ưöÛƯ[lsl „GymÆ<4l¬ờѼ ̉₫1ê°*tûí·y;ȇbó%/ÅrË-{0™Œ•”ö°ăƒ[dƠUW’´Ḯ₫ Aƒ¢€₫6Úh£x |è«ĂC“*î½÷̃˜G$mëŒ3Îp£F†+”=ä±±b°ü#Ô{ûí·[äØà̃€í2Ë,îEŒ!‡rHÈï’^óZæË\Œ#%v/Ñ7̃+guV¸ù́C™ăEµv1J‘sÅÚÅ‹%5,í´ÓNe^ô‹ÁeVˆ åÔñØâ;(r.ú$­%đØc…gà\sÍ̃å­­ßƠËËÛ£«_aÍOD@D@D «P¨«®~…5?nC ơ~Àc O9O²o< đ(’₫ưû‡Ơư(§ …²OB ÙÊú´.̃>·ƒóy6ÉÔQtgË¡$7e7IÇMiN»­ñöHû-Ú§MBn¥!˜(‹ñc‡~Øà…Đ–9¦´a€ä©À…0Z̀—ĐcfÈ°2æQÁgBR‰ñ3ƒE^9₫Ƙ0P$ưÎöG½«¯¾Úù(Á«ÄB™ÊÚÍ&fç8†¢k…Qƒ¹à™røá‡Æ6ko Ÿ;$üù\2£Kö>±²Ùù²"£ Çóêø\/ñ²6̣¶i»Ç̀;„±pßde«­¶ <Œ–P=[¦#>3g®½<>\xÎ`´ä₫âY“½w;âz¨è*0₫"„¹*z¾w•¹Ö3y{ÔCMuD@D@D@D yÈđÑ<×B#6đ‰~Ăª÷JF"O¼ñœ0ă û<đ€[h¡…ʲ̣₫ª«® JoN¤^'e“={öŒ ÚEƯH9è ƒ „É9rdoE¼G1ÇW\±,”ÍeơüăđĂ |öa Q’g¸°¶1 ™²˜\ đODE«_´e®{íµWø£M¼@0úàÉB₫ăL}ŒđÂẸ́ÚçávgÎœøÁ’vQÜá­‘5´äµ“{đÁ£áoÚζW“)Ù©›=Ÿ¶×ûeàË÷«» a®đ̉áÙƒ\$" ơ0ÇÂ\µäÇ;K¹=ZrÑèLdøèLWKc Xuo+üùϺ­fO«àu€gFVzơêr&¤ÇñôH½(Ó›A.¾øâP±l¶Ùf!üR­ á4LÊ₫FÍNÊ*å„7Á®»î“¹§ç¹Oâv”÷È€ CcqŸ˜²ăAj n# 0¬&9aøƒ ^p0ÏŒ$}_~ùåăxè?OÈỢ“ŸüÄ‘ÅBSå•kÍ1 _6wÆB¾fóFáúr¯ỤjÖ94j\–ßc£V¨7ªÚéx`ÆÉ¢ÆGîÁF ¿ ñ`ÇÓYü~ă·¤DD@D@̣Èđ‘GEÇD@D “xï½÷*&”ÎN%" éMc9‹đD‰.ù/̃%ÍâíÁXđ]sÍ5ÿ;@¿÷æ›o†Ïœ»í¶ÛÂûk½ơÖsx3潇Ë*×ñÁ̃¯é{’c3f̀¡D­Ĩ•äĐªö¾$́hï̃½­Z0èă½™¶O¶ó¿_áË{u‰%–h±¨»oUóü>÷ÜsƯo~ó›úó¹çkJC ¿UN;í´`¨#·‹_aüà÷&‹X¸ƒp¿al“á£U·‘ ‹€ˆ@·" ĂG·ºÜ¬ˆ@W&€rØB1O ¦!¥<èjFVVa h„œDê(üÿ÷ÿ7(ÅùQ57n\PüZ9₫•ưÏ5 ¸‹”¬.4£ «ú̉ÿ`côhÍ‹<Ø}üñÇ-á>nE₫“ÁTóä•W^q+¬°‚›o¾ùB¨[˜WÖ1ÂÍ?ÿüá#äzH½"¬\ºåü±Ç̣9püüóÏw .¸`Z$́§¡°²'/½ổ&‹₫IF̃^s̀†dBáŸưÏ* ûj”́jù̀j@Væ ÜÎ啯v,Í ÂÊÏj×ă“•!rü3Á{ßd”ZÉ̉'¿ƠXäQIø 2zôèJEt®€¿đJ!_Û†n~Ÿír‡ù†7„ßđ×\sc1Ϭ2Lv9Àˆ€tQ2|tÑ «i‰€tOügÓ à?E„7ß|s®B—ÿ\¥¿ûƯïʼ-¬ÍƯvÛÍw%>¦Ô¶ólYh+êøL® Vhá°ZÿÖ[ou¬²̀₫#Í|‹M̉YCÇ™/¬¡&5ˆ ̃xă 7~üøèÉĂơÏ–±²i»i¼ṾÂa!ô[o½‡˜·µ×‘[Kp̃ <ÈQÄơ•ÇGG̃}ê«+ < "ĂGùƠmo ƒ ƒăƯÎuâùJ*,a±ƒ­‚çùHIû́’ÿ`Ơv¼² ¬̃´iÓJ>ÇHY=ÿá’ÿOU,çă%*©ä•ßeå*Ûÿç­¬ óÿÁ)1JớœÏ/Ṛÿ¡c`§9úÿ¸•–\rÉĐ'}{CPY›|đ̃ %¸¦qÙøü8K´í½VJ̃0QV×Îùÿ¼—¼#œó9/Byë¼\OÿŸm«êÛ5ö å’WtÄs¶óÎ;̣%ôéÿ3]âÚ™¤çlƠ¶^ù`Ơöh¾₫?đ5Ưip³ùµ cÿŸèÚöaÊJ^ [6̃₫°ñÆ—¼¨äă½—üô;ºû¦èÏ+YJ~•gÉHsïѦ¤Ñ0§zjx̃x¥UĂÚLâ½ÇsĂ{¦‡»Å¾WZ†¹{ïÇn1ßZ'É;açwÏZïaQkµ†—óèp}¸?yŸùœmUûđÊß’W²‡ßS>ixië­·nQÇ+‹K<̣Hl;}ozăIÉ/\ˆ¿xÇó®OËØ>¿ü"„}zƒt(ă=AJ~±@Øç7]?¯8ï]Êñ›ƒvù Â{9o`‰mZ߶å·¿±̣„ß ̃”;vúäwRú[Ôxs÷‹–[—yó{'+ü¦¤MëM”¼gjY5ë“yŒ5ªäó¹ơµUæưoe³ç˜·7Vä¶Ă˜|.½̉›o¾iM•¸ÇsL(ï”ü"¡’_<Ô¢>×È‘J>Tj‹s´Ëy®U*üô‹`ByúơFp:í“ăü¿ Ë‹Ïpñ-¡×ß₫yå¸oø oâg•ößÿܲÔç÷F>+®­ˆ€ˆ@7 ÿ”ˆ€ˆ@W#pà†•ñ[l±E C”7Gÿà}€Û|ºj?-;tèĐ°r̀ă…À{pyÂJ<öØc²Ó¼# Êïʇÿă;Ä}paƯáY.X¾°­X¡2ŸØ#’ë¼È…VEÓăÖ ‘˵R¤R®ÓÊeÿf×)+b\û}+…±—Œ|î…1”¹‰ª¸Ç~¢́Ç{¬|k ö™Y_DLyC¤èPºđ ư¾«V>ú• 툷“rÙsEnEư=ĂœëƠiyí>ë{Ü2‡>Z?â {³|Ü–¢>ßVưÇÂÁ¬ XC·Ưv[Ä|@»©DŒ₫¡è0WWr´Àâ凡Q^^ͽô;̃†FëOJfd< i˜ûqíI»_/~–̃>ÉW–¨¥oÖ'†ôµVkƠU«¿XuđWĐŒ\Ay¿ØÑa¸"Y­rIÈ|é¼*Yă‡Yö ưmQk¤̀ï-4qWbYÜ—üöV=3+Cüô‹‡xF̀R_ ÚÑ"çµéÓ`íÁXđ~gñÛpĂ ư÷đ_Ä öëq’ö́§zơêå­_ÉGy‡v˜/‚=!±>øàr‘ÄÿB«Ÿơk Ú€Ơ–¬éf%K{ØW¡IŸD³Ü[ªr/bà{K†w̃¹œ”kXPB”ơhÄ/ßç u3G#!…¿E ÖV'–%Ạ̈ s¯½örÄ"¶.|?âˆ#|>,i‰—a{̣ƒå”)S|8,Êîºë.î3©˘n¸Á…íóq?R$̣ùX,æ{,xÁƯˆu›8Ä%±r±S̉˜`ŒE+î±b%Æ‹ơ%Ÿß¤!öư$àưàÁƒËÉ°ÆKúÇÜ2XĂ 2Äa=~üx_.–4¡Ζ[nY¾Äå-L¬œZŸ‘Â[_Øø‚±UúD1k˜ç´•Oî3öôẨ+ËGL³H¡ ƈöQO$¨ñy(“¹‚E } ! „@¾à#ßă«̃ ! „€( ôŒ"\dạ̀ AF^ä0U`fUđ³f- ƠW_½̀́(̀ä.`GMđaA¸ AKºiäûraF± ZRGÖ …!‹Hæ̣V[mƠm]€AŃđơó̃‹,AÛ´Å̉œzê©mîÙ¸‚1LzÖ¬!Œ{(ô°ô¸E(€+,̉ó=ö„®$-/ŸÜCÀ‚ ¦=‚ „)\C8Ă}Öf+0­÷Ün&‘ƠÍ=„̉6涥§\T̉GÊ£.Ö \N?qŸWf ßf›mæƯ!l`-‰̀ơPèÁ}ö«­¶Z<©ïkd%äÄSv3§" }&x¹íM"đˆcMy¸’­—è3@Û[#ÿ0ûiS’"ï[\Á†D¿MĐYX¸?₫ñám‹Ư¯¸Qçæ"nÅâăË€e-7‡ôĂæ"B\áBàÆ{-zXs¨ÀñΘg‘…·>…€9F@‚®º&„€B Hp'¶̀O<áÿĐ̉̀›àMEüE#⼘4L8£¤hx¡¿&ø@‹†éRK-U„n·¼hCƠ|ë·¼)«FqZ¬=€¦ïOúSW+Æ̀ƯP£¿¤¬ ¾£•¥Cœx§Zl ̉Ùû6®½ßN>ùd¹Ṣñ· w F3–ŒwÓΗG:4ñ!ơ§FÂă;ÎÓ2nÖ/®‡ë"‚„Ă?ôB“wUüµǴaúC`˜ä¬½2¸Ÿ$œ¨•zèàv«£ÔhIơ`ƒ+§M6Ù¤¼œưpËÈÿ‘‡yÅvIdö³‡6 ¤̣Û»Ÿ”§½kÍ*“yö̀3Ïøê¼!äI"„L&üAÀ†ÀS$„€ùG@‚ü±z(„€È=øÆ5‡h¾Ă$\[\~ùåîÙgŸơL“¼  ÁÇ?ß#/“¹Î~ÀÀÂG>VN>’\—ÔY”’ư˜̃Q@iÿKñ=̉Û#i’"À]Ÿ0mÛ#³­ ây,M5f»1£‰ïĐQÂz îîç˜:k¹¹JªöÖíE‹+ñÎ;ï$ѲkÄ Áư“Å¡"\­¿₫ú̃m?ÿùÏ[Ö†°`,2̃zë-ơö®®ˆé–.XÚL4É™4¼ŸƠïÈ̀ü%sÛ\Ç‘ơE$„€ùG@‚ü±z(„€(ë­·^!ú©NÖF`ƒ 6đî­`Áƒ_ÖΙî»E|X`sü¬×ĂL÷hªuơ"€Ơ‡ >êÍ£tƠxä‘G¼mx̃E§´Y{00d±l3B ŸqÛ|óÍíRƠO˜ºí =°0wgU êä „–'^í¿ï¾ûÊñ7poôë_ÿº®`LÏœ9³"`xµŒ‡0ÔrF^˜äÏ?ÿ¼ß'G")̃Eµ:â×±¤1¡åà–ë·¿ưmÅUMÀ/«Y¿qIÅ>h„ ^øAư?ü°=z´·bƠ", âC=ôĐZÙ|ưÄÅ°úi– ôB@3f̀˜²Đ"́߯¾úêrº-·Ü̉Ư~ûí¾¼CvƯuײpf9#!p7Bød˜‚ Bb<öØc–Äă †`ÚLb̀Lè>—^z©;ó̀3Ë#0₫óŸËBÖPæWˆ₫œqƾKóçÏwŒưƯwßí±F@ơøă»5×\Óßǵ¸ărs–'́Ô! „@̃à#ï#¬₫ ! „€(8‡©ñÏ₫³KÜLt¼fñCwWE"Æ—"0̉zơêåƯw©ÿEî«,>7úO?ư´ƒ Ó“E&˜ÔfQ1`À·ƠV[¥„(N?ưôrÛh÷1Çăz÷îíT Áº‚±;eÊ”rzûc|íµ×öV!\ƒùÛ#æaŒ4ÖéÓ§[V¿– Œ|gŸ}¶ƒ^-¢\|‡D;L ^§ Xl!䡯Xœp„ ±+V]uUÿ+„V‡Ø >Ü÷‘¸)fCđë{ï½·́–ª£‚soE]!¦´ƒX*mŒLÀ´́²Ëº7̃x£]ámjO¸deó 3ß„_àụÉ'û~ƒư=øàƒ}ræ s(Ú„ådơ;óâ€(ºÇºc‡vđc̀<1+7æàÊ+¯́.¼đ¬vUíB@à£AÀ”\! „€H7«¯¾ºg ÁhÀ§}#̀ƒ´öŒC= ¨hq>|0–0ơh‰ƒ€Ík‹ïA|¡E%̃%¼S°€qƯ^0́îÄ †- l\÷`QèÇ\àƒWo¶Ùf‰ÉHƒF|’`„ *¶Ûn;G<ê5âúÀÛÔ`²OÖ',RB¢œưÿ«„ï¸ăª—T|üñÇe!F<Œ~Æ0^&s7X¡ÀẸ̀̉F¬0f̀˜áP0²µ•ơå'?ù‰]Nü ­+Àôw¿û]Ù’"̀`x"lDȘµW'ơôèÑĂg ë$ŸYkđƯ¬A¶́·ß~e+¡°>ûN>b\XLÚˆ5MG‰:ûö훘¶% Wê©“|&¼¢pĂ*¬LØ…„p Ë(ë_xï̀ ¬pƒ•Tf<½~ ! „@>X(̉&h®­e>pQ/„€B@ #°ç{º[o½ƠkĂsÎ9Á•áîx_ç0‚Đ }ꩧܠAƒÊÚªYîW=m‡Q{4wÿøÇ?¶a®ƠS†̉d;î¸Ă»´AKüí·ßnj'n¼ñFÇ{b5Öp3gÎljÙi, ×.wƯu—;öØcƯyç—Æ&vI›°€A Óæ·Å=é’Ê;Y BïY³fùuÀË«­¶Z™A^oñ&ü™;w®_0â*)x$•…UÖw0î»RḾW^yÅ7 á ï $µÓ®áâhö-S`”ÓÏ8³Ü̉vö“±Á}ă‚@+”O k»¸€¨³uÇó3N6OÀ1Cq¥¢0ü±zyñÅ},đÀ̉…}S’0&Ÿ~ ! „@¾Ú\¾ÆS½B@! "ˆóÓ4/Î9¬ĂLAđQ4‹˜I0êߣx¶Y|¼÷̃{Åë|“{ŒÀ2—/M.>ÅĂ? ÖI€Â´Çb§³„PÈÈo$_gÓ.¹ä’· u160Ö«*]EŒSÿ₫ư»ªºTÖƒ%Œ¹hKeƠ(! „€è2äêªË VEB@! „@W!`Îqi€_ô<Œ´5Ñd,’Áîk¯½æ5Va`Á° nÎ3Œæ²¨càÚÇ„Gm´QÇ ÉA.æAŸ¡´ÆöÈ̀ê‚B@! Rƒ€N© 5D! „€hh;¢ơ£ Mg\=dLđQ$‹Æo₫üù^Đƒàÿà¢â Đ³gÏrg‰= êßw7&LêXIÙÍ·ö3fLv;£– ! „€B@Ô…€uÁ¤DB@! º©S§ú  ,è₫Ƥ¼¸†ÚpĂ =£R₫Ü5»yøÂg̃C|t]|ÙÍUÜÚcØ°aT9…€B@! 2€™&5R! „€s—_~¹»ổKƯèÑ£}°kaRsw•Á>«ÉâăŸÿü§ï±Ê*«´< líÙ¤»Ư…€Åùà£ă#PtÁ‡¬=:>w”S! „€YF@‚,Ú.„€…B`—]vq /¼°ûóŸÿ́æ̀™S¨8h|<÷Üs¹pu…à"ÆGQÁnÊV_}uY{eĐcư”à#Hƒ?Í=Ûç*ªÅ‡¬=œ4J.„€B@œ ÁGNRƯB@ü#đ‹_ü¡ù₫ƠW_¹sÎ9'7A»[5rl°wuơÑG9‚œ£ơ›e2WWE nnưúơS|,ÕN´Ưrñ×1ÿ₫÷¿ûŒË.»¬[yå•;VH†sÉÚ#Ăƒ§¦ ! „€B “|¿“ù•]!IfÍå.¼đBC€È¸YuƠUƯ®»îê~ö³Ÿ•}wWç¾ùæ‡{ë®»Î=̣È#®OŸ>îÍ7ßtzƯj«­Ü^{íåà ôûí½ûî»̀¾ÿưï»å–[.5 ̉/¾øÂƯpĂ îÆot|đ·Đ@kèĐ¡nß}÷ơsî{ß«_á₫çܯưkwä‘Gz«ă?̃đ™ù+j‹À2Ë,ăÖYgÿ,=ñÄ>æf•LđQ$WW¯½ö·øP`ó¬ÎÚηۂqËƠUm,y/\qÅṇäÉ>á+®è̃yç̣ú°Å[Ô. wY—Ù»đ̃eÂb±W¯^íÖ„°«Fˆ|‹-¶˜ëÑ£G»ù’tÖÚ‹³^xÁ÷ØQ́ÓLŸ~ú©ûøăưˆ½#û¢´‘Í ößơÎ ú`󢑹”¶¾w¶=6¾́WZi¥Îçç {h0e<́}[«`Æ/ç믿v³#˲́±Wú̉È\-•J,Ø[#Ô]b‰%j5Y÷„€B ÈD‹†H!P¢ r)b”¢÷~Í¿£>º›Kt€.ñW‹.¸à‚R´¯Ù>kÿƒ>XÿÖ*.W÷’đăZôØă J³$}>û́³KÑ!²æ82Î/¿ürƠ9AߢaE"kRÄ̀/E‡ỔP„+÷ëù‘Tn=ù²˜æ7¿ùM):ˆ—†^úüóϳ؅r›O;í4?§ṽyç̀÷¥Ü©_˜ûÆ?C÷ß)b¶ÔH­[yE€yÏ·Ă;4µ‹ùË_|¹k¬±FSËíÂ=ôĐkí"!|KWmm,í*ÚÅWÏẽ¼yṃQG£D矾)‰”"áIé¯ưk£E”"‹AßÖ܈9Ûp₫®̀ yJ§Ÿ~ºoo$(/E‚㮬¾®º›bÚ±H»uu¤ÅÇ÷í·ßît+"Á¤Ÿ/‘ ¥´îºë¶)/ Ÿxé(PÅ3kïœz>—_~ù̉o¼Ñ¦îZ"¡GéÄOôur "! „€IÔ¯f­Z"! „@–@3hÀ€^2́Ç +¬à–^zé ÿñăÇwÑÀÍ;7LÚ©ï·Ür‹·ØÀJă±ÇóZVññ¿}ÜqÇy-¦ø½¤ß?ùÉOܵ×^[ˆ@×ƠđCK-m´ç{º1cÆx—TÖ6´Ñ¢ĂYÅ}öÙ̀Çù(ÅGÄq‘°ÊOɾ}ûV<;y›§êOùƠ•,>Úb„ÛCÖÀ &´½™pe=öp§zjÂ_ºæküZÅ̃Ƭ4(vÅ5¸Ñ·@ëƠjDs|Ê”)Ơn7t½³ÖTf{ >YÇÓL´qÑEMs+æímÄjÁÆ¢d]~ùå~î²ß çn3ÊoE­ßj˜~öÙgnܸqÆ £jý~G>µii·̣! „@úà#ưc¤ !Đ$pa5₫|_î†üqi)yAȇ~è… Ûl³7»'›üiÓ¦5M¨đå—_Ö F}ĐA9‚0Ă0ºóÎ;}Öüqˆ,B*ß|°w‡E_̣Lµđ[k­µ\ÿ₫ưƯÅ_ÜawÍÂnÆŒî{î)c¤}é8@~̣É'̃ ăË}\w 4Èá¦$‰8pÆ™a¬sÏ=·C±>’ÊMª?ë×,ÎG¤éñÇ¥BV‰÷s¡(®®₫ñx ®7ps²:jwcHđ‘Œ{à!E–^Xh{†©S§úÛá³YĐ´+|Ëlï;.ë%Öq”jÂœ±cÇÖJR×=̃ơĺưöÛ=NíƠ[W¡)O„û#\œ­¿₫únÈ!™ˆé‚H½DÿØëm´ÑF̃­[½ùª¥kdîV+#ë×q5¦¸`ưĂ₫Pîï×$çAÀÉœC¨9}úộßSO=宿₫úr¼Ëxạ̀}KË%4‘B@V >§Ÿ­è¥ÊB đ°yÇ×µ đ׌qH‹/¾¸»÷̃{ƯèÑ£=f5‡€m·ƯÖá×¹³DÆ|à`ß)—ÀËÔm‡ŒwÜÑưñlĂÄÇÿnä†ËÇ"A“Ư,RØ̀|ëbQWª†8rhJ Mœ8±léq₫ù绑#GVø<¦½̀)kŒª!´ ×^{íº´ÚÍêƒXÄùío«XU&Ï98#"ÎGäÖ¦.Œ«×­—Íâ£(ÁÍ-¾‡›wë´ëöÊ%øH!ÁDDˆÖ¥±ÁX7î¾ûnÿ;ræă@øüZÄ-<¢Yûx‡EîưÉ~&‰`„³_Ăº¢¦x¼¬fX{ÄËLûođß}÷Ưư_ÚÛÚ‘ö!ügÿ̃,²¹Ëܬ5w›U_ˉÜL%b &vö‰ă“”eM7Ư´MíưÍ µÄ¢<‘B@®B@‚®BZơ!Đ­`Ñùơmˆ|Â:‚W#´ ࣃ‘yä/Ú3°¶0-»¸&Ú‹h>üđĂeÍü×_Ư'7[Gq„{ÿư÷}“°^Àü¾V O4£z†– ?ØNĐP4±̀:„O.|bá2sæLÏHXyå•ƯÖ[o]au„G½}´¼¤§¯0,Đ̀ƒóâ‹/ºÁƒ{¦~x°_Ño½ơ–Ç,`ÚĐÿ0]=ø!Đb 8LÅñ·¶!\ºơÖ[Ë®sĐpÛ~ûí®¤â^Œ}Øh³4·¸%ăđG?CÂ¥’ Ø°â©f¾O»í¶›`Zë`b8R.ßͦ‘Væ`èxà¾,êÅuÖÆó`„To¹ä¡ÿ0~úi/ ¤ ôÍû,Xb=đä“Oº#F”­ºB|²đƯE±ø@[›gÀæñç, ă¥66 ¶ #›wQÚƯ 5§×µKá] >î»ï¾6BJ0·Rhÿă"Ñ, YĐv7ÆoXïÖ1̃ÿ<{Q\Ϭ$€pH¬Í́«₫ö·¿•/ọ́̀B‘$N”Ëøц(>™Wˆ§ÁưP‡Ä¯A¤­‡X“Ù±F£<Â|ÙpĂ }ÿjY{Đṿ™U û”HØWU{ß0÷è•é{K\|QïµÖǤv²6U –›?ö́áñAûG0b}yMư¤¶%C¨0bX‚1mGŸûŒ/ữl³ÍÚ´Ÿ÷/ă@¿Ø³đ›=Œÿzë­çèƒơ;l#{ÜË¢ĐÑLbîÓp Ϭ;đ1FÖnöKᶳ‚Ä\ç®ơ§™ínuY6V̀æ)81WØgƒ×rË-çIçæéÉ ¦¼km¾̉nÀsÍó >ñ<Ơúǘ„Äïjø̉NÚ{×]wù,´…ư,‚ÛøX‡eVûÎû€±¦_´7̃w0ĂóÀ0ăyäÙJz®˜'œ :‚qµ6êºB@tÑâ#B@ähc[„>̃OúÓRä+¼fŸ#-ử!‡R:ùä“Û96Ê¥ˆÑ\Œ¾¼èU]ñŒ~ÅW”"æzEËm¶}ù‘Û¡̣ưè@Yw¾H³¯@;”"!ˆïWdQP ¾̀Èê möËå[Ư|̃|óÍ¥è€Ó‹FûH×]w])^øz"¦IEùê ۶Ǿ_uƠUå Ưíá”J‘F¿¯7:h· ñ^@û°mDX'cDàEk[ø¹[(1·B¥èPäÓÏ=»Mp̣0m$Œ*í¿ÿ₫>hoÄ´ñÁ›£ĂWb]\ǻ·Ưv[)bZ%¦¥©$(ÖJơ–¹[+E‡ÛÄr)ƒ”̀,Qd=åŸW‚G‡Ö,5½¢­>ú¨Æ!b\VÜËẵƠs«tÎ9ç”"æE»¨>Ơ@$$/¿"f9êK’åàæW_}ũ÷I1ú|@oîÿưï÷IöÚk¯RÄÀöy#¥ƒ6Ù"e…rĂơ|ï½÷^9Oäf11mÄ”÷AµY'^}ơUŸ&*”"æºÿÎúÈ:™D¬q¶V‘ÎöF\c )Rñë\ØÆø÷¤º(Ç‚kÇÓó›u•ơƠ(b—ÛYŸ•~ơ«_UíwR°éöÚ1’K‘ƠªUç?­ÎˆÙ[\%öqIm5¬-3ïIK¿Ç|øóŸÿœXeÇÓ³W³@é́w£xå± ÛÂØD R|NZî‡ën8/ö*ơ’á1ÎÛg¿CYVoøÉü‹âÛøjÂ~…iøÇ ̃vuUºøøÚ| ûÄ~•}k¼oüf>qn‰÷÷l,x-hx¼ ÊfÏ–ÿni)‹½zü9&=×87Äë³ß̀¡ÈÍoEÑ̀©3Î8Ă牗 qJ‘¢K¹¼¤~/X° ÄĂê?“ê qiă†ë‡B@t9•jªÑ_$„€È#XA˜†₫eÏ>ûlW+PêE]䃅F›j¯åf˜D6¯ÿ§?ư©́–ÊîÙ'ÑwƯuW1́RƠO´-±±¾X; •@ªæ o ñiLh!E«HxÛ?öØc½Vb›Ñ,đ¿k.¶HÓŒ>WWI„ơ}Fû B+M°ÏÄ-¹ÿ₫û½–ZRv ül\¹†% Z€Fo¾ù¦×ˆ ÛBĐ¢„ñÂ<̃¼y–ÍkÁZ¹7«r‚ÿ~Ac2̉”-2¸L,oŸ>}|Ü0M"4Ù"f#–Kt*çKJÆäÀÊc¿ưöó­–6:°ÛWÿ‰;Ü<1/jQX.Ú±Xv`cËí~̃R \“æåIÛ'©Œ9h:g•˜[½/²ÚzÛ1LdñQ/X9N‡†±YÔZ·s A›®a½h„µGaqÉ»‚5Ñ\`áMñ߬O!ƯtÓM̃:3¼ÆÚlÄ»³gÏeëT»ÿdưcm‰=ØđáĂ½eë!ë“Y%„éX¯XgĐî>ꨣ¼hxß¾“Ílʨ“¶²^…D9{ï½wùucù‡¥‚yĂ|´‹ơ•uÖˆ4¬±h½_rÉ%v¹â Ê ×ÆzÚÉáêù矯(h«ÿîw¿śă’ˆ:Ûj{ ³8Ë̃ú'|•‹aÏÅúoDY,ùÇ‘=âo~ó?6–̃>/ö¡p€]ªøä>ÑÍ$Ú¶œÙïØ| o3¼<®X3D>>îI­v„}®•=.VĂ½s­ô­¾¶›ư*ûÖ$b>±·4iR›Û¼'Ø×¢°̉Ơ“§VyÜcl°ˆçÜ`Ä~-l s—®Ûm·%©úIy<ắû ÖbaIfÄ̃Ë0΃ID}¸=ÆjÛ(́{G1¶²ô)„€]‹@}œµ®m“jB@4e!cf7›^Lđ#mbï*̉˜j·^‘–P9›k6Ùt1Í6Wl¦q¡À!#²ñ&÷aPr˜åœĐˆi·”)?ÎÀ.W–đ…ƒ? 7”•D‘V“?̀RưÄ5. „ aŸ:̉Ǥ:¹Fßzè!G€o˜¸…€yb‡tđĂÍŒ°"‡Ósíá :8ü–” -ÀĂ B„.¸ñ0*‘Vª‹4bË®ÈÈ'\†€/ ˜0T óÎ;¯‚™Y •±å>L ÚS€>Ơb¼3GáуË\uÙÜàhL£Í7ßÜ3ơéîœ̀]usxăz=å̉®ư÷ß¿\î 'œà™f\g®†æm̀ ­¾úê^ żĂUÏlÉ„j´?Ne±/íµ™ç€yÏóŒ»đ9o/¯îçó/ÁÇ·c óy'‘¹¹b 2ÁQR:®±GñåÛ0ÛYë¸c>€ ü€`„“†´F0ƒÉƒÛÍ8á†̣øă÷—Y—P€‰ơƠ˜“0́YûaÆljw®AYß ̃‹́¨—ơ}†1Åyç[:̉²nY˜«ôæ5ùøĂåÄû5d²R§­Ëôă /ôk+ư·8*ä£>öP{í¤](É@IxøÿưÇ~…öo¼ÿÙ¯Ñ\OƠ"憹€ëṢáñ¬X|v¾ă*‰`ü"ÀûxHÏ>lúCܺlÏ^ë̀wW0§ü¦ (o°ŸœŽcÉ̃ "ß™'t’ï7ûˆ}g­¹ëư÷cÀA^ !“˜¦µié`´ØœAK—€Ưà¾r7Á–,|Û+—yoŒ æ.ÖD¦µË'^æm‡Œ)mmJó'sŒñc™°2Íí­Ö6#Æ`#ïje¦ơ:<æ8ïI|“[¿ÓÚ^µ«µHđQ‰¯1}¹ É-ïÖyˆw?ŒÎđïÔSOơûK¿ï¾ûÚWw饗:îÛ₫€÷?{™PøóÛÖfÛóP±³,_¹Àÿ~a"ÄÚ ĹV¶e°̃$ Øy/3’w"L|[ÛYëæ̀™S¶̉d}e_±N£Yñ>!OäVƒ#¿!đăpmç•3•ơ„vßcÊ”)>÷M‹¼V;Ì̃ %ÈÊơ?bÿXËaƲWe,m=c_ÑÆÈ b,WåỎ€ ư&û#ÆF·Q8·́Ÿ´—2Ø£Ñ4êMp@¹́=Øw1OÀfóH)Ăî3.́ZAôÍầ Àˆ\•úú©‹ñao‚"Æô\§¶ß¤?µænØṇ£ØdX†÷̣̉kÆ1±¹nBEÆ‚çÏj>́wÍ¢œ=hµ¸Ơʨç:ïĐ2ii'ơC̀÷vØ¡,ü@đÍ^=‰èO(ô`¾2ÿÎ:ë¬rr̉°'&N¡0‡gÅ0{.yï±N¢ÎbœT¦® ! „@kà£5¸ªT! Rˆ‡Z6¸0›1‰·uØTW^y¥?(Á(E ÈáÚ@eØAÛîó¹å–[:4”ÍÆÚïa¾sp⃟ïFM Âïf®¬Œi–ÇA†"d*›ƠG45app Æ?4Ç jÖ*–†·Æ8´p`K¢¿¤û\ă°ƒ¶Ä!&dÎø‹Ñ?„¬Œ¬nûÍ' ‡$ü8LÇÛoù`" ,áU-  4Û8P"2A†•aŸILv–"_Ë₫`JĐZæ ´äĐQ- Ëe.̣̉đœ0~qa e1g̀"‡ï0k²Bæî*Ë‚`öLđ®²wHVÆ ‘v"øàyD¨Wíj¤<¥Í6&h­³Ư£·çbv¤Ín $́ï,!˜´X †¶±Z€HK0hˆ²8âÿ=₫/t©eZØñ4ƠÖê@°Î€½}€1kÂvîĂdd]bíÙ?²>¬F”±Ë.»ø}Ê ¬ÅF́¹XûĂơÔChp3Æ'E¹À–—Õ±Q, ¯ €ƠH|ŸÈ»hçw³x!ViqªƠN̉̉g´ï¬öÛ>ÁËÜ(Û4øĂëƠ¾ÛºA¸a 5àÉCƯ`‡@ư…^hS ë¾ ẃ&ؘà€û&4Jºo×Zơ ĂÂR'!W!dA¨±y$„aÍäưaÖ@a[À¥ÚÜ Óñ¹ËY‚r±&Mayξ5iî†ÏJ#ínŸFÊen‚ öè&pË`Î^=$Æ $„ª̀O³ô`>óĂ²'$Îpœs Ö̃cqœx 6̀ ú(—³ư©‡åë»B@4JTsËViB@Ô!Àá×üqÈáà9~đÑ»> ¹lv9ಙfƒüPä²Éüù̀æpC̀o•¶)ïUcĈ̃5‡~Ö›m¶Y"Ó9)=壥•ÄÄÆD›Ă3h_6«øÇ6+°Ưào¸À'3‚\OabcĐLÆ.L‰j̀S„1Œ?cË¡ßÆÎÚZ(±ëí}"Că–?˜h¥bpÂúhepPG˜“×v/铲ùc#`áĐĂ A>Æ9¬5BŒ…Í%¾s04‡•ĂaMJæÁ°²<–&ÍŸ™ï̀9úZƠ¤¹ƯaÛg›‹E±ø€±gL„˜è{10á³\]}«Å̃§OŸ²đMzs³i³aÖ¬Yöµê§½ăCæ;ßqÛ'̃ÿ&(á)ÄÓµ÷›rpɇk+öWÄà`MD âg®—ª•Çz¢ k̀ÓW^yÅï#̣DÉ+²±¦Å‰w Ɖ½üʼn†m °"Ñz‚¿‡ùùÎX"H€™̉.0`î¸ăª‚đzi i9„q0çïÈå‡6ÜR!@3!¾ÆaJÔs8'₫¥ñ‘j¶R—•Ç÷zÉ´n-}èÿØ®eư‡Uܹ!dÛzë­½ÆfÖúÅüÀÍL08úơë—ÉqÊÚ¼J{{%ø¨¡Đ:!D\đaîc¦Ïœ9³œF{Ø›ñ÷?̀đV t³T`­;v¬|Àx Ư\á“w\5b]FP̉ÈZÅû$4„ŒÓjơį' 'âiÂßig˜ŸïÖÏÏoưS§NơcÂDÛ™ Åö%¸ñ{ ̉W£öîWË׌ë́ŸQäAÅæíaI\₫k¬>I“dñQo;Øo™%û‰$ËïzËjUºî‹Fû„đ“½:ç1öêƠIÎÍƠCÁGøŒ×‹ „s†¹÷²û̀aÎ9ï,Æøk”²„q£}Sz! „@à#£ª> !ĐÈ08ø₫̣—¿ôZñD0§æPƒU 6Éh@’/Nl̉Ù¬W#„ ŒÚ#b>À €đ­}øá‡'¶/©œk¯½¶&s )ỎµjÖÍê£ƠÉ8Kæ³8d×WàK‡Îjơr(©—Đ5m/Ƴ£B(êƒAA\Th±†qTÂöÀ¼FÓ́g?û™7©Ç=̀ˆzÚÍ\„ g†p˜W˜`øđF›­̣ÂvÙw4Lk1¨›ñª5ÿ­¬´|rpæùÆ] î®Đ´ç.-m¬§&¤̀»àăµ×^óB=4@«1CêÁKị€•ă2ư°Đ‹»§2Á‡YXZîzëÄ:ˆ¯/–ŸOöD[l±Ex©¡ïhv›ơ¹»bB(d́_ĂÍÁ,Å’2̃g̃¼Ùw{́±q+ÈÇû̃êåw«)©́/Øóá  Yk₫óŸ·º)¾|æ̀[o½å͸tµ ÎV9û c9Æ»Â*%KÄ^dÏ=÷t;í´“w_„RI(äbß„Ơ-ĐXV³ḉQÖT̀¥VļèH›²œ§̃=*s“½:Ä3”´÷ä¹ç¹ấÆœôXUÅƯd…xQçœjD]µ©†® ! ²@u]6Ú¯V ! êB€C0‚7WkÑÑG]fĐûÀ4-ŒSLÉ›Á8Ư<̣=Œ7Äákbo$ḿ­~>9€Mœ8±l}Á”ư-‡éª1̣9”áfDHÍ́#årÀaLèÆøÛ†IZ‡%)ø2Æ"æƯwßơŒ’je>÷Üse+ Ü#tfL™cø+FÁÁ ÷aµúƒû%«¦OÜVR›ñ£ ñô™`§X0u†)#¦^Ë“¤ö¥ùŸ9µ8ơ&ÓÖ—<Óă´ơ)̃]̃>́‰§Óïâ ÁGåXc!hŒ@̃ùq!@5ÁÇèÑ£+ ưBè‘ă!–¬S?Ùï ø‡ñr Âhwˆwr’›©°B,T¬¿¤?ơÔS½»bjCŒ½nœ¨#$̃'¸AªE¤ÁuÖ́(† ‚”:JIí$ÎJÈD­%`êh½µ̣Q7 û‹/¾Øÿ± `o† €}%}G equj•—¶{̀­}÷Ư×ÿÑödĹ;å”S|SQ Á*¤£‚,>ˆ?0ÄEC€ç—½:V́Ơ³đù°̉Ù°W‡Ø°WƯíñ{̣äÉnĂ 7ôVdXù˜û+ÜÁ&•‰ÀÁHç¹á¢O! „€¨ïƠ—L©„€ÙF€µ1ö9´´Ç`fnfưÛl³w€&™Å€©`ñ>âÈÀà°Lœ c̣ÇÓ„¿)†¬1añµ*Ç2nAü(#\ü°îCC† ±Ë̃ W?qBшx[Ỡë¬ X+đ‡»½ŒK,̀K,LÁ³̃+¢p}B±a #·ß~»W"! q{ÖĐĐ˜ơ¥2́§øcĐQ·ó„N¨x—s_¥£ơ´—zØ70n¬ß|7b=!3 àÓO?Ư.gꓽ8±<Øû`ơaÄ\êÛ·¯W°é¬±•É¼1‹46·vf哹É^âœbĐxûyO°W7²ưªư¶ (µaƠoDü#ÎFœ·8ç@̀Û}ûDh‚µÜk®éÚ[} ! „@zà#½c£– !ĐD8ØáêBđ£Úá ï¸qăÊg6Êl² :n–hÇ%üÙD?üđĂî7̃p>ø`Ù…R¼+Xs„w‚††>ºÙp›…JÆÛ#³æ–öĐC-Ç₫0—>v/üŒẵ³ïv̀‡á8¤;í´ÓÊ£C9¤œ̃ÊhôÆ‚+Œ0æF+©,4[« Đ,½ơÁ~3? Gê°ïÜGp²Ï>û”…h–'é3,טMÆ`ÆHhUbù‰Q‚Pf Ñ°nK“æOY0ƯĐèEăÓHins¼mf­f̀‚øư<üæừØÀȲ̀yè—úĐqL+—÷eç~½±Ÿa½4Bá˜xÄ!öÄ1ƒxoÇ üèïư>A o„öI„{C̃ưö₫OJÓ¥ªåa­b/ÊI‰Ă4|¯M¬±XẒÎ0`€wg…€‘­úqˆa±w²€Ø–ơ ¡Qè"ÉR,M#ŸñvÆó²†&µ3®³¿é{Æ₫ưáhS$s¡HwOGëf?Ḱ8”1°ĐNVµ7́Ûê™»³XŸØGT ÄƯÑ~¤9_½ø4ÚÆ̃́ÑCÁ••…‚{uˆư{uÛg[>m?J¼Î_ÏV`« ;çđr9ËÅ÷¼Oˆ%‚å3U³¬#H! ²‰€Ù7µZ X#¦0ơ‡)Í«JØ\£ÅeE˜BĂà@„Y;Úcv8‚¡€/YB¼Æï¶ß~û2ƒưºë®ó±¬Nê±9ŒeL»)S× v¤~êåP ƒ¶á~`Ê”)̃mO˜·± ´n‚«Ï>) Á‡y˜F”EÙ&Xá †e3úhu&}¢™VÀ‹>pèàP‚f1@́Đ s | ³Zø%ƠGđo³Đ´ư‰ßB}ÔAưÄă0áѨQ£*æHR™í]ăpoi!Âô₫oû›wMÄ<ù€Ovg]tQ™‰C€Qc̣ZŸ©qă>p¹Ë¡BS–Xô —Ž–Í+̉Àđ2 §Zå†ơs¤³BC”yÂ'e0_˜C&(¡,Đ2Ë,SöËmĐî°fñ‘gWW¼—y¯*¾G8̣Å₫n $Ä.":qÖø¸7«(X;vØa‡~́Áî¯ưkB\gá>Ê‚́=X»Y» ̃ưüÁ\4bÍc`­«É?₫ø$CBaNÅÍà‡­¯\bOƒÖ¬¿¬‰0đaZÁôgÍgƯ4a ëk*̃y—²F‚¹¶¢}µ€ÛÉ̀ú ¦`ƒ{)ö—Ií ×iëCg>C¡˜+®¸Âa1lăË5˜Ăp€¯†ô=zôèL•uç¥ `̉Mµ?ǹíjsqÇb¬ø™U‹3ñÔ ö¹XUCܳ=ó£¹Ë\GxFywuâĂ~e+™jăàAmđ{töêår¦"ûrêç]˺n¸Á§áÇ^½1ƸålaEÂsOyX₫³‡¶¸œƒ°*E¡ÂBäÄOô DüfƯá,'B@Œ#-"! „@!ˆ|;—"f3¾yê₫‹\!”¢ƒYŸèT˜¾íæ4˜JQpér>¾D.$J‘K‰¼‘VR):p—ÓƯ|óÍ¥ˆ9[‘¦V{£}):”óÛ—m·Ư¶mđë*‡vELFËZêh£ĂA)̉(ơuF§ư²Â£8$¥H¸SW»¬ß†Q5ü¢k):¸ø2£ĂL):˜Yu%ƯW¯^íÖwƠUWù~[Æzúb “,«ÿŒ´oKÑá«Ưz­Ñ¡½1p*ʈăÄïèP_( chy© Z¹Ü‹ü"—"&B»íNsäÏEL²RÄ`+í²Ë.¥ˆ‰‘…&W´1úöG®ô*ælE¢Œÿ1b„E 6ÏEÆ»¦æwH¸ïßM>úh'Jù.k/É—10¿»˜±oC²Ư÷µ­3|̃xă¥ÈÍ”Ïsî¹çVô6v×UkPH‘›¤|‘p¶ äữ)Rđđ÷"AB)²l ³ù=RØ6Ö¦è[sÊççíSX+Y3Ă¼í}·6QFdíW3o$äñûÊ₫ùç½pÂb~°éfĂǹÏxûÍÁŸÇ¸o˜ 8 FZW̃UE¤íäM»9·×ÖöÑÚQí÷¸³¡}¢p ¸NàĂ!Ïf”W/~ñºaú 0`́qÙüÙ!8¾Y¿ ̀á“yÂÁ>ô¹ÚÛêf‰ \áaÓîăÎĂåÂlá°fX!Áe ăư /xnv¯½r)¬(Ÿ1 \æP­C¦µ)íŸàă‹ƒ0B1¾.io;í‹4}°M̃ ¸¾‹3/³Đ‡Zmdn°€‰–øC̀‘Ød“M<ó &¿Ăî *‘ơƒ÷)Ï:èº3ewW̃É“'—ă<ƯqÇ₫Yb½ah„XŸyÿĂ¼çưiT·[k3̀aÖªV¯«ô7E‘u˜â²Øgưúơ«h'ÛgÄƼkˆs† ~̣.E¸Ö̃¾¨--‚j”Xk¨ @8&µÚie4ëÓö¿¸…,%<><0¸³´&áÁ˜â¹;₫|¿_d\ywÄ•‘Âüờ]„~¸Uƒ™Ń¶×Nèh V#îWc²×‹_¼lSüu5!H‹Q­· Œ[œYæEQMĂ‘ø011c†;rñÅ—1m¯\ê€1SM[3lCÖ¾s¨…¹#80|j ÓÖ?4¼¿¼Z|ƒ& Ä;«LÈ´©ÚSfña₫ØëËU¬T&À!^–£%„%ü5B]›©Ẳ²¯A8¹âñëñ3bÇ©–`˜÷(B₫ZM¼· TµZí¬©ƒ7lÿÛÁ́©ÎƘ¢€Ä_#TÏÜE¨‡đ A|£ÏF#mIcZ„u]ÀÍ®Ü{2_r H"B@ü"Đ¾Js~û® ! „€È-hƯ¢È-`,Đn9‡ËØUEĂ0K”wÁŒ%˜0®˜ 0f¦\]UŸQ|-3ïŒ<4Đ£X₫]1`À7lØ°ê èh¡«+&DB@! „@6à#ă¤V ! „€h¬>VYeïî! dëư³7\H3Xœ,>$øH×GA‘½»\ÖÈÅUºÆ¦»[#ÁGí€1Ḱ"(Ï‚³ö¸í¶Û¼µÇÉ'Ÿ,ií©¡»M@wXÄa]"₫”H! „€È|dcœÔJ! „@CÏ&ˆ¨ØÈê#yüMđuñ^²D߇%y$Ü×ÀØT`ór=¼êœEEàÑGu?₫¸ă“@Á¢â" «¶c› 01xN²dơA»!‚~æÑu‚˜L²øh;o‹~E‚Ú3ÀÜ\m°Áø\y$Y{äqTÓß'æƯ¬Y³¼Đ¡|µtéï‰Z(„€B xHđQ¼1W…€(K,±„Ûh£¼»‹z‚6’ÂvQVm‡èM6ÙÄÇùÈ»+‹ññŸÿüÇ}öÙgm;—ñ+o½ơ–H˜Mn¾7WŒd`Qt€† ’œ We푃À`Æ[`s¹¹ÊàªÉB@!Ph$ø(ôđ«óB@!PdơÑv”7̃xăL87Á=úÿïÿåÊê†öûï¿ïû„àC1>ÚÎÛ"_1‹¬˜û¢Jzê)!¯ñ=âÖ't’b{TNưj>°FD/ÁG‹@V±B@! Z„€-VÅ ! „€H ²úh;çă¥—^ÊTĐ÷< >,°9Vj¸è[h¡…Úœ®|€¬>*§Á̀™3˘đnË#Å­=¶̃zë*·øh£›K°ÊÙ₫%kl_Ö[kÉwß}WYHµ_!  ‰€…vuZ! †€¬>*Gê Aƒ¼!kq>–Zj)o ‘GÁ(˜·ïQ9_ơë[̀êC‚Êa‚¼º¹’µGåxëW×!€ĐíƠW_u?P:èƯ»w×U®„€B@N# ÁG§!TB@! ²€¬>*ÇÉÜ]eMđaî®₫ưïç*ƇY|ôëׯlƠR9búUtLđ±`Á‚¢CQÑÿ<6—µGÅPëG#`ÍÆ÷íÛ×ưïÿ₫o·@Ơ ! „€A@‚Π§¼B@! 2„€¬>*ËÏ<óLf\]Ñ|äÍâĂb|Èâ£rê×w˜'Y||‡É{ï½ç̃zë-!²öøn¬ơ­ëP`ó®Ç\5 ! „€h&|4M•%„€B åÈêă»2WW}ô‘{ùå—ÅY Ó8Åâ#/ôƠW_¹¹sçz Y|äeT›ß³øàă;lzè!ÿ£Gn•UVùîF¾ÉÚ#ƒ˜ñ.0gÍå­Ê‹„€B@l! ÁG¶ÆK­B@!Đ)B«n¸Á½óÎ;¹r—Ô80 ×^{mO"Kî®̣hñc ê -´ëÓ§b|42‘ ”V‚¶ƒmñ=6ß|ó¶73~EÖÀ4ß\]ßC‚ ¨º „€…C@‚ ¹:,„€(>ø #vÀ7ß|S¬×è­Y}ÀT:ï¼óŸE%sw•%Ạ́äêêÿø‡·¸Yyå•Ưb‹-VÔé¨~·ƒ€m2ÁG̃Ü\¡iû»Ûn»Íưđ‡?t't’ïµE ;WJ¥’›7o›0a‚ûôÓO³Óđ·ÁÇœ9s¼0^‚ú&{“»îºËåÉ*µ¾+•B@¤ >̉8*j“B@4´ÈGŒá6ÜpC—%ÆvS:_£Đêc̣äÉ…¶ú0ÁG–â|˜ÅG‚›[|ƠV[MÖ5Ư¢ß’à£r|₫ùç̃MWó&ø@ ÖYgyè€ÜÖ[o]Ùù ₫Â¥ßرcƯQGåÆŸÁ«ÉæjíË/¿ôëÖˆ¢Ú|̣É'îøăw(ØŒ7®vbƯB@!ĐHđÑ « ! „€è8¤âóæĐ¡‡êµöи9(›¢[}˜àcö́Ùîí·ß΄Û/|äÉâ«,˜Lï¡·S-ܼ¬=°f\tÑEƯzë­Wy3Ă¿̣híÁp`©·ổKû1›>}z†G¨M77WŒÛ +¬à–Yf™bt¼½üàƒÜ7̃èP°YsÍ5;Q’² ! „€h|4G•"„Û?¬ê@IDAT€)D`‘Eñ.%z÷îíƒS{́±îĂ?LaK»¾I²úøó•VZÉÁL…±ñÄOdÂ%Z^0™p%̣½ïi{Úơo„lÔh³?û́³l4º…­47W›nº©[xá…[XS×@₫́³ÏΕµ'bƯu×ơưzùå—»TƠÖ0àpèøơAÇ;yÊ”)îă?v={ötÛo¿}}•J! „@ Đɲ…àªh! ̣… 7ß|Ó¡₫î»ï:˜ti&Ú˜•¶¶Ç5ÖXĂ›Û£©wûí·»K.¹ÄÇFheY)[±>¾©!C†¸ïÿû™q‡–7ÁVX¼«dñ‘•7G÷µÓ´à_ÿúW÷5$%5›à#On®̀ÚăÖ[oÍMl›.&øàs+CQz0‹ >ê#¬P¯¿₫z·øâ‹»=öØĂÖ—³µ©°³óîæAV&Ïđ‚ ê*’çW`´¥ÖŸ•™d¡–Á™Tñ ë‚^‰„€(8||¨ûB@Ô)‡êúöíëÖ^{m ²₫Ü]›ÆŒ,´µ+Ùi§¼Om‚Bă3üoû›kÖá§+Úߪ:dơñ-²æî*+q`̣Üü­·̣̃îè ‚›Ëâ£UO|öËEèG k¨è‚˜²Ä&‚̣$øÈ«µă„e!†ü1~²ú•ô{i,>X“ؼö8ưç?ÿq/¾ø¢ÿă=à#-ôÎ;ïøóÖ߃nJ³¬Lö,Æ kS&s‡¿ {î¹¾-œÏªươ‰Üô.·Ürn©¥–j (,ƒ3éœ9sÂ*ô]! à#]B@$!€F8‡V_¿h€¥•¬im_w´ëÄOô‡°Gq„{ơƠWSoµÓ8ÉêĂ9|̀5Ë}úé§]{§êțŌ%¸ÆXvÙeËïÙN¤̀¹EÀ¬>.ø@èkö"Íbæu÷¤á=đÚk¯¹ê»¶Á8„¡y <[{ØøÀ%½,> ‘t~²À‘ư> 3há‹’à<„ zêÔ©₫]´Ï>û$'́æ«´“ñlS‰3B?üáå"©ăË/¿,ÿ®öe±Ås‡~¸Ÿc(Øß+¯¼â®½öZÇbÎ;×M4Éÿæ,ƒ@eÀ€ØN—ưB@ÔD@‚đè¦B › tÏ=÷¸^xÁí»ï¾e× Ù́MóZ6ù•W^ézơêå~úiẉÉ'»>ú¨yd´¤¢[}ÀˆÚd“M|œ,87‹/¾ø"ơØz ³ø@đÁXˆ„@-dññ-:y‹ï·ö=zt.­¿xÇà\µ̣î¿Ç|dmb?5"®‡DÉà~éÆoô ÿW\ÑmµƠVÉ stuùå—÷g¬¿ÿưïnË-·,÷Œùbîù "‰~đƒ¸7̃Øơ‰j́}́WÊœÛyä·÷̃{û¬k8»@”Íưç{Îc.× ưB@ÔD ùM\3‹n ! „@gÀµn>ÿüs_ CÛo¿½÷åZ«\̀§aÊb½Ap<Î́†8@CᛀwøÜeăé¹HÄ·`ÓÍïÓ§Ow3gÎôùñc¡Îô¥Z;t]!$øÈĂ(ªB@dÜ+aL@¼$‚Ï&wÉ%—lsÍG\Vq¸ m 6ÔlŒ¹÷æ›oú`ylW]uUï›·8˜N£…Åơ5×\Ó_§>‚̣zꩉV>ø 2dH…0%¬;ËßGŒáµ¥&NœèN8áï‹x‹-¶p˜®•8¬b®?cÆ w̃y繋.º¨¬µVL,ÎÁ99¼̣\¥•,¸9íCÓ̉Ăimo{íâ½…v­\]µ‡”ÎÈbœđîÊ:Å­=N:é¤Ü ̃a’Ô6ŒJ”a6ß|ó¬aîÚo‚ÆK‚êĂË~顇rÿüç?ư9c÷Ưw¯8ewxŒ;Ö}öÙ ÜIưä'?iÓJ„;í´“·°°›³gÏöÏ1ó+ ,đ¬,KĂ;WX”VçPüLÂ^³̃…^èÆŒS.—³\gú̉H›”V!Eäê*‹£¦6 !9`́aÙ =°ZhŒ?̃ûk7o^Eÿ¶Ûn;w₫ùç·zÇ„ ïY!Ơ±SßQG•(ô /›ÿ°½V^^>9è ØA[ëĐCơ^0_JfơuVŒ=‡¬¢Æn±ˆ"h0L´’Y|Đ>|¤µ­íµë½÷̃sï¿ÿ¾ŸkruƠZº|8Ïd ™<¸à)µc±÷[guÊ‚o¯ê0WW²ø¨=*́A®¿₫z´+­f¯]ksîb)aÁƉ£‘$ô &,ăï¿ÿ₫rœ°væG{}ë óÖúÎü[á /|ÆɬkÂ::Ú—xÙú-„€È mßyé™ú!„€Hl¦ÙˆBm´‘ÿc3hbMX°ÖW_}Ơá/&t÷Ưw{&,é ¸¶){ÅWx÷XƠ6Ă>Cô- Z l,?K´ƯC& –"˜zç‘`đă3÷:ŒÅÈ‘#=6}­·OEơÁá— Ábq!ƒ@,­„€†vBí=ßi탵 -Qøô ­HsÙ`÷ơ)â˜à£ÈÁÍ-°9Âû¬Ï?î`pûÍ<[{ØXñ₫V€sC#Ÿ̀K‚›Ăl^c5̉ÙÈnnÍ™3Ç=đÀ©j̃ĹC8Đ7ÎmœÙ \ c 'ÎŃĂ8‹ư₫÷¿wX÷s®‚ˆ sß}÷y+{;çY₫PPa×́“2q·eïw,?°Öo”íK£å+½B +Hđ‘•‘R;…€È,˜?› ­ ÷×6ˆ3î­¡Îö¥‘º”V!vă#í#¤ö !yÎ:묲;©«®ºÊ3ÙăBøƳk´YÍƯÎOúSïC6tEÚ-·Ü²SqˆuÛœ₫¶%¼—ÇïÄö †Ê)§œâăZạ̀Åh‘ëƒĂ&ÏسÏ>[~ö̉:̀ƯUÖX|đS|´Î´ôµË,>°~$8¬¹*I_K[Ó"ÜĂá>Ê:£‘½NѬ=7³ø ÿhvăb±¨{đH±&Øâưbµ³»Ûó駟º[n¹ÅŸ#öÛo¿Dw·±̃ú. R ÈXk­µù´jÖĂX̣£dĂ_-BˆrÁ”•ăj¥µ{­è‹•­O! „@ÅGGMmB ³ÀÜ«¦ƠŒpĂ¾03C­¢Í7ß¼|/̃ùC9Ä›Xǯ·÷›|µ¶´—7o÷±¬Ùyç½ÀgÔ¨Q>đyµĂJ̃úïO‘­>úÁÂUñÂg0SwÿΓàœq9ö"!Đ!²ˆî®~øaQ=¼–u{x¥ù~­=̃uht³ĂèŒ3̉L@%Œm§BçiÓ¦y˘¥—^Ú >¼m¢ ]Aá‹=`Zˆö́²Ë.~/ºë®»6Ô¬´ơ¥¡Æ+±B HđÑPU¤BÀ@Û-!4{0¶ tv?üÜvÛmË«>Đ„¶ØDª¼[l±ª÷Ậăß³ ̃ŸÎü[‚½ă-b‚ă·˜ñ+"…±>Î?ÿü\»; ÇF"A4₫̉çc‰%–đM7Wa?²ôƯ,>`Æ5-³ÔµµëÀ—:1 "º»27W›m¶Y×̃‚xÑÚĂ d_‡‹?˜́/½ô’]Ög `nbñàCn®’„sʤI“gŸÿüçe÷NÉ©Óµ–uF+Z¿ÔRKùXÔÿc₫!ÆÆ\;6̉†®îK#mSZ! „@w ÁGw ®:…€( l>ë¥Gy¤̀`ÆƯ&äl~¡–=ṇ̃`Ô7RO<¿~‹̀´‰':üâÎœ9Ó{́±^ó¿ˆø„V×_½ôX”9fq>̉.ø0‹, 0¿úê+<”¹%‹"¾i:̃g³ú(¢àĂ›gƯÍUQ­=lÖĂT·8/¿ü²]Ög 0‹„ñ l̃v@°ˆFhùøă{‹s”eDÍC ¢[ójPIB@b! ÁG±Æ[½B ‹àĐd.¥”ˆKƒjôÜsÏ9PÏ=ƯFmTµqß}÷y_æIy{́1ï:é®5†ÜqăÆy͵Ûo¿ƯûûE«­ˆTT«|LŸ>=Ơq>LđÁǜªP Z¬Ú8ä÷íÛWE|Ñt°Ï¦[4WW(:“|È!D¯û³ƯÚƒ@ÁŲøè₫9¶€ù9{ölY|„ ßÙw\sÍ5æđ€‚»ú*„€B ]Hđ‘®ñPk„€È!¡Fö¼yóƯ!đ@0bq%`̣ƯwÜq‡û́³ÏÚ C>s¥Ơæ¦.tvÚÉ9̉k±˜¡“ ¤:T`F3ƠêĂœĂôxûí·ËÏ`Ú†1/‚L=p—!ơ"PT‹Øà&i½ơÖ«®Ô¥ĂÚćر̃ªuươ×wÛl³MêÚØê…X™be ê~Øw¿÷̃{n₫üùåX,Ưߪtµ€8h(a)}À¤«qjB@|ÄÑO! „@=°Ù¯×ùè£væÏ=÷LôI~Úi§•Ư*¬œô½zợ´áZóĂÚ¸ï¾ûº¢i¼Zß[ù9zôh7lØ0¯~øá‡{ü‹È”(¢ƠÇJ+­ä`ª̣|§ÙƯU¸Êà¹Â‡ºâ{´̣–¿²‹*ø°ø›nº©ŒÅ‘5kü×#À9餓ễOe±¿ƠÚl‚î£ØÂûPÔư˜›+Z‚Ẹ̀Ë/ßưJQ ˜«(c}üñÇ̃:}ûí·OQë̉Ơö‘Xv‰„€B {à£{ñWíB@dÇw­öG\d“nñÅ÷=ŪW:¸xáđ%Aµ/»́²²EǨQ£Ü’K.é'x¢#„Fä9çœă^|ñE‡[¬ 7ÜĐƯvÛm…´Fđ€´đÆdíµ×ö©Ă;̀kÿµ°ÊT]T«\È0̉,ø0ák–]]Øœ÷ ‚˜€"!P/E|d9¾‡¬=¾›ǻïúôéăÀæẤ»»úÖ°&Y`sö€Z›*G=AÍ9×́¾ûîåóMeªâ₫Âbè‹/¾đ`ñå•WVXôơ\!Đ}HđÑ}Ø«f! 2ÀSO=åH^íïùçŸwo¼ñ†ǵM›6Í[pĐe„Ä’à0µÈ"‹¸c9Æ2ç̃UW]åV^yå²öă/ùK/(Yxá…¹íÆŒăp ±Á8b˜k,3øg.²‚K₫kµëaºĐÅVx½hß—]vY`Ạ́æ駟öØôÑGEƒÁÑêĂâ|¤Yđ‘‹²ø(Ü+¥).¢àƒg…uʪàCÖ•Ó߬>[Åù¨Ä¦»~™Å‡›·¬ÎQ¾â=V́E¥jç)Îu¸L…|œzê©₫‡"œH! º >ºwƠ*„@@øP¯{+ëó‚µ+®¸¢ƯjóùàƒºưöÛÏ»~õsÏ=?‡„Æ÷ƯwßíöÙgŸ6yÂvbỵƒüÀg ¯:Ô ^Â2ù¾̀2Ë”5Ü0ñ/²™ö AƒÜ™gé–^ziÈñúë¯w—-ÑêĂ³fÍ* %Ó6æ&øc¥­µÚÓ€8*0BûơëW~çÔÊ£{BÀ(bpógyÆ[†Â,Çâ3‹$kÊQc,‰Ơ³]•Øt×/Ö$Ö~ÆfơƠWï®f¤²^ö×DAÍaîcËÙ&KĈ³“clVơv-₫‰;>\ Ù9Ê>9_qÎ2bÏ̀ïµÖZË.ùO®‡ơq¦\e•U*̉Ôó#,á{A(¼^­œj}©–^×…€yA`¡èàYÊKgÔ! „@Àâăơ×_÷ÖŸ|̣‰?8px¨GÀ`lvÍ'₫vÛmçî¿ÿ~ÿFbï̃½³C¦ÚˆUÎĉ=“vÊ”)n‹-¶È¬ơÿơ×_{+£3f¸ƒ>Ø]xá…m„m)7­y`BñÍ;×Ưxẵ]]=ÏgWögêÔ©n=öđ‚Jfáa¾+ÛÑѺ̃|óMo½†Û ̃‡¡¥[GËT¾â đè£:„÷¸[au„x¶ÑXfư%¸tÚiܸqîØcuƒöVˆioo¼}0”yW¡P³đ¦›nŕ_Ĺén½ơV·×^{¹¾}ûz+á"㑆¾ĂÜGàÁ{…wÄÏ~ö³44«ÛÛˈ÷$B×E]Ô]}ơƠ¦QAĐ n9̉¶‡l§éº-„€È²øÈƠpª3B@dVXÁm¾ùænË-·t»îº«[guªnˆ:ê(Ï”éß¿¿›7oOÇæÙ„Ä!̃æçh™K¬,à¥6}öÙ^» &Å¡‡êµ0qBE³ú@sWđ®PSØ̀B5 «̃ưë_~Ÿ5‹†VïZA_~ù¥·^ßj«­ZY].ÊÆ2+ =r1œê„F@‚ .„@₫¸óÎ;}EÜdƯ{ï½₫Àa½†ñ¾óÎ;{×8âƯîë³ypx!@!.ỹyç7räH÷₫ûï7¯‚ ”T´Xæî*Í‚„0}³h¼ûÚk¯)¾Gû´6Ñ´&eè‰'đỪ¢àƒư Ïü-·Üâ£G–°3M̃á¸ÅŨÜ]uÿSlcÀ ³º–{Úîom׶À,`p­´÷̃{;bDB@! ²€€Y%µQÂ"p₫ùçû1àbhµƠVóáÇ{C°ö€¶ß~{o~îè_ÓXi¥•Ü%—\âc­<đÀńرWeE¡¢Y}˜àă…^ph*§,ÆnȲ¨ñ₫üĂ»ă†Ö³H4‚ÀK,Q]UÁÏ‹ơÓç6‚Ww§•µGơ0«˜î p^§®¸Ă`ˆUơk®)æ₫Açù}øᇽ"Ö¦¸Ù ! „€È |de¤ÔN!  ‰®°ˆ/anmˆrùå—»Ûo¿½Âú¦ˆb{´~ÛăÄOô–5]t‘»ă;*Æ¡ơ-è̃dơ1`ÀÏXÅ­Ă³Ï>ëµq»ưÊÚMđÁƠ,8—ÅGåxêWă˜ƠÇ‚ Ïœ±Ä4.·Ür™j½¬=jW(øP€óÚXµú.sUÍÛ¢ŒµÇơ×_ï­µ¶Ùf‡Ë^‘B@¬ ÁGVFJíB °œt̉I>Ẹ̀µ×^ëvÛm7oÙu x²X|À u ¸¹ÂÅÁYGå{î9¨¾kjï̃ZâVâ²èf© ̃9pà@o€‹⻤‰BÁL‰¬ÁÍa2Éâ#M³*[mùñ́l–Ùj}c­Ír|Y{Ôkë®»®®Ëâ£6V­¾kŒ‰öƠߢÍ:=gÎwÿư÷{%,`DB@! ²„€Y-µUÂ"°øâ‹»}÷Ư×ƯtÓMî®»ị̂gu–g̀*h^×N |r?̃m°Á ˜;çP˜5ÆsGQ ­>Î;ï¼Tºêhßâù̉àœ¸30g ¬ >ˆó̃{ïùg†¸9Ö8₫ú-j!`|ÔB©{ïÉÚ£}üyÿà¬̃~ûm÷駟¶ŸI)Z‚‚,¨qu¥ÀæßB̀₫ḅäÉ^0·êª«º!C†´{*„€B UHđÑ*dU®B@ä\M˜0Á»›9s¦;î¸ă܇~˜Û₫†+’Ơ‡Åùxæ™gRçê1!΂¸¬ >đ¡“«)\fĐ‘h¢>¾ñƬ6—µGû³&û*«¬âc´Áx—»«ö1kU¯¾úÊ[X#ŒZ}ơƠ[UM¦ÊEwóÍ7{k°˜¯"! „€YB@+W–FKmB@Ô @àËqăÆùàó·Ưv›|ºZ}œ₫ù¹µú4h·F@¨5cÆ Ï¬OÓø"€ËªàŒ¥…^8Mª-B (‚‚ C=zôpXHe…díQÿH¡P°öÚkËƯUư5=%k̉«¯¾êÇæ¾âæ9÷Å_¸iÓ¦9Ü.½ổnøđáMÇ] ! „€h5|´a•/„€¹E`§vrÄü€ë±ûî»/•–Í€Đêc̉¤I₫PœGW_Ë.»¬CÀäÉ'ŸLmœ¬77‹|¨K{´ÙOgqÊ+àĂ›:4Sƒ+kú‡ ‹ó!‹úqkfJu6gMBÀHœ¯¢Ê<5_l±Åû]„¯"! „€YC@‚¬˜Ú+„€©B`ôèÑnØ°a₫°|øá‡;‚6çQ½(Væî*‚n‚,Ñk¯½æ„ï‘¥QK_[-¸ù‚ ̉׸&¶È›gÉ·¾¬=›ç«8o »f¥{â{0 lî¼¢kơc=æ~ô£¹}öÙ§YP«! „€]€] ·*B@¼!@pùË.»̀»©À%̉₫ûï_ˆà¤E±ú°çO<ñDj->²ăĂ\]Éâ#ooÄ®ëO,>p5cŒđ,Å÷ÀÚăœsÎñî×_}·í¶ÛvƯÄÈ`MfñÀ‹8bMˆºÖ$°gMR`sçc‡]{íµ^´̃zë¹t퀨6! „€MB@‚&©b„€B ¸àéÊ+¯t½zơr?₫¸;á„Ü—_~™{@`ơà¦Ô;ï¼ăæÏŸŸ*k´0³ă†₫±’ÅGî_-í  >üåơ}‹¶ơ7ß|ă~øĂº₫ưû·ÏfnÖD¦ƯXẸUG€5f­µỌ̈k B£™3gVO¬;-AÀ\]1 lîÜG}äˆ_‡eé₫‘BH! „@Và#«#§v ! „@ª ö™gé=A&Ó₫óŸÿ¤ªÍnL¬>VZi%‡Kw¸œ ™Êbps4jy.À³oß¾ñ‘–É”Áv˜àƒ¦ÿë_ÿÊ`Úo²¹¹Úd“MÜ /Ü~†¤µGÇ8 ¸XẬ@q>:†agr±.¡à€ÅGÑŸ}ö™›2eûøă]Ï=Ư;́Đh•W! „@·" ÁG·Â¯Ê…€B OŒ1ÂñƒjÔ¨Qnúôé̃ƠGúïK¬>p1ƒK³´ÅùÈ¢Å>ÔѬíÓ§[|ñÅăÓI¿…@Ư,¹ä’á+”wÁGVÜ\ÉÚ£îéÛ&¡¹»BđaîÍÚ$̉…– `Ö_ưµ·ºa}*2YPsÖèƯwß]ku‘'ƒú.„€È|ä`Ơ! „@«À¿8BQưŒ?̃m´ÑF­W„ óæÍK•{¤ú{R_Ê"X}¤5À¹ >në¨,6G³Yñ=²0béncœĂúé§ưd%°¹¬=:₫¼ ø –‚,>:aGs‚9ByÖ¤̃½{»%–X¢£Ee>–//¾ø¢{á…|Pó=öØ#ó}êlØ_áN1+û¬ÎöWù…€yC@‚¼¨ú#„€h|đ`ô‰„@g0wWy´øxöÙg.gxN6ÜpĂÎÀÔeylZlO´øxå•WÄdm»Î&EđaÍ‹îæ Ek®¹Æ-²È"ëk®ÙYx3+ {î¹Ç»æÜgŸ}2Ư5^!PT$ø(êÈ«ßB@vÀ]o¼ñ†Û~ûíƯw̃éL,jÜ$\uƠUŸƯÓ¦Mó±?Đ„Í+åƯꃠ³ÄÓ€9’&!`²øÈë[ {ú•gÁ‡Å÷0`€×¼î„«ơœsÎñV¢ë¯¿¾Ûn»íË\đÔ&ø˜Ḯ½D]ƒ€¹ºb ,øÀ¢!̣Ưwßíß9bô;·`Á÷ë_ÿÚ?“æZ±kf¥jB@f! ÁG³T9B@œ!€©?›íæ¾÷̃{»‰'æ̃z¡YĂ8lØ07f̀¯5wî¹çúƒdc7«ŸVN­>`†¤ÑƯ•7çù̀ÁTÁ &S¿~ưdñ‘…AKy‹ øÈJ|7ß|SÖx^Zh!·̀2˸VXAî®:cG²†®®,øÀẤÆoônV\qEÇ>¶ÈôÉ'Ÿ¸±cÇ:6p«x̣É'ơ]!Y$øÈ́Đ©áB@Ö#srêÔ©^s¦åÈ‘#ƯYgå!­¯=û5wÜqnÇwô~£qyơꫯæ6fJ̃­>̉*øà)É««Ù³g{×=´y•UVQŒ€u < >°.ƒ²"ø8í´ÓdíÑ©Ù́¼0Øâ|(Ày'Ál ;‚·ß~Ûă_dÁ{ X“¢́Td bđÆz{©¥–r§œrß·40­”T! R‚€)5C!Vzôèánºé&wàºE]Ô >:è 7₫ü´695íBƒs„ níµ×öÂ"Ü;%¯”g«|đ3-nË̀Ơ1d²têX{đNéÙ³§üÿçơEĐ…ư2ÁîḤDı>c(í„µÇ 7Üàˆq¥Ø-¬ Mđṇ̃Ë/w¼ å¬Ö¤×_Ư}ñÅ^ß·oߺóæ)!ûGyÄyÇt÷ƯwÏS÷î ïßc=ÖïS†êöƯw߆ËP! „€H|¤cÔ ! „@ªøÁ~à.»́2wüñÇ{M°[n¹Å >܃äĐ(ª.Ă®¿₫z·́²Ë:£F̣́ê9²{'ÏVøÙç9€9BĐa4D»›LđAđMÚ•v²øhÔ~ï{Ú‚¦}¼²Đ>Ü@y nnñ=°º́Ơ«Wê‡k\9*¶Gç†Êâ|°¾HđÑ9,ëÍ ÖåQTáYC0_DÂÚc̉¤I^x¹ơÖ[;\]•̀ÅỜ™3ỰË/ïÎ?ÿ|íY:Ôo! r€N¹FuB!Đz8bêMœ´lŸ|̣Iï‹Ï<Ç®h²ë¬³»ø⋽Å̀_₫̣wÉ%—8˜Ơy¤¼Z}¨~àÀ̃FZæ¼ >˜GYpw…»â{äñ©ï¾>™ÅG^YpsEܬ= Y{tîYø₫÷¿ïÖ]w]oÁ‡ÆỹæuçĐiMnÖ¤Y³fÚÍ̀™3ÇƯÿưk"57WœupqE¬>\s„€B »Hđ‘Ư±SË…€Ư‚À{́án½ơVœ÷;́°ƒÜưƠW_uK{²Rén»íæ:ê(o5@€Ä‡z(VÍÆ/ÏVæîJ‚ͳøXmµƠ¤=Ù1•+†€ >₫ưï§Æ]¬‰úiY|œzê©^ùMÛm·]‡ú«Lß"€‚Iï̃½–¢X"(ÎGëg8#”Ç q5Öh}…)¬Å „—`±êª«º!C†¤°•]Ó¤¸‹«ưöÛ¯k*V-B@!Đ2$øh´*X!_6ƯtSô|đàÁ>vÅ{îé-Aˆ5 ªÀgœá¶Øb ¯ơÎa ÁQb3TïQ̣Đêcܸq¹aHàcúôé©ZáOß\FeÁâă7̃đsÁ.]DB ³˜àƒṛ¢ÿ₫ûïû˜ô)í‚ĐÚăôÓOWÜ­“Æù࣓`Ö‘kàÎÚTDúôÓO},?¬=ˆeaû¢a!WEqơW¢ ÁGQFZưB@4|O:Ơkx¼9r¤|æ­(ÜX\sÍ5̃l&Ư₫ûïï8pæB«ë®»Î½ûđ èƒ9̣ᇺW_}Ơ3ñ»{́–\rIÏlä¹K³íƒ>pï½÷o£,>º{Öä§~\‘đ¾̣"øxøá‡}ˆ5vF¬Y{àiÇwôíÖ¿Î!Àhß+ÎGç°¬'78Ï=»°®®ˆö׿₫ƠïÓ–^zi¿¯Ụ̈–F.®̣6¢êBà;$øø }B@€1sÓM7¹<Đǯ8묳ÜAäæÏŸß`IÅI†̣µ×^ë`X?₫øăî„Np_~ùeîÈ£Ơêq…6dÚÜ]¥Ưâƒà±hÖ ~…V(¬FiîôtȬ>pQ’27WC‡MuwBk¬qÓ$ê<²øè<†ơ–ÀôöÛo{ÖơƠW_½̃¬¹IÇ̃ æÄ1CxYÔàîrq•›)­! Ú ÁGHtA! AFæe—]æ?₫xñ–[nñcÆèl¤¬¢¤Åẻ9çœăpUtå•WºÉ“';´Ị́DyµúØxă–;O<ñ„÷kßƯc†k (í–V¼ЬEƒ}á…înØT0ÁG^,>Lđ‘v7W§vÊÚ£¹“Y|À”G¸ôÙgŸ5·•VFÀÜ\qµ´hLÿo¾ùÆ{ë±Çs?úÑ܈#ÊØé‹\\i´ƠW! ˆ€EuơY!ĐdĐô<å”SÜ„ L(´á r­ø&w·)ÅrÈ!₫ xÔ¨Q¸ÂóDy´ú°8i™Û0+x₫²bñ!7WyzÂÓÑ—< >p;óâ‹/z`Ó,ø€!À’µ‡‡¡iỵ̈̀¥ÓrwƠ4hÛ„0̃â{¬·̃zmîçưûÜ‘•Ñ€̣̃å6ư“‹«6è‚B wHđ‘»!U‡„€Ư‡À{́án½ơVGüwï°Ăîî»ïv_}ơU÷5*Å5?̃m´ÑF>ø7vóæÍKuœ†F¡̀£Ơ0 æ̀™ăpĐƯq5ĐRÍ‚à­R³ø?‘hy|à₫f7ր믿~³ jz9²öh:¤"ôXk­µç£•æÿ0‹Ö¤´ÇÓi~ïûè£Üm·Ưæ­]öÛo¿VT‘ú2åâ*ơC¤ ! :€†P! „@ˆÀ¦›nêƒ÷;{›8q¢ûüóÏĂdú!s ßÊË/¿¼wiH̃pÊ›ƠGï̃½Ưüc/lÀ% LÊX| U “IƯ9[̣Ywææ kZ]ÂÉÚ£ơÏŒx p₫̉K/µ¾Â‚ÖZ|-¾{Í)S¦xáGÏ=}|¢M¹¸*Úˆ«¿B@ >:̣ê·B …`ñ1uêTïî ø‘#G:Ÿ§=A !©ZtŸ>}ÜUW]åKN›6Íy晹²É£ƠÂ=â|¤ÁƯ• >x¶ºÛú¤Ú$Çâkîܹ^đÁ»AỞơ € ÊCpóG}Ô÷eÈ!₫3ÿdíÑúQá‰ë%óruƠ:¼ÆcŒ{±5ÖX£u¥°dö ¸«[|ñÅƯn»íæ?SØ̀–5I.®Z­ B@¤ >R7$jB $̣¦›nrx [tÑE½àă ƒróçÏÏG›Ø‹aƹ1cƸEYÄ{î¹î®»₫?{ïtUuơÿïßtb›±¡cC5¨QTàU[E¢ØđUDPcT4FQ[° h́XA±+“( ‰ØŒ(¨yc0́e,Èk‚åu2sÿû³’us˹÷¹åô»Ö̀óÜvÎ>{Ï>»¬µ¾k=–:“ Âæ¹¢±>²”à\ YÎñAbóï¿ÿ^X2Ư»w%S”ưËÊjoÂø@ɽ`Á¹™YÍïd{Œ?^éöî}ñ´>ÈøxóÍ7JZ“hÀQ€đ¢Ë–-c|;…º¢?‘KèƠW_•¤æ0³ÛM,ÄU»Ưqk¯!`´3føhç»om7 C fˆS}óÍ7»sÏ=WbϘ1Ăzè¡EhÑy· å˜1c$Ô‡„¼úË_₫RŒÆúĐ<‹/v_}ơU«·¾¥óóbøày'L̃¥&†@”Åđ±hÑ"·bÅ 1 öíÛ7Jˆ"++Èö2dHdåZAÀđ±í¶ÛJ_øöÛoÆ“hĐ0W”sÎÆoí2\l»ï¾Û±F‡]Ö³gÏ ×6úªYˆ«è1µ CÀÈ2føẸ̀Ư±º†€!PH¼|ÑE¹Ûo¿Ư¡ "<Đ Aƒ2&(Kđ‚¡́`Sz̀1Ǹ/¾ø"KUl©.Eb} $ ©8“´Ă]å!¹y0±9†=C JÔđ’°jyÍïÑ»wo_²Öc{${GÛaÈY¸«xpÇAIL¬ÁÚA`º|úé§Â,¦±6k'±Wít·­­†€!`ü Û}ZO0 CÀH#<̉Íœ9ÓăŸ˜Êƒv³fÍʵ¢*jàÖ^{mwß}÷¹ 6Ø@âzŸqÆî›o¾‰ú2©”W$Öù=₫ë¿₫+y>̣Àø&6GÉdbD‰€>(…^^E Y seld{c%y>₫ùÏZ Ç ûœÛ)±9¬2ÂĐÂ$Úl³Í¡VÛI,ÄU;Ưmk«!`ÿBÀ Ö CÀ0C€¤Đ$=ïÓ§°ˆ+|Çw¸¯¿₫:±:dưBÛm·»ñÆ%ôÂC=änºé&Éơz×S¿"±>²bøÀcI;äV­ûoŒZèØo­"°îºëºUW]UÉs‚óùóçK²˜ØÜØ­ö̉ÆÏWÇ1>Ç®3À£|»%6'kKœ&>úh wU^E8ÆB\á.Z CÀh3|4™a†€!Đ0>0~î ÊưèÑ£Ưå—_.†-Ô©‡~¸;ưôÓeCzÁ¸gŸ}VÂ]佑Eb}h’ƒ¦^'ëŒq^„!y¬1>̣₫g¯₫„¨QÖG^x«Ñ†±%kbläïcåöÛo/cçÿüÏÿ$_‚_‘9 Ă8·Kbóï¾ûÎ=ÿüó̉nœ&`b·‹Xˆ«v¹ÓÖNCÀ0VFÀ +cb߆€!`ÄŒ@—.]„j?räHa6L˜0Á5Ê}̣É'1_9?Å?̃í½÷̃¢ô1b„(Q"ç]Âú ÿj«­&¡È.\˜aJ °¦²Ø?̃{ï=IØL¿Ưj«­Ä»6ï}ØêŸ=̣nøĐ0W[o½µÛd“M2°±=̉¹jø`\_¾|¹c,5‰X’äQk'Æl©®¾úênÿư÷w]»vĐŒ—d!®2~ƒ¬z†€!`Ĉ€>b×6 •`áÉæ ïF²˜ßĂØé)a®9昢7¹Ü¾¬‡¸‚‚ñ{èĐ¡®{÷înÇwt}ûöu'x¢›;w®äù)7&7äz÷Ưw;ưûàƒÊ-•Ở2Øó+›±̣ûl†@R˜á#)¤í:†€! DE‰_|ñÅÄsy¹ lPÚAùÏÆ₫¢‹.r·ß~»„*AL¬4ÉYê#(óî¾ûn·Î:ë8â¿;6“ÊíF1 ²>®¹æÜA³çƒpjLÀ›3k¬ (™óñ¬51â@À q êœ±=âÁµ̃R1¬“àœ1Ô ơ¢ÖùqàÉܾ={öl‹Œ¬xàéK„œÍb.¡Îï\ăGd9Äû¼E‹9‚¸<̣ˆŒ¹¯¿₫º{ùå—Ư”)SÜ~ûíç`É_wƯu7¾3¨C広Ɩ[nÙéßæ›oîȱExÆJ㆖ÁŸ½¿‰!`i"`;Đ4Ñ·kmˆ^Ul4z&+#óÏhp7o^[‡ˆ3¢»àÙn‰Ía OŸ>]ÖÇ{lÛ8" ?û́³ÅAd=öpÇw\t©…’08üùÏv;ï¼s‡RVYe‡A§îƯ˜1c\”óŒœf`—ï°Ăz)yUg_Vù³g5Ь…U)CϱWCÀ0âBÀ q!k冀!Đ$ß~ûmæ”—M6¥¡Óvß}w7gÎקOQà6̀ƯqÇÜí.ĐƯÙ¨²A!é9›‹¼3‚Àú )â„/^¼8•{B¬neRd‘ñB%Écµí₫<[û£G€p@H¥×iôW¾D’ #„ƒËR’ec{D¯-‘ùÅ¢Öùñ¬Ÿ̃|óM™¿³ồu^óæøæ›oÜïÿ{q2Yo½ơ$¤Rs%åë¬,‡¸"§á(€²6‚yKÇ&ÂCQwŒs½zơ’c00°"ôU”ÂS+ÔÛÆóÈcG]ôg‡¨ ?ÿùÏËUaî=üđĂËë`5¨`l‚Ùmb†@˜á#MôíÚ†€!`„ €"S=eđüÑ÷!‡î+»Î=[Â]A½=z´»ụ̈ËÅR¸Æ6Ø hîưúơ“°PA>₫øă\ÈÀúØ`ƒ \=D¡Ÿfè¾µ×^[Ɖ,>–.]*a”Kl°M 8È3ăC›£ Ể|?~üxaœÂ82dH·ÍẾÆLđg=ôÑG¹eË–ur†ư\ăa#¢pf/º°6 ©9¹É>ø` Tô6g9ÄÏ3÷¶3B’yØAsë& ăG}´·|ụ̀ĬƠasPư#t)Œç_ưêW°\*gØ› ›nº©{íµ×Ü3Ï<ăöƯw_=Ä^ CÀH3|¤»]Ô0ZA`Åî{î‘|Đ—/¾øb‰‘Ê‚«3á\û½úꫲĂS›(œ_« â+s-®Éß½÷̃ëX„† ̃dP“ù½g¾£ái₫ïÿ₫Ọ7<÷ÜsåœK–,©YFصó₫±l¡ă9̉­±Æn„ nÔ¨Qï¨v bô96xâÂÉ;¦¬ w•f^ w•5ĂJºO?ưTÆW6̀Æøhç,̃¶Áđe“VÑfAQ`É’A¦Ơ¶åé|ÆLbí3Æ£¬·<ÑÜ=¬)1,¡Ä-²°¯a/•~Ô.Iͳâ¾Æ³¬FLrdœw̃yU×G0t.¼đBé¢́UÙ3† {HÂ#Ă”ÿĂ₫à}ôṆ̃5‚dz÷äÚRÊd¿Êú‘=r˜pL˜0>±'QẰwß}'a¯ôXŒOD1 n*”Å̃…kê÷¼üñÇƯ-·Ü"á|çªíµ{5 C Viä`;Ö0 ´Àû̉¤I+-üؘ#ĐqwÜqÇĐäùçŸïn¼ñÆ•v,ØÖZk-Yl±è#ÇMˆx»@A¨¾DH@­Â“…,†¢»́²ËJ̃ÎtP–QhăéC˜'=GËÑ ÊÓO?-‰ï`€´ƒüà?p7ß|³Ûd“MÜƠW_íÈ{‚gù `…´«µ[·n’́pèĐ¡î‰'6̀%—\âÀ+¢¬SO=Uîí/~ñ ¹¿yR²aø %Œ6³iŒ¤Ú†8:qMÍïAÿÄ“±]ŸÛ´đo§ëªáƒđ ßÿ}nrˆ¡€UÙ,>Œí‘§‡u¬’ “çcï½÷ÎNårXæé7̃xC¾O!‡Í¨»Ê(´Y;cä!lÚN;íT÷¹y=y€Üx„ eỪ>"KëÖ¸ºŸĂX°`Á÷ÓŸ₫4nÅ!Œ½*k=œH‚Â|G3˜<•B› ¡…C¡Âh‘p\ĂØüùóe»í¶Û6l\å0‰5ªđ₫Ưwß•½4¿Ëåú́±iËYg%Fu5́p Ø.Áºêoöj†@£ă£QÄ́xCÀH Aƒ9mªrÄo‚‹Y’ıÀ«dnp. ß0o–xÀƯ~ûí¡¿a!é[ĐèO¬€A"̣S(½—ï`*¨̣–ºTó–áXÊë,L°<Îi?ĂÜ”Z¸izÖg÷.«­¶I_Ùß³PÏzëwÖÇ®»î*Ïïûï¿/¤µơz1iô¸¬2>0| db£N¼gC .ÔđAù°Œ̣"LñÅ‹,ˆ±=²p₫S wÅXjŒÿà̉́;pÔÄæ°=̣ê8Roû¿ụ̈K÷È#H²́¬$ö®·îͧ!®Ø;À¦¸à‚ ÜV[mƠLQ±Ă₫F×D0"fÎœ){Ie@T^ĂÇư÷ß/aÁ¼Îq´ =Økbt ù˜[”aRY¶~fœ †Ú̉ï;{oöÊÏR¥a­Z¹°<.ºè¢2›¥̣:0RöÙgc~TcŸ C )̀đÑlv’!`$À¬Y³Ü+¯¼" ® …÷óÏ?F ¿#8¢¼ya¡¤^­<—đ ĐlÙüÜzë­²0f‘4 p,‹ü ”«ÉçđĐÑ„ªùË_$t;†º"t¡·®½öZñ„¡<É1ÖpíÎŒ#^7/Çy䑲)Øf›mdq=xđ`‡²¿Ú!/íj¥cÆŒ‘}–~CÿË+-\YrđJ„Ù“†ñ ÙûÑÍ{¢te#K˜4ŒPjøб¤Ù¶D}2>xvÛuüS+/¨")O Î_xáiT­x “ûÖØÉa]Ï•;5Á9Œ“Ö`­¤‰Í‹æ½Îï~÷;‡ñcĂ 7́  o Ǻ]âjĈ™«,kwe`P9Œgy¦„"ëß¿¿»ë®»d-\k=I?&„Ùi§&íƒAÁ₫C„&FWûVØ[ˆ4 ²Å[8ö̉D“°ư1Çqίưk÷ÔSOÉìa•ŒÖóê°V¶Ö›ư3û:ö÷*°Y‚ơÔïíƠ0 F0ĂG£ˆÙñ†€! ,́0t „ø9à€Ê¡,đ0yøá‡e±¥‹³¹sçÊÂăƒç2 E: …ZL> ”®•câáª!/jơÎ6Œ‰(öVæá¤[©‰Í³æ*Èö€a ®&é"ÀØI¨+Ut¢l4iœ˜›XoƯđÁúg/Âù~øạ́Úk~ÂĂ"₫ å „~͸£??”ơÁWĂSa¬èƠ«W‡HZ^ ÙŒ³auơ6>ëvÊPĂ å°gÅQ¯ëM[q„úñ́nºé&)‚=8ëjCÀ0ZEÀ ­"hç†@́°Øc£‚`€`aæINˆ 6Ø@[ºt©x½Ïe1…¢8¦ƒ÷Ưw_ 3!'₫]qÅâ%ÅW0/T©8Dñ,ÖT*'ú}³¯…Éj¶Ü›ÀÊç €Ÿ@IDAT7Ëm̉<„c“˜´0váá—%Æư ;ă¡…ºJºG´çợfø@!É3‹âp–i‹±=̉¾Ơ¯‡6ÆŒeîª:NơüB8æ& J•ayê9?/Ç°™6m°0¬’äºÈ’‡Waø³§%̀á®Xÿ2/ûFPè·„-Ă€ÅºJ×¼ÇØOààaù»₫úë¥ q°Å`mà°ô®Of^éX¬å{eT~oŸ CÀˆ3|Ī•i‘"@nÍç°ç{– •Á^½I\ˆ÷ñOyE0NT Û]7ø D”˜œ ËD *•×äóÀEñ̀{3|€B¼‚7ĐäÉ“ƯرcÅX5cÆ w衇Jè‚v4:¾ö }”$Ï>ûl™!ô<³>Ø b|@)ơÇ?₫1ñ<Yd|è̀¸JbQ›£í5V!đ̣føĐ0W;î¸cMÇ‹ÿ´0̃wÆöˆßVJG¡ˆssŒ%8oIđ[¼x±àÈœD¾ƒ" {U†³6!j‘%O!®jƯ œ̀0+`viâsùc/<₫|‡³¿©|öÙg’¿…$çúG>Ä¡C‡–óoè±¾’ÿG$úTå{.ÂgU²6ê¹e©ñ¦ăíCÀ0ZAÀ ­ gç†@"_”Í BœÚ "X’€³BÔÅ°*ĂwÚi§ªù2 ë¹œ|ÏçẒüóÏ—½ÓÙœV«_ejX©ü̃>wcJ;Ê.”̓ JEéÜymă?…Ơ>û́#}Do¿ưvC}8₫Öw…¼²>xîñØæ5MĂ›ÈFÆ®úîJsG½ơÖ[2no¾ùæ…+̃BvVÔ¨á£2zÔ׉ª4ÏG γÈø y,t’Ç2q#°ÑFÉ%̣’ăC“¶f!¿‡±=âϺR(Au­ÛZ©íw6¸µCbsØç>ø ́ƒØé>¨ˆw”ơ?¹*I”;́ï½÷̃ƒÆCÀ0ÚÛ‰¶ă]·69FϘjÔXW*{ƒÉÁ‰—M¥ $c_½§?₫øăĐđ5œ‹a„ë ã/a,ÊV&Je}́sć¾ûî’°¯OŸ>̉7ØäÁasĐN‚·óƯwßíÖYg¡ÂŸw̃yŒyyÁ"¯¬ƯvÛMŒÄgNÚđ¦aªiÜ{”K(™,¿Gè·ç5•ñ‘ĂŒ(ÍMÅØ‘¦Û#Môë»6†rz±ÆdmCÿ1ie|€'Fù" a‰`“n’µA‘“ç5ÄÆ Íác…ơR-aÉ^¥tà ƒƒÏœÏ6̀¡ßpú[wƯueüÀàbb†@;"`†v¼ëÖfC #„ª¶é¦›–¦±đƒaQÉÀ€Î}ÿư÷— Gq„x:m²É&åsY’’…`P†.^̣Áïxw ^6‡0e qXu!I‚t=rº c°hU¥‡\ Ê¿z1ªrzÛ|½ơÖ[»Ù³gK¸+p'çÅe—]VƠHVT``Lœ8QR·̃z«{àVêïYo{^Y½{÷–Pz<ûŒQIzäf‘ñ¡¡®HkŒ¬?uŨ_ ß–ë”4ÅØi¢_ÿµQ^oŸ¹Ạ̊|Ô[đH°Ă PdĂlûî»OÖ„¸êÚµk‚¼g/kG' rÜ1æAÖXcrø1ëößỵ̈₫µ²₫Úg¯»î:ù ă'aŸY+kø+½ç•ç†9́°Ă$4F¢`^=–̣ÔyF¿³WCÀ0†€>vG­=†@`1F²̣jää`AËBí̉K/uë­·´ÄmwÜq‡x½á½…1¯â÷ß¿ü»‹Â ÏwÅÈ a(Á('ûöíëyä‘Pm⪲¸D¸Je6L\n¡7ß|sy±zÆgˆ·=Ç“°“‹âúë¯w_|ñ…„c¢œ—^z©̀áø &S§NO<¸Lj#Đ¥K7}út¡³©¸̣Ê+å}=¦Ú%çëW p$Ä£ ĐË/¿œ;vQơqíµ×–sèdùNà…GRJ*IçùĐœF•¹̉ ă#¡ç+1|€‰‰!7jø /X¥sDÜ×n´|5|¤æÊØ̃¹ôgƠ<føhî> ,'́{ƒ"2>˜s?øà÷‡?üAœ¿I:Ư²ÉŸ•ÇẀlÖç*́_ÉĂÁ’v±Çd=·páB÷³ŸưLöŸ‹3\7ŸÇƒóƯ=÷Ü#E|ùå—nôèѲ/¥À!„3e§×Tç< öÄ$SçÚ&†€!`?虆€!,y…,Èëúó ½’_Jư|H£’_¼Ơ<ăư¦f¥ö4r]¯°+Ÿ¿xñâ’÷ƬyMÚâĂl•¼Á¢|o¼g^§çQ_¿0-yĂJù\¿-m¼ñÆÎ}úé§K~qZ>Æ̃TGÀ/úK̃ƒµ¶Üoh*yƒUÉ{MU?©`¿Đ½B­ä7÷¥îƯ»—üF¸.yŸø±´úê«—¼«äĂä¢₫ăÆ+ùXÚ¥Aƒ•|X½Äàö́’g}H÷†¾Ä®[íBï¾ûn¹>K—.ÍŽ«Öû>?|₫ùçåy“1¯3y衇äø=ztvhä¿{g ¹¶w∼́F 1b„ÔĂç°ç´àR8Ö;À”˜cX{ jïK²ô é﬽|¾R{ÚtÖYg•¼‘¬Ä©¨ë^oÜ.zê©%ÏV(m¹å–¥%K–„ ‘í¯ØÓy¸ôÇz÷Ä́ƒ{MpđÑ :-ƒư(ăGPX§¯Ë~ya¬¿qn3ưHË`¼¢/ªTû^ââK½®?Ù«!`M#`Œ?ª›†@rx…~9ôT=WÅ«E½…ñ¼êª«Êá¤*Ï?úè£ÅË—J™3gä ùxPüæÇÍ5Ës̀1åêÁß½BDB Ô¢{£„;î¸ăV:ßM±»ñ´©Ρ-JYæU…–xă±¯¥Ù¤>À– l!<¢đ¾÷èĽđë«m–̃Ăe¥"w彄BL¬TŒ"ü…6‚'SGlºPHo°Áåë«|O;QR~ĐRyœ}®Tïă?^îáÎ<3GŒ •€ê%äû :T±;Ö]rÉ%+m~²Ü»îºËy¯>Ù„½öÚk\.ơ<ăiµé³Ï>“°{ŒMÜúôéS׳̃j} G€¯¾úJB#`8Ơ±­Ơ²›9̣äÉî́³Ïvä=¡jÈÀfʲs F@IB̀tÈ¥UKP’¿‹yG…¤„đŒË(wªƒ\ÛÊ:u.íÂ(@›x¾™Ÿê1̉qÿq:ÁB¸_¿˜;Ûï°ÏäÙ`͈“ÍyîEVwCÀ¨†ÀÊnÈƠ´ï CÀÈ,âP(Ö+ÄQEùÆy?₫øJ‰DYđ‘ø/¢^½zU52°mf“‰±£c¤Z;:[¬V;ϾÿxSÁö=@N—aÆɦ…9.$¶$á#I“&¹w̃Ùưä'?éÔX—\¸o×\s(xÈơñ«_ưªƒ·[Vê©ơ€QFÜpâ2£t@ñŸ[‹M®:²Äø ÷Rzí5û ́Áđñ駟f¶²ß¶GZJ&Ø°”ÁiƠ#³7)ƒă¡ÈD™C @ͬI3Ø´Dª¤Œæ¤"æ÷`/sÿư÷ËÚvđàÁ…4zàt6qâD1Twó¹.®¾úê¬1XÇ%€¿f'9ö°ü5"¬Ù§†€!PdÇ,̣Ư²¶†@S@å…æË&ĂF<]9äQ”đƯ)§œRNP®ÇØk¾€%0{ölñ ĂcCØe—]&Œ¡|·¬¾ÚŸsÎ9B£gsCÈ+<›é÷yŒ¿øÅ/Äûíî»ïv}ôQêaœ:ĂÍç”Æe—uvN¿ăˆb, †Âø dB¹¤™(Úhe!€áɃá#ÍÄæ—^z©ŒO°=0†›ä”öàÜÂ]5vϘ“đˆgN*áƒ5Ïà^xáIjN˜«¢IQB\í¾X{ CÀÈføÈĂ]²:†@Kà¤ñBO8á÷Ă₫P ‡z¨„`Á‚9è ƒ„"Ü̉íä̀!€‡äôéÓƯ¨Q£ä₫^yå•ÖÁE”áä;ÙvÛmÅØ‹bÙ²e¹iv0×́Ÿ 1ÓuWĂ1¨Q´$%>¹¹>³•¶`hFcŒ´ïDû]?ë† gÂIËđalü>>0V1·à̀cR?`Fß/"ăăûï¿wwÜq‡´₫»·hB̃&Bh²¦%7¹M CÀ0 z0ĂG=(Ù1†€!k;́0wæ™g–“¶‘«ă–[nq¿ùÍo:°?PÖ…åöÈuă­̣eFîóÎ;OúẦ™3%κ*iËđ l’’_/QX/(ạ̀ yc}h‚ó÷̃{Ob-'•JM“RbøHêaư‡<#ä4¢™ñ†’}m´‘ƠäæDq´ ´¡đ̉e{l·ƯvÆöHă´pMc|42"¾₫úk™“ºwï̃\A=kÅîÁ”µm ÁW„{+Rˆ«Œv)«–!`…BÀ …ºÖCÀ¨†À¸qă$Lár?üpavÀî@ N<~(éLbä¼€g0áˆH€›tX¢4PFÉuĂ 7ă塇r7Ưt“ĂK0’'ÖÇ–[n)}‹¾6õ¼ÄÂ])ă#íPWäKBÉ„ÁÜFføÈĂVœ:fñ¡ù=`†%‘ÿ§̣Îâñ±Ü•èdÿ³2>c1®ch6éđÂÉ…yă(N Eö/$øÆဠƬÛ×]w]YĂoµƠVEj¢µÅ0 C f̀đ3ÀV¼!`dµÖZË >\B=öØc¿+®¸Âí´ÓN¹Iöœ4ó]“#<̉Áø q‘II 9d‘åˆ#¶ 7 @Ï>ûl¢á˜Å6o¬Ưwß=ñ<Y1|h~ É«®ºj³·ÜÎ3B /†´Â\Áö@‘ˆ!œüf&ùBC2yËH„lá®ê¿w`…ᣈa®X·̃yçbH…áÎ^§Hb!®t7­-†€!`¤ƒ€>̉ÁƯ®j†€!2(§ç̀™ăúôé#¹/† &e„B(²Œ?̃í³Ï>â•?bÄ1ü¤©^¬óÄúH#Ï¡®đfM›ñẠX¼k-¿G½=Û‹,>P¾¾ổK̉Ü4 Æöˆ²§¥WervÑŸ,Áy}÷A ”Øœ¹–\//¿ü²#œ+ëØ"‰†¸‚Ij!®tg­-†€!`$‹€>’ÅÛ®f†€!!đœœ={¶4hÔÜxÄf!At\0¡4™6m#Tt?̣.#O¬ÍóÁf=)l³ÂøÀđ’ å’…¹ë)¶r«! †åË— ³¡Úqi|ÿÚk¯‰a’çăh̉bl¤çzÁ<–à¼>Œ5ÔUÑ°=E»ú÷ïïzö́Y 98*âj½ơÖ³W9¸gVECÀ0²€>²zg¬^†€!`‰ Đ¥K 6räH 1qâDÇû?₫8‘ë§q”ƒä»YguÜüùó%×Í·ß~›FUºf^XxăÂÀPï₫óŸ µ³™ƒƠđ‘vrsc|4s÷́œ¨PĂ,¶O?ư4ªb#)ç…^rvÜqG")´ÎB̃}÷]ËíQ'VY?,hø0ÆG}w‹¹˜°¦{ôèQßI98jÙ²eî‘G¶ëÖ"‰…¸*̉Ư´¶†€!.føH»º!`†@ DÀäÉ“Å€ÂüC‡•˜Đx Qđ8Æȳúê«»[o½Ơ=đÀ™ó®Ä=/¬UVYÅơíÛẈ|”3IĂG¡®¾ÿ₫{÷ÁH¨+r|  31’D`ươ×/÷»¬>4±ya®qh¹=’́‰ñ]‹quûí·—q–¼EÏMÖ*’A™—`_‚sS„ù–uÛ+$aûAT„fIq5ỉ$g!® sK­!†€!`¤€>R…ß.n†€!È@ÂoÂl´ÑFîü£;đÀå5 Åu8œxâ‰îØc•$Ô„ù"NtÖ =ya}î ư(‰₫£Œ4 °=P®̣,uï̃ƯB]¥ñP·ù5ñè̃pĂ …¬>`×!I>Œí!°æÊû^½z‰£ÇâÅ‹ Ó¶8¢ù=(Çâ¸V’erïï¹çIj>‡,ŧ¢!®n»í6·îºëZˆ«"ÜTkƒ!`)#`†”o€]̃0 C [yä‘nÆŒ’œ™Đƒv=öXa½*¯½öZׯ_?÷Ưw߉„_YNvÖ‡æùX´hQ"}…’f~·̃zKÂ{uíÚƠaˆ11̉@@Ă]eÉđ±dÉ÷É'Ÿ»í¶[¢°Û#Q¸¹Øk¬!̀”ú–ç£6äjøÀ`´ƯvÛƠ>8'¿̉¦çŸ̃½ñÆbđ>|xNj̃y5ƒ!®öÜsOwÜqÇu~’a†€!`Ô@À 5À±Ÿ CÀ0ÚƯwßƯÍ™3ÇơéÓGÉÆ &È×_]8@P Ü{ï½nÓM7uï¼óƒ’ơvV²>²ê£wï̃¢øæ›oÜ«¯¾*8;†˜i2>»cÈ›Çy§­́ÎÈ¢áCĂ\Á„b¬MJŒí‘̉É^%₫~ô#™ẀđQû`b󢄹bÍ3uêTa•4Èm±ÅµAÈɯâ*'7ʪi†@Î0ĂGÎn˜U×0 C ¶̃zk7{ölǦ!Ô¥—^ªG}\-ïÖ­››2e[sÍ5ƯO<á.¿ụ̈DX Ͷ§’ơñá‡f¥²ÖZk9’£ J"Ü•†ºJ3¹¹2>¶Ùf›r…fï±g4‹@ Ø<é0WÆöh¶eû<æ̣|àùo Îkß+e|%±9Œ\Øc¬O oU”¤æâªv?¶_ CÀ0GÀ Ícgg†€!  …“äĐ$zºtéâ¦OŸ.K˜$g“I8¨¢É€$–̣j«­&I% ï•Dnfq̀ëƒ̣IåùPĂl´B•‘ăïZ¼jQ2™i @&„¹1+¢Œ₫ưû'V%c{$uâ 2>w”ơÜ\‰¸ Ø,]º´0‰ÍYïßu×]’O Ùüă@kóûÖB\…ß; wY Û^KûÖ0 l#`»̉lß«!`5@9×q‹zè!ÉÓPóû±ađ¨›X”Ö„¼"ijV*y`}ËƠ‚ bu¥†B`¯%iÁØBN6é>h·‰!Yc||ñÅ£ ’$ă†"^Ô¬9ä4n…]3&”ñAñ°ü{MVF€y …:Ï ˜†1ïÂüNxRÖ¦£F*„“…¸ ï•|đĂ)‰}áwM CÀ0CÀ Íáfg†€! 6ÜpC ODˆ̣PpÀ(;L¢C€Ü ăÆ“<xºèÀL$„Qt­è¼$Úyûí·»m·ƯV”)°*–-[Öù‰)‘uÖ9b`||₫ùçîÍ7ߌƠˆ¤†nEy>Ø s]ăưK ¬>4̀Ơú믟˜â¶ÊQä—¿ü¥äÿIévØec@€¹z½ơÖs]»vµ<5đƠ0W²úê«'_§Fµ₫ . đ÷ßßNóè£nº¬¬œh!®Âïkªc=Ö=ưôÓG׶o CÀ0j!`†ZèØo†€!`d~ưú9Bhœt̉IPLÏ=÷œÛ{ï½%“†ÉxrU½#<̉͘1Ă‘ĂËÁƒ;X7YL®Ư,°k¯½¶»ï¾ûÜl ±ĂÉmB‚î,JÖY&ƠwMnÎ}JĂđ¡ă ư‡¾ƒbÎÄHUe%<ˆ†¹‚í‘Ôsal4z^²×„Á  Î-ÏG8ö0Vaç‚U¯^½{₫ÂkÓú·Ô|ƠUWsm̃ÅB\­|1z >\öt̀g°Îw̃yç•´o CÀ0êBÀ uÁdb¥₫æ7¿‘Æxrï±Ç®›Oô»Ë.»¸k¯½ÖâjÖ¸ùx©̉½GÂ6@ÉÇæCax[… ç₫éOr¯¼̣$ék$œÎ+‹BW+?́Eưn³Í6s·Ưv›{₫ùçƯÀeƒ‡â>|Áˆ·yQÛF»vß}wñ¸ëÛ·¯°"`ÚÀ’ ·BQ„Đ(7ÜpƒÓ¡Æ¦+«yd²ÎúH*Ï̃¬W#-ĂăqÏ=Ëơ(Êó`íÈjøø̣Ë/3Á~ >’@̉ØI œ₫54Üă.ëi“• EHlÎ> ‡›gy¦æjåçë›vqE¸5Úɸ̀̃•=l5Á°Å^îˆ#pÏ>û¬°<Øß 2¤Ă)ô û”É^¸Ù¼nÁºÑ·êÍë<:Ôó×YÛ;40¢Ôó³Ï>sW]u•#¿Ö;îèvÚi'·ÿ₫û»«¯¾Z° »”¶ï½÷̃K$Wăë•zpÔc̃yçéOèOÂÚjßmƒ€°M ¶EÀβà|î¹ç–¾úê«gä隣cÇ–<«¢ä½ K¿ÿưïK~S”ÉFÜyç%¯ø/yÖSɇ}+ñdEî¿ÿ~©›7¨—|,öX«µÅ[”¼GyɳÏ8ă é+>4CÉ3„bm§nÔBÀ+:dLf â•BUơF]9Î;nT=¦Ơx?©‹g}µZ\]ç9R®ç Ø™ 몼T7¬«™_óÙ˘¬Œ€W2—¼3ViµƠV+]wƯu+£o¾ưöÛ’gà–¼§ä*rTóđªzg’Û%ă#{º©S§†˜óou¯À°æk–FÚ"æiÓ¦•ç.Ê®t÷Ưw‡ëC•<ËWå¸{î¹'ô¸Î¾dÏr̃yçI9́É—.]º̉)́s+×ÔÁót¯_Ï+kÔʲVº`D_ W@¿P«^LoÀư<ùä“kÖ5¬Ư»w/=øàƒ-Ơ'Í“Ă°H³>víb#`Œ?˜´'^IăFŒáÈX~üJ’üñåä”~̀àBñbo°yóæƠíÁQoS`tŒ3Æù…A]§́³Ï>Î/̃œ_´—'|z*—¨ñ†NznĂbÿ)nœ›i¸àDX¿És°A>úè#çTâị́øă*,S3EuN—.]ÜôéÓ%¬}râĉ̣Ï®¢ÈøñăϯߨÈx‰G˜_e®yYf}́ºë®’ç/-B:ĉá®’Ư&-Êđ#y,̃µ&†@ZKƒơ’v¸«_|QX'¬+{÷î;$Œ3Ûă’K.ÉÄZ)öF·é”ñÁœB?g~1鈀W¬É̃ ¬`¤çY` <đÀÂö ¼m̃¥]B\‘\û`˜aÂ^í́³ÏîđSµ½.̀ ]çycD­èpb(ŸưK˜0—đ;aƠvØa‡‡Ô:¯Ă!â\ëå`yvØa²ÖïX—’‰}± {›Å‹;˜Ù́oT‚í£¾ơ2aôü°Wú»72ÉÚd·Ưvë0^3>UêÂʨüñí»ï¾«ü:óŸka‘ùÊ[s‹€íLs{ë¬â­ €ÑE¼*î·̃zkIF‚5oƠ—…‰÷ø,(âøÿá(ŸÓÊơă>—…U\ ‹Q£F¹E‹uX<úè£2ñrM₫˜„ F¬w•N8Aè»`ܪxÏ Çß:ë¬# ßX ¤!qâÜj{< ÁvÚir¯0Rq/¸oƒ  ơk¯½faÂZÙŸ΄:ÿüóJç™3gJ̃V¨çT+²"ØđL›6ÍmµƠV²HáÅ:nFv‘ Êr®-·ÜRÂ0NÅaˆ§ ÎÓ uÅ&’ü7ªtÖÍ̃I!€‚CcߧmøĐ0W(V§â–`nC=4îËYù)"Àœâ=¨e-Œ̀Â]­|3P£eL $o^…½ëK}@”·C‡ÍkS¤̃íâJoûrñ ¬‘è“•y uâ‰'Êưå¹Æ!ăsU)(á?₫øặתĐ/ÑÀœ7ß|s1ÊÆ·›ơ])¬ç‚Æ‚ÊßùŒÓ(!º|̣ɪèP¦L™»c ÏÊ«¯¾êzê)©*úơ@0_¶l™„‡"41uQÁè„“WœÂ½¯×HAH.rvÖÂÓ³đg»K˜ñ8ëGÙ`Çơ­̀öDÀ íyßÛºƠXôçÏŸ_Ṽá ïC1IBh*(Ơ1«bă7–¯==Ơ¡0κ°`Rc@YÑj½ÙTÁPæ†ó#ù#Hđ̀ÂN…÷^ê₫üç?;OƠ¯er.ÖÊ?4øæ ƒrK–,q§úôé“’-.œ„£æá(`"¼ổK U(a0²ØËHV³bú‘gmܸq’çƒÅ?.̀“l”Å]̃…xùŒ…Œ‰Œx,饶e™ơwcqR Γ6|` óád,ÑdîYêV—öC@ó|dÅđS6ny×ØqCœ¹̣QJn¿ưöâÈb Î;̃ŒÁCö%]»víx@>iRsŒ§¬å•Ư™£&”«b&J}”̉ä"ŦÈÂ~Qïí'?ƒ û0™+„=÷&NT•lÖßäyA(÷Ç?₫qyϯeÖûÊù\Ǹ‡~¸)£ Ëo¼Q¢ ́»ï¾®Úß~ûí'¿Ơ[·fĂ`äCÉé0<®¿₫z÷ÓŸ₫TÖàZ&ØÉăơ×_ׯgđK0P)«ƒ÷Ơ„`MO˜0ArÎVĂ’ï  Æöy“z±È[»¬¾ÙFà?Z̃l×ÓjgD†€Ï×!´F $É©§Zs1|æ™g Û&‚— ‹<¡Iö‹ơ…‹hÈXè™81 l²É&r₫CÅB”É K¡Ç_}ÜO·páB¡k£`«os]Êe¡Ï5Ô« J&& P,¤i›ÊƠ‰9x,ïO9å”r¢́^½z¹[n¹Åî§à!‚ ăñ¦@̃|óÍ•pa‚̣£†<2ؤ`PA‰4Héµ”mA]+ÛÅ1,Ù¾ụ̈Ër=¼;úơë'†˜°ăµ\^9†¸#{,,•̀‚”ûW/ÎRHÊÿXHù8 ²X¾đ Ư‚ „©ÀBj5ÀÎúaÊMÈüå<̣Hñ")¡“+ R°)©¶ÀÍ|£₫]A eW^y¥4ñœÚe—]d³Ä8˜QÖc:†_üâ2ö©8Íz‚߯ưkÙ́3FÇ%i1>À˜È=À{°³16®ö[¹†€"ĂÏ:ÆN$ DZ=ôî·Ï+k ¼ÉégÆøèxßy₫ÁÈ|Û#l/ÑñŒl~bnå̃²7a?î¸ă²YÑ:kƠ.!®‚p¬µÖZ=ÂwÜáØ>ñÄ̉'ƒFú)÷á>Q'₫̣—¿”#üÆù³fÍâ­ô‡aÆÉ{ưÇ~'Mú {a '$ôfƯÔèñõ2{j>ăX¨ûv>£/@‡Á1´%(Ô•}{³‚îCûn„ư?ú %¼¯®G}À‹}+{rØÔ$"g¿NÔI•çå˜c©,B>s>zô586*àB_fmïst6>ç†Ă93hdå8ꈉ{‚p1~q+ï ÷¯ÑÉŒu”É+ăíúº*Úν¬<ß©:î3Ç ?€ÉÍ9•B])O¯‰î =†4ê#±oß¾â8ǹơ`Á5M XđĐÄhHtå=o P/ơ&€½ë®»J^i^̣J₫ Ñư&ɹü+å<ë¾ûî+yc@¹lz«øIºD’`ïQ₫]ëÀ«Ṣ^~å:$©ôcèyœL¼N‚+]ËÖ÷ÁăÔ‡rưdzlX²q¿à)y…Vùxï%Qẉt¯.'€#¿˜’Dã0"åñÚÍ'₫ơg¹|­7¿½ûî»eLxĂ}óL96Ø.=ˆºy–ÎJeQ¦÷¸)y lhƯư´œp]¯|½é¦›$Ax0¹zđw̃‡ƠGë••W¿°‘Dx$Ăô Áɘ$A_üf¥¹­‡_ô•H* ¶~Ñ^̣tê’_Øç¶=Áû¸̉’ˆ̉K~£úOú=c&Øû…ség?ûY)+ư™1Ço"J^IU3Ùr«x1®{c”$tL²í$Öd>ÙvÛmcOà̃*Fv~{ àcªËÜÆz¦ÄÜü•W^‘:0xEFµjḌ=kH}Ö!>ÿX$eZ!ÙG€µ…÷œ—ơ†Ï!“ư 'XCæ@Ö<>Lo‚WöR$½fŸÈúaàÀÑpíĂ}^§|Đ’wÎK¸é\çÔ;¤Ứu}X© ­÷Úk/ù>ª:’Œ³—d,gƯḤñ 0Öë̃Ó+ØËs‹W|—اêo•¯\ƒ₫ă•Ơåâ¼q¥ä ær&7÷Nˆ¡e0ygM97xgí”Ø7*^1^̣N¡×¢î̃¨Q̣a³;¼.m¯Ç£cP}LŸưûƒWÔ—æ̀™ṢF)yÆt^\ĐåË/¿,ùĐdU뮉¾ÔJ\ị̂;uf­B»›IXîÙB庠¯̣F–`uå={Úªưú o\-yƒSùw=WoÀ(¡ J°]´Ăç =—ûrúé§Ë©Ás‚åó^±^ẴQ"°²éÎ÷<C ¨`‰Æ`Ɇb‹•º3ñ Nñ¦"”ÇO~̣“•â4“D¼2*ÏẪà-]Í#‚úG}t™’­eŸº&V|„:n&Xgr ÷OŒZ¢¬ êC̀yâBúMAè)´‡¤`ÄÅUÁ;EëÛ¦‡_éÏ5_ ñ‹ ±øO€!ă+Ñy9†ß¼Q¤-O½x/( ÊĐá7èÅZW®O‚Q¼AÀB!êáRyŸÉ™ñ /;FÏ«|Uœ+¿Ï̉g<I´‹QÂaá‡×Đ ¡đâ0i¼cü¦E{¼gÈosùå—‹ÇOs%fç,r÷đœ0–̉‡¢]eë”ơǬƿḥM•;qˆq‹°sô‹8ï-¼¥˜’l7ăă) =ÆC m4üC¡®4¿‰añLSŒí'ºÙ-›ñæ8ă¯WˆvºÈnK¢¯ó-s17åUØ;²ÏĂûƯ;7äµ²w‚™ÔN!®ôfy£ƒ#Ÿ(ÂúxÖĐ^a-9àÌ}æ8\0Mh/ü?sö±*́m™[س±?eŸª‚®€È *C”ØƠ¤rO<ç(X₫ÆS#"èw½‚Qṽyç̣¡•ơ…ƠqÎ9çTMÜ[&x¾&ÊdàïÓ!q¹Ç+Ï”79ïá¼b¿®y} NØ;×C7£¡̀ø°Àûï¿¿„“æs5Sö+A û.ø{Ø{î Œ"=†w̉]é0ÖBäYA`bŒđº-eW:~ó&L`Ó‚PÇ*Áz¡?‡ ÷‘h¿ưíoĂ~.,¯ü¥½1"D >­e„´¢ 4`Áå­ôRûÁüQÔ Ă±$‰Ih„PYJ¹ä3”H((¥PbD@˜lX1A ĐQđ«‚ŒóXñJGŒ n¸¡˹üFˆ·̃z«Cbq’w±pBYɤ‚rj¦ ˜p êÍT‚’Œ0UÔÁH¢4ÊĐE…–Së•Å‹9E$´Ö0ñ¬™̣u˜DUqÁ±7ÜpC§ÔO° †ặ̃‚ ߃ÊG5€°XbA„Đ.₫ªÄ%4‘÷J{AûÙh(Œ ÁE‚Á`÷Jœ¥àŒÿăb8cî=ùeáÊBt¯½ö’6«23ăÍÈdơx0Âa¥ïó¼O¶QúrÖÇæÆ{ơÈ؉’…dŒ<[Y’,æú`CƯ›WsăÀ,MĂJ&”K:ÆÆÑ>+Ó¨,„ºRĂGÜa®pa\F.¹ä’²2£^¬́¸ü"Àx˸‹̣Œµ¼æ´Èo‹¢«9s̉_ÿúW™“̣ØœưajYg±'bÿ‘WaïyÖYgÉøä½Ís²«ÑûÀ3ª†öỐ·˜§È¡F”ḉ9Ñ'à‰`́PƯ{R —D˜$Â4!è.¾øbyO—]v™CØçbđ@߀¨áDu ̣eÅ?œ#©_p,AQNøgϨ8ÚÉ₫7̃gI”îᯩ£ Çh2qŒ́­iơEÇΡî́Qu.Ơ󃯴÷¢‹.…gx‰S+Jz®EÈoÖÇô?ô Íî[À£‚:º’–Dêèf¸G86á耨1€°W“'O–Èô„ç¢]ªw‘ü?ê†3&ΧaXêw`ª{JB̀jÈ3ô,„±®ölĐ~8tèP9º*ÂŒqmt#¼j¿â₫á[+—º&Oég8W*zíF±Đ:Ù«!føˆE+#—°Á•0¸ămáé|b5GQ΄äC”,,<0¸¨GL<˜&$&„IU½:`gà‘ çQo&ù={ʱLDX̣Ùñ»BÛFÙêMÀ¤…‘DäÔPƒ—’œjP¹úê«e2ç7Îe0ñ«D¾èäŸÖ¥Öa(5ù6Ç‘´œ˜›jü€…¢|µrˆéAÁûqüøñ’Û„ÏÜ&kuÀ°›C“¼c c0ÊŒ=ZöyÔ[ ¼¯Î¥­èm`’À,Âáú\›}B#XT^Ă>­ `†VĐ³s W]uUÙ²­_ĂàЉ0z©)““?*÷±¸Oó!°|̣I7dẸ̀DË&”  ÂDWmÉ1j¤ÀSCĂU± ¨L¾NY„‰b²ebb¥3º|.ucâŒJX àaRÙŒLºÔ©Æá7ÚK/Œl˜Ô+…¾*D·Ê‚‰G¥°`Dá‹W… ‚Çq~Ÿ§÷°`fÏí¦OŸ.}™Mă„ ¤ß²8ç³Ic°øĂó Cư’%‹Œp,ó* £ăØb:e¡MAÖ̀¬,f7ăؤé¸5Vô1ú\’¡®—aÈÑŸQ.éxuÛ¬̃Iô[“úÀ+'¨ë(ÄÀF¿¨Æ¡úkÍ‘0Y‡yäñ¬BédTEs•æJal‚ÆøÁ3›MAåƯ\éÍ…á›ç†9jù^{íù½×¥†Eh®¦ExE`Ëøœ×₫ÜX«íè¬# †<.Y_…Íëq¶A=tQDV5Xoc{ÑhÏ÷Œ¹äùÀ±§V’vB‡ưábPÄáYÇ5+YÿŒ]́“ºåĐxCŸk÷W`À>‡< @k&ö́AÙĂ#ÁĐU|fÏA–8úú´îáé×H4 3cưƒ?kSÅ:“};‘'8¿Uăuª&̀q0'´-ÁătŸdFèåß¡ḿ‘pj¤íèB‚uœÁ´€ †¡ßưîwr>º ô °ï•5£ç̉GÉ«~E#Mèoa¯\»N€ß´Mj(PöNXYaßá( ¨–“ư#XWt́+È)«á®0 !Døđ èåưzë­'¬>°¡o Îpâe¿tsBï­̃S9Ñÿ£/ªN¿³WC k¬¬ƯËZ ­>†@„0I褉ơ[]‚ɖů$ÆÖDƯz^5Ă–t´°“ä¸2øÓŸ₫´CœÍFί<–6«…‰îđĂ¯<¤êg Í* ‰C©×eWi0! „.̃*+¼nåyÁc¹—Á‰¸¬¹·,BíÁ²Ûñ=›D~ơ«_EÊTk´]xf?6¿Œ{Q??l¸¸/̀UÁñ°Ñº6r<† ïö‚̃g”aÇQ#  a ר¯,O½nû÷ïü:̉÷ïÛ#R<óZóˆ2>Pö³Íă"Jü™“X›€*!£,?س‘+ơx^“C\anÇW=Xç£tgˇ2î1N}j Áq%¸wå3:€ /¼PÖXœCX"„µ–&³Ö¾Èo|§lư>îWt"„£c?„]–0{ zèªí»Ùÿcđ >P°7#\ƒ5₫Àă¤v(ÏYX®‰1#‚΂=]˜Đ.ÖâªÂ<́Ø°ï0ÔâX†#f#B¹8ă.Y²D¢d ‡"¼–:|̣;‘FtïJ#“`¤Y¤́¢F®aªÜFÊ´c ¨øÿ¢.ĐÊ3²Œ ,Ưñ$™ôê”{‡rˆĐ! [£I°ë97x “.̃Ơ₫°–ëdÍ|&à`r1:´áŒ3Î c˜÷Dđz½gÁQ­.|Oùê%£E'J”µxŸE\5a‚VĂCµcưÚ%‹́jí£~cyN´^§èdz@‡ơÁBÅ"xá)C¾ú! z&ơ!+ăá®0²É¹ụ̈Ë;x×ÔWR6b‚—)ưăô鬄DSÖ}Öă}Ú}/.6E°æÔåLĂđr‰MÊ%#¢l“•e4ƒñ®U¡’F¸+5|ę߃ơ(k'Öx«´'Œ»Ê¶D‘…ñ£Ư%Üß₫ö7êUÈf 3”ì[x¾Ùˆ8oBƯÛ=ÄUĐè ‘œ‘0èî1kAkV oÅgÿ„aBXW³÷"!:‚>@“Sóå:ûƯ Ñƒµ&{r] ó–Í9Q ë?˜•ơJ½ëpÆ2 †CíéL¨  K.¹DŒlƠô<”‡³aÈ5—cFµă¹.¿c¨B8¿£Çé>ˆ±¹ÚqRPÈ?ÎW§ÙŸk~…Ñ„½9‚®đV̀ăÀ|?å”Sä}Ø?öKƯjè©8Ă®­ÂÊ°ï ¬"Đù’Ơ[½ &À̉d @ư#á—&đªV$1 ñ¼AP–³¡nT˜Xñđ^¿Z,  *¢PBFŒ!•a˜°›£´½^EôIee@—ÅXA.ŒÎ",Bđ¦P-×োêG6‰̀˜p+…½,¼ê©/‹;r£ÔëáÉ¢€…F-ÁĐĂÂ’:2éwÖîZeåñ7Ï,Ή‹÷Ñ‚ „­Àbú́³Ï–…|³8yÄ£•:c$À‹Íá®`Ï°A¿ùæ›Ë‰ïZ)?ésQºƯpĂ îøăj6!Xx×3ÖÅ]׬±>4ÏÏOgcN3بáb½›Ëf®`{ÜsÏ=J1&í‹c?J)w8!ÀÈmgaïˆ9‰ơk̃Å'Ï7NY£FÊ¥¢±ƯC\U=`ÎtĐAÂ`…±Ï₫ û!¸·¤ï*sư‹.º¨F{Q„ơ!gU;ÅçF¡>́×̉ú4ûtÚÍxų¦H‡aA¤,å¤!¾«µ‡"B‚³¯bO ?ÿùÏ«.Ï—æ¡è*ª9%¡ÑíD™`?î …‚ĐCpÏ“ÚŒÁ„ñĂ)¯mÀà&́O ƺÉÄ("Æø(â]µ6UE€‰•x‘ûF…̉«„•<Èđ`B¨W¡§‰Â){áÂ…å|•×BIˆG̉G! P&ß ̉ ĂG¥ÑEµÉ¹²|ưLîơ<À±Z¨/¨²,¨ˆ©“7çáå¯̀r`0èL.¸à‚r‹±EËĐsñ€WïưW0@1̀‚ Á@UmsÏ=U¥‹)5–ȉl„zö́)9Yˆ ÖAAÆ>6l˜ëÛ·¯œ‹Á¬]…EGx-¡è$>èرc›Î⑶+faíÆ€v×]w¹sÏ=WŒJÿØŸư°s³øclÆÆqăƹg=¥?Å~£m§>äúo₫iăËÂF j¹2%mS­ă ÀɆ1£·Ö9­₫ƘÉ8r)lóÚjùv¾!Đ,ç#iDz=`–Æåmnlf{E1Ïcư«á®,ÏÇ¿Ẩ èeNʛჽávH̀¾‡Üpyơä `?†"¾ƯB\…=؃óœ2/Ñ/QBƒ¢a­*ï3Ç ·`Å~‹5,kHŒj$¡¿đ=‚C"}'hôà{öØ?₫8oSö8ê IƯƒ:–`å0rh»ø¾Ú₫?xHø= 9r:ƠTâZë<ê!+L¸÷Ó§Oû)‘ï0–Ñg°U¶z$eiEè‹Ê&£¡« ô%è€pl#l°‰!G̀đ‘Ç»fun ³Î:«C¼W,ñXíĂ”„›B©‹G+rñÅ7DEÉ¥¡µ`pÀ^¨&”„(ÁH† Å{X}‚çbPĐ0X%Té<†÷LäºX %‹(¯ë(_üûvÛ$]Ă ¤[^ươ<đdÔx£Á2ô=q"Y¨á⦛n*ô^¡æ’P¬̉XAˆ1]Á–Q£Mđ\}Ï"2¸$üNXx-5.±(gQÅ‚çï-©÷‰ßñR Æ°VƒH¥á†cƒ8Ï-â{ú^.ô]â£b Dù‰qˆ¤èô!ŪˆíªM<—à7eÊÙô€†%”ºêZI”3~üxIÚNƯGxc-ÂÎƱ$êëOX ½0Î’2„µ -CÆ+<̣5^‡•üN|Çø7₫”Ï\‘ËÁ;aï³€@Ú†ÖHº₫c{D‰f1Êb]˃±çvÖ 891¿‚ ÏyÖ((lñê'„:ëå¥ ¬ÿYßL™0É8Ă°k©fôĐöăˆË@÷·| k¥ÇñÍăèÑ@IDATA6uP0†vØaå¯xæÉc…Đ÷ƒạ̊Ï‘È•ÑŒ0‡Q¨V‚²0pJKü;Öµ ×UÏ\ÊóNŸCÀá„« ×AŸR°ÏLj‡€){œÊ±–k‚H!†(rcV {ê&|OiVïÀ A…îư ́t)AA÷® A…®6½ú t5è±Đ×D)µ°ˆ̣:V–!`†ëm‡‹‹SO=µ̀ @){˜‡P*Qâ ÄEYÆÂBĂMaA'ÉV#@¬ë,ötă:3f̀? <¾‰Ñ©'̃1Wƒ‰@Oe&X&#^QGólĐ”z:YáÙ¡ /<óñ(Á€ç!"“7Bư˜È¨ “8ÉÉ0©w$4kUp<`8̉FxbtëÖM°ÂxDƯØă]cd„W~âA€à}@2uđ&ăI“&IH1êÊB °†ÄÂè¤Æ‰°óù.X_hÄĐ‚ơúÔĂˆ*•yOƯÁ‚º©Aˆ#‰¿¸ïàÂO(²ÈyçW^TUĂYlƒ(YÏ?ÿ|1€œt̉Iro1íµ×^’Ÿ†—öÉ6€£é&s̀1»—E)ăăÄܹs¥ÿ5]h '²Ig¬b̀ĂxÈó¯cT Ơ)_2k¬¼¦wâ6|0–él\ÉK~‘'8zĂHÉJ̃©Ph¾©̃C±äl%¿Y/ùÍNÉ3AJ~!Ư|)é“5–¼Ç•ôO«–1'¥ª”/ë=([ï1ṾFîărZrÿư÷—¼¡µä ¯%¿)‹´~£[Æ̃o`J~³iù•…ù\J%¿q’1×¹*¶Ï†@ªxf«ŒC>TLh=|xFùƯ;…„₫̃̀—¬Á¼XÊe,ŒZX'jù¬ÅL `́÷Î&̉ïX{ÑOÚU˜ß½ăTÉ;”|è̃\Á@Ư}ØPYz'‰\Ơʲo=z´ôCot*ù|¹kC³f迤í^‰^̣N€¡E¡?`ÿ¨{dÖƒ̃Àz,_R.ûO=Ưe…=­₫^Ï+û Ï“5¨Wä˹́Ù «xGÆeê9üÎÚUÏc½ïÙ=zZ]¯́m¼Â¾CùaơöƃëL•àu+ë«ÇđÎƯCX™aß¡7@ Rë:̃˜Ô©₫‚±çÀ”q9X¦‚Ñ¡Nm!÷ׇ/¡w «[­ï¼‘#tŒ£Ï°ÿ̉s½Á¢Ä=LèKơÜ úº)•`ûơë'zưM_½óhÉ;ÂJ=Đ™i¿ßjXè¹öjDÀ\Êư“ab´x àÍ×ïjB,Ăg<›aÇẃpHr‰÷B5Ê"–wÎ÷ Á2S¢CA₫ĂW\!ñOa ¨P?âÿĂL¨oˆ <0‚ơÂăzAwç{>«¨Ç̀,ø„t ÙÄñ„̃¡NxY„‰2aößÿר<¯–™3gºÙ³g¯DƠ¦á£>êđzç»JÁ{χz=¶ Ïâ}dªËô“³ó‹¹áÎøœ¡“ /±J¡\(³Á¤`µp®<¿>ă•Ä½&¶)}F̀„ $&(!ÏølRâPăå£ ïœN8A¼̉ ÍT½¶ƠÑ]ç™PxS¥úŒñ/+¹>”ñÁ8„×™_ØU³Á_S5ÜU¡®`uùŒ° ĂÆÍ«o‡‘" ëÁoơơ ÓT†µâsí0á¾0@r̃²w"_0.¡›R©§Î\7ÈXR ól 1HèäÁï(F™ü 0C|Ï€°*a× œÉŸö¢(–ÑYÛ)Ă³adÑ 9?˜è«ÅIëÙY9üNY,Á‰úR†l‚ç“;„a¬È‹€1ƒ6V ¡·XèM—.]»ZF.=Ÿ˜Ÿ(J8ăÁ$ ?=¾3œơ¸vz“;î¸ĂMœ8Ñy¯Qî¢BiC(§jF·v¨Z[y¦Ù©ÁÚ:¡íª"«•“ö÷„?›æC_ñ́x-IŒ×ÈØuư¡¡³ÇÀù³ŸưLô¡œLCؤ2>yï)I\Zk|i´~PÑ uâ™%^0lll´̀jÇŸyæ™̉71¤““)̀x]í\û̃ˆÖ Ç—p•a Ÿ~øa‰/ÎZ#,[3ơ# a6½w£{Öço‹R0–R# `¸“(¯ceåö „!\ á^É­Đ‚ÑŸ ¬ÿqäÊKrpkr{°₫C¹Ê₫LÍy¸́ßóăY’×€ĐÎ́£.=âÆNz8Ơ°ÅYđL*èØă²·Fù\ÏœsØÓq,ç5²¯×ëÖz¥Î̀müq-t¬c C…P&I¾=ăAB_±N¥í̀¥èTZY#{æ‚„S] úœ"kí-P½‚'¯à™¥g£9ùbpå~3₫ kÿ™e,¢è{VFÆđÎÄ0 \!@x µUê*W iƒÊæĐˆưô'>Ÿ‹„ó‹Ư6@ ¹&ú…zÉ'Ü“WàæBAçû¼ˆW”| Z Ùà70(ôiµÁ+$̀”7KX´đôLC WƯọ"…Ăç(̀¡‘Ç*Í'm,ùM›„<đ¿HÛa…­"đûßÿ^æïñZT¡®¼ç¤\Ó+C¯ÙÊ—£F’² ‰˜ÖØƠJưíÜx LáƯ¼"¯äÑñ^,Ă¥{§(Y;yOèªá]²X}BúúÆ+CK>¦~«XµNíâB{Ỡª*pöƒ!`†@"¬Ï%c†«!`€ÅKOGØ!^Ỵ–ĐºÚë¿€b ëƒäuGu”xÁ@&ÜÉêH¼Ç}5éˆUxă­ˆÇ ̀&B`áµ́^Îè'h$ïƒr £° úܦUåÿ₫ïÿ6ŸW9ÏWÆ“4ê²ë®»Ê¸«(O6úhq?[0éÛl³ĂQ̃D++4Ô®Q?gaä„zA¢Nl7¬&^½øâ‹#÷º k}—/X ă)M? c8å«5ÍƠ–ùˆŒê¡̃hæ®ÚúYÔ›đd$`†}Üqǵ^hB%´kˆ«,1=ºƠvCÀ0r‹€>r{ë¬â†@û!€"X–ä`Sƒ \vÛ~ÈÆßḅW<øàƒnÎœ9γDY:ỵd‰9:ỉ$ç#Ç_‰^Ü70@=&LØܹsQâEW7Ÿ·hêÔ©B¹÷Éó$w>»Q”ßhĐʳëCó|v+꾯†¸s|Po(ñWx¾ë ™Đèư²ă V ”(‚R‘¾·w ƒ#ÏÏx”b¹=¢D³˜eaø ̀ c2!F¿øâ‹b6´F«0ú`g_gˆ–Uhê'ÖE„‡å²Fæ>æE«ä*‚9!₫F̣ä¥ ÖÓŒ"fdž€!.føH»º!`´€ÀM7ƯT5‰y ÅÚ©1"køÓ(Ăñ'OËرc§÷;vÄ'Ơ¤#l$Iz¾í¶Û:NÀùPa’;/»<Ió|Ø.aûÀ₫!É¢æRJ£₫Y`} ÔÀ@xxF‰GR†’A¢PƘDœd3|¤Ñ›íµ ·—öË$œẰCđºo&Qiµ¶Û£2ö}ú:ΰDÛ•ơÁœ”ÇÄ欅gÎœ)l̉.x[3ư₫ÿ÷ƯUW]%ùHÈKrơƠWưiFLwI«œ!`¡˜á#û̉0²ˆ ÷»ß ă%Æ)§œ"Œ,ÖƠêT<Ú|·páB çD8,<ôHâMbD”GyQêWoe´¿àQñĂJ̣N8AŧÉh¤…>Ï‹lP̣̀DÂ((̉,°>H¦ˆ±WBăäÑđA8”k$j29{}®YL˜k0~ I>|N¦HU¶Æï¡C‡FZ¶V,˜S|› ÔnÂœô׿₫U”﬛̣ >—0¢  KmđàÁy¨¶¬ÓY¿Üzë­nƯu×u>¯‘„ÍE囬¤=ÎN3 C èđ‘̣ °Ë†@ưàEé“éºĂ?Üm¸á†âª~è2y$é矾@N:é$1bÁÙk¯½ÜÈ‘#%NsZÊñ,†hÖ¬YđW(Çï?₫x‡Ç]Ö…°·ß~»°V낸ûiIơqƯuוCç%Y wu¼}Á;îPW(—x>øẴĂ3É~a×Íó‘„ác̃¼yRù( A¶Ç%—\bëh»GáJĂاy>ÚÑđÁœÄÜ„“E^ 8°L›6MØ“äö ÇG¤ƯB\™Ñ#½̉êh†@8føÇž5 CÀH®]»ºÛn»Í=ÿüónàÀ¢D%)öÎ;ï,!’>ÿüó„j’ưˬ¶Újî®»îrç{®lÉ›‚w`’Äú…û‡Ä«§Ÿ~ºûæ›oR=ÈúÏ4đÓç‹-4Ä›†º;¹¹2>0|h8¡Tn¦]Ô¨@R†r0}üñÇRbôG%Æöˆ Éö(Ă¡Û5Ôí~ûí·sĂø ¾/¼đ‚#ßáĂ‡ç¢£¶[ˆ+3zä¢[Z% CÀ¨€>ªBc?†€!`$‰†Ù³gK(³vØA”â&Lp;í´“F̉R’'‰A=×›ÿ̉K/uS¦L‘X̃„#Æ„¬3dÁqĂ 7»‡œ.$¸'̀C’6ëƒ₫¢ă믿v$EF…¨á#nÆáéèoäêAÙfbdMpwrœ¢ù=¶ÜrKIªŵŒííU†2>›—,Y’sA¨Óæw̃yGæTŒñ[mµUƠhè°=ÈyGˆ2B½vó9Z².„¢m§WfôÈz´ú†€!Đ9føè#;Â0 C !Pê2ĽổKD›m¶™ûè£ÜÉ'Ÿ́ú÷ïïüñTÂ%Ôü†.CÈ«G}Ôm²É&oă}öÙÇÍ;72zC•iàà#8Â=ZÂ:úÙgŸM¥Îi³>ÖZk-‡EᮢÊóA¨+ÆG\‚±ê½÷̃ĂáDŒñ̉Vn«$ÅøPĂG”a®.¿ür‰£o¹=Zíís>ó c2á0QPĂ$hÁđA˜+Ö‘„Ăå/ËR*•Ü'Ÿ|"!Lq‚ÈKRóv qeF,?AV7CÀ0êGÀ ơceG†€!`$„›ÀÓN;Íh̀˜10I¼'Ç ó×^{-eyBͯû2{$=G1¶|ùrI N¬è¬'‡‡±‚¡Eň#$4J€¤%mÖGy>’`|àI¬}¬{÷îÆøHºăÚơêF ¯†Øwß}·´Ór{Ô}»í@Àꫯîzôè!k¤vÊók2O‰Íq àg.…)¶ï¾ûf¾ÿ¶Sˆ+3zd¾;Z CÀ¨3|Ô •h†€!4䃘8q¢0@:ê(G X(ŒÏ8ăŒTr3$Ag×Ă»ó駟–pW°N8áG\xB(dUđF%·¡(đÄøñƠW_%^Ư´YçcÁ‚‘2>âNn®ù=6ß|s‡¡ÅÄÈ*I>–-[& W0ˆñal¬ö΅×KĂ]a f»ˆ2>̣’Øü»ï¾Ă>#G̀?ÈøX¼xqlư>k(cŒ' #ŒB}eY˜›ï¼óNqT9äC2Ÿ¤]B\™Ñ#ËOƠÍ0 æ0ĂGóØÙ™†€!`) À¦₫Øcu¯¼̣#Wl<Ї æ8à7õ¼Ä•ç)ÀzI”n°=¦L™âHr'2Æ"Â] È¢œt̉Ie¦Ê駟î^~ùåÄë&ëƒpW«¬²Jd ÎƠđÁ½₫Ç?₫ ëC>xM ¬" ŒÆ?˜UqH”‰Íƒl‹/¾8CJm¶2³‹c̣vÛm'}ç믿6avkMÍ`\}øá‡Â₫¥ừMYÆ¢·ß~Û=ơÔS⤒ơ¤æíâÊŒY}b¬^†€!`´€>ZÇĐJ0 CÀHû„GZ¸p¡Cy¾Æk„„ßÄKÆ+=«Ê₫¸á"ä¹P6Ùd·téRI$>wîǛz~^wƯu°O°0j}üñÇqCÔ¡ü4YçăÅ_Œä₫$aø@iCüx uƠ¡Ù‡ "€apäÓO?¼†„ç[´h‘”E~ Ûă°Ă‹¼¾V`{ @ÉnƯºÉ8Ưá®4±9w—9P™^Y¼Û$5Ÿ:uªT ̀×,K;„¸2£G–{ ƠÍ0 Ö0ĂGëZ †€!P<°Fí†*XU³¯ –èÚµ«»í¶ÛÜóÏ?ï(è÷ƯwŸÛyçƯ\›—oK•Nàd @$=ßvÛmỰåËƯÁ́¦M›–I6 F+î†w̃yÇxâ‰IJZ¬”0>h7 †Vór/\½q0>PP.b¡®’́¡v­fÀû{ươ×—Să0|¼ổK2¦j9§yï½÷$ïeÛ£$í\ú½æùh‡çjø Ư½zơÊt`mCXOB’p ™®k;„¸2£G´]‡3Ö³Ă‡—}G\LËhkm¥†@Ñ0ĂGÑï°µÏHxäcøíoëđbDùjbÄ…J§Ù³g»éÓ§»vØÁ}óÍ7n„ n§vĂŸÛMH ñƒpWä`“Mx°¸r?´‚/̃©xA¢¸â‰'ÜW\‘h=Ób}lµƠVß›0e°>ZÍóA9Êúøûßÿ̃Ê- =—$́(™Ö^{ír½C´/ Œ  á®â0|h˜+kŒ!­Èe—]&FŒƠÆöhI;À~ô£¶a| l%#ífƯ“U!lÔ#<"9ë®»®;üđĂ³ZU‹È=vë­·:ê:nÜ8Çz¥HbFhï&û,r×Àd¾÷̃{…‘o†h1¶̉ C 9̀đÑnv–!`Ô^ÇcÆŒqPîÉ9ÀE¿‰!(}‡ âđÂ%|̉f›mæ>úè#ẉÉ'»₫ưû»ÇZeTâ‡á%Ê%”L&†@ÖPĂŒª¨E›3¿´"Æöh=;· á£YOl®IÍ1’uÔQ’‹­̣̃eå3ăåÙgŸ-¹b`1"+U‹¤fôˆF)„5!!PayÀØÆØÁñöÛoÏ<+:¬$CÀÈ2føẸ̀Ư±º@E" f6aç{n,1¶ “5!b!pÚi§ÍuŒox§‡}Đ Aîˆ#p¯½öxBF|Ù̀‡!á®»îrcÇ•đ >ø çc₫üù‘ôKe|ÄêÜ90>,±y«=ƯÎO ÷5ăeÆJ¤ƠüÆöHª7´ÇuXsêùëË/¿”¹¾È-çY\²d‰́5²Øœ:b„Â1‡5j– 8Æ\}ơƠî7̃p›nº©»êª« åè`FèF̣\ªv·Ưvs3gΔ|‹8WÍ›7ÏxàÑ]ÈJ2 C ̀đÑxvª!`tÊËI“&¹7̃Xü7̃x£ûꫯ:?Ñ0"@¶̀”Sx×a é7yÎ8ă É=“„b;‚¦´\l˜ñăÇ û F!ZöÙgy.ÙgE¨'^b„{±€ñtÙ²e‰U/Èú¸öÚka)ă%Cá©â4|h¨+Ëï‘X—´ µˆ€2>¢6|¼₫úẹ̈¼²ÎánVŒíÑ,rv^5˜GÉ™Ơ¥K1T™ơÁî³Ï>/s >Y uÛă;îÂî»ï.†©j÷/Íïaæ³f¾å–[$ÄƠùçŸï¶̃zë4«éµÍè œ́Èå1jÔ(wÜqÇ•Y?ü°́34·V4W³R CÀh 3|´†Ÿmu À‚º4!¯n¸áñ¶o5}—µC 2=zôp°æ̀™ăØp²`Ÿx~¶Ùf›By€ÖƠ9́ \"—áCó{đü2f5+Æöh9;¯ÁpWúÓŸjëß4±9X}ơƠ%ÄiófÆŒÂö9rd«(uª q…÷~QÄŒÑÜIey`đgoµÆkH]XtP4±R CÀˆ3|D¦eƠ8餓\¿~ưD¹J¸KvV+û%>Ḥứ³ÏJm·lDéô͇zÈ}÷Ưwñ]ƒ¬rÅÄ ~•UVq}úôq¼F‘çF¿Q‡ºÂ@ˆg-¶xƠâénbd¸ ­„¹2¶GÖ{O~맆 êEf|`ˆ×Äæ8¹dq^bí‚‚xÅĐ{„ó̀¢9Ä•=ZïqÆ̣hC+Á0̉AÀv¬éànW5ÚUW]UB¡€@±7uêTQʵÖàÔ@¹|́±ÇºW^yÅ‘èV›æaƹ8@ẩfÉ`(®Ÿ~úi‡1Åù4À#n%#í!ËèÑ£,ŒqăÆ‰Ñ ïθ%Èú¸óÎ;]¹>4ÏÇ‹/¾Ø2ûFQ'7ç9đÙ|óÍ3©`»oXùùC ˆc{ä¯?å¥Æçƒ1»È†e|`đÀđ‘Ea]u÷ƯwËÜIhr|dMâÊŒ­÷6cy´¡•`é!`†ô°·+m‡À;́àN=ơT‡72y?HZœ„³í€¶×…ưØÅ .t0’`<÷ÜsnÏ=÷t„! ‰3̃MEŒ>³fÍr„¿Â8‰áƒ°xưeE¨¹H¸$%¦pyY’f}w£ư±Uæ‘>¢f|hbó­¶ÚJ8Yé#VC Ü¦iTcúÛo¿í>₫øc¹l³Œc{Ôºkö[«(ăƒù’¾–¥y½Ơ¶Ïç™~óÍ73›Øœ}Î /¼à₫üç?‹Áƒ|Y”¢†¸2£Gk½çËry´†¡mé#`†ôïƠÀh+H(Ï<¸“LZÜV@[cëF k×®î¶ÛnsÏ?ÿ¼8p lÉ/±óÎ;» .¸ đaÙHøN˜«óÎ;O6å„cؓإ‰!”ñAß*̀¦æ÷èÖ­[Ó9.¿ür /HÈÁĂ;,PZs„ æÍ5×\Sæ“¢²>˜+ÿö·¿Éœ”ÅÄæ°=`âØ«˜1#kRÔWfôh­§±W¿÷̃{ạ̊h G;Û0̉GÀ éß«!ĐVxđÊ+¯t믿¾#¡2JV}&†@Ú`è˜={¶›>}ºç¾ùæ7a·ÓN;‰a„ÏẸAụ̈—¿tS¦LFJ=X(JP¦-xl&buÖqóçϦ²¸EYÜû¸s}¬µÖZîG?ú‘(oZÍó› !ÔU”¢Œ YŒ£e[­¬â ³1ùôÓO#i˜>Za{L›6MêrñÅ—ëIå¬Càßà8€a ă@Qœ3Ïá‘ÅPW8|̣É'î±Çdž,&5/jˆ+3z4? *˃₫ Ó‡Œ?ü°́ØĂ›†€!'̀𑧻eu5 ‚Àn»íæFåPôÆfé̉¥™P®^kF  2dˆ{饗DѽÙf›‰§ÿÉ'Ÿ́ú÷ïïüñLåÀh¡©¡§̣ ú&›l"Ï%ù?0P¶Â>½P_ £)ÆÓ[n¹Å=đÀ±'cOơ¡á®ZÍóWrs¼jñÑDçµSREOkUÔdÅđalT»DÛ\\Ă]1‡‘ñA»›‹7c‹-¶ÈÔ½%©9N¶ÜrK·ß~ûeª~T¦ˆ!®̀èÑ|7 ²<zè! LÜyó湃:¨ù‚íLCÀ0RDÀ )‚o—6ÚsÏ=W’B¯¾đ Ư—_~ÙÎpXÛ3†èÓN;Í-Z´È3Æ­½öỤ́~Đ A„Û¯½öZ&ŒqÀ¶Ç{H̉s¼Dy>>ø` 5•…„ïäbÑ|$§Ÿ~º{ùå—c7&ÉúĐç ,„óÍ̃ß8B]qÿ‰¯†c|4{ẃ¼4ĐpWQ>ÑIN¤ÆÏ‘±=̉èíwÍ`‚ó"2>0|‚‘ù&"FÎ, ùºî¹ç2Û#kófC\™Ñ£¹'ÀXÍáfg†@>0ĂG>î“Ở(x$ăñ¸̃zë¹G}TB %º¦p@ZƒbE€)'Nt„:̣È#ù0è¯x擯æĂ?̀DŒ¨A€̉₫̀3Ï8ÿüç?Ư‰'(́,bU§-„œêÛ·¯$?öØcË †ăªW’¬~ưú‰âæ³Ï>s„•b#ÚŒ¨áƒ QåiY²d‰Ă{!n¼åøhæÎØ9i!  ÎñnnUsÅsÅú¥W¯^ gl†!³D@̀%0öPÄIh—&6ÏZ~ÖNO<ñ„8 g',IC\™Ñ£¹f,æp³³ C ?˜á#?÷Êjjˆ2™ ‰ÎßÿưÈ”t…Ë”*=zôpP¾ç̀™ăƠÆf{̣äÉ®wï̃n̉¤I‰$ÛN€.]º¸Y³f9Œ Ä ',tw<Ó”5ÖXC’-ëw̃q°@V¬Xk•’b}à•¾ơÖ[‹÷*á®Pœ4#jøøÇ?₫Ù˜̉ ïÚ®]»:Ê71̣„@”ŒÍï±ûî»7œ›#Èö¸è¢‹>?O˜[]ÓGĂGÏ=Å ă‚†…J¿fÑÔ€9I›ĂøÈ’€÷Ô©SeưtÈ!‡¸ 7Ü0KƠ+\ˆ+3z4̃½ØË°¶\cgg†@¾0ĂG¾î—ƠÖ(lü»wï.ÉÿP¬._¾¼pm´Ï=÷œlf·Ùf Ñ6v́X‡§₫ƒ>X8oJ.w̃y§;ï¼ó$TmÔđâ%ªe߃~olfz­“&q> sel4{A{^gŒ î*ê •¬룷ß~Û=ơÔSå0WY©ơ(Zˆ+3z4̃»ŒåÑ8fv†!`ä3|ä÷̃YÍ B @(¡_₫̣—2‚dÅ„×ÉB8B€kˆbHĂ‚xå•W„A&ÆôÑGíè.\Øtˆ¢X*Üb¡$|ç2e#D̃Îû́³(PđKK`ŒÁĂ8C82Ø)Í2$êiCR¬ÍóAxµfÛ£ÉÍiWTᮽ…’ ZÖâ”×sÿ́˜öF *ĂÊ"Æx¤QĂG%ÛĂ£öî“IµCơöÛo/ăwÑœó<r”6f‰ñ¡lî1ù̉˜×³"E qeFÆzV5–ÇôéÓe¿₫úë7V m†@0ĂGn’UÑ(:PÀQÿÿ́ĐVƠµ÷wfrobôE¢b¯c,Q@#bרØÀ ØcDQ±¨¨  –Ø‚ EÁ®˜ˆ&QḾ%e®:™|™Ùßú-ï>9Ïó§¾çs«¯¾º8p`5ÅdrN+Q\™Ñ£ü[„g%)—Q7ß|³³(̣±´# C 90ĂGs^7kµ!Đr¬·̃zńرºI`ÍKZÜô-–u¨!Ø~ûíƯ¼yó4×Ç[l¡ö^x¡RLÜqÇ-s?Ó7(éÈw̃Œ_|qƯ(ê¾ÿưï»»îºËA9Çgœá¾₫úëLî‘ZG}TkøÀh§axƒJ„ÈÄ">2¹µ¬ĐŒX{íµµ†Ï?ÿ¼SßؼR+‹öÈø[ñÀđ#Â8»C|#&64W¬8â¥m¼[‰âÊŒåßQåQ>Vv¤!`´.føhƯkk=3¨t»f“… 4/&†@3!€Âï¾eË–¹I“&©2₫Ï₫³;₫øă•*,6ëÍ.]»vƠœä:ù¯ÿú/7aÂ¥KÀ›°‚Rçºë®Sº±ûî»ÏM›6Íưë_ÿʤ)µˆúØi§tÄđQíưè®̉ ºB¹D;02…h”LÀµB ŒÜÇ?ª¼fy&‘J íQ ÚvNZ°.é̉¥‹Û`ƒ to•<<ËP0ñÑ(‰Í#À÷…^Đˆ°!C†¤u;]N«P\™Ñ£¼[!)ʃçÄ¢<ÊĂÏ2 ÖBÀ ­u=­7†@S#Àæ…$ÅƯºuÓĂơ×_ï₫ñ4uŸ¬ñí‰üï£Gvo¼ñ†1b„[i¥•Üđ$?̣È#•¡Ü „&}¼ơÖ[Ư˜1c”Çú̃{ïux`Ưr› 4H±ÆË’Ü+Y™jợ|pÿT±‘¶áƒM´E{4̉hm©¸Á®Z§ßüæ7ú<²VÁ8Y®X´G¹HÙqY!€CQHpÎ}Ü ÂœƠ}#µ„h™3gj›úöí«˜7B»Z…âÊŒåƯM…¢<ˆX´\åahG†@k!`†ÖºÖC éØ|óÍ5é̃j«­¦ܯ¿₫º̉é4}Ǭm‰Ê6"^zé%MÂÍưp=zôĐûèf(8VWs]ésÊ*æ¿j !â#äæP]±¡Æđ’ÉÄhFƯUµ†Ø¼+‹öhÆ;¥ơÚøhª+æ#æ%æFúÆœ_oaŸ Ơ&{,ƃ:¨̃M̉ú[âÊŒ¥o¥f̣àYỵÉ'Ư¾ûî«4u‡~¸®yɉƒág¨–‚®…¨¨wß}·â?Œ¯…ơkŸ /¼°Ø¡5ûíoû›?ăŒ3ôºo¼ñÆ₫í·ß®YƯiU$ỵün»í¦}ƒ’®•Ó*»Êa-Êb/4ºëoæ´_ÿú× ×=ö?O?ư´¶³˜Î‡µë~ûíçÅ8Ịuâéµ+é7đ®f 8l¸á†^¶2égZ…̣ |̣ÉzƯĐ=¡ƒJC$¢Ư£ß ¸6iôÛʨæ¶'OIưÀªK2ëÇ{,Ç£uíµ×vm´‘ƒC>È;ï¼£+Vøºé^Ić‡̃ĐåxñâEM7|ơqÁĂ)x̃‚ŸË•ï}ï{JRîñYåT@´]ŒZ9xl·Ưvî´ÓNsеLœ8ѽơÖ[M}Ư³ÂĐÊm>đâ6l˜æ±;v¬̃ăo¾ù¦;øàƒƯ₫ûïï^y啺ĐD¥$cƠ‚ \ÿ₫ươy>|¸»øâ‹S§‚*ƠÖÿøÇị̂Ë/×Ü*7̃x£…½«$*®TùüuÔ}à^!ªÏ°J%D|t–ê o,<äe™ªsQ˜w*moÔÎD|ˆs‰Fvчr#>Äx©ăx´ơBÚC’›‹Ó“®¥›=êƒ} ̀GPùÔ[hTxäåÇ,lơÖê¼—ơơ,U~³S\™Ñ£đæ₫ÇÏÚ#”ĐœË*§;î¸Ă]pÁQ§ºuëæÈătô ưSA0L°'JK¨+ÉB[бS/üát½e ¬[i¥•t_C›Ă1/¾ø¢“s=.­6¶K9èÄ$M»K~×|PwÚi§vÀúYc̀đQcÀ­ºÿ €B #‘l‰‚'ĂL0q;&™fT‚ç/à‚½ưöÛ•ç?îE+8:£ x°€%*B–đ¥¿&†@³"†á#¾-†ƒE{CÇ~«̀%81·RÄG½›£LÅa}Ö;'œpB=.oN8âÙ¾|ùr'}n̉¤IuÛëå4¬̀fô( T<ÊC(,Üsç̣“Ÿ>±¿đ|œ~úéÚœh„ÆJ×ăŒGAĐ ÿ B‰5/‚1}FÎ4„:Đ- ¼G÷€đáˆÜzáç£îƯ»»~ưúé1œ'4å:††cĐ¡`˜Á‘ͤ20 ơ»„ĂynM ,øæiϲ+ÛH@%>‰»Ơ‹Å=öØ£ G“:‘,„đ¢c¢g̉D!< ”üjÑg’Ú{ï½u ]üxẤ‚'+“Ï=÷œNÆL¶ Â[n¹e²‡ăQ¾ób*LñryèE(g•UVÑE1å‡>cô ©y±đF<#è/ÇR'1L°ù“C º’…ñÊâE#!ƒIm Ñœ7º„~°gc„щ„ÅÔOƯ, “çñÊ9\Ó¬ e.×—ëˆ0ÙË¢E‹" BINØ¥K—œ̣±üsíIC áRmĐ́Ÿ!ĐDđ|AÏ>ö<óA¸÷1œ²ahaS1~üxU˜C[ǦŒ¤çô…~-aÆœ;ï¼S7.xÇIsÿư÷똜D}¨Ă”)S”¯Ø¸^I½Đ]1'ñÇœS‰`ø@:k8ƒ‘ñ,g&†@³"P+ÇE{4ë̉Úín¥ˆöRĐ%³¿©·áƒ½$Î+¼2O¢­§«iÓ¦itÿ˜1câÊŒÉwë0æ®'zÖĐ(ë%gUĂ<è kPö1AĐ)<̣È#ác‡WÆ)m>úh¥©å|/œ ’ÑPăH†£z’|ßăđ¹xñb-†çÇt4+¯¼rçKGˆđ>è5’ÚÁï+V¬p?ü°ê|èÇFBÛ³)J…1]µF¯ß[đ;ûœˆé{.ÆBÆ ¤ưư…ê‹1ưx`P‚…„ưØÁ6H%RM¹ÜË$KxtRÇ0 ѾxûiưL ×JúfǶ̣5G€Dk2¸i2#Q́h½RAQ]É$ï÷ÜsÏçȯhb*Ë¢4ª†ăÔ-´¾ÊÄäe’ÔÏ|₫$ׄ—I!:O¼)¢¤ä$ÖKJ:+“´—I7*C̣sx‰̃đ½¡ßQæk¯½•Ý ‰éDù•5{öl/“¼·_r¢x™\½LˆÑq¡ư$WlÆEŒ₫?øKr-™´â?{ ăôöÙ¡,Ê$)"m—‰(ç>ÈbƠ‡äŸ¡₫øë 7ÜàÅ€âăÉƠă¿ó>©=Â1ïÅóÂË"ÂKÈ©R‡ºí C •`¼#oxNy6dAêÅ0âe±Ût]#§—Í&È㦗¿öăñÇ÷²1Đ1M¢PRO˜È\ Æu/›'/F\/‹úT®ó–otî`¬DÄà£mb¾‘ÍS%§æ+7óÎ>û́N'IÏ)Ø>5F@”-:°fBÊMn.::v1 5iÉV‹UëÖĵRÉ́C X·‹]ïMQnùJç” TU‘ôC¬´́IØ'ƠS$ºÂ‹̉P÷`eQϦhƯ$"–¼B^"4½ä«éZ«³§í»Y"ó0ÂƯ C„ă½̃÷¬ %W gnjt¥µ¶™ù“¹Wơ%›̀3.ùuí)N‘~Đ AÎA2gÎœ¨lÊ¢8×g àĂX'£è÷p¯è-Ä`Ñ¡|¾@Ÿ#gzP„«₫"é@Qâ{¡èJ,Ÿ:ĐăäŚçøm“M6ñŸS¬"Ljc\NBq¡¿ÍùcÂcQ~²t«œœ½$ûƒp|üƯ:º|ùàƒü¨Q£ôœx[ª)—ưmX{Åëæ}~ÛÙO %|b[9> ×ü¶ÛgC €%ÓĨ9âÁ¯ "­BƃJ/2Qp±¨«qÎ`É@Ïâ‰8§Ô"%^,êz|!£ e<Ø‹W’—¨‡¨|₫r%nl }¨´ư´!ˆxNx”´O¼°s q£HÀ„‹ˆđ™W$qă‡$WÅfü˜¤óPx^ươDüØđ^Â[é(.ƒ˜Å_¸¡Oöj´"’TÚ1BØ<#âÑă%I®çyKK¹^+ÜijÈK´–%â¹äo¾ùæctÖíd窘`,“¨“œq¯³u³£o\®W%ă{±ºÅJÍ\{ñhËs‹ÇoÁhÂ\Äæ­ZéÙ³§^³3fÔôzUÛ^;Ï(„ë%œ(X¿„Í75ÅD< ơ<Ö-¥Æ]M$2O§|C ‘@ˆ“û$¡Ïm¤¦•ƯœØî¾ûnoK=»eZå8…qç9Ölơ”«’QÇŸ7̃Ø‹G{=›SQƯfôèóû÷ üeưÊ=/yô:Ü€ßFØă£ØNCp¢Ä™2”Ë+Ø wˆ'‘j*føÀA”µv’”cøÀ(€“C¨Ư:¨àl¾ÇàÀ=¤á#ß葯ÜÇA4”Y蕱èÜsÏ Uù¸á¢Đ9á{‰ñ’o#:—7ñóă†ø÷áüB¯¡Üb†p¤Æm‰ü‰úZ.®z²ư3°̣tÔ¹5¿ÔIˆL‚R5-‘‰Ci@ByÓ§OWª*Yü)=“(¡"îE8̃ăyEB}29ihçÊ$§¡„ÿ‰Â'¢!vđĂ‹'J”wúÙDDÇ„7wƯu—&èâóa‡Ö!&t ñpÅp^¡WQt*Å¿“ç#©N~ƒÏ•ĐA0¦ŸâYÁ×*PEÁùZLdaàN=ơT¥üâ8±î+·&ߧ˜‚û’pd„úöƯw߈?Z+™Üç‚ ÷h ¯ ¥à¢×\sMtmfÎœ©u@÷Cxh¾@YF"xÂQItNùÔkb´2äøáÙ…>{<PEơèÑÉ~ô¬6„`3^CWGˆ6 /ºè"#jÑ₫Ÿÿüç¡lœxÊ91)…Sug•ëƒ1 @Ú\i4’›ÂµaéĐ&̉C Yk"QÆD”ôj…bB2Sú è$‰(dÏlàƯÀ‹j¿5GºîMñ®yưiTÈ|ÄơP½i®ØăÏ R‰®ˆö‡iô³̉2À…uB3R\½UÇ«- b¥j…̣´Yryä÷‚}:ó!Â<+F†üC*₫̀}=vÈ=úêAÏ=«@´\î+ô|0a‚ê4Đm ́¯xâ ]ㆵ₫PÁ?¨¯HÊ Í‚̃H¢B•R } Ó%êZC/ƒª˜@ƠN\ôKkràú)~?ó̀3£"¸7ÄVơ!¼BŒ…ó•TtB́ úè¥ÀSœB¢vB+…N¦Z)U.ú/ô9Đ‚ `—?T[ă/›±Đ? O¥?ŒïlŒªøÀ(ÍÜU`́GÉĽ–??VScÔ ÆB‘¡Í`Óƒëb̉½{w't›g±”°IÇ‹¯GC Ñ`.ÙvÛm›>âĂ} JÆzà¢=¨›=¤P̉Ô£Z'óüW\á–/_® (Á§ÑÅŒ¹W()ÊCè¼UÁ-´×¹7Á'Ö×̀‡ô¸£hh>}f&ZáœsÎéđ‡1¿ ˆ§Lôè6$?Gbz Öúu&%Sg¿Ñ™=kă?₫XëÀÉS¨åÔ9S¿ˆưCÿ”ø´=®3â0t386ÑÇ`ÔÀèÁCr¹D%¡KZ¸p¡~fM‚Á'èwÂAuúơ맆X7(/_E{À:ÿ\ôg88U+)—k xĐW„ưz4œ^ó¥®ùÇÛgCÀ v´ „cmO¬ÿAiĂ$Àd QÈ'IœfJ¸[5² 'X©™|ù>Hœæj·Ư¾¡Å"ÚÁÁ^̀Ê©ä ;ÔI‚g#Ê>E\¡IO¡°¨à=^’ï#çÅË•W^yg3çO¨à¢kâíÁĂ＄s3₫SEï9ä·ß~û©ÂêèÇL vB€ç ª&<Æ«^MxÇ0î¿ÿ₫²åFÅ£ñăÇk85†V¼–vß}w¥̃Ⱥíxx%Æ£ ´iÉYD}„ˆ¢/˜ḳÇÜBט9œÆôrÏ‹—‡áƒë'V3(Qâm·÷†€!`¹Ä ª5ç–ZÛO(Șëmø`?‡ó¬Éê%̀ÑPƠ`Ô%ê_’8wJY«~˜Ñă?Hs Ey©¢₫sFs¼ƒ-E1) ’t8±ExÏ8_WAT9!‚µ/ú,…ơv!+~C…cD¼-èE&Nœ¨Æ¾ÇÑèè£Î1zđ=¦8¾!Ü+7óu58ßr cSüµ?:!öAiKå¢×co›$¥pM:Ǿko¾ỮƯ·̃7ÁÓ?(hµ ]¬À(ùQÄ ø F  -S~ AÏd‘äqNø§™"D’v²ØƳÏÂßÿ}” /æ «9 ,êLÎIœåÓ€ï‘₫Ç'5ø+ ơå^À6?"$̃&<.â“c%‹x”®aó”ïA¯#­÷D˜àư Ç'?t9â+­:¬C Ñ`‘Ih8̃`\pcœÀ8)‰áÜ` —Æ£‡tx₫±?Áè|ÔQG©"ăÑ\PÅd©h'×Đ«¯¾ª¼ÀDà íMgë Qœ‰j!¢O¥Î\æ:"Tóñ #/sQ)ã ơº«đ¹Ô¹áwIŒª^XxƠÖblơÚ«!`†@ú0Çá)ËxκŸ\P_5‹°ŸÂcù§‰zE|°çÛŸ=)Ê9ÖơÁäg”̀ơ¦Ü*3zü%Ăûï¿ßá̀‡"Ÿ};N4—_~yÓ Øa‘_Iæº`è†rÚ?†M*øXÄG{o†@ó"€}û¢fËóÁ|„±†¹=@¡h÷¬¯N ¹ÂÙD½!Ÿ@Öơæ—(®HTÍ@qeFo®"÷2ëΤ\Í呆Ï8‡¢Ô§ßåútÅ„cp\J̉Sđ,°n”CSY¬¤ß?C®QÆ#ÖÜIÂq!âưS̉q¬ïËB’ơ—^zI̣Âwè_ ơ›ï¡ˆbœÏ×A…óơ•½_Đ‘ú½$)פó́»öEÀ í{íëÚó8 ¢¥Â{ŸEl)!6|ö9 !̉åw! QÊ$^w¨“É£1£Cđ.ˆ‡Q oƯỜ™3#K~œ‹z0Ø„ßD(”Óg΃—2ä á3“"íˆ ^¹ñøoo½ơVÔw¼. ơ3~ <ÇIÚÇ¢,éLáeÑ…P1a#qư.D·Úüüßđdz‰₫/™üć³!ĐN0’÷ú&¼ Qvơ7'†‘¬ Áö̉ö₫ưûëø€aNÜ,sø°aºí¶ÛtsOï`1~„Åvgú¢>§‰úH#×G5y>؈/³j_DƠ1¶¦ßl›§Î\C;×0 VE€usHp¼™„ùƒ<óÎơ·ŒØw2ߣ¸®‡Đ@qÅzƒơûăF3z|suĐ+à­ÏÚnÖ¬YªÜmæ\…î9Æ”c0Ôå'÷N:'$Ö­0JÖđD‡Ca¤§à;¢FĐ;`I[ˆ̣`Ï‚p=ÙĂ$ ú't&Ñaè¡â‚ÑcŸ}öÑhöoz¨fÉ›$Ü78½ê7ß³~G/Ơl‚^ư,‚^q6IJát}×̃˜á£½¯ƯzO‚̃0¢°ÇS9L Ib¡;^øàĂˆG-^Îq‰ÓAÅ¿ç=!¤,¶ I±sYà¡€@-ĂD‹ T:đÀ£D̃$f’b²bBÂÈÁ1AFŒ-HQ²áá\¬ÏœÇÎV ‹Ú$ï¼€“ÊbámL0`¨‰·I ư¿´7EÀ9âÇđÄ–[n©E2̣=7À IÁ • ᜋA¥³Â¦‡|#$ŸgB’¯4”–m—oÔ晴Ï?¤Y“¼w—]vq %1^)#e½Ú·¼¼đä2Îb ÆAHV‚!ùv‰ØĂ(ŒqÚ«`èîLñ¨̣‰tÖ€̣|0ÖUbÄÀ •{¢ˆæ=ÎC0|„ù¡3¸Ø¹†€!`ơE€±¼Yœ³çÀđAo~­Ñd>G¡Hˆ|¯Uk@qE;`hd1£Ç7y)PJ·K”÷#8ä¬@ ̣Âq±Tt5”N°|ä Ï\p"E×€¾"©,~Ă“((¢ß“t$ùewæ3ÏâôéÓ‹à¾GUHp¤…^½Œ&“'OÖCÑưđ>D‹ 7ĂĐƒ`Àè™$èfØ3ốÙ3*+é¸fǿĐÑ%I)\“αïÚ3|´÷ơ¯[ï [Ăø&/”M(®wa¼a(à¡#Á8 ; =&ư€1«PÔ„c1`”Q$ÿEY—BçÆ "!Ê$~̃qÇç6’pB¢On¸á†È@§Á Ç£XCé¢Dèó/~ñ‹(L2^i7=ó̀3á+·Ûn»i¿£/₫ï ư~ñÅ;ôPÙ $ƒ3)¼2”Å„ …IÚó±ä{xl1n Œ„^‹MF©yĂïàđ5ƒH-ơ2ÊÄË¿‡~ǻ³ÏV¥%ÊEpH#$^‡½7ÆÅÑ£Gës‡ÑÏ$èK<̣H5`&mêƯ×%ÁøÈ8ÁŒ™nVíÅP —2Ưxăj,cUµxÄ£> ëlÔJ*6ŒoĐC–;Îqă*ó@¥ø…üü™k+Ÿ«ÅÎÎ3 CÀÈ”‡!⃵y¥sCv-+]rˆø ơÊï̉qö́ÙºF©W> öˆW\q… WS§NmhçÖṕ™q¾a=’ZÓv’v‰̣È¿¦èÈC„ơ0X…Æ裠³†M#IX_£¯@ĐS ¯Èôä AWÁ_’CkÚ óÈ?¿œÏœ»îºëꡬÉqềÏa‚C ØôOè¡â˜ÆóŒ`¨Áˆ(¯Xï‡1C¾ êáùÏw>;kÙïÁøeV³ û@Æ\Ø‹Tƒk³ơÛÚ›=føÈc«¡(¶~øĂF¿Bk‚rJ¹`ÉÅR7z~&­Q£F)ÿ8t̉IjƯ&Ï“Æ‚`<€n*)Ù/’ÑbYgBÆ›gÚ´iîg?ûY@{1\Äă 0qEÉlƒ#~<Æ,đAPLÁÁä…'/ư&ÿ ‹)#´›ă wd2,$ô}ܸqÚÈD·ô9çœVˆ ƉBe€}˜lX¤P^ Ăû́h'Ø̣~#1ú0ñƒ+JC‰ß™¤˜̀™t¹†\Od̀˜1:±ó/†°đA9ˆçF˜üù½9ñÄ5ÇuAy•d<+§;ÆhE0.cä9Äø‰²àp=zôP£a#>/ŒëăŘG% Ï>û¬lØàç/̣ÓºfŒŸx¡iBBrđêl]iF}Đ®í·ß¾â<ÁđÁæ0Œµåb† ,¿G¹ˆÙq†€!`4>¬ơ JAr6‹0'±WÂY«†œñpÈ`ßÇ~©Ê{0ȧ¸ªå̃3ínôàzµ[”Gü̃`M€¼zú"¬×Xc ‡ÁûƯ´TèaĐU¿³đÜ¡¯@ĐQàÜuíµ×êz5”MnÊDG®"JX‡ ~LJ~#®Ă)Tỏ÷ô!ô ÛC=T)¯B=H÷Ưw_=•ưè kưĐt"è] ÑB¯„Î(E-ZäṽygƠ{Pß+ÜYg¥No”ÏOä3 Ñ|è÷W_}5\›ksÊȃbbÔ ‰đ2h{¹­Ëú¾t/‹Íí•Är^,ÄEËă†CBt®G¼xú='´Kû^”̣ѹñ7ÂÇèÅH•C[„W1~HÎ{1ªx±ö{™Œ£sB=…^e‘íÅ[!§œJÚƠUWyQ|EçË‚ÁËÂB륢ïæè·k®¹Æ‹‡oɶ‰a#:‡7²pñ²°)z(1½ĐîDçI„†sÄS!§=ÑÁẼHX§—E–# /‹™"GÛO†@û"đøă{1¾zQèó"Æ[?eÊ/†Eö^8q½lœt̀ź±Ç¼lP2i+ó‘—ÆtÆ´Î s–…½lXt^ pƠEJ>,/Q0^r%΃IË&Lç1$yÙ@%Rđ;Ù@yÙ y¡(hØû£`ăíCÀ0 ‚5¬®¿%ßKT|ÁăéæOñbÖµ û qT«yóØ_ˆ3—ÎÅâPVóú©P¼º½(5½°<ûÓ¬ÖDit=Ÿ8 ê5…µ'¾4m2X[ ª§ḯñỹ„ÂKÎ̉¦éCZ èçGÅ¡¾#|D ^¢9ôx¡7÷âà5…g@ă%Ëâ¼øÚ̀œ9srÎCw!Fƒ΅øwô ´K¢1üM7ƯÿYß‹á$̉A„öç¿̉É‹êă{1fh¹́7Đ%ÅE e~đàÁQ;%BFơ@`À>(¿üüÏô[rFE2V¼úôéăÅHữˆĂ—v-›}FïBçú>”Ék¡rK+¹=¼yö5 ×xƯö̃ˆ#`2R˜Ô(¯ˆjxđÁ£¨¤Ö@E‚w‹L‰‘xß@Q"}̉éJ•ÂùXÆ“*¼}ơVü,ÎxäG{„cđ¢&YUÊ)ÔÁ̉?õ< “Æ“¶˜Đ.¢  "ô/.|Æă Ácˆ<̣ox2‹Ñ\ÅÏ¡¿đ́ăQ‘$2aªwX>·.̃D«l0´+~>åâͱ₫úëG_jOø7…JyBD'Ç̃À‰IÿñŸ8q¢†wbb¹@ŸG4cϬl¾4¡W¯^J X­×Sn-é}êׯŸ†m3®à™w% É;KE•ÔBæ#" ÏñÎ#,äGJ:¾œï̉Œúy>˜ËˆJ,G̉ˆø`¬OÓË©ß1 CÀh<BÔkåfIpN[å s[|ïU „©OuèÁ â$wZ­đf¡¸jçHå̃‚?¢«a¹ ×4ÔIûơZßKµ®=ú„ t¼IÊWÚƯ Đ<bº€>Ú$+ÊáùDwÂxÁû è`̃ȯ¿Ư‘+̣́…h¢2Đs$ ôV<³èV(#_âÔNá7¢T¸o‚°'aïĂZœ}Ø ûHX6Èï?= ´µÅ܉6 o+ơæë¡8®³å†ºÄ€ÑA¿‡¾‰¶ñ~„ăy-…küX{o€À·°‚†@# À­ˆN¢%T©E₫’Ư’[ƒ .>j/!È$ߦøQ®£ÄÏWÜ°A‰Æ Êd­ơ¼+!ß„A2¹aÀH¢¬×ϱû́³̉±~%ƒu9BŸ ±dă=ôVäĂ`%ÙU|².§<Ú"t ï¤ï,²’&s”{ô™Qhdh/“N¾ÀWIbd6H\ BGKáAôfœÇñàO{ J<‰´¡Øq…Îç{®7‹ñp» ½ÙƯwßhÈ*V†ưf´â}¥aåñ¡c}ßk¯½t3V₫˜YOlÓÉM²đÿ’³Ÿ₫ùÊ\éYN$*F¹1z@qå_gêa³‚a<ÉCÄ8_Î|–ßVèªØ 1nöG2cl19ăŒ3ÔÈÅÆ*€@IX́œđótWŒ¥Lœ#±öj†€!Đ< @gn“(o¥™5kVĂ7=óó2ëü'Ÿ|²¦mf…±ƒ}̃Á¬lµlû$ö¬ä¹dî‡Æ&)t-ÛT¨®v6z°ÅÀư2{aô 8Á ¨oGƒG̉=‚Ϊ) ¼²&ÆAO¥á°ÅZª)°F瀥Ժ1v wH̉$µ»Ôwè–È­AÙ8háP‹*ÉhPª¬R¿cˆ…Ú+ö–phC—ƠJÂ5bX+\[ ;ëKr3™m‰@œ*êä“OΡ`ª8Ơ•$h÷â•\Ééu9V¢@¼,,4|0Ÿêª. J©Rñĉ¡ïI¢EK©*+ÆhÄØë=öX/‹dC퇪cb<,»̃†îOøQ;Å¢”Y´K6¨JŸ(› /9Q*¦ß‹·‰Đz¨1dcçÅѶ0~l©÷£ô´O6V¥÷¢ RJ£:ÊCåU®@I(Å0Ỵ̈^nvœ!`†@c" Fí-ó’¹³‘y­Ăƒ—D¿JÁxꩧæưíGÖBĐáˆ2U©+}ôÑl+L(½Y(®Ú•̃JÑ^½DèZơ#Ï–xú'\MûÊ0 C –ƠU!È>å" ªĂ—pL"#¬ú¥B Ë-?‹ăh3ÑĐ_ <Jy gÑ–,Ê$©ºlÔk„ñxAà!eb… ² :¿Å‹;áuƠo¹åG¸4IûđÆjÁcJrf8¢=đä‚â:@< Û̉<ơ(/ªaÆ©§Qµc Qw$¤ưàJT^µí…ö‘ñ¯O¼½JI ºâVR'̃s”'Q&à`b†€!Đ0ü–yáĂ?TÚFïsầGD$ÖRˆ6aÄ+ùDÇÖRđ o«vô Ê6ÖhD{y Dʪ ¹jy«X]†€!` ØN6ûÊ(…€$çr’XĂ á{E$ñ¬* K[Ïß¡F!””EYàˆgqV íJ=ûQ¬îsÏ=×m±Åà‚ .PZ˜bÇÛo†€!đ ä€BI¢Øô°+É;Ơ Ë†?‹¼•bÏXE›fÎœ©ă/T}»ï¾»rWk˜HjơÜ|óͳ£4PøU+iåú`SMH>”~åäc!ô©Ôx ›nºi"]bµ8Øy†€!`ơGăǸ!Ïs<†Œ6ùy³FĂĂí·ß®NC† ©©Ăư&·×ƠW_­¬Øç4´£ÑƒkC₫…ÁB'ÊŸạ̊h´»̉Úc†À7˜áĂE€…~P”± ås¹B+øñƒÛå[¥¼”áüz½­R(‰y½ÚÔÙzÙÄa„ể¥‹›3g&’ÇÇÄ0J#€ÂŸ|Ë–-S₫h ¼äù×ĂiȱQº¤l8æ˜cÜܹs5¹)‘]Œ¿O<ñDEăx©½GâD0`̀9r¤æ*u^̉ïiE}„|Lđú’+̀aIụ]ˆøÀˆUiÄeo¾ùæ5Uđê‡}ß¼pïÁEß½{wư#’÷gŸ}¶>WÍÛ³Ú·œt%Ë1zÖ¾uVc³!€Hơf0|0 Ơ“F¦Ô:âƒçÜ_ï½÷æ-dưQKÁqA¨½t¾'Ùó)§œRËê˪«åQÖ­a†€!ĐÈBÂÄh[$º'/ÄÛo¿íáa/W8nÜÉ“'ûyóæ5E^ú&‰uµ½ñá%áÅV¹]nºă$ៗh/ Î<׫•ûÚtÇÜ40NŒ1ÂKRlå,Ăˆ?üđĂ½$™kˆgg›ü¢Qîm‰̉đp—§)’ôUÇYµyQàV4WÄÛ‘V®Qk§NZ²-’„UÛ.‘^”'ñæ}ôÑG{QùÑ£Gw*'IÑJ́Ç–GàÄOÔqƒg§ØϘIqD9a(ôsŶ_ 2 g9ÉïEîŒF1>è₫…qD¶jw|{ï½w]p"·™Poê³ßµkWƯÏ4Úuj·œŒÅI¹<Đ˜†€!`4&ñ!+(“öE€PạBl¶ÙfÑyp$Ṽöư÷ß¿¡ózį.|¾´î5×\³¥(®âưäư¸qă4-}ô‘æ)ÀS̀Ä0*C€qâºë®s/½ô’;è ƒÔû_’}»=z¨Ç6aươÆb蹈øÀ+søđánüøñ•_m“D•N ©:GH²đª£^̉ú¨$ÏGµЉñH«ä€Jă^°2ÊC*M¢Çf̀˜QÖ Gq„>·eܦ§‰!&!ÏG3D|ĐF¢ÍQµQßhÇ'Ÿ|Ri®ÈÛP+ant«v‹ôḤ ´«́¯M CÀ0Ú¬³ïÖ*CÀha §¹è¢‹”̣ê{îQåhÈk̉ÂƯ¶®™ °ơÖ[»‡~X©ăzö́© >á›&:†‘z̉ɉ¤̉^aŒ&7Twp-ÿưïO ‹ &¸₫ưû«1€²átF!R©¤‘ëƒ\,åæù†¨2Êm/¹\ Ô †Z)˜*Å̉oL¸Ï¾ûƯïæ4N"?ÜW_}¥÷ ¿£ÄĘºÚj«EÇ1_£<21 Ú ¨®ë¡ŒämTà¨Gbsö ·Ưv›ÂÂ:g¹ZI£S\µ“уgD¢}zÓQ]×ê¶z CÀh̀đÑ(WÂÚa©#pÈ!‡¸ưöÛO½´$TÜ}øᇩ×aí„€Đ=¸^xA7zë­·n₫È}Ñ«W/5ŒÔ‹{Eë­·̃êÎ?ÿ|}̃ï»ï>G.6æå*ü‹]G *·KbS¢È>₫øcƯüÆó<;7₫[QÁđA¡"+Ú¿`ø U¹ÉéÙÜ ]˜6›hH‹øˆ_A{_  qÁÀbH¨'£¯1¦1f‰yÀDßó̀†@mà9üá¨ÑŒ̀Ë—/¯MÅUԂ⹉ͅæJs}}ç;ßqµŒö`ξ̣Ê+5éüꫯî„Ú²¡æâv2z„(Œ^B­s™EyTñÛ)†€!`Ô3|Ô|«Ú0²Gïïơ×__=uH°¦xö­· ÆC/Q6}o¼ñ†;v¬[uƠUƯ›o¾é>ø` ơ‡%E­*˜ /¼ĐÍœ9SÛ„÷8X¿ùÍoRiÏÚk¯­Æ¼Ô%7”ƒö åD¥̉Ù¨览h£¿Ï?ÿ|ÑDÇÁđAËMp̃µ’Iq¬´v|û"€á3nøxâ‰'ÔÀQ Éïừü,y¢Ïùo0”`€œ;w®* ^~ùå‚Ï6OÓ\ÉÄùÓ¦MÓóˡꫤNÚ›_'ăơñ\åËoû[ưßYŸ@§S¬ÿùçÛgC ³à4€ñƒ1Ÿû±Q¥ƒ$O–:x`|€’¯Âú‰u”ä‘Ôè9¨{¡ơli£‡Ey4Êgí0 C dc`b†@K# ߥKMÖûÈ#¤ü¸¥Á³Î%e¢)Mü)Ë/^<#= /eăXấl~^´h‘_gu¼ôÙ́±Ç<ÉQÓ›nº)Jö.F–ªÆ‰NÑ2V^ye/‘ăḌq̉zê©E“KTÿ₫÷¿¯‰Q_ươ²Â^uƠU^”a~·Ưvó$u51ÊE@(aô^cà¯\9ꨣ¼ơ¡‘ëpăˆD†ä”êàU Ι8qbt¼xGïăçñ¾_¿~Îå‹jê¯́¨O?ư4zŸßF’¹ç·#₫y»í¶ó¢tÍií ÇldÉÍs°±Ơ#@‚s1Æ{‰FôgœqFơe|æû￯÷¿ó½3®í›âÅYÀKN-ÅfÔ¨Q5©“JÄxê%'£®¥öØcÔÖ.it ]™ó\°w\k­µô¾“ˆE/”₫óÏ?OF+Ă0 C ÆXć́"L C µ€û×]wƠ0q(¯ ‡11 tØpĂ ƯwÜá/^¬Ï¥̃rË-ÿă’K.qđT×ZD™é~úi'7^ä Pîréµ÷¤“NrÇsŒæ櫘×y¡râQ×_}ÅÉØC‚óJ">ʽ!âSËïQè Ú÷Iụ̈—¿Œ¾&Ú£\!‘²r¢ÔÏ9M₫z₫ú׿Îù>₫(“|,1*F‡ó–fÜ"â".ƠÖ/cÍ5׌Œ̃ăUŸï9ßg1RjTWt’½12B œíñ»ßưN€.2ÿyÉÆƠç{N©ÀN8á„,ªéPf#S\µC¤×Ưryt¸-í CÀ03|4ư%´†@)P̃Á•Û­[7ƯÈÜpĂ ®~₫RơØï†@;#@î‰ ¸{ï½Wi V‚zêG?ú‘F̉0:T‚/ÊNÚƯ<ÇwăǯØÈTçµ×^ëz÷î­IƯ1‚T?(ëj®>ø h®ü6„<Đx3h@‡ƯÂq(–K †6ÿ›o¾yCq—j·ư^PŒ!?L̉¿ÿœbÄó[ïcîå8M†‘RÉÑ%Dïm©Gƒ(.iÖ9zôhMä>f̀­âôÓOªâ7úA»x%‡A ¶ơÊ™Ú`¯­†æh‰·̃zK_­×q+æ%rne-$5Ç|ÈíFY ón£R\µƒÑĂryd}‡[ù†€!`Ô3|Ô{«Ù0jˆ›%” đóO™2ÅáQiJ…^«ª-@Ñ>pà@·lÙ2å¬'…P#¸ă?̃í²Ë.náÂ…5U¬tíÚUóơ…²„œ?ƒît®5ßyçNè´Ti)$¨•Hg¢>„ Ç­²Ê*:†¡()6–…<åæø i:&r‰XÄG%WÔ;ÅZ@Pîc|$ŸẺ¿ù„Ddá¾$÷LAƒ¹9sæ„.߀ư o8OqÆ(îk¡Ă‹~ÆÈ€̉I³N B§yNHŒÄûĂoqá™#‰qŒ<&†@– Øßf›mô¹ ¿LÜø–e½•”ͳIÄmå©…üơ¯Ơ<@<·µöÀ9Aè+u,êÛ·¯¾¯E_KƠÑêFî/‹̣(uØ!`47føhîëg­7 €¢¦OŸ>ª̣ªœÄ¦o‡†Àÿ!@ÂT $@1b„&è|á…4úâÈ#Tå JĐZm‘œˆ%Æ}÷Ưç$_€c3ß™6l¼ñÆHJG}Ô]~ùåE“t&ê#N¯^½‰æ—.]ZÔ˜T‰áƒÈ“A‚‚ E“‰!P(̃•äáAp2È7h©Î9çœÄ?~Ă1!È́Ù³Ă[÷̀3Ï$â ¸ uaTHz¦‰ I2âa@̀—´êdüKR̉b̀€Œ($)µ’t}gtŒ‚1Á9í"‘g˜D́YË¿₫ơ/&Ă™Ar<¸ƒ>8ë*]£R\µºÑ#Dy@zÿư÷;œZ† ¦Ñƒûï¿æ×Ư*0 CÀ¨ fø¨ ÎV‹!`4( ¡¼b#7>ÊP¼ M C ๿îºë4ÆA¤ôxÀuï̃Ư}öÙ53>âå=nÜ8¥®XuƠUƯ’%KÔUTđô®}öÙG½̀1¨\qźbÑùut&ê£̉<åD|¼ưöÛªü£µ×^[½€óÛlŸ $PJ¢< "I`ĂÛè•c‚‘"ú2ïM<7Å Ds<ùä“Á5wîÜè•ïˆØ’døÀ{º\I«Î8¥U¼n"VöÜsO·̃zë©2e‘.pV_}u¥ Œoï ¬ÀÀ-É´úgNl4‰G|ËדV»¡¹ºí¶Û4·Ñ¢!Z+­̣óË¡HqƠÊF0'ʃhäÁ̀|…Q Ă÷ôéÓƯk¬‘™́³!`†@#`†&¾xÖtC FåP½ổKE½‚Ë)«ÁĂ“Pr{A•Ó¸°¶>’Œ?üđĂñ¼y®gÏÊ«¯¾Z)60ŒàuW ÁĐ€̉ª+V¨ñïkH®¢¦0Öaø)Çđ̣{X´G!4íûbÄé­¾úê«ÄC¡²âùà>…”­(̃‚ͱ×^{é³Æó₫ø®”T’_(­: µ‰gu×]wUê=”¸$:'̉£iÜ€Sè|û̃H¸á£#> à⹬Ơk#ˆVÅàR0䘕 7|<̣È#O噉 ÷h9BDI±?̉¾o‹ƠÇo•ÔÉú ê½xúM9Gu”R`%Ño•ƒcT‹…à¼Ñ ̀GÁ µă¦›nZm7Ë:ù—hpêb½¥e–̉ˆW­jô`ü-åÑ¥K—,/µ•]ñ@‹ËÚZj(ß{ï½sç¨Â¾6 CÀÙ®ÖnC Å¸á†Üf›m¦ †Q°AeR®Gq«B³̉J+i´¡̀ĐdÀù_È;µU1°~ơB…‘ltÆ«ÑWo¾ù¦̣hămåCÖZ<­,X [†îÆ ƯL¹F‡|́Pø̃}÷Ưdî(0æà¥ZTơ²ă J«ç{®¤á¯̉RcP0m¾ùæ–ߣœ‹gÇä @ôBÓN;-¼-ùz̃yç•<†ÜäÅ(ö·lÙ²’åTr@ÚũqÇ9ƠÓI^ï¹ç¥ÀÂ1ĂĨ%!âƒ{‘¤̃ñ¨§Z¶#©.Ö$6Ç ‰‚ơ{VBÿ?₫øc7gÎu*È:©9}k4«V5zX”GVOMơå²F†úÊX ₫è+p‚"—y牬 Ơ·̃Î4 fCÀ ÍvŬ½†@… àC!‡G!,đƠâEQJVa5MwøN;íäØÔ¬²Ê*îâ‹/VÚ›¬•­M’5ØÈŒ<{ĐÜ0.‘ƒÚ©>}ú¸O<±ÓÉÇK5½k×®J{ê¾́²Ë”Ö¢Zº™m¶ÙFó™@›pï½÷ºiÓ¦)¥W©vđ{µQŒcÁđQ(Z¦ÚˆÊ51*A`p- ù+J Ô”,Å„ßñvÅ(nTWÅ²ß !€Ñ£e"@ ¬($|đ+F/²ï¾ûF§2$1Œ¨MÆŒ óçϯöM–u~ôÑGQ³’ ¬D\‘ëĂĨ5!êƒy¤‘è®P”ñAû²6|@;Å^‰µăM–ÆÿF£¸jE£‡EyÔz)\ÆDœX#“D§'î9 p˜X¸p¡̉à:Ô•K}Y¸6ûÅ0 ˜á£#&ö!Đ’́²Ë.nrk­µ–R¼àûÓO?mɾ–Û)‚xy£x ‰—Y(›†@í@‰ữß(8HÆWùxđ¬6G©àíác c .Iªˆ×k5Q`&Lpưû÷×s?₫xơn+'®¨`øøä“O F­•›ÜD¼k‰¼Á{>í\ ¥®ƒữÜxă9aíѽ{w¥•$ºƒçÅê¨Î9ç} ï×APDb,APĐBOOn₫øă‡C«~ͲÎx₫ÚM_À„¾ä+v¡Ú*dЬºƒv¢!€ÏV#æù`Núưï¯F ̣Y Ïăñ+¯¼²;æ˜c²ªJ×DqƠjF‹̣È́Ö­¨`æ6Ö¦“'OÖ5TD4̣LCÓzơƠW+ưöm·Ưæˆ^61 C SdP21 6B@”^r[xX¼,́½đi¶Qï“»*Ú^ñ́ö¢¤ÑrúöíëEá[V›%úÄ ‡¹Å‹_±bEYc‘(S½)¼PkyÉQ̉¡1i™ùçEÁÚá÷đ…P"ê8(ÊW/Ñák{5*F€û‡g¶Ü¿Y³fyîcŸ8qbN}’«¬rÄHs̃Ô©S£ó„Z#ç·đ!ÔI½¢Œ _û¬ê/ï¨Måb³Új«i»h_8GŒAQ[í!â‘환û„¶1"S)ă³Ï>óbŒ÷BKë_}ơƠTÊL*äË/¿ô’k@ë’¨ø¤CRûơ€8tx16ù=öØ£ª5FZùóŸÿ́wÛm7[Ä1Î?ôĐCi]—r$o„—¨/y"´Óí„Ñöº5¼Œ%K—.ơ5¥Ïm˜·XÛrÈ!º®Ï·5lUemŒ€E|Èhlb´Gy¤Ă#yơƠWwwƯu—R¼$Q.´&x{o²É& °Á+ƠÄ0ê‡T£GÖè#FŒp|†Î‰H Æ0<@eí–zûơë§Q'x£1.0ÀáVi´ÉÚk¯­”¢´Ôh¯ ¶(%ƠD}üøÇ?VoØB ÎC¨¬a">,±y©«d¿—B€{{MŒE%‚¨è/ẼÖq>‹çg³Œ˜ˆ‰¸Ă§”́¹çÑ!D~ɪN(tEÚHqcÜÈ—xû 11̉D€ˆ¢+ynẼë`<÷áûçù§}›m¶Y]Ê¢Ï䀇g4ˤæDqƠJ‘Å¢<`;(F©Ưö¦S°f&r¹ÖÎ$0'j“èm(ë~ơ«_i2s‹(îÔv²!`Tƒ€Lö&†€!ІàU)›gơˆ¹à‚ ü?₫ñ6Dá?]–đ[/ơv{à<™&†€!Đ¼ñÆ₫ ƒ̣ß₫ö·ùCˆ?묳¼(3i ^¦¢ULY[ù1cÆT5&Ȇ[£-(cæ̀™O¸RRiỖx̉‰R(1RCr h ÅÆù£>Z½]Åà䉸11̉B@Œ^”ÑŸĐÈUơ<Ị̀3ÏèŸä+Ë́ù÷;«:‰B¡/…úÁØ&yÇr"Qâí²÷†@Úp¿mÈÑơæË_üâ™G¡0ßyæ™9IdiV‚—»ä<̉y–5̀u×]—UU%Ëm¥H‹̣(y¹3;@Œ’^¨+ưÈ‘#uÍZ—?É[§ÑL³gÏ®j®Ï¬ÁV°!`´-xv˜†@›" ɽ5 •ĐvheÑ ´DÇ{¬g3²é¦›zñ₫j‡.[ ¦B@8¸}Ï=UAÁæ e₫”)S<ß´eÈàÁƒUIA]iR6eU¼-Ç×2P&₫_*ĺ*¨F—ÙL–2BHô‹{Ưlwlz,‰”ÑqăˆxäÅ›–ó¾W¯^+Ær 49'ÛCÀ0 ¦F€=ÖÁ7ÜpCƯû‚N8<vØa™µGh5™#g̀˜‘Y=BqƠ*FÖRP‚8P×?P~Jâl?õ¼̀®¡ü ĐÃÿư^̣vDëqÖ¬¬É1"._¾Ü 2 C ¡0ª+Ñf˜íÀ¥—^ê;î8'‹}÷óŸÿ\“ –Ú®B¢óơ×__C̃'M¤T7í…ơÛhDHåƠôéÓ51²(,œœ(íƯĂ?œj"`Q₫8‰¾P:@è/î»ï>wÀ8è!d%W6<×^{­ëƯ»·†&LưđĂ‹+rN¢Y”̃K¢DÇ«„¯¢´qPá<ÿüó0TWÔ_(Q2T"â®IW)Ïh^"ûÑ0 –C à\¢²ễ?QlG‰Í%÷T&íaîcíÀZ `h÷²F¡¸jz+Ö3w̃y§ƒêS¢ ô„âd¢Ô¢ûï¿—°íË„NŒu"´U<<+óçÏWºwÜÑƯ|óÍJMG̣̉­¶Úªíñ2 C ±0ĂGc]k!PSPn]sÍ5N<©œ$tpé³`̃²̃zë¹óÏ?_7?,àà̀gSdbƒ€xºaÆi₫±cǺUW]Ơ½ùæ›îàƒv’LQ iµc9€à-¦%K–èx)̃neWÁ†œ º$M×M#å±i/&ñ\Ô-Åwl:QZ½øâ‹eQ\h7ư@Ä£7ш̣î»ïFuX8zö̃0 ö@ äù`iĂÇ₫đ5ÄgeøKßq8@‘›E₫Ư¼̣›ùä“Öo•†@y°éb†‚†çăíSO=•‰±CÄܹsƯ†nXU4ÄÆo¬Ñ#Df”MÁ¸LßHô"6¡rÄG¨B…ẓË'Ñú–[n©>ÿüóvƒÀúk†€!`†€!Đ&`ØßvÛmuí[Ï<^0|dEsïư÷߯^k­µ–0`@êW¸̃WÍlô`ßùÇ?₫ÑwÜqnđàÁº#¿‰̀¡gî̉¥Kê׫Ư $‚ª·‘#GºÍ6ÛL“Ă?ÿüóÚ·=÷ÜÓÍ5Ëađ?~¼Û`ƒ Ú ë¯!`´føh± jƯ1:‹‹›{ï½W=¾̃{ï=·=2íƇwô•W^éر$Á0‰M CÀ0 CÀ0 VC nø¨gĆ,›CíxÛm·©’÷˜c©8³Ôu§|öˆV™:uj§¢EKƠ—ÿ{3=âQĐ-…D₫É%K–µU₫…®âóW_}¥$h¶Ûn;wƯu×iôÎgy¦{íµ×4×çá‡^QÔqM±S CÀ¨fø¨ÔV‘!Đ<Dđî»ïÖ×·̃zKci7ă B®ºêªº‹v¤₫j;×Zj†€!`†€!P >ˆúf­»|ụ̀ºE|ăñ·yômé̉¥ÑÍƠ!Cªªà9´ưå—_ÖĐ[^pÁ5ÍëѬF‹̣(xKuú°ưÓŸ₫äÆ爜4h7x¾vÜqG¥¹zçw4iùV[mƠéú¬CÀ0 3|4Ú±ö ‚@=Ô$‡$:;á„܇~Ø ­«]3F¥aÿx ;Ö}ñŵ«Üj2 CÀ0 CÀ0j€@0|PQÎ+V¬¨A­«À8"–üT(jÓ¢1n½ơVÍÙE¢æ7̃8Íâ]>ÅƠi§–jùÅ kV£‡Ey»ªƠÿƽ>₫|7pà@}.¹ä÷₫ûï;̣z²¯_´h‘{î¹çôưÿüÏÿT_‘i†@ƒ#đíoŸ5Ï0êˆIÎàReq´`Á~¸ùæ›á°í"+­´’F{zè¡êsß}÷iÄ•W^¹] °~†€!`@AZS’묳&,.X˜ư`uCà[ßú–R3A{Kn;¨6ß|ó¶‡èrøŒ+D\“l=-¡́?₫Ø=üđĂJă“vRó8ÅU×®]kJqE²vrb,\¸Piz§OŸIî’´®å‰đî»ï:r)Bk ]“'O6Z«*æÿä“OÜ]wƯ¥4ÍDN!5·̃zk7lØ0¥±₫Á~Pe v!`͇€E|4ß5³5EĐk¯½Ö­±ÆnÎœ9nôèÑÊZÓFÔ¹²vÚI?«¬²Ă[8ë&†€!`†@»#€ƒ^Ó¥₫ˆ E±E²TCÀhL¾ưíoGtWơHpN´‰Í1¬¶Új©:[‘ÔüÎ;ït¼n´ÑFnï½÷Ní"°/¨ÅF#<²©Œå‘Ú­§ư¿ÿ÷ÿ” gEŒ•?ûÙÏ”.¾Ă;̀=̣È#jÈ„ÉÀŒébo¥†@ă#`†Æ¿FÖBC î°˜0a‚záA_íßÿ₫÷º·«– 8÷Üs•£÷oû›r¤²É01 CÀ0ÚJ# /ºè"]O´;nÖC tW ê‘à<>0’n¹å–©BôÏ₫ÓƯ~ûíí1xđàT׋â*=x≦ˆôÀ@ôÇ?₫Q£S¸DAg6{öleè̉¥Kª×¼Ơ c?, }ûöƠûû믿VĂND|Mƒ‘gÊÄ0 vDÀF¿v¼êÖgC  N>ùd7f̀å6m&@c‘ß.B¸ưe—]æX"çĂÚ@IDAT ̃J&†€!`†€!đ Gu”&QÅc;₫GÄèvÛmÁ„²†µ„‰!`4>¶Ưv[Mp^ˆăŒ´c‹-¶H œÿûßïj%ŒµÇ{ljeÇ)®V_}ơQ\Åähhtz«¤(O<Ñ-Y²Ä¨­*¸¹—ßxă 7räH·Ùf›90|₫ùçƯÿ÷;̣Ö̀5K ^x¡ƒ¶ÎÄ0 vGÀ í~Xÿ  lö”SNqP>‚‡É—_~YA Í}(̃2Gq„û̃÷¾çÎ;ï<÷ç?ÿÙÁ¥jb†€!`Îí¼óÎêi /üïÀtË–-SMÀỉ¤Iá­½†@ƒ  ¬o?û́3÷ÑGƠ´eñˆ4›‡¤æä:è ƒ4:"Ơ‹â*ßèqË-·4lN¤(¢yˆD¸ñÆƠ©,kÑêe|ơƠW³ß~û©#Áu×]§ôÓk­µ–;묳Ük¯½¦Æ½Ă?\£ZëŸ!`å"`ÉÍËEÊ3 Eà̉K/uDz*N2:"!~úÓŸª1  7nœrè¾ùæ›jü™2e-ØÛáÂ[ CÀ0J"€b¦˜ ¨™1c†‚ç5ÊU¸üQŒưăÿĐïñ˜N’p 9đn 4”H8÷ÙgŸU>ó=÷ÜS 0(=Q¨~÷»ßUº>øÀA %2`À·îºëêûBÿH¶L~hZœ@>úè’É—©‹HÑO?ưTÏĂÛ—R<ëô‰óȱ†§ô&›lâzö́it%¢ưË Çơ×__Ÿ%raơÑ­[·¬ªëP.Ïù₫đøH+±9ă Ïíüùóu¿B„´$NqƯĐi§–VÑËI2z 8°àñơü±ë₫ûïwçœs8‘„ư¤ÑZ•¾2<ï½÷»í¶Ûôïư÷ßד0àơîƯÛ >ÜqíóçÄ̉%Û†€!`´²01 C "Dà%DÜ‹Áç;ßñ÷Üs—…mEe4óÁ¿üå/}×®]½l½x+yá næîXÛ CÀ0 ª˜:u*¡ú7qâÄ¢åˆñ!:–søŒp^(C;‰eU–# s~×/Æ…¨ÊªOy¡́8Àó>Ç_EiéEÉ”Svø0zôèÄsÂùÔ›/’lÖ‡6‡ă⯴#IhC¡6r>}21²D@¢¹ư®»îªë|‰̀ʲªœ²¹÷…æJŸ5q¬̣ùË_r~¯ö{ñˆ÷’ăÀ‹²¸Úb:œÇú_rj{ÙH>…ǤưÅ_|á…ÎHëe·£BÚU¤Rcû+¼Dh[Á^¢<¼P§R~«½ơøăûC9Ä …•bÈøÿưïß‹áÎ?÷Üs­ơÏ0 Ô°ˆ™AL C 2à½é¦›̃>ú¨z›àù¸Ï>û(¿he¥5ßчz¨{衇4ܘ¨<07̃xăæ눵Ø0 CÀ¨!!ªƒ*Å€E/Ĥ‹Á h‹6ÜpĂ‚¿¯¹æă‡_ÿú×_¼x±¶[¼̃ƒtï̃Ư½₫úë᣶›ä) B½ä%ˆ{¨Ñ?f£6̉Ïá;ÚBÙP€¡n¨† Éá_yå7wîÜb‡Ùo†@Ơp₫èG?rK—.Ơˆª ªđD¢²xö¥¢°Ê-Z̃»îºKé†ZîiEăY}ùå—ƯäÉ“5’́‚ .H5'IRåÍéaQIW¯ôw¢ásŸ|̣‰F̃zë­§ƒ³x·̃zk7lØ0eY(-Xº&;Â0 öBÀr|´×ơ¶̃©!@¨2tW„u üñÇkrºR ‹ÔPç‚Ht¡óđ”EF›eƠ†@€2gæ̀™X²GªĐd|;v¬̉v $iV!Ÿ´DP,°171 !7`äĂ3]S(W#qăI¡ó%BĂ½ổKǹ˜19‡`lAø{™?̃ÇÎù P´Ä â‘«k pl<3ÏKXԵџ₫ô'=× ” V₫ưû‡·ú9ÚIÂÚ M ó21²@ äùÀQËç̀“ñÄæqdµưäÙ TsPá‘«/ ‰S\í´ÓN™S\5ƒÑƒëǾ*«ÁBç÷ùçŸ;ËåQúnăÅÈ8dÈ·ùæ›+-˜D¹•VZÉ‘¯C¢dô95jTIÄ̉µÙ†€!`´ñÑ~×Üzl¤†€„Ûª•„áº_|Q¹®|đA·Ă;”ôXL­u*h½ơÖs矾&“#É;‰[á‡sƠÄ0Ú +®¸Â?̃‘G _yæå²f¼DQ¹ƠV[E^îùÇ6âg(¨Q6ÓŒ äv21’ GÈeÿ}Á‚ˆ¸Mfücjïó#/âcŒÀxÑ«W¯èk̃ók₫SN9E£>âJRÀxÁªO·hÑ"Í…ŒDa°@Q„¼ ä% BäG¼¾à0B"é8F(…&œæ ¤03#¬A¨ßÄHñÁøO~”üµ÷CÄ÷}Z‰ÍCRs¢ƠÉ…À<ÖY¡̀+¯¼R•ÑBqå¦M›–龧ŒåQù]…ï$¦á…´î}æŒ 6Ø`ƒÊ ¶3 CÀ0røÏ*<çkû`†@y@ïpï½÷ºƒ>X7$úÄør ¾a/¯´æ:J̣œ(åt_P^¡èÀ bbíƒÀ‘Gé$ïû÷¿ÿuÅ åÂO®I›ùĂă"ÔD„4Ëø˜†ÇmŒ½iyˆ`ˆGHê0‰ZÓ¢±‰×A¤Gœn*₫ïy.ăFđ;ßñ[0`É·rQq£Gø×Ù³gk¤ïñ̉ÅđATl"¿HÖ§'¡>”É(˜Ă±”ƒỉAÙ¡Iˆ±g4 f¯i!À½Çs„Ç9sÛoû[×·oß´/X†!‹bÏqẠ́~ ¼7̃xC½é¡ÎJ#©9eÖ’âªÑàA„û ”øÜ;Dy@¶ß~ûå]ûÈóÄ=“ÆÉÙ¢ `˜“¼:Nr’ăIiÙ -CÀ0 tøQ:åY)†€!Іà‚ñƒM a?̃~ûí–§Daq/ Y]·nƯtSxĂ 7¨r³ oë²!Đ–,_¾\ ÁèqñÅ;¸ÄQ¢à{ ¢qúäGj&Aá ]ơ ¤m¦ö[[ŒĐ7áÉ…œ~úéE‹=ï¼ó ₫>räÈè7Ö2q9ơÔSăs̃o¿ưöÑç±1`À€è;ÆœD Ù9û́³u½ÀØ ‰‰s'œ(‚Íñä“Oj¢HÂßă Çbø01²@E, l¢00|ÔB¨ #!†8u\µu™7=åưøÇ?ÖèÅjË çƠ’âªÑDyѶ=Xœxâ‰ƯjFpÇ|óúƠW_9¨Á…ơÔơ×_︾k­µ–Ă`ÿÚk¯¹ùóç»Ă;̀Œ¹ĐÙ'CÀ0:€E|tB+À0@€ ÊƯwß­\¤o½ơ–#‚IH[Ù.V¬$5œ2eÛÿư\¿qZ »C C 5€æ.Đ[]uƠUnĈeQÆ>6¹(z Q˜ ĐE‘¨2É£;œÛ(¯ôïsC pøÙÏ~ÖáĐfˆLˆ'Fç9^²dIÔ}÷Ư7zŸÿƒF¼Ë¾›3g ´T|‡Á/h₫”_=ô#!B,”½öÚ+|´WC æ`,€æ{ºy># ₫*£`TW(–Ù‹@K—F´G-)®ÙèA”¹Î=÷\‹̣(̣d‚Ft•““µ -rï̃½ƠHDîwCÀ0 ́0ĂGvØZɆ@Û!} ôÇsŒ̣W³ÉÀ( :‹F—°d>ưôÓê Ơ×Úk¯ƯHM´¶†@¼̣Ê+ÅƠĐ¡CsŒñê ¦[ü;îĐ$ÇñßâïQü,[¶Ls&m¼ñÆA¶óÎ;ëxR̀€üᇺyóæ¹>úH©µđºüéOêÖYg‚†çJÎÁ;êa(’oEL!_^đĐ̣@/’/ôê/^Á†¾a BÙ‹qh5ÖĐ¤ÑŒ£Åú_®}n\̉¸åPh¥‰@œêª˜b*ÁÏÀưÏóđ«_ưÊ]vÙe(ÀèÏy~îЇ` Ÿó_©«Œ§ùí¶ÏÍ@0|°¯EÄJb(€(¶:›Û€9‹9‰ç“g J̃Îí«ÅU#=,—Gé»ÙÂ… ƯôéÓumƽˆ°̃!¢cØ°anÇw,]a†€! føHF+Ä0ĐXÜtÓMêYE2Sè!đ{R†c[åÏ’£äx₫ùçƠ³Ïïb’Vé»ơĂ0¾A $ÿ.¤àÅ0|Î]ºté ĐÇpÀø UV¾ à|ơƠWUI/ƒDÿ₫ư•¿¥L\àÛÆKú‰8ƠV¥ç`œ ykè_~rs”Ă›nºiÍoïñ½đ Ưw¿ûƯè'(hß?ÿùOU$ч¸̣8§üc=–h< ÇØk{ À}˜†ÄŸ…ụ̈₫øÇ?F_qœA ¬+Dw…Á14/q!ú“¤äüÑ đºŸsÎ9ÑaD…à=<ƒ[Ưi$̃_{ßx`ø€æy ƒÊÛxDcÚ-¦ßÿ₫÷j̀ƒ:—ú;#(ŸqÆ¢Í8dÅç jÊS\í²Ë.î´ÓN«¦˜’ç4ªÑƒ5†Ey¾|ŒïŸ|̣‰:üáŒxÜÇÛl³;pHa=eb†€!P[,ÇGmñ¶Ú ¶@eÁ5×\£^»P=ÀiÍB¾•¥{÷îî”SNq«®ºª»̣Ê+t_lâL C uày†P~(›ï̃yç·É&›ä=8&î…QJ‡xˆH åËyBßđ˜ ̃’¡öÚÚàL/ñ¼ù¿Ụỷ¤IT¯œ*÷¼P8‘ Dsà„{g*0Œ~ù‚R,ÈO<̃vx%.eS‡‰!(l%#÷+F‰,…y e1ơv6¿ëïç{N#UˆR2dH§§¸b6mZ§ 3I jT£GÈ啯ạ̊ȽrDơ-]ºTï±Í6ÛLÚÜǬsˆôÅhNt9¤̣ç•Ü’́“!`†@V˜á#+d­\C Í8ꨣ܄ T G˜<90̉R\4*´gy¦̣!ươ×ńرêÙƯ¨mµv†@çà9‡’#J|”6(Y ¾+g̀ă˜Á’è™q!B‚$˜|!$nl`SÏ:†¼rQ˜À%Íë»’X=DœAQ‚÷8Ç­Qé9¡o¼b€‰KÜhAt¿Ó”N(Ím¢M t?üιÏÁ¹ä’K•Ä…ʱï›îù ?üpx½ö́Ù3zß™7<ĐƠäKÜ°Aî Œäå Rè<Û3f„Ă‘]Ij9L”¦ù’DÏ# ñsIn%eS‡‰!%Œá̀;ŒËYçù ØœˆÎÏI͉¸"W†Âj…ç°Whô ï+V¬pÇwœ®Sˆđ$á=Æo¼Q£W«ÅµÙÏc-£N+¬~ñ‹_8 D8Á\tÑEjăjmï½÷Îqiö~[û CÀhF̀đÑŒWÍÚl4 'Ÿ|²*ñđ\Æ;êꫯ”vM̉…‰”høéñÖœ5k–*0+*Ä6 ¦A€h ¼ø̣•˜$±Üc=¢è 6ƳgỊ̈_Ä;È8Œ$HgĂŒ§ Â+†„ơ×_?@ñ€¥g0$@/È8cÉ¢E‹"ĂÇU{N(3ÿ₫êP?ơ=úè£ñÚŒđ«Ç•Ûá8^Qø`¼ÁØA´ùJÂySPˆ™´6q¥?2¬P^¢Ei‰¢? c}‡vPîÊç¨Ô8ơÎÆ©S§FƠ†óx–P̉¦8ua,€̃-;ñö£0#j#1„g¥Y‡>ø@?̣¬?>'áùă?µWC ¸Ip^+ĂG ºêLbsÏ?₫Øa@åýlRó8ÅYP\5¢ÑĂ¢<:>RŒĂo¼ñ†ƒÎxóÍ7×ää/¾ø¢̃gØ0tí1nÜ8]·u,Á¾1 CÀ¨ ²801 C SăًË‹Á‹bÏ åI¦ơƠ»đĐ_ iö̃́eĂXï&Yư†€!!¢œô¢\ñBÑăe1WôO ^6ÏÚQz1Xèñ¼’?±•B¡¥c(e3†²Öß}÷Ư^Œ­Ñ¹â•é)/.¢°ñblˆ¾ªæœxÅÀá)c#…Ö/”TǹĐ?Ú.Ê=W¼$£¶ ư—*+ư>₫/^~8/₫»½oÄ8Ưó'N¬ºa¥~Ă…ă@Nñú…ƒ>ç7>HÄSÔ¾Ruˆñ¢ĂùÔWê<Ú₫x_êœđ»P¥Dụ¼†ï‹½a%:Ç̃Y! W^Œñ^ ~¿ưö˪-—ç”}‚D+z¡‹­º.Ú,FB-K¨º¢ù¶)‹5=Ï"kzQjWSLÑs$ï—¥¹ÖAßEy^ôø¬dÏ"4–₫đĂ×61ÏK”‡ʦ¬«nØ̣%úÖ‹3›‡–hƯĂ½ºÖZkùÑ£Gû7ß|³aÛn 3 CÀđ̃">d%cbÙ"p饗j˜4$´½÷̃{#çlk®OécÆŒQ~b¼:ñúÁ“ËÄ0ZuÖYGi5ÈEÁsOÄÂñÇï’rˆ̣H½ØeªÔP¼"D6À=wîÜœ?¨mCáXGˆáè BùœKî¸ÇÏ8ă ÷Ê+¯h^ è®BôçVs畨/ây=âÇăÉƯ‚çlèo8¦OŸ>Ñïá;{m.â¼åñÔ&"(ñGOp¢( €‹G7qL¼₫ø9IïI>NdF’ƯAâñ|cÖÿ}øL™<÷Dˆá}±₫p”Z¾ăy…3¾_¿~|Ḷưabd@<âO÷üñ;­ú‰(!º‹̣IFÎ|V­ÅEÔ%уh+-OŒ—™S\5Z¤GR”¹„}öYÇÚ¥„ëO^5(M™×8â÷ÔSOéưDD+ ̀ÉsF¤.k CÀ0 F@&†€!`dÊÇ{¬Ê/›/Ê/ ́̀ë­W’TØÿà?Po)á}ơ¢¬¬WS¬^CÀ¨#DHœ₫ù:îÉrPÇ¡´ÑÈ "E$Aº~~+ơzñÅ{¼P<0…j§àùÔ#ʪœhŒJÏÁs=Dm„ˆ¤ï A2xmK<â#|—¾E|ä#̉>Ÿ‰zcƒ₫}úé§îx<âƒè„ç̣¥—^̉?1ªä<#…*ä¹{æ™g¼PYz1>è+m-%ôº8¯a^ˉb¢ÔÇç§E©¶Úï†@Æz¼ÿ™—ˆFEpüçỖơ'ôvêMß»wïªË%zJh%µ½B;ë…̣ªê²Ä˜é…æK£]vß}÷NE$5¢‘"=,Êă?WˆqÈ\¡çôb„‹ÖWDơ 6̀?÷Üsÿ9Ø̃†€!`4߸àÉjÆÄ0 ,Àƒ z¡¹R.øáÇ+‡û>û́£̃]YÖ]²é× AƒœĐ¸¸óÎ;ÏáƠL²Æ¸Gh=Úeu†@:àyNrO¼K>úhM›ơ@ÔÅ„ ÜO~̣MrIÂr’ŒË*±CCàøgŒ,$Dvà <ÄñÀ¤D‰_H”£9 ‘I*¾Í6Û8¡¢r;FeTzN̉˜•ÔöBm'5§ƯIå:×¾oOˆz(ùÑYDˆ°@x.{ơêUQqx“¯§R'Ç_¥B«©¯̉źxC Œ×Ü»D52×à¼3‰Â Ơ">ˆ0éLbsæc’ yà:¡"*TeÑï)Ghû´¿D”‘sˆ¶¥%éA”9 ‰ÈăªF±Êº¥K—.iu¹¡ËaMC^˜»îºKï" ®9k(ö¬¬ó*‰.lè[ă CÀh3ŒêªÍ.¸uר'(3?Gq% krĐ:´¢@˱É&›¸>úH©j Â01 Ö@@<̉Ưe—]¦ÉÈ1p2¦¨‚âF₫¸‡Ñƒñr ư¡,!)r(‡ú0&rÈ!îùçŸ×dă$C¾öÚk •ƒ@í¾ƠÊâíå#NHr?&¼'ñ'J-díµ×6ĂGÆ^ CÀh˜oB‚sŒéYsDg›£¼fîœ?¾̉\ :´ª¦BqộË/+…ó(TG[l±EUe%Ô(Fú)¹Á”xÈ!îóÏ?Wʦx@ =í`ô`ƺk°P¢‘¬üœsÎÑûP"iƯÀƠQOr5*…¨=’îfûÎ0 æ@À Íq¬•†@Ë 775;́°ƒz6ăA}PŒµLG¥#xÉÁĂÍæ>/X°@½Ă[©ÖC ]À“4DxùQÊđ’!ˆPFi¤[Ü€B©Đ8¸|ùr·₫úëk8§QđŒ5J7êD’£̃¹xæ921B5ç„6ç¿b¼ "TB9‘&á{¼f1Œ„¾[´G@Æ^ CÀh0|`èf~"â# aÄájÔ¯ÖÈÀ|ƒs²ƠV[U-E.ªSO=Uç­vÚÉ~úéZfÿÅèA”ÇwÜáè†ÓÚ)—h3f̀Đ{„¨:°" …NÔ½ơÖ[N’̀;I:­ó̉¸₫V†!`†@}0ª«úà^Q­„^†¤¦I'â­@ø=J^M̉A€₫k¯½¦‰.If&\±¼Ê*«¸ƯvÛMiŒ…Â)I₫̣—¿8áoƠóPn…$´IÇ殹đ‰:áo¹E×k®© Î…?U7Q?|đÁȃ8f₫|Øa‡¹‡zH7„‘÷́Ù3€fÆÈÚn4#̀ A‘@̣x¸I“&åDZÄûuÖYgéÆ:₫†Œ 6Pü@Ñ1bĈó IɉäÀà‘ƒW(¤0‚\“ïđPŒK̉z sâeÆߟ{î¹Nø®µOp€#ñ-Ô÷ècĐUå º0ö7Pô26WCÙ™_f©Ïè<уñ²Ï*¤g+UN̉ïô'TÉÓ£{/¨aæ0idól̉ÀÈ€ăe2kÉmYôưÉ'Ÿ́eáØP=¢2à6T›J5FhKü†nXëp-d‘˜¸ZO^&-C”M¥ªŒ~_s1²øgŸ}6ú­o²¼~âƯåeÁ­É Å;Ëó¹Ùî•r®‰Á¼„P{Q’zñ"ó$L41 æG ¤›9A¼bưă?®‰“EÙªÏú¼yó¼Daèóæ ¡Ñˆ’)¿ưöÛ46ü& / ç½÷̃Ëù-$çÇx̉pÎ' gŒ‘½&eå7¡qĐyªs“ó“›S?sCø:hÉÚ9ä —_~yNBwÆÁ qÜâí¿ójÉÍăhØûÎ"@rp’„“èÜÄ0ÊG€±~Ù²eºŸg,/y Ê?¹Œ#)Ÿg“ydơƠWOÜS•*F^´ æ[ÉGRꔿÓö\â¨æÅHï…2²Ă1Ơ~щ̀¿₫úkÏ₫VœÏ'‰̣đ§œr§m­,¢´ơ÷ƯwŸßc=t¿É}Æ~LFưÙgŸíß|óÍVî¾ơ-CXç£ăá*ö'I₫„NđbXͤ5Œ]ü%‰:uP¬}è«x>„;§tè9WèzSû µ9àI›Đ¥¥%¬7Ûl³è:¡çc<4iđ4i`P Tbøƒđ›Ö]o{#(đ˽̀Gq„.x–å¼ Ï»nÔœ*„[Ö3Ñq~µ†±¾{ámÏ)·V¸~ÁøĂF'+ƒÚ«¯¾êÅÚ®‹P¡¿̣LĐÔƯjÂä*”Wj {ä‘G<›4CÀh~˜3‚‘»œùÆx·æt<ßHP¨ñ ‹ÎcœŒ Ă÷a~ªæ6'¡¸á…†H”Ga¦PÄ»̉³A b†€„½†€!Đø`Lg`_óä“O¦Ú`ÖĂ3gÎT¥ôvÛmWUÙÿû¿ÿ녶ɋw°?ăŒ3ª*ƒ>J.uØ}÷Ư½DTUN₫Iơ6z0‡Kd¨ÏsƯ“J”‡:±iU¡Ï’¿ÄŸw̃y~½ơÖ‹”µPà²'ă11ªE@(ñü%—\Ư[…Ö¿ñïwÙe—ëÿjëç< ́)¨£OŸ> B¡«÷{¼ ́W$_GÇÿ÷½{÷ÎÑ÷à̀$¹˯¦í¥Ú¼`Á­¹]Z‚Áiö́Ù9ưÖ/ù}̉(̃Êh,LJ<åÍ"P,–ú‡?üAo‘N¼A5Û¾ûî›C!±÷̃{k(—܇ Ñ=Âç!tt̀˜1Nô9ÔbÓ§O×0?°ä0è[o½Ơ‰Q ÂVVnÎœ9ÏzôCo;«»&$üX₫*JI÷Y4æ$ÓM³ô=z8Y€:êk¼÷ᇦYEC”uÜqÇiRw( !ÖÄ0ñ$Ôwæèb̉·o_»IˆOùíÄc=Vp¼ç\B-ÆÊd<|å7BÆ Gª='”)›¢œ¹`ë­·Vº-( Ib ¤IØĂ1q°đ]₫«8}D‘´ÛÄ0 C >ˆ²̀Aï+ e—v‚sÊdoË₫ç‡?üaŃ¾R-.]ºTiQªIj§¸’¨MîÍz½³Roz+(ÄÚ)—בµÔ¡‡ª4C¬·ÈAuôđáĂu­Æ}"Q°®Ô­³×̃Îo]$zJŸ« .¸ êd·nƯ4OQĐA­5 8GEÇ@±ơUZÂØWˆê?ô*Ô‰@étÏ=÷èñŸ}ö™„ă•g$È‹/¾øÿÙ;h;ª*ï¿ÔÖnA!$ Aæ!aC˜$&AHĂL€ S@ E†$a!„Ä„Ah@Ă$¨€Đ *.́¶±]½êÛ¿­»<·^Ỡ½ïoïµ̃»÷Vñ_÷ª³‡ÿ‡z¨}lÊk¹1Çr_€b«"FÎ ÑơÚ”0p(½:÷1r¹ô<ÇG]kŒ(ÛùÁÆ?ø¢E‹ÔЇ¶„lêi2a”ç.•À$‘2)ç'Ƈ«®ºª~p ?>åD|ꩧ´qöÜTPÖôV¸‘Æ7Ó̃¶×îơ·Ûn»@r`6+béפ‚â\¢äk÷9TºK.¹$]€ngÎœ0˜•SVjÓÏ;@{ „kŒlxÅØ'î AƒỗP‰§vÉÅC>9;à:'/†îñ´“'$$ecEÔÁ‚¢ƒ¾y Ï30ÔZ£ƒĐ†äu¯ÇÄsL蟱³©ÏYU’‘¤–µ/+ûí·_EG©S§₫\GÀpZ‹€åùà₫Æ=§‘Â=£7‰ÍÍ!12DÇjưc ¿ổKƠ)ạäÉuç‰ûm¥Ñƒ9I½:ZÍ›7¯«sy hÆÁcÖ¬Y'ư<Â÷crỊ¬ââ4ŒèÜƠw̃yç T%MóưĂùĂ#Æ<0` Áñ‘ü|È-Áóµ9Rñ>MÈ H₫TƯ!:ryÄÂoâ”SNÑqî½÷̃zÊrl wl†”s3ú£MîBѨÍ3gœÉ\únøè kBëg‘8 e1ɹH2JBn¼đÉzḲ€w °xAø‘Åy $cb/,Ă(¦QnȉŖD`ô×CD!³B3vñ‡̉……™÷ÜH†'–W¡=̉¶$Ô¸DуeăJc”:(ˆjÙ|óÍKÊ1nk×”NÙ¹S±„ójåÎ=÷ÜÔh$€á¢‹.êaô ® 7 ›Ó›8"ÜÈS6JƒE¼„;V“Ø¢DZguôFI¢΅Á‡Vê1¾́yúb<̣ˆ¶KYÆĂ5”PtN ׋ÿ’äù£T³äNvä \DÂ9µ?úÄC&o<…Vy‚ïÑå—_®‰}‰a¯„ªÊÚ¿$8>çœs•W^HXŒr’ï¿‹#àt>l¼ù¡É W7&ç»*F;M(i=ø8 uGÀpGÀpZ{ƒ8¹(Ÿ6$‰XÔgbö'yQS»âÉ›ˆÓ”æ \k­µjæÏÅYẪˆ=‡8$́‘{+­ÊéÁ₫\p€ÎGz]™Ë|¯½öÚ„¼¶‡e®\ÿóÎ;¯$GAo¯¥×w² £²ïº91Rd‹ôø̀̃}•8 'bÈÈÍC$‘t=̣qX?èeÈKc‚¾Ë’[{µ<è£ĐKq\"1„Xơ¯â›ˆ±4ZÚää“ONËVÊñÁzCCë;ûJ̃%ÓIU3f¶üo9>À¶Mâú̀ñ¶ÛnËíưåy#G"tĹ岘Ö2“¿vܼͯW=†Ø¨$˜*I¶×_ư’€M±x–‹ Ôoü’2,ô< ÆơLé+î³  •‰Ç˜->băå«XqKúå8‹ŸD…hŔØđCâ6Œ6±dÇ'Öí„r܈hËÆ×)÷äiå¡ucăTv́ÙyÆŸ1d˜*¾æÙ±dÇ·¿«}'ÁeüÜôâë—·÷60~p3°cñ+ßn‚Í–‹/¾85L åW"Ñ'Íî²OÛöÙgSc̃´iÓ̉Œ>„wæ8€#à8€#àT€DưḳpöbBó[EÊEØ×Đ{ Vµ>ï£̀“H”D¢ă¡¨ªÜaT‚¾qÆÆUHJ”yt¶¾·­2zˆ'´*ø„S±”(äØcMO7óC1|ÜqÇ•8₫qƯq&“ˆ#–‹#ĐLX3V¬X‘êHĐ—4BĐÏÅú–¼÷8¼¢/Bb#@¶,º?‰ôJĐ5l´ÑFi»f©e¼å ±a…1 cBGÇư!“ơ[͘Ụ̂ĂG<–¸ư¼÷!£NÖå è´À©u.ZÉÿu™’oKw oˆX¥ÓĐOhÈa9@ÄÀDiŸRAw$‹–Öƒä_¼™đ‡~'øđä“O*8´W¿úƠ¯ÂV[m¥å ¿¥¹–#W¡hÛn»­ăásĐkA•'$Z¸p¡r¬ÊD)µHÈDèB(+üåp‡sl„ )­‰˜ $DPBr› Œ#›DäF`Àˇ:ÜbpĐc„æX­0Vˆ°‚–+OäæüqÅ, Ç&V‹ë"+HIU0”›lź¤“NRº/;Ơc§,̃Aq=Ö>ú¨ăÀܹs5~¨¤¬a6_Â" „* ŒbÚ®ïK/½”–Ơ†ôïÔSO ̣À®ap¼CáƯ"o¼±ÎübäÑPÔø:wË<}€#à8€#à8ôÆPó¼Ú¨<´Å̃ưÛk¬QS̃;ê²O„ÂZàZi®ØóÅ´³ÆÙ_ï•j½û?öÆcÇ |°î×ÉíɾO:.˜ư¾xl‡áÇöNW_}µ̉Ö 0@sˆr7,^¼87Œï€‹#ĐLø½A·„ 3¶Œ^w;útSPÔѯÂL¢§Äˆ|đA]ï â·€}B>ôLĐªC£.PáÈ#ÔsüCO†^”Ûô[¤³J+¼A( 1J}OhvÑ¡£c]%ÿ-z/„~ÑÓU3f­PĂ?tĐV¡ĂƒTÚ'úÏo¼Q)ùÑ/æáÄ}ƒ4ờ¥†!zÑ6BÀ mt1=’£ÔFN<ñÄ æib%fIÊă…?ÈCÁ⡃‡9„d̀,¬ÆÁ'á–[nIyÅyeñÏĐryPƒ J^«Ç±X$b#HŸrrZ2Öo|ă©‘榛n cÆŒQ>?êÑ₫Œ3Ô°băÅPĂMr¦°gÑcñ‹åæ›o¿øÅ/ô ϸ10Wrp đ2jnÀ¢yY,₫ô˃5܇üÁ¹Ă;¤x/Y²¤‡‘ÆêóÊI¾Gî Cɲ,a®åxáú $éă„HØb´c ùQ¬›¸`yˆD¸©b Á(có R”\W+5áßOäéÚ9sæÔ}ƒnÂđzƯ$9p~̣ĐA"E¾».€#à8€#à8@»!À̃…çVöH2|°gdoJÛµæ÷À‹ư!û@’ ³Ÿ«V¨K²_æ±̉J+©‘€1Ô+­0z°W»óÎ;Ăf›m¦{$rm’çÅ'ÎŒ*|'PTuÖYjh5j”îy¹>(…ÑàŒÇơĂÈăâô#̀X€¡-/¯Æ:t4çŸ~˜>}z?̣—¢kAĐ³¡“z₫ùçơ³°–¤† `ÀÀÑb }̃£Bgù,Èyç!‡ëÿX00¶M6ÙDu=Ô?äCÔá™ùU#8뢧CphF·dë7º#‰̣PĂŒDhtèé*Y Wù¬h]$}r-ÈŸ°6â0ËZ‚”Ă©̃¹hĂ₫¯£pĂGG]®úËB†W ‹ sọ́[½́²Ëô¡–c’C­ ,,Tˆpæéq³vsŒ…Nx_u9đÀuqáx,ÙÈ…ø 22±bë«"XĐP¼[tD\—E×¢$„NoF”g̀ưby6C  áÀy’i—E†p#°›e!D-˜A"n/Æ;ΉËØ{»|¾êª«ro¶Vˆ@ázamLjCÍăÖñ¬W ơˆ|ムJ"Ö7V{3´:½}e$;®ÚÀĂ<7~g1§n¾ïDú`èĂè…ñÉ¢›ºa~>GÀpGÀpî@Ås£œ³?yùå—ußb³jĐbOÂ₫F¨™kö`/ˆ#b́q>ª¥ḯøúÚèÁÜă(ö¯́ư:=ÊcÔ¢E‹Â₫ûï¯{{”½¿₫ơ¯Ơ0…£"º$j7…jöZøgG ™`ô`Ï°äíÛY0UƒEöÇGöÿÔGß…~!¢ ưéÜô üCO°ƯvÛéwçWŒ$y:Ú3}Ơ%iù­·̃yäM^nÇăWÚ¼ưöÛŒ1, x\&~~q#¬Ÿô±öÚkÇEô=ú93€zº¬ä9[&ï3m “Å ÎÖå$s)קŸk₫ÊkÔcñQ4 FsÄ{h,ĂºE.™i4„E>u¦Ô… }÷ƯW>P¤ce¶èk¯ÚWÂS o.h·̣Œ4”GIOß7oBé$á“̉p½öÚk:WŒDb+(±¬]ú~¿@yÂf±[»Úx™y7Ÿlqđ²È”ø–y뇛”by7ê`È°kF$ sæÄnÂ5„~̀eÇF¸ơguxåÆ‘ỡÊÖË÷Ơ{¢R$¯0Nñà –D&YÄJ_¥ưđÛ?~|˜9sf„|ï dÙy3úö6GÀp₫„^Ä(̉¸×º8@m`ø°ˆhrÙWæímji•ư ûKÚ®Åø€ÂjÖ¬Yê$‡¢k·Ưv«ºÛ˜âjèĐ¡½¢¸êk£˜Ï›7O™0üàÓF¤&́5™̀Dïđ]@ø>°:úè£FáƯióóñvè^x~¸đ '†“éàÁƒ ÏÇ'X?Đï 8À!BôF@t¦ƒ³cünªƠ»¡/Áp²téR]³y‚& ^c₫¨1M‰6©$èÑĐ¡å ú&ôtˆl ăk„Í’çPÜ›¶[5—̃ŒÙëÖ†€>jĂ«#JÇÊ}”Ä<<`Ä0e8“€²ªZaá"œ”…₫>Öa₫:ñÎ'ÔØ¢-ôDÿè‡E!\nå•WÎm‰±ÙCw1!ÉØU™Œ!ăf¡˜bQÆHÀ{£¹)±38Ơ#đ/Z}X¾k l¸yß´́Zå•ăÖuë#ÒÛXT‡ăx5Ù ”v§)ƠÁ:5¢”0áéĂC?ùcxàït9ăŒ3Ô{„‡ ¼Ègâø~U}ü€#à8í†N-<#“SÇGÀ¨SF³wÁƒ—ß‘EƯWßJiI -¢íZ ́k <Âá‹}Aµ{8êÅÏÚäÁ¨¶néȃ:£¡ÈĂœư(Æ04CPtBQu1 K®QxˆăÈ×iÂu‡ûŸü8]ç<Û́áqt6lXÇíY;í:øxkC±‚đ6C]Ü Jỵes¡ĂØa‡⢪ױè ô^ùk– 38p`8âˆ#ô¨ ‡yÁƯN¶yÂ8Mˆ~=]Đë"Âï=]£f6º¥¶Ûa.ơŒÛëÔ‡€>êĂ­­k-X°@$Êâ¼ÄK(ăyˆ*Z40ll±ÅéâYmøó°ÛC ưđĐʃ̃#G̀¥¥¢\µÂBdtZq®l}¼m±á€…–‹.$äÇ \Ls…‘ÂŒ4ܤL‰Öv"Gª‘»ï¾;¼ùæ›…EÁ&ƪ¨ ˜Û\ÊÄÇăñÇÇí=l›EûعN{åú`d#:ˆåÑ£Gpç;Z]0à:ñÀAâ/Bö™#'ŒT.€#à8€#Đ{₫ç₫G´T˳Vï{öîA€çqh‚Ù[¡ ëáåô'ü6y®ÖđÁ桇 o¼ñ†F9°¡¿FQ\ơe¤G7Ey€4@(U¹Êd¾S°`Īvÿ]Í5÷2@³àwIôëJ5N¥FĂ„^¨HĐK¡ß)tèđ*ơÇ؈ÊĂQ”ö̀8Û.íA_ˆ‡RhÅ1³¾ ú9ôtơ³¿Vç,ôtV®È ØÊ·âµ›æ̉ ü:­O7|tÚ«0^ḲMQ£©²$×cÁÄ[„dDµ‹̃üa4– .Nøûˆ¬@ˆ$á!ú«̃È!C̉(’«l´Tq»ä,±\ PpÅe°´ssÁÿ̀3Ïḥn®‘qăÆ©§ŒµÅx-ªVix+)Ÿ¹Ùa!çƇX"6k×^Á+O¸¹ĐBX$₫Ơû́³OUtOxÎÄ*₫äơÁ,Ùx˜…>¯\«‘ƒ„ï-7oÆjÆnØ•Z5æjû…º ƒ!̃kü†ø>GUÛ–—sGÀpR 5)G¯jeüƠpz"À^º+œªà‚ï u û›ó¬Ë3¾íĂzöZz„½v8¬át7`À€̉ŸEqƠWFn‰̣0%,ÊUöqà‡àœ‡<Œ́U»Â¸à«ç‡»Ö¿x½‰½FƒrÂZ‡ÎªœÑƒ|·ƠRL•ë‹sè»pöEGGdt_E‚A} Âïơüc¡ƒë4z:„ß2zº<º+tJ̀A?‡®Ư¤›æ̉nضăx₫_;ÊÇT?<<¬X±BÀ²º̉J+iÔ¼Ÿö@Á¢‹r?O0`́¸ăZoáÂ…uAnŒ<,´‡T¸ÿđ²Á¢ w`³ä»ßư®æ­ÈkÿÎ;ï,<Çxíæ„qå?̃A ³ăH¬Ờ‘…ÁûÈ‚J½¡̃&đ ZvŒWŒDf ‰“Đ ª,„N^]+˜Í‡klṽ^O8á5ná5c7;wơƠW§Vz;Æ+å¸!AA~”l½¸l+߯¹æaö́Ùj€² ă´E†¥VµÖ¾¡¹"¿ ¡́D€T2TƠÚ¾—wº}²&°Æ³&ç­·yóG‚Ç©ƠăßÅpºsP!¸;ºqŸQ7"€âư v8!ơFhç4Ú¬6Úƒç}œÓ/^¬ûZ([ªîơFqÅ̃¸^«¾2zđ,Âw³Í6ScFöúÿ:…Ú ¶öđ»îº«&nfỄ†½́)§œ¢95ÉßH¤»é(ª¹–^Æh%Ç‚•y (FöØc]¨­ ă‚Ă™ĐBêĂ!‘0ÚXn+?ỵä’m¼˜°âgçkå¡%Â{ÅúGq]”̀Öà ׌äXÆɃ¡6ârö>ÎurÑEé5±söÊ c <—-[¦Ü‘x6Ú\ñv"‰€XN=ơT5Îp Á,"Q*]ă¸|3ßñ‹_Ô„†pṬ½ÄH…³è:5s,l›ïä”)SôAº5~oÙëÔÈ₫¼-G ›ÀS ª₫P L4)͉TnÇwœ­k²ÿîÊ!Öưçđ̀ëôûI÷_¥Úgh±ÓKí­x G #`-ˆøè°Ö²bZ­áƒûóÍ’¯aÏUÉÓrôÓ«¾0zpïac!ûP«xlCYCTx»'0kö D¯³_#19û¾7<§101B­·̃z\G £À pöÙg§cÆ°3IÑs#¿‡©S§jFZéoohËrd°¢ßá7 ÆBt:èoĐ{dơIV–u”ß‚¡Ôœi1¢¢»æk¬hWÆpæ­FĐÏ™¾ ]¨¦Ë²ú̀5ôû†ôKY‰Çœ=ן9—¾¯÷Ñ;ÜđÑ;üú´6 §Ÿ~ºZ™±4ÛßFm¤‹ ÎŒsï ƒR*+30ĐéÓ§kx2ﯸ⠥e2*Œ X’‰̣`Ä8€b™úă$4‡.å<Ö[K²1Å–h„ˆ®{|ưđTàú¡8 ¯V ̀̀!Ï×êqÖÚ?×o·ƯvÓđïÓN;­+æT+^̃¨¢ÁâơŸ5¯’ƒ55ỘIƠÓ¯×éø>đbăhrƯ3;Ÿ‰E|8¼ú`}$âƒơ…“ơJ=8÷‘üfư«‘˜â=N6ép5mô…Ñ£“£ăë!FDŒÙf ¿Nä†VU;bÉOëÇxË0îÄô8‰WAÅ6åf”Ȇ$­ÇÉ!‘ÈF¡l]¹Q%rMëe¿+ù‘È&'=ßê7÷ß"^:'Éy’ˆgT«‡Ôë₫åÁẸ`•|ík_ëq{Ư7àt!²QHÄs¨d}ƒmÉư(;m¡nL$d½¤ÎyçW²fëøçîE€{¯ƯÛÅ¡{'ÚOg&N/z}E ×Ođi;A@”z‰(³¡ Nx¯W₫đ‡?è=˜½’D«WlF½’oûÛú;Îø„ú•„=(µÎ§>ơ©D”‘•ªô8/ô¿É.»́¢mđ̀ €=Êôæ÷Q–&¡}đüÏ₫ë¾ûîëM³M¯Ë¸Åé,/ơ’}³° $BưœˆCf" ܦĂ;pZë ­-ö́Xô.Kœ‡qâƠß8ú1tT¯Bù¦Ç‹êsœ5=^,bÔM„}¤¤®D¤ºôSè©ÊµŸËöÁº„N‰2âô›ˆQ%íưzª¸~ö=käï)Ù‹U³Dˆi›`†ФÜX¬Œ8Ă&bh̉ú1Æ•êÖ;ë×_;ÿ'_P—.@K1¹#‘yBôá²Xsó„ÈBé°̀bÑFx…ƒ+1‘y‚5›è ¢0¬å ‚Â;ß/ eiF@IDATh—¿# ¯’ÀHh,ĹEá9…̃©(Ô™:¢1,4˜ùáÉ1Û0j5fœ¥|Ë2Ɔ‡ ¹=²BôxÑ'Ño¼q¶ˆcüäU©FhOna„ ic¶̃\øƒÇ:¼ ®¼̣Ê4"'>•8$§Â‹ÊDºKèĂ(¦í"$Ă#4“ëËXO>ùäÂÜ'í2æJă …q¼¤®¿₫z uôJ¨ùyG 'px—‹ú`í0O©µưˆ#àtñÑMWÓç̉J,ê]¢ÁëQ“¨g4̀´W Ơ÷s’ă9L½Q¹ơ/ù^S\5;̉££<Ø“àáÎ>VØ( ºaÏ,Nvª3À«œÈ16]?ît4èD °‚iƒ¨"±– ̣Å:1+^FèøĐå z&ô{èñb!ßÈ&›l¢Q%v—éب‡ V˜rÂZ¸˜2+[ö¨Çåă20™@Ư%Æñ½[¥1[Üе™”‹•Awb4ÿËÓ÷¡‡̀ê÷ê‹ơë¯À‡°ÏtÆP}”F€8r#đ`ˆ1€đñ¼EÂúï —Ë©æÜ`b‘FYËB’'|ÅLùÄĂj=sèœ$I8áyôK¨5ƒ•Ú#̀đ†nĐ„Ư„GC'ô‘|$o¨=®GB÷—^zIçÉü1>đ ‡²½RßqƒàW+Ñ(Û0V₫—ÅrBw¤ ¹DX³ÂØàd„® \¹ÁPlÊ Ù„¦ó0nxE×ñ0^Îc)*W®ÏfŸ»öÚkƠX@Ø=Ôk<ˆd ?ÍC#Ûç7É÷”‡B0xàư5²oËè&à×ÅxËo'Ö́<åëÈFiu$â#ó(6Û9îlöY;Y¹aXç¾™Ú§m^Y‹X7Yw¡7„vƒût‡¬ÙåÖÔZúŒÇ€2 j ñƠ{#æËxPV!Ù{Ơ3h/ÙppïÅñ€úE÷° ÷C° ï¥K—*%%÷Z6tÜŸlYÄ“¶,µc†Nó駟Ö.à³CvŒ‡gñFÖëÈ{3¸_rŒ ›Ïø₫ͽƒv×’1È@¡ú4ÚH6i.Î'(ăPœ’wÍÅpêC€=:(ÓpC!W«p…Z…g]öŸ́GË ÷vîÜs¹7q/.râ³v¸—‰×¯îáx6ƒ”ßÊ”{m¦Ñƒû”4ä#ĂÉû#”`Ú®ÉËÁºk‰ºQ%-Øqå$óĐXy¥rß(?×­đ{æÙdô2ü.xöÇèQ‹>‚çshƯ¡¸²gj~S•Ú uyE'„Ñ +,y₫æ9Ê@ÏÙ Ó‚º+¯N¶¼Ïô‰~¹so tḰ‘¦i§1çơ×̀cơÎ¥™c̣¶ˆ€\`G k |P7ùÉèßĂU„R·6fQ́”P]µĂØÚu „Z‹‚S¯³$KD‰Ơ®C­j\¢¤KDù¦ó‘|?Ÿª&í…:ˆ©®$j/¥¾₫vDy†“ÇMÇ4W¢lHi²̣¨®æÏŸ¯”vɾÊĂ}" ¸ùD¢ëRFñâêA©emH©D %uùPOŸÖˆä¶Jdă£ó·~x¯¬ḌX¥ç²cÅ’†•vq]̃‹WgZJêغ˫p§óë‹ç§Î¬EÁÓclœÏ£¼îàD”\=ÊÓ6ưÉæ°$„ñX¿ç{nrơƠW§Ÿí¸½‡ªBÆs‚˾ÊfÓ`ơ×G@|ô:/Y²¤ĂgâĂwZ‹”SP®°–‹!¹®Áˆ’.‘<‰(Û”FªR#bĐN ©£¼äu¬T\)+Å8£¿ùz(®Io%ÁgöxÜsÄ©@ïÏ¢<¬8¯¾.ÀXEQˆSYbk(c†:™g-¨«¹–.€#à8@;#€µÍÅè:Pd Bu’ˆ¥\,…₫)iLJÊ|Æ ÿ¬x£ê˜Åë'1åL\Îßç#€b%›±K/½4W¡˜_³=Θ1#Añ&‰D%l@\G '±áCμù‹Åï%¢5«¿é\X́ºWbçNÄGî´¬™ôùMI”_Ă5Cä7Éư#=†ïJG;}‘WD"LÊg|ä“Ä Àó³ĐZ–-Ÿ=Ù,£÷'æqđÁ+vÜ3%Z¢-sypŸga HC/ÆI’œø:ưÖøgGÀpvF }ÈúåéÉÅhĐl@!"hA’C+5ín½ơÖi®FôÓè6̃~ûmă¿øÅ ^®Ú<¡‡Ởr5z<Ø̃´iÓ¡‡ª˜I”D…¦R̉tâ\3|›’¤L©i˜¡¤.€#P¸ÂÆèæ›oV¦¸†<”)5T„bCăTâ í•(h´:|ƠP-BÉ!•đꫯ£A‚&‰đîru}Rw=öHû”(‰’\#ơö)—zïåDBßéüN„œ‹á ¥œÇ µáù&’^iĂÀJ JÅ9̣}AE›±0h®¸ï!Gq¢ ”Tv-¬<\Ç„ĂóăÀx C(JD)–b‡8¡ùgœP‚ĐB1(D"?´/æq,ÜkcɶÁX Øré| v5á¹ÊÅpêG€5 (§XçëÉóA=̣BĐûr•â]wƯ¥4P΅·ß~åëZÎ₫{!{?̣"V+Đ9‰a"Hd˜̃ß¡u‚Ϋ·Â½(ø硶‚:j(îAíBm^Ṕ@cÆ5=z´æ•äùyâ¹ç’K.©xÍz‹—×wªE€ßÏå<Ÿ’»ïÈ#Ôß,4Ñ.€#ऴ³UÆÇæÔƒ€p¦&’#ơî“/{"IÖQjÔÓ\ŸƠɛȼüñr©<§Åø¡^^„bă±”G¡R}‹­-ù́³Ï&¢¨Ñï³vÚ₫{ÜZ´¼÷₫@é Êq¥Đà÷Ïúgª(YRhbú$¢=̃}÷]ơ$¥l6â#‚ Ư¬Ä‘1­V|œvăè k#n;>¯¥Ï¸^vÎô)›À4²%S<ÿø¸3[7¦çâ₫÷ qdïăóË—/Od“6Ÿ'’ÆîÓqDN6"Æ*Ç´YơÁx˜ƒưAu••;î¸#=/ œôt\×#=RXºâÍ÷¾÷=½æN]Ö—Ó'Ñ@ÑÈ^‹ˆ ÉKQ󈈄:I’̀&’{£l}î PJrOŸ)&÷PáÿWz̀§zª,æ~̉h6üXsxÎḅo|#5j”RíåEWsḶÎ4{X̃¾#àtùÙ¨ånçât*«¬²JÀ;₫ơ×_WƯwß]–yô¶ËâuJ T<>¿ç<ÂơcíÆ‹cÂë»v3n¢;‰á=^½Ù́¬YĂMöPÏD°¸tñá‰w»çúLZ‹k7ÉʼnX ±a'/ÑD ¥Y$D†pŸ%ª„²ăÇ/*ªbôÓ§O×dzÎ:«lÛqC͈ôà6õ¼pâ‰'¢ú¹?3F÷źùZ)\’«ßvÛmᦛn ’WP‡Ă3‚äm _ưêWƒ(–Û)¡•øyßÍA€ïå{ｧ‰²I–ửK/i”‘Đ€«^G ¹L¢n"•Ö_ư°ù曇‘#Gæ–ơƒ€#Đ?pĂGÿ¼î]=kÆ+…A·#(́«QÈ´ăØÛmLÂn¹å–0bĈ Q3NÎæÚ•¬b¬ƯÆ7“N:) dó'̃naÖ¬YpGÀè‰'IfR!AÏ@ø;´lL©]Ç G,’ƠW_=đ‡ăµ×^ ’ä3`˜X±bEqUÜĐ_9¯Ø\ƒCQ̃ö‰q´hƒ® **(°L–.]RLM:Uç8‰7lj\ɧ- 9Yc‹ơÁkLO·÷flàƠÚç=tâlÅô•ñ`à6«cqpq@à׿₫µñÙÏ~Öq À^‹5¿ª+£¹b8”û]r¯‚n …¼$5W­¢áăđdWC‡­âªÑFîE&M¤´V(eqȘ–ÓZAáÈ^âúë¯ĐcB!‰pƯk¯½ÔÑ@̣z”½—áïÇjà™û2Æ ŒüñlÍk9ZgÖ0pđ·̃zë¥<÷»8€#P„€>ñă€#ĐÑà)|ûí·«́駟V®Ẓ·Øb‹”[¿S&ˆ’. p€̣ UK8üđĂ{(;e>>NG /Ú*₫C9o5¹<0\ tA$T^½BË>Pº́¿ÿ₫añâÅi½ZÇÎEˆå¤¨T¿>ñÖ´yaø-’¼È¡áPƒuˆæ¨—oÜ E}W:oơ,§}Æë´©¶¿zÚö:…€><⣳®›¶}°ˆœ ¸ÿ P/2¸ggArEĐƺë®[ö̃ˆ1ƒˆ>¡¹ B]“m*ưL¢ˆ>AJ”'íWÎ9眆æôÀ˜@₫*7ÀäCQ‡ƒVFy`Ü!ÇÈ7̃¨à‚£ÂZk­¥¸’oÄ×ÇJß?_+Däâ4„A#6rIMμ"áY•ï&† 3pđJt{bGÀpjEÀ µ"æåG c *‚ç_ùÊWt3D¢>Œ•<“Ûq‚Dâm Ưí·ß^ĂÑËyX·ă<|L@_!0v́ØpöÙgkT†C¢Àb+èïÊ)jPÎ 0 dèD. 2D#ÉHLa•²zû„À"¶ÜrË“8yÑx™_¹u£reVQ{½=Îz]Î8Åợª/ÇÔÛ9yư¾EÀ¨®Êy–÷툼7G ³À¨@TÎDD ”»—fgJ]è”0PH>§́é’ϬëGPÊCăX$FuƯ1÷ùrôYqÔc¯@¤å•W^©‘âñùz̃Ó&sc ĐnƠëLPOßqœ.  "ºƒ„ê?ŒHDus̀1JO 》#P/<{̣Ư2ƽbÜ€v¼èù˜ß ÆÀØ°¡ƒß FrÏ¡ơƠë9@ÿEÀ ư÷Úû̀~JxÄGû\ I÷ ÀưĂ­‚áJFè *Ưk0 ߣ’Xdѵ÷I">p’¨4–jÛÅ…d«„ˆ“{ï½W÷>ú¨*™Ûj«­¦Ñ'DŒsŸwqjACNqô†ÑSA…Z$/q:à;gF£¨"wœ‹#à8}€>úeïĂpZZäÅ8đÀƠ#åĐCƠo8wµÑé‹ ’ØqÚ´iñúO.æäa¿}¾÷щÀ±}Úi§iÔ-h30ˆ-‚')†ˆFÎ9‹c&RĂFÛN˜0¡Ç˜àP'? ×…qñÚ(åt^.ƯÑXFñâTWƯqM}€#đW¸/[¶,\wƯuaÁ‚i”êJ+­F©ù; #sqbx^"‰8 ûƒ¢ ăÆo¼ÑĂAÆệŒE”†5xµ¿–6GÀh8е\~ùåêA M T8f8ÀPƒ"’Í !íûî»oØk¯½z¥pm8Đ̃ #Đ& 0Ÿ8qb°<DJUcø€R¥»Ơ[ươËÎh÷ƯwD °É¬WzÓ's„æê‰'Pcç¯ỵÉ'5¹«EÅÍơôÓO/És ªé'[¦¨₫ç?ÿyh3ƒ ÉéùË"ø,HQ{q½¢'qt å7ÜpCÍCâx—ÎEÀ(_0‚Ú÷¤sgă#w₫÷7¼ñÏ?ÿ|½×['ÉÉÙ}ôÑa—]vq¯û~öá{CQÈqôï_yå•Bz*¢7pb̃ÔŒÉÓSơ³/’O×èrÜđÑåاç8=5jT )ñYg »"wÆÔ©SUÉƠ³t{9à€4ÏI›Éa€w´sÜ·çµ̣Q5~ĂE4GtP‰ÅÉó„ˆk‡È 6’l -7H\ê¼1cÆ”ôx•ÇJw<⬸Nü~ûí·(퉱²½é“¶{́±°hÑ"¥Ăc#l‚A†d§äæ ?P–ªyăAuñâŹy5æ̀™FŒQ‚›~*чåÑGalà8øfÏcd® …N<›Q-̀)ö>ŒÇ³ë®»ZÑ’×UW]5ưL§X¸1-Êr—ÎFÀ"><¿Gg_G½#ĐßÀ ăë_ÿº̃Ă¹×ÁvÄGè‘.Ư»Did£7 §úÅ/~‘Ñ "[¾ª¼ăĐĂ³‘60t½Ë+´.€#àôgÜđÑŸ¯¾Ï½åÀ£~È!‡(·:´EĐ.¹×Nß^¼áëÇ£xúôéá«_ưjøØÇ>Ö·ƒèEo$9ç{ƒ²ê.KTÜ‹&½ª#àt GydxX’³~ù‘¥ơ!²dÀ€jè%ÏÉă?̃£LNÛ‡́”E§€k¯½6uÔQáúë¯/[ÖO:€#à8ÍF ö¯¾újz*}đÁ¹CÀz*"–Ê^×]w]w ̀EÍ:€#B>׃#ă8}‚ÔDĐjàÍ:cÆŒ°téRånƯm·Ư4‰kŸ ¢ŸwrÁ(ÍÊ-·Ü¢”QxlC_ơK'I‹¡{̃æÔSO x´:¥G'\9£#ĐX ½³ .,¡¥‚"açwN‚C—á†Åß[kOŒêÈ%GÀpG ¯àÙ‹ˆà8zƒ÷üÅÊù<1z*‹̃°Wè© è´(̃¼º~̀pG 'ñÑ?âô)„´̃tÓMÚ¥×_]©<đPÄ‹ß7ê}s)₫÷ÿ7à-Mb`¼pˆ¢øÊW¾̉1A¼ƒà³'é!,gœqFGQvơÍUö^îF`ö́ÙºY2v¢YÇ LÀbÔW PDsƠƯù́ú#o¼qx₫ùçơ9küøñưŸ³#à8@øË_₫̉ƒÊ åè© ïŒé©̀ÀáôTM¼X̃´#àôKÜđÑ//»Oº êƒ< ,ĐđWx9‰F@¡Ư,.óvÄ¡UcúÓŸ₫F|đA5>¡D>|¸r¼·jLµôKÄĐ¹ç«áÑ$'̃zë­K’×̉–—uÎD€\—^z©&L/Á;ï¼£y2ÎûqG › ©+§‡z(́²Ë.Ư45Ÿ‹#à8@!ÓSưä'?)‰â`_‰ **£¥â•?§§ê£‹çƯ8@¿GÀ ư₫+à´ưÑÚ«M̀ˆ#Â#<¢<ùóæÍ Ûn»­BZ;²Ê½ăm´×^{…åË—‡Í6Û,Ü}÷ƯáÓŸ₫tå^Âpº ̣ưÜqÇJ{Ǻ€àơ~ĐAi¢K§HèªËí“)ƒÑOF[‰¢ E“‹#à8€#P„ôSï¾ûn‰aĂ¢7 N,GOơ©O}ª$¹8ĐSƠáÏ^EˆûqGÀp€>±÷àÔŒ€GÔ YĂ*üæ7¿ ûí·_xúé§Ă*«¬æÏŸ¯yX₫á₫¡a}4«¡ç{No¾ùf˜6mZ˜8qbG%jo.̃®#à8@ÿCà•W^Q¥3ÿư÷ĂÇ?₫ñ₫‚ÏØpG ĐCjF ‹âxùå—5J°G…¿€<1-•8V^yå¢j~ÜpG …¸á£…à{×@9<ú£:Í=GÂ9¸ñ_xáở!zâK_úRGxë`đ¸ä’K %K–hôG'm{E½uGÀp₫†À²eËÂN;í>ñ‰O„÷̃{¯¿Mßçë8@¿Fzªÿú¯ÿ äB4Æ̃ădøç?ÿ9Ÿ}èCê8VDOơ/ỵ̈/¹ơü #à8@{"à†ö¼.>*G EÀ£?R(úô Æûï¿Àóz "? xngÚƒ¼0O>ùdØqÇìY³œÏ¿/˜ÍpG )Üzë­á°Ă l°AøÑ~Ô”>¼QG  ÉY±b…æb"²øßÿưßÎ)8×@GHüḈÑ$ơpÊÁ)jàÀ¹ezTjàú}ươ×ĂJ+­ óÉʼöÚkuåÆ«w^PÔ©M„6N—₫‰¿¾Ùè >ÿú׿.KOÅw'/ză³ŸưlG8¼ơÏ+î³vG 6ÜđQ^^Úh lnºé¦pñÅëƃ0Ûc=6L4)đ`æ̉yæ™pà*æ[l±…̣æ̃ÜîÆÇ<pÀ$ÆW]uU?~|ø×ư×æ€ä­:€#à8mˆ“'O»ï¾»æ¼iĂ!úú xcøüç?_vÆx’O™2%œ~úé%åˆX‚F‡<ƒÖˆä’½ø€̉˜çÚ¢g[(x–<ùä“ƠPĂX²eiă¥—^ n¸a]#†gîJøÄă­O„ó9眣ăúưïïê .|oôT½a¯8©•‹êûç₫g¥§Â‘-6rđc‹#à8@w#ĐÓ¥¤»çë³s:¼¿>úè0lØ°pöÙg‡ „+¯¼2@etÁ¨‡ÿG>̣‘œ[;zÓM7 ßùÎwÂ!‡¢9??üđpÛm·…5ÖX£‡¶Ùf›0nܸpơƠW‡o|ăa»í¶SWO¬×Ö—Íç8€#Đ@đôE>ó™Ï4°Uoʨ ŒDkd•ú<“á¼ô‡?ü!¹€ ̀?묳ẤÙ³KŒYCCm#È/M¿(}i›qï OÓŒ34Êd·ƯvëaôÈ«SÏ1”Óµă₫èG?ZK/Û=9̀°Á+Æj詈ÎÇ 9øí9=U\|¢#à8MBÀ MÖ›un(̃-úƒÁ‘#GzôG3À₫[› ®¹æpÄG„åË—‡ă;.ÜpĂ VßÄn{Ưô™g–.]Hx÷àơ×__HOĐëμGÀpG ÍøƠ¯~¥#rĂG›]˜~6r đ,‰ ¬Çy†ÈÜ5×\3Eâ­·̃  d#z‚èE‹i´RZ¨IoS<–l7ŒĂÍÇ>ö±p 'dOëgŒ8(œ{́±đá8-ƒ›¹‘7!úø̃{ïƠ´¼î«Üâ²₫¾;à{Ndz– k7ß<Ỷꪫ–6,¹8<¾Ï.€#à8@Œ€>b4ü½#ĐxôGß_¤=÷Ü3\~ùåa„ ºaû·û·pÅW(í@ߦº#4‡zh 9;›Nh»<2¨:ü¼”#à8@g#`N ÚÙ×±ÓGo†æÁ³‘ÙÜƠW_=<ơÔSák_ûZ¸ùæ›ùڈ膦­•̣—¿ü%,^¼X‡€qÚ×"Á£~Ûm·íqÚ¢Y8Á†èuWN÷€©k@OơÆo¤Ñ:pÜ#¢£=Ơ@ÉgGnđ₫ _ø‚ÓSuí·Å'æ8@spĂGspơV¦#P.úz#&º4Q£F)DƯ°y:uj['S>|¸;ØD²ƠV[uD‚öÆ]5oÉpG ¿"àươʷϼñjÿío«"â¼óÎëaô°Ñ☂±ƒg6$6è ÿ₫ïÿ₫OiYçÍ›§%1T 2$́±Ç%4?x̉£p~óÍ7Óéëü£~&߆É|¾ùÍoê˜IÀ—xƯʽf=÷ù\dø¨vE}e3~₫04¡€Ï&f'‡"ÉæŸ}öÙ°Î:ë(DçdËY»ÿưßÿ0q­0ôđ™è(˜Àmƒ 6m´Qá5¶vºí•kh £§²HŸÿüçJá–7g¾Dàˆ |vzª<Äü˜#à8@=¸á£Ô¼#Đ&E<ú裈Ew=›”6™^Û ƒ„̣ï¿ÿ~¸đ 5‰&Iöˆ¤]+¾?₫ñuCMä ăvqGÀpº<æIvŒxÄG·^åöŸ]{GÉ₫ÄO„‰'§¥Ñ£G«o÷j¥s¹ÄéÙ„éäöøä'?™6q-úÎæúàwÄ9(ªp i–Ô:‡Jă =ï믿¾Å„3ĐÂ… ơ3h¹vÜqÇMqÍ Ç#Ùzl±œ(à ` +ơ$j϶ѮŸÊŒöÁƒ;pÏ O (1n`èଋ aymù1GÀpG V>$7¨ü;T­-yyGÀh)l¨HÄ}ÑEéˆóÓO?=œt̉IưÑà+®$ÇÓkúôéá˜cÑ Pƒ»iXssçÎƠ<0(îºë®ußGÀpz‹”HÿôOÿÔÛ¦¼¾#Đ0 QÁkÁa!öboX'̃#P¶Ù±QÂŒ<›×̣fJwȃNŸ³₫­°ù曧#¡ Êḍr˜plë­·Ve?Ñy0q걯ÀPU*F̣1Ô2fëÛÆÎgÚáY”¾Lê™u‰à¸êª«Ôø·K{/½ôRØpĂ µ îMcÇ 7̃x£~&băöÛoăÇ×ÏüCñSeĂg¢̀øÏ#­Xđ&OA‘¶> ¶¯¿₫zIô†ÑSC‘ ~­µÖRƒF6‚ăŸøDQ5?î8€#à47|4^oÜè{·&2á‘GÑṕM6ÙD7[n¹¥+¦t9ØTüñá–[nÑđm’Ÿ3&|ô£mPo†\@Hª¹dÉƯ˜4¾oÑpúC‡UÊ”ï}ï{e÷Ǘo߀öœï²eËÂN;í¤t”åxäÛsô>ªnBezVé‹âcÅG¡IÍÉña‘!ys7¥;ơbĂGܶE5,X°@ ¤ỹ³Êi”óuọ́wA₫ ̣Y°‡h†ôfyă‰̀**̣ñ™üéỎ(m>3/î[`ṇéOZ #k®¹¦F`À dQV.¯î6Ûl£‘÷D’0/ !í`øໆAÇh©̀È=y^˜cđ½3lđj8Q¹“Cj~̀pG pĂG;^“#ĐKë>å”S”̉è„NĐèßwß}ưÑKl­:^d×]w?|đÁpÔQGé&r×]w œk7AùsÆgè&đúë¯{íµ—zĂ:=M»])#ĐYL4IiDn¸á5Csá ‘Îº†Ư8ZKlîù=ºñêvÖœX?÷¹Ïi’m(i1"XDÍåóo~óÍÅvñÅk> ¢3Ê­¥äß8û́³µ ¢9æ̀™cÍ¥¯?¾üå/§Ÿyƒ"¥v,Ùñ`Đ~₫ùçµÏ´{ï½w\¼aï{3‡xŒ÷¡‡J£[,’#k°Á˜Ă3;¸¡)n‡÷`yÏ=÷h₫Êó>6PL²Çˆú ·b«c ÎMfØ°×W_}5ZÉsY{íµS£Æzë­§ï Ô#R)¯¾sGÀpÚ7|´ụ̂ñ9½@ï/₫耪BmƯƠˆ#Ô¸‡đ¼yó¶ÛnÛ–´b‡v˜¿đ₫;í´ÓÔ3Đ½a+\d?í8eÀƒÉ /¼ †u¢Ë<ê£,d~²đˆ>Ù»¨ ”ñä„ă&̉(Ơï¸ăM n¡Ä_¼x±:¨Äv>ïC ëöDo`ô(GOEäQLOe‘8+đƯtqGÀpº7|të•ơy9CÀ£?ûU`CH’ÄưöÛO) Èơ1₫ü°Å[(Í@s{¯­u6kĐŸ=÷Üsª¤$A;Q l†\GÀ¨<'ÓQơ€çu†€E|¸q¿i{Ă½@/{ruđwÖYg)5y’:è UÎcüø₫÷¿̃zë­BÚ+ÊüèG?̉è ¨™xÆËöû́³OM†‹ŒÀ€@T_³¤7sˆ ÙñaÙwß}K¨¿(1 ₫—zÄ (ơÔmTæHÔ Q3&|V[mµ’è b8'8=•¡ä¯€#à8ư ü'¤₫†‚Ï×èXôÇ´iÓ”«öÙgŸUª#>·Ă|'_‚UW]U)đƒª`ôèÑáÅ_T:v›×ºë®HĈ·yJ0‚ïâ8@½XÔ ˜«®ºªĐë´̃ö½#P+ñáTWµ"ç剑Đ[MŸ>]óIµMTÆđáĂ;ŒÑï½÷^Q•ÂÜ Ù <ă-[¶LÁA_å*¬ŸÿüçZ Ï´ÍæXT3ŒđäÙ@0¨\œÄ́E‚‘`£6 %ÑỹôdŸüä'ĂĐ¡C‹héqr´ÜxăJvóÍ7ë\‰baí[ºt©F­/fØ°ap9Ú´–NÄ;wGÀpŒ€> °7ï´ưñÈ#„w̃Y7Mä₫ØqÇ5!^.ơ!ÀFuö́ÙêUE¢_6ĐT»©«¯×új{́±aË-·Ô!”W$ntqG ^,êï`r}à¥Ük_½óóz‡€G|t̃5ëÆc >üđĂĂ©§Î9çœ1PY^ Œ&yTL† n0Tụ̈—¿,l#‰Ô”ß$¬.'Đ%Ơ峉½ËƠ­ơ\£æ@^°"jæ¼óÎÓaưød£ÇÖ[o­Î?¯¿₫zÈû{C̉cDh‡åÙñó™={ è%¡²2dˆçäÈÊ9€#àô{ÜđÑï¿@DÀ¢?¦NêÑ üÀ—;kÖ,ơûÉO~¢Ô/AÚMÈf îf"U|̣ÉpÓM76ˆ.€#àÔ‹€G}Ô‹œ×k4(›ÿûßk³ñÑht½½Z@Ánù PÀólXǸˆA¢-*%·ˆmêY”S¶}~FL*y₫cp!‚ 6ÂXƯf¼6bPÈc˜'Nœ˜j«£>Z?ÇFđ‚&,ïùœsD¬´̉J}ăÎA)œ₫ÆpGÀèHÜđÑäËÆüÿ„/o¼ñÆa—]vQŒ#8",Y²$À/Ú‚7ĐøĂđơ¯]Ă~ ‹Ư`ƒ t¬x=ó̀3ˆ/o¬ÔưéOªơñ°«5jàí·ßxƠüá(ôVÊë·UÇ^{í5ơÆ"<Í ×ÙoûÛJs”÷ÍXm`Ħ¢ƠâÑ͹›nº©̉V‡~x?·›đ½%̣ƒüAØŒó[vqG <ê£Ô¼N3ˆÀđÚ»8­B€gí=÷ÜS»ÿăÿ¨TL¼æ û".ºè¢ôt¹¤â±a‚ưä^{í•Ö³7=ˆ́E(üñÇçR‘¯a ö̀Jù±cÇêñfưkälÿf́iö¤w̃ygx饗ô3£c/Æ̃-+)¾”¿8/H¶¬vG pŸ˜7oRƠ¡sB×DT×øñă5wQ«×% ÄèĦL™¢÷5ô ›o¾¹óÚk¯U½W.èpLÁÿî»ïæiø1î°pÔÚç| :ÊZë5|̃`c‡—&!p饗&’` ̣̉²ç{n"y2 Y\Y˜Ê¶-ܳ‰đ˜–£Íá¶ÛnKd¡-iï?ÿó?“­¶ÚJë7.‘‡ö’óå>0¾í·ß^ë Wi"‰üÊoú¹rx Ïn"aÑqÊĂ Ưæ™R₫IzH8»ÎO6" ßKyàÏơÏU"pÿư÷' P<åa¥i¿ñ*‡“[Œß̣¶Ûn›ÈF0£ḷÎ;ïä–óƒ€#àTƒ€đ°'²ùIÄË99ñÄQºUSÍË8 E@ènỗ+¹¬Ú®7æÔƒ€(yJöB ˜HµäÍ7ßLD±¢û*‰>HÄ(‘–c 窴;ö ́ŲÇă¶íÜû￯{?áÅy-mSŒ çLâºb,HƒäöHëP¾bcgü´É(–xµ̀A(¹öÚyíñ"‘’¹³¦o1¤ÇÙïU”çÜ /¼³±ØXmÙăvöüăk}®ñ•W^i§üƠpª`o¾ÍtoE¯Bï—ˆseÂ:Ø a=̀®ƠÖº>ô]Ecă8º…vÚ)AO‹’c9Fë~ùË_n¨~$ò́C¾ûƯïjŒIâá”}/¹±êªW®Ñ¼1–+ï燀G|È/³Ñ‚‰(óĂÉ'ŸäÇ^±yr,Àưú†D=4Jä+vØa‡€&Ư?₫xnÓ|°z}CÇSzè¡™äi&ô!ú~o>×#$içR /¬îxR=ñÄ%Ăƒ'îÛxÜ„‡ËBzê©´l¥°̣´`‹̃xôGăÇĂị̈Ë/×Ĉ÷̃{o˜4iRJ½Ñø̃êkñ#ùˆz’¼‘4¼âÚ% ­¾y-GÀh%ơÑJô½oCÀ">ˆ¼tqZÑ¢PO‡©†ÑH́›>úÑj¹åƠ  Q P‘°OÉÚ¶=¸Đ7±ïc_&†¿4z„sæ̀Ñv­Û»ñ™}ΆnˆZ&â­qăÆYѦ¾öfEc¾PÏ€ùÙgŸ­¸ <8Í£B>“3Î8C÷®Ü¿ÀÀ„kđƒüÀ>æ̉b¥'å ׈$́.€#àÔƒÑvgyf@ßVIدCUMÎVÖ·F %¶&’‰Ï±¼øâ‹[}— z0ôaq₫(ÖBr.©b9×(Ï:Ë}á%†}ß›åÆ̀}Ît“DÆc¬Ôg#ơwåÆXi~¾1¸á£18¦­đĐ³ë®»†G}4=?ëóÏ?¯?lÎó‡j»í¶Kæ,â!Œç4­Ü€7üÀù¡g…Emé̉¥%‹åu×]§c`œüñ@È¢*!iuäû! R#±ëƒæzë­xPmµäáuÔQG…+VèĐ0Đ̀;7>a‹0=®?‹›X‰Cl úüç?¯4bÓ¦M ä‚hGñܽ*£F 矾̣‹÷F( ›ol/½km›m¶Ñï.ßkŒ°âí×”s½›µ×vf!à¹>…¬·[-¶ÉvĂGµˆy¹f"À^j\ö #FŒ(Û)7ÜpCè5ˆXáXƒ¡À„¶q¶úÙÏ~f‡z¼¢Àî¹çÂî»ï^rç¾åË——³¶Ù7B‹Ở›9`4*悱a?‹a eJ7Íï¹çܪ(ÉöØc QĐ%ûg»(ù „Î ó°Dđ¼÷üBY„ü³#à!€>éúë¯Wc+ƒ!¡éåX¿0¢tĐAVDóUº¯¤…«xƒ1¢È‚±c09µ×^;̀=[Ë3~Ó‹]pÁiOĐ~WcÈI+Ôñ¦Ü˜ăæĐÁÖ’Ó½4c8?£ÿ́T;Æ̃ôáu+ ?$—"¥CBIXq¶+BÅÛZèä´aTỌăJ$êDÛ…{"‹TIײˆ&²˜êyùh(á¹EB˜ÑYQ¿‡~X‹CÓE¨Ç]#„­Ó¤^„È :4Å°·"‰éỊ́p/ª×Ç…7/‚D¼¾tî›l²‰~?¡År© ñKÄOq<çœsÙüÖÖ@“K3Í6Û,‘Í^²ß~û%̣đ̉ä½yGÀèfîºë®DR‰l”:…{¬‹#ĐW‚8­ôU—̃#P5¢TJ$#§·ä;îHX/%j#J©7…TUÁ›<ôĐC‰8i%Âk^±IÖgQh)íV«×êzçPq’èOrÜ%â¨{đâú¸8€#ĐW°îE'ú4%pa÷Đ[qß0œäÖе¿°B 'ĐùEb–êå—_NÄ¡[û]wƯu“»ï¾;·eÉ­”,X° :DÚE x„ —±ÇÇsª̣`¹1ÇX‰Ñ;£Q•­6¶X¹16¶'o­Öđ É7½+¢>‚ÑF]vÙeáÀ, +ÎÎpB”{́1µ@b…”Å/¥Ë†üÈ#hblÊ™€‘yçXYÊáUdÖZÚäxÆàÉB¿bèĐ*D"ÖLÄE‘Đ—,°ê©„å!¡IŒbÁ‹†öñ¶#ºh”ˆê`¬Ú×aœ6g<Œ̀£ÆÊÈ—7¼̣Ê+(°mƠÑÖÀµm+—÷JÈ÷Â… Ăoû[=½å–[êX ö1©„‰í /Cd3À«H;‘,nz=ùN˜đv˜_öx…Z>XeÄÀĘ ûwhµóDr;)sÉB«/ù‡UψN ½ ú6"ăĐaů¿₫ºê+РеÊꫯ®4VV?~%*nuÖQ½tWµ :3ú5ºEô~D^Ä‘tƠŒ¹Ö¾ặ´?Æî±À́"àªSå^½tøđáJiúºjÆheă¶ư}‹á̉ -Z”|á _H­›̣C¨ªåóÎ;/‘‡TMḌl2P¬Àqdˆ| ̉>x?.J(. Eé‘-g%xơĐØÎc‘Å2[Lœ8QÓQ×"âˆ1$²0%XT­}{åM̀Ç$¯ÏÎñL±¶x¥< ¤ó"°ªf#TâºbøÑdJqÿñykŸdëñü°|“ü¯œp=±̉ •X"‹¶eÎÏ“è10ôÀ*;>Ç×™F+}/°¦÷Ö{L/ÿ<úèÿ•ïڱǫ^ĐróL$œU=́êo±ñ5¿öµ¯éø„wZ{ñoµñ½y‹€#ĐÍàæQƯ|…ÛwnBM ÏUBƠÚ¾ƒô‘9€#à8@¿G`ụ̀å©.hă7NÄi¨"&è¿„®OunèÑÑeE  ́3yz%1N$BÏŸêâ¤ăỤ̀b$QFdĐÿq^¨²Ë²Úˆă°F492‘¼ÇiÙJBÛ¨QÙ1ØgÉ;RÓ˜{ña׬â¤èâPW.®ŒÓđâzTƒköºùçæ à9>äÛÙ(Áë̃" ˆöˆ¤•ëƒdkđêÉg_́©/Ç°ă;jDFœ/"nü £G$*'DmàeD₫xø¢8e¶9á„‚„¶iQ"ID™[RÜX“-Ú$>É9̣ `5‰-œ6>;'‹MØÿưĂ3Ï,¢>đ$sqúøè ”½GÀpGÀè èÿ`j1Éf“J‚.Äáäœ%È•W^YR]:«¯~ơ«éqô}èÄ¢„1ˆB¿¢.ưz(ê[Œ5$V·ç­´“¿½abôBç¦OŸ^–Çê₫đ‡? »í¶›Öáư•bcæØO<¡QEưR±1ÿơSï₫£?E‡À´2õ¼’œ`cç);̀è>ËI#ÇX®?÷WÜđÑÀo Œ)1Åcº!41P ‘΄08”(ƯIBA!A#‹F‰ê°j03”ơ„ε'1ªV­äÜ¡ù1ÿéOÊ­ÊBûûßÿ^Ç Ơ…X¯Ór·̃z«G̉{R˜£ă’h5qœ?ô™±ZA\?üđÀ‰đ¤ä„æ1o(‡ŒæJ,ă ª^,¸Ü\LnC“XÖU¡3ỵd5̀`¼(2„X={çyđÁëØŬ´`„:̣‡ #Q,„$®¼̣Êz¨̉÷b•UVÑr\w ]P8X́•V‹óÅ€D‚?n~ܸ]Ê#@ˆ¤x^è ›’Â?®”pF¥V¾vóỊ̈½™"ƾg³fÍ̉5¥ßæÜ{pvC€ú³Î:K7K$ë}ë­·ª¾O¶Û\|<ƒJ?‘˜¡sfà#uGÀp₫€úÓ¡dèơΣÀèiôwĐñ³§ÇÈ½Đ¡¡Kăy Jnœ±Ñ»!l°êx„% #À9̣È#ÔsüCÁ¿ækª.Qr˜ªÎ²H7˜V*xƒ§d‰øĐ$vÇ©'Lôx̀‡Dăˆ%L¯f̀Z¡—ÿpôF‡ ›$e‚~='ÏP„¡kµÄóŒ=a_QäÿÊ"P›Ù&ü¤!+´±†b̃γ°ƯrË-jưC!ó,<äÚ .ô(đÍ Œ¡ƒè̃£LÀ’Ë‹(ŒüQR[DuÀáoQ qÎ ú̀FmXûy¯Æ_—wÎaœÙgŸ}R<¬Ö;Æ« "†ƒĂ;,7ÂÚÀÛë5"”Má”SNI 4܈̣Àh³xñbµX3'n,>æ¥Î‚…™…r™HBAŨs½¸€U9¼¨ "Æü&,̀D<đ‡Đ–÷ă?^ụ̂̀Z½ø•¹ä°bÛṂäƠ ¾WƠ|/fÏÆŒ£Ñ’p]¿±%:C­ï-úÏ‚‹/¾8₫`Œ\«˜/²Ö¶ûCy ‡¬Dă%ÆïÏ~»|[-Œ NMIN=ơÔ IíơA§Ơặ₫G óđ\wÍ:}Ä8˜à„äâ8@7"@ô?Jʘ¡çésrZ…º3"¶Ûn»†84çÍ=ú8}ƯàÁƒ{ĂÁÅ?z(tGYA@"¢%thè̉˜ZÈƠÑ„Ü»>ø –G†Î ư:Ú7]ÎÇ?₫q­₫ ôQ(÷‰ä0Aé₫ùç럕CO'Úê„l:H+Ÿ÷AÁ 58jÓ¾=—¡,@IDATå«¢>Àf˜#c† £P_•s^_½9†açotµ2~̃ça†rË1ØZ²đx,Y¼h‹…ŸôZ°̃‚5óˆ…z·ß~»₫a‘Ʋ¾µ *Ôe–D›Êq3\Tó½ "cÀ€9Ẩ¾—µ¥¨<7X¢?öØcưQ%ܬî»ï>MdËÍ©”øEăoơqø® ä:c¤?¾~‡Í`ÙÊ1’ˆ˜ï Æ=~gS§Nmè:Ñʹy߀#Đw°ơ³Püá1VÍ&¨ïFé=uFÀ³-Ïn.€#àt#8FJ>ËÔá¯çèsrZÏ0m˜R¾ÑăåĂkQ–çELÅcñµ×^[Ø½ä’ ’³C—Ó&º4t‘PÎÆFkJ~£ÂB'†~)[ưfÖA¤å84cÔ¼¶Ê*cmÚ+k“éÄpȦ|l °rö ó…é<1Ї=¬ ¯8ßrHâN0¦  %òñù̃¾·ư z@½K~惋 F2"@¬>ÔÊ4{ŒÖ¿–"à†R<ê₫„%Å4?V”̀üàQîÇÊ_ʘA$«4·©oO®O4JzúàÇbç›ó™pÆg¨qK’°kt¸x=ëÛyo€#Đ©xÔG§^¹Î·E|psqG [`¯‡£´Æ.€#ĐxĐưàHºĂ;4¾ñ¿µ½4£åŒE‘ yƒB‡†₫ á=º2˜KbAÏ€q=‚^«'Yú(ø¡̀¢»X‡Đkd×#(ûa§M¨صӂèïôtè+1ä èZÑ·ÅF‡‚&z§œéæ¨Q£”í…1 3dȪơª ˜7V7|T„¨ú5̀haø¬¢î:”Đf-¤u~4üP,/…ơˆåÓ!~\1§•©ç•%g­ơQ¦Û˜PÊ[¾kg³Í6KóPØ1{û—+Ă+í›ÂÏgy&/U êf€ ư¢>ªj¬L!đƒÓă\S¢Y°~C¥ÅM€kÆx0d¿EMó‹aĂÊ*¼ybiÖ÷"÷̀Í£?jÁïeùñ@Âó—_~Y70ô¸©7ë»û÷̃Ë¿ĂC›E‹inœ… W$•Ç̀Ï:@O¸_zÔGO\üHs°ˆ¿_5_oƠpÚ"gΜكñQ8@] G1dtX¯¿₫zv`€J¿X`‘ÉeĐ¡™®²è§  o–U2P˜j8âưĂˆm»F‡=•8rç F Ɖ˜!(¯}UÂ*¯^#áĐ « ºK^KÍ·¿ưmư£/¢U˜_e9ÏnlË“›7đªÆy=P~g£¬«¬BăA5† ,,E$ ²ÅÀúÊ{eñ4E< Œ «VđH'̉¡HhË Eej=NB̃æM„ 4Wfe~¨Á®¸â Íbêlû\SBø Ă:à€̉H±Ç¹:²ơâÏ„Ưb7«{$A}\6~_é{A(#2Í‹₫`¡çMD”ŸátÉGj8~‡|¿ ™„Ö ïŒfEéä¢çQ¼AÈá²Új«iîx5¡ˆsqG VˆúÀ Kø7Ôä×rq€E|xbóf ëm:€#à8@3@„2=v.׺Gôdå„2èÑ3äưá$Â_%zvœza¨˜2eF§˜̉?Û7:Mtb×]w>ïsg₫¢̣œGW†ñ¡~Ö±ZOÈ?Œ*FF9œÎ[!Pûă¸¾|ụ̀4™y<Îá톕ֿwĂG¯ÉÆ¡¯AP”¿úê«Uµïuu7® ¯ÊPÊư±‘ ¨’A€5!öŒ‹®\]a,·¶©Äƒ¥m,̀ÙÂëâă¼'›#dÏŒ/Ùrñgs<≜(7‡~¸} Đª¤PÁñ̉K/©5ºy“nG=3J2nÜ8Í»B9 ÆYX® çM7Ư¤9K(‡b ~%Œªù^y’—#¥Üxê=Çx‰₫À<#(ïáb6l˜̉Ukª·ÿN­G.rÂđàAμ&È_ÓjAQÉw£"káª<ø¸8€#P lPxf ̣“g·̃z«åÆƯZÆïe;sPñˆÎ¹f>RGÀpG ?"mTLÿ̃{ï©óh%,ĐËiPN7…Ñå;:Â"=ÏLèm¾đ…/”íyCĐë Ă1¸œàˆly=Đ Ăp‘'è%¡ˆBpÇ­{í×  ¼̣ä~Àû̃ev%¥7‹ ³¡Ê%¨æø+ #HH.bäÈ‘á•W^É6Óă3VT­q衇¦‰´{\~ùå%íc=¶6¬˜%%·Ïö~ASæ²X É“O~̣“i2 s3–dËbMÅØ´̉J+hx²Ju›¼è¹¬¹4*yÖ³€qă@ÚŒÇÆÂgQđVâ3ä†sú駫!†v9æÍûÅÖú¨ö{}c‡²ÈnÖF³_=ú£v„ù®: —è²eË”6­̉úQ{/µ×8öØc•{”›úi§¦œ µ·â5G ¿#ÿ­G}ô÷oAóçoÎ9ñÑ|¬ûk(qØo±'À) Cn5‚¢:VuGÀp₫Jü½÷̃[A€äƯ•ôSĐIå%\Ç‚. A†.-¯-ÎƯvÛmªG>|xEvØC̀qö—¹sçjå₫Yä NO0Hé₫â6Đ‹aLÈÎƯyçy§úä÷~ >èÑÇY ,èoˆ̣@‡ƒ.Ï¥ưpĂG¯ ?ê}÷ƯWØ4ËbD„„…ne»B©ÉBCb́úĂ•níÍđá­½ƯÚ;öxÇ®µÖZJ‚³O5Ñ°D¥SÇê±_1ÅP·âåóªŒß<Ådå^ÂpºîÇw\:̣½’4»h]@¿3uêTÀH+EoĐ?™36:4t YAGFnZtcè*ótEèä̀X>Àœr¹ß¡óĂa³Hp@§Q ó3Ư ă€A†Ü§±°Nµb‰Ú1¤́±Çq}9{’¹ô†‹yƒ˜axºưöÛ³]¨₫̉æ̉ăäß”cQ?̃äå̉@D!l¿ưö‰\ôO³äÚk¯MDÈ%‘… ™0aB"ÊÍ´Œ• a"y2̉‰×~"‹AZN¨¡rJ䇗ˆ2ùÜç>—«m"¼wZ7;ÊÊb¡u­q¡Ö)©ÏDñHBc#åxàDí‰(,̉~„×.‘9k&‘h•„c6^O<ñÄD-äHd#J"¡jZ_±/Y Q¬êq0 _kSè£Yäơœ_‰ØHÏÅơâö¨Ë9QükbAO$!QZ/ƺ^Ùs´K]1:%bàIdÖk+9:JæY4®øxö»₫b0K.¹ä’bPI˜;Ré{!7¦t̀_¢a´^«₫q½§OŸH(§K¼1%b¨kƠÚºßo}ë[‰x(V’Ȭ-p’¬D(êôOŒ›ºµ5ˆ>8GÀh;¸q–‡~}NĐù¶£¨sàØE9Ư¹ñ‘·-́3Dá‘~Ïø¾ITx"Q₫eÇ̀̃g;û~̣ʳ:{ —₫‰{ ¾‗¬¹æưŸµ#à(E¡ÏÅñ=B’d'èëÄ¡#e{Âs°„”ÜG¬<:%»Ÿđ,„^ĐΡ/¤ÎóÜ-é9ôŒè•LĐÁ¡ç¢.ú»o~ó›‰Otߟ#÷¾#F$bDQ:1ô‡è±ÄÀöNÏô›qèóL·§oq(P÷\qX.³8c&çw YÛ.3÷^ô§†÷]aÙ(üÛzë­qtÖùr_§^Œ‘3|¸¯îèD/¸à‚´¯¡C‡*̃ ´®éDüMSÀ’è̉`øqJ”@ú¥·ZÑ+ à}öÙGœce<ĂbqâGST×c`¡‰%«Tg’H€¸H²hÑ¢D¼–*¶oưd4–gø°̣ÙWk[à¨*bƒçX Y¨³md??ôĐCÚu¬a$[ÏyX”Ă«6³ưH(\º² Zû6ÏøX¶ñg«Ç«ư^`€j'ă‚äVI$40‘H½®’HK¿“fcn.E@¢¼ÔÈÀwáœsÎQ£i+±á!u #è.»́’ˆçb+‡ă};@‡"ÀD¼Ñô™‡\F €c‘=?½ÿ₫ûh̉ÛpJÈ3|`Èåù¨œđ}D¹mßO^ƯđQ±î?g†j¾?Ư†ÏĐpbåx|¯È{2~×]wMp¼å84ú®lñgôÂQ²w(7æ¬á#n«è½ÍçaÊĆôèn‹êÚñ́¼ËÑ°ñ×æ"àTẈíl´^íÔƯwßÖ]wƯÂæ k“ˆpæ™g*'ü~̣ĂJCʨÈg±,‰IĂ˲ e1\zé¥nŸƒ\&„vA5 yI ¯;vlÇ">oï©K8›J¹=baŒ„l!ôI¨q ÆåHØM. YĐâĂ…ïe±óæÍ n¸an™6Ú( Ç^LWEûK–,Q±́|iˆvỊ´Í6Û”´[/Ú„’ ú2K`_R9ú ÆM™áÜ"$wEƠ ßr ,Ü°ïÅ7̃øn˜º]ÄsT%ȧA~ ®ûù矯 ¢­úVW’¼rÈ!#D«ƒŒ„uêïH$ -ŸqØbÿ‰Âe{»¼¾¬Zû´z<«̣{#Y;{,ö·8:±¦³OBØ+å­ñàÉ>™„±Ô+öŒEc¥/ŒH´Ey>Ă5Ïû]œåÀÉúq`߈BÏX6₫øµăyíµ×4%× ®wñ¨NsẺ}€5ûdÆË5aL–ó“ëåâ8ưÖ¶ßưîw¯ƯëkékA‡µˆ¼¬Ñ8T¢¯â/6xdÛcbMå•ræ|—ă#Q*º₫²Ö¢Ÿ@ωî]T^¸~Ñ{úd¬äÓ"çư Ăû̉—¾T•¯Ü˜‹ú¬ç89¹ÇrOâùrï+·§©×zÆâuª@@ÀwqZ@–ª¥ƒñÎû(®<÷GyÈå¡#c‡†Y’eÎœ9)_dùÍ9+7öd³Í6Käǽ·ß~‰lX›Ó‘·ê8]‹€çúèÚKÛ̉‰‘‹J¶>‰D3·t̃y÷" ʨ4Ç”|×øΉRªîç&1r¤åŒ̣c15 ¨ñL%Ê-K»Ù?8ƠÉ¿‹Q&ñŒH@aèQvD¡®ùăº¼¯§OêÅXä“çU3® /¼*%BDĂ/[?¯üñđºSVlJñb¸Æơ9& C¥LÛ{ÎC;’•̃ŒløĂæâÎó²$áM»cWn91Öx®%ă8€#à4§º’§ —Ö €%ûå—_Ö¨F°Å[¨•¸5£ñ^[ÑJxÀñe™,mJ'6lØ0ơ|ÂÂßß/ hØ NC:ꨰtéRơk6x̀M›6M#¯ óƒ®OGÀpªE€ÈHh>ñ¾á†‚$NÔơ¿Úú^ÎÈCïx„¨`G Ùđ »ÿ₫ûhƒÙÓơ@vVDÉ®̃ ¢̀'Ń-bå)½‰E+YTƒ(ê­ˆFrŒ92<û́³é1{ƒw®p÷ˆ,±óx§n¾ùæ:V;VoŸ̀÷™g)œ ̃¿£F̉n˜Q÷±ñ@d‘yÂ\Î>û́pđÁ§§ăvxîœ4i’âøÛ½Ÿ•·P/–ûƒœ$І±¡Ûi§‚xo*åZ½ívK=6ŒĐ] :TĂN¡̣ $¾U†!Œ0#FŒĐ́Yg¥a®­\GÀ¨‰SHXĐÀ èrqzƒ€åøø̀g>Ó›f¼®#P5o¡Ex&[¼xqI]¨›î¸ă=†# Î+(ɳÂ3”O(åœL0䡇¶—ă my~´¹² —ĐdiU ă8Aå ˜À/Ăó$·‡%œé)¿ÿưï+/>÷›vØ!=ùF‡¹`¤"jƒ₫†„~0„Đ/µaï‹€!ÜơŒÑÅpGÀp€>©·X+¯¼r¸́²Ë4 à(OI₫ƃ¢KÿFÀ£?¯?‰½Ø ’¤̣7¿ùM=ztxñÅÓTqÍÆŸYe•U”)S”̣jÖ¬Yáá‡víÆẮ-:]Q$Aô¨®¾̀}693|¸MŸÃ¯;B™MÔ kŒ (µQÄ[$çQê£đ&Úcܸq…xÑÆ–,Yî»ï¾R´…RƯ%{ĐÏ‘GYr¶·Új«’c|¨·OÖkh¨”÷Ë–-Ó÷ñ?ßsÏ=ñ!}ÑÆS†( ÿ±0.ɉ¡Qg0’0ÿXH&oíØqÚÁ‚p₫»ßư®̉×ø¼hÔxˆ̀Ƹ” Ÿ1jT¾#.€#à8€#Đܵ 9¸z«àÁÜÂ+ơÓư‹₫Ø}÷ƯĂ 'œ}ôÑ@ôÇ‚ ”eË-· ”é‚'Æx¥É‘ƒñc₫üùJÓ׆Chî½÷̃0wî\¥zØd“M4 ¤?^Ÿ³#àÔ .ẹ̀P’ëc„ º†ôơZVûȽF»!€2Vë°²üưí6VOw!@”ÅäÉ“ϬP5¡çÙ ¥:ÏG₫Ç|Ù‰ó\kùî$¶:¶¼đ á¹çÓhËưA#ỵj•́ñ zÛ'k5ù4²ÂÚγzVÀ„餓4|½Æ&»¢84DY`x€KýرJ3À&¯¯†đH?ơÔSág?ûYøæ7¿©Æи8€#P D}L›6Mú’ëƒ5̃|G ,Úƒ:äŒsqú ”đ¦ô†úçU Y+—çå÷°qB!…¡Ä’‚ÛñZ^ccA5ơêé#‘-•$oÇ A>„h‡zHÿ*µ•=Ï{‘T:oơúj<ÖŸ¿:€#à8@ß#P[Ú÷ư{ÿŸ½3»rLÿø=3₫ ²d”¥RiQ’-»ePHd Ù™,ÙÆ:cÆBɾ̉¢D!Q´ˆ±eùÛ…ùs₫÷÷¹Ï<ïéœó÷}Ïöœó»?Ÿ÷=ç<˽|ïç<çœëº¯ë'" Y „èiÔÄÔ¹sg7räHËaD|(ÍU9̀FơơtWˆpï¸ă‰€VN\ i®N;í´¬PĐá;\8PguV ƒ]£9²6èwÖ·Mœ8#H½EäQ© œ#!ơ\¦~ ₫MÔr6Ït\±¶—[5nµ#" " •N 8Ë'*¢Æ'"P₫Xó^{íe)¦È±Œ̃ÆgœáÈ ]̀Ẫ+¯¼̉­½öÚ|Ô7Ưt“c¥£ˆ€äB@Q¹P̉1Ù„ˆ9Ư³Q̉¾B ƯU‡¬úï¿ÿ̃í·ß~IGß‘ˆŒÈVHû ÑoD̉F 8¢âæá؆<6¤Íà„¡_Ÿ|̣É2Ư åרQ£–ÙNôKï̃½m;!Ï?ÿü2Ç°á»ï¾s,îiƯºµ;å”S̉“åÖŸ|ŒIuˆ€ˆ€ˆ€Ô$ ÇGMz%"!úă²Ë.sk¬±FRûƒƠvù₫a–K4¤›â‡&+‹Í‘I~œ¢ïñ÷¿ÿƯÄ8³å_WơQD xˆúÀÈ…à-ZÎTD WøÈ•”+Œè={ö¬Q}.¢æœ@Ú©lgJß¾}“‡̉­¡¥¾m2¦Áƒ[ó8(RÇLÈüùóMë$µ,`Úyçm3÷z¢\8>Zøî8~üx÷ /¸E‹9" UÊ¥?ù˜ÏB1R½" " "wr|Ä}Ơ¨R₫¨9ñǼ¥™"T£!·bG]đvË-·4ÁJR^}₫ùç5;©W" "€¢>2€ÑæœLJ">rÂ¥ƒ @€H ¾ûD Îc9&º)ísRe…‚(:é8pL:Ở‡¾øâ‹áÓØÀ9LÄE}K}Ûäû÷€¬Yúøæ›oºvíÚ¹w̃yÇ_zé¥nóÍ7OÛ-¢XH“"`ˆaÑNH †#åüóÏ·ˆ*hÔ¨‘{ôÑGÓÖ•¥́O˜;¾₫úënÎœ9Iù›êø79>t%ˆ€Ä€¢?₫;}üàÆ̉¸qcÂD(“U‚Å*ü&åU³fÍLä|Ĉ–® Xí«xPÔG¼ç¯”½©®¤ñQÊY¨î¶IwƠ±cÇrIsÅ !½Ïqh 2ÄQß«¶̃zkst°‚¡} ôÜ.\X«ó{º܆´I„BpÄçÇ&›lb¡C‡₫»£₫7ỉľ#†Ư,̉iÑ¢…C̀}8}(D–œsÎ9n£6 ‡ä±Tư‰¦2ûöÛoÍYÔ½{÷‚ŒQ•€ˆ€ˆ@5ă£g_c ! èÿN$é¿;́0ÇJ>!÷̃{¯¥ùï…}Æ₫ă;ÎyÂW„+£y¤ Ûºjˆ3E}ÄyöJÛwE|”–5µNCưJ+­Tcèëû÷ïoÛxVG.'Ä\àN<ñÄeDzç{ÚB–§Ÿ~ºÆ~úB?(Ü?wÚi§ûy´°áyp6¤MêÄ!ó駟.“ê>1‰'Z›é₫¡ ÷å—_ºm¶Ù&Ưn‹ôx́±ÇjđcœèÙƠ·ĐçLN”Bơ‡ß'=zôHv9̀X¤eÄ>¥¼J¢̉ÈßøU ơ‘Í[7T‘T/̃‚|ñåË1FcV©ÔŸb‰×]wƯIµÄO§zªéOÔ¿æøœĨæ£:Ê=üđöpäÈ‘–6€¹Å(äm̃m·ƯlE?Âïºë.‹)FÛjCD ̃X™Ü¥K[ÑLùË/¿ÜVCÇ{Tê}! đ™ Đo½ơ–kÓ¦M!›SƯ"PP¬₫ûí·Í¡Á÷6Œơ|— …H^¾ëâ`×}ØWßdž¶Éo™°È ¯çÍ›çˆÊ&]ƠC=äöØc´ƯC“4OÆC¬à¨I{B7»?°â†ƒ+êÈ*đ0U½ˆ€ˆ€T 9>ªfª5Đr%0mÚ4ËÿKØzÛ¶m-oêÖZk­ä*®rí{9÷ ăÇÉ'Ÿ́&Ol¢‘:u2í 4(p2Uzùá‡Lôü™g±ñ̃wß}æŒàGU1 )8à·dÉăN>è|ư@/FÿƠ†ˆ@é<øàƒîÈ#´ÏÀÙ³g»V­Zéó°tÓQö-#¤¼ñÆ[?I›£$e?eê`Œ ÚïØÛn»­¥ƯBƒ„ß/Ñ„ËYxC0Ñ¿Í›7¢ç" " " "PJuÙjD2@Ơñ«­¶‰~úé®C‡î”SN±ẹ̣́f®M{j×₫ÀÉpçwºí¶ÛỊ̂EqÄ–™U‚Å(¤/ MBù/ºè"ËCÍe¨À₫ûïïZ·nm«`¯¿₫z»‡ƠvöW/ ïA9=ª÷:ĐÈ‹C€"ª&GŒœ4\Ñß*D~L4Éáô ÂINC¡" " " %  ˆ@W“"À»ï¾ëFå„æGú裮k×®R_;¹†ÁÊ[R]½öÚknß}÷u·ÜrKIÓ4l4:[D ˜ơQLÚñn‹ïN8ÚYHBô¬ˆ@a  ÏÁ‚­Pˆ¤îƯ»·¥äâ{&N i®zê)·Ă;ØkưbPÄG±‰«=È@€T¾₫úënøđáfœÆù¸ß®»îjä;î¸ĂÄ3T¡Í„èrÅ“7øƠW_u;ï¼³»ä’K*g³fÍÜư÷ßo!œ }ûöµ\Êň¾ ½ÁŸÿügûq̀á1cƸü1Ă,i³ˆ€ü—€¢>₫ËBϲ묳NöµWD /V]uU·`Á‚d]Dß{ｶx+8=V\qEwÍ5×È鑤¤'" " " ¥  ˆRPW›"ÂÆ'L˜à† æÆ老lÙ̉vØa¦‚ào+ÿe8“‡Tkô"“̀Døơ‘G±œè¤ (t4h¥Ưbuà¸qăÖn¡Ç¥úE@ K@Q…å[)µüñîæ›ovt·̃zk¥ Kă²'@Z«éÓ§;f¡µĂo~›iL ¬¨({ÙF¨Hr|Tä´jP•F€Ô ü¨`å₫'Ÿ|bĂ#—5?,0*ẃØÑK´ºز2¼ñD€§˜fgu–;ơÔS]Ó¦M+aˆiÇ0kÖ,wàºÅ‹[DÑ<àÖ_ư‚‹öÙgnÇw4qKœvûÛßj¤HHÛYm¨z,è̉¥‹¥/˜«®ºÊ-Y²Ä~øá®S§N>Z OD@D@D@D@D Wr|äJJlj@hܸ±Ûj«­,ÍU‡,Záă?6ă=)Axâ ÓPhÛ¶­ 9̀×k®é9ä3ücT[´h‘»ç{¡û8ÈO\i…Tio¼±9!æ̀™ă.\hz'8' YĐY!r‰T[3f̀°h¥J®)$KƠ-ƠD`“M6±Ô|~ø¡9|¸ûè£́~\£Ó(êCàƒ>°ÓX¸¡"ƠB€ï¡_|ñEµ Wăză£̃èt¢Ä—ÀJ+­d)°f̀˜á}öY·ÿ₫û›!‰È ̃¬ö?ï¼óÜ?ÿùO¿ïHóÛs̉? qùå—»5ÖXĂĹq~àụ̀Ë/óÛX jăº9r¤C÷̉¤̉±Ó±cGwÜqÇ™¸ùW\áæÎk)ÙJ0t5)"|^¡ç°téRwươ×Û½*&]W7 @€ï)9> WU–%ÿưßÿu{kÙ²¥¥'-ËNªS" " " "P&äø(“‰P7D Hq„¾Ă#*wë4²ñ±îºëÖé<,q$€Ó£OŸ>æđ 5-ßÙUD@D@D@D@2ă#3íª"°ñÆ»«¯¾Ú½óÎ;îk®1§iîºë.×­[7 ~øá‡Ư?₫XU\2 ¶’£?H?uß}÷¹víÚ¹O?ưÔœsæ̀)HôÏ+®h)¯øñ>v́X÷àƒ$wm8@Qº ,ê'8Ëñ¡ ¢̉ àô8øàƒ- i“&Mé₫ºvíZéĂÖøD@D@D@D A~ăs„&TƒN¨HèVŒ=ÚR‰L™2Å­RŒs̀1 ‚±¨‘j/ˆsŸ|̣ÉṇäÉÆ©S§NÆmË-·tDˆÄµ̀›7Ï̉ ¡ Cú3"ƒpbÎÏ>ûlwÓM7Ù*î &¸¶mÛºß₫V¾ù¸^;ê·À<à `÷£Ù³g»V­Zä̃Tèq¨₫ú˜?¾}&QƒUD  §ÇsÏ=g×ùí·ßîz÷î]‰CƠ˜D@D@D@D ¯dUÊ+NU&•Cƒư~ûíçÆo:˜0*`h8ó̀3ÍØ0xđ`‡qü—_~©œ×c$!ú¨öÇÅ_kíM7ƯÔƯ}÷Ưnươ×w8w?üp÷̃{ïDLøÜsϵ(#´R.¼đBÇ|ÈD@Q™ÈTÏö ï±Ê*«ÈéQ=Ó^u#•Ó£ê¦\È#9>̣SU‰@¥è̉¥‹cuâÓóI)ñơ×_»n¸Áô›7n\2*¤R9d¢SO=ƠM4Éí²Ë.æøóŸÿ́?/¤@x¶>åc_çÎƯˆ#lÎg̀˜á:ê(Ó€ÉGƯÑ:V^ye¯ƠV[Í=úè£&"¯´jQBz."% ­(ê|.}êœ÷jµœƠ4Û«ˆ€ˆ€ˆ@!üί¬½°«NÊ#€qºGî¸ă³üê>ùäsˆ 2f̀‡ØâFmäVXa…ÊĂˆÖ\sMwÈ!‡8X! ¾hÑ" ÿ¿ÿû?G ,4-âVZ¶lióM *´>.\hFåu(\7ï¾û®E—L:Ơí»ï¾&ÜYˆÔZyí¸*( ¢̉HÁ÷á‡Z«vØÁáQ©¤ăäs }¿~ưªcĐeƠÓ£j¦Z( 9> WU‹@¥ º¡cÇnàÀnÛm·uß}÷¬I;ñä“OºQ£FY'ô@HUm†kœ?Ư»ww½zơ2±x̉CMœ8ÑĻѮX{íµÍA§ëmæÍ›[DË«¯¾ê–,YbN°|;rĐEùÇ?₫a×9Ûq´å»8qW_E@2@¨iÓ¦¦G5kÖ,3~óZ¥:Ü{ï½îå—_v;Û{ｫcĐeUÓ£*¦Yƒ(r| ÀKËYge+Ïo¼ñFwÿư÷»O?ưÔưá°Øå –û믿:VÊó¥–tA¿ÿưïKºB‘ûŸ₫¹ûöÛoÍÀˆÑ͆w̃yÇ-^¼Ø¯´̉J±3Ô†÷ÏgŸ}æ¾øâ »`½ụ̈ˇ]øá;ă.«G‰^¨ñ¶ü±³ >ud́d́`<ÊöéÓÇtĐAÆ–ëæ}ß|óÍv‘k­µÖª:±êtÑjâưѾ}{sd½ổKnúôéné̉¥æàá}•¯BI³fÍL[†6p„l°Á%½GæklªGD ÿR£>zö́™ÿFTcY¸å–[́;Ñ8ÉUD ÈéQ ³¨1ˆ€ˆ€ˆ€” D”÷ß?ác 5ëŸO£’đ¹ö̃ñ÷Q{GA‚¿\Ï—ŸđbÁɾún ¿²¹ÖS©?Sßë̉~´!Îó?­/7NL™2Åv{c}¢[·n¶½ÿ₫ Ÿ~&zZAŸ×w,™:ÆÇơñ§?ư)ÁØj+̃ŸđÆ\¿_¹Ÿxă7j;e™ưQ¶̃ñ–˜6mÚ2ÇTâïdJ\{íµ‰M6Ù$áhÆĐ;H>I⡇Jxcy%»Ö1½ùæ› ¯ư‘đ7câÓ^%^xá…ÄÏ?ÿ\ë¹åvÀe—]–đ©¼lC‡Mxñ»èÓ–Ø{û¶O–÷úU¡ˆ@åđ‹\~FÂ;Ññ^9ÓH²èĐ¡ƒ}y ²¬Çi§Ä…ß¡wƯuW»®}ÄtâÁŒK×ƠO(K±7üñÇ-×<¢»µ• ¸m¶ÙÆ̉Íu‘¯̣̀3ϸÍ6Û̀""xàW› ïÈ‘#©oB¹é¦›,g~xúè¯G̃j"1Đ @(9ZêÚ~ôÜL´¢cXÍÍëb”†Œ%SÿĐ£`Å8%•}ºs¼!Ú¢4Â<4Èm¸á†éͺ-Û¬'UÀNÄ©́¼³È=üđĂn§vrD»<ÿüó®wï̃nóÍ7wưë_-ʈk»Z ÷4P®¸â ·Æk8̉E!‚Xü—_~+ C† qǼóÎRwÉ%—¸áÇ»ï¿ÿ>¯cđηîºëÚ½ñoû›ûꫯ̣Z¿*¨p€é…Æç‹Ju¸yùsµŒR‘Ơ2Ó§ˆ€ˆ€ˆ@1 ÄÚñ1Ñç̀?÷ÜsƯüùó“̀{'/<U₫0Æ]ươT;¡xàáÜ| ä¹:RĐ@à‡y´¼₫úë–ö*#0)»RE£ë̉~´ƯđAa¿jÎ]z饔¥, Kº¾ïµ×^¦©À>ROñĂÂGc¤;Ô¶‘/cBÁø*@#÷Gœûí·Ÿ¥,ÂY7`ÀK“Äûờ3ÏthFà ™7o^ÖùȽẠ̊?&§zªédàôà=ÿç?ÿÙœ·>ÚÊưë_ÿ*ÿAü§‡Ü/;́0{oœ}öÙ^©÷¶† †÷Đ²üưÜ×}ÄT¬ø4d́:WD nHI‰C–…7Üpƒ9ÖëVƒ¾/’Æ”ư·q¨¿"9=tˆ€ˆ€ˆ€ˆ@aÄÖñá=·̃zËÈ`¼Ÿ9s¦;æ˜c̀¸p¡Mqâ‰':D/¦ ÄŒA¾V(óC;DGD#%B¢©Ñ¬˜æ;zèlÔ§Ô¥ưÔú‰J¸í¶ÛÜk¯½fFèƠW_=ơ¢¾nÈX2uqíUW]5©k4(2•;î¸Ă„•Ùß¿çÓ’e:TÛs$Đ¥KçSQ¸¹sçZ„F ôm0P¡±ÿ₫û»qăÆ9¢mª¡TBô÷ºk®¹Ææ‡ÎI'd¢ä£̣Uxÿm¿ưö¦ƒsÍHG D}đƯNQéUÖ6…"ÇG ¡Ç8Ó#³¦>‹€ˆ€ˆ€Ä…@l^+ÀÂhŒ÷W3D†ùQ¼öÚkÛ!=ö˜ûđĂÓÎ*l„̉ïºë.÷ä“OºG}Ô¢JRWcc¤e…3¼!U×1£:âÅ©g ¢À¬PĂáqƠUW¹–-[Đ1+}ûÔSLpœ~c"NDÈù£í\ÚçXúúD ¢;ï¼3)NL¿¨‡6̉EàŒÀÈÉL¯Ob©mH׃£)ô+Úq¢_RÛŒîçy8†èÚ¯+KêꩧlnH§Äjy é™Ê駟ńÇؾpá´‡̉"‚SŒk&úƒÑs¯Ë`F|̉ïâđ˵„±Gç$ơÜpLà“ºŸ×¹^§éÎ-Ơ¶-Z¸óÏ?ß̃_8˜Â{ö‰'p>§±9'y/3îJ/•ưáơJ÷®ƯwßƯ¦kàÀyu`áP¾̣Ê+]óæÍỨÙ³ăj¸6*ưÚ×øD BÔu+꣄˫Îæj•UV©±à©¼z©̃ˆ@vrzd磽" " " "Đ`̃x»âÂIAn áSY%|₫÷ZÇá ͉­·̃:Đ4ÂƯ>Ç₫2çø´;‰Î;›¨uGÿÿöÆö¤ñ}÷Ư—đÚ5 Ç{§IÂÉkÔ°z»ví́x¿’ÙĂ£ÂÛ>ÿÂ;'’çx‡@q†ºy¤/>’¥Öö½ƒ'ѺukkÓë¡ØøC=ôÑàĐê âæŸ~úiQo…—wĐ$žĂùa_ª`|” bÖ?ưôSrLáÉQGe"¤¡Íè9ÑúyeÉÜ#Pî#S̉r\C;á‘>ø•ăÉsRY‡ă¢súÆ>Î÷©¬Ï©ư ¯|öQ;¡*¢l£âæѱæÊ'YéÔvrmsư”{a>ÇŸđ5®/oèNø4v ïHŒÅ8ÊÙ;Ü̃‘–đÚvútv‰óÎ;/á7´ê¢œÏ½ávï̀Ix—„OC˜¼Oæ£>²$᣶́ñ[ ï„ÎGµªCD ÂpoßË|”X…NÉđ x́ó’ïƠ*"G2㬩Ï" " " q#ˈVöG£/H•Ă¯Ú éĐøøă-_|Çkœâu–¶…´X¡xăw2Eѽzơ2âhûáØècˆ’ˆn»îºëë´XưNú­^Uï}ôQô”ŒÏÓi}DN×>mq’©dª]ŒÅ‹§î`‚ñW‡m›h¢2•LmFơQÏ;îhâĐ!¯sô8ôÂñ‡z¨›3gN]¬Lg¾Ău2v́Ø´is¢i®H‘DÍIÅ4jÔ¨d$×E4}sÎ9î‘G±h—§¼ăas}øärvêÔÉ̉—ecŸ̉­’¼$ƠâçpCëæ´ÓN³÷ïQ4$6ÙdçYU"–J̉Ñ7÷è̃ ÷ÜsEđ‘Á{û(×w> Bê[n¹¥ƠGÊ«ú¦̀G_T‡ˆ@ù êă¢‹.²*ê£|ç)= ѨÜ|Ô«:D éQ ÊjCD@D@D@œ‹¥ă§ƒ÷0Ùüa8ÇÜĐBê$RđÍŒ­¤Cb;{́±G̉t¥E"ưSĐđ«₫–p¨cl…:ø‘Fj(Œæ~e·ĂØI;áÜ›o¾¹Fº+̉¼` Çá²í¶Û†ªL,Re‘–)—ö“'û'}úôq£G¶Ø¡möÓN6CåƠW_a'íLÔq„SçH]Kh3–ˆB£E éÎ|$†] &Lpè&P®Ç“úêè£v­Zµ²cH§ôî»ïÚóđ/5ÍùµÖZËùh¢©ÂhÇ ©ª˜OŒ,Í5³jh;“S&´S—ÇÀ'œS—ët‹-¶°ôdáÜrD́œkŒkíœ̀ )ç|„–¥Â"­Yºôjå>¶\ûgí̃>ÉùƠ·v È|8߸—’̣6xáà佡"" ©>ø`ç£>l¡‚´>RéTÎë ñ!ÇGå̀iµŒDNj™iSD@D@D Ä̉ñá3èÛ¶mëV^yåeX¢—qă7ZtÀ_₫̣—ú‡6Ñ ¡à°đéƒ́å)§œb«ÍùáLÁ±âS#Y{VR0†Óœ¬vNŸV*U`₫ç+ÚĂê´h$Æ^Ä·CAtco(Ô‹@;DÜ/+åi;×öC}‘q”́¹ç¶²zr)ûéwÓ¦Míp¢lpvç†Èú8>BÛµ̃/¿ür̉™£#ê\"„9ÅèJIçØ`_ˆøÀhªŸAưü¡À™±ÂgXĐ "'X˜oæeèĐ¡®M›6ṽ3Ï<“6’Ävæá_®×)<)8ạaxÎC×s®Â§JrƒvhÑàèÀ…“gVï̃½Ưæ›onN;VưhΕÇàÀ8GàHÅùÁ}ûAß¾}Í9›yâ^ś±ÇÚưị̈Ë/wsçÎM~Ä`ZƠE"à{Ú…^h­)ê£HĐKĐLøN½îºë– u5)ơ# §Gư¸é,+%´¯@IDAT¨/X:>HWR 6œ Q3f̀pˆO2ÄuÖYËüs̀1f8ăŒra¥>ÑÔÓM-¬FÇèJÁ‹“"µĐ—t†fï½÷" xa}çwNF Ô9‘kûG¤©µV\qÅÔÓ²¾æœM7Ư4íăü ]WpE#qÂ1 yŒ²Œ̣ö.Îë°,Sµ×o±èúCÚ$œ%Ñë½÷̃;)pŸî*æêä“Ov8±(ŒŸù{î¹çܾûîë5j­Ö"‚B&®Ÿà¤ªqP^Ôå:%R…‚Ă.µç¡ E­ÑU^ÄRÔysåtæ™gq Ët÷€¢v¶Å5úƒ{ÅƯwßmïEœ†‡~¸Ưụ̂áü8ăŒ3÷îû^%¯ÑU˜BU)"P"‡rˆ¢>JľXÍ*â£X¤ƠN¾Èé‘/’ªGD@D@D@r'Kǹ̃Y­dIw΄`¸æ¹ÏuO>ùd?Œäÿûߓ΋hÔIº:£Ûˆ>‰Ÿi‹4L¤J¢=t$0˜Sh7Wh¹<ÿăÿh\ăº-5Wt[x̃¯_?·̃zëÙË%K–, ÑôéÓ“ÑDs @º®è<1Güs™ÎĐÊ ôĐßhTHj+®Ÿ‚Ă„´Q^¼Ù"¼p¸ó¢îôÓOw^0Ư)8ă(µ9¦́ z₫«Ëuœ>ˆÓq¨gJvZ—.]Üí·ßnÎÊ‹/¾Ø‘Ú‚÷«y1„£Á2nܸÑR%ëlkôI"˘'œĐGu”i+5 N[R^¡‹ÄûH4®qˆPÔG”Fe>WÄGeÎk¥JNJYKD@D@D Ü ü;oS¹÷2¥¤†Â HA§!êT‡b Å@ZvØa7ỉ¤›qbD£4©Îg!STO‚4SÙ Ú£)°²_è}ô%“£)*ÔÍœà$(D!º&h;Í^G}JTGÎ'%Ñ4WDàp\´ OTÑôè1…~^èë´ĐưÏGưD¡ÅƒÓ £7t_xâ ûĂà61éRà壥¨#D¾Ñwîm8∀€EHAW¾ej‡éM7ƯdïURÓ 4È̉Ñ­¹æ™NÉiû6ÛlcQ$Æ ³t68qT†ôn9U¢ƒD@*Q¤¼bñ ZW\qEŹZÈ÷¡ §&j™ơøSNøÎz." " "±ŒøˆbG§£.+~ÑnHMU­çCFË–-Ó₫!L̃µkWÓöH=7ơ5)x0‡h©ûÓ½ÆXˆ°z¹”÷ß?­s©!ư[°`AƒêÄ1‘i~ØG&ÇÑqÇg)0è?Q#ü±‹¦¹8p`RcĐí ÍRÔéA„!Rb}R q|>J.|j»NqVa$Æ9UiƯ›#8¢ }öY‹ø`œ³fÍr̀+¤B"(êÔŒ3‹èá¸ÅéA$NuS¦Lq¤+·̉«W/K9H„Æ?₫ñsÔ`hhanÑÁq‰a3u6´O:_D ¼(꣼æ#Ÿ½ i®¨S|’U]ù& §G¾‰ª>¨X:>p<qi†Ëêg `µVˆM‘.B$œ‹1q^ ÏDi¤û#ú è „ó2=’6+è‘tèĐÁ̉³ ơ­ÇΑ`<'¢/Êå’¢M¢#̉4a+́C$Nºcö†‹•₫© £u¹N‰x ưi *%â!0Ëôˆ“#¼ßpHñí–»îºËuëÖÍíºë®S ̣¸E~ Az×]wé%}óÍ7™¦2§í={ö4§#Ñ?ç{ñÔsj\‰€Ä‚ß©øîG!5bXˆ‹Î«“ „ˆ¾7«ˆ@9Ó£gE}¨F±t|0Q'œp‚¥¤ “ƪ¾iÓ¦…—Ë<’ƠưéRNa˜®̣'%K:ñÁƒ[JV+c0'Uj‰²1ˆsl0c0Ï–f Ư V&R0â„I-¤XJu.D‰¶Ữç8•(f<Ṇ̃ÀX*!¶‘n'8&0,6ˆ~§HE„ó¢¶KTĐŒ¹sç.s:u>ÿüóñ /d]ư^Gp`0>ú‹„èhÚœ[QÇÇ2ú ¤Ư i°j›ί/Ÿº\§8}¸öˆb©ÇG˜¢x¯ơC2"BppmôîƯÛ"«XùËuYÛ܆:Ëơ1NÑC† q¤™ă=BÚG!ʪ¾|ºçÉưûB.‘ơmK牀Ä“€¢>â9oÙz">¢ßײ¯}"PLrz“¶Ú́bëø`µ>imZ·nm#Dë£{÷î&lLZ¾tâä "„uĂ¥tH₫̣—¿$SM±ZœÄDxP¨{«­¶2=œA_"h'D ÙZiƒ+ÍIÉDéÓ§O ƒºmLù·Ûn»%´É0ÈG³8C0è.^¼ØV³SE¦ö£ç¥4Uç—8 †jΘ¥K—h1+¸£“N:)éˆ:)` [úKJ¯}÷Ư×rưÓçt%ÓX0n¢»˜c̀†5+úa4bÄsZ̀=ÛªÎgºvĐ¾ MC,íR7Q!ê†}+¬°Bˆ•‘#GÚ˜q&„ 4Y¾₫úk7‡|²9Â':®l×)íc ²(:ëd•üĂÙ±ß~û¹ñăÇ;p!=i͸vшÀA2õ¼¤£.hâưqÙe—¹~ưúYtØÙgŸíî½÷^Çû¥¾¡ô .¸ ™F çÖO?ưTßêtˆ@PÔGåMjˆøă£̣æ6î#’Ó#î3¨₫‹€ˆ€ˆ€Touñz ¿r?á'¦Ö?ï°HÜxă ¯¥aÇN˜0¡Æؽñ<áÓƠZÏرc̃°œ<×N;w®qÏeŸđîä6¯K‘đ¹ä9™xM†„ÿ‘nçùƠÑ ï,°C{ô葬‹±zc} Û¾tí{§K‹¾'{́±„wÙ¹÷ßÂk4í‰P7||ÔŒíÿôÓÕ‘T£ÍLŒÿô§?%|º«ơ†:3Æà´&Û¤‚lc¡ïÛm·]­}̣é¨^ç£F̉½đFï„ϬÏPŒ;µäz]DÇ ”–-ơ×—çæÚ¯KÂá*̃ù™đQ ®;AcsÏûmŸ}öI<÷Üs9½G#Ơ•ƯSïLüưïOx§Í;î̃‰›đ?Ä˦¯Ü½ó#á ú—î¾T×ÎöíÛ×êóÚ7 ï¬ëé:^D Â øèÍ„_@a÷Eït­đÑV₫đzơêeséÓ˜U₫`5ÂØđ î>­ª]›>­nâÁŒMßƠQ¨T±øđFf+|°¥M:üđĂ³¦‘"Å éÈ5Ϫ₫tưD’ƒÈxê1ˆ“£½̃:#¡°r¼S§N5Úg3‘" Ö^{í¤H8/Ưă‰'h‘ ́‹jkÜrË-Î;W’§PgXÉŸ®}VÓG„y©DÇѶm[ËÁϱD?mÚ&µ©åúë¯w̃ñaQ0Ñ}Ï<óŒ¥ Ñ}DÂ%A}́¦îÊ68q¢#º„q¥+¬('‘µ¢€ˆ" %¶ñÈuÁêôt+ Ă5Aº¬;&OƒyàÇFæ+:Îụ́¡®\®S"l`©R“@‹-ÜùçŸoéĐî¸ă×¥K;à‰'0 ¢Æn»í6×Pư‰­ïU¢?ĐSâ²ûî»[4)₫Æ—Œ`«­Ë/¿Ü‘ë}áÂ…¦̉PñôúôA爀”/E}”ïÜÔ§gø¨5SHô($]Ơ-" " " ơ'đ<:ơ?½¼Î$]‘_éï–,YbºØªñ¼yVăºQđ£4U¤ B3£¼QGAêy!í?°ùËvlê¹¹¼fªBÆ5¬s~¡Û÷$îĂ?4­Œø8 0èg+̀ ?è œÙ1¡®ÚÆB_б@k8–HA–KƯ¡º>†ë‹4f´ƒHưª«®œgö3?°Ap9u~̉µW_>¡®ú\§á\=úĐ)ÿ™æ#Áܘ1c,å\¸gyä‘o8Kr™Ëră‰> ăºổKMÏ„´mgœq†;ưôÓ3:‹9œh®L4Éù•‘ætÆùXß÷0,ÆÇ=GºCơ­«˜Ô–ˆ@qª”|Od1º@*ñ$@ªR̉Ùúl[´ÏQ¨×•B@NJ™ICD@D@D  T”ă£'Hc(Ÿ̀Ưzë­îÎ;ï4gN‘W\ÑxàeDTWˆ²*ṆÓÊ[o½åN>ùd7ỵds@2ë®»ÎuëÖ­äŸZÎtXĐEB¯Ă§æ³(œhtT®pRpÀæÀB×iôèÑi£´r­Olj€T"NC„0‘‘Aë«̣FZ¹#bÁŸÍ>ßÚ´iS¹ƒƠÈÊ€œe?Eê ˆ€ˆ€ˆ@•ˆ}ª«*Ÿ? _D O6ÙdwơƠW[$Âñ¼&̣CNŸ·Ù=üđĂɨ<5[đj6Ûl3s\yå•fä{ơƠW-]ŸÏî¾ụ̈Ë‚·Ÿ­fÍ9¯ÓäÚµkçp‚zè¡nÎœ9i—í¼tûˆÊaŒDë̀=Û 6,¶)Ë̉OÛD@NàCq^ëĂ¹IZL•øi®èyº¤ñ‘zWrzÄuæÔoj" ˆjmUD g¤"j›)S¦˜„“[·ní9æÓZ!u[¾SÚåÜÁzX®ÑóæÍsûï¿¿i¯°z­%R̉Ô‡-N+œ:¬ & º-qŒÔ©Çôê(ê#He|é)wÚi'Óz“SOT…wMN Ÿ` OD@D@D b(â£b¦RÈ'ô!öÛo?7~üx÷â‹/º˜ÅüùóƯ™gi†ùÁƒ;Œö¿ụ̈K>›.X]åưAj*Œ‘h2áœ! Kơ‘ 4hÛrË-mNÈăÿù矌§*ˆE}Äo΢=öˆRÑóbÓ£˜´Ơ–ˆ€ˆ€ˆ€4Œ€ ă§³E@ª€@—.]Üí·ßîæÎë.¾øbK¯ñơ×_»n¸Áµoß̃¢Æ—Œ )g$8tN9åße—]̀¹€:bàD¶éR²Å[¸#F˜˜üŒ3ÜQGå>₫øă:weùå—7Ñb̉hM:Ơ9̉Ïë\‘N¨HD€]xá…66îárÆk?øàëđºë®¯«·A@N˜F BD@D@D üÎÿø»°Æ«¡€ˆ@½ ¬¼̣Ê®Gî¸ă³”W`>ùäsˆ±0f̀‡0÷FmäVXa…z·SŒgåó*«¬â^yå·hÑ"wï½÷ăô [Œ¾„6Z¶li‘4&L0­ú„C¦Q£Fáœ×^{mËáϸpǽ¹çîøƒCDED@Ú¶mëî¾ûnÓâ¾€X%øœzùå—Ư;́àöÙgŸxtZ½¬rzTÄ4j" " " UF@*›p WD áˆèر£8p ÛvÛm-¢àƯwßu¤àx̣É'Ư¨Q£L8=&MÔK«¢á½¬½œ4[mµ•ëƠ«—‰º“^êùçŸ7m ƒ88¦˜mÊ'Mäb_²d‰9›êêˆ!ƯƠ³Ï>ë/^́˜›={ÖÙR̀q«-âÀÙÑ´iS÷øă»×^{Ít›VZi¥âu@-Ơ›À-·ÜbŸWû}6Ô»"(u §G`éP(#r|”Ñd¨+" ñ"€øv«V­\Ÿ>}\ï̃½i–̃yç÷ÙgŸ¹É“'»›o¾Ù^“‹|­µÖ*ÛˆƒhôǬY³ÜÂ… -úăçŸv;w.zôéĂp¡­2}út*G¤ü÷¿ÿ}ÎÎ)œ(O=ơ”›={¶#¤]»ví*" " ¨x^W]u•9Ä;́0Gt¢€œ…&¬úE@D@D@D päø([Ơ,"PEÖXc ·ûî»»£>Ú"ˆ2ÀÂjâÛn»Í!7vl°#Ç|¹•ư±×^{•EôG×®]Mdæ̀™ÆÔah­Ô%…Øzë­g©lp|̣´(8ypX©ˆ€T7E}Äs₫Ï;ï<·téRwâ‰'º 7Ü0ƒP¯cC@NØL•:*" " " i Èñ‘‹6€ˆ@ư’©[·nîØcµƠ¨8?>üđC‹¢x衇܃>è~úé'‹FàØr3—SôÇvÛmç¾úê+÷úë¯;Äăq.m¾ùæY“ë́0D}̣´Yh†(¥M®ôtœT6E}Äk~üñGwî¹çZ§‡ b́x@½9=â4[꫈€ˆ€ˆ€¤'đ›„/éwi«ˆ@œüë_ÿ²H‚r3¤Ç‰a¡úë°aĂo¿ưÖ!¿|ß¾}Ư 'œ`BéÅÖ̉Èe¬o½ơ–;ùä“-â‚´W¤¹îºë̀±S¬”Q¿ụ̈‹­́E7‡ûơëW§ô[Ï<óŒ;üđĂ-çÎ;ïttP̉fåÂJLj€Ä“÷–#8Â4€pâ`U)OóçÏ·Eôî›o¾±”ˆåÙSơ*îäôˆû ªÿ" " " "đoøĐ• @àÖ[o5‰k¯½Ö40®£‡€qt*¥%€X7B¬ä$gN0̃|₫ùç6ẀºDZ RNrˆ₫àúƯm·ƯŒÙÛo¿íÆŒă6Ûl3·ÑFåœ2Œc-ZäpäL:ƠæbơƠW/»h›̉^¥j]ª“€¢>â3ï¤-Äy½Ê*«¸ .¸ >WOcE@NXM—:+" " " Y (â#+íx1b„»è¢‹Ü{ï½W£Ăjo½ơÖö×£GKT„•éẼüđĂưqĂ 7˜ÈÿưßÿYƯ‰üñ‘°̣Ê+ç­½|TTêè˜zè¡î駟¶TW÷ƯwŸ9D”Ï¥rlÇwtsçε諯¾Ú­¶Új¹œªcD@*œ€¢>â1ÁapVÍ™3'V/cE@NXM—:+" " " µPÄG­ˆt€”?Rí·ß~nË-·tÍ53]„¯¿₫Ú̉*Í›7Ï=÷Üsnøđáîk®qăÇwo“‹”8B”«¸sL¨;ººm·ƯÖ}÷Ưw6'ÿüç?Ư“O>é0î|ùå—–«I“&e1?¥₫€YÏ=ƯŒ3L/…Èœz-Z´È)J¦Q£FUĂơ?}út{¯”«Đ|q¯Fµ&" ¨x\£Gv&Lp[l±…¥<ŒG¯Ơ˸Ó#.3¥~€ˆ€ˆ€ˆ@îñ‘;+)±"đÉ'Ÿ¸_|ѽđ öøÆo˜FBt“;tè`Æ÷m¶ÙÆuï̃Ư­½öÚJ…T¤ç¤q"íi<øñüâçx ;餓L_c¹å–+Ro²7SÊèÊÿøÇ?º™3g#ă±Çs]ºtÉÉùÁ¨Đyä‘G,­Øرc]«V­²V{E@ª‚@ˆ&ÀI*­̣œr""o¾ùfwôÑGÛḅ́¥zGrzÄqÖÔg¨€µ3̉"Peµü”)S̀‚à6Z Ø£eă7¶•ôÛm·Ă‚>B9éNDûZ‰Ïùñ}÷Ưw»›nºÉ-X°À!îMD©ÊBïƠ«WYs1tă7ºË.»̀DÉ:ưôÓƯgœa:&…œRºá„3oươ×w>ú¨kß¾}N;¢jṽygc{â‰'º‹/¾Ø­ºêª…́®êˆṚùGDäÙgŸí®¸âôººº¸÷̃{»§zÊR{:´º¯ÑŒ€œC«E@D@D@D ääø(ù¨"P?ÿü³éK„¨iÓ¦9VÓÿúë¯5:Dê,R m¿ưöæÙ|óÍËÂđ^£“øÇi=®¿₫zsV1_”Ö­[»c9Æơïßß•ƒ@w©¢?ĐêØÿưƯ;ï¼ăÚ´icÎØä’¶í;î0 )Æxâ s„ư¤""PƯơQ̃óOZÏ×^{ÍƯ~ûínÀ€åƯYơ.äôˆÅ4©“" " " "Por|ÔNÊ"@äé–¦Nê&Olé±-ZdÑ‘6nÜØuíÚƠ‚>º"qçbpÖ£ç¹ :gØ°a&ˆN”¥iÓ¦®oß¾‚Á¿”Q9¥₫xå•W\ï̃½-- ×ä<` µ]‹8÷8à‡NȦ›nj¦uÖY'÷ Ñ‘" I@Qå=­è’}ñÅ4…»îºkywV½+{rz”ư©ƒ" " " "Đ`r|4¡*Ê%€NÈK/½d©±H‘•I'„(œ ¤Æ":D:!…¹&>øà7bÄÓùè£,:‡H…=öØĂt@ˆÊY~ùå Óxµ–"úc̉¤I¦Û›vÚÉƯu×]®yóæµö–H‘ƯwßƯœ&çœs¥¶Á§""PƯơQóÿă?î½ă³†H?¨/9=êKN牀ˆ€ˆ€ˆ@¼Èñ¯ùRoE ¤ˆ6@'$¦ó<›N"C6ÜpCW.ÂÜ%˜§Æøá‹₫¸á†,í«”);wvˆ¿tĐA…“§æêTM)¢?ÈùØ-©ÚĐ₫@$~Í5׬µß×\såÇ Æ âîƯ»ë:­•Ê& ¨̣œßùóç› ½C³¬I“&åÙQơª́ ÈéQöS¤€ˆ€ˆ€ˆ@̃Èñ‘7”ªHªº¯¿₫º¥Å‚NQ"™tB‚`z‡¤’‡Ë…ôd'N4‘q̉6aÀ§ñpä‘Gºc=ÖµhÑ"'Ñïû̀tZn¾ùf{~ÅZk­UT‡rˆ©fÍå.\èpNàl 2eÅW¬ăh³̃¾}{[üâ‹/ºéÓ§›ˆßÿ₫÷Oäúm×® œă¨Á¸Ù±cÇ’¦ ËØYí(î wß}·ûôÓOí¾¹Ë.»­m5”‹+üq·ÑF¹Aƒ¥?H[E 9=²ÀÑ.¨Pø¨Đ‰Ơ°D \LŸ={¶û駟jt ×A'„Ỷ ©(çü°Ç`wÓM7¹ ˜8=’=z˜z¯^½²:rn¨3úặË/wW\q…¥B:t¨;ăŒ3jM‰rÉ%—¸¿₫ơ¯6¢qăÆ™c¦”bñu@«CE@ D@Q[Ïj/»́2wî¹çº={º§Ÿ~ºµè´j% §GµÎ¼Æ-" " "Píäø¨ö+@ă"@dæ̀™IÁt“¯›´MÑ̉ºukJ:!¬̣”NH”PöçD̉Œ=Ú]ươaz"-(p=æ˜c, ‘68EQèΘK/½Ô"Rˆđ!Bè̀3ÏtM›6ÍkÎ>ûlkëûï¿7‡)¿HY“©,]ºÔíºë®)̉›5k–épm¨̉ú(¯IF¿(Fôœ†^^SoÊ€œe==꜈€ˆ€ˆ€”€Å«ÊE@j#€AŒó¤)z饗²ê„GÈæ›o÷tIµơ5®û_~ùe7lØ0DÇñDÁÙĐ·o_‹ÁR¬‡bDụ̈Ë/îÄOt£F2‡—~ưúe½^¸₫<đ@HG4”•VZ)®S®~‹€䀢>̣1OU ÇôÔSO¹‹.ºÈͧ"¹Ó#J:FD@D@D@*—€•;·™Ä’‘èT‹œ̃8CBʦè€7nl‚ÔA0½[·n¦'Q¬†h_ậüƒ>p#FŒp·̃z«ûè£L„4c{́±‡;餓ÜöÛo_}‹tѳN8áǼæ£á2`À÷È#X4ú"{íµ—iÉdªÿ¬³Î2º én¶ÙfEƠEÉÔ/m( E}”†{ºV;uêä^{í5wûí·Û½=Ư1Ú&QrzDi蹈€ˆ€ˆ€T'9>ªs̃5jˆ%K–X$Hp„!’ªB¬ ‚VÈÖ[oí7o.Ău™Ft₫¡‡rD6`H¸GAtœt"t[yå•Óœ™ßMÑèœ sæ̀që®»ñaœ‡z¨åƒßgŸ}̀©€y¦̣ơ×_;R]q}‘R…ˆ˜|‹°gj[ÛE@Ê“€¢>Êc^¸wñÅńر–°Ë[­‰€äéHß4ỵd‹™1cFZtAp€‹hé„Ô„Ot ‘ 7̃x£3fŒûñÇíF¤zB£E‹uưATƯwß=ïôcˆöØj«­\»víjƠ‰!ÚĂÚÁ́²9Ij’Ô+J% ¨̉Ï,ŸMÁ Ă¼M›6¥ï”zP¶äô(Û©QÇD@D@D@D èäø(:r5("oÏgÏÔ !=Ö'Ÿ|b©œ¢m­¹æIG)²:tè4¦D«Æço¿ư¶¥Àbu3Fœ"Đ½ iF$._W†Æ," ¨̉^óçÏwo¼±ugv“&MJÛ!µ^¶äô(Û©QÇD@D@D@D $äø( v5*"PHí1” ”„Y .L¦t m7jÔÈuíÚƠ"Bp„l¹å–nƠUWuƠ¬‚Ñàî»ïv‚mxôèÑĂ48zơêeÑ¡E@D ̉ (ꣴ3Ld"iWYe÷ƠW_•¶3j½l ÈéQ¶S£‰€ˆ€ˆ€ˆ@ÉÈñQ2ôjXD ˜Đ ‰ ¦£m‘I'„ÔXè„đX­:!DÑŒ=Ú]ươIƒX8¥uëÖîŒ3Îpưúơs+­´R1§Pm‰€ˆ@É(ê£dèƯ¨Q£ÜGáÚ¶mkZP¥ë‰Z.Wrz”ë̀¨_" " " "PZr|”–¿Z( Ó§OŸV'dĂ 7´ôX8Bˆ Áđ_m)ŸĐS6l˜ ¢Ă¶úر ú%º4Ô¬ˆ€,C@QË )Ú†Ë.»̀{î¹®gÏî駟.Z»j(äôˆÇ<©—" " " "P r|”‚ºÚ(;D8¼ñÆƯ0eÊK“ơñǧƠ é̃½{R0½tB>øàKƒ…Đ́àÁƒƯj«­Vv󨉀ˆ@¡(ê£Pd³×;hĐ s¾}ôÑnøđáÙÖ̃ª" §GUM·+" " " u& ÇG‘éj!Ơ ™ưôÓ‚é³gÏvK—.­Ñ]̉`µoß̃̉c‘‹èuÖYG)¡jP̉ ˆ'E}̃:uêäĐåºưöÛƯ€ßµXväô(»)Q‡D@D@D@D , ÈñQ–Ó¢N‰€ÄÀwß}gZA'dÚ´iuBp€7̃¸êtBâ0Ÿê£ˆ€ÔF@QµÊÿ₫5ÖXĂ}ñÅîÙgŸu»í¶[₫P±" §G¬¦K’ă£¤øƠ¸ˆ@%@'dÎœ9.8B^|ñE—I'„”XD„đ‡Hø+®XI(4¨X#GtGy¤kÔ¨‘[¼x±Ă0¯RhJ…ÏÇ·̃z˵iÓ¦0 ©ÖXÓ#Ó¤N€ˆ€ˆ€ˆ@Ùă£l¦B¨D ,°ôX¦ăá5+†£ăÙ[lQC'¤iÓ¦î7¿ùMô0=(ú(̃$ µE”$å›o¾qM4)^ăj©¬ÈéQVӡΈ€ˆ€ˆ€ˆ@,Èñ‹iR'E@*…:!S§NuDƒ ˜I'¤]»vI­·̃Z:!•rh" A@QřƉ'ºvÚÉ­²Ê*¾*N£j¥́ÈéQvS¢‰€ˆ€ˆ€ˆ@,Èñ‹iR'E@*•@Đ ÁBDÈŒ3̀¸“H$j yĂ 7t[mµ•¥ÆÚf›mܦ›n*„ôBD@G€Ô†D"êế³ÏvW\qEñ¯¢–Få8â׶m[K%YEC×PÿC@N] " " " " ơ% ÇG}Éé<( Bj,œ!ÈvÛmg‘uÖYÇưö·¿­q\µ¿øä“OÜ=÷ÜăÆë>û́3‡Đü÷ßï6ß|s÷Ç?₫Ñí¼óήqăÆi1á|zë­·ÜÏ?ÿ́Z´háÖZk­œù~ûí·îË/¿´ă9WBöik£”=E}vö̃{o÷ÔSO¹‹.ºÈ :´°©ö²! §GÙL…:"" " " ±& ÇG¬§OçĐ yå•W,*GÈôéÓÓê„l°Á5tBÚ´iSµ:!8nƯu×5£ú¢E‹Ü½÷̃ë?₫x‹hh̃¼¹ëƠ«—»̣Ê+-zä‡~¨ Œ³gÏv¤#Z#ư³ fk¬±†‰G#ª&Dj¬¸âur\ ÇÎÖÝçŒëçw¿û{ă7râQ́>ª=(gÿó?ÿcNOúÈ=÷óÏ?/çîÆ®oÿüç?­ÏD,ªT>9=*5B(&9>I[m‰€ˆ@`ˆc•́ 'œàî¿ÿ~÷₫ûï»w̃yÇ5Ê{́±n³Í6³HR;=ÚưéO²tXk®¹¦=2Ä3Æa€H$Eèqñøúë¯ÍÙƒ`|(tDmàa¼ü¡«B ªh!eÇå£=Bt̀W©œ ƠấÊÇœ©ÈD oß¾®eË––&ï¯ưk¦Ă´½ˆˆûâ‹/́,ø*•M@NÊ_ND@D@D@JA@RPW›" "Pdn¸¡;́°ĂÜÍ7ß́̃|óM÷ÑG¹üăÎrƯ»wwD,`Ÿ2e»â+Ü^{íeûï¿E­`Nu^0̃›nºÉưu>ŒTV't’é~0]¼~₫ùç-=UC§ưæM7Ư´FÛ ­».çyJ4‚%lÓ£ˆ@íơQ;£ú¢=8Wơ!ŸsäôˆÏ\©§" " " "'ËÅ©³ê«ˆ€ˆ@~Ư±Ï>ûØ5¢2kÖ,Ó ™œÇăÔ©S­ô™²Ë.»¸vÚÉ-¿ụ̈öú§Ÿ~r¿ụ̈‹›0a‚C¤BTu…’®?v₫‰€¤%@ÔÜ‹/vD}à@ViœÍ”UVYÅ5ỉ¤a•é́²% §GÙN:&" " " ±' qóØO¡ " ù'€1|îܹnå•W¶•¶h@Ľ <ØƯqÇ–‡Çă?n†₫ÚÆEªR‡…ƠÇÓ¦Ms]ºtq¤ ëÚµ«E‚°™ˆ uÁ‘ê]o½ờÑ´iÓ°É=öØc®_¿~eọ́Ë/[ưQçÈ«¯¾jR©# N*œ!© ̉µk×Î}ûí·©§Ùë#F8 ´Ă† K«§˜®?©Ç赈À²Fé<̣H‹ĂR ăeGY¼-wƯu—;üđĂ]Û¶mƯœ9s×°Z*9=†Z ‰€ˆ€ˆ€ˆ@UPª«ªœv ZD@²Àˆß¾}{·₫úë›đuö£Ë/ÑDb|ÿư÷ÖÙ«¯¾:g£dĐă "5¨/Zpx`èLuzp ΈƠV[Í̉Z…sp¦„:BF؇S„ȨÓgGprMB Ñ%¡Î%…YªÓ#zÇ`”9sf2ê…m©%D¯¤n×ḱ¤ơ‘O]÷g³ô=êJ.ÇËéyR/E@D@D@D Îäøˆó́©ï" " ơ"€p9Î\Ë€’©V{î9‹ÔHwîƯwßm)±pH¼ổK®qăÆÉĂ®ºêªZơA¾úê+׿ÿdưÏă¬a;¢G‚d£6rß|óƠO{Ûl³M2̉£gÏ& ̀y?ÿü³ëÓ§Or¼{µA½—_~¹[a…¬ûî»Ï‘«M›6É6’×Z Hë£VDu: ¤º’¾G°Åâ`9=b1M꤈€ˆ€ˆ€Ä€±ŸB @D@D 6èYDK4R"º=Ós¢>jK÷E ¬ƒ>8é`@4~́رIç9ÿüñÇLMØöă;.éô@'Í€ @Îă{ï½gú"ÁùñùçŸ[ÔZ,!Ú„(xÀ¢L¨Ïư÷ߟi'bD°'D²tèĐÁa¸U¨?E}ÔŸ]ê™!âCT2ñ~-§G¼çO½8ă#N³¥¾€ˆ€Ô‹À'Ÿ|’t  [R—h\ÜyçMs#Ơ9‚óƒ4WÁQAôE¦‚3æ™g±~â¼8p`RŒ”êª~üÊñ,9=ÊqVÔ'¨\r|TîÜjd" " ÿ!Đ¼y󤱟ôP!:"_€öØcddFj§Ÿ~z2+˜ươ×ÔĆ5‘ÁñÀó1cƸ'Ÿ|²Æ߸qăÜ¥—^ŒI§7̉²eËdG´¡£>Ú}üñǦE‚cEED 0úơëçx’N‡£Jư(â£~ÜÊơ,9=ÊufÔ/¨\¹'8¯\™ˆ€ˆ€d%pË-·$ơ4vƯuWsràt1̣W\1¼¬ñ O2­í‡rHtwÖço¼ñF̉¡RWe=A;E@ F€”qD}  DÔÇgœaiå Ö`VLZÀ/¾øÂF¦ˆøO°œñŸC@D@D@D@âH@qœ5ơYD@D NR¯¼̣ yçR ‚ߤ\ Q"éœ ,°”S¹Ô—ë1íÛ··Uă¬O÷×´iS·ưöÛ[$ Âæ©i¶rmGlj€䟀¢>Æ4D{P‹4>ƲÔgËéQêPû" " " "P½äø¨̃¹×ÈE@D ª́³Ï>ImŒSO=5çÜû>ø ûöÛo“¬0Â¥jd¼ùæ›.“~Çœ9sLLœ pV¤:a’GàôxñÅƯ»ï¾›ñcR=̀á‘0¤ÉTSăéW_}åfÍå̃~ûídtHôBD oBÔJë£îXƒ¾iù4iR÷ tFYÓ£,¦Aª%PRÇá>ú¨ëƯ»·ë̉¥‹ëر£cƠê)§œâ¦M›–̀a^ÊÙ!;%ŒO‹/.yŸè¥ô)Ùx₫Úk¯Ù6DnăZ~ùå÷₫ûïëèøjO:&µ“n?ờŸ?ß}÷ƯwµÓ¯m" åMà‚ .0¡qz‰Q !ñ ©ḉ?ï¼óÆ ̀5×\s™Ă'L˜àRSUqΈ‘#G&ï×7^æÜ°áñ ‚Nê*î‰é NR¿àDY´hÑ2÷«¹sç¦uĺ½÷̃®k×®nÓM7ÍÙé“®}mÈ€¢>ră”î¨àøP´G::ñØ&§G<æI½(,¶{ä‘GÜN;íä:tèàöƯw_·ƠV[¹#<̉=:íïỊ́é}uô;,öJ́²Ù₫8æË/¿̀ø›¾\i‘åâ£>r/¿ü²-˜,×~Ö©_̃(S’2bĈÄú믟đÍøç D‰‡~8á Oyí£7&%øË¥¤öÓçyOxaÜZO¥~ï4I{\]ÚVÀy~u¯ñ‚Í”)Sl÷^{í•đ«m»7¾EO)øóú%]ÇüêæD»ví’×ĂĉÓVc›êMtëÖ-yNø7jcryeë ïxËå4#"3^„<áWb'ïwß}wÆÏïÈH¬·̃zÉcù¼̣Nđ䈹ÿx£\rÿO<‘đi±’ûyríµ×&~ÿûßÛ1x`‹Û₫áÇ'¼&ˆmŸ={ṿ3ÉGz$|Dˆm÷¢ÈËÔÇÉôÉ;HjœË½¯Q£F¶Í¯Nxqtk'üû́³Ï+¯¼²íg>úĂvEûñÖ[oeüÜ ơèQD nî¸ă{ßñ₫ä}¨’K/½Ô¸ớÙ3·tTYđú, ¯‡esè#v>r²¬ú§Îˆ€ˆ€ˆ@9àwç]wƯ•ü­–ÉNÊ÷I¯!—ö7b9§œú‚­/“m¶>ưÄ‹=6Ó¥nÇà3O$ü"ïú4WôsèçqÇgăĂ₫ ¿¸—’D| 2Ä„ß{ï=Mü»° –U]₫¢›lå½79ïü¨uUṇ¤Z°Âw³Í6³Ô <đ@­¬Ôöó¦›nr .̀Ø¿ Ü;́`ơ{#“¥*‰\×ö£ç†•ÀÑm2¢Éºƒïॺʩ́vÊéQvS¢‰€ˆ€”1 ́n½ơVwÍ5×${Ù¹sg7õ<[œ†Ư‘ÔCüÎëÓ§Ọ¶±H\¥vuuTÔ^ă`®^}ơUK …fø#ơôøñă]ÿ₫ư“#Op̉I'%_ëIñƯñ]¡–F"V¬ci^zé%Óû(Đ_ÀĐ̃Đ‚ç*»0´‡çéêMî *AÛÉ“'×;?z]ÚOíln»í6ÓóÀÈ©ÇëuCÆ’©´•É́çF±dÉ’L‡ºÔk"5b$ă‰Ú!"PƠø̣Ă—Gœ«D‰e+‡z¨ƯkĐŸJ4lj>»XÅÁÊn¶¥–§Ÿ~Ús̀1nùå—OƯ•öơŸ₫ô'Ó ‘©Ñ—Ï?ÿÜ"R¢ûˆÁá‘ÉÁB½Ü7‰ m-₫¢Ÿ…¹ö3Ô¡Ǵơ‘Oº½aQ ÷3•xÀÑđÁ»ç{Îœđ·ß~»é8Æ£÷ꥈ€ˆ€—N œ]tÑEÖ0¿ư:ê(G–£…‚Ư’…y£Fr=ômÆ‚­Œ…å*¥#àÓyÚÂô7̃ØEÿĐÔD§§Öă?́ 6m~«—ÀrÅmÎ9<_DwPêĩ¼yÚ.pí¾ûî–văÓO?M{ ¹Y„ˆUW]Ơ!îÍMg «́B!u‡ÏMæ¦OŸn3lÇ@„‡u­µÖZƠű8_|Z‡ĂcèĐ¡v£! )Q|øen""ÅHpа–müƒY¶öé#çr,Æ3Ο4i’E4+úÅqÛ0̃£['Æ+ö³:\ŸÇƯm¸á† ‡ oêñ¬ê%\'̀C?C}<†c`Í͘>Ô…%ăgô‹ºˆ„aXyœZ6Ø`ƒdö!*o:`Ô‰Ö½{w3FÇLJđ0'Ôs„ùùRû}Æ^>|0¥–º0H=W¯E@ C€hB ’Ügø Á™KÚ+Vóeƒ[º{bè ÷0>GB!„vØ°a–‘{9ŸAmÛ¶­Wú=R&̣°`ÁkƒºH½…s#s%ôÏAú„c„/U81VZi%Kï•î̃Ä=ó…^°ÈîëŸm̀¡=€äN D}øœ̀È*̉ئ’™€">2³)Ç=8=₫øÇ?ÊéQ“£>‰€ˆ€”%yǴ̉¥‹-tÎÔY~§‘€ßœO>ù¤¥|Ç&vú駧=»+N²¨êØ–[nivÓÔ°{‘}‡G~óƯ;,¿‘I-Ï¢kÚæ·r6[Z]Ú¤ØÙ‚½{$¶;¯·kYv¶Ưv[û=úƯ’è 0̣»•ß¬0öHŸC¡NDÅĂ"j¥^Úá÷0¿£…ăƒ=Û/¿±Ô6ÖPv̉¨2lçdm@΅A™ }$åöb¯#jăă<Æ—nP>æ‹qc7đ:Ÿv}`KÇaĂüFy¦ë3,±!xiÛÍÂJæ‹¿t‹(©ÛsÆ<3—đ ²‰9!r†¬Op„gôÚĂƯ©S'‡=·̃ÅWZÔâ=˜IVÿfMxÛ÷t¿‰̃A’đNˆeơPZQÁ&zê©„7¶[ư÷Ưw_ƒJ{,"B₫M^£Q¡í₫ưû'ü!),îa'RE´ư…Zc?Ç„?úrâ‰'fmßO|̣| “@p×k‘$ë@´Ü_ÜÉc¨3ˆ›G™ú›`ÂßÔ’ç…>đxÙe—%¼1¬Æ8£\üM7­HR¨?´='Z?Ï£,é¯_aœđ7É´ư \ktÈ¿đ‘6IÁàw̃9ànº̉ă?Bï´‹x¨#Ùa°²Kí£O%câåô/”([ï˜I›GÇ+ŸP'ơe­CÏE@*À=÷Ü“Vܼ̣Fª‰€@€ï£-[¶´ïCgŸ}¶ d!àÓ̀&¿7fú˜åtí*2ïèOøa6g₫Ǭ„̀‹̀_͉€ˆ€Ä“Àĉ“ßw|~ûgm…ï“>‚ á Ó oœOøL0˜⠿X;YwÔæ ωƯvÛ-á5Î }ñÆö„OלÀ&=/<÷“´"ƯơiÓ;T’íø¬?6®Đư1b„ơÑÁ^÷2m8̃/’6ÁwoÈ·ă±†z¢Œ}¯½öª1n˜ûEÔiö!z’O7À¦HƯØ$±g+~!c§)³ăưB́„wl$Ç^ˆí9ÔíoxîvḶ$ÿ¤¡óÅ÷kl­¡đˆívÿư÷O`Wf[êøÂơO}LÇ̀;W’bé̃™”đ À̉Ă{§IÂ;é2Î5û±›×§àM)jáéWÉ&G åuéH:ă6†y.æ(|n LNÔ€ƯÏótm.Ln&lèÙ@IDAT́uDø¨Ü3¡ds|păÀÉäx¡}~4pQ¥ö-¼Nu|P'o8JpL„c³=2†èÍ{ˆ\|œsÿư÷'ø±™ZBư¡Í\Xfăí7̃W£InÂÜøÂq¼©S c঑zŒOx¯hr;ûqd„¹ Ç'N¨7“ă£>|B aêĐ£ˆ@eà^Ăư~Ï=÷LøƠ v¯̣+›+kˆ@Z,̉à{?Đ|ÄqÚc´1‘˜?~̣{?¤UÊ—@ÔéÁgÚƒ>X¾UÏD@D@D L¤±棤s`#Å₫laó|Ô`̣îÏ•5RFD •€´>R‰¤̉\‘Npx•̣$̉[¡cEr÷îƯ»<;«^‰€ˆ€ˆ@ÀEú7[:ø†vÛ©’‚f¶ḰŸ|^“êiܸqfߤ̉úc+ÍT8×;́\̉W‘î?́¥Áæ–Ï6©uÖqW^y¥é]¢µI;ØøÂ>t˜±íaă#5—7ÄÛ>úA¿°‘îàSF³ßÛ¡l¿ưöÆÍd BăØëB!u>镘}„‰íBúà™g1-–plêc¶Ô_Ø2i[!…¹&ơ>…ù'=uØGHwE.˜£ÿâ£2́Xúí4SÉu¾zđ™‘̀NJ]¤ôâ{œ_œim{'O¦&,íö{ ßÑÑÆNË\ ±pươ×Û>¶yç¥Y³ )ÿ°Ơû¨£ä8£×‡b9âˆ#Œ,B½́£ŸØéëZîø ÿ"¯\ĐÑB:°Ø*5BjÁaA.0 é>+™ï‹ ‰ }àü`xpAbTNr¶1a©LUô)ªL#ƒc«‰₫ă¢ñÚäéÔ‹A‹/ÿ!a"²ä)£í\Ûç\ŒcäLăb"—^¶œî çô‚½ÄÓ₫äÍx :̣Ư…óệXÛXàựË/'8:¢Î¥wÜÑ >Ür¸Ñ.7nÑuqlê₫x 9G‡~¸óé#́ṭÄqS§üñɹă5¹ñ† b¹úxÍüñ!Pˆ’…è—ê(/|ÅÉ­""Pù‚Ö#Eë#ƯwÜʧPûĂwđÔß µŸ©#E Ó…ˆ€ˆ€ˆ@í°O.úèB¦ ÈØ̉.¹ä÷—¿üe™¿k®¹ÆŒ̣ᢆĐôb(ØÜ9‡×»:N‘p.:,™´g¶Ùf÷́³Ïmk '×)›5¶k˜±û}¯^½’û±¿§»fíä,ÿ.nN_¸X1„_wƯu¦rG-µpqŸp ö< ® :œ%©ç_}ơƠæy5k–E ¢±Ülđ¥ óF đF 9.>n´ÓgV6á”À!’®¤F¤“©}ăƆ£®åÏ₫s̉¡=7ʃ7njEôØú<…n8æ¡Ô‚c¯$7Jæ:ơâåô·¿ưÍ<¼̀w¨ź ¼æÆœY¼q‰̣à ̉ªU+v×(xMƒc¤Æ<¿h¢—.¾øbǵ‹çZEJI€&"ÖV[mµRv£bÚ¾óÎ;M •*|ˆkÅL­"9 êƒÏx„&ÿú׿:"qUjr|ÔäR.¯äô(—™P?D@D@âJ€Å/di¡`K#B!µüïÿ₫¯¦É6“©`´ÇpŒ:±a<ÆF™.¢û%¶Ác=ÖllØ­RĂnº [,†øÔ’¯6ù·ñ;UÈ›(ˆ·ß~Ûúă#µ`ÛĂÆ—­À7DUp¶EÆMÁøÍ2đm£ÿ‡˜;Q"8‰‚ó[tpZ„ă°Kÿăÿ/3>â, ÿQnÚ`°U“ñ&Ơ~¢X¨§MpX¥6’ë|á4vUúC´ ÑÂ<#$N[QfØ(‡ f‡r[깩ơ¥ÚÛĂơ=[.ö[ u_~ùåÑƯfë ûḱ¨Ă‹’8>èÆj<—ü’„ÇđÑGu^?Âœ Ñ1àmó9Ü,_¶ƒ1˜‰˜—œĂûæ›oZ=|°-´Î)ÄcCĐgú Ñ?Ơ)¹ Ụ̈œsΑ>W`µÇ ₫TD@ª“ß%Y½ås [Ô‡øs¤TUù/ñ‘úă÷¿GèY©ÈéQ*̣jWD@D ’°ø‡lNL‘ é8`ă †jc Å^-Á9ÂBo 6³è‚b¶=2—’¯6i«E‹U’Ú.Fq́‚Øü° bdá46¾3f˜9Œ;ơÜL¯±Ub¯£°(œEç,Lâ;N(°Âá­;ăƒă±¿¦:%¢l8ÎôƯëG×p*q́²Ë.f£ÄVɸöq²è°¨›’ê¼±₫_]æ‹Hlï”tÎÛáÿá€!Cé m¶üOÆÔư8spVaÏ„Aê‚{Î]o½ơROK¾¶ăä†<=)™ă#ÚŒÙxÓø.̃NB€Èí~ü¢¸D D èạ̈YRÓ*yÚ¬Ơ£ß±Å[$ YÎq'o®\5Ñ*¹A¥¾áÂ₫¨…cB˜WØŸÏG¼ˆáÊ›–7M} ‘Aä†#L›3Q"x£i®đn‡ˆÚÀ‹‰hœbDvdWCÊE˜YÔ1”©mBÀ+ŸíĂ©Đí«~¨4D1³đGQégVé¹”z«œ¥µ/" "P)X&cNMíÎ8Y}Oê}₫¢……̀¤l¤ÁÇvÓ¢£\×’ÉÀ®|µ™®î° g6Aä°-æ£À)D>`3D'$h…Ôµ~"nHG–1B=đA¾ààƒ¶¬5!eV4†ˆ‘[o½ƠÖµm¯Ë|áđÁYDÁ&]@n³üĂF†ê,jO7^Ng1L29>`’ÍÖ]Û₫,]̀º«¨¼KÁhM*#—ZĐÉàÍ 0ô!½QÔÎÁØÏ›!<&ˆĐ¡\Bc¨ƒœr\|¹tHđÔ2–R.ÄTZº>ƠƠ±ê 7ætufÛÆ#Ư<‡sxÓ¥«›UÑD¾PxăFÇ *èªP/̉àÄáM‚#„‚há8œSÜpˆ!Ÿ\.œ¢ud{ Ÿº0`<\Sü©ˆ€ˆ€ˆ€TE}dŸÏ°èIÙ9s¯œŤ­¶D@D@ª‰†x́س2”£<Â*́P™ Ç°rÛ_ºÂj|̉Kå3A!Ú$%̣ѲĂ6tM¤ÍÆ"znºçÁ˜ŸnÛ°ÏawÎen¢up<‹ûY”2D„yfÎÑɈ¦½%z„…ƯØ/qnaëΤ•m+—çŒ#Øeé[ Èå\ú‘KA G…6h“ñ–ºƠñAỆ‚âCèâ8™Bd₫Ÿ½÷€—ª:×ÿ—z[ ±EM"¢"XP0 &b¢DlX‚Ư5 ˜˜Xb"vƒ‚…¨ ØĆÑ$•b7Å5#1̃û¹¿̀}×?ïvÍ>{fΙ33gÊó~>ḉ™]VyÖ̃{ÖzŸ· ñÁ`9X&Ư1àÜ|„Æ"R%„°Y(×̣kạ̀ăÇ‚́˜c °0g´+öª¨D{Ê)#Æ'¾́¬$NÂm®=R¨¼ö\Ë9äÜ€iîÈCeeó à&[ îäWá>BN=ơÔ¼0c÷Ưw_øÁ°ëo¾ùf7lØ°äáf? $îc¸­UBÚƒOg0¨DU†B@!P_Èë£đxÈă£06]qD¤GW ®:…€B ™@?‡:EaLx#̃ź±b~Œ~ ;_+©FèøL¶ß~û* £bÎÁƒ:&́X{¶èÉÑA¸üj:âBºP̣[»‰l4ỉ¤`øÔ$mÔmûËÙFÊŒH¬^4“ƒr³ˆc¨₫û®IgåRư&ôçwµ|h Z‚u>¹[o½5ä[(V­)ê9‡››‡‰—ƒƯ8€^ˆÁ$WÇÀƒÇÀ]wƯåˆgVJḤCè*äÄO ¡•ñ9cÜ(<l-—FœÏ¡TƠ>qcq]0¥–D>&”âs u⇌cà 3Ù!F…ŸẓÉ'“|é2ÀxóÍ7w#GLpOŸsä‘G&I~Î>ûlDZï¼lbO(sï»â+aʌѴr-¿‰}ïȶ#øTƒ´Qç z@€gr›IïT{.Kµ å §]—ơ.+U† ! óú ­¿üå/Ă›Fh{5ÛÈï…y^Ûâ¬ơ©́âˆô( ! „€(̣, 2$\Nxw,ûKÖ.Y²$èÄ̉u’™ưD7AWUÇëDd•Áƒ»¿ÿưïé¢Úư½Úu' êÛ·¯›:ujĐ Ç DÿÙQr]%ú:#vt–YBä¡₫ưû‡ºÑ—+è±! balb}7úæC}r÷X‹ÖrrÄ×–û™vXó?ưéOnÚ´i™E¡Ç!Ơ@,qH-ÆÅtËñ9ô â#&:êÁ9€6Ö”øÀ{ƒ…‚BửK/ud‡/$]tQ…87B6vÎ<ârN8á·páÂđ SWV(¬X‘Í ÅCoJ₫7̃8-q™ñg̣Và:†üâ¿Èd\Kå̉ˆëËî̀çĂ;,q-²rPN<9ñrˆóbpÓ6>úh›…7ÄC¡•Ï6î ! ¹L¼4̉B™1x^÷†;Kâqàåư׿₫5ŒäÓ:묓çeĂBÙ¥Y„ „Äß³uV}é}åâSI ̉m̉w!PïđáÙå‰×ïăBÏxܼ¸ Cí:¬øñ”´.L³&í­‹ˆz̃LàơÁB‡E(nú—äö B0Hº‘]‡½jB@æGeø±Ç›tƒêQ£F\û ;=÷ÜsCøä¢è)̀)º̉´ ̀?~|Đ}’ß}Wg¤u¢Û3Ư…‰Ûú¯ư+¤E ,~1AW‰nÖ]¥…•G‰Î2&!8ƯºCÆ}¦…o²2ÊƯ²®µ¿RÆùD¾9묳BUé>”SLT'úÑ´®̉ẫ{ïmS<)3QN:é¤đ9₫÷̉K/?û˜ĂxàyúÚøÜZ®)ñĐ'Ÿ|r’D…|äú¸îºë‚B›GÉEÈ)Ûßÿ₫÷Ư[o½0!́Iv‘ø3ÉĐ'L˜àđđ@(X9¼<L|•fù+²ñ:á6Öf a€J-¶ḅ€:a !b úç{.X/›B¾Pưñu¡e₫Cá?|øđđ’Kđ#®˜"„đ"q6+èÁl±¶†$L/ËB/ĂB}AiÙ£Gsḅ5€ă}À„Pa´!O¾§%kÂ"IX6NÚÛØÈë£íøY˜+Œ¥²̣¿µ½B{ª€Hj ª2…€B@|FƯDc1%2ú5t¤"XÜér‚HgœqFØÏñB‚¾Ư‚r)¥¾•½óÎ;#tô£èI()Tf©ưƠ¬Ư:5˜ă?>èđĐóâùƒ‘ s<̀°Ûô|è{QÖƒ#:@<z÷îôpá×@0rÊ)In¸VW¹[ÚH=Œ½EC¢,t°6Våă•ƒ₫̉ºÓ'ö£Sµ~•Óî-̉6 `zĐA¢ƒ2чaÇÂoÅåsŸ G¸—Đ1"èS¹¿ˆ̣±ưœ9sÂ9Ü[‡rHø\ÿ|k.ĐÈùX_dGiןg–r¯½öZ^;½̣<çY§’×û˜p9?ɵ₫fÏy7©¼ë|²™œWp'û|N†œ¿!“k }ØgŸ}r>ÜU¸Îß<9O„S}Rö¤,úèØœ÷> Dzê÷7uÎ9»ÎßT¹Ç¼Mµ₫fÏ<çˆ#Èù‡7¯ÎBØzÖ²M¹Vo¡k¬^™™×®B}ñdBγ¯9ÿ –lSÖئèÙÖÜ;î˜W–÷IŸÆ̀“}zW5Eơ ! „€hzĐ#¢O,¥»â¸',r^ó¡—ÂùèªĐe™ 7EÇVª,ôf±Î=¡•ï ­¸d‹nËçĐ çx#ߜϵœ+·NÓä<9Êôù;r̃h;)“¬Ñç–êK|ư,zZa¡c`æ=̣ÇçÚgtÎècñÆó9O „kÓøÇçÙçø|tª—]vY8Ô^ܬ-lÑ[s¿tf¼ĐË sË-ô9î:ëk¯½¶äu[n¹eÎG²îçJsg'ùPSf˜ x äh°}Y[¼HfC¾£XüẮn»í¶Ä $>Æg®Å-‰Ømq\±Í6Û̀m»í¶ya¬p‘̣7~(V¼SJÉqÇ—0¸W™í% eZ>¬ú±ø‹c¹q~l-måÄưˆ”“ˆÆ–>ûc&®ɼ'iÁ• ¶Î¼bâă0₫Á Ii8·«P_h'ç2Æ°²– >.—Ïçw^íÛôyXưbñkfy€p cóèI’táûĉ́_„IYvbŒmÿrñ©$ÖNm…@£"€×U1«}̃3X´H„€­„€¼>̣GÛ<>Jy^ç_¥o•BKÄưöÛÏƯsÏ=aÎϺbôèÑ•*^å! „€)ÈiFøüyóæµÉŸJT¯„wsçÎÍÓ7Æç [»đ ]¡œèæĐÑQW¬ó4}z·¯ưëq‘á3çZ~]ô\–Ó—ƒåÖɸ®riÓn»íó=-xmèđ̉‚NƯ¬ úD;ư+ O<ñDĐ£Ú9ñÖ+đƯ7̃èĐ=ÇB9x˜vö=½sϯ¯£¸Ê ưfZlœđ`!E„ u›ƠYÎx‘$/Ë/ce³e₫ư“Ÿü$7«‹>3¦àxp=sî¾ûîļ9 ÆÄØgVI¡NBG’e#¯ˆ´y^Ö~ö–†p,̀yÖZk­J6¥¢eÑæĐÔ”ˆ­D… F€÷ëEÂ-¡?c]ƺ̉ƒmGõ-$çYe½Æ_{ơ_©ËέVèâĐ€ ºô1̀¥Y?> =r¼e½Íz”÷kÎô•ă `ÎuYå[ÿª±µ1§Ô¾¶Çù½¢ô5u%$î7¿QÔÇơ«ƒñđ+!¿ ´‘µ;××¥x%†D! „@ňC]í¾ûî9Ï̉—HÂÊùII›zâ0W¸ú̃p~V¨+72ç”Ăqÿ£Úfë œŸ4äƠqùå—ç<ÑÎÅ-Ôm®£¬,[ *§NkÀ‰'˜ó“–6ơyË‘ÜQG•ó¤³]¶~̣ĂÍØ°H÷•‘¸ÇrÉ%—÷gÎơ‰’ƒ «ŸØµ©Û“¹Ûo¿=ç ÚăZgÉ¢E‹BèÆt[øî'h9?Ỳ -IØÏqÚë­U’{!]†·¶ nÚ~–\“>‡²ü„6«iÚ'ï¿XËùØ¿ ߟr;°ï¾û&MTnº® üVá­ÊÀM—Ô?^I_p^aó ¯hÊy#ÏA¥„yåS6!;M²ö3·±ù[æBơ*>¯jèí¼è¢‹êµ™j—B@. uå'! „€hN=ơÔàƯ@W …³ÂÏ Ä+»‚ç^ø’ú‡gÂÑG‚Ù!¬=̀}$:ĂÚ/< ͲcĐ AÁ2ÁÅ[Â#^}ơƠÁËÀö—['ד ×T,Ḷ̉kŸhîÊ+¯̀<†Å!¸ÁbA‘%$# Ö&q?¿÷½ï9<ßü¯½N¶Xb́¿ÿ₫Ár$Ù}à83±̀œ93xv`ydâ½ ®œỌ9¿ ά“öâVP–l·ƯvmêLŸ‡¤cú˜¾ FG€äŒXóL{â²Ñ»Svû±$FêÖb¬́Ơï…̣ô¨ß±QËÊG€¹Á̀ă9 Ö´¼k™S˜p.¹„#ÁÓ´Rh¾’µŸ}q{*QµÊ°öƒ#áG$B@! êơ>BjŸB đ‰¿’°LÄÈŒçt ÅN; Lc9&é –ègŸ}vB¾ H ʱ6rmº_”cסA›HœK$ØÓƘ„ )D†… ơO4 ­îơ’÷"åcơoj‘ƠÇX5t xmôë×/©œy‡!J^ˆ.;†g, ï¬Äî\ ~x`<úè£yDM\‰Ưb!Y&$róÍ7'䉷}ôÏ(đ´É"!h÷€‚Ÿ k',§<’§¯ơyU2q°úÙÆ!*âưú, óú8âˆ#ï*BÖƠs’ÛJăõ”+J£›_H|<ô­yÀhƒ ›;0zươ×#‹¬̣Å#•°œ°¼™k¥…°¬?üpHî§2F3ưû÷wx»VR˜«áQ{çwÏ\<”!r¾ơ­o31|úé§óaæòƯúöíë'Z,,˜½ñÆnúôé|Æh‰¹+sX3 joÿ(Ë°‡d‚\*Vw{ËƠyB@! ÊE@ÄG¹Èé:! „€(‰ /”ô¦p'ÜƠüă°Å‘…¹BÉ•VÔ§ gñÅ 9B4úˆ0PO>ùd °æ£̀bÂâϼgÇ:[ç7¿ùÍ6€•}ÜqÇ/óbaÿüùóâoúj$]Ç’_¶ß¶vœíf›mæVZi¥xW̃ç¯}íkɘäH}añjåóùî»ïn3N´Ç'Ê.‡±k¬8¼6́°}Ú !ĐˆâsÎ9'(êđ’B×*bV×(*W_}ơVévÍû)̉£æ«Â"Àä»ßưn¨>Æk®Y´ŸûÜç܉'许⠷‘Ïÿ‘~ÿà‰F8¼”³„ùëo~ó›L²$ëübû Tđ&\Z ƠáiÁuY©Î|tö́Ùmˆæ“x"3?O øa ̣àƒ¶¹.}.ßßyç7zôè0·ç;FJ‰È ‰B@t">º yƠ+„€h!Î8ă ÇÖrÄVfia¹8°´#¡w±ü(kÆëî¸ă’… Í" Ë₫rê|ñÅ“PUÆ)«8œ“ÇâÎȼ9‘UX?ăq9¥Û¹–×Ă¾5Ê>vhkÖºH' DƠYg<¤ZÍëĂ<>æªz7¾Hêa«’ë /l.‰a†åN*Ơ: ]/Ê£Ăæ1̀«đ€¥ÛG̃3̣Åá BÏÎóâ,̉ƒ2©ç€pxOC0 ̀ñđˆI úcïTˆ‘¹sçL˜sâ±bçÙ~Û2W|́±ÇÚ\gÇămôà=₫ÔSO%̃ñ¹ú,„€B –(ÇG-ÑV]B@@r뮟₫ô§î¦›nJ̣;t¦éßùÎw’¼ _|qo‡¹Ú}÷Ư‹ºÂ³°ëÙ³§›1cFé²ÿ₫û;’‰8° wE9m/·Nđ3‡o|ă­äâæ…ÚGâp¬ ươéÓ§`ù…Ế̀~<7 µ…ưW„¼bÑ-B < xñÊBÉ…×G«ˆy|È:¸:#.̉£:¸ªÔúB€i晧)sÇr…¹̃ÄFpàIÀ<0­́>|x(̃È…rë¯Ăcwï½÷m€a₫…à2~üøà̀w TN;í4>†đ¨x Ó̃§l,X1§óØ1%́©‘_₫̣—Ư3Ï<æ¯/„9E¸¯eË–…ïYÿÈ«7tèĐÄÓ̉ƒ1°°¶Y×hŸB@Z! ÍD­V=B@:D€XÆ‹/Öb$̣&7‹¬¼r2,]º4$ÉîLó±#ÔÖe¸Ú6€°N,àPrV wỡ~ûí!̃±µÄÜéü´K6h•rëŒÛEh¨-·Ü23¼ÖC=”„µÊj/1ÄX.†KÖuƠÚÇ¢/”tˆBơùSè¸ö !€åú /N+y}˜NÙ÷Egöôè zº¶‘èL˜MH¼)æ>¿ưíoƯú믟À‚÷Å­·̃æs„‹Âƒ¹3é1xđ`w×]w%Å`T¼cȈ đú ̀ÍΛ0aBrF(„x%|"/̀“!)˜w3W&‚w̃ÔäàCø Úu×]Ư´iÓܘ1c œԄ¹)^Í”÷íoÛ±†@h#ë,¯f»V[! „€µD@µD[u ! ºG„ab!C,cÜÛ±ÆbQDû2$ÈGƠĂF¼Đ^î¡,a‘‹²’E÷«¯¾ô?ë\íB 4­èơ!̉÷E9gˆô(5]#\˜gZj̃¼yÁh§wï̃y°0×ĂóĂ#ŸÎ y<ÈבöÏ5+́fîˆq Â|dîä̀ƒI Ï¿‘7vŒ¹„1´öÚk‡yµgK̃“w̃9-‘ü=À2^xáwôÑG‹ôˆÓg! „€¨;äñQwC¢ ! *ƒ̃‹-r¿ÿưïẴq&«¯B@&@H°Ưb‹-¼×Ù-á®HlN,₫2eî²Ë.EĂ\q±ƒMéεiÂe;ñ‹+I”['–tfaYÀ$“í£?„çÊ uEÈ/,íđÄ!”˜1>±@ˆà-B01B(>§RŸi³Yïù5×\ă?₫ø6m"$÷JÚÅÖ“ζ¥„ζA× Z#Đ^F†Ëă£rw›HÊa©’Z̃Å$g^CÈ) „đ.~ú駡ÀÏÄBbÙ÷r¶̀²æ=x‚̃Á(# ÂZq>ó4₫˜;̉>Ú1¼OŒxÎn,‡~xzwøNÈEǽYB_™Ó›@ÀuÔQ̣ô0@´B@ºA@ÄGƯ …"„€(&ÄæŪ ¢ăñÇwo¾ùf‚€̉ÆóúơëçÈ?Á_ß¾}k²P‰Ă]qơ\{Üá{ơê•(Ûq»Ç̣Œ>°È»êª«ÜÙgŸÄ`Å·̃z+äéL®‰rëÄ*ïG?ú‘;ưôÓCûvÚi§§¯½ö Ä –Ü„3 âQ‡pÚÈçÊÀƒ‚ăxÂXÈ+Hâưă!ƒ2 !ơUS¨ƒ{ä£> aSFÈBüéO ¡¼8†°đ¦ư&( Ê•øZ#({ƒ 6¨¡RnÛt¨¼+Q‚5/Ï₫ùçŸ_«ª»¤#>”ă£2đ‹ô¨ *¥±€$Xyå•Kv‚9¡¬8Ÿù†y8`\B(«Q£F•,£³'0w"¬h!Ă‘xL¶jØ°aIÈ«RíàƯ)‚P'Ià;++—_~¹Ăoa‰B@zA@ÄG½Œ„Ú!„€h'–—‚ĂˆÜͳ,ÿ×Yg ´Æ‹Ăˆ\ÚăÅS;«­Èi§zª;餓‚ƠrÊ)! a ®1¸Úc=‚GLgËÖơB@! *…@uµ%•j¥ÊB@´(X Aj0‘¼äƯ°¼,Ä®»îºàÀ"…0ÇO>ùäp>áŸX„û„}÷Ư×A„T›ô@ñV\Ûđí·ß~y»í¶[AK3RÖV¬ơ|̣É‚ 1b‰Ånºn¨,„‹ u³x«DÔơÈ#¸;ï¼³G jÂU >¼M®£ß( U¨Ư7ƯtS°'³ ÷…µƯöud Á‘Æή‡d!±e!ïđ£ÍÜ_&q[ ”ÙWëV'ÊNûL<đ@̃½nq™V¶B ™h•\æíÁXÊă£sw´HÎ᧫拇rHèyß9昒‚à¸ûî»ĂỳC̀ë‚ëô ÜÉ“'̉’„œgu–c[i)d8bá\™b̀D¹›o¾9©¯XŒoèÅW^ye˜K¦CY1Ï$W\)¡|:Ú0g3Ï1 6đÀ-æơÁ¼Ñ¼& ¦M›æ0Ô‰÷3G‹™ƒ$søàÖơ¶Ûn íázæ…„lmO([«O[!ĐŒ°†Á€CDÂ+ \3²úÔ(ÔU#Œ’Ú(„@S"€{º%G„à¨Ç¼ơr;Å‘b̃'‚xàxyûí·Ăi0é$æƯ@@à FA óP¼6X‡`De‚ïi§¾Bá… ơáƒ`˜³›÷|a®̀»%ï{îé.\_¢ÏB éÀpƒµ=k¿‡zÈ-Z´(„wæƯp衇:ÈB‰µG@ÄGí1WB@´ ÍË…Uœ—K4Y»7ÎĂbÛ¬–ïºë®¼°V,2‰¹l ÁÉs‡¬jœ^ª¥B@ÔVÈơRŒÔ®ÖZ‡HF9µ»`0A¢mæb zÈ<¥¯¿₫úàƯâ/…8ÿÆ&–ô›ëboVæñxV@0ƒ(À‹ÄæzœÏgEˆ‰r…vAl¹å–!üyùđ´5O<`ñ¡­3œ‡@€vá ùđóŸÿ}B8°_|1„{%̀®D4#<«1â=…ÿ}÷ƯŒÚ,$ơ™0yx{èY0D´µG@¡®j¹jB É`aÁ"…Å È™aƯo–Qq÷qigѲưöÛ¢ƒ¤Ư¸ˆÊí_«Ïơ‹9Yđú°É/cJ̣K“, -ô=(æª~{§– !PkˆÙ¾é¦›†wÈ駟pµnC5ëĂ’yÊ”)á½yƠUWU³ª¦+[¤GÓ ©:T!âW¥„Hx́±ÇBX*;²ĂBIÙ¾R[ÊÁÊïcn„sSÖ)…„Đ<³gÏN¼A,Ôa¼ÈyrôÑG'—2Ÿ/³jgîK®‘˜@JNÖ!Đ`@x’÷̃Lü±¾×tt‰µ= ¡äkLHêjD#h0øÔ\!Đ¥Èă£KáWåB@4,¬zê©@r@t`mÅäKX̉y9 ;zơêƠ)Ë°¸|}®ˆ§¼dÉ÷³Ÿư,Xÿx̀iùë_ÿ™Û#}¾ !ĐÚ4»×¿£ˆ<>:vŸ‹ôè^:»µà}Â3r饗æyvÄ(öé€pS§NuXfÇ‚§ĂĉỰå˃wD| ¥Áƒ‡ü!?üp^‘tN²8V́½mû!#=żà“N:)¯<êµúæ̀™“́7¬¤Ă‹%,FVéPXX©ăɉ mêÙ³g8ơ^ĂeÙuk®¹fh»¬….¼đB7aÂ;E[!Đ0@h¼ổK!lùsđêÀ°1gî{¢4đ́Bvl³Í6 Óƒ¤ÏB ÇG ‚ „@ă çå0oÜɱ‰…‰ĐÆo’ZÈ*Ü\•è/F©ù?cÅwË-·„pXl#Lˆ‰ÍÜ»wï¼Åkó£¡ !ĐÙëcÛm· q±Ĩ{øá‡w¦–¹V¤GË µ:Z˜§C°¢È„˜€Øh£Bβ4á‘Uó9’3¿‡hˆ¯#ÔïhÊ®Dn2¼Ç H;QÀ²¦@ÁZHèßk¯½ÂV‘“ƒ|I±•9ÇIÖNûđJ؈ïŒtH–u×]Wk– }nzđ̉æ™gÑ7俉…熰n„~#äDaè0N‘!P¿ˆø¨ß±QË„€èbX<ÿüóÁƒĂ<9Xô¤]Zi&±r›1/ /’´±b¢§\]|Sªz! ZˆÂè¡Ø"äùŸA°L&™îܹsƯ{́Ñ ]ªjDzT^.„€MŒ€åç J‰Èñèà3f,x6ơèÑ#„¬‚è€đØl³ÍâSôY@@ÄG ’(„@ơèh^­¶Ú*Ä́$\±;›-/Ç̉¥KƯÍ7ß́¦OŸ”kX³Ü}÷Ư!!bơGC5̣°„¦ƒ rtPx6ăĐå—¬+…@×#ĐŒ^X øÅ‹o¸®Gº~[ ̉£~ÇF-B@úC'̣s® oˆ¬üxs’ƒü7J„€hlD|4öø©ơB@”‰îî$Ä“ƒ?‘·z^ÜygÎœâcơb¡™på'̃đgœ¡|ẽoº¬v >ÜƯqÇÁ3 ¥ƯwßƯ;Ö 6Laj7 ª©\}ơƠîÈ#l¯bf“¸!¬ aX$ÙˆôÈÆE{…€B@–Ÿƒü;–Ÿă•W^±Ăa‹Qyv0`„è0`€Ûn»í´VÈCI_„@s â£9ÆQ½B åäå`ÄqÇ›9/JâÙq×]w…%}Çb|믿~›xÀv¶B xÿư÷ƯW\ᮿ₫z÷â‹/&ùwˆ=bÄwÈ!‡¸₫ưû+l[= Ú̉!Íëăpxh­±ÆîĂ?́­t²HVmơU! Ú‹ÀÇœ—ŸăñÇÏ̀ÏÁzv‡v¹9,?á¬$B@47">{|Ơ;!ĐrÄy9~÷»ß…x(?³̣r·‚„ă–€œxé­—›nº)„³zë­·±N‘ 7Ü0(‡>ø`G8/M[îjsOcåuĂ 7¸[o½ƠAˆ˜l¾ùæǹ˜1á0u­đ̀[ßµmÉëƒg¯¬-¶Ø"äƠjªl/DzTO•&„€‰€åç bCœỴ̈#ËÏ'‡åç0ï̉ø<}B ùñÑüc¬ ¦E€¼/½ôRSEh&ˆâu¦'>€%i³çå(5ĐúÓŸÜo~ó›` ¿dÉ’„ £eï½÷'¬n-Öz©̣t\4 $+$üƠÔ©SÖåÆM¡°eƠÎ4Íäơq̃yç¹ &¸Áƒ»{ï½7ƯƠ–ÿ.̉£åo „€hYÈÏñç?ÿÙáÅÑA¬ü¬_ÉIInˆ₫Ö^{í–ÅMBàSD||…> !Pç´7/9)°è6/<:zơêå>ûÙÏÖy+ß<⥠‹Ú 8( _&„£GväDèÖ­›¬̃+¿J¬C §M› …ªĂR“Ú@³x}Œ?̃M™2Å7Î]uƠUíî+œ(̉£FY}B@C€( ̀Ï!9øƒđ(”Ÿcûí·ëYÈÖư«®ºª£­B A@ÄG…>!POX^ W…;ë›o¾™Äë·¶¢fă7vưúơ !«Z!/‡ơ½ĐO&(wIV–ʪgÏnäÈ‘PVà"­ˆ€Baµâ¨7WŸ›ÅëcèĐ¡nÎœ9n̉¤InâĉÍ5HèHN€§K…€B !°ü$"_¸pa :̃{ï½¼¶¯¸â!ßä;î˜ Éœ‘¾!PEÀÑ!! jƒÀ¿₫ơ/·xñâĂˆRy9°đÀ²ƒ¿VÉËQj4–.]ên¹å–@x¼₫úëŸaÆ…PV$unEÏ—RØéxk# PX­=₫ÜûfđúØvÛmƯÓO?í®¹æwøá‡7̣pT¬í"=*¥ B@:AẠ̀s°̃ÇH\|äL‡©&?Ç&›lÂV‘„ƒï! „@9ˆø(5]#„@ÙÄy9đâ`âóüóÏ·™đPy9ˆƠ ¹Ñ7‰ˆå¥đ)üï¾û®›5kVÈ]–»€p_äëÀ³cß}÷u«¯¾ú§é“P(¬‚Đè@"Đ ^Äàƺsîܹn=ö¨C”kÛ$‘µÅ[µ ! „@u°ü=öX :ÈÏÁºŸpV±Ÿ£OŸ>I~ˆåçˆ̉g! :ƒ€ˆÎ §k…€(‰y9°äàÅËËñ•¯|Ey9̉@ùƠë]wƯÈ 8"¹M˜<=Ú >ÜuëÖÍá.,B ö(Ví1W…hT¯Hư±cǺ-¶Ø"SîaóéѼcÛ́=ẵÅÊû̃{ïuw̃y§{á…’.¯²Ê*BvÔ¨QÉ>}B q°üäåà9·üèb±üœ¬SwØaåçˆ̉g! º]>j€¨?,/‡…«Â›£P^^½z¹í¶Û.ÄéT^̣Ç’I$“ÊiÓ¦¹™3gº>ø eƠ³gO7räÈÊjă7‰T>̀ºRT…ª ¬*´ƒ4¢×ÇäÉ“Ư™g锧́rĂŸ.̉£á‡°¥:áÿöÛo‡°üDX¸pa = ?b!?Çf›m–äç€èP~!}B ñш£¦6 v €çI S…7Ạ̊rôéÓ'ÊËÑpË8¿Mưñ@IDAT%Ç}÷Ưç¦OŸ’Ë—/OJÙvÛmƯAä<đ@·₫úë;BH„€h «yƲ̃{̉h^ü₫aMasÄGÔ;¼iŸHÀ¨B*ˆ/¿ür]Ññàƒ&ùå¨e(Ï*!¬öÚk/ׯ_?BU%*zBW“€Ụ̈s,^¼8‰,`ơ‘Ÿƒxsđ‡`íµ×¶ĂÚ ! M1Œê„p!æîSO=åđâ`‚S*/„«â<Ÿù̀gc`n¼ñÆÎbXÜ ¸ 1"äíËp€W‘B NP(¬:˜&j!£:ê¨s›xkÖ« `yï½÷ÜܹsƯ{́Q¯Í¬X»DzT JÔI¸IVl!¬–,Y’Wâ—¾ô%7pàÀà Ù±Î:ëä×! ệsđ ÑA~×^{-¯xkY~KD‰©üy0é‹Mˆ€ˆ&Tu©ùÀï8/V2ÉÀs€X»ªJy9 ™ênQlΘ1ĂƯpĂ aÊdYmµƠÜ̃{ị̈v 4Èae#B 5P(¬Ö÷ZôºQ¼>>ùä“äwKỖ½{×.«C¤G—A¯=üæXḅ;ï¼ÓÍ›7ϱ0aͰ馛¢ƒ¹*Öß22t´ơ…!ª|̣É„è „Ơß₫ö·¼F̣LchG¸*Ëϱå–[®¼ơE!ĐäˆøḥV÷/¼đBđä0¢cÙ²eưiÁrrë­·vXqàÑ᡼i”ªóưÿøG°ƒ́X°`A"`¥•Vr;í´“=z´>|¸ëÖ­›ÂTgTªhX «a‡®ñ^„ÖAÑđÚ̀y­DzÔí£̉Ô ³Ää$&g‘NLΕ\ü)1ySßê\ƒ"`ù9{́±@tŸ̉ƒÜ±’nóÍ7ëNˆ₫ưû+?G > !Đ²ˆøhÙ¡WÇëâq–‚É –„­zæ™g‚B Ư^¼¶Øb‹ªÊÂVuï̃Ư}ö³ŸMŸªïUB€ñ"¬Ø´iÓǛ™3Ư|„²êÙ³§9rdeÅBD"„€(…€Ba•BHÇÛƒ@#x}<ïÇ5ÖX#Ị̈¼=ưk¤sDz4̉h5~[ñâÀÇ“fƠ„P7X€<Øí³Ï>JLnÀh+êËÏÁÁá«cÅ₫XVYe•$?ÇÎ;ï¬ü18ú,„€ˆñ¡B Ö°±¼XaAx¼ûî»yÖX´ 2c“M6 $ƒè€ô`Â#©=K—. 9; < ªl"wÍ°aĂB(+¬lDBƠ~lT£h «YF²ëúQï^xH;6̀g₫ù®ª5‹ô¨"¸*: `‰Éñè 1ùC=”xsVà}ûöMBXñD"„@} `ù9 90¨#?ëËX,?z¼9 :ÈÏ!]@Œ’> ! ²ñ‘‹ö #Đ‘¼_ùÊWÂd‚ƒ NŸ>}B22-T*>,í.BjÖ¬YnêÔ©!T€åSYy啃ÅêÁ•Íª£Ư`éD! *€BaUΖ)¬̃½>&ÓÎ<ó̀`}~ï½÷6Ư¸ˆôhº!­›qoaWÏN¡ÄäC† q$&'®Dú@€üO<ñD’ŸăÇbù9aMŒ!2%B@!Đ1D|t /-Ú…€åå°œ„­zñÅ æå€Ø ñ8Dë­·B#µ éêÄẬ¾ûî ¡¬°¢[¾|yR!säí8đÀƯúë¯ïH 'B@T…ª6ÂÍU~={}Œ?̃M™2Å7ÎÑÎf‘Í4]ßKL>wîÜ@vJLÑAbr¬Á•˜¼ëÇM-<»q~E‹eæçèƠ«W^~åÜÑư#„€¨ ">*ƒ£JiasôÚk¯9&1ÍË7ÇFm¤Huvÿ`…să7†pV„#c̉yĈ!oÇV[m%«›:75G´ …ƠJ£]~_ëÙëcèĐ¡nÎœ9n̉¤Inâĉåw²Î®éQg̉ Í!„áp-Wyÿ̉‰É!8HJN¾)It Ớ¦BẠ̀s² ¯,ÂW"ÙÂ"[g Q…ƯN;íBWa)Ï,CG[! „@eñQY‚µo¿%&'œ*?üp2¥5ÄóGAW¹:”˜¼öc¤…@ŒḮo¼ åđê@G•Ÿ½^Yl{÷î­H1ú,„€¨!">j¶ªªo:—bĂ’o·ƯvnƯu×U^úâĐ:\™¨N›6ÍÍœ9Ó}đÁI(«={º‘#G†PV„ €‘! …ÂjÄQ«^›ëÍëƒ9—yPb-‹R¨‘E¤G#^mÛν‚e¸%&' N,_ú̉—‚‡±‘ ££ÏB kxçwÂ:‘&”äç€äÀ£ÏîƯ»Ûam…€B ‹ñÑÅ ê»\ȯ½öZwï½÷Ï<̉B¨#BT‘‚Cy9̉5Æw–·ÜrK <^ươ$ÖêZk­å† BY1Qứg?ÛR+…€íD@¡°Ú TŸVo^/¿ü²#(ÂÜkơƠWoXôEz4́ĐƠ¤áĐo¿ưvXk@v̀Ÿ?ßáQn‚×øf›m–äêÀ:\‰É m…@}!À|<ÏơéÓ'ÉÏÁzR"„€ơ‰€ˆúµªF\pÁ.Jbè¢ô¶¼xt`…H2Iă!@î•Y³f¹©S§†0e¢lå•WvÄF3fLXh6²Â¥ñFE-B +P(¬®D¿kë®'¯|Đ 8Đ­±ÆyJà®E¨ăµ‹ôè8f­pápÈÑA®B‰É‡ “Ë:¼î ơQ! „€è D|tꪳnẠ̀ÿ¶Ûn ùH²©¼u34e7%îÇ„²"^̣̣åË“²ˆL̃<Đ­¿₫ú+;‰B P(¬Öơẓú ·ÖرcƒGíóÏ?߃!̉£!‡­jÆ‹ă₫ûïOȬÄäƒ7ƒ Rḅª„ B@! „À§ˆøø }B xâ‰'‚ë1á¬Xl¢ÔC6ÜpC7bĈu«­¶Rb¹c5]ê  PXƠÁµK­¯É“'»3Ï<Ó¡&Üh£‰HF±Ê·¯—^z)xtàÙA₫8î â₫"×ru``µÂ +Øam…€B@! j€€ˆ€¬*„€¨„l™1c†ĂrtÉ’%îÿ₫ïÿBEäeÙ{ｃ5)Vu–@µ:­P©B@æA@¡°g,³z‚×Ç&›lâçÓO?Ư₫ùY§U}ßøñăƯ”)SÜGᮾúêª×WÉ DzTÍÆ*ë“O>q>ú¨»óÎ;a·lÙ²¼˜œPª{Sḅøàƒ$”UÏ=ƯÈ‘#C(«7̃ØA€H„€B r(Vå°¬‡’êÁ냰?O?ưtđöÀë£D¤G#ŒRçÛˆ÷0÷&^–˜Ü§Rú*«¬âvÙe—àƠÙ¡ÄäÇ\%! „€B Zˆø¨²*WN#°téRGάR!@¬S¿ưío²£ÿ₫ưl§ëRB@!P…Â*Q#œÑƠ^„zï½÷ÜܹsƯ{́Q÷‰ô¨û!êTÿ₫÷¿ç%&ûí·“̣ÈËñ•¯|%ä£2dˆ8p “'èèƒB@! êơ=>jh9̃}÷]7kÖ,7uêT÷ûßÿ̃a™¬¼̣Ê!ṇ˜1c‚•Ưꫯ̃rبĂB@zA@¡°êe$ÊkGWz}'Áro-^¼ØơîƯ»¼NÔè*‘5º†ƠXḅ»ï¾Ûñ÷đĂ»ÿưßÿMZ@¸*“ăÑAθm¶ÙFáStôA! „€ƒ@Ơˆ?₫8„£1¥e{ Yc5ܾđ…ªKF„­YwƯukbÑư /¸>ú(Ô·̃zë¹B1ZQ̀n‡X¯o¼ñFPȲ(ÚtÓM1‹¿ơ­o9’Ûa!”,Ö_zé%·|ụ̀’ơ¤¯5L™¬× “tªơƯúÆưöŸûÜç:]••ÉöË_₫rˆe5&®HtŸûî»/xv°åù0éÛ·oÈÛqàºơ×_ß­¸âvH[! „€¨ «¡Œ&t•×ÇË/¿æ̀4™¼]ơlÈ ̉£Œ«N/a]¹pá°~#„ë¾Xđ&¶ÄäƒVḅ}®8„T{ơƠW‹ê8X·¢àYè=‰úÊă| ÅXKH><é! ¿øÅ/ơ`â\ˆÁŸứgá-·Ü2l{ôèr*îµ×^E¯/ÖB q@'É{äúë¯wóæÍs¬₫ë¿₫Ëm°Á÷Ñ9J½‹ê©÷¼Cßyç÷æ›o†÷-áÔMèû é‡9QHĐi³‘8s"t°n¸¡[sÍ5©ùík«ÿ±¬ÜtÓM9o?ç[Ñ¡¿x çÉÜ®»î®[mµƠr~’Z•6Æ…Æuz衹×^{->>û!çIœ KöÉ»BçüÍÓ¦ Ÿ /·ưöÛ‡ë ƠÓæ¢ÿ́ˆ1½ùæ›sÿú׿ ZơưàÅ_¥¤}‹Ëô‰°sI[éö'ëC‡øĂ₫;ùä“sĐÈùÉẓ\ùnØ¿hÑ¢œ'Ă:T¦NB@®CàücîÇ?₫qÎ'üÍùE@̣^÷“èÜ‘Gæt~qÑu TÍ ^¡•ûêW¿ÆèôÓOOöWûs}Ö~qXíª:U¾W”çüâ=´Ơbå¦OŸ̃©̣tqmđJ™œW箹æÜ~ûíî·x]Êûi‹-¶Èz꩹|0Çó µ@€uè³Ï>›ü>Æ÷e¡ÏĐÈM˜0!Ç}ˇ~˜ó†£IY¬¡Đ7ÖUèV¨‡ë.ºè¢̀S9oÁ‚I¹…Úåá=ÉûR"„@k €®]f¡÷ûÑ™zc‚¢ï£zBˇ̣Ís̀1¡Oè¢M׉ÎƯk±¾¦ñ¾́²ËÚ¼¯ë©¿q[́]ÿµ¯}-wƯu×ŇæsƠL§a‹ÊI2́‘Íô”đ7SU%öÈj; Ø{îØLØÀR2gÎKè'̉y§‚‰Y¬gƠ“wrêKGÏO]^±¯÷̃{oK@_È¿€Ug¥}+Tf5ÚßÙ₫·̉ơćÇj¨OŸ>n‡vp~ÂôUW]5$)'™ä‹/¾è.¼đBG̣S,$B@!ĐxEº;ó̀3Ư’%KÜC=ä:ê(×­[7G ư«®ºÊí¼ó΋QO8O’8æ}’®AË5¯H •ỵ̈—¿ 97jÑ’?ÿùÏ¡̣&Ô«ÈÓ£^G¦x»X£=ñÄnâĉÎËÅ#8"xêă]Ä\“ơ÷;GÏ?ÿ¼ûéOê¼’£¨%gñZuTt ô]ßđN:ï¼óÜFm”Weñ»k‚Ur±¼IqƯè$,́ ]ÏëßóÏ?ß 4(̃ù™h xPm¶ÙfÎ+3ÏÑN! ~7Gí~ưë_'â}†×d́áÁïñư÷ßï† æl̃—\P‡Đm¢?L ïÉêµỵ̈—¿¸N8Á‘¬Ätá…0h„>”jcƠˆtÅ—^zi¸ñqƒ*ô‡Âsë­·—n²É&A1ÊÂØ[ ¦‹«éw~ü™4{ëó¤^ÂîđĐ{&0,ÚY¸£ĐưÆ7¾‘œĂ‡Q£F¹ßưîwyûÊưB0ÜQq=ÂƠ”rË+÷:ˆ\Ûê]ÖYgç-¹Ü;Ø5JûëߴŦ÷À q’™{ë:ç-³3`Àwùå—WIϦ‡xÊ6V©Cç ! „@ư À$’ă+®ó#o-”1(Û—-[æÎ:ë,G¨ ”‹CÖO/¿%‡vXPáÆQB-„!‚;}=Hz•Âm‚T½ơÖ[÷2dÚ׿₫u÷£ưÈy¯âp‘·` ́́Ù³Ư_ÿú× ¤=öØc]÷îƯ ª#B Fđ›È½ë-¨C¨Œ-íoé̉¥ûv«­¶ ­Aßđ̃{ï"¯PóX£C~đL”#„ˆ&tÍ~đƒärBF?ó̀3‰Îƒ:Đ{x/Îä̃ë! æü¶>öØc¡“>»ñƃ!4é¼·™c IkBÎÖƒ>ؾ6ôư"Æ]„)´÷´myG¢ÓB@üđ^÷^Î Ưçfi|ML©¿ÿưï‡1X À«¯¾ºÔ)=^̀â0M^ œ…¹L3‚L¶!9Î9çœ`IDŒ8r•<úè£Á ̉¢32pàÀ‘(iư6̉VĐ>w¦̀j\ áA.–´4JûÓín´ï‚<̣HÈÛÁ8|đÁ‰e/̃P‡$*ç³£,z£a¡ö ! Z¬¬±ăeÉ´iÓœA¼ûÈïÄF#FŒp‡rˆëß¿¿~jtĂ˜×ÇÑGæ®ßû̃÷‚Ơ^5«7Ë¿z$>DzTsä+S6JẈ%’k‘¼p̀5ÉC`Â= ùARr’““˜\"ê,¥Y³¦=9¬½€~ó›ßtăÇw¿öÖđáÑäĂ·Ù)m¶ûÛßÜÿ÷—eL†ậ¸ă ẹ,Q7ÏY,6 ÷˜2eJ0å7›ç’z1lèj£Ơ¸­ú,„@å Ÿé×ÈoŒÇ$¹ zbô¥è5)̀¶Ûn»‚z`Ú‰.œóĐcÓˆf¢q=̃­¥pk¢Ñ/唋>P>̃+wÜqGđêáƯ~yß}÷ $xºŸè‚ù]kt~è®™ûûüR¡î 6ØÀí²Ë.ɧû†T4I¼ÿ±­x&0çA I`Hăo®v×ăÊLnNVí63ÉŒÏó7Q›úâÄâ~p̣®ơ^)9ÿ ´i¯w•Îy—¦°¿P¹m*̣;<1óƒ•Ôñ›ßü&çT9¤û¼a¿gx…XÎ+-C"c¯è̀92:ªB@4>̀UΓá=̃§˜~Ç¿ç<ñ̃ ̃¢Í¹\ksOÓçÙÖ+÷Ăüj–x² Ñ©Ú5¶-– ›÷. ×í\Ûz ·ÿ₫ûç¼ñD8'7G‡‹.—sÑ%¢-&¼ß½'{8Ÿ9µ'ẠNGo†~ƠêNo¹æđĂïj»]º%^Gî2}ß½!xÎç±Ë’m±íèÀÑ…s}Vÿ|>´œÔ’Y× óN“ïÎg½L̉ö¸Í$€ÿƠ¯~æpèªăc|¶ñI':ù‹ùªH¬t>餓Âäµ½ÅÊn,0$.3 Lú{ºNn–BDIúZ#jâvpN¬oO_¼{u˜p­)Öcâ#]oÖwÈ“¸ÿé¶Ä¤ˆ•Ă ÄÍfßÙÎ5+üxå•WrỲ;'ë:H…ˆ#v²È&]ir'Ư₫B}KAÜ—¬ÏÅđºîºëJ¶ß°Ö¶4( |ÜÙđc–~YAÀy«Ñœ÷fÊ1!–! „€h̃c6çó»å¼ơUưÖ{˯œ'”:(n$•E€…÷® xŸ~úé•-°@—l‚!úíøœBŸ1G·jâ=/ %é2̉ÄG3ÚÅz,=Néû€ß«¬ñL×Wê;¤ÉOÜáƃàm!¤̉ÿüç?!üHW§8- *&¸*^ w-Ä{F80g?{íµW†PC¿ưíoĂyÔçÙDço¦đƯ{¢730ÁƯÈ/|“0W`KRjbêz!¸Rq®¬Œ}Åɳ—I;HhO˜3b…âÊuÙe—%‰,q×Åͪ¡¸¸ûI\pị̈Jö¤ÚGŸ³Ä[ ”lÖuÚ—÷Ë)§œrsà̃8cÆŒàvG¬î“O>9¸Ûز́ĂmP"„€B =X(,æ4̃’;$%&D&ó Â`‘0Ư{•†ĐL„e.#é<̀á&L˜ ̣å‚sÖÎÖÄü̉æẰºZ̃ªkG€çPẁí }æÏ!1¹­M¼̣Ơ‘†„î!¯‰É ± Í€¡‹…óà70Ư#!äO-$è9xfLÈ»aïvÛ—µ¥t#ˆWX%kö¬sµOÖD€DăÆK:~•y;a¯¼Ñ‚{úé§K†îóäköÙg‡røG¿È|̀·!ï1½eœC„̣Ñ7™ ¿DÉû‹-ºH„÷a1 ŸP™̃{!|'$Ö=÷Üô‰è¨‹½SĂÿùGˆ§bú`Rx£äLߘߘ «ô~á+s`ô£„̣D_Jh(o,:Íbzđí·ß>\‡N”Pa ×zÇ.Ü„1²ạ̈¼Û ¾—÷ư¼yó æ]Ic†Îư-)¸}ŸƠ×aởæüŒ%á´<úĂu–̃ÎơQœ'´Bh¬¸\ÚđàƒÚiÚÖ$Ç“ƠR1΄›3£XïÇ&œÇMồ3Ï„…2„‰%ºăF`€t=Ä5cÂM|2nRÈ„›(^PÇŸíœb[ẩ•Êcà=%ÜĐ¡C“óÈÇÙ1v́Øđâ –'‰>‹Mđ!ˆï†x&0$âåƒđ`’,î‹ ntâÉŸ\pÁÎHjb<“?Åxr “³¸_ÜÄ–[¼È¹b7ø¶Ûn›CùưƯï~7Ä%¾[)B+4>ă_º¼´ˆGM6”$ÄɃèa\ÓBø+Ô₫ôùú₫)É/cp¶ç„ç‰ä‘ܯƒ 9X>½JŸ„€B@”‡ó H₫.¼đÂWvêÔ©Î[…9,pˆ̀oD<¿I’̣`qæ½mB́ăjåú°ü´²«s|ˆô(ÿ^)÷JÖ (q-19ñm½F™äóƒü`nÉ_l VnºNÔ3¼‡Xs£×H ë-2%(9Æ:¶_¿~!§FúÜø;†—<[ü~²æfư†£·*OËûŒĂr@®˜N > ]zÚD̃Í´Đ>}D¶đNƒ”Åȵ˜’²UđP?]̃ä˜(¦¿DÍ{1äåBqÎ9ç„?à<ôăÇẁéMĐ[Z t‰éé̀ëÑ ï¹ç‰ư¥÷ú y”Ñ÷"̃+#¼7i;²öÚk»ă?>ä“8ó̀3ƒ<:bôWF´0¯@ß̃!ÏÄưçúbBnfÖ₫¦…\…¼xç"´—w0ư0رö“ư¨ ïTôiè;/¾øâ@¡øÏzo§ûÎû~î¶ÛnAOGx7QïlÄH ̣/£ 7¬m?Û3î ̣Eyp ăÉ\͇ªJ®…l‚¨"7‡ ¿ayC¼Û~’ĂóqFh;9¢Đë"gƯÇqtỠë$́ḯ¿íi$‹U£½Â ‡Å_Z`°ÂĂÀdÊ”)Á‚ï|Îú!Çë‚–ä0&ÜhLFÚẂ%`×tdËK€D:éryyđ`Ô¸Y˜d"]ØÿØcV“62Ñ0̉#nKÜ?X3n¨öàƒ£<ŒñK‹̣ùç¡BâcV˜ăÔ¦eÍU óQ,ƒ±ÆëĂÇd®x’h#>ÖXcL#•Z!*̉£VH»`͈Ö“óÜÆB"rß(I”˜V~ËxüăÁ8jÔ¨`(Ú í „Ï.QdH̀]LPØC@jø|È™ÉËQ¸OŸ>=ü¥‰ô—¼§ˆ({tX½>Ä‘CÉ|Ô¬₫Q´›ơ?e]ÆH»„Ưè©Đ‹ÉÀ|2ŒÂy7éaסKÄh›ëŒ¸°cñoŒÇù+%蜙KÇ‚₫—È5´ÓB›ÍK%}̀¾ă.<ƯwÖJèÂÍ«…óù]Aç‹Đûvüç_ŒµíÇ %ÆŒ¶éaç°¥-JDzá7„5vcïCohmç€x2̉ƒkâăè“JHû™†NÖƵYÇÅ,lßöJG”ƯܼÆÀC(dY(đĐ¥½|RóÄ•‰2b‹¤ö¶³Øy0u…ú«Ûo¿=0¤́§,ĂĂ΃LÈrÛâE”ơ2²ëâ-7)îN¸ ñĐúdiᜠSˆ4Ñ—Q́32´¤zp_<̣È#A©„;,«‘n¼`÷¹7yññ"’! „€¨% ËÇ0–Ù/±VẨPXü1?ôĐCĂïjIû·jz}`-‡te˜+‘í¿Ê9“y#VÂH`@ƒñ Æ4&,xyFñè€́`P1”•§­htx&0dư ÏR¼Ï¬ÙQ–zfĐ1`5 Q‘Á3Éoå~ûíW‘|F?‚n¢©QÈ$)¤?¦ SÆ$­_iA8ÔåE€wdeíôy óçϺHŒZî¿ÿ~ç·!BĐ B`ÜqÇî‹_übB, Ă$dm:2máy"̣ Âs…₫’y>aÂ9­½”粟k!Đ‹ ĂµPø¼? é6-ŒïÍb‚Δ÷k\çÓŸx:5Œ9˜™̃ ÜĐ;£û†\ÆèÅ‹‡´ D¯‰ËÈj$M–@Ö¹`gåñGtà´©Ă,¾–ß'ụ́ï|')ÊȘdGê¿)Y-vZÜ~ÛWî¶&Ä®CX̣ëTG;æiṔZαđKœÇĂP+!ÿˆ-đá•~@x±`-Ÿ%ÓX#“s Î;ÆMß…@3# Ëó§葘‡cDƒ~ ÁC‚999-LGÈ~"ÜđNjpy! dÇđ‰¿Raçz†t(W0₫¥_±r?. Â,ÓÉâÁûѼ%xwºé¨£JB^Å×·ç3¿¦«+u>ơ£ 7i¯.|-3új¼m²„±7çôÊR±ĐN#^âưö¹Ôq;¯Û–S¢ ®eé&¡ö„U‚Y$t–=ØYä®@Ü åz@daWT¡‡0WLlb²ÊÙfFø0Ñ‚±E®•‡' #₫HÊ#éøá` ˆ™Î“\„I-"t,ñ́eÖ5­T­B@! #€RƠBaÃó»Æp̣œñ‡•̃§ ̀ƒ$…8́°ĂBüeæ©•ÎơaA]áñ!̉£đ˜—s„5ÖxuđǺÇb’°Äg.¹›;-¯mCG[!Đ~Đ!àQÀoׯ½4ë5,«ÛC|°¦#ÄV("I₫‹åu©8öX.³~GÁ–Ö‡dµœ6ZYǵOÆG€÷Ʋ±´ă9‘eØñ6̃#äqÀ@‰÷ ó¯Xoh0/ÀÓ¢rœ:™/†Ê¼6́ZHă¬úí8í@7Êû‰s̃g•Ô½Z]¶ÅĐư€Fßx²ébÄ¡ºÈă mĂă‚œDX㇫ϭƠg~g ?pij-KĐ9C® œW©°TYuuv_MˆÎ6²3×ss3°Q<8±wD\.ûÓÖ çäg¢»Çb¹=ÊzÙñ€‡’›:~`_zé¥đ³O ñǾ@dØRƒ{ÉgÚ#$â]Ă²®¡½,|YÀđRÊ –u–|§œrJøƒüÁjäÜsÏ V`=¼øPN@¾Ø‹(«í«,Œ7±Đñ́àµ{ŒZ ơPÎ ¡öLt+Û:•&„€B s`uF́Û₫đ‡!ü'"Â{ºK3₫ «8ÆƠôú0c˜Z{|ˆô(>æí=Êbœù#ù:z衼0À̀Q²Zbræø! :z <¦ø=ë¨îEe¯^½B¾ QÆ¥¥Ơºë®›́fưN¢Z—Åư ¡́ V$B@4/äø! 90l@‡w¨'d Æâ–K=,zÅØ8̉Ï ·GÈălBˆL"̀Đ¼”0ÿ·9'ï*ŒÙ­]ñµ®c°ßYA·‹^- ư'z8tÊ!ÇäéHÏ?ÿ|;­S[æóèÂMç—EfóOëÈṇ̃ Ú ÂïÅă?" ̀đ&DĐbèR¯R»¸O]ˆ7“…7@Ùnáâ&/.kC ¡€p#£Í7¾>₫̀DLô pÙiáÅ‘U7' LF²„PDÆZ²±›:}.¹B,±Ê2ë~;¯.¸ṃPbUBbÂ,rÈÊàe¶ç{†:˜`™· /E?L´x±ăi×i[}p©ƒˆ{¬†f̀˜îtƘø‚<$&bŸHê‰jB@ê!€Á¢ë®».̀ßPíæ­ÎÙo¡°Xz‡ùI)Cêµ´>KÆëƒ|*̀™±>«”t…LJḤGơÂ<懛o¾yˆK}â‰'†$È,xQlF‡ç‹u1­ g!̉£|̀u¥H#ñÑĂËôu|ç7µïqÖwèÈû‘%xùc‡` ‰÷±µ?çAà¸ăă£D&F}ª…éă7‚QQ©îB} $,zMô—óKô—YïÆ H$³¤O@ĐÛR3KÈ)‚̣̉é,̀g º1ÎBR1—é¬ÊÁn”yBÛđLIö* £’J cfu€):ß´€¥åNIă;óv"úd ÇĐ+6‚´ñó…g‚‡!Hâ°Y³ø!¡°0÷lÎă&…9̀nè=öØ#Lüí8 í,6’ä/„½@¸†Xx¶0Äă$¶¾°2mˆ›Ù¼&`>I^–ú qÁKr¶•}Fêdá¹x»đ ,LbạdJrÎă₫ÀˆKZ苵5}¬+¾Çíïú«Y§…¨`ñ‰aǸ7¸—G¬ơ ç épdR-B@!Đlđ»wÈ!‡.† “&M ^¬̀…°^ç7‘Ù±Çbï6[ÿËéy}p-¹>XŒUBjíñ!̉£ă£†Â“Å?„aËÀ\Ñb₫C€`(ƒ1÷‹^¯¬µNÇk×B@C%¡…)v^| ‹_~çØbñ\HPj₫à?H£ÜÜe—]2“œ„>䬳Îj“̀8)@„€hˆ@c!ÿñà@—9eÊ”‚ư{ñŃ₫)}a“Ln ưeZĐ×?>è ¹„5Î5Á|¯#V́z̃ÌMPä£ÇÄø—ù¬‘-´=k4¸÷̃{­˜mYg˜1x́A;̉ëxÔĐoŒă+%±e£óM ùW,'‰C_k:hÚÎĐæ€vØRØ<[XGáñ[¯̉Ä sŒøàĂ+›+\8‹1k,ø`åL˜́ăÁÁĂöÜsÏ…—©ưèGÁ¢k'Ü—Hl^Hˆ³I8ØNnvB0œzê©…9{œ*ă‚ .p[o½u8|ñÅ» &$×óĂxâåAyÉläĂ@p3ă"f/p!YV]XwÑ/ècíêƯôQ±XbF?¼\™[™çm¢~w¥½>˜‚rµE¤Gûfˆ€u Vå,^{æø(I±Ĩë’K. Ï Ê¬ÇY'Èh¦}ë,!P)X§ßxă.nƒ 6ëübbàÈyçœsN8 ƯÁ£>ô¿úƠ¯‚Âw–ÑXR£ˆ$‘¯DæG€÷óă“N:)tCtMI@‚ Ëd̃…®‰9t¿~ư¥8ºJö!ñgt…”‡±úB扣ŸE¯…®y;:LŒ˜ĐÁi‚₫–óĐç2a^O„tµéz0öFŸ‰ ;è ƒ‚>˜ëxŸ¾«Rá¥B%ÿù‡!‰*¬5zôèĐô¼´÷,úQˆƒ>8¹,I·`z×ä@> ·äñÔ3wîÜ  Çđ"†y^:çˆ.ÑÆè0ûï¿ø 3Èw¼åÑ«#èñÆé Ư®µ·äÖ7¼*2sæ̀ܦ›nó Èù›,ç­ÏÛ]ÜœO®ơ7vÎÇ ×ÆezÅmÎ?\mÊ<âˆ#r₫¡×z¶/9¾lÙ²œ'/Â~ÚT́/«½₫ÆËyerÎOđ‹^—›ƠFóæ<áĐ®2¾ÿưïçü¢;éC±₫ûP9k¯d¹>®\οT’2)ß/r^ç̉œ÷I®ÉẨ»¢åüsÿB*ZyECÎ3„I™…úVè^H.ôâ>ÄcW῭bíËm”Ï₫%z ç 9ï“àï$å<•óŒ{ó$B@! „@>~q•ó‹®œ÷ĐÍù…]̣ê½BĂÜÏ[´çüb,ÿ¢ùvùå—<˜[ûZ§zí¸ ¶^yÖ©²J]̀xùÄÚ¡>Æqúôé¥.i©ăàûí·çX7±Ö×/|öÊÏܸqăr̃€+Çó!B r°÷®đÜyÅ^ΓE g=́eÉsê­®s̃è0\Ă³́ăƠ‡cè8·x‚?çYI9>ŒLw|Z¼…u·¬KÎK¿âïèF¼‚3çĂÇ´« éºô]ÆBÀH·[ŸÉ»‚÷ºÊXĐ¢Œß%YŸ½án=¬ ï7O$”¼.«NtÊYó¬zÑEÛ»”ú½’?Ôé Ás>§²5's‹=°•ë½æ‚̃÷>ºXÛß-ïWo¬œó̃wÉ»Ưm¬#¶Fxcôœ'xBùqûùđ‰æÛUoºíÁ̀Úë˜Ñ Ó?~ß|₫`kb²}à/u}RP>TÍă7(KÈMLµB™à= m$§«Hro$.³ÍEÿÙ³hÉÂăr¼8x=‰<̀LbV8&Ø+¼&`¶<¡S¨ú°È!µĂ¥4mQÏw åoÀVÁ¼.âB/½ôR牄ьe}Æb‘¼æù‘>‡pG¸|ÁÄŸÀ˜Î›7/ÄÎó7mú2G¹xÄ^+°„F+Ær±₫¼ ưÆ KṇÂÅóưFè§ÚX¿²„( Xrïá}çÉ7ÇÚ¹’¹„ê¶-ăٳĻm₫ÿ{8Ç¢W°K]óúà^íÖ̀fÁËù\›¥‡à}î¹çËè¬<¥Vër"ct8ÖØqm…€h>¶ÜrË0¿B_YLĐÅáeAtt±àÅAMô†YµxD §Œ½xg1‡áS(—íăư˜®“9^"ü̃¤/äŸüä'!:‹ơ¶¥…€²}é-^²qèO £Ey»ùDỄµ^á̉àKf,̃æ}Œ.ÜÄÚÏ|{́رót€ ÑzđI÷c„̃Jciuà!Œ§̀w̃™§·µºi:ÜB‚~2ƯWÎèÙ_èx¡̣í_’¤Ø ÍxŒ¸n¸4yV*L" fâªTŸŒŸ E’r&Ư»wO©—*Çă*D M\\\ ²n’ÓN;-„‚¨a1ÂÍ™–¸¸ 2™bc7`ú|ûNnܱèDUºÊΉ·Lº<H…¸|°ÅÍ ÷,ÂG ‹v@deơ-.·VŸ‹µ¿Vmèh=$Â]E<9[Àá₫%äîlŒD! „€(æB?üpp¿Ç—{',Hüʤ¿ÙC¯(À™Û¡4/GHTÉâ üP~VCDz|*!q¿‹á‹RâmÇ‚¡O½wL̃B=>OŸ…@{€Ô`}̀:”u-[₫â}̣̃´`Q¬YŸÇëÉ‚'ë@Íà·q#¾;[ƇµV°c€° ¤B0ª1îƠ«W : ;ˆ­ycŒ>B ³¤F\.sÈST(›øCùù†E"„€B@J"Đ6¶Q%KWYA€6¬ÚƯwßÜÑ)fĐB‰U¤Rwb̀Ç Hv;À€ă¢‡Ơ$îl0ë! „€B :X(,Âaáñ0uêÔđçc‡¹ó3,ÜFB·4›×%Vpx}Öä{ßû^Y^X#(<+-3­̃5¡© :đ́0otĂ2Đ ûî»ođL·cÚ H“œxi´×S#F1‹Ôày7’ƒ-VÀY ârôY! „€•B@ÄG¥¬b9,¤ï¸ăàVdƠ0al똯mc đæ›oºÙ³g;ÂA°Å• !ôØ AƒBX ,%K¹đ5FoƠJ! „€…q‰‰KÿĂ₫0/a=/»́²đ»Ḿúfr}œw̃yÁë%;¡¾:*„TEÀ°̉‚—C«äô 4.q¯!:b£(ĂẠ̊̃{ïÈrû)G‡!Óz[‘­7æê±B@!€ˆ|<â n’öH↓Ȳc₫üùÎ[$"Œá¬XÈV*¾_s §^! „€è°l̃u×]Ă^„Ââ·œD½Í(x}r“„×(ƠË‘O<1x©7®œË‹^Cئ#<2ä9Ă³¡Ù„ø×ü₫æ†ßøÆ7¯m¶ÙÆiÛÄ"5,¯y6åÔˆ¡)å©A8*’kËS#FMŸ…€B@F@@9>`”ÈéAh,¼P„ă&,o¸"M$láP"ÜvÛmOÂ#Ư»wwûï¿HTNZ&Z*̉dB@! „€¨!¿ûƯï!ÖX Ä‚ç/À–˜¼Ü„óq™ú\?TÔ y)T–S#?%R£~Æ]-B@! *€<>*iÅḰÙ³§ăỎø¼̣Ê+næ̀™Á»cÙ²e‰Å X’ú3Æ 0À­¶ÚjßYơ@! „€B lđđ0̉ƒÄäx³@v́´ÓNJL^6ª]{¡H®Å_µ ! „€­…€<>Zk¼ƠÛ.@àư÷ßq§ eµpáB÷Ï₫3´OwÜ1xv :Ôa…«¹D! „€B@0g¼ÿ₫ûƯV[m¥Ää p;@jÄ¡¦,Qx¼¯#á§̀Să«_ưjđø—§FÜj¢B@!PWˆø¨«áPcb/ƒ™PVsæ̀qï¾ûn̉5ÂW‘³ƒÜ=zôÅ^‚Œ>! „€B@úC@¤Fư‰Z$„€B@R(ÔU)„t\tç{Î͘1ĂƯrË-îƠW_uạ̈@Ö[o=7dÈ7v́Xׯ_¿Ü³ÅêT! „€B@! ª€@Ljüå/I¼6*å©A8dž…WaU¤B@! 2ñ‘v @ḅÙ³g‡¼‹-rŸ|̣I¸|•UVqƒ y;H@I‰B@! „€µA@¤FmpV-B@! „€¨GêªGEmª{–/_î,XÈùó绿ÿưï¡Í+­´’ëÛ·oc5|øđwÅW¬û₫¨B@! „€B ‘È"5̀KÏ7̃xĂu&§†yjX yj4̉Ư¡¶ ! „€BÀ9y|è.íD€°UO<ñDÈÛqÛm·9<=₫ư»wïîößÿ¨œ$.—! „€B@!ĐqDjt3]!„€B@!€ˆ|<ôM´Aà•W^q·ß~»›6m[¶l™#q9B誽öÚ+„²0`€[mµƠÚ\«B@! „€B@|@1R Œ‹ä©ñ)^ú$„€B@!P uUnºªÉxÿư÷Ư=÷ÜBY-\¸ĐưóŸÿ =Æ“cÇw C‡uk¯½¶[a… uO! „€B@”F€đ¯„™²?ˆ ?U.©±á†:ÂNÙ–Dá ?Uz,t†B@! Zy|´ú ₫'àÉñđÇPVsæ̀qï¾°̀ù@IDATûnrŒđU#FŒ¹;zôèá₫ë¿ôè$àèƒB@! „@Ó#€FLhđ9&5ø̃QO #3l+R£éo#uP! „€5C@ÚÛA­êç{Î͘1ĂƯrË-îƠW_uạ̈@Ö[o=7dÈ7v́Xׯ_?÷ùϾ^» v ! „€B@²0RĂˆŒJ’æ­!R£́áÑ…B@! „€e ⣠ĐtIă#@́àÙ³g‡PV‹-rŸ|̣IèÔ*«¬â ̣v <8äñhü̃ªB@! „€­@%I 0\k­µ̣BOá­Áß×¾öµ°]ươƯç>÷¹V…[ưB@! „€¨”ă£NBͨ>Ë—/w ,dÇüùó1ˆ‘•VZÉơíÛ7„±>|xX°­¸âƠojB@! „€@€!)9Öo„¯ÂÂđÙgŸ âqăƹuÖYG¤G§ÑVB@! „@µ5j”{íµ× `xU0×1(À##K,”TúØÿÇ̃y€IUdí¿¾5îs^³""9`BQEÅ(b³˜F@0!*˜3`³«(D1+˜Ǻ§ë¾§ÿơ«Ưsÿ5wn÷ôôồtϼçyfnª[ὡë÷„,̉ă?₫¨åé‘&=h“\.úÆrö́Ù5úC(, Ob™>}z ̉ ÚCYÏ ÏŸbY}ơƠăÍZëY$ÇđáĂC9¼yͤ։~DK„É*ï3r%̃WIë ,°€HJº ê‹B@! „@Å â£b.…:R*äñ˜)‚L™2%,ù7`À€d=½©‚§‹…”J·ä8ï¼óÂî?₫89Ü¥K—dBSƠåARă¿Ñ¶m[‡7D! „€B@êF@ÄGu_?ơ₫¿˺PưôSwÀÔÙă^½z¹8o'k£)‡Ç‡µAƒw ù6¾ûî;÷À8ú–%xª|öÙgµ]{íµa$Ç<ó̀ÖHÁD"„€B@! „€ˆñ£¡u! „€B@!ĐŒ\tÑE €$ˆÿơÄöSO=U”§Gÿ₫ưÙđ·¿ưÍáE 96²„²&uå±r,¿ÿ₫{G"u₫âTq[ÇÛd—]vIˆŸ~ú)„Ă²ă,w̃yç°Ù»wïP–¥…Æ"Ù¸í·s<đÀ°/߸¬œ–B@! „€B@´D|´k­‘ ! „€B@T)éÜ…†WĨQ£’"äÚˆ=, ¦N·•8úĐ¡CmwË“N:)„Đâü‘#G†̣!gyføƒ¬È' ,°€#VLÎ̀5ËưöÛoñăLJe|¾íOïc\C! „€B@! „€ˆƯB@! „€B !°ĐB ƠÍرcḱëÔ©“ûóÏ?ḱ[f™ejlOŸ>½Æv¾ óÆàx÷îƯC±>øÀuÖYáïÆo û ưƒœ1ùá‡Üs̀áđá¤ç&}ôQØgÛ<„Ï"!<ËúDV‡–B@! „€B@´<D|´¼kª ! „€B@´b~üñÇZ£‡€4ˆeƒ 6ˆ7Ư_₫̣—!íÛ·¯q:çĐ\|Ư²0/º#e(÷Å[Cæ<X†ZU…B@! „€B@! „€h] Ÿ-VWˆN½\sˆơsÎ9ç̀í¼óÎÍÑ… ?G^n¸aÎ÷çí‡÷²ÎYYÊ£ëFçƯ¥^₫Ư0Eơñdđ ñ7;«#–Oö̃{o7`À7kÖ¬|Ej́ïÓ§»ụ̈˃¥ ~ó̉¨«=;'k‰w‰˜²5ú>®-ŒFơ¹çkP›¥²±XÂf6Çu<ăä¸/Đ ¬sF1íB@! „€B@! „€B ơÑ’›¼ñ˜>è T[öCơégÙÿo…ó̀3Oˆ,Ä&ưɧ—÷®k×®!eW]uƠ ¿öúl¶Zi–ư ƒr₫ùg^ Ơ¾}ûp|•UV .̣œWjüâ¼ •pàä“Ov“&M á·́ôQ£F9È”ÿJø±cdžäFœrÊ)á¦ëÙ³gÁdç–²„0ÙvÛmCX'Âk̉©¹…pS†Yx̣¹óP7Ì9O <VXa·ụ̈ˇI†r&gœqFH̉È6Ó\P‹ô°²,ñ‚đùÜ{îé^|ñÅpw« 6Ø .–„húä“O‚7ɧŸ~Ü VÖYg̀„2$Ë!iư4\âJÁèƯwß í’”ºÚø—C!L¨cúôén„ î›o¾ U‚%}Á»Ä́HZO?®ûø#ñ¤… £$€‡eăŸ~ú)_Ûm·]H–cơe-9·¾b¸€‰ơ¡\÷ ×îùçŸOÆ ‰åó´„äåY÷K}û®̣B@! „€B@! „€B@d#€d>!™8F÷艾3{ö́ k=ñÄCâîôyè)_~ùe7sæL·̀2Ë=+zPt©iA¿ø믿}4!îÑúœÍÎçÉ:NŒß)ƒ¾?ô’ü¡§ßx« ³ÎÊ3.êD÷.WŸ~fƠoû̉¤G»ví‘Œ0&/$ŶÏøÑă“0½!ă-Ô—F?æQ´x…n§v UHrîó@}. ³½Å87Nn'&‰5‰Zü kưy×¢œWºg¶wöÙgç|h¤Zçl²É&9Ë,çoöp̀’›û›4·ùæ›'å|đÁœ'2ëNï<̣È#s -´P8×&¹—^z)ç¼mÑoOäçoB+,ă„ëÖ~¼ôÄOèwÜ~|Üê÷Q¨“~û(³”M' ¯7Ç û¤ƒu¬xoœGÚ‹ënèưB?<û™w\SO Ơ¸Fq_n»í¶œ1ÖÑ{B@! „€B@! „€B ÀO<ôrèN÷Úk¯ôáZÛ>́U¢Çóaœr=ôP2^‘Ÿó ÿ¤L¬ßô û\—.]rßÿ}s¬è¯¹æzR;ư5úR+C$7ûá§sè^ÓâIÜĉkÔezàRú‰̃]%}‹ÛL'2÷i&rS§NMw§Æv}ÛG'lÉ̉½áîƒ>¨QèÓÑ«ÇØƠ*ÔŒ;ê•ÜÜ"‘RSAœC"NM¾ó¦HúïÊ´iÓܘ1cÜçŸ^ăPß¾}Ư…^X¿üư7̃x£ó7bCx,|ươ×ãôæª9ꨣB‚ÊẪẠ́Å‚— ̀¢yO¤m¶ÙfÎ?(Én˜?“öù̀ơèÑĂ½̣Ê+V$äÈ°¾̉~·nƯœ ’XxÄ›a—]vIÂr±/8ư¬³Îr4 L%dzÄúCX0Ö7̃x#)Æ1® ×îÈ7eâqÚ9Å.ñj±ór¿€Ë 'œxúĐ~zï¿ÿ¾ĂƒåŸÿüg±ƯS9! „€B@! „€B@! u}ôÑ¡f"Ú<ơÔSI+èw‡ê9ädzSô ̃¤:đÄEÈ;úïÊ{ï½çú÷ÓJgô‡ḌDM(̣ÙgŸe†èÿꫯB{ZqÅ7È:͆ö“úđ Áëħ×HdN[n¹Å­¿₫úË”RÚ_yå•Ưá‡êÆ\,iAçN¤!ÄÆ›.ÓœÛ%(øQ$³äbgưá‚dÉiâAfñqoUÜh ¼‡…óá09BÚbr7#䤓N Ĉg̉œgÿÉ\²ÄB(q â`Ùe—Í*–¹‹Hø'„±ăî“%/Æ…0Säư˜1cF(ƃ♵$U×®]²÷+SÔ{Í‘ij|á<ï‰ܼpcbܸƒY˜+°¥o¼hÛ{Á$])̣I©8ùèJ®sçΡÚo¿ư6èàÓºRô©.ˆ7lTÈ¿’‰b¦‘°˜i ,ëf(ŸG¾ñûPDA)ư׿₫5Üd(«-:•Øb&ÜØF  ‡ø ?x¹œv®ĂŽƠöڈ˦×->[z¼M»0b‹,²HØÍÍÙa}Á  ¬‡¤=¬æyç’©³×^;́°CB~0&H&¼C¼ûÅÂĂ}ñÅ;*+`+H.b¾!¦àÇ£"Îå ¹RÀ ‚œ`K×[o½„ˆ‹8®³Ơ—KÈ’eƯ'́ăA½ç{ *+̣_}xñ!q¿Ù&'̀É'ŸœxóÀ„̣B‘! „€­æ|Hd}À´4ÊJG€yù¸qăÜ#<Œ¡*½¿êŸB@! KvNx…\~ùåĂqô•ü‘ăøá‡NÈô¦èOÓ‚Áưa‡<)0 GG˜%èO!à›Ư2úCt²è[ÑƯ¢ï$¿G¹ú‰Îwÿư÷zZksÖ¬Y=s°ă,Km 1GOŒÄ¤Ûñx!È¥’ÎgB¹æ”’‰b:¯T×9x˜R>. ÀóÍ7_¼+ÜXF^ànÔ©S§D!o!–[n¹„°ưÜô¸!(̣³’ÜXÙú.ñ°Xc5j%ÙI÷…‡-ßMÉ~™ 80¸…/ºè¢Îç² †=x¾J„@¥!àă'»}öÙ'xñư‚·2Ü¥ĂWZßƠ! „€B@”Â^¡?Eé¾Új«ezt 7E 7ÓX|^i‡áx1‡Bz×]w%§ÅaŸĐe3OCÊƠϤ¡Ô © H₫Ỏ>ăÅxÁ»ćرI3ñxc\’°R\b‹<%ïC¿~ư2-ă!%`Û`ÂH kU×9„‚²0Z¸*eÔAwß}7 qÄ>Êûä0!T—O˜â¢ËHå#+¨ñ p̣yß}÷uo½ơVhâ/8OÆjø'¬Ù@NÂfÅB|9>r`ö,Ï0ɪŸñrïÛøàđÚk¯R`äÈ‘?Ü»ˆ‘‡«9_ $¹3²úĂy¼̣Ϫ»>÷ ç/±ÄáR‡đZ¼̃|óÍà%Ă‹’}†{V{Ú'„€B@T'̀ßÈYƇΠ/¼Ü̃ùƯO ¯„-7}¶…@S!@ˆ‡ƯwßƯ=öØcáï₫đ|GÚ¶më:ûpo¼qX̣-&B@! „@KDư:S„uô£‰Ä‚ÇJ<"ôèOcÁĐ9S]zM;ÇÂ?QÇÂ]1@Jt¦FU]—«ŸÖ>KBrÑéXb8Od çÓß1 mc‹`DJ ÄHu€¾8se¸Äư¬„ơ’‰ç„/*C¬¾äÄ…»!„–‘Ü æfT̀¹(× ûTp‘í!ÁÓẠ̈}X]Ü`ÜÜY·[È»úc ±vévÈ[a9O¸ ctÙb·/»́²à!sÿư÷'c‡(àÏØËC=4°‹ùÜÁ¶̃zë9Dm»P¹úÜ/Ô7hĐ vL…Ơ1! „€Ơ¿ù·<û́³áˆ 4ÙRK-æ'¸´ó‡§,H!P‰`P†ás`ƒ{2Ị̈/̣Á}Ă 7„î£,îí-¶Ø"3ñ "B@! „@5!€ñ»ǻEŸ‹½©ég ÆÍ»îºk½‡Å¼Ê”bNĂ?¡ƒå»O £Å r‚¾r¼ư´¾Q/ÉÄi{"óĐr8s̀1!slT̃PœĐ+Cj`˜<É>¤°°^GxÜÄíZ›{Y2ñr=_bï¦TL"ÀÊƠç#¯›ôsƒp£äSاÇrï½÷Ï€ô~Û†í›b™B;¯ĐO,y³„œP_Üô±wFVÙRö- Äqá"$D7y,0Œ÷Ưw_øË #9ñyMµNû]ºtq(>b¼‚¬"_ ×–˜ÉFÅå´.„€B@T.4L:5üΣ fRÎƠŤc#9:{Ëx̣I„@µ!ÀG4a®ø;î¸ăB÷ñh‚12äƒ>Ö%ü!„¸åcÙÎÇËI"„€B@JF€JæÍAØ~<̉‚̣¹}>ÏÎ%ôC…o  ‰p£|[ EûDÎ,iH?7Ø`ƒxư/‚—ïwÜÂơ²Í7ØŒ?ÍL)¥}p%âơ“³ƒ>8xĐH+³ÑfÜY2ñÑŒ}MCT0yGWôÓO?e†É™‡Â₫yóÊàø裂…ŸƠgå̉K”ç$¼4¥ÿ©§̣yÀ̃™À@R§%6·ư,ù± #_â2éuH[o½Ơqs#„ĐJè§Ïƒ)… AÀÍ[׸í|0?öØcĂl%Xç{nH Y€¥ä ¡¸*IÈCBÿL rºwï^ƒÄ{‰qI„€B@ÊE€ßṭv™¢wÚ´iITë5F(̀ÌÚ}Ë-· Éù́¸–B %!°úê«;₫øE°<ÄàǼxF°Đ#<å°Á¸ /'#B°äË>¸%a¥±! „€Ơƒ†àDßAé »#üg,(ó1h¾îºëâƯ¶AưÚk¯ê·äâèW!ô¬Yö í'Æ/qä!¶Ñ“^ଳΠaµH±€Î<̉RjûF–PŸ…»"²á cá°̉m6÷vƠụ́“Wà¼6Päg 7åÁ°ăÜ$Ḷ-ŸHŸ>}¡³ê<Èb’•c‚‘ØjiáA…„¥Dx¸A³—(óÁmÊÈ’tY\Ù¹Ñ Y`-牕ƒ„Ẹ̀^Àơ ̣‡‡”!ú–O IvÜqÇĐÆƯw߸gáqƒ2ntb W²  1ײQ£F64í‚ÅÇ!±ÿ$B@! „@å À<£„Ñ£G¥.E(g÷Øcà…§s ŒJÈ'ƤÅ.^ ̀ï.½ổùUK“Æ̣¨mh½ù¼”›ÿJéGS›öÈm‡Åßå—_¼¡x0:ưôÓƯ6Ûl“„ˆàù¡ e—[n¹¦€pÆ„Ë⻧ĐwBsŒKm ! „€­ Â{rÈ!aĐ$1GÉNfô¦6¿G÷‰₫4k̃±›o¾9è5wØa‡$UCQ$‚̀¶ÛnªÁëĂ¼=Đ’À¤±ûÉœ¯[·n!o2m¢+fngÆßåjŸï¯]vÙ% ‹ñ¢#F_‡ơ²1W̉²j‰˜è)S¦ÔƯüđĂ': :‰XÖZk­d7L–ƒY …¸Q˜q›f́^R‰_ÁlƒXđ!TƒALé|‚ơ)æÉ­ÁM•̣k@\àƠ|ܱ/„u’’ÇBYØ?#Dxđüˆ…XyFÊPsø3fL&ÁÄX¬¯q=•´e9`…‹[,\›Ç<“´Ëi]! „€h\đ\%a³)c‰)»æk†Ür(c™̀3_c₫AιK.¹$̀1^ é³)v+}n̉!zÎ>û́@ö¿¬œB¨$0·$ơ­{èĐ¡áƒô駟®×©¨6—ưô<­^ư·0†9agyf)§·¸s0üÚ~ûíb¹=ßO\/¦óíà½n$#$|L÷èÑ#Œ<—iC«”$„€B@4èóålf¾~µoß¾Ô S„ª7/¶™ßؽ)úÓ´ %́s À(:]®¾Û₫‰ó˜? 6,Œ‚ k¤±û .$:7a‡ÛtÜåh¿M›6n¿ưösOèÆùVCb¬ưJZVm¨+È4Ö|ß—n”ư|ăŒPTË&ñưû÷„!0a¸JÁ^·l5Ö¡¨ ø`zå•W’0ÜÀ±¢,‰ä¼Ë)>† ’„È"œ‘Yç³ïâ‹/!¸xȹ™x@<+è+úÜÈ97 øôÍOüôsܸqÁ…ưí·ß7©‘!àgö0P,éôéÓƒûÉjLq€Ç Ë9çœ>L±$™"˜Ï˜1ƒSÇ.dJ¥ Ö¡ö2å^Ácˆk YD(1Æ{q/‘æ̉BvU®êB@†"À Ơç{.ä'`naV·åç ?IIØ̀†ù`kæ„3"<'’ƪ!x  F#[`(Ă”¯„«đÅ<”œ={ö¬Ï©µÊ‚ s9<€˜3/6¼k­ÊZà –'„P¶–#ă*®÷yđøCÀï !§úè ?e>‹ñ3Dˆ…|B·‰îÔˆÎoˆP_\†;üáA‹î4–Æî'ßJ̀É®ºêªw„¶Iö~Ê)§}t9ÚG׋œ12×7!“é–m_E-½Â»hñJøÜN;íD\¤œ·ÊùÔ¢Ïơ æœÿH çú#ç?jĂ¹~óÖ]a¿A–ó±gkƠé?îrÈPÆ[å×8¾×^{åüÍѯBés©è¡‡Êyk¦‚çÅuú‰~Γ5úàă›åØ—Ë·~̉I'åüG]r¾'2q¡€ÿ@Ë­¸âuÖëƯÖsÔcBư>”UÁó< ó4vJXÚơ±¾[pó̃1ëăœ8 ç󥄺âëͱ,́k4ÚÈw_äÛŸu¿xëÑœÿø®s 6v–6₫bÚŒÛ׺B@!o•ó®Ñ9ÿa’óÖI9o5Të÷ÙO¬Ă1o\‘óa5s>‡Y¹N₫Ú[îÿ‘óáJś xytî‚ .Èù² Út†º}.¼œÏiWR½>”l¨Ă‡«÷ù̃{%œË¼º¡ÂÜøøăơ1¯ó$á>jh½­é|¾qîºë®äYơù  k%?ñơ×_æù°¢‡$§zË,á;ƒÈ;̀aâ5ömQ(Ü–•A‡•î Ö Ươzë­—Ơ Wj?ÁÁ"ÑrœäôƠçŸ~rؼ>ØQjûIe~%=^o¬ïöƯw߸HÅ­ÿ¬KÅơª„áÊ{6î6(ʹ Ü v“S%upS:RÉ=7ñ†!2꣼§®Ï>û,äúà!C-Å}~>ôI¬ aA.́´̉‹PL|\x+<·Â +̣¨®ñ1o%>8 ­P0¦|Bˆ­đ@Åc¦m¦C —4úÁĂIR-‚«x2V3pÉ70c¬Œ)~)VËøÔO! „€Í…ṣ¶P9äy€ÄHO7 K1‚…ËéĐ¡Cßâæꥵ v„èDŒ0·E™OXÖr·s\ yøđá%UÏTĐ-wï̃=8$º&Í}¬ÅÍ dCÚïܹsÄGCê×¹B@! „€h °îÇ2߈,ơ1₫ˆÅ'F$Ft0ï! ^l\—×ú@9uÊzÅ=I ùx+§đƒBk·Új«Ev!/èBmOœ81xÏ̉G̣u”"(ĐéF)2x•C¨«[·n!/FIxr—›@*G?«¹ ‡È§Âû€\!!äzI ä†^ä€üÄ[Û¢¤Ëj[! „€B 2Àˆ’‘#G£©›nº)1zªŒÖîEí8HµËhO#!ÀÇîßXÄ!:uJBz5R“ªV! „€%#àă÷9Êi›¯½öCq U„éIJ۬¼qÏ®ËK5®£5¯óA+ÿ„  ¸”6, áÅ = uU*éAß|ÜßĐÅRÂ\ÙØP„ă¦÷'±»¾•)e Ù†"¤éXªV ï$B4A„Hd¦Ï ₫ •đôÂóœw̃_"\W¾}&M₫h•{#{_’Œû^"„€B@!PüñÇaî éB̀<½+£‡Ù½ÇG6.¾7đƯvÛ-äè°Æ|BwÊ)§„đQ¶OK! „€B@4(-ßyç ,6Å%Vóé°ULz±Ø¶°U>‰tI!cŒ•Ô&¸̣!ÃĂEäE!^17† ˆ̃j«­yE₫Ÿp¾AÍ0%çáª|Rú’ëºå–[\Ÿ>}B¨Yˆ ŸÈ½äº̉'BÔAzÓ!'̃wÜ!ƒ4P´M85̣­đNáPYffMB ø$ὂ·^c"O !-…€B@”†ó ¼‰1Â1cFøc®ƠƧ ‡WcÍ9Kë­Îª0Za” FJä‰Î—GÙÊUÂR•p|ˆ=G,cJ„€B@!ĐÔX~‹×…öwß}W‹è ŒÑ&›l’Xg“-ΕƠÔưn í½ơÖ[!4 J^ŒCJ4– €&!À$K?ꨣÜT9<>èÄÉ1ÇăˆÏ|óÍ7‡­wî¿àƯA’LîÛc=Ö‘8¶ñăLJ₫rµ£z² ¤U—.]Â%~ÿư÷@~Xx¬)S¦„û„ĐV‹.º¨{ươ×Ë’Kƒœ Xñ_~ùå &RÎ=÷\G.B'½ùæ›9Iö̃{ïàq€bư₫ûï¤^£4¦J‹B€PÀxø₫ûï×:£1¼Ë Cx7áu&+ƠZ0i‡B@´`đÆḳĂ? „ó%È ȱEë,Á €ßÑ•W^Ù­±ÆÁ˜#̣oI„@S§†p¥@xTCˆ+‡ˆCBK! „€B@´`>û́³$?^ụ̀s`ŒaD́Å_\DG#ÜX¶÷íÛ7|DP}ǃu;¹[ótđÁ‡fî¾ûn×£G²4I˜¬ ï¹çç$!9ú+®è ‡đÊÀK 1 6’ă­2Ï<ó„XX„Íàn¿ưöP†X£Gnôcy;¤E#€¢ˆ÷ï=₫^|ñÅN8®€°x¯™GD"Ê£¤u! „€hl,<¡¨̉G]á©OÈYH #6X2ÄøD"„@mD|ÔÆD{„€B@!PÑŸƒPIX<³•Ÿå6qXQv£đS~湬ß~û­;î¸ăܘ1cB^xáÛ£_¿~MÚ¡SN9Å 2$]åđÊ°p/B¨‘<E4áÊ!Ûm·›ưôӼᩘGÊBRÅ^Ë/¿|“x—2^#*•zeÔ/! „€B@ü>PTCrđ7mÚ´ZLX.cÁŒ̣Ù<:øpẨỶ|àApÄG$! vß}÷ À_z饛´S(IN×Ç¥—^’¨—³·̃z«#7dÉ©Ë%ăÇw»́²‹Ă3¯’EY¤\Uç­ǵر! Tä¡íÚµË[^*Ë»Ọ́„¼₫úëyó„)²ÜrËUöàÔ;! „€hV 8'k¹7ŒÜxÿư÷“¹_V™·ă)xoàƯªđTYˆiŸ( ¥á¦³„€B@!Đ(`­çç }¾ün¸a’ˆëôr…-j”µ²JQ̉ă¥0a„0rÂŒ >¼ÁI¿K‘|bÜG„׃¢Ü„Ø…^¼%đĐx́±ÇJéfæ95x*‘|œ6N8á„̀rå̃‰—Àn»í”„–€À"׈¤e `yB B DÈÂs ^KÜ{!üá=±Wîg'nSëB@!P™£íĂ?LóâÀØ#íum#à÷‚9Ä*«¬’k­µVø}Qx*CJK!ĐxˆøhÄ̃¬ăÁÁœ‹ă! ̓»ZB@! Z)–Ÿ’ƒ?ñ¦-ÅP°áê…±…­R~Ê¿aø8îÛ·¯Ă[YuƠUƯ5×\ă:wî¶›ă º!#»ï¾ÛơèÑ£QºA8*BByæ™îŒ3Î(k<3ĵÆÚÏ‹={–µ₫B•ưøă¡½G}4ƒà¹â+¤Ä(Z 8†̣‹0%æB¨8¶!6cÁËo; 1Ø©S§f#8ă~i]! ̣#@x*ÂÈZx*#9 <¾ú꫼'bx‘'g}íµ×Vxª¼¨é€h^D|4/₫j]! „€háđa…"܈,îÓcó̀3O°̃l³Í’°*ÊÏQ=7Öâ]t‘;û́³Cbo>Œ9昰=ï¼ó6Û@đXèĐ¡CásØa‡…P[Ơ,ß¹·o¸áwà–½™Aƒ¯™M6Ù$!–ỄH y^9äÄ“e‡vpwÜq‡[pÁóœ¡Ư- Ù³g‡÷¸å !×Ï~,sÍ5WđÆ3¯H‘Æđ°ÛÔºB@d#€ÁÄ|PË{ƒ„ăi££¸Hm Œà0ï Â₫ío‹‹j] G@ÄG…_ uO! „€¨°Æê߈¦̀5«–•đB -äHœ Ñ¥0Ê1}HUÏu{JH¼<̃xă°»cÇAAáĐœ‚²åëóÏ?̣¼̣Ê+†¤ăxfL4Ém»í¶eú{ï½¼ P@ƒ9ùmZ®¼̣Jẃ±ÇâëN<\Ú´iÓÔƯP{‚yB¸Í+dêÔ©™yBVZi%·å–[†w=^|xóáƠ'B@†#ÀÜûÛo¿ùÁ-4̃…ÂSñ&‰x:<Ûü¶+¾̉‚Å/–êëø¦ÊS˃V„ƒaøè&A%!đL¨„åSN9Å 2Äaù±₫úë—gàµü₫ûï¯%Å!¾CöØcwÏ=÷¸^½z…œ%ÑF]uNœ8Ñí½÷̃!ËK,áî¿ÿ₫đl×u·|,Oˆ!/¼đB̃„÷êƯ»w£ŒY•V/¢„Xá¾åO@<—²̣„àhdˆ̣„Tï5WÏ…€h8?ÿüs̃đTé9wÜÚüóÏÂSYX*[ ㉭­óºkÔB@! „@`Y†µÑÁ2_~ [Ù%n%äph רƈr}À€n„ ¡;Ë,³Œ>|x >*¡qPºtĐAa×Ưwßízôèn´ơSO=5x_ƒă®»îj´v¨˜çeÈ7ß|ă \ú÷ïߨíƠU9VüxŸ\xá…¡èÆọ~,¹ä’uªăB ä ™6mZB„'äóÏ?¯Q¯B#B,OˆåÙ©QXB@&@ÀÂS±aKÂûƠ0¡–% OƠMMV‚€ˆVr¡5L! „€­̣s D2¢#_~\çè@±¤ü­óÎA¡=räHwâ‰'†DÖ(!†êZh¡…œ„\#ÔD ̃(M%}úôq·ÜrKÈ%BN‘Æ–sÎ9Ç~úéëOÂ^U‚Œ;ÖbXb@IDAT|đÁî·ß~s+®¸¢?~|’÷¤ú§>T'x"~øá‡î駟áẸ́î»ïfæ ÙpĂ “„éx"Vâ{ª:¯‚z-„đ>ÂKƒwæɇ4dz„ù^FjÉAx*~/eL”…ö !P.D|” IƠ#„€B@T¸Ö“Ÿƒ8ê„yă7jÅ ÆBv½ơÖ«‘ŸƒA !RQ—²É;Ă}ß¾}C2b_uƠUƯ5×\ă:wîÜä})¦AbaC̉q¿c%‰'Ó|óÍẀ©e)C"u³—]v™;úè£ËRg¡J°€oÓ¦Ă:Dó]ºt)T¼É¡”̃m·Ư‚bˆï„ÀêÚµk“µ¯†Z>–'Ä~× ̣ñÉỂ¾}ûyB–_~ù–F(„@ƒ <D†‘Fr@xÔêïÿ{ ï ˜—( ! „€håŸååç@Á¶FCÊG 9xt`})‹ÖV~óÔ1|¬¥Ó(PâŸqÆnĐ A¯¨Fé¶îºëº™3gº­·̃ÚM4)X×1ä²₫ôÓOC²q*ưꫯ\S&ỡvÛmƯă?̃ä9M" OÈ3d‡vpwÜq‡[pÁ‹9]e„@Ùà½Fó†ÄP%(a³bÁó€Ü F„à©û́ăÆî{,¼—[n¹̣U^dM(Qyñ¤"øàƒn×]w áê `Yd‘"{ƯtÅPn. "díµ×IÏ!d%B ¹€đøæ›o"„ßÙ×^{­ViË‚!̃“ÊRóªC|d‘×]wëƯ»wÍÊ´%ê@€gc ÈŒ˜Ü`đTx^f @äư"Ú½Á:J O•…ö !ĐRñÑR®¤Æ!„€B JÀơÍ7ß ù9,F9ÄGÚuá…v–Ÿ’Cù9ªô‚W@· ‹vÜqǹ1cÆ„̃po]tÑE®_¿~Đ»âº0zôhwĐA…ÂM™[#Ư»Ûn»ÍơêƠ+(TH|Ú”™@̃̃äf9ᄲù¢Û"É̃{ïíP’.±Äî¾ûîsäXJAe*á₫̀+¯J Éd}Dyº̉J+oÊ®]»º½öÚ˵Úe]ÄGôÀ«æ–[nq»ï¾{«ÅL¯æųgÏY„¤2’O­ºÂSñƒ·†…¨²đTx"5¥aBƯ£T ! „@Ó â£ipV+B@! „@„ K,ëQæËϱ + S [µÎ:ëT|è¡hˆZ­Pn¿ưvwÄG$¡P@1Â-½ổÚăÚƯ"v‡¡® ú_»TÓ́0:ñÄa§µƠÔrƠUW¹#<2„Û"œO¡ÄÂMƯ·¸=Báô¥±ưÌ.‹ï!­W„Í™6mĂ?~§ă¤-·Ü2$BÏĂ8ä‡~á<±ØÏ—ŸO<ˆ-”̃óÎ;õrqƯZo¸ÖüCnØ$xeå~çđ4rĂ¼8*bÚ/„@kF`ÎÖà°‚&¤duÊÏÑ<ק%¶úÉ'Ÿ’`„ axË,³Œ>|xƠỸBâ ̉cµƠVs_|q³^.ùHV\û¦èXŸ>}ÜÉ'Ÿ́¸¾÷ÜsOH*̃íÖ· ˆÛ_|Ñuï̃=XÖs Qxzê©ơ­Jå…@£#€buươ×GuTH€̀ưGù¶N:5z?ªµ,̉cüøñ®sçÎy‡Ä»| ¹˜æB„#yúâ‹/®ÄÈl’‹$-_~ù¥Ûm·ƯÂ;OWXIÓ!`á©đˆŒ½7 8>øàƒ:ĂSñ;oĆ„§‚Ä’! „@Ưˆø¨#•B@! ÊŒäÆÀáAÜpr(?G™AVu”#G ^ X΢@"DÔĐ¡C«2qï駟sÍ5WÈïqsJs„)#‰ø¥—^ê.¿ụ̈%>¸FK-µ”{̣É'Ưàđ<:í´Óù‹[&%Vs̃Åj».0N ÷Ü¿’ÚđÛa)M²h 6ÿüó»G}4x°Ö>ë?{₫øă7v́Xwà&E¨oÁ ơđ;¹ ₫(Ë!?̉¹¨~₫ùgG[±üúë¯ô`a¶vÜqÇø°Öˈ€…§=7X'<×ăY³µä’KÖOeDÏ—! „@éˆø(;)„€B@”ˆÊZḅK„@c"€Eeß¾}C˜Ú!±ç5×\ă:°ºm̀₫4´nÂÍØssÁḱ†ÖÙĐó››ø ÿ—]vY „đª ÿO¥ Ç­·̃êÚx6®%9RfΜ¡ü’!P Ø&Á4^hFz~ ¯. <̣ ¤aÄŒôàœ3Ï<3ä,Bé×pê„TÁÚïÊABƯxă!1ư½÷̃Ú¶vq± ‹p„• Đú\ Kp5kV’wĂ¼8OE₫°|2÷ÜsB̀H ó̃À£c±ÅËwö ! „@P¨Ó…€B@! * ¬gQ*ŸsÎ9A!„²çØcuguVƠZÖ£đZwƯuƯL¯$' ù4*ÁO­ï¿ÿ̃¾n»í¶k¶¡GʼnÖÇ×lư¨OĂXx|đÁî·ß~ 1Bá´k×®>U¨¬͈@œă#_7CÅ;,!äç{îé~øá@P\yå•°Ẹ̈₫'œ ä^ x}đî}óÍ7]ûöíCƯ¼;^ươä4’c“GḥäÉnÙe— K”î’º°đTxk±aņ§2bĂ–xèȳ¯ńUB!PnD|”QƠ'„€B@!ĐlL™2%(̀̉µcÇîúë¯ÉÀ›­Seh˜œ(ôQv¡ÜZn¹åÊPkĂªẠ̀Ơê¿æ’§Ÿ~ÚmµƠV`ä"¨|Á/bđươ×n!°êJ~\L½*#„@ă#P ññ¾Ç{ﮬá½±È"‹̣‚ĐFx¤%Îÿ÷†‘#!„ûC F B,ÜïÁ¶mÛ†c„̃b;ù µÂ ïP#6X‡đøôÓOë O‘dĆyr‹¥ŒZáåÔ…€™(ÔU&,Ú)„€B@!PM`5;xđ`wÅWeÊ¡3Î8Ă 4ÈÍ1ÇƠ4”Z}%”‰y1\{íµ£Ô'¬‹É̉K/m«Í²ÜrË-ƯÚk¯$­?ÿüó›¥ơmtÓM7 1øI8û́Đ¿xà=‡¹‚ÁóC¤‡ sˆ¥‹/¾8$'<Ơwß}W oÛAx*©a$$¿ÂSJZ ! *y|TöơQï„€B@! ê@€PGqDˆ¹MQBAA¤“¿ÖQMEÆJ·C‡!¶û€܈#*¦Ÿ(ÙđN 7ÅW_}Ớưºé¦›Ü₫ûïR$“…üªAùÙ³gÏ™>80xƠNÚU ₫ê§(´Ç‡…¡"ùxº yE.’Œ›@bài°ÖZkÙ®:—„r<̣È#ç“g å<%m´‘{öÙg]æ ï·^xÁá‰ĐÚ…đü†x≠Bä[}ơƠï ¶*I+B@ªE@U{éÔq! „€B@´n°Ô$q,¡¬ÈëAÈ‹.ºÈơëׯECx“}÷Ư7(ĐH€•j%I%$6ñ€8 — VÓ7ß|³ëß¿|¸¢×QNœ8Ñzè¡îºë® ^xÔÜqÇ!¦Ew^B „ª#t¤ BÈEÂW!!(Ô³BY…₫묳Nâbûm ÑÉ[lv¡´'LïÈSß_ư5x„`€@ˆˆôP‚ïæ \óä€Rxªÿ`¤ÿB@–†À_ZÚ€4! „€B@–À=÷ÜăÖ[o=7jÔ¨ Ä T±¹[ éÁ$L 4̣Vê «ÔJ’J#>°„Æ !äYµ ̃x*ÑwÖyäG(,ÚK„€¨|ÈÓËRK-åFvAZà‰A~,AñÎó₫Úk¯…|xû¥ÿx{‚ß>̃{C† ›ÿ₫÷¿ƯSO=Îc„ÈÑGmE[ư¢ƒ ¼D·ß~û@L‰ôhơ·†B # â£_\ M! „€- ”>Xöïµ×^!Ä¥±cÇ:ˆæÎ3QN¬!<g‚\pÁnươ×/gơe©«̉ˆƠ·oß@cÿÑG-Ë8›ºÈ›x X“¬xĂ 7 XS÷Cí !Đ0 ­Il1qÚi§…ß.¶QÄÛ§OŸÂWq,=ÿüóÁ»ƒ$æß|óMr˜<´àơgàå—_¶ñj8đÀĂº₫ ! „€hˆøhW]cB@” båâVZ±ï¾ûnHºX¦.´èjˆbQ˜µèˬÁ‰Ö²„‚¸óÎ;a öÛo?÷ꫯ†Ä­(˜ZeŸ}ö c$_I¥ŹZÈq•"Ë.»lFLùW)}«O?vÚi'÷ÜsϹW\Ñ}ươ×n›m¶IÜק•B yÀ d̉¤II'˜Ûµoß>!8EeïP’’º1-̀·É§ôĂ?„?KnnåÈgDß~ûÍ=₫øă8µzñú! „€h­ˆøh­W^ăB@”¬¬×]w]·̉J+ưG²À3Ï<3Ä:.CZLXó¡Ø…đàÅV€”‘ÖˆÀ;ï¼ăºtẹ́*„„£&L "³–mI¸Ä2yÑE ¹**5 G%z|p€Ḅuîj¬Ä§L™£Đ„ ;÷Üs«u8ê·hµ,¶ØbJÆÿË/¿¸^½z…mBⱈŸăđĂ^~̀ùøc₫g9<ø-hă™QṆÿH˜~ÖYgÙfX’û㤓Nª±OB@! Z">ZÛ×x…€eD€-Üôë+|ØI‰ÿÔ ;HÈLR±ô6)_;_K!P퀔°„úÁb–÷ÍQGå¦N¬_±hmiră7&–ưä{ éj¥ÊW_}º–VÂ5w;uêäđ”áưZ¹>büåöä“O†Đńùä0/ä<¼CLđy饗l3YR.‘9¤µ—ÔB@V†@ËûZlePĂB@T„ŸAyŸö\ˆûˆ²†ùçŸ?̃­uÊĂ˜HBá‰G !|V]uUW©VߺxB 1€Ü8p` 9 JyFŒ¬ßQ̣´D!‘-Är衇º=zT́0?û́³`L+ø O„{â‰'ܘ1cÜyç~›Ø_Ḅâ[o½5xV’ïå¶Ûn A÷ß¿[rÉ%«qHê³h0/c®†Wë‹/¾x̃qáÙÁs̀<1¯ÂWñŒŸsÎ9nă7v»í¶[­:øÍÛa‡‚gÈ<ó̀Së8;¨Ûm·u“'Ov”Ùh£\K4ȼv ! „€ȃ€ˆ<Àh·B@ÔK.¹$X–‰Đ¨n…JÏ™?‰hM  BQM~¼Ăˆ]~â‰'ºă?>„óh©X³dß}÷ ^_«­¶ăZÉba®PÈRö5×ṽyç@ÈĐOø ³„[mµU°|ĂƠ?Bàu2÷Üs…ê?₫èyäGÿ÷̃{ïĐ~Ü—ø\[ç”P”[pÁĂ9ÔË6VvôóóÏ?ÖÆ”EHTK’ÚØ£+?sÂ:I/ 6”¿ñ¹á ÿGùÛo¿=$@§ˆ§=÷Ü3$¹̀‹úHÉÇ4ôûùçŸwo¿ưvØ^sÍ5]ǃ—‰µ¡¥h*°T=âˆ#B^îgBƒàåẢÖ¬û¹©úƠíœ~úéîŸÿügxöƬw›¢ƯRÛ0âƒO•èCŸ;î¸àA3lØ0ẃ±Ç¶ëg̣|€9Vá$—ßtÓMĂo€ḤRïd'* ~ëÖXcđWŸa4Ào(‰̉¶mÛúœ®²B@! Z&^á$B@!P7ƯtSÎ'ß%#wÎÇ#ÎyÅ}½ë9rdλư‡:üñœÖ©3₫ó.û¹/¾ø¢VưŸ|̣Ĩs8ß+¼r₫c0œç©9O>„z}HœW.æ–Xb‰¤ObäügØöIqs ¨Ơ'+ṛ̃.9gæ̀™¡_Ë/¿|Øçă)çºuë–óIÇf›m–ó$O¨Ó[wç<ÑS« eÙ–̃J9ç PƇưÉqN,§zjÎ-™uPÏûï¿Ÿc̀&¬[›>áe®Jê·>Ú2«=«GK!Pn<ñ˜ó¡r>¬[¸Ÿ¹O¯¼̣Êœ'æÊƯTEÖ÷ÜsÏå¼¢>Œ}èĐ¡ÙÇt§.ºè¢Đßm¶Ù&}¨b¶=yóÙ¡Ÿ ®˜~•£#~øa΂alÜ;W_}u9ªUB@T̀ ½wd®_¿~á}àĂßå{́±*…º+„€B qPrs¯á‘! „@Ă(5w|W ×₫¬̃L™2Å]wƯu‰GeđR †1áL̀ö?üp÷̀3Ï8’$ÇB‚Ø̃½{»¯¿₫:ÙÍ>‹½LBe’!Đ̣đê¡àơ…w^Á„ôCXßn»íZ>¡B@"ñQH*"„€u#đÖ[o9ï‘Bn0W„cBÓ³gÏ$®1d„‘|đyïĐç’ĐEᢠ:è đñÇ1êø̣Ë/Y­%%„•yóÍ7Ư!‡’„—!\€…™O>|xBxàȈC@@>Ṭƒ~B>ĹO®¿₫úṕ«¯¾ a¾ḅä›o¾q¯¿₫zê*®ÛÖï½÷̃„mª ¢"ƒ°Z|#>ËΗ̃ó#`ƠÏiÓ¦…k—׺(„´ăÙÜk¯½Â³Kó±cdžä­(uc¯\mVb=(¬½ç˜ó̃sîæ›o®^Ơ@|p½IϽDH¿_|±o’ûÄoÇĉ·ôuÜ&i! Z6̀Û̉Ïú2Ë,ăxà–=pN! „@=ñQ°TT! ̣#y°ú꫇\>́“Ë÷·êª«ÖđĐH×èĂw8*Ĺ'Î1ù+–^zéPŒ<ó¤À{‚\äÅèÑ£C̣G¶‰m ¹àƯưÙ †)iÁ[äw̃q½zơ 9È«±öÚk'ù-8{@ª@¼{€6ñIç ŒÙrù€5ûÓO?ƒ ¤ ù@bBduÖ)ÊÂÂÅHpØrË-¢ƒ:'L˜®ƒ)I¼i¸Å<ù¬³ÎJ¼Vè§_–$ÆS&뼸­ ú"€²ï­ơ×_ßƯyç\Ûo¿ư‚—^X>ÜU}«¬Ụ́7̃xc ^Öº>Ô_ƠŒ¥ZˆÅ“0ii^Œ‰ß™k®¹Æ]qÅaœU›l²I Ó8.B e"Àüså•Wvä0Â0h̀˜1!ß[ûöí[æ€5*! „€% â£ĐtB@”@:U\oX}§…ÄÆieèùçŸï¾ûî»Pô¾ûîsX¹¥ÅçñpmÚ´q„bÉ ™ƒ’ßH;÷”SN –×lc= ‘a‡¹"±…Ųă,±À%9¸‘v R‹n##²ˆ˜¸-;/½$i:c„qA–¤Éñl‰Ưß{ï½LϾ}ûÖÂ2âH"ÈÄvØ!Xáăư…̉¢¢2ư,6Fû•TçG}oÓ'¼zôèQIƯ«³/F|ø¼Iu–mî>́®»î*H¼7w?̉₫‘G,½!đg̀˜á6ÜpĂ «!uê\! *æytÔ`@ÓTvÏƠ;! „€Mƒ€ˆ¦ÁY­! Z/¼đB°6C¹™ï¼ù¬ Ë„ÇB} KYߧO‡rqÖ¬Y‰7ˆƠ ™’ơ¸ñÆ»yç7#\€åó`Gæp">i®U—,;c ¤0>){!¿’Jó¬dV´C‡ ùBø´çF>ÂÄÎ×R”<§°HEë“®đ¨£rS§Nu]»vÍ|~ËÙ~¥ƠE¿}÷Ư7x£á‘€÷U5 Ä­Ï•œăĂ0Ưj«­‚7÷!ïñ–*„9Ä 2üUäÍÂS"„€B@! Z#">ZăUט…€€̃ „²B‘—ï/‹,°î œ7oÛ—o‰E«…¡ỆxÈwí'lVV[(ä !9$qB¿â0WŒÏó̃°:ëZ.¾øâ‰w† u“>N’w#1ègÚÆÊljÎÁđ\±ă]—׺(ÈÍ7ßÜ‘O†çnƯu×uO=ơ”:t¨ă>mrÆgk|_Ó…̃‹•ˆÏ|t«ZîIÈ7÷ïßßµÈ%¿{·̃z«kÛ¶­ƒ`#G¿A÷ß¿[rÉ%[ä˜5(! „@!đ˜6mĂë’¹ †AxpcHDø[rñ±mû8—aî̃ç0…°Ơ1! „@¥" â£R¯Œú%„@‹C€ 6¤Êxè1ajLb¤sÎ7ß|Âs˜µ>€hç€H[ç+×’ö¿ûî»nùå—OÈ [¯^½Ü¤I“BH,r†«¸èƯ»·»êª«Âu¹å–[BB\°%¼T!O‹+¯¼2(ԲȒ·zẠ́˜v꺅ú[l[…êĐ1!PN dṇ̃¸á†Âs‡Â€0;(™³‰r¶] uvØaAùŒr¯ƒjU T#ñÁưѯ_?w̃yç…äßÇÉ-Yø9ÿüóC~“ƒ>Ø‘‡‹<;ăÇwíÚµkÉC×Ø*”Î~øaø-à̃ÄÀdÙe—­³§̀½́Ăy„$t¨DÔæàxĂM˜0¡¾§†̣Üi2Â/qÈñ`d‰‘(ñ6Ç!Pæ˜c’ú “„€B ~ˆø¨^*-„@+Eë\#-Œ¸ø₫ûïĂ¾˜ÀàXÄ°}„‚*·0y¶‰6“j̣j È±äÜån¯P}¥z0ª³Đ1¬v±œ={¶#„Éo¼Q#9×}–¤¾a±<̣ÈD1i–aô'ƒ•Ơ?>Î_~ùå`áÔ@RéA öø˜ƠĂ5¬KVXa…DY¯-îµo¼Ñ‘€!É;Jç†,uơKÇ…À=÷Ü<>ùä“p¯uëÖÍqß·iÓ&¯TkBm̀˜1ńرaÈä™Xn¹åªvø³fÍ }¯&:Œ’•ß ̃„1léćƯ`Œy¥•Vr»í¶›ăÚjîöÛow]»vµ"Z FẸâ­·̃ríÛ·OÚa΃Q¹Ơ ¬Ü¿&œÉ^­Ä±CË̉à~Bê{@A€ó[€ßh|ÇñçÙ6K›»ÓóhŒÓ̀œ}¥JL˜Y½MÉƺ}ă±´2¶OJ)Èë! Z#…g­Y‡fñdÖˆ &³¬gưÅ|\5iÁÄƠ&¯LnÓLzóÇ[€ 3çJBAMœ8±–×Eº\ F™$3ɈéÓ§;₫P&æSrÍ© b†½„Ë=ztđPAyđ駟K^pFè÷D4ÜsÇ{¬»÷̃{ï[—vÏBÆ5VÛƠR/ YäĐCu{́±Gµt=³Ÿf}]măÁëâăᇡØmØ„ßH’CHΘ1Ăí²Ë.Á«qÀ€­aøc3#ÀÜ%Mpđ{ñ́³ÏºÎ;çí÷Ưw_̃ă:ĐºÀ;~Ô¨QnĐ AaŒßơ¾­đ/V0 â»ïEûäÛÀ₫Øo붌÷qûăK̀ưÙosơbû’.Çseß“¶4„mÈû´mû̃´̣”lÉ2ÈJ·§m! „@5" ⣯ú,ZL6m’11ï·u;ir¸œÂ$3HÚ2½´‰fz?¤LêiI¤₫ùçŸ/jH_ưuPü5D!~|0“oƒ|(_!%̉ÂÄÅK³K—É· aẪ=VbÔSH¸‘<0ü¥ËBDtèĐ!±RK[«m¶Ùf3Åbú|¶ûöí,éß|óÍ0¦|mqï]wƯuIس˜dɪ—}(")—ï|ío=pŸ\ươîÔSO W<“ûí·Ÿ»đ ùÑz(xđ`÷̀3Ïä­kû .¸ ïqh]0ï(÷w]]bÀ±ÄK„¿ºÊ:n}×2'à›ez_¼Íñø/M Ø·o¡¶ë:f߶|7đË̉ˆ‘¬}‹ËØ9"PêBZÇ…€hD|D¨cÑrË¢D‡̣®RWI^̣’ºˆ1Æ"´áx¬N–Ë,³L‹T(×le–ÀJË&n6)³¥¶^rœ¿rOnQ2Ûä,1ÁD¿¬ăÄeo‰¤E©w1mKQ–0a6⧘: {î¹đ~¶óè3V^(ÿ9N…4±qôÑG‡†\K$>7îC8˜ñe%ñÑø8üđĂĂ½‘Q4Ù…7 ÷₫w̃Yë÷…'ÉuÓ¹xâ ·å–[†|"TÄưG_-û̉ư}ươ׃2€_±>eúB„¾&ñøñJI[_R¸ÙFÆÄaµ¬-…3‡{ùñljºW^yå`=¾ưöÛg̃W­5BåưóŸÿ ̃/ăÆksFó¦«Fâƒ{‘߈‘óƒß¡Ö"ü–à‰AÀµ×^~'>øàwÇwÔÍ·Œ4ÎÆG€ùóq¼\™Ăä GÊ÷á™±.iƯpßؼ–ơ¬yl¥"T.%¾‘ùƶïé˜<á91¢Ä¾ĂÙf¿m³Œ¿±!”́œ†àgÏ5¿3ö½Í³o³µưvŒđÉƠtm‚Y¥Ë7,á¹'xÖ ư ‰•ç¾D'@Ä‚Rt…Úh‰ÇꋺN =y G@'U]jKÄ6kLÿăoè\ÖÖ¸ï¶Ûn V‹$]«²€D(ˆ$ÿAå#?|üÅc̀z÷îƯüÀÆu’(”đ6!¢í|}‰û¥ơÚđb“#&Jé?›h¥÷Û6âØ"¥v ơßĂh<‰Ê"&˜HÙ_ú8?M‡¢₫£Ô¥"@N&jÜ'SK-µTƒẮàR¿öÚk‡¤,¸Ôg… B ˆ1^'Fnđ ½ÿ₫ûA)̀}‹b¸Đ$Ÿc>Bè?ôû3.´Ch/&Düñ₫#y-!Pn0ø 7 ËùHæ8p ƒ€3‚±ÜmVs}x}đn8î¸ăªy8¡ïŸ₫ỵüâ‹/ª̉»‡ë÷ U<”N8ᄪ¿.¥ OÂÔÇZk­₫¶iÓ¦”ªt(ˆsœ·ß~;ÜgqAækdå›A1tƠUW…°Fñ9̀ó³r|đÍ7mÚ´àƠD{̀:v́æD̀ÿÓBy¾[˜oñûÅ6z¼‰™1äư](‘z}ÛŒûÀ¹?ä9AExéJD„9aÖ|ăä“{ơƠWĂü’o¶­¶Ú*̀Äm°̀ùưæ7̀ñ¼Ü;ë­·Œ̉"l‹]s#PxŒø`oÇú+cûØ ”bÛ®«÷<÷[L†Ø:ßTöÏ>Ó °Î½ïă^/ôíUW?ZăqŒBx̃̃)8™A\&î¸ăÁxïÏ»îºKzÑ, RûꃿIüF¢—@xÇ̣Ưu€7r”‡€<>"œ˜p0¹¨¯đ#̀·ä?+^”O=ơTø±"~2““R1¶ó³–ùêd’W¨/Yuµ”}L>mÂÂ2ë¯qiAå&61ÉGLØ~[Ú¤†m¬1EZ”󴼺ø¸Ê÷UêhID̀ä¹́²Ë ~üZ|\̣₫á~çc¬Xa’Ÿơa^×ùXIn²É&uÓq!Đ`Pj@r°Da³îºëkñ6Ú¨¤ùSƒ;Tá ÀkŒ9"ó‘c9¦Â{\\÷,̀ÂuYWcÓ—b¾ …çÇ°aĂ‚̣¿5*GÈ;³êª«º½öÚ+(,QZO| !ĐXđ¬m·Ưv!ÏJSỆ.àÙ@X²?¬ÜK#PLÁ}lIzÛ¦{ˆÉô"P̣_S"¹@–‚·rûåÇ*>R,nỉƒ9¿]»í¶[\Öë@@ÄG€°0Áê‚û|¤©·Œâa—ÔDLx [–\rÉ`‘ÍÇ7×+öö°¶›ª/Ö^C–ÜSüȧ‰‰b·)WnË ~Àlr`¤K›Äûâu;iÁuáÇP"ª&ÜLÆ ba®đèhwZ5à£>¶.~ùå—đ,àéÁï ïóO<Ñüñ%‘u­=̣'̀œ93¸£ßtÓM-æª S<â1QÁP¥Œuÿư÷J<¼>î¹ç׳gÏJéZ“ö…3–‡$;GẠ†n Đ&íˆk5đ]Ñ£G0^ŒäđzÀh$müaJQæ^„fƒ,°÷ÅwúK/½Tƒô@á“$”áÇó–{á›ÄÚă»+‹ô Ä5¤dùƠRÛ´sñ̉È׿·–x;î#çf‘-”AI‹̉™~₫£ÚˆÉ0Á‚ñ§IêëÓN;-ü±£Á|óÍ7‡¹f£GṼÚ¡|¾₫ÄăB©EzPßÄ“&M ÄH>‰ëËWFû¢*đ×Á%Öp±]ˆPáX\†u3@£/1‚·j©Â=ùëCbr„uôèA¬Œ-9fûy«ỹT*~:¯4̉¤Çꫯ¼îñ°‘Ôyđ²‚´"4̣TA»±à¹÷̃{+¨Gÿé 9b&~‡åbˆ Ê1É3k‡r 9öĂkD„‘émÛoKûiQ+¡:ªƒ>ØƯzë­5D>x!Y%B µ!@( ryÓ%Æ[l¼<04@Á!ÉF€ÜX #×\sMPÂe—¬¾½¦x¬Öü†8sœ~ưú…HH½ÖJ|€Ç:ë¬ă¦L™¬«Yâ©ÄE( ‰(7x́C C| ĐÇk`÷ƯwOÁ“K„oƠ₫ưû'Çm%§…ªƒ 4hPÅÈq~³ŒdàÛï,”«æơauØ’ï¥7̃x#xE @Ưi§ab'F|4¤M”¹FzĐ Q£FÅ(¿³o¼qè§ơÉ–ôÅ­yµ0Ö3½7cç·˜«(Ũ2wươ×w3=ñn„IA K»¼óxΩ–3fXÑàÉùÉø© 0̃ 2ä‚ø >,¼ ;…đíHđ"ăñ̃{ï…°ùú“4öß¼6,œ,!Á…6ù~¾øâ‹]Ÿ>}ÂuåúâDÿ™—ó; q¢ùHÑêÛæ¾ÄX²¡9·Œ@áyç₫ăçÙt1¶ÍñtÛ—E đüđÇưYªpŸB ÄdÏéj̉ûÙNï£,J¾÷X©}Óy•…@ôà» å,o¿ÊêyeöFÄGë‹‘IX}…I /D^¸¼”x!1ᇜ%ûp#oă½D ¹aù2a„ó“>pN{ÓúŤÉí œ¦mÂLg~×]w íÑ&Gù”×X²0‘aiå;Ûô‘º‰§IœO&GLt_…+-Q~ ø± ?}aXÔÔÅnsJÚ¤¯ôä½`®XéàzËCZ8—~ÑÚih_̉ơ×w›>cIÈd»!¾ü°ÅD„ưø±/M\Ø6”c,%B@–ƒ¼‹L°IJ¢Đ³Ä{–÷[YZ jC€øéä/CùÁï1¿9äơ@ñÿöWÛ¸¢¿(›P₫ ‡rHÈ=Öí6U-…ø/̣ô]qÅaûâ‹/†ùvSáXiíÏàIÛû3…3!€P†bÑ’Z"ʉó,¾ë¾ăÎ8ăŒÄûâ0W„hBa™¾Wñæ@¸Où2AÉ©G~%æ|+̣-›EỤ́ç á;oq¾¥˜ßñËùÔYj›̀ùNG¨‡oi#wØ·Æk8~?²¿̀-y_!̀GÉÏcD û0Ö„´i×®]À‰¾b|{}°Œ 5†0Ç%_Æ*«¬¶É­Ơ¾}û°M,yÊsœkBH)„¼$äBø€œ0YmµƠế•¥ r«€ BNpA_BŸ¹î†=zsÆkçY}Z¶nĐ]•ƒ@á97÷ ï€x›}¶ŸeL¬XYöÇ!¼¸©ƒ¿†„đâç=†a’=‡•xƠù~@'È5AÊ;Ï=rS‚/Ï>zѳ&v:=H¢X‡~¼ )CŸ̃ƠàÍiûxỵ̈₫£üG}äÈ»+EŸø€t…à²>BVçËçLÚ£^êç½K~?̃ǻĂB;î§5ß2Mzđƒ ¯+ )÷¹Ÿh›w9m¦ñ¥M°à[úœơ]nèÁ»P¹|c¨¸ư~@’ÿ"à½r>f«œŸXäü‡]½±ñVÂ9_2ÔáăUæüÖ©3₫óq±s^)^«~ÿ€å|¬́eăóü¤07{ö́pđs̃Ư4”ơ1s·ÜrKÎ3ɹ>¬B·fI¶ưÇL­öØá?Îs~²ÊQ¿w‘Íùxña›e·nƯr~‚‘Ôcưa ₫¥êô|̉;nK¯¸Ïù‡7”‹1öIÉs₫ÅöÇcñ\9K?¹V-ÁƠ?€á<₫Åur̀¿\‹êKRA#¬ø²œO²óÖ+á~đ/¼\çÎs₫ÅÛo¿ưr₫G*ç­èr~"ó– 9?¹ËùIfÎd9ÿ‘™ă|Æ.! Ÿ3ç=¼L¾"­j?¿_ôLæư₫ƒ=ç·Zlùà¾â‡ï9¯hÉyÂ1ç/9oLöñ-ê ñBĂ”ơ›°ß+drGuTÎ+trÄHỆí‰PÖ‡oÊyïÄ° ;£Ôé£8„ó¼â-)ăUá;Œ₫x½œwơŸƠr·×牕œ7,¬Ơ¦Wèå|Đ_ÉB>́jØÇï2¿ÏY˜<‰Êy…^]̣ÑG…}ŒƠ+Ă¾øŸ÷J²€q|Œu;îI‡œÛ¾|çP(_ÀÁ“Z¡O>TuîÁ uÆÿø6½}¶ëŸËw¶÷H‰OÓº¨8x¦½2<ç†Ê¡ôQxÂ~û‡>ÓÎå½à 3́PX¢K/ÊXßm<èyÑ»¡ï´:¬ ¿#@OÆaÇă¥'B™¸Áx́\+úŸcëäÏyƒîøÔ\|nŒ÷úS;דĐ9Ÿ[±Æ¹é ̃‹IαsYz(×¥K—đÂyèQăkY‚®}/uđ.öIî³UÍ>y|ø+™%0_1»˜U&k_|^lơ.ëd0¸hbƠ€`é€+)ICM°ö‡…•CÎ:ë¬ÀŒâoqIÙ•EZpËÀÖùWqù‡ÜÑXi„aq‚+¼<̣ çúØ1Ä=å¼|‚ ÅÊ7̃X°(¸2¶,7/¬@ ¹ä×·/;Rà ×Ô+ ”Đ!! *¬Ǜ̉­>},åœúÔ¯²B ±À[Ë1ÂG2ïà7Ó€¸üă½T»_ƠT¿ÿ  –^̀G°’Å­¥‰y|øÎ14œßÿưãFH昭Y˜G“ß° „~ÄkƯ”;¯¨ ÖƠ­½¼à¹@85̣̀`Yê₫!· Ö¼öÅ7¤…SÊjûËg₫¨ă­·̃r^¹¼•°|Ạ̊Ö¾s³Îg–ÁÜăÅJ9Ú¤ó\ˆÛ¥/XèÆâ5KÉXǢؓq‘°n#FŒë”ăÛ?~—x®ó º<@̣ uz[â…A9t $O÷‡ñq= ơ‡ó¹¾ú‹m‰hiđLăYÀ_C„y9Ï–ú,óÔjH½u®y P?µùt£¼Ÿzè¡ Û#—^zï¹XÉû]¦ ï¼ÓïóŸÿ₫.]ĂsÏ̀{ïôYëó¹wfNÙgïß9g—U~+.‘“'`w :ᡇsƯFD6̃`%´‚r`đªÂo¼1زá+cRçÎÓFmPOđ"z‘ñP¯IT$9“ %nø3ÏĉEO¬[©?Pmxâ‰'Ü)§œ’Œb ûy0e¬ơÆ”CSô½úáLú^9¨Äÿ9s¯- BCK÷ç£/j¥Ạ̈‘ ̣0ñPA}@(-g¼÷–ï¼È={öL=|¤…„)Ñ©aø€U'G”ÁË'¼ „́óR‰ sBxàé B¡ óD8C ÊăÅ!´ºPOÂÓ0x¨°X¤ƒ¡|^.MxÆ~¸Á׬YS¯ ˜rG¯Ö[ë¡Ÿt¹®‹–mŸ†€!`†@¥!ÀØÎœNđyóæÉÂÂ{‘ ]#u”%&µ#ÀÂI=$­Te>P4V‚øˆ\Q¢4dñḥđÿ{?áû'!2 ('L \!€¢G P…hÿÉÚ7¤¹ªM¹‡‚Œơ'JtûŒ[P^ñ¼Öfô -Œ(‡ê"ơ¹&×Ñ₫3ÓµPXE%4b@Q ¥uôϳ ÈÚ;z®₫æúª0ƠmágmûơXƒNF}H´.è j«çSV]±×ëÚ§!PM¨§áüe¢a.Elèï¡Â`aÚGH5щ²A Í F „ă>Ñͪđ$Ç ü¦/BÀ]bœ€#ó¨®|䃬y îSc:Q®ƒâŸ₫ {R QcL´|ôµèmÏ´”‡`8BXëËñŒWä˜ÖzĐí˜ÑèAß -Îñç@OJyŒ}¹B 8́c¢´^8iÓG#è‡Ñ†‚~}+B›À‹ñºœÅ iî^ ¼˜x}aK÷G̃ ,˜é„QtJ(ä1J(Ÿ)56’8 K§?ˆ6Á¸7–B})˜¤̉q…†””Â3üÀûo3øA9ŸkÂϪ^*ä΀G1ä².é®aÛ CÀ0 rG›Â΂y ¼æ3f̀H.<ʽ…¨?‹#æ\8¹‘zÙe—ⲿóVxđ_¼y¸àÀ¥Tч ½<\ª¬d±Ë¢ù7 aÊêÁ]V ±Ê–,Öɉ2£ ~úS”6¬ç̉)¯´A¬ŸñFƠ<lgÍÍXF¾ẸWḍ–ƠrệYßk²v§]Ô₫3Ư#l&á|ÖưM4‰ư£lœUá–©¬\́ă¢{(•úä¢MV†!`äO©$ÊwŒô}èÑ"(đÑ;2 ”W}¨€GASu(¡±ƒÈO…%»W¢‚ú…^(ăÆrÍE>3‡%Ÿ>@>øM=ÑÁzjW~‘€(“8Á B.ô¶Œ]ÚFôºèwê¨yÂ2Đ3^aÈQAG‹®6ªóƠư|â>jÔ(Ù䩼„ˆ1“1‚? 6ÔW¯ÏØ‚•1‚5 ¢F'ùñă?½6?Ñ£'.w1ĂGï FDÄƯ+Âư¢Ô“'OvD™ |W£BxÆ’ă`„Á¨,ñR©ƠTÏ£cQ¯:&’"FÇBø–K„‡:Z/Ú·ï¾û&Z.†"IxÁ^¢èKÉơôZz^¶ŸtvJ¦ç€¥FËè¶l?R—l¯adž€!`å‚ă6óœ<|̣I™SàYƯ&aÖ:¾—K{]ORúd‚P–΂£ZVï©G^%´'%¼Ú˜ăh²Ö¬02¯¿è¢‹ä¯¾sü %Û7Cà‡DƯåă‘̉&Á‘)q/†X˜TH‹Â†gsƯºu¢4â¹íÓ§̉àφ\“q#ŒyøŒ ư«®Í£ûøM$a@a÷(Ä AÁуDé°MÄƠ…m…¬Of¶Í0‹ÎèF£sctш¾í·ß>aF#đ=jtDi@—ˆ°†a<ˆ ºRÖ>¡0÷»à‚ d́ñ9Wj8‚3.)C̃jDËà;ư-ôÀQA¯‹~AKßœ­h”Hºă‰Ta~F{qWƒQx|X/ÅK©À8öa£ 9rîóÀr—Ê\•åè®@÷À¤ oÈt<¸QN½|}ơ(üƠX– Y@IDAT¡eñɃŒ5Đ'ñªáÁA‡±ƠV[Ơ0†p^œ>á:_ƯsÏ='–F¾‡tQxpE Ó¥K—´}„b)2×\Hœa(åZ†€!`†€!àĸ§“OÂ'“]x 1aßrË- ¢:"@Î6̣y D „ܹu,ªäW¼éêëŒRÄ¡Hó¨b)Ö³Xu"‚›H0åÇ&ê¾hñ&†@C@‘¤{P8±̃ÅŒ $ËY¦EÅ8=#?Q¹’†^‚#ôîƠúÁê€ñ<œƠĐ̀ơ¡^QtxmÅp„N=D&Jx^]¿sψ(A¸&̃̉ŬO]ëodž@~  Oˆ óÅ8‡đèqü&Z¢Q£F² ¼ON.ư ă}&å0OCg¨Æ®«ûqÎV§°|øDEP~TpZ€ËXDƒÅ‹»Ñ£G ëÍ̃{ï,£:Ơq‚¡…̣£‚^c‚¡".âCÏÁ¨í“ ‹₫–môá?₫¸Đ‚é1ú©Q2üæ;fœÂ?æm>ø 8pơW-úaôÄ8£'FÂ(Å2êp/–Ù?3|¤¹aDWđà&‹ơ,Ư/qº+Γ#î’XxYÊKWfܹlËÑÀÂDó|.ÅK„ßCJ,Ù™Å?”#ÚqàíQ×:§»D¦¶¤;Ƕ†€!`†@f˜g\yå•’ N¼iá……÷•9RUf.Åö†åÅ(‚Çœæ•,jøˆ*+¡Í„̣ă5‡/Êw\ íkhèÈù‡Âï( ̉Á£ÛÄh¬'I, ă“#Ăíáw”]j<à»ôÖá8)F½„u}>rMÚ¤ăëƯh›©/‰ë$¬}“ö»D@G°À1*₫̣IÛÇ=S#?2èa¢’ïú {CÀ( èăÔhÖˆ¾ Ưh¶‚a&¶`ư¢ù=0́¶nƯẒ:¡Ä§Ÿa¿ê8q̀>ăŒ3j\*“ѹùĐiBEßL®" ÑÓ6Dè§(aî”.b„u† ¢q>×ă0„@Ÿ« ­ ˜†Ûˆ‰æZ:ơÔS]O}¥Ñz.Ÿè‡Ñ#`7Û뉣ßs”Kv–ñ?3|¤¹yêĂ=TJÚ1öă?nĐ=Í14Vœ!PÖđƠEBƒQzôs •0ÏzYúG’¡#\ăÄ1Ç#¿1¿óÎ;ɈúJú¿lư(¹„I<®BÊœCÂ-·Ü’³ù}ˆ•^‹Or‹@³ªQ÷ä ™;wṇô¶µ3 íf<¤íqŒü‘:¡‘0°€1†%>•>‹cBJ,~—³˜á£DîTQ„¶f¼)xéYdÔƠƒƒÉÑ+tYL´ ¬€;ï¼ś¥yØ™àÅÉ'Ÿ|’,#ÓqqçÚ6CÀ(xÄ1È3ø†@e#€B‚Pf̣v°0@Y9a·dÉñ*̣íV6¹mƯđáĂEá‹'×½÷̃[#OZn¯V¥UrÄ+ÅâĐÜÄ#@‚±ƒơ æă;Ñø£m«!Öûï¿ÊAµÑ\q0 ¶®]»&ÏC²sñFNeAÂ[]'O¬Ă—†^GGMÄ®Ærg¢°6lXÚĐ&̣nBQ‰ 7 ‚́ø &`&®«"3Z‰¸óQ¡@ƒ%amW2uaL„NS%ZƯ^ŸOt´ûÍ8Œ’PǦú”iç†Àèă4Ú£‚:Jo8bĂ7úŒÎèr)Đk̉/"èIï»ï>¡¼"ïÿ/~ñ‹¤₫’ưsæ̀qË–-“y8XuYÛ¨csY³fIÿAơᇖ~­yóæY5/Œ”₫ ăD\¾ úMÚ¤ÂoŒ!äEA0&³† sZé±|RîYg%:̃t¹–H—Í–âÊyŒ…Y¹~ưz›h7=¼¸RÄ %x'¡M ‰ “ ¼ª˜ôđbÇMB¢çèo$Ê-GÇ0räHÇuh̉y„đrñ’Ä åè‹Á$NC¸âµm†€!P\>ÿüsñ̀êر£ dxa1ø5Äë­¸-²«†@m̀Ÿ?_ä`̉ çíêƠ«%1q.<²j»~%ïGéKX<2jÔ¨¯âJn·*—*1âƒûF̃¾c=VæØ–ë#󓌢vÅ¢tD K´̀M7ƯT§ơIæ+Ø̃JC@Ç”C¡’‡vB‘¢J¾«‚¿6  UIGEÂ5ˆ’@)eV (Ñ2 k[úUjƠ÷”ƒBJæåQª+đA §}œ ôg ¯ |£Ç€ó|Œ¶|WÑzs¾zIë¾đ“ăP8F#Û£ûñNfŒ£¹¢ŒtơA©‡§q&!ïF*m‘,˜dÉ¡è³n³ï†€!PwèßZ¶l)'¾÷̃{„ßé„èÍ Aÿ‹L]ŒéÊƠ¾†̣ˆ4f>öÚk¯ =kö£́gÿûï¿/Œ(ë5r7]Ùávô© Uøh Æ¡° èJ4¹¹÷‰S¹êFĂư`¤Ænr‰ ÏÍF¸PUaÈAh'ÑÈjd¢ÏÓ1 Ư1íÓ³húÜ6mÚû^ư0zb/s¸Ù?R^¡®$ú̃Ÿi£í3^\åB aăDsÀÍÆwr„ƒ=ôTXùÔ Âƒ®€lêÈñĐ0"F§ÁBgÁKÅ„&Nx±8–É^¢*¡A„—Q­ÂºŸO¶ĂđÚÑï¥T—hỨ·!/˜¬ÀùØc¹çŸ>…’‰ƒo8°ç«”‹7ÅË/¿́N>ùd¹n>¯eeƠï₫ưû» ˆq“±¦:˜“B¼LYX5Ç⬫E*ƯđÁ}ăÇ’ÖC=S›‚®Zî}\;Y4£¤EQ€CÔƠW_-JW’Ÿ³–21Ö­x—Æ)f8E7¶üÅ ëP¸Î£¢å̉£ ƒÊ ƒÆÙm·Ư6y8̃¬( 0f Äg₫ËsË_:á&B’¿Pê{Í° Öß .<4›ơ8ø0gFXGG“år ”^œEí¥¼‹Đ¿„½ʼt¸sLmû)7?EËæÚŒ‡:u’úÀ₫Ô‡H¸ú°ÿ¢‹.’?-'úI¿‹ÓQ¡\ô&Đ²Đ.îi:]Fô\<Øq\àB5•h™RÑYDëk¿ B#@îîPZb }àdưzà]b®D®@„~‚¨ƒ\‰–RblƠè@¥Ă 3u1,POúÆHWoô³Đ#ôqzOö1> 80%*ƒ̣aÚQŒ¨jÙ ˜3Ÿ"§ ‚³ 3ïb¢/e‡Îª*"TN?ưô”â_}ơU‰f&â‘~œ~S…2èkÑçb8ỵÉ'eư:†Pÿ«ç”ë§E|¤¹sÓ§ON7¼<2ư‚tƯu×%-oi«u3![j±ă¡„Ă‘—……5ƒ4eÅ®»îZk™ÑúơëWc̣D"ÎLeñb31AaÂÄ .^>^j¬|x{ï½·|'U¼<ÔưCYBÇXh)¥ººív½êD@W¼¯(÷Úk/Ç{Ï Æ ‡±£OŸ>’C*‡|>PÀ4H¼h¡# o¥31 Ü#@À;Æû?õ»®×ij%uÀø‚̣z¡´WÅ=óơÑ£G l(ÙPÎÇ ×fO`œ%Q\ÅâÎÍÇ6ê£$ơA¯~!ßơ¡ïÁ`¦ØeÓ.¼²18  º]=̣È#zPC @Ù ĂŒ*øQèă¸HÆVæ8V² ‡* äÄÈ•Đ_·hÑ"¥8úD”ưHmûSNLóƒ~4́§˜Ûñ@_M”‘äDT§q ÎlG·ê)¾gÓîƯ»; íî¹çéÙO?Ÿ„¡"[a| 94¾3†h>Œ¶cÆŒ‘âÖ®]+;ZêƒC c"ºúË&̃½>ÆuôE¡Đ£'®(ñ7̀äG¼gdÂßø„¿ÁuúóOâÅ_”RÂ2|TD®5đ=ï¼ó>4K®ñôÓO'÷{‰„}Êxmß%<Í•œă_¼„7ÊÈña’F¾„Çk=ÿg¿Ø)Gú…JÂOX2ÖCÏ÷“›„Ï9’r¾ÖI 뜟°néÚâă? ïu(×MW&;3Ơ%¥̉öĂ(S¼1Rúo\HxOº„Ÿ¤¼»ûí·_Âs'¼‡@Ẩk¥çM ><á'%Éúø;áëﻉ!`äï!8á„’}ưÁă?đÈÜ^¨ÊKó dŸæ½àª ïM–l;ß+YÆ'mơ{‡êp£½¡(á• ¿XOxÅIÂ+vëp¶jT62%á¥oáñä”₫…ư^)Ÿ́g==WeR¤Öù¼D Í—8øàƒ^™ÄƯ…Wª&¼wuâöÛoOxEb‘jh—5‹úÁ'x"åƯPƯ^Ü':Ltu¡x§é„ •2âöśK/½”đF[9½]TGđ̀3Ï$ëàó6%FŒ^".Uëă#̃A;e??ô¯øOøÈ´û}NŒD=’åhy™>Ñi ‹ ëŸéxöyuÂGŒ'¯›=Ø;“§èg=ƠhÂÓgÉîlëïièâD1̉6p,ăQ%‰E|ø»«Rß<XC±>"Ù”'¦†ÍcÅSÁú†g6Ükq ₫…” ¥À Ï ë åE?±h†‘%xà­–=¯·.]ºH‚¸è>¨đểhƯ?uêTñ´ÑßÔMÛƒ¥‘zD%¬ƒŸ„$ñ Ă;Fù; Ÿ¥,$Ä®?½û2Ơ…ư&†@9"€§Wh%/%<đƒÚw‰>FBåáó‡oBäáÁC–¨0¢Ië$é)^h¼‹~±'$q}@9̃«³!P àa·Ÿ4Ë‚>ϨåH@‰¥Pßr®`Đ‘"xBU÷m6÷Ei®èĂI\É‚Ç^…păl’ç{®ĐcÅ7;̃ßJ] v”!P¹„^¡$ ¹ég êÙ³§°?0n#¬iÓạ̊¨\„ Ó2¼®ñ˜†6†qmÆŒîw¿ûàÏ:Æ+|%× 5è9đt÷ ؘÂÔÔ®bÖ­ZµrĐ$1§ôpDA3Î£Ë ½û3 :Qt£*¡NmĐn¡D”ÚJ~üøèô û‰6–Iÿ‹^2*M|TVĐơE…ú_|ñÅÁF]PfT¯BÄ›&#ËAg ›ưJHÅv¢Vtœè:Ó 9ƠĐ稄QÔÿ–[n†Ư~j¸GªK ÷óz 'F8=ê·ecüû¬8Đk9=>û́3 ¡bBÄSư i¬÷ü–°}ï-¡[,Ú  E%Ü¡/¼đ‚„KAkÅ‹È‚ŸÉơAÙÊ„,đXA‹…đ‚SÑYJuI‡—m7jCÊ,¸8C®]̃É>”÷–Ÿ‰G¡ß9”¯sçΕ¤‹„Z"Ê%!ô|µM|jk¿í7 `Ü€’Õ90\(0pÀ@Ñà#hÜù矟‹â­ C ¬`] ]´*ëâĂÚ|üøñöÎÄ“ÇmĐ`‘„ºÖZĐ« èD‚ƒê)§œ"4ää11ªt€C‰ö¢—„̣”w RÖ̀]Đ‘̉Nô(è. =UcûÁơôX`Àúë́³Ï–ü>bE ¤£zSúrp ù|^èĂĐĂϹ:!₫´ é®!¥wï̃¢ÿÅY–¼.´½’$>£u%µ°LÛÂÀÉêWŸfñ²b̀à…Fx˜£Fh¹pĂñr£XÅ™­09È…¡&Ûëe:®”ê’©¶Ïˆ"À Id_Ñääx+yZI`EÂ+gơB 8x>ñp€Ô‡EJÄÆ”F•î\h¼íz†|ûí·’_ ¥,“\Ær< ä¾5¤r‹€§îå7^÷̃{oƠ=@S#>*9¿GøÔ å#sç•+WJäd¸ß¾Ç#€ÂïDOàÈíåiuÅ@‹„hÔJQ’Ä·̃¶™`®N’wæËD̀œ9SU¼7ô­$¦…;?äÏ\¢íÍ̀¥đrçư‡§‘6Öb¿áí÷Tæ̣‡"OuŒ Ü/K«»`å”"è‰~2½”b]ë['ú`"4 #Zûă"FÂăĐ·ÖUoßĐïôaôEuß™ë"”QiFÚe†P¨páäE…jF=ô•bQbb¥ƒFÏá(FóçÏO´†DZ1¹fQ½S1c̀°aĂÄ;ˆú^½z‰–³†˜bâa×6 JD®ÿô§?I”}ÁĉF.à£đ¸á†ä ̀ŸH†ZRm†=÷ÜS(Hx{ë­·Á«ï{}Û ED~Î5K¢gP$̣ÄÎ&†@5#€đˆ#¿jÆ¡TÛÎư!*ç²Ë.“?Ø8˜ ²dÉ÷ñÇ‹¢e!k!ú;¢î¡*Ăó;׬¥“ƠË0ÊôÄ̀ËĐ#QJ­̣mYÍ›á£&&µ…\ À„m†ÂD ₫]CÀ(.>á¸x’¢XÁØAx%^F*>9¹L¤1vpÀ5ø$ơ¸B~®ZµÊùäbnÑ¢EBi‡4aLü›6mZp­B¶Ư®e ¯¾úJ8©ñÅĐH”×u×]'¡Éµ…0«Î•p]ŸˆPø×é—[¶léú÷ï_ ͪWÔđ¾Z„ÈEÆgÂ₫É¥cÔ&u»óxGN™2ÅÁ•§>†̣¦@›VMÏQƯP³£ C ÔÀE8̀Á †¡?c-ĺÈ'rå! DÁ0~à¬5ô˜&†€!`” D̉wi₫­úaôÄ•(fø¨Ä»´ : ́P<đÀpSÊw÷Xÿ¥ºJ9À~†@ƒÀ ùÜsÏI¾*äï Ú!1ÉÉÛ¶m+9;đ6*Zˆ5kÖHơûî»O8.‰è`ROs’`Yå=v²!Œ¢(ÜQ̉W0Q…檉Ohg‘UiaËÉ’6B;Hƻª »jø¨ª+ Œ]P½’³‚Ȫ0¹dN°*(Ă,ư¹aHà 'v Ÿ— Ệ™†€!PNàđ…3Đ`~ú駢D$äÙgŸZñ… :₫XĂaø`̃Æé°Ă+:đrÂÜêj”"ä4æư/7A?Œ8ôĂùn¯”ï–ܼRîdv`Ä@±Jƒ4Ñ»́²K­T(4È?? \ó&M°m6²Dà³Ï>KIN± A(™œ\ë÷‰4Ó¦MsZoŒ3#G#ơq¨Ù6C á@¥€ÂpÁ‚âÄ@‚º±cÇJ̉`Æt“ü"€¡£{÷îr<₫ñô¬f÷˜„‰‹/vä–ª …=p‹M3Y®¸ăTE®”N:I¾Œ‰Dƒt́ر\›dơ6 C ̣®A‰„±2]‚tŒ ÇwœE¦ g? ̣B†¤ˆÄ‡©£':Ö˜D­ÁF.zbtR•*fø¨Ô;kí2 ¢#€ÁQ““/[¶L"¨´R¥’œ\ë÷ µÎäɓųœ¤W̃MPZ18ZâÅ8Ôl›!Đp˜Î˜1Ă 2D"ˆê I0‰1~˜ä1Í5coï̃½+Ú *4YÑçól¢Èº¨ZEy«pÂçÁ¤~đü07:묳ÜK/½$ÏxL4È¢×ê©e%῭%pB%úƒHèe 9ĂHκ9G©Dù—(¤V-CÀ0ê…€>ê›d†@MXĐ¿₫úëÉää$*©æJ-9yÍü°…Iù́Ù³EÉ7í‚r ÅÄ9çœSÑ̃é0±í†@¡ â’äåO?ư´äûÙm·ƯÜ„ Ü 'œ`trº (+9æQR@Q±zơj·é¦›èê¥yK5vä϶j’k®¹Fr[A{ơÖ[oUSÓó̉V+0 Aă‡̣¯K—.n̉¤IF“´­PCÀ(₫₫÷¿K‚ô?₫ñî‰'k­×O~̣I„hK®Èا!` GÀ  ÇĐJ0 *F€ää+V¬o|°,’“§»]xôÎ;W”;ëÖ­“\?7vưúơs\pAƠ)º̉ádÛ | Àû¥Üơ×_ïX“3碋.₫h’j«¯¾ZÇ£ÅC̀j—'Ÿ|Rè­ {‚îªÚÊGrêà̀PmT_ùº×D̉AzóÍ7‹—3>rˆA³kb†@%#Àœé?üp2A:ÛT œÁ#ȉ'h ̉û4 C ˜á£ Ù)†€!PƯçB““?úè£5’““¬³““§»kDtÀE Ư+(và̃₫ưïï.»́2¯»‰!`ä’ưbäà|èđ~¦/1ÚƒüáW2†” D}Œ3Æ 0 î°ªÛ6}út׫W/¡;\µjUƠµŸ“ï…¼/P’@cỉpPôƯyç®oß¾G"jæ̀™ăöƯw߆n%†@Ơ!đƯwß9̣*’Ó´\„uu†‹h¤‡̀‰¼×é‡~¸EÇ•Ë͵z†@I `†’¸ V CÀ(u˜–Œg¯ä›z—zṛLØbÀÂcụ̀å’ܶôèÑĂ óĐçáÜ5jÔ(YÏUDŸ%rÀ!%ù¦‡Tp!béüY‚tEÆ> C Ú0ĂGµ?Ö~C Ê ÚA““£ĐÀ«ï•ưöÛÏzê©îôÓOns’Ư–£˜•ÄÉÓ¦MK̉tuÔQơqä‘GµoªƠ¹́˜?¾ëß¿¿û裄¶¾æÛn»Í5ñI“V®x·óĂ?”¼*P]a€:ujñ*S¢W†_ü½÷̃“ü ;v,ÑZæ¿ZäÀÚu×]åF!?hĐ ü_´Ê®đÍ7߸~ưú‰qg úÉÙ³g»-¶Ø¢Ê°æåzœ;n¾ùfÉKqÆgHT‘óù”J7€€ăNz<̣ˆDđ¿̣Ê+âP£¸B™J41F6mÚHD¿î³OCÀ0ª 3|TÓƯ¶¶†€ €r‹Äqäë ©÷çŸäNe‘]nÉÉ3ƯV¼Ë'O,ÊƠ/¾øB=à€„¯è7̃8Óé¶Ï0r€y<0®²PÅ#óرBëR®ÆÔÀRE`è&™9ô{́±‡[½zµÛtÓMK¢n¥T 0!Jđ…^p‡vX)U­àu7nœ¼Ï;í´“ƒÓ"%s  ÆÁYïp¢q›7o.¼ư;ï¼sî/f%†@^ÀøA(̃iœ<<đ@7kÖ,·Ï>ûäơº^ ÚI?Éz:,₫yæ™Øé8óa±é fbƠ‚€>ªåN[; *GàÓO?M&'_²dI2êXÊ99yºÛJ̉d<$o¼ñFG´bøà×¢E I¦Œbߤ&${ïĐ¡ƒÛe—]„Ú©æƠ·åƯwßÆ^̣„rÈ!ƠBZ Ƽ§gu–{饗$OưéàÁƒ-7Rî]ÆȼÏD2/‚rx“M6qäư úƒuK¡¤ -óŸ§zJ¤“t¼s* ơ²&H/ä}Ñzا!`¹DÀ ¹DÓÊ2 ‚#€÷é‹/¾(‰Ưˆ́ I-•JIN®í‰û|î¹çD©y¨»đ¦B)¹%MCͶ¹Gàå—_v]t‘ă“~¨Y³fn̉¤Iâ-õs¹Ç»!%vé̉ÅƯsÏ=¢hÁX í†I<·Ür‹»ụ̈ËƯ±Ç+¼áñGUßÖ¶mÛºG}Ô}öÙî̃{ï­> Übr–ơîƯÛÍŸ?_¨éx‡é_Qœ†@y!P̀¼!RƠlMÎXF4HºéBH¾ç{†đÙwCÀ0Ê3|”Åm²J†@ˆ*$mÓää$íƃÁ»º’’“‡í~_µj•»öÚkƯâÅ‹…~„Pe¼r¯¾új×´iSg̃ËQÄ́·!  ¸îºëÜm·Ưæ¾ÿ₫{‰&»â+„: C¤Ii!p×]w¹îƯ»K¥ˆfhß¾}iU°Äjs饗ʳƯ­[7wçw–XíWh́?₫xQ‘°ă;¯2UreúW¢= ¦Ă˜Œ1î¾ûîsÛm·]• `Í4*¸¼·ß~»Ă¨\h©vx³–&A:¨¢—.]6A:†¨+‰=¡ĐÏœ]Ï0 ‡€> ‡µ]É0€€&''ªƒää_ưu²´JLNl\̀—5kÖHrd’|’\•ˆ& Ađ07₫ơĐl“!'  —9=ˆ̣€Fʆ}÷Ư׌y¼!ÅH?‰ïñ©S§6¤¸ª8÷w¿û[°`:t¨$‚¯FgÙÈ}öÙG’Æ^yå•Bo—åivX@A‰ªœÿûßB9F’yú\CÀ(/È?#‘ê÷. îň”5ȆçĂÔ /¼ ”X$Hç₫¨£!kỌF¶jƠJÔ[‚ô ¸Ù7CÀ(=̀đQz÷Äjd?"đ̃{ïÉdK““Ck¥²í¶ÛJ’`̣u´nƯZ&_•Né'.¹î¸ăQÚÅQG%‰̀<̣H·ÑF)<öiyFÚ•«®ºÊÍœ9S(æXơ2ỮÅ<ƒ_ÏâQ°̀œdÔ{́±‡$YƯtÓMëYZơœvĐA ưÅ´iÓ\¯^½ª§áY´”÷ÿ¼óÎsÛl³đ¤›÷k åà̃e"n:wî,É;́°ƒC˜†@y!P*y?BỒ¢±!AºRb-[¶¬F‚ô}úˆÑ£Q£FéNµí†€!'HZ1|̣,ÆwÛm77aÂÉ1„‚ͤôè̉¥‹»ç{„jáơ×_j¢̉¯uiÔđÉ'ŸE₫Ö[oí¾ụ̈Ë̉¨T Ö¢[·nîøƒĐOâñjRxHt~ë­·Jî%”oÍ›7wóæÍs;ï¼sá+cW4 !À;ŒQ¹oß¾â(·É&›¸3Î8ĂMœ8±$h“̀’Ưí…Ùˆ[ÆÅ… ¦M!„DéPG†€!k̀đ‘kD­p¡*,@ k=ưôÓƯÑGm¡­xPGŒ!ô†ÈбcG7tèP×´iS£cчÇ> "đ̣Ë/»‹.ºÈñI¿Ö¬Y37ỉ$QÙ"¬€7¢—úđĂå̃AuƠ«W/7mÚ´–X}§cècŒjÛ¶­xƯVÙ·˜2Ï?ÿ¼Dỉ_˜ú́•+WºN:‰’ÈÙ)S¦Èܪ85²«†@C(Ơ¼a›̀¢‘ƯwæfDSk‚ṭ|ªh‚ôO C >˜á£>¨Ù9†€!De=ÑäëàÏ’“'¡Éø̃ṭà‰øƯw߉—(.D} d5 ŒđÙNC /|ûí·îºë®s·Ưv›û₫ûïÅ8KÔƠ€QX&僅(¢¡XØc=Ñ ›nºiù4 Djzî¹çºÙ³gK´o&éÀ჈"ú?₫¸$èX̉׶²÷@“ƒáăÇK/½ä6̃xc™_ ²AÉ1 ÔCC¡ª–œ<Œ?à«…>ç;îpàˆưríµ×Ê„n£6Êx¾í4 ü @î!ryÓãK¸¤÷Ưw_‹¼Êäy-uØ°anäÈ‘E‡ñă ƒÊëơ*µđă?^<2GíX©Í̀I»PǗºë®î£>džAƒå¤\+¤₫|ơƠW®wï̃n₫üù̉ï‡ḥ˜†@y!Pêy?B4Í¢Q·ïÜgMdé̉¥5¤“oO¤cÁ0bb†@:̀đ‘Ûn)œ|ñâÅÂLXª%'O§Ö,¾Yl?>9yƒÇå<¦x#†@áàƯ¼êª«Ǜ™3Å»́—¿ü¥D} ,3CdáïG.®ˆ¡ƒhùdg ̉s‡½•d”"fø(Å»bu2̣€‹<‚=ôĐC¢ø ù0QĐ₫Ù®];™₫oœèÙß„W^yÅ1B&WxÅÓ±cGñ*oÚ´©a™=”v¤!sXT7Î5ʱ0ÆÈg QY[n¹eίg YĐ,Y²Ä±…²qÓM7-|E*́¼7P‘ ú™g©°Öå·9(Ô[µj%ọ́ÍMX~ñ®Oé̀ƒ¡1c†Œ «ÈÉfT¤ơAÓÎ1@¹åư3HˆFî¿k‚t>ч¼ùæ›5¤wÜq2—$ä׿₫uî+a%†@Ñ0ĂGÑ · ùG`Í5Éää/¾ø¢³ää¹Å|¡È!)‰L‰è@ùFÔG³fÍ̀‹<·p[i†@xùå—ƯE]äø„â„÷r̉¤IîĐC5Ï̃:£Yº'ÜpĂ îÚk¯•{LN…ƒ:¨t+[F5»́²ËÜ­·̃*ñwƯuWƠ¼4ªJmè”®¼̣J1¼–F­¬!̀‹yƯºê*Q‚5õÜÍ›7Ïí¼óÎáaöƯ0ʸ¼Đ›2ưô§?-ùV˜$ÿ·ˆg„(a(±ø[¶lYé¬4A:ă‚E†çÿ¾Ø |"`†|¢keFÅ̃[o½åà6'i/ nø.UXÈÎI¾£>ÚÁuiRw R¹å–[$W´ax¢x#TÚCÀ(ß~û­»îºëÜm·Ưæ¾ÿ₫{éë œ0`€PĐ¯fvå\#°råJINL4‘wW_}u®/Qµåµoß̃=øàƒnÈ!̣>U-ơl8‘矾Ûf›mÜG}ds®zâ˜ïÓ˜' Ư³gOQ~1W&_rCÀ(?Ê5ïGˆ´@B4̣ûµưôÓIÇGj€ÎE¤ă‰#Î&›lR˜ÊÙU C N˜á£NpÙÁ†@ñ@ùÀ€K8> \Q̣1 #PV©±aKÑđ{E4 ù;PZ¬[·NŒK7Ø^½zỲ†Cl%9A`₫üù’„:úE’ÔÂÛ¾Ë.»˜Â*'—^!PÑœw̃y’_éÎ;ï#ô₫ç–^EË´F(YPụ̈>¡°7¯ÆúƯHSè‡đ"]¼x±xˆÖ¯$;«P0¿Æ`θBŸ̉¥KÉ e ­BƯ»![Ê=ïGˆ†@B4 ûéäLƠéo¼ñFRƒqg‘ă?^(±Z´há~ơ«_¶‚v5CÀH‹€>̉Bc; â#đÁÈBcÇ̣åËSo†́±ÇJTG›6md°5cGnî”xvàéǤ…x_xá…®_¿~®Q£F¹¹•b B¥bÿ₫ư%§ïé;́àÆë:tè «n'—,$¥„Ú|KƯ»ww“'O¶ü 9¾[kÖ¬q{”º~ưz·å–[æø ƠS\×®]ƯƯwß-”˜(LLJ¼Ä¯¹æ‰ôÅ«—ùö}÷Ưç¶Ûn»̉¯¼ƠĐ0j €Ÿ9Cß¾}ƯĂ?,ù伜4i’¬ñjœPầRܤ ̉Ó¡Åz₫ùçSô4°Aư”SNqèi g,11 â `†âànW5bĐää  ;^{í5ÇâKeÇwt­Zµ’ää,ÂPÆ›ägŸ}V»Đ¦0©dârî¹ç Ơ\ƯFw[¼­4C ¾@ơ‡WîgŸ}&ïe·nƯÜ7̃(Æú–iç•>,6YHùؤI¡}Äàe’[À÷„Nyđ&ơG`Å•Ëüáw̃I”ê_¢Y˜M†¢”`¢ˆ&_”‰!`”'•÷#D̃ !ÅûNιE‹‰ăä̉¥K…†\kó³Ÿừí´ÓNâüp̣É'»£:ÊX#û4 „€> ´]ÆH‡€&'ôÑGÅå½÷̃KINÇå‰'(ÆÂen’{^yå7bĉ°!”zƒ;:ø¹ÉçaÑ4¹ÇÜJ4‚À1Ç#yṽygwûí·‹’–Å…Ie#pĂ 7¸k¯½V¨á]†SÙ¼èrÏÉ••X³fÍÜ«¯¾û TY‰<§Ë–-s}úôă*k~Ù6C+4³;wvûÛßÄ°1„¤¶&†€!PTJ̃}3€„h÷û÷ß/Ϋ°G@q‰#+÷G…ZŒAp0!«‰!`ä3|ä_+ƯȈÀÊ•+ƯÅ_́Pº³¸BPàpÀâÑÚ®];ñ0ƒgÛ$?@ç—8^|ß}÷x“'>¦HÍîVª!ĐPV¯^- ÙöíÛ»-¶Ø¢¡ÅÙùe€c& G<61~tØÆÇüÜ8¨Á˜|9DW™4 ̣Eœyæ™E EŸÉ6 ÏBM46‘:P(̣¹Ùf›¹›o¾Ù]pÁ…¬†]Ë0rˆëîU«V¹=z¸·ß~[<đ‡*yËٙ 9|HrPÏk@”+Œ¢Ưh£Ü^{í%z¤tĐAFƯÜ­C €>¢ˆØoC €œuÈ!î“O>IIN}‡)Üó{#P<Œ7ÎMŸ>ƯàA²/ K’›_ü­tCÀ0ê‚ư4^óo¾ù¦ä÷€WyóÍ7¯KvlèÙ³§›5k–»è¢‹$¢ª§Ú¡1ƒˆ$ç̀=nºé&7hĐ ˜£lS)#À\|-O=ơ”CY…ă36_/å»fu3̉#Piy?–$D£t¾3—%A:Ñ D-ă€Ésˆ`p;äCÜÔ©S%'HéÔÚjb”?fø(ÿ{h-(cđ I+!¿üå/N©÷/‹‰'º &¸/¾øB®H„Í°aĂ„{Ó¼‡ ṕ†€!`Ô¼«QÄC÷H&<ä,çRA¬ĂáäCÁkJú:€VË¡cÇu ®ï÷ßßæµàU»¿ùæñÇiƒQôK̀áM C <¨´¼á]0HˆFi}ç̃¬]»ÖáȳpáB1ˆàü }oË–-K«²VC ̀0ĂG™ß@«¾!`d‡À·ß~ëà,=z´„œâ]Aî¨RÎ>ûl¡ŸÈ®$;Ê0 C @EHt„đëÓg[T^~ï@Ó¦MeA~ß}÷¹³Î:+¿«’̉q¼ Á)Ï1Ï4yÄLÊróƯzë­îª«®OƯæÍ›»yóæ9̣M™†@y"P‰y?Â;ảû^‚¹5*½ Z 2GÀ e~­ú†€!¨(®»î:·nƯ:IˆÛ¸qcñØëƠ«—yée†Ïö†€!PTˆ<âˆ#Ä`Ư½{w7ỵdă?.À!Ë—/ü pɪ¸ôHxs~øá¹T®ÀFB]öĐC‰A–(ŒĐ×zè¡ØZk’!PTj̃đî™$DĂ¾†@µ `†j¹ÓÖNC Ê %ü™ä́xă7‹T’‰^xá…®_¿~æMQeσ5×0Ê”§œr[²d‰#üÙ²en‡v(¿†”Y?ÿüs·ưöÛK­?úè#÷ë_ÿº̀ZPºƠ}÷ƯwƯ>û́#‘+V¬>ï̉­­Ơ,̀3W®\é:uê$´µ̀1§L™b‘<™@³}†@‰#PÉy?BèÍ¢aß C ̉øI¥7ĐÚgƠ‡À³Ï>ë;î8wæ™gºƠ«WKJ´¾öÚknäÈ‘fô¨¾GÂZleˆÔ„Ï<óŒä¿‚SßÂÿ s‰²A~̣“Ÿ˜¡)Ç“›æä“O–R¡K2)_x?ˆđ :øàƒƯúơë]·nƯÜ 7ÜLV[¾­³Ơ‰¹Ă0öC«9pà@‡àp'x¢{ûí·+èBé¿hyÓÚ¶m+N‚}i'@IDAT$ܦ­mÚ´qK—.­˜öZC C º0ĂGußk½!PQ¼̣Ê+®]»v2YĂøœsÎ9nƠªUnüøñ­mÉp+ê–[c C BÀ“ÄÚÿú׿ÜĐ¡C…è§?ưi…¶¶´¥†ßüæ7–€;·æ̉K/•RÉ ñ׿₫5W°" …sÊ]vÙÅ-Z´Èµoß^ú«k®¹Æw̃yœ&†€!Pụ̈—¿t#FŒpwß}·Û|óÍƯK/½$Gy¤<”¦ÖfIŒm6 BÀ u;­1†@u"°fÍwî¹çºc9Æ1!%¯Çi§æ^xá7{öl·ç{çju¢c­6 C ¼øÇ?₫áÈÁôơ×_»£:Jr2m¼ñÆåƠˆ2®mhø(ăf”lƠ?₫x·÷̃{‹wíĉK¶V±́Øzë­EA:xđ`ñ¿ë®»„¦Ú8CÀ(O6ÙdסC·xñb鳡~$ªk̀˜1*ÎJ3€T̉Ư´¶†@3|D±ß†€!P6|üñÇ®ÿ₫B1€ă»ï¾ăÇSO=åæÏŸï7oñªes7­¢†€!`ü€ôï¼óÛb‹-Ü´iÓ‰¶M ‡€>̣‹5Q̀]ïï¿ÿ>¿´̉ ‚JRèTï¸ă™{BÓ²eK÷Ö[oäúvCÀÈ=DtĐAbü€Uàïÿ»6l˜ë̉¥‹ĐÛå₫Å-Ñ ÅÅß®nùAÀ ùÁƠJ5 <"đƠW_IøñèÆçđ>à€Ü‚ ܤ,4™¸™†€!`”sæ̀Ïixµo»í6·ûî»;£(,́=4ĂG₫ñîܹ³#JàË/¿tøẶA»BA`îỊ£>ê¶ÙfÉ ĐªU+™›¤vCÀÈ9̀A4ïÇ Aƒ*6ïGœ@B4́»!`”;fø(÷;hơ7ªo¿ưVru4kÖ̀ >Ü}ñÅn=öp3f̀pË–-s§Ÿ~º3:”*z ¬©†€!PQ p0`€DïA'Å„± ‹Íđ‘̀ñ‹_¸>}úÈ…0đ™TxˆCgF̉s(Í>ưôSÉÿ1eÊ”Êi¤µÄ¨BÈûqíµ×V|̃đÖ$DĂ¾†@¹"đ /åZy«·!`Tä́¸ÿ₫ûƯơ×_ïÖ­[ç₫ßÿû®qăÆBq₫ùç;&¢&†€!`å‹|Ù§œr[²d‰k̉¤‰³wØa‡̣mP×Ü?û́3÷ø㻓N:©Œ[RÚU‡®“ÄØÿ÷ÿ'4*­[·.í [íêŒÀ'Ÿ|âºvíê `Ưh£\ß¾}ƯM7Ưd4¬uF̉N0Jæ+«V­r=zô¨.Ö¡C† ‘u)†ÏJ¢qiû¨Q£Üc=&krú¶-Z¸+®¸BX*¹ưÖ6CÀ(O,â£<ï›ƠÚ¨ 0p<üđĂî°Ăsçw#‰9“Ë¡C‡ºW_}Ơ]~ùåfô¨'Ái•ÉBñ₫ÉO~â¦OŸî5jTéM.Éö¡Ô ùÍo~S’u¬”JẢ©S'iέ·̃Z)ͲvüêW¿r=ôëƠ«—Égüøñ®cÇ’' 8̀¾†@!Pmy?Â[c !öƯ0Ê‹ø(—;eơ4ª `ĐYư÷ÿ·p©B ѳgO·*Êă|¯²Âk‹ÀÊ•+̃î$ …FbđàÁF[X¤»½víZ×´iS¹:ù´¶Új«"Ơ¤:.»bÅ qî`NóÎ;ï¸=÷ܳ:^e­Äèq몫®r-4õÜÍ›7Ïí¼óÎU†„5ר,˜·ư0v́XY›’rÖ¬YnŸ}ö©¬†¦iE€¤Æ6†@I!Pµ†ï¾ûέ_¿^ªÙ̃:vèu6ƯtÓlO©êăđü₫ûïe°ưöÛKˆw&@ôøưë_)p.„rûOú“ûúë¯u„̃ÁøÄ3Ư¥üï{å•W$qùâÅ‹Ï÷H¢<Èç7°‰!/ v$ ¼ÀG_ñ³Ÿư,Ưa¶½È!@Dî¸ăéëk©’í.ÿøÇ?ÜÑGí̃|óMwÄG½̉æ›o^¤ÚØe¡ä!ó–[n)ódC$ÿuÔQnụ̀å’óc̉¤Iù¿ ]¡(0· ú'o¾ùFŒ÷ƯwŸ¾R!»¨!`ä₫óŸÂP@̃¦ÿưßÿ½Ûo¿ƯµmÛ6'å—C!f)‡»´¡<³äŸB6ÙdY×nØ»á÷ơË/¿tNgÖÁq‚~ơ¯ư«ûùÏ.Œ¥:—g-+c2Ñ[¬C3QÔi»h?´n[o½µ`‡m+aÈñQâ'‰]wƯ•ü&uúûưïŸđ ›j„,m›=ÏeÂ+°RöóûØcMbûôÓO§́ûá¹½^ &çüáHøN&î°œn£îZOÏÓ™øàƒrR>ạ̊g’=̃•àøÁToôJœvÚi oIøA7û‚́HC đÎzïËd¿UÛøpå•W&¼§W=¯V§it|`›§¬œù4 «ăYH×Ễ½{'üb"á퉷ß~»Æó’î<ÛfÎœ)ïæoûÛü\ÀJ­€÷ǜ™ÿø(›ûmCå Àø÷ /$<œÜs¯DJ̀™3§rh-1ª¯DMøèƠ„ôHÎoG`{5‰W*'^|ñÅ„7ú$¼³¢`á•Å Ơ›ÈFTMX«­ŒC‹-’{ĂZ×;%¼³rlu<G̣8đÔă±Ç¡·C§kgôkÑơ_́‰EظlÙ²Äf›m&u=äC2êvŸ₫ùä±´ =è*B­í’ E j]§±lf²́ù;V°vúÎ"v_µmôŸ$²Ç-¶ØB¼Ơ‚Ôo¼±EµÑá5êûLDÛ́ o¿˜ yôû½<́û÷ïï>ø`7{öl‡UƯ–’r₫üùaó¬ß€—}ËaÍUn¸áñh!÷ŒI*ŒxŒÓâ„W¿J]qÖó́³̣`Œ¼ûî»%úö¶Ûns»ï¾{AÆ₫ÊC2w-" ±ü¹Ă´¶’N?ưtñf₫sÇwÔv¸í/cˆZ>ôĐCt®̀{aèÖ­›På0n†@y"À|÷ ƒr0´k×N¨;‡ æºtéRUÑ“èpèăxà¡«&êÏú'xÂx≮M›6né̉¥åy“+¤ÖŒCè½T`>æ4*Ü7ö©|ûí·nƯºu±¯Ûôóoû[RH>ÖfÍ•́|}#zG„5)Ïlœx‰;餓$B“ư0@YÙ£G¸Ăm[‰#Pµ†è}™0a‚(ZŸ|̣I—îï±Çs H¾(Ñ2ªùwh´¨fh;Æ1oá®vjm?Üá#FŒĂƸqăD1zÀ¸ Ȥ±eË–i¢Z · "€1—ü2PáéßG}伧¦,lBcœ́ï½÷^¯X¹§£@;öÛo?™O›6-mÈtå"b-́̀©Pö¢øëĐ¡ƒơù%đh˜á£đ7ñ¤_¿~raèQP6˜T.Œ‡»́²‹ĂQª}ûöBëJN;ïIkÎR•{Û­eU€ï6y(ï¼óNÉI M₫>¢µ ØĐD3€lÀ¢¿A+ï™5¤j-P̣GĂüË/¿œ²{謢uÔ’%Kd3ÔQ8t”³D¬ơÇ_öí*ç{̉Đº›áĂ#xÅW¸3Ï<ÓwÜqÂk ·qÜŸ§brûî»o…´¡7ÀÎ/.ùđ®Â‚®y(đ₫ĐïÅmié\o<Xè‘Û úŒ3dĐe ÔÈŸ̉©µƠ¤Ú`áâĂY%É/‰~ùcÛa‡æ^zé%1Đ5jÔ( QKLMjG€…¡v¯¾úªëر£EtƠYÅA䬧¸rŸ|̣‰Ûm·ƯÜM7Ư$œÀ×Đ2l>sÓÈûo6ö|°8•°«x‰x$&BÙfµ ̃¨$Üæ|Ú ¾ûï¿¿û¯ÿú¯Eâ¸bÅdH+ đ$q:؆¢ụ| B Ă3ˆtmÏKXF9}Ÿûï¿ß]ươÉ0IîƯe—]æÎ?ÿü¬îE9µ×êZ̃@ÍÄ;N˜,̃{ï½îœsÎ%‹¢˜¶ƯvÛ§PJ~̃u¼<éGHfK¤F€LB_LÙ:Fa”§¿£ …>/úH₫טÄr-̃/ú1êÁØ¡ưhx>ßËèËĂă(—ñsè×Q§\ää“OQØ®Í~|ă;cBÿ‰p-úŒĂq†N‡‰~WÇ+˜|Æ/´̣´ưỐ̃}÷]ÙÆm^ºpf®ñÜsωñlé·‡ùKw4Ä₫Ơ 1cƸg<Ơ ÷rúôéÇïz]ÀNª7fø¨7t :%ø¹çë&Nœ(T …M*Ƭ‘#G Í_ß¾}e|%âyîܹâlWùX ÊD€w›y«Ï)+Ô8D|Ư:dÈ¡xf₫[M@V­Z%ô~°©@Å|°E‹âŒLÿg’Đ²&EX“±îb½>—D|¼öÚk)•ÁBS€î‰ơ—ê19W¸̃£lƯÆ])kfÖÂ;í´S²|œcUÇG]8 ú1̃§¨p ë=Ö́' ;l èûØ“‹qëÆhYú;jô@ß7uêTwÄGè!±Ÿè ĐrmŒJ\.´Ï¡(ÖàL£ëye¦¬m3–kß³@À[•âét^ñ-Imê›°Ô,Y®–ϧ§+Kx…[vgÂ9,/úø4á=đ’u ¯¥ßG•đ½\3|t¿~F“µ{e\Â+ábÛ†~"đ^¶”ăï-đƒỌ%™ăĐ¡C“Ïw9¶Ëê\yĐÏ’´Œ÷ÖGw$¼Q¹ÖFêñœsóÍ7'üä.åúM̃ií ÂOoxMx¬Øäo₫óŸ~̉{eXMûêMYZúO’äêµH¶–×ORioÄHø –œGù~̣–đ”_̣Û{ªÉø ăŒ–Í'ă ă Âû®u á;Ûư„WÚ«Çè69ùÇ~Q˜đÆdư£åx¢̀ÂöÓ§3xÓù>d[ê^ïñÇÏØÏÇoß놀wH>#ÇOx‡º`Gçí¯˜Ë™¯Kx#²ô]¼'&Ơƒ€W†$<ƠrÂ;OÈư÷ Ÿ+ z°–sTÉ—đy?äƯöÊÎÄYg•đß mqvÍb cIĐ³Ă*_G1ÏÓ9zLïø’¼”Wº'“•£{óyøKáh2ttm¬¿X¯¡Gä;â$ ô–l÷†Ñéơ3kM}'zOƯưD?ˆNqRÅGQ%|^@9‡úéơ£çzgå„w–ÖÓä3<],ơG¢‰̀ûÛß&XfÖ¿̃0[wÖ̀­[·Nx’bJ=Ñ•Æ zct¯ă₫ÙèQăʱm©`QªJ ¼¼˜u•°ŒèKư½Ê.oÁLyIèx¢J%5b0ḥrDËƠß>L:iÀ€á£Hj4'T̀{+mâƒ>H1|hY™>½§¯(̉Ơ…ˆÎ$Zßl^ØĐÀ‘Îđ‘©ń @Î -+jøđQ4)÷ƒûă­¶)Û(ƒÎN/Ä7Zö¼yóR°  ‰»÷ T±)'–á?ïå!íEë=Úä¾đŒ˜¥„Ϥ2²5|xj„÷Ô•çÛG$|p²I®$ÅÁ;¢_[ÚDùo¾ùf¡"ƯyË—/—₫˜z«!AË ?½LÊ~`Q‰,0è2.ªá#,/Ưw&vÑrÂc½Çô•a}u›ÖÇ{ÿ$¼—L²¤]ô»Q̀BcDX^x½tßĂÅfœaÊç$I©å0i¦m& CĂ î1÷Z f +ƠÎÎ,>ơ½ À¹*ßÊ© Đ܃³Ï>»öƒíˆB€1†ñßG(Ê3ÀÚÇ)CÀ(p:4h8¡ïA?ñÖ[o•ĂØ3€4Àœ. s™$º,-.܇Ñg8Ë86j@ï¨Ôá¾Đđ¡sKưTĂÎÚè;u;Ÿ1₫‡ÛxgĐÍ©„Æ‹đ¸¸ï>j#ÁY%<—z3÷ @”g0Ñóơ3Î`C=»Ăz€Ÿ?Đé>ÖA>ÊE‹K~¢+Ôc9昃Ọ ûRg,LJªHJ ]₫Mûçî$Ưˆ?-V ̣!,ÉO^Ư%—\’¤ïÊÁw r¿K._¯¸‘ß₫…“Đ(¯ê(¸^•æ2 H‰ÿR9o}•4ÎÙn»íä0è=Âp3=Y¥0 ™|ơ¡PY%œ‹ºPOhB QyøᇅƋ°D(QQSïZ’|sú)^^Ù%ám!^W]u•P`iºví*ô2ü¦} .”{HûÀ€³8ª…đ>ÂÑo¸đ9¶A7ogˆ7¡uЬ]»ÖyëµP¿p7Ä ¡®„²êwơƠW'œ&ÈóÇv₫N:é$¹œK® ÂơÊQơó-Â…̉¥KGh+Ï,a!5N9¶Ñêl€À 'œLÎMt¥¤¢áưf<@¼'#„—íôaÂoo0vôIư.ô‚ôœÀô/œç®S§NÉ>)Êo0pô×ï¼ó„ÙR §…B²B!”™q áѾ‘̣xgư„MúEêÉûL¿ªBúLø_iç¨0&AO¨¡ÏºgïL ẻ·#\‹¶ÓïBăE{5›qF1̉óĂOđ³¸z†mí̃½{̣1>Pm#÷:¥á‚̉Œûg̉0(Ϥ7¨9Û‡ÏOĂJ¶³s€Î чϤđxG)¹(óNÖ$&Ơƒï¹$YOA³ÈüÁ+ªk©!PÁ0'¶¼5opH…̃£mÛ¶2G×Äz¤M›6²¨y¦mi(P±3Ö arr~3ÿ€̉ á¡»& ÷ñ›µúG„ù=ôÂéư#yư-Zä:wî,º3tCû&M$k>…!c 7₫Ë>Ög¬ût­*ƒèNÑ B}Å:]:CÄ;8t„º¾ N“ăYÿ¡«Ó5µ7ʸ~ưú ÅVxløú@oÏ;p:@®ÏÚ–DïºÆá¹Ödï7N&•sóPh#úD„6A±¥kßđ8û^¼R *¥.ÑV±ºù‡W¬ X´Œ¸¨†02B÷ă©5”r£ejÙáy~\#Ê">+Œ˜ĐH-Ï+¡’4Wá5±TbéÔ6jô‚Çg”– K%â;ñæç\ô‘}́׶ë₫¸Ï°₫é">º‡e„ÑJ– ÎáyaÄVa¬ĂÔ=¥^WïiB5UÂç"Œô`?ax„Rn4 HÏëTnQ^ñ+J3ƒ—6a‘~đIx…°6Ñ> ’D€> ̃Ïl#>åØè9̃@‘ŒƒK#¾Â†Y ‘ ơAÿª”~‘$ÔPá9|g;×ăÈ ênƒzÊOœRN ©³âÊ ë«‘$~b›ñAƯüD/¥ÜhÄ„z´„uFu„ûÀ€ñ Û uH¹˜ÿbF”ưJX˜ÄáFߌ1Bè•đ®ƠkÆaÖ)¬g´Nö;;¼Á-uçw–}Dcv­.¯£xOx‡èMƒưÙ^{í%÷áÊ+¯,N%́ªEGJ ¯DIY_½RVCÀh0̀£¡ UöæŸ^\c~Ưà •iRØF ÛbÂúÈ&d‚̃ ưFEp,Âó e°®Ku;ûXG¢ï̉}Q:-z_÷‡ç² Ëi©Â¨h4Èg¦Ö7¤Œ ÏƠkG? -+úF¹>ư_TB¼4êĂ;̣ ¥?׋«wX.́@°™ä‹øđO]¶â•îIOÛè9^Ù.É®£ÛñäơJ¬”Í“'O/6̣=Œ¨Đñø"!–O’ÑF½ăI êz¸|öéÓÇí¶Ûṇư{îIFw°$·XN’çéq²áÇ´O£¨G®çÍ“$=Dƒ x4ûÇïdz~øÀBΛr`Œ;Öy£QRB‰RÁÛ8œÓ•‡…xö́ÙÎóíJäBôbÅ̉‹€[:K,˜øD3¬áXÅ9Ë2Vߨ„u"ÙIvK]ˆ˜"IùÁ,¸áí ñZ›?¾<ăúü”z[¬~†@Cà]Ç“…>Â/h\¯^½’ÑaÙ̃°™øNßJDï‚×'}ET¼b_¼±½r2vḶÊËçyÅ}2¹(ô‘*ôQZ_¶ùÉạX=†v0VEû:Æ)’̣ê$áü0ªCË‹~q©ă u%‘̃¯Qñ ód„ 1qăÉÜ5ºEÏ÷“åXi9†:âq„§N(xăéñØŒáqö=3D\~ùåâ½ErÏ:X̉ø̀e¯F|đú¥₫ưûËʼn̉ñ 8µ±« Ö~Dj2v™†@å À<¨eŸĂGt ̀?Ñ#ÁŒ@„sµ‹E€ö đ4äÉ_Ö¡<üy6©‰º½«|ßqÇEÅÖ{è¨XOÂ.€„Çʆà:MÆ´0™9»Ñ¹Á˜à木Po ˆnNùnưYTX·¢D¨':ÂlE£D̉“z=ô[M›6MFt„LJơ+ôz0*hD5zÚ§́œËq=ƒ₫QЇåÚ÷ú!PS«P¿rÊ₫,Bʽǭ¼x¼|q¼,̃RÛVBë{P̀FßQJ# ÏÅ Ó̉Ó1¦øäĐIE“n÷\tBiÂof(lTB«-Z$it?Ÿ ¸é»(éé́Ê…î)Ÿg\áz„ØÅ)ŸƠS¡V¢3 1ÔEDTè¨âÊcáÙ¼ysתU+QÎø$C…ϵ'»÷H–âÂëDËsœKø₫ÜsϹG}4åp·qăÆ Ơ ç‚sœb/,·˜ß=W¾„ø1°Üzë­2¨đƯ[½eBײeKSnóÙµ‹‚“UâóƯ{¤¼ç¼÷„À^ươɾ”I£•n̉¤I¬̣Å>†lÏ·ZcÜÁ`××Q¦tHö“ÔA!ơ“R¥w̉zđIß·}ƯƠĐÀ˜¥Æ^öƠGâ Zăœ_Ö>U÷§3˜è₫đ“~Z1-oØ°a‚”ƒŒ™L>i‹‚8#LX–}OcXï̃½å™Åé‚÷tÏhúRlO!0ĂG!P®ưPë1ÏÇQFij?Ë0 CÀ(˜¢F·=zh… vzûí·Ë¡ y¯£@̣±\CÄYg%ß¡FçRY1A·ƒ„ÔXèÚĐ…©BŸư>N=ơT¾ÖtqgœqFí¬³ĐÇA鄳úOíè  :7t¯è53 º<¥á C7Hê«ôëá1úëCÉ́`dó/ÖïPfE…µ'º<„ïP$Guz8ăˆˆ#5ÂZHơ§>ŸJ̣:à‡N i®ÔˆD_a’~páÏMYe[ Ñ<́q̃÷Ù6‡9[eå ça®ëNṆ̃†v`¡åeÅ O1^H:2>1ÀWW%O.›Tl1ƠµÎÙâ¨Ç5jÔ(­’M ?Ă:ÑiR¿O?ư4ÙÁÔµ½”Rí‚ .^ÀđZơưNg>#p –«đü’·ÏsG¶ 8–Ar (41ªImÖPàƠ¢ưD}ú- -éO{"Jè‹n¼ñF1v3áD­“1<Ó8̉•»í¶Û&Ç5€¤;6ƯvxR£øféÓㄱHLJ•›©ưzLøÉDc 㦖Eô *Œ|BÊ:ă¢çWû'ªÏx/'ç;î¸Ă1¾›”&fø(û ƒ2yâˆDĂphb†€!PYM=|øpaù Ï÷”^$ §#S¡³$ „dGxeÄQné±Ù|b„Âûµ‰÷êûc ‚:N¸T/̃)X₫Qb\Ă`Hx!ƒÖ¹ç›¤¡)•:[= |"àóL$“lÓg0AŒ Qqï¸nĂ›†H2ÂeĂ„h9 ưM_¢†œô•ôƠ!Í­úö½ ©Æz7â¢đ´l¼aTr1̉V&¶Dyb¸3ú ‚7Rxm­ƒ}fFÀóX‹‘ 1’ų¸Đ›̀gÚ̃b `†b MæëŒ x£É/ăÏ°­†€!`å† U˜5 ¾")4 e•F]PưT©ă@, zîî:7tNÎcèspF dBA kVt™èOyV•e…ù ë·º:Àa¼‚̉14zđN gĂè€qYC]/ë̃¨@;Gd­êÛ;́07wîÜäa€x?3 ”T°ÿèº>úItĐC#`èÁºg>ÁRi®À@)±2]Ûöe€>²Ç*gGbṂˆG GÁ‚* ºđûbôĐ|Jw…g>üäHH‡½&/X:…´*ZLÇi™(“x™y±”Zê­Ç„ŸtF\ƒ—>“¨§oô˜ èxĂë«'oô<¶«²M÷ñohaÔ/>±(½|Ât±ˆ·oß^:,=§®Ÿtà(L‰₫á̃Äưú†"5“°®×­ïñàDhhÖ¬Y#Æ;¼Ç ‰Ä’ %d}ëgçÅ@€úYíO8ᄆ?Œ„Ç½ăº Ê8râĐÿ2‰ŒöIѶÁ‡×}Tº¾-z₫¾á†’^+„ü†eà1§øç\<Óơ¿ص™Ó:Ä}¶nƯ:9^ äÓè豌Ÿz­îƯ»§­oô¼Ú~Ó'ăEÆDD‹*xgƠ„B8lgmåÙ₫øtqÆ`>sÔQGÉ8‘îù2¼J¼Ít´§¥QËꨋä;JcñÄ41 CÀ¨L˜ÿ[̃́î­@²Ă©.G¡ôǘÁÚëÅ_tC‡•ÓqnRWñ%?‚®’ü4Ûk3ÈÁ? ,¡cƠ9b¹å–[$N6åÆ­QYO£#D̉åËàƯ ™Jô]Ôv 9Lậh¹P…ÁØ ëúè'k{ÖÜäMVÁù™¼Ë¹}ĐàPŒĂ³‡×?ä3|äÏ:—†"Ei¯Â“±p̣̣“lœd?µ)Âô\^zB…<üđĂ¢¤æ¥E‰³ƯvÛ¥U^ñBóbÆÉœ9s’/# n ‹;V·r¨”Xk1¤¸í°r"X7Ă(́w(“‰–*ùù­BO4Ø^{í•́÷t_mŸmµ"”~¸±Wƒ3¼¦ÚgFË?~|Zƒ=å¨1Ÿ~NÛ-#ÛßÙ^+Ụ̂̉‡ /øƯ§X3₫0^bü çÆ~“º#0pà@y†y7H̉Œ3‚Ié"Àœ‡ Ä ¥qŸ˜k!Då©3NiỒja†€!K˜;[̃́5HöXƠv$ëṾ"è%Ñ›1g©­´ ÖLépnf}«‘a₫=¶¶OÖŸ]›¬"Ô%ô{™rsp,ˆj4ˆ‹A7ˆ0A‰ÁG#MX£ă€¢ueÍz/ôzÑ5¼î#̀Ú´i#©ä$ÿ¼Đ¯!è_¡V+úÖë&¹EÀ Ïl"r û%—\’|‘ø₫ꫯ¦2…—Dx¹ê¢H"<’+:,Rk×®•̣C¬” ₫øƒ—™Î+JçDèâ”lĂB †`đ^¸p¡X4ĂcøÎB Mæ…Ơe`œ H–$:]”wz>Q tn\_ó¶Äጒ‹<!å†Ñ#áuÂïXÂơ¼¸¶ë±`¢ĂªU%F)Uêñ|RWŒ]<¹ í Ë®Ëw’9µk×NBpºví*æt₫Ü£º<—u¹¶k”µéo”ü:urO?ưt̉0I4íïx×Cʨ3fÄF¼|̣É’#‡w₫IS˜ø™ưQ)@ú@Ủ§3T¤Ăă58“AŒÚôyÔ—~3]›‰x OˆqB#åFÇê‘M4ư‰ö•é®Eî&…=H¤FœtíÍ´ưÿø‡ô³à]ŸoÂsÂz…Ûí{f‡#—g‹̀̉=[™K²½…B€…®ö+Êá\¨kÛuâ`> =c!`†@e#Àœ½Æ=÷Ü#¬÷ă‘G©́†×³uf©'pÁi(ñ™o¨àĂ¼ƒ¹»®ÍtŸRZqL¸FE¿¥z7=¶¶OÖs°Â Ṇ̃؆A=©̉?±-NX£# …úă|ˆ“.Â7lcxlÜwèí'M”Ü…³4:JÊEp’S# ú<ôzQ¡î^x¡¬5¡SGCcM„AŒÙ÷ä“O ‹8bø(Æ—h{Ê₫·¿yU) ,Hød̀<¹ ¯¸Nø‡;á9Ö3₫q̀È‘#>K0 ËđÆ„9k`ỹyç%|h•\Ç+Éd¿_X&<­‰lăú₫¥I°Ï¿ü ÿâ&<UrŸ÷ÀMx%P"<‡ă}Zk…Ậ¹C/imÂ'¤ ½÷ZbđàÁ …’,Ÿă'-$Äư¾ƒHøÎAêái‡rḤ|Úà±ơcŸ7¾$¼"&¶[ë‡5û|ÄGÂG«$h/Ÿ-Z´Hi÷ĂG¬È~.́)¬>BDêä•£R0ăr/ĂújÙœÇså-ÑɶdsŸ9/×̣î»ïJ›½•_êâ;æ„÷lOx¥§`—ëëYy†@© À;êĂK“ï ϽOḶçĂTS̃úoTNøȱ”fxƒsÂOZ’ey©„7nÈ1ô[á>otHx%¼́£~Ñ“<}ưë_¥ñ2^iŸå“nK?–•R¡àG´Ê›5k–ŒAÁar]o’ºP'úóÆq¹®7X'¼!%YWoHIöƒô—a;Øç=Z¤LW_Ÿø:¡ưÖ‰ñ„²¢˜ù°ç$éÊK×–8ܸ9N–É5½1+9~³ßOlĂ"í{¸W:ođÆ©„7X¥9̉6—̃A%ù®—R½ª½.̃ˆ(÷Å/²kŒ3Ơµß0 JEÀ+‚>OZbŸ}öIÍ̃9*Áv“ô OCOÆÎ+í;ï$•đ”º5tLéK©¾=è YëèÏ]T'§¨ Ăó́Éc½²>Î+*¬_/½ôR9—êPơ¸p?×E'‰]gE}”Ö‡Ot¤̃I[̃o îGßê¿eäÚ>̉"Y?ô›è$UÂsăê¥ÇQ΄ ’åxQ‚ơ<ÂÚ&¼úÖȬÑ £Öº¥Ă'Z>ÇgÂ]ëeŸơC«UUJh´Đ‡2›ÏP–QĂ€G•Üq×N§Äëîæ…Êwʦ3̣aX53ÄƠ…m-|TEJQKXgDi…A)]™Ñíq8F ÑsÂß>úhr%¾Ëêújø ̃t\¡4¼Fºït~t‚q×Ô}u)Ûs’s !(%œTÑI;¹¿K—.­¡-D}́†@¡@^×÷>Îè¡ơöù4R éúŸ·BO‘Ϩ’?î<Œ ̃CD Ù>ÂăµlI’R~0! û=6î34DhA¡áƒs´Îáơ£ơơQ#É…JÜu´&‹*™ÊÓcBLƠđÁ¾|0B1Ưµt;Ư8ç-ß>@€¹çNøÈŸ„ç¯5cQ=̀{x̃yMJjHDéeb†€!P°.a}îd|Fê½ÎÍÅí7H ‡ø舤34sÁ#<2é”&_qÖ›:ujrí„Ă/ºÇ¨„†8Ï7ú.]keó©FŒĐxQÛyѶ„çÆƠ+lGŸÄ<3̣wøƉ¹¶ë£ ĂẶ1.…çs¬7C„r÷½j©®¼&«<₫AL¯ØORydSaR„1!!̓7^HH|o„ŒEÅ¿Då_TÙÖ!z₫†{> 7ë̉¥‹$ÊÑưqŸđÆsy@¢ââî®»îr{ï½wÊ.ßé98ùT¨[ØhHƯ"̀,®\=„Jäù€Ï¯tâ£Qœ·„ÖØ ¾ăZ¦đú$"O†ïÔjœĂohqçœs$<‚kO¯ ₫>EBÍ¢'RWÂƯ #Y¼ ¡–ܧ¦M›º8 ™dưºï”=₫|÷Ûß₫–Ÿ5DËoƠªUÊ3SăÀm Ç ÷‡û…ô/|'™ùâÅ‹p©×»’£êY1†@É!@ꀄª>PûøhEI7; Ơâ„₫êªhß躧ttr” 5!t\H8>0.Ơ&„-Ÿxâ‰É¾zÔF™E¿Ơ¹sçؾàæ›o–|Â~CñFÓjDêF]Ăúú¸ä˜Ê¹„+_ươiëC=¼ă@ }VX|©á ơÙvÛm“áÚ!}Ơgœá|¤‰đØê±ÑOBé#u|ˆî·ß3fŒó^c‚5¸FŸí GÚ·RC€>¡ÿ1)èÏ @E ¯ơ ẩ©œƠÄ0 C o0¿eÍAîôЇ>đÀ’/@)¾óvñ2/Ø(°êv¡kFˆ0ï áy:º%ô}P4©¤ËïÁ=È´.åùFÏ„Î)NĐù¡ßƒk¦CGÖm$F'zضkbt•´5xC‡5jTr7T÷På#M|j°C—'´\mèBÓQ3Sé"§s<ºÅ8Úè¸̣m[Ưøl(u;ÅÎ5̃sƠy_áŒCq„¢ ¡ ¸Đ1ªĐQ` C‰S₫“_ƒ<pçaÜ€—®gÊ >̃:­â,x„¼S`á¥r*^̃ªë|„‰$9‡³¡­$G1*¯ô>Ï?ÿ|1PÀBÅ[B%œ€,1đPNœ²+,‡ÄÃëW8¬9‡Å}ºNHσ‹Ï[s…ŸÎ›sÀGëÊ~ÚNVaÛá-ôÈR/ê¦çhÙ|†u‚{…Ề¸cĂórñ<§OŸîPZz‹¼ÜGOÿ殼̣JÉ_UbæâV†!P­ø Å"ưư} Iăj #9è«x'™˜æbBO)XúĐ—_~YŒµaÿE½à,ÅØ1”~‚Éưm¡océ½ú3ö½Œô÷Ô™6dÛ·qU«VÉ8ÄXVIÔØSnuƯÏøDn-Æăơë×KéÓå-©kùƠp¼§dpJ@¸j‡{~j tµÔª—ri#s-̣ơéÓçÿ³wàRY߯Ưuu+¨`@L˜ÅD’  ¢ATP FE”5`&¨`@%(ˆ‚ ˆňpM0€º¸®9‡]}Ÿ¯¿ú÷­Ù¾3s'O÷̀9Ïsï̀t¨đïîêª₫'‰×8.í¯ævâ ‚̣‹±”¼L={ö¬æîjßE@PB s ïh檼0†ắªR?XW Ä¶´ë¢b]‚âùj‡ê/D(ÜßèéĐï±Öă₫ö \?ra°®@oȵ´tÔ²&µ %f¾Ơ²^t:LÖ¬µ}ƒGÉo f~F^eÖíiĐ¿̣WŸ®CJÿ₫ưEË:Ă&ú@•â#P7Ô øuh‰ơ ÀCí?ØơƠn`¡´BH̃¼yózÏcÀA™…r-UTEºPdec¨A©æteƠ·åơ1 ä:(äsư G¹ømdº¾×7ĐQN>ṃëÏç;(/~˜`J"ÓAƒK+–Ñ2ŸO}z" ñŒñ½c²Å„H₫)<óD¢8ÏaÚ6z„ëc2‰ƒ $mÙ ău>FT&¶Î&Ûº 9₫ï´ÓN…QÓçb³´oÆæ1mÚ´‘÷‰=âuKhÄGt¯1'x¢¤ˆ̀UĂGt¯•¶LPR €¾ïuF‰~&âĂæ4ïóóÎ;¯(NQ¥hwTÊô#@|Ñ(ÍƠRÙ+Åư SK:áúeZ³¶ÍU‡™®®|¶chIÇæ’©<œĐ]̣vÊÈU¿™©lƯ—ŒÀï“꯸#€b Å+V¬îà±)̀,î}Öög‡/"öÙg‰¢Y¶l™Ü—\r‰Y¼x±(ªô>ÉK=Jˆ#ŒÈ¥—^j0t#AÓQqÉúOȨ߈˜ÁKküøñC̉³(N©jø¨è9Tyæ™gă d¢«TE@Pj ¢§[¶l)TÔ0vàÅTåD+«Ô€oY¸p¡D̀à†`S êUQJ‰ḳåË—(³‘0¥V)ë®Ơ²ƠđQEW"xâP<ؤ;̉3ÂùxTj^àpßă%ˆ‘ƒhhkÈSw½ă9¬m”´÷@ơ"@X<¹HˆÀ ‡†£'́ÚµkFªªêED{V,Ë:uªpOßxăƯÄ}¦/ ¼D P‰D£”AˆúPQE@¨=˜_ĩ¯»@ ÇPKÈŒlP­aÄ„qúRdĂ 74­ZµÊ½@=#kÔđ‘5TÑ?đ­·̃Ë¿k)´R(»ỷ ÔVÎ ØQ]¥;¶RÛá·wJºJµ!®ơ¾úê«’Ăåæ‚ ¤}úô^D΄ө‚*®WWÛ­dTDDúN>îïă;“3w£º £¿k¢Î=÷\áƠåỬ£GÉcSۨį÷pÿøẳp̣º©Drñ!3gΔÜlÑl¥¶*.à-z¦?(qaˆ°v¥Ư´ÏÑvF­ÚE ”À̉@>5O ¡%_ÆqèÎU²G@ Ùc¥#Ñ ¢#Œ›đ¾"Ï®/»ï¾{"̣Ă߮ߋ‹€&7/.-mé̉¥₫W9=Z·nÅç‘HÈ%ÜÍ&7E9;Ê„›‰-ƒ„̉ve‡<×ôÚk¯53f̀dK79ä ‡…°¾DđÙƠ¢G)@\`¢5ỵdIˆ‡(ÉÍ3Å]¿ˆćE‡™J2ú‰ăD·nỪܹsMÓ¦MÍsÏ=g6ƯtS&†Àw½Ç{H®œ`P¨D Ñäà{ï½÷ Q̃Du«(ù €̉häÈ‘B}YßùäÀâ¾{â‰'LăÆë;¼,û¡ơ!÷ËÏơæ›o–¥^­Dˆ̀Åx‡»¼Dx?@AW¹JnhôÜđªÔѬk1|`çGGa÷ñÇ ư<÷ëk”óɇ‡₫F©jøˆ̉Ơж("À ®À믿>ᡵß~û‰G†0Uf°®(€"  >\¨Yt£k×®.²czoÿëđĂ«>ú(¦½¨f“CçÔSOĂơªU« †lE W~ươWsóÍ7‹r4Ûs¹×&Nœh=öØlO)Ùq¾S %ƒX (S¡«$ÔC=dH}Øa‡™[o½UhncÔ•È4U ‘¹ÚE ((ƠUQ`ÔBÊ"@¸úèÑ£%ʇœDÉ6‡2…TûöíƠèQÙK¤µ+€"P5\ĂÑC‡^Zơ,ŒïåƠÄæñ¹v$±%_‘Úwß}w|®-,4¸—V®\iˆçÏ}¿đ í₫å—_̀)§œ"ÆÄFư¢(GÀåư˜2e2dˆä\#ÿ‰ºßyç·/ P ¬8^5m³"5|¤ÇF÷(‘G€EÈw̃)J§Áƒ›+VHÈܤI“„väĐC5k¬±Fäû¡ TE@ˆä‹éׯŸØÛ´ic ¤ï™x\º´­TĂGZh"·:„H»n¼ñÆȵO?Pđ‘ÊÂí¶ÛN₫Üwhs?ÿüóu2ë(t¢˜÷#~Èk‹â"°̃zëĩâB*£{ï½·Á´páBÓ½{wÉ+ôä“OJNŒKäLTQh# †h_m"Â/gÍe ±bŒ7GÆ …«÷…^Oå L nTE@(”^ï¾û®a µ"I5Uâ€>âuưN;í4ÉƠÆÜå‹"PĐädJ¾ÑFŸH¿#F$ªä|rn@?•É ‚Ñœc8>•P4=cÇ5×]w¹ç{$Çcªcu›" ¤F«£:JvØa%âñÇ/Ï,Ô¤*ù!MÈ‹/¾˜_áz–" ”5|”b­@(ÿïÿư?óÔSOIè*t/¿ü²$C:û́³Å aØ°a‘I}úÈ;Ư;éDư¡()€z´eË–bü€ưJltè00ªä€oÁÙÔéܹ³9úè£@̣ÇWÏTJ…€>J…¬–«E‹™#8BR Ÿç 'œ`xé̃pĂ ¦Y³fª€*2æZœ" (Àÿ"@T´V?ÿü³(¤P¼²T‰?ñ¿kˆĂ ̣øăKN†øơ@['P¤B÷âcÊT„ơˆû̀Æxºúê«Ëñü# d›m¶1o½ơ–l£¬ơ×_?A­ÅÆŸ~úÉốÙÓ,^¼XÑ€"P?÷£~Œ 9‚ùï>û́#XÎÂX5cÆ £BƠs̉  †̉થ*EC€Å®]»J8V@0~L˜0Á́´ÓNF“Ê n-HPE „ôưû÷7Ÿ|̣‰Ùzë­…2„¸*ñG8ü‘l”–ñïquô…˾ûî+^÷ë£:®iÔ{±Új«™]vÙE‰á£EXœ1$¼=ƠoÊøâ‹/è?₫øămeAÙƒ@ñûÄO¤*F·)@4ïGp°Ë7€̀™3ÇtêÔIŒµj)¸Z„"PDÔđQD0µ(E ˜¬\¹̉œsÎ9¦C‡fÊ”)²ÀØÿưÅ»ª<¯ÔÛ¶˜ˆkY€" (©5j”Y°`ùưï/÷F¥:L·Åh® ÑDÔđ¯ ȹ뮻”¾$^—N[kÀ e/B®(7nÜX~ó…íĉå7†iÓ¦%öéE@ÈÍû‘=Vù‰NæÀ4³gÏ6jÉE=O(jø(¶Z²"Ÿ~ú©¹ụ̈ËMëÖ­ ^|_}ơ•9Hf₫àƒ'E@PE Ô¼ổKføđᆄ¶C‡5­Zµ̉(ĂRƒ^Æ̣ÍƠÚk¯D/SÆ&hUy"@ôo“&M„~`E NArä‘GJîB”…;î¸cRó‰!ˆr„¨(@~h̃üpËơ¬µÖZK ¹‚¦Ç+e@@ eY«P²A€ÉưèÑ£E©„áă_ÿú—ĐXM4I»?üpƒbBEPʃQW_ưu"g±kå™ÇÛÅ}¶‚̣™v9ílÏÓă|øá‡L¿~ư ŸmÚ´‘k¬±F>Eé9EÀ>¶Új«ˆ¶P›•Ç.×ɦ¡-SQâ„^̉D³ï·ß~2ß"²đæ›o6'Ÿ|²Ùm·ƯLÓ¦MƯÉ…F+q’~Q÷#EÉ¿¨¤äk@N¨á#'¸ô`E øụ̈Ë/æÎ;ï”Áƒ‹RsË-·”„åóçÏ7}ûöU/̀âĂ®%*)À°0}útÓ±cGÓ¼yssĐA™Ï>û,å±…lœ9s¦”¿ƯvÛ™÷̃{/+ă Ê=÷ÜS’HE ”œ₫ùæƯwßÊ‘qăÆ I)ëӲˀ3|(ÍUù±/F§œr!ßΪU«̀ư÷ß_Œ"µ E %8\øIÈ1¼*ë₫ö·¿ bÆ MûöíŘǺÈƠUhz¾" $# y?’ñ(å/5€”]-[È5|d•©øj¡¯ÂËiÀ€æw̃1Lú/½ôRƒRóÜsÏ•ßE­T S”,_¾Ü\rÉ%fÛm·5Ç{¬™7oùơ×_M‹-L1=ÜQNAí@Tđ²nĐ Á +“‚ÆĐ›oAE(÷ƯwŸ¹ç{$©,´‹<ơƯ§¥j‹–[:ÔđQ:lËQ̣l 2Ô5f̀˜rT©uÔ aÚ)̃›nºiVH`Üøûßÿ^çXæXP´s̀1‰}”Ë=óÉ•W^)¿‰úEP†€æư(”Y¤¬`̉ƒ’! Z“’A«+©ÀcEU@IDATꩧ2;w6½{÷–Ä~¼ (‰ư† –”Ü/u)ºUP E€Åø“O>izö́iṽygsƠUW™?₫ج³Î:¢H"·” &!Dý½÷̃â•K´Æ 'œ`{î9³É&›d,ÅäÁ,÷(zè!ÓỔ?¨:#lº³¸ç $¹xOơèÑĂ@I¢R}¨á#₫×ồ3Ï”N,Z´Èđ̃RQÀ₫ósƯu×I±DzÄ7Û9F̣†åçŸ6§Ÿ~ºlÆÁäÚk¯º6}úé§ÍÅ_, áóô·" ÍûQs)E ¹ ¥Ç*ÅC@ ÅĂRKRêE€E)É(É׋”ŸDx\ươ¦Y³fY/$ê­LP”|úé§â‹±ƒ( P\‘XsäÈ‘æƒ>ú9h¥AåđÉ'Ÿ˜£:J¢<ÈƯ¥̀Ă?l&Nœh6Úh£”mtQJvëÖM"=0zp̃^{í¥Ñ ư,:åú÷ïo¸oy'ñL@¥£R¨á#₫וwhD£>â=£Ö¶̃~ûmC„÷²©$Ur"ÜçÎ[çpŸ®ïó /¼0in2©S€nP‚@±Ùf›™)S¦˜!C†H”/¿]ºt‘µGÁh)PHJXt£"P2ÔđQ2hµ`Eà¿ÀS‹£k×®â­çètó̃i§ ^*€"PX@¿øâ‹>ôí·ß^¨ä–.]*^́<‹,Ê/^lȳƒ1"[OÆúZ‹Q¥eË–Bkç¢<^yå1fÔgTQ£G}èê₫R 0jÔ(C‚Y¨Ô0Î5jÔ¨Ơh™AàŸÿü§´„Üb*ñEàœsΑÆóÎq×4¾½Ñ–—æ;éæ#̀[ˆŒeƒđ^hj#NY·8a~…¸ |:áûo¼aüq·)ñ ƠU&ù駟̀qÇ—8$•Q%±S¿(@Ah̃‚àËûd5€ä ¨ä„€>r‚KVrC`åÊ•BaƠ¡Cñ¤ø₫ûïÍ₫ûï/ €©S§ í̉‡ä†©­ä‚Àwß}'ÑDI´mÛÖÜqdžçÜĐ(,[¶L">:uêdV_}ơ\Îxl!Q¬FŒđêÎ!MΈ#$jèĐ¡¦U«Vj”/ÖQ(J™~øA¢ÉÍ£pẸoô©ơ¡p;vl₫é™5‡À?₫hÚµk'Q©äă¯W¯^¦M›6bÁiËɺë®+N$î7Ÿ8n9£ó+ #_~ù¥Đ[=Ú´nƯÚ?<ñƯ$$êvøđáb<á&B/t"â0ŸĂq̀ZÜvưTâ *ïGŸ>}d^èGh§6-ÅG@ >ú](>¿³“‡ÿuÓ(~ÙZ¢"PÓÏY’#pûBÊâtíµ×®il´ó@©€–áÎ;ïƒ#Ê=^u,Î1Böë×Orf0É,…àqKÎh­đ¤<₫øăe,¨ÖʵE ư,'(ÀQt-Y²D sæ̀1xªT/D¹í¾ûîâÅâQ1â}­Çg `6ÜpC™{úåx÷L[_lˆ¶`r₫ùçg]4ïƒåË—›† &ƒ¡‚÷Åa‡–´=Ơ '¼c0´2æ\~ùåbđHulªmœÿÚk¯É=ư'(DŸ¼ù曩×m€"¬™ˆ$y1ˆđ|ßzë­EË{˜G³jêr =û́³’[ †¢çÿ>úh1D1₫©(@öhÄGöXé‘@Ọ̈£̣I“&™'xBr{¨Ñ#kơ@E 'XDĂKÛ±cGQæƯpĂ âuˆÁá́³Ï–Å6t $3/…уÜ!xFá-™k.×Q5z8$ô³Ü {÷ƯwÅØ•–Ju#Àxƒ4ỉDUp©yÿ4hĐ@<íï¾ûî*è‘v¡”d3‚‹e .4D\„´cˆ qÉÏư6IËü‹ÜiaA™zÙe—‰r5¼Gr°±ź±Ç’vS¦OGê¢M’̉€"7<_.ï¹wÈÓ£y?̣†3¯ÓE€<ÿüó†èlE@È øÈ /=ZÈ<)¿₫úkQÀ²UQ̉ €â=÷Ü#ù ˜rü̉DY|̣Ébè(ơ¨Aƒèí\£<8G  R XĐ’‡ ³É“'‹ñN½ÿ+q%Ê['ß(%¡¢a1­.ºè"ñ 'á9‘*@9`₫Íï¢17nœ6ˆß."É»†ÂƒÈ6ÛlcÖXcÄ!@P¾bôÈÆ`“8Q¿(@AàTÆç´ÓN3ß~û­Dn¹åÓ½{÷‚ÊƠ“sC€1ơw̃Ưồ67üôhE@ z(€" Ä¨yæ3aÂóÈ#e€d姟~ºiÑ¢EV îB:O” ÑgÍe~ùåYÜ~ûí¦K—.9Ơ­FB®‚[Ü{P\¡Ø»wo3~üx£9… Ÿs»đ̉>æ˜c̀´iÓâÓpmiZx›5k&¹>ˆ4†^UEPE@Ẹ̀{@1×·o_Q¾³Ö"‘ª€ÏU=OPʉ€R]•m­KPE  04,sçw<ƠñF»•œ:Đ)ÛcÏ=÷̀ÉđO£đ€ÂSzêÔ©̉”‡$ấÖ­[Nu«Ñ#ôơœb Àb¶ÿ₫†H)”¥#GT£G1€I}ô‘´T›Çä‚eÑ̀Í7ß\¨‰8t̀˜1Yœ¡‡(€" (éÀ¸Ñ²eK¡í>ôĐCÍ÷ßo† &Î2ß|óMúu" (A@ ¹Ú E@PÔdoÑ¢EB[µƯvÛ ¥”PñƯ1wî\µGäóđ¹ŸS—XØV—ËCÇ+„ÆŒbpÉU¨F®…]xû/X°@(I&Nœh5jTXzv¬`üAr·bƠÉl,ôe9­xWª(€" (…  y? AOÏUJ# †J_­_PE %$̉¼ă;$z£]»vbX€z«­¶2—\r‰Y¶l™™9s¦ë̃çrHº(#|¸D+‘ U«VJYPl#^>"~̣l̃¾ûîköÙgƒÓÀ7̃˜g)z" (€"Œ4W—]v™D»¯»îºæ•W^1x ™={ṿúKP! 9>"t1´)€" (Æ,Y²DŒwß}·ùꫯDyC˜uÇM¿~ư„JªÜÉ-Sạ̊€rëàƒÎÙàÁ5V£‡̃é•DbÛ¶mÍ[o½%9sæH~œJ¶Ië./äI"y0Ɉßxă ³ë®»–·Z[I˜>}ºéƠ«—$‚₫øăMƒ JZŸ®(€"P;h̃Ú¹ÖÚSE PĂG5\Eíƒ" (1G€Äà$)¿í¶Û$OƯ¿₫*=ÚxăEy3`À³í¶ÛVÄ#(Aƒ™•+WJ›P&á)—z>´ZjôˆùÍZÍ?ơÔSͤI“̀Úk¯-ÏÛ;́×½\PÔl éÛzë­¥ÿpt¯¿₫ú5‹E5vü·ß~“èÈ₫óŸfĈæ‚ .¨ÆnjŸE@P*„Q…¼cÎ<óLĂZéOú“9́°Ằ­·̃ªÆö ]­VPR# †Ô¸èVE@P2 °|ùrsÏ=÷̣ `ïc“N:É}ôÑóD/v”ưR£(¨Tûî»Ïœp æçŸ6“'O6Ç{¬äË©d›´ị̂#0₫|Ó¡C1~ưøăåo€ÖXr0x\xá…b¤ÇеÚj«•¼N­@PE ¶ Ùùµ×^kF%N4-Z´ùå;îX[@hoE ²¨á#²—F¦(@u"ÅÊ3ÏhÎ;ï¼¢EyĐA5zTçư§^q¶iÓƬZµÊôîƯ[Á5×\3N]ж )S¦ˆl§vzÁ"«ÅD¨"‰L$¢ê«={F¨uÚE@PjA€µQ¬á¾ưö[³Ùf›™[n¹Åtï̃½Zº¨ưP# ÉÍc|ñ´é€" Ä "(È‹¢í ƒ2³fÍ£A×]w!úĂ%3¯”у6öéÓG¼àñm̉¤‰™1c†äÙb‹-̣¦R£GœîÔêl+|̀P\YƠ¬Y33räH£Fê¼ÖÙô1 a\S©N6ÜpC1nÑ»1cÆTg'µW€" (G«£:Ê<ñÄúTlXOyÈüSEPJ" †J¢¯u+€"PåÀÿºhÑ"¡­Ún»í$WƲeË„Z‡è¹sçÅ‹KtEÆ ó6,F¢üđC9hgE øĂ₫`Z¶l)ÆC=Ô@5lØ0‰0&—˜" (•B@©®*…¼Ö«(@#Àb\$+ă7Œ[đái~ÜqÇ™~ưúI4JØJK)ry¸>©ÑĂ!¡Ÿ•DE]çÎ…~à̉K/5C‡5k¬±F%›¤uWæ˜c̀´iÓJXSuM_"V™ß¤æ4­Zµ§¸Œ±.·Zæcép­äv¶l°8æ@÷ÑGeƠœÿüç?YÉ;wƯu×5¯½öÙf›m²:WRâ€æưˆûÔö+Ơ…@å5NƠ…§öFPF`É’%æÜsÏ•ÅÆ ¼ä8@(£ØÅWïxÙ¥̣ Ïa£ḈÙ³Í^{í%÷́WQÊÀ?ü †F¡ä÷ wM\råÀ§Vëp[n¹e­BP3ư>çœs¤¯3gÎ4(ïUrCĂÀÂ… …³̃7z0‡iÚ´i]Ç>ÿüófă76Œ½Q–_ưUœSđ̉^ươeÎåöVªm¿ûƯï¤j>ÿüç?gƯ _k­µ²>^Tª ̣6^vÙeEáï•W^1áY ©(€"PnÔđQnĵ>E@Pª §¢PéĐ¡ƒÙc=„KüË/¿4Pé 8Pè{́1Ó£GÈäH—˃#…ạ̈p—6•Ñcï½÷V£‡H?ˆÀàÁƒÍ;ï¼cX„7N₫øci›æøˆ́%*ZĂºtéb¶ß~{‰¼;vlÑÊ­…‚ ë\¹r¥Đ`º₫¢̀¾ÿ₫ûOö@bßI“&¹C$*„耨ËÏ?ÿơ&ƶ}Ƹ BkÛ¶­äÖmg´á@øy?Èçẹ̀~ >\ó~䧢(ù# †ü±Ó3E@¨iHFw+ÜÖ½zơ’üxî³Ï>f„ †\$Tm̃¼¹Á£0*RÊ(ú¨F¨\imtswß}·ùí·ßäYÜvÛm+GG¯H4øúë¯̃èjøˆÆ5)e+đ8I½¬)‡¨f°ăyhL‰́àú…ÅEƠp]Ăû)ëóÏ?7wƯu—|rpP`©csIưW¸ï7Ûl33eÊG)y q ›è*BÀ> Á~ûíØ0ç?;ÙªP«£Y-X̣–{ï½7°É”sÆw̃¼yR»>vØÅI¸ø²ưöïkô ^|ñŲƠ­) `'„Áơ×_ØèÀN8Ï”¬ÊvëØEhdÁzàd,°“c=6° ¢¶Ù†pVØ F`'/]́§—" ’6¬j°ÊÀr)˳Ê;đ“O>©¾iG GÀ.́e ·ˆÂ ÓbƒÀ!Cäºó̃V©kZ·n-˜Yå|pôÑG×’=‚ùRƒ ë’8Ç*åƒë®»Nʲ”àƒ>שּׂR&°†¨Äo«\OYß«Ø,ƯV`*Á.»́"çZÅIpë­·&Êñ×—¬c˜“ VØ\k)³F‰ÀLä8æt~;ựøn£\‚k¯½V ÿ³J§ oß¾uêp}uûè«[¿eÂȯË*ÀK+V§l×>æ`6ŸU`D‰f僓;Ùl¤.ʵF‰à̀3ÏLY7Ø1¯tâ÷ÇÇƠíO‡ư .®«ßw~*qFÀiƒ¿ưío2F²³Nhs’J‰5bÊĐé>­̉8xøá‡+ỜØƠ›N7—oGĐĂñăúXCs`x̉ơÜsÏ%åx›ËÑiO(ÑÚhBS¾/RƯgÅn'úbêa₫bé%êe|Uª+{7TJ°~«¡“x `ư>}zÂ’±́²=W±p¯œ\Ë(æñz¯M-+[xđÔ;餓„ΤÈxâ=AtÇܹs%„¯̣b{)dÛÆúĂÓOWkè0+V¬£3f˜bạ̊pơéA’÷i¤‡CE?+…€U°‰Ç/ï‰'J¾JµEë.âCi®¢wmJÙ¢3Î8CE v0¦0¾T2ï´…₫˜ÎsÈxÈ8ųÇFRtoĐ"Œ)#FŒăḱ@/SƒÑÍUBÂF®ïM7Ưd;́°J4'©ÎF Ư(N˜Đ[º?̃Ÿ¼Oœ“ï, rè0 ̃¿è1¡ôf=Xóbj• !`†ÀQ)Ù1°|¬jI¼«µ‰;°I(×̀™3B‹@oCX2øÚ—™„Ÿ»}qúô梁ӕ‹W[ß|óÍÀ&@ 6ÜpC¡ƒâ¹!<²sçÎ’˃@3a½rhèaÔŒ „W[l¤‡Đ[¸Y/ÚmC±ẹ̈̉ú€ÎĂNr…&ª»H«ïƯ_ƒØ|/26Zb ö¾¶»l•́rí­'`đî»ïÖ6ơỗQ1đ)™ê9-ånŸöˆ̣ÂÔGVá0c×Æ%“ʱ̃«B_èεѲŸ1ßQ]¥:ƒxĐ~ÎuYl÷Ûư–uâ`³Đ+Y¥‹ï(—d‡÷:EÖ_”Éå#Öq&±-ÜGöCƯ ±}Güö°?Ơù~ù®N9ùÿ₫ùep¾5ˆÈBp̣ï?W/}rxY£H`•X²+][ü>ød©Ê³Æ´tbîxưTâŒă“jVÖRÖé.°Æ¾’v‰gơ®‡l₫ÔÀ–ÓÖisKÖÙOO7&¦=¹Æv°Gç¶ûî»o`sëÔX〔k# ëèôÂôVPzV:5ïTwŸ¡D/™N¬!$°Qœ̉?̃#ÙRk¦+O·×E@“›Û§2*‚…4Áªj'WâÁC(6̃6ṿ,̃6ö’K˜, ×́1mñxö̀ /)hªÑ"¬È;›ñ äZ'Çó~qủÆM(­Ó”¬™]]n\Gßf¢{£MD́°¶vÂ؆>’cˆĂ‘è̉XñNr©ßáÅXOÄ_X7JôŸ÷4ú=wœ_78f„á₫8묳ŒÍ##ÇAF™¾î"Ûkáêå|ÚÎmríf;÷/Ûé÷%×Éä…ׇ¢~Ú«Tß‹ß^Ô¼¬’~}m¹Ñ£G'"(Óÿ»ûî»Szl“lK·¬ûNt áM$ö#(đn±Jâ<; 4i’ø.‚ÅNöG—]v™Xơ±S'Ÿ6K<§]Ü'^¬ÖÀ’¸Z™—»¾úí%¹I†²[*úY$¬´Í€ä¶ö…—¸IÎmi®bç)^Î(p÷#=́ÂU"=́„§K¢ç*!@T̃¨¼G,ox ÷cApVơÉ–ÊFîKËWƠưÔÎ¥FÀyÜ3^XEGêƒtkà{ú]`•y£’Îûß/Đ*EIÇ­’(˜:uª́¶Ê‰`̃¼ỵ̀ZÅE0pàÀÄi~$C¦6â±̀»ù"Hº6e[¦…b•—r/Y:©‡öO˜0!ÑNÿ‹U¸$„ûmN×ÿ\ÿ;ÇSŸåç.¾øâÀTëKúj•ˆ)#>ü:ựø 'w€‘”aaæú]_ć¬5îh4GLư]³0ÎYcA°ÓN;ɘb׶S¬Â?@÷åt.$”ÎF¬cm`ÂíBßµjƠª:§µçtZ®|÷I=“&MJ:½”K~MÂnôWîxÿ“1 ưY*ɵN? =‹V£>¿ŒUè]”…ß÷ƯäÚå÷ÅíwŸád乶™̣ÓE|„#=¬+°Æ3NI+¹ÔÛ…]¬Q:e¹–²J"î鳋6ñ±¶táí˜̣äÿÛè’‘Sơ¸9G®×ÂƠáæ ÖÀ•”ÜÜm' ÅæÜ ĐǺkå×ëÊ©–Ïd—xÛc•Ê!à[ộiEºi®,üÚÚtèĐÁm2½zơ’HtH¬]ºt/#¢.| [±Øc9v‚ÅË$F'öÁZ,ËH»ví$©”ÛO”G:Ûv÷Ưw®X¼ª3 ÖK¿^Mµ-S₫>’)á}–|0?âˆ#̀O¯>œÜú5|^¶¿ñœFX÷gÂ(Û2ơ8E @oặ~œy晢Ÿºụ̈ËEoDdbƒ ̉MôS¬¢=È·“Ư:Ô¦=ùLQ#Dª₫ù’Û&„>£ŸBˆAW—Jwh3:<_ÿfئcÇ©N‘m©êôæ=å—̃Gä ú)Ưă6c˜Ûf)%Jäđ™Æ2¿Ÿ…¶™¶đN¢Ḷ+ù‰̀aN™2e±Æ}K)¹ÖO¤uM”Åû‘{(Ü_k Oäáâ^AÇéæÚ‰“3|W"d‡µ{÷rr¹á(Aæ è2Ặ₫ûï›₫ưû‡7WíïÔ3™ªín´;Æ€ùá‡ÊB„ÅHª?è xØ2Iß¾}ePÅÈ@¨Æ'Üà„¶!LT_ươ„̣e¨ợ‘Éẹ̈åËååĂq nLdƯĂÈ6_H¢7gÎsươ×^TĐd!–ë¾Îï×o-â†D?¾ÁÇü¶„û%J;”g­çH6RÂX.AQâú“WöÑ'ë¥-ç¦Â–mœ› è̉I¶˜C·ÅÀÈà†X]I<È66¼àÁÁÄä^E(ÂNy>­éÖ­›LܸßøÍv ’™3ጓÑĂ,“D$ cbB¸̣wÜ!‹ul)Cw>ă„Oo¥F‡Œ~VL¼/¬G‘5jTÊđûJ¶OëÖK11ŸQĂGt®K9[‚Âù:}‡›“–³ q¨ ÅS €‘ơÆ̀ªÙŒÅ(=,'¼̀«0 d#̀YPîa˜` çÖ|¬K|«BŸÛú”÷Ù¶×Ç„¶ƒë„¹$”jéÄ)Î̉íO·̣Q*ù ÅQm½ơÖæ„N06-qÍ̉•‘íöúpʶÿ8®+c°" ÔE€q„µÊk›÷Ct2÷ƯwŸ8áBÇ^ aÜb]Œ0N5mÚT¾̣ơ(ôĐNĐq¡Sb,åÓzÔË.̃ Œå–Ó‰Í_!íc¬€– 0=!ku'èđÎ=÷\÷S(ọ́­̀1®Ó6ÖÔ¼s,óHÂÀAĐ½1₫¢+¤ư¼ßú„Î Ú«±cÇN½åc5TTĐ…«Í8`b=î̃%6ZÅØhÈŒă¾ơÛ(icóoHŸ0f ăôƯ*:IÇe(¶xúÂogạ̈·ók½`Á‚Ä=5ï4$Ÿk!'zÿĐa:œ¼Í‰¯<´ª+Ư’ÖÙ!qB\¿ØR¥BØ›\˜́½“/Ê滣q¢Ùá2H csI="l+ÊöéerơƯ|óÍ’Î?‘01ÂÅ8Æ`p%)aQî<¿-œ Ư ‡Øo z(W.ÉH̀₫;ï¼3°¡$=̣Ă­Ñ# ̀Úkü¬'Q/!ZN|:«LÉÍ]›3}úmö±ơé¥ü픕 æ„ è÷ßơĂ}ºë’®N»;G?0ܧÜo<»„û»û̃¾t;Qlä‡Đ„Ï‹Ëïûï¿? lÔN’åÏNÔ„̉€~—J”̃ªTÈj¹…"­´(„—̣(´z~倆”÷ơV«|c´C:U舸¦OŸ^±vD¹bŸz‰¹†58ÔÛ\ÆbèLÀƠ*äÔH~Y>S¸@³̃Ír>”¸<̣ˆĐvPơÚ¬C¦¥J7₫; '«àH$MMצp™Vin¦üæ80¡mP±X…bJʧđÉéÊO×w¾ u¦ÂÑ?Æß®3œ¬²/q=M˜kŸ”•-ƠXB³Bû™»Dè~y|K¨] x¶JáƯú[¨z Ä³ÎetÂŒ¿V±XçׂûÍZÎ*úå¤Lë”Z§L( ­3j0räÈ:ǬÓ`âEU!u†i¨Ăo¯u ¬ƒdŒ\»ÇüDÜ~ŸĐïYcŒœ[H›)À§º‹Tànl/¤~w/R'ïPëD„‡5%(Î|¼|,xŸ[c‘ĐJA-å₫ ®„Îßï[!×})冯‘ÛξL4jI¬‚ÿå%²=W‰xjaO%„«a•ôkk8¬™àvĂˆ²hÑ¢Ec؆ơ#¬X}!̉ 0!`N£²—üIJh' º+;%E12ưÚ‚º¬º"å“-"I°Hb©ÇúiŸ¿:8ØXM“NÎáơSG.’-æ” ^“'O‹9‘8aL±Ó?„¶„­Å²Cÿ) ªï˜Ûn»ÍØÅUâ~œ舓O>Y(.\ød†¢"¹ ¯8Ï5Ks1FƯpĂ ÆæJŒ=¥h¸¼h¤G)€Ơ2‹‚ó¼´Tú`N‡Ă˱¾ºttÀ+Z%"¬ỊJµJ2D³Ö„5­x™fJÎͺçÄO”‚XåJKEP‘‘ä—È\ËEŸ †®Â:°%7̉ûÅ:‹̃0µk¦G}Tä]±ÿ₫û{g¥₫ê¢(“hùTQ&$Guă‰+Å­aXcƠN÷°p^&çđñî7mqơ±FÂC6Ü.úJÔG&)&N™ê©oŸ5̉HÔu#î5 öÜsOIF ­KÄ\_™º_¨?ñègưʘúöÛoË:–HÖùêH›ÓÖÂĐ=‡…µ´UL‡7'~£Wă\k´F7¾Bµd‰ëx̀ó¾% q‹±úvs_¬“²Ô^Ÿ£+bL·¹9‡£Ç³†ù]HDzXɤ$åJ{O=ơTƒˆBDgç ă¼cá:Đ¯TÂX‹n)¤Íéôá:¡̃‚.̃Q‰ùû ©Ÿ{'Bß¹†>Ưe;º~®W/΃9ºq₫2 :O›ƒU"d8®X×"]DÁP ’›†·©`¡œa2â=<ºf1aÅàŒ n;Ÿ aEº¿?Ưw^*pư†…×z…7'~Ûdæ)ÏcRN/Ô3Ï>û¬U,|+ÂÅ îƯ»wI¬«v2 ÁWH˜ ßèâËôIø† 71÷åEh£Y _ºï¹bÎÀ½Ç{Hq¼0l"$QN£ ¶–lc={”bÜË"]ưº]ppÙ(*á*µ*2†0–tîÜÙôë×O(®r}^\ÙQù„[„>“&‘Ëz;ŒÙṆé F=z'd¥·ÊE=GP¢€€S††Qh›¶¡¼œuÖYbø`Á]^&j¢̣¶,:µYocQ¾áP‚₵œđ¬ÂÍœñNX³¥:ÎíO÷É\ -ŒN¹Å *ơ×_?Ưỉ>̣2ôÅ7Ƹy¡¿Ÿï̀¡œă¡/ÆúŒcI¸LŒC† ‘b8ê4`(̉^(÷PVâĐ愵 m̀GXăü‚đƯg\YÔ =²£sÛĂŸô)_œÂeåú›ëÈœ¡̀×y₫pŒs‚BÍQÑq¥ăàwÇë§"P­0¦;ïÆeÆ)ŒŒ<ƒ(—}a,Ä ÂØ™JxƯ±ĐÓ¬OQ"£Ï°é„ă—.]D7ÖơaLAG•Đf—+¨:Ñÿ¥{GñîĂHÎŒu0c9c:º+ÖĂ΃®q½>)¤ÍéÖøĐ3Ư~ûí†0|✀÷´Ó·¹vZ?8tœÔƒ¡'y7|+t´è8Óµ×µ%Ơ'׺´+®¸"aôpÇûZ¸rÑ£û §pû«íS º¢D́°Ăy·(E97aĈ’¯Ơ 'ÅÅÂïoî3ŒsÅ|¾ io¾çV*ʃö:£†I&ÁjôÈ÷*êy€"Ôđ…«6 Æ9¾j<ÊIPª’Œ LQt`ø@PJ£Tĩ¼¹đĐ“oQ¨8f8!råP>B–b%)²„µy3 J<”SmÚ´1–EœáàÅGqˆ°nÂ{×­¿h·‹ºGIÇÚ Åi½zơÇ+“¤½pµăÙ‹2Đ̉½Èºri›3‚Đv7x¬¢"j{ËRˆÓ‘Çn âÜ\„¹¬S b¼ Áù»ï¾+–D¢i—úÇ.́hçú”-N®¼b}¢l²thâÅÎ:’µ)Æ4úƒñ ïvg¼A‹§¸"P«0na¨ ïÏ7c#ă1Ñmè–ˆ”ÈE(ÏEy0°– ÆIôdŒ!NßD4yPvû‚aÀå áœlùËUhK¶¯8ÿ¢|G ©3S1"Œ?^"(2—í¾b·£9†Ñbhb e<ÅHOîæ5¾£x¡ơcÔ@ÇÉ|}&÷÷‚û¼[Ñq¦ 'W_}µ¼[Ăûưû,¼ßž®lVîø¸ªá#BW›¾\â"&JQ“}!&k(, äÁB1˃‹`|đ£R´#\&íà¥UIa"KX$V',"kc̃¶m[Y0„=«Ü±ú©€“½»îºKN$c²ÄÄ ±SN9EånRwÄREyÂÊ$ØMFKƠG5z” Y-WP*…€S:â=®¢0'EA-ª©"Àk%¼‰dwú̀¹|ƒBÖA¬yp<ÉGPđ“àÖ¾\rU{ø;mĂ@A"Ù°Đ.çZb<#Q1c|JĂúj5¼ÅUZG€ñƒ*Բȟ:uªôă^qŒLzK-jô(5ÂZ¾" T 7RĂG¥®@´êEÉ:pà@i´ÎÁ(Z­ŒFk0àá‚ z‹¹sçĂ ^¥DàÊ:†¨‡°°fãÏ:€H…\?¡”‚6₫ €ôÅƠ“-N‹h¿TIÆiTƠăÚ@}®¶CGăØÏ}‚̉•rqă\9–µ°»«¢(ÿ‹€Srcü€q"tG<÷ơ FGŒ'Nˆ¸ÊÀqèpđđŸ={¶;-ñIy´a¼a<˜ú4^2©„—¡?0§:¦RÛ˜ô3€e’‹/¾8MéJí!À}‚¢ƒ#˜„ơ/[¶LQ$ÙÆKŒ‰–đK—ś(åƠ¨t”}S£G)¯°–­(•D¥JD•j•¼Ѫûøă¥,ÑƯùp“G«7¥o ë ŸN: U¼ß8§¤2xäÛr¶¡ØC¨Ï)sê+…kæxÀ¢d +ÜS•AÛ1°¤ZŸQ?Z(Ú8àQî¤kJD¢^¶Új«ẹçÖg×`àw8Ú$UÛRmă\ê€&˜>2ö…y1ëMúîêơ÷ç‹“_F±¾³f̃n»íä\S¨U—–£T<ß(Éû1tèP1¬bí̉¥‹Đfê£È…‰`4íׯŸS‡á#2ÛTB’sr!è͈”đ lgîE~’‰@y…É®÷Úk/)¢Øu¢ƒ¨C?:+„÷M:½c¯Óe•²Í̉û(;og€/FưÜ;0³0N£7Å :UîÇbƯż“Z₫TĂG„®>ƒ.^Î ™₫˜È’ »>%z¦®ñàæBuÖYfôèÑ’xIë\ ^ä.'G‹-r¦`ƒ ă‡/đ¼†£üư œgœq†XÂQ@âĂ6xđ`¡»áX^p~x¼”\x#/=^&xÜ‚ߦb}gQáO¾±cæåÈg‡¤¯Î…AÅAøåY¬öh9ÑC€(+Â_&÷F@WŒñ6`¡TMRé(°T£G5ƯQÚE@#à¢{™†₫†ƠßµƒNJưû÷—gYP;È”¿§̀ùY×Àe¸åoI~5¢0ƒ–ôCåS9*|aă<•Q 4Èß­ßE@È¢»ˆ‚!€ï.ïGªÈ ¿P(ơ®ºêªÄ&ïĐÁ±¾†6ơ8Æ ¾cL!R#Ù ƒc3Y°`d1¨ ‹"ZqÎåĂØu×]%ŸVº̣²ÙÎ{Ë%R̀:ÑUùF|Ærô¼›ĐIàAn(—/ Û1ÖÓ_~óCˆ€Yö ÆûRµÙaÆ܃ĐÍ7ß́6‰C1ºĂba†nÓEɺJĐÓ+—•+“ÏB¯…_–~·ØT¥BØ!°Br₫³ƒN` _†ü‚_|±Nó`Ø$yRÇ€»đMsöÙg–6*cưvđ́ @αÊÉÀ>đr¼UÀV1Ÿ(+üÅo›ë£µvàL:ÔF‚–k/cÜùÖ»*° “ηáÜơöI:ßáă·7Ü÷¤BRüđÛïc›n»_D:̀-Gb`9“Úêú–X#Hâ^ñÛâשßă‹€<<‹v"Ø—¶ÜÖ;.èܹs`ỵ¬Ç·w™[γbĂ“ë1#ư¶ÜÈM™qlÉ\b~{-ư‚ŒCàn½B›́5°“¸ü Ó³E@ˆ V ă¬åÙ`ë´I•DÀR7Ö3Sî'x¢’M©ÉºYY“àï¯X£eÁب 9cY£TR¬ĂZ`Öư°Y7Ú„çÍY’ØNëë[1û5œÙ7-K¨u,ơR`s]6̣NÆk ®¹æ€íé„1×F.$I₫Ø₫n#È‚qăÆVyX¯ÿàöÛoOMY6’£̃²Đ¡ rbîÆFêBWÇ8,Ö¡7°r zC7Æói£KRçÊ•+ƒ¾}ûÖ[¶‘58ˆ‘±œRíË·Í`âă+‡(L̉-ZĂT`™4»|0såºO½“Ô¿víÚ¥¼×üëk#Í{åÈú³káÚiNÄLÔ™n{â€*ư¢ö©¬”`•̀W°.s¾_¹8R%Æ&̀×y‡ûWÔg—¸SFa}AÅ)§œb́äTÊ'ug#X)IäƠ"H˜™ßæp9‡rˆp46jÔ(¼Ë؃„4úÑDx0)Xr8|üö–î'BrǦûôÛI;ˆ¿=ẀíKÄ 2$áà× >„äaAÿË_₫’ØE_À̉‰R`9$âưI4^qíÛ·—<:7Ưt“đ0sïCaEé£>*”„ÑV£D!Ê\5̉£ï.í“" „ /¢4Wadô7÷„ă§N•Ç@*-VÏ ¡s51ߟ7oû™̣“ó\$WÊʼ‘ơ&4­.¬UJ̃ î)GƯE“XŸ}öÙgek]Ôp*[ǵ"E €N FƘló~ ÏA¿ưç•W^™%ô0ÖQr!s̀1†?ÎơuJüñ¼¹Dœ¤£Ä"*dÚ´i]Êv:6·-ü‰nÏO$îôPè†hQ.Å®³©Íë•´…a¡½0Å@aïGVĐ.úƯz9ŸÑíË·Í´ˆè ̃3™(ÁÚ¾äX₫¡S!ê£ú…Ù/´'èí¥—lü¿₫ơå~Égî]ȵp÷ :Lîu'n;mfQ+̣; :µ̉Yígz¬V”.4 cJª‡8})u÷\tÑE Ê,BăXT…•¸„̣’Z´h‘7 µ¢nBë Ưb °̣$ĂFƯŒ„ØÑÇ%ëêTÇVz8[ ®Pr1(2̉g×föCó₫ôß7|TºíZạ:Ù†Œ̣‡Â!˜ëN-tw<#ÎÈVXMÑ=Ûz´̃¬Y³„ÎÍFyH¢v’’1±)§¨Ñ£œhk]€"PI 15j”,f¡MTQ|˜‡·jƠJæ$6ºZ9₫~ư^ZXóXo`™±&@éTg8sH’ÛÂÏÁ)cJÛ̉́J‡.’À#´’={&)Ų+­°£¢ŒSa=Ó³EÀGCyjùc}5·£w÷ơ¿£C‚éƒ>ÍŒW›nº©ạ̈©ŸüsR}§Œ¬÷Ñß°¦‡‹1½TRª:1\3ă4C_P̣³fwỚç½Eư`ä¯ásÑeñÉñàéK©Ú́בé{!ơcH”9ï4ÅÁ¥”Rȵ(e»âT¶>âtµbÖVP¸áDæÏŸŸH₫äwÅ7|X:*±È–zđđë×ï@©°¡¶’küøñââ ŒL :ê(Ă}·F»j¢]̣¦92 M̉6D ñäÊ;í´Ó’’„F¬™ÚE@PE %¬³zè!súé§K® ·Ür‹é̃½{Êău£" Db¢ăD,ư˜è8s9_­ ÿåÏ©LưZk"€Á±ü~bíæ;áf„©(µ„‘ ×_½x™@ăöàƒJÂ/…Ñ£G‹WÉ„ $<·Ú`ѧOsÜqÇ™+Vˆ¡ª/’¹cèT£G-=ÚWE@¨'ŸpûJ´Wë,?Pm"wƯu—(ŒÊß­QPE@È"p,„úH"9Xƒâh‡§¿"è8‰äAlj„)µ̣)SÏ)êƠ÷@IDATjø(Ö5QÓ?ü`l‚Qbbe· ƒ¥ß„λ\5„v²f ¤óùçŸ7}-‡çöÛo/Ñ ï¿ÿ¾đ^öèÑĂØ„RæƠW_Z·† –]á_‰ C”G›6m̀Ô©SÅđƒñĂ&Z/?,¶\mÓHr!­ơ(@”PĂG”®F4Û‚²¨qăÆB_c†" (€"7 Vry?;́0ÉåqÅWH.Ùo¾ù&nƯÑöV˜;yä¡ë"w ‘ÓºMtœ*ñ@@ ñ¸N±iåO?ưd|Á*ºûî»û›’¾cywQ"„&ª%> ư¾ưö[ÉgC²:ˆ·$†ÀfÍ™aÆ™eË–8ƠÙç¸1c̉µ¼›µ(:¢F¼/gIOüä“O„C–ÜN<+¿₫úkVơÁ‹2×~ÿdUˆ¤Ô<Ÿ~ú©ôT#>jà‚çÙẸιÄÔPƒè˜'z" (@E€M+"InưÛo¿I>†.]º̣X©(Ù À<§/è6]䇿]¿GÍñƯkË–a´˜={¶đ÷³xêÚµ«$… '4 wné̉¥’<©Q£F’è»VĂaôwüxă7̀w̃)Ñ $˜$âÚªN:Iâ+5×\3~+°Å÷ß¿đÈG!—‡ë=ÑûÜrË-%çAñFæú"‚N9å3eÊỲp̃\$pÎ%!ç©(ƠÆÁ­¶ÚJºI²Ê 6Ø Ú»¬ưËî((ùåñl$µ" (€"W4ïG\¯\åÛÍÚ(Ë1±fE¿³ÖZkU¾qÚ‚¬PĂGÖPé€" ü/(0đƯvÛmfÑ¢E ïôM6ÙD’u÷ïßß YŸÁ¯ñ$ÊÅó¬Y³Di‚̣„|&Ưºu«W‰]J<ÔèQJt /»mÛ¶fáÂ…‰è?J$êÏ₫sÚ™ˆ6hĐÀ|÷Ưw‰cÔđ‘€B¿(I<û́³’„‘…ZØs-é@ư¡XN=ơT3~üx³ï¾ûÊج (€" (qFƯ×^{Íœxâ‰æí·ß6ë­·¹đ eƯZ‹kö8_Km»"+Ju•+bz¼" Ô,$´ºä’K̀vÛmg9æ³`Á±üĂïHÔ‘K$3'·G-N ˆ̣ç̣@™}ÄG¨Ñ£fŸü;ư•‹IU aê&1Ơ~Ư¦(ÿEÀå÷ÀSME¨³Ï>[Á¹ă¥—^ªïpƯ¯(€" DÖæ÷#̉—H§” 5|” Z-XPªB{́1Cb´w̃Ù\uƠU4;(0€à=¶Z—Ë£wï̃fŧ:sæL3qâDùÇj¥D#=*…|áỡzë­†é„H"B×UE ~œáCó{Ô•àN;íd8àb̀˜1 ‰" (€"{4ïǴ/¡v@È Ợ:KORE Ê@™?mÚ4I\…2ŸđXd—]v1't’AÉ¿á†J*ơ£p ¹<;î83|øpÓ¤I“c£F(Ü!ù·ÄºSåù ä¾ûîKäöȦ¨³æ̀™cÖYg¡§Ăó½E‹†|T鄈(‚₫yCî©/¾øḄ÷Ă'ƯyùœCư?üđƒÔóÑG™üQÆ—½÷̃Û4õÜü₫÷™ưTܹ7–|Yô 0prc¹‡RI>¸¤*G·EgøĐˆh_§(µîœsÎ1O=ơ”Á‘œK¼×UE 2đ>'—à‹/¾(´…̀eTE ?pV„Åa×]w5§Ÿ~ºyå•W IÏÇkºwï_¡z–" DûUQE@°X…eđÜsÏÇ|°îºë’eY₫¬â5èÑ£Gđ̀3ÏÖ]±²X¢À›¸]0²¹<«ˆl₫“Hàc“–›<°ỄÀ&ñ |̣Éà×_DÛ´u°iUî˽tàÊuăù{óÍ7«¸¯sÂ’%KϨơ`Oœks|6 $éxë£>:Q¦{®Ư§å÷Myß>úè£ÁÚk¯ÜñîÓ.’ê´-Ÿsh¯ßW¾ÿyï½÷6ú,©_îÇÀk”©Óξ}û6ßPbŸU˜¸Sä3_\’ ѱAÀ&b”{ÄcÓfmhe`Œ°Ôrß\tÑE•mŒÖ®Ô8?ÿü³¬O˜l¼ñÆu2 ¾ụ̈ËGE»¯†ÀÿüÏÿ–½!°Q̣®³‘àꫯØ®¢(Ơƒ̃€*€" Ô4ß|óM0nܸÀzI')G·̃zë`Ø°aÁªU«ê(8k0›¸ø`À³è̃ó̀0J~øá‡%¨Q‹TjÆ Öú–ÖZ-{ơêøóæÚ@B{©T/jø¨̃k«=Szxươ×eÁÂ"Â)‰°¡®¥pJé^O‘U½;êQ€¯Fx̃‚¾FßXa©˜’:ÅÅí·ÔsÁ{ï½à¡…" lø8è ƒ›̀0¡$° Ñ%²‹yÆ×Zk­Ä>›Ë'aX \âoÇ`đ׿₫5Xc5ä<û₫ûï¥}ùœc©³m§ư~ûPrœ|̣É¥Ô’ºÂ‘)áö£!"6̃xă 7prc›¿€Ë—¤ ¡?b…€{FæÏŸ«vkc+‹a”«ŒO8ˆ¨(qB€wâÈ‘#å₫µTmẠ́åËå½ưöÛ‹£Ó¡‡w40Χv”Í32~üø²@Ă»ôÍ6ÛLêæÙÄùăŒ3Î̃ÿư²´A+Qªï¾ûNæø¬Đ́¹çÁÛo¿]]Ơ>)5‡€>jî’k‡ÚFïq<ÄÛµk— €aÑ°É&›çw(Q5¼µî=ơ(Z¬Fº×-.[|Æk¯½6a\SJù‘<˾ñÀ7|øÛyÆ}Å¿Ăŧ¦jƯºu`seˆáÀVød!·Ÿh ~E¶çP¦_?‘.”–p]n¿ÛNßÂqŒ_¶ßÿ|qqơêgü ª‘{€?›³*~ĐWÁƒ˽³ă;V´Z¹"+Γ›nœPd~ơƠWÁÔ©SÅ)Ç"KS½{ë«‹²—.]*Ñ⌭(J‰Fe¼-‡`”´¹ĐŒ8n|Ç‚Ăó$E@È ûÛß„&Ç! Œ=ôPîé€")Ôđ©Ë¡QR!€ÔÅ_àñå< ùlƠªU0ỉ¤”ÊÍRµ%Nåå•UTsy8,Ơèáˆç§oø@ià+çĂtW>ÍƠgŸ}Ø$ö‰¨ ßđ1a„Ä}ëGm„̣©¦¨Û(A™à—éÎ%/ÇO?ư”P–äseq̃%†£Û¢~×_Îñû|Ưu×¥Ufû´\®o…àâ·W¿Çî{î¡ÆǧÑÚ̉H!Đ£G¹‡ºví©vicl`®O„(† ¨*‡*Æ+¯¼Rîk¶]uƠUÙ•̣ÊŸ9sfĐ°aC)yŘ1cÎ)O*̣FÚ0cÆŒ`ß}÷•60æcÔéĐ¡C€Á2Ÿ¨–"7Q‹SbƒI÷#6—KªÔ‹€>ê…HP¸!@”¨Q£‚m¶Ù&á¥È`×]w•…̃äLhTR#—(Z¯FÔ×0n[S>\ ]GåäÓ\©…qÓ7ø†¿LÊÈæÏPø9;Rë×̃ùœĂyaJªTu±Í7|%â 6·̃zkZÇOæúV.´W%~@‡Â=´Ï>ûįñÚâH €Q–{Åñ»ï¾‰6i#\ ʃÜÜÇä÷zà$—ß!CdR+̣Ö|đAжm[)è’nƯº̀©Ë)D€<ó̀3AçÎδ¥eË–bœÑ¨¿r^ ­+îh̃¸_Am¿"đ¿ü̃¾üUE@ˆ=vH3Ï=÷œ9á„Œå»5–“Ú؈±̃N¦gÏÆ* ÍË/¿lh¬G–±‹÷Ø÷¹° “UŒiÓ¦»H4–æÊØ}sÄG»(,E•y—ĩÆz¡Êuµt@Ær²öíÛËÙœw™zbt8₫øăåù¥EÇ—ûqĈ̣ɶ.]ºät­­áÀ4mÚ4íßn»íf¬r€¢´0o¾ù¦±üƯ梋.2ÖT¶ûÿ.½ôR³ƯvÛ›D6çsÏÙ‘Gi,mV¢hé"Ï Ö0–¢ËXGbŸûb£Cp\‘Ÿ{íµW¢Ưn¿û´àîkÚÏ\pI[ˆîˆ4ÿøÇ?¤}\kE ,-¨±ùdܹ馛̣)BÏQ*ïñsÎ9ÇvØaÆæû3 0–×\vÙe†ùs^̃»̀%óÖ6—ˆyüñÇÍ\ Ïul0Öàl|̣É|̀ëÖ=6ÊĂ؈wóâ‹/Ky%së@b,Í—ùË_₫bî¸ă¤yG^éI@ Àú̉Re›Èđçˆơ‡ÍûQ½×.*U„€Z€E@ˆ3ĐĂŒ7N’ âÑd‡gù#‘áå—_.aª̃]ÿS”½ÑHú¯iœđ£\dí'ÊckîQGÅv’#ÙD|¼óÎ;Gy‘Ó̃nh$| *k IK!‘é8„]èß…^(yC¤S̃?wL6}öN“¯©pơ·—pú;zÀiÏ=v₫ùçG¯qÚ¢Ø @Bhî#¼åưq:6І*O?ư4ѹóÎ;_~ùe`‚îƯ»ËưÍ;—¼`…ïwè¥HŒ̀3•–5°¤Î,¤®úÎ¥-¼ëO:é¤D¤(s˜-·Ü2¸á†$Ù{}eè~E ÖĐ¼µ~hÿă€F|ØÙˆ" Ä×_Ưœ}öÙÆ̉Y‰×ÖâÅ‹¥–‡ßµ°dɃG¶]tˆ§SüzX¾Ç)ÊT4̉£|÷F¥k:ï¼óÑ;́°ƒ±Æi‘k®¹fÆæ „ç#2₫|cù¯So©(L³fÍ̀É'Ÿl~ùåóí·ß<ă4h ăˆ¥¯ó¬²ÏX£‡D@=:)*Ÿs¬A6©=Öđa¨ĂʵM“|· °ÄvË+n,åWc,…yë­·Œk¿; _\Üùú?4â#~×,-f́°ybÄ[~„ Ql¢¶I¨6ÚH¢yÇ¿÷̃{)NDóäÉ“Í~ûíg,µéÓ§¼ëë-,ÍøẰ`lRuĂƒ÷±Í!böß³bÅ4g•f3ma₫Ä3ûöÛo›ÈƯ¬¿₫úæ£>2̀±vÜqGcÅdn]h©@üà9²tqÑEÔë›#ÈôîƯÛ…­¢(ÑF@ Ѿ>Ú:E@đ 4t&{ï½·¹ùæ›ÍW_}e6̃xc™¼ćxä‘G̀ᇤ”ôĐ¯ÿú׿dÂƤ…F"”¨'N”ïQ¤S£‡wkà«Ow…2Â:v́˜–̃ÉÁ̉©S§Ö駟’փȂ ̀Ê•+Íܹs 3ø»₫úëEaáÊtŸ›o¾y’A5ŸsR+\ùîª9Gƒe½PƯæ$ƒ.ÆTèéRQ]å‹K¢rư;Ôđ»KÉC#yÆgHÛl̃/#ÙPm”"h)›7onîºë.9ꩧJK !¬1vß}wc£@„&—wk¾ÂCá¬Y³ŒÍ·%s(y¡{đÁó-6ïóè·̣y¯M7ƯÔ|öÙgfØ°aÆæ53ƒ à¼+Ñ*F€gµ2c´x8TƯwß}B}Å3¥¢(F î!+Ú~E@¨~,o`'A“&M´7Đß´nƯ:˜d“xL%7́D-°^î‚'XZ«Đ‚E9é»̉[åvăt´O¿¦Pñé®́tJ(*¬¡!ѽtTWNPî΅b%đS®K Î3àè¥Ø~æ™g&(¨ Í '#‡‚«ç8ª+ê°F\¡ÈàÙ¤ üĂ_|‘ ̣́“¿³ÿºë® ¬7§ôĂzp&Ñq±ßÇ5\€ë—X!=ƒơT”{èµ×^‹UÛµ±ÑC€1ÈFÛÉư4}úôè5P[¤d‰I¾G%÷2÷4´¹¼Ë?üđĂÀæï’ù1´¹Ë—/ϲÄô‡ñ^‡*“ryÛhÔà´ÓN ¬sBú“Ê°‡ytW6z^ÚEÛl^±ÀFÀú¾(ĂĐ*b‹€¬¡4Ø`ƒ d¬€ÖÎQcÛm¸"Píà=©¢(@ä°̃ĐM̀'œ»6=1!G!yÊ)§¯¾új€̣R%7â–ËĂơN‰êǜdø°ô E‹̣{ï½7éÙÏdø džoÄàüTXÄ8±ôoÂcŸêX›^>ç„/~Ùé¾; mơqKw¼Ûî>̣ÅÅᣟñA%»à²WQ E _¿~rO‘ïHEˆ36’<èß¿¿ÜÏ(0m2p1~à$a#;Å€< ̀‹!{ö́)ơ‘gĂF—ä «´`€±Ñ̃M|x_°ö²‰Ñƒ^x¡̉ÍÓúH"ÎûÁ˜që­·lWQh! †h]m"Pó Ä9r¤x9/U”6»îºk€‡³ïñ\ó`å@8ÊĂR\E>ʃ.ªÑ#Ç ĂĂ:è „Wº¯ §+DwøÆ‹°̣Ö7|ơ€§/HựØ}† )î\ù:Ïfw¬ÿÉâ&\W>çÍFâS¿l¾ÑF_ñ]guûĂÉÔĂ(œ ^–ÆK”«­¶œÆ5_\>ú}öY¹₫$¤VQin¼²9 Q¤–¡T K™Xú\ñÚ&̣98l¸á†bü`¿åñ/Jq́ÂÈ°îºëÊsdómHôzQ /°@,åm`é¸Ï8Ñ):tüqÁ¥À*ôtE ª JlƠªUÍû‘xm̉À̉åVU?µ3@Üø°“WE@P*†Ă¼·ä–€÷ö‡~¶¼øC16\8q]¢â54¦“ËcđàÁ’ôäÍä' 93 Ièe± PCBƠ—_~Ù¬·̃z¿ܾ}ûDî†(·]Û-WÈdrßó4jÔÈÀÙ›Ń‚Ƽûî»’ïƒä…¸øçë÷h#`q’Ë N{îeE ¸™¼HÇsŒ$.F™Z†"P XƒX:+ÉH¾ ̃›=ö˜¼oŸ₫yY‡đ¶ÊY£¤{ç̉ṽÉ$?á„̀âÅ‹¥.]aÆkÈ5Ria¾a#=̀ˆ# 9Ph¯u¢06"Ä 2Ätï̃Ưè¬̉WIëäú³Qàfüøṇ̃<“Oò˜1ÆS£ÔLm‹"P³¨á£f/½v\¨<(g̀˜a,¯®$çu;Ë©+‹OX”¡–NMæåo…Ö¨"pÀêÚµ«8 °₫`mº„q£Ç đ':NÅ”¥̀ÑQ–"Ûo¿½¹óÎ;¥‘+Fñ—Aÿ_ưu1€̀=[0pú°¹J̀yçgzơê•Ö£àʵE fà`tÏ=÷˜‹/¾Xœ8-[…±y„̀₫ûï³hsêCàìT_·´G€"eđnBcy¢¥_2D$`Üè̉¥‹Ll¢=ƒ§₫™¼±£ÜÇJ· L‰”¹ækŒ¥“(;î¸C*–Ç8̣¸ªÑ£̉wÖu?₫x;ñPeq…G¿3ăÙ±cGñbÅ›¯MË%n̉E©D½¯Ú¾ü˜6m±”-r?A©¢¢̉,M ̀/,UŸ̀ÙQ®–¡T̃8m²É&桇’h îk¢?¶Új+‰Â|à̀ûï¿o₫ñHH1Ö'ÔqàÊ;ü™g‘²1¬XjB³×^{U|®.76Gy¤D_ÿûßÿ6ï½÷±9Ò#<"J^ælü(ƠJ\C­S¨4°(́¶Ûn¦E‹楗^26W™7o<̀ÁƯ½̉íÔúZD@ µxƠµÏ@ L#Ç™gi°·.Z´HhcXdœzê©âátÆg˜wÜQ<+ĐĪ©’(è'đ^Ă[Ëæ̣…å(.—Z)ÁR£G)ÑƠ²«-¶ØBè8xÆyæïºë.ó¡ơ¼ÆK£ßQH ́C‘¢R{ÜvÛm¢¬;üđĂM»víjíqI@é‹Çæ26‘̀íJR‘ª” vÚi'‰j°¹‘ŒMtn˜7CUƒbjL”ư(3‰¤ÄY«Âs´Ă;ˆqè>øÀ<ưôÓBñ ½V"5iăFm$Q^¬)x₫¡çüôÓOÍ“O>i&Ol~úé'1á´¦¢Ô*PÂ1f0ßZ±b…DLqͳbsçDbºV¯›ö»úPĂGơ_cí¡"PQ˜ÀÁq̣É'‹̣í£>®Ø6mÚ˜+®¸ÂØÁâ9eª'DW*îQt_̃zzÍ }9Gđ*ƒ‚EŒM4,Ê">œÂøªR› >Ü|₫ùç¦oß¾â‰X›(h¯K­==ôPÓ²eËRT¡e*eE¥å>û́#ï̉eË–‰Â&-6 6”ñ“ rÛ¼öÚk¢ü/–1CÑØG}´¼Ï.\h¨ß&‡°¨ä  6»éܹ³¼SÈwB ë¨7'M$ ^ÚKTZD€çÇN —ĐỊ̂WÍñQé+ ơ+UˆÀo¿ư&@pÖâ Dh4BbƯ={HX7 •â ç\°Ñ &ÅâRvơè§"PMœ|úôéâyÍØ‹€ tZ_MW;÷¾đ̃…Gº…öíÛç^€¡(@ !@¤$óÑưöÛO"'1êá ̣‚ờe—]fF)Û–XTtpd âƒ<^«V­2[HL®¦(&'_#8²á́†`aB”?´?*@­" y?jơÊk¿£†€>¢vE´=@Œ€óuêÔ©’¤oåÊ•âµDwđ <餓̀±Ç+ÇxB¨¼¬lî¿ÿ~ñ₫†₫†›nƯºÅ*œVŹ´E@PDá‹,_¾Ü4kÖ̀í̉OE@P45In$’YIrṣ%±~á7\S¦Lÿĉ%Éw¢̣ÚŒñ…ù=TÀĐkAĂM†¨ăP]‘Ÿd́رâÙNÇÉyÀzdĐ Ả₫¼ÀĐ“˜#@ÔÆÓsÏ=W"¤6Ûl31döïß_sïÅüÚjóăƒ€>âs­´¥@$`rN. &₫$₫ûñÇ¥$¹ë̃½»,˜¬GÑK)’€æШjˆ̣ »jôÈá¢ë¡€" d‰À›o¾)(ëđTÖ÷p–Àéa€"Pó?‹Ü„8m1v₫ù檫®\ˆ´<î¸ằĂ?,Ñ́(üIR^lAa:zôhsùå—˾ñÆ›Ûo¿Ư@¿Uá]3gÎq‚â¿Ö­[› .¸@h²45ªWOÛU*0¦2'ăxꩧÄ)…||Đ~™«¢(¥E@ ¥ÅWKWªB›g̀˜!đ%K–Hm:»ơÖ[›N8Áœx≦qăÆJ³R‚; Z¢<€F%¸A´HE@P,x rÈ!fÓM75Ddª(€" d†‡ë®»Î\|ñÅf­µÖ’¨rÚ _ưµ9âˆ#̀‚ $ñ÷ƒ>X’¨¦äï"Oy?0"7qÔ¨Qq’}oÊ{䯿₫jHê˜ÈpÀ’Ư¥K—XQ,•¤Z-Q@¤F̃(Z´" Ô<p®ŸqÆfï½÷6/¾øbÍă¡(€"+?ÿü³D}<ôĐC’°oíw̃YùôÓO…ʉdçM41=ö˜Ùe—]r­"«ă¿ụ̈KÉ™AN/"&0 @}Uªú²jT9Cbg ³gÏ6D îÚvÛm%¦W¯^‘6àdÑE=DÈ Íû‘\z°"PÔđQµE º`̉'̃ (O˜´"›l²‰„zĂA ç,Y•̉ PMQ ¤F̉Ü'q,ơÿø‡Á00̃àiY_Ôc¡YhÚ´iƠy:œ04£`Ñ\IéîƯî !.ʦ=zH„¦Û®Ÿ€" (Ù#€¯w̃yḈ¸ăf₫üù’³ç/̃Í;wî~ÖBO>ùdẸ́püöÛo’[„\̀yÈáD^?¢́£.$mÿư÷%‚j0r‚`ÀÙ|óÍÍÙgŸ--l°AÔ»¡íS‚€æư( ŒZˆ"5jøÈ*=P¨=>øà3ỉ$s×]w M|”mđ´öë×Ï~øáfƯu×­=`ÊÜăj̣:5z”ùpuHJÚ¢E‹XRí ă¬oØđq‚ EËzë­WƯ øÀMï½÷óÎ;O”M₫>ư®(€"¼ƒ1z´oß^æ+D·ă†#k£÷̃{OŒP bÁøÅ`)„¶¼ưöÛB+L>mÀ¸MRñ ”¢Ê¢–IûW­Ze˜³±eóFI^HÖ—8w¨(ƠÏ‚æư¨ö«¬ư‹ ¿JC´€" đ&‚œÄä„O_sÍ5¢¨FÙÖ¿ƒBq̃¼y†„\jô(í5#Ê£wï̃¦OŸ>fÅâ5sæL3a³Ùf›%)FKÛ’â•®FâaY %ùÊưlús饗 •̃çŸ^çp¢Br-¯N!Ü€̣ïM"çP^|ÿư÷‰ÖĹ_‰Nè—²#€ Ùb‹-Ê^·V¨(@µ @dBóæÍÅŒ>Aw5tèPéïçí·ß^ !¼»1û:›Rma}FÔ ÷DRAѪU+ọ́Ë/—¢Ê¢–Iû·ÜrK1ƃƠ°aĂ$¢÷³Ï>“$îôˆœïTjF€gÊ:(ÄO?ưt‰â?~¼°ièư_ÍW^ûV ÔđQ ÔµNE ‚à¥4räHñT:́°ẰĂ?,Ó»í¶›xå|ûí·›Ưwß]¼‹"Ø…ªj̉}÷ƯgÚ´i#¹T îÁB’@SúÓŸbÙW5zẠ̈²•­ÑWßzë-³té̉Ä^Ü÷xP²@p²ñÆ›¯¾úÊư”O<¯Ú¶m+ÜÑ₫ñIÆàê°±eưcQ„‘GE¨5|Ô‡îWE ;\>C à¼å–[ĉ³“íµ×^[ Da@\*!ê“6àµá†JÔI×®]Ím·Ư–‘>´Tíɵ\æ8̀å.»́2™û=Zû¬¹ă;̀<`~üñGiàk®i=ôPñ$ƒhơƠWVĂ«¸5Ơ–ËĂ]*5z8$ôÓG€1I¨®ṔcäHIÆ…Đ):ê(ñ¾¬#@.XøêwE x³€æóƠW_§…TÇé6E@Ṕøå—_̀ÀÅèUç£>jö̃{o)€D̃?₫¸a~ÂØKô<Ñüă³¯ Ç#™;~̉I'É稃>XŒ"â$äư y;gđ ?Ưºu“(¨–UjE@ó~Të•Ơ~E5|Dá*h2#€7 K’•/Y²Ä0QG¶̃zkI.G’<¸iắ1]fH‹RQä(X¹r¥”‡’ϲ¸'2V£GQnª,ÄWöåÀx”ÎđÎ Å15¼ĐNœQăm8b‚cHúüóÏ ­#äÁđB;PR xu¦h+æ̀™cÖYgñö„ªó3)4àïŸL¿øâ Ó©S'ùóÏ£lgü¡`±hÑ"Áâÿ³w̃ÑvSW₫?¿É$3 ³èÆ@ÓKŒé$ØTÓ{¯Æôz =&˜L ½J‚éÍ †ĐbZ(ÓKV€6a˜̣Çè·?{²Å¹z̉mïö»÷ZïIW:eŸ¯¤££] æi¬L …e9Nà›zl “ر̣§OBeaºÎ:ë„!C†äâaă .Ö†o; îîQˆûñyçí,GÀpº̣Rlºé¦á…^P/ÂN :TGCÈà;î¸CspđÅZ₫ꫯnú7ëŸO<1\|ñź&Xzé¥5ïÇzë­×u(ăéÎz / b ÖP(>ÈóF2yÿFíºËê W€çư¨$/âÔƒ€|,;9@Ÿ đ̉K/%|p"J‰È™3̣%²xO$I_"VL}‚Dg SÂŒ%»í¶["ÂZ½&"ôLD ̉×ăÓO?MÖ\sM½Ï¸ïyä‘D„·uœ›¶! üDB\¥÷½ë+̣b噿.»́²D,¤´ä¾IŸ!ÉE”ˆ"£¤-±ĐLäĂYû¢®ư;6‘üEé9h”ÔƒÇvÚIïa«o;î¸ÜgU¬@ y‘ö×aßx„ÏxLq9‹b#‰q²c0yÑE%b ©}Đ(IrûaA"Ê’qÙzq±ú¾íLzê)½x¯89€#à4̃ɳfÍJDÙ‘ˆ1B2zôè’uëñZĐ9˜uÇ‘GÙ¸ÎË´$ ƒD¼c1˜̉¾%Vræ™g¦ë¤2U;̣8>₫øăÉÆoœˆ¢CÇÄwë*«¬’ˆr©kÇƠ‘`;S…€„úM$ï‡Î/¬óÅë)‘°ăÅ£3ătX89@# @É-·Ü’HÜûT°‡`M<:’£>ZîbIÜĂtöĐ$6o2lØ0UD¡Œ’Dæ ‹>ªº\éÑíW°ùüÇ}~Ơ(>bĂ¢Oÿîw¿+Q|H¾œô£9V,äíÇrJ‰¸ǹ̀ dÏưH·rŒÏ>Üí|uh¡âCÂ)&1NvŒ~â1[›EÛóÎ;o€ ^\èÛ©³à½Ï½ y;›QçÎp.D€o§iÓ¦©ñxpªE< ”?ÿùÏu/Íä”SN‰O7mŸu ̉1cÆhß(^X£|đÁMë³Ù ³N’Äí‰ä=H¿eQ8ñ~otØl>¼}G •H„D<¸ôïÉ{“L:µ•,x_@Ï đM¦Pù:rr̃C`×]wƠ¸¯bưp¿&ñï 7ܠɃÏ=÷\MLè§Ö"@.Üß÷ÜsOÍ»È"‹h‚B“ä,/LOk9\õjpøyíb/aa¢̃|óÍI<É "ˆ´œx·âèp ˆÇD ~´xQä>s[l±Eû¬?Y†É“'§IƉéÍK›Đ^{í•æ"!<aª>úè#ƒ Ea¡ªÄÓ+/œ]„¦‚£/¿ü2ˆbd@è/B[•#êĐ¼€•Íï§vZ |„Ñ`p±6|Û¹xbóν6Ι#àt?¼[ ½Ä:‚ï«o¼1ˆA:0̃óÇsŒ₫±æà›‹ÄăÍ&B@-¹ä’úMAâp¾'ÄÛ:̣ê₫ûïov÷MiŸ¤âån½ơÖđꫯj̉sÖno½ơVƯ°Â +„‰'B99½‚!l÷Ûo¿ †,ü•W^ GuTï^¢Ăh®øhỖ‘#ФŸ…!/JqVa»ÅoWưƯ+¹<Ä̉:ụ̈—¿TA¤xyh Ûm·ƯV…°Ư+=ºư öÿä,²Ǜ(3ˆpàĐCU”1¡x 7‡)3ø ^n¹åRÉ6Ûlx–%œ•V›0a‚*1Ä;Cól°e₫]k­µRå}RvÈ”HÈbD¢wx¬•à‘ºdèËr’Đ}ÙXø]/.Ôuê|\ñѸkÄü am‡~x¿UK”¯µNµmgËUꋹL¼|ĂøñăĂk¯½–­^ơọY_Ơl¹©ÓKÄ\ÊØß}÷Ư4G^/ÏÇR=a`Àij…a|gñ®?ơÔSë|ŒP„́¼Äw†¬ij\óî²Ë.*8µ5Q+øhd¬mÄË#`$öÆo !¦ùÍ0,á,¿ụ̈eO-ót#ùó¶F#À÷Á&›l¢ß›o¾¹̃ïä1trè߈#à8@Q.Üá{…<¼U¯\ÉÖŒ#áTm¨+ù Mˆ[-Ë$®‡}²PWqÙl8ªx„¢ ĐöhÓB]Åí‰×F"ÂϸJº–3 ·ôxL´G¨‹́3ÎoIĐ^+®‹ÎÅ<^wƯu¹ùsâpV6¶Áà’Üw:âAÛư×ÑŒvs÷̃{o:?€)Ïc%"¬ eí¯0~•Ú,:/ Í´±Ṕ?øAz~D08 LµÎ9眒¶l|å¶̀¯Ơ`V-­,¶1ï̀Ư¾ˆœJs½•W£sûeX"ºîä½÷̃+a–ç_Œ.ôÙáy`MÑ*â₫d"ÆUÚ?92,ƒV±Đ´~ÛgŸ}–ˆB7ÍkÂ\ÄV7H̃ ‚iuI_wƯuÓ°DÍîßÛwÊ!°Á̃‹?ùÉỎđSÖÆ£>ªá+ø—!«î»ï¾’?ÊüéOJ½EdY©!„¿°S×[=<°Øºùæ›ĂÿøGơæ˜m¶ÙÔ+Ăú́vơƠW„ƒ¨•jÅ¥Öö½|{pÆáγ“»ăŸ¹û’Ø8=¾Øb‹ Y—lÀN¹Đ˜¼— ÓÈ‘#ăŸ5훇[M•¤0sc7Ñ_ÿúWË™S¹~F`ÍÜíäÄà]AáÅ_\½ 3{:q₫ú믣FRïK¼Dy晸‰¦ísÏN—P\’/@×#„æÜpĂ 5„NÓ:nAĂŒmP/<Ù.¸à óÅóK²#Fh¸ç—_~¹Üx€#à8@í_È:çËpD€\¸¶“7w±äÖ8´¸«öÂØ]éÑ7_²„ÏB6JªÆÊ–VÅa¦¬=îi±&ÔŸ¿ùÍo4D–«´EA"I5ƒµA₫ŒÄj8{́± ›,\‚€J4\*µíç;W|4î: üæmññźXCU–ëáüóÏOOO4)ƯoÖxuhÓ„Ú‰‰üFF—^ziøñl?²E€*^eÛ"ÿ¡÷º‘˜OY·1„È̀ïC‡ƠBvηư‹÷ ÷!lQ(¼øâ‹á€PÅ‚½“ç{n sEî-ñ;T²„̣̉ÀÔ\đF>0̣H‚vÍMB>n¦¹æ+~øá:¦;î¸C•<à,̃°jˆîGq„†îæq:ï€#à8µ#Đ«ĐÚÇé5GÀh9ưà娮ôhù­Ơ×bUI¢Pè ƒ*«8ĐS©¥ñj«­VèñƠW_UÄá×bbù[ô‡àÑ<.!Txûí·ĂñÇŸË# K/½t‰UhE&T ‘¸4ˆ%o¦ƒ€?(Ú6°‹¾kêŒ3ÎHÇL‚Ưr äˆ)ë1ŸkÄ>‚U’̣G£˜>ùä“ôçV[m•î7b"ùÊđ+÷×́ñ7b,Ơ¶ÁÀ*¹ºU¡Síx½\ơp/àMuÅW¨ÁO¼çcÂ;ă¼û%üm WØûï¿iê>÷ïk¬¦L™¢y¾PZ≲₫úë«·vS;oQă(xÈa†GÍw̃© è'¸3N’¼ăÁkF)-bË»qGÀh#îñÑFđ½kGÀèMúÅ˃«çJ̃¼‡;uTx5à5Á‚ä¢E‡zđÁĂ+®˜«„x̣É'Ó°Vym½ùæ›PÓ,7óÊä[rÉ%S₫H&·ÊQG₫yưèÆ*!é +¬&MÏk§ÑÇ…K£ụ̀öƒ€y{p¿.¼đÂi´Ï[ÉZe¿₫úë!{̀ Ă\á)b Q;̉‹đ^xA ’{'r¾ùæ³"¶(+!¬!’•£\Eပ9ñ₫ç4Ä̃¤ô·åŒ$ïH˜w̃yuÎ4ÅpẼ§´iáẓʶ¯‚' !E(@Âÿä‘äCĐù¾xΕ¼H:O“Øù7IÆi‹ùt‘2‚₫¿øâ IÄ–rK-µT|8j­/”kÖ6F`e8Ï–^b­!Q}ø%Ö₫(Lx'äÑ`ÇƵ'©6ïxâ’¼VZ)¿<üØààY—\ΓO>Y=¼WYe•`JG®Å¢‹.îºë®0f̀M8Î9 .¸àਲ0x€1ïàg JøÆ+¤èª²ù(Fby®s0ó„ä'RœñpÁS ¯-<̣·̃zk ?ÚL;€#à8ÍA@xN€#à8 BàW¿úU2lØ0Mp(8É{́‘ˆÅeIr̀uƠöf<‘yÛ/A×3@bJ}Ê §$QyÑÀâDƯÔTZ4NômÉÍ?úè£DUÚ¾)“¼Ă$«5àĂ€K|èD>œµîe—]–ˆ—IÚW¼#Ê—Dâz'ăÆKD–ˆĐ,!¹)É5%ætIs«·m¼–Ă¢è\̃˜­ÛƘÙ؃‹µëÛÎE@B2é};dÈÎe² 9¥¥âÊ<±Ë.»€óöÇó“äÀJÏYÛ2gˆ@>.®û" Lëp̃ʳ%Q9óƒ£ H”é1;g[ÉiTrN+äü[gủr·ß~»–ˆy!Ñy-Äü¬Äi@UÆ!Jf-Ă¼'g^¥®(<’SO=59ï¼óR̃l\l³ơ¬ææ±cÇæÖ!oÂûABréü·gûÆ3ïë;¯/ idñµ6ØJ₫³DFÆ–n36xKî¸è/Ç’ÎưGSEV" ½.̀ìb¥d2cÆŒdyæI¸ÿÄ C×q™V́‹r3aZk­µ”WÖ<Ûo¿½& oEÿ­́ƒg…ùWÉw¾ó¯(`“e—]6a-%¿­dÇûrGÀh!êJV…N€#à ¼sÆüóÏÊyRp¾aM^‰O“y3Äǘ'§OŸÂr:Kµ&:·uÛjîMNf»ÔùT”=áè£pŒ ûxç˜75¤O^%ÊâÁ³ÄKäÖcE<Ç<̉!Íă‡:\ßx>çư Æ1ꥒíŒwE-c3QÂ¥Mñ^‰±…§•W^9Øœô¦"€‡Ôå—_®^HxqđÂ1â:áq@(&#È«GyY¹foñ¼Âs¼däÇ !¡F­DÍî¿•íăĂÜ@¼o÷Ưw_Mô₫Ö[oi>–å—_^=tâëÔJ₫¼/GÀpæ!àæaë-;@Ÿ Đ/¹<́r—˜ |¨‰ơ¢†sÀ]̃„ÄVη@- ”¯‰°ë®»–ü!¡ª,Q¹XÔjˆ’rÊúæ<¡y­½öÚá‚ .„®"Ô !¦eíj¡üăÜb’ÓĂú TÉ̀™35 ³Î:KC‰˜BaŒX©Ál˜›0±¥Å,=Fèú£—´{S̉ˆWUÉñ´À wƒË »öê-@À„œ±´Ưö|„¢˳dBoï¿ÿ₫i$Â'í´ÓNiqǛ;g‰Û­¤Ü Bæñ&‡PL¹‹öéÇè̃{ïƠcđoF7Ưt“í¦Û8)z^¸. "€87 ”(Û‹1Blænˆ~xÇĐ& -pàư™rFäü«vl¼WöÚk/m₫ÈiÀ˜Ä£Oï)̃“÷×n»í¦û₫¯uđ£ åÙF¸Îµâ^5BéÀ= ¡<÷0kî¥VëÖ4|Ïr ~É?Â3Æ3ÔKî(BÉÅÂZđÈ#ÔkÄ{…* æÍ8Ü]/ßÇâ8@_"ĐBïïÊpB@>ù˜L$2K Ư  ¡sz•äC@]âå#-‘¥ä‘GI䣨W‡ëăj2¢( 3ÅsTé0"„ÉR¹°Oq¸§Jí[8(ÚQUüwÜq%<‰$eMűd뉀­¤¿ ç%¬”f§!»ÊÙđ‰Çóñ¹Zp±¶}Û™ˆ̣Pï#èt&ƒ]̀UêIF?G„ƒ4¢¬£<iZ&y÷Io¿ưvIuæQk[%çâº1?⥖֡ß,ÅüÆáºâö¬Ï¢­x<”„´%€ö)W -•í“qÄ¡®Égdué‹5s_L¬C$Ùº¶O¸ B¢tHÇ)ÊD”q5 ou÷ƯwkÂh‰ WÏ[đÊw=Æ›6Îœ"B³ôw6̀•Ñôœ|Uêüì¿ —GS§NM*3đô ™y=[’ăb„G^FŒ‰±Åáº́X5[ææ°Fá¥S󫯾z|H½8X·@đ‚Uûk®YR†z̀‘\Î/³̀2%çùQÉ;…ëkưàM¶x f‰÷É 7Ü ‡ñ̀s¶ˆ&Y®flT´ùœ₫ §4ỉ¤’öÀơ)×ö•W^)9ç?Zƒ÷×FmÎ8ă ơœÀ#́ꫯ.éoiÖÖ¢¬So[n¹E“n—jÑî_¼l™Æ¯÷˜8…ơÖ[OĂaµˆ–vĂsD²÷SN9EC̃]xá…êQ̀¼È51b„z#¿ụ̈Ë-åË;sGÀhÿܸ¦¼%GÀpzryˆÅ–ÆÀ«s¥w^ÿà?HC)6‰¸ñPæJ<#R&âg—}âég %)B6£¢¹̀ÂY¹Ál%9¹†â£ Â4™R's‡ëÊëK¼OtÎÊ;‡¢…ü$ægrÔJ̀¥tPn5”̀Ï <¥ŒµËœN^ˆ÷¡©=ôP;­ï£ZÆÆ» ŒnPpˆuº†@ÛrË-5´ÂjÆæÔ^¸'xnÅs@•ä >|¸æƒ1Î́¾!¿xæñR僕iå–¾16o'Íñ̃{ïi’8@ =˜{‘x^xP>’“ CâM¦aËX/ \œGÀpº¾ñmñ:€#0HÄ*Y|ñÅ5¬€#IdHè7é^&oƠËW·÷ǶÏ>û$’´6ae"*5¡éÄ2VĂˆĐ)·L\¾Wö—^¹’¥ăª†U‘O‘dÆŒ¥'ưWCÏŒ4Jî ̀íO˜i_„˜²ăƠnE)‘ÖĂKå…œa bí·AZru-Tuăzq˜«lq{„–ª…,¤“(/êuUM] uU₫ª‹xÍ u÷SæÊúÅ—^«xE}Y®¯…³±Ù9Ú#ü¡]ÿ́6[̃êù¶ơˆÇj"›ú ! kë,Æ“pX\GBº‰gh¶HK@m¹×@IDATsï‰"=Ùn»í”'Q¶iè·7̃x£¥|´«3®‡(…ùöl‰’*=z´†ª#4˜“#à8@ç#à¡®ä-æä8@9đ̣Ø}÷Ưƒ(:‚Ổ7đ+¯¼2,¼đ©Ev¹6ºơœ{ztë•s¾ Ẩa­H²[<7̀ăƒọ́Q6Ø`ƒ4̀ –|xsô9.½y•™³í÷äæ͹ÆX̉J>÷JáA­µ­Lv‹Çe₫°:^wƯu³Ơ₫{®¹æJ=ÓE²lƇ¹‚Ç""±y#‰ûöùçŸoX“̀ïq’̣†5œìĂh„µ|Å!ÅŒ6X—’T=ÏO#8B= x̣ă­A€çMryḥđ÷ß_¿+¸>1±₫ &ásñüÄĂüöÛo‹´tS¼[ ц÷iO?ư´®›ÉƠëÄơ „ñc=üñ€ÇóÔ"Ï*Âëá"ÊÏ^‡ÂÇç8@W#ா|μ#à4l.”½ËĂ0u¥‡!áÛnF€\–kc—]v âư¡¡ ¶̃zk OÇG<2ˆĐQÄÛîr\zó*[˜+îùù曯7ÙæQn‰đ–Fäj §Q¼oÇl‹̉ƒ| «‹₫»dᳬ^³¶\pAÚ4½8ïÄÏ~ö³ô\+v² „ÁöÉ\Î<_‰_(̃Q̉F<:*pSäq€N™2e@đùüóÏơ¡Q÷Úk¯Ürµä~$ ‚i0$\"y,lư¢Ø²¹¡Öö½|c@‰0lØ0U~po²ö ¬R–˜» uµÅ[høNÂK=üđĂÙb-ư=û́³‡Váü5Ú›"¯?¡ 6:ï¼óJr ä e­́`·ys-9A}ôÑÁ6[…ÆùçŸ?àׂï UW]5¬±Æü ƒ!úÉ&·ö8ç±ăơlá›g{‹|{îi 1¿ưíoĂÏ₫óz÷:MB€jb*ÇK\Î÷Ë#ĐÏ^ ăJ̣÷‡Ÿí>HđÍÂKl¼:°Öæ¤æQ̣“¨¼ßÈqé½+nPW|4÷Ú5=½ ̀0«gæ„c1a‘‡ŒúÅ/~ŸN÷Y/̉­²F!Œµ24}útMàË>ü"To$™Â‡µ*ón¼vfiÙî( úFù́³Ï– % Uä!’§¤‰‰ûax̣9K\WÅä„3ª—qÚüâ‹/Âĉ4ó5à¤hÜgxuÔQú]ˆr0JY{î¹5̀Ơˆ#tư‚Đ•ç¦Ư´À ¨đW„å{饗¦›nđ"ŸévóÙ̀₫Q`!¿â+‚äßQă°àưKx²å–[.à1‡¡©S÷ €Ç̃´iÓÔPjĂ 7T%ßÛo¿$ÏKxñÅ5¬†<›Üóơxv唹ÁÖƒmỵIä•xñï½÷̃…MâA‹7$(&ûd.uÙf!d={Â={i‹†e/́j(®¶¼¼];:1>ĐP@€'1X³Z°ØúÀ#¸IQ̀ ¡˜xy;Ơ†@¿{y€–+=j»g¼t÷ €%Öy“'O÷ƯwŸ₫vÚi"Q¿’ẳ[W̃­».³{‚Äç°’6:øàƒƠ³Â„„X ²¾Cˆ ¡tà¯U”ç…pöÙg7¼{ÖʦD cụ̈Ë/ƠĂœ[k¯½vĂû$D$a×v±̉%§Ó]wƯ¥Z¾k°ä5e +”O h¸F(d^ưu]éÉœ³Í6[Àc¢¬úé‡vX#°:t¨GđM¿æ…¨kü+5à\~ùåªÈ·{cëL Dy Úœ:¾O9å”@¾ ̣¾Œ;6÷#K(X³ àCˆáF^¹l½fÿ&̃´‰×Zk-}†™(Z8·fóĐ íó\adÀ³„ü,<ç(#Qh‚Ϲ8„`'đí< D€çđ¬³Î̉gràÙ̉#x<ôĐCú\’‹Ç©̣á°¾á}‡L±Äsg²LÚ2dHn³(=xÿÇk5̃ñS§NUăƒÜJ~°gèß/ư½¤µ ́¸ăS«¤Y³f4Ú,¦°TÂmÑEMăEÀGBQ§o@Ñaßmî̃’K.©Öy§Ÿ~ºZ›XoíàÅúî…m¿{yp ]éÑ w²ÁpúW|´îêç…E=AbN\Æ93ñá@+Ę›R ™¾–:qY—Y"¡o£ åVâ<²•<4ä>úè²ƯU£)²˜’Á”*xx06°ÇÔ”s̀1‡ ²¨@¶eØđáĂĂk®ÉÏ\ƒcÿư÷W!(¬ÚêC\oúóÀÔ;¶X©ƒå1ßvO! ²0f́ó½₫Nƒ€…³âùG©"{-&î¾ÇQ¢-´ĐBúÑ µÚMÜk̀wX^~øáa0JÑ£Gçz°´›ßföÏuBI…2 %)¡̀–Zj)Ufú¯±¢ÜÊók&_̃vu0_vîä“ON+0O[hJæhä=¬¯Èmcô駟j‚{ûíÛbÊ)(kU>ƒÇ~^è±"¥̃u¼¯úW|ôß5/ñÈ‘#Ơc—3e,¾ ,˜¡ ÁÏ\ö/¼đB}x̃o ÄbÇ>XÚ₫7%»ÇÂäi$Æ<ôĐCĂ<ó̀“vóÂ5£¬SeÜËăÿ0r¥Gå{ÅK8€#Đé˜×It‹B{›ÅV…v,̃?^- ăcñ>–ˆ± ˆ©’¥~¼̃+'œ7o‹¸möY»ÆÉÚáĂÖ₫Ù²1/„z©…hs“M6I=#âº"X×¾ûî»ñátßÆHXÉg‰1ó[ˆ+Ê¡Ô q{^¾ Ú]xá…Ăo¼Q¢Ø Ö́F”?¶¶öfÎ9ç´"[#2” ydcüè£JÖè´Ơ:6*Ë 1TDXæ_{íµ…<ƠóăÍG€ë2ƒ|(±¥C"ó¬"Œrp'¶( ÂVXAûE1cç­xK¦¹çÆ K)xFy±XùƯï~˜8Y”̣‘Å®|̉Ï9眣¸´’4|°ø€7¨kúG;—{^¤láµƠV ‹‰›˜è—₫yóqŒ…M–—›o¾9Œ3FcP6[óÖmûxyđ,|(a& â-ssÍÁ·_È•ưr¥}œ€#ĐëàÂO(7Ö'¶¦éơ1wăø0.Âz”kD~!¬º³ V‹XnCï1†j&±æ&̀–¶¬S ckçföËúÙÖ|ôË5w±^'” ß |“T»6d\²ù¾ ¾­ë›åuÁ÷ßQäưàÛ…o¾Ç[-ÏEøñæ"Àµ#ạn»í¦÷ß%yJ:¾ơ˜o¹å–úÜđmÊwf³î©ZGÍ3MäÈ„öăyGÅ|Ïö+¡̀&,yx~úi…lP‚„Ú₫­̃¾»ƒ°‹(îPÔA¼‹íQÄÊ”[(-‘%rÈ!¡(̀%íó. Md\\kd<±Ñ„ơĂ3Ä»ĂdRÈ€1½đ ê†̉e Ëåî™Zú¤oæ äc¼ƒyWñA&E^,Â6Ɔ(ñLNÆœDUVYEe~ñ“6yáaA~ZÎa`"÷iṽ¢C@Üe™0Qx%2I$² /‹€(’•VZIËSG, JÊË䜈uS"“qZ†rö7v́ØD&²’:öCbb&̣HËZ¶¢8I$WEBûP̀·,ôY0¤ơèC‰L@zL&ƠD&ë&ƯÊ‹ w÷´̃O<‘́³Ï>‰XÚè1Æ!“lz>æG#%b]£mƯzë­‰XS斻馛™ µ\̀sŒu\Ỵ̣̈̀mKN&̣rIù ÑXkYy)$²€Jâ¶b~Ù——M"?i}ßù?DĐŸÈF"–p¥ÄgMD ’Èâ´ï ÷z}–xv$Y["+‰¼Đû°#à8€#Đˆđ¢d Úø˜v"À÷‡(;ô9`"¹́đM'¿D”¤úÍ+̃·fç[{üøñÊ£ü‰&¡<ç¨T¿Ë%F"ÂP½Ö|{‰ĐXå1œwj=ȨL~‚́Iï™à)Ê }Å8‘„çêđ\qÅiÛÖ[®ûFm”ˆ¾¤26΋̣%C̀DBÈåÖGn$†%uùQOŸÈ¬dkÈØŒWø¯%íG0‰„ëLÏYÛ"K7n\"- ÊÎÅ[ƾÙf›iû‡¬Q¼UsËDzư™̉cbŒăóÈđ˜§âc¦hĂ"Ås²7£¢rq»Wcœl”§øÈ*=b…ˆƠËÛÖÚ¿„ES^à/Ë—µRJ̉(6†¡ómûpÅGû°o[ϱĐ=Æ—c(VÄuÄÍ/‘PVé¤ ư™HÄÅ:={LˆËgª¤`â@#–BsƠ&<ó̃ˆù¶s,xàUFàeñ£ư(­ÇË#Kh˜™”©o œxlGiÂK%«$¯,ñfa\¼høC ΄F=”"¼tbyq‹ÛX8Ïh7Æ5V₫Ä^6(6̣x‘< ¹/1oư¶ï^¥WÜ•¥xø/GÀpG _@H`ëÏxÛ/ă÷q:ˆBµW\Q=ØJH\6ù>½ä’KôFxR¡ÓˆoV€Ûm·̣É÷·„ÍI$GI§±Ú~°ŒŸ9sf"ɲÓÈx‚…€ˆE×¾-̀öh§\d)¼¹?‰ 2XB±[û›àÛä5(c #dWñû˜ºÈÁx̃³̃+¯¼r"¹E´ê`ú̀S|H̃«ä́³ÏÖû“¾‰>Bxăœä•2–UvEôă[r„©Ñ-Ï?r­|pÀ9«·K}dp&KË*rˆ>ƒgOæñr¯½öJ3lG ®đPêéŸëøđç}åơ{…pO™Œ³/~®ùxrsy2œêC€¤j3f̀Đ8€´ °ưöÛ§y9Ö]wƯpƠUWY¸i$å₫@b÷AÄR$†0$•æÆ°Øw$ä¼ụ̈ËÓ„RÓ§OüăµlüO&YMFvb’À˜Ä¢IÖbôEB#bÂ31÷ä…£ âä%g§uËñsÏ=7ÈËDăñƒ^×Xc4ö0yLˆíH̀>â3R"̃b¥|&Z0ç؉GÇ@»]tQ ^KX‚EDù,/`.î¢*}wœ\̣âÑXœÄZ/ aÔ4Á\;cj·ëBxNv!ïư:€#à8íG€̃Y+ä́!ÿí8-D€|?@¿/I˜,=ưnͲÀ·ç¾û@øF¼ổKĂ©§-ÖÖßĵ'7I½ùÖç;äñ$e¿yÈĂƒ̀ƒü<ây§×ÜOä₫ ש„̉ÜưU³Æ/¢VÍƠ@ûÈÿdI” ;Ȉ²äxEÎ`Äskù> ]xá…A¢Œ¨¬yÍúë¯Dp®²(êĐ>̣©,YƯ½÷̃[eMÈɶÙf½'(KÜkµFơIcäyæ™g4*÷'s ë…W_}Uû"ÏïA¤ûüă¹&—D(Ñc¢”P¹Ï?çøƒÏ1&î{ˆqôÑGi»¢@ĐùÁrê²s§ ×C–˜%xc¡lLÈŸxâ‰øPÉ~½ưs ‘;7›¶‡¬Ñä›@ÎHäwÈ‘Œ³„ÿÑr\ñÑrÈ{§C&SH° É{Y¸K´Ơúà3a2ISÇù(FŒ1@aÀ1KLL°¦̀0ôPˆV8Lí81å¡[n¹EGÚ9ñ bI£?I¼fǻ<[^^$ʉÙl|¼\Ds›-¢ ÆE³<àx¥,jL9—eBÍ;>_nŸI——y¿×{÷ƯwWE/%î)±âJÄb¡l’«^Å.Vzđ"æ %% ÔœGÀpG ÷` „°ôœsÎÑ-ëZ”:9@û@¨†°A4eÊ”pâ‰'æ2„ ùÑG6…¶&Î-Üƃ|ËJØ—0uêÔ Văú-¾ÿ₫û«â&OàÛFVÛ̉5×\¼Hh¾’cÙâ)¡Ê;c_d‰< 1¡`U™̣¥ZùÊÄ“O>Y“¶ÇmÚ₫`ú•?(*‘9!{BæQ™£Sg Pjî̃<9]‚ÀóÏ?ÄU^¹E‹FWÂ/¥?'X”I₫„ÔZ%;Yá!²ĐB 1ßư÷ß?à¸@ăW‰e ôØc…Ï?ÿ\-&øu “4zôè€UM–ĐDçieX`Ôƒ^0y“l{ƠüæV¯§H5í÷k¦,|øᇠ^’(Lï¬ú‘²J/®ôèÇ;ÁḈ8€#ĐÏ`‰øăÿ¸Ÿ!đ±;‰Ï¦$>Öo¾c"@•Đ̀øÅ»á8ß»DB8øÑ€ïäN"Æ´ú꫇Gy$œp ±áúë¯/½ô’z<`ẽïÄ·)²‰SN9%HÈëpă7 g¦ I“&…k®¹&HØ0µ¬Ç@Ôiđ »ÂÓà̀3Ï,l¬È$¯†§XúĆăÑ a¯J"ăBÄư¡ EL( Í£ >·ß¨>iÙZ̃Ü×sr2”C<·4Kغ ÉàƠóÄÆÇc̃1dˆÈ!ŒSñ¤ÁX%®X¡p‰ÛÎÊ­,Ïk¢´l¼ñÆz˜è[l±E®çÇ`úGÖh‘Y$$—ÊO:é$5¨EÖhmđ„̀Ñ©3pÅGg\‡çâƯwßMµà¸¨1¡)µ‰É—Ûjèơ×_OĂc±`3—·jêV*C[x™0êÓO? hêy)`U– dÆP-a oÂr¼TÉ3/<³¨–/WŒv, &O¬×+‰'†Í7ß\qÅ5{ûŒ+=zûúvúèX`bÈby>$C,,q%Gq·í¶ÛVí±„÷^{(A™Ë‹«&ú| ³Đ·ù¿¨¼wGÀpG  h$tˬY³Tà¥ù÷¿ÿ} C“má-̃[|ç"dÅÂxÎ9çÔ:Ù²í₫!!Â|„Gq„ L YM˜.¢6Ộm̃î±4³«(?Pvaȇ⃰F(Cî¸ắJ^— ¹M›ÉFÏ·Íưf³„>²0́ñÀù^ÁP7+pG©±Øb‹ÅEUc²1N óÚrË-KÊTó#ëQ®2¤FôY®ÆN(L<µ,äU¹̣Ơœƒgd‰̃(nù«‡\pA G¸8ÚBYl¡¯˜Cñ®á\Lƒéß””xÂàƯƒ¬™#|X˜+¾wQyèùơöî»â£½øwEïäÆ@a`4ï¼ó¦y-́[¼=Ê=Ü™đ¦@‰OĐqØ—$aAG©âmúÈ‘#ơE†FĂaƠÓZg^HN‡@Ö˃ظ&Lèk/®’+=:ï^í'đ’c±Œ›>¸́Fñeï½÷*5« ƠFxF”¢X+¡¨_a… ?²අââ‹/^µb¥Ÿ®«ƠpGÀpƒ BѱAèˆ54ëBàd‰ïk¾y±nFÇçöÛoÏU”dë¶ú7ăÚu×]ƠbXä TcC)‚rÄéÿ@xJè¡w̃9<ôĐCá‚ .O=ơT¸û$VcOÖµX¸»̉hpw ².„×(ªÁ’ïå—_^ó³ờơă"öXˆË̉'á¥éÁÓŒ>y6Éă2?ûä,Yf™eÂyç§2¾¸L-û´‡,±ˆ0:Æx9{m¨G8,SlEø#ú ±¿üå/ơ[>‹¨Ö₫¹®È™o?”è"̀¿(*éĂaơéÇ[‹€+>Z‹wWö†»ZmÍ&,!pF£…J%b‚'aÑûï¿_¶(Zw”.L,sÏ=wÙ²ñIÊ3éCî*N¬‡Ăë±_dƠ‹€iúăö³ơưw{p/bÜ]éQŒŸi.̀›xeàé5 ị̈ëØü\Oï|<àêÿÊ+¯¨"˜»,V+Ǽ̣`€ivñlmàzB…9ŸÅ4!œGÀpGÀh%sÍ5—†MÁC‚ïf”¼óÖ=|+“„5ÊŒ¿î¼óNζ’çjúBˆ‰ a­O;í4µĐÆS y¼W²BÖjÚ́å2\oBm¶Ùfª(", ²Hă¡Lî ä„ŒaQ/c˜76îĂXцa.¸₫đ‡yÅÓc|‹<EÄ· «¼„ÜEu{¼}~öÙgkÈxĂ Å[¬¤  Âÿ³Î:ËƠ´E¾xÏ=÷¨|°¦R˜k˜ơà_n¹å¡§L Ah. đüñܨ-ơôÖÈ! wE»̃q8,-äÿÚ@ơ±~ÚΪ3ĐÈÏ 8„fỌ́ 6Ø }Y¼øâ‹i¾,ŸX÷’¨mÇwT—Ưø|œw#>»î¸qăª«®ö̃{ïz¡¼@°…»ÄD›‚/&6âí)8,4V̀ ûÄ$#Ä„_‹"F+ù¿¦!€̉míµ×Vm> ú\/,Âû}ñçJ¦ƯṽpPđàƒ¥–7(ø(«W‘đ?ÿó?a·ƯvÓ<,­n½ơVÓYôV"¬Q– œ‡§<¡µñë_ÿ:ĐJÜØ‹̃Ṽ·€#à8€#à4ÖÆ Såë„܇~xa7”%Ñ.[¾}Y3!́TB±C~Ö]|·?F3¬ĂœJ` ‹ ÙkêvÚIxĂp­1îÄÀ¨ÈĂ ´5ÿxKá‘+墻êÁœ„hÊKZÍơ!œ:„w9QṆÚâa¸ÿÇŒ£aêrº©êP³ûD¶‚bZyå•U¹+=8Œ ï₫Z…߉üÜĂyÄ·y;èÛÂÇå‚Q'NÄNûp@Zµưă}‡̀Bæ‚¢™g{€ĐûƠ|Ÿ¦ ùNÓpÅGÓ!î́x ‹¬^±Á‹ƒ¤E“.}f­K"2S á9sæ€Á2ÉƠê3‘Ú¸ă‚尌˵bÁb¯ ëđ̣`q‚¢ƒ¤X‹,²ˆÆA½â+Ôm´×Ç_é>r¥G%„ü|³`¡‰’yúôéªä ñ&V}|ˆ×û\âzNè\ư¡ë®».l¸á†U-*Y°ă‚Íâ9E|Ñ{~ˆ‘· ÊújBh5 Go×pz ¯¿₫Zx²¦Äb7O ̉èÿ₫÷¿WÁ'ÂO3ª¦ŒRÇê17V"ë‹Lxl×JÔ!” ÖËxû‰ïºë®†æĂc<Œ vÖKN@§"À÷%è^x¡®Mđê wa±¶ÁÚ™Đ.|·ăAP×Â=çƠi÷1ŒÔ"/ d–ôäü@Á3ê4¾óWYeUr‘sù!ÄP̉›P®¬{ÉwêTd:'Ÿ|rZˆ÷¹S̃ÏȲbo‚´â?vf›m¶Ô‚w Jª,!̀'7†¾ÈÀø> 5³OvaDœUªaÜÆxùT˜ÇbÏ pG–!óC–˜]g€5^(ù3̣¯ZBÖˆ±̣X ¡lBqŒ§Ôˆ₫‘5"säyD.Å a$Î3éÔaÈCíÔgÈÇC"ÉZ¹Y%â6™́²Ë.韓‰§ç)c2Q$¢(AK, ™X̉2b}ŸÈÇR"críµ×&‹.ºhzN4Û‰|ôi}™ÄQ¢¤ç$\I"©D&¥DS‰|è¤ç( Å|‹`-‘‰Vư5jTÚ†AUK<¾D”9iY‰˜L:5‘‰=‘¢D&åôœL؉Libqœˆ0Oσç¨'·–)â¹èxÚ°́Ä|´kăâÚ=÷Üsi•˜™lQàTÄ(­Üe;’Ø-‘—J"BTưåG"̃I)î]6œ†³+‹¶D, y'bM’<̣È#‰,\̃7èÄÈ5Ùc=Qèœ( †D\Ƽ7â:ƠîK’ºD¬ôy¿ụ̈ËkºŸeQª<ñ>’ÿ²]2÷ó>` ¢Pơ9¥,Z~̉pªE@>ØÓµ¤­I³kêjÛª¥œ„[(éWâ`WUïă“­ä([O”Å%åù¨–øn!]Iư¸oÛgn–0?Ơ6[¶œX˜j¬#¿÷½ï•-ë'N@€ï^Ih­÷­$/ÓÛ07ÖüÓ¦MKD¸§ë±¬NDÈW´£‰̉#¥G"Ê]ï‰`1¹÷̃{;ÇNd†w 2 æw®9s&s›D¹HD¨ŸHD‹Nd»cxâ¾ođ’wßÏb<›ˆ"?åD"J¸Â÷ßö>GÖ…̀Ë̃[œc-=Ï3Œ ËÎ!CC~dÄ3˹́q;Ï»Ye?!ûÓ'2ñ"Ó6EQˆßºÓm|~Å°M¿¥xç¿ñƉ(̉ñp^¼QÆ©,˜§8Ο(ëQ`¤ßbȱgÙyky—xË”´”°*$ëCUÄWÇ¡—rG <đ²ëỆ5sV¼'jî¡C–×J„“q³¤â ÄË#‘p¥%uiG,×U!·É> p ¡[±ƯJ|Đ+>*!åç; °G^ï[ñtO$¬h!{ùne ÄJB¦ˆ…•:àJ›G}4Á‘g…' Œ#Ê#ÀÜ-áñ´NZh¡t^EÜE¼₫Ê7ĐÇgy¶$`YöƯÿÆ°päÈ‘‰„l×̣±â‘yeq}Û—º*Ä7ØMIP$̀'±âc0}Æ<Å÷Ô”)SªÂÅÆ>VCYÅ@|¹†ƠV¯hkÊ#mP₫Ơ¢øà»y0nYăª·ăƒ-ʘ<0m_r'—]vY\Ä÷;u%OA¿‘L¦…a>b,D몮²¸ámµƠV¹!?hK´ÓA¬qƒ¼Tăêé>q:q·Ä,¦‹.º(ˆå®†?‰³/‹4÷Ihk—m-aGp‘%öa‘dâ´Ÿ¹[°å&%ƒºÚm²É&%ñéEĐFŒ‘†ÿ¢Qx”)m¿ëjÆ"/TưHCÖm9†«|X²«”Ç q{…<—Gå+éá­*cä%‹€,(53¡H£BX’Ûo¿]“»áFpfLæª&?á8u ‡l!”‹|ÖÑJcªˆ £lC„Ç©•D¨VR…ùÔÂ>”œˆ~2ƒĐ6äeƒÓCÎ6Â[ˆ@BĂP‰pB“:“"́Æ5×\S1¬†.ó¾©E( ¾Eœn@€|„º"” Ï1a¬ÂÊñ H }r>@âưD@§kœN+ßÑ$7!pØ~ûí5DͤI“4B¹d̉<¦Vñ†œ€\¦„nkü€¬E¢|h8%0Df!†If¼UơđVƠa奃tX+IÜVg%¹Z6jĒʼ»ÆW³¥¢ÄWwqù8H$₫lê†^4zIJ—Hœ\µ.d̃qj?"€Mö̃{ïd‰%–H°\çO”Rêé‡å[amÇ_'„wè$^b¼°tcƯU)üu¬l=c±:lëé+æ¹Ú}B}ª‰0ÒQÜ7"Đ0 í¸'˜åPÿॕDÖ·m+…»Ê†¹¢^9 eíÛV„)…Cå…GÊó´é ˳Æ-h˵]؈ŸpzB´ˆDCỤ́¼–[wñ=,‚G]«á=!I™+®‡:&ÂGnˆ±2¯Ht #Ô)üu`(ʲD”%ó-@’º†Đry ‡<‹¸x ñ̀!£ª•xwúé±ÇÓöy!«i&5«OÖƯDáƯ-¹€ÓQ6ä`xz:Œy*&ä}đÅØóæ+Îóí…±¨ư¸½Fï×Û?ơÁÉüÄ:&]Öh½½Á!à¡®‡Ÿ×î`âPWqȬ,˱âC§ÎAÀsyTw-\éQN^ªqHầd¾ùæÓ…!p«/'ˆ®µgI†~èn³Í6 áPj!bÔ›?ñ« ‡·óÎ;«pz,ÎÚ‡N„Ê1jÑö¸ăpßñ±eå|·“:‰—,—^ziS̃Gh\¥…ajÛJ!ÔGàfåm›ưûa_¬̣Jê`€R-ñ±ÍiaưÆ[”Ờ Ơö[© ë }ƒM–àŸë‚b‚?°@9UD´ƒ̉ÁÆÂ₫uKœ6Œ̣đRDÜ Æk¼-§øˆ¯6ÂRaå;３Ûc/-Gè‹j„±‚%/”¼ ÷*k~x?~|"^'…!·¸‡¹†_–QîU”潈"Öệg¿©Kyx´øáüfü\B_ \/₫«V₫³üúï₫A€{u˜X>k«SN9¥́àYC‰÷lú\Jræ²å;é$cEèls1|»ÛsÖI¼v2/¬Ñ µ1€Íí„k₫„5w¥ws'ÍysÚ…@êü&̃8u&Å+ßÎä×¹r*"À‡Tq̀`<9ÈEÈ´ïxÖËCÜ=—GÁåp¥G0~¸)đ¡Ù¬æÆđôéÓÓäŒî ®[qå¯:¡9ưÛ—$| ’Óm§ö À=–§ô@˜J²I=öÑΖă¼óXØùv+>:‰ĂǶàÁióÍ7·C…[¼$ SÛbY‰øZyÛV®X9Û"¤©†øØ´:ñ–qÚXăắÇ÷M5}ÔSÆ„uÙ¾ùc¢#¯ŒËzËÄ÷ 1XRßÚûçZ[{(̣(Æ1Æ­œâĂÚd‹p E8ûE xÇcĐêñ¼W#Ĥm y˜°&$¿ë#¦H±vm›Çưqù„9$&ø“:)Ö[,æ1¬b¥?y§ ”'6n>º#·>’›nºiÜî×Êÿ€ü@ß!À=G"p»/ï¹ç²Ä9 đ˜B̉MDî ¼yfyđ`À"ß©6°¸Ÿ&I´ÉÁ ¡~ô₫a$gs[‘"¸¶^¼´#Đûàáç%¹Cœ:W|tîµqÎê@ëO‰1_̣±!9Fʺ&ºâ£ ›XŽ<ª7«ô AX5áåªïÁK:ß M`NØ‘F%0·^1H(>ä%¾ṃÙgŸÙ©ª·µ&4§a´XÎ;ï¼ SƠŒ{AEá¥}Œ#œÁ̃„¸@XMK+Ă½ÂǺ)«Z"́å„Ëí¤Nâ%Æ!öÄày©Dyđ­D±àœëÄ_|-³ơñn°rñÖ®m¶¼ư=*¬đ7¢ß¬r€²Í¦r(Æ_¬œ€'êäƠ‹½?¨kcÍÛÎqÛ±Rcÿư÷Ïz¬‰–)>âk†’ ¾$ŸIÊÏ°ñḅÛxÉS*"ăËøi¶r |³}r̀pˆ¯<Å¡½À7KÂy£<Å8à‰+HbÅưÚ¸ă¶̣Ú¤^|Ư‹ñ53̃cE„$1MyæëB·±’ ö()Tåp4%)1́Ï1^Ÿ&a]àÏœ7ü™âƒñê²ññ¸=«G™˜÷˜ΡÀÍ̃ë|cp.>׫…ÿ˜'ßïoLy†÷$üÜËå%ÁÆo¬÷âĐ¡C5ñr¹̣xùéˆ#P%Ïë²Ë.«ùx:‘×nà‰ûˆ5ØÑGzÔ ¤E9F®¼O>ù¤†á<:MG€o¾'M”\~ùå…k·¦3âÔ„€+>j‚Ë ;@#p/ÚÑt¥Gí˜yúhvsăpY„µâĂ•,Â]eFV¶Ü¶„æ´wÑE©° +ye¸ÆeÙÏăÛødkÊ©l½Ø#̃ª!YđÿƠÖ©¦Ư¢2ñ}+qb\ăăÙvP²¦€ˆÛäœ)å²ucÅuâ°`Üï1Å×–öb₫¬ß¸|́­B’˜XßÏ(ÀÜ(öÇÊ;_Ë–¶HN_éÈư‘—@œû'æÁ±‚ƒ2(Ah‹y(¯X9ói¶Ùf˵¢Û7ÅH½üׂ‘—í}¸/‰5— ´¼¹?‹Bnºí9¿@ À³…µaÑM2b>²Yp9å#àJ|\ühc@ ´ûî»krp>v°¢#TI‘Àr0½CxƯu×Ơ0S°\¯×ă‚9äÛß₫v²¨Äv¯ÆZ̃ø¶|äˆ2á¹ómk@Đhî=®I­˜±@8+˜…À´_îÏî÷¸½råíœƠ¹¸ǹK9創c[ÊÆTNQbul›'¬…èEẬ¸?öc8^)±€<&[=¼Æñ¸|Œ•g+Ǵùëå…zñ5-̣˜ \;)¾bGŒkÑøà;ö¼(n3¾·ôdô/ÆÇ°·kĂ–v ÎÙqă±ñ5cMǽ¯¼C°¶öÈiqË-·¤\ÅJ‚l¾‹´P•;đç¡OÖ”óÏ?rüñÇ«Hơ{%ÅB>Ă&Ë)ùa¬×²”§ø¨—ÿlÛ₫Ûà¹?~¼>wxÜ|óÍeAá̃Cˆ=|øp}fXë½ñÆeëtâIæ®w̃y'ơ`!æ˜1c’÷ß¿Ùí*Xa´ÔRK¥ó9Ư=÷ÜS£etƠ`œYGÀèk\ñÑ×—ßï´÷̣¨sWzÔ‡›×ª K/½´~#@"9‚¬fé$åÄBá ëUzÀ·Å[½í¶Û*†y°ñÊ ëHÆú́³Ï6E¹c}ù¶:8ÀÔ¶XaOœ8Q…•,9æX=à̉slÎyLøCè̀±ØKăPܵ‹5­) âđ@œ·<Ùº1/y$d}ÑóÅ{dyAnÏ'Bê˜xɦ[Û1?:Đ2ÿb8x̀à¥x|ŒËú„'Ă5® öăñÆưP7KY<̣ÜÙ:íøóăß“•”6ŒŸ?«_Ôfv|y»ßiϼ”b¬íÆ×={/Å×̀x+Ú¢ˆÀ£Îˆgؼ4Èñqâ‰'Ú©²[ÆŒr”gw„¯²{‰ë~ë­·¦Ï}–¼:°lÇÂƯ(Oñç&)§ø°±)>âZÖÛ<ÅÇëáŸzN@ZƠ+´¤^= Íáå´ÓNÓd>æđ>qj?$c¯¬“ßrá½÷̃đ₫(Ç혰7mj‰²&TÛăxÖƒ6bv, ëẠ̀±b î‹sF1¿ÆḰ­·guâ₫¨óBÚ±vQ`TK±̃ă~̣øˆ0ô‘'|ûF‘”ÇWÜçá#¦́yĂ).Ó û1Ÿ1^ñ}€‚¨ˆbóî(j3ÛFö&¸Ó]vÙE«Ä̃5æÅ_÷́½_3»vå¶<Ó: ̃ß|óÍôóVë¥z[_#GT+Ç3Î8#µà·s¾mF 3dÈÔû(+Ä´ßk¯½vI₫‡)ƒö™giƠKî“X!‘ÈÙ1Åí…“²jÜg„ºÁÜxy" k“-¸›̉¦Ñ¸ŸJüÇe}߈@‘ñ̉K/éû“uÖ[lQq}ĂlxQ"‹¡l°AÍa&cÚ¹Ï3J¨½í·ß^Ÿ}”9̀CƯÆ«8–ë¯=î—Í6ÛL×Đ̀±à̀ü€Ù÷x¹¶üœ#à8­@àŸd¢rrG iÜqÇAœABABA¼<Âo~ó›°Í6ÛùnZ¿½Đ°(ŒÂ;́$á`Á@«ø°̃zëù(é…áù:î)±î Ó§ỌÑÄ"ˆƠV6lX¥DS8<ơÔSĂ•W^äC;ˆÂ!́½÷̃ußÓŸ}öY8ï¼ótn9æ˜c‚Ĩ"ܪo+̀!Ér+ˆ€ ªz^¨ùpïíºë®A,Uơ>‘øƯA\aƠUWp}yŸl²É&AB1TÅe‹ḤQ̉ă"D.{¾“¼ë!ñÊÊ­&!}rsg¡·¾SôGÿN?ưô´&ïy#æ£JxRN¬XqƯ2/ˆPZÿÄ>ˆÅrzyƒçµéÜsÏ-ÖùçŸ_x®̃'œpBZUئû“&MJ÷‹vâkƽ$y’mˆ̉$ư“03AÂçñ$ÔfDPÎ:무IÖ"˜Ôßâm§ëÄôdÎ÷ÅƠW_a ơ ÈaŸ}öѾṽyçô<ïñ0'Ÿ|rëơôx¥ w¥E¸Ïx¿d‰qÜxăÙĂuÿn4ÿu3â{o}ë[a…VĐuÏÉă?$ßMÙññ]Á»C<¦ôÛL”™ú½ÆưÙmĘ^xápươׇK.¹$ˆw˜~w2'ÜtÓMƯ6œä—ơ²xyñ₫ĐoTæ^î; ­Ä›;°Vºâ+ª^—uä )GÀè-Z¡]ñ>G ÿp/Á]s÷ô~^»<X»¶*ỳ‰()4<ˆ¬¤¼ Ú*l¯:Ă“(JÔëdÔ¨Q ñ‹º¬9Ÿyæ™D­%̃ Xas?î/₫[l1T́Q.ÄS¾Ç<̣ÚË"Ud_T·Gy–ú±•>mç|Ûøc˜—øx^Ùcyă‹û1œ©óhíäÅÎÅ!–Œïr[¼VŒâ1Q§+S¼¸/̣ÂYûÚÆ|ÆXÅÇá?›ơ{cÄcŒëÆmZ=Ûa{æÄxÇæ]wÚ½}<–¬ó¬ <;HBl'@a¥æ‰û·rqNÚ!¹îäÉ“ơ4^ä2à8!³̣ꛧH%úáE[qYăƒ{\,œç¯ợo<ùÖ(B€u ¹±¸W™—É«S‰e„Å>Z„“#‰5̃ ƯJ„B}î¹ç̉p‹Œiܸq ó’SăÀËhæ̀™ ^™–o9t‘EÑ›_~ùeă:ó–GÀ¨ề"åéä8@µ¸—GµHå—sO|\ühcxúé§Ăꫯ$”PBµêA²z~`%Û,¢?¬oE0äĂ3œt̉Iƒ̣úbw̃y§á́³ÏsÍ5WƠ¬‹Đ0HN­‹W•{QU ]S âˆÖïXVçÖœx)‰P6¬¸â©^²ΫDÈ›/çQ­×HÚX‹wD€«= »Đ#‹g:đ1+—ƒ%æ €k3Ö(àå¾ñ(]ˆ°D=̀*Œ Ä^$Ü X–M™2ÅvËn¹·~ô£… 7Ü0,³̀2…÷MÙFp₫E –¶„Gë'îcæ(p•ơéy û5¨93mHv˜/ñÖˆ ,+yârÍđ4’䶶›»Å2Ø<;˜ûc¯ùæ›/H(*­Ç˜?₫øcåé¢ù4@IDAT‹.̉ç{Ö¬Yáå—_«¬²Jøñ¬å¸ïđ$Ák‚ßă;N÷ñÖ MÚh“yB±èo¼ñ-"xåƯ¿„ÆÑ9>ØÇËiøđáEƠë:̃H₫ëbÀ+ơ,̀xÔtĐA:/ă}…'G9e^à™æÄË5–äÈĐç¡\½N=Ç3Ïz—wàAxµ0àơëÔđöÀăZB×ê\‰6ïQn‡Ÿ₫ô§a¹å–Óơ?ó±“#à8mA@…N€#à4÷̣<Œîé1x ½…|°Úkeó˜ ’bí+ DVƒN$'4Çb<Î1÷[´¥7I/‰eưÄ¥ÇzÚ©ư`±Í=Â镈< XpR^„Ÿ Öª\KkCÚD‘åz¶ư<ëø¼ö²ơÚ/ª[¯ÇGỢ‚%¦á’­SéwÑøâœ!$‡Ç›Æúà¹2*â;N ưP/₫ăX́±Cû<ÿF1–X5WCq¿đÖl*º¬_îSĂ­hËØhǨÈăÆÎÛ¶{ÎÇØÑ/×0¦¼ë^+vđ)áè̉ññŒs̀ˆg–g·hÜñq®%›nº©UM·±WI\>»Oßvï˜Ç VÉ$C7Ệ›m#₫Ưú­‡ă×·@%ø®E¯z1-¿ụ̈‰(T+UÑ5”èsÉÚM U*Öéô¢œO$ÔU2Ï<óè¸Ø^|ñÅ%óQ§¡[øă]E2 Ÿ›Hرt~g&Ç_+<-»+çÓpZƒÖ0N€#à >†%²†!dX”ª#₫Pt'=̃€+=zü·qxíH`nĂ%¤ 3‰•]CB &¡9|pÀªô ég­J—o€ä He",¤y½‘,™Ü[V>OÈŒ Ư–E‚nBäX¶Öw^{Y^̣Ä”)ª œá-̣Ö±€œ>ó(ׇ´²±q¾V*Y»ÙmÜG̃X80ßêB¨Åec=¡‚¬ ¶ñ¹¼ö|ÇåY»4›âû€díy_·˜?ö³IƯ©·YtOS.Ke÷4Ç¡,v¦ø¿³‰®áŒîY(M–ËêÆÛX°Ÿ—”œ±¼ơÖ[ª€°₫²[ƠÓ$™nI>4äU¶.Ê æ–x®7P~‹%ø€fÚm¼ñÆ%÷x„$?ùÉO”úˆ˜âAñG}4 M”<Ô§.@ÆmT+ÿVÏ·@%xîÍ-ywtƯ³₫úëWe|"T©R’ûEH·!™x×́œçơIĐ%ŸX·­cù'Ô äJ–Zj©t>%\!aÔ^zé¥åÛs̃BÀ½u=}4@Ëp/Æ@îJÆàè­ D€xÍ₫#ưÈĂ L+H”$ .¸ ö-a\„;ƒ%>PÉïÀG«„ÎÊé^®Ü^’ÔvuüêrắÆs±"ƒëK€"bÎDˆJ9₫f à‰Âæñ‘Đç Ùc1í™8¯½,OE¢ºơ*>âz6¶˜—XÁĂLñóW¤0‰ÛÉîÇơ­M+ ÂíZH8*;­Û<ŇYÜ[’ 9?Êe‚µĂ¶H™‘UnQ¶“₫,÷ <]ba}'ñÚ,^PÆH;ă—Ä̀ÉÿøǪºăyăCư{î¹'‘°aÉ<0(e;m¢2¥¿É'Ľƒ2æÁ¬·j 5ƒÿjúơ2½¹G}Tó/à%¹ß~û•(̃@A(aæô~Ç€åÚk¯-*ÚUÇyÿH¯DBa©±…„àÉøc ߌ¿́ø8oJØ› æ»Úư¢ñQ?we¼eÇ”§ø@9bå³’<¾²̃ v½)›ơâ0là ^à?ÆÜúơpyH÷ï1¯×^{Mç ¼6^ươ`.fî¡<ï•ü€#Đ!pï^yå•ê™Ï½+ùvªâŒÄÔ;í´“̃óÑL<¹ªz^ˆơÄƯwß̉€ †A’ªÓYïj₫0¼÷Q£F¥k¼éFÜwß}©ÑIW̉™wCÀwIœ!G óp/Æ]#Wz4Koé°^zé¥ơ$¸¬*gÂ7- nAă +¬ ư#”FÀØ¥ăc9ôcéÖ[oM­pkáëp¬üvƯu×A€Sg!€‚̣̀Á˜€º̉6V`ÅÊXñÁ(c|¥6MñQ®=CẵgÊÎƠ…đY%µój¼poë«̉Öx±ry!“¬¿rÛrX¹cưdÛÊ%[‡ö«¡8Ü•Íêe#ÆKÑ6ÏëÇỤ́m"@œiN‹{†­¼»̀ÓD8ÿĐC¥ÏJZ'G › |•$›Ö{x₫ùç¯Úc OÛ1cÆh½¡C‡&=öX7 »W̃­„‚µ°và'ÆNÍEó-^£„#d̃em>räÈOuSN€#à4 ’IÆÉpªĐAb£Y”Y”±| [=HÂâ ±R«nÇ † º°Ă; ËDĐD$B˜Ó#P"¤ §Ÿ~zØh£Â¬Y³‚$o â™ÄÊ/̀5×\uµYk% ! óÁ̀™3Ă¼óÎIJ+,¹ä’AIµ6UR^„NáØc ¢¬̣¡¶ÜrË I%e*ưáhĐ)¶vÜqGÖ*Ö†ó"l ÜCw¿âơ9ï¼óô=$áÔRNăûlÍ5×L³óÊ+¯ !TrŒ"Pâ ÷UödÜÏU‰)=¼è¢‹¦ûqƯ˜‹J´Á¤Eâv$s¹¼bCÇ‘V”.¤?ų"Ư¯eG„Aiqñ”J÷Ù7ú5ïÛ-Üqź%t]ú»ÜäöIOßÿưé>;¼Cåă(ˆR©äxöskptrb$yz%â^úøăƒÄ¢»í¶[7nœ¾O7Ùd=ÏsÀ»ÍÉè&Ä«!Hˆ§À},!䡇$¿NÅ! 2Dבk­µV%ˆ¾Ÿygv;‰À=,±Äo[ñ.Ơ÷Ù”)Sº뮛»Vèöñvÿ¬+ÄË#Üu×]ú,FI9øÅ_ {́±‡ÎÅW\qEøꫯ:‰mçÅpºÿ‡¥Kyw¶G …°Đ=æ˜c‚¸8qS w&Nœ6Ûl3WxÔq\éQh^¥,ï½÷ gPD[–ú¡*᦭t(Ûqt’Ó§O†$¾z@àËÇ̀`é / âH›yî¹çTpÉGk-tươ׉W­Â,C³º–ê^¶Å  ’Đ3ABÎ>’²#€o"½v±B VÖhâ²ûh¥•V ¯¾úªï†å1<̣¬C¦/°đ ë1”<[l±…î÷Ó?pá‹̣Ubˆ û[l± ^p¾^駡±r·*닪K„ ÉzĂ¾ûî[TÄ;‹÷8ëẼ âíV[mµ€"¹’q ơ(/ÉÀơ½,y1‚„ Ë/¿|ǵÆ0¯âpÀè8YĂ²/á¯tÍXK[^¶vXËpaàpË-·¨Âƒµ†‡rHª|®½e¯á8€jÉK̀~'8@Y°„9î¸ă‡~¨å$Æ~˜0aBwç– TË2Øe']éÑe¬ ØÅëđĂW ><¯N:é¤pôÑG«Đ¯ÚḲLơ¢@Ù–b Đ¥‡$¬ «¬²J@¨ËØø«ÇĂ kï‡~X-ÔÏ?ÿü€Ë©?ĐfáÙgŸ F=?²£Æ3!9„Ơ7̃!F¼ƒ%1høë_ÿ$TS®×‚<¼ !Uµ7E§ƠùqÚ‰B¸çŸ>H2ç y…T97ÚÖ[o6ƯtÓº̃?í÷íÄ øÇÛœ5Ælxíßxă©=.ïK˜Âđæ›oês aĂđáĂƠó)ötŒËwÛ>b1Ö™GqDøơ¯­x¬¾úêúNíO§_î1®ÁÅ_¬óïŸ₫ô'•5à)‹wé˜wtúXœ?GÀè\ñÑ9×Â9q:÷̣hü%q¥Gă1íç€b E8+¬Ơ$‰x¸ækjfÅ̃ |øP+aïn»í6 7sÓM7©U Y¡–ÚF¹ƒ²•đ ’`³æ&?ÿüó°́²ËªĐ˜pW묳NC”253âÚ‚@́’ơ„à₫]yå•So'B¡u͘1#¬ºêªÊ!¢U?cO?ưtøÑ~”²í¶M)¾ă8€#!@È? í¹çjÂZ’P©•¥ áˆP–|ñÅúN"́[̣±R~p’xăeü÷¿ÿ=NS’Á+VÎ{¯đÇú…°˜„»âCăBavØae=óz‡#à4W|4GoÅèIˆq …E®{y ₫»̉cđz ß À³I¬Qù@æ/†Já ¾i¡q{|€\~ùåª|¹́²ËªÊÏPmxÔ„Ñ"abaoµíD’zêÇ9¡“È àÔ? Äà1"ôÑvÛm̃~ûm óaÇÙvªÂM6lq±¹—ñ̀Dj4uêÔç ±ă¾uGÀp@¡>–ơ'x¢æ°aưV̉Cª̣¥Q£F©‡Bé^!¼bPđàEIL<„yß²ÎÆđÀ©uüíoS$îU¾y0d!wà“O>©J©Öqâ=9@·"àn½rη#ĐX́î‹ơ„–i›]Ñ…+=ºâ2u“|p}öÙáŒ3Îи“ĐwÛm·­K!0ØAŸzê©á̀3ÏÔ$Êl Ш¹‚O<39Bx,ñI6[a O¨#B€?> kTO[^§;àÚ#´(GXÁ6ê₫-×O½çđ̣¨dYË|@.'GÀpG „â}̣œpnxoR±̃”Dà;ï¼s`­Æw"¹½B¯CxSăIMx/ }ÈâÔZ¾₫úk £‹Ès̀¡^殄jí5đ̃nEÀƯzåœoGÀè\éÑ5—ªăÍK`~ƠUWiẫ8”O«2qâDư DXŒ‚ôg?ûYC…Æ]t‘æb<ơ&4§.ÉjI\e"Ê>X[ œ:îB±=ôĐC)C#G ä!ùu·a¯xößzë-e™ äØj«­ú v Χ#à8@}|üñÇú₫ w‚}̃ ,°@ÅÆ,\̃”¬©vØa‡pơƠW‡oûÛëvṢ ·\z(æ™g]ï|đÁ¾–́¦ é¼:@ß"྽ô>pGÀh®ôhÊưÑG6ùÉ'Ÿ:ꨶy.ÜrË-a¿ưöS¯“qăÆ…K.¹¤¡–~JhÎƯ1aÂư#ÊSO=¥–bưq×ø(GÀpGÀ(F€Æ(=đÚøË_₫¢[û́ E‡D›xy,²È"b`Î9笻ư#<2ü₫÷¿?ùÉOÂøö„«›y¯è8€#à8@“@IĂ²Ë.«¹:>üđĂ@^…1cÆT́‘u(ơX£=øàƒªÀCb½ơÖ«X·› €a&YóÚ ïá7ß|3Üwß}º.6lX7 ÇyuG ¯pÅG_]n¬#à´ Wz´ é̃îï„-·Ü2<ñÄk3 `…·ÔRKir¿vŒdă;í´“~óa‹çG£Z̉1• £@,eBƠk=øÛß₫6’‹xÔ^x¡&BlGX°v\+ïÓpGÀpJ|ë[ßRCr&ÜÿưFeƪ«®Z©jøÎw¾¾ÿưïk¹Ç\“Ó̃Úk¯]±n· ‡ ÉÜW^yeơ ₫àƒ4/ kô5ÖX#0n'GÀpÎBÀu=œGÀè\éѱÍC 9‰Â8à€đù矘_ươáØcm¸gE-C}ơƠW54 –WYey o$,éÈ·€Åáf›mN:餪Â-ñ0ỉ¤@X>ÀñøàƯÉpGÀpGàXá½ñïÿ₫ï*Ôùå—5'Ú¢‹.úM¡‚=B?±.Ä3ă•_|Q=$ªI”^ĐdÇ₫ç₫gÍ F^­Y³f…7̃xC×™x)³Öœk®¹:–wg̀p~DÀưxƠ}̀€#Đ4\éÑ4hû¦a˜o·Ưv3/… 6Ø Ü{ï½a­µÖj«%Ù»ï¾6ß|óđ駟ª[?îưC‡m¸çÉÅ_n¾ùf+yMHÚ\¯‡Æÿ₫ïÿ†Ă;,|ñÅáè£Öx·Æë›GÉê8€#à85 €GÊ ¼eÉi0Ÿµ •ˆx=`¸2cÆŒđ̀3Ï„%—\R׌•êvÛyÖ¥sÏ=wØj«­Âl³Í¦"” wß}wX|ñÅUÔmcr~GÀèU₫©WæărG Ơ¸̉£Ơˆ÷^ú×\sÍ0}útÍCARn |DƠ+üoJäÇÀ²YrnđaǶÑ<‘ĐüÜsÏƠW(*°<¬7Äă6mZøä“OK¼GÚ•¥×ÀÛpG ÛÀ›‘÷ÇÛo¿]ƠP’$Ñ÷!QdçÖé„\$'AáIøđÇ×^{­¨HÙăđưÖ[o-ÛOÙFü¤#Đ%¬›0£¬ó̃yç°ï¾û†¯¾úª*îÉBrṣƒàŒ§-á¯z•¾ûƯ₫ô§ßd‰%–}ôQØm·Ư¹åȃçä8€#Đ~\ñÑ₫kà8@ àJ¸ˆmÂ_₫̣—°Ç{„±cÇê‡" ̀Úüñ ºv̉ŸÿügMæˆåa­ZaÁ×h¥cd¼—«p衇*Äíưú׿ÖÜ|€/°ÀMá™~œGÀpÊ#@ ü'$_ƠöÛo¯‚Ộ¥ÿï,I’yß Ă€,ư÷ÿw¸ổKơüQG•=­¿QZ ¼ƯtÓMÆnˆÉ_+ÑÏyçvß}÷°ñÆë{ªÖ6¼¼#Đ-`pB.¹«¯¾Z×a„ EϳT ¡8¹̣Ê+ƠSùøCØgŸ}Ôƒ¤ºƯX£u×]W×í;́°ƒ*<đ^fíIt'GÀpö"àöâï½;@ €̉cÇw /¼đBẠ̀‹@’>»uy\Ü æ„ÀbkØqăÆi¬`|xSø"&4 08묳#AƠƒ>¨í1qGx€#àÔ‡VrûüóÏđØ@ø%bí“d˜÷!!ÿú׿f‹¨Â{ÁÔ˜üúӟ‰'8 L¥¼?÷C Öźùå—•ªùyG kà'_ÅĉƠ ÷;îçœsNƠăÁ[äzÉMG̉s¼ öÜsÏôù¯º‘.*È\µđ ‡ë®».\rÉ%:W0g®öÆó¢‘8«€#àô®øè½kê#r"`JçŸ̃•-ĽºBPC(+,ˆ Lx>,¯¸âA ưùE°n%́À(ô•g¡‰Û¿₫úk(m¹å–j0ă@é`jöÙgW+_W| M¯ë8Àà TƠǬóï}ï{U5†‚dùå—×0W$Îç1@È¢åy¡¸'Œ"ï$<đ@^±Âcôƒ˜w4Ê7o±Å®ü(D̀OôÜëv±>#”JBÆUC(ưDζaÆé:—P(Az™XspÀaêÔ©á?øAÀăåÀT¯—<Ål/cácsG SpÅG§\ çĂpºWztƯ%ë†I`Øøñă¡<ØÇ” X°¶›Pí·ß~ê1/X°m´ÑFMK®N¨’—_~9|ç;ßQeP#Â{Y˜+OV“”³Ư˜{ÿư‰ Đ̃Q(Gf̀˜Q˜8ëơSN9%̀6ÛlrçüóÏÏ6Uñ·+?*Bäzùæ›/°\f™e‡~¨̃ 䦫†xfFŒ¡á\çœsN}Fñ&ƃ¤×‰0}“&M̉PWsÍ5—øl¶ÙfzŒùĐÉpG 5¸â£58{/€#ĐC¸̉£‡.f ‡'0'S'%0a8ơÔS5ÜÖă§Ÿ~º&mf˜¨F'4g,wƯu— ɶÎ:ë4Miăæû@-0́»ï¾'ëơq 'hØ·) TRØ8MD ÅárºÊ*γiÊ‘Ñ£G«×ù²̣ÈBïăo’„̃ª•\ùQ+b^¾ÛàÙYl±ÅÂ5×\£a}ÉûvđÁ뻨±±†$T*ï/<{1üÙ{ï½ƠûªúƯ\…+^.Ó¦MÓpyä"tØN;í0üqrGÀh>®øh>Æ̃ƒ#àô®ôè¡‹Ù¡tróâ7“X¡Đqǧá ₫å_₫%.̉Đ}¬Ô™ĐܘûƠ¯~¥Én‰MÍG§“#ĐiàÍñ駟†yç7Ä^3gÎT¡üî¿ÿ₫Ø~íµ×ôØđáĂKÎá!aÓ†n¨?ñ€rrÚ‰á^PÄ¡¨¨6Çü¢h \N‘âƒ2SwƯuWU|²yD9+,×@¢x¯‡\ùQj^§› |ÓÊ+¯Ṃư₫ûïă%\kµÄ³GX׫®ºJ«+„ÜYŵíuS9æ‹W\1Üwß}ᨣ̉ù ïM”µ₫nî¦+é¼:@·"àn½rmâˬ ‹₫̃y絪5nn›†Ó±ỰÁ†.ưÿñÿQ‘O¬è°èüàƒt[ôÁW±¡ à¦üÊ+¯¨Ûr^lñ›ëøâ®ôèøKÔq vzó0Bpt̉Ij5%!A©ôàĂù˜cihBsƃ`í™gÑsr¦đ±íät=ô&|…'„H„Ă0:û́³uÅƺë®k‡uËÚÊ,Ô³Bˆ@YÅy 'G ]Ø:•|3ơ*>h#/Á9c¢|“M6 äû@¡XN˜È³b‰Îñª5ѹaèÊC·ư‚Ï×æ›o® ¿ÿưïạ́Ë/TKÔ'ïÚE]¤JÊ;ï¼S lx¶ûw…'5?C‡Ơ°|Ûn»m8í´ÓZ0`.%Yz‘LÆ“Sđ«¯¾ª¥i/û§đ>KrLUsŸRçÏ₫³ÊdX¯5S>’í++ÿ_ds´q¸̃œoŒYcÊóFÎ̃4VÙu²¼eË7ê7ó!/É'Äóáä¤ÈÍïäT…€LXɨQ£¹yªú+D&ºªÚî×B`*/¥Ă¿ơÖ[“aÆ)ÎƠàø‡?ü!‘$jZ~9æhî²àMd§ưÊ‚`À8ê=P„K½í5¢̃ïÿûdíµ×NÄâIÇ,–J‰¼ÔÑ´·Ñ£Èb3‘0K‰GôK·„ç$ï™o7b¹—ˆ0HùÜf›mY86¥ /¼0‘`ưjÂsß’đ%Ú¦X'"nD“̃†#Đ0äC,Yxá…ơY“DË%íz"JzîÚk¯-9ÇgŸ}Vωà8ùÏÿüÏ’óÏ=÷œeeÉq1XÑă¬Ưäc°äœÿpZ…€$báœHÈœdñů©[ÖZb%p߯´̉J…u¿₫úëdÏ=÷LD ’H²óÂrœ£¢„ç6%ÿ@"̃(eË—;)JüD”'É́³Ï®íI¯DCåªø9G «p­‰äOÓw‹äJ$ôUMăa)J~­ÿƯï~7£›êw{aÖ»ï¾ûn"ÊZÅ@ t’1cÆè7BµcăĂD<Ö̉÷{9ù ß®̀KÈ œàºÄß"¢đHñ•Đ¹‰(ù+ÿă k±!C†h=êˆ÷|Å:ơ@Άœˆk¿Új«•Èø₫‘\p)ÿ”A¯–~§M›–¶UM;O?ưt‚L*·Zú­µ́ă?®}2/]wƯuµV/[́:ñ¾,Ó~2EÀ=>äitªÿÏ̃yMRVûÿ©[uoƯ"”AAWÁe Âå"`î‚„eKXXp%‹K .A$‰$É Y2®° %.q¡Œ€(×”?Ăư§çsäôïyûí™é™é™é™9§ê}»§û‰ßî~‰ø÷l†ĐÁ”}₫üù-K—›©¯Ÿ̉ʨæ­h‹¡y†»—˜Đˆá^Q"-tL¶Må-ZG^:D6û^ä•c×À²ôg™e–QÍ»×Ë£,.s-Z¤¾mE0¶Øb Ơ0́e»¼îê"€ơÄFm”0GĂ waø”úÍ”€,Nƒ0‹TSœ÷βX-£èet" ¹Ufn®đ©ÜÉØ$VŸf8äCRWh½ÆD̀h¨n{²dn®p™Á:!&³øÀ*„¹ÔèSŸúTø̣—¿¬?ëiÁ[z?:@ÍS´>Y«6ă涰&ÄƠ••&iaƯÇwƒ¥å½÷̃[WÛ³Œ@çÖÚ'LË€‹-Ê}́±ÇÂÔ©S±¼œAD€øiXM´xâUam[”Xcâæ —ªhh8ừ3Ï,½ïÓ1;6ÜtÓMã¼yº/xàÔÊó;î(Ô?öß́Ă‹ÖÂWw[X›8D‹˜³Î:Kçæ'̃i s‡ˆ— QØ™1ó‹µV·»…g|ĐAeR•÷“¹'»´̉Ÿ₫ùpâ‰'ÚÏôhü¢ôB‡NđO â]íÖ~̀øRơ°i¶Ë .Ô>Đ'æv§₫DÀưùÜz̃j,Lœ¸b" &o¾ù¦–Mœ8qÄ ¼ơÖ[k@¯x#̃óT¨L eº“ạ¬E#¶kœz¯BÑjr¡G=ü^fµ{́±G˜5k–2=,€9›»Z‹Ó4sNyæêa–½á†6,ô;MhN›1EÇưhå¨;wsƠé'éå7ƒ.®~úÓŸj–¬‹+!Byë|ü×ư—¦‹ÿ™àƒkÄ.ˆÉÜ]-X° ¾́ç@×0¡E+‚̣ˆ´ Mz<û́³¹í†Ñ!Z͵p=̀˜Rí:·†¸đĂđă° À>í²Ë.Ó8U¸•Ùÿư5>\Ñ₫3g}ôÑáÀ 0•O;í´ ÚE³D:±vÑ@çjà¥̀œ9SƯqum ˆB)·BÆ—áœ5Ăw¾óK¦k“­C̉C~ߥ“,ÁïË@½̀ WOơ܆±—ÂÍ’‚đ1cÆØÏ̉¬Q¨Û`ƒ tîû̀g>“ÖAL-ÀŒ?^]§ĂÀwjđ6aNë¥xÎ^!à‚^!ßçợÑ‹ Y7n\X}ơƠơ 9/{&p´³ŒN=ơÔđâ‹/ÚO?:}€ =úâ1U¦‘â†Fµµ®»î:Ơ8Ư{ï½Ơ ËniØ4†˜Ùqk¥ c4øZc 4SV3i;Đœ6°ñƒ1ößÿưßæpqo+O;8Àر`ål¤±"ŒéÚk¯U-C„u0‚̣Ⱦy‚ nN¾Zq>°Z„íätv´UÜH…5×\S…Úh²Ö" ÄÍ•Ị̂ëß:‡ae½ợÔ»çÂzèø½AC€÷ëCq§£ÚĐÖ=öئº‰u?±˜ù„µxhª¢ 'Fx^âJHq@à Vdµbe»ƒ}„ añ`|Îy>çœsÆy0åp&_=~¶üAÿ  !ÎÅ5˜³‡@̀°ăÙˆ«k½—÷a“¸)Ơ[đÉP‚ë$!đúö·¿­Â,ˆă=)Á2w®±Æ…­ƒ:Ù̃n”mưîF]^G!đ¯¯º¿Ú́­­L–hÔÖ"&pñÇ«Úhà^³A6-f‚fy °Á4œ&êlê™°™Å¡É@PB3'ÿ†ÍF&‚˜`„!ùf"cb£ư?ü°¶iÚ´iê¾I>’\îgÛHYô— £¥£­ü¦”M°'˜ŸÁf“'1! ÅXë“^ ´¢-\ă“U’en/h m l¤ÿô…ØoµƠVªIW¯^ÚK´{8gQµ̉J+ƠÄ*n?/‚ª̉_ñ¿¬1Á<ëgÊåçÁ¸1\иˆÓrŸ´÷ß¿ö‹ç€F…ø~.M«̃… ́T̃?̀ŸÑV{ÿư÷Uûí /T¡‚-‹”ÓÍ4³&LŸ>=¼!ûøvÄ÷º³ßYÙmâû¶€æ“'OŒ¿ebĆ™çÁ&ºÑüQvß¼X͸^bíÍ‹‰ ¨BX”„Ø£³·@˜[ØÏÛ₫9/Ưj«­¦–rđV ¬ÓÁ‹·,1V³–X … Ê%?B”˜±—½Ê_đeXÛ3öâ $»¦¡7åQ¼ ú‹Å‹ÄP,à¹Øưl]ü¦ Ö4¤¡ÿ”Ă5ø àɾü ¬ÁÙĐ̃«¸¤gïÆÚ"Áá= 4àưäư₫Ö·¾¥éN>ùä°ÓN;iÚ́?Êa‚x;î¸c6‰¶ùÉ'ŸÔư¼Úÿ ¾H–è–(<„ú¤E¸̣«_ư*,·Ürº³>s₫}§à Á§‚ŸB?)tàÂóÁâ(¨₫i)¯Vº¼¼E®Ñ&9åÓ/¬”á±'å.ô°̃ä¼ñ́á1̉7md́©—ÇÊâƯzúé§ơ› -`×ÖÖ±wpà™?̉‚+u2×g]ÍѦ¢ÏÖÚâÇ." €“#PX5(’¼´‰àMˆàG¤çàN2‘È"’dươ×OÓXZ2á$ܡň<ü  æç±sñi˜¼óÎ;/n·˜{&¢U™Èæ)­ók®IÄÿuú{áÂ…£êă‚HÔ™T5å‹F" |ưÍqÊ”)‰ ¼i9ÖÑMú×ÊÇơ¬à ¼Á8Xw¨BF|-jÔ| AùjơÙ¦̣“®!à‚®AƯÿÅ„¢‚¬%‚ K˜ô₫Û@3kÖ¬TêŒ$†{̀$7íŸ äE˜‚¦×Ù`ˆoĐÔê‚AŸÁ?›‡|ÜOƠ`e‚sCm’sc´ÛS‹-SL€÷Í/Ḥéç¡N+WLû”)ÇâĐú …vuBđ… Ú¡-aư¦-,6¬ưY‹ 0âí„ᛵn‰b̃¯Œ`ÊdÑk© ¸2æ'÷Å$TÛ¦,†‹ƯỌ́/.—4¼O¶¡Í¶—66ËXu¡‡!íÇz`Q$~Á¼‡âú-ßÆ#´ợ÷êß= VÆV{â&0ư~ºÑ&Æy©,¤?Ë$àl’at‰oätŒ+³/Ëh=öØCÇ qs“+găjëq9W³ qÇ£å Ø«Ek¯½¶¦Á²5K̀—ŒW0vYg99ƯB€ñYÜNéû“*O[¶Q[X{¢<Å;̀zÍäzÄwÓ …¸E­—Tï1?K-ÿSŸúTj‘Ü0cƒ.ühßøÎT°Æc­'.°VB¡ ´¼%Đ·*è ơƯ¬e`•£—ơc{oøàļ‹p‰…±°$f́SÒôÇ"îüóÏ×ú¹[L0–›‚{đà-@ Maƒ{f½·›ëü1¦Ÿp —ơ ”v÷)æ‘P6̀ỵÆ8q߸nBă'¶f¡\päKx³œ0¡×(ìeb!Ưç[… Äb¼–¬ơ"L°ºÙ?Æ‚ÿ¡‚ÑC¢4k8pd­ˆp‹*úCŸ­Ư&\+êF‘×̣̉æ"Ú?êÊb NàƠ_(n ùb|¬½ñ1pXÛ¸_§}¼Óđïh3m¯¯ÍÚ×?Đ®ƒ…¸•ÔöÑ/Y¼›v?+ø×V ^X¸Ïû-.©ÓæÚwfy /ÚĂ½<,ÉÜγM+÷“®!à‚®AƯÿññ3ø0(´+ø@ÂlŒsdÂDĐ˜fơÁÆiƯu×Ơ6˜`#›ÏÚH;(00Ç×ôüb'ü¼răö%I,ø ®Xèaeg…LPŒelé¡7å_'´1zX]YáÇë[}01“‡¿â¼y V4%Đ˜ l&X&\,oléÁ=̀hM›•|q}܇˜ôX°p?dÿu·₫zÔÇÇï₫ ñAªæçh_ñí¾ûîê&w·ÊÄ8¸ç{êf”qU‚¾¦ß]7Ú/¤1=¶o¾¬ºëap±Ùfl¨úó(«ß^Nµˆ]\aŸG‡z¨%«®ºjƯ$ß/cÎA”WŒ^³Íb¼¡³Äl*aPFEˆ¥ó£#P6Œ÷ơLó·J(˜0M̀z³Âæ<ñ_/izæ±̀#¸m)‹\øQ’^NƠ€ÙÍ^ŒơÊA(¿5»ă{Y´h‘2ÊY¯2¯µjÅ_u¼´<úÂ(Ê cB­cÊ|°?ˆƯM±Ï2µO/»́2]?P?ˆ{|ÖüÅëB 1¸o–YÁs)eùb!† Ĺm37W±"Î_·|c î¸Q„â6ÅB½ùñ?ø#Ö׬»«ŸØ€¬<;[›á² O–â=RlơßÈê?ܮǔ'ø°û–7ÛXđuw3̣ùöbw]Ví¯–}G¬^;ÆơÄ<™øz¶Ëă?ˆù%Ú³Î:Kñ(’/+øˆ…&´?K­`ÙγÍÖï¿;@íˆ1̣V;9@@^k N #2h€(™ÔFU%ƒ[!‡^—ÁJ‡_tÑEA&G½Æ¹Ä•O)I&®ÜàÛ1áLj|2Y§ÁŒæ$ ƒ"‘,Ø̉ọ̈[6ḿs#ú!–£‚?ÉJƒ€Ë­IeBAØhÙôH}2yŒ¸ÖÎÚ"›ËQEˆf„ÿ­“Œ ¸(‹Í#‹V €nmG™°5`V\¨Ä²hHóÅ÷D³4đ̀& ø–ˤ§A­FƯˆ.đ b¬DÚ®ÁåI"‚˜÷Î`O4ơ´M²h¢¡•XûT_áßøF Á±„1«ÁÏdó[;“ß*øv;zºxñb BwƠUW…K/½T¿ñ¼o®JvØaA¯ O,"tܵq©Óí”M[GÓ~ÆÆ.ñ‘«c@ƠŸG§1÷̣{…é£ !`¹ÄƠ(a QĐë?·yxTB¹ ,½œØÜ̉ËÆXO™?³ÄÜÏ÷‰†aö¶ÿv:†ëha8éû- £–ëaÎbưÎúT4Ëë–Ăû. ̣Êú‘`¾ˆu2ó<ó=ÎÉWƠ‹à& xN`'G``ß$ŒÛ ± 4(óÍ7߬ßT3}ä{!¸1A²ù&Eé1̀œ93 ÖÜLYƒ<Ê-LúpÄGèø'‚d */ –mw‘@Ï6ÖÁa=]‹0n±~àyˆ…î—YÛ‹åÖOzxđb"P´x¸Đ=¼QöŒokyx`&ơˆëî>öØcơk)QæHïĂ7a?-»́²A,Ẻ{v/@.ö3=L\”iơ7ưJzÏNà=Đ·,Á`Nhƒ0̉$À>û́³ơ7¶E¡%½Ç8ÿè£jmñ ÉÓ›ŸÀ‹ï½ûî»ÊCùøVz`îc~j–˜/i¯‘XS0‡˜—ùÎŒà‡ˆ7ưI:ºw’â~ÇơÀ߃ϱå=‡ÿg×âûq¾Zå‘^–X媤ïOœ—÷̀ÖÙñơø<‹eYÏ6®ĂÏ;‡À¿¸±+ßKvF!Ààk çâc>ˆwD:Ñ&LêèL¯ĂÀ6F¼%„ñÍ„¥éÓ§˜Tbæ9.“dSLü1¢-¬mbÑÅ潘rj5S§NÍe¸³ «µ™­ŒđÜsÏi_DcE™ñyíÎö£Ơß`÷ÙÊ9øàƒƒ1É%S˜;w®.*Eâ­ D6ª¸é%б|Gyd@Đ”}~àÆÏ™IÙ–ƒøO¢QÄW£NêV¾•Ơèˆ &$fµzǸ¯üKV‘ ¾§r₫¹Đ#¿4ƾÑ8ÑoC4EÂ\ÖZk­Q›ƒ+̣㤓N b‘¦m—À{a¯½ö Ưê±a+»#J|§çÛí@Åæ…Mă ̀nö­v{̃ÁFA†ø¾VÅqM‘ÛY¾K6̀l¨Å_pn»ÈZª'ø€)±Ë#qó  ]±Ê»í× P–à hêZ’5e="­Ä³ (ï huË-·„Ù³g×Ë¢Œ)¾„”0ÿ$nWà7{’v‰ö˜đC´¥Sá̀L‚NÀ  –w\܇3Î8Cº0$'NœX¸‹&@AÁhÆŒº/gí “&ü0ü‹yóæqw©{’,ÓºULØ[³Ç†XP ïXy¾ ëX©"̃c³†—GbA¢åÚ=ă©đ›|b‘g·̉#ûyÆoÁŒX©ÖQÖö`X3¨B₫ˆ₫±ß@X”%„ç¦)VA¬rƒÄ̀&Ëư E,nƒX̀« !<̃‹ÍI¤Cb_Â=;‡¯Å˜B#è¼ëü®{®ÑO*ô«]Zf™eT–rà™°d®[̃)‰0a„v«Óü¼+(d‰çO¿²ÄóGxÍĂ?¬ÊΆ%c€=Ç8/å!\Ê#°ăơñN=ơÔS*øB‰B¼˜è>ƠÊÏËŸ½Vֳ͖ë¿;‡€ >:‡­—,ÄB,Xø3˜ÇLo“èŒEƒÄÍ_3Ä€– X~4¹Å‡¥ >˜| À¼çÜ0âÖ¦¦€ĂÊÉ™`l¢b!×l›³å5ú S–Eg3$nÇôÙ‡¶2Á˜ÉÛÚ_´L‘âb@,œ—A(˜d ,3`p¶K.ôhÁÁÏócÎœ9ÊÀä;`qˆÆU-!bƠAëîôÓOW -qÙ°ü(ƒ‰S´Ÿhƒ±9`Ügs!q8J±qaงF >>O×)ćrŒZ<ë 6y„à‚¡cB‹¼tâï:Ư…2j‘ ?j!ă× ÖȬQ|“;E¾¬‹kî­¶Ú*\rÉ%ÊTg^EIQ\. í:ơû”)S”±¦¬!öÇ(Z è­G0ŸA?AyÙĆÙ2đ׈H‹5ó¾lLlÏ0æi£¸ «¬² QXă°Ö‡GÑl½ÆÓ ÿ¶fjÔWáËÄ aåÌ -‚µm6‹̉ÅB a§M›V¤ºi²–#n6ùƒ~ÓN, °DßĂ»ƒ5 ‚/xeZ0‡–A¼·X%Úh{9æMxˆª̀ˆr ă¢e"|ÁăˆÄè̀µô)Z¥+ëÙZy~́<ÿÖù*¼†aF€EM¦X>Ø„c‚æt«Èd–÷‡&¦“lĐ1óëĂ‘ –:˜ØX™Đ˜h˜Đƒ„”5 ÄdÏ™$M@C} úơ(NÏÄEÚ!ˆL:“•)“‰Æ æÍ±Đƒg¿Ă;¨ièæ›oNhEỀKCyyï‹]C»¨ƒ×…y¨ú5C€ïÿư÷³fÍRK04D°*À¤ºScƠ]ÖF‚Æ«´½ăWÜ₫ï~÷»K74¾0ư®÷MÆù977W¸½oM3ưó´ư…áF.®èî0ßgó&~›ëv̉̀ï±,­§n›øZ‚˜Nh2O›;ƒºûMG xßĐ$å]¯e]¤ÖÂX|°>6··ợÁ8ÙqÇ5= º"naXïâvA=kØóÎ;OÛ^¯fîÅÂvhbMđ̃É$`tâZ•=áo¼¡V0V›!Ö¬("¢í;Ó[o½U*Œ)ĂJŒ£đM®¾új;ÀÍ}¬lb÷KY|À,¶e,2­ú8-<ÛKçqùÍ8Lyx‰è±VÁ³Ä́ÜsÏM­?¸»Ăâw³#¼ÖZ©VY´‰} „€—[¼Óææ llư—W,Q̣på¼ ₫đ:̉IÛÉ·y•(ùơơÆî°¬±…]«wŒ…5¼³&pª—'ï^\Ñư¢×U“Ä!ô`|_„RàÅ_<Ê[ѲIW•gÛL›‡-­ >†í‰w±¿ T8HP®Qv„ÄSÀ’I~̃¾1ŸD0-f¦çuJ4ÁĐh0«…¼ty×0íd°‡0ƒÙ`eÀ…y—Gơ„0Ø­Œzéâr¿̣•¯è„ε{î¹'Hàíøö¨s´!À‚É™79ÅÂŒllHÍ‚˜¤ja@ˆç.ÊbSA|)¢a‚1¬,`15Mœ·è91D˜¨ó̃»†ßμ8 ÔáB¢Hg:„ļ÷̣Ë/W \Ù±`*C`×-DajâĂ ¾9˜7ÍjEµÛVÜÚá^„ï[6 e›ÓC¸̃êº́vyyĂ‹@W Ă&B{ÓÖz!çŸ >ê¹¹"›Í«µ6ó0u±n…ønœn P–à批±à7÷oµú`鱄†i2@B@V( [\¹£«H̃"i\øQ%OÓï0߬"̀\Ö̉́áÙOâ6Öö›EûÇ₫ ¸JÅëLÚ¹sçÍ>°éà)À/€Ø÷³ÏÆởá‡zLj;Đ Tˆư– YÅF˜î”c{é¼#îQă¹Øz"®'{ÎØ‹àëŸZü„l~Ç0 Wsw…Áâ\Đs‡•—?Û7KC{ ¸|»×èˆå1•¨2ư@IDATÛ đÄå<³¢¡M(ÉæŒq̣²ËĂ•k`× ëw^9e\£-? xđ\±¦‚P^o½ơôÜ₫±¿¢ÿR°Ư¼<³ØB#¾Ÿç='̣›k,kk\?ùó„ŸäË»N;xà´Z ÆŸƒ_„à å9ö‘­P•m+í–<.ø–'Ưƒ~¢-MLˆ¦Z¸U2æ˜I7“F#ù`âÙhi`|›Û+»Æ©-æ0Ư‹̉[l‘j?ÜtÓMáûßÿ¾2ØÉÖ ‚>Ơ]˜¼ ă–să'01æZ"́Hy6¢hª|»Çóø®º‡¯Èîñ̀á!Äí¦,ŒÇMu.ưiqYÙ„đFD(¦e¼뉄÷₫ |Ë?D\‡¦Eˆ°!ER½_dîܹڮ˜&–“—^zIÓRñWậâ´`-ÖiƯàpå•W*̀g¢$›̃ƒ‡ß̀衇̉{ÙëvŸ>Û³wfÏŒụ̂’Fü̉º x}µHLu>´´¢(›ˆ0Rñ n±èñ̀IGyü;øz<_±ŒJàCZ>đE‘0ƯWÆï¼9Q²Öüí<Û´S~̉5ĐÀqr ! âÁ¡̃yĐĂ*cĐgđ¯—Ÿ{â“oó5Œäåg“Âà ÅB†"‚8½•ưË_₫rD(—Ó–®Ö‘‰ŸÍSLLqú¸Í–®(F”#ß“§Ÿ~Ú²ê¬â…L\_ö\´ƯGm´LPM›÷Û0i<׸  8 l̃ø ¶8õ9‹ÑÚ×̣øçB ?‰à í” 3oAj¿›qï§̀%¾eŒÙ½ ¤® &¾å¬À¸̀öˆ9¿ Úéo? ªÊÄÂËê-â¾1—ØÄÖ#6Ồ[l™/~̉³Áf“\Ä2-»^:Ñ,Ôtâϸ^2¿ç´ Ñ$Uáë̃v‰ùYÜOê÷s¢!X°oÆ\¼>l”Ÿoô´ÓNÓïE«BA£<­ÜwáG+¨y~C&¶nÖñ@\Î$(°´B́oaz27&¸®Ư[)§ŸóÄ„¼½p̃5”¼d‰ưû†¼<ñ5”Q4Œ©_₫Ëc=¦Ùâv|ÄB Ú_ÅÍ,eq»³çàÄ=÷ˆ₫Çl]Ù>›À'›Î~£Üe®gÛÄïÍ6Ûl„R¦1Ü;%ø€÷‚¢°µ‘X́[³GyOàËYúFǬ0†³‚zeÀ‡â}1â\<•ª?|4ÛnÚ ]²¢ø^«ÏÖúäÇî!à‚îaƯ÷51h°i©7@qÉA” 4–đæ Á®¬ḌÊ„‘/~úr™w |,xx²y™X„Œâv£É€Ûˆ°œ‡Zv@ü±àC|$&YÙöÀ„g2Î’øøNXôYúZB0×¹}µ¼YK«+|ˆ̀„?$ë–ÏhŒÄ‹åçˆBKkGÆLbú¨÷b̀YT±¨°´ñ‹4DĐŒ€‘Ă½X¸„ƯÊä“0L]#¤óhú }—kçâVm„&‹ = 9?Æüæ7¿Qa¡iRóự®0^ô‰ùn"₫sơ{bñ]£±·S}ŒµĐ´©¥-UFư›nº©nÅŒ¾!C¸Œú¼ G 6Ϧ`kêå¥å{°´'œpB^’Q×Ä'·Îuµ´ ă b¦¯iÙ$×#ñå¬é˜kN"€°N‚íª0«‹v‰¹y†5ÖÅE-wí;÷& ßT3Ä‹65Ĭ£;E.üè²^nUà÷8 BDq­œHl‰B yíǪD¬µÅmOÊXÏK;ˆ×đ¤€7Ûÿ6:2^"„æÔ"¬/j)—¢¬!ñ1r³f…Ööùd„UGl%RDđÁ¾L\z§ừ -¬A±àƒ½ük‡áÁS»,Ákˆ-Fêµ-+(AÑ«‘" Ö¾—fT›h¥C9dÔ|fVđnöÙgŸl“•uâ‰'j™Y!åå¹|̣É£̣rwAƠ§mÊ–‘—‰ç!n¡FYvÆÖḷxK±à¼­ưq~Ö°(æđ®d)k%çăƯÅâ~e#82BiB\¾¥}óYÚx 7²—¬ ª•gkị́c÷pÁG÷°öê €ÄùW¿úU">\9°A)€Dk B@´!ë4aÄ­XđÉ]Ö$”ıàĂ„ Đ˜̀1¨s4×V# ~ĐGÚ̀_#F¥•ÍDƬX Ôc,Æ‚n0Ù3aÑFp+²i$B(yó Q·̉SÚƒ-˜ÊÙ>" a²Èö\À\j½q›j•ïBôQøÉÇ°đÿú©8niÄnî7̃ ñˆß^ @¿»u75́ß1›P6:˜&ç-X˪z z¨ XƘ́ØRV=^#Đ¢.®(‡±†Í æç"Äf˜,ƒx™gPÊA9¨Á”¢~”į{‘,iæ6Ó†…[ªN‘ ?:…¬—[Øw€dLà{3gNKMcĂư³)̉áâ5ë]¡¥‚(ă | J®s>˜3×[€+ûsöü0‚ñ&‘g%’ûvÜ@ñ‡›ó¢ü‚¼²́í1Á̀h˜óy >D@́ùàuÀ󠱕‡&ÈùGàAdy9I[ºDÙ(yâã ü«"¼˜–*k)|d™ù ²êmæw¾9øRüñÎĐÊ­E±à…jÈx\ÜăYç L4aô/Æ‘u@Q<_x‡¯F¿¬(ï îƯhCvoI¿¨—ç•·ÆÛÔëgAå§#à‚  r ÄÆÀª!bÁ‡ÅÉK×Ëk,lL»Ë 42†…\è1,Oºx?a–Oœ8Q™|ß|ç,°² ›â%ö6% /´åØ°`Å·j½Åf§[+µ´i'q=å”StÓŒE^«Ncăå&æ>‡ñ¤‘‹+0MJü¥ &èzw;E[»4bT#Œ´gœqF£bư¾#Đ2ŒÏÄôẲe ´ˆ)“¸rEˆùkH̃y„æ0Ă!3Xt!pÁUO#í̃fÊΦe÷˜YTü÷ !€b Y+w‘Ø‘­ß5±9Ç«BMÜßáNËi$(JiƯ/0†aÁVËzcdÎ̃ÿ­Ib—YÙ–e܃dëî×ß±«+¾¾¥NSVđáÏ©Óˆ{ù†À¿ÉĐÉp‘Ü*²1  Ơs dÖYgǧÏOzA¤íA6¸A\îÑđ ¢eÛg=ñæ–…€= Â@ â?ˆY|æáÎ;ï #È& ¬jºV㕸› b¢¬uJä îÿ‚h³v­ qÈ9üđ‡?  ¢½D󮣸J0Ë ÚXú‹û‘¸)~îtÙŒë7HeÂƠ¿z‹•¦ÎI¤+ÑzIGÜVư-Z­#®çư«¯ô2í«G[n¹¥̃^°`A½d~Ïh æ*a®è| ñ˜Ú*Ë23Ï1w Ă$ˆ¶©]®{d—8^A‚ht†ë¯¿¾nú́M²qÉ–Xb ­ó́³ÏÎ&)í7ưc>¿ùæ›ơUs—ºA„™¥Ơá9½D@,=Ẫ{ïößÿ ×A\ñ±.hºI|×â¦&\wƯuA\úQf 3f̀¢œØtYƒœA„KAó™X/êy‘ )LY#Ñ·ÓÜă׿₫u½‚€)~ä&ô‹@ gn€AY¦àf'ï­¸•-Ü:”_Äeœ >*ÀT+J(LH°Ô X[±pTNÑüͦsáG³ˆyú~Cf¼Äº â†)Hó ̃‚¸Éiº|+3S…™ÿY#JܾĐHøßtE}uù”)S‚x²Ûn»m` ÖÓ*T}ươ×+Ơ;W(g°¯Ënm‚-‰ăY©vöccÂßb>D ¡ä‹²¯“#0ȸàcŸ®÷­0b® Ä8–,¤j&c°±kfU«̀²¯Ă…9‰OĂ´½e×S•̣\èQ•'QvH ß0A¬<°†¿›ºbÁơO?[  Çø„–›´æzÙñ“°¨A{èôÓOlf;I·Ür‹öỊ́ª«®ªëNÖçe;Y~ñ‹_‰ÿ¥—%€¦jfÓÄ¿Q¦Wtz©kñÍ­yhH@ϸÈÜs@fơÑHđ!n·ÔB æøeÎ-Ï/:í À…Ö¡|°î?̣…›È<9ỉ¤ îUh)>Ö ç%!ŒC)ÄML×1'É…D×Ë®âºH5Ι߰nœ={v`Õ,ñmẰ½êª«”¡+ñîÂ^{í¥{ßfËäôŒĂâ,ÜtÓMº@ +.¯t_„%uUᲸDJ›ƒÅ5³TMoD'̀¦¸]öÓ ¬ùlmÉ-æC,(ù~ºA<[N@×0ŸW~t†üé̃vÛmÉYg•ˆöṭÊ+¯̣•oÁ‘H¿ư*´Nö†ø<¥ŸƒJÓcPŸlóư"0Ù 08çœs4†,’c9&!H[/‰àƯ hN?ec“ÀR6k:VWuÜíå3ñº;‹Á1-v>ÿ‹;4¶€ê}c>Đ LZ”¬mwß}wĂ,yf, ¸†i=#Đ,̀¬­¯y÷Ë"¨¨/r̃]ô%bQR¸h‚î±Ç‰0J“o~ó›…óYBúÔ­@çV'kwùahøqĐ`ÍN¼ ‹?7®¹ƒ‹ô›5±¸½̉pÄâ§|§Ñ€ ¶E  ëđḳ„ø+½&Ööđ.D±$!~ ¸ûkØ$ö̀Ø.’¾a€Y>ø î¡ˆ­Ó¸1”̀¡¢¡Ï©ÛuÇíđóáC-'GÀpúzôơă+µñƒÀ<‡Í›B˜=¢É–ÀÀé5u3 9}e“Ææ ¦Ơïÿû–7ǽÆÍëï_LÎ7(.® 1\ùN—[n9Í#qê8Lê:đÀ çÍ=ÍĂxшæÍ›§i^:9e#óJ\¼iĐa‰­Qjñë…±É|§(!D¸ï¾ûô½_a…‰/P4k®›Î­R~~Dø¦.¹ä’ÚäŒ3Îh¹›”CW,¦t|·”¾V¬&Bd˜Đ(q°ÖËd“M6IÄR~Ùp₫DÀ]]É(ïä8ư‹€»·êßgWvËñÙk«A `ă#ÚA˜Ÿê²kúôéS€ §½$ü¶w3 9}57W[o½µºÂLßÉ踸ºæk´º".®H(̀u‹³ổK‡}öÙ§©¦;‚"ñ=¬`suUÄ¿¹Åùxꩧ.;2ÀƠUÙÍ­}¸¶YwƯu› pN^ÜG‰ /ˆeTÍfS¬̀¢Gæ̃»èÜÚän¯ ?"¸sÜyçĂG¡±9ÄÚ10߶B”µû+'Üfá₫ïƠi4¬¡ q ̀†± ÷µ[mµ•â6:‡_qG ?pÁG>7oµ#à.ôđ×,€9₫|)€¹=]1÷¢ù­‰OÂe©¥–²Û=;v3 9íá€H4_Ă7¾ñ j̃³'?œ#HÚyÑ ü!âñ@ŒO&”(’4ø<‡Z|4ñA¹Ä1ƒÑÁ·µ`Á.99¥!ĐIÁ‚€VœÓ9|‹å–ƺ₫úë›î/̀Ân:·ºđĂđă " –*ø˜8qbx÷ƯwĂ·¿ưíđ̉K/µÔUÖÈ( }ôÑáƒ>Pe!qgƯRYĂ aÑ₫ûï¯ñ>Ö[o=Ư_tĐACP¬â†ï£#à 8.øđ́Ưsz ê“m®_Ùæâ»; BsCAbô(ƒơ/ùKØpĂ Ă 7ÜĐñàáVw½c·ÓqÕ{ï½À ‹4~n!†À™ââJ™(Eê½óÎ;Ă /¼ Éß I 1ƠH'Á”‹’ W>₫ă?₫C5;)ÛEötEè†àƒ€¶Ï?ÿ|Ñ&i:ævÚI­Exâ‰À·Ö,u;Đ¹µÏ…†„q?§óëꫯ^ưuµ’D¹©b.DđqÀ¨É©§êV u€$€øW¿úUµßo¿ưÔ  W,C-ZT'§ßrG ú¸à£úÏÈ[è8\è‘dJp´ >€ĂäÉ“Âe—]V74hW¯´̉Ja\ ½úê«aûí·WÍ+ èn½ơVuïÔëÇÅÅ‘G©n·ÀêÔ© S§ég?ûYà¹O›6- èät V\\Ñ6‰o Mœ2eJ;vlSÍ57WcÆŒ 0ƒR3‚Ê4wW?§hÎ(„@§ÏF…Û«P{,Ñ¿ưÛ¿«›m¶YËV”Å·†»Gæ%„œ÷̃{¯UÑÑ£ ?: ¯̃CX»¯ºêªạ́Ë/WËæ'Ÿ|2|đÁú·̉,öËJƯhI\ pÔQG…;•¢†&Ï+®$~Ÿºơ¿§Ÿ~Z÷Z¬g4;9€#Đ¸à£Ÿ·Ùb\è1Äÿă®KPke~üñl ªVX{ô:îEYOçí·ßV¡Ço¼`|̃~ûíz¬‚@ç /ÔÚ⧜rJW0G{Æ, &wsUÖ[æåA UWh‘/\¸P«øÎw¾S¤ªiLđÑŒ›+ 0¡`‹̉o¹å–Tk¾UÍZ-Àÿ9ˆC,( ŸûÜç2wÛûI™ăÆÓBøFQh†˜¿vÛm7|¬†‡¸½ûûßÿ;î8u×L;ZMëÂV‘ó|UG€ïjƒ 6\p®ùî¾ûîp̉I'µǗå—_^ùÛl³ºĐḄĐCµ\̃0dÄàŒ3§ñăǬÎ9昰뮻†?ÿùÏĂ÷Ñp | Øơî8ƒŒ€ =ùéëÛ 07ĐJẲ÷¸ƠA; íÔ*=zĐ\ÀF.X]Ư°0±çáÇáF W †EDfbó4K&ø 3Ô¬ÅÇZk­¥shçwKc½™₫xÚ₫D€÷‰˜[I’tDđÁ|ˆf̣g>óZ´âîj̉¤Iïv­Z<ơ"Đ¹½.ü0$ü8hÀxǘ äÄè@áæ–[ni¹›Ÿ₫ô§Ă%—\6Úh#µ¢̃{ï½nîœj#Àø²Î:ë„»îºK-eßvÛma„ î³6l~Çp*€ >*ú`¼Y€#0zŒÄcØ~ zs{~ø¡Z4`̃OpFÜ[ÁøD»µ Ôí€æÖgss…_öA±ê±¾ù±º´êâ K´›nºI;ÖµMđѬŇ >Đ‚/B0aC­2‹Ôăi† ssÅûµÜrËé|V60æp̃JœÚ‚bÁ;îØ–»+ú׋@熥 ? ?K/½t À6ë>,8âµ6nµŸXO_}ơƠỀÿĂ₫°'—S}pwụÉ'ë~då•WÖ€ó;́°ƒ^û¿ÿû¿ú™ư®#à8A œ”€áÍpj" =`à Z\8 >ƒÀÜ ˆ™3g†GyDw_ươaă706ª@½hN¿ßyç@ƯÄq7WUx†£ ­º¸ÿøÇtÜé4KŒ¸¹ƒZ|uuEæîï̀É(|tÂÍ•µÏÔơÜsÏÙåÂGsw… E¬ZuơÖ«@çÖQ~~4°̣=ó̀3Ă—¾ô¥€eÖ́Ù³Ơ}^+ưDHI¬­k¯½Văˆ¼̣Ê+:?¿ùæ›­7TyăˆU†ûÎm·ƯV­ppu‹UAèGÀ¨:.ø¨ụ́ö9C@Vèqă7ºĐcH̃ ˜?øÁ:€¹=J7ûî»oêjæ+®ø#®Đ£WÍÁ÷føOÇGü†nXĹÙùq0hƠÅßÊ¥—^ª pÀ†A³´xñbƠb‡i¼Új«5•Ư,>|l²É&ZÇK/½Ôt¬„¦片n >Zµø`~E¹à³ŸưlÀÚ²W:Ù@ç÷Ưw_WŸµ ?º ·WÖEø>/»́2µĐBÀɼúÏ₫³¥0§®½öÚáºë®SWy”‡r 6Nơ;GX³zê©ê~w₫üùº'Ç–“#à8UFÀU~:̃6G`Èp¡Çđ¾Àü„NĐæ&LPM£A `?ƯĂ?< Ôƒiz̃yç©i•âX\tÑE]hnø˜›+ȶÂD¶rüèE UW”¥©h“xàE«‘îÙgŸƠ߸ñiÖµ[³ÁÍ©ˆ Ñ(ÚƯ]x₫£Eº)ø°ºZq»B,=÷ܳ-wW@dÎw̃ygÔï{ßk™9Û"䪀ÂÊŒ=öX˜6mZxï½÷Z-̉ó9=G¡±&~̣“Ÿ¤̀v¾¯V‰̣Ö_}«q§ơø㫵u3Ê­Ö=ùÀ ·cwQ̀Àb†1ô°Ă }ôÑ tÑûà8ˆ€ >đ¡z—A@À…ƒđ[ëC6€9‚[£¥…ÆÑ ¾s/¾øbe¼`:NĐÅÿ÷¯L7 hN æüăÍk®Ùµç€́駟Víw¾»{»Ê¼Ûv\\ BBh×]w Tm…ZïA]­X|ïë_ÿ:ó¡(ø¿v0as6Öz ʆñ† 4À[qwÅ\K ¬Fvüâ‹/¶ÜT„ sçÎ K,±D ØúÙgŸƯrY­f̀Z~,Z´È…­‚éù*ƒk?\2²F†¹U4ÁÊ[%¾{¬½ˆùAÙ¸˜5k– -[-s˜̣ßQH{đÁu­Ă39ÿüóƠRưw¿ûƯ0Aá}u>A`đ8H}¼7Ópj#àBÚØ ̣lóƠW_]]?wÜqÁ´˜­ÿ?úÑÂi§¦L›£>Z5¦ªfƠ4'Ps7Û‡I=Z¼x'ÖÁ ¾íî÷₫´êâ~Ă<ùío«´Ôœ̀e>p—$‰¶¥È?óQ%OSn>hË’K.©ÂøVƯ]1§°ÖØl³ÍÚ¶ú°@çÇ{¬Îé̀ïQî6¹đ£Ûˆ{}Ư@€oÅ ưöÛO-ÁO:é¤đë_ÿºåªxlµƠV©KO¬4q³ëÔÆ;Ü]~ùå*ô@đKœ00½̣Ê+à)GÀè".øè"Ø^•#à4FÀ…1Ä¿ùÍoT{-®¿ưío—V=ôú­’ơC™Øă –{íµW8ñÄn7ªD½ hnà7˜M(AÍơ=°¾ú±÷´ăâÖŸ{î¹Ú ˜¨cm•ˆµ5Øœ¨&?.á´´ªi ?ÿÙ±8Eˆ̉*¡°ÿ₫û‡5ÖXC¿?zA.üèê^g§XvÙeu­<~üøđç?ÿYă}´#\dÍ=}út»ù₫‰ó3gÎœ¦”:Ư窗…c̃‚ Âzë­ØÇ|đÁ*¤zÿư÷«̃|oŸ#à .ø’íƯtúzôĂS*·À|Ê”)á™g lj0=Ç—ïJ+­¤.,Ê­±¥ưüç?WÍ2„©nGĐZßn»íÜÍU§ø—ß®‹«?ưéOáî»ïVÛ±ö€™ƒđẨ©YÍø,Ç-~Ï!óÑ,ê>F!Ä[o½¥̀Ăn >Zµø ƯƠ'M¤Äçi÷ưïu s{.ü0$ü8H0Wákƒ—_~9̀=»­Ø0îgÎœ™ºÑºêª«T¸2H˜uº/Ä8úÊW¾î¿ÿ~‚ ø¾ækÂ[lp·çä8@¯pÁG¯Ÿ€×ï8€ =†ïE¨Àœ HƠ„e>Lóñ% SróÍ7W_ÅK-µT™U”RV/Ó4ïĐÀCư _øÂÀ ÁJyX^HÛ´ăâÊÏ:묀°pƠUWUA]« 27WŒcÆŒiº˜8FÍ>Ècî®ÚeüZư~ǸÍ®P–[n¹ĐÉùÍ,>|¼̣Ê+-₫ÉO~2́¸ăm»»¢Utn@¸đĂđă  `îé.»́2UˆÁ2™ÀÚ͸v̀bÁ…›+\Î~đÁªŒÔ‹=ÙvơÛïW\Q­gz È¶xñâ0ỵd½Ö%]¿áàíuê!à‚ê=o‘#0t¸Đcèy vñĐ‚92è̀í cƠ²Ë.»„÷̃{/l¸á†á†nĐÍƯ¯Ê±—ÍÁÆíƯÍUŨˆÁnG».®ˆ§¥tÈ!‡´‹ÆX_066K0]Íê£YÁ‡8ôÑGơl¶nO >:míA]Ô±öÚk+Ó««w̃y‡ËM“¹»bι÷̃{1ÇÚ!—q ósÎ9§âÚÊë¶àó̀D+-”bø®˜qQ‡̣A;ļ‰àă€X€Hë§æÀ}ØŒ3Ô]1.É₫̣—¿„c9F÷>X´:9€#Đ \đÑ Ô½NGÀÀñÇzê)Ơ ¼ñÆU M¨Óà!`̀ Pˆ+Œa`nOñƠW_ Ûo¿½ú¿]sÍ5Ă­·̃Đª"{áÇç?ÿùĐí€æàñđĂëûĂfêÔ©ߣ/É€´)vqµóÎ;ëæ¼Ù®]zé¥êÏ饗û́³O³ÙG¤7ÁG+ñ=¬ |Đ·fèk_ûÆL _;Ac›©ÓÓƯ|ạ̀AC;k6̃xcuŸóᇪÅa;O¡%–èœø?íÄ"h§-äuáG»z₫ª!€u#s619˜³~øĂª2U;íÄJã¼yWYGu”*á´Sæ0æe¼YguÂ]wƯ¥26ßsÏ=ËZ'GÀpz€ >zº×é8#Øh£ \ÛàúÇ…#à˜Ùæ{î¹çÀ0·‡‡Ï~„o¼ñ†º¯¹ưöÛơØF·•Ù©#nĐCóơôÓOï‰EÊÏ~ö3­›m¶QáPqê₫^nwˆ]\ưøÇ?n©rüC{íµWjmÑRA’éÙgŸƠ¬e>µø@`²é¦›jưîîªƠ'èùº)øm´¿ù^Ú|PÊ{́±G)î®(¯*Îi äÂáàÿO|âáÈ# ¬ß}÷]µ¸|饗Úêạ̀Ë/¯®®¶̃zk-“@Ư=ôP[ekfI'Ÿ|r¸óÎ;U°̀^ßÉp^ à‚^ îu:ÀĐ}đÁn6\è1øQ+€9̀ÂA`n­1„Ï?ÿ|À8.œ°t©"3¿×ÍÁŒ¸ç½Ùi§|L°É¥#Đ®‹+„Fă /¼ .wÊĐf$X+Ô Áơ»« đÓÉhn >`èñ‹_T[¿ûƯïn¯e@€Âœƒå‰'/¾ø¢Ưjùˆ0Mtæ3˜÷Ưw_Ëe•‘Ñ…e èeT VX! ´Àºúơ×_W«Ëv]Ơ@KNópÇŒ•:c‚Só 4i’îó?üđæ đ€#à”€€ >JÑ‹pGÀÈG`X˜}ô‘̀?ùä“êÊ ÷Vë®»n[1¬́N{Đœ>Á" n иƒåä”@.®h.l )S¦„±cÇêy«ÿĐTÅÍ„;¼VÉ\]5kñA}&ø`̀úÇ?₫Ñj<ß#Đ Áq>Úµø ^Èk¬¡VO௿₫ú¶Ÿb•[g\øaHøq@‰hƠUW —_~¹®³™»°̉`6Ø`uùóÏ₫3¸»«VŸÀpçC`Æ|̉àæ m0:‰¥ƠYsæo\>¶Ë<¥-U tnØÔ~ˆØÉè702w]pÁj]u÷Ưw«‹¥vú@e†k¯½V+¯¼̣JØm·Ư›o¾ÙN±×pG ¸à£ {•€#à 2ĂÀÜ+¯ûºlJ’$\qÅꃸªBÚƯë€æ´F-.vÜÍh8u 2\\Ñ6\Øđ}cÅE|ªvÉ”×µcñăw«­¶̉êƯƯU;Oa8ó2÷½ơÖ[ú]tKđA=¸¹°äzíµ×Z ĂÉ“'«đïüc)Â?¨U tnàä ?¦N\øaù±Ÿ Fïï 'œ>øà‚;²blÁ́ºë®ÓxsÏ=÷œ ?̃yçvơ¼€#à8]FÀ]Ü«sG`ææñsÅí7̃ˆ™ïaü†£‘VUªB@s°Á:‚KN˜0¡̉˜UơYz»ê#Àû…PÚyçĂ.»́R?C»ï¿ÿ¾~ăÜ.ĂÚƒrLđÑN|Ê1ÁLàVÈÜ]¹ÅG+è wss³¹å–S×3F„ºV\qÅ°̣Ê+·ík‡v(-È9eV-Đ9m‚\øñ/üÿ` °ổK«›+ÖÜđ|₫ôÓO·Ơ9¾‘ơ×__…”ÿøă«5w+•m5Ä3;€#à´Œ€ >Z†Î3:€#àÀMÉgy&,»́²êwX˜O<ñÄ@¿q•1õ< Xå8Uhnø™›+6­¸qrÊFÀ\\!\C(Ù*₫ùáoû›2\qQ•-øh•1³å–[jwƯnØ2pñ2ú|tËÚĂ9I€s\Sµàœ̣̀Ưë{ï½·´oägœQ™@ç1vÛl³ºöb̃]´h‘jλå‡!äÇ~B€¹k̀/}éKj}6{ölu½×NXĂo²É&º¯a|À…í¬Y³Âßÿ₫÷vơ¼€#à8]BÀ]Ú«qG`Pˆ˜Ă$CS¿÷Ä·6æơe—]¦Œ üăuÔQË4=«LUh>¸øơ¯­V2>Ø\:9e"€‹««¯¾Z‹Ä8Zâ­ÂÂK/½T³pÀ¥|ăJ_ưu-³,‹Vk­µ– ¯abßwß}­@äy†^ >¨¿]ÁBâqkçĂ? íºË±W«O„XÁ0ữ÷¾X+TỤ̈£ OÁÛP&g=ơ§ÛưÖ̀ ä%—\¢®üXOxà*È,«Ư^#à8@gpÁGgpơRGÀ ̣˜ßu×]êÏa"˜#ÄÉ °+`sçÎU?áUÆ *ÍÁk˜AŸûÜç—¿üåʯ̣óô¶ƠF ,WÔpĂ 7¨&)ŒeĐâÅ‹U[qsܸqmÙNps*¦ Ûn»­¶ÁƯ]µơ(†.s¯X|<ÿüómẳÆ{́Qª»+E¹¬ –Xb mç9çœÓv[Ë*À…e!éåỗåuÖYG­¯q…7₫|4¶Û.âˆLŸ>=üèG?̉±uÿœ9sT̉nÙßpG s Wªs8zÉ€#à ơ˜ăwØè¸Đy÷ƯwuS„ ~°v©B@s{ẀÍ1ªn%cmöcÿ P–‹+zŒ•´ë®»†OúÓz̃î?ss…µE»c‡ÅøhƠ⃾Xœ¬°œ¢ôJđ° ÄÔÿæ›o*S²h›ó̉áÚËC)O<ñDxñÅó’5}­ªÎ­#.ü0$üØÆ)§œ>úè£pÅW¤–íô ¡%íVîUW]¥.nÛ)Óó:€#àt|t_/ƯpCÀ˜|¤¿ưíoĂ~ûí₫üç?‡M7ƯT7WK-µÔÈDüU•€æ@ƒ‹Ÿ§zJ™LhÓ¹›« ¾0}ܤØű9Zuq¿úƠ¯Â£>ªh”ÔœÂLđÑ®›+Ê2ÁG«ÁÍ)cüøñÂK/½^{í5=÷@#z%ø€a?v́Ø€`—6íº»B²Æk蜺믿¾Q× ß¯j së€ ? ?ö;K.¹¤ÆÙÛwß}Ăû￯ÖV¬}Û%ÖøX{s̀1áƒ>çw^¨’ơV»ưóü€#à .ø´'êưqG CxóÑÀâ;ø›ßüføĂ₫Ö[o½på•WªoüÑ)«u%h>ỉ$ dÿñ^Ñ7̃¨º0}×]w]uµÓ«¶x½ƒ…@ÖÅVíĐ¹ç«Ù7Ûl3 ÚNYq̃N>Ú±øX}ơƠĂj«­¦MtwWñ“̣ózàêp[ØM‚‰°¢,wWàwÛm7›n¾ùf-·¬₫T5Đ¹ơÏ…†„ûe—]V'GAiÿư÷×5{»ưâ&–O(̀›7/`ưáä8€#P=\đQ½gâ-rG rxóÑL0wơƠW•Axíµ×†UW]ut ^‰Ÿzê©m»Öi·‹·ß~»ˆ$è+.Fœ²(ÓÅƠŸ₫ô§@ #¨LkÊĂ²Bđ×.™ÅLè$IZ.ÎÜ]¹à£e‡.ă[o½¥ï\/0ë¿øÅ/ª»«v->xp̀E“'OÖX]üăC™ßA•ÛKëÂCÂư.)̣“Ÿ„Ï~ö³áå—_³gÏV÷Wíö ¡ kèo|ăá¯ư« Bî¼óÎv‹ơü€#à8%#à‚’ơâGÀ4²̀O<ñDe₫áOæÆ0Zc»ï¾{Àâcå•WV7höU h냋«^xA™eÛm·»¹ÆªC}¾ÿ₫ûĂƠW_­¥·ëâBÎ>û́€µÑƠ²ˆo¡ T¦«+„¸÷h•¶ÜrKÍêq>ZEpø̣aưˆ»©å–[.tÛå£ >ʲøàé}̣“Ÿ ;́°ƒZ}”éèœöA.üø₫¿¿`măe—]¦kLÜ]~øám)"Ë/¿¼ººÚzë­5ÎßÁzè!»íGGÀp 0œ« ïMpG êÔ `₫½ï}/ cs{^à‚ĐăÉ'ŸT·V×]wº¹‚AĐT¥€æàEPs|¨ă††2L3'G ]pó„V'„%Q».®₫₫÷¿§n,9äR…œææ Fè˜1cÚízøÄ'>‘–Ñ»+¾Ièí·ß‹/NËôG >zaíA{bÁG”iî®pơyï½÷æÿ²¨êέŸ.ü0$üØÏ`ÁÅœ†ó9J]œ—AX”\zé¥a£6̉ùrï½÷O<ñDE{€#à8% Đ;‡̃%4̃‹pÊ@àoû›jD²©©EÜC{m™e–ÑU­t~½6~ø¡âŒ&^Qo8lq3€¦-îVZi¥>ÚÂ{ƒÿêÿüÏÿ,Ú¾JGóƒ:H-xfı8í´Ó‹ûafLóÜÁ hư5×\¾öµ¯é{Ù¸JÍÁ‹@¸¸`ŒƯi§ÜÚ£^¢>ic™.®è2¢¸²@è»Ï>û”‚ >¾ô¥/•"PYb‰%̉öµàœ¹–6=ưôÓêæ‡8FN@=z)ø@à‚%*–Nï¼óúƯ…€ơÚ]ëLÿ7̃8|æ3ŸÑïÿ–[nIªµ̣4sƯc™†û̀ï~÷»eªQ,ü@¼hÑ" v÷Ưw4̃~@€¹q—]vQwWguV8ăŒ3Â:묶Ùf›¶Ï˜Ă·Œ•ä³Ï>̃xă@°ơ×_?LŸ>]/p³•%̣1G#Pe=̀¾²—ñöØg³Çm–hs^ÿ-gĐÓó¼?úè#¡è¼̉ÈS€¥çư"Ï +¬Đq˜x˜CQzaÍ‹G'G ïĐÉjn¸á†ä _øN°₫ Ó7‘E~̣Ï₫s¨1«×ya’'üeéâ‹/NÄjCŒ³Ïáơ×_×̣>ÿùÏk^ñ]ÈÆ:[|×~Ó7k‹,̣Y v­înT$÷É駟³@ñ7‰lÈaøw£úJ×Áw/1=x$²MD[,ú•nsÜ8.$¢–È";‘€æ‰#ăÛ=9wÉ’K.™È¦)yíµ×Ùøơ¤^é`!đ‹_ü"k˜ăË ‰ e@¥ŒâF”1kÖ,-[‚®¸̃ÎÙ¬j™<̣H;Å$Gy¤–³í¶Û¶UgD€­ó£X†ö¤Ă"œL„9¤óÊÂ… Kióü1Ç“ó?Ù|óÍK)3.„¹Yô;c>Ë’øv¥Î…!–üüç?W|YK°¦xï½÷*ƠFoŒ#Đq/™ˆ°#E®dܸqÉ‹/¾Ø(KÍûâN2‘˜_úưf÷°ö›oe­µÖJ$̉ˆrD葈°Só \×Á#tù‡_ëöĂú“=²/ÎÛûw¹ù•ª.ÿâ€PŒá=5ZŸeRră7jzöIsª+}ŒÛù?ÿó?¥>Û<\º̉)¯dèpWW2r; 7hm£ÉT„đë?uêÔ@ŒÎF"€&Ü+®¨x¢YÆ€Z6­X È(ƯR>«·́c+}(» */`̉„ ‚04€7Z&ĂLhbvØaá¶ÛnSëâ0 Ó/Tµ€æàvóÍ7+øF₫Ô§>U©o½_«·s$e»¸¢t´Ÿ₫yỜĂ’¤l2‹2â{XÛ,Ày;®®(Ëœ?ú裪‘jåûÑÈC —´w6hp sE¿Ù¼66{2 ^L™¸¯&i³EÔM¶4âÔ ܉¢EƯ<½º[~°.4Ë¿üå/½j’×ë4Zó?₫ñ5î‡(Ø©g+ńĐÇZùÜsÏMÛÀ>-ù˜·À‚XvXˆ³×2"ml¡i×{uä=n·0…?„åÏkÁ˜_ĵf­îÍ™3g¨cyÄwÜqêÖwü‡?üa˜1c†Çiª|4gA¾æk64¯îtˆë!£îæªÓ@Yùe»¸>cjL™2%Œ;¶tD_~ùe-³lÁÓÛ|೜M0L!6ƯtÓ̉ûï½|đ®âîê™g eÅù€ù„«ñăLJÇ<äüä“O.ơ¡!D8餓Â}÷Ư§›sÎ9'°'©"1®P\p·WU|B̃¦F°·'¦Üå—_˜×‰ÙGPrÜ×̣~!\´H̉³§Å%0®0Ù ăwÇwT7ÏVṣ[l̃WXBOÜ[áRR,OÂ*«¬¢×«đ₫°d<­EôpsÅ8éô/¾đ/Ê&ï¸ ïWBø× \úow÷pÁG÷1÷+ŒÀl`°ĂøÌʶß~ûđÀ¨%ŒÓR.ºHËÄs6n¦-ÂbÎγ}=ó̀3ĂĉĂRK-•½Uó7A%ÊGf|J¿‚Íư…^῭-NA…\p.8€́»ï¾áh?QĐË•*Xª PªíÅß·~z£ªÙÖ_₫̣—_ùVYX ¶K/½ôR—lZŒ¸³h·¸Qùz|đÁzdYd± Ú|`9Ă÷á‡Ö8.ø(ë ^9X) dgm3¯Äzœu|™ôĂ‚œ[œ,‚e®ưY/‹ë“À\Í{ŒƯvÛ­g86zvôƯ…P̣ûUF€}*û~Ö÷{Zv~ÿûßsçÎ-ÔlæV%q@ùf÷Øc4/ÔY (Eœ#‹£°€}3uóW5bî?ôĐC«Ö¬Ê·YuÄ•ox‡è¸t`/¾!.øh‘'&Ø(!‘Î#6=h'O÷?0 4«¯¾ú( P4 `f<öØcj¥€6œhr4bîÁ!Ø/n5Đˆ&¸(&đât”@†´, 0©e‡»Œ§z*€Ô´/˜|YXåyYŒÑgKÇÆ•ßô— ¦‰ô— ®ôk«­¶̉ÍY¼á³<¤3i₫«¯¾ª¸°̀j`_ ç¼vr¶‚#›C[Pp |ꇑK?9G#“b0‘Op¹8ùbBƒ7˜;³¥Ín¸¡n)cPɘ7~²4&ø!ïÅ!‡¢V0æB¦qîj¤0F ßÚhhqÙÍqË,³LämècøFÍ ZÈ»îºk)½Á‹¹oƯu× âß¿”2ăB̀Ísv‚+ÛÆ)pi—pwÅü¾`Á‚0· S¨Ư:=ÿ!€U4ß k¾*>X‡–E¬ƯÑ Ç–à¿YQ~*“XÇJœŸpƠUWéz´ªÎ­Ï.ü0$üد°7Ämíñǯs ¸ÊĂ}U#b¿¹xñbU-@IDATMÆ>\bÈÂ>=ó%—\öÚk/ƯÓHđñÆLö²¶¿Í* ²vÇz½3û\ö΅mIÇ̃â[´|”‡"÷èă î‹Ùó½!–&(EĐG₫²ûó›”Ø«7J“&₫ø¤Œú©ë”̣Pb/bJ“æ Âê%-ư£ô羇ùEå—_^ï–/>ÂoB–rái€+¸ƒ)ë \•ñLÀë̉ÿïÿ₫¯̣!(Ÿ2á- ,W‹·£™sp¦¯ïÏEx ´ï¬YëC'Vđœà7Ñ/óơˆ¾añố³Ïª¢Ï̃ ü®8¯µ³.öîRm3xh(Qp÷‹¨ëzmó{@.̣2:9CÀí·ß®ÍäÑR²ø¨‹‡ đ‰4ĐyÎ̉„Ñ̃'ưÉÜsÏ= ¤óH,!™x̉ô–#Ơe"OƒÿÆí¾ă;ñ#™æûæ7¿™X`ṢÊB'¯ºD˜C„’4²ØÓ jÂ|Ñr„Ñ‘È&OƒDÆíàü«_ưj̣öÛo§eÖ \₫àƒ&2‘&¢“ÈbMË&Ư’,>§Q·0s̉àæñuËw̃yiÙ6[;â:ea°U6´)vÙ|ÂøØ;®¬ú1¸9ïŸ0À=€yü2䜋;¶DŒúnˆæe_đäÛ«Z@s fl"1=[‰ ¤cDÎ#đK@a<đ@Ëe“›¸´ "P²øßÖ÷ô+®(£ÈQeˆæ¸–_vđp‚L3Ÿ•dµeÉf6ãtṛ¸ÿ₫û5X°¸É»Ư•k¬ÑDñHßWÖÁ¯½öZiơ ă+a-À‘uv'ˆ9;t.®¯:QM©e £Ê—¨Öm„¹Øœ¹Ê*«$¢DØ° ˜OĺLÇ1cÆ$bAŸ›GĉÄØK„i›ˆ€"ụ̀—¿œb-,V&ZF6¸9ßƠoû[½—Ư›’DÂ₫”ëẤOÄ5^Z·0Óëâ’/-?[F¶> °¼¤eß- ¡i¹EO¬ ÚƠlưÔÁ³`œÍ¶—ßÂ\OÄ’&Ư3Äøñ ÄeYñŸqÚÊ¡?y$ yåk=ŸÄtKâgË₫Œ•á̓^‹…¯aËă4œå+_Q̃å¯àZ‘àæ"ØHØ‹’ơ×.»́¢uÅ×iüözÙzy¢”̣â₫‹°#דÍCy;́°C"A½— n.qm[·fọ́[„<‰xIIx¡8Pz6½ábí‚Ç–×̣ñü®¼̣JKêGG iĐ̀qr†X€ q’F‚L6x3A²Q`®Û"Èî#́`¢¶ßTd…LfLjqº́9e‰ÏP­+nw6˜¦¦Lmî=÷Üs£&=úÁ$byE3.ạ7Á‡]¯wdqƠ|°hc̣‹,̣X¬¥Xؾ, øz½vÚ=Ñ̉Q¥h%èBÔî#TÍó׸w×]w%,2²uö£àƒç,î ÑÑg/Lú~´²¸æ€ư—v©ṛäɉX>ơe%x£+Œ-¢™Ö̉&¦ÿéOªBU„¡lrœvKƯl1^ßpĂ í5"¯1$`2táÏ“v‹ËÁu·ûƒ'å¥Z»Eißm}"–¯m—ç &?ùÉO”±Ç¹— %"„–¬ßÊ"Ö²(/ñ]Á 3æeYå[90J%Đ¹®EÅ÷ÇÆ«¯Œ#Ø06Àô‚Á óÊçö2ơ2º…{Z¾7„â«¡È0gLÈ$XÛÅCƒ*œ‘†ü 'œ ·bÆ=ùßzë-½_éư‰·îĂ­.<4ÊÇ}øñ₫/ÎË=öÙÍR\F£6dëG™°‚ñ…ư;ă—­ ¦?ü».Vˆ Ï!Kđ, íûXđa÷jYΟ?_:k >tBđQ«]ñuæäøYUH²Új«¥ưÓfÏÉkïˆxÈHPÓ°6D_ƒïÅ̃ª'ø0\HWä}G(#±¯Hîä4€G!’¯ÔÉh̀́d²H}ücê' ~ơÑ©,æ‚ЬY³‚héu\R‰6§jroúôéjrÊ9„¯{̀e1M„dó¨®uä‹Ö20„pÉ„ -ề#¨;.|”tĐAi ’Œ ˆ%ÂỐ7²Q$n2è«lƠ”’¶,SH£k¯½VûG̀Ùà‚1ÊBCoă"ˆöuÈ(?ȸ¡ÂäQ¬FÔ”U£²@Èu‡%‹u¥`mÈñÁ{®¼öÆ}Æd˜ø²Đ"D@£î¼d#«ưÅ­‘ÅqÉXM\³uơÛo˜‹ CăÔ`::W\–đ| \dzvú¼ ¼Ó¼G˜I‹¦V넾ƒ_ë?øÁt\!®‡™/W¡#ææ wÂœªB“¼ }s.®pCÀÜZ–‹+Ùè©‹ `!ÎW§â☫+Ü”Ieºº¢ï¸Ü„pwåää!€Ö½rsemÂí q>Xß•àœ²)¿ư Ôơ­X+Z•¥q‰B sæFÖˬ­«N`c1?hÿ¢E‹Ô…km'G ‹p饗ªk$æeÜΙ+¡¼öă6öˆ#Ho±—;v¬î§q‰‡«öÁ.{Ø—}ôѺo₫Ñ~¤1Ả̀™ÜéáF â{%<ö¬đ(×æ÷L¶ÜŸ́ËCà1Đö}F¸xboœG"PF̃Ư®ÑN₫l/WNÑúÁ}*åAđà;°Ÿ§đJ êb\ú;ûlD°yäaI¬$ˆ̣á‡Ä÷œá‡à²)KÜ#Ö+̉ÜC‘‚_1{öl}ÆÄ‹÷Ăó‚p‡…Û-Ư×s9¥‰[üG{y¿pë &´u1¼$#ø-¸Q‡̃}÷Ư ü`® q#%–…+éD°`ÙF_yå•À» ‰€Jc‚⦠kpQjÓ{ÆcÍwƠx`́SD ¢¸̉đ ½Åsç=°u³¥÷£#Py¡œ¡F ¶œ(bñXû́³Oª]jy@#‰–OÍeQ0 W¤ßfư[} M'hhgÍeŸxâ‰Dü‹ë}™L´)âv“ j̀đĐA{„{²HƯCÙ}´Ae"×û2‰¨JÖâM9³t°|²I5á)›¶ÅVfé‘w|₫â6Ë"'A ƒ<±•E|{y–$X䘻¢ØÅÚhiÏúomµc£:ă¶X*ÑJ”EYê²E9‰ø§euTŶw»MXGIÜu×K;,dxÏú‘§pÉÁ{Œ¦QU7Dh¨ñíaYƒ¦¨“#Đ*æâ ë!¾×²ˆ9•wë8æÆNó«­ °È*“d£¨íß~ûíK)WàÁZÄÉÈC@‚øªûÔ2Ü«å•_ô–ÛX:1ÿI°á¢Ù ¥Ặ‹ơ>Záâ?½PVQÏ)§œ¢ßn!Å_}+Åt=ó¹[~tv¯°$˜“Ù_‹°?ÁË‚0ê–Œ;LQ”̉ï”ù1ï²pľS·É~ûí§éX³°ç7ËR³ø`üÅBMĂú×NYbïmuƠ³ø öæ1aQ†{ḳ×Ëkå7:̉îØ¥`ܶfêÇ-·Ơ»²¶Ç¸`ÍÁ$kñ‘m ÖxÊ \ʧ–"V&ûs÷´̣Ê+'"hÖ[đp̀ƒG^>aɯ‚²ÍE×Ékî¬b‹†́½²\]Q?.ÖqµØ`…i˜Âkb?»páÂôû\ÜKÅ÷2Îgq^ÊËRÜwÜ¢Çkçø^Œ Pà‰åƠgåc=xꩧj=fp_ùÊœvOƒc#‰Fê³L £=묳4@*7ḍP©;’w4 ̣™mj5¡åטm³D°ûXz G#ÁIºåG¥7®́y±n¡£Zˆ[Ÿ€ƒZ„ƠVáh O›6-7V¢„§Î±°eCDh=öXµjˆ3r]˜¼z «ÓÔÓ°&ảˆđæÀ̃8&Æó$_oç<Ë+°²ÖÏX•=Äz뉅bÅèQ\*…ñăÇ+/>û´˜Xóˆ"LBz>üˆ==k³Âá4XGBŒíđC²„ÅÖ<aØkr1ë¹,Q'}+ƒ[áe‰>̉–lÛÁ÷Ị́À“¡¿đ đ$OÖÚ øN–/®^Ô±`Á:'Kà[Ä#Æ…öÀƒà;‰ĐeÿG‹•WC›¨Ă,4“ÿs "0Ú–«`FOæ8ÿ&Q˜ç˜W²p‰‰…Æm·ƯDkK/c.Éd3Ÿ˜ˆ¶BœMÏY`–X‹XDåå ‡Àî›0 ÍoÈb—O˜€fƯ\QÏÁ·A=p³³ÖZk©›»¼vó¾3̃  `̀Á5Œ\‰76­yÙkàJ—==s³X=r¿×Áx#Vñ%=‡§ qHF]/°boÜ*Áđ‡¹-Á̃Sͼ²pÉgÂ…ø~«ơĂ“ÿ<‚ÁÄWâFäC¹/K¬[à… ă~üæö|Ïœ=`’#sÏ7Ḱ«Œ÷Â~‹u‘X;f“•öQ,´±‚Qø™9s¦ưq¤}ôơª«®R7]¸3̀Øëâ6PúĂ}×¹ç;â6X Œ7nœbùÔSO©—’Æ;ÉkăˆB2?à—1G@( 2çÑxAF|\â²ää=/ËăGG ‹€ >²ˆøoG øEḍ„Xđ0yÆ |48R¬=‰ộÊ"h­°H`̣â7“;₫ñ ásD3ÄÆÅÚÙÊf̣̀3ÏTMÚRµ"œ`‰†?‹ÔA"ü‹"¸Â²ƒws‚X|ˆY³.ÜY<8D€o÷àÉ'ŸTÆ=hØ;>2uơ]|ñÅÅ(ß&Zce3TÛA€E-8³€G`ÛÊøÑNưwpÀ1₫†ÙÔ2§”ùÛfk@4ß:E&øÈjÜ•QŸ >ʲø`î˜8q¢2sĐtÁGOipÊ€ISu]™–W­ ÄÜu4LÚ…ƠszYļ“ ËJâUÁíÄzÆ‚V°PF¡,LϪxX̀~Tưiyû²°® Î1vøæˆ÷qï½÷6Û˜'±Æ`~äæ,̀fbo?"₫Œx~㱸‚1±>¶8ñơøœ±­Ñ8@Ưí̀ÿđ$ÄQË̀åfêgœÆ‚Ă2×s̀I< ›Xß! `ïgñ*àƒÀi–lĂó°5W³eM#Ï£¢}x h#B¸ Àh†x¦üÅ][®…K3eYZÍ …çCœ‹biü蔀sÀÊ@ÑË*˜4̀ºƒ3ÙÄg@`~ɦkÑ’Èû#&œLF,€ô;ALäÔÁ"¤üh`Z˜›«Ø%V'ÚW&fû± (/M§¯án‡…P,ô`Ñ‚'ÁçĐLëÇ€ÖhçLAZD,r°̀ñæµß&´tfI:4¼Yä_}ơƠúTÉB¢vëGßa<©j@sZ‹û-„q0zq›ÇØää4‹@‹+Æ»2+Fs-ÑIkÚj‚¾…²É6áí0>²m2wWŒ—N@ŒÖ̀0EÓ{-ø ]0uĐL…‰Ø wWS¦LÑ5kks•ăQÖ9 À~ tn}…ôĂ,?Ø89UG¢Ù'¿ụ̈˪oJ́aóØc¡xQKPÁºWƠ¸ïÁÚ2Á×qClVX꣸FÙ̀Û́C¨»ÖÚ†ô&Æôn|Ö^ æ$Y¬‰¨Gb *„ưŸƯ†u«ợđ́çĂøȾ³ÅéCqiƠÅu‚K–Ơ΅…bÉ$±;F=èkX‚“£x—uAÖ῭́}Ê[¥ÿŒëđרĂ÷Yäüw#œăĐ!¿ïd@ÜÜUÁ$Gˆƒ1æ­X… Ưœ÷‡d3Ǹ2'“_–?´!Ø04³9á„t§|´ÓĐ^1Á LZÖ˜®ÖZlI@¯´ &â~›|Àïˆ#P,ÁÀMbbàÊ6µÜïBsói h­ p6üh'a}”çʬúÔé6€G‹ë₫ûï×w“v{Í.;ƯÎfÊÇ̀áæà,Bi„5Sviq÷Çf ֲܕÑ./£€!Đ)W  3u~ĂÔ3$\i@ư`ñA;7ƯtSꄵ“#`àR Â- B‡^ ܼÀDÄ GÙÄÚ«EÖ¸Ǽ±Çg=â0̀ĐVf ̃/äÂ~yR̃Î,́mÙK±7`_ÀúđĂ×=8ûh\$#”œ7oÆ®Ëæ³·˜&Ø€©»!‹Á!œum#¡ú¢*¤Ïyc—OÙûưöĂäÉ“6›ñ^ØÇ®eDđ?b}øᇕ?Ăoø ”\jñChÄ~&cCod₫1?Ûzûí·ëº1' û9ÎÄBîÅ »fG”\yŸ ̉7ˆµt­¹‘~™gM,ÿ°èD©̉eSnÂÏ>ûl]3cMÓ*ÁWc~ËăÙ5økơâî´Z·ç|\đ1øÏØ{X"h à'Ñ4;`4ĂÁơ“1Kc„qơ¿ÿưï5¨4ÏÏ₫ó4†„¥A¨’·¡ạAP¢i¯½öR÷–§ÑqêÔ©é&³Zi6™Q–i…fËAË¥–¦(åØ=&ñ~|°xˆ‰OÖ‡*B¼Åfœ¯*çÙæX0xóúO‡g‹`Àñhcñ­TMPP¿#ïV9 9-Åư‚Wø•µ1sd/ü—#P\\1Ï2–íâ s#~Ó³$¾ 1̣xy°ô3‚WdÂ6»ÆñîŒOd÷bxᑼˆ÷ˆ4YAïà³ÄºÛÜ’7«ä‹`á1qQŒKlCàkØûoå°†å™ÁÇB.ûnX:?:ơpÁG=tü̃Đ!€†ç;́ Úh\đ·ơÖ[kœ ü2 !7³U®±!1?Ư,Fp9ƒ…Ä$‚”+& „$ø)dcQA`D&cˆ6 MÂD‹“<6ÙhƠ[¡À?´"l¢³ähÍÖ+‡MZÙÔÍ„ĂBEí1& f±†öÚä ‰Í&rƠÈp·vñ¼Đ2`¢ÅơÈZk­¥›X3£Åº…~Xß,_/øE{…w‡…øˆ¡e1sæ̀¾fàwS6-h±hă;ÅrË¡Ư¨¿uÄÍùNY„W‰ø¶³pÆÍU-i•Ú́m©ŒĂ‡z¨Î‹̀MÄh*Û]ÚE]¤®g Y*¸j€º̀&°l2Áå…fu˜fÇù(ÍÁ)£j‚¾©µ×^[×m¬§³ Ee ÏZ75̀ktwE[aĐY sL¬ÅmZF_ºQ† ?º²×Ñ `ŒciµÍ6Û(S½:ó*AË!ÎÙk£@đh¾QÆöÿÄñÀ](<¢x•%Üç¡ÉθB>̀^xÄ˦ñăÇg³—₫Î 6Ø@jT»Ö.0B´;ÁÔ?ÿüóµô×W÷Üs*‰ÂO'c `„U3$k%~H=âđL'Nœ¨¼”Gñª`±,˜k`̃£P ¡Ôj¼ XU $á:Äï¼óÎÓsʆ7´Î:ë¨).Q9₫øă5̃¤ p£E;óÖ̀ ¼đ¯đyä‘sƒàkàú¢ƯXB¬Cwß}wtÀă@€F²Ä>Ù,~ÉÇ7€€>Àï!8¼¹m#/í ?ÖïZ¸đ,á™ơ¼ ̃oʦMđ;p17gÎm¼6xnN@ÓÈ åä 5·ß~{2nÜ8¢w₫»ă;YĐŒÂM7‰øÖoXøHL„8"¿Xƒ$²°ª›WÜñ$b-¢ùâv‹‰c"‹¬åÅ?d²Ơ®ÿÇ̃yÉQ]ư₫¾ªG… À &ƒ T$& ‰ú"$ƒÈ>@d„E"‘MB"#P69 ŒÈ&0&¹ÀØ.û¹ßưû w{{fwvgºo÷œSµ;3nøß'Ÿ*$"‡×Û¶å™Ä{‘të×—zÄ[窟̀Å¿ÈkX†c ûl÷wÏ<Ë:y£Yâ½7’‰'&énw·•hß̣ÏèÊơà™¶ÄñJ?// Ôî[î-ÏpG7'/$$̃ă(ñ zâ™ØnÏ¿èl8 ñ3yđ₫J¿Cû;`ïE-Ï/X&YïÇ₫¶Ÿ>ßW¤?]˜̃Ơ’ß¼wơƯÅ»¹Uä•!µv½¦UÍZ;%GÀçæ–ëÂGG3ïĐ’x¥¼{¼2¥åă‚ơùæẽ>J,ñʦ–÷6È3Ï+˜¯€’yyæ™áî̉|÷²Ä+ûd]x̃ríxoî̉ŒßÚ™pÿysâ•ĐÂËúˆ¯Ä{¨'̃ØQ{'ê;·̃'r>̣§²›7ÈùȪ̃s?ñráu굑̃LăŸ´ÉÄ ¤=ømƘ&xï¸ ÇÔ;7ƯGO¿;¼=ÔŸ₫ÑCøÚ ñô ̣Ä"¤¯4~ÈüHǦóAgịiH¯Œo8mĂ×̀¨éfh‡1ñÔư|úº‰ä©uăSg%ăÆërLx|økQHè"|}¯Î÷¥ä”SN OO|¤Ia?ơ¾{ƒW»ëưU½ă²¶s z–ôƯÚ÷Q&=¶Íz¡k32ú‚@ë]̀üUod” ,ÍYôô(¸„·iª(xåiê_bnúôéµÈt«®ºªxnൕ½è¢‹Ä2WH°²F¿÷̃{×Â1ñ>ÉCú\~3?¼PÔ œ‚T„=6"xÉ:<̉…ƯÉS'C8.ớÆ«BĂ=ñi4ö…X‘W’PÍôö¡C‡ÖR†ÉÎÿ₫ĂĂCû%ŒÏˆºxC„^±ÿ=Å̃‹xx¨û˜K8Î ëùíúäÚ#:ë€Tdä[đÁ­€y/çÂă…ˆ%®ï_ùh™ù曯—gÇ{X́ÍANÓ\1B̉ûåyßÄ»r6²̃"ĐîWŒCÓFl¹å–5¯¶̃¯/Çiª«vÔ÷`<¼ë4’Í œ}bæ9̃¹Ãó́TïË̀mcG![ÄàĂgry…M[ê|À[㉋wjQ¼7Ë\è\o‹üP$́³LpÿQדŒ¼[IäÊ’2 ·!·n¿ưö’U ,¤Í½€| ñÔP¼Hđ$Á mư%_=ñ†±¦kFºÍ0â¬ó¾€Z‚W§g4Ä› /ƒsŸö*3*¦§só̃Ï8u~xÅ2ßØOT€O‹Ôră°Ÿ¾ûÂƠ‰gÏäÉú‚çmo®©Úî„ưx©h4’ÉNˆ’¨áµåL¹&ˆỆ\*z<3|ƯÄ3͉/YçBјYÿ?"@t OY#×Oq•ø4?îlÑ7ŸâPÚ÷ŒtÂû1ÂCœ₫{́±¶u‡&}à]ƯJ?~¼´Ë³ÔÈ€çăùεæsÏGüÛî»ï.̃Ó>{[ÆÅûÍ×U“ùă ̃ ~½§úÔ·‰w|¯sỴ̈¯§Ă£Ưo‘Ñ. ¬dX *yŒ÷øDuáµNÄ|½ÅdêÔ©‰wN“HˆfysdQ"ºx¦̉‡Oo%ü½¶Ă½ƒ×>ûñè÷E¶Œ¸œ»À=Dá¦åó¾̀ʧ=¬Eè„Q*é¶Âˆ¢ 2}Ơ‡>Ä×cíå!¤₫!Ÿ3̃C̃ ́C&ơi­d½CIâk¬6̀äF|µ„kNÛÑñ¡‡âlDœƒ.}ưƒsoô<̀ ¾Ư:®tö°"+z¤ôzÂ%S½öÍÉöơ w‘!`T^:¼¸aøóy™3 ͦ£ÊlĐ6ö˜˜_B]Y;e# 5Œ”QăúG1ăsÑv 7î] q…ä½ï)“ €Ä8#ùÚ‰/)F†@3´;ÅcñQṭ|ơ¹ƒ›ZŸ%]†¾ÄÛẼ;Rú¹í¶ÛZÚÊÆï#æº µ-íÈ+(¦ôzn…rªU“Fă=WEA¹ñÆ·ªÙní `±ˆt3gÎ́¶¿Ơx÷ó^sú,³̉%—¥½jơbíµº>j\îAä2̉µ¸¿Ÿyæ™Äg¨=W‘ĂY8EúÈuÙOÚeäw£S]!Ö£´á#­¼¯w^^ÛCÇLZÍăå5ëÇÈKuå¹F#C ªx«ºLÍ+Îkɯ¹æG1£ø°æư_#ï}ê¼Ç§ó Ÿơµtưo½Øb/h®èh+Bª«ZLçeŸíG W¤ôB£L&LAÑÎÙi+RL´ó}¬©[]ؙԟ¤˜;¯ i'TÖv Đ4W¤OÉJqQÔHŸAs¯´r>w~Û†Á¼IO“Gº+&A•²:×Åà9BÁhï/éx)ä ¯à£Zôû4¢C€´=>̀í°ĂÎ!$u²hÉ8‘ƯiSST’’‰w8i¦}$‰₫­/®MÚˆ{(«%©P#`Jcô!|ú#CÀè̀đÑ9km3í0`’È!INÆO<±Æ@!,i­ƒ¤TÓEHG$×)kx̣É'K>Wrh"̀ơŒ€/çÆë|è®äZ¥. ù±Á³́ä½Ä%«O1â?üpÉ{ăuá½Ư£>ê¼›=z´ÔÉ);ö6₫|@è?́°Ăœns>Å•ó)]ºäHnƠ(.»́2çÓg‰ LíŸtêB£V=̣!礿“Ư>c·óëgÛ[̃n(ü´€9…̃đ02ê>_ª("^ưu·È"‹ˆgÔàÁƒ+c4 ă¥GXŒäÓqˆ§Ç°aĂz,"ălLÅ ṕ±Ç—6…?Ï;Ｖ́ñ×ûï¿n÷QÙ \ZHæQg#«á'ƒxCs¯S„¶D†@"¸|ÊI7mÚ´vtÓ¥MæV…Bç:)3~(öY&_|qQ¦ơÅ{}¿ưö“ˆŒ₫ÎÁ§a’âéévÑqÔ€à«1¼l°ÁéẮ÷@‚>$$ô ơ Ăëq¼/>ùäưƯ'óbŒŸ8Á†@c₫oăƯ¶×0Ê‚!x†ăÙ°ƯvÛ‰đ×ÈÛƯç o5˜¾›¢½¸Ơ_guœ/ºîPúÍ1ÇÅ ¤„=ăÙI¤Ç‹/¾(©•ˆôXmµƠÄ㧄Óé6d_́ÍƯ~ûíâ]Ê=đ+i«]wƯUzî‡*QYG}´Dm¶Ùfnë­·vn„ü?ùä“1[«*\}ù̀!Lq…’’k§]ÆßË/¿\&…Â"¯ÙÔ ÔnĂG»R]1ö5×\S±x₫æ7¿q<Œ:2>xµ+âƒUÇxJ¾ÿ³Î:KŒ³gÏvD™¶›¸Çñú5j”Ă@€âµ̀)\̀øÑî+ÆÚo5ÜûÜs§Ÿ~º?~¼£–à+®èöÚk¯~wEÛÇ—¿~7Ö¡ à@xĐA55{ Èà1Ëá8§®½öÚMÍË6:KuƠÉ«os7 C B P$̀|æ̀™âNá:¼’ªBaAó3Î8£-éZ…ƠôéÓÅĂT0ç(4Œ S\‘·¾]5©đ¢ÔÂÜy5gîD{` $úRëô„I_÷«á£ƠÅÍ̃æ–+S­ób7|hóv>P”á‰MÚ™¼œsáỔ£ Í8FhM€²^e¡ñƒç¿F~XÁó²®hơÇMÁ{î)ÆhŸt̉IĂÈ0 C ̀đÇ:Ø( CÀ0úùN)̣}çwJ ¨K.¹ÄmµƠV•  £¨Å£,¶đëp §N*kAÊ Kƒ"cßë!NqEëFéëµÓ›í^x¡6tèP)NÚ›sZqŒÖ÷ÀœÂÄí$5|´#ƠăVÇ8oç*ÆƯ6JvjjAKEVÜœ1ñÄđ@¤ÈÛE8YPäĂï?ÍÁ̃®₫´]Œ§œrJ% ëœ̀ø¡HØgY ²€ûz?<qÄúè£Ê2|§!`•FÀ •^^›œ!`À„ $­gŸ}¶ÛyçÛæ)^¢aAsŒ<1P0QcÅùt«uSÔúW½ßµ~´ylcµñ†€!ĐI˜á£“VÛæj†@ÀĐqÙe—¹ï¿ÿ^ î³Ï>=®+ e*h¶Z|üÅ™R¶k¡ªăÍ+Åø‘B Ï綾^Zră物>Ú]߃9µÛđ1dÈ7ß|ó‰7=):MsµÀ Dû̃% ÍrË-'×)ÎÛItÛn»m®é®˜:'}† W̉Æç{Nj›™ñ£ «[½9Àër’jC(¼û‘GY3WoÆ6#CÀ0Ê€>ʱN6JCÀ0 ®½öZ‰đÀÛøàƒC•}‡—rS™ +À¤#ƯyÇ-ÚCQ±Ïzä™â¨°ë¯¿^†rÈ!‡än”ËÓđ1ï¼óÊ<Û•ê %ÏÈ‘#¥*ujøˆ1ÚCWåùJ+­$ˆí6|đ¾#Ư†Ơ3f¸o¿ưV‡ÑöOx Ă3h¡ó¶wCfüÈdë¢è1Ç’îj̉¤IRwgÊ”)NSk¶¬kÈ0 C )̀đÑ\v°!`†@,L›6ÍwÜqB‚(&Nœ(̃DZŒ¯Uă l₫¥—^rS±4gÎ/¿ü²{óÍ7ÅĂ ÏW3|´êJ¨f;y¦¸Áë®»N<¢ç™g)D'ª(A©ƠåñÑÎ4TVç#Ï+(¾¾Êføhgª+V‡băäø_tÑE% >%/J:'ê£́…Î;3~(öY¨ß5f̀G*M̃¿gu–{øá‡Ë0t£!`•DÀ •\V›”!`ƠFà‘Gq‡v˜ûóŸÿ́6ß|sw₫ùç;RmTP’"0ưưï—âí±4ÿ;î¸C¼]×[o=I%Ô®âÔU[ëNO)®Àø+®¨÷ØcZ*¨¼°§î D1b ··›4ú(­ĂĐê>7ÜpCịư÷ßwÔN1ê,Ê`øĐçÔœj·áƒƠŸsÎ9Ư®»î{º+úæÙṛÉ'Ë's%­_UÈŒUYÉΘ—đ7›l²‰È*D¥S÷ĂÈ0 C ̀đ‘?æÖ£!`†@? Ç3u<>û́3·Á¸É“'»Aƒơ£ÅxO-SAsPü÷¿ÿíî¾ûnKsï%ƠẸ̀LqÅÄxàGª¡‡zhîXh«UW]5—[jøÀèÑ®”;+¬°‚[f™eKRûue0|hª+îƒÏ?ÿ\<°Û¹JD9=ZRkÍ5ËÍ=»ƯuiGƒŸứg ‹ĂÄE]ä>úè£.Ç”ù‡?ʼz7ö\Đ]zé¥Rcèƒ>(Óv½‹;]›±!`½GÀ ½ÇÊ4 CÀ(”–»ï¾»̣(ÉƠ¿Øb‹<ªöt_¶‚æ đä“OÊÚ œØzë­%=W{бVË@̃)®ÀKólo¹å–¢̀C5|ä‘湩áƒïíªóAÛ–î :“Ê`øÀĐI„‘D}¼öÚkm],úĂ HÊ+j]Ưzë­mí/Ư8…Î8à)²üå—_V¦Đ¹ÎÓŒ„}Ɔȥ—^ÚQpî¹çvB‰üà9dd†€!føÈkëÉ0 C à-5v́X÷î»ïºe—]ÖƯ|óÍâi\ÅTJe,hÎ̉j«#FHNצ—° w+RLa‘w»ÊÛđ1`À€Ú4ÛiøøŸÿùéçQç @ư"( ˜‹›3>jd 2D¢Û]àœ₫´È9†©S§æ®è¬j¡s°…̀øñ́üP{gÍ5×”È₫óŸî̃{ïu§Ÿ~zü·†€!P!̀đQ¡Å´©†€!PUP®PÀüơ×_w‹,²ˆxP<8—t1E`Z¶‚æ`„‚ç₫ûï—ú;́°ƒ5/âÂ)IŸy§¸–óÎ;Oê\¬²Ê*nøđá… ơÖ[oI¿Œ!BÙ‹—)ÔNĂ)¡?₫ñm÷¦—́_|øᇵÚ1±>P”¯´̉Jb€È£Î†"ˈ¾øä“OjF×¼®Ê…ÎC3~(ö;D›MúÚï¾ûÎ]rÉ%nÚ´i±ÛÆg†@e0ĂGe–̉&b†@5 .‘o¾ù$̉cµƠV¿*θŒÍY‡™3gJG«9̉̉\UñâlÁœHqÅ3DÓÍíA¤0ÚæEîê/ùKÛºÄMêAH£jÚÖ™5 æj¨Ø¢\j y>è~àÀnÛm·-$Ưư§ kª?öU…̀øQ••¬₫<æ™gwÈ!‡8ƒHAwÔQG¹W^y¥ú·†€!føˆ`l†€!`ÙüđĂnܸq’üÜ7̃x£[wƯũŒU¥O<Ñaü 'ùá‡.£e˜«¦¹Új«­Ä@U†1ÛóGà¸ăsï¼óûÉO~â.¸àQε{—_~¹ûë_ÿêZh!‰kwYík+Œƒ Ê:¤-ÛÔđ¡F—¶tâƠtWføhÂñµ«†Ø£=@º+¯¼²D|ö.̉tW¤·™1c†Ë»¨1©&ĂBç>ªTè\×ĐŒ„}ÆÆĐsÏ=×á¼ơñÇ»½÷̃Û}ñűÛÆg†@騮æ¨ôKc0âF€Đ}êÔ#̉̃̀5×\ná…n¨¤₫₫ûïƯ7ß|ă₫ö·¿¹%–XB”ÛơÚ,ëvÅjÁtaÎơ¾Î§0®¡ưöÛO" ௹æ·ñÆW:…̉3Ï<ă¦L™"é¢Î<óL7ÿüó÷ơ2ÉơưôS¹7VXa…vwií†@#üĂÑÈ0 ¦đ¤Ä{£'₫Ù̉«?ïá›x&,³É“''̃óWÚùÍo~“xæ9ó¸Ø7‚‰g0» 3ÄÊ+ ïm×í˜f7ô„Y½±4ÛO‘Ç3‡<0ñÆ³Ä ÉUW]•øè"‡Ôö¾¹ö×[o½Ä3đÉf›m–xWÛûlU¾Đ|âÓj$̃P“ø₫V5kíT̃̃ă:ñJ‘Äç¾O|F.³»å–[äư⽯“Ï>û,—>³:Ù~ûíeăÇÏÚƯ¶m#FŒ~½—iÛú a¯d‘g|Đkk_Öx́¼óÎrmyä‘q ¨‡Qđ ̣Yá+|=ªnÍnïÔ“s̀1ÂÇøÚB­i´ÉVà-î¹çY+ï|“x'…&[(Ïá^Ù˜<đÀ ó„—‚§2¤ëç fríôFæCCF1jŒ̣̀w̃™x%|âëp%đ­Â™çr7ëå®É{ï½×x0ïÍ’gĂùơæzăùO<¼óI.3F̃÷Î6̉ïFm”0—VQ.­jÛÚ1ª€¹cù§ ‘!`4‡@³̃~ÿûßç‚")Xàm×_ưÂœ3ÑN(t® jÆE¢µŸ\Ë+®¸¢¤‰S™‡6wƯuW…̣‡~(×}£”È­]¹Ză}útñ"%oñ/~ñ‹–D5•w%mäi2;́0çS;8ŸâÊ‘/¾<ˆb¾ĐĐ¡CE GŸY}íÏĂ¼ó<ëó3aŸ:ï~óöͺª³ơưüóÏeBeQ¬¡D#âç qy>g€]vÙE D"Đ̃ij§ +®füP$Z÷ ¦Üëü©¼·Ürˉ ¸Í6ÛˆóÛ¥—^ZëY™Ï¨>>U“;å”S$ZRDưÅ#çn»íæ^zé%wûí·÷Xÿ¢₫èl!`ƠAÀ›Wg-m&†@!ôÅ€¢‹BcÇÏp RäqàÀµñz!¡xº¤ Ï"H8‡bmx̀j±B ëEàå:sæL<}O‡rvµƠVk~J¼„}NPQT1^ Tbp€¡T¢m₫”Y <óG3‚f#b̃(đÜ ]¾£0zóÍ7%̣Ùk¬‘9Ö4fưK£qæµoÚ´it8„p“Úêä“O–ôayơ_T?\kZĐ£OY +^æ …6ײ‘!"PT+ J̃}÷Ư2”"£=€¦¹ÂĂ3ïy>ÖZk-y_QxăüÈ‘#ĂKÁ¾W<º5‚Eh₫’ˆx<›Ăæa„Åđ/Lj·É&›äïç8@̉ˆV¹Đ¹?¬à¹¢̉÷ϼåy·½€,·÷̃{;_ÇË!óùúR™¼!2éß0Bâ@Ç{ƒÈ(•ïê”óüq÷đĂË!ÈO¤7#ƠbZ†DV"â’1q¯û:_r2ăN;í$cäR5fÏ d;a₫zcå7÷ŸÂ…Ä=.—ơœđÓ+ÂÏD„§Èw>.´ĐBµ~Âsø®côLG ƒô1^ÑT+b^«p;c¹øâ‹k8¤ÛÓ>u°ì¼Đ«±èù1~z&ñ?‚»g₫ïIă0[>& 9`pßy¡MÖâÜF†€"àSI‘Yi>u⺫íŸGu”\—K/½tá×¥÷z•±xå[Ûçæàï ÷é]mùÍó›₫̣.ẫ–ÉX£uđ%²Î^IY÷˜wxÅcâhÂ;¾ú꫹ Ñ+¸Á{åk²ûî»çÖoº#xN)t®s÷J@+x®`ôáÓ+På^÷JÙÄ+©{láøƒÏ{€çƒwér2‹7ˆÔá8ưóJÙÄ'3 ̉síj‘j=>üôÙ’û֗Û;IÁủ¥d5ÎGöđgµóô ü,Ïí9–kÉ+¸e›7¸$̃ ™øHÇÚ1z¬7ˆ$¼ï‘ơ xeƯ~2_mĂ=øàƒr Ï'¯8¯«ăIÖĂÙj’SO=UÚÊ*nî  2t8¾#q¯œ@IDATk#Wë>æ›æé‘ͲæËù̃(”\pÁéa&r¿ækºơ§ư‡ć 'ç×›âæá…×p¸½™µ 'øç?ÿ9Ùzë­»Íë~»í¶K|Ù—.nîS'¿úƠ¯º§˜ 0@tŒB ûÂOæ³Å[„CJ¼%YwƯu3gM¯÷¼¸‘!Љ`Ơ52 C )B¥}o ¡²¦É{-HŸávZ[¥Í6ÛL„Äđ%_ï{høhd”ÏÇAŸ0¸̃ó¥ ³Àü`,Âóg#cƒO¥ \Cơ° ·‡m×ûÎ/YoÇ"đB̀̀¾¬©"jˇ„ æ½z„$ïơÓMÈhy‡-nĐç$–ñ{O/FZܼ5Wb¼7(0¸¯Q øË‹´¶̉üiđ¶(ey&¡ Ír¼i¾Ơ¾Á³Ø×ăJPºú¨âÄ{<÷­¡…ñC<óÆá°QϨ!T7:+TL£PÆ M‰k/4@p?°j„PÈGçwY =ôÜ?zLÖy¡CǭLJŸđê£ç;ÎS¥~¨,Û«÷Ùy.ë ¡ÈºP8^íOÇ’ơYçp;FER;Ù5k,émŒ=4|Ô›Cx^Ë,#ײux³^!NáüZeøÇRï»®¥‚Ù –¡áĂg±H®»îº.óGôB]¶…Fz† $¾NŒ©®$œ×₫±Ç[;Ǿ‚@÷œ2₫Î02 C ƠxÅO-“¢x^lØÅư÷ß/!¸zÜÍ7ß,a± s“'OväE%…‡g|»µC$Í=ÍNÂO=³*á»^đtZs„teöŒ™´qà:ï½!ßIßCø+aḈ?í´Ójµ&¼GŒ„3ƒ mUz÷ƯwƯo¼Ñ§z%¤caÜ₫ä¼FµƯ×_]µơwø ­KØ~;¿ƒ¹h?úè#·êª«:ï‰̉¥@b;û.ºí24Ẃî¼óN¹.­¨¹"bŸ@Q)®èŸçÈW_}%)$(Z4iª«¼ ›3õ“P£Ôr@‹₫y‡i‰9çƠg‹†nÍ4€÷6–£Ë’æJ§FZ"ê|x%–¤Lơ >GúVR{E^9)©Dù$ÍÖB*j¼À!#|đẠ́›´Q>B@!1Çéû ÙËUå8₫y%s-u"ëGJ-R'ñaŸ¾w¡Hk–EÈJ¤ú! ăóÏ?/éç8”PȃÈ^!Ñöe—]&›×{́îù“í¤Bfă|äẺ{)!#"¿úÈSéYNÉ+̉e3f̀ĐMµOú¦Ø¹¦óªí¾ÔĂ98¤ËWđ¢½Ö74h¤çB®&<é„'ƒ+²µ’7\Hº+ǽYNk»€%ó!m3„Ll ‘ú‹ÔK\¬/©¶öÙgÙç# ²u³8ÉÉ-ø§óîÍZ̉]KoLpè ¸ÆI³ê uGơÎ;︋.ºHöƒăå—_.×éĂh÷¦›n’}è-¸~XŸaÆu»V¨]Çuâ£iäøW^yEjDjÇ>êCRŒ³Fàë#Ld¼±7"ÖR°êñöiTîĂªÏØæg¥@ÆX̃ÓAr±ÂäÁœ́·ß~‘俄ɉ:ơ@Ô˜á½Gº\Ö#>•œæÓn ĂG;ä^†Ñ€é£H3¹[!ú<á„ÄØÂoïm" .û½·E-7)Â4 y_È{K;Qh•UVq̃S·f¤aNbêQ+ÇR¯Vo÷̃MRûAˆ¢›Ë,³L ÏV÷[{e.h–0ÙÔ£©ö!Ư¹äJm m<Ù D¸á†Ä(æ#$·üÈ>¸ [$!YB|º¬Û$ 5Äiøཕ1Çùæ›O„ơFJ›<Æb}´3|4-<+ơî¨9@í»¢ˆgq':WœÍø¡Hó‰¢[‹SËî’K.q8|!cqMR0Ă€¾³‘Ëé}~úi4ÇROâÚk¯­Éh>ÊC~sçđ®C–  ·ß~Û óJd®úAnƒB ¿icmÑ'ï4 5!q 2 Jdd6ˆÚÔ­Pă5"'L˜ |2÷?ÇCÔ¡o ¢i dId`daÆÜ ̉öh ,ơ©_©ócœÈi^y¢̀ÇXa°¡Æ“Ö0A6Ç¥ xpC¶†xÖ![ÓN‡ÔSÂX€l !Gh¿½ÅIÛiÅg³kb >M™\_¬Æ \ßY„±CÄuHƯ%%Ö}ă7–û‚mè2èK¯ Ơ1paÄă™qư²&Ú®0‘:¥êèÉç!‡âÎ8ă 9ù[×K6Ø?C 0ĂG,²MÑ((‰đp€đâ¡e9L×9âi‚÷ „÷ q8ŒŒL5L…̀×W\QcÂt;̃Hxc đĂ4¦‰ó`̃úB¿üå/Å;9<—gj| ·÷æ{Æ̉›öû{ ḱóÈ“ˆ@‹Áơ·í2œ_ö‚æ`Œñf¯"¼´¸ŸŒ =‡v˜<+14ă}‰Ÿñ ’ŒëñĐCÍ«ÛºưPÈB˜_ª€"ĐªDb]̣ pGñù/yti}€@Y \Ÿđ”đ˜êùœ|(Eỷ7E…gÏW×Ưú·Dᆲ…t#ån'—xƒ?[<ä'œ"¸‘¡{̉„l†„,Çûă*l‘î¾ûîôiCÊ駟.ŸxÑÓGH(§}àp“{üñÇË6”Ñê0Á¢²¦L™"ûÈ0p̉I'É÷đ} 8°fôĐ}Üç>ƠcÍ€Ăv !…₫p;ßiPl£ &j₫ÏuÀ@yÎ;G³Ø|œ&]¶ƒ#²u_ÎƯd“MdÎ(ë‘­™£ÊÖ0€PÄ=$Œ(D‰ÀŸ!MpJۛߌGy¢đøfÖ’ñ*–è&0^„ÚÅH¦ÅâĂ~ø̀„>Á§Í®]cá1\‹%n¿³\£JG{́1ùɵ‡Ñ%½Fˆ¡@¼_úª³Đ~íÓ(]ß e¹Ơ0:aÆƠ¢ D6ÍÀđâ‡)đ8!µi³øÔ?_À\Â>aÄ eÎÂ(BŒa\`}.N éEys§rr ₫áơ“§b°CîW0đ»îº«{ñÅÅ‹ÊçÙ±Ơ¸ökm<O4_xYĂ#G”t iĂ^»oIÓÜ;Ÿs–æª%V¦‘"S\¢¦mÁè‚@Z4©K*¿´ ÇØô‰̉)/!WÓ ä2ª&e5|Àg`øà^@y…(/â₫_a…œ¯/QxÔsæÙàëˆw<êb¨4ăG^WüưÀ3ªñï¤zU™L?‘ƠøÓ4@Ü£¼·B‚WÓ ë¾yæ™ÇaÄ B…rø®Ơè´#Î묳4rŸ{@ß‘<4Í̃ơ¾€´vUûDF<è ƒj¿Ă/Œ‡(Ÿt\½%”ó>ˆjAI‘”È”Ư­ äXdë,â™ é§t?2µ*Ơ‰æ ơ3r´®Ÿ¬† ]cÎK0F¶†8wÿư÷—´×¤ÍopæÆ®™œĐ†Œ)£vÑ̀Z’¦K Q¬s–vqÛ{ï½µ‹Ú'†1 μX_œcHÏ:~üx1Løzlb ¬Đ‹/5"cÏu"nĂ5̣5ä˜Đ`¢×{/º°C ̉#Đ=¾®ôS² †@Œ„5*`¬Ô $k¬¤>“‚ªw,̀hz925Ä&`ôèÑY]dn»í¶Û„éà໸Wq^ ^×1Ç#éỏ ⼰ɳŸĐøAÖü@‹g´QßÀ!FkY £!/ñ₫Q§4Z¦æ5VzCȃatV³ rúÎRvÓ7k ơÈy<PóLÓ4WđéJ›åÓ¹¾Âëˆû¾ẫ$êŸÚ»ï¾»(°‰h #O²p®×ÂA¬I½ù°OÓqi[à‚l ñ́çá¯7¤"(ù‰ø€¸ˆ¦ #j…HcƯn"-—/&ßT7éµÄơøăK¬+×G3ÄơH jhjªfÎÏ:–̀D}@đyÔ ÑZ!YÇÛ6C °ˆN\u›³!P(̉áÓÈp€'…Fc¬±Æ" f ˆFDÈ3Ll½?̣²ª3B—Ô‰'fæ &§ïFăë¤}0éxû̀œ9Sọ‹’Ë´Y ̀˜U¡ 9øk+”&x¦¥ e^#{ß@±@j)Œ›E¤¸bÔ( x'đ\>|xß&̉â³Ôđ¡9À[Ü|Í…ïÚzÊŸị<5$©JŒª…¹Ä•÷‚·*©² >“´xy}oµƠVÂw¢ ḳ‡ö…ôä“OEh§:×¹‡ÆpPăQF}GY™âư£‘a‹x'Ö“Í0NR‹Ç(d4ÛhÅw̉X !{1ªÑl#…–¦Ăâw„q–gu0xw“¾húôéµ!ôg=˜gF)Đ.²uñ\g₫£L½uc;ï2¨jñŃ‘+éhúÁÈDDKo ĐŒQ#=0f4¢đxÆ1Ôèüô¾°O¾«!}\½ßù̀\ϡу5á~8üđĂƯäÉ“¥M½ó{³öX‹zDCS+Gר7mÚ1†@Ù0ĂGÙWĐÆo”¼EîÔÛgĈ •°¶á´ÊधJ±;m3½ß1¤cÀƒ§̃ŒGºyOñÂĂk‚¾‰AA£!¬̉.ó2ê0Ư5„iÇó†欓΅ÍY+ X„µ³–檓®̃Æs-:ÅÏk rP,ÑŒEóøñzo‚Q^¤^•E+vóo'ơÿáÑLª² osxî†äy̓ºÛl³Mé®PÜ¡ăù×0_¢9;…̀øÑú•F!¯Ï}”̉È|!!Ká4ƒüUO6Ă¸Ê»e0÷iOÎfÈx¼Mư₫ûï‡Ư5üÎXH?©ÁE<©‚ dM‡%‚¡<Ø,_‘ơ>B¹\/Â"}^ú7†#Ro¿ưöR‹‡tH¯¼̣ÖÎa[(ç‘­!äZdë,B¦ÖḄYûq&$ƠS½uc;ø§08üüç?—â鬓.—ç0^¼W4*$«oƯ–ï†BăîO’ÚI#TB#Hx\3kÉ`܈€Ñ:na{|GVRc“î#R’TJ@ˆ¦wî‡óÏ?_¢è‘­úJ ¹ö­Ñ?Vܼ¯ÛyeEÀ e]9·!P"g₫ôÓOeÄ0 xØ4̣2€‚9î¹ç.¼d£ÿ³Ạ̀5$̉î¨ NôF=ĂÈN;í$̃„ăƯ…BhÈ!26R¨QKóm¢¬ǵFÍ#0aÂIĂzœ}öÙü®}ï=3‚æçœsx’Å1²æFÓ€Éú¡ÜTƒ`s­ØÑUB èW`I>l„i¼DI%‘êI£,V\qÅB†Äư©ÆKÑtWO>ùdƯY9" †¼IËH¡á#ïˆđ"êƒgü+ ´r,oLQvb¡sÅÙŒDÿ?‘ơ4…r©I·Ƽ›!®{ä7•óÂ^Ù‡RY ™,}Ă₫·ß~;†ç¼:Z {Mƒö§ß9–è†×^{M7Ég¨DÇñ¥ZNn„eÖ>̉Eá¡O”C‡­Í7s—Áü÷ÏÍn€ÄTúăä°]Ïđ'A“6ëm—ÿưçĂ_Î;ï“xRöÔ짱„mçơƯ3êµu<đÀÏxåƠuTưxĂOâCæ/Œ%/¿ü²\7Q °—ƒñ]⽓äôÚưÚËÓí° "À}ị́÷JDyæå=Í;î¸#ñ|2›±Ï/÷7v:¤ÁƒË8|1Ñ\ÇáÓ”H¿¼wªƒü|É‘GYÊIÁyå̀Á{{'|đAîóđ ®äè£N¼+ñơˆrï?«CŸê'ñ)u¯N¼Gpâ•™Y‡Uz²ÂÖÅOŸ¶)áư¯ç!7"?BzNº-m3üôÆÜZÚ²]¸>)9†û„y.¸à‚É}÷Ư'÷ ụ̈£¶á ̣¢²j¸ÏGD$ʳèxÙŸ…ó¶ÛnÛEå¸,œáÓ‘™Ùï ‰7:H÷ÈÈ’Ú?²÷u×]'ăóªnkÈüYÙUåQÎç»Û;&>½h­]úô…r^8'«¶é•₫ 2¢Ç×̃ơäÄF8±ßäm=—OÖÁG²$¾–b/êÓF >zŒ7ɵÂùPÖ2¥¶Í»…kÉ;àt›7 –>e[¬|ZªÄNäú÷‘+ɸqăºœç£|o¤ªéÂûǧ.“µă|ˆëRå3æ¬m3&oŒể¶7’ˆ®BN´†@‡ €uÔÈ0 ¦•öÊPôô™eô ÓzJ|öù4:‰÷–éÂÔë'4|ÀĂ@Ơ;V·Ă¨…xW'Ư_ï3}^høà˜;ŒPˆUhøáv9é¿ÿ`Va i³7†Nk4–°í<¾{/ÆJjHÊ£ï˜úđ?5áØcMPx”•n¹å–Ä{‰’»S׳¬k×q{?ĐyF]ươ"Œ¶£ŸÚÜtÓMEÈs&&̣«̣ü.ZAŒË]uƠU¹Âă uJ¿>:,×~­³ö"€B…ëɧÿloGmlÅÎ,(}ͪ6ö”Ư4<à /¼ 8b| •£Ùg´+ü*Ê70ÁQĂ{ ·¿Ó{0ăG×E •×Ü÷=ư©‚»k+ÿù…̀*Éëµ…,̃̉†‘¬ó0DøZZµnUỹĂGZ‘]o¡²<¼•¦» SäÈÄrøè#±$E éOn½ơÖzmÜ|)…νƒFG:Wt¸6¼1Ư‘ÖyÂ{RK=MQ£ÇÙç Ÿp?Qœ™4?'œpÂ;ƒo¤•:ó̀33Ó\q2²ézBùö)Ú̀;UßgA³RG„aÚ)•³ø̀:'<ùśرµMÔ%9øàƒk¿³¾jÈ;ơƠjm„Çzè+®p_|q¸YdE-´Í=-l–Yf·úê«Ë=J -ê†Äơ«̣6í37%̉]Í5«[ak£È;²uM̉†<¯HYEAî,BV'mŸ7FÔv#'PKÙ¹!ë"“‡ç!S÷„“^K<;aHû¤U»ưöÛë ẢF5»–È夥̉ú0aăè?¨gÖ€C₫†ùZ4vÏ"̉¢‘ÔYa*+=–Úa›\zkH*eÖwƠUWƠSº|R7¼Æ×e»ư0:ÿƒ¥§&js4 r#à=3d¼ØùƒP¨?ú裢ˆE÷^ ²=üG₫L„ZK˜h˜r­ká±ú Åó(FNLA" 9j³ˆG)9Najè‡Ï¢¨è±?”Ú.>êÅùPua²ÈOÛ‰„@‚ÍuxÛm·IîbƠ2F,#î r×¢ÔTĂ\çccît«]Üó(̀xîí±ÇÎG"I~c®Kû7»₫ŸÍ;Ç{|Jîh M"°E>}»óÎ;%wù)§œ’Û0Èí̉w*Æ̣p•êè  †Ï@ _TF‚_#W½‚…§÷€Í}<#(€́½ÂỰË//Ezcx§Âû¢döónôèÑQer_ß!Æô™3g"ÜûFË3ͨÿ ×!kù”IâHƒl†294xdơÂû„º æXû(ƯÉuYí„Ûx!+̣<ƒGG¹Ÿ®ÛÀñ\(–¹0nP4'<øbîÆ€B~)on4æÀ³”c+›å|ä†\—åP–ă$Ø9+-[ă¨8bÄÁ™úÿ5r§±âá#@dÜđ9ôƯÓ}Á|©+‚¼XR¹¢̃ü{‹ëÇP_§ÚƒÄXƒ+‹Zµ–ô­xpíø̀‚G=}…wuq0¨b¸A?Áµ£ä£œ+®q0¯'ÆÎûƒ÷ud̉ø±Ÿ{'PÎËj_û±OC cđ7«‘!`Ñ!@x0uBÈNhnöL™„|¶›uLúûƯ~ÈWëøÄ3a ¹I‹Êùß₫™öÜ¡ùä!öLgḄÙ–™|4”¤¹̣Nâ…–2OÅÆ̃ObIqå…ôÄ Ụ̂đ}…¥ÚÊ‚“zT^˜g!é$ïƯ'c9́°ĂryÚÁÁ\rïÛ:l=Zƒ5%Ç~YÉ+á̃i¼ŸIWyÅ—¤•"-W²5Œ.ư»+Ÿ5f\Ô¸ëT"Ơü¨₫ꇩ®¨“à#I3'Íơ 5>|TE­HæÁmÜèÛ‰7<'đ㤄FÆè‰Ï ơX–^ziI%5<}¾Ó&馫L±¬e•1¶¹1!đcNÏƯ†€! xUêLØ̣ƒ>èđ¶RÂÄysx¦@¾¸n/ =Î>óEÀç§ÏI¹N,íUÑ«Đ̃₫ñç¹F .₫v­µÖjo§ưl/~x RDÁ÷rÄGH$^½¦½aD"?‘ƠˆB%cBH¾f…ÈÖl#̣ÙÚÈ0 ª `†ª¬¤ÍèäƠ°Ù½÷̃[̉À„Q[acˆ ª(¼V,U ₫¦§CN_̣œú˜’Ăc˜óN¤?ưéO"DẾ ü– „B_ˆUBÓ¹{ áîÄ5ï”9üñÎGrIij÷eĐẵ¸1n¿ưöˬ“Tä¨á£èú` ©0|h¾p̉¡‘ê¨Üđ.€HåRfB¡½ÜrˉcÏ̉¶A¼KáàgIWC ˜ˆç:iñø$ĐE]Ă° ƒ? ½í’ †>­‰@Ê,Œ e l°ÔUÁ@I ‹F÷)2µÖÚ`î>¢Cê²øHPÁtUZï™ÙÚÈ0 ª Đ™©ª¬Íè0;́°ƒ(ŒƠSO ÅƯu×]]¢?ˆ ÁÛר8ÔÉq‹ 6̣íSxa±Si„ ăÇK,!×q™ ³†T(f(^éÓÏu¬A«S¯g7Eưë_‹±goQ]ô=wqs®pÚ(‚Pºn¸á†¢ĂÔ#²2â¹:ÇÈMƯ¶N%3~Toå1ÄăĐ£Ä½ˆ1T£u{øéÓ¶HƯ.¶ñܳ„Çåơ51^ ‹uÖYîá‡Î́^iÏ=÷”‚́@} `#2áë­«N±­eƠñ¶ùE#`†¢WÀú7 ºœp n7Üpƒ¤×Áû„¿ă;N”́(b)iT~7nœ{̣É'Eñxă7JQLˆN% SÈœë“W@,;QYÓ\Y´GÙW³oăO§¸BØ.2µ^™(.ÆëH‘¦!âC ED|`ô>|¸`*Wdƒư+U2| ̀&Ư©nÔÓ¹ˆáá9Æ;6–tWà€1™Hkøl I{́±EÀMŸfüˆf)Z2©eu饗J¤¼{VAó°3dŒù¾ˆ{衇ܘ1cÂƯ…|'-÷¦¯ó!­}L)Ÿ5_—Ä]yå•’*ç•«‰ä>÷Üs¥6ÏøØI²æ̉ßm1®eçdç†@}₫Gêï¶=†€!`†@6é¤!»ă;$¯,F­·̃:º”3Ù£oÏV<¨6Úh#ç‹×_´=åÔê+¯¼"©ä~ơƠW%ê£SS˜åy”Ư|đÁîꫯ– ̉á \T´‡/¶+¹¨ñ¶$̉,¶($½éà9Î}B•(”ª¤ àiP5Jx™»ï¾»¡G| cn÷0”ùBônÇwÿuÖYÇQ—PÓó¶»kßH#€:¤[mµ•Ô,â¼ÿ₫ûki.ÓÇÛoCÀ0: ‹øè´·ù†€!ĐÔ)¤‡¢€È” 0ÜeOéÔ_hˆNªRAsđÀ°Å#H-½ổ–檿I Ï)Åđ‘ö¥åÈ‘#%5El†¸—_~YV™ç!÷LÑTdÄs×:DÁ‘n«hü«Ô•">xn 2¤đˆÆ¡cƯu×.ê¯h+t̃ơ¶È®xدâÀ e™e–q×^{­(gÍ%†iŒtF†€!`ΙáĂ®CÀ0 ¦ †J~<®É)‹7qQE›|›NøóŸÿ́đl®JAs`‹ OKsƠ¦‹¦ÍÆ–â R&á‰|ÀD™’Aë{ĉRdqs.qp J¢uŒÊ‰ÆÆÏ?ÿ\_öâæLBS]ñ£^P‘F9-rλvêÔ©r¯Är•X¡óî+aÆî˜Ø–bÀH¹ækJê.œ•ˆB:ăŒ3”ơn†@$˜á#’…°a†€!PÈ{Ùe—I!Îă?̃í»ï¾’₫¦,ăo×8O?ưt)₫Y•‚æàDí–?üPD¤)²¦C»ÖÍÚmŒ÷8)HƯDÛ¢ œ<{0.â©MZ9„ưØ(4|Ä06ø ]]nñh'ÿ8ôè£Æ‰¡đ.Đë§ †®K ù™…QNïÛ>@ÓïS0|đ%·₫'Ÿ|̉¥Øp¿ïgVè<@3~dăb[‹C€gÏø6œV(\^T ¿âP° CÀè€>ºcb[ CÀ0ê @ơ™g)‘½$o»*Ơêœ̉›ÉÉ}ûí·;‹U)hÎÂi+RƠ,¼đÂ…Ơt舋(ÂIÆ–â lî3¼¢cö`UCasÆ£Ïh”ÖEyµkº++pΔ“4͵ æ{îrN"5j 18gX”Z<ßb*rÎØ̉…Î;î86w<Ơ3~|ươ×P ¼ï=ôP·ưöÛ»¯¾úJä4jơ†€!ĐɘᣓWßæn†@à5„°ûÍ7ßHj«SN9Ẻ—4ÑD%%åÎI'$ÆđáĂ¥ÖIŒ^èÍ‚̣å¾ûî“ú£Gv(ˆŒ:ØR\üu×]'ÏŸ\ĐÅ|MjñØ `ȺAÔ €HUFZ!£̣! †*D{(úîˆ7̃xC7̣©é®HSCAño¿ư¶qÔë…*¿đ<÷ÜsEoư¨,ă5ï̀øQïJ²ííFăôyççV]uU÷ñÇ»½÷̃Û}ñÅíîÖÚ7 C Z̀đí̉ØÀ CÀˆ̉“àAD‹Í7ß\R̃ÀX9©uBÄi3&NœXx* V­ÉĂ?,ëMj#H[«V![vbKq…ḅú믗¢æ{›gy¢̣ư÷߯V\qÅ(Æzçeø đê"‹,"x<øàƒQàbƒh*>xo¯¼̣Ê…8g%p˜:t¨Ü'ßÿ½›6mZs Ôæ£_ºĐ9Fÿ©³é¦›J}x¦ç{Nœ`̀øaWGnñÅw×\sCV{ươ×Ư~ûí'üSă±> CÀ(3|½Ö¿!`‘#đüóÏ‹·^ºl°›ØÍ;５˜ơwß}çˆø åF̀)…*vd“ˆ1Å]}ơƠâ­H̃jAx4ÆH±Ơ÷PŒ´ÎG‘†­óñÄOè°́³DTƠđ±Â +È*Æ“îEé®vÜqG‰@™5k–›={v‘ĂéÖwV¡sRéư3~Ø•8ˆ¥uÚi§9¢ÈHgd†@§!`†N[q›¯!`½Dàƒ>ÏCr²ÿ́g?s7ß|³#]I¬ Ç^N«e‡…ÍIqE—ª`Cm¤óÏ?¿Ûxă%GË€³†¢F ¶W€ơ /¸§Ÿ~Z”15g¬±>*n6¤ñ>ùäI½!?́_i¨¢áƒwöOúS·ĐB ¹ÿûß…×ù ơÖàÁƒƯºë®mÔGºĐù±Ç[k8ñ#”­̃"@ªK¢d÷Øc©;3aÂ÷̀3Ïôöt;Î0 J `†J,£MÂ0 Ö"đ§?ưÉí²Ë.¢@)@Ê„q„r#'Å=ÓÍIQ"͹»·Ưv[7×\sUeZ6ˆ1ÅC¾â+$Úcươ×w«¯¾º¤pèa*…íƯđQdÄ‘qZđỬ]v‰ö©ăüăîóÏ?—s«TÜœ ¡¨^i¥•¢¨óÁx´È9ïà©S§Ê¸ØY¡óÆ«aÆÆøØ̃|À‰éÔSOuë­·#m1ơ>,R+ß5°̃ C XLƒU,₫Ö»!`Ñ!@½ rL¿øâ‹’ºé–[n‰^Ù˜7ˆ7Üpƒ #TT…¨[̣øă‹qÇ̉\UeU{G˜âº.;í´SíQ¶̃{ï½’v-öhRĂQ‡¢̃OLCª+đĐtWføˆéêèy,¤€J’D4ĂGÏxơç [o½µÔ1":*Æ{Å ÷¼Âfüè#;"?pb£̃o½ơ–Ônüá‡̣€ơd†@˜á£@đ­kCÀ0bC&xܸq¡ûÆo”” ¹FÿA « y•đ™>}ºûûßÿî_|q·Î:ëDí]o×dëS\Q°6–¦É“'Knê%—\̉m¹å–Qcê¡₫ú믋†ô9Z7 ̃±yoÅđA¾qˆw ©…ŒÊ€¦¹Z`©SªDD²®¼̣ÊÑD|€íÀƯ¨Q£¢MwÅ­Đ9(4&3~4ÆÇöæ‡Ï9ø’k®¹Fø(̃ÁGydÍ ßH¬'CÀ0̣GÀ ùcn=†€!%¤UØÿưỪ™3e|0ÇÔwÀûĐèGªZĐ\g¨i®vØa1~évû¬.±¦¸ÂwÓM7‰̣Ô sÎ9gÔ‹ i®–_~y7`À€¨Æ:ï¼óÊxLuÅHW††B̉Ï?ÿ|TÙ`ê# †ªE{0cMu…!ˆ-"·&MwÅXf̀˜áˆÄ0đRÿ<«/¸àKŸ“±HfüÈÅ6‚Às̀á6Ø`7ỉ$÷·¿ưÍM™2Å]|ñÅ…ŒÅ:5 C Òđ‘'ÚÖ—!`‘"€ÀÄG8¼ư´/¹ä·ƠV[E¯h̀Î*4K”[’₫ÿïÿ¹í·ß̃Œ^y_`ôk+  ¶ù¨ñ0ßu×]£7Ä©áCëX°œu»Ôˆ"‹›3¸ùæ›O"Éøc ÆeÔª>0V¢ÈG?{ö́îä¼…(̉¡C‡ºEYD"̃¦M›–óz×:ïNfüèNvTû nߘ1cÜ¡‡*Ơ3Ï<Ó=üđĂíïØz0 C @̀đQ øÖµ!`± 0aÂGZ+<€Î:ë,·óÎ;[QëÔâüë_ÿrU.hÎt)¤á‹´Ô(°bö©‹ ‚?cMqÔDQT™C¤~‰^{í5b̀†¢#>HÓ]™á#ö+úÇñUÙđÁ,ç™g·̀2ËHúµ7̃xăljø·]vÙ%êtWÀƒQơœsΑº`÷Üs4ë\3fü¨ŒmÎ;î8·É&›¸/¾øÂrÈ!îí·ßÎ}Ö¡!`y!`†¼¶~ CÀˆ”Ư¼ûî»ïJĐ}÷Ư·r9¼[}• +>Dụ̈Œ4W–âLQ©îg¬)®@üÑGujH ÍűS">b0|hsR]aØ2ª>4ƯÑ¿ÿưï£X̃Á;í´“D`Î5+H”,`ˆN1b„Ûn»íÄyæè£>"ëØNß–eü ư×_ƯéĐØüsF`¡…’è₫å–[Î}đÁbüÈyÖ!`¹!`†Ü ¶ CÀˆR;â°çñăÇ‹÷^œ#-nTaAsê  Q¥‚æ ûꫯ‡´g¤¹"°Quˆ9Ũ_qÅ¢9r¤C0=úˆR¤å‚,âC`¨ûoíµ×C†?₫xƯălG<t‚á#¶ç<ó,©ápH ơ_¬D¡óSO=U c8ºđ cjáăJ?}öYgÆ—¥ă€ÜG”Ûu×]ç $[đÿF†€!`T3|TqUmN†€!`4Àn»íæPj ¨₫lÔ° 9!áZ(¸û‘åƯBQs̉\­»îºn饗^Ñ\^¤ăỳ)®(0LÄéå8à€RD{¼ụ̈˲°¤§á₫‰ô™CÄ >\ ²tW±])ƯÇCTÎçŸ.;–Zj©îT` F†Ø ÀªEÎ1|KDJŒd…Λ[3~4‡—ƯpàZo½ơÜ»ï¾+u>bw0i Öª!`tføè„U¶9†€!Đ ¨ëÈƯU/h΢&Iâîºë.KsƠ!Wx̀)®X‚Ë.»L 2Äm´ÑF¥ˆ®̉4WDƒ¡Ô´¸y †°ÑtW¸ŒâFàĂ?”w£¬ªáƒ{v¥•V’y~ú駮ˆÈËQ£F‰ñ÷“O>‰º~†:oî1ăGsxÙÑíA£%÷nŒ|K{fl­†@'"`†N\u›³!`†@¯è„‚æñÔSO9”[>(Y,ÍU¯.R{+S¦L#\Y¢=¸Ôđc+Ƨ†Xºjø Å^,Æp2ꀦ¹Z`*[ÿ OgŒ:(‰ªxươ×»QÀ”’”TH±§»+t̃ÜEbÆæđ²£ CÀ0 ¾ `†¾ f熀!`t7̃x£#â¥ÈĉƯüóÏ_Éyk+”‘ /¼°EÿTr•ÿ3©N8Á½óÎ;î'?ù‰¤·#7{Ltươ×»o¾ùÆ-¸à‚nôèÑ’ê%¦ñƠKY ?üđC½)äºÈ̉o¡d~ä‘GríÛ:k5|`¨2‘V¨®É7̃x#©jº+RQΘ1Ă}ûí·ÑŒ-=+tF¤çßfüè#;Â0 CÀèføèzv®!`†@e  ùyç'J†ª4gñđ"½÷̃{¥¾Ç;́PEse/¼6NŒWXósÏ=×-¹ä’Q¹P8Rh“{›gyÚˆFk›~óÍ7¥ÁØ#>(^CÔʾM6ÙD0³tW­½[ƯZ§>¸&ƠđAîXc)ÿYd÷ư÷ß»iÓ¦Å2´̀q¤ _tÑE™ÇÙÆ0ăÇXØ7CÀ0 C Ơ˜á£ƠˆZ{†€!`•@àŒ3Îp}ô‘[tÑE]U ³Px[cäAY±Ùf›Y«J\½Ư'‘Nq5f̀˜èÖú{îq6'Ơ†̉Δ̃ÿư1ÅiŒ¤ÅÍ[,©¥4Ư•8ñùqLbøˆµÀ9+1çœsº]vÙEŒÖ·̃zë‹á7-t~̀1ÇH­¦óÏ?ß}üñÇ4®!™ñ#®ơ°Ñ†€!`T3|Tg-m&†€!`-B€ôVÔøë_ÿê~ơ«_‰§%Â|IÓ\m±Å’₫¨s´99{+Öè+®hí·ß̃-¶ØbQE£4º†4ÍƠ Aƒ$U\£c‹Ú7`À€Z×±>H½öÙgŸƠÆg_âB S aÄÇ[o½Ơ"îj§v’4\³fÍr³gÏj|éÁ`´>è ƒỤ̈Ë/ï¾ụ̈Kẃ±Ç¦±ß˜ñ#Ûd†€!`ô3|ô@;Ư0 C Zn礓Nr_}ơ•>|¸­B«ÿî»ïǛ™3-ÍU«´ØS\Û+¯¼â{î9Q́•©¨9cWĂG¬i®#ӹ拯µèùQà¿e—]VŒÊ ᡇ*p$Öu#:Éđ±̣Ê+ Ô"â3"eđàÁnuÖ)EÔ¸Y¡ó¾]=füènv–!`†€!P3|ÔCƶ†€!`t$7ÜpCG4gqï»ï>I{C¡k̉ÎKܨZ”!ň_rÉ%í±₫úë»ƠW_Ư¡ü) •Áđ–("¡X">ËÈ‘#ùp–îJ`ˆîơv>ÿüsWƠ‹›Ơ¹ĐB ¹ùçŸßQ '¦ç,€9§FÓÔ©SÅHƯ È `4ùƠŒMf‡†€!` 0ĂGpl—!`†@g!Đ)ÍuU)’e»í¶«yƒë>û¬eHq…b•úÿüç?]Ù¢=¸JÔđ±Ê*«D}ÑÄhøĐ:O<ñDÔØuêà>üđC—$‰L¿ê†&‰Â™È-"?c*pÎب}4jÔ(©}ôÉ'Ÿ”ÂXh…ÎY¹¾‘?ú†›e†€!`¤0ĂGûm†€!бtJAs#Ïc=æ₫ơ¯¹vØA¼I;vá+:ñ2¤¸ú+¯¼̉}ÿư÷nÉ%—t[n¹etE×]k̃}÷]9$æTW 0FĂÇFm$ØQü86E³ ¬Ăÿi«XÀÍ=÷Ü•GeóJ+­¥áƒˆ”JúMb/rÎÅb…Îûw˘ñ£øÙÙ†€!`†˜áĂ®CÀ0 CÀ#ĐIÍYđéÓ§»¿ÿưïRDzƯu×-Uj!»`{F ,)®¸o¼ñF‰<Úo¿ưÜœsÎÙóä":‚t8?Pđ‘ƒ?fw̃yex1¥ºZtÑEƯ!Cd\>úh̀đuäØÔđÑ Ñ,0µ4¨óAÄGl©®Ÿ¦»â™3cÆ ÷í·ß²9j S;Í 7·\füh/;Ú0 CÀH#`†4"öÛ0 C ă褂溸æhFƠB@S\Í7ß|î /t¤‰‘n»í6÷ÙgŸ‰7ù®»îZºkQÓ\-·ÜrnÀ€1B\“F|üå/©m‹á‹¦»²:1¬F×1táC#>¨ññ̃{ï‰Q³+"Å₫¢nQR‹,²ˆDÉñ/ñ́9çœsỎÚ½̃ܪ™ñ£9¼́hCÀ0 C DÀ !öƯ0 C #褂æ,0Ê,"\0øŒ=Ú̉\ÚªS\w̃y’Bˆ„éꫯ–¢æcÇ•4.1±Ñ˜^{í5Ù{+©†˜">×ÿüÏÿđázê))*-?́_t¢ácùå——. »Ï=;uATÜÎ;ï,QreHwÅØ­Đy¸‚}ûnƾáfg†€!`ÿ× 0 C OÈă₫Í7߈µ^¿ä.^h¡…i9)ë(îH}ªŸ₫ô§•KƠCÁ_o„̃̀Oçœ%–X"·”1(₫X3R– 4HREÔ[Û·‡Í=ôPGb®©*ÓÔ©SÅórÅW”B®¤÷0ª(µ;́0÷Ă?¸-¶ØÂ3&Úxưªá€4WeŒ<̉ˆ3|ôư₫Ù`ƒ ä½ñơ×_‹AvuÖé{cvfKè4Ăàa \zé¥<ugb»·IwµÓN;¹I“&¹Y³f‰q&ö4{અÎgÎœ)¸^tÑEb—Q/;{öÙg¥æ˽÷̃ëæŸ₫^¶ŔaÈmÈoˆTnó̀3ÈơäÀ$IÑ‹¤{#B ¹§J¼{8¿FX¥÷© ¯O#“ư›t«}ô‘\;½Á y—÷"ü* /¼pvĂ-ÜÊ=óÅ_¸O?ưTî‹VX¡…­[S†@g `ÎXg›¥! ·Ür‹[uƠUE¨D°̀úă…₫“ŸüD˜Ø_|1ÓHc‡²„óÉÇ 3PFbü¥ †åLØâ‹/.LYú˜ôïM6ÙÄ-³̀2ü†`”ÚMŒ}ë­·vk­µ–¤1h•'q=\Ú1ŸN*h®øQßæƯ¢=‘ê|’âêí·ßv±§¸ñ+®¸BŒ»#Gt¤*£ n†₫ß;\«¿øÅ/¤!KÓ<[Ù ^¤Så²ÖùÀđñœÄi{†÷xY¢>P`ÿ́g?sÇsŒÔ;ÿüóƯǼÑ'4~`LRă†ă2k%û…ÛˆºÂákpW^yeæ´¾ûî;‘;8oèĐ¡½’“2`#2r_HáüBlzú¾æk:"iº"…12ë)§œ"rsopC®~á…äxämäî<ˆt°§zªÈÚ8 1—VQ.­jÛÚ1bBÀ 1­†Åèæk®†Q!xÁˆŸH‘êy…ÇÄ₫ǛD¶ Ä<ưôÓư6T,¶Øbµ¨<ó pÀZ¡¸l5.pè´‚æ`‡=ʘƯí·ß>Úh€Fëfû²(S+̣ç?̣È#̣Ü;à€Jí·©Ưcó ϺBb,n®ăÔtWføPDÿ$z”¨¨“ đ11>X-ráƒN̉V–đ>è ƒm+t̃÷«gü ¢>v å†ÆÊ|ößy₫đ< ‰v)ËL–™Çs̀!Ná\ú:?xû¿ưíoaSư½•³&UÄ=ˆÜÑ)[I=ö˜\{<“·Új«V6mmQ"Pí\QBnƒ2 E€Üó¤bQe¹*ëQ|ŸvÚiẦ±ăÇ&ô-„>+­´̉JâƠ|ÄG”27<ŒiÚĂGçÖÉŸyá̉‰͹®4ÍEx,éư×É×\æ^¦Wà}ùå—‹×ï!C¤X¯ “eZ‹W^yE†‹@ʽ;ÅZăÜ(pGăsÏ='Q@ăFÅ"đá‡Öx”¥:,â₫!ƈ® ¥Ûl³DOà$„Á0/ïă₫^•Zèœñk¡sî£æöÚ/·Ưv›DÍ7×Z₫GĂ{¡>cÆ´|ÙƯ@IDAT ‰\b(–‘_~ùewÈ!‡ÔRbñ,âØwß}·¦x†g ½Ơꫯ.£e~FơF‰NJ%ø÷´(\9dJ[đUF]è Æ]Ïhü ¬[•å qOíƯ›Wº®öÎÂZ7zFÀ =cdG†@› UéM`FBÂĐĂKú¤7̃xC<Ó'L˜à¶Ưv[‡0 c̀̀r™‰ æÁÀë÷2Í©†›¼pé´‚æ\W¬×]wƯ%Bæ;́`EÍËt³ơ0Ö2¥¸"RâöÛo—ë°¬Ñ,G˜æ*ưëa¹ Ù­†đHÛƒáû‰'p#FŒˆmˆ7…Ï>û́'çS°^è́Ù³¹1´\É‹Œp¥ơ/`¼³ Œ ¥¹<Yd÷׿₫Ụ)SÀ»‘‡ŸÏ<óŒ{óÍ7%ªOe§ÔíNñÀ³Üđ(ª‡{ØiÊÈAüÁˆ9’ Åë¢Ô,.:¦f׈₫:± 9ó&¥÷뇷%^£FåG LqEƯ 7YϵXfúë_ÿZ̉œ,¸à‚¥®3>bÁ¶Ñ8Ty£—"ï’aÆ9 ă½n†F+™Ï>5|d)&óA1½Àƒ‘G>>û|ươ×/f0 z…—Ưe—]ÜwÜ!@y¦^N^”/+t̃ÿƠ‚ŸSăuÛÊbü€‡oô."Ơ{î)rÆ̃{ï-rEÜÏ=÷ÜZjLÚÀX®r`ïa?“Y³fIÍêf!‚!—}ÜßP(‹è §!?‚'i"‘—]vY‘}Éi?üđƒœó̉K/‰¼‰üÈúđ ÑñÑ6i¼0¬BŒ‡ÆÇ1iC3Ç“®/ÄÁ™1ë<9‘ËH•G-ƆlWÏY~øa9„û—9­·̃zƯdVÖƒvy§#c€!çñرceŒ…ư’*ñÊ’Ä{†&̃ Ơ S®ü¹ç¼2ñÂrâS&^ø‰zÎ^èJ¼ &ăơEn/$G=̃Fƒ[wƯuå¹xÁ4:,}>’BÆëSFF3¦p çœsŒïç?ÿy¸Ù¾„ït̃Ơ¾TA#(®[¯€LV[mµÄ+ø’«®ºª¸ôĐ3ü+ü*ăô{8:®Ưđˆ¾°°\cđùi>>®ÑÆ?̃­>Râ—"‹xÅtâ G7pä8+^1›x…{ăó W9s_U ¯M¼ñLö!£øºa]Ụ́ÄkçªÜá ɾûî[Û‡,™–é¼[‚ܦ焟̃xd½ó‘eiÂcĂïá‘éÂ}úƯ+•…?JÏ™©Y‚?Ôç8ư#cj_á§7&$̃I¯[óȶȓá±áwï¼’Üwß}µótm‘ó綾^Z;×;&̃©¡öܳùƯG€Êq´ï£ÂŸS~óœÛrË-3×Fç ̣\;0æÓ±„ׯ7`%̃™OÆèS²%Ç{lm!^¼S¼a"kÚ‰7vd΋k̃GÇ%¾‡´¹ÑFu¹^¿øâ‹äW¿úUfô¬ë ˆ c‡ê]̀B‰ûëÊ+¯̀l—c‘#Óú=×> ¨orôw‘!`E#à ]ÅñFT,iƒµxôÑGÅ;HÛ̀ú qéëi»XĐœ¹ăAåYKs¥WCù?˔⠴ñؤ°9€xsÖóø+ĂÊh₫ÿ26O-ng`Œ¤y₫y¿̣®5*<<¡N‹ø`Îx¾•7¬̃çlđä%êƒ÷û­·̃Ûđ‡g¿:oQS;¹f·̃zkGD%ïW"H{…ww™ Yè ˆh|0s:aª´O?ưÔ :4ó Ư33÷Ñ°W̃Kär[áüñÇ»½öÚ«¶›ûY™FÉ+‡»¿FbLơdSÎc ³ f#¦=ñµŸFŸáyô¿ñÆgNDă¿é¦›jû‘ƯÀ€´ÔJÈoÈrJDÏï·ß~́ !yƒ›¥×4éă ß%^1êX‹41̣üóÏËfæL$‡û³Ö†9P…h=Ú®Gơ0®w|³Ûßzë-wÖYgeoĂóHˆHẫÍ2ûw̃)̣[xßáåÀăä“O®íâF¾pŒw:u£Fª“ơ…ç±ÇºN4IÖVåzÖH$oD‘(ê´ihd”3|”a•lŒ†@#“…đ Ă؆‚D™>áTQ"åí·ßácm…wÎW‚™=đÀ% Û|T€ ØsFj'=ƒŒ„Sabạí“Jˆ}0+|÷^6rÂ3ÛQözí=†j(ï%$}禬&„̉‚a¹ŒÓNº.¥K˜]R> €Ññ̃ΙááœËÜ9Fׂµ`„sJ M­…p†0³Ï>ûôˆK_×HçĂØO:é$†(M»SƠÏGyD®mæ»ùæ›×ηæơÛß₫Ö]ïs`#tûè«èS\±&¤ââà½ÈEÀo§¡·×ÊGÏư2*,x.ÇhXXuƠUåÈs%ŒQ±t²á^oå•W̃đ²w§v’q¢Bd9}†m!ÿ`,RẤˆ¼„ÙG0È.đÔ™$Ơ.„¢ùByŒƒcEæC̃C¾pºóÑ&¢œ§×_]¶óÏG@ˆ,”U¿—œ|[ïƒO=ç6í™”qÁĐr'„̀F1%ö©Ñ¹Ylá{ا `FJç,â9J-OxUd=œ/PüCÈƠ¬SH̀S1¡Oú@á®D{¬)—|俬 ü$5Jè pâẲ Æz~+>Iæ#…×gRE!3C̀Ă™ÊÇ\;/H?ùˆ1ơôÑ#²=ëß;ï¼#iÀÙǵzùå—Ëœ¹fY+5da¨îaÆu»Î0ȱ®è"8Ă“S¸.‘3À™càÍÔ‚‡´ÉF†@0ĂGVÉÆh½F€(ó!˜ XĂtÁ,ÁŒÂp,¾øâ™íQ4»ȇàKÔ¿aÀPú#Ós cCs₫ùÂÉÿ1ÀĤA0(úhÆH½­—!ôă # Œb€tíµ×J̃Ză…ạáÍ5,9́Ôøó ĂCÍ=/yFa’ j£s…‰¥8!…9¡iÓ¦Ơr¹ö„K_×H:̣ÿ:± ¹Îœ*0zø°yƯlŸ%EÅơ¡‡*÷*^WcÆŒ‰̃˜…·y¥¾Ê\ÔœKFë{ø´‰µç{́—R¨èQ£MLcæ¡ .3|¿2løàZ„߃Nj٘φ̣’÷{Ù¢>à¹ç·Ưv[á£)tÎ<Œú@Í "Y# P̣#«µÀ½BÔù„ $â#müWE³F đÅyM½à1À üG9 aDÁáâÅ >¨]FÄ»²‘¹íÏ|uĂ¹Pɯç󉑀—q+ëư!ÛáÔU˜oœ,J ËÛo¿]g₫ŒOähäiˆ9QÛY‘k â<~CẓmHKt9Î‡Ă¼²z’Èj JZ8—mÔó„S:ê(ù®ÿè ̀+WYeÙŒñ—z#jüÀÉ5ëf0Ö>úûÉ’)¨ÆÎÈÀ•Ô`À5JÍ|*,©Ù„Á‰óĐ`ø °}ÁÇa‚¨ _­„̃çEœ8!drú¥]öñ'z•ÑyßqƲí^x¡7nœ\\ £À_ç‚u32bGÀ ±¯Ï0B€—5L„÷˜´^øx‚À<†ƒDˆ) ”C»ï¾»óyĐĂCä{x.<€`hÂ믘3%˜3?¥\c ĂÈÚMáøĂ¾|ƠV0Q0H!–á₫đ¼zíÁMŸ>Ưe€'‰F́è¹0kx+~º_?C\ú³F´ÇƒFh6ë’µÚw•>`TaP-ÍU5V¶l)®@oI-̉$e  Ze\5|”%Í« ÊwU¾đ=&R/̉¬”1³êcá>ƠèÏ¥–ZªêÓí6?M("á;àPÆJ(×4Ư©^0,—‰à¡O;í4á¥Qªâ³Lsˆm¬jüàÚ×ç× qî!±”ÆiBFÓh Œ¾–ˆ({Ăă8××69‘g$F*Ă ×`ñµÂÓ$ù’÷®¯µƠe?h£ïdÓ¡ƒCØx0 I.á6ähU~#G#¦‰d§Ÿ~º8bHI· †¤X ™‹c!°BD>Qb ôƯϸˆ~‰>pS£‡îăˆÑ œ{Ú€Ú*ŒµOÖ<́O·36̉D¥ ăÏk1"›Bi˜o§ÄX¿̣or‚ÿG P8*N™2E7×>ÁWyƠÚÆÔî™p pÅA‰µZ~ùå3#:Â92₫Ç{,Ơªư4âCàÇرøÆf#2 C _„56†̉uCØ¢x¾?üđĂÕ`J~ísçªgQ0Rx«á Dç À .f,‹a Ûnơ÷4çí±ƒ˜&¼¢Ô@₫\_(MæÂü º?<-«=BÍ ă勹 ó…Q…p"BPÂC`¦ư„m§¿÷gh &åsÅSf²SˆÚà‡_ÖZv U˜g˜â A />¼cÊ„gîû²G{€± “iÓÄ3•tcgy¦8â”…CÏYMs…̀Œ17Í×"·Q(‹9D(à4G:®´Ñ+ë¼¾ncƯĂë@ÛaDJ¤‰kD.1.ñ±Ûn»I *%¦^Ú(̉v‘¹…O‡q‚₫0½ổK‚¦ÊÚ¡Q#<7ë;¸éñ|‡@~ ăăGa8 ïÙhÿ 0ĂG„‹bC2 ® pª’,Í…G#ôơäí#–n†W…|Ú Ô…íg}‡»îºëÜرckEÓa†đøQ¯<I1…ÇGJgPÚ“' ‡ô6R•„˜¤÷7û»?k4‡q„ÁL_ͧLÇk+” éŒÊ‹Ï–²¥¸m‰"Pa¤ÙrË-»E•mEÔđ‘ö΋}<ßc6| Àó|&·ờ™3Åy vL«8¾?ü·°9iẒv܈Ox(îoøøPÍwËøtđ2xAoµƠVb\&ƯU™ ̀¾…&QÄÔO"½Ë-·Ü¢S´Ï>"®Zó£¬ÆP!εÎ;¬!+j­Åø‘ÉÓ4Sºy‡ÚѤN̉ôIzL½O!ªÙ â=‹¾zâ£đGÙOÄy³„#Î[-Ñ́ù\§2]Oçƒ#Ï<¥feÀzFÚă}‚,‘É0|àT¨Ñ^ÈƠKÇĐÓ'Ïk̃WJ¡\«ÛZù‰,µÙf›ơºI®9 Bc"kx¿@üÎ2˜ÈÎ:ÿÀ™:3ÔÑ”WuíƠf@C#†(F†@èëV…Ù C RÀi$Ă[¢‘B¥ ÇĂ*ƒ‘D(éíáo xX,å=³₫`BIׂ„=̃%xFàÙ“îo <ñzÓ?̀L³ÄÜơ¼,ăNoÛ Ûéí9éăP´ĂØRˆO a…°\¼úÀI=_t³Ÿ½]#Ö¢S ƒ©†!#đX«f¯²ø?ñÄ%u¹ªë ö1A”(0úơ¹Ó› ÏpJBe3|h¤ÏùX‰ô$Ơù(n…ÔđÿÓ©„²O œăA3¡äĂCgéz429æ1§Çh…ÎÓ¨ôÿwhü€ÖÈ"Ê@e&JâÁ«¿!ÿ鵟³Y!+á!߈pRË’ÿt2"rˆˆPÂh7kÖ¬Z1ó°}đ&‚D£áĂ}=}g¼"=z:¿Ùư\3Zô¼Ùs{:¼0±–È%ZÇHÄü4ÍØ÷ÇÈÓÓtˆ+†‰ĂÂăcV$Œ¶ƯèSÓK¡ÏP~\5Ö¡Ä:…FÚ#™ˆ£É“'K}–Fci´ă ™"ôO²Fü‘éÂȈ3|ľB6>C Ă )ƈ=1%0¡0öxÜ dË"˜ÏFQ!´Am÷ß_˜XÙôi­((2)0Ax2Ăˆà-„çĐe—]Ö%¤œH’Đ5>¶ÁÁ*CÍ9Æ óFhÔkÆ.‹B¬È1 ÓöŸÂó³Æc8~üxIưűV/Ö‘"ƒ|'eöÂözû½™5B`Â#,'NœX+XßÛ¾Ê~Üw̃)B̀)̃h ‡eŸkƠÇO+¢Ë¸_)”X†W¬ xđăÑ¶ë®»Ö d–u½4 ‘ç)……ËD<×!}¯Æ8vMw¥Å?ccƠÇd†ÿxåÂkÀç„̃Ï1®=ü'N7DûY‡óIÙˆ9X¡óö¬Z™>T! È5R˜§¦sB‘,—E(ÚµxwÖ~øẹiÙ/üŒ¨5A´ ®ả)áÜ„¼IO#²ÏV Ñóbû䙇3_#b~8V‘^ ,! 8¤A8Æđ®[ç -È-‚Œ`«µ˜÷zăÄ1<7¡ĐÀtÙå+ÏV ]̣?²dmWÇG Îè_SúáŒRÏÀϯ=í‹T ¤åV‚̃kC)G%ozL3ŸŒF¢›Ăë>üÎ=ÂÚ¥k±4Ókä…€>̣BÚú1 ¦€‘"½z¦uÔQ]ŒY †Ñ ơŒ(á`pB¢‡*„ÿ?{çmGUưÿñ·tưPd‰B@@$ „P Bh ,@AJh¡!$?J‘"]$tB•JÀ ½7é‹z“€k)â_—óߟ {8w̃Üö̃-3s÷^ë½;wæœ3ç|gî̀î74„í(F†¢ ¦mÖ¬YÊØ’ß”}¤A0£L¡Ï„ꈠ l–0˜¡‡çZ̃YäH5o öĐ †æ0MÖÔ¨QÊŒ1aB¾ucؾy`²BJC``‰ )É«¶ƯŸk„°„!ØơZAsĂÑ̉\íPèTLxf…)®È,ËëÊÈ£1˜Ôw¤d):Q³Z|ñÅû¤ËÈûÚ̀đaïƠ<Î×Ơ/¼đB§Xú9¡œƒ÷pÄü K|¯¾új&¤ åäJ4̃ đ¯¤»*"±/t̃+WDă–je6‘®µ˜…Êe“qPR_ươYÍÔ8˜6f☢B®¡`t¡p&j¹ùç) y^˜Q9ù2&µ9¨kQDBöCL8 /bèYgu”ÇK·©ö¬IÍ!âÈcơ+àQvÙe—̀®đ-–B:Ư€cV³…{%-w¦ÛóC•Éç¬Ă÷M5b®6Oäs ÓĽc÷@xŒºflcn*0.XÔFRưeµ6¦L™Rqƒ×"²é’K.éSÍj‰Tt¬ñƯ¥ #"´qü¦̉ıË.»Lïy"tÓF™t{ÿîä7|äá*øE†#Ë+8đĐ'•”yœ „'ܲ¢å¶)vPôS`ĂŒœt̉I}¼]a’8s‚`>̉ÆöoµƠVỆ’çÅĂ{ÿư÷+s@>̣¬—#Êæ,,đ´ H„‡ ă‡¹7ơ€üc Æó 1ĐÁ? ©}đÁÁ/=¿¶₫k¯½¶> íü¬;%kÏ`ỳb”“’ÔŒD\¯j÷AˆK®F”g½XĐ¼a–)¶ˆ1ÊÓ\…w`ñ¶=ôĐÂ¥¸ẻjX>ϦF‡y¿:E­ï®ö~̀³áƒw1)† Ow¥0tüŸ>¾ŒøÀ“₫̃ëÅ_́øuhæ„(­àyß“nG¢XSèüÀT̀ñZ†‡sj y2~p­í}”µ:ø×Í7ß<‰¶")a‘î‡̀@(Ỹ#ư;@–AJSèưO”:‘ëÈ9!ñÀ¡ 6Jaä?Ú G₫ă^=û́³Ă.ºÍ¼ª§A=,8np}oĂóGJ„<^È€!±fö‡Æ£fy;ŒpODÎ' ƠŒ[µp4ç›ShAOÀ¸`RǼĂø`÷!:"ă³dXdÖƯvÛ-2¼×’²ÁÜpÔ ‰ñà:ê(Ư ¾«®ºª:)¡µqÿ<ñÄaWÅçÆ4aàæ>…è›6Ø`€ÁA£[-ÂÀϵ0â>ĂqÂđ˜e]ïkäñÚ¥ĐrkORe4‰<×g ̣̣K(²\ˆ\ÊÈ T1"¿Íc9FÛ!»!@ÈtÈvÖ™SR„ªü!†“>c#K"Ÿ@Èuá¹ÙF̃»9l\ΉL…k²¹Ú˜đ=đmÖOû‰<‚¼fûÅ`KäHr¾p}ÈÈ4k­µVÍ?‰D‰×\s͹ Ç1̉ƒ_ưĂ¹y„X„k‚‡ƒ@̀óYñm̃ÈƠÈmơ¡½8/~u†́îÁpÆcéw(ơăGyDÏàkíƒëƒ móGdM£ZÓ~Z I›‡(ücqŒ¥[,X=¯™ß0fŒCÚp_Ăkñ›B ÑÉø`#‘"tSBæF–·±ÅØßrË-*‹BÅ1ÚHD¬̃¯œ3¼¥†f,ÆƠ? Øyç“1é·Â +ÄbŒÁB®°sJz8ÅŒ₫\ßp¾Ü_|±…dÍHú!_n½ơÖ:ÿṣM'GÀp:†@hø°n½Oñ~H˜R›( %/cú˜‚ă0<0>ơÆåxhø ï©§‹§IƯ¾RŒ̉₫Zç!ë¦ ˆ)¬ŒˆMhSgë´6µ>C£‹(mø¨Ơ¦È˜uúó==ÇjưC,Å1ËÖuN;ÆœæN"X”y¥o¯‘„R«‘Iréê½Ôkë/Ăz\%Ú-Ï4–$̉¬0Ëây‡Êïa6|¶f5¹¤‘Ë8ï]{ï½·^ñ\̀ơDÅûSç‰̉*|'åz̉%™|Ï~·8;ô2ñ¼•´£jH(‚¡S¼§cIÅ¢×È”\E»†¼+¤6‚̃ƒ(%̣«hKÈư|ùwĂøaÊñÿ¯µm†„4 µ”úiEt­ñ‘±́ƒ<‡ Y«=Ç‘EŒxNà\×l?Ûaû8¼AáúÂ6ơ¶C£C8F³†~ƒÈ”µÎΗ9›‘!œû«‘µ·sp-̉|bhø°vƠ>yVÀă„T ck'é+ŒƠÆg?Ιc]ơ³™û ƒ×%$ ;eQk›“>¸W¥ÆGC}¬oht‘TƠ}ĂcüFÓ†#üÄÇ;ÇÉ(êJ~½N€#Đ9%&´´QÜôÆoÔđIrW sUÑ%ƒăaˆ­Dh29B9_Hâ9¦!µ„Lg‘xOèyçŸ₫¬Ă““≖g.Â(kx¬0É₫pƒ°[¢Ås0Ù-̀m$é»̉µ9Xé„‘«™K\¡„s‹ÇG’®+9Q°A±xñ” ö|¹)Æ#íÏœB¬—[n¹è±Ç«¢M\ Z,Lurnp$ÔW–>çb®`ȸNK#[{=\¹FG}´¦̉b-„kVÜkD¸5ùj…9Æ[qŸơE^o˜âJí>Ï´<¯M¢\Ñ4…"¬%χ<Ϲ̃Üë!W›ñ|,Ù3Yï\Oê<¿ÅcRS_æz²%›)fDˆƠU <¸d«kn9܃¤]ÅhEZ—æFé\kx±Í6ÛLybqJBwn­9¼´:o –ƠFA¾ ~Æ©À}#FZ#¦V=Ájcµz?ןß©ÎH©”&RôPWâwj©yùNº+̉½I¤_¢éë¨kˆœ™&ä9dHR!«dơ©‡,bDz vÚIS)Û¾ô')˜OØYÔeÓùÙ;:\_z¬ZßYC3c '“ZÚÈäk®2%)lùä´SÖ7œCØ'½-†ä:p?‚y59¾¤d’è¤îK8r<çäÉ“ĂƯQ-Œ­!µX~ÿûßkm¤¬µZ;®!©°%úÏvơùD̃#yŸư¡)‡)H̃«4dƯ ·º'agäóI“&UÔ6_₫F‰8ll3~ÓÈéa*+k€î$¬—îÖn°¼÷ùíq}³ˆk^‚ß‘ÉîYí|Ÿ#'¾u&Ọ¹8€#ĐJxÄ!°BÆLÁD>\‹Á„b IHh/(ÅÆ`>)ÈK̃Q˜´ZD¾Mf̣bRFN̉D0Ê0´YD~S”Ó̀á£цq1 ˆŒ6ƒ¹Ç˜CU$ÅŒæI/è 18°ñæĐÜœŒ)6Z̀¬ÚülÜÆ€›ZDQ+ŒsÄ\±¢ÇY?ëFp0¦™càÎÉ®‘„éF(Y1Á˜‘S¦¶×H̉\hÁ@ŒkäÉqï5,º̃{î¹G!%<«ÈK]둧ub @q‘ଳÎ̉z@eÈéÍó…g.9•ë=ótM˜ u:è hươ×׺Qy›_8”.â ưîw¿Ó"²á1ßn(f(X’‡â¨½LđMW^ye´óÎ;k̃xçàPÂ’›₫vJª(ñçoóƒÇ©>^̉iƯ;A^å;÷8÷;…ª¹çÍ¨Đ³tw“™søC–°F d d£4qÿaxçD6A₫[xá…“âÏéöö<‘?à¨À½K!t .¡ŒcíùD£sƒOªÖ.́ÓÉmæG ̃ȵ(îkɵÎ1yFƯ%uSpƒ¿ ü0bQăÅÅ·ß~û2 ˜!ă¡¬g»51×±‘µqáZ ?aCáŸEáư(ÑÏaî+>Ñ1 7§ é±X+˜H 5Ơ à¨È=WwÆÁ‡tnÏC¹—ß5÷#×û8ĉsR/^ù"}ï!§Kº/½öà€Ă"ơæ”^›wº@¶kr·gåçwG Ÿàá†B‡( àÁÀ§…xƒÀŒBL¯ọ̈†ùJ3`ơ¦…¢€?”ÍŒH#£3Ă_ Ʀ¦Ùuq¾₫à³·ụ̈ËW.dzŒNth—¬9¡đÇ`-yâ«2ªU'U‚0î3f̀PfvË-·¬z—`©¥]‚äRÖû¡Ị«'fúY–çÅ_rÉ%*„!¸•éÄûâƯQ4£ó6oƼG|0×u×]W (E9äv9u”5¤^'~ăxỊ̂N…¿äwc¿¡¼bO‹2¯tø`øƯP –×y§ç¯j…Îñ ÆûX̣É«"0ƯÖ¿÷xm‹üÀøa‘E5~ œ?~|ôÔSO©²ß€9¾J8-`ô€§â÷EÜÈsD6CàYKîÉ ù®,”Ơ¾Óû˜Ÿ)¼[ynœzx¿C\£z²)Ïaxb® Ff¢ùÅØÆÆàÚ_BÖÆ™¯Ú½Um\̃7D¨TËJQ­8Öª÷9ÎYÄ9kƯ{+btsÖZ}_o#PƯ,ÚÛ¸øêG  àƒÓ!98UP —̣øăGR¤K=uÙ#WDåU¸&ß₫̉g!¬ÁLK] w‡‰í5zđÁƠû‡{{ÓM7ícüë5<¸̃"§¸ÂƒŒ¼ÈvƯu׺^nEº>fø %_É”¶E0|X*’‡~Xï¥"â]Ä9»áă뫆² eÊLkEˆø@8JR  ,UC ä½æ̃!Ơ)0œ:ƒÀñQ4¤9Áđ—x̃gܸqú¹â+0åªsÄXK>̉µÏ̃<Ä«vđưB mü€Ùn»í÷~ Ø¥NDiœt̉Izv̉m¸á†vsß}÷Ơ(BRÙï¯ü1cÆti¦½wZ đP8e­q₫ùç+<¯ˆđtrG ]¸á£]Èú¸€#ĐđÎĂĂÆֈܵ0Wäà„é‚ÈLhw­ÚÖ¿èŸx7!°—H DRîêz4]&lđ²çGIP¦CeºFµÖRôW¬“ä«;v¬¦æ+’Ѧֵá˜)Ljø(RÄʵÖZK/‰+;ëƯ™­;î†J,á)TàœÙc¬Ùf›m’üøÔ(*Áâ…Î;sơBă¸?ưôÓ‘=:3ƒŸ…:8\P¢¾ïm̉‡ïj{Ù©s ƒĂ㆔.>c§6«ÑB!̣FÈØÈÚN€#_¼¸y~¯Ï̀pˆ^%—^zi4kÖ,UƯA¡o"@ÊT´¯L4CèENQ÷2y_§×N<<‰ˆü)R=„ô:̣|ƤyCX °<µNœƒui₫đ‡?hÂG}4Z|ñÅ íÁóvÍ5×Ô+x鯶Új¥I'ˆhÑEƠ›‰ÈÁ"F ¢È¢ÊÜ"Ä­ûÊ+¯‘ª̉©ư,¸à‚Ñ{ï½¹å̃Đ‘q©/AD)^É·̃zkû/B Î@+̉Åñ›?đÀ££>º£vgø/t̃9́Q4ăHôÁD£Fê܉[x&î̃ÓD<Ư+Ŧ! ‚#FŒˆ6ß|óºơ$´ƒÿk9¤¸â`À Å×cU-¡‹ç< ĐD²ç‰0ÈP[™‹¨Ú¢:Æä SŸ‹#ĐjÜđÑjD}©éFwâ¢ø$GÀpG ăxª«Cî'tGÀpÚƒ(›=ÍU{đmç¨éW¤))ZỖ•ä`ç₫›0aBé¢Ë¬°9E¥ĐpP„:`%a’¢âŸ÷y£ÔÇèáY멱`饗V\>û́³èí·ß.,¼?(âL”/iX₫ûa^è¼·ỎpGÀÈnøÈƠåđÉ8€#à8ưG¯T”™¤r#%9À¡‡ªạsÏ=wtꩧ2R‡ZJpÈMœ¢nêƯ)fø(rƒ¹æ+Yf DzXÑÓ¢+nàs¼aùü‰j*S´Ö@ §F¼W1ÀYŸŒÙ‰¾̀{̃yçƠg1ÑE/rfn½Đy'î?‡#à8€#PÜđQké+qGÀèq®ºêªǦ›nZHÅy¯^>R\]tÑEzíN<ñDơ´.ZAđ/¾øBS\qÿ?>c9Jw9Ë`ø Ç9©Œ ">˜'u  ;ï¼S?ư_û0ÇG{TblµĂ0|2ª(Äï}Ûm·Ơ(<ê±RḍBçE¾z>wGÀpG ;¸á£;¸ûYGÀp–"@Í{¥€#ùÈ·Øb -âØ̉ø`mA  )®fÚ´iѻﾫ^âÛo¿}é̉\‘¾‹Â•P‘#>˜¿¥»¢ÆGÈ /¾ø¢«-Âœ‹:G7|d_¹ÿùŸÿ‰–Yf™BE|° §^`"Ra^}ơƠÙ ,Đ^ ·Ç{¬p‰¾™¸—~ö³Ÿé-åé®ÚûËrĂG6¾føøïÿ½̣Ê+Y™Ư2{Iw…á£Í̀™3£Ù³gço’MÎÈ 7 ˜7wGÀpz7|ôđÅ÷¥;€#à”7ß|3zôÑGU±ái®qMË’â ´Ï9çöØ`ƒ ¢%–X""-LÙÈ EOsÅu)¢áẲ]Ưwß}e»µrµ7|d_ K.¹¤F|e@Úµ¢Ïc¢U†^¨°ç9æ…΋rú<GÀpî!P>É´{Xú™GÀp® @´ix†-¿ụ̈¥TÀ|Ưu×Uèï¿ÿ₫$2¡è×"Oó7ÇG{d_•0âgƒ¢‘¥»"-æÍ7ß}öÙgE[Bæ|­Đ9ơ¥x|đÁ™í|§#à8€#àô&nøèÍëî«vGÀ(¤%™1c†zpzQóü_PR\]xá…z½(Ê‚Ơ"é^Î?ÿ|]Ë®»îÍ5×\E\FCs¶4WË.»l„̣³èTTĂÇk®©†ƯO>ù$züñÇ‹~r77|Ô¾$føà½KX‘jä°2jb¬½öÚÑ ,ưưïH‘Yâ™vâ‰'j­³ë®»®4©¼Êr}|€#à8@7pĂG7Ñ÷s;€#à8@àÁŒÈËBf³Í6ó4WÀ²Ư]Ó)®ÆWèëuă7F¯¾úª*Ó0|àu[V²ˆ2¤¹â±¸9ó₫₫÷¿ >œMWl* ­ưç†Úx’ê¨Ju~‹ơAMŒm¶Ù¦T鮸jVè|ÓM7₫ùÏFx ®±öơ£€#à8€#Đ |³éktG  à¡÷駟ªÀ]m=¸o¾ùT±UÍ“ÜÆA8üñÍ1ÇƠ†+ä₫÷ß?ú׿₫¥ơÖ‡çæ믿¤‡²ÜæƠ°Ë VÔ/Î₫đ‡…È®í˜O™R\EÍùmµƠV…§‹̣›éϵµˆ²>ñÁµ£ÎÇ£>ª†OiÓŸ»¹z7|TÇÆ`ôXrÉ%£—_~9z₫ùç£#FØ¡B|’î ĂigÎœÍ=;:th!æ^o’u~÷»ßEwÜq‡^›É“'Gû�n:ùÎ;ïDÿùÏô¯Ñt£ÔW‚Ÿ§ß /Ü6ÇæǹHkF8xbŒDFÿđĂ£)S¦èû|₫ùçöØc~½Ï1¾÷̃{º&?ëâœsΩrJ8—¬¶¾ÏpGÀhñÑ } GÀp:€ÀÔ©S£å—_>ZtÑE«₫!ă‹póÄOdIlÚ>üđĂu…”,­_§@ˆChKÓú믯^™ơÖG_đ$/´azøᇫ˜3ßÉÓ}ươ×kjOs•Ç+ôơœÊ”âU=ưôÓÑF(:&L˜Đ6¥Í×vw 'T6ĂGÑ›s ¬Îï. ưN­CÀ ơ±DiKÊ;}ö\¨ß+?-˜ÿ̉K/­‘Sü~®¸âüLn€3ÁøN ¦8 úâ‹/¢“O>9zûí·8jíî¤;Ăp¹ÜrËEüăkw£D̉–>K-µT´ÓN;ƠíÓßœ‹´œk­µÖ̃zë­d(®?‘›8Íüæ7¿‰8âˆè÷¿ÿ}&_tª±ñî»ïFË,³LÂO_₫\d‘E¢yç7ÂPµêª«F¯½öZQư#à8€#0pÜđ1p }GÀp:‚Eơª&ÿôÊ+¯vÚiË9œ`3ă„ự²Á‚Ú¤w¢@tZ°ÅûỤ̈đăƯ˜Efô Uè˜c‰>úh3«ÕöáƠøÑGiÄÎFmTè´Iyö•ó)[+°9묳Ô;tơƠW† –ü̃Z‰[^Æ"•œ.›á£h5 ¸'P”áuÿùçŸG<đ@^n“Âσè-¢%!̃¯NÙX¢>X•9Gñ=}úôL™́Ơç/φ½÷̃[Z:Q蜈iøFˆßĐñÇ_$¢­Ị́ÿØc­Û§¿ àù³₫qâĉ}aëñÛ€ÿn”ˆv!z>Âk65·sGÀèư{³ơçL̃ÇpG eœt̉IÑ /¼½øâ‹úGº&₫(îhùÛ9a₫?P¾QØo³5ÖXCS69Ô<4rØúê}f=Às¿ưö+TfKs5zôḥ©·n?̃Ê–âêƒ>ˆ®½öZ4ê…hKsE< #à8íG£)† ¢3üaè@1‰g²ymưö·¿Uà”¤ !ỡ² .¸`û'›£3d=Î<óLM×óƯï~7G3­=–·̃z«§¹ª S×–-Å€₫ùª !]Ř1cJid†̉â•…̀đ¢®–’.¯ëµtWeSØvoSxZ«nÎ%Ïç6Ă¼5Lqœç9§çF©†x~—-ƯkEÙ¿̃zëE(t–¤—5‡#đ¼á†̉'߉ö8î¸ăô;Ñ)¤˜j'a(Æ0óä“OFÓ¦MKäÎi2†0RTµ’Æ „±Ådû$-Q{¤!Ă0balŸ:€#à8­BàëêV­ÑÇqGÀh; &´¤O†0ờ3Ϩ!/NèôÓO&M”D |ÑŸ0}3„ă XÇ+ á˜4/RPˆ@¤x€ªE7₫¶ÛnSoBêPÿx…V¨YDÜC=ưùÏÖt^Ÿ|̣‰F¤ àBp3bl₫X?Dªwü!´ƠJÆzQ^†é­.¸à‚hÛm·­8‡Ë>é‡̣“P| EÿøÇ?¢UVY%Zh¡…ú`ÇÜX s®V4¹ƒ/ăÖjgçÏú$/3çBà£j×"«¯ïë Ü“û́³¦ä!Ù¸qă o$ •EPQîŒ?¾ê=̃„;s3|”%ͨ™’m¡sÍ5›…! œC(óøm₫yÚ 8P8UGoṽ½<á'IïS}äαtW×\sMtóÍ7+ŸGêĐ²¼UXèüŒ3Έ~ưë_·eyœ‹Èê]vÙEk‹|đÁÊWf ̃Û̃)đê{î¹gE3øBRPáØÂơà£n ¼k¯N{xtîKÚó¦₫¼ÿÈ‘#µ̃m8/màKù„O…φ8Î{€º(lc܃Ïå|á»"œ(ưéCúdµc?çÊ"úÁOĂK“¦™3gjM.˜'Ñ+&“TëK¿ûî»/ºưöÛµ ×ég?ûY´Új«ebI#đFö1ă×hĈjHc;$xỹ?¬\ÓÇ­-cévàHAx¢€À1‰¢㦉öđ₫£}ÖơN÷ñï€#à8‚€¼”œGÀp €À¥—^ÿà? E,‚XŒ 5gưØcÅ’EÛÓGRaiûpa¶ûŒ#B[,F„¤}ùA¼Ç{$Ǥ aÅù…!wƯu×X„‹>}é/¡í±xHVôá‹Ôªˆç›o¾̀>ô³9Á%¡'³x0Ç’b@Ç̃pĂ cñ`Óv†sÅe,ÂB̉ỵ̈Ë/É3Ÿp‡qEÉ‘ô1,øäœO=ơT̀¼ W_}5cH̉V„Ñp¨d[RSÅ"Xj»‹/¾8¡(9ÖèÆرcc1vÄ;ï¼s,¹îíæí:ˆ€=bQ.Å¢ ‹_z饘{°ètÉ%—èï[ÍÉï­èkª7Q@èoUŒ¤ơæ¸(’ç”(n 3o›¨(‡ôùËsX̉®Ùnÿ¼÷Á“w‹SmÄq!–¨ÛX”˜ñ)§œR»qâ[ùx6‰äËñLû75sGy¤̃×đÂÆ#öo´Ú½$̉:y¦B:£@Ÿđ́W^y¥¶ƒ@,é¥*Úˆ=̃`ƒ ’qB~S”걯h/JïX̉´j{øÑW^y%éËN=ơT‡Ô¯Óưđ§đ©ï¼óN,áyà‘‹}b˜ˆ%[Å9ùÏ olưàË¡p\öo¬3₫qÿí¾ûîÉܤ^_E+Ö÷§?ư)9Oæ)Q*ñÇ\ч/à ﶷ ‹a£¢s•”ª} Oëĵ2́áÅÅc‡*>¹/ÄP¯ă¡&¾êª«’ă’â+9ÎíôùèÄ=e×RÊ*æ›Ơ>9‘o8€#àÄ}MẸ́´urGÀ(>+­´R…̃Yx …„×_HÔ‹ ̃ iºâ+¢óÎ;/óă.ºè¢ÑE]¤eé¾|Ç#n‹-¶ˆ>üđĂä0‘)„á‡ûđ #ÖYgơĂªU«ơÁ8xœ¥#=DøĐ¹à}Uˆª o,#/,đ$”Ö¬Y+ëç'XÀ o<²ôĐÆoÜt€zª <È‹œ¾†ésú÷Î#p¤’»đ Ơ{đ„N5×¥Ơ@IDATˆ‹u5ÏÇÎÏ®ÿgä÷‡ávÛm§Ñ`ư©=‰X£•N¶Lx¦Ú³çXÑdͧ»jÍƠ{ă7t UNµÀÛÔ@¼ÇŸ₫ùÚs|ø­·̃ZßSđwe#s*tNq¢ <üI+•&¢.,ÍÏ_1d$MH›Fä‘YÄ{—´µÛl³MÖa¾h¤Vü"÷mµmD2~øázæDƯÀ4!üñÔƯ¢p¯¨×‘n[ë;ădáDqèÑ´?ÿùÏ“!øƯÁƒCđ̉D[ÁƒSÄ̃ˆw6ï̉…ưØGD «Ôॉ Af2‚—#¹ˆ²8đÀ#d$ˆsøwˆ₫àÉ5Jë°w}H¿‰#Ö ³cé~œïC‰vÛm·ô!ư.F¢ùf6̣€#à8 nøH đ GÀpÊ…̀¾xu%uñiĂG¸bư„“#8@¡áÙIç{®¦vÿa_̉øP Đè‘GQa@ 4d\<¬ôL₫ư÷ߟ'NT!„ƒ#a‡¡G€8öØc!G"M"₫Hdb4/7€²ê•`P!L"¤¶v*¢4«–θáÜèƒpÅ~„µ0 a‰9£Ø&m–"è€C/¹Äè!}‰̣1lSo{ÆŒj\B(CĐF 蔸?Ë–â tï½÷^5̣±̉ Öï‡6e ü†ùmó,-™©ˆ†®ƒ¥»ºóÎ;ËtYº¶7|4=ï\E7|À«À»±x?S7D₫[̣œCy_{Ưu×%JèVÏ#̉a‡¦ĂÂÇg~ŸS„i®À^¢«´ <¥)ÑÙÁœ%zBSHñ₫‘È`m‡‚ư¦›n̉TLº#ă}1\ÀgO˜0!£E¤ég᧟}öÙä¸Dh(FÔ$5'Ä|áÙáăC‚>묳tç#ÅW!ƒT#Œ*-¥Ú`h },¯_¿×^{éwŒ+½¢ó#­rç…̉pƒ·†¸&…®Fæ̀1{o ¯lµƠVÚư8XAđ5́Gal®%² Ä=DzEṚB̀T]XQ71$®¥5c.œ›urn~wFđ̣8X3)±¨;1&ièH³[¹̃Ơúú~GÀpz zqGÀ(a*KáToæYiŸªChº¼ơÏ̉K…ă§SRYª+BÍ »¶¾¶¿Z_bạ5 ̃Î)̀{f;.‚A,U:¤E±í'\_„–đTq¸f›SúS¼­*ú¤¿„)»-å`ºIEê,BäEy‹ “ˆóz.ÂVE?ñ®ÔU—Ⱥ©*:ơEvjª,R)‰`”ƠÄ÷u2¦¸NQè½Kª6QÔtáÎtxüV%ÇzçNÚ¡3‰w°®-L½Ñ¡S·ä4¢¤M̃9¤ q–̉1f`£–³·( c1¸éưGÚQˆv¡b¨W^yåX¾±Dvµ&.ÊäX<í5=̉+®‹R»Vó~#•«ñđ!ßÈ=bi®Ä  ©̉8ül:E¼dHa_̉¤̣†X‡¥[â¼đ¤² ‰9Xz$R]Á£ÁÓÔ°đÍFđÔđÖK§»bn–æuBÖ(́'₫X¢5bQđWüI”rŒ `8e#LEz_d–4‘¶ ¹₫ÈÈ!đĂöÎNÏÍú‹797r÷¿ơ£DfÊ*R¦ñ´9Ó ÷§1äx¸K3~aJ-ÆJ_ỏ×’Z“óñ»„÷‚ÂkÉ1Sú?GÀpT7ÅËƠÉpG 7ÀI˜o],^I¤qÀ3)$¢$đZJIx)AxFeE^Đw₫ùç×4Q2Ä‹*Lư# }tÎ9ç$̃_v<»ÇƠ¼Á́Ÿô“·\¸«¡í_üâéµÂNŒ‡—̃VxSí´ÓN™Ås‰ˆaMa€ç–y¹áaÆüŒđb#^{£ÖÖÚÔû¤`%Ñ4\+OsU­Î¿§¤)®Ä˜ƯvÛmzïâEÚ ÑÜ=æ­Y¦4Wö«À‹ ŸQv¬ŸK.¹¤™f®V¼¶óÎăñn†€<ƠUư+DÄ÷< ¼Œ¥Ă«ß3-ˆ< RïôéÓ§'|`₫fÚÿÁ·RèœOR“Qè¼Ä{qçwÖ¡Á3Lă?ii®H‹E Lˆ("Q R!ƯrË-}øBxqR,ñ̀†÷#]jïåÜD.¶Øb:V3ÿ+|ˆ±AÓ,1|́ÙgŸ Gt¥¹ Ób% ¾Ú`½RŸ#cOÅ2BX̀œµ‘&vèĐ¡É– ₫¾‡vHÙ¼7<8„üN±vĂX ¹ ®Ö‡OÖƽÀ'ü:$ÖGj Fbp›ë6Ø>¼b?ü<ûÅh¨û¹Ü[úè$…퀡0ͱ­[6ø¡ !‘º%i©Áa¼Y(k+ "Ơ¿q #Ǵcmœ¹̉ Ë-·\.æÓÊI 8B…W+ÇïÄX(‡ Ow50´1¨ÛûË a ¯"̃Úªˆ.rx¬Í7ß\StR§Àµ¡PŒVđµpÀÊóÁ§’ƨƠO÷«_ưJ‡…· Ó]ñ₫´÷ ü¬¥H‚Ÿ³çm<̣Hưn¼¦}âTÂÈ~¯ö)a[AÔYuƠUu(ơ0́|̀Á̉\Í9çœIZ¬¬óŸÎ=÷Üö̃±ö8‘Ṛ²Ë.Ó]đ̃öNb›Ô[†}"_đwúé§k憆0%®£ µ3H]Kʪ‡æ·0dÈkZñ‰1Ẩd1/ø=ˆñ0B\sKK…Á¹âYAº\ˆkŒ̀‘î‹”¾È¶6>Y©Ê Ú₫lCœ§,'GÀpƨtçm¬·rGÀ(äV‚@e.|ºÖ¿Z;ô1 Å€g‘̃`k­µVEñrïPø>øàƒ£ßüæ7} .ác…Vˆ$ÅF• ¸!¸l¿ưöZĐ<7m<“PÈ :¤¢X;E(‚?₫x=B)†3´ ÷ÇđqơƠW«!…"ñŒé”Èïç/‚>ù¨ñê,ñ{¡đ-¼=÷ܳ_÷mQq0EU#>L*ÓvPD]rÉ%‰"©hóÏË|ßøª°ù<ó̀£^çy™Wç”ÈXøŸ">àç¨ÁF]”®<ëÍ ˜gü›ü…ΧNq¿£ü6e{³cUkÏ=aÊvxH¢ ø#’C̉Çj7”ëđo¦p‡¥ÆD46yˆ`C±Îó^₫^̉bEEQÖ£gÜÿÈ Y„QHQ[gØl$%W´öÚkkQp0¢ ‘ƒ7¢N_XàÜög}"Ă„¿Å¬s§ûÁ×Đù(ŒØN·ƒŸ“t`‡>0hÀïiĂïÆ"Nˆ>' lïZ«ƒ–<3 Œ#•øsrGÀh/nøh/¾>º#à8]CÀü6BĂ«EN xÀ̀CđøÊ"¼¿B£@V„„ˆj„`J¼®BĂb‡ÖŸH‘â)+Ư•µËú$µJK€zè!Ö$?°6Çë’#8«»î#%UÚ6F¤È¸afnx„qR ø†i®mNáXµ¶QÂ" q0.!x:å0Å̃(̉Â|̀´ùYđÛĂ;åX/¥Wăwm^Áe6|„^¥ÍßƯí1J¢!³¤EĈíÔ<føà¹åÔđRđ¤|î¹çë”ÓV–îjÆŒ2~>¦l]ê}D×^{­*±Í‹¿Uk…$ê—ă(Ơ¥>…*½-Ç9Và ÍxR­M-}µ>Íî': ܧv¦ˆ2%}˜«Ù±á¤Æ”Í3–÷É áxđ¹K-µTEôCxœ>_FŒ¡r<}˜J+l›µ]O±>8-…1“qx² 2Ă Æ dæA;®'F’,2ƒKÖ1öq."¼›•ªçûGÀèUªk¦z_·#à8%Aà̀3ÏLBăîjy “§ÖŒ„]¯´̉J™ä½±̉Paœ`¬j–t{ûNÚ#8Bÿ%?‘<đ€ ¤`@9SËxcc…ŸB4ßQLKṇ̃è£>RaÚ"Ơ"JPl€GVƯ’đ<émŒ5D°–ûî»O#NL¨ă\†uº_­ï¤¹B₫éOªy}]ª…Vç•9Ũçw̃wüfđízæ™gt©üVQ̉”,â£È† Ö(ÅH•Bº7|ôï.uĂGó¸™áƒgdèẽüHƯị̈uuÖQ.3D–6éÚưUÔŸë\o½ơÔđÿ ƒp†ieô,cơ‹q₫“O>9Úf›m’4Wµ <“y–5ËoÖ_yó-08ØóỔ]í¿ÿ₫j8b4 8–«ùÑ¿́Qf¤¾%‚¢"rÆ¢gªµ‡Ç‘§Œ{¬>Ÿß0rdzxk®å“O>©ẶÛ§ˆF ̉é >kÖ¬$ªƒcGy¤5­øÄ€Ej,3œTô/€#à8-EàZ:æ8€# ˆ ‹…ă¹eơ-²&ˆ‡’y>]ươ¥năp`)±́ø&›l’¤Ç z£adë­·V"yi<°—]vY×Ă?œ¤ËÂ{ å>f¡¬5o›C3ŸcÆŒQăŒEL`¤ÀĐnX/‚LÍ=[•ǹAÇ ´;vl"Lc€Bđ±4WưIĵÁ“¹x«¬«Ñ½}eMq¢7Ưt“¦¤@a„ᣢ¢{W¡ơg6Ăé<́yĐú³toDó@-²áồc;LØ=T‹yf7|4ỪđÁ»%ªåüo~¤|ô€ïBAAÚ²ë´BçDê´ºĐ96(»ṇ̃ç̃@O ˆ÷'/!a(±ô°đÖ÷~Uÿ!lĂ6‘ä…]b‰%’zé6­₫Ö¯à₫&z…÷̣Ü…/Áƒct)4*X…É&a;á”ÿLÇI=¦÷ß?"Rç.Œ}đåöDx÷ƯwÓ]ô;Æ #Fi‡ªÍ6ÛLsÔQG%ơGÀóá|…̀!+!3eó\c5TÆ -›“#à8ÀÀpĂÇÀđó̃€#àtñ'©—̀ó ¯"Sô‡mm3bPöc@p /6˜ñ4Q́æÂ#ŒH4ÁÜù@^_r#l H!$đF§„}Imeó ÷Û6rƠp°6YŸ¤9½ê0L¨ÁÛ+L×uùå—g*5¶Új+¬˜?BQhø@Àµ[DÉL›6MñDF(nvÎx%R€¡«Öµ̀Z¯ïka«N8!\¢W †ñƒ'†<~Í̃·íA½3£̣ „ʘæu•!âƒu˜áƒ4$Y 2Ú8ƠFÀ µñÉ: Ÿ@Ál̃ơD}”!ƯƠ¸qăt-3gÎŒṕ(#ñkw¡s¢P~CÜđo¹Wp| ^Îa(Â'NœXÁK̉…<†]" qj²z!á8íضúÜë̀ˆcÎT­&ă¡1Áo@È đàiBÁ Èd° £+8ă³ÇG'+„%rePá5FÊªĐ¨‡!ç7¯-R—́¶Ûn‰!…«(₫Cå–iđ¸ä|(©£ÂsR;PH²9²°GÚ BHpPŒ2O¶Qx§ 4(ÂÓéŸFÍ’5%c ,°@…ĐỚX̃¾5 SỘóÏ?×°(Êdâ·Á’ßƠ„ z*Úƒ;¤W E.nÎu ÷ï¶NÍ#à†æ1£|é€xF†ÊÔ₫ÖƯ^ü†đ¾'UiÙ£>¸n{íµ—FOđÜhµG=|ÀèÑ£ơ‚¢GYNTÊq₫BwŒëV׃ç1|¸EéJ]hÎ9çT^<£]ÛđÛđÈđ¹Á¹X|+ YÁääxp¾›¢ôÈ̀ƒvÀ‹9ÁwĂÇ›¡~´%mN``ˆA†HŒ‘9ˆÀ°ˆÆFv±>ÈÈ-Ç{lÅơÛwß}uŒđ̣ÉñÇîRC̀¡‡Z±́pDc¾M‚·µüñÇ:¯í·ß^‡Xèÿç8€#Đ?ä¡îä8€#PDˆÅ£)–§}ĂO<ñD,ByÅêÂqD±KdGr|Ă 7Œ…1oh|ñ D ‹‘§…#c(Qpèo_cÂMÎR¼hu}’Ê«Éùk.†y]‹¤-̀ßär>#ñ.Öw ï71öå|¶ùDzÆbđÖ÷À¯ưë|M®³Ç–ø”SNÑûA :±(‚û1J1ºÀ÷^wƯuúÜcB,6-8ïL̃Æ7L,÷ªçCG̉Öú¤?Å`‡Ï8®×I'¤ư$-U,Jô>ă‹q –úÚFœbqJÚ¼₫úëº_Œ:×ä@°!†˜X ÉÜàµÅ´øzS¢̀c1i[xô´́ñuË/·Âöéq‘̉¤¿saF\Wø₫t»đ»›b16Yå©o½ơÖ}è/Ñ!±8’%ửÈDáy˜[Á+Q¦¢mØ϶‘CŒj]KkăŸ€#à8Ùxć¼]œGÀ(x3á=Vˆü ÔpéW\±O¡><đä‚Èá‹Ç™Eù ÷q 5ÆÄ ‰y¤‰}¤±" oº,£BtÜqÇUx¼ röÙgGxKU#́´p`è)GaJ"Œ˜Ÿ­ƒư}aQ"Ö.ưɜµ†Q„¿³f<®²h•UV‰̃‚ëC† É:¬ó!rÆæ‚Y5l2øj'‘/¤#R¼đsê.eOq…—#̃‘¤»ëÅh1¢j î²å–[®»7[›ÎÎ3 =yÛtª¶k©bHâÔx‹ˆ¨đœvjø(¢$ÊñÁªá-đ~'Ơ‘­e₫=Á—Y¡s¢(tN¤K«˜H#°µ(Û~·²_£ Âư¶M¤)ZĂ!ȵxgúrÂóCđÈđüi‚/EVÈ"Úo·ƯvÉ!Rv-“EéñëÉ+a½ ̃CçŸ~̣,‚ߧ₫^V+ÎÍœ‘7Äñ¨‚¯æº1B#6íΕùSp̃jxqŒkĂ½ baÓm"Ô©EH±ơjV?ÿùÏơ°E”dµ"fˆTGÈ"ä"½- mÂk™ƠÇ÷9€#àTGàØCªö#€#à8½aßÂŒÜPÄ£Eé/M}à!¬œ´‘'„tc<°1út„¥Sˆ°v„?̉‘‡™p„đ,âơ…q!‚óÔ²²Æhty•Q†"x̀;ï¼f ZÈ|Í5×hx>iX† V‡¬ñH÷uÙe—Eo¼±~¦Ógeơñ}íC€W«­¶ætç÷@ư–Fî…öͨơ#SüU¼D5Í)¯PôQÔ##9Ă-ư^ÙÖOÍ¥Q’:kKô"9ï1~đläưQíQä5¶kî·ß~{ô³ŸưL¨¤Yqjx$œ0H=Jêx¢¢¼×;́I4®¦Q2eJÑ—Tu₫đ¤C"•+Æ+ ¹Sµ}§đ<~öÙgơt<Ó¸·à;»A`?/QE=)0;IüÎ̃{ï=}Æ#O`ˆ€ï¯EȤ¯å¹F[ jÉ"œ‹ß1ôç÷€ó)|ÛAà‹ÜĂ}ˆ /¹đ ×5hµc.>¦#à8eFà›e^œ¯ÍpG q¨W€á–[n©(₫Í(Ô÷@Âè—cµÈ¼¸$›!‘fs#$dEŸ4s̃FÛ"ô4+ø 4Iø¼=8Ïâ‹/^SàÊ F$®˜£\q…^JƯG¾m„p<% AŸ:.MëÏÆïüâ‹/VĂåøñăûU“¦ơ³ếˆVßcùå—ḯ‰;x63fñŒ):ááË{ %J¹uÖY§èKêØüQđAƒ=ÚCqhæŸE| ¼Äàfơ¿#omá1¨GÄÑ¿(áĂhÛ¼Íw ó‡´BçGydDt1Q(»Ià½Ækts ɹqô˜:uª~ÇøÏÓiÂà‚̀Á_3„\A’°–_½₫œ ^¿N÷ Q;y¹̃X³ŸĂpn đu~“nœƯÏé8€#đ\$lœp”í„ÿ¡Äßl³Í’‚‹'N,­0lkîï'XAD'"º̣Ê+û€ç¹»$¡̀©{Ü{ï½éшf4i’* \ËDÓ§O×ß9LRÛƠóª,ÓÚm-fø èlYÉ̉€àéŒr«È„ÜGeNÏÓkä†₫£Ê³ÁT^¨,é®à10¢,Æ(Jº2ï·v:/2vÜÓ<H9ƠđáĂ‹¼$Ÿ»#à8@"à†½đ¾lGÀp̉àífù‚©uAí ä|F j‘ô# Œ§\J#%F "¤ Â{’‚ëư2Z<øàƒ1²É&›ôËp̉w†¾§¿ ̃{ï½Ơ«|£6R¯ØjQOư=GúưáĐû–¼̃ƯJ¯Ñm,ÿw/>Àº u>,÷º>ûơ Ø„{ćâĐ́?¼ÊITĂëǸơÖ[«ÿ+®h’µ'úíÄOÔÈZ€Ễ°Ñ Cz(§Á,ê‘Q8}89€#à8EDÀ]G‹xƠ|΀#à´R)ñq '¨"Œ´ çœsNŸ3Ñ&«¶GŸ†=¸å8i/B¢6†£₫Đ;î¨Jh oRÜÜ©{”=ÅÈR÷aÖ¬Y 2i®z1ÚẶ‰B™ a‘[ äL/2Ys Ộ×Wäuµ{înø–îêÑGƠT -½-ƯƠ駟Q›lö́ÙM§"ÍÇJ› ~œSHăôü#qj¬wùZá°óøă' Ÿ%–X¢fa櫓o8€#à89DÀ 9¼(>%GÀpº…À¡‡í»ï¾ßùÆoL̉]¡Ä0B‘?„ §lHqÊ)§h^l¼&)nnQ4Ù=jï]yå•#₫œº‹@˜âề3ÏTïè²¥¸a (=6Ø`UtÔ*ÚƯ+̉¾³Sd”Tf\ße–Y¦}'ệȵøăz—!âcÅWŒHßÅZ(vN”œS}ÜđQ£Z-0|đœ(SÄÏ}ê)¬´̉JZd›¨£>º …?†±g¿ưö+ü:Z±‡Sß'îkj(y«V ëc8€#àt oˆgj¥kj·fâçuGÀpG gà=¾Új«EÏ=÷\4zôèhÚ´i¥L;öúë¯GÆ Ótm7Üpƒ?zÑȉ’4_‹-¶XôꫯǽnlítPp‘ÖäöÛo¨!Tt"-ăµ×^«)é&O\ôå´}₫½0Đ# R׆”MNÍ!€b˜¨N~?ƒ ̉úHexnbüÅÈ¿ÿ₫ûkÚS̃yœGÀpGÀ(^ă£hẀçë8€#à8C R\æ¹ç«^Dw9²g#»¬°9Ñme'+p^†ˆ®•¥»ºóÎ;Ë~éZ²¾7ß|3IÍè5>ú)Æ€¡C‡j„Ø_|½ụ̈Ëư(g½¨_5v́؈H̉z휜] Ÿ#à8€#à4Œ€>†Ê:€#à8@/!¦¸4iRiS\¡ø&̉/ß=÷ܳ'k{Ø}m†2×÷°µáăoû›í*ô§>HWöÁz-˜¼¥¹"cëPuby?űüă—*Ư©₫ˆ`!Ê‘÷B/9Ïû}æósGÀp₫!à†₫áæ½GÀpG Äâjï½÷>ÿüóh£6¶ƯvÛ/Ø2̉e—]}üñǪèÚrË-ƠË·ŒëldM½hø(KÄ÷ÔY‚î¸ăF.wO·1ÇG{ ́6 &†Ơù %TYÈœÿûßÿÖŸ}öYY–æëpGÀpBÀ =t±}©€#à8€#Đ½’âê¿ÿưot̃yç©Wï®»îÍ5×\TÂṼzë-]Y/E|”ÅđÁ…[ươơúyº+…¡æ?7|Ô„§áƒ¤»¢x™ œ³xj•E…1ñïÿ{tơƠW7Œ‰7tGÀpG /¸á#/WÂçá8€#à8¹@ WR\öM7Ư½̣Ê+ªäÚm·Ưz:ÍƠ3Ï<£÷ßÿ₫ïÿF‹/¾x.îÅvN‚=P™ –îß°SmÜđQŸF–ƠđÁú¿ưíoG[o½µ§»jôfđv€#à8€#;Üđ‘»KârGÀpn!ĐK)®ÀøœsΉ₫ơ¯i!Û…ZH‹ôv ûnŸ×̉\á½·sÙÉj|”Éđ±öÚkëe£p÷K/½TöK8 ơ¹ác@đ%ÍđÇqôöÛoG¼CÊB¤»7nœF³̀œ93={vY–æëpGÀpAÀ =r¡}™€#à8€#P^IqD8<đÀªÔ0aBOG{€‡>z!Íë5ĂGY›³¦…^8¢Öä鮆ªÿÜđQ¦Păƒ1ŒÿùϢ矾©₫ynlơKVZi%úÈó…̣¹9€#à8@UÜđQ?à8€#à8½„@/¥¸âº}öÙí±úê«GÆ ‹đ\îeêUĂG™">¸-ƯƠ]wƯƠË·s͵åơ₫ûïk/n^ª†’oÉ%—,]oEÎÿßÿûÑôéÓu âGÀpGÀÈnøÈÁEđ)8€#à8@wèµW|đAtÍ5×Dÿ₫÷¿#öø̣̃{î¹çtc¹å–ëîÍØ¡³[ÄGY ÷Ưw_Dú!§¾ ̀°qĂG_|Ưc‘e+pßúÖ·4"¿üå/‘›½;¼½#à8€#àt7|t}?·#à8€#àä^Jqà^x¡æ¢_d‘E¢1cƨr+¢K“ 7ÿ§Ÿ~ªgïµTWe3|Œ92Bư׿₫5ẓÉ'»tGåû´–æjy找ûƯïæ{²˜Ơù(£áăßøF4hĐ hôèÑîª÷¢OÑpGÀp*pĂG%₫ÍpGÀpz ^KqE›‹/¾X•XăÇæ˜c»â}—ki®~đƒD ,°@ß%Üó½ï}OWU6Ă××ùPúü3ÇG{ô¦_;̀đñßÿ₫7²È±~ ”ÓN–îÁ›o¾9ú́³Ïr:SŸ–#à8€#à8•¸á£ÿæ8€#à8=„)®öÙgŸèóÏ?WÖm·Ư¶ôÑW]uUôÎ;﨧÷öÛoßóE͹ƯÍđÑ+i®X³¥º*SqsÖy/q¨öß Ơéß~3|>ŒÈ1¯e¢o~ó›ú›úáưư﮾úê2-Ï×â8€#à8%Fà›%^›/ÍpG ç @£$ =D5¢ æ|óÍáLÊ…jDîéÿüç?:Ûe*ÔŒrœđ&m”¾ÿưï+f´ë­·´/Ø,´ĐB5qltü₫¶c._|ñE„§1^¤Ư&R\½øâ‹ÑÜsÏvÚiÑw¾ónO©íçÿĂ₫ EÍwÚi§h̃yçmûùp‚gyF§Ù+i®X¬>x—Ö]wƯèøă|đAlÊĂ³&O»á£µW̃„w+ï¢"₫yữª³ÀqÍ(¢NÍ\°îĐđ ¼o™[£}j úío;Új«­¢³Î:+ºâ+¢_üâIózç‚9ÿüó£₫óŸ¼É̃{ïƯo>>ïµ×^«É?Øçk®ˆ?§î#€Q#;ÑBđ¢?úÑ<©pLîÁÿøÇ:ö€öGÀpJ…€>Ju9}1€#à ©S§F|p’[¿Ö́’®»îºh…VècÔ@àYc5" ¶¢̀{öÙg£…^¸Öp¹<Æ: ̣Ó‡DZ¢ƒ:H á₫zÛ(À/vNŒG(BLáY¯«³>› *ש›J‰0ÅƠ™g©Æ˜ZƵVăÑñî¿ÿ₫詧̉S“æ EÓ×½høÀđŒñ£LµV[m5UŒÉ…ñcíµ×öÛ<@%:4X ĐN­AÀ œ?ñÄjøXo½ơZ20₫3fDăÆÓñxón¯ơ®â]KÊ-‹`£uŒ̣¾µtW“'OfÎœÍ=;:t¨Î ₫bÑEƠ9Á{Á‹A<[xàßsÙk¯½jÎ_;güc]/¼đB²®Œ&}vñÛÿư£c9¦_ḉ3 ïè8đœp Ñïÿ{5 >̣È#6~¤Ç„¿Yl±Å*æÇ=Ăo¥Ö異ƒqGÀ(••̉-Ïä8€#gđ®oT!¢cå•WV¯ü´‡r£cä <(Q<©BÚ„5£fp²>|â —'ḷ4—^LqÅ=qÎ9çh´Çl-±Ä}Œl´é5B±HÔÔ‹†Ö]¶:x§c ‡îºë.ưô_#à†¯±hƠïîe–YF•ưD|´đ(đ¯¾újÍá‰9ï¼ó´  bô` 3́¬¸â}œW{·cx$²0Miçôñjß9x4CÔ´:î¸ăÜÈ× hmh˵kuDm­1yÆqœh§å—_¾ +̣!GÀp‚@sœCQVåótGÀ('tR´ÑF%XKMB.éc=V#X{¤KØwß}+ù¥—^ZÓLüêW¿*dú̉-·Ü¢Â†jF¦è@™‹¢ÿCi¹àYíüyßÏ=Ơk)®^ươˆ{Eÿ„ <Úă«›Ïe…(IP\ö …‘_>IŸS$lHwu÷Ưw«áƒß»Ó— ~ÿư÷ơË`øhÙmau>ˆrh¥áƒ Î1ÇÆê[o½U#?IăvÁT;ט(F#à¤I“ª¶mæ€E}pÀÑôéÓ£#8B50d \æ\‡~x2$F¢L¡VD$Ë mjTq>ß!q̃—_~9:ôĐCƠ‘^éă?®½öÚh³Í6 ›úvÀ†QoØ°aêÈ‘ơ<ăwÙ´Z†É§î8@Ï#à†¿GÀp̣̃¹x #¤„„¡ƒ|ĐÇ×Ô ´Ôe@xÅز’¿›o¾9́V¸íĐa5eÑÙgŸ­³Î:5ó[§û‘j©j:  "ơÂ`Q₫UĂ»²W±¿QÛƒ†°‘#G6í9[́ƠWŸ½6'U‹ «·.ÏRÀđ‡’´l\%+pNZ ¿½tmkƯ¥(¹î(Ọ́“ŸÔjêÇ@À đ(/½ôRRs¬‰!ª6Š߃áƒ"8„P3#ë½01Rơ$ ÀØ°Å[hÚ(̉map`nQgÍƠgsÎÀ0Â{§•¿AÖEJ;̃ßYD.ŒŸ'NŒ¦L™¢# 5nøÈB«˜û¸÷vÜqGư+æ |Ö€#à8@À @ÙÏá8€#P¼ĐMHN7FIƒ¢×rGŸ~úéêÅH¡Lˆ₫(P ĐIé±~øa¡¸"Bø<ó̀£ÍP€C̉YD₫êÛn»M œƒÖÔÉ:OØÿƯwßnºé¦è½÷̃ÓÔU7¶Ûn;ơ¬6…JGÎg2k€Püđ‡?ÔkgăâµX 'k“₫d\(fÀ̉ˆ(ö³₫˜ áÏ÷¥–Z*"­Êj„BñÏ₫³^0ÓUVYEs÷7EµsµrÿE]‘>ơ¥m­x&ô¡°ü裒ˆº2­¥•VR…,÷₫=÷Üưüç?/Ọ́ú½íƒxß¡8tj ¼GP¶óÎÆÀüÊ+¯$50z̃¥a4Æ ¢JÂ}vñ–ækL¤H·'  ơ0~ñ_k­µªFË~ñÅj8à~Á{ < ï+ræ3àS₫ú׿ڴôcüăÀ‡Û!_’t ø-ø kg‘À´aüz‘²Üë‡v˜>ÂqÓÛŒÅsuQ  Á…(–Z| ư>üđĂè’K.ÑOÚâÀCôr­:p¹̣Ê+£7¾ªµóƒü@ Ç/¾øâSƒ7äùe믇çgÍévàÎo{f‘EÑk¹úê«'’ºGÛ‹‹0§ûE‘Kj…q¤€z,ÂN̉¾üm»í¶ñ{́‘{íµ×*ú1î®»î‹`̃§/ư÷Ûo¿X¬>|aÁ‹€–ÙO±óÚO 8±k™íDPEđų3™ĂÑG‹¢Ï9«í` "4êø|¨MĂư¿ùÍoâ3Î8#9‡ácŸ6đ̀¡Öé+‚}Å5 Ï)é bŒĂ!}»œuÖYzŸ 4(EMÏT¼¡ÇŒ£¿Qọœ±(÷tíâA>À‘̣Ù}ÓM7Ơơí³Ï>ùœ ÏªTđNăƯ&Nq«S¢Ü¥(¸̃Ï¢ŒwÛm·ĹÄ  mxK„Eǘ³Ï&íD±‹09nïx>E)‹SG,€¤=đ8‡’ˆÓøâ‹/NúĂSÀ£XÆ°w»’“váy˜¼œícŒ,Eu,ÊymRà=†‡å½îƒo‚ªG|đ¶‡ƒgIç'³ù„Ÿb@ˆ¥wº‹~£K¼óÎ;göă\¬?ÍÓ†×0øàƒÉÜÈALd ̃f^…#FŒP´°_z›ëcDzöÙ±zŸ̀#=}ÈN:±j뤨<s! 2¤b"°ö‰P7nœFƒàµèÔ=¸—Is…§̣Zn¤{«jƯ™{=â$y––‘,ƯƠw̃YÆåùr†€(WÛRàœeÂûˆ³…®˜H̉]‰v¢ơVSƒ̀‡” }.»́²híµ×ÖïüƒàƯ 1–(£5̉È̉4Á6j—]vIJ¾3|c…óHÈsJG6àŸ&æ u°ñƧ›ÔưïÖ[Ió1D~ ,‹ˆ” ÅØ6ÛlSq˜ùƯ3ERhe×A N©äèóÓŸ₫4©½VD—₫ŒĂsx±ÅÓh!¢[Æ«ĂÛue>i'›?Ñ b́Ơ&DĂ-Œt{¢ü Æ|î¹ç´>F™£åß'Ÿ|¢Ñ¡bl³]ÊÇ‚v'xbr̀6à§ÿøÇ?êWÖf÷¬¯ơÉơ¡f‹#Ư–(R½2÷, #‚̉Ç‘ ¼ÖGÿî8@o à†̃¸Î¾JGÀpJ€ ñ–z A2-!82àÆoÔđ~Cẹ̀Ë/×}„añdS!!qÓ„̉̃ Àŕ‘GÑTTŒ}Ă 7Dâ9¯]îºë®è₫ûï×4Q́@ØG ¤©sIÏÅ'i ,Ç5ÊVR-ưßÿưŸÎI¼ £)pI5•6T L‹£†ñ#fư‘²Á0ĐI~ơ/-ô‡ÇØ–ÈM?Aß'Ÿ|²"%€xđiJ.Ú¡!M…Åkæåºx¢&é±HføÓשóPÿ†´+¤;áÚ„ÆĂÎÏ&_gäyaéóz1Ơ•)ƯÊnøàÅsÓÉh'(W14¤î­8'¼|‡ưfá}B¥>çàưki®PKD‚̣¼«I½iF ̃đ¤â]N*#—gAÚ0ΟyÆ ̃‡ôIi₫ >¾ >CăĂ À ‘’ˆ¹ÀyÚ´iºmÿÀª–®‹yàRX3iCÍĐĂáqŒPЇÆæ ?E?æ$‘-ÚŒHYJPˆcđ’fØÁØ¿D?æmƾĂa\`Ư×\sZg újŒăàV¤‚àkq6XŸíg¤ ‰óYmpÂĐË'÷ï|3Z€ư©§ªóà|/¾øbbááTT¸¾¤ï’H¡èÑG$BR›bă`!qư%ÂTw©Ưsa›zÛ6_R¬Á KÔJ̉üძK̀-l#Q'­èµ«­Ù÷;€#àÔA@^VN€#à8@Wh6Ơ“ÜpĂ c̉<Èë-I%B^L8=ûÄ£+ƒ‚®Çö±_Æ>iî¸ăx¾ùæÓ~´±TW"„jÊö…ûC¾RÓ"ÅÓR‰¬aÿa?“ÔZR·$9öe†¦t°~á1›S­O3SZY Æ3ÚÙ8‹€i§ÔORKˆà­mÂ["<ÆsÎ9§îÏZ#ḿjç ÷WœÔ¿´‰zE!‹1/–ÜÜ-¿È’b߀(Åú<¼®Fç.̃ÀÉï»Ñ>EkgéEYY´©û| †€(eă /¼°fj¢,‰w4ïjY¢à¥̃BÅp¢ÔÖc¥s,|=.J₫$)«à)̉$ ëä½M_K¹$ÊùdL̃#¼ỎdmDI®)́x¸?L3% û₫‡yCÓcY>Ăù†éºà[àèǹHƠÇ{-ư·å–[&k±¶áùG ɺàW˜SHb¬Đtô×bL U©CvÓ÷Èu×]§có^!UVØ'\OØ1Ä₫ >‹Ôd·ÜrK²̃p ôMădi Hï%FíGÊ*xí4‰á&I[E3ø^èơ¯R]±næ¿ƠV[UtåăNw†–æ*}/ˆA-IaU-Ơç̀/|‹¥Ü’èiMÁŤy¹ÁÉpG wèëâ*o'GÀpG è­7„E@ñ„ iƯu×Í,îWÅ!É—œY¤’¾óÏ?¿z;â‡gz ’f‹(a3ôÿ† ¦—Œ‡9̃ti³/́“>^ï»ñ}"Eêơ¡@i:MEÊÓ˜1ÅR‰¦ăO4|øđ>kÀ£ĐæÏ\œº‡€(—4"‰ß„ <Ú#u),ÍÑUY÷zªyé¾â‘ á¥[VZo½ơtiW8?ë"â^Cëí€÷~+‰w´Ô&Ó!áHqĹ >- ï™Á6´eQ#VœcF¢lDa¯_ioÛvœO"Ä!"ÜƠđvøŒï!%¯À±+¼ú-}m-]Wx2Ö+~-N”løßH[¢OÂơ±&1.ôácxÀĂÁĂđ₫$’ƒs9¥(é5m©Ë'ưF©i¬8NZPëĂZœY”̃‘"éç{ùå—5m몫®ªû87ï+" Œ̉8‘& "ÍÑœOŒ Ñ;́`]’OøW"W øѬh1Gb4Iú°Á9äƯÆR÷%9N¥¹"½+i«%®Uz¾DëXL³ăq•5¢±Y,¼½#à8½@¥¨WQđu;€#à”Q£Fe8Xôî»ïp ‚ѽ÷̃›Ô» >DjSæÛwj{ ŒBv A™T\„Ú#RïÁyÇwŒvÚi'5v Ø „H/Ù9ñ0À¬¸â˜đxÖv5LV[ö!đƒ)„‘ƒt䤦¢¥ÑSO=•à*´ƒÿë(çœs*JH—Ñ ÅœÓטá£Ó\‚>ʬÂđMmRµ89íDE3i¢0P`˜âÏZס•çDQÏóg r̃»<ÛQ‚[+‰êĐÚfœ>Á̃ĂlSÏtibîâU¯»i‡̣<$s^”Đ­ x*‰$Uå8sgNulMœ#LוuNæ$Ñ Éú¬M¸fö±~̉s‘R Æ3„«yä‘Ñđ}6üaÇ>Æ5bn8dµ;HcÑgö́ÙºMŸ,£y7¯°Â Ú{G"I¢}öÙGñ&-ơDØOÊ­QÂN7×Ä̉x1g{³M¿ôơ†‡s3Zd]oøX NéëÍu3c ̉PI‘yå ÁỂ\aHÛh£t~₫³s6Ú̃Û9€#à8 à†FP̣6€#à8¹A%;B+„‹—Eä7¶v(ªµC8K#ß5&„`)i²N‘¹7úXÔÂàgœ¡tBy€w"^æîÍ‚*ư [E¡`ßè˜xH†kl´Ÿ·ëæ(€ËïÀ£=²q7ĂÇrË-—Ư ä{{Áđa9₫©å‚5ùêv!À»yÉ%—Ô đ+´n%ÁÏs̀1ZÄG‡I“&)ÏA$€.˜ƒ¤ÁJN1àK‚×I£6úĂ+T–9âBTs?₫øăƠđak¢J÷_ưêW™C €gí²ˆ÷u5¨×a ¶…EäPÏ€pûí·ëŸî¨ñ¾ĐŒ đa„oµnaûb³ˆñà!æʽ±Î

H©ƒ"¥':7|ôẫ¹5Ă“à)ÏưfÊëV‡µÖZK‡Délé®ÂtJÜóƠ"K-r£₫‚q×\sÍVN»ÏX(úI‡ïÀ\HÓ…ƒE˜æÊRbơ Î̃w›l²IdÑŒËï…|À¤̃yà¡°`{zœ¬ïàI”QµëÂñ0Ư¸@àD´ O ÿÈơa=¤ßbî¼ăÍh¢ ƒà€“M5#cb 1bDĐ«ö&×đ„×>í´Ó¢ßưîwỊ0Ví‘ü¨#à8€#Đ~ÜđÑ~Œư €#à8-BoFÖñ6«åmG>`3FP‹b¥•VJ̉º„ÓAp øá1¶yäÍ-Ül ”›m¶™₫!øEB̃ỉX=<Q¼Ö„ÓóéöwÖ2qâÄ3ÖƒbúZ°~§î!€íE]¤é,Æ_Ơđ×½vÿ̀ùË_’t$½jø0åZ5¥X÷¯RkfÀûE4ém̀3º5#û(@%fø Úî¹ç«<Ø¢oDKPkËŒX¦Nª££ÄÀe7|ÆvÛm§üßQöuiÿaÆæÄsÏx#kĂ'ǨÁóè¢KÛMpÆ«§Á!å>)¯ ”ÿ5R‚Å*«¬¢ă…ÿ8¯¥0…ÿ»WêºeÆ¢kˆƒ· ₫ñä“Owé6ؾñÆÑđáĂUùĐA%mèSÍ(Å1KU–tøjƒùZê2p:ꨣck\o½ơ’.ÜóÍ7Ÿ~gm܃Y×›c8q½‰@66¨Î;ÔdˆT¡:ü9÷&Ï[æåä8€#àä7|äá*øGÀpjÖë UÅ™-'3)Ôđ:«F(2MđBđCØO8È/ư₫ûï÷A„7/¶>ú¨O "(Ñ^}ơƠèî»ïN¢8ØÆHƒ‡>ÂÎ…îKo3o”y$ bÖ#”0¶ö"yê­3ÏÇÏ=÷\͛ε˜w̃yó<Ơ®Íí™gÑs÷j}o†3(wíb´ùÄ£¤0̃î(sñÄvrÚ…€>P6̣É'‘¥ jåù¸—-e e/áˆ1̃ÇÎÉwKåÄ;œ4ˆiBÉoi:q^낤۶̣;¼w8U`€Àh_/}SÎÏơ°5Á;1”ˆ_¢XÁ1½Å³É@IDAT$œgHåD= x:x;æE1uÈ®/Æ¢8Ç^{í¥»8Ïæ›oôáÔĂÈzù”¯"S0t́°Ăá°Œkȼn¼ñFö©v½éo©¹0J\~ùåcñ̃—”¤œ—¿Z‘Ï}:ËRkQ_L˜“â0¤à˜”‚—¶÷\^æäópGÀè,nøè,̃~6GÀp* €mµƠVêA†¦„̀S44Pà¥VÏCáàƒN¢BPà駟|̣IsÆŒªNO‰Ô‹.ºh¢PÔ˜b…4Wv?¶ïŒÅÙ">z5ÍWÍBe7|sZO鮜v!€¢¥3ãƒíúà¹n v[ ïgS@Û>>çœsÎ~BÁM?̃Ư¼·ùăYˆ“ïkx§ÁR¨Ú %Ú©ÿˆ=á„*ÎßGTC+ Çê“A¬‘ç¾­‘u£°7#F p$­âÇöÅ_¬ûiG*©k¯½Vq4c‚Ơ(Á0AÄk$¢9ô/‚§ăi1–À§ßÛ\Ût´û¬À¹₫Ơ?xOøRăÛ̃{ï­|+×ó‘╵óÜg\o3”|5DƯ |D1fø₫`₫đĐƯ&ă9¹îđưđ§¡ÑíùùùGÀp:‡€>:‡µŸÉpG äÛG0¿̣Ê+“?<́P‡ôÄODC† ©ˆˆ0'lÇ6J_̣ #ˆA²+¬°‚Öû °¥+Œƒ€ÈX¿üå/“Z#¤?6lXbÀ ñvFx“# ¢ A°ÂfH (ăC¤; rh4±ñư¬†Mµưáøà“nÇ:Băʬ‘(®c؇‚¥ƒ Rc“CÂsøvë %¿Œ}¤è@ÉăÔ7||mø‹êöEª{̀Ă/n'G đ̀%"£Ư†tú%;ozm¶ßjfđ~À1„÷6aÔ)ŒàŒÂ÷¹íK6̉&ƯǾs₫t:*ø¬7̃Øôû“yŸ‡‚̃ ¨3 뤆›Êû…ZHy5…)·9äMkJ[æ†a‚(dÇ¢:XÇ ,f'Í$üØĂî±Ç‰¡ÅúpŒñ ø+Æ8ÿüóúđŸQÂ}ô'Ưjh _j÷†øVæÈùÂTh¬9|&6s-ái¹Œ0¤ï¾ûîöµáÏzç ¯c£ƒ‚-0¶Z+¶ß?GÀpz¯ß½±^_¥#à8@@é WPXÚOnc¼vC†¾á=åH9ÅŸå<¶s! 1&ờø`Çødi¬ˆB Ç Û\pÁÑqǧ¶Ÿ¹ dáM˜§µágó̀3íRƒ F™°PhgkD‘đÚ(Y?Ú9c}ĂưaäI8.)’l>DrØ6ÊR€eá‚2€t2=ôPR'…1YKxNO"Ưºm̉hp¿£́™0aBæ5jƯÙ;ø̀=[ĐËö;DAkéé{UkÏÏloçxŸâT`¿ãÇé3¢(9æ˜èºë® w'Û̀™ˆT"YĂw{#ïmkĂđiª¶ßÚÁ`¨‡h a Ö&ư ?bi§̉Ḉ;m,’‚}üî-êƒï>ưôÓĈÁ¾pê 2Ă Fv £Æ‚£>Úv%Ÿ`Aô#FŒHöcLyñÅûŒe À€ÔQo¾ùf¯dÇùäº`t¸Yç׃̣ˆ# Çg¥¹¢ cÁß2§¬ëÍ:,"ĐÆL²&̉iq/V»/‹×¦¯Ư?¬‰™4qO¿̀}±b?ƈkÍ|Œ¸¶úÓŸ́«¯·¤±o8€#à” oˆưËʯ¥Z–/ÆpGÀè‹€y₫! ñ!è“ú„pø7¤ å"‹,̉§#© HWĐŒ€ˆPK*£O‡¯v`ÀĂCé%è»Új«©g‚^º/˜(!‚ë ₫é¾­₫àNñÎûï¿?1b‰‚°Lñv<(m¾elY3ÇØPʺQ tƒđdG±Á|HíPï52GCÜ`IÁµÊ á}yÊ)§hÄ ̃P—9æaÜÛD(ñ;ĶWq¢~‘…yN¡,*+áeÍóˆçø=÷Ü5ª¡¥̣̃ Ç?¿s¼¥MéV¯3神>Ú¡ÿê‹T(¼QØRLz Æ>;÷J¨0íÇ´µ‹yâó[«PQƯß1»Ư{Œ”•8 ü&ư "7uʸŸø#…f#ï#O¼Ă胢¿U˜¿ổK:”Íđ3ŒÍ;ÍÎÅ»-äAxŸĂ ÜtÓM©ă6Ùd“¤ÎH³xÛ5·~đG2g|xΑæÅÀ*LMUm6f³Ÿ¤"}öÙgµ©©8W½úX\S‚Ó¬Hư–ỡ'<‹ˆ^†ßcí´Ç`ÄyÛAÜ;\ï÷̃{OÏÁy ô^bưđƼKY?‘;EiSq¼Ó_N?ưôX;:)3¿R8æ̀™3ûŒÉ9DØèiîÖb”ÓµuÖY±ûMÑ+$¥â$µ|zeÉ™ëäh¿ï^x!³M™v®½öÚº̃Ă;¬áe‰×p‚X5̣Û–È«>’F§áó5Ûç]Cṇ̃îÓ}ùå—OÓîˆ#èÓ¦ÑơÎƠè8a;©A ó…d,ÊæđnsN₫D¢ho»í6]—cq¬ˆE±\qˆ§NZwIÜ7`ÂuÅr¼ơÖ[×íÓß< $‚@Ï%øXêŒ%C11–%ó…y,ÑÉñf7́Û}ÛÈ'˜I ¨¸Ö<›Ç@Û‡sgÊâ3z<÷‡çg ½/Äè?öØcy®ÏÍpG GđTWÂi99€#à”Â܉H…·æZƳÎ/°Í6Û,)f9qâÄ”UÖ®×>ñzüÉO~RQ¬ đ~Ä[:ô–#6 a}€đx°Ăƒ²Ơsª6¦đ’zYúr†w’D‘¦iÆH²å–[æ*¥“84r.¯ïñ%Jxüâeuú~ưrưoé®Âœöơf°á†V4…pÅ÷¬/Ôi2Âs¾¸µíÏg­çö i¥•V ¿6µKœê[­q8f؆¨ êñ<%m‘„E!æ¼ÔRKétá;^yå•ÔDx [ ‰Zk¢¯­›hʬBÖµú7sŒëqÀ{Ú]ö̀dL¼ûÅ Ö̀đm«]óF©/đlDÑV›gªyG¾†s'"+z…ÄưE:-ˆwÉđáĂ{eù¾NGÀp!à†],Ÿª#à8@sP<Ụ̈ÿâ¿Đ¢è8(Di…'Iq3&SèoîŒÅoM~eR{AäkFÙ€K̃iñ̉Ô´@Æ´(eHK ü¤QA)r̃yç•SRD°> ̉W+¡¨?ÊÜAạ̈FY¸ë®»¶UÑ:9楯)ñ’̣'/kè<øC½`ø°ço ¶µ0DÉËûÁèÈ#´ÍªŸ¤4鮨5Æ»T\ó7ăÆ oĂ#¤ ‚<½v'ÍƠwÜ‘ùwÍ5×DÛn»­̣YólÅù}Œú|øá‡äĐøEºDj̃99€#à8yDà›yœ”ÏÉpGÀh$âă„NP¥^‹x¦‰6­̣^M]¤ï(™PÆ ”(”m…#mx.“¯|¿ưöS,Q´SàCÙÏñ2 Ÿv(}ÅtQH?~À¹»:—¼÷' rĂÇ—N<©{ÁđA´nYë½÷̃5jàwă7ê=#ỉ"¢«ª6ñ‚©ƯÏ æ1kÖ¬đ”ÉöÛo¿lS“!Äơ¨6‹@`(Z‹DxÀï´ÓNÑUW] :Tï̃§D0ñî¼á†T™Ÿµ.¢=¸ï ÆJØÎê3}àKư.₫B‚ r":Œºhí œQ¨ñ1lØ°ºĂgͳn'oĐˆVÂplÄ}ƒˆEÓÙ~ÿtGÀp̣‚@±8ȼ æópGÀ( ‡zh´ï¾ûF3f̀PÅ•¥»Bá‰aDêN¡̉.đQ~ÑCr}׌Ö@!3eÊŨ¤=ñTE©Cº6iÂË•˜±¥0(B¤À» •\d"¬ü!x?üđĂÑ́Ù³ơ;)EV\qÅ$eOú|Ơ¾d\óDÆ¥)ÂÀÁđcÛ¼yÛ™æ&\¸NơàºXú7|Djµ^0|đ\5jTDD̉]5jøHß'3Nï³;/LsE¤Hø,³6f¾₫úë5"‘w̃ơ<Ă,’ÎÚÙ'í!3DóüÄx‡²qÈ!q>síYÆM±f”×ö̀Æ°ơŒæ\<ÇíV«m!ÎÉsç!©©xR9°F *Q˜U0:ưÎàϹ-âÁ¢&x–¢ çy'på=ÊŸï‹ÓN;-Úe—]´¸ÔG¨iø°È4Æ¢øwHà-ơ¸¢[o½Uñæú“¦’虬û(}}À”kƒăÇ:묓D“„ï6Î'u,¢GyDOÍ5%ú“HZî#ÆÀØn×<œŸms^î7æDîÀDêfEÛl³MS‘á<í~`|Îeóiæ´9чx æνÈo³ÅÇíÜEøäw|óÍ7«±’ë?bÄOqU„ çstG —º“#à8€#à8Z˜Óo°Á±(4j¢²Ûn»Å»ï¾{|øá‡'EÎEiP³¸¹¡bIù‘IL·w̃yçx=öHQü Ç£˜úgœ‹¢¤OÆÉ*4N1Tk7ȸᘜ“µâÅ›9'ö‹"¦&~°³<øàƒz­¸¹v½N#GTyæ„ÄsGŒ!É8a[¶È(<.)ª’ö’f&Ù¶öŒiăXqs1r$û́˜}îµ×^ÇÂù…Ûb¤HÚM›6M…çQ ë₫F₫¥çi÷Cxß4{r^1Å_|q2×ôºÅpKÏwFz.bjd ̃ÆpGÀp:ˆÀÿÈKƯÉpGÀpbØx‘RHƠ<ƒ³à!§3u<:ê(¼H·I×¹ o¸.4z#Ư–èÆÂkµQ vï½÷Vïá¬6+¯¼rÍùfơaß@Æ%o{-JcP«­ë æEM¤P–7~gf‘Ÿ³jê…ˆÖiu>₫ùˆ|ởA”4%Ư•ÈkÉwÛ%¯mêç²Ë.›|%°z½[ʬä@°Á³´V ¹ôkQ#)©Ñ’Eu„û˜+i‡Œ¨‹U¨Ï1Ïâ,ÂCü{îɬ€—>ÏËZDKU«]1ÿƠW_]§ÈûNŒJ}¦¦¹úÿí ”U–¿ßüƯEZA@l–QpEÙDhpAP„VuÔV7p_p·QK»Œ¢ÚGÜ7@pC\P@TÏ´¢LÛÎüë{z£_FFdeUe-Yù»ç$ñâÅ‹_DEêưŽ—(G+ MG¢Êû>̉#kDz†2g¼»øâ‹}Ẻv₫Îó©’ë·hN"Kl^̀÷+®È:çgugˆZIK×Åu­¬Ù<Ă{£¢÷ ÷;雈Ä1#B%¼éS&û¨ë£oºO@ÂGƯ¿F¡ˆ€ˆ€ÔR„̉Ŕ†npeo‰æ&â“ E“'xÂQhçöä“Oz 0̉\àÜ){ó3ăøññlç )Up<2&©ÒHQÁ˜•±Ê‹ƒ¤́-^ï8æ̀HF:œT²ºCÀ„îkYi¥ºâzS gë­·öÏç{.ï[ iÓ¦izHw·0ÍUY[Æó¬wï̃Ư©9Å3ŒOèüF STéôÛJYô‰wÔ’*)4{æ–Ecøç`YI´™ô^<‡ꘛÙß₫ö7[Œ¾Ă¢èi麢Î) <÷H‹Ä3Ÿy™³ŸÔIINr†¡rRT®]»6r”#ª^§?)‹ÙHítÑEùSHc`Ï)ûƒöưI+ cˆ–ÔßàBd(‹XđưHöôÓOûtMi¬Lˆ ¥Ó™g™Ơß5̉¹%]„î£FÇăe æ"̀øñă}Ç‹§ëb÷Ç¢E‹üyp.ñ'aí±pụ̈–ó½I›uÎ9çøá́₫ăo…û—ï²ÈN¿óă…¯LD@D@D 8Hø(ë¤Y€ˆ€ˆ@àe{܈欳Ị̂,q †Œ5Êço;:lŸø7oRZNnœ8opèà\a,j°àL(o¼²t>ÂÄêƒđF©½LaơÊ8%ª:.\B‡‘½‰g¡ơÚ%`Å´ µ;»?ºư½—JÄ„­/u>*bW]uUÔư‚ .ˆ–mÁœ¼¬—¥´f_‹!Œ À™Ú¢E‹h;Å&̀pü§5x^UÁs'Íx¶†"a ‘P0I:‘'fV`ÛÖóùæùŒ8moÜc8â1s›4s'ËêX„íÅnœË̃{ïíOĂX„Q7ü~YmΗç×™¾́D`0… jnuÔQh$ ñ„¨Í$C@¸#bƒßĐ\÷Q®ëÀo=G¹DQ™1_æ‡PÀ üwŸ¸qîŒÑ²eËÄ϶Ûn눜¢^LE¬"÷ Æ•—0Bnv ø›Ă8ÏU«VUd*ê+" " "P‹ÿ¿k-" " ơ V÷ß¿+:Œ±sÅ‘AÊ* ©’¾*tÚXŸđ'N¬,/¹Ûa‡²¯xày¥:ᄲ….]ºäµo8§ør¡Ç…‘¬nđ‘y]LD,%áẲ]™ƒ9“HúZY-¢h#‘¡ó₫ăX«PØxä‘G¢ưg“øˆÁæF$±gf´cÙ‘3¯Œ•Ơˆv#"ÄŒç}ø çœÂt\aº.Û'×7"4‘ñs4r®}Ó¶Á¢2‚vÚxµƯĐ`÷R<ƯU˜æ –eµSüt¹~DJbÏ<óLcD²*^1g~ü>âؼlOº+°àŸøu zÅ¢wˆ^!2Ô,LsO×e}*̣]‘ *z"̀ƯJ”fܸ÷¬À{|›ÖE@D@D@ê6ơëöô4;&€Ø1|øpÿáøqèá›4i’›?~†³·$-HsF<¤Í™7­y35ÉÊîú7™I‘d¼w¦%ơ«h[u[Ñy¨ơ o!cö¦rơµnÁ">JI¬ëÓ§¿(<ÛHá—¯‡*µ H©‡‘ÊêY„i®Ê ’ûíöNj3",¨Á€ƒ;4œÈˆf8™ăÂ3ÏÈBuKïóØcEø0ÍU<]W>ÇÆù-K'€ø@%µ­,Ưâ;¦¹":ÄX"|Xj6úŒ;Ö3&ë>B¸ ÿ–ăÂB˜ê,}–åoáZ[Íæ÷裺 &øû6LsÅ1--V|T₫¦î½÷^qa₫NÂzáö¤å̃ƒƒñù ؼÿ₫ûnÁ‚>‚…ÿæyíµ×2˜&Sm" " " u“€„ºy]4+¨p à<ăŒ3ü' o>~øá>Ưëˆ+W®ô‘I“^ºtiTw'G•'œ„Îœ´1*Ó^]ăVf.Ú§z ØÛ¼5ÊH5T½G­Û£›đQJ88‰œàÙÄ[̃ù \IR̃ôë×Ï_TRBM™2Å/‡i®>úhßfÿđ|4#Ăö·¶ÚøÆÑnÂçaa«0%V¾sä7¡>Egä{̃釀o|x!xñá7Đ¢xA`È!‘Ø p‹Í1cÆ ÿ©Èq«£/¢‘œ¼üÀ?úè# ji®,̉'í·ßγs«̀=øí·ßºC=4JyUÈùh,Ú# TWµÇ^G:E€ˆœz×]w/<49̃Œ́Úµ«£à()P,'Ά$ ·uîÜ95-…[e"P”æ*›n) P°tWö}6™ä‹a+‘p<÷̀!M[ë²4RÔPÈeôÉơ!ªÄ­¹Æ©Ê6Ä?K­Eä 5˜8—0Ís”UƒË/¿Üni¡Â4WlëÄÄgÁư‘ëb[MD3©DFôʵ×^ë,úƒ¶0ëI†`R›Æ£POÆê|0ø’Îó˜cñơw!X›WHÇÊPÄGåÙiO¨WN9å”(oç*xʉŸw̃y~8kxë™â¹Iû„58¦M›æ“¤~³fỊ́“zU'S§HøȾ¥,|Ü~ûí^̣ÿxZ©lR¿¶à=äC"`Ù²e>  ơ'ƠO.C4ëäê[ƯÛ¨É0räH"_Ú·ọ̉K/–µPx¤1b„7,-Ô‘Gé́Å}fQ!ñ£ó7K:¦m¶Ù&¾©Æ×™çN;íäk‚ÑOVû#L‡Uă“Ëă€ˆN>ø`ÔÓ ¿‡́éĂß-ÿ$(.ø(®ë¥Ù€ˆ€ˆ@µßÅ©R̃[˜Ÿ~úiԇ¼iÅGI{bÑ ùʼn7?8|Ê;f|?­‹@E˜SQoï₫‹Z)7ḉ÷Ưw__‹à›o¾ñùüÿE¤ü¥«¯¾:êtÄG¸›nº)ZgܸưñŒfÎœ-ÇzơêåÚ´iăN:é¤ø¦jY6lX4.Ñ~Ô0;ưôÓmQßƠ@¡­qăÆ^Ü°¨¡Ă;̀‰x± 4~_I1‰!0 Ø%‘“û́³Û~ûí}zʤ>…nc¾–*ß÷»îºË¿DèA,¾ëªñßü· Fª1^ÀEÚá=ỵde" " " EF@ÂG‘]0MWD@D@ª‹ÀÁï̃½»¯á‘v¬U«V¹k®¹&J‰•+µKË–-£´-8“>ơ)Ơ•9“Óø©½æ À}đÁ₫À:t¨ù ÔÑ#–jÄÇ–[né£Ô¸,Mw g:·¢äD‚$9yq₫a‘$đ2êvú 5a8¬I«…q́xÀ/“&‰TXuÅ ’¸Ö•ùUv¤³²*Ôí ˆ6¿\—“O>9cXjaXz6¢,‰>ˆßG<ăˆÜ™={¶[¾|yT/$c jXá<¨ĂuB =z´?J˜«[!¾ụ̈K?Ëñ_0æwƒ&2â# á£ø®™f," " ƠBÇ ³m·ƯÖ§«X±b…ÏƯMTƇ~è.¸à׶m[gÅy;G)/’Œvr™Û؈*¤XY¼x±›?¾Ûyç½SÇO1›Eµp&đ#l/æó+ö¹SÈ{ç÷œ́W&|đ÷·víÚ’ÂbdœÅµ³Ï>;k—0$܈PÂ3̉l½ơÖ‹ê‚à¬&̉",x>}útëZíß·ÜrKÖ1₫üç?gµƠtÏMê`üƯ2Õ̀‡W}1ÄŒƒ:ÈŸÏ%₫ù]¥öƠ_±såw”ûÈ¢pĐ#NñÆ‹ÔÚ8p _oĐ {üñÇưruÿĂÜI»˜s]Ọ̈·H½2ŒçÎaʹ¬^½Ú]xá…nÏ=÷Œ̉NMŸútF'§¨‡’=ơđDuJ" " " ¹ à¤X¸paFa^«"rđæ&Âé3ÂHFœ3gN´N$5j”wp Œ7BqˆàP@‰¿¹jc¤gÛùÆ‘O¿pŸ|úWt\;7;•ï¿ÿ̃ô]‹,ÍU«V­¼ƒ±§R§m“21³NM°'Ó·o_?ú+¯¼RáúBç{nÖ̀ÂHøÆE‹e4 ‡Ăç·½ơOjk´k×.£o®•|e¹öïÖ­[ÖfK¹”µ¡̉æO„GÏ=ư>øƯáyJDL}²M7ƯÔñ[Ä ~ko¼ñÆÄS$²’ß[3₫^©Ă}Ä6 ‹cDŒđ‚ÂvÛmg]«ư›ÿ>°bí6‡ÓN;-ñ¸i×<±s57¡rôÑGGG1¦ü7kÖ,bj˜¸^>—‰€ˆ€ˆ€Ô}>ê₫5̉ E@D@D Æđ6é5kÜñÇ¥½J;89á×­[ç7ouÁcÖ¹sgÇÛ”f¤ß˜:uªăMÔĐHíA¾̣!C†d¥3 ÇëÓ§OÖvÆỉ¤ImB”J(@àTJ²ªŒKÛ§±-ăǾƯ»wÆO(è§4ă-fœyI#T˜v>r9§ s¤â¥”…˜8>yÓ›4C±¦M›f¼•ŸdzˆZÔ_H3êưÏ·\fÏútíÚ5µkZú=—¤è2c~ù¤•>w“„lj˜˜1oư+W®ôMüVđ›aÆz§N|”ƒµñÍơªŒq,³D-&½­ÿƯwß¹qăÆyêæ›o®°˜ns©ϳü“O>‰¢1l[̉7‚AXO%ŒIêÏï-så̃M2~_Ÿx≌!°æw+4"¼æÍ›ç̃zë-G›°ËásÁöKkg;b iǛX·”WÖfߌZxï„íIËió Û“ö£-餿eî‹$ăï–ÈîŸø=ŸÏ1“ÆT›ˆ€ˆ€ˆ@Íø·²ÿ8K~5³ææ #‰€ˆ€ˆ€ÔA8‡p¿÷̃{̃ÙÄÿäo½ơÖ>Rƒ¢¬¬WÖ̀ñ„ĂĂœ¼Ư‹ó§9óăN†Ê«º÷ĂiÄÛŸå½-O±Z̃涔_̀‹s…¥9UA’NƠ}¥0₫€Ü”)Sü›ĐW]uU)œr̃çˆ3§ü›o¾éöÚk¯¼÷«+_*^I¾±^çFµA0D!á|­-ëß¿¿¥9₫’%K*qbs¶ß"(n=|øpÛ”ø "8xæ!´ <Ø=øàƒ‰}‰øÀQÏ}(„ư5ˆ`$2g¿EC0.¢<÷¿=¼`¿MÖÏ7¿]V%ŸqøƯà…~âs+ïx‹ßg =ă”'”Ù˜ˆ'üö P ¶Å‹©[¿|#øØËDtAZLÆï1‚©¬’xâ6á÷…ßéÊÜÅÄCsú@`ưúp:ÂÀÁ´ûî»ûOUG?ᄼsq³Í6óN&<¡á˜BdÁñÀùÅâPÀñ”$zà€Â±Çv{Ç„4$“&Ṃ*;s†,´\=ñ‘Î-½̣Ä»ôw u>>¨óQSÂÿ=zô¨Đxæ‰gV‘4[¶ß Ô‰âYγ®<áƒƯˆbÉ•W^é—“₫Á9_ă9‹#;ɨ#r̀1Çdmª©ß æÆï…=Ÿ*ÑBỄGöÛ“‹M” \÷¿₫ơ¯¾÷ÂQ±×¼M›6₫“4wXƠ¦@™4'µ‰€ˆ€ˆ€ä& TW¹ùh«ˆ€ˆ€ˆ@<úè£î£>̣o9?ưôÓ©Fp’kßjaœuÖYQ8|µ AZr~c8q^ñ1oâøá-^SæDĂÑ?„;º;ï¼3Ơ9Wm'P"soqM0¥ºÊ¾èeÄưZjfu>ˆv±¿åR`ÀsC¬0#ƠVe qc\sö‘»í¶›¯BƯ*3›/ë<Ăÿ¬eù€á—_~é#ÙË„üGPO¨>ª‡«FÜvÛm₫­^† æ£$Èk>pà@ŸjƒâÂæˆ4hP¹ơE‚¡km‘7…qđÙ¼W¬XáS·˜ÈÁÄx³›4*ÿùŸÿ妿úê«o;c¼AÊö ¸#8¢Ri\ü@ú''œrD̃đÖwûöísö-Å&|”bÄÇ{îéÿNqÆùQ F#jhđü?~|tʤ¼ª¬‘̃ áûÇ?₫áÓÊ¥Åóç F4G!̉,¥‹v¢y¾¾ưöÛ^xŸÑ‘G¢¨Eăå¯>l³ó®Ê¹PçÀô÷RëÖ­«2”öj! TWƠ‚Uƒ€ˆ€ˆ€„H{²xñbGAtRb P@6n_}ơUä<‹o«kë¤2у9i©T˜7N¾{î¹Ç;ăoƠăpÅQˆ#2-¥ …ÓaCnqœ‹äO§¿ƠJ1'&Ç¡Å1ø& ÎMx¿ụ̈Ë₫mfÜ©B½¶•‚‘́+®p;ĥ„ ^ÊÂNñ}÷Ư×;êIwúN@U/âÏ NjîܹU>·o¼Ñ¸^·n;ÿüóSÓ]!|Xj'y'Ÿ|rƱyv­^½Ú=û́³₫Æó‘¿a"ăBÑ"܉c̣!mé¢ØÚ´i₫iÑ(ˆƠ}xöqœo¿ư6.ü>µÇ³– úñM2{Ö2'~ ̉ú%í›Oă›HÎï ç–-[æçÉólÿư÷OeÂ1ø@đá÷ƒg>¿¹8†ó✨Eóúë¯{V°¡à¡*ˆĂÔ„²ằI.p 2ÄŸ_óæÍ£ˆ[8{p!h P˜é­ZµÊ;ë“̃Äà=̃º §ÿå/ñœqΛ7Ïí5TxÊƯ»w÷Eê®ÔwĂ1yÑEƠ÷Ó¬ôùÙ=—tŸUzĐ"Ú‘tW¾Gø(kÙ²¥»ơÖ[ư³£Aƒîè£.H¤ĂAäñ™ Às'Éémi®LTĆĂ?Ü?›âׂçëرم¸IMEÄ ‚,|9̉ïÎsơ¨£̣ç;zôh?›oµƠVg  08ùY¦Ø<óâo‚ç2óǹØçÈóºơo‘§)²`gó³ó:å”SÂ)øeß3f̀p]»vÍØÆù ˜wèĐ!£/kĂo ü6ßÿưĂx?§ƯºusÏ=÷œ›>}ºZ3fLÔÍX„c–f0©¼ísîK®£¢oªđQU‚Ú_D@D@D o8‘pÖÛ¸yïX;†Ehy3agO’Ưu×]IÍQnMH¡ñĂ?ôo×&‰l'e˜Âí.“Æ'Í^}ơUwÇwd¤áJë«öúMÀîÙR>(p½÷̃{î믿vÍ5«×Ñ6ɉ^Ơ“æÙƒ³g Ñ ˆÜñg}˜æ ‘ák®‰K ®ÆGëñ".¾øbŸđÁŒoöÑùœÏn.²)k°y1ó%Z,~<Îï¾ûîó»#ÈTgº.æv^Eưúơs<̣ˆO;Å„ˆ̣H{₫ç}‰₫1áˆñ:%z0úpÛµkçE ¾CáĂw*û‡ß$~×°$1…í&0q=V®\é#{¨&ñĂcÓ?" " " U$ U¨ƯE@D@D@J“ píµ×úT'¼a{Ă 7xáçX¾ÆÛÅf8pZ™èqÀ¸Ï>û̀;œ>ÿüsÿmxlÛ/í{áÂ…>"…7ny+›t'="Cd¥MÀ">Â{°”ˆđ6?üƯ•JÔGu\_" ,²ç Ï—¸át·( ˆÁƒû.8đĂ#Ü“<ë¸&ơi\Få–/_åL×eư ơmBQ'đˆŒ!¢Æ¢µlzê)Ϙ: ˜‰ˆ̀ÏÖù²ư|Çà~́:ùr6FÔêÂà‚ 1¯$–lCL±:.ˆc·Ür‹a<ŒÚ#̀Ñæ_D)™ˆ€ˆ€ˆ€T•€„ªÔ₫" " " %Kgo¬’=­X8Î1ênPĵgÏQG.h¤sÁ¹‡á(4‡’íƒëÉ'ŸtäçÏe¼%ß—₫8ồé”km+ >œ³tW>ªvÏă?öØcư –îÊFä™vơƠWûỦb7Î/ă´çy†ñ¼zæ™g²OD«á7ç<̣¸±ÿă?oÎkgµz‹X!(>³0Í•¥Å²mƠñÍs̃ø„ăs®v¿Â„‚á0æ÷ ·‡û¥GëŒK¤`ܯæ̀™oÎZYr}‰áw«iÓ¦YéÏØ9œSx?d ¬¨Ơø¨,u8œ9Ç÷œB—EL:ƠM4É;¢,ưûñ&-o#ăÂ)•m¹å–̃aïÛ¹sg‡30—ué̉¥Ü>¹ö׶̉ áĂùè®6¿Ô@¨”UœÂo÷ÜsO„x`u>pÊ[+"3x>a8º)”Ñǵر¾fË¡ñ, ê<Í,"Á¢"¬½2ß<[{ôèáwe~>ú¨›0a‚?^˜æt]–«2ljV;vŒwơâi¬0æ8ỵdwî¹çFŒàѶmÛ¬ưo·ƯvËj§Ḍa.ï¿ÿ¾¯©BÄ ÂÊk¯½Ÿ8@¬‘kd׌eRtM™2%Öë×:"D‚`ô#JD&" " " U%ûÿ–«:ºö"€³Œüägœq†ÿàÀáíØĂ?ܧañƒ\è;́°C*̉~Đ7—ñ¦qy†Ă8¡s°¼}´½ôX™RNuƠªU+ŸnÙ²e₫mw •û;ÀÙn5$xöÇ¡×̉\‘ºjÈ!QT‚©©0"f̀˜á?•™9Ù+³o|±ÔÑ@¨f&ˆY+Zˆ^)„1¥÷Êw<„3₫yæóûaƘ5ĉC=4JyUÑưăưCƒz$ ˆwѺˆ€ˆ€ˆ€T ÿ—PµLCƒ€ˆ€ˆ€ˆ@q ¢ƒ\ç×]wă à$CpèÚµ«/L¾Ë.»D>g¹„ œwlÇÈÛ¹Iƾ2(E|üJÑ̉]YôA!Ø–â—_~¹?uK Eô†¥¹bû%—\’g}ëÖ­s~j"]é®,mé®®½öZYAô¦Ă²“Éơ\·>ñïP¬ÉGĐïoëá8ÖVÑo~›4i’!zp=9æUbµO*:6ư‹è•´ë‹I”#i!e" " " "PUø¨*Aí/" " "P’N9å”(…©\ÊK¯r̃yçù”/8IơÑ©S§Ô}p,‘R„7wyƒ7Éx+·2N¶¤±ÔVÚLø(„ă´˜I"|ü×ư—{ñÅ)U… Iˆ#¼¸ai¡<̣È(ÍÎo‹ ‰†{‘ôJ|ˆSˆuæ¹ÓN;ù¡,ƯƠøñă£Úa:,;B5‘&^ùå—9Ïa(ŒĐ°qâßiQ{–ËæŸ1ˆTa[܈¬‰cQ@Ư¬aÆî½÷̃˸Vôù́³Ï¿5æÑ­[77{ö́îª₫" " " "P)ÙÿT©a´“ˆ€ˆ€ˆ€”đcu8˜rÎ-ëÓ¿¦(‰ï: qœ% ÷Ưw_j¤I|<­‹@.&||ÿư÷¹ºƠûm½{÷öiá¾ùæ÷Î;ïÔûó­®ÄI߸qcï0çÙE«Ă;̀84…¤Ä^zé%¿ÿç‡~pû́³OIF:Á0æ{lP¬ư®»ị̂¢¢i°ø4^ƒ ̣MˆÜ¹"[8W«w(€”$RX­đ8,³ÿ´iÓ|3ÇíÛ·oT£ƒFöă·)nˆé3gÎŒ7û₫&ÂlÖ¬Y¢;pLj‰äkÜ [o½µïÎ|¨ñ’ô{ƶ×_Ư5jÔÈ“¿A™ˆ€ˆ€ˆ€T•€„ªÔ₫" " " %Iààƒv8›°îƯ»ûi V­Z容æH¨àMÚ\6jÔ¨(ç¿ĐpN‘6&-ÅVØWË"P>pˆ†ùøËÛ¯¾m'ÅÎî»ïîOK鮪vuIÙtÙe—ùAˆ. ‚H„„“O>9cp£–f ±€há¡qo>ÿüó>Z`ụ̀åQ½°Ou,sçœshFí¦Á KRBaˆDP$ 98ÿ?üđC7räHß.<÷“Œº&…Û©Écû#À́·ß~¯Ÿßƒ:(ÜÅ/#p6,«9!´c,‡øÀ×I†à°hÑ"×£GG$âĐüùó}-ú3G‹”ÇaÎ+W®ô\)0Ï: Dă$sç·c̃8ç°ßêƠ«Ư…^èöÜsÏhWÚ‰æ±tŒ¬c̀—ˆ)ΗưĂëÅÜO;í4_/…~|ˆ×®­Ë~í^ˆ¦¨ •€¦]D@D@D@DÍÂ… ]½AZD̃FÙ~ûí3"= 6gÎœhsÅi2ö«¯¾ơCüÀ™†àqæ™gza%¾ÖE ²,âƒư%|üÁc¤óË*O`ÓM7ơÑp<çpjó\D¸M2£<͸[´háúl£°8FdḅvÛmg]½c>Z©†åV¬á™Îû4ăï ‘ÚŒûhâĉ^Ü!ª¨sçÎÎ ¤Ó‡óă·„ç~!đ›Đ´iS×P€`ÿ05ǧN {Ä„Æ·%IÇA49ú裣Mv دY³fÑ5°RD;Rø ç0ß¡C×µkWßHd)Îx)àüóÏw-|ègƹ ÉD@D@D@D ̉ÿ몣k ¨Çx+•7x?₫ø(íUÚé^ươ^°h̃¼yÔ…7uÍp†á2ĂQDÚ‘¡C‡få‘?¶,çĂ,̉¶ñÍv‹¶ }¾±́½<ƒ“ ¡ĂRJ±uKy•ÔŸ6„~† ’ÖÅ“ôNÛ¹":Nâ†Đ@¤ ÅƉ¤1ă\¨…‚˜’dˆ DcX*¢ÍVˆTL2æA¤ ψ$Îü™àÂ₫p·~oêâ|$]Wë²”#œKmçÉÓ8ó́ đ\ó!ơ ưÉ%OôMÈ$×~UƯ6õñ&Ẩ@ÁƒßD ¶1Ï·PđH:6‘"DŸđ\Dˆâ˜¤î*ÏØï“O>ñû%ñç÷„´[ˆYü®„¿%l#¥Ïlû- Î Ad«­¶̣l”d" " " "PH> ISc‰€ˆ€ˆ€ˆ@à$Ăé…³ê•W^q{ï½w†c‰CœqÆîöÛo÷₫Å‹»vØ!WH 3v́ØœÅÏy—±I}:­n¾ùfwî¹çzág>ÅĂí8½¼‡ÀF‹Bà jÖsÛqbK–,qíÚµËƠ½ ÛpäáäĂ.½ôRϾ3.Vüq¢RŸ†7º Tˆéí¼™èÁß #²̉&@j¦qăÆù{‚¨†3føNƠI%.|đ́«‰ç@u“Æ& TW5M\Çrđæ½£%ư‡9̣m7RđÜ}÷Ư^ô 7x-¢äÈ#ô…€qÖ™!r‰:ÎHuBÑts°ÓŸ·{m,Û¿˜¾9O³V y‘§vÏ=÷x1Aåă?.Ä9Ç°ô?¥^ăH}ûöơ¬̃|óM_X;'8m¬×x6’r! ă2ºO@ÂGƯ¿F¡ˆ€ˆ€ˆ@‰èرcA€@A~úĂ?Üxâ‰>w_<ƒe‹6 n˜ÆÉú!BíRl‘–‹: ÔÖÀY/ÂnăQlœB¶|gp*~đÁ~"í:ụ…rí…₫fnÜÅz^xá_ø—·»©‘rđÁçŒpa ñÅ₫:0óÎ'*f/½ô’[¹r¥ăxM›6uƯºu˪ARGÀ́ư÷ß÷"×;~=lN¤e¢ µz÷î]áë7Üpƒ(âZÊ~Mw5uêT'á£4ïăéÓ§;êñ́¢ÎRM¦¸jØ°¡ûè£ûDäóŒ)Í+¥³t>̉Ùh‹ˆ€ˆ€ˆ€Ô:ÑùË_*<D̉Åå6Âv„‹ÆGưîºë.7jÔ(/$7‹ªÛX|{́±^h¡6B+Dc„ùœw̃yTZçœsN$B„c$/Ü^•e8¾óÎ;~ˆ‰'º‘#G&7{öl×£G¬m¤ kÓ¦MV; Œ—f]ºt‰ÔọäÉ^̀bÅåáZ¿~ưüj¼X;¼HË”dˆ[K—.Í[A’èñ/’øĂüÊ»ï¾ë£¬ªd¥C±¿[>µa<·Iq˜ô,ªùè˜" " " "PŒ$|ăUÓœE@D@D@D é«Lè /}.!·—Ë{ƒ9^œº¯½öZ”+œ‚Gyvíµ×ǽB½Lrv¬âÆ4уa9ÇPˆ  ¡}ûö,&Z®ñ¶̃zëŒâôXX°~À€nîܹ¾̃Jâ~k Ó–=üđĂnèĐ¡ƯÛÆå»Y³fî믿Î[üȬÄWvÙeŸö뫯¾̣QGyd‰Ñé‹€ˆ€ˆ€ˆ€ˆ@qPâº^­ˆ€ˆ€ˆ€¤¸è¢‹é©̀xsÇ”îªrü´—ˆ€ˆ€ˆ€ˆ€Ô& µI_Ç ‚ăôÓOwm´QƨDcàÄ¥!¤Oyä‘Gë{d́¬ Xí"I¨3BD¹çIơøăûú"¹Œ¢ë—]v™OĂE?̉+QkÄy“jêŸÿüg®!ª¼ a`Ê”)'x± “Ç{î¹èxlG\€#Æ÷+2ö‹:—-̀™3'Z]¸pa$\ĐHíI“&EÛï½÷^¿ O>¡`¯#2bĈhß>)/IDAT¿[o½Ơ;6ªGæ Œ¬â$|Tœ™öºB@ÂG]¹‡ˆ€ˆ€ˆ€€À•W^é–/_î;î¸Ôb᯾úª;âˆ#¼pñ́³Ï–a±jƠ*áÀô8à_<^l÷ÀôÎụ̈Ná„NÈ*ºN}„€²™3g&ê7̃ˆÚ)=:j ·Ge iăEÂ6>¤N…Ñ2iFtˆÂ’E‡ nœrÊ)¶)ă;œ"—¬âLø@ÜâoJ&" " " " "P<jîÿ0‹‡‰f*" " " EM€bâwß}·ÿj‰ºÔ„  t¢s’‹/öb†ƠÉụ}ûöMTN;í4GD)°’l×]w"’¶º"ëIFE’µjƠ*j~́±Çü¹P”Ưl»í¶³ÅŒï=öØ#cƯVà / ‘cÑ¢EÈ̉y!¢X±u¶‡Ça=ÍÂÔY,©7̉‘~̀ŒôW²à~àøᇾÎGÛ¶m+>ˆö¨>j»*" " " 5C€¨€ƒ:ÈHyơư÷ß»?ÿùÏơ"ˆiØ°aâ¤(îmu7,%URÇ°VG̉ö|ûIûV¦­eË–Ú-,æNu>>₫øăhŒx”K´!ÇÂ5C e–ǹÆ+äØ6¦¾ÿE€¨„RưÇüÇ¿6hID@D@D@D@D NđQ§/&'" " " ùàíÿÛo¿ƯG[ >Ü¿©ä¨GÜ ÖÁ́öÛo?÷Ă?¸O?ư4Je•t4¢¬vGçÎSÓR1V!ÍY‘1Cqeă7®È®}Ăq26T`¡‰Ú(¡!DuèĐÁơîƯÛ×Zéׯ_¸¹ÂË;v̀-Â}Á±d•#€đqÇw¸_|Ñÿ äU¹#i/BđQHKD@D@D@j‰u®¾új/djểK/u¹ÿB_o½ơülq̣ÇS`…§Öà˜6m¯W/ NÿY³få'3Ÿe„"/₫₫÷¿{§ó—_~é‹v§9Ÿ)Fh¤#mÿ05598>B…¥—"$IL²h˜đxˆ6¡èÁơ¸ä’K÷÷«È2¢Ç‚ *²‹úV¢÷ âISs™ˆ€ˆ€ˆ€ˆ€ˆ@Ư' âæuÿi†" " " "P.­¶Ú*rªù:ñ“vƉoöûßÿ>«à¸măAÁ¢/(”46bË»ï¾ëÓC…ûVuyĐ AQM„ƒŸ~ú)uÈÇ<ÚÖºuëˆGÔøÛ²eËâM~ư©§Ú©}‚…u?¨Ñ‘dÏ<óLVs\ ;vlÖ|ÂâæY¤44õ<ÚB».Qăo \‹FùN{Yå4ỉÄí¶Ûn~g̉]ÉD@D@D@D@D@ƒ€„â¸N¥ˆ€ˆ€ˆ€ä$°å–[ú7ÓéDÇ…^èÖ­[—ºÏYg•SDw¤V†E:àPO8;́0mîWˆåc9&e}ôQ7sæL/ÄÄÇ^µj•£V‰Ù˜1cl1ë{ÿư÷ÏjCÜ ÷§. vâ‰'F}÷ÙgŸhÙ’êl$‰C¶}8Đ}dK´[Ø`ƒ ¢®¢"W’1W"Uø¨¸y¡üÛHw…=ÿüóùï¤" " " " " µJ@ÂG­â×ÁE@D@D@D 0H=uươ×»M6ÙÄxË-·8êq̀˜1Ă4DZœTU-Z´p7ß|s¹A¤Dƒ R'‚³ựË/Rguï̃ƯƯpĂ nñâÅn₫üùnçwvÏ>ûlT=u JlØ}÷Ư]ăÆ#Q±`Ø°anîܹnÍ5î½÷̃sÇw\†ÀaN>ùäÔ£‘‹·ø‰„ R…âí¡¸@z+ÂqàG…Ej|₫ùçQº°øÁ́:X;ˆ$|,ăå—_¶Í^¬b.Á°fÎ\ClúôéÑ~§zª³±i¤©™˜+Æyđ‘U€ \¯\)á*í)" " " " "Ph> MT㉀ˆ€ˆ€ˆ@-8á„|ôÁúëÿZÆ ;Ñ ¿ûƯï¼c§=E͉0ûyçç… ‹èH›ú¨Q£Ü{îE~Œ=ÚïGH˜:+Ă¶Å—ĂTZñm¬#LpfD~ êå²ë®»º‰'f8¤©wR̃ù&ªY³f^̀iß¾½ í¿—/_­3"‹‚‚ 1D¤âu=̀.»́2/’PW…âæ&LØv j²X®° ùøñă]›6mœÍ«]»v‰csLú…öÁ„«Z®={ú¨#Ĩ7̃x£#h& ᣦ‰ëx" " " "P|đAÇ›é›m¶YΣµ±dÉ_=,‚¦̀BlÀ™n6{öl7uêÔ¬è ¿ổKnÈ!ÎDÛ'Ü¿OŸ>YÛéG*¶ƯvÛhÙÆ å«¯¾rÇ|Fd†m·ỏ;̉ºœ‡‡zÈvÉøf? ©#…†¸ƒ˜’fl³¢×aM"1Î>û́ÄƯ˜+©È`Ú†nèW÷ØchLÛnÛXgl̉~¥™ŸT„>mµ' jï½÷öUç#™‘ZE@D@D@D@D ®ø·²·đ₫¯®MJó¨:o¾ùƽùæ›oà¤_"Z mÛ¶QƯŒÊÅ̉.!X˜hÁ›ñ¯½ö₫ ¢A¤ĐFdÉgŸ}æ>üđĂ(Ê„È‹̣ΉÔVDy`üç/¢+:°ÿ÷Ï<ü†Ø?DŸ|úé§>:ƒè ̉†™asÍ5׸×_=:÷vÚÉQÿA‡h®× $̃ÿ}Ÿv ±y„Fú+ ¥#zÄE%ëΉ(Ä—p|ë—Ï÷÷ßï¾ưöÛ|ºF}Ë6lè׉\ÁH²ñ5üs¡Ö ÷F»|§Dª7"xzôè‘%Vå;†ú‰€ˆ€ˆ€ˆ€ˆ€Ô 5ÇZG¢%@-¢:pÎ¥`n;!ô[mµ•¯UAú©W_}5«ơ­ïPø@H0±¦s¡V‚Cy†ăœHĐrD0j‹Xư°OM._wƯuîœsΩđ!9Ĥºr.!W"yrÉäs²zDI!èUT^DU>cªˆ€ˆ€ˆ€ˆ€ˆ@ơPª«êc«‘E@D@D@D ̃ ®ÆG}ä£&~úé¨Đ6'ˆ“¹oß¾¾ˆ:ëguVTơúlI¢Îv„ŒĐ¨ó¯Á¦ ûÖÖr®"÷¹æ„èQ—Î¥Đs¡¦ bÅÍĂ¢ô¹˜h›ˆ€ˆ€ˆ€ˆ€ˆ@íøµ̣eí_G(·Ưv›#êă§Ÿ~rÆ sç{®8p ûä“O\\4hPÎZEpºyO±S§NQ_„·ß~Û!z˜‘:`–f‹ôKS¦Lqưû÷·.Q-+®¸"j«+ D÷P‹$—qOAƒøaµNêâ¹ä:‡̣¶‘*‹º)ÜëDtĐAåí¢í" " " " " µH@ÂG-ÂסE@D@D@D X >Ü-^¼Ø]ươ´VÔ¹¸ù曳¦Ọê¨í‘u  6 ĐÚ~üñGg5-›ÚñZD ,X°Àt̉IîÎ;ïôS¸øâ‹#áƒÈ¶×E›8q¢¯i‘ïÜệ¹ä{¹úyæ™nÉ’%b’k>ª­FzEàÊ+¯ô‘=ô›6mOûĂ R?cèĐ¡B̃qÇ]°|ùr·hÑ"?BÍñ믿Noܸq9Ïư†nˆ„ÿ₫ïÿöcBñá¶âç[¡p:¢̉Æó…¥]vÙŧ–²"ó́k鈼 ¸<Ö¨Q#ÿ@CÄ&M¸̃½{»¦M›úmiÿP»¤¢–t.…Ñ3œĂÊ•+ƯÚµkưü»uëæ‹ÅWt•éÿ‡?üÁ-[¶¬2»j& ᣆëp" " " "P̀ˆ` åŸb2€=ztʺ6£îĂ˜1cl5ë{ÓM7ơ)Âà×¼yóh;¢€“TÜüóÏ?w-[¶Œú‡ “'Ov đMaát¢r¬@9 íÛ·w‹–IƯ4kÖ¬h½ª içRƠùaÔ¥K—(]X̉J́‚ëtE@D@D@D@ C *ê²Ë.ó©¨Hư… @z)KE•ÏĂXDO„"Á!‡âÖ¬Yă ˆöÙgYỵ̈Æ_±b…ûßÿư_÷Ë/¿ø"ƯÖÿ /´Å¬o ²“´OZ:¬đ\².kÈw>Œoi»‡sÿî»ïüççŸöQ46>â“LD@D@D@D@D@ áC÷ˆ€ˆ€ˆ€ˆ€T’bDÜ N=ơTצMŸÆ4[£GöâA¼oÚúóÏ?mjƯºµ›2eJT¯£E‹^‰:”³€ØÁÔ¡¾I˜̃ QA$É(Æ̃¬Y3uBº­¤O»ví’vÍÙV‘ù̀™3'káÂ…s7[ươQ4f÷̃{¯-ê[D@D@D@D@D Ä Hø(ñ@§/" " " "Pyˆ'NLÂ@\?~¼zơêå£6Ê;"B‰Ù›o¾i‹Ñ7"Æ̀™3£ơ´ Ñ'sïرcÚ.j§œ*oç·HΓƯăFô‡Ùæ›on‹ú(q*n^â7€N_D@D@D@D j!=öXÿ!µỢåËƯSO=åî¿ÿ₫ŒÚ…ºûî»oFÔEyGỏ¤Ib—nƯº%¶‡Ư»wW+¼Lqô¿ÿưï‰û­[·Îíµ×^‰Û̉+:ØöíÛׇȱhÑ"GäQ5o¼ñFß̣̉k¥ÍIí" " " " " ơ€„úwMuF" " " " µD€ôK¤3fŒÿP«ăƠW_uưû÷jU ~P3#LÛŸî'Ÿ|oÊZßxă³Úâ ÔÁ¨¬ÅR™TV¹W™ùæ+,äk|mHøĐ} " " " " • pÏ=÷øâß́Đ‘dD,ôèÑĂă¦æÏ1jƒä>¬ wëßjsøbÿTFDˆ ‘s5­pyÎ ¼Æ#G̀•ôZ:tp½{÷ölûơë—±]+" " " " " " áC÷€ˆ€ˆ€ˆ€ˆ€T‚@è?û́³ki„Ă^z饑ÿ±Çs»îºk¸9c™¤sB(¡†HRo¾ù&cŸú¶B´LÈ~—\rI"‹úvî:ªPqóªñÓ̃" " " " %J ,Ní‰̣̀¢=è7xđàœƯĂz_|ñEbß &$¶×—Æ_~ù%ăTÆ›%z„ÅÍ3:kED@D@D@D@D ¤ Hø(é˯“¨,F»’zéûï¿Öă Ôô¸́²Ë¢æ† FËI aê,ReÅ %/¾½>¬ÿăÿ(÷4Âk°ùæ›—Û_D@D@D@D@D@Jƒ€„̉¸Î:K íRh¿ûƯïÜu×]ç —ÿÏÿüă³téR7zôhײe˨+u;ø䲓O>9ÚŒÈA}ÆâĂ1X¯ï¶É&›dœ"¤ưâóî»ïºF9 Å›%sRdÉD@D@D@D@D@J›€„̉¾₫:{J îÆ+2ö>çœs¼È±ñÆ;>íÛ·wăÇÏè¦ÅJs̉3öÂ… £ư?‹Ǩ‹–v.•+…á©ëaF„Ëzë­ç?DØXxÛ#˜/[¶Lâ‡AÑ·ˆ€ˆ€ˆ€ˆ€”( %záuÚ" " " " U'@äÆÏ?ÿ́† Vî`·̃z«VØtÓM£¾8÷ͺvíj‹₫›âçk×®u‡rHF;+'x¢›;wnV; M4IlÿñÇƯm·ƯæzơêåV­ZơAP@4ÀÂ}wØaßF /¶ṃÏ₫Ó·%ư“v.á˜IûÑÖ·oßhS8QO²Î;»%K–¸‡~8có×_í>ù䓨M)°"]ààC”M!ŒHÆăÚ…÷g!ÆÖ" " " " ¥GàßỄ̀R,xé]w±ˆ€ˆ€ˆ€ˆ@ ,X°À½÷̃{ÎÄm¶ÙÆí¼óÎ>-SUDz[±ïơ×_ßEƯK¡5ỵd׿ÿÔC ”Wd‹-¶po¿ư¶C̀ ÔZe‚ĐĐ®]»ps,#Ú,^¼Ø«OŸ>9ë©Ä'ÄùLŸ>½VæŸK}YG¤ úă¾)D‘yÆhܸ±CøÚvÛm3Ä+Ă11¢¡d" " " " "P_ÿ¯©¼^Ú." " " " "“‚Ä{îé?9;汑7ßwß}wŸÎ‰”WD˜àa»_~ùå¶è:uê-ÇD¦NÑŒ³Ç1#uµCââFƒ ¬K­}#$ÁkÛ¶­{çẉ çH°Ù³g»¤Bñy¤0*§U«VQ{UÂ1Ăq(r÷Ưw»SN9Å5lØĐ ‹¿ÿưïĂ.Z,>²¨AD@D@D@D@j—À7ß|Ơ°ØgŸ}ÜêƠ«3„W^yÅƯyçÑ$[´h-‡ Eqăƹ3Ï<3‹H¶0 Ú ‘ çíû;:RFm·ƯvQ¿º°@º/ÊÇôK=öXF”KÏ=3Î+¾Ö+G€¢̣…0"9¸Ï(jÉ%—d IÄLD@D@D@D@*B@ÂGEh©¯ˆ€ˆ€ˆ€ˆ€Ô0‚ƒHŒ 6ØÀ×áwjZ„…½gÎœ™:£[n¹%ÚF̃·́‰Y³fO3dÛˆ’ EÆö\i´|§Zúg=öđ©‘’O”̀©§ê5kmÏ+jÔB €€Eª¸$³Ôqܯñȧ¤₫j ºD@D@D@D@D àíwt‡Nûx k–ˆaađx‡7̃x#júÓŸ₫-Ç5jä…•¤cĐ×̃¸çmü¤”D@饗¼X̣ƠW_¹.]ºø´DIµIl<¢2pho´ÑF¾@6©¨( NÛ.»́âÓw•WÏñ“æcç×´iSGÄ̀Ë/¿lM‰ßŒ3₫|÷æ›oúZ A½{÷v́_}óä“OFƯ8àG’\sŸ7o{đÁ£}(Ô~衇zQcÙu-,¢ÂX…Ûm™ú2\,©ơ3zê)·å–[ºŸ~úɧ C\K›£Ớà¾À8GR®q¯•WăÅæ̀u!ëË—/÷cṕ­¶ÚÊ_“¤¢÷œ©­¨b÷çơ /øyPç†{p³Í6ËyíưúGD@D@D@D d Hø(ÙK¯¨ËpºăÇI>aÂ÷Áøé’ÖjàÀ‰̣\çC”ˆ9²“úY4f̉Z™ƯvÛm>r‚ơxưÚN:餌´[´a'x¢ÿ¶”\8­q´sNV7ä̉K/ơâ‘I–t¼¤~¹ÚöÚk¯œÂ|é“d8îq´' DP%năÇ÷M=ô;âˆ#26“²,³26–­ÀƒBôf÷ƯwŸ9r¤_%gŶ)ă{Đ AQJ³‰'ºc=Öo‡5ìÂtgáñă±-¼̃qñ-©8béÔHU…8ñâ‹/FµYÂ~ûï¿¿{ú駣f»?LH¯wË:­]»Ö RŒưÖ[oƠ¹Ôk6O}‹€ˆ€ˆ€ˆ€Ô> µ 4H%P•‚顀ѸqăDáÂLáị̈o¸á†ÖƯï¶Ûn©…ÆMđÈØ!¶rÙe—ÅZ2W©7b‚Iæ–ü×(Œf¤ :thÆfÄK%Æ7B@(~P;¥C‡©û±qwÜqG_˜uùœOhˆ(fđ zÄR> 6,>臰@$Dhˆ¡°qÔQGùÍDZ 0ä2G¤Ë”)S»åi’v@´ âC@³‚ôñ¾\SD‘»îºËp ›£¼âåáq2vÖˆ€ˆ€ˆ€ˆ€üFàÿ‰„ˆ€ˆ€ˆ€ˆ€ˆ@ư$pƠUWeœwœÆDi¾È̉#etÊsÑàw̃‰zSk‡6̃ÔÇ̣1" Ö­[ç£A(Xoö§YZª&ú#=a"m­ZµâËéœBу90wÚ‰,ç Œ‡rˆŸ;ûưüóÏu3̉l™…¢í‹Æ#Í—LŸ{î9¿È1cÆ ë}#\˜ql«Aª®Đ>û́3,G4¢ ÷B.;û́³×åüóÏÏƠ-qÑŸ|̣I”¶«{÷î¾×û+®H܇ô^œû…^è¯Åyççû)4mÚ4¶Ùf›Ä}Ơ(" " " " PćˆàÀimé—́4‰Æ#2p®=Ú;íF̣±P4ˆ§¤3fŒÛa‡|¥̣Æ]'JǼŸ–.‰q)ºc=nŸ₫yVz+jT„ç6bĈh·øˆZ@È 5˜ '¤©"êăùçŸöC £%X·ă°/u+¨bÖº,ÊcÖ¬Y¶ê¿¹Nˆ={öôëưúơó"+ˆWÖ~ñÅg£f́:3×°® "K(‘‚‹z-¤ÁÂâṣÊ₫‰_[kÏ盈#ê¥Ø±)`Nz+¸!À p™bÛăc̉S«BKÇSûÇ÷׺ˆ€ˆ€ˆ€ˆ@éPÄGé^{¹ˆ€ˆ€ˆ€ˆ@ ¸₫úëoû“6)Íp’ăÇÑ\̃ÛÿŒ°`F”ARÁkD‰|̀j‹„}-* lKZ&Z‚́ñOèôg?Ć]wƯ5§»¥‡Â Ÿ4:ÅböÈ#øE"³°x¼µñ¸¦á>“'O»FËñ4cXÈ‚h̉]™ÑÇ΃6»6WÚT’„®sÄà“¸!Ù˜ñmå­#Qo$~lÖĂkQ̃8ávæˆ$̣(⣅miËa]“x4C̉> ¶E€$ơ£mđàÁYÂí—\rI$|=bÅÏ9'³ÓO?ƯƯÊ•+£e¢9HUÓ¦èŒ&®ă‰€ˆ€ˆ€ˆ€„$|„4´," " " " ơ„‘±ṕ±Çú´KI§F ̉a 80ª%A1ê\FƯ³nƯºÙbÖ÷?üƠVS 2|đÛxăư!‰nH«'AäI.†}­X8ơPâ©´r@¾/ß`ƒ ¢ƯÂèD̉=!ºØ<T´̉Œí¹ŒZùˆ8¹ÆĐ6¨K$|Ô¥«¡¹ˆ€ˆ€ˆ€ˆ€ˆ@|ôÑG>’Æ;v¬-&~‡5&pôă\']Q’…u'zê)G1ó${î¹ç’k¬m£6*÷XˆAQn粟~úi¹ƯàO1ojdp  ¢ỎÄ}ươ×£±›7o-³@ƯSO=Ơ·Åç{óÍ7gô W*’¶,ÜOË" " " " "P̀Tܼ˜¯æ." " " " )BǹE~¤tơÍVL›"̉D¶ÿüóÏ|y»ÿ₫ûm1ă›"Ü–â)cC ¯$Ơ Ù0Ç´¨Œwß}×GRM±zơ꬙/Z´(«¢CöÚk/×¾}{_Œ<Œ&INà…0b¯·qôÑGÛ&/h‘̀,^gåü£mÊ(Đ5₫¶Đ«W/צMw̉I'Å7i]D@D@D@D@€„¢¾|¼ˆ€ˆ€ˆ€ˆ€$h̉¤I´jCä²?ưéO¹6glûưï­# Äm¿ưö‹7Ơúº‰;¤u Ó?Ư~ûí‰s#­́ø¬]»Ö÷ £+Ø7’Pđ!ê$,ªáÎ;ï´®núôéÑr̉ÂÁ¸qă¢M:tp·Ưv›[ºt©›7o"°úQ§:°@Ú'³đI!E*0Fp²#x`|0„3¶1Axö…m³fÍlsÄhĈQcÛ>DéÁ±C₫¡PíX¶0a„pƠ/‡Eémă®»îÍ—¶ơÖ[Ï}₫ùç~3×ă…ÏC6F]ù†‘£‡Ơ-·ÜâÓq2H# á#ŒÚE@D@D@D@D È œrÊ)z"zö́é4hà(Ư¸qc7`À€ÈÁÏéât§.EyF]0â©Hñ„s?Í̉̉J…ưĂTZa{U—q›q¡À@ê(„‰Đ(’nÆö+Vت?Wjy°/lͶØb‹¨ö BÑÂ… mS´í_ÓVM<ÙƯ‘d}úôÉjN»Vñ4\-[¶ôçÆu—ïơÎ:p̉î "<Œ+ÂÇ5×\ăvÙe—œ÷X§¦áD@D@D@D@€„"¼h²ˆ€ˆ€ˆ€ˆ€äK€ˆÙ³g—Û´MDD Z˜2kóÍ77ù¢à8êă†Óîܹ¢‹ơA80KK‡FM´jƠʺûïpáX‚•°̃Ñ¡ƒs9sfĐ;s&ëÖ­sñ"é­Ë¢?Ö¬Yă8Ï$CL &4¢0¾₫úë°)kyÉ’%®ÿ₫YíÖ€P2lØ0["J¢†`aÓM7ơµX’̉qY7®]®ëmưr}ǯǖ[n™«»ܨ-bf×Đ¾:wîl›½ Ô©S'¿Đ6ÜpĂpUË" " " " "AàßÊ₫Ăÿÿ2Z´"" " " " "P/ PbÎœ9îÛo¿u8Æ7Ùd¥Ñ¶mÛ*×N°ÔC8çù`¤Ö²zuư;HÓEáq"0^\â‚G̉MÓ/¿ü̉÷%’†Âév₫Iưiû¸,"æĂ?ô›Pà”¹‘6FEÚIÅe×óăÜ6mZ‘!êD_">~ùå‡è¡Zuâ’h" " " "Pg Hø¨³—FºK`øđáîơ×_w¼ñ¿`Á‚¬‰â¤ÆÉ‘+©OÖNjX¿ch#đÀDgL:­0E…¾»tém¿à‚ ¢e-ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@uPÄGuÖø" " " " "P ÜsÏ=näÈ‘Ñ™Q÷bđàÁ:S§NÚY¨ëi®2&«¢' á£è/¡N@D@D@D@D@j‡ÀèÑ£ĂsYRqđ\ưµMD@D@D@D@D@ªJ@ÂGU j(aÎ₫Ûß₫æy晈Â{́á¨R»£ƒiAD@D@D@D@D@b$|Ä€hUD@D@D@D@D@D@D@D@D@D@D x ü¿âºf." " " " " " " " " " " ™$|ḍĐˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@đQÄOSÈ$ á#“‡ÖD@D@D@D@D@D@D@D@D@D@D@˜€„"¾xºˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@& ™<´&" " " " " " " " " " "PÄ$|ñÅÓÔE@D@D@D@D@D@D@D@D@D@D@2 HøÈä¡5"& ᣈ/¦." " " " " " " " " " "I@ÂG&­‰€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€1 E|ñ4uL>2yhMD@D@D@D@D@D@D@D@D@D@D ˆ Hø(⋧©‹€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€dđ‘ÉCk" " " " " " " " " " " EL@ÂG_øâiê" " " " " " " " " " " ™$|ḍĐˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@đQÄOSÈ$ á#“‡ÖD@D@D@D@D@D@D@D@D@D@D@˜€„"¾xºˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@&ÿ%ăP±âB.IEND®B`‚tpm2-pkcs11-1.7.0/docs/illustrations/cisco_e1500_wireless_config.jpg0000644000175000017500000012234513754763565022200 00000000000000ÿØÿàJFIF``ÿÛC    $.' ",#(7),01444'9=82<.342ÿÛC  2!!22222222222222222222222222222222222222222222222222ÿÀ×2"ÿÄ ÿĵ}!1AQa"q2‘¡#B±ÁRÑđ$3br‚ %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ„…†‡ˆ‰’“”•–—˜™¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂĂÄÅÆÇÈÉỂÓÔƠÖ×ØÙÚáâăäåæçèéêṇ̃óôơö÷øùúÿÄ ÿĵw!1AQaq"2B‘¡±Á #3RđbrÑ $4á%ñ&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz‚ƒ„…†‡ˆ‰’“”•–—˜™¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂĂÄÅÆÇÈÉỂÓÔƠÖ×ØÙÚâăäåæçèéệóôơö÷øùúÿÚ ?ô_ˆ̃!Ơ4́ß́˯#Îó|ÏƯ«g1÷ơ5ÂÿÂÂñOư?̣^/₫&º‹ßóÿ¶ÿûN¼Æ½̀r£(¦ơéæxت³f”ŸôŸ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹+§ØR₫U÷#ŸÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b·¬ü2÷~¼×EʪÛ8_'fws:úTÊ•ï÷•¥´Ÿ̃Yÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b¯aKùW܉öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å[̉́[SƠ-lUÂ4̣,aˆÎ2zĐèÑJî+î­U»)?¼Üÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰¬¿hí ë3éí0›ÊÆ$ ·p#=2qY”£FŒ’j+î U«g'÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsSö¿•}È^Ú¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b=…/å_rmWùŸ̃tÿđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ5̀QG°¥ü«îAíªÿ3ûΟ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹(ö¿•}È=µ_æyÓÿÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄ×1E—̣¯¹¶«üÏï:øX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿øæ(£ØR₫U÷ öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b=…/å_rmWùŸ̃tÿđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ5̀QG°¥ü«îAíªÿ3ûΟ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹(ö¿•}È=µ_æyÓÿÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄ×1E—̣¯¹¶«üÏï:øX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿øæ(£ØR₫U÷ öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b=…/å_rmWùŸ̃tÿđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ5̀QG°¥ü«îAíªÿ3ûΟ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹(ö¿•}È=µ_æyÓÿÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄ×1E—̣¯¹¶«üÏï:øX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿øæ(£ØR₫U÷ öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b=…/å_rmWùŸ̃tÿđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ5̀QG°¥ü«îAíªÿ3ûΟ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹(ö¿•}È=µ_æyÓÿÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄ×1E—̣¯¹¶«üÏï:øX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿øæ(£ØR₫U÷ öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰®b=…/å_rmWùŸ̃tÿđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ5̀QG°¥ü«îAíªÿ3ûΟ₫è)ÿ’ññ4ÂÂñOư?̣^/₫&¹(ö¿•}È=µ_æyÓÿÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄ×1E—̣¯¹¶«üÏï:øX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿øæ(£ØR₫U÷ öƠ™ưçOÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâk˜¢aKùW܃ÛU₫g÷?ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMsQ́)*û{j¿̀₫ó§ÿ……âŸú ä¼_üMu¼S­kôöÚç Ú´|¤\0eÊØ̣Úî¾ÈÓsÿ^Oÿ¡¥a‰£MQ“Q_q¶­GV)Éưç°ÑEàÙæ_¿æ ÿmÿöyzwÅïùƒÛư§^c_A₫~™áă?/—äQEuœÁSKiq1K4G£1»)DZïP×WâOXêĐ́-Œ†{HUfܸ… ׿JÎR’’In\bm½‚ïöPü?´ÖÉö¹&ÚÄ·ÊA$c…jèỵ̈I5úëÿ³-ẽx†Æo‡¶2>ÙÛ˜àO9ükWGÿ’I¬×_ư™k’|ü¾÷ó~:¡ËÍîÿ/èdøSöZΑ¬ÜƯ<ËXwE±±ƒ‚r}zW5miqy!Ú &p¥Æ¥ˆ©âº xÇFÑơ«k³ ’ê±\‚v‘ƒéÔS<¯ØøV¸¸¿2䀠(»¹È8ư+W*‘sv¾Ö2å§%{w)ø?H¶ÖüKocy¿Éef`§àŒƠ6Î;ˆÖö‘c†ü"îäà7„µ›]ÅQj{Å¿Î Q’7*m:î;ÿˆö÷pị̂¦¿›¸8-Åçæ—n_Ä!ËË÷&ñÜb_Ï$hÔ‘îGăŸÙø{U·‚Ẹ̈̀ä„9sÎqRxêA瑳„hØăØ gơû/j¶óØ—1ÇB]qÎI©¥Ïû»mmJ«ËûËïs›̉âÙ"yà’%•wF]H =G­C]_‹üAc­iÚ,6†Mö°²Êq‚BŒ{ưÓ\¥tS”¥ÉY˜TŒ­tQEh@QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEWuđ£₫F›Ÿụ́ư +…®ëáGü7?ơäÿúW>/ø27Ă'°ÑEó‡¼y—ÅïùƒÛư§^c^ñ{₫`ßößÿiט×Đ`ŸæxxÏăKåùQ]g0QE>W4c…fư3H ;Ăº¾«–ÆÂi£o …üÍ"Yk vú"%ÊË#üÖ¡ˆ Àg$t/ø27Ă'°ÑEó‡¼y—ÅïùƒÛư§^c^›ñxăû₫Ûÿí:óQ_A₫~™áă?/—ä-™¢ŒQ]g0´Rdz2=Ewz'ÄY-tơ±Ơ­ö(À±PN@sÁúÖBø™ƃ^ØE}Âé·Íäz2=E`°ôÓm-Í]z$̃ÇD"ƒ₫5¹¬ÖXdvc€À‚1ßƠÖüwΑ&›¤iñØÁ0ÄÄ àcùבê(ÈơƯ m¦ÖÀ«M&“Üé|-ă ¿ ³ÂOe!ËÂƯ¨§ø³ÄöÚø¶K;k% “O¥rù¢ŒQG±‡?´¶¢öÓä侇}£|H{}=-5kAx"FûA¦°r=E¢”pôă.tµ«Ô”y[Đ·u=´Ööë °TR%p~ùă~U¤ÈơdzÙ+7qh¤Èơdz`-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èơ´Rdz2=E-™¢ŒQ@ E&G¨£#ÔPÔpè1+IÜ4²ä Håb0˜Éc•qz³2é ))ÏåHÅv'"5Ú8oïùb¹̀QFG¨¬Ư?2Ôü“́Ú,óùĆđ+;(LHQµ['-ë¹QNK]®C/Ùü¦ŒLQ¦'næ'ß^Tß<ô5̀äz2=E/fÿ™ZÖ:i¢-ËCû‡Ù*̃vD‡̀#“æ(û cuÏ5—i¤×·V{£‰M1Ë år̃ă öçÚ²̣=E¢…ºƒ}¶H¼=3[º¤~Q(¤ïx8;†ụ̈£9ÛלƠKh´Ö†̉r-íÜÈ79ÜAÏC¿*T}Ms¹¢ŒQKÙ;[˜~Ñ^ö:Co¤$9KfÚ™‡÷ä™vĨpwmă¤sYZœp$£́ɉ€ ¤›J)+ÔàN?N8¡‘ê(ÈơJ ;Ü—+«X×½·¦Ø:0â&̃#0ÜFàs^{{Tú’[IdÂf0ÈÖûùa }øç9ÛĂrNqX9¢ŒQG'˜syPû—&>Á»hû|¿ùæsæ{ç½aj¾Oöƒù>^Ư©»ÊÆƯûF́cŒnÏN=*–G¨£#ÔQỸá)ƯZÂ×uđ£₫F›Ÿụ́ư +„ÈơƯü(#₫›åÉÿô4¬ñ_Á‘¦øÑ=†(¯œ=ăʾ3!óL6ÜyÿûN¼¯Êùè*ơŒóÿ¶ÿûN¼¶¶†"¬,^†2¡NoKR/)ÿç¡ü©<—ÿ§̣©¨«úƯoæü‰ú­.Ä>KÏCùQä·üô?•ME[­üß}V—b/%ÿç¡ü¨̣_₫zŸÊ¥¢—Öë7äU¥Ø‹Êùê*O%¿ç¡üªj)ưn·ó~AơZ]ˆ¼§ÿ§̣¤̣[₫zʦ¢—Öë7äU¥Ø‡Éoùê*<—ÿ‡̣©¨§ơºßÍùƠiv!̣_₫zÊ%¿ç¡üªj)}n·ó~AơZ]ˆ¼–ÿ‡̣£Êùè*–>·[ù¿!ưV—b%¿ç¡ü¨̣_₫zʦ¢­Ö₫oÈ_U¥Ø‡Éoùè*p·Œ‰åRTñưÁ]XJ•+MÆRéå₫G>*:PRŒzùÿ™Ś̉ÿ|Ñöy¼ß§øƠÚ+Ñöùßá₫G¶_Ê¿ó)}_ï7é₫4}_ï7é₫5v=ƒ₫wø{eü«ñÿ2—Ù¥₫ó~ŸăGÙå₫ó~ŸăWh£Ø?ç‡ù¶_Ê¿ó)}_ï7é₫4}_ï7é₫5v=ƒ₫wø{eü«ñÿ2—Ùå₫ñư?ƳKưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Kưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üÏđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°̀ỵ̈l¿•~?æRû<¿̃oÓühû4¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳKưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû4¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳKưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳKưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû4¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû4¿̃oÓühû4¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Kưæư?ƳKưæư?Æ®ÑG°Îỵ̈l¿•~?æRû<¿̃oÓühû<¿̃oÓüjí{üïđÿ öËùWă₫e/³Ëưæư?ƳËưæư?Æ®ÑG°Îỵ̈l¿•~?æSû4¿ß4}_ï¹EÁÿ;ü?È=²₫Uøÿ™Ó̉ÿ|Ñöi¾jå{üïđÿ öËùWă₫e?³KưóGÙ¥₫ù«”Q́ó¿ĂüƒÛ/å_ù”L. ‡̣¤̣[₫zʬI÷Í6¼¸°›–ÏÈơiáéJ Mn¼È¼§ÿ§̣£Êùê*–Ïëu¿›̣+ê´»yOÿ=åIä·üô?•ME[­üß}V—b%¿ç¡ü©|§ÿ§̣©h£ëu¿›̣ª̉́Eä·üô?•SÿÏSùT´QơºßÍùƠiv!̣[₫zʽál¾,º%ó₫‚ư¿é¤uÂ×}đ₫F»¯úñư:RÄƠ’³z=8»¤{5QX[ñ₫`¿ößÿiזש|cÿ˜/ư·ÿÚuå´QEQEQEQEQEQEQEQEQETñưÁPTñưÁ^†[üWéú£‡0₫ơÿ1ÔQE{gQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEkéúT~Ơơ A-Ÿ•å…#ĩÄñQØé‹u¢jwÇ;­ @|ø;ÓiÏæ1ïSèÚƯ¶§j7v wç—»d₫Q]„»O­9µË8´íFÆÇM’¯Yßsæ(ÄçîŒç8öÅ`ùîƠº¯»K₫¦«’É·Ñ₫¶ư /¼!}`—¥îlå{0­4QHK…la°@ăŸ¯µYÖ¼-–©$6²MÂá₫yÙ€'n0 äœÆ¡»ñWÚ¯µ‹Ÿ±m₫̉aÛæçËÆ̃s~ï·ZŸSñŸö»̀/4ÿ6#4s[£NsP@ AŒk5íî¯óü?à?cgoër©đ•Ñ¿QßXIpw-d`Û”d® ƒÎ0}i–^¿½µ‚áe·9£’o›(ˆB– )8Éă5¤¾&›TºÓ­­ÿÑÚ̃çí q¨^ù…0>îö íÉ4Ư[Ä–ƒÅ2ÜZĂ#ÙÁ‘lmî@9,¬=I=AàĐ¥[n¿×çú0奿Oẹ̈ưNṛË́W~A¸‚q€D>å ₫ û uç…´ư%î’-/^™!pº ¾WƯÎOÉĐwçµsÚæ´u­E./dk̀ûñƯ›'ß©«xŸMƠî'¸ŸHºY¥\ºÚ.Ïj©{WËó¿áæ…fœ¾V₫µ*Ë£éÇ‘êvÓÜIuö¥·2…A”,@N:g?…mê^·ơ-,­ïJµÄp›·¹‰Ñwc’¡‡|g‹½¦§‡N“ư“1̀‚s)»ë(]¹Û³§¶/Eaÿdé1YM4‘É3ỳêvÀ*Ÿº3îjd«_Nÿåçêt­¯oọ́ô/Cá3P‘%±¹»KX®e·¹ó¶–ù¾åÀ:•‡­ivv¶Z~¡§¼æÖơ_ 9Ñ‘°A *Ñ3óÂltÄ‚<“ÏL_Íg]­Î À¬­_WMFK[kO²ÙÚ+,Q ‡,rĶr}¨¦«s.m¿áÿàn—+åß₫ß­̀9>ù¦Ó¤ûæ›^%âËƠ₫g¯GøQôAEVF§e®éV¶|m‘c嵤25Á¾>pfPI™=O÷i †‚º®–ïo½œúkNRâwÚ̉|áw0ÁêîăéX“x—S¸·M%´ˆ#Ö–ÚƯ·==êGñ^°̣@ÿh…Z)ËX— s•áFW“Áâ›₫¿[^GC‡¬bd½Óí¤K»«kxVÖy|µIŸ1KÄñѸëÅV¹Đ4ë}.kq k΅ô]ù‡’&Ù³oLcÛ9¬DñF³̀· zD’… ûµÀÚ0»F0¸́F1PoQ:aÓËSüFqØƯŒă<ă8Í'åư[‚ó3è¢+¾øGÿ#]×ưx¿₫‡p5ß|#ÿ‘®ë₫¼_ÿC€=( -øÇÿ0_ûoÿ´ëËkÔ¾1ÿ̀₫Ûÿí:̣Ú(¢(¢(¢(¢(¢(¢(¢(¢(¢*d`d†¶,|Akcg´d:g25¼lNI=HÏzèĂVtg̀ŒkÑUcÊÙŸ¹¼?:7/÷‡ç[đ•ØÿĐÛÿaÿâhÿ„®Ç₫€Ößø ÿ]¿Ú2́Óø÷1÷/÷‡çFå₫đüëc₫»ú[à,?üMđ•ØÿĐÛÿaÿâh₫Ñ—dÙñîcî_ïÎËưáùÖÇü%v?ô¶ÿÀXø?á+±ÿ 5·₫ĂÿÄÑư£.È?³ăÜÇÜ¿̃—ûĂó­øJ́è mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[đ•ØÿĐÛÿaÿâhÿ„®Ç₫€Ößø ÿGöŒ» ₫Ïsrÿx~tn_ïέ꤯—äÙEmåç;"DƯœt ôïT¶Jé§^µH©$j”iB\­±Û—ûĂó£rÿx~tƯƒ̉ƒ̉¯ÚW₫TO%́vå₫đüèÜ¿̃7`ô£`ô£ÚW₫T”{±Û—ûĂó£rÿx~tƯƒ̉ƒ̉i_ùPrQîÇn_ïÎËưáùÓvJ6J=¥åAÉG»¹¼?:7/÷‡çMØ=(Ø=(ö•ÿ•%́vå₫đüèÜ¿̃lÂWcÿ@koü‡ÿ‰£₫»ú[à,?üMqÿh˲:ÿ³ăÜÇÜ¿̃—ûĂó­øJ́è mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[đ•ØÿĐÛÿaÿâhÿ„®Ç₫€Ößø ÿGöŒ» ₫Ïsrÿx~tn_ïζ?á+±ÿ 5·₫ĂÿÄÑÿ ]ư­¿đ₫&ívAưŸæ>å₫đüèÜ¿̃lÂWcÿ@koü‡ÿ‰£₫»ú[à,?üMÚ2́ƒû>=̀}Ëưáùѹ¼?:Øÿ„®Ç₫€Ößø ÿGü%v?ô¶ÿÀXø?´eÙö|{˜û—ûĂó£rÿx~u±ÿ ]ư­¿đ₫&øJ́è mÿ€°ÿñ4h˲́ø÷1÷/÷‡çFå₫đüëc₫»ú[à,?üMđ•ØÿĐÛÿaÿâh₫Ñ—dÙñîcî_ïÎËưáùÖÇü%v?ô¶ÿÀXø?á+±ÿ 5·₫ĂÿÄÑư£.È?³ăÜÇÜ¿̃—ûĂó­øJ́è mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[đ•ØÿĐÛÿaÿâhÿ„®Ç₫€Ößø ÿGöŒ» ₫Ïsrÿx~tn_ïζ?á+±ÿ 5·₫ĂÿÄÑÿ ]ư­¿đ₫&ívAưŸæ>å₫đüèÜ¿̃lÂWcÿ@koü‡ÿ‰£₫»ú[à,?üMÚ2́ƒû>=̀}Ëưáùѹ¼?:Øÿ„®Ç₫€Ößø ÿGü%v?ô¶ÿÀXø?´eÙö|{˜û—ûĂó£rÿx~u±ÿ ]ư­¿đ₫&øJ́è mÿ€°ÿñ4h˲́ø÷1÷/÷‡çFå₫đüëc₫»ú[à,?üMđ•ØÿĐÛÿaÿâh₫Ñ—dÙñîcî_ïÎËưáùÖÇü%v?ô¶ÿÀXø?á+±ÿ 5·₫ĂÿÄÑư£.È?³ăÜÇÜ¿̃—ûĂó­øJ́è mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[đ•ØÿĐÛÿaÿâhÿ„®Ç₫€Ößø ÿGöŒ» ₫Ïsrÿx~tn_ïζ?á+±ÿ 5·₫ĂÿÄÑÿ ]ư­¿đ₫&ívAưŸæ>å₫đüèÜ¿̃lÂWcÿ@koü‡ÿ‰£₫»ú[à,?üMÚ2́ƒû>=̀}Ëưáùѹ¼?:Øÿ„®Ç₫€Ößø ÿGü%v?ô¶ÿÀXø?´eÙö|{˜û—ûĂó£rÿx~u±ÿ ]ư­¿đ₫&øJ́è mÿ€°ÿñ4h˲́ø÷0\åÎ)µĐÂWcÿ@koü‡ÿ‰£₫»ú[à,?üMyÓ|̣rîwÂ<±Q́sôWAÿ ]ư­¿đ₫&øJ́è mÿ€°ÿñ5<¾eưĐÂWcÿ@koü‡ÿ‰£₫»ú[à,?üM¾`sôWAÿ ]ư­¿đ₫&øJ́è mÿ€°ÿñ4rùÏÑ]ü%v?ô¶ÿÀXø?á+±ÿ 5·₫ĂÿÄÑËæ?]÷Â?ùî¿ëÅÿô8ë₫»ú[à,?üMv? u»mKÄwçĂnËhͽ! Đc*ïJÀzQH-øÇÿ0_ûoÿ´ëËkÔ¾1ÿ̀₫Ûÿí:̣Ú(¢+¡đM¨ø̃ËTƒÎ‚ud{.*G¦?çªÖ›xÚ~©kxŸz VOÈæœm}E-´;_øSM¸Ö5ˆơ˜|Ë{9–Ùv_ŸhåHôưj ĂV^xơK:ßJG©v\¶ÑA‡ë]&D̉¼û7f§¨%Ø#ÑO₫„üi|u,>»º·a»\'ăû¡ÿ́¿­Kø›·ü–¯×_‘ÆjeáĐü=¾ÛK†;¼¬2Û£,¯’e8ç¯l÷¨µê:9ºÍœ:¢E¤É.́r@$dăë]±ÿ"ß¿ß₫«PxẬ;?±]\a‚[wnøPŸëT×½o6J~íüŒ¹|«E¯bבÅæ½N ê¾»qÖ¬Mej>Û̃ XEѾ(f̣Æ̣¿7ºâ»MFMRvăYÓ¬¼:¶>_˜­Á9a´ VÉ=¸ËƯK¿á5¼¥WM˜…ăÚ§}ü¿4>ß×C*ê³A4ö0\Ü'™¤ÓíEö\3T´¿ _êiu#=µ”¯åÍ5äZ#ÿw<ó^™©M{©ê6:¾‰a¡ÜÚy*ßn»?5» œ1 Ç°ơ®{C¼Ö¯åÖd´EƠ#çtú{‡₫z |qîOn”ú°èZóÂZ¥®£ef‹ ɽæÚ[yÇ(ï†ö÷« Ô--.n#¼Ó¯  ÍÄV·äˆ»†Jèuk ];]ЧÓ>Ç¢ë3ÛÉ>ø¡=·œg‘Ưêzdw^§sâMĂM™"g†úÖut° ’sïIíQ­₫ăʨ¢b (¢€ (¢€ (¢€ )Pê;sÎ:×osáËP¤:†&¸HÅ̉\¿™¶Gï£~ÿîàq@=Ơ éÇ~̣jŸhÙ™ÓȹV BQzØÁ©?†<„»oµḉđÛK₫«¼Üq׌gñÇj®Áư~_æsôWA­øj=*̃êX/ÏÙn₫Ë0h|¼1‚>c‘Áô®~‹€QE$]êZ.ơ-}øù₫g‡Œ₫4¾_QEhiÚYÔm/d\MlëÜù€°SÎxÆEu6–¬æJûôWW?‚ ùí₫ÚdX̀ Ç̀­#À€ĂwíÚ²G‡u6X]-ÁbÂ"d@X.rq»€6œ“ÀơäVq­NZ¦héMnŒª+e|7yöIƯ”ư¢9¡8Pó|ÀH*Àà;g9¨¿áÔüï/ÉưY“̀óặöƒ·;÷mëÇ^µ^̉ÉöŕeÑZ#BÔŒSIä(X™‘·J€’£,–ÀôÍgSROf'·AEU­EWÊJQ]‹húmî*Ö̃âu·¤créqñ¸²7ÊÉ“ü#¦9¢ÀqÔWYqà¸à½û8Ơà(JnB́gŒF¹$*¹$u;NzTSĂö÷™í54?j‚ÜSûÀy Æ02­ P0h®²Ó–ëwÏ|¾¤Ö)@H}¬ ±!Á 9÷î/†¬eMÚîU»»‚i´_+:3 îÈÎ̉^̃¸¢ú_úî;­{VÓ†—v–Æo2_%Q·”½yÆG5FQ@µám-5mr8e‚IíâFhăÎçUÚ1ÎIÀăÖ´u/ Cµ©ïy,´ëh’äf2̣*9Wi ’ ÁÉ́h”¢·_A²Ăí“jê±K$‘Ú²Û±YvrƯ×9¡ü¹«WƠmV}b̉)åh„‘Èè6 r0å23•^¼ds@ÅÔÿ ƒTû#^È`óS|*S»Aæmo^§¿ƒ£A'‹%Óo ó̉$›ä”´;™P•ƯÈ+Èè₫¾à9º+°¾Đ4Ùà[•’ ³Û™o¢´—íA p¨ç9'<ÜT–~·img̣ç“íÖ±Ç1 Ç*³r¡‡Qù÷¡_}€âè­ë­ ̉ÎÚ/5/"iÓÎ%·,¾^̣¿{?{‚pF8ëQë^:,;å¹ípñÄ¡1æF 39àĂơ¢ă±‹NDi$XĐf ;“M«:}ăéÚ…½äqÇ#ÀâEY*HägSV¾¤¿#¢Ö<%¾¡¦Úi—&Ss!µ•æ?*\)‡…äz¦¾¼’h;«7I–b%Wmbu9\ä}1ÏZËÆWæ̣ѵY¤»‚ĹÜÙinr$ z{ }¯‹BjI5¬QÚAÀ#áU#sƯÎ3Î08º}ÿ×̃2¼2+·¸eU³K«i c²@̉*s¹sÜö"’ûÂÓZËtZæÖÚ(æ’(Vyù” Ëm £“·&¡—Ä÷’y°[G[-ªÄÛcE`ă9ÎGROSO¸ñ]ƯØŸí6–3%’d2D[Égm œv{8ëC̣₫µÿ ^ÖŸæXµđ]́£O–yá̃îXă.’›ÆGđàçàœ¸¨‡…ä$û,Ñ8ûDñ´í!5 X©@@ơÉϧ«ŒïÉ ök?0<2—ØÙ/ ÇæôàÀóPGâ›ÈJˆ­íR!,²‚±V(WS–Îܯ½ËúÛ₫/?ëø ]y’fî̀@–Âè\m`¹.zö )ëàûóq{Íl‚Ñ‘^B]”îR6© Üàæ«ÏâK¹̉xÄ6ñĂ-ªÚ,H­¶(ĂÂäç9I=MO‹/"ÔäÔ>Ëj× ³ka×aE 0U<r¥×ợ¿‡tc­k fRF@Íå:¸‚NyëUµ{8¬u"·25±ù¡y ¯¨àdg#8ÅK§ëw}ÍÄÂ(fëRPv“¸0#iFx4Öµ>»x.&Ú F́tÈ$ËvæmV×…´´ƠµÈá– '·‰i£;TghÇ9'Z´WW©xZ5S|’YiöĐ¥Êƒw ä]¤ƒNOj³wáµ›¸¢¼6–ñÏmoˆŒ›TÎy`z×Û-@âè®±¼':}ÍÂƯÇp'h™J:JˆÛpÜ›‚{vÿøCàƒT‚¾[¥]IlfY *<ƒĂäŒuä}{ÑØBèÿáˆéoŒê÷‰!ÄC~Ü1ßqÏ#>j±©x^Æ­XÛ̃̀±YÜ%¼q´G`Ø7L¾ư;RícđU¥½ô+u¨<:Ü+yQ®å’4ÜGxúàñ‚sT‡-åÓmïäAj¶†âiÎzQF̉ø$ñĐ€?R_×Ü3Eu#ÂG=ÂÜê~\qÏHéíâU,§†;d}zúѬu ›G`Í­#¡ ă4^( *Ö–²jv©z\Z™TJcm¹ç… PeZ+º̉¯®`e†¬ˆŸ:|í*¹T,–B[¸=0:ÖT>I4_í¾)„ŒK»Ê2lÜü“ߦ̃Û¨@sTWU©xZÚ=Bö;;©0_EfH¹Ëç';¹Æ?ö¨—Âjđj —ÆIm&–/*(C6ø˜nÜ ú€Ư9¥}/ưZ‡ơư}Ç5ES®ûáüw_ơâÿúuÀ×}đ₫F»¯úñư:öj(¢€<·ăüÁí¿₫Ó¯-¯RøÇÿ0_ûoÿ´ëËh¢(¢(¢(¢(¢(¢(¢(¢(¢(¢(¢(U™2’‚ Ö¼̃)Ö§ÚZô« RÑƈ̀ëбP ïÇ¢€5ÄZ›Í$¦t̀˜D„(NHÚyÎ3Vñ©%¨µ–à=¾ÔF_-eC•±“Œq“YTP´g]ñ%æ¹<̃aÛ<Æe€à9`b5E%` (¢€$‹½KQẼ¥¯ Àÿ??̀đñŸÆ—Ẹ̈ Ôđ₫³ư‡ª ³n.£#Ä[h`}đzáYtWL¢¤g:m;£¥‹Ạ̊¥¶›Ú‡{;¡p̣y˜2ᙂôă›zÓ ñ\–÷vS%±Úa`²XH̀I”ÜzW;EG±§Ø¿m>ÿÖçMŒ%‚w–8e‘¼øeF¸¹iXĂpIçqéŒzRÂX´EÎÍ@ Œ  ¨3¸ËḍÊW·oëÍsTQ́)öm>ÿÖçKăAz?³†Ë‡w G’7 r…O#®T­sTQUF;)Ê[…QVIZ(¯”>”+UüI«Éhmïä(#,#PåE.â8YTP³ø›W’ê+–»leˆa ņ° HàîÎiSÄúÄsI*Ư€̉lẸ̀ª́û»W\vÆ+"̉₫̃Ôüè¥ûOÏË]!̣׉[nĂ•5–¿476/x¦æ+) °Æ¥c!‰Ư÷“ŒóåXôP´©=åÜ·÷³ƯÎÙ–g29÷'5P•êQEY¶¿¹³†â+yLkp%Àeg¨ä•j/ê˜Ê܃åĂäñ£ƒwm ‚gs̀¢€5—ĺ¬ăí¬|ægvdRÁ˜a’2¹|¸¦7ˆuGk¬ˆ ”>ZîùF-Œ° 9¬Ê(Tø‹S2‡2Â@O,Göh¼°¹ÏÜÛ·¯9ÅW]^ư5 oÅÁûT¡•ä*C ÇC¥EZ°Ô®´Ù^KY—]¬êëèU§qV—ÄZ²\<âñŒ¯:\3S—Lí<Ùr’>]¸êzt¨›ÂÚwöαy÷#:\Ų.̉/$ă®êàh§}n#Ñ›AĐ[Q6Ë¥íS©Mc‘<™ pn½Aü1Եƙ¦)óî¬Úé°‰|ÉäàIÍüYíǦn+€¢’Óđ₫¾cg¡i¾ÓëÉ₫Ï7‘ÿh\A4¦VẠûơí^|z½e¬ßiđ4V²¬jÙ;¼¤,¹;XŒ¯„U VQEÄfÚ₫æΈ­å1­Â—e”q£:Uj(N/ếÛu}œó»ióÈÏJWñ­%ĂÎ÷y•ævo-yxÆôíú÷¬º(O₫ ŚÏoö¯Ư>ưËå¯;˜;vîÊáKÿ «ç´ÿjưă\‹²̃Zÿ­éïÓ§µeÑ@?ÛºØÚ×ÏQ)RDH®wmßØÏ8Î)n5ưNèÊe¹¥‘%r±ª–tÎÖÈO×½fÑ@MâÍi¥Y ÚîYAûˆñ¹ q·‚r;ơ5^ Ôá1́¸]±ÄaT1!M…·*FÉÏ"³(  ×u)V{¦fdÉU9tÎÓÓŒg§J§sq-Ừ·3¶ùerîØ,NIÀ¨¨ ( ¥¶¹̉æ;‹y9£`ÈêyTTPĂx§Xi¢—íJ¦"̀ªF«–bT. #A¦j¢Ó́¢å|Ÿ(Ă·ÉO¸NvçÀL|²ưÖÆ̃zơ÷¨ÓÄ:yÛntÎîÎaBÀ¿̃*ØÊçư’+.(¢+¾øGÿ#]×ưx¿₫‡p5ß|#ÿ‘®ë₫¼_ÿC€=( -øÇÿ0_ûoÿ´ëËkÔ¾1ÿ̀₫Ûÿí:̣Ú(¢(¢(¢(¢(¢(¢(¢(¢(¢*x₫à¨*x₫à¯C-₫+ôưQĂ˜ zÿ˜ê(¥x}kÛ<(­Û˜!¹x"Ùs€q ǵrFJªl­#yåÉåùđ ƯŒn+íéP¦™«¤Ñ™EjÍa1Æ̉¤̀ÍM»Ü̃Üôü}j->烠&±#’ƒ;‡̣£Zäû7tŒú+e­¢!Å_´•p£åP™ÀÈàd‘øTa³ϾGXă›ÉnIçútưhçCöLÊ¢¶>Ăjmá’Y6®eA‰gç…<àt¨RÊƠăRFÁ̀Œ ®́gn3ŒcỎtÉ™´U×"½ƒlM$O† vñœ§¥Zñ^₫d^B%„^[Œ.p@vëÍ]D©¶́dQ[ZÙoPÊ­4@ØÀ är£#ALvÍ 0—È +(Ææ~§ưÑG:³}̀ª+HØ@¨ÊL¦A“r‘½ŒcÖ ½·æ‰‹g8Çl= 5$Ä鴮ʔQEQE^¿ÏMeERöä±ă'×€?*£I;«WU§ZYÍgmy,lcÊŒ,åˆơ ƒŸZ™Ï‘\p3±ÊÑ]ảmƯá œk戂«3ùRJrÅIÎp¿‡°ªCJÓ’ÂáÅ̀±yèŸ3 oÀRc·]ĂƠ*ªnÅ:m+˜WS«èºd\“pÉ;´’ÇJÄæ• &1×pçŒTM£éÀ‚IM±Ü±9œî đ[ËưÙÁèËø̉U¢Ớ7E§c›¢¶,cÇQ¾K›y„2o0¬₫Cn,§å>ŸEh¶g/úeưÄ)†%ŒÚ£F0?6Đƒ̣Ÿ—piº© Sl娮†ßE±’êÎѾ×#Üs4xÈWî‘‘ơÏSŒTévƒHûl₫y?giB£¼ÑêÑíbÊF-ÔƯi6-ok ¤¢î`Û$  3ù12©P£©lzääç5¨[Çizöñ–&0ËăÀƯläSE!J:•h¢”}áơ­½¬Æ‘kwÑƈ·T`¸đQ©‹ºLmYØ(¥P N<Ơ–2ó][*[¢DNƠ1áöá€çS̃›vcs&ÔM6,¡•#–EÉ=UF{ÏáøR-•£ÈV9Ëṃ×vÜ’9•ç·¥O:+ÙH̀¢®Ü[#ßÅo.±ŒJZ»we®²¢¢ÂêÂR[hÈ9Á#ù̉M»˜´V´ƒËŒ„¸bvg&<ñÈç¯sRKecû<÷³+ớ8çoưió!{6eÑZOc ¤€ó@,ªdwh9a»ô ûVm ÜR‹áEzÂ4{MI™[RFvŸ1G§₫tÛ°’»±F(¦ ¢®XB.Œ¶áA‘Ô$r<₫™­¼“,ɬw‘ Ü’21Ÿ”ßUV47%taÑZBÊ×̀}Îê‘DÅ›©`=àsèjo°Ú›bÆLG¿̀ARĂä?)nưÁă¥CyoE Í1PÅÎ1ÛƒÏCMI7a84®S¢·ä¶··3ˆ“ËetDÚ0®gøP5”Ù‹X„Ê¢f`뿨Æs€¸?Je:-ôV…áu–æƯmcDx"1•àîœûúÓ­ö¦˜$¶Œ® 䀧Ê}Z|Ú\MlfÑ[P[[›ycß”-‘…#‰;ăØTcN´ób„̀ÆFhĂmÉá¿à8}Mêö²vO¹“E9öo; Ø1ɦƠ™…Q@Q@Q@Q@Q@Q@Q@w_ ?äi¹ÿ¯'ÿĐ̉¸Zî¾ÈÓsÿ^Oÿ¡¥sâÿƒ#|7ñ¢{ Q_8{Ç–ücÿ˜/ư·ÿÚuåµï¾/đÍ—ˆ₫ÇöÉnÈß·ÉeƯ·9È>‚¹ŸøVZ'üüê÷ñ?ø̣+ƠÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_₫–‰ÿ?:‡ưüO₫"øVZ'üüê÷ñ?ø̣+ƠÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_₫–‰ÿ?:‡ưüO₫"øVZ'üüê÷ñ?ø̣+ƠÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_₫–‰ÿ?:‡ưüO₫"øVZ'üüê÷ñ?ø̣+ƠÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_₫–‰ÿ?:‡ưüO₫"øVZ'üüê÷ñ?ø̣+ƠÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (©ăû‚½C₫åçPÿ¿‰ÿÄS‡Ă]FÍÿưüO₫&ºđu£J£”»¸ºR«÷<¾ơøVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ưüO₫&½/í 'ŸơǽåÔ›|Ë™›iÊîœQ@¼º ¸\̀¯˜k̉¿á[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿CúE}N¿ôÏ3[«…$¬̣ŒŒ9äuÇêi‰#¦í˸m88Èô¯Oÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâhúưé êU1ó¥ùzÿ*•_˜đ=·&œ—Ǽé4Ï÷ˆb }kÓ?á[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿CúAơ*Ç™¥̀ñưɤ^6ü®G” ›…EEPr9À5éŸđ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM_¡ư úoébóK,‚I$wqüLÄŸÎ×w.êïq+2}Ö.IJô¿øVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ưüO₫&¯Đ₫}J·ôÏ3ûLû™¼ù71ó’GL̉5ÄÍÓHpr2ǯ<₫§ó¯Mÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâhúưéÔ«Ló¨L-M¸èr nḷsÓ8üqPË<Óe•ä#¦ö'é¿đ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM/¯ĐÁ×z]Ezü+}₫~o¿ïâñ4·Ñÿçæû₫₫'ÿOûB‰?Q¬y¤×/§[úgÛj·ṿ£™`ŒWbªà­Œơ g*›1v,Ä–'$ơêđ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM AjR­k]@àæ½G₫¾ÿ?7ß÷ñ?ø?á[èÿóó}ÿÿ‰§ư¡D_Qªy¥ƯË̃^Ms Pó9v ĐsÅC^£ÿ ßGÿŸ›ïûøŸüMđ­ôùù¾ÿ¿‰ÿÄбô²ÁVz]Rµ̀퉧Æ:!søW¦·Ñÿçæû₫₫'ÿGü+}₫~o¿ïâñ4}~€}J²<ĐƯ\3+‰IS•%ÏJƯÈgaq(/÷ˆsó}}k̉ÿá[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿CúAơ:ÿÓ<ÇΗr·ùQµNăÀôG4±«‘Óœü¬G>¿©¯Nÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâhúưú•c̀ÍÍÁ ̣‘'ßÏÍơơ¥û]Éecq.äS¼å~•éđ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM_¡ư úéhn® º›‰J¿, œ7Ö¡¯Qÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâhúưx*Ïs˪hn^®#P¤O–Ù́7ăñQ^—ÿ ßGÿŸ›ïûøŸüMđ­ôùù¾ÿ¿‰ÿÄĐñô,dyuê?đ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüMÚEơǘ$‡Ùt*piD̉¨@²8w( ~Sê+Ó¿á[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿@R¬y’Ï2Iæ$®¯Œn AǦiVætmË4Ù'!È<ơüëÓ?á[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿CúAơ*ßÓ<̀\ÎO&Ö9a¼àŸzIgb ²¼„t.Äâ½7₫¾ÿ?7ß÷ñ?ø?á[èÿóó}ÿÿ‰£ëô?¤R­ư3̀¼ùIÏùÉ?xơ=OăIæɼ¿˜ÛÈ ¶y=«Ó¿á[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø>¿CúAơ*Ç™5Ä‘£^ˆX? fæ(±Ú@Ïר·Ñÿçæû₫₫'ÿGü+}₫~o¿ïâñ4}~€}J±æKq:mÛ4‹·¦Œuÿù_´ÏµÏ“j¨̃p§Û̉½3₫¾ÿ?7ß÷ñ?ø?á[èÿóó}ÿÿ‰£ëô?¤R­ư3˨¯Qÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâh₫Đ¢/¨Ö<ºơøVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ưüO₫&í !ơÇ—Q^£ÿ ßGÿŸ›ïûøŸüMđ­ôùù¾ÿ¿‰ÿÄÑư¡D>£X̣ê+Ôá[èÿóó}ÿÿ‰£₫¾ÿ?7ß÷ñ?ø?´(‡Ôk]Ezü+}₫~o¿ïâñ4·Ñÿçæû₫₫'ÿGö…úc˨¯Qÿ…o£ÿÏÍ÷ưüO₫&øVú?üüßßÄÿâh₫Đ¢Q¬yuê?đ­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüMÚCê5.¢½G₫¾ÿ?7ß÷ñ?ø?á[èÿóó}ÿÿ‰£ûBˆ}F±åƠƯ|(ÿ‘¦ç₫¼ŸÿCJ×ÿ…o£ÿÏÍ÷ưüO₫&·<+á+ S–êÖk—w„ÆD¬¤`²Àz ʾ6”鸭٭%HTRg]EWz¥-C₫Y₫?̉©W1ñ;]Ô´Ó¯́ëŸ'Îó·üÙÆ̀uÔןÂwâOú äÿøö+Åÿá;ñ'ư¿̣üMđø“₫‚_ù?₫&€=¢ñøNüIÿA/üÿGü'~$ÿ —₫@ÿ‰ h¢¼_₫¿ĐKÿ GÿÄÑÿ ߉?è%ÿ#ÿâhÚ(¯ÿ„ïÄŸôÿÈÿñ4ÂwâOú äÿøö+Åÿá;ñ'ư¿̣üMđø“₫‚_ù?₫&€=¢ñøNüIÿA/üÿGü'~$ÿ —₫@ÿ‰ h¢¼_₫¿ĐKÿ GÿÄÑÿ ߉?è%ÿ#ÿâhÚ(¯ÿ„ïÄŸôÿÈÿñ4ÂwâOú äÿøö+Åÿá;ñ'ư¿̣üMđø“₫‚_ù?₫&€=’|ˆ Á£²°½½µK…¿†'å0îÆ wJñöñψÙJG ơưÄüMzÿ€î¦½đe…ÅĂï•üÍÍ€3ûƨÇö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙVƯ‰ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöU·EbbßĐMđÿ²£ûû₫‚kÿ€ÿư•mÑ@ŸØ·ßô_üÿ́¨₫žÿ ÿà?ÿe[tP'ö-÷ư×ÿÿû*?±o¿è&¿øÿÙW-ñcÄúdžl4Ét‹Ï³<ó2H|¤}À.G̃¸[O‰-•A}[?öïÿ]4p³¬¯Œ*â#Kâ=ûû₫‚kÿ€ÿư•Ø·ßô_üÿ́«É¿áax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâḱÚ½×ă₫FÚ»?ëæzÏö-÷ư×ÿÿû*?±o¿è&¿øÿÙW“ÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄÑư›WºüÈ?´)v×̀ơŸ́[ïú ¯₫ÿöTbßĐMđÿ²¯&ÿ……âŸú ä¼_üMđ°¼SÿAOü—‹ÿ‰£û6¯uøÿhŔÿ¯™ë?Ø·ßô_üÿ́¨₫žÿ ÿà?ÿe^Mÿ Å?ôÿÉx¿ø?áax§₫‚Ÿù/ÿGöm^ëñÿ ₫Đ¥Ùÿ_3Ö±o¿è&¿øÿÙQư‹}ÿA5ÿÀ₫ʼ›₫è)ÿ’ññ4ÂÂñOư?̣^/₫&́Ú½×ă₫Aư¡K³₫¾g¬ÿbßĐMđÿ²£ûû₫‚kÿ€ÿư•y7ü,/ÿĐSÿ%âÿâhÿ……âŸú ä¼_üMÙµ{¯ÇüƒûB—gư|ÏY₫žÿ ÿà?ÿeGö-÷ư×ÿÿû*̣oøX^)ÿ §₫KÅÿÄÑÿ Å?ôÿÉx¿ø?³j÷_ùö….Ïúù³ư‹}ÿA5ÿÀ₫Ế[ïú ¯₫ÿöUäßđ°¼SÿAOü—‹ÿ‰£₫è)ÿ’ññ4fƠî¿̣í ]Ÿơó=gûû₫‚kÿ€ÿư•Ø·ßô_üÿ́«É¿áax§₫‚Ÿù/ÿGü,/ÿĐSÿ%âÿâh₫Í«Ư~?äÚ»?ëæzÏö-÷ư×ÿÿû*?±o¿è&¿øÿÙW“ÂÂñOư?̣^/₫&øX^)ÿ §₫KÅÿÄÑư›WºüÈ?´)v×̀ơŸ́[ïú ¯₫ÿöUjĂO¹´¤đL¥q´E·#œä×ÂÂñOư?̣^/₫&º¿‡̃)ÖµÍz{mFóÎ…mZ@¾R.2Œå@́MELJqrmiưv.Ús’OS̉h¢â:Ï-øÇÿ0_ûoÿ´ëËkÔ¾1ÿ̀₫Ûÿí:̣Ú(¢(¢*[f‰.¡iÓ̀„8.™#rç‘ǵEE4́Áwá>+Mj8á&́̀ï§üíÄI±ˆÆyÊÉß=)/|#§]ƯưÅ£´U»–ÜÊC¹̀p†l层Àô~•ˆ6ƠûM»̣í™́!0F¥×v’ụ̈p§AP[x³Pµ,vî|ù§,êÄ–‘6·~˜éIí /2₫™à¦Ơ­¾Ñkw3Ă$Í »­£Ä î|Ư®N3ÍM„PÓ4éaY"qk,×Mm3¹YJ€©OÓ+ÇÄZwØMµ­̀*æHÅÄe¼¶#Œ=89TÖ̃*½¶¶‚Ûɶ’̃(ElHŒÛÎ́rB1Gơø˜_ù0øVÔ/í¥º}”FÀCld•ƠÆCyy:ơ ö5Ÿá/¶ØƯ]}²M°̀đâV£;œ 2)ÿtŸj£oâ‚̣[Ÿ́Ư9ÙƯ]TÄTDW¦̉¬üÎ{ÔÖ̃+¼¶»’ó́¶R^<Í0¸xˆtf낤d{6EGá›m2çP™57ˆ yLQ¼œ`3@Æ}+bo 5₫¤Â+ 4ø#´¸·cv$ç‹-ŸBxæ¹Í7V›Mi÷ 2”–+ˆ÷+ŒçØ{‚+G₫ûï8bÚÍmDß́kl'qï»9ç9Í¿®áư~E‰¼,f½mKPû5¥³Ä‚Qfs Ü¿&F0:óǽW·đÊÜ-‹%ú2]êÈ:FHmùÆH';ºqQ[øâ .¿Đ¬d·¸dv¶x–¬¿t€9^{椲ñuơŸü»Ù̀E×Úă2Å₫®Nû@ @éùb…ư~đAÿ_×Ü]‹Â¶¶÷ZHüJ÷·>RÀ`8!e(ÄĂ3Ç<₫5=Ç„´éc°ÚöT¼º%PẶ3FH́»€yÏ_jÅ“Ä·’]é×&+pö4‘§—.wsÓ'¶8«v>!{»Í5/¥·´Îá®äD́ë–̃Sœ‚zqøĐ•̉í{–4ȬKM¾k›q;dzXbvŒçœƯkÚ¾ÿÈ…¦ÿÛ_ươâÚ₫¦5rêơWdr>#N›Pp£̣½§áÏüˆZoưµÿѯIk¨̃‡SESQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEä¿¿ä¢ÿ×Ëÿè"¼ÂÇîôïß̣ Ñëåÿô^ca÷E{Ây˜íËÔQEzgQEQEQEQEQEQEQEQEQEƯ|(ÿ‘¦ç₫¼ŸÿCJákºøQÿ#MÏưy?₫†•Ï‹₫ đßƉ́4QE|áïÏ‹¼1eâ?±ư²[„̣7ị́YFwmÎr÷Es?đ¬t_ùúÔ?ïâñèỵ̈Ïñ₫•N€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8¿øV:/üưj÷ñ?ø?áXè¿óơ¨ßÄÿâ+´¢€8KŸ†ú<0—[›âG¬‰ÿÄ×oàû8́<-gkb‘™0Xó̀Œ­CÿÍW¼;ÿ +«ÿèm@”QU5;á¦iWwæ)&Đ¼¦8ÆYöŒà{ñCvÔ¾…º+Ó¼QçÙ=ớvKg„̣®4û϶,ŒÇT ¿8à)ÎzƠ‡ñf‹1Ê×Ra÷ü¢ÚRÑ„ 9u ˜À$X3E€Ú¢±æñFof.å½ I¤å¹ùbm²çÛ5NëÆu£ ´©pV`¬ [L]I.›2#8êzœ(¤¢©CªÙÜ»¥¼ÂW[t¹Âƒ-ó´ççi÷⹘> G?†ômPì'Ônăµk_;˜w6 ÛȃĐgrôÍÖÁ}.vtV1ñ^­8k‹È́ï Œ#8}ŒWƒÁ MV·ñŸ4÷ˆéqÁ:AưS,¬cƯl̃0 íĐf€:**¥–¥k¨*½¬"— Z•{Ç–9y‘!+ƒÇ9ả«Çâ»Û•[m2ÜÁ¸ºf–đ¡hËHå‘ÊÇHûØ÷£¥ĂÈê₫Ơsÿ>ñßăÿÄÑö«Ÿù÷‹₫ÿ₫&¹ë/Å}­5„v²̀HæcïµY£ÇbÔơî})ˆ®¢‰y¦¬WÁÉ\oÜ]ª1Ú6¶F8Èç‚iØWêt_j¹ÿŸx¿ïñÿâhûUÏüûÅÿÿ\ä>)Yg̉ákR¯x̣Ç/ï2 d%pxç,0:UxüW{r³Ëm¦[˜ ·L̉̃-i<²9XóÉ{ôº\~GWö«Ÿù÷‹₫ÿ₫&µ\ÿϼ_÷øÿñ5ÏØx¢+ưpéélé„:NÇï>ƠfˆWS××̉¦¸Ơ5¬Í§ØXÚÍäĂ¯$÷mß,FßÜơïNÖîm}ªç₫}âÿ¿Çÿ‰£íW?óïư₫?üMdéñÎỌ̈JâxØÆêÈÊ$ ¼¨m¸'o u>•·4Û‹kY™åˆÜG›ZÄaø]ç\„ă=© ÜûUÏüûÅÿÿGÚ®ç̃/ûüøÇÿ„—K*¬³JÁæhm´¬]×;‚€¼ăiééL“Äúo‘+Á8‘£·') @‡8,ÁN3ƒÇ^·ö«Ÿù÷‹₫ÿ₫&µ\ÿϼ_÷øÿñ5Ơsÿ>ñßăÿÄÖGü$ZnÀ|Ùƒ™<¯(ÛIænÛ»îmƯÓœăªw>(̣<%º–fQ'–D '8f ÁÇ=sÓè₫Ơsÿ>ñßăÿÄÑö«Ÿù÷‹₫ÿ₫&°fñ=´:Đ²`>Î,̣K­ÿ*€F1Ï=}=jøHôƯ€ù³o2y^Q¶“̀Ư·wÜÛ»§9Æ1@ÿj¹ÿŸx¿ïñÿâhûUÏüûÅÿÿX6^)°¹³´Vhâ4rªëc…Üáp¹=3½«ê‘èúUÆ¡4SË ¹̉ÜøÏ$n§ØĐûUÏüûÅÿÿGÚîç̃/ûüø篼e£YiVz‚ܨïX%¬v˾I‰=}»ç§Nµ½¹ÂxD€œ‚bê*J«§ÿǧư´“ÿC5j€ (¢€ (¢€ (¢€ (¢€ (¢€<—ă·ü‚ô_úùưW˜XưƠ¯Nøíÿ ½₫¾_ÿAæ6?tW±—ü'™Ü½EW¦y¡EwÖ¾°ŸỶ k1k5œrMl×X•Ü¡$…ÎO«₫µÿ#o«Ï§ơ·ùœÅ×^økO‚đÜ›8"´µyBÆe.̉’2øé̉¹ưgL}VÁäY DaÔ`0 "*¡V2v[ÿ_æD©Ê*ïbQZQEQEQEQEQEQEƯ|(ÿ‘¦ç₫¼ŸÿCJákºøQÿ#MÏưy?₫†•Ï‹₫ đßƉ́4QE|áïïÿåŸăư*\¿ÿ–ôªtQEQEQEQEQEQEQEQEQEVÿ₫=¯xw₫@VÿWÿĐÚ¨ßÿdzUïÿÈ ßêÿúP¥Cw³ÙÍ-m+© 2(b‡±ÁƦ¢€8»Ï¶©<×z…Ö÷måị́tí¹GƯ™PÈ̃fyx`Z·„îl^ôÛë+̀`Ó•c*Î(°¬1Á%³Üêh¡i°=w8ÛOqnöÏ« ¶]Ç‹_™|÷Kÿ6Çf¯ßxnIV~̀Êw9ù²Üö«x[M[å¸ÚÚåc¶†̃cw Ÿ]Ặ­ß²̃rûøø>ËyưÈ?ïáÿâi­ơ9¨ü%>MÄW³F;“rggv™‰ßû­û@*JñÈ⤱Đ/!8®ïíçQp·ºZ²<μå˜ÈƯöp8éĐư–óûßĂÿÄÑö[ÏîAÿÿBЧ5sá?9µwøÄ÷¬̣³öfS¸‘ÏÍ–çµX‹ÂÚjß-ÄöÖ×+´6đ¬Đ+Ä{¹úî•nư–óûßĂÿÄÑö[ÏîAÿÿBЧ9„áíîṾsѹiŒQÙ‰̃<½ÛFT•ă§hƠ|3ư£¬¾¡ÿ¹7‘l¾Ó₫Ñ·ic•;×Ưú è₫ËyưÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰¤ön^éwÁvÛ"Ú3åö“_Ó̃©[x9a–̃I%±¸hâ†'i¬±đ Ça#ơé‘ê¾ËyưÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰¦´›—E½·:RYOmîç™æ’<ª‡Wp'—ƒïD>XtÛÛ1xOÚ­Ræ>„%±åϱֺO²̃rûøø>ËyưÈ?ïáÿâhÊ\ø;ísK$—VÁKù‹Úb7páƒJ›ö¹àŒ€¤î?†˜ÑxvçJV·„Î¥­í„h¥³È@{}sï[e¼₫ä÷đÿñ4}–óûßĂÿÄĐ´V·9Ơđ´i}%ÊƯŸà̀ªS!¤€ çû̉»gßơTø-d·)-ùg{U³ṿ~S¨Ú6’y 7gœä˜ÇYö[ÏîAÿÿGÙo?¹ưü?üM!ä>’Ù Ök k¨¥g EJm  |“ß;¿Jµ‡åè6Z[\ïû3ÄÆCßØáºgŒă³ö[ÏîAÿÿGÙo?¹ưü?üM09dđdInĐưµÎc™ä1ù}ÿbQïíV‡îÍøÔ¿´!₫Đó7û1̣ö́Ù·füûçw_n+¡û-ç÷ ÿ¿‡ÿ‰£́·ŸÜƒ₫₫₫&€9K_Åk%»™m. Gr=Å’Èça<¡'äÈ<đzqê³_²̃rûøø>ËyưÈ?ïáÿâh̉ü¡èúÜúµ®Û‰sµIÊCŸ½å¯đç¿é]i~ËyưÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰  üyúé'₫†jƠCk An±±²I#¦I'úÔÔ†QEQEQEQEQEy/Çoùè¿ợÿú¯0±û¢½;ă·ü‚ô_úùưW˜ØưÑ^Æ_đf;rơ*í.<2@úRQ^™æbkºrjÖZˆ½ºó¬àX#S§.̉ª¥FœàúÓ³¥-,e¹Q²E,bXäûüuÏPHí\µ±]ÿ/̣ó5öϱÚÛø—M6WÜÉæÆRÚÖK<™0ƯPIŒçÆ?¥W›]̉nnæéÚâg•¤f—IBNWh_ơÿt@́ErTRú¼nßqûyY.ÅíVâÚâæ3hª"%"ÜBXÔ¨fä÷9æ¨ÑEl••Œ›»¸QEÄQEQEQEQEQEƯ|(ÿ‘¦ç₫¼ŸÿCJákºøQÿ#MÏưy?₫†•Ï‹₫ đßƉ́4QE|áïïÿåŸăư*\¿ÿ–ôªtQEQEQEQEQEQEQEQEQEVÿ₫=¯xw₫@VÿWÿĐÚ¨ßÿdzUïÿÈ ßêÿúP¥6Bá UŸ°fÀüđiÔP}÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ«Sº́}÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ«QuØ ûïç̃ß₫ÿŸ₫"÷¿óïoÿÏÿV(¢ë°÷̃ÿϽ¿ưÿ?üEïç̃ß₫ÿŸ₫"¬QE×`+ï½ÿŸ{û₫ø7̃ÿϽ¿ưÿ?üEX¢‹®ÀWß{ÿ>öÿ÷üÿño½ÿŸ{û₫ø±E]€¯¾÷₫}íÿïùÿâ(ß{ÿ>öÿ÷üÿñb.»_}ïüûÛÿßóÿÄQ¾÷₫}íÿïùÿâ*Å]v¾ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄT²J¦ç8:g5Ûb₫́ß÷áÿ‹®Àïç̃ß₫ÿŸ₫"÷¿óïoÿÏÿGÛb₫́ß÷áÿ¶ÅưÙ¿ïĂÿ…̣ß{ÿ>öÿ÷üÿño½ÿŸ{û₫ø>Û÷fÿ¿₫}¶/îÍÿ~ü(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ưøđ£í±voûđÿáEü€7̃ÿϽ¿ưÿ?üEïç̃ß₫ÿŸ₫"¥T™7!ÈéÓ¤–háy<đ“ø .»ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ưøđ£í±voûđÿáEü€7̃ÿϽ¿ưÿ?üEïç̃ß₫ÿŸ₫"¶ÅưÙ¿ïĂÿ…m‹û³߇ÿ /ä¾÷₫}íÿïùÿâ(ß{ÿ>öÿ÷üÿñ}¶/îÍÿ~ü(ûl_Ư›₫ü?øQ ÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ£í±voûđÿáS#¬ˆ*yQuØw̃ÿϽ¿ưÿ?üEïç̃ß₫ÿŸ₫"Ÿ-Äp°V,X̣©cù gÛb₫́ß÷áÿ‹ùo½ÿŸ{û₫ø7̃ÿϽ¿ưÿ?üEm‹û³߇ÿ >Û÷fÿ¿₫_È}ïüûÛÿßóÿÄQ¾÷₫}íÿïùÿâ(ûl_Ư›₫ü?øQöØ¿»7ưøđ¢₫@ïç̃ß₫ÿŸ₫"÷¿óïoÿÏÿGÛb₫́ß÷áÿ¶Â9"P=L.ư(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄTà‚ ô"¢’æ(ßa,XrB#6>¸]v»ïç̃ß₫ÿŸ₫"÷¿óïoÿÏÿGÛb₫́ß÷áÿ¶ÅưÙ¿ïĂÿ…̣ß{ÿ>öÿ÷üÿño½ÿŸ{û₫ø>Û÷fÿ¿₫}¶/îÍÿ~ü(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ưøđ£í±voûđÿáEü€7̃ÿϽ¿ưÿ?üEïç̃ß₫ÿŸ₫"{F|ÅÏh™GæEX¢ë°÷̃ÿϽ¿ưÿ?üE*½Ùaºç’&$ÿ|ÔôQuØ%øíÿ ½₫¾_ÿAæ?tW§üvÿ^‹ÿ_/ÿ ó º+×Ë₫̀Çn^¢+Ó<Đ¢(¢(¢(¢(¢(¢(¢(¢(¢(®ëáGü7?ơäÿúW ]×ÂùnëÉÿô4®|_đdo†₫4Oa¢+çx§ÿ,ÿéTêåÿü³ü¥S ( ( ( ( ( ( ( ( (  ·ÿñ́Ơ{Ă¿̣·ú¿₫†ƠFÿ₫=¯xw₫@VÿWÿĐÚ€5(¢±Ù’åäx^K¯˜Ä± €¤Đâ¦Ñđ´'í“}¨ëÿg'Í;Ê‹̉ uÎ<±Óû¾Ô-mëoËüÆô₫¼®w4W o-Å–·ƯíÍỜ:ƒÅí¤d…·3Hå]¿w( Êä‘ÍOât»mRæá&ẩÚÑZK{M­§µ9rdØY2Æ̣ÉĐä̉¾—µ·ơǾè®ÏÅÚ½ưó=¾”’ù>lÁÏîƒï'Í<ƒ°GÓœ̉ŸkºFqw“Üj– %¢Åª‹–(3–9¼· ß…[úơØW;+Ïá3ñömî£ư›n¶É ËÂd ¸h›hÎ&,Ààçä]§Ö»‹U½S₫—=¼Ÿ»\ˆ¢)óäî<±ăp;`̣sÂƠQ@Q@Q@îÖÚÿ×Sÿ 5KQ\ÿ®µÿ®§ÿ@jt¨d…ÑdhÙ”€éŒ¯¸È#?Q@¢¸¸¾Ù.¥©̣â1wp’¤w¾Tó*´p唜`7|b¢²’óT²ÑƯ/o[Tx¡‘‚NDQD™ . €˜u¹¢(¢(+oơ·_ơÔè I/üĂÿ\¤₫iE¹ %Ù$%'ưÅ¢Oøÿ‡₫¹Iü̉€&¢ªj‘4Ú]Ê$̣ÀLdù‘6coLơôÁæ¸ûËÛél4…ß;Æ4sy+-ë[»²„Ën– p~RO4_úûÿÈv₫¾ïó;º+†·¿»Ÿ_ơ'Ÿ́O¨,áƒ`–`û˜ÉÎÿ½ík¹§m ¸QE†—ü{·ưu“ÿC5-Cf@·bH½“¯ûæ€ÿ! ë’7©ªÿ! ¿ë’7¬¯‰‡†o%‚ê{w… ¡}¤ă¶ză>˜éé‘@tW¬ß\Åâ+‰$ó₫Éd–̀7f"7»vD™ °ă“K£\\CL®®$–ôƯ ˜Vd]Æœ&Ó…à çœ3¯¢(¢(+ùÛ×%₫B›ü|]×Qÿ -:Èaj 1.=ø¤‡ư}×ưuúĐÔW'ăNêÓOx-́Ê3=ͼ662ƒ´“Ôœp=êruâh¤±»¾s‚K½̣²Ăf>"̣ø‰!¹‡r2 ô:Z(¢€ (¢€ ½ÿ úäßÊ­U[ßøđ¹ÿ®MüZ ( $øíÿ ½₫¾_ÿAæ6tW§üvÿ^‹ÿ_/ÿ ó º+ØË₫̀Çn^¢+Ó<Đ¢(¢(¢(¢(¢(¢(¢(¢(¢(®ëáGü7?ơäÿúW ]×ÂùnëÉÿô4®|_đdo†₫4Oa¢+çx§ÿ,ÿéTêåÿü³ü¥S ( ( ( ( ( ( ( ( (  ·ÿñ́Ơ{Ă¿̣·ú¿₫†ƠFÿ₫=¯xw₫@VÿWÿĐÚ€5*9àæ $–«Ç"†V¨ ơ%ZăO²ºu{‹;yWj´‘+2#¦UOÔJeö“§jk·PÓínÆƯ¸¸…dă ăxÊ©úéW(  Phúe­˜´·Ó­!¶$ǪÛ@ÆAçÔ ¦ LêCN´ä`ƯÍÆ1÷ñœu«´PÑ4˜µÔc̉́’ù‰&åmĐJIàüØÍ-ö‹¥jsG.¡¦Y]Ë÷,…~„ƒ½ESm'Mkï·6Ÿho6́ûA…|͸Æ7c8Ç!Ó́™-Ú[”µ!­ÔÆ1 §.#Ơb£ư‰¥y×fYy· ¬ïöuƯ(=C|ĂëV„­ĂÜ,Q‰B4FæPI¤ÇÜúÔ”PEPEPEP{ŸơÖ¿ơÔÿè N®!xf%‰ÁWGPÊÀơ¢’弧EÜc}ÛsŒđGơ¦ù̉ÿÏœßñTM<=¢GjÖ©£éëǹ¢È°èHÆ3ïO›C̉.nVæ}*ÆYĐ²ÉnŒÀ˜$gƠgΗ₫|æüÓÿ£Î—₫|æüÓÿ  ¨¨|éçÎoÍ?øª<éçÎoÍ?øª‡Î—₫|æüÓÿ£Î—₫|æüÓÿ $\­ôÄ’Ă#́xäPÊÊQA§È¾€å?óJu²:ù®ë´Èû¶ç8àéI:È'dC&Ơe*œóô º´¶¾·k{Ëx® lnd§êWûGû,v¿Ù6?g‰·ÇÙÓb7¨À>ơkΗ₫|æüÓÿ£Î—₫|æüÓÿ gXư»íßc·û^1çùKæcǼg¥Y¨|éçÎoÍ?øª<éçÎoÍ?øª‡Î—₫|æüÓÿ£Î—₫|æüÓÿ  ª´0CshRx£•́á]CË!*yîzNó¥ÿŸ9¿ï¤ÿâªKhÚ8|,̀@í’N?Z`ÿ„ßơÉ?›Ó/´ëN ư•½Ü@î ;È/Eÿ¯—ÿĐEyƯéÿ¿ä¢ÿ×Ëÿè"¼ÂÇîö2ÿ„ó1Û—¨¢ôÏ4(¢(¢(¢(¢(¢(¢(¢(¢(¢+ºøQÿ#MÏưy?₫†•Â×uđ£₫F›Ÿụ́ư +Ÿüá¿Øh¢ùẴ)ßÿË?ÇúU:¹ÿ,ÿéTè¢(¢(¢(¢(¢(¢(¢(¢(¢(­ÿü{5^đïü€­₫¯ÿ¡µQ¿ÿf«̃ÿ¿Ơÿô6  J(¬Ïê2éÔơ(fk[Y&A(%rªHÎăQCvWv4è®KGñCÜêRĂ.­¤êvqÚ5Ä·Zr[r¤|¯ûÇ ’9åQ×=qÆ2@7>Åiÿ>°ÿß±GØ­?çÖûö+*ÛPÔÿá"ûɳ’&IJ@­ºƯC›ØœĂÛiÿ?PÿßÁGÛm?çêûø(z*¶ÚÏÔ?÷đQöÛOùú‡₫₫  »ÿR¿ơÖ?ư hûm§üưCÿG5Ä3„RG2!Â0<ôöz( ( ( ( ( ( ( ( ( ( ( ( ( ( %øíÿ ½₫¾_ÿAæ?u~•éß¿ä¢ÿ×Ëÿè"¼ÆÇîö2ÿ„ó1Û—¨¢ôÏ4(¢(¢(¢(¢(¢(¢(¢(¢(¢+ºøQÿ#MÏưy?₫†•Â×uđ£₫F›Ÿụ́ư +Ÿüá¿Øh¢ùẴ)ßÿË?ÇúU:¹ÿ,ÿéTè¢(¢(¢(¢(¢(¢(¢(¢(¢(­ÿü{5^đïü€­₫¯ÿ¡µQ¿ÿf«̃ÿ¿Ơÿô6  J(ªÚ…ôfstÅ`¶‰¥’FOå+üU¬>n£¦_éñï‰Üö#m ½]”z‚r8«Íâ -à¸}^Á`¸$C!¹@²pBœàóé@4U)5.&¹Y5+4kP á§Pb¡n~^£­V¾ñ6a¦hK©Z´ ¼E'BgÚ2Bs†?J/¥Æ•Ưj+6ï]³±K . $w¬B;`,x¤%É< ¨}i‘ø‹Mû —w §ÅpÄ@/]aib=Æœ(¶¶îjÑU%Ơtè i濵v¤y”(e²’OP‰°}*Ø Œƒ‘@Q@Q@Q@Q@ZíÅ̀Z-¤₫L“]$%öÀ ö?…Gö g₫ƒ¿ù(”¾ é¦ØB/ëZSM¼/4̣$Q Ë;°UQêIé@Ÿ`Öè;ÿ’‰GØ5Ÿúÿä¢TÉ®é&«bÇ p.đ£,zöç̉¤¹Ơ´Û0 Ö¡i 0ófUÈ9Áä÷ÁüUû³ÿAßü”J>Á¬ÿĐwÿ%¯ BÈ®áw]₫^|Á÷±»o^¸çœÔ1ë:\°K•n€2~Á¬ÿĐwÿ%°k?ôÿÉD­j('́ÏựQ(û³ÿAßü”JÖ¢€2~Á¬ÿĐwÿ%°k?ôÿÉD­j('́ÏựQ(û³ÿAßü”JÖ¢€2~Á¬ÿĐwÿ%°k?ôÿÉD­j('́ÏựQ(û³ÿAßü”JÖ®zÿQÔÿ´oâ´’̃(,¢IȤ“¸ư(ßØ5Ÿúÿä¢U«o`•ÅƯùºÊåG”¨åYV§ư£aÜ–̣Á{Ȇ5  ë[ë₫¿₫ưhZ(¢€ (¢€ (¢€ (¢€ (¢€ (¢€<—ă·ü‚ô_úùưW˜XưÑ^ñÛ₫Az/ư|¿₫‚+̀l~è¯c/øO3¹z(¯LóB( ( ( ( ( ( ( ( ( »¯…̣4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿĐ̉¹ñÁ‘¾øÑ=†(¯œ=âÿü³ü¥S«—ỵ̈Ïñ₫•N€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€*ßÿdzUïÿÈ ßêÿúUÿøöj½áßù[ư_ÿCjÔª÷ñM6Ÿq¿‘çµßQGüÇ₫/ưzd̃¾¸̉o#vn¦Ôa¾ Ĉ­±#R†E—”8`8àăµV¸đv¤–³‹(,KË+›Yặim+d8vVg?̃nk¼¢ëđ·ä OëÎç5®xU5ë=Îñc’Ú̉]× ½”°̣]̉;î`{t¬»ï ë²A%Ü°_4V̉Ù×ÓÛy±³®₫Påˆdèx •ÜÑCƠƯ‚ÑYm–:xúk8 ²µ‹t\+ÆvSËb‚J„U€<»u9®Èg=h¢‹…‚( ( ( (  tÓ?́!ơ©uË 5M öÆ"‚KˆZ5/÷rG~µˆ:iŸö‹úÖ­s“è2}º{¦̣LM¨-Û(±Œ[ˆÈÀœƒÇ§åYv>¾“Lá#ÍÊÊVÙ¦™í¥"ä+s‚IV_âä+·¢–Oëĉ+ÙÊ‹r.ä• +9yeBÀù¹ố*¥·…ơ;ư'N’u‚ÚKk;Xă&’2ûb‚†ŒöÎ w´P´ü?zÿ_3Óü9%­â\4Vè>ÏqÇçÉ7Ï#«gṣĂ ÉăƠ<)«y–̣3Ä"µaäÚ.¡0ÀØÊq8@àr0§wCÏ/ø27Ă'°ÑEó‡¼S¿ÿ–ôªurÿ₫Y₫?̉©ĐEPEPEPEPEPEPEPEPEP[ÿøöj½áßù[ư_ÿCj£ÿÍW¼;ÿ +«ÿèm@”QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEy'Çoùè¿ợÿú¯1±û¢½?ă·ü‚ô_úùưW˜XưÑ^Æ_đf;rơQ^™æ…Q@Q@Q@Q@Q@Q@Q@Q@Q@w_ ?äi¹ÿ¯'ÿĐ̉¸Zî¾ÈÓsÿ^Oÿ¡¥sâÿƒ#|7ñ¢{ Q_8{Å;ÿùgøÿJ§W/ÿåŸăư*QEQEQEQEQEQEQEQEQEU¿ÿf«̃ÿ¿Ơÿô6ª7ÿñ́Ơ{Ă¿̣·ú¿₫†Ô©EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP’üủ´oúøưW˜Xq^Ÿñ×₫Az/ư|?₫‚+̀l~è¯c/øO/¹v(¯Ló‚( ( ( ( ( ( ( ( ( »¯…̣4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿĐ̉¹ñÁ‘¾øÑ=†(¯œ=âÿü³ü¥S¨¼I¯iº'Ù¿´n|Ÿ;~ÏƯ³gÏƯÔVü'ÿ —₫@“ÿ‰ ç?á<đ×ư¿̣ŸüMđxk₫‚_ùO₫&€::+œÿ„óĂ_ôÿÈñ4Âyá¯ú ä ?øèè®s₫Ï ĐKÿ IÿÄÑÿ 熿è%ÿ$ÿâh£¢¹ÏøO<5ÿA/ü'ÿGü'ÿ —₫@“ÿ‰ ç?á<đ×ư¿̣ŸüMđxk₫‚_ùO₫&€::+œÿ„óĂ_ôÿÈñ4Âyá¯ú ä ?øèè®s₫Ï ĐKÿ IÿÄÑÿ 熿è%ÿ$ÿâh£¢¹ÏøO<5ÿA/ü'ÿGü'ÿ —₫@“ÿ‰ ç?á<đ×ư¿̣ŸüMđxk₫‚_ùO₫&€6oÿăÙª÷‡äoơư «»ñ¿‡e•5“ÿL$ÿâjî‰ă¿ Úé0Ă6¥¶E-‘äHz±=–ª0”Ư¢®L¥«ÉØí¨®c₫…¿è)ÿ’̣ÿñ4ÂÂđ·ư?̣^_₫&¯ØU₫W÷2=µ/æ_yÓÑ\Çü,/ ĐSÿ%åÿâhÿ……áoú 伿üM¯̣¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMđ°¼-ÿAOü——ÿ‰£ØU₫W÷0öÔ¿™}çOEsđ°¼-ÿAOü——ÿ‰£₫…¿è)ÿ’̣ÿñ4{ ¿Ê₫æÚ—ó/¼éè®c₫…¿è)ÿ’̣ÿñ4ÂÂđ·ư?̣^_₫&aWù_ÜĂÛR₫e÷=̀ÂÂđ·ư?̣^_₫&øX^ÿ §₫KËÿÄÑ́*ÿ+û˜{j_̀¾ó§¢¹øX^ÿ §₫KËÿÄÑÿ ÂßôÿÉyø=…_åsmKù—̃tôW1ÿ ÂßôÿÉyø?áax[₫‚Ÿù//ÿG°«ü¯îaí©2ûÎæ?áax[₫‚Ÿù//ÿGü,/ ĐSÿ%åÿâhö•ừ=µ/æ_yÓÑ\Çü,/ ĐSÿ%åÿâhÿ……áoú 伿üM¯̣¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMđ°¼-ÿAOü——ÿ‰£ØU₫W÷0öÔ¿™}çOEsđ°¼-ÿAOü——ÿ‰£₫…¿è)ÿ’̣ÿñ4{ ¿Ê₫æÚ—ó/¼éè®c₫…¿è)ÿ’̣ÿñ4ÂÂđ·ư?̣^_₫&aWù_ÜĂÛR₫e÷=̀ÂÂđ·ư?̣^_₫&øX^ÿ §₫KËÿÄÑ́*ÿ+û˜{j_̀¾ó§¢¹øX^ÿ §₫KËÿÄÑÿ ÂßôÿÉyø=…_åsmKù—̃tôW1ÿ ÂßôÿÉyø?áax[₫‚Ÿù//ÿG°«ü¯îaí©2ûÎæ?áax[₫‚Ÿù//ÿGü,/ ĐSÿ%åÿâhö•ừ=µ/æ_yÓÑ\Çü,/ ĐSÿ%åÿâhÿ……áoú 伿üM¯̣¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMđ°¼-ÿAOü——ÿ‰£ØU₫W÷0öÔ¿™}çOEsđ°¼-ÿAOü——ÿ‰£₫…¿è)ÿ’̣ÿñ4{ ¿Ê₫æÚ—ó/¼éè®c₫…¿è)ÿ’̣ÿñ4ÂÂđ·ư?̣^_₫&aWù_ÜĂÛR₫e÷=̀ÂÂđ·ư?̣^_₫&øX^ÿ §₫KËÿÄÑ́*ÿ+û˜{j_̀¾ó§¢¹øX^ÿ §₫KËÿÄÑÿ ÂßôÿÉyø=…_åsmKù—̃tôW1ÿ ÂßôÿÉyø?áax[₫‚Ÿù//ÿG°«ü¯îaí©2ûÎæ?áax[₫‚Ÿù//ÿGü,/ ĐSÿ%åÿâhö•ừ=µ/æ_yÓÑ\Çü,/ ĐSÿ%åÿâhÿ……áoú 伿üM¯̣¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMđ°¼-ÿAOü——ÿ‰£ØU₫W÷0öÔ¿™}çOEsđ°¼-ÿAOü——ÿ‰£₫…¿è)ÿ’̣ÿñ4{ ¿Ê₫æÚ—ó/¼ă>;È/Eÿ¯‡ÿĐEy…ƯƯü^ñ—¯iz_öeןäÜ·™û¶\exûÀzá,~è¯Si+3ƒ%-S/QEépQEQEQEQEQEQEQEQEQEWuđ£₫F›Ÿụ́ư +…®ëáGü7?ơäÿúW>/ø27Ă'°ÑEó‡¼yoÆ?ù‚ÿÛư§^[^¥ñ₫`¿ößÿi×–ĐEPEPEPEPEPEPEPEPEPSÇ÷ASÇ÷zoñ_§êĂøK×üÇQEí@QEQEQEQEQEQEQEQEQEQEQEQEŒÁFX€=M3΋₫z§ưô)—Ÿñêÿ‡ó¬ª‡+•Í:/ùêŸ÷Đ£Î‹₫z§ưô+OĂ°Ơ´³<‚îêëÎ(ÖÖsF²F€¿có&I#:Ơhü¨K¤¶¦²D–Ê܉C«"ïٖ•=Wq>ƠŸ·vfŵtUó¢ÿ©ÿ} <è¿çªßB®Åàm^[¦¶4\Ëo·,Ị×s8I+‚:rr0*¤₫}7ÄvÚ^«:ÛG+FZ|6₫,0cÇ4*ñnɉђWhoüơOûèQçEÿ=S₫ú·}খ̣ÖÛK´¾æ2~öyx]gr¼C®?‡ôëU§đTÖ6W²ßßÁo-»ÀY$ì™Ă“#¡à€x9Œ¥ˆ‹₫¾E<<‘›çEÿ=S₫úyÑÏTÿ¾…k\x(®¡yakụC{¢Ê]•CI»†]™=:ƒÇ¿j_đ‡_íQ.¬¤u•Œë#lÊÿY¸íÏÀç¶hXˆ¿ëÊât$¿¯;¼è¿çªßB:/ùêŸ÷Đ«‰à»ù.Öî­Đ^y©æ:ùe¶ƒ€…‰Ï`¼wÅ`]@mn¥·gG1±RÑœ©Çpj•TƯ&•Ù¨²ÆÇ "“è >²¬ÿăé?åZµ¢w3jÄ~t_óƠ?ï¡GüơOûèV=lh:]­̣_ƯßÉ2ÙØÁæÈ°c{’ÁUA<O\‡RẾµ » ó¢ÿ©ÿ} <è¿çªßB¬[èVºî¢!Đe™cù’-â–hÎp@̣Ô—ê9 =úTÑxS’F‰®,¢›í2Ú¬rHÛD0¤răßTºñ[èR£'¶¥:/ùêŸ÷Đ£Î‹₫z§ưô(ÿ„rèi°Ư½Í¤rNd6¯!YdMÛr£<çŒäă¥m'€/,ïR=P•…£Ÿæ„2•’8Ëó¨qƠr84J¼c¿ơ` IÙW1|è¿çªßB:/ùêŸ÷Đ©43O}óVƠäÛÁ*@‘[Ww`O,À€SØƠëO 麵¥ôúuûƱÜAzB̃Èm ’rqßè:É^ư?à˜•&̉ó₫¿C7΋₫z§ưô(ó¢ÿ©ÿ} µmà½Væ̃úṬA²y#‘âIŒe°B•ÛˆÏjmÏ„/­́Zä\ZJÉ2´1»K‡@ê@ëŸĂ=¼okØË{H¯çEÿ=S₫úyÑÏTÿ¾…]ŸÁ”R$Q\YÜJ׋dÑĂ#’I*äôúÔà^;Ï!Ú%_ Ïæ²JĐÁOɳ~rGđô9éÍ/¬C¸{ v3¼è¿çªßB•eE'Đ˺€ÚƯKnÎcb¥£9SàÓ¬ÿăé?åZ)܇ ´QEhAKXÿXÿ¯”ÿĐ^’Ă ¥Öä?ëå?ô¦ØtÍâËúè™?×RưQ]'0QEQEQEQEQEQEQEQEQEWuđ£₫F›Ÿụ́ư +…®ëáGü7?ơäÿúW>/ø27Ă'°ÑEó‡¼yoÆ?ù‚ÿÛư§^[^¥ñ₫`¿ößÿi×–ĐEPEPEPEPEPEPEPEPEPSÇ÷ASÇ÷zoñ_§êĂøK×üÇQEí@QEQEQEQEQEQEQEQEQEQEQEQEçüz¿áüë*·(©q¸Ô¬G¥ø†M.Ñtí>ᡗΆYâ;ăn9Xg á²*Ü̃4Ô.-%‚ẫÎV–Ư­ä™‘ƒ².:0†9ß5›¡îÍi-‰åñ¦©=å̀‰lMµ»[˜ö³+ ¬_œ’Ă#e6¦ßÚ‘ßÅii Œ©H,Æ1؆Î}̣I5z­„êÉîN3¼€G¥Ÿkl̃Kx£m’—]»,OƯ8À"©ŸKökÛd±²̃ïË&8Ñ€Œ¦v•ù³Nwg9©h¡P¶‘c₫]Cí̉̃-­Ë-̀7O…|4‘çïwÉÏé4¯Kmqf—Q§Ù!3ï âë0Ă p}ê½½„-oë°{iuÀÚ­¼ö4Ö‰m̀¬„m$îrơÇ xêM`jZ„ú®¥qs·Î˾Ñ̉¢œhÆ;«9neYÿÇ̉~?ʵh¢µJÆmÜĂ«úN¯q¤O+‘Kј¦†eÜ’!çpz€x ñWh¨tÓVe)´î‰‹®Ơ¦T°Ó̉̃HV³,DF¡[x#æÉ;¹äœ÷ÍK/µoà¼û5É ÓƯ€°̉2ª¶~nŸ.p1É?J­EG°^ÚC?á$º:tVmf̣B\7O2Æ›·aI8çëSÉâÛ©5~¶6ܺÊ%t”È¥Y›æë‚N{TtSö₫¼ÁV’₫»´½n}.‹³Û]ZÜm2[Ü¡d%z7FOC̃¬Iâ›ÙăȵE–xfÛ{U< B*€z`ư}éh¦éE»‹Ú»Xµ5vv´±‘ŒÓÊ £ü¾wúÅaÁüÇ­U“Å7̉,ăË<è €”S•X•#'¯Ê3E*„Ău¤÷6u_@ñĂ&• đ_ éehB \t̃Û³““̣aX©â3ÿÚ¢̉´èđ›Dq¬Îw¼øN:RÑJ8xÇaʼæn¥¨OªêW÷;|éÜ»í¦YÿÇ̉~?ʵh­#$C›z°¢+B :Ïü‚‡ư|§₫‚ôƯ?¢Óµ¯ùúùOưéwE®Xÿ_×DuKø1₫º4QEu¡EPEPEPEPEPEPEPEPFZ( »¯…̣4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿĐ̉¹ñÁ‘¾øÑ=†(¯œ=â­æ™a΅ûuµ×—|Jûs×t•Uÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áĐ?è¦ÿà$áEÂ3 ĐMÿÀHÿÂøFtúé¿ø øQEđŒèôÓđ?đ£₫₫€zo₫G₫Q@ü#:ưôßüü(ÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áĐ?è¦ÿà$áEÂ3 ĐMÿÀHÿÂøFtúé¿ø øQEđŒèôÓđ?đ£₫₫€zo₫G₫Q@ü#:ưôßüü(ÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áĐ?è¦ÿà$áEÂ3 ĐMÿÀHÿÂøFô!ÓEÓ¿đ?Â)¦ÖÂi=Åÿ„oBÿ .ÿ€©₫Â7¡ĐNÿÀTÿ (ªö“î.HöøFô/úéßø ŸáGü#zưtïüOđ¢=¤û‡${ü#zưtïüOđ£₫½ ₫€ºw₫§øQẺ}Ă’=ƒ₫½ ₫€ºw₫§øQÿ̃…ÿ@];ÿSü(¢i>áÉÁÿ̃…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©₫QG´Ÿpä`ÿ„oBÿ .ÿ€©₫Â7¡ĐNÿÀTÿ (£ÚO¸rG°Â7¡ĐNÿÀTÿ ?áĐ¿è §à*…Qí'Ü9#Ø?áĐ¿è §à*…đè_ôÓ¿đ?Â(ö“î‘́đè_ôÓ¿đ?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zưtïüOđ¢=¤û‡${ü#zưtïüOđ£₫½ ₫€ºw₫§øQẺ}Ă’=ƒ₫½ ₫€ºw₫§øQÿ̃…ÿ@];ÿSü(¢i>áÉÁÿ̃…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©₫QG´Ÿpä`ÿ„oBÿ .ÿ€©₫Â7¡ĐNÿÀTÿ (£ÚO¸rG°Â7¡ĐNÿÀTÿ ?áĐ¿è §à*…Qí'Ü9#Ø?áĐ¿è §à*…đè_ôÓ¿đ?Â(ö“î‘́đè_ôÓ¿đ?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zưtïüOđ¢=¤û‡${ü#zưtïüOđ£₫½ ₫€ºw₫§øQẺ}Ă’=ƒ₫½ ₫€ºw₫§øQÿ̃…ÿ@];ÿSü(¢i>áÉÁÿ̃…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©₫QG´Ÿpä`ÿ„oBÿ .ÿ€©₫Â7¡ĐNÿÀTÿ (£ÚO¸rG°Â7¡ĐNÿÀTÿ ?áĐ¿è §à*…Qí'Ü9#Ø?áĐ¿è §à*…đè_ôÓ¿đ?Â(ö“î‘́đè_ôÓ¿đ?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zưtïüOđ¢=¤û‡${ü#zưtïüOđ£₫½ ₫€ºw₫§øQẺ}Ă’=ƒ₫½ ₫€ºw₫§øQÿ̃…ÿ@];ÿSü(¢i>áÉĂ_Ă•6I¡é¹Î̉23ëÓÜ̉/…ü>ŸwBÓéi₫”QK]Ă–;Xü#zưtïüOđ£₫½ ₫€ºw₫§øQE?i>áÉÁÿ̃…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©₫QG´Ÿpä`ÿ„oBÿ .ÿ€©₫Â7¡ĐNÿÀTÿ (£ÚO¸rG°Â7¡ĐNÿÀTÿ ?áĐ¿è §à*…Qí'Ü9#Ø?áĐ¿è §à*…đè_ôÓ¿đ?Â(ö“î‘́đè_ôÓ¿đ?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zưtïüOđ¢=¤û‡${ü#zưtïüOđ£₫½ ₫€ºw₫§øQẺ}Ă’=ƒ₫½ ₫€ºw₫§øQÿ̃…ÿ@];ÿSü(¢i>áÉÁÿ̃…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©₫QG´Ÿpä`ÿ„oBÿ .ÿ€©₫=¦“¦ØJe³Óí-ä+´¼0ª=2NRs“Ñ°PÙ(¢’ÿÙtpm2-pkcs11-1.7.0/docs/illustrations/object_diagram_nv_objects.png0000644000175000017500000015766413754763565022212 00000000000000‰PNG  IHDR –ø‡sRGB®Îé pHYs  œ iTXtXML:com.adobe.xmp 2 5 1 2 †̉®$@IDATx́¸EƯÆOBIè¡×„$ỗ‘H(*Jỏ‘¢ˆ" E"| REi*Eª€z聾Đ;„̃¿ß{¹6›9ç̃sï)[̃ÿó¼wwgË̀üfïùï”íS±™€ ˜@ñ|B–¦,^¶œ#˜ˆÀ§lơ›(Ä&`&}rF'ÑLÀê%đU½'øxÈ)ÿç´àœl(3¾eμón&`&`&`&`&ĐZ“·6:Çf&`m#à7ÅmCïˆDÀ-{ 颀 ´—€[@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Đ^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Đ^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Đ^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&0Øü”‰°xĂLÀLÀLÀLÀê# ¶¥Uß}ô2dï!ôú½‹Gz)µ0ú²sÉ¢ĂÎàï§hÚ¯7;₫^Îß?¡ÿ JÚNl(Ù/‘IëTÂGÂÿGØïĐÈö ô=í~ĂÆk&`&`&`&ĐV®¨UÇ¿»>DG¢™Ñähzư©5ä5´# ö+Ÿ¡ïuè˜7ĐÖHˆxkÿb(Ø.¬<ܹ±?ËGÑœ)M϶Z`t₫*ûæbù}ôJ¦Í̉›ïë̉ß`&`&`&U®¨U/™‹ØuCd÷wS‹È`t)ú ’Í‹Æ#m‡d‹"1älÖoCrNdi䯃'ù]'i×±qB2Àë“´ê© l&`&;zóe30(%ɪºT¥MN‰µbÜŒö@²5Ñh$‡@-²ƠĐô ÉC·¢ƯĐé(m³ }I»*±¡ÖuÓï̉Jhut²™€ ˜€ Œ€‚¨³c&`]˜‰ưó‘6ÏPK‡…QHƯ±t́ZèF46 Ư„’ö?Cj)Ñø´ÍF€ZE’v/owÈéI®u2Àë&`&`&`&`&Uê’VVÓÚêtƯC„‡E"UK†œ5ºQiŒÇzè%¤VÙĂhcôlç’Å„.XrLd× ‹Q½]°Ôê!'e´Rù G¶o¤ïimÛLÀL wúæ.ÅN° ˜€ ˜@oÜÂÉ<~₫oCØûèA¤­º]íŒÔR₫’©%d;4B1Û‹@9.R=ö&¿†Ô­ëô8ZÙLÀLÀ F ưT°́9;&`&`)DZ=7:©Åa ´:©ÛUè¥.Q"u… oÚµ¾’“ºN±:‘=ĂÖo‘®™´)ÙP¼I HZmu³™€ ˜€ ˜€ ˜€ ˜@æ ¸«Jí"ZƯr"¾Døư:%_JéqLÛ˜íÏ‘œ•`ó³¢ăB,…ËÙx©Ë–Lƒ×cer6áC;÷-À2iÚ—’Ü_ÆơĂ2rpMÀLÀLÀL s\Që^‘È¡˜ì‡-û|_g¿ŒœB0nđN7 ù0ÜPE-m~̃¥‰x;o|_ç­Äœ^0(ds{ô€ ˜€ ˜€ ˜€ ˜€ ˜@£ØiI_ÇLÀLÀLÀLÀL Kv@ºDäLÀLÀ@@³o-„’ƒ×›/i&`&`&`&`Í'P¦Áº¿ç¤ Û¯3|$Ë£:×ơ!BÍ~•Ö„éZÉđÏØÖ¹[¢¤MĂÆxtG2ơîœ?-Çưiö-Ieủô¼²®̣£ư OÚ©l<‹¦Nl]¬̉*X02p HJÙy4(2jÏñä {­‡m-‡’ßăĐºœ ]kLbŸZ(F¡³¾lSṼ@Ë£EB Ë®ÎWÜW¢AhY4ZÍŒ.G²®̣sÇ<‰N×Á¶ËƯĐèĂÎ0/LÀLÀ2J Úƒ>£Éu²LÀLÀ@à=®ñrJŸv^÷³Dø3¬«Â/GAßû¶+§¡Đö(iµÎÿ6®~ˆäèèm₫ch+4Ơú0!»;Lß!Ù @?BúRûèBt-²™€ ˜€ dœ€Ü600|ĐĂƠ4µ*T³Ù‘<₫¶Ïéëæ±>̀LÀL #́€d¤ œ 0h!é‰KD̉̃Hn$ÖÇv®«ûÔöèZº[±ZÔ¢²µ6"6¶3Lçß…tüßĐfH­4rj4ăbô>²™€ ˜€ œ@ß‚çÏÙ302ˆuÅ Ưu”ÿä~­«›Ó )­É¶,y¬¶?@r ´_NĂù(ijñĐXĂU;_×e› GĐƯH×~=Ô*Xú WXµđp—&`&`&`&`&Đ¡²\¶%!´*₫́Yiü‡­{’÷sXï̃™>ÊLÀ2D@ m&`&P4ªœ¥ÍÏ»4oç€ï뼕˜Ók&%à.XQ,40000h; Í êk€ ˜€ ˜€ ˜€ ˜€ D ؉bq  ˜€ ˜€ ˜€ ˜€ ˜@3ØiU_ÓLÀLÀLÀLÀL JÀH‹MÀLÀLÀLÀLÀAÀH3¨ú&`&`&`&`&`Qv@¢Xh&`&`&`&`&Đ “7ă¢¾¦ ˜€ d@́ L¦“d&`&`Å&àb—¯sg&`&`&`&`™"`$SÅáĘ€ 4ˆÀ§ º/cY&àû<Ë¥ă´™€ T%`¤*ï0È1Ñ9N»“nƯ%àû¼»¤|œ ˜@¦L–©Ô81&`&Đ7s™%Đ<ÈϹÆ0ơU²C@-#ÑNèỨ$Ë)10000X˜Ó~nBï¡kÑOĐTÍbƒü5ÑÉZèèEô8:­ˆú › ˜€ ˜€ ˜€ ˜€ ˜@ ô'Ïë"9 Ï qè4´uÇbHú¼8 ArHNAk#ÏÈ› ˜€ ˜€ ˜€ ˜€ ™À 2·;º G궶?Zơĺă€$¯» ïNôú+Úu×ááP› ˜€ ˜€ ˜€ ˜€ ˜@V ¨•a ô;ô(z‹¶@Po­^$ß\lȺÉúÚÍ„l&`&`&`&`&`9!0éüº½îA‡£fŒÁèB’&˜œ¡¢K‘œCù)ˆl&`&`&`&`&`" Ưgqº½ƒ.AÛ£ÙQ3­QH2›²: ½îE£E‘ÍLÀLÀLÀLÀL  f ÎÍÑ9è5ô: G­ÜƯ „,L°ÉXND$ÿ?¤|®ŒäxÙLÀLÀLÀLÀLÀD`1®»…4MîƠh4/j—5ÛIçkY@ WĐéè;h d30000è©8÷ûèT4=‹NFßCꦔkµ’̀ó|ĺ‹nCêvv>R«Đ4Èf&`&`&`&`&Đ ƒ9f/t R+ÇH¤Jö¢(‹ÖN$ÉCc]vE×"q»í„fA600000Nê:4‡G¯" ¾̃ M²nYq@’œÄm+tzƯŒöAƒ‘ÍLÀLÀLÀLÀJG`r¼#º©ëĐ]è×h9”·ƠYt@À8Áú±¦nlg¢×ĐèP´²™€ ˜€ ˜€ ˜€ ˜@! ô%WßB<}̉·9.DÛ¡YQ-ëH’­Êa:=‹î\_¥öÙLÀLÀLÀLÀL ·̣-Ñyèuô:©¬©e‹byr@̉̀—"@­!"u}S+‰øO‰l&`&`&`&`&yêÖsºi ôèǨÈ_óγBÑL°!¬iœÈh¤q#j¡’9²™€ ˜€ ˜€ ˜€ ˜@&LM*ôÅîÓÑóH]zNBú.…Æ”Áâ€$ËJƯâvFW!9’‘L3li¦-› ˜€ ˜€ ˜€ ˜€ ´”À|ÄöStzưư-„ÊhEt@’å8-[ }cDÜöEC‘ÍLÀLÀLÀLÀN@ăÖFÿ‡₫‹^FF#UNËnEw@’å«)“¿‹Ôâ¥1#£#Đ̉Èf&`&`&`&`=&0gª Î?‘ÆÜFË ÛÄÊä€$s®é’WAÇ¢§ĐXt"ZơE60000¨J@FU&BúNÄ[H]n~ˆfF¶êÊꀤ‰,N€œTM³üú ZơG60000῭ƒ­ÑßÑ›HS±ÊYù 6ºiv@&5ˆ ½ÑH¤´KœÙÍLÀLÀLÀL DÔWÿ t.G» ¹‘­ǵ€Ôæ¦´Đ¿fỔ代9‘ÍLÀLÀLÀL `4H|#t&z ư€ÖA\në=; Ưg¨i›7EEo£;Đ₫hd3000È)I÷>è¤7Î×#u‡™ÙOÀHϘNÎir„OArCG¡åÍLÀLÀLÀL Ăú‘¶o£? ÍFô:mˆ¦A¶æ°̉{¾Që[èh¤©ơQË“Đh2d3000h3yˆ7¤~ơËq+úZÙZKÀHăy/Â%Dw#ÍÈvRW©ÍLÀLÀLÀL ôx5¤7Ä#Msª~ô[¡‘­}́€4—½&HØ ưÉÙ₫Úù¾‚ÍLÀLÀLÀI`.¶-ºiÀîưèH´̣4¹@ȈÙi]AÈéó!'DΈœ9'Å 6000¨—€úÁkî!èNô.º í„æ@¶l°̉rQw,uË:©›–ºk©ÛÖÂÈf&`&`&`&P…Àt„kZR}5úô8:iđíÈ–}v@Ú_Fꢨÿ™“&ax©»¢¶Ë±·™€ ˜€ ˜€ ˜@© è í/ĐMè=t-ú ‚lù#`${e¶ m†¦G6è); =%Ẁó¦$[j==é9ó :-‰l&`&`&`'0ùÛ]Ô_û.ôk´̣l6@°5„€†`,äEú’«ƠĐñè™Ni}̉>› ˜€ ˜€ ˜@Î è}%t̉<₫ú6‡ºDl‡Ü/¶¦°̉¬…¼¨ZAỘz ©•DăÏú!› ˜€ ˜€ ˜@N ê{}ziª̀c̃0N†l&Đlv@M¸˜×L¶4Näf¤q#¡­»„Áf&`&`Y#° :Ư‚4û̀èÇh ²™@« Øi5ñâÅ7 YÚ ]‰ôL»i†-à600hiˆtt:z=NBßAîº[[ Øi+₫ÂE®çƯæHßÑصÛfè›ÙLÀLÀLÀH@?¶?E×!½üú9ZÙL Ḱ€d©4•Í̃§-zụ̀ ziŒÛ2Èf&`&`&ĐKºrmtú/zưmŒü•a Ø2KÀHf‹¦P Ó̀}+£cÑ“è9t"&C6000n˜‹côåà" ¼„üv¶Ü°’›¢*TB#7£{ÑHß5RWƠ₫Èf&`&`&ĐI /ËUĐQHÓP¾…ÔÏù‡hfd3<°’ÇR+V5‡º¬̃„Æ#}ûHÏUÍh300̉˜‰o₫̃D"9 «"9$6È;; y/Áb¥_ÏÜíÑ¿œ‘ëÑîH-Î600(,¥É™ºRƯ†ôx9ÚÍl&P4v@V¢ÅÉÏÔdeôW¤ç;Ñ₫hAd300\Đ ñĐ™HƒÇÿ‡4˜|¤Áå6(2; E.Ưâämr²¢‰>NA/¢1è(´²™€ ˜€ ˜@.è Ú>è¤irỜ¿7̉ô¹6(; e*íbäU3j­ˆF#9$Dk!9*600È~¤âÛèè)ô:mˆôá,› ”•€²–|q̣½Yùº ©«Ö¹H­ÚS!› ˜€ ˜€ ´”À<Ķ ƒoe]?RK"› ˜À×́€øN( Vßư©uûŸh;¤Áí600h8ɸâ0¤fù‡‘æ–×àÅ­ĐŒÈf&0); “2qH1 Û¢ M(r#Ú éå”ÍLÀLÀzL`ÎỒèmt:­„v@êăå£óO@­å#ĐIèyô_t ̉‹+ưÆØLÀLÀL 2= 6EA¯ Ízrö§©ûô6#¨/ër8>F3#µf¤[4Ôût6²™€ ”ƒ€^H¨+f̣92„mu×Đó#ù,Ñ81uÅ”#¢ç‰¤.Ï¢'Rk‰560́X$FS§’’7Wư@ÿÿ¡î₫ߵԋʱ(ù?ÿ4Ûrbl&0€ (r¿¢q«wj –‹£´AP¯L =Hôpº¹s9–¥ÍL æ"zè¢åÂH•ŒFÚ—\LcË’Ï‘¯e&ĐméºĂœÙèÿy׺]>Đ²O@Îă0t2ƒỗ#̃sÑúH­.60üĐKµ‘f®̉Ëvx̉Ø®¬Û|$°»]È®æXwËÊz‰:}$຃뼟|­’Đ› µÔª4¨ʼnhÊ›©¯÷HƒFkåQʶÈf&P?ïsÊë¨Öÿ˜¾P®±[³£¼Ùl$ø7¨«®©or̀†yËœÓk= àºĂ×Ï;×zpóø”rĐ72Eµº¨‹Ä™¨ƒÉ¹lKMƯ³”ß®úwŸË1ên3è€Æzüªåx¨åô4Ê»©«Øq¨«.ˆĂcC̣^ÚNŒ€ëñçë±»Åa&" ®£P­JẮ_Í“¡ Zyÿ/û—F60êÔ=é^TëéFö/Zư¹Ư³0)¿ƠÊûứw×Îܱ!àºCíÿy×"7ƒL X†}‡£Ú§ºQ́€ú "Û:d®Ö@YÍʳQ‘8o&Đ ê~¡.UƠ#êÖ¹Y/®Ÿ—S7!¡ú¶P5ï²oD^2ăt@ ®;| Çu‡7‰w™@5k²C?ˆƠ~,G²o®j'0|̣tªÆCƯÓvA60ol̀ªôjÿ7ˆ®Á©e±Éè?Q5t¿yY`8Ÿ…$àºĂÄÅêºĂÄ<¼e5 hzÚOṔGRí_#ơí,£mC¦5,ÆFabc3øzêíjăÆô|Ù»Äö$ïr6bϧÓ~› ä€ëƠK̀u‡êl¼Ç:́Å_ưÆ~ƠUBƯ)Ên @}¶cŒv**«ƒFÖm&Đ1‰Cµÿ'ᳬU–‚Á¨§#ÍÈrDÀu‡® Ëu‡®ùˆ’ФÚáẮ+S—«®n©9àʼ₫ÔƠ¼ß Jàp̣Uí9rûf*h¾{’-Mư=Uă¥©ˆm&u®;t¿„\wè>+Yj:­Ọ̈q3ûf( ‡z²99Ÿ…ªU¨çb>Ö @`ẉPíÿAă=4ŵmbưÙ¬5.ä'î-È×ê/×êgæ3 J`ṂUm̀‡¦¡Ơ¤­:½¥¬VéÚ£úĩc…"° ¹©öă/́›¬P¹mlfÄæ {ˆé¯f !àºCï0ºîĐ;~>;çô ‹j³]©̉Đ7çùkỤ÷!¢j•‡M[•Çcm"°ñVT}l›̉”Çh«UHô‚h­ÚrC`!RúƯûgæ&ÙIèiUX'|Ñ́$Ó))1×[ø®;4–§¯–qr.F¡X¥Ac>Üí =0 >1K¸œÚL Hú‘™Q́ÿáîvUiëÙ|Y¦îq4ơ3ơ#àºCăX&¯äºC’†× MàPr«4q¦̀´ưë6¤¥èQnT…ơC„»o|ÑK¿Øù»¾Ê½­ï€ØK`.{fll4¾ Ô$àºCM< ƯéºCCqúbY °:‰¨öC¦e¶Æ¨ÖG^_µ™@ è{±çˆÇ85¯4/¬ÂÜßis_ù®;|Ă¢Uk®;´´ăi:½q×›÷tÅáuÂ<î£yø«Í¤îY³4/Z_ÙB@ËÇ¢ôsDa­9¦ç²Ï 4÷ç ›¦9Qúª&ĐAÀu‡öÜ®;´‡»cm½qOÿxi{‡&ÄåKNL`y6c_ˆÖ´{6ÈĂIĺ9²^2‘Ó´~§ û£r';\wh_9¹îĐ>ö¹Aô¦=6 úNÂû4(_¦6}-]q“S¢ŒỊ́@`0‰Ô$ éûøê<$¾ i¼<Â_:¿ ùs6²EÀu‡ö—‡ëí/§ çÜt¥Á•ß^íÁ©³rÎÛ‘r¸¡×̣)&Đçiú9̣ a®ü¶®44óÙ Ôa› 4€ë&Zÿơ\w¨Ÿ™ÏÈơË~¥+̣ªm­%P­){ÙÖ&ñ™@ƯrƧ(ưùmƯẈ ½%ë§iÔåœØL Q\whÉ̃_Çu‡̃3ôÚ@à@âLW̃'L^µ­µ4˜ïq”.‹Z› Çfu83̉÷í«„ytƯ({}‚&x ¥Ëăä^_Ù0o¸îđ ‹v¯¹îĐîpüuĐW5_Aéªë¾’Oh"å¡·—ó5*_ÇL`&®§—éçÈA Ç—ë>ư"塪ϾÍzKÀu‡̃lüù®;4©¯ØD?æÚéJĂg„ jbœ¾tmS²;ö%úSkŸæ½&Đ6‡sú9¢n3¶-EXỌ́¾‹̉å¢îY6è-×zK°ñç»îĐx¦¾b ŒáÚé( $µµ—À¾DŸ.½½T¥ÂfY" ¦ÿ—Qú~ƠàT[{ üèÓå¢ï:M̃̃d9öpƯ!›…èºC6ËÅ©JXíôÓ—„-:Λ­'0QÆfÄúQë“âM &uØ›~h0ú<5Ị̈ÎV˜“H4oº|¾×ÈGa ¸îƯ¢uƯ!»eă”%Ëzú‡iTb«Wû¡f̉Y©ì¦ pTḿœ¼†DÂÓåóï¼fÆé.,³#÷é%…Ím₫2v~¤|₫–¿l8Å"µºƒĐt§₫!„MMëMÅë‹÷–€₫YÇ¡tw×̃^¸‡ç/ÇyO Í_¯·§ê»¼; &¯^?¤z›§c4NåZ4;ªfƒÙ¡ 䉶F²=Đÿ:Ö*•XêéénÇÁÇ´z±¦ËGy˜­Ơ q|&P…@?ÂßAéûtă*Ç;¸ơÖ”Æçh¦,› ÔK Ơu‡ĂHàèH"o&́ˆÎđ®ê÷p\¨$—k₫ËÔ>ƠTOØU³ôơäÀ£ĐÔ'è|mËîC ½< 6€¥c¡Đà¥ë ÚƯËơíî%?n5̣¯Ö†¤éï̉d@ ×å\Ü€f@¸z4:éTez ÉAЧZA>@·¡đOÏêD¦óô°T^çFK¢Ñèl¤™`´/Ü/Zª_ôŸú´kg_é;Iij!!K¥móT˜7M ]¾OÄúŸM^\“ đz[ ü›ØßJ¥`Z¶7H…yÓºC Ơuưæé·:mÉđZơ§ó5Jơ€¤î`[¿ưÏÂUç…ÎBƠ^ö%¯7˜ăöCz¡¹’iH³®¯ní:&ia2¬Që®;4d× Ê:O+Ưá?ˆäX•üôUä°†©̀ôÏÿ"úɱ8탴o$ÇCiÖƒB6mƒÔ2̣cTË^gçËHçôàZ¥ív¦G?Míhæƒ"Ơ$›Ḷ5‡H°ƒL åbÏ‘OZGXÀǵ¸,²s‹H˜ƒL +±ÿùvƠ”Ö®ê!?jơS= )Ơ7dú áÏ°®oéEçü¨…ëă€¢Qh³ó<Ơº^́¼̃„¹îĐz=?¯W«µúDw 4ÀˆÈ•Ûơ‰$ÅAbÏ•];_®¸p̣I Kúª₫(¯ÈÊn mv°œ©Gˆ´R]D]KïE]™₫‡ô›<ưǺÿNílRX́̃u‡&Á—µHT_ÎÆ®…S»ơO|m*¬•›r 6Co"9 ¡‘H}%gBêÖ³· Twª₫hƠ„æb=؃¬è|{:)˜]OàƠè”ØÎ6„=FœÏ¥â‚í•Sã4VX”gMEúÛ£Rãl?[HÂøT2fd»»/oR§z³¤²XwPQÔª?„¢Z•]R`z–ëÔ–{ ư‘ZHô?êK³́PVT¯xƯTϸU³رÚ®Ú wƯ¡Á@»s9; ]S9Dƒ¤TAo‡ÉyŒÔM` 4;Z-Bz0Tk‘̀¾±Hç¨ơ$臬Û•Ñ·ÑH‚Zösv®äeÁn$"Ö…,r˜ƒL iô?’6½éû,èí¶ø‚ÜIE¬ #‡9È:´£î  ª#¤­_¢®êá¼SXY>¡µĂ–#Ơ!¤yÑ9èH¤úä(Ô+Nc=ØßXQ½b}4@o jö;~‰GziÚ sƯ¡”qØIÀ¨²«¼ÆnÔ*§7€mµF¼‚ºª?pH—ö G¼Ö©q,å$¨µG/,ƠÛ Ô+´́iVT¯Æ¢îع$gG×o…Å₫ç]wh"ù¾M¼vQ.»c7j«̣ûéAr NȬ¯…îAr n@— 9!}ĐèJ$ÇEá¶S¸ ̉´B£/܃ëÅđßâ:zd3vˆ=Gb÷j3̉§ç— =ÉúQhj$KïWë®̃Xª²"‰t¼lo¤ki™¶ó Đ¾U;¦a}<̉s)i¿d#™&µ)-ÑBècôS”´5Ùø O6i=V6Ă—/[L«G²Ớºƒ^0~…~‹† 9Ѩ…ºª?pH‡MÏß¹Sªö:¶ăŒI»˜v÷x¡|́Öëñê;1ö?ïºC} ë:ºo]G—ïà)Ẹ̀â‘l7û!‰rBĐ'¬m„ät¨ SM•£Ñï‘l¤üÛĐGHư4ơÆb8̉~OLƒ¤%·U)P×­P¡H×êu9Y/§"íÏv¨L¥vyÓN`vbH³R„ú?¾K+-0U>~‡T¡ŒöCúaß É’ûuŒZJơ63¼yÔ~I¦ß ­o«„MÇú†(vmÊSêαHd©ëè¹*9r:F¡³ £‘œAHÖ†ÎE£P³í^"ø0ÉllÏ“ ó¦ Ä´«îđ8‰Ù EO µˆl‡ôû¬}Ư©?è·}¤s“Z“mỴ·_Û ÷Q5=}¼ÎIZzrûQ Ï¡ä9ÍXwƯ¡T}ÍĐ¢₫’̉?dVlv¢µ~üc¦‡ ̣  x™́j2›,3­oQ&Îk¦¬Fj̉÷ă-L¡*Ó¦âû'Ûv†Åöï̀¾đ¬ź̃¨ÊöA¢wQ̉¡Øí[‘^F$[@F²­Ökœ `ªà¤è­«8éü)‘*ú_–†^A¡Ơ—Ơ¦ÛƯÄ.·MƠ@ê3r¼ Đ®êUN+t°ë-,^½…²U'°@dד‘°v½JÄcæØÙg₫©;C™,VF±²,çµ}b÷^́mE ûÉJh8ú ¦ÊÊ@¤9j!Iîgs‚}Șd+ˆÖÿ>ሯWTù†Îï”™ ““1°SrfFï 9DŸ¢ĐwÑ¡è¤.Yo£VY¬ŒbeÙªô8üˆƯ'±û©™9̉K‚gÑçU"éª₫På´BÇÊ(V–…†Đª̀Ù©M:văÅnĐÚWñ̃Vx*áü‘0™@+dá9¢J¼*$ê*q;R+Æå(Ø~¬ŒCÏ¡ÛĐ|èpTÍ₫Æ"94r"ä´\Œ’¦®7£‘â’“#‡"˜Zo§¤)rzÔ2"çCv: †®GéëÔT‹=ëưi*̣Â\< ÿó…ÙÂŒ¸îĐBØv@jĂöC¤6Ÿ¬îUbe™Ơô;]Å"»÷b÷h3s-‡ac´>F 7P0µ>¨K†´̉¾}Q5»‰S ƠÑ6H›(˜“!µ€hœœŒ©Ñö(Ø㬄8çeưt$J₫.)]²ß}½héßXÅʲ¥‰rd¹ »Ob÷S.2S¢DÆÊ(V–%B̉¼¬Ñ¼KâÊú¡N[́Măíöˆ•Q¬,Û›JÇ^±{/v6“ÇÓ\\NC5SËÈk;µ”Ă²vçvlñ%C²-RëÇá(ik°17’ÓZ4–eư43’i@lˆSÛlº=½„dŸ}½˜°́ÜlÉ"ö6T-C6è@₫ç»J£÷OJ ö\•å¤g:¤n}ë>£\' ˆd÷åHXÖƒäÁ«Âđ›TBwbû!¤†öBIÛ™ ơ¹V_í ©›„̃V&MSh^Ầä¾,¯Dâ¾H%p*¶'K…yÓZA ö©6qD3̉óUí—ƒ¤·ưs¡ô₫°}?û₫‡₫ô?'Ó¾~h3t>JZ<ô<Ù®30\'ó+z¾ªÛVÚ̉Ǧ÷7c;VFƠflFü¾f~ Ä₫ç]wÈ~yºîư2*M Ç’Sưđ%5os¯·ÊĂÙè6$§C¶ z¸cíëܹ̃®…̃ô©ÂđmäĐ̃!ÍÉrÓºß^æ° dU¬Ó÷¢ÆCزM` ’—.·¼½ŒÉ6áâ¦nlä̃™7‡ÙuƯáëg€ëM¸yƯRj‘̃b(§‡!u³Ú ¥í"VC¡ûĂz¬G7¢9IérÓ́z6è€ë]Êî~ײ[6¥JÙƯä6ư´B©ä3³ư"妖ÍÚAà"M?G·#!ĹR¥ÿH43’S>=₫€dû£GÑœ̉ ŒÓÑ«(8)¬N°×X Ƚ¬¹a©Câ₫éeˆ₫O7@rDöC Ç?Ëú‰mÛj›‡Óåö|«áørIÀu‡\[Ç3)ư?ïºC“Ểo„kƒÙ¦©́rPFÄ̃.ÇÊ2#Éu2 N@3ȤMÏ‘±éÀlA·¡Cqd}t R ¨Lo_îXûú*T›'¶k­*¿Ésñ±r?:8°¼Éy™©ëC°ÏYÑÿĺ:á˜f/cÏ‘XY6;¾~₫Ä~o\wÈ~9Æ₫çce™ưœä …v@j̉ØÈn½ ´e›€Æ¼¤í¹t€·M EÆÏ’©¸tª»R«Mé8#é „©KÖbûôC¼[çº̉ºR ‰ºCue+r@8WǪ…ă¤kËÉIÛ%逌lÇ#c3’6'#Ûb÷‰ëÙ.3¥.ö?ïºC“ÊÍHm°OFvÇnĐÈaj#XÅʲItÔ%"»÷b÷h+̀D$ó‘69zÓ̃ÎÆú.ơc©··ú¶A¤. µlvªûR0›8éyz›+£XY’-› LD vŸÄṆFÛ ÄÊ(V–mOh`¤v)Æn¼Ø Zû*̃Ûj±2•e«ÓåøÊI vïµëm¨fç™7R Ó&çd,AË£`j9y]„^FÙëm³SümdÇ „ „¯A˜¸Ù×Î ?GÚI?ßqÇ₫çc÷S¾sY¼ÔÇÊ(V–ÅËyrP؆dd6ʧ")‹Ư ‘äÙY†"½lµ)îQ–§ÏŒ•‘"­¾S_ »÷b÷h8¾™Ë[¸øÖ(ứ×8Œ÷‘f¨Ùj0æH$û)’é4êªUDÇj€úfHÓÛ&m6–Jdd=VF±²̀HrŒ pƯảÂpƯaR&1ª¦fº&èÇ5èsÖơ¶°¶ ‘>„<}fmúª$„̣ ˼O+\;Ç̃›ezëîĂ°TW¤tE¼y˜‹H>@Cêf5Úipơ‘H¦Y°CswJñă‘;‹¢ĂÑÍH-èë#åiu$““¡iuĂ¹a©n\‘ƃü©;–œ— =S7FIÓÿđ^É€¯+mo¡P^a©?6è€ë•Êôr!/Soë¹₫×Ẳu‡®îvïoØ ùƯ¦ÅVư ±ëC¤JẦH?₫#ĐÓèH¦Ă£hÎNÍỊ̈tT¦é3•÷đàËv:$ÇVrƠ*³Ëµ‰K²B V Ñ8…V=GÂÿNX>CØH&‡ä.¤sµÿB¤<Ê4°>œ“\®Û±·RY•å;ÑóL­.¿Diû{¦[¸­.gÉôk½]Nc ³í¨HÀu‡|M½íºCo~_ª1₫Âẻ?D±₫͉­úU.b× ‘Ưß!Lo&#U@IS¥áM*É}¯±±Mg€̃\j̃ư˜ư™ÀÑ‘›–~K©‡n:,rjÓ‚¶äÊẹ́R̃l&ĐNWyú¾Ü§ "nu‰˜ç¡̃ä̀Ă ³Ô{Rçñ:o(̉‹”,aẹ́º6‹ u2KÀu‡JÅu‡̀̃íOXV₫í'óM nfU•ø¤­‘ÜhѺ̃ȉKN‰Mq)Óûnk_¿©Üuµ¨+YW¶"„sú'è¤k_ƒ̉vI: Û¡+H2)*C› ´“€xuWJ#'$Z¼₫.ñI=µzz"ç½Ñ©^\¢©§Æñ~4yá.ë…»©™!; ]ÓŒ½ù_Ó¦Bu}zĂĐ 5±Ê‚ u o"gc}$ë‡Ô×zZÔé^-[z«,ÓgÆ*±2 yổZA VyFÄƯù¿lEúÇÄb/2ü™˜‘·jˆƯ/®;ÔfÖν®;´˜~ßÇ—ÇèÆ’èçS Ÿ’í©°fo#‚y#‘LG˜œ“±ûÆ°ÔCNZ¢sù –Ë" @U³SØÎƠríÎơ¦sPçzr¡Ø£’m^Hü‹¤̉đÛ·¤Â¼i­& ®‘ï§"Ơÿ­₫ÏlÙ"° ÉÑ‹œ¤}ÈÆ=ɯ›@Ʋßu׺¸MÊ»ÛH÷Ê~dä0umj¥©½5J—Ù6„©băé3+ÿĐå¤=̀†f³±™@; |Nä1G¸ƠÏ‘v2ÈKܱ2¹Ä–— 8™!àºC>¦̃vƯ!3ÿ2NH€únëMzR¶RƯ°Zej½øư éíÜh¤t‰d„₫»S °<iŒH¦Ï¼Ÿ|&ËHë#› dÀ$"}¾HXú¥B̉ZÖ4èÆs(]Nɱqeeă|×OÀu‡|L½íºCư÷¶ÏhUöơ=ư£´E‹âÑ,ÅJ˜O[S`zú̀@¦RY˜Ơtùh{¾oñ ´•Àb×ÿmú>muwζBÈxä—“.ŸO ›9ăéṿ²IÀu‡́O½íºC6ÿwœª?±₫aº<±¿•«>sRÚ‡GÊç®Isˆ ´•À?‰=ư9³­)räI§FÊçªä^7: ¸îđ5°YX EY›üÈu‡:oh̃zzK™®8èÍXrÖ¨Ö§Ê1€̃2Cẹ́Ù[;m&!›“–ô}ªÙíôRÁÖ^ÓưÛ(]>[·7Y=ç\wÈnºîƯ²qÊÔOûE”₫q̉ [{ lGôérѸ—9Ú›,Çn“и±ñ(}¿0É‘h5͘.»›¦Ơ q|…"àºCv‹Óu‡́–S–"pÛé( Wßn[{ô!ÚGQº\.mOr« tIà$H߯/¦ïöØÚC@oB5Ưxº\NkOrkÁ¸î½uƯ!{eâƠ  yû5åmúGêÀçxWs ¬)•Ï ÍÖW7̀™̉5ưÙ¥ÇWô‰½%°C¤<ÔêI,zKÖç‹€ëÙ»\wÈ^™8E]8‘ưéĂ«„µrJ̃.’XªƯú¶Bº$lpó¢ô•Sú³ư,J—Ăƒ©ă¼iY%p- Kß¿ú̃¦«´µ†ÀŒDó:J—ĂZ½c)×Ú_à®;´¿ œ‚^X€s?Aé­ôâ>µ>‡Fø«<ôåY› ä€Æ)}‰̉Ï‘3̣ø‚¤ñä•ÉÊÉŸ³‘-®;´¿<\wh8½$p4ç§+Ú^§—×ơé]̀!jqJó¿¦ëS}„ dÀŸIMú>Öàgwÿi~1-EŸGøŸÛü¨C‰ ¸îĐ¾ÂLÔ®;´¿cnÍ ›¶ÊiY@IDATQI=o|ƒ G.£©óäh¤+mj‘̉Û%› ä‰À¬$6öñ»{Ÿ"OÉYZơ5æ;Pú9¢BúûA9+̀œ%×u‡ö˜ëíáîX›D`+®›₫Óö9MÏ—­TöBŒ¹̃*ÙL ~B¢c÷ôï󘙜¤ù·U˜ÿ<'éw2óMÀu‡Ö—Ÿë­gî›Làf®«9ÑJ`®₫"=Gmj̀žøQU˜ª;–ºeÙL ]\why×ĂƠWÍ(¥I×G(VyЬ+¶úlÅá±Á¢âûƒú.å£M 7†“̉Ø÷)tßk&[}ªÍ2&Æn3vpƯ¡±%àºCcyúj9!°étå¡÷…¥ÙbƒrU ;¨÷—÷L Óv$u±rÈ·Ëtʳ•¸­I>́c¹[¶’êÔ”œ€ë¹\wh G_%§v!Ư±<…‘Ó<µ2Ùz{QÍù8¹• q\&ĐFẃ9"'dï6¦+/QïIB«9‡æ%Ng©¸îĐ»âvƯ¡wü|vAü|Ä* û̉Œ,¶I üŒ U°b́.&¼ï¤§8Ä Kà$rû_PØ1…Íuï3vd n§ơ₫̣¾‚ 4€ë=CëºCϸù¬‚8•|U«<\ξ₫ÍwO²¥YhªÍX!†7¡~=¹°Ï1Ă}ªö9›}eï›Ö‹3kđºŒ}~‰ñ /¯e“€ëƯ/׺ÏÊG–ˆ€~èÔÚQ­̣pû•ˆGµ¬êCAƠ¾óœc32˜’L_‚ª=G®gßle“ʳf»UăôOöù%F 73IÀu‡î‹ëƯăä£JLạ̀^íGñ-öiđYYM_€}á<đR·+WÊzw8߀*$§ đ‘^¾Ä¾µÂÁ%\'ÏƠ¦/«3»½Á–+®;T/.ת³ñ˜ˆÀlU©È?¢2U´Ơlª)E?AéÊTØÖ€sU¼l&`_8˜EøÿH/ơ|ù *SE[y=Ơz¶j¿Ị́JÀu‡‰KÎu‡‰yx˺E`3ú¥+aûAöÉ«/º &ƒ× ïØ̉Síư.p₫zJ`gN¬6Ơ·₫—nC‹öôâ9:oả:Å “Ṣcd3¼pƯáë̀Âu‡¼ßÍNÛ¬L̀cQ­M ¢œÍ4è₫Pô!ª–}áÜ‚ÍjX‡}¯¢jÿGŸ±ïÿĐô¨h¦~ß¿GŸ¢jù}ú€ÍBÀu×r/;m$0#q_†ªưx*üm´*JwÉ˳¨VïfÿPd3èÀrªơ?ơ û·Gê¶wS¶E/£ZyÖŒys!› €ëñÿ}×v§;?M'°1|„jư˜>Î₫fÂÉ›©Â°ºƠÊă—́?Ml&`Ư' 1R¿Bjñ¨ơ?öû·Dy|¡¡óƠRcỔÏMü1ªeưÙ9J>C´®¾ë=qnÔrú;4ÙLÀªpƯ¡:ï1¨ƒ€º'¨ÅáC”|ØÓơϹÎ;HÛŸ@c*ƒ̣)êéu“ç}Áu.E+ › ˜@û ¨«æ9¨QÿăŸq-I{=̃)­+Lû’σ®+­ç!½ü°™€ ÔGÀu‡úxùh0*¦'üGè:$'¢§?êÍ<ï.̉µ7RW-› ˜@ö̀D’vE£^4óyĐ“k«[§Z9~ŒfF60̃pƯ¡wü|¶ ˜@‚Àl¬kæ,ưP7êfO+ Ûq0̉Û› ˜@~̀MRôâ /5÷Ưè—ÈË`3&pƯ¡I`}ÙúÔÛ¸¾«ûèV˜ˆVAt*} ©ÿu3LoLåpÜŒäüÜ‚ÔuËf&ozKº*̉3d ¤­S f˜ºhéĂ‚á9r+ë㛑¯i&P•€ëUÑxG³ Øi6áö\_ƒÈE0:”íh*TËô÷ĐXôdJ/¢}60bĐD[ µ‘µÎ…4đ¼/’c¢ïÔ2µ̀ê……×RÏ’;Ñ•h$úÙLÀ²CÀu‡́”EáSb¤đEÍàd„N›*ï'¤·“60rP ÈjH­’~ßÔJ!Ư’NĂäl'Ÿ#ˆ®îSáY¢nUÁÔ=sÍNÉ¡yƯÔ©Y¾l&`Ù&àºC¶Ë'W©³’«ârbMÀL afäJĂPp8f]cA‚Ă¡ơ®¦Úå ökƯưM‘s’¬CÁ!ź› ˜€ ˜@A t÷Ç¢ Ùw¶LÀL 4Ô¥*ŒïÓ1Ư‚Ă¡Aà½iư¬Ç!ª Ö—µåPpHVe]]=ƒC¢qf!› ˜€ ˜@AØ)HA:&`&"0ÛI‡CƯ£nEÁáĐ đd7)6{e=u@̉‘j|ÉÊ(8$rNîEÁ!Ñ8’̃8Jœn30h'; í¤ï¸MÀL qææRĂ‘Z7¤Y‘Z‚Ăñë_¢fY£tú4Sº‡dÖåH‡DăT™/.o30h$; ¤ék™€ ˜@ë &ªàlh9…‚Ăñër ZeÍr@̉éW>G à̀ĂúH’ÇX·™€ ˜€ d˜€ “f&` ó³.G#HÓàgCK›h§µÊIçq6ÖBÁ!™ơÿ 9$aëYd30È; * 'ÅLÀ4+Up6´T7£¤Ăñ¿Ä±YXm—’Îû 4Ơ¯9&ú®‘‘ĐḄ2ë6006°̉FøÚLÀ: èY¬©iƒĂ1œu}O#ép<Ăv–-+H‘¹ĐB2‚ơWQpHF±₫²™€ ˜€ ´€ÂvT&`&ĐI /Ë¥Pp8´|‡cë/ x¹ Å<‘é#ˆaº_-eî78$y›H #₫c&`Í&`¤Ù„}}0<˜Dk†¤àph,À}(8·³₫²}C ŒÈ7¹ÿzmÁ!ÁúÛ(8$#YÙLÀL ố€”₫00¨+Íê(8 ±~ ‡"{6$ Ô0; ĂÑïë(8$º¿Æ¢àè̃zÙLÀL t́€”®Èa0̀’ÇP¶Ơ*8÷°₫²uŸ€Ú¬&c·Æ ‡D<‚C¢ûïcd30°Rø"vMÀ 0 ­ZÎnEÁáP÷*O¯ „^˜úàiæ4Md}˜RopHîfưsd30°R¸"u†LÀ  ÁÁI‡C-£Qp84€üKdk; ½c©‰†¡à̀Ϻœäàèc› ˜€ ä€Ü¡3`&Áh8 N‡¾ßœ -ư½ 4Ù́€4đL\n8 É́¬DÁ!y‚u› ˜€ ä’€\›m¥' Ù†‚³¡åh NÇă¬ÛZKÀHsyÏÉå匇dJÖåŒHÿAăÍLÀrAÀH.ɉ4̉XI‡C}ăƒ³¡¥?×₫[ÄHkË`(чdmÖ5£VpHô’×ÍLÀ2IÀH&‹Å‰2RĐsIÓ—®ät Gª\%gÙ¶e‹€ö–ÇbD’¬¿€‚C2’ơw‘ÍLÀ2AÀH&Á‰0RèKî—Fr6$9¯£ÑHNÇ(¤Ê”-Û́€d§|ô?µ, Éj¬«[bpHnaưCd30¶°̉́ÔJM`rr¯ÊQp84ó 9A¯°nË; Ù-/‘̉wG‚C²ë÷£àÜÁº¿{› ˜@kØi gÇbe& ÊÏ (8«°₫, Ά–o [¾ ØÉOùMMRƠ*’EY¿ ‡DßÅùÙLÀL )́€4«/j¥& ¬émëêHN‡Öÿ‹‚Ă1ơ·‘­X́€ä· ‡D_l·™€ ˜@ĂØiJ_ÈJK`*r®V 9̣̉HßƯ£!§CưÍÇ#[± Ø)NùÎFV‚3¢åôH3kÉ!Ṇ̃d30°̉ct>ÑJK@_l^‡CÈ@¡…C]9>@¶r°RỤ̈DÖÖBrF´ü…Ö9$/#› ˜€ t›€n£̣&PZê¡₫âÁáĐtŸ÷¢àphëGÈVnv@ÊS₫ “Ơd É«l‡d$ëo•…sj&Đv@zBÍç˜@± ̀DöVÑ](8ZÿÙL IÀH’FyÖUP+hpH†±₫ ÉhÖßG60˜@ÀÈ^1̉˜•œËÑ̀ººQ©â §ăä):`«IÀHM<¥Ù©i¶WDÁ!ÑúC(8$·³î@°™@™ Ø)sé;ïe%0'Ά–s! —³!éû_ › ÔCÀH=´Êsl²ª1cÁ!Y‚ơ;QpHô‚ĂÏ ØL Ĺ€”©´×²HÆ“Ç̀l‡Ö 9z;ù%²™@oØé ½̣œ;YƠó(8$CY×s(8$³®{Éf&P`v@ \¸ÎZi !çĂÑêH?ôµJ?đAÓß?đ@°5”€î)ÿ¦4i).¦"ÁÑRÛÁ¹‘ơ'‘ÍL `ücQ°uvJI`r=ÉÙ&C£Đh$§ăqd3f°̉lÂå¸₫Üd39å¯ê)rDä”hù²™€ 䜀œ “_J‹’ëàlh©⣜ I3ĐØL Ớ€´x9⛟l‡D-$ï àŒdưud3È; 9+0'·tô?ªA›ÁáÎú»(8ZE6h7; í.âǯçáâ(8$êf:‡DÏĂñÈf&qúg¶™€ d‡@_’² ’Ă¡WIoøôĂ*B/"› d€¬•HñÓ£î¦Ë¡à¬̀úc(8$NÜI‚ͲFÀHÖJÄé)Í™¯ĐĐÂ1Œu½Ñ“³1ºsù K› d€¬—PñÓ7%Y”} ñ^’»YW—U› ˜@› Øis8ú̉Đä (8«°₫4’Ăô&ë6È; y+±â§w²¨—:Á!Ñ„j Ƀ¬‰l&`-&`¤ÅÀ]éè#\ßBÁáĐWÿ‹‚³¡V ª´™@̃ ØÉ{ ?ư3’Åá(8$s°> ‡Ä3Ăf­ `¤”G™LMfƠª!‡Că7Ô½JßƯÇ­¬{$l…#`¤pEZø ÉY‡D/ŒnBrH¤çÍL  ́€4ª/Y*úÈßj(´p,ÅúưH‡Z7ÔÜÿ²™@Ñ Ø)z ?CÈbpHä”èÙ-_E60°̉ˆ¾D© ·I‡c1¶5°Q‡túÙL ĺ€”­Ä‹Ÿ_}s)8$ĂY ‡dëî> › ô„€Pó9e"03™†B ‡1̃‰‚ĂqëŸ"› ”€²ßÅÎ_²§)̉ƒC²*ëÏ’[XÿÙLÀºAÀH7 ùR˜ÜgcuÖçE·£àpÜĂúçÈf&01; óđV± LAö4ÁHpH–g]ƯoƒC¢U~9› Ä؉QqX™̀If‡£àthP¢̃dÉáôƒ̣²™€ Ô&`¤6ï-6©Èºç‡dÖƠ%78$₫-†Í; „—e!0ˆŒgCË™PhƯĐ̣aô%²™€ ÔGÀH}¼|t± ̀@öô’¬ë7&8$Ñf¥%`¤´E_Œ%§I‡CÓä&ÇØVÅÉf&Đ;v@zÇÏg›À¬dOÎHpHä hªßà<ͺÍJCÀHiº4]ˆœ‡cuÖû¢¤ĂñDiH8£&ĐZv@ZË۱囀ZDÂ÷G´ÔØB9#Á!ÑŒ[6(,; …-ÚRdL÷¯¦I ÇpÖ?BÁáÍúSÈf&Đ|v@ÏØ1—€^…-_GÁ!Ṇ̃-d3°R˜¢,EFÔ± ‡–‡=8£X‡l&`­'`¤ờc1 ¨n¦Ú‡duÖƠE+8$úÍ{ÙL ·́€ä¶èJ‘đÉÈå̉(8ĂX %7SÄfm"°ñjúQÙéèÇk•Ê½,ïë\÷ÂL w&çôPpH4ư¯&L Ém¬‚l&v@rST¥H¨²ª̀‡Czz‡CËW‘ÍL Ôê¡o¨ÿú”ë,*́Á¿/"a3ÆèÏ%WAÁ!Y’u}78$w³₫²™€ ˜€ D¨Â¢yÓB×£÷ĐèD´1̉WÈm&`Ù%pIûÉ ̉öÑÈf&ĐÓÍ÷ÑñH¿¡ăÑUèçH½ü260̣Đ[›áèP¤75êĂª/‹‡ÖGÍL ?†’ÔQp>´Ôö|Èf&Đzy·:iæÇ7Đ%hw´ ²™€ ˜@¡ ¨ÆÚèH4}€ôeØcĐºHoml&`ù& /<'ó§̃ G`nr´-:C/ óĐöhd30̀èG®Fóv#er(äXÈÁ£!‡ăô´’Cb3(ɺOÊ Q×ÍL »æ'i»¢ ‘ZGDg  YQ-ÓØLµªL_ë ï30̃X–“Ç¢/ÑH”6u™R×)u¡RW*u©RתCÑp¤.W60bĐ‹}Gˆ–nÙ‚ÍrD` ̉º7úz=ŒND ´£¡}çơ*̉N› ˜€ 4ŒÀä\IƯ¦Ô—[·*j͘ip¸L覷<®AäziP¹ÍL |.%ËŸ£ËÊ—uçØ E`2r³":é÷]/ïBG£ơ‘¦ûU Ô ~ÏúÈfuđ̀uáÊíÁ}I¹úy΋¦Mi¶ơÀÑCFíƒ4ˆm*,8#· ép¥{‘*60âĐsbˆ̉ϽAƯ‚4&DϽ´ĐKĐsÈÓ‚Áf9# ‹+£5Ѧ(Ô#Xí0µ†¼ôḅ]¤gƒêªèêZª‹¦/!90¶èSâ¼1ër4TĐüà !ơóœ AưPoL•‡;‘̃pêmˆœO‘ÍL Xäh,ôY…çÈ`Ö{ú¦S•‘±è)ô4ú/̉óD-©~‰› d”€^DªED?Ü-†T×è©«æ3(<Æ°~;̉Ø;&@(ƒÙÉw)ëÍÄJhµN©Â ŒV˜̃zècG·&¤·60|PCÏđÑ3Eo1[azC*G$EYù¿¯–WHă)HÓÛ @À]°²]ˆzK¹-̉ đEz“Ô駟¾2÷ÜsW´œjª©&¨ÿ₫•>}úT>₫øăÊG}Ô!­¿ÿ₫û•—^z©̣æ›oö&Zû2:é-†œ'› ˜@k ¨Er'´7̉x°Û€*sÍ5Weºé¦›đ Ï]4ïÍ…|nûØiûZ1ÏÆÎ=ÑîHÿ°Ư¶i¦™¦²Øb‹uhĐ A•9ÓN«ÿưúM•9"̉ /¼PyüñÇ+<̣Hå­·êö%Ô¯û\tz²₫”ø 0: äxU4vE3Ôs®^T,¾øâ•E]´2pàÀ Ï‘©§ÖKÓúíĂ?œđy₫ùç+cÆŒ©<ú裕wßU½¥.SËÍ™è$4®®3}° ”›ÀRdÿçhKToÏư¯i\†Æd<Ơ©gY~‚zb3s’‘ùÑÂHcĐVBrVê19@zè™ .鶰’­ÂR%á ôSÔ¯;IS…à[ßúVe©¥–ª,±Ä•!C†TúöíÛS{ù‹/¾Øáˆ<üđĂ•;ï¼³‡DÍ« Đó½J„O6ˆ˜…À#Đ.Ho!»49+­´RÇ3dÉ%—¬èå…ZF›mÏ=÷Ü„çÈ]wƯUC¢·ê’zR?q› ˜@œÀB‡Ö‹ï†%T]³ätH­ø­Ö³ji´Z}u÷‡Z_~‡GênËæÿÂäB’8i؉ºlñP—‡UW]µ2bÄˆÊ +¬P™rÊz_f46Ç_~ùeG%bäÈ‘•›o¾¹»Ư-ôĐCQ 5×ÚLÀzG@µx¨R̃e‹‡ZE‡ ÖñYvÙe+“O®ßÿöÙçŸ^yđÁ+zÜrË-Ư·º‘µˆ…Ô=«§oc»1ܘ‘ö@St#ơjå¸]ŒîîÆñÍ>D­!r¶@뢩PW¦<èå¦^rÚ2NÀHû hm’pZ¼«¤,·Ür•6Ú¨²â+VúơëVIW—lø~9#=ôPåÊ+¯́pF¾øâ‹®âx‰Dç!µØLÀê'°§üÍßƠ©+¯¼rÇsDÏ“v;Ở*gä¾ûî«\qÅ•Ûo¿½̣ƠW]>ôMưĐeƠ®ép( ½I؆fBµ́cv₫ ưƯ…ºüGă˜vØ´Dº̉ uƠêÊîà€}̣dË(; í+˜é‰ú´M­$¨‚°ÖZkU¶Øb‹Ê|óÍWëĐ̀í{íµ×*—]vY媫®ª|đA—£ÉÀvè¹̀eÄ 2́P‹éŸ‘~œ«^X|÷»ß­l¶Ùfc:ª˜Á{v饗V₫ưïw lï"‰ê6²#zµ‹ă¼ÛH`Q2u>̉xZö:;OíÔkµ̀ྕI“ƲlŒÔ{¤É™ú#ÚÉѲeŒ€öˆú8₫ ®½* ª,l²É&•™gÖx­ü ^}ơƠ•óÏ?¿«îYï’Ë= 60ÚÖe÷Ùhöj‡iRüà• 7Ü°2Ă ]öʪv™L„kF-µˆ\xá…³ôƠH”*T;¡«jă]&P4{‘!µ‚jö̀j6–겨V¼Wʇ9"»¡Z]̀c¿¾Oö0²eˆ€Ö†FC¿B}QÔ¾ưíoWvÙe—ʬ³êåfqLÈ_ÿú×·™Ÿ}öY­ŒÉ‘#"‡Äf&01U0TÑP…#jˆbươׯ́°ĂM[$Ó̀YgŸ}vG7Ï.ºxF¾÷E)ÿ΋ ¤è„^Dè…D5ÓÔƠG#u÷λă‘Îă‡jµk|˜ºz+ÿYífF̉Êev@ZW̃‰Jư“W¨¥¦½Ük¯½* /¬Yékú.ÀgœQ5jT­LcçfèZyŸ ”ŒÀBä÷hÑjù^~ùå+{î¹gÇŒxƠ)B¸fĐ:å”S*wß}w­́<ÁÎMјZyŸ ä”À:¤ûï¨ÚÛJ}«CÎÉÁèTd[“̀ÉÁX²F&ÿĂ¾-Ñ›5ñ®°̉Đ˺̀‹NƯ$~úÓŸV¾óïÄv6́¨s̀1•W_­Ú][o.Ơtú¯ÂBpÆL ûVçĐËÑŒ±SÔÅjß}÷í˜Ù*¶¿¨a¤₫ûßÿ¾V÷ÎwÈû&hdQ8_¥$°3¹V+ŸzVÄL]4®̣₫Ø΂†©g‰Z†‡ªuE{’}j-zÙÚH Ö6&«PQÜ\ƒ¢9ôíă;®²ổK*ÓƯÉ̀œsÎYYwƯu+¬₫̀3ÏÄNQ¿Î-*wÅp˜ ”„ÀVäS-¨ÓÆ̣«o©^ôÖÓX̃ơ¡D °W‹ˆ¬GLñ{¹xƒrE@/ƒÔ 3Ö•[]ŒNF›£çQ™LyW]A/jVEs ´©.¦›·¢è#}‚·›CÀHs¸†«jpÔßĐ$ød“MVÙi§*ûí·_eºé¦ Ç—n©o˜¬¾úê•y晧rÿư÷W>ưôÓ4=lơ¶Bo}¯GzÀØL L$³§ ÉÓ™Öÿºm₫ä'?©èû@eµ₫ưûWÖ^{íÊŒ3ÎXQËjdlˆ~ë6Fz~Ü\VNÎwî LIÎC{VɉºYé¥ƯÑçU)Cđëḍ,45Z©‘4…ÿ©‹æăÉ^o; Íc}$—>Ṃ†BƒËƠê±æk¶äkĂÍËbă®B¦—–·¡ơPú ^訕è t²µ˜€æ×ËĂc—ַɾ²h,ŒZCÆŒSm|Ù²0R7ŒkËÎÊùÏ ~¤ô ´f•ŸM¸º¾_e™ƒƠ¿û_HƯáƠ“"iz±£ăĐƒÉ^o>; g¬¦Ñăc—Ờ=öØÂM‹ËkOĂôáÅáÇW̃{ï½ÊO¨utS+ÈÈo0'Aă€8”¼Ëψ#*GydE“WØâô%9!q¯Êø²9Sc̀n_Á¡&ª§]ŒTÙ¯ ürÏ€¯Ẵdq!Z©4irBÔB2¦SÉ}^o"; …»-—û̉ =‘­·̃z•ƒ:¨¢F[mú†ÁJ+­T™zê©+÷̃{óàå Tíë†ØN‡™@Î üŒôËĂV[mUùùÏ^‘£n«M@ắ4¾́óÏ?¯<üp´W*#¢Ûk_É{M mT—8ư ’‚O ÛÙç I |@ĐßÑ¢H½)’¦®̣!U8JîđzóØiÛ ¹”> §y"Û|óÍ+?ûÙÏ*ªXÛºO`±Å«̀6Ûl•Ûn»-v’f¸ø ƯÛé0È)H÷©h’—;ï¼seÇwô¸±: vÙe—­hz•—ëp¹—Ñ}u^Ö‡›@+ȹØ9‘~û6A—Eö9¨:ÏÙu Z©7ẺTÓÑh\r‡×›CÀHc¸.Îe48l’æï}ï{ÎGŸ>“Ô'sÁ¯²À T46¤ÊÇÆÖ"û¡h_­‚£qöG@Nµ*“<—Ợ!çĂÖ3úÈ«fƪ̉¢®-£Đs=»ºÏ2¦Ø«¹²ºZmƒ4̉V?ƠxeĐB©Ó§`{tŸÚç͘䇮Á×/Ăå¦%“ÿAs¦3«± ¿úƠ¯Ụ̈‘Sçö¢‹.ÚñÖ÷Á£cÄ4€Lo4̃®ó²>ܲD`V£çÈ€t¢6Ø`ƒivÓá̃®€ZBÆ_yüñÇÓ'ö%à»èoHƯ4l&Đnêf¬q±¾–»~^»˜óøåÄÉÓKŸ!©¼LͶ¦îcgk; ½«›tôe4àüđĂ¯¨²­÷ô¡Æ>ø cf›ÔƠú³= ‹Ô¼j3¼Pør´t:ák­µVÇ·‚Ü‚ªoÿ¼ổK•O>ù¤cÜW3óªç²¦?ưô$AöªôÉ ÑR› ´‹€fjºÍIÀ/ S·,[ï ¨¾ çµÑÜ©Ë d[Ï„ëRá̃l > ¼V/µ™Ö&²!C†TN;í´~ÇíđF¯|ơƠW•_ÿúו[n¹%v3 Ü5¶Ăa&qêfñët5Ơ®¦́î΀s½́5jTå‚ .῭1‡&‰ëÚ.ºè¢AÚsÎ9gå裮èûDg̉(ÛvÛm+m´QeÓM7pÉ·̃z«²É&›TÎ:묾ưs饗v¬ëû£>ª 4¨ă|₫ùçïÈËgœ1áÜ°²á†V¶Ür˺¥%mî¹ç® 6¬#µ˜©+Ö/~ñ‹J•Ơ£¹¦¦Q·™@;¨N¦îAëE"×Ø°=#áê9z÷#9iÛŒ9)¶&Đ›7[Ï,ÇiǧOƠ׈8â;i0 ØÖ›Ñ8 ¢FÄv!́‡‘p™@– èíÛÁé0 r衇vËùĐ”Ơ¨a®¹æª\w]÷_ØÉyå•W:¢– 5̉b×K†=ơÔS•“O>¹ăyyíµ×V.¹ä’Ề3ÏÜá ):vđàÁ•Ë.»l"íºë®̉ªóµ_Œ¾å•WV®¿₫úÙP«ô!‡R™i¦™bÇiêcuDz™@;́K¤1çăÂ÷iG‚Jçäq ôY$¯g6$î °̉3ˆêW¥év§LŸ¾ÿ₫ûWŒ9̉é#½Ưúö̃öN9å$èu¹? ™{r]Ÿcm  îƒzÅ?ÑsX¶*ȳ̀¢s]Û7̃XQ«ëÿŸ½3·jzÿø2ÉT •$ͦ̀Ă-!…„I!‘1C¦h 2f#TäGÊßP†( (Íæ!S¦đ?ë̃uÚgŸµÏ=ç̃{†{ïû>Ï÷œ½×^{­µ¿{Ÿ}Ö»Öû¾ë¤“̀ĉcsÎ́Ơ«—Yºti¬₫ưû›÷ßß:´¯ZµÊ\wƯufüx¬¿ŒY¼x±Mg1ĐsÏ=×0[‘Iùæ›olñnƆ˜‹/¾Ø®ßñï¿…¦×̀d ”\ÿEcpµ÷̃{›¦M›F­ûw)œĂlª'2!#Đ÷ °WQ²ÉÀöRÙ`O…ü» »«’̃–b1o Ë&’À̀“JˆûăË@ùµH¦Aw _¦8«d–̀3Î?ÿ|_%(7úh2‡ \)m¢Ó'( »íÆkjẤÁ!‡bÍ©¾ÿ₫{3wîÜ؉+W®4øX8aS§¾}ûÚYZL¤vß}w{øí·ß¶æRÆ ³+ˆO˜0ÁûÆbÙ²e  ̀t¥U«Vó¯̃½{[E創0­rÁO?ưd{î¹8|ûí·±ª¸^ÚơꫯÚ(W©r‡_Y„ÉY}© Á$.V©n(™aà.)v£PÑLKö¬EeĐƯ2c€̀ÿyJcFôXOº&•’ơKy~e<}k¹èkÂN§˜?u•́0Đ©S';’ËèoHzÉ>Ó¦o…̉uWÈ'ÿØ?Ü ]vÙÅà;‘ª,Y²Ä`Ê„̉@¸jđD!¡sLP:XƒsÛl³Ízà~W øÑ©ËÍ7ß7£âŸw̃yö·ŸÊ7í}à̀óÏ?of̀˜an¹åẰG÷îƯí̀ eüøăöx°¼&M˜7Æ?Ô$ DÀ3!© Ê3B5B.”2̀Oµ,ͧ ”‚cä\":†åVIx!œ¨ûcà4)yƒA¹Mv°oư%˜¨Û¥c@ôù.§0-L&pjLæøˬeÆ6ß3gÎ4¿₫úk°LL(î0C¥Q±‚̀èv>1À´~œál`W9O' ³8U;¥å?₫°ï!f™MHG˜p‚rẤCXPRf1‚³/œÜÇ ?”°zơjẹ̈È#XEü 4°J ÛA!jr÷Ưw[ß—Ù³g›k¯½Ö~£ˆ¤"pƯ¯_?«đÛ&ç²ï‘S)Gó(¥` †œËè{X˜ơĐ™¸0+™ƯGÁ8Wđ\¨O‡ú…̉u· ¬[s+ă©íä¢_8qú±=ÎgáÏuụ̀åÖ\!è©6;³ˆ5k2§ÔªUËox®¡¥¤ñQQ̣‘̃!¼Kâ„Nx:₫cü¶p¸îÑ£‡4h>tª‰ˆåÄùS°Ăz”¤¢øà/2räÈ|₫ùç Åâ—Y@I@pÇ …Á ×RµjUû®réɾkÖ¬ixàÓѾ}{E‹¡t„ ̀ºxäIóđäƠ$e ¤  dĐÁ Ëy’°:œ¨ûgàÿ¤† ZèS´đ¤kR P$=⇳óçaGÎö~Ÿ>}¬O ~%ALŸ>Ư†·$D§ lÇùCgd‘ü .´‡‰ƒ­7Ñc;î8sÊ)§X³ L5‚å·o¼ñFëœc+2zôhĂŸ~ú©Ưw8µ>öØcn×Fáé̉¥‹Ѥ3AN"ÓdJ8âˆ(åïR©3lO›©fh¹Ê@ª 0C70œ™Vî·>µÿî»ïÚÙ¿ă?̃úq`VÅ:ûí·Ÿ5Ăâ<:èDÈbĐß! ñ9Aáà]‘Î ku0S†¯ ₫#Ô-‘¹È?₫|ƒ_I£F Îăøj`₫D»P’h#y©3+äï¿ÿ6ø|‘L‰Â¡Ư7să®9ê;‰̣GçPÿ'£ˆÓổ2°¥€OiX‡ódk¿±Tô¯`íhAa͘+Í-Ü´Üä ƒ™^̣\U”¯ọ̈mMéh|/àư˜‚̣÷[¨! ^Gè°î¦ËÀúéP‰ó ×¾_øúñûpöÈác¥ƯçùÄOŒ‹£O™›l²‰5ù"RJæ#FŒ° l±ƒ#.Ô%¶ÛtPø#g””¸ÿ÷Üsí°P& ÆÇl®¹¦Đ½…QÈW^y%Q‡¶`êA9¬qâX$Í ‡;ï¼Ó4Đ Â$mÊ”)e¦víÚ±º\₫²øÆ̀ă /4(kÁë–²k NÜYơhÊ@1p´”“0]zÁØ‘ÿtêà÷†¿C0*ç·k×Î\~ùåvq?”;î¸Ă<ù䓶Sïü=ȇ@Èp.‚râ›AÙIUÈ‹âÁ»å†n°¿O¢u 0ÀÁûè́³Ï6¬ơÁ{ƒw Ñí.¹äS¿~}«8Á«k×®qUvèĐÁΔÄ%í0³2õ<ß¡¤i˜¿aÅ»$$t¾<J×]e ,à ÛJ2ë‘o3ø( ê=!øH€ ˜;…íù‚ƒA¡?L°o ñ Ù¦ăĐNđxQú₫̣ư†§û|ẻˆÁ‚pPœÑùD RJTIÀÂÍ@~F̣Y™IÁ,ó‚°°àuóÇNç婧²¨('Œj:‰ uùÆo₫t]Ù¬_âB^ºsĂßÍ›7·ewŸ™'('È}÷Ưgg>˜)q‚Y#’™ éÙ¸qc;;ƒÂ’Kdÿ~ÁÚ0@¡ º« d™+Ăơ1SÀ̀Eº‚Ù•OPJœ 3ŸDÈb†”Y‡ \qÅøä´ÓNó%§•Æû…YWÀz#(áµ7=öX;;Ë{÷ΗÁ%îƒÇY'¨¤Â}hÓ¦af)$4V/£Pót·œ2À̉¹†hXt€óMFIƒ0ëû-ü-鉑+Œy]̉ù!¯+`æ£ànAÊä¿:Ÿävi á6ëÅ5\.èHÓÍ2™*Å3ĐF²$hvĂÅ—–F Ä… ÄlÊ ³˜>đ§Kô=÷ÜÓ}§ê2–¹˜ :(;8‰~ươ×q¹ ‡IÄ_̀°µ̀¤DÜ‹m¥Î™¬WËV̉` £äƯ%œß9‡ÓËjŸAŒ°̣QVe§Z¦QaåĂ‹Â ¾NùpDzưq/ZJ;̀v[´¾ ϳqmdÿwÁ­yz僤]Û úD´o‹¢cw óRSĐL€̉ƠZp ¶ ‘`3Ç& ̣I₫’ÆÜäiĐI’ÖÀ“®Ii2  Hj„1'8‹¶2Ó‚Ya*‚£ü˜~1ú0zçê F!‰bè#JDI„BB}̃vÛmq§»f`BxÄÀÂf™L6ê†Dơ9÷£IYg á=¬bª›²̃ÚJX!6­[Ó?J„{—C”Ô¨.Y/đdH̉âG÷<™r”ô‹ÔK›1©ªăiĂV’Ö;̣}%Àdi_¦÷ߦ Ú Hgÿ#A¾Éƒ̉ oCÂr¨(MwKÀ€`O? #ÂÙqw‹e…•å>Ư£û6v>‹‡ÑÁ/Å z³¸P—%‰̃…Ư6 MĐ‚UŒfFˆ~0ÉB°Uwñ6!CŒ^bZFXÚ ^ ¥ë®2Mđûà6N"FÜặèNvàs,ª¹V‚yÙmÖVA8Z®‹‘ÿ 0â~c0!·Ÿ‘6aŸy‡à•PûæË₫î¡4·;U6öü$pÿÅ̀xđß¼Bo³̉$+«å“©ë wcŸ'ÉÖEf¬TJÈ€ O\7ɲ^0vÊA?‡à±lm³̣0³;w¶¤D‹aQ¯°”E¨Ëp™(؈ăÜêÖàÀăY!‚"Øï´ÓǸ¼dC˜ °¥?9ơkÊ@A/eĐ@%¿À9̃Eá µ,á†ë®2*¾g  :ăù.çH/BªmÅ „×NBé`A¾* 4§ `êÑ9˜ Ûé3  Hñœ%¼(=ôЬÙ*ÿöÛoq!(‰b…C)&TøôîƯÛFá:묳lˆË>ŸÅL%Ôeñ$æÀ¹›îO>afµPPJ©9nÜ8J“pO<ñ„©qy2ưíVrƠsŒ́W ¥é®2-Ö‘1‹“;ÆíëN₫0qoN”êf₫ܦ̣Ú’­¥áyùUyÏ¥‘øpjlÙ¯> È,f¢=`Æ(L>+ ˜ưO–„¾a8ƒî'g@_¦Éùi.‡œF‰*“ ! &xÂPñâ‹/Öö`µc‚¥ûå›nº):—6C]âÎ+æZ.Ôe²ë‡á î2“•¤9S´‚‚₫sÔ¨Q¶êbF„Uâƒç&«³´Çp‚Çï%$$JÓ]e [ `÷¼]°2~?íÚµ &év1À½ñ8Äו&ú:yÔrmJ9`€Áˆpßk‘¤¹y¾]Âa*¶vô±0C3ùb'ˆá…‡̣̀½P0MđgQÚßEûKå¥&ŸåqOăènåIפ`dN%œ­. nÖ¬™]?#˜V¶™-ñ…º̀TÛ©‹?đ¨È7™ª—rq´÷,~8Q–Ézµle ‚’~jđ2kñ¨ä/¬³4mư¥8¡#̉#.Ew”ô˜+Ùñ' Ê ÙLĐí¼b€¾2JRƒP«pÊ¿=”¦»)2ÖÂS<­̉dK5ÏÖ́GY3œíP—[mµUN”x‹¸GíåPÂÔHYó¬å)!øăJ°fÆR%¿ˆxDÿ7óûÖåsëJăÂÊí•ÏÖ¶ÙuOF{xHè#ẓhRú" F’™no<ŒQÛ¶mƒIº‡ ´lÙ̉ …d}Ùg±#e › ´”Ê6VÈ¢Ÿ¾ơr‚yt;÷  À™¸Z³©l'˜åë¦2Œ_b¦œđY²“ôX^00ÆÓ½%mCOº&¥À€* Ñ$„e©fÍádƯÏCp¾÷ˆïåïɦIÊ@™1đ̀¡ W­Zµ̀*Đ‚2Ă‘üđ«óHÂ=ơäÑ$eÀÇ€ïÙyƠ—QỌ́ ăË^ä(!*%`@h̉^º`X4Yùv$â^%ÜÓ|k·¶§Â1đ̀E<›îÂ+ÂEÜ«„{Z®U¯!+ xj™âIÓ¤üdÀw¯ô}PÂ{¥ H4q UÄŸQt yxä—_~1K—.5|Wd‰¸W»Ê5oR‘¯[¯-¯àưJ¬8‰x6ặèN~0q¯ö—Öả©¢ ¤ĂÀ’y›Đ D„J+o»ëHƒ·́(¨èæHª€”áÓ©/Q?™ø4 "lfÄt|0[N¶?û́3»0à3Ï®B[™' ài₫ùºö i[;A¸Ư¯K¸Z€­3ÎÙơü¿r-— î49*,ßIN¬´•₫Iö_\'ÀÜ)ŧ€́! ­"ø+œÏmRÄw†“ù#¢óPä¿ÿ₫‹­ 2zôh³lÙ2ĂÊè„ÆE©`}§zÊtï̃Ưæ;ñÄÍ1Çw‰›l²‰™?¾iĐ  oËAd}n¸Á́ºë®¦V­ZqçäË cH¡iÄ*W$_nRÅnGÂ{¤E‹V¯Ø—]q®5¸g3f̀_ïU@¬è~2̃’ùd'äø Å:6ÓÇÈñ— 6œ+`åđÉÖùàü}‹N₫-ÚàØ ‚;öøeÿÁaEiùö…Bơ…€¶:Aù`v+_•&×μûÆD@%‘¸èW¦^å믿¶ Ô¦›njl̃¼¹4h©_Ÿ‹BAÁb%1ÂøºôºuëÚ…Y‘ƯÓÁ/,,>ƒ×hÎmƯT2É@³ñLf² Zv)ˆ¸g ÷¶”Ơè韄~…\̣‚r|Ùôë V ưÿMp£ Ÿ Ø·üVö¿ àkÙṿ‹l¸c(ôO Zºƒyúí»gú>(ÁÍ̉?i Ó6Û„M7ư'æk*1íû÷ïozôèa8à;sA¤(§`ĐnfE{î¹Ø%ṕ°Ă "₫₫ûo»!ÿưw3nÜ8»âx“&¾wj¬ˆœnl·Ưv¾úó·Á¾ÖjZyf áYÛv[L¥UÊú)Ow+¯ÛĐ¯Ö~×-Ñ8f2\/8X€eÁ$ÁídûÂ/s‚|S´Í3Óö +ÊK‘Ù:Y}ùŒ{v (¾{<®ÛTñ"I SÄŸÿ́‹ï¾ùîo>_C^´MÄÛÀ¬PœÖÏ(z>GÀÚxăÍ;́`Æoæ̀™cÉ“'·"8&X?₫¸Y´¨đ·³zơjɪaƱU™ûí7k‚…–CxVÅÑU§ƒÆ „ä³`Fæ‘=i¤ ”% ^ijX–uF–EØí«®ºÊuÔQ6ä6!´ Bá~ߣ˜1^@IDAT„á&,w¼Oœ¼₫úëö8‘ó‚̣ÄO˜ÓO?=˜Û¾à‚ ̀ƒ>h÷{÷îmzơêeP.œ Q'úC˜™íر£!ÿÑGmÎ8ă C¨ñ\JĽK¸Ç¹l£Ö× ø₫ṣûϳĐL ¥â:38 Ü 0Ó1Uđ‘Eä~SBv’mü#̃8©-ơH6¸ṬWF>}ûî›ï₫æS›ó²-t¶UâHøSñŒ~ÅŸ‘{ørŒ3Æ\}ơƠæ×_5ÿ₫û¯iß¾}̀oă¬³Î²‹̣§2E‡åcàÀ¶ơ˜jÑ‘A!Ô®Oà̀›7Ï*?¾<ù¡8êË"nNÅnCÂ3–Ë÷HiÂp»Û4qâDƒ)êK/½{¯pŒpßQ<ÆöâÅ‹í;æä“Oö‚RĬê=÷Üc}‚‚sñÅüÖªVÅú#û¢ï‘́s^ÁjLèWÈơ1úŸÏ²@×]Đ[đ±€₫"Q«Îp 9Jđà;ÁO®“NÄM”Äù{î^7ïGß‹…¦‘€…/ù(p–„÷}8ƒî'2  H"' R.;‰Íó§&˜Eñw 4.¦Á?M¶ùsgæă»ï¾3Ơ«W·Nè®´àBƒ.Í}ï¹ç†5B‚‚ÂBG$ß%ẫù₫ ̣ưR´}å‹„÷Hđ÷˜íK‰ ĂŸ˜Ú\ÈÔ¥óưư÷ß›w̃yÇÜ{ｦoß¾†€;íÄ`gzB4¾Q£F™¶mÛZe&xöܹsízw>w¬CtÎ9çX%¿5Mr!÷.áç¢mZg¹`À÷¬ø:²ùv1c¥A€hU› – ÖNaó́·0˱¹€ăîºX3ƒÙ’(iă9đ¢¤å{¿ôi#Û¹aÑ~IRIÆ@Àdù*Ó±„EÄŸO^r‚¹X„Ó¤m/×’́x^^T)qïîq)ªĐS• Jn„2́;·̀ÓJ†ÿ±fÍ™wÜÑ́±Ç†Ù’( ¬?„/̀­·̃j¼P̀C‰æ”wŒYf@r)÷.áç²Zw^3àûÏqơ¼nxQă˜ƯQ̣µ•E˜½Ú4t±¼|æY¡lºëX×mèwŒj±­¢ 7D¹U) DÜ»êåñZ´Íå„g,âỲÊE¹0Ü{íµ— ĂÍ@'œp‚ơs `Vƒ0ƯÁ (˜t"|¿úê«1ÿw~ªßΧc̉¤Iq§0ËR³&­…‚9(₫!Ï<óŒ;”ơïˆ{—p³̃0­°¼0Đ¯†¯./×v&0à»w¾{œp¢&¬e@g@Örᶘ^‹ç¨—¨;傈_¿—‹Æk#Ë3yơ)Mn“%K–Xó+ü10ód1̉·̃zËR¥{“0«:ó̀3­Ÿ3"NˆX‡©˜fmÜE„ ú“¸<ÙúÖ÷H¶˜®°ơ$¼äJud³ü̃nß½óƯặ{…Yh¹Î€$’œ0-ßD.§ŕŸsñLƯ„ĂŒø¤…¶~óÍ7%:7²Đ £ä‘|w₫ó4Y“Ê g1+—U0ÜøzµnƯÚ\{íµÖ́k®1ø…•Æ¬C‡Ögs'-Z´°Ñ÷ˆ̃‡à‚™×Ö[o§˜¸üÙü¸wúÉæM(ßu%¼är|fYÙ¼J¦·$óÓÈT{¶“‚Y=Ư>(Q(ñ» í–j­øî¾;)~ë H"Q /\) .4×_½Ă¬:~́±Ç={ÚÅÿỚÖ­[́ p '$ïá‡nCWÆm̉’‘GF »ùÉ'Ÿ„³˜Ûn»Í́¼óÎ6\/u₫’º×]w]s̀1ÇØrqvŸ1cF¹$B3 :+Œf2Z 7f„ͶDÜ»„{œívi}„g,âỲ . wÓ¦MmÔ:Ụ̣́Ë/[§nYÊ…á6߇×^{Íœ₫ù†2œ0 AX_Z 8³º;(̀tD ïª~ưú™ÓN;-–…Pâ˜[]wƯuVÑÁç³,f?"€Ø¹™̃ˆ¨?ágºZ~¹eÀ×9ơub³q»H%#-D¡øSp›`°€/Ü p‚cơ2A_ÁË.1đư¥lsΛÏĂÂKb«¢Ä>̣=TÀµ³0ăRÁ9‚©÷{B±FÈ"eé|ÁÇ9ÿcÁ ‚¹‚lJ©Œ¶å/Ù*i0  H"Y /ˆ?ŸÄ3Ë0…¸øgŸ}¶9₫øăÍđáĂmÔª>øÀvđ™•`Es7#r×]wÙQB:ûóçÏ·̃mÚ´‰™/¸fqÜ çÙ ¥"(tPlˆ<ƒ²CƯØ?¿ûî»6d/Ç/¿ürÛáà<ÚˆÂsØa‡ÙbP€N=ơTCưDË!æÿ¸qă¬b³ë®»fƯ>ẫ¹]đ̉u[(K̃#¹T@J†û¤“N²¿ơưöÛ/Ñ đàüD–.]jºví—‡Đà(A îo¿ưööưFx]'¼[xŸ¡œ ¼?đ9éÔ©SBYîœl|GÜ;}dƒüQ‡ïY©‘ƒKk"u¾%¸EĐN€cù₫‚‡8UÓÉ_W0_p°Á×ébÁă‚­()AY¯h‡óøÁï+X\”Ɨ˶lœ.xQ€Rq…`œ€HZ.loKÙ$h-`TƒóÙ.8Tđ€¼ ́,Ȧ ü„ÅwĂyt?Ä€* !Bd×i²h¹VøÄ„è-Ù’‡~Ø´lÙ2n„{h₫˜/½ổ¸?{Vêuá3Qˆ„T6¢ÚLẦĂ‚…7[\lß}÷5t(ˆÑÙt‹4ºrX„QQÂ3c˜¥a”Ơ)LÁº2½Í¨®G:‡<¤ ”†„?¤ˆNliêHù\~냕, 7k……ß5ÎêNÂaº]ºs\gÿ¡‡èăÄ 3²À .ºÈθ`v_H„¸;%+ßúÉ Í¹’„÷\lôaæ˜"E£€\¨bl3»R@'ù[À̀†“wd#~„ÁIüFiK“¡‚‚ñ„|̀œ¬Æ×™d°|%øÆnÓ¦è{IÑ÷Jù>Cp´ÅÇ)9²™qñƯ7ßưÍxCÊ{ª€øï ư6ÁC̀ Ô¯_?˜”ÑíÏ?ÿÜ°ZqX0ƒÀjÉ’%±ö`"Q«V-»h¡˜2 ¼' ,0Ï=÷\, f2(ï°`QœĐ6L¼pV5k– ÙÉh)³)Ù”!üP<âMôäÓ$e ¤ đ‡„Sb̀Y‘Ù¸Ÿ~ú).̉SI /éy("å! 7fŸù̉NfœAHè ÑqRQRa€ÎvX†²°ÏLĂưz˜UÀD¢yѱ-ä»OÑvcùî&¸]JG³¨à,³)K5¯ ‚²Fv"¶§I:³*ï P`^¼$¸ImñƯ7ßưÍv»Ê]}ª€øoÙ§’§€àˆMä矶fWáæÑÁgA:2N¦L™bggèpơƠWÖ®›ăŒ&¢Ûí¶kÔ¨aU«VyëNVVđØ\`vÛm7C»0¯`‘CüJp^ÅD+[‚'‚Ù÷RÿÙjƒÖSiøO®|¡ n$€÷H0Ôl¥e§]ø+|­ưLé°©(©0°H2Ñyg´̃Év²ÁÙ\ÛyX[+mûY€âĐyèm·Œ©*ß[ 0c&ƒw[29^¯iœ́; :J"´y7m:\€—×  ²);z*£Ï¨’&ª€ø ăaj“ w.ơă8zàZ`vÅ ÊC‡µ+ c‹-‰è8è‹"[7@ëáYKP@ˆö¤R~ˆx÷ë{¤üÜÂ|h)̣e‚ÆĐ™gváƒ@Z¦7iƒÏ”ƒ‘A”“%:̀Ź.pẦÉlÁXÁ—‚ß? |̉E| ²­à »µö£Ÿl̉®gÖ&%l¡­+`Æ  ](,xQđ [̉ÄS‘3ó̉¤(¸¡*‰ $ü¹DtfÏ,£”V­ZÙž˜Ơ ‘kˆLƒ™•OP80]X¼x±¹úê«[¼ E€Ù€ ¨ï|̉4ib^ươ?Ân+™àŒ=ø/¿DRæ\,€ñG¬¸RĂ‘ß#ú¢đ¢Ia áYËöo #W•¤P~÷¼Üï?IÖrs(â%ÜÛrsAÚĐ\1Đ¯†øFÓ3Ù>L™N„û~ŒD2K1Gà“%%…óJÔF‚âfE0QâùAP8÷JAơ`¢gûbIH§­×V ²Í¡¯>ß½ 4W7} „B_ʘ–đçÑ™Í7D¿Â™›”?₫ø£ƒæL̀l`.åÇpL©đwÀ„¹„°Ä_äư÷ß·ç’† zĐ,Ë…Ưä\”ʧLêÆ åẹäÉ6â Ñh’Iƒ ̀f›mfn¹å–X'„ í ¦6%¢ă /l̃„Ê]W³–©÷Ñ£ ¼`óđ1¢[Ưwß}öƯ¼Eƒ¶‹ bÊé„ÁÎ;‘¿đ 6âù₫øă–—PÛ„øÆ §wg9~üxCHx…s×6"îWƒ .ø›à™ˆ{–po3Q·–Y¡HèWÈƠe÷Oј›¥Îz‚ǘYm 8RÀçv¦NHù³4× 0c¦áeA;4‡ èŒMDj˾;—ï­3çNT tÜ+À”ñyA2yURgoÁºŸ˜Y‚lïéû w@M°ü¤%¼(X3ƒ?ÓlEÂ"ÔƯwßm×ÁT qêF1éуßƯZ!$¯̀ŸœƒùåÄéoÛ¶­afaf‚Ê 7Ü`g,è °M‡‚zñ=Áôjÿư÷f·ÛÁỴbnEgàÈ#´¾$(>t9á„đàGBQeđá‡úÊc$GEÈ ÏÚG}”‘z“…ÆvÔ.\7 ¬1„é&³¥;v´mbÖ‚AºuëI“&™SN9%®­¼+ø7lØЦ3;KYÈèÑ£ ơ±cÇÚ\Íꩧ²fäsyùf ‚A íÁ$ª®víÚÙÀä¡NüØđ-C˜ưÍ„Dܳ„{›‰ºµ̀ Å@B¿B®nŸ,_áEu>*ߌ2ü%øCp³ đ‡$"Í+́VáÇbù¢óiÖ(A³üè0Ë&(|1nËnLÈ·±ànJÇpÇzL*ü pâ›MAÁäêÁ‚5̀ÀhS6‹(WÛ ‚‚™* AFRÜVÄO? ~œuÜa”₫TY8[‚™Ơˆ#lœÊé;û́O:5²9ø…0ÊÉ̀áz0“’Lˆ¢5jÔ(;‚ß 3'D¦ €°°ØÙ#h×ܹsc#®v.í¯ûº© d’F̃\½GÁ`Ä—_~iưËæÍ›g£Ơ90o"„ö`Iđ JÏ=íùÁĐƯî8ç1KŒ̉ 3¯DÂó͘r*”D°£Ÿ¬.Wg6¾#îƠL©ÅREH‡y’98̉Ϲ̀ Ư)̣“TÊ`kPùH§+$³S>̉9úÜ o:ç‘E E‡ó³­|H•Æ§€Lá€Jú ¨ÍYÂCñg]‚É÷*áæ¬Zqea ᙋx63ÎÇùçŸo;î8»0(æẀŔ½÷̃¶̃%K–˜E‹Lœđ h IPH Ẫ<`”à1üÍđá¼éÓ§›₫ưû[“˨ke¦ƒ… ƒÀï̀I²º\l|G´?áf£-ZG¹gà_¹‚×=WáëÔz²iR0à»Wú>(áI´©)aA𴄇j₫üùÖÙ2Væ­€|—é%áôî‘„{êÉ£IÊ@Y2đ̀Îÿ L•²)ø”1›IƯt¬QBø̃e—] êÿüó9ùä“m“p*gÖ¥%(ø—á|~çwÆÍ0«BÙÎÙñ6l˜ơ –Á63£(2a FŒª+|N¦öñUá^y$áẓh’2àc€g§Kè@;ÙJÓƯüc“³Æ¡fư#ûø¿¨”€́₫– 9<;Ç•Áú±g~óÍ7ƒI9ßÆq4hºÉùBlbϾfM6ÍW‹¿BB3¢’ÿdj(Mw•L3đ®TgŒùQ„‚œÑ¶°b­Zµ¬ïEûöí­:³ü~ ïùÔ Aƒ,ˆ€‡Ÿ‡ÏÇŒ…F™å ²“ /¼ĐFÉsû(#̀¶àâ|Pܱt¾}u¥s~ị¢|geÊÂæưí̉”«çVj|Ê+£êD¤Ê'i Áa<Ó²T°­`GÁ†E•ñîèÊé×ñÚ±ËÇ”M¥ ¨’œ´‡ù£Î'!R£˜„¾ :„bs‰ÓN;Í:’s¼  1L'Ñnpøtë…¸k£ƒDÔ,ÊNbóÙgŸµ‘nÜyùđq°Û.‰½j>\’¶¡ü2€rÂK#âÍêU²˜)ÊĐ»ï¾k]9S*°Ç{˜ưöÛ/Á ‹¢\°€)JˆÎÁq…!p׈S»swyùf0Ç…₫vß¾µC|uËÉävÄ=zEê,ôêÏdåZvEeà#¹°¥¡‹Ăå„PZ.wqLgTE€”ËN6‘ Fa™$Ç1- £»¤¡¬Ÿ' ³=̀đ}Á/óSÁ‡ü3ÏPÖ$ÁN‚|’Âéáø=¿«{é0Àƒ¯ÍÀărèŒàáY³fÙQ1¬s-(Œö»ÿ駟9]óG~É%—˜ơÖ[ÏÜvÛmv%t̀ X đ˜c‰k6Ñs0ŸÀ~›+°ñëÖ[o5:t°æDâ ±I§…đ¼„̣,©£{\ƒJ¹ƒyÉ«¯¾ê+e”/QÓ”,0À{$Î́bÚ´iv]"9eBÂQª|uđĂ³'|AªWđÄ„đ¾8®‡¥[·nq3gu–]÷‡w₫ Z | 8Đn3§]»v+–÷ MXÂu…gbŸYcơˆ¾G<¤hRÊ 0Ï3teè :·„—͹Fñ„à{3n 0(k‚Uß ·s † Æ – ª î<*˜*øDÀà̀E‚ ç îLÜ) ZÖ‘‚|–̉ˆÖ†èûÀCJªI<<*Ñ ÀÏg‚†Á,}ûöµæÁ´\lăèÉÈ#¦gœq†^ĂÚÄßG >¾óWqÇ}đŒF̉q@ù`F…ºD§ý±Ç¬̣‚9‹úa÷í¢a½ưöÛv“(7 °‹ úÊÎ6/̀Ü`F¡·đRTQ²Í@©đKAܨÅW\a£Ne»1™¬™PE™ñ…ÙÍdƯeY6 ¯2$\$¦uŒ́ª(%e€‘}F₫ẲL|éá|™ÜGÉÀR ¾ôY‚q‚û̀₫}+8ZÀ äˆ;~]ánÜ'ï½÷Kƒg ø-ư,¸V0L€ è „ ” °ĐV‚…‚\ ÊĐ%¡FL—ư}Ciº›Üp•hÜhE\̀–̣A˜ư®'@dl¦™ÑÀÁÔ)®­¬c {é¢Ü°È!Ê ¡3GiÆŒcI7̃xc{jq!6i³1ù 8Ózä%ISåĂCŒ&e…¿¤–§Â5E<«álåjŸÙ7,ÏÊ„GÜ›§å*åê‰̀ËÆ~,­Ât),=Ă 9Øo"u₫.@ùp‚ʱ̀ä:åC6­́!Ÿ}èiS 9ÜôêƠËQW9¦­]ºt±¡/  đóÊI'*ùø%b³,fH¶Ưv[b“|Ø’ăôkyâ‰'l(ÑP;˜Æư¿Pî*Ùf€éúmÇm•üb âƯ)îùƠRmM9fàIi{x6 åăœ_ÓvRÿ7¡6¼)û ˜Å,h)ÊƯ²³{íƒe›Y_'ÊFÁ3‚㵇 (ûJ̣•À)#6!ëÌÜ„e‚$üNÔưôP$5¾Ü(–ûƒ>ˆË“É ç0Ù•“=÷ÜÓFœÁ1|‡v0øn¤"×ùw¸oWnq!6W­Z7ăÎËæ7«<;“²P½ĂeÿÏPî*¹``X¸RÂz‡ Ây2µÿ믿Öë @E¶…ºñ++Mˆ̃L´çøçs:OÙ'*©eæøRŒđ4¤Ÿ¤U÷¤g+ ¿Œ:¡Ê0aÆ,ëfÁÁc‚ ©ÊßEƯ7»Í‹µØá·5Qđ‚`G²…`™ƯÊƯÊQcOơAeÊsX“Ra`ưT2iû£à‡·s F/w̃9.)x8£Û̀|A‡8ûÛo¿}\]D¿º́²Ë¬c9&U§Ÿ~º=Î,ExÍÖ¨R_±hq!6›6mj›pˆMfc°ûÎ¥Œ;ÖFï µá'ÙgtFEÈFK# êCǿ«®º*˜”Ñí… 믿̃FĐc°°c=ÖốÙÓ.ÈLâư÷ßkï̀,ûơëgÚ´iKwG}´9ó̀3­C=á¾}feDăă]‰yucÆJƯ,ÆHd>‚dà”\[Ä•Ï7‹8Ó½đ(d+¤̃G3]·–_é¸Q®ø A°3¿¹́Ÿ)¸E a¦oÛˆÿ‘ô^‚÷È&‚zvkí–É₫>’ằpđ¢ÁôŒ‘Ồ´Ü'@xO~b·ró±T{…§j²÷<é”&ª€¤NØu’5h¿h̃{ï½ØJ©S69éđ‡Îˆ!4Ăa.Yi˜!t‰TÅq: (D½bæ$(á² ±I5j,"«Û(@8×{„P~(!*Ê@>0À #g÷3eÊ";¿!ÂiŸ}öÙ†YR̀5™Ie6—>³¬dNœ÷Ç-·ö~ÿưw»ùĐ¡C͸qăVpgu'Å…ûfm"”êÆ_5HƠK8pB₫‘¡‡~¸9́0¬2ŒÆg72øÁâ¥>d7IµØ|«(eÉ£û N z‰́?$ÈÅ×4©—~!ÿ¥‚ÿA™/;ƒ× pü̉"ÈWL:Êơ ËB99JÀu¢¬p­5tPø½m$`TóCA®¤›TÜÂSùPO&•€4<•ÔXW²¡µ£¥Ç„‘ÿ‡~86v ,v÷ƯwÛÀÌ´øBlbútÊ)§Ø½¹Z…0Àê>x‰~Ÿi^´|e ªJ̃Å‚­ƒç‚ßrXùæ)‹íAƒÙơ:œráÊÄéú̉K/µ₫](D„¡%đ„“_|ÑÜ{ï½f„ HçέÂ@´¼dá¾Qr\8oW.߬¶Îằ¤8Á™‘`;–©o”/ÖE É7²ß@đ{(]w•²``)äcÁz¡Âî–ưsBiÙÚ}L*Z)¸̣ƯY€"“ ©)•r_ê„*]ö Biº[B2ßk-aẶđ4ÂÆ¡ơÇ #O>ùd\Z¶v˜ù Tn”ÙBY·Ăb“Ñ£:Ê:¢—u}©”ǵ{”Ne”Y•THÔ<Ùd€‘¿ĂΟ?ßF¨ §—ơ>₫&{íµWB±˜Y2ˆÁ, é.d÷=÷ÜcgR™¹He #*Ü7eSOX ²ªh„ëgÿ1̣Á¡›ª|À„J&X$…ú:gIzâ%-H,“~N/A¶|Q¾–º˜YqÊă®äJà ¬|Đ–!¹jPE¬wưxQ¼¦1R6/†}ƒuê ƒ2[o7῭’‘mFK±§³+iƠª•iÑÂ7K™ùáÀzûí·û*úB”E_FMSrÀ£›§ ë&2æ’ÁÈvÁăe±ưóÏ?'¬xN¹(˜c¹w Á-Ù`E  L±0±*n–†pßA_³5jXS*ÊpÁ3lÁỵ'÷ƯwŸ¯5ŸH¢÷ăˬiÊ@ è/ç)Ø8p>ƒĂ<”{ǜ¦ù“P˜´K‚lK5©đÁ́lW\TßṇƯ×S÷Ó’6Ù“®I%d@ôˆĂ†ñL?Œwươ—ÁÉlK½zơ È•„ưG²ÙG}Ô°ö‡GúIÑÿ̀+ÍX­Zp¡à}A­kd?Á̀Pºî–ª€”DL±́Y0‹?ÙT̀JW}å;{íÓ+́VÄÛ–T>ôË£¤É'…›Ư¾}{CˆéL ë~àûP·nƯ½«X%¢$Nó̀€àwẦ f[† f&Nœè«óÍă}4MÈJ3;{êºP̉̀¿=ù4)=ªJö7>Ó+fDnL¯8Í*8ܨ”œl„Û ¶ ±råJ»¨W.´ƒí©(ÛØjWh\¶™‡p^SQÊ“¤ÁG ¶ 6 mƯ:3&à(,X̉"Z±˜`I„ó!JXß’”Ÿ́c;vlT–½å€:G±£é™f€wÓN„\IÚÁ§•²a7„Çô‚…ËyáDƯ/;T)—Œ¶Óyè!¨,Xø8zî²Ë.ÁdƯ.!SÅYÛqđÂÆvócÏ1MRÊDÅ"Hđ_={¶Uđ½P)=¬mr×]w%DT¯"çø+j‚2]~”ê>„gâè,c“8]°D Rzˆx…²l3àWª’!Ô ½ôÄ®"º LX䩧˜ÑW) 3gÎ4×\suZơ”s™¤½åI×$e <1° ª±wÜq‡!:–Jé ú×đá~ –¾}û–®p=[([•ânơɬ#ó¬¢R:n’ÓÏđñ§¤áo³ÊsL“ÊU@ʆLz—û"2Ö /¼à;¤i)0ÀêÄ,¶ƯYtê(ù¾%…b4‹2P.8ú製íħlÚ´ĩcX<Ó§O7×_½w£sçÎv!ÙâKÑÊ@VÀÿàeO„ª{IĐÂsL“Rc`€d»Ø“ơ?Ië-À!]%Ă ¨Rvă¨4̀WÜÍ7ßl}– •txçẁ¥—^jCxzÎcˆB*Ê@…aàÔSO5‡rHÂơ`Î9xđàŒ®’PiI˜2e8p wă ƒ² ,VKƠ˨X `^ŒÉ•o†3IM 3!BB2Ḍ_qÎù’OˆJP²%™BmA›p±˜Ÿú%uú —Y‘÷ÿïÿ₫Ï :4JùÀù§]lçU”ÂÀ O<Ñ´iÓƆ©]¶lYÜu¡„¼ñÆuL«°́àpκ*á…¹´}öÙÇ\tÑE1Gx‹ æCEÈø#oAP›ªË>æß >ÓƯDªH̉#‚sÙ”«äóæˆcœt¤́IÅ‘t´¯ØÿưïfĐ A†ô*~Xœ́Á´†³+âqw(‰~ 5µœ3@d(:Æ VødĈæÆo´ úk¬êöÏ?ö5Ϲä’K¬2§|)yÎÀỎ>¦E?ñ´s#ICA¹ÀsL“Ö2°©lNœ¼6)n SîkăRt'ă ¨RöcCØS൹b“…ôXX%38=Ú«¿‘y€È¿²£¢ TTXặË/7-[¶ô^"!©/»́2óË/¿xWæDfáYTŸ4õÜ\y商EU”rÂÀ·̉Îö¢3……~ÜpÁí‚ơĂußl/L´àâ~I÷ùƒDd×ä²b@²b2¾l7» îO.Ü›?¾ÁÖÇH•B.\hz÷îm^{ +6¯¼"© ~ôƠDe ‚1@hØ!C†˜8À{e³fÍ2§v™3½\Z'øùdß}÷µơJº~‰¯LMS²ÄÀ ©goÁ»ơ±fÅ›‚"WÆdfú¨yú駑€OY·nỨ F.V÷6*ˉ¼;Fiđăđù{Đœ.]ºX¢|đ?üp²yßÓPQ̣„j̉1‚ÎíÁB“¬Ç+C2&W÷ ¸X|kz 8®ÉY`@_¶Y Yª`6ä11¼d»í¶3 0;î¸c±œđÍ7ßØÅ‹Á½J8¸¶"ó ×¦ 1àU@;'N4„ơê`7nÜؾGêׯïN©ßË—/·¦›Ÿ|â3‘7ÖɼOŸ>¦S§NIùP$)=z0¿Àzå6A”C5­}V@'û{v*‘´•kE±Ø6âñ©!̃9ÁlTrÈ€* Ù#©jœ€(Y ‚ăéGazơêe6Ưå½â ¾̀z0ZùÇD]èïr€—çè¨ ® T0’* \ë{ï½gĐñsđ 3 Ç{¬é̃½»©Q£†/K…I[½zµyüñÇí̀ĐßûâU«VÍàlNd±âDẩăyÈÀù̉&"7­Ñ6œM 0¯è(,…ĐMƠ·ư\)øH ’c¢nR›Ua«ßR®ŒiÑ#¢®°zơê¦G†É*¢“$«?đÀ†Ù$‚Íæ‰ -˜„$=Tá(Vá¿ưö[së­·>ø ’€5kZs#:Ơë­W±¢­3Äâ®?ü°ùñÇ#9ÀÙœhb[mµUdàU@‚lèv9b€µ@F 'i3ÿ¥ ^L’§¼ª. ¿T€#9QÁ¢+”s¹#¡,§«’e‹ªĂé鶜^©[·®] ëÀ¬ˆÙ³gÛđº8à'‘å£9˜]ư•$ŸR*")) \8đqăÆÙ€ˆpƠ–Ÿ† Úà{ï½w¹__˜·ß~Û¾G>ÿœL¿ p±J×®]ck|øsƧªχî•+è„c’uz1­feơ‚(GöbNÏ«Ă8Î,,¨›¤eŒRĐçz*I=”TÉéEU6‘ò‹vKÖ„Úµk›c9Æđçˆ9AyC'Olzê)³hÑ¢â¾\2ôL-.£W*()+ îúù]Ư|óÍváB—æû̃vÛm­iV‡Ê]À L6_~ùeĂ:JáÅĂ×ÊÀ &Wøä+ª€¤Ë˜æÏC’6=$ؼ˜¶½)ÇoL0đWd i, ³^“öÀÅL‘mú+iº™' ¨’Û±T€ÿÉ‚̣åQGeêƠ«—,kέZµÊH0Bûư÷Åú¿a¼}—€Q œĂT”ÊÊ@Ú DÑAæ™g,ØN&›l²‰!̣₫f©&%+/“Ç05c- &˜Ÿ~J₫j¨R¥5[Åÿ¥¤!vUÉäƯÔ²³Ẹ̀¡‚^‚â–ZøḶ0ṣ¸ ùL2äXZHư((ÉL­hæ×fzF₫¨ä!ª€äÇMA£"8CP¬Áv“&MLAAÅÖ[oW€̉1mÚ43uêTƒ¹UT¤PcŸ“}́6†̉uW¨Œ ”HqD}÷Ưw6\ï”) ú/-Z´0mÛ¶5˜yn±¯ Ü ¯¿₫ºá’ù¸[Jû{ö́i¶Ü»’‹* %çNÏ̀Kv–V ¤Đ:L1ÏÂL‰Y‘Ÿù ;I#+BóÄ  ˜úz¤@X.³¨’KöëæÆ´è!‰‡ü);í´“Ùo¿ưLëÖ­ #ÙŒÏ>û̀.ü5cÆ «t$³Eµí÷L¥ë®2P™(•âˆûôÓO­ŸÄ‚ \R±ß¬¸Î{¤U«VÖ|)[ë‰`¦‰ ¾ơÖ[ö_T„÷Ưgœaß{©ä/.* Å1¤ÇË)]¤Ư7 ¥Ø~:ñ“8¬Ođ"IíG)K)Ø™ï)8P@¨Ü–‚TåiÉØ_°8Ơ4_nP$·üGƠ¾¿¸H@´¬â¦Pce5 …„Î`°ûf†¤´Ñ´P,ˆZµbÅ C§†‘É>úÈ3MyḲ£`”7»Ó4/U³+i3P& ˆ«•½ăÇ·ƒ.-•oEmÚ´©UF5kf¶ÙfS§NSZ¥eă믿¶ï̃¼GJQœÙX¸Í;ï¼³5EƯ}÷ƯÇJµ¯ H©èÓ“ó›̀½» øcf$ùA2óßßÎë8tâSQZ¥3ª†‚¦‚}û v¬/HU0áfÖ†~Åû©¤ụ̀ƒU@̣ă>Dµb9p § º maƠ_l½qÎÄwđ6Ú(́¥Yƒä÷ßµ9~ùåóå—_•+W¯¾úʤ1»nă?’đŒ€Ä̀đAƯW”eª€¸R—,Yb̀#QJ"¼#ˆá̃#o¼q́ÂûÄù]đî¾Kx|ñÅö= FIß#(?˜ZáGd¯Lˆ* ™`UË̀CÚI›.t”´È,Éç|H˜qøIđ›à×"°"QC@ß…o€$31ômˆ\ỦúWɹ”CJzóËᥖë&o&­?UÀ#åAx1đ’XZ¬mTr̀@FwM¬™1ỉ$óÆoMÊ“ëofq8àCô®Zµje´9ª€d”^-<ÿÀ¿¢àXÁ6ù×¼„1ă2]0Fđ˜eG¥3  Hù»yŒ8§¬t§R3}µŒ„üOÀ”è{™®LËW*U@‚\Ζ ÓÊ|fj÷ßë“̉ Aƒ¬5M¬Q­åô1¢_2ẦD¾J– fâă‘_/+iJÉP¤äÜåĂ™¥ØN‚l¿8Xà‡‰7¯ f T”e d dM 6-"×á y<·,¶1 Å×́²Ë.3±*®­ª€Ç¯ às2‚™}½ ²)K¤2úà%Á2Jd@uSÊåđ̉àÂôê )‹ûü”ƒYƠ§‚·¼>0B¡¢ (¥g ' H¸Ùø}á$₫ñÇ[ß |80ß* ÁŒÀ̀ràèîœÜË¢́̉–¡ HiÔó+ ëÉ5µĐ¯ :} €Yxi…@4(ô+æ œ£ûJÙV© ”EÇ´ĐT®/qCiưöL·¶0áÂœsغ’t sd_Hú"/©-$¨(d /ßơá\N0 S°̃æÎáœo€àŒœc:ß›o¾¹u^'’–sV÷Ơ‘ë4U@r}´₫rÄÀ¦̉Vú[ èS¸₫„Û^#iô%‚}‹Ÿe©€~ÅÁ_•JÊÀú•ôº+ÓeÓ3`t¨(Ê€26(øcdÓ'#íFê Ê€2-ˆB…É5PQJÄ#ß*Ê€2  (Ê€2  (Ê€2  d…U@²B³V¢ (Ê@Ù1°|ùrƒÉßNîºë.Ó¹sgkå̉®¹æsç„ÊϼôèÑĂ®d^5±`!ׇÿ‰|R?₫xóÀ¸$ưV”e@(§ ¨RNoœ6[P*/¬NNô¨ ÄH˜3gùï¿ÿ̀‡~hÓØ&ªUË–-cy2¹qÖYg™í¶ĂͬôBÛ÷SüUW]e<̣HsÆg”¾-AP”e § ¨HNé×Ê•e@HŸuÖYÇ´hÑÂ* ‡rˆa•qÂçtĐAv¢M›6vv„•È[·nmg P̃}÷][Y¿~ừđáĂm̃ÿư×ÿ¢‹.2‹-2>ø aÀ™3gV"ăÆ3½{÷¶‹>÷Üsf‹-¶0¯¿₫º©R¥9÷ÜsÍî»ïnWBøá‡Í›o¾iÖ[o=»È u^{íµ‘$̀›7Ï 2Ä0Ă‚â„ĐÁ=ôu‡‹óÏ?ßL<Ùrrùå—Ûl´‘6_vÙeê¿âˆÓoe@P̣€Ƀ› MP”e ]˜Ùp3 sçÎ5Í›77»îºk̀ Ù Bß~ÿư÷†?KÇÍرc­‚¬@1¡Œ?ÿüÓ|úé§fƠªUfĐ A6ï=÷Ü›UÁ$Å ûôéc.¾øb{ÎÈ‘#mÓ‰å"c½ưöÛv›24ibFŒaó<û́³V)9çœs̀™gi&Nœh0·fu(cï½÷S>P¸0/;ôĐC­rBT®[o½Ơ*eÓ§O7?üđƒ-̣ư÷ß7ươ—©_¿~T® (Ê€2TÉéZ¥2  (¥e„Ù™å@yØyçM«V­̀âÅ‹m¦X̀~8©[·®0`€Ùm·Ưl:3”±é¦›ªU«Ÿ&B¦1ë®»®a†d§v2]ºt1{Ypåtï̃ƯÎ|PNÏ=ă¹<”×·o_«|P†S2˜¡èÚµ«qaö„Ù•drï½÷Ú2Pz–.%zg¡L™2Å4jÔÈ́»ï¾v¦…6Í5Ël¹å–Vé1c†ÍÈwAAU¼Ü¹ú­ (Ê€2{TÉư=Đ(Ê€26Œêc"Å, ÊFÍ5müƒ>°₫($N‚¾ ›m¶™3fŒ9î¸ằàÁƒí̀‡Ë‡Bœz—'́;a3§ß~#ÔÿZaÖÓ+e3/äÛo¿5ø¯8aAÂd‚‚ƒyÖöÛoog8₫ùç›5I¸îSN9Å¢ÿ₫6™̀Đ0ñZ³fÙiÛ¶m²*ô˜2  (Ê@X?uj•Ê€2  (¥dÀùL4ÉúV8Å€™fè́jƠªÅjÄ\i‡v0<̣ˆ©Q£†ơÑp™QÁlÉ)¬‚Ă»:ùN8†/ …¶ù„rh—̀¶’ ¦W”Á˜óÎ;Ï<ùä“椓N²feĂ A1ùüóÏ­k>ÆÊëp€3½Î~¤D¯fR”e ë è HÖ)× •e@(œYUĐ×¥… ˜®­S§N¶ĂÎ ¾!tØq6ÇᛈV˜tá0NÜvíÚY¸2˜í "Ç0s§Üq§¹ưà÷É'Ÿl£o-‹rˆ¾…ÏJ*‚¿æ·Ür‹aÍÖ¡nÚÁ5Ë)B(8°xà©­y”e@P²̀€<ËĐê”e@P̀Ï?ÿ|ÖhÀwƒỲ¢đÑÀă³Ï>³ £>j0¯ª^½z̀‹†p fàÀVñpç¦Ó`ff¨ÙL«FmͽN=ơÔt‰åÅôê×_µ¾/±DÙ $0az‰”•ª°đ¡ˆ₫'¦J˜æS”e  è H)ÈÓS•e@(¯ }B˜9À¡=(8’GIđܨ<¾tÂû̃vÛm¦C‡Vá!ºNđ%”|>œ`>ÆÊï(:¬ư¡¢ (Ê€2Ÿ ¨’Ÿ÷E[¥ (Ê@ÖÀ‘=ÙJăgŸ}¶5w*iĂPƯ m‹2  ”́PPù¯<´ZÛ¨ (Ê€2Pj‚ï₫RV‰ ĐÿÍJ|óở•e Ä ¬³n‰OƠ•e@P”e@P”e@H“ơ“åŸ:uj²ĂzLP”e Ï(((ÈóV¸æé́R…»¥zAÊ€2P ¼3Å:R FơTe@P”e@P”e@HU@̉ăKs+Ê€2  (Ê€2  (Ê@)P¤äé©Ê€2  (Ê€2  (Ê€2ª€¤Ç—æV”e@P”e@P”R0  H)ÈÓS•e@P”e@P”e =TI/Í­ (Ê€2  (Ê€2  (¥`@R§§*Ê€2  (Ê€2  (Ê@z ¨’_[P”e@P”e@PJÁ€* ¥ OOU”e@P”e@P”ôP$=¾4·2  (Ê€2  (Ê€2  ”‚U@JAª (Ê€2  (Ê€2  (é1  Hz|ine@P”e@P”e@(ª€”‚<=UP”e@P”e@P̉c@ôø̉ÜÊ€2  (Ê€2  (Ê€2P T)yÅú÷ß›?ÿü³¸lz\đ2°zơjóï¿ÿzi¢2  (•”rƯÚw©¤7_/»â0±ñï¿ÿn;́0Ó·oß”Ù9s¦ÈôéÓM÷îƯ‹=÷»ï¾3æœsÎIÈ;mÚ4{́®»îJ8V\Â3ÏÜ{}ẩO:£÷9ßIDATé$óàƒ?₫øĂdâ>̃zë­æî»ïö´Ô˜̉^wđYơVPD”~ưú™#8¼ưöÛ¥();§~óÍ7ö¾¢0¥$ươ׆ßNY ƒwÜq‡9á„̀‰'hzè¡+vG}´™;wnY6Ï\|ñÅæÍ7ßL(^yT M ¦2'T—‹ÿY0# :H^€.øÄnåæă<©öÅbª¾CßéÉCå5Á‚ă©$ơ”LŒêøđ¤¿:¶Pö‡ ª ~¨kÛ°dû'Á@Z*›I¦å÷—ô¯#¥’¼dº8•ŒYÊSöL“6ọ̈´s¥¤x̉“%Ẹ́¥sl'Éü’€Ơ;‚N‚’HÔ³_’²Ü9gÉÆ#n'ô=Iö;‡̉²¶»~¦jză7LÍ5Í'Ÿ|b–.]jêׯ_lUtê₫ùç³ç{Ú¼ÿư÷_±ç¸?ç?üĐ|ñŦnƯº±s&M‚Û’ íHE¢Ú8aÂsá…öíÛ§RL™å¹à‚ Lƒ ’–‡²ă;­·̃Úl·Ưv¶”ô„¢€0냜}öÙæđĂ·J(ûo¼±+:€(IkÖ¬1Ÿ~ú©¹á†́=kÓ¦ ÙLỸG¨ûSÚë?«¶ñeô±hÑ"ËĂÿưßÿ™6â­|JI8Fyâ‰'¬²PVW}ß}÷™>øÀ 4È $]wƯu¦V­Zö9L·'÷ÎI÷Ü`~̃/\'ƒï½÷éØqm÷åË/¿l^{í5óË/¿OÓmeà¡à;Á‚‚ℇ‹ÿú‰‚utäs%ëIÅ´!™Dµqg9i_Áæ‚_“äØ“r̀u .—m₫x.ÊÏ Î :‚v<,ø\0Bw\ĂỊ9a$rAºíâZ£øà̃!(©ĐéºTpsI (ăóJÓ¨¾êÙ̉Æùi¶3ø{HóToöª’Ê35Ap¡àÁ8Á‚¥‚t$êÙO§ —·‹lĐ–^‚ç]¢|óüö´,àùΉd́EổK/™Î;›ƯvÛÍ°íä0O=ơ”Û5ÿûßÿ̀½÷̃kGÂÉ÷Ê+¯˜+®¸Â§3;dÈsÈ!‡˜®]»ÆfGb'6Z¶liÏuI?ÿü³aÔ½E‹.É*7Œ~wÜq¶m×\sùơ×Â÷Ê wfmN9å3₫ÚgÇĂ?l=öXsüñÇ›‘#GÆÊôm0ëĂ Ăư÷ßoèD̉Ùˆª—Yf{N?ưtóüóÁgD†h"ê¥mœ·`AáÏÔ©Síù«V­2(tâ~ûí73`ÀÓ¡C«0Cy§zª!°ñăÇ›¯¾úÊŒ3Æ^íå:Ï;ï²÷ íŒ3ΰ÷̉—²ĂåE]\…Ûo¿ƯÎÊK<›ü₫x¶i¿ f¤î ×"I{ú‰>₫“¶Q×Ëo£~‡ë¬³©^½ºÙo¿ứo$Xîºë®k¶Øb û,Óu[èLÜ+xEĐSàäzÙ óăäÙ¸I0TĐS@‡™ÂËø îå‚Ăa¡sB~êú^0O@çÿ Áo‚é‚-£~Ï ~,ô8Ù^6& Ф?́%pRG68o•€™‡ƒQÂyÏ P øĂØN¬^~àG̃œ.pÂËQj@›₫ ́¾à Ó9¾L@StÔœL““ƯNÑ7û¤GÉ¡r`¶€:ß́!pRU6À3üơ —±!B_mˆ`…`‰` ÀÉ‘²ñ€ụ̂`WAe«–..đÇÄ}S€B–ơ$ç†z¸/£Ơ¶ûË7Ç6À Ï÷}¼`s²¿`®àwơơÂíIvMÇK₫ÚÊ=ØXà“‹%‘ëày%ß‚ï˾çz¨¤÷¸ßẴ²ư¶ÀǪ¿†r>3b´…6ß.à¹j)đÉ I) ̃Ÿü–|yw”t™sˆï>“u_ÿ”c ^!S@₫“mê ø"ơM€2:˜_0úÍs3 ˜Ú¸ ³M'·]»v¶3ÚªU«Øè'̃ªU«Ûn»Í4mÚÔÜsÏ=‘mEI¡'“'O6Í53[n¹¥K2˜U=û́³¶SĂhèÂ… ÍÍ7ßl_uƠU†N3ût¬èÈ8¡£>qâDsÙe—ÙÎe$›]¡SẤ&°¨zM]±b…¹ñÆí¬ñ DƠËu5nÜض•Î)Ê®M7ƯÔ¬\¹̉`₫öÜsÏ:ÛpGçñ}÷]k·á†ZÓ±ƯwßƯüơ×_öꥬѣGÛÎ69frÊ cäÚb¼6S\;m:‡pä$•ûẹ̣̀ͳF'kfÚ.¹ä’ØÈ1ÊɾûîkP˜P.½ôRÛ^wÏpÉs¢Äs±Ùf›ÙrøYuÊ&³>®Óû裛i·yö§óIÇÎöúë¯oÛ¶÷̃{[ynPPØPd¸§¾|(‘ạ́¢®ƒç‹aÆÅư–@™BéDIá~<₫øăVb å㦛n²3t₫V~_(¤đe&ä8Ù³e •í·ß̃^;ϧ»v~ÔåÚ÷₫ûï[Ås(…›6̣{&ü£̀q/¸6î ZAA§XPt6ä?Ă/Éêtg¼úê«V1¢.Êâ1êwÈo‰÷ àeÛm·µé̀ÿ»2c€‡–ÎƯ˜"Đé¥ĂˆÔla· ?ئƒ?V0U0M@Ç¡óNç°­`¦ đOP6RC¶éđ ‡ è¸¿)˜(8D@=ÈÓêë(¸Q0LĐU€Œü#àœ».]6mÛ₫–ïö‚çüÙ¬ưĂ–€Đ‰¦cG;ú ¾DƠ»ÛQ€Ií}]P¡œ½‚WN^” ”÷‡][¶Û è`û¤¡$₫Ÿ€`[ÔI:ñÜQF'Á½::64 tâOôœ/8GĐCÀq8pü•€v| ¸Mđ›¾ª ¸7lï+@~Å}rœ:Îœ$(\)ØDp¸àt÷·–`‚y>P £sûî?Üî_Ô55•ccOàëWAsOvÄê‚‚£¶á1ê¹+Ǧ Üïs÷øø§̀#H²ßÀ§r|+Á_d9P@¹óÙñÈ֒ƽ„?^̣_ x¦68©/û́3Ûqm̃¼¹íœ3àä…^°i˜61Jg?™B[h;yëƠ«g;x¾zÍ<³*½{÷6Ûl³«̉~'«^PÜ%§ă†mzPP¦àưÛo¿µ£¾tÎi?m£ƒ§áú8ÿ€°#á(lĂ9&!(køÄÀO=̀;đ»O_˜=b´™:‰”Ă3â$•ûẹ̣̀Í}溵†ï‹.ºÈṽM=÷™Ñt®¥‰NvP¢xÆE…’™:Ü´̃0_sÏ*\#Ë—/·¦=tÊQ0|¹×^{­5;CI?í´Ó́h7è­¶ÚÊĐÁfÖ2÷Úk/«dø̣a∸̣öØcuä‹ú-ñwëÖÍ̃k§¡ÄÑÁÆLïÀ´¿c8@Ñ@ñáÏ3÷‹ˆTÄ÷lÏ£#ÎóµÁØkwægÔ½Ï>û®‘p ß8¿UÑnx¤Í|S÷»FVÑCaă¢Ü18€đ»Ç< đŒ;IV'ÏÊ 3â1êwèêÑoe èp¾.X)/@sí H&ŒP/,¼)@V èüÑ1¹UĐPà“%‘÷,¥× ̃LĐqn"Ø[ĐS0Cđ àAOAsAkÁéƯ#xL€4ĐɾJđ…€óhcü™$ m¡̃5:VÛ ¢ê•CVn‘Ï+kØ…éÅ}” ? èøNđ‡ßN₫”§(€È‰‚©‚¯>é.‰óưpÙG€"u”AAë)x[ÀưxNàÊ–M+ptp̃<,àyè&˜- ÍđCÙ V (Nñ‹‚ŸHí¤Í(;a¡̀ă/hÇRCp˜à.ơ¾/€‡‚«[ 8ÿ"çqoQN~ÛĂ~Ô5/Ç̃ ̀,ÊÇư/N¸æâkßï!ÿÔ[Üoà_Éó}Qă–ïgw>Đ©Û7€*²L\/àúz 6º‚×3g ₫DƯçÂÎGñ÷UÈ?Y¿¬›ÄÈ6³t|é 8’F'aÄB§“(á¾mÛ¶¶sBG;z:"AófTPtœ¸N4y©§N:îÍçÎ¥ép‚b‘ªDƠK:ùpå&«—k¤#ÏŒfGŒªs:Wtv™}¢£„OJqBÇÚ œÓc&„Î f!N|Ê‹;–́›£S ©ËƠç¸Hå>ËsK§“(mF‚÷“î1¦Aø'8‰â™|(wNxO>9ü¿ o\QPf™`æƒs¸'>A1G¨éÙ³§ưv´Û=—¤%ËÇqWËơœFư–¨/x˜(!̀táĂlLPø]ƒà Bă`̃đ¶»×¤»g+œÇ·lÛ(ÖÎt’Y)'̀&Ă $N.Ú>N¾)ă³¢}₫éX¯,Úw_t¼*ØQÀ9QuMKåøq̣§l|âv’|§ú\‡‹HÆ*¿Êă7ÄưAY\´-_vÆïz6¤YÑwđyøỶ¸f¸GPL¹: x^¢îs*÷UNÏ?Y¿¬›Äè2#üÉÓD°›Ç·À™́ |5PZ|îTụ̂ÓèØbĂˆ'£Ç|…N;fNÜ6ë(I8|̉±@¸'trè`ؤüÑv€Ü †ËơU/æ5ˆë …Ϫ—|t¼1¹ad;xFˆñ¹p¯̀ t`rBD¨GyÄ»<¾oçøv`Æ䟙t”0Wç¸N®K wƒùá6lÏϽƒ[¾é,;Aẵq=A‰â$fœ0ú¿>BA¡3̀5aNƒÙÛˆ#¬Ùfja>Ư½Æ 3̣ĐqFđW!Ư)c¤%ˇi‘+¼Q×Ayáváy‡'ø¡po) Ó3̀²¸££âá¸uç+.Í÷Ơ_̃`Z°|fưP,‚Ïz0¯o›k8p q ÏL9…#|^²:™ D:t¨ơÓ@Y‰â‘¢’üĂíÑưJÏÀ£^]tH]CŒ̣'º®À ië¸Đ·ÿ7”)Å]₫(7Ô¸ í¤CÍËw#t«T„Nß?‚Í(7ÈN̉/g§IV¯;•YŒ’l×ñ:à>\ h"xVp¨À'´u÷Đ8rNp‡N)¬#Ûk;*²#̣•àÁÓ́ˆl%€×'[ÊÆÅ‹ Ô”®énA Áµ‚'îÙ‘M+ÜCÊvrl4pÿ‚|̉fI¨áOlÁÁĂ8i(øTà{梮éÉϳ÷ÜÓÂÛ¾:Ây|û©đï;/˜v»́t́%˜80\¶AX¶ $ ¼À¹XxI¶{ ˜AºLÀ½ä¾øîóm’Ê}•lù'ÁV™´™FÛ™íàÏ8›vL7è0̉! ó­ơ믿«— Ü’®ùJ#Ñn”=V¸l ”`3Nç‚:p gDÔ™‹ÑqÄÁ–NgĐÄëÁ›vcGsrªU¯S@¢ÊIV/> ˜ªaZE6Ü‘ÂÑŸ‚y £ÔÎéLs-©çâKƒɈ.÷¥2SRÜ} Ö ·˜-9?:ôt ]T-F¾1aBÉÅw‡ûîLü\9Q<£T0 ÆLç=öØcVÙa6(ø¬¢t`ÄóLg”;Jv”bM½ 4°œ̣<¢¨ăo‚ŸcPRÍÇ9Q×,/¼Í5>ưôÓöw‡¢BÈjÚNYDúbôöñüăx̉Äo›ç e^|₫.ázRƯ‡W~g¼ü¼À‡g̀iGªÂ¬&œ˜jQpÑÚ¢ÊHV'39Έß!íŒâ1Ùï0ªnMW< ô”4:&/^)?' èä¶Ố N]₫+ûµ ÊZ>’— nĐ ¥3~†€v2b»Bp­€c; N ó»HÀ7Ü7tS‘dơ¦r~ióĐÙ}Bp£`‚àWA”ÀE;T¤·€ëÄȆ‚«tDQº ^…{ßW@^FvG : ^,ØGÀư @ÙùMÀ}'?÷¾•à]AcÁ‡‚gÔ· (”w¾€sè$óŒù^¶´ç0årÿÎÜ)¨- cá:vçÉ6B›ƒí¡̃¨kzQ$8D@>ỄNPVB;‚¿8ºZŒÿduo/i#¿9:FƠàăMY9\>÷p}ç¸wÓÈbÁ7”+ܳ¨û¼ƒKå¾J¶ü“d¥ƯZ₫ØQ(¡g±¹ÆÎÛmLƒP°ÁÆÛz×™`ûj́ùK*Ôͨ0Ó°ÑÓ|.0£ĂÅŒ x́öQ*đï 3ƯgÄņ5?!ËơĐ¡Aè0'Qơºó¢Êˆª_lÖY+Ó1üˆÈCGÜ ícd›uàœÑu×f:pD£“…DƠO: Ê2#eÑ©¢ g£ïê ‡Ë ï‡ó÷“ƯÇ`>” F˜ dG£‰Œ„º»˜c1OçsäÈ‘Ö =¬øEñL'œˆQøÛđ¼ t᫃ŸU&̀ÿ(‡ç:mrÏu°½n›gΠmÜK|1P`8Ïq•,Ÿ+Ë}G]‡;îû&z˜{¶9¿aÆÖÏ…ëĂÜŒkÇï…ß.³€´ ³1̀Îà^øƯ#®ÍÁz|i.¯ïØ´‡ç–ga¶ƒßÏ툒`™l£ qßFe¯ƒka…=\^*urϘâ·Åc²ß¡«3Øf—ü.îx0¯nWHèĐĐ¹)|a¯½D:~ă=#Œª3r>]@g†̣¦€ÎêLAª£Ä©ä#Ï_‚n‚¶‚_ót,ï0³q’àHÁ¯‚Y‚E„cƯ´}µ`²àÁ‡×nÙüÿöÎßE’"ă·^$¢™bp©\dd` ‚æ₫&jj``d †""‚â™—»  ‘‚™?QÔ DE¿Ÿek¯¶§«§wvºoföóà±ƠƠUơ^}ªgº^U÷́)!¿ø5d—J”+e9+g©s-2‡zï¸qüëó₫L&ß̉WúùLô›(åYuz,JĐÀMüzôƯh-/åà·èOÑï£|é¾ư újô Êù‡¢LZ‘¯£äưåºÀ₫—Ñ_¢ øÔơ÷…äƯŒ2₫*Êx¼íÊ'Éx9]ü~2úlôFô‹(_̃¿GïŒâĂÑÚƠVŸ¸v9ǵ ¯ç¢ßF‡ä,ăÆx<ưô¸A®Í>₫cÚ¤ ÄåèçQX%¿%°-ư{1駢́ˆƠăñVióơhkœù¬/׺Í?%cúxªÂ:êÙó‚#‡‡‡ë´ủ+ñ¬̣NÁí¸¹–Đ̣¸Ơ‰cIà»4ơóăå—w®JY>«́Ftƒ6ÎS«~¡¿8́8˜±kÁgsj9ÍÇu|Wí÷₫₫~_Ơú»¿ï¼yă,Ü7Sív±et” jŸ_ÉTîMëL¦ ŒºÂÊ8ß»'rL=&ÈC¥j'YCvO m@âøp_” ¢o|;&íE‘Ç£×¢ä¹+ ®/&͵pĂ¹'J°1$Ôgơ[B[œÿ³Uà8ŸköÛZê¾Ü´UúU—#=Ô'&.CS Œß^‰Ö>çp2y3-X=åzø!Úw=${AZă÷@ʽ½Ñ)ÿGç¸₫“Ä²àƒ²ÔoµÁù"’c„k®|P¯î ;cC̣̉‡>M|t}ª}î›â˜₫±XpióØq=‹­ÉËÖ+5 ÊT; “÷Jk'À£,<Ç/Cñ¼;ÿ—e[…÷,x¯ƒÇȺ+₫ÛÚ§]ơûàààè'³çœÀß›SŸ; S̉í]¹¬ï«“·ñ%ÀÊÿ#Ñ£Ëv!v câÑèơl'AàöYɸâ‹ô9ÏOÜ’… ·à˜’€$° @&µ…ûf¬Ơ÷ƠIÛ¸$ - Đû=É3‰$  H@€$ Y€̀‚Y#€$  H@ @¼$  H@€$ Ù€̀†ZC€$  H@€ˆ×€$  H@€$0ÙPkH€$  H@0ñ€$  H@€f#`2j I@€$  H@ ^€$  H@Àl @fC­! H@€$  HÀÄk@€$  H@˜€Èl¨5$ H@€$  ́U₫«̉&%  H`w Ôßư»ÛËé{æ}szÆZ€vÀ; »7¨öH€$  H@K @₫̃X/uL€ÖEÀïúu‘¼tI–ëciKÀÅ pô½Y _Œ~ÛK H@€ßơë~Y®¥-I@ƒÀÑ÷æ媯%ư`ôJ´Î¯˜”€$ -%ÀªÓAôéèÍ-íæ¹í}sÓFD$ M%à=hSGF¿$  H@€$°ë₫¹ÅÜ‘†)<IEND®B`‚tpm2-pkcs11-1.7.0/docs/FAPI.md0000664000175000017500000000357614114240163012424 00000000000000# Integration with the Feature API (FAPI) ## Introduction The feature API is a high level API for interacting with the TPM 2.0 device. It exposes a subset of the TPM operations as well as provides on disk key management, automatic encrypted sessions and format conversions, like PEM, where possible. The tpm2-pkcs11 project predates the Feature API, and the original code was implemented using the Enhanced System API (ESAPI) and for on disk storage of TPM protected keys, a sqlite3 database. ## Configuring ## Build Time At the time the package is built, it will detect tss2-fapi library and automatically configure it's inclusion into the tpm2-pkcs11 library. One can *explicitly* configure this with `--with-fapi=yes|no`. ## Run Time If the tss2-fapi library is configured, it will dynamically attempt to locate and list tokens provisioned with tss2-fapi. Because FAPI might be in a bad state, this could cause superfluous errors and warnings. The library is built to ignore these errors, like: - You can take a few actions if you run into this issue: 1. Ignore them, and optionally disable FAPI error logging: - `export TSS2_LOG=fapi+NONE` 2. Reconfigure the package with `--with-fapi=no`: - `./configure --with-fapi=no` 3. Provision FAPI using `tss2_provision`. See the tpm2-tools project for more information: - Additionally at run time, the token creation function, C\_InitToken, may be invoked to create a new token. By default, the token always using the original mechanism of the SQLite3 database. This is to preserve backwards compatibility and behavior. To use the FAPI backend, one *must* set the environment variable `TPM2_PKCS11_BACKEND` to `fapi`. If empty, or set to `esysdb` the SQLite3 backend is used. Any other value is an error. tpm2-pkcs11-1.7.0/m4/0000775000175000017500000000000014124415534011027 500000000000000tpm2-pkcs11-1.7.0/m4/ax_file_escapes.m40000644000175000017500000000137314124412605014321 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_file_escapes.html # =========================================================================== # # SYNOPSIS # # AX_FILE_ESCAPES # # DESCRIPTION # # Writes the specified data to the specified file. # # LICENSE # # Copyright (c) 2008 Tom Howard # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 8 AC_DEFUN([AX_FILE_ESCAPES],[ AX_DOLLAR="\$" AX_SRB="\\135" AX_SLB="\\133" AX_BS="\\\\" AX_DQ="\"" ]) tpm2-pkcs11-1.7.0/m4/ax_check_class.m40000644000175000017500000000644114124412605014142 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_class.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_CLASS # # DESCRIPTION # # AX_CHECK_CLASS tests the existence of a given Java class, either in a # jar or in a '.class' file. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 12 AU_ALIAS([AC_CHECK_CLASS], [AX_CHECK_CLASS]) AC_DEFUN([AX_CHECK_CLASS],[ AC_REQUIRE([AX_PROG_JAVA]) ac_var_name=`echo $1 | sed 's/\./_/g'` dnl Normally I'd use a AC_CACHE_CHECK here but since the variable name is dnl dynamic I need an extra level of extraction AC_MSG_CHECKING([for $1 class]) AC_CACHE_VAL(ax_cv_class_$ac_var_name, [ AX_TRY_COMPILE_JAVA([$1], , [eval "ac_cv_class_$ac_var_name=yes"], [eval "ac_cv_class_$ac_var_name=no"]) eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then ifelse([$2], , :, [$2]) else ifelse([$3], , :, [$3]) fi ]) dnl for some reason the above statement didn't fall though here? dnl do scripts have variable scoping? eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" AC_MSG_RESULT($ac_var_val) ]) tpm2-pkcs11-1.7.0/m4/ld-version-script.m40000644000175000017500000000317413754763565014622 00000000000000# ld-version-script.m4 serial 4 dnl Copyright (C) 2008-2019 Free Software Foundation, Inc. dnl This file is free software; the Free Software Foundation dnl gives unlimited permission to copy and/or distribute it, dnl with or without modifications, as long as this notice is preserved. dnl From Simon Josefsson # FIXME: The test below returns a false positive for mingw # cross-compiles, 'local:' statements does not reduce number of # exported symbols in a DLL. Use --disable-ld-version-script to work # around the problem. # gl_LD_VERSION_SCRIPT # -------------------- # Check if LD supports linker scripts, and define automake conditional # HAVE_LD_VERSION_SCRIPT if so. AC_DEFUN([gl_LD_VERSION_SCRIPT], [ AC_ARG_ENABLE([ld-version-script], [AS_HELP_STRING([--enable-ld-version-script], [enable linker version script (default is enabled when possible)])], [have_ld_version_script=$enableval], [AC_CACHE_CHECK([if LD -Wl,--version-script works], [gl_cv_sys_ld_version_script], [gl_cv_sys_ld_version_script=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--version-script=conftest.map" echo foo >conftest.map AC_LINK_IFELSE([AC_LANG_PROGRAM([], [])], [], [cat > conftest.map < $(DEPEND) # # @ifGNUmake@ ifeq ($(DEPEND),$(wildcard $(DEPEND))) # @ifGNUmake@ include $(DEPEND) # @ifGNUmake@ else # fallback code # @ifGNUmake@ endif # # Then configure.in would normally contain: # # AX_CHECK_GNU_MAKE() # AC_OUTPUT(Makefile) # # Then perhaps to cause gnu make to override any other make, we could do # something like this (note that GNU make always looks for GNUmakefile # first): # # if ! test x$_cv_gnu_make_command = x ; then # mv Makefile GNUmakefile # echo .DEFAULT: > Makefile ; # echo \ $_cv_gnu_make_command \$@ >> Makefile; # fi # # Then, if any (well almost any) other make is called, and GNU make also # exists, then the other make wraps the GNU make. # # LICENSE # # Copyright (c) 2008 John Darrington # Copyright (c) 2015 Enrico M. Crisostomo # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 11 AC_DEFUN([AX_CHECK_GNU_MAKE],dnl [AC_PROG_AWK AC_CACHE_CHECK([for GNU make],[_cv_gnu_make_command],[dnl _cv_gnu_make_command="" ; dnl Search all the common names for GNU make for a in "$MAKE" make gmake gnumake ; do if test -z "$a" ; then continue ; fi ; if "$a" --version 2> /dev/null | grep GNU 2>&1 > /dev/null ; then _cv_gnu_make_command=$a ; AX_CHECK_GNU_MAKE_HEADLINE=$("$a" --version 2> /dev/null | grep "GNU Make") ax_check_gnu_make_version=$(echo ${AX_CHECK_GNU_MAKE_HEADLINE} | ${AWK} -F " " '{ print $(NF); }') break ; fi done ;]) dnl If there was a GNU version, then set @ifGNUmake@ to the empty string, '#' otherwise AS_VAR_IF([_cv_gnu_make_command], [""], [AS_VAR_SET([ifGNUmake], ["#"])], [AS_VAR_SET([ifGNUmake], [""])]) AS_VAR_IF([_cv_gnu_make_command], [""], [AS_VAR_SET([ifnGNUmake], [""])], [AS_VAR_SET([ifGNUmake], ["#"])]) AS_VAR_IF([_cv_gnu_make_command], [""], [AS_UNSET(ax_cv_gnu_make_command)], [AS_VAR_SET([ax_cv_gnu_make_command], [${_cv_gnu_make_command}])]) AS_VAR_IF([_cv_gnu_make_command], [""],[$2],[$1]) AC_SUBST([ifGNUmake]) AC_SUBST([ifnGNUmake]) ]) tpm2-pkcs11-1.7.0/m4/ax_check_compile_flag.m40000644000175000017500000000407014124412605015452 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_compile_flag.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_COMPILE_FLAG(FLAG, [ACTION-SUCCESS], [ACTION-FAILURE], [EXTRA-FLAGS], [INPUT]) # # DESCRIPTION # # Check whether the given FLAG works with the current language's compiler # or gives an error. (Warnings, however, are ignored) # # ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on # success/failure. # # If EXTRA-FLAGS is defined, it is added to the current language's default # flags (e.g. CFLAGS) when the check is done. The check is thus made with # the flags: "CFLAGS EXTRA-FLAGS FLAG". This can for example be used to # force the compiler to issue an error when a bad flag is given. # # INPUT gives an alternative input source to AC_COMPILE_IFELSE. # # NOTE: Implementation based on AX_CFLAGS_GCC_OPTION. Please keep this # macro in sync with AX_CHECK_{PREPROC,LINK}_FLAG. # # LICENSE # # Copyright (c) 2008 Guido U. Draheim # Copyright (c) 2011 Maarten Bosmans # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 6 AC_DEFUN([AX_CHECK_COMPILE_FLAG], [AC_PREREQ(2.64)dnl for _AC_LANG_PREFIX and AS_VAR_IF AS_VAR_PUSHDEF([CACHEVAR],[ax_cv_check_[]_AC_LANG_ABBREV[]flags_$4_$1])dnl AC_CACHE_CHECK([whether _AC_LANG compiler accepts $1], CACHEVAR, [ ax_check_save_flags=$[]_AC_LANG_PREFIX[]FLAGS _AC_LANG_PREFIX[]FLAGS="$[]_AC_LANG_PREFIX[]FLAGS $4 $1" AC_COMPILE_IFELSE([m4_default([$5],[AC_LANG_PROGRAM()])], [AS_VAR_SET(CACHEVAR,[yes])], [AS_VAR_SET(CACHEVAR,[no])]) _AC_LANG_PREFIX[]FLAGS=$ax_check_save_flags]) AS_VAR_IF(CACHEVAR,yes, [m4_default([$2], :)], [m4_default([$3], :)]) AS_VAR_POPDEF([CACHEVAR])dnl ])dnl AX_CHECK_COMPILE_FLAGS tpm2-pkcs11-1.7.0/m4/ltsugar.m40000644000175000017500000001044014124412605012663 00000000000000# ltsugar.m4 -- libtool m4 base layer. -*-Autoconf-*- # # Copyright (C) 2004-2005, 2007-2008, 2011-2015 Free Software # Foundation, Inc. # Written by Gary V. Vaughan, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 6 ltsugar.m4 # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])]) # lt_join(SEP, ARG1, [ARG2...]) # ----------------------------- # Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their # associated separator. # Needed until we can rely on m4_join from Autoconf 2.62, since all earlier # versions in m4sugar had bugs. m4_define([lt_join], [m4_if([$#], [1], [], [$#], [2], [[$2]], [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])]) m4_define([_lt_join], [m4_if([$#$2], [2], [], [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])]) # lt_car(LIST) # lt_cdr(LIST) # ------------ # Manipulate m4 lists. # These macros are necessary as long as will still need to support # Autoconf-2.59, which quotes differently. m4_define([lt_car], [[$1]]) m4_define([lt_cdr], [m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])], [$#], 1, [], [m4_dquote(m4_shift($@))])]) m4_define([lt_unquote], $1) # lt_append(MACRO-NAME, STRING, [SEPARATOR]) # ------------------------------------------ # Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'. # Note that neither SEPARATOR nor STRING are expanded; they are appended # to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked). # No SEPARATOR is output if MACRO-NAME was previously undefined (different # than defined and empty). # # This macro is needed until we can rely on Autoconf 2.62, since earlier # versions of m4sugar mistakenly expanded SEPARATOR but not STRING. m4_define([lt_append], [m4_define([$1], m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])]) # lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...]) # ---------------------------------------------------------- # Produce a SEP delimited list of all paired combinations of elements of # PREFIX-LIST with SUFFIX1 through SUFFIXn. Each element of the list # has the form PREFIXmINFIXSUFFIXn. # Needed until we can rely on m4_combine added in Autoconf 2.62. m4_define([lt_combine], [m4_if(m4_eval([$# > 3]), [1], [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl [[m4_foreach([_Lt_prefix], [$2], [m4_foreach([_Lt_suffix], ]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[, [_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])]) # lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ]) # ----------------------------------------------------------------------- # Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited # by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ. m4_define([lt_if_append_uniq], [m4_ifdef([$1], [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1], [lt_append([$1], [$2], [$3])$4], [$5])], [lt_append([$1], [$2], [$3])$4])]) # lt_dict_add(DICT, KEY, VALUE) # ----------------------------- m4_define([lt_dict_add], [m4_define([$1($2)], [$3])]) # lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE) # -------------------------------------------- m4_define([lt_dict_add_subkey], [m4_define([$1($2:$3)], [$4])]) # lt_dict_fetch(DICT, KEY, [SUBKEY]) # ---------------------------------- m4_define([lt_dict_fetch], [m4_ifval([$3], m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]), m4_ifdef([$1($2)], [m4_defn([$1($2)])]))]) # lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE]) # ----------------------------------------------------------------- m4_define([lt_if_dict_fetch], [m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4], [$5], [$6])]) # lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...]) # -------------------------------------------------------------- m4_define([lt_dict_filter], [m4_if([$5], [], [], [lt_join(m4_quote(m4_default([$4], [[, ]])), lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]), [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl ]) tpm2-pkcs11-1.7.0/m4/ax_is_release.m40000644000175000017500000000633414124412605014014 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_is_release.html # =========================================================================== # # SYNOPSIS # # AX_IS_RELEASE(POLICY) # # DESCRIPTION # # Determine whether the code is being configured as a release, or from # git. Set the ax_is_release variable to 'yes' or 'no'. # # If building a release version, it is recommended that the configure # script disable compiler errors and debug features, by conditionalising # them on the ax_is_release variable. If building from git, these # features should be enabled. # # The POLICY parameter specifies how ax_is_release is determined. It can # take the following values: # # * git-directory: ax_is_release will be 'no' if a '.git' directory exists # * minor-version: ax_is_release will be 'no' if the minor version number # in $PACKAGE_VERSION is odd; this assumes # $PACKAGE_VERSION follows the 'major.minor.micro' scheme # * micro-version: ax_is_release will be 'no' if the micro version number # in $PACKAGE_VERSION is odd; this assumes # $PACKAGE_VERSION follows the 'major.minor.micro' scheme # * dash-version: ax_is_release will be 'no' if there is a dash '-' # in $PACKAGE_VERSION, for example 1.2-pre3, 1.2.42-a8b9 # or 2.0-dirty (in particular this is suitable for use # with git-version-gen) # * always: ax_is_release will always be 'yes' # * never: ax_is_release will always be 'no' # # Other policies may be added in future. # # LICENSE # # Copyright (c) 2015 Philip Withnall # Copyright (c) 2016 Collabora Ltd. # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. #serial 7 AC_DEFUN([AX_IS_RELEASE],[ AC_BEFORE([AC_INIT],[$0]) m4_case([$1], [git-directory],[ # $is_release = (.git directory does not exist) AS_IF([test -d ${srcdir}/.git],[ax_is_release=no],[ax_is_release=yes]) ], [minor-version],[ # $is_release = ($minor_version is even) minor_version=`echo "$PACKAGE_VERSION" | sed 's/[[^.]][[^.]]*.\([[^.]][[^.]]*\).*/\1/'` AS_IF([test "$(( $minor_version % 2 ))" -ne 0], [ax_is_release=no],[ax_is_release=yes]) ], [micro-version],[ # $is_release = ($micro_version is even) micro_version=`echo "$PACKAGE_VERSION" | sed 's/[[^.]]*\.[[^.]]*\.\([[^.]]*\).*/\1/'` AS_IF([test "$(( $micro_version % 2 ))" -ne 0], [ax_is_release=no],[ax_is_release=yes]) ], [dash-version],[ # $is_release = ($PACKAGE_VERSION has a dash) AS_CASE([$PACKAGE_VERSION], [*-*], [ax_is_release=no], [*], [ax_is_release=yes]) ], [always],[ax_is_release=yes], [never],[ax_is_release=no], [ AC_MSG_ERROR([Invalid policy. Valid policies: git-directory, minor-version, micro-version, dash-version, always, never.]) ]) ]) tpm2-pkcs11-1.7.0/m4/ax_check_enable_debug.m40000644000175000017500000001131414124412605015424 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_enable_debug.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_ENABLE_DEBUG([enable by default=yes/info/profile/no], [ENABLE DEBUG VARIABLES ...], [DISABLE DEBUG VARIABLES NDEBUG ...], [IS-RELEASE]) # # DESCRIPTION # # Check for the presence of an --enable-debug option to configure, with # the specified default value used when the option is not present. Return # the value in the variable $ax_enable_debug. # # Specifying 'yes' adds '-g -O0' to the compilation flags for all # languages. Specifying 'info' adds '-g' to the compilation flags. # Specifying 'profile' adds '-g -pg' to the compilation flags and '-pg' to # the linking flags. Otherwise, nothing is added. # # Define the variables listed in the second argument if debug is enabled, # defaulting to no variables. Defines the variables listed in the third # argument if debug is disabled, defaulting to NDEBUG. All lists of # variables should be space-separated. # # If debug is not enabled, ensure AC_PROG_* will not add debugging flags. # Should be invoked prior to any AC_PROG_* compiler checks. # # IS-RELEASE can be used to change the default to 'no' when making a # release. Set IS-RELEASE to 'yes' or 'no' as appropriate. By default, it # uses the value of $ax_is_release, so if you are using the AX_IS_RELEASE # macro, there is no need to pass this parameter. # # AX_IS_RELEASE([git-directory]) # AX_CHECK_ENABLE_DEBUG() # # LICENSE # # Copyright (c) 2011 Rhys Ulerich # Copyright (c) 2014, 2015 Philip Withnall # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. #serial 9 AC_DEFUN([AX_CHECK_ENABLE_DEBUG],[ AC_BEFORE([$0],[AC_PROG_CC])dnl AC_BEFORE([$0],[AC_PROG_CXX])dnl AC_BEFORE([$0],[AC_PROG_F77])dnl AC_BEFORE([$0],[AC_PROG_FC])dnl AC_MSG_CHECKING(whether to enable debugging) ax_enable_debug_default=m4_tolower(m4_normalize(ifelse([$1],,[no],[$1]))) ax_enable_debug_is_release=m4_tolower(m4_normalize(ifelse([$4],, [$ax_is_release], [$4]))) # If this is a release, override the default. AS_IF([test "$ax_enable_debug_is_release" = "yes"], [ax_enable_debug_default="no"]) m4_define(ax_enable_debug_vars,[m4_normalize(ifelse([$2],,,[$2]))]) m4_define(ax_disable_debug_vars,[m4_normalize(ifelse([$3],,[NDEBUG],[$3]))]) AC_ARG_ENABLE(debug, [AS_HELP_STRING([--enable-debug=]@<:@yes/info/profile/no@:>@,[compile with debugging])], [],enable_debug=$ax_enable_debug_default) # empty mean debug yes AS_IF([test "x$enable_debug" = "x"], [enable_debug="yes"]) # case of debug AS_CASE([$enable_debug], [yes],[ AC_MSG_RESULT(yes) CFLAGS="${CFLAGS} -g -O0" CXXFLAGS="${CXXFLAGS} -g -O0" FFLAGS="${FFLAGS} -g -O0" FCFLAGS="${FCFLAGS} -g -O0" OBJCFLAGS="${OBJCFLAGS} -g -O0" ], [info],[ AC_MSG_RESULT(info) CFLAGS="${CFLAGS} -g" CXXFLAGS="${CXXFLAGS} -g" FFLAGS="${FFLAGS} -g" FCFLAGS="${FCFLAGS} -g" OBJCFLAGS="${OBJCFLAGS} -g" ], [profile],[ AC_MSG_RESULT(profile) CFLAGS="${CFLAGS} -g -pg" CXXFLAGS="${CXXFLAGS} -g -pg" FFLAGS="${FFLAGS} -g -pg" FCFLAGS="${FCFLAGS} -g -pg" OBJCFLAGS="${OBJCFLAGS} -g -pg" LDFLAGS="${LDFLAGS} -pg" ], [ AC_MSG_RESULT(no) dnl Ensure AC_PROG_CC/CXX/F77/FC/OBJC will not enable debug flags dnl by setting any unset environment flag variables AS_IF([test "x${CFLAGS+set}" != "xset"], [CFLAGS=""]) AS_IF([test "x${CXXFLAGS+set}" != "xset"], [CXXFLAGS=""]) AS_IF([test "x${FFLAGS+set}" != "xset"], [FFLAGS=""]) AS_IF([test "x${FCFLAGS+set}" != "xset"], [FCFLAGS=""]) AS_IF([test "x${OBJCFLAGS+set}" != "xset"], [OBJCFLAGS=""]) ]) dnl Define various variables if debugging is disabled. dnl assert.h is a NOP if NDEBUG is defined, so define it by default. AS_IF([test "x$enable_debug" = "xyes"], [m4_map_args_w(ax_enable_debug_vars, [AC_DEFINE(], [,[1],[Define if debugging is enabled])])], [m4_map_args_w(ax_disable_debug_vars, [AC_DEFINE(], [,[1],[Define if debugging is disabled])])]) ax_enable_debug=$enable_debug ]) tpm2-pkcs11-1.7.0/m4/ax_pthread.m40000644000175000017500000005052214124412605013326 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_pthread.html # =========================================================================== # # SYNOPSIS # # AX_PTHREAD([ACTION-IF-FOUND[, ACTION-IF-NOT-FOUND]]) # # DESCRIPTION # # This macro figures out how to build C programs using POSIX threads. It # sets the PTHREAD_LIBS output variable to the threads library and linker # flags, and the PTHREAD_CFLAGS output variable to any special C compiler # flags that are needed. (The user can also force certain compiler # flags/libs to be tested by setting these environment variables.) # # Also sets PTHREAD_CC to any special C compiler that is needed for # multi-threaded programs (defaults to the value of CC otherwise). (This # is necessary on AIX to use the special cc_r compiler alias.) # # NOTE: You are assumed to not only compile your program with these flags, # but also to link with them as well. For example, you might link with # $PTHREAD_CC $CFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS # # If you are only building threaded programs, you may wish to use these # variables in your default LIBS, CFLAGS, and CC: # # LIBS="$PTHREAD_LIBS $LIBS" # CFLAGS="$CFLAGS $PTHREAD_CFLAGS" # CC="$PTHREAD_CC" # # In addition, if the PTHREAD_CREATE_JOINABLE thread-attribute constant # has a nonstandard name, this macro defines PTHREAD_CREATE_JOINABLE to # that name (e.g. PTHREAD_CREATE_UNDETACHED on AIX). # # Also HAVE_PTHREAD_PRIO_INHERIT is defined if pthread is found and the # PTHREAD_PRIO_INHERIT symbol is defined when compiling with # PTHREAD_CFLAGS. # # ACTION-IF-FOUND is a list of shell commands to run if a threads library # is found, and ACTION-IF-NOT-FOUND is a list of commands to run it if it # is not found. If ACTION-IF-FOUND is not specified, the default action # will define HAVE_PTHREAD. # # Please let the authors know if this macro fails on any platform, or if # you have any other suggestions or comments. This macro was based on work # by SGJ on autoconf scripts for FFTW (http://www.fftw.org/) (with help # from M. Frigo), as well as ac_pthread and hb_pthread macros posted by # Alejandro Forero Cuervo to the autoconf macro repository. We are also # grateful for the helpful feedback of numerous users. # # Updated for Autoconf 2.68 by Daniel Richard G. # # LICENSE # # Copyright (c) 2008 Steven G. Johnson # Copyright (c) 2011 Daniel Richard G. # # This program is free software: you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation, either version 3 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 24 AU_ALIAS([ACX_PTHREAD], [AX_PTHREAD]) AC_DEFUN([AX_PTHREAD], [ AC_REQUIRE([AC_CANONICAL_HOST]) AC_REQUIRE([AC_PROG_CC]) AC_REQUIRE([AC_PROG_SED]) AC_LANG_PUSH([C]) ax_pthread_ok=no # We used to check for pthread.h first, but this fails if pthread.h # requires special compiler flags (e.g. on Tru64 or Sequent). # It gets checked for in the link test anyway. # First of all, check if the user has set any of the PTHREAD_LIBS, # etcetera environment variables, and if threads linking works using # them: if test "x$PTHREAD_CFLAGS$PTHREAD_LIBS" != "x"; then ax_pthread_save_CC="$CC" ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" AS_IF([test "x$PTHREAD_CC" != "x"], [CC="$PTHREAD_CC"]) CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" AC_MSG_CHECKING([for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS]) AC_LINK_IFELSE([AC_LANG_CALL([], [pthread_join])], [ax_pthread_ok=yes]) AC_MSG_RESULT([$ax_pthread_ok]) if test "x$ax_pthread_ok" = "xno"; then PTHREAD_LIBS="" PTHREAD_CFLAGS="" fi CC="$ax_pthread_save_CC" CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" fi # We must check for the threads library under a number of different # names; the ordering is very important because some systems # (e.g. DEC) have both -lpthread and -lpthreads, where one of the # libraries is broken (non-POSIX). # Create a list of thread flags to try. Items starting with a "-" are # C compiler flags, and other items are library names, except for "none" # which indicates that we try without any flags at all, and "pthread-config" # which is a program returning the flags for the Pth emulation library. ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config" # The ordering *is* (sometimes) important. Some notes on the # individual items follow: # pthreads: AIX (must check this before -lpthread) # none: in case threads are in libc; should be tried before -Kthread and # other compiler flags to prevent continual compiler warnings # -Kthread: Sequent (threads in libc, but -Kthread needed for pthread.h) # -pthread: Linux/gcc (kernel threads), BSD/gcc (userland threads), Tru64 # (Note: HP C rejects this with "bad form for `-t' option") # -pthreads: Solaris/gcc (Note: HP C also rejects) # -mt: Sun Workshop C (may only link SunOS threads [-lthread], but it # doesn't hurt to check since this sometimes defines pthreads and # -D_REENTRANT too), HP C (must be checked before -lpthread, which # is present but should not be used directly; and before -mthreads, # because the compiler interprets this as "-mt" + "-hreads") # -mthreads: Mingw32/gcc, Lynx/gcc # pthread: Linux, etcetera # --thread-safe: KAI C++ # pthread-config: use pthread-config program (for GNU Pth library) case $host_os in freebsd*) # -kthread: FreeBSD kernel threads (preferred to -pthread since SMP-able) # lthread: LinuxThreads port on FreeBSD (also preferred to -pthread) ax_pthread_flags="-kthread lthread $ax_pthread_flags" ;; hpux*) # From the cc(1) man page: "[-mt] Sets various -D flags to enable # multi-threading and also sets -lpthread." ax_pthread_flags="-mt -pthread pthread $ax_pthread_flags" ;; openedition*) # IBM z/OS requires a feature-test macro to be defined in order to # enable POSIX threads at all, so give the user a hint if this is # not set. (We don't define these ourselves, as they can affect # other portions of the system API in unpredictable ways.) AC_EGREP_CPP([AX_PTHREAD_ZOS_MISSING], [ # if !defined(_OPEN_THREADS) && !defined(_UNIX03_THREADS) AX_PTHREAD_ZOS_MISSING # endif ], [AC_MSG_WARN([IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support.])]) ;; solaris*) # On Solaris (at least, for some versions), libc contains stubbed # (non-functional) versions of the pthreads routines, so link-based # tests will erroneously succeed. (N.B.: The stubs are missing # pthread_cleanup_push, or rather a function called by this macro, # so we could check for that, but who knows whether they'll stub # that too in a future libc.) So we'll check first for the # standard Solaris way of linking pthreads (-mt -lpthread). ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags" ;; esac # GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC) AS_IF([test "x$GCC" = "xyes"], [ax_pthread_flags="-pthread -pthreads $ax_pthread_flags"]) # The presence of a feature test macro requesting re-entrant function # definitions is, on some systems, a strong hint that pthreads support is # correctly enabled case $host_os in darwin* | hpux* | linux* | osf* | solaris*) ax_pthread_check_macro="_REENTRANT" ;; aix*) ax_pthread_check_macro="_THREAD_SAFE" ;; *) ax_pthread_check_macro="--" ;; esac AS_IF([test "x$ax_pthread_check_macro" = "x--"], [ax_pthread_check_cond=0], [ax_pthread_check_cond="!defined($ax_pthread_check_macro)"]) # Are we compiling with Clang? AC_CACHE_CHECK([whether $CC is Clang], [ax_cv_PTHREAD_CLANG], [ax_cv_PTHREAD_CLANG=no # Note that Autoconf sets GCC=yes for Clang as well as GCC if test "x$GCC" = "xyes"; then AC_EGREP_CPP([AX_PTHREAD_CC_IS_CLANG], [/* Note: Clang 2.7 lacks __clang_[a-z]+__ */ # if defined(__clang__) && defined(__llvm__) AX_PTHREAD_CC_IS_CLANG # endif ], [ax_cv_PTHREAD_CLANG=yes]) fi ]) ax_pthread_clang="$ax_cv_PTHREAD_CLANG" ax_pthread_clang_warning=no # Clang needs special handling, because older versions handle the -pthread # option in a rather... idiosyncratic way if test "x$ax_pthread_clang" = "xyes"; then # Clang takes -pthread; it has never supported any other flag # (Note 1: This will need to be revisited if a system that Clang # supports has POSIX threads in a separate library. This tends not # to be the way of modern systems, but it's conceivable.) # (Note 2: On some systems, notably Darwin, -pthread is not needed # to get POSIX threads support; the API is always present and # active. We could reasonably leave PTHREAD_CFLAGS empty. But # -pthread does define _REENTRANT, and while the Darwin headers # ignore this macro, third-party headers might not.) PTHREAD_CFLAGS="-pthread" PTHREAD_LIBS= ax_pthread_ok=yes # However, older versions of Clang make a point of warning the user # that, in an invocation where only linking and no compilation is # taking place, the -pthread option has no effect ("argument unused # during compilation"). They expect -pthread to be passed in only # when source code is being compiled. # # Problem is, this is at odds with the way Automake and most other # C build frameworks function, which is that the same flags used in # compilation (CFLAGS) are also used in linking. Many systems # supported by AX_PTHREAD require exactly this for POSIX threads # support, and in fact it is often not straightforward to specify a # flag that is used only in the compilation phase and not in # linking. Such a scenario is extremely rare in practice. # # Even though use of the -pthread flag in linking would only print # a warning, this can be a nuisance for well-run software projects # that build with -Werror. So if the active version of Clang has # this misfeature, we search for an option to squash it. AC_CACHE_CHECK([whether Clang needs flag to prevent "argument unused" warning when linking with -pthread], [ax_cv_PTHREAD_CLANG_NO_WARN_FLAG], [ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown # Create an alternate version of $ac_link that compiles and # links in two steps (.c -> .o, .o -> exe) instead of one # (.c -> exe), because the warning occurs only in the second # step ax_pthread_save_ac_link="$ac_link" ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g' ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"` ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)" ax_pthread_save_CFLAGS="$CFLAGS" for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do AS_IF([test "x$ax_pthread_try" = "xunknown"], [break]) CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS" ac_link="$ax_pthread_save_ac_link" AC_LINK_IFELSE([AC_LANG_SOURCE([[int main(void){return 0;}]])], [ac_link="$ax_pthread_2step_ac_link" AC_LINK_IFELSE([AC_LANG_SOURCE([[int main(void){return 0;}]])], [break]) ]) done ac_link="$ax_pthread_save_ac_link" CFLAGS="$ax_pthread_save_CFLAGS" AS_IF([test "x$ax_pthread_try" = "x"], [ax_pthread_try=no]) ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try" ]) case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in no | unknown) ;; *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;; esac fi # $ax_pthread_clang = yes if test "x$ax_pthread_ok" = "xno"; then for ax_pthread_try_flag in $ax_pthread_flags; do case $ax_pthread_try_flag in none) AC_MSG_CHECKING([whether pthreads work without any flags]) ;; -mt,pthread) AC_MSG_CHECKING([whether pthreads work with -mt -lpthread]) PTHREAD_CFLAGS="-mt" PTHREAD_LIBS="-lpthread" ;; -*) AC_MSG_CHECKING([whether pthreads work with $ax_pthread_try_flag]) PTHREAD_CFLAGS="$ax_pthread_try_flag" ;; pthread-config) AC_CHECK_PROG([ax_pthread_config], [pthread-config], [yes], [no]) AS_IF([test "x$ax_pthread_config" = "xno"], [continue]) PTHREAD_CFLAGS="`pthread-config --cflags`" PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`" ;; *) AC_MSG_CHECKING([for the pthreads library -l$ax_pthread_try_flag]) PTHREAD_LIBS="-l$ax_pthread_try_flag" ;; esac ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Check for various functions. We must include pthread.h, # since some functions may be macros. (On the Sequent, we # need a special flag -Kthread to make this header compile.) # We check for pthread_join because it is in -lpthread on IRIX # while pthread_create is in libc. We check for pthread_attr_init # due to DEC craziness with -lpthreads. We check for # pthread_cleanup_push because it is one of the few pthread # functions on Solaris that doesn't have a non-functional libc stub. # We try pthread_create on general principles. AC_LINK_IFELSE([AC_LANG_PROGRAM([#include # if $ax_pthread_check_cond # error "$ax_pthread_check_macro must be defined" # endif static void routine(void *a) { a = 0; } static void *start_routine(void *a) { return a; }], [pthread_t th; pthread_attr_t attr; pthread_create(&th, 0, start_routine, 0); pthread_join(th, 0); pthread_attr_init(&attr); pthread_cleanup_push(routine, 0); pthread_cleanup_pop(0) /* ; */])], [ax_pthread_ok=yes], []) CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" AC_MSG_RESULT([$ax_pthread_ok]) AS_IF([test "x$ax_pthread_ok" = "xyes"], [break]) PTHREAD_LIBS="" PTHREAD_CFLAGS="" done fi # Various other checks: if test "x$ax_pthread_ok" = "xyes"; then ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Detect AIX lossage: JOINABLE attribute is called UNDETACHED. AC_CACHE_CHECK([for joinable pthread attribute], [ax_cv_PTHREAD_JOINABLE_ATTR], [ax_cv_PTHREAD_JOINABLE_ATTR=unknown for ax_pthread_attr in PTHREAD_CREATE_JOINABLE PTHREAD_CREATE_UNDETACHED; do AC_LINK_IFELSE([AC_LANG_PROGRAM([#include ], [int attr = $ax_pthread_attr; return attr /* ; */])], [ax_cv_PTHREAD_JOINABLE_ATTR=$ax_pthread_attr; break], []) done ]) AS_IF([test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xunknown" && \ test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xPTHREAD_CREATE_JOINABLE" && \ test "x$ax_pthread_joinable_attr_defined" != "xyes"], [AC_DEFINE_UNQUOTED([PTHREAD_CREATE_JOINABLE], [$ax_cv_PTHREAD_JOINABLE_ATTR], [Define to necessary symbol if this constant uses a non-standard name on your system.]) ax_pthread_joinable_attr_defined=yes ]) AC_CACHE_CHECK([whether more special flags are required for pthreads], [ax_cv_PTHREAD_SPECIAL_FLAGS], [ax_cv_PTHREAD_SPECIAL_FLAGS=no case $host_os in solaris*) ax_cv_PTHREAD_SPECIAL_FLAGS="-D_POSIX_PTHREAD_SEMANTICS" ;; esac ]) AS_IF([test "x$ax_cv_PTHREAD_SPECIAL_FLAGS" != "xno" && \ test "x$ax_pthread_special_flags_added" != "xyes"], [PTHREAD_CFLAGS="$ax_cv_PTHREAD_SPECIAL_FLAGS $PTHREAD_CFLAGS" ax_pthread_special_flags_added=yes]) AC_CACHE_CHECK([for PTHREAD_PRIO_INHERIT], [ax_cv_PTHREAD_PRIO_INHERIT], [AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include ]], [[int i = PTHREAD_PRIO_INHERIT;]])], [ax_cv_PTHREAD_PRIO_INHERIT=yes], [ax_cv_PTHREAD_PRIO_INHERIT=no]) ]) AS_IF([test "x$ax_cv_PTHREAD_PRIO_INHERIT" = "xyes" && \ test "x$ax_pthread_prio_inherit_defined" != "xyes"], [AC_DEFINE([HAVE_PTHREAD_PRIO_INHERIT], [1], [Have PTHREAD_PRIO_INHERIT.]) ax_pthread_prio_inherit_defined=yes ]) CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" # More AIX lossage: compile with *_r variant if test "x$GCC" != "xyes"; then case $host_os in aix*) AS_CASE(["x/$CC"], [x*/c89|x*/c89_128|x*/c99|x*/c99_128|x*/cc|x*/cc128|x*/xlc|x*/xlc_v6|x*/xlc128|x*/xlc128_v6], [#handle absolute path differently from PATH based program lookup AS_CASE(["x$CC"], [x/*], [AS_IF([AS_EXECUTABLE_P([${CC}_r])],[PTHREAD_CC="${CC}_r"])], [AC_CHECK_PROGS([PTHREAD_CC],[${CC}_r],[$CC])])]) ;; esac fi fi test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" AC_SUBST([PTHREAD_LIBS]) AC_SUBST([PTHREAD_CFLAGS]) AC_SUBST([PTHREAD_CC]) # Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND: if test "x$ax_pthread_ok" = "xyes"; then ifelse([$1],,[AC_DEFINE([HAVE_PTHREAD],[1],[Define if you have POSIX threads libraries and header files.])],[$1]) : else ax_pthread_ok=no $2 fi AC_LANG_POP ])dnl AX_PTHREAD tpm2-pkcs11-1.7.0/m4/ax_am_macros_static.m40000644000175000017500000000212514124412605015203 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_am_macros_static.html # =========================================================================== # # SYNOPSIS # # AX_AM_MACROS_STATIC # # DESCRIPTION # # Adds support for macros that create Automake rules. You must manually # add the following line # # include $(top_srcdir)/aminclude_static.am # # to your Makefile.am files. # # LICENSE # # Copyright (c) 2009 Tom Howard # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 11 AC_DEFUN([AMINCLUDE_STATIC],[aminclude_static.am]) AC_DEFUN([AX_AM_MACROS_STATIC], [ AX_AC_PRINT_TO_FILE(AMINCLUDE_STATIC,[ # ]AMINCLUDE_STATIC[ generated automatically by Autoconf # from AX_AM_MACROS_STATIC on ]m4_esyscmd([LC_ALL=C date])[ ]) ]) tpm2-pkcs11-1.7.0/m4/ax_gcc_func_attribute.m40000644000175000017500000002015014124412605015523 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_gcc_func_attribute.html # =========================================================================== # # SYNOPSIS # # AX_GCC_FUNC_ATTRIBUTE(ATTRIBUTE) # # DESCRIPTION # # This macro checks if the compiler supports one of GCC's function # attributes; many other compilers also provide function attributes with # the same syntax. Compiler warnings are used to detect supported # attributes as unsupported ones are ignored by default so quieting # warnings when using this macro will yield false positives. # # The ATTRIBUTE parameter holds the name of the attribute to be checked. # # If ATTRIBUTE is supported define HAVE_FUNC_ATTRIBUTE_. # # The macro caches its result in the ax_cv_have_func_attribute_ # variable. # # The macro currently supports the following function attributes: # # alias # aligned # alloc_size # always_inline # artificial # cold # const # constructor # constructor_priority for constructor attribute with priority # deprecated # destructor # dllexport # dllimport # error # externally_visible # fallthrough # flatten # format # format_arg # gnu_inline # hot # ifunc # leaf # malloc # noclone # noinline # nonnull # noreturn # nothrow # optimize # pure # sentinel # sentinel_position # unused # used # visibility # warning # warn_unused_result # weak # weakref # # Unsupported function attributes will be tested with a prototype # returning an int and not accepting any arguments and the result of the # check might be wrong or meaningless so use with care. # # LICENSE # # Copyright (c) 2013 Gabriele Svelto # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 9 AC_DEFUN([AX_GCC_FUNC_ATTRIBUTE], [ AS_VAR_PUSHDEF([ac_var], [ax_cv_have_func_attribute_$1]) AC_CACHE_CHECK([for __attribute__(($1))], [ac_var], [ AC_LINK_IFELSE([AC_LANG_PROGRAM([ m4_case([$1], [alias], [ int foo( void ) { return 0; } int bar( void ) __attribute__(($1("foo"))); ], [aligned], [ int foo( void ) __attribute__(($1(32))); ], [alloc_size], [ void *foo(int a) __attribute__(($1(1))); ], [always_inline], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [artificial], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [cold], [ int foo( void ) __attribute__(($1)); ], [const], [ int foo( void ) __attribute__(($1)); ], [constructor_priority], [ int foo( void ) __attribute__((__constructor__(65535/2))); ], [constructor], [ int foo( void ) __attribute__(($1)); ], [deprecated], [ int foo( void ) __attribute__(($1(""))); ], [destructor], [ int foo( void ) __attribute__(($1)); ], [dllexport], [ __attribute__(($1)) int foo( void ) { return 0; } ], [dllimport], [ int foo( void ) __attribute__(($1)); ], [error], [ int foo( void ) __attribute__(($1(""))); ], [externally_visible], [ int foo( void ) __attribute__(($1)); ], [fallthrough], [ int foo( void ) {switch (0) { case 1: __attribute__(($1)); case 2: break ; }}; ], [flatten], [ int foo( void ) __attribute__(($1)); ], [format], [ int foo(const char *p, ...) __attribute__(($1(printf, 1, 2))); ], [format_arg], [ char *foo(const char *p) __attribute__(($1(1))); ], [gnu_inline], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [hot], [ int foo( void ) __attribute__(($1)); ], [ifunc], [ int my_foo( void ) { return 0; } static int (*resolve_foo(void))(void) { return my_foo; } int foo( void ) __attribute__(($1("resolve_foo"))); ], [leaf], [ __attribute__(($1)) int foo( void ) { return 0; } ], [malloc], [ void *foo( void ) __attribute__(($1)); ], [noclone], [ int foo( void ) __attribute__(($1)); ], [noinline], [ __attribute__(($1)) int foo( void ) { return 0; } ], [nonnull], [ int foo(char *p) __attribute__(($1(1))); ], [noreturn], [ void foo( void ) __attribute__(($1)); ], [nothrow], [ int foo( void ) __attribute__(($1)); ], [optimize], [ __attribute__(($1(3))) int foo( void ) { return 0; } ], [pure], [ int foo( void ) __attribute__(($1)); ], [sentinel], [ int foo(void *p, ...) __attribute__(($1)); ], [sentinel_position], [ int foo(void *p, ...) __attribute__(($1(1))); ], [returns_nonnull], [ void *foo( void ) __attribute__(($1)); ], [unused], [ int foo( void ) __attribute__(($1)); ], [used], [ int foo( void ) __attribute__(($1)); ], [visibility], [ int foo_def( void ) __attribute__(($1("default"))); int foo_hid( void ) __attribute__(($1("hidden"))); int foo_int( void ) __attribute__(($1("internal"))); int foo_pro( void ) __attribute__(($1("protected"))); ], [warning], [ int foo( void ) __attribute__(($1(""))); ], [warn_unused_result], [ int foo( void ) __attribute__(($1)); ], [weak], [ int foo( void ) __attribute__(($1)); ], [weakref], [ static int foo( void ) { return 0; } static int bar( void ) __attribute__(($1("foo"))); ], [ m4_warn([syntax], [Unsupported attribute $1, the test may fail]) int foo( void ) __attribute__(($1)); ] )], []) ], dnl GCC doesn't exit with an error if an unknown attribute is dnl provided but only outputs a warning, so accept the attribute dnl only if no warning were issued. [AS_IF([test -s conftest.err], [AS_VAR_SET([ac_var], [no])], [AS_VAR_SET([ac_var], [yes])])], [AS_VAR_SET([ac_var], [no])]) ]) AS_IF([test yes = AS_VAR_GET([ac_var])], [AC_DEFINE_UNQUOTED(AS_TR_CPP(HAVE_FUNC_ATTRIBUTE_$1), 1, [Define to 1 if the system has the `$1' function attribute])], []) AS_VAR_POPDEF([ac_var]) ]) tpm2-pkcs11-1.7.0/m4/ltversion.m40000644000175000017500000000127314124412605013233 00000000000000# ltversion.m4 -- version numbers -*- Autoconf -*- # # Copyright (C) 2004, 2011-2015 Free Software Foundation, Inc. # Written by Scott James Remnant, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # @configure_input@ # serial 4179 ltversion.m4 # This file is part of GNU Libtool m4_define([LT_PACKAGE_VERSION], [2.4.6]) m4_define([LT_PACKAGE_REVISION], [2.4.6]) AC_DEFUN([LTVERSION_VERSION], [macro_version='2.4.6' macro_revision='2.4.6' _LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?]) _LT_DECL(, macro_revision, 0) ]) tpm2-pkcs11-1.7.0/m4/ax_prog_java_works.m40000644000175000017500000000701214124412605015070 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_java_works.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVA_WORKS # # DESCRIPTION # # Internal use ONLY. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 11 AU_ALIAS([AC_PROG_JAVA_WORKS], [AX_PROG_JAVA_WORKS]) AC_DEFUN([AX_PROG_JAVA_WORKS], [ if test x$ac_cv_prog_javac_works = xno; then AC_MSG_ERROR([Cannot compile java source. $JAVAC does not work properly]) fi if test x$ac_cv_prog_javac_works = x; then AX_PROG_JAVAC fi AC_CACHE_CHECK(if $JAVA works, ac_cv_prog_java_works, [ JAVA_TEST=Test.java CLASS_TEST=Test.class TEST=Test changequote(, )dnl cat << \EOF > $JAVA_TEST /* [#]line __oline__ "configure" */ public class Test { public static void main (String args[]) { System.exit (0); } } EOF changequote([, ])dnl if AC_TRY_COMMAND($JAVAC $JAVACFLAGS $JAVA_TEST) && test -s $CLASS_TEST; then : else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD AC_MSG_ERROR(The Java compiler $JAVAC failed (see config.log, check the CLASSPATH?)) fi if AC_TRY_COMMAND($JAVA -classpath . $JAVAFLAGS $TEST) >/dev/null 2>&1; then ac_cv_prog_java_works=yes else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD AC_MSG_ERROR(The Java VM $JAVA failed (see config.log, check the CLASSPATH?)) fi rm -f $JAVA_TEST $CLASS_TEST ]) AC_PROVIDE([$0])dnl ] ) tpm2-pkcs11-1.7.0/m4/lt~obsolete.m40000644000175000017500000001377414124412605013571 00000000000000# lt~obsolete.m4 -- aclocal satisfying obsolete definitions. -*-Autoconf-*- # # Copyright (C) 2004-2005, 2007, 2009, 2011-2015 Free Software # Foundation, Inc. # Written by Scott James Remnant, 2004. # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 5 lt~obsolete.m4 # These exist entirely to fool aclocal when bootstrapping libtool. # # In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN), # which have later been changed to m4_define as they aren't part of the # exported API, or moved to Autoconf or Automake where they belong. # # The trouble is, aclocal is a bit thick. It'll see the old AC_DEFUN # in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us # using a macro with the same name in our local m4/libtool.m4 it'll # pull the old libtool.m4 in (it doesn't see our shiny new m4_define # and doesn't know about Autoconf macros at all.) # # So we provide this file, which has a silly filename so it's always # included after everything else. This provides aclocal with the # AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything # because those macros already exist, or will be overwritten later. # We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6. # # Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here. # Yes, that means every name once taken will need to remain here until # we give up compatibility with versions before 1.7, at which point # we need to keep only those names which we still refer to. # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])]) m4_ifndef([AC_LIBTOOL_LINKER_OPTION], [AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])]) m4_ifndef([AC_PROG_EGREP], [AC_DEFUN([AC_PROG_EGREP])]) m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])]) m4_ifndef([_LT_AC_SHELL_INIT], [AC_DEFUN([_LT_AC_SHELL_INIT])]) m4_ifndef([_LT_AC_SYS_LIBPATH_AIX], [AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])]) m4_ifndef([_LT_PROG_LTMAIN], [AC_DEFUN([_LT_PROG_LTMAIN])]) m4_ifndef([_LT_AC_TAGVAR], [AC_DEFUN([_LT_AC_TAGVAR])]) m4_ifndef([AC_LTDL_ENABLE_INSTALL], [AC_DEFUN([AC_LTDL_ENABLE_INSTALL])]) m4_ifndef([AC_LTDL_PREOPEN], [AC_DEFUN([AC_LTDL_PREOPEN])]) m4_ifndef([_LT_AC_SYS_COMPILER], [AC_DEFUN([_LT_AC_SYS_COMPILER])]) m4_ifndef([_LT_AC_LOCK], [AC_DEFUN([_LT_AC_LOCK])]) m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE], [AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])]) m4_ifndef([_LT_AC_TRY_DLOPEN_SELF], [AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])]) m4_ifndef([AC_LIBTOOL_PROG_CC_C_O], [AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])]) m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])]) m4_ifndef([AC_LIBTOOL_OBJDIR], [AC_DEFUN([AC_LIBTOOL_OBJDIR])]) m4_ifndef([AC_LTDL_OBJDIR], [AC_DEFUN([AC_LTDL_OBJDIR])]) m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])]) m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP], [AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])]) m4_ifndef([AC_PATH_MAGIC], [AC_DEFUN([AC_PATH_MAGIC])]) m4_ifndef([AC_PROG_LD_GNU], [AC_DEFUN([AC_PROG_LD_GNU])]) m4_ifndef([AC_PROG_LD_RELOAD_FLAG], [AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])]) m4_ifndef([AC_DEPLIBS_CHECK_METHOD], [AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])]) m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])]) m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])]) m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])]) m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS], [AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])]) m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP], [AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])]) m4_ifndef([LT_AC_PROG_EGREP], [AC_DEFUN([LT_AC_PROG_EGREP])]) m4_ifndef([LT_AC_PROG_SED], [AC_DEFUN([LT_AC_PROG_SED])]) m4_ifndef([_LT_CC_BASENAME], [AC_DEFUN([_LT_CC_BASENAME])]) m4_ifndef([_LT_COMPILER_BOILERPLATE], [AC_DEFUN([_LT_COMPILER_BOILERPLATE])]) m4_ifndef([_LT_LINKER_BOILERPLATE], [AC_DEFUN([_LT_LINKER_BOILERPLATE])]) m4_ifndef([_AC_PROG_LIBTOOL], [AC_DEFUN([_AC_PROG_LIBTOOL])]) m4_ifndef([AC_LIBTOOL_SETUP], [AC_DEFUN([AC_LIBTOOL_SETUP])]) m4_ifndef([_LT_AC_CHECK_DLFCN], [AC_DEFUN([_LT_AC_CHECK_DLFCN])]) m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER], [AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])]) m4_ifndef([_LT_AC_TAGCONFIG], [AC_DEFUN([_LT_AC_TAGCONFIG])]) m4_ifndef([AC_DISABLE_FAST_INSTALL], [AC_DEFUN([AC_DISABLE_FAST_INSTALL])]) m4_ifndef([_LT_AC_LANG_CXX], [AC_DEFUN([_LT_AC_LANG_CXX])]) m4_ifndef([_LT_AC_LANG_F77], [AC_DEFUN([_LT_AC_LANG_F77])]) m4_ifndef([_LT_AC_LANG_GCJ], [AC_DEFUN([_LT_AC_LANG_GCJ])]) m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])]) m4_ifndef([_LT_AC_LANG_C_CONFIG], [AC_DEFUN([_LT_AC_LANG_C_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])]) m4_ifndef([_LT_AC_LANG_CXX_CONFIG], [AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])]) m4_ifndef([_LT_AC_LANG_F77_CONFIG], [AC_DEFUN([_LT_AC_LANG_F77_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])]) m4_ifndef([_LT_AC_LANG_GCJ_CONFIG], [AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])]) m4_ifndef([_LT_AC_LANG_RC_CONFIG], [AC_DEFUN([_LT_AC_LANG_RC_CONFIG])]) m4_ifndef([AC_LIBTOOL_CONFIG], [AC_DEFUN([AC_LIBTOOL_CONFIG])]) m4_ifndef([_LT_AC_FILE_LTDLL_C], [AC_DEFUN([_LT_AC_FILE_LTDLL_C])]) m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS], [AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])]) m4_ifndef([_LT_AC_PROG_CXXCPP], [AC_DEFUN([_LT_AC_PROG_CXXCPP])]) m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS], [AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])]) m4_ifndef([_LT_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])]) m4_ifndef([_LT_PROG_F77], [AC_DEFUN([_LT_PROG_F77])]) m4_ifndef([_LT_PROG_FC], [AC_DEFUN([_LT_PROG_FC])]) m4_ifndef([_LT_PROG_CXX], [AC_DEFUN([_LT_PROG_CXX])]) tpm2-pkcs11-1.7.0/m4/ax_ac_print_to_file.m40000644000175000017500000000161114124412605015172 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_ac_print_to_file.html # =========================================================================== # # SYNOPSIS # # AX_AC_PRINT_TO_FILE([FILE],[DATA]) # # DESCRIPTION # # Writes the specified data to the specified file when Autoconf is run. If # you want to print to a file when configure is run use AX_PRINT_TO_FILE # instead. # # LICENSE # # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AC_DEFUN([AX_AC_PRINT_TO_FILE],[ m4_esyscmd( AC_REQUIRE([AX_FILE_ESCAPES]) [ printf "%s" "$2" > "$1" ]) ]) tpm2-pkcs11-1.7.0/m4/ltoptions.m40000644000175000017500000003426214124412605013245 00000000000000# Helper functions for option handling. -*- Autoconf -*- # # Copyright (C) 2004-2005, 2007-2009, 2011-2015 Free Software # Foundation, Inc. # Written by Gary V. Vaughan, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 8 ltoptions.m4 # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])]) # _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME) # ------------------------------------------ m4_define([_LT_MANGLE_OPTION], [[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])]) # _LT_SET_OPTION(MACRO-NAME, OPTION-NAME) # --------------------------------------- # Set option OPTION-NAME for macro MACRO-NAME, and if there is a # matching handler defined, dispatch to it. Other OPTION-NAMEs are # saved as a flag. m4_define([_LT_SET_OPTION], [m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]), _LT_MANGLE_DEFUN([$1], [$2]), [m4_warning([Unknown $1 option '$2'])])[]dnl ]) # _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET]) # ------------------------------------------------------------ # Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. m4_define([_LT_IF_OPTION], [m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])]) # _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET) # ------------------------------------------------------- # Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME # are set. m4_define([_LT_UNLESS_OPTIONS], [m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option), [m4_define([$0_found])])])[]dnl m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3 ])[]dnl ]) # _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST) # ---------------------------------------- # OPTION-LIST is a space-separated list of Libtool options associated # with MACRO-NAME. If any OPTION has a matching handler declared with # LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about # the unknown option and exit. m4_defun([_LT_SET_OPTIONS], [# Set options m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), [_LT_SET_OPTION([$1], _LT_Option)]) m4_if([$1],[LT_INIT],[ dnl dnl Simply set some default values (i.e off) if boolean options were not dnl specified: _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no ]) _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no ]) dnl dnl If no reference was made to various pairs of opposing options, then dnl we run the default mode handler for the pair. For example, if neither dnl 'shared' nor 'disable-shared' was passed, we enable building of shared dnl archives by default: _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED]) _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC]) _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC]) _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install], [_LT_ENABLE_FAST_INSTALL]) _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4], [_LT_WITH_AIX_SONAME([aix])]) ]) ])# _LT_SET_OPTIONS ## --------------------------------- ## ## Macros to handle LT_INIT options. ## ## --------------------------------- ## # _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME) # ----------------------------------------- m4_define([_LT_MANGLE_DEFUN], [[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])]) # LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE) # ----------------------------------------------- m4_define([LT_OPTION_DEFINE], [m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl ])# LT_OPTION_DEFINE # dlopen # ------ LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes ]) AU_DEFUN([AC_LIBTOOL_DLOPEN], [_LT_SET_OPTION([LT_INIT], [dlopen]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'dlopen' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], []) # win32-dll # --------- # Declare package support for building win32 dll's. LT_OPTION_DEFINE([LT_INIT], [win32-dll], [enable_win32_dll=yes case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-cegcc*) AC_CHECK_TOOL(AS, as, false) AC_CHECK_TOOL(DLLTOOL, dlltool, false) AC_CHECK_TOOL(OBJDUMP, objdump, false) ;; esac test -z "$AS" && AS=as _LT_DECL([], [AS], [1], [Assembler program])dnl test -z "$DLLTOOL" && DLLTOOL=dlltool _LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl test -z "$OBJDUMP" && OBJDUMP=objdump _LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl ])# win32-dll AU_DEFUN([AC_LIBTOOL_WIN32_DLL], [AC_REQUIRE([AC_CANONICAL_HOST])dnl _LT_SET_OPTION([LT_INIT], [win32-dll]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'win32-dll' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], []) # _LT_ENABLE_SHARED([DEFAULT]) # ---------------------------- # implement the --enable-shared flag, and supports the 'shared' and # 'disable-shared' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_SHARED], [m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([shared], [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@], [build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_shared=yes ;; no) enable_shared=no ;; *) enable_shared=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_shared=yes fi done IFS=$lt_save_ifs ;; esac], [enable_shared=]_LT_ENABLE_SHARED_DEFAULT) _LT_DECL([build_libtool_libs], [enable_shared], [0], [Whether or not to build shared libraries]) ])# _LT_ENABLE_SHARED LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])]) # Old names: AC_DEFUN([AC_ENABLE_SHARED], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared]) ]) AC_DEFUN([AC_DISABLE_SHARED], [_LT_SET_OPTION([LT_INIT], [disable-shared]) ]) AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)]) AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_ENABLE_SHARED], []) dnl AC_DEFUN([AM_DISABLE_SHARED], []) # _LT_ENABLE_STATIC([DEFAULT]) # ---------------------------- # implement the --enable-static flag, and support the 'static' and # 'disable-static' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_STATIC], [m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([static], [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@], [build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_static=yes ;; no) enable_static=no ;; *) enable_static=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_static=yes fi done IFS=$lt_save_ifs ;; esac], [enable_static=]_LT_ENABLE_STATIC_DEFAULT) _LT_DECL([build_old_libs], [enable_static], [0], [Whether or not to build static libraries]) ])# _LT_ENABLE_STATIC LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])]) # Old names: AC_DEFUN([AC_ENABLE_STATIC], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static]) ]) AC_DEFUN([AC_DISABLE_STATIC], [_LT_SET_OPTION([LT_INIT], [disable-static]) ]) AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)]) AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_ENABLE_STATIC], []) dnl AC_DEFUN([AM_DISABLE_STATIC], []) # _LT_ENABLE_FAST_INSTALL([DEFAULT]) # ---------------------------------- # implement the --enable-fast-install flag, and support the 'fast-install' # and 'disable-fast-install' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_FAST_INSTALL], [m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([fast-install], [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@], [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_fast_install=yes ;; no) enable_fast_install=no ;; *) enable_fast_install=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_fast_install=yes fi done IFS=$lt_save_ifs ;; esac], [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT) _LT_DECL([fast_install], [enable_fast_install], [0], [Whether or not to optimize for fast installation])dnl ])# _LT_ENABLE_FAST_INSTALL LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])]) # Old names: AU_DEFUN([AC_ENABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'fast-install' option into LT_INIT's first parameter.]) ]) AU_DEFUN([AC_DISABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], [disable-fast-install]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'disable-fast-install' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], []) dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], []) # _LT_WITH_AIX_SONAME([DEFAULT]) # ---------------------------------- # implement the --with-aix-soname flag, and support the `aix-soname=aix' # and `aix-soname=both' and `aix-soname=svr4' LT_INIT options. DEFAULT # is either `aix', `both' or `svr4'. If omitted, it defaults to `aix'. m4_define([_LT_WITH_AIX_SONAME], [m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl shared_archive_member_spec= case $host,$enable_shared in power*-*-aix[[5-9]]*,yes) AC_MSG_CHECKING([which variant of shared library versioning to provide]) AC_ARG_WITH([aix-soname], [AS_HELP_STRING([--with-aix-soname=aix|svr4|both], [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])], [case $withval in aix|svr4|both) ;; *) AC_MSG_ERROR([Unknown argument to --with-aix-soname]) ;; esac lt_cv_with_aix_soname=$with_aix_soname], [AC_CACHE_VAL([lt_cv_with_aix_soname], [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT) with_aix_soname=$lt_cv_with_aix_soname]) AC_MSG_RESULT([$with_aix_soname]) if test aix != "$with_aix_soname"; then # For the AIX way of multilib, we name the shared archive member # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o', # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File. # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag, # the AIX toolchain works better with OBJECT_MODE set (default 32). if test 64 = "${OBJECT_MODE-32}"; then shared_archive_member_spec=shr_64 else shared_archive_member_spec=shr fi fi ;; *) with_aix_soname=aix ;; esac _LT_DECL([], [shared_archive_member_spec], [0], [Shared archive member basename, for filename based shared library versioning on AIX])dnl ])# _LT_WITH_AIX_SONAME LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])]) LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])]) LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])]) # _LT_WITH_PIC([MODE]) # -------------------- # implement the --with-pic flag, and support the 'pic-only' and 'no-pic' # LT_INIT options. # MODE is either 'yes' or 'no'. If omitted, it defaults to 'both'. m4_define([_LT_WITH_PIC], [AC_ARG_WITH([pic], [AS_HELP_STRING([--with-pic@<:@=PKGS@:>@], [try to use only PIC/non-PIC objects @<:@default=use both@:>@])], [lt_p=${PACKAGE-default} case $withval in yes|no) pic_mode=$withval ;; *) pic_mode=default # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for lt_pkg in $withval; do IFS=$lt_save_ifs if test "X$lt_pkg" = "X$lt_p"; then pic_mode=yes fi done IFS=$lt_save_ifs ;; esac], [pic_mode=m4_default([$1], [default])]) _LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl ])# _LT_WITH_PIC LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])]) LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])]) # Old name: AU_DEFUN([AC_LIBTOOL_PICMODE], [_LT_SET_OPTION([LT_INIT], [pic-only]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'pic-only' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_PICMODE], []) ## ----------------- ## ## LTDL_INIT Options ## ## ----------------- ## m4_define([_LTDL_MODE], []) LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive], [m4_define([_LTDL_MODE], [nonrecursive])]) LT_OPTION_DEFINE([LTDL_INIT], [recursive], [m4_define([_LTDL_MODE], [recursive])]) LT_OPTION_DEFINE([LTDL_INIT], [subproject], [m4_define([_LTDL_MODE], [subproject])]) m4_define([_LTDL_TYPE], []) LT_OPTION_DEFINE([LTDL_INIT], [installable], [m4_define([_LTDL_TYPE], [installable])]) LT_OPTION_DEFINE([LTDL_INIT], [convenience], [m4_define([_LTDL_TYPE], [convenience])]) tpm2-pkcs11-1.7.0/m4/ax_ac_append_to_file.m40000644000175000017500000000162214124412605015307 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_ac_append_to_file.html # =========================================================================== # # SYNOPSIS # # AX_AC_APPEND_TO_FILE([FILE],[DATA]) # # DESCRIPTION # # Appends the specified data to the specified Autoconf is run. If you want # to append to a file when configure is run use AX_APPEND_TO_FILE instead. # # LICENSE # # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AC_DEFUN([AX_AC_APPEND_TO_FILE],[ AC_REQUIRE([AX_FILE_ESCAPES]) m4_esyscmd( AX_FILE_ESCAPES [ printf "%s" "$2" >> "$1" ]) ]) tpm2-pkcs11-1.7.0/m4/ax_prog_java.m40000644000175000017500000001042214124412605013642 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_java.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVA # # DESCRIPTION # # Here is a summary of the main macros: # # AX_PROG_JAVAC: finds a Java compiler. # # AX_PROG_JAVA: finds a Java virtual machine. # # AX_CHECK_CLASS: finds if we have the given class (beware of CLASSPATH!). # # AX_CHECK_RQRD_CLASS: finds if we have the given class and stops # otherwise. # # AX_TRY_COMPILE_JAVA: attempt to compile user given source. # # AX_TRY_RUN_JAVA: attempt to compile and run user given source. # # AX_JAVA_OPTIONS: adds Java configure options. # # AX_PROG_JAVA tests an existing Java virtual machine. It uses the # environment variable JAVA then tests in sequence various common Java # virtual machines. For political reasons, it starts with the free ones. # You *must* call [AX_PROG_JAVAC] before. # # If you want to force a specific VM: # # - at the configure.in level, set JAVA=yourvm before calling AX_PROG_JAVA # # (but after AC_INIT) # # - at the configure level, setenv JAVA # # You can use the JAVA variable in your Makefile.in, with @JAVA@. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # TODO: allow to exclude virtual machines (rationale: most Java programs # cannot run with some VM like kaffe). # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. # # A Web page, with a link to the latest CVS snapshot is at # . # # This is a sample configure.in Process this file with autoconf to produce # a configure script. # # AC_INIT(UnTag.java) # # dnl Checks for programs. # AC_CHECK_CLASSPATH # AX_PROG_JAVAC # AX_PROG_JAVA # # dnl Checks for classes # AX_CHECK_RQRD_CLASS(org.xml.sax.Parser) # AX_CHECK_RQRD_CLASS(com.jclark.xml.sax.Driver) # # AC_OUTPUT(Makefile) # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 10 AU_ALIAS([AC_PROG_JAVA], [AX_PROG_JAVA]) AC_DEFUN([AX_PROG_JAVA],[ m4_define([m4_ax_prog_java_list], [kaffe java])dnl AS_IF([test "x$JAVAPREFIX" = x], [test x$JAVA = x && AC_CHECK_PROGS([JAVA], [m4_ax_prog_java_list])], [test x$JAVA = x && AC_CHECK_PROGS([JAVA], [m4_ax_prog_java_list], [], [$JAVAPREFIX/bin])]) test x$JAVA = x && AC_MSG_ERROR([no acceptable Java virtual machine found in \$PATH]) m4_undefine([m4_ax_prog_java_list])dnl AX_PROG_JAVA_WORKS AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.7.0/m4/ax_check_link_flag.m40000644000175000017500000000364414124412605014765 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_link_flag.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_LINK_FLAG(FLAG, [ACTION-SUCCESS], [ACTION-FAILURE], [EXTRA-FLAGS], [INPUT]) # # DESCRIPTION # # Check whether the given FLAG works with the linker or gives an error. # (Warnings, however, are ignored) # # ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on # success/failure. # # If EXTRA-FLAGS is defined, it is added to the linker's default flags # when the check is done. The check is thus made with the flags: "LDFLAGS # EXTRA-FLAGS FLAG". This can for example be used to force the linker to # issue an error when a bad flag is given. # # INPUT gives an alternative input source to AC_LINK_IFELSE. # # NOTE: Implementation based on AX_CFLAGS_GCC_OPTION. Please keep this # macro in sync with AX_CHECK_{PREPROC,COMPILE}_FLAG. # # LICENSE # # Copyright (c) 2008 Guido U. Draheim # Copyright (c) 2011 Maarten Bosmans # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 6 AC_DEFUN([AX_CHECK_LINK_FLAG], [AC_PREREQ(2.64)dnl for _AC_LANG_PREFIX and AS_VAR_IF AS_VAR_PUSHDEF([CACHEVAR],[ax_cv_check_ldflags_$4_$1])dnl AC_CACHE_CHECK([whether the linker accepts $1], CACHEVAR, [ ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS $4 $1" AC_LINK_IFELSE([m4_default([$5],[AC_LANG_PROGRAM()])], [AS_VAR_SET(CACHEVAR,[yes])], [AS_VAR_SET(CACHEVAR,[no])]) LDFLAGS=$ax_check_save_flags]) AS_VAR_IF(CACHEVAR,yes, [m4_default([$2], :)], [m4_default([$3], :)]) AS_VAR_POPDEF([CACHEVAR])dnl ])dnl AX_CHECK_LINK_FLAGS tpm2-pkcs11-1.7.0/m4/pkg.m40000644000175000017500000002401114124412605011762 00000000000000dnl pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*- dnl serial 11 (pkg-config-0.29.1) dnl dnl Copyright © 2004 Scott James Remnant . dnl Copyright © 2012-2015 Dan Nicholson dnl dnl This program is free software; you can redistribute it and/or modify dnl it under the terms of the GNU General Public License as published by dnl the Free Software Foundation; either version 2 of the License, or dnl (at your option) any later version. dnl dnl This program is distributed in the hope that it will be useful, but dnl WITHOUT ANY WARRANTY; without even the implied warranty of dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU dnl General Public License for more details. dnl dnl You should have received a copy of the GNU General Public License dnl along with this program; if not, write to the Free Software dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA dnl 02111-1307, USA. dnl dnl As a special exception to the GNU General Public License, if you dnl distribute this file as part of a program that contains a dnl configuration script generated by Autoconf, you may include it under dnl the same distribution terms that you use for the rest of that dnl program. dnl PKG_PREREQ(MIN-VERSION) dnl ----------------------- dnl Since: 0.29 dnl dnl Verify that the version of the pkg-config macros are at least dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's dnl installed version of pkg-config, this checks the developer's version dnl of pkg.m4 when generating configure. dnl dnl To ensure that this macro is defined, also add: dnl m4_ifndef([PKG_PREREQ], dnl [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])]) dnl dnl See the "Since" comment for each macro you use to see what version dnl of the macros you require. m4_defun([PKG_PREREQ], [m4_define([PKG_MACROS_VERSION], [0.29.1]) m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1, [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])]) ])dnl PKG_PREREQ dnl PKG_PROG_PKG_CONFIG([MIN-VERSION]) dnl ---------------------------------- dnl Since: 0.16 dnl dnl Search for the pkg-config tool and set the PKG_CONFIG variable to dnl first found in the path. Checks that the version of pkg-config found dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is dnl used since that's the first version where most current features of dnl pkg-config existed. AC_DEFUN([PKG_PROG_PKG_CONFIG], [m4_pattern_forbid([^_?PKG_[A-Z_]+$]) m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$]) m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$]) AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility]) AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path]) AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path]) if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then AC_PATH_TOOL([PKG_CONFIG], [pkg-config]) fi if test -n "$PKG_CONFIG"; then _pkg_min_version=m4_default([$1], [0.9.0]) AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version]) if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) PKG_CONFIG="" fi fi[]dnl ])dnl PKG_PROG_PKG_CONFIG dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) dnl ------------------------------------------------------------------- dnl Since: 0.18 dnl dnl Check to see whether a particular set of modules exists. Similar to dnl PKG_CHECK_MODULES(), but does not set variables or print errors. dnl dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG]) dnl only at the first occurence in configure.ac, so if the first place dnl it's called might be skipped (such as if it is within an "if", you dnl have to call PKG_CHECK_EXISTS manually AC_DEFUN([PKG_CHECK_EXISTS], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl if test -n "$PKG_CONFIG" && \ AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then m4_default([$2], [:]) m4_ifvaln([$3], [else $3])dnl fi]) dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES]) dnl --------------------------------------------- dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting dnl pkg_failed based on the result. m4_define([_PKG_CONFIG], [if test -n "$$1"; then pkg_cv_[]$1="$$1" elif test -n "$PKG_CONFIG"; then PKG_CHECK_EXISTS([$3], [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes]) else pkg_failed=untried fi[]dnl ])dnl _PKG_CONFIG dnl _PKG_SHORT_ERRORS_SUPPORTED dnl --------------------------- dnl Internal check to see if pkg-config supports short errors. AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED], [AC_REQUIRE([PKG_PROG_PKG_CONFIG]) if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi[]dnl ])dnl _PKG_SHORT_ERRORS_SUPPORTED dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], dnl [ACTION-IF-NOT-FOUND]) dnl -------------------------------------------------------------- dnl Since: 0.4.0 dnl dnl Note that if there is a possibility the first call to dnl PKG_CHECK_MODULES might not happen, you should be sure to include an dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac AC_DEFUN([PKG_CHECK_MODULES], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl pkg_failed=no AC_MSG_CHECKING([for $1]) _PKG_CONFIG([$1][_CFLAGS], [cflags], [$2]) _PKG_CONFIG([$1][_LIBS], [libs], [$2]) m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS and $1[]_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details.]) if test $pkg_failed = yes; then AC_MSG_RESULT([no]) _PKG_SHORT_ERRORS_SUPPORTED if test $_pkg_short_errors_supported = yes; then $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1` else $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD m4_default([$4], [AC_MSG_ERROR( [Package requirements ($2) were not met: $$1_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. _PKG_TEXT])[]dnl ]) elif test $pkg_failed = untried; then AC_MSG_RESULT([no]) m4_default([$4], [AC_MSG_FAILURE( [The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. _PKG_TEXT To get pkg-config, see .])[]dnl ]) else $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS $1[]_LIBS=$pkg_cv_[]$1[]_LIBS AC_MSG_RESULT([yes]) $3 fi[]dnl ])dnl PKG_CHECK_MODULES dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], dnl [ACTION-IF-NOT-FOUND]) dnl --------------------------------------------------------------------- dnl Since: 0.29 dnl dnl Checks for existence of MODULES and gathers its build flags with dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags dnl and VARIABLE-PREFIX_LIBS from --libs. dnl dnl Note that if there is a possibility the first call to dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to dnl include an explicit call to PKG_PROG_PKG_CONFIG in your dnl configure.ac. AC_DEFUN([PKG_CHECK_MODULES_STATIC], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl _save_PKG_CONFIG=$PKG_CONFIG PKG_CONFIG="$PKG_CONFIG --static" PKG_CHECK_MODULES($@) PKG_CONFIG=$_save_PKG_CONFIG[]dnl ])dnl PKG_CHECK_MODULES_STATIC dnl PKG_INSTALLDIR([DIRECTORY]) dnl ------------------------- dnl Since: 0.27 dnl dnl Substitutes the variable pkgconfigdir as the location where a module dnl should install pkg-config .pc files. By default the directory is dnl $libdir/pkgconfig, but the default can be changed by passing dnl DIRECTORY. The user can override through the --with-pkgconfigdir dnl parameter. AC_DEFUN([PKG_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])]) m4_pushdef([pkg_description], [pkg-config installation directory @<:@]pkg_default[@:>@]) AC_ARG_WITH([pkgconfigdir], [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],, [with_pkgconfigdir=]pkg_default) AC_SUBST([pkgconfigdir], [$with_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) ])dnl PKG_INSTALLDIR dnl PKG_NOARCH_INSTALLDIR([DIRECTORY]) dnl -------------------------------- dnl Since: 0.27 dnl dnl Substitutes the variable noarch_pkgconfigdir as the location where a dnl module should install arch-independent pkg-config .pc files. By dnl default the directory is $datadir/pkgconfig, but the default can be dnl changed by passing DIRECTORY. The user can override through the dnl --with-noarch-pkgconfigdir parameter. AC_DEFUN([PKG_NOARCH_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])]) m4_pushdef([pkg_description], [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@]) AC_ARG_WITH([noarch-pkgconfigdir], [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],, [with_noarch_pkgconfigdir=]pkg_default) AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) ])dnl PKG_NOARCH_INSTALLDIR dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE, dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) dnl ------------------------------------------- dnl Since: 0.28 dnl dnl Retrieves the value of the pkg-config variable for the given module. AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl _PKG_CONFIG([$1], [variable="][$3]["], [$2]) AS_VAR_COPY([$1], [pkg_cv_][$1]) AS_VAR_IF([$1], [""], [$5], [$4])dnl ])dnl PKG_CHECK_VAR tpm2-pkcs11-1.7.0/m4/ax_prog_javac_works.m40000644000175000017500000000552614124412605015243 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_javac_works.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVAC_WORKS # # DESCRIPTION # # Internal use ONLY. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 7 AU_ALIAS([AC_PROG_JAVAC_WORKS], [AX_PROG_JAVAC_WORKS]) AC_DEFUN([AX_PROG_JAVAC_WORKS],[ AC_CACHE_CHECK([if $JAVAC works], ac_cv_prog_javac_works, [ JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* [#]line __oline__ "configure" */ public class Test { } EOF if AC_TRY_COMMAND($JAVAC $JAVACFLAGS $JAVA_TEST) >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else AC_MSG_ERROR([The Java compiler $JAVAC failed (see config.log, check the CLASSPATH?)]) echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD fi rm -f $JAVA_TEST $CLASS_TEST ]) AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.7.0/m4/ax_add_fortify_source.m40000644000175000017500000000326414124412605015552 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_add_fortify_source.html # =========================================================================== # # SYNOPSIS # # AX_ADD_FORTIFY_SOURCE # # DESCRIPTION # # Check whether -D_FORTIFY_SOURCE=2 can be added to CPPFLAGS without macro # redefinition warnings. Some distributions (such as Gentoo Linux) enable # _FORTIFY_SOURCE globally in their compilers, leading to unnecessary # warnings in the form of # # :0:0: error: "_FORTIFY_SOURCE" redefined [-Werror] # : note: this is the location of the previous definition # # which is a problem if -Werror is enabled. This macro checks whether # _FORTIFY_SOURCE is already defined, and if not, adds -D_FORTIFY_SOURCE=2 # to CPPFLAGS. # # LICENSE # # Copyright (c) 2017 David Seifert # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 2 AC_DEFUN([AX_ADD_FORTIFY_SOURCE],[ AC_MSG_CHECKING([whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS]) AC_LINK_IFELSE([ AC_LANG_SOURCE( [[ int main() { #ifndef _FORTIFY_SOURCE return 0; #else this_is_an_error; #endif } ]] )], [ AC_MSG_RESULT([yes]) CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=2" ], [ AC_MSG_RESULT([no]) ]) ]) tpm2-pkcs11-1.7.0/m4/ax_code_coverage.m40000644000175000017500000002761414124412605014472 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_code_coverage.html # =========================================================================== # # SYNOPSIS # # AX_CODE_COVERAGE() # # DESCRIPTION # # Defines CODE_COVERAGE_CPPFLAGS, CODE_COVERAGE_CFLAGS, # CODE_COVERAGE_CXXFLAGS and CODE_COVERAGE_LIBS which should be included # in the CPPFLAGS, CFLAGS CXXFLAGS and LIBS/LIBADD variables of every # build target (program or library) which should be built with code # coverage support. Also add rules using AX_ADD_AM_MACRO_STATIC; and # $enable_code_coverage which can be used in subsequent configure output. # CODE_COVERAGE_ENABLED is defined and substituted, and corresponds to the # value of the --enable-code-coverage option, which defaults to being # disabled. # # Test also for gcov program and create GCOV variable that could be # substituted. # # Note that all optimization flags in CFLAGS must be disabled when code # coverage is enabled. # # Usage example: # # configure.ac: # # AX_CODE_COVERAGE # # Makefile.am: # # include $(top_srcdir)/aminclude_static.am # # my_program_LIBS = ... $(CODE_COVERAGE_LIBS) ... # my_program_CPPFLAGS = ... $(CODE_COVERAGE_CPPFLAGS) ... # my_program_CFLAGS = ... $(CODE_COVERAGE_CFLAGS) ... # my_program_CXXFLAGS = ... $(CODE_COVERAGE_CXXFLAGS) ... # # clean-local: code-coverage-clean # distclean-local: code-coverage-dist-clean # # This results in a "check-code-coverage" rule being added to any # Makefile.am which do "include $(top_srcdir)/aminclude_static.am" # (assuming the module has been configured with --enable-code-coverage). # Running `make check-code-coverage` in that directory will run the # module's test suite (`make check`) and build a code coverage report # detailing the code which was touched, then print the URI for the report. # # This code was derived from Makefile.decl in GLib, originally licensed # under LGPLv2.1+. # # LICENSE # # Copyright (c) 2012, 2016 Philip Withnall # Copyright (c) 2012 Xan Lopez # Copyright (c) 2012 Christian Persch # Copyright (c) 2012 Paolo Borelli # Copyright (c) 2012 Dan Winship # Copyright (c) 2015,2018 Bastien ROUCARIES # # This library is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or (at # your option) any later version. # # This library is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser # General Public License for more details. # # You should have received a copy of the GNU Lesser General Public License # along with this program. If not, see . #serial 32 m4_define(_AX_CODE_COVERAGE_RULES,[ AX_ADD_AM_MACRO_STATIC([ # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: \$(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on $CODE_COVERAGE_BRANCH_COVERAGE) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: $CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: $CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: $CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: $CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on $CODE_COVERAGE_BRANCH_COVERAGE) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: $CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the \$(PACKAGE_NAME) and # \$(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir if CODE_COVERAGE_ENABLED ifeq (\$(abs_builddir), \$(abs_top_builddir)) CODE_COVERAGE_DIRECTORY ?= \$(top_builddir) CODE_COVERAGE_OUTPUT_FILE ?= \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage.info CODE_COVERAGE_OUTPUT_DIRECTORY ?= \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage CODE_COVERAGE_BRANCH_COVERAGE ?= CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= \$(if \$(CODE_COVERAGE_BRANCH_COVERAGE),\ --rc lcov_branch_coverage=\$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_LCOV_SHOPTS ?= \$(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool \"\$(GCOV)\" CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= \$(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) CODE_COVERAGE_LCOV_OPTIONS ?= \$(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= CODE_COVERAGE_LCOV_RMOPTS ?= \$(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=\ \$(if \$(CODE_COVERAGE_BRANCH_COVERAGE),\ --rc genhtml_branch_coverage=\$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_GENHTML_OPTIONS ?= \$(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) CODE_COVERAGE_IGNORE_PATTERN ?= GITIGNOREFILES = \$(GITIGNOREFILES) \$(CODE_COVERAGE_OUTPUT_FILE) \$(CODE_COVERAGE_OUTPUT_DIRECTORY) code_coverage_v_lcov_cap = \$(code_coverage_v_lcov_cap_\$(V)) code_coverage_v_lcov_cap_ = \$(code_coverage_v_lcov_cap_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_cap_0 = @echo \" LCOV --capture\" \$(CODE_COVERAGE_OUTPUT_FILE); code_coverage_v_lcov_ign = \$(code_coverage_v_lcov_ign_\$(V)) code_coverage_v_lcov_ign_ = \$(code_coverage_v_lcov_ign_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_ign_0 = @echo \" LCOV --remove /tmp/*\" \$(CODE_COVERAGE_IGNORE_PATTERN); code_coverage_v_genhtml = \$(code_coverage_v_genhtml_\$(V)) code_coverage_v_genhtml_ = \$(code_coverage_v_genhtml_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_genhtml_0 = @echo \" GEN \" \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\"; code_coverage_quiet = \$(code_coverage_quiet_\$(V)) code_coverage_quiet_ = \$(code_coverage_quiet_\$(AM_DEFAULT_VERBOSITY)) code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots code_coverage_sanitize = \$(subst -,_,\$(subst .,_,\$(1))) # Use recursive makes in order to ignore errors during check check-code-coverage: -\$(AM_V_at)\$(MAKE) \$(AM_MAKEFLAGS) -k check \$(AM_V_at)\$(MAKE) \$(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data code-coverage-capture: code-coverage-capture-hook \$(code_coverage_v_lcov_cap)\$(LCOV) \$(code_coverage_quiet) \$(addprefix --directory ,\$(CODE_COVERAGE_DIRECTORY)) --capture --output-file \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" --test-name \"\$(call code_coverage_sanitize,\$(PACKAGE_NAME)-\$(PACKAGE_VERSION))\" --no-checksum --compat-libtool \$(CODE_COVERAGE_LCOV_SHOPTS) \$(CODE_COVERAGE_LCOV_OPTIONS) \$(code_coverage_v_lcov_ign)\$(LCOV) \$(code_coverage_quiet) \$(addprefix --directory ,\$(CODE_COVERAGE_DIRECTORY)) --remove \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \"/tmp/*\" \$(CODE_COVERAGE_IGNORE_PATTERN) --output-file \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \$(CODE_COVERAGE_LCOV_SHOPTS) \$(CODE_COVERAGE_LCOV_RMOPTS) -@rm -f \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \$(code_coverage_v_genhtml)LANG=C \$(GENHTML) \$(code_coverage_quiet) \$(addprefix --prefix ,\$(CODE_COVERAGE_DIRECTORY)) --output-directory \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\" --title \"\$(PACKAGE_NAME)-\$(PACKAGE_VERSION) Code Coverage\" --legend --show-details \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \$(CODE_COVERAGE_GENHTML_OPTIONS) @echo \"file://\$(abs_builddir)/\$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html\" code-coverage-clean: -\$(LCOV) --directory \$(top_builddir) -z -rm -rf \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\" -find . \\( -name \"*.gcda\" -o -name \"*.gcno\" -o -name \"*.gcov\" \\) -delete code-coverage-dist-clean: A][M_DISTCHECK_CONFIGURE_FLAGS = \$(A][M_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage else # ifneq (\$(abs_builddir), \$(abs_top_builddir)) check-code-coverage: code-coverage-capture: code-coverage-capture-hook code-coverage-clean: code-coverage-dist-clean: endif # ifeq (\$(abs_builddir), \$(abs_top_builddir)) else #! CODE_COVERAGE_ENABLED # Use recursive makes in order to ignore errors during check check-code-coverage: @echo \"Need to reconfigure with --enable-code-coverage\" # Capture code coverage data code-coverage-capture: code-coverage-capture-hook @echo \"Need to reconfigure with --enable-code-coverage\" code-coverage-clean: code-coverage-dist-clean: endif #CODE_COVERAGE_ENABLED # Hook rule executed before code-coverage-capture, overridable by the user code-coverage-capture-hook: .PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook ]) ]) AC_DEFUN([_AX_CODE_COVERAGE_ENABLED],[ AX_CHECK_GNU_MAKE([],[AC_MSG_ERROR([not using GNU make that is needed for coverage])]) AC_REQUIRE([AX_ADD_AM_MACRO_STATIC]) # check for gcov AC_CHECK_TOOL([GCOV], [$_AX_CODE_COVERAGE_GCOV_PROG_WITH], [:]) AS_IF([test "X$GCOV" = "X:"], [AC_MSG_ERROR([gcov is needed to do coverage])]) AC_SUBST([GCOV]) dnl Check if gcc is being used AS_IF([ test "$GCC" = "no" ], [ AC_MSG_ERROR([not compiling with gcc, which is required for gcov code coverage]) ]) AC_CHECK_PROG([LCOV], [lcov], [lcov]) AC_CHECK_PROG([GENHTML], [genhtml], [genhtml]) AS_IF([ test x"$LCOV" = x ], [ AC_MSG_ERROR([To enable code coverage reporting you must have lcov installed]) ]) AS_IF([ test x"$GENHTML" = x ], [ AC_MSG_ERROR([Could not find genhtml from the lcov package]) ]) dnl Build the code coverage flags dnl Define CODE_COVERAGE_LDFLAGS for backwards compatibility CODE_COVERAGE_CPPFLAGS="-DNDEBUG" CODE_COVERAGE_CFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_CXXFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_LIBS="-lgcov" AC_SUBST([CODE_COVERAGE_CPPFLAGS]) AC_SUBST([CODE_COVERAGE_CFLAGS]) AC_SUBST([CODE_COVERAGE_CXXFLAGS]) AC_SUBST([CODE_COVERAGE_LIBS]) ]) AC_DEFUN([AX_CODE_COVERAGE],[ dnl Check for --enable-code-coverage # allow to override gcov location AC_ARG_WITH([gcov], [AS_HELP_STRING([--with-gcov[=GCOV]], [use given GCOV for coverage (GCOV=gcov).])], [_AX_CODE_COVERAGE_GCOV_PROG_WITH=$with_gcov], [_AX_CODE_COVERAGE_GCOV_PROG_WITH=gcov]) AC_MSG_CHECKING([whether to build with code coverage support]) AC_ARG_ENABLE([code-coverage], AS_HELP_STRING([--enable-code-coverage], [Whether to enable code coverage support]),, enable_code_coverage=no) AM_CONDITIONAL([CODE_COVERAGE_ENABLED], [test "x$enable_code_coverage" = xyes]) AC_SUBST([CODE_COVERAGE_ENABLED], [$enable_code_coverage]) AC_MSG_RESULT($enable_code_coverage) AS_IF([ test "x$enable_code_coverage" = xyes ], [ _AX_CODE_COVERAGE_ENABLED ]) _AX_CODE_COVERAGE_RULES ]) tpm2-pkcs11-1.7.0/m4/libtool.m40000644000175000017500000112676314124412605012667 00000000000000# libtool.m4 - Configure libtool for the host system. -*-Autoconf-*- # # Copyright (C) 1996-2001, 2003-2015 Free Software Foundation, Inc. # Written by Gordon Matzigkeit, 1996 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. m4_define([_LT_COPYING], [dnl # Copyright (C) 2014 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program or library that is built # using GNU Libtool, you may include this file under the same # distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . ]) # serial 58 LT_INIT # LT_PREREQ(VERSION) # ------------------ # Complain and exit if this libtool version is less that VERSION. m4_defun([LT_PREREQ], [m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1, [m4_default([$3], [m4_fatal([Libtool version $1 or higher is required], 63)])], [$2])]) # _LT_CHECK_BUILDDIR # ------------------ # Complain if the absolute build directory name contains unusual characters m4_defun([_LT_CHECK_BUILDDIR], [case `pwd` in *\ * | *\ *) AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;; esac ]) # LT_INIT([OPTIONS]) # ------------------ AC_DEFUN([LT_INIT], [AC_PREREQ([2.62])dnl We use AC_PATH_PROGS_FEATURE_CHECK AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl AC_BEFORE([$0], [LT_LANG])dnl AC_BEFORE([$0], [LT_OUTPUT])dnl AC_BEFORE([$0], [LTDL_INIT])dnl m4_require([_LT_CHECK_BUILDDIR])dnl dnl Autoconf doesn't catch unexpanded LT_ macros by default: m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4 dnl unless we require an AC_DEFUNed macro: AC_REQUIRE([LTOPTIONS_VERSION])dnl AC_REQUIRE([LTSUGAR_VERSION])dnl AC_REQUIRE([LTVERSION_VERSION])dnl AC_REQUIRE([LTOBSOLETE_VERSION])dnl m4_require([_LT_PROG_LTMAIN])dnl _LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}]) dnl Parse OPTIONS _LT_SET_OPTIONS([$0], [$1]) # This can be used to rebuild libtool when needed LIBTOOL_DEPS=$ltmain # Always use our own libtool. LIBTOOL='$(SHELL) $(top_builddir)/libtool' AC_SUBST(LIBTOOL)dnl _LT_SETUP # Only expand once: m4_define([LT_INIT]) ])# LT_INIT # Old names: AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT]) AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_PROG_LIBTOOL], []) dnl AC_DEFUN([AM_PROG_LIBTOOL], []) # _LT_PREPARE_CC_BASENAME # ----------------------- m4_defun([_LT_PREPARE_CC_BASENAME], [ # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in @S|@*""; do case $cc_temp in compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;; distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } ])# _LT_PREPARE_CC_BASENAME # _LT_CC_BASENAME(CC) # ------------------- # It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME, # but that macro is also expanded into generated libtool script, which # arranges for $SED and $ECHO to be set by different means. m4_defun([_LT_CC_BASENAME], [m4_require([_LT_PREPARE_CC_BASENAME])dnl AC_REQUIRE([_LT_DECL_SED])dnl AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl func_cc_basename $1 cc_basename=$func_cc_basename_result ]) # _LT_FILEUTILS_DEFAULTS # ---------------------- # It is okay to use these file commands and assume they have been set # sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'. m4_defun([_LT_FILEUTILS_DEFAULTS], [: ${CP="cp -f"} : ${MV="mv -f"} : ${RM="rm -f"} ])# _LT_FILEUTILS_DEFAULTS # _LT_SETUP # --------- m4_defun([_LT_SETUP], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl _LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl dnl _LT_DECL([], [host_alias], [0], [The host system])dnl _LT_DECL([], [host], [0])dnl _LT_DECL([], [host_os], [0])dnl dnl _LT_DECL([], [build_alias], [0], [The build system])dnl _LT_DECL([], [build], [0])dnl _LT_DECL([], [build_os], [0])dnl dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([LT_PATH_LD])dnl AC_REQUIRE([LT_PATH_NM])dnl dnl AC_REQUIRE([AC_PROG_LN_S])dnl test -z "$LN_S" && LN_S="ln -s" _LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl dnl AC_REQUIRE([LT_CMD_MAX_LEN])dnl _LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl _LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_CHECK_SHELL_FEATURES])dnl m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl m4_require([_LT_CMD_RELOAD])dnl m4_require([_LT_CHECK_MAGIC_METHOD])dnl m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl m4_require([_LT_CMD_OLD_ARCHIVE])dnl m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl m4_require([_LT_WITH_SYSROOT])dnl m4_require([_LT_CMD_TRUNCATE])dnl _LT_CONFIG_LIBTOOL_INIT([ # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes INIT. if test -n "\${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi ]) if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi _LT_CHECK_OBJDIR m4_require([_LT_TAG_COMPILER])dnl case $host_os in aix3*) # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi ;; esac # Global variables: ofile=libtool can_build_shared=yes # All known linkers require a '.a' archive for static linking (except MSVC, # which needs '.lib'). libext=a with_gnu_ld=$lt_cv_prog_gnu_ld old_CC=$CC old_CFLAGS=$CFLAGS # Set sane defaults for various variables test -z "$CC" && CC=cc test -z "$LTCC" && LTCC=$CC test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS test -z "$LD" && LD=ld test -z "$ac_objext" && ac_objext=o _LT_CC_BASENAME([$compiler]) # Only perform the check for file, if the check method requires it test -z "$MAGIC_CMD" && MAGIC_CMD=file case $deplibs_check_method in file_magic*) if test "$file_magic_cmd" = '$MAGIC_CMD'; then _LT_PATH_MAGIC fi ;; esac # Use C for the default configuration in the libtool script LT_SUPPORTED_TAG([CC]) _LT_LANG_C_CONFIG _LT_LANG_DEFAULT_CONFIG _LT_CONFIG_COMMANDS ])# _LT_SETUP # _LT_PREPARE_SED_QUOTE_VARS # -------------------------- # Define a few sed substitution that help us do robust quoting. m4_defun([_LT_PREPARE_SED_QUOTE_VARS], [# Backslashify metacharacters that are still active within # double-quoted strings. sed_quote_subst='s/\([["`$\\]]\)/\\\1/g' # Same as above, but do not quote variable references. double_quote_subst='s/\([["`\\]]\)/\\\1/g' # Sed substitution to delay expansion of an escaped shell variable in a # double_quote_subst'ed string. delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' # Sed substitution to delay expansion of an escaped single quote. delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g' # Sed substitution to avoid accidental globbing in evaled expressions no_glob_subst='s/\*/\\\*/g' ]) # _LT_PROG_LTMAIN # --------------- # Note that this code is called both from 'configure', and 'config.status' # now that we use AC_CONFIG_COMMANDS to generate libtool. Notably, # 'config.status' has no value for ac_aux_dir unless we are using Automake, # so we pass a copy along to make sure it has a sensible value anyway. m4_defun([_LT_PROG_LTMAIN], [m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl _LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir']) ltmain=$ac_aux_dir/ltmain.sh ])# _LT_PROG_LTMAIN ## ------------------------------------- ## ## Accumulate code for creating libtool. ## ## ------------------------------------- ## # So that we can recreate a full libtool script including additional # tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS # in macros and then make a single call at the end using the 'libtool' # label. # _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS]) # ---------------------------------------- # Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later. m4_define([_LT_CONFIG_LIBTOOL_INIT], [m4_ifval([$1], [m4_append([_LT_OUTPUT_LIBTOOL_INIT], [$1 ])])]) # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_INIT]) # _LT_CONFIG_LIBTOOL([COMMANDS]) # ------------------------------ # Register COMMANDS to be passed to AC_CONFIG_COMMANDS later. m4_define([_LT_CONFIG_LIBTOOL], [m4_ifval([$1], [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS], [$1 ])])]) # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS]) # _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS]) # ----------------------------------------------------- m4_defun([_LT_CONFIG_SAVE_COMMANDS], [_LT_CONFIG_LIBTOOL([$1]) _LT_CONFIG_LIBTOOL_INIT([$2]) ]) # _LT_FORMAT_COMMENT([COMMENT]) # ----------------------------- # Add leading comment marks to the start of each line, and a trailing # full-stop to the whole comment if one is not present already. m4_define([_LT_FORMAT_COMMENT], [m4_ifval([$1], [ m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])], [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.]) )]) ## ------------------------ ## ## FIXME: Eliminate VARNAME ## ## ------------------------ ## # _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?]) # ------------------------------------------------------------------- # CONFIGNAME is the name given to the value in the libtool script. # VARNAME is the (base) name used in the configure script. # VALUE may be 0, 1 or 2 for a computed quote escaped value based on # VARNAME. Any other value will be used directly. m4_define([_LT_DECL], [lt_if_append_uniq([lt_decl_varnames], [$2], [, ], [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name], [m4_ifval([$1], [$1], [$2])]) lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3]) m4_ifval([$4], [lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])]) lt_dict_add_subkey([lt_decl_dict], [$2], [tagged?], [m4_ifval([$5], [yes], [no])])]) ]) # _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION]) # -------------------------------------------------------- m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])]) # lt_decl_tag_varnames([SEPARATOR], [VARNAME1...]) # ------------------------------------------------ m4_define([lt_decl_tag_varnames], [_lt_decl_filter([tagged?], [yes], $@)]) # _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..]) # --------------------------------------------------------- m4_define([_lt_decl_filter], [m4_case([$#], [0], [m4_fatal([$0: too few arguments: $#])], [1], [m4_fatal([$0: too few arguments: $#: $1])], [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)], [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)], [lt_dict_filter([lt_decl_dict], $@)])[]dnl ]) # lt_decl_quote_varnames([SEPARATOR], [VARNAME1...]) # -------------------------------------------------- m4_define([lt_decl_quote_varnames], [_lt_decl_filter([value], [1], $@)]) # lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...]) # --------------------------------------------------- m4_define([lt_decl_dquote_varnames], [_lt_decl_filter([value], [2], $@)]) # lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...]) # --------------------------------------------------- m4_define([lt_decl_varnames_tagged], [m4_assert([$# <= 2])dnl _$0(m4_quote(m4_default([$1], [[, ]])), m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]), m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))]) m4_define([_lt_decl_varnames_tagged], [m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])]) # lt_decl_all_varnames([SEPARATOR], [VARNAME1...]) # ------------------------------------------------ m4_define([lt_decl_all_varnames], [_$0(m4_quote(m4_default([$1], [[, ]])), m4_if([$2], [], m4_quote(lt_decl_varnames), m4_quote(m4_shift($@))))[]dnl ]) m4_define([_lt_decl_all_varnames], [lt_join($@, lt_decl_varnames_tagged([$1], lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl ]) # _LT_CONFIG_STATUS_DECLARE([VARNAME]) # ------------------------------------ # Quote a variable value, and forward it to 'config.status' so that its # declaration there will have the same value as in 'configure'. VARNAME # must have a single quote delimited value for this to work. m4_define([_LT_CONFIG_STATUS_DECLARE], [$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`']) # _LT_CONFIG_STATUS_DECLARATIONS # ------------------------------ # We delimit libtool config variables with single quotes, so when # we write them to config.status, we have to be sure to quote all # embedded single quotes properly. In configure, this macro expands # each variable declared with _LT_DECL (and _LT_TAGDECL) into: # # ='`$ECHO "$" | $SED "$delay_single_quote_subst"`' m4_defun([_LT_CONFIG_STATUS_DECLARATIONS], [m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames), [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])]) # _LT_LIBTOOL_TAGS # ---------------- # Output comment and list of tags supported by the script m4_defun([_LT_LIBTOOL_TAGS], [_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl available_tags='_LT_TAGS'dnl ]) # _LT_LIBTOOL_DECLARE(VARNAME, [TAG]) # ----------------------------------- # Extract the dictionary values for VARNAME (optionally with TAG) and # expand to a commented shell variable setting: # # # Some comment about what VAR is for. # visible_name=$lt_internal_name m4_define([_LT_LIBTOOL_DECLARE], [_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [description])))[]dnl m4_pushdef([_libtool_name], m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])), [0], [_libtool_name=[$]$1], [1], [_libtool_name=$lt_[]$1], [2], [_libtool_name=$lt_[]$1], [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl ]) # _LT_LIBTOOL_CONFIG_VARS # ----------------------- # Produce commented declarations of non-tagged libtool config variables # suitable for insertion in the LIBTOOL CONFIG section of the 'libtool' # script. Tagged libtool config variables (even for the LIBTOOL CONFIG # section) are produced by _LT_LIBTOOL_TAG_VARS. m4_defun([_LT_LIBTOOL_CONFIG_VARS], [m4_foreach([_lt_var], m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)), [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])]) # _LT_LIBTOOL_TAG_VARS(TAG) # ------------------------- m4_define([_LT_LIBTOOL_TAG_VARS], [m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames), [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])]) # _LT_TAGVAR(VARNAME, [TAGNAME]) # ------------------------------ m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])]) # _LT_CONFIG_COMMANDS # ------------------- # Send accumulated output to $CONFIG_STATUS. Thanks to the lists of # variables for single and double quote escaping we saved from calls # to _LT_DECL, we can put quote escaped variables declarations # into 'config.status', and then the shell code to quote escape them in # for loops in 'config.status'. Finally, any additional code accumulated # from calls to _LT_CONFIG_LIBTOOL_INIT is expanded. m4_defun([_LT_CONFIG_COMMANDS], [AC_PROVIDE_IFELSE([LT_OUTPUT], dnl If the libtool generation code has been placed in $CONFIG_LT, dnl instead of duplicating it all over again into config.status, dnl then we will have config.status run $CONFIG_LT later, so it dnl needs to know what name is stored there: [AC_CONFIG_COMMANDS([libtool], [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])], dnl If the libtool generation code is destined for config.status, dnl expand the accumulated commands and init code now: [AC_CONFIG_COMMANDS([libtool], [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])]) ])#_LT_CONFIG_COMMANDS # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT], [ # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH sed_quote_subst='$sed_quote_subst' double_quote_subst='$double_quote_subst' delay_variable_subst='$delay_variable_subst' _LT_CONFIG_STATUS_DECLARATIONS LTCC='$LTCC' LTCFLAGS='$LTCFLAGS' compiler='$compiler_DEFAULT' # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$[]1 _LTECHO_EOF' } # Quote evaled strings. for var in lt_decl_all_varnames([[ \ ]], lt_decl_quote_varnames); do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[[\\\\\\\`\\"\\\$]]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done # Double-quote double-evaled strings. for var in lt_decl_all_varnames([[ \ ]], lt_decl_dquote_varnames); do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[[\\\\\\\`\\"\\\$]]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done _LT_OUTPUT_LIBTOOL_INIT ]) # _LT_GENERATED_FILE_INIT(FILE, [COMMENT]) # ------------------------------------ # Generate a child script FILE with all initialization necessary to # reuse the environment learned by the parent script, and make the # file executable. If COMMENT is supplied, it is inserted after the # '#!' sequence but before initialization text begins. After this # macro, additional text can be appended to FILE to form the body of # the child script. The macro ends with non-zero status if the # file could not be fully written (such as if the disk is full). m4_ifdef([AS_INIT_GENERATED], [m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])], [m4_defun([_LT_GENERATED_FILE_INIT], [m4_require([AS_PREPARE])]dnl [m4_pushdef([AS_MESSAGE_LOG_FD])]dnl [lt_write_fail=0 cat >$1 <<_ASEOF || lt_write_fail=1 #! $SHELL # Generated by $as_me. $2 SHELL=\${CONFIG_SHELL-$SHELL} export SHELL _ASEOF cat >>$1 <<\_ASEOF || lt_write_fail=1 AS_SHELL_SANITIZE _AS_PREPARE exec AS_MESSAGE_FD>&1 _ASEOF test 0 = "$lt_write_fail" && chmod +x $1[]dnl m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT # LT_OUTPUT # --------- # This macro allows early generation of the libtool script (before # AC_OUTPUT is called), incase it is used in configure for compilation # tests. AC_DEFUN([LT_OUTPUT], [: ${CONFIG_LT=./config.lt} AC_MSG_NOTICE([creating $CONFIG_LT]) _LT_GENERATED_FILE_INIT(["$CONFIG_LT"], [# Run this file to recreate a libtool stub with the current configuration.]) cat >>"$CONFIG_LT" <<\_LTEOF lt_cl_silent=false exec AS_MESSAGE_LOG_FD>>config.log { echo AS_BOX([Running $as_me.]) } >&AS_MESSAGE_LOG_FD lt_cl_help="\ '$as_me' creates a local libtool stub from the current configuration, for use in further configure time tests before the real libtool is generated. Usage: $[0] [[OPTIONS]] -h, --help print this help, then exit -V, --version print version number, then exit -q, --quiet do not print progress messages -d, --debug don't remove temporary files Report bugs to ." lt_cl_version="\ m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION]) configured by $[0], generated by m4_PACKAGE_STRING. Copyright (C) 2011 Free Software Foundation, Inc. This config.lt script is free software; the Free Software Foundation gives unlimited permision to copy, distribute and modify it." while test 0 != $[#] do case $[1] in --version | --v* | -V ) echo "$lt_cl_version"; exit 0 ;; --help | --h* | -h ) echo "$lt_cl_help"; exit 0 ;; --debug | --d* | -d ) debug=: ;; --quiet | --q* | --silent | --s* | -q ) lt_cl_silent=: ;; -*) AC_MSG_ERROR([unrecognized option: $[1] Try '$[0] --help' for more information.]) ;; *) AC_MSG_ERROR([unrecognized argument: $[1] Try '$[0] --help' for more information.]) ;; esac shift done if $lt_cl_silent; then exec AS_MESSAGE_FD>/dev/null fi _LTEOF cat >>"$CONFIG_LT" <<_LTEOF _LT_OUTPUT_LIBTOOL_COMMANDS_INIT _LTEOF cat >>"$CONFIG_LT" <<\_LTEOF AC_MSG_NOTICE([creating $ofile]) _LT_OUTPUT_LIBTOOL_COMMANDS AS_EXIT(0) _LTEOF chmod +x "$CONFIG_LT" # configure is writing to config.log, but config.lt does its own redirection, # appending to config.log, which fails on DOS, as config.log is still kept # open by configure. Here we exec the FD to /dev/null, effectively closing # config.log, so it can be properly (re)opened and appended to by config.lt. lt_cl_success=: test yes = "$silent" && lt_config_lt_args="$lt_config_lt_args --quiet" exec AS_MESSAGE_LOG_FD>/dev/null $SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false exec AS_MESSAGE_LOG_FD>>config.log $lt_cl_success || AS_EXIT(1) ])# LT_OUTPUT # _LT_CONFIG(TAG) # --------------- # If TAG is the built-in tag, create an initial libtool script with a # default configuration from the untagged config vars. Otherwise add code # to config.status for appending the configuration named by TAG from the # matching tagged config vars. m4_defun([_LT_CONFIG], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl _LT_CONFIG_SAVE_COMMANDS([ m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl m4_if(_LT_TAG, [C], [ # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes. if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi cfgfile=${ofile}T trap "$RM \"$cfgfile\"; exit 1" 1 2 15 $RM "$cfgfile" cat <<_LT_EOF >> "$cfgfile" #! $SHELL # Generated automatically by $as_me ($PACKAGE) $VERSION # NOTE: Changes made to this file will be lost: look at ltmain.sh. # Provide generalized library-building support services. # Written by Gordon Matzigkeit, 1996 _LT_COPYING _LT_LIBTOOL_TAGS # Configured defaults for sys_lib_dlsearch_path munging. : \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"} # ### BEGIN LIBTOOL CONFIG _LT_LIBTOOL_CONFIG_VARS _LT_LIBTOOL_TAG_VARS # ### END LIBTOOL CONFIG _LT_EOF cat <<'_LT_EOF' >> "$cfgfile" # ### BEGIN FUNCTIONS SHARED WITH CONFIGURE _LT_PREPARE_MUNGE_PATH_LIST _LT_PREPARE_CC_BASENAME # ### END FUNCTIONS SHARED WITH CONFIGURE _LT_EOF case $host_os in aix3*) cat <<\_LT_EOF >> "$cfgfile" # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi _LT_EOF ;; esac _LT_PROG_LTMAIN # We use sed instead of cat because bash on DJGPP gets confused if # if finds mixed CR/LF and LF-only lines. Since sed operates in # text mode, it properly converts lines to CR/LF. This bash problem # is reportedly fixed, but why not run on old versions too? sed '$q' "$ltmain" >> "$cfgfile" \ || (rm -f "$cfgfile"; exit 1) mv -f "$cfgfile" "$ofile" || (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") chmod +x "$ofile" ], [cat <<_LT_EOF >> "$ofile" dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded dnl in a comment (ie after a #). # ### BEGIN LIBTOOL TAG CONFIG: $1 _LT_LIBTOOL_TAG_VARS(_LT_TAG) # ### END LIBTOOL TAG CONFIG: $1 _LT_EOF ])dnl /m4_if ], [m4_if([$1], [], [ PACKAGE='$PACKAGE' VERSION='$VERSION' RM='$RM' ofile='$ofile'], []) ])dnl /_LT_CONFIG_SAVE_COMMANDS ])# _LT_CONFIG # LT_SUPPORTED_TAG(TAG) # --------------------- # Trace this macro to discover what tags are supported by the libtool # --tag option, using: # autoconf --trace 'LT_SUPPORTED_TAG:$1' AC_DEFUN([LT_SUPPORTED_TAG], []) # C support is built-in for now m4_define([_LT_LANG_C_enabled], []) m4_define([_LT_TAGS], []) # LT_LANG(LANG) # ------------- # Enable libtool support for the given language if not already enabled. AC_DEFUN([LT_LANG], [AC_BEFORE([$0], [LT_OUTPUT])dnl m4_case([$1], [C], [_LT_LANG(C)], [C++], [_LT_LANG(CXX)], [Go], [_LT_LANG(GO)], [Java], [_LT_LANG(GCJ)], [Fortran 77], [_LT_LANG(F77)], [Fortran], [_LT_LANG(FC)], [Windows Resource], [_LT_LANG(RC)], [m4_ifdef([_LT_LANG_]$1[_CONFIG], [_LT_LANG($1)], [m4_fatal([$0: unsupported language: "$1"])])])dnl ])# LT_LANG # _LT_LANG(LANGNAME) # ------------------ m4_defun([_LT_LANG], [m4_ifdef([_LT_LANG_]$1[_enabled], [], [LT_SUPPORTED_TAG([$1])dnl m4_append([_LT_TAGS], [$1 ])dnl m4_define([_LT_LANG_]$1[_enabled], [])dnl _LT_LANG_$1_CONFIG($1)])dnl ])# _LT_LANG m4_ifndef([AC_PROG_GO], [ ############################################################ # NOTE: This macro has been submitted for inclusion into # # GNU Autoconf as AC_PROG_GO. When it is available in # # a released version of Autoconf we should remove this # # macro and use it instead. # ############################################################ m4_defun([AC_PROG_GO], [AC_LANG_PUSH(Go)dnl AC_ARG_VAR([GOC], [Go compiler command])dnl AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl _AC_ARG_VAR_LDFLAGS()dnl AC_CHECK_TOOL(GOC, gccgo) if test -z "$GOC"; then if test -n "$ac_tool_prefix"; then AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo]) fi fi if test -z "$GOC"; then AC_CHECK_PROG(GOC, gccgo, gccgo, false) fi ])#m4_defun ])#m4_ifndef # _LT_LANG_DEFAULT_CONFIG # ----------------------- m4_defun([_LT_LANG_DEFAULT_CONFIG], [AC_PROVIDE_IFELSE([AC_PROG_CXX], [LT_LANG(CXX)], [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])]) AC_PROVIDE_IFELSE([AC_PROG_F77], [LT_LANG(F77)], [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])]) AC_PROVIDE_IFELSE([AC_PROG_FC], [LT_LANG(FC)], [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])]) dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal dnl pulling things in needlessly. AC_PROVIDE_IFELSE([AC_PROG_GCJ], [LT_LANG(GCJ)], [AC_PROVIDE_IFELSE([A][M_PROG_GCJ], [LT_LANG(GCJ)], [AC_PROVIDE_IFELSE([LT_PROG_GCJ], [LT_LANG(GCJ)], [m4_ifdef([AC_PROG_GCJ], [m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])]) m4_ifdef([A][M_PROG_GCJ], [m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])]) m4_ifdef([LT_PROG_GCJ], [m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])]) AC_PROVIDE_IFELSE([AC_PROG_GO], [LT_LANG(GO)], [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])]) AC_PROVIDE_IFELSE([LT_PROG_RC], [LT_LANG(RC)], [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])]) ])# _LT_LANG_DEFAULT_CONFIG # Obsolete macros: AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)]) AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)]) AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)]) AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)]) AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_CXX], []) dnl AC_DEFUN([AC_LIBTOOL_F77], []) dnl AC_DEFUN([AC_LIBTOOL_FC], []) dnl AC_DEFUN([AC_LIBTOOL_GCJ], []) dnl AC_DEFUN([AC_LIBTOOL_RC], []) # _LT_TAG_COMPILER # ---------------- m4_defun([_LT_TAG_COMPILER], [AC_REQUIRE([AC_PROG_CC])dnl _LT_DECL([LTCC], [CC], [1], [A C compiler])dnl _LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl _LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl _LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC ])# _LT_TAG_COMPILER # _LT_COMPILER_BOILERPLATE # ------------------------ # Check for compiler boilerplate output or warnings with # the simple compiler test code. m4_defun([_LT_COMPILER_BOILERPLATE], [m4_require([_LT_DECL_SED])dnl ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" >conftest.$ac_ext eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_compiler_boilerplate=`cat conftest.err` $RM conftest* ])# _LT_COMPILER_BOILERPLATE # _LT_LINKER_BOILERPLATE # ---------------------- # Check for linker boilerplate output or warnings with # the simple link test code. m4_defun([_LT_LINKER_BOILERPLATE], [m4_require([_LT_DECL_SED])dnl ac_outfile=conftest.$ac_objext echo "$lt_simple_link_test_code" >conftest.$ac_ext eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_linker_boilerplate=`cat conftest.err` $RM -r conftest* ])# _LT_LINKER_BOILERPLATE # _LT_REQUIRED_DARWIN_CHECKS # ------------------------- m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[ case $host_os in rhapsody* | darwin*) AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:]) AC_CHECK_TOOL([NMEDIT], [nmedit], [:]) AC_CHECK_TOOL([LIPO], [lipo], [:]) AC_CHECK_TOOL([OTOOL], [otool], [:]) AC_CHECK_TOOL([OTOOL64], [otool64], [:]) _LT_DECL([], [DSYMUTIL], [1], [Tool to manipulate archived DWARF debug symbol files on Mac OS X]) _LT_DECL([], [NMEDIT], [1], [Tool to change global to local symbols on Mac OS X]) _LT_DECL([], [LIPO], [1], [Tool to manipulate fat objects and archives on Mac OS X]) _LT_DECL([], [OTOOL], [1], [ldd/readelf like tool for Mach-O binaries on Mac OS X]) _LT_DECL([], [OTOOL64], [1], [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4]) AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod], [lt_cv_apple_cc_single_mod=no if test -z "$LT_MULTI_MODULE"; then # By default we will add the -single_module flag. You can override # by either setting the environment variable LT_MULTI_MODULE # non-empty at configure time, or by adding -multi_module to the # link flags. rm -rf libconftest.dylib* echo "int foo(void){return 1;}" > conftest.c echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c 2>conftest.err _lt_result=$? # If there is a non-empty error log, and "single_module" # appears in it, assume the flag caused a linker warning if test -s conftest.err && $GREP single_module conftest.err; then cat conftest.err >&AS_MESSAGE_LOG_FD # Otherwise, if the output was created with a 0 exit code from # the compiler, it worked. elif test -f libconftest.dylib && test 0 = "$_lt_result"; then lt_cv_apple_cc_single_mod=yes else cat conftest.err >&AS_MESSAGE_LOG_FD fi rm -rf libconftest.dylib* rm -f conftest.* fi]) AC_CACHE_CHECK([for -exported_symbols_list linker flag], [lt_cv_ld_exported_symbols_list], [lt_cv_ld_exported_symbols_list=no save_LDFLAGS=$LDFLAGS echo "_main" > conftest.sym LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym" AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], [lt_cv_ld_exported_symbols_list=yes], [lt_cv_ld_exported_symbols_list=no]) LDFLAGS=$save_LDFLAGS ]) AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load], [lt_cv_ld_force_load=no cat > conftest.c << _LT_EOF int forced_loaded() { return 2;} _LT_EOF echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD echo "$AR cr libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD $AR cr libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD cat > conftest.c << _LT_EOF int main() { return 0;} _LT_EOF echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err _lt_result=$? if test -s conftest.err && $GREP force_load conftest.err; then cat conftest.err >&AS_MESSAGE_LOG_FD elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then lt_cv_ld_force_load=yes else cat conftest.err >&AS_MESSAGE_LOG_FD fi rm -f conftest.err libconftest.a conftest conftest.c rm -rf conftest.dSYM ]) case $host_os in rhapsody* | darwin1.[[012]]) _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;; darwin1.*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; darwin*) # darwin 5.x on # if running on 10.5 or later, the deployment target defaults # to the OS version, if on x86, and 10.4, the deployment # target defaults to 10.4. Don't you love it? case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in 10.0,*86*-darwin8*|10.0,*-darwin[[91]]*) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; 10.[[012]][[,.]]*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; 10.*) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; esac ;; esac if test yes = "$lt_cv_apple_cc_single_mod"; then _lt_dar_single_mod='$single_module' fi if test yes = "$lt_cv_ld_exported_symbols_list"; then _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym' else _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib' fi if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then _lt_dsymutil='~$DSYMUTIL $lib || :' else _lt_dsymutil= fi ;; esac ]) # _LT_DARWIN_LINKER_FEATURES([TAG]) # --------------------------------- # Checks for linker and compiler features on darwin m4_defun([_LT_DARWIN_LINKER_FEATURES], [ m4_require([_LT_REQUIRED_DARWIN_CHECKS]) _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported if test yes = "$lt_cv_ld_force_load"; then _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`' m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes], [FC], [_LT_TAGVAR(compiler_needs_object, $1)=yes]) else _LT_TAGVAR(whole_archive_flag_spec, $1)='' fi _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined case $cc_basename in ifort*|nagfor*) _lt_dar_can_shared=yes ;; *) _lt_dar_can_shared=$GCC ;; esac if test yes = "$_lt_dar_can_shared"; then output_verbose_link_cmd=func_echo_all _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil" _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil" _LT_TAGVAR(archive_expsym_cmds, $1)="sed 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil" _LT_TAGVAR(module_expsym_cmds, $1)="sed -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil" m4_if([$1], [CXX], [ if test yes != "$lt_cv_apple_cc_single_mod"; then _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil" _LT_TAGVAR(archive_expsym_cmds, $1)="sed 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil" fi ],[]) else _LT_TAGVAR(ld_shlibs, $1)=no fi ]) # _LT_SYS_MODULE_PATH_AIX([TAGNAME]) # ---------------------------------- # Links a minimal program and checks the executable # for the system default hardcoded library path. In most cases, # this is /usr/lib:/lib, but when the MPI compilers are used # the location of the communication and MPI libs are included too. # If we don't find anything, use the default library path according # to the aix ld manual. # Store the results from the different compilers for each TAGNAME. # Allow to override them for all tags through lt_cv_aix_libpath. m4_defun([_LT_SYS_MODULE_PATH_AIX], [m4_require([_LT_DECL_SED])dnl if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])], [AC_LINK_IFELSE([AC_LANG_PROGRAM],[ lt_aix_libpath_sed='[ /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }]' _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi],[]) if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib fi ]) aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1]) fi ])# _LT_SYS_MODULE_PATH_AIX # _LT_SHELL_INIT(ARG) # ------------------- m4_define([_LT_SHELL_INIT], [m4_divert_text([M4SH-INIT], [$1 ])])# _LT_SHELL_INIT # _LT_PROG_ECHO_BACKSLASH # ----------------------- # Find how we can fake an echo command that does not interpret backslash. # In particular, with Autoconf 2.60 or later we add some code to the start # of the generated configure script that will find a shell with a builtin # printf (that we can use as an echo command). m4_defun([_LT_PROG_ECHO_BACKSLASH], [ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO AC_MSG_CHECKING([how to print strings]) # Test print first, because it will be a builtin if present. if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \ test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='print -r --' elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='printf %s\n' else # Use this function as a fallback that always works. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $[]1 _LTECHO_EOF' } ECHO='func_fallback_echo' fi # func_echo_all arg... # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "$*" } case $ECHO in printf*) AC_MSG_RESULT([printf]) ;; print*) AC_MSG_RESULT([print -r]) ;; *) AC_MSG_RESULT([cat]) ;; esac m4_ifdef([_AS_DETECT_SUGGESTED], [_AS_DETECT_SUGGESTED([ test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || ( ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO PATH=/empty FPATH=/empty; export PATH FPATH test "X`printf %s $ECHO`" = "X$ECHO" \ || test "X`print -r -- $ECHO`" = "X$ECHO" )])]) _LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts]) _LT_DECL([], [ECHO], [1], [An echo program that protects backslashes]) ])# _LT_PROG_ECHO_BACKSLASH # _LT_WITH_SYSROOT # ---------------- AC_DEFUN([_LT_WITH_SYSROOT], [AC_MSG_CHECKING([for sysroot]) AC_ARG_WITH([sysroot], [AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@], [Search for dependent libraries within DIR (or the compiler's sysroot if not specified).])], [], [with_sysroot=no]) dnl lt_sysroot will always be passed unquoted. We quote it here dnl in case the user passed a directory name. lt_sysroot= case $with_sysroot in #( yes) if test yes = "$GCC"; then lt_sysroot=`$CC --print-sysroot 2>/dev/null` fi ;; #( /*) lt_sysroot=`echo "$with_sysroot" | sed -e "$sed_quote_subst"` ;; #( no|'') ;; #( *) AC_MSG_RESULT([$with_sysroot]) AC_MSG_ERROR([The sysroot must be an absolute path.]) ;; esac AC_MSG_RESULT([${lt_sysroot:-no}]) _LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl [dependent libraries, and where our libraries should be installed.])]) # _LT_ENABLE_LOCK # --------------- m4_defun([_LT_ENABLE_LOCK], [AC_ARG_ENABLE([libtool-lock], [AS_HELP_STRING([--disable-libtool-lock], [avoid locking (might break parallel builds)])]) test no = "$enable_libtool_lock" || enable_libtool_lock=yes # Some flags need to be propagated to the compiler or linker for good # libtool support. case $host in ia64-*-hpux*) # Find out what ABI is being produced by ac_compile, and set mode # options accordingly. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.$ac_objext` in *ELF-32*) HPUX_IA64_MODE=32 ;; *ELF-64*) HPUX_IA64_MODE=64 ;; esac fi rm -rf conftest* ;; *-*-irix6*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then if test yes = "$lt_cv_prog_gnu_ld"; then case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -melf32bsmip" ;; *N32*) LD="${LD-ld} -melf32bmipn32" ;; *64-bit*) LD="${LD-ld} -melf64bmip" ;; esac else case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -32" ;; *N32*) LD="${LD-ld} -n32" ;; *64-bit*) LD="${LD-ld} -64" ;; esac fi fi rm -rf conftest* ;; mips64*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then emul=elf case `/usr/bin/file conftest.$ac_objext` in *32-bit*) emul="${emul}32" ;; *64-bit*) emul="${emul}64" ;; esac case `/usr/bin/file conftest.$ac_objext` in *MSB*) emul="${emul}btsmip" ;; *LSB*) emul="${emul}ltsmip" ;; esac case `/usr/bin/file conftest.$ac_objext` in *N32*) emul="${emul}n32" ;; esac LD="${LD-ld} -m $emul" fi rm -rf conftest* ;; x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. Note that the listed cases only cover the # situations where additional linker options are needed (such as when # doing 32-bit compilation for a host where ld defaults to 64-bit, or # vice versa); the common cases where no linker options are needed do # not appear in the list. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.o` in *32-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_i386_fbsd" ;; x86_64-*linux*) case `/usr/bin/file conftest.o` in *x86-64*) LD="${LD-ld} -m elf32_x86_64" ;; *) LD="${LD-ld} -m elf_i386" ;; esac ;; powerpc64le-*linux*) LD="${LD-ld} -m elf32lppclinux" ;; powerpc64-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) LD="${LD-ld} -m elf_s390" ;; sparc64-*linux*) LD="${LD-ld} -m elf32_sparc" ;; esac ;; *64-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_x86_64_fbsd" ;; x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; powerpcle-*linux*) LD="${LD-ld} -m elf64lppc" ;; powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) LD="${LD-ld} -m elf64_s390" ;; sparc*-*linux*) LD="${LD-ld} -m elf64_sparc" ;; esac ;; esac fi rm -rf conftest* ;; *-*-sco3.2v5*) # On SCO OpenServer 5, we need -belf to get full-featured binaries. SAVE_CFLAGS=$CFLAGS CFLAGS="$CFLAGS -belf" AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf, [AC_LANG_PUSH(C) AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no]) AC_LANG_POP]) if test yes != "$lt_cv_cc_needs_belf"; then # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf CFLAGS=$SAVE_CFLAGS fi ;; *-*solaris*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `/usr/bin/file conftest.o` in *64-bit*) case $lt_cv_prog_gnu_ld in yes*) case $host in i?86-*-solaris*|x86_64-*-solaris*) LD="${LD-ld} -m elf_x86_64" ;; sparc*-*-solaris*) LD="${LD-ld} -m elf64_sparc" ;; esac # GNU ld 2.21 introduced _sol2 emulations. Use them if available. if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then LD=${LD-ld}_sol2 fi ;; *) if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then LD="${LD-ld} -64" fi ;; esac ;; esac fi rm -rf conftest* ;; esac need_locks=$enable_libtool_lock ])# _LT_ENABLE_LOCK # _LT_PROG_AR # ----------- m4_defun([_LT_PROG_AR], [AC_CHECK_TOOLS(AR, [ar], false) : ${AR=ar} : ${AR_FLAGS=cr} _LT_DECL([], [AR], [1], [The archiver]) _LT_DECL([], [AR_FLAGS], [1], [Flags to create an archive]) AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file], [lt_cv_ar_at_file=no AC_COMPILE_IFELSE([AC_LANG_PROGRAM], [echo conftest.$ac_objext > conftest.lst lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD' AC_TRY_EVAL([lt_ar_try]) if test 0 -eq "$ac_status"; then # Ensure the archiver fails upon bogus file names. rm -f conftest.$ac_objext libconftest.a AC_TRY_EVAL([lt_ar_try]) if test 0 -ne "$ac_status"; then lt_cv_ar_at_file=@ fi fi rm -f conftest.* libconftest.a ]) ]) if test no = "$lt_cv_ar_at_file"; then archiver_list_spec= else archiver_list_spec=$lt_cv_ar_at_file fi _LT_DECL([], [archiver_list_spec], [1], [How to feed a file listing to the archiver]) ])# _LT_PROG_AR # _LT_CMD_OLD_ARCHIVE # ------------------- m4_defun([_LT_CMD_OLD_ARCHIVE], [_LT_PROG_AR AC_CHECK_TOOL(STRIP, strip, :) test -z "$STRIP" && STRIP=: _LT_DECL([], [STRIP], [1], [A symbol stripping program]) AC_CHECK_TOOL(RANLIB, ranlib, :) test -z "$RANLIB" && RANLIB=: _LT_DECL([], [RANLIB], [1], [Commands used to install an old-style archive]) # Determine commands to create old-style static archives. old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs' old_postinstall_cmds='chmod 644 $oldlib' old_postuninstall_cmds= if test -n "$RANLIB"; then case $host_os in bitrig* | openbsd*) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib" ;; *) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib" ;; esac old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib" fi case $host_os in darwin*) lock_old_archive_extraction=yes ;; *) lock_old_archive_extraction=no ;; esac _LT_DECL([], [old_postinstall_cmds], [2]) _LT_DECL([], [old_postuninstall_cmds], [2]) _LT_TAGDECL([], [old_archive_cmds], [2], [Commands used to build an old-style archive]) _LT_DECL([], [lock_old_archive_extraction], [0], [Whether to use a lock for old archive extraction]) ])# _LT_CMD_OLD_ARCHIVE # _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE]) # ---------------------------------------------------------------- # Check whether the given compiler option works AC_DEFUN([_LT_COMPILER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_SED])dnl AC_CACHE_CHECK([$1], [$2], [$2=no m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4]) echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="$3" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi fi $RM conftest* ]) if test yes = "[$]$2"; then m4_if([$5], , :, [$5]) else m4_if([$6], , :, [$6]) fi ])# _LT_COMPILER_OPTION # Old name: AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], []) # _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [ACTION-SUCCESS], [ACTION-FAILURE]) # ---------------------------------------------------- # Check whether the given linker option works AC_DEFUN([_LT_LINKER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_SED])dnl AC_CACHE_CHECK([$1], [$2], [$2=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS $3" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&AS_MESSAGE_LOG_FD $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi else $2=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS ]) if test yes = "[$]$2"; then m4_if([$4], , :, [$4]) else m4_if([$5], , :, [$5]) fi ])# _LT_LINKER_OPTION # Old name: AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], []) # LT_CMD_MAX_LEN #--------------- AC_DEFUN([LT_CMD_MAX_LEN], [AC_REQUIRE([AC_CANONICAL_HOST])dnl # find the maximum length of command line arguments AC_MSG_CHECKING([the maximum length of command line arguments]) AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl i=0 teststring=ABCD case $build_os in msdosdjgpp*) # On DJGPP, this test can blow up pretty badly due to problems in libc # (any single argument exceeding 2000 bytes causes a buffer overrun # during glob expansion). Even if it were fixed, the result of this # check would be larger than it should be. lt_cv_sys_max_cmd_len=12288; # 12K is about right ;; gnu*) # Under GNU Hurd, this test is not required because there is # no limit to the length of command line arguments. # Libtool will interpret -1 as no limit whatsoever lt_cv_sys_max_cmd_len=-1; ;; cygwin* | mingw* | cegcc*) # On Win9x/ME, this test blows up -- it succeeds, but takes # about 5 minutes as the teststring grows exponentially. # Worse, since 9x/ME are not pre-emptively multitasking, # you end up with a "frozen" computer, even though with patience # the test eventually succeeds (with a max line length of 256k). # Instead, let's just punt: use the minimum linelength reported by # all of the supported platforms: 8192 (on NT/2K/XP). lt_cv_sys_max_cmd_len=8192; ;; mint*) # On MiNT this can take a long time and run out of memory. lt_cv_sys_max_cmd_len=8192; ;; amigaos*) # On AmigaOS with pdksh, this test takes hours, literally. # So we just punt and use a minimum line length of 8192. lt_cv_sys_max_cmd_len=8192; ;; bitrig* | darwin* | dragonfly* | freebsd* | netbsd* | openbsd*) # This has been around since 386BSD, at least. Likely further. if test -x /sbin/sysctl; then lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` elif test -x /usr/sbin/sysctl; then lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` else lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs fi # And add a safety zone lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` ;; interix*) # We know the value 262144 and hardcode it with a safety zone (like BSD) lt_cv_sys_max_cmd_len=196608 ;; os2*) # The test takes a long time on OS/2. lt_cv_sys_max_cmd_len=8192 ;; osf*) # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not # nice to cause kernel panics so lets avoid the loop below. # First set a reasonable default. lt_cv_sys_max_cmd_len=16384 # if test -x /sbin/sysconfig; then case `/sbin/sysconfig -q proc exec_disable_arg_limit` in *1*) lt_cv_sys_max_cmd_len=-1 ;; esac fi ;; sco3.2v5*) lt_cv_sys_max_cmd_len=102400 ;; sysv5* | sco5v6* | sysv4.2uw2*) kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` if test -n "$kargmax"; then lt_cv_sys_max_cmd_len=`echo $kargmax | sed 's/.*[[ ]]//'` else lt_cv_sys_max_cmd_len=32768 fi ;; *) lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null` if test -n "$lt_cv_sys_max_cmd_len" && \ test undefined != "$lt_cv_sys_max_cmd_len"; then lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` else # Make teststring a little bigger before we do anything with it. # a 1K string should be a reasonable start. for i in 1 2 3 4 5 6 7 8; do teststring=$teststring$teststring done SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} # If test is not a shell built-in, we'll probably end up computing a # maximum length that is only half of the actual maximum length, but # we can't tell. while { test X`env echo "$teststring$teststring" 2>/dev/null` \ = "X$teststring$teststring"; } >/dev/null 2>&1 && test 17 != "$i" # 1/2 MB should be enough do i=`expr $i + 1` teststring=$teststring$teststring done # Only check the string length outside the loop. lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1` teststring= # Add a significant safety factor because C++ compilers can tack on # massive amounts of additional arguments before passing them to the # linker. It appears as though 1/2 is a usable value. lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` fi ;; esac ]) if test -n "$lt_cv_sys_max_cmd_len"; then AC_MSG_RESULT($lt_cv_sys_max_cmd_len) else AC_MSG_RESULT(none) fi max_cmd_len=$lt_cv_sys_max_cmd_len _LT_DECL([], [max_cmd_len], [0], [What is the maximum length of a command?]) ])# LT_CMD_MAX_LEN # Old name: AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], []) # _LT_HEADER_DLFCN # ---------------- m4_defun([_LT_HEADER_DLFCN], [AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl ])# _LT_HEADER_DLFCN # _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE, # ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING) # ---------------------------------------------------------------- m4_defun([_LT_TRY_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl if test yes = "$cross_compiling"; then : [$4] else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF [#line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; }] _LT_EOF if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) $1 ;; x$lt_dlneed_uscore) $2 ;; x$lt_dlunknown|x*) $3 ;; esac else : # compilation failed $3 fi fi rm -fr conftest* ])# _LT_TRY_DLOPEN_SELF # LT_SYS_DLOPEN_SELF # ------------------ AC_DEFUN([LT_SYS_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl if test yes != "$enable_dlopen"; then enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown else lt_cv_dlopen=no lt_cv_dlopen_libs= case $host_os in beos*) lt_cv_dlopen=load_add_on lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ;; mingw* | pw32* | cegcc*) lt_cv_dlopen=LoadLibrary lt_cv_dlopen_libs= ;; cygwin*) lt_cv_dlopen=dlopen lt_cv_dlopen_libs= ;; darwin*) # if libdl is installed we need to link against it AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[ lt_cv_dlopen=dyld lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ]) ;; tpf*) # Don't try to run any link tests for TPF. We know it's impossible # because TPF is a cross-compiler, and we know how we open DSOs. lt_cv_dlopen=dlopen lt_cv_dlopen_libs= lt_cv_dlopen_self=no ;; *) AC_CHECK_FUNC([shl_load], [lt_cv_dlopen=shl_load], [AC_CHECK_LIB([dld], [shl_load], [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld], [AC_CHECK_FUNC([dlopen], [lt_cv_dlopen=dlopen], [AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl], [AC_CHECK_LIB([svld], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld], [AC_CHECK_LIB([dld], [dld_link], [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld]) ]) ]) ]) ]) ]) ;; esac if test no = "$lt_cv_dlopen"; then enable_dlopen=no else enable_dlopen=yes fi case $lt_cv_dlopen in dlopen) save_CPPFLAGS=$CPPFLAGS test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" save_LDFLAGS=$LDFLAGS wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" save_LIBS=$LIBS LIBS="$lt_cv_dlopen_libs $LIBS" AC_CACHE_CHECK([whether a program can dlopen itself], lt_cv_dlopen_self, [dnl _LT_TRY_DLOPEN_SELF( lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes, lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross) ]) if test yes = "$lt_cv_dlopen_self"; then wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" AC_CACHE_CHECK([whether a statically linked program can dlopen itself], lt_cv_dlopen_self_static, [dnl _LT_TRY_DLOPEN_SELF( lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=no, lt_cv_dlopen_self_static=cross) ]) fi CPPFLAGS=$save_CPPFLAGS LDFLAGS=$save_LDFLAGS LIBS=$save_LIBS ;; esac case $lt_cv_dlopen_self in yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; *) enable_dlopen_self=unknown ;; esac case $lt_cv_dlopen_self_static in yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; *) enable_dlopen_self_static=unknown ;; esac fi _LT_DECL([dlopen_support], [enable_dlopen], [0], [Whether dlopen is supported]) _LT_DECL([dlopen_self], [enable_dlopen_self], [0], [Whether dlopen of programs is supported]) _LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0], [Whether dlopen of statically linked programs is supported]) ])# LT_SYS_DLOPEN_SELF # Old name: AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], []) # _LT_COMPILER_C_O([TAGNAME]) # --------------------------- # Check to see if options -c and -o are simultaneously supported by compiler. # This macro does not hard code the compiler like AC_PROG_CC_C_O. m4_defun([_LT_COMPILER_C_O], [m4_require([_LT_DECL_SED])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_TAG_COMPILER])dnl AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext], [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)], [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes fi fi chmod u+w . 2>&AS_MESSAGE_LOG_FD $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* ]) _LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1], [Does compiler simultaneously support -c and -o options?]) ])# _LT_COMPILER_C_O # _LT_COMPILER_FILE_LOCKS([TAGNAME]) # ---------------------------------- # Check to see if we can do hard links to lock some files if needed m4_defun([_LT_COMPILER_FILE_LOCKS], [m4_require([_LT_ENABLE_LOCK])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl _LT_COMPILER_C_O([$1]) hard_links=nottested if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then # do not overwrite the value of need_locks provided by the user AC_MSG_CHECKING([if we can lock with hard links]) hard_links=yes $RM conftest* ln conftest.a conftest.b 2>/dev/null && hard_links=no touch conftest.a ln conftest.a conftest.b 2>&5 || hard_links=no ln conftest.a conftest.b 2>/dev/null && hard_links=no AC_MSG_RESULT([$hard_links]) if test no = "$hard_links"; then AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe]) need_locks=warn fi else need_locks=no fi _LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?]) ])# _LT_COMPILER_FILE_LOCKS # _LT_CHECK_OBJDIR # ---------------- m4_defun([_LT_CHECK_OBJDIR], [AC_CACHE_CHECK([for objdir], [lt_cv_objdir], [rm -f .libs 2>/dev/null mkdir .libs 2>/dev/null if test -d .libs; then lt_cv_objdir=.libs else # MS-DOS does not allow filenames that begin with a dot. lt_cv_objdir=_libs fi rmdir .libs 2>/dev/null]) objdir=$lt_cv_objdir _LT_DECL([], [objdir], [0], [The name of the directory that contains temporary libtool files])dnl m4_pattern_allow([LT_OBJDIR])dnl AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/", [Define to the sub-directory where libtool stores uninstalled libraries.]) ])# _LT_CHECK_OBJDIR # _LT_LINKER_HARDCODE_LIBPATH([TAGNAME]) # -------------------------------------- # Check hardcoding attributes. m4_defun([_LT_LINKER_HARDCODE_LIBPATH], [AC_MSG_CHECKING([how to hardcode library paths into programs]) _LT_TAGVAR(hardcode_action, $1)= if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" || test -n "$_LT_TAGVAR(runpath_var, $1)" || test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then # We can hardcode non-existent directories. if test no != "$_LT_TAGVAR(hardcode_direct, $1)" && # If the only mechanism to avoid hardcoding is shlibpath_var, we # have to relink, otherwise we might link with an installed library # when we should be linking with a yet-to-be-installed one ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" && test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then # Linking always hardcodes the temporary library directory. _LT_TAGVAR(hardcode_action, $1)=relink else # We can link without hardcoding, and we can hardcode nonexisting dirs. _LT_TAGVAR(hardcode_action, $1)=immediate fi else # We cannot hardcode anything, or else we can only hardcode existing # directories. _LT_TAGVAR(hardcode_action, $1)=unsupported fi AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)]) if test relink = "$_LT_TAGVAR(hardcode_action, $1)" || test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then # Fast installation is not supported enable_fast_install=no elif test yes = "$shlibpath_overrides_runpath" || test no = "$enable_shared"; then # Fast installation is not necessary enable_fast_install=needless fi _LT_TAGDECL([], [hardcode_action], [0], [How to hardcode a shared library path into an executable]) ])# _LT_LINKER_HARDCODE_LIBPATH # _LT_CMD_STRIPLIB # ---------------- m4_defun([_LT_CMD_STRIPLIB], [m4_require([_LT_DECL_EGREP]) striplib= old_striplib= AC_MSG_CHECKING([whether stripping libraries is possible]) if test -n "$STRIP" && $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then test -z "$old_striplib" && old_striplib="$STRIP --strip-debug" test -z "$striplib" && striplib="$STRIP --strip-unneeded" AC_MSG_RESULT([yes]) else # FIXME - insert some real tests, host_os isn't really good enough case $host_os in darwin*) if test -n "$STRIP"; then striplib="$STRIP -x" old_striplib="$STRIP -S" AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi ;; *) AC_MSG_RESULT([no]) ;; esac fi _LT_DECL([], [old_striplib], [1], [Commands to strip libraries]) _LT_DECL([], [striplib], [1]) ])# _LT_CMD_STRIPLIB # _LT_PREPARE_MUNGE_PATH_LIST # --------------------------- # Make sure func_munge_path_list() is defined correctly. m4_defun([_LT_PREPARE_MUNGE_PATH_LIST], [[# func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x@S|@2 in x) ;; *:) eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\" ;; x:*) eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\" ;; *::*) eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\" ;; *) eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\" ;; esac } ]])# _LT_PREPARE_PATH_LIST # _LT_SYS_DYNAMIC_LINKER([TAG]) # ----------------------------- # PORTME Fill in your ld.so characteristics m4_defun([_LT_SYS_DYNAMIC_LINKER], [AC_REQUIRE([AC_CANONICAL_HOST])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_OBJDUMP])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_CHECK_SHELL_FEATURES])dnl m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl AC_MSG_CHECKING([dynamic linker characteristics]) m4_if([$1], [], [ if test yes = "$GCC"; then case $host_os in darwin*) lt_awk_arg='/^libraries:/,/LR/' ;; *) lt_awk_arg='/^libraries:/' ;; esac case $host_os in mingw* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;; *) lt_sed_strip_eq='s|=/|/|g' ;; esac lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq` case $lt_search_path_spec in *\;*) # if the path contains ";" then we assume it to be the separator # otherwise default to the standard path separator (i.e. ":") - it is # assumed that no part of a normal pathname contains ";" but that should # okay in the real world where ";" in dirpaths is itself problematic. lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'` ;; *) lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"` ;; esac # Ok, now we have the path, separated by spaces, we can step through it # and add multilib dir if necessary... lt_tmp_lt_search_path_spec= lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null` # ...but if some path component already ends with the multilib dir we assume # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer). case "$lt_multi_os_dir; $lt_search_path_spec " in "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*) lt_multi_os_dir= ;; esac for lt_sys_path in $lt_search_path_spec; do if test -d "$lt_sys_path$lt_multi_os_dir"; then lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir" elif test -n "$lt_multi_os_dir"; then test -d "$lt_sys_path" && \ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path" fi done lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk ' BEGIN {RS = " "; FS = "/|\n";} { lt_foo = ""; lt_count = 0; for (lt_i = NF; lt_i > 0; lt_i--) { if ($lt_i != "" && $lt_i != ".") { if ($lt_i == "..") { lt_count++; } else { if (lt_count == 0) { lt_foo = "/" $lt_i lt_foo; } else { lt_count--; } } } } if (lt_foo != "") { lt_freq[[lt_foo]]++; } if (lt_freq[[lt_foo]] == 1) { print lt_foo; } }'` # AWK program above erroneously prepends '/' to C:/dos/paths # for these hosts. case $host_os in mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\ $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;; esac sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP` else sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" fi]) library_names_spec= libname_spec='lib$name' soname_spec= shrext_cmds=.so postinstall_cmds= postuninstall_cmds= finish_cmds= finish_eval= shlibpath_var= shlibpath_overrides_runpath=unknown version_type=none dynamic_linker="$host_os ld.so" sys_lib_dlsearch_path_spec="/lib /usr/lib" need_lib_prefix=unknown hardcode_into_libs=no # when you set need_version to no, make sure it does not cause -set_version # flags to be left without arguments need_version=unknown AC_ARG_VAR([LT_SYS_LIBRARY_PATH], [User-defined run-time library search path.]) case $host_os in aix3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname.a' shlibpath_var=LIBPATH # AIX 3 has no versioning support, so we append a major version to the name. soname_spec='$libname$release$shared_ext$major' ;; aix[[4-9]]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no hardcode_into_libs=yes if test ia64 = "$host_cpu"; then # AIX 5 supports IA64 library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH else # With GCC up to 2.95.x, collect2 would create an import file # for dependence libraries. The import file would start with # the line '#! .'. This would cause the generated library to # depend on '.', always an invalid library. This was fixed in # development snapshots of GCC prior to 3.0. case $host_os in aix4 | aix4.[[01]] | aix4.[[01]].*) if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' echo ' yes ' echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then : else can_build_shared=no fi ;; esac # Using Import Files as archive members, it is possible to support # filename-based versioning of shared library archives on AIX. While # this would work for both with and without runtime linking, it will # prevent static linking of such archives. So we do filename-based # shared library versioning with .so extension only, which is used # when both runtime linking and shared linking is enabled. # Unfortunately, runtime linking may impact performance, so we do # not want this to be the default eventually. Also, we use the # versioned .so libs for executables only if there is the -brtl # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only. # To allow for filename-based versioning support, we need to create # libNAME.so.V as an archive file, containing: # *) an Import File, referring to the versioned filename of the # archive as well as the shared archive member, telling the # bitwidth (32 or 64) of that shared object, and providing the # list of exported symbols of that shared object, eventually # decorated with the 'weak' keyword # *) the shared object with the F_LOADONLY flag set, to really avoid # it being seen by the linker. # At run time we better use the real file rather than another symlink, # but for link time we create the symlink libNAME.so -> libNAME.so.V case $with_aix_soname,$aix_use_runtimelinking in # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct # soname into executable. Probably we can add versioning support to # collect2, so additional links can be useful in future. aix,yes) # traditional libtool dynamic_linker='AIX unversionable lib.so' # If using run time linking (on AIX 4.2 or later) use lib.so # instead of lib.a to let people know that these are not # typical AIX shared libraries. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; aix,no) # traditional AIX only dynamic_linker='AIX lib.a[(]lib.so.V[)]' # We preserve .a as extension for shared libraries through AIX4.2 # and later when we are not doing run time linking. library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' ;; svr4,*) # full svr4 only dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,yes) # both, prefer svr4 dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # unpreferred sharedlib libNAME.a needs extra handling postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"' postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,no) # both, prefer aix dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]" library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)' postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"' ;; esac shlibpath_var=LIBPATH fi ;; amigaos*) case $host_cpu in powerpc) # Since July 2007 AmigaOS4 officially supports .so libraries. # When compiling the executable, add -use-dynld -Lsobjs: to the compileline. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; m68k) library_names_spec='$libname.ixlibrary $libname.a' # Create ${libname}_ixlibrary.a entries in /sys/libs. finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' ;; esac ;; beos*) library_names_spec='$libname$shared_ext' dynamic_linker="$host_os ld.so" shlibpath_var=LIBRARY_PATH ;; bsdi[[45]]*) version_type=linux # correct to gnu/linux during the next big refactor need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" # the default ld.so.conf also contains /usr/contrib/lib and # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow # libtool to hard-code these into programs ;; cygwin* | mingw* | pw32* | cegcc*) version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no case $GCC,$cc_basename in yes,*) # gcc library_names_spec='$libname.dll.a' # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes case $host_os in cygwin*) # Cygwin DLLs use 'cyg' prefix rather than 'lib' soname_spec='`echo $libname | sed -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' m4_if([$1], [],[ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"]) ;; mingw* | cegcc*) # MinGW DLLs use traditional 'lib' prefix soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' ;; pw32*) # pw32 DLLs use 'pw' prefix rather than 'lib' library_names_spec='`echo $libname | sed -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' ;; esac dynamic_linker='Win32 ld.exe' ;; *,cl*) # Native MSVC libname_spec='$name' soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' library_names_spec='$libname.dll.lib' case $build_os in mingw*) sys_lib_search_path_spec= lt_save_ifs=$IFS IFS=';' for lt_path in $LIB do IFS=$lt_save_ifs # Let DOS variable expansion print the short 8.3 style file name. lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"` sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path" done IFS=$lt_save_ifs # Convert to MSYS style. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | sed -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'` ;; cygwin*) # Convert to unix form, then to dos form, then back to unix form # but this time dos style (no spaces!) so that the unix form looks # like /cygdrive/c/PROGRA~1:/cygdr... sys_lib_search_path_spec=`cygpath --path --unix "$LIB"` sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null` sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` ;; *) sys_lib_search_path_spec=$LIB if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then # It is most probably a Windows format PATH. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi # FIXME: find the short name or the path components, as spaces are # common. (e.g. "Program Files" -> "PROGRA~1") ;; esac # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes dynamic_linker='Win32 link.exe' ;; *) # Assume MSVC wrapper library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib' dynamic_linker='Win32 ld.exe' ;; esac # FIXME: first we should search . and the directory the executable is in shlibpath_var=PATH ;; darwin* | rhapsody*) dynamic_linker="$host_os dyld" version_type=darwin need_lib_prefix=no need_version=no library_names_spec='$libname$release$major$shared_ext $libname$shared_ext' soname_spec='$libname$release$major$shared_ext' shlibpath_overrides_runpath=yes shlibpath_var=DYLD_LIBRARY_PATH shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' m4_if([$1], [],[ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"]) sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' ;; dgux*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; freebsd* | dragonfly*) # DragonFly does not have aout. When/if they implement a new # versioning mechanism, adjust this. if test -x /usr/bin/objformat; then objformat=`/usr/bin/objformat` else case $host_os in freebsd[[23]].*) objformat=aout ;; *) objformat=elf ;; esac fi version_type=freebsd-$objformat case $version_type in freebsd-elf*) library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' need_version=no need_lib_prefix=no ;; freebsd-*) library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' need_version=yes ;; esac shlibpath_var=LD_LIBRARY_PATH case $host_os in freebsd2.*) shlibpath_overrides_runpath=yes ;; freebsd3.[[01]]* | freebsdelf3.[[01]]*) shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \ freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1) shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; *) # from 4.6 on, and DragonFly shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; esac ;; haiku*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no dynamic_linker="$host_os runtime_loader" library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LIBRARY_PATH shlibpath_overrides_runpath=no sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib' hardcode_into_libs=yes ;; hpux9* | hpux10* | hpux11*) # Give a soname corresponding to the major version so that dld.sl refuses to # link against other versions. version_type=sunos need_lib_prefix=no need_version=no case $host_cpu in ia64*) shrext_cmds='.so' hardcode_into_libs=yes dynamic_linker="$host_os dld.so" shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' if test 32 = "$HPUX_IA64_MODE"; then sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" sys_lib_dlsearch_path_spec=/usr/lib/hpux32 else sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" sys_lib_dlsearch_path_spec=/usr/lib/hpux64 fi ;; hppa*64*) shrext_cmds='.sl' hardcode_into_libs=yes dynamic_linker="$host_os dld.sl" shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; *) shrext_cmds='.sl' dynamic_linker="$host_os dld.sl" shlibpath_var=SHLIB_PATH shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' ;; esac # HP-UX runs *really* slowly unless shared libraries are mode 555, ... postinstall_cmds='chmod 555 $lib' # or fails outright, so override atomically: install_override_mode=555 ;; interix[[3-9]]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; irix5* | irix6* | nonstopux*) case $host_os in nonstopux*) version_type=nonstopux ;; *) if test yes = "$lt_cv_prog_gnu_ld"; then version_type=linux # correct to gnu/linux during the next big refactor else version_type=irix fi ;; esac need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext' case $host_os in irix5* | nonstopux*) libsuff= shlibsuff= ;; *) case $LD in # libtool.m4 will add one of these switches to LD *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") libsuff= shlibsuff= libmagic=32-bit;; *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") libsuff=32 shlibsuff=N32 libmagic=N32;; *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") libsuff=64 shlibsuff=64 libmagic=64-bit;; *) libsuff= shlibsuff= libmagic=never-match;; esac ;; esac shlibpath_var=LD_LIBRARY${shlibsuff}_PATH shlibpath_overrides_runpath=no sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff" sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff" hardcode_into_libs=yes ;; # No shared lib support for Linux oldld, aout, or coff. linux*oldld* | linux*aout* | linux*coff*) dynamic_linker=no ;; linux*android*) version_type=none # Android doesn't support versioned libraries. need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext' soname_spec='$libname$release$shared_ext' finish_cmds= shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes dynamic_linker='Android linker' # Don't embed -rpath directories since the linker doesn't support them. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no # Some binutils ld are patched to set DT_RUNPATH AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath], [lt_cv_shlibpath_overrides_runpath=no save_LDFLAGS=$LDFLAGS save_libdir=$libdir eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \ LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\"" AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null], [lt_cv_shlibpath_overrides_runpath=yes])]) LDFLAGS=$save_LDFLAGS libdir=$save_libdir ]) shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes # Ideally, we could use ldconfig to report *all* directores which are # searched for libraries, however this is still not possible. Aside from not # being certain /sbin/ldconfig is available, command # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64, # even though it is searched at run-time. Try to do the best guess by # appending ld.so.conf contents (and includes) to the search path. if test -f /etc/ld.so.conf; then lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '` sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra" fi # We used to test for /lib/ld.so.1 and disable shared libraries on # powerpc, because MkLinux only supported shared libraries with the # GNU dynamic linker. Since this was broken with cross compilers, # most powerpc-linux boxes support dynamic linking these days and # people can always --disable-shared, the test was removed, and we # assume the GNU/Linux dynamic linker is in use. dynamic_linker='GNU/Linux ld.so' ;; netbsdelf*-gnu) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='NetBSD ld.elf_so' ;; netbsd*) version_type=sunos need_lib_prefix=no need_version=no if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' dynamic_linker='NetBSD (a.out) ld.so' else library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='NetBSD ld.elf_so' fi shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; newsos6) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; *nto* | *qnx*) version_type=qnx need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='ldqnx.so' ;; openbsd* | bitrig*) version_type=sunos sys_lib_dlsearch_path_spec=/usr/lib need_lib_prefix=no if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then need_version=no else need_version=yes fi library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; os2*) libname_spec='$name' version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no # OS/2 can only load a DLL with a base name of 8 characters or less. soname_spec='`test -n "$os2dllname" && libname="$os2dllname"; v=$($ECHO $release$versuffix | tr -d .-); n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _); $ECHO $n$v`$shared_ext' library_names_spec='${libname}_dll.$libext' dynamic_linker='OS/2 ld.exe' shlibpath_var=BEGINLIBPATH sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' ;; osf3* | osf4* | osf5*) version_type=osf need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; rdos*) dynamic_linker=no ;; solaris*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes # ldd complains unless libraries are executable postinstall_cmds='chmod +x $lib' ;; sunos4*) version_type=sunos library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes if test yes = "$with_gnu_ld"; then need_lib_prefix=no fi need_version=yes ;; sysv4 | sysv4.3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH case $host_vendor in sni) shlibpath_overrides_runpath=no need_lib_prefix=no runpath_var=LD_RUN_PATH ;; siemens) need_lib_prefix=no ;; motorola) need_lib_prefix=no need_version=no shlibpath_overrides_runpath=no sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' ;; esac ;; sysv4*MP*) if test -d /usr/nec; then version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext' soname_spec='$libname$shared_ext.$major' shlibpath_var=LD_LIBRARY_PATH fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) version_type=sco need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes if test yes = "$with_gnu_ld"; then sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' else sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' case $host_os in sco3.2v5*) sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" ;; esac fi sys_lib_dlsearch_path_spec='/usr/lib' ;; tpf*) # TPF is a cross-target only. Preferred cross-host = GNU/Linux. version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; uts4*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; *) dynamic_linker=no ;; esac AC_MSG_RESULT([$dynamic_linker]) test no = "$dynamic_linker" && can_build_shared=no variables_saved_for_relink="PATH $shlibpath_var $runpath_var" if test yes = "$GCC"; then variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" fi if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec fi if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec fi # remember unaugmented sys_lib_dlsearch_path content for libtool script decls... configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec # ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH" # to be used as default LT_SYS_LIBRARY_PATH value in generated libtool configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH _LT_DECL([], [variables_saved_for_relink], [1], [Variables whose values should be saved in libtool wrapper scripts and restored at link time]) _LT_DECL([], [need_lib_prefix], [0], [Do we need the "lib" prefix for modules?]) _LT_DECL([], [need_version], [0], [Do we need a version for libraries?]) _LT_DECL([], [version_type], [0], [Library versioning type]) _LT_DECL([], [runpath_var], [0], [Shared library runtime path variable]) _LT_DECL([], [shlibpath_var], [0],[Shared library path variable]) _LT_DECL([], [shlibpath_overrides_runpath], [0], [Is shlibpath searched before the hard-coded library search path?]) _LT_DECL([], [libname_spec], [1], [Format of library name prefix]) _LT_DECL([], [library_names_spec], [1], [[List of archive names. First name is the real one, the rest are links. The last name is the one that the linker finds with -lNAME]]) _LT_DECL([], [soname_spec], [1], [[The coded name of the library, if different from the real name]]) _LT_DECL([], [install_override_mode], [1], [Permission mode override for installation of shared libraries]) _LT_DECL([], [postinstall_cmds], [2], [Command to use after installation of a shared archive]) _LT_DECL([], [postuninstall_cmds], [2], [Command to use after uninstallation of a shared archive]) _LT_DECL([], [finish_cmds], [2], [Commands used to finish a libtool library installation in a directory]) _LT_DECL([], [finish_eval], [1], [[As "finish_cmds", except a single script fragment to be evaled but not shown]]) _LT_DECL([], [hardcode_into_libs], [0], [Whether we should hardcode library paths into libraries]) _LT_DECL([], [sys_lib_search_path_spec], [2], [Compile-time system search path for libraries]) _LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2], [Detected run-time system search path for libraries]) _LT_DECL([], [configure_time_lt_sys_library_path], [2], [Explicit LT_SYS_LIBRARY_PATH set during ./configure time]) ])# _LT_SYS_DYNAMIC_LINKER # _LT_PATH_TOOL_PREFIX(TOOL) # -------------------------- # find a file program that can recognize shared library AC_DEFUN([_LT_PATH_TOOL_PREFIX], [m4_require([_LT_DECL_EGREP])dnl AC_MSG_CHECKING([for $1]) AC_CACHE_VAL(lt_cv_path_MAGIC_CMD, [case $MAGIC_CMD in [[\\/*] | ?:[\\/]*]) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR dnl $ac_dummy forces splitting on constant user-supplied paths. dnl POSIX.2 word splitting is done only on the output of word expansions, dnl not every word. This closes a longstanding sh security hole. ac_dummy="m4_if([$2], , $PATH, [$2])" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$1"; then lt_cv_path_MAGIC_CMD=$ac_dir/"$1" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac]) MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then AC_MSG_RESULT($MAGIC_CMD) else AC_MSG_RESULT(no) fi _LT_DECL([], [MAGIC_CMD], [0], [Used to examine libraries when file_magic_cmd begins with "file"])dnl ])# _LT_PATH_TOOL_PREFIX # Old name: AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], []) # _LT_PATH_MAGIC # -------------- # find a file program that can recognize a shared library m4_defun([_LT_PATH_MAGIC], [_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH) if test -z "$lt_cv_path_MAGIC_CMD"; then if test -n "$ac_tool_prefix"; then _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH) else MAGIC_CMD=: fi fi ])# _LT_PATH_MAGIC # LT_PATH_LD # ---------- # find the pathname to the GNU or non-GNU linker AC_DEFUN([LT_PATH_LD], [AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_PROG_ECHO_BACKSLASH])dnl AC_ARG_WITH([gnu-ld], [AS_HELP_STRING([--with-gnu-ld], [assume the C compiler uses GNU ld @<:@default=no@:>@])], [test no = "$withval" || with_gnu_ld=yes], [with_gnu_ld=no])dnl ac_prog=ld if test yes = "$GCC"; then # Check if gcc -print-prog-name=ld gives a path. AC_MSG_CHECKING([for ld used by $CC]) case $host in *-*-mingw*) # gcc leaves a trailing carriage return, which upsets mingw ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; *) ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; esac case $ac_prog in # Accept absolute paths. [[\\/]]* | ?:[[\\/]]*) re_direlt='/[[^/]][[^/]]*/\.\./' # Canonicalize the pathname of ld ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'` while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"` done test -z "$LD" && LD=$ac_prog ;; "") # If it fails, then pretend we aren't using GCC. ac_prog=ld ;; *) # If it is relative, then search for the first ld in PATH. with_gnu_ld=unknown ;; esac elif test yes = "$with_gnu_ld"; then AC_MSG_CHECKING([for GNU ld]) else AC_MSG_CHECKING([for non-GNU ld]) fi AC_CACHE_VAL(lt_cv_path_LD, [if test -z "$LD"; then lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then lt_cv_path_LD=$ac_dir/$ac_prog # Check to see if the program is GNU ld. I'd rather use --version, # but apparently some variants of GNU ld only accept -v. # Break only if it was the GNU/non-GNU ld that we prefer. case `"$lt_cv_path_LD" -v 2>&1 &1 conftest.i cat conftest.i conftest.i >conftest2.i : ${lt_DD:=$DD} AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd], [if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=: fi]) rm -f conftest.i conftest2.i conftest.out]) ])# _LT_PATH_DD # _LT_CMD_TRUNCATE # ---------------- # find command to truncate a binary pipe m4_defun([_LT_CMD_TRUNCATE], [m4_require([_LT_PATH_DD]) AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin], [printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i lt_cv_truncate_bin= if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1" fi rm -f conftest.i conftest2.i conftest.out test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"]) _LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1], [Command to truncate a binary pipe]) ])# _LT_CMD_TRUNCATE # _LT_CHECK_MAGIC_METHOD # ---------------------- # how to check for library dependencies # -- PORTME fill in with the dynamic library characteristics m4_defun([_LT_CHECK_MAGIC_METHOD], [m4_require([_LT_DECL_EGREP]) m4_require([_LT_DECL_OBJDUMP]) AC_CACHE_CHECK([how to recognize dependent libraries], lt_cv_deplibs_check_method, [lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_deplibs_check_method='unknown' # Need to set the preceding variable on all platforms that support # interlibrary dependencies. # 'none' -- dependencies not supported. # 'unknown' -- same as none, but documents that we really don't know. # 'pass_all' -- all dependencies passed with no checks. # 'test_compile' -- check by making test program. # 'file_magic [[regex]]' -- check by looking for files in library path # that responds to the $file_magic_cmd with a given extended regex. # If you have 'file' or equivalent on your system and you're not sure # whether 'pass_all' will *always* work, you probably want this one. case $host_os in aix[[4-9]]*) lt_cv_deplibs_check_method=pass_all ;; beos*) lt_cv_deplibs_check_method=pass_all ;; bsdi[[45]]*) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)' lt_cv_file_magic_cmd='/usr/bin/file -L' lt_cv_file_magic_test_file=/shlib/libc.so ;; cygwin*) # func_win32_libid is a shell function defined in ltmain.sh lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' ;; mingw* | pw32*) # Base MSYS/MinGW do not provide the 'file' command needed by # func_win32_libid shell function, so use a weaker test based on 'objdump', # unless we find 'file', for example because we are cross-compiling. if ( file / ) >/dev/null 2>&1; then lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' else # Keep this pattern in sync with the one in func_win32_libid. lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' lt_cv_file_magic_cmd='$OBJDUMP -f' fi ;; cegcc*) # use the weaker test based on 'objdump'. See mingw*. lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?' lt_cv_file_magic_cmd='$OBJDUMP -f' ;; darwin* | rhapsody*) lt_cv_deplibs_check_method=pass_all ;; freebsd* | dragonfly*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then case $host_cpu in i*86 ) # Not sure whether the presence of OpenBSD here was a mistake. # Let's accept both of them until this is cleared up. lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` ;; esac else lt_cv_deplibs_check_method=pass_all fi ;; haiku*) lt_cv_deplibs_check_method=pass_all ;; hpux10.20* | hpux11*) lt_cv_file_magic_cmd=/usr/bin/file case $host_cpu in ia64*) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64' lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so ;; hppa*64*) [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'] lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl ;; *) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library' lt_cv_file_magic_test_file=/usr/lib/libc.sl ;; esac ;; interix[[3-9]]*) # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$' ;; irix5* | irix6* | nonstopux*) case $LD in *-32|*"-32 ") libmagic=32-bit;; *-n32|*"-n32 ") libmagic=N32;; *-64|*"-64 ") libmagic=64-bit;; *) libmagic=never-match;; esac lt_cv_deplibs_check_method=pass_all ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) lt_cv_deplibs_check_method=pass_all ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$' fi ;; newos6*) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=/usr/lib/libnls.so ;; *nto* | *qnx*) lt_cv_deplibs_check_method=pass_all ;; openbsd* | bitrig*) if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' fi ;; osf3* | osf4* | osf5*) lt_cv_deplibs_check_method=pass_all ;; rdos*) lt_cv_deplibs_check_method=pass_all ;; solaris*) lt_cv_deplibs_check_method=pass_all ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) lt_cv_deplibs_check_method=pass_all ;; sysv4 | sysv4.3*) case $host_vendor in motorola) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]' lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` ;; ncr) lt_cv_deplibs_check_method=pass_all ;; sequent) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )' ;; sni) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib" lt_cv_file_magic_test_file=/lib/libc.so ;; siemens) lt_cv_deplibs_check_method=pass_all ;; pc) lt_cv_deplibs_check_method=pass_all ;; esac ;; tpf*) lt_cv_deplibs_check_method=pass_all ;; os2*) lt_cv_deplibs_check_method=pass_all ;; esac ]) file_magic_glob= want_nocaseglob=no if test "$build" = "$host"; then case $host_os in mingw* | pw32*) if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then want_nocaseglob=yes else file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"` fi ;; esac fi file_magic_cmd=$lt_cv_file_magic_cmd deplibs_check_method=$lt_cv_deplibs_check_method test -z "$deplibs_check_method" && deplibs_check_method=unknown _LT_DECL([], [deplibs_check_method], [1], [Method to check whether dependent libraries are shared objects]) _LT_DECL([], [file_magic_cmd], [1], [Command to use when deplibs_check_method = "file_magic"]) _LT_DECL([], [file_magic_glob], [1], [How to find potential files when deplibs_check_method = "file_magic"]) _LT_DECL([], [want_nocaseglob], [1], [Find potential files using nocaseglob when deplibs_check_method = "file_magic"]) ])# _LT_CHECK_MAGIC_METHOD # LT_PATH_NM # ---------- # find the pathname to a BSD- or MS-compatible name lister AC_DEFUN([LT_PATH_NM], [AC_REQUIRE([AC_PROG_CC])dnl AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM, [if test -n "$NM"; then # Let the user override the test. lt_cv_path_NM=$NM else lt_nm_to_check=${ac_tool_prefix}nm if test -n "$ac_tool_prefix" && test "$build" = "$host"; then lt_nm_to_check="$lt_nm_to_check nm" fi for lt_tmp_nm in $lt_nm_to_check; do lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. tmp_nm=$ac_dir/$lt_tmp_nm if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then # Check to see if the nm accepts a BSD-compat flag. # Adding the 'sed 1q' prevents false positives on HP-UX, which says: # nm: unknown option "B" ignored # Tru64's nm complains that /dev/null is an invalid object file # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty case $build_os in mingw*) lt_bad_file=conftest.nm/nofile ;; *) lt_bad_file=/dev/null ;; esac case `"$tmp_nm" -B $lt_bad_file 2>&1 | sed '1q'` in *$lt_bad_file* | *'Invalid file or object type'*) lt_cv_path_NM="$tmp_nm -B" break 2 ;; *) case `"$tmp_nm" -p /dev/null 2>&1 | sed '1q'` in */dev/null*) lt_cv_path_NM="$tmp_nm -p" break 2 ;; *) lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but continue # so that we can try to find one that supports BSD flags ;; esac ;; esac fi done IFS=$lt_save_ifs done : ${lt_cv_path_NM=no} fi]) if test no != "$lt_cv_path_NM"; then NM=$lt_cv_path_NM else # Didn't find any BSD compatible name lister, look for dumpbin. if test -n "$DUMPBIN"; then : # Let the user override the test. else AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :) case `$DUMPBIN -symbols -headers /dev/null 2>&1 | sed '1q'` in *COFF*) DUMPBIN="$DUMPBIN -symbols -headers" ;; *) DUMPBIN=: ;; esac fi AC_SUBST([DUMPBIN]) if test : != "$DUMPBIN"; then NM=$DUMPBIN fi fi test -z "$NM" && NM=nm AC_SUBST([NM]) _LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface], [lt_cv_nm_interface="BSD nm" echo "int some_variable = 0;" > conftest.$ac_ext (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$ac_compile" 2>conftest.err) cat conftest.err >&AS_MESSAGE_LOG_FD (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD) (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out) cat conftest.err >&AS_MESSAGE_LOG_FD (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD) cat conftest.out >&AS_MESSAGE_LOG_FD if $GREP 'External.*some_variable' conftest.out > /dev/null; then lt_cv_nm_interface="MS dumpbin" fi rm -f conftest*]) ])# LT_PATH_NM # Old names: AU_ALIAS([AM_PROG_NM], [LT_PATH_NM]) AU_ALIAS([AC_PROG_NM], [LT_PATH_NM]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_PROG_NM], []) dnl AC_DEFUN([AC_PROG_NM], []) # _LT_CHECK_SHAREDLIB_FROM_LINKLIB # -------------------------------- # how to determine the name of the shared library # associated with a specific link library. # -- PORTME fill in with the dynamic library characteristics m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB], [m4_require([_LT_DECL_EGREP]) m4_require([_LT_DECL_OBJDUMP]) m4_require([_LT_DECL_DLLTOOL]) AC_CACHE_CHECK([how to associate runtime and link libraries], lt_cv_sharedlib_from_linklib_cmd, [lt_cv_sharedlib_from_linklib_cmd='unknown' case $host_os in cygwin* | mingw* | pw32* | cegcc*) # two different shell functions defined in ltmain.sh; # decide which one to use based on capabilities of $DLLTOOL case `$DLLTOOL --help 2>&1` in *--identify-strict*) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib ;; *) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback ;; esac ;; *) # fallback: assume linklib IS sharedlib lt_cv_sharedlib_from_linklib_cmd=$ECHO ;; esac ]) sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO _LT_DECL([], [sharedlib_from_linklib_cmd], [1], [Command to associate shared and link libraries]) ])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB # _LT_PATH_MANIFEST_TOOL # ---------------------- # locate the manifest tool m4_defun([_LT_PATH_MANIFEST_TOOL], [AC_CHECK_TOOL(MANIFEST_TOOL, mt, :) test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_mainfest_tool], [lt_cv_path_mainfest_tool=no echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out cat conftest.err >&AS_MESSAGE_LOG_FD if $GREP 'Manifest Tool' conftest.out > /dev/null; then lt_cv_path_mainfest_tool=yes fi rm -f conftest*]) if test yes != "$lt_cv_path_mainfest_tool"; then MANIFEST_TOOL=: fi _LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl ])# _LT_PATH_MANIFEST_TOOL # _LT_DLL_DEF_P([FILE]) # --------------------- # True iff FILE is a Windows DLL '.def' file. # Keep in sync with func_dll_def_p in the libtool script AC_DEFUN([_LT_DLL_DEF_P], [dnl test DEF = "`$SED -n dnl -e '\''s/^[[ ]]*//'\'' dnl Strip leading whitespace -e '\''/^\(;.*\)*$/d'\'' dnl Delete empty lines and comments -e '\''s/^\(EXPORTS\|LIBRARY\)\([[ ]].*\)*$/DEF/p'\'' dnl -e q dnl Only consider the first "real" line $1`" dnl ])# _LT_DLL_DEF_P # LT_LIB_M # -------- # check for math library AC_DEFUN([LT_LIB_M], [AC_REQUIRE([AC_CANONICAL_HOST])dnl LIBM= case $host in *-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-pw32* | *-*-darwin*) # These system don't have libm, or don't need it ;; *-ncr-sysv4.3*) AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw) AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm") ;; *) AC_CHECK_LIB(m, cos, LIBM=-lm) ;; esac AC_SUBST([LIBM]) ])# LT_LIB_M # Old name: AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_CHECK_LIBM], []) # _LT_COMPILER_NO_RTTI([TAGNAME]) # ------------------------------- m4_defun([_LT_COMPILER_NO_RTTI], [m4_require([_LT_TAG_COMPILER])dnl _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= if test yes = "$GCC"; then case $cc_basename in nvcc*) _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;; *) _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;; esac _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], lt_cv_prog_compiler_rtti_exceptions, [-fno-rtti -fno-exceptions], [], [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"]) fi _LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1], [Compiler flag to turn off builtin functions]) ])# _LT_COMPILER_NO_RTTI # _LT_CMD_GLOBAL_SYMBOLS # ---------------------- m4_defun([_LT_CMD_GLOBAL_SYMBOLS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_PROG_AWK])dnl AC_REQUIRE([LT_PATH_NM])dnl AC_REQUIRE([LT_PATH_LD])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_TAG_COMPILER])dnl # Check for command to grab the raw symbol name followed by C symbol from nm. AC_MSG_CHECKING([command to parse $NM output from $compiler object]) AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe], [ # These are sane defaults that work on at least a few old systems. # [They come from Ultrix. What could be older than Ultrix?!! ;)] # Character class describing NM global symbol codes. symcode='[[BCDEGRST]]' # Regexp to match symbols that can be accessed directly from C. sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)' # Define system-specific variables. case $host_os in aix*) symcode='[[BCDT]]' ;; cygwin* | mingw* | pw32* | cegcc*) symcode='[[ABCDGISTW]]' ;; hpux*) if test ia64 = "$host_cpu"; then symcode='[[ABCDEGRST]]' fi ;; irix* | nonstopux*) symcode='[[BCDEGRST]]' ;; osf*) symcode='[[BCDEGQRST]]' ;; solaris*) symcode='[[BDRT]]' ;; sco3.2v5*) symcode='[[DT]]' ;; sysv4.2uw2*) symcode='[[DT]]' ;; sysv5* | sco5v6* | unixware* | OpenUNIX*) symcode='[[ABDT]]' ;; sysv4) symcode='[[DFNSTU]]' ;; esac # If we're using GNU nm, then use its standard symbol codes. case `$NM -V 2>&1` in *GNU* | *'with BFD'*) symcode='[[ABCDGIRSTW]]' ;; esac if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Gets list of data symbols to import. lt_cv_sys_global_symbol_to_import="sed -n -e 's/^I .* \(.*\)$/\1/p'" # Adjust the below global symbol transforms to fixup imported variables. lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'" lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'" lt_c_name_lib_hook="\ -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\ -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'" else # Disable hooks by default. lt_cv_sys_global_symbol_to_import= lt_cdecl_hook= lt_c_name_hook= lt_c_name_lib_hook= fi # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. lt_cv_sys_global_symbol_to_cdecl="sed -n"\ $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" # Transform an extracted symbol line into symbol name and symbol address lt_cv_sys_global_symbol_to_c_name_address="sed -n"\ $lt_c_name_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'" # Transform an extracted symbol line into symbol name with lib prefix and # symbol address. lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="sed -n"\ $lt_c_name_lib_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'" # Handle CRLF in mingw tool chain opt_cr= case $build_os in mingw*) opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp ;; esac # Try without a prefix underscore, then with it. for ac_symprfx in "" "_"; do # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. symxfrm="\\1 $ac_symprfx\\2 \\2" # Write the raw and C identifiers. if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Fake it for dumpbin and say T for any non-static function, # D for any global variable and I for any imported variable. # Also find C++ and __fastcall symbols from MSVC++, # which start with @ or ?. lt_cv_sys_global_symbol_pipe="$AWK ['"\ " {last_section=section; section=\$ 3};"\ " /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\ " /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\ " /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\ " /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\ " /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\ " \$ 0!~/External *\|/{next};"\ " / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\ " {if(hide[section]) next};"\ " {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\ " {split(\$ 0,a,/\||\r/); split(a[2],s)};"\ " s[1]~/^[@?]/{print f,s[1],s[1]; next};"\ " s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\ " ' prfx=^$ac_symprfx]" else lt_cv_sys_global_symbol_pipe="sed -n -e 's/^.*[[ ]]\($symcode$symcode*\)[[ ]][[ ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" fi lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | sed '/ __gnu_lto/d'" # Check to see that the pipe works correctly. pipe_works=no rm -f conftest* cat > conftest.$ac_ext <<_LT_EOF #ifdef __cplusplus extern "C" { #endif char nm_test_var; void nm_test_func(void); void nm_test_func(void){} #ifdef __cplusplus } #endif int main(){nm_test_var='a';nm_test_func();return(0);} _LT_EOF if AC_TRY_EVAL(ac_compile); then # Now try to grab the symbols. nlist=conftest.nm $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&AS_MESSAGE_LOG_FD if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&AS_MESSAGE_LOG_FD && test -s "$nlist"; then # Try sorting and uniquifying the output. if sort "$nlist" | uniq > "$nlist"T; then mv -f "$nlist"T "$nlist" else rm -f "$nlist"T fi # Make sure that we snagged all the symbols we need. if $GREP ' nm_test_var$' "$nlist" >/dev/null; then if $GREP ' nm_test_func$' "$nlist" >/dev/null; then cat <<_LT_EOF > conftest.$ac_ext /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT@&t@_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT@&t@_DLSYM_CONST #else # define LT@&t@_DLSYM_CONST const #endif #ifdef __cplusplus extern "C" { #endif _LT_EOF # Now generate the symbol file. eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext' cat <<_LT_EOF >> conftest.$ac_ext /* The mapping between symbol names and symbols. */ LT@&t@_DLSYM_CONST struct { const char *name; void *address; } lt__PROGRAM__LTX_preloaded_symbols[[]] = { { "@PROGRAM@", (void *) 0 }, _LT_EOF $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext cat <<\_LT_EOF >> conftest.$ac_ext {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt__PROGRAM__LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif _LT_EOF # Now try linking the two files. mv conftest.$ac_objext conftstm.$ac_objext lt_globsym_save_LIBS=$LIBS lt_globsym_save_CFLAGS=$CFLAGS LIBS=conftstm.$ac_objext CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)" if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then pipe_works=yes fi LIBS=$lt_globsym_save_LIBS CFLAGS=$lt_globsym_save_CFLAGS else echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD fi else echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD cat conftest.$ac_ext >&5 fi rm -rf conftest* conftst* # Do not use the global_symbol_pipe unless it works. if test yes = "$pipe_works"; then break else lt_cv_sys_global_symbol_pipe= fi done ]) if test -z "$lt_cv_sys_global_symbol_pipe"; then lt_cv_sys_global_symbol_to_cdecl= fi if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then AC_MSG_RESULT(failed) else AC_MSG_RESULT(ok) fi # Response file support. if test "$lt_cv_nm_interface" = "MS dumpbin"; then nm_file_list_spec='@' elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then nm_file_list_spec='@' fi _LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1], [Take the output of nm and produce a listing of raw symbols and C names]) _LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1], [Transform the output of nm in a proper C declaration]) _LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1], [Transform the output of nm into a list of symbols to manually relocate]) _LT_DECL([global_symbol_to_c_name_address], [lt_cv_sys_global_symbol_to_c_name_address], [1], [Transform the output of nm in a C name address pair]) _LT_DECL([global_symbol_to_c_name_address_lib_prefix], [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1], [Transform the output of nm in a C name address pair when lib prefix is needed]) _LT_DECL([nm_interface], [lt_cv_nm_interface], [1], [The name lister interface]) _LT_DECL([], [nm_file_list_spec], [1], [Specify filename containing input files for $NM]) ]) # _LT_CMD_GLOBAL_SYMBOLS # _LT_COMPILER_PIC([TAGNAME]) # --------------------------- m4_defun([_LT_COMPILER_PIC], [m4_require([_LT_TAG_COMPILER])dnl _LT_TAGVAR(lt_prog_compiler_wl, $1)= _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)= m4_if([$1], [CXX], [ # C++ specific cases for pic, static, wl, etc. if test yes = "$GXX"; then _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | os2* | pw32* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; *djgpp*) # DJGPP does not support shared libraries at all _LT_TAGVAR(lt_prog_compiler_pic, $1)= ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. _LT_TAGVAR(lt_prog_compiler_static, $1)= ;; interix[[3-9]]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; *qnx* | *nto*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac else case $host_os in aix[[4-9]]*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; chorus*) case $cc_basename in cxch68*) # Green Hills C++ Compiler # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a" ;; esac ;; mingw* | cygwin* | os2* | pw32* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) ;; dgux*) case $cc_basename in ec++*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; ghcx*) # Green Hills C++ Compiler _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; freebsd* | dragonfly*) # FreeBSD uses GNU C++ ;; hpux9* | hpux10* | hpux11*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' if test ia64 != "$host_cpu"; then _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' fi ;; aCC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac ;; *) ;; esac ;; interix*) # This is c89, which is MS Visual C++ (no shared libs) # Anyone wants to do a port? ;; irix5* | irix6* | nonstopux*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' # CC pic flag -KPIC is the default. ;; *) ;; esac ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in KCC*) # KAI C++ Compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; ecpc* ) # old Intel C++ for x86_64, which still supported -KPIC. _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; icpc* ) # Intel C++, used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgCC* | pgcpp*) # Portland Group C++ compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; cxx*) # Compaq C++ # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL 8.0, 9.0 on PPC and BlueGene _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' ;; *) case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C++ 5.9 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; esac ;; esac ;; lynxos*) ;; m88k*) ;; mvs*) case $cc_basename in cxx*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall' ;; *) ;; esac ;; netbsd* | netbsdelf*-gnu) ;; *qnx* | *nto*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; osf3* | osf4* | osf5*) case $cc_basename in KCC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' ;; RCC*) # Rational C++ 2.4.1 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; cxx*) # Digital/Compaq C++ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; *) ;; esac ;; psos*) ;; solaris*) case $cc_basename in CC* | sunCC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; gcx*) # Green Hills C++ Compiler _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' ;; *) ;; esac ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; lcc*) # Lucid _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; *) ;; esac ;; vxworks*) ;; *) _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ], [ if test yes = "$GCC"; then _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. _LT_TAGVAR(lt_prog_compiler_static, $1)= ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; interix[[3-9]]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; msdosdjgpp*) # Just because we use GCC doesn't mean we suddenly get shared libraries # on systems that don't support them. _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no enable_shared=no ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac case $cc_basename in nvcc*) # Cuda Compiler Driver 2.2 _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker ' if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)" fi ;; esac else # PORTME Check for flag to pass linker flags through the system compiler. case $host_os in aix*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' case $cc_basename in nagfor*) # NAG Fortran compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; hpux9* | hpux10* | hpux11*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac # Is there a better lt_prog_compiler_static that works with the bundled CC? _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' ;; irix5* | irix6* | nonstopux*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC (with -KPIC) is the default. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in # old Intel for x86_64, which still supported -KPIC. ecc*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; # flang / f18. f95 an alias for gfortran or flang on Debian flang* | f18* | f95*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; # icc used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. icc* | ifort*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; # Lahey Fortran 8.1. lf95*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared' _LT_TAGVAR(lt_prog_compiler_static, $1)='--static' ;; nagfor*) # NAG Fortran compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; tcc*) # Fabrice Bellard et al's Tiny C Compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group compilers (*not* the Pentium gcc compiler, # which looks to be a dead project) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; ccc*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All Alpha code is PIC. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; xl* | bgxl* | bgf* | mpixl*) # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' ;; *) case `$CC -V 2>&1 | sed 5q` in *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*) # Sun Fortran 8.3 passes all unrecognized flags to the linker _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='' ;; *Sun\ F* | *Sun*Fortran*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; *Sun\ C*) # Sun C 5.9 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' ;; *Intel*\ [[CF]]*Compiler*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; *Portland\ Group*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; esac ;; newsos6) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; osf3* | osf4* | osf5*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All OSF/1 code is PIC. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; rdos*) _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; solaris*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' case $cc_basename in f77* | f90* | f95* | sunf77* | sunf90* | sunf95*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';; *) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';; esac ;; sunos4*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4 | sysv4.2uw2* | sysv4.3*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; unicos*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; uts4*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; *) _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ]) case $host_os in # For platforms that do not support PIC, -DPIC is meaningless: *djgpp*) _LT_TAGVAR(lt_prog_compiler_pic, $1)= ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])" ;; esac AC_CACHE_CHECK([for $compiler option to produce PIC], [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)], [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)]) _LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1) # # Check to make sure the PIC flag actually works. # if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)], [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in "" | " "*) ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;; esac], [_LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no]) fi _LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1], [Additional compiler flags for building library objects]) _LT_TAGDECL([wl], [lt_prog_compiler_wl], [1], [How to pass a linker flag through the compiler]) # # Check to make sure the static flag actually works. # wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\" _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1), $lt_tmp_static_flag, [], [_LT_TAGVAR(lt_prog_compiler_static, $1)=]) _LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1], [Compiler flag to prevent dynamic linking]) ])# _LT_COMPILER_PIC # _LT_LINKER_SHLIBS([TAGNAME]) # ---------------------------- # See if the linker supports building shared libraries. m4_defun([_LT_LINKER_SHLIBS], [AC_REQUIRE([LT_PATH_LD])dnl AC_REQUIRE([LT_PATH_NM])dnl m4_require([_LT_PATH_MANIFEST_TOOL])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl m4_require([_LT_TAG_COMPILER])dnl AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) m4_if([$1], [CXX], [ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] case $host_os in aix[[4-9]]*) # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi ;; pw32*) _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds ;; cygwin* | mingw* | cegcc*) case $cc_basename in cl*) _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' ;; *) _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] ;; esac ;; linux* | k*bsd*-gnu | gnu*) _LT_TAGVAR(link_all_deplibs, $1)=no ;; *) _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' ;; esac ], [ runpath_var= _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_cmds, $1)= _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(compiler_needs_object, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(old_archive_from_new_cmds, $1)= _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)= _LT_TAGVAR(thread_safe_flag_spec, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= # include_expsyms should be a list of space-separated symbols to be *always* # included in the symbol list _LT_TAGVAR(include_expsyms, $1)= # exclude_expsyms can be an extended regexp of symbols to exclude # it will be wrapped by ' (' and ')$', so one must not match beginning or # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc', # as well as any symbol that contains 'd'. _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out # platforms (ab)use it in PIC code, but their linkers get confused if # the symbol is explicitly referenced. Since portable code cannot # rely on this symbol name, it's probably fine to never include it in # preloaded symbol tables. # Exclude shared library initialization/finalization symbols. dnl Note also adjust exclude_expsyms for C++ above. extract_expsyms_cmds= case $host_os in cygwin* | mingw* | pw32* | cegcc*) # FIXME: the MSVC++ port hasn't been tested in a loooong time # When not using gcc, we currently assume that we are using # Microsoft Visual C++. if test yes != "$GCC"; then with_gnu_ld=no fi ;; interix*) # we just hope/assume this is gcc and not c89 (= MSVC++) with_gnu_ld=yes ;; openbsd* | bitrig*) with_gnu_ld=no ;; linux* | k*bsd*-gnu | gnu*) _LT_TAGVAR(link_all_deplibs, $1)=no ;; esac _LT_TAGVAR(ld_shlibs, $1)=yes # On some targets, GNU ld is compatible enough with the native linker # that we're better off using the native interface for both. lt_use_gnu_ld_interface=no if test yes = "$with_gnu_ld"; then case $host_os in aix*) # The AIX port of GNU ld has always aspired to compatibility # with the native linker. However, as the warning in the GNU ld # block says, versions before 2.19.5* couldn't really create working # shared libraries, regardless of the interface used. case `$LD -v 2>&1` in *\ \(GNU\ Binutils\)\ 2.19.5*) ;; *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;; *\ \(GNU\ Binutils\)\ [[3-9]]*) ;; *) lt_use_gnu_ld_interface=yes ;; esac ;; *) lt_use_gnu_ld_interface=yes ;; esac fi if test yes = "$lt_use_gnu_ld_interface"; then # If archive_cmds runs LD, not CC, wlarc should be empty wlarc='$wl' # Set some defaults for GNU ld with shared library support. These # are reset later if shared libraries are not supported. Putting them # here allows them to be overridden if necessary. runpath_var=LD_RUN_PATH _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # ancient GNU ld didn't support --whole-archive et. al. if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else _LT_TAGVAR(whole_archive_flag_spec, $1)= fi supports_anon_versioning=no case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in *GNU\ gold*) supports_anon_versioning=yes ;; *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11 *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... *\ 2.11.*) ;; # other 2.11 versions *) supports_anon_versioning=yes ;; esac # See if GNU ld supports shared libraries. case $host_os in aix[[3-9]]*) # On AIX/PPC, the GNU linker is very broken if test ia64 != "$host_cpu"; then _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: the GNU linker, at least up to release 2.19, is reported *** to be unable to reliably create shared libraries on AIX. *** Therefore, libtool is disabling shared libraries support. If you *** really care for shared libraries, you may want to install binutils *** 2.20 or above, or modify your PATH so that a non-GNU linker is found. *** You will then need to restart the configuration process. _LT_EOF fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='' ;; m68k) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; cygwin* | mingw* | pw32* | cegcc*) # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; haiku*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(link_all_deplibs, $1)=yes ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; interix[[3-9]]*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='sed "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu) tmp_diet=no if test linux-dietlibc = "$host_os"; then case $cc_basename in diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn) esac fi if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \ && test no = "$tmp_diet" then tmp_addflag=' $pic_flag' tmp_sharedflag='-shared' case $cc_basename,$host_cpu in pgcc*) # Portland Group C compiler _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag' ;; pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group f77 and f90 compilers _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag -Mnomain' ;; ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 tmp_addflag=' -i_dynamic' ;; efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 tmp_addflag=' -i_dynamic -nofor_main' ;; ifc* | ifort*) # Intel Fortran compiler tmp_addflag=' -nofor_main' ;; lf95*) # Lahey Fortran 8.1 _LT_TAGVAR(whole_archive_flag_spec, $1)= tmp_sharedflag='--shared' ;; nagfor*) # NAGFOR 5.3 tmp_sharedflag='-Wl,-shared' ;; xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below) tmp_sharedflag='-qmkshrobj' tmp_addflag= ;; nvcc*) # Cuda Compiler Driver 2.2 _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes ;; esac case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C 5.9 _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes tmp_sharedflag='-G' ;; *Sun\ F*) # Sun Fortran 8.3 tmp_sharedflag='-G' ;; esac _LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi case $cc_basename in tcc*) _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic' ;; xlf* | bgf* | bgxlf* | mpixlf*) # IBM XL Fortran 10.1 on PPC cannot create shared libs itself _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib' fi ;; esac else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' wlarc= else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' fi ;; solaris*) if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: The releases 2.8.* of the GNU linker cannot reliably *** create shared libraries on Solaris systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.9.1 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) case `$LD -v 2>&1` in *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*) _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot *** reliably create shared libraries on SCO systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.16.91.0.3 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF ;; *) # For security reasons, it is highly recommended that you always # use absolute paths for naming shared libraries, and exclude the # DT_RUNPATH tag from executables and libraries. But doing so # requires that you compile everything twice, which is a pain. if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; sunos4*) _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' wlarc= _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then runpath_var= _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= fi else # PORTME fill in a description of your system's linker (not GNU ld) case $host_os in aix3*) _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' # Note: this linker hardcodes the directories in LIBPATH if there # are no directories specified by -L. _LT_TAGVAR(hardcode_minus_L, $1)=yes if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then # Neither direct hardcoding nor static linking is supported with a # broken collect2. _LT_TAGVAR(hardcode_direct, $1)=unsupported fi ;; aix[[4-9]]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) for ld_flag in $LDFLAGS; do if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then aix_use_runtimelinking=yes break fi done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_TAGVAR(archive_cmds, $1)='' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(file_list_spec, $1)='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # traditional, no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no ;; esac if test yes = "$GCC"; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 _LT_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)= fi ;; esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag="$shared_flag "'$wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. _LT_TAGVAR(always_export_symbols, $1)=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. _LT_TAGVAR(allow_undefined_flag, $1)='-berok' # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' fi _LT_TAGVAR(archive_cmds_need_lc, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared libraries. _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' fi fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='' ;; m68k) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac ;; bsdi[[45]]*) _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic ;; cygwin* | mingw* | pw32* | cegcc*) # When not using gcc, we currently assume that we are using # Microsoft Visual C++. # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. case $cc_basename in cl*) # Native MSVC _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols' # Don't use ranlib _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # Assume MSVC wrapper _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames=' # The linker will automatically build a .lib file if we build a DLL. _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' # FIXME: Should let the user specify the lib program. _LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; esac ;; darwin* | rhapsody*) _LT_DARWIN_LINKER_FEATURES($1) ;; dgux*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor # support. Future versions do this automatically, but an explicit c++rt0.o # does not break anything, and helps significantly (at the cost of a little # extra space). freebsd2.2*) _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # Unfortunately, older versions of FreeBSD 2 do not have this feature. freebsd2.*) _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # FreeBSD 3 and greater uses gcc -shared to do shared libraries. freebsd* | dragonfly*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; hpux9*) if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_direct, $1)=yes # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' ;; hpux10*) if test yes,no = "$GCC,$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes fi ;; hpux11*) if test yes,no = "$GCC,$with_gnu_ld"; then case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac else case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) m4_if($1, [], [ # Older versions of the 11.00 compiler do not understand -b yet # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does) _LT_LINKER_OPTION([if $CC understands -b], _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b], [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'], [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])], [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags']) ;; esac fi if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac fi ;; irix5* | irix6* | nonstopux*) if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' # Try to use the -exported_symbol ld option, if it does not # work, assume that -exports_file does not work either and # implicitly export all symbols. # This should be the same for all languages, so no per-tag cache variable. AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol], [lt_cv_irix_exported_symbol], [save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null" AC_LINK_IFELSE( [AC_LANG_SOURCE( [AC_LANG_CASE([C], [[int foo (void) { return 0; }]], [C++], [[int foo (void) { return 0; }]], [Fortran 77], [[ subroutine foo end]], [Fortran], [[ subroutine foo end]])])], [lt_cv_irix_exported_symbol=yes], [lt_cv_irix_exported_symbol=no]) LDFLAGS=$save_LDFLAGS]) if test yes = "$lt_cv_irix_exported_symbol"; then _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' fi _LT_TAGVAR(link_all_deplibs, $1)=no else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(inherit_rpath, $1)=yes _LT_TAGVAR(link_all_deplibs, $1)=yes ;; linux*) case $cc_basename in tcc*) # Fabrice Bellard et al's Tiny C Compiler _LT_TAGVAR(ld_shlibs, $1)=yes _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out else _LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; newsos6) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *nto* | *qnx*) ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=yes if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' fi else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; osf3*) if test yes = "$GCC"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: ;; osf4* | osf5*) # as osf3* with the addition of -msym flag if test yes = "$GCC"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' else _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp' # Both c and cxx compiler support -rpath directly _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_separator, $1)=: ;; solaris*) _LT_TAGVAR(no_undefined_flag, $1)=' -z defs' if test yes = "$GCC"; then wlarc='$wl' _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' else case `$CC -V 2>&1` in *"Compilers 5.0"*) wlarc='' _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp' ;; *) wlarc='$wl' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' ;; esac fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. GCC discards it without '$wl', # but is careful enough not to reorder. # Supported since Solaris 2.6 (maybe 2.5.1?) if test yes = "$GCC"; then _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' else _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' fi ;; esac _LT_TAGVAR(link_all_deplibs, $1)=yes ;; sunos4*) if test sequent = "$host_vendor"; then # Use $CC to link under sequent, because it throws in some extra .o # files that make .init and .fini sections work. _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4) case $host_vendor in sni) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true??? ;; siemens) ## LD is ld it makes a PLAMLIB ## CC just makes a GrossModule. _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs' _LT_TAGVAR(hardcode_direct, $1)=no ;; motorola) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie ;; esac runpath_var='LD_RUN_PATH' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4.3*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var=LD_RUN_PATH hardcode_runpath_var=yes _LT_TAGVAR(ld_shlibs, $1)=yes fi ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; uts4*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(ld_shlibs, $1)=no ;; esac if test sni = "$host_vendor"; then case $host in sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*) _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym' ;; esac fi fi ]) AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no _LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld _LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl _LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl _LT_DECL([], [extract_expsyms_cmds], [2], [The commands to extract the exported symbol list from a shared archive]) # # Do we need to explicitly link libc? # case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in x|xyes) # Assume -lc should be added _LT_TAGVAR(archive_cmds_need_lc, $1)=yes if test yes,yes = "$GCC,$enable_shared"; then case $_LT_TAGVAR(archive_cmds, $1) in *'~'*) # FIXME: we may have to deal with multi-command sequences. ;; '$CC '*) # Test whether the compiler implicitly links with -lc since on some # systems, -lgcc has to come before -lc. If gcc already passes -lc # to ld, don't add -lc before -lgcc. AC_CACHE_CHECK([whether -lc should be explicitly linked in], [lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1), [$RM conftest* echo "$lt_simple_compile_test_code" > conftest.$ac_ext if AC_TRY_EVAL(ac_compile) 2>conftest.err; then soname=conftest lib=conftest libobjs=conftest.$ac_objext deplibs= wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1) compiler_flags=-v linker_flags=-v verstring= output_objdir=. libname=conftest lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1) _LT_TAGVAR(allow_undefined_flag, $1)= if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) then lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no else lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes fi _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag else cat conftest.err 1>&5 fi $RM conftest* ]) _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1) ;; esac fi ;; esac _LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0], [Whether or not to add -lc for building shared libraries]) _LT_TAGDECL([allow_libtool_libs_with_static_runtimes], [enable_shared_with_static_runtimes], [0], [Whether or not to disallow shared libs when runtime libs are static]) _LT_TAGDECL([], [export_dynamic_flag_spec], [1], [Compiler flag to allow reflexive dlopens]) _LT_TAGDECL([], [whole_archive_flag_spec], [1], [Compiler flag to generate shared objects directly from archives]) _LT_TAGDECL([], [compiler_needs_object], [1], [Whether the compiler copes with passing no objects directly]) _LT_TAGDECL([], [old_archive_from_new_cmds], [2], [Create an old-style archive from a shared archive]) _LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2], [Create a temporary old-style archive to link instead of a shared archive]) _LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive]) _LT_TAGDECL([], [archive_expsym_cmds], [2]) _LT_TAGDECL([], [module_cmds], [2], [Commands used to build a loadable module if different from building a shared archive.]) _LT_TAGDECL([], [module_expsym_cmds], [2]) _LT_TAGDECL([], [with_gnu_ld], [1], [Whether we are building with GNU ld or not]) _LT_TAGDECL([], [allow_undefined_flag], [1], [Flag that allows shared libraries with undefined symbols to be built]) _LT_TAGDECL([], [no_undefined_flag], [1], [Flag that enforces no undefined symbols]) _LT_TAGDECL([], [hardcode_libdir_flag_spec], [1], [Flag to hardcode $libdir into a binary during linking. This must work even if $libdir does not exist]) _LT_TAGDECL([], [hardcode_libdir_separator], [1], [Whether we need a single "-rpath" flag with a separated argument]) _LT_TAGDECL([], [hardcode_direct], [0], [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_direct_absolute], [0], [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes DIR into the resulting binary and the resulting library dependency is "absolute", i.e impossible to change by setting $shlibpath_var if the library is relocated]) _LT_TAGDECL([], [hardcode_minus_L], [0], [Set to "yes" if using the -LDIR flag during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_shlibpath_var], [0], [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_automatic], [0], [Set to "yes" if building a shared library automatically hardcodes DIR into the library and all subsequent libraries and executables linked against it]) _LT_TAGDECL([], [inherit_rpath], [0], [Set to yes if linker adds runtime paths of dependent libraries to runtime path list]) _LT_TAGDECL([], [link_all_deplibs], [0], [Whether libtool must link a program against all its dependency libraries]) _LT_TAGDECL([], [always_export_symbols], [0], [Set to "yes" if exported symbols are required]) _LT_TAGDECL([], [export_symbols_cmds], [2], [The commands to list exported symbols]) _LT_TAGDECL([], [exclude_expsyms], [1], [Symbols that should not be listed in the preloaded symbols]) _LT_TAGDECL([], [include_expsyms], [1], [Symbols that must always be exported]) _LT_TAGDECL([], [prelink_cmds], [2], [Commands necessary for linking programs (against libraries) with templates]) _LT_TAGDECL([], [postlink_cmds], [2], [Commands necessary for finishing linking programs]) _LT_TAGDECL([], [file_list_spec], [1], [Specify filename containing input files]) dnl FIXME: Not yet implemented dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1], dnl [Compiler flag to generate thread safe objects]) ])# _LT_LINKER_SHLIBS # _LT_LANG_C_CONFIG([TAG]) # ------------------------ # Ensure that the configuration variables for a C compiler are suitably # defined. These variables are subsequently used by _LT_CONFIG to write # the compiler configuration to 'libtool'. m4_defun([_LT_LANG_C_CONFIG], [m4_require([_LT_DECL_EGREP])dnl lt_save_CC=$CC AC_LANG_PUSH(C) # Source file extension for C test sources. ac_ext=c # Object file extension for compiled C test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(){return(0);}' _LT_TAG_COMPILER # Save the default compiler, since it gets overwritten when the other # tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP. compiler_DEFAULT=$CC # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) LT_SYS_DLOPEN_SELF _LT_CMD_STRIPLIB # Report what library types will actually be built AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_CONFIG($1) fi AC_LANG_POP CC=$lt_save_CC ])# _LT_LANG_C_CONFIG # _LT_LANG_CXX_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for a C++ compiler are suitably # defined. These variables are subsequently used by _LT_CONFIG to write # the compiler configuration to 'libtool'. m4_defun([_LT_LANG_CXX_CONFIG], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_PATH_MANIFEST_TOOL])dnl if test -n "$CXX" && ( test no != "$CXX" && ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) || (test g++ != "$CXX"))); then AC_PROG_CXXCPP else _lt_caught_CXX_error=yes fi AC_LANG_PUSH(C++) _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(compiler_needs_object, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for C++ test sources. ac_ext=cpp # Object file extension for compiled C++ test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the CXX compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_caught_CXX_error"; then # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_LD=$LD lt_save_GCC=$GCC GCC=$GXX lt_save_with_gnu_ld=$with_gnu_ld lt_save_path_LD=$lt_cv_path_LD if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx else $as_unset lt_cv_prog_gnu_ld fi if test -n "${lt_cv_path_LDCXX+set}"; then lt_cv_path_LD=$lt_cv_path_LDCXX else $as_unset lt_cv_path_LD fi test -z "${LDCXX+set}" || LD=$LDCXX CC=${CXX-"c++"} CFLAGS=$CXXFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) if test -n "$compiler"; then # We don't want -fno-exception when compiling C++ code, so set the # no_builtin_flag separately if test yes = "$GXX"; then _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' else _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= fi if test yes = "$GXX"; then # Set up default GNU C++ configuration LT_PATH_LD # Check if GNU C++ uses GNU ld as the underlying linker, since the # archiving commands below assume that GNU ld is being used. if test yes = "$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # If archive_cmds runs LD, not CC, wlarc should be empty # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to # investigate it a little bit more. (MM) wlarc='$wl' # ancient GNU ld didn't support --whole-archive et. al. if eval "`$CC -print-prog-name=ld` --help 2>&1" | $GREP 'no-whole-archive' > /dev/null; then _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else _LT_TAGVAR(whole_archive_flag_spec, $1)= fi else with_gnu_ld=no wlarc= # A generic and very simple default shared library creation # command for GNU C++ for the case where it uses the native # linker, instead of GNU ld. If possible, this setting should # overridden to take advantage of the native linker features on # the platform it is being used on. _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' fi # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " \-L"' else GXX=no with_gnu_ld=no wlarc= fi # PORTME: fill in a description of your system's C++ link characteristics AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) _LT_TAGVAR(ld_shlibs, $1)=yes case $host_os in aix3*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aix[[4-9]]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) for ld_flag in $LDFLAGS; do case $ld_flag in *-brtl*) aix_use_runtimelinking=yes break ;; esac done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_TAGVAR(archive_cmds, $1)='' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(file_list_spec, $1)='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no ;; esac if test yes = "$GXX"; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 _LT_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)= fi esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag=$shared_flag' $wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to # export. _LT_TAGVAR(always_export_symbols, $1)=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. # The "-G" linker flag allows undefined symbols. _LT_TAGVAR(no_undefined_flag, $1)='-bernotok' # Determine the default libpath from the value encoded in an empty # executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' fi _LT_TAGVAR(archive_cmds_need_lc, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared # libraries. Need -bnortl late, we may have -brtl in LDFLAGS. _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' fi fi ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; chorus*) case $cc_basename in *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; cygwin* | mingw* | pw32* | cegcc*) case $GXX,$cc_basename in ,cl* | no,cl*) # Native MSVC # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes # Don't use ranlib _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ func_to_tool_file "$lt_outputfile"~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # g++ # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; darwin* | rhapsody*) _LT_DARWIN_LINKER_FEATURES($1) ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; dgux*) case $cc_basename in ec++*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; ghcx*) # Green Hills C++ Compiler # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; freebsd2.*) # C++ shared libraries reported to be fairly broken before # switch to ELF _LT_TAGVAR(ld_shlibs, $1)=no ;; freebsd-elf*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;; freebsd* | dragonfly*) # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF # conventions _LT_TAGVAR(ld_shlibs, $1)=yes ;; haiku*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(link_all_deplibs, $1)=yes ;; hpux9*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aCC*) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP " \-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes = "$GXX"; then _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; hpux10*|hpux11*) if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) ;; *) _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' ;; esac fi case $host_cpu in hppa*64*|ia64*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. ;; esac case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aCC*) case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP " \-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes = "$GXX"; then if test no = "$with_gnu_ld"; then case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac fi else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; interix[[3-9]]*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='sed "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; irix5* | irix6*) case $cc_basename in CC*) # SGI C++ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' # Archives containing C++ object files must be created using # "CC -ar", where "CC" is the IRIX C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs' ;; *) if test yes = "$GXX"; then if test no = "$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib' fi fi _LT_TAGVAR(link_all_deplibs, $1)=yes ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(inherit_rpath, $1)=yes ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # Archives containing C++ object files must be created using # "CC -Bstatic", where "CC" is the KAI C++ compiler. _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; icpc* | ecpc* ) # Intel C++ with_gnu_ld=yes # version 8.0 and above of icpc choke on multiply defined symbols # if we add $predep_objects and $postdep_objects, however 7.1 and # earlier do not add the objects themselves. case `$CC -V 2>&1` in *"Version 7."*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; *) # Version 8.0 or newer tmp_idyn= case $host_cpu in ia64*) tmp_idyn=' -i_dynamic';; esac _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; esac _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' ;; pgCC* | pgcpp*) # Portland Group C++ compiler case `$CC -V` in *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*) _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~ compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"' _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~ $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~ $RANLIB $oldlib' _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; *) # Version 6 and above use weak symbols _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' ;; cxx*) # Compaq C++ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib $wl-retain-symbols-file $wl$export_symbols' runpath_var=LD_RUN_PATH _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed' ;; xl* | mpixl* | bgxl*) # IBM XL 8.0 on PPC, with GNU ld _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi ;; *) case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C++ 5.9 _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes # Not sure whether something based on # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 # would be better. output_verbose_link_cmd='func_echo_all' # Archives containing C++ object files must be created using # "CC -xar", where "CC" is the Sun C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' ;; esac ;; esac ;; lynxos*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; m88k*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; mvs*) case $cc_basename in cxx*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags' wlarc= _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no fi # Workaround some broken pre-1.5 toolchains output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"' ;; *nto* | *qnx*) _LT_TAGVAR(ld_shlibs, $1)=yes ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' fi output_verbose_link_cmd=func_echo_all else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; osf3* | osf4* | osf5*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Archives containing C++ object files must be created using # the KAI C++ compiler. case $host in osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;; esac ;; RCC*) # Rational C++ 2.4.1 # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; cxx*) case $host in osf3*) _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' ;; *) _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~ echo "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~ $RM $lib.exp' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' ;; esac _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes,no = "$GXX,$with_gnu_ld"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' case $host in osf3*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " \-L"' else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; psos*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; lcc*) # Lucid # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; solaris*) case $cc_basename in CC* | sunCC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_TAGVAR(archive_cmds_need_lc,$1)=yes _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. # Supported since Solaris 2.6 (maybe 2.5.1?) _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' ;; esac _LT_TAGVAR(link_all_deplibs, $1)=yes output_verbose_link_cmd='func_echo_all' # Archives containing C++ object files must be created using # "CC -xar", where "CC" is the Sun C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' ;; gcx*) # Green Hills C++ Compiler _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' # The C++ compiler must be used to create the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs' ;; *) # GNU C++ compiler with Solaris linker if test yes,no = "$GXX,$with_gnu_ld"; then _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs' if $CC --version | $GREP -v '^2\.7' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " \-L"' else # g++ 2.7 appears to require '-G' NOT '-shared' on this # platform. _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " \-L"' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir' case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' ;; esac fi ;; esac ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~ '"$_LT_TAGVAR(old_archive_cmds, $1)" _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~ '"$_LT_TAGVAR(reload_cmds, $1)" ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; vxworks*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no _LT_TAGVAR(GCC, $1)=$GXX _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_SYS_HIDDEN_LIBDEPS($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS LDCXX=$LD LD=$lt_save_LD GCC=$lt_save_GCC with_gnu_ld=$lt_save_with_gnu_ld lt_cv_path_LDCXX=$lt_cv_path_LD lt_cv_path_LD=$lt_save_path_LD lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld fi # test yes != "$_lt_caught_CXX_error" AC_LANG_POP ])# _LT_LANG_CXX_CONFIG # _LT_FUNC_STRIPNAME_CNF # ---------------------- # func_stripname_cnf prefix suffix name # strip PREFIX and SUFFIX off of NAME. # PREFIX and SUFFIX must not contain globbing or regex special # characters, hashes, percent signs, but SUFFIX may contain a leading # dot (in which case that matches only a dot). # # This function is identical to the (non-XSI) version of func_stripname, # except this one can be used by m4 code that may be executed by configure, # rather than the libtool script. m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl AC_REQUIRE([_LT_DECL_SED]) AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH]) func_stripname_cnf () { case @S|@2 in .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;; *) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;; esac } # func_stripname_cnf ])# _LT_FUNC_STRIPNAME_CNF # _LT_SYS_HIDDEN_LIBDEPS([TAGNAME]) # --------------------------------- # Figure out "hidden" library dependencies from verbose # compiler output when linking a shared library. # Parse the compiler output and extract the necessary # objects, libraries and library flags. m4_defun([_LT_SYS_HIDDEN_LIBDEPS], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl # Dependencies to place before and after the object being linked: _LT_TAGVAR(predep_objects, $1)= _LT_TAGVAR(postdep_objects, $1)= _LT_TAGVAR(predeps, $1)= _LT_TAGVAR(postdeps, $1)= _LT_TAGVAR(compiler_lib_search_path, $1)= dnl we can't use the lt_simple_compile_test_code here, dnl because it contains code intended for an executable, dnl not a library. It's possible we should let each dnl tag define a new lt_????_link_test_code variable, dnl but it's only used here... m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF int a; void foo (void) { a = 0; } _LT_EOF ], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF class Foo { public: Foo (void) { a = 0; } private: int a; }; _LT_EOF ], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF subroutine foo implicit none integer*4 a a=0 return end _LT_EOF ], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF subroutine foo implicit none integer a a=0 return end _LT_EOF ], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF public class foo { private int a; public void bar (void) { a = 0; } }; _LT_EOF ], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF package foo func foo() { } _LT_EOF ]) _lt_libdeps_save_CFLAGS=$CFLAGS case "$CC $CFLAGS " in #( *\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;; *\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;; *\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;; esac dnl Parse the compiler output and extract the necessary dnl objects, libraries and library flags. if AC_TRY_EVAL(ac_compile); then # Parse the compiler output and extract the necessary # objects, libraries and library flags. # Sentinel used to keep track of whether or not we are before # the conftest object file. pre_test_object_deps_done=no for p in `eval "$output_verbose_link_cmd"`; do case $prev$p in -L* | -R* | -l*) # Some compilers place space between "-{L,R}" and the path. # Remove the space. if test x-L = "$p" || test x-R = "$p"; then prev=$p continue fi # Expand the sysroot to ease extracting the directories later. if test -z "$prev"; then case $p in -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;; -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;; -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;; esac fi case $p in =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;; esac if test no = "$pre_test_object_deps_done"; then case $prev in -L | -R) # Internal compiler library paths should come after those # provided the user. The postdeps already come after the # user supplied libs so there is no need to process them. if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p else _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p" fi ;; # The "-l" case would never come before the object being # linked, so don't bother handling this case. esac else if test -z "$_LT_TAGVAR(postdeps, $1)"; then _LT_TAGVAR(postdeps, $1)=$prev$p else _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p" fi fi prev= ;; *.lto.$objext) ;; # Ignore GCC LTO objects *.$objext) # This assumes that the test object file only shows up # once in the compiler output. if test "$p" = "conftest.$objext"; then pre_test_object_deps_done=yes continue fi if test no = "$pre_test_object_deps_done"; then if test -z "$_LT_TAGVAR(predep_objects, $1)"; then _LT_TAGVAR(predep_objects, $1)=$p else _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p" fi else if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then _LT_TAGVAR(postdep_objects, $1)=$p else _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p" fi fi ;; *) ;; # Ignore the rest. esac done # Clean up. rm -f a.out a.exe else echo "libtool.m4: error: problem compiling $1 test program" fi $RM -f confest.$objext CFLAGS=$_lt_libdeps_save_CFLAGS # PORTME: override above test on systems where it is broken m4_if([$1], [CXX], [case $host_os in interix[[3-9]]*) # Interix 3.5 installs completely hosed .la files for C++, so rather than # hack all around it, let's just trust "g++" to DTRT. _LT_TAGVAR(predep_objects,$1)= _LT_TAGVAR(postdep_objects,$1)= _LT_TAGVAR(postdeps,$1)= ;; esac ]) case " $_LT_TAGVAR(postdeps, $1) " in *" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;; esac _LT_TAGVAR(compiler_lib_search_dirs, $1)= if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'` fi _LT_TAGDECL([], [compiler_lib_search_dirs], [1], [The directories searched by this compiler when creating a shared library]) _LT_TAGDECL([], [predep_objects], [1], [Dependencies to place before and after the objects being linked to create a shared library]) _LT_TAGDECL([], [postdep_objects], [1]) _LT_TAGDECL([], [predeps], [1]) _LT_TAGDECL([], [postdeps], [1]) _LT_TAGDECL([], [compiler_lib_search_path], [1], [The library search path used internally by the compiler when linking a shared library]) ])# _LT_SYS_HIDDEN_LIBDEPS # _LT_LANG_F77_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for a Fortran 77 compiler are # suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_F77_CONFIG], [AC_LANG_PUSH(Fortran 77) if test -z "$F77" || test no = "$F77"; then _lt_disable_F77=yes fi _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for f77 test sources. ac_ext=f # Object file extension for compiled f77 test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the F77 compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_disable_F77"; then # Code to be used in simple compile tests lt_simple_compile_test_code="\ subroutine t return end " # Code to be used in simple link tests lt_simple_link_test_code="\ program t end " # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_GCC=$GCC lt_save_CFLAGS=$CFLAGS CC=${F77-"f77"} CFLAGS=$FFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) GCC=$G77 if test -n "$compiler"; then AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_TAGVAR(GCC, $1)=$G77 _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS fi # test yes != "$_lt_disable_F77" AC_LANG_POP ])# _LT_LANG_F77_CONFIG # _LT_LANG_FC_CONFIG([TAG]) # ------------------------- # Ensure that the configuration variables for a Fortran compiler are # suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_FC_CONFIG], [AC_LANG_PUSH(Fortran) if test -z "$FC" || test no = "$FC"; then _lt_disable_FC=yes fi _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for fc test sources. ac_ext=${ac_fc_srcext-f} # Object file extension for compiled fc test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the FC compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_disable_FC"; then # Code to be used in simple compile tests lt_simple_compile_test_code="\ subroutine t return end " # Code to be used in simple link tests lt_simple_link_test_code="\ program t end " # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_GCC=$GCC lt_save_CFLAGS=$CFLAGS CC=${FC-"f95"} CFLAGS=$FCFLAGS compiler=$CC GCC=$ac_cv_fc_compiler_gnu _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) if test -n "$compiler"; then AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_SYS_HIDDEN_LIBDEPS($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS fi # test yes != "$_lt_disable_FC" AC_LANG_POP ])# _LT_LANG_FC_CONFIG # _LT_LANG_GCJ_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for the GNU Java Compiler compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_GCJ_CONFIG], [AC_REQUIRE([LT_PROG_GCJ])dnl AC_LANG_SAVE # Source file extension for Java test sources. ac_ext=java # Object file extension for compiled Java test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="class foo {}" # Code to be used in simple link tests lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC=yes CC=${GCJ-"gcj"} CFLAGS=$GCJFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_TAGVAR(LD, $1)=$LD _LT_CC_BASENAME([$compiler]) # GCJ did not exist at the time GCC didn't implicitly link libc in. _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi AC_LANG_RESTORE GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_GCJ_CONFIG # _LT_LANG_GO_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for the GNU Go compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_GO_CONFIG], [AC_REQUIRE([LT_PROG_GO])dnl AC_LANG_SAVE # Source file extension for Go test sources. ac_ext=go # Object file extension for compiled Go test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="package main; func main() { }" # Code to be used in simple link tests lt_simple_link_test_code='package main; func main() { }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC=yes CC=${GOC-"gccgo"} CFLAGS=$GOFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_TAGVAR(LD, $1)=$LD _LT_CC_BASENAME([$compiler]) # Go did not exist at the time GCC didn't implicitly link libc in. _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi AC_LANG_RESTORE GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_GO_CONFIG # _LT_LANG_RC_CONFIG([TAG]) # ------------------------- # Ensure that the configuration variables for the Windows resource compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_RC_CONFIG], [AC_REQUIRE([LT_PROG_RC])dnl AC_LANG_SAVE # Source file extension for RC test sources. ac_ext=rc # Object file extension for compiled RC test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }' # Code to be used in simple link tests lt_simple_link_test_code=$lt_simple_compile_test_code # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC= CC=${RC-"windres"} CFLAGS= compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes if test -n "$compiler"; then : _LT_CONFIG($1) fi GCC=$lt_save_GCC AC_LANG_RESTORE CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_RC_CONFIG # LT_PROG_GCJ # ----------- AC_DEFUN([LT_PROG_GCJ], [m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ], [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ], [AC_CHECK_TOOL(GCJ, gcj,) test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2" AC_SUBST(GCJFLAGS)])])[]dnl ]) # Old name: AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_GCJ], []) # LT_PROG_GO # ---------- AC_DEFUN([LT_PROG_GO], [AC_CHECK_TOOL(GOC, gccgo,) ]) # LT_PROG_RC # ---------- AC_DEFUN([LT_PROG_RC], [AC_CHECK_TOOL(RC, windres,) ]) # Old name: AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_RC], []) # _LT_DECL_EGREP # -------------- # If we don't have a new enough Autoconf to choose the best grep # available, choose the one first in the user's PATH. m4_defun([_LT_DECL_EGREP], [AC_REQUIRE([AC_PROG_EGREP])dnl AC_REQUIRE([AC_PROG_FGREP])dnl test -z "$GREP" && GREP=grep _LT_DECL([], [GREP], [1], [A grep program that handles long lines]) _LT_DECL([], [EGREP], [1], [An ERE matcher]) _LT_DECL([], [FGREP], [1], [A literal string matcher]) dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too AC_SUBST([GREP]) ]) # _LT_DECL_OBJDUMP # -------------- # If we don't have a new enough Autoconf to choose the best objdump # available, choose the one first in the user's PATH. m4_defun([_LT_DECL_OBJDUMP], [AC_CHECK_TOOL(OBJDUMP, objdump, false) test -z "$OBJDUMP" && OBJDUMP=objdump _LT_DECL([], [OBJDUMP], [1], [An object symbol dumper]) AC_SUBST([OBJDUMP]) ]) # _LT_DECL_DLLTOOL # ---------------- # Ensure DLLTOOL variable is set. m4_defun([_LT_DECL_DLLTOOL], [AC_CHECK_TOOL(DLLTOOL, dlltool, false) test -z "$DLLTOOL" && DLLTOOL=dlltool _LT_DECL([], [DLLTOOL], [1], [DLL creation program]) AC_SUBST([DLLTOOL]) ]) # _LT_DECL_SED # ------------ # Check for a fully-functional sed program, that truncates # as few characters as possible. Prefer GNU sed if found. m4_defun([_LT_DECL_SED], [AC_PROG_SED test -z "$SED" && SED=sed Xsed="$SED -e 1s/^X//" _LT_DECL([], [SED], [1], [A sed program that does not truncate output]) _LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"], [Sed that helps us avoid accidentally triggering echo(1) options like -n]) ])# _LT_DECL_SED m4_ifndef([AC_PROG_SED], [ ############################################################ # NOTE: This macro has been submitted for inclusion into # # GNU Autoconf as AC_PROG_SED. When it is available in # # a released version of Autoconf we should remove this # # macro and use it instead. # ############################################################ m4_defun([AC_PROG_SED], [AC_MSG_CHECKING([for a sed that does not truncate output]) AC_CACHE_VAL(lt_cv_path_SED, [# Loop through the user's path and test for sed and gsed. # Then use that list of sed's as ones to test for truncation. as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for lt_ac_prog in sed gsed; do for ac_exec_ext in '' $ac_executable_extensions; do if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext" fi done done done IFS=$as_save_IFS lt_ac_max=0 lt_ac_count=0 # Add /usr/xpg4/bin/sed as it is typically found on Solaris # along with /bin/sed that truncates output. for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do test ! -f "$lt_ac_sed" && continue cat /dev/null > conftest.in lt_ac_count=0 echo $ECHO_N "0123456789$ECHO_C" >conftest.in # Check for GNU sed and select it if it is found. if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then lt_cv_path_SED=$lt_ac_sed break fi while true; do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo >>conftest.nl $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break cmp -s conftest.out conftest.nl || break # 10000 chars as input seems more than enough test 10 -lt "$lt_ac_count" && break lt_ac_count=`expr $lt_ac_count + 1` if test "$lt_ac_count" -gt "$lt_ac_max"; then lt_ac_max=$lt_ac_count lt_cv_path_SED=$lt_ac_sed fi done done ]) SED=$lt_cv_path_SED AC_SUBST([SED]) AC_MSG_RESULT([$SED]) ])#AC_PROG_SED ])#m4_ifndef # Old name: AU_ALIAS([LT_AC_PROG_SED], [AC_PROG_SED]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_SED], []) # _LT_CHECK_SHELL_FEATURES # ------------------------ # Find out whether the shell is Bourne or XSI compatible, # or has some other useful features. m4_defun([_LT_CHECK_SHELL_FEATURES], [if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then lt_unset=unset else lt_unset=false fi _LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl # test EBCDIC or ASCII case `echo X|tr X '\101'` in A) # ASCII based system # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr lt_SP2NL='tr \040 \012' lt_NL2SP='tr \015\012 \040\040' ;; *) # EBCDIC based system lt_SP2NL='tr \100 \n' lt_NL2SP='tr \r\n \100\100' ;; esac _LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl _LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl ])# _LT_CHECK_SHELL_FEATURES # _LT_PATH_CONVERSION_FUNCTIONS # ----------------------------- # Determine what file name conversion functions should be used by # func_to_host_file (and, implicitly, by func_to_host_path). These are needed # for certain cross-compile configurations and native mingw. m4_defun([_LT_PATH_CONVERSION_FUNCTIONS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl AC_MSG_CHECKING([how to convert $build file names to $host format]) AC_CACHE_VAL(lt_cv_to_host_file_cmd, [case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32 ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32 ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32 ;; esac ;; *-*-cygwin* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_noop ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin ;; esac ;; * ) # unhandled hosts (and "normal" native builds) lt_cv_to_host_file_cmd=func_convert_file_noop ;; esac ]) to_host_file_cmd=$lt_cv_to_host_file_cmd AC_MSG_RESULT([$lt_cv_to_host_file_cmd]) _LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd], [0], [convert $build file names to $host format])dnl AC_MSG_CHECKING([how to convert $build file names to toolchain format]) AC_CACHE_VAL(lt_cv_to_tool_file_cmd, [#assume ordinary cross tools, or native build. lt_cv_to_tool_file_cmd=func_convert_file_noop case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32 ;; esac ;; esac ]) to_tool_file_cmd=$lt_cv_to_tool_file_cmd AC_MSG_RESULT([$lt_cv_to_tool_file_cmd]) _LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd], [0], [convert $build files to toolchain format])dnl ])# _LT_PATH_CONVERSION_FUNCTIONS tpm2-pkcs11-1.7.0/m4/ax_try_compile_java.m40000644000175000017500000000337314124412605015230 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_try_compile_java.html # =========================================================================== # # SYNOPSIS # # AX_TRY_COMPILE_JAVA # # DESCRIPTION # # AX_TRY_COMPILE_JAVA attempt to compile user given source. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Devin Weaver # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AU_ALIAS([AC_TRY_COMPILE_JAVA], [AX_TRY_COMPILE_JAVA]) AC_DEFUN([AX_TRY_COMPILE_JAVA],[ AC_REQUIRE([AX_PROG_JAVAC])dnl cat << \EOF > Test.java /* [#]line __oline__ "configure" */ ifelse([$1], , , [import $1;]) public class Test { [$2] } EOF if AC_TRY_COMMAND($JAVAC $JAVACFLAGS Test.java) && test -s Test.class then dnl Don't remove the temporary files here, so they can be examined. ifelse([$3], , :, [$3]) else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat Test.java >&AS_MESSAGE_LOG_FD ifelse([$4], , , [ rm -f Test.java Test.class $4 ])dnl fi rm -f Test.java Test.class]) tpm2-pkcs11-1.7.0/m4/ax_prog_javac.m40000644000175000017500000000657614124412605014024 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_javac.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVAC # # DESCRIPTION # # AX_PROG_JAVAC tests an existing Java compiler. It uses the environment # variable JAVAC then tests in sequence various common Java compilers. For # political reasons, it starts with the free ones. # # If you want to force a specific compiler: # # - at the configure.in level, set JAVAC=yourcompiler before calling # AX_PROG_JAVAC # # - at the configure level, setenv JAVAC # # You can use the JAVAC variable in your Makefile.in, with @JAVAC@. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # TODO: allow to exclude compilers (rationale: most Java programs cannot # compile with some compilers like guavac). # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 8 AU_ALIAS([AC_PROG_JAVAC], [AX_PROG_JAVAC]) AC_DEFUN([AX_PROG_JAVAC],[ m4_define([m4_ax_prog_javac_list],["gcj -C" guavac jikes javac])dnl AS_IF([test "x$JAVAPREFIX" = x], [test "x$JAVAC" = x && AC_CHECK_PROGS([JAVAC], [m4_ax_prog_javac_list])], [test "x$JAVAC" = x && AC_CHECK_PROGS([JAVAC], [m4_ax_prog_javac_list], [], [$JAVAPREFIX/bin])]) m4_undefine([m4_ax_prog_javac_list])dnl test "x$JAVAC" = x && AC_MSG_ERROR([no acceptable Java compiler found in \$PATH]) AX_PROG_JAVAC_WORKS AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.7.0/m4/ax_add_am_macro_static.m40000644000175000017500000000152514124412605015633 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_add_am_macro_static.html # =========================================================================== # # SYNOPSIS # # AX_ADD_AM_MACRO_STATIC([RULE]) # # DESCRIPTION # # Adds the specified rule to $AMINCLUDE. # # LICENSE # # Copyright (c) 2009 Tom Howard # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 8 AC_DEFUN([AX_ADD_AM_MACRO_STATIC],[ AC_REQUIRE([AX_AM_MACROS_STATIC]) AX_AC_APPEND_TO_FILE(AMINCLUDE_STATIC,[$1]) ]) tpm2-pkcs11-1.7.0/m4/ax_normalize_path.m40000644000175000017500000001134214124412605014710 00000000000000# =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_normalize_path.html # =========================================================================== # # SYNOPSIS # # AX_NORMALIZE_PATH(VARNAME, [REFERENCE_STRING]) # # DESCRIPTION # # Perform some cleanups on the value of $VARNAME (interpreted as a path): # # - empty paths are changed to '.' # - trailing slashes are removed # - repeated slashes are squeezed except a leading doubled slash '//' # (which might indicate a networked disk on some OS). # # REFERENCE_STRING is used to turn '/' into '\' and vice-versa: if # REFERENCE_STRING contains some backslashes, all slashes and backslashes # are turned into backslashes, otherwise they are all turned into slashes. # # This makes processing of DOS filenames quite easier, because you can # turn a filename to the Unix notation, make your processing, and turn it # back to original notation. # # filename='A:\FOO\\BAR\' # old_filename="$filename" # # Switch to the unix notation # AX_NORMALIZE_PATH([filename], ["/"]) # # now we have $filename = 'A:/FOO/BAR' and we can process it as if # # it was a Unix path. For instance let's say that you want # # to append '/subpath': # filename="$filename/subpath" # # finally switch back to the original notation # AX_NORMALIZE_PATH([filename], ["$old_filename"]) # # now $filename equals to 'A:\FOO\BAR\subpath' # # One good reason to make all path processing with the unix convention is # that backslashes have a special meaning in many cases. For instance # # expr 'A:\FOO' : 'A:\Foo' # # will return 0 because the second argument is a regex in which # backslashes have to be backslashed. In other words, to have the two # strings to match you should write this instead: # # expr 'A:\Foo' : 'A:\\Foo' # # Such behavior makes DOS filenames extremely unpleasant to work with. So # temporary turn your paths to the Unix notation, and revert them to the # original notation after the processing. See the macro # AX_COMPUTE_RELATIVE_PATHS for a concrete example of this. # # REFERENCE_STRING defaults to $VARIABLE, this means that slashes will be # converted to backslashes if $VARIABLE already contains some backslashes # (see $thirddir below). # # firstdir='/usr/local//share' # seconddir='C:\Program Files\\' # thirddir='C:\home/usr/' # AX_NORMALIZE_PATH([firstdir]) # AX_NORMALIZE_PATH([seconddir]) # AX_NORMALIZE_PATH([thirddir]) # # $firstdir = '/usr/local/share' # # $seconddir = 'C:\Program Files' # # $thirddir = 'C:\home\usr' # # LICENSE # # Copyright (c) 2008 Alexandre Duret-Lutz # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 8 AU_ALIAS([ADL_NORMALIZE_PATH], [AX_NORMALIZE_PATH]) AC_DEFUN([AX_NORMALIZE_PATH], [case ":[$]$1:" in # change empty paths to '.' ::) $1='.' ;; # strip trailing slashes :*[[\\/]]:) $1=`echo "[$]$1" | sed 's,[[\\/]]*[$],,'` ;; :*:) ;; esac # squeeze repeated slashes case ifelse($2,,"[$]$1",$2) in # if the path contains any backslashes, turn slashes into backslashes *\\*) $1=`echo "[$]$1" | sed 's,\(.\)[[\\/]][[\\/]]*,\1\\\\,g'` ;; # if the path contains slashes, also turn backslashes into slashes *) $1=`echo "[$]$1" | sed 's,\(.\)[[\\/]][[\\/]]*,\1/,g'` ;; esac]) tpm2-pkcs11-1.7.0/configure0000775000175000017500000225437214124412614012351 00000000000000#! /bin/sh # Guess values for system-dependent variables and create Makefiles. # Generated by GNU Autoconf 2.69 for tpm2-pkcs11 1.7.0. # # Report bugs to . # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. # # # This configure script is free software; the Free Software Foundation # gives unlimited permission to copy, distribute and modify it. ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi as_nl=' ' export as_nl # Printing a long string crashes Solaris 7 /usr/bin/printf. as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo # Prefer a ksh shell builtin over an external printf program on Solaris, # but without wasting forks for bash or zsh. if test -z "$BASH_VERSION$ZSH_VERSION" \ && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='print -r --' as_echo_n='print -rn --' elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='printf %s\n' as_echo_n='printf %s' else if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"' as_echo_n='/usr/ucb/echo -n' else as_echo_body='eval expr "X$1" : "X\\(.*\\)"' as_echo_n_body='eval arg=$1; case $arg in #( *"$as_nl"*) expr "X$arg" : "X\\(.*\\)$as_nl"; arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;; esac; expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl" ' export as_echo_n_body as_echo_n='sh -c $as_echo_n_body as_echo' fi export as_echo_body as_echo='sh -c $as_echo_body as_echo' fi # The user is always right. if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # IFS # We need space, tab and new line, in precisely that order. Quoting is # there to prevent editors from complaining about space-tab. # (If _AS_PATH_WALK were called with IFS unset, it would disable word # splitting by setting IFS to empty value.) IFS=" "" $as_nl" # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # Unset variables that we do not need and which cause bugs (e.g. in # pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1" # suppresses any "Segmentation fault" message there. '((' could # trigger a bug in pdksh 5.2.14. for as_var in BASH_ENV ENV MAIL MAILPATH do eval test x\${$as_var+set} = xset \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done PS1='$ ' PS2='> ' PS4='+ ' # NLS nuisances. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # Use a proper internal environment variable to ensure we don't fall # into an infinite loop, continuously re-executing ourselves. if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then _as_can_reexec=no; export _as_can_reexec; # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. $as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2 as_fn_exit 255 fi # We don't want this to propagate to other subprocesses. { _as_can_reexec=; unset _as_can_reexec;} if test "x$CONFIG_SHELL" = x; then as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else case \`(set -o) 2>/dev/null\` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi " as_required="as_fn_return () { (exit \$1); } as_fn_success () { as_fn_return 0; } as_fn_failure () { as_fn_return 1; } as_fn_ret_success () { return 0; } as_fn_ret_failure () { return 1; } exitcode=0 as_fn_success || { exitcode=1; echo as_fn_success failed.; } as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; } as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; } as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; } if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then : else exitcode=1; echo positional parameters were not saved. fi test x\$exitcode = x0 || exit 1 test -x / || exit 1" as_suggested=" as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" && test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1 test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || ( ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO PATH=/empty FPATH=/empty; export PATH FPATH test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\ || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1 test \$(( 1 + 1 )) = 2 || exit 1" if (eval "$as_required") 2>/dev/null; then : as_have_required=yes else as_have_required=no fi if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then : else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR as_found=false for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. as_found=: case $as_dir in #( /*) for as_base in sh bash ksh sh5; do # Try only shells that exist, to save several forks. as_shell=$as_dir/$as_base if { test -f "$as_shell" || test -f "$as_shell.exe"; } && { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then : CONFIG_SHELL=$as_shell as_have_required=yes if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then : break 2 fi fi done;; esac as_found=false done $as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } && { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then : CONFIG_SHELL=$SHELL as_have_required=yes fi; } IFS=$as_save_IFS if test "x$CONFIG_SHELL" != x; then : export CONFIG_SHELL # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. $as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi if test x$as_have_required = xno; then : $as_echo "$0: This script requires a shell more modern than all" $as_echo "$0: the shells that I found on your system." if test x${ZSH_VERSION+set} = xset ; then $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should" $as_echo "$0: be upgraded to zsh 4.3.4 or later." else $as_echo "$0: Please tell bug-autoconf@gnu.org and $0: https://github.com/tpm2-software/tpm2-pkcs11/issues $0: about your system, including any error possibly output $0: before this message. Then install a modern shell, or $0: manually run the script under such a shell if you do $0: have one." fi exit 1 fi fi fi SHELL=${CONFIG_SHELL-/bin/sh} export SHELL # Unset more variables known to interfere with behavior of common tools. CLICOLOR_FORCE= GREP_OPTIONS= unset CLICOLOR_FORCE GREP_OPTIONS ## --------------------- ## ## M4sh Shell Functions. ## ## --------------------- ## # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then : eval 'as_fn_append () { eval $1+=\$2 }' else as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then : eval 'as_fn_arith () { as_val=$(( $* )) }' else as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi $as_echo "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || $as_echo X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits as_lineno_1=$LINENO as_lineno_1a=$LINENO as_lineno_2=$LINENO as_lineno_2a=$LINENO eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" && test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || { # Blame Lee E. McMahon (1931-1989) for sed's syntax. :-) sed -n ' p /[$]LINENO/= ' <$as_myself | sed ' s/[$]LINENO.*/&-/ t lineno b :lineno N :loop s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/ t loop s/-\n.*// ' >$as_me.lineno && chmod +x "$as_me.lineno" || { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; } # If we had to re-execute with $CONFIG_SHELL, we're ensured to have # already done that, so ensure we don't try to do so again and fall # in an infinite loop. This has already happened in practice. _as_can_reexec=no; export _as_can_reexec # Don't try to exec as it changes $[0], causing all sort of problems # (the dirname of $[0] is not the place where we might find the # original and so on. Autoconf is especially sensitive to this). . "./$as_me.lineno" # Exit status is that of the last command. exit } ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" SHELL=${CONFIG_SHELL-/bin/sh} test -n "$DJDIR" || exec 7<&0 &1 # Name of the host. # hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status, # so uname gets run too. ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q` # # Initializations. # ac_default_prefix=/usr/local ac_clean_files= ac_config_libobj_dir=. LIBOBJS= cross_compiling=no subdirs= MFLAGS= MAKEFLAGS= # Identity of this package. PACKAGE_NAME='tpm2-pkcs11' PACKAGE_TARNAME='tpm2-pkcs11' PACKAGE_VERSION='1.7.0' PACKAGE_STRING='tpm2-pkcs11 1.7.0' PACKAGE_BUGREPORT='https://github.com/tpm2-software/tpm2-pkcs11/issues' PACKAGE_URL='https://github.com/tpm2-software/tpm2-pkcs11' # Factoring default headers for most tests. ac_includes_default="\ #include #ifdef HAVE_SYS_TYPES_H # include #endif #ifdef HAVE_SYS_STAT_H # include #endif #ifdef STDC_HEADERS # include # include #else # ifdef HAVE_STDLIB_H # include # endif #endif #ifdef HAVE_STRING_H # if !defined STDC_HEADERS && defined HAVE_MEMORY_H # include # endif # include #endif #ifdef HAVE_STRINGS_H # include #endif #ifdef HAVE_INTTYPES_H # include #endif #ifdef HAVE_STDINT_H # include #endif #ifdef HAVE_UNISTD_H # include #endif" ac_subst_vars='am__EXEEXT_FALSE am__EXEEXT_TRUE LTLIBOBJS LIBOBJS EXTRA_LDFLAGS EXTRA_CFLAGS HAVE_P11KIT_FALSE HAVE_P11KIT_TRUE P11_CONFIGS_PATH P11_MODULE_PATH P11KIT_LIBS P11KIT_CFLAGS p11kitmoduledir p11kitconfigdir ENABLE_INTEGRATION_FALSE ENABLE_INTEGRATION_TRUE ENABLE_INTEGRATION tpm2tss_genkey tss2_provision PYTHON_INTERPRETER pkgpyexecdir pyexecdir pkgpythondir pythondir PYTHON_PLATFORM PYTHON_EXEC_PREFIX PYTHON_PREFIX PYTHON_VERSION PYTHON tpm2_abrmd sqlite3 bash p11tool pkcs11_tool expect modutil certutil ss TABRMD_TCTI tpm_server swtpm TSS2_TCTI_TABRMD_LIBS TSS2_TCTI_TABRMD_CFLAGS OPENSC_PKCS11_LIBS OPENSC_PKCS11_CFLAGS tpm2_changeauth tpm2_import tpm2_getcap tpm2_sign tpm2_encryptdecrypt tpm2_unseal tpm2_loadexternal tpm2_load tpm2_readpublic tpm2_evictcontrol tpm2_create tpm2_createprimary JAVA JAVAC CMOCKA_LIBS CMOCKA_CFLAGS UNIT_FALSE UNIT_TRUE ENABLE_ASAN_FALSE ENABLE_ASAN_TRUE FUZZING_CFLAGS FUZZING_FLAGS FUZZING_FALSE FUZZING_TRUE HAVE_FAPI_FALSE HAVE_FAPI_TRUE TSS2_FAPI_LIBS TSS2_FAPI_CFLAGS HAVE_LD_VERSION_SCRIPT_FALSE HAVE_LD_VERSION_SCRIPT_TRUE PTHREAD_CFLAGS PTHREAD_LIBS PTHREAD_CC ax_pthread_config CRYPTO_LIBS CRYPTO_CFLAGS YAML_LIBS YAML_CFLAGS SQLITE3_LIBS SQLITE3_CFLAGS TSS2_RC_LIBS TSS2_RC_CFLAGS TSS2_TCTILDR_LIBS TSS2_TCTILDR_CFLAGS TSS2_MU_LIBS TSS2_MU_CFLAGS TSS2_ESYS_LIBS TSS2_ESYS_CFLAGS PKG_CONFIG_LIBDIR PKG_CONFIG_PATH PKG_CONFIG AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE CODE_COVERAGE_LIBS CODE_COVERAGE_CXXFLAGS CODE_COVERAGE_CFLAGS CODE_COVERAGE_CPPFLAGS GENHTML LCOV GCOV ifnGNUmake ifGNUmake CODE_COVERAGE_ENABLED CODE_COVERAGE_ENABLED_FALSE CODE_COVERAGE_ENABLED_TRUE pkgconfigdir AM_BACKSLASH AM_DEFAULT_VERBOSITY AM_DEFAULT_V AM_V am__fastdepCC_FALSE am__fastdepCC_TRUE CCDEPMODE am__nodep AMDEPBACKSLASH AMDEP_FALSE AMDEP_TRUE am__include DEPDIR am__untar am__tar AMTAR am__leading_dot SET_MAKE mkdir_p MKDIR_P INSTALL_STRIP_PROGRAM install_sh MAKEINFO AUTOHEADER AUTOMAKE AUTOCONF ACLOCAL VERSION PACKAGE CYGPATH_W am__isrc INSTALL_DATA INSTALL_SCRIPT INSTALL_PROGRAM CPP LT_SYS_LIBRARY_PATH OTOOL64 OTOOL LIPO NMEDIT DSYMUTIL MANIFEST_TOOL AWK RANLIB STRIP ac_ct_AR AR DLLTOOL OBJDUMP LN_S NM ac_ct_DUMPBIN DUMPBIN LD FGREP EGREP GREP SED host_os host_vendor host_cpu host build_os build_vendor build_cpu build LIBTOOL OBJEXT EXEEXT ac_ct_CC CPPFLAGS LDFLAGS CFLAGS CC DISTCHECK_CONFIGURE_FLAGS target_alias host_alias build_alias LIBS ECHO_T ECHO_N ECHO_C DEFS mandir localedir libdir psdir pdfdir dvidir htmldir infodir docdir oldincludedir includedir runstatedir localstatedir sharedstatedir sysconfdir datadir datarootdir libexecdir sbindir bindir program_transform_name prefix exec_prefix PACKAGE_URL PACKAGE_BUGREPORT PACKAGE_STRING PACKAGE_VERSION PACKAGE_TARNAME PACKAGE_NAME PATH_SEPARATOR SHELL am__quote' ac_subst_files='' ac_user_opts=' enable_option_checking enable_debug enable_shared enable_static with_pic enable_fast_install with_aix_soname with_gnu_ld with_sysroot enable_libtool_lock enable_dependency_tracking enable_silent_rules with_pkgconfigdir with_gcov enable_code_coverage enable_ld_version_script enable_esapi_session_manage_flags enable_fapi enable_unit enable_fuzzing enable_asan enable_hardening enable_overflow with_fuzzing_flags enable_integration with_storedir enable_pack with_p11kitconfigdir with_p11kitmoduledir ' ac_precious_vars='build_alias host_alias target_alias CC CFLAGS LDFLAGS LIBS CPPFLAGS LT_SYS_LIBRARY_PATH CPP PKG_CONFIG PKG_CONFIG_PATH PKG_CONFIG_LIBDIR TSS2_ESYS_CFLAGS TSS2_ESYS_LIBS TSS2_MU_CFLAGS TSS2_MU_LIBS TSS2_TCTILDR_CFLAGS TSS2_TCTILDR_LIBS TSS2_RC_CFLAGS TSS2_RC_LIBS SQLITE3_CFLAGS SQLITE3_LIBS YAML_CFLAGS YAML_LIBS CRYPTO_CFLAGS CRYPTO_LIBS TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS CMOCKA_CFLAGS CMOCKA_LIBS OPENSC_PKCS11_CFLAGS OPENSC_PKCS11_LIBS TSS2_TCTI_TABRMD_CFLAGS TSS2_TCTI_TABRMD_LIBS PYTHON P11KIT_CFLAGS P11KIT_LIBS P11_MODULE_PATH P11_CONFIGS_PATH' # Initialize some variables set by options. ac_init_help= ac_init_version=false ac_unrecognized_opts= ac_unrecognized_sep= # The variables have the same names as the options, with # dashes changed to underlines. cache_file=/dev/null exec_prefix=NONE no_create= no_recursion= prefix=NONE program_prefix=NONE program_suffix=NONE program_transform_name=s,x,x, silent= site= srcdir= verbose= x_includes=NONE x_libraries=NONE # Installation directory options. # These are left unexpanded so users can "make install exec_prefix=/foo" # and all the variables that are supposed to be based on exec_prefix # by default will actually change. # Use braces instead of parens because sh, perl, etc. also accept them. # (The list follows the same order as the GNU Coding Standards.) bindir='${exec_prefix}/bin' sbindir='${exec_prefix}/sbin' libexecdir='${exec_prefix}/libexec' datarootdir='${prefix}/share' datadir='${datarootdir}' sysconfdir='${prefix}/etc' sharedstatedir='${prefix}/com' localstatedir='${prefix}/var' runstatedir='${localstatedir}/run' includedir='${prefix}/include' oldincludedir='/usr/include' docdir='${datarootdir}/doc/${PACKAGE_TARNAME}' infodir='${datarootdir}/info' htmldir='${docdir}' dvidir='${docdir}' pdfdir='${docdir}' psdir='${docdir}' libdir='${exec_prefix}/lib' localedir='${datarootdir}/locale' mandir='${datarootdir}/man' ac_prev= ac_dashdash= for ac_option do # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval $ac_prev=\$ac_option ac_prev= continue fi case $ac_option in *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;; *=) ac_optarg= ;; *) ac_optarg=yes ;; esac # Accept the important Cygnus configure options, so we can diagnose typos. case $ac_dashdash$ac_option in --) ac_dashdash=yes ;; -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) bindir=$ac_optarg ;; -build | --build | --buil | --bui | --bu) ac_prev=build_alias ;; -build=* | --build=* | --buil=* | --bui=* | --bu=*) build_alias=$ac_optarg ;; -cache-file | --cache-file | --cache-fil | --cache-fi \ | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c) ac_prev=cache_file ;; -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \ | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*) cache_file=$ac_optarg ;; --config-cache | -C) cache_file=config.cache ;; -datadir | --datadir | --datadi | --datad) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=*) datadir=$ac_optarg ;; -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \ | --dataroo | --dataro | --datar) ac_prev=datarootdir ;; -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \ | --dataroot=* | --dataroo=* | --dataro=* | --datar=*) datarootdir=$ac_optarg ;; -disable-* | --disable-*) ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=no ;; -docdir | --docdir | --docdi | --doc | --do) ac_prev=docdir ;; -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*) docdir=$ac_optarg ;; -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv) ac_prev=dvidir ;; -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*) dvidir=$ac_optarg ;; -enable-* | --enable-*) ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=\$ac_optarg ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ | --exec | --exe | --ex) ac_prev=exec_prefix ;; -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) exec_prefix=$ac_optarg ;; -gas | --gas | --ga | --g) # Obsolete; use --with-gas. with_gas=yes ;; -help | --help | --hel | --he | -h) ac_init_help=long ;; -help=r* | --help=r* | --hel=r* | --he=r* | -hr*) ac_init_help=recursive ;; -help=s* | --help=s* | --hel=s* | --he=s* | -hs*) ac_init_help=short ;; -host | --host | --hos | --ho) ac_prev=host_alias ;; -host=* | --host=* | --hos=* | --ho=*) host_alias=$ac_optarg ;; -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht) ac_prev=htmldir ;; -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \ | --ht=*) htmldir=$ac_optarg ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) includedir=$ac_optarg ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) infodir=$ac_optarg ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) libdir=$ac_optarg ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) libexecdir=$ac_optarg ;; -localedir | --localedir | --localedi | --localed | --locale) ac_prev=localedir ;; -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*) localedir=$ac_optarg ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst | --locals) ac_prev=localstatedir ;; -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*) localstatedir=$ac_optarg ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) mandir=$ac_optarg ;; -nfp | --nfp | --nf) # Obsolete; use --without-fp. with_fp=no ;; -no-create | --no-create | --no-creat | --no-crea | --no-cre \ | --no-cr | --no-c | -n) no_create=yes ;; -no-recursion | --no-recursion | --no-recursio | --no-recursi \ | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r) no_recursion=yes ;; -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \ | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \ | --oldin | --oldi | --old | --ol | --o) ac_prev=oldincludedir ;; -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \ | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \ | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*) oldincludedir=$ac_optarg ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) prefix=$ac_optarg ;; -program-prefix | --program-prefix | --program-prefi | --program-pref \ | --program-pre | --program-pr | --program-p) ac_prev=program_prefix ;; -program-prefix=* | --program-prefix=* | --program-prefi=* \ | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*) program_prefix=$ac_optarg ;; -program-suffix | --program-suffix | --program-suffi | --program-suff \ | --program-suf | --program-su | --program-s) ac_prev=program_suffix ;; -program-suffix=* | --program-suffix=* | --program-suffi=* \ | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*) program_suffix=$ac_optarg ;; -program-transform-name | --program-transform-name \ | --program-transform-nam | --program-transform-na \ | --program-transform-n | --program-transform- \ | --program-transform | --program-transfor \ | --program-transfo | --program-transf \ | --program-trans | --program-tran \ | --progr-tra | --program-tr | --program-t) ac_prev=program_transform_name ;; -program-transform-name=* | --program-transform-name=* \ | --program-transform-nam=* | --program-transform-na=* \ | --program-transform-n=* | --program-transform-=* \ | --program-transform=* | --program-transfor=* \ | --program-transfo=* | --program-transf=* \ | --program-trans=* | --program-tran=* \ | --progr-tra=* | --program-tr=* | --program-t=*) program_transform_name=$ac_optarg ;; -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd) ac_prev=pdfdir ;; -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*) pdfdir=$ac_optarg ;; -psdir | --psdir | --psdi | --psd | --ps) ac_prev=psdir ;; -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*) psdir=$ac_optarg ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) silent=yes ;; -runstatedir | --runstatedir | --runstatedi | --runstated \ | --runstate | --runstat | --runsta | --runst | --runs \ | --run | --ru | --r) ac_prev=runstatedir ;; -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ | --run=* | --ru=* | --r=*) runstatedir=$ac_optarg ;; -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) sbindir=$ac_optarg ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ | --sharedst | --shareds | --shared | --share | --shar \ | --sha | --sh) ac_prev=sharedstatedir ;; -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \ | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) sharedstatedir=$ac_optarg ;; -site | --site | --sit) ac_prev=site ;; -site=* | --site=* | --sit=*) site=$ac_optarg ;; -srcdir | --srcdir | --srcdi | --srcd | --src | --sr) ac_prev=srcdir ;; -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*) srcdir=$ac_optarg ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) sysconfdir=$ac_optarg ;; -target | --target | --targe | --targ | --tar | --ta | --t) ac_prev=target_alias ;; -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*) target_alias=$ac_optarg ;; -v | -verbose | --verbose | --verbos | --verbo | --verb) verbose=yes ;; -version | --version | --versio | --versi | --vers | -V) ac_init_version=: ;; -with-* | --with-*) ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=\$ac_optarg ;; -without-* | --without-*) ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: $ac_useropt" ac_useropt_orig=$ac_useropt ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=no ;; --x) # Obsolete; use --with-x. with_x=yes ;; -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \ | --x-incl | --x-inc | --x-in | --x-i) ac_prev=x_includes ;; -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \ | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*) x_includes=$ac_optarg ;; -x-libraries | --x-libraries | --x-librarie | --x-librari \ | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l) ac_prev=x_libraries ;; -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \ | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) x_libraries=$ac_optarg ;; -*) as_fn_error $? "unrecognized option: \`$ac_option' Try \`$0 --help' for more information" ;; *=*) ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='` # Reject names that are not valid shell variable names. case $ac_envvar in #( '' | [0-9]* | *[!_$as_cr_alnum]* ) as_fn_error $? "invalid variable name: \`$ac_envvar'" ;; esac eval $ac_envvar=\$ac_optarg export $ac_envvar ;; *) # FIXME: should be removed in autoconf 3.0. $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2 expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null && $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2 : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}" ;; esac done if test -n "$ac_prev"; then ac_option=--`echo $ac_prev | sed 's/_/-/g'` as_fn_error $? "missing argument to $ac_option" fi if test -n "$ac_unrecognized_opts"; then case $enable_option_checking in no) ;; fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;; *) $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;; esac fi # Check all directory arguments for consistency. for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ datadir sysconfdir sharedstatedir localstatedir includedir \ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ libdir localedir mandir runstatedir do eval ac_val=\$$ac_var # Remove trailing slashes. case $ac_val in */ ) ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'` eval $ac_var=\$ac_val;; esac # Be sure to have absolute directory names. case $ac_val in [\\/$]* | ?:[\\/]* ) continue;; NONE | '' ) case $ac_var in *prefix ) continue;; esac;; esac as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val" done # There might be people who depend on the old broken behavior: `$host' # used to hold the argument of --host etc. # FIXME: To remove some day. build=$build_alias host=$host_alias target=$target_alias # FIXME: To remove some day. if test "x$host_alias" != x; then if test "x$build_alias" = x; then cross_compiling=maybe elif test "x$build_alias" != "x$host_alias"; then cross_compiling=yes fi fi ac_tool_prefix= test -n "$host_alias" && ac_tool_prefix=$host_alias- test "$silent" = yes && exec 6>/dev/null ac_pwd=`pwd` && test -n "$ac_pwd" && ac_ls_di=`ls -di .` && ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` || as_fn_error $? "working directory cannot be determined" test "X$ac_ls_di" = "X$ac_pwd_ls_di" || as_fn_error $? "pwd does not report name of working directory" # Find the source files, if location was not specified. if test -z "$srcdir"; then ac_srcdir_defaulted=yes # Try the directory containing this script, then the parent directory. ac_confdir=`$as_dirname -- "$as_myself" || $as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_myself" : 'X\(//\)[^/]' \| \ X"$as_myself" : 'X\(//\)$' \| \ X"$as_myself" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_myself" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` srcdir=$ac_confdir if test ! -r "$srcdir/$ac_unique_file"; then srcdir=.. fi else ac_srcdir_defaulted=no fi if test ! -r "$srcdir/$ac_unique_file"; then test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .." as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir" fi ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work" ac_abs_confdir=`( cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg" pwd)` # When building in place, set srcdir=. if test "$ac_abs_confdir" = "$ac_pwd"; then srcdir=. fi # Remove unnecessary trailing slashes from srcdir. # Double slashes in file names in object file debugging info # mess up M-x gdb in Emacs. case $srcdir in */) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;; esac for ac_var in $ac_precious_vars; do eval ac_env_${ac_var}_set=\${${ac_var}+set} eval ac_env_${ac_var}_value=\$${ac_var} eval ac_cv_env_${ac_var}_set=\${${ac_var}+set} eval ac_cv_env_${ac_var}_value=\$${ac_var} done # # Report the --help message. # if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF \`configure' configures tpm2-pkcs11 1.7.0 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... To assign environment variables (e.g., CC, CFLAGS...), specify them as VAR=VALUE. See below for descriptions of some of the useful variables. Defaults for the options are specified in brackets. Configuration: -h, --help display this help and exit --help=short display options specific to this package --help=recursive display the short help of all the included packages -V, --version display version information and exit -q, --quiet, --silent do not print \`checking ...' messages --cache-file=FILE cache test results in FILE [disabled] -C, --config-cache alias for \`--cache-file=config.cache' -n, --no-create do not create output files --srcdir=DIR find the sources in DIR [configure dir or \`..'] Installation directories: --prefix=PREFIX install architecture-independent files in PREFIX [$ac_default_prefix] --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX [PREFIX] By default, \`make install' will install all the files in \`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify an installation prefix other than \`$ac_default_prefix' using \`--prefix', for instance \`--prefix=\$HOME'. For better control, use the options below. Fine tuning of the installation directories: --bindir=DIR user executables [EPREFIX/bin] --sbindir=DIR system admin executables [EPREFIX/sbin] --libexecdir=DIR program executables [EPREFIX/libexec] --sysconfdir=DIR read-only single-machine data [PREFIX/etc] --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] --localstatedir=DIR modifiable single-machine data [PREFIX/var] --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] --libdir=DIR object code libraries [EPREFIX/lib] --includedir=DIR C header files [PREFIX/include] --oldincludedir=DIR C header files for non-gcc [/usr/include] --datarootdir=DIR read-only arch.-independent data root [PREFIX/share] --datadir=DIR read-only architecture-independent data [DATAROOTDIR] --infodir=DIR info documentation [DATAROOTDIR/info] --localedir=DIR locale-dependent data [DATAROOTDIR/locale] --mandir=DIR man documentation [DATAROOTDIR/man] --docdir=DIR documentation root [DATAROOTDIR/doc/tpm2-pkcs11] --htmldir=DIR html documentation [DOCDIR] --dvidir=DIR dvi documentation [DOCDIR] --pdfdir=DIR pdf documentation [DOCDIR] --psdir=DIR ps documentation [DOCDIR] _ACEOF cat <<\_ACEOF Program names: --program-prefix=PREFIX prepend PREFIX to installed program names --program-suffix=SUFFIX append SUFFIX to installed program names --program-transform-name=PROGRAM run sed PROGRAM on installed program names System types: --build=BUILD configure for building on BUILD [guessed] --host=HOST cross-compile to build programs to run on HOST [BUILD] _ACEOF fi if test -n "$ac_init_help"; then case $ac_init_help in short | recursive ) echo "Configuration of tpm2-pkcs11 1.7.0:";; esac cat <<\_ACEOF Optional Features: --disable-option-checking ignore unrecognized --enable/--with options --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) --enable-FEATURE[=ARG] include FEATURE [ARG=yes] --enable-debug=[yes/info/profile/no] compile with debugging --enable-shared[=PKGS] build shared libraries [default=yes] --enable-static[=PKGS] build static libraries [default=yes] --enable-fast-install[=PKGS] optimize for fast installation [default=yes] --disable-libtool-lock avoid locking (might break parallel builds) --enable-dependency-tracking do not reject slow dependency extractors --disable-dependency-tracking speeds up one-time build --enable-silent-rules less verbose build output (undo: "make V=1") --disable-silent-rules verbose build output (undo: "make V=0") --enable-code-coverage Whether to enable code coverage support --enable-ld-version-script enable linker version script (default is enabled when possible) --enable-esapi-session-manage-flags Force the TPM module to manage ESAPI session flags (default is autodetect) --with-fapi enable or disable the fapi backend. Default is "auto" to autodetect --enable-unit build unit tests --enable-fuzzing build the fuzz tests --enable-asan Enable asan build, useful for testing --disable-hardening Disable compiler and linker options to frustrate memory corruption exploits --disable-overflow Disable builtin overflow checks (enabled by default) --enable-integration build and execute integration tests --enable-pack=[yes/no] Pack the structures. (default is no, except on Windows, where it defaults to packing) Optional Packages: --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) --with-pic[=PKGS] try to use only PIC/non-PIC objects [default=use both] --with-aix-soname=aix|svr4|both shared library versioning (aka "SONAME") variant to provide on AIX, [default=aix]. --with-gnu-ld assume the C compiler uses GNU ld [default=no] --with-sysroot[=DIR] Search for dependent libraries within DIR (or the compiler's sysroot if not specified). --with-pkgconfigdir pkg-config installation directory ['${libdir}/pkgconfig'] --with-gcov=GCOV use given GCOV for coverage (GCOV=gcov). --with-fuzzing-flags=FLAGS flags to pass to libfuzzer executables --with-storedir=DIR Store directory for searching, defaults to /etc/tpm2_pkcs11 --with-p11kitconfigdir=DIR directory for p11kit config --with-p11kitmoduledir=DIR directory for p11 libraries Some influential environment variables: CC C compiler command CFLAGS C compiler flags LDFLAGS linker flags, e.g. -L if you have libraries in a nonstandard directory LIBS libraries to pass to the linker, e.g. -l CPPFLAGS (Objective) C/C++ preprocessor flags, e.g. -I if you have headers in a nonstandard directory LT_SYS_LIBRARY_PATH User-defined run-time library search path. CPP C preprocessor PKG_CONFIG path to pkg-config utility PKG_CONFIG_PATH directories to add to pkg-config's search path PKG_CONFIG_LIBDIR path overriding pkg-config's built-in search path TSS2_ESYS_CFLAGS C compiler flags for TSS2_ESYS, overriding pkg-config TSS2_ESYS_LIBS linker flags for TSS2_ESYS, overriding pkg-config TSS2_MU_CFLAGS C compiler flags for TSS2_MU, overriding pkg-config TSS2_MU_LIBS linker flags for TSS2_MU, overriding pkg-config TSS2_TCTILDR_CFLAGS C compiler flags for TSS2_TCTILDR, overriding pkg-config TSS2_TCTILDR_LIBS linker flags for TSS2_TCTILDR, overriding pkg-config TSS2_RC_CFLAGS C compiler flags for TSS2_RC, overriding pkg-config TSS2_RC_LIBS linker flags for TSS2_RC, overriding pkg-config SQLITE3_CFLAGS C compiler flags for SQLITE3, overriding pkg-config SQLITE3_LIBS linker flags for SQLITE3, overriding pkg-config YAML_CFLAGS C compiler flags for YAML, overriding pkg-config YAML_LIBS linker flags for YAML, overriding pkg-config CRYPTO_CFLAGS C compiler flags for CRYPTO, overriding pkg-config CRYPTO_LIBS linker flags for CRYPTO, overriding pkg-config TSS2_FAPI_CFLAGS C compiler flags for TSS2_FAPI, overriding pkg-config TSS2_FAPI_LIBS linker flags for TSS2_FAPI, overriding pkg-config CMOCKA_CFLAGS C compiler flags for CMOCKA, overriding pkg-config CMOCKA_LIBS linker flags for CMOCKA, overriding pkg-config OPENSC_PKCS11_CFLAGS C compiler flags for OPENSC_PKCS11, overriding pkg-config OPENSC_PKCS11_LIBS linker flags for OPENSC_PKCS11, overriding pkg-config TSS2_TCTI_TABRMD_CFLAGS C compiler flags for TSS2_TCTI_TABRMD, overriding pkg-config TSS2_TCTI_TABRMD_LIBS linker flags for TSS2_TCTI_TABRMD, overriding pkg-config PYTHON the Python interpreter P11KIT_CFLAGS C compiler flags for P11KIT, overriding pkg-config P11KIT_LIBS linker flags for P11KIT, overriding pkg-config P11_MODULE_PATH value of p11_module_path for p11-kit-1, overriding pkg-config P11_CONFIGS_PATH value of p11_module_configs for p11-kit-1, overriding pkg-config Use these variables to override the choices made by `configure' or to help it to find libraries and programs with nonstandard names/locations. Report bugs to . tpm2-pkcs11 home page: . _ACEOF ac_status=$? fi if test "$ac_init_help" = "recursive"; then # If there are subdirs, report their specific --help. for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue test -d "$ac_dir" || { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } || continue ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix cd "$ac_dir" || { ac_status=$?; continue; } # Check for guested configure. if test -f "$ac_srcdir/configure.gnu"; then echo && $SHELL "$ac_srcdir/configure.gnu" --help=recursive elif test -f "$ac_srcdir/configure"; then echo && $SHELL "$ac_srcdir/configure" --help=recursive else $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2 fi || ac_status=$? cd "$ac_pwd" || { ac_status=$?; break; } done fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF tpm2-pkcs11 configure 1.7.0 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it. _ACEOF exit fi ## ------------------------ ## ## Autoconf initialization. ## ## ------------------------ ## # ac_fn_c_try_compile LINENO # -------------------------- # Try to compile conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest.$ac_objext; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_compile # ac_fn_c_try_link LINENO # ----------------------- # Try to link conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_link () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext conftest$ac_exeext if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest$ac_exeext && { test "$cross_compiling" = yes || test -x conftest$ac_exeext }; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would # interfere with the next link command; also delete a directory that is # left behind by Apple's compiler. We do this before executing the actions. rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_link # ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES # ------------------------------------------------------- # Tests whether HEADER exists and can be compiled using the include files in # INCLUDES, setting the cache variable VAR accordingly. ac_fn_c_check_header_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 #include <$2> _ACEOF if ac_fn_c_try_compile "$LINENO"; then : eval "$3=yes" else eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_header_compile # ac_fn_c_try_cpp LINENO # ---------------------- # Try to preprocess conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_cpp () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_cpp conftest.$ac_ext" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } > conftest.i && { test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" || test ! -s conftest.err }; then : ac_retval=0 else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_cpp # ac_fn_c_try_run LINENO # ---------------------- # Try to link conftest.$ac_ext, and return whether this succeeded. Assumes # that executables *can* be run. ac_fn_c_try_run () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { ac_try='./conftest$ac_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; }; then : ac_retval=0 else $as_echo "$as_me: program exited with status $ac_status" >&5 $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=$ac_status fi rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_run # ac_fn_c_check_func LINENO FUNC VAR # ---------------------------------- # Tests whether FUNC exists, setting the cache variable VAR accordingly ac_fn_c_check_func () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 $as_echo_n "checking for $2... " >&6; } if eval \${$3+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Define $2 to an innocuous variant, in case declares $2. For example, HP-UX 11i declares gettimeofday. */ #define $2 innocuous_$2 /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $2 (); below. Prefer to if __STDC__ is defined, since exists even on freestanding compilers. */ #ifdef __STDC__ # include #else # include #endif #undef $2 /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ #if defined __stub_$2 || defined __stub___$2 choke me #endif int main () { return $2 (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : eval "$3=yes" else eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi eval ac_res=\$$3 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 $as_echo "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_func cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by tpm2-pkcs11 $as_me 1.7.0, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ _ACEOF exec 5>>config.log { cat <<_ASUNAME ## --------- ## ## Platform. ## ## --------- ## hostname = `(hostname || uname -n) 2>/dev/null | sed 1q` uname -m = `(uname -m) 2>/dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown` /bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown` /bin/arch = `(/bin/arch) 2>/dev/null || echo unknown` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown` /usr/bin/hostinfo = `(/usr/bin/hostinfo) 2>/dev/null || echo unknown` /bin/machine = `(/bin/machine) 2>/dev/null || echo unknown` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown` /bin/universe = `(/bin/universe) 2>/dev/null || echo unknown` _ASUNAME as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. $as_echo "PATH: $as_dir" done IFS=$as_save_IFS } >&5 cat >&5 <<_ACEOF ## ----------- ## ## Core tests. ## ## ----------- ## _ACEOF # Keep a trace of the command line. # Strip out --no-create and --no-recursion so they do not pile up. # Strip out --silent because we don't want to record it for future runs. # Also quote any args containing shell meta-characters. # Make two passes to allow for proper duplicate-argument suppression. ac_configure_args= ac_configure_args0= ac_configure_args1= ac_must_keep_next=false for ac_pass in 1 2 do for ac_arg do case $ac_arg in -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) continue ;; *\'*) ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; esac case $ac_pass in 1) as_fn_append ac_configure_args0 " '$ac_arg'" ;; 2) as_fn_append ac_configure_args1 " '$ac_arg'" if test $ac_must_keep_next = true; then ac_must_keep_next=false # Got value, back to normal. else case $ac_arg in *=* | --config-cache | -C | -disable-* | --disable-* \ | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \ | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \ | -with-* | --with-* | -without-* | --without-* | --x) case "$ac_configure_args0 " in "$ac_configure_args1"*" '$ac_arg' "* ) continue ;; esac ;; -* ) ac_must_keep_next=true ;; esac fi as_fn_append ac_configure_args " '$ac_arg'" ;; esac done done { ac_configure_args0=; unset ac_configure_args0;} { ac_configure_args1=; unset ac_configure_args1;} # When interrupted or exit'd, cleanup temporary files, and complete # config.log. We remove comments because anyway the quotes in there # would cause problems or look ugly. # WARNING: Use '\'' to represent an apostrophe within the trap. # WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug. trap 'exit_status=$? # Save into config.log some information that might help in debugging. { echo $as_echo "## ---------------- ## ## Cache variables. ## ## ---------------- ##" echo # The following way of writing the cache mishandles newlines in values, ( for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #( *${as_nl}ac_space=\ *) sed -n \ "s/'\''/'\''\\\\'\'''\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p" ;; #( *) sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) echo $as_echo "## ----------------- ## ## Output variables. ## ## ----------------- ##" echo for ac_var in $ac_subst_vars do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac $as_echo "$ac_var='\''$ac_val'\''" done | sort echo if test -n "$ac_subst_files"; then $as_echo "## ------------------- ## ## File substitutions. ## ## ------------------- ##" echo for ac_var in $ac_subst_files do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac $as_echo "$ac_var='\''$ac_val'\''" done | sort echo fi if test -s confdefs.h; then $as_echo "## ----------- ## ## confdefs.h. ## ## ----------- ##" echo cat confdefs.h echo fi test "$ac_signal" != 0 && $as_echo "$as_me: caught signal $ac_signal" $as_echo "$as_me: exit $exit_status" } >&5 rm -f core *.core core.conftest.* && rm -f -r conftest* confdefs* conf$$* $ac_clean_files && exit $exit_status ' 0 for ac_signal in 1 2 13 15; do trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal done ac_signal=0 # confdefs.h avoids OS command line length limits that DEFS can exceed. rm -f -r conftest* confdefs.h $as_echo "/* confdefs.h */" > confdefs.h # Predefined preprocessor variables. cat >>confdefs.h <<_ACEOF #define PACKAGE_NAME "$PACKAGE_NAME" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_TARNAME "$PACKAGE_TARNAME" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_VERSION "$PACKAGE_VERSION" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_STRING "$PACKAGE_STRING" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT" _ACEOF cat >>confdefs.h <<_ACEOF #define PACKAGE_URL "$PACKAGE_URL" _ACEOF # Let the site file select an alternate cache file if it wants to. # Prefer an explicitly selected file to automatically selected ones. ac_site_file1=NONE ac_site_file2=NONE if test -n "$CONFIG_SITE"; then # We do not want a PATH search for config.site. case $CONFIG_SITE in #(( -*) ac_site_file1=./$CONFIG_SITE;; */*) ac_site_file1=$CONFIG_SITE;; *) ac_site_file1=./$CONFIG_SITE;; esac elif test "x$prefix" != xNONE; then ac_site_file1=$prefix/share/config.site ac_site_file2=$prefix/etc/config.site else ac_site_file1=$ac_default_prefix/share/config.site ac_site_file2=$ac_default_prefix/etc/config.site fi for ac_site_file in "$ac_site_file1" "$ac_site_file2" do test "x$ac_site_file" = xNONE && continue if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5 $as_echo "$as_me: loading site script $ac_site_file" >&6;} sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" \ || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "failed to load site script $ac_site_file See \`config.log' for more details" "$LINENO" 5; } fi done if test -r "$cache_file"; then # Some versions of bash will fail to source /dev/null (special files # actually), so we avoid doing that. DJGPP emulates it as a regular file. if test /dev/null != "$cache_file" && test -f "$cache_file"; then { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5 $as_echo "$as_me: loading cache $cache_file" >&6;} case $cache_file in [\\/]* | ?:[\\/]* ) . "$cache_file";; *) . "./$cache_file";; esac fi else { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5 $as_echo "$as_me: creating cache $cache_file" >&6;} >$cache_file fi # Check that the precious variables saved in the cache have kept the same # value. ac_cache_corrupted=false for ac_var in $ac_precious_vars; do eval ac_old_set=\$ac_cv_env_${ac_var}_set eval ac_new_set=\$ac_env_${ac_var}_set eval ac_old_val=\$ac_cv_env_${ac_var}_value eval ac_new_val=\$ac_env_${ac_var}_value case $ac_old_set,$ac_new_set in set,) { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 $as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} ac_cache_corrupted=: ;; ,set) { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5 $as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} ac_cache_corrupted=: ;; ,);; *) if test "x$ac_old_val" != "x$ac_new_val"; then # differences in whitespace do not lead to failure. ac_old_val_w=`echo x $ac_old_val` ac_new_val_w=`echo x $ac_new_val` if test "$ac_old_val_w" != "$ac_new_val_w"; then { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5 $as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} ac_cache_corrupted=: else { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5 $as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;} eval $ac_var=\$ac_old_val fi { $as_echo "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5 $as_echo "$as_me: former value: \`$ac_old_val'" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5 $as_echo "$as_me: current value: \`$ac_new_val'" >&2;} fi;; esac # Pass precious variables to config.status. if test "$ac_new_set" = set; then case $ac_new_val in *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;; *) ac_arg=$ac_var=$ac_new_val ;; esac case " $ac_configure_args " in *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy. *) as_fn_append ac_configure_args " '$ac_arg'" ;; esac fi done if $ac_cache_corrupted; then { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5 $as_echo "$as_me: error: changes in the environment can compromise the build" >&2;} as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5 fi ## -------------------- ## ## Main body of script. ## ## -------------------- ## ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # propagate configure arguments to distcheck DISTCHECK_CONFIGURE_FLAGS=$ac_configure_args # $is_release = ($PACKAGE_VERSION has a dash) case $PACKAGE_VERSION in #( *-*) : ax_is_release=no ;; #( *) : ax_is_release=yes ;; #( *) : ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable debugging" >&5 $as_echo_n "checking whether to enable debugging... " >&6; } ax_enable_debug_default=info ax_enable_debug_is_release=$ax_is_release # If this is a release, override the default. if test "$ax_enable_debug_is_release" = "yes"; then : ax_enable_debug_default="no" fi # Check whether --enable-debug was given. if test "${enable_debug+set}" = set; then : enableval=$enable_debug; else enable_debug=$ax_enable_debug_default fi # empty mean debug yes if test "x$enable_debug" = "x"; then : enable_debug="yes" fi # case of debug case $enable_debug in #( yes) : { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } CFLAGS="${CFLAGS} -g -O0" CXXFLAGS="${CXXFLAGS} -g -O0" FFLAGS="${FFLAGS} -g -O0" FCFLAGS="${FCFLAGS} -g -O0" OBJCFLAGS="${OBJCFLAGS} -g -O0" ;; #( info) : { $as_echo "$as_me:${as_lineno-$LINENO}: result: info" >&5 $as_echo "info" >&6; } CFLAGS="${CFLAGS} -g" CXXFLAGS="${CXXFLAGS} -g" FFLAGS="${FFLAGS} -g" FCFLAGS="${FCFLAGS} -g" OBJCFLAGS="${OBJCFLAGS} -g" ;; #( profile) : { $as_echo "$as_me:${as_lineno-$LINENO}: result: profile" >&5 $as_echo "profile" >&6; } CFLAGS="${CFLAGS} -g -pg" CXXFLAGS="${CXXFLAGS} -g -pg" FFLAGS="${FFLAGS} -g -pg" FCFLAGS="${FCFLAGS} -g -pg" OBJCFLAGS="${OBJCFLAGS} -g -pg" LDFLAGS="${LDFLAGS} -pg" ;; #( *) : { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if test "x${CFLAGS+set}" != "xset"; then : CFLAGS="" fi if test "x${CXXFLAGS+set}" != "xset"; then : CXXFLAGS="" fi if test "x${FFLAGS+set}" != "xset"; then : FFLAGS="" fi if test "x${FCFLAGS+set}" != "xset"; then : FCFLAGS="" fi if test "x${OBJCFLAGS+set}" != "xset"; then : OBJCFLAGS="" fi ;; esac if test "x$enable_debug" = "xyes"; then : else $as_echo "#define NDEBUG 1" >>confdefs.h fi ax_enable_debug=$enable_debug ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args. set dummy ${ac_tool_prefix}gcc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}gcc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_CC"; then ac_ct_CC=$CC # Extract the first word of "gcc", so it can be a program name with args. set dummy gcc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="gcc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 $as_echo "$ac_ct_CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi else CC="$ac_cv_prog_CC" fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args. set dummy ${ac_tool_prefix}cc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}cc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi fi if test -z "$CC"; then # Extract the first word of "cc", so it can be a program name with args. set dummy cc; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else ac_prog_rejected=no as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then ac_prog_rejected=yes continue fi ac_cv_prog_CC="cc" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS if test $ac_prog_rejected = yes; then # We found a bogon in the path, so make sure we never use it. set dummy $ac_cv_prog_CC shift if test $# != 0; then # We chose a different compiler from the bogus one. # However, it has the same basename, so the bogon will be chosen # first if we set CC to just the basename; use the full file name. shift ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@" fi fi fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then for ac_prog in cl.exe do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_CC="$ac_tool_prefix$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 $as_echo "$CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$CC" && break done fi if test -z "$CC"; then ac_ct_CC=$CC for ac_prog in cl.exe do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 $as_echo "$ac_ct_CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$ac_ct_CC" && break done if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi fi fi test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "no acceptable C compiler found in \$PATH See \`config.log' for more details" "$LINENO" 5; } # Provide some information about the compiler. $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5 set X $ac_compile ac_compiler=$2 for ac_option in --version -v -V -qversion; do { { ac_try="$ac_compiler $ac_option >&5" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compiler $ac_option >&5") 2>conftest.err ac_status=$? if test -s conftest.err; then sed '10a\ ... rest of stderr output deleted ... 10q' conftest.err >conftest.er1 cat conftest.er1 >&5 fi rm -f conftest.er1 conftest.err $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } done cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out" # Try to create an executable without -o first, disregard a.out. # It will help us diagnose broken compilers, and finding out an intuition # of exeext. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5 $as_echo_n "checking whether the C compiler works... " >&6; } ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'` # The possible output files: ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*" ac_rmfiles= for ac_file in $ac_files do case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; * ) ac_rmfiles="$ac_rmfiles $ac_file";; esac done rm -f $ac_rmfiles if { { ac_try="$ac_link_default" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link_default") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : # Autoconf-2.13 could set the ac_cv_exeext variable to `no'. # So ignore a value of `no', otherwise this would lead to `EXEEXT = no' # in a Makefile. We should not override ac_cv_exeext if it was cached, # so that the user can short-circuit this test for compilers unknown to # Autoconf. for ac_file in $ac_files '' do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; [ab].out ) # We found the default executable, but exeext='' is most # certainly right. break;; *.* ) if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no; then :; else ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` fi # We set ac_cv_exeext here because the later test for it is not # safe: cross compilers may not add the suffix if given an `-o' # argument, so we may need to know it at that point already. # Even if this section looks crufty: it has the advantage of # actually working. break;; * ) break;; esac done test "$ac_cv_exeext" = no && ac_cv_exeext= else ac_file='' fi if test -z "$ac_file"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "C compiler cannot create executables See \`config.log' for more details" "$LINENO" 5; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5 $as_echo_n "checking for C compiler default output file name... " >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5 $as_echo "$ac_file" >&6; } ac_exeext=$ac_cv_exeext rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out ac_clean_files=$ac_clean_files_save { $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5 $as_echo_n "checking for suffix of executables... " >&6; } if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : # If both `conftest.exe' and `conftest' are `present' (well, observable) # catch `conftest.exe'. For instance with Cygwin, `ls conftest' will # work properly (i.e., refer to `conftest.exe'), while it won't with # `rm'. for ac_file in conftest.exe conftest conftest.*; do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` break;; * ) break;; esac done else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of executables: cannot compile and link See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest conftest$ac_cv_exeext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5 $as_echo "$ac_cv_exeext" >&6; } rm -f conftest.$ac_ext EXEEXT=$ac_cv_exeext ac_exeext=$EXEEXT cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { FILE *f = fopen ("conftest.out", "w"); return ferror (f) || fclose (f) != 0; ; return 0; } _ACEOF ac_clean_files="$ac_clean_files conftest.out" # Check that the compiler produces executables we can run. If not, either # the compiler is broken, or we cross compile. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5 $as_echo_n "checking whether we are cross compiling... " >&6; } if test "$cross_compiling" != yes; then { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if { ac_try='./conftest$ac_cv_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; }; then cross_compiling=no else if test "$cross_compiling" = maybe; then cross_compiling=yes else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot run C compiled programs. If you meant to cross compile, use \`--host'. See \`config.log' for more details" "$LINENO" 5; } fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5 $as_echo "$cross_compiling" >&6; } rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out ac_clean_files=$ac_clean_files_save { $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5 $as_echo_n "checking for suffix of object files... " >&6; } if ${ac_cv_objext+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF rm -f conftest.o conftest.obj if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" $as_echo "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then : for ac_file in conftest.o conftest.obj conftest.*; do test -f "$ac_file" || continue; case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;; *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'` break;; esac done else $as_echo "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of object files: cannot compile See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest.$ac_cv_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5 $as_echo "$ac_cv_objext" >&6; } OBJEXT=$ac_cv_objext ac_objext=$OBJEXT { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5 $as_echo_n "checking whether we are using the GNU C compiler... " >&6; } if ${ac_cv_c_compiler_gnu+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { #ifndef __GNUC__ choke me #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_compiler_gnu=yes else ac_compiler_gnu=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext ac_cv_c_compiler_gnu=$ac_compiler_gnu fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5 $as_echo "$ac_cv_c_compiler_gnu" >&6; } if test $ac_compiler_gnu = yes; then GCC=yes else GCC= fi ac_test_CFLAGS=${CFLAGS+set} ac_save_CFLAGS=$CFLAGS { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5 $as_echo_n "checking whether $CC accepts -g... " >&6; } if ${ac_cv_prog_cc_g+:} false; then : $as_echo_n "(cached) " >&6 else ac_save_c_werror_flag=$ac_c_werror_flag ac_c_werror_flag=yes ac_cv_prog_cc_g=no CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_g=yes else CFLAGS="" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : else ac_c_werror_flag=$ac_save_c_werror_flag CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_g=yes fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext ac_c_werror_flag=$ac_save_c_werror_flag fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5 $as_echo "$ac_cv_prog_cc_g" >&6; } if test "$ac_test_CFLAGS" = set; then CFLAGS=$ac_save_CFLAGS elif test $ac_cv_prog_cc_g = yes; then if test "$GCC" = yes; then CFLAGS="-g -O2" else CFLAGS="-g" fi else if test "$GCC" = yes; then CFLAGS="-O2" else CFLAGS= fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5 $as_echo_n "checking for $CC option to accept ISO C89... " >&6; } if ${ac_cv_prog_cc_c89+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_prog_cc_c89=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include struct stat; /* Most of the following tests are stolen from RCS 5.7's src/conf.sh. */ struct buf { int x; }; FILE * (*rcsopen) (struct buf *, struct stat *, int); static char *e (p, i) char **p; int i; { return p[i]; } static char *f (char * (*g) (char **, int), char **p, ...) { char *s; va_list v; va_start (v,p); s = g (p, va_arg (v,int)); va_end (v); return s; } /* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has function prototypes and stuff, but not '\xHH' hex character constants. These don't provoke an error unfortunately, instead are silently treated as 'x'. The following induces an error, until -std is added to get proper ANSI mode. Curiously '\x00'!='x' always comes out true, for an array size at least. It's necessary to write '\x00'==0 to get something that's true only with -std. */ int osf4_cc_array ['\x00' == 0 ? 1 : -1]; /* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters inside strings and character constants. */ #define FOO(x) 'x' int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1]; int test (int i, double x); struct s1 {int (*f) (int a);}; struct s2 {int (*f) (double a);}; int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int); int argc; char **argv; int main () { return f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]; ; return 0; } _ACEOF for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \ -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__" do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO"; then : ac_cv_prog_cc_c89=$ac_arg fi rm -f core conftest.err conftest.$ac_objext test "x$ac_cv_prog_cc_c89" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi # AC_CACHE_VAL case "x$ac_cv_prog_cc_c89" in x) { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 $as_echo "none needed" >&6; } ;; xno) { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 $as_echo "unsupported" >&6; } ;; *) CC="$CC $ac_cv_prog_cc_c89" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5 $as_echo "$ac_cv_prog_cc_c89" >&6; } ;; esac if test "x$ac_cv_prog_cc_c89" != xno; then : fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ac_aux_dir= for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do if test -f "$ac_dir/install-sh"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/install-sh -c" break elif test -f "$ac_dir/install.sh"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/install.sh -c" break elif test -f "$ac_dir/shtool"; then ac_aux_dir=$ac_dir ac_install_sh="$ac_aux_dir/shtool install -c" break fi done if test -z "$ac_aux_dir"; then as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5 fi # These three variables are undocumented and unsupported, # and are intended to be withdrawn in a future Autoconf release. # They can cause serious problems if a builder's source tree is in a directory # whose full name contains unusual characters. ac_config_guess="$SHELL $ac_aux_dir/config.guess" # Please don't use this var. ac_config_sub="$SHELL $ac_aux_dir/config.sub" # Please don't use this var. ac_configure="$SHELL $ac_aux_dir/configure" # Please don't use this var. # Expand $ac_aux_dir to an absolute path. am_aux_dir=`cd "$ac_aux_dir" && pwd` ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5 $as_echo_n "checking whether $CC understands -c and -o together... " >&6; } if ${am_cv_prog_cc_c_o+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF # Make sure it works both with $CC and with simple cc. # Following AC_PROG_CC_C_O, we do the test twice because some # compilers refuse to overwrite an existing .o file with -o, # though they will create one. am_cv_prog_cc_c_o=yes for am_i in 1 2; do if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5 ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } \ && test -f conftest2.$ac_objext; then : OK else am_cv_prog_cc_c_o=no break fi done rm -f core conftest* unset am_i fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5 $as_echo "$am_cv_prog_cc_c_o" >&6; } if test "$am_cv_prog_cc_c_o" != yes; then # Losing compiler, so override with the script. # FIXME: It is wrong to rewrite CC. # But if we don't then we get into trouble of one sort or another. # A longer-term fix would be to have automake use am__CC in this case, # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)" CC="$am_aux_dir/compile $CC" fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu case `pwd` in *\ * | *\ *) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5 $as_echo "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;; esac macro_version='2.4.6' macro_revision='2.4.6' ltmain=$ac_aux_dir/ltmain.sh # Make sure we can run config.sub. $SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 || as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5 { $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5 $as_echo_n "checking build system type... " >&6; } if ${ac_cv_build+:} false; then : $as_echo_n "(cached) " >&6 else ac_build_alias=$build_alias test "x$ac_build_alias" = x && ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"` test "x$ac_build_alias" = x && as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5 ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` || as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5 $as_echo "$ac_cv_build" >&6; } case $ac_cv_build in *-*-*) ;; *) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;; esac build=$ac_cv_build ac_save_IFS=$IFS; IFS='-' set x $ac_cv_build shift build_cpu=$1 build_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: build_os=$* IFS=$ac_save_IFS case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5 $as_echo_n "checking host system type... " >&6; } if ${ac_cv_host+:} false; then : $as_echo_n "(cached) " >&6 else if test "x$host_alias" = x; then ac_cv_host=$ac_cv_build else ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` || as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5 fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5 $as_echo "$ac_cv_host" >&6; } case $ac_cv_host in *-*-*) ;; *) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;; esac host=$ac_cv_host ac_save_IFS=$IFS; IFS='-' set x $ac_cv_host shift host_cpu=$1 host_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: host_os=$* IFS=$ac_save_IFS case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac # Backslashify metacharacters that are still active within # double-quoted strings. sed_quote_subst='s/\(["`$\\]\)/\\\1/g' # Same as above, but do not quote variable references. double_quote_subst='s/\(["`\\]\)/\\\1/g' # Sed substitution to delay expansion of an escaped shell variable in a # double_quote_subst'ed string. delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' # Sed substitution to delay expansion of an escaped single quote. delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g' # Sed substitution to avoid accidental globbing in evaled expressions no_glob_subst='s/\*/\\\*/g' ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5 $as_echo_n "checking how to print strings... " >&6; } # Test print first, because it will be a builtin if present. if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \ test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='print -r --' elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='printf %s\n' else # Use this function as a fallback that always works. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $1 _LTECHO_EOF' } ECHO='func_fallback_echo' fi # func_echo_all arg... # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "" } case $ECHO in printf*) { $as_echo "$as_me:${as_lineno-$LINENO}: result: printf" >&5 $as_echo "printf" >&6; } ;; print*) { $as_echo "$as_me:${as_lineno-$LINENO}: result: print -r" >&5 $as_echo "print -r" >&6; } ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: result: cat" >&5 $as_echo "cat" >&6; } ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5 $as_echo_n "checking for a sed that does not truncate output... " >&6; } if ${ac_cv_path_SED+:} false; then : $as_echo_n "(cached) " >&6 else ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/ for ac_i in 1 2 3 4 5 6 7; do ac_script="$ac_script$as_nl$ac_script" done echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed { ac_script=; unset ac_script;} if test -z "$SED"; then ac_path_SED_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in sed gsed; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_SED="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_SED" || continue # Check for GNU ac_path_SED and select it if it is found. # Check for GNU $ac_path_SED case `"$ac_path_SED" --version 2>&1` in *GNU*) ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo '' >> "conftest.nl" "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_SED_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_SED="$ac_path_SED" ac_path_SED_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_SED_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_SED"; then as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5 fi else ac_cv_path_SED=$SED fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5 $as_echo "$ac_cv_path_SED" >&6; } SED="$ac_cv_path_SED" rm -f conftest.sed test -z "$SED" && SED=sed Xsed="$SED -e 1s/^X//" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5 $as_echo_n "checking for grep that handles long lines and -e... " >&6; } if ${ac_cv_path_GREP+:} false; then : $as_echo_n "(cached) " >&6 else if test -z "$GREP"; then ac_path_GREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in grep ggrep; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_GREP" || continue # Check for GNU ac_path_GREP and select it if it is found. # Check for GNU $ac_path_GREP case `"$ac_path_GREP" --version 2>&1` in *GNU*) ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo 'GREP' >> "conftest.nl" "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_GREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_GREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_GREP"; then as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_GREP=$GREP fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5 $as_echo "$ac_cv_path_GREP" >&6; } GREP="$ac_cv_path_GREP" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5 $as_echo_n "checking for egrep... " >&6; } if ${ac_cv_path_EGREP+:} false; then : $as_echo_n "(cached) " >&6 else if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 then ac_cv_path_EGREP="$GREP -E" else if test -z "$EGREP"; then ac_path_EGREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in egrep; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_EGREP" || continue # Check for GNU ac_path_EGREP and select it if it is found. # Check for GNU $ac_path_EGREP case `"$ac_path_EGREP" --version 2>&1` in *GNU*) ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo 'EGREP' >> "conftest.nl" "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_EGREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_EGREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_EGREP"; then as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_EGREP=$EGREP fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5 $as_echo "$ac_cv_path_EGREP" >&6; } EGREP="$ac_cv_path_EGREP" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5 $as_echo_n "checking for fgrep... " >&6; } if ${ac_cv_path_FGREP+:} false; then : $as_echo_n "(cached) " >&6 else if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1 then ac_cv_path_FGREP="$GREP -F" else if test -z "$FGREP"; then ac_path_FGREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in fgrep; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_FGREP="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_FGREP" || continue # Check for GNU ac_path_FGREP and select it if it is found. # Check for GNU $ac_path_FGREP case `"$ac_path_FGREP" --version 2>&1` in *GNU*) ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;; *) ac_count=0 $as_echo_n 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" $as_echo 'FGREP' >> "conftest.nl" "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_FGREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_FGREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_FGREP"; then as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_FGREP=$FGREP fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5 $as_echo "$ac_cv_path_FGREP" >&6; } FGREP="$ac_cv_path_FGREP" test -z "$GREP" && GREP=grep # Check whether --with-gnu-ld was given. if test "${with_gnu_ld+set}" = set; then : withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes else with_gnu_ld=no fi ac_prog=ld if test yes = "$GCC"; then # Check if gcc -print-prog-name=ld gives a path. { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5 $as_echo_n "checking for ld used by $CC... " >&6; } case $host in *-*-mingw*) # gcc leaves a trailing carriage return, which upsets mingw ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; *) ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; esac case $ac_prog in # Accept absolute paths. [\\/]* | ?:[\\/]*) re_direlt='/[^/][^/]*/\.\./' # Canonicalize the pathname of ld ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'` while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"` done test -z "$LD" && LD=$ac_prog ;; "") # If it fails, then pretend we aren't using GCC. ac_prog=ld ;; *) # If it is relative, then search for the first ld in PATH. with_gnu_ld=unknown ;; esac elif test yes = "$with_gnu_ld"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5 $as_echo_n "checking for GNU ld... " >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5 $as_echo_n "checking for non-GNU ld... " >&6; } fi if ${lt_cv_path_LD+:} false; then : $as_echo_n "(cached) " >&6 else if test -z "$LD"; then lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then lt_cv_path_LD=$ac_dir/$ac_prog # Check to see if the program is GNU ld. I'd rather use --version, # but apparently some variants of GNU ld only accept -v. # Break only if it was the GNU/non-GNU ld that we prefer. case `"$lt_cv_path_LD" -v 2>&1 &5 $as_echo "$LD" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5 $as_echo_n "checking if the linker ($LD) is GNU ld... " >&6; } if ${lt_cv_prog_gnu_ld+:} false; then : $as_echo_n "(cached) " >&6 else # I'd rather use --version here, but apparently some GNU lds only accept -v. case `$LD -v 2>&1 &5 $as_echo "$lt_cv_prog_gnu_ld" >&6; } with_gnu_ld=$lt_cv_prog_gnu_ld { $as_echo "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5 $as_echo_n "checking for BSD- or MS-compatible name lister (nm)... " >&6; } if ${lt_cv_path_NM+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$NM"; then # Let the user override the test. lt_cv_path_NM=$NM else lt_nm_to_check=${ac_tool_prefix}nm if test -n "$ac_tool_prefix" && test "$build" = "$host"; then lt_nm_to_check="$lt_nm_to_check nm" fi for lt_tmp_nm in $lt_nm_to_check; do lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. tmp_nm=$ac_dir/$lt_tmp_nm if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then # Check to see if the nm accepts a BSD-compat flag. # Adding the 'sed 1q' prevents false positives on HP-UX, which says: # nm: unknown option "B" ignored # Tru64's nm complains that /dev/null is an invalid object file # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty case $build_os in mingw*) lt_bad_file=conftest.nm/nofile ;; *) lt_bad_file=/dev/null ;; esac case `"$tmp_nm" -B $lt_bad_file 2>&1 | sed '1q'` in *$lt_bad_file* | *'Invalid file or object type'*) lt_cv_path_NM="$tmp_nm -B" break 2 ;; *) case `"$tmp_nm" -p /dev/null 2>&1 | sed '1q'` in */dev/null*) lt_cv_path_NM="$tmp_nm -p" break 2 ;; *) lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but continue # so that we can try to find one that supports BSD flags ;; esac ;; esac fi done IFS=$lt_save_ifs done : ${lt_cv_path_NM=no} fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5 $as_echo "$lt_cv_path_NM" >&6; } if test no != "$lt_cv_path_NM"; then NM=$lt_cv_path_NM else # Didn't find any BSD compatible name lister, look for dumpbin. if test -n "$DUMPBIN"; then : # Let the user override the test. else if test -n "$ac_tool_prefix"; then for ac_prog in dumpbin "link -dump" do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_DUMPBIN+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$DUMPBIN"; then ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DUMPBIN=$ac_cv_prog_DUMPBIN if test -n "$DUMPBIN"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5 $as_echo "$DUMPBIN" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$DUMPBIN" && break done fi if test -z "$DUMPBIN"; then ac_ct_DUMPBIN=$DUMPBIN for ac_prog in dumpbin "link -dump" do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_DUMPBIN+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_DUMPBIN"; then ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DUMPBIN="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN if test -n "$ac_ct_DUMPBIN"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5 $as_echo "$ac_ct_DUMPBIN" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$ac_ct_DUMPBIN" && break done if test "x$ac_ct_DUMPBIN" = x; then DUMPBIN=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DUMPBIN=$ac_ct_DUMPBIN fi fi case `$DUMPBIN -symbols -headers /dev/null 2>&1 | sed '1q'` in *COFF*) DUMPBIN="$DUMPBIN -symbols -headers" ;; *) DUMPBIN=: ;; esac fi if test : != "$DUMPBIN"; then NM=$DUMPBIN fi fi test -z "$NM" && NM=nm { $as_echo "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5 $as_echo_n "checking the name lister ($NM) interface... " >&6; } if ${lt_cv_nm_interface+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_nm_interface="BSD nm" echo "int some_variable = 0;" > conftest.$ac_ext (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5) (eval "$ac_compile" 2>conftest.err) cat conftest.err >&5 (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5) (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out) cat conftest.err >&5 (eval echo "\"\$as_me:$LINENO: output\"" >&5) cat conftest.out >&5 if $GREP 'External.*some_variable' conftest.out > /dev/null; then lt_cv_nm_interface="MS dumpbin" fi rm -f conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5 $as_echo "$lt_cv_nm_interface" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5 $as_echo_n "checking whether ln -s works... " >&6; } LN_S=$as_ln_s if test "$LN_S" = "ln -s"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5 $as_echo "no, using $LN_S" >&6; } fi # find the maximum length of command line arguments { $as_echo "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5 $as_echo_n "checking the maximum length of command line arguments... " >&6; } if ${lt_cv_sys_max_cmd_len+:} false; then : $as_echo_n "(cached) " >&6 else i=0 teststring=ABCD case $build_os in msdosdjgpp*) # On DJGPP, this test can blow up pretty badly due to problems in libc # (any single argument exceeding 2000 bytes causes a buffer overrun # during glob expansion). Even if it were fixed, the result of this # check would be larger than it should be. lt_cv_sys_max_cmd_len=12288; # 12K is about right ;; gnu*) # Under GNU Hurd, this test is not required because there is # no limit to the length of command line arguments. # Libtool will interpret -1 as no limit whatsoever lt_cv_sys_max_cmd_len=-1; ;; cygwin* | mingw* | cegcc*) # On Win9x/ME, this test blows up -- it succeeds, but takes # about 5 minutes as the teststring grows exponentially. # Worse, since 9x/ME are not pre-emptively multitasking, # you end up with a "frozen" computer, even though with patience # the test eventually succeeds (with a max line length of 256k). # Instead, let's just punt: use the minimum linelength reported by # all of the supported platforms: 8192 (on NT/2K/XP). lt_cv_sys_max_cmd_len=8192; ;; mint*) # On MiNT this can take a long time and run out of memory. lt_cv_sys_max_cmd_len=8192; ;; amigaos*) # On AmigaOS with pdksh, this test takes hours, literally. # So we just punt and use a minimum line length of 8192. lt_cv_sys_max_cmd_len=8192; ;; bitrig* | darwin* | dragonfly* | freebsd* | netbsd* | openbsd*) # This has been around since 386BSD, at least. Likely further. if test -x /sbin/sysctl; then lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` elif test -x /usr/sbin/sysctl; then lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` else lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs fi # And add a safety zone lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` ;; interix*) # We know the value 262144 and hardcode it with a safety zone (like BSD) lt_cv_sys_max_cmd_len=196608 ;; os2*) # The test takes a long time on OS/2. lt_cv_sys_max_cmd_len=8192 ;; osf*) # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not # nice to cause kernel panics so lets avoid the loop below. # First set a reasonable default. lt_cv_sys_max_cmd_len=16384 # if test -x /sbin/sysconfig; then case `/sbin/sysconfig -q proc exec_disable_arg_limit` in *1*) lt_cv_sys_max_cmd_len=-1 ;; esac fi ;; sco3.2v5*) lt_cv_sys_max_cmd_len=102400 ;; sysv5* | sco5v6* | sysv4.2uw2*) kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` if test -n "$kargmax"; then lt_cv_sys_max_cmd_len=`echo $kargmax | sed 's/.*[ ]//'` else lt_cv_sys_max_cmd_len=32768 fi ;; *) lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null` if test -n "$lt_cv_sys_max_cmd_len" && \ test undefined != "$lt_cv_sys_max_cmd_len"; then lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` else # Make teststring a little bigger before we do anything with it. # a 1K string should be a reasonable start. for i in 1 2 3 4 5 6 7 8; do teststring=$teststring$teststring done SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} # If test is not a shell built-in, we'll probably end up computing a # maximum length that is only half of the actual maximum length, but # we can't tell. while { test X`env echo "$teststring$teststring" 2>/dev/null` \ = "X$teststring$teststring"; } >/dev/null 2>&1 && test 17 != "$i" # 1/2 MB should be enough do i=`expr $i + 1` teststring=$teststring$teststring done # Only check the string length outside the loop. lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1` teststring= # Add a significant safety factor because C++ compilers can tack on # massive amounts of additional arguments before passing them to the # linker. It appears as though 1/2 is a usable value. lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` fi ;; esac fi if test -n "$lt_cv_sys_max_cmd_len"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5 $as_echo "$lt_cv_sys_max_cmd_len" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: none" >&5 $as_echo "none" >&6; } fi max_cmd_len=$lt_cv_sys_max_cmd_len : ${CP="cp -f"} : ${MV="mv -f"} : ${RM="rm -f"} if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then lt_unset=unset else lt_unset=false fi # test EBCDIC or ASCII case `echo X|tr X '\101'` in A) # ASCII based system # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr lt_SP2NL='tr \040 \012' lt_NL2SP='tr \015\012 \040\040' ;; *) # EBCDIC based system lt_SP2NL='tr \100 \n' lt_NL2SP='tr \r\n \100\100' ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5 $as_echo_n "checking how to convert $build file names to $host format... " >&6; } if ${lt_cv_to_host_file_cmd+:} false; then : $as_echo_n "(cached) " >&6 else case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32 ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32 ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32 ;; esac ;; *-*-cygwin* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_noop ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin ;; esac ;; * ) # unhandled hosts (and "normal" native builds) lt_cv_to_host_file_cmd=func_convert_file_noop ;; esac fi to_host_file_cmd=$lt_cv_to_host_file_cmd { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5 $as_echo "$lt_cv_to_host_file_cmd" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5 $as_echo_n "checking how to convert $build file names to toolchain format... " >&6; } if ${lt_cv_to_tool_file_cmd+:} false; then : $as_echo_n "(cached) " >&6 else #assume ordinary cross tools, or native build. lt_cv_to_tool_file_cmd=func_convert_file_noop case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32 ;; esac ;; esac fi to_tool_file_cmd=$lt_cv_to_tool_file_cmd { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5 $as_echo "$lt_cv_to_tool_file_cmd" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5 $as_echo_n "checking for $LD option to reload object files... " >&6; } if ${lt_cv_ld_reload_flag+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_ld_reload_flag='-r' fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5 $as_echo "$lt_cv_ld_reload_flag" >&6; } reload_flag=$lt_cv_ld_reload_flag case $reload_flag in "" | " "*) ;; *) reload_flag=" $reload_flag" ;; esac reload_cmds='$LD$reload_flag -o $output$reload_objs' case $host_os in cygwin* | mingw* | pw32* | cegcc*) if test yes != "$GCC"; then reload_cmds=false fi ;; darwin*) if test yes = "$GCC"; then reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs' else reload_cmds='$LD$reload_flag -o $output$reload_objs' fi ;; esac if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args. set dummy ${ac_tool_prefix}objdump; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_OBJDUMP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$OBJDUMP"; then ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OBJDUMP=$ac_cv_prog_OBJDUMP if test -n "$OBJDUMP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5 $as_echo "$OBJDUMP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_OBJDUMP"; then ac_ct_OBJDUMP=$OBJDUMP # Extract the first word of "objdump", so it can be a program name with args. set dummy objdump; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_OBJDUMP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_OBJDUMP"; then ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OBJDUMP="objdump" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP if test -n "$ac_ct_OBJDUMP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5 $as_echo "$ac_ct_OBJDUMP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_OBJDUMP" = x; then OBJDUMP="false" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OBJDUMP=$ac_ct_OBJDUMP fi else OBJDUMP="$ac_cv_prog_OBJDUMP" fi test -z "$OBJDUMP" && OBJDUMP=objdump { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5 $as_echo_n "checking how to recognize dependent libraries... " >&6; } if ${lt_cv_deplibs_check_method+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_deplibs_check_method='unknown' # Need to set the preceding variable on all platforms that support # interlibrary dependencies. # 'none' -- dependencies not supported. # 'unknown' -- same as none, but documents that we really don't know. # 'pass_all' -- all dependencies passed with no checks. # 'test_compile' -- check by making test program. # 'file_magic [[regex]]' -- check by looking for files in library path # that responds to the $file_magic_cmd with a given extended regex. # If you have 'file' or equivalent on your system and you're not sure # whether 'pass_all' will *always* work, you probably want this one. case $host_os in aix[4-9]*) lt_cv_deplibs_check_method=pass_all ;; beos*) lt_cv_deplibs_check_method=pass_all ;; bsdi[45]*) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)' lt_cv_file_magic_cmd='/usr/bin/file -L' lt_cv_file_magic_test_file=/shlib/libc.so ;; cygwin*) # func_win32_libid is a shell function defined in ltmain.sh lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' ;; mingw* | pw32*) # Base MSYS/MinGW do not provide the 'file' command needed by # func_win32_libid shell function, so use a weaker test based on 'objdump', # unless we find 'file', for example because we are cross-compiling. if ( file / ) >/dev/null 2>&1; then lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' else # Keep this pattern in sync with the one in func_win32_libid. lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' lt_cv_file_magic_cmd='$OBJDUMP -f' fi ;; cegcc*) # use the weaker test based on 'objdump'. See mingw*. lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?' lt_cv_file_magic_cmd='$OBJDUMP -f' ;; darwin* | rhapsody*) lt_cv_deplibs_check_method=pass_all ;; freebsd* | dragonfly*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then case $host_cpu in i*86 ) # Not sure whether the presence of OpenBSD here was a mistake. # Let's accept both of them until this is cleared up. lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` ;; esac else lt_cv_deplibs_check_method=pass_all fi ;; haiku*) lt_cv_deplibs_check_method=pass_all ;; hpux10.20* | hpux11*) lt_cv_file_magic_cmd=/usr/bin/file case $host_cpu in ia64*) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64' lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so ;; hppa*64*) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]' lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl ;; *) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library' lt_cv_file_magic_test_file=/usr/lib/libc.sl ;; esac ;; interix[3-9]*) # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$' ;; irix5* | irix6* | nonstopux*) case $LD in *-32|*"-32 ") libmagic=32-bit;; *-n32|*"-n32 ") libmagic=N32;; *-64|*"-64 ") libmagic=64-bit;; *) libmagic=never-match;; esac lt_cv_deplibs_check_method=pass_all ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) lt_cv_deplibs_check_method=pass_all ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$' fi ;; newos6*) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)' lt_cv_file_magic_cmd=/usr/bin/file lt_cv_file_magic_test_file=/usr/lib/libnls.so ;; *nto* | *qnx*) lt_cv_deplibs_check_method=pass_all ;; openbsd* | bitrig*) if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$' fi ;; osf3* | osf4* | osf5*) lt_cv_deplibs_check_method=pass_all ;; rdos*) lt_cv_deplibs_check_method=pass_all ;; solaris*) lt_cv_deplibs_check_method=pass_all ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) lt_cv_deplibs_check_method=pass_all ;; sysv4 | sysv4.3*) case $host_vendor in motorola) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]' lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` ;; ncr) lt_cv_deplibs_check_method=pass_all ;; sequent) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )' ;; sni) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib" lt_cv_file_magic_test_file=/lib/libc.so ;; siemens) lt_cv_deplibs_check_method=pass_all ;; pc) lt_cv_deplibs_check_method=pass_all ;; esac ;; tpf*) lt_cv_deplibs_check_method=pass_all ;; os2*) lt_cv_deplibs_check_method=pass_all ;; esac fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5 $as_echo "$lt_cv_deplibs_check_method" >&6; } file_magic_glob= want_nocaseglob=no if test "$build" = "$host"; then case $host_os in mingw* | pw32*) if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then want_nocaseglob=yes else file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"` fi ;; esac fi file_magic_cmd=$lt_cv_file_magic_cmd deplibs_check_method=$lt_cv_deplibs_check_method test -z "$deplibs_check_method" && deplibs_check_method=unknown if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args. set dummy ${ac_tool_prefix}dlltool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_DLLTOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$DLLTOOL"; then ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DLLTOOL=$ac_cv_prog_DLLTOOL if test -n "$DLLTOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5 $as_echo "$DLLTOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_DLLTOOL"; then ac_ct_DLLTOOL=$DLLTOOL # Extract the first word of "dlltool", so it can be a program name with args. set dummy dlltool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_DLLTOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_DLLTOOL"; then ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DLLTOOL="dlltool" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL if test -n "$ac_ct_DLLTOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5 $as_echo "$ac_ct_DLLTOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_DLLTOOL" = x; then DLLTOOL="false" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DLLTOOL=$ac_ct_DLLTOOL fi else DLLTOOL="$ac_cv_prog_DLLTOOL" fi test -z "$DLLTOOL" && DLLTOOL=dlltool { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5 $as_echo_n "checking how to associate runtime and link libraries... " >&6; } if ${lt_cv_sharedlib_from_linklib_cmd+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_sharedlib_from_linklib_cmd='unknown' case $host_os in cygwin* | mingw* | pw32* | cegcc*) # two different shell functions defined in ltmain.sh; # decide which one to use based on capabilities of $DLLTOOL case `$DLLTOOL --help 2>&1` in *--identify-strict*) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib ;; *) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback ;; esac ;; *) # fallback: assume linklib IS sharedlib lt_cv_sharedlib_from_linklib_cmd=$ECHO ;; esac fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5 $as_echo "$lt_cv_sharedlib_from_linklib_cmd" >&6; } sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO if test -n "$ac_tool_prefix"; then for ac_prog in ar do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_AR+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$AR"; then ac_cv_prog_AR="$AR" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_AR="$ac_tool_prefix$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AR=$ac_cv_prog_AR if test -n "$AR"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5 $as_echo "$AR" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$AR" && break done fi if test -z "$AR"; then ac_ct_AR=$AR for ac_prog in ar do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_AR+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_AR"; then ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_AR="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_AR=$ac_cv_prog_ac_ct_AR if test -n "$ac_ct_AR"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5 $as_echo "$ac_ct_AR" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$ac_ct_AR" && break done if test "x$ac_ct_AR" = x; then AR="false" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac AR=$ac_ct_AR fi fi : ${AR=ar} : ${AR_FLAGS=cr} { $as_echo "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5 $as_echo_n "checking for archiver @FILE support... " >&6; } if ${lt_cv_ar_at_file+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_ar_at_file=no cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : echo conftest.$ac_objext > conftest.lst lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5 (eval $lt_ar_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if test 0 -eq "$ac_status"; then # Ensure the archiver fails upon bogus file names. rm -f conftest.$ac_objext libconftest.a { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5 (eval $lt_ar_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if test 0 -ne "$ac_status"; then lt_cv_ar_at_file=@ fi fi rm -f conftest.* libconftest.a fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5 $as_echo "$lt_cv_ar_at_file" >&6; } if test no = "$lt_cv_ar_at_file"; then archiver_list_spec= else archiver_list_spec=$lt_cv_ar_at_file fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args. set dummy ${ac_tool_prefix}strip; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_STRIP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$STRIP"; then ac_cv_prog_STRIP="$STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_STRIP="${ac_tool_prefix}strip" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi STRIP=$ac_cv_prog_STRIP if test -n "$STRIP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5 $as_echo "$STRIP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_STRIP"; then ac_ct_STRIP=$STRIP # Extract the first word of "strip", so it can be a program name with args. set dummy strip; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_STRIP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_STRIP"; then ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_STRIP="strip" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP if test -n "$ac_ct_STRIP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5 $as_echo "$ac_ct_STRIP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_STRIP" = x; then STRIP=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac STRIP=$ac_ct_STRIP fi else STRIP="$ac_cv_prog_STRIP" fi test -z "$STRIP" && STRIP=: if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args. set dummy ${ac_tool_prefix}ranlib; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_RANLIB+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$RANLIB"; then ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi RANLIB=$ac_cv_prog_RANLIB if test -n "$RANLIB"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5 $as_echo "$RANLIB" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_RANLIB"; then ac_ct_RANLIB=$RANLIB # Extract the first word of "ranlib", so it can be a program name with args. set dummy ranlib; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_RANLIB+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_RANLIB"; then ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_RANLIB="ranlib" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB if test -n "$ac_ct_RANLIB"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5 $as_echo "$ac_ct_RANLIB" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_RANLIB" = x; then RANLIB=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac RANLIB=$ac_ct_RANLIB fi else RANLIB="$ac_cv_prog_RANLIB" fi test -z "$RANLIB" && RANLIB=: # Determine commands to create old-style static archives. old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs' old_postinstall_cmds='chmod 644 $oldlib' old_postuninstall_cmds= if test -n "$RANLIB"; then case $host_os in bitrig* | openbsd*) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib" ;; *) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib" ;; esac old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib" fi case $host_os in darwin*) lock_old_archive_extraction=yes ;; *) lock_old_archive_extraction=no ;; esac for ac_prog in gawk mawk nawk awk do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_AWK+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_AWK="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5 $as_echo "$AWK" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$AWK" && break done # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC # Check for command to grab the raw symbol name followed by C symbol from nm. { $as_echo "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5 $as_echo_n "checking command to parse $NM output from $compiler object... " >&6; } if ${lt_cv_sys_global_symbol_pipe+:} false; then : $as_echo_n "(cached) " >&6 else # These are sane defaults that work on at least a few old systems. # [They come from Ultrix. What could be older than Ultrix?!! ;)] # Character class describing NM global symbol codes. symcode='[BCDEGRST]' # Regexp to match symbols that can be accessed directly from C. sympat='\([_A-Za-z][_A-Za-z0-9]*\)' # Define system-specific variables. case $host_os in aix*) symcode='[BCDT]' ;; cygwin* | mingw* | pw32* | cegcc*) symcode='[ABCDGISTW]' ;; hpux*) if test ia64 = "$host_cpu"; then symcode='[ABCDEGRST]' fi ;; irix* | nonstopux*) symcode='[BCDEGRST]' ;; osf*) symcode='[BCDEGQRST]' ;; solaris*) symcode='[BDRT]' ;; sco3.2v5*) symcode='[DT]' ;; sysv4.2uw2*) symcode='[DT]' ;; sysv5* | sco5v6* | unixware* | OpenUNIX*) symcode='[ABDT]' ;; sysv4) symcode='[DFNSTU]' ;; esac # If we're using GNU nm, then use its standard symbol codes. case `$NM -V 2>&1` in *GNU* | *'with BFD'*) symcode='[ABCDGIRSTW]' ;; esac if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Gets list of data symbols to import. lt_cv_sys_global_symbol_to_import="sed -n -e 's/^I .* \(.*\)$/\1/p'" # Adjust the below global symbol transforms to fixup imported variables. lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'" lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'" lt_c_name_lib_hook="\ -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\ -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'" else # Disable hooks by default. lt_cv_sys_global_symbol_to_import= lt_cdecl_hook= lt_c_name_hook= lt_c_name_lib_hook= fi # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. lt_cv_sys_global_symbol_to_cdecl="sed -n"\ $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" # Transform an extracted symbol line into symbol name and symbol address lt_cv_sys_global_symbol_to_c_name_address="sed -n"\ $lt_c_name_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'" # Transform an extracted symbol line into symbol name with lib prefix and # symbol address. lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="sed -n"\ $lt_c_name_lib_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'" # Handle CRLF in mingw tool chain opt_cr= case $build_os in mingw*) opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp ;; esac # Try without a prefix underscore, then with it. for ac_symprfx in "" "_"; do # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. symxfrm="\\1 $ac_symprfx\\2 \\2" # Write the raw and C identifiers. if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Fake it for dumpbin and say T for any non-static function, # D for any global variable and I for any imported variable. # Also find C++ and __fastcall symbols from MSVC++, # which start with @ or ?. lt_cv_sys_global_symbol_pipe="$AWK '"\ " {last_section=section; section=\$ 3};"\ " /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\ " /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\ " /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\ " /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\ " /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\ " \$ 0!~/External *\|/{next};"\ " / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\ " {if(hide[section]) next};"\ " {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\ " {split(\$ 0,a,/\||\r/); split(a[2],s)};"\ " s[1]~/^[@?]/{print f,s[1],s[1]; next};"\ " s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\ " ' prfx=^$ac_symprfx" else lt_cv_sys_global_symbol_pipe="sed -n -e 's/^.*[ ]\($symcode$symcode*\)[ ][ ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" fi lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | sed '/ __gnu_lto/d'" # Check to see that the pipe works correctly. pipe_works=no rm -f conftest* cat > conftest.$ac_ext <<_LT_EOF #ifdef __cplusplus extern "C" { #endif char nm_test_var; void nm_test_func(void); void nm_test_func(void){} #ifdef __cplusplus } #endif int main(){nm_test_var='a';nm_test_func();return(0);} _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then # Now try to grab the symbols. nlist=conftest.nm $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5 if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then # Try sorting and uniquifying the output. if sort "$nlist" | uniq > "$nlist"T; then mv -f "$nlist"T "$nlist" else rm -f "$nlist"T fi # Make sure that we snagged all the symbols we need. if $GREP ' nm_test_var$' "$nlist" >/dev/null; then if $GREP ' nm_test_func$' "$nlist" >/dev/null; then cat <<_LT_EOF > conftest.$ac_ext /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT_DLSYM_CONST #else # define LT_DLSYM_CONST const #endif #ifdef __cplusplus extern "C" { #endif _LT_EOF # Now generate the symbol file. eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext' cat <<_LT_EOF >> conftest.$ac_ext /* The mapping between symbol names and symbols. */ LT_DLSYM_CONST struct { const char *name; void *address; } lt__PROGRAM__LTX_preloaded_symbols[] = { { "@PROGRAM@", (void *) 0 }, _LT_EOF $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext cat <<\_LT_EOF >> conftest.$ac_ext {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt__PROGRAM__LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif _LT_EOF # Now try linking the two files. mv conftest.$ac_objext conftstm.$ac_objext lt_globsym_save_LIBS=$LIBS lt_globsym_save_CFLAGS=$CFLAGS LIBS=conftstm.$ac_objext CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag" if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s conftest$ac_exeext; then pipe_works=yes fi LIBS=$lt_globsym_save_LIBS CFLAGS=$lt_globsym_save_CFLAGS else echo "cannot find nm_test_func in $nlist" >&5 fi else echo "cannot find nm_test_var in $nlist" >&5 fi else echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5 fi else echo "$progname: failed program was:" >&5 cat conftest.$ac_ext >&5 fi rm -rf conftest* conftst* # Do not use the global_symbol_pipe unless it works. if test yes = "$pipe_works"; then break else lt_cv_sys_global_symbol_pipe= fi done fi if test -z "$lt_cv_sys_global_symbol_pipe"; then lt_cv_sys_global_symbol_to_cdecl= fi if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: failed" >&5 $as_echo "failed" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: ok" >&5 $as_echo "ok" >&6; } fi # Response file support. if test "$lt_cv_nm_interface" = "MS dumpbin"; then nm_file_list_spec='@' elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then nm_file_list_spec='@' fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5 $as_echo_n "checking for sysroot... " >&6; } # Check whether --with-sysroot was given. if test "${with_sysroot+set}" = set; then : withval=$with_sysroot; else with_sysroot=no fi lt_sysroot= case $with_sysroot in #( yes) if test yes = "$GCC"; then lt_sysroot=`$CC --print-sysroot 2>/dev/null` fi ;; #( /*) lt_sysroot=`echo "$with_sysroot" | sed -e "$sed_quote_subst"` ;; #( no|'') ;; #( *) { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5 $as_echo "$with_sysroot" >&6; } as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5 ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5 $as_echo "${lt_sysroot:-no}" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5 $as_echo_n "checking for a working dd... " >&6; } if ${ac_cv_path_lt_DD+:} false; then : $as_echo_n "(cached) " >&6 else printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i : ${lt_DD:=$DD} if test -z "$lt_DD"; then ac_path_lt_DD_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in dd; do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_lt_DD="$as_dir/$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_lt_DD" || continue if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=: fi $ac_path_lt_DD_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_lt_DD"; then : fi else ac_cv_path_lt_DD=$lt_DD fi rm -f conftest.i conftest2.i conftest.out fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5 $as_echo "$ac_cv_path_lt_DD" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5 $as_echo_n "checking how to truncate binary pipes... " >&6; } if ${lt_cv_truncate_bin+:} false; then : $as_echo_n "(cached) " >&6 else printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i lt_cv_truncate_bin= if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1" fi rm -f conftest.i conftest2.i conftest.out test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5 $as_echo "$lt_cv_truncate_bin" >&6; } # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in $*""; do case $cc_temp in compile | *[\\/]compile | ccache | *[\\/]ccache ) ;; distcc | *[\\/]distcc | purify | *[\\/]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } # Check whether --enable-libtool-lock was given. if test "${enable_libtool_lock+set}" = set; then : enableval=$enable_libtool_lock; fi test no = "$enable_libtool_lock" || enable_libtool_lock=yes # Some flags need to be propagated to the compiler or linker for good # libtool support. case $host in ia64-*-hpux*) # Find out what ABI is being produced by ac_compile, and set mode # options accordingly. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `/usr/bin/file conftest.$ac_objext` in *ELF-32*) HPUX_IA64_MODE=32 ;; *ELF-64*) HPUX_IA64_MODE=64 ;; esac fi rm -rf conftest* ;; *-*-irix6*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '#line '$LINENO' "configure"' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then if test yes = "$lt_cv_prog_gnu_ld"; then case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -melf32bsmip" ;; *N32*) LD="${LD-ld} -melf32bmipn32" ;; *64-bit*) LD="${LD-ld} -melf64bmip" ;; esac else case `/usr/bin/file conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -32" ;; *N32*) LD="${LD-ld} -n32" ;; *64-bit*) LD="${LD-ld} -64" ;; esac fi fi rm -rf conftest* ;; mips64*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '#line '$LINENO' "configure"' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then emul=elf case `/usr/bin/file conftest.$ac_objext` in *32-bit*) emul="${emul}32" ;; *64-bit*) emul="${emul}64" ;; esac case `/usr/bin/file conftest.$ac_objext` in *MSB*) emul="${emul}btsmip" ;; *LSB*) emul="${emul}ltsmip" ;; esac case `/usr/bin/file conftest.$ac_objext` in *N32*) emul="${emul}n32" ;; esac LD="${LD-ld} -m $emul" fi rm -rf conftest* ;; x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. Note that the listed cases only cover the # situations where additional linker options are needed (such as when # doing 32-bit compilation for a host where ld defaults to 64-bit, or # vice versa); the common cases where no linker options are needed do # not appear in the list. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `/usr/bin/file conftest.o` in *32-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_i386_fbsd" ;; x86_64-*linux*) case `/usr/bin/file conftest.o` in *x86-64*) LD="${LD-ld} -m elf32_x86_64" ;; *) LD="${LD-ld} -m elf_i386" ;; esac ;; powerpc64le-*linux*) LD="${LD-ld} -m elf32lppclinux" ;; powerpc64-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) LD="${LD-ld} -m elf_s390" ;; sparc64-*linux*) LD="${LD-ld} -m elf32_sparc" ;; esac ;; *64-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_x86_64_fbsd" ;; x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; powerpcle-*linux*) LD="${LD-ld} -m elf64lppc" ;; powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) LD="${LD-ld} -m elf64_s390" ;; sparc*-*linux*) LD="${LD-ld} -m elf64_sparc" ;; esac ;; esac fi rm -rf conftest* ;; *-*-sco3.2v5*) # On SCO OpenServer 5, we need -belf to get full-featured binaries. SAVE_CFLAGS=$CFLAGS CFLAGS="$CFLAGS -belf" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5 $as_echo_n "checking whether the C compiler needs -belf... " >&6; } if ${lt_cv_cc_needs_belf+:} false; then : $as_echo_n "(cached) " >&6 else ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : lt_cv_cc_needs_belf=yes else lt_cv_cc_needs_belf=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5 $as_echo "$lt_cv_cc_needs_belf" >&6; } if test yes != "$lt_cv_cc_needs_belf"; then # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf CFLAGS=$SAVE_CFLAGS fi ;; *-*solaris*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `/usr/bin/file conftest.o` in *64-bit*) case $lt_cv_prog_gnu_ld in yes*) case $host in i?86-*-solaris*|x86_64-*-solaris*) LD="${LD-ld} -m elf_x86_64" ;; sparc*-*-solaris*) LD="${LD-ld} -m elf64_sparc" ;; esac # GNU ld 2.21 introduced _sol2 emulations. Use them if available. if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then LD=${LD-ld}_sol2 fi ;; *) if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then LD="${LD-ld} -64" fi ;; esac ;; esac fi rm -rf conftest* ;; esac need_locks=$enable_libtool_lock if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args. set dummy ${ac_tool_prefix}mt; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_MANIFEST_TOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$MANIFEST_TOOL"; then ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL if test -n "$MANIFEST_TOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5 $as_echo "$MANIFEST_TOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_MANIFEST_TOOL"; then ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL # Extract the first word of "mt", so it can be a program name with args. set dummy mt; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_MANIFEST_TOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_MANIFEST_TOOL"; then ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_MANIFEST_TOOL="mt" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL if test -n "$ac_ct_MANIFEST_TOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5 $as_echo "$ac_ct_MANIFEST_TOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_MANIFEST_TOOL" = x; then MANIFEST_TOOL=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL fi else MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL" fi test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5 $as_echo_n "checking if $MANIFEST_TOOL is a manifest tool... " >&6; } if ${lt_cv_path_mainfest_tool+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_path_mainfest_tool=no echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5 $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out cat conftest.err >&5 if $GREP 'Manifest Tool' conftest.out > /dev/null; then lt_cv_path_mainfest_tool=yes fi rm -f conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_mainfest_tool" >&5 $as_echo "$lt_cv_path_mainfest_tool" >&6; } if test yes != "$lt_cv_path_mainfest_tool"; then MANIFEST_TOOL=: fi case $host_os in rhapsody* | darwin*) if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args. set dummy ${ac_tool_prefix}dsymutil; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_DSYMUTIL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$DSYMUTIL"; then ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DSYMUTIL=$ac_cv_prog_DSYMUTIL if test -n "$DSYMUTIL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5 $as_echo "$DSYMUTIL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_DSYMUTIL"; then ac_ct_DSYMUTIL=$DSYMUTIL # Extract the first word of "dsymutil", so it can be a program name with args. set dummy dsymutil; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_DSYMUTIL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_DSYMUTIL"; then ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DSYMUTIL="dsymutil" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL if test -n "$ac_ct_DSYMUTIL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5 $as_echo "$ac_ct_DSYMUTIL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_DSYMUTIL" = x; then DSYMUTIL=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DSYMUTIL=$ac_ct_DSYMUTIL fi else DSYMUTIL="$ac_cv_prog_DSYMUTIL" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args. set dummy ${ac_tool_prefix}nmedit; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_NMEDIT+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$NMEDIT"; then ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi NMEDIT=$ac_cv_prog_NMEDIT if test -n "$NMEDIT"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5 $as_echo "$NMEDIT" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_NMEDIT"; then ac_ct_NMEDIT=$NMEDIT # Extract the first word of "nmedit", so it can be a program name with args. set dummy nmedit; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_NMEDIT+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_NMEDIT"; then ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_NMEDIT="nmedit" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT if test -n "$ac_ct_NMEDIT"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5 $as_echo "$ac_ct_NMEDIT" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_NMEDIT" = x; then NMEDIT=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac NMEDIT=$ac_ct_NMEDIT fi else NMEDIT="$ac_cv_prog_NMEDIT" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args. set dummy ${ac_tool_prefix}lipo; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_LIPO+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$LIPO"; then ac_cv_prog_LIPO="$LIPO" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_LIPO="${ac_tool_prefix}lipo" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi LIPO=$ac_cv_prog_LIPO if test -n "$LIPO"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5 $as_echo "$LIPO" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_LIPO"; then ac_ct_LIPO=$LIPO # Extract the first word of "lipo", so it can be a program name with args. set dummy lipo; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_LIPO+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_LIPO"; then ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_LIPO="lipo" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO if test -n "$ac_ct_LIPO"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5 $as_echo "$ac_ct_LIPO" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_LIPO" = x; then LIPO=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac LIPO=$ac_ct_LIPO fi else LIPO="$ac_cv_prog_LIPO" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args. set dummy ${ac_tool_prefix}otool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_OTOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$OTOOL"; then ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_OTOOL="${ac_tool_prefix}otool" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OTOOL=$ac_cv_prog_OTOOL if test -n "$OTOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5 $as_echo "$OTOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_OTOOL"; then ac_ct_OTOOL=$OTOOL # Extract the first word of "otool", so it can be a program name with args. set dummy otool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_OTOOL+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_OTOOL"; then ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OTOOL="otool" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL if test -n "$ac_ct_OTOOL"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5 $as_echo "$ac_ct_OTOOL" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_OTOOL" = x; then OTOOL=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OTOOL=$ac_ct_OTOOL fi else OTOOL="$ac_cv_prog_OTOOL" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args. set dummy ${ac_tool_prefix}otool64; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_OTOOL64+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$OTOOL64"; then ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OTOOL64=$ac_cv_prog_OTOOL64 if test -n "$OTOOL64"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5 $as_echo "$OTOOL64" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_OTOOL64"; then ac_ct_OTOOL64=$OTOOL64 # Extract the first word of "otool64", so it can be a program name with args. set dummy otool64; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_OTOOL64+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_OTOOL64"; then ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OTOOL64="otool64" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64 if test -n "$ac_ct_OTOOL64"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5 $as_echo "$ac_ct_OTOOL64" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_OTOOL64" = x; then OTOOL64=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OTOOL64=$ac_ct_OTOOL64 fi else OTOOL64="$ac_cv_prog_OTOOL64" fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5 $as_echo_n "checking for -single_module linker flag... " >&6; } if ${lt_cv_apple_cc_single_mod+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_apple_cc_single_mod=no if test -z "$LT_MULTI_MODULE"; then # By default we will add the -single_module flag. You can override # by either setting the environment variable LT_MULTI_MODULE # non-empty at configure time, or by adding -multi_module to the # link flags. rm -rf libconftest.dylib* echo "int foo(void){return 1;}" > conftest.c echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c" >&5 $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c 2>conftest.err _lt_result=$? # If there is a non-empty error log, and "single_module" # appears in it, assume the flag caused a linker warning if test -s conftest.err && $GREP single_module conftest.err; then cat conftest.err >&5 # Otherwise, if the output was created with a 0 exit code from # the compiler, it worked. elif test -f libconftest.dylib && test 0 = "$_lt_result"; then lt_cv_apple_cc_single_mod=yes else cat conftest.err >&5 fi rm -rf libconftest.dylib* rm -f conftest.* fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5 $as_echo "$lt_cv_apple_cc_single_mod" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5 $as_echo_n "checking for -exported_symbols_list linker flag... " >&6; } if ${lt_cv_ld_exported_symbols_list+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_ld_exported_symbols_list=no save_LDFLAGS=$LDFLAGS echo "_main" > conftest.sym LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : lt_cv_ld_exported_symbols_list=yes else lt_cv_ld_exported_symbols_list=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5 $as_echo "$lt_cv_ld_exported_symbols_list" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5 $as_echo_n "checking for -force_load linker flag... " >&6; } if ${lt_cv_ld_force_load+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_ld_force_load=no cat > conftest.c << _LT_EOF int forced_loaded() { return 2;} _LT_EOF echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5 $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5 echo "$AR cr libconftest.a conftest.o" >&5 $AR cr libconftest.a conftest.o 2>&5 echo "$RANLIB libconftest.a" >&5 $RANLIB libconftest.a 2>&5 cat > conftest.c << _LT_EOF int main() { return 0;} _LT_EOF echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5 $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err _lt_result=$? if test -s conftest.err && $GREP force_load conftest.err; then cat conftest.err >&5 elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then lt_cv_ld_force_load=yes else cat conftest.err >&5 fi rm -f conftest.err libconftest.a conftest conftest.c rm -rf conftest.dSYM fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5 $as_echo "$lt_cv_ld_force_load" >&6; } case $host_os in rhapsody* | darwin1.[012]) _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;; darwin1.*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; darwin*) # darwin 5.x on # if running on 10.5 or later, the deployment target defaults # to the OS version, if on x86, and 10.4, the deployment # target defaults to 10.4. Don't you love it? case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in 10.0,*86*-darwin8*|10.0,*-darwin[91]*) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; 10.[012][,.]*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; 10.*) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; esac ;; esac if test yes = "$lt_cv_apple_cc_single_mod"; then _lt_dar_single_mod='$single_module' fi if test yes = "$lt_cv_ld_exported_symbols_list"; then _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym' else _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib' fi if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then _lt_dsymutil='~$DSYMUTIL $lib || :' else _lt_dsymutil= fi ;; esac # func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x$2 in x) ;; *:) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\" ;; x:*) eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\" ;; *::*) eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\" ;; *) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\" ;; esac } ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5 $as_echo_n "checking how to run the C preprocessor... " >&6; } # On Suns, sometimes $CPP names a directory. if test -n "$CPP" && test -d "$CPP"; then CPP= fi if test -z "$CPP"; then if ${ac_cv_prog_CPP+:} false; then : $as_echo_n "(cached) " >&6 else # Double quotes because CPP needs to be expanded for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp" do ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # Prefer to if __STDC__ is defined, since # exists even on freestanding compilers. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifdef __STDC__ # include #else # include #endif Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : else # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : # Broken: success on invalid input. continue else # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok; then : break fi done ac_cv_prog_CPP=$CPP fi CPP=$ac_cv_prog_CPP else ac_cv_prog_CPP=$CPP fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5 $as_echo "$CPP" >&6; } ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # Prefer to if __STDC__ is defined, since # exists even on freestanding compilers. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifdef __STDC__ # include #else # include #endif Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : else # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO"; then : # Broken: success on invalid input. continue else # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok; then : else { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "C preprocessor \"$CPP\" fails sanity check See \`config.log' for more details" "$LINENO" 5; } fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5 $as_echo_n "checking for ANSI C header files... " >&6; } if ${ac_cv_header_stdc+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #include #include int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_header_stdc=yes else ac_cv_header_stdc=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test $ac_cv_header_stdc = yes; then # SunOS 4.x string.h does not declare mem*, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "memchr" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "free" >/dev/null 2>&1; then : else ac_cv_header_stdc=no fi rm -f conftest* fi if test $ac_cv_header_stdc = yes; then # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi. if test "$cross_compiling" = yes; then : : else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include #if ((' ' & 0x0FF) == 0x020) # define ISLOWER(c) ('a' <= (c) && (c) <= 'z') # define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c)) #else # define ISLOWER(c) \ (('a' <= (c) && (c) <= 'i') \ || ('j' <= (c) && (c) <= 'r') \ || ('s' <= (c) && (c) <= 'z')) # define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c)) #endif #define XOR(e, f) (((e) && !(f)) || (!(e) && (f))) int main () { int i; for (i = 0; i < 256; i++) if (XOR (islower (i), ISLOWER (i)) || toupper (i) != TOUPPER (i)) return 2; return 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : else ac_cv_header_stdc=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5 $as_echo "$ac_cv_header_stdc" >&6; } if test $ac_cv_header_stdc = yes; then $as_echo "#define STDC_HEADERS 1" >>confdefs.h fi # On IRIX 5.3, sys/types and inttypes.h are conflicting. for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \ inttypes.h stdint.h unistd.h do : as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh` ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default " if eval test \"x\$"$as_ac_Header"\" = x"yes"; then : cat >>confdefs.h <<_ACEOF #define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1 _ACEOF fi done for ac_header in dlfcn.h do : ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default " if test "x$ac_cv_header_dlfcn_h" = xyes; then : cat >>confdefs.h <<_ACEOF #define HAVE_DLFCN_H 1 _ACEOF fi done # Set options enable_dlopen=no enable_win32_dll=no # Check whether --enable-shared was given. if test "${enable_shared+set}" = set; then : enableval=$enable_shared; p=${PACKAGE-default} case $enableval in yes) enable_shared=yes ;; no) enable_shared=no ;; *) enable_shared=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_shared=yes fi done IFS=$lt_save_ifs ;; esac else enable_shared=yes fi # Check whether --enable-static was given. if test "${enable_static+set}" = set; then : enableval=$enable_static; p=${PACKAGE-default} case $enableval in yes) enable_static=yes ;; no) enable_static=no ;; *) enable_static=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_static=yes fi done IFS=$lt_save_ifs ;; esac else enable_static=yes fi # Check whether --with-pic was given. if test "${with_pic+set}" = set; then : withval=$with_pic; lt_p=${PACKAGE-default} case $withval in yes|no) pic_mode=$withval ;; *) pic_mode=default # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for lt_pkg in $withval; do IFS=$lt_save_ifs if test "X$lt_pkg" = "X$lt_p"; then pic_mode=yes fi done IFS=$lt_save_ifs ;; esac else pic_mode=default fi # Check whether --enable-fast-install was given. if test "${enable_fast_install+set}" = set; then : enableval=$enable_fast_install; p=${PACKAGE-default} case $enableval in yes) enable_fast_install=yes ;; no) enable_fast_install=no ;; *) enable_fast_install=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_fast_install=yes fi done IFS=$lt_save_ifs ;; esac else enable_fast_install=yes fi shared_archive_member_spec= case $host,$enable_shared in power*-*-aix[5-9]*,yes) { $as_echo "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5 $as_echo_n "checking which variant of shared library versioning to provide... " >&6; } # Check whether --with-aix-soname was given. if test "${with_aix_soname+set}" = set; then : withval=$with_aix_soname; case $withval in aix|svr4|both) ;; *) as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5 ;; esac lt_cv_with_aix_soname=$with_aix_soname else if ${lt_cv_with_aix_soname+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_with_aix_soname=aix fi with_aix_soname=$lt_cv_with_aix_soname fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5 $as_echo "$with_aix_soname" >&6; } if test aix != "$with_aix_soname"; then # For the AIX way of multilib, we name the shared archive member # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o', # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File. # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag, # the AIX toolchain works better with OBJECT_MODE set (default 32). if test 64 = "${OBJECT_MODE-32}"; then shared_archive_member_spec=shr_64 else shared_archive_member_spec=shr fi fi ;; *) with_aix_soname=aix ;; esac # This can be used to rebuild libtool when needed LIBTOOL_DEPS=$ltmain # Always use our own libtool. LIBTOOL='$(SHELL) $(top_builddir)/libtool' test -z "$LN_S" && LN_S="ln -s" if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5 $as_echo_n "checking for objdir... " >&6; } if ${lt_cv_objdir+:} false; then : $as_echo_n "(cached) " >&6 else rm -f .libs 2>/dev/null mkdir .libs 2>/dev/null if test -d .libs; then lt_cv_objdir=.libs else # MS-DOS does not allow filenames that begin with a dot. lt_cv_objdir=_libs fi rmdir .libs 2>/dev/null fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5 $as_echo "$lt_cv_objdir" >&6; } objdir=$lt_cv_objdir cat >>confdefs.h <<_ACEOF #define LT_OBJDIR "$lt_cv_objdir/" _ACEOF case $host_os in aix3*) # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi ;; esac # Global variables: ofile=libtool can_build_shared=yes # All known linkers require a '.a' archive for static linking (except MSVC, # which needs '.lib'). libext=a with_gnu_ld=$lt_cv_prog_gnu_ld old_CC=$CC old_CFLAGS=$CFLAGS # Set sane defaults for various variables test -z "$CC" && CC=cc test -z "$LTCC" && LTCC=$CC test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS test -z "$LD" && LD=ld test -z "$ac_objext" && ac_objext=o func_cc_basename $compiler cc_basename=$func_cc_basename_result # Only perform the check for file, if the check method requires it test -z "$MAGIC_CMD" && MAGIC_CMD=file case $deplibs_check_method in file_magic*) if test "$file_magic_cmd" = '$MAGIC_CMD'; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5 $as_echo_n "checking for ${ac_tool_prefix}file... " >&6; } if ${lt_cv_path_MAGIC_CMD+:} false; then : $as_echo_n "(cached) " >&6 else case $MAGIC_CMD in [\\/*] | ?:[\\/]*) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR ac_dummy="/usr/bin$PATH_SEPARATOR$PATH" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/${ac_tool_prefix}file"; then lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac fi MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5 $as_echo "$MAGIC_CMD" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test -z "$lt_cv_path_MAGIC_CMD"; then if test -n "$ac_tool_prefix"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking for file" >&5 $as_echo_n "checking for file... " >&6; } if ${lt_cv_path_MAGIC_CMD+:} false; then : $as_echo_n "(cached) " >&6 else case $MAGIC_CMD in [\\/*] | ?:[\\/]*) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR ac_dummy="/usr/bin$PATH_SEPARATOR$PATH" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/file"; then lt_cv_path_MAGIC_CMD=$ac_dir/"file" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac fi MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5 $as_echo "$MAGIC_CMD" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi else MAGIC_CMD=: fi fi fi ;; esac # Use C for the default configuration in the libtool script lt_save_CC=$CC ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # Source file extension for C test sources. ac_ext=c # Object file extension for compiled C test sources. objext=o objext=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(){return(0);}' # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC # Save the default compiler, since it gets overwritten when the other # tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP. compiler_DEFAULT=$CC # save warnings/boilerplate of simple test code ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" >conftest.$ac_ext eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_compiler_boilerplate=`cat conftest.err` $RM conftest* ac_outfile=conftest.$ac_objext echo "$lt_simple_link_test_code" >conftest.$ac_ext eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_linker_boilerplate=`cat conftest.err` $RM -r conftest* ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then lt_prog_compiler_no_builtin_flag= if test yes = "$GCC"; then case $cc_basename in nvcc*) lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;; *) lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5 $as_echo_n "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; } if ${lt_cv_prog_compiler_rtti_exceptions+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_rtti_exceptions=no ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-fno-rtti -fno-exceptions" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_rtti_exceptions=yes fi fi $RM conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5 $as_echo "$lt_cv_prog_compiler_rtti_exceptions" >&6; } if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions" else : fi fi lt_prog_compiler_wl= lt_prog_compiler_pic= lt_prog_compiler_static= if test yes = "$GCC"; then lt_prog_compiler_wl='-Wl,' lt_prog_compiler_static='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor lt_prog_compiler_static='-Bstatic' fi lt_prog_compiler_pic='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support lt_prog_compiler_pic='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries lt_prog_compiler_pic='-DDLL_EXPORT' case $host_os in os2*) lt_prog_compiler_static='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files lt_prog_compiler_pic='-fno-common' ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. lt_prog_compiler_static= ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) # +Z the default ;; *) lt_prog_compiler_pic='-fPIC' ;; esac ;; interix[3-9]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; msdosdjgpp*) # Just because we use GCC doesn't mean we suddenly get shared libraries # on systems that don't support them. lt_prog_compiler_can_build_shared=no enable_shared=no ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. lt_prog_compiler_pic='-fPIC -shared' ;; sysv4*MP*) if test -d /usr/nec; then lt_prog_compiler_pic=-Kconform_pic fi ;; *) lt_prog_compiler_pic='-fPIC' ;; esac case $cc_basename in nvcc*) # Cuda Compiler Driver 2.2 lt_prog_compiler_wl='-Xlinker ' if test -n "$lt_prog_compiler_pic"; then lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic" fi ;; esac else # PORTME Check for flag to pass linker flags through the system compiler. case $host_os in aix*) lt_prog_compiler_wl='-Wl,' if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor lt_prog_compiler_static='-Bstatic' else lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp' fi ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files lt_prog_compiler_pic='-fno-common' case $cc_basename in nagfor*) # NAG Fortran compiler lt_prog_compiler_wl='-Wl,-Wl,,' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; esac ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). lt_prog_compiler_pic='-DDLL_EXPORT' case $host_os in os2*) lt_prog_compiler_static='$wl-static' ;; esac ;; hpux9* | hpux10* | hpux11*) lt_prog_compiler_wl='-Wl,' # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) lt_prog_compiler_pic='+Z' ;; esac # Is there a better lt_prog_compiler_static that works with the bundled CC? lt_prog_compiler_static='$wl-a ${wl}archive' ;; irix5* | irix6* | nonstopux*) lt_prog_compiler_wl='-Wl,' # PIC (with -KPIC) is the default. lt_prog_compiler_static='-non_shared' ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in # old Intel for x86_64, which still supported -KPIC. ecc*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-static' ;; # flang / f18. f95 an alias for gfortran or flang on Debian flang* | f18* | f95*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; # icc used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. icc* | ifort*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; # Lahey Fortran 8.1. lf95*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='--shared' lt_prog_compiler_static='--static' ;; nagfor*) # NAG Fortran compiler lt_prog_compiler_wl='-Wl,-Wl,,' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; tcc*) # Fabrice Bellard et al's Tiny C Compiler lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group compilers (*not* the Pentium gcc compiler, # which looks to be a dead project) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fpic' lt_prog_compiler_static='-Bstatic' ;; ccc*) lt_prog_compiler_wl='-Wl,' # All Alpha code is PIC. lt_prog_compiler_static='-non_shared' ;; xl* | bgxl* | bgf* | mpixl*) # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-qpic' lt_prog_compiler_static='-qstaticlink' ;; *) case `$CC -V 2>&1 | sed 5q` in *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*) # Sun Fortran 8.3 passes all unrecognized flags to the linker lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='' ;; *Sun\ F* | *Sun*Fortran*) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='-Qoption ld ' ;; *Sun\ C*) # Sun C 5.9 lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='-Wl,' ;; *Intel*\ [CF]*Compiler*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; *Portland\ Group*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fpic' lt_prog_compiler_static='-Bstatic' ;; esac ;; esac ;; newsos6) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. lt_prog_compiler_pic='-fPIC -shared' ;; osf3* | osf4* | osf5*) lt_prog_compiler_wl='-Wl,' # All OSF/1 code is PIC. lt_prog_compiler_static='-non_shared' ;; rdos*) lt_prog_compiler_static='-non_shared' ;; solaris*) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' case $cc_basename in f77* | f90* | f95* | sunf77* | sunf90* | sunf95*) lt_prog_compiler_wl='-Qoption ld ';; *) lt_prog_compiler_wl='-Wl,';; esac ;; sunos4*) lt_prog_compiler_wl='-Qoption ld ' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; sysv4 | sysv4.2uw2* | sysv4.3*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; sysv4*MP*) if test -d /usr/nec; then lt_prog_compiler_pic='-Kconform_pic' lt_prog_compiler_static='-Bstatic' fi ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; unicos*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_can_build_shared=no ;; uts4*) lt_prog_compiler_pic='-pic' lt_prog_compiler_static='-Bstatic' ;; *) lt_prog_compiler_can_build_shared=no ;; esac fi case $host_os in # For platforms that do not support PIC, -DPIC is meaningless: *djgpp*) lt_prog_compiler_pic= ;; *) lt_prog_compiler_pic="$lt_prog_compiler_pic -DPIC" ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5 $as_echo_n "checking for $compiler option to produce PIC... " >&6; } if ${lt_cv_prog_compiler_pic+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_pic=$lt_prog_compiler_pic fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5 $as_echo "$lt_cv_prog_compiler_pic" >&6; } lt_prog_compiler_pic=$lt_cv_prog_compiler_pic # # Check to make sure the PIC flag actually works. # if test -n "$lt_prog_compiler_pic"; then { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5 $as_echo_n "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; } if ${lt_cv_prog_compiler_pic_works+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_pic_works=no ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="$lt_prog_compiler_pic -DPIC" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_pic_works=yes fi fi $RM conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5 $as_echo "$lt_cv_prog_compiler_pic_works" >&6; } if test yes = "$lt_cv_prog_compiler_pic_works"; then case $lt_prog_compiler_pic in "" | " "*) ;; *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;; esac else lt_prog_compiler_pic= lt_prog_compiler_can_build_shared=no fi fi # # Check to make sure the static flag actually works. # wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\" { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5 $as_echo_n "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; } if ${lt_cv_prog_compiler_static_works+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_static_works=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS $lt_tmp_static_flag" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&5 $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_static_works=yes fi else lt_cv_prog_compiler_static_works=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5 $as_echo "$lt_cv_prog_compiler_static_works" >&6; } if test yes = "$lt_cv_prog_compiler_static_works"; then : else lt_prog_compiler_static= fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5 $as_echo_n "checking if $compiler supports -c -o file.$ac_objext... " >&6; } if ${lt_cv_prog_compiler_c_o+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_c_o=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then lt_cv_prog_compiler_c_o=yes fi fi chmod u+w . 2>&5 $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5 $as_echo "$lt_cv_prog_compiler_c_o" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5 $as_echo_n "checking if $compiler supports -c -o file.$ac_objext... " >&6; } if ${lt_cv_prog_compiler_c_o+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler_c_o=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then lt_cv_prog_compiler_c_o=yes fi fi chmod u+w . 2>&5 $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5 $as_echo "$lt_cv_prog_compiler_c_o" >&6; } hard_links=nottested if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then # do not overwrite the value of need_locks provided by the user { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5 $as_echo_n "checking if we can lock with hard links... " >&6; } hard_links=yes $RM conftest* ln conftest.a conftest.b 2>/dev/null && hard_links=no touch conftest.a ln conftest.a conftest.b 2>&5 || hard_links=no ln conftest.a conftest.b 2>/dev/null && hard_links=no { $as_echo "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5 $as_echo "$hard_links" >&6; } if test no = "$hard_links"; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5 $as_echo "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;} need_locks=warn fi else need_locks=no fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5 $as_echo_n "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; } runpath_var= allow_undefined_flag= always_export_symbols=no archive_cmds= archive_expsym_cmds= compiler_needs_object=no enable_shared_with_static_runtimes=no export_dynamic_flag_spec= export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' hardcode_automatic=no hardcode_direct=no hardcode_direct_absolute=no hardcode_libdir_flag_spec= hardcode_libdir_separator= hardcode_minus_L=no hardcode_shlibpath_var=unsupported inherit_rpath=no link_all_deplibs=unknown module_cmds= module_expsym_cmds= old_archive_from_new_cmds= old_archive_from_expsyms_cmds= thread_safe_flag_spec= whole_archive_flag_spec= # include_expsyms should be a list of space-separated symbols to be *always* # included in the symbol list include_expsyms= # exclude_expsyms can be an extended regexp of symbols to exclude # it will be wrapped by ' (' and ')$', so one must not match beginning or # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc', # as well as any symbol that contains 'd'. exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*' # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out # platforms (ab)use it in PIC code, but their linkers get confused if # the symbol is explicitly referenced. Since portable code cannot # rely on this symbol name, it's probably fine to never include it in # preloaded symbol tables. # Exclude shared library initialization/finalization symbols. extract_expsyms_cmds= case $host_os in cygwin* | mingw* | pw32* | cegcc*) # FIXME: the MSVC++ port hasn't been tested in a loooong time # When not using gcc, we currently assume that we are using # Microsoft Visual C++. if test yes != "$GCC"; then with_gnu_ld=no fi ;; interix*) # we just hope/assume this is gcc and not c89 (= MSVC++) with_gnu_ld=yes ;; openbsd* | bitrig*) with_gnu_ld=no ;; linux* | k*bsd*-gnu | gnu*) link_all_deplibs=no ;; esac ld_shlibs=yes # On some targets, GNU ld is compatible enough with the native linker # that we're better off using the native interface for both. lt_use_gnu_ld_interface=no if test yes = "$with_gnu_ld"; then case $host_os in aix*) # The AIX port of GNU ld has always aspired to compatibility # with the native linker. However, as the warning in the GNU ld # block says, versions before 2.19.5* couldn't really create working # shared libraries, regardless of the interface used. case `$LD -v 2>&1` in *\ \(GNU\ Binutils\)\ 2.19.5*) ;; *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;; *\ \(GNU\ Binutils\)\ [3-9]*) ;; *) lt_use_gnu_ld_interface=yes ;; esac ;; *) lt_use_gnu_ld_interface=yes ;; esac fi if test yes = "$lt_use_gnu_ld_interface"; then # If archive_cmds runs LD, not CC, wlarc should be empty wlarc='$wl' # Set some defaults for GNU ld with shared library support. These # are reset later if shared libraries are not supported. Putting them # here allows them to be overridden if necessary. runpath_var=LD_RUN_PATH hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' export_dynamic_flag_spec='$wl--export-dynamic' # ancient GNU ld didn't support --whole-archive et. al. if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else whole_archive_flag_spec= fi supports_anon_versioning=no case `$LD -v | $SED -e 's/(^)\+)\s\+//' 2>&1` in *GNU\ gold*) supports_anon_versioning=yes ;; *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11 *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... *\ 2.11.*) ;; # other 2.11 versions *) supports_anon_versioning=yes ;; esac # See if GNU ld supports shared libraries. case $host_os in aix[3-9]*) # On AIX/PPC, the GNU linker is very broken if test ia64 != "$host_cpu"; then ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: the GNU linker, at least up to release 2.19, is reported *** to be unable to reliably create shared libraries on AIX. *** Therefore, libtool is disabling shared libraries support. If you *** really care for shared libraries, you may want to install binutils *** 2.20 or above, or modify your PATH so that a non-GNU linker is found. *** You will then need to restart the configuration process. _LT_EOF fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='' ;; m68k) archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes ;; esac ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then allow_undefined_flag=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else ld_shlibs=no fi ;; cygwin* | mingw* | pw32* | cegcc*) # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless, # as there is no search path for DLLs. hardcode_libdir_flag_spec='-L$libdir' export_dynamic_flag_spec='$wl--export-all-symbols' allow_undefined_flag=unsupported always_export_symbols=no enable_shared_with_static_runtimes=yes export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols' exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname' if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... archive_expsym_cmds='if test DEF = "`$SED -n -e '\''s/^[ ]*//'\'' -e '\''/^\(;.*\)*$/d'\'' -e '\''s/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p'\'' -e q $export_symbols`" ; then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else ld_shlibs=no fi ;; haiku*) archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' link_all_deplibs=yes ;; os2*) hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes allow_undefined_flag=unsupported shrext_cmds=.dll archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' enable_shared_with_static_runtimes=yes ;; interix[3-9]*) hardcode_direct=no hardcode_shlibpath_var=no hardcode_libdir_flag_spec='$wl-rpath,$libdir' export_dynamic_flag_spec='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' archive_expsym_cmds='sed "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu) tmp_diet=no if test linux-dietlibc = "$host_os"; then case $cc_basename in diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn) esac fi if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \ && test no = "$tmp_diet" then tmp_addflag=' $pic_flag' tmp_sharedflag='-shared' case $cc_basename,$host_cpu in pgcc*) # Portland Group C compiler whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag' ;; pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group f77 and f90 compilers whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag -Mnomain' ;; ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 tmp_addflag=' -i_dynamic' ;; efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 tmp_addflag=' -i_dynamic -nofor_main' ;; ifc* | ifort*) # Intel Fortran compiler tmp_addflag=' -nofor_main' ;; lf95*) # Lahey Fortran 8.1 whole_archive_flag_spec= tmp_sharedflag='--shared' ;; nagfor*) # NAGFOR 5.3 tmp_sharedflag='-Wl,-shared' ;; xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below) tmp_sharedflag='-qmkshrobj' tmp_addflag= ;; nvcc*) # Cuda Compiler Driver 2.2 whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' compiler_needs_object=yes ;; esac case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C 5.9 whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' compiler_needs_object=yes tmp_sharedflag='-G' ;; *Sun\ F*) # Sun Fortran 8.3 tmp_sharedflag='-G' ;; esac archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi case $cc_basename in tcc*) export_dynamic_flag_spec='-rdynamic' ;; xlf* | bgf* | bgxlf* | mpixlf*) # IBM XL Fortran 10.1 on PPC cannot create shared libs itself whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib' if test yes = "$supports_anon_versioning"; then archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | sed -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib' fi ;; esac else ld_shlibs=no fi ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' wlarc= else archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' fi ;; solaris*) if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: The releases 2.8.* of the GNU linker cannot reliably *** create shared libraries on Solaris systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.9.1 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) case `$LD -v 2>&1` in *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*) ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot *** reliably create shared libraries on SCO systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.16.91.0.3 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF ;; *) # For security reasons, it is highly recommended that you always # use absolute paths for naming shared libraries, and exclude the # DT_RUNPATH tag from executables and libraries. But doing so # requires that you compile everything twice, which is a pain. if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; esac ;; sunos4*) archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' wlarc= hardcode_direct=yes hardcode_shlibpath_var=no ;; *) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; esac if test no = "$ld_shlibs"; then runpath_var= hardcode_libdir_flag_spec= export_dynamic_flag_spec= whole_archive_flag_spec= fi else # PORTME fill in a description of your system's linker (not GNU ld) case $host_os in aix3*) allow_undefined_flag=unsupported always_export_symbols=yes archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' # Note: this linker hardcodes the directories in LIBPATH if there # are no directories specified by -L. hardcode_minus_L=yes if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then # Neither direct hardcoding nor static linking is supported with a # broken collect2. hardcode_direct=unsupported fi ;; aix[4-9]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*) for ld_flag in $LDFLAGS; do if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then aix_use_runtimelinking=yes break fi done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. archive_cmds='' hardcode_direct=yes hardcode_direct_absolute=yes hardcode_libdir_separator=':' link_all_deplibs=yes file_list_spec='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # traditional, no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. hardcode_direct=no hardcode_direct_absolute=no ;; esac if test yes = "$GCC"; then case $host_os in aix4.[012]|aix4.[012].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 hardcode_direct=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking hardcode_minus_L=yes hardcode_libdir_flag_spec='-L$libdir' hardcode_libdir_separator= fi ;; esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag="$shared_flag "'$wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi export_dynamic_flag_spec='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. always_export_symbols=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. allow_undefined_flag='-berok' # Determine the default libpath from the value encoded in an # empty executable. if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else if ${lt_cv_aix_libpath_+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : lt_aix_libpath_sed=' /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }' lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=/usr/lib:/lib fi fi aix_libpath=$lt_cv_aix_libpath_ fi hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath" archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib' allow_undefined_flag="-z nodefs" archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else if ${lt_cv_aix_libpath_+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : lt_aix_libpath_sed=' /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }' lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=/usr/lib:/lib fi fi aix_libpath=$lt_cv_aix_libpath_ fi hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. no_undefined_flag=' $wl-bernotok' allow_undefined_flag=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives whole_archive_flag_spec='$convenience' fi archive_cmds_need_lc=yes archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared libraries. archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols archive_expsym_cmds="$archive_expsym_cmds"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d' fi fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='' ;; m68k) archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes ;; esac ;; bsdi[45]*) export_dynamic_flag_spec=-rdynamic ;; cygwin* | mingw* | pw32* | cegcc*) # When not using gcc, we currently assume that we are using # Microsoft Visual C++. # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. case $cc_basename in cl*) # Native MSVC hardcode_libdir_flag_spec=' ' allow_undefined_flag=unsupported always_export_symbols=yes file_list_spec='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. archive_cmds='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' archive_expsym_cmds='if test DEF = "`$SED -n -e '\''s/^[ ]*//'\'' -e '\''/^\(;.*\)*$/d'\'' -e '\''s/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p'\'' -e q $export_symbols`" ; then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, )='true' enable_shared_with_static_runtimes=yes exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols' # Don't use ranlib old_postinstall_cmds='chmod 644 $oldlib' postlink_cmds='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # Assume MSVC wrapper hardcode_libdir_flag_spec=' ' allow_undefined_flag=unsupported # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames=' # The linker will automatically build a .lib file if we build a DLL. old_archive_from_new_cmds='true' # FIXME: Should let the user specify the lib program. old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs' enable_shared_with_static_runtimes=yes ;; esac ;; darwin* | rhapsody*) archive_cmds_need_lc=no hardcode_direct=no hardcode_automatic=yes hardcode_shlibpath_var=unsupported if test yes = "$lt_cv_ld_force_load"; then whole_archive_flag_spec='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`' else whole_archive_flag_spec='' fi link_all_deplibs=yes allow_undefined_flag=$_lt_dar_allow_undefined case $cc_basename in ifort*|nagfor*) _lt_dar_can_shared=yes ;; *) _lt_dar_can_shared=$GCC ;; esac if test yes = "$_lt_dar_can_shared"; then output_verbose_link_cmd=func_echo_all archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil" module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil" archive_expsym_cmds="sed 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil" module_expsym_cmds="sed -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil" else ld_shlibs=no fi ;; dgux*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_libdir_flag_spec='-L$libdir' hardcode_shlibpath_var=no ;; # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor # support. Future versions do this automatically, but an explicit c++rt0.o # does not break anything, and helps significantly (at the cost of a little # extra space). freebsd2.2*) archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; # Unfortunately, older versions of FreeBSD 2 do not have this feature. freebsd2.*) archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes hardcode_minus_L=yes hardcode_shlibpath_var=no ;; # FreeBSD 3 and greater uses gcc -shared to do shared libraries. freebsd* | dragonfly*) archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; hpux9*) if test yes = "$GCC"; then archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' fi hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: hardcode_direct=yes # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes export_dynamic_flag_spec='$wl-E' ;; hpux10*) if test yes,no = "$GCC,$with_gnu_ld"; then archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi if test no = "$with_gnu_ld"; then hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: hardcode_direct=yes hardcode_direct_absolute=yes export_dynamic_flag_spec='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes fi ;; hpux11*) if test yes,no = "$GCC,$with_gnu_ld"; then case $host_cpu in hppa*64*) archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac else case $host_cpu in hppa*64*) archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) # Older versions of the 11.00 compiler do not understand -b yet # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does) { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5 $as_echo_n "checking if $CC understands -b... " >&6; } if ${lt_cv_prog_compiler__b+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_prog_compiler__b=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -b" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&5 $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler__b=yes fi else lt_cv_prog_compiler__b=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5 $as_echo "$lt_cv_prog_compiler__b" >&6; } if test yes = "$lt_cv_prog_compiler__b"; then archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi ;; esac fi if test no = "$with_gnu_ld"; then hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: case $host_cpu in hppa*64*|ia64*) hardcode_direct=no hardcode_shlibpath_var=no ;; *) hardcode_direct=yes hardcode_direct_absolute=yes export_dynamic_flag_spec='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes ;; esac fi ;; irix5* | irix6* | nonstopux*) if test yes = "$GCC"; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' # Try to use the -exported_symbol ld option, if it does not # work, assume that -exports_file does not work either and # implicitly export all symbols. # This should be the same for all languages, so no per-tag cache variable. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5 $as_echo_n "checking whether the $host_os linker accepts -exported_symbol... " >&6; } if ${lt_cv_irix_exported_symbol+:} false; then : $as_echo_n "(cached) " >&6 else save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int foo (void) { return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : lt_cv_irix_exported_symbol=yes else lt_cv_irix_exported_symbol=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5 $as_echo "$lt_cv_irix_exported_symbol" >&6; } if test yes = "$lt_cv_irix_exported_symbol"; then archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' fi link_all_deplibs=no else archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' fi archive_cmds_need_lc='no' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: inherit_rpath=yes link_all_deplibs=yes ;; linux*) case $cc_basename in tcc*) # Fabrice Bellard et al's Tiny C Compiler ld_shlibs=yes archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; netbsd* | netbsdelf*-gnu) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out else archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF fi hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; newsos6) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: hardcode_shlibpath_var=no ;; *nto* | *qnx*) ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then hardcode_direct=yes hardcode_shlibpath_var=no hardcode_direct_absolute=yes if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols' hardcode_libdir_flag_spec='$wl-rpath,$libdir' export_dynamic_flag_spec='$wl-E' else archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' hardcode_libdir_flag_spec='$wl-rpath,$libdir' fi else ld_shlibs=no fi ;; os2*) hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes allow_undefined_flag=unsupported shrext_cmds=.dll archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' enable_shared_with_static_runtimes=yes ;; osf3*) if test yes = "$GCC"; then allow_undefined_flag=' $wl-expect_unresolved $wl\*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else allow_undefined_flag=' -expect_unresolved \*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' fi archive_cmds_need_lc='no' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: ;; osf4* | osf5*) # as osf3* with the addition of -msym flag if test yes = "$GCC"; then allow_undefined_flag=' $wl-expect_unresolved $wl\*' archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' else allow_undefined_flag=' -expect_unresolved \*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp' # Both c and cxx compiler support -rpath directly hardcode_libdir_flag_spec='-rpath $libdir' fi archive_cmds_need_lc='no' hardcode_libdir_separator=: ;; solaris*) no_undefined_flag=' -z defs' if test yes = "$GCC"; then wlarc='$wl' archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' else case `$CC -V 2>&1` in *"Compilers 5.0"*) wlarc='' archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp' ;; *) wlarc='$wl' archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' ;; esac fi hardcode_libdir_flag_spec='-R$libdir' hardcode_shlibpath_var=no case $host_os in solaris2.[0-5] | solaris2.[0-5].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. GCC discards it without '$wl', # but is careful enough not to reorder. # Supported since Solaris 2.6 (maybe 2.5.1?) if test yes = "$GCC"; then whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' else whole_archive_flag_spec='-z allextract$convenience -z defaultextract' fi ;; esac link_all_deplibs=yes ;; sunos4*) if test sequent = "$host_vendor"; then # Use $CC to link under sequent, because it throws in some extra .o # files that make .init and .fini sections work. archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' fi hardcode_libdir_flag_spec='-L$libdir' hardcode_direct=yes hardcode_minus_L=yes hardcode_shlibpath_var=no ;; sysv4) case $host_vendor in sni) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes # is this really true??? ;; siemens) ## LD is ld it makes a PLAMLIB ## CC just makes a GrossModule. archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags' reload_cmds='$CC -r -o $output$reload_objs' hardcode_direct=no ;; motorola) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=no #Motorola manual says yes, but my tests say they lie ;; esac runpath_var='LD_RUN_PATH' hardcode_shlibpath_var=no ;; sysv4.3*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_shlibpath_var=no export_dynamic_flag_spec='-Bexport' ;; sysv4*MP*) if test -d /usr/nec; then archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_shlibpath_var=no runpath_var=LD_RUN_PATH hardcode_runpath_var=yes ld_shlibs=yes fi ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*) no_undefined_flag='$wl-z,text' archive_cmds_need_lc=no hardcode_shlibpath_var=no runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. no_undefined_flag='$wl-z,text' allow_undefined_flag='$wl-z,nodefs' archive_cmds_need_lc=no hardcode_shlibpath_var=no hardcode_libdir_flag_spec='$wl-R,$libdir' hardcode_libdir_separator=':' link_all_deplibs=yes export_dynamic_flag_spec='$wl-Bexport' runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; uts4*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_libdir_flag_spec='-L$libdir' hardcode_shlibpath_var=no ;; *) ld_shlibs=no ;; esac if test sni = "$host_vendor"; then case $host in sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*) export_dynamic_flag_spec='$wl-Blargedynsym' ;; esac fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5 $as_echo "$ld_shlibs" >&6; } test no = "$ld_shlibs" && can_build_shared=no with_gnu_ld=$with_gnu_ld # # Do we need to explicitly link libc? # case "x$archive_cmds_need_lc" in x|xyes) # Assume -lc should be added archive_cmds_need_lc=yes if test yes,yes = "$GCC,$enable_shared"; then case $archive_cmds in *'~'*) # FIXME: we may have to deal with multi-command sequences. ;; '$CC '*) # Test whether the compiler implicitly links with -lc since on some # systems, -lgcc has to come before -lc. If gcc already passes -lc # to ld, don't add -lc before -lgcc. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5 $as_echo_n "checking whether -lc should be explicitly linked in... " >&6; } if ${lt_cv_archive_cmds_need_lc+:} false; then : $as_echo_n "(cached) " >&6 else $RM conftest* echo "$lt_simple_compile_test_code" > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } 2>conftest.err; then soname=conftest lib=conftest libobjs=conftest.$ac_objext deplibs= wl=$lt_prog_compiler_wl pic_flag=$lt_prog_compiler_pic compiler_flags=-v linker_flags=-v verstring= output_objdir=. libname=conftest lt_save_allow_undefined_flag=$allow_undefined_flag allow_undefined_flag= if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5 (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then lt_cv_archive_cmds_need_lc=no else lt_cv_archive_cmds_need_lc=yes fi allow_undefined_flag=$lt_save_allow_undefined_flag else cat conftest.err 1>&5 fi $RM conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5 $as_echo "$lt_cv_archive_cmds_need_lc" >&6; } archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc ;; esac fi ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5 $as_echo_n "checking dynamic linker characteristics... " >&6; } if test yes = "$GCC"; then case $host_os in darwin*) lt_awk_arg='/^libraries:/,/LR/' ;; *) lt_awk_arg='/^libraries:/' ;; esac case $host_os in mingw* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;; *) lt_sed_strip_eq='s|=/|/|g' ;; esac lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq` case $lt_search_path_spec in *\;*) # if the path contains ";" then we assume it to be the separator # otherwise default to the standard path separator (i.e. ":") - it is # assumed that no part of a normal pathname contains ";" but that should # okay in the real world where ";" in dirpaths is itself problematic. lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'` ;; *) lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"` ;; esac # Ok, now we have the path, separated by spaces, we can step through it # and add multilib dir if necessary... lt_tmp_lt_search_path_spec= lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null` # ...but if some path component already ends with the multilib dir we assume # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer). case "$lt_multi_os_dir; $lt_search_path_spec " in "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*) lt_multi_os_dir= ;; esac for lt_sys_path in $lt_search_path_spec; do if test -d "$lt_sys_path$lt_multi_os_dir"; then lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir" elif test -n "$lt_multi_os_dir"; then test -d "$lt_sys_path" && \ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path" fi done lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk ' BEGIN {RS = " "; FS = "/|\n";} { lt_foo = ""; lt_count = 0; for (lt_i = NF; lt_i > 0; lt_i--) { if ($lt_i != "" && $lt_i != ".") { if ($lt_i == "..") { lt_count++; } else { if (lt_count == 0) { lt_foo = "/" $lt_i lt_foo; } else { lt_count--; } } } } if (lt_foo != "") { lt_freq[lt_foo]++; } if (lt_freq[lt_foo] == 1) { print lt_foo; } }'` # AWK program above erroneously prepends '/' to C:/dos/paths # for these hosts. case $host_os in mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\ $SED 's|/\([A-Za-z]:\)|\1|g'` ;; esac sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP` else sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" fi library_names_spec= libname_spec='lib$name' soname_spec= shrext_cmds=.so postinstall_cmds= postuninstall_cmds= finish_cmds= finish_eval= shlibpath_var= shlibpath_overrides_runpath=unknown version_type=none dynamic_linker="$host_os ld.so" sys_lib_dlsearch_path_spec="/lib /usr/lib" need_lib_prefix=unknown hardcode_into_libs=no # when you set need_version to no, make sure it does not cause -set_version # flags to be left without arguments need_version=unknown case $host_os in aix3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname.a' shlibpath_var=LIBPATH # AIX 3 has no versioning support, so we append a major version to the name. soname_spec='$libname$release$shared_ext$major' ;; aix[4-9]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no hardcode_into_libs=yes if test ia64 = "$host_cpu"; then # AIX 5 supports IA64 library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH else # With GCC up to 2.95.x, collect2 would create an import file # for dependence libraries. The import file would start with # the line '#! .'. This would cause the generated library to # depend on '.', always an invalid library. This was fixed in # development snapshots of GCC prior to 3.0. case $host_os in aix4 | aix4.[01] | aix4.[01].*) if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' echo ' yes ' echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then : else can_build_shared=no fi ;; esac # Using Import Files as archive members, it is possible to support # filename-based versioning of shared library archives on AIX. While # this would work for both with and without runtime linking, it will # prevent static linking of such archives. So we do filename-based # shared library versioning with .so extension only, which is used # when both runtime linking and shared linking is enabled. # Unfortunately, runtime linking may impact performance, so we do # not want this to be the default eventually. Also, we use the # versioned .so libs for executables only if there is the -brtl # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only. # To allow for filename-based versioning support, we need to create # libNAME.so.V as an archive file, containing: # *) an Import File, referring to the versioned filename of the # archive as well as the shared archive member, telling the # bitwidth (32 or 64) of that shared object, and providing the # list of exported symbols of that shared object, eventually # decorated with the 'weak' keyword # *) the shared object with the F_LOADONLY flag set, to really avoid # it being seen by the linker. # At run time we better use the real file rather than another symlink, # but for link time we create the symlink libNAME.so -> libNAME.so.V case $with_aix_soname,$aix_use_runtimelinking in # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct # soname into executable. Probably we can add versioning support to # collect2, so additional links can be useful in future. aix,yes) # traditional libtool dynamic_linker='AIX unversionable lib.so' # If using run time linking (on AIX 4.2 or later) use lib.so # instead of lib.a to let people know that these are not # typical AIX shared libraries. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; aix,no) # traditional AIX only dynamic_linker='AIX lib.a(lib.so.V)' # We preserve .a as extension for shared libraries through AIX4.2 # and later when we are not doing run time linking. library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' ;; svr4,*) # full svr4 only dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,yes) # both, prefer svr4 dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # unpreferred sharedlib libNAME.a needs extra handling postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"' postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,no) # both, prefer aix dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)" library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)' postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"' ;; esac shlibpath_var=LIBPATH fi ;; amigaos*) case $host_cpu in powerpc) # Since July 2007 AmigaOS4 officially supports .so libraries. # When compiling the executable, add -use-dynld -Lsobjs: to the compileline. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; m68k) library_names_spec='$libname.ixlibrary $libname.a' # Create ${libname}_ixlibrary.a entries in /sys/libs. finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' ;; esac ;; beos*) library_names_spec='$libname$shared_ext' dynamic_linker="$host_os ld.so" shlibpath_var=LIBRARY_PATH ;; bsdi[45]*) version_type=linux # correct to gnu/linux during the next big refactor need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" # the default ld.so.conf also contains /usr/contrib/lib and # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow # libtool to hard-code these into programs ;; cygwin* | mingw* | pw32* | cegcc*) version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no case $GCC,$cc_basename in yes,*) # gcc library_names_spec='$libname.dll.a' # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes case $host_os in cygwin*) # Cygwin DLLs use 'cyg' prefix rather than 'lib' soname_spec='`echo $libname | sed -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api" ;; mingw* | cegcc*) # MinGW DLLs use traditional 'lib' prefix soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' ;; pw32*) # pw32 DLLs use 'pw' prefix rather than 'lib' library_names_spec='`echo $libname | sed -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' ;; esac dynamic_linker='Win32 ld.exe' ;; *,cl*) # Native MSVC libname_spec='$name' soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' library_names_spec='$libname.dll.lib' case $build_os in mingw*) sys_lib_search_path_spec= lt_save_ifs=$IFS IFS=';' for lt_path in $LIB do IFS=$lt_save_ifs # Let DOS variable expansion print the short 8.3 style file name. lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"` sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path" done IFS=$lt_save_ifs # Convert to MSYS style. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | sed -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'` ;; cygwin*) # Convert to unix form, then to dos form, then back to unix form # but this time dos style (no spaces!) so that the unix form looks # like /cygdrive/c/PROGRA~1:/cygdr... sys_lib_search_path_spec=`cygpath --path --unix "$LIB"` sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null` sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` ;; *) sys_lib_search_path_spec=$LIB if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then # It is most probably a Windows format PATH. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi # FIXME: find the short name or the path components, as spaces are # common. (e.g. "Program Files" -> "PROGRA~1") ;; esac # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes dynamic_linker='Win32 link.exe' ;; *) # Assume MSVC wrapper library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib' dynamic_linker='Win32 ld.exe' ;; esac # FIXME: first we should search . and the directory the executable is in shlibpath_var=PATH ;; darwin* | rhapsody*) dynamic_linker="$host_os dyld" version_type=darwin need_lib_prefix=no need_version=no library_names_spec='$libname$release$major$shared_ext $libname$shared_ext' soname_spec='$libname$release$major$shared_ext' shlibpath_overrides_runpath=yes shlibpath_var=DYLD_LIBRARY_PATH shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib" sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' ;; dgux*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; freebsd* | dragonfly*) # DragonFly does not have aout. When/if they implement a new # versioning mechanism, adjust this. if test -x /usr/bin/objformat; then objformat=`/usr/bin/objformat` else case $host_os in freebsd[23].*) objformat=aout ;; *) objformat=elf ;; esac fi version_type=freebsd-$objformat case $version_type in freebsd-elf*) library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' need_version=no need_lib_prefix=no ;; freebsd-*) library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' need_version=yes ;; esac shlibpath_var=LD_LIBRARY_PATH case $host_os in freebsd2.*) shlibpath_overrides_runpath=yes ;; freebsd3.[01]* | freebsdelf3.[01]*) shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; freebsd3.[2-9]* | freebsdelf3.[2-9]* | \ freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1) shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; *) # from 4.6 on, and DragonFly shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; esac ;; haiku*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no dynamic_linker="$host_os runtime_loader" library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LIBRARY_PATH shlibpath_overrides_runpath=no sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib' hardcode_into_libs=yes ;; hpux9* | hpux10* | hpux11*) # Give a soname corresponding to the major version so that dld.sl refuses to # link against other versions. version_type=sunos need_lib_prefix=no need_version=no case $host_cpu in ia64*) shrext_cmds='.so' hardcode_into_libs=yes dynamic_linker="$host_os dld.so" shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' if test 32 = "$HPUX_IA64_MODE"; then sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" sys_lib_dlsearch_path_spec=/usr/lib/hpux32 else sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" sys_lib_dlsearch_path_spec=/usr/lib/hpux64 fi ;; hppa*64*) shrext_cmds='.sl' hardcode_into_libs=yes dynamic_linker="$host_os dld.sl" shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; *) shrext_cmds='.sl' dynamic_linker="$host_os dld.sl" shlibpath_var=SHLIB_PATH shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' ;; esac # HP-UX runs *really* slowly unless shared libraries are mode 555, ... postinstall_cmds='chmod 555 $lib' # or fails outright, so override atomically: install_override_mode=555 ;; interix[3-9]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; irix5* | irix6* | nonstopux*) case $host_os in nonstopux*) version_type=nonstopux ;; *) if test yes = "$lt_cv_prog_gnu_ld"; then version_type=linux # correct to gnu/linux during the next big refactor else version_type=irix fi ;; esac need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext' case $host_os in irix5* | nonstopux*) libsuff= shlibsuff= ;; *) case $LD in # libtool.m4 will add one of these switches to LD *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") libsuff= shlibsuff= libmagic=32-bit;; *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") libsuff=32 shlibsuff=N32 libmagic=N32;; *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") libsuff=64 shlibsuff=64 libmagic=64-bit;; *) libsuff= shlibsuff= libmagic=never-match;; esac ;; esac shlibpath_var=LD_LIBRARY${shlibsuff}_PATH shlibpath_overrides_runpath=no sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff" sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff" hardcode_into_libs=yes ;; # No shared lib support for Linux oldld, aout, or coff. linux*oldld* | linux*aout* | linux*coff*) dynamic_linker=no ;; linux*android*) version_type=none # Android doesn't support versioned libraries. need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext' soname_spec='$libname$release$shared_ext' finish_cmds= shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes dynamic_linker='Android linker' # Don't embed -rpath directories since the linker doesn't support them. hardcode_libdir_flag_spec='-L$libdir' ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no # Some binutils ld are patched to set DT_RUNPATH if ${lt_cv_shlibpath_overrides_runpath+:} false; then : $as_echo_n "(cached) " >&6 else lt_cv_shlibpath_overrides_runpath=no save_LDFLAGS=$LDFLAGS save_libdir=$libdir eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \ LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\"" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : if ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null; then : lt_cv_shlibpath_overrides_runpath=yes fi fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS libdir=$save_libdir fi shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes # Ideally, we could use ldconfig to report *all* directores which are # searched for libraries, however this is still not possible. Aside from not # being certain /sbin/ldconfig is available, command # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64, # even though it is searched at run-time. Try to do the best guess by # appending ld.so.conf contents (and includes) to the search path. if test -f /etc/ld.so.conf; then lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '` sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra" fi # We used to test for /lib/ld.so.1 and disable shared libraries on # powerpc, because MkLinux only supported shared libraries with the # GNU dynamic linker. Since this was broken with cross compilers, # most powerpc-linux boxes support dynamic linking these days and # people can always --disable-shared, the test was removed, and we # assume the GNU/Linux dynamic linker is in use. dynamic_linker='GNU/Linux ld.so' ;; netbsdelf*-gnu) version_type=linux need_lib_prefix=no need_version=no library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' soname_spec='${libname}${release}${shared_ext}$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='NetBSD ld.elf_so' ;; netbsd*) version_type=sunos need_lib_prefix=no need_version=no if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' dynamic_linker='NetBSD (a.out) ld.so' else library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='NetBSD ld.elf_so' fi shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; newsos6) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; *nto* | *qnx*) version_type=qnx need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='ldqnx.so' ;; openbsd* | bitrig*) version_type=sunos sys_lib_dlsearch_path_spec=/usr/lib need_lib_prefix=no if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then need_version=no else need_version=yes fi library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; os2*) libname_spec='$name' version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no # OS/2 can only load a DLL with a base name of 8 characters or less. soname_spec='`test -n "$os2dllname" && libname="$os2dllname"; v=$($ECHO $release$versuffix | tr -d .-); n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _); $ECHO $n$v`$shared_ext' library_names_spec='${libname}_dll.$libext' dynamic_linker='OS/2 ld.exe' shlibpath_var=BEGINLIBPATH sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' ;; osf3* | osf4* | osf5*) version_type=osf need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; rdos*) dynamic_linker=no ;; solaris*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes # ldd complains unless libraries are executable postinstall_cmds='chmod +x $lib' ;; sunos4*) version_type=sunos library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes if test yes = "$with_gnu_ld"; then need_lib_prefix=no fi need_version=yes ;; sysv4 | sysv4.3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH case $host_vendor in sni) shlibpath_overrides_runpath=no need_lib_prefix=no runpath_var=LD_RUN_PATH ;; siemens) need_lib_prefix=no ;; motorola) need_lib_prefix=no need_version=no shlibpath_overrides_runpath=no sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' ;; esac ;; sysv4*MP*) if test -d /usr/nec; then version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext' soname_spec='$libname$shared_ext.$major' shlibpath_var=LD_LIBRARY_PATH fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) version_type=sco need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes if test yes = "$with_gnu_ld"; then sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' else sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' case $host_os in sco3.2v5*) sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" ;; esac fi sys_lib_dlsearch_path_spec='/usr/lib' ;; tpf*) # TPF is a cross-target only. Preferred cross-host = GNU/Linux. version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; uts4*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; *) dynamic_linker=no ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5 $as_echo "$dynamic_linker" >&6; } test no = "$dynamic_linker" && can_build_shared=no variables_saved_for_relink="PATH $shlibpath_var $runpath_var" if test yes = "$GCC"; then variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" fi if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec fi if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec fi # remember unaugmented sys_lib_dlsearch_path content for libtool script decls... configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec # ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH" # to be used as default LT_SYS_LIBRARY_PATH value in generated libtool configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5 $as_echo_n "checking how to hardcode library paths into programs... " >&6; } hardcode_action= if test -n "$hardcode_libdir_flag_spec" || test -n "$runpath_var" || test yes = "$hardcode_automatic"; then # We can hardcode non-existent directories. if test no != "$hardcode_direct" && # If the only mechanism to avoid hardcoding is shlibpath_var, we # have to relink, otherwise we might link with an installed library # when we should be linking with a yet-to-be-installed one ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" && test no != "$hardcode_minus_L"; then # Linking always hardcodes the temporary library directory. hardcode_action=relink else # We can link without hardcoding, and we can hardcode nonexisting dirs. hardcode_action=immediate fi else # We cannot hardcode anything, or else we can only hardcode existing # directories. hardcode_action=unsupported fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5 $as_echo "$hardcode_action" >&6; } if test relink = "$hardcode_action" || test yes = "$inherit_rpath"; then # Fast installation is not supported enable_fast_install=no elif test yes = "$shlibpath_overrides_runpath" || test no = "$enable_shared"; then # Fast installation is not necessary enable_fast_install=needless fi if test yes != "$enable_dlopen"; then enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown else lt_cv_dlopen=no lt_cv_dlopen_libs= case $host_os in beos*) lt_cv_dlopen=load_add_on lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ;; mingw* | pw32* | cegcc*) lt_cv_dlopen=LoadLibrary lt_cv_dlopen_libs= ;; cygwin*) lt_cv_dlopen=dlopen lt_cv_dlopen_libs= ;; darwin*) # if libdl is installed we need to link against it { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5 $as_echo_n "checking for dlopen in -ldl... " >&6; } if ${ac_cv_lib_dl_dlopen+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-ldl $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char dlopen (); int main () { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_dl_dlopen=yes else ac_cv_lib_dl_dlopen=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5 $as_echo "$ac_cv_lib_dl_dlopen" >&6; } if test "x$ac_cv_lib_dl_dlopen" = xyes; then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl else lt_cv_dlopen=dyld lt_cv_dlopen_libs= lt_cv_dlopen_self=yes fi ;; tpf*) # Don't try to run any link tests for TPF. We know it's impossible # because TPF is a cross-compiler, and we know how we open DSOs. lt_cv_dlopen=dlopen lt_cv_dlopen_libs= lt_cv_dlopen_self=no ;; *) ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load" if test "x$ac_cv_func_shl_load" = xyes; then : lt_cv_dlopen=shl_load else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5 $as_echo_n "checking for shl_load in -ldld... " >&6; } if ${ac_cv_lib_dld_shl_load+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-ldld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char shl_load (); int main () { return shl_load (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_dld_shl_load=yes else ac_cv_lib_dld_shl_load=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5 $as_echo "$ac_cv_lib_dld_shl_load" >&6; } if test "x$ac_cv_lib_dld_shl_load" = xyes; then : lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld else ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen" if test "x$ac_cv_func_dlopen" = xyes; then : lt_cv_dlopen=dlopen else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5 $as_echo_n "checking for dlopen in -ldl... " >&6; } if ${ac_cv_lib_dl_dlopen+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-ldl $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char dlopen (); int main () { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_dl_dlopen=yes else ac_cv_lib_dl_dlopen=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5 $as_echo "$ac_cv_lib_dl_dlopen" >&6; } if test "x$ac_cv_lib_dl_dlopen" = xyes; then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5 $as_echo_n "checking for dlopen in -lsvld... " >&6; } if ${ac_cv_lib_svld_dlopen+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-lsvld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char dlopen (); int main () { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_svld_dlopen=yes else ac_cv_lib_svld_dlopen=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5 $as_echo "$ac_cv_lib_svld_dlopen" >&6; } if test "x$ac_cv_lib_svld_dlopen" = xyes; then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5 $as_echo_n "checking for dld_link in -ldld... " >&6; } if ${ac_cv_lib_dld_dld_link+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS LIBS="-ldld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char dld_link (); int main () { return dld_link (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_cv_lib_dld_dld_link=yes else ac_cv_lib_dld_dld_link=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5 $as_echo "$ac_cv_lib_dld_dld_link" >&6; } if test "x$ac_cv_lib_dld_dld_link" = xyes; then : lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld fi fi fi fi fi fi ;; esac if test no = "$lt_cv_dlopen"; then enable_dlopen=no else enable_dlopen=yes fi case $lt_cv_dlopen in dlopen) save_CPPFLAGS=$CPPFLAGS test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" save_LDFLAGS=$LDFLAGS wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" save_LIBS=$LIBS LIBS="$lt_cv_dlopen_libs $LIBS" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5 $as_echo_n "checking whether a program can dlopen itself... " >&6; } if ${lt_cv_dlopen_self+:} false; then : $as_echo_n "(cached) " >&6 else if test yes = "$cross_compiling"; then : lt_cv_dlopen_self=cross else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF #line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; } _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&5 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;; x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;; x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;; esac else : # compilation failed lt_cv_dlopen_self=no fi fi rm -fr conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5 $as_echo "$lt_cv_dlopen_self" >&6; } if test yes = "$lt_cv_dlopen_self"; then wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5 $as_echo_n "checking whether a statically linked program can dlopen itself... " >&6; } if ${lt_cv_dlopen_self_static+:} false; then : $as_echo_n "(cached) " >&6 else if test yes = "$cross_compiling"; then : lt_cv_dlopen_self_static=cross else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF #line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; } _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&5 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;; x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;; x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;; esac else : # compilation failed lt_cv_dlopen_self_static=no fi fi rm -fr conftest* fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5 $as_echo "$lt_cv_dlopen_self_static" >&6; } fi CPPFLAGS=$save_CPPFLAGS LDFLAGS=$save_LDFLAGS LIBS=$save_LIBS ;; esac case $lt_cv_dlopen_self in yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; *) enable_dlopen_self=unknown ;; esac case $lt_cv_dlopen_self_static in yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; *) enable_dlopen_self_static=unknown ;; esac fi striplib= old_striplib= { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5 $as_echo_n "checking whether stripping libraries is possible... " >&6; } if test -n "$STRIP" && $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then test -z "$old_striplib" && old_striplib="$STRIP --strip-debug" test -z "$striplib" && striplib="$STRIP --strip-unneeded" { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else # FIXME - insert some real tests, host_os isn't really good enough case $host_os in darwin*) if test -n "$STRIP"; then striplib="$STRIP -x" old_striplib="$STRIP -S" { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } ;; esac fi # Report what library types will actually be built { $as_echo "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5 $as_echo_n "checking if libtool supports shared libraries... " >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5 $as_echo "$can_build_shared" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5 $as_echo_n "checking whether to build shared libraries... " >&6; } test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[4-9]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5 $as_echo "$enable_shared" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5 $as_echo_n "checking whether to build static libraries... " >&6; } # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5 $as_echo "$enable_static" >&6; } fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu CC=$lt_save_CC ac_config_commands="$ac_config_commands libtool" # Only expand once: am__api_version='1.16' # Find a good install program. We prefer a C program (faster), # so one script is as good as another. But avoid the broken or # incompatible versions: # SysV /etc/install, /usr/sbin/install # SunOS /usr/etc/install # IRIX /sbin/install # AIX /bin/install # AmigaOS /C/install, which installs bootblocks on floppy discs # AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag # AFS /usr/afsws/bin/install, which mishandles nonexistent args # SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff" # OS/2's system install, which has a completely different semantic # ./install, which can be erroneously created by make from ./install.sh. # Reject install programs that cannot install multiple files. { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5 $as_echo_n "checking for a BSD-compatible install... " >&6; } if test -z "$INSTALL"; then if ${ac_cv_path_install+:} false; then : $as_echo_n "(cached) " >&6 else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. # Account for people who put trailing slashes in PATH elements. case $as_dir/ in #(( ./ | .// | /[cC]/* | \ /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \ ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \ /usr/ucb/* ) ;; *) # OSF1 and SCO ODT 3.0 have their own names for install. # Don't use installbsd from OSF since it installs stuff as root # by default. for ac_prog in ginstall scoinst install; do for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then if test $ac_prog = install && grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then # AIX install. It has an incompatible calling convention. : elif test $ac_prog = install && grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then # program-specific install script used by HP pwplus--don't use. : else rm -rf conftest.one conftest.two conftest.dir echo one > conftest.one echo two > conftest.two mkdir conftest.dir if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" && test -s conftest.one && test -s conftest.two && test -s conftest.dir/conftest.one && test -s conftest.dir/conftest.two then ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c" break 3 fi fi fi done done ;; esac done IFS=$as_save_IFS rm -rf conftest.one conftest.two conftest.dir fi if test "${ac_cv_path_install+set}" = set; then INSTALL=$ac_cv_path_install else # As a last resort, use the slow shell script. Don't cache a # value for INSTALL within a source directory, because that will # break other packages using the cache if that directory is # removed, or if the value is a relative name. INSTALL=$ac_install_sh fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5 $as_echo "$INSTALL" >&6; } # Use test -z because SunOS4 sh mishandles braces in ${var-val}. # It thinks the first close brace ends the variable substitution. test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}' test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}' test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644' { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5 $as_echo_n "checking whether build environment is sane... " >&6; } # Reject unsafe characters in $srcdir or the absolute working directory # name. Accept space and tab only in the latter. am_lf=' ' case `pwd` in *[\\\"\#\$\&\'\`$am_lf]*) as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;; esac case $srcdir in *[\\\"\#\$\&\'\`$am_lf\ \ ]*) as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;; esac # Do 'set' in a subshell so we don't clobber the current shell's # arguments. Must try -L first in case configure is actually a # symlink; some systems play weird games with the mod time of symlinks # (eg FreeBSD returns the mod time of the symlink's containing # directory). if ( am_has_slept=no for am_try in 1 2; do echo "timestamp, slept: $am_has_slept" > conftest.file set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null` if test "$*" = "X"; then # -L didn't work. set X `ls -t "$srcdir/configure" conftest.file` fi if test "$*" != "X $srcdir/configure conftest.file" \ && test "$*" != "X conftest.file $srcdir/configure"; then # If neither matched, then we have a broken ls. This can happen # if, for instance, CONFIG_SHELL is bash and it inherits a # broken ls alias from the environment. This has actually # happened. Such a system could not be considered "sane". as_fn_error $? "ls -t appears to fail. Make sure there is not a broken alias in your environment" "$LINENO" 5 fi if test "$2" = conftest.file || test $am_try -eq 2; then break fi # Just in case. sleep 1 am_has_slept=yes done test "$2" = conftest.file ) then # Ok. : else as_fn_error $? "newly created file is older than distributed files! Check your system clock" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } # If we didn't sleep, we still need to ensure time stamps of config.status and # generated files are strictly newer. am_sleep_pid= if grep 'slept: no' conftest.file >/dev/null 2>&1; then ( sleep 1 ) & am_sleep_pid=$! fi rm -f conftest.file test "$program_prefix" != NONE && program_transform_name="s&^&$program_prefix&;$program_transform_name" # Use a double $ so make ignores it. test "$program_suffix" != NONE && program_transform_name="s&\$&$program_suffix&;$program_transform_name" # Double any \ or $. # By default was `s,x,x', remove it if useless. ac_script='s/[\\$]/&&/g;s/;s,x,x,$//' program_transform_name=`$as_echo "$program_transform_name" | sed "$ac_script"` if test x"${MISSING+set}" != xset; then case $am_aux_dir in *\ * | *\ *) MISSING="\${SHELL} \"$am_aux_dir/missing\"" ;; *) MISSING="\${SHELL} $am_aux_dir/missing" ;; esac fi # Use eval to expand $SHELL if eval "$MISSING --is-lightweight"; then am_missing_run="$MISSING " else am_missing_run= { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5 $as_echo "$as_me: WARNING: 'missing' script is too old or missing" >&2;} fi if test x"${install_sh+set}" != xset; then case $am_aux_dir in *\ * | *\ *) install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;; *) install_sh="\${SHELL} $am_aux_dir/install-sh" esac fi # Installed binaries are usually stripped using 'strip' when the user # run "make install-strip". However 'strip' might not be the right # tool to use in cross-compilation environments, therefore Automake # will honor the 'STRIP' environment variable to overrule this program. if test "$cross_compiling" != no; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args. set dummy ${ac_tool_prefix}strip; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_STRIP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$STRIP"; then ac_cv_prog_STRIP="$STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_STRIP="${ac_tool_prefix}strip" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi STRIP=$ac_cv_prog_STRIP if test -n "$STRIP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5 $as_echo "$STRIP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_STRIP"; then ac_ct_STRIP=$STRIP # Extract the first word of "strip", so it can be a program name with args. set dummy strip; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_STRIP+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_STRIP"; then ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_STRIP="strip" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP if test -n "$ac_ct_STRIP"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5 $as_echo "$ac_ct_STRIP" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_STRIP" = x; then STRIP=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac STRIP=$ac_ct_STRIP fi else STRIP="$ac_cv_prog_STRIP" fi fi INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a thread-safe mkdir -p" >&5 $as_echo_n "checking for a thread-safe mkdir -p... " >&6; } if test -z "$MKDIR_P"; then if ${ac_cv_path_mkdir+:} false; then : $as_echo_n "(cached) " >&6 else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_prog in mkdir gmkdir; do for ac_exec_ext in '' $ac_executable_extensions; do as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext" || continue case `"$as_dir/$ac_prog$ac_exec_ext" --version 2>&1` in #( 'mkdir (GNU coreutils) '* | \ 'mkdir (coreutils) '* | \ 'mkdir (fileutils) '4.1*) ac_cv_path_mkdir=$as_dir/$ac_prog$ac_exec_ext break 3;; esac done done done IFS=$as_save_IFS fi test -d ./--version && rmdir ./--version if test "${ac_cv_path_mkdir+set}" = set; then MKDIR_P="$ac_cv_path_mkdir -p" else # As a last resort, use the slow shell script. Don't cache a # value for MKDIR_P within a source directory, because that will # break other packages using the cache if that directory is # removed, or if the value is a relative name. MKDIR_P="$ac_install_sh -d" fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5 $as_echo "$MKDIR_P" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5 $as_echo_n "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; } set x ${MAKE-make} ac_make=`$as_echo "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'` if eval \${ac_cv_prog_make_${ac_make}_set+:} false; then : $as_echo_n "(cached) " >&6 else cat >conftest.make <<\_ACEOF SHELL = /bin/sh all: @echo '@@@%%%=$(MAKE)=@@@%%%' _ACEOF # GNU make sometimes prints "make[1]: Entering ...", which would confuse us. case `${MAKE-make} -f conftest.make 2>/dev/null` in *@@@%%%=?*=@@@%%%*) eval ac_cv_prog_make_${ac_make}_set=yes;; *) eval ac_cv_prog_make_${ac_make}_set=no;; esac rm -f conftest.make fi if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } SET_MAKE= else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } SET_MAKE="MAKE=${MAKE-make}" fi rm -rf .tst 2>/dev/null mkdir .tst 2>/dev/null if test -d .tst; then am__leading_dot=. else am__leading_dot=_ fi rmdir .tst 2>/dev/null DEPDIR="${am__leading_dot}deps" ac_config_commands="$ac_config_commands depfiles" { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5 $as_echo_n "checking whether ${MAKE-make} supports the include directive... " >&6; } cat > confinc.mk << 'END' am__doit: @echo this is the am__doit target >confinc.out .PHONY: am__doit END am__include="#" am__quote= # BSD make does it like this. echo '.include "confinc.mk" # ignored' > confmf.BSD # Other make implementations (GNU, Solaris 10, AIX) do it like this. echo 'include confinc.mk # ignored' > confmf.GNU _am_result=no for s in GNU BSD; do { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5 (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } case $?:`cat confinc.out 2>/dev/null` in #( '0:this is the am__doit target') : case $s in #( BSD) : am__include='.include' am__quote='"' ;; #( *) : am__include='include' am__quote='' ;; esac ;; #( *) : ;; esac if test "$am__include" != "#"; then _am_result="yes ($s style)" break fi done rm -f confinc.* confmf.* { $as_echo "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5 $as_echo "${_am_result}" >&6; } # Check whether --enable-dependency-tracking was given. if test "${enable_dependency_tracking+set}" = set; then : enableval=$enable_dependency_tracking; fi if test "x$enable_dependency_tracking" != xno; then am_depcomp="$ac_aux_dir/depcomp" AMDEPBACKSLASH='\' am__nodep='_no' fi if test "x$enable_dependency_tracking" != xno; then AMDEP_TRUE= AMDEP_FALSE='#' else AMDEP_TRUE='#' AMDEP_FALSE= fi # Check whether --enable-silent-rules was given. if test "${enable_silent_rules+set}" = set; then : enableval=$enable_silent_rules; fi case $enable_silent_rules in # ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=1;; esac am_make=${MAKE-make} { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5 $as_echo_n "checking whether $am_make supports nested variables... " >&6; } if ${am_cv_make_support_nested_variables+:} false; then : $as_echo_n "(cached) " >&6 else if $as_echo 'TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5 $as_echo "$am_cv_make_support_nested_variables" >&6; } if test $am_cv_make_support_nested_variables = yes; then AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AM_BACKSLASH='\' if test "`cd $srcdir && pwd`" != "`pwd`"; then # Use -I$(srcdir) only when $(srcdir) != ., so that make's output # is not polluted with repeated "-I." am__isrc=' -I$(srcdir)' # test to see if srcdir already configured if test -f $srcdir/config.status; then as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5 fi fi # test whether we have cygpath if test -z "$CYGPATH_W"; then if (cygpath --version) >/dev/null 2>/dev/null; then CYGPATH_W='cygpath -w' else CYGPATH_W=echo fi fi # Define the identity of the package. PACKAGE='tpm2-pkcs11' VERSION='1.7.0' cat >>confdefs.h <<_ACEOF #define PACKAGE "$PACKAGE" _ACEOF cat >>confdefs.h <<_ACEOF #define VERSION "$VERSION" _ACEOF # Some tools Automake needs. ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"} AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"} AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"} AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"} MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"} # For better backward compatibility. To be removed once Automake 1.9.x # dies out for good. For more background, see: # # mkdir_p='$(MKDIR_P)' # We need awk for the "check" target (and possibly the TAP driver). The # system "awk" is bad on some platforms. # Always define AMTAR for backward compatibility. Yes, it's still used # in the wild :-( We should find a proper way to deprecate it ... AMTAR='$${TAR-tar}' # We'll loop over all known methods to create a tar archive until one works. _am_tools='gnutar pax cpio none' am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -' depcc="$CC" am_compiler_list= { $as_echo "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5 $as_echo_n "checking dependency style of $depcc... " >&6; } if ${am_cv_CC_dependencies_compiler_type+:} false; then : $as_echo_n "(cached) " >&6 else if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then # We make a subdir and do the tests there. Otherwise we can end up # making bogus files that we don't know about and never remove. For # instance it was reported that on HP-UX the gcc test will end up # making a dummy file named 'D' -- because '-MD' means "put the output # in D". rm -rf conftest.dir mkdir conftest.dir # Copy depcomp to subdir because otherwise we won't find it if we're # using a relative directory. cp "$am_depcomp" conftest.dir cd conftest.dir # We will build objects and dependencies in a subdirectory because # it helps to detect inapplicable dependency modes. For instance # both Tru64's cc and ICC support -MD to output dependencies as a # side effect of compilation, but ICC will put the dependencies in # the current directory while Tru64 will put them in the object # directory. mkdir sub am_cv_CC_dependencies_compiler_type=none if test "$am_compiler_list" = ""; then am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp` fi am__universal=false case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac for depmode in $am_compiler_list; do # Setup a source with many dependencies, because some compilers # like to wrap large dependency lists on column 80 (with \), and # we should not choose a depcomp mode which is confused by this. # # We need to recreate these files for each test, as the compiler may # overwrite some of them when testing with obscure command lines. # This happens at least with the AIX C compiler. : > sub/conftest.c for i in 1 2 3 4 5 6; do echo '#include "conftst'$i'.h"' >> sub/conftest.c # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with # Solaris 10 /bin/sh. echo '/* dummy */' > sub/conftst$i.h done echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf # We check with '-c' and '-o' for the sake of the "dashmstdout" # mode. It turns out that the SunPro C++ compiler does not properly # handle '-M -o', and we need to detect this. Also, some Intel # versions had trouble with output in subdirs. am__obj=sub/conftest.${OBJEXT-o} am__minus_obj="-o $am__obj" case $depmode in gcc) # This depmode causes a compiler race in universal mode. test "$am__universal" = false || continue ;; nosideeffect) # After this tag, mechanisms are not by side-effect, so they'll # only be used when explicitly requested. if test "x$enable_dependency_tracking" = xyes; then continue else break fi ;; msvc7 | msvc7msys | msvisualcpp | msvcmsys) # This compiler won't grok '-c -o', but also, the minuso test has # not run yet. These depmodes are late enough in the game, and # so weak that their functioning should not be impacted. am__obj=conftest.${OBJEXT-o} am__minus_obj= ;; none) break ;; esac if depmode=$depmode \ source=sub/conftest.c object=$am__obj \ depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \ $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \ >/dev/null 2>conftest.err && grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 && grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 && grep $am__obj sub/conftest.Po > /dev/null 2>&1 && ${MAKE-make} -s -f confmf > /dev/null 2>&1; then # icc doesn't choke on unknown options, it will just issue warnings # or remarks (even with -Werror). So we grep stderr for any message # that says an option was ignored or not supported. # When given -MP, icc 7.0 and 7.1 complain thusly: # icc: Command line warning: ignoring option '-M'; no argument required # The diagnosis changed in icc 8.0: # icc: Command line remark: option '-MP' not supported if (grep 'ignoring option' conftest.err || grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else am_cv_CC_dependencies_compiler_type=$depmode break fi fi done cd .. rm -rf conftest.dir else am_cv_CC_dependencies_compiler_type=none fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5 $as_echo "$am_cv_CC_dependencies_compiler_type" >&6; } CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type if test "x$enable_dependency_tracking" != xno \ && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then am__fastdepCC_TRUE= am__fastdepCC_FALSE='#' else am__fastdepCC_TRUE='#' am__fastdepCC_FALSE= fi # POSIX will say in a future version that running "rm -f" with no argument # is OK; and we want to be able to make that assumption in our Makefile # recipes. So use an aggressive probe to check that the usage we want is # actually supported "in the wild" to an acceptable degree. # See automake bug#10828. # To make any issue more visible, cause the running configure to be aborted # by default if the 'rm' program in use doesn't match our expectations; the # user can still override this though. if rm -f && rm -fr && rm -rf; then : OK; else cat >&2 <<'END' Oops! Your 'rm' program seems unable to run without file operands specified on the command line, even when the '-f' option is present. This is contrary to the behaviour of most rm programs out there, and not conforming with the upcoming POSIX standard: Please tell bug-automake@gnu.org about your system, including the value of your $PATH and any error possibly output before this message. This can help us improve future automake versions. END if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then echo 'Configuration will proceed anyway, since you have set the' >&2 echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2 echo >&2 else cat >&2 <<'END' Aborting the configuration process, to ensure you take notice of the issue. You can download and install GNU coreutils to get an 'rm' implementation that behaves properly: . If you want to complete the configuration process using your problematic 'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM to "yes", and re-run configure. END as_fn_error $? "Your 'rm' program is bad, sorry." "$LINENO" 5 fi fi # Check whether --with-pkgconfigdir was given. if test "${with_pkgconfigdir+set}" = set; then : withval=$with_pkgconfigdir; else with_pkgconfigdir='${libdir}/pkgconfig' fi pkgconfigdir=$with_pkgconfigdir # enable "silent-rules" option by default # Check whether --enable-silent-rules was given. if test "${enable_silent_rules+set}" = set; then : enableval=$enable_silent_rules; fi case $enable_silent_rules in # ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=0;; esac am_make=${MAKE-make} { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5 $as_echo_n "checking whether $am_make supports nested variables... " >&6; } if ${am_cv_make_support_nested_variables+:} false; then : $as_echo_n "(cached) " >&6 else if $as_echo 'TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5 $as_echo "$am_cv_make_support_nested_variables" >&6; } if test $am_cv_make_support_nested_variables = yes; then AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AM_BACKSLASH='\' # allow to override gcov location # Check whether --with-gcov was given. if test "${with_gcov+set}" = set; then : withval=$with_gcov; _AX_CODE_COVERAGE_GCOV_PROG_WITH=$with_gcov else _AX_CODE_COVERAGE_GCOV_PROG_WITH=gcov fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to build with code coverage support" >&5 $as_echo_n "checking whether to build with code coverage support... " >&6; } # Check whether --enable-code-coverage was given. if test "${enable_code_coverage+set}" = set; then : enableval=$enable_code_coverage; else enable_code_coverage=no fi if test "x$enable_code_coverage" = xyes; then CODE_COVERAGE_ENABLED_TRUE= CODE_COVERAGE_ENABLED_FALSE='#' else CODE_COVERAGE_ENABLED_TRUE='#' CODE_COVERAGE_ENABLED_FALSE= fi CODE_COVERAGE_ENABLED=$enable_code_coverage { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_code_coverage" >&5 $as_echo "$enable_code_coverage" >&6; } if test "x$enable_code_coverage" = xyes ; then : for ac_prog in gawk mawk nawk awk do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_AWK+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_AWK="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5 $as_echo "$AWK" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$AWK" && break done { $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU make" >&5 $as_echo_n "checking for GNU make... " >&6; } if ${_cv_gnu_make_command+:} false; then : $as_echo_n "(cached) " >&6 else _cv_gnu_make_command="" ; for a in "$MAKE" make gmake gnumake ; do if test -z "$a" ; then continue ; fi ; if "$a" --version 2> /dev/null | grep GNU 2>&1 > /dev/null ; then _cv_gnu_make_command=$a ; AX_CHECK_GNU_MAKE_HEADLINE=$("$a" --version 2> /dev/null | grep "GNU Make") ax_check_gnu_make_version=$(echo ${AX_CHECK_GNU_MAKE_HEADLINE} | ${AWK} -F " " '{ print $(NF); }') break ; fi done ; fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $_cv_gnu_make_command" >&5 $as_echo "$_cv_gnu_make_command" >&6; } if test "x$_cv_gnu_make_command" = x""; then : ifGNUmake="#" else ifGNUmake="" fi if test "x$_cv_gnu_make_command" = x""; then : ifnGNUmake="" else ifGNUmake="#" fi if test "x$_cv_gnu_make_command" = x""; then : { ax_cv_gnu_make_command=; unset ax_cv_gnu_make_command;} else ax_cv_gnu_make_command=${_cv_gnu_make_command} fi if test "x$_cv_gnu_make_command" = x""; then : as_fn_error $? "not using GNU make that is needed for coverage" "$LINENO" 5 fi # check for gcov if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH", so it can be a program name with args. set dummy ${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_GCOV+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$GCOV"; then ac_cv_prog_GCOV="$GCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_GCOV="${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi GCOV=$ac_cv_prog_GCOV if test -n "$GCOV"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GCOV" >&5 $as_echo "$GCOV" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_prog_GCOV"; then ac_ct_GCOV=$GCOV # Extract the first word of "$_AX_CODE_COVERAGE_GCOV_PROG_WITH", so it can be a program name with args. set dummy $_AX_CODE_COVERAGE_GCOV_PROG_WITH; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ac_ct_GCOV+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ac_ct_GCOV"; then ac_cv_prog_ac_ct_GCOV="$ac_ct_GCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_GCOV="$_AX_CODE_COVERAGE_GCOV_PROG_WITH" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_GCOV=$ac_cv_prog_ac_ct_GCOV if test -n "$ac_ct_GCOV"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_GCOV" >&5 $as_echo "$ac_ct_GCOV" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_ct_GCOV" = x; then GCOV=":" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac GCOV=$ac_ct_GCOV fi else GCOV="$ac_cv_prog_GCOV" fi if test "X$GCOV" = "X:"; then : as_fn_error $? "gcov is needed to do coverage" "$LINENO" 5 fi if test "$GCC" = "no" ; then : as_fn_error $? "not compiling with gcc, which is required for gcov code coverage" "$LINENO" 5 fi # Extract the first word of "lcov", so it can be a program name with args. set dummy lcov; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_LCOV+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$LCOV"; then ac_cv_prog_LCOV="$LCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_LCOV="lcov" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi LCOV=$ac_cv_prog_LCOV if test -n "$LCOV"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LCOV" >&5 $as_echo "$LCOV" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi # Extract the first word of "genhtml", so it can be a program name with args. set dummy genhtml; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_GENHTML+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$GENHTML"; then ac_cv_prog_GENHTML="$GENHTML" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_GENHTML="genhtml" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi GENHTML=$ac_cv_prog_GENHTML if test -n "$GENHTML"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GENHTML" >&5 $as_echo "$GENHTML" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test x"$LCOV" = x ; then : as_fn_error $? "To enable code coverage reporting you must have lcov installed" "$LINENO" 5 fi if test x"$GENHTML" = x ; then : as_fn_error $? "Could not find genhtml from the lcov package" "$LINENO" 5 fi CODE_COVERAGE_CPPFLAGS="-DNDEBUG" CODE_COVERAGE_CFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_CXXFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_LIBS="-lgcov" fi if true; then AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE= AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE='#' else AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE='#' AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE= fi ac_config_files="$ac_config_files Makefile lib/tpm2-pkcs11.pc" # enable autoheader config.h file ac_config_headers="$ac_config_headers src/lib/config.h" # test for TSS dependencies if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args. set dummy ${ac_tool_prefix}pkg-config; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_PKG_CONFIG+:} false; then : $as_echo_n "(cached) " >&6 else case $PKG_CONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi PKG_CONFIG=$ac_cv_path_PKG_CONFIG if test -n "$PKG_CONFIG"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5 $as_echo "$PKG_CONFIG" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi if test -z "$ac_cv_path_PKG_CONFIG"; then ac_pt_PKG_CONFIG=$PKG_CONFIG # Extract the first word of "pkg-config", so it can be a program name with args. set dummy pkg-config; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then : $as_echo_n "(cached) " >&6 else case $ac_pt_PKG_CONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG if test -n "$ac_pt_PKG_CONFIG"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5 $as_echo "$ac_pt_PKG_CONFIG" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ac_pt_PKG_CONFIG" = x; then PKG_CONFIG="" else case $cross_compiling:$ac_tool_warned in yes:) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac PKG_CONFIG=$ac_pt_PKG_CONFIG fi else PKG_CONFIG="$ac_cv_path_PKG_CONFIG" fi fi if test -n "$PKG_CONFIG"; then _pkg_min_version=0.9.0 { $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5 $as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; } if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } PKG_CONFIG="" fi fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_ESYS" >&5 $as_echo_n "checking for TSS2_ESYS... " >&6; } if test -n "$TSS2_ESYS_CFLAGS"; then pkg_cv_TSS2_ESYS_CFLAGS="$TSS2_ESYS_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 2.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 2.0") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_CFLAGS=`$PKG_CONFIG --cflags "tss2-esys >= 2.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_ESYS_LIBS"; then pkg_cv_TSS2_ESYS_LIBS="$TSS2_ESYS_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 2.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 2.0") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_LIBS=`$PKG_CONFIG --libs "tss2-esys >= 2.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-esys >= 2.0" 2>&1` else TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-esys >= 2.0" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_ESYS_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-esys >= 2.0) were not met: $TSS2_ESYS_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_ESYS_CFLAGS=$pkg_cv_TSS2_ESYS_CFLAGS TSS2_ESYS_LIBS=$pkg_cv_TSS2_ESYS_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_MU" >&5 $as_echo_n "checking for TSS2_MU... " >&6; } if test -n "$TSS2_MU_CFLAGS"; then pkg_cv_TSS2_MU_CFLAGS="$TSS2_MU_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-mu\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-mu") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_MU_CFLAGS=`$PKG_CONFIG --cflags "tss2-mu" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_MU_LIBS"; then pkg_cv_TSS2_MU_LIBS="$TSS2_MU_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-mu\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-mu") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_MU_LIBS=`$PKG_CONFIG --libs "tss2-mu" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_MU_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-mu" 2>&1` else TSS2_MU_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-mu" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_MU_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-mu) were not met: $TSS2_MU_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_MU_CFLAGS and TSS2_MU_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_MU_CFLAGS and TSS2_MU_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_MU_CFLAGS=$pkg_cv_TSS2_MU_CFLAGS TSS2_MU_LIBS=$pkg_cv_TSS2_MU_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_TCTILDR" >&5 $as_echo_n "checking for TSS2_TCTILDR... " >&6; } if test -n "$TSS2_TCTILDR_CFLAGS"; then pkg_cv_TSS2_TCTILDR_CFLAGS="$TSS2_TCTILDR_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tctildr\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tctildr") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTILDR_CFLAGS=`$PKG_CONFIG --cflags "tss2-tctildr" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_TCTILDR_LIBS"; then pkg_cv_TSS2_TCTILDR_LIBS="$TSS2_TCTILDR_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tctildr\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tctildr") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTILDR_LIBS=`$PKG_CONFIG --libs "tss2-tctildr" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_TCTILDR_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-tctildr" 2>&1` else TSS2_TCTILDR_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-tctildr" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_TCTILDR_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-tctildr) were not met: $TSS2_TCTILDR_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_TCTILDR_CFLAGS and TSS2_TCTILDR_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_TCTILDR_CFLAGS and TSS2_TCTILDR_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_TCTILDR_CFLAGS=$pkg_cv_TSS2_TCTILDR_CFLAGS TSS2_TCTILDR_LIBS=$pkg_cv_TSS2_TCTILDR_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_RC" >&5 $as_echo_n "checking for TSS2_RC... " >&6; } if test -n "$TSS2_RC_CFLAGS"; then pkg_cv_TSS2_RC_CFLAGS="$TSS2_RC_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-rc\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-rc") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_RC_CFLAGS=`$PKG_CONFIG --cflags "tss2-rc" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_RC_LIBS"; then pkg_cv_TSS2_RC_LIBS="$TSS2_RC_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-rc\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-rc") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_RC_LIBS=`$PKG_CONFIG --libs "tss2-rc" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_RC_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-rc" 2>&1` else TSS2_RC_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-rc" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_RC_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-rc) were not met: $TSS2_RC_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_RC_CFLAGS and TSS2_RC_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_RC_CFLAGS and TSS2_RC_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_RC_CFLAGS=$pkg_cv_TSS2_RC_CFLAGS TSS2_RC_LIBS=$pkg_cv_TSS2_RC_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi # Check for ESYS version below 2.2.1 which requires us to manage ESYS session flags if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys < 2.2.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys < 2.2.1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then $as_echo "#define ESAPI_MANAGE_FLAGS 1" >>confdefs.h fi # ESYS >= 3.0 uses a different ABI param hierarchy in Esys_LoadExternal() if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 3.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 3.0") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then $as_echo "#define ESYS_3 1" >>confdefs.h fi # require sqlite3 and libcrypto pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SQLITE3" >&5 $as_echo_n "checking for SQLITE3... " >&6; } if test -n "$SQLITE3_CFLAGS"; then pkg_cv_SQLITE3_CFLAGS="$SQLITE3_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"sqlite3\""; } >&5 ($PKG_CONFIG --exists --print-errors "sqlite3") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_SQLITE3_CFLAGS=`$PKG_CONFIG --cflags "sqlite3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$SQLITE3_LIBS"; then pkg_cv_SQLITE3_LIBS="$SQLITE3_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"sqlite3\""; } >&5 ($PKG_CONFIG --exists --print-errors "sqlite3") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_SQLITE3_LIBS=`$PKG_CONFIG --libs "sqlite3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then SQLITE3_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "sqlite3" 2>&1` else SQLITE3_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "sqlite3" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$SQLITE3_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (sqlite3) were not met: $SQLITE3_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables SQLITE3_CFLAGS and SQLITE3_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables SQLITE3_CFLAGS and SQLITE3_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else SQLITE3_CFLAGS=$pkg_cv_SQLITE3_CFLAGS SQLITE3_LIBS=$pkg_cv_SQLITE3_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for YAML" >&5 $as_echo_n "checking for YAML... " >&6; } if test -n "$YAML_CFLAGS"; then pkg_cv_YAML_CFLAGS="$YAML_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"yaml-0.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "yaml-0.1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_YAML_CFLAGS=`$PKG_CONFIG --cflags "yaml-0.1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$YAML_LIBS"; then pkg_cv_YAML_LIBS="$YAML_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"yaml-0.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "yaml-0.1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_YAML_LIBS=`$PKG_CONFIG --libs "yaml-0.1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then YAML_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "yaml-0.1" 2>&1` else YAML_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "yaml-0.1" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$YAML_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (yaml-0.1) were not met: $YAML_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables YAML_CFLAGS and YAML_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables YAML_CFLAGS and YAML_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else YAML_CFLAGS=$pkg_cv_YAML_CFLAGS YAML_LIBS=$pkg_cv_YAML_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for CRYPTO" >&5 $as_echo_n "checking for CRYPTO... " >&6; } if test -n "$CRYPTO_CFLAGS"; then pkg_cv_CRYPTO_CFLAGS="$CRYPTO_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.0.2g\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.0.2g") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CRYPTO_CFLAGS=`$PKG_CONFIG --cflags "libcrypto >= 1.0.2g" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$CRYPTO_LIBS"; then pkg_cv_CRYPTO_LIBS="$CRYPTO_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.0.2g\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.0.2g") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CRYPTO_LIBS=`$PKG_CONFIG --libs "libcrypto >= 1.0.2g" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then CRYPTO_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "libcrypto >= 1.0.2g" 2>&1` else CRYPTO_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "libcrypto >= 1.0.2g" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$CRYPTO_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (libcrypto >= 1.0.2g) were not met: $CRYPTO_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables CRYPTO_CFLAGS and CRYPTO_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables CRYPTO_CFLAGS and CRYPTO_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else CRYPTO_CFLAGS=$pkg_cv_CRYPTO_CFLAGS CRYPTO_LIBS=$pkg_cv_CRYPTO_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi # check for pthread ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ax_pthread_ok=no # We used to check for pthread.h first, but this fails if pthread.h # requires special compiler flags (e.g. on Tru64 or Sequent). # It gets checked for in the link test anyway. # First of all, check if the user has set any of the PTHREAD_LIBS, # etcetera environment variables, and if threads linking works using # them: if test "x$PTHREAD_CFLAGS$PTHREAD_LIBS" != "x"; then ax_pthread_save_CC="$CC" ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" if test "x$PTHREAD_CC" != "x"; then : CC="$PTHREAD_CC" fi CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS" >&5 $as_echo_n "checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char pthread_join (); int main () { return pthread_join (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_pthread_ok=yes fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5 $as_echo "$ax_pthread_ok" >&6; } if test "x$ax_pthread_ok" = "xno"; then PTHREAD_LIBS="" PTHREAD_CFLAGS="" fi CC="$ax_pthread_save_CC" CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" fi # We must check for the threads library under a number of different # names; the ordering is very important because some systems # (e.g. DEC) have both -lpthread and -lpthreads, where one of the # libraries is broken (non-POSIX). # Create a list of thread flags to try. Items starting with a "-" are # C compiler flags, and other items are library names, except for "none" # which indicates that we try without any flags at all, and "pthread-config" # which is a program returning the flags for the Pth emulation library. ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config" # The ordering *is* (sometimes) important. Some notes on the # individual items follow: # pthreads: AIX (must check this before -lpthread) # none: in case threads are in libc; should be tried before -Kthread and # other compiler flags to prevent continual compiler warnings # -Kthread: Sequent (threads in libc, but -Kthread needed for pthread.h) # -pthread: Linux/gcc (kernel threads), BSD/gcc (userland threads), Tru64 # (Note: HP C rejects this with "bad form for `-t' option") # -pthreads: Solaris/gcc (Note: HP C also rejects) # -mt: Sun Workshop C (may only link SunOS threads [-lthread], but it # doesn't hurt to check since this sometimes defines pthreads and # -D_REENTRANT too), HP C (must be checked before -lpthread, which # is present but should not be used directly; and before -mthreads, # because the compiler interprets this as "-mt" + "-hreads") # -mthreads: Mingw32/gcc, Lynx/gcc # pthread: Linux, etcetera # --thread-safe: KAI C++ # pthread-config: use pthread-config program (for GNU Pth library) case $host_os in freebsd*) # -kthread: FreeBSD kernel threads (preferred to -pthread since SMP-able) # lthread: LinuxThreads port on FreeBSD (also preferred to -pthread) ax_pthread_flags="-kthread lthread $ax_pthread_flags" ;; hpux*) # From the cc(1) man page: "[-mt] Sets various -D flags to enable # multi-threading and also sets -lpthread." ax_pthread_flags="-mt -pthread pthread $ax_pthread_flags" ;; openedition*) # IBM z/OS requires a feature-test macro to be defined in order to # enable POSIX threads at all, so give the user a hint if this is # not set. (We don't define these ourselves, as they can affect # other portions of the system API in unpredictable ways.) cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ # if !defined(_OPEN_THREADS) && !defined(_UNIX03_THREADS) AX_PTHREAD_ZOS_MISSING # endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "AX_PTHREAD_ZOS_MISSING" >/dev/null 2>&1; then : { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&5 $as_echo "$as_me: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&2;} fi rm -f conftest* ;; solaris*) # On Solaris (at least, for some versions), libc contains stubbed # (non-functional) versions of the pthreads routines, so link-based # tests will erroneously succeed. (N.B.: The stubs are missing # pthread_cleanup_push, or rather a function called by this macro, # so we could check for that, but who knows whether they'll stub # that too in a future libc.) So we'll check first for the # standard Solaris way of linking pthreads (-mt -lpthread). ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags" ;; esac # GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC) if test "x$GCC" = "xyes"; then : ax_pthread_flags="-pthread -pthreads $ax_pthread_flags" fi # The presence of a feature test macro requesting re-entrant function # definitions is, on some systems, a strong hint that pthreads support is # correctly enabled case $host_os in darwin* | hpux* | linux* | osf* | solaris*) ax_pthread_check_macro="_REENTRANT" ;; aix*) ax_pthread_check_macro="_THREAD_SAFE" ;; *) ax_pthread_check_macro="--" ;; esac if test "x$ax_pthread_check_macro" = "x--"; then : ax_pthread_check_cond=0 else ax_pthread_check_cond="!defined($ax_pthread_check_macro)" fi # Are we compiling with Clang? { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC is Clang" >&5 $as_echo_n "checking whether $CC is Clang... " >&6; } if ${ax_cv_PTHREAD_CLANG+:} false; then : $as_echo_n "(cached) " >&6 else ax_cv_PTHREAD_CLANG=no # Note that Autoconf sets GCC=yes for Clang as well as GCC if test "x$GCC" = "xyes"; then cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Note: Clang 2.7 lacks __clang_[a-z]+__ */ # if defined(__clang__) && defined(__llvm__) AX_PTHREAD_CC_IS_CLANG # endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "AX_PTHREAD_CC_IS_CLANG" >/dev/null 2>&1; then : ax_cv_PTHREAD_CLANG=yes fi rm -f conftest* fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG" >&5 $as_echo "$ax_cv_PTHREAD_CLANG" >&6; } ax_pthread_clang="$ax_cv_PTHREAD_CLANG" ax_pthread_clang_warning=no # Clang needs special handling, because older versions handle the -pthread # option in a rather... idiosyncratic way if test "x$ax_pthread_clang" = "xyes"; then # Clang takes -pthread; it has never supported any other flag # (Note 1: This will need to be revisited if a system that Clang # supports has POSIX threads in a separate library. This tends not # to be the way of modern systems, but it's conceivable.) # (Note 2: On some systems, notably Darwin, -pthread is not needed # to get POSIX threads support; the API is always present and # active. We could reasonably leave PTHREAD_CFLAGS empty. But # -pthread does define _REENTRANT, and while the Darwin headers # ignore this macro, third-party headers might not.) PTHREAD_CFLAGS="-pthread" PTHREAD_LIBS= ax_pthread_ok=yes # However, older versions of Clang make a point of warning the user # that, in an invocation where only linking and no compilation is # taking place, the -pthread option has no effect ("argument unused # during compilation"). They expect -pthread to be passed in only # when source code is being compiled. # # Problem is, this is at odds with the way Automake and most other # C build frameworks function, which is that the same flags used in # compilation (CFLAGS) are also used in linking. Many systems # supported by AX_PTHREAD require exactly this for POSIX threads # support, and in fact it is often not straightforward to specify a # flag that is used only in the compilation phase and not in # linking. Such a scenario is extremely rare in practice. # # Even though use of the -pthread flag in linking would only print # a warning, this can be a nuisance for well-run software projects # that build with -Werror. So if the active version of Clang has # this misfeature, we search for an option to squash it. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread" >&5 $as_echo_n "checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread... " >&6; } if ${ax_cv_PTHREAD_CLANG_NO_WARN_FLAG+:} false; then : $as_echo_n "(cached) " >&6 else ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown # Create an alternate version of $ac_link that compiles and # links in two steps (.c -> .o, .o -> exe) instead of one # (.c -> exe), because the warning occurs only in the second # step ax_pthread_save_ac_link="$ac_link" ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g' ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"` ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)" ax_pthread_save_CFLAGS="$CFLAGS" for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do if test "x$ax_pthread_try" = "xunknown"; then : break fi CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS" ac_link="$ax_pthread_save_ac_link" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void){return 0;} _ACEOF if ac_fn_c_try_link "$LINENO"; then : ac_link="$ax_pthread_2step_ac_link" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void){return 0;} _ACEOF if ac_fn_c_try_link "$LINENO"; then : break fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext done ac_link="$ax_pthread_save_ac_link" CFLAGS="$ax_pthread_save_CFLAGS" if test "x$ax_pthread_try" = "x"; then : ax_pthread_try=no fi ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try" fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&5 $as_echo "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&6; } case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in no | unknown) ;; *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;; esac fi # $ax_pthread_clang = yes if test "x$ax_pthread_ok" = "xno"; then for ax_pthread_try_flag in $ax_pthread_flags; do case $ax_pthread_try_flag in none) { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work without any flags" >&5 $as_echo_n "checking whether pthreads work without any flags... " >&6; } ;; -mt,pthread) { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with -mt -lpthread" >&5 $as_echo_n "checking whether pthreads work with -mt -lpthread... " >&6; } PTHREAD_CFLAGS="-mt" PTHREAD_LIBS="-lpthread" ;; -*) { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with $ax_pthread_try_flag" >&5 $as_echo_n "checking whether pthreads work with $ax_pthread_try_flag... " >&6; } PTHREAD_CFLAGS="$ax_pthread_try_flag" ;; pthread-config) # Extract the first word of "pthread-config", so it can be a program name with args. set dummy pthread-config; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ax_pthread_config+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ax_pthread_config"; then ac_cv_prog_ax_pthread_config="$ax_pthread_config" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ax_pthread_config="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_ax_pthread_config" && ac_cv_prog_ax_pthread_config="no" fi fi ax_pthread_config=$ac_cv_prog_ax_pthread_config if test -n "$ax_pthread_config"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_config" >&5 $as_echo "$ax_pthread_config" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ax_pthread_config" = "xno"; then : continue fi PTHREAD_CFLAGS="`pthread-config --cflags`" PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`" ;; *) { $as_echo "$as_me:${as_lineno-$LINENO}: checking for the pthreads library -l$ax_pthread_try_flag" >&5 $as_echo_n "checking for the pthreads library -l$ax_pthread_try_flag... " >&6; } PTHREAD_LIBS="-l$ax_pthread_try_flag" ;; esac ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Check for various functions. We must include pthread.h, # since some functions may be macros. (On the Sequent, we # need a special flag -Kthread to make this header compile.) # We check for pthread_join because it is in -lpthread on IRIX # while pthread_create is in libc. We check for pthread_attr_init # due to DEC craziness with -lpthreads. We check for # pthread_cleanup_push because it is one of the few pthread # functions on Solaris that doesn't have a non-functional libc stub. # We try pthread_create on general principles. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include # if $ax_pthread_check_cond # error "$ax_pthread_check_macro must be defined" # endif static void routine(void *a) { a = 0; } static void *start_routine(void *a) { return a; } int main () { pthread_t th; pthread_attr_t attr; pthread_create(&th, 0, start_routine, 0); pthread_join(th, 0); pthread_attr_init(&attr); pthread_cleanup_push(routine, 0); pthread_cleanup_pop(0) /* ; */ ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_pthread_ok=yes fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5 $as_echo "$ax_pthread_ok" >&6; } if test "x$ax_pthread_ok" = "xyes"; then : break fi PTHREAD_LIBS="" PTHREAD_CFLAGS="" done fi # Various other checks: if test "x$ax_pthread_ok" = "xyes"; then ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Detect AIX lossage: JOINABLE attribute is called UNDETACHED. { $as_echo "$as_me:${as_lineno-$LINENO}: checking for joinable pthread attribute" >&5 $as_echo_n "checking for joinable pthread attribute... " >&6; } if ${ax_cv_PTHREAD_JOINABLE_ATTR+:} false; then : $as_echo_n "(cached) " >&6 else ax_cv_PTHREAD_JOINABLE_ATTR=unknown for ax_pthread_attr in PTHREAD_CREATE_JOINABLE PTHREAD_CREATE_UNDETACHED; do cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { int attr = $ax_pthread_attr; return attr /* ; */ ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_PTHREAD_JOINABLE_ATTR=$ax_pthread_attr; break fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext done fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_JOINABLE_ATTR" >&5 $as_echo "$ax_cv_PTHREAD_JOINABLE_ATTR" >&6; } if test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xunknown" && \ test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xPTHREAD_CREATE_JOINABLE" && \ test "x$ax_pthread_joinable_attr_defined" != "xyes"; then : cat >>confdefs.h <<_ACEOF #define PTHREAD_CREATE_JOINABLE $ax_cv_PTHREAD_JOINABLE_ATTR _ACEOF ax_pthread_joinable_attr_defined=yes fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether more special flags are required for pthreads" >&5 $as_echo_n "checking whether more special flags are required for pthreads... " >&6; } if ${ax_cv_PTHREAD_SPECIAL_FLAGS+:} false; then : $as_echo_n "(cached) " >&6 else ax_cv_PTHREAD_SPECIAL_FLAGS=no case $host_os in solaris*) ax_cv_PTHREAD_SPECIAL_FLAGS="-D_POSIX_PTHREAD_SEMANTICS" ;; esac fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_SPECIAL_FLAGS" >&5 $as_echo "$ax_cv_PTHREAD_SPECIAL_FLAGS" >&6; } if test "x$ax_cv_PTHREAD_SPECIAL_FLAGS" != "xno" && \ test "x$ax_pthread_special_flags_added" != "xyes"; then : PTHREAD_CFLAGS="$ax_cv_PTHREAD_SPECIAL_FLAGS $PTHREAD_CFLAGS" ax_pthread_special_flags_added=yes fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PTHREAD_PRIO_INHERIT" >&5 $as_echo_n "checking for PTHREAD_PRIO_INHERIT... " >&6; } if ${ax_cv_PTHREAD_PRIO_INHERIT+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { int i = PTHREAD_PRIO_INHERIT; ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_PTHREAD_PRIO_INHERIT=yes else ax_cv_PTHREAD_PRIO_INHERIT=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_PRIO_INHERIT" >&5 $as_echo "$ax_cv_PTHREAD_PRIO_INHERIT" >&6; } if test "x$ax_cv_PTHREAD_PRIO_INHERIT" = "xyes" && \ test "x$ax_pthread_prio_inherit_defined" != "xyes"; then : $as_echo "#define HAVE_PTHREAD_PRIO_INHERIT 1" >>confdefs.h ax_pthread_prio_inherit_defined=yes fi CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" # More AIX lossage: compile with *_r variant if test "x$GCC" != "xyes"; then case $host_os in aix*) case "x/$CC" in #( x*/c89|x*/c89_128|x*/c99|x*/c99_128|x*/cc|x*/cc128|x*/xlc|x*/xlc_v6|x*/xlc128|x*/xlc128_v6) : #handle absolute path differently from PATH based program lookup case "x$CC" in #( x/*) : if as_fn_executable_p ${CC}_r; then : PTHREAD_CC="${CC}_r" fi ;; #( *) : for ac_prog in ${CC}_r do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_PTHREAD_CC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$PTHREAD_CC"; then ac_cv_prog_PTHREAD_CC="$PTHREAD_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_PTHREAD_CC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi PTHREAD_CC=$ac_cv_prog_PTHREAD_CC if test -n "$PTHREAD_CC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PTHREAD_CC" >&5 $as_echo "$PTHREAD_CC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$PTHREAD_CC" && break done test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" ;; esac ;; #( *) : ;; esac ;; esac fi fi test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" # Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND: if test "x$ax_pthread_ok" = "xyes"; then $as_echo "#define HAVE_PTHREAD 1" >>confdefs.h : else ax_pthread_ok=no as_fn_error $? "Cannot find pthread" "$LINENO" 5 fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # gnulib m4 dependency: check for linker script support # Check whether --enable-ld-version-script was given. if test "${enable_ld_version_script+set}" = set; then : enableval=$enable_ld_version_script; have_ld_version_script=$enableval else { $as_echo "$as_me:${as_lineno-$LINENO}: checking if LD -Wl,--version-script works" >&5 $as_echo_n "checking if LD -Wl,--version-script works... " >&6; } if ${gl_cv_sys_ld_version_script+:} false; then : $as_echo_n "(cached) " >&6 else gl_cv_sys_ld_version_script=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--version-script=conftest.map" echo foo >conftest.map cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : else cat > conftest.map <conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : gl_cv_sys_ld_version_script=yes fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext rm -f conftest.map LDFLAGS=$save_LDFLAGS fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $gl_cv_sys_ld_version_script" >&5 $as_echo "$gl_cv_sys_ld_version_script" >&6; } have_ld_version_script=$gl_cv_sys_ld_version_script fi if test "$have_ld_version_script" = yes; then HAVE_LD_VERSION_SCRIPT_TRUE= HAVE_LD_VERSION_SCRIPT_FALSE='#' else HAVE_LD_VERSION_SCRIPT_TRUE='#' HAVE_LD_VERSION_SCRIPT_FALSE= fi # Check whether --enable-esapi-session-manage-flags was given. if test "${enable_esapi_session_manage_flags+set}" = set; then : enableval=$enable_esapi_session_manage_flags; esapi_sf=$enableval fi if test "x$esapi_sf" = "xyes"; then : $as_echo "#define ESAPI_MANAGE_FLAGS 1" >>confdefs.h fi # Check whether --enable-fapi was given. if test "${enable_fapi+set}" = set; then : enableval=$enable_fapi; enable_fapi=$enableval else enable_fapi=auto fi if test "x$enable_fapi" != "xno"; then : if test "x$enable_fapi" = "xauto"; then : pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_FAPI" >&5 $as_echo_n "checking for TSS2_FAPI... " >&6; } if test -n "$TSS2_FAPI_CFLAGS"; then pkg_cv_TSS2_FAPI_CFLAGS="$TSS2_FAPI_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_CFLAGS=`$PKG_CONFIG --cflags "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_FAPI_LIBS"; then pkg_cv_TSS2_FAPI_LIBS="$TSS2_FAPI_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_LIBS=`$PKG_CONFIG --libs "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` else TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_FAPI_PKG_ERRORS" >&5 have_fapi=0 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } have_fapi=0 else TSS2_FAPI_CFLAGS=$pkg_cv_TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS=$pkg_cv_TSS2_FAPI_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } have_fapi=1 fi else pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_FAPI" >&5 $as_echo_n "checking for TSS2_FAPI... " >&6; } if test -n "$TSS2_FAPI_CFLAGS"; then pkg_cv_TSS2_FAPI_CFLAGS="$TSS2_FAPI_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_CFLAGS=`$PKG_CONFIG --cflags "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_FAPI_LIBS"; then pkg_cv_TSS2_FAPI_LIBS="$TSS2_FAPI_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_LIBS=`$PKG_CONFIG --libs "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` else TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_FAPI_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-fapi >= 3.0 ) were not met: $TSS2_FAPI_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_FAPI_CFLAGS and TSS2_FAPI_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_FAPI_CFLAGS and TSS2_FAPI_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_FAPI_CFLAGS=$pkg_cv_TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS=$pkg_cv_TSS2_FAPI_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } have_fapi=1 fi fi fi if test "$have_fapi" = "1"; then : $as_echo "#define HAVE_FAPI 1" >>confdefs.h fi if test "$have_fapi" = "1"; then HAVE_FAPI_TRUE= HAVE_FAPI_FALSE='#' else HAVE_FAPI_TRUE='#' HAVE_FAPI_FALSE= fi # START ENABLE UNIT # # Enable --with-unit option for unit testing # # Check whether --enable-unit was given. if test "${enable_unit+set}" = set; then : enableval=$enable_unit; else enable_unit=no fi # Check whether --enable-fuzzing was given. if test "${enable_fuzzing+set}" = set; then : enableval=$enable_fuzzing; else enable_fuzzing=no fi if test "x$enable_fuzzing" != xno; then FUZZING_TRUE= FUZZING_FALSE='#' else FUZZING_TRUE='#' FUZZING_FALSE= fi # Check whether --enable-asan was given. if test "${enable_asan+set}" = set; then : enableval=$enable_asan; else enable_asan=no fi # Check whether --enable-hardening was given. if test "${enable_hardening+set}" = set; then : enableval=$enable_hardening; else enable_hardening="yes" fi # Check whether --enable-overflow was given. if test "${enable_overflow+set}" = set; then : enableval=$enable_overflow; fi if test "x$enable_overflow" = "xno"; then : $as_echo "#define DISABLE_OVERFLOW_BUILTINS /**/" >>confdefs.h fi # Check whether --with-fuzzing-flags was given. if test "${with_fuzzing_flags+set}" = set; then : withval=$with_fuzzing_flags; FUZZING_FLAGS="$with_fuzzing_flags" else FUZZING_FLAGS="-max_total_time=30" fi if test "x$enable_fuzzing" = "xyes"; then : # Add these to AM_CFLAGS to everyone gets built # smartly (extra info and instrumentation) { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=address" >&5 $as_echo_n "checking whether C compiler accepts -fsanitize=address... " >&6; } if ${ax_cv_check_cflags___fsanitize_address+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=address" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fsanitize_address=yes else ax_cv_check_cflags___fsanitize_address=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_address" >&5 $as_echo "$ax_cv_check_cflags___fsanitize_address" >&6; } if test "x$ax_cv_check_cflags___fsanitize_address" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fsanitize=address" else as_fn_error $? "Cannot enable -fsanitize=address, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -g" >&5 $as_echo_n "checking whether C compiler accepts -g... " >&6; } if ${ax_cv_check_cflags___g+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___g=yes else ax_cv_check_cflags___g=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___g" >&5 $as_echo "$ax_cv_check_cflags___g" >&6; } if test "x$ax_cv_check_cflags___g" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -g" else as_fn_error $? "Cannot enable -g, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O0" >&5 $as_echo_n "checking whether C compiler accepts -O0... " >&6; } if ${ax_cv_check_cflags___O0+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O0" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___O0=yes else ax_cv_check_cflags___O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O0" >&5 $as_echo "$ax_cv_check_cflags___O0" >&6; } if test "x$ax_cv_check_cflags___O0" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O0" else as_fn_error $? "Cannot enable -O0, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=fuzzer" >&5 $as_echo_n "checking whether C compiler accepts -fsanitize=fuzzer... " >&6; } if ${ax_cv_check_cflags___fsanitize_fuzzer+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=fuzzer" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fsanitize_fuzzer=yes else ax_cv_check_cflags___fsanitize_fuzzer=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_fuzzer" >&5 $as_echo "$ax_cv_check_cflags___fsanitize_fuzzer" >&6; } if test "x$ax_cv_check_cflags___fsanitize_fuzzer" = xyes; then : FUZZING_CFLAGS="$FUZZING_CFLAGS -fsanitize=fuzzer" else as_fn_error $? "Cannot enable -fsanitize=fuzzer" "$LINENO" 5 fi # Disable hardening flags { $as_echo "$as_me:${as_lineno-$LINENO}: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&5 $as_echo "$as_me: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&6;} enable_hardening=no $as_echo "#define FUZZING 1" >>confdefs.h fi if test "x$enable_asan" = "xyes"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=address" >&5 $as_echo_n "checking whether C compiler accepts -fsanitize=address... " >&6; } if ${ax_cv_check_cflags___fsanitize_address+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=address" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fsanitize_address=yes else ax_cv_check_cflags___fsanitize_address=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_address" >&5 $as_echo "$ax_cv_check_cflags___fsanitize_address" >&6; } if test "x$ax_cv_check_cflags___fsanitize_address" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fsanitize=address" else as_fn_error $? "Cannot enable -fsanitize=address, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -g" >&5 $as_echo_n "checking whether C compiler accepts -g... " >&6; } if ${ax_cv_check_cflags___g+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___g=yes else ax_cv_check_cflags___g=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___g" >&5 $as_echo "$ax_cv_check_cflags___g" >&6; } if test "x$ax_cv_check_cflags___g" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -g" else as_fn_error $? "Cannot enable -g, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O0" >&5 $as_echo_n "checking whether C compiler accepts -O0... " >&6; } if ${ax_cv_check_cflags___O0+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O0" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___O0=yes else ax_cv_check_cflags___O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O0" >&5 $as_echo "$ax_cv_check_cflags___O0" >&6; } if test "x$ax_cv_check_cflags___O0" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O0" else as_fn_error $? "Cannot enable -O0, consider configuring with --disable-hardening" "$LINENO" 5 fi # Disable hardening flags { $as_echo "$as_me:${as_lineno-$LINENO}: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&5 $as_echo "$as_me: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&6;} enable_hardening=no fi if test "x$enable_asan" = "xyes"; then ENABLE_ASAN_TRUE= ENABLE_ASAN_FALSE='#' else ENABLE_ASAN_TRUE='#' ENABLE_ASAN_FALSE= fi # end function unit_test_checks if test "x$enable_unit" = "xyes"; then : $as_echo "#define UNIT_TESTING 1" >>confdefs.h { $as_echo "$as_me:${as_lineno-$LINENO}: checking for __attribute__((weak))" >&5 $as_echo_n "checking for __attribute__((weak))... " >&6; } if ${ax_cv_have_func_attribute_weak+:} false; then : $as_echo_n "(cached) " >&6 else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int foo( void ) __attribute__((weak)); int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : if test -s conftest.err; then : ax_cv_have_func_attribute_weak=no else ax_cv_have_func_attribute_weak=yes fi else ax_cv_have_func_attribute_weak=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have_func_attribute_weak" >&5 $as_echo "$ax_cv_have_func_attribute_weak" >&6; } if test yes = $ax_cv_have_func_attribute_weak; then : cat >>confdefs.h <<_ACEOF #define HAVE_FUNC_ATTRIBUTE_WEAK 1 _ACEOF fi fi if test "x$enable_unit" = "xyes"; then UNIT_TRUE= UNIT_FALSE='#' else UNIT_TRUE='#' UNIT_FALSE= fi # All the tests leverage CMOCKA, so if any testing is enabled, look for it if test "x$enable_unit" = "xyes" -o "x$enable_integration" = "xyes" -o "x$enable_fuzzing" = "xyes"; then : pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for CMOCKA" >&5 $as_echo_n "checking for CMOCKA... " >&6; } if test -n "$CMOCKA_CFLAGS"; then pkg_cv_CMOCKA_CFLAGS="$CMOCKA_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"cmocka\""; } >&5 ($PKG_CONFIG --exists --print-errors "cmocka") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CMOCKA_CFLAGS=`$PKG_CONFIG --cflags "cmocka" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$CMOCKA_LIBS"; then pkg_cv_CMOCKA_LIBS="$CMOCKA_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"cmocka\""; } >&5 ($PKG_CONFIG --exists --print-errors "cmocka") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CMOCKA_LIBS=`$PKG_CONFIG --libs "cmocka" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then CMOCKA_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "cmocka" 2>&1` else CMOCKA_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "cmocka" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$CMOCKA_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (cmocka) were not met: $CMOCKA_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables CMOCKA_CFLAGS and CMOCKA_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables CMOCKA_CFLAGS and CMOCKA_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else CMOCKA_CFLAGS=$pkg_cv_CMOCKA_CFLAGS CMOCKA_LIBS=$pkg_cv_CMOCKA_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi fi # END ENABLE UNIT # Macro that checks for existence of a python module # START ENABLE INTEGRATION # # enable integration tests and check for simulator binary # # Check whether --enable-integration was given. if test "${enable_integration+set}" = set; then : enableval=$enable_integration; else enable_integration=no fi # Test for Java compiler and interpreter without throwing fatal errors (since # these macros are defined using AC_DEFUN they cannot be called conditionally) if test "x$JAVAPREFIX" = x; then : test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVAC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 $as_echo "$JAVAC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVAC" && break done else test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVAC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 $as_echo "$JAVAC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVAC" && break done fi test "x$JAVAC" = x && have_javac=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $JAVAC works" >&5 $as_echo_n "checking if $JAVAC works... " >&6; } if ${ac_cv_prog_javac_works+:} false; then : $as_echo_n "(cached) " >&6 else JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* #line 15034 "configure" */ public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else have_javac=no echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 fi rm -f $JAVA_TEST $CLASS_TEST fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_javac_works" >&5 $as_echo "$ac_cv_prog_javac_works" >&6; } if test "x$JAVAPREFIX" = x; then : test x$JAVA = x && for ac_prog in kaffe java do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVA+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVA"; then ac_cv_prog_JAVA="$JAVA" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVA="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVA=$ac_cv_prog_JAVA if test -n "$JAVA"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVA" >&5 $as_echo "$JAVA" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVA" && break done else test x$JAVA = x && for ac_prog in kaffe java do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVA+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVA"; then ac_cv_prog_JAVA="$JAVA" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVA="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVA=$ac_cv_prog_JAVA if test -n "$JAVA"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVA" >&5 $as_echo "$JAVA" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVA" && break done fi test x$JAVA = x && have_javac=no if test x$ac_cv_prog_javac_works = xno; then have_javac=no fi if test x$ac_cv_prog_javac_works = x; then if test "x$JAVAPREFIX" = x; then : test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVAC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 $as_echo "$JAVAC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVAC" && break done else test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_JAVAC+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 $as_echo "$JAVAC" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi test -n "$JAVAC" && break done fi test "x$JAVAC" = x && have_javac=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $JAVAC works" >&5 $as_echo_n "checking if $JAVAC works... " >&6; } if ${ac_cv_prog_javac_works+:} false; then : $as_echo_n "(cached) " >&6 else JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* #line 15250 "configure" */ public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else have_javac=no echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 fi rm -f $JAVA_TEST $CLASS_TEST fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_javac_works" >&5 $as_echo "$ac_cv_prog_javac_works" >&6; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $JAVA works" >&5 $as_echo_n "checking if $JAVA works... " >&6; } if ${ac_cv_prog_java_works+:} false; then : $as_echo_n "(cached) " >&6 else JAVA_TEST=Test.java CLASS_TEST=Test.class TEST=Test cat << \EOF > $JAVA_TEST /* [#]line 15284 "configure" */ public class Test { public static void main (String args[]) { System.exit (0); } } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s $CLASS_TEST; then : else echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 have_javac=no fi if { ac_try='$JAVA -classpath . $JAVAFLAGS $TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_java_works=yes else echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 have_javac=no fi rm -f $JAVA_TEST $CLASS_TEST fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_java_works" >&5 $as_echo "$ac_cv_prog_java_works" >&6; } # Extract the first word of "tpm2_createprimary", so it can be a program name with args. set dummy tpm2_createprimary; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_createprimary+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_createprimary"; then ac_cv_prog_tpm2_createprimary="$tpm2_createprimary" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_createprimary="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_createprimary" && ac_cv_prog_tpm2_createprimary="no" fi fi tpm2_createprimary=$ac_cv_prog_tpm2_createprimary if test -n "$tpm2_createprimary"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_createprimary" >&5 $as_echo "$tpm2_createprimary" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_createprimary" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_createprimary, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_create", so it can be a program name with args. set dummy tpm2_create; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_create+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_create"; then ac_cv_prog_tpm2_create="$tpm2_create" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_create="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_create" && ac_cv_prog_tpm2_create="no" fi fi tpm2_create=$ac_cv_prog_tpm2_create if test -n "$tpm2_create"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_create" >&5 $as_echo "$tpm2_create" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_create" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_create, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_evictcontrol", so it can be a program name with args. set dummy tpm2_evictcontrol; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_evictcontrol+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_evictcontrol"; then ac_cv_prog_tpm2_evictcontrol="$tpm2_evictcontrol" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_evictcontrol="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_evictcontrol" && ac_cv_prog_tpm2_evictcontrol="no" fi fi tpm2_evictcontrol=$ac_cv_prog_tpm2_evictcontrol if test -n "$tpm2_evictcontrol"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_evictcontrol" >&5 $as_echo "$tpm2_evictcontrol" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_evictcontrol" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_evictcontrol, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_readpublic", so it can be a program name with args. set dummy tpm2_readpublic; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_readpublic+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_readpublic"; then ac_cv_prog_tpm2_readpublic="$tpm2_readpublic" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_readpublic="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_readpublic" && ac_cv_prog_tpm2_readpublic="no" fi fi tpm2_readpublic=$ac_cv_prog_tpm2_readpublic if test -n "$tpm2_readpublic"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_readpublic" >&5 $as_echo "$tpm2_readpublic" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_readpublic" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_readpublic, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_load", so it can be a program name with args. set dummy tpm2_load; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_load+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_load"; then ac_cv_prog_tpm2_load="$tpm2_load" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_load="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_load" && ac_cv_prog_tpm2_load="no" fi fi tpm2_load=$ac_cv_prog_tpm2_load if test -n "$tpm2_load"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_load" >&5 $as_echo "$tpm2_load" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_load" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_load, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_loadexternal", so it can be a program name with args. set dummy tpm2_loadexternal; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_loadexternal+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_loadexternal"; then ac_cv_prog_tpm2_loadexternal="$tpm2_loadexternal" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_loadexternal="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_loadexternal" && ac_cv_prog_tpm2_loadexternal="no" fi fi tpm2_loadexternal=$ac_cv_prog_tpm2_loadexternal if test -n "$tpm2_loadexternal"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_loadexternal" >&5 $as_echo "$tpm2_loadexternal" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_loadexternal" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_loadexternal, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_unseal", so it can be a program name with args. set dummy tpm2_unseal; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_unseal+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_unseal"; then ac_cv_prog_tpm2_unseal="$tpm2_unseal" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_unseal="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_unseal" && ac_cv_prog_tpm2_unseal="no" fi fi tpm2_unseal=$ac_cv_prog_tpm2_unseal if test -n "$tpm2_unseal"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_unseal" >&5 $as_echo "$tpm2_unseal" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_unseal" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_unseal, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_encryptdecrypt", so it can be a program name with args. set dummy tpm2_encryptdecrypt; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_encryptdecrypt+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_encryptdecrypt"; then ac_cv_prog_tpm2_encryptdecrypt="$tpm2_encryptdecrypt" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_encryptdecrypt="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_encryptdecrypt" && ac_cv_prog_tpm2_encryptdecrypt="no" fi fi tpm2_encryptdecrypt=$ac_cv_prog_tpm2_encryptdecrypt if test -n "$tpm2_encryptdecrypt"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_encryptdecrypt" >&5 $as_echo "$tpm2_encryptdecrypt" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_encryptdecrypt" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_encryptdecrypt, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_sign", so it can be a program name with args. set dummy tpm2_sign; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_sign+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_sign"; then ac_cv_prog_tpm2_sign="$tpm2_sign" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_sign="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_sign" && ac_cv_prog_tpm2_sign="no" fi fi tpm2_sign=$ac_cv_prog_tpm2_sign if test -n "$tpm2_sign"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_sign" >&5 $as_echo "$tpm2_sign" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_sign" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_sign, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_getcap", so it can be a program name with args. set dummy tpm2_getcap; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_getcap+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_getcap"; then ac_cv_prog_tpm2_getcap="$tpm2_getcap" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_getcap="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_getcap" && ac_cv_prog_tpm2_getcap="no" fi fi tpm2_getcap=$ac_cv_prog_tpm2_getcap if test -n "$tpm2_getcap"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_getcap" >&5 $as_echo "$tpm2_getcap" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_getcap" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_getcap, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_import", so it can be a program name with args. set dummy tpm2_import; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_import+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_import"; then ac_cv_prog_tpm2_import="$tpm2_import" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_import="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_import" && ac_cv_prog_tpm2_import="no" fi fi tpm2_import=$ac_cv_prog_tpm2_import if test -n "$tpm2_import"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_import" >&5 $as_echo "$tpm2_import" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_import" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_import, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_changeauth", so it can be a program name with args. set dummy tpm2_changeauth; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_changeauth+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_changeauth"; then ac_cv_prog_tpm2_changeauth="$tpm2_changeauth" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_changeauth="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_changeauth" && ac_cv_prog_tpm2_changeauth="no" fi fi tpm2_changeauth=$ac_cv_prog_tpm2_changeauth if test -n "$tpm2_changeauth"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_changeauth" >&5 $as_echo "$tpm2_changeauth" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_changeauth" != "xyes"; then : as_fn_error $? "tpm2_ptool requires tpm2_changeauth, but executable not found." "$LINENO" 5 fi # end function integration_test_checks if test "x$enable_integration" = "xyes"; then : pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OPENSC_PKCS11" >&5 $as_echo_n "checking for OPENSC_PKCS11... " >&6; } if test -n "$OPENSC_PKCS11_CFLAGS"; then pkg_cv_OPENSC_PKCS11_CFLAGS="$OPENSC_PKCS11_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"opensc-pkcs11\""; } >&5 ($PKG_CONFIG --exists --print-errors "opensc-pkcs11") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_OPENSC_PKCS11_CFLAGS=`$PKG_CONFIG --cflags "opensc-pkcs11" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$OPENSC_PKCS11_LIBS"; then pkg_cv_OPENSC_PKCS11_LIBS="$OPENSC_PKCS11_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"opensc-pkcs11\""; } >&5 ($PKG_CONFIG --exists --print-errors "opensc-pkcs11") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_OPENSC_PKCS11_LIBS=`$PKG_CONFIG --libs "opensc-pkcs11" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then OPENSC_PKCS11_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "opensc-pkcs11" 2>&1` else OPENSC_PKCS11_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "opensc-pkcs11" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$OPENSC_PKCS11_PKG_ERRORS" >&5 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for /usr/lib/engines/engine_pkcs11.so" >&5 $as_echo_n "checking for /usr/lib/engines/engine_pkcs11.so... " >&6; } if ${ac_cv_file__usr_lib_engines_engine_pkcs11_so+:} false; then : $as_echo_n "(cached) " >&6 else test "$cross_compiling" = yes && as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5 if test -r "/usr/lib/engines/engine_pkcs11.so"; then ac_cv_file__usr_lib_engines_engine_pkcs11_so=yes else ac_cv_file__usr_lib_engines_engine_pkcs11_so=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_lib_engines_engine_pkcs11_so" >&5 $as_echo "$ac_cv_file__usr_lib_engines_engine_pkcs11_so" >&6; } if test "x$ac_cv_file__usr_lib_engines_engine_pkcs11_so" = xyes; then : fi elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { $as_echo "$as_me:${as_lineno-$LINENO}: checking for /usr/lib/engines/engine_pkcs11.so" >&5 $as_echo_n "checking for /usr/lib/engines/engine_pkcs11.so... " >&6; } if ${ac_cv_file__usr_lib_engines_engine_pkcs11_so+:} false; then : $as_echo_n "(cached) " >&6 else test "$cross_compiling" = yes && as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5 if test -r "/usr/lib/engines/engine_pkcs11.so"; then ac_cv_file__usr_lib_engines_engine_pkcs11_so=yes else ac_cv_file__usr_lib_engines_engine_pkcs11_so=no fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_lib_engines_engine_pkcs11_so" >&5 $as_echo "$ac_cv_file__usr_lib_engines_engine_pkcs11_so" >&6; } if test "x$ac_cv_file__usr_lib_engines_engine_pkcs11_so" = xyes; then : fi else OPENSC_PKCS11_CFLAGS=$pkg_cv_OPENSC_PKCS11_CFLAGS OPENSC_PKCS11_LIBS=$pkg_cv_OPENSC_PKCS11_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for TSS2_TCTI_TABRMD" >&5 $as_echo_n "checking for TSS2_TCTI_TABRMD... " >&6; } if test -n "$TSS2_TCTI_TABRMD_CFLAGS"; then pkg_cv_TSS2_TCTI_TABRMD_CFLAGS="$TSS2_TCTI_TABRMD_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tcti-tabrmd\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tcti-tabrmd") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTI_TABRMD_CFLAGS=`$PKG_CONFIG --cflags "tss2-tcti-tabrmd" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_TCTI_TABRMD_LIBS"; then pkg_cv_TSS2_TCTI_TABRMD_LIBS="$TSS2_TCTI_TABRMD_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tcti-tabrmd\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tcti-tabrmd") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTI_TABRMD_LIBS=`$PKG_CONFIG --libs "tss2-tcti-tabrmd" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_TCTI_TABRMD_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-tcti-tabrmd" 2>&1` else TSS2_TCTI_TABRMD_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-tcti-tabrmd" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_TCTI_TABRMD_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-tcti-tabrmd) were not met: $TSS2_TCTI_TABRMD_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_TCTI_TABRMD_CFLAGS and TSS2_TCTI_TABRMD_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_TCTI_TABRMD_CFLAGS and TSS2_TCTI_TABRMD_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_TCTI_TABRMD_CFLAGS=$pkg_cv_TSS2_TCTI_TABRMD_CFLAGS TSS2_TCTI_TABRMD_LIBS=$pkg_cv_TSS2_TCTI_TABRMD_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } fi # Extract the first word of "swtpm", so it can be a program name with args. set dummy swtpm; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_swtpm+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$swtpm"; then ac_cv_prog_swtpm="$swtpm" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_swtpm="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_swtpm" && ac_cv_prog_swtpm="no" fi fi swtpm=$ac_cv_prog_swtpm if test -n "$swtpm"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $swtpm" >&5 $as_echo "$swtpm" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi # Extract the first word of "tpm_server", so it can be a program name with args. set dummy tpm_server; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm_server+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm_server"; then ac_cv_prog_tpm_server="$tpm_server" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm_server="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm_server" && ac_cv_prog_tpm_server="no" fi fi tpm_server=$ac_cv_prog_tpm_server if test -n "$tpm_server"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm_server" >&5 $as_echo "$tpm_server" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "$swtpm" = yes; then : TABRMD_TCTI=swtpm else if test "$tpm_server" = yes; then : TABRMD_TCTI=mssim else as_fn_error $? "Integration tests enabled but swtpm (or tpm_server) executable not found." "$LINENO" 5 fi fi # Extract the first word of "ss", so it can be a program name with args. set dummy ss; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_ss+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$ss"; then ac_cv_prog_ss="$ss" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_ss="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_ss" && ac_cv_prog_ss="no" fi fi ss=$ac_cv_prog_ss if test -n "$ss"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ss" >&5 $as_echo "$ss" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$ss" != "xyes"; then : as_fn_error $? "Integration tests enabled but ss executable not found." "$LINENO" 5 fi # Extract the first word of "certutil", so it can be a program name with args. set dummy certutil; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_certutil+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$certutil"; then ac_cv_prog_certutil="$certutil" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_certutil="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_certutil" && ac_cv_prog_certutil="no" fi fi certutil=$ac_cv_prog_certutil if test -n "$certutil"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $certutil" >&5 $as_echo "$certutil" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$certutil" != "xyes"; then : as_fn_error $? "Integration tests enabled but certutil executable not found." "$LINENO" 5 fi # Extract the first word of "modutil", so it can be a program name with args. set dummy modutil; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_modutil+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$modutil"; then ac_cv_prog_modutil="$modutil" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_modutil="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_modutil" && ac_cv_prog_modutil="no" fi fi modutil=$ac_cv_prog_modutil if test -n "$modutil"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $modutil" >&5 $as_echo "$modutil" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$modutil" != "xyes"; then : as_fn_error $? "Integration tests enabled but modutil executable not found." "$LINENO" 5 fi # Extract the first word of "expect", so it can be a program name with args. set dummy expect; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_expect+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$expect"; then ac_cv_prog_expect="$expect" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_expect="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_expect" && ac_cv_prog_expect="no" fi fi expect=$ac_cv_prog_expect if test -n "$expect"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $expect" >&5 $as_echo "$expect" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$expect" != "xyes"; then : as_fn_error $? "Integration tests enabled but expect executable not found." "$LINENO" 5 fi # Extract the first word of "pkcs11-tool", so it can be a program name with args. set dummy pkcs11-tool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_pkcs11_tool+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$pkcs11_tool"; then ac_cv_prog_pkcs11_tool="$pkcs11_tool" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_pkcs11_tool="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_pkcs11_tool" && ac_cv_prog_pkcs11_tool="no" fi fi pkcs11_tool=$ac_cv_prog_pkcs11_tool if test -n "$pkcs11_tool"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $pkcs11_tool" >&5 $as_echo "$pkcs11_tool" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$pkcs11_tool" != "xyes"; then : as_fn_error $? "Integration tests enabled but pkcs11-tool executable not found." "$LINENO" 5 fi # Extract the first word of "p11tool", so it can be a program name with args. set dummy p11tool; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_p11tool+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$p11tool"; then ac_cv_prog_p11tool="$p11tool" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_p11tool="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_p11tool" && ac_cv_prog_p11tool="no" fi fi p11tool=$ac_cv_prog_p11tool if test -n "$p11tool"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $p11tool" >&5 $as_echo "$p11tool" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$p11tool" != "xyes"; then : as_fn_error $? "Integration tests enabled but p11tool executable not found." "$LINENO" 5 fi # Extract the first word of "bash", so it can be a program name with args. set dummy bash; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_bash+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$bash"; then ac_cv_prog_bash="$bash" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_bash="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_bash" && ac_cv_prog_bash="no" fi fi bash=$ac_cv_prog_bash if test -n "$bash"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $bash" >&5 $as_echo "$bash" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$bash" != "xyes"; then : as_fn_error $? "Integration tests enabled but bash executable not found." "$LINENO" 5 fi # Extract the first word of "sqlite3", so it can be a program name with args. set dummy sqlite3; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_sqlite3+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$sqlite3"; then ac_cv_prog_sqlite3="$sqlite3" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_sqlite3="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_sqlite3" && ac_cv_prog_sqlite3="no" fi fi sqlite3=$ac_cv_prog_sqlite3 if test -n "$sqlite3"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $sqlite3" >&5 $as_echo "$sqlite3" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$sqlite3" != "xyes"; then : as_fn_error $? "Integration tests enabled but sqlite3 executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2-abrmd", so it can be a program name with args. set dummy tpm2-abrmd; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2_abrmd+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2_abrmd"; then ac_cv_prog_tpm2_abrmd="$tpm2_abrmd" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_abrmd="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_abrmd" && ac_cv_prog_tpm2_abrmd="no" fi fi tpm2_abrmd=$ac_cv_prog_tpm2_abrmd if test -n "$tpm2_abrmd"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2_abrmd" >&5 $as_echo "$tpm2_abrmd" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2_abrmd" != "xyes"; then : as_fn_error $? "Integration tests enabled but tpm2-abrmd executable not found." "$LINENO" 5 fi if test -n "$PYTHON"; then # If the user set $PYTHON, use it and don't search something else. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $PYTHON version is >= 3.7" >&5 $as_echo_n "checking whether $PYTHON version is >= 3.7... " >&6; } prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '3.7'.split('.'))) + [0, 0, 0] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[i] sys.exit(sys.hexversion < minverhex)" if { echo "$as_me:$LINENO: $PYTHON -c "$prog"" >&5 ($PYTHON -c "$prog") >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); }; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } as_fn_error $? "Python interpreter is too old" "$LINENO" 5 fi am_display_PYTHON=$PYTHON else # Otherwise, try each interpreter until we find one that satisfies # VERSION. { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a Python interpreter with version >= 3.7" >&5 $as_echo_n "checking for a Python interpreter with version >= 3.7... " >&6; } if ${am_cv_pathless_PYTHON+:} false; then : $as_echo_n "(cached) " >&6 else for am_cv_pathless_PYTHON in python python2 python3 python3.9 python3.8 python3.7 python3.6 python3.5 python3.4 python3.3 python3.2 python3.1 python3.0 python2.7 python2.6 python2.5 python2.4 python2.3 python2.2 python2.1 python2.0 none; do test "$am_cv_pathless_PYTHON" = none && break prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '3.7'.split('.'))) + [0, 0, 0] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[i] sys.exit(sys.hexversion < minverhex)" if { echo "$as_me:$LINENO: $am_cv_pathless_PYTHON -c "$prog"" >&5 ($am_cv_pathless_PYTHON -c "$prog") >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); }; then : break fi done fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_pathless_PYTHON" >&5 $as_echo "$am_cv_pathless_PYTHON" >&6; } # Set $PYTHON to the absolute path of $am_cv_pathless_PYTHON. if test "$am_cv_pathless_PYTHON" = none; then PYTHON=: else # Extract the first word of "$am_cv_pathless_PYTHON", so it can be a program name with args. set dummy $am_cv_pathless_PYTHON; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_path_PYTHON+:} false; then : $as_echo_n "(cached) " >&6 else case $PYTHON in [\\/]* | ?:[\\/]*) ac_cv_path_PYTHON="$PYTHON" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_path_PYTHON="$as_dir/$ac_word$ac_exec_ext" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi PYTHON=$ac_cv_path_PYTHON if test -n "$PYTHON"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PYTHON" >&5 $as_echo "$PYTHON" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi fi am_display_PYTHON=$am_cv_pathless_PYTHON fi if test "$PYTHON" = :; then as_fn_error $? "Integration tests enabled but python >= 3.7 executable not found." "$LINENO" 5 else { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON version" >&5 $as_echo_n "checking for $am_display_PYTHON version... " >&6; } if ${am_cv_python_version+:} false; then : $as_echo_n "(cached) " >&6 else am_cv_python_version=`$PYTHON -c "import sys; sys.stdout.write(sys.version[:3])"` fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_version" >&5 $as_echo "$am_cv_python_version" >&6; } PYTHON_VERSION=$am_cv_python_version PYTHON_PREFIX='${prefix}' PYTHON_EXEC_PREFIX='${exec_prefix}' { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON platform" >&5 $as_echo_n "checking for $am_display_PYTHON platform... " >&6; } if ${am_cv_python_platform+:} false; then : $as_echo_n "(cached) " >&6 else am_cv_python_platform=`$PYTHON -c "import sys; sys.stdout.write(sys.platform)"` fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_platform" >&5 $as_echo "$am_cv_python_platform" >&6; } PYTHON_PLATFORM=$am_cv_python_platform # Just factor out some code duplication. am_python_setup_sysconfig="\ import sys # Prefer sysconfig over distutils.sysconfig, for better compatibility # with python 3.x. See automake bug#10227. try: import sysconfig except ImportError: can_use_sysconfig = 0 else: can_use_sysconfig = 1 # Can't use sysconfig in CPython 2.7, since it's broken in virtualenvs: # try: from platform import python_implementation if python_implementation() == 'CPython' and sys.version[:3] == '2.7': can_use_sysconfig = 0 except ImportError: pass" { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON script directory" >&5 $as_echo_n "checking for $am_display_PYTHON script directory... " >&6; } if ${am_cv_python_pythondir+:} false; then : $as_echo_n "(cached) " >&6 else if test "x$prefix" = xNONE then am_py_prefix=$ac_default_prefix else am_py_prefix=$prefix fi am_cv_python_pythondir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('purelib', vars={'base':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(0, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` case $am_cv_python_pythondir in $am_py_prefix*) am__strip_prefix=`echo "$am_py_prefix" | sed 's|.|.|g'` am_cv_python_pythondir=`echo "$am_cv_python_pythondir" | sed "s,^$am__strip_prefix,$PYTHON_PREFIX,"` ;; *) case $am_py_prefix in /usr|/System*) ;; *) am_cv_python_pythondir=$PYTHON_PREFIX/lib/python$PYTHON_VERSION/site-packages ;; esac ;; esac fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_pythondir" >&5 $as_echo "$am_cv_python_pythondir" >&6; } pythondir=$am_cv_python_pythondir pkgpythondir=\${pythondir}/$PACKAGE { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON extension module directory" >&5 $as_echo_n "checking for $am_display_PYTHON extension module directory... " >&6; } if ${am_cv_python_pyexecdir+:} false; then : $as_echo_n "(cached) " >&6 else if test "x$exec_prefix" = xNONE then am_py_exec_prefix=$am_py_prefix else am_py_exec_prefix=$exec_prefix fi am_cv_python_pyexecdir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('platlib', vars={'platbase':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(1, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` case $am_cv_python_pyexecdir in $am_py_exec_prefix*) am__strip_prefix=`echo "$am_py_exec_prefix" | sed 's|.|.|g'` am_cv_python_pyexecdir=`echo "$am_cv_python_pyexecdir" | sed "s,^$am__strip_prefix,$PYTHON_EXEC_PREFIX,"` ;; *) case $am_py_exec_prefix in /usr|/System*) ;; *) am_cv_python_pyexecdir=$PYTHON_EXEC_PREFIX/lib/python$PYTHON_VERSION/site-packages ;; esac ;; esac fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_pyexecdir" >&5 $as_echo "$am_cv_python_pyexecdir" >&6; } pyexecdir=$am_cv_python_pyexecdir pkgpyexecdir=\${pyexecdir}/$PACKAGE PYTHON_INTERPRETER=$PYTHON fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking for module pkcs11 in python" >&5 $as_echo_n "checking for module pkcs11 in python... " >&6; } echo "import pkcs11" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { $as_echo "$as_me:${as_lineno-$LINENO}: result: found" >&5 $as_echo "found" >&6; } fi if test "$have_fapi" = "1"; then : # Extract the first word of "tss2_provision", so it can be a program name with args. set dummy tss2_provision; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tss2_provision+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tss2_provision"; then ac_cv_prog_tss2_provision="$tss2_provision" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tss2_provision="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tss2_provision" && ac_cv_prog_tss2_provision="no" fi fi tss2_provision=$ac_cv_prog_tss2_provision if test -n "$tss2_provision"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tss2_provision" >&5 $as_echo "$tss2_provision" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tss2_provision" != "xyes"; then : as_fn_error $? "Integration tests enabled but tss2_provision executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2tss-genkey", so it can be a program name with args. set dummy tpm2tss-genkey; ac_word=$2 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 $as_echo_n "checking for $ac_word... " >&6; } if ${ac_cv_prog_tpm2tss_genkey+:} false; then : $as_echo_n "(cached) " >&6 else if test -n "$tpm2tss_genkey"; then ac_cv_prog_tpm2tss_genkey="$tpm2tss_genkey" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2tss_genkey="yes" $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2tss_genkey" && ac_cv_prog_tpm2tss_genkey="no" fi fi tpm2tss_genkey=$ac_cv_prog_tpm2tss_genkey if test -n "$tpm2tss_genkey"; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: $tpm2tss_genkey" >&5 $as_echo "$tpm2tss_genkey" >&6; } else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi if test "x$tpm2tss_genkey" != "xyes"; then : as_fn_error $? "Integration tests enabled but tpm2tss-genkey executable not found." "$LINENO" 5 fi fi if test "x$have_javac" = "xno"; then : as_fn_error $? "Integration tests enabled but no Java compiler was found" "$LINENO" 5 fi ac_var_name=`echo org.junit.Assert | sed 's/\./_/g'` { $as_echo "$as_me:${as_lineno-$LINENO}: checking for org.junit.Assert class" >&5 $as_echo_n "checking for org.junit.Assert class... " >&6; } if eval \${ax_cv_class_$ac_var_name+:} false; then : $as_echo_n "(cached) " >&6 else cat << \EOF > Test.java /* #line 16875 "configure" */ import org.junit.Assert; public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS Test.java' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s Test.class then eval "ac_cv_class_$ac_var_name=yes" else echo "configure: failed program was:" >&5 cat Test.java >&5 rm -f Test.java Test.class eval "ac_cv_class_$ac_var_name=no" fi rm -f Test.java Test.class eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then : else as_fn_error $? "Integration tests enabled but JUnit not found, try setting CLASSPATH" "$LINENO" 5 fi fi eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_var_val" >&5 $as_echo "$ac_var_val" >&6; } ac_var_name=`echo org.hamcrest.SelfDescribing | sed 's/\./_/g'` { $as_echo "$as_me:${as_lineno-$LINENO}: checking for org.hamcrest.SelfDescribing class" >&5 $as_echo_n "checking for org.hamcrest.SelfDescribing class... " >&6; } if eval \${ax_cv_class_$ac_var_name+:} false; then : $as_echo_n "(cached) " >&6 else cat << \EOF > Test.java /* #line 16922 "configure" */ import org.hamcrest.SelfDescribing; public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS Test.java' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s Test.class then eval "ac_cv_class_$ac_var_name=yes" else echo "configure: failed program was:" >&5 cat Test.java >&5 rm -f Test.java Test.class eval "ac_cv_class_$ac_var_name=no" fi rm -f Test.java Test.class eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then : else as_fn_error $? "Integration tests enabled but Hamcrest not found, try setting CLASSPATH" "$LINENO" 5 fi fi eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_var_val" >&5 $as_echo "$ac_var_val" >&6; } ENABLE_INTEGRATION=$enable_integration fi if test "x$enable_integration" = "xyes"; then ENABLE_INTEGRATION_TRUE= ENABLE_INTEGRATION_FALSE='#' else ENABLE_INTEGRATION_TRUE='#' ENABLE_INTEGRATION_FALSE= fi # END ENABLE INTEGRATION # START WITH STOREDIR # # Enable --with-storedir for changing the default store directory search path # # Check whether --with-storedir was given. if test "${with_storedir+set}" = set; then : withval=$with_storedir; case ":$with_storedir:" in # change empty paths to '.' ::) with_storedir='.' ;; # strip trailing slashes :*[\\/]:) with_storedir=`echo "$with_storedir" | sed 's,[\\/]*$,,'` ;; :*:) ;; esac # squeeze repeated slashes case "$with_storedir" in # if the path contains any backslashes, turn slashes into backslashes *\\*) with_storedir=`echo "$with_storedir" | sed 's,\(.\)[\\/][\\/]*,\1\\\\,g'` ;; # if the path contains slashes, also turn backslashes into slashes *) with_storedir=`echo "$with_storedir" | sed 's,\(.\)[\\/][\\/]*,\1/,g'` ;; esac cat >>confdefs.h <<_ACEOF #define TPM2_PKCS11_STORE_DIR "$with_storedir" _ACEOF fi # END WITH STOREDIR # START ENABLE PACK # # Enable --enable-pack for forcing structure packing # # Check whether --enable-pack was given. if test "${enable_pack+set}" = set; then : enableval=$enable_pack; else enable_pack=no fi if test "x$enable_pack" = "xyes"; then : $as_echo "#define PKCS11_PACK 1" >>confdefs.h fi # END ENABLE PACK # START P11 CONFIG # If P11 kit is installed we want to detect it and install # the module config file and change the library install location. # Check whether --with-p11kitconfigdir was given. if test "${with_p11kitconfigdir+set}" = set; then : withval=$with_p11kitconfigdir; fi p11kitconfigdir=$with_p11kitconfigdir # Check whether --with-p11kitmoduledir was given. if test "${with_p11kitmoduledir+set}" = set; then : withval=$with_p11kitmoduledir; fi p11kitmoduledir=$with_p11kitmoduledir # set havep11kit based on if P11kit is installed, then: # 1. execute function do_p11kit_config # 2. set the makefile flag HAVE_P11_KIT pkg_failed=no { $as_echo "$as_me:${as_lineno-$LINENO}: checking for P11KIT" >&5 $as_echo_n "checking for P11KIT... " >&6; } if test -n "$P11KIT_CFLAGS"; then pkg_cv_P11KIT_CFLAGS="$P11KIT_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11KIT_CFLAGS=`$PKG_CONFIG --cflags "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$P11KIT_LIBS"; then pkg_cv_P11KIT_LIBS="$P11KIT_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11KIT_LIBS=`$PKG_CONFIG --libs "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then P11KIT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "p11-kit-1" 2>&1` else P11KIT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "p11-kit-1" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$P11KIT_PKG_ERRORS" >&5 have_p11kit=no elif test $pkg_failed = untried; then { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } have_p11kit=no else P11KIT_CFLAGS=$pkg_cv_P11KIT_CFLAGS P11KIT_LIBS=$pkg_cv_P11KIT_LIBS { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } have_p11kit=yes fi if test "x$have_p11kit" = "xyes"; then : if test -z "$p11kitmoduledir"; then : if test -n "$P11_MODULE_PATH"; then pkg_cv_P11_MODULE_PATH="$P11_MODULE_PATH" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11_MODULE_PATH=`$PKG_CONFIG --variable="p11_module_path" "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi P11_MODULE_PATH=$pkg_cv_P11_MODULE_PATH if test "x$P11_MODULE_PATH" = x""; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking p11 module path" >&5 $as_echo_n "checking p11 module path... " >&6; } if test "x$P11_MODULE_PATH" = "x"; then : { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Unable to identify p11 module path. See \`config.log' for more details" "$LINENO" 5; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $P11_MODULE_PATH" >&5 $as_echo "$P11_MODULE_PATH" >&6; } else P11_MODULE_PATH=$p11kitmoduledir fi if test -z "$p11kitconfigdir"; then : if test -n "$P11_CONFIGS_PATH"; then pkg_cv_P11_CONFIGS_PATH="$P11_CONFIGS_PATH" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11_CONFIGS_PATH=`$PKG_CONFIG --variable="p11_module_configs" "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi P11_CONFIGS_PATH=$pkg_cv_P11_CONFIGS_PATH if test "x$P11_CONFIGS_PATH" = x""; then : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking p11 configs path" >&5 $as_echo_n "checking p11 configs path... " >&6; } if test "x$P11_CONFIGS_PATH" = "x"; then : { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Unable to identify p11 configs path. See \`config.log' for more details" "$LINENO" 5; } fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $P11_CONFIGS_PATH" >&5 $as_echo "$P11_CONFIGS_PATH" >&6; } else P11_CONFIGS_PATH=$p11kitconfigdir fi fi if test "x$have_p11kit" = "xyes"; then HAVE_P11KIT_TRUE= HAVE_P11KIT_FALSE='#' else HAVE_P11KIT_TRUE='#' HAVE_P11KIT_FALSE= fi # END P11 CONFIG { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether byte ordering is bigendian" >&5 $as_echo_n "checking whether byte ordering is bigendian... " >&6; } if ${ac_cv_c_bigendian+:} false; then : $as_echo_n "(cached) " >&6 else ac_cv_c_bigendian=unknown # See if we're dealing with a universal compiler. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifndef __APPLE_CC__ not a universal capable compiler #endif typedef int dummy; _ACEOF if ac_fn_c_try_compile "$LINENO"; then : # Check for potential -arch flags. It is not universal unless # there are at least two -arch flags with different values. ac_arch= ac_prev= for ac_word in $CC $CFLAGS $CPPFLAGS $LDFLAGS; do if test -n "$ac_prev"; then case $ac_word in i?86 | x86_64 | ppc | ppc64) if test -z "$ac_arch" || test "$ac_arch" = "$ac_word"; then ac_arch=$ac_word else ac_cv_c_bigendian=universal break fi ;; esac ac_prev= elif test "x$ac_word" = "x-arch"; then ac_prev=arch fi done fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext if test $ac_cv_c_bigendian = unknown; then # See if sys/param.h defines the BYTE_ORDER macro. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include int main () { #if ! (defined BYTE_ORDER && defined BIG_ENDIAN \ && defined LITTLE_ENDIAN && BYTE_ORDER && BIG_ENDIAN \ && LITTLE_ENDIAN) bogus endian macros #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : # It does; now see whether it defined to BIG_ENDIAN or not. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include int main () { #if BYTE_ORDER != BIG_ENDIAN not big endian #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_c_bigendian=yes else ac_cv_c_bigendian=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi if test $ac_cv_c_bigendian = unknown; then # See if defines _LITTLE_ENDIAN or _BIG_ENDIAN (e.g., Solaris). cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #if ! (defined _LITTLE_ENDIAN || defined _BIG_ENDIAN) bogus endian macros #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : # It does; now see whether it defined to _BIG_ENDIAN or not. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main () { #ifndef _BIG_ENDIAN not big endian #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ac_cv_c_bigendian=yes else ac_cv_c_bigendian=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext fi if test $ac_cv_c_bigendian = unknown; then # Compile a test program. if test "$cross_compiling" = yes; then : # Try to guess by grepping values from an object file. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ short int ascii_mm[] = { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 }; short int ascii_ii[] = { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 }; int use_ascii (int i) { return ascii_mm[i] + ascii_ii[i]; } short int ebcdic_ii[] = { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 }; short int ebcdic_mm[] = { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 }; int use_ebcdic (int i) { return ebcdic_mm[i] + ebcdic_ii[i]; } extern int foo; int main () { return use_ascii (foo) == use_ebcdic (foo); ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : if grep BIGenDianSyS conftest.$ac_objext >/dev/null; then ac_cv_c_bigendian=yes fi if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then if test "$ac_cv_c_bigendian" = unknown; then ac_cv_c_bigendian=no else # finding both strings is unlikely to happen, but who knows? ac_cv_c_bigendian=unknown fi fi fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext else cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $ac_includes_default int main () { /* Are we little or big endian? From Harbison&Steele. */ union { long int l; char c[sizeof (long int)]; } u; u.l = 1; return u.c[sizeof (long int) - 1] == 1; ; return 0; } _ACEOF if ac_fn_c_try_run "$LINENO"; then : ac_cv_c_bigendian=no else ac_cv_c_bigendian=yes fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_bigendian" >&5 $as_echo "$ac_cv_c_bigendian" >&6; } case $ac_cv_c_bigendian in #( yes) $as_echo "#define WORDS_BIGENDIAN 1" >>confdefs.h ;; #( no) ;; #( universal) $as_echo "#define AC_APPLE_UNIVERSAL_BUILD 1" >>confdefs.h ;; #( *) as_fn_error $? "unknown endianness presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;; esac # Good information on adding flags, and dealing with compilers can be found here: # https://github.com/zcash/zcash/issues/1832 # https://github.com/kmcallister/autoharden/ if test x"$enable_hardening" != xno; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wall" >&5 $as_echo_n "checking whether C compiler accepts -Wall... " >&6; } if ${ax_cv_check_cflags___Wall+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wall" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wall=yes else ax_cv_check_cflags___Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wall" >&5 $as_echo "$ax_cv_check_cflags___Wall" >&6; } if test "x$ax_cv_check_cflags___Wall" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wall" else as_fn_error $? "Cannot enable -Wall, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wextra" >&5 $as_echo_n "checking whether C compiler accepts -Wextra... " >&6; } if ${ax_cv_check_cflags___Wextra+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wextra" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wextra=yes else ax_cv_check_cflags___Wextra=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wextra" >&5 $as_echo "$ax_cv_check_cflags___Wextra" >&6; } if test "x$ax_cv_check_cflags___Wextra" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wextra" else as_fn_error $? "Cannot enable -Wextra, consider configuring with --disable-hardening" "$LINENO" 5 fi if test "x$ax_is_release" = "xno"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Werror" >&5 $as_echo_n "checking whether C compiler accepts -Werror... " >&6; } if ${ax_cv_check_cflags___Werror+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Werror" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Werror=yes else ax_cv_check_cflags___Werror=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Werror" >&5 $as_echo "$ax_cv_check_cflags___Werror" >&6; } if test "x$ax_cv_check_cflags___Werror" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Werror" else as_fn_error $? "Cannot enable -Werror, consider configuring with --disable-hardening" "$LINENO" 5 fi fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wformat" >&5 $as_echo_n "checking whether C compiler accepts -Wformat... " >&6; } if ${ax_cv_check_cflags___Wformat+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wformat" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wformat=yes else ax_cv_check_cflags___Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wformat" >&5 $as_echo "$ax_cv_check_cflags___Wformat" >&6; } if test "x$ax_cv_check_cflags___Wformat" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wformat" else as_fn_error $? "Cannot enable -Wformat, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wformat-security" >&5 $as_echo_n "checking whether C compiler accepts -Wformat-security... " >&6; } if ${ax_cv_check_cflags___Wformat_security+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wformat-security" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wformat_security=yes else ax_cv_check_cflags___Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wformat_security" >&5 $as_echo "$ax_cv_check_cflags___Wformat_security" >&6; } if test "x$ax_cv_check_cflags___Wformat_security" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wformat-security" else as_fn_error $? "Cannot enable -Wformat-security, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wstack-protector" >&5 $as_echo_n "checking whether C compiler accepts -Wstack-protector... " >&6; } if ${ax_cv_check_cflags___Wstack_protector+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wstack-protector" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wstack_protector=yes else ax_cv_check_cflags___Wstack_protector=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wstack_protector" >&5 $as_echo "$ax_cv_check_cflags___Wstack_protector" >&6; } if test "x$ax_cv_check_cflags___Wstack_protector" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wstack-protector" else as_fn_error $? "Cannot enable -Wstack-protector, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fstack-protector-all" >&5 $as_echo_n "checking whether C compiler accepts -fstack-protector-all... " >&6; } if ${ax_cv_check_cflags___fstack_protector_all+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fstack-protector-all" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fstack_protector_all=yes else ax_cv_check_cflags___fstack_protector_all=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fstack_protector_all" >&5 $as_echo "$ax_cv_check_cflags___fstack_protector_all" >&6; } if test "x$ax_cv_check_cflags___fstack_protector_all" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fstack-protector-all" else as_fn_error $? "Cannot enable -fstack-protector-all, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wstrict-overflow=5" >&5 $as_echo_n "checking whether C compiler accepts -Wstrict-overflow=5... " >&6; } if ${ax_cv_check_cflags___Wstrict_overflow_5+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wstrict-overflow=5" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___Wstrict_overflow_5=yes else ax_cv_check_cflags___Wstrict_overflow_5=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wstrict_overflow_5" >&5 $as_echo "$ax_cv_check_cflags___Wstrict_overflow_5" >&6; } if test "x$ax_cv_check_cflags___Wstrict_overflow_5" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wstrict-overflow=5" else as_fn_error $? "Cannot enable -Wstrict-overflow=5, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O2" >&5 $as_echo_n "checking whether C compiler accepts -O2... " >&6; } if ${ax_cv_check_cflags___O2+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O2" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___O2=yes else ax_cv_check_cflags___O2=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O2" >&5 $as_echo "$ax_cv_check_cflags___O2" >&6; } if test "x$ax_cv_check_cflags___O2" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O2" else as_fn_error $? "Cannot enable -O2, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS" >&5 $as_echo_n "checking whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main() { #ifndef _FORTIFY_SOURCE return 0; #else this_is_an_error; #endif } _ACEOF if ac_fn_c_try_link "$LINENO"; then : { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 $as_echo "yes" >&6; } CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=2" else { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 $as_echo "no" >&6; } fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fPIC" >&5 $as_echo_n "checking whether C compiler accepts -fPIC... " >&6; } if ${ax_cv_check_cflags___fPIC+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fPIC" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fPIC=yes else ax_cv_check_cflags___fPIC=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fPIC" >&5 $as_echo "$ax_cv_check_cflags___fPIC" >&6; } if test "x$ax_cv_check_cflags___fPIC" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fPIC" else as_fn_error $? "Cannot enable -fPIC, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -shared" >&5 $as_echo_n "checking whether the linker accepts -shared... " >&6; } if ${ax_cv_check_ldflags___shared+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -shared" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_check_ldflags___shared=yes else ax_cv_check_ldflags___shared=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___shared" >&5 $as_echo "$ax_cv_check_ldflags___shared" >&6; } if test "x$ax_cv_check_ldflags___shared" = xyes; then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -shared" else as_fn_error $? "Cannot enable -shared, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fPIE" >&5 $as_echo_n "checking whether C compiler accepts -fPIE... " >&6; } if ${ax_cv_check_cflags___fPIE+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fPIE" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fPIE=yes else ax_cv_check_cflags___fPIE=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fPIE" >&5 $as_echo "$ax_cv_check_cflags___fPIE" >&6; } if test "x$ax_cv_check_cflags___fPIE" = xyes; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fPIE" else as_fn_error $? "Cannot enable -fPIE, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -pie" >&5 $as_echo_n "checking whether the linker accepts -pie... " >&6; } if ${ax_cv_check_ldflags___pie+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -pie" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_check_ldflags___pie=yes else ax_cv_check_ldflags___pie=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___pie" >&5 $as_echo "$ax_cv_check_ldflags___pie" >&6; } if test "x$ax_cv_check_ldflags___pie" = xyes; then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -pie" else as_fn_error $? "Cannot enable -pie, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,-z,relro" >&5 $as_echo_n "checking whether the linker accepts -Wl,-z,relro... " >&6; } if ${ax_cv_check_ldflags___Wl__z_relro+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,-z,relro" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_check_ldflags___Wl__z_relro=yes else ax_cv_check_ldflags___Wl__z_relro=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl__z_relro" >&5 $as_echo "$ax_cv_check_ldflags___Wl__z_relro" >&6; } if test "x$ax_cv_check_ldflags___Wl__z_relro" = xyes; then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,-z,relro" else as_fn_error $? "Cannot enable -Wl,-z,relro, consider configuring with --disable-hardening" "$LINENO" 5 fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,-z,now" >&5 $as_echo_n "checking whether the linker accepts -Wl,-z,now... " >&6; } if ${ax_cv_check_ldflags___Wl__z_now+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,-z,now" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_check_ldflags___Wl__z_now=yes else ax_cv_check_ldflags___Wl__z_now=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl__z_now" >&5 $as_echo "$ax_cv_check_ldflags___Wl__z_now" >&6; } if test "x$ax_cv_check_ldflags___Wl__z_now" = xyes; then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,-z,now" else as_fn_error $? "Cannot enable -Wl,-z,now, consider configuring with --disable-hardening" "$LINENO" 5 fi else { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!" >&5 $as_echo "$as_me: WARNING: Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!" >&2;} fi # Best attempt, strip unused stuff from the binary to reduce size. # Rather than nesting these and making them ugly just use a counter. { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fdata-sections" >&5 $as_echo_n "checking whether C compiler accepts -fdata-sections... " >&6; } if ${ax_cv_check_cflags___fdata_sections+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fdata-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___fdata_sections=yes else ax_cv_check_cflags___fdata_sections=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fdata_sections" >&5 $as_echo "$ax_cv_check_cflags___fdata_sections" >&6; } if test "x$ax_cv_check_cflags___fdata_sections" = xyes; then : strip=y else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -ffunction-sections" >&5 $as_echo_n "checking whether C compiler accepts -ffunction-sections... " >&6; } if ${ax_cv_check_cflags___ffunction_sections+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -ffunction-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO"; then : ax_cv_check_cflags___ffunction_sections=yes else ax_cv_check_cflags___ffunction_sections=no fi rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___ffunction_sections" >&5 $as_echo "$ax_cv_check_cflags___ffunction_sections" >&6; } if test "x$ax_cv_check_cflags___ffunction_sections" = xyes; then : strip="y$strip" else : fi { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,--gc-sections" >&5 $as_echo_n "checking whether the linker accepts -Wl,--gc-sections... " >&6; } if ${ax_cv_check_ldflags___Wl___gc_sections+:} false; then : $as_echo_n "(cached) " >&6 else ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--gc-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main () { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO"; then : ax_cv_check_ldflags___Wl___gc_sections=yes else ax_cv_check_ldflags___Wl___gc_sections=no fi rm -f core conftest.err conftest.$ac_objext \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl___gc_sections" >&5 $as_echo "$ax_cv_check_ldflags___Wl___gc_sections" >&6; } if test "x$ax_cv_check_ldflags___Wl___gc_sections" = xyes; then : strip+="y$strip" else : fi if test x"$strip" = xyyy; then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fdata-sections -ffunction-sections" EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,--gc-sections" else { $as_echo "$as_me:${as_lineno-$LINENO}: Not using compiler options to reduce binary size!" >&5 $as_echo "$as_me: Not using compiler options to reduce binary size!" >&6;} fi cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure # scripts and configure runs, see configure's option --config-cache. # It is not useful on other systems. If it contains results you don't # want to keep, you may remove or edit it. # # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # # `ac_cv_env_foo' variables (set or unset) will be overridden when # loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, we kill variables containing newlines. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. ( for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 $as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) | sed ' /^ac_cv_env_/b end t clear :clear s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ t end s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ :end' >>confcache if diff "$cache_file" confcache >/dev/null 2>&1; then :; else if test -w "$cache_file"; then if test "x$cache_file" != "x/dev/null"; then { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5 $as_echo "$as_me: updating cache $cache_file" >&6;} if test ! -f "$cache_file" || test -h "$cache_file"; then cat confcache >"$cache_file" else case $cache_file in #( */* | ?:*) mv -f confcache "$cache_file"$$ && mv -f "$cache_file"$$ "$cache_file" ;; #( *) mv -f confcache "$cache_file" ;; esac fi fi else { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5 $as_echo "$as_me: not updating unwritable cache $cache_file" >&6;} fi fi rm -f confcache test "x$prefix" = xNONE && prefix=$ac_default_prefix # Let make expand exec_prefix. test "x$exec_prefix" = xNONE && exec_prefix='${prefix}' DEFS=-DHAVE_CONFIG_H ac_libobjs= ac_ltlibobjs= U= for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue # 1. Remove the extension, and $U if already installed. ac_script='s/\$U\././;s/\.o$//;s/\.obj$//' ac_i=`$as_echo "$ac_i" | sed "$ac_script"` # 2. Prepend LIBOBJDIR. When used with automake>=1.10 LIBOBJDIR # will be set to the directory where LIBOBJS objects are built. as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext" as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo' done LIBOBJS=$ac_libobjs LTLIBOBJS=$ac_ltlibobjs { $as_echo "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5 $as_echo_n "checking that generated files are newer than configure... " >&6; } if test -n "$am_sleep_pid"; then # Hide warnings about reused PIDs. wait $am_sleep_pid 2>/dev/null fi { $as_echo "$as_me:${as_lineno-$LINENO}: result: done" >&5 $as_echo "done" >&6; } if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then as_fn_error $? "conditional \"AMDEP\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then as_fn_error $? "conditional \"am__fastdepCC\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -n "$EXEEXT"; then am__EXEEXT_TRUE= am__EXEEXT_FALSE='#' else am__EXEEXT_TRUE='#' am__EXEEXT_FALSE= fi if test -z "${CODE_COVERAGE_ENABLED_TRUE}" && test -z "${CODE_COVERAGE_ENABLED_FALSE}"; then as_fn_error $? "conditional \"CODE_COVERAGE_ENABLED\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE}" && test -z "${AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE}"; then as_fn_error $? "conditional \"AUTOCONF_CODE_COVERAGE_2019_01_06\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_LD_VERSION_SCRIPT_TRUE}" && test -z "${HAVE_LD_VERSION_SCRIPT_FALSE}"; then as_fn_error $? "conditional \"HAVE_LD_VERSION_SCRIPT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_FAPI_TRUE}" && test -z "${HAVE_FAPI_FALSE}"; then as_fn_error $? "conditional \"HAVE_FAPI\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${FUZZING_TRUE}" && test -z "${FUZZING_FALSE}"; then as_fn_error $? "conditional \"FUZZING\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${ENABLE_ASAN_TRUE}" && test -z "${ENABLE_ASAN_FALSE}"; then as_fn_error $? "conditional \"ENABLE_ASAN\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${UNIT_TRUE}" && test -z "${UNIT_FALSE}"; then as_fn_error $? "conditional \"UNIT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${ENABLE_INTEGRATION_TRUE}" && test -z "${ENABLE_INTEGRATION_FALSE}"; then as_fn_error $? "conditional \"ENABLE_INTEGRATION\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_P11KIT_TRUE}" && test -z "${HAVE_P11KIT_FALSE}"; then as_fn_error $? "conditional \"HAVE_P11KIT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi : "${CONFIG_STATUS=./config.status}" ac_write_fail=0 ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files $CONFIG_STATUS" { $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5 $as_echo "$as_me: creating $CONFIG_STATUS" >&6;} as_write_fail=0 cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1 #! $SHELL # Generated by $as_me. # Run this file to recreate the current configuration. # Compiler output produced by configure, useful for debugging # configure, is in config.log if it exists. debug=false ac_cs_recheck=false ac_cs_silent=false SHELL=\${CONFIG_SHELL-$SHELL} export SHELL _ASEOF cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1 ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi as_nl=' ' export as_nl # Printing a long string crashes Solaris 7 /usr/bin/printf. as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo # Prefer a ksh shell builtin over an external printf program on Solaris, # but without wasting forks for bash or zsh. if test -z "$BASH_VERSION$ZSH_VERSION" \ && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='print -r --' as_echo_n='print -rn --' elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then as_echo='printf %s\n' as_echo_n='printf %s' else if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"' as_echo_n='/usr/ucb/echo -n' else as_echo_body='eval expr "X$1" : "X\\(.*\\)"' as_echo_n_body='eval arg=$1; case $arg in #( *"$as_nl"*) expr "X$arg" : "X\\(.*\\)$as_nl"; arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;; esac; expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl" ' export as_echo_n_body as_echo_n='sh -c $as_echo_n_body as_echo' fi export as_echo_body as_echo='sh -c $as_echo_body as_echo' fi # The user is always right. if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # IFS # We need space, tab and new line, in precisely that order. Quoting is # there to prevent editors from complaining about space-tab. # (If _AS_PATH_WALK were called with IFS unset, it would disable word # splitting by setting IFS to empty value.) IFS=" "" $as_nl" # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # Unset variables that we do not need and which cause bugs (e.g. in # pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1" # suppresses any "Segmentation fault" message there. '((' could # trigger a bug in pdksh 5.2.14. for as_var in BASH_ENV ENV MAIL MAILPATH do eval test x\${$as_var+set} = xset \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done PS1='$ ' PS2='> ' PS4='+ ' # NLS nuisances. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi $as_echo "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then : eval 'as_fn_append () { eval $1+=\$2 }' else as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then : eval 'as_fn_arith () { as_val=$(( $* )) }' else as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || $as_echo X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" exec 6>&1 ## ----------------------------------- ## ## Main body of $CONFIG_STATUS script. ## ## ----------------------------------- ## _ASEOF test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Save the log message, to keep $0 and so on meaningful, and to # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" This file was extended by tpm2-pkcs11 $as_me 1.7.0, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES CONFIG_HEADERS = $CONFIG_HEADERS CONFIG_LINKS = $CONFIG_LINKS CONFIG_COMMANDS = $CONFIG_COMMANDS $ $0 $@ on `(hostname || uname -n) 2>/dev/null | sed 1q` " _ACEOF case $ac_config_files in *" "*) set x $ac_config_files; shift; ac_config_files=$*;; esac case $ac_config_headers in *" "*) set x $ac_config_headers; shift; ac_config_headers=$*;; esac cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # Files that config.status was made for. config_files="$ac_config_files" config_headers="$ac_config_headers" config_commands="$ac_config_commands" _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 ac_cs_usage="\ \`$as_me' instantiates files and other configuration actions from templates according to the current configuration. Unless the files and actions are specified as TAGs, all are instantiated by default. Usage: $0 [OPTION]... [TAG]... -h, --help print this help, then exit -V, --version print version number and configuration settings, then exit --config print configuration, then exit -q, --quiet, --silent do not print progress messages -d, --debug don't remove temporary files --recheck update $as_me by reconfiguring in the same conditions --file=FILE[:TEMPLATE] instantiate the configuration file FILE --header=FILE[:TEMPLATE] instantiate the configuration header FILE Configuration files: $config_files Configuration headers: $config_headers Configuration commands: $config_commands Report bugs to . tpm2-pkcs11 home page: ." _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ tpm2-pkcs11 config.status 1.7.0 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" Copyright (C) 2012 Free Software Foundation, Inc. This config.status script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it." ac_pwd='$ac_pwd' srcdir='$srcdir' INSTALL='$INSTALL' MKDIR_P='$MKDIR_P' AWK='$AWK' test -n "\$AWK" || AWK=awk _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # The default lists apply if the user does not specify any file. ac_need_defaults=: while test $# != 0 do case $1 in --*=?*) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'` ac_shift=: ;; --*=) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg= ac_shift=: ;; *) ac_option=$1 ac_optarg=$2 ac_shift=shift ;; esac case $ac_option in # Handling of the options. -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) ac_cs_recheck=: ;; --version | --versio | --versi | --vers | --ver | --ve | --v | -V ) $as_echo "$ac_cs_version"; exit ;; --config | --confi | --conf | --con | --co | --c ) $as_echo "$ac_cs_config"; exit ;; --debug | --debu | --deb | --de | --d | -d ) debug=: ;; --file | --fil | --fi | --f ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; '') as_fn_error $? "missing file argument" ;; esac as_fn_append CONFIG_FILES " '$ac_optarg'" ac_need_defaults=false;; --header | --heade | --head | --hea ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; esac as_fn_append CONFIG_HEADERS " '$ac_optarg'" ac_need_defaults=false;; --he | --h) # Conflict between --help and --header as_fn_error $? "ambiguous option: \`$1' Try \`$0 --help' for more information.";; --help | --hel | -h ) $as_echo "$ac_cs_usage"; exit ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil | --si | --s) ac_cs_silent=: ;; # This is an error. -*) as_fn_error $? "unrecognized option: \`$1' Try \`$0 --help' for more information." ;; *) as_fn_append ac_config_targets " $1" ac_need_defaults=false ;; esac shift done ac_configure_extra_args= if $ac_cs_silent; then exec 6>/dev/null ac_configure_extra_args="$ac_configure_extra_args --silent" fi _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 if \$ac_cs_recheck; then set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion shift \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6 CONFIG_SHELL='$SHELL' export CONFIG_SHELL exec "\$@" fi _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 exec 5>>config.log { echo sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX ## Running $as_me. ## _ASBOX $as_echo "$ac_log" } >&5 _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # # INIT-COMMANDS # # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH sed_quote_subst='$sed_quote_subst' double_quote_subst='$double_quote_subst' delay_variable_subst='$delay_variable_subst' macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`' macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`' enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`' enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`' pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`' enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`' shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`' SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`' ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`' PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`' host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`' host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`' host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`' build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`' build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`' build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`' SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`' Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`' GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`' EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`' FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`' LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`' NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`' LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`' max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`' ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`' exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`' lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`' lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`' lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`' lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`' lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`' reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`' reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`' OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`' deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`' file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`' file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`' want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`' DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`' sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`' AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`' AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`' archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`' STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`' RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`' old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`' old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`' old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`' lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`' CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`' CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`' compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`' GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`' lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`' nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`' lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`' lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`' objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`' MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`' lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`' need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`' MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`' DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`' NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`' LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`' OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`' OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`' libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`' shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`' extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`' archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`' enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`' export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`' whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`' compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`' old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`' old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`' archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`' archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`' module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`' module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`' with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`' allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`' no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`' hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`' hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`' hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`' hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`' hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`' hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`' hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`' inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`' link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`' always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`' export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`' exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`' include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`' prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`' postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`' file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`' variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`' need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`' need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`' version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`' runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`' shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`' shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`' libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`' library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`' soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`' install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`' postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`' postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`' finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`' finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`' hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`' sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`' configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`' configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`' hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`' enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`' enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`' enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`' old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`' striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`' LTCC='$LTCC' LTCFLAGS='$LTCFLAGS' compiler='$compiler_DEFAULT' # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$1 _LTECHO_EOF' } # Quote evaled strings. for var in SHELL \ ECHO \ PATH_SEPARATOR \ SED \ GREP \ EGREP \ FGREP \ LD \ NM \ LN_S \ lt_SP2NL \ lt_NL2SP \ reload_flag \ OBJDUMP \ deplibs_check_method \ file_magic_cmd \ file_magic_glob \ want_nocaseglob \ DLLTOOL \ sharedlib_from_linklib_cmd \ AR \ AR_FLAGS \ archiver_list_spec \ STRIP \ RANLIB \ CC \ CFLAGS \ compiler \ lt_cv_sys_global_symbol_pipe \ lt_cv_sys_global_symbol_to_cdecl \ lt_cv_sys_global_symbol_to_import \ lt_cv_sys_global_symbol_to_c_name_address \ lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \ lt_cv_nm_interface \ nm_file_list_spec \ lt_cv_truncate_bin \ lt_prog_compiler_no_builtin_flag \ lt_prog_compiler_pic \ lt_prog_compiler_wl \ lt_prog_compiler_static \ lt_cv_prog_compiler_c_o \ need_locks \ MANIFEST_TOOL \ DSYMUTIL \ NMEDIT \ LIPO \ OTOOL \ OTOOL64 \ shrext_cmds \ export_dynamic_flag_spec \ whole_archive_flag_spec \ compiler_needs_object \ with_gnu_ld \ allow_undefined_flag \ no_undefined_flag \ hardcode_libdir_flag_spec \ hardcode_libdir_separator \ exclude_expsyms \ include_expsyms \ file_list_spec \ variables_saved_for_relink \ libname_spec \ library_names_spec \ soname_spec \ install_override_mode \ finish_eval \ old_striplib \ striplib; do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[\\\\\\\`\\"\\\$]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done # Double-quote double-evaled strings. for var in reload_cmds \ old_postinstall_cmds \ old_postuninstall_cmds \ old_archive_cmds \ extract_expsyms_cmds \ old_archive_from_new_cmds \ old_archive_from_expsyms_cmds \ archive_cmds \ archive_expsym_cmds \ module_cmds \ module_expsym_cmds \ export_symbols_cmds \ prelink_cmds \ postlink_cmds \ postinstall_cmds \ postuninstall_cmds \ finish_cmds \ sys_lib_search_path_spec \ configure_time_dlsearch_path \ configure_time_lt_sys_library_path; do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[\\\\\\\`\\"\\\$]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done ac_aux_dir='$ac_aux_dir' # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes INIT. if test -n "\${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi PACKAGE='$PACKAGE' VERSION='$VERSION' RM='$RM' ofile='$ofile' AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}" _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Handling of arguments. for ac_config_target in $ac_config_targets do case $ac_config_target in "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;; "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;; "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;; "lib/tpm2-pkcs11.pc") CONFIG_FILES="$CONFIG_FILES lib/tpm2-pkcs11.pc" ;; "src/lib/config.h") CONFIG_HEADERS="$CONFIG_HEADERS src/lib/config.h" ;; *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; esac done # If the user did not use the arguments to specify the items to instantiate, # then the envvar interface is used. Set only those that are not. # We use the long form for the default assignment because of an extremely # bizarre bug on SunOS 4.1.3. if $ac_need_defaults; then test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers test "${CONFIG_COMMANDS+set}" = set || CONFIG_COMMANDS=$config_commands fi # Have a temporary directory for convenience. Make it in the build tree # simply because there is no reason against having it here, and in addition, # creating and moving files from /tmp can sometimes cause problems. # Hook for its removal unless debugging. # Note that there is a small window in which the directory will not be cleaned: # after its creation but before its name has been assigned to `$tmp'. $debug || { tmp= ac_tmp= trap 'exit_status=$? : "${ac_tmp:=$tmp}" { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status ' 0 trap 'as_fn_exit 1' 1 2 13 15 } # Create a (secure) tmp directory for tmp files. { tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` && test -d "$tmp" } || { tmp=./conf$$-$RANDOM (umask 077 && mkdir "$tmp") } || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5 ac_tmp=$tmp # Set up the scripts for CONFIG_FILES section. # No need to generate them if there are no CONFIG_FILES. # This happens for instance with `./config.status config.h'. if test -n "$CONFIG_FILES"; then ac_cr=`echo X | tr X '\015'` # On cygwin, bash can eat \r inside `` if the user requested igncr. # But we know of no other shell where ac_cr would be empty at this # point, so we can use a bashism as a fallback. if test "x$ac_cr" = x; then eval ac_cr=\$\'\\r\' fi ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' /dev/null` if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then ac_cs_awk_cr='\\r' else ac_cs_awk_cr=$ac_cr fi echo 'BEGIN {' >"$ac_tmp/subs1.awk" && _ACEOF { echo "cat >conf$$subs.awk <<_ACEOF" && echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' && echo "_ACEOF" } >conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'` ac_delim='%!_!# ' for ac_last_try in false false false false false :; do . ./conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X` if test $ac_delim_n = $ac_delim_num; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done rm -f conf$$subs.sh cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK && _ACEOF sed -n ' h s/^/S["/; s/!.*/"]=/ p g s/^[^!]*!// :repl t repl s/'"$ac_delim"'$// t delim :nl h s/\(.\{148\}\)..*/\1/ t more1 s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/ p n b repl :more1 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t nl :delim h s/\(.\{148\}\)..*/\1/ t more2 s/["\\]/\\&/g; s/^/"/; s/$/"/ p b :more2 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t delim ' >$CONFIG_STATUS || ac_write_fail=1 rm -f conf$$subs.awk cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 _ACAWK cat >>"\$ac_tmp/subs1.awk" <<_ACAWK && for (key in S) S_is_set[key] = 1 FS = "" } { line = $ 0 nfields = split(line, field, "@") substed = 0 len = length(field[1]) for (i = 2; i < nfields; i++) { key = field[i] keylen = length(key) if (S_is_set[key]) { value = S[key] line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3) len += length(value) + length(field[++i]) substed = 1 } else len += 1 + keylen } print line } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g" else cat fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \ || as_fn_error $? "could not setup config files machinery" "$LINENO" 5 _ACEOF # VPATH may cause trouble with some makes, so we remove sole $(srcdir), # ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and # trailing colons and then remove the whole line if VPATH becomes empty # (actually we leave an empty line to preserve line numbers). if test "x$srcdir" = x.; then ac_vpsub='/^[ ]*VPATH[ ]*=[ ]*/{ h s/// s/^/:/ s/[ ]*$/:/ s/:\$(srcdir):/:/g s/:\${srcdir}:/:/g s/:@srcdir@:/:/g s/^:*// s/:*$// x s/\(=[ ]*\).*/\1/ G s/\n// s/^[^=]*=[ ]*$// }' fi cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 fi # test -n "$CONFIG_FILES" # Set up the scripts for CONFIG_HEADERS section. # No need to generate them if there are no CONFIG_HEADERS. # This happens for instance with `./config.status Makefile'. if test -n "$CONFIG_HEADERS"; then cat >"$ac_tmp/defines.awk" <<\_ACAWK || BEGIN { _ACEOF # Transform confdefs.h into an awk script `defines.awk', embedded as # here-document in config.status, that substitutes the proper values into # config.h.in to produce config.h. # Create a delimiter string that does not exist in confdefs.h, to ease # handling of long lines. ac_delim='%!_!# ' for ac_last_try in false false :; do ac_tt=`sed -n "/$ac_delim/p" confdefs.h` if test -z "$ac_tt"; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done # For the awk script, D is an array of macro values keyed by name, # likewise P contains macro parameters if any. Preserve backslash # newline sequences. ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]* sed -n ' s/.\{148\}/&'"$ac_delim"'/g t rset :rset s/^[ ]*#[ ]*define[ ][ ]*/ / t def d :def s/\\$// t bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3"/p s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2"/p d :bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3\\\\\\n"\\/p t cont s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p t cont d :cont n s/.\{148\}/&'"$ac_delim"'/g t clear :clear s/\\$// t bsnlc s/["\\]/\\&/g; s/^/"/; s/$/"/p d :bsnlc s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p b cont ' >$CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 for (key in D) D_is_set[key] = 1 FS = "" } /^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ { line = \$ 0 split(line, arg, " ") if (arg[1] == "#") { defundef = arg[2] mac1 = arg[3] } else { defundef = substr(arg[1], 2) mac1 = arg[2] } split(mac1, mac2, "(") #) macro = mac2[1] prefix = substr(line, 1, index(line, defundef) - 1) if (D_is_set[macro]) { # Preserve the white space surrounding the "#". print prefix "define", macro P[macro] D[macro] next } else { # Replace #undef with comments. This is necessary, for example, # in the case of _POSIX_SOURCE, which is predefined and required # on some systems where configure will not decide to define it. if (defundef == "undef") { print "/*", prefix defundef, macro, "*/" next } } } { print } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 as_fn_error $? "could not setup config headers machinery" "$LINENO" 5 fi # test -n "$CONFIG_HEADERS" eval set X " :F $CONFIG_FILES :H $CONFIG_HEADERS :C $CONFIG_COMMANDS" shift for ac_tag do case $ac_tag in :[FHLC]) ac_mode=$ac_tag; continue;; esac case $ac_mode$ac_tag in :[FHL]*:*);; :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;; :[FH]-) ac_tag=-:-;; :[FH]*) ac_tag=$ac_tag:$ac_tag.in;; esac ac_save_IFS=$IFS IFS=: set x $ac_tag IFS=$ac_save_IFS shift ac_file=$1 shift case $ac_mode in :L) ac_source=$1;; :[FH]) ac_file_inputs= for ac_f do case $ac_f in -) ac_f="$ac_tmp/stdin";; *) # Look for the file first in the build tree, then in the source tree # (if the path is not absolute). The absolute path cannot be DOS-style, # because $ac_f cannot contain `:'. test -f "$ac_f" || case $ac_f in [\\/$]*) false;; *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";; esac || as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;; esac case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac as_fn_append ac_file_inputs " '$ac_f'" done # Let's still pretend it is `configure' which instantiates (i.e., don't # use $as_me), people would be surprised to read: # /* config.h. Generated by config.status. */ configure_input='Generated from '` $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g' `' by configure.' if test x"$ac_file" != x-; then configure_input="$ac_file. $configure_input" { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5 $as_echo "$as_me: creating $ac_file" >&6;} fi # Neutralize special characters interpreted by sed in replacement strings. case $configure_input in #( *\&* | *\|* | *\\* ) ac_sed_conf_input=`$as_echo "$configure_input" | sed 's/[\\\\&|]/\\\\&/g'`;; #( *) ac_sed_conf_input=$configure_input;; esac case $ac_tag in *:-:* | *:-) cat >"$ac_tmp/stdin" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; esac ;; esac ac_dir=`$as_dirname -- "$ac_file" || $as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$ac_file" : 'X\(//\)[^/]' \| \ X"$ac_file" : 'X\(//\)$' \| \ X"$ac_file" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$ac_file" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` as_dir="$ac_dir"; as_fn_mkdir_p ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix case $ac_mode in :F) # # CONFIG_FILE # case $INSTALL in [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;; *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;; esac ac_MKDIR_P=$MKDIR_P case $MKDIR_P in [\\/$]* | ?:[\\/]* ) ;; */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;; esac _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # If the template does not know about datarootdir, expand it. # FIXME: This hack should be removed a few years after 2.60. ac_datarootdir_hack=; ac_datarootdir_seen= ac_sed_dataroot=' /datarootdir/ { p q } /@datadir@/p /@docdir@/p /@infodir@/p /@localedir@/p /@mandir@/p' case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in *datarootdir*) ac_datarootdir_seen=yes;; *@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5 $as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;} _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_datarootdir_hack=' s&@datadir@&$datadir&g s&@docdir@&$docdir&g s&@infodir@&$infodir&g s&@localedir@&$localedir&g s&@mandir@&$mandir&g s&\\\${datarootdir}&$datarootdir&g' ;; esac _ACEOF # Neutralize VPATH when `$srcdir' = `.'. # Shell code in configure.ac might set extrasub. # FIXME: do we really want to maintain this feature? cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_sed_extra="$ac_vpsub $extrasub _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 :t /@[a-zA-Z_][a-zA-Z_0-9]*@/!b s|@configure_input@|$ac_sed_conf_input|;t t s&@top_builddir@&$ac_top_builddir_sub&;t t s&@top_build_prefix@&$ac_top_build_prefix&;t t s&@srcdir@&$ac_srcdir&;t t s&@abs_srcdir@&$ac_abs_srcdir&;t t s&@top_srcdir@&$ac_top_srcdir&;t t s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t s&@builddir@&$ac_builddir&;t t s&@abs_builddir@&$ac_abs_builddir&;t t s&@abs_top_builddir@&$ac_abs_top_builddir&;t t s&@INSTALL@&$ac_INSTALL&;t t s&@MKDIR_P@&$ac_MKDIR_P&;t t $ac_datarootdir_hack " eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \ >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5 test -z "$ac_datarootdir_hack$ac_datarootdir_seen" && { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } && { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \ "$ac_tmp/out"`; test -z "$ac_out"; } && { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&5 $as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&2;} rm -f "$ac_tmp/stdin" case $ac_file in -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";; *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";; esac \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; :H) # # CONFIG_HEADER # if test x"$ac_file" != x-; then { $as_echo "/* $configure_input */" \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" } >"$ac_tmp/config.h" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5 $as_echo "$as_me: $ac_file is unchanged" >&6;} else rm -f "$ac_file" mv "$ac_tmp/config.h" "$ac_file" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 fi else $as_echo "/* $configure_input */" \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \ || as_fn_error $? "could not create -" "$LINENO" 5 fi # Compute "$ac_file"'s index in $config_headers. _am_arg="$ac_file" _am_stamp_count=1 for _am_header in $config_headers :; do case $_am_header in $_am_arg | $_am_arg:* ) break ;; * ) _am_stamp_count=`expr $_am_stamp_count + 1` ;; esac done echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" || $as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$_am_arg" : 'X\(//\)[^/]' \| \ X"$_am_arg" : 'X\(//\)$' \| \ X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$_am_arg" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'`/stamp-h$_am_stamp_count ;; :C) { $as_echo "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5 $as_echo "$as_me: executing $ac_file commands" >&6;} ;; esac case $ac_file$ac_mode in "libtool":C) # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes. if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi cfgfile=${ofile}T trap "$RM \"$cfgfile\"; exit 1" 1 2 15 $RM "$cfgfile" cat <<_LT_EOF >> "$cfgfile" #! $SHELL # Generated automatically by $as_me ($PACKAGE) $VERSION # NOTE: Changes made to this file will be lost: look at ltmain.sh. # Provide generalized library-building support services. # Written by Gordon Matzigkeit, 1996 # Copyright (C) 2014 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program or library that is built # using GNU Libtool, you may include this file under the same # distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # The names of the tagged configurations supported by this script. available_tags='' # Configured defaults for sys_lib_dlsearch_path munging. : \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"} # ### BEGIN LIBTOOL CONFIG # Which release of libtool.m4 was used? macro_version=$macro_version macro_revision=$macro_revision # Whether or not to build shared libraries. build_libtool_libs=$enable_shared # Whether or not to build static libraries. build_old_libs=$enable_static # What type of objects to build. pic_mode=$pic_mode # Whether or not to optimize for fast installation. fast_install=$enable_fast_install # Shared archive member basename,for filename based shared library versioning on AIX. shared_archive_member_spec=$shared_archive_member_spec # Shell to use when invoking shell scripts. SHELL=$lt_SHELL # An echo program that protects backslashes. ECHO=$lt_ECHO # The PATH separator for the build system. PATH_SEPARATOR=$lt_PATH_SEPARATOR # The host system. host_alias=$host_alias host=$host host_os=$host_os # The build system. build_alias=$build_alias build=$build build_os=$build_os # A sed program that does not truncate output. SED=$lt_SED # Sed that helps us avoid accidentally triggering echo(1) options like -n. Xsed="\$SED -e 1s/^X//" # A grep program that handles long lines. GREP=$lt_GREP # An ERE matcher. EGREP=$lt_EGREP # A literal string matcher. FGREP=$lt_FGREP # A BSD- or MS-compatible name lister. NM=$lt_NM # Whether we need soft or hard links. LN_S=$lt_LN_S # What is the maximum length of a command? max_cmd_len=$max_cmd_len # Object file suffix (normally "o"). objext=$ac_objext # Executable file suffix (normally ""). exeext=$exeext # whether the shell understands "unset". lt_unset=$lt_unset # turn spaces into newlines. SP2NL=$lt_lt_SP2NL # turn newlines into spaces. NL2SP=$lt_lt_NL2SP # convert \$build file names to \$host format. to_host_file_cmd=$lt_cv_to_host_file_cmd # convert \$build files to toolchain format. to_tool_file_cmd=$lt_cv_to_tool_file_cmd # An object symbol dumper. OBJDUMP=$lt_OBJDUMP # Method to check whether dependent libraries are shared objects. deplibs_check_method=$lt_deplibs_check_method # Command to use when deplibs_check_method = "file_magic". file_magic_cmd=$lt_file_magic_cmd # How to find potential files when deplibs_check_method = "file_magic". file_magic_glob=$lt_file_magic_glob # Find potential files using nocaseglob when deplibs_check_method = "file_magic". want_nocaseglob=$lt_want_nocaseglob # DLL creation program. DLLTOOL=$lt_DLLTOOL # Command to associate shared and link libraries. sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd # The archiver. AR=$lt_AR # Flags to create an archive. AR_FLAGS=$lt_AR_FLAGS # How to feed a file listing to the archiver. archiver_list_spec=$lt_archiver_list_spec # A symbol stripping program. STRIP=$lt_STRIP # Commands used to install an old-style archive. RANLIB=$lt_RANLIB old_postinstall_cmds=$lt_old_postinstall_cmds old_postuninstall_cmds=$lt_old_postuninstall_cmds # Whether to use a lock for old archive extraction. lock_old_archive_extraction=$lock_old_archive_extraction # A C compiler. LTCC=$lt_CC # LTCC compiler flags. LTCFLAGS=$lt_CFLAGS # Take the output of nm and produce a listing of raw symbols and C names. global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe # Transform the output of nm in a proper C declaration. global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl # Transform the output of nm into a list of symbols to manually relocate. global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import # Transform the output of nm in a C name address pair. global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address # Transform the output of nm in a C name address pair when lib prefix is needed. global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix # The name lister interface. nm_interface=$lt_lt_cv_nm_interface # Specify filename containing input files for \$NM. nm_file_list_spec=$lt_nm_file_list_spec # The root where to search for dependent libraries,and where our libraries should be installed. lt_sysroot=$lt_sysroot # Command to truncate a binary pipe. lt_truncate_bin=$lt_lt_cv_truncate_bin # The name of the directory that contains temporary libtool files. objdir=$objdir # Used to examine libraries when file_magic_cmd begins with "file". MAGIC_CMD=$MAGIC_CMD # Must we lock files when doing compilation? need_locks=$lt_need_locks # Manifest tool. MANIFEST_TOOL=$lt_MANIFEST_TOOL # Tool to manipulate archived DWARF debug symbol files on Mac OS X. DSYMUTIL=$lt_DSYMUTIL # Tool to change global to local symbols on Mac OS X. NMEDIT=$lt_NMEDIT # Tool to manipulate fat objects and archives on Mac OS X. LIPO=$lt_LIPO # ldd/readelf like tool for Mach-O binaries on Mac OS X. OTOOL=$lt_OTOOL # ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4. OTOOL64=$lt_OTOOL64 # Old archive suffix (normally "a"). libext=$libext # Shared library suffix (normally ".so"). shrext_cmds=$lt_shrext_cmds # The commands to extract the exported symbol list from a shared archive. extract_expsyms_cmds=$lt_extract_expsyms_cmds # Variables whose values should be saved in libtool wrapper scripts and # restored at link time. variables_saved_for_relink=$lt_variables_saved_for_relink # Do we need the "lib" prefix for modules? need_lib_prefix=$need_lib_prefix # Do we need a version for libraries? need_version=$need_version # Library versioning type. version_type=$version_type # Shared library runtime path variable. runpath_var=$runpath_var # Shared library path variable. shlibpath_var=$shlibpath_var # Is shlibpath searched before the hard-coded library search path? shlibpath_overrides_runpath=$shlibpath_overrides_runpath # Format of library name prefix. libname_spec=$lt_libname_spec # List of archive names. First name is the real one, the rest are links. # The last name is the one that the linker finds with -lNAME library_names_spec=$lt_library_names_spec # The coded name of the library, if different from the real name. soname_spec=$lt_soname_spec # Permission mode override for installation of shared libraries. install_override_mode=$lt_install_override_mode # Command to use after installation of a shared archive. postinstall_cmds=$lt_postinstall_cmds # Command to use after uninstallation of a shared archive. postuninstall_cmds=$lt_postuninstall_cmds # Commands used to finish a libtool library installation in a directory. finish_cmds=$lt_finish_cmds # As "finish_cmds", except a single script fragment to be evaled but # not shown. finish_eval=$lt_finish_eval # Whether we should hardcode library paths into libraries. hardcode_into_libs=$hardcode_into_libs # Compile-time system search path for libraries. sys_lib_search_path_spec=$lt_sys_lib_search_path_spec # Detected run-time system search path for libraries. sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path # Explicit LT_SYS_LIBRARY_PATH set during ./configure time. configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path # Whether dlopen is supported. dlopen_support=$enable_dlopen # Whether dlopen of programs is supported. dlopen_self=$enable_dlopen_self # Whether dlopen of statically linked programs is supported. dlopen_self_static=$enable_dlopen_self_static # Commands to strip libraries. old_striplib=$lt_old_striplib striplib=$lt_striplib # The linker used to build libraries. LD=$lt_LD # How to create reloadable object files. reload_flag=$lt_reload_flag reload_cmds=$lt_reload_cmds # Commands used to build an old-style archive. old_archive_cmds=$lt_old_archive_cmds # A language specific compiler. CC=$lt_compiler # Is the compiler the GNU compiler? with_gcc=$GCC # Compiler flag to turn off builtin functions. no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag # Additional compiler flags for building library objects. pic_flag=$lt_lt_prog_compiler_pic # How to pass a linker flag through the compiler. wl=$lt_lt_prog_compiler_wl # Compiler flag to prevent dynamic linking. link_static_flag=$lt_lt_prog_compiler_static # Does compiler simultaneously support -c and -o options? compiler_c_o=$lt_lt_cv_prog_compiler_c_o # Whether or not to add -lc for building shared libraries. build_libtool_need_lc=$archive_cmds_need_lc # Whether or not to disallow shared libs when runtime libs are static. allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes # Compiler flag to allow reflexive dlopens. export_dynamic_flag_spec=$lt_export_dynamic_flag_spec # Compiler flag to generate shared objects directly from archives. whole_archive_flag_spec=$lt_whole_archive_flag_spec # Whether the compiler copes with passing no objects directly. compiler_needs_object=$lt_compiler_needs_object # Create an old-style archive from a shared archive. old_archive_from_new_cmds=$lt_old_archive_from_new_cmds # Create a temporary old-style archive to link instead of a shared archive. old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds # Commands used to build a shared archive. archive_cmds=$lt_archive_cmds archive_expsym_cmds=$lt_archive_expsym_cmds # Commands used to build a loadable module if different from building # a shared archive. module_cmds=$lt_module_cmds module_expsym_cmds=$lt_module_expsym_cmds # Whether we are building with GNU ld or not. with_gnu_ld=$lt_with_gnu_ld # Flag that allows shared libraries with undefined symbols to be built. allow_undefined_flag=$lt_allow_undefined_flag # Flag that enforces no undefined symbols. no_undefined_flag=$lt_no_undefined_flag # Flag to hardcode \$libdir into a binary during linking. # This must work even if \$libdir does not exist hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec # Whether we need a single "-rpath" flag with a separated argument. hardcode_libdir_separator=$lt_hardcode_libdir_separator # Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes # DIR into the resulting binary. hardcode_direct=$hardcode_direct # Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes # DIR into the resulting binary and the resulting library dependency is # "absolute",i.e impossible to change by setting \$shlibpath_var if the # library is relocated. hardcode_direct_absolute=$hardcode_direct_absolute # Set to "yes" if using the -LDIR flag during linking hardcodes DIR # into the resulting binary. hardcode_minus_L=$hardcode_minus_L # Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR # into the resulting binary. hardcode_shlibpath_var=$hardcode_shlibpath_var # Set to "yes" if building a shared library automatically hardcodes DIR # into the library and all subsequent libraries and executables linked # against it. hardcode_automatic=$hardcode_automatic # Set to yes if linker adds runtime paths of dependent libraries # to runtime path list. inherit_rpath=$inherit_rpath # Whether libtool must link a program against all its dependency libraries. link_all_deplibs=$link_all_deplibs # Set to "yes" if exported symbols are required. always_export_symbols=$always_export_symbols # The commands to list exported symbols. export_symbols_cmds=$lt_export_symbols_cmds # Symbols that should not be listed in the preloaded symbols. exclude_expsyms=$lt_exclude_expsyms # Symbols that must always be exported. include_expsyms=$lt_include_expsyms # Commands necessary for linking programs (against libraries) with templates. prelink_cmds=$lt_prelink_cmds # Commands necessary for finishing linking programs. postlink_cmds=$lt_postlink_cmds # Specify filename containing input files. file_list_spec=$lt_file_list_spec # How to hardcode a shared library path into an executable. hardcode_action=$hardcode_action # ### END LIBTOOL CONFIG _LT_EOF cat <<'_LT_EOF' >> "$cfgfile" # ### BEGIN FUNCTIONS SHARED WITH CONFIGURE # func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x$2 in x) ;; *:) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\" ;; x:*) eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\" ;; *::*) eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\" ;; *) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\" ;; esac } # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in $*""; do case $cc_temp in compile | *[\\/]compile | ccache | *[\\/]ccache ) ;; distcc | *[\\/]distcc | purify | *[\\/]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } # ### END FUNCTIONS SHARED WITH CONFIGURE _LT_EOF case $host_os in aix3*) cat <<\_LT_EOF >> "$cfgfile" # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi _LT_EOF ;; esac ltmain=$ac_aux_dir/ltmain.sh # We use sed instead of cat because bash on DJGPP gets confused if # if finds mixed CR/LF and LF-only lines. Since sed operates in # text mode, it properly converts lines to CR/LF. This bash problem # is reportedly fixed, but why not run on old versions too? sed '$q' "$ltmain" >> "$cfgfile" \ || (rm -f "$cfgfile"; exit 1) mv -f "$cfgfile" "$ofile" || (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") chmod +x "$ofile" ;; "depfiles":C) test x"$AMDEP_TRUE" != x"" || { # Older Autoconf quotes --file arguments for eval, but not when files # are listed without --file. Let's play safe and only enable the eval # if we detect the quoting. # TODO: see whether this extra hack can be removed once we start # requiring Autoconf 2.70 or later. case $CONFIG_FILES in #( *\'*) : eval set x "$CONFIG_FILES" ;; #( *) : set x $CONFIG_FILES ;; #( *) : ;; esac shift # Used to flag and report bootstrapping failures. am_rc=0 for am_mf do # Strip MF so we end up with the name of the file. am_mf=`$as_echo "$am_mf" | sed -e 's/:.*$//'` # Check whether this is an Automake generated Makefile which includes # dependency-tracking related rules and includes. # Grep'ing the whole file directly is not great: AIX grep has a line # limit of 2048, but all sed's we know have understand at least 4000. sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \ || continue am_dirpart=`$as_dirname -- "$am_mf" || $as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$am_mf" : 'X\(//\)[^/]' \| \ X"$am_mf" : 'X\(//\)$' \| \ X"$am_mf" : 'X\(/\)' \| . 2>/dev/null || $as_echo X"$am_mf" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` am_filepart=`$as_basename -- "$am_mf" || $as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \ X"$am_mf" : 'X\(//\)$' \| \ X"$am_mf" : 'X\(/\)' \| . 2>/dev/null || $as_echo X/"$am_mf" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` { echo "$as_me:$LINENO: cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles" >&5 (cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } || am_rc=$? done if test $am_rc -ne 0; then { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 $as_echo "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Something went wrong bootstrapping makefile fragments for automatic dependency tracking. Try re-running configure with the '--disable-dependency-tracking' option to at least be able to build the package (albeit without support for automatic dependency tracking). See \`config.log' for more details" "$LINENO" 5; } fi { am_dirpart=; unset am_dirpart;} { am_filepart=; unset am_filepart;} { am_mf=; unset am_mf;} { am_rc=; unset am_rc;} rm -f conftest-deps.mk } ;; esac done # for ac_tag as_fn_exit 0 _ACEOF ac_clean_files=$ac_clean_files_save test $ac_write_fail = 0 || as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5 # configure is writing to config.log, and then calls config.status. # config.status does its own redirection, appending to config.log. # Unfortunately, on DOS this fails, as config.log is still kept open # by configure, so config.status won't be able to write to it; its # output is simply discarded. So we exec the FD to /dev/null, # effectively closing config.log, so it can be properly (re)opened and # appended to by config.status. When coming back to configure, we # need to make the FD available again. if test "$no_create" != yes; then ac_cs_success=: ac_config_status_args= test "$silent" = yes && ac_config_status_args="$ac_config_status_args --quiet" exec 5>/dev/null $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false exec 5>>config.log # Use ||, not &&, to avoid exiting from the if with $? = 1, which # would make configure fail if this is the last instruction. $ac_cs_success || as_fn_exit 1 fi if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5 $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;} fi tpm2-pkcs11-1.7.0/test-driver0000755000175000017500000001104213616550647012633 00000000000000#! /bin/sh # test-driver - basic testsuite driver script. scriptversion=2018-03-07.03; # UTC # Copyright (C) 2011-2018 Free Software Foundation, Inc. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # This file is maintained in Automake, please report # bugs to or send patches to # . # Make unconditional expansion of undefined variables an error. This # helps a lot in preventing typo-related bugs. set -u usage_error () { echo "$0: $*" >&2 print_usage >&2 exit 2 } print_usage () { cat <$log_file 2>&1 estatus=$? if test $enable_hard_errors = no && test $estatus -eq 99; then tweaked_estatus=1 else tweaked_estatus=$estatus fi case $tweaked_estatus:$expect_failure in 0:yes) col=$red res=XPASS recheck=yes gcopy=yes;; 0:*) col=$grn res=PASS recheck=no gcopy=no;; 77:*) col=$blu res=SKIP recheck=no gcopy=yes;; 99:*) col=$mgn res=ERROR recheck=yes gcopy=yes;; *:yes) col=$lgn res=XFAIL recheck=no gcopy=yes;; *:*) col=$red res=FAIL recheck=yes gcopy=yes;; esac # Report the test outcome and exit status in the logs, so that one can # know whether the test passed or failed simply by looking at the '.log' # file, without the need of also peaking into the corresponding '.trs' # file (automake bug#11814). echo "$res $test_name (exit status: $estatus)" >>$log_file # Report outcome to console. echo "${col}${res}${std}: $test_name" # Register the test result, and other relevant metadata. echo ":test-result: $res" > $trs_file echo ":global-test-result: $res" >> $trs_file echo ":recheck: $recheck" >> $trs_file echo ":copy-in-global-log: $gcopy" >> $trs_file # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.7.0/tools/0000755000175000017500000000000014114240163011636 500000000000000tpm2-pkcs11-1.7.0/tools/tpm2_ptool.py0000755000175000017500000000017013754763565014261 00000000000000#!/usr/bin/env python3 # SPDX-License-Identifier: BSD-2-Clause from tpm2_pkcs11 import tpm2_ptool as tool tool.main() tpm2-pkcs11-1.7.0/tools/.gitignore0000644000175000017500000000011613754763565013575 00000000000000# SPDX-License-Identifier: BSD-2-Clause *__pycache__/ *.swp *.pyc *.egg-info/ tpm2-pkcs11-1.7.0/tools/setup.py0000664000175000017500000000244514114240163013277 00000000000000# SPDX-License-Identifier: BSD-2-Clause from setuptools import setup from textwrap import dedent as DD long_description = DD(''' This tool is used to configure and manipulate stores for the tpm2-pkcs11 cryptographic library. ''') setup( name='tpm2-pkcs11-tools', python_requires='>=3.7', long_description=long_description, long_description_content_type='text/markdown', version='1.33.7', description='Command line tools for the TPM2.0 PKCS11 module', url='https://github.com/tpm2-software/tpm2-pkcs11', license='BSD2', keywords=['', ], classifiers=[ 'Development Status :: 2 - Pre-Alpha', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'License :: OSI Approved :: BSD License', 'Environment :: Console', 'Natural Language :: English', 'Operating System :: OS Independent', 'Programming Language :: Python', ], packages=['tpm2_pkcs11'], # Dependencies got here aka install_requires=['tensorflow'] install_requires=[ 'bcrypt', 'cryptography>=3.0', 'pyyaml', 'pyasn1', 'pyasn1_modules', ], tests_require=[], entry_points={ 'console_scripts': ['tpm2_ptool = tpm2_pkcs11.tpm2_ptool:main'], }, ) tpm2-pkcs11-1.7.0/tools/tpm2_ptool0000755000175000017500000000017413754763565013636 00000000000000#!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause "${PYTHON_INTERPRETER:-python3}" -m tpm2_pkcs11.tpm2_ptool "$@" tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/0000755000175000017500000000000014116731736013717 500000000000000tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/__init__.py0000644000175000017500000000031613754763565015764 00000000000000# SPDX-License-Identifier: BSD-2-Clause import sys # Requires python 3.7 or greater if (sys.version_info[0], sys.version_info[1]) < (3, 7): sys.exit("Python 3.7 or a more recent version is required.")tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/commandlets_keys.py0000664000175000017500000005612214114240163017545 00000000000000# SPDX-License-Identifier: BSD-2-Clause # python stdlib dependencies import binascii import io import os import struct import sys import yaml from tempfile import mkstemp # local imports from .command import Command from .command import commandlet from .db import Db from .objects import PKCS11ObjectFactory as PKCS11ObjectFactory from .objects import PKCS11X509 from .utils import AESAuthUnwrapper from .utils import TemporaryDirectory from .utils import hash_pass from .utils import rand_hex_str from .utils import pemcert_to_attrs from .utils import str2bool from .utils import str2bytes from .utils import asn1parse_tss_key from .utils import get_pobject from .tpm2 import Tpm2 from .pkcs11t import * # noqa class NewKeyCommandBase(Command): ''' creates a key to a token within a tpm2-pkcs11 store. ''' def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The tokens label to import the key too.\n', required=True) group_parser.add_argument( '--key-label', help='The label of the key imported. Defaults to an integer value.\n') group_parser.add_argument( '--id', help='The key id. Defaults to a random 8 bytes of hex.\n', default=binascii.hexlify(os.urandom(8)).decode()) group_parser.add_argument( '--attr-always-authenticate', action='store_true', help='Sets the CKA_ALWAYS_AUTHENTICATE attribute to CK_TRUE.\n') group_parser.add_argument( '--hierarchy-auth', help='The hierarchyauth, required for transient pobjects.\n', default='') pinopts = group_parser.add_mutually_exclusive_group() pinopts.add_argument('--sopin', help='The Administrator pin.\n'), pinopts.add_argument('--userpin', help='The User pin.\n'), # Implemented by derived class def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): raise NotImplementedError('Implement: new_key') def new_key_init(self, label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # Get the primary object encrypted auth value and sokey information # to decode it. Based on the incoming pin is_so = sopin != None pin = sopin if is_so else userpin pubkey = '%spub' % ('so' if is_so else 'user') privkey = '%spriv' % ('so' if is_so else 'user') saltkey = '%sauthsalt' % ('so' if is_so else 'user') sealpub = sealobjects[pubkey] sealpriv = sealobjects[privkey] sealsalt = sealobjects[saltkey] sealctx = tpm2.load(pobj_handle, pobj['objauth'], sealpriv, sealpub) sealauth = hash_pass(pin, salt=sealsalt)['hash'] wrappingkey = tpm2.unseal(sealctx, sealauth) wrapper = AESAuthUnwrapper(wrappingkey) #create an auth value for the tertiary object. objauth = rand_hex_str() encobjauth = wrapper.wrap(str2bytes(objauth)) return (encobjauth, objauth) @staticmethod def new_key_save(alg, keylabel, tid, label, privblob, pubblob, tertiarypubdata, encobjauth, db, tpm2, extra_privattrs=None, extra_pubattrs=None, override_keylen=None): token = db.gettoken(label) # # Cache the objects attributes from the public structure and other sources # and populate the db with the data. This allows use of the public data # without needed to load any objects which requires a pin to do. # y = yaml.safe_load(tertiarypubdata) initial_pubattrs = {} initial_privattrs = {} # add the id initial_privattrs.update({CKA_ID: binascii.hexlify(tid.encode()).decode()}) initial_pubattrs.update({CKA_ID: binascii.hexlify(tid.encode()).decode()}) # Add keylabel for ALL objects if set if keylabel is not None: initial_privattrs.update({ CKA_LABEL: binascii.hexlify(keylabel.encode()).decode() }) initial_pubattrs.update({ CKA_LABEL: binascii.hexlify(keylabel.encode()).decode() }) # add additional attrs if extra_privattrs: initial_privattrs.update(extra_privattrs) if initial_pubattrs and extra_pubattrs: initial_pubattrs.update(extra_pubattrs) objects = PKCS11ObjectFactory(y, tpm2, encobjauth, initial_pubattrs, initial_privattrs, tpm_pub=pubblob, tpm_priv=privblob, override_keylen=override_keylen) # Store private to database db.addtertiary(token['id'], objects['private']) # if it's asymmetric, add a public object too if 'public' in objects and objects['public'] is not None: db.addtertiary(token['id'], objects['public']) return objects @staticmethod def output(objects, action): d = { 'action' : action, } for k, v in objects.items(): if v is not None: d[k] = { 'CKA_ID' : objects[k][CKA_ID] } yaml.safe_dump(d, sys.stdout, default_flow_style=False) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) label = args['label'] sopin = args['sopin'] userpin = args['userpin'] alg = args['algorithm'] if 'algorithm' in args else None key_label = args['key_label'] tid = args['id'] hierarchyauth = args['hierarchy_auth'] passin = args['passin'] if 'passin' in args else None privkey = None try: privkey = args['privkey'] except KeyError: privkey = None token = db.gettoken(label) pobjectid = token['pid'] pobj = db.getprimary(pobjectid) if userpin is None and sopin is None: # Use empty PIN if the token has an empty user PIN token_config = yaml.safe_load(io.StringIO(token['config'])) if token_config.get('empty-user-pin'): userpin = '' else: sys.exit('error: at least one of the arguments --sopin --userpin is required') sealobjects = db.getsealobject(token['id']) encobjauth, objauth = self.new_key_init( label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d) tertiarypriv, tertiarypub, tertiarypubdata = self.new_key_create( pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d) # handle options that can add additional attributes always_auth = args['attr_always_authenticate'] priv_attrs = {CKA_ALWAYS_AUTHENTICATE : always_auth} override_keylen = getattr(self, '_override_keylen', None) return NewKeyCommandBase.new_key_save( alg, key_label, tid, label, tertiarypriv, tertiarypub, tertiarypubdata, encobjauth, db, tpm2, extra_privattrs=priv_attrs, override_keylen=override_keylen) @commandlet("import") class ImportCommand(NewKeyCommandBase): ''' Imports a rsa key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(ImportCommand, self).generate_options(group_parser) group_parser.add_argument( '--privkey', help='Full path of the private key to be imported.\n', required=True) group_parser.add_argument( '--algorithm', help='The type of the key.\n', choices=['rsa', 'ecc', 'hmac', # Generic hmac, actuall imported as keyedhash scheme null with proper attrs. 'hmac:sha1', 'hmac:sha256', 'hmac:sha384', 'hmac:sha512' ], required=False) group_parser.add_argument( '--passin', help='Password of the input private key file like OpenSSL (example: "pass:secret").\n', required=False) # Imports a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # A plain HMAC key is just a keyedhash object with userwithauth and sign set. # Seal objects don't have sign (ie default tpm2_import -G keyedhash behavior. objattrs=None if alg == 'hmac': objattrs = 'userwithauth|sign|decrypt' alg = 'keyedhash' tertiarypriv, tertiarypub, tertiarypubdata = tpm2.importkey( pobj_handle, pobj['objauth'], objauth, privkey=privkey, alg=alg, passin=passin, objattrs=objattrs) # We have no way of knowing the keylength of an hmac key if alg and alg.startswith('hmac') or alg == 'keyedhash': self._override_keylen = os.path.getsize(privkey) return (tertiarypriv, tertiarypub, tertiarypubdata) def __call__(self, args): objects = super(ImportCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'import') @commandlet("addkey") class AddKeyCommand(NewKeyCommandBase): ''' Adds a key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(AddKeyCommand, self).generate_options(group_parser) group_parser.add_argument( '--algorithm', help='The type of the key.\n', choices=Tpm2.ALGS, required=True) # Creates a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) tertiarypriv, tertiarypub, tertiarypubdata = tpm2.create( pobj_handle, pobj['objauth'], objauth, alg=alg) return (tertiarypriv, tertiarypub, tertiarypubdata) def __call__(self, args): objects = super(AddKeyCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'add') @commandlet("addcert") class AddCert(Command): ''' Adds a certificate object ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The profile label to remove.\n', required=True) group_parser.add_argument( 'cert', help='The x509 PEM certificate to add.\n') sub_group = group_parser.add_mutually_exclusive_group() sub_group.add_argument( '--key-label', help='The associated private key label.\n') group_parser.add_argument( '--key-id', help='The associated private key id in hex.\n') def __call__(self, args): path = args['path'] label = args['label'] keylabel = args['key_label'] keyid = args['key_id'] certpath = args['cert'] if (keylabel is None) == (keyid is None): sys.exit('Expected --key-label or --key-id to be specified') attrs = pemcert_to_attrs(certpath) pkcs11_object = PKCS11X509(attrs) with Db(path) as db: # get token to add to token = db.gettoken(label) # verify that key is existing # XXX we should be verifying that it's expected, but I guess one could always load up a cert # not associated with a key. tobjs = db.gettertiary(token['id']) # look up the private key missing_id_or_label = None for t in tobjs: if keylabel is not None: missing_id_or_label = AddCert.get_id_by_label(t, keylabel) else: missing_id_or_label = AddCert.get_label_by_id(t, keyid) if missing_id_or_label is not None: break if missing_id_or_label is None: raise RuntimeError('Cannot find key with id "%s"' % keylabel) # have valid keylabel needed id if keylabel: pkcs11_object.update({CKA_ID: missing_id_or_label}) pkcs11_object.update({CKA_LABEL: binascii.hexlify(keylabel.encode()).decode()}) # have valid id needed keylabel else: pkcs11_object.update({CKA_LABEL: missing_id_or_label}) pkcs11_object.update({CKA_ID: keyid}) # TODO verify that cert is cryptographically bound to key found # add the cert db.addtertiary(token['id'], pkcs11_object) NewKeyCommandBase.output({'cert' : pkcs11_object}, 'add') @staticmethod def get_id_by_label(tobj, keylabel): attrs = yaml.safe_load(io.StringIO(tobj['attrs'])) if CKA_LABEL in attrs: x = attrs[CKA_LABEL] x = binascii.unhexlify(x).decode() if x == keylabel and attrs[CKA_CLASS] == CKO_PRIVATE_KEY: return attrs[CKA_ID] return None @staticmethod def get_label_by_id(tobj, keyid): attrs = yaml.safe_load(io.StringIO(tobj['attrs'])) if CKA_ID in attrs: x = attrs[CKA_ID] if x == keyid and attrs[CKA_CLASS] == CKO_PRIVATE_KEY: return attrs[CKA_LABEL] if CKA_LABEL in attrs else '' return None @commandlet("objmod") class ObjMod(Command): ''' Dumps and modifies objects. ''' _type_map = { 'int' : 'do_int', 'str' : 'do_str', 'bool': 'do_bool', 'raw' : 'do_raw', } @staticmethod def do_int(value): return int(value, 0) @staticmethod def do_bool(value): return str2bool(value) @staticmethod def do_str(value): return binascii.hexlify(value.encode()).decode() @staticmethod def do_raw(value): return value @classmethod def mod(cls, path, tid, key, value, inattrs, vtype): with Db(path) as db: obj = db.getobject(tid) if obj is None: sys.exit('Not found, object with id: {}'.format(tid)) s = obj['attrs'] obj_attrs = yaml.safe_load(s) # if we don't have any update data, just dump the attributes if not key and not inattrs: print(yaml.safe_dump(obj_attrs, default_flow_style=False)) sys.exit() # if we have attributes YAML file, then we want to update all attributes if inattrs: with Db(path) as db: y = yaml.safe_load(open(inattrs, "r")) db.updatetertiary(obj['id'], y) sys.exit() # else we have --key and possibly --value # # look in the CKA_ globals from pkcs11t.py file for # a mapping string or raw value map. # filter(lambda x: x.startswith('CKA_'), globals().keys()) keys = [] for k in globals().keys(): if k.startswith('CKA_'): keys.append(k) keynames = {} for k in keys: keynames[globals()[k]] = k keyname=None if key in keys: keyname=key key=globals()[key] else: key = int(key, 0) if key not in keynames: sys.exit('Unknown key: %d', key) keyname = keynames[key] if not value: if key and not key in obj_attrs: sys.exit("Key not found") print(yaml.safe_dump({keyname : obj_attrs[key]})) sys.exit() if not vtype: sys.exit("When specifying a value, type is required") value = getattr(cls, ObjMod._type_map[vtype])(value) obj_attrs[key] = value with Db(path) as db: db.updatetertiary(obj['id'], obj_attrs) # adhere to an interface def generate_options(self, group_parser): group_parser.add_argument( '--id', help='The object id.\n', required=True) group_parser.add_argument( '--key', help='The key to dump.\n') group_parser.add_argument( '--value', help='The value to set.\n') group_parser.add_argument( '--type', choices=self._type_map.keys(), help='Specify the type.\n') group_parser.add_argument( 'attrs', nargs='?', help='The YAML attribute file.\n') def __call__(self, args): path = args['path'] key = args['key'] if 'key' in args else None value = args['value'] if 'value' in args else None attrs = args['attrs'] if 'attrs' in args else None if attrs and key: sys.exit('Cannot specify --key when specifying the attributes') if attrs and value: sys.exit('Cannot specify --value when specifying the attributes') if value and not args['type']: sys.exit('require --type when specifying --value') ObjMod.mod(path, args['id'], key, value, attrs, args['type']) @commandlet("objdel") class ObjDel(Command): ''' Deletes an object from a token. ''' @classmethod def delete(cls, path, tid): with Db(path) as db: obj = db.getobject(tid) db.rmobject(obj['id']) # adhere to an interface def generate_options(self, group_parser): group_parser.add_argument( 'id', help='The id of the object to delete.\n') def __call__(self, args): path = args['path'] ObjDel.delete(path, args['id']) @commandlet("link") class LinkCommand(NewKeyCommandBase): ''' Imports an existing TPM key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(LinkCommand, self).generate_options(group_parser) group_parser.add_argument('privkey', nargs='*', help='Path of the key to be linked.\n') group_parser.add_argument( '--auth', default='', help='The auth value for the key to link.\n' ) def new_key_init(self, label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # Get the primary object encrypted auth value and sokey information # to decode it. Based on the incoming pin is_so = sopin != None pin = sopin if is_so else userpin pubkey = '%spub' % ('so' if is_so else 'user') privkey = '%spriv' % ('so' if is_so else 'user') saltkey = '%sauthsalt' % ('so' if is_so else 'user') sealpub = sealobjects[pubkey] sealpriv = sealobjects[privkey] sealsalt = sealobjects[saltkey] sealctx = tpm2.load(pobj_handle, pobj['objauth'], sealpriv, sealpub) sealauth = hash_pass(pin, salt=sealsalt)['hash'] wrappingkey = tpm2.unseal(sealctx, sealauth) wrapper = AESAuthUnwrapper(wrappingkey) objauth = self._auth encobjauth = wrapper.wrap(str2bytes(objauth)) return (encobjauth, objauth) def create_from_tss_key(self, pobj, objauth, hierarchyauth, tpm2, alg, keypath, d): keypath = keypath[0] tss2_privkey = asn1parse_tss_key(keypath) is_empty_auth = bool(tss2_privkey['emptyauth']) phandle = int(tss2_privkey['parent']) pubbytes = bytes(tss2_privkey['pubkey']) privbytes = bytes(tss2_privkey['privkey']) pid = pobj['id'] pobj_config = yaml.safe_load(pobj['config']) is_transient = pobj_config['transient'] if not is_transient and (phandle == tpm2.TPM2_RH_OWNER or \ (phandle >> tpm2.TPM2_HR_SHIFT != tpm2.TPM2_HT_PERSISTENT)): sys.exit('The primary object (id: {:d}) is persistent and' ' the TSS Engine key does not have a persistent parent,' ' got: 0x{:x}'.format(pid, phandle)) elif is_transient and not (phandle == tpm2.TPM2_RH_OWNER or phandle == 0): # tpm2-tss-engine < 1.1.0 used a phandle of 0 instead of tpm2.TPM2_RH_OWNER sys.exit('The primary object (id: {:d}) is transient and' ' the TSS Engine key has a parent handle,' ' got: 0x{:x}'.format(pid, phandle)) if is_empty_auth and len(self._auth) if self._auth is not None else 0: sys.exit('Key expected to have auth value, please specify via option --auth'); if not is_transient: # Im diving into the ESYS_TR serialized format, # this isn't the smartest thing to do... hexhandle = pobj_config['esys-tr'] handle_bytes = binascii.unhexlify(hexhandle)[0:4] expected_handle = struct.unpack(">I", handle_bytes)[0] if phandle != expected_handle: sys.exit("Key must be parent of 0x{:X}, got 0x{:X}".format( expected_handle, phandle)) pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) pobjauth = pobj['objauth'] ctx = tpm2.load(pobj_handle, pobjauth, privbytes, pubbytes) tertiarypubdata, _ = tpm2.readpublic(ctx, False) try: privfd, tertiarypriv = mkstemp(prefix='', suffix='.priv', dir=d) pubfd, tertiarypub = mkstemp(prefix='', suffix='.pub', dir=d) os.write(privfd, privbytes) os.write(pubfd, pubbytes) finally: os.close(privfd) os.close(pubfd) return (tertiarypriv, tertiarypub, tertiarypubdata) def create_from_key_blobs(self, pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d): tertiarypub = keypaths[0] tertiarypriv = keypaths[1] pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) pobjauth = pobj['objauth'] try: ctx = tpm2.load(pobj_handle, pobjauth, tertiarypriv, tertiarypub) except RuntimeError as e: # Try swapping pub/priv tmp = tertiarypub tertiarypub = tertiarypriv tertiarypriv = tmp ctx = tpm2.load(pobj_handle, pobjauth, tertiarypriv, tertiarypub) tertiarypubdata, _ = tpm2.readpublic(ctx, False) return (tertiarypriv, tertiarypub, tertiarypubdata) # Links a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, keypaths, passin, d): if keypaths is None: sys.exit("Keypath must be specified") if len(keypaths) == 1: return self.create_from_tss_key(pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d) if len(keypaths) == 2: return self.create_from_key_blobs(pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d) sys.exit("Expected one or two keyblobs, got: {}".format(len(keypaths))) def __call__(self, args): self._auth = args['auth'] if 'auth' in args else None objects = super(LinkCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'link') tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/utils.py0000664000175000017500000003314314114236775015360 00000000000000# SPDX-License-Identifier: BSD-2-Clause import binascii import hashlib import os import argparse import sys import shutil import yaml from tempfile import mkdtemp from cryptography import exceptions as crypto_exceptions from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives.ciphers import (Cipher, algorithms, modes) from cryptography.hazmat.primitives.asymmetric import (rsa, padding) from cryptography.hazmat.primitives import hashes from pyasn1_modules import pem, rfc2459 from pyasn1.codec.der import decoder from pyasn1.codec.ber import encoder as berenc from pyasn1.codec.der import encoder as derenc from pyasn1.type import namedtype, tag, univ from .pkcs11t import * # noqa def str2bytes(s): if isinstance(s, str): return s.encode() return s def bytes_to_file(bites, tmpdir): path = os.path.join(tmpdir, "primary.handle") open(path, 'w+b').write(bites) return path def rand_hex_str(num=32): if num % 2: raise RuntimeError("Expected even number of bytes, got: %u" % num) return binascii.hexlify(os.urandom(num // 2)).decode() def hash_pass(password, salt=None): if salt is None: # get a 32 bit salt hex encoded (hex len 64) salt = rand_hex_str(64) # python 3.5.2 (doesn't seem to affect >= 3.5.6) is dumb... if isinstance(password, str): password = password.encode() if isinstance(salt, str): salt = salt.encode() m = hashlib.sha256(password) m.update(salt) # the TPM auth size is limited to 32 bytes in most cases digest = m.hexdigest()[:32] return { 'salt': salt, 'hash': digest, } def query_yes_no(question, default="no"): """Ask a yes/no question via input() and return their answer. "question" is a string that is presented to the user. "default" is the presumed answer if the user just hits . It must be "yes" (the default), "no" or None (meaning an answer is required of the user). The "answer" return value is True for "yes" or False for "no". """ valid = {"yes": True, "y": True, "ye": True, "no": False, "n": False} if default is None: prompt = " [y/n] " elif default == "yes": prompt = " [Y/n] " elif default == "no": prompt = " [y/N] " else: raise ValueError("invalid default answer: '%s'" % default) while True: sys.stdout.write(question + prompt) choice = input().lower() if default is not None and choice == '': return valid[default] elif choice in valid: return valid[choice] else: sys.stdout.write("Please respond with 'yes' or 'no' " "(or 'y' or 'n').\n") def load_sealobject(token, db, tpm2, pobjhandle, pobjauth, pin, is_so): sealobject = db.getsealobject(token['id']) if is_so: sealpub = sealobject['sopub'] sealpriv = sealobject['sopriv'] salt = sealobject['soauthsalt'] else: sealpub = sealobject['userpub'] sealpriv = sealobject['userpriv'] salt = sealobject['userauthsalt'] sealauth = hash_pass(pin.encode(), salt)['hash'] # Load the so sealobject using the PARENTS AUTH (primaryobject) sealctx = tpm2.load(pobjhandle, pobjauth, sealpriv, sealpub) return sealctx, sealauth class AESCipher: def __init__(self, key): self.key = key def encrypt(self, plaintext): # Generate a random 96-bit IV. iv = os.urandom(12) # Construct an AES-GCM Cipher object with the given key and a # randomly generated IV. encryptor = Cipher( algorithms.AES(self.key), modes.GCM(iv), backend=default_backend()).encryptor() ciphertext = encryptor.update(plaintext) + encryptor.finalize() iv = binascii.hexlify(iv).decode() ciphertext = binascii.hexlify(ciphertext).decode() tag = binascii.hexlify(encryptor.tag).decode() return ':'.join((iv, tag, ciphertext)) def decrypt(self, ciphertext): iv, tag, ciphertext = ciphertext.split(':') iv = binascii.unhexlify(iv) tag = binascii.unhexlify(tag) ciphertext = binascii.unhexlify(ciphertext) decryptor = Cipher( algorithms.AES(self.key), modes.GCM(iv, tag), backend=default_backend()).decryptor() plaintext = decryptor.update(ciphertext) + decryptor.finalize() return plaintext class TemporaryDirectory(object): """Context manager for tempfile.mkdtemp() so it's usable with "with" statement.""" def __enter__(self): self.name = mkdtemp() return self.name def __exit__(self, exc_type, exc_value, traceback): shutil.rmtree(self.name) class AESAuthUnwrapper(object): def __init__(self, key): self._cipher = AESCipher(binascii.unhexlify(key)) def unwrap(self, value): return self._cipher.decrypt(value) def wrap(self, value): return self._cipher.encrypt(value) # XXX # TODO move to the argparse handler module def str2bool(v): if v.lower() in ('yes', 'true', 't', 'y', '1'): return True elif v.lower() in ('no', 'false', 'f', 'n', '0'): return False else: raise argparse.ArgumentTypeError('Boolean value expected.') def get_ec_params(alg): """Return a string representation of a hex encoded ASN1 object X9.62 EC parameter http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html Indicates that EC parameters are byte arrays of a DER encoded ASN1 objects X9.62 parameter. This function will return a hex string without the leading 0x representing this encoding. """ if alg == "NIST p256": obj = "2A8648CE3D030107" elif alg == "NIST p224": obj = "2B81040021" elif alg == "NIST p384": obj = "2B81040022" elif alg == "NIST p521": obj = "2B81040023" else: raise RuntimeError("alg %s has no EC params mapping" % alg) # start building the DER object tag + len + obj in hex der = "06{:02x}{}".format(len(obj) // 2, obj) return der def asn1_format_ec_point_uncompressed(x, y): len_y = len(y) len_x = len(x) # normalize hex input to ensure no odd count hex strings if len_y % 2: len_y = len_y + 1 y = "00" + y if len_x % 2: len_x = len_x + 1 x = "00" + x # convert hex length to binary length len_y = len_y // 2 len_x = len_x // 2 # ensure that the binary representation fits into a byte total_len = len_y + len_x + 1 if (total_len > 255): raise RuntimeError( "Length of X and Y plus uncompressed format byte greater than 255") # The uncompressed point format is: # # 04 s = "04{len:02x}04{X}{Y}".format(len=total_len, X=x, Y=y) return s def pemcert_to_attrs(certpath): # rather than use pycryptography x509 parser, which gives native type access to certificate # fields use pyASN1 to get raw ASN1 encoded values for the fields as the spec requires them with open(certpath, "r") as f: substrate = pem.readPemFromFile(f) cert = decoder.decode(substrate, asn1Spec=rfc2459.Certificate())[0] c = cert['tbsCertificate'] # print(cert.prettyPrint()) h = binascii.hexlify b = berenc.encode d = derenc.encode bercert = b(cert) hexbercert = h(bercert).decode() # the CKA_CHECKSUM attrs is the first 3 bytes of a sha1hash m = hashlib.sha1() m.update(bercert) bercertchecksum = m.digest()[0:3] hexbercertchecksum = h(bercertchecksum).decode() subj = c['subject'] hexsubj = h(d(str2bytes(subj))).decode() issuer = c['issuer'] hexissuer = h(d(str2bytes(issuer))).decode() serial = c['serialNumber'] hexserial = h(d(str2bytes(serial))).decode() return { # The attrs of this attribute is derived by taking the first 3 bytes of the CKA_VALUE # field. CKA_CHECK_VALUE: hexbercertchecksum, # Start date for the certificate (default empty) CKA_START_DATE : "", # End date for the certificate (default empty) CKA_END_DATE : "", # DER-encoding of the SubjectPublicKeyInfo for the public key # contained in this certificate (default empty) CKA_PUBLIC_KEY_INFO : "", # DER encoded subject CKA_SUBJECT : hexsubj, # DER encoding of issuer CKA_ISSUER : hexissuer, # DER encoding of the cert serial CKA_SERIAL_NUMBER : hexserial, # BER encoding of the certificate CKA_VALUE : hexbercert, # RFC2279 string to URL where cert can be found, default empty CKA_URL : '', # hash of pub key subj, default empty CKA_HASH_OF_SUBJECT_PUBLIC_KEY : '', # Hash of pub key, default empty CKA_HASH_OF_ISSUER_PUBLIC_KEY : '', # Java security domain, default CK_SECURITY_DOMAIN_UNSPECIFIED CKA_JAVA_MIDP_SECURITY_DOMAIN : CK_SECURITY_DOMAIN_UNSPECIFIED, # Name hash algorithm, defaults to SHA1 CKA_NAME_HASH_ALGORITHM : CKM_SHA_1 } def _pkcs11_to_str(value, prefix): g = globals() submap = dict(filter(lambda elem: elem[0].startswith(prefix), g.items())) inv_map = {v: k for k, v in submap.items()} if value in inv_map: return inv_map[value] else: return '0x{:X}'.format(value) def pkcs11_cko_to_str(cko_value): return _pkcs11_to_str(cko_value, 'CKO_') def pkcs11_ckk_to_str(ckk_value): return _pkcs11_to_str(ckk_value, 'CKK_') def check_pss_signature(tpm2, pctx, pauth): (priv, pub, _) = tpm2.create(pctx, pauth=pauth) kctx = tpm2.load(pctx, pauth, priv, pub) (details, _) = tpm2.readpublic(kctx, False) y = yaml.safe_load(details) e = y['exponent'] if y['exponent'] != 0 else 65537 n = int(y['rsa'], 16) pub_numbers = rsa.RSAPublicNumbers(e, n) public_key = pub_numbers.public_key(default_backend()) message = b'message' signature = tpm2.sign(kctx, 'sha256', 'rsapss', message) try: public_key.verify( signature, message, padding.PSS( mgf=padding.MGF1(hashes.SHA256()), salt_length=hashes.SHA256().digest_size ), hashes.SHA256() ) return True except crypto_exceptions.InvalidSignature: # saltLen = key_size_bytes - hash_size_bytes - 2; # If this fails, we're in some messed up position # PSS sigs are neither hlen == slen nor max(slen), # so we will fail loudly public_key.verify( signature, message, padding.PSS( mgf=padding.MGF1(hashes.SHA256()), salt_length=padding.PSS.MAX_LENGTH ), hashes.SHA256() ) return False class TSSPrivKey(univ.Sequence): ''' Parse the ASN1 Sequence and provide the public and private blobs ASN1_SEQUENCE(TSSPRIVKEY) = { ASN1_SIMPLE(TSSPRIVKEY, type, ASN1_OBJECT), ASN1_EXP_OPT(TSSPRIVKEY, emptyAuth, ASN1_BOOLEAN, 0), ASN1_SIMPLE(TSSPRIVKEY, parent, ASN1_INTEGER), ASN1_SIMPLE(TSSPRIVKEY, pubkey, ASN1_OCTET_STRING), ASN1_SIMPLE(TSSPRIVKEY, privkey, ASN1_OCTET_STRING) } ASN1_SEQUENCE_END(TSSPRIVKEY) ''' componentType = namedtype.NamedTypes( namedtype.NamedType('type', univ.ObjectIdentifier()), namedtype.OptionalNamedType('emptyauth', univ.Boolean().subtype( explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0) )), namedtype.NamedType('parent', univ.Integer()), namedtype.NamedType('pubkey', univ.OctetString()), namedtype.NamedType('privkey', univ.OctetString()) ) def asn1parse_tss_key(keypath): tss2_startmarker='-----BEGIN TSS2 PRIVATE KEY-----' tss2_endmarker='-----END TSS2 PRIVATE KEY-----' with open(keypath, 'r') as f: substrate = pem.readPemFromFile(f, startMarker=tss2_startmarker, endMarker=tss2_endmarker) if len(substrate) == 0: sys.exit('Did not find key in tss key file: {}'.format(keypath)) tss2_privkey, _ = decoder.decode(substrate, asn1Spec=TSSPrivKey()) return tss2_privkey def create_primary(tpm2, hierarchyauth, pobjauth, template=None): details = tpm2.TEMPLATES[template] alg = details['alg'] attrs = details['attrs'] if template == 'tss2-engine-key': supported = tpm2.getcap('algorithms') supported = yaml.safe_load(supported) if 'ecc' in supported: alg = 'ecc256' elif 'rsa' in supported: alg = 'rsa2048' else: sys.exit('TPM Supports neither RSA nor ECC') return tpm2.createprimary(hierarchyauth, pobjauth, alg=alg, attrs=attrs) def get_pobject(pobject, tpm2, hierarchyauth, d): pobjconf = yaml.safe_load(pobject['config']) pobjauth = pobject['objauth'] if pobjconf['transient'] is True: selection = pobjconf['template-name'] pobj_handle = create_primary(tpm2, hierarchyauth, pobjauth, selection) else: tr_handle = binascii.unhexlify(pobjconf['esys-tr']) pobj_handle = bytes_to_file(tr_handle, d) return pobj_handletpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/tpm2.py0000664000175000017500000003151714114240163015067 00000000000000# SPDX-License-Identifier: BSD-2-Clause from __future__ import print_function import os import sys from tempfile import mkstemp, NamedTemporaryFile import uuid from subprocess import Popen, PIPE from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives.asymmetric.ec import EllipticCurvePrivateKey from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey from .utils import str2bytes class Tpm2(object): TPM2_RH_OWNER = 0x40000001 TPM2_HR_SHIFT = 24 TPM2_HT_PERSISTENT = 0x81 _TSS2_DEFAULT_ATTRS = "userwithauth|restricted|decrypt|noda|fixedtpm" \ "|fixedparent|sensitivedataorigin" ALGS = [ 'rsa1024', 'rsa2048', 'rsa3072', 'rsa4096', 'aes128', 'aes256', 'ecc224', 'ecc256', 'ecc384', 'ecc521', 'hmac:sha1', 'hmac:sha256', 'hmac:sha384', 'hmac:sha512' ] TEMPLATES = { # tpm2-tools default RSA2048 primary, same as tss2-engine-key None : { 'alg' : None, 'attrs' : None }, # tpm2-tools key compatible with RSA 2048, same as None 'tpm2-tools-default' : { 'alg' : None, 'attrs' : None }, # tpm2-tools key compatible with EC P256 'tpm2-tools-ecc-default' : { 'alg' : 'ecc', 'attrs' : None }, # tss2-engine key 'tss2-engine-key' : { 'alg' : None, 'attrs' : _TSS2_DEFAULT_ATTRS } } def __init__(self, tmp): self._tmp = tmp @property def tmpdir(self): return self._tmp def createprimary(self, hierarchyauth=None, objauth=None, alg=None, attrs=None,): ctx = os.path.join(self._tmp, "context.out") cmd = [ 'tpm2_createprimary', '-c', ctx, '-g', 'sha256' ] if alg is None: alg = 'rsa' cmd.extend(['-G', alg]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if hierarchyauth and len(hierarchyauth) > 0: cmd.extend(['-P', hierarchyauth]) if attrs is not None: cmd.extend(['-a', attrs]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_createprimary: %s" % stderr) return ctx def evictcontrol(self, hierarchyauth, ctx, handle=None): tr_file = os.path.join(self._tmp, "primary.handle") cmd = ['tpm2_evictcontrol', '-c', str(ctx), '-o', tr_file] if hierarchyauth and len(hierarchyauth) > 0: cmd.extend(['-P', hierarchyauth]) if handle: cmd.append(str(handle)) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_evictcontrol: %s" % stderr) return tr_file def readpublic(self, handle, get_tr_file=True): tr_file = os.path.join(self._tmp, "primary.handle") cmd = ['tpm2_readpublic', '-c', str(handle)] if get_tr_file: cmd.extend(['-t', tr_file]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_readpublic: %s" % stderr) return (stdout, tr_file if get_tr_file else None) def load(self, pctx, pauth, priv, pub): if priv != None and not isinstance(priv, str): sealprivf = NamedTemporaryFile() sealprivf.write(priv) sealprivf.flush() priv = sealprivf.name if not isinstance(pub, str): sealpubf = NamedTemporaryFile() sealpubf.write(pub) sealpubf.flush() pub = sealpubf.name ctx = os.path.join(self._tmp, uuid.uuid4().hex + '.out') #tpm2_load -C $file_primary_key_ctx -u $file_load_key_pub -r $file_load_key_priv -n $file_load_key_name -c $file_load_key_ctx if priv != None: cmd = [ 'tpm2_load', '-C', str(pctx), '-u', pub, '-r', priv, '-n', '/dev/null', '-c', ctx ] if pauth is not None: cmd.extend(['-P', pauth]) else: cmd = ['tpm2_loadexternal', '-u', pub, '-c', ctx] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_load: %s" % stderr) return ctx def unseal(self, ctx, auth): # tpm2_unseal -Q -c $file_unseal_key_ctx cmd = ['tpm2_unseal', '-c', ctx, '-p', auth] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_unseal: %s" % stderr) return stdout def _encryptdecrypt(self, ctx, auth, data, decrypt=False): cmd = ['tpm2_encryptdecrypt', '-c', ctx, '-p', auth] if decrypt: cmd.extend(['-d']) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=data) rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_encryptdecrypt: %s" % stderr) return stdout def encrypt(self, ctx, auth, data): return self._encryptdecrypt(ctx, auth, data) def decrypt(self, ctx, auth, data): return self._encryptdecrypt(ctx, auth, data, decrypt=True) def create(self, phandle, pauth=None, objauth=None, objattrs=None, seal=None, alg=None): # tpm2_create -Q -C context.out -g $gAlg -G $GAlg -u key.pub -r key.priv privfd, priv = mkstemp(prefix='', suffix='.priv', dir=self._tmp) os.close(privfd) pubfd, pub = mkstemp(prefix='', suffix='.pub', dir=self._tmp) os.close(pubfd) cmd = ['tpm2_create', '-C', str(phandle), '-u', pub, '-r', priv] if pauth and len(pauth) > 0: cmd.extend(['-P', '%s' % pauth]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if objattrs != None: cmd.extend(['-a', objattrs]) if seal != None: cmd.extend(['-i', '-']) if alg != None: cmd.extend(['-G', alg]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=str2bytes(seal)) rc = p.wait() if (rc != 0): os.remove(pub) os.remove(priv) raise RuntimeError("Could not execute tpm2_create: %s" % str(stderr)) return priv, pub, stdout def getcap(self, cap): # tpm2_getcap -Q -l $cap cmd = ['tpm2_getcap', cap] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_getcap: %s" % stderr) return stdout def importkey(self, phandle, pauth, objauth, privkey, objattrs=None, seal=None, alg=None, passin=None): if privkey and len(privkey) > 0: exists = os.path.isfile(privkey) if not exists: raise RuntimeError("File '%s' path is invalid or is missing" % privkey) else: sys.exit("Invalid file path") privfd, priv = mkstemp(prefix='', suffix='.priv', dir=self._tmp) os.close(privfd) pubfd, pub = mkstemp(prefix='', suffix='.pub', dir=self._tmp) os.close(pubfd) # If the key is an OpenSSH key, convert it to PEM format pem_priv_name = None with open(privkey, "rb") as f: privey_data = f.read() if privey_data.startswith(b'-----BEGIN OPENSSH PRIVATE KEY-----'): if passin: # Parse passin to extract the password if passin.startswith('env:'): password_bytes = os.getenvb(passin[4:].encode()) elif passin.startswith('file:'): with open(passin[5:], 'rb') as f: password_bytes = f.read() elif passin.startswith('pass:'): password_bytes = passin[5:].encode() else: raise NotImplementedError("Unsupported OpenSSL password input {} to read OpenSSH key".format( repr(passin))) enc_alg = serialization.BestAvailableEncryption(password_bytes) else: password_bytes = None enc_alg = serialization.NoEncryption() ssh_key = serialization.load_ssh_private_key(privey_data, password=password_bytes) if alg is None: # Find the algorithm if isinstance(ssh_key, EllipticCurvePrivateKey): alg = 'ecc' elif isinstance(ssh_key, RSAPrivateKey): alg = 'rsa' else: raise NotImplementedError("Unsupported SSH key type {}".format(type(ssh_key))) pem_key = ssh_key.private_bytes( encoding=serialization.Encoding.PEM, format=serialization.PrivateFormat.TraditionalOpenSSL, encryption_algorithm=enc_alg) pem_priv_fd, pem_priv_name = mkstemp(prefix='', suffix='.privpem', dir=self._tmp) os.write(pem_priv_fd, pem_key) os.close(pem_priv_fd) privkey = pem_priv_name elif alg is None: # Guess the key algorithm from the PEM header if privey_data.startswith(b'-----BEGIN EC PARAMETERS-----'): alg = 'ecc' elif privey_data.startswith(b'-----BEGIN EC PRIVATE KEY-----'): alg = 'ecc' elif privey_data.startswith(b'-----BEGIN RSA PRIVATE KEY-----'): alg = 'rsa' else: raise RuntimeError("Unable to detect key type, use --algorithm to specify it") parent_path = str(phandle) cmd = [ 'tpm2_import', '-V', '-C', parent_path, '-i', privkey, '-u', pub, '-r', priv ] if pauth and len(pauth) > 0: cmd.extend(['-P', pauth]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if objattrs != None: cmd.extend(['-a', objattrs]) if seal != None: cmd.extend(['-i', '-']) if alg != None: cmd.extend(['-G', alg]) if passin is not None: cmd.extend(['--passin', passin]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=seal) rc = p.wait() if pem_priv_name is not None: os.remove(pem_priv_name) if (rc != 0): os.remove(pub) os.remove(priv) print("command: %s" % str(" ".join(cmd))) raise RuntimeError("Could not execute tpm2_import: %s" % stderr) return priv, pub, stdout def changeauth(self, pctx, objctx, oldobjauth, newobjauth): newpriv = os.path.join(self._tmp, uuid.uuid4().hex + '.priv') cmd = [ 'tpm2_changeauth', '-C', str(pctx), '-c', str(objctx), '-p', oldobjauth, '-r', newpriv, newobjauth, ] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_changeauth: %s" % stderr) return newpriv def sign(self, ctx, halg, scheme, message): sig = os.path.join(self._tmp, uuid.uuid4().hex + '.dat') cmd = [ 'tpm2_sign', '-c', str(ctx), '-g', halg, '-s', scheme, '-f', 'plain', '-o', sig ] p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=str2bytes(message)) rc = p.wait() if (rc != 0): print("command: %s" % str(" ".join(cmd))) raise RuntimeError("Could not execute tpm2_import: %s" % str(stderr)) data = open(sig, "rb").read() os.unlink(sig) return data tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/tpm2_ptool.py0000644000175000017500000000231113754763565016321 00000000000000# SPDX-License-Identifier: BSD-2-Clause from .command import commandlet # These imports are required to add the commandlet even though they appear unused # Store level commands from .commandlets_store import InitCommand # pylint: disable=unused-import # noqa from .commandlets_store import DestroyCommand # pylint: disable=unused-import # noqa # Token Level Commands from .commandlets_token import AddTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import AddEmptyTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import RmTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import VerifyCommand # pylint: disable=unused-import # noqa from .commandlets_token import InitPinCommand # pylint: disable=unused-import # noqa from .commandlets_token import ChangePinCommand # pylint: disable=unused-import # noqa from .commandlets_keys import AddKeyCommand # pylint: disable=unused-import # noqa from .commandlets_keys import ImportCommand # pylint: disable=unused-import # noqa def main(): '''The main entry point.''' commandlet.init('A tool for manipulating the tpm2-pkcs11 database') if __name__ == '__main__': main() tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/pkcs11t.py0000664000175000017500000000537614114240163015477 00000000000000# SPDX-License-Identifier: BSD-2-Clause # These CK* values come from the PKCS#11 spec CKO_CERTIFICATE = 0x1 CKO_PUBLIC_KEY = 0x2 CKO_PRIVATE_KEY = 0x3 CKO_SECRET_KEY = 0x4 CKK_RSA = 0x0 CKK_EC = 0x3 CKK_GENERIC_SECRET = 0x10 CKK_AES = 0x1f CKK_SHA_1_HMAC = 0x28 CKK_SHA256_HMAC=0x2b CKK_SHA384_HMAC=0x2c CKK_SHA512_HMAC=0x2d CKM_RSA_PKCS_KEY_PAIR_GEN = 0x0 CKM_RSA_PKCS = 0x1 CKM_RSA_X_509 = 0x3 CKM_SHA1_RSA_PKCS = 0x6 CKM_RSA_PKCS_OAEP = 0x9 CKM_RSA_PKCS_PSS = 0xD CKM_SHA1_RSA_PKCS_PSS = 0xE CKM_SHA256_RSA_PKCS = 0x40 CKM_SHA384_RSA_PKCS = 0x41 CKM_SHA512_RSA_PKCS = 0x42 CKM_SHA256_RSA_PKCS_PSS = 0x43 CKM_SHA384_RSA_PKCS_PSS = 0x44 CKM_SHA512_RSA_PKCS_PSS = 0x45 CKM_GENERIC_SECRET_KEY_GEN = 0x350 CKM_AES_CBC = 0x1082 CKM_AES_CBC_PAD = 0x1085 CKM_EC_KEY_PAIR_GEN = 0x1040 CKM_ECDSA = 0x1041 CKM_ECDSA_SHA1 = 0x1042 CKM_ECDSA_SHA256 = 0x1044 CKM_ECDSA_SHA384 = 0x1045 CKM_ECDSA_SHA512 = 0x1046 CKM_AES_KEY_GEN = 0x1080 CKM_AES_ECB = 0x1081 CKM_AES_CTR = 0x1086 CKM_SHA_1 = 0x220 CKG_MGF1_SHA1 = 0x1 CKM_AES_OFB = 0x2104 CKM_AES_CFB128 = 0x2107 CKM_SHA_1_HMAC = 0x221 CKM_SHA256_HMAC = 0x251 CKM_SHA384_HMAC = 0x261 CKM_SHA512_HMAC = 0x271 CKG_MGF1_SHA256 = 0x2 CKA_CLASS = 0x0 CKA_TOKEN = 0x1 CKA_PRIVATE = 0x2 CKA_LABEL = 0x3 CKA_VALUE = 0x11 CKA_CERTIFICATE_TYPE = 0x80 CKA_ISSUER = 0x81 CKA_SERIAL_NUMBER = 0x82 CKA_TRUSTED = 0x86 CKA_CERTIFICATE_CATEGORY = 0x87 CKA_JAVA_MIDP_SECURITY_DOMAIN = 0x88 CKA_URL = 0x89 CKA_CHECK_VALUE = 0x90 CKA_HASH_OF_SUBJECT_PUBLIC_KEY = 0x8A CKA_HASH_OF_ISSUER_PUBLIC_KEY = 0x8B CKA_NAME_HASH_ALGORITHM = 0x8C CKA_KEY_TYPE = 0x100 CKA_SUBJECT = 0x101 CKA_ID = 0x102 CKA_SENSITIVE = 0x103 CKA_ENCRYPT = 0x104 CKA_DECRYPT = 0x105 CKA_WRAP = 0x106 CKA_UNWRAP = 0x107 CKA_SIGN = 0x108 CKA_SIGN_RECOVER = 0x109 CKA_VERIFY = 0x10A CKA_VERIFY_RECOVER = 0x10B CKA_DERIVE = 0x10C CKA_START_DATE = 0x110 CKA_END_DATE = 0x111 CKA_MODULUS = 0x120 CKA_MODULUS_BITS = 0x121 CKA_PUBLIC_EXPONENT = 0x122 CKA_PUBLIC_KEY_INFO = 0x129 CKA_VALUE_LEN = 0x161 CKA_EXTRACTABLE = 0x162 CKA_LOCAL = 0x163 CKA_NEVER_EXTRACTABLE = 0x164 CKA_ALWAYS_SENSITIVE = 0x165 CKA_KEY_GEN_MECHANISM = 0x166 CKA_MODIFIABLE = 0x170 CKA_COPYABLE = 0x171 CKA_DESTROYABLE = 0x172 CKA_EC_PARAMS = 0x180 CKA_EC_POINT = 0x181 CKA_ALWAYS_AUTHENTICATE = 0x202 CKA_WRAP_WITH_TRUSTED = 0x210 CKA_WRAP_TEMPLATE=0x40000211 CKA_UNWRAP_TEMPLATE=0x40000212 CKA_ALLOWED_MECHANISMS=0x40000600 CKA_VENDOR_DEFINED=0x80000000 CKA_VENDOR_TPM2_DEFINED=0x0F000000 # We will allow these to be accessed, but the values are not stable CKA_TPM2_OBJAUTH_ENC=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x1 CKA_TPM2_PUB_BLOB=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x2 CKA_TPM2_PRIV_BLOB=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x3 CKC_X_509 = 0 CK_SECURITY_DOMAIN_UNSPECIFIED = 0x0 CK_CERTIFICATE_CATEGORY_UNSPECIFIED = 0x0 tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/objects.py0000664000175000017500000004624114114240163015636 00000000000000# SPDX-License-Identifier: BSD-2-Clause import binascii import yaml # local imports from .utils import get_ec_params from .utils import asn1_format_ec_point_uncompressed from .utils import str2bytes from .pkcs11t import * # noqa class PKCS11Object(dict): def __init__(self, objclass, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11Object, self).__init__() attrs[CKA_CLASS] = objclass if auth is not None and tpm_priv: # hexencode the ENC obj auth string because str are hex encoded attrs[CKA_TPM2_OBJAUTH_ENC] = binascii.hexlify(str2bytes(auth)).decode() # # the priv/pub tpm objects are paths to where they are stored, so # read them and convert to hex # privhex=None if tpm_priv is not None: with open(tpm_priv, "rb") as f: privhex = binascii.hexlify(f.read()).decode() pubhex=None if tpm_pub is not None: with open(tpm_pub, "rb") as f: pubhex = binascii.hexlify(f.read()).decode() if pubhex is not None: attrs[CKA_TPM2_PUB_BLOB] = pubhex if privhex is not None: attrs[CKA_TPM2_PRIV_BLOB] = privhex self.update(attrs) def genmechs(self, tpm2): raise NotImplementedError() class PKCS11StorageObject(PKCS11Object): def __init__(self, objclass, attrs, auth=None, tpm_priv=None, tpm_pub=None): defpriv = objclass in [CKO_PRIVATE_KEY, CKO_SECRET_KEY] add = { CKA_TOKEN: True, CKA_PRIVATE: attrs[CKA_PRIVATE] if CKA_PRIVATE in attrs else defpriv, CKA_MODIFIABLE: False, CKA_LABEL: attrs[CKA_LABEL] if CKA_LABEL in attrs else '', CKA_COPYABLE: False, CKA_DESTROYABLE: True } attrs.update(add) super(PKCS11StorageObject, self).__init__(objclass, attrs, auth, tpm_priv, tpm_pub) class PKCS11CertificateObject(PKCS11StorageObject): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_CERTIFICATE_TYPE: objtype, CKA_TRUSTED : False, CKA_CERTIFICATE_CATEGORY: attrs[CKA_CERTIFICATE_CATEGORY] if CKA_CERTIFICATE_CATEGORY in attrs else CK_CERTIFICATE_CATEGORY_UNSPECIFIED, CKA_CHECK_VALUE: attrs[CKA_CHECK_VALUE] } attrs.update(add) super(PKCS11CertificateObject, self).__init__(CKO_CERTIFICATE, attrs, auth, tpm_priv, tpm_pub) class PKCS11X509(PKCS11CertificateObject): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11X509, self).__init__(CKC_X_509, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm2): # X509 objects do not have mechanisms pass class PKCS11Key(PKCS11StorageObject): def __init__(self, objclass, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { # type of key CKA_KEY_TYPE : objtype, # Key identifier for key (default empty) CKA_ID : attrs[CKA_ID] if CKA_ID in attrs else '', # Start date for the key (default empty) CKA_START_DATE: attrs[CKA_START_DATE] if CKA_START_DATE in attrs else '', # End date for the key (default empty) CKA_END_DATE: attrs[CKA_END_DATE] if CKA_END_DATE in attrs else '', # CK_TRUE if generated in TPM else FALSE CKA_LOCAL: attrs[CKA_LOCAL], # The mechanism used to generate the key CKA_KEY_GEN_MECHANISM: attrs[CKA_KEY_GEN_MECHANISM], # A list of mechanisms allowed to be used with this key # no default listed, but for now just make empty # this is later updated by gen_mech CKA_ALLOWED_MECHANISMS: attrs[CKA_ALLOWED_MECHANISMS] if CKA_ALLOWED_MECHANISMS in attrs else '', CKA_DERIVE: attrs[CKA_DERIVE] if CKA_DERIVE in attrs else False } attrs.update(add) super(PKCS11Key, self).__init__(objclass, attrs, auth, tpm_priv, tpm_pub) class PKCS11PublicKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_SUBJECT: attrs[CKA_SUBJECT] if CKA_SUBJECT in attrs else '', CKA_ENCRYPT: attrs[CKA_ENCRYPT], CKA_VERIFY: attrs[CKA_VERIFY], CKA_VERIFY_RECOVER: False, CKA_WRAP: False, CKA_TRUSTED: False, CKA_WRAP_TEMPLATE: attrs[CKA_WRAP_TEMPLATE] if CKA_WRAP_TEMPLATE in attrs else '', # TODO generate CKA_PUBLIC_KEY_INFO: '' } attrs.update(add) super(PKCS11PublicKey, self).__init__(CKO_PUBLIC_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11RSAPublicKey(PKCS11PublicKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_MODULUS_BITS: attrs[CKA_MODULUS_BITS], } attrs.update(add) super(PKCS11RSAPublicKey, self).__init__(CKK_RSA, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): pubmech = PKCS11RSAPublicKey.rsa_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: pubmech}) @staticmethod def rsa_gen_mechs_common(tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) # TPM's always support these mechs = [ CKM_RSA_X_509, CKM_RSA_PKCS_OAEP, CKM_RSA_PKCS, CKM_SHA256_RSA_PKCS, # Internally we can synthesize CKM_SHAXXX_RSA_PKCS # so just add them CKM_SHA384_RSA_PKCS, CKM_SHA512_RSA_PKCS, ] if 'rsapss' in y: l = [ CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, ] if 'sha384' in y: l.append(CKM_SHA384_RSA_PKCS_PSS) if 'sha512' in y: l.append(CKM_SHA512_RSA_PKCS_PSS) mechs.extend(l) return mechs class PKCS11ECPublicKey(PKCS11PublicKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_EC_POINT: attrs[CKA_EC_POINT], CKA_EC_PARAMS: attrs[CKA_EC_PARAMS], } attrs.update(add) super(PKCS11ECPublicKey, self).__init__(CKK_EC, attrs, auth, tpm_priv, tpm_pub) @staticmethod def ecc_gen_mechs_common(tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) # TPM's always support these mechs = [ CKM_ECDSA, CKM_ECDSA_SHA1, CKM_ECDSA_SHA256 ] if 'sha384' in y: mechs.append(CKM_ECDSA_SHA384) if 'sha512' in y: mechs.append(CKM_ECDSA_SHA512) return mechs def genmechs(self, tpm): pubmech = PKCS11ECPublicKey.ecc_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: pubmech}) class PKCS11PrivateKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_SENSITIVE: True, CKA_SUBJECT: attrs[CKA_SUBJECT] if CKA_SUBJECT in attrs else '', CKA_DECRYPT: attrs[CKA_DECRYPT], CKA_SIGN: attrs[CKA_SIGN], CKA_SIGN_RECOVER: False, CKA_UNWRAP: False, CKA_EXTRACTABLE: attrs[CKA_EXTRACTABLE], CKA_ALWAYS_SENSITIVE: attrs[CKA_ALWAYS_SENSITIVE], CKA_NEVER_EXTRACTABLE: attrs[CKA_NEVER_EXTRACTABLE], CKA_WRAP_WITH_TRUSTED: False, CKA_UNWRAP_TEMPLATE: attrs[CKA_UNWRAP_TEMPLATE] if CKA_UNWRAP_TEMPLATE in attrs else [], CKA_ALWAYS_AUTHENTICATE: attrs[CKA_ALWAYS_AUTHENTICATE] if CKA_ALWAYS_AUTHENTICATE in attrs else False, CKA_PUBLIC_KEY_INFO: '' } attrs.update(add) super(PKCS11PrivateKey, self).__init__(CKO_PRIVATE_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11RSAPrivateKey(PKCS11PrivateKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_MODULUS: attrs[CKA_MODULUS], CKA_PUBLIC_EXPONENT: attrs [CKA_PUBLIC_EXPONENT], } attrs.update(add) super(PKCS11RSAPrivateKey, self).__init__(CKK_RSA, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): privmech = PKCS11RSAPublicKey.rsa_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: privmech}) class PKCS11ECPrivateKey(PKCS11PrivateKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_EC_POINT: attrs[CKA_EC_POINT], CKA_EC_PARAMS: attrs[CKA_EC_PARAMS], } attrs.update(add) super(PKCS11ECPrivateKey, self).__init__(CKK_EC, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): privmech = PKCS11ECPublicKey.ecc_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: privmech}) class PKCS11SecretKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): # If a caller doesn't specify the attribute it matters what kind of key it is. HMAC # keys don't decrypt/encrypt they verify/sign, where as AES keys do the former. def _get_encdec(_a, value, defvalue): if _a in attrs: return attrs[_a] if objtype in [ CKK_SHA_1_HMAC, CKK_SHA256_HMAC, CKK_SHA384_HMAC, CKK_SHA512_HMAC ]: return value; return defvalue add = { CKA_SENSITIVE: True, CKA_ENCRYPT: _get_encdec(CKA_ENCRYPT, False, True), CKA_DECRYPT: _get_encdec(CKA_DECRYPT, False, True), CKA_SIGN: _get_encdec(CKA_SIGN, True, False), CKA_VERIFY: _get_encdec(CKA_VERIFY, True, False), CKA_WRAP: False, CKA_UNWRAP: False, CKA_EXTRACTABLE: attrs[CKA_EXTRACTABLE], CKA_ALWAYS_SENSITIVE: attrs[CKA_ALWAYS_SENSITIVE], CKA_NEVER_EXTRACTABLE: attrs[CKA_NEVER_EXTRACTABLE], # TODO Skipping CKA_CHECKVALUE CKA_WRAP_WITH_TRUSTED: False, CKA_TRUSTED: False, CKA_WRAP_TEMPLATE: attrs[CKA_WRAP_TEMPLATE] if CKA_WRAP_TEMPLATE in attrs else [], CKA_UNWRAP_TEMPLATE: '', # placate pkcs11 tool CKA_VALUE: '', CKA_VALUE_LEN: attrs[CKA_VALUE_LEN], } attrs.update(add) super(PKCS11SecretKey, self).__init__(CKO_SECRET_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11AESKey(PKCS11SecretKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11AESKey, self).__init__(CKK_AES, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) mechs = [] if 'cbc' in y: mechs.append(CKM_AES_CBC) mechs.append(CKM_AES_CBC_PAD) if 'cfb' in y: mechs.append(CKM_AES_CFB128) if 'ecb' in y: mechs.append(CKM_AES_ECB) if 'ofb' in y: mechs.append(CKM_AES_OFB) if 'ctr' in y: mechs.append(CKM_AES_CTR) if len(mechs) == 0: raise RuntimeError('Cannot add AES key without TPM supported mechanisms') self.update({CKA_ALLOWED_MECHANISMS: mechs}) class PKCS11HMACKey(PKCS11SecretKey): def __init__(self, ckk_keytype, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11HMACKey, self).__init__(ckk_keytype, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): ckk_to_ckm = { CKK_SHA_1_HMAC : CKM_SHA_1_HMAC, CKK_SHA256_HMAC : CKM_SHA256_HMAC, CKK_SHA384_HMAC : CKM_SHA384_HMAC, CKK_SHA512_HMAC : CKM_SHA512_HMAC } mechs = [] key_type = self[CKA_KEY_TYPE] if key_type == CKK_GENERIC_SECRET: capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) if 'sha1' in y: mechs.append(CKM_SHA_1_HMAC) if 'sha256' in y: mechs.append(CKM_SHA256_HMAC) if 'sha384' in y: mechs.append(CKM_SHA384_HMAC) if 'sha512' in y: mechs.append(CKM_SHA512_HMAC) elif key_type in ckk_to_ckm: mechs.append(ckk_to_ckm[key_type]) else: raise RuntimeError(f'Cannot handle HMAC Key of CKA_KEY_TYPE: {key_type:#x}') if len(mechs) == 0: raise RuntimeError("Expected at least one supported mechanism, got none") self.update({CKA_ALLOWED_MECHANISMS: mechs}) def PKCS11ObjectFactory(public_yaml_data, tpm, auth, init_pubattrs, init_privattrs, tpm_pub, tpm_priv, override_keylen=None): objtype = public_yaml_data['type']['value'] tpmattrs=public_yaml_data['attributes']['value'].split('|') # if we need to support non-null schemes we need to map tpm2 alg to pkcs11 alg # and populate CKA_ALLOWED_MECHANISMS and skip calling genmechs() scheme = public_yaml_data['scheme']['value'] if 'scheme' in public_yaml_data else None if scheme != None: raise RuntimeError('Cannot map scheme to allowed mechanism, got: "{}"'.format(scheme)) pubkey=None privkey=None pubattrs = init_pubattrs if init_pubattrs else {} privattrs = init_privattrs if init_pubattrs else {} if objtype == 'rsa': exp = public_yaml_data['exponent'] if int(public_yaml_data['exponent']) != 0 else 65537 exp = '{0:X}'.format(exp) # if it's odd in len, pad it with a leading zero if len(exp) % 2: exp = '0{}'.format(exp) pubattrs[CKA_MODULUS] = public_yaml_data['rsa'] pubattrs[CKA_MODULUS_BITS] = public_yaml_data['bits'] pubattrs[CKA_PUBLIC_EXPONENT] = exp pubattrs[CKA_ENCRYPT] = 'sign' in tpmattrs pubattrs[CKA_VERIFY] = 'decrypt' in tpmattrs pubattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs pubattrs[CKA_KEY_GEN_MECHANISM] = CKM_RSA_PKCS_KEY_PAIR_GEN privattrs[CKA_MODULUS] = pubattrs[CKA_MODULUS] privattrs[CKA_MODULUS_BITS] = pubattrs[CKA_MODULUS_BITS] privattrs[CKA_PUBLIC_EXPONENT] = pubattrs[CKA_PUBLIC_EXPONENT] privattrs[CKA_LOCAL] = pubattrs[CKA_LOCAL] privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_KEY_GEN_MECHANISM] = CKM_RSA_PKCS_KEY_PAIR_GEN pubkey = PKCS11RSAPublicKey(pubattrs, auth, tpm_pub=tpm_pub) privkey = PKCS11RSAPrivateKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'ecc': curveid = public_yaml_data['curve-id']['value'] ecparams = get_ec_params(curveid) ecpoint = asn1_format_ec_point_uncompressed(public_yaml_data['x'], public_yaml_data['y']) pubattrs[CKA_EC_PARAMS] = ecparams pubattrs[CKA_EC_POINT] = ecpoint pubattrs[CKA_ENCRYPT] = 'sign' in tpmattrs pubattrs[CKA_VERIFY] = 'decrypt' in tpmattrs pubattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs pubattrs[CKA_KEY_GEN_MECHANISM] = CKM_EC_KEY_PAIR_GEN privattrs[CKA_LOCAL] = pubattrs[CKA_LOCAL] privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_EC_PARAMS] = pubattrs[CKA_EC_PARAMS] = ecparams privattrs[CKA_EC_POINT] = pubattrs[CKA_EC_POINT] = ecpoint privattrs[CKA_KEY_GEN_MECHANISM] = CKM_EC_KEY_PAIR_GEN pubkey = PKCS11ECPublicKey(pubattrs, auth, tpm_pub=tpm_pub) privkey = PKCS11ECPrivateKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'symcipher': symalg = public_yaml_data['sym-alg']['value'] if symalg != 'aes': raise RuntimeError('Cannot handle sym-alg: {}'.format(symalg)) privattrs[CKA_VALUE_LEN] = public_yaml_data['sym-keybits'] // 8 privattrs[CKA_KEY_GEN_MECHANISM] = CKM_AES_KEY_GEN privattrs[CKA_ENCRYPT] = 'sign' in tpmattrs privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privkey = PKCS11AESKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'keyedhash': alg = public_yaml_data['algorithm']['value'] # YAML converts the TPM2_ALG_NULL string of "null" to None, so we need to check against # raw to see if it is TPM2_ALG_NULL. If it is, we just igore it, as we can use any # supported HASH alg. if alg != 'hmac': if public_yaml_data['algorithm']['raw'] == 0x10: hashalg = 'null' else: raise RuntimeError('Cannot handle algorithm: {}'.format(alg)) else: hashalg = public_yaml_data['hash-alg']['value'] # Their is no PKCS11 metadata for genmechs to reliably determine what the allowed mechanisms are, # since inferring keytype from bytes is a best guess, set up the mechanisms now # since it's not TPM dependent. The allowed mechs are intentionally a list for future expansion. # The keygen mechanism should always go first in the list metadata = { 'sha1' : { 'keybytes' : 20, 'keytype' : CKK_SHA_1_HMAC }, 'sha256' : { 'keybytes' : 32, 'keytype' : CKK_SHA256_HMAC }, 'sha384' : { 'keybytes' : 48, 'keytype' : CKK_SHA384_HMAC }, 'sha512' : { 'keybytes' : 64, 'keytype' : CKK_SHA512_HMAC }, 'null' : { 'keybytes' : override_keylen, 'keytype' : CKK_GENERIC_SECRET } } if hashalg not in metadata: raise RuntimeError('Cannot handle hash algorithm: {}'.format(hashalg)) privattrs[CKA_VALUE_LEN] = metadata[hashalg]['keybytes'] privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_VERIFY] = True privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_KEY_GEN_MECHANISM] = CKM_GENERIC_SECRET_KEY_GEN privkey = PKCS11HMACKey(metadata[hashalg]['keytype'], privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) else: raise RuntimeError("Cannot handle keytype: {}".format(public_yaml_data['type'])) privkey.genmechs(tpm) if pubkey: pubkey.genmechs(tpm) return {'private' : privkey, 'public': pubkey } tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/db.py0000664000175000017500000005540114114240163014570 00000000000000# SPDX-License-Identifier: BSD-2-Clause import fcntl import io import os import sys import sqlite3 import textwrap import yaml from .pkcs11t import ( CKA_ALLOWED_MECHANISMS, CKA_CLASS, CKO_SECRET_KEY, CKO_PRIVATE_KEY, CKA_KEY_TYPE, CKM_AES_CBC_PAD, CKM_AES_CTR, CKK_AES, CKK_EC, CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512 ) VERSION = 7 # # With Db() as db: # // do stuff # class Db(object): def __init__(self, dirpath): self._path = os.path.join(dirpath, "tpm2_pkcs11.sqlite3") def __enter__(self): self._conn = sqlite3.connect(self._path) self._conn.row_factory = sqlite3.Row self._conn.execute('PRAGMA foreign_keys = ON;') self._create() return self @staticmethod def _blobify(path): with open(path, 'rb') as f: ablob = f.read() return sqlite3.Binary(ablob) def gettoken(self, label): c = self._conn.cursor() c.execute("SELECT * from tokens WHERE label=?", (label, )) x = c.fetchone() if x is None: sys.exit('No token labeled "%s"' % label) return x def getsealobject(self, tokid): c = self._conn.cursor() c.execute("SELECT * from sealobjects WHERE tokid=?", (tokid, )) x = c.fetchone() return x def getprimaries(self): c = self._conn.cursor() c.execute("SELECT * from pobjects") x = c.fetchall() return x def gettokens(self, pid): c = self._conn.cursor() c.execute("SELECT * from tokens WHERE pid=?", (pid, )) x = c.fetchall() return x def getobjects(self, tokid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE tokid=?", (tokid, )) x = c.fetchall() return x def rmtoken(self, label): # This works on the premise of a cascading delete tied by foreign # key relationships. self._conn.execute('DELETE from tokens WHERE label=?', (label, )) def getprimary(self, pid): c = self._conn.cursor() c.execute("SELECT * from pobjects WHERE id=?", (pid, )) x = c.fetchone() return x def rmprimary(self, pid): # This works on the premise of a cascading delete tied by foreign # key relationships. self._conn.execute('DELETE from pobjects WHERE id=?', (pid, )) def gettertiary(self, tokid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE tokid=?", (tokid, )) x = c.fetchall() return x def getobject(self, tid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE id=?", (tid, )) x = c.fetchone() return x def rmobject(self, tid): c = self._conn.cursor() c.execute("DELETE FROM tobjects WHERE id=?", (tid, )) def addtoken(self, pid, config, label=None): token = { # General Metadata 'pid': pid, 'config': yaml.dump(config, canonical=True) } if 'token-init=True' in token['config'] and label is None: raise RuntimeError('Expected label if token is to be initialized') if label: token['label'] = label columns = ', '.join(token.keys()) placeholders = ', '.join('?' * len(token)) sql = 'INSERT INTO tokens ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(token.values())) return c.lastrowid def updateconfig(self, token, config): new_config = yaml.dump(config, canonical=True) sql = 'UPDATE tokens SET config=? WHERE id=?' values = (new_config, token['id']) c = self._conn.cursor() c.execute(sql, values) def addsealobjects(self, tokid, usersealauth, usersealpriv, usersealpub, sosealauth, sosealpriv, sosealpub): sealobjects = { # General Metadata 'tokid': tokid, 'userpriv': Db._blobify(usersealpriv), 'userpub': Db._blobify(usersealpub), 'sopriv': Db._blobify(sosealpriv), 'sopub': Db._blobify(sosealpub), 'userauthsalt': usersealauth['salt'], 'soauthsalt': sosealauth['salt'], } columns = ', '.join(sealobjects.keys()) placeholders = ', '.join('?' * len(sealobjects)) sql = 'INSERT INTO sealobjects ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(sealobjects.values())) return c.lastrowid @staticmethod def addprimary_raw(cursor, tablename, config, objauth, hierarchy='o', pid=None): # Subordinate commands will need some of this data # when deriving subordinate objects, so pass it back pobject = { # General Metadata 'hierarchy': hierarchy, 'config': yaml.safe_dump(config, canonical=True), 'objauth': objauth, } if pid is not None: pobject['id'] = pid columns = ', '.join(pobject.keys()) placeholders = ', '.join('?' * len(pobject)) sql = 'INSERT INTO {} ({}) VALUES ({})'.format(tablename, columns, placeholders) cursor.execute(sql, list(pobject.values())) return cursor.lastrowid def addprimary(self, config, objauth, hierarchy='o'): c = self._conn.cursor() return self.addprimary_raw(c, 'pobjects', config, objauth, hierarchy) def addtertiary(self, tokid, pkcs11_object): tobject = { 'tokid': tokid, 'attrs': yaml.safe_dump(dict(pkcs11_object), canonical=True), } columns = ', '.join(tobject.keys()) placeholders = ', '.join('?' * len(tobject)) sql = 'INSERT INTO tobjects ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(tobject.values())) return c.lastrowid @staticmethod def _updatetertiary(db, tid, attrs): c = db.cursor() attrs = yaml.safe_dump(attrs, canonical=True) values = [attrs, tid] sql = 'UPDATE tobjects SET attrs=? WHERE id=?' c.execute(sql, values) def updatetertiary(self, tid, attrs): self._updatetertiary(self._conn, tid, attrs) def updatepin(self, is_so, token, sealauth, sealpriv, sealpub=None): tokid = token['id'] c = self._conn.cursor() # TABLE sealobjects UPDATE # [user|so]priv TEXT NOT NULL, # [user|so]pub TEXT NOT NULL, # [user|so]authsalt TEXT NOT NULL, if sealpub: sql = 'UPDATE sealobjects SET {}authsalt=?, {}priv=?, {}pub=? WHERE id=?;'.format( * ['so' if is_so else 'user'] * 3) c.execute(sql, (sealauth['salt'], Db._blobify(sealpriv), Db._blobify(sealpub), tokid)) else: sql = 'UPDATE sealobjects SET {}authsalt=?, {}priv=? WHERE id=?;'.format( * ['so' if is_so else 'user'] * 2) c.execute(sql, (sealauth['salt'], Db._blobify(sealpriv), tokid)) def commit(self): self._conn.commit() def __exit__(self, exc_type, exc_value, traceback): if (self._conn): self._conn.commit() self._conn.close() def delete(self): try: os.remove(self._path) except OSError: pass def backup(self): con = self._conn dbpath = self._path + ".bak" if os.path.exists(dbpath): raise RuntimeError("Backup DB exists at {} not overwriting. " "Refusing to run".format(dbpath)) bck = sqlite3.connect(dbpath) con.backup(bck) return (bck, dbpath) def _update_on_2(self, dbbakcon): ''' Between version 1 and 2 of the DB the following changes need to be made: The existing rows: - userpub BLOB NOT NULL, - userpriv BLOB NOT NULL, - userauthsalt TEXT NOT NULL, All have the "NOT NULL" constarint removed, like so: userpub BLOB, userpriv BLOB, userauthsalt TEXT So we need to create a new table with this constraint removed, copy the data and move the table back ''' # Create a new table to copy data to that has the constraints removed s = textwrap.dedent(''' CREATE TABLE sealobjects_new2( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, userpub BLOB, userpriv BLOB, userauthsalt TEXT, sopub BLOB NOT NULL, sopriv BLOB NOT NULL, soauthsalt TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); ''') dbbakcon.execute(s) # copy the data s = textwrap.dedent(''' INSERT INTO sealobjects_new2 SELECT * FROM sealobjects; ''') dbbakcon.execute(s) # Drop the old table s = 'DROP TABLE sealobjects;' dbbakcon.execute(s) # Rename the new table to the correct table name s = 'ALTER TABLE sealobjects_new2 RENAME TO sealobjects;' dbbakcon.execute(s) # Add the triggers sql = [ textwrap.dedent(''' CREATE TRIGGER limit_tokens BEFORE INSERT ON tokens BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tokens) >= 255 THEN RAISE(FAIL, "Maximum token count of 255 reached.") END; END; '''), textwrap.dedent(''' CREATE TRIGGER limit_tobjects BEFORE INSERT ON tobjects BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tobjects) >= 16777215 THEN RAISE(FAIL, "Maximum object count of 16777215 reached.") END; END; ''') ] for s in sql: dbbakcon.execute(s) def _update_on_3(self, dbbakcon): dbbakcon.execute('DROP TRIGGER limit_tobjects;') def _update_on_4(self, dbbakcon): ''' Between version 3 and 1 of the DB the following changes need to be made: Table pobjects: - column handle of type blob was changes to config of type string The YAML config has the handle of the ESYS_TR blob as a hex string. So to perform the upgrade, the code needs to create a new db and copy everything over and generate the new config YAML as: ---- persistent: true esys-tr: bytes.hex(handle) ''' # Create a new table to copy data to s = textwrap.dedent(''' CREATE TABLE pobjects2 ( id INTEGER PRIMARY KEY, hierarchy TEXT NOT NULL, config TEXT NOT NULL, objauth TEXT NOT NULL ); ''') dbbakcon.execute(s) c = dbbakcon.cursor() c.execute('SELECT * from pobjects') old_pobjects = c.fetchall() # copy the data and take the old handle (ESYS_TR Blob) # and convert to a hexstring and store in the config. # add the pobject to the new table keep the rest of the values. # Note: All migrating pobjects are persistent so mark as such. for pobj in old_pobjects: pid = pobj['id'] blob = pobj['handle'] hexblob = bytes.hex(blob) config = { 'persistent' : True, 'esys-tr': hexblob } objauth = pobj['objauth'] hierarchy = pobj['hierarchy'] self.addprimary_raw(c, 'pobjects2', config, objauth, hierarchy, pid) # Drop the old table s = 'DROP TABLE pobjects;' dbbakcon.execute(s) # Rename the new table to the correct table name s = 'ALTER TABLE pobjects2 RENAME TO pobjects;' dbbakcon.execute(s) def _update_on_5(self, dbbakcon): ''' Between version 4 and 5 of the DB the following changes need to be made: Table tobjects: The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # IF the object is definitely a SECRET KEY of AES and has # CKM_AES_CBC_PAD AND CKM_AES_CTR in allowed mechanisms, skip it. if CKA_CLASS not in attrs or \ attrs[CKA_CLASS] != CKO_SECRET_KEY or \ CKA_KEY_TYPE not in attrs or \ attrs[CKA_KEY_TYPE] != CKK_AES or \ CKA_ALLOWED_MECHANISMS not in attrs \ (CKM_AES_CBC_PAD in attrs[CKA_ALLOWED_MECHANISMS] \ and \ CKM_AES_CTR in attrs[CKA_ALLOWED_MECHANISMS]): continue # Is an AES KEY and needs CKM_AES_CBC_PAD if not CKM_AES_CBC_PAD in attrs[CKA_ALLOWED_MECHANISMS]: attrs[CKA_ALLOWED_MECHANISMS].append(CKM_AES_CBC_PAD) # Is an AES KEY and needs CKM_AES_CBC_PAD # This is a BUG that we add CBC_PAD twice, but we can't fix this # here and will have to do it on bump to version 6. if not CKM_AES_CTR in attrs[CKA_ALLOWED_MECHANISMS]: attrs[CKA_ALLOWED_MECHANISMS].append(CKM_AES_CBC_PAD) Db._updatetertiary(dbbakcon, t['id'], attrs) def _update_on_6(self, dbbakcon): ''' Between version 5 and 6 of the DB the following changes need to be made: Table tobjects: The YAML attributes need to include CKM_ECDSA_SHA256 and CKM_ECDSA_SHA384, CKM_ECDSA_SHA512 in the CKM_ALLOWED_MECHANISMS list. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() algs_to_add = set([ CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512]) for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # Fix the duplicate add of CBC_PAD from version 4 -> 5 upgrade and # replace one with CBC_CTR if attrs[CKA_CLASS] == CKO_SECRET_KEY and \ attrs[CKA_KEY_TYPE] == CKK_AES: deduped_attrs = set(attrs[CKA_ALLOWED_MECHANISMS]) deduped_attrs.add(CKM_AES_CTR) attrs[CKA_ALLOWED_MECHANISMS] = list(deduped_attrs) Db._updatetertiary(dbbakcon, t['id'], attrs) continue # IF the object is definitely a PRIVATE_KEY of EC and needs # one or more of the missing ECDSA algorithms added if CKA_CLASS not in attrs or \ attrs[CKA_CLASS] != CKO_PRIVATE_KEY or \ CKA_KEY_TYPE not in attrs or \ attrs[CKA_KEY_TYPE] != CKK_EC: # It is EC Private Key allowed_mechs = set(attrs[CKA_ALLOWED_MECHANISMS] if CKA_ALLOWED_MECHANISMS in attrs else []) # Needs one or more algs? If not skip if algs_to_add.issubset(allowed_mechs): continue attrs[CKA_ALLOWED_MECHANISMS] = list(allowed_mechs | algs_to_add) Db._updatetertiary(dbbakcon, t['id'], attrs) def _update_on_7(self, dbbakcon): ''' Between version 6 and 7 of the DB the following changes need to be made: Table tobjects: Filter out possible 0 mechanisms from CKM_ALLOWED_MECHANISMS list due to previous bugs in db update code. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # Fix the duplicate add of CBC_PAD from version 4 -> 5 upgrade and # replace one with CBC_CTR if CKA_KEY_TYPE not in attrs: continue cka_class = attrs[CKA_CLASS] cka_key_type = attrs[CKA_KEY_TYPE] if cka_class in [ CKO_SECRET_KEY, CKO_PRIVATE_KEY ] and \ cka_key_type in [ CKK_AES, CKK_EC ] and \ 0 in attrs[CKA_ALLOWED_MECHANISMS]: deduped_attrs = set(attrs[CKA_ALLOWED_MECHANISMS]) # we checked that 0 was in attrs. deduped_attrs.remove(0) attrs[CKA_ALLOWED_MECHANISMS] = list(deduped_attrs) Db._updatetertiary(dbbakcon, t['id'], attrs) def update_db(self, old_version, new_version=VERSION): # were doing the update, so make a backup to manipulate (dbbakcon, dbbakpath) = self.backup() dbbakcon.row_factory = sqlite3.Row try: for x in range(old_version, new_version): x = x + 1 getattr(self, '_update_on_{}'.format(x))(dbbakcon) sql = textwrap.dedent(''' REPLACE INTO schema (id, schema_version) VALUES (1, {version}); '''.format(version=new_version)) dbbakcon.execute(sql) finally: # Close the connections self._conn.commit() self._conn.close() dbbakcon.commit() dbbakcon.close() # move old db to ".old" suffix olddbpath = self._path + ".old" os.rename(self._path, olddbpath) # move the backup to the normal dbpath os.rename(dbbakpath, self._path) # unlink the old os.unlink(olddbpath) # re-establish a connection self._conn = sqlite3.connect(self._path) self._conn.row_factory = sqlite3.Row def _get_version(self): c = self._conn.cursor() try: c.execute('select schema_version from schema') return c.fetchone()[0] except sqlite3.OperationalError: return 0 def db_init_new(self): c = self._conn.cursor() sql = [ textwrap.dedent(''' CREATE TABLE tokens( id INTEGER PRIMARY KEY, pid INTEGER NOT NULL, label TEXT UNIQUE, config TEXT NOT NULL, FOREIGN KEY (pid) REFERENCES pobjects(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE sealobjects( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, userpub BLOB, userpriv BLOB, userauthsalt TEXT, sopub BLOB NOT NULL, sopriv BLOB NOT NULL, soauthsalt TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE pobjects( id INTEGER PRIMARY KEY, hierarchy TEXT NOT NULL, config TEXT NOT NULL, objauth TEXT NOT NULL ); '''), textwrap.dedent(''' CREATE TABLE tobjects( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, attrs TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE schema( id INTEGER PRIMARY KEY, schema_version INTEGER NOT NULL ); '''), textwrap.dedent(''' CREATE TRIGGER limit_tokens BEFORE INSERT ON tokens BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tokens) >= 255 THEN RAISE(FAIL, "Maximum token count of 255 reached.") END; END; '''), textwrap.dedent(''' CREATE TRIGGER limit_tobjects BEFORE INSERT ON tobjects BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tobjects) >= 16777215 THEN RAISE(FAIL, "Maximum object count of 16777215 reached.") END; END; '''), textwrap.dedent(''' REPLACE INTO schema (id, schema_version) VALUES (1, {version}); '''.format(version=VERSION)) ] for s in sql: c.execute(s) # TODO collapse object tables into one, since they are common besides type. # move sealobject metadata into token metadata table. # # Object types: # soseal # userseal # wrapping # secondary # tertiary # # NOTE: Update the DB Schema Version at the bottom if the db format changes! def _do_create(self): # perform an update if we need to try: old_version = self._get_version() if old_version == 0: self.db_init_new() self.version = VERSION self.VERSION = VERSION return False elif VERSION == old_version: self.version = old_version self.VERSION = old_version return False elif old_version > VERSION: raise RuntimeError("DB Version exceeds library version:" " {} > {}".format(old_version, VERSION)) else: self.version = old_version self.update_db(old_version, VERSION) self.VERSION = self._get_version() return True except Exception as e: sys.stderr.write('DB Upgrade failed: "{}"\n'.format(e)) raise e def _create(self): # create a lock from the db name plush .lock suffix lockpath = self._path+".lock" holds_lock = False fd = os.open(lockpath, os.O_CREAT|os.O_RDWR) try: fcntl.flock(fd, fcntl.LOCK_EX) holds_lock = True self._do_create() finally: # we always want unlink to occur os.unlink(lockpath) if holds_lock: fcntl.flock(fd, fcntl.LOCK_UN) os.close(fd) tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/command.py0000644000175000017500000001035513754763565015647 00000000000000# SPDX-License-Identifier: BSD-2-Clause import argparse import os import textwrap class commandlet(object): '''Decorator class for commandlet. You can add commandlets to the tool with this decorator.''' @staticmethod def get_default_store_path(): # always use the env variable no matter what if "TPM2_PKCS11_STORE" in os.environ: store = os.environ.get("TPM2_PKCS11_STORE") try: os.mkdir(store, 0o770); except FileExistsError: return store except Exception: # Keep trying pass # Exists, use it return store # is their a system store and can I access it? store = "/etc/tpm2_pkcs11" if os.path.exists(store) and os.access(store, os.W_OK): return store # look for a store in home if "HOME" in os.environ: store = os.path.join(os.environ.get("HOME"), ".tpm2_pkcs11") try: os.mkdir(store, 0o770); except FileExistsError: return store except Exception: # Keep trying pass # Exists, use it return store # nothing else available, use cwd return os.getcwd() _commandlets = {} def __init__(self, cmd): self._cmd = cmd if cmd in commandlet._commandlets: raise Exception('Duplicate command name' + cmd) commandlet._commandlets[cmd] = None def __call__(self, cls): commandlet._commandlets[self._cmd] = cls() return cls @staticmethod def get(): '''Retrieves the list of registered commandlets.''' return commandlet._commandlets @staticmethod def init(description): opt_parser = argparse.ArgumentParser(description=description) subparser = opt_parser.add_subparsers(help='commands') commandlets = commandlet.get() # for each commandlet, instantiate and set up their options for n, c in commandlets.items(): p = subparser.add_parser(n, help=c.__doc__) p.set_defaults(which=n) # Instantiate opt_gen = getattr(c, 'generate_options', None) if callable(opt_gen): # get group help g = p.add_argument_group(n + ' options') # get args c.generate_options(g) g.add_argument( '--path', type=os.path.expanduser, help=textwrap.dedent(''' The location of the store directory. If specified, the directory MUST exist. If not specified performs a search by looking at environment variable TPM2_PKCS11_STORE and if not set then /etc/tpm2_pkcs11 and if not found or no write access, then $HOME/.tpm2_pkcs11 and if not found or cannot be created, then defaults to using the current working directory. '''), default=commandlet.get_default_store_path()) args = opt_parser.parse_args() d = vars(args) if 'which' in d: commandlet.get()[d['which']](d) else: opt_parser.print_usage() class Command(object): '''Baseclass for a commandlet. Commandlets shall implement this interface.''' def generate_options(self, group_parser): '''Adds it's options to the group parser. The parser passed in is a result from calling add_argument_group(ArgumentGroup): https://docs.python.org/2/library/argparse.html Args: group_parser(): The parser to add options too. ''' raise NotImplementedError('Implement: generate_options') def __call__(self, args): '''Called when the user selects your commandlet and passed the dictionary of arguments. Arguments: args ({str: arg}: The dictionary version of the attrs of the parser. The args value is obtained by: args = opt_parser.parse_args() args = vars(args) So to access args just do args['name'] ''' raise NotImplementedError('Implement: __call__') tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/commandlets_store.py0000644000175000017500000001744213754763565017757 00000000000000# SPDX-License-Identifier: BSD-2-Clause import argparse import os import sys import traceback import yaml # local imports from .command import Command from .command import commandlet from .db import Db from .utils import bytes_to_file from .utils import TemporaryDirectory from .utils import query_yes_no from .utils import create_primary from .tpm2 import Tpm2 @commandlet("init") class InitCommand(Command): ''' Initializes a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): mg = group_parser.add_mutually_exclusive_group() # Keep the old --owner-auth kicking around for backwards compat # but hide it in the help output. mg.add_argument( '--hierarchy-auth', help='The authorization password for adding a primary object to the hierarchy.\n', default="") mg.add_argument( '--owner-auth', help=argparse.SUPPRESS, dest='hierarchy_auth', default="") group_parser.add_argument( '--primary-auth', help='Authorization value for existing primary key object, defaults to an empty auth value.', default="") exclusive_group = group_parser.add_mutually_exclusive_group() exclusive_group.add_argument( '--primary-handle', nargs='?', type=InitCommand.str_to_handle, action=InitCommand.make_action(primary=True), help='Use an existing primary key object, defaults to 0x81000001.') exclusive_group.add_argument( '--transient-parent', const='tpm2-tools-default', nargs='?', choices=[ t for t in Tpm2.TEMPLATES.keys() if t is not None ], help='use a transient primary object of a given template.') @staticmethod def str_to_handle(arg): try: return int(arg, 0) except ValueError: if not os.path.exists(arg): sys.exit('arg "%s" neither a handle nor esys handle file') else: return arg @staticmethod def make_action(**kwargs): class customAction(argparse.Action): def __call__(self, parser, args, values, option_string=None): args.__dict__.update(kwargs) setattr(args, self.dest, values) return customAction def __call__(self, args): use_existing_primary = 'primary' in args and args['primary'] path = args['path'] if not os.path.isdir(path): sys.exit("Specified path is not a directory, got: %s" % (path)) hierarchyauth = args['hierarchy_auth'] pobjauth = args['primary_auth'] # create the db with Db(path) as db: transient_parent = args['transient_parent'] shall_evict = False with TemporaryDirectory() as d: try: tpm2 = Tpm2(d) if not use_existing_primary: pobj_ctx = create_primary(tpm2, hierarchyauth, pobjauth, transient_parent) if not transient_parent: # Check if the default handle 0x81000001 is available handle = 0x81000001 handles_persistent = yaml.safe_load(tpm2.getcap('handles-persistent')) if handles_persistent and handle in handles_persistent: # Automatically find the first free handle handle = None pobj_ctx = tpm2.evictcontrol(hierarchyauth, pobj_ctx, handle) shall_evict = True else: # get the primary object auth value and convert it to hex if pobjauth is None: pobjauth = "" handle = args['primary_handle'] if args['primary_handle'] is not None else 0x81000001 # If we get a raw handle, capture the ESYS_TR serialized and # and verify that its persistent. # # TODO: with python bindings call esys_tr_from_public() over readpublic. # TODO: we need a sapi handle from esys tr to look into getcap to see if # its persistent. if isinstance(handle, int): (_, pobj_ctx) = tpm2.readpublic(handle) # verify handle is persistent output = tpm2.getcap('handles-persistent') y = yaml.safe_load(output) if handle not in y: sys.exit('Handle 0x%x is not persistent' % (handle)) else: pobj_ctx = handle y = { 'transient' : bool(transient_parent) } if transient_parent: y['template-name'] = args['transient_parent'] else: with open(pobj_ctx, 'rb') as f: y['esys-tr'] = bytes.hex(f.read()) pid = db.addprimary(y, pobjauth) d = { 'id' : pid, 'action' : "Added" if use_existing_primary else "Created" } print(yaml.safe_dump(d, default_flow_style=False)) except Exception as e: if shall_evict and pobj_ctx != None: tpm2.evictcontrol(hierarchyauth, pobj_ctx) traceback.print_exc(file=sys.stdout) sys.exit(e) @commandlet("destroy") class DestroyCommand(Command): ''' Destroys a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help="The primary object id to remove.\n") group_parser.add_argument( '--hierarchy-auth', default="", help="The primary object id to remove.\n") def __call__(self, args): path = args['path'] pid = args['pid'] hierarchyauth = args['hierarchy_auth'] if not os.path.exists(path): os.mkdir(path) elif not os.path.isdir(path): sys.exit("Specified path is not a directory, got: %s" % (path)) proceed = query_yes_no( 'This will delete the primary object of id "%s" and all associated data from db under "%s"' % (pid, path)) if not proceed: sys.exit(0) # create the db with Db(path) as db: pobj = db.getprimary(pid) if pobj is None: sys.exit('Primary Object id "%s"not found' % pid) with TemporaryDirectory() as d: tpm2 = Tpm2(d) tr_file = bytes_to_file(pobj['handle'], d) db.rmprimary(pid) tpm2.evictcontrol(hierarchyauth, tr_file) @commandlet("dbup") class DbUp(Command): ''' Initializes a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): pass def __call__(self, args): path = args['path'] # create the db with Db(path) as db: old_ver = db.version new_ver = db.VERSION y = { 'old' : old_ver, 'new' : new_ver, } print(yaml.safe_dump(y, default_flow_style=False)) tpm2-pkcs11-1.7.0/tools/tpm2_pkcs11/commandlets_token.py0000664000175000017500000005316714114240163017720 00000000000000# SPDX-License-Identifier: BSD-2-Clause # python stdlib dependencies import binascii import io import sys # External dependencies import yaml # local imports from .command import Command from .command import commandlet from .db import Db from .utils import check_pss_signature from .utils import TemporaryDirectory from .utils import hash_pass from .utils import rand_hex_str from .utils import AESAuthUnwrapper from .utils import load_sealobject from .utils import str2bool from .utils import pkcs11_cko_to_str from .utils import pkcs11_ckk_to_str from .utils import get_pobject from .tpm2 import Tpm2 from .pkcs11t import * # noqa @commandlet("rmtoken") class RmTokenCommand(Command): ''' Removes a token from a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The profile label to remove.\n', required=True) def __call__(self, args): path = args['path'] label = args['label'] with Db(path) as db: token = db.gettoken(label) db.rmtoken(token['label']) @commandlet("verify") class VerifyCommand(Command): ''' Verifies the userpin and/or sopin for a given profile. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--sopin', help='The Administrator pin. This pin is used for object recovery.\n' ) group_parser.add_argument( '--userpin', help='The user pin. This pin is used for authentication for object use.\n' ) group_parser.add_argument( '--label', help='The label to verify.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def verify(db, args): label = args['label'] token = db.gettoken(label) if token is None: sys.exit('No token labeled "%s"' % label) token_config = yaml.safe_load(io.StringIO(token['config'])) sopin = args['sopin'] userpin = args['userpin'] hierarchyauth = args['hierarchy_auth'] if userpin is None and sopin is None: # Use empty PIN if the token has an empty user PIN if token_config.get('empty-user-pin'): userpin = '' else: sys.exit('error: at least one of the arguments --sopin --userpin is required') verify_output = {} verify_output['label'] = label pobj = db.getprimary(token['pid']) sealobj = db.getsealobject(token['id']) wrappingkeyauth = None verify_output['config'] = token_config verify_output['pin'] = {} with TemporaryDirectory() as d: tpm2 = Tpm2(d) pobjauth = pobj['objauth'] pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) if sopin != None: sosealctx = tpm2.load(pobj_handle, pobjauth, sealobj['sopriv'], sealobj['sopub']) # Unseal the wrapping key auth sosealauthsalt = sealobj['soauthsalt'] sosealauth = hash_pass(sopin, salt=sosealauthsalt) wrappingkeyauth = tpm2.unseal(sosealctx, sosealauth['hash']) verify_output['pin']['so'] = {'seal-auth' : sosealauth['hash'] } if userpin != None: usersealctx = tpm2.load(pobj_handle, pobjauth, sealobj['userpriv'], sealobj['userpub']) # Unseal the wrapping key auth usersealauthsalt = sealobj['userauthsalt'] usersealauth = hash_pass(userpin, salt=usersealauthsalt) wrappingkeyauth = tpm2.unseal(usersealctx, usersealauth['hash']) verify_output['pin']['user'] = {'seal-auth' : usersealauth['hash'] } verify_output['wrappingkey'] = { 'hex' : bytes.hex(wrappingkeyauth), } if userpin != None: verify_output['wrappingkey']['auth'] = usersealauth['hash'] if sopin != None: verify_output['wrappingkey']['soauth'] = sosealauth['hash'] wrapper = AESAuthUnwrapper(wrappingkeyauth) tobjs = db.gettertiary(token['id']) verify_output['objects'] = [] for tobj in tobjs: attrs = yaml.safe_load(tobj['attrs']) priv=None if CKA_TPM2_PRIV_BLOB in attrs: priv = binascii.unhexlify(attrs[CKA_TPM2_PRIV_BLOB]) pub = None if CKA_TPM2_PUB_BLOB in attrs: pub = binascii.unhexlify(attrs[CKA_TPM2_PUB_BLOB]) encauth = None if CKA_TPM2_OBJAUTH_ENC in attrs: encauth = binascii.unhexlify(attrs[CKA_TPM2_OBJAUTH_ENC]) tobjauth=None if encauth: encauth=encauth.decode() tpm2.load(pobj_handle, pobjauth, priv, pub) tobjauth = wrapper.unwrap(encauth).decode() verify_output['objects'].append({ 'id' : tobj['id'], 'auth' : tobjauth, 'encauth' : encauth }) yaml_dump = yaml.safe_dump(verify_output, default_flow_style=False) print(yaml_dump) def __call__(self, args): with Db(args['path']) as db: VerifyCommand.verify(db, args) @commandlet("addtoken") class AddTokenCommand(Command): ''' Adds an initialized token to a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), group_parser.add_argument( '--sopin', help='The Administrator pin. This pin is used for object recovery.\n', required=True), group_parser.add_argument( '--userpin', help='The user pin. This pin is used for authentication for object use.\n', required=True), group_parser.add_argument( '--label', help='A unique label to identify the profile in use, must be unique.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def do_token_init(db, path, args): userpin = args['userpin'] sopin = args['sopin'] label = args['label'] pid = args['pid'] hierarchyauth = args['hierarchy_auth'] # Verify pid is in db pobject = db.getprimary(pid) if not pobject: raise RuntimeError('No primary object id: %u' % (pid)) with TemporaryDirectory() as d: tpm2 = Tpm2(d) # generate a wrapping key to be sealed to the TPM. # AES 256 key is 32 bytes, or 64 hex chars. wrappingkey = rand_hex_str(64) # We generate one auth for the sosealobj and the usersealobj sosealauth = hash_pass(sopin) usersealauth = hash_pass(userpin) # Now we generate the two seal objects, using the sealauths as their # auth values and sealing the wrappingkey value to it. # soobject will be an AES key used for decrypting tertiary object # auth values. pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) usersealpriv, usersealpub, _ = tpm2.create( pobj_handle, pobject['objauth'], usersealauth['hash'], seal=wrappingkey) sosealpriv, sosealpub, _ = tpm2.create( pobj_handle, pobject['objauth'], sosealauth['hash'], seal=wrappingkey) pss_sig_good = check_pss_signature(tpm2, pobj_handle, pobject['objauth']) # If this succeeds, we update the token table config = { 'token-init': True, 'pss-sigs-good' : pss_sig_good } if userpin == '': config['empty-user-pin'] = True tokid = db.addtoken(pobject['id'], config, label=label) # now we update the sealobject table with the tokid to seal objects mapping db.addsealobjects(tokid, usersealauth, usersealpriv, usersealpub, sosealauth, sosealpriv, sosealpub) @staticmethod def do_token_noninit(db, args): pid = args['pid'] hierarchyauth = args['hierarchy_auth'] with TemporaryDirectory() as d: tpm2 = Tpm2(d) pobject = db.getprimary(pid) pobjauth = pobject['objauth'] pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) pss_sig_good = check_pss_signature(tpm2, pobj_handle, pobjauth) # If this succeeds, we update the token table config = { 'token-init': False, 'pss-sigs-good' : pss_sig_good } db.addtoken(pobject['id'], config) def __call__(self, args): path = args['path'] do_token_init = not args.get('no_init', False) with Db(path) as db: if do_token_init: AddTokenCommand.do_token_init(db, path, args) else: AddTokenCommand.do_token_noninit(db, args) @commandlet("addemptytoken") class AddEmptyTokenCommand(AddTokenCommand): ''' Adds an un-initialized token to a tpm2-pkcs11 store. ''' def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") def __call__(self, args): args['no_init'] = True super(AddEmptyTokenCommand, self).__call__(args) @commandlet("changepin") class ChangePinCommand(Command): ''' Changes the userpin and/or sopin for a given token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--user', choices=['so', 'user'], default='user', help='Which pin to change. Defaults to "user".\n') group_parser.add_argument( '--old', type=str, help='The old pin.\n') group_parser.add_argument( '--new', type=str, help='The new pin.\n', required=True) group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def changepin(db, tpm2, args): label = args['label'] is_so = args['user'] == 'so' oldpin = args['old'] newpin = args['new'] hierarchyauth = args['hierarchy_auth'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) if oldpin is None: if is_so: sys.exit('error: the SO PIN is missing, argument --old is required') # Use empty PIN if the token has an empty user PIN if token_config.get('empty-user-pin'): oldpin = '' else: sys.exit('error: the user PIN is missing, argument --old is required') pobjectid = token['pid'] pobject = db.getprimary(pobjectid) pobjauth = pobject['objauth'] with TemporaryDirectory() as d: pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) sealctx, sealauth = load_sealobject(token, db, tpm2, pobj_handle, pobjauth, oldpin, is_so) newsealauth = hash_pass(newpin) # call tpm2_changeauth and get new private portion newsealpriv = tpm2.changeauth(pobj_handle, sealctx, sealauth, newsealauth['hash']) # update 'empty-user-pin' in a safe way: clear it before setting a # non-empty PIN and set it after setting an empty PIN if not is_so and newpin != '' and token_config.get('empty-user-pin'): del token_config['empty-user-pin'] db.updateconfig(token, token_config) # update the database db.updatepin(is_so, token, newsealauth, newsealpriv) if not is_so and newpin == '' and not token_config.get('empty-user-pin'): token_config['empty-user-pin'] = True db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) ChangePinCommand.changepin(db, tpm2, args) @commandlet("initpin") class InitPinCommand(Command): ''' Resets the userpin given a sopin for a given token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--sopin', type=str, help='The current sopin.\n', required=True) group_parser.add_argument( '--userpin', type=str, help='The new user pin.\n', required=True) group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def initpin(db, tpm2, args): label = args['label'] sopin = args['sopin'] newpin = args['userpin'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) # load and unseal the data from the SO seal object pobjectid = token['pid'] pobject = db.getprimary(pobjectid) pobjauth = pobject['objauth'] hierarchyauth = args['hierarchy_auth'] with TemporaryDirectory() as d: pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) sealctx, sealauth = load_sealobject(token, db, tpm2, pobj_handle, pobjauth, sopin, True) wrappingkeyauth = tpm2.unseal(sealctx, sealauth) # call tpm2_create and create a new sealobject protected by the seal auth and sealing # the wrapping key auth value newsealauth = hash_pass(newpin) newsealpriv, newsealpub, _ = tpm2.create( pobj_handle, pobjauth, newsealauth['hash'], seal=wrappingkeyauth) # update 'empty-user-pin' in a safe way if newpin != '' and token_config.get('empty-user-pin'): del token_config['empty-user-pin'] db.updateconfig(token, token_config) # update the database db.updatepin(False, token, newsealauth, newsealpriv, newsealpub) if newpin == '' and not token_config.get('empty-user-pin'): token_config['empty-user-pin'] = True db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) InitPinCommand.initpin(db, tpm2, args) @staticmethod def _empty_validator(s): return s def _forbid_set_empty_user_pin(_): raise RuntimeError("'empty-user-pin' can only be set with changepin or initpin") @commandlet("config") class ConfigCommand(Command): ''' Manipulates and retrieves token configuration data. ''' _keys = { 'token-init' : str2bool, 'log-level' : _empty_validator.__func__, 'tcti' : _empty_validator.__func__, 'empty-user-pin': _forbid_set_empty_user_pin, } # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--key', type=str, help='The key to set, valid keys are: %s.\n' % self._keys.keys()) group_parser.add_argument( '--value', type=str, help='The value for the key.\n') group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) @classmethod def get_validator_for_key(cls, key): return cls._keys[key] @classmethod def config(cls, db, args): label = args['label'] key = args['key'] value = args['value'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) if not key and not value: yaml_tok_cconf = yaml.safe_dump(token_config, default_flow_style=False) print(yaml_tok_cconf) sys.exit(0) if not key and value: sys.exit("Cannot specify --value without a key") if key == 'log-level': print('WARN --key="log-level is deprecated', file=sys.stderr) # key has to be set here based on above logical check # throws an error if the key isn't known to the system validator = cls.get_validator_for_key(key) # no value, just key. Print the current value for key is set or empty if not set if not value: print("%s=%s" % (key, str(token_config[key] if key in token_config else ""))) sys.exit(0) # bitbucket log-level sets if key == 'log-level': print('WARN --key="log-level is ignored', file=sys.stderr) return v = validator(value) token_config[key] = v # update the database db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: ConfigCommand.config(db, args) @commandlet("listprimaries") class ListPrimaryCommand(Command): ''' Lists primary objects in a specified store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): pass @staticmethod def list(db): output=[] primaries = db.getprimaries() for p in primaries: details = {'id': p['id']} details['config'] = yaml.safe_load(p['config']) output.append(details) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListPrimaryCommand.list(db) @commandlet("listtokens") class ListTokenCommand(Command): ''' Lists tokens in a specified store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), @staticmethod def list(db, args): output = [] tokens = db.gettokens(args['pid']) for t in tokens: output.append({ 'id': t['id'], 'label': t['label'] }) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListTokenCommand.list(db, args) @commandlet("listobjects") class ListObjectsCommand(Command): ''' Lists Objects (keys, certificates, etc.) associated with a token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) @staticmethod def list(db, args): output = [] token = db.gettoken(args['label']) objects = db.getobjects(token['id']) for o in objects: y = yaml.safe_load(o['attrs']) d = { 'id': o['id'], 'CKA_LABEL' : binascii.unhexlify(y[CKA_LABEL]).decode(), 'CKA_CLASS' : pkcs11_cko_to_str(y[CKA_CLASS]), } if CKA_ID in y: d['CKA_ID'] = y[CKA_ID], if CKA_KEY_TYPE in y: d['CKA_KEY_TYPE'] = pkcs11_ckk_to_str(y[CKA_KEY_TYPE]) output.append(d) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListObjectsCommand.list(db, args) tpm2-pkcs11-1.7.0/config.guess0000755000175000017500000012637313244306071012756 00000000000000#! /bin/sh # Attempt to guess a canonical system name. # Copyright 1992-2018 Free Software Foundation, Inc. timestamp='2018-02-24' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # # Originally written by Per Bothner; maintained since 2000 by Ben Elliston. # # You can get the latest version of this script from: # https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess # # Please send patches to . me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] Output the configuration name of the system \`$me' is run on. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.guess ($timestamp) Originally written by Per Bothner. Copyright 1992-2018 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; * ) break ;; esac done if test $# != 0; then echo "$me: too many arguments$help" >&2 exit 1 fi trap 'exit 1' 1 2 15 # CC_FOR_BUILD -- compiler used by this script. Note that the use of a # compiler to aid in system detection is discouraged as it requires # temporary files to be created and, as you can see below, it is a # headache to deal with in a portable fashion. # Historically, `CC_FOR_BUILD' used to be named `HOST_CC'. We still # use `HOST_CC' if defined, but it is deprecated. # Portable tmp directory creation inspired by the Autoconf team. set_cc_for_build=' trap "exitcode=\$?; (rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null) && exit \$exitcode" 0 ; trap "rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null; exit 1" 1 2 13 15 ; : ${TMPDIR=/tmp} ; { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } || { test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir $tmp) ; } || { tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir $tmp) && echo "Warning: creating insecure temp directory" >&2 ; } || { echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; } ; dummy=$tmp/dummy ; tmpfiles="$dummy.c $dummy.o $dummy.rel $dummy" ; case $CC_FOR_BUILD,$HOST_CC,$CC in ,,) echo "int x;" > "$dummy.c" ; for c in cc gcc c89 c99 ; do if ($c -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then CC_FOR_BUILD="$c"; break ; fi ; done ; if test x"$CC_FOR_BUILD" = x ; then CC_FOR_BUILD=no_compiler_found ; fi ;; ,,*) CC_FOR_BUILD=$CC ;; ,*,*) CC_FOR_BUILD=$HOST_CC ;; esac ; set_cc_for_build= ;' # This is needed to find uname on a Pyramid OSx when run in the BSD universe. # (ghazi@noc.rutgers.edu 1994-08-24) if (test -f /.attbin/uname) >/dev/null 2>&1 ; then PATH=$PATH:/.attbin ; export PATH fi UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown case "$UNAME_SYSTEM" in Linux|GNU|GNU/*) # If the system lacks a compiler, then just pick glibc. # We could probably try harder. LIBC=gnu eval "$set_cc_for_build" cat <<-EOF > "$dummy.c" #include #if defined(__UCLIBC__) LIBC=uclibc #elif defined(__dietlibc__) LIBC=dietlibc #else LIBC=gnu #endif EOF eval "`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`" # If ldd exists, use it to detect musl libc. if command -v ldd >/dev/null && \ ldd --version 2>&1 | grep -q ^musl then LIBC=musl fi ;; esac # Note: order is significant - the case branches are not exclusive. case "$UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION" in *:NetBSD:*:*) # NetBSD (nbsd) targets should (where applicable) match one or # more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*, # *-*-netbsdecoff* and *-*-netbsd*. For targets that recently # switched to ELF, *-*-netbsd* would select the old # object file format. This provides both forward # compatibility and a consistent mechanism for selecting the # object file format. # # Note: NetBSD doesn't particularly care about the vendor # portion of the name. We always set it to "unknown". sysctl="sysctl -n hw.machine_arch" UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \ "/sbin/$sysctl" 2>/dev/null || \ "/usr/sbin/$sysctl" 2>/dev/null || \ echo unknown)` case "$UNAME_MACHINE_ARCH" in armeb) machine=armeb-unknown ;; arm*) machine=arm-unknown ;; sh3el) machine=shl-unknown ;; sh3eb) machine=sh-unknown ;; sh5el) machine=sh5le-unknown ;; earmv*) arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'` endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'` machine="${arch}${endian}"-unknown ;; *) machine="$UNAME_MACHINE_ARCH"-unknown ;; esac # The Operating System including object format, if it has switched # to ELF recently (or will in the future) and ABI. case "$UNAME_MACHINE_ARCH" in earm*) os=netbsdelf ;; arm*|i386|m68k|ns32k|sh3*|sparc|vax) eval "$set_cc_for_build" if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ELF__ then # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout). # Return netbsd for either. FIX? os=netbsd else os=netbsdelf fi ;; *) os=netbsd ;; esac # Determine ABI tags. case "$UNAME_MACHINE_ARCH" in earm*) expr='s/^earmv[0-9]/-eabi/;s/eb$//' abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"` ;; esac # The OS release # Debian GNU/NetBSD machines have a different userland, and # thus, need a distinct triplet. However, they do not need # kernel version information, so it can be replaced with a # suitable tag, in the style of linux-gnu. case "$UNAME_VERSION" in Debian*) release='-gnu' ;; *) release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2` ;; esac # Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM: # contains redundant information, the shorter form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used. echo "$machine-${os}${release}${abi}" exit ;; *:Bitrig:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'` echo "$UNAME_MACHINE_ARCH"-unknown-bitrig"$UNAME_RELEASE" exit ;; *:OpenBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'` echo "$UNAME_MACHINE_ARCH"-unknown-openbsd"$UNAME_RELEASE" exit ;; *:LibertyBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'` echo "$UNAME_MACHINE_ARCH"-unknown-libertybsd"$UNAME_RELEASE" exit ;; *:MidnightBSD:*:*) echo "$UNAME_MACHINE"-unknown-midnightbsd"$UNAME_RELEASE" exit ;; *:ekkoBSD:*:*) echo "$UNAME_MACHINE"-unknown-ekkobsd"$UNAME_RELEASE" exit ;; *:SolidBSD:*:*) echo "$UNAME_MACHINE"-unknown-solidbsd"$UNAME_RELEASE" exit ;; macppc:MirBSD:*:*) echo powerpc-unknown-mirbsd"$UNAME_RELEASE" exit ;; *:MirBSD:*:*) echo "$UNAME_MACHINE"-unknown-mirbsd"$UNAME_RELEASE" exit ;; *:Sortix:*:*) echo "$UNAME_MACHINE"-unknown-sortix exit ;; *:Redox:*:*) echo "$UNAME_MACHINE"-unknown-redox exit ;; mips:OSF1:*.*) echo mips-dec-osf1 exit ;; alpha:OSF1:*:*) case $UNAME_RELEASE in *4.0) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'` ;; *5.*) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'` ;; esac # According to Compaq, /usr/sbin/psrinfo has been available on # OSF/1 and Tru64 systems produced since 1995. I hope that # covers most systems running today. This code pipes the CPU # types through head -n 1, so we only detect the type of CPU 0. ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^ The alpha \(.*\) processor.*$/\1/p' | head -n 1` case "$ALPHA_CPU_TYPE" in "EV4 (21064)") UNAME_MACHINE=alpha ;; "EV4.5 (21064)") UNAME_MACHINE=alpha ;; "LCA4 (21066/21068)") UNAME_MACHINE=alpha ;; "EV5 (21164)") UNAME_MACHINE=alphaev5 ;; "EV5.6 (21164A)") UNAME_MACHINE=alphaev56 ;; "EV5.6 (21164PC)") UNAME_MACHINE=alphapca56 ;; "EV5.7 (21164PC)") UNAME_MACHINE=alphapca57 ;; "EV6 (21264)") UNAME_MACHINE=alphaev6 ;; "EV6.7 (21264A)") UNAME_MACHINE=alphaev67 ;; "EV6.8CB (21264C)") UNAME_MACHINE=alphaev68 ;; "EV6.8AL (21264B)") UNAME_MACHINE=alphaev68 ;; "EV6.8CX (21264D)") UNAME_MACHINE=alphaev68 ;; "EV6.9A (21264/EV69A)") UNAME_MACHINE=alphaev69 ;; "EV7 (21364)") UNAME_MACHINE=alphaev7 ;; "EV7.9 (21364A)") UNAME_MACHINE=alphaev79 ;; esac # A Pn.n version is a patched version. # A Vn.n version is a released version. # A Tn.n version is a released field test version. # A Xn.n version is an unreleased experimental baselevel. # 1.2 uses "1.2" for uname -r. echo "$UNAME_MACHINE"-dec-osf"`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`" # Reset EXIT trap before exiting to avoid spurious non-zero exit code. exitcode=$? trap '' 0 exit $exitcode ;; Amiga*:UNIX_System_V:4.0:*) echo m68k-unknown-sysv4 exit ;; *:[Aa]miga[Oo][Ss]:*:*) echo "$UNAME_MACHINE"-unknown-amigaos exit ;; *:[Mm]orph[Oo][Ss]:*:*) echo "$UNAME_MACHINE"-unknown-morphos exit ;; *:OS/390:*:*) echo i370-ibm-openedition exit ;; *:z/VM:*:*) echo s390-ibm-zvmoe exit ;; *:OS400:*:*) echo powerpc-ibm-os400 exit ;; arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*) echo arm-acorn-riscix"$UNAME_RELEASE" exit ;; arm*:riscos:*:*|arm*:RISCOS:*:*) echo arm-unknown-riscos exit ;; SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*) echo hppa1.1-hitachi-hiuxmpp exit ;; Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*) # akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE. if test "`(/bin/universe) 2>/dev/null`" = att ; then echo pyramid-pyramid-sysv3 else echo pyramid-pyramid-bsd fi exit ;; NILE*:*:*:dcosx) echo pyramid-pyramid-svr4 exit ;; DRS?6000:unix:4.0:6*) echo sparc-icl-nx6 exit ;; DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*) case `/usr/bin/uname -p` in sparc) echo sparc-icl-nx7; exit ;; esac ;; s390x:SunOS:*:*) echo "$UNAME_MACHINE"-ibm-solaris2"`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`" exit ;; sun4H:SunOS:5.*:*) echo sparc-hal-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*) echo sparc-sun-solaris2"`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`" exit ;; i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*) echo i386-pc-auroraux"$UNAME_RELEASE" exit ;; i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*) eval "$set_cc_for_build" SUN_ARCH=i386 # If there is a compiler, see if it is configured for 64-bit objects. # Note that the Sun cc does not turn __LP64__ into 1 like gcc does. # This test works for both compilers. if [ "$CC_FOR_BUILD" != no_compiler_found ]; then if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then SUN_ARCH=x86_64 fi fi echo "$SUN_ARCH"-pc-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:6*:*) # According to config.sub, this is the proper way to canonicalize # SunOS6. Hard to guess exactly what SunOS6 will be like, but # it's likely to be more like Solaris than SunOS4. echo sparc-sun-solaris3"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; sun4*:SunOS:*:*) case "`/usr/bin/arch -k`" in Series*|S4*) UNAME_RELEASE=`uname -v` ;; esac # Japanese Language versions have a version number like `4.1.3-JL'. echo sparc-sun-sunos"`echo "$UNAME_RELEASE"|sed -e 's/-/_/'`" exit ;; sun3*:SunOS:*:*) echo m68k-sun-sunos"$UNAME_RELEASE" exit ;; sun*:*:4.2BSD:*) UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null` test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3 case "`/bin/arch`" in sun3) echo m68k-sun-sunos"$UNAME_RELEASE" ;; sun4) echo sparc-sun-sunos"$UNAME_RELEASE" ;; esac exit ;; aushp:SunOS:*:*) echo sparc-auspex-sunos"$UNAME_RELEASE" exit ;; # The situation for MiNT is a little confusing. The machine name # can be virtually everything (everything which is not # "atarist" or "atariste" at least should have a processor # > m68000). The system name ranges from "MiNT" over "FreeMiNT" # to the lowercase version "mint" (or "freemint"). Finally # the system name "TOS" denotes a system which is actually not # MiNT. But MiNT is downward compatible to TOS, so this should # be no problem. atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*) echo m68k-atari-mint"$UNAME_RELEASE" exit ;; milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*) echo m68k-milan-mint"$UNAME_RELEASE" exit ;; hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*) echo m68k-hades-mint"$UNAME_RELEASE" exit ;; *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*) echo m68k-unknown-mint"$UNAME_RELEASE" exit ;; m68k:machten:*:*) echo m68k-apple-machten"$UNAME_RELEASE" exit ;; powerpc:machten:*:*) echo powerpc-apple-machten"$UNAME_RELEASE" exit ;; RISC*:Mach:*:*) echo mips-dec-mach_bsd4.3 exit ;; RISC*:ULTRIX:*:*) echo mips-dec-ultrix"$UNAME_RELEASE" exit ;; VAX*:ULTRIX*:*:*) echo vax-dec-ultrix"$UNAME_RELEASE" exit ;; 2020:CLIX:*:* | 2430:CLIX:*:*) echo clipper-intergraph-clix"$UNAME_RELEASE" exit ;; mips:*:*:UMIPS | mips:*:*:RISCos) eval "$set_cc_for_build" sed 's/^ //' << EOF > "$dummy.c" #ifdef __cplusplus #include /* for printf() prototype */ int main (int argc, char *argv[]) { #else int main (argc, argv) int argc; char *argv[]; { #endif #if defined (host_mips) && defined (MIPSEB) #if defined (SYSTYPE_SYSV) printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_SVR4) printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD) printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0); #endif #endif exit (-1); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` && SYSTEM_NAME=`"$dummy" "$dummyarg"` && { echo "$SYSTEM_NAME"; exit; } echo mips-mips-riscos"$UNAME_RELEASE" exit ;; Motorola:PowerMAX_OS:*:*) echo powerpc-motorola-powermax exit ;; Motorola:*:4.3:PL8-*) echo powerpc-harris-powermax exit ;; Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*) echo powerpc-harris-powermax exit ;; Night_Hawk:Power_UNIX:*:*) echo powerpc-harris-powerunix exit ;; m88k:CX/UX:7*:*) echo m88k-harris-cxux7 exit ;; m88k:*:4*:R4*) echo m88k-motorola-sysv4 exit ;; m88k:*:3*:R3*) echo m88k-motorola-sysv3 exit ;; AViiON:dgux:*:*) # DG/UX returns AViiON for all architectures UNAME_PROCESSOR=`/usr/bin/uname -p` if [ "$UNAME_PROCESSOR" = mc88100 ] || [ "$UNAME_PROCESSOR" = mc88110 ] then if [ "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx ] || \ [ "$TARGET_BINARY_INTERFACE"x = x ] then echo m88k-dg-dgux"$UNAME_RELEASE" else echo m88k-dg-dguxbcs"$UNAME_RELEASE" fi else echo i586-dg-dgux"$UNAME_RELEASE" fi exit ;; M88*:DolphinOS:*:*) # DolphinOS (SVR3) echo m88k-dolphin-sysv3 exit ;; M88*:*:R3*:*) # Delta 88k system running SVR3 echo m88k-motorola-sysv3 exit ;; XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3) echo m88k-tektronix-sysv3 exit ;; Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD) echo m68k-tektronix-bsd exit ;; *:IRIX*:*:*) echo mips-sgi-irix"`echo "$UNAME_RELEASE"|sed -e 's/-/_/g'`" exit ;; ????????:AIX?:[12].1:2) # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX. echo romp-ibm-aix # uname -m gives an 8 hex-code CPU id exit ;; # Note that: echo "'`uname -s`'" gives 'AIX ' i*86:AIX:*:*) echo i386-ibm-aix exit ;; ia64:AIX:*:*) if [ -x /usr/bin/oslevel ] ; then IBM_REV=`/usr/bin/oslevel` else IBM_REV="$UNAME_VERSION.$UNAME_RELEASE" fi echo "$UNAME_MACHINE"-ibm-aix"$IBM_REV" exit ;; *:AIX:2:3) if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then eval "$set_cc_for_build" sed 's/^ //' << EOF > "$dummy.c" #include main() { if (!__power_pc()) exit(1); puts("powerpc-ibm-aix3.2.5"); exit(0); } EOF if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` then echo "$SYSTEM_NAME" else echo rs6000-ibm-aix3.2.5 fi elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then echo rs6000-ibm-aix3.2.4 else echo rs6000-ibm-aix3.2 fi exit ;; *:AIX:*:[4567]) IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'` if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then IBM_ARCH=rs6000 else IBM_ARCH=powerpc fi if [ -x /usr/bin/lslpp ] ; then IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | awk -F: '{ print $3 }' | sed s/[0-9]*$/0/` else IBM_REV="$UNAME_VERSION.$UNAME_RELEASE" fi echo "$IBM_ARCH"-ibm-aix"$IBM_REV" exit ;; *:AIX:*:*) echo rs6000-ibm-aix exit ;; ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*) echo romp-ibm-bsd4.4 exit ;; ibmrt:*BSD:*|romp-ibm:BSD:*) # covers RT/PC BSD and echo romp-ibm-bsd"$UNAME_RELEASE" # 4.3 with uname added to exit ;; # report: romp-ibm BSD 4.3 *:BOSX:*:*) echo rs6000-bull-bosx exit ;; DPX/2?00:B.O.S.:*:*) echo m68k-bull-sysv3 exit ;; 9000/[34]??:4.3bsd:1.*:*) echo m68k-hp-bsd exit ;; hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*) echo m68k-hp-bsd4.4 exit ;; 9000/[34678]??:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE"|sed -e 's/[^.]*.[0B]*//'` case "$UNAME_MACHINE" in 9000/31?) HP_ARCH=m68000 ;; 9000/[34]??) HP_ARCH=m68k ;; 9000/[678][0-9][0-9]) if [ -x /usr/bin/getconf ]; then sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null` sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` case "$sc_cpu_version" in 523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0 528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1 532) # CPU_PA_RISC2_0 case "$sc_kernel_bits" in 32) HP_ARCH=hppa2.0n ;; 64) HP_ARCH=hppa2.0w ;; '') HP_ARCH=hppa2.0 ;; # HP-UX 10.20 esac ;; esac fi if [ "$HP_ARCH" = "" ]; then eval "$set_cc_for_build" sed 's/^ //' << EOF > "$dummy.c" #define _HPUX_SOURCE #include #include int main () { #if defined(_SC_KERNEL_BITS) long bits = sysconf(_SC_KERNEL_BITS); #endif long cpu = sysconf (_SC_CPU_VERSION); switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0"); break; case CPU_PA_RISC1_1: puts ("hppa1.1"); break; case CPU_PA_RISC2_0: #if defined(_SC_KERNEL_BITS) switch (bits) { case 64: puts ("hppa2.0w"); break; case 32: puts ("hppa2.0n"); break; default: puts ("hppa2.0"); break; } break; #else /* !defined(_SC_KERNEL_BITS) */ puts ("hppa2.0"); break; #endif default: puts ("hppa1.0"); break; } exit (0); } EOF (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"` test -z "$HP_ARCH" && HP_ARCH=hppa fi ;; esac if [ "$HP_ARCH" = hppa2.0w ] then eval "$set_cc_for_build" # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating # 32-bit code. hppa64-hp-hpux* has the same kernel and a compiler # generating 64-bit code. GNU and HP use different nomenclature: # # $ CC_FOR_BUILD=cc ./config.guess # => hppa2.0w-hp-hpux11.23 # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess # => hppa64-hp-hpux11.23 if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | grep -q __LP64__ then HP_ARCH=hppa2.0w else HP_ARCH=hppa64 fi fi echo "$HP_ARCH"-hp-hpux"$HPUX_REV" exit ;; ia64:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE"|sed -e 's/[^.]*.[0B]*//'` echo ia64-hp-hpux"$HPUX_REV" exit ;; 3050*:HI-UX:*:*) eval "$set_cc_for_build" sed 's/^ //' << EOF > "$dummy.c" #include int main () { long cpu = sysconf (_SC_CPU_VERSION); /* The order matters, because CPU_IS_HP_MC68K erroneously returns true for CPU_PA_RISC1_0. CPU_IS_PA_RISC returns correct results, however. */ if (CPU_IS_PA_RISC (cpu)) { switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break; case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break; case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break; default: puts ("hppa-hitachi-hiuxwe2"); break; } } else if (CPU_IS_HP_MC68K (cpu)) puts ("m68k-hitachi-hiuxwe2"); else puts ("unknown-hitachi-hiuxwe2"); exit (0); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` && { echo "$SYSTEM_NAME"; exit; } echo unknown-hitachi-hiuxwe2 exit ;; 9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*) echo hppa1.1-hp-bsd exit ;; 9000/8??:4.3bsd:*:*) echo hppa1.0-hp-bsd exit ;; *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*) echo hppa1.0-hp-mpeix exit ;; hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*) echo hppa1.1-hp-osf exit ;; hp8??:OSF1:*:*) echo hppa1.0-hp-osf exit ;; i*86:OSF1:*:*) if [ -x /usr/sbin/sysversion ] ; then echo "$UNAME_MACHINE"-unknown-osf1mk else echo "$UNAME_MACHINE"-unknown-osf1 fi exit ;; parisc*:Lites*:*:*) echo hppa1.1-hp-lites exit ;; C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*) echo c1-convex-bsd exit ;; C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi exit ;; C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*) echo c34-convex-bsd exit ;; C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*) echo c38-convex-bsd exit ;; C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*) echo c4-convex-bsd exit ;; CRAY*Y-MP:*:*:*) echo ymp-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*[A-Z]90:*:*:*) echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \ | sed -e 's/CRAY.*\([A-Z]90\)/\1/' \ -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \ -e 's/\.[^.]*$/.X/' exit ;; CRAY*TS:*:*:*) echo t90-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*T3E:*:*:*) echo alphaev5-cray-unicosmk"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; CRAY*SV1:*:*:*) echo sv1-cray-unicos"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; *:UNICOS/mp:*:*) echo craynv-cray-unicosmp"$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/' exit ;; F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*) FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz` FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'` echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" exit ;; 5000:UNIX_System_V:4.*:*) FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'` echo "sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" exit ;; i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*) echo "$UNAME_MACHINE"-pc-bsdi"$UNAME_RELEASE" exit ;; sparc*:BSD/OS:*:*) echo sparc-unknown-bsdi"$UNAME_RELEASE" exit ;; *:BSD/OS:*:*) echo "$UNAME_MACHINE"-unknown-bsdi"$UNAME_RELEASE" exit ;; *:FreeBSD:*:*) UNAME_PROCESSOR=`/usr/bin/uname -p` case "$UNAME_PROCESSOR" in amd64) UNAME_PROCESSOR=x86_64 ;; i386) UNAME_PROCESSOR=i586 ;; esac echo "$UNAME_PROCESSOR"-unknown-freebsd"`echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`" exit ;; i*:CYGWIN*:*) echo "$UNAME_MACHINE"-pc-cygwin exit ;; *:MINGW64*:*) echo "$UNAME_MACHINE"-pc-mingw64 exit ;; *:MINGW*:*) echo "$UNAME_MACHINE"-pc-mingw32 exit ;; *:MSYS*:*) echo "$UNAME_MACHINE"-pc-msys exit ;; i*:PW*:*) echo "$UNAME_MACHINE"-pc-pw32 exit ;; *:Interix*:*) case "$UNAME_MACHINE" in x86) echo i586-pc-interix"$UNAME_RELEASE" exit ;; authenticamd | genuineintel | EM64T) echo x86_64-unknown-interix"$UNAME_RELEASE" exit ;; IA64) echo ia64-unknown-interix"$UNAME_RELEASE" exit ;; esac ;; i*:UWIN*:*) echo "$UNAME_MACHINE"-pc-uwin exit ;; amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*) echo x86_64-unknown-cygwin exit ;; prep*:SunOS:5.*:*) echo powerpcle-unknown-solaris2"`echo "$UNAME_RELEASE"|sed -e 's/[^.]*//'`" exit ;; *:GNU:*:*) # the GNU system echo "`echo "$UNAME_MACHINE"|sed -e 's,[-/].*$,,'`-unknown-$LIBC`echo "$UNAME_RELEASE"|sed -e 's,/.*$,,'`" exit ;; *:GNU/*:*:*) # other systems with GNU libc and userland echo "$UNAME_MACHINE-unknown-`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"``echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`-$LIBC" exit ;; i*86:Minix:*:*) echo "$UNAME_MACHINE"-pc-minix exit ;; aarch64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; aarch64_be:Linux:*:*) UNAME_MACHINE=aarch64_be echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; alpha:Linux:*:*) case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in EV5) UNAME_MACHINE=alphaev5 ;; EV56) UNAME_MACHINE=alphaev56 ;; PCA56) UNAME_MACHINE=alphapca56 ;; PCA57) UNAME_MACHINE=alphapca56 ;; EV6) UNAME_MACHINE=alphaev6 ;; EV67) UNAME_MACHINE=alphaev67 ;; EV68*) UNAME_MACHINE=alphaev68 ;; esac objdump --private-headers /bin/sh | grep -q ld.so.1 if test "$?" = 0 ; then LIBC=gnulibc1 ; fi echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; arc:Linux:*:* | arceb:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; arm*:Linux:*:*) eval "$set_cc_for_build" if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_EABI__ then echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" else if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then echo "$UNAME_MACHINE"-unknown-linux-"$LIBC"eabi else echo "$UNAME_MACHINE"-unknown-linux-"$LIBC"eabihf fi fi exit ;; avr32*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; cris:Linux:*:*) echo "$UNAME_MACHINE"-axis-linux-"$LIBC" exit ;; crisv32:Linux:*:*) echo "$UNAME_MACHINE"-axis-linux-"$LIBC" exit ;; e2k:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; frv:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; hexagon:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; i*86:Linux:*:*) echo "$UNAME_MACHINE"-pc-linux-"$LIBC" exit ;; ia64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; k1om:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; m32r*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; m68*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; mips:Linux:*:* | mips64:Linux:*:*) eval "$set_cc_for_build" sed 's/^ //' << EOF > "$dummy.c" #undef CPU #undef ${UNAME_MACHINE} #undef ${UNAME_MACHINE}el #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL) CPU=${UNAME_MACHINE}el #else #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB) CPU=${UNAME_MACHINE} #else CPU= #endif #endif EOF eval "`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU'`" test "x$CPU" != x && { echo "$CPU-unknown-linux-$LIBC"; exit; } ;; mips64el:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; openrisc*:Linux:*:*) echo or1k-unknown-linux-"$LIBC" exit ;; or32:Linux:*:* | or1k*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; padre:Linux:*:*) echo sparc-unknown-linux-"$LIBC" exit ;; parisc64:Linux:*:* | hppa64:Linux:*:*) echo hppa64-unknown-linux-"$LIBC" exit ;; parisc:Linux:*:* | hppa:Linux:*:*) # Look for CPU level case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in PA7*) echo hppa1.1-unknown-linux-"$LIBC" ;; PA8*) echo hppa2.0-unknown-linux-"$LIBC" ;; *) echo hppa-unknown-linux-"$LIBC" ;; esac exit ;; ppc64:Linux:*:*) echo powerpc64-unknown-linux-"$LIBC" exit ;; ppc:Linux:*:*) echo powerpc-unknown-linux-"$LIBC" exit ;; ppc64le:Linux:*:*) echo powerpc64le-unknown-linux-"$LIBC" exit ;; ppcle:Linux:*:*) echo powerpcle-unknown-linux-"$LIBC" exit ;; riscv32:Linux:*:* | riscv64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; s390:Linux:*:* | s390x:Linux:*:*) echo "$UNAME_MACHINE"-ibm-linux-"$LIBC" exit ;; sh64*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; sh*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; sparc:Linux:*:* | sparc64:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; tile*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; vax:Linux:*:*) echo "$UNAME_MACHINE"-dec-linux-"$LIBC" exit ;; x86_64:Linux:*:*) if objdump -f /bin/sh | grep -q elf32-x86-64; then echo "$UNAME_MACHINE"-pc-linux-"$LIBC"x32 else echo "$UNAME_MACHINE"-pc-linux-"$LIBC" fi exit ;; xtensa*:Linux:*:*) echo "$UNAME_MACHINE"-unknown-linux-"$LIBC" exit ;; i*86:DYNIX/ptx:4*:*) # ptx 4.0 does uname -s correctly, with DYNIX/ptx in there. # earlier versions are messed up and put the nodename in both # sysname and nodename. echo i386-sequent-sysv4 exit ;; i*86:UNIX_SV:4.2MP:2.*) # Unixware is an offshoot of SVR4, but it has its own version # number series starting with 2... # I am not positive that other SVR4 systems won't match this, # I just have to hope. -- rms. # Use sysv4.2uw... so that sysv4* matches it. echo "$UNAME_MACHINE"-pc-sysv4.2uw"$UNAME_VERSION" exit ;; i*86:OS/2:*:*) # If we were able to find `uname', then EMX Unix compatibility # is probably installed. echo "$UNAME_MACHINE"-pc-os2-emx exit ;; i*86:XTS-300:*:STOP) echo "$UNAME_MACHINE"-unknown-stop exit ;; i*86:atheos:*:*) echo "$UNAME_MACHINE"-unknown-atheos exit ;; i*86:syllable:*:*) echo "$UNAME_MACHINE"-pc-syllable exit ;; i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*) echo i386-unknown-lynxos"$UNAME_RELEASE" exit ;; i*86:*DOS:*:*) echo "$UNAME_MACHINE"-pc-msdosdjgpp exit ;; i*86:*:4.*:*) UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'` if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then echo "$UNAME_MACHINE"-univel-sysv"$UNAME_REL" else echo "$UNAME_MACHINE"-pc-sysv"$UNAME_REL" fi exit ;; i*86:*:5:[678]*) # UnixWare 7.x, OpenUNIX and OpenServer 6. case `/bin/uname -X | grep "^Machine"` in *486*) UNAME_MACHINE=i486 ;; *Pentium) UNAME_MACHINE=i586 ;; *Pent*|*Celeron) UNAME_MACHINE=i686 ;; esac echo "$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}{$UNAME_VERSION}" exit ;; i*86:*:3.2:*) if test -f /usr/options/cb.name; then UNAME_REL=`sed -n 's/.*Version //p' /dev/null >/dev/null ; then UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')` (/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486 (/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \ && UNAME_MACHINE=i586 (/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \ && UNAME_MACHINE=i686 (/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \ && UNAME_MACHINE=i686 echo "$UNAME_MACHINE"-pc-sco"$UNAME_REL" else echo "$UNAME_MACHINE"-pc-sysv32 fi exit ;; pc:*:*:*) # Left here for compatibility: # uname -m prints for DJGPP always 'pc', but it prints nothing about # the processor, so we play safe by assuming i586. # Note: whatever this is, it MUST be the same as what config.sub # prints for the "djgpp" host, or else GDB configure will decide that # this is a cross-build. echo i586-pc-msdosdjgpp exit ;; Intel:Mach:3*:*) echo i386-pc-mach3 exit ;; paragon:*:*:*) echo i860-intel-osf1 exit ;; i860:*:4.*:*) # i860-SVR4 if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then echo i860-stardent-sysv"$UNAME_RELEASE" # Stardent Vistra i860-SVR4 else # Add other i860-SVR4 vendors below as they are discovered. echo i860-unknown-sysv"$UNAME_RELEASE" # Unknown i860-SVR4 fi exit ;; mini*:CTIX:SYS*5:*) # "miniframe" echo m68010-convergent-sysv exit ;; mc68k:UNIX:SYSTEM5:3.51m) echo m68k-convergent-sysv exit ;; M680?0:D-NIX:5.3:*) echo m68k-diab-dnix exit ;; M68*:*:R3V[5678]*:*) test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;; 3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0) OS_REL='' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*) /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4; exit; } ;; NCR*:*:4.2:* | MPRAS*:*:4.2:*) OS_REL='.3' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*) echo m68k-unknown-lynxos"$UNAME_RELEASE" exit ;; mc68030:UNIX_System_V:4.*:*) echo m68k-atari-sysv4 exit ;; TSUNAMI:LynxOS:2.*:*) echo sparc-unknown-lynxos"$UNAME_RELEASE" exit ;; rs6000:LynxOS:2.*:*) echo rs6000-unknown-lynxos"$UNAME_RELEASE" exit ;; PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*) echo powerpc-unknown-lynxos"$UNAME_RELEASE" exit ;; SM[BE]S:UNIX_SV:*:*) echo mips-dde-sysv"$UNAME_RELEASE" exit ;; RM*:ReliantUNIX-*:*:*) echo mips-sni-sysv4 exit ;; RM*:SINIX-*:*:*) echo mips-sni-sysv4 exit ;; *:SINIX-*:*:*) if uname -p 2>/dev/null >/dev/null ; then UNAME_MACHINE=`(uname -p) 2>/dev/null` echo "$UNAME_MACHINE"-sni-sysv4 else echo ns32k-sni-sysv fi exit ;; PENTIUM:*:4.0*:*) # Unisys `ClearPath HMP IX 4000' SVR4/MP effort # says echo i586-unisys-sysv4 exit ;; *:UNIX_System_V:4*:FTX*) # From Gerald Hewes . # How about differentiating between stratus architectures? -djm echo hppa1.1-stratus-sysv4 exit ;; *:*:*:FTX*) # From seanf@swdc.stratus.com. echo i860-stratus-sysv4 exit ;; i*86:VOS:*:*) # From Paul.Green@stratus.com. echo "$UNAME_MACHINE"-stratus-vos exit ;; *:VOS:*:*) # From Paul.Green@stratus.com. echo hppa1.1-stratus-vos exit ;; mc68*:A/UX:*:*) echo m68k-apple-aux"$UNAME_RELEASE" exit ;; news*:NEWS-OS:6*:*) echo mips-sony-newsos6 exit ;; R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*) if [ -d /usr/nec ]; then echo mips-nec-sysv"$UNAME_RELEASE" else echo mips-unknown-sysv"$UNAME_RELEASE" fi exit ;; BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only. echo powerpc-be-beos exit ;; BeMac:BeOS:*:*) # BeOS running on Mac or Mac clone, PPC only. echo powerpc-apple-beos exit ;; BePC:BeOS:*:*) # BeOS running on Intel PC compatible. echo i586-pc-beos exit ;; BePC:Haiku:*:*) # Haiku running on Intel PC compatible. echo i586-pc-haiku exit ;; x86_64:Haiku:*:*) echo x86_64-unknown-haiku exit ;; SX-4:SUPER-UX:*:*) echo sx4-nec-superux"$UNAME_RELEASE" exit ;; SX-5:SUPER-UX:*:*) echo sx5-nec-superux"$UNAME_RELEASE" exit ;; SX-6:SUPER-UX:*:*) echo sx6-nec-superux"$UNAME_RELEASE" exit ;; SX-7:SUPER-UX:*:*) echo sx7-nec-superux"$UNAME_RELEASE" exit ;; SX-8:SUPER-UX:*:*) echo sx8-nec-superux"$UNAME_RELEASE" exit ;; SX-8R:SUPER-UX:*:*) echo sx8r-nec-superux"$UNAME_RELEASE" exit ;; SX-ACE:SUPER-UX:*:*) echo sxace-nec-superux"$UNAME_RELEASE" exit ;; Power*:Rhapsody:*:*) echo powerpc-apple-rhapsody"$UNAME_RELEASE" exit ;; *:Rhapsody:*:*) echo "$UNAME_MACHINE"-apple-rhapsody"$UNAME_RELEASE" exit ;; *:Darwin:*:*) UNAME_PROCESSOR=`uname -p` || UNAME_PROCESSOR=unknown eval "$set_cc_for_build" if test "$UNAME_PROCESSOR" = unknown ; then UNAME_PROCESSOR=powerpc fi if test "`echo "$UNAME_RELEASE" | sed -e 's/\..*//'`" -le 10 ; then if [ "$CC_FOR_BUILD" != no_compiler_found ]; then if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then case $UNAME_PROCESSOR in i386) UNAME_PROCESSOR=x86_64 ;; powerpc) UNAME_PROCESSOR=powerpc64 ;; esac fi # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_PPC >/dev/null then UNAME_PROCESSOR=powerpc fi fi elif test "$UNAME_PROCESSOR" = i386 ; then # Avoid executing cc on OS X 10.9, as it ships with a stub # that puts up a graphical alert prompting to install # developer tools. Any system running Mac OS X 10.7 or # later (Darwin 11 and later) is required to have a 64-bit # processor. This is not true of the ARM version of Darwin # that Apple uses in portable devices. UNAME_PROCESSOR=x86_64 fi echo "$UNAME_PROCESSOR"-apple-darwin"$UNAME_RELEASE" exit ;; *:procnto*:*:* | *:QNX:[0123456789]*:*) UNAME_PROCESSOR=`uname -p` if test "$UNAME_PROCESSOR" = x86; then UNAME_PROCESSOR=i386 UNAME_MACHINE=pc fi echo "$UNAME_PROCESSOR"-"$UNAME_MACHINE"-nto-qnx"$UNAME_RELEASE" exit ;; *:QNX:*:4*) echo i386-pc-qnx exit ;; NEO-*:NONSTOP_KERNEL:*:*) echo neo-tandem-nsk"$UNAME_RELEASE" exit ;; NSE-*:NONSTOP_KERNEL:*:*) echo nse-tandem-nsk"$UNAME_RELEASE" exit ;; NSR-*:NONSTOP_KERNEL:*:*) echo nsr-tandem-nsk"$UNAME_RELEASE" exit ;; NSV-*:NONSTOP_KERNEL:*:*) echo nsv-tandem-nsk"$UNAME_RELEASE" exit ;; NSX-*:NONSTOP_KERNEL:*:*) echo nsx-tandem-nsk"$UNAME_RELEASE" exit ;; *:NonStop-UX:*:*) echo mips-compaq-nonstopux exit ;; BS2000:POSIX*:*:*) echo bs2000-siemens-sysv exit ;; DS/*:UNIX_System_V:*:*) echo "$UNAME_MACHINE"-"$UNAME_SYSTEM"-"$UNAME_RELEASE" exit ;; *:Plan9:*:*) # "uname -m" is not consistent, so use $cputype instead. 386 # is converted to i386 for consistency with other x86 # operating systems. if test "$cputype" = 386; then UNAME_MACHINE=i386 else UNAME_MACHINE="$cputype" fi echo "$UNAME_MACHINE"-unknown-plan9 exit ;; *:TOPS-10:*:*) echo pdp10-unknown-tops10 exit ;; *:TENEX:*:*) echo pdp10-unknown-tenex exit ;; KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*) echo pdp10-dec-tops20 exit ;; XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*) echo pdp10-xkl-tops20 exit ;; *:TOPS-20:*:*) echo pdp10-unknown-tops20 exit ;; *:ITS:*:*) echo pdp10-unknown-its exit ;; SEI:*:*:SEIUX) echo mips-sei-seiux"$UNAME_RELEASE" exit ;; *:DragonFly:*:*) echo "$UNAME_MACHINE"-unknown-dragonfly"`echo "$UNAME_RELEASE"|sed -e 's/[-(].*//'`" exit ;; *:*VMS:*:*) UNAME_MACHINE=`(uname -p) 2>/dev/null` case "$UNAME_MACHINE" in A*) echo alpha-dec-vms ; exit ;; I*) echo ia64-dec-vms ; exit ;; V*) echo vax-dec-vms ; exit ;; esac ;; *:XENIX:*:SysV) echo i386-pc-xenix exit ;; i*86:skyos:*:*) echo "$UNAME_MACHINE"-pc-skyos"`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'`" exit ;; i*86:rdos:*:*) echo "$UNAME_MACHINE"-pc-rdos exit ;; i*86:AROS:*:*) echo "$UNAME_MACHINE"-pc-aros exit ;; x86_64:VMkernel:*:*) echo "$UNAME_MACHINE"-unknown-esx exit ;; amd64:Isilon\ OneFS:*:*) echo x86_64-unknown-onefs exit ;; esac echo "$0: unable to guess system type" >&2 case "$UNAME_MACHINE:$UNAME_SYSTEM" in mips:Linux | mips64:Linux) # If we got here on MIPS GNU/Linux, output extra information. cat >&2 <&2 </dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null` /bin/uname -X = `(/bin/uname -X) 2>/dev/null` hostinfo = `(hostinfo) 2>/dev/null` /bin/universe = `(/bin/universe) 2>/dev/null` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null` /bin/arch = `(/bin/arch) 2>/dev/null` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null` UNAME_MACHINE = "$UNAME_MACHINE" UNAME_RELEASE = "$UNAME_RELEASE" UNAME_SYSTEM = "$UNAME_SYSTEM" UNAME_VERSION = "$UNAME_VERSION" EOF exit 1 # Local variables: # eval: (add-hook 'write-file-functions 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: tpm2-pkcs11-1.7.0/configure.ac0000664000175000017500000004166714116451527012736 00000000000000# SPDX-License-Identifier: BSD-2-Clause AC_INIT([tpm2-pkcs11], [m4_esyscmd_s([git describe --tags --always --dirty])], [https://github.com/tpm2-software/tpm2-pkcs11/issues], [], [https://github.com/tpm2-software/tpm2-pkcs11]) AC_CONFIG_MACRO_DIR([m4]) # propagate configure arguments to distcheck AC_SUBST([DISTCHECK_CONFIGURE_FLAGS],[$ac_configure_args]) AX_IS_RELEASE([dash-version]) AX_CHECK_ENABLE_DEBUG([info]) AC_PROG_CC LT_INIT AM_INIT_AUTOMAKE([foreign subdir-objects]) PKG_INSTALLDIR() # enable "silent-rules" option by default m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])]) AX_CODE_COVERAGE m4_ifdef([_AX_CODE_COVERAGE_RULES], [AM_CONDITIONAL(AUTOCONF_CODE_COVERAGE_2019_01_06, [true])], [AM_CONDITIONAL(AUTOCONF_CODE_COVERAGE_2019_01_06, [false])]) AX_ADD_AM_MACRO_STATIC([]) AC_CONFIG_FILES([Makefile lib/tpm2-pkcs11.pc]) # enable autoheader config.h file AC_CONFIG_HEADERS([src/lib/config.h]) # test for TSS dependencies PKG_CHECK_MODULES([TSS2_ESYS], [tss2-esys >= 2.0]) PKG_CHECK_MODULES([TSS2_MU], [tss2-mu]) PKG_CHECK_MODULES([TSS2_TCTILDR], [tss2-tctildr]) PKG_CHECK_MODULES([TSS2_RC], [tss2-rc]) AC_DEFUN([do_esapi_manage_flags], [ AC_DEFINE([ESAPI_MANAGE_FLAGS], [1], [ESAPI versions below 2.2.1 are known to require manual session flag management.]) ]) # Check for ESYS version below 2.2.1 which requires us to manage ESYS session flags PKG_CHECK_EXISTS([tss2-esys < 2.2.1], [do_esapi_manage_flags]) # ESYS >= 3.0 uses a different ABI param hierarchy in Esys_LoadExternal() PKG_CHECK_EXISTS([tss2-esys >= 3.0], [AC_DEFINE([ESYS_3], [1], [Esys3])]) # require sqlite3 and libcrypto PKG_CHECK_MODULES([SQLITE3], [sqlite3]) PKG_CHECK_MODULES([YAML], [yaml-0.1]) PKG_CHECK_MODULES([CRYPTO], [libcrypto >= 1.0.2g]) # check for pthread AX_PTHREAD([],[AC_MSG_ERROR([Cannot find pthread])]) # gnulib m4 dependency: check for linker script support gl_LD_VERSION_SCRIPT AC_ARG_ENABLE( [esapi-session-manage-flags], [AS_HELP_STRING([--enable-esapi-session-manage-flags], [Force the TPM module to manage ESAPI session flags (default is autodetect)])], [esapi_sf=$enableval]) AS_IF([test "x$esapi_sf" = "xyes"], [do_esapi_manage_flags]) AC_ARG_ENABLE( [fapi], [AS_HELP_STRING([--with-fapi], [enable or disable the fapi backend. Default is "auto" to autodetect])], [enable_fapi=$enableval], [enable_fapi=auto]) AC_DEFUN([do_fapi_configure], [ AS_IF([test "x$enable_fapi" = "xauto"], [ PKG_CHECK_MODULES([TSS2_FAPI], [tss2-fapi >= 3.0 ], [have_fapi=1], [have_fapi=0]) ], [ PKG_CHECK_MODULES([TSS2_FAPI], [tss2-fapi >= 3.0 ], [have_fapi=1]) ] ) ]) AS_IF([test "x$enable_fapi" != "xno"], [do_fapi_configure]) AS_IF([test "$have_fapi" = "1"], AC_DEFINE([HAVE_FAPI], [1], [Enabled if FAPI >= 3.0 is found]) ) AM_CONDITIONAL([HAVE_FAPI], [test "$have_fapi" = "1"]) # START ENABLE UNIT # # Enable --with-unit option for unit testing # AC_ARG_ENABLE( [unit], [AS_HELP_STRING([--enable-unit], [build unit tests])],, [enable_unit=no]) AC_ARG_ENABLE([fuzzing], [AS_HELP_STRING([--enable-fuzzing], [build the fuzz tests])],, [enable_fuzzing=no]) AM_CONDITIONAL([FUZZING], [test "x$enable_fuzzing" != xno]) AC_ARG_ENABLE([asan], [AS_HELP_STRING([--enable-asan], [Enable asan build, useful for testing])],, [enable_asan=no]) AC_ARG_ENABLE([hardening], [AS_HELP_STRING([--disable-hardening], [Disable compiler and linker options to frustrate memory corruption exploits])],, [enable_hardening="yes"]) AC_ARG_ENABLE([overflow], [AS_HELP_STRING([--disable-overflow], [Disable builtin overflow checks (enabled by default)])],, ,[enable_overflow=yes]) AS_IF([test "x$enable_overflow" = "xno"], AC_DEFINE([DISABLE_OVERFLOW_BUILTINS], [], [Define to disable built in overflow math])) AC_DEFUN([add_hardened_c_flag], [ AX_CHECK_COMPILE_FLAG([$1], [EXTRA_CFLAGS="$EXTRA_CFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) AC_ARG_WITH( [fuzzing-flags], [AS_HELP_STRING([--with-fuzzing-flags=FLAGS],[flags to pass to libfuzzer executables])], [FUZZING_FLAGS="$with_fuzzing_flags"], [FUZZING_FLAGS="-max_total_time=30"] ) AC_DEFUN([fuzzing_checks],[ # Add these to AM_CFLAGS to everyone gets built # smartly (extra info and instrumentation) add_hardened_c_flag([-fsanitize=address]) add_hardened_c_flag([-g]) add_hardened_c_flag([-O0]) AX_CHECK_COMPILE_FLAG([-fsanitize=fuzzer], [FUZZING_CFLAGS="$FUZZING_CFLAGS -fsanitize=fuzzer"], [AC_MSG_ERROR([Cannot enable -fsanitize=fuzzer])] ) AC_SUBST([FUZZING_CFLAGS]) # Disable hardening flags AC_MSG_NOTICE(["Disabling hardening --disable-hardening for --enable-fuzzing"]) enable_hardening=no AC_DEFINE([FUZZING], [1], [Defined when building fuzzing tests]) ]) AC_SUBST([FUZZING_FLAGS]) AS_IF([test "x$enable_fuzzing" = "xyes"], [fuzzing_checks]) AC_DEFUN([asan_checks],[ add_hardened_c_flag([-fsanitize=address]) add_hardened_c_flag([-g]) add_hardened_c_flag([-O0]) # Disable hardening flags AC_MSG_NOTICE(["Disabling hardening --disable-hardening for --enable-fuzzing"]) enable_hardening=no ]) AS_IF([test "x$enable_asan" = "xyes"], [asan_checks]) AM_CONDITIONAL([ENABLE_ASAN],[test "x$enable_asan" = "xyes"]) AC_DEFUN([unit_test_checks],[ AC_DEFINE([UNIT_TESTING], [1], [Define when unit testing. libtwist uses this to define a debug interface for alloc failures]) AX_GCC_FUNC_ATTRIBUTE([weak]) ]) # end function unit_test_checks AS_IF([test "x$enable_unit" = "xyes"], [unit_test_checks]) AM_CONDITIONAL([UNIT], [test "x$enable_unit" = "xyes"]) # All the tests leverage CMOCKA, so if any testing is enabled, look for it AS_IF([test "x$enable_unit" = "xyes" -o "x$enable_integration" = "xyes" -o "x$enable_fuzzing" = "xyes"], [ PKG_CHECK_MODULES([CMOCKA],[cmocka]) ] ) # END ENABLE UNIT # Macro that checks for existence of a python module AC_DEFUN([AC_PYTHON_MODULE], [AC_MSG_CHECKING([for module $2 in python]) echo "import $2" | $1 - 2>/dev/null if test $? -ne 0 ; then AC_MSG_ERROR([not found]) else AC_MSG_RESULT(found) fi ]) # START ENABLE INTEGRATION # # enable integration tests and check for simulator binary # AC_ARG_ENABLE( [integration], [AS_HELP_STRING([--enable-integration], [build and execute integration tests])],, [enable_integration=no]) # Test for Java compiler and interpreter without throwing fatal errors (since # these macros are defined using AC_DEFUN they cannot be called conditionally) m4_pushdef([AC_MSG_ERROR], [have_javac=no]) AX_PROG_JAVAC() AX_PROG_JAVA() m4_popdef([AC_MSG_ERROR]) AC_CHECK_PROG([tpm2_createprimary], [tpm2_createprimary], [yes], [no]) AS_IF([test "x$tpm2_createprimary" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_createprimary, but executable not found.])]) AC_CHECK_PROG([tpm2_create], [tpm2_create], [yes], [no]) AS_IF([test "x$tpm2_create" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_create, but executable not found.])]) AC_CHECK_PROG([tpm2_evictcontrol], [tpm2_evictcontrol], [yes], [no]) AS_IF([test "x$tpm2_evictcontrol" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_evictcontrol, but executable not found.])]) AC_CHECK_PROG([tpm2_readpublic], [tpm2_readpublic], [yes], [no]) AS_IF([test "x$tpm2_readpublic" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_readpublic, but executable not found.])]) AC_CHECK_PROG([tpm2_load], [tpm2_load], [yes], [no]) AS_IF([test "x$tpm2_load" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_load, but executable not found.])]) AC_CHECK_PROG([tpm2_loadexternal], [tpm2_loadexternal], [yes], [no]) AS_IF([test "x$tpm2_loadexternal" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_loadexternal, but executable not found.])]) AC_CHECK_PROG([tpm2_unseal], [tpm2_unseal], [yes], [no]) AS_IF([test "x$tpm2_unseal" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_unseal, but executable not found.])]) AC_CHECK_PROG([tpm2_encryptdecrypt], [tpm2_encryptdecrypt], [yes], [no]) AS_IF([test "x$tpm2_encryptdecrypt" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_encryptdecrypt, but executable not found.])]) AC_CHECK_PROG([tpm2_sign], [tpm2_sign], [yes], [no]) AS_IF([test "x$tpm2_sign" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_sign, but executable not found.])]) AC_CHECK_PROG([tpm2_getcap], [tpm2_getcap], [yes], [no]) AS_IF([test "x$tpm2_getcap" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_getcap, but executable not found.])]) AC_CHECK_PROG([tpm2_import], [tpm2_import], [yes], [no]) AS_IF([test "x$tpm2_import" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_import, but executable not found.])]) AC_CHECK_PROG([tpm2_changeauth], [tpm2_changeauth], [yes], [no]) AS_IF([test "x$tpm2_changeauth" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_changeauth, but executable not found.])]) AC_DEFUN([integration_test_checks], [ PKG_CHECK_MODULES([OPENSC_PKCS11],[opensc-pkcs11],, [AC_CHECK_FILE([/usr/lib/engines/engine_pkcs11.so])]) PKG_CHECK_MODULES([TSS2_TCTI_TABRMD],[tss2-tcti-tabrmd]) AC_CHECK_PROG([swtpm], [swtpm], [yes], [no]) AC_CHECK_PROG([tpm_server], [tpm_server], [yes], [no]) AS_IF([test "$swtpm" = yes], [TABRMD_TCTI=swtpm], [AS_IF([test "$tpm_server" = yes], [TABRMD_TCTI=mssim], [AC_MSG_ERROR([Integration tests enabled but swtpm (or tpm_server) executable not found.])])]) AC_SUBST([TABRMD_TCTI]) AC_CHECK_PROG([ss], [ss], [yes], [no]) AS_IF([test "x$ss" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but ss executable not found.])]) AC_CHECK_PROG([certutil], [certutil], [yes], [no]) AS_IF([test "x$certutil" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but certutil executable not found.])]) AC_CHECK_PROG([modutil], [modutil], [yes], [no]) AS_IF([test "x$modutil" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but modutil executable not found.])]) AC_CHECK_PROG([expect], [expect], [yes], [no]) AS_IF([test "x$expect" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but expect executable not found.])]) AC_CHECK_PROG([pkcs11_tool], [pkcs11-tool], [yes], [no]) AS_IF([test "x$pkcs11_tool" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but pkcs11-tool executable not found.])]) AC_CHECK_PROG([p11tool], [p11tool], [yes], [no]) AS_IF([test "x$p11tool" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but p11tool executable not found.])]) AC_CHECK_PROG([bash], [bash], [yes], [no]) AS_IF([test "x$bash" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but bash executable not found.])]) AC_CHECK_PROG([sqlite3], [sqlite3], [yes], [no]) AS_IF([test "x$sqlite3" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but sqlite3 executable not found.])]) AC_CHECK_PROG([tpm2_abrmd], [tpm2-abrmd], [yes], [no]) AS_IF([test "x$tpm2_abrmd" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but tpm2-abrmd executable not found.])]) AM_PATH_PYTHON([3.7], [AC_SUBST([PYTHON_INTERPRETER], [$PYTHON])], [AC_MSG_ERROR([Integration tests enabled but python >= 3.7 executable not found.])] ) AC_PYTHON_MODULE([$PYTHON], [pkcs11]) AS_IF([test "$have_fapi" = "1"], [ AC_CHECK_PROG([tss2_provision], [tss2_provision], [yes], [no]) AS_IF([test "x$tss2_provision" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but tss2_provision executable not found.])]) AC_CHECK_PROG([tpm2tss_genkey], [tpm2tss-genkey], [yes], [no]) AS_IF([test "x$tpm2tss_genkey" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but tpm2tss-genkey executable not found.])]) ]) AS_IF([test "x$have_javac" = "xno"], [AC_MSG_ERROR([Integration tests enabled but no Java compiler was found])]) AX_CHECK_CLASS([org.junit.Assert], , [AC_MSG_ERROR([Integration tests enabled but JUnit not found, try setting CLASSPATH])]) AX_CHECK_CLASS([org.hamcrest.SelfDescribing], , [AC_MSG_ERROR([Integration tests enabled but Hamcrest not found, try setting CLASSPATH])]) AC_SUBST([ENABLE_INTEGRATION], [$enable_integration]) ]) # end function integration_test_checks AS_IF([test "x$enable_integration" = "xyes"], [integration_test_checks]) AM_CONDITIONAL([ENABLE_INTEGRATION],[test "x$enable_integration" = "xyes"]) # END ENABLE INTEGRATION AC_DEFUN([handle_store_dir],[ AX_NORMALIZE_PATH([with_storedir]) AC_DEFINE_UNQUOTED([TPM2_PKCS11_STORE_DIR], ["$with_storedir"], [Changes the store directory to search. Defaults to /etc/tpm2_pkcs11]) ]) # START WITH STOREDIR # # Enable --with-storedir for changing the default store directory search path # AC_ARG_WITH( [storedir], [AS_HELP_STRING([--with-storedir=DIR],[Store directory for searching, defaults to /etc/tpm2_pkcs11])], [handle_store_dir] ) # END WITH STOREDIR # START ENABLE PACK # # Enable --enable-pack for forcing structure packing # AC_ARG_ENABLE( [pack], [AS_HELP_STRING([--enable-pack=]@<:@yes/no@:>@, [Pack the structures. (default is no, except on Windows, where it defaults to packing)])],, [enable_pack=no]) AS_IF([test "x$enable_pack" = "xyes"], [AC_DEFINE([PKCS11_PACK], [1], [Define to enable 1 byte structure packing. Default for Windows builds.]) ]) # END ENABLE PACK # START P11 CONFIG # If P11 kit is installed we want to detect it and install # the module config file and change the library install location. AC_DEFUN([do_p11kit_config], [ AS_IF([test -z "$1"], [ PKG_CHECK_VAR([P11_MODULE_PATH], [p11-kit-1], [p11_module_path]) AC_MSG_CHECKING([p11 module path]) AS_IF([test "x$P11_MODULE_PATH" = "x"], [ AC_MSG_FAILURE([Unable to identify p11 module path.]) ]) AC_MSG_RESULT([$P11_MODULE_PATH]) ], [ AC_SUBST(P11_MODULE_PATH, [$1]) ]) AS_IF([test -z "$2"], [ PKG_CHECK_VAR([P11_CONFIGS_PATH], [p11-kit-1], [p11_module_configs]) AC_MSG_CHECKING([p11 configs path]) AS_IF([test "x$P11_CONFIGS_PATH" = "x"], [ AC_MSG_FAILURE([Unable to identify p11 configs path.]) ]) AC_MSG_RESULT([$P11_CONFIGS_PATH]) ], [ AC_SUBST(P11_CONFIGS_PATH, [$2]) ]) ]) AC_ARG_WITH([p11kitconfigdir], AS_HELP_STRING([--with-p11kitconfigdir=DIR], [directory for p11kit config])) AC_SUBST(p11kitconfigdir, [$with_p11kitconfigdir]) AC_ARG_WITH([p11kitmoduledir], AS_HELP_STRING([--with-p11kitmoduledir=DIR], [directory for p11 libraries])) AC_SUBST(p11kitmoduledir, [$with_p11kitmoduledir]) # set havep11kit based on if P11kit is installed, then: # 1. execute function do_p11kit_config # 2. set the makefile flag HAVE_P11_KIT PKG_CHECK_MODULES( [P11KIT], [p11-kit-1], [have_p11kit=yes], [have_p11kit=no]) AS_IF([test "x$have_p11kit" = "xyes"], [ do_p11kit_config([$p11kitmoduledir], [$p11kitconfigdir]) ]) AM_CONDITIONAL([HAVE_P11KIT], [test "x$have_p11kit" = "xyes"]) # END P11 CONFIG AC_C_BIGENDIAN() # Good information on adding flags, and dealing with compilers can be found here: # https://github.com/zcash/zcash/issues/1832 # https://github.com/kmcallister/autoharden/ AS_IF([test x"$enable_hardening" != xno], [ AC_DEFUN([add_hardened_ld_flag], [ AX_CHECK_LINK_FLAG([$1], [EXTRA_LDFLAGS="$EXTRA_LDFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) AC_DEFUN([add_hardened_define_flag], [ AX_CHECK_PREPROC_FLAG([$1], [EXTRA_CFLAGS="$EXTRA_CFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) add_hardened_c_flag([-Wall]) add_hardened_c_flag([-Wextra]) AS_IF([test "x$ax_is_release" = "xno"], [add_hardened_c_flag([-Werror])]) add_hardened_c_flag([-Wformat]) add_hardened_c_flag([-Wformat-security]) add_hardened_c_flag([-Wstack-protector]) add_hardened_c_flag([-fstack-protector-all]) add_hardened_c_flag([-Wstrict-overflow=5]) add_hardened_c_flag([-O2]) AX_ADD_FORTIFY_SOURCE add_hardened_c_flag([-fPIC]) add_hardened_ld_flag([[-shared]]) add_hardened_c_flag([-fPIE]) add_hardened_ld_flag([[-pie]]) add_hardened_ld_flag([[-Wl,-z,relro]]) add_hardened_ld_flag([[-Wl,-z,now]]) ], [ AC_MSG_WARN([Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!]) ]) # Best attempt, strip unused stuff from the binary to reduce size. # Rather than nesting these and making them ugly just use a counter. AX_CHECK_COMPILE_FLAG([-fdata-sections], [strip=y]) AX_CHECK_COMPILE_FLAG([-ffunction-sections], [strip="y$strip"]) AX_CHECK_LINK_FLAG([[-Wl,--gc-sections]], [strip+="y$strip"]) AS_IF([test x"$strip" = xyyy], [ EXTRA_CFLAGS="$EXTRA_CFLAGS -fdata-sections -ffunction-sections" EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,--gc-sections" ], AC_MSG_NOTICE([Not using compiler options to reduce binary size!]) ) AC_SUBST([EXTRA_CFLAGS]) AC_SUBST([EXTRA_LDFLAGS]) AC_OUTPUT tpm2-pkcs11-1.7.0/AUTHORS0000664000175000017500000000236214124415534011502 00000000000000William Roberts Jonas Witschel Andreas Fuchs Peter Huewe Nicolas Iooss ДилÑĐ½ ĐŸĐ°Đ»Đ°ÑƒĐ·Đ¾Đ² Markus Linnala Daniel Kobras Johannes Holland Peter Huewe Imran Desai Tadeusz Struk Matthew Dempsky joholl Jakub Jelen Iwan Timmer Alvin Chen Tilman Keskinöz Nicolas Oliver Joshua Lock bb-froggy Vincent Cao Tom Stellard SZ Lin (æ—ä¸æ™º) Robby Cornelissen Philip Fyvie Mitchell Khushboo Bindlish Jay Chetty Erik Larsson Desislav Iliev Alexander Naumov tpm2-pkcs11-1.7.0/Makefile-fuzz.am0000644000175000017500000000711313754763565013501 00000000000000# SPDX-License-Identifier: BSD-2-Clause TEST_EXTENSIONS += .fuzz .fuzz32 WRAP_LD_FLAGS := \ -Wl,--wrap=Esys_Initialize \ -Wl,--wrap=backend_fapi_init \ -Wl,--wrap=Tss2_TctiLdr_Initialize \ -Wl,--wrap=Tss2_TctiLdr_Finalize \ -Wl,--wrap=Esys_GetCapability \ -Wl,--wrap=Esys_TestParms \ -Wl,--wrap=Esys_Finalize \ -Wl,--wrap=Esys_TR_FromTPMPublic \ -Wl,--wrap=Esys_TR_Serialize \ -Wl,--wrap=Esys_TR_Deserialize \ -Wl,--wrap=Esys_TR_SetAuth \ -Wl,--wrap=Esys_StartAuthSession \ -Wl,--wrap=Esys_TRSess_SetAttributes \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_CreateLoaded \ -Wl,--wrap=Esys_Create \ -Wl,--wrap=Esys_FlushContext \ -Wl,--wrap=Esys_Load \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_Unseal \ -Wl,--wrap=Esys_ObjectChangeAuth if FUZZING FUZZ_RUNNER := $(top_srcdir)/test/fuzz/scripts/fuzz-runner.sh AM_FUZZ_LOG_FLAGS=$(FUZZING_FLAGS) FUZZ_LOG_COMPILER=$(FUZZ_RUNNER) test_fuzz_yaml_parser_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) test_fuzz_yaml_parser_fuzz_LDADD = $(libtpm2_test_pkcs11) test_fuzz_yaml_parser_fuzz_SOURCES = test/fuzz/yaml-parser.fuzz.c test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(FUZZING_CFLAGS) test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD = $(libtpm2_test_pkcs11) $(CMOCKA_LIBS) test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES = test/fuzz/utils-ctx-unwrap-objauth.c test_fuzz_init_token_sopin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_token_sopin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_token_sopin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_token_sopin_fuzz_SOURCES = test/fuzz/init-token-sopin.fuzz.c test_fuzz_init_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_pin_fuzz_SOURCES = test/fuzz/init-pin.fuzz.c test_fuzz_set_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_set_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_set_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_set_pin_fuzz_SOURCES = test/fuzz/set-pin.fuzz.c AM_FUZZ32_LOG_FLAGS=$(FUZZING_FLAGS) -max_len=32 FUZZ32_LOG_COMPILER=$(FUZZ_RUNNER) test_fuzz_init_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_token_label_fuzz32_SOURCES = test/fuzz/init-token-label.fuzz32.c test_fuzz_db_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_db_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_db_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_db_token_label_fuzz32_SOURCES = test/fuzz/db-token-label.fuzz32.c fuzz_PROGRAMS = \ test/fuzz/yaml-parser.fuzz \ test/fuzz/init-token-sopin.fuzz \ test/fuzz/init-pin.fuzz \ test/fuzz/set-pin.fuzz \ test/fuzz/db-token-label.fuzz32 \ test/fuzz/init-token-label.fuzz32 \ test/fuzz/utils-ctx-unwrap-objauth.fuzz # make check will run the fuzz targets check_PROGRAMS += $(fuzz_PROGRAMS) fuzzdir = $(srcdir) fuzz-targets: $(fuzz_PROGRAMS) endif # FUZZING tpm2-pkcs11-1.7.0/missing0000755000175000017500000001533613616550647012046 00000000000000#! /bin/sh # Common wrapper for a few potentially missing GNU programs. scriptversion=2018-03-07.03; # UTC # Copyright (C) 1996-2018 Free Software Foundation, Inc. # Originally written by Fran,cois Pinard , 1996. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. if test $# -eq 0; then echo 1>&2 "Try '$0 --help' for more information" exit 1 fi case $1 in --is-lightweight) # Used by our autoconf macros to check whether the available missing # script is modern enough. exit 0 ;; --run) # Back-compat with the calling convention used by older automake. shift ;; -h|--h|--he|--hel|--help) echo "\ $0 [OPTION]... PROGRAM [ARGUMENT]... Run 'PROGRAM [ARGUMENT]...', returning a proper advice when this fails due to PROGRAM being missing or too old. Options: -h, --help display this help and exit -v, --version output version information and exit Supported PROGRAM values: aclocal autoconf autoheader autom4te automake makeinfo bison yacc flex lex help2man Version suffixes to PROGRAM as well as the prefixes 'gnu-', 'gnu', and 'g' are ignored when checking the name. Send bug reports to ." exit $? ;; -v|--v|--ve|--ver|--vers|--versi|--versio|--version) echo "missing $scriptversion (GNU Automake)" exit $? ;; -*) echo 1>&2 "$0: unknown '$1' option" echo 1>&2 "Try '$0 --help' for more information" exit 1 ;; esac # Run the given program, remember its exit status. "$@"; st=$? # If it succeeded, we are done. test $st -eq 0 && exit 0 # Also exit now if we it failed (or wasn't found), and '--version' was # passed; such an option is passed most likely to detect whether the # program is present and works. case $2 in --version|--help) exit $st;; esac # Exit code 63 means version mismatch. This often happens when the user # tries to use an ancient version of a tool on a file that requires a # minimum version. if test $st -eq 63; then msg="probably too old" elif test $st -eq 127; then # Program was missing. msg="missing on your system" else # Program was found and executed, but failed. Give up. exit $st fi perl_URL=https://www.perl.org/ flex_URL=https://github.com/westes/flex gnu_software_URL=https://www.gnu.org/software program_details () { case $1 in aclocal|automake) echo "The '$1' program is part of the GNU Automake package:" echo "<$gnu_software_URL/automake>" echo "It also requires GNU Autoconf, GNU m4 and Perl in order to run:" echo "<$gnu_software_URL/autoconf>" echo "<$gnu_software_URL/m4/>" echo "<$perl_URL>" ;; autoconf|autom4te|autoheader) echo "The '$1' program is part of the GNU Autoconf package:" echo "<$gnu_software_URL/autoconf/>" echo "It also requires GNU m4 and Perl in order to run:" echo "<$gnu_software_URL/m4/>" echo "<$perl_URL>" ;; esac } give_advice () { # Normalize program name to check for. normalized_program=`echo "$1" | sed ' s/^gnu-//; t s/^gnu//; t s/^g//; t'` printf '%s\n' "'$1' is $msg." configure_deps="'configure.ac' or m4 files included by 'configure.ac'" case $normalized_program in autoconf*) echo "You should only need it if you modified 'configure.ac'," echo "or m4 files included by it." program_details 'autoconf' ;; autoheader*) echo "You should only need it if you modified 'acconfig.h' or" echo "$configure_deps." program_details 'autoheader' ;; automake*) echo "You should only need it if you modified 'Makefile.am' or" echo "$configure_deps." program_details 'automake' ;; aclocal*) echo "You should only need it if you modified 'acinclude.m4' or" echo "$configure_deps." program_details 'aclocal' ;; autom4te*) echo "You might have modified some maintainer files that require" echo "the 'autom4te' program to be rebuilt." program_details 'autom4te' ;; bison*|yacc*) echo "You should only need it if you modified a '.y' file." echo "You may want to install the GNU Bison package:" echo "<$gnu_software_URL/bison/>" ;; lex*|flex*) echo "You should only need it if you modified a '.l' file." echo "You may want to install the Fast Lexical Analyzer package:" echo "<$flex_URL>" ;; help2man*) echo "You should only need it if you modified a dependency" \ "of a man page." echo "You may want to install the GNU Help2man package:" echo "<$gnu_software_URL/help2man/>" ;; makeinfo*) echo "You should only need it if you modified a '.texi' file, or" echo "any other file indirectly affecting the aspect of the manual." echo "You might want to install the Texinfo package:" echo "<$gnu_software_URL/texinfo/>" echo "The spurious makeinfo call might also be the consequence of" echo "using a buggy 'make' (AIX, DU, IRIX), in which case you might" echo "want to install GNU make:" echo "<$gnu_software_URL/make/>" ;; *) echo "You might have modified some files without having the proper" echo "tools for further handling them. Check the 'README' file, it" echo "often tells you about the needed prerequisites for installing" echo "this package. You may also peek at any GNU archive site, in" echo "case some other package contains this missing '$1' program." ;; esac } give_advice "$1" | sed -e '1s/^/WARNING: /' \ -e '2,$s/^/ /' >&2 # Propagate the correct exit status (expected to be 127 for a program # not found, 63 for a program that failed due to version mismatch). exit $st # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.7.0/depcomp0000755000175000017500000005602013616550647012017 00000000000000#! /bin/sh # depcomp - compile a program generating dependencies as side-effects scriptversion=2018-03-07.03; # UTC # Copyright (C) 1999-2018 Free Software Foundation, Inc. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # Originally written by Alexandre Oliva . case $1 in '') echo "$0: No command. Try '$0 --help' for more information." 1>&2 exit 1; ;; -h | --h*) cat <<\EOF Usage: depcomp [--help] [--version] PROGRAM [ARGS] Run PROGRAMS ARGS to compile a file, generating dependencies as side-effects. Environment variables: depmode Dependency tracking mode. source Source file read by 'PROGRAMS ARGS'. object Object file output by 'PROGRAMS ARGS'. DEPDIR directory where to store dependencies. depfile Dependency file to output. tmpdepfile Temporary file to use when outputting dependencies. libtool Whether libtool is used (yes/no). Report bugs to . EOF exit $? ;; -v | --v*) echo "depcomp $scriptversion" exit $? ;; esac # Get the directory component of the given path, and save it in the # global variables '$dir'. Note that this directory component will # be either empty or ending with a '/' character. This is deliberate. set_dir_from () { case $1 in */*) dir=`echo "$1" | sed -e 's|/[^/]*$|/|'`;; *) dir=;; esac } # Get the suffix-stripped basename of the given path, and save it the # global variable '$base'. set_base_from () { base=`echo "$1" | sed -e 's|^.*/||' -e 's/\.[^.]*$//'` } # If no dependency file was actually created by the compiler invocation, # we still have to create a dummy depfile, to avoid errors with the # Makefile "include basename.Plo" scheme. make_dummy_depfile () { echo "#dummy" > "$depfile" } # Factor out some common post-processing of the generated depfile. # Requires the auxiliary global variable '$tmpdepfile' to be set. aix_post_process_depfile () { # If the compiler actually managed to produce a dependency file, # post-process it. if test -f "$tmpdepfile"; then # Each line is of the form 'foo.o: dependency.h'. # Do two passes, one to just change these to # $object: dependency.h # and one to simply output # dependency.h: # which is needed to avoid the deleted-header problem. { sed -e "s,^.*\.[$lower]*:,$object:," < "$tmpdepfile" sed -e "s,^.*\.[$lower]*:[$tab ]*,," -e 's,$,:,' < "$tmpdepfile" } > "$depfile" rm -f "$tmpdepfile" else make_dummy_depfile fi } # A tabulation character. tab=' ' # A newline character. nl=' ' # Character ranges might be problematic outside the C locale. # These definitions help. upper=ABCDEFGHIJKLMNOPQRSTUVWXYZ lower=abcdefghijklmnopqrstuvwxyz digits=0123456789 alpha=${upper}${lower} if test -z "$depmode" || test -z "$source" || test -z "$object"; then echo "depcomp: Variables source, object and depmode must be set" 1>&2 exit 1 fi # Dependencies for sub/bar.o or sub/bar.obj go into sub/.deps/bar.Po. depfile=${depfile-`echo "$object" | sed 's|[^\\/]*$|'${DEPDIR-.deps}'/&|;s|\.\([^.]*\)$|.P\1|;s|Pobj$|Po|'`} tmpdepfile=${tmpdepfile-`echo "$depfile" | sed 's/\.\([^.]*\)$/.T\1/'`} rm -f "$tmpdepfile" # Avoid interferences from the environment. gccflag= dashmflag= # Some modes work just like other modes, but use different flags. We # parameterize here, but still list the modes in the big case below, # to make depend.m4 easier to write. Note that we *cannot* use a case # here, because this file can only contain one case statement. if test "$depmode" = hp; then # HP compiler uses -M and no extra arg. gccflag=-M depmode=gcc fi if test "$depmode" = dashXmstdout; then # This is just like dashmstdout with a different argument. dashmflag=-xM depmode=dashmstdout fi cygpath_u="cygpath -u -f -" if test "$depmode" = msvcmsys; then # This is just like msvisualcpp but w/o cygpath translation. # Just convert the backslash-escaped backslashes to single forward # slashes to satisfy depend.m4 cygpath_u='sed s,\\\\,/,g' depmode=msvisualcpp fi if test "$depmode" = msvc7msys; then # This is just like msvc7 but w/o cygpath translation. # Just convert the backslash-escaped backslashes to single forward # slashes to satisfy depend.m4 cygpath_u='sed s,\\\\,/,g' depmode=msvc7 fi if test "$depmode" = xlc; then # IBM C/C++ Compilers xlc/xlC can output gcc-like dependency information. gccflag=-qmakedep=gcc,-MF depmode=gcc fi case "$depmode" in gcc3) ## gcc 3 implements dependency tracking that does exactly what ## we want. Yay! Note: for some reason libtool 1.4 doesn't like ## it if -MD -MP comes after the -MF stuff. Hmm. ## Unfortunately, FreeBSD c89 acceptance of flags depends upon ## the command line argument order; so add the flags where they ## appear in depend2.am. Note that the slowdown incurred here ## affects only configure: in makefiles, %FASTDEP% shortcuts this. for arg do case $arg in -c) set fnord "$@" -MT "$object" -MD -MP -MF "$tmpdepfile" "$arg" ;; *) set fnord "$@" "$arg" ;; esac shift # fnord shift # $arg done "$@" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi mv "$tmpdepfile" "$depfile" ;; gcc) ## Note that this doesn't just cater to obsosete pre-3.x GCC compilers. ## but also to in-use compilers like IMB xlc/xlC and the HP C compiler. ## (see the conditional assignment to $gccflag above). ## There are various ways to get dependency output from gcc. Here's ## why we pick this rather obscure method: ## - Don't want to use -MD because we'd like the dependencies to end ## up in a subdir. Having to rename by hand is ugly. ## (We might end up doing this anyway to support other compilers.) ## - The DEPENDENCIES_OUTPUT environment variable makes gcc act like ## -MM, not -M (despite what the docs say). Also, it might not be ## supported by the other compilers which use the 'gcc' depmode. ## - Using -M directly means running the compiler twice (even worse ## than renaming). if test -z "$gccflag"; then gccflag=-MD, fi "$@" -Wp,"$gccflag$tmpdepfile" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" echo "$object : \\" > "$depfile" # The second -e expression handles DOS-style file names with drive # letters. sed -e 's/^[^:]*: / /' \ -e 's/^['$alpha']:\/[^:]*: / /' < "$tmpdepfile" >> "$depfile" ## This next piece of magic avoids the "deleted header file" problem. ## The problem is that when a header file which appears in a .P file ## is deleted, the dependency causes make to die (because there is ## typically no way to rebuild the header). We avoid this by adding ## dummy dependencies for each header file. Too bad gcc doesn't do ## this for us directly. ## Some versions of gcc put a space before the ':'. On the theory ## that the space means something, we add a space to the output as ## well. hp depmode also adds that space, but also prefixes the VPATH ## to the object. Take care to not repeat it in the output. ## Some versions of the HPUX 10.20 sed can't process this invocation ## correctly. Breaking it into two sed invocations is a workaround. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^\\$//' -e '/^$/d' -e "s|.*$object$||" -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; hp) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; sgi) if test "$libtool" = yes; then "$@" "-Wp,-MDupdate,$tmpdepfile" else "$@" -MDupdate "$tmpdepfile" fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" if test -f "$tmpdepfile"; then # yes, the sourcefile depend on other files echo "$object : \\" > "$depfile" # Clip off the initial element (the dependent). Don't try to be # clever and replace this with sed code, as IRIX sed won't handle # lines with more than a fixed number of characters (4096 in # IRIX 6.2 sed, 8192 in IRIX 6.5). We also remove comment lines; # the IRIX cc adds comments like '#:fec' to the end of the # dependency line. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' \ | tr "$nl" ' ' >> "$depfile" echo >> "$depfile" # The second pass generates a dummy entry for each header file. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' -e 's/$/:/' \ >> "$depfile" else make_dummy_depfile fi rm -f "$tmpdepfile" ;; xlc) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; aix) # The C for AIX Compiler uses -M and outputs the dependencies # in a .u file. In older versions, this file always lives in the # current directory. Also, the AIX compiler puts '$object:' at the # start of each line; $object doesn't have directory information. # Version 6 uses the directory in both cases. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then tmpdepfile1=$dir$base.u tmpdepfile2=$base.u tmpdepfile3=$dir.libs/$base.u "$@" -Wc,-M else tmpdepfile1=$dir$base.u tmpdepfile2=$dir$base.u tmpdepfile3=$dir$base.u "$@" -M fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" do test -f "$tmpdepfile" && break done aix_post_process_depfile ;; tcc) # tcc (Tiny C Compiler) understand '-MD -MF file' since version 0.9.26 # FIXME: That version still under development at the moment of writing. # Make that this statement remains true also for stable, released # versions. # It will wrap lines (doesn't matter whether long or short) with a # trailing '\', as in: # # foo.o : \ # foo.c \ # foo.h \ # # It will put a trailing '\' even on the last line, and will use leading # spaces rather than leading tabs (at least since its commit 0394caf7 # "Emit spaces for -MD"). "$@" -MD -MF "$tmpdepfile" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" # Each non-empty line is of the form 'foo.o : \' or ' dep.h \'. # We have to change lines of the first kind to '$object: \'. sed -e "s|.*:|$object :|" < "$tmpdepfile" > "$depfile" # And for each line of the second kind, we have to emit a 'dep.h:' # dummy dependency, to avoid the deleted-header problem. sed -n -e 's|^ *\(.*\) *\\$|\1:|p' < "$tmpdepfile" >> "$depfile" rm -f "$tmpdepfile" ;; ## The order of this option in the case statement is important, since the ## shell code in configure will try each of these formats in the order ## listed in this file. A plain '-MD' option would be understood by many ## compilers, so we must ensure this comes after the gcc and icc options. pgcc) # Portland's C compiler understands '-MD'. # Will always output deps to 'file.d' where file is the root name of the # source file under compilation, even if file resides in a subdirectory. # The object file name does not affect the name of the '.d' file. # pgcc 10.2 will output # foo.o: sub/foo.c sub/foo.h # and will wrap long lines using '\' : # foo.o: sub/foo.c ... \ # sub/foo.h ... \ # ... set_dir_from "$object" # Use the source, not the object, to determine the base name, since # that's sadly what pgcc will do too. set_base_from "$source" tmpdepfile=$base.d # For projects that build the same source file twice into different object # files, the pgcc approach of using the *source* file root name can cause # problems in parallel builds. Use a locking strategy to avoid stomping on # the same $tmpdepfile. lockdir=$base.d-lock trap " echo '$0: caught signal, cleaning up...' >&2 rmdir '$lockdir' exit 1 " 1 2 13 15 numtries=100 i=$numtries while test $i -gt 0; do # mkdir is a portable test-and-set. if mkdir "$lockdir" 2>/dev/null; then # This process acquired the lock. "$@" -MD stat=$? # Release the lock. rmdir "$lockdir" break else # If the lock is being held by a different process, wait # until the winning process is done or we timeout. while test -d "$lockdir" && test $i -gt 0; do sleep 1 i=`expr $i - 1` done fi i=`expr $i - 1` done trap - 1 2 13 15 if test $i -le 0; then echo "$0: failed to acquire lock after $numtries attempts" >&2 echo "$0: check lockdir '$lockdir'" >&2 exit 1 fi if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" # Each line is of the form `foo.o: dependent.h', # or `foo.o: dep1.h dep2.h \', or ` dep3.h dep4.h \'. # Do two passes, one to just change these to # `$object: dependent.h' and one to simply `dependent.h:'. sed "s,^[^:]*:,$object :," < "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process this invocation # correctly. Breaking it into two sed invocations is a workaround. sed 's,^[^:]*: \(.*\)$,\1,;s/^\\$//;/^$/d;/:$/d' < "$tmpdepfile" \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; hp2) # The "hp" stanza above does not work with aCC (C++) and HP's ia64 # compilers, which have integrated preprocessors. The correct option # to use with these is +Maked; it writes dependencies to a file named # 'foo.d', which lands next to the object file, wherever that # happens to be. # Much of this is similar to the tru64 case; see comments there. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then tmpdepfile1=$dir$base.d tmpdepfile2=$dir.libs/$base.d "$@" -Wc,+Maked else tmpdepfile1=$dir$base.d tmpdepfile2=$dir$base.d "$@" +Maked fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" do test -f "$tmpdepfile" && break done if test -f "$tmpdepfile"; then sed -e "s,^.*\.[$lower]*:,$object:," "$tmpdepfile" > "$depfile" # Add 'dependent.h:' lines. sed -ne '2,${ s/^ *// s/ \\*$// s/$/:/ p }' "$tmpdepfile" >> "$depfile" else make_dummy_depfile fi rm -f "$tmpdepfile" "$tmpdepfile2" ;; tru64) # The Tru64 compiler uses -MD to generate dependencies as a side # effect. 'cc -MD -o foo.o ...' puts the dependencies into 'foo.o.d'. # At least on Alpha/Redhat 6.1, Compaq CCC V6.2-504 seems to put # dependencies in 'foo.d' instead, so we check for that too. # Subdirectories are respected. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then # Libtool generates 2 separate objects for the 2 libraries. These # two compilations output dependencies in $dir.libs/$base.o.d and # in $dir$base.o.d. We have to check for both files, because # one of the two compilations can be disabled. We should prefer # $dir$base.o.d over $dir.libs/$base.o.d because the latter is # automatically cleaned when .libs/ is deleted, while ignoring # the former would cause a distcleancheck panic. tmpdepfile1=$dir$base.o.d # libtool 1.5 tmpdepfile2=$dir.libs/$base.o.d # Likewise. tmpdepfile3=$dir.libs/$base.d # Compaq CCC V6.2-504 "$@" -Wc,-MD else tmpdepfile1=$dir$base.d tmpdepfile2=$dir$base.d tmpdepfile3=$dir$base.d "$@" -MD fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" do test -f "$tmpdepfile" && break done # Same post-processing that is required for AIX mode. aix_post_process_depfile ;; msvc7) if test "$libtool" = yes; then showIncludes=-Wc,-showIncludes else showIncludes=-showIncludes fi "$@" $showIncludes > "$tmpdepfile" stat=$? grep -v '^Note: including file: ' "$tmpdepfile" if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" echo "$object : \\" > "$depfile" # The first sed program below extracts the file names and escapes # backslashes for cygpath. The second sed program outputs the file # name when reading, but also accumulates all include files in the # hold buffer in order to output them again at the end. This only # works with sed implementations that can handle large buffers. sed < "$tmpdepfile" -n ' /^Note: including file: *\(.*\)/ { s//\1/ s/\\/\\\\/g p }' | $cygpath_u | sort -u | sed -n ' s/ /\\ /g s/\(.*\)/'"$tab"'\1 \\/p s/.\(.*\) \\/\1:/ H $ { s/.*/'"$tab"'/ G p }' >> "$depfile" echo >> "$depfile" # make sure the fragment doesn't end with a backslash rm -f "$tmpdepfile" ;; msvc7msys) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; #nosideeffect) # This comment above is used by automake to tell side-effect # dependency tracking mechanisms from slower ones. dashmstdout) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout, regardless of -o. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # Remove '-o $object'. IFS=" " for arg do case $arg in -o) shift ;; $object) shift ;; *) set fnord "$@" "$arg" shift # fnord shift # $arg ;; esac done test -z "$dashmflag" && dashmflag=-M # Require at least two characters before searching for ':' # in the target name. This is to cope with DOS-style filenames: # a dependency such as 'c:/foo/bar' could be seen as target 'c' otherwise. "$@" $dashmflag | sed "s|^[$tab ]*[^:$tab ][^:][^:]*:[$tab ]*|$object: |" > "$tmpdepfile" rm -f "$depfile" cat < "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process this sed invocation # correctly. Breaking it into two sed invocations is a workaround. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; dashXmstdout) # This case only exists to satisfy depend.m4. It is never actually # run, as this mode is specially recognized in the preamble. exit 1 ;; makedepend) "$@" || exit $? # Remove any Libtool call if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # X makedepend shift cleared=no eat=no for arg do case $cleared in no) set ""; shift cleared=yes ;; esac if test $eat = yes; then eat=no continue fi case "$arg" in -D*|-I*) set fnord "$@" "$arg"; shift ;; # Strip any option that makedepend may not understand. Remove # the object too, otherwise makedepend will parse it as a source file. -arch) eat=yes ;; -*|$object) ;; *) set fnord "$@" "$arg"; shift ;; esac done obj_suffix=`echo "$object" | sed 's/^.*\././'` touch "$tmpdepfile" ${MAKEDEPEND-makedepend} -o"$obj_suffix" -f"$tmpdepfile" "$@" rm -f "$depfile" # makedepend may prepend the VPATH from the source file name to the object. # No need to regex-escape $object, excess matching of '.' is harmless. sed "s|^.*\($object *:\)|\1|" "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process the last invocation # correctly. Breaking it into two sed invocations is a workaround. sed '1,2d' "$tmpdepfile" \ | tr ' ' "$nl" \ | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" "$tmpdepfile".bak ;; cpp) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # Remove '-o $object'. IFS=" " for arg do case $arg in -o) shift ;; $object) shift ;; *) set fnord "$@" "$arg" shift # fnord shift # $arg ;; esac done "$@" -E \ | sed -n -e '/^# [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \ -e '/^#line [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \ | sed '$ s: \\$::' > "$tmpdepfile" rm -f "$depfile" echo "$object : \\" > "$depfile" cat < "$tmpdepfile" >> "$depfile" sed < "$tmpdepfile" '/^$/d;s/^ //;s/ \\$//;s/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; msvisualcpp) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi IFS=" " for arg do case "$arg" in -o) shift ;; $object) shift ;; "-Gm"|"/Gm"|"-Gi"|"/Gi"|"-ZI"|"/ZI") set fnord "$@" shift shift ;; *) set fnord "$@" "$arg" shift shift ;; esac done "$@" -E 2>/dev/null | sed -n '/^#line [0-9][0-9]* "\([^"]*\)"/ s::\1:p' | $cygpath_u | sort -u > "$tmpdepfile" rm -f "$depfile" echo "$object : \\" > "$depfile" sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::'"$tab"'\1 \\:p' >> "$depfile" echo "$tab" >> "$depfile" sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::\1\::p' >> "$depfile" rm -f "$tmpdepfile" ;; msvcmsys) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; none) exec "$@" ;; *) echo "Unknown depmode $depmode" 1>&2 exit 1 ;; esac exit 0 # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.7.0/Makefile.in0000664000175000017500000072574114124412615012511 00000000000000# Makefile.in generated by automake 1.16.1 from Makefile.am. # @configure_input@ # Copyright (C) 1994-2018 Free Software Foundation, Inc. # This Makefile.in is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY, to the extent permitted by law; without # even the implied warranty of MERCHANTABILITY or FITNESS FOR A # PARTICULAR PURPOSE. @SET_MAKE@ # SPDX-License-Identifier: BSD-2-Clause # aminclude_static.am generated automatically by Autoconf # from AX_AM_MACROS_STATIC on Mon Sep 27 14:03:41 CDT 2021 # SPDX-License-Identifier: BSD-2-Clause VPATH = @srcdir@ am__is_gnu_make = { \ if test -z '$(MAKELEVEL)'; then \ false; \ elif test -n '$(MAKE_HOST)'; then \ true; \ elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \ true; \ else \ false; \ fi; \ } am__make_running_with_option = \ case $${target_option-} in \ ?) ;; \ *) echo "am__make_running_with_option: internal error: invalid" \ "target option '$${target_option-}' specified" >&2; \ exit 1;; \ esac; \ has_opt=no; \ sane_makeflags=$$MAKEFLAGS; \ if $(am__is_gnu_make); then \ sane_makeflags=$$MFLAGS; \ else \ case $$MAKEFLAGS in \ *\\[\ \ ]*) \ bs=\\; \ sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \ | sed "s/$$bs$$bs[$$bs $$bs ]*//g"`;; \ esac; \ fi; \ skip_next=no; \ strip_trailopt () \ { \ flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \ }; \ for flg in $$sane_makeflags; do \ test $$skip_next = yes && { skip_next=no; continue; }; \ case $$flg in \ *=*|--*) continue;; \ -*I) strip_trailopt 'I'; skip_next=yes;; \ -*I?*) strip_trailopt 'I';; \ -*O) strip_trailopt 'O'; skip_next=yes;; \ -*O?*) strip_trailopt 'O';; \ -*l) strip_trailopt 'l'; skip_next=yes;; \ -*l?*) strip_trailopt 'l';; \ -[dEDm]) skip_next=yes;; \ -[JT]) skip_next=yes;; \ esac; \ case $$flg in \ *$$target_option*) has_opt=yes; break;; \ esac; \ done; \ test $$has_opt = yes am__make_dryrun = (target_option=n; $(am__make_running_with_option)) am__make_keepgoing = (target_option=k; $(am__make_running_with_option)) pkgdatadir = $(datadir)/@PACKAGE@ pkgincludedir = $(includedir)/@PACKAGE@ pkglibdir = $(libdir)/@PACKAGE@ pkglibexecdir = $(libexecdir)/@PACKAGE@ am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd install_sh_DATA = $(install_sh) -c -m 644 install_sh_PROGRAM = $(install_sh) -c install_sh_SCRIPT = $(install_sh) -c INSTALL_HEADER = $(INSTALL_DATA) transform = $(program_transform_name) NORMAL_INSTALL = : PRE_INSTALL = : POST_INSTALL = : NORMAL_UNINSTALL = : PRE_UNINSTALL = : POST_UNINSTALL = : build_triplet = @build@ host_triplet = @host@ check_PROGRAMS = $(am__EXEEXT_1) $(am__EXEEXT_2) $(am__EXEEXT_4) # Note that -fapi.sh.fapi is symlinked to .sh.nosetup # If we'd use the .fapi extension then .nosetup and .fapi overwrite each others .log # thus we use -fapi.sh.fapi as suffix. @HAVE_FAPI_TRUE@am__append_1 = \ @HAVE_FAPI_TRUE@ test/integration/p11-tool-fapi.sh.fapi \ @HAVE_FAPI_TRUE@ test/integration/pkcs11-tool-init-fapi.sh.fapi ### Integration Tests ### @ENABLE_INTEGRATION_TRUE@am__append_2 = \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-find-objects.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-mechanism.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-attribute-value.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-login-logout.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-sign-verify.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-initialize-finalize.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-misc.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-crypt.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-keygen.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-session-state.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-lockout.int # add test scripts @ENABLE_INTEGRATION_TRUE@am__append_3 = $(integration_scripts) @ENABLE_INTEGRATION_TRUE@am__append_4 = test/integration/PKCS11JavaTests.class ### Unit Tests ### @UNIT_TRUE@am__append_5 = \ @UNIT_TRUE@ test/unit/test_twist\ @UNIT_TRUE@ test/unit/test_log \ @UNIT_TRUE@ test/unit/test_parser \ @UNIT_TRUE@ test/unit/test_attr \ @UNIT_TRUE@ test/unit/test_db \ @UNIT_TRUE@ test/unit/test_utils @FUZZING_TRUE@fuzz_PROGRAMS = test/fuzz/yaml-parser.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-sopin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/set-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) # make check will run the fuzz targets @FUZZING_TRUE@am__append_6 = $(fuzz_PROGRAMS) subdir = . ACLOCAL_M4 = $(top_srcdir)/aclocal.m4 am__aclocal_m4_deps = $(top_srcdir)/m4/ax_ac_append_to_file.m4 \ $(top_srcdir)/m4/ax_ac_print_to_file.m4 \ $(top_srcdir)/m4/ax_add_am_macro_static.m4 \ $(top_srcdir)/m4/ax_add_fortify_source.m4 \ $(top_srcdir)/m4/ax_am_macros_static.m4 \ $(top_srcdir)/m4/ax_check_class.m4 \ $(top_srcdir)/m4/ax_check_compile_flag.m4 \ $(top_srcdir)/m4/ax_check_enable_debug.m4 \ $(top_srcdir)/m4/ax_check_gnu_make.m4 \ $(top_srcdir)/m4/ax_check_link_flag.m4 \ $(top_srcdir)/m4/ax_code_coverage.m4 \ $(top_srcdir)/m4/ax_file_escapes.m4 \ $(top_srcdir)/m4/ax_gcc_func_attribute.m4 \ $(top_srcdir)/m4/ax_is_release.m4 \ $(top_srcdir)/m4/ax_normalize_path.m4 \ $(top_srcdir)/m4/ax_prog_java.m4 \ $(top_srcdir)/m4/ax_prog_java_works.m4 \ $(top_srcdir)/m4/ax_prog_javac.m4 \ $(top_srcdir)/m4/ax_prog_javac_works.m4 \ $(top_srcdir)/m4/ax_pthread.m4 \ $(top_srcdir)/m4/ax_try_compile_java.m4 \ $(top_srcdir)/m4/ld-version-script.m4 \ $(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \ $(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \ $(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/m4/pkg.m4 \ $(top_srcdir)/configure.ac am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \ $(ACLOCAL_M4) DIST_COMMON = $(srcdir)/Makefile.am $(top_srcdir)/configure \ $(am__configure_deps) $(am__dist_noinst_JAVA_DIST) \ $(am__DIST_COMMON) am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \ configure.lineno config.status.lineno mkinstalldirs = $(install_sh) -d CONFIG_HEADER = $(top_builddir)/src/lib/config.h CONFIG_CLEAN_FILES = lib/tpm2-pkcs11.pc CONFIG_CLEAN_VPATH_FILES = @ENABLE_INTEGRATION_TRUE@am__EXEEXT_1 = test/integration/pkcs-find-objects.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-mechanism.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-attribute-value.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-login-logout.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-sign-verify.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-initialize-finalize.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-misc.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-crypt.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-keygen.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-session-state.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-lockout.int$(EXEEXT) @UNIT_TRUE@am__EXEEXT_2 = test/unit/test_twist$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_log$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_parser$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_attr$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_db$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_utils$(EXEEXT) @FUZZING_TRUE@am__EXEEXT_3 = test/fuzz/yaml-parser.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-sopin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/set-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) @FUZZING_TRUE@am__EXEEXT_4 = $(am__EXEEXT_3) am__installdirs = "$(DESTDIR)$(fuzzdir)" "$(DESTDIR)$(libdir)" \ "$(DESTDIR)$(p11libdir)" "$(DESTDIR)$(p11configdir)" \ "$(DESTDIR)$(pkgconfigdir)" PROGRAMS = $(fuzz_PROGRAMS) am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`; am__vpath_adj = case $$p in \ $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \ *) f=$$p;; \ esac; am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`; am__install_max = 40 am__nobase_strip_setup = \ srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'` am__nobase_strip = \ for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||" am__nobase_list = $(am__nobase_strip_setup); \ for p in $$list; do echo "$$p $$p"; done | \ sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \ $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \ if (++n[$$2] == $(am__install_max)) \ { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \ END { for (dir in files) print dir, files[dir] }' am__base_list = \ sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \ sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g' am__uninstall_files_from_dir = { \ test -z "$$files" \ || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \ || { echo " ( cd '$$dir' && rm -f" $$files ")"; \ $(am__cd) "$$dir" && rm -f $$files; }; \ } LTLIBRARIES = $(lib_LTLIBRARIES) $(noinst_LTLIBRARIES) \ $(p11lib_LTLIBRARIES) am__DEPENDENCIES_1 = am__DEPENDENCIES_2 = $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) src_libtpm2_pkcs11_la_DEPENDENCIES = $(am__DEPENDENCIES_2) am__dirstamp = $(am__leading_dot)dirstamp am__objects_1 = src/pkcs11.lo am__objects_2 = am__objects_3 = $(am__objects_1) $(am__objects_2) am__objects_4 = src/lib/attrs.lo src/lib/backend.lo \ src/lib/backend_esysdb.lo src/lib/backend_fapi.lo \ src/lib/db.lo src/lib/digest.lo src/lib/emitter.lo \ src/lib/encrypt.lo src/lib/general.lo src/lib/key.lo \ src/lib/mech.lo src/lib/mutex.lo src/lib/object.lo \ src/lib/parser.lo src/lib/random.lo src/lib/session.lo \ src/lib/session_ctx.lo src/lib/session_table.lo \ src/lib/sign.lo src/lib/slot.lo src/lib/ssl_util.lo \ src/lib/token.lo src/lib/tpm.lo src/lib/twist.lo \ src/lib/typed_memory.lo src/lib/utils.lo am__objects_5 = $(am__objects_4) $(am__objects_2) am_src_libtpm2_pkcs11_la_OBJECTS = $(am__objects_3) $(am__objects_5) src_libtpm2_pkcs11_la_OBJECTS = $(am_src_libtpm2_pkcs11_la_OBJECTS) AM_V_lt = $(am__v_lt_@AM_V@) am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@) am__v_lt_0 = --silent am__v_lt_1 = src_libtpm2_pkcs11_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(AM_CFLAGS) $(CFLAGS) $(src_libtpm2_pkcs11_la_LDFLAGS) \ $(LDFLAGS) -o $@ @HAVE_P11KIT_FALSE@am_src_libtpm2_pkcs11_la_rpath = -rpath $(libdir) @HAVE_P11KIT_TRUE@am_src_libtpm2_pkcs11_la_rpath = -rpath $(p11libdir) src_libtpm2_test_internal_la_DEPENDENCIES = $(am__DEPENDENCIES_2) am_src_libtpm2_test_internal_la_OBJECTS = $(am__objects_5) src_libtpm2_test_internal_la_OBJECTS = \ $(am_src_libtpm2_test_internal_la_OBJECTS) src_libtpm2_test_pkcs11_la_DEPENDENCIES = $(am__DEPENDENCIES_2) \ $(libtpm2_test_internal) am_src_libtpm2_test_pkcs11_la_OBJECTS = $(am__objects_3) src_libtpm2_test_pkcs11_la_OBJECTS = \ $(am_src_libtpm2_test_pkcs11_la_OBJECTS) am__test_fuzz_db_token_label_fuzz32_SOURCES_DIST = \ test/fuzz/db-token-label.fuzz32.c @FUZZING_TRUE@am_test_fuzz_db_token_label_fuzz32_OBJECTS = test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.$(OBJEXT) test_fuzz_db_token_label_fuzz32_OBJECTS = \ $(am_test_fuzz_db_token_label_fuzz32_OBJECTS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_db_token_label_fuzz32_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) \ $(test_fuzz_db_token_label_fuzz32_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_pin_fuzz_SOURCES_DIST = test/fuzz/init-pin.fuzz.c @FUZZING_TRUE@am_test_fuzz_init_pin_fuzz_OBJECTS = \ @FUZZING_TRUE@ test/fuzz/init_pin_fuzz-init-pin.fuzz.$(OBJEXT) test_fuzz_init_pin_fuzz_OBJECTS = \ $(am_test_fuzz_init_pin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_pin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_pin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_token_label_fuzz32_SOURCES_DIST = \ test/fuzz/init-token-label.fuzz32.c @FUZZING_TRUE@am_test_fuzz_init_token_label_fuzz32_OBJECTS = test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.$(OBJEXT) test_fuzz_init_token_label_fuzz32_OBJECTS = \ $(am_test_fuzz_init_token_label_fuzz32_OBJECTS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_token_label_fuzz32_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_token_label_fuzz32_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_token_sopin_fuzz_SOURCES_DIST = \ test/fuzz/init-token-sopin.fuzz.c @FUZZING_TRUE@am_test_fuzz_init_token_sopin_fuzz_OBJECTS = test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.$(OBJEXT) test_fuzz_init_token_sopin_fuzz_OBJECTS = \ $(am_test_fuzz_init_token_sopin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_token_sopin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_token_sopin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_set_pin_fuzz_SOURCES_DIST = test/fuzz/set-pin.fuzz.c @FUZZING_TRUE@am_test_fuzz_set_pin_fuzz_OBJECTS = \ @FUZZING_TRUE@ test/fuzz/set_pin_fuzz-set-pin.fuzz.$(OBJEXT) test_fuzz_set_pin_fuzz_OBJECTS = $(am_test_fuzz_set_pin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_set_pin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_set_pin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES_DIST = \ test/fuzz/utils-ctx-unwrap-objauth.c @FUZZING_TRUE@am_test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS = test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.$(OBJEXT) test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS = \ $(am_test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_1) test_fuzz_utils_ctx_unwrap_objauth_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_yaml_parser_fuzz_SOURCES_DIST = \ test/fuzz/yaml-parser.fuzz.c @FUZZING_TRUE@am_test_fuzz_yaml_parser_fuzz_OBJECTS = test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.$(OBJEXT) test_fuzz_yaml_parser_fuzz_OBJECTS = \ $(am_test_fuzz_yaml_parser_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) test_fuzz_yaml_parser_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ am__test_integration_pkcs_crypt_int_SOURCES_DIST = \ test/integration/pkcs-crypt.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_crypt_int_OBJECTS = test/integration/pkcs_crypt_int-pkcs-crypt.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_crypt_int-test.$(OBJEXT) test_integration_pkcs_crypt_int_OBJECTS = \ $(am_test_integration_pkcs_crypt_int_OBJECTS) am__DEPENDENCIES_3 = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) \ $(p11lib_LTLIBRARIES) $(am__DEPENDENCIES_2) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_crypt_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_find_objects_int_SOURCES_DIST = \ test/integration/pkcs-find-objects.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_find_objects_int_OBJECTS = test/integration/pkcs_find_objects_int-pkcs-find-objects.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_find_objects_int-test.$(OBJEXT) test_integration_pkcs_find_objects_int_OBJECTS = \ $(am_test_integration_pkcs_find_objects_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) test_integration_pkcs_find_objects_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_find_objects_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_get_attribute_value_int_SOURCES_DIST = \ test/integration/pkcs-get-attribute-value.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_get_attribute_value_int_OBJECTS = test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_get_attribute_value_int-test.$(OBJEXT) test_integration_pkcs_get_attribute_value_int_OBJECTS = \ $(am_test_integration_pkcs_get_attribute_value_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_get_attribute_value_int_LINK = $(LIBTOOL) \ $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \ --mode=link $(CCLD) \ $(test_integration_pkcs_get_attribute_value_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_get_mechanism_int_SOURCES_DIST = \ test/integration/pkcs-get-mechanism.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_get_mechanism_int_OBJECTS = test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_get_mechanism_int-test.$(OBJEXT) test_integration_pkcs_get_mechanism_int_OBJECTS = \ $(am_test_integration_pkcs_get_mechanism_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_get_mechanism_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_get_mechanism_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_initialize_finalize_int_SOURCES_DIST = \ test/integration/pkcs-initialize-finalize.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_initialize_finalize_int_OBJECTS = test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_initialize_finalize_int-test.$(OBJEXT) test_integration_pkcs_initialize_finalize_int_OBJECTS = \ $(am_test_integration_pkcs_initialize_finalize_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_initialize_finalize_int_LINK = $(LIBTOOL) \ $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \ --mode=link $(CCLD) \ $(test_integration_pkcs_initialize_finalize_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_keygen_int_SOURCES_DIST = \ test/integration/pkcs-keygen.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_keygen_int_OBJECTS = test/integration/pkcs_keygen_int-pkcs-keygen.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_keygen_int-test.$(OBJEXT) test_integration_pkcs_keygen_int_OBJECTS = \ $(am_test_integration_pkcs_keygen_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_keygen_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_lockout_int_SOURCES_DIST = \ test/integration/pkcs-lockout.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_lockout_int_OBJECTS = test/integration/pkcs_lockout_int-pkcs-lockout.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_lockout_int-test.$(OBJEXT) test_integration_pkcs_lockout_int_OBJECTS = \ $(am_test_integration_pkcs_lockout_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_lockout_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_login_logout_int_SOURCES_DIST = \ test/integration/pkcs-login-logout.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_login_logout_int_OBJECTS = test/integration/pkcs_login_logout_int-pkcs-login-logout.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_login_logout_int-test.$(OBJEXT) test_integration_pkcs_login_logout_int_OBJECTS = \ $(am_test_integration_pkcs_login_logout_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_login_logout_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_login_logout_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_misc_int_SOURCES_DIST = \ test/integration/pkcs-misc.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_misc_int_OBJECTS = test/integration/pkcs_misc_int-pkcs-misc.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_misc_int-test.$(OBJEXT) test_integration_pkcs_misc_int_OBJECTS = \ $(am_test_integration_pkcs_misc_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_misc_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_session_state_int_SOURCES_DIST = \ test/integration/pkcs-session-state.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_session_state_int_OBJECTS = test/integration/pkcs_session_state_int-pkcs-session-state.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_session_state_int-test.$(OBJEXT) test_integration_pkcs_session_state_int_OBJECTS = \ $(am_test_integration_pkcs_session_state_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_session_state_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_session_state_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_sign_verify_int_SOURCES_DIST = \ test/integration/pkcs-sign-verify.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_sign_verify_int_OBJECTS = test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_sign_verify_int-test.$(OBJEXT) test_integration_pkcs_sign_verify_int_OBJECTS = \ $(am_test_integration_pkcs_sign_verify_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_sign_verify_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_sign_verify_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ test_unit_test_attr_SOURCES = test/unit/test_attr.c test_unit_test_attr_OBJECTS = test/unit/test_attr-test_attr.$(OBJEXT) @UNIT_TRUE@test_unit_test_attr_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_attr_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_attr_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_db_SOURCES = test/unit/test_db.c test_unit_test_db_OBJECTS = test/unit/test_db-test_db.$(OBJEXT) @UNIT_TRUE@test_unit_test_db_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(am__DEPENDENCIES_1) $(libtpm2_test_internal) \ @UNIT_TRUE@ $(libtpm2_test_pkcs11) test_unit_test_db_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_db_CFLAGS) $(CFLAGS) \ $(test_unit_test_db_LDFLAGS) $(LDFLAGS) -o $@ test_unit_test_log_SOURCES = test/unit/test_log.c test_unit_test_log_OBJECTS = test/unit/test_log-test_log.$(OBJEXT) @UNIT_TRUE@test_unit_test_log_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_log_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_log_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_parser_SOURCES = test/unit/test_parser.c test_unit_test_parser_OBJECTS = \ test/unit/test_parser-test_parser.$(OBJEXT) @UNIT_TRUE@test_unit_test_parser_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(am__DEPENDENCIES_1) $(libtpm2_test_internal) \ @UNIT_TRUE@ $(libtpm2_test_pkcs11) test_unit_test_parser_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_parser_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_twist_SOURCES = test/unit/test_twist.c test_unit_test_twist_OBJECTS = \ test/unit/test_twist-test_twist.$(OBJEXT) @UNIT_TRUE@test_unit_test_twist_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_twist_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_twist_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_utils_SOURCES = test/unit/test_utils.c test_unit_test_utils_OBJECTS = \ test/unit/test_utils-test_utils.$(OBJEXT) @UNIT_TRUE@test_unit_test_utils_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_utils_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_utils_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ AM_V_P = $(am__v_P_@AM_V@) am__v_P_ = $(am__v_P_@AM_DEFAULT_V@) am__v_P_0 = false am__v_P_1 = : AM_V_GEN = $(am__v_GEN_@AM_V@) am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@) am__v_GEN_0 = @echo " GEN " $@; am__v_GEN_1 = AM_V_at = $(am__v_at_@AM_V@) am__v_at_ = $(am__v_at_@AM_DEFAULT_V@) am__v_at_0 = @ am__v_at_1 = DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/src/lib depcomp = $(SHELL) $(top_srcdir)/depcomp am__maybe_remake_depfiles = depfiles am__depfiles_remade = src/$(DEPDIR)/pkcs11.Plo \ src/lib/$(DEPDIR)/attrs.Plo src/lib/$(DEPDIR)/backend.Plo \ src/lib/$(DEPDIR)/backend_esysdb.Plo \ src/lib/$(DEPDIR)/backend_fapi.Plo src/lib/$(DEPDIR)/db.Plo \ src/lib/$(DEPDIR)/digest.Plo src/lib/$(DEPDIR)/emitter.Plo \ src/lib/$(DEPDIR)/encrypt.Plo src/lib/$(DEPDIR)/general.Plo \ src/lib/$(DEPDIR)/key.Plo src/lib/$(DEPDIR)/mech.Plo \ src/lib/$(DEPDIR)/mutex.Plo src/lib/$(DEPDIR)/object.Plo \ src/lib/$(DEPDIR)/parser.Plo src/lib/$(DEPDIR)/random.Plo \ src/lib/$(DEPDIR)/session.Plo \ src/lib/$(DEPDIR)/session_ctx.Plo \ src/lib/$(DEPDIR)/session_table.Plo src/lib/$(DEPDIR)/sign.Plo \ src/lib/$(DEPDIR)/slot.Plo src/lib/$(DEPDIR)/ssl_util.Plo \ src/lib/$(DEPDIR)/token.Plo src/lib/$(DEPDIR)/tpm.Plo \ src/lib/$(DEPDIR)/twist.Plo src/lib/$(DEPDIR)/typed_memory.Plo \ src/lib/$(DEPDIR)/utils.Plo \ test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po \ test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po \ test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po \ test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po \ test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po \ test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po \ test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po \ test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po \ test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po \ test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po \ test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po \ test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po \ test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po \ test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po \ test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po \ test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po \ test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po \ test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po \ test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po \ test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po \ test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po \ test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po \ test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po \ test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po \ test/integration/$(DEPDIR)/pkcs_misc_int-test.Po \ test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po \ test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po \ test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po \ test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po \ test/unit/$(DEPDIR)/test_attr-test_attr.Po \ test/unit/$(DEPDIR)/test_db-test_db.Po \ test/unit/$(DEPDIR)/test_log-test_log.Po \ test/unit/$(DEPDIR)/test_parser-test_parser.Po \ test/unit/$(DEPDIR)/test_twist-test_twist.Po \ test/unit/$(DEPDIR)/test_utils-test_utils.Po am__mv = mv -f COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \ $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \ $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \ $(AM_CFLAGS) $(CFLAGS) AM_V_CC = $(am__v_CC_@AM_V@) am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@) am__v_CC_0 = @echo " CC " $@; am__v_CC_1 = CCLD = $(CC) LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ $(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ AM_V_CCLD = $(am__v_CCLD_@AM_V@) am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@) am__v_CCLD_0 = @echo " CCLD " $@; am__v_CCLD_1 = SOURCES = $(src_libtpm2_pkcs11_la_SOURCES) \ $(src_libtpm2_test_internal_la_SOURCES) \ $(src_libtpm2_test_pkcs11_la_SOURCES) \ $(test_fuzz_db_token_label_fuzz32_SOURCES) \ $(test_fuzz_init_pin_fuzz_SOURCES) \ $(test_fuzz_init_token_label_fuzz32_SOURCES) \ $(test_fuzz_init_token_sopin_fuzz_SOURCES) \ $(test_fuzz_set_pin_fuzz_SOURCES) \ $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES) \ $(test_fuzz_yaml_parser_fuzz_SOURCES) \ $(test_integration_pkcs_crypt_int_SOURCES) \ $(test_integration_pkcs_find_objects_int_SOURCES) \ $(test_integration_pkcs_get_attribute_value_int_SOURCES) \ $(test_integration_pkcs_get_mechanism_int_SOURCES) \ $(test_integration_pkcs_initialize_finalize_int_SOURCES) \ $(test_integration_pkcs_keygen_int_SOURCES) \ $(test_integration_pkcs_lockout_int_SOURCES) \ $(test_integration_pkcs_login_logout_int_SOURCES) \ $(test_integration_pkcs_misc_int_SOURCES) \ $(test_integration_pkcs_session_state_int_SOURCES) \ $(test_integration_pkcs_sign_verify_int_SOURCES) \ test/unit/test_attr.c test/unit/test_db.c test/unit/test_log.c \ test/unit/test_parser.c test/unit/test_twist.c \ test/unit/test_utils.c DIST_SOURCES = $(src_libtpm2_pkcs11_la_SOURCES) \ $(src_libtpm2_test_internal_la_SOURCES) \ $(src_libtpm2_test_pkcs11_la_SOURCES) \ $(am__test_fuzz_db_token_label_fuzz32_SOURCES_DIST) \ $(am__test_fuzz_init_pin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_init_token_label_fuzz32_SOURCES_DIST) \ $(am__test_fuzz_init_token_sopin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_set_pin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES_DIST) \ $(am__test_fuzz_yaml_parser_fuzz_SOURCES_DIST) \ $(am__test_integration_pkcs_crypt_int_SOURCES_DIST) \ $(am__test_integration_pkcs_find_objects_int_SOURCES_DIST) \ $(am__test_integration_pkcs_get_attribute_value_int_SOURCES_DIST) \ $(am__test_integration_pkcs_get_mechanism_int_SOURCES_DIST) \ $(am__test_integration_pkcs_initialize_finalize_int_SOURCES_DIST) \ $(am__test_integration_pkcs_keygen_int_SOURCES_DIST) \ $(am__test_integration_pkcs_lockout_int_SOURCES_DIST) \ $(am__test_integration_pkcs_login_logout_int_SOURCES_DIST) \ $(am__test_integration_pkcs_misc_int_SOURCES_DIST) \ $(am__test_integration_pkcs_session_state_int_SOURCES_DIST) \ $(am__test_integration_pkcs_sign_verify_int_SOURCES_DIST) \ test/unit/test_attr.c test/unit/test_db.c test/unit/test_log.c \ test/unit/test_parser.c test/unit/test_twist.c \ test/unit/test_utils.c am__can_run_installinfo = \ case $$AM_UPDATE_INFO_DIR in \ n|no|NO) false;; \ *) (install-info --version) >/dev/null 2>&1;; \ esac am__dist_noinst_JAVA_DIST = test/integration/PKCS11JavaTests.java CLASSPATH_ENV = CLASSPATH=$(JAVAROOT):$(srcdir)/$(JAVAROOT)$${CLASSPATH:+":$$CLASSPATH"} am__java_sources = $(dist_noinst_JAVA) DATA = $(p11config_DATA) $(pkgconfig_DATA) am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) # Read a list of newline-separated strings from the standard input, # and print each of them once, without duplicates. Input order is # *not* preserved. am__uniquify_input = $(AWK) '\ BEGIN { nonempty = 0; } \ { items[$$0] = 1; nonempty = 1; } \ END { if (nonempty) { for (i in items) print i; }; } \ ' # Make sure the list of sources is unique. This is necessary because, # e.g., the same source file might be shared among _SOURCES variables # for different programs/libraries. am__define_uniq_tagged_files = \ list='$(am__tagged_files)'; \ unique=`for i in $$list; do \ if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ done | $(am__uniquify_input)` ETAGS = etags CTAGS = ctags CSCOPE = cscope AM_RECURSIVE_TARGETS = cscope check recheck am__tty_colors_dummy = \ mgn= red= grn= lgn= blu= brg= std=; \ am__color_tests=no am__tty_colors = { \ $(am__tty_colors_dummy); \ if test "X$(AM_COLOR_TESTS)" = Xno; then \ am__color_tests=no; \ elif test "X$(AM_COLOR_TESTS)" = Xalways; then \ am__color_tests=yes; \ elif test "X$$TERM" != Xdumb && { test -t 1; } 2>/dev/null; then \ am__color_tests=yes; \ fi; \ if test $$am__color_tests = yes; then \ red=''; \ grn=''; \ lgn=''; \ blu=''; \ mgn=''; \ brg=''; \ std=''; \ fi; \ } am__recheck_rx = ^[ ]*:recheck:[ ]* am__global_test_result_rx = ^[ ]*:global-test-result:[ ]* am__copy_in_global_log_rx = ^[ ]*:copy-in-global-log:[ ]* # A command that, given a newline-separated list of test names on the # standard input, print the name of the tests that are to be re-run # upon "make recheck". am__list_recheck_tests = $(AWK) '{ \ recheck = 1; \ while ((rc = (getline line < ($$0 ".trs"))) != 0) \ { \ if (rc < 0) \ { \ if ((getline line2 < ($$0 ".log")) < 0) \ recheck = 0; \ break; \ } \ else if (line ~ /$(am__recheck_rx)[nN][Oo]/) \ { \ recheck = 0; \ break; \ } \ else if (line ~ /$(am__recheck_rx)[yY][eE][sS]/) \ { \ break; \ } \ }; \ if (recheck) \ print $$0; \ close ($$0 ".trs"); \ close ($$0 ".log"); \ }' # A command that, given a newline-separated list of test names on the # standard input, create the global log from their .trs and .log files. am__create_global_log = $(AWK) ' \ function fatal(msg) \ { \ print "fatal: making $@: " msg | "cat >&2"; \ exit 1; \ } \ function rst_section(header) \ { \ print header; \ len = length(header); \ for (i = 1; i <= len; i = i + 1) \ printf "="; \ printf "\n\n"; \ } \ { \ copy_in_global_log = 1; \ global_test_result = "RUN"; \ while ((rc = (getline line < ($$0 ".trs"))) != 0) \ { \ if (rc < 0) \ fatal("failed to read from " $$0 ".trs"); \ if (line ~ /$(am__global_test_result_rx)/) \ { \ sub("$(am__global_test_result_rx)", "", line); \ sub("[ ]*$$", "", line); \ global_test_result = line; \ } \ else if (line ~ /$(am__copy_in_global_log_rx)[nN][oO]/) \ copy_in_global_log = 0; \ }; \ if (copy_in_global_log) \ { \ rst_section(global_test_result ": " $$0); \ while ((rc = (getline line < ($$0 ".log"))) != 0) \ { \ if (rc < 0) \ fatal("failed to read from " $$0 ".log"); \ print line; \ }; \ printf "\n"; \ }; \ close ($$0 ".trs"); \ close ($$0 ".log"); \ }' # Restructured Text title. am__rst_title = { sed 's/.*/ & /;h;s/./=/g;p;x;s/ *$$//;p;g' && echo; } # Solaris 10 'make', and several other traditional 'make' implementations, # pass "-e" to $(SHELL), and POSIX 2008 even requires this. Work around it # by disabling -e (using the XSI extension "set +e") if it's set. am__sh_e_setup = case $$- in *e*) set +e;; esac # Default flags passed to test drivers. am__common_driver_flags = \ --color-tests "$$am__color_tests" \ --enable-hard-errors "$$am__enable_hard_errors" \ --expect-failure "$$am__expect_failure" # To be inserted before the command running the test. Creates the # directory for the log if needed. Stores in $dir the directory # containing $f, in $tst the test, in $log the log. Executes the # developer- defined test setup AM_TESTS_ENVIRONMENT (if any), and # passes TESTS_ENVIRONMENT. Set up options for the wrapper that # will run the test scripts (or their associated LOG_COMPILER, if # thy have one). am__check_pre = \ $(am__sh_e_setup); \ $(am__vpath_adj_setup) $(am__vpath_adj) \ $(am__tty_colors); \ srcdir=$(srcdir); export srcdir; \ case "$@" in \ */*) am__odir=`echo "./$@" | sed 's|/[^/]*$$||'`;; \ *) am__odir=.;; \ esac; \ test "x$$am__odir" = x"." || test -d "$$am__odir" \ || $(MKDIR_P) "$$am__odir" || exit $$?; \ if test -f "./$$f"; then dir=./; \ elif test -f "$$f"; then dir=; \ else dir="$(srcdir)/"; fi; \ tst=$$dir$$f; log='$@'; \ if test -n '$(DISABLE_HARD_ERRORS)'; then \ am__enable_hard_errors=no; \ else \ am__enable_hard_errors=yes; \ fi; \ case " $(XFAIL_TESTS) " in \ *[\ \ ]$$f[\ \ ]* | *[\ \ ]$$dir$$f[\ \ ]*) \ am__expect_failure=yes;; \ *) \ am__expect_failure=no;; \ esac; \ $(AM_TESTS_ENVIRONMENT) $(TESTS_ENVIRONMENT) # A shell command to get the names of the tests scripts with any registered # extension removed (i.e., equivalently, the names of the test logs, with # the '.log' extension removed). The result is saved in the shell variable # '$bases'. This honors runtime overriding of TESTS and TEST_LOGS. Sadly, # we cannot use something simpler, involving e.g., "$(TEST_LOGS:.log=)", # since that might cause problem with VPATH rewrites for suffix-less tests. # See also 'test-harness-vpath-rewrite.sh' and 'test-trs-basic.sh'. am__set_TESTS_bases = \ bases='$(TEST_LOGS)'; \ bases=`for i in $$bases; do echo $$i; done | sed 's/\.log$$//'`; \ bases=`echo $$bases` RECHECK_LOGS = $(TEST_LOGS) TEST_SUITE_LOG = test-suite.log LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver LOG_COMPILE = $(LOG_COMPILER) $(AM_LOG_FLAGS) $(LOG_FLAGS) am__set_b = \ case '$@' in \ */*) \ case '$*' in \ */*) b='$*';; \ *) b=`echo '$@' | sed 's/\.log$$//'`; \ esac;; \ *) \ b='$*';; \ esac am__test_logs1 = $(TESTS:=.log) am__test_logs2 = $(am__test_logs1:@EXEEXT@.log=.log) am__test_logs3 = $(am__test_logs2:.sh.log=.log) SH_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver SH_LOG_COMPILE = $(SH_LOG_COMPILER) $(AM_SH_LOG_FLAGS) $(SH_LOG_FLAGS) am__test_logs4 = $(am__test_logs3:.int.log=.log) INT_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver INT_LOG_COMPILE = $(INT_LOG_COMPILER) $(AM_INT_LOG_FLAGS) \ $(INT_LOG_FLAGS) am__test_logs5 = $(am__test_logs4:.nosetup.log=.log) NOSETUP_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver NOSETUP_LOG_COMPILE = $(NOSETUP_LOG_COMPILER) $(AM_NOSETUP_LOG_FLAGS) \ $(NOSETUP_LOG_FLAGS) am__test_logs6 = $(am__test_logs5:.java.log=.log) JAVA_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver JAVA_LOG_COMPILE = $(JAVA_LOG_COMPILER) $(AM_JAVA_LOG_FLAGS) \ $(JAVA_LOG_FLAGS) am__test_logs7 = $(am__test_logs6:.fapi.log=.log) FAPI_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FAPI_LOG_COMPILE = $(FAPI_LOG_COMPILER) $(AM_FAPI_LOG_FLAGS) \ $(FAPI_LOG_FLAGS) am__test_logs8 = $(am__test_logs7:.fuzz.log=.log) FUZZ_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FUZZ_LOG_COMPILE = $(FUZZ_LOG_COMPILER) $(AM_FUZZ_LOG_FLAGS) \ $(FUZZ_LOG_FLAGS) TEST_LOGS = $(am__test_logs8:.fuzz32.log=.log) FUZZ32_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FUZZ32_LOG_COMPILE = $(FUZZ32_LOG_COMPILER) $(AM_FUZZ32_LOG_FLAGS) \ $(FUZZ32_LOG_FLAGS) am__DIST_COMMON = $(srcdir)/Makefile-fuzz.am \ $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am \ $(srcdir)/Makefile.in $(srcdir)/src_vars.mk \ $(top_srcdir)/aminclude_static.am \ $(top_srcdir)/lib/tpm2-pkcs11.pc.in \ $(top_srcdir)/src/lib/config.h.in AUTHORS compile config.guess \ config.sub depcomp install-sh ltmain.sh missing test-driver DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST) distdir = $(PACKAGE)-$(VERSION) top_distdir = $(distdir) am__remove_distdir = \ if test -d "$(distdir)"; then \ find "$(distdir)" -type d ! -perm -200 -exec chmod u+w {} ';' \ && rm -rf "$(distdir)" \ || { sleep 5 && rm -rf "$(distdir)"; }; \ else :; fi am__post_remove_distdir = $(am__remove_distdir) DIST_ARCHIVES = $(distdir).tar.gz GZIP_ENV = --best DIST_TARGETS = dist-gzip distuninstallcheck_listfiles = find . -type f -print am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \ | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$' distcleancheck_listfiles = find . -type f -print ACLOCAL = @ACLOCAL@ AMTAR = @AMTAR@ AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@ AR = @AR@ AUTOCONF = @AUTOCONF@ AUTOHEADER = @AUTOHEADER@ AUTOMAKE = @AUTOMAKE@ AWK = @AWK@ CC = @CC@ CCDEPMODE = @CCDEPMODE@ CFLAGS = @CFLAGS@ CMOCKA_CFLAGS = @CMOCKA_CFLAGS@ CMOCKA_LIBS = @CMOCKA_LIBS@ CODE_COVERAGE_CFLAGS = @CODE_COVERAGE_CFLAGS@ CODE_COVERAGE_CPPFLAGS = @CODE_COVERAGE_CPPFLAGS@ CODE_COVERAGE_CXXFLAGS = @CODE_COVERAGE_CXXFLAGS@ CODE_COVERAGE_ENABLED = @CODE_COVERAGE_ENABLED@ CODE_COVERAGE_LIBS = @CODE_COVERAGE_LIBS@ CPP = @CPP@ CPPFLAGS = @CPPFLAGS@ CRYPTO_CFLAGS = @CRYPTO_CFLAGS@ CRYPTO_LIBS = @CRYPTO_LIBS@ CYGPATH_W = @CYGPATH_W@ DEFS = @DEFS@ DEPDIR = @DEPDIR@ DISTCHECK_CONFIGURE_FLAGS = @DISTCHECK_CONFIGURE_FLAGS@ DLLTOOL = @DLLTOOL@ DSYMUTIL = @DSYMUTIL@ DUMPBIN = @DUMPBIN@ ECHO_C = @ECHO_C@ ECHO_N = @ECHO_N@ ECHO_T = @ECHO_T@ EGREP = @EGREP@ ENABLE_INTEGRATION = @ENABLE_INTEGRATION@ EXEEXT = @EXEEXT@ EXTRA_CFLAGS = @EXTRA_CFLAGS@ EXTRA_LDFLAGS = @EXTRA_LDFLAGS@ FGREP = @FGREP@ FUZZING_CFLAGS = @FUZZING_CFLAGS@ FUZZING_FLAGS = @FUZZING_FLAGS@ GCOV = @GCOV@ GENHTML = @GENHTML@ GREP = @GREP@ INSTALL = @INSTALL@ INSTALL_DATA = @INSTALL_DATA@ INSTALL_PROGRAM = @INSTALL_PROGRAM@ INSTALL_SCRIPT = @INSTALL_SCRIPT@ INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@ JAVA = @JAVA@ JAVAC = @JAVAC@ LCOV = @LCOV@ LD = @LD@ LDFLAGS = @LDFLAGS@ LIBOBJS = @LIBOBJS@ LIBS = @LIBS@ LIBTOOL = @LIBTOOL@ LIPO = @LIPO@ LN_S = @LN_S@ LTLIBOBJS = @LTLIBOBJS@ LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@ MAKEINFO = @MAKEINFO@ MANIFEST_TOOL = @MANIFEST_TOOL@ MKDIR_P = @MKDIR_P@ NM = @NM@ NMEDIT = @NMEDIT@ OBJDUMP = @OBJDUMP@ OBJEXT = @OBJEXT@ OPENSC_PKCS11_CFLAGS = @OPENSC_PKCS11_CFLAGS@ OPENSC_PKCS11_LIBS = @OPENSC_PKCS11_LIBS@ OTOOL = @OTOOL@ OTOOL64 = @OTOOL64@ P11KIT_CFLAGS = @P11KIT_CFLAGS@ P11KIT_LIBS = @P11KIT_LIBS@ P11_CONFIGS_PATH = @P11_CONFIGS_PATH@ P11_MODULE_PATH = @P11_MODULE_PATH@ PACKAGE = @PACKAGE@ PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@ PACKAGE_NAME = @PACKAGE_NAME@ PACKAGE_STRING = @PACKAGE_STRING@ PACKAGE_TARNAME = @PACKAGE_TARNAME@ PACKAGE_URL = @PACKAGE_URL@ PACKAGE_VERSION = @PACKAGE_VERSION@ PATH_SEPARATOR = @PATH_SEPARATOR@ PKG_CONFIG = @PKG_CONFIG@ PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@ PKG_CONFIG_PATH = @PKG_CONFIG_PATH@ PTHREAD_CC = @PTHREAD_CC@ PTHREAD_CFLAGS = @PTHREAD_CFLAGS@ PTHREAD_LIBS = @PTHREAD_LIBS@ PYTHON = @PYTHON@ PYTHON_EXEC_PREFIX = @PYTHON_EXEC_PREFIX@ PYTHON_INTERPRETER = @PYTHON_INTERPRETER@ PYTHON_PLATFORM = @PYTHON_PLATFORM@ PYTHON_PREFIX = @PYTHON_PREFIX@ PYTHON_VERSION = @PYTHON_VERSION@ RANLIB = @RANLIB@ SED = @SED@ SET_MAKE = @SET_MAKE@ SHELL = @SHELL@ SQLITE3_CFLAGS = @SQLITE3_CFLAGS@ SQLITE3_LIBS = @SQLITE3_LIBS@ STRIP = @STRIP@ TABRMD_TCTI = @TABRMD_TCTI@ TSS2_ESYS_CFLAGS = @TSS2_ESYS_CFLAGS@ TSS2_ESYS_LIBS = @TSS2_ESYS_LIBS@ TSS2_FAPI_CFLAGS = @TSS2_FAPI_CFLAGS@ TSS2_FAPI_LIBS = @TSS2_FAPI_LIBS@ TSS2_MU_CFLAGS = @TSS2_MU_CFLAGS@ TSS2_MU_LIBS = @TSS2_MU_LIBS@ TSS2_RC_CFLAGS = @TSS2_RC_CFLAGS@ TSS2_RC_LIBS = @TSS2_RC_LIBS@ TSS2_TCTILDR_CFLAGS = @TSS2_TCTILDR_CFLAGS@ TSS2_TCTILDR_LIBS = @TSS2_TCTILDR_LIBS@ TSS2_TCTI_TABRMD_CFLAGS = @TSS2_TCTI_TABRMD_CFLAGS@ TSS2_TCTI_TABRMD_LIBS = @TSS2_TCTI_TABRMD_LIBS@ VERSION = @VERSION@ YAML_CFLAGS = @YAML_CFLAGS@ YAML_LIBS = @YAML_LIBS@ abs_builddir = @abs_builddir@ abs_srcdir = @abs_srcdir@ abs_top_builddir = @abs_top_builddir@ abs_top_srcdir = @abs_top_srcdir@ ac_ct_AR = @ac_ct_AR@ ac_ct_CC = @ac_ct_CC@ ac_ct_DUMPBIN = @ac_ct_DUMPBIN@ am__include = @am__include@ am__leading_dot = @am__leading_dot@ am__quote = @am__quote@ am__tar = @am__tar@ am__untar = @am__untar@ ax_pthread_config = @ax_pthread_config@ bash = @bash@ bindir = @bindir@ build = @build@ build_alias = @build_alias@ build_cpu = @build_cpu@ build_os = @build_os@ build_vendor = @build_vendor@ builddir = @builddir@ certutil = @certutil@ datadir = @datadir@ datarootdir = @datarootdir@ docdir = @docdir@ dvidir = @dvidir@ exec_prefix = @exec_prefix@ expect = @expect@ host = @host@ host_alias = @host_alias@ host_cpu = @host_cpu@ host_os = @host_os@ host_vendor = @host_vendor@ htmldir = @htmldir@ ifGNUmake = @ifGNUmake@ ifnGNUmake = @ifnGNUmake@ includedir = @includedir@ infodir = @infodir@ install_sh = @install_sh@ libdir = @libdir@ libexecdir = @libexecdir@ localedir = @localedir@ localstatedir = @localstatedir@ mandir = @mandir@ mkdir_p = @mkdir_p@ modutil = @modutil@ oldincludedir = @oldincludedir@ p11kitconfigdir = @p11kitconfigdir@ p11kitmoduledir = @p11kitmoduledir@ p11tool = @p11tool@ pdfdir = @pdfdir@ pkcs11_tool = @pkcs11_tool@ pkgconfigdir = @pkgconfigdir@ pkgpyexecdir = @pkgpyexecdir@ pkgpythondir = @pkgpythondir@ prefix = @prefix@ program_transform_name = @program_transform_name@ psdir = @psdir@ pyexecdir = @pyexecdir@ pythondir = @pythondir@ runstatedir = @runstatedir@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sqlite3 = @sqlite3@ srcdir = @srcdir@ ss = @ss@ swtpm = @swtpm@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ top_build_prefix = @top_build_prefix@ top_builddir = @top_builddir@ top_srcdir = @top_srcdir@ tpm2_abrmd = @tpm2_abrmd@ tpm2_changeauth = @tpm2_changeauth@ tpm2_create = @tpm2_create@ tpm2_createprimary = @tpm2_createprimary@ tpm2_encryptdecrypt = @tpm2_encryptdecrypt@ tpm2_evictcontrol = @tpm2_evictcontrol@ tpm2_getcap = @tpm2_getcap@ tpm2_import = @tpm2_import@ tpm2_load = @tpm2_load@ tpm2_loadexternal = @tpm2_loadexternal@ tpm2_readpublic = @tpm2_readpublic@ tpm2_sign = @tpm2_sign@ tpm2_unseal = @tpm2_unseal@ tpm2tss_genkey = @tpm2tss_genkey@ tpm_server = @tpm_server@ tss2_provision = @tss2_provision@ INCLUDE_DIRS = -I$(srcdir)/src -I$(top_srcdir)/src/lib ACLOCAL_AMFLAGS = -I m4 --install AM_CFLAGS = $(INCLUDE_DIRS) $(EXTRA_CFLAGS) $(CODE_COVERAGE_CFLAGS) \ $(TSS2_ESYS_CFLAGS) $(TSS2_MU_CFLAGS) $(TSS2_TCTILDR_CFLAGS) \ $(TSS2_RC_CFLAGS) $(SQLITE3_CFLAGS) $(PTHREAD_CFLAGS) \ $(CRYPTO_CFLAGS) $(YAML_CFLAGS) $(TSS2_FAPI_CFLAGS) AM_LDFLAGS = $(EXTRA_LDFLAGS) $(CODE_COVERAGE_LIBS) $(TSS2_ESYS_LIBS) \ $(TSS2_MU_LIBS) $(TSS2_TCTILDR_LIBS) $(TSS2_RC_LIBS) \ $(SQLITE3_LIBS) $(PTHREAD_LIBS) $(CRYPTO_LIBS) $(YAML_LIBS) $(TSS2_FAPI_LIBS) JAVAROOT = $(top_builddir)/test/integration @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@GITIGNOREFILES = $(GITIGNOREFILES) $(CODE_COVERAGE_OUTPUT_FILE) $(CODE_COVERAGE_OUTPUT_DIRECTORY) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap = $(code_coverage_v_lcov_cap_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap_ = $(code_coverage_v_lcov_cap_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap_0 = @echo " LCOV --capture" $(CODE_COVERAGE_OUTPUT_FILE); @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign = $(code_coverage_v_lcov_ign_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign_ = $(code_coverage_v_lcov_ign_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign_0 = @echo " LCOV --remove /tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN); @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml = $(code_coverage_v_genhtml_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml_ = $(code_coverage_v_genhtml_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml_0 = @echo " GEN " "$(CODE_COVERAGE_OUTPUT_DIRECTORY)"; @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet = $(code_coverage_quiet_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet_ = $(code_coverage_quiet_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_sanitize = $(subst -,_,$(subst .,_,$(1))) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@AM_DISTCHECK_CONFIGURE_FLAGS = $(AM_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage AM_DISTCHECK_CONFIGURE_FLAGS = --with-p11kitconfigdir='$$(datarootdir)/p11kitconfigdir' --with-p11kitmoduledir='$$(libdir)' LIB_PKCS11_C = src/pkcs11.c LIB_PKCS11_H = src/pkcs11.h LIB_PKCS11_SRC = $(LIB_PKCS11_C) $(LIB_PKCS11_H) LIB_PKCS11_INTERNAL_LIB_C = src/lib/attrs.c src/lib/backend.c src/lib/backend_esysdb.c src/lib/backend_fapi.c src/lib/db.c src/lib/digest.c src/lib/emitter.c src/lib/encrypt.c src/lib/general.c src/lib/key.c src/lib/mech.c src/lib/mutex.c src/lib/object.c src/lib/parser.c src/lib/random.c src/lib/session.c src/lib/session_ctx.c src/lib/session_table.c src/lib/sign.c src/lib/slot.c src/lib/ssl_util.c src/lib/token.c src/lib/tpm.c src/lib/twist.c src/lib/typed_memory.c src/lib/utils.c LIB_PKCS11_INTERNAL_LIB_H = src/lib/attrs.h src/lib/backend.h src/lib/backend_esysdb.h src/lib/backend_fapi.h src/lib/checks.h src/lib/db.h src/lib/debug.h src/lib/digest.h src/lib/emitter.h src/lib/encrypt.h src/lib/general.h src/lib/key.h src/lib/list.h src/lib/log.h src/lib/mech.h src/lib/mutex.h src/lib/object.h src/lib/parser.h src/lib/random.h src/lib/session.h src/lib/session_ctx.h src/lib/session_table.h src/lib/sign.h src/lib/slot.h src/lib/ssl_util.h src/lib/token.h src/lib/tpm.h src/lib/twist.h src/lib/typed_memory.h src/lib/utils.h LIB_PKCS11_INTERNAL_LIB_SRC = $(LIB_PKCS11_INTERNAL_LIB_C) $(LIB_PKCS11_INTERNAL_LIB_H) # Add source code files from bootstrap EXTRA_DIST = LICENSE docs test/integration/scripts misc/p11-kit tools \ AUTHORS lib/tpm2-pkcs11.map $(integration_scripts) \ test/integration/test.h test/integration/largebin.h \ test/integration/fixtures CLEANFILES = AUTHORS $(am__append_4) # pkg-config setup. pc-file declarations happen in the corresponding modules pkgconfig_DATA = lib/tpm2-pkcs11.pc DISTCLEANFILES = $(pkgconfig_DATA) ### PKCS#11 Library Definition ### libtpm2_pkcs11 = src/libtpm2_pkcs11.la @HAVE_LD_VERSION_SCRIPT_TRUE@src_libtpm2_pkcs11_la_LDFLAGS = -Wl,--version-script=$(srcdir)/lib/tpm2-pkcs11.map src_libtpm2_pkcs11_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) $(LIB_PKCS11_INTERNAL_LIB_SRC) @HAVE_P11KIT_TRUE@p11libdir = $(P11_MODULE_PATH) @HAVE_P11KIT_TRUE@p11lib_LTLIBRARIES = $(libtpm2_pkcs11) @HAVE_P11KIT_TRUE@p11configdir = $(P11_CONFIGS_PATH) @HAVE_P11KIT_TRUE@p11config_DATA = $(top_srcdir)/misc/p11-kit/tpm2_pkcs11.module @HAVE_P11KIT_FALSE@lib_LTLIBRARIES = $(libtpm2_pkcs11) # # Due to limitations in how cmocka works, we build a separate library here so we # can have a PKCS11 shared object with undefined calls into the rest of the lib # code. This allows us to deploy a single library, but be able to intercept calls # during linking with ld wrap to mock out various functions. # # UNIT, INTEGRATION and/or FUZZ can use this library. # # src/lib stuff as a separate archive libtpm2_test_pkcs11 = src/libtpm2_test_pkcs11.la src_libtpm2_test_pkcs11_la_LIBADD = $(AM_LDFLAGS) $(libtpm2_test_internal) src_libtpm2_test_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) # Internal Testing Unit libtpm2_test_internal = src/libtpm2_test_internal.la src_libtpm2_test_internal_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_test_internal_la_SOURCES = $(LIB_PKCS11_INTERNAL_LIB_SRC) noinst_LTLIBRARIES = $(libtpm2_test_pkcs11) $(libtpm2_test_internal) @ENABLE_ASAN_FALSE@ASAN_ENABLED = "" @ENABLE_ASAN_TRUE@ASAN_ENABLED = "true" @HAVE_FAPI_FALSE@FAPI_ENABLED = "" @HAVE_FAPI_TRUE@FAPI_ENABLED = "true" # test harness configuration AM_TESTS_ENVIRONMENT = \ ASAN_ENABLED=$(ASAN_ENABLED) \ FAPI_ENABLED=$(FAPI_ENABLED) \ T=$(abs_top_srcdir) \ PYTHON_INTERPRETER=@PYTHON_INTERPRETER@ \ TEST_FUNC_LIB=$(srcdir)/test/integration/scripts/int-test-funcs.sh \ TEST_FIXTURES=$(abs_top_srcdir)/test/integration/fixtures \ PATH=$(abs_top_srcdir)/tools:./src:$(PATH) \ PYTHONPATH=$(abs_top_srcdir)/tools \ TPM2_PKCS11_MODULE=$(abs_builddir)/src/.libs/libtpm2_pkcs11.so \ TEST_JAVA_ROOT=$(JAVAROOT) \ PACKAGE_URL=$(PACKAGE_URL) \ CC=$(CC) \ dbus-run-session TESTS_LDADD = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) $(p11lib_LTLIBRARIES) $(AM_LDFLAGS) $(CMOCKA_LIBS) $(CRYPTO_LIBS) TESTS_CFLAGS = $(CMOCKA_CFLAGS) check_SCRIPTS = $(am__append_3) TEST_EXTENSIONS = .sh .int .nosetup .java .fapi .fuzz .fuzz32 integration_scripts = test/integration/pkcs11-tool.sh \ test/integration/pkcs11-tool-init.sh.nosetup \ test/integration/p11-tool.sh.nosetup \ test/integration/pkcs11-dbup.sh.nosetup \ test/integration/tls-tests.sh test/integration/openssl.sh \ test/integration/pkcs11-javarunner.sh.java \ test/integration/nss-tests.sh \ test/integration/ptool-link.sh.nosetup \ test/integration/python-pkcs11.sh $(am__append_1) @ENABLE_INTEGRATION_TRUE@AM_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@LOG_COMPILER = $(srcdir)/test/integration/scripts/int-test-setup.sh @ENABLE_INTEGRATION_TRUE@AM_INT_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@INT_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_SH_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@SH_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_NOSETUP_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@NOSETUP_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_FAPI_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@FAPI_LOG_COMPILER = env TPM2_PKCS11_BACKEND=fapi $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_LDADD = $(TESTS_LDADD) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_SOURCES = test/integration/pkcs-find-objects.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_SOURCES = test/integration/pkcs-get-mechanism.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_SOURCES = test/integration/pkcs-get-attribute-value.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_SOURCES = test/integration/pkcs-login-logout.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_SOURCES = test/integration/pkcs-sign-verify.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_SOURCES = test/integration/pkcs-initialize-finalize.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_SOURCES = test/integration/pkcs-misc.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_SOURCES = test/integration/pkcs-crypt.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_SOURCES = test/integration/pkcs-keygen.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_SOURCES = test/integration/pkcs-session-state.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_SOURCES = test/integration/pkcs-lockout.int.c test/integration/test.c # # Java Tests # @ENABLE_INTEGRATION_TRUE@AM_JAVA_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@JAVA_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@dist_noinst_JAVA = test/integration/PKCS11JavaTests.java @UNIT_TRUE@test_unit_test_twist_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_twist_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_log_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_log_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_parser_CFLAGS = $(AM_CFLAGS) $(YAML_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_parser_LDADD = $(CMOCKA_LIBS) $(YAML_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_attr_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_attr_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_db_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(SQLITE3_CFLAGS) @UNIT_TRUE@test_unit_test_db_LDADD = $(CMOCKA_LIBS) $(SQLITE3_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_db_LDFLAGS = -Wl,--wrap=sqlite3_column_bytes \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_blob \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_data_count \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_name \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_bytes \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_text \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_int \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_prepare_v2 \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_finalize \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_blob \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_int \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_text \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_errmsg \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_step \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_exec \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_last_insert_rowid \ @UNIT_TRUE@ -Wl,--wrap=strdup \ @UNIT_TRUE@ -Wl,--wrap=calloc @UNIT_TRUE@test_unit_test_utils_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_utils_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) WRAP_LD_FLAGS := \ -Wl,--wrap=Esys_Initialize \ -Wl,--wrap=backend_fapi_init \ -Wl,--wrap=Tss2_TctiLdr_Initialize \ -Wl,--wrap=Tss2_TctiLdr_Finalize \ -Wl,--wrap=Esys_GetCapability \ -Wl,--wrap=Esys_TestParms \ -Wl,--wrap=Esys_Finalize \ -Wl,--wrap=Esys_TR_FromTPMPublic \ -Wl,--wrap=Esys_TR_Serialize \ -Wl,--wrap=Esys_TR_Deserialize \ -Wl,--wrap=Esys_TR_SetAuth \ -Wl,--wrap=Esys_StartAuthSession \ -Wl,--wrap=Esys_TRSess_SetAttributes \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_CreateLoaded \ -Wl,--wrap=Esys_Create \ -Wl,--wrap=Esys_FlushContext \ -Wl,--wrap=Esys_Load \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_Unseal \ -Wl,--wrap=Esys_ObjectChangeAuth @FUZZING_TRUE@FUZZ_RUNNER := $(top_srcdir)/test/fuzz/scripts/fuzz-runner.sh @FUZZING_TRUE@AM_FUZZ_LOG_FLAGS = $(FUZZING_FLAGS) @FUZZING_TRUE@FUZZ_LOG_COMPILER = $(FUZZ_RUNNER) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_LDADD = $(libtpm2_test_pkcs11) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_SOURCES = test/fuzz/yaml-parser.fuzz.c @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(FUZZING_CFLAGS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD = $(libtpm2_test_pkcs11) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES = test/fuzz/utils-ctx-unwrap-objauth.c @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_SOURCES = test/fuzz/init-token-sopin.fuzz.c @FUZZING_TRUE@test_fuzz_init_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_SOURCES = test/fuzz/init-pin.fuzz.c @FUZZING_TRUE@test_fuzz_set_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_set_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_SOURCES = test/fuzz/set-pin.fuzz.c @FUZZING_TRUE@AM_FUZZ32_LOG_FLAGS = $(FUZZING_FLAGS) -max_len=32 @FUZZING_TRUE@FUZZ32_LOG_COMPILER = $(FUZZ_RUNNER) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_SOURCES = test/fuzz/init-token-label.fuzz32.c @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_SOURCES = test/fuzz/db-token-label.fuzz32.c @FUZZING_TRUE@fuzzdir = $(srcdir) # include integration tests # include unit tests # Include fuzz tests TESTS = \ $(check_PROGRAMS) \ $(check_SCRIPTS) all: all-am .SUFFIXES: .SUFFIXES: .c .fapi .fapi$(EXEEXT) .fuzz .fuzz$(EXEEXT) .fuzz32 .fuzz32$(EXEEXT) .int .int$(EXEEXT) .java .java$(EXEEXT) .lo .log .nosetup .nosetup$(EXEEXT) .o .obj .sh .sh$(EXEEXT) .trs am--refresh: Makefile @: $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(top_srcdir)/aminclude_static.am $(srcdir)/src_vars.mk $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am $(srcdir)/Makefile-fuzz.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ *$$dep*) \ echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \ $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \ && exit 0; \ exit 1;; \ esac; \ done; \ echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \ $(am__cd) $(top_srcdir) && \ $(AUTOMAKE) --foreign Makefile Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status @case '$?' in \ *config.status*) \ echo ' $(SHELL) ./config.status'; \ $(SHELL) ./config.status;; \ *) \ echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles)'; \ cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles);; \ esac; $(top_srcdir)/aminclude_static.am $(srcdir)/src_vars.mk $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am $(srcdir)/Makefile-fuzz.am $(am__empty): $(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES) $(SHELL) ./config.status --recheck $(top_srcdir)/configure: $(am__configure_deps) $(am__cd) $(srcdir) && $(AUTOCONF) $(ACLOCAL_M4): $(am__aclocal_m4_deps) $(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS) $(am__aclocal_m4_deps): src/lib/config.h: src/lib/stamp-h1 @test -f $@ || rm -f src/lib/stamp-h1 @test -f $@ || $(MAKE) $(AM_MAKEFLAGS) src/lib/stamp-h1 src/lib/stamp-h1: $(top_srcdir)/src/lib/config.h.in $(top_builddir)/config.status @rm -f src/lib/stamp-h1 cd $(top_builddir) && $(SHELL) ./config.status src/lib/config.h $(top_srcdir)/src/lib/config.h.in: $(am__configure_deps) ($(am__cd) $(top_srcdir) && $(AUTOHEADER)) rm -f src/lib/stamp-h1 touch $@ distclean-hdr: -rm -f src/lib/config.h src/lib/stamp-h1 lib/tpm2-pkcs11.pc: $(top_builddir)/config.status $(top_srcdir)/lib/tpm2-pkcs11.pc.in cd $(top_builddir) && $(SHELL) ./config.status $@ clean-checkPROGRAMS: @list='$(check_PROGRAMS)'; test -n "$$list" || exit 0; \ echo " rm -f" $$list; \ rm -f $$list || exit $$?; \ test -n "$(EXEEXT)" || exit 0; \ list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \ echo " rm -f" $$list; \ rm -f $$list install-fuzzPROGRAMS: $(fuzz_PROGRAMS) @$(NORMAL_INSTALL) @list='$(fuzz_PROGRAMS)'; test -n "$(fuzzdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(fuzzdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(fuzzdir)" || exit 1; \ fi; \ for p in $$list; do echo "$$p $$p"; done | \ sed 's/$(EXEEXT)$$//' | \ while read p p1; do if test -f $$p \ || test -f $$p1 \ ; then echo "$$p"; echo "$$p"; else :; fi; \ done | \ sed -e 'p;s,.*/,,;n;h' \ -e 's|.*|.|' \ -e 'p;x;s,.*/,,;s/$(EXEEXT)$$//;$(transform);s/$$/$(EXEEXT)/' | \ sed 'N;N;N;s,\n, ,g' | \ $(AWK) 'BEGIN { files["."] = ""; dirs["."] = 1 } \ { d=$$3; if (dirs[d] != 1) { print "d", d; dirs[d] = 1 } \ if ($$2 == $$4) files[d] = files[d] " " $$1; \ else { print "f", $$3 "/" $$4, $$1; } } \ END { for (d in files) print "f", d, files[d] }' | \ while read type dir files; do \ if test "$$dir" = .; then dir=; else dir=/$$dir; fi; \ test -z "$$files" || { \ echo " $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files '$(DESTDIR)$(fuzzdir)$$dir'"; \ $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files "$(DESTDIR)$(fuzzdir)$$dir" || exit $$?; \ } \ ; done uninstall-fuzzPROGRAMS: @$(NORMAL_UNINSTALL) @list='$(fuzz_PROGRAMS)'; test -n "$(fuzzdir)" || list=; \ files=`for p in $$list; do echo "$$p"; done | \ sed -e 'h;s,^.*/,,;s/$(EXEEXT)$$//;$(transform)' \ -e 's/$$/$(EXEEXT)/' \ `; \ test -n "$$list" || exit 0; \ echo " ( cd '$(DESTDIR)$(fuzzdir)' && rm -f" $$files ")"; \ cd "$(DESTDIR)$(fuzzdir)" && rm -f $$files clean-fuzzPROGRAMS: @list='$(fuzz_PROGRAMS)'; test -n "$$list" || exit 0; \ echo " rm -f" $$list; \ rm -f $$list || exit $$?; \ test -n "$(EXEEXT)" || exit 0; \ list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \ echo " rm -f" $$list; \ rm -f $$list install-libLTLIBRARIES: $(lib_LTLIBRARIES) @$(NORMAL_INSTALL) @list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \ list2=; for p in $$list; do \ if test -f $$p; then \ list2="$$list2 $$p"; \ else :; fi; \ done; \ test -z "$$list2" || { \ echo " $(MKDIR_P) '$(DESTDIR)$(libdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(libdir)" || exit 1; \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(libdir)'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(libdir)"; \ } uninstall-libLTLIBRARIES: @$(NORMAL_UNINSTALL) @list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \ for p in $$list; do \ $(am__strip_dir) \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(libdir)/$$f'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(libdir)/$$f"; \ done clean-libLTLIBRARIES: -test -z "$(lib_LTLIBRARIES)" || rm -f $(lib_LTLIBRARIES) @list='$(lib_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } clean-noinstLTLIBRARIES: -test -z "$(noinst_LTLIBRARIES)" || rm -f $(noinst_LTLIBRARIES) @list='$(noinst_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } install-p11libLTLIBRARIES: $(p11lib_LTLIBRARIES) @$(NORMAL_INSTALL) @list='$(p11lib_LTLIBRARIES)'; test -n "$(p11libdir)" || list=; \ list2=; for p in $$list; do \ if test -f $$p; then \ list2="$$list2 $$p"; \ else :; fi; \ done; \ test -z "$$list2" || { \ echo " $(MKDIR_P) '$(DESTDIR)$(p11libdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(p11libdir)" || exit 1; \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(p11libdir)'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(p11libdir)"; \ } uninstall-p11libLTLIBRARIES: @$(NORMAL_UNINSTALL) @list='$(p11lib_LTLIBRARIES)'; test -n "$(p11libdir)" || list=; \ for p in $$list; do \ $(am__strip_dir) \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(p11libdir)/$$f'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(p11libdir)/$$f"; \ done clean-p11libLTLIBRARIES: -test -z "$(p11lib_LTLIBRARIES)" || rm -f $(p11lib_LTLIBRARIES) @list='$(p11lib_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } src/$(am__dirstamp): @$(MKDIR_P) src @: > src/$(am__dirstamp) src/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) src/$(DEPDIR) @: > src/$(DEPDIR)/$(am__dirstamp) src/pkcs11.lo: src/$(am__dirstamp) src/$(DEPDIR)/$(am__dirstamp) src/lib/$(am__dirstamp): @$(MKDIR_P) src/lib @: > src/lib/$(am__dirstamp) src/lib/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) src/lib/$(DEPDIR) @: > src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/attrs.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend_esysdb.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend_fapi.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/db.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/digest.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/emitter.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/encrypt.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/general.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/key.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/mech.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/mutex.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/object.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/parser.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/random.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session_ctx.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session_table.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/sign.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/slot.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/ssl_util.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/token.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/tpm.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/twist.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/typed_memory.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/utils.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/libtpm2_pkcs11.la: $(src_libtpm2_pkcs11_la_OBJECTS) $(src_libtpm2_pkcs11_la_DEPENDENCIES) $(EXTRA_src_libtpm2_pkcs11_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(src_libtpm2_pkcs11_la_LINK) $(am_src_libtpm2_pkcs11_la_rpath) $(src_libtpm2_pkcs11_la_OBJECTS) $(src_libtpm2_pkcs11_la_LIBADD) $(LIBS) src/libtpm2_test_internal.la: $(src_libtpm2_test_internal_la_OBJECTS) $(src_libtpm2_test_internal_la_DEPENDENCIES) $(EXTRA_src_libtpm2_test_internal_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(LINK) $(src_libtpm2_test_internal_la_OBJECTS) $(src_libtpm2_test_internal_la_LIBADD) $(LIBS) src/libtpm2_test_pkcs11.la: $(src_libtpm2_test_pkcs11_la_OBJECTS) $(src_libtpm2_test_pkcs11_la_DEPENDENCIES) $(EXTRA_src_libtpm2_test_pkcs11_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(LINK) $(src_libtpm2_test_pkcs11_la_OBJECTS) $(src_libtpm2_test_pkcs11_la_LIBADD) $(LIBS) test/fuzz/$(am__dirstamp): @$(MKDIR_P) test/fuzz @: > test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/fuzz/$(DEPDIR) @: > test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/db-token-label.fuzz32$(EXEEXT): $(test_fuzz_db_token_label_fuzz32_OBJECTS) $(test_fuzz_db_token_label_fuzz32_DEPENDENCIES) $(EXTRA_test_fuzz_db_token_label_fuzz32_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/db-token-label.fuzz32$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_db_token_label_fuzz32_LINK) $(test_fuzz_db_token_label_fuzz32_OBJECTS) $(test_fuzz_db_token_label_fuzz32_LDADD) $(LIBS) test/fuzz/init_pin_fuzz-init-pin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-pin.fuzz$(EXEEXT): $(test_fuzz_init_pin_fuzz_OBJECTS) $(test_fuzz_init_pin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_init_pin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-pin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_pin_fuzz_LINK) $(test_fuzz_init_pin_fuzz_OBJECTS) $(test_fuzz_init_pin_fuzz_LDADD) $(LIBS) test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-token-label.fuzz32$(EXEEXT): $(test_fuzz_init_token_label_fuzz32_OBJECTS) $(test_fuzz_init_token_label_fuzz32_DEPENDENCIES) $(EXTRA_test_fuzz_init_token_label_fuzz32_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-token-label.fuzz32$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_token_label_fuzz32_LINK) $(test_fuzz_init_token_label_fuzz32_OBJECTS) $(test_fuzz_init_token_label_fuzz32_LDADD) $(LIBS) test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-token-sopin.fuzz$(EXEEXT): $(test_fuzz_init_token_sopin_fuzz_OBJECTS) $(test_fuzz_init_token_sopin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_init_token_sopin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-token-sopin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_token_sopin_fuzz_LINK) $(test_fuzz_init_token_sopin_fuzz_OBJECTS) $(test_fuzz_init_token_sopin_fuzz_LDADD) $(LIBS) test/fuzz/set_pin_fuzz-set-pin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/set-pin.fuzz$(EXEEXT): $(test_fuzz_set_pin_fuzz_OBJECTS) $(test_fuzz_set_pin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_set_pin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/set-pin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_set_pin_fuzz_LINK) $(test_fuzz_set_pin_fuzz_OBJECTS) $(test_fuzz_set_pin_fuzz_LDADD) $(LIBS) test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT): $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_utils_ctx_unwrap_objauth_fuzz_LINK) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD) $(LIBS) test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/yaml-parser.fuzz$(EXEEXT): $(test_fuzz_yaml_parser_fuzz_OBJECTS) $(test_fuzz_yaml_parser_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_yaml_parser_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/yaml-parser.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_yaml_parser_fuzz_LINK) $(test_fuzz_yaml_parser_fuzz_OBJECTS) $(test_fuzz_yaml_parser_fuzz_LDADD) $(LIBS) test/integration/$(am__dirstamp): @$(MKDIR_P) test/integration @: > test/integration/$(am__dirstamp) test/integration/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/integration/$(DEPDIR) @: > test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_crypt_int-pkcs-crypt.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_crypt_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-crypt.int$(EXEEXT): $(test_integration_pkcs_crypt_int_OBJECTS) $(test_integration_pkcs_crypt_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_crypt_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-crypt.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_crypt_int_LINK) $(test_integration_pkcs_crypt_int_OBJECTS) $(test_integration_pkcs_crypt_int_LDADD) $(LIBS) test/integration/pkcs_find_objects_int-pkcs-find-objects.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_find_objects_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-find-objects.int$(EXEEXT): $(test_integration_pkcs_find_objects_int_OBJECTS) $(test_integration_pkcs_find_objects_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_find_objects_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-find-objects.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_find_objects_int_LINK) $(test_integration_pkcs_find_objects_int_OBJECTS) $(test_integration_pkcs_find_objects_int_LDADD) $(LIBS) test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_get_attribute_value_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-get-attribute-value.int$(EXEEXT): $(test_integration_pkcs_get_attribute_value_int_OBJECTS) $(test_integration_pkcs_get_attribute_value_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_get_attribute_value_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-get-attribute-value.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_get_attribute_value_int_LINK) $(test_integration_pkcs_get_attribute_value_int_OBJECTS) $(test_integration_pkcs_get_attribute_value_int_LDADD) $(LIBS) test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_get_mechanism_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-get-mechanism.int$(EXEEXT): $(test_integration_pkcs_get_mechanism_int_OBJECTS) $(test_integration_pkcs_get_mechanism_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_get_mechanism_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-get-mechanism.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_get_mechanism_int_LINK) $(test_integration_pkcs_get_mechanism_int_OBJECTS) $(test_integration_pkcs_get_mechanism_int_LDADD) $(LIBS) test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_initialize_finalize_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-initialize-finalize.int$(EXEEXT): $(test_integration_pkcs_initialize_finalize_int_OBJECTS) $(test_integration_pkcs_initialize_finalize_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_initialize_finalize_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-initialize-finalize.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_initialize_finalize_int_LINK) $(test_integration_pkcs_initialize_finalize_int_OBJECTS) $(test_integration_pkcs_initialize_finalize_int_LDADD) $(LIBS) test/integration/pkcs_keygen_int-pkcs-keygen.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_keygen_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-keygen.int$(EXEEXT): $(test_integration_pkcs_keygen_int_OBJECTS) $(test_integration_pkcs_keygen_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_keygen_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-keygen.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_keygen_int_LINK) $(test_integration_pkcs_keygen_int_OBJECTS) $(test_integration_pkcs_keygen_int_LDADD) $(LIBS) test/integration/pkcs_lockout_int-pkcs-lockout.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_lockout_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-lockout.int$(EXEEXT): $(test_integration_pkcs_lockout_int_OBJECTS) $(test_integration_pkcs_lockout_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_lockout_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-lockout.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_lockout_int_LINK) $(test_integration_pkcs_lockout_int_OBJECTS) $(test_integration_pkcs_lockout_int_LDADD) $(LIBS) test/integration/pkcs_login_logout_int-pkcs-login-logout.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_login_logout_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-login-logout.int$(EXEEXT): $(test_integration_pkcs_login_logout_int_OBJECTS) $(test_integration_pkcs_login_logout_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_login_logout_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-login-logout.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_login_logout_int_LINK) $(test_integration_pkcs_login_logout_int_OBJECTS) $(test_integration_pkcs_login_logout_int_LDADD) $(LIBS) test/integration/pkcs_misc_int-pkcs-misc.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_misc_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-misc.int$(EXEEXT): $(test_integration_pkcs_misc_int_OBJECTS) $(test_integration_pkcs_misc_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_misc_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-misc.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_misc_int_LINK) $(test_integration_pkcs_misc_int_OBJECTS) $(test_integration_pkcs_misc_int_LDADD) $(LIBS) test/integration/pkcs_session_state_int-pkcs-session-state.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_session_state_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-session-state.int$(EXEEXT): $(test_integration_pkcs_session_state_int_OBJECTS) $(test_integration_pkcs_session_state_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_session_state_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-session-state.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_session_state_int_LINK) $(test_integration_pkcs_session_state_int_OBJECTS) $(test_integration_pkcs_session_state_int_LDADD) $(LIBS) test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_sign_verify_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-sign-verify.int$(EXEEXT): $(test_integration_pkcs_sign_verify_int_OBJECTS) $(test_integration_pkcs_sign_verify_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_sign_verify_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-sign-verify.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_sign_verify_int_LINK) $(test_integration_pkcs_sign_verify_int_OBJECTS) $(test_integration_pkcs_sign_verify_int_LDADD) $(LIBS) test/unit/$(am__dirstamp): @$(MKDIR_P) test/unit @: > test/unit/$(am__dirstamp) test/unit/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/unit/$(DEPDIR) @: > test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_attr-test_attr.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_attr$(EXEEXT): $(test_unit_test_attr_OBJECTS) $(test_unit_test_attr_DEPENDENCIES) $(EXTRA_test_unit_test_attr_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_attr$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_attr_LINK) $(test_unit_test_attr_OBJECTS) $(test_unit_test_attr_LDADD) $(LIBS) test/unit/test_db-test_db.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_db$(EXEEXT): $(test_unit_test_db_OBJECTS) $(test_unit_test_db_DEPENDENCIES) $(EXTRA_test_unit_test_db_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_db$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_db_LINK) $(test_unit_test_db_OBJECTS) $(test_unit_test_db_LDADD) $(LIBS) test/unit/test_log-test_log.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_log$(EXEEXT): $(test_unit_test_log_OBJECTS) $(test_unit_test_log_DEPENDENCIES) $(EXTRA_test_unit_test_log_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_log$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_log_LINK) $(test_unit_test_log_OBJECTS) $(test_unit_test_log_LDADD) $(LIBS) test/unit/test_parser-test_parser.$(OBJEXT): \ test/unit/$(am__dirstamp) test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_parser$(EXEEXT): $(test_unit_test_parser_OBJECTS) $(test_unit_test_parser_DEPENDENCIES) $(EXTRA_test_unit_test_parser_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_parser$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_parser_LINK) $(test_unit_test_parser_OBJECTS) $(test_unit_test_parser_LDADD) $(LIBS) test/unit/test_twist-test_twist.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_twist$(EXEEXT): $(test_unit_test_twist_OBJECTS) $(test_unit_test_twist_DEPENDENCIES) $(EXTRA_test_unit_test_twist_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_twist$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_twist_LINK) $(test_unit_test_twist_OBJECTS) $(test_unit_test_twist_LDADD) $(LIBS) test/unit/test_utils-test_utils.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_utils$(EXEEXT): $(test_unit_test_utils_OBJECTS) $(test_unit_test_utils_DEPENDENCIES) $(EXTRA_test_unit_test_utils_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_utils$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_utils_LINK) $(test_unit_test_utils_OBJECTS) $(test_unit_test_utils_LDADD) $(LIBS) mostlyclean-compile: -rm -f *.$(OBJEXT) -rm -f src/*.$(OBJEXT) -rm -f src/*.lo -rm -f src/lib/*.$(OBJEXT) -rm -f src/lib/*.lo -rm -f test/fuzz/*.$(OBJEXT) -rm -f test/integration/*.$(OBJEXT) -rm -f test/unit/*.$(OBJEXT) distclean-compile: -rm -f *.tab.c @AMDEP_TRUE@@am__include@ @am__quote@src/$(DEPDIR)/pkcs11.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/attrs.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend_esysdb.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend_fapi.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/db.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/digest.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/emitter.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/encrypt.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/general.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/key.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/mech.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/mutex.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/object.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/parser.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/random.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session_ctx.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session_table.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/sign.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/slot.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/ssl_util.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/token.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/tpm.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/twist.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/typed_memory.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/utils.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_misc_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_attr-test_attr.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_db-test_db.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_log-test_log.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_parser-test_parser.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_twist-test_twist.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_utils-test_utils.Po@am__quote@ # am--include-marker $(am__depfiles_remade): @$(MKDIR_P) $(@D) @echo '# dummy' >$@-t && $(am__mv) $@-t $@ am--depfiles: $(am__depfiles_remade) .c.o: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.o$$||'`;\ @am__fastdepCC_TRUE@ $(COMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ $< &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ $< .c.obj: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.obj$$||'`;\ @am__fastdepCC_TRUE@ $(COMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ `$(CYGPATH_W) '$<'` &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ `$(CYGPATH_W) '$<'` .c.lo: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.lo$$||'`;\ @am__fastdepCC_TRUE@ $(LTCOMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ $< &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Plo @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $< test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o: test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o -MD -MP -MF test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o `test -f 'test/fuzz/db-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-token-label.fuzz32.c' object='test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o `test -f 'test/fuzz/db-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/db-token-label.fuzz32.c test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj: test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj -MD -MP -MF test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj `if test -f 'test/fuzz/db-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/db-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-token-label.fuzz32.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-token-label.fuzz32.c' object='test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj `if test -f 'test/fuzz/db-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/db-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-token-label.fuzz32.c'; fi` test/fuzz/init_pin_fuzz-init-pin.fuzz.o: test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_pin_fuzz-init-pin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.o `test -f 'test/fuzz/init-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-pin.fuzz.c' object='test/fuzz/init_pin_fuzz-init-pin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.o `test -f 'test/fuzz/init-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-pin.fuzz.c test/fuzz/init_pin_fuzz-init-pin.fuzz.obj: test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_pin_fuzz-init-pin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.obj `if test -f 'test/fuzz/init-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-pin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-pin.fuzz.c' object='test/fuzz/init_pin_fuzz-init-pin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.obj `if test -f 'test/fuzz/init-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-pin.fuzz.c'; fi` test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o: test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o `test -f 'test/fuzz/init-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-label.fuzz32.c' object='test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o `test -f 'test/fuzz/init-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/init-token-label.fuzz32.c test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj: test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj `if test -f 'test/fuzz/init-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/init-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-label.fuzz32.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-label.fuzz32.c' object='test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj `if test -f 'test/fuzz/init-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/init-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-label.fuzz32.c'; fi` test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o: test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o `test -f 'test/fuzz/init-token-sopin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-sopin.fuzz.c' object='test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o `test -f 'test/fuzz/init-token-sopin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-token-sopin.fuzz.c test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj: test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj `if test -f 'test/fuzz/init-token-sopin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-token-sopin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-sopin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-sopin.fuzz.c' object='test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj `if test -f 'test/fuzz/init-token-sopin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-token-sopin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-sopin.fuzz.c'; fi` test/fuzz/set_pin_fuzz-set-pin.fuzz.o: test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/set_pin_fuzz-set-pin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.o `test -f 'test/fuzz/set-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/set-pin.fuzz.c' object='test/fuzz/set_pin_fuzz-set-pin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.o `test -f 'test/fuzz/set-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/set-pin.fuzz.c test/fuzz/set_pin_fuzz-set-pin.fuzz.obj: test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/set_pin_fuzz-set-pin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.obj `if test -f 'test/fuzz/set-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/set-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/set-pin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/set-pin.fuzz.c' object='test/fuzz/set_pin_fuzz-set-pin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.obj `if test -f 'test/fuzz/set-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/set-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/set-pin.fuzz.c'; fi` test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o: test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o -MD -MP -MF test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o `test -f 'test/fuzz/utils-ctx-unwrap-objauth.c' || echo '$(srcdir)/'`test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/utils-ctx-unwrap-objauth.c' object='test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o `test -f 'test/fuzz/utils-ctx-unwrap-objauth.c' || echo '$(srcdir)/'`test/fuzz/utils-ctx-unwrap-objauth.c test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj: test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj -MD -MP -MF test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj `if test -f 'test/fuzz/utils-ctx-unwrap-objauth.c'; then $(CYGPATH_W) 'test/fuzz/utils-ctx-unwrap-objauth.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/utils-ctx-unwrap-objauth.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/utils-ctx-unwrap-objauth.c' object='test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj `if test -f 'test/fuzz/utils-ctx-unwrap-objauth.c'; then $(CYGPATH_W) 'test/fuzz/utils-ctx-unwrap-objauth.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/utils-ctx-unwrap-objauth.c'; fi` test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o: test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o `test -f 'test/fuzz/yaml-parser.fuzz.c' || echo '$(srcdir)/'`test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/yaml-parser.fuzz.c' object='test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o `test -f 'test/fuzz/yaml-parser.fuzz.c' || echo '$(srcdir)/'`test/fuzz/yaml-parser.fuzz.c test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj: test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj `if test -f 'test/fuzz/yaml-parser.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/yaml-parser.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/yaml-parser.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/yaml-parser.fuzz.c' object='test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj `if test -f 'test/fuzz/yaml-parser.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/yaml-parser.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/yaml-parser.fuzz.c'; fi` test/integration/pkcs_crypt_int-pkcs-crypt.int.o: test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-pkcs-crypt.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.o `test -f 'test/integration/pkcs-crypt.int.c' || echo '$(srcdir)/'`test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-crypt.int.c' object='test/integration/pkcs_crypt_int-pkcs-crypt.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.o `test -f 'test/integration/pkcs-crypt.int.c' || echo '$(srcdir)/'`test/integration/pkcs-crypt.int.c test/integration/pkcs_crypt_int-pkcs-crypt.int.obj: test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-pkcs-crypt.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.obj `if test -f 'test/integration/pkcs-crypt.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-crypt.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-crypt.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-crypt.int.c' object='test/integration/pkcs_crypt_int-pkcs-crypt.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.obj `if test -f 'test/integration/pkcs-crypt.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-crypt.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-crypt.int.c'; fi` test/integration/pkcs_crypt_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo -c -o test/integration/pkcs_crypt_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_crypt_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_crypt_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo -c -o test/integration/pkcs_crypt_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_crypt_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o: test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o `test -f 'test/integration/pkcs-find-objects.int.c' || echo '$(srcdir)/'`test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-find-objects.int.c' object='test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o `test -f 'test/integration/pkcs-find-objects.int.c' || echo '$(srcdir)/'`test/integration/pkcs-find-objects.int.c test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj: test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj `if test -f 'test/integration/pkcs-find-objects.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-find-objects.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-find-objects.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-find-objects.int.c' object='test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj `if test -f 'test/integration/pkcs-find-objects.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-find-objects.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-find-objects.int.c'; fi` test/integration/pkcs_find_objects_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo -c -o test/integration/pkcs_find_objects_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_find_objects_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_find_objects_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo -c -o test/integration/pkcs_find_objects_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_find_objects_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o: test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o `test -f 'test/integration/pkcs-get-attribute-value.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-attribute-value.int.c' object='test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o `test -f 'test/integration/pkcs-get-attribute-value.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-attribute-value.int.c test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj: test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj `if test -f 'test/integration/pkcs-get-attribute-value.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-attribute-value.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-attribute-value.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-attribute-value.int.c' object='test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj `if test -f 'test/integration/pkcs-get-attribute-value.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-attribute-value.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-attribute-value.int.c'; fi` test/integration/pkcs_get_attribute_value_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo -c -o test/integration/pkcs_get_attribute_value_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_attribute_value_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_get_attribute_value_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo -c -o test/integration/pkcs_get_attribute_value_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_attribute_value_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o: test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o `test -f 'test/integration/pkcs-get-mechanism.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-mechanism.int.c' object='test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o `test -f 'test/integration/pkcs-get-mechanism.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-mechanism.int.c test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj: test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj `if test -f 'test/integration/pkcs-get-mechanism.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-mechanism.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-mechanism.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-mechanism.int.c' object='test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj `if test -f 'test/integration/pkcs-get-mechanism.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-mechanism.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-mechanism.int.c'; fi` test/integration/pkcs_get_mechanism_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo -c -o test/integration/pkcs_get_mechanism_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_mechanism_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_get_mechanism_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo -c -o test/integration/pkcs_get_mechanism_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_mechanism_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o: test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o `test -f 'test/integration/pkcs-initialize-finalize.int.c' || echo '$(srcdir)/'`test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-initialize-finalize.int.c' object='test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o `test -f 'test/integration/pkcs-initialize-finalize.int.c' || echo '$(srcdir)/'`test/integration/pkcs-initialize-finalize.int.c test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj: test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj `if test -f 'test/integration/pkcs-initialize-finalize.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-initialize-finalize.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-initialize-finalize.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-initialize-finalize.int.c' object='test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj `if test -f 'test/integration/pkcs-initialize-finalize.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-initialize-finalize.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-initialize-finalize.int.c'; fi` test/integration/pkcs_initialize_finalize_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo -c -o test/integration/pkcs_initialize_finalize_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_initialize_finalize_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_initialize_finalize_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo -c -o test/integration/pkcs_initialize_finalize_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_initialize_finalize_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_keygen_int-pkcs-keygen.int.o: test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-pkcs-keygen.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.o `test -f 'test/integration/pkcs-keygen.int.c' || echo '$(srcdir)/'`test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-keygen.int.c' object='test/integration/pkcs_keygen_int-pkcs-keygen.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.o `test -f 'test/integration/pkcs-keygen.int.c' || echo '$(srcdir)/'`test/integration/pkcs-keygen.int.c test/integration/pkcs_keygen_int-pkcs-keygen.int.obj: test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-pkcs-keygen.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.obj `if test -f 'test/integration/pkcs-keygen.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-keygen.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-keygen.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-keygen.int.c' object='test/integration/pkcs_keygen_int-pkcs-keygen.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.obj `if test -f 'test/integration/pkcs-keygen.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-keygen.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-keygen.int.c'; fi` test/integration/pkcs_keygen_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo -c -o test/integration/pkcs_keygen_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_keygen_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_keygen_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo -c -o test/integration/pkcs_keygen_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_keygen_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_lockout_int-pkcs-lockout.int.o: test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-pkcs-lockout.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.o `test -f 'test/integration/pkcs-lockout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-lockout.int.c' object='test/integration/pkcs_lockout_int-pkcs-lockout.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.o `test -f 'test/integration/pkcs-lockout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-lockout.int.c test/integration/pkcs_lockout_int-pkcs-lockout.int.obj: test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-pkcs-lockout.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.obj `if test -f 'test/integration/pkcs-lockout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-lockout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-lockout.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-lockout.int.c' object='test/integration/pkcs_lockout_int-pkcs-lockout.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.obj `if test -f 'test/integration/pkcs-lockout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-lockout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-lockout.int.c'; fi` test/integration/pkcs_lockout_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo -c -o test/integration/pkcs_lockout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_lockout_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_lockout_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo -c -o test/integration/pkcs_lockout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_lockout_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o: test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o `test -f 'test/integration/pkcs-login-logout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-login-logout.int.c' object='test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o `test -f 'test/integration/pkcs-login-logout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-login-logout.int.c test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj: test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj `if test -f 'test/integration/pkcs-login-logout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-login-logout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-login-logout.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-login-logout.int.c' object='test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj `if test -f 'test/integration/pkcs-login-logout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-login-logout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-login-logout.int.c'; fi` test/integration/pkcs_login_logout_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo -c -o test/integration/pkcs_login_logout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_login_logout_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_login_logout_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo -c -o test/integration/pkcs_login_logout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_login_logout_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_misc_int-pkcs-misc.int.o: test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-pkcs-misc.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo -c -o test/integration/pkcs_misc_int-pkcs-misc.int.o `test -f 'test/integration/pkcs-misc.int.c' || echo '$(srcdir)/'`test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-misc.int.c' object='test/integration/pkcs_misc_int-pkcs-misc.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-pkcs-misc.int.o `test -f 'test/integration/pkcs-misc.int.c' || echo '$(srcdir)/'`test/integration/pkcs-misc.int.c test/integration/pkcs_misc_int-pkcs-misc.int.obj: test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-pkcs-misc.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo -c -o test/integration/pkcs_misc_int-pkcs-misc.int.obj `if test -f 'test/integration/pkcs-misc.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-misc.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-misc.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-misc.int.c' object='test/integration/pkcs_misc_int-pkcs-misc.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-pkcs-misc.int.obj `if test -f 'test/integration/pkcs-misc.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-misc.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-misc.int.c'; fi` test/integration/pkcs_misc_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo -c -o test/integration/pkcs_misc_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_misc_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_misc_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo -c -o test/integration/pkcs_misc_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_misc_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_session_state_int-pkcs-session-state.o: test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-pkcs-session-state.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo -c -o test/integration/pkcs_session_state_int-pkcs-session-state.o `test -f 'test/integration/pkcs-session-state.c' || echo '$(srcdir)/'`test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-session-state.c' object='test/integration/pkcs_session_state_int-pkcs-session-state.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-pkcs-session-state.o `test -f 'test/integration/pkcs-session-state.c' || echo '$(srcdir)/'`test/integration/pkcs-session-state.c test/integration/pkcs_session_state_int-pkcs-session-state.obj: test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-pkcs-session-state.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo -c -o test/integration/pkcs_session_state_int-pkcs-session-state.obj `if test -f 'test/integration/pkcs-session-state.c'; then $(CYGPATH_W) 'test/integration/pkcs-session-state.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-session-state.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-session-state.c' object='test/integration/pkcs_session_state_int-pkcs-session-state.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-pkcs-session-state.obj `if test -f 'test/integration/pkcs-session-state.c'; then $(CYGPATH_W) 'test/integration/pkcs-session-state.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-session-state.c'; fi` test/integration/pkcs_session_state_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo -c -o test/integration/pkcs_session_state_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_session_state_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_session_state_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo -c -o test/integration/pkcs_session_state_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_session_state_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o: test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o `test -f 'test/integration/pkcs-sign-verify.int.c' || echo '$(srcdir)/'`test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-sign-verify.int.c' object='test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o `test -f 'test/integration/pkcs-sign-verify.int.c' || echo '$(srcdir)/'`test/integration/pkcs-sign-verify.int.c test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj: test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj `if test -f 'test/integration/pkcs-sign-verify.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-sign-verify.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-sign-verify.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-sign-verify.int.c' object='test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj `if test -f 'test/integration/pkcs-sign-verify.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-sign-verify.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-sign-verify.int.c'; fi` test/integration/pkcs_sign_verify_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo -c -o test/integration/pkcs_sign_verify_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_sign_verify_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_sign_verify_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo -c -o test/integration/pkcs_sign_verify_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_sign_verify_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/unit/test_attr-test_attr.o: test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -MT test/unit/test_attr-test_attr.o -MD -MP -MF test/unit/$(DEPDIR)/test_attr-test_attr.Tpo -c -o test/unit/test_attr-test_attr.o `test -f 'test/unit/test_attr.c' || echo '$(srcdir)/'`test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_attr-test_attr.Tpo test/unit/$(DEPDIR)/test_attr-test_attr.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_attr.c' object='test/unit/test_attr-test_attr.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -c -o test/unit/test_attr-test_attr.o `test -f 'test/unit/test_attr.c' || echo '$(srcdir)/'`test/unit/test_attr.c test/unit/test_attr-test_attr.obj: test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -MT test/unit/test_attr-test_attr.obj -MD -MP -MF test/unit/$(DEPDIR)/test_attr-test_attr.Tpo -c -o test/unit/test_attr-test_attr.obj `if test -f 'test/unit/test_attr.c'; then $(CYGPATH_W) 'test/unit/test_attr.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_attr.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_attr-test_attr.Tpo test/unit/$(DEPDIR)/test_attr-test_attr.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_attr.c' object='test/unit/test_attr-test_attr.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -c -o test/unit/test_attr-test_attr.obj `if test -f 'test/unit/test_attr.c'; then $(CYGPATH_W) 'test/unit/test_attr.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_attr.c'; fi` test/unit/test_db-test_db.o: test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -MT test/unit/test_db-test_db.o -MD -MP -MF test/unit/$(DEPDIR)/test_db-test_db.Tpo -c -o test/unit/test_db-test_db.o `test -f 'test/unit/test_db.c' || echo '$(srcdir)/'`test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_db-test_db.Tpo test/unit/$(DEPDIR)/test_db-test_db.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_db.c' object='test/unit/test_db-test_db.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -c -o test/unit/test_db-test_db.o `test -f 'test/unit/test_db.c' || echo '$(srcdir)/'`test/unit/test_db.c test/unit/test_db-test_db.obj: test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -MT test/unit/test_db-test_db.obj -MD -MP -MF test/unit/$(DEPDIR)/test_db-test_db.Tpo -c -o test/unit/test_db-test_db.obj `if test -f 'test/unit/test_db.c'; then $(CYGPATH_W) 'test/unit/test_db.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_db.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_db-test_db.Tpo test/unit/$(DEPDIR)/test_db-test_db.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_db.c' object='test/unit/test_db-test_db.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -c -o test/unit/test_db-test_db.obj `if test -f 'test/unit/test_db.c'; then $(CYGPATH_W) 'test/unit/test_db.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_db.c'; fi` test/unit/test_log-test_log.o: test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -MT test/unit/test_log-test_log.o -MD -MP -MF test/unit/$(DEPDIR)/test_log-test_log.Tpo -c -o test/unit/test_log-test_log.o `test -f 'test/unit/test_log.c' || echo '$(srcdir)/'`test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_log-test_log.Tpo test/unit/$(DEPDIR)/test_log-test_log.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_log.c' object='test/unit/test_log-test_log.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -c -o test/unit/test_log-test_log.o `test -f 'test/unit/test_log.c' || echo '$(srcdir)/'`test/unit/test_log.c test/unit/test_log-test_log.obj: test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -MT test/unit/test_log-test_log.obj -MD -MP -MF test/unit/$(DEPDIR)/test_log-test_log.Tpo -c -o test/unit/test_log-test_log.obj `if test -f 'test/unit/test_log.c'; then $(CYGPATH_W) 'test/unit/test_log.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_log.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_log-test_log.Tpo test/unit/$(DEPDIR)/test_log-test_log.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_log.c' object='test/unit/test_log-test_log.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -c -o test/unit/test_log-test_log.obj `if test -f 'test/unit/test_log.c'; then $(CYGPATH_W) 'test/unit/test_log.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_log.c'; fi` test/unit/test_parser-test_parser.o: test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -MT test/unit/test_parser-test_parser.o -MD -MP -MF test/unit/$(DEPDIR)/test_parser-test_parser.Tpo -c -o test/unit/test_parser-test_parser.o `test -f 'test/unit/test_parser.c' || echo '$(srcdir)/'`test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_parser-test_parser.Tpo test/unit/$(DEPDIR)/test_parser-test_parser.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_parser.c' object='test/unit/test_parser-test_parser.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -c -o test/unit/test_parser-test_parser.o `test -f 'test/unit/test_parser.c' || echo '$(srcdir)/'`test/unit/test_parser.c test/unit/test_parser-test_parser.obj: test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -MT test/unit/test_parser-test_parser.obj -MD -MP -MF test/unit/$(DEPDIR)/test_parser-test_parser.Tpo -c -o test/unit/test_parser-test_parser.obj `if test -f 'test/unit/test_parser.c'; then $(CYGPATH_W) 'test/unit/test_parser.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_parser.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_parser-test_parser.Tpo test/unit/$(DEPDIR)/test_parser-test_parser.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_parser.c' object='test/unit/test_parser-test_parser.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -c -o test/unit/test_parser-test_parser.obj `if test -f 'test/unit/test_parser.c'; then $(CYGPATH_W) 'test/unit/test_parser.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_parser.c'; fi` test/unit/test_twist-test_twist.o: test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -MT test/unit/test_twist-test_twist.o -MD -MP -MF test/unit/$(DEPDIR)/test_twist-test_twist.Tpo -c -o test/unit/test_twist-test_twist.o `test -f 'test/unit/test_twist.c' || echo '$(srcdir)/'`test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_twist-test_twist.Tpo test/unit/$(DEPDIR)/test_twist-test_twist.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_twist.c' object='test/unit/test_twist-test_twist.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -c -o test/unit/test_twist-test_twist.o `test -f 'test/unit/test_twist.c' || echo '$(srcdir)/'`test/unit/test_twist.c test/unit/test_twist-test_twist.obj: test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -MT test/unit/test_twist-test_twist.obj -MD -MP -MF test/unit/$(DEPDIR)/test_twist-test_twist.Tpo -c -o test/unit/test_twist-test_twist.obj `if test -f 'test/unit/test_twist.c'; then $(CYGPATH_W) 'test/unit/test_twist.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_twist.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_twist-test_twist.Tpo test/unit/$(DEPDIR)/test_twist-test_twist.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_twist.c' object='test/unit/test_twist-test_twist.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -c -o test/unit/test_twist-test_twist.obj `if test -f 'test/unit/test_twist.c'; then $(CYGPATH_W) 'test/unit/test_twist.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_twist.c'; fi` test/unit/test_utils-test_utils.o: test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -MT test/unit/test_utils-test_utils.o -MD -MP -MF test/unit/$(DEPDIR)/test_utils-test_utils.Tpo -c -o test/unit/test_utils-test_utils.o `test -f 'test/unit/test_utils.c' || echo '$(srcdir)/'`test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_utils-test_utils.Tpo test/unit/$(DEPDIR)/test_utils-test_utils.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_utils.c' object='test/unit/test_utils-test_utils.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -c -o test/unit/test_utils-test_utils.o `test -f 'test/unit/test_utils.c' || echo '$(srcdir)/'`test/unit/test_utils.c test/unit/test_utils-test_utils.obj: test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -MT test/unit/test_utils-test_utils.obj -MD -MP -MF test/unit/$(DEPDIR)/test_utils-test_utils.Tpo -c -o test/unit/test_utils-test_utils.obj `if test -f 'test/unit/test_utils.c'; then $(CYGPATH_W) 'test/unit/test_utils.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_utils.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_utils-test_utils.Tpo test/unit/$(DEPDIR)/test_utils-test_utils.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_utils.c' object='test/unit/test_utils-test_utils.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -c -o test/unit/test_utils-test_utils.obj `if test -f 'test/unit/test_utils.c'; then $(CYGPATH_W) 'test/unit/test_utils.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_utils.c'; fi` mostlyclean-libtool: -rm -f *.lo clean-libtool: -rm -rf .libs _libs -rm -rf src/.libs src/_libs -rm -rf src/lib/.libs src/lib/_libs -rm -rf test/fuzz/.libs test/fuzz/_libs -rm -rf test/integration/.libs test/integration/_libs -rm -rf test/unit/.libs test/unit/_libs distclean-libtool: -rm -f libtool config.lt classnoinst.stamp: $(am__java_sources) @list1='$?'; list2=; if test -n "$$list1"; then \ for p in $$list1; do \ if test -f $$p; then d=; else d="$(srcdir)/"; fi; \ list2="$$list2 $$d$$p"; \ done; \ echo '$(CLASSPATH_ENV) $(JAVAC) -d $(JAVAROOT) $(AM_JAVACFLAGS) $(JAVACFLAGS) '"$$list2"; \ $(CLASSPATH_ENV) $(JAVAC) -d $(JAVAROOT) $(AM_JAVACFLAGS) $(JAVACFLAGS) $$list2; \ else :; fi echo timestamp > $@ clean-noinstJAVA: -rm -f *.class classnoinst.stamp install-p11configDATA: $(p11config_DATA) @$(NORMAL_INSTALL) @list='$(p11config_DATA)'; test -n "$(p11configdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(p11configdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(p11configdir)" || exit 1; \ fi; \ for p in $$list; do \ if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \ echo "$$d$$p"; \ done | $(am__base_list) | \ while read files; do \ echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(p11configdir)'"; \ $(INSTALL_DATA) $$files "$(DESTDIR)$(p11configdir)" || exit $$?; \ done uninstall-p11configDATA: @$(NORMAL_UNINSTALL) @list='$(p11config_DATA)'; test -n "$(p11configdir)" || list=; \ files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \ dir='$(DESTDIR)$(p11configdir)'; $(am__uninstall_files_from_dir) install-pkgconfigDATA: $(pkgconfig_DATA) @$(NORMAL_INSTALL) @list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(pkgconfigdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(pkgconfigdir)" || exit 1; \ fi; \ for p in $$list; do \ if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \ echo "$$d$$p"; \ done | $(am__base_list) | \ while read files; do \ echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(pkgconfigdir)'"; \ $(INSTALL_DATA) $$files "$(DESTDIR)$(pkgconfigdir)" || exit $$?; \ done uninstall-pkgconfigDATA: @$(NORMAL_UNINSTALL) @list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \ files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \ dir='$(DESTDIR)$(pkgconfigdir)'; $(am__uninstall_files_from_dir) ID: $(am__tagged_files) $(am__define_uniq_tagged_files); mkid -fID $$unique tags: tags-am TAGS: tags tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files) set x; \ here=`pwd`; \ $(am__define_uniq_tagged_files); \ shift; \ if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \ test -n "$$unique" || unique=$$empty_fix; \ if test $$# -gt 0; then \ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ "$$@" $$unique; \ else \ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ $$unique; \ fi; \ fi ctags: ctags-am CTAGS: ctags ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files) $(am__define_uniq_tagged_files); \ test -z "$(CTAGS_ARGS)$$unique" \ || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \ $$unique GTAGS: here=`$(am__cd) $(top_builddir) && pwd` \ && $(am__cd) $(top_srcdir) \ && gtags -i $(GTAGS_ARGS) "$$here" cscope: cscope.files test ! -s cscope.files \ || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS) clean-cscope: -rm -f cscope.files cscope.files: clean-cscope cscopelist cscopelist: cscopelist-am cscopelist-am: $(am__tagged_files) list='$(am__tagged_files)'; \ case "$(srcdir)" in \ [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \ *) sdir=$(subdir)/$(srcdir) ;; \ esac; \ for i in $$list; do \ if test -f "$$i"; then \ echo "$(subdir)/$$i"; \ else \ echo "$$sdir/$$i"; \ fi; \ done >> $(top_builddir)/cscope.files distclean-tags: -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags -rm -f cscope.out cscope.in.out cscope.po.out cscope.files # Recover from deleted '.trs' file; this should ensure that # "rm -f foo.log; make foo.trs" re-run 'foo.test', and re-create # both 'foo.log' and 'foo.trs'. Break the recipe in two subshells # to avoid problems with "make -n". .log.trs: rm -f $< $@ $(MAKE) $(AM_MAKEFLAGS) $< # Leading 'am--fnord' is there to ensure the list of targets does not # expand to empty, as could happen e.g. with make check TESTS=''. am--fnord $(TEST_LOGS) $(TEST_LOGS:.log=.trs): $(am__force_recheck) am--force-recheck: @: $(TEST_SUITE_LOG): $(TEST_LOGS) @$(am__set_TESTS_bases); \ am__f_ok () { test -f "$$1" && test -r "$$1"; }; \ redo_bases=`for i in $$bases; do \ am__f_ok $$i.trs && am__f_ok $$i.log || echo $$i; \ done`; \ if test -n "$$redo_bases"; then \ redo_logs=`for i in $$redo_bases; do echo $$i.log; done`; \ redo_results=`for i in $$redo_bases; do echo $$i.trs; done`; \ if $(am__make_dryrun); then :; else \ rm -f $$redo_logs && rm -f $$redo_results || exit 1; \ fi; \ fi; \ if test -n "$$am__remaking_logs"; then \ echo "fatal: making $(TEST_SUITE_LOG): possible infinite" \ "recursion detected" >&2; \ elif test -n "$$redo_logs"; then \ am__remaking_logs=yes $(MAKE) $(AM_MAKEFLAGS) $$redo_logs; \ fi; \ if $(am__make_dryrun); then :; else \ st=0; \ errmsg="fatal: making $(TEST_SUITE_LOG): failed to create"; \ for i in $$redo_bases; do \ test -f $$i.trs && test -r $$i.trs \ || { echo "$$errmsg $$i.trs" >&2; st=1; }; \ test -f $$i.log && test -r $$i.log \ || { echo "$$errmsg $$i.log" >&2; st=1; }; \ done; \ test $$st -eq 0 || exit 1; \ fi @$(am__sh_e_setup); $(am__tty_colors); $(am__set_TESTS_bases); \ ws='[ ]'; \ results=`for b in $$bases; do echo $$b.trs; done`; \ test -n "$$results" || results=/dev/null; \ all=` grep "^$$ws*:test-result:" $$results | wc -l`; \ pass=` grep "^$$ws*:test-result:$$ws*PASS" $$results | wc -l`; \ fail=` grep "^$$ws*:test-result:$$ws*FAIL" $$results | wc -l`; \ skip=` grep "^$$ws*:test-result:$$ws*SKIP" $$results | wc -l`; \ xfail=`grep "^$$ws*:test-result:$$ws*XFAIL" $$results | wc -l`; \ xpass=`grep "^$$ws*:test-result:$$ws*XPASS" $$results | wc -l`; \ error=`grep "^$$ws*:test-result:$$ws*ERROR" $$results | wc -l`; \ if test `expr $$fail + $$xpass + $$error` -eq 0; then \ success=true; \ else \ success=false; \ fi; \ br='==================='; br=$$br$$br$$br$$br; \ result_count () \ { \ if test x"$$1" = x"--maybe-color"; then \ maybe_colorize=yes; \ elif test x"$$1" = x"--no-color"; then \ maybe_colorize=no; \ else \ echo "$@: invalid 'result_count' usage" >&2; exit 4; \ fi; \ shift; \ desc=$$1 count=$$2; \ if test $$maybe_colorize = yes && test $$count -gt 0; then \ color_start=$$3 color_end=$$std; \ else \ color_start= color_end=; \ fi; \ echo "$${color_start}# $$desc $$count$${color_end}"; \ }; \ create_testsuite_report () \ { \ result_count $$1 "TOTAL:" $$all "$$brg"; \ result_count $$1 "PASS: " $$pass "$$grn"; \ result_count $$1 "SKIP: " $$skip "$$blu"; \ result_count $$1 "XFAIL:" $$xfail "$$lgn"; \ result_count $$1 "FAIL: " $$fail "$$red"; \ result_count $$1 "XPASS:" $$xpass "$$red"; \ result_count $$1 "ERROR:" $$error "$$mgn"; \ }; \ { \ echo "$(PACKAGE_STRING): $(subdir)/$(TEST_SUITE_LOG)" | \ $(am__rst_title); \ create_testsuite_report --no-color; \ echo; \ echo ".. contents:: :depth: 2"; \ echo; \ for b in $$bases; do echo $$b; done \ | $(am__create_global_log); \ } >$(TEST_SUITE_LOG).tmp || exit 1; \ mv $(TEST_SUITE_LOG).tmp $(TEST_SUITE_LOG); \ if $$success; then \ col="$$grn"; \ else \ col="$$red"; \ test x"$$VERBOSE" = x || cat $(TEST_SUITE_LOG); \ fi; \ echo "$${col}$$br$${std}"; \ echo "$${col}Testsuite summary for $(PACKAGE_STRING)$${std}"; \ echo "$${col}$$br$${std}"; \ create_testsuite_report --maybe-color; \ echo "$$col$$br$$std"; \ if $$success; then :; else \ echo "$${col}See $(subdir)/$(TEST_SUITE_LOG)$${std}"; \ if test -n "$(PACKAGE_BUGREPORT)"; then \ echo "$${col}Please report to $(PACKAGE_BUGREPORT)$${std}"; \ fi; \ echo "$$col$$br$$std"; \ fi; \ $$success || exit 1 check-TESTS: $(check_PROGRAMS) $(check_SCRIPTS) @list='$(RECHECK_LOGS)'; test -z "$$list" || rm -f $$list @list='$(RECHECK_LOGS:.log=.trs)'; test -z "$$list" || rm -f $$list @test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) @set +e; $(am__set_TESTS_bases); \ log_list=`for i in $$bases; do echo $$i.log; done`; \ trs_list=`for i in $$bases; do echo $$i.trs; done`; \ log_list=`echo $$log_list`; trs_list=`echo $$trs_list`; \ $(MAKE) $(AM_MAKEFLAGS) $(TEST_SUITE_LOG) TEST_LOGS="$$log_list"; \ exit $$?; recheck: all $(check_PROGRAMS) $(check_SCRIPTS) @test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) @set +e; $(am__set_TESTS_bases); \ bases=`for i in $$bases; do echo $$i; done \ | $(am__list_recheck_tests)` || exit 1; \ log_list=`for i in $$bases; do echo $$i.log; done`; \ log_list=`echo $$log_list`; \ $(MAKE) $(AM_MAKEFLAGS) $(TEST_SUITE_LOG) \ am__force_recheck=am--force-recheck \ TEST_LOGS="$$log_list"; \ exit $$? test/unit/test_twist.log: test/unit/test_twist$(EXEEXT) @p='test/unit/test_twist$(EXEEXT)'; \ b='test/unit/test_twist'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_log.log: test/unit/test_log$(EXEEXT) @p='test/unit/test_log$(EXEEXT)'; \ b='test/unit/test_log'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_parser.log: test/unit/test_parser$(EXEEXT) @p='test/unit/test_parser$(EXEEXT)'; \ b='test/unit/test_parser'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_attr.log: test/unit/test_attr$(EXEEXT) @p='test/unit/test_attr$(EXEEXT)'; \ b='test/unit/test_attr'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_db.log: test/unit/test_db$(EXEEXT) @p='test/unit/test_db$(EXEEXT)'; \ b='test/unit/test_db'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_utils.log: test/unit/test_utils$(EXEEXT) @p='test/unit/test_utils$(EXEEXT)'; \ b='test/unit/test_utils'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) .sh.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(SH_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_SH_LOG_DRIVER_FLAGS) $(SH_LOG_DRIVER_FLAGS) -- $(SH_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.sh$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(SH_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_SH_LOG_DRIVER_FLAGS) $(SH_LOG_DRIVER_FLAGS) -- $(SH_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .int.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(INT_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_INT_LOG_DRIVER_FLAGS) $(INT_LOG_DRIVER_FLAGS) -- $(INT_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.int$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(INT_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_INT_LOG_DRIVER_FLAGS) $(INT_LOG_DRIVER_FLAGS) -- $(INT_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .nosetup.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(NOSETUP_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_NOSETUP_LOG_DRIVER_FLAGS) $(NOSETUP_LOG_DRIVER_FLAGS) -- $(NOSETUP_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.nosetup$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(NOSETUP_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_NOSETUP_LOG_DRIVER_FLAGS) $(NOSETUP_LOG_DRIVER_FLAGS) -- $(NOSETUP_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .java.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(JAVA_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_JAVA_LOG_DRIVER_FLAGS) $(JAVA_LOG_DRIVER_FLAGS) -- $(JAVA_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.java$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(JAVA_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_JAVA_LOG_DRIVER_FLAGS) $(JAVA_LOG_DRIVER_FLAGS) -- $(JAVA_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fapi.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FAPI_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FAPI_LOG_DRIVER_FLAGS) $(FAPI_LOG_DRIVER_FLAGS) -- $(FAPI_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fapi$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FAPI_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FAPI_LOG_DRIVER_FLAGS) $(FAPI_LOG_DRIVER_FLAGS) -- $(FAPI_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fuzz.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FUZZ_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FUZZ_LOG_DRIVER_FLAGS) $(FUZZ_LOG_DRIVER_FLAGS) -- $(FUZZ_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fuzz$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FUZZ_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FUZZ_LOG_DRIVER_FLAGS) $(FUZZ_LOG_DRIVER_FLAGS) -- $(FUZZ_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fuzz32.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FUZZ32_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FUZZ32_LOG_DRIVER_FLAGS) $(FUZZ32_LOG_DRIVER_FLAGS) -- $(FUZZ32_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fuzz32$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FUZZ32_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FUZZ32_LOG_DRIVER_FLAGS) $(FUZZ32_LOG_DRIVER_FLAGS) -- $(FUZZ32_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) distdir: $(BUILT_SOURCES) $(MAKE) $(AM_MAKEFLAGS) distdir-am distdir-am: $(DISTFILES) $(am__remove_distdir) test -d "$(distdir)" || mkdir "$(distdir)" @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ list='$(DISTFILES)'; \ dist_files=`for file in $$list; do echo $$file; done | \ sed -e "s|^$$srcdirstrip/||;t" \ -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \ case $$dist_files in \ */*) $(MKDIR_P) `echo "$$dist_files" | \ sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \ sort -u` ;; \ esac; \ for file in $$dist_files; do \ if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \ if test -d $$d/$$file; then \ dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \ if test -d "$(distdir)/$$file"; then \ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ fi; \ if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \ cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ fi; \ cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \ else \ test -f "$(distdir)/$$file" \ || cp -p $$d/$$file "$(distdir)/$$file" \ || exit 1; \ fi; \ done -test -n "$(am__skip_mode_fix)" \ || find "$(distdir)" -type d ! -perm -755 \ -exec chmod u+rwx,go+rx {} \; -o \ ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \ ! -type d ! -perm -400 -exec chmod a+r {} \; -o \ ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \ || chmod -R a+r "$(distdir)" dist-gzip: distdir tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz $(am__post_remove_distdir) dist-bzip2: distdir tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2 $(am__post_remove_distdir) dist-lzip: distdir tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz $(am__post_remove_distdir) dist-xz: distdir tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz $(am__post_remove_distdir) dist-tarZ: distdir @echo WARNING: "Support for distribution archives compressed with" \ "legacy program 'compress' is deprecated." >&2 @echo WARNING: "It will be removed altogether in Automake 2.0" >&2 tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z $(am__post_remove_distdir) dist-shar: distdir @echo WARNING: "Support for shar distribution archives is" \ "deprecated." >&2 @echo WARNING: "It will be removed altogether in Automake 2.0" >&2 shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz $(am__post_remove_distdir) dist-zip: distdir -rm -f $(distdir).zip zip -rq $(distdir).zip $(distdir) $(am__post_remove_distdir) dist dist-all: $(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:' $(am__post_remove_distdir) # This target untars the dist file and tries a VPATH configuration. Then # it guarantees that the distribution is self-contained by making another # tarfile. distcheck: dist case '$(DIST_ARCHIVES)' in \ *.tar.gz*) \ eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).tar.gz | $(am__untar) ;;\ *.tar.bz2*) \ bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\ *.tar.lz*) \ lzip -dc $(distdir).tar.lz | $(am__untar) ;;\ *.tar.xz*) \ xz -dc $(distdir).tar.xz | $(am__untar) ;;\ *.tar.Z*) \ uncompress -c $(distdir).tar.Z | $(am__untar) ;;\ *.shar.gz*) \ eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).shar.gz | unshar ;;\ *.zip*) \ unzip $(distdir).zip ;;\ esac chmod -R a-w $(distdir) chmod u+w $(distdir) mkdir $(distdir)/_build $(distdir)/_build/sub $(distdir)/_inst chmod a-w $(distdir) test -d $(distdir)/_build || exit 0; \ dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \ && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \ && am__cwd=`pwd` \ && $(am__cd) $(distdir)/_build/sub \ && ../../configure \ $(AM_DISTCHECK_CONFIGURE_FLAGS) \ $(DISTCHECK_CONFIGURE_FLAGS) \ --srcdir=../.. --prefix="$$dc_install_base" \ && $(MAKE) $(AM_MAKEFLAGS) \ && $(MAKE) $(AM_MAKEFLAGS) dvi \ && $(MAKE) $(AM_MAKEFLAGS) check \ && $(MAKE) $(AM_MAKEFLAGS) install \ && $(MAKE) $(AM_MAKEFLAGS) installcheck \ && $(MAKE) $(AM_MAKEFLAGS) uninstall \ && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \ distuninstallcheck \ && chmod -R a-w "$$dc_install_base" \ && ({ \ (cd ../.. && umask 077 && mkdir "$$dc_destdir") \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \ distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \ } || { rm -rf "$$dc_destdir"; exit 1; }) \ && rm -rf "$$dc_destdir" \ && $(MAKE) $(AM_MAKEFLAGS) dist \ && rm -rf $(DIST_ARCHIVES) \ && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \ && cd "$$am__cwd" \ || exit 1 $(am__post_remove_distdir) @(echo "$(distdir) archives ready for distribution: "; \ list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \ sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x' distuninstallcheck: @test -n '$(distuninstallcheck_dir)' || { \ echo 'ERROR: trying to run $@ with an empty' \ '$$(distuninstallcheck_dir)' >&2; \ exit 1; \ }; \ $(am__cd) '$(distuninstallcheck_dir)' || { \ echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \ exit 1; \ }; \ test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \ || { echo "ERROR: files left after uninstall:" ; \ if test -n "$(DESTDIR)"; then \ echo " (check DESTDIR support)"; \ fi ; \ $(distuninstallcheck_listfiles) ; \ exit 1; } >&2 distcleancheck: distclean @if test '$(srcdir)' = . ; then \ echo "ERROR: distcleancheck can only run from a VPATH build" ; \ exit 1 ; \ fi @test `$(distcleancheck_listfiles) | wc -l` -eq 0 \ || { echo "ERROR: files left in build directory after distclean:" ; \ $(distcleancheck_listfiles) ; \ exit 1; } >&2 check-am: all-am $(MAKE) $(AM_MAKEFLAGS) $(check_PROGRAMS) $(check_SCRIPTS) $(MAKE) $(AM_MAKEFLAGS) check-TESTS check: check-am all-am: Makefile $(PROGRAMS) $(LTLIBRARIES) classnoinst.stamp $(DATA) installdirs: for dir in "$(DESTDIR)$(fuzzdir)" "$(DESTDIR)$(libdir)" "$(DESTDIR)$(p11libdir)" "$(DESTDIR)$(p11configdir)" "$(DESTDIR)$(pkgconfigdir)"; do \ test -z "$$dir" || $(MKDIR_P) "$$dir"; \ done install: install-am install-exec: install-exec-am install-data: install-data-am uninstall: uninstall-am install-am: all-am @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am installcheck: installcheck-am install-strip: if test -z '$(STRIP)'; then \ $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ install; \ else \ $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \ fi mostlyclean-generic: -test -z "$(TEST_LOGS)" || rm -f $(TEST_LOGS) -test -z "$(TEST_LOGS:.log=.trs)" || rm -f $(TEST_LOGS:.log=.trs) -test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) clean-generic: -test -z "$(CLEANFILES)" || rm -f $(CLEANFILES) distclean-generic: -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES) -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES) -rm -f src/$(DEPDIR)/$(am__dirstamp) -rm -f src/$(am__dirstamp) -rm -f src/lib/$(DEPDIR)/$(am__dirstamp) -rm -f src/lib/$(am__dirstamp) -rm -f test/fuzz/$(DEPDIR)/$(am__dirstamp) -rm -f test/fuzz/$(am__dirstamp) -rm -f test/integration/$(DEPDIR)/$(am__dirstamp) -rm -f test/integration/$(am__dirstamp) -rm -f test/unit/$(DEPDIR)/$(am__dirstamp) -rm -f test/unit/$(am__dirstamp) -test -z "$(DISTCLEANFILES)" || rm -f $(DISTCLEANFILES) maintainer-clean-generic: @echo "This command is intended for maintainers to use" @echo "it deletes files that may require special tools to rebuild." @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@clean-local: @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@distclean-local: clean: clean-am clean-am: clean-checkPROGRAMS clean-fuzzPROGRAMS clean-generic \ clean-libLTLIBRARIES clean-libtool clean-local \ clean-noinstJAVA clean-noinstLTLIBRARIES \ clean-p11libLTLIBRARIES mostlyclean-am distclean: distclean-am -rm -f $(am__CONFIG_DISTCLEAN_FILES) -rm -f src/$(DEPDIR)/pkcs11.Plo -rm -f src/lib/$(DEPDIR)/attrs.Plo -rm -f src/lib/$(DEPDIR)/backend.Plo -rm -f src/lib/$(DEPDIR)/backend_esysdb.Plo -rm -f src/lib/$(DEPDIR)/backend_fapi.Plo -rm -f src/lib/$(DEPDIR)/db.Plo -rm -f src/lib/$(DEPDIR)/digest.Plo -rm -f src/lib/$(DEPDIR)/emitter.Plo -rm -f src/lib/$(DEPDIR)/encrypt.Plo -rm -f src/lib/$(DEPDIR)/general.Plo -rm -f src/lib/$(DEPDIR)/key.Plo -rm -f src/lib/$(DEPDIR)/mech.Plo -rm -f src/lib/$(DEPDIR)/mutex.Plo -rm -f src/lib/$(DEPDIR)/object.Plo -rm -f src/lib/$(DEPDIR)/parser.Plo -rm -f src/lib/$(DEPDIR)/random.Plo -rm -f src/lib/$(DEPDIR)/session.Plo -rm -f src/lib/$(DEPDIR)/session_ctx.Plo -rm -f src/lib/$(DEPDIR)/session_table.Plo -rm -f src/lib/$(DEPDIR)/sign.Plo -rm -f src/lib/$(DEPDIR)/slot.Plo -rm -f src/lib/$(DEPDIR)/ssl_util.Plo -rm -f src/lib/$(DEPDIR)/token.Plo -rm -f src/lib/$(DEPDIR)/tpm.Plo -rm -f src/lib/$(DEPDIR)/twist.Plo -rm -f src/lib/$(DEPDIR)/typed_memory.Plo -rm -f src/lib/$(DEPDIR)/utils.Plo -rm -f test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po -rm -f test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po -rm -f test/unit/$(DEPDIR)/test_attr-test_attr.Po -rm -f test/unit/$(DEPDIR)/test_db-test_db.Po -rm -f test/unit/$(DEPDIR)/test_log-test_log.Po -rm -f test/unit/$(DEPDIR)/test_parser-test_parser.Po -rm -f test/unit/$(DEPDIR)/test_twist-test_twist.Po -rm -f test/unit/$(DEPDIR)/test_utils-test_utils.Po -rm -f Makefile distclean-am: clean-am distclean-compile distclean-generic \ distclean-hdr distclean-libtool distclean-local distclean-tags dvi: dvi-am dvi-am: html: html-am html-am: info: info-am info-am: install-data-am: install-fuzzPROGRAMS install-p11configDATA \ install-p11libLTLIBRARIES install-pkgconfigDATA install-dvi: install-dvi-am install-dvi-am: install-exec-am: install-libLTLIBRARIES install-html: install-html-am install-html-am: install-info: install-info-am install-info-am: install-man: install-pdf: install-pdf-am install-pdf-am: install-ps: install-ps-am install-ps-am: installcheck-am: maintainer-clean: maintainer-clean-am -rm -f $(am__CONFIG_DISTCLEAN_FILES) -rm -rf $(top_srcdir)/autom4te.cache -rm -f src/$(DEPDIR)/pkcs11.Plo -rm -f src/lib/$(DEPDIR)/attrs.Plo -rm -f src/lib/$(DEPDIR)/backend.Plo -rm -f src/lib/$(DEPDIR)/backend_esysdb.Plo -rm -f src/lib/$(DEPDIR)/backend_fapi.Plo -rm -f src/lib/$(DEPDIR)/db.Plo -rm -f src/lib/$(DEPDIR)/digest.Plo -rm -f src/lib/$(DEPDIR)/emitter.Plo -rm -f src/lib/$(DEPDIR)/encrypt.Plo -rm -f src/lib/$(DEPDIR)/general.Plo -rm -f src/lib/$(DEPDIR)/key.Plo -rm -f src/lib/$(DEPDIR)/mech.Plo -rm -f src/lib/$(DEPDIR)/mutex.Plo -rm -f src/lib/$(DEPDIR)/object.Plo -rm -f src/lib/$(DEPDIR)/parser.Plo -rm -f src/lib/$(DEPDIR)/random.Plo -rm -f src/lib/$(DEPDIR)/session.Plo -rm -f src/lib/$(DEPDIR)/session_ctx.Plo -rm -f src/lib/$(DEPDIR)/session_table.Plo -rm -f src/lib/$(DEPDIR)/sign.Plo -rm -f src/lib/$(DEPDIR)/slot.Plo -rm -f src/lib/$(DEPDIR)/ssl_util.Plo -rm -f src/lib/$(DEPDIR)/token.Plo -rm -f src/lib/$(DEPDIR)/tpm.Plo -rm -f src/lib/$(DEPDIR)/twist.Plo -rm -f src/lib/$(DEPDIR)/typed_memory.Plo -rm -f src/lib/$(DEPDIR)/utils.Plo -rm -f test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po -rm -f test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po -rm -f test/unit/$(DEPDIR)/test_attr-test_attr.Po -rm -f test/unit/$(DEPDIR)/test_db-test_db.Po -rm -f test/unit/$(DEPDIR)/test_log-test_log.Po -rm -f test/unit/$(DEPDIR)/test_parser-test_parser.Po -rm -f test/unit/$(DEPDIR)/test_twist-test_twist.Po -rm -f test/unit/$(DEPDIR)/test_utils-test_utils.Po -rm -f Makefile maintainer-clean-am: distclean-am maintainer-clean-generic mostlyclean: mostlyclean-am mostlyclean-am: mostlyclean-compile mostlyclean-generic \ mostlyclean-libtool pdf: pdf-am pdf-am: ps: ps-am ps-am: uninstall-am: uninstall-fuzzPROGRAMS uninstall-libLTLIBRARIES \ uninstall-p11configDATA uninstall-p11libLTLIBRARIES \ uninstall-pkgconfigDATA .MAKE: check-am install-am install-strip .PHONY: CTAGS GTAGS TAGS all all-am am--depfiles am--refresh check \ check-TESTS check-am clean clean-checkPROGRAMS clean-cscope \ clean-fuzzPROGRAMS clean-generic clean-libLTLIBRARIES \ clean-libtool clean-local clean-noinstJAVA \ clean-noinstLTLIBRARIES clean-p11libLTLIBRARIES cscope \ cscopelist-am ctags ctags-am dist dist-all dist-bzip2 \ dist-gzip dist-lzip dist-shar dist-tarZ dist-xz dist-zip \ distcheck distclean distclean-compile distclean-generic \ distclean-hdr distclean-libtool distclean-local distclean-tags \ distcleancheck distdir distuninstallcheck dvi dvi-am html \ html-am info info-am install install-am install-data \ install-data-am install-dvi install-dvi-am install-exec \ install-exec-am install-fuzzPROGRAMS install-html \ install-html-am install-info install-info-am \ install-libLTLIBRARIES install-man install-p11configDATA \ install-p11libLTLIBRARIES install-pdf install-pdf-am \ install-pkgconfigDATA install-ps install-ps-am install-strip \ installcheck installcheck-am installdirs maintainer-clean \ maintainer-clean-generic mostlyclean mostlyclean-compile \ mostlyclean-generic mostlyclean-libtool pdf pdf-am ps ps-am \ recheck tags tags-am uninstall uninstall-am \ uninstall-fuzzPROGRAMS uninstall-libLTLIBRARIES \ uninstall-p11configDATA uninstall-p11libLTLIBRARIES \ uninstall-pkgconfigDATA .PRECIOUS: Makefile check-programs: $(check_PROGRAMS) # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: $(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on ) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: ) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: ) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on ) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: ) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the $(PACKAGE_NAME) and # $(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ ifeq ($(abs_builddir), $(abs_top_builddir)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_DIRECTORY ?= $(top_builddir) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_OUTPUT_FILE ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_OUTPUT_DIRECTORY ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_BRANCH_COVERAGE ?= @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= $(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc lcov_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_SHOPTS ?= $(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool "$(GCOV)" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= $(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS ?= $(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_RMOPTS ?= $(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=$(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc genhtml_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_GENHTML_OPTIONS ?= $(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_IGNORE_PATTERN ?= # Use recursive makes in order to ignore errors during check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -$(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) -k check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_lcov_cap)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --capture --output-file "$(CODE_COVERAGE_OUTPUT_FILE).tmp" --test-name "$(call code_coverage_sanitize,$(PACKAGE_NAME)-$(PACKAGE_VERSION))" --no-checksum --compat-libtool $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_OPTIONS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_lcov_ign)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --remove "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "/tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN) --output-file "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_RMOPTS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -@rm -f "$(CODE_COVERAGE_OUTPUT_FILE).tmp" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_genhtml)LANG=C $(GENHTML) $(code_coverage_quiet) $(addprefix --prefix ,$(CODE_COVERAGE_DIRECTORY)) --output-directory "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" --title "$(PACKAGE_NAME)-$(PACKAGE_VERSION) Code Coverage" --legend --show-details "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_GENHTML_OPTIONS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ @echo "file://$(abs_builddir)/$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -$(LCOV) --directory $(top_builddir) -z @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -rm -rf "$(CODE_COVERAGE_OUTPUT_FILE)" "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -find . \( -name "*.gcda" -o -name "*.gcno" -o -name "*.gcov" \) -delete @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-dist-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ else # ifneq ($(abs_builddir), $(abs_top_builddir)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-dist-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ endif # ifeq ($(abs_builddir), $(abs_top_builddir)) # Use recursive makes in order to ignore errors during check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@ @echo "Need to reconfigure with --enable-code-coverage" # Capture code coverage data @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@ @echo "Need to reconfigure with --enable-code-coverage" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-dist-clean: # Hook rule executed before code-coverage-capture, overridable by the user @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@code-coverage-capture-hook: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@.PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook # ax_code_coverage @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@clean-local: code-coverage-clean @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@distclean-local: code-coverage-dist-clean @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@@CODE_COVERAGE_RULES@ # Generate the AUTHORS file from git log AUTHORS : $(AM_V_GEN)git log --format='%aN <%aE>' | grep -v 'users.noreply.github.com' | sort | \ uniq -c | sort -nr | sed 's/^\s*//' | cut -d" " -f2- > $@ @HAVE_P11KIT_TRUE@ # Use P11 kit library module install location @HAVE_P11KIT_TRUE@ # Use P11 kit module config file install location @HAVE_P11KIT_FALSE@ # Use standard install location when P11Kit is not found # END INTEGRATION # END UNIT @FUZZING_TRUE@fuzz-targets: $(fuzz_PROGRAMS) # Tell versions [3.59,3.63) of GNU make to not export all variables. # Otherwise a system limit (for SysV at least) may be exceeded. .NOEXPORT: tpm2-pkcs11-1.7.0/compile0000755000175000017500000001632713616550647012026 00000000000000#! /bin/sh # Wrapper for compilers which do not understand '-c -o'. scriptversion=2018-03-07.03; # UTC # Copyright (C) 1999-2018 Free Software Foundation, Inc. # Written by Tom Tromey . # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # This file is maintained in Automake, please report # bugs to or send patches to # . nl=' ' # We need space, tab and new line, in precisely that order. Quoting is # there to prevent tools from complaining about whitespace usage. IFS=" "" $nl" file_conv= # func_file_conv build_file lazy # Convert a $build file to $host form and store it in $file # Currently only supports Windows hosts. If the determined conversion # type is listed in (the comma separated) LAZY, no conversion will # take place. func_file_conv () { file=$1 case $file in / | /[!/]*) # absolute file, and not a UNC file if test -z "$file_conv"; then # lazily determine how to convert abs files case `uname -s` in MINGW*) file_conv=mingw ;; CYGWIN*) file_conv=cygwin ;; *) file_conv=wine ;; esac fi case $file_conv/,$2, in *,$file_conv,*) ;; mingw/*) file=`cmd //C echo "$file " | sed -e 's/"\(.*\) " *$/\1/'` ;; cygwin/*) file=`cygpath -m "$file" || echo "$file"` ;; wine/*) file=`winepath -w "$file" || echo "$file"` ;; esac ;; esac } # func_cl_dashL linkdir # Make cl look for libraries in LINKDIR func_cl_dashL () { func_file_conv "$1" if test -z "$lib_path"; then lib_path=$file else lib_path="$lib_path;$file" fi linker_opts="$linker_opts -LIBPATH:$file" } # func_cl_dashl library # Do a library search-path lookup for cl func_cl_dashl () { lib=$1 found=no save_IFS=$IFS IFS=';' for dir in $lib_path $LIB do IFS=$save_IFS if $shared && test -f "$dir/$lib.dll.lib"; then found=yes lib=$dir/$lib.dll.lib break fi if test -f "$dir/$lib.lib"; then found=yes lib=$dir/$lib.lib break fi if test -f "$dir/lib$lib.a"; then found=yes lib=$dir/lib$lib.a break fi done IFS=$save_IFS if test "$found" != yes; then lib=$lib.lib fi } # func_cl_wrapper cl arg... # Adjust compile command to suit cl func_cl_wrapper () { # Assume a capable shell lib_path= shared=: linker_opts= for arg do if test -n "$eat"; then eat= else case $1 in -o) # configure might choose to run compile as 'compile cc -o foo foo.c'. eat=1 case $2 in *.o | *.[oO][bB][jJ]) func_file_conv "$2" set x "$@" -Fo"$file" shift ;; *) func_file_conv "$2" set x "$@" -Fe"$file" shift ;; esac ;; -I) eat=1 func_file_conv "$2" mingw set x "$@" -I"$file" shift ;; -I*) func_file_conv "${1#-I}" mingw set x "$@" -I"$file" shift ;; -l) eat=1 func_cl_dashl "$2" set x "$@" "$lib" shift ;; -l*) func_cl_dashl "${1#-l}" set x "$@" "$lib" shift ;; -L) eat=1 func_cl_dashL "$2" ;; -L*) func_cl_dashL "${1#-L}" ;; -static) shared=false ;; -Wl,*) arg=${1#-Wl,} save_ifs="$IFS"; IFS=',' for flag in $arg; do IFS="$save_ifs" linker_opts="$linker_opts $flag" done IFS="$save_ifs" ;; -Xlinker) eat=1 linker_opts="$linker_opts $2" ;; -*) set x "$@" "$1" shift ;; *.cc | *.CC | *.cxx | *.CXX | *.[cC]++) func_file_conv "$1" set x "$@" -Tp"$file" shift ;; *.c | *.cpp | *.CPP | *.lib | *.LIB | *.Lib | *.OBJ | *.obj | *.[oO]) func_file_conv "$1" mingw set x "$@" "$file" shift ;; *) set x "$@" "$1" shift ;; esac fi shift done if test -n "$linker_opts"; then linker_opts="-link$linker_opts" fi exec "$@" $linker_opts exit 1 } eat= case $1 in '') echo "$0: No command. Try '$0 --help' for more information." 1>&2 exit 1; ;; -h | --h*) cat <<\EOF Usage: compile [--help] [--version] PROGRAM [ARGS] Wrapper for compilers which do not understand '-c -o'. Remove '-o dest.o' from ARGS, run PROGRAM with the remaining arguments, and rename the output as expected. If you are trying to build a whole package this is not the right script to run: please start by reading the file 'INSTALL'. Report bugs to . EOF exit $? ;; -v | --v*) echo "compile $scriptversion" exit $? ;; cl | *[/\\]cl | cl.exe | *[/\\]cl.exe | \ icl | *[/\\]icl | icl.exe | *[/\\]icl.exe ) func_cl_wrapper "$@" # Doesn't return... ;; esac ofile= cfile= for arg do if test -n "$eat"; then eat= else case $1 in -o) # configure might choose to run compile as 'compile cc -o foo foo.c'. # So we strip '-o arg' only if arg is an object. eat=1 case $2 in *.o | *.obj) ofile=$2 ;; *) set x "$@" -o "$2" shift ;; esac ;; *.c) cfile=$1 set x "$@" "$1" shift ;; *) set x "$@" "$1" shift ;; esac fi shift done if test -z "$ofile" || test -z "$cfile"; then # If no '-o' option was seen then we might have been invoked from a # pattern rule where we don't need one. That is ok -- this is a # normal compilation that the losing compiler can handle. If no # '.c' file was seen then we are probably linking. That is also # ok. exec "$@" fi # Name of file we expect compiler to create. cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'` # Create the lock directory. # Note: use '[/\\:.-]' here to ensure that we don't use the same name # that we are using for the .o file. Also, base the name on the expected # object file name, since that is what matters with a parallel build. lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d while true; do if mkdir "$lockdir" >/dev/null 2>&1; then break fi sleep 1 done # FIXME: race condition here if user kills between mkdir and trap. trap "rmdir '$lockdir'; exit 1" 1 2 15 # Run the compile. "$@" ret=$? if test -f "$cofile"; then test "$cofile" = "$ofile" || mv "$cofile" "$ofile" elif test -f "${cofile}bj"; then test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile" fi rmdir "$lockdir" exit $ret # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.7.0/ltmain.sh0000644000175000017500000117716713627151556012301 00000000000000#! /bin/sh ## DO NOT EDIT - This file generated from ./build-aux/ltmain.in ## by inline-source v2014-01-03.01 # libtool (GNU libtool) 2.4.6 # Provide generalized library-building support services. # Written by Gordon Matzigkeit , 1996 # Copyright (C) 1996-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, # if you distribute this file as part of a program or library that # is built using GNU Libtool, you may include this file under the # same distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . PROGRAM=libtool PACKAGE=libtool VERSION="2.4.6 Debian-2.4.6-14" package_revision=2.4.6 ## ------ ## ## Usage. ## ## ------ ## # Run './libtool --help' for help with using this script from the # command line. ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # After configure completes, it has a better idea of some of the # shell tools we need than the defaults used by the functions shared # with bootstrap, so set those here where they can still be over- # ridden by the user, but otherwise take precedence. : ${AUTOCONF="autoconf"} : ${AUTOMAKE="automake"} ## -------------------------- ## ## Source external libraries. ## ## -------------------------- ## # Much of our low-level functionality needs to be sourced from external # libraries, which are installed to $pkgauxdir. # Set a version string for this script. scriptversion=2015-01-20.17; # UTC # General shell script boiler plate, and helper functions. # Written by Gary V. Vaughan, 2004 # Copyright (C) 2004-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # As a special exception to the GNU General Public License, if you distribute # this file as part of a program or library that is built using GNU Libtool, # you may include this file under the same distribution terms that you use # for the rest of that program. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNES FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # Please report bugs or propose patches to gary@gnu.org. ## ------ ## ## Usage. ## ## ------ ## # Evaluate this file near the top of your script to gain access to # the functions and variables defined here: # # . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh # # If you need to override any of the default environment variable # settings, do that before evaluating this file. ## -------------------- ## ## Shell normalisation. ## ## -------------------- ## # Some shells need a little help to be as Bourne compatible as possible. # Before doing anything else, make sure all that help has been provided! DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac fi # NLS nuisances: We save the old values in case they are required later. _G_user_locale= _G_safe_locale= for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test set = \"\${$_G_var+set}\"; then save_$_G_var=\$$_G_var $_G_var=C export $_G_var _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\" _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\" fi" done # CDPATH. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH # Make sure IFS has a sensible default sp=' ' nl=' ' IFS="$sp $nl" # There are apparently some retarded systems that use ';' as a PATH separator! if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi ## ------------------------- ## ## Locate command utilities. ## ## ------------------------- ## # func_executable_p FILE # ---------------------- # Check that FILE is an executable regular file. func_executable_p () { test -f "$1" && test -x "$1" } # func_path_progs PROGS_LIST CHECK_FUNC [PATH] # -------------------------------------------- # Search for either a program that responds to --version with output # containing "GNU", or else returned by CHECK_FUNC otherwise, by # trying all the directories in PATH with each of the elements of # PROGS_LIST. # # CHECK_FUNC should accept the path to a candidate program, and # set $func_check_prog_result if it truncates its output less than # $_G_path_prog_max characters. func_path_progs () { _G_progs_list=$1 _G_check_func=$2 _G_PATH=${3-"$PATH"} _G_path_prog_max=0 _G_path_prog_found=false _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:} for _G_dir in $_G_PATH; do IFS=$_G_save_IFS test -z "$_G_dir" && _G_dir=. for _G_prog_name in $_G_progs_list; do for _exeext in '' .EXE; do _G_path_prog=$_G_dir/$_G_prog_name$_exeext func_executable_p "$_G_path_prog" || continue case `"$_G_path_prog" --version 2>&1` in *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;; *) $_G_check_func $_G_path_prog func_path_progs_result=$func_check_prog_result ;; esac $_G_path_prog_found && break 3 done done done IFS=$_G_save_IFS test -z "$func_path_progs_result" && { echo "no acceptable sed could be found in \$PATH" >&2 exit 1 } } # We want to be able to use the functions in this file before configure # has figured out where the best binaries are kept, which means we have # to search for them ourselves - except when the results are already set # where we skip the searches. # Unless the user overrides by setting SED, search the path for either GNU # sed, or the sed that truncates its output the least. test -z "$SED" && { _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/ for _G_i in 1 2 3 4 5 6 7; do _G_sed_script=$_G_sed_script$nl$_G_sed_script done echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed _G_sed_script= func_check_prog_sed () { _G_path_prog=$1 _G_count=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo '' >> conftest.nl "$_G_path_prog" -f conftest.sed conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "sed gsed" func_check_prog_sed $PATH:/usr/xpg4/bin rm -f conftest.sed SED=$func_path_progs_result } # Unless the user overrides by setting GREP, search the path for either GNU # grep, or the grep that truncates its output the least. test -z "$GREP" && { func_check_prog_grep () { _G_path_prog=$1 _G_count=0 _G_path_prog_max=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo 'GREP' >> conftest.nl "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "grep ggrep" func_check_prog_grep $PATH:/usr/xpg4/bin GREP=$func_path_progs_result } ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # All uppercase variable names are used for environment variables. These # variables can be overridden by the user before calling a script that # uses them if a suitable command of that name is not already available # in the command search PATH. : ${CP="cp -f"} : ${ECHO="printf %s\n"} : ${EGREP="$GREP -E"} : ${FGREP="$GREP -F"} : ${LN_S="ln -s"} : ${MAKE="make"} : ${MKDIR="mkdir"} : ${MV="mv -f"} : ${RM="rm -f"} : ${SHELL="${CONFIG_SHELL-/bin/sh}"} ## -------------------- ## ## Useful sed snippets. ## ## -------------------- ## sed_dirname='s|/[^/]*$||' sed_basename='s|^.*/||' # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='s|\([`"$\\]\)|\\\1|g' # Same as above, but do not quote variable references. sed_double_quote_subst='s/\(["`\\]\)/\\\1/g' # Sed substitution that turns a string into a regex matching for the # string literally. sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g' # Sed substitution that converts a w32 file name or path # that contains forward slashes, into one that contains # (escaped) backslashes. A very naive implementation. sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g' # Re-'\' parameter expansions in output of sed_double_quote_subst that # were '\'-ed in input to the same. If an odd number of '\' preceded a # '$' in input to sed_double_quote_subst, that '$' was protected from # expansion. Since each input '\' is now two '\'s, look for any number # of runs of four '\'s followed by two '\'s and then a '$'. '\' that '$'. _G_bs='\\' _G_bs2='\\\\' _G_bs4='\\\\\\\\' _G_dollar='\$' sed_double_backslash="\ s/$_G_bs4/&\\ /g s/^$_G_bs2$_G_dollar/$_G_bs&/ s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g s/\n//g" ## ----------------- ## ## Global variables. ## ## ----------------- ## # Except for the global variables explicitly listed below, the following # functions in the '^func_' namespace, and the '^require_' namespace # variables initialised in the 'Resource management' section, sourcing # this file will not pollute your global namespace with anything # else. There's no portable way to scope variables in Bourne shell # though, so actually running these functions will sometimes place # results into a variable named after the function, and often use # temporary variables in the '^_G_' namespace. If you are careful to # avoid using those namespaces casually in your sourcing script, things # should continue to work as you expect. And, of course, you can freely # overwrite any of the functions or variables defined here before # calling anything to customize them. EXIT_SUCCESS=0 EXIT_FAILURE=1 EXIT_MISMATCH=63 # $? = 63 is used to indicate version mismatch to missing. EXIT_SKIP=77 # $? = 77 is used to indicate a skipped test to automake. # Allow overriding, eg assuming that you follow the convention of # putting '$debug_cmd' at the start of all your functions, you can get # bash to show function call trace with: # # debug_cmd='echo "${FUNCNAME[0]} $*" >&2' bash your-script-name debug_cmd=${debug_cmd-":"} exit_cmd=: # By convention, finish your script with: # # exit $exit_status # # so that you can set exit_status to non-zero if you want to indicate # something went wrong during execution without actually bailing out at # the point of failure. exit_status=$EXIT_SUCCESS # Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh # is ksh but when the shell is invoked as "sh" and the current value of # the _XPG environment variable is not equal to 1 (one), the special # positional parameter $0, within a function call, is the name of the # function. progpath=$0 # The name of this program. progname=`$ECHO "$progpath" |$SED "$sed_basename"` # Make sure we have an absolute progpath for reexecution: case $progpath in [\\/]*|[A-Za-z]:\\*) ;; *[\\/]*) progdir=`$ECHO "$progpath" |$SED "$sed_dirname"` progdir=`cd "$progdir" && pwd` progpath=$progdir/$progname ;; *) _G_IFS=$IFS IFS=${PATH_SEPARATOR-:} for progdir in $PATH; do IFS=$_G_IFS test -x "$progdir/$progname" && break done IFS=$_G_IFS test -n "$progdir" || progdir=`pwd` progpath=$progdir/$progname ;; esac ## ----------------- ## ## Standard options. ## ## ----------------- ## # The following options affect the operation of the functions defined # below, and should be set appropriately depending on run-time para- # meters passed on the command line. opt_dry_run=false opt_quiet=false opt_verbose=false # Categories 'all' and 'none' are always available. Append any others # you will pass as the first argument to func_warning from your own # code. warning_categories= # By default, display warnings according to 'opt_warning_types'. Set # 'warning_func' to ':' to elide all warnings, or func_fatal_error to # treat the next displayed warning as a fatal error. warning_func=func_warn_and_continue # Set to 'all' to display all warnings, 'none' to suppress all # warnings, or a space delimited list of some subset of # 'warning_categories' to display only the listed warnings. opt_warning_types=all ## -------------------- ## ## Resource management. ## ## -------------------- ## # This section contains definitions for functions that each ensure a # particular resource (a file, or a non-empty configuration variable for # example) is available, and if appropriate to extract default values # from pertinent package files. Call them using their associated # 'require_*' variable to ensure that they are executed, at most, once. # # It's entirely deliberate that calling these functions can set # variables that don't obey the namespace limitations obeyed by the rest # of this file, in order that that they be as useful as possible to # callers. # require_term_colors # ------------------- # Allow display of bold text on terminals that support it. require_term_colors=func_require_term_colors func_require_term_colors () { $debug_cmd test -t 1 && { # COLORTERM and USE_ANSI_COLORS environment variables take # precedence, because most terminfo databases neglect to describe # whether color sequences are supported. test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"} if test 1 = "$USE_ANSI_COLORS"; then # Standard ANSI escape sequences tc_reset='' tc_bold=''; tc_standout='' tc_red=''; tc_green='' tc_blue=''; tc_cyan='' else # Otherwise trust the terminfo database after all. test -n "`tput sgr0 2>/dev/null`" && { tc_reset=`tput sgr0` test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold` tc_standout=$tc_bold test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso` test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1` test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2` test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4` test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5` } fi } require_term_colors=: } ## ----------------- ## ## Function library. ## ## ----------------- ## # This section contains a variety of useful functions to call in your # scripts. Take note of the portable wrappers for features provided by # some modern shells, which will fall back to slower equivalents on # less featureful shells. # func_append VAR VALUE # --------------------- # Append VALUE onto the existing contents of VAR. # We should try to minimise forks, especially on Windows where they are # unreasonably slow, so skip the feature probes when bash or zsh are # being used: if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then : ${_G_HAVE_ARITH_OP="yes"} : ${_G_HAVE_XSI_OPS="yes"} # The += operator was introduced in bash 3.1 case $BASH_VERSION in [12].* | 3.0 | 3.0*) ;; *) : ${_G_HAVE_PLUSEQ_OP="yes"} ;; esac fi # _G_HAVE_PLUSEQ_OP # Can be empty, in which case the shell is probed, "yes" if += is # useable or anything else if it does not work. test -z "$_G_HAVE_PLUSEQ_OP" \ && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \ && _G_HAVE_PLUSEQ_OP=yes if test yes = "$_G_HAVE_PLUSEQ_OP" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_append () { $debug_cmd eval "$1+=\$2" }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_append () { $debug_cmd eval "$1=\$$1\$2" } fi # func_append_quoted VAR VALUE # ---------------------------- # Quote VALUE and append to the end of shell variable VAR, separated # by a space. if test yes = "$_G_HAVE_PLUSEQ_OP"; then eval 'func_append_quoted () { $debug_cmd func_quote_for_eval "$2" eval "$1+=\\ \$func_quote_for_eval_result" }' else func_append_quoted () { $debug_cmd func_quote_for_eval "$2" eval "$1=\$$1\\ \$func_quote_for_eval_result" } fi # func_append_uniq VAR VALUE # -------------------------- # Append unique VALUE onto the existing contents of VAR, assuming # entries are delimited by the first character of VALUE. For example: # # func_append_uniq options " --another-option option-argument" # # will only append to $options if " --another-option option-argument " # is not already present somewhere in $options already (note spaces at # each end implied by leading space in second argument). func_append_uniq () { $debug_cmd eval _G_current_value='`$ECHO $'$1'`' _G_delim=`expr "$2" : '\(.\)'` case $_G_delim$_G_current_value$_G_delim in *"$2$_G_delim"*) ;; *) func_append "$@" ;; esac } # func_arith TERM... # ------------------ # Set func_arith_result to the result of evaluating TERMs. test -z "$_G_HAVE_ARITH_OP" \ && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \ && _G_HAVE_ARITH_OP=yes if test yes = "$_G_HAVE_ARITH_OP"; then eval 'func_arith () { $debug_cmd func_arith_result=$(( $* )) }' else func_arith () { $debug_cmd func_arith_result=`expr "$@"` } fi # func_basename FILE # ------------------ # Set func_basename_result to FILE with everything up to and including # the last / stripped. if test yes = "$_G_HAVE_XSI_OPS"; then # If this shell supports suffix pattern removal, then use it to avoid # forking. Hide the definitions single quotes in case the shell chokes # on unsupported syntax... _b='func_basename_result=${1##*/}' _d='case $1 in */*) func_dirname_result=${1%/*}$2 ;; * ) func_dirname_result=$3 ;; esac' else # ...otherwise fall back to using sed. _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`' _d='func_dirname_result=`$ECHO "$1" |$SED "$sed_dirname"` if test "X$func_dirname_result" = "X$1"; then func_dirname_result=$3 else func_append func_dirname_result "$2" fi' fi eval 'func_basename () { $debug_cmd '"$_b"' }' # func_dirname FILE APPEND NONDIR_REPLACEMENT # ------------------------------------------- # Compute the dirname of FILE. If nonempty, add APPEND to the result, # otherwise set result to NONDIR_REPLACEMENT. eval 'func_dirname () { $debug_cmd '"$_d"' }' # func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT # -------------------------------------------------------- # Perform func_basename and func_dirname in a single function # call: # dirname: Compute the dirname of FILE. If nonempty, # add APPEND to the result, otherwise set result # to NONDIR_REPLACEMENT. # value returned in "$func_dirname_result" # basename: Compute filename of FILE. # value retuned in "$func_basename_result" # For efficiency, we do not delegate to the functions above but instead # duplicate the functionality here. eval 'func_dirname_and_basename () { $debug_cmd '"$_b"' '"$_d"' }' # func_echo ARG... # ---------------- # Echo program name prefixed message. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname: $_G_line" done IFS=$func_echo_IFS } # func_echo_all ARG... # -------------------- # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "$*" } # func_echo_infix_1 INFIX ARG... # ------------------------------ # Echo program name, followed by INFIX on the first line, with any # additional lines not showing INFIX. func_echo_infix_1 () { $debug_cmd $require_term_colors _G_infix=$1; shift _G_indent=$_G_infix _G_prefix="$progname: $_G_infix: " _G_message=$* # Strip color escape sequences before counting printable length for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan" do test -n "$_G_tc" && { _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"` _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"` } done _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`" " ## exclude from sc_prohibit_nested_quotes func_echo_infix_1_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_infix_1_IFS $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2 _G_prefix=$_G_indent done IFS=$func_echo_infix_1_IFS } # func_error ARG... # ----------------- # Echo program name prefixed message to standard error. func_error () { $debug_cmd $require_term_colors func_echo_infix_1 " $tc_standout${tc_red}error$tc_reset" "$*" >&2 } # func_fatal_error ARG... # ----------------------- # Echo program name prefixed message to standard error, and exit. func_fatal_error () { $debug_cmd func_error "$*" exit $EXIT_FAILURE } # func_grep EXPRESSION FILENAME # ----------------------------- # Check whether EXPRESSION matches any line of FILENAME, without output. func_grep () { $debug_cmd $GREP "$1" "$2" >/dev/null 2>&1 } # func_len STRING # --------------- # Set func_len_result to the length of STRING. STRING may not # start with a hyphen. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_len () { $debug_cmd func_len_result=${#1} }' else func_len () { $debug_cmd func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len` } fi # func_mkdir_p DIRECTORY-PATH # --------------------------- # Make sure the entire path to DIRECTORY-PATH is available. func_mkdir_p () { $debug_cmd _G_directory_path=$1 _G_dir_list= if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then # Protect directory names starting with '-' case $_G_directory_path in -*) _G_directory_path=./$_G_directory_path ;; esac # While some portion of DIR does not yet exist... while test ! -d "$_G_directory_path"; do # ...make a list in topmost first order. Use a colon delimited # list incase some portion of path contains whitespace. _G_dir_list=$_G_directory_path:$_G_dir_list # If the last portion added has no slash in it, the list is done case $_G_directory_path in */*) ;; *) break ;; esac # ...otherwise throw away the child directory and loop _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"` done _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'` func_mkdir_p_IFS=$IFS; IFS=: for _G_dir in $_G_dir_list; do IFS=$func_mkdir_p_IFS # mkdir can fail with a 'File exist' error if two processes # try to create one of the directories concurrently. Don't # stop in that case! $MKDIR "$_G_dir" 2>/dev/null || : done IFS=$func_mkdir_p_IFS # Bail out if we (or some other process) failed to create a directory. test -d "$_G_directory_path" || \ func_fatal_error "Failed to create '$1'" fi } # func_mktempdir [BASENAME] # ------------------------- # Make a temporary directory that won't clash with other running # libtool processes, and avoids race conditions if possible. If # given, BASENAME is the basename for that directory. func_mktempdir () { $debug_cmd _G_template=${TMPDIR-/tmp}/${1-$progname} if test : = "$opt_dry_run"; then # Return a directory name, but don't create it in dry-run mode _G_tmpdir=$_G_template-$$ else # If mktemp works, use that first and foremost _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null` if test ! -d "$_G_tmpdir"; then # Failing that, at least try and use $RANDOM to avoid a race _G_tmpdir=$_G_template-${RANDOM-0}$$ func_mktempdir_umask=`umask` umask 0077 $MKDIR "$_G_tmpdir" umask $func_mktempdir_umask fi # If we're not in dry-run mode, bomb out on failure test -d "$_G_tmpdir" || \ func_fatal_error "cannot create temporary directory '$_G_tmpdir'" fi $ECHO "$_G_tmpdir" } # func_normal_abspath PATH # ------------------------ # Remove doubled-up and trailing slashes, "." path components, # and cancel out any ".." path components in PATH after making # it an absolute path. func_normal_abspath () { $debug_cmd # These SED scripts presuppose an absolute path with a trailing slash. _G_pathcar='s|^/\([^/]*\).*$|\1|' _G_pathcdr='s|^/[^/]*||' _G_removedotparts=':dotsl s|/\./|/|g t dotsl s|/\.$|/|' _G_collapseslashes='s|/\{1,\}|/|g' _G_finalslash='s|/*$|/|' # Start from root dir and reassemble the path. func_normal_abspath_result= func_normal_abspath_tpath=$1 func_normal_abspath_altnamespace= case $func_normal_abspath_tpath in "") # Empty path, that just means $cwd. func_stripname '' '/' "`pwd`" func_normal_abspath_result=$func_stripname_result return ;; # The next three entries are used to spot a run of precisely # two leading slashes without using negated character classes; # we take advantage of case's first-match behaviour. ///*) # Unusual form of absolute path, do nothing. ;; //*) # Not necessarily an ordinary path; POSIX reserves leading '//' # and for example Cygwin uses it to access remote file shares # over CIFS/SMB, so we conserve a leading double slash if found. func_normal_abspath_altnamespace=/ ;; /*) # Absolute path, do nothing. ;; *) # Relative path, prepend $cwd. func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath ;; esac # Cancel out all the simple stuff to save iterations. We also want # the path to end with a slash for ease of parsing, so make sure # there is one (and only one) here. func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"` while :; do # Processed it all yet? if test / = "$func_normal_abspath_tpath"; then # If we ascended to the root using ".." the result may be empty now. if test -z "$func_normal_abspath_result"; then func_normal_abspath_result=/ fi break fi func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcar"` func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcdr"` # Figure out what to do with it case $func_normal_abspath_tcomponent in "") # Trailing empty path component, ignore it. ;; ..) # Parent dir; strip last assembled component from result. func_dirname "$func_normal_abspath_result" func_normal_abspath_result=$func_dirname_result ;; *) # Actual path component, append it. func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent" ;; esac done # Restore leading double-slash if one was found on entry. func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result } # func_notquiet ARG... # -------------------- # Echo program name prefixed message only when not in quiet mode. func_notquiet () { $debug_cmd $opt_quiet || func_echo ${1+"$@"} # A bug in bash halts the script if the last line of a function # fails when set -e is in force, so we need another command to # work around that: : } # func_relative_path SRCDIR DSTDIR # -------------------------------- # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. func_relative_path () { $debug_cmd func_relative_path_result= func_normal_abspath "$1" func_relative_path_tlibdir=$func_normal_abspath_result func_normal_abspath "$2" func_relative_path_tbindir=$func_normal_abspath_result # Ascend the tree starting from libdir while :; do # check if we have found a prefix of bindir case $func_relative_path_tbindir in $func_relative_path_tlibdir) # found an exact match func_relative_path_tcancelled= break ;; $func_relative_path_tlibdir*) # found a matching prefix func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir" func_relative_path_tcancelled=$func_stripname_result if test -z "$func_relative_path_result"; then func_relative_path_result=. fi break ;; *) func_dirname $func_relative_path_tlibdir func_relative_path_tlibdir=$func_dirname_result if test -z "$func_relative_path_tlibdir"; then # Have to descend all the way to the root! func_relative_path_result=../$func_relative_path_result func_relative_path_tcancelled=$func_relative_path_tbindir break fi func_relative_path_result=../$func_relative_path_result ;; esac done # Now calculate path; take care to avoid doubling-up slashes. func_stripname '' '/' "$func_relative_path_result" func_relative_path_result=$func_stripname_result func_stripname '/' '/' "$func_relative_path_tcancelled" if test -n "$func_stripname_result"; then func_append func_relative_path_result "/$func_stripname_result" fi # Normalisation. If bindir is libdir, return '.' else relative path. if test -n "$func_relative_path_result"; then func_stripname './' '' "$func_relative_path_result" func_relative_path_result=$func_stripname_result fi test -n "$func_relative_path_result" || func_relative_path_result=. : } # func_quote_for_eval ARG... # -------------------------- # Aesthetically quote ARGs to be evaled later. # This function returns two values: # i) func_quote_for_eval_result # double-quoted, suitable for a subsequent eval # ii) func_quote_for_eval_unquoted_result # has all characters that are still active within double # quotes backslashified. func_quote_for_eval () { $debug_cmd func_quote_for_eval_unquoted_result= func_quote_for_eval_result= while test 0 -lt $#; do case $1 in *[\\\`\"\$]*) _G_unquoted_arg=`printf '%s\n' "$1" |$SED "$sed_quote_subst"` ;; *) _G_unquoted_arg=$1 ;; esac if test -n "$func_quote_for_eval_unquoted_result"; then func_append func_quote_for_eval_unquoted_result " $_G_unquoted_arg" else func_append func_quote_for_eval_unquoted_result "$_G_unquoted_arg" fi case $_G_unquoted_arg in # Double-quote args containing shell metacharacters to delay # word splitting, command substitution and variable expansion # for a subsequent eval. # Many Bourne shells cannot handle close brackets correctly # in scan sets, so we specify it separately. *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \ ]*|*]*|"") _G_quoted_arg=\"$_G_unquoted_arg\" ;; *) _G_quoted_arg=$_G_unquoted_arg ;; esac if test -n "$func_quote_for_eval_result"; then func_append func_quote_for_eval_result " $_G_quoted_arg" else func_append func_quote_for_eval_result "$_G_quoted_arg" fi shift done } # func_quote_for_expand ARG # ------------------------- # Aesthetically quote ARG to be evaled later; same as above, # but do not quote variable references. func_quote_for_expand () { $debug_cmd case $1 in *[\\\`\"]*) _G_arg=`$ECHO "$1" | $SED \ -e "$sed_double_quote_subst" -e "$sed_double_backslash"` ;; *) _G_arg=$1 ;; esac case $_G_arg in # Double-quote args containing shell metacharacters to delay # word splitting and command substitution for a subsequent eval. # Many Bourne shells cannot handle close brackets correctly # in scan sets, so we specify it separately. *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \ ]*|*]*|"") _G_arg=\"$_G_arg\" ;; esac func_quote_for_expand_result=$_G_arg } # func_stripname PREFIX SUFFIX NAME # --------------------------------- # strip PREFIX and SUFFIX from NAME, and store in func_stripname_result. # PREFIX and SUFFIX must not contain globbing or regex special # characters, hashes, percent signs, but SUFFIX may contain a leading # dot (in which case that matches only a dot). if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_stripname () { $debug_cmd # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are # positional parameters, so assign one to ordinary variable first. func_stripname_result=$3 func_stripname_result=${func_stripname_result#"$1"} func_stripname_result=${func_stripname_result%"$2"} }' else func_stripname () { $debug_cmd case $2 in .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;; *) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;; esac } fi # func_show_eval CMD [FAIL_EXP] # ----------------------------- # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. func_show_eval () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} func_quote_for_expand "$_G_cmd" eval "func_notquiet $func_quote_for_expand_result" $opt_dry_run || { eval "$_G_cmd" _G_status=$? if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_show_eval_locale CMD [FAIL_EXP] # ------------------------------------ # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. Use the saved locale for evaluation. func_show_eval_locale () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} $opt_quiet || { func_quote_for_expand "$_G_cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || { eval "$_G_user_locale $_G_cmd" _G_status=$? eval "$_G_safe_locale" if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_tr_sh # ---------- # Turn $1 into a string suitable for a shell variable name. # Result is stored in $func_tr_sh_result. All characters # not in the set a-zA-Z0-9_ are replaced with '_'. Further, # if $1 begins with a digit, a '_' is prepended as well. func_tr_sh () { $debug_cmd case $1 in [0-9]* | *[!a-zA-Z0-9_]*) func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'` ;; * ) func_tr_sh_result=$1 ;; esac } # func_verbose ARG... # ------------------- # Echo program name prefixed message in verbose mode only. func_verbose () { $debug_cmd $opt_verbose && func_echo "$*" : } # func_warn_and_continue ARG... # ----------------------------- # Echo program name prefixed warning message to standard error. func_warn_and_continue () { $debug_cmd $require_term_colors func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2 } # func_warning CATEGORY ARG... # ---------------------------- # Echo program name prefixed warning message to standard error. Warning # messages can be filtered according to CATEGORY, where this function # elides messages where CATEGORY is not listed in the global variable # 'opt_warning_types'. func_warning () { $debug_cmd # CATEGORY must be in the warning_categories list! case " $warning_categories " in *" $1 "*) ;; *) func_internal_error "invalid warning category '$1'" ;; esac _G_category=$1 shift case " $opt_warning_types " in *" $_G_category "*) $warning_func ${1+"$@"} ;; esac } # func_sort_ver VER1 VER2 # ----------------------- # 'sort -V' is not generally available. # Note this deviates from the version comparison in automake # in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a # but this should suffice as we won't be specifying old # version formats or redundant trailing .0 in bootstrap.conf. # If we did want full compatibility then we should probably # use m4_version_compare from autoconf. func_sort_ver () { $debug_cmd printf '%s\n%s\n' "$1" "$2" \ | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n } # func_lt_ver PREV CURR # --------------------- # Return true if PREV and CURR are in the correct order according to # func_sort_ver, otherwise false. Use it like this: # # func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..." func_lt_ver () { $debug_cmd test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q` } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: #! /bin/sh # Set a version string for this script. scriptversion=2015-10-07.11; # UTC # A portable, pluggable option parser for Bourne shell. # Written by Gary V. Vaughan, 2010 # Copyright (C) 2010-2015 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # Please report bugs or propose patches to gary@gnu.org. ## ------ ## ## Usage. ## ## ------ ## # This file is a library for parsing options in your shell scripts along # with assorted other useful supporting features that you can make use # of too. # # For the simplest scripts you might need only: # # #!/bin/sh # . relative/path/to/funclib.sh # . relative/path/to/options-parser # scriptversion=1.0 # func_options ${1+"$@"} # eval set dummy "$func_options_result"; shift # ...rest of your script... # # In order for the '--version' option to work, you will need to have a # suitably formatted comment like the one at the top of this file # starting with '# Written by ' and ending with '# warranty; '. # # For '-h' and '--help' to work, you will also need a one line # description of your script's purpose in a comment directly above the # '# Written by ' line, like the one at the top of this file. # # The default options also support '--debug', which will turn on shell # execution tracing (see the comment above debug_cmd below for another # use), and '--verbose' and the func_verbose function to allow your script # to display verbose messages only when your user has specified # '--verbose'. # # After sourcing this file, you can plug processing for additional # options by amending the variables from the 'Configuration' section # below, and following the instructions in the 'Option parsing' # section further down. ## -------------- ## ## Configuration. ## ## -------------- ## # You should override these variables in your script after sourcing this # file so that they reflect the customisations you have added to the # option parser. # The usage line for option parsing errors and the start of '-h' and # '--help' output messages. You can embed shell variables for delayed # expansion at the time the message is displayed, but you will need to # quote other shell meta-characters carefully to prevent them being # expanded when the contents are evaled. usage='$progpath [OPTION]...' # Short help message in response to '-h' and '--help'. Add to this or # override it after sourcing this library to reflect the full set of # options your script accepts. usage_message="\ --debug enable verbose shell tracing -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -v, --verbose verbosely report processing --version print version information and exit -h, --help print short or long help message and exit " # Additional text appended to 'usage_message' in response to '--help'. long_help_message=" Warning categories include: 'all' show all warnings 'none' turn off all the warnings 'error' warnings are treated as fatal errors" # Help message printed before fatal option parsing errors. fatal_help="Try '\$progname --help' for more information." ## ------------------------- ## ## Hook function management. ## ## ------------------------- ## # This section contains functions for adding, removing, and running hooks # to the main code. A hook is just a named list of of function, that can # be run in order later on. # func_hookable FUNC_NAME # ----------------------- # Declare that FUNC_NAME will run hooks added with # 'func_add_hook FUNC_NAME ...'. func_hookable () { $debug_cmd func_append hookable_fns " $1" } # func_add_hook FUNC_NAME HOOK_FUNC # --------------------------------- # Request that FUNC_NAME call HOOK_FUNC before it returns. FUNC_NAME must # first have been declared "hookable" by a call to 'func_hookable'. func_add_hook () { $debug_cmd case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not accept hook functions." ;; esac eval func_append ${1}_hooks '" $2"' } # func_remove_hook FUNC_NAME HOOK_FUNC # ------------------------------------ # Remove HOOK_FUNC from the list of functions called by FUNC_NAME. func_remove_hook () { $debug_cmd eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`' } # func_run_hooks FUNC_NAME [ARG]... # --------------------------------- # Run all hook functions registered to FUNC_NAME. # It is assumed that the list of hook functions contains nothing more # than a whitespace-delimited list of legal shell function names, and # no effort is wasted trying to catch shell meta-characters or preserve # whitespace. func_run_hooks () { $debug_cmd _G_rc_run_hooks=false case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not support hook funcions.n" ;; esac eval _G_hook_fns=\$$1_hooks; shift for _G_hook in $_G_hook_fns; do if eval $_G_hook '"$@"'; then # store returned options list back into positional # parameters for next 'cmd' execution. eval _G_hook_result=\$${_G_hook}_result eval set dummy "$_G_hook_result"; shift _G_rc_run_hooks=: fi done $_G_rc_run_hooks && func_run_hooks_result=$_G_hook_result } ## --------------- ## ## Option parsing. ## ## --------------- ## # In order to add your own option parsing hooks, you must accept the # full positional parameter list in your hook function, you may remove/edit # any options that you action, and then pass back the remaining unprocessed # options in '_result', escaped suitably for # 'eval'. In this case you also must return $EXIT_SUCCESS to let the # hook's caller know that it should pay attention to # '_result'. Returning $EXIT_FAILURE signalizes that # arguments are left untouched by the hook and therefore caller will ignore the # result variable. # # Like this: # # my_options_prep () # { # $debug_cmd # # # Extend the existing usage message. # usage_message=$usage_message' # -s, --silent don'\''t print informational messages # ' # # No change in '$@' (ignored completely by this hook). There is # # no need to do the equivalent (but slower) action: # # func_quote_for_eval ${1+"$@"} # # my_options_prep_result=$func_quote_for_eval_result # false # } # func_add_hook func_options_prep my_options_prep # # # my_silent_option () # { # $debug_cmd # # args_changed=false # # # Note that for efficiency, we parse as many options as we can # # recognise in a loop before passing the remainder back to the # # caller on the first unrecognised argument we encounter. # while test $# -gt 0; do # opt=$1; shift # case $opt in # --silent|-s) opt_silent=: # args_changed=: # ;; # # Separate non-argument short options: # -s*) func_split_short_opt "$_G_opt" # set dummy "$func_split_short_opt_name" \ # "-$func_split_short_opt_arg" ${1+"$@"} # shift # args_changed=: # ;; # *) # Make sure the first unrecognised option "$_G_opt" # # is added back to "$@", we could need that later # # if $args_changed is true. # set dummy "$_G_opt" ${1+"$@"}; shift; break ;; # esac # done # # if $args_changed; then # func_quote_for_eval ${1+"$@"} # my_silent_option_result=$func_quote_for_eval_result # fi # # $args_changed # } # func_add_hook func_parse_options my_silent_option # # # my_option_validation () # { # $debug_cmd # # $opt_silent && $opt_verbose && func_fatal_help "\ # '--silent' and '--verbose' options are mutually exclusive." # # false # } # func_add_hook func_validate_options my_option_validation # # You'll also need to manually amend $usage_message to reflect the extra # options you parse. It's preferable to append if you can, so that # multiple option parsing hooks can be added safely. # func_options_finish [ARG]... # ---------------------------- # Finishing the option parse loop (call 'func_options' hooks ATM). func_options_finish () { $debug_cmd _G_func_options_finish_exit=false if func_run_hooks func_options ${1+"$@"}; then func_options_finish_result=$func_run_hooks_result _G_func_options_finish_exit=: fi $_G_func_options_finish_exit } # func_options [ARG]... # --------------------- # All the functions called inside func_options are hookable. See the # individual implementations for details. func_hookable func_options func_options () { $debug_cmd _G_rc_options=false for my_func in options_prep parse_options validate_options options_finish do if eval func_$my_func '${1+"$@"}'; then eval _G_res_var='$'"func_${my_func}_result" eval set dummy "$_G_res_var" ; shift _G_rc_options=: fi done # Save modified positional parameters for caller. As a top-level # options-parser function we always need to set the 'func_options_result' # variable (regardless the $_G_rc_options value). if $_G_rc_options; then func_options_result=$_G_res_var else func_quote_for_eval ${1+"$@"} func_options_result=$func_quote_for_eval_result fi $_G_rc_options } # func_options_prep [ARG]... # -------------------------- # All initialisations required before starting the option parse loop. # Note that when calling hook functions, we pass through the list of # positional parameters. If a hook function modifies that list, and # needs to propagate that back to rest of this script, then the complete # modified list must be put in 'func_run_hooks_result' before # returning $EXIT_SUCCESS (otherwise $EXIT_FAILURE is returned). func_hookable func_options_prep func_options_prep () { $debug_cmd # Option defaults: opt_verbose=false opt_warning_types= _G_rc_options_prep=false if func_run_hooks func_options_prep ${1+"$@"}; then _G_rc_options_prep=: # save modified positional parameters for caller func_options_prep_result=$func_run_hooks_result fi $_G_rc_options_prep } # func_parse_options [ARG]... # --------------------------- # The main option parsing loop. func_hookable func_parse_options func_parse_options () { $debug_cmd func_parse_options_result= _G_rc_parse_options=false # this just eases exit handling while test $# -gt 0; do # Defer to hook functions for initial option parsing, so they # get priority in the event of reusing an option name. if func_run_hooks func_parse_options ${1+"$@"}; then eval set dummy "$func_run_hooks_result"; shift _G_rc_parse_options=: fi # Break out of the loop if we already parsed every option. test $# -gt 0 || break _G_match_parse_options=: _G_opt=$1 shift case $_G_opt in --debug|-x) debug_cmd='set -x' func_echo "enabling shell trace mode" $debug_cmd ;; --no-warnings|--no-warning|--no-warn) set dummy --warnings none ${1+"$@"} shift ;; --warnings|--warning|-W) if test $# = 0 && func_missing_arg $_G_opt; then _G_rc_parse_options=: break fi case " $warning_categories $1" in *" $1 "*) # trailing space prevents matching last $1 above func_append_uniq opt_warning_types " $1" ;; *all) opt_warning_types=$warning_categories ;; *none) opt_warning_types=none warning_func=: ;; *error) opt_warning_types=$warning_categories warning_func=func_fatal_error ;; *) func_fatal_error \ "unsupported warning category: '$1'" ;; esac shift ;; --verbose|-v) opt_verbose=: ;; --version) func_version ;; -\?|-h) func_usage ;; --help) func_help ;; # Separate optargs to long options (plugins may need this): --*=*) func_split_equals "$_G_opt" set dummy "$func_split_equals_lhs" \ "$func_split_equals_rhs" ${1+"$@"} shift ;; # Separate optargs to short options: -W*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "$func_split_short_opt_arg" ${1+"$@"} shift ;; # Separate non-argument short options: -\?*|-h*|-v*|-x*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "-$func_split_short_opt_arg" ${1+"$@"} shift ;; --) _G_rc_parse_options=: ; break ;; -*) func_fatal_help "unrecognised option: '$_G_opt'" ;; *) set dummy "$_G_opt" ${1+"$@"}; shift _G_match_parse_options=false break ;; esac $_G_match_parse_options && _G_rc_parse_options=: done if $_G_rc_parse_options; then # save modified positional parameters for caller func_quote_for_eval ${1+"$@"} func_parse_options_result=$func_quote_for_eval_result fi $_G_rc_parse_options } # func_validate_options [ARG]... # ------------------------------ # Perform any sanity checks on option settings and/or unconsumed # arguments. func_hookable func_validate_options func_validate_options () { $debug_cmd _G_rc_validate_options=false # Display all warnings if -W was not given. test -n "$opt_warning_types" || opt_warning_types=" $warning_categories" if func_run_hooks func_validate_options ${1+"$@"}; then # save modified positional parameters for caller func_validate_options_result=$func_run_hooks_result _G_rc_validate_options=: fi # Bail if the options were screwed! $exit_cmd $EXIT_FAILURE $_G_rc_validate_options } ## ----------------- ## ## Helper functions. ## ## ----------------- ## # This section contains the helper functions used by the rest of the # hookable option parser framework in ascii-betical order. # func_fatal_help ARG... # ---------------------- # Echo program name prefixed message to standard error, followed by # a help hint, and exit. func_fatal_help () { $debug_cmd eval \$ECHO \""Usage: $usage"\" eval \$ECHO \""$fatal_help"\" func_error ${1+"$@"} exit $EXIT_FAILURE } # func_help # --------- # Echo long help message to standard output and exit. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message" exit 0 } # func_missing_arg ARGNAME # ------------------------ # Echo program name prefixed message to standard error and set global # exit_cmd. func_missing_arg () { $debug_cmd func_error "Missing argument for '$1'." exit_cmd=exit } # func_split_equals STRING # ------------------------ # Set func_split_equals_lhs and func_split_equals_rhs shell variables after # splitting STRING at the '=' sign. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_equals () { $debug_cmd func_split_equals_lhs=${1%%=*} func_split_equals_rhs=${1#*=} test "x$func_split_equals_lhs" = "x$1" \ && func_split_equals_rhs= }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_equals () { $debug_cmd func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'` func_split_equals_rhs= test "x$func_split_equals_lhs" = "x$1" \ || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'` } fi #func_split_equals # func_split_short_opt SHORTOPT # ----------------------------- # Set func_split_short_opt_name and func_split_short_opt_arg shell # variables after splitting SHORTOPT after the 2nd character. if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_short_opt () { $debug_cmd func_split_short_opt_arg=${1#??} func_split_short_opt_name=${1%"$func_split_short_opt_arg"} }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_short_opt () { $debug_cmd func_split_short_opt_name=`expr "x$1" : 'x-\(.\)'` func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'` } fi #func_split_short_opt # func_usage # ---------- # Echo short help message to standard output and exit. func_usage () { $debug_cmd func_usage_message $ECHO "Run '$progname --help |${PAGER-more}' for full usage" exit 0 } # func_usage_message # ------------------ # Echo short help message to standard output. func_usage_message () { $debug_cmd eval \$ECHO \""Usage: $usage"\" echo $SED -n 's|^# || /^Written by/{ x;p;x } h /^Written by/q' < "$progpath" echo eval \$ECHO \""$usage_message"\" } # func_version # ------------ # Echo version message to standard output and exit. func_version () { $debug_cmd printf '%s\n' "$progname $scriptversion" $SED -n ' /(C)/!b go :more /\./!{ N s|\n# | | b more } :go /^# Written by /,/# warranty; / { s|^# || s|^# *$|| s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2| p } /^# Written by / { s|^# || p } /^warranty; /q' < "$progpath" exit $? } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: # Set a version string. scriptversion='(GNU libtool) 2.4.6' # func_echo ARG... # ---------------- # Libtool also displays the current mode in messages, so override # funclib.sh func_echo with this custom definition. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line" done IFS=$func_echo_IFS } # func_warning ARG... # ------------------- # Libtool warnings are not categorized, so override funclib.sh # func_warning with this simpler definition. func_warning () { $debug_cmd $warning_func ${1+"$@"} } ## ---------------- ## ## Options parsing. ## ## ---------------- ## # Hook in the functions to make sure our own options are parsed during # the option parsing loop. usage='$progpath [OPTION]... [MODE-ARG]...' # Short help message in response to '-h'. usage_message="Options: --config show all configuration variables --debug enable verbose shell tracing -n, --dry-run display commands without modifying any files --features display basic configuration information and exit --mode=MODE use operation mode MODE --no-warnings equivalent to '-Wnone' --preserve-dup-deps don't remove duplicate dependency libraries --quiet, --silent don't print informational messages --tag=TAG use configuration variables from tag TAG -v, --verbose print more informational messages than default --version print version information -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -h, --help, --help-all print short, long, or detailed help message " # Additional text appended to 'usage_message' in response to '--help'. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message MODE must be one of the following: clean remove files from the build directory compile compile a source file into a libtool object execute automatically set library path, then run a program finish complete the installation of libtool libraries install install libraries or executables link create a library or an executable uninstall remove libraries from an installed directory MODE-ARGS vary depending on the MODE. When passed as first option, '--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that. Try '$progname --help --mode=MODE' for a more detailed description of MODE. When reporting a bug, please describe a test case to reproduce it and include the following information: host-triplet: $host shell: $SHELL compiler: $LTCC compiler flags: $LTCFLAGS linker: $LD (gnu? $with_gnu_ld) version: $progname $scriptversion Debian-2.4.6-14 automake: `($AUTOMAKE --version) 2>/dev/null |$SED 1q` autoconf: `($AUTOCONF --version) 2>/dev/null |$SED 1q` Report bugs to . GNU libtool home page: . General help using GNU software: ." exit 0 } # func_lo2o OBJECT-NAME # --------------------- # Transform OBJECT-NAME from a '.lo' suffix to the platform specific # object suffix. lo2o=s/\\.lo\$/.$objext/ o2lo=s/\\.$objext\$/.lo/ if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_lo2o () { case $1 in *.lo) func_lo2o_result=${1%.lo}.$objext ;; * ) func_lo2o_result=$1 ;; esac }' # func_xform LIBOBJ-OR-SOURCE # --------------------------- # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise) # suffix to a '.lo' libtool-object suffix. eval 'func_xform () { func_xform_result=${1%.*}.lo }' else # ...otherwise fall back to using sed. func_lo2o () { func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"` } func_xform () { func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'` } fi # func_fatal_configuration ARG... # ------------------------------- # Echo program name prefixed message to standard error, followed by # a configuration failure hint, and exit. func_fatal_configuration () { func__fatal_error ${1+"$@"} \ "See the $PACKAGE documentation for more information." \ "Fatal configuration error." } # func_config # ----------- # Display the configuration for all the tags in this script. func_config () { re_begincf='^# ### BEGIN LIBTOOL' re_endcf='^# ### END LIBTOOL' # Default configuration. $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath" # Now print the configurations for the tags. for tagname in $taglist; do $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath" done exit $? } # func_features # ------------- # Display the features supported by this script. func_features () { echo "host: $host" if test yes = "$build_libtool_libs"; then echo "enable shared libraries" else echo "disable shared libraries" fi if test yes = "$build_old_libs"; then echo "enable static libraries" else echo "disable static libraries" fi exit $? } # func_enable_tag TAGNAME # ----------------------- # Verify that TAGNAME is valid, and either flag an error and exit, or # enable the TAGNAME tag. We also add TAGNAME to the global $taglist # variable here. func_enable_tag () { # Global variable: tagname=$1 re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$" re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$" sed_extractcf=/$re_begincf/,/$re_endcf/p # Validate tagname. case $tagname in *[!-_A-Za-z0-9,/]*) func_fatal_error "invalid tag name: $tagname" ;; esac # Don't test for the "default" C tag, as we know it's # there but not specially marked. case $tagname in CC) ;; *) if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then taglist="$taglist $tagname" # Evaluate the configuration. Be careful to quote the path # and the sed script, to avoid splitting on whitespace, but # also don't use non-portable quotes within backquotes within # quotes we have to do it in 2 steps: extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"` eval "$extractedcf" else func_error "ignoring unknown tag $tagname" fi ;; esac } # func_check_version_match # ------------------------ # Ensure that we are using m4 macros, and libtool script from the same # release of libtool. func_check_version_match () { if test "$package_revision" != "$macro_revision"; then if test "$VERSION" != "$macro_version"; then if test -z "$macro_version"; then cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from an older release. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from $PACKAGE $macro_version. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF fi else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, revision $package_revision, $progname: but the definition of this LT_INIT comes from revision $macro_revision. $progname: You should recreate aclocal.m4 with macros from revision $package_revision $progname: of $PACKAGE $VERSION and run autoconf again. _LT_EOF fi exit $EXIT_MISMATCH fi } # libtool_options_prep [ARG]... # ----------------------------- # Preparation for options parsed by libtool. libtool_options_prep () { $debug_mode # Option defaults: opt_config=false opt_dlopen= opt_dry_run=false opt_help=false opt_mode= opt_preserve_dup_deps=false opt_quiet=false nonopt= preserve_args= _G_rc_lt_options_prep=: # Shorthand for --mode=foo, only valid as the first argument case $1 in clean|clea|cle|cl) shift; set dummy --mode clean ${1+"$@"}; shift ;; compile|compil|compi|comp|com|co|c) shift; set dummy --mode compile ${1+"$@"}; shift ;; execute|execut|execu|exec|exe|ex|e) shift; set dummy --mode execute ${1+"$@"}; shift ;; finish|finis|fini|fin|fi|f) shift; set dummy --mode finish ${1+"$@"}; shift ;; install|instal|insta|inst|ins|in|i) shift; set dummy --mode install ${1+"$@"}; shift ;; link|lin|li|l) shift; set dummy --mode link ${1+"$@"}; shift ;; uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u) shift; set dummy --mode uninstall ${1+"$@"}; shift ;; *) _G_rc_lt_options_prep=false ;; esac if $_G_rc_lt_options_prep; then # Pass back the list of options. func_quote_for_eval ${1+"$@"} libtool_options_prep_result=$func_quote_for_eval_result fi $_G_rc_lt_options_prep } func_add_hook func_options_prep libtool_options_prep # libtool_parse_options [ARG]... # --------------------------------- # Provide handling for libtool specific options. libtool_parse_options () { $debug_cmd _G_rc_lt_parse_options=false # Perform our own loop to consume as many options as possible in # each iteration. while test $# -gt 0; do _G_match_lt_parse_options=: _G_opt=$1 shift case $_G_opt in --dry-run|--dryrun|-n) opt_dry_run=: ;; --config) func_config ;; --dlopen|-dlopen) opt_dlopen="${opt_dlopen+$opt_dlopen }$1" shift ;; --preserve-dup-deps) opt_preserve_dup_deps=: ;; --features) func_features ;; --finish) set dummy --mode finish ${1+"$@"}; shift ;; --help) opt_help=: ;; --help-all) opt_help=': help-all' ;; --mode) test $# = 0 && func_missing_arg $_G_opt && break opt_mode=$1 case $1 in # Valid mode arguments: clean|compile|execute|finish|install|link|relink|uninstall) ;; # Catch anything else as an error *) func_error "invalid argument for $_G_opt" exit_cmd=exit break ;; esac shift ;; --no-silent|--no-quiet) opt_quiet=false func_append preserve_args " $_G_opt" ;; --no-warnings|--no-warning|--no-warn) opt_warning=false func_append preserve_args " $_G_opt" ;; --no-verbose) opt_verbose=false func_append preserve_args " $_G_opt" ;; --silent|--quiet) opt_quiet=: opt_verbose=false func_append preserve_args " $_G_opt" ;; --tag) test $# = 0 && func_missing_arg $_G_opt && break opt_tag=$1 func_append preserve_args " $_G_opt $1" func_enable_tag "$1" shift ;; --verbose|-v) opt_quiet=false opt_verbose=: func_append preserve_args " $_G_opt" ;; # An option not handled by this hook function: *) set dummy "$_G_opt" ${1+"$@"} ; shift _G_match_lt_parse_options=false break ;; esac $_G_match_lt_parse_options && _G_rc_lt_parse_options=: done if $_G_rc_lt_parse_options; then # save modified positional parameters for caller func_quote_for_eval ${1+"$@"} libtool_parse_options_result=$func_quote_for_eval_result fi $_G_rc_lt_parse_options } func_add_hook func_parse_options libtool_parse_options # libtool_validate_options [ARG]... # --------------------------------- # Perform any sanity checks on option settings and/or unconsumed # arguments. libtool_validate_options () { # save first non-option argument if test 0 -lt $#; then nonopt=$1 shift fi # preserve --debug test : = "$debug_cmd" || func_append preserve_args " --debug" case $host in # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452 # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788 *cygwin* | *mingw* | *pw32* | *cegcc* | *solaris2* | *os2*) # don't eliminate duplications in $postdeps and $predeps opt_duplicate_compiler_generated_deps=: ;; *) opt_duplicate_compiler_generated_deps=$opt_preserve_dup_deps ;; esac $opt_help || { # Sanity checks first: func_check_version_match test yes != "$build_libtool_libs" \ && test yes != "$build_old_libs" \ && func_fatal_configuration "not configured to build any kind of library" # Darwin sucks eval std_shrext=\"$shrext_cmds\" # Only execute mode is allowed to have -dlopen flags. if test -n "$opt_dlopen" && test execute != "$opt_mode"; then func_error "unrecognized option '-dlopen'" $ECHO "$help" 1>&2 exit $EXIT_FAILURE fi # Change the help message to a mode-specific one. generic_help=$help help="Try '$progname --help --mode=$opt_mode' for more information." } # Pass back the unparsed argument list func_quote_for_eval ${1+"$@"} libtool_validate_options_result=$func_quote_for_eval_result } func_add_hook func_validate_options libtool_validate_options # Process options as early as possible so that --help and --version # can return quickly. func_options ${1+"$@"} eval set dummy "$func_options_result"; shift ## ----------- ## ## Main. ## ## ----------- ## magic='%%%MAGIC variable%%%' magic_exe='%%%MAGIC EXE variable%%%' # Global variables. extracted_archives= extracted_serial=0 # If this variable is set in any of the actions, the command in it # will be execed at the end. This prevents here-documents from being # left over by shells. exec_cmd= # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $1 _LTECHO_EOF' } # func_generated_by_libtool # True iff stdin has been generated by Libtool. This function is only # a basic sanity check; it will hardly flush out determined imposters. func_generated_by_libtool_p () { $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1 } # func_lalib_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_lalib_p () { test -f "$1" && $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p } # func_lalib_unsafe_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function implements the same check as func_lalib_p without # resorting to external programs. To this end, it redirects stdin and # closes it afterwards, without saving the original file descriptor. # As a safety measure, use it only where a negative result would be # fatal anyway. Works if 'file' does not exist. func_lalib_unsafe_p () { lalib_p=no if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then for lalib_p_l in 1 2 3 4 do read lalib_p_line case $lalib_p_line in \#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;; esac done exec 0<&5 5<&- fi test yes = "$lalib_p" } # func_ltwrapper_script_p file # True iff FILE is a libtool wrapper script # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_script_p () { test -f "$1" && $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p } # func_ltwrapper_executable_p file # True iff FILE is a libtool wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_executable_p () { func_ltwrapper_exec_suffix= case $1 in *.exe) ;; *) func_ltwrapper_exec_suffix=.exe ;; esac $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1 } # func_ltwrapper_scriptname file # Assumes file is an ltwrapper_executable # uses $file to determine the appropriate filename for a # temporary ltwrapper_script. func_ltwrapper_scriptname () { func_dirname_and_basename "$1" "" "." func_stripname '' '.exe' "$func_basename_result" func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper } # func_ltwrapper_p file # True iff FILE is a libtool wrapper script or wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_p () { func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1" } # func_execute_cmds commands fail_cmd # Execute tilde-delimited COMMANDS. # If FAIL_CMD is given, eval that upon failure. # FAIL_CMD may read-access the current command in variable CMD! func_execute_cmds () { $debug_cmd save_ifs=$IFS; IFS='~' for cmd in $1; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs func_show_eval "$cmd" "${2-:}" done IFS=$save_ifs } # func_source file # Source FILE, adding directory component if necessary. # Note that it is not necessary on cygwin/mingw to append a dot to # FILE even if both FILE and FILE.exe exist: automatic-append-.exe # behavior happens only for exec(3), not for open(2)! Also, sourcing # 'FILE.' does not work on cygwin managed mounts. func_source () { $debug_cmd case $1 in */* | *\\*) . "$1" ;; *) . "./$1" ;; esac } # func_resolve_sysroot PATH # Replace a leading = in PATH with a sysroot. Store the result into # func_resolve_sysroot_result func_resolve_sysroot () { func_resolve_sysroot_result=$1 case $func_resolve_sysroot_result in =*) func_stripname '=' '' "$func_resolve_sysroot_result" func_resolve_sysroot_result=$lt_sysroot$func_stripname_result ;; esac } # func_replace_sysroot PATH # If PATH begins with the sysroot, replace it with = and # store the result into func_replace_sysroot_result. func_replace_sysroot () { case $lt_sysroot:$1 in ?*:"$lt_sysroot"*) func_stripname "$lt_sysroot" '' "$1" func_replace_sysroot_result='='$func_stripname_result ;; *) # Including no sysroot. func_replace_sysroot_result=$1 ;; esac } # func_infer_tag arg # Infer tagged configuration to use if any are available and # if one wasn't chosen via the "--tag" command line option. # Only attempt this if the compiler in the base compile # command doesn't match the default compiler. # arg is usually of the form 'gcc ...' func_infer_tag () { $debug_cmd if test -n "$available_tags" && test -z "$tagname"; then CC_quoted= for arg in $CC; do func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case $@ in # Blanks in the command may have been stripped by the calling shell, # but not from the CC environment variable when configure was run. " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;; # Blanks at the start of $base_compile will cause this to fail # if we don't check for them as well. *) for z in $available_tags; do if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then # Evaluate the configuration. eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`" CC_quoted= for arg in $CC; do # Double-quote args containing other shell metacharacters. func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case "$@ " in " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) # The compiler in the base compile command matches # the one in the tagged configuration. # Assume this is the tagged configuration we want. tagname=$z break ;; esac fi done # If $tagname still isn't set, then no tagged configuration # was found and let the user know that the "--tag" command # line option must be used. if test -z "$tagname"; then func_echo "unable to infer tagged configuration" func_fatal_error "specify a tag with '--tag'" # else # func_verbose "using $tagname tagged configuration" fi ;; esac fi } # func_write_libtool_object output_name pic_name nonpic_name # Create a libtool object file (analogous to a ".la" file), # but don't create it if we're doing a dry run. func_write_libtool_object () { write_libobj=$1 if test yes = "$build_libtool_libs"; then write_lobj=\'$2\' else write_lobj=none fi if test yes = "$build_old_libs"; then write_oldobj=\'$3\' else write_oldobj=none fi $opt_dry_run || { cat >${write_libobj}T </dev/null` if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" | $SED -e "$sed_naive_backslashify"` else func_convert_core_file_wine_to_w32_result= fi fi } # end: func_convert_core_file_wine_to_w32 # func_convert_core_path_wine_to_w32 ARG # Helper function used by path conversion functions when $build is *nix, and # $host is mingw, cygwin, or some other w32 environment. Relies on a correctly # configured wine environment available, with the winepath program in $build's # $PATH. Assumes ARG has no leading or trailing path separator characters. # # ARG is path to be converted from $build format to win32. # Result is available in $func_convert_core_path_wine_to_w32_result. # Unconvertible file (directory) names in ARG are skipped; if no directory names # are convertible, then the result may be empty. func_convert_core_path_wine_to_w32 () { $debug_cmd # unfortunately, winepath doesn't convert paths, only file names func_convert_core_path_wine_to_w32_result= if test -n "$1"; then oldIFS=$IFS IFS=: for func_convert_core_path_wine_to_w32_f in $1; do IFS=$oldIFS func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f" if test -n "$func_convert_core_file_wine_to_w32_result"; then if test -z "$func_convert_core_path_wine_to_w32_result"; then func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result else func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result" fi fi done IFS=$oldIFS fi } # end: func_convert_core_path_wine_to_w32 # func_cygpath ARGS... # Wrapper around calling the cygpath program via LT_CYGPATH. This is used when # when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2) # $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or # (2), returns the Cygwin file name or path in func_cygpath_result (input # file name or path is assumed to be in w32 format, as previously converted # from $build's *nix or MSYS format). In case (3), returns the w32 file name # or path in func_cygpath_result (input file name or path is assumed to be in # Cygwin format). Returns an empty string on error. # # ARGS are passed to cygpath, with the last one being the file name or path to # be converted. # # Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH # environment variable; do not put it in $PATH. func_cygpath () { $debug_cmd if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null` if test "$?" -ne 0; then # on failure, ensure result is empty func_cygpath_result= fi else func_cygpath_result= func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'" fi } #end: func_cygpath # func_convert_core_msys_to_w32 ARG # Convert file name or path ARG from MSYS format to w32 format. Return # result in func_convert_core_msys_to_w32_result. func_convert_core_msys_to_w32 () { $debug_cmd # awkward: cmd appends spaces to result func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null | $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"` } #end: func_convert_core_msys_to_w32 # func_convert_file_check ARG1 ARG2 # Verify that ARG1 (a file name in $build format) was converted to $host # format in ARG2. Otherwise, emit an error message, but continue (resetting # func_to_host_file_result to ARG1). func_convert_file_check () { $debug_cmd if test -z "$2" && test -n "$1"; then func_error "Could not determine host file name corresponding to" func_error " '$1'" func_error "Continuing, but uninstalled executables may not work." # Fallback: func_to_host_file_result=$1 fi } # end func_convert_file_check # func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH # Verify that FROM_PATH (a path in $build format) was converted to $host # format in TO_PATH. Otherwise, emit an error message, but continue, resetting # func_to_host_file_result to a simplistic fallback value (see below). func_convert_path_check () { $debug_cmd if test -z "$4" && test -n "$3"; then func_error "Could not determine the host path corresponding to" func_error " '$3'" func_error "Continuing, but uninstalled executables may not work." # Fallback. This is a deliberately simplistic "conversion" and # should not be "improved". See libtool.info. if test "x$1" != "x$2"; then lt_replace_pathsep_chars="s|$1|$2|g" func_to_host_path_result=`echo "$3" | $SED -e "$lt_replace_pathsep_chars"` else func_to_host_path_result=$3 fi fi } # end func_convert_path_check # func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG # Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT # and appending REPL if ORIG matches BACKPAT. func_convert_path_front_back_pathsep () { $debug_cmd case $4 in $1 ) func_to_host_path_result=$3$func_to_host_path_result ;; esac case $4 in $2 ) func_append func_to_host_path_result "$3" ;; esac } # end func_convert_path_front_back_pathsep ################################################## # $build to $host FILE NAME CONVERSION FUNCTIONS # ################################################## # invoked via '$to_host_file_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # Result will be available in $func_to_host_file_result. # func_to_host_file ARG # Converts the file name ARG from $build format to $host format. Return result # in func_to_host_file_result. func_to_host_file () { $debug_cmd $to_host_file_cmd "$1" } # end func_to_host_file # func_to_tool_file ARG LAZY # converts the file name ARG from $build format to toolchain format. Return # result in func_to_tool_file_result. If the conversion in use is listed # in (the comma separated) LAZY, no conversion takes place. func_to_tool_file () { $debug_cmd case ,$2, in *,"$to_tool_file_cmd",*) func_to_tool_file_result=$1 ;; *) $to_tool_file_cmd "$1" func_to_tool_file_result=$func_to_host_file_result ;; esac } # end func_to_tool_file # func_convert_file_noop ARG # Copy ARG to func_to_host_file_result. func_convert_file_noop () { func_to_host_file_result=$1 } # end func_convert_file_noop # func_convert_file_msys_to_w32 ARG # Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_file_result. func_convert_file_msys_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_to_host_file_result=$func_convert_core_msys_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_w32 # func_convert_file_cygwin_to_w32 ARG # Convert file name ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_file_cygwin_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # because $build is cygwin, we call "the" cygpath in $PATH; no need to use # LT_CYGPATH in this case. func_to_host_file_result=`cygpath -m "$1"` fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_cygwin_to_w32 # func_convert_file_nix_to_w32 ARG # Convert file name ARG from *nix to w32 format. Requires a wine environment # and a working winepath. Returns result in func_to_host_file_result. func_convert_file_nix_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_file_wine_to_w32 "$1" func_to_host_file_result=$func_convert_core_file_wine_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_w32 # func_convert_file_msys_to_cygwin ARG # Convert file name ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_file_msys_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_cygpath -u "$func_convert_core_msys_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_cygwin # func_convert_file_nix_to_cygwin ARG # Convert file name ARG from *nix to Cygwin format. Requires Cygwin installed # in a wine environment, working winepath, and LT_CYGPATH set. Returns result # in func_to_host_file_result. func_convert_file_nix_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # convert from *nix to w32, then use cygpath to convert from w32 to cygwin. func_convert_core_file_wine_to_w32 "$1" func_cygpath -u "$func_convert_core_file_wine_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_cygwin ############################################# # $build to $host PATH CONVERSION FUNCTIONS # ############################################# # invoked via '$to_host_path_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # The result will be available in $func_to_host_path_result. # # Path separators are also converted from $build format to $host format. If # ARG begins or ends with a path separator character, it is preserved (but # converted to $host format) on output. # # All path conversion functions are named using the following convention: # file name conversion function : func_convert_file_X_to_Y () # path conversion function : func_convert_path_X_to_Y () # where, for any given $build/$host combination the 'X_to_Y' value is the # same. If conversion functions are added for new $build/$host combinations, # the two new functions must follow this pattern, or func_init_to_host_path_cmd # will break. # func_init_to_host_path_cmd # Ensures that function "pointer" variable $to_host_path_cmd is set to the # appropriate value, based on the value of $to_host_file_cmd. to_host_path_cmd= func_init_to_host_path_cmd () { $debug_cmd if test -z "$to_host_path_cmd"; then func_stripname 'func_convert_file_' '' "$to_host_file_cmd" to_host_path_cmd=func_convert_path_$func_stripname_result fi } # func_to_host_path ARG # Converts the path ARG from $build format to $host format. Return result # in func_to_host_path_result. func_to_host_path () { $debug_cmd func_init_to_host_path_cmd $to_host_path_cmd "$1" } # end func_to_host_path # func_convert_path_noop ARG # Copy ARG to func_to_host_path_result. func_convert_path_noop () { func_to_host_path_result=$1 } # end func_convert_path_noop # func_convert_path_msys_to_w32 ARG # Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_path_result. func_convert_path_msys_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from ARG. MSYS # behavior is inconsistent here; cygpath turns them into '.;' and ';.'; # and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_msys_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_msys_to_w32 # func_convert_path_cygwin_to_w32 ARG # Convert path ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_path_cygwin_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"` func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_cygwin_to_w32 # func_convert_path_nix_to_w32 ARG # Convert path ARG from *nix to w32 format. Requires a wine environment and # a working winepath. Returns result in func_to_host_file_result. func_convert_path_nix_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_path_wine_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_nix_to_w32 # func_convert_path_msys_to_cygwin ARG # Convert path ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_path_msys_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_msys_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_msys_to_cygwin # func_convert_path_nix_to_cygwin ARG # Convert path ARG from *nix to Cygwin format. Requires Cygwin installed in a # a wine environment, working winepath, and LT_CYGPATH set. Returns result in # func_to_host_file_result. func_convert_path_nix_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from # ARG. msys behavior is inconsistent here, cygpath turns them # into '.;' and ';.', and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_nix_to_cygwin # func_dll_def_p FILE # True iff FILE is a Windows DLL '.def' file. # Keep in sync with _LT_DLL_DEF_P in libtool.m4 func_dll_def_p () { $debug_cmd func_dll_def_p_tmp=`$SED -n \ -e 's/^[ ]*//' \ -e '/^\(;.*\)*$/d' \ -e 's/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p' \ -e q \ "$1"` test DEF = "$func_dll_def_p_tmp" } # func_mode_compile arg... func_mode_compile () { $debug_cmd # Get the compilation command and the source file. base_compile= srcfile=$nonopt # always keep a non-empty value in "srcfile" suppress_opt=yes suppress_output= arg_mode=normal libobj= later= pie_flag= for arg do case $arg_mode in arg ) # do not "continue". Instead, add this to base_compile lastarg=$arg arg_mode=normal ;; target ) libobj=$arg arg_mode=normal continue ;; normal ) # Accept any command-line options. case $arg in -o) test -n "$libobj" && \ func_fatal_error "you cannot specify '-o' more than once" arg_mode=target continue ;; -pie | -fpie | -fPIE) func_append pie_flag " $arg" continue ;; -shared | -static | -prefer-pic | -prefer-non-pic) func_append later " $arg" continue ;; -no-suppress) suppress_opt=no continue ;; -Xcompiler) arg_mode=arg # the next one goes into the "base_compile" arg list continue # The current "srcfile" will either be retained or ;; # replaced later. I would guess that would be a bug. -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result lastarg= save_ifs=$IFS; IFS=, for arg in $args; do IFS=$save_ifs func_append_quoted lastarg "$arg" done IFS=$save_ifs func_stripname ' ' '' "$lastarg" lastarg=$func_stripname_result # Add the arguments to base_compile. func_append base_compile " $lastarg" continue ;; *) # Accept the current argument as the source file. # The previous "srcfile" becomes the current argument. # lastarg=$srcfile srcfile=$arg ;; esac # case $arg ;; esac # case $arg_mode # Aesthetically quote the previous argument. func_append_quoted base_compile "$lastarg" done # for arg case $arg_mode in arg) func_fatal_error "you must specify an argument for -Xcompile" ;; target) func_fatal_error "you must specify a target with '-o'" ;; *) # Get the name of the library object. test -z "$libobj" && { func_basename "$srcfile" libobj=$func_basename_result } ;; esac # Recognize several different file suffixes. # If the user specifies -o file.o, it is replaced with file.lo case $libobj in *.[cCFSifmso] | \ *.ada | *.adb | *.ads | *.asm | \ *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \ *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup) func_xform "$libobj" libobj=$func_xform_result ;; esac case $libobj in *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;; *) func_fatal_error "cannot determine name of library object from '$libobj'" ;; esac func_infer_tag $base_compile for arg in $later; do case $arg in -shared) test yes = "$build_libtool_libs" \ || func_fatal_configuration "cannot build a shared library" build_old_libs=no continue ;; -static) build_libtool_libs=no build_old_libs=yes continue ;; -prefer-pic) pic_mode=yes continue ;; -prefer-non-pic) pic_mode=no continue ;; esac done func_quote_for_eval "$libobj" test "X$libobj" != "X$func_quote_for_eval_result" \ && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"' &()|`$[]' \ && func_warning "libobj name '$libobj' may not contain shell special characters." func_dirname_and_basename "$obj" "/" "" objname=$func_basename_result xdir=$func_dirname_result lobj=$xdir$objdir/$objname test -z "$base_compile" && \ func_fatal_help "you must specify a compilation command" # Delete any leftover library objects. if test yes = "$build_old_libs"; then removelist="$obj $lobj $libobj ${libobj}T" else removelist="$lobj $libobj ${libobj}T" fi # On Cygwin there's no "real" PIC flag so we must build both object types case $host_os in cygwin* | mingw* | pw32* | os2* | cegcc*) pic_mode=default ;; esac if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then # non-PIC code in shared libraries is not supported pic_mode=default fi # Calculate the filename of the output object if compiler does # not support -o with -c if test no = "$compiler_c_o"; then output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext lockfile=$output_obj.lock else output_obj= need_locks=no lockfile= fi # Lock this critical section if it is needed # We use this script file to make the link, it avoids creating a new file if test yes = "$need_locks"; then until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done elif test warn = "$need_locks"; then if test -f "$lockfile"; then $ECHO "\ *** ERROR, $lockfile exists and contains: `cat $lockfile 2>/dev/null` This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi func_append removelist " $output_obj" $ECHO "$srcfile" > "$lockfile" fi $opt_dry_run || $RM $removelist func_append removelist " $lockfile" trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15 func_to_tool_file "$srcfile" func_convert_file_msys_to_w32 srcfile=$func_to_tool_file_result func_quote_for_eval "$srcfile" qsrcfile=$func_quote_for_eval_result # Only build a PIC object if we are building libtool libraries. if test yes = "$build_libtool_libs"; then # Without this assignment, base_compile gets emptied. fbsd_hideous_sh_bug=$base_compile if test no != "$pic_mode"; then command="$base_compile $qsrcfile $pic_flag" else # Don't build PIC code command="$base_compile $qsrcfile" fi func_mkdir_p "$xdir$objdir" if test -z "$output_obj"; then # Place PIC objects in $objdir func_append command " -o $lobj" fi func_show_eval_locale "$command" \ 'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed, then go on to compile the next one if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then func_show_eval '$MV "$output_obj" "$lobj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi # Allow error messages only from the first compilation. if test yes = "$suppress_opt"; then suppress_output=' >/dev/null 2>&1' fi fi # Only build a position-dependent object if we build old libraries. if test yes = "$build_old_libs"; then if test yes != "$pic_mode"; then # Don't build PIC code command="$base_compile $qsrcfile$pie_flag" else command="$base_compile $qsrcfile $pic_flag" fi if test yes = "$compiler_c_o"; then func_append command " -o $obj" fi # Suppress compiler output if we already did a PIC compilation. func_append command "$suppress_output" func_show_eval_locale "$command" \ '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then func_show_eval '$MV "$output_obj" "$obj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi fi $opt_dry_run || { func_write_libtool_object "$libobj" "$objdir/$objname" "$objname" # Unlock the critical section if it was locked if test no != "$need_locks"; then removelist=$lockfile $RM "$lockfile" fi } exit $EXIT_SUCCESS } $opt_help || { test compile = "$opt_mode" && func_mode_compile ${1+"$@"} } func_mode_help () { # We need to display help for each of the modes. case $opt_mode in "") # Generic help is extracted from the usage comments # at the start of this file. func_help ;; clean) $ECHO \ "Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE... Remove files from the build directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, object or program, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; compile) $ECHO \ "Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE Compile a source file into a libtool library object. This mode accepts the following additional options: -o OUTPUT-FILE set the output file name to OUTPUT-FILE -no-suppress do not suppress compiler output for multiple passes -prefer-pic try to build PIC objects only -prefer-non-pic try to build non-PIC objects only -shared do not build a '.o' file suitable for static linking -static only build a '.o' file suitable for static linking -Wc,FLAG pass FLAG directly to the compiler COMPILE-COMMAND is a command to be used in creating a 'standard' object file from the given SOURCEFILE. The output file name is determined by removing the directory component from SOURCEFILE, then substituting the C source code suffix '.c' with the library object suffix, '.lo'." ;; execute) $ECHO \ "Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]... Automatically set library path, then run a program. This mode accepts the following additional options: -dlopen FILE add the directory containing FILE to the library path This mode sets the library path environment variable according to '-dlopen' flags. If any of the ARGS are libtool executable wrappers, then they are translated into their corresponding uninstalled binary, and any of their required library directories are added to the library path. Then, COMMAND is executed, with ARGS as arguments." ;; finish) $ECHO \ "Usage: $progname [OPTION]... --mode=finish [LIBDIR]... Complete the installation of libtool libraries. Each LIBDIR is a directory that contains libtool libraries. The commands that this mode executes may require superuser privileges. Use the '--dry-run' option if you just want to see what would be executed." ;; install) $ECHO \ "Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND... Install executables or libraries. INSTALL-COMMAND is the installation command. The first component should be either the 'install' or 'cp' program. The following components of INSTALL-COMMAND are treated specially: -inst-prefix-dir PREFIX-DIR Use PREFIX-DIR as a staging area for installation The rest of the components are interpreted as arguments to that command (only BSD-compatible install options are recognized)." ;; link) $ECHO \ "Usage: $progname [OPTION]... --mode=link LINK-COMMAND... Link object files or libraries together to form another library, or to create an executable program. LINK-COMMAND is a command using the C compiler that you would use to create a program from several object files. The following components of LINK-COMMAND are treated specially: -all-static do not do any dynamic linking at all -avoid-version do not add a version suffix if possible -bindir BINDIR specify path to binaries directory (for systems where libraries must be found in the PATH setting at runtime) -dlopen FILE '-dlpreopen' FILE if it cannot be dlopened at runtime -dlpreopen FILE link in FILE and add its symbols to lt_preloaded_symbols -export-dynamic allow symbols from OUTPUT-FILE to be resolved with dlsym(3) -export-symbols SYMFILE try to export only the symbols listed in SYMFILE -export-symbols-regex REGEX try to export only the symbols matching REGEX -LLIBDIR search LIBDIR for required installed libraries -lNAME OUTPUT-FILE requires the installed library libNAME -module build a library that can dlopened -no-fast-install disable the fast-install mode -no-install link a not-installable executable -no-undefined declare that a library does not refer to external symbols -o OUTPUT-FILE create OUTPUT-FILE from the specified objects -objectlist FILE use a list of object files found in FILE to specify objects -os2dllname NAME force a short DLL name on OS/2 (no effect on other OSes) -precious-files-regex REGEX don't remove output files matching REGEX -release RELEASE specify package release information -rpath LIBDIR the created library will eventually be installed in LIBDIR -R[ ]LIBDIR add LIBDIR to the runtime path of programs and libraries -shared only do dynamic linking of libtool libraries -shrext SUFFIX override the standard shared library file extension -static do not do any dynamic linking of uninstalled libtool libraries -static-libtool-libs do not do any dynamic linking of libtool libraries -version-info CURRENT[:REVISION[:AGE]] specify library version info [each variable defaults to 0] -weak LIBNAME declare that the target provides the LIBNAME interface -Wc,FLAG -Xcompiler FLAG pass linker-specific FLAG directly to the compiler -Wl,FLAG -Xlinker FLAG pass linker-specific FLAG directly to the linker -XCClinker FLAG pass link-specific FLAG to the compiler driver (CC) All other options (arguments beginning with '-') are ignored. Every other argument is treated as a filename. Files ending in '.la' are treated as uninstalled libtool libraries, other files are standard or library object files. If the OUTPUT-FILE ends in '.la', then a libtool library is created, only library objects ('.lo' files) may be specified, and '-rpath' is required, except when creating a convenience library. If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created using 'ar' and 'ranlib', or on Windows using 'lib'. If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file is created, otherwise an executable program is created." ;; uninstall) $ECHO \ "Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE... Remove libraries from an installation directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; *) func_fatal_help "invalid operation mode '$opt_mode'" ;; esac echo $ECHO "Try '$progname --help' for more information about other modes." } # Now that we've collected a possible --mode arg, show help if necessary if $opt_help; then if test : = "$opt_help"; then func_mode_help else { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do func_mode_help done } | $SED -n '1p; 2,$s/^Usage:/ or: /p' { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do echo func_mode_help done } | $SED '1d /^When reporting/,/^Report/{ H d } $x /information about other modes/d /more detailed .*MODE/d s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/' fi exit $? fi # func_mode_execute arg... func_mode_execute () { $debug_cmd # The first argument is the command name. cmd=$nonopt test -z "$cmd" && \ func_fatal_help "you must specify a COMMAND" # Handle -dlopen flags immediately. for file in $opt_dlopen; do test -f "$file" \ || func_fatal_help "'$file' is not a file" dir= case $file in *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$lib' is not a valid libtool archive" # Read the libtool library. dlname= library_names= func_source "$file" # Skip this library if it cannot be dlopened. if test -z "$dlname"; then # Warn if it was a shared library. test -n "$library_names" && \ func_warning "'$file' was not linked with '-export-dynamic'" continue fi func_dirname "$file" "" "." dir=$func_dirname_result if test -f "$dir/$objdir/$dlname"; then func_append dir "/$objdir" else if test ! -f "$dir/$dlname"; then func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'" fi fi ;; *.lo) # Just add the directory containing the .lo file. func_dirname "$file" "" "." dir=$func_dirname_result ;; *) func_warning "'-dlopen' is ignored for non-libtool libraries and objects" continue ;; esac # Get the absolute pathname. absdir=`cd "$dir" && pwd` test -n "$absdir" && dir=$absdir # Now add the directory to shlibpath_var. if eval "test -z \"\$$shlibpath_var\""; then eval "$shlibpath_var=\"\$dir\"" else eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\"" fi done # This variable tells wrapper scripts just to set shlibpath_var # rather than running their programs. libtool_execute_magic=$magic # Check if any of the arguments is a wrapper script. args= for file do case $file in -* | *.la | *.lo ) ;; *) # Do a test to see if this is really a libtool program. if func_ltwrapper_script_p "$file"; then func_source "$file" # Transform arg to wrapped name. file=$progdir/$program elif func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" func_source "$func_ltwrapper_scriptname_result" # Transform arg to wrapped name. file=$progdir/$program fi ;; esac # Quote arguments (to preserve shell metacharacters). func_append_quoted args "$file" done if $opt_dry_run; then # Display what would be done. if test -n "$shlibpath_var"; then eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\"" echo "export $shlibpath_var" fi $ECHO "$cmd$args" exit $EXIT_SUCCESS else if test -n "$shlibpath_var"; then # Export the shlibpath_var. eval "export $shlibpath_var" fi # Restore saved environment variables for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test \"\${save_$lt_var+set}\" = set; then $lt_var=\$save_$lt_var; export $lt_var else $lt_unset $lt_var fi" done # Now prepare to actually exec the command. exec_cmd=\$cmd$args fi } test execute = "$opt_mode" && func_mode_execute ${1+"$@"} # func_mode_finish arg... func_mode_finish () { $debug_cmd libs= libdirs= admincmds= for opt in "$nonopt" ${1+"$@"} do if test -d "$opt"; then func_append libdirs " $opt" elif test -f "$opt"; then if func_lalib_unsafe_p "$opt"; then func_append libs " $opt" else func_warning "'$opt' is not a valid libtool archive" fi else func_fatal_error "invalid argument '$opt'" fi done if test -n "$libs"; then if test -n "$lt_sysroot"; then sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"` sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;" else sysroot_cmd= fi # Remove sysroot references if $opt_dry_run; then for lib in $libs; do echo "removing references to $lt_sysroot and '=' prefixes from $lib" done else tmpdir=`func_mktempdir` for lib in $libs; do $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \ > $tmpdir/tmp-la mv -f $tmpdir/tmp-la $lib done ${RM}r "$tmpdir" fi fi if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then for libdir in $libdirs; do if test -n "$finish_cmds"; then # Do each command in the finish commands. func_execute_cmds "$finish_cmds" 'admincmds="$admincmds '"$cmd"'"' fi if test -n "$finish_eval"; then # Do the single finish_eval. eval cmds=\"$finish_eval\" $opt_dry_run || eval "$cmds" || func_append admincmds " $cmds" fi done fi # Exit here if they wanted silent mode. $opt_quiet && exit $EXIT_SUCCESS if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then echo "----------------------------------------------------------------------" echo "Libraries have been installed in:" for libdir in $libdirs; do $ECHO " $libdir" done echo echo "If you ever happen to want to link against installed libraries" echo "in a given directory, LIBDIR, you must either use libtool, and" echo "specify the full pathname of the library, or use the '-LLIBDIR'" echo "flag during linking and do at least one of the following:" if test -n "$shlibpath_var"; then echo " - add LIBDIR to the '$shlibpath_var' environment variable" echo " during execution" fi if test -n "$runpath_var"; then echo " - add LIBDIR to the '$runpath_var' environment variable" echo " during linking" fi if test -n "$hardcode_libdir_flag_spec"; then libdir=LIBDIR eval flag=\"$hardcode_libdir_flag_spec\" $ECHO " - use the '$flag' linker flag" fi if test -n "$admincmds"; then $ECHO " - have your system administrator run these commands:$admincmds" fi if test -f /etc/ld.so.conf; then echo " - have your system administrator add LIBDIR to '/etc/ld.so.conf'" fi echo echo "See any operating system documentation about shared libraries for" case $host in solaris2.[6789]|solaris2.1[0-9]) echo "more information, such as the ld(1), crle(1) and ld.so(8) manual" echo "pages." ;; *) echo "more information, such as the ld(1) and ld.so(8) manual pages." ;; esac echo "----------------------------------------------------------------------" fi exit $EXIT_SUCCESS } test finish = "$opt_mode" && func_mode_finish ${1+"$@"} # func_mode_install arg... func_mode_install () { $debug_cmd # There may be an optional sh(1) argument at the beginning of # install_prog (especially on Windows NT). if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" || # Allow the use of GNU shtool's install command. case $nonopt in *shtool*) :;; *) false;; esac then # Aesthetically quote it. func_quote_for_eval "$nonopt" install_prog="$func_quote_for_eval_result " arg=$1 shift else install_prog= arg=$nonopt fi # The real first argument should be the name of the installation program. # Aesthetically quote it. func_quote_for_eval "$arg" func_append install_prog "$func_quote_for_eval_result" install_shared_prog=$install_prog case " $install_prog " in *[\\\ /]cp\ *) install_cp=: ;; *) install_cp=false ;; esac # We need to accept at least all the BSD install flags. dest= files= opts= prev= install_type= isdir=false stripme= no_mode=: for arg do arg2= if test -n "$dest"; then func_append files " $dest" dest=$arg continue fi case $arg in -d) isdir=: ;; -f) if $install_cp; then :; else prev=$arg fi ;; -g | -m | -o) prev=$arg ;; -s) stripme=" -s" continue ;; -*) ;; *) # If the previous option needed an argument, then skip it. if test -n "$prev"; then if test X-m = "X$prev" && test -n "$install_override_mode"; then arg2=$install_override_mode no_mode=false fi prev= else dest=$arg continue fi ;; esac # Aesthetically quote the argument. func_quote_for_eval "$arg" func_append install_prog " $func_quote_for_eval_result" if test -n "$arg2"; then func_quote_for_eval "$arg2" fi func_append install_shared_prog " $func_quote_for_eval_result" done test -z "$install_prog" && \ func_fatal_help "you must specify an install program" test -n "$prev" && \ func_fatal_help "the '$prev' option requires an argument" if test -n "$install_override_mode" && $no_mode; then if $install_cp; then :; else func_quote_for_eval "$install_override_mode" func_append install_shared_prog " -m $func_quote_for_eval_result" fi fi if test -z "$files"; then if test -z "$dest"; then func_fatal_help "no file or destination specified" else func_fatal_help "you must specify a destination" fi fi # Strip any trailing slash from the destination. func_stripname '' '/' "$dest" dest=$func_stripname_result # Check to see that the destination is a directory. test -d "$dest" && isdir=: if $isdir; then destdir=$dest destname= else func_dirname_and_basename "$dest" "" "." destdir=$func_dirname_result destname=$func_basename_result # Not a directory, so check to see that there is only one file specified. set dummy $files; shift test "$#" -gt 1 && \ func_fatal_help "'$dest' is not a directory" fi case $destdir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) for file in $files; do case $file in *.lo) ;; *) func_fatal_help "'$destdir' must be an absolute directory name" ;; esac done ;; esac # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic staticlibs= future_libdirs= current_libdirs= for file in $files; do # Do each installation. case $file in *.$libext) # Do the static libraries later. func_append staticlibs " $file" ;; *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$file' is not a valid libtool archive" library_names= old_library= relink_command= func_source "$file" # Add the libdir to current_libdirs if it is the destination. if test "X$destdir" = "X$libdir"; then case "$current_libdirs " in *" $libdir "*) ;; *) func_append current_libdirs " $libdir" ;; esac else # Note the libdir as a future libdir. case "$future_libdirs " in *" $libdir "*) ;; *) func_append future_libdirs " $libdir" ;; esac fi func_dirname "$file" "/" "" dir=$func_dirname_result func_append dir "$objdir" if test -n "$relink_command"; then # Determine the prefix the user has applied to our future dir. inst_prefix_dir=`$ECHO "$destdir" | $SED -e "s%$libdir\$%%"` # Don't allow the user to place us outside of our expected # location b/c this prevents finding dependent libraries that # are installed to the same prefix. # At present, this check doesn't affect windows .dll's that # are installed into $libdir/../bin (currently, that works fine) # but it's something to keep an eye on. test "$inst_prefix_dir" = "$destdir" && \ func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir" if test -n "$inst_prefix_dir"; then # Stick the inst_prefix_dir data into the link command. relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"` else relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"` fi func_warning "relinking '$file'" func_show_eval "$relink_command" \ 'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"' fi # See the names of the shared library. set dummy $library_names; shift if test -n "$1"; then realname=$1 shift srcname=$realname test -n "$relink_command" && srcname=${realname}T # Install the shared library and build the symlinks. func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \ 'exit $?' tstripme=$stripme case $host_os in cygwin* | mingw* | pw32* | cegcc*) case $realname in *.dll.a) tstripme= ;; esac ;; os2*) case $realname in *_dll.a) tstripme= ;; esac ;; esac if test -n "$tstripme" && test -n "$striplib"; then func_show_eval "$striplib $destdir/$realname" 'exit $?' fi if test "$#" -gt 0; then # Delete the old symlinks, and create new ones. # Try 'ln -sf' first, because the 'ln' binary might depend on # the symlink we replace! Solaris /bin/ln does not understand -f, # so we also need to try rm && ln -s. for linkname do test "$linkname" != "$realname" \ && func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })" done fi # Do each command in the postinstall commands. lib=$destdir/$realname func_execute_cmds "$postinstall_cmds" 'exit $?' fi # Install the pseudo-library for information purposes. func_basename "$file" name=$func_basename_result instname=$dir/${name}i func_show_eval "$install_prog $instname $destdir/$name" 'exit $?' # Maybe install the static library, too. test -n "$old_library" && func_append staticlibs " $dir/$old_library" ;; *.lo) # Install (i.e. copy) a libtool object. # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # Deduce the name of the destination old-style object file. case $destfile in *.lo) func_lo2o "$destfile" staticdest=$func_lo2o_result ;; *.$objext) staticdest=$destfile destfile= ;; *) func_fatal_help "cannot copy a libtool object to '$destfile'" ;; esac # Install the libtool object if requested. test -n "$destfile" && \ func_show_eval "$install_prog $file $destfile" 'exit $?' # Install the old object if enabled. if test yes = "$build_old_libs"; then # Deduce the name of the old-style object file. func_lo2o "$file" staticobj=$func_lo2o_result func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?' fi exit $EXIT_SUCCESS ;; *) # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # If the file is missing, and there is a .exe on the end, strip it # because it is most likely a libtool script we actually want to # install stripped_ext= case $file in *.exe) if test ! -f "$file"; then func_stripname '' '.exe' "$file" file=$func_stripname_result stripped_ext=.exe fi ;; esac # Do a test to see if this is really a libtool program. case $host in *cygwin* | *mingw*) if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" wrapper=$func_ltwrapper_scriptname_result else func_stripname '' '.exe' "$file" wrapper=$func_stripname_result fi ;; *) wrapper=$file ;; esac if func_ltwrapper_script_p "$wrapper"; then notinst_deplibs= relink_command= func_source "$wrapper" # Check the variables that should have been set. test -z "$generated_by_libtool_version" && \ func_fatal_error "invalid libtool wrapper script '$wrapper'" finalize=: for lib in $notinst_deplibs; do # Check to see that each library is installed. libdir= if test -f "$lib"; then func_source "$lib" fi libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'` if test -n "$libdir" && test ! -f "$libfile"; then func_warning "'$lib' has not been installed in '$libdir'" finalize=false fi done relink_command= func_source "$wrapper" outputname= if test no = "$fast_install" && test -n "$relink_command"; then $opt_dry_run || { if $finalize; then tmpdir=`func_mktempdir` func_basename "$file$stripped_ext" file=$func_basename_result outputname=$tmpdir/$file # Replace the output file specification. relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'` $opt_quiet || { func_quote_for_expand "$relink_command" eval "func_echo $func_quote_for_expand_result" } if eval "$relink_command"; then : else func_error "error: relink '$file' with the above command before installing it" $opt_dry_run || ${RM}r "$tmpdir" continue fi file=$outputname else func_warning "cannot relink '$file'" fi } else # Install the binary that we compiled earlier. file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"` fi fi # remove .exe since cygwin /usr/bin/install will append another # one anyway case $install_prog,$host in */usr/bin/install*,*cygwin*) case $file:$destfile in *.exe:*.exe) # this is ok ;; *.exe:*) destfile=$destfile.exe ;; *:*.exe) func_stripname '' '.exe' "$destfile" destfile=$func_stripname_result ;; esac ;; esac func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?' $opt_dry_run || if test -n "$outputname"; then ${RM}r "$tmpdir" fi ;; esac done for file in $staticlibs; do func_basename "$file" name=$func_basename_result # Set up the ranlib parameters. oldlib=$destdir/$name func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result func_show_eval "$install_prog \$file \$oldlib" 'exit $?' if test -n "$stripme" && test -n "$old_striplib"; then func_show_eval "$old_striplib $tool_oldlib" 'exit $?' fi # Do each command in the postinstall commands. func_execute_cmds "$old_postinstall_cmds" 'exit $?' done test -n "$future_libdirs" && \ func_warning "remember to run '$progname --finish$future_libdirs'" if test -n "$current_libdirs"; then # Maybe just do a dry run. $opt_dry_run && current_libdirs=" -n$current_libdirs" exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs' else exit $EXIT_SUCCESS fi } test install = "$opt_mode" && func_mode_install ${1+"$@"} # func_generate_dlsyms outputname originator pic_p # Extract symbols from dlprefiles and create ${outputname}S.o with # a dlpreopen symbol table. func_generate_dlsyms () { $debug_cmd my_outputname=$1 my_originator=$2 my_pic_p=${3-false} my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'` my_dlsyms= if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then if test -n "$NM" && test -n "$global_symbol_pipe"; then my_dlsyms=${my_outputname}S.c else func_error "not configured to extract global symbols from dlpreopened files" fi fi if test -n "$my_dlsyms"; then case $my_dlsyms in "") ;; *.c) # Discover the nlist of each of the dlfiles. nlist=$output_objdir/$my_outputname.nm func_show_eval "$RM $nlist ${nlist}S ${nlist}T" # Parse the name list into a source file. func_verbose "creating $output_objdir/$my_dlsyms" $opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\ /* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */ /* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */ #ifdef __cplusplus extern \"C\" { #endif #if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4)) #pragma GCC diagnostic ignored \"-Wstrict-prototypes\" #endif /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT_DLSYM_CONST #else # define LT_DLSYM_CONST const #endif #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* External symbol declarations for the compiler. */\ " if test yes = "$dlself"; then func_verbose "generating symbol list for '$output'" $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist" # Add our own program objects to the symbol list. progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP` for progfile in $progfiles; do func_to_tool_file "$progfile" func_convert_file_msys_to_w32 func_verbose "extracting global C symbols from '$func_to_tool_file_result'" $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'" done if test -n "$exclude_expsyms"; then $opt_dry_run || { eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi if test -n "$export_symbols_regex"; then $opt_dry_run || { eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi # Prepare the list of exported symbols if test -z "$export_symbols"; then export_symbols=$output_objdir/$outputname.exp $opt_dry_run || { $RM $export_symbols eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"' ;; esac } else $opt_dry_run || { eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"' eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$nlist" >> "$output_objdir/$outputname.def"' ;; esac } fi fi for dlprefile in $dlprefiles; do func_verbose "extracting global C symbols from '$dlprefile'" func_basename "$dlprefile" name=$func_basename_result case $host in *cygwin* | *mingw* | *cegcc* ) # if an import library, we need to obtain dlname if func_win32_import_lib_p "$dlprefile"; then func_tr_sh "$dlprefile" eval "curr_lafile=\$libfile_$func_tr_sh_result" dlprefile_dlbasename= if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then # Use subshell, to avoid clobbering current variable values dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"` if test -n "$dlprefile_dlname"; then func_basename "$dlprefile_dlname" dlprefile_dlbasename=$func_basename_result else # no lafile. user explicitly requested -dlpreopen . $sharedlib_from_linklib_cmd "$dlprefile" dlprefile_dlbasename=$sharedlib_from_linklib_result fi fi $opt_dry_run || { if test -n "$dlprefile_dlbasename"; then eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"' else func_warning "Could not compute DLL name from $name" eval '$ECHO ": $name " >> "$nlist"' fi func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'" } else # not an import lib $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } fi ;; *) $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } ;; esac done $opt_dry_run || { # Make sure we have at least an empty file. test -f "$nlist" || : > "$nlist" if test -n "$exclude_expsyms"; then $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T $MV "$nlist"T "$nlist" fi # Try sorting and uniquifying the output. if $GREP -v "^: " < "$nlist" | if sort -k 3 /dev/null 2>&1; then sort -k 3 else sort +2 fi | uniq > "$nlist"S; then : else $GREP -v "^: " < "$nlist" > "$nlist"S fi if test -f "$nlist"S; then eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"' else echo '/* NONE */' >> "$output_objdir/$my_dlsyms" fi func_show_eval '$RM "${nlist}I"' if test -n "$global_symbol_to_import"; then eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I' fi echo >> "$output_objdir/$my_dlsyms" "\ /* The mapping between symbol names and symbols. */ typedef struct { const char *name; void *address; } lt_dlsymlist; extern LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[];\ " if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ static void lt_syminit(void) { LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols; for (; symbol->name; ++symbol) {" $SED 's/.*/ if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms" echo >> "$output_objdir/$my_dlsyms" "\ } }" fi echo >> "$output_objdir/$my_dlsyms" "\ LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[] = { {\"$my_originator\", (void *) 0}," if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ {\"@INIT@\", (void *) <_syminit}," fi case $need_lib_prefix in no) eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; *) eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; esac echo >> "$output_objdir/$my_dlsyms" "\ {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt_${my_prefix}_LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif\ " } # !$opt_dry_run pic_flag_for_symtable= case "$compile_command " in *" -static "*) ;; *) case $host in # compiling the symbol table file with pic_flag works around # a FreeBSD bug that causes programs to crash when -lm is # linked before any other PIC object. But we must not use # pic_flag when linking with -static. The problem exists in # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1. *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*) pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;; *-*-hpux*) pic_flag_for_symtable=" $pic_flag" ;; *) $my_pic_p && pic_flag_for_symtable=" $pic_flag" ;; esac ;; esac symtab_cflags= for arg in $LTCFLAGS; do case $arg in -pie | -fpie | -fPIE) ;; *) func_append symtab_cflags " $arg" ;; esac done # Now compile the dynamic symbol file. func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?' # Clean up the generated files. func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"' # Transform the symbol file into the correct name. symfileobj=$output_objdir/${my_outputname}S.$objext case $host in *cygwin* | *mingw* | *cegcc* ) if test -f "$output_objdir/$my_outputname.def"; then compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` else compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` fi ;; *) compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` ;; esac ;; *) func_fatal_error "unknown suffix for '$my_dlsyms'" ;; esac else # We keep going just in case the user didn't refer to # lt_preloaded_symbols. The linker will fail if global_symbol_pipe # really was required. # Nullify the symbol file. compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"` finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"` fi } # func_cygming_gnu_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is a GNU/binutils-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_gnu_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'` test -n "$func_cygming_gnu_implib_tmp" } # func_cygming_ms_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is an MS-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_ms_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'` test -n "$func_cygming_ms_implib_tmp" } # func_win32_libid arg # return the library type of file 'arg' # # Need a lot of goo to handle *both* DLLs and import libs # Has to be a shell function in order to 'eat' the argument # that is supplied when $file_magic_command is called. # Despite the name, also deal with 64 bit binaries. func_win32_libid () { $debug_cmd win32_libid_type=unknown win32_fileres=`file -L $1 2>/dev/null` case $win32_fileres in *ar\ archive\ import\ library*) # definitely import win32_libid_type="x86 archive import" ;; *ar\ archive*) # could be an import, or static # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD. if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null | $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' >/dev/null; then case $nm_interface in "MS dumpbin") if func_cygming_ms_implib_p "$1" || func_cygming_gnu_implib_p "$1" then win32_nmres=import else win32_nmres= fi ;; *) func_to_tool_file "$1" func_convert_file_msys_to_w32 win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" | $SED -n -e ' 1,100{ / I /{ s|.*|import| p q } }'` ;; esac case $win32_nmres in import*) win32_libid_type="x86 archive import";; *) win32_libid_type="x86 archive static";; esac fi ;; *DLL*) win32_libid_type="x86 DLL" ;; *executable*) # but shell scripts are "executable" too... case $win32_fileres in *MS\ Windows\ PE\ Intel*) win32_libid_type="x86 DLL" ;; esac ;; esac $ECHO "$win32_libid_type" } # func_cygming_dll_for_implib ARG # # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib () { $debug_cmd sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"` } # func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs # # The is the core of a fallback implementation of a # platform-specific function to extract the name of the # DLL associated with the specified import library LIBNAME. # # SECTION_NAME is either .idata$6 or .idata$7, depending # on the platform and compiler that created the implib. # # Echos the name of the DLL associated with the # specified import library. func_cygming_dll_for_implib_fallback_core () { $debug_cmd match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"` $OBJDUMP -s --section "$1" "$2" 2>/dev/null | $SED '/^Contents of section '"$match_literal"':/{ # Place marker at beginning of archive member dllname section s/.*/====MARK====/ p d } # These lines can sometimes be longer than 43 characters, but # are always uninteresting /:[ ]*file format pe[i]\{,1\}-/d /^In archive [^:]*:/d # Ensure marker is printed /^====MARK====/p # Remove all lines with less than 43 characters /^.\{43\}/!d # From remaining lines, remove first 43 characters s/^.\{43\}//' | $SED -n ' # Join marker and all lines until next marker into a single line /^====MARK====/ b para H $ b para b :para x s/\n//g # Remove the marker s/^====MARK====// # Remove trailing dots and whitespace s/[\. \t]*$// # Print /./p' | # we now have a list, one entry per line, of the stringified # contents of the appropriate section of all members of the # archive that possess that section. Heuristic: eliminate # all those that have a first or second character that is # a '.' (that is, objdump's representation of an unprintable # character.) This should work for all archives with less than # 0x302f exports -- but will fail for DLLs whose name actually # begins with a literal '.' or a single character followed by # a '.'. # # Of those that remain, print the first one. $SED -e '/^\./d;/^.\./d;q' } # func_cygming_dll_for_implib_fallback ARG # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # # This fallback implementation is for use when $DLLTOOL # does not support the --identify-strict option. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib_fallback () { $debug_cmd if func_cygming_gnu_implib_p "$1"; then # binutils import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"` elif func_cygming_ms_implib_p "$1"; then # ms-generated import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"` else # unknown sharedlib_from_linklib_result= fi } # func_extract_an_archive dir oldlib func_extract_an_archive () { $debug_cmd f_ex_an_ar_dir=$1; shift f_ex_an_ar_oldlib=$1 if test yes = "$lock_old_archive_extraction"; then lockfile=$f_ex_an_ar_oldlib.lock until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done fi func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \ 'stat=$?; rm -f "$lockfile"; exit $stat' if test yes = "$lock_old_archive_extraction"; then $opt_dry_run || rm -f "$lockfile" fi if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then : else func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib" fi } # func_extract_archives gentop oldlib ... func_extract_archives () { $debug_cmd my_gentop=$1; shift my_oldlibs=${1+"$@"} my_oldobjs= my_xlib= my_xabs= my_xdir= for my_xlib in $my_oldlibs; do # Extract the objects. case $my_xlib in [\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;; *) my_xabs=`pwd`"/$my_xlib" ;; esac func_basename "$my_xlib" my_xlib=$func_basename_result my_xlib_u=$my_xlib while :; do case " $extracted_archives " in *" $my_xlib_u "*) func_arith $extracted_serial + 1 extracted_serial=$func_arith_result my_xlib_u=lt$extracted_serial-$my_xlib ;; *) break ;; esac done extracted_archives="$extracted_archives $my_xlib_u" my_xdir=$my_gentop/$my_xlib_u func_mkdir_p "$my_xdir" case $host in *-darwin*) func_verbose "Extracting $my_xabs" # Do not bother doing anything if just a dry run $opt_dry_run || { darwin_orig_dir=`pwd` cd $my_xdir || exit $? darwin_archive=$my_xabs darwin_curdir=`pwd` func_basename "$darwin_archive" darwin_base_archive=$func_basename_result darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true` if test -n "$darwin_arches"; then darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'` darwin_arch= func_verbose "$darwin_base_archive has multiple architectures $darwin_arches" for darwin_arch in $darwin_arches; do func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch" $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive" cd "unfat-$$/$darwin_base_archive-$darwin_arch" func_extract_an_archive "`pwd`" "$darwin_base_archive" cd "$darwin_curdir" $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" done # $darwin_arches ## Okay now we've a bunch of thin objects, gotta fatten them up :) darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u` darwin_file= darwin_files= for darwin_file in $darwin_filelist; do darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP` $LIPO -create -output "$darwin_file" $darwin_files done # $darwin_filelist $RM -rf unfat-$$ cd "$darwin_orig_dir" else cd $darwin_orig_dir func_extract_an_archive "$my_xdir" "$my_xabs" fi # $darwin_arches } # !$opt_dry_run ;; *) func_extract_an_archive "$my_xdir" "$my_xabs" ;; esac my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP` done func_extract_archives_result=$my_oldobjs } # func_emit_wrapper [arg=no] # # Emit a libtool wrapper script on stdout. # Don't directly open a file because we may want to # incorporate the script contents within a cygwin/mingw # wrapper executable. Must ONLY be called from within # func_mode_link because it depends on a number of variables # set therein. # # ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR # variable will take. If 'yes', then the emitted script # will assume that the directory where it is stored is # the $objdir directory. This is a cygwin/mingw-specific # behavior. func_emit_wrapper () { func_emit_wrapper_arg1=${1-no} $ECHO "\ #! $SHELL # $output - temporary wrapper script for $objdir/$outputname # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # The $output program cannot be directly executed until all the libtool # libraries that it depends on are installed. # # This wrapper script should never be moved out of the build directory. # If it is, it will not operate correctly. # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='$sed_quote_subst' # Be Bourne compatible if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then emulate sh NULLCMD=: # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac fi BIN_SH=xpg4; export BIN_SH # for Tru64 DUALCASE=1; export DUALCASE # for MKS sh # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH relink_command=\"$relink_command\" # This environment variable determines our operation mode. if test \"\$libtool_install_magic\" = \"$magic\"; then # install mode needs the following variables: generated_by_libtool_version='$macro_version' notinst_deplibs='$notinst_deplibs' else # When we are sourced in execute mode, \$file and \$ECHO are already set. if test \"\$libtool_execute_magic\" != \"$magic\"; then file=\"\$0\"" qECHO=`$ECHO "$ECHO" | $SED "$sed_quote_subst"` $ECHO "\ # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$1 _LTECHO_EOF' } ECHO=\"$qECHO\" fi # Very basic option parsing. These options are (a) specific to # the libtool wrapper, (b) are identical between the wrapper # /script/ and the wrapper /executable/ that is used only on # windows platforms, and (c) all begin with the string "--lt-" # (application programs are unlikely to have options that match # this pattern). # # There are only two supported options: --lt-debug and # --lt-dump-script. There is, deliberately, no --lt-help. # # The first argument to this parsing function should be the # script's $0 value, followed by "$@". lt_option_debug= func_parse_lt_options () { lt_script_arg0=\$0 shift for lt_opt do case \"\$lt_opt\" in --lt-debug) lt_option_debug=1 ;; --lt-dump-script) lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\` test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=. lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\` cat \"\$lt_dump_D/\$lt_dump_F\" exit 0 ;; --lt-*) \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2 exit 1 ;; esac done # Print the debug banner immediately: if test -n \"\$lt_option_debug\"; then echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2 fi } # Used when --lt-debug. Prints its arguments to stdout # (redirection is the responsibility of the caller) func_lt_dump_args () { lt_dump_args_N=1; for lt_arg do \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\" lt_dump_args_N=\`expr \$lt_dump_args_N + 1\` done } # Core function for launching the target application func_exec_program_core () { " case $host in # Backslashes separate directories on plain windows *-*-mingw | *-*-os2* | *-cegcc*) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir\\\\\$program\" \${1+\"\$@\"} " ;; *) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir/\$program\" \${1+\"\$@\"} " ;; esac $ECHO "\ \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2 exit 1 } # A function to encapsulate launching the target application # Strips options in the --lt-* namespace from \$@ and # launches target application with the remaining arguments. func_exec_program () { case \" \$* \" in *\\ --lt-*) for lt_wr_arg do case \$lt_wr_arg in --lt-*) ;; *) set x \"\$@\" \"\$lt_wr_arg\"; shift;; esac shift done ;; esac func_exec_program_core \${1+\"\$@\"} } # Parse options func_parse_lt_options \"\$0\" \${1+\"\$@\"} # Find the directory that this script lives in. thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\` test \"x\$thisdir\" = \"x\$file\" && thisdir=. # Follow symbolic links until we get to the real thisdir. file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\` while test -n \"\$file\"; do destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\` # If there was a directory component, then change thisdir. if test \"x\$destdir\" != \"x\$file\"; then case \"\$destdir\" in [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;; *) thisdir=\"\$thisdir/\$destdir\" ;; esac fi file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\` file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\` done # Usually 'no', except on cygwin/mingw when embedded into # the cwrapper. WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1 if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then # special case for '.' if test \"\$thisdir\" = \".\"; then thisdir=\`pwd\` fi # remove .libs from thisdir case \"\$thisdir\" in *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;; $objdir ) thisdir=. ;; esac fi # Try to get the absolute directory name. absdir=\`cd \"\$thisdir\" && pwd\` test -n \"\$absdir\" && thisdir=\"\$absdir\" " if test yes = "$fast_install"; then $ECHO "\ program=lt-'$outputname'$exeext progdir=\"\$thisdir/$objdir\" if test ! -f \"\$progdir/\$program\" || { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\ test \"X\$file\" != \"X\$progdir/\$program\"; }; then file=\"\$\$-\$program\" if test ! -d \"\$progdir\"; then $MKDIR \"\$progdir\" else $RM \"\$progdir/\$file\" fi" $ECHO "\ # relink executable if necessary if test -n \"\$relink_command\"; then if relink_command_output=\`eval \$relink_command 2>&1\`; then : else \$ECHO \"\$relink_command_output\" >&2 $RM \"\$progdir/\$file\" exit 1 fi fi $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null || { $RM \"\$progdir/\$program\"; $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; } $RM \"\$progdir/\$file\" fi" else $ECHO "\ program='$outputname' progdir=\"\$thisdir/$objdir\" " fi $ECHO "\ if test -f \"\$progdir/\$program\"; then" # fixup the dll searchpath if we need to. # # Fix the DLL searchpath if we need to. Do this before prepending # to shlibpath, because on Windows, both are PATH and uninstalled # libraries must come first. if test -n "$dllsearchpath"; then $ECHO "\ # Add the dll search path components to the executable PATH PATH=$dllsearchpath:\$PATH " fi # Export our shlibpath_var if we have one. if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then $ECHO "\ # Add our own library path to $shlibpath_var $shlibpath_var=\"$temp_rpath\$$shlibpath_var\" # Some systems cannot cope with colon-terminated $shlibpath_var # The second colon is a workaround for a bug in BeOS R4 sed $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\` export $shlibpath_var " fi $ECHO "\ if test \"\$libtool_execute_magic\" != \"$magic\"; then # Run the actual program with our arguments. func_exec_program \${1+\"\$@\"} fi else # The program doesn't exist. \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2 \$ECHO \"This script is just a wrapper for \$program.\" 1>&2 \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2 exit 1 fi fi\ " } # func_emit_cwrapperexe_src # emit the source code for a wrapper executable on stdout # Must ONLY be called from within func_mode_link because # it depends on a number of variable set therein. func_emit_cwrapperexe_src () { cat < #include #ifdef _MSC_VER # include # include # include #else # include # include # ifdef __CYGWIN__ # include # endif #endif #include #include #include #include #include #include #include #include #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* declarations of non-ANSI functions */ #if defined __MINGW32__ # ifdef __STRICT_ANSI__ int _putenv (const char *); # endif #elif defined __CYGWIN__ # ifdef __STRICT_ANSI__ char *realpath (const char *, char *); int putenv (char *); int setenv (const char *, const char *, int); # endif /* #elif defined other_platform || defined ... */ #endif /* portability defines, excluding path handling macros */ #if defined _MSC_VER # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv # define S_IXUSR _S_IEXEC #elif defined __MINGW32__ # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv #elif defined __CYGWIN__ # define HAVE_SETENV # define FOPEN_WB "wb" /* #elif defined other platforms ... */ #endif #if defined PATH_MAX # define LT_PATHMAX PATH_MAX #elif defined MAXPATHLEN # define LT_PATHMAX MAXPATHLEN #else # define LT_PATHMAX 1024 #endif #ifndef S_IXOTH # define S_IXOTH 0 #endif #ifndef S_IXGRP # define S_IXGRP 0 #endif /* path handling portability macros */ #ifndef DIR_SEPARATOR # define DIR_SEPARATOR '/' # define PATH_SEPARATOR ':' #endif #if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \ defined __OS2__ # define HAVE_DOS_BASED_FILE_SYSTEM # define FOPEN_WB "wb" # ifndef DIR_SEPARATOR_2 # define DIR_SEPARATOR_2 '\\' # endif # ifndef PATH_SEPARATOR_2 # define PATH_SEPARATOR_2 ';' # endif #endif #ifndef DIR_SEPARATOR_2 # define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR) #else /* DIR_SEPARATOR_2 */ # define IS_DIR_SEPARATOR(ch) \ (((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2)) #endif /* DIR_SEPARATOR_2 */ #ifndef PATH_SEPARATOR_2 # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR) #else /* PATH_SEPARATOR_2 */ # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2) #endif /* PATH_SEPARATOR_2 */ #ifndef FOPEN_WB # define FOPEN_WB "w" #endif #ifndef _O_BINARY # define _O_BINARY 0 #endif #define XMALLOC(type, num) ((type *) xmalloc ((num) * sizeof(type))) #define XFREE(stale) do { \ if (stale) { free (stale); stale = 0; } \ } while (0) #if defined LT_DEBUGWRAPPER static int lt_debug = 1; #else static int lt_debug = 0; #endif const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */ void *xmalloc (size_t num); char *xstrdup (const char *string); const char *base_name (const char *name); char *find_executable (const char *wrapper); char *chase_symlinks (const char *pathspec); int make_executable (const char *path); int check_executable (const char *path); char *strendzap (char *str, const char *pat); void lt_debugprintf (const char *file, int line, const char *fmt, ...); void lt_fatal (const char *file, int line, const char *message, ...); static const char *nonnull (const char *s); static const char *nonempty (const char *s); void lt_setenv (const char *name, const char *value); char *lt_extend_str (const char *orig_value, const char *add, int to_end); void lt_update_exe_path (const char *name, const char *value); void lt_update_lib_path (const char *name, const char *value); char **prepare_spawn (char **argv); void lt_dump_script (FILE *f); EOF cat <= 0) && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))) return 1; else return 0; } int make_executable (const char *path) { int rval = 0; struct stat st; lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n", nonempty (path)); if ((!path) || (!*path)) return 0; if (stat (path, &st) >= 0) { rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR); } return rval; } /* Searches for the full path of the wrapper. Returns newly allocated full path name if found, NULL otherwise Does not chase symlinks, even on platforms that support them. */ char * find_executable (const char *wrapper) { int has_slash = 0; const char *p; const char *p_next; /* static buffer for getcwd */ char tmp[LT_PATHMAX + 1]; size_t tmp_len; char *concat_name; lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n", nonempty (wrapper)); if ((wrapper == NULL) || (*wrapper == '\0')) return NULL; /* Absolute path? */ #if defined HAVE_DOS_BASED_FILE_SYSTEM if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':') { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } else { #endif if (IS_DIR_SEPARATOR (wrapper[0])) { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } #if defined HAVE_DOS_BASED_FILE_SYSTEM } #endif for (p = wrapper; *p; p++) if (*p == '/') { has_slash = 1; break; } if (!has_slash) { /* no slashes; search PATH */ const char *path = getenv ("PATH"); if (path != NULL) { for (p = path; *p; p = p_next) { const char *q; size_t p_len; for (q = p; *q; q++) if (IS_PATH_SEPARATOR (*q)) break; p_len = (size_t) (q - p); p_next = (*q == '\0' ? q : q + 1); if (p_len == 0) { /* empty path: current directory */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); } else { concat_name = XMALLOC (char, p_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, p, p_len); concat_name[p_len] = '/'; strcpy (concat_name + p_len + 1, wrapper); } if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } } /* not found in PATH; assume curdir */ } /* Relative path | not found in path: prepend cwd */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); return NULL; } char * chase_symlinks (const char *pathspec) { #ifndef S_ISLNK return xstrdup (pathspec); #else char buf[LT_PATHMAX]; struct stat s; char *tmp_pathspec = xstrdup (pathspec); char *p; int has_symlinks = 0; while (strlen (tmp_pathspec) && !has_symlinks) { lt_debugprintf (__FILE__, __LINE__, "checking path component for symlinks: %s\n", tmp_pathspec); if (lstat (tmp_pathspec, &s) == 0) { if (S_ISLNK (s.st_mode) != 0) { has_symlinks = 1; break; } /* search backwards for last DIR_SEPARATOR */ p = tmp_pathspec + strlen (tmp_pathspec) - 1; while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) p--; if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) { /* no more DIR_SEPARATORS left */ break; } *p = '\0'; } else { lt_fatal (__FILE__, __LINE__, "error accessing file \"%s\": %s", tmp_pathspec, nonnull (strerror (errno))); } } XFREE (tmp_pathspec); if (!has_symlinks) { return xstrdup (pathspec); } tmp_pathspec = realpath (pathspec, buf); if (tmp_pathspec == 0) { lt_fatal (__FILE__, __LINE__, "could not follow symlinks for %s", pathspec); } return xstrdup (tmp_pathspec); #endif } char * strendzap (char *str, const char *pat) { size_t len, patlen; assert (str != NULL); assert (pat != NULL); len = strlen (str); patlen = strlen (pat); if (patlen <= len) { str += len - patlen; if (STREQ (str, pat)) *str = '\0'; } return str; } void lt_debugprintf (const char *file, int line, const char *fmt, ...) { va_list args; if (lt_debug) { (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line); va_start (args, fmt); (void) vfprintf (stderr, fmt, args); va_end (args); } } static void lt_error_core (int exit_status, const char *file, int line, const char *mode, const char *message, va_list ap) { fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode); vfprintf (stderr, message, ap); fprintf (stderr, ".\n"); if (exit_status >= 0) exit (exit_status); } void lt_fatal (const char *file, int line, const char *message, ...) { va_list ap; va_start (ap, message); lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap); va_end (ap); } static const char * nonnull (const char *s) { return s ? s : "(null)"; } static const char * nonempty (const char *s) { return (s && !*s) ? "(empty)" : nonnull (s); } void lt_setenv (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_setenv) setting '%s' to '%s'\n", nonnull (name), nonnull (value)); { #ifdef HAVE_SETENV /* always make a copy, for consistency with !HAVE_SETENV */ char *str = xstrdup (value); setenv (name, str, 1); #else size_t len = strlen (name) + 1 + strlen (value) + 1; char *str = XMALLOC (char, len); sprintf (str, "%s=%s", name, value); if (putenv (str) != EXIT_SUCCESS) { XFREE (str); } #endif } } char * lt_extend_str (const char *orig_value, const char *add, int to_end) { char *new_value; if (orig_value && *orig_value) { size_t orig_value_len = strlen (orig_value); size_t add_len = strlen (add); new_value = XMALLOC (char, add_len + orig_value_len + 1); if (to_end) { strcpy (new_value, orig_value); strcpy (new_value + orig_value_len, add); } else { strcpy (new_value, add); strcpy (new_value + add_len, orig_value); } } else { new_value = xstrdup (add); } return new_value; } void lt_update_exe_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_exe_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); /* some systems can't cope with a ':'-terminated path #' */ size_t len = strlen (new_value); while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1])) { new_value[--len] = '\0'; } lt_setenv (name, new_value); XFREE (new_value); } } void lt_update_lib_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_lib_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); lt_setenv (name, new_value); XFREE (new_value); } } EOF case $host_os in mingw*) cat <<"EOF" /* Prepares an argument vector before calling spawn(). Note that spawn() does not by itself call the command interpreter (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") : ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); GetVersionEx(&v); v.dwPlatformId == VER_PLATFORM_WIN32_NT; }) ? "cmd.exe" : "command.com"). Instead it simply concatenates the arguments, separated by ' ', and calls CreateProcess(). We must quote the arguments since Win32 CreateProcess() interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a special way: - Space and tab are interpreted as delimiters. They are not treated as delimiters if they are surrounded by double quotes: "...". - Unescaped double quotes are removed from the input. Their only effect is that within double quotes, space and tab are treated like normal characters. - Backslashes not followed by double quotes are not special. - But 2*n+1 backslashes followed by a double quote become n backslashes followed by a double quote (n >= 0): \" -> " \\\" -> \" \\\\\" -> \\" */ #define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" #define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" char ** prepare_spawn (char **argv) { size_t argc; char **new_argv; size_t i; /* Count number of arguments. */ for (argc = 0; argv[argc] != NULL; argc++) ; /* Allocate new argument vector. */ new_argv = XMALLOC (char *, argc + 1); /* Put quoted arguments into the new argument vector. */ for (i = 0; i < argc; i++) { const char *string = argv[i]; if (string[0] == '\0') new_argv[i] = xstrdup ("\"\""); else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL) { int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL); size_t length; unsigned int backslashes; const char *s; char *quoted_string; char *p; length = 0; backslashes = 0; if (quote_around) length++; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') length += backslashes + 1; length++; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) length += backslashes + 1; quoted_string = XMALLOC (char, length + 1); p = quoted_string; backslashes = 0; if (quote_around) *p++ = '"'; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') { unsigned int j; for (j = backslashes + 1; j > 0; j--) *p++ = '\\'; } *p++ = c; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) { unsigned int j; for (j = backslashes; j > 0; j--) *p++ = '\\'; *p++ = '"'; } *p = '\0'; new_argv[i] = quoted_string; } else new_argv[i] = (char *) string; } new_argv[argc] = NULL; return new_argv; } EOF ;; esac cat <<"EOF" void lt_dump_script (FILE* f) { EOF func_emit_wrapper yes | $SED -n -e ' s/^\(.\{79\}\)\(..*\)/\1\ \2/ h s/\([\\"]\)/\\\1/g s/$/\\n/ s/\([^\n]*\).*/ fputs ("\1", f);/p g D' cat <<"EOF" } EOF } # end: func_emit_cwrapperexe_src # func_win32_import_lib_p ARG # True if ARG is an import lib, as indicated by $file_magic_cmd func_win32_import_lib_p () { $debug_cmd case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in *import*) : ;; *) false ;; esac } # func_suncc_cstd_abi # !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!! # Several compiler flags select an ABI that is incompatible with the # Cstd library. Avoid specifying it if any are in CXXFLAGS. func_suncc_cstd_abi () { $debug_cmd case " $compile_command " in *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*) suncc_use_cstd_abi=no ;; *) suncc_use_cstd_abi=yes ;; esac } # func_mode_link arg... func_mode_link () { $debug_cmd case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) # It is impossible to link a dll without this setting, and # we shouldn't force the makefile maintainer to figure out # what system we are compiling for in order to pass an extra # flag for every libtool invocation. # allow_undefined=no # FIXME: Unfortunately, there are problems with the above when trying # to make a dll that has undefined symbols, in which case not # even a static library is built. For now, we need to specify # -no-undefined on the libtool link line when we can be certain # that all symbols are satisfied, otherwise we get a static library. allow_undefined=yes ;; *) allow_undefined=yes ;; esac libtool_args=$nonopt base_compile="$nonopt $@" compile_command=$nonopt finalize_command=$nonopt compile_rpath= finalize_rpath= compile_shlibpath= finalize_shlibpath= convenience= old_convenience= deplibs= old_deplibs= compiler_flags= linker_flags= dllsearchpath= lib_search_path=`pwd` inst_prefix_dir= new_inherited_linker_flags= avoid_version=no bindir= dlfiles= dlprefiles= dlself=no export_dynamic=no export_symbols= export_symbols_regex= generated= libobjs= ltlibs= module=no no_install=no objs= os2dllname= non_pic_objects= precious_files_regex= prefer_static_libs=no preload=false prev= prevarg= release= rpath= xrpath= perm_rpath= temp_rpath= thread_safe=no vinfo= vinfo_number=no weak_libs= single_module=$wl-single_module func_infer_tag $base_compile # We need to know -static, to get the right output filenames. for arg do case $arg in -shared) test yes != "$build_libtool_libs" \ && func_fatal_configuration "cannot build a shared library" build_old_libs=no break ;; -all-static | -static | -static-libtool-libs) case $arg in -all-static) if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then func_warning "complete static linking is impossible in this configuration" fi if test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; -static) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=built ;; -static-libtool-libs) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; esac build_libtool_libs=no build_old_libs=yes break ;; esac done # See if our shared archives depend on static archives. test -n "$old_archive_from_new_cmds" && build_old_libs=yes # Go through the arguments, transforming them on the way. while test "$#" -gt 0; do arg=$1 shift func_quote_for_eval "$arg" qarg=$func_quote_for_eval_unquoted_result func_append libtool_args " $func_quote_for_eval_result" # If the previous option needs an argument, assign it. if test -n "$prev"; then case $prev in output) func_append compile_command " @OUTPUT@" func_append finalize_command " @OUTPUT@" ;; esac case $prev in bindir) bindir=$arg prev= continue ;; dlfiles|dlprefiles) $preload || { # Add the symbol object into the linking commands. func_append compile_command " @SYMFILE@" func_append finalize_command " @SYMFILE@" preload=: } case $arg in *.la | *.lo) ;; # We handle these cases below. force) if test no = "$dlself"; then dlself=needless export_dynamic=yes fi prev= continue ;; self) if test dlprefiles = "$prev"; then dlself=yes elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then dlself=yes else dlself=needless export_dynamic=yes fi prev= continue ;; *) if test dlfiles = "$prev"; then func_append dlfiles " $arg" else func_append dlprefiles " $arg" fi prev= continue ;; esac ;; expsyms) export_symbols=$arg test -f "$arg" \ || func_fatal_error "symbol file '$arg' does not exist" prev= continue ;; expsyms_regex) export_symbols_regex=$arg prev= continue ;; framework) case $host in *-*-darwin*) case "$deplibs " in *" $qarg.ltframework "*) ;; *) func_append deplibs " $qarg.ltframework" # this is fixed later ;; esac ;; esac prev= continue ;; inst_prefix) inst_prefix_dir=$arg prev= continue ;; mllvm) # Clang does not use LLVM to link, so we can simply discard any # '-mllvm $arg' options when doing the link step. prev= continue ;; objectlist) if test -f "$arg"; then save_arg=$arg moreargs= for fil in `cat "$save_arg"` do # func_append moreargs " $fil" arg=$fil # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result if test none != "$pic_object"; then # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object fi # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi done else func_fatal_error "link input file '$arg' does not exist" fi arg=$save_arg prev= continue ;; os2dllname) os2dllname=$arg prev= continue ;; precious_regex) precious_files_regex=$arg prev= continue ;; release) release=-$arg prev= continue ;; rpath | xrpath) # We need an absolute path. case $arg in [\\/]* | [A-Za-z]:[\\/]*) ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac if test rpath = "$prev"; then case "$rpath " in *" $arg "*) ;; *) func_append rpath " $arg" ;; esac else case "$xrpath " in *" $arg "*) ;; *) func_append xrpath " $arg" ;; esac fi prev= continue ;; shrext) shrext_cmds=$arg prev= continue ;; weak) func_append weak_libs " $arg" prev= continue ;; xcclinker) func_append linker_flags " $qarg" func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xcompiler) func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xlinker) func_append linker_flags " $qarg" func_append compiler_flags " $wl$qarg" prev= func_append compile_command " $wl$qarg" func_append finalize_command " $wl$qarg" continue ;; *) eval "$prev=\"\$arg\"" prev= continue ;; esac fi # test -n "$prev" prevarg=$arg case $arg in -all-static) if test -n "$link_static_flag"; then # See comment for -static flag below, for more details. func_append compile_command " $link_static_flag" func_append finalize_command " $link_static_flag" fi continue ;; -allow-undefined) # FIXME: remove this flag sometime in the future. func_fatal_error "'-allow-undefined' must not be used because it is the default" ;; -avoid-version) avoid_version=yes continue ;; -bindir) prev=bindir continue ;; -dlopen) prev=dlfiles continue ;; -dlpreopen) prev=dlprefiles continue ;; -export-dynamic) export_dynamic=yes continue ;; -export-symbols | -export-symbols-regex) if test -n "$export_symbols" || test -n "$export_symbols_regex"; then func_fatal_error "more than one -exported-symbols argument is not allowed" fi if test X-export-symbols = "X$arg"; then prev=expsyms else prev=expsyms_regex fi continue ;; -framework) prev=framework continue ;; -inst-prefix-dir) prev=inst_prefix continue ;; # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:* # so, if we see these flags be careful not to treat them like -L -L[A-Z][A-Z]*:*) case $with_gcc/$host in no/*-*-irix* | /*-*-irix*) func_append compile_command " $arg" func_append finalize_command " $arg" ;; esac continue ;; -L*) func_stripname "-L" '' "$arg" if test -z "$func_stripname_result"; then if test "$#" -gt 0; then func_fatal_error "require no space between '-L' and '$1'" else func_fatal_error "need path for '-L' option" fi fi func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) absdir=`cd "$dir" && pwd` test -z "$absdir" && \ func_fatal_error "cannot determine absolute directory name of '$dir'" dir=$absdir ;; esac case "$deplibs " in *" -L$dir "* | *" $arg "*) # Will only happen for absolute or sysroot arguments ;; *) # Preserve sysroot, but never include relative directories case $dir in [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;; *) func_append deplibs " -L$dir" ;; esac func_append lib_search_path " $dir" ;; esac case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'` case :$dllsearchpath: in *":$dir:"*) ;; ::) dllsearchpath=$dir;; *) func_append dllsearchpath ":$dir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac continue ;; -l*) if test X-lc = "X$arg" || test X-lm = "X$arg"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*) # These systems don't actually have a C or math library (as such) continue ;; *-*-os2*) # These systems don't actually have a C library (as such) test X-lc = "X$arg" && continue ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig*) # Do not include libc due to us having libc/libc_r. test X-lc = "X$arg" && continue ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C and math libraries are in the System framework func_append deplibs " System.ltframework" continue ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype test X-lc = "X$arg" && continue ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work test X-lc = "X$arg" && continue ;; esac elif test X-lc_r = "X$arg"; then case $host in *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig*) # Do not include libc_r directly, use -pthread flag. continue ;; esac fi func_append deplibs " $arg" continue ;; -mllvm) prev=mllvm continue ;; -module) module=yes continue ;; # Tru64 UNIX uses -model [arg] to determine the layout of C++ # classes, name mangling, and exception handling. # Darwin uses the -arch flag to determine output architecture. -model|-arch|-isysroot|--sysroot) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" prev=xcompiler continue ;; -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case "$new_inherited_linker_flags " in *" $arg "*) ;; * ) func_append new_inherited_linker_flags " $arg" ;; esac continue ;; -multi_module) single_module=$wl-multi_module continue ;; -no-fast-install) fast_install=no continue ;; -no-install) case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*) # The PATH hackery in wrapper scripts is required on Windows # and Darwin in order for the loader to find any dlls it needs. func_warning "'-no-install' is ignored for $host" func_warning "assuming '-no-fast-install' instead" fast_install=no ;; *) no_install=yes ;; esac continue ;; -no-undefined) allow_undefined=no continue ;; -objectlist) prev=objectlist continue ;; -os2dllname) prev=os2dllname continue ;; -o) prev=output ;; -precious-files-regex) prev=precious_regex continue ;; -release) prev=release continue ;; -rpath) prev=rpath continue ;; -R) prev=xrpath continue ;; -R*) func_stripname '-R' '' "$arg" dir=$func_stripname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; =*) func_stripname '=' '' "$dir" dir=$lt_sysroot$func_stripname_result ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac continue ;; -shared) # The effects of -shared are defined in a previous loop. continue ;; -shrext) prev=shrext continue ;; -static | -static-libtool-libs) # The effects of -static are defined in a previous loop. # We used to do the same as -all-static on platforms that # didn't have a PIC flag, but the assumption that the effects # would be equivalent was wrong. It would break on at least # Digital Unix and AIX. continue ;; -thread-safe) thread_safe=yes continue ;; -version-info) prev=vinfo continue ;; -version-number) prev=vinfo vinfo_number=yes continue ;; -weak) prev=weak continue ;; -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_for_eval "$flag" func_append arg " $func_quote_for_eval_result" func_append compiler_flags " $func_quote_for_eval_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Wl,*) func_stripname '-Wl,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_for_eval "$flag" func_append arg " $wl$func_quote_for_eval_result" func_append compiler_flags " $wl$func_quote_for_eval_result" func_append linker_flags " $func_quote_for_eval_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Xcompiler) prev=xcompiler continue ;; -Xlinker) prev=xlinker continue ;; -XCClinker) prev=xcclinker continue ;; # -msg_* for osf cc -msg_*) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; # Flags to be passed through unchanged, with rationale: # -64, -mips[0-9] enable 64-bit mode for the SGI compiler # -r[0-9][0-9]* specify processor for the SGI compiler # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler # +DA*, +DD* enable 64-bit mode for the HP compiler # -q* compiler args for the IBM compiler # -m*, -t[45]*, -txscale* architecture-specific flags for GCC # -F/path path to uninstalled frameworks, gcc on darwin # -p, -pg, --coverage, -fprofile-* profiling flags for GCC # -fstack-protector* stack protector flags for GCC # @file GCC response files # -tp=* Portland pgcc target processor selection # --sysroot=* for sysroot support # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization # -specs=* GCC specs files # -stdlib=* select c++ std lib with clang # -fsanitize=* Clang/GCC memory and address sanitizer # -fuse-ld=* Linker select flags for GCC # -static-* direct GCC to link specific libraries statically # -fcilkplus Cilk Plus language extension features for C/C++ -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \ -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \ -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \ -specs=*|-fsanitize=*|-fuse-ld=*|-static-*|-fcilkplus) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result func_append compile_command " $arg" func_append finalize_command " $arg" func_append compiler_flags " $arg" continue ;; -Z*) if test os2 = "`expr $host : '.*\(os2\)'`"; then # OS/2 uses -Zxxx to specify OS/2-specific options compiler_flags="$compiler_flags $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case $arg in -Zlinker | -Zstack) prev=xcompiler ;; esac continue else # Otherwise treat like 'Some other compiler flag' below func_quote_for_eval "$arg" arg=$func_quote_for_eval_result fi ;; # Some other compiler flag. -* | +*) func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; *.$objext) # A standard object. func_append objs " $arg" ;; *.lo) # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result test none = "$pic_object" || { # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object } # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi ;; *.$libext) # An archive. func_append deplibs " $arg" func_append old_deplibs " $arg" continue ;; *.la) # A libtool-controlled library. func_resolve_sysroot "$arg" if test dlfiles = "$prev"; then # This library was specified with -dlopen. func_append dlfiles " $func_resolve_sysroot_result" prev= elif test dlprefiles = "$prev"; then # The library was specified with -dlpreopen. func_append dlprefiles " $func_resolve_sysroot_result" prev= else func_append deplibs " $func_resolve_sysroot_result" fi continue ;; # Some other compiler argument. *) # Unknown arguments in both finalize_command and compile_command need # to be aesthetically quoted because they are evaled later. func_quote_for_eval "$arg" arg=$func_quote_for_eval_result ;; esac # arg # Now actually substitute the argument into the commands. if test -n "$arg"; then func_append compile_command " $arg" func_append finalize_command " $arg" fi done # argument parsing loop test -n "$prev" && \ func_fatal_help "the '$prevarg' option requires an argument" if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then eval arg=\"$export_dynamic_flag_spec\" func_append compile_command " $arg" func_append finalize_command " $arg" fi oldlibs= # calculate the name of the file, without its directory func_basename "$output" outputname=$func_basename_result libobjs_save=$libobjs if test -n "$shlibpath_var"; then # get the directories listed in $shlibpath_var eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\` else shlib_search_path= fi eval sys_lib_search_path=\"$sys_lib_search_path_spec\" eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\" # Definition is injected by LT_CONFIG during libtool generation. func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH" func_dirname "$output" "/" "" output_objdir=$func_dirname_result$objdir func_to_tool_file "$output_objdir/" tool_output_objdir=$func_to_tool_file_result # Create the object directory. func_mkdir_p "$output_objdir" # Determine the type of output case $output in "") func_fatal_help "you must specify an output file" ;; *.$libext) linkmode=oldlib ;; *.lo | *.$objext) linkmode=obj ;; *.la) linkmode=lib ;; *) linkmode=prog ;; # Anything else should be a program. esac specialdeplibs= libs= # Find all interdependent deplibs by searching for libraries # that are linked more than once (e.g. -la -lb -la) for deplib in $deplibs; do if $opt_preserve_dup_deps; then case "$libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append libs " $deplib" done if test lib = "$linkmode"; then libs="$predeps $libs $compiler_lib_search_path $postdeps" # Compute libraries that are listed more than once in $predeps # $postdeps and mark them as special (i.e., whose duplicates are # not to be eliminated). pre_post_deps= if $opt_duplicate_compiler_generated_deps; then for pre_post_dep in $predeps $postdeps; do case "$pre_post_deps " in *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;; esac func_append pre_post_deps " $pre_post_dep" done fi pre_post_deps= fi deplibs= newdependency_libs= newlib_search_path= need_relink=no # whether we're linking any uninstalled libtool libraries notinst_deplibs= # not-installed libtool libraries notinst_path= # paths that contain not-installed libtool libraries case $linkmode in lib) passes="conv dlpreopen link" for file in $dlfiles $dlprefiles; do case $file in *.la) ;; *) func_fatal_help "libraries can '-dlopen' only libtool libraries: $file" ;; esac done ;; prog) compile_deplibs= finalize_deplibs= alldeplibs=false newdlfiles= newdlprefiles= passes="conv scan dlopen dlpreopen link" ;; *) passes="conv" ;; esac for pass in $passes; do # The preopen pass in lib mode reverses $deplibs; put it back here # so that -L comes before libs that need it for instance... if test lib,link = "$linkmode,$pass"; then ## FIXME: Find the place where the list is rebuilt in the wrong ## order, and fix it there properly tmp_deplibs= for deplib in $deplibs; do tmp_deplibs="$deplib $tmp_deplibs" done deplibs=$tmp_deplibs fi if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass"; then libs=$deplibs deplibs= fi if test prog = "$linkmode"; then case $pass in dlopen) libs=$dlfiles ;; dlpreopen) libs=$dlprefiles ;; link) libs="$deplibs %DEPLIBS%" test "X$link_all_deplibs" != Xno && libs="$libs $dependency_libs" ;; esac fi if test lib,dlpreopen = "$linkmode,$pass"; then # Collect and forward deplibs of preopened libtool libs for lib in $dlprefiles; do # Ignore non-libtool-libs dependency_libs= func_resolve_sysroot "$lib" case $lib in *.la) func_source "$func_resolve_sysroot_result" ;; esac # Collect preopened libtool deplibs, except any this library # has declared as weak libs for deplib in $dependency_libs; do func_basename "$deplib" deplib_base=$func_basename_result case " $weak_libs " in *" $deplib_base "*) ;; *) func_append deplibs " $deplib" ;; esac done done libs=$dlprefiles fi if test dlopen = "$pass"; then # Collect dlpreopened libraries save_deplibs=$deplibs deplibs= fi for deplib in $libs; do lib= found=false case $deplib in -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append compiler_flags " $deplib" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -l*) if test lib != "$linkmode" && test prog != "$linkmode"; then func_warning "'-l' is ignored for archives/objects" continue fi func_stripname '-l' '' "$deplib" name=$func_stripname_result if test lib = "$linkmode"; then searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path" else searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path" fi for searchdir in $searchdirs; do for search_ext in .la $std_shrext .so .a; do # Search the libtool library lib=$searchdir/lib$name$search_ext if test -f "$lib"; then if test .la = "$search_ext"; then found=: else found=false fi break 2 fi done done if $found; then # deplib is a libtool library # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib, # We need to do some special things here, and not later. if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $deplib "*) if func_lalib_p "$lib"; then library_names= old_library= func_source "$lib" for l in $old_library $library_names; do ll=$l done if test "X$ll" = "X$old_library"; then # only static version available found=false func_dirname "$lib" "" "." ladir=$func_dirname_result lib=$ladir/$old_library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi fi ;; *) ;; esac fi else # deplib doesn't seem to be a libtool library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi ;; # -l *.ltframework) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -L*) case $linkmode in lib) deplibs="$deplib $deplibs" test conv = "$pass" && continue newdependency_libs="$deplib $newdependency_libs" func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; prog) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi if test scan = "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; *) func_warning "'-L' is ignored for archives/objects" ;; esac # linkmode continue ;; # -L -R*) if test link = "$pass"; then func_stripname '-R' '' "$deplib" func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # Make sure the xrpath contains only unique directories. case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac fi deplibs="$deplib $deplibs" continue ;; *.la) func_resolve_sysroot "$deplib" lib=$func_resolve_sysroot_result ;; *.$libext) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi case $linkmode in lib) # Linking convenience modules into shared libraries is allowed, # but linking other static libraries is non-portable. case " $dlpreconveniencelibs " in *" $deplib "*) ;; *) valid_a_lib=false case $deplibs_check_method in match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \ | $EGREP "$match_pattern_regex" > /dev/null; then valid_a_lib=: fi ;; pass_all) valid_a_lib=: ;; esac if $valid_a_lib; then echo $ECHO "*** Warning: Linking the shared library $output against the" $ECHO "*** static library $deplib is not portable!" deplibs="$deplib $deplibs" else echo $ECHO "*** Warning: Trying to link with static lib archive $deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because the file extensions .$libext of this argument makes me believe" echo "*** that it is just a static archive that I should not use here." fi ;; esac continue ;; prog) if test link != "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi continue ;; esac # linkmode ;; # *.$libext *.lo | *.$objext) if test conv = "$pass"; then deplibs="$deplib $deplibs" elif test prog = "$linkmode"; then if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then # If there is no dlopen support or we're linking statically, # we need to preload. func_append newdlprefiles " $deplib" compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append newdlfiles " $deplib" fi fi continue ;; %DEPLIBS%) alldeplibs=: continue ;; esac # case $deplib $found || test -f "$lib" \ || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'" # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$lib" \ || func_fatal_error "'$lib' is not a valid libtool archive" func_dirname "$lib" "" "." ladir=$func_dirname_result dlname= dlopen= dlpreopen= libdir= library_names= old_library= inherited_linker_flags= # If the library was installed with an old release of libtool, # it will not redefine variables installed, or shouldnotlink installed=yes shouldnotlink=no avoidtemprpath= # Read the .la file func_source "$lib" # Convert "-framework foo" to "foo.ltframework" if test -n "$inherited_linker_flags"; then tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'` for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do case " $new_inherited_linker_flags " in *" $tmp_inherited_linker_flag "*) ;; *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";; esac done fi dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass" || { test prog != "$linkmode" && test lib != "$linkmode"; }; then test -n "$dlopen" && func_append dlfiles " $dlopen" test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen" fi if test conv = "$pass"; then # Only check for convenience libraries deplibs="$lib $deplibs" if test -z "$libdir"; then if test -z "$old_library"; then func_fatal_error "cannot find name of link library for '$lib'" fi # It is a libtool convenience library, so add in its objects. func_append convenience " $ladir/$objdir/$old_library" func_append old_convenience " $ladir/$objdir/$old_library" tmp_libs= for deplib in $dependency_libs; do deplibs="$deplib $deplibs" if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done elif test prog != "$linkmode" && test lib != "$linkmode"; then func_fatal_error "'$lib' is not a convenience library" fi continue fi # $pass = conv # Get the name of the library we link against. linklib= if test -n "$old_library" && { test yes = "$prefer_static_libs" || test built,no = "$prefer_static_libs,$installed"; }; then linklib=$old_library else for l in $old_library $library_names; do linklib=$l done fi if test -z "$linklib"; then func_fatal_error "cannot find name of link library for '$lib'" fi # This library was specified with -dlopen. if test dlopen = "$pass"; then test -z "$libdir" \ && func_fatal_error "cannot -dlopen a convenience library: '$lib'" if test -z "$dlname" || test yes != "$dlopen_support" || test no = "$build_libtool_libs" then # If there is no dlname, no dlopen support or we're linking # statically, we need to preload. We also need to preload any # dependent libraries so libltdl's deplib preloader doesn't # bomb out in the load deplibs phase. func_append dlprefiles " $lib $dependency_libs" else func_append newdlfiles " $lib" fi continue fi # $pass = dlopen # We need an absolute path. case $ladir in [\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;; *) abs_ladir=`cd "$ladir" && pwd` if test -z "$abs_ladir"; then func_warning "cannot determine absolute directory name of '$ladir'" func_warning "passing it literally to the linker, although it might fail" abs_ladir=$ladir fi ;; esac func_basename "$lib" laname=$func_basename_result # Find the relevant object directory and library name. if test yes = "$installed"; then if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then func_warning "library '$lib' was moved." dir=$ladir absdir=$abs_ladir libdir=$abs_ladir else dir=$lt_sysroot$libdir absdir=$lt_sysroot$libdir fi test yes = "$hardcode_automatic" && avoidtemprpath=yes else if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then dir=$ladir absdir=$abs_ladir # Remove this search path later func_append notinst_path " $abs_ladir" else dir=$ladir/$objdir absdir=$abs_ladir/$objdir # Remove this search path later func_append notinst_path " $abs_ladir" fi fi # $installed = yes func_stripname 'lib' '.la' "$laname" name=$func_stripname_result # This library was specified with -dlpreopen. if test dlpreopen = "$pass"; then if test -z "$libdir" && test prog = "$linkmode"; then func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'" fi case $host in # special handling for platforms with PE-DLLs. *cygwin* | *mingw* | *cegcc* ) # Linker will automatically link against shared library if both # static and shared are present. Therefore, ensure we extract # symbols from the import library if a shared library is present # (otherwise, the dlopen module name will be incorrect). We do # this by putting the import library name into $newdlprefiles. # We recover the dlopen module name by 'saving' the la file # name in a special purpose variable, and (later) extracting the # dlname from the la file. if test -n "$dlname"; then func_tr_sh "$dir/$linklib" eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname" func_append newdlprefiles " $dir/$linklib" else func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" fi ;; * ) # Prefer using a static library (so that no silly _DYNAMIC symbols # are required to link). if test -n "$old_library"; then func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" # Otherwise, use the dlname, so that lt_dlopen finds it. elif test -n "$dlname"; then func_append newdlprefiles " $dir/$dlname" else func_append newdlprefiles " $dir/$linklib" fi ;; esac fi # $pass = dlpreopen if test -z "$libdir"; then # Link the convenience library if test lib = "$linkmode"; then deplibs="$dir/$old_library $deplibs" elif test prog,link = "$linkmode,$pass"; then compile_deplibs="$dir/$old_library $compile_deplibs" finalize_deplibs="$dir/$old_library $finalize_deplibs" else deplibs="$lib $deplibs" # used for prog,scan pass fi continue fi if test prog = "$linkmode" && test link != "$pass"; then func_append newlib_search_path " $ladir" deplibs="$lib $deplibs" linkalldeplibs=false if test no != "$link_all_deplibs" || test -z "$library_names" || test no = "$build_libtool_libs"; then linkalldeplibs=: fi tmp_libs= for deplib in $dependency_libs; do case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; esac # Need to link against all dependency_libs? if $linkalldeplibs; then deplibs="$deplib $deplibs" else # Need to hardcode shared library paths # or/and link against static libraries newdependency_libs="$deplib $newdependency_libs" fi if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done # for deplib continue fi # $linkmode = prog... if test prog,link = "$linkmode,$pass"; then if test -n "$library_names" && { { test no = "$prefer_static_libs" || test built,yes = "$prefer_static_libs,$installed"; } || test -z "$old_library"; }; then # We need to hardcode the library path if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then # Make sure the rpath contains only unique directories. case $temp_rpath: in *"$absdir:"*) ;; *) func_append temp_rpath "$absdir:" ;; esac fi # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi # $linkmode,$pass = prog,link... if $alldeplibs && { test pass_all = "$deplibs_check_method" || { test yes = "$build_libtool_libs" && test -n "$library_names"; }; }; then # We only need to search for static libraries continue fi fi link_static=no # Whether the deplib will be linked statically use_static_libs=$prefer_static_libs if test built = "$use_static_libs" && test yes = "$installed"; then use_static_libs=no fi if test -n "$library_names" && { test no = "$use_static_libs" || test -z "$old_library"; }; then case $host in *cygwin* | *mingw* | *cegcc* | *os2*) # No point in relinking DLLs because paths are not encoded func_append notinst_deplibs " $lib" need_relink=no ;; *) if test no = "$installed"; then func_append notinst_deplibs " $lib" need_relink=yes fi ;; esac # This is a shared library # Warn about portability, can't link against -module's on some # systems (darwin). Don't bleat about dlopened modules though! dlopenmodule= for dlpremoduletest in $dlprefiles; do if test "X$dlpremoduletest" = "X$lib"; then dlopenmodule=$dlpremoduletest break fi done if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then echo if test prog = "$linkmode"; then $ECHO "*** Warning: Linking the executable $output against the loadable module" else $ECHO "*** Warning: Linking the shared library $output against the loadable module" fi $ECHO "*** $linklib is not portable!" fi if test lib = "$linkmode" && test yes = "$hardcode_into_libs"; then # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi if test -n "$old_archive_from_expsyms_cmds"; then # figure out the soname set dummy $library_names shift realname=$1 shift libname=`eval "\\$ECHO \"$libname_spec\""` # use dlname if we got it. it's perfectly good, no? if test -n "$dlname"; then soname=$dlname elif test -n "$soname_spec"; then # bleh windows case $host in *cygwin* | mingw* | *cegcc* | *os2*) func_arith $current - $age major=$func_arith_result versuffix=-$major ;; esac eval soname=\"$soname_spec\" else soname=$realname fi # Make a new name for the extract_expsyms_cmds to use soroot=$soname func_basename "$soroot" soname=$func_basename_result func_stripname 'lib' '.dll' "$soname" newlib=libimp-$func_stripname_result.a # If the library has no export list, then create one now if test -f "$output_objdir/$soname-def"; then : else func_verbose "extracting exported symbol list from '$soname'" func_execute_cmds "$extract_expsyms_cmds" 'exit $?' fi # Create $newlib if test -f "$output_objdir/$newlib"; then :; else func_verbose "generating import library for '$soname'" func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?' fi # make sure the library variables are pointing to the new library dir=$output_objdir linklib=$newlib fi # test -n "$old_archive_from_expsyms_cmds" if test prog = "$linkmode" || test relink != "$opt_mode"; then add_shlibpath= add_dir= add= lib_linked=yes case $hardcode_action in immediate | unsupported) if test no = "$hardcode_direct"; then add=$dir/$linklib case $host in *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;; *-*-sysv4*uw2*) add_dir=-L$dir ;; *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \ *-*-unixware7*) add_dir=-L$dir ;; *-*-darwin* ) # if the lib is a (non-dlopened) module then we cannot # link against it, someone is ignoring the earlier warnings if /usr/bin/file -L $add 2> /dev/null | $GREP ": [^:]* bundle" >/dev/null; then if test "X$dlopenmodule" != "X$lib"; then $ECHO "*** Warning: lib $linklib is a module, not a shared library" if test -z "$old_library"; then echo echo "*** And there doesn't seem to be a static archive available" echo "*** The link will probably fail, sorry" else add=$dir/$old_library fi elif test -n "$old_library"; then add=$dir/$old_library fi fi esac elif test no = "$hardcode_minus_L"; then case $host in *-*-sunos*) add_shlibpath=$dir ;; esac add_dir=-L$dir add=-l$name elif test no = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; relink) if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$dir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$absdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name elif test yes = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; *) lib_linked=no ;; esac if test yes != "$lib_linked"; then func_fatal_configuration "unsupported hardcode properties" fi if test -n "$add_shlibpath"; then case :$compile_shlibpath: in *":$add_shlibpath:"*) ;; *) func_append compile_shlibpath "$add_shlibpath:" ;; esac fi if test prog = "$linkmode"; then test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs" test -n "$add" && compile_deplibs="$add $compile_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" if test yes != "$hardcode_direct" && test yes != "$hardcode_minus_L" && test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac fi fi fi if test prog = "$linkmode" || test relink = "$opt_mode"; then add_shlibpath= add_dir= add= # Finalize command for both is simple: just hardcode it. if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$libdir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$libdir add=-l$name elif test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac add=-l$name elif test yes = "$hardcode_automatic"; then if test -n "$inst_prefix_dir" && test -f "$inst_prefix_dir$libdir/$linklib"; then add=$inst_prefix_dir$libdir/$linklib else add=$libdir/$linklib fi else # We cannot seem to hardcode it, guess we'll fake it. add_dir=-L$libdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name fi if test prog = "$linkmode"; then test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs" test -n "$add" && finalize_deplibs="$add $finalize_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" fi fi elif test prog = "$linkmode"; then # Here we assume that one of hardcode_direct or hardcode_minus_L # is not unsupported. This is valid on all known static and # shared platforms. if test unsupported != "$hardcode_direct"; then test -n "$old_library" && linklib=$old_library compile_deplibs="$dir/$linklib $compile_deplibs" finalize_deplibs="$dir/$linklib $finalize_deplibs" else compile_deplibs="-l$name -L$dir $compile_deplibs" finalize_deplibs="-l$name -L$dir $finalize_deplibs" fi elif test yes = "$build_libtool_libs"; then # Not a shared library if test pass_all != "$deplibs_check_method"; then # We're trying link a shared library against a static one # but the system doesn't support it. # Just print a warning and add the library to dependency_libs so # that the program can be linked against the static library. echo $ECHO "*** Warning: This system cannot link to static lib archive $lib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have." if test yes = "$module"; then echo "*** But as you try to build a module library, libtool will still create " echo "*** a static module, that should work as long as the dlopening application" echo "*** is linked with the -dlopen flag to resolve symbols at runtime." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi else deplibs="$dir/$old_library $deplibs" link_static=yes fi fi # link shared/static library? if test lib = "$linkmode"; then if test -n "$dependency_libs" && { test yes != "$hardcode_into_libs" || test yes = "$build_old_libs" || test yes = "$link_static"; }; then # Extract -R from dependency_libs temp_deplibs= for libdir in $dependency_libs; do case $libdir in -R*) func_stripname '-R' '' "$libdir" temp_xrpath=$func_stripname_result case " $xrpath " in *" $temp_xrpath "*) ;; *) func_append xrpath " $temp_xrpath";; esac;; *) func_append temp_deplibs " $libdir";; esac done dependency_libs=$temp_deplibs fi func_append newlib_search_path " $absdir" # Link against this library test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs" # ... and its dependency_libs tmp_libs= for deplib in $dependency_libs; do newdependency_libs="$deplib $newdependency_libs" case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result";; *) func_resolve_sysroot "$deplib" ;; esac if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $func_resolve_sysroot_result "*) func_append specialdeplibs " $func_resolve_sysroot_result" ;; esac fi func_append tmp_libs " $func_resolve_sysroot_result" done if test no != "$link_all_deplibs"; then # Add the search paths of all dependency libraries for deplib in $dependency_libs; do path= case $deplib in -L*) path=$deplib ;; *.la) func_resolve_sysroot "$deplib" deplib=$func_resolve_sysroot_result func_dirname "$deplib" "" "." dir=$func_dirname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;; *) absdir=`cd "$dir" && pwd` if test -z "$absdir"; then func_warning "cannot determine absolute directory name of '$dir'" absdir=$dir fi ;; esac if $GREP "^installed=no" $deplib > /dev/null; then case $host in *-*-darwin*) depdepl= eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib` if test -n "$deplibrary_names"; then for tmp in $deplibrary_names; do depdepl=$tmp done if test -f "$absdir/$objdir/$depdepl"; then depdepl=$absdir/$objdir/$depdepl darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` if test -z "$darwin_install_name"; then darwin_install_name=`$OTOOL64 -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` fi func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl" func_append linker_flags " -dylib_file $darwin_install_name:$depdepl" path= fi fi ;; *) path=-L$absdir/$objdir ;; esac else eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" test "$absdir" != "$libdir" && \ func_warning "'$deplib' seems to be moved" path=-L$absdir fi ;; esac case " $deplibs " in *" $path "*) ;; *) deplibs="$path $deplibs" ;; esac done fi # link_all_deplibs != no fi # linkmode = lib done # for deplib in $libs if test link = "$pass"; then if test prog = "$linkmode"; then compile_deplibs="$new_inherited_linker_flags $compile_deplibs" finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs" else compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` fi fi dependency_libs=$newdependency_libs if test dlpreopen = "$pass"; then # Link the dlpreopened libraries before other libraries for deplib in $save_deplibs; do deplibs="$deplib $deplibs" done fi if test dlopen != "$pass"; then test conv = "$pass" || { # Make sure lib_search_path contains only unique directories. lib_search_path= for dir in $newlib_search_path; do case "$lib_search_path " in *" $dir "*) ;; *) func_append lib_search_path " $dir" ;; esac done newlib_search_path= } if test prog,link = "$linkmode,$pass"; then vars="compile_deplibs finalize_deplibs" else vars=deplibs fi for var in $vars dependency_libs; do # Add libraries to $var in reverse order eval tmp_libs=\"\$$var\" new_libs= for deplib in $tmp_libs; do # FIXME: Pedantically, this is the right thing to do, so # that some nasty dependency loop isn't accidentally # broken: #new_libs="$deplib $new_libs" # Pragmatically, this seems to cause very few problems in # practice: case $deplib in -L*) new_libs="$deplib $new_libs" ;; -R*) ;; *) # And here is the reason: when a library appears more # than once as an explicit dependence of a library, or # is implicitly linked in more than once by the # compiler, it is considered special, and multiple # occurrences thereof are not removed. Compare this # with having the same library being listed as a # dependency of multiple other libraries: in this case, # we know (pedantically, we assume) the library does not # need to be listed more than once, so we keep only the # last copy. This is not always right, but it is rare # enough that we require users that really mean to play # such unportable linking tricks to link the library # using -Wl,-lname, so that libtool does not consider it # for duplicate removal. case " $specialdeplibs " in *" $deplib "*) new_libs="$deplib $new_libs" ;; *) case " $new_libs " in *" $deplib "*) ;; *) new_libs="$deplib $new_libs" ;; esac ;; esac ;; esac done tmp_libs= for deplib in $new_libs; do case $deplib in -L*) case " $tmp_libs " in *" $deplib "*) ;; *) func_append tmp_libs " $deplib" ;; esac ;; *) func_append tmp_libs " $deplib" ;; esac done eval $var=\"$tmp_libs\" done # for var fi # Add Sun CC postdeps if required: test CXX = "$tagname" && { case $host_os in linux*) case `$CC -V 2>&1 | sed 5q` in *Sun\ C*) # Sun C++ 5.9 func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; solaris*) func_cc_basename "$CC" case $func_cc_basename_result in CC* | sunCC*) func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; esac } # Last step: remove runtime libs from dependency_libs # (they stay in deplibs) tmp_libs= for i in $dependency_libs; do case " $predeps $postdeps $compiler_lib_search_path " in *" $i "*) i= ;; esac if test -n "$i"; then func_append tmp_libs " $i" fi done dependency_libs=$tmp_libs done # for pass if test prog = "$linkmode"; then dlfiles=$newdlfiles fi if test prog = "$linkmode" || test lib = "$linkmode"; then dlprefiles=$newdlprefiles fi case $linkmode in oldlib) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for archives" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for archives" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for archives" test -n "$xrpath" && \ func_warning "'-R' is ignored for archives" test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for archives" test -n "$release" && \ func_warning "'-release' is ignored for archives" test -n "$export_symbols$export_symbols_regex" && \ func_warning "'-export-symbols' is ignored for archives" # Now set the variables for building old libraries. build_libtool_libs=no oldlibs=$output func_append objs "$old_deplibs" ;; lib) # Make sure we only generate libraries of the form 'libNAME.la'. case $outputname in lib*) func_stripname 'lib' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" ;; *) test no = "$module" \ && func_fatal_help "libtool library '$output' must begin with 'lib'" if test no != "$need_lib_prefix"; then # Add the "lib" prefix for modules if required func_stripname '' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" else func_stripname '' '.la' "$outputname" libname=$func_stripname_result fi ;; esac if test -n "$objs"; then if test pass_all != "$deplibs_check_method"; then func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs" else echo $ECHO "*** Warning: Linking the shared library $output against the non-libtool" $ECHO "*** objects $objs is not portable!" func_append libobjs " $objs" fi fi test no = "$dlself" \ || func_warning "'-dlopen self' is ignored for libtool libraries" set dummy $rpath shift test 1 -lt "$#" \ && func_warning "ignoring multiple '-rpath's for a libtool library" install_libdir=$1 oldlibs= if test -z "$rpath"; then if test yes = "$build_libtool_libs"; then # Building a libtool convenience library. # Some compilers have problems with a '.al' extension so # convenience libraries should have the same extension an # archive normally would. oldlibs="$output_objdir/$libname.$libext $oldlibs" build_libtool_libs=convenience build_old_libs=yes fi test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for convenience libraries" test -n "$release" && \ func_warning "'-release' is ignored for convenience libraries" else # Parse the version information argument. save_ifs=$IFS; IFS=: set dummy $vinfo 0 0 0 shift IFS=$save_ifs test -n "$7" && \ func_fatal_help "too many parameters to '-version-info'" # convert absolute version numbers to libtool ages # this retains compatibility with .la files and attempts # to make the code below a bit more comprehensible case $vinfo_number in yes) number_major=$1 number_minor=$2 number_revision=$3 # # There are really only two kinds -- those that # use the current revision as the major version # and those that subtract age and use age as # a minor version. But, then there is irix # that has an extra 1 added just for fun # case $version_type in # correct linux to gnu/linux during the next big refactor darwin|freebsd-elf|linux|osf|windows|none) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_revision ;; freebsd-aout|qnx|sunos) current=$number_major revision=$number_minor age=0 ;; irix|nonstopux) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_minor lt_irix_increment=no ;; *) func_fatal_configuration "$modename: unknown library version type '$version_type'" ;; esac ;; no) current=$1 revision=$2 age=$3 ;; esac # Check that each of the things are valid numbers. case $current in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "CURRENT '$current' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $revision in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "REVISION '$revision' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $age in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "AGE '$age' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac if test "$age" -gt "$current"; then func_error "AGE '$age' is greater than the current interface number '$current'" func_fatal_error "'$vinfo' is not valid version information" fi # Calculate the version variables. major= versuffix= verstring= case $version_type in none) ;; darwin) # Like Linux, but with the current version available in # verstring for coding it into the library header func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision # Darwin ld doesn't like 0 for these options... func_arith $current + 1 minor_current=$func_arith_result xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" # On Darwin other compilers case $CC in nagfor*) verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" ;; *) verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" ;; esac ;; freebsd-aout) major=.$current versuffix=.$current.$revision ;; freebsd-elf) func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; irix | nonstopux) if test no = "$lt_irix_increment"; then func_arith $current - $age else func_arith $current - $age + 1 fi major=$func_arith_result case $version_type in nonstopux) verstring_prefix=nonstopux ;; *) verstring_prefix=sgi ;; esac verstring=$verstring_prefix$major.$revision # Add in all the interfaces that we are compatible with. loop=$revision while test 0 -ne "$loop"; do func_arith $revision - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring_prefix$major.$iface:$verstring done # Before this point, $major must not contain '.'. major=.$major versuffix=$major.$revision ;; linux) # correct to gnu/linux during the next big refactor func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; osf) func_arith $current - $age major=.$func_arith_result versuffix=.$current.$age.$revision verstring=$current.$age.$revision # Add in all the interfaces that we are compatible with. loop=$age while test 0 -ne "$loop"; do func_arith $current - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring:$iface.0 done # Make executables depend on our current version. func_append verstring ":$current.0" ;; qnx) major=.$current versuffix=.$current ;; sco) major=.$current versuffix=.$current ;; sunos) major=.$current versuffix=.$current.$revision ;; windows) # Use '-' rather than '.', since we only want one # extension on DOS 8.3 file systems. func_arith $current - $age major=$func_arith_result versuffix=-$major ;; *) func_fatal_configuration "unknown library version type '$version_type'" ;; esac # Clear the version info if we defaulted, and they specified a release. if test -z "$vinfo" && test -n "$release"; then major= case $version_type in darwin) # we can't check for "0.0" in archive_cmds due to quoting # problems, so we reset it completely verstring= ;; *) verstring=0.0 ;; esac if test no = "$need_version"; then versuffix= else versuffix=.0.0 fi fi # Remove version info from name if versioning should be avoided if test yes,no = "$avoid_version,$need_version"; then major= versuffix= verstring= fi # Check to see if the archive will have undefined symbols. if test yes = "$allow_undefined"; then if test unsupported = "$allow_undefined_flag"; then if test yes = "$build_old_libs"; then func_warning "undefined symbols not allowed in $host shared libraries; building static only" build_libtool_libs=no else func_fatal_error "can't build $host shared library unless -no-undefined is specified" fi fi else # Don't allow undefined symbols. allow_undefined_flag=$no_undefined_flag fi fi func_generate_dlsyms "$libname" "$libname" : func_append libobjs " $symfileobj" test " " = "$libobjs" && libobjs= if test relink != "$opt_mode"; then # Remove our outputs, but don't remove object files since they # may have been created when compiling PIC objects. removelist= tempremovelist=`$ECHO "$output_objdir/*"` for p in $tempremovelist; do case $p in *.$objext | *.gcno) ;; $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*) if test -n "$precious_files_regex"; then if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1 then continue fi fi func_append removelist " $p" ;; *) ;; esac done test -n "$removelist" && \ func_show_eval "${RM}r \$removelist" fi # Now set the variables for building old libraries. if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then func_append oldlibs " $output_objdir/$libname.$libext" # Transform .lo files to .o files. oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP` fi # Eliminate all temporary directories. #for path in $notinst_path; do # lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"` # deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"` # dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"` #done if test -n "$xrpath"; then # If the user specified any rpath flags, then add them. temp_xrpath= for libdir in $xrpath; do func_replace_sysroot "$libdir" func_append temp_xrpath " -R$func_replace_sysroot_result" case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then dependency_libs="$temp_xrpath $dependency_libs" fi fi # Make sure dlfiles contains only unique files that won't be dlpreopened old_dlfiles=$dlfiles dlfiles= for lib in $old_dlfiles; do case " $dlprefiles $dlfiles " in *" $lib "*) ;; *) func_append dlfiles " $lib" ;; esac done # Make sure dlprefiles contains only unique files old_dlprefiles=$dlprefiles dlprefiles= for lib in $old_dlprefiles; do case "$dlprefiles " in *" $lib "*) ;; *) func_append dlprefiles " $lib" ;; esac done if test yes = "$build_libtool_libs"; then if test -n "$rpath"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*) # these systems don't actually have a c library (as such)! ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C library is in the System framework func_append deplibs " System.ltframework" ;; *-*-netbsd*) # Don't link with libc until the a.out ld.so is fixed. ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly*) # Do not include libc due to us having libc/libc_r. ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work ;; *) # Add libc to deplibs on all other systems if necessary. if test yes = "$build_libtool_need_lc"; then func_append deplibs " -lc" fi ;; esac fi # Transform deplibs into only deplibs that can be linked in shared. name_save=$name libname_save=$libname release_save=$release versuffix_save=$versuffix major_save=$major # I'm not sure if I'm treating the release correctly. I think # release should show up in the -l (ie -lgmp5) so we don't want to # add it in twice. Is that correct? release= versuffix= major= newdeplibs= droppeddeps=no case $deplibs_check_method in pass_all) # Don't check for shared/static. Everything works. # This might be a little naive. We might want to check # whether the library exists or not. But this is on # osf3 & osf4 and I'm not really sure... Just # implementing what was already the behavior. newdeplibs=$deplibs ;; test_compile) # This code stresses the "libraries are programs" paradigm to its # limits. Maybe even breaks it. We compile a program, linking it # against the deplibs as a proxy for the library. Then we can check # whether they linked in statically or dynamically with ldd. $opt_dry_run || $RM conftest.c cat > conftest.c </dev/null` $nocaseglob else potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null` fi for potent_lib in $potential_libs; do # Follow soft links. if ls -lLd "$potent_lib" 2>/dev/null | $GREP " -> " >/dev/null; then continue fi # The statement above tries to avoid entering an # endless loop below, in case of cyclic links. # We might still enter an endless loop, since a link # loop can be closed while we follow links, # but so what? potlib=$potent_lib while test -h "$potlib" 2>/dev/null; do potliblink=`ls -ld $potlib | $SED 's/.* -> //'` case $potliblink in [\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;; *) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";; esac done if eval $file_magic_cmd \"\$potlib\" 2>/dev/null | $SED -e 10q | $EGREP "$file_magic_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for file magic test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a file magic. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` for a_deplib in $deplibs; do case $a_deplib in -l*) func_stripname -l '' "$a_deplib" name=$func_stripname_result if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $a_deplib "*) func_append newdeplibs " $a_deplib" a_deplib= ;; esac fi if test -n "$a_deplib"; then libname=`eval "\\$ECHO \"$libname_spec\""` for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do potential_libs=`ls $i/$libname[.-]* 2>/dev/null` for potent_lib in $potential_libs; do potlib=$potent_lib # see symlink-check above in file_magic test if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \ $EGREP "$match_pattern_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for regex pattern test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a regex pattern. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; none | unknown | *) newdeplibs= tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'` if test yes = "$allow_libtool_libs_with_static_runtimes"; then for i in $predeps $postdeps; do # can't use Xsed below, because $i might contain '/' tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"` done fi case $tmp_deplibs in *[!\ \ ]*) echo if test none = "$deplibs_check_method"; then echo "*** Warning: inter-library dependencies are not supported in this platform." else echo "*** Warning: inter-library dependencies are not known to be supported." fi echo "*** All declared inter-library dependencies are being dropped." droppeddeps=yes ;; esac ;; esac versuffix=$versuffix_save major=$major_save release=$release_save libname=$libname_save name=$name_save case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library with the System framework newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac if test yes = "$droppeddeps"; then if test yes = "$module"; then echo echo "*** Warning: libtool could not satisfy all declared inter-library" $ECHO "*** dependencies of module $libname. Therefore, libtool will create" echo "*** a static module, that should work as long as the dlopening" echo "*** application is linked with the -dlopen flag." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi else echo "*** The inter-library dependencies that have been dropped here will be" echo "*** automatically added whenever a program is linked with this library" echo "*** or is declared to -dlopen it." if test no = "$allow_undefined"; then echo echo "*** Since this library must not contain undefined symbols," echo "*** because either the platform does not support them or" echo "*** it was explicitly requested with -no-undefined," echo "*** libtool will only create a static version of it." if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi fi fi # Done checking deplibs! deplibs=$newdeplibs fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" case $host in *-*-darwin*) newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done deplibs=$new_libs # All the library-specific variables (install_libdir is set above). library_names= old_library= dlname= # Test again, we may have decided not to build it any more if test yes = "$build_libtool_libs"; then # Remove $wl instances when linking with ld. # FIXME: should test the right _cmds variable. case $archive_cmds in *\$LD\ *) wl= ;; esac if test yes = "$hardcode_into_libs"; then # Hardcode the library paths hardcode_libdirs= dep_rpath= rpath=$finalize_rpath test relink = "$opt_mode" || rpath=$compile_rpath$rpath for libdir in $rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then func_replace_sysroot "$libdir" libdir=$func_replace_sysroot_result if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append dep_rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval "dep_rpath=\"$hardcode_libdir_flag_spec\"" fi if test -n "$runpath_var" && test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var" fi test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs" fi shlibpath=$finalize_shlibpath test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath if test -n "$shlibpath"; then eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var" fi # Get the real and link names of the library. eval shared_ext=\"$shrext_cmds\" eval library_names=\"$library_names_spec\" set dummy $library_names shift realname=$1 shift if test -n "$soname_spec"; then eval soname=\"$soname_spec\" else soname=$realname fi if test -z "$dlname"; then dlname=$soname fi lib=$output_objdir/$realname linknames= for link do func_append linknames " $link" done # Use standard objects if they are pic test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP` test "X$libobjs" = "X " && libobjs= delfiles= if test -n "$export_symbols" && test -n "$include_expsyms"; then $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp" export_symbols=$output_objdir/$libname.uexp func_append delfiles " $export_symbols" fi orig_export_symbols= case $host_os in cygwin* | mingw* | cegcc*) if test -n "$export_symbols" && test -z "$export_symbols_regex"; then # exporting using user supplied symfile func_dll_def_p "$export_symbols" || { # and it's NOT already a .def file. Must figure out # which of the given symbols are data symbols and tag # them as such. So, trigger use of export_symbols_cmds. # export_symbols gets reassigned inside the "prepare # the list of exported symbols" if statement, so the # include_expsyms logic still works. orig_export_symbols=$export_symbols export_symbols= always_export_symbols=yes } fi ;; esac # Prepare the list of exported symbols if test -z "$export_symbols"; then if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols cmds=$export_symbols_cmds save_ifs=$IFS; IFS='~' for cmd1 in $cmds; do IFS=$save_ifs # Take the normal branch if the nm_file_list_spec branch # doesn't work or if tool conversion is not needed. case $nm_file_list_spec~$to_tool_file_cmd in *~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*) try_normal_branch=yes eval cmd=\"$cmd1\" func_len " $cmd" len=$func_len_result ;; *) try_normal_branch=no ;; esac if test yes = "$try_normal_branch" \ && { test "$len" -lt "$max_cmd_len" \ || test "$max_cmd_len" -le -1; } then func_show_eval "$cmd" 'exit $?' skipped_export=false elif test -n "$nm_file_list_spec"; then func_basename "$output" output_la=$func_basename_result save_libobjs=$libobjs save_output=$output output=$output_objdir/$output_la.nm func_to_tool_file "$output" libobjs=$nm_file_list_spec$func_to_tool_file_result func_append delfiles " $output" func_verbose "creating $NM input file list: $output" for obj in $save_libobjs; do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > "$output" eval cmd=\"$cmd1\" func_show_eval "$cmd" 'exit $?' output=$save_output libobjs=$save_libobjs skipped_export=false else # The command line is too long to execute in one step. func_verbose "using reloadable object file for export list..." skipped_export=: # Break out early, otherwise skipped_export may be # set to false by a later but shorter cmd. break fi done IFS=$save_ifs if test -n "$export_symbols_regex" && test : != "$skipped_export"; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi fi if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test : != "$skipped_export" && test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi tmp_deplibs= for test_deplib in $deplibs; do case " $convenience " in *" $test_deplib "*) ;; *) func_append tmp_deplibs " $test_deplib" ;; esac done deplibs=$tmp_deplibs if test -n "$convenience"; then if test -n "$whole_archive_flag_spec" && test yes = "$compiler_needs_object" && test -z "$libobjs"; then # extract the archives, so we have objects to list. # TODO: could optimize this to just extract one archive. whole_archive_flag_spec= fi if test -n "$whole_archive_flag_spec"; then save_libobjs=$libobjs eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= else gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $convenience func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi fi if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then eval flag=\"$thread_safe_flag_spec\" func_append linker_flags " $flag" fi # Make a backup of the uninstalled library when relinking if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $? fi # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then eval test_cmds=\"$module_expsym_cmds\" cmds=$module_expsym_cmds else eval test_cmds=\"$module_cmds\" cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then eval test_cmds=\"$archive_expsym_cmds\" cmds=$archive_expsym_cmds else eval test_cmds=\"$archive_cmds\" cmds=$archive_cmds fi fi if test : != "$skipped_export" && func_len " $test_cmds" && len=$func_len_result && test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then : else # The command line is too long to link in one step, link piecewise # or, if using GNU ld and skipped_export is not :, use a linker # script. # Save the value of $output and $libobjs because we want to # use them later. If we have whole_archive_flag_spec, we # want to use save_libobjs as it was before # whole_archive_flag_spec was expanded, because we can't # assume the linker understands whole_archive_flag_spec. # This may have to be revisited, in case too many # convenience libraries get linked in and end up exceeding # the spec. if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then save_libobjs=$libobjs fi save_output=$output func_basename "$output" output_la=$func_basename_result # Clear the reloadable object creation command queue and # initialize k to one. test_cmds= concat_cmds= objlist= last_robj= k=1 if test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then output=$output_objdir/$output_la.lnkscript func_verbose "creating GNU ld script: $output" echo 'INPUT (' > $output for obj in $save_libobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done echo ')' >> $output func_append delfiles " $output" func_to_tool_file "$output" output=$func_to_tool_file_result elif test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then output=$output_objdir/$output_la.lnk func_verbose "creating linker input file list: $output" : > $output set x $save_libobjs shift firstobj= if test yes = "$compiler_needs_object"; then firstobj="$1 " shift fi for obj do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done func_append delfiles " $output" func_to_tool_file "$output" output=$firstobj\"$file_list_spec$func_to_tool_file_result\" else if test -n "$save_libobjs"; then func_verbose "creating reloadable object files..." output=$output_objdir/$output_la-$k.$objext eval test_cmds=\"$reload_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 # Loop over the list of objects to be linked. for obj in $save_libobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result if test -z "$objlist" || test "$len" -lt "$max_cmd_len"; then func_append objlist " $obj" else # The command $test_cmds is almost too long, add a # command to the queue. if test 1 -eq "$k"; then # The first file doesn't have a previous command to add. reload_objs=$objlist eval concat_cmds=\"$reload_cmds\" else # All subsequent reloadable object files will link in # the last one created. reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\" fi last_robj=$output_objdir/$output_la-$k.$objext func_arith $k + 1 k=$func_arith_result output=$output_objdir/$output_la-$k.$objext objlist=" $obj" func_len " $last_robj" func_arith $len0 + $func_len_result len=$func_arith_result fi done # Handle the remaining objects by creating one last # reloadable object file. All subsequent reloadable object # files will link in the last one created. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds$reload_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi func_append delfiles " $output" else output= fi ${skipped_export-false} && { func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols libobjs=$output # Append the command to create the export file. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi } test -n "$save_libobjs" && func_verbose "creating a temporary reloadable object file: $output" # Loop through the commands generated above and execute them. save_ifs=$IFS; IFS='~' for cmd in $concat_cmds; do IFS=$save_ifs $opt_quiet || { func_quote_for_expand "$cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs if test -n "$export_symbols_regex" && ${skipped_export-false}; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi ${skipped_export-false} && { if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi } libobjs=$output # Restore the value of output. output=$save_output if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= fi # Expand the library linking commands again to reset the # value of $libobjs for piecewise linking. # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then cmds=$module_expsym_cmds else cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then cmds=$archive_expsym_cmds else cmds=$archive_cmds fi fi fi if test -n "$delfiles"; then # Append the command to remove temporary files to $cmds. eval cmds=\"\$cmds~\$RM $delfiles\" fi # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi save_ifs=$IFS; IFS='~' for cmd in $cmds; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs $opt_quiet || { func_quote_for_expand "$cmd" eval "func_echo $func_quote_for_expand_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs # Restore the uninstalled library and exit if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $? if test -n "$convenience"; then if test -z "$whole_archive_flag_spec"; then func_show_eval '${RM}r "$gentop"' fi fi exit $EXIT_SUCCESS fi # Create links to the real library. for linkname in $linknames; do if test "$realname" != "$linkname"; then func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?' fi done # If -module or -export-dynamic was specified, set the dlname. if test yes = "$module" || test yes = "$export_dynamic"; then # On all known operating systems, these are identical. dlname=$soname fi fi ;; obj) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for objects" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for objects" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for objects" test -n "$xrpath" && \ func_warning "'-R' is ignored for objects" test -n "$vinfo" && \ func_warning "'-version-info' is ignored for objects" test -n "$release" && \ func_warning "'-release' is ignored for objects" case $output in *.lo) test -n "$objs$old_deplibs" && \ func_fatal_error "cannot build library object '$output' from non-libtool objects" libobj=$output func_lo2o "$libobj" obj=$func_lo2o_result ;; *) libobj= obj=$output ;; esac # Delete the old objects. $opt_dry_run || $RM $obj $libobj # Objects from convenience libraries. This assumes # single-version convenience libraries. Whenever we create # different ones for PIC/non-PIC, this we'll have to duplicate # the extraction. reload_conv_objs= gentop= # if reload_cmds runs $LD directly, get rid of -Wl from # whole_archive_flag_spec and hope we can get by with turning comma # into space. case $reload_cmds in *\$LD[\ \$]*) wl= ;; esac if test -n "$convenience"; then if test -n "$whole_archive_flag_spec"; then eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\" test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'` reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags else gentop=$output_objdir/${obj}x func_append generated " $gentop" func_extract_archives $gentop $convenience reload_conv_objs="$reload_objs $func_extract_archives_result" fi fi # If we're not building shared, we need to use non_pic_objs test yes = "$build_libtool_libs" || libobjs=$non_pic_objects # Create the old-style object. reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs output=$obj func_execute_cmds "$reload_cmds" 'exit $?' # Exit if we aren't doing a library object file. if test -z "$libobj"; then if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS fi test yes = "$build_libtool_libs" || { if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi # Create an invalid libtool object if no PIC, so that we don't # accidentally link it into a program. # $show "echo timestamp > $libobj" # $opt_dry_run || eval "echo timestamp > $libobj" || exit $? exit $EXIT_SUCCESS } if test -n "$pic_flag" || test default != "$pic_mode"; then # Only do commands if we really have different PIC objects. reload_objs="$libobjs $reload_conv_objs" output=$libobj func_execute_cmds "$reload_cmds" 'exit $?' fi if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS ;; prog) case $host in *cygwin*) func_stripname '' '.exe' "$output" output=$func_stripname_result.exe;; esac test -n "$vinfo" && \ func_warning "'-version-info' is ignored for programs" test -n "$release" && \ func_warning "'-release' is ignored for programs" $preload \ && test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \ && func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support." case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library is the System framework compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac case $host in *-*-darwin*) # Don't allow lazy linking, it breaks C++ global constructors # But is supposedly fixed on 10.4 or later (yay!). if test CXX = "$tagname"; then case ${MACOSX_DEPLOYMENT_TARGET-10.0} in 10.[0123]) func_append compile_command " $wl-bind_at_load" func_append finalize_command " $wl-bind_at_load" ;; esac fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $compile_deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $compile_deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done compile_deplibs=$new_libs func_append compile_command " $compile_deplibs" func_append finalize_command " $finalize_deplibs" if test -n "$rpath$xrpath"; then # If the user specified any rpath flags, then add them. for libdir in $rpath $xrpath; do # This is the magic to use -rpath. case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done fi # Now hardcode the library paths rpath= hardcode_libdirs= for libdir in $compile_rpath $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'` case :$dllsearchpath: in *":$libdir:"*) ;; ::) dllsearchpath=$libdir;; *) func_append dllsearchpath ":$libdir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi compile_rpath=$rpath rpath= hardcode_libdirs= for libdir in $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$finalize_perm_rpath " in *" $libdir "*) ;; *) func_append finalize_perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi finalize_rpath=$rpath if test -n "$libobjs" && test yes = "$build_old_libs"; then # Transform all the library objects into standard objects. compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP` finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP` fi func_generate_dlsyms "$outputname" "@PROGRAM@" false # template prelinking step if test -n "$prelink_cmds"; then func_execute_cmds "$prelink_cmds" 'exit $?' fi wrappers_required=: case $host in *cegcc* | *mingw32ce*) # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway. wrappers_required=false ;; *cygwin* | *mingw* ) test yes = "$build_libtool_libs" || wrappers_required=false ;; *) if test no = "$need_relink" || test yes != "$build_libtool_libs"; then wrappers_required=false fi ;; esac $wrappers_required || { # Replace the output file specification. compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'` link_command=$compile_command$compile_rpath # We have no uninstalled library dependencies, so finalize right now. exit_status=0 func_show_eval "$link_command" 'exit_status=$?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Delete the generated files. if test -f "$output_objdir/${outputname}S.$objext"; then func_show_eval '$RM "$output_objdir/${outputname}S.$objext"' fi exit $exit_status } if test -n "$compile_shlibpath$finalize_shlibpath"; then compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command" fi if test -n "$finalize_shlibpath"; then finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command" fi compile_var= finalize_var= if test -n "$runpath_var"; then if test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done compile_var="$runpath_var=\"$rpath\$$runpath_var\" " fi if test -n "$finalize_perm_rpath"; then # We should set the runpath_var. rpath= for dir in $finalize_perm_rpath; do func_append rpath "$dir:" done finalize_var="$runpath_var=\"$rpath\$$runpath_var\" " fi fi if test yes = "$no_install"; then # We don't need to create a wrapper script. link_command=$compile_var$compile_command$compile_rpath # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'` # Delete the old output file. $opt_dry_run || $RM $output # Link the executable and exit func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi exit $EXIT_SUCCESS fi case $hardcode_action,$fast_install in relink,*) # Fast installation is not supported link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath func_warning "this platform does not like uninstalled shared libraries" func_warning "'$output' will be relinked during installation" ;; *,yes) link_command=$finalize_var$compile_command$finalize_rpath relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'` ;; *,no) link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath ;; *,needless) link_command=$finalize_var$compile_command$finalize_rpath relink_command= ;; esac # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'` # Delete the old output files. $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output_objdir/$outputname" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Now create the wrapper script. func_verbose "creating $output" # Quote the relink command for shipping. if test -n "$relink_command"; then # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_for_eval "$var_value" relink_command="$var=$func_quote_for_eval_result; export $var; $relink_command" fi done relink_command="(cd `pwd`; $relink_command)" relink_command=`$ECHO "$relink_command" | $SED "$sed_quote_subst"` fi # Only actually do things if not in dry run mode. $opt_dry_run || { # win32 will think the script is a binary if it has # a .exe suffix, so we strip it off here. case $output in *.exe) func_stripname '' '.exe' "$output" output=$func_stripname_result ;; esac # test for cygwin because mv fails w/o .exe extensions case $host in *cygwin*) exeext=.exe func_stripname '' '.exe' "$outputname" outputname=$func_stripname_result ;; *) exeext= ;; esac case $host in *cygwin* | *mingw* ) func_dirname_and_basename "$output" "" "." output_name=$func_basename_result output_path=$func_dirname_result cwrappersource=$output_path/$objdir/lt-$output_name.c cwrapper=$output_path/$output_name.exe $RM $cwrappersource $cwrapper trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15 func_emit_cwrapperexe_src > $cwrappersource # The wrapper executable is built using the $host compiler, # because it contains $host paths and files. If cross- # compiling, it, like the target executable, must be # executed on the $host or under an emulation environment. $opt_dry_run || { $LTCC $LTCFLAGS -o $cwrapper $cwrappersource $STRIP $cwrapper } # Now, create the wrapper script for func_source use: func_ltwrapper_scriptname $cwrapper $RM $func_ltwrapper_scriptname_result trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15 $opt_dry_run || { # note: this script will not be executed, so do not chmod. if test "x$build" = "x$host"; then $cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result else func_emit_wrapper no > $func_ltwrapper_scriptname_result fi } ;; * ) $RM $output trap "$RM $output; exit $EXIT_FAILURE" 1 2 15 func_emit_wrapper no > $output chmod +x $output ;; esac } exit $EXIT_SUCCESS ;; esac # See if we need to build an old-fashioned archive. for oldlib in $oldlibs; do case $build_libtool_libs in convenience) oldobjs="$libobjs_save $symfileobj" addlibs=$convenience build_libtool_libs=no ;; module) oldobjs=$libobjs_save addlibs=$old_convenience build_libtool_libs=no ;; *) oldobjs="$old_deplibs $non_pic_objects" $preload && test -f "$symfileobj" \ && func_append oldobjs " $symfileobj" addlibs=$old_convenience ;; esac if test -n "$addlibs"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $addlibs func_append oldobjs " $func_extract_archives_result" fi # Do each command in the archive commands. if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then cmds=$old_archive_from_new_cmds else # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append oldobjs " $func_extract_archives_result" fi # POSIX demands no paths to be encoded in archives. We have # to avoid creating archives with duplicate basenames if we # might have to extract them afterwards, e.g., when creating a # static archive out of a convenience library, or when linking # the entirety of a libtool archive into another (currently # not supported by libtool). if (for obj in $oldobjs do func_basename "$obj" $ECHO "$func_basename_result" done | sort | sort -uc >/dev/null 2>&1); then : else echo "copying selected object files to avoid basename conflicts..." gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_mkdir_p "$gentop" save_oldobjs=$oldobjs oldobjs= counter=1 for obj in $save_oldobjs do func_basename "$obj" objbase=$func_basename_result case " $oldobjs " in " ") oldobjs=$obj ;; *[\ /]"$objbase "*) while :; do # Make sure we don't pick an alternate name that also # overlaps. newobj=lt$counter-$objbase func_arith $counter + 1 counter=$func_arith_result case " $oldobjs " in *[\ /]"$newobj "*) ;; *) if test ! -f "$gentop/$newobj"; then break; fi ;; esac done func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj" func_append oldobjs " $gentop/$newobj" ;; *) func_append oldobjs " $obj" ;; esac done fi func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result eval cmds=\"$old_archive_cmds\" func_len " $cmds" len=$func_len_result if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then cmds=$old_archive_cmds elif test -n "$archiver_list_spec"; then func_verbose "using command file archive linking..." for obj in $oldobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > $output_objdir/$libname.libcmd func_to_tool_file "$output_objdir/$libname.libcmd" oldobjs=" $archiver_list_spec$func_to_tool_file_result" cmds=$old_archive_cmds else # the command line is too long to link in one step, link in parts func_verbose "using piecewise archive linking..." save_RANLIB=$RANLIB RANLIB=: objlist= concat_cmds= save_oldobjs=$oldobjs oldobjs= # Is there a better way of finding the last object in the list? for obj in $save_oldobjs do last_oldobj=$obj done eval test_cmds=\"$old_archive_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 for obj in $save_oldobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result func_append objlist " $obj" if test "$len" -lt "$max_cmd_len"; then : else # the above command should be used before it gets too long oldobjs=$objlist if test "$obj" = "$last_oldobj"; then RANLIB=$save_RANLIB fi test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$old_archive_cmds\" objlist= len=$len0 fi done RANLIB=$save_RANLIB oldobjs=$objlist if test -z "$oldobjs"; then eval cmds=\"\$concat_cmds\" else eval cmds=\"\$concat_cmds~\$old_archive_cmds\" fi fi fi func_execute_cmds "$cmds" 'exit $?' done test -n "$generated" && \ func_show_eval "${RM}r$generated" # Now create the libtool archive. case $output in *.la) old_library= test yes = "$build_old_libs" && old_library=$libname.$libext func_verbose "creating $output" # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_for_eval "$var_value" relink_command="$var=$func_quote_for_eval_result; export $var; $relink_command" fi done # Quote the link command for shipping. relink_command="(cd `pwd`; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)" relink_command=`$ECHO "$relink_command" | $SED "$sed_quote_subst"` if test yes = "$hardcode_automatic"; then relink_command= fi # Only create the output if not a dry run. $opt_dry_run || { for installed in no yes; do if test yes = "$installed"; then if test -z "$install_libdir"; then break fi output=$output_objdir/${outputname}i # Replace all uninstalled libtool libraries with the installed ones newdependency_libs= for deplib in $dependency_libs; do case $deplib in *.la) func_basename "$deplib" name=$func_basename_result func_resolve_sysroot "$deplib" eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name" ;; -L*) func_stripname -L '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -L$func_replace_sysroot_result" ;; -R*) func_stripname -R '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -R$func_replace_sysroot_result" ;; *) func_append newdependency_libs " $deplib" ;; esac done dependency_libs=$newdependency_libs newdlfiles= for lib in $dlfiles; do case $lib in *.la) func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name" ;; *) func_append newdlfiles " $lib" ;; esac done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in *.la) # Only pass preopened files to the pseudo-archive (for # eventual linking with the app. that links it) if we # didn't already link the preopened objects directly into # the library: func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name" ;; esac done dlprefiles=$newdlprefiles else newdlfiles= for lib in $dlfiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlfiles " $abs" done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlprefiles " $abs" done dlprefiles=$newdlprefiles fi $RM $output # place dlname in correct position for cygwin # In fact, it would be nice if we could use this code for all target # systems that can't hard-code library paths into their executables # and that have no shared library path variable independent of PATH, # but it turns out we can't easily determine that from inspecting # libtool variables, so we have to hard-code the OSs to which it # applies here; at the moment, that means platforms that use the PE # object format with DLL files. See the long comment at the top of # tests/bindir.at for full details. tdlname=$dlname case $host,$output,$installed,$module,$dlname in *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll) # If a -bindir argument was supplied, place the dll there. if test -n "$bindir"; then func_relative_path "$install_libdir" "$bindir" tdlname=$func_relative_path_result/$dlname else # Otherwise fall back on heuristic. tdlname=../bin/$dlname fi ;; esac $ECHO > $output "\ # $outputname - a libtool library file # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # Please DO NOT delete this file! # It is necessary for linking the library. # The name that we can dlopen(3). dlname='$tdlname' # Names of this library. library_names='$library_names' # The name of the static archive. old_library='$old_library' # Linker flags that cannot go in dependency_libs. inherited_linker_flags='$new_inherited_linker_flags' # Libraries that this one depends upon. dependency_libs='$dependency_libs' # Names of additional weak libraries provided by this library weak_library_names='$weak_libs' # Version information for $libname. current=$current age=$age revision=$revision # Is this an already installed library? installed=$installed # Should we warn about portability when linking against -modules? shouldnotlink=$module # Files to dlopen/dlpreopen dlopen='$dlfiles' dlpreopen='$dlprefiles' # Directory that this library needs to be installed in: libdir='$install_libdir'" if test no,yes = "$installed,$need_relink"; then $ECHO >> $output "\ relink_command=\"$relink_command\"" fi done } # Do a symbolic link so that the libtool archive can be found in # LD_LIBRARY_PATH before the program is installed. func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?' ;; esac exit $EXIT_SUCCESS } if test link = "$opt_mode" || test relink = "$opt_mode"; then func_mode_link ${1+"$@"} fi # func_mode_uninstall arg... func_mode_uninstall () { $debug_cmd RM=$nonopt files= rmforce=false exit_status=0 # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic for arg do case $arg in -f) func_append RM " $arg"; rmforce=: ;; -*) func_append RM " $arg" ;; *) func_append files " $arg" ;; esac done test -z "$RM" && \ func_fatal_help "you must specify an RM program" rmdirs= for file in $files; do func_dirname "$file" "" "." dir=$func_dirname_result if test . = "$dir"; then odir=$objdir else odir=$dir/$objdir fi func_basename "$file" name=$func_basename_result test uninstall = "$opt_mode" && odir=$dir # Remember odir for removal later, being careful to avoid duplicates if test clean = "$opt_mode"; then case " $rmdirs " in *" $odir "*) ;; *) func_append rmdirs " $odir" ;; esac fi # Don't error if the file doesn't exist and rm -f was used. if { test -L "$file"; } >/dev/null 2>&1 || { test -h "$file"; } >/dev/null 2>&1 || test -f "$file"; then : elif test -d "$file"; then exit_status=1 continue elif $rmforce; then continue fi rmfiles=$file case $name in *.la) # Possibly a libtool archive, so verify it. if func_lalib_p "$file"; then func_source $dir/$name # Delete the libtool libraries and symlinks. for n in $library_names; do func_append rmfiles " $odir/$n" done test -n "$old_library" && func_append rmfiles " $odir/$old_library" case $opt_mode in clean) case " $library_names " in *" $dlname "*) ;; *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;; esac test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i" ;; uninstall) if test -n "$library_names"; then # Do each command in the postuninstall commands. func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1' fi if test -n "$old_library"; then # Do each command in the old_postuninstall commands. func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1' fi # FIXME: should reinstall the best remaining shared library. ;; esac fi ;; *.lo) # Possibly a libtool object, so verify it. if func_lalib_p "$file"; then # Read the .lo file func_source $dir/$name # Add PIC object to the list of files to remove. if test -n "$pic_object" && test none != "$pic_object"; then func_append rmfiles " $dir/$pic_object" fi # Add non-PIC object to the list of files to remove. if test -n "$non_pic_object" && test none != "$non_pic_object"; then func_append rmfiles " $dir/$non_pic_object" fi fi ;; *) if test clean = "$opt_mode"; then noexename=$name case $file in *.exe) func_stripname '' '.exe' "$file" file=$func_stripname_result func_stripname '' '.exe' "$name" noexename=$func_stripname_result # $file with .exe has already been added to rmfiles, # add $file without .exe func_append rmfiles " $file" ;; esac # Do a test to see if this is a libtool program. if func_ltwrapper_p "$file"; then if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" relink_command= func_source $func_ltwrapper_scriptname_result func_append rmfiles " $func_ltwrapper_scriptname_result" else relink_command= func_source $dir/$noexename fi # note $name still contains .exe if it was in $file originally # as does the version of $file that was added into $rmfiles func_append rmfiles " $odir/$name $odir/${name}S.$objext" if test yes = "$fast_install" && test -n "$relink_command"; then func_append rmfiles " $odir/lt-$name" fi if test "X$noexename" != "X$name"; then func_append rmfiles " $odir/lt-$noexename.c" fi fi fi ;; esac func_show_eval "$RM $rmfiles" 'exit_status=1' done # Try to remove the $objdir's in the directories where we deleted files for dir in $rmdirs; do if test -d "$dir"; then func_show_eval "rmdir $dir >/dev/null 2>&1" fi done exit $exit_status } if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then func_mode_uninstall ${1+"$@"} fi test -z "$opt_mode" && { help=$generic_help func_fatal_help "you must specify a MODE" } test -z "$exec_cmd" && \ func_fatal_help "invalid operation mode '$opt_mode'" if test -n "$exec_cmd"; then eval exec "$exec_cmd" exit $EXIT_FAILURE fi exit $exit_status # The TAGs below are defined such that we never get into a situation # where we disable both kinds of libraries. Given conflicting # choices, we go for a static library, that is the most portable, # since we can't tell whether shared libraries were disabled because # the user asked for that or because the platform doesn't support # them. This is particularly important on AIX, because we don't # support having both static and shared libraries enabled at the same # time on that platform, so we default to a shared-only configuration. # If a disable-shared tag is given, we'll fallback to a static-only # configuration. But we'll never go from static-only to shared-only. # ### BEGIN LIBTOOL TAG CONFIG: disable-shared build_libtool_libs=no build_old_libs=yes # ### END LIBTOOL TAG CONFIG: disable-shared # ### BEGIN LIBTOOL TAG CONFIG: disable-static build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac` # ### END LIBTOOL TAG CONFIG: disable-static # Local Variables: # mode:shell-script # sh-indentation:2 # End: tpm2-pkcs11-1.7.0/config.sub0000755000175000017500000010645013244306071012413 00000000000000#! /bin/sh # Configuration validation subroutine script. # Copyright 1992-2018 Free Software Foundation, Inc. timestamp='2018-02-22' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # Please send patches to . # # Configuration subroutine to validate and canonicalize a configuration type. # Supply the specified configuration type as an argument. # If it is invalid, we print an error message on stderr and exit with code 1. # Otherwise, we print the canonical config type on stdout and succeed. # You can get the latest version of this script from: # https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub # This file is supposed to be the same for all GNU packages # and recognize all the CPU types, system types and aliases # that are meaningful with *any* GNU software. # Each package is responsible for reporting which valid configurations # it does not support. The user should be able to distinguish # a failure to support a valid configuration from a meaningless # configuration. # The goal of this file is to map all the various variations of a given # machine specification into a single specification in the form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM # or in some cases, the newer four-part form: # CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM # It is wrong to echo any other type of specification. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS Canonicalize a configuration name. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.sub ($timestamp) Copyright 1992-2018 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try \`$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" exit 1 ;; *local*) # First pass through any local machine types. echo "$1" exit ;; * ) break ;; esac done case $# in 0) echo "$me: missing argument$help" >&2 exit 1;; 1) ;; *) echo "$me: too many arguments$help" >&2 exit 1;; esac # Separate what the user gave into CPU-COMPANY and OS or KERNEL-OS (if any). # Here we must recognize all the valid KERNEL-OS combinations. maybe_os=`echo "$1" | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\2/'` case $maybe_os in nto-qnx* | linux-gnu* | linux-android* | linux-dietlibc | linux-newlib* | \ linux-musl* | linux-uclibc* | uclinux-uclibc* | uclinux-gnu* | kfreebsd*-gnu* | \ knetbsd*-gnu* | netbsd*-gnu* | netbsd*-eabi* | \ kopensolaris*-gnu* | cloudabi*-eabi* | \ storm-chaos* | os2-emx* | rtmk-nova*) os=-$maybe_os basic_machine=`echo "$1" | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'` ;; android-linux) os=-linux-android basic_machine=`echo "$1" | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'`-unknown ;; *) basic_machine=`echo "$1" | sed 's/-[^-]*$//'` if [ "$basic_machine" != "$1" ] then os=`echo "$1" | sed 's/.*-/-/'` else os=; fi ;; esac ### Let's recognize common machines as not being operating systems so ### that things like config.sub decstation-3100 work. We also ### recognize some manufacturers as not being operating systems, so we ### can provide default operating systems below. case $os in -sun*os*) # Prevent following clause from handling this invalid input. ;; -dec* | -mips* | -sequent* | -encore* | -pc532* | -sgi* | -sony* | \ -att* | -7300* | -3300* | -delta* | -motorola* | -sun[234]* | \ -unicom* | -ibm* | -next | -hp | -isi* | -apollo | -altos* | \ -convergent* | -ncr* | -news | -32* | -3600* | -3100* | -hitachi* |\ -c[123]* | -convex* | -sun | -crds | -omron* | -dg | -ultra | -tti* | \ -harris | -dolphin | -highlevel | -gould | -cbm | -ns | -masscomp | \ -apple | -axis | -knuth | -cray | -microblaze*) os= basic_machine=$1 ;; -bluegene*) os=-cnk ;; -sim | -cisco | -oki | -wec | -winbond) os= basic_machine=$1 ;; -scout) ;; -wrs) os=-vxworks basic_machine=$1 ;; -chorusos*) os=-chorusos basic_machine=$1 ;; -chorusrdb) os=-chorusrdb basic_machine=$1 ;; -hiux*) os=-hiuxwe2 ;; -sco6) os=-sco5v6 basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco5) os=-sco3.2v5 basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco4) os=-sco3.2v4 basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco3.2.[4-9]*) os=`echo $os | sed -e 's/sco3.2./sco3.2v/'` basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco3.2v[4-9]*) # Don't forget version if it is 3.2v4 or newer. basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco5v6*) # Don't forget version if it is 3.2v4 or newer. basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -sco*) os=-sco3.2v2 basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -udk*) basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -isc) os=-isc2.2 basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -clix*) basic_machine=clipper-intergraph ;; -isc*) basic_machine=`echo "$1" | sed -e 's/86-.*/86-pc/'` ;; -lynx*178) os=-lynxos178 ;; -lynx*5) os=-lynxos5 ;; -lynx*) os=-lynxos ;; -ptx*) basic_machine=`echo "$1" | sed -e 's/86-.*/86-sequent/'` ;; -psos*) os=-psos ;; -mint | -mint[0-9]*) basic_machine=m68k-atari os=-mint ;; esac # Decode aliases for certain CPU-COMPANY combinations. case $basic_machine in # Recognize the basic CPU types without company name. # Some are omitted here because they have special meanings below. 1750a | 580 \ | a29k \ | aarch64 | aarch64_be \ | alpha | alphaev[4-8] | alphaev56 | alphaev6[78] | alphapca5[67] \ | alpha64 | alpha64ev[4-8] | alpha64ev56 | alpha64ev6[78] | alpha64pca5[67] \ | am33_2.0 \ | arc | arceb \ | arm | arm[bl]e | arme[lb] | armv[2-8] | armv[3-8][lb] | armv7[arm] \ | avr | avr32 \ | ba \ | be32 | be64 \ | bfin \ | c4x | c8051 | clipper \ | d10v | d30v | dlx | dsp16xx \ | e2k | epiphany \ | fido | fr30 | frv | ft32 \ | h8300 | h8500 | hppa | hppa1.[01] | hppa2.0 | hppa2.0[nw] | hppa64 \ | hexagon \ | i370 | i860 | i960 | ia16 | ia64 \ | ip2k | iq2000 \ | k1om \ | le32 | le64 \ | lm32 \ | m32c | m32r | m32rle | m68000 | m68k | m88k \ | maxq | mb | microblaze | microblazeel | mcore | mep | metag \ | mips | mipsbe | mipseb | mipsel | mipsle \ | mips16 \ | mips64 | mips64el \ | mips64octeon | mips64octeonel \ | mips64orion | mips64orionel \ | mips64r5900 | mips64r5900el \ | mips64vr | mips64vrel \ | mips64vr4100 | mips64vr4100el \ | mips64vr4300 | mips64vr4300el \ | mips64vr5000 | mips64vr5000el \ | mips64vr5900 | mips64vr5900el \ | mipsisa32 | mipsisa32el \ | mipsisa32r2 | mipsisa32r2el \ | mipsisa32r6 | mipsisa32r6el \ | mipsisa64 | mipsisa64el \ | mipsisa64r2 | mipsisa64r2el \ | mipsisa64r6 | mipsisa64r6el \ | mipsisa64sb1 | mipsisa64sb1el \ | mipsisa64sr71k | mipsisa64sr71kel \ | mipsr5900 | mipsr5900el \ | mipstx39 | mipstx39el \ | mn10200 | mn10300 \ | moxie \ | mt \ | msp430 \ | nds32 | nds32le | nds32be \ | nios | nios2 | nios2eb | nios2el \ | ns16k | ns32k \ | open8 | or1k | or1knd | or32 \ | pdp10 | pj | pjl \ | powerpc | powerpc64 | powerpc64le | powerpcle \ | pru \ | pyramid \ | riscv32 | riscv64 \ | rl78 | rx \ | score \ | sh | sh[1234] | sh[24]a | sh[24]aeb | sh[23]e | sh[234]eb | sheb | shbe | shle | sh[1234]le | sh3ele \ | sh64 | sh64le \ | sparc | sparc64 | sparc64b | sparc64v | sparc86x | sparclet | sparclite \ | sparcv8 | sparcv9 | sparcv9b | sparcv9v \ | spu \ | tahoe | tic4x | tic54x | tic55x | tic6x | tic80 | tron \ | ubicom32 \ | v850 | v850e | v850e1 | v850e2 | v850es | v850e2v3 \ | visium \ | wasm32 \ | x86 | xc16x | xstormy16 | xtensa \ | z8k | z80) basic_machine=$basic_machine-unknown ;; c54x) basic_machine=tic54x-unknown ;; c55x) basic_machine=tic55x-unknown ;; c6x) basic_machine=tic6x-unknown ;; leon|leon[3-9]) basic_machine=sparc-$basic_machine ;; m6811 | m68hc11 | m6812 | m68hc12 | m68hcs12x | nvptx | picochip) basic_machine=$basic_machine-unknown os=-none ;; m88110 | m680[12346]0 | m683?2 | m68360 | m5200 | v70 | w65) ;; ms1) basic_machine=mt-unknown ;; strongarm | thumb | xscale) basic_machine=arm-unknown ;; xgate) basic_machine=$basic_machine-unknown os=-none ;; xscaleeb) basic_machine=armeb-unknown ;; xscaleel) basic_machine=armel-unknown ;; # We use `pc' rather than `unknown' # because (1) that's what they normally are, and # (2) the word "unknown" tends to confuse beginning users. i*86 | x86_64) basic_machine=$basic_machine-pc ;; # Object if more than one company name word. *-*-*) echo Invalid configuration \`"$1"\': machine \`"$basic_machine"\' not recognized 1>&2 exit 1 ;; # Recognize the basic CPU types with company name. 580-* \ | a29k-* \ | aarch64-* | aarch64_be-* \ | alpha-* | alphaev[4-8]-* | alphaev56-* | alphaev6[78]-* \ | alpha64-* | alpha64ev[4-8]-* | alpha64ev56-* | alpha64ev6[78]-* \ | alphapca5[67]-* | alpha64pca5[67]-* | arc-* | arceb-* \ | arm-* | armbe-* | armle-* | armeb-* | armv*-* \ | avr-* | avr32-* \ | ba-* \ | be32-* | be64-* \ | bfin-* | bs2000-* \ | c[123]* | c30-* | [cjt]90-* | c4x-* \ | c8051-* | clipper-* | craynv-* | cydra-* \ | d10v-* | d30v-* | dlx-* \ | e2k-* | elxsi-* \ | f30[01]-* | f700-* | fido-* | fr30-* | frv-* | fx80-* \ | h8300-* | h8500-* \ | hppa-* | hppa1.[01]-* | hppa2.0-* | hppa2.0[nw]-* | hppa64-* \ | hexagon-* \ | i*86-* | i860-* | i960-* | ia16-* | ia64-* \ | ip2k-* | iq2000-* \ | k1om-* \ | le32-* | le64-* \ | lm32-* \ | m32c-* | m32r-* | m32rle-* \ | m68000-* | m680[012346]0-* | m68360-* | m683?2-* | m68k-* \ | m88110-* | m88k-* | maxq-* | mcore-* | metag-* \ | microblaze-* | microblazeel-* \ | mips-* | mipsbe-* | mipseb-* | mipsel-* | mipsle-* \ | mips16-* \ | mips64-* | mips64el-* \ | mips64octeon-* | mips64octeonel-* \ | mips64orion-* | mips64orionel-* \ | mips64r5900-* | mips64r5900el-* \ | mips64vr-* | mips64vrel-* \ | mips64vr4100-* | mips64vr4100el-* \ | mips64vr4300-* | mips64vr4300el-* \ | mips64vr5000-* | mips64vr5000el-* \ | mips64vr5900-* | mips64vr5900el-* \ | mipsisa32-* | mipsisa32el-* \ | mipsisa32r2-* | mipsisa32r2el-* \ | mipsisa32r6-* | mipsisa32r6el-* \ | mipsisa64-* | mipsisa64el-* \ | mipsisa64r2-* | mipsisa64r2el-* \ | mipsisa64r6-* | mipsisa64r6el-* \ | mipsisa64sb1-* | mipsisa64sb1el-* \ | mipsisa64sr71k-* | mipsisa64sr71kel-* \ | mipsr5900-* | mipsr5900el-* \ | mipstx39-* | mipstx39el-* \ | mmix-* \ | mt-* \ | msp430-* \ | nds32-* | nds32le-* | nds32be-* \ | nios-* | nios2-* | nios2eb-* | nios2el-* \ | none-* | np1-* | ns16k-* | ns32k-* \ | open8-* \ | or1k*-* \ | orion-* \ | pdp10-* | pdp11-* | pj-* | pjl-* | pn-* | power-* \ | powerpc-* | powerpc64-* | powerpc64le-* | powerpcle-* \ | pru-* \ | pyramid-* \ | riscv32-* | riscv64-* \ | rl78-* | romp-* | rs6000-* | rx-* \ | sh-* | sh[1234]-* | sh[24]a-* | sh[24]aeb-* | sh[23]e-* | sh[34]eb-* | sheb-* | shbe-* \ | shle-* | sh[1234]le-* | sh3ele-* | sh64-* | sh64le-* \ | sparc-* | sparc64-* | sparc64b-* | sparc64v-* | sparc86x-* | sparclet-* \ | sparclite-* \ | sparcv8-* | sparcv9-* | sparcv9b-* | sparcv9v-* | sv1-* | sx*-* \ | tahoe-* \ | tic30-* | tic4x-* | tic54x-* | tic55x-* | tic6x-* | tic80-* \ | tile*-* \ | tron-* \ | ubicom32-* \ | v850-* | v850e-* | v850e1-* | v850es-* | v850e2-* | v850e2v3-* \ | vax-* \ | visium-* \ | wasm32-* \ | we32k-* \ | x86-* | x86_64-* | xc16x-* | xps100-* \ | xstormy16-* | xtensa*-* \ | ymp-* \ | z8k-* | z80-*) ;; # Recognize the basic CPU types without company name, with glob match. xtensa*) basic_machine=$basic_machine-unknown ;; # Recognize the various machine names and aliases which stand # for a CPU type and a company and sometimes even an OS. 386bsd) basic_machine=i386-pc os=-bsd ;; 3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc) basic_machine=m68000-att ;; 3b*) basic_machine=we32k-att ;; a29khif) basic_machine=a29k-amd os=-udi ;; abacus) basic_machine=abacus-unknown ;; adobe68k) basic_machine=m68010-adobe os=-scout ;; alliant | fx80) basic_machine=fx80-alliant ;; altos | altos3068) basic_machine=m68k-altos ;; am29k) basic_machine=a29k-none os=-bsd ;; amd64) basic_machine=x86_64-pc ;; amd64-*) basic_machine=x86_64-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; amdahl) basic_machine=580-amdahl os=-sysv ;; amiga | amiga-*) basic_machine=m68k-unknown ;; amigaos | amigados) basic_machine=m68k-unknown os=-amigaos ;; amigaunix | amix) basic_machine=m68k-unknown os=-sysv4 ;; apollo68) basic_machine=m68k-apollo os=-sysv ;; apollo68bsd) basic_machine=m68k-apollo os=-bsd ;; aros) basic_machine=i386-pc os=-aros ;; asmjs) basic_machine=asmjs-unknown ;; aux) basic_machine=m68k-apple os=-aux ;; balance) basic_machine=ns32k-sequent os=-dynix ;; blackfin) basic_machine=bfin-unknown os=-linux ;; blackfin-*) basic_machine=bfin-`echo "$basic_machine" | sed 's/^[^-]*-//'` os=-linux ;; bluegene*) basic_machine=powerpc-ibm os=-cnk ;; c54x-*) basic_machine=tic54x-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; c55x-*) basic_machine=tic55x-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; c6x-*) basic_machine=tic6x-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; c90) basic_machine=c90-cray os=-unicos ;; cegcc) basic_machine=arm-unknown os=-cegcc ;; convex-c1) basic_machine=c1-convex os=-bsd ;; convex-c2) basic_machine=c2-convex os=-bsd ;; convex-c32) basic_machine=c32-convex os=-bsd ;; convex-c34) basic_machine=c34-convex os=-bsd ;; convex-c38) basic_machine=c38-convex os=-bsd ;; cray | j90) basic_machine=j90-cray os=-unicos ;; craynv) basic_machine=craynv-cray os=-unicosmp ;; cr16 | cr16-*) basic_machine=cr16-unknown os=-elf ;; crds | unos) basic_machine=m68k-crds ;; crisv32 | crisv32-* | etraxfs*) basic_machine=crisv32-axis ;; cris | cris-* | etrax*) basic_machine=cris-axis ;; crx) basic_machine=crx-unknown os=-elf ;; da30 | da30-*) basic_machine=m68k-da30 ;; decstation | decstation-3100 | pmax | pmax-* | pmin | dec3100 | decstatn) basic_machine=mips-dec ;; decsystem10* | dec10*) basic_machine=pdp10-dec os=-tops10 ;; decsystem20* | dec20*) basic_machine=pdp10-dec os=-tops20 ;; delta | 3300 | motorola-3300 | motorola-delta \ | 3300-motorola | delta-motorola) basic_machine=m68k-motorola ;; delta88) basic_machine=m88k-motorola os=-sysv3 ;; dicos) basic_machine=i686-pc os=-dicos ;; djgpp) basic_machine=i586-pc os=-msdosdjgpp ;; dpx20 | dpx20-*) basic_machine=rs6000-bull os=-bosx ;; dpx2*) basic_machine=m68k-bull os=-sysv3 ;; e500v[12]) basic_machine=powerpc-unknown os=$os"spe" ;; e500v[12]-*) basic_machine=powerpc-`echo "$basic_machine" | sed 's/^[^-]*-//'` os=$os"spe" ;; ebmon29k) basic_machine=a29k-amd os=-ebmon ;; elxsi) basic_machine=elxsi-elxsi os=-bsd ;; encore | umax | mmax) basic_machine=ns32k-encore ;; es1800 | OSE68k | ose68k | ose | OSE) basic_machine=m68k-ericsson os=-ose ;; fx2800) basic_machine=i860-alliant ;; genix) basic_machine=ns32k-ns ;; gmicro) basic_machine=tron-gmicro os=-sysv ;; go32) basic_machine=i386-pc os=-go32 ;; h3050r* | hiux*) basic_machine=hppa1.1-hitachi os=-hiuxwe2 ;; h8300hms) basic_machine=h8300-hitachi os=-hms ;; h8300xray) basic_machine=h8300-hitachi os=-xray ;; h8500hms) basic_machine=h8500-hitachi os=-hms ;; harris) basic_machine=m88k-harris os=-sysv3 ;; hp300-*) basic_machine=m68k-hp ;; hp300bsd) basic_machine=m68k-hp os=-bsd ;; hp300hpux) basic_machine=m68k-hp os=-hpux ;; hp3k9[0-9][0-9] | hp9[0-9][0-9]) basic_machine=hppa1.0-hp ;; hp9k2[0-9][0-9] | hp9k31[0-9]) basic_machine=m68000-hp ;; hp9k3[2-9][0-9]) basic_machine=m68k-hp ;; hp9k6[0-9][0-9] | hp6[0-9][0-9]) basic_machine=hppa1.0-hp ;; hp9k7[0-79][0-9] | hp7[0-79][0-9]) basic_machine=hppa1.1-hp ;; hp9k78[0-9] | hp78[0-9]) # FIXME: really hppa2.0-hp basic_machine=hppa1.1-hp ;; hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893) # FIXME: really hppa2.0-hp basic_machine=hppa1.1-hp ;; hp9k8[0-9][13679] | hp8[0-9][13679]) basic_machine=hppa1.1-hp ;; hp9k8[0-9][0-9] | hp8[0-9][0-9]) basic_machine=hppa1.0-hp ;; hppaosf) basic_machine=hppa1.1-hp os=-osf ;; hppro) basic_machine=hppa1.1-hp os=-proelf ;; i370-ibm* | ibm*) basic_machine=i370-ibm ;; i*86v32) basic_machine=`echo "$1" | sed -e 's/86.*/86-pc/'` os=-sysv32 ;; i*86v4*) basic_machine=`echo "$1" | sed -e 's/86.*/86-pc/'` os=-sysv4 ;; i*86v) basic_machine=`echo "$1" | sed -e 's/86.*/86-pc/'` os=-sysv ;; i*86sol2) basic_machine=`echo "$1" | sed -e 's/86.*/86-pc/'` os=-solaris2 ;; i386mach) basic_machine=i386-mach os=-mach ;; vsta) basic_machine=i386-unknown os=-vsta ;; iris | iris4d) basic_machine=mips-sgi case $os in -irix*) ;; *) os=-irix4 ;; esac ;; isi68 | isi) basic_machine=m68k-isi os=-sysv ;; leon-*|leon[3-9]-*) basic_machine=sparc-`echo "$basic_machine" | sed 's/-.*//'` ;; m68knommu) basic_machine=m68k-unknown os=-linux ;; m68knommu-*) basic_machine=m68k-`echo "$basic_machine" | sed 's/^[^-]*-//'` os=-linux ;; magnum | m3230) basic_machine=mips-mips os=-sysv ;; merlin) basic_machine=ns32k-utek os=-sysv ;; microblaze*) basic_machine=microblaze-xilinx ;; mingw64) basic_machine=x86_64-pc os=-mingw64 ;; mingw32) basic_machine=i686-pc os=-mingw32 ;; mingw32ce) basic_machine=arm-unknown os=-mingw32ce ;; miniframe) basic_machine=m68000-convergent ;; *mint | -mint[0-9]* | *MiNT | *MiNT[0-9]*) basic_machine=m68k-atari os=-mint ;; mips3*-*) basic_machine=`echo "$basic_machine" | sed -e 's/mips3/mips64/'` ;; mips3*) basic_machine=`echo "$basic_machine" | sed -e 's/mips3/mips64/'`-unknown ;; monitor) basic_machine=m68k-rom68k os=-coff ;; morphos) basic_machine=powerpc-unknown os=-morphos ;; moxiebox) basic_machine=moxie-unknown os=-moxiebox ;; msdos) basic_machine=i386-pc os=-msdos ;; ms1-*) basic_machine=`echo "$basic_machine" | sed -e 's/ms1-/mt-/'` ;; msys) basic_machine=i686-pc os=-msys ;; mvs) basic_machine=i370-ibm os=-mvs ;; nacl) basic_machine=le32-unknown os=-nacl ;; ncr3000) basic_machine=i486-ncr os=-sysv4 ;; netbsd386) basic_machine=i386-unknown os=-netbsd ;; netwinder) basic_machine=armv4l-rebel os=-linux ;; news | news700 | news800 | news900) basic_machine=m68k-sony os=-newsos ;; news1000) basic_machine=m68030-sony os=-newsos ;; news-3600 | risc-news) basic_machine=mips-sony os=-newsos ;; necv70) basic_machine=v70-nec os=-sysv ;; next | m*-next) basic_machine=m68k-next case $os in -nextstep* ) ;; -ns2*) os=-nextstep2 ;; *) os=-nextstep3 ;; esac ;; nh3000) basic_machine=m68k-harris os=-cxux ;; nh[45]000) basic_machine=m88k-harris os=-cxux ;; nindy960) basic_machine=i960-intel os=-nindy ;; mon960) basic_machine=i960-intel os=-mon960 ;; nonstopux) basic_machine=mips-compaq os=-nonstopux ;; np1) basic_machine=np1-gould ;; neo-tandem) basic_machine=neo-tandem ;; nse-tandem) basic_machine=nse-tandem ;; nsr-tandem) basic_machine=nsr-tandem ;; nsv-tandem) basic_machine=nsv-tandem ;; nsx-tandem) basic_machine=nsx-tandem ;; op50n-* | op60c-*) basic_machine=hppa1.1-oki os=-proelf ;; openrisc | openrisc-*) basic_machine=or32-unknown ;; os400) basic_machine=powerpc-ibm os=-os400 ;; OSE68000 | ose68000) basic_machine=m68000-ericsson os=-ose ;; os68k) basic_machine=m68k-none os=-os68k ;; pa-hitachi) basic_machine=hppa1.1-hitachi os=-hiuxwe2 ;; paragon) basic_machine=i860-intel os=-osf ;; parisc) basic_machine=hppa-unknown os=-linux ;; parisc-*) basic_machine=hppa-`echo "$basic_machine" | sed 's/^[^-]*-//'` os=-linux ;; pbd) basic_machine=sparc-tti ;; pbb) basic_machine=m68k-tti ;; pc532 | pc532-*) basic_machine=ns32k-pc532 ;; pc98) basic_machine=i386-pc ;; pc98-*) basic_machine=i386-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; pentium | p5 | k5 | k6 | nexgen | viac3) basic_machine=i586-pc ;; pentiumpro | p6 | 6x86 | athlon | athlon_*) basic_machine=i686-pc ;; pentiumii | pentium2 | pentiumiii | pentium3) basic_machine=i686-pc ;; pentium4) basic_machine=i786-pc ;; pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*) basic_machine=i586-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; pentiumpro-* | p6-* | 6x86-* | athlon-*) basic_machine=i686-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*) basic_machine=i686-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; pentium4-*) basic_machine=i786-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; pn) basic_machine=pn-gould ;; power) basic_machine=power-ibm ;; ppc | ppcbe) basic_machine=powerpc-unknown ;; ppc-* | ppcbe-*) basic_machine=powerpc-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; ppcle | powerpclittle) basic_machine=powerpcle-unknown ;; ppcle-* | powerpclittle-*) basic_machine=powerpcle-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; ppc64) basic_machine=powerpc64-unknown ;; ppc64-*) basic_machine=powerpc64-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; ppc64le | powerpc64little) basic_machine=powerpc64le-unknown ;; ppc64le-* | powerpc64little-*) basic_machine=powerpc64le-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; ps2) basic_machine=i386-ibm ;; pw32) basic_machine=i586-unknown os=-pw32 ;; rdos | rdos64) basic_machine=x86_64-pc os=-rdos ;; rdos32) basic_machine=i386-pc os=-rdos ;; rom68k) basic_machine=m68k-rom68k os=-coff ;; rm[46]00) basic_machine=mips-siemens ;; rtpc | rtpc-*) basic_machine=romp-ibm ;; s390 | s390-*) basic_machine=s390-ibm ;; s390x | s390x-*) basic_machine=s390x-ibm ;; sa29200) basic_machine=a29k-amd os=-udi ;; sb1) basic_machine=mipsisa64sb1-unknown ;; sb1el) basic_machine=mipsisa64sb1el-unknown ;; sde) basic_machine=mipsisa32-sde os=-elf ;; sei) basic_machine=mips-sei os=-seiux ;; sequent) basic_machine=i386-sequent ;; sh5el) basic_machine=sh5le-unknown ;; simso-wrs) basic_machine=sparclite-wrs os=-vxworks ;; sps7) basic_machine=m68k-bull os=-sysv2 ;; spur) basic_machine=spur-unknown ;; st2000) basic_machine=m68k-tandem ;; stratus) basic_machine=i860-stratus os=-sysv4 ;; strongarm-* | thumb-*) basic_machine=arm-`echo "$basic_machine" | sed 's/^[^-]*-//'` ;; sun2) basic_machine=m68000-sun ;; sun2os3) basic_machine=m68000-sun os=-sunos3 ;; sun2os4) basic_machine=m68000-sun os=-sunos4 ;; sun3os3) basic_machine=m68k-sun os=-sunos3 ;; sun3os4) basic_machine=m68k-sun os=-sunos4 ;; sun4os3) basic_machine=sparc-sun os=-sunos3 ;; sun4os4) basic_machine=sparc-sun os=-sunos4 ;; sun4sol2) basic_machine=sparc-sun os=-solaris2 ;; sun3 | sun3-*) basic_machine=m68k-sun ;; sun4) basic_machine=sparc-sun ;; sun386 | sun386i | roadrunner) basic_machine=i386-sun ;; sv1) basic_machine=sv1-cray os=-unicos ;; symmetry) basic_machine=i386-sequent os=-dynix ;; t3e) basic_machine=alphaev5-cray os=-unicos ;; t90) basic_machine=t90-cray os=-unicos ;; tile*) basic_machine=$basic_machine-unknown os=-linux-gnu ;; tx39) basic_machine=mipstx39-unknown ;; tx39el) basic_machine=mipstx39el-unknown ;; toad1) basic_machine=pdp10-xkl os=-tops20 ;; tower | tower-32) basic_machine=m68k-ncr ;; tpf) basic_machine=s390x-ibm os=-tpf ;; udi29k) basic_machine=a29k-amd os=-udi ;; ultra3) basic_machine=a29k-nyu os=-sym1 ;; v810 | necv810) basic_machine=v810-nec os=-none ;; vaxv) basic_machine=vax-dec os=-sysv ;; vms) basic_machine=vax-dec os=-vms ;; vpp*|vx|vx-*) basic_machine=f301-fujitsu ;; vxworks960) basic_machine=i960-wrs os=-vxworks ;; vxworks68) basic_machine=m68k-wrs os=-vxworks ;; vxworks29k) basic_machine=a29k-wrs os=-vxworks ;; w65*) basic_machine=w65-wdc os=-none ;; w89k-*) basic_machine=hppa1.1-winbond os=-proelf ;; x64) basic_machine=x86_64-pc ;; xbox) basic_machine=i686-pc os=-mingw32 ;; xps | xps100) basic_machine=xps100-honeywell ;; xscale-* | xscalee[bl]-*) basic_machine=`echo "$basic_machine" | sed 's/^xscale/arm/'` ;; ymp) basic_machine=ymp-cray os=-unicos ;; none) basic_machine=none-none os=-none ;; # Here we handle the default manufacturer of certain CPU types. It is in # some cases the only manufacturer, in others, it is the most popular. w89k) basic_machine=hppa1.1-winbond ;; op50n) basic_machine=hppa1.1-oki ;; op60c) basic_machine=hppa1.1-oki ;; romp) basic_machine=romp-ibm ;; mmix) basic_machine=mmix-knuth ;; rs6000) basic_machine=rs6000-ibm ;; vax) basic_machine=vax-dec ;; pdp11) basic_machine=pdp11-dec ;; we32k) basic_machine=we32k-att ;; sh[1234] | sh[24]a | sh[24]aeb | sh[34]eb | sh[1234]le | sh[23]ele) basic_machine=sh-unknown ;; cydra) basic_machine=cydra-cydrome ;; orion) basic_machine=orion-highlevel ;; orion105) basic_machine=clipper-highlevel ;; mac | mpw | mac-mpw) basic_machine=m68k-apple ;; pmac | pmac-mpw) basic_machine=powerpc-apple ;; *-unknown) # Make sure to match an already-canonicalized machine name. ;; *) echo Invalid configuration \`"$1"\': machine \`"$basic_machine"\' not recognized 1>&2 exit 1 ;; esac # Here we canonicalize certain aliases for manufacturers. case $basic_machine in *-digital*) basic_machine=`echo "$basic_machine" | sed 's/digital.*/dec/'` ;; *-commodore*) basic_machine=`echo "$basic_machine" | sed 's/commodore.*/cbm/'` ;; *) ;; esac # Decode manufacturer-specific aliases for certain operating systems. if [ x"$os" != x"" ] then case $os in # First match some system type aliases that might get confused # with valid system types. # -solaris* is a basic system type, with this one exception. -auroraux) os=-auroraux ;; -solaris1 | -solaris1.*) os=`echo $os | sed -e 's|solaris1|sunos4|'` ;; -solaris) os=-solaris2 ;; -unixware*) os=-sysv4.2uw ;; -gnu/linux*) os=`echo $os | sed -e 's|gnu/linux|linux-gnu|'` ;; # es1800 is here to avoid being matched by es* (a different OS) -es1800*) os=-ose ;; # Now accept the basic system types. # The portable systems comes first. # Each alternative MUST end in a * to match a version number. # -sysv* is not here because it comes later, after sysvr4. -gnu* | -bsd* | -mach* | -minix* | -genix* | -ultrix* | -irix* \ | -*vms* | -sco* | -esix* | -isc* | -aix* | -cnk* | -sunos | -sunos[34]*\ | -hpux* | -unos* | -osf* | -luna* | -dgux* | -auroraux* | -solaris* \ | -sym* | -kopensolaris* | -plan9* \ | -amigaos* | -amigados* | -msdos* | -newsos* | -unicos* | -aof* \ | -aos* | -aros* | -cloudabi* | -sortix* \ | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \ | -clix* | -riscos* | -uniplus* | -iris* | -rtu* | -xenix* \ | -hiux* | -knetbsd* | -mirbsd* | -netbsd* \ | -bitrig* | -openbsd* | -solidbsd* | -libertybsd* \ | -ekkobsd* | -kfreebsd* | -freebsd* | -riscix* | -lynxos* \ | -bosx* | -nextstep* | -cxux* | -aout* | -elf* | -oabi* \ | -ptx* | -coff* | -ecoff* | -winnt* | -domain* | -vsta* \ | -udi* | -eabi* | -lites* | -ieee* | -go32* | -aux* \ | -chorusos* | -chorusrdb* | -cegcc* | -glidix* \ | -cygwin* | -msys* | -pe* | -psos* | -moss* | -proelf* | -rtems* \ | -midipix* | -mingw32* | -mingw64* | -linux-gnu* | -linux-android* \ | -linux-newlib* | -linux-musl* | -linux-uclibc* \ | -uxpv* | -beos* | -mpeix* | -udk* | -moxiebox* \ | -interix* | -uwin* | -mks* | -rhapsody* | -darwin* \ | -openstep* | -oskit* | -conix* | -pw32* | -nonstopux* \ | -storm-chaos* | -tops10* | -tenex* | -tops20* | -its* \ | -os2* | -vos* | -palmos* | -uclinux* | -nucleus* \ | -morphos* | -superux* | -rtmk* | -windiss* \ | -powermax* | -dnix* | -nx6 | -nx7 | -sei* | -dragonfly* \ | -skyos* | -haiku* | -rdos* | -toppers* | -drops* | -es* \ | -onefs* | -tirtos* | -phoenix* | -fuchsia* | -redox* | -bme* \ | -midnightbsd*) # Remember, each alternative MUST END IN *, to match a version number. ;; -qnx*) case $basic_machine in x86-* | i*86-*) ;; *) os=-nto$os ;; esac ;; -nto-qnx*) ;; -nto*) os=`echo $os | sed -e 's|nto|nto-qnx|'` ;; -sim | -xray | -os68k* | -v88r* \ | -windows* | -osx | -abug | -netware* | -os9* \ | -macos* | -mpw* | -magic* | -mmixware* | -mon960* | -lnews*) ;; -mac*) os=`echo "$os" | sed -e 's|mac|macos|'` ;; -linux-dietlibc) os=-linux-dietlibc ;; -linux*) os=`echo $os | sed -e 's|linux|linux-gnu|'` ;; -sunos5*) os=`echo "$os" | sed -e 's|sunos5|solaris2|'` ;; -sunos6*) os=`echo "$os" | sed -e 's|sunos6|solaris3|'` ;; -opened*) os=-openedition ;; -os400*) os=-os400 ;; -wince*) os=-wince ;; -utek*) os=-bsd ;; -dynix*) os=-bsd ;; -acis*) os=-aos ;; -atheos*) os=-atheos ;; -syllable*) os=-syllable ;; -386bsd) os=-bsd ;; -ctix* | -uts*) os=-sysv ;; -nova*) os=-rtmk-nova ;; -ns2) os=-nextstep2 ;; -nsk*) os=-nsk ;; # Preserve the version number of sinix5. -sinix5.*) os=`echo $os | sed -e 's|sinix|sysv|'` ;; -sinix*) os=-sysv4 ;; -tpf*) os=-tpf ;; -triton*) os=-sysv3 ;; -oss*) os=-sysv3 ;; -svr4*) os=-sysv4 ;; -svr3) os=-sysv3 ;; -sysvr4) os=-sysv4 ;; # This must come after -sysvr4. -sysv*) ;; -ose*) os=-ose ;; -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) os=-mint ;; -zvmoe) os=-zvmoe ;; -dicos*) os=-dicos ;; -pikeos*) # Until real need of OS specific support for # particular features comes up, bare metal # configurations are quite functional. case $basic_machine in arm*) os=-eabi ;; *) os=-elf ;; esac ;; -nacl*) ;; -ios) ;; -none) ;; *) # Get rid of the `-' at the beginning of $os. os=`echo $os | sed 's/[^-]*-//'` echo Invalid configuration \`"$1"\': system \`"$os"\' not recognized 1>&2 exit 1 ;; esac else # Here we handle the default operating systems that come with various machines. # The value should be what the vendor currently ships out the door with their # machine or put another way, the most popular os provided with the machine. # Note that if you're going to try to match "-MANUFACTURER" here (say, # "-sun"), then you have to tell the case statement up towards the top # that MANUFACTURER isn't an operating system. Otherwise, code above # will signal an error saying that MANUFACTURER isn't an operating # system, and we'll never get to this point. case $basic_machine in score-*) os=-elf ;; spu-*) os=-elf ;; *-acorn) os=-riscix1.2 ;; arm*-rebel) os=-linux ;; arm*-semi) os=-aout ;; c4x-* | tic4x-*) os=-coff ;; c8051-*) os=-elf ;; hexagon-*) os=-elf ;; tic54x-*) os=-coff ;; tic55x-*) os=-coff ;; tic6x-*) os=-coff ;; # This must come before the *-dec entry. pdp10-*) os=-tops20 ;; pdp11-*) os=-none ;; *-dec | vax-*) os=-ultrix4.2 ;; m68*-apollo) os=-domain ;; i386-sun) os=-sunos4.0.2 ;; m68000-sun) os=-sunos3 ;; m68*-cisco) os=-aout ;; mep-*) os=-elf ;; mips*-cisco) os=-elf ;; mips*-*) os=-elf ;; or32-*) os=-coff ;; *-tti) # must be before sparc entry or we get the wrong os. os=-sysv3 ;; sparc-* | *-sun) os=-sunos4.1.1 ;; pru-*) os=-elf ;; *-be) os=-beos ;; *-ibm) os=-aix ;; *-knuth) os=-mmixware ;; *-wec) os=-proelf ;; *-winbond) os=-proelf ;; *-oki) os=-proelf ;; *-hp) os=-hpux ;; *-hitachi) os=-hiux ;; i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent) os=-sysv ;; *-cbm) os=-amigaos ;; *-dg) os=-dgux ;; *-dolphin) os=-sysv3 ;; m68k-ccur) os=-rtu ;; m88k-omron*) os=-luna ;; *-next) os=-nextstep ;; *-sequent) os=-ptx ;; *-crds) os=-unos ;; *-ns) os=-genix ;; i370-*) os=-mvs ;; *-gould) os=-sysv ;; *-highlevel) os=-bsd ;; *-encore) os=-bsd ;; *-sgi) os=-irix ;; *-siemens) os=-sysv4 ;; *-masscomp) os=-rtu ;; f30[01]-fujitsu | f700-fujitsu) os=-uxpv ;; *-rom68k) os=-coff ;; *-*bug) os=-coff ;; *-apple) os=-macos ;; *-atari*) os=-mint ;; *) os=-none ;; esac fi # Here we handle the case where we know the os, and the CPU type, but not the # manufacturer. We pick the logical manufacturer. vendor=unknown case $basic_machine in *-unknown) case $os in -riscix*) vendor=acorn ;; -sunos*) vendor=sun ;; -cnk*|-aix*) vendor=ibm ;; -beos*) vendor=be ;; -hpux*) vendor=hp ;; -mpeix*) vendor=hp ;; -hiux*) vendor=hitachi ;; -unos*) vendor=crds ;; -dgux*) vendor=dg ;; -luna*) vendor=omron ;; -genix*) vendor=ns ;; -mvs* | -opened*) vendor=ibm ;; -os400*) vendor=ibm ;; -ptx*) vendor=sequent ;; -tpf*) vendor=ibm ;; -vxsim* | -vxworks* | -windiss*) vendor=wrs ;; -aux*) vendor=apple ;; -hms*) vendor=hitachi ;; -mpw* | -macos*) vendor=apple ;; -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) vendor=atari ;; -vos*) vendor=stratus ;; esac basic_machine=`echo "$basic_machine" | sed "s/unknown/$vendor/"` ;; esac echo "$basic_machine$os" exit # Local variables: # eval: (add-hook 'write-file-functions 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: tpm2-pkcs11-1.7.0/LICENSE0000644000175000017500000000310013754763565011446 00000000000000Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Note that: - lib/twist.c - lib/twist.h - test/unit/test_twist all eminent from https://bitbucket.org/billcroberts/twist/src/master/ Those files, the copyright is retained by William Roberts however the source is relicensed from Apache 2.0, to BSD2 by the author. Those files respect the license as documented in the respective file: - src/pkcs11.h - .gitignore tpm2-pkcs11-1.7.0/aminclude_static.am0000664000175000017500000001513214124412615014255 00000000000000 # aminclude_static.am generated automatically by Autoconf # from AX_AM_MACROS_STATIC on Mon Sep 27 14:03:41 CDT 2021 # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: $(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on ) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: ) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: ) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on ) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: ) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the $(PACKAGE_NAME) and # $(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir if CODE_COVERAGE_ENABLED ifeq ($(abs_builddir), $(abs_top_builddir)) CODE_COVERAGE_DIRECTORY ?= $(top_builddir) CODE_COVERAGE_OUTPUT_FILE ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info CODE_COVERAGE_OUTPUT_DIRECTORY ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage CODE_COVERAGE_BRANCH_COVERAGE ?= CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= $(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc lcov_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_LCOV_SHOPTS ?= $(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool "$(GCOV)" CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= $(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) CODE_COVERAGE_LCOV_OPTIONS ?= $(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= CODE_COVERAGE_LCOV_RMOPTS ?= $(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=$(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc genhtml_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_GENHTML_OPTIONS ?= $(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) CODE_COVERAGE_IGNORE_PATTERN ?= GITIGNOREFILES = $(GITIGNOREFILES) $(CODE_COVERAGE_OUTPUT_FILE) $(CODE_COVERAGE_OUTPUT_DIRECTORY) code_coverage_v_lcov_cap = $(code_coverage_v_lcov_cap_$(V)) code_coverage_v_lcov_cap_ = $(code_coverage_v_lcov_cap_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_cap_0 = @echo " LCOV --capture" $(CODE_COVERAGE_OUTPUT_FILE); code_coverage_v_lcov_ign = $(code_coverage_v_lcov_ign_$(V)) code_coverage_v_lcov_ign_ = $(code_coverage_v_lcov_ign_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_ign_0 = @echo " LCOV --remove /tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN); code_coverage_v_genhtml = $(code_coverage_v_genhtml_$(V)) code_coverage_v_genhtml_ = $(code_coverage_v_genhtml_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_genhtml_0 = @echo " GEN " "$(CODE_COVERAGE_OUTPUT_DIRECTORY)"; code_coverage_quiet = $(code_coverage_quiet_$(V)) code_coverage_quiet_ = $(code_coverage_quiet_$(AM_DEFAULT_VERBOSITY)) code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots code_coverage_sanitize = $(subst -,_,$(subst .,_,$(1))) # Use recursive makes in order to ignore errors during check check-code-coverage: -$(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) -k check $(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data code-coverage-capture: code-coverage-capture-hook $(code_coverage_v_lcov_cap)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --capture --output-file "$(CODE_COVERAGE_OUTPUT_FILE).tmp" --test-name "$(call code_coverage_sanitize,$(PACKAGE_NAME)-$(PACKAGE_VERSION))" --no-checksum --compat-libtool $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_OPTIONS) $(code_coverage_v_lcov_ign)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --remove "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "/tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN) --output-file "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_RMOPTS) -@rm -f "$(CODE_COVERAGE_OUTPUT_FILE).tmp" $(code_coverage_v_genhtml)LANG=C $(GENHTML) $(code_coverage_quiet) $(addprefix --prefix ,$(CODE_COVERAGE_DIRECTORY)) --output-directory "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" --title "$(PACKAGE_NAME)-$(PACKAGE_VERSION) Code Coverage" --legend --show-details "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_GENHTML_OPTIONS) @echo "file://$(abs_builddir)/$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html" code-coverage-clean: -$(LCOV) --directory $(top_builddir) -z -rm -rf "$(CODE_COVERAGE_OUTPUT_FILE)" "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" -find . \( -name "*.gcda" -o -name "*.gcno" -o -name "*.gcov" \) -delete code-coverage-dist-clean: AM_DISTCHECK_CONFIGURE_FLAGS = $(AM_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage else # ifneq ($(abs_builddir), $(abs_top_builddir)) check-code-coverage: code-coverage-capture: code-coverage-capture-hook code-coverage-clean: code-coverage-dist-clean: endif # ifeq ($(abs_builddir), $(abs_top_builddir)) else #! CODE_COVERAGE_ENABLED # Use recursive makes in order to ignore errors during check check-code-coverage: @echo "Need to reconfigure with --enable-code-coverage" # Capture code coverage data code-coverage-capture: code-coverage-capture-hook @echo "Need to reconfigure with --enable-code-coverage" code-coverage-clean: code-coverage-dist-clean: endif #CODE_COVERAGE_ENABLED # Hook rule executed before code-coverage-capture, overridable by the user code-coverage-capture-hook: .PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook tpm2-pkcs11-1.7.0/aclocal.m40000664000175000017500000014525114124412607012275 00000000000000# generated automatically by aclocal 1.16.1 -*- Autoconf -*- # Copyright (C) 1996-2018 Free Software Foundation, Inc. # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY, to the extent permitted by law; without # even the implied warranty of MERCHANTABILITY or FITNESS FOR A # PARTICULAR PURPOSE. m4_ifndef([AC_CONFIG_MACRO_DIRS], [m4_defun([_AM_CONFIG_MACRO_DIRS], [])m4_defun([AC_CONFIG_MACRO_DIRS], [_AM_CONFIG_MACRO_DIRS($@)])]) m4_ifndef([AC_AUTOCONF_VERSION], [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.69],, [m4_warning([this file was generated for autoconf 2.69. You have another version of autoconf. It may work, but is not guaranteed to. If you have problems, you may need to regenerate the build system entirely. To do so, use the procedure documented by the package, typically 'autoreconf'.])]) # Copyright (C) 2002-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_AUTOMAKE_VERSION(VERSION) # ---------------------------- # Automake X.Y traces this macro to ensure aclocal.m4 has been # generated from the m4 files accompanying Automake X.Y. # (This private macro should not be called outside this file.) AC_DEFUN([AM_AUTOMAKE_VERSION], [am__api_version='1.16' dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to dnl require some minimum version. Point them to the right macro. m4_if([$1], [1.16.1], [], [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl ]) # _AM_AUTOCONF_VERSION(VERSION) # ----------------------------- # aclocal traces this macro to find the Autoconf version. # This is a private macro too. Using m4_define simplifies # the logic in aclocal, which can simply ignore this definition. m4_define([_AM_AUTOCONF_VERSION], []) # AM_SET_CURRENT_AUTOMAKE_VERSION # ------------------------------- # Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced. # This function is AC_REQUIREd by AM_INIT_AUTOMAKE. AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION], [AM_AUTOMAKE_VERSION([1.16.1])dnl m4_ifndef([AC_AUTOCONF_VERSION], [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl _AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))]) # AM_AUX_DIR_EXPAND -*- Autoconf -*- # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets # $ac_aux_dir to '$srcdir/foo'. In other projects, it is set to # '$srcdir', '$srcdir/..', or '$srcdir/../..'. # # Of course, Automake must honor this variable whenever it calls a # tool from the auxiliary directory. The problem is that $srcdir (and # therefore $ac_aux_dir as well) can be either absolute or relative, # depending on how configure is run. This is pretty annoying, since # it makes $ac_aux_dir quite unusable in subdirectories: in the top # source directory, any form will work fine, but in subdirectories a # relative path needs to be adjusted first. # # $ac_aux_dir/missing # fails when called from a subdirectory if $ac_aux_dir is relative # $top_srcdir/$ac_aux_dir/missing # fails if $ac_aux_dir is absolute, # fails when called from a subdirectory in a VPATH build with # a relative $ac_aux_dir # # The reason of the latter failure is that $top_srcdir and $ac_aux_dir # are both prefixed by $srcdir. In an in-source build this is usually # harmless because $srcdir is '.', but things will broke when you # start a VPATH build or use an absolute $srcdir. # # So we could use something similar to $top_srcdir/$ac_aux_dir/missing, # iff we strip the leading $srcdir from $ac_aux_dir. That would be: # am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"` # and then we would define $MISSING as # MISSING="\${SHELL} $am_aux_dir/missing" # This will work as long as MISSING is not called from configure, because # unfortunately $(top_srcdir) has no meaning in configure. # However there are other variables, like CC, which are often used in # configure, and could therefore not use this "fixed" $ac_aux_dir. # # Another solution, used here, is to always expand $ac_aux_dir to an # absolute PATH. The drawback is that using absolute paths prevent a # configured tree to be moved without reconfiguration. AC_DEFUN([AM_AUX_DIR_EXPAND], [AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl # Expand $ac_aux_dir to an absolute path. am_aux_dir=`cd "$ac_aux_dir" && pwd` ]) # AM_CONDITIONAL -*- Autoconf -*- # Copyright (C) 1997-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_CONDITIONAL(NAME, SHELL-CONDITION) # ------------------------------------- # Define a conditional. AC_DEFUN([AM_CONDITIONAL], [AC_PREREQ([2.52])dnl m4_if([$1], [TRUE], [AC_FATAL([$0: invalid condition: $1])], [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl AC_SUBST([$1_TRUE])dnl AC_SUBST([$1_FALSE])dnl _AM_SUBST_NOTMAKE([$1_TRUE])dnl _AM_SUBST_NOTMAKE([$1_FALSE])dnl m4_define([_AM_COND_VALUE_$1], [$2])dnl if $2; then $1_TRUE= $1_FALSE='#' else $1_TRUE='#' $1_FALSE= fi AC_CONFIG_COMMANDS_PRE( [if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then AC_MSG_ERROR([[conditional "$1" was never defined. Usually this means the macro was only invoked conditionally.]]) fi])]) # Copyright (C) 1999-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # There are a few dirty hacks below to avoid letting 'AC_PROG_CC' be # written in clear, in which case automake, when reading aclocal.m4, # will think it sees a *use*, and therefore will trigger all it's # C support machinery. Also note that it means that autoscan, seeing # CC etc. in the Makefile, will ask for an AC_PROG_CC use... # _AM_DEPENDENCIES(NAME) # ---------------------- # See how the compiler implements dependency checking. # NAME is "CC", "CXX", "OBJC", "OBJCXX", "UPC", or "GJC". # We try a few techniques and use that to set a single cache variable. # # We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was # modified to invoke _AM_DEPENDENCIES(CC); we would have a circular # dependency, and given that the user is not expected to run this macro, # just rely on AC_PROG_CC. AC_DEFUN([_AM_DEPENDENCIES], [AC_REQUIRE([AM_SET_DEPDIR])dnl AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl AC_REQUIRE([AM_MAKE_INCLUDE])dnl AC_REQUIRE([AM_DEP_TRACK])dnl m4_if([$1], [CC], [depcc="$CC" am_compiler_list=], [$1], [CXX], [depcc="$CXX" am_compiler_list=], [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'], [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'], [$1], [UPC], [depcc="$UPC" am_compiler_list=], [$1], [GCJ], [depcc="$GCJ" am_compiler_list='gcc3 gcc'], [depcc="$$1" am_compiler_list=]) AC_CACHE_CHECK([dependency style of $depcc], [am_cv_$1_dependencies_compiler_type], [if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then # We make a subdir and do the tests there. Otherwise we can end up # making bogus files that we don't know about and never remove. For # instance it was reported that on HP-UX the gcc test will end up # making a dummy file named 'D' -- because '-MD' means "put the output # in D". rm -rf conftest.dir mkdir conftest.dir # Copy depcomp to subdir because otherwise we won't find it if we're # using a relative directory. cp "$am_depcomp" conftest.dir cd conftest.dir # We will build objects and dependencies in a subdirectory because # it helps to detect inapplicable dependency modes. For instance # both Tru64's cc and ICC support -MD to output dependencies as a # side effect of compilation, but ICC will put the dependencies in # the current directory while Tru64 will put them in the object # directory. mkdir sub am_cv_$1_dependencies_compiler_type=none if test "$am_compiler_list" = ""; then am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp` fi am__universal=false m4_case([$1], [CC], [case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac], [CXX], [case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac]) for depmode in $am_compiler_list; do # Setup a source with many dependencies, because some compilers # like to wrap large dependency lists on column 80 (with \), and # we should not choose a depcomp mode which is confused by this. # # We need to recreate these files for each test, as the compiler may # overwrite some of them when testing with obscure command lines. # This happens at least with the AIX C compiler. : > sub/conftest.c for i in 1 2 3 4 5 6; do echo '#include "conftst'$i'.h"' >> sub/conftest.c # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with # Solaris 10 /bin/sh. echo '/* dummy */' > sub/conftst$i.h done echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf # We check with '-c' and '-o' for the sake of the "dashmstdout" # mode. It turns out that the SunPro C++ compiler does not properly # handle '-M -o', and we need to detect this. Also, some Intel # versions had trouble with output in subdirs. am__obj=sub/conftest.${OBJEXT-o} am__minus_obj="-o $am__obj" case $depmode in gcc) # This depmode causes a compiler race in universal mode. test "$am__universal" = false || continue ;; nosideeffect) # After this tag, mechanisms are not by side-effect, so they'll # only be used when explicitly requested. if test "x$enable_dependency_tracking" = xyes; then continue else break fi ;; msvc7 | msvc7msys | msvisualcpp | msvcmsys) # This compiler won't grok '-c -o', but also, the minuso test has # not run yet. These depmodes are late enough in the game, and # so weak that their functioning should not be impacted. am__obj=conftest.${OBJEXT-o} am__minus_obj= ;; none) break ;; esac if depmode=$depmode \ source=sub/conftest.c object=$am__obj \ depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \ $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \ >/dev/null 2>conftest.err && grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 && grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 && grep $am__obj sub/conftest.Po > /dev/null 2>&1 && ${MAKE-make} -s -f confmf > /dev/null 2>&1; then # icc doesn't choke on unknown options, it will just issue warnings # or remarks (even with -Werror). So we grep stderr for any message # that says an option was ignored or not supported. # When given -MP, icc 7.0 and 7.1 complain thusly: # icc: Command line warning: ignoring option '-M'; no argument required # The diagnosis changed in icc 8.0: # icc: Command line remark: option '-MP' not supported if (grep 'ignoring option' conftest.err || grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else am_cv_$1_dependencies_compiler_type=$depmode break fi fi done cd .. rm -rf conftest.dir else am_cv_$1_dependencies_compiler_type=none fi ]) AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type]) AM_CONDITIONAL([am__fastdep$1], [ test "x$enable_dependency_tracking" != xno \ && test "$am_cv_$1_dependencies_compiler_type" = gcc3]) ]) # AM_SET_DEPDIR # ------------- # Choose a directory name for dependency files. # This macro is AC_REQUIREd in _AM_DEPENDENCIES. AC_DEFUN([AM_SET_DEPDIR], [AC_REQUIRE([AM_SET_LEADING_DOT])dnl AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl ]) # AM_DEP_TRACK # ------------ AC_DEFUN([AM_DEP_TRACK], [AC_ARG_ENABLE([dependency-tracking], [dnl AS_HELP_STRING( [--enable-dependency-tracking], [do not reject slow dependency extractors]) AS_HELP_STRING( [--disable-dependency-tracking], [speeds up one-time build])]) if test "x$enable_dependency_tracking" != xno; then am_depcomp="$ac_aux_dir/depcomp" AMDEPBACKSLASH='\' am__nodep='_no' fi AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno]) AC_SUBST([AMDEPBACKSLASH])dnl _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl AC_SUBST([am__nodep])dnl _AM_SUBST_NOTMAKE([am__nodep])dnl ]) # Generate code to set up dependency tracking. -*- Autoconf -*- # Copyright (C) 1999-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_OUTPUT_DEPENDENCY_COMMANDS # ------------------------------ AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS], [{ # Older Autoconf quotes --file arguments for eval, but not when files # are listed without --file. Let's play safe and only enable the eval # if we detect the quoting. # TODO: see whether this extra hack can be removed once we start # requiring Autoconf 2.70 or later. AS_CASE([$CONFIG_FILES], [*\'*], [eval set x "$CONFIG_FILES"], [*], [set x $CONFIG_FILES]) shift # Used to flag and report bootstrapping failures. am_rc=0 for am_mf do # Strip MF so we end up with the name of the file. am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'` # Check whether this is an Automake generated Makefile which includes # dependency-tracking related rules and includes. # Grep'ing the whole file directly is not great: AIX grep has a line # limit of 2048, but all sed's we know have understand at least 4000. sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \ || continue am_dirpart=`AS_DIRNAME(["$am_mf"])` am_filepart=`AS_BASENAME(["$am_mf"])` AM_RUN_LOG([cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles]) || am_rc=$? done if test $am_rc -ne 0; then AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments for automatic dependency tracking. Try re-running configure with the '--disable-dependency-tracking' option to at least be able to build the package (albeit without support for automatic dependency tracking).]) fi AS_UNSET([am_dirpart]) AS_UNSET([am_filepart]) AS_UNSET([am_mf]) AS_UNSET([am_rc]) rm -f conftest-deps.mk } ])# _AM_OUTPUT_DEPENDENCY_COMMANDS # AM_OUTPUT_DEPENDENCY_COMMANDS # ----------------------------- # This macro should only be invoked once -- use via AC_REQUIRE. # # This code is only required when automatic dependency tracking is enabled. # This creates each '.Po' and '.Plo' makefile fragment that we'll need in # order to bootstrap the dependency handling code. AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS], [AC_CONFIG_COMMANDS([depfiles], [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS], [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])]) # Do all the work for Automake. -*- Autoconf -*- # Copyright (C) 1996-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This macro actually does too much. Some checks are only needed if # your package does certain things. But this isn't really a big deal. dnl Redefine AC_PROG_CC to automatically invoke _AM_PROG_CC_C_O. m4_define([AC_PROG_CC], m4_defn([AC_PROG_CC]) [_AM_PROG_CC_C_O ]) # AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE]) # AM_INIT_AUTOMAKE([OPTIONS]) # ----------------------------------------------- # The call with PACKAGE and VERSION arguments is the old style # call (pre autoconf-2.50), which is being phased out. PACKAGE # and VERSION should now be passed to AC_INIT and removed from # the call to AM_INIT_AUTOMAKE. # We support both call styles for the transition. After # the next Automake release, Autoconf can make the AC_INIT # arguments mandatory, and then we can depend on a new Autoconf # release and drop the old call support. AC_DEFUN([AM_INIT_AUTOMAKE], [AC_PREREQ([2.65])dnl dnl Autoconf wants to disallow AM_ names. We explicitly allow dnl the ones we care about. m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl AC_REQUIRE([AC_PROG_INSTALL])dnl if test "`cd $srcdir && pwd`" != "`pwd`"; then # Use -I$(srcdir) only when $(srcdir) != ., so that make's output # is not polluted with repeated "-I." AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl # test to see if srcdir already configured if test -f $srcdir/config.status; then AC_MSG_ERROR([source directory already configured; run "make distclean" there first]) fi fi # test whether we have cygpath if test -z "$CYGPATH_W"; then if (cygpath --version) >/dev/null 2>/dev/null; then CYGPATH_W='cygpath -w' else CYGPATH_W=echo fi fi AC_SUBST([CYGPATH_W]) # Define the identity of the package. dnl Distinguish between old-style and new-style calls. m4_ifval([$2], [AC_DIAGNOSE([obsolete], [$0: two- and three-arguments forms are deprecated.]) m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl AC_SUBST([PACKAGE], [$1])dnl AC_SUBST([VERSION], [$2])], [_AM_SET_OPTIONS([$1])dnl dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT. m4_if( m4_ifdef([AC_PACKAGE_NAME], [ok]):m4_ifdef([AC_PACKAGE_VERSION], [ok]), [ok:ok],, [m4_fatal([AC_INIT should be called with package and version arguments])])dnl AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl _AM_IF_OPTION([no-define],, [AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package]) AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl # Some tools Automake needs. AC_REQUIRE([AM_SANITY_CHECK])dnl AC_REQUIRE([AC_ARG_PROGRAM])dnl AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}]) AM_MISSING_PROG([AUTOCONF], [autoconf]) AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}]) AM_MISSING_PROG([AUTOHEADER], [autoheader]) AM_MISSING_PROG([MAKEINFO], [makeinfo]) AC_REQUIRE([AM_PROG_INSTALL_SH])dnl AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl AC_REQUIRE([AC_PROG_MKDIR_P])dnl # For better backward compatibility. To be removed once Automake 1.9.x # dies out for good. For more background, see: # # AC_SUBST([mkdir_p], ['$(MKDIR_P)']) # We need awk for the "check" target (and possibly the TAP driver). The # system "awk" is bad on some platforms. AC_REQUIRE([AC_PROG_AWK])dnl AC_REQUIRE([AC_PROG_MAKE_SET])dnl AC_REQUIRE([AM_SET_LEADING_DOT])dnl _AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])], [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])], [_AM_PROG_TAR([v7])])]) _AM_IF_OPTION([no-dependencies],, [AC_PROVIDE_IFELSE([AC_PROG_CC], [_AM_DEPENDENCIES([CC])], [m4_define([AC_PROG_CC], m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl AC_PROVIDE_IFELSE([AC_PROG_CXX], [_AM_DEPENDENCIES([CXX])], [m4_define([AC_PROG_CXX], m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl AC_PROVIDE_IFELSE([AC_PROG_OBJC], [_AM_DEPENDENCIES([OBJC])], [m4_define([AC_PROG_OBJC], m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl AC_PROVIDE_IFELSE([AC_PROG_OBJCXX], [_AM_DEPENDENCIES([OBJCXX])], [m4_define([AC_PROG_OBJCXX], m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl ]) AC_REQUIRE([AM_SILENT_RULES])dnl dnl The testsuite driver may need to know about EXEEXT, so add the dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen. This dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below. AC_CONFIG_COMMANDS_PRE(dnl [m4_provide_if([_AM_COMPILER_EXEEXT], [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl # POSIX will say in a future version that running "rm -f" with no argument # is OK; and we want to be able to make that assumption in our Makefile # recipes. So use an aggressive probe to check that the usage we want is # actually supported "in the wild" to an acceptable degree. # See automake bug#10828. # To make any issue more visible, cause the running configure to be aborted # by default if the 'rm' program in use doesn't match our expectations; the # user can still override this though. if rm -f && rm -fr && rm -rf; then : OK; else cat >&2 <<'END' Oops! Your 'rm' program seems unable to run without file operands specified on the command line, even when the '-f' option is present. This is contrary to the behaviour of most rm programs out there, and not conforming with the upcoming POSIX standard: Please tell bug-automake@gnu.org about your system, including the value of your $PATH and any error possibly output before this message. This can help us improve future automake versions. END if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then echo 'Configuration will proceed anyway, since you have set the' >&2 echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2 echo >&2 else cat >&2 <<'END' Aborting the configuration process, to ensure you take notice of the issue. You can download and install GNU coreutils to get an 'rm' implementation that behaves properly: . If you want to complete the configuration process using your problematic 'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM to "yes", and re-run configure. END AC_MSG_ERROR([Your 'rm' program is bad, sorry.]) fi fi dnl The trailing newline in this macro's definition is deliberate, for dnl backward compatibility and to allow trailing 'dnl'-style comments dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841. ]) dnl Hook into '_AC_COMPILER_EXEEXT' early to learn its expansion. Do not dnl add the conditional right here, as _AC_COMPILER_EXEEXT may be further dnl mangled by Autoconf and run in a shell conditional statement. m4_define([_AC_COMPILER_EXEEXT], m4_defn([_AC_COMPILER_EXEEXT])[m4_provide([_AM_COMPILER_EXEEXT])]) # When config.status generates a header, we must update the stamp-h file. # This file resides in the same directory as the config header # that is generated. The stamp files are numbered to have different names. # Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the # loop where config.status creates the headers, so we can generate # our stamp files there. AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK], [# Compute $1's index in $config_headers. _am_arg=$1 _am_stamp_count=1 for _am_header in $config_headers :; do case $_am_header in $_am_arg | $_am_arg:* ) break ;; * ) _am_stamp_count=`expr $_am_stamp_count + 1` ;; esac done echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count]) # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PROG_INSTALL_SH # ------------------ # Define $install_sh. AC_DEFUN([AM_PROG_INSTALL_SH], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl if test x"${install_sh+set}" != xset; then case $am_aux_dir in *\ * | *\ *) install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;; *) install_sh="\${SHELL} $am_aux_dir/install-sh" esac fi AC_SUBST([install_sh])]) # Copyright (C) 2003-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # Check whether the underlying file-system supports filenames # with a leading dot. For instance MS-DOS doesn't. AC_DEFUN([AM_SET_LEADING_DOT], [rm -rf .tst 2>/dev/null mkdir .tst 2>/dev/null if test -d .tst; then am__leading_dot=. else am__leading_dot=_ fi rmdir .tst 2>/dev/null AC_SUBST([am__leading_dot])]) # Check to see how 'make' treats includes. -*- Autoconf -*- # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_MAKE_INCLUDE() # ----------------- # Check whether make has an 'include' directive that can support all # the idioms we need for our automatic dependency tracking code. AC_DEFUN([AM_MAKE_INCLUDE], [AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive]) cat > confinc.mk << 'END' am__doit: @echo this is the am__doit target >confinc.out .PHONY: am__doit END am__include="#" am__quote= # BSD make does it like this. echo '.include "confinc.mk" # ignored' > confmf.BSD # Other make implementations (GNU, Solaris 10, AIX) do it like this. echo 'include confinc.mk # ignored' > confmf.GNU _am_result=no for s in GNU BSD; do AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out]) AS_CASE([$?:`cat confinc.out 2>/dev/null`], ['0:this is the am__doit target'], [AS_CASE([$s], [BSD], [am__include='.include' am__quote='"'], [am__include='include' am__quote=''])]) if test "$am__include" != "#"; then _am_result="yes ($s style)" break fi done rm -f confinc.* confmf.* AC_MSG_RESULT([${_am_result}]) AC_SUBST([am__include])]) AC_SUBST([am__quote])]) # Fake the existence of programs that GNU maintainers use. -*- Autoconf -*- # Copyright (C) 1997-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_MISSING_PROG(NAME, PROGRAM) # ------------------------------ AC_DEFUN([AM_MISSING_PROG], [AC_REQUIRE([AM_MISSING_HAS_RUN]) $1=${$1-"${am_missing_run}$2"} AC_SUBST($1)]) # AM_MISSING_HAS_RUN # ------------------ # Define MISSING if not defined so far and test if it is modern enough. # If it is, set am_missing_run to use it, otherwise, to nothing. AC_DEFUN([AM_MISSING_HAS_RUN], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl AC_REQUIRE_AUX_FILE([missing])dnl if test x"${MISSING+set}" != xset; then case $am_aux_dir in *\ * | *\ *) MISSING="\${SHELL} \"$am_aux_dir/missing\"" ;; *) MISSING="\${SHELL} $am_aux_dir/missing" ;; esac fi # Use eval to expand $SHELL if eval "$MISSING --is-lightweight"; then am_missing_run="$MISSING " else am_missing_run= AC_MSG_WARN(['missing' script is too old or missing]) fi ]) # Helper functions for option handling. -*- Autoconf -*- # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_MANGLE_OPTION(NAME) # ----------------------- AC_DEFUN([_AM_MANGLE_OPTION], [[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])]) # _AM_SET_OPTION(NAME) # -------------------- # Set option NAME. Presently that only means defining a flag for this option. AC_DEFUN([_AM_SET_OPTION], [m4_define(_AM_MANGLE_OPTION([$1]), [1])]) # _AM_SET_OPTIONS(OPTIONS) # ------------------------ # OPTIONS is a space-separated list of Automake options. AC_DEFUN([_AM_SET_OPTIONS], [m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])]) # _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET]) # ------------------------------------------- # Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. AC_DEFUN([_AM_IF_OPTION], [m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])]) # Copyright (C) 1999-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_PROG_CC_C_O # --------------- # Like AC_PROG_CC_C_O, but changed for automake. We rewrite AC_PROG_CC # to automatically call this. AC_DEFUN([_AM_PROG_CC_C_O], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl AC_REQUIRE_AUX_FILE([compile])dnl AC_LANG_PUSH([C])dnl AC_CACHE_CHECK( [whether $CC understands -c and -o together], [am_cv_prog_cc_c_o], [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])]) # Make sure it works both with $CC and with simple cc. # Following AC_PROG_CC_C_O, we do the test twice because some # compilers refuse to overwrite an existing .o file with -o, # though they will create one. am_cv_prog_cc_c_o=yes for am_i in 1 2; do if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \ && test -f conftest2.$ac_objext; then : OK else am_cv_prog_cc_c_o=no break fi done rm -f core conftest* unset am_i]) if test "$am_cv_prog_cc_c_o" != yes; then # Losing compiler, so override with the script. # FIXME: It is wrong to rewrite CC. # But if we don't then we get into trouble of one sort or another. # A longer-term fix would be to have automake use am__CC in this case, # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)" CC="$am_aux_dir/compile $CC" fi AC_LANG_POP([C])]) # For backward compatibility. AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])]) # Copyright (C) 1999-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PATH_PYTHON([MINIMUM-VERSION], [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) # --------------------------------------------------------------------------- # Adds support for distributing Python modules and packages. To # install modules, copy them to $(pythondir), using the python_PYTHON # automake variable. To install a package with the same name as the # automake package, install to $(pkgpythondir), or use the # pkgpython_PYTHON automake variable. # # The variables $(pyexecdir) and $(pkgpyexecdir) are provided as # locations to install python extension modules (shared libraries). # Another macro is required to find the appropriate flags to compile # extension modules. # # If your package is configured with a different prefix to python, # users will have to add the install directory to the PYTHONPATH # environment variable, or create a .pth file (see the python # documentation for details). # # If the MINIMUM-VERSION argument is passed, AM_PATH_PYTHON will # cause an error if the version of python installed on the system # doesn't meet the requirement. MINIMUM-VERSION should consist of # numbers and dots only. AC_DEFUN([AM_PATH_PYTHON], [ dnl Find a Python interpreter. Python versions prior to 2.0 are not dnl supported. (2.0 was released on October 16, 2000). m4_define_default([_AM_PYTHON_INTERPRETER_LIST], [python python2 python3 dnl python3.9 python3.8 python3.7 python3.6 python3.5 python3.4 python3.3 dnl python3.2 python3.1 python3.0 dnl python2.7 python2.6 python2.5 python2.4 python2.3 python2.2 python2.1 dnl python2.0]) AC_ARG_VAR([PYTHON], [the Python interpreter]) m4_if([$1],[],[ dnl No version check is needed. # Find any Python interpreter. if test -z "$PYTHON"; then AC_PATH_PROGS([PYTHON], _AM_PYTHON_INTERPRETER_LIST, :) fi am_display_PYTHON=python ], [ dnl A version check is needed. if test -n "$PYTHON"; then # If the user set $PYTHON, use it and don't search something else. AC_MSG_CHECKING([whether $PYTHON version is >= $1]) AM_PYTHON_CHECK_VERSION([$PYTHON], [$1], [AC_MSG_RESULT([yes])], [AC_MSG_RESULT([no]) AC_MSG_ERROR([Python interpreter is too old])]) am_display_PYTHON=$PYTHON else # Otherwise, try each interpreter until we find one that satisfies # VERSION. AC_CACHE_CHECK([for a Python interpreter with version >= $1], [am_cv_pathless_PYTHON],[ for am_cv_pathless_PYTHON in _AM_PYTHON_INTERPRETER_LIST none; do test "$am_cv_pathless_PYTHON" = none && break AM_PYTHON_CHECK_VERSION([$am_cv_pathless_PYTHON], [$1], [break]) done]) # Set $PYTHON to the absolute path of $am_cv_pathless_PYTHON. if test "$am_cv_pathless_PYTHON" = none; then PYTHON=: else AC_PATH_PROG([PYTHON], [$am_cv_pathless_PYTHON]) fi am_display_PYTHON=$am_cv_pathless_PYTHON fi ]) if test "$PYTHON" = :; then dnl Run any user-specified action, or abort. m4_default([$3], [AC_MSG_ERROR([no suitable Python interpreter found])]) else dnl Query Python for its version number. Getting [:3] seems to be dnl the best way to do this; it's what "site.py" does in the standard dnl library. AC_CACHE_CHECK([for $am_display_PYTHON version], [am_cv_python_version], [am_cv_python_version=`$PYTHON -c "import sys; sys.stdout.write(sys.version[[:3]])"`]) AC_SUBST([PYTHON_VERSION], [$am_cv_python_version]) dnl Use the values of $prefix and $exec_prefix for the corresponding dnl values of PYTHON_PREFIX and PYTHON_EXEC_PREFIX. These are made dnl distinct variables so they can be overridden if need be. However, dnl general consensus is that you shouldn't need this ability. AC_SUBST([PYTHON_PREFIX], ['${prefix}']) AC_SUBST([PYTHON_EXEC_PREFIX], ['${exec_prefix}']) dnl At times (like when building shared libraries) you may want dnl to know which OS platform Python thinks this is. AC_CACHE_CHECK([for $am_display_PYTHON platform], [am_cv_python_platform], [am_cv_python_platform=`$PYTHON -c "import sys; sys.stdout.write(sys.platform)"`]) AC_SUBST([PYTHON_PLATFORM], [$am_cv_python_platform]) # Just factor out some code duplication. am_python_setup_sysconfig="\ import sys # Prefer sysconfig over distutils.sysconfig, for better compatibility # with python 3.x. See automake bug#10227. try: import sysconfig except ImportError: can_use_sysconfig = 0 else: can_use_sysconfig = 1 # Can't use sysconfig in CPython 2.7, since it's broken in virtualenvs: # try: from platform import python_implementation if python_implementation() == 'CPython' and sys.version[[:3]] == '2.7': can_use_sysconfig = 0 except ImportError: pass" dnl Set up 4 directories: dnl pythondir -- where to install python scripts. This is the dnl site-packages directory, not the python standard library dnl directory like in previous automake betas. This behavior dnl is more consistent with lispdir.m4 for example. dnl Query distutils for this directory. AC_CACHE_CHECK([for $am_display_PYTHON script directory], [am_cv_python_pythondir], [if test "x$prefix" = xNONE then am_py_prefix=$ac_default_prefix else am_py_prefix=$prefix fi am_cv_python_pythondir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('purelib', vars={'base':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(0, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` case $am_cv_python_pythondir in $am_py_prefix*) am__strip_prefix=`echo "$am_py_prefix" | sed 's|.|.|g'` am_cv_python_pythondir=`echo "$am_cv_python_pythondir" | sed "s,^$am__strip_prefix,$PYTHON_PREFIX,"` ;; *) case $am_py_prefix in /usr|/System*) ;; *) am_cv_python_pythondir=$PYTHON_PREFIX/lib/python$PYTHON_VERSION/site-packages ;; esac ;; esac ]) AC_SUBST([pythondir], [$am_cv_python_pythondir]) dnl pkgpythondir -- $PACKAGE directory under pythondir. Was dnl PYTHON_SITE_PACKAGE in previous betas, but this naming is dnl more consistent with the rest of automake. AC_SUBST([pkgpythondir], [\${pythondir}/$PACKAGE]) dnl pyexecdir -- directory for installing python extension modules dnl (shared libraries) dnl Query distutils for this directory. AC_CACHE_CHECK([for $am_display_PYTHON extension module directory], [am_cv_python_pyexecdir], [if test "x$exec_prefix" = xNONE then am_py_exec_prefix=$am_py_prefix else am_py_exec_prefix=$exec_prefix fi am_cv_python_pyexecdir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('platlib', vars={'platbase':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(1, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` case $am_cv_python_pyexecdir in $am_py_exec_prefix*) am__strip_prefix=`echo "$am_py_exec_prefix" | sed 's|.|.|g'` am_cv_python_pyexecdir=`echo "$am_cv_python_pyexecdir" | sed "s,^$am__strip_prefix,$PYTHON_EXEC_PREFIX,"` ;; *) case $am_py_exec_prefix in /usr|/System*) ;; *) am_cv_python_pyexecdir=$PYTHON_EXEC_PREFIX/lib/python$PYTHON_VERSION/site-packages ;; esac ;; esac ]) AC_SUBST([pyexecdir], [$am_cv_python_pyexecdir]) dnl pkgpyexecdir -- $(pyexecdir)/$(PACKAGE) AC_SUBST([pkgpyexecdir], [\${pyexecdir}/$PACKAGE]) dnl Run any user-specified action. $2 fi ]) # AM_PYTHON_CHECK_VERSION(PROG, VERSION, [ACTION-IF-TRUE], [ACTION-IF-FALSE]) # --------------------------------------------------------------------------- # Run ACTION-IF-TRUE if the Python interpreter PROG has version >= VERSION. # Run ACTION-IF-FALSE otherwise. # This test uses sys.hexversion instead of the string equivalent (first # word of sys.version), in order to cope with versions such as 2.2c1. # This supports Python 2.0 or higher. (2.0 was released on October 16, 2000). AC_DEFUN([AM_PYTHON_CHECK_VERSION], [prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '$2'.split('.'))) + [[0, 0, 0]] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[[i]] sys.exit(sys.hexversion < minverhex)" AS_IF([AM_RUN_LOG([$1 -c "$prog"])], [$3], [$4])]) # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_RUN_LOG(COMMAND) # ------------------- # Run COMMAND, save the exit status in ac_status, and log it. # (This has been adapted from Autoconf's _AC_RUN_LOG macro.) AC_DEFUN([AM_RUN_LOG], [{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD (exit $ac_status); }]) # Check to make sure that the build environment is sane. -*- Autoconf -*- # Copyright (C) 1996-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_SANITY_CHECK # --------------- AC_DEFUN([AM_SANITY_CHECK], [AC_MSG_CHECKING([whether build environment is sane]) # Reject unsafe characters in $srcdir or the absolute working directory # name. Accept space and tab only in the latter. am_lf=' ' case `pwd` in *[[\\\"\#\$\&\'\`$am_lf]]*) AC_MSG_ERROR([unsafe absolute working directory name]);; esac case $srcdir in *[[\\\"\#\$\&\'\`$am_lf\ \ ]]*) AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);; esac # Do 'set' in a subshell so we don't clobber the current shell's # arguments. Must try -L first in case configure is actually a # symlink; some systems play weird games with the mod time of symlinks # (eg FreeBSD returns the mod time of the symlink's containing # directory). if ( am_has_slept=no for am_try in 1 2; do echo "timestamp, slept: $am_has_slept" > conftest.file set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null` if test "$[*]" = "X"; then # -L didn't work. set X `ls -t "$srcdir/configure" conftest.file` fi if test "$[*]" != "X $srcdir/configure conftest.file" \ && test "$[*]" != "X conftest.file $srcdir/configure"; then # If neither matched, then we have a broken ls. This can happen # if, for instance, CONFIG_SHELL is bash and it inherits a # broken ls alias from the environment. This has actually # happened. Such a system could not be considered "sane". AC_MSG_ERROR([ls -t appears to fail. Make sure there is not a broken alias in your environment]) fi if test "$[2]" = conftest.file || test $am_try -eq 2; then break fi # Just in case. sleep 1 am_has_slept=yes done test "$[2]" = conftest.file ) then # Ok. : else AC_MSG_ERROR([newly created file is older than distributed files! Check your system clock]) fi AC_MSG_RESULT([yes]) # If we didn't sleep, we still need to ensure time stamps of config.status and # generated files are strictly newer. am_sleep_pid= if grep 'slept: no' conftest.file >/dev/null 2>&1; then ( sleep 1 ) & am_sleep_pid=$! fi AC_CONFIG_COMMANDS_PRE( [AC_MSG_CHECKING([that generated files are newer than configure]) if test -n "$am_sleep_pid"; then # Hide warnings about reused PIDs. wait $am_sleep_pid 2>/dev/null fi AC_MSG_RESULT([done])]) rm -f conftest.file ]) # Copyright (C) 2009-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_SILENT_RULES([DEFAULT]) # -------------------------- # Enable less verbose build rules; with the default set to DEFAULT # ("yes" being less verbose, "no" or empty being verbose). AC_DEFUN([AM_SILENT_RULES], [AC_ARG_ENABLE([silent-rules], [dnl AS_HELP_STRING( [--enable-silent-rules], [less verbose build output (undo: "make V=1")]) AS_HELP_STRING( [--disable-silent-rules], [verbose build output (undo: "make V=0")])dnl ]) case $enable_silent_rules in @%:@ ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1]);; esac dnl dnl A few 'make' implementations (e.g., NonStop OS and NextStep) dnl do not support nested variable expansions. dnl See automake bug#9928 and bug#10237. am_make=${MAKE-make} AC_CACHE_CHECK([whether $am_make supports nested variables], [am_cv_make_support_nested_variables], [if AS_ECHO([['TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi]) if test $am_cv_make_support_nested_variables = yes; then dnl Using '$V' instead of '$(V)' breaks IRIX make. AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AC_SUBST([AM_V])dnl AM_SUBST_NOTMAKE([AM_V])dnl AC_SUBST([AM_DEFAULT_V])dnl AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl AC_SUBST([AM_DEFAULT_VERBOSITY])dnl AM_BACKSLASH='\' AC_SUBST([AM_BACKSLASH])dnl _AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl ]) # Copyright (C) 2001-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PROG_INSTALL_STRIP # --------------------- # One issue with vendor 'install' (even GNU) is that you can't # specify the program used to strip binaries. This is especially # annoying in cross-compiling environments, where the build's strip # is unlikely to handle the host's binaries. # Fortunately install-sh will honor a STRIPPROG variable, so we # always use install-sh in "make install-strip", and initialize # STRIPPROG with the value of the STRIP variable (set by the user). AC_DEFUN([AM_PROG_INSTALL_STRIP], [AC_REQUIRE([AM_PROG_INSTALL_SH])dnl # Installed binaries are usually stripped using 'strip' when the user # run "make install-strip". However 'strip' might not be the right # tool to use in cross-compilation environments, therefore Automake # will honor the 'STRIP' environment variable to overrule this program. dnl Don't test for $cross_compiling = yes, because it might be 'maybe'. if test "$cross_compiling" != no; then AC_CHECK_TOOL([STRIP], [strip], :) fi INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s" AC_SUBST([INSTALL_STRIP_PROGRAM])]) # Copyright (C) 2006-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_SUBST_NOTMAKE(VARIABLE) # --------------------------- # Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in. # This macro is traced by Automake. AC_DEFUN([_AM_SUBST_NOTMAKE]) # AM_SUBST_NOTMAKE(VARIABLE) # -------------------------- # Public sister of _AM_SUBST_NOTMAKE. AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)]) # Check how to create a tarball. -*- Autoconf -*- # Copyright (C) 2004-2018 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_PROG_TAR(FORMAT) # -------------------- # Check how to create a tarball in format FORMAT. # FORMAT should be one of 'v7', 'ustar', or 'pax'. # # Substitute a variable $(am__tar) that is a command # writing to stdout a FORMAT-tarball containing the directory # $tardir. # tardir=directory && $(am__tar) > result.tar # # Substitute a variable $(am__untar) that extract such # a tarball read from stdin. # $(am__untar) < result.tar # AC_DEFUN([_AM_PROG_TAR], [# Always define AMTAR for backward compatibility. Yes, it's still used # in the wild :-( We should find a proper way to deprecate it ... AC_SUBST([AMTAR], ['$${TAR-tar}']) # We'll loop over all known methods to create a tar archive until one works. _am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none' m4_if([$1], [v7], [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'], [m4_case([$1], [ustar], [# The POSIX 1988 'ustar' format is defined with fixed-size fields. # There is notably a 21 bits limit for the UID and the GID. In fact, # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343 # and bug#13588). am_max_uid=2097151 # 2^21 - 1 am_max_gid=$am_max_uid # The $UID and $GID variables are not portable, so we need to resort # to the POSIX-mandated id(1) utility. Errors in the 'id' calls # below are definitely unexpected, so allow the users to see them # (that is, avoid stderr redirection). am_uid=`id -u || echo unknown` am_gid=`id -g || echo unknown` AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format]) if test $am_uid -le $am_max_uid; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) _am_tools=none fi AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format]) if test $am_gid -le $am_max_gid; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) _am_tools=none fi], [pax], [], [m4_fatal([Unknown tar format])]) AC_MSG_CHECKING([how to create a $1 tar archive]) # Go ahead even if we have the value already cached. We do so because we # need to set the values for the 'am__tar' and 'am__untar' variables. _am_tools=${am_cv_prog_tar_$1-$_am_tools} for _am_tool in $_am_tools; do case $_am_tool in gnutar) for _am_tar in tar gnutar gtar; do AM_RUN_LOG([$_am_tar --version]) && break done am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"' am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"' am__untar="$_am_tar -xf -" ;; plaintar) # Must skip GNU tar: if it does not support --format= it doesn't create # ustar tarball either. (tar --version) >/dev/null 2>&1 && continue am__tar='tar chf - "$$tardir"' am__tar_='tar chf - "$tardir"' am__untar='tar xf -' ;; pax) am__tar='pax -L -x $1 -w "$$tardir"' am__tar_='pax -L -x $1 -w "$tardir"' am__untar='pax -r' ;; cpio) am__tar='find "$$tardir" -print | cpio -o -H $1 -L' am__tar_='find "$tardir" -print | cpio -o -H $1 -L' am__untar='cpio -i -H $1 -d' ;; none) am__tar=false am__tar_=false am__untar=false ;; esac # If the value was cached, stop now. We just wanted to have am__tar # and am__untar set. test -n "${am_cv_prog_tar_$1}" && break # tar/untar a dummy directory, and stop if the command works. rm -rf conftest.dir mkdir conftest.dir echo GrepMe > conftest.dir/file AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar]) rm -rf conftest.dir if test -s conftest.tar; then AM_RUN_LOG([$am__untar /dev/null 2>&1 && break fi done rm -rf conftest.dir AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool]) AC_MSG_RESULT([$am_cv_prog_tar_$1])]) AC_SUBST([am__tar]) AC_SUBST([am__untar]) ]) # _AM_PROG_TAR m4_include([m4/ax_ac_append_to_file.m4]) m4_include([m4/ax_ac_print_to_file.m4]) m4_include([m4/ax_add_am_macro_static.m4]) m4_include([m4/ax_add_fortify_source.m4]) m4_include([m4/ax_am_macros_static.m4]) m4_include([m4/ax_check_class.m4]) m4_include([m4/ax_check_compile_flag.m4]) m4_include([m4/ax_check_enable_debug.m4]) m4_include([m4/ax_check_gnu_make.m4]) m4_include([m4/ax_check_link_flag.m4]) m4_include([m4/ax_code_coverage.m4]) m4_include([m4/ax_file_escapes.m4]) m4_include([m4/ax_gcc_func_attribute.m4]) m4_include([m4/ax_is_release.m4]) m4_include([m4/ax_normalize_path.m4]) m4_include([m4/ax_prog_java.m4]) m4_include([m4/ax_prog_java_works.m4]) m4_include([m4/ax_prog_javac.m4]) m4_include([m4/ax_prog_javac_works.m4]) m4_include([m4/ax_pthread.m4]) m4_include([m4/ax_try_compile_java.m4]) m4_include([m4/ld-version-script.m4]) m4_include([m4/libtool.m4]) m4_include([m4/ltoptions.m4]) m4_include([m4/ltsugar.m4]) m4_include([m4/ltversion.m4]) m4_include([m4/lt~obsolete.m4]) m4_include([m4/pkg.m4]) tpm2-pkcs11-1.7.0/src_vars.mk0000664000175000017500000000232314124412600012571 00000000000000LIB_PKCS11_C = src/pkcs11.c LIB_PKCS11_H = src/pkcs11.h LIB_PKCS11_SRC = $(LIB_PKCS11_C) $(LIB_PKCS11_H) LIB_PKCS11_INTERNAL_LIB_C = src/lib/attrs.c src/lib/backend.c src/lib/backend_esysdb.c src/lib/backend_fapi.c src/lib/db.c src/lib/digest.c src/lib/emitter.c src/lib/encrypt.c src/lib/general.c src/lib/key.c src/lib/mech.c src/lib/mutex.c src/lib/object.c src/lib/parser.c src/lib/random.c src/lib/session.c src/lib/session_ctx.c src/lib/session_table.c src/lib/sign.c src/lib/slot.c src/lib/ssl_util.c src/lib/token.c src/lib/tpm.c src/lib/twist.c src/lib/typed_memory.c src/lib/utils.c LIB_PKCS11_INTERNAL_LIB_H = src/lib/attrs.h src/lib/backend.h src/lib/backend_esysdb.h src/lib/backend_fapi.h src/lib/checks.h src/lib/db.h src/lib/debug.h src/lib/digest.h src/lib/emitter.h src/lib/encrypt.h src/lib/general.h src/lib/key.h src/lib/list.h src/lib/log.h src/lib/mech.h src/lib/mutex.h src/lib/object.h src/lib/parser.h src/lib/random.h src/lib/session.h src/lib/session_ctx.h src/lib/session_table.h src/lib/sign.h src/lib/slot.h src/lib/ssl_util.h src/lib/token.h src/lib/tpm.h src/lib/twist.h src/lib/typed_memory.h src/lib/utils.h LIB_PKCS11_INTERNAL_LIB_SRC = $(LIB_PKCS11_INTERNAL_LIB_C) $(LIB_PKCS11_INTERNAL_LIB_H)